- Release-announce - lists.openstack.org

python-tripleoclient 15.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are happy to announce the release of: python-tripleoclient 15.0.0: TripleO client This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * A dnf installation of tripleo-common, tripleo-ironic-python-agent- builder, openstack-tripleo-image-elements, openstack-tripleo-puppet- elements, and xfsprogs has been included as part of the *openstack overcloud image build* command. This allows us to drop these as always required dependencies for tripleoclient. Upgrade Notes ************* * *docker_bip* has been removed from the undercloud.conf * The "--*-flavor" options and the "--*-count" options were removed from the "overcloud deploy" command. * Remove *undercloud_update_packages* option in undercloud.conf. * *upgrade_cleanup* has been removed from the undercloud.conf as it hasn't had any effect after the initial containerized undercloud back in Rocky or FFU upgrade in Train. Other Notes *********** * Removed experimental designation from tripleo deploy since we've used it for several releases now and we're unlikely to change how it works. Changes in python-tripleoclient 14.0.0..15.0.0 ---------------------------------------------- f7fd2ed9 Correct a noisy DeprecationWarning 7c066dec We don't have to disable validations anymore for pre-deployed OC 7c40575d Update client to create archive and use tripleo-common 9014c68e Add lint dependencies for content provider b90f16d1 Add routes and MTU to ctlplane attrs for standalone 04c1466c Enable pylint 276bacfb Run flake8 using pre-commit 8429eaa4 Drop settings for python2 4b1440bd Remove tripleo_validator from tripleoclient 344fa18a Use same code path for UpdatePrepare be3f43ff [Validator Run] Add return code management 6546970a Overcloud image has missing kernel_id and ramdisk_id properties 48bedd76 Wire up new tripleo upgrades jobs template e11dcaea Set DeployIndentifier early in tripleoclient-parameters.yaml c6f22c1f [UX] Align to left the table for the validations run results 01fb0efd Make workflow monitoring more resilient 136e7440 The lower constraint file has been removed f554729a Add '--network-ports' option to node (un)provision c9a13bed Get deployment status to check if plan and stack exists on the env a6ceb26f Drop experimental for tripleo deploy c8137f8f Dumping task key instead of tasks from validation_output 501fea0d Honor --debug for buildah builder 2c7f7d6e [Container build] raise Exception post logging error a5314b1e Provision composable networks command ff4f4a95 Run validation without authentication in particular context a4fdf46d Map build host repos to distro.repos.d instead of yum.repos.d 8cc029b9 Remove count/flavor options from overcloud deploy 02593d0b Removed ubi-8 based jobs 4e0465fe Add config-download-dir flag to cell export command 006b1256 Extract provisioned networks from stack da2da07e Replace deprecated UPPER_CONSTRAINTS_FILE variable b139da39 Logging refactor 1362b900 Fix preflight validation 4a07e16a Remove detection of package manager for undercloud upgrade 0d84ac92 Add --disable-container-prepare flag aafd9819 Do not require authentication for the validator CLI fddf1510 Use user's home dir for fact cache ff56863b Handle root as a deployment user better b942e8db Ensure build packages installed at runtime 94963cf5 Remove undercloud_update_packages 37996551 Allow playbooks to come from a venv version 0e304cbe Switch deployed-server if nova unavailable 1e6339fa Update master for stable/victoria 61786b4d Remove upgrade_cleanup eba9a5e4 Remove docker_bip option 4229bee9 [Validator Show Run] Display simplified results by default 8afc8de2 Improve the error message about image tags ae332fa9 Fix heat container mounts 2df4b327 Handle container launch 5f06f693 Update heat container location eb6839a7 [Validator Show] Properly throwing an exception for unknown validation cd0e24bb [Validator Run] Don't rely on parameter file extension da8a3e59 [Validator Run] Ensure the plan really exists a139d436 Add new toggle to disable Swift Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 13 + .pylintrc | 79 ++++ lower-constraints.txt | 162 -------- ...ages-for-overcloud-images-e3eacb9e0ec53b5b.yaml | 8 + .../notes/remove-docker_bip-20d0249b45078dc2.yaml | 4 + ...ion-from-overcloud-deploy-c5f0d0a40b013ec4.yaml | 5 + ...ndercloud_update_packages-1fa2b7a1afda3258.yaml | 4 + .../remove-upgrade_cleanup-5b341a8a71394389.yaml | 6 + ...o-deploy-not-experimental-be5bc0df8adecb07.yaml | 5 + releasenotes/source/conf.py | 3 +- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + requirements.txt | 3 +- setup.cfg | 22 +- test-requirements.txt | 2 - tox.ini | 21 +- tripleoclient/config/standalone.py | 22 +- tripleoclient/config/undercloud.py | 20 +- tripleoclient/constants.py | 44 ++- tripleoclient/exceptions.py | 4 - tripleoclient/export.py | 14 +- tripleoclient/heat_launcher.py | 58 +-- tripleoclient/plugin.py | 122 ------ .../v1/overcloud_deploy/test_overcloud_deploy.py | 207 ++-------- .../v1/overcloud_image/test_overcloud_image.py | 6 + .../v1/overcloud_update/test_overcloud_update.py | 36 +- .../test_tripleo_container_image.py | 12 +- .../v2/overcloud_network/test_overcloud_network.py | 121 ++++++ tripleoclient/utils.py | 107 ++--- tripleoclient/v1/container_image.py | 3 +- tripleoclient/v1/overcloud_admin.py | 1 - tripleoclient/v1/overcloud_cell.py | 14 +- tripleoclient/v1/overcloud_deploy.py | 107 +++-- tripleoclient/v1/overcloud_image.py | 36 +- tripleoclient/v1/overcloud_plan.py | 20 +- tripleoclient/v1/overcloud_update.py | 15 +- tripleoclient/v1/tripleo_deploy.py | 60 ++- tripleoclient/v1/tripleo_launch_heat.py | 6 +- tripleoclient/v1/tripleo_validator.py | 436 --------------------- tripleoclient/v1/undercloud.py | 19 +- tripleoclient/v1/undercloud_config.py | 15 +- tripleoclient/v1/undercloud_preflight.py | 3 +- tripleoclient/v2/overcloud_network.py | 137 +++++++ tripleoclient/v2/overcloud_node.py | 15 +- tripleoclient/v2/tripleo_container_image.py | 36 +- tripleoclient/workflows/base.py | 111 ------ tripleoclient/workflows/deployment.py | 7 +- tripleoclient/workflows/package_update.py | 65 --- tripleoclient/workflows/parameters.py | 97 ++--- tripleoclient/workflows/plan_management.py | 151 ++++--- tripleoclient/workflows/roles.py | 3 + zuul.d/layout.yaml | 31 +- 70 files changed, 1053 insertions(+), 2377 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e8360fed..6e7279e5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16,2 +16 @@ osc-lib>=1.8.0 # Apache-2.0 -websocket-client>=0.44.0 # LGPLv2+ -tripleo-common>=12.6.0 # Apache-2.0 +tripleo-common>=12.7.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 74bc779b..0506d342 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,2 +3,0 @@ -hacking>=3.0.1,<3.1.0 # Apache-2.0 -

