We are overjoyed to announce the release of: puppet-tripleo 7.4.16: Puppet module for OpenStack TripleO This release is part of the pike stable release series. The source is available from: http://git.openstack.org/cgit/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo (tag: puppet) For more details, please see below. 7.4.16 ^^^^^^ Upgrade Notes ************* * Rotated logs of containerized services in /var/log/containers will be purged with the next containerized logrotate run triggered via cron, if the rotated logs have been kept longer than *purge_after_days* (defaults to a 14 days). Containerized logrotate now always compresses the rotated /var/log/containers logs and this can no longer be delayed with delaycompress. Size parameter does not honor time-based constraints and is disabled as not GDPR compliant. From now on, it configures maxsize instead. Minsize is set to a 1 byte to put all /var/log/containers logs under the containerized logrotate control. Security Issues *************** * Forcibly purge rotated /var/log/containers logs after *purge_after_days* (defaults to a 14 days). New param *rotation* additionally allows to alter logrotate rotation interval. Defaults to a 'daily'. Make sure to adjust *purge_after_days* as needed. Any files in /var/log/containers, if not managed by the containerized logrotate, will be purged forcibly with each containerized logrotate run triggered via cron. Bug Fixes ********* * Fixed how deprecated parameters for Cinder's Netapp backend are handled so that empty strings are not misinterpreted. Fixes bug 1782376. Other Notes *********** * Add the compress option for the containerized logrotate service to compress rotated logs by default. Changes in puppet-tripleo 7.4.15..7.4.16 ---------------------------------------- be81353 Prepare 7.4.16 (Pike) release 13b3166 Force GDPR compliance of containers logs eb0b424 Add logrotate compress option e7300e6 import zuul job settings from project-config 70307b0 Use exec for CA CRL instead of file resource e536d44 import zuul job settings from project-config a8def9c [Ocata,Pike,Queens-Only] Fix Cinder's Netapp backend Diffstat (except docs and test files) ------------------------------------- manifests/certmonger/ca/crl.pp | 47 ++++++++++++++------- manifests/profile/base/cinder/volume/netapp.pp | 33 +++++++++++++-- manifests/profile/base/logging/logrotate.pp | 48 ++++++++++++++++++---- metadata.json | 2 +- ...-netapp-deprecated-params-80bcfac1b1d2f88e.yaml | 6 +++ ...otate-containers-compress-96934a4e76b9689d.yaml | 5 +++ ...ogrotate-containers-purge-56143a979ba80b51.yaml | 26 ++++++++++++ spec/classes/tripleo_certmonger_ca_crl_spec.rb | 30 ++++++++++---- templates/logrotate/containers_logrotate.conf.erb | 21 +++++++--- zuul.d/layout.yaml | 1 + 10 files changed, 178 insertions(+), 41 deletions(-)