[release-announce] [tripleo] tripleo-heat-templates 7.0.0 (pike)

We are glad to announce the release of: tripleo-heat-templates 7.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 7.0.0 ^^^^^ New Features ************ * Configure OpenDaylight SNAT to use conntrack mechanism with OVS and controller based mechanism with OVS-DPDK. * Barbican API added to containarised overcloud deployment * Add support for Dell EMC Isilon manila driver * Support containerized ovn-controller * Support containerized OVN Dbs without HA * Support containerized OVN DBs with HA * Add support for Dell EMC Unity Manila driver * Add support for Dell EMC VMAX Iscsi cinder driver * Add support for Dell EMC VMAX Manila driver * Add support for Dell EMC VNX Manila driver Bug Fixes ********* * Set "host" parameter in manila.conf to 'hostgroup' when running manila share service under pacemaker. This labels instances of the service on different nodes with the same "host" as cinder does in this circumstance so that the instances are considered by OpenStack to provide the same service and manila share is able to maintain management of shares on the backend after failover and failback. * The "neutron_admin_auth_url" is now properly set using KeystoneInternal rather than using the NeutronAdmin endpoint. * Change the default ManageEventPipeline to true. This is because we want the event pipeline publishers overridden by heat templates to take effect over the puppet defaults. Once we drop panko:// from the pipeline we can switch this back to false. Other Notes *********** * Network templates are now rendered with jinja2 based on network_data.yaml. The only required parameter for each network is the name, optional params will populate the defaults in the network template. Network templates will be generated for both IPv4 and IPv6 versions of the networks, setting ipv6: true on the network will generate only IPv6 templates. An example for overriding default IP addresses for IPv6 has been added in environments/network- environment-v6.yaml. Changes in tripleo-heat-templates 6.0.0.0rc1..7.0.0 --------------------------------------------------- f37a6f9 Add tags in upgrade_tasks for mongodb services. ab8bdfa Add CephExternal role for ceph-ansible 6d99e0a Add support for deploying RGW with ceph-ansible cbcfb59 Use DeployedSSLCertificatePath for public TLS via certmonger e6682e5 Maintain ceph-osd package only on nodes hosting CephOSD service b5783b3 fluentd: log configuration was not generated correctly 9011b06 Use containerized mongodb in scenario002-multinode-containers 72be2ae Change all references of nsx_v3 to nsx. 4e8013e Add param to configure snat mechanism 6bed752 Mount public certificate in haproxy init container f9df42b Mount folders and log file c03ed4d Unset default value for the DockerCephDaemonImage dc646db TLS proxy for redis e33d918 Containerized mongodb, disable by default, fix upgrade 7bb41c9 Escape ceph capabilities for manila client f2d0901 Allow upgrade tasks to run when looping through steps bc726c1 Add support for Dell EMC Isilon Manila backend 9757cfa Add support for Dell EMC VMAX Manila Backend 41d599c Set mode for ansible written files 3302df4 Rabbitmq: Enable Erlang distribution TLS bdccc1c manila: set "neutron_admin_auth_url" correctly c791d80 Remove bgp-vpn from scenario004-multinode-containers 9f5a014 Switch manila-share to pacemaker version in scenario004/containers 1fd5d9e Add clustercheck to service list for scenarios 39927f5 Stop hardcoding host's config volume path a586b22 Fix containerized zaqar-api db_sync b1abf01 Add support for Dell EMC VMAX ISCSI Backend e371ec6 Separate config_volume for ringbuilder ed73f20 Configure Zaqar trust notifier fc9dc2a Manually set healthchecks for _cron services fe975e8 Use list_concat in place of yaql 3d7cee4 NetworkDeploymentActions shall be made role specific ca4b08b Convert enable-internal-tls.yaml to be generated 878d236 Fix hardcoded references to deprecated *ExtraConfig parameters 9deeb4e Remove tacker from containers scenario001 d88a8dc Remove ipv6 specific network templates a86bc99 Updated from global requirements b7bbe4b Add storage backends env files for containerized deployment 7ef0b96 Update generated ssl environments 2b07da8 Remove puppet run and workarounds from tripleo_upgrade_node.sh 5c870af Add --wsrep-provider=none to the mysql_bootstrap container b395323 Telemetry specific config for scenario001 978e2eb Support HA for OVN DBs containers using pacemaker bundle 111861f Remove hard-coded image reference af71468 Move deprecated SchedulerHints logic to overcloud.j2.yaml 5f40937 Add support for Dell EMC VNX Manila Backend 992478e Add support for Dell EMC Unity Manila Backend 0eed8aa Change ManageEventPipeline to true 0f2af35 container ovs-agent, ensure br-ex exists ee9197a Remove src_ceph from manila kolla_config 0e3b02f Use switch to containers instead of take over playbook for ceph-ansible 2dece06 Use integers for rabbitmq ports 39950e6 Add missing Docker service abdce04 Use Python to compute release notes version 3ebb05d Add DockerPuppetProcessCount defaults to 3 0ef71f3 Set docker-puppet --health-cmd = /bin/true 1f3cb17 manila: set "host" to "hostgroup" f923d8d Support deploying OVN as container services 46219af Make archive policy configurable 56eaad8 Handle failure of carrier check in configure_safe_defaults() ca350fc Enable ceilometer compute agent 74a79d3 Add panko publisher in the event pipeline ab55169 Containarise Barbican API 80c7819 Update UPPER_CONSTRAINTS_FILE for stable/pike 09c178c Update .gitreview for stable/pike c8daedf Do not install additional CentOS packages via ceph-ansible d9d8314 Specify the start count to 0 for the update step loop 81faff0 Configure listen_address for libvirtd when TLS is enabled 2696ead Docker: Enable TLS in the internal network for libvirt 8cb4da7 Zaqar: Match service name with service-net-map b7b44a3 Fix configuration files path for logrotate container 700b82b Render port templates via j2 626b967 Add nova metadata to TLS everywhere/docker services list 8ba30a1 TLS for containerized horizon 8a03456 Add logrotate with crond service 71059a0 Mount ceph config on gnocchi statsd a987bc8 Prepare reno for TripleO Pike RC1 184f284 More fixes for the Ceph docker images url parsing 26d61e8 ci: don't deploy swift on basic multinode job ad85892 Let mds create manila key and fs bf02ad9 Tag the ha containers with 'pcmklatest' at deploy time 0f8e4e3 Enable TLS for containerized