1 0

tripleo-image-elements 13.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are pumped to announce the release of: tripleo-image-elements 13.0.0: Disk image builder elements for deploying OpenStack. This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.2.0..13.0.0 ------------------------------------------------ d072a79a ensure any ens3 interface is nuked during image build 3ce55b50 Add doc/requirements Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 4 ++-- requirements.txt | 1 - test-requirements.txt | 5 +---- tox.ini | 2 ++ 6 files changed, 9 insertions(+), 9 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 322a9266..e69de29b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +0,0 @@ -pbr>=0.11,<2.0 diff --git a/test-requirements.txt b/test-requirements.txt index f924f319..d6511798 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,2 +1 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 -openstackdocstheme>=2.2.1 # Apache-2.0 +hacking>=2.0.0 @@ -5 +3,0 @@ oslotest -sphinx>=2.0.0,!=2.1.0 # BSD @@ -7 +4,0 @@ testrepository>=0.0.18 -reno>=3.1.0 # Apache-2.0

1 0

tripleo-heat-templates 14.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are amped to announce the release of: tripleo-heat-templates 14.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * Added "MemcachedMaxConnections" setting with a default of 8192 maximum connections in order to allow an operator to override that value in environments where memcached is heavily sollicited. * The "aodh_api_cron" container has been added to run aodh-expirer command periodically, to remove expired alarms from Aodh database. Use AodhExpire* parameters to override cron parameters. * The new "AodhAlarmHistoryTTL" parameter has been added, which defines TTL of alarm histories in aodh. This parameter is set as 86400 by default. * Support deploying multiple Cinder Netapp Storage backends. CinderNetappBackendName is enhanced to support a list of backend names, and a new CinderNetappMultiConfig parameter provides a way to specify parameter values for each backend. * Introducing the new "NovaSchedulerEnabledFilters" based on the new nova parameter "filter_scheduler.enabled_filters". * The parameter "NovaComputeStartupDelay" allows the operator to delay the startup of "nova-compute" after a compute node reboot. When all the overcloud nodes are rebooted at the same time, it can take a few minutes to the Ceph cluster to get in a healthy state. This delay will prevent the instances from booting before the Ceph cluster is healthy. * The NovaApiMaxLimit parameter allows the operator to set Nova API max_limit using a Heat parameter in their templates. * New Heat parameter ClusterFullTag controls how we configure pacemaker container image names for the HA services. Compared to the previous parameter ClusterCommonTag, this new naming convention allows any part of the container image name to change during a minor update, without service disruption. e.g., registryA/namespaceA/imgA:tagA to registryB/namespaceB/imgB:tagB This new paramter ClusterFullTag is enabled by default. * Refresh Swift ring files without restarting containers. This makes it possible to update rings without service restarts, lowering the overhead for updates. * The SwiftHashPrefix parameter allows the operator to set Swift swift_hash_path_prefix using a Heat parameter in their Templates. * OVN now supports VXLAN network type for tenant networks. Known Issues ************ * Cell_v2 discovery has been moved from the nova-compute|nova-ironic containers as this requires nova api database credentials which must not be configured for the nova-compute service. As a result scale-up deployments which explicitly omit the Controller nodes will need to make alternative arrangements to run cell_v2 discovery. Either the nova-manage command can be run manually after scale-up, or an additional helper node using the NovaManage role can be deployed that will be used for this task instead of a Controller node. See Bug: 1786961 (https://launchpad.net/bugs/1786961) and Bug: 1871482 (https://launchpad.net/bugs/1871482) Upgrade Notes ************* * The following parameters have been removed since they have had no effect. * "NovaDbSyncTimeout" * "ExtractedPlacementEnabled" * The *EnableEtcdInternalTLS* parameter's default value changes from false to true. The change is related to the fact that novajoin is deprecated, and the functionality associated with the *EnableEtcdInternalTLS* parameter is not required when TLS is deployed using the tripleo-ansible ansible module. * The AdminEmail parameter has been removed because it has had no effect since TripleO had bootstrap support implemented. * Support for Sahara service has been removed. Deprecation Notes ***************** * The *EnableEtcdInternalTLS* parameter is deprecated. It was added to support a workaround that is necessary when novajoin is used to deploy TLS, but novajoin itself is deprecated. The workaround is not necessary when TLS is deployed using the tripleo-ansible ansible module. * Deprecating "NovaSchedulerDefaultFilters", it's replaced with the new setting, "NovaSchedulerEnabledFilters". * Zaqar services are deprecated for removal. Bug Fixes ********* * When deploying a spine-and-leaf (L3 routed architecture) with TLS enabled for internal endpoints the deployment would fail because some roles are not connected to the network mapped to the service in ServiceNetMap. To fix this issue a role specific parameter "{{role.name}}ServiceNetMap" is introduced (defaults to: "{}"). The role specific ServiceNetMap parameter allow the operator to override one or more service network mappings per-role. For example: ComputeLeaf2ServiceNetMap: NovaLibvirtNetwork: internal_api_leaf2 The role specific "{{role.name}}ServiceNetMap" override is merged with the global "ServiceNetMap" when it's passed as a value to the "{{role.name}}ServiceChain" resources, and the "{{role.name}}" resource groups so that the correct network for this role is mapped to the service. Closes bug: 1904482 (https://bugs.launchpad.net/tripleo/+bug/1904482) * Certificates get merged into the containers using kolla_config mechanism. If a certificate changes, or e.g. UseTLSTransportForNbd gets disabled and enabled at a later point the containers running the qemu process miss the required certificates and live migration fails. This change moves to use bind mount for the certificates and in case of UseTLSTransportForNbd ans creates the required certificates even if UseTLSTransportForNbd is set to False. With this UseTLSTransportForNbd can be enabled/disabled as the required bind mounts/certificates are already present. * https://review.opendev.org/q/I8df21d5d171976cbb8670dc5aef744b5fae65 7b2 introduced THT parameters to set libvirt/cpu_mode. The patch sets the NovaLibvirtCPUMode wrong to 'none' string which results in puppet-nova not to handle the default cases correct and sets libvirt/cpu_mode to none which results in 'qemu64' CPU model, which is highly buggy and undesirable for production usage. This changes the default to the recommended CPU mode 'host-model', for various benefits documented elsewhere. * When using RHSM Service (deployment/rhsm/rhsm-baremetal- ansible.yaml) based registration of the overcloud nodes and enabling the KSM using NovaComputeEnableKsm=True the overcloud deployment will fail because the RHSM registration and the ksm task run as host_prep task. The handling of enable/disable ksm is now handled in deploy step 1. * In case of cellv2 multicell environment nova-metadata is the only httpd managed service on the cell controller role. In case of tls- everywhere it is required that the cell controller host has ther needed metadata to be able to request the HTTP certificates. Otherwise the getcert request fails with "Insufficient 'add' privilege to add the entry 'krbprincipalname=HTTP/cell1-cellcontrol-0....'" * Do not relabel Swift files on every container (re-)start. These will be relabeled already in step 3 preventing additional delays. Other Notes *********** * A new parameter called "RabbitTCPBacklog" that specifies the maximum tcp backlog for RabbitMQ as been added. The value defaults to 4096 to match previous behavior and can be modified for the needs of larger scale deployments by operators. Changes in tripleo-heat-templates 13.0.0..14.0.0 ------------------------------------------------ 48dc38f32 Fix swift bare variable warning dc070b44a Do not loop on ceph_external_multi_config unless it is defined 4a599e372 Remove pcs/pacemaker package installation from upgrade tasks fc61731b8 Add deployed_port template 93b5c3a20 Making sure virt-guest-shutdown.target exists 967339a1f Drop python_cmd set_Fact ae1f4c1fb Add NovaImageTypeExcludeList parameter 831f5d65f Configure OVNCMSOptions=enable-chassis-as-gw within neutron-ovn-sriov.yaml 9949a8efe Turn off the etcd TLS workaround used with novajoin fea7fa2d9 Add doc/requirements 79686663e Configure Ceph clients via tripleo-ceph-client (not ceph-ansible) 38c3cdb81 Wire up new tripleo upgrades jobs template e7a84a2c1 Move the misplaced release note file 14c517916 Rename the template for LoginDefs service 49cebbb56 Remove duplicated tasks to create persisitent directries for haproxy 1c46f0a6c Glance: use the puppet parameter to enable image cache feature ab1599765 Revert "Move CA cert injection to host_prep_tasks" 799a270e3 Remove ineffective parameters of puppet-rabbitmq cb55cc8ce Serialize shutdown of pacemaker nodes 971438dd8 Simplify composition of swift-proxy-server pipelines d0c9b6d0c Remove cinder v2 API keystone service and endpoints f89140402 Fix logic to honor HorizonDebug 969693e66 Fix unreachable handling 6eb72aa76 Adding an optional startup delay to nova-compute bb8cb15d2 Update container-config-scripts/ folder content before update_tasks. 