- Release-announce - lists.openstack.org

blazar-dashboard 1.3.1 (stein)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are excited to announce the release of: blazar-dashboard 1.3.1: Horizon plugin for the Blazar Reservation Service for OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/blazar-dashboard Download the package from: https://tarballs.openstack.org/blazar-dashboard/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 1.3.1 ^^^^^ Security Issues * Uses "json.loads` instead of ``eval()" for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under. Changes in blazar-dashboard 1.3.0..1.3.1 ---------------------------------------- ee10b2c Use json.loads instead of eval for JSON parsing 17b53e9 OpenDev Migration Patch f1b8b15 Update UPPER_CONSTRAINTS_FILE for stable/stein f5e6a4e Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- blazar_dashboard/api/client.py | 3 ++- blazar_dashboard/content/hosts/forms.py | 7 ++++--- blazar_dashboard/content/hosts/workflows.py | 7 ++++--- blazar_dashboard/content/leases/forms.py | 7 ++++--- blazar_dashboard/test/test_data/blazar_data.py | 4 ++-- releasenotes/notes/remove-use-of-eval-ef359dec791c97cd.yaml | 6 ++++++ tox.ini | 6 +++--- 8 files changed, 27 insertions(+), 16 deletions(-)

1 0

blazar-dashboard 3.0.1 (ussuri)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are stoked to announce the release of: blazar-dashboard 3.0.1: Horizon plugin for the Blazar Reservation Service for OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/blazar-dashboard Download the package from: https://tarballs.openstack.org/blazar-dashboard/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 3.0.1 ^^^^^ Security Issues * Uses "json.loads` instead of ``eval()" for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under. Changes in blazar-dashboard 3.0.0..3.0.1 ---------------------------------------- 168b4ae Use json.loads instead of eval for JSON parsing 1c2fc55 Update TOX_CONSTRAINTS_FILE for stable/ussuri 70c77cc Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + blazar_dashboard/api/client.py | 3 ++- blazar_dashboard/content/hosts/forms.py | 7 ++++--- blazar_dashboard/content/hosts/workflows.py | 7 ++++--- blazar_dashboard/content/leases/forms.py | 7 ++++--- blazar_dashboard/test/test_data/blazar_data.py | 4 ++-- releasenotes/notes/remove-use-of-eval-ef359dec791c97cd.yaml | 6 ++++++ tox.ini | 8 ++++---- 8 files changed, 27 insertions(+), 16 deletions(-)

1 0

blazar-dashboard 4.0.0.0rc2 (victoria)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

Hello everyone, A new release candidate for blazar-dashboard for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/blazar-dashboard/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/blazar-dashboard/src/branch/stable/victoria Release notes for blazar-dashboard can be found at: https://docs.openstack.org/releasenotes/blazar-dashboard/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/blazar/+bugs and tag it *victoria-rc-potential* to bring it to the blazar-dashboard release crew's attention.

1 0

os-collect-config 11.0.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We high-spiritedly announce the release of: os-collect-config 11.0.1: Collect and cache metadata, run hooks on changes. This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. 11.0.1 ^^^^^^ Upgrade Notes * Python 2.7 support has been dropped. Last release os-collect- config support py2.7 is OpenStack Train. The minimum version of Python now supported by os-collect-config is Python 3.6. Changes in os-collect-config 11.0.0..11.0.1 ------------------------------------------- 24245ce Use unittest.mock instead of mock ab98550 Drop python version constraints for sphinx d1607f9 Add tls proxy support for Zaqar 6dd0e53 Stop testing python2.7 Diffstat (except docs and test files) ------------------------------------- os_collect_config/zaqar.py | 14 +++++++++++++- .../notes/drop-python2.7-support-f133b716812d39f0.yaml | 6 ++++++ setup.cfg | 2 -- test-requirements.txt | 4 +--- tox.ini | 6 ++---- zuul.d/layout.yaml | 3 --- 10 files changed, 38 insertions(+), 17 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a498fff..1cb1476 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +7,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0.0 # BSD @@ -10,2 +9 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2 # BSD

1 0

os-net-config 12.3.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are satisfied to announce the release of: os-net-config 12.3.2: OpenStack network configuration This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 12.3.1..12.3.2 --------------------------------------- 6238283 Add NIC Partitioning support for Mellanox VFs edad325 Avoid openvswitch restarts during re-run Diffstat (except docs and test files) ------------------------------------- os_net_config/cli.py | 8 +++++++- os_net_config/utils.py | 26 +++++++++++++++++++------- 3 files changed, 47 insertions(+), 8 deletions(-)

1 0

puppet-tripleo 12.4.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We eagerly announce the release of: puppet-tripleo 12.4.1: Puppet module for OpenStack TripleO This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. Changes in puppet-tripleo 12.4.0..12.4.1 ---------------------------------------- 49ca4208 Bump metadata for ussuri 12.4.1 release 3ffaf2d7 Replace union to create tcp-check list for redis a365e541 Change branch name for selinux_core puppet module e8dfd034 Fix tls - zaqar wss default port e75842e5 HA: ensure scaling up galera does not cause promotion errors d8fa754a Fix typos, extreamio and xtreamio to xtremio c3e86ea6 Make sure python3-novaclient is installed before creating fence_compute 16bb6f5d Use pcs 0.9 style authkey/remotes when doing an upgrade 37b8666f Add certmonger-etcd-refresh.sh script ef7818ec Fix up cluster_setup_extras usage Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- files/certmonger-etcd-refresh.sh | 25 ++++++++++++ lib/puppet/functions/pacemaker_bundle_replicas.rb | 23 +++++++++++ manifests/certmonger/etcd.pp | 8 +++- manifests/haproxy.pp | 23 ++++++----- manifests/profile/base/cinder/volume.pp | 4 +- manifests/profile/base/pacemaker.pp | 44 +++++++++++++++++----- manifests/profile/base/pacemaker_remote.pp | 8 ++++ .../profile/pacemaker/database/mysql_bundle.pp | 19 +++++++++- metadata.json | 2 +- ...ipleo_profile_base_cinder_xtremio_iscsi_spec.rb | 2 +- 11 files changed, 132 insertions(+), 28 deletions(-)

