We are chuffed to announce the release of: tripleo-heat-templates 13.6.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.6.0 ^^^^^^ New Features ************ * Added new heat role specific parameter option 'DdpPackage' to select the required DDP Package. * Added new heat role specific param OVNAvailabilityZone to set availability-zones for ovn. This param replace seting availability- zones throught OVNCMSOptions * Add param NeutronAgentDownTime to configure neutron server agent_down_time Seconds to regard the agent as down; should be at least twice report_interval, to be sure the agent is down for good. agent_down_time is a config for neutron-server, set by class neutron::server report_interval is a config for neutron agents, set by class neutron * New config options for Neutron logging service plugin configuration were added. There are options added for L3 Agent: "NeutronL3AgentLoggingRateLimit", "NeutronL3AgentLoggingBurstLimit", "NeutronL3AgentLoggingLocalOutputLogBase", for OVS agent: "NeutronOVSAgentLoggingRateLimit", "NeutronOVSAgentLoggingBurstLimit", "NeutronOVSAgentLoggingLocalOutputLogBase" and for ML2/OVN backend: "NeutronOVNLoggingRateLimit", "NeutronOVNLoggingBurstLimit", "NeutronOVNLoggingLocalOutputLogBase". * With conditional monitoring enabled in OVN, southbound ovsdb-serve takes lot of time in handling the monitoring and sending the updates to all its connected clients. Its takes lot of CPU. With monitor-all option, all ovn-controllers do not enable conditional monitoring there by reducing the load on the Southbound ovsdb-server. * A heat parameter "IronicPowerStateChangeTimeout" has been added which sets the number of seconds to wait for power operations to complete, i.e., so that a baremetal node is in the desired power state. If timed out, the power operation is considered a failure. The default is 60 seconds, which is the same as the current Ironic default. Upgrade Notes ************* * The default UEFI iPXE bootfile is now *snponly.efi*. The boolean parameter *IronicIPXEUefiSnpOnly* was added to allow custom configuration. When set to *true* snponly is used, when *false* the previous default ipxe.efi is used. See bug: 1959726 (https://bugs.launchpad.net/tripleo/+bug/1959726). Bug Fixes ********* * Rsyslog config for haproxy (https://bugs.launchpad.net/tripleo/+bug/1953672) * When we install libvirt on a host, the system parameter "fs.aio- max- nr" is to 1048576. Since we containerized libvirtd, we lost this system parameter. We now make sure it's defined by adding it from the nova-libvirt-common template. * The neutron agent report interval was recently changed from the 30s default to 300s. This caused issues whith timeouts when providing baremetal nodes. A new parameter IronicNeutronAgentReportInterval has been added with a default of 30s so that the report interval specifically for the networking baremetal agent is restored. See bug: 1940838 (https://bugs.launchpad.net/tripleo/+bug/1940838). Other Notes *********** * Steps are taken to minimize chances of confusion between the default block storage volume type established by the CinderDefaultVolumeType parameter, and cinder's own __DEFAULT__ volume type. In a new deployment where no volumes exist, cinder's __DEFAULT__ type is deleted because it is redundant. In an upgrade scenerio, if volumes exist then the __DEFAULT__ type's description is updated to indicate the actual default volume type is the one established by the CinderDefaultVolumeType parameter. Changes in tripleo-heat-templates 13.5.0..13.6.0 ------------------------------------------------ 7f12c4484 Fix CinderDefaultVolumeType constraints fb88ed98a Check whether an HA resource already exists explicitly b442b8d59 Memcached: Allow puppet to be aware IPv6 is used 3802edefb Disable auto discovery 02255246d Add support for powermax. 