48d0e4d9b Notification drivers need to be a list be6a844a7 Make it possible to override ServiceNetMap per-role 976097752 Adding key_size option on the certificate creation 3e2371f71 Rely on the HOSTNAME var to resolve the mon container name 191d16090 Do not relabel Swift files on every container start 4c2d5927e Set up right DNF module stream for Upgrades and Updates. 144eb67ca Remove Luna HSM clients on scaledown b11835307 Use stat module instead of "test -s" faab7e785 Removing scheduler_default_filters for Nova 6d39c90a2 Use RootStackName parameter instead for consistency 81087b49c Move ipa check to external_deploy_tasks 4aa2bcd6d Ensure images folder is created for ironic-conductor d582c097c Set setgid mode bit for /var/lib/ironic 4ebc9ac8f Disable SwiftDisperion when deploying Ceph RGW c8f5fdfc3 HA: reimplement resource locks with cibadmin ffd86b3f2 Fix ownership of octavia_rsyslog log directory efd197551 The lower constraint file has been removed 5b60ef1ee Don't try and clean non-existing nic config dir 2d60799c4 Define a new CinderVolumeEdge service 3663790bc Remove /etc/ceph dependency and add tripleo_ceph_client role bf7ef6b4d Set toplevel nova::dhcp_domain for all nova services a487e16c5 Remove vfio-pci.conf module load file 0e1c9618b Add SwiftHashPrefix parameter 8b16911cc Revert rolling certificate updates for HA services ca6cf97d9 [PowerFlex] Fix resource name typo in template bbed1ef73 Add setting to override max memcached connections eace71f0e Add setting to override rabbitmq tcp connection backlog 1879441b3 Ensure cloud-init has finished before puppet run 83e6f9a6c Add qemu metadata to compute node when tls for live migration 04b4ec386 Identify HSMs using labels instead of Slot ID 1e7015081 Pre-fix neutron resource tags with 'tripleo_' 06a6fffc1 Add deleton_policy to network port resources fe275dd91 Add 'networks_all' ansible group_var a4ed8120f Run os-net-config on step 3 63b2a989b Ensure cinder LVM volumes work after system restart c290a5e3a Set correct default NovaLibvirtCPUMode 89fcfa5fa Fix barbican settings missing from glance Edge nodes 841ffc0ad Fix typo in bond options group var name (2/2) 70818dc68 fix nova_statedir_ownership e77a59b41 Revert "Create post-deploy.conf on update/upgrade for octavia" 39d0330b2 Remove 'role_networks_lower' group_var 3108c052b Add {{ network.name }}_mtu for all networks to group_vars 39ee7e23d Don't pass empty values for ipaclient_servers to ipaclient role b1204893e Allow to configure vxlan network type for OVN 1fafca733 Refresh ceph-ansible group_vars values c8c985567 Make sure networks_skip_config defaults to [] 079d50547 Network data v2 YAML definition for CI caa9d7de0 Deployed networks template 8e5d5283c Move CA cert injection to host_prep_tasks 89d605103 Make sure apache metadata is set for nova-metadata service d476a31a0 Fix the value of ssl_verify_client 9d82364de Refactor nova db config 629485dde Move cell_v2 discovery off compute hosts ddec6c8b6 Fix convert_nic_config.py script d3826e9ec Create post-deploy.conf on update/upgrade for octavia d910b9486 Add file which enables QoS related L3 agent extensions 28f2a7091 Add hostname and stack_name tags to ports c329204de Move enable ksm on compute node to deploy step 1 603530c71 Add NovaApiMaxLimit configure max_limit for nova fce83f534 Support deploying multiple Cinder Netapp Storage backends 0b4175178 Adding Ceph Dashboard to the Edge roles 735faf047 Enable tripleo_free strategy for upgrade 4e0f61d9e Properly compute hostname when looking for the ceph-mon container 633707d41 Fix typo in bond options group var name (1/2) efdfa252c Add Python3 victoria unit tests 51ebe2f65 node_exporter_container_image is needed in 'all' group 5d9c6edb3 Always set dashboard_protocol when Ceph Dashboard is enabled a9da212d7 Fix memcached logging 97ddb9496 Replace deprecated UPPER_CONSTRAINTS_FILE variable 00a22232f Filter computes with nova_host defined f456eb57d Drop duplicate paramter NeutronPublicInterface eb41d8bf6 Remove mistral parameters from undercloud.yaml e07e571ba Use bind mounts for tls certificates 4933d6f3e cinder/iscsi backend: remove lvm2-lvmetad.service dependency fedc81d82 Update master for stable/victoria dfc3322b6 Fix MetricsQdrUseSSL value 566feed07 Remove the ineffective AdminEmail parameter ef1b03455 Make sure octavia user belongs to octavia project 9bc664090 Fix swift containers idempotency cb982440d Refresh Swift ring files without restarting containers d00943a58 Deprecate zaqar services 50f062da7 HA: ClusterFullTag naming convention by default 62e7beb38 Switch c8-standalone to content provider 3f8decf17 Add CinderBackupOptVolumes parameter 3c246d15d Remove old nic config templates a2324ccac Cleanup unused parameters from nova templates c15653401 Skip Trilio dirs when setting ownership in /var/lib/nova d63d2c63a Fix ceilometer_agent_compute healthcheck 4a7d56947 Remove Sahara support 91cc43e01 Add SendQueueLimit to collectd-amqp1 cb92bb73a Re-enable driver agent for scenario 13 46113c545 Add aodh-expirer cron job Diffstat (except docs and test files) ------------------------------------- README.rst | 2 - ci/environments/multinode-containers.yaml | 1 + ci/environments/neutron_l3_qos.yaml | 2 + ci/environments/scenario000-standalone.yaml | 2 - ci/environments/scenario001-standalone.yaml | 3 + ci/environments/scenario002-standalone.yaml | 2 +- ci/environments/scenario004-standalone.yaml | 2 +- ci/environments/scenario013-standalone.yaml | 3 - ci/network_data.yaml | 50 +++ common/common-container-config-scripts.yaml | 17 + common/container-puppet.sh | 6 +- common/deploy-steps-playbooks-common.yaml | 12 +- common/deploy-steps-tasks-step-0.j2.yaml | 14 + common/deploy-steps-tasks-step-1.yaml | 33 +- common/deploy-steps.j2 | 5 + .../nova_statedir_ownership.py | 21 +- .../pacemaker_mutex_shutdown.sh | 120 +++++++ .../pacemaker_resource_lock.sh | 134 ++++--- deployment/aodh/aodh-api-container-puppet.yaml | 74 ++++ deployment/aodh/aodh-base.yaml | 2 +- deployment/apache/apache-baremetal-puppet.j2.yaml | 16 + .../barbican/barbican-api-container-puppet.yaml | 86 ++--- .../barbican-backend-pkcs11-crypto-puppet.yaml | 14 +- deployment/barbican/barbican-client-puppet.yaml | 3 +- .../ceilometer-agent-compute-container-puppet.yaml | 3 +- .../ceilometer-base-container-puppet.yaml | 2 +- deployment/ceph-ansible/ceph-base.yaml | 60 +++- deployment/ceph-ansible/ceph-grafana.yaml | 20 +- deployment/ceph-ansible/ceph-mgr.yaml | 22 +- deployment/ceph-ansible/ceph-osd.yaml | 4 +- deployment/ceph-ansible/ceph-rgw.yaml | 20 +- deployment/cinder/cinder-api-container-puppet.yaml | 27 +- .../cinder/cinder-backend-netapp-puppet.yaml | 28 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 6 + .../cinder/cinder-common-container-puppet.yaml | 38 +- .../cinder/cinder-volume-container-puppet.yaml | 8 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 6 + deployment/containers-common.yaml | 3 + deployment/database/mysql-base.yaml | 16 + deployment/database/mysql-pacemaker-puppet.yaml | 2 - deployment/database/redis-container-puppet.yaml | 16 + deployment/deprecated/mistral/mistral-base.yaml | 2 +- .../sahara/sahara-api-container-puppet.yaml | 215 ----------- deployment/deprecated/sahara/sahara-base.yaml | 120 ------- .../sahara/sahara-engine-container-puppet.yaml | 137 ------- .../zaqar/zaqar-container-puppet.yaml | 6 +- deployment/etcd/etcd-container-puppet.yaml | 60 +++- .../experimental/designate/designate-base.yaml | 2 +- deployment/glance/glance-api-container-puppet.yaml | 25 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 20 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 13 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 13 +- deployment/haproxy/haproxy-container-puppet.yaml | 21 +- .../haproxy/haproxy-edge-container-puppet.yaml | 1 - .../haproxy-internal-tls-certmonger.j2.yaml | 19 + deployment/haproxy/haproxy-pacemaker-puppet.yaml | 53 ++- .../haproxy/haproxy-public-tls-certmonger.yaml | 19 + deployment/heat/heat-base-puppet.yaml | 2 +- deployment/horizon/horizon-container-puppet.yaml | 28 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 30 +- .../ironic/ironic-conductor-container-puppet.yaml | 3 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 2 +- deployment/iscsid/iscsid-container-puppet.yaml | 16 +- deployment/keystone/keystone-container-puppet.yaml | 7 +- ...etal.yaml => login-defs-baremetal-ansible.yaml} | 0 deployment/manila/manila-backend-cephfs.yaml | 6 + deployment/manila/manila-base.yaml | 2 +- deployment/manila/manila-share-common.yaml | 11 +- .../manila/manila-share-container-puppet.yaml | 7 +- .../manila/manila-share-pacemaker-puppet.yaml | 8 +- .../memcached/memcached-container-puppet.yaml | 25 +- deployment/metrics/collectd-container-puppet.yaml | 13 + deployment/metrics/qdr-container-puppet.yaml | 23 +- .../neutron/neutron-api-container-puppet.yaml | 16 + deployment/neutron/neutron-base.yaml | 2 +- .../neutron/neutron-dhcp-container-puppet.yaml | 16 + .../neutron-ovs-dpdk-agent-container-puppet.yaml | 24 +- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 11 - deployment/neutron/neutron-plugin-ml2.