1 0

tripleo-heat-templates 12.4.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We jubilantly announce the release of: tripleo-heat-templates 12.4.1: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.4.1 ^^^^^^ New Features ************ * Adds a new ContainerNovaLibvirtPidsLimit parameter in order to set the PIDs limit for nova_libvirt container. Defaults to 65536, set to 0 for unlimited. * The following parameters were added to support configuration of gnocchi nfs backend. * GnocchiNfsEnabled * GnocchiNfsShare * GnocchiNfsOptions * Add the NovaImageCacheTTL to the nova compute service. This exposes the remove_unused_original_minimum_age_seconds from nova.conf which controls the time (in seconds) that nova compute should continue caching an image once it is no longer used by and instances on the host. Defaults to 86400 (24hrs) * When SwiftRawDisks is set, try to mount the disks using uuids instead of paths. This makes mounts more stable, eg. if a kernel gets updates and device orders are changed. * A new Heat parameter 'ZaqarWsTimeout' exposes the Puppet variable 'tripleo::haproxy::zaqar_ws_timeout_tunnel'. This allows operators to configure the Mistral API timeout. It currently defaults to four hours. Upgrade Notes ************* * The CIDR for the StorageNFS network in the sample network_data_ganesha.yaml file has been modified to provide more usable IPs for the corresponding Neutron overcloud StorageNFS provider network. Since the CIDR of an existing network cannot be modified, deployments with existing StorageNFS networks should be sure to customize the StorageNFS network definition to use the same CIDR as that in their existing deployment in order to avoid a heat resource failure when updating or upgrading the overcloud. Deprecation Notes ***************** * As the fast forward upgrade workflow to skip multiple releases now relies on the very same upgrade_tasks, there is no need to mantain the fast_forward_upgrade_tasks, as well as any of its references. Bug Fixes ********* * Ansible GroupVars incorrectly keept a single subnet prefix per- network. This caused a problem when multiple subnets using different subnet prefixes where defined. Resulting in the wrong subnet prefix being referenced in the NetworkConfig for roles. AnsibleHostVars stores networks subnet prefixes instead. See bug: 1895899 (https://bugs.launchpad.net/tripleo/+bug/1895899) * Fixed issue in the sample network_data_ganesha.yaml file where the IPv4 allocation range for the StorageNFS network occupies almost the whole of its CIDR. If network_data_ganesha.yaml is used without modification in a customer deployment then there are too few IPs left over in its CIDR for use by the corresponding overcloud Neutron StorageNFS provider network for its overcloud DHCP service. (See bug: #1889682 (https://bugs.launchpad.net/tripleo/+bug/1889682)) * Fix Swift ring synchronization to ensure every node on the overcloud has the same copy to start with. This is especially required when replacing nodes or using manually modifed rings. Changes in tripleo-heat-templates 12.4.0..12.4.1 ------------------------------------------------ b2b553f4f Implement a Minimal role 1f5218100 Default cinder_volume_node_names to [] cd0448f01 Force container fetch 164a28d5d Adapt container health check for built-in podman health checks 9b6b665bd Assume Grafana and Ceph Dashboard to be on the storage or ctlplane nets 95e8fbd49 Set NeutronEnableDVR to False for OVN-HA 94a301c01 Create container-puppet-tasks files per step in check mode 7bfe3701a Gather more extra stats with the collectd virt plugin af26d0ff3 Configure rsyncd without pid file for Swift 1e4ce7537 Allow optional volumes for nova_libvirt container fdb9a3954 enable-ssh-admin: allow to override plan name b09c769a7 Clear cached facts based on the tag as well 3752f15cd Get the CIDR of the neutron port for NetworkConfig 92b7d4950 Use UUID for mounted SwiftRawDisks 011a2d867 Add dashboard_tls_external ceph-ansible parameter 47d18baf3 Revert "Disable Designate service for scenario 03" 0f0e7fa11 Remove race during mysql database creation ca8d98cf3 Complete missing description 76b5ae081 Memcached collectd plugin uses host URI instead of IP address. 0ad235806 pcs commands on host: rabbitmq 0eb998930 pcs commands on host: redis bundle ec70716ad pcs commands on host: ovn dbs 4f56371f9 pcs commands on host: cinder backup/volume 06209fa28 pcs commands on host: manila-share be1fee4af pcs commands on host: mysql 3f8c22b56 pcs commands on host: haproxy bundle 3a803c618 Mount libpod container volume into collectd container aeeacb507 Bind mount /var/lib/container-config-scripts inside the restart bundles 1cde17b81 Make sure IPA has the right ACI c4ce02707 Add parameter and CI config to enable Ceph OTW encryption b42881eae Add the NovaImageCacheTTL to the nova compute service 8d3a89dbf Fix Swift ring file synchronization issue 451c83f1b Fix nCipher (aka thales) ansible role name 9471eb030 DCN: use FQDN in glance endpoint with internal TLS