We are amped to announce the release of: puppet-tripleo 11.0.0: Puppet module for OpenStack TripleO This release is part of the train release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 11.0.0 ^^^^^^ New Features ************ * Adds ovn_db_host and ovn_nb_port to configure ovn nb connection string for OVN Provider driver. Upgrade Notes ************* * The Neutron LBaaS project was retired. Upgrading to deployment to Train release will not upgrade Neutron LBaaS. Learn more about its retirement and Octavia as its successor at https://wiki.openstack.org/wiki/Neutron/LBaaS/Deprecation * Remove ntp profile and puppet-ntp usage. Deprecation Notes ***************** * The Neutron LBaaS project was retired and support for it in TripleO removed. Bug Fixes ********* * As of Rocky [1], the nova-consoleauth service has been deprecated and cell databases are used for storing token authorizations. All new consoles will be supported by the database backend and existing consoles will be reset. Console proxies must be run per cell because the new console token authorizations are stored in cell databases. nova-consoleauth was deprecated in tripleo with: I68485a6c4da4476d07ec0ab5e7b5a4c528820a4f This change now removes the NovaConsoleauth Service. [1] https://docs.openstack.org/releasenotes/nova/rocky.html Changes in puppet-tripleo 10.4.0..11.0.0 ---------------------------------------- 99b386e3 Bump metadata for Train Milestone 1 f95c6d1b Remove Neutron LBaaS 16c5f169 Make sure we pass the proper new pcs 0.10 variables 44afda83 Allow external Ganesha for the cephfs manila backend dabfc9e1 Add support for external Ganesha service in Manila Share profile 3ef8e3e3 Rebuild initramfs after applying change in kernel parameters c6858e7a Fix amphora provider driver description e76519d2 Fix tripleo::haproxy::stats to be more correct and flexible a869d20b Retiring TripleO-UI 6c2e164a Fix horizon firewall rules in composable roles 8ff689bc Make sure to set umask 022 for nova_migration_target logins 1d3ef8bc Write TLS config under section [client] in tripleo.cnf 1ae89eb0 Include 'octavia' driver on ML2/OVN deployments 578da586 Add nova::cinder to nova compute 710c6173 Remove deprecated admin ssl options e4039299 Remove NovaConsoleauth Service a87f8be7 Let fluentd not create /etc/rsyslog.d/fluentd.conf file 54602918 Update version in metadata.json ce0cffe0 Remove ntp 10216c78 Expose innodb_lock_wait_timeout via hieradata. ccbaeac7 Switch metrics qdrs to edge mode ffdc816e Safeguard against 'Undef' length() checks. afebff58 redis HA: allow SELinux relabel for /var/run/redis 977cf8f5 Remove unused docker_distribution template 5cbead72 Fix puppet unit ci config bacfec86 Implement stonith levels and enable kdump agent. 9de8c4eb Fixup tests for puppet 6 f1ae850e Remove ODL tests fee08693 Remove puppet selinux management 953b4c36 nova: Remove profile::base::nova::placement 42642c45 OpenDev Migration Patch f5d6110a Fix keepalived VIP monitoring script d1bbad06 Bump metadata for release 523fe8ad Fix missing version requirements f2cf8379 Update master for stable/stein d88db3ad Add support to set ovs_nb_connection 2a1167dd Set octavia provider_drivers config option correctly f5a7ca6f Correct how podman exec is called for the neutron-keepalived-state-change 3af5c2f2 placement: Initial extraction of the Placement service