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 47 ++- deployment/nova/nova-apidb-client-puppet.yaml | 78 ++++ deployment/nova/nova-az-config.yaml | 2 +- deployment/nova/nova-base-puppet.yaml | 80 +---- .../nova/nova-compute-common-container-puppet.yaml | 22 +- deployment/nova/nova-compute-container-puppet.yaml | 169 ++++++--- .../nova/nova-conductor-container-puppet.yaml | 60 +++- deployment/nova/nova-db-client-puppet.yaml | 80 +++++ deployment/nova/nova-ironic-container-puppet.yaml | 13 +- deployment/nova/nova-libvirt-container-puppet.yaml | 250 ++++++------- deployment/nova/nova-manager-container-puppet.yaml | 106 ++++++ .../nova/nova-metadata-container-puppet.yaml | 47 ++- .../nova/nova-scheduler-container-puppet.yaml | 64 +++- .../nova/nova-vnc-proxy-container-puppet.yaml | 47 ++- .../octavia/octavia-api-container-puppet.yaml | 1 + deployment/octavia/octavia-base.yaml | 2 +- .../octavia-health-manager-container-puppet.yaml | 5 +- .../octavia/providers/ovn-provider-config.yaml | 16 + .../ovn/ovn-controller-container-puppet.yaml | 16 + deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 18 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 16 + .../pacemaker/pacemaker-baremetal-puppet.yaml | 6 + deployment/rabbitmq/rabbitmq-container-puppet.yaml | 24 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 16 + .../rabbitmq-messaging-rpc-container-puppet.yaml | 16 + deployment/swift/swift-base.yaml | 7 + deployment/swift/swift-proxy-container-puppet.yaml | 39 +- .../swift/swift-ringbuilder-container-puppet.yaml | 10 + .../swift/swift-storage-container-puppet.yaml | 42 ++- .../tripleo-packages-baremetal-puppet.yaml | 45 ++- deployment/undercloud/undercloud-upgrade.yaml | 34 ++ environments/barbican-backend-pkcs11-lunasa.yaml | 24 +- environments/cavium-liquidio.yaml | 2 +- environments/ceph-ansible/ceph-rgw.yaml | 1 + environments/cinder-dellemc-powerflex-config.yaml | 2 +- environments/cinder-netapp-config.yaml | 20 +- environments/dcn-hci.yaml | 2 +- environments/docker-ha.yaml | 2 +- environments/enable-stf.yaml | 1 + .../lifecycle/undercloud-upgrade-prepare.yaml | 1 + environments/lifecycle/update-prepare.yaml | 1 + environments/lifecycle/upgrade-prepare.yaml | 1 + environments/login-defs.yaml | 2 +- environments/low-memory-usage.yaml | 1 - environments/metrics/collectd-write-qdr.yaml | 1 + environments/ovs-hw-offload.yaml | 2 +- environments/podman.yaml | 1 - .../services-baremetal/neutron-ovn-dvr-ha.yaml | 2 +- .../services-baremetal/neutron-ovn-ha.yaml | 2 +- environments/services-baremetal/neutron-sriov.yaml | 2 +- environments/services/neutron-mlnx-agent.yaml | 2 +- environments/services/neutron-ovn-dvr-ha.yaml | 6 +- environments/services/neutron-ovn-ha.yaml | 8 +- environments/services/neutron-ovn-sriov.yaml | 8 +- environments/services/neutron-ovn-standalone.yaml | 4 +- environments/services/neutron-ovs-dpdk.yaml | 2 +- environments/services/neutron-sriov.yaml | 2 +- environments/services/sahara.yaml | 3 - environments/services/zaqar-swift-backend.yaml | 2 +- environments/services/zaqar.yaml | 2 +- environments/ssl/no-tls-endpoints-public-ip.yaml | 3 - environments/ssl/tls-endpoints-public-dns.yaml | 3 - environments/ssl/tls-endpoints-public-ip.yaml | 3 - environments/ssl/tls-everywhere-endpoints-dns.yaml | 3 - environments/standalone/standalone-overcloud.yaml | 2 - environments/standalone/standalone-tripleo.yaml | 2 - environments/storage/cinder-netapp-config.yaml | 8 +- environments/swift-external.yaml | 1 + environments/undercloud-enable-nova.yaml | 2 +- environments/undercloud.yaml | 5 - environments/undercloud/undercloud-minion.yaml | 2 - lower-constraints.txt | 164 --------- net-config-bond.j2.yaml | 108 ------ net-config-bridge.j2.yaml | 105 ------ net-config-linux-bridge.j2.yaml | 113 ------ net-config-noop.j2.yaml | 82 ----- net-config-standalone.j2.yaml | 161 --------- ...config-static-bridge-with-external-dhcp.j2.yaml | 117 ------ net-config-static-bridge.j2.yaml | 116 ------ net-config-static.j2.yaml | 105 ------ net-config-undercloud.j2.yaml | 155 -------- network/config/2-linux-bonds-vlans/README.md | 38 -- .../config/2-linux-bonds-vlans/role.role.j2.yaml | 266 -------------- network/config/bond-with-vlans/README.md | 64 ---- .../bond-with-vlans/controller-no-external.j2.yaml | 175 --------- network/config/bond-with-vlans/role.role.j2.yaml | 239 ------------- network/config/multiple-nics-vlans/README.md | 46 --- .../config/multiple-nics-vlans/compute-dvr.j2.yaml | 192 ---------- .../config/multiple-nics-vlans/role.role.j2.yaml | 212 ----------- network/config/multiple-nics/README.md | 54 --- network/config/multiple-nics/compute-dvr.j2.yaml | 180 ---------- network/config/multiple-nics/role.role.j2.yaml | 201 ----------- .../config/single-nic-linux-bridge-vlans/README.md | 27 -- .../role.role.j2.yaml | 168 --------- network/config/single-nic-vlans/README.md | 63 ---- .../controller-no-external.j2.yaml | 123 ------- network/config/single-nic-vlans/role.role.j2.yaml | 159 --------- network/deployed_networks.yaml | 59 ++++ network/endpoints/endpoint_data.yaml | 9 - network/endpoints/endpoint_map.yaml | 393 --------------------- network/ports/deployed_port.j2 | 74 ++++ network/ports/deployed_port.network.j2.yaml | 1 + network/ports/ovn_mac_addr_port.yaml | 9 + network/ports/port.j2 | 21 ++ network/ports/vip.yaml | 9 + network/service_net_map.j2.yaml | 1 - overcloud-resource-registry-puppet.j2.yaml | 4 +- overcloud.j2.yaml | 42 ++- ...ddmemcachedmaxconnections-b591c0fa39e821f5.yaml | 6 + .../notes/aodh-expirer-6631733d237a872e.yaml | 10 + .../notes/bug-1904482-dbc5162c8245a9b3.yaml | 21 ++ ...v2_discovery_off_computes-2b977c6b9a01cde2.yaml | 13 + ...-multiple-netapp-backends-71ed7fef3008e654.yaml | 7 + .../cleanup-nova-params-cc7c501dcb9879d0.yaml | 7 + ...ecate-etcd-tls-workaround-de5dd1fc19dae5b2.yaml | 14 + ...scheduler_default_filters-122a7448d808dd82.yaml | 9 + .../notes/deprecate-zaqar-622f409474813783.yaml | 4 + ...use_bind_mounts_for_certs-64cb88f78538a64b.yaml | 13 + ...ova-compute-startup-delay-fdb1f229840bd0e6.yaml | 8 + ...ova_api_max_limit-support-43fe9792eca63599.yaml | 5 + ..._compute_default_cpu_mode-cda2bb3e56463b3a.yaml | 11 + .../notes/nova_compute_ksm-444f1cc51ceafb66.yaml | 8 + ...tadata_http_cert_metadata-274e7e8a66727983.yaml | 9 + ...r-enable-cluster-full-tag-f868a6f0b1f16018.yaml | 10 + ...onfigure_rabbitmq_backlog-68da3a07ef506f57.yaml | 7 + .../notes/remove-AdminEmail-70cf5b218f916734.yaml | 5 + .../notes/remove-sahara-ffec9acf94d72905.yaml | 4 + .../swift-prevent-relabeling-b9721aa5a1abda6e.yaml | 5 + .../swift-refresh-rings-cc327f998490b0df.yaml | 6 + .../swift_hash_path_prefix-5ecc32ed5d78158b.yaml | 6 + .../vxlan-support-for-ovn-1320be8046aca9c6.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + roles/ComputeHCI.yaml | 1 + roles/ComputeHCIOvsDpdk.yaml | 1 + roles/ComputeHCISriov.yaml | 1 + roles/Controller.yaml | 3 +- roles/ControllerAllNovaStandalone.yaml | 3 +- roles/ControllerNoCeph.yaml | 2 - roles/ControllerNovaStandalone.yaml | 3 +- roles/ControllerOpenstack.yaml | 3 +- roles/ControllerSriov.yaml | 3 +- roles/ControllerStorageDashboard.yaml | 3 +- roles/ControllerStorageNfs.yaml | 3 +- roles/DistributedCompute.yaml | 2 + roles/DistributedComputeHCI.yaml | 3 +- roles/DistributedComputeHCIDashboard.yaml | 80 +++++ roles/NovaManager.yaml | 37 ++ roles/Standalone.yaml | 2 - roles_data.yaml | 3 +- sample-env-generator/dcn.yaml | 2 +- sample-env-generator/ssl.yaml | 12 - sample-env-generator/standalone.yaml | 6 - sample-env-generator/undercloud-minion.yaml | 2 - scripts/delay-nova-compute | 45 +++ test-requirements.txt | 3 - tools/convert_nic_config.py | 3 +- tools/process-templates.py | 10 - tools/yaml-validate.py | 18 +- tox.ini | 10 +- zuul.d/layout.yaml | 104 +----- 242 files changed, 2788 insertions(+), 5273 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index e11f7e2c1..36bb9c41f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +4,0 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0 -openstackdocstheme>=1.18.1 # Apache-2.0 @@ -9,2 +7,0 @@ six>=1.10.0 # MIT -sphinx>=1.8.0,!=2.1.0 # BSD -reno>=2.5.0 # Apache-2.0