ee90c5d60 Remove Etcd from DCN roles that don't need it 2406ffc4c Use container_file_t for Cinder*NfsMountOptions by default 6efb29dcc Use appropriate allocation pools for StorageNFS 472deb921 Remove remaining Skydive references 4907bf8fb Default to storage_dashboard, when set, for the CephDashboard service daff4688f Set a higher PIDs limit for nova_libvirt container 991395882 Re-enable driver agent for scenario 10 eddbc4b2c Avoid failing on deleted file cc17467c5 minor update: only migrate HA VIP away when needed 3e7c6b9a3 Use tripleo_network_config 05470b62e Create container config scripts with a new module b54a4be78 Create Container configs with a new module 10be0c53b Modify how libvirt related containers use SELinux bc8e2f9b9 [FFWD Ceph] Fix ceph post_upgrade_tasks for osd options 91c17d54e Fix endpoint map tls - zaqar wss port 3ce68de0f Fix up ovn-dbs update tasks 7dcd5eb87 Add new Luna HSM parameter for Barbican 9ee9b945f Fix pcs restart in composable HA 701841df5 Do not hard-code vars_from 2c1db9ed0 Update, avoid task skipping by directly importing step file. aaad2cd70 undercloud_upgrade: tear-down keepalived 838741633 pcmk_remote FFU support for Instance HA 3e2a8d91c Add PermitRootLogin option in sshd_config before leapp. 26e532449 Run external_deploy_tasks per step for each role 00850a30a Reset sriov_numvfs to 0 before leapp upgrade b245565d7 Fix delegation with FreeIPA cleanup 3631ee2ff Add support for Gnocchi NFS Backend 70a099159 Fix permissions for paunch 28ed5c0b8 Align kernel args for system upgrade using leapp 7f8770b6e Stop using a conditional for role tasks 7f3eb2371 Fix HA resource restart when no replicas are running 978c4e05d Revamp how etcd's cert and key are handled in containers e4192e033 Add CephAnsibleRepo warning to make this validation more flexible 94f62d874 Prevent skip package fact to run on all steps. 5f336195f Update octavia playbooks parameters c59f31ea4 Remove redundant file management for /run/redis fdd0547c4 Expose the zaqar_ws_timeout_tunnel variable. c2b828fbb Add openvswitch special treatment to update too. 8c6ada0d1 Do not manage healthcheck for nova-compute anymore ebea6f33e Add dashboard_protocol variable when internal_tls is enabled aeaeff3a3 Remove /var/lib/config-data context task b66f39550 Generated passthrough_whitelist shall use all the user_configs fields 729bb5259 Remove ffwd-upgrade leftovers from THT. 09f524e70 Unset keystone::public_endpoint bad56a5fd Add missing config_files kolla directives be1184b06 Use a single task for fact gathering a1443bb82 Relax facts gathering plays on the overcloud 7e3315110 Prevent ovn dbs related facts to run on each step. 2971c4fbb Attempt to remove octavia tls proxy service only present 4ac41b46d Improve documentations for NovaLibvirtFileBackedMemory Diffstat (except docs and test files) ------------------------------------- ci/environments/scenario001-standalone.yaml | 1 + ci/environments/scenario003-standalone.yaml | 17 +- ci/environments/scenario010-standalone.yaml | 1 - common/deploy-steps-playbooks-common.yaml | 52 ++-- common/deploy-steps-tasks-step-1.yaml | 29 +-- common/deploy-steps-tasks.yaml | 1 + common/deploy-steps.j2 | 242 +++--------------- common/generate-config-tasks.yaml | 2 +- common/host-container-puppet-tasks.yaml | 3 +- common/services/role.role.j2.yaml | 20 -- .../monitoring/collectd_check_health.py | 92 +++++++ .../nova_statedir_ownership.py | 68 +++-- .../pacemaker_restart_bundle.sh | 13 +- deployed-server/scripts/enable-ssh-admin.sh | 3 +- deployment/README.rst | 30 --- deployment/aodh/aodh-api-container-puppet.yaml | 46 ---- .../aodh/aodh-evaluator-container-puppet.yaml | 18 -- .../aodh/aodh-listener-container-puppet.yaml | 18 -- .../aodh/aodh-notifier-container-puppet.yaml | 18 -- .../barbican/barbican-api-container-puppet.yaml | 31 ++- .../ceilometer-agent-central-container-puppet.yaml | 18 -- .../ceilometer-agent-compute-container-puppet.yaml | 18 -- .../ceilometer-agent-ipmi-container-puppet.yaml | 18 -- ...ometer-agent-notification-container-puppet.yaml | 18 -- deployment/ceph-ansible/ceph-base.yaml | 50 +++- deployment/ceph-ansible/ceph-mds.yaml | 3 +- deployment/ceph-ansible/ceph-mgr.yaml | 1 + deployment/ceph-ansible/ceph-mon.yaml | 3 +- deployment/ceph-ansible/ceph-osd.yaml | 52 +++- deployment/ceph-ansible/ceph-rgw.yaml | 3 +- deployment/cinder/cinder-api-container-puppet.yaml | 55 +--- .../cinder/cinder-backend-netapp-puppet.yaml | 2 +- .../cinder/cinder-backup-container-puppet.yaml | 11 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 107 +++----- .../cinder/cinder-common-container-puppet.yaml | 4 +- .../cinder/cinder-scheduler-container-puppet.yaml | 27 +- .../cinder/cinder-volume-container-puppet.yaml | 46 +--- .../cinder/cinder-volume-pacemaker-puppet.yaml | 103 ++------ deployment/containers-common.yaml | 3 +- deployment/database/mysql-container-puppet.yaml | 24 +- deployment/database/mysql-pacemaker-puppet.yaml | 70 ++--- deployment/database/redis-container-puppet.yaml | 3 - deployment/database/redis-pacemaker-puppet.yaml | 120 ++------- .../sahara/sahara-api-container-puppet.yaml | 30 --- .../sahara/sahara-engine-container-puppet.yaml | 18 -- deployment/etcd/etcd-container-puppet.yaml | 55 ++-- deployment/glance/glance-api-container-puppet.yaml | 28 -- .../glance/glance-api-edge-container-puppet.yaml | 22 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 128 +++++----- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 34 ++- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 36 ++- deployment/haproxy/haproxy-container-puppet.yaml | 5 + .../haproxy/haproxy-edge-container-puppet.yaml | 22 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 71 ++---- deployment/heat/heat-api-cfn-container-puppet.yaml | 18 -- .../heat/heat-api-cloudwatch-disabled-puppet.yaml | 24 -- deployment/heat/heat-api-container-puppet.yaml | 30 --- deployment/heat/heat-engine-container-puppet.yaml | 18 -- deployment/ipa/ipaservices-baremetal-ansible.yaml | 2 +- deployment/ironic/ironic-api-container-puppet.yaml | 36 --- .../ironic/ironic-conductor-container-puppet.yaml | 25 -- .../kernel-boot-params-baremetal-ansible.yaml | 20 ++ deployment/keystone/keystone-container-puppet.yaml | 44 ---- deployment/manila/manila-api-container-puppet.yaml | 32 --- .../manila/manila-scheduler-container-puppet.yaml | 20 -- .../manila/manila-share-container-puppet.yaml | 20 -- .../manila/manila-share-pacemaker-puppet.yaml | 101 ++------ .../memcached/memcached-container-puppet.yaml | 21 +- deployment/metrics/collectd-container-puppet.yaml | 58 ++--- .../neutron/derive_pci_passthrough_whitelist.py | 11 +- .../neutron/neutron-api-container-puppet.yaml | 37 --- .../neutron/neutron-dhcp-container-puppet.yaml | 18 -- .../neutron/neutron-l3-container-puppet.yaml | 18 -- .../neutron/neutron-metadata-container-puppet.yaml | 18 -- .../neutron-ovs-agent-container-puppet.yaml | 18 -- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 2 - .../neutron-sriov-agent-container-puppet.yaml | 31 ++- deployment/nova/nova-api-container-puppet.yaml | 149 ----------- deployment/nova/nova-compute-container-puppet.yaml | 50 ++-- .../nova/nova-conductor-container-puppet.yaml | 18 -- deployment/nova/nova-ironic-container-puppet.yaml | 24 -- deployment/nova/nova-libvirt-container-puppet.yaml | 43 ++-- .../nova-migration-target-container-puppet.yaml | 2 +- .../nova/nova-scheduler-container-puppet.yaml | 18 -- .../nova/nova-vnc-proxy-container-puppet.yaml | 20 +- deployment/nova/novajoin-container-puppet.yaml | 10 + .../octavia/octavia-api-container-puppet.yaml | 36 +-- .../octavia/octavia-deployment-config.j2.yaml | 10 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 65 +++-- .../pacemaker/pacemaker-baremetal-puppet.yaml | 4 +- .../pacemaker-remote-baremetal-puppet.yaml | 60 +++++ deployment/podman/podman-baremetal-ansible.yaml | 3 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 79 ++---- .../rabbitmq-messaging-pacemaker-puppet.yaml | 79 ++---- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 79 ++---- deployment/swift/swift-proxy-container-puppet.yaml | 22 -- .../swift/swift-ringbuilder-container-puppet.yaml | 2 +- .../swift/swift-storage-container-puppet.yaml | 56 +--- .../tripleo-packages-baremetal-puppet.yaml | 282 +++------------------ deployment/undercloud/undercloud-upgrade.yaml | 163 ++---------- environments/barbican-backend-pkcs11-lunasa.yaml | 29 ++- environments/ceph-ansible/ceph-ansible.yaml | 7 + environments/cinder-netapp-config.yaml | 2 +- environments/lifecycle/ffwd-upgrade-prepare.yaml | 1 - environments/services/neutron-ovn-ha.yaml | 1 + environments/ssl/no-tls-endpoints-public-ip.yaml | 1 + environments/ssl/tls-endpoints-public-dns.yaml | 3 +- environments/ssl/tls-endpoints-public-ip.yaml | 3 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 3 +- environments/storage-environment.yaml | 2 +- environments/storage/cinder-netapp-config.yaml | 2 +- environments/storage/cinder-nfs.yaml | 2 +- network/service_net_map.j2.yaml | 2 +- network_data_ganesha.yaml | 50 +++- overcloud.j2.yaml | 25 -- puppet/role.role.j2.yaml | 14 + ...ainerNovaLibvirtPidsLimit-cdad2166b6c0195f.yaml | 6 + .../notes/bug-1895899-8d675670a0d05c15.yaml | 12 + ...e-for-StorageNFS-net.yaml-bd77be924e8b7056.yaml | 20 ++ .../gnocchi-nfs-backend-90febc9f87e7df08.yaml | 9 + .../nova_image_cache_ttl-824f241363b9dd4e.yaml | 8 + .../notes/remove_ffwd_tasks-d1ab630d96a66a59.yaml | 6 + .../swift-fix-ring-sync-7bf3ddbb1ea1e342.yaml | 6 + .../swift-mount-by-uuid-7744fe7696db4b85.yaml | 6 + .../zaqar_ws_timeout_tunnel-d5d1e900dce79b34.yaml | 7 + roles/ControllerSriov.yaml | 2 - roles/DistributedCompute.yaml | 1 - roles/DistributedComputeHCI.yaml | 2 +- roles/DistributedComputeHCIScaleOut.yaml | 3 +- roles/DistributedComputeScaleOut.yaml | 3 +- roles/Minimal.yaml | 30 +++ roles/NetworkerSriov.yaml | 1 - roles/README.rst | 1 + sample-env-generator/ssl.yaml | 6 +- sample-env-generator/storage.yaml | 1 + tools/yaml-validate.py | 24 -- 138 files changed, 1383 insertions(+), 2814 deletions(-)