RabbitMQ 0d1a7f3 TLS everywhere/haproxy: Remove empty postsave command 698e2e3 Convert scenario001-multinode-containers job to ceph-ansible 1df5f72 Enable listening on TLS for the internal network for horizon 2760f53 Restore and split nova metadata docker service out of nova-api. d59ba51 Workaround for RHEL registration as "localhost" 33bc901 Enable TLS for nova-metadata 0bf9c78 Add certmonger user profile to all overcloud roles 2bbc07a Add Ceilometer API and Collector service to roles_data f7a8470 Refactor setup_docker_host.sh as host_prep_tasks 10bb3d5 Provide sample environment for composable roles 06aa229 Swith to the appropriate ceph-ansible playbook on upgrade 9353db1 Add support for Dell EMC Unity Cinder backend 00afda8 TLS everywhere/docker: add nova services to environment 5594726 Remove iscsid from TLS everywhere docker environment 26789ee scenario002/multinode: do not run containerized Zaqar d3dfd28 scenario002/container: run Barbican non-containerized 043bfee Containerize Manila Share for HA 62d1213 README: Fix CI coverage layout bf85126 Add params needed for the ceph-ansible switch to containers playbook 3626095 Add support for installing Ceph MDS via ceph-ansible e148ac8 Render IP map and host maps according to network_data.yaml 4abb8ad Set default OSD pool size to 1 in scenario 001/004 containers 38d1968 docker: Stop all active ceilometer services during compute upgrade 5aa4eeb Add NeutronOverlayIPVersion parameter to neutron-plugins-ml2 service 060ff37 Also write an upgrade_tasks_playbook a465b8d Convert network templates to be rendered via j2 2597449 Delete docker-centos-tripleoupstream.yaml 6d1c06c Set file mode permission of Ceph keyrings a67a73e Enable TLS for containerized MySQL fb2c137 Extend VNC port range 1b11911 Enable TLS for containerized haproxy 35ed6c6 Don't unregister on system/resource delete 589b18d Fix Heat condition for RHEL registration yum update 630ce41 Fix metadata_settings in containerized mongodb 5144634 Bind mount tripleo.cnf in transient bootstrap containers 5f109d0 Containerize virtlogd 0c2c440 Consolidate deployment in major-upgrade-composable-steps ec50292 change sriovnicswitch to be first with openvswitch 6e352e3 Fix parsing of DockerCephDaemonImage parameter de3717e Pass monitor_address_block to ceph-ansible for mon_host ec58a4b Add environment to disable deploy steps 1801565 Add support for update_tasks 46279be Add RoleConfig output 38db8e7 Default docker_puppet_debug to false 76421eb Move deploy-steps-playbook to deploy-steps-tasks 316dfbd Add ServiceData to hidden params 9b79a9b Correct gnocchi-upgrade command quotes 7f63059 Consolidate puppet/docker deployments with one deploy steps workflow 003cd14 Convert cephstorage-role.yaml to role.role.j2.yaml e8278f7 Convert blockstorage-role.yaml to role.role.j2.yaml 612ba25 Convert objectstorage-role.yaml to role.role.j2.yaml d8e2531 Convert compute-role.yaml to role.role.j2.yaml 1aad286 Convert controller-role.yaml to role.role.j2.yaml 6d6a64a Internal TLS support for mongodb container 0d8a339 TLS everywhere: Configure CA for mongodb 9d630f8 Enable TLS for nova api and placement containers f24d5d4 Make containerized nova-api run with httpd ac79bf9 Enable TLS configuration for containerized Galera 74e7e67 Move HAProxy's public TLS logic from controller to service template 55936c4 Accept multiple registries in DockerInsecureRegistryAddress 31770e4 Remove duplicate Iscsid service in resource registry f634907 Mount NFS volume to docker container. e41139a Enable TLS configuration for containerized HAProxy c200335 Set virsh secret with an init step when using Ceph 4e5d431 Enable TLS configuration for containerized RabbitMQ 6af919e Make network-isolation-v6 environment rendered for all roles 96795a9 Make HA container bundle work on remote nodes 7d332c9 Fix cidr get_attr in custom networks 42d8a1c Make cinder-manage db sync run on only one controller during upgrade 9ed7100 Docker/TLS everywhere: Add telemetry and neutron services to environment a8a1d5b Keep dynamic network creation backward compatible. 507bed1 Add script to create tripleo-admin on deployed servers 65e9ffa Create parameters for haproxy TLS certs and keys 79aca26 Use number for KeystoneCronTokenFlushMaxDelay instead of string b19b88b Render VIPs dynamically based on network_data.yaml 0414e97 Change the directory for haproxy certs/keys to be service-specific 0800daa Update EventPipelinePublisher param description to include zaqar 0bc2403 Addition of Nuage as mechanism driver for ML2 59e29b1 Remove baremetal cron jobs on docker upgrade 0be4764 Stop and disable openstack-nova-compute service on compute nodes 7f84409 Make UpgradeLevelNovaCompute parameters consistent c05e72c Make many networking parameters consistent 4502b7c Make RoleParameters and key_name descriptions consistent f7a6d03 Add Telemetry services to scenario002 ba24419 Start redis service after upgrade 47cbe2f openstack-heat-templates: fix deprecation path 6a3ad6f Update capabilities map to match latest environments 25dab32 Fix up multipath docker indentation 50c1187 Cinder volume/backup containers shouldn't mount two paths at same point f04235c Set redis password hiera value in compute agent 1dd72e5 Fix ceilometer agent compute service name 87b0244 Run gnocchi upgrade with sacks in docker template 94a3c82 Adds stop and disable for libvirtd on upgrade to containers 975d862 Fix keystone, cinder, heat-api cron containers 7fb7ed7 Fix CA file bind mounting in containers 4767b2f Update TLS-everywhere docker environment 5264940 Remove empty metadata_settings from iscsid and multipathd templates 7968f37 MariaDB: create clustercheck user at container bootstrap e3ee596 Add missing metadata_settings from docker services 17804c7 Copy scheduler configuration from service/ironic to services-docker/ironic c3f9eaf Enable Dpdk after rebooting with Hugepages for OvS2.7 6073155 Also log docker-puppet.py puppet output to console 52e8df6 Changing the default port-binding configuration 5f313f2 Add 'ovn-controller' service 8a8369d Also log puppet output to console 0cb45d6 Generate MySQL client config if service requires database 7407267 Fix iscsid role data's section 736b1e1 Add environment for setting a custom domain name 090b33e Do not run clustercheck on the host after O->P upgrade 03af5f8 Enable Zaqar API SSL d11e256 Deploy Ceph in containers using ceph-ansible via external workflow ecbb6d9 Adds environment file for ODL + SRIOV 6d68ce0 Render isolated network templates using jinja2 56bf9cf Fix enable-ceph sample environment ca959c6 Noop controller pre and post config resources. 