We are happy to announce the release of: puppet-tripleo 5.6.9 This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 5.6.9 ^^^^^ New Features ************ * Adds composable service interface for Neutron LBaaSv2 service. Security Issues *************** * TLS v1.0 connections are no longer accepted by our HAProxy configuration. Changes in puppet-tripleo 5.6.8..5.6.9 -------------------------------------- 0a921f5 Release 5.6.9 (newton) b83cc42 Disallow TLS v1.0 from HAProxy 712df44 Extract local CA if it expired 26dfe7a firewall: don't reload IPtables after cleanup 419afe4 Set rgw_keystone_revocation_interval to 0 for ceph::rgw::keystone 64e40fa Composable Role for Neutron LBaaS 5618a27 Make exposing the keystone admin port optional Diffstat (except docs and test files) ------------------------------------- manifests/certmonger/ca/local.pp | 2 +- manifests/firewall.pp | 35 ++++++----------- manifests/haproxy.pp | 31 ++++++++++----- manifests/profile/base/ceph/rgw.pp | 9 +++-- manifests/profile/base/neutron/lbaas.pp | 44 ++++++++++++++++++++++ manifests/profile/pacemaker/neutron/lbaas.pp | 44 ++++++++++++++++++++++ metadata.json | 2 +- ...le_role_for_neutron_lbaas-acdf08f1a9dfd3fe.yaml | 3 ++ .../notes/No-TLS-v1.0-0edeac680bb51f94.yaml | 4 ++ 9 files changed, 136 insertions(+), 38 deletions(-)