1 0

tripleo-common 12.4.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are tickled pink to announce the release of: tripleo-common 12.4.2: A common library for TripleO workflows. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 12.4.2 ^^^^^^ New Features ************ * Added *modify_only_with_source* to the ContainerImagePrepare set that can be used to limit modify container images to a specific image_source as defined in the services to container images mapping. Bug Fixes ********* * When using specifying ContainerImagePrepare if a tag is explicitly provided in a set, the tag_from_label functionality will not be run as we use the defined tag for the containers. Previously we would still attempt tag lookups even if we wanted a specific tag. Other Notes *********** * *container-images/tripleo_containers.yaml.j2* is now used to determine what containers are used for which services when running the container image prepare process runs. Changes in tripleo-common 12.4.1..12.4.2 ---------------------------------------- 84411ff9 Lower default verbosity for ansible bb7a2548 Consume ceph, prom, grafana containers from quay.io 9da62e66 Remove the base layers 10e5e6cc Update container build to better reign in threads 6b115444 Run tripleo-build-containers-ubi-8 on BuildahBuilder code cc67c4ee Include virt-admin in the nova_libvirt container f438b4d7 Add neutron-mlnx-agent container image 66cdee5a Fix handling of default_tag 93c508e2 Support basic auth for image registry cb219766 Add interface-names to Rhel8 images 427e600b Remove sahara-* from list in tripleo_containers.yaml 50d235ba Switch to tripleo_containers.yaml 968dd034 Restore default log path for image prepare 0f67579c Add modify_only_with_source 0a9da42e Fix config parser warning 1b1f0229 TCIB: move RHEL modules into base image a0361597 Ensure atomic inventory file rename runs on the same mountpoint ee720ed1 tcib: rename kolla_version to tcib_managed 70b1ca4b (backward compatibility) create kolla UIDs/GIDs for TCIB 26bd7c22 Remove check for ./puppet/services when filtering services bc01f1c4 Ensure image files are readable to apache 50f86d05 Don't build image upload tasks when dry_run=True 8c46cbb0 Correct the inventory generation 62f40845 Ensure tripleo ansible inventory file update is atomic be81e6ee Add exponential backoff to ratelimited requests d3c11cd5 Stop doing tag_from_label lookup with tag 84fc9430 Reduce workers for label lookups aa4825cb Handle redirects for blobs better f38f6bdf Switch 55-heat-config to async 8a09eb94 container-images: add librados2 to gnocchi-base 4c4ba312 Properly collect tasks with or conditional in step file. 4396f91b Add update and post update tasks to step generated file. e56cdbff Add a strict option to per role tasks file generation. e073112c Generate a play per step for external_deploy_tasks d31c419d config-download remove role arg from _write_tasks_per_step() 8e544693 First pass at script cleanup 42aea5f3 Revert "Add kolla template override to remove python3-networking-mlnx" Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 15 +- container-images/kolla/barbican-base/sudoers | 1 + container-images/kolla/base/httpd_setup.sh | 2 +- container-images/kolla/base/sudoers | 2 +- container-images/kolla/base/uid_gid_manage.sh | 124 ++++ container-images/kolla/horizon/extend_start.sh | 2 +- .../kolla/neutron-base/neutron_sudoers | 2 - container-images/tcib/base/base.yaml | 14 +- container-images/tcib/base/collectd/collectd.yaml | 11 +- container-images/tcib/base/etcd/etcd.yaml | 2 +- container-images/tcib/base/mariadb/mariadb.yaml | 6 +- .../tcib/base/memcached/memcached.yaml | 3 +- .../tcib/base/os/aodh-base/aodh-base.yaml | 2 +- .../tcib/base/os/barbican-base/barbican-base.yaml | 6 +- .../base/os/ceilometer-base/ceilometer-base.yaml | 2 +- .../ceilometer-central/ceilometer-central.yaml | 4 - .../ceilometer-compute/ceilometer-compute.yaml | 4 - .../ceilometer-ipmi/ceilometer-ipmi.yaml | 4 - .../tcib/base/os/cinder-base/cinder-base.yaml | 6 +- .../base/os/designate-base/designate-base.yaml | 2 +- .../tcib/base/os/glance-api/glance-api.yaml | 6 +- .../tcib/base/os/gnocchi-base/gnocchi-base.yaml | 3 +- .../tcib/base/os/heat-base/heat-base.yaml | 2 +- .../tcib/base/os/ironic-base/ironic-base.yaml | 2 +- .../ironic-conductor/ironic-conductor.yaml | 4 - .../ironic-inspector/ironic-inspector.yaml | 2 +- .../tcib/base/os/keystone/keystone.yaml | 2 +- .../tcib/base/os/manila-base/manila-base.yaml | 2 +- .../tcib/base/os/mistral-base/mistral-base.yaml | 2 +- .../mistral-executor/mistral-executor.yaml | 6 - .../neutron-agent-base/neutron-agent-base.yaml | 4 - .../tcib/base/os/neutron-base/neutron-base.yaml | 2 +- .../neutron-mlnx-agent/neutron-mlnx-agent.yaml | 8 + .../tcib/base/os/nova-base/nova-base.yaml | 2 +- .../nova-compute-ironic/nova-compute-ironic.yaml | 6 +- .../os/nova-base/nova-compute/nova-compute.yaml | 6 +- .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 7 +- .../nova-base/nova-scheduler/nova-scheduler.yaml | 4 - .../tcib/base/os/novajoin-base/novajoin-base.yaml | 2 +- .../tcib/base/os/octavia-base/octavia-base.yaml | 2 +- .../tcib/base/os/swift-base/swift-base.yaml | 2 +- container-images/tcib/base/os/tempest/tempest.yaml | 3 +- .../tcib/base/qdrouterd/qdrouterd.yaml | 2 +- container-images/tcib/base/rabbitmq/rabbitmq.yaml | 2 +- container-images/tcib/base/redis/redis.yaml | 5 +- container-images/tripleo_containers.yaml | 406 +++++------ container-images/tripleo_containers.yaml.j2 | 806 +++++++++++++++++++++ .../tripleo_kolla_template_overrides.j2 | 7 +- image-yaml/overcloud-hardened-images-rhel8.yaml | 2 + image-yaml/overcloud-images-ceph-rhel8.yaml | 2 + image-yaml/overcloud-images-rhel8.yaml | 2 + ...e-modify_only_with_source-d9be8cc7236e7c94.yaml | 6 + ...g-lookup-if-tag-specified-2284c45dc0f87693.yaml | 7 + ...e-tripleo-containers-file-0590a59f56fb3907.yaml | 6 + tripleo_common/actions/ansible.py | 6 +- tripleo_common/constants.py | 13 +- tripleo_common/image/builder/buildah.py | 203 ++++-- tripleo_common/image/exception.py | 4 + tripleo_common/image/image_export.py | 4 +- tripleo_common/image/image_uploader.py | 169 ++++- tripleo_common/image/kolla_builder.py | 63 +- tripleo_common/inventories.py | 13 +- tripleo_common/inventory.py | 10 +- tripleo_common/templates/deployments.yaml | 32 +- tripleo_common/utils/config.py | 70 +- tripleo_common/utils/plan.py | 2 +- zuul.d/layout.yaml | 5 + 81 files changed, 3489 insertions(+), 1005 deletions(-)