4645d9c Fix creation of iptables rules for non-HA containerized HAproxy 98d6d84 Add NodeTLSData to generic role.role.j2.yaml 05f7730 Don't curl metadata server in userdata example ed0b77f Provides Ceph config into OpenStack clients 75fbc08 Enable libvirtd_config puppet tag in nova-libvirtd docker service c2b2cc5 Adding Tuned Service aa5194f Contrail network realignement + DPDK enablement 24a8eaa add lbaasv2 to NeutronServicePlugins in octavia containers 605ad6f Modifying Cisco templates to support composable roles 59e31ad Consistent hostname format env for split-stack 5162183 Add parameters for Veritas HyperScale distributed setup. ce7a062 Release 7.0.0.0b3 793ec54 Add metadata_settings in Heat APIs 0a44085 Move docker_puppet_tasks calculation into services.yaml d364d9c Move services.yaml output calculation into Value resources 5b77325 Drop MongoDB from the undercloud 0fbc2ff Support configurable Zaqar backends 1cb49fd CI/scenarios : Add scenario007 for OVN services 4a7f339 Add support for nova live/cold-migration with containers fbd01c2 Mount /var/lib/neutron in neutron agents for metadata proxy c54e9b6 Make various password descriptions consistent c02a343 Make Deploy/UpdateIdentifier definition semi-consistent 8fb3da3 Make EnablePackageInstall and Debug descriptions consistent 0443e7a Revert "Disable systemd-networkd & systemd-resolved" e85f040 Cleans up exec workaround for ODL container clustering db845f7 Add all existing parameter mismatches to exclusion list 1b556b6 Fall back to non-containerized cinder-backup and cinder-volume for HA fb90179 Open up firewall for the control-ports in the bundles 2ff922b Move step_config/docker_config calculation into services.yaml c18b56e Add keystone cron container to run token_flush 3f31025 Add heat api container to run cron purge_deleted cd85745 Add cinder cron container to run db purge ee34cd6 nova_api_cron docker fix: add /var/spool/cron/nova 48cf302 Fix network-isolation.j2.yaml to ignore VIPs for disabled networks 8a305da Remove DockerNamespace references c243560 Revert "Use optimal (instead of default) tunables for Ceph on upgrade" 4c947ba Fix description of NeutronNetworkVLANRanges 60601d2 Switch MonitoringRabbitUseSSL to boolean 501f35a Disable env evaluation in workflow executions cdc3477 Remove non-containerized pacemaker resources on upgrade 5b84f8f Updated from global requirements 2fddc77 Add containerized manila-share to CI ef582bf Increase default RabbitMQ/Erlang TCP timeout from 5 to 15 seconds 223733c Stop Heat WSGI services on docker upgrade 391a38e Add nova::compute::rbd setting into nova-libvirt profile 3e0e0c7 Make collectd run as root inside the container d90d57a Use static environment for deployed-server neutron mappings fe72598 aodh: add gnocchi_external_project_owner config 9b122cd Ps Cinder: Added support for password less login 11b2546 Stop also openstack-swift-object-expirer when upgrading swift services 5e9f855 Use optimal (instead of default) tunables for Ceph on upgrade c1a4f8d Set name property on missing deployments 8e5bb30 Refactor iscsi initiator-name reset into separate service 68e5823 Handles {controller,NovaCompute}ExtraConfig deprecation in ovecloud.j2 91c1a81 Add composable services for the Veritas HyperScale. e76d84f Use a single configuration file for specifying docker containers. 28f926f CI/scenarios: set NotificationDriver to 'noop' 8b81b36 Add role_merged_configs into workflow executions environmentxi e1f7c0f Enable Neutron LBaaS Integration 1ccb5dd Add validation task in docker services baf6eee Adds network/cidr mapping into a new service property c011a34 Improve logs from ansible, puppet, docker-puppet.py c539189 Add a new role for ComputeOvsDpdk and clean-up parameters d24874c Disable systemd-networkd & systemd-resolved 303e192 Support deprecated controllerExtraConfig naming in role template b108289 Remove special-case of memcache node ips for ipv6 839c0b1 Adds check for existing yum process during the legacy minor update a6d2704 Move services.yaml to common directory 1a544f6 Ensure yum cache is ready before update a70a569 Corrected wrong os_region_name in glance-api conf file 4e32440 Fix ironic-pxe startup issues d1a350f Containerize Manila Share service 90317db Drop ComputeServices from environments/docker.yaml ea4188c Add support for running crontabs in containers d6ae3a8 Run rsync for Swift without xinetd d514516 Allow to set Notification Driver to 'noop' b5c110f Add dependency relationship between nested get_attr targets 6a34075 Remove hardcoded enable_load_balancer from Controller role d02faff Remove controller specific bootstack_nodeid 2168e7b Add PCI to nova compute container for passthrough support dddbd21 Allow modprobing from cinder-volume container e718f93 LVM in cinder-volume container without udev 366825e Don't confuse Heat with empty parameter_defaults 0477e15 Fixing a bug when setting a password for ODL controller 11b3cb2 Revert "Revert "Blacklist support for ExtraConfig"" 910ad64 Replace outdated instruction with link to upstream doc b524e0f Use ServerOsCollectConfigData value in output d0acf56 Add DeployedServerEnvironmentOutput b2de70f Bind mount needed cert for haproxy for HA too d773801 Added OvS permission workaround for enabling DPDK cf18e86 Copy only generated puppet files into the container 766de0c Disable network validation in multinode jobs 6d82c28 Remove ceilometer apache files on upgrade 2eb1476 Add in roles data validation 79e4379 Rename CongressApi to Congress (docker) c540733 Wrap ceilometer-upgrade in boostrap_host_exec aa3b3e2 Switch from oslosphinx to openstackdocstheme 566a40b Modify generic role template to support custom networks 9b3b1c6 Workflow input parameter update in plan-environment bbb3e60 Updated from global requirements b25a576 Fix typo in roles/Networker.yaml 6a151ec Enable Neutron LBaaS Integration 6a2f8bd Convert role templates to consume roles_data map 24e855d Adds docker OpenDaylight 6d36dd0 Update NovaCompute to consume CephClientKey e65a8cb Add ComputeHCI role and related validations cc77450 adding --config-dir parameters to neutron containers 53d5780 New environment file to configure containers. 