1 0

os-refresh-config 13.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We eagerly announce the release of: os-refresh-config 13.0.0: Refresh system configuration This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/os-refresh-config Download the package from: https://tarballs.openstack.org/os-refresh-config/ Please report issues through: https://bugs.launchpad.net/os-refresh-config/+bugs For more details, please see below. Changes in os-refresh-config 10.4.0..13.0.0 ------------------------------------------- 754bb75 Replace deprecated UPPER_CONSTRAINTS_FILE variable 8a74797 Bump pyflakes 2d6a974 Cleanup py27 support b324bce Use unittest.mock instead of third party mock cc543ed Stop testing python2.7 84d8464 Switch to Ussuri jobs Diffstat (except docs and test files) ------------------------------------- releasenotes/notes/drop-py2-76af844b0b952a91.yaml | 6 ++++++ setup.cfg | 18 ++++++++---------- setup.py | 9 --------- test-requirements.txt | 5 ++--- tox.ini | 14 ++++++++------ zuul.d/layout.yaml | 3 +-- 7 files changed, 27 insertions(+), 31 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a498fff..28342a5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +7,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0.0 # BSD @@ -10,2 +9 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2 # BSD @@ -14,0 +13 @@ testtools>=2.2.0 # MIT +pyflakes>=2.2.0