47e949807 Add nvidia firstboot yaml to tripleo-heat-template a9a4d5423 Etcd: Update cluster membership when replacing a node bdd0d7ec7 Increase stop_grace_period for Octavia controller services 951eef91f Fix typo in HciCephObject role tag 2fb1cbfa0 Add CephNfs service on roles providing "external" network connectivity 950f64010 Fix network-environment.yaml ipv6 {{network.name}}Routes fae044730 Fix attr corresponding to ManilaCephFSNFSIdmapOverrides caad2d24d Required DDP package is not loaded issue 4dadf3ded Exclude /etc/openldap to avoid overriding ro file e01fe8b34 Defining fs.aio-max-nr for hosts with libvirt service b368da08e Don't bind host's /run in multipathd container c5b2e36d4 IDM server registration is fixed to one server only b69cdee8d Add IronicNeutronAgentReportInterval parameter 371bb6528 Add parameter IronicIPXEUefiSnpOnly 720617ed0 Update dervice_pci script to handle pci address formats f76a244fb Check if passthrough user_config is decoded properly from hiera data a61368ff2 Add ping test for all networks gateway IPs 8b383986f Fix cloud-init detection rules 2ca0ebbdd Use only internal endpoints in Octavia controller services c20c5e804 Make sure libvirt guests shut down before network 401883388 Disable metrics_qdr binding in HAProxyEdge 50a28df08 Fix killscript regex match for libpod-conmon-* 5314c792b Use public endpoint for [keystone_authtoken] www_authenticate_uri 6fc83dd71 Fix IPv6 router on UC re-install fc293280c Add chrony waitsync back in 03857c21e Exec libvirtd in a transient scope 1db4c72c9 Add missing services to ControllerNovaStandalone role 729971c31 fix InternalApi subnet for ControllerNovaStandalone role e59be96fa Remove ganesha_vip extra config workaround 3c4475acd GaneshaNetwork - fallback -> external -> ctlplane f51498909 Fix indentation issue with 2-bonds-vlans config fdcd81de3 Wallaby and older: Remove heat-dashboard parameters from local_settings 9f51a8395 Remove tripleo_ovn_mac_port_name port tag 630e330f9 Missing rsyslog parameters for HAProxy b5d65342a [Victoria-Only] Fix hiera condition for cache_backend 432968ba6 Keystone: Remove unused container_puppet_tasks da47a77c1 Sc04: Enable glance sparse image upload b7019a627 Clear up confusion on cinder's default volume type 2d891e178 Revert "Enforces minimum Ceph client version to Mimic" 2e679aab6 Fix condition to add per subnet routes parameter 3da3ff6ea [Neutron] Add custom env file to set dns_domain_name d29e078cf Add param to configure neutron agent_down_time and report_interval f3930cc5b Default CephDashboardNetwork to storage_dashboard 3011d4c53 Fix libvirt/qemu logs location ba0ef3529 Enable ovn-monitor-all option to ovn-controller 1a20780ae Remove mariadb-server packages from the host 8ee7df3a3 Add parameter IronicPowerStateChangeTimeout 21a1aebc4 Added support for Neutron loggings service plugin configuration 72e0b6b78 [victoria/ussuri/train] Tune minion defaults c8daec697 Add OVNAvailabilityZone to improve UX 47e974067 Enable new SELinux boolean for vTPM support 8a4351664 Use yaml.safe_load to load YAML files 56cd7d474 placement: Adding Debug parameter 83441c397 Drop archive policy from enable-legacy-telemetry 68d3a2753 Option to select the required DDP package ae34f60cd Fix swift log redirection 0e57f8b35 Fix delegate_to to use group rather then undercloud 6b70e35fe Do not fail if haproxy container UUID changes 2d21dcce7 Remove setting ACLs during Upgrade 2397dd095 Wallaby and before: Fix wrong puppet parameter name 34cf44a88 Configure