6a64a4a Tolerate network errors in pingtest retry logic 425c9d4 Ensure boostrap_host_exec runs as root 630030a Fix typo in config_volume d53feb8 Bind mount needed cert for haproxy 1847a01 Allow volumes in puppet_config containers spec 9eb4311 cisco nexus: keep OVS on the Compute 19ebaad Add stack_name/ctlplane_service_ips into post-upgrade.j2.yaml f739fd0 Force mtime for tar used in container config md5sums af5eaf1 Make ceilometer crontab removal idempotent 0426d45 scenario001: containerize services for CI 83ed45b Add missing tags in iscsid upgrade_tasks ba01643 Install ansible-pacemaker on O->P upgrade afbbbdc Add ServerIdMap output 5867dd5 Make NeutronEnableDVR parameter consistent 697d816 Make Rabbit parameters consistent ccc37ba Make CephValidationDelay/Retries default consistent 244b8bf Remove ceilometer upgrade from other ceilometer containers 47d1794 Enable nova-api to run over httpd again d2e0dcd Default docker-puppet.py logging to INFO 142b5a2 Disable swift middleware ceilometer pipeline by default 891b6c7 Add missing xinetd/rsync container for Swift a474ae8 Add heat parameter for all of config_volume images 9ac5892 Add ctlplane_service_ips param to upgrade steps b537984 Exposing the ability to enable/disable the repository df1d691 Add README to ci/environments directory 7c1ecd0 Add Ceph configuration with PoolDefaultSize 1 c834dce Re-enable default for RoleParameters bb291c5 Make *AdminStateUp parameters consistent 0db2831 Make NovaWorkers descriptions consistent f572b76 Add validation check for divergent parameter definitions d66756b Allow stack_name into major_upgrade_steps.yaml 9c1940e Provides a list of per-service ctlplane IPs to the workflows env 71f1338 Allows use of Mistral workflows during deployment steps 0899b24 Add non-ha env file. acaa47a Add docker templates for octavia services b515698 Add flag to enable/disable the HAProxy stats interface 35f189f Temporarily disable containerized cinder 479edff Replace hardcoded 'br-ex' with NeutronPhysicalBridge parameter. f0807b5 Enable periodic task to discover cell hosts when ironic is used 4b91ae6 scenario004: containerize services for CI eb2f214 Fix manila-api volumes list b30bdb6 Adds service for OVS and enables ODL DPDK deployments fc7a6ea scenario002: containerize services for CI 78ea1bb Implement scenario006 with Ironic in overcloud 4e19c7a Enable DPDK on boot using PreNetworkConfig d6260f3 scenario003: containerize services for CI e873d56 Make collectd log to file 6993622 Revert "Blacklist support for ExtraConfig" 2c11e9e Fix descriptions on bonding templates 020f745 Create NIC templates for Neutron Networker composable role c444ab4 Fix fallback logic in run-os-net-config.sh efefc09 Fixes incorrect glance api network f80c937 Deploy ironic-api with WSGI 662a1a7 Specify file url when deploy-artifacts fails 57ee256 Make sensu-client log to file 488b894 Add sample usage of StorageMgmt network for compute nodes 43edc49 Move glance::api::show_multiple_locations within GlanceApi edfcb50 Update cinder-netapp-config environment 2cd328d Add release note for generated sample environments 94bd9b1 Add an upgrade task for redis service 93b42ba Remove add_listen: false from Horizon hieradata 0b4635e Test Horizon by default in multinode jobs 37bb0ee Fix roles dict object' has no attribute 'lower' error 53407bd Add node's FQDN to mysql certificate request and CA file 6d44f72 Comment parameters for registry in docker tls env 39ee601 Re-enable docker service in docker.yaml 9786bf5 Updated from global requirements d6c0979 Blacklist support for ExtraConfig 74595a7 Make a copy of files touched by puppet in container 6e72aa9 Fall back to non-containerized cinder-backup to unblock OVB CI 0e0ccda Fall back to non-containerized cinder-volume to unblock CI 4ec13cc Make fernet max active keys configurable bf294ea Only pass distinct services to enabled_services list abf4444 Ignore case for bootstrap node checks a591421 Add VipMap output 562ee3a Add split-stack environments c47ca9c Add DeploymentSwiftDataMap parameter c8a266d Add os-collect-config data as an output 4f58243 Update CloudDomain description c4a247d Add Ec2Api to container based deployment e82ab30 Input enabled_services in all-nodes-config as comma_delimited_list 9217222 Fixup for manila-api containerized service 977b8ec Add an example IronicConductor role 17e934b Remove trailing whitespace 73109ba Add a docker-ha.yaml environment file for containerized HA deployments b8a078c Update Panko api port 248099d Fix race conditions between containers 87160b9 Remove reference too puppet/services/ironic-pxe.yaml 47a9472 Fix network names when using network isolation 350e1a8 Enable heat/puppet to manage the fernet keys and make it configurable 490e237 Use KeystoneFernetKeys instead of individual parameters f600d45 Replace NO_ARCHIVE block with single call to rsync 0849c76 Containerize Ceilometer Agent Ipmi 426de20 Add fqdn_external 80f6907 Configuration for containerized MySQL clients 15e74ab Add Nova Vncproxy service to containerized deployment e58faa9 Add Nova Consoleauth service to containerized deployment 31f773a Bind mount internal CA file to all containers 8fc970a Conditional LVM storage setup for cinder-volume cba5288 Make network-isolation environment rendered for all roles 6dbb863 Unblock CI by reverting to non-containerized HAProxy 0c66118 Modify PreNetworkConfig config inline with role-specific parameters 7ec9860 Add support to configure Num of Storage sacks afef874 Fix IronicInspectorAdmin to be https 204a582 Add nested sample environments for inject-trust-anchor 8d086b1 Add storage sample environments 7613306 Add neutron-midonet sample environment f503d1b Support config dir for env generator input files 4e24c8c Sample environment generator 834fe9c Moving *postconfig where it was *postpuppet 388a133 Containerize Manila Scheduler service 4a48ad8 Add support for Cinder "NAS secure" driver params 651633f Remove deprecated multinode-container-upgrade.yaml 8b9a24c Containerize Sahara 54c31f6 Docker service for Cinder Volume 7f9f066 Docker services for Cinder Backup 402b228 Docker services for Cinder Api and Scheduler 9e6c109 Containerize multipathd 15c93fd Move iscsid to a container efb36b4 Generate HAproxy iptables rules for containerized HA deployments b327ea5 Pacemaker HA suport for OVN DB servers 2d5f751 Execute Swift ring up-/download in containerized environments 0595354 Add support for autofencing to Pacemaker Remote. 