1 0

os-collect-config 13.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are thrilled to announce the release of: os-collect-config 13.0.0: Collect and cache metadata, run hooks on changes. This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. Changes in os-collect-config 11.0.1..13.0.0 ------------------------------------------- cc519a7 Replace deprecated UPPER_CONSTRAINTS_FILE variable 271a543 Bump pyflakes Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 1 + tox.ini | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 1cb1476..28342a5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12,0 +13 @@ testtools>=2.2.0 # MIT +pyflakes>=2.2.0

1 0

tripleo-puppet-elements 14.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We high-spiritedly announce the release of: tripleo-puppet-elements 14.0.0: Puppet building rules for OpenStack images. This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 13.0.0..14.0.0 ------------------------------------------------- ad31a40 Add doc/requirements ed38c43 Include cephadm in the overcloud image fe05e91 Add Python3 wallaby unit tests f6eff30 Update master for stable/victoria 9b38313 Remove puppet-panko Diffstat (except docs and test files) ------------------------------------- elements/overcloud-controller/package-installs.yaml | 1 + elements/overcloud-controller/pkg-map | 3 ++- .../puppet-modules/environment.d/02-puppet-modules-install-types.sh | 1 - elements/puppet-modules/source-repository-puppet-modules | 1 - releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 ++++++ test-requirements.txt | 5 ----- tox.ini | 2 ++ zuul.d/layout.yaml | 2 +- 10 files changed, 18 insertions(+), 9 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index fd1dd17..abd86cf 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8,2 +7,0 @@ oslotest -sphinx>=2.0.0,!=2.1.0 # BSD -openstackdocstheme>=2.2.1 # Apache-2.0 @@ -11,3 +8,0 @@ testrepository>=0.0.18 - -# This is required for the releasenotes build jobs -reno>=3.1.0 # Apache-2.0

1 0

neutron 16.3.0 (ussuri)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are ecstatic to announce the release of: neutron 16.3.0: OpenStack Networking This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 16.3.0 ^^^^^^ Known Issues ************ * Even with the "igmp_snooping_enable" configuration option stating that traffic would not be flooded to unregistered VMs when this option was enabled, the ML2/OVN driver didn't follow that behavior. This has now been fixed and ML2/OVN will no longer flood traffic to unregistered VMs when this configuration option is set to True. Bug Fixes ********* * Fixed MAC learning issue when ovs offload enabled. OVS firewall reduce the usage of normal actions to reduce cpu utilization. This causing flood rule because there is no MAC learning on ingress traffic. While this ok for none offload case, when using ovs offload flood rule is not offloaded. This fix the MAC learning in the offload, so we avoid flood rule. #1897637 (https://bugs.launchpad.net/neutron/+bug/1897637) Changes in neutron 16.2.0..16.3.0 --------------------------------- 16befa0385 Use consistent filter API syntax 72189fff4a [FT] Add the datapath binding wait event to the watched list 3fd93470c0 Ensure "keepalived" is correcly disabled 37a65b1d27 Disable dns-integration API extension if it's not enabled in ML2 dfeac37371 Randomize port name in "BaseOVSTestCase" 97d404c8c5 Dropping lower constraints testing (stable Ussuri) 1780962bed Limit usage of resources in the fullstack tests job 1096001fa3 Improve the CIDRs overlap check method for router add interface 31c6b28c6d Don't fail if FIP is not in port forwarding cache during cleaning 9f72ba5707 Upgrade RPC version of SecurityGroup*Rpc 2a481aa0ab [GRE] Add possibility to create GRE tunnels over IPv6 d5ea5d305f Fix calling of add_tunnel_port method from sanity checks module e252634c78 Fix imports order in neutron.services.ovn_l3_plugin module b82e2f735e Neutron ovs agent: set mtu of smartnic port c720f26b6a Fix OVS conjunctive IP flows cleanup 9b82a20891 ovn: Always use UTC for Hash ring timestamps a34783be3b [OVN] Fix inconsistent IGMP configuration 2a88356230 Flush ebtables arp protect chains before deleting them 0f41ad641a Fix removal of dvr-src mac flows when non-gateway port on router is deleted 0d00c4e17e [ussuri] Fix tests with new pip resolver 598dcec812 fix dhcp bulk reload exceptions 65d3f79ce6 Ensure ovsdb_probe_interval set before connect() 941aae1b56 Add locks for methods which sets nat rules in router 144d921947 Fix migration from the HA to non-HA routers 5ac50b220e Rehome api tests for propagate_uplink_status 3ba5da849e Fix ovs agent, avoiding import error b9c2dd48fa Fix formatting error in agent/linux/external_process.py 7d8853c6af Switch tripleo standalone job to content provider 9fd5102408 [OVN] Fix get/update/delete of non-OVN agents ef14d258ee Local mac direct flow for non-openflow firewall d865165cc8 ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled cd0526dce8 "scope" conversion only just before pyroute2 method call b0892ec3f7 [Functional] Add logging to the check test file function 010d8f74a9 "round" may bump 1 second to 2 if sleep takes more than 1.49 sec 389bae74ae Import "oslo_config.cfg" before "eventlet" 29b8d567fc windows: fix terminating processes 2bedb02a80 Support gateway which is not in subnet CIDR in ha_router 3447613efa Default dnsmasq --conf-file to /dev/null c874c44cdc Make NeutronOvsdbIdl singleton 58e2def05f [OVN] update_port should not remove values from external_ids Diffstat (except docs and test files) ------------------------------------- TESTING.rst | 6 +- lower-constraints.txt | 155 --------------- neutron/agent/common/ovs_lib.py | 16 ++ neutron/agent/dhcp/agent.py | 11 +- neutron/agent/l3/agent.py | 17 ++ neutron/agent/l3/extensions/port_forwarding.py | 12 +- neutron/agent/l3/ha_router.py | 9 + neutron/agent/l3/router_info.py | 3 + neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/external_process.py | 2 +- neutron/agent/linux/ip_lib.py | 2 +- neutron/agent/linux/keepalived.py | 12 +- .../agent/linux/openvswitch_firewall/firewall.py | 19 +- neutron/agent/ovn/metadata/ovsdb.py | 6 +- neutron/agent/ovsdb/impl_idl.py | 4 +- neutron/agent/windows/utils.py | 15 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 38 +++- neutron/cmd/sanity/checks.py | 22 ++- neutron/common/ovn/hash_ring_manager.py | 6 +- neutron/common/utils.py | 12 ++ neutron/db/l3_db.py | 15 +- neutron/db/models/ovn.py | 5 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 14 +- .../drivers/openvswitch/agent/common/constants.py | 4 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 80 ++++++-- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 186 ++++++++++++------ .../ml2/drivers/ovn/mech_driver/mech_driver.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 6 - .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 7 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 11 +- neutron/services/ovn_l3/plugin.py | 29 ++- .../functional/agent/linux/bin/ipt_binname.py | 5 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 2 +- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 65 +++++++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 39 +++- .../drivers/ovn/mech_driver/test_mech_driver.py | 21 ++ .../linux/openvswitch_firewall/test_firewall.py | 10 + .../unit/common/ovn/test_hash_ring_manager.py | 2 + .../drivers/linuxbridge/agent/test_arp_protect.py | 16 ++ .../agent/openflow/native/test_br_int.py | 2 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 214 +++++++++++++++++++-- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 28 +++ .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 66 ------- .../ovn/mech_driver/ovsdb/test_maintenance.py | 6 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 2 +- ...ning-in-case--ovs-offload-26193bf1638fd673.yaml | 10 + ...n-igmp-flood-unregistered-82aeb640f5dded84.yaml | 8 + tox.ini | 9 +- zuul.d/base.yaml | 1 + zuul.d/project.yaml | 18 +- 72 files changed, 1289 insertions(+), 449 deletions(-)