1 0

python-tripleoclient 13.4.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are delighted to announce the release of: python-tripleoclient 13.4.1: TripleO client This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.4.1 ^^^^^^ New Features ************ * A new command "openstack overcloud export ceph" is added. The command is used to export the Ceph deployment data from one stack for use in another stack with storage services which use that Ceph cluster when using the multi-stack deployment feature. Bug Fixes ********* * openstack overcloud export now exports user defined password values instead of just always exporting the generated password values. Changes in python-tripleoclient 13.4.0..13.4.1 ---------------------------------------------- 92654c55 Fix tcib build d25d7d98 Add openstack overcloud export ceph 69896778 Fix if conditions in constants.py 9a7411cb Ensure the ansible log file always has a correct UID 98e45893 Allow to pass a static inventory to the validator CLI 0b437456 Inject both paths for validations roles location 53fa8ad7 Add --temp-dir to overcloud image build 7d598f85 Combined cherry-pick to allow TCIB to run config-less 1de68cbb Update tripleo-validations path to /usr/share/ansible 27873c91 Remove playbook param from tripleo_validator.py b0494327 Fix extra_env_files option and type in format string c2a77064 Allow usage of duplicated IPs for undercloud config d154d50c (UX) Improve logging if the ephemeral heat stack wasn't created 96196522 Implement validations-libs framework for ALL validator commands e2e5fd96 TCIB: add --rhel-modules argument 1ffc56ed overcloud_deploy: move horizon url/rc files before config-download 018ef121 overcloud_cell: fix location of config-download 7fcc694d Limit ip_version when resolving public_host and admin_host 31aeb48e Use user set password values in overcloud export a06c7194 Cleanup UndercloudHostsEntries b0fbe6dc Don't build image upload tasks when dry_run is True e3525066 Simplify error handling in tripleo_deploy 3d5bd5a0 Close session objects in container_image.py 87aa47ca [ussuri] TCIB: change default namespace to tripleou ac50ee66 Rename UpgradeConvergeOvercloud into UpgradeConverge. 5e1475b5 Set portmap cidr fields to extracted CIDR Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 + ...ack-overcloud-export-ceph-f36421e1685db302.yaml | 6 + ...vercloud-export-passwords-bfa698491601a734.yaml | 4 + requirements.txt | 1 + setup.cfg | 3 +- tripleoclient/constants.py | 18 +- tripleoclient/export.py | 99 +++- .../v1/overcloud_deploy/test_overcloud_deploy.py | 20 +- .../test_tripleo_container_image.py | 31 +- tripleoclient/utils.py | 253 ++-------- tripleoclient/v1/container_image.py | 51 +- tripleoclient/v1/overcloud_cell.py | 8 +- tripleoclient/v1/overcloud_deploy.py | 52 +- tripleoclient/v1/overcloud_export_ceph.py | 115 +++++ tripleoclient/v1/overcloud_image.py | 8 + tripleoclient/v1/overcloud_upgrade.py | 4 +- tripleoclient/v1/tripleo_deploy.py | 50 +- tripleoclient/v1/tripleo_validator.py | 523 ++++++--------------- tripleoclient/v1/undercloud_config.py | 25 +- tripleoclient/v2/tripleo_container_image.py | 151 +++++- 27 files changed, 1042 insertions(+), 840 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d450d571..1e8e61ef 100644 --- a/requirements.txt +++ b/requirements.txt @@ -20,0 +21 @@ ansible-runner>=1.4.4 # Apache 2.0 +validations-libs>=1.0.0