22a283a Providing parameters specific to a workflow via plan-environment 9e759c9 Don't mount all of config-data /etc, /etc/httpd 30bf499 Remove pip install paunch 84e37fe Fix rpms being installed via DeployArtifactURLs 316cc25 Remove duplicate docker/puppet services.yaml 2c0355b Configure credentials for ironic to access cinder 19ef017 Add templates to configure Ironic inspector b749a1e Revert "Add support to configure Num of Storage sacks" af38284 Make container names consistent 3df4eff Add detach to docker-toool 43d08a0 Fix bug in docker-toool where values are sometimes empty. d8c0c33 Change HorizonSecureCookies default to False 2a138df Run the nova-compute container as the nova user 396cd6b Containerized collectd e77de0d Write md5sum for service config directories be336e2 Fix typo in haproxy docker mapping fdb233e Containerize Cinder-volume for HA c5ce649 Containerize Cinder-backup for HA f38b68c Containerized Sensu client 87603cd Containerize Tacker Services 26b77f7 Containerize Congress API service ef8572a Fix containerized SwiftRawDisks usage 7a36855 Role Specific parameter for nova-compute service 35c22be Configure crl file for HAProxy 83ff2f2 Configure CRL URI if TLS in the internal network is enabled e9ad7ba Role Specific parameters for neutron-sriov-agent service e825cda Modify libvirtd container command line when TLS is enabled e0bc8d6 Dell SC: Add exclude_domain_ip option 0b259c8 Standardize example role definitions f02d691 Mount /var/run/libvirt on ceilo agent compute 00be6e6 Add host logging for redis service template c3ead7a Containerize Manila API service 321ecf9 Fix the disable expirer to remove crontab a915b15 Add support to configure Num of Storage sacks d48299c Use Deployment actions for blacklist d27c778 Don't create networks if neutron is not enabled 1f946b6 Map /etc/ssh/ssh_known_hosts to all containers e7b7d4a Ensure /etc/ssh/ssh_known_hosts exist in docker config-data. 93151cc Stop/disable l3 agent in docker service upgrade_tasks 1e89970 Ability to enable/disable debug mode per OpenStack service 86ca871 Updated from global requirements 00c21a9 Fix upgrade tasks to use correct service name 03811f1 Convert puppet and docker steps to ansible 233a71c Containerize HAProxy for the non-ha case 27197d0 Release 7.0.0.0b2 d6bda4e Update metric processing delay default 0413a12 Containerize Redis for HA b5c3bcc Fix CephPoolDefaultSize typo cbf74d6 Increase default for NovaReservedHostMemory to 4096 e3c8803 Server blacklist support 6148018 Fix the constraints for THT params NeutronDpdkCoreList and HostCpusList cb10ab2 Upgrade gnocchi without skip-storage 847a1fe ceilometer-expirer: remove the crontab during upgrade 8b1bcf0 Containerized nova-compute working with Deployed Server 03f208b Add sshd service to containerized compute role f48c10c Container-specific variants of scenarios 001-004 c4e3bbe Handle upgrading cinder-volume under pacemaker 0751d69 Add heat environment for disabling all telemetry services 804fd34 Enable arp_accept for all interfaces 3744749 Add ignore_projects to filter gnocchi events 359fcdf Align optional services with optional services-docker ee2c065 Add support for linuxbridge agent 483a386 Include mongodb in scenario002 job bccfedc Containerize RabbitMQ for HA 0bfadac Containerize MySQL for HA 4d4b503 Containerize HAProxy for HA 76ee9d1 Remove duplicate PreConfig definition a42b93d Fix race condition between docker-puppet and container steps 4f2de30 Containerize clustercheck galera monitor for HA deployments aca5ec7 Example environment file to use Neutron BGPVPN driver with ODL cdfe035 Remove osd_pool_default_min_size to allow Ceph cluster to do the right thing by default 51da97d docker bootstrap service commands b29441b Updated from global requirements a4146b3 docker/TLS-everywhere: Add metadata_settings output to templates d40ac59 Example environment file to use L2GW Neutron Driver with ODL 9ede958 Disable mongodb by default 780b751 Use disabled suffix for disabled service names 553b95d Modify vhost user socket directory's default value in environment file 25bb189 Re-Add ceilometer expirer to roles_data 3c21152 Add Neutron L2 Gateway service to scenario 004 9e4bbe4 Change database sync timeout from 300 to 900 in low-memory-usage environment file. 3c9733f Add RoleNetHostnameMap output 6a564b7 Role Specific paramaeter support for neutron-ovs-dpdk-agent service 0a0e2ee Update the template_version alias for all the templates to pike. 28308e8 Make sure that manila share is created after share type 9efa817 neutron: set enable_dvr = False if NeutronEnableDVR is false 9235efc Add containerized neutron-metadata agent 47dfa57 Comment parameters for registry in docker.yaml 633ab23 Add l2gw neutron agent support fa94191 Use upper-constraints for tox f609044 Store role_data in an OS::Heat::Value resource 1a43e3b Containerize Horizon c96130b Consolidate writing json configs with HostPrepTasks 6bb2d9e TLS-everywhere: Configure CA for apache 30bd4f5 Only set apache certificates if TLS everywhere is enabled b743b82 TLS everywhere: configure mongodb's TLS settings 7962dd4 Don't delete failed docker-puppet containers 2d85067 Containerize Ceilometer Agents a37debd docker/internal TLS: spawn extra container for neutron server's TLS proxy 563a900 Use neutron-server image for neutron services 1651a18 Optimize kernel neighbour table for large scale environments 00551e7 Fix resource type in ObjectStorage role 93bb464 Add missing type for RoleParameters parameter 22433c5 Fix absolute paths in scenario001-multinode.yaml c634f4e Default snmp to less verbose logging f0affa3 Update the services README documentation a096dda Add role specific information to the service template 71efc9f docker/internal TLS: spawn extra container for glance API's TLS proxy 3b53db4 docker/internal TLS: spawn extra container for swift's TLS proxy e75822e Add params to manage and configure pipeline publisher 66b39c2 Deprecate Ceilometer Expirer eb923b0 Disabling replacing fernet keys from puppet 787e504 Fix paths for optional docker services d4a7cfb Add missing release note for cadf environment 02a086b Change neutron-metadata number of workers determination method 951d66a multinode-container-upgrade.yaml usable for mixed upgrade c6ea4bc Make docker-puppet.sh a static file. 3e3569b Use httpd in Zaqar docker service 345150c Make upgrade steps unconditional to fix broken dependencies a378a01 Containers: Bind mount directories with the key/certs for heat 4ea0307 Add syslog socket to common containers volumes dde4f6d Set puppet-redis managed_by_cluster_manager to true 2faedff Enable mistral to run under mod_wsgi b26fe7d Use the make_url function to build URLs 58a8b28 Mount hostpath logs on /var/log 0b07b5c Remove nova placement config for compute service node on upgrade a7b5689 Add StackUpdateType to set hiera on upgrade 2244290 Fix up pacemaker_status test in yum_update.sh 29a8a46 [N->O] Add openstack-nova-migration to compute nodes. 