1 0

neutron 15.3.1 (train)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We eagerly announce the release of: neutron 15.3.1: OpenStack Networking This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 15.3.1 ^^^^^^ New Features ************ * "DVR" routers now support "flat" networks. Bug Fixes ********* * Fixed bug 1876092 (https://bugs.launchpad.net/neutron/+bug/1876092) which caused DUP ICMP replies on the "flat" networks used with "DVR" routers. * Fixed MAC learning issue when ovs offload enabled. OVS firewall reduce the usage of normal actions to reduce cpu utilization. This causing flood rule because there is no MAC learning on ingress traffic. While this ok for none offload case, when using ovs offload flood rule is not offloaded. This fix the MAC learning in the offload, so we avoid flood rule. #1897637 (https://bugs.launchpad.net/neutron/+bug/1897637) Changes in neutron 15.3.0..15.3.1 --------------------------------- cce4120e5d Revert "[Security] fix allowed-address-pair 0.0.0.0/0 issue" bf8fc2db0c Fix removal of dvr-src mac flows when non-gateway port on router is deleted f65bea4943 Ensure "keepalived" is correcly disabled 3b6cf23aa3 Neutron ovs agent: set mtu of smartnic port 9c1f940d82 Don't fail if FIP is not in port forwarding cache during cleaning c121b1caa9 Add WaitForPortCreateEvent in BaseOVSTestCase 4f06660447 Randomize port name in "BaseOVSTestCase" ef37b3a39a Dropping lower constraints testing (stable Train) 80abfca487 [GRE] Add possibility to create GRE tunnels over IPv6 cf4d045ac5 Improve the CIDRs overlap check method for router add interface 03f0a832a8 Fix OVS conjunctive IP flows cleanup c9416b1013 [train] Fix tests with new pip resolver a5d8623a2a Flush ebtables arp protect chains before deleting them 0f77298775 Fix calling of add_tunnel_port method from sanity checks module 4de2221853 Fix migration from the HA to non-HA routers 0e6a429158 Rehome api tests for propagate_uplink_status dea24403a7 Fix ovs agent, avoiding import error 9c08212576 Fix formatting error in agent/linux/external_process.py fd22aad5c2 Switch tripleo standalone job to content provider c06895e8e7 Local mac direct flow for non-openflow firewall cbb949379c ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled 4ef6566b6d "scope" conversion only just before pyroute2 method call ae74b483c3 Make NeutronOvsdbIdl singleton 86463bd822 [Functional] Add logging to the check test file function 35eddd53f9 "round" may bump 1 second to 2 if sleep takes more than 1.49 sec a9af91846a Import "oslo_config.cfg" before "eventlet" bcc21b306d windows: fix terminating processes bfa14f7f29 Support gateway which is not in subnet CIDR in ha_router 8654eb2d18 Default dnsmasq --conf-file to /dev/null 84d38f342b Ensure fip ip rules deleted when fip removed 468bc1989a Make DVR router support FLAT network for ovs-agent Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 18 +- TESTING.rst | 6 +- lower-constraints.txt | 154 ------------ neutron/agent/common/ovs_lib.py | 16 ++ neutron/agent/l3/agent.py | 17 ++ neutron/agent/l3/dvr_fip_ns.py | 3 + neutron/agent/l3/dvr_local_router.py | 27 ++- neutron/agent/l3/extensions/port_forwarding.py | 6 +- neutron/agent/l3/ha_router.py | 9 + neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/external_process.py | 2 +- neutron/agent/linux/ip_lib.py | 2 +- neutron/agent/linux/ipset_manager.py | 2 +- neutron/agent/linux/iptables_firewall.py | 2 +- neutron/agent/linux/keepalived.py | 12 +- .../agent/linux/openvswitch_firewall/firewall.py | 71 ++++-- neutron/agent/linux/openvswitch_firewall/rules.py | 6 - neutron/agent/ovsdb/impl_idl.py | 4 +- neutron/agent/windows/utils.py | 15 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 6 +- neutron/cmd/sanity/checks.py | 22 +- neutron/common/utils.py | 12 + neutron/db/l3_db.py | 15 +- neutron/db/securitygroups_rpc_base.py | 23 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 14 +- .../drivers/linuxbridge/agent/common/constants.py | 3 - .../drivers/openvswitch/agent/common/constants.py | 25 +- .../openvswitch/agent/openflow/native/br_int.py | 37 +-- .../openvswitch/agent/openflow/native/br_phys.py | 8 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 121 ++++++---- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 206 ++++++++++------ .../functional/agent/linux/bin/ipt_binname.py | 5 +- .../linux/openvswitch_firewall/test_firewall.py | 97 +++++--- .../agent/linux/openvswitch_firewall/test_rules.py | 3 +- .../unit/agent/linux/test_iptables_firewall.py | 22 +- .../api/rpc/handlers/test_securitygroups_rpc.py | 22 +- .../drivers/linuxbridge/agent/test_arp_protect.py | 16 ++ .../agent/openflow/native/test_br_int.py | 115 +++++++-- .../agent/openflow/native/test_br_phys.py | 6 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 260 ++++++++++++++++++--- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 28 +++ ...port-flat-network-for-ovs-fdf8c3eb461426ec.yaml | 9 + ...ning-in-case--ovs-offload-26193bf1638fd673.yaml | 10 + requirements.txt | 6 +- test-requirements.txt | 2 +- tox.ini | 8 - 68 files changed, 1430 insertions(+), 566 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4ba3f71160..d86abeb51a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ Routes>=2.3.1 # MIT -debtcollector>=1.2.0 # Apache-2.0 +debtcollector>=1.19.0 # Apache-2.0 @@ -24 +24 @@ WebOb>=1.8.2 # MIT -keystoneauth1>=3.4.0 # Apache-2.0 +keystoneauth1>=3.14.0 # Apache-2.0 @@ -49 +49 @@ ovs>=2.8.0 # Apache-2.0 -ovsdbapp>=0.9.1 # Apache-2.0 +ovsdbapp>=0.12.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 5f4a05d6b1..a1ec3b6e20 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking>=1.1.0,<1.2.0 # Apache-2.0 -bandit!=1.6.0,>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0,<=1.6.2 # Apache-2.0