from Nova a07db290 Use validate_legacy Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- Puppetfile_extras | 9 +- manifests/cluster/cassandra.pp | 2 +- manifests/cluster/zookeeper.pp | 2 +- manifests/fencing.pp | 92 +++++--- manifests/firewall/rule.pp | 4 +- manifests/haproxy.pp | 55 +++-- manifests/haproxy/horizon_endpoint.pp | 27 +++ manifests/haproxy/stats.pp | 19 +- manifests/host/liquidio/config.pp | 4 +- manifests/keepalived.pp | 2 +- manifests/network/contrail/config.pp | 7 +- manifests/network/contrail/neutron_plugin.pp | 2 +- manifests/profile/base/aide/rules.pp | 2 +- manifests/profile/base/database/mysql.pp | 15 +- manifests/profile/base/database/mysql/client.pp | 8 +- manifests/profile/base/database/mysql/user.pp | 2 +- manifests/profile/base/etcd.pp | 2 +- manifests/profile/base/kernel.pp | 8 + manifests/profile/base/keystone.pp | 16 +- manifests/profile/base/logging/fluentd.pp | 25 ++- manifests/profile/base/manila/share.pp | 29 ++- manifests/profile/base/metrics/qdr.pp | 11 +- manifests/profile/base/neutron/agents/lbaas.pp | 41 ---- manifests/profile/base/neutron/lbaas.pp | 35 --- manifests/profile/base/neutron/opendaylight.pp | 4 +- manifests/profile/base/nova/compute.pp | 1 + manifests/profile/base/nova/consoleauth.pp | 33 --- manifests/profile/base/nova/migration/target.pp | 17 +- manifests/profile/base/octavia/api.pp | 16 +- manifests/profile/base/pacemaker.pp | 20 +- manifests/profile/base/pacemaker_remote.pp | 18 ++ manifests/profile/base/placement.pp | 46 ++++ .../base/{nova/placement.pp => placement/api.pp} | 33 ++- manifests/profile/base/placement/authtoken.pp | 44 ++++ manifests/profile/base/securetty.pp | 3 +- manifests/profile/base/snmp.pp | 2 +- manifests/profile/base/swift/ringbuilder.pp | 2 +- manifests/profile/base/time/ntp.pp | 35 --- .../profile/pacemaker/database/redis_bundle.pp | 2 +- manifests/profile/pacemaker/manila/share_bundle.pp | 17 +- manifests/profile/pacemaker/neutron/lbaas.pp | 44 ---- manifests/selinux.pp | 74 ------- manifests/ui.pp | 238 --------------------- metadata.json | 8 +- ...octavia-ovn-nb-connection-9d5bc428c4ff35af.yaml | 5 + ...a_remove_nova-consoleauth-c126434b3dbda106.yaml | 15 ++ .../remove-neutron-lbaas-f6337e030a200b64.yaml | 12 ++ .../notes/remove-ntp-34d5eb69bfc231b0.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 + spec/classes/tripleo_haproxy_spec.rb | 7 +- spec/classes/tripleo_keepalive_spec.rb | 2 +- ...pleo_profile_base_database_mysql_client_spec.rb | 20 +- .../tripleo_profile_base_logging_fluentd_spec.rb | 9 +- ...o_profile_base_neutron_ovs_opendaylight_spec.rb | 198 ----------------- .../tripleo_profile_base_nova_consoleauth_spec.rb | 62 ------ spec/classes/tripleo_profile_base_nova_spec.rb | 3 - .../tripleo_profile_base_octavia_api_spec.rb | 13 +- ...c.rb => tripleo_profile_base_placement_spec.rb} | 54 ++--- spec/classes/tripleo_profile_base_time_ntp_spec.rb | 39 ---- ...o_profile_pacemaker_manila_share_bundle_spec.rb | 8 +- spec/classes/tripleo_selinux_spec.rb | 73 ------- spec/classes/tripleo_ui_spec.rb | 133 ------------ spec/defines/tripleo_haproxy_endpoint_spec.rb | 14 +- spec/fixtures/hieradata/default.yaml | 28 ++- .../docker_distribution/registry_config.yml.erb | 11 - .../neutron/neutron-keepalived-state-change.epp | 9 +- zuul.d/layout.yaml | 6 +- 69 files changed, 551 insertions(+), 1259 deletions(-)