3d8af2f Restrict nova migration ssh tunnel a19297a Add back Heat conditions in upgrade workflow e9accfc Configure snmpd auth params in ceilometer profile 32fed0c Set reasonable TTL defaults for Ceilometer DB e33e766 Expose metric delay processing metric be4bc8f Internal TLS: Use specific CA file for mysql-client 570583c Use httpd in Heat docker services 6ff78ce Internal TLS: use common CA file parameter for libvirt CA cert 82ff1ac Internal TLS: Use specific CA file for haproxy 95fbda4 Disable ComputeNeutron* for cisco-nexus-ucsm e5b3b67 Add deprecation notes for panko service 4923f5c Initial VIP ipv6 minor update code 6ec49bd snmp: add SnmpdBindHost parameter b8f97f5 Ensure AllNodesExtraConfig runs before AllNodesDeploySteps 77b4bd5 Fix for the resource ControllerPostPuppetMaintenanceModeDeployment 7735052 Add parameter Ec2ApiExternalNetwork for VPCs c7471e7 Move containers common volumes from yaql to list_concat 15fa68c Use list_concat for metadata_settings for haproxy 746c4d2 Improve logging for docker-puppet.py 0d59488 Enable splay for os-collect-config f8b5cac Disable Telemetry services on undercloud containers 4d0dfd8 Allow to deploy Octavia API & Neutron Server on 2 different nodes 2c727c4 Support Redfish hardware in the overcloud Ironic 7d87b82 Unset the UpgradeInitCommand on converge 61d1905 Remove deprecated minor update pcs code e17590c Add $STACK_NAME input var f11c223 Fix redis container 23201d9 Disable default vhost for apache 46b8a00 TLS-everywhere: Add missing profiles to docker compute services a604160 upgrades: deploy mod_ssl when upgrading apache 430e4d3 Open ports 443 and 80 on haproxy's firewall when horizon is standalone 90fc4b2 Change the default for rabbitmq back to ha-mode: all d153d88 Fix etcd_init_task volume 41c7e39 Upgrade failure when service parameter is changed for PankoApi 2cb2d8d Deprecate ceilometer collector ba44524 Fix dependencies for PreConfig/PostConfig resources f1f6b5d Deploy ceilometer_auth_enabled to node containing keystone 8d1f390 Pass httpd service_name to Zaqar bcf98df Updated from global requirements 69be0c2 Dell SC: Add secondary DSM support 7360a7e Containerize etcd service 258c6ce Merge pre|post puppet resources into pre|post config. 2392bd7 Fix containerized RabbitMQ service deployment 6d900c8 Containerize Redis service 61632a6 Remove no longer used environment files - older upgrade workflows 8c17116 Don't attempt to configure live migration 0a5d85e Add defaults for docker puppet tasks 79c2d0f N->O Manual puppet commands have the right modulepath. 5412dc9 Run Zaqar with httpd in puppet service a057123 glance: deploy services with Keystone v3 endpoints 5e14f95 SSHD Service extensions 73651aa Containers: disable downloading rabbitmqadmin 6a15e56 Add missing tag to nova-placement docker image 88a3168 N->O upgrade, fix wrong parameters to nova placement. 2fda963 containers: TLS in the internal network for telemetry services fa740c5 TLS-everywhere: Enable for TLS libvirt live migration e61f76b Add IronicInspector settings to the network map 152df01 scenario001/pingtest: enable Gnocchi resource again 65e643a Run token flush cron job hourly by default f8f295b Introduce common CAs to be mounted to the containers e81ddeb Introduce common resources for docker templates 0d8f11f Support for external swift proxy ee9d633 Add all hosts to HostsEntry output 7f42098 aodh-base.yaml uses a hard coded keystone region name 2954564 Revert "Use httpd in Zaqar docker service" 0271a63 Add migration SSH tunneling support 25fe4bf Rework DOCKER_PUPPET_CONFIG validate tool 7d3552a SSH known_hosts config cc1a8f9 Validate NTP servers 87ce5d4 Pluggable server type per Role ef502e9 Fix nova-compute service name in upgrade steps 7862388 Use underscore for Aodh and Gnocchi's container names 789ce85 Add service config settings to agent services df79215 Add name and description fields to plan-environment.yaml be274f1 Add tags to roles 4600843 Non-ha multinode environment for container upgrade job df36f22 Use comma_delimited_list for token flush cron time settings dd43ba1 Bind mount directories that contain the key/certs for keystone 39f63c5 docker/all: Bind-mount OpenSSL CA bundle 93e0e58 Use -net=host for docker-puppet.py config gen 03421f8 Add RoleNetIpMap output to overcloud.j2.yaml 349eb93 docker: use noop_resource for Nova_cell_v2 87f41c6 Change the directory for httpd certs/keys to be service-specific 5d9a8a0 Add Docker to services list in multinode CI environments 2eddc12 Do not log errors on non-existing container d22484d Add IPv6 disable option 5fb637c Update Dell EMC Cinder back end services 59fedd3 Add networking-vpp ML2 mechanism driver support c533a32 Add composable role support for NetApp Cinder back end 4713f2b Add upgrade tasks for gnocchi container services b5b6681 Replace references to the 192.0.2 network 9985533 metadatahook: Use coalesce to handle null values 687c53a Remove yaql call when building logging_groups 625db6e [ironic] expose default boot_option in configuration and change it to local 76c1c0c Decouple Swift ringbuilding logic 5e196c3 Enable internal network TLS for etcd 1f172ca Prepare 7.0.0.0b1 (pike-1) 60e3687 Use conditionals for neutron and glance worker defaults 3434767 Add environment to preselect only VIP IP addresses deb9b4c sensu: fix upgrade case when service is added 0ea21f5 Timeout early on pcs cluster status check0 during upgrade. c4fd828 Allow for update after RHEL registration e9abec8 Add Docker service to all roles 92b238e Avoid awk error in hosts-config.sh for large deployments 09be1e1 Add password to authtoken section in congress.conf 4b4425d Add BGPVPN services to scenario004 d72b0b9 Replace six.iteritems() with .items() e811bb2 Fix conntrack proto sctp module 99371a9 Disable Manila CephFS snapshots by default 9945538 Adds service for managing securetty 78f4a33 Add initial support for NSX plugin acc20aa ovn: Add missing configurations required 347f543 Add trigger to setup a LDAP backend as keystone domaine 2ffcb33 Remove "Core" Service from the CI Environment file a87b563 add configurable timeouts for DB sync 9e4375d yum_update.sh - Use the yum parameter: check-update 86a009d Ironic containers: chown /var/lib/ironic