api_base_uri to DesignateEndpoint URI ec263697b Install python3-openstackclient after the leapp upgrade fd508d1ca Guarantee that ovn-dbs-pcmk update_tasks are run when the cluster is up fff23ad3d Fix the CephDashboardNetwork default b0c5c80e0 NovaLiveMigrationPermitAutoConverge should default to True 895ae870f Revert "Disable postcopy for ovn/ovs-dpdk" 4cbc970d1 Environment for switching to using IPs for memcached 530668d03 Enable Ceph RGW public port into firewall when using SSL 9ae8a0683 Stop rotating rabbitmq crash.log files via erlang's lager cf53dbf19 Example configurable cap add 7ce489863 Add service ordering to cleanup service to avoid conflicts with agent startup 13e5bdf6f Add SendQueueLimit to collectd-amqp1 Diffstat (except docs and test files) ------------------------------------- ci/environments/neutron_dns_domain.yaml | 2 + ci/environments/scenario001-standalone.yaml | 1 + ci/environments/scenario004-standalone.yaml | 4 +- common/container-puppet.sh | 4 +- common/deploy-steps-tasks-step-0.j2.yaml | 6 + common/deploy-steps.j2 | 6 + .../pacemaker_restart_bundle.sh | 30 +- deployment/aodh/aodh-base.yaml | 2 +- .../barbican/barbican-api-container-puppet.yaml | 4 +- deployment/ceph-ansible/ceph-mon.yaml | 19 - deployment/ceph-ansible/ceph-nfs.yaml | 2 +- deployment/ceph-ansible/ceph-rgw.yaml | 1 + deployment/cinder/cinder-api-container-puppet.yaml | 18 +- deployment/database/mysql-pacemaker-puppet.yaml | 11 +- deployment/deprecated/mistral/mistral-base.yaml | 2 +- .../novajoin/novajoin-container-puppet.yaml | 2 +- deployment/deprecated/sahara/sahara-base.yaml | 2 +- deployment/etcd/etcd-container-puppet.yaml | 77 ++ .../designate/designate-api-container-puppet.yaml | 3 +- deployment/glance/glance-api-container-puppet.yaml | 2 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 2 +- deployment/haproxy/haproxy-container-puppet.yaml | 10 + .../haproxy/haproxy-edge-container-puppet.yaml | 1 + deployment/haproxy/haproxy-pacemaker-puppet.yaml | 10 + deployment/haproxy/haproxy-public-tls-inject.yaml | 5 + deployment/heat/heat-base-puppet.yaml | 9 +- deployment/horizon/horizon-container-puppet.yaml | 3 + deployment/ipa/ipaservices-baremetal-ansible.yaml | 10 +- deployment/ironic/ironic-api-container-puppet.yaml | 2 +- .../ironic/ironic-conductor-container-puppet.yaml | 21 +- .../ironic/ironic-inspector-container-puppet.yaml | 2 +- .../ironic-neutron-agent-container-puppet.yaml | 23 +- deployment/kernel/kernel-baremetal-ansible.yaml | 23 +- deployment/keystone/keystone-container-puppet.yaml | 16 +- deployment/logging/files/nova-libvirt.yaml | 2 +- deployment/manila/manila-api-container-puppet.yaml | 2 +- deployment/manila/manila-backend-powermax.yaml | 80 ++ .../manila/manila-share-container-puppet.yaml | 2 +- .../memcached/memcached-container-puppet.yaml | 25 +- deployment/metrics/collectd-container-puppet.yaml | 23 +- .../multipathd/multipathd-container-ansible.yaml | 1 - .../neutron/derive_pci_passthrough_whitelist.py | 502 +++++--- deployment/neutron/kill-script | 2 +- .../neutron/neutron-api-container-puppet.yaml | 11 +- deployment/neutron/neutron-base.yaml | 7 + deployment/neutron/neutron-cleanup.service | 2 +- .../neutron/neutron-dhcp-container-puppet.yaml | 31 - .../neutron/neutron-l3-container-puppet.yaml | 55 +- .../neutron/neutron-metadata-container-puppet.yaml | 31 - .../neutron-ovs-agent-container-puppet.yaml | 24 + deployment/neutron/neutron-plugin-ml2-ovn.yaml | 26 +- deployment/nova/nova-api-container-puppet.yaml | 2 +- deployment/nova/nova-base-puppet.yaml | 7 +- deployment/nova/nova-compute-container-puppet.yaml | 9 +- deployment/nova/nova-libvirt-container-puppet.yaml | 11 +- .../nova/nova-metadata-container-puppet.yaml | 2 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 4 +- .../octavia/octavia-api-container-puppet.yaml | 2 +- deployment/octavia/octavia-base.yaml | 4 + .../octavia-health-manager-container-puppet.yaml | 2 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 2 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 27 + .../ovn/ovn-controller-container-puppet.yaml | 20 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 28 +- .../placement/placement-api-container-puppet.yaml | 11 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 2 + deployment/swift/swift-proxy-container-puppet.yaml | 42 +- .../swift/swift-storage-container-puppet.yaml | 40 +- deployment/timesync/chrony-baremetal-ansible.yaml | 4 +- .../tripleo-packages-baremetal-puppet.yaml | 4 +- deployment/zaqar/zaqar-container-puppet.yaml | 2 +- environments/enable-legacy-telemetry.yaml | 4 +- environments/enable-stf.yaml | 1 + environments/manila-cephfsganesha-config.yaml | 4 + environments/manila-powermax-config.yaml | 20 + environments/memcached-use-ips.yaml | 6 + environments/metrics/collectd-write-qdr.yaml | 1 + environments/network-environment-v6.j2.yaml | 4 +- environments/network-environment.j2.yaml | 9 +- environments/services/neutron-ovn-dpdk.yaml | 2 - environments/services/neutron-ovs-dpdk.yaml | 3 +- environments/undercloud/undercloud-minion.yaml | 28 + .../post_deploy/undercloud_ctlplane_network.py | 73 +- firstboot/nvidia_firstboot.yaml | 743 ++++++++++++ firstboot/userdata_timesync.yaml | 1 + .../config/2-linux-bonds-vlans/role.role.j2.yaml | 22 +- network/ports/ovn_mac_addr_port.yaml | 4 - network/service_net_map.j2.yaml | 4 +- overcloud.j2.yaml | 18 + .../notes/DdpPackage-581e67f08908ed51.yaml | 5 + .../OVNAvailabilityZone-bc3d44a7e11d83e5.yaml | 5 + .../notes/agent_down_time-d6aebe530ca31b9e.yaml | 8 + ...g-1953672-haproxy-rsyslog-6f8e386f8909a253.yaml | 4 + ...arify-default-volume-type-c77e7a7ddafdf172.yaml | 12 + ...-fs.aio-max.nr-on-compute-06447122b8e12c71.yaml | 7 + ...baremetal-report-interval-d08a44a147a1846e.yaml | 10 + ...ging-plugin-support-added-b2e1292d49e087c3.yaml | 12 + .../notes/ovn-monitor-all-2fefb215c6f7166c.yaml | 8 + .../notes/power_state-457f12af30b9e341.yaml | 8 + .../uefi_ipxe_bootfile_name-f2c9cc8971dc1ed8.yaml | 9 + roles/Compute.yaml | 1 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 1 + roles/ComputeHCI.yaml | 1 + roles/ComputeHCIOvsDpdk.yaml | 1 + roles/ComputeHCISriov.yaml | 1 + roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLocalEphemeral.yaml | 1 + roles/ComputeOvsDpdk.yaml | 1 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeOvsDpdkSriov.yaml | 1 + roles/ComputeOvsDpdkSriovRT.yaml | 1 + roles/ComputePPC64LE.yaml | 1 + roles/ComputeRBDEphemeral.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriov.yaml | 1 + roles/ComputeSriovIB.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/Controller.yaml | 1 + roles/ControllerAllNovaStandalone.yaml | 1 + roles/ControllerNovaStandalone.yaml | 18 +- roles/ControllerOpenstack.yaml | 1 + roles/ControllerSriov.yaml | 1 + roles/ControllerStorageDashboard.yaml | 1 + roles/DistributedCompute.yaml | 1 + roles/DistributedComputeHCI.yaml | 1 + roles/DistributedComputeHCIDashboard.yaml | 1 + roles/DistributedComputeHCIScaleOut.yaml | 1 + roles/DistributedComputeScaleOut.yaml | 1 + roles/HciCephObject.yaml | 2 +- roles_data.yaml | 2 + roles_data_undercloud.yaml | 1 + sample-env-generator/undercloud-minion.yaml | 19 + setup.py | 1 + tools/render-ansible-tasks.py | 11 +- tools/yaml-validate.py | 47 +- tox.ini | 4 +- zuul.d/layout.yaml | 12 + 140 files changed, 3304 insertions(+), 498 deletions(-)