1 0

os-net-config 14.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We are gleeful to announce the release of: os-net-config 14.0.0: OpenStack network configuration This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 13.0.0..14.0.0 --------------------------------------- ba93c36 Check to ensure active DPDK NICs only mapped once da7614b basic support for Linux tap devices 4f2ebfd Exclude DPDK mapped VF device even if not present 1a1b1b7 Wire up new tripleo upgrades jobs template 3144a8f Support binding VFs after moving to switchdev 87702f3 Fixing the dependency for sriov_config service f19c75c Replace deprecated UPPER_CONSTRAINTS_FILE variable bfb4e17 Add Python3 wallaby unit tests 87daba4 Update master for stable/victoria Diffstat (except docs and test files) ------------------------------------- etc/os-net-config/samples/linux_tap.json | 8 ++ etc/os-net-config/samples/linux_tap.yaml | 6 ++ os_net_config/__init__.py | 11 +++ os_net_config/impl_ifcfg.py | 12 +++ os_net_config/objects.py | 36 +++++++ os_net_config/schema.yaml | 38 +++++++ os_net_config/sriov_bind_config.py | 137 ++++++++++++++++++++++++++ os_net_config/sriov_config.py | 14 ++- os_net_config/utils.py | 18 +++- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 ++ setup.cfg | 1 + tox.ini | 2 +- zuul.d/layout.yaml | 3 +- 18 files changed, 394 insertions(+), 7 deletions(-)

1 0

tripleo-common 14.0.0 (wallaby)
by no-reply＠openstack.org 28 Jan '21

28 Jan '21

We exuberantly announce the release of: tripleo-common 14.0.0: A common library for TripleO workflows. This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 14.0.0 ^^^^^^ Bug Fixes * The qemu user on the host gets created using uid/gid 107. Certificates on the host, but also the vhost-user sockets created by ovs use this uid/gid. With the move to TCIB images the default kolla ids were reverted and the previous overwrite dropped. This make e.g. the qemu processes to fail to use the libvirt-vnc bind mounted certificates. This change brings back the previous overwrite of the qemu user uid/gid. Changes in tripleo-common 13.0.0..14.0.0 ---------------------------------------- 2185d9a8 Conditionally use python instead of cURL e0477494 Check existence of expires_in for auth 131ff2b4 Re-factor inventory.py use setdefault pervasively acf9eb95 Fix W1201 - logging-not-lazy 212fe2eb Add missing parentheses 77ba2532 Drop stack_update function 64d4af47 Move daxio package to be arch specific 96d3c1fa Create a container for Unbound DNS resolver 57a8d9b7 Drop parameter caching 4db1e726 pylint: fixed conditions 1b45bb88 TCIB: Add cinder-volume extend_start.sh script d1049724 pylint: fixed logging 8e57c59e Add doc/requirements ad83b39e Wire up new tripleo upgrades jobs template e05e6bdf TCIB: Fix debug mode for oslo process execute b3167873 Revert "Removed ubi-8 based jobs" 750b5625 Revert "Fix a couple of Swift healthchecks" 4cd3bd8f Fix a couple of Swift healthchecks 13ac87ba Enable pylint c296d83e Fix ImportWarning during importing a module 20c7c911 Change retry logic on buildah build e7817290 Switch gnocchi-statsd HC to healthcheck_port 3c0966f6 Raise error when old network config templates are used 5efea51f Add daxio package for nvdimm scenario 05f42ec3 The lower constraint file has been removed 43fa36d3 Cleanup and add test coverage for inventory without overcloud 956c0a2e Fix localization for horizon container b4275c7b Fix handling of default_tag 817bff10 Add extra debug/profiling in buildah debug mode 38392c00 Switch defaults to quay.io 257cee80 TCIB: Pick not best when building on centos/ubi 8f50effd Fix --log-level=debug for buildah 222c67e1 Change qemu user id to match previous releases 5a7c14fc Re-add ndctl to nova-compute image dbfa2399 Add better exception logging for builds 52112d42 Fix wait condition for retry d2a5d985 Add missing ComputeNeutronMetadataAgent service into tripleo_containers.yaml.j2. 4274d92e Removed ubi-8 based jobs 76856521 Drop --layers from buildah 52047ed4 Add heat-engine healthcheck 6d640012 Refactor buildah logging f8523dbe Add retry to build 23d63eaf Replace deprecated UPPER_CONSTRAINTS_FILE variable 372e3b97 Add Python3 wallaby unit tests 9de014c7 Update master for stable/victoria 0fde614e config-download: allow get_overcloud_config() to run without Swift Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 8 +- .pylintrc | 59 ++++ .../container_image_prepare_defaults.yaml | 3 +- container-images/kolla/base/set_configs.py | 16 +- container-images/kolla/base/uid_gid_manage.sh | 2 +- .../kolla/cinder-volume/cinder-volume-sudoers | 1 + .../kolla/cinder-volume/extend_start.sh | 5 + container-images/tcib/base/base.yaml | 1 + .../cinder-base/cinder-volume/cinder-volume.yaml | 5 +- .../base/os/heat-base/heat-engine/heat-engine.yaml | 1 + container-images/tcib/base/os/horizon/horizon.yaml | 7 +- .../os/nova-base/nova-compute/nova-compute.yaml | 4 + container-images/tcib/base/unbound/unbound.yaml | 5 + container-images/tripleo_containers.yaml | 180 ++++++------ container-images/tripleo_containers.yaml.j2 | 9 + healthcheck/common.sh | 11 +- healthcheck/gnocchi-statsd | 2 +- healthcheck/http-healthcheck.py | 44 +++ lower-constraints.txt | 109 ------- .../notes/qemu_user_id-32d8f17099a6f002.yaml | 10 + releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + test-requirements.txt | 5 - tox.ini | 11 +- tripleo_common/actions/ansible.py | 9 +- tripleo_common/actions/baremetal.py | 3 +- tripleo_common/exception.py | 1 + tripleo_common/filters/capabilities_filter.py | 7 +- tripleo_common/image/base.py | 8 +- tripleo_common/image/build.py | 8 +- tripleo_common/image/builder/buildah.py | 77 +++-- tripleo_common/image/image_builder.py | 4 +- tripleo_common/image/image_uploader.py | 69 +++-- tripleo_common/image/kolla_builder.py | 16 +- tripleo_common/inventories.py | 5 +- tripleo_common/inventory.py | 312 +++++++++++---------- .../inventory_data/undercloud_dynamic_merged.json | 33 +++ .../inventory_data/undercloud_static_merged.yaml | 18 ++ tripleo_common/update.py | 7 +- tripleo_common/utils/config.py | 92 +++--- tripleo_common/utils/glance.py | 5 +- tripleo_common/utils/keystone.py | 52 ++-- tripleo_common/utils/locks/base.py | 3 + tripleo_common/utils/locks/processlock.py | 2 + tripleo_common/utils/nodes.py | 20 +- tripleo_common/utils/overcloudrc.py | 3 +- tripleo_common/utils/parameters.py | 12 +- tripleo_common/utils/passwords.py | 8 +- tripleo_common/utils/plan.py | 72 +---- tripleo_common/utils/process.py | 9 +- tripleo_common/utils/stack.py | 63 ----- tripleo_common/utils/stack_parameters.py | 12 - tripleo_common/utils/swift.py | 11 +- tripleo_common/utils/tarball.py | 12 +- tripleo_common/utils/template.py | 71 +++-- workbooks/derive_params.yaml | 2 +- zuul.d/layout.yaml | 11 +- 73 files changed, 1059 insertions(+), 1120 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index cc5fc015..58a87542 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,2 +4,0 @@ -openstackdocstheme>=2.2.1 # Apache-2.0 - @@ -8 +5,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -docutils>=0.11 # OSI-Approved Open Source, Public Domain @@ -10 +6,0 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx>=2.0.0,!=2.1.0 # BSD @@ -16 +11,0 @@ PyYAML>=3.12 # MIT -reno>=3.1.0 # Apache-2.0

1 0