correctly 9e27118 Fixing acronym for BGPVPN composable service 8d03b9d Allow configuring enabled hardware types for Ironic 57a2648 Use httpd in Zaqar docker service 16ba2ee Use kolla api to set ownership dba8795 Add parameters for internal TLS for swift proxy 5e934cd Use the local collector to bootstrap deployed servers 1f8de41 Enables support for configuring Cinder with Pure Storage FlashArray storage backend 0e858a2 Add monitoring agents deployment to CI 299b9f5 Enforce upgrade_batch_tasks before upgrade_tasks order d286892 Ensure upgrade step orchestration accross roles. f209f0a Increase documentation about parameters 75d4883 Add params to tweak memory limit on mongodb 6ddcd9a Add support for "neutron" Ironic networking plugin d5309c9 Addition of firewall rules for Nuage a216934 Purge initial firewall for deployed-server's 91e7a54 Remove kolla_config copy from services 66551bd Remove not-working all-in-one upgrade environment 0e8e8a9 Disable ceilometer API 04097e8 Add missing name properties on deloyment resources 0d04302 Set auth flag so ceilometer auth is enabled 4656323 Update ceph-rgw acccepted roles to fix OSP upgrade 2598388 Add special case upgrade from openvswitch 2.5.0-14 d2d319e Add manual ovs upgrade script for workaround ovs upgrade issue eb426db Setting keystone region for tacker 5b4b783 Remove EC2 endpoint from EndpointMap ffc3ea0 Change heat and mistral to use v3/ec2tokens url 3e15937 Add logging agents deployment to CI d7c00f0 Add l2gw neutron service plugin support 56535c8 Don't check haproxy if external load-balancer is used. 0e30838 Output service_metadata_settings in docker services.yaml b1c95b6 Do not install openstack-heat-agents 9c4c15d Add ceilometer ipmi agent 6b03cba Add NeutronDnsDomain heat option, undercloud fix 7268d1a Add network sysctl tweaks for security 1ca3c2c Qpid dispatch router composable role 91053af Allow to configure policy.json for OpenStack projects 568573b Include panko in the default dispatcher a314ce5 Grouped all the Operational tools 0b3f5ed Updated from global requirements d39c952 Run cluster check on nodes configured in wsrep_cluster_address. 57c06dd Modify pci_passthrough hiera value as string 4483378 Disable core dump for setuid programs 10cb0cf Add missing ec2api::api::keystone_ec2_tokens_url config 502b345 Fixes port binding controller for OpenDaylight f7f1a8a Remove 'Controller' role references from overcloud.j2.yaml 332e8ec Remove kolla_config copy from keystone service. 4b3ec85 Swift auth url should use a suffix 3bd4a3f MySQL: Use conditional instead of nested stack for TLS-specific bits 7d0f279 Apache: Use conditional instead of nested stack for TLS-specific bits 69c213e Rabbitmq: Use conditional instead of nested stack for TLS-specific bits 670399a N->O upgrade, blanks ipv6 rules before activating it. 6568285 docker/keystone: Bind mount entire fernet keys repository 276aca7 Stop openstack-nova-compute during nova-ironic upgrade bfd4854 N->O Upgrade, make sure all nova placement parameter properly set. 9aaa5ba Rework container volumes as hostpath mounts 4883e8b [N->O] Fix wrong database connection for cell0 during upgrade. ae10ae4 Fixes OpenDaylightProviderMappings hiera parsing ab4adb9 [N->O] is creating 2 default cell_v2 cells 3749459 Add missing metadata_settings from neutron-api profile 9445b0e Fix usage of CinderNfsServers 2c4aee2 Adds Horizon secure cookie map. 583a602 Install openstack-selinux for deployed-server cdbf1ca Nic config mappings for deployed-server 48a38a1 Fixes missing firewall rules for neutron_ovs_dpdk_agent service 1323fbe Run nova-api hosts discovery after nova-compute start 29b74f4 Remove unused KeystoneRegion parameter from gnocchi-base 947a714 Only set EnableConfigPurge on major upgrades c4c9436 Remove useless trailing '\n' in /etc/hosts file. 17afce8 docker/keystone: Actually set fernet as the default token provider 7f5c616 docker-puppet: skip empty volume entries 51c9159 Restrict Access to Kernel Message Buffer 7ce044a Use tripleo profile for bigswitch agent 7661d1f Change kolla_config from required to optional in pep8. 32be46f Setting keystone region for congress 45c909a Enables OpenDaylight clustering in HA deployments 1a4ece1 Keep existing data for containerized ironic-conductor 8eaa5f8 Re-Add bigswitch agent support bae48e6 Make sure PrePuppet runs before any Deployment_Step f10847c Containerize panko api service b6a7ac4 Bind redis-sentinel to its network 129881f Add NodeCreateBatchSize parameter fd15a09 Pick dynamically the first node for stack validation 91d7d8c Explicitly configure credentials used by ironic to access other services efbf120 docker/keystone: add metadata_settings to output 1c4016a docker: Add metadata_settings to optional parameters for yaml validate 555eb6d Keep existing data for containerized Libvirt 03e39d6 Keep existing data for containerized Swift 55d17ca etcd: secure EtcdInitialClusterToken parameter f77edeb Add upgrade tasks for aodh containers 551baca Don't disable satellite repo after registration 521a897 Cleanup no longer used upgrade files c737eea Switch keystone default provider to fernet ee09ed6 keystone/containers: Add support for fernet keys 0d407a5 Keep existing data for containerized RabbitMQ 3c51cad Keep existing data for containerized MongoDB cd88f4d Keep existing data when moving to containerized MariaDB 038eae0 Fixes multiple issues with retry function in rhel-registration. 5db25cf Update README for Glance coverage 209d8f5 Add bindep support b800b14 Containerize gnocchi services 31bc6ea Add certmonger-user profile 20003d6 congress/tacker: switch auth_uri to use uri_no_suffix b19d630 Don't try to run os-net-config from yum_update.sh 0f48e7b gnocchi: deploy services with Keystone v3 endpoints 12ef0e5 telemetry: switch auth_uri to uri_no_suffix a24cb33 cinder: switch auth_uri to uri_no_suffix 154e2d2 heat: switch auth_uri to use uri_no_suffix 537f789 ironic: switch auth_uri to uri_no_suffix c82a1ae manila: switch auth_uri to use uri_no_suffix 8365e41 neutron: switch auth_uri to uri_no_suffix 4654175 nova: switch auth_uri to keystone versionless endpoint 6050809 Tasks hook for preparing BM host for deploying containerized services 801ccd6 Remove unnecesary code to enable panko-api 841d305 Upgrades: wait for galera to be settled 3bbf935 Remove double quotes in the "when" Ansible conditional. 