1 0

tripleo-validations 12.3.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are happy to announce the release of: tripleo-validations 12.3.2: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 12.3.1..12.3.2 --------------------------------------------- f7b2ea2 Remove callback plugin from tripleo-validation e1af4c9 Remove objects migrated to validations-common a947d7e New validation: ensure we have access to the right package version cebe0b4 New validation: Ensure sVirt is active ffe221f Add validation to check status of ipa server d1f7935 Add new Upgrades validation groups. c6a59a1 Add os-cloud support for tripleo-ansible-inventory script 70b766c Corrected work directory for validate-selinux 088c4a1 Allows to use custom role name for validations b7d679d Updated "overcloud" to "allovercloud" group 7c01af7 Fix neutron_sanity_check for ML2/OVS overcloud 791502c Fix ceph-ansible permissions when checking the repo name 1de1854 Make Get OSD stat percentage compatible with jq < 1.5 f97940e Make Get OSD stat percentage compatible with both Luminous and Nautilus c3edb5d Ensure virtualenv is installed. 1ae0e2c Remove mock as test requirement Diffstat (except docs and test files) ------------------------------------- callback_plugins/.keep | 0 callback_plugins/fail_if_no_hosts.py | 31 --- callback_plugins/validation_json.py | 202 -------------------- callback_plugins/validation_output.py | 207 --------------------- .../modules/modules-check_package_update.rst | 15 -- .../modules/modules-validations_read_ini.rst | 15 -- .../roles/role-advanced_format_512e_support.rst | 7 - .../roles/role-check_latest_packages_version.rst | 6 - groups.yaml | 40 ++++ library/advanced_format.py | 97 ---------- library/check_package_update.py | 145 --------------- library/haproxy_conf.py | 89 --------- library/hiera.py | 64 ------- library/reportentry.py | 89 --------- library/validations_read_ini.py | 166 ----------------- library/warn.py | 55 ------ playbooks/512e.yaml | 13 -- playbooks/ceph-dependencies-installed.yaml | 4 +- playbooks/check-ftype.yaml | 12 -- playbooks/check-latest-packages-version.yaml | 13 -- playbooks/container-status.yaml | 2 +- playbooks/controller-token.yaml | 4 +- playbooks/controller-ulimits.yaml | 2 +- playbooks/dns.yaml | 12 -- playbooks/haproxy.yaml | 17 -- playbooks/healthcheck-service-status.yaml | 2 +- playbooks/mysql-open-files-limit.yaml | 4 +- playbooks/neutron-sanity-check.yaml | 13 +- playbooks/no-op.yaml | 12 -- playbooks/nova-event-callback.yaml | 2 +- playbooks/nova-svirt.yaml | 13 ++ playbooks/ntp.yaml | 14 -- playbooks/ovs-dpdk-pmd-cpus-check.yaml | 2 +- playbooks/pacemaker-status.yaml | 2 +- playbooks/package-version.yaml | 18 ++ playbooks/rabbitmq-limits.yaml | 2 +- playbooks/repos.yaml | 2 +- playbooks/service-status.yaml | 16 -- playbooks/stonith-exists.yaml | 2 +- playbooks/tls-everywhere-post-deployment.yaml | 2 +- playbooks/undercloud-cpu.yaml | 16 -- playbooks/undercloud-ram.yaml | 17 -- playbooks/undercloud-selinux-mode.yaml | 13 -- playbooks/validate-selinux.yaml | 21 --- role-addition.yml | 10 + .../molecule/default/converge.yml | 26 --- roles/advanced_format_512e_support/tasks/main.yml | 10 - roles/advanced_format_512e_support/vars/main.yml | 9 - roles/ceph/tasks/ceph-ansible-installed.yaml | 1 + roles/ceph/tasks/ceph-health.yaml | 4 +- .../defaults/main.yml | 10 - .../molecule/default/Dockerfile.j2 | 37 ---- .../molecule/default/converge.yml | 51 ----- .../molecule/default/molecule.yml | 46 ----- roles/check_latest_packages_version/tasks/main.yml | 16 -- roles/check_latest_packages_version/vars/main.yml | 8 - roles/dns/defaults/main.yml | 2 - roles/dns/molecule/default/Dockerfile.j2 | 37 ---- roles/dns/molecule/default/molecule.yml | 45 ----- roles/dns/tasks/main.yml | 4 - roles/dns/vars/main.yml | 7 - roles/haproxy/README.md | 42 ----- roles/haproxy/defaults/main.yml | 8 - roles/haproxy/molecule/default/Dockerfile | 37 ---- roles/haproxy/molecule/default/converge.yml | 71 ------- roles/haproxy/molecule/default/molecule.yml | 48 ----- roles/haproxy/tasks/main.yml | 51 ----- roles/haproxy/vars/main.yml | 6 - roles/neutron_sanity_check/defaults/main.yml | 3 + roles/neutron_sanity_check/tasks/main.yml | 69 ++++--- roles/no_op/tasks/main.yml | 4 - roles/no_op/vars/main.yml | 8 - roles/node_health/tasks/main.yml | 4 +- .../prepare.yml => nova_svirt/defaults/main.yml} | 12 +- .../molecule/default/Dockerfile | 4 +- .../molecule/default/converge.yml | 32 ++-- .../molecule/default/molecule.yml | 8 +- roles/nova_svirt/molecule/default/prepare.yml | 60 ++++++ roles/nova_svirt/tasks/main.yml | 14 ++ roles/nova_svirt/tasks/validate.yml | 28 +++ roles/ntp/molecule/default/Dockerfile.j2 | 37 ---- roles/ntp/molecule/default/converge.yml | 26 --- roles/ntp/molecule/default/molecule.yml | 46 ----- roles/ntp/tasks/main.yml | 26 --- roles/ntp/vars/main.yml | 10 - .../tasks/openshift-nw-requirements.yaml | 2 +- roles/openstack_endpoints/tasks/main.yml | 2 +- roles/package_version/defaults/main.yaml | 2 + .../molecule/default/Dockerfile.j2 | 0 .../molecule/default}/converge.yml | 34 ++-- .../molecule/default/molecule.yml | 0 roles/package_version/tasks/compare.yaml | 16 ++ roles/package_version/tasks/main.yaml | 67 +++++++ roles/package_version/vars/centos.yml | 2 + roles/package_version/vars/redhat-8.yml | 6 + roles/service_status/defaults/main.yaml | 2 - .../service_status/molecule/default/Dockerfile.j2 | 37 ---- roles/service_status/molecule/default/converge.yml | 25 --- roles/service_status/molecule/default/molecule.yml | 48 ----- roles/service_status/molecule/docker/Dockerfile.j2 | 37 ---- roles/service_status/molecule/docker/converge.yml | 59 ------ roles/service_status/molecule/docker/molecule.yml | 56 ------ roles/service_status/molecule/docker/prepare.yml | 65 ------- roles/service_status/molecule/podman/Dockerfile.j2 | 37 ---- roles/service_status/molecule/podman/bolt_state.db | Bin 131072 -> 0 bytes roles/service_status/molecule/podman/molecule.yml | 48 ----- roles/service_status/molecule/podman/prepare.yml | 39 ---- .../service_status/molecule/systemd/Dockerfile.j2 | 37 ---- roles/service_status/molecule/systemd/converge.yml | 44 ----- roles/service_status/molecule/systemd/molecule.yml | 48 ----- roles/service_status/molecule/systemd/prepare.yml | 39 ---- roles/service_status/tasks/containers.yaml | 59 ------ roles/service_status/tasks/main.yaml | 3 - roles/service_status/tasks/systemd.yaml | 13 -- roles/tls_everywhere/defaults/main.yml | 3 + roles/tls_everywhere/molecule/default/converge.yml | 36 +++- roles/tls_everywhere/molecule/default/prepare.yml | 21 +++ roles/tls_everywhere/tasks/ipa-server-check.yaml | 107 +++++++++++ roles/tls_everywhere/vars/main.yml | 1 - roles/undercloud_cpu/README.md | 36 ---- roles/undercloud_cpu/defaults/main.yml | 3 - .../undercloud_cpu/molecule/default/Dockerfile.j2 | 37 ---- roles/undercloud_cpu/molecule/default/converge.yml | 42 ----- roles/undercloud_cpu/molecule/default/molecule.yml | 45 ----- roles/undercloud_cpu/tasks/main.yml | 7 - roles/undercloud_cpu/vars/main.yaml | 10 - roles/undercloud_ram/README.md | 36 ---- roles/undercloud_ram/defaults/main.yml | 3 - .../undercloud_ram/molecule/default/Dockerfile.j2 | 37 ---- roles/undercloud_ram/molecule/default/converge.yml | 42 ----- roles/undercloud_ram/molecule/default/molecule.yml | 45 ----- roles/undercloud_ram/tasks/main.yml | 9 - roles/undercloud_ram/vars/main.yaml | 11 -- roles/undercloud_selinux_mode/README.md | 37 ---- .../molecule/default/Dockerfile.j2 | 37 ---- .../molecule/default/converge.yml | 26 --- .../molecule/default/molecule.yml | 46 ----- roles/undercloud_selinux_mode/tasks/main.yml | 24 --- roles/undercloud_selinux_mode/vars/main.yml | 8 - roles/validate_selinux/defaults/main.yml | 27 --- roles/validate_selinux/handlers/main.yml | 15 -- .../validate_selinux/molecule/default/converge.yml | 63 ------- .../validate_selinux/molecule/default/prepare.yml | 60 ------ roles/validate_selinux/molecule/default/verify.yml | 15 -- roles/validate_selinux/tasks/main.yml | 123 ------------ roles/validate_selinux/templates/skip-list.j2 | 3 - roles/validate_selinux/vars/main.yml | 22 --- .../xfs_check_ftype/molecule/default/Dockerfile.j2 | 37 ---- .../xfs_check_ftype/molecule/default/converge.yml | 21 --- .../xfs_check_ftype/molecule/default/molecule.yml | 47 ----- roles/xfs_check_ftype/molecule/default/prepare.yml | 60 ------ roles/xfs_check_ftype/molecule/default/verify.yml | 15 -- roles/xfs_check_ftype/tasks/main.yml | 25 --- roles/xfs_check_ftype/vars/main.yml | 8 - scripts/tripleo-ansible-inventory | 60 ++++-- zuul.d/molecule.yaml | 113 ++--------- zuul.d/playbooks/pre.yml | 4 + 180 files changed, 654 insertions(+), 4482 deletions(-)

1 0