4b1ea24 Add upgrade tasks for heat over httpd 6d35336 horizon: switch keystone_url to use uri_no_suffix 7923184 Remove ha-by-default release note 3de4324 Clarify Kolla build overrides for tripleo 459e124 Containerize Aodh alarm services b67ad06 Add BGPVPN composable service 1f018ba Cleanup docker services templates 97d891e Add pep8 tests on docker/services/* ab83e77 Remove docker_image sections (unused) aedb22b Pass hieradata relevant for httpd in the Heat APIs 17f4cf9 Update docs per new puppet_config interface 21babd3 Improve SSL support for Sensu 1992282 Pass hieradata for internal TLS for RabbitMQ af03e4d docker-puppet.py fail if any worker fails 900ddfb Enables increasing mariadb open files for noha deployments 89ee882 Move zaqar into services-docker 001868a Move mistral into services-docker c28f76c Move ironic into services-docker b228d56 sahara: configure keystone_authtoken parameters d4549c7 barbican: Use versionless keystone endpoints 64500bf Move nova-scheduler data into puppet_config 46b5911 Enable Docker service for Compute role 6c6c784 Remove glance-base service 38a0dc7 Add puppet_config to docker neutron-l3 service e270bed sshd template, rename hiera key e88dfbc Fix bogus parameters in get_param ee9c789 Enable keystone cadf notifications fb748ba Enable composable upgrades for docker service templates 8febc6e Add docker composable service template 805109b Add validation for VPP upgrade tasks 0b05d7f Cinder-api upgrade: use httpd instead of apachectl c5d10cd Use the new hiera hook in all remaining templates a511600 Add network_data.yaml to encapsulate list of networks for j2 8e70a24 Update properties being set for octavia rabbit properties b9aa2c1 Removes old environment file references 9bbd43b Fix httpd dir create to not error if exists 3e6147d Remove root_template and root_environment from capabilities-map.yaml 1792712 etcd: Get FQDN from hiera instead of puppet fact 039483d ec2-api: Get FQDN from hiera instead of puppet fact 9025a3b Remove the openvswitch special case upgrade code 480baa3 Fix Panko API upgrade process c68704b Overwrite nova placement with stub for docker 151d614 Enable IronicPxe in the undercloud 3c44184 Removes opencontrail reference 7273a3d Add upgrade task for panko api 41514d0 Upgrades: fix up the rabbitmq HA mode like in new ocata deployments 6108501 Put docker puppet config in puppet_config dict 20d7901 Adds upgrade tasks for OpenDaylight services dedef90 Add mistral service support for composable upgrades 7c84a9b upgrades/validation: only run validation when services exist c5931fd Containerize neutron-l3 agent b8695b8 Associate unmapped hosts with cell mappings 3cba271 Pass the DOCKER_* env vars when running docker e405a74 Add plan-environment.yaml 626b820 Make UpdateDeployment depend on NetworkDeployment 93561bd Switch to dict format for docker_puppet_tasks 87569bd Use --disable= in subscription-manager to avoid shell expansion. e9a2fdc Disable exit on error for pacemaker commands for update flow fb78213 Put service stop at step1 and quiesce at step2. d545326 upgrades: fix ec2api conditional 6ff979a Align hyperconverged-ceph.yaml environment and adds some validation a9c64bd Adding keystone parameters for Tacker 3c5345f Make neutron dhcp agents per network conditional 242fd30 Adding keystone parameters for Congress 3c3afe6 mysqlclient: Use actual parameter in puppet to set bind-address 2cebb99 Add zaqar service for composable upgrade b6214b0 Add support for upgrading ec2-api 489761e Add etcd composable upgrade steps 5838d6f Add auditd upgrate steps db02313 Add upgrade support for Horizon 9a4b972 Configure SSL connection for MySQL client via client config file f08124e Deploy CI scenarios with Pacemaker 40a5003 Deploy versionless keystone endpoints (for keystone only) 0ea941a Add VPP composable service 96618f8 Install openstack-heat-agents on upgrade 63cb515 Install openstack-panko-api on upgrade 873ab8e Switch central and compute templates to use polling agent b352d68 multinode_major_upgrade: enable Pacemaker 3d835de Enable docker for all roles 28b908a Add option to diff containers after config stage. 5593877 Upgrade nova-api/scheduler/conductor packages at step3 not step2. 864cb73 Adding definition of backup_flags 957fbb1 Make heat max_json_body_size configurable 55c587d Containers: workaround for neutron DB sync 403b7c9 Added release note for NeutronExternalNetworkBridge deprecation f09f50f Add step to docker_puppet_tasks e8df835 Enable TLS for swift-proxy's ceilometer notifications 8448c92 Increase ansible-pacemaker default service start timeout a678935 Remove forgotten sahara dbsync from step5 upgrades tasks 3002edc Adds http proxy support for registering RHEL overcloud nodes 301cb39 Add docker mysql service 135cc29 Adding the ip_conntrack_proto_sctp kernel module 09d8c12 Update the Nova Endpoint information for Cinder 5a74923 Parallelize docker-puppet.py 27b6188 Write out a json file containing container startup info and create tool to use it. ae1ce1c Containerized Swift Services. f196adf Add docker Glance API service 3705549 Containerized MongoDB ff22a06 multinode/upgrade: add nova services to environment f3772c6 Re-add the disable_upgrade_deployment note in roles_data.yaml 99f0b84 Increase apache ServerLimit and workers to 100 8974f54 Improve the README for the _setting keys a3df167 Add checks in ansible upgrade tasks for CephMon and CephOSD 161cd3c Enable panko service by default on overcloud 5d33537 Add step0,validation checks for heat services bbe2748 Adding upgrade steps to congress service 0360821 Add docker memcached service 41fe579 Add docker rabbitmq service 8eda7b1 Add docker zaqar service e75e5dd Add docker mistral services 0466def Add docker neutron services d010442 Add docker nova services 838d54b Add docker heat services 10ba1fa Stop nova-api before upgrading package 077c2ee Adding upgrade_tasks to tacker 9043168 Make the DB URIs host-independent for all services c5e5d21 Sort ResourceGroup resource list f8cc350 Add environment for deployed-server with pacemaker 529768a Generate Pre/Post Puppet Tasks for all roles 47f2579 Don't assume default network names in net_ip*map 4061dfe Switch to net-config-multinode e6ed8a7 Install nova-placement package on upgrade 1157bdb Add OpenDaylightConnectionProtocol parameter to opendaylight-api service 54438d3 Update ci environment for multinode jobs to support Ceph 1edfb6f Add missing releasenotes for Swift ring management b3b04eb Apply post-upgrade step to not run puppet in post upgrade 4a73d99 Update reno for stable/ocata 1a719a0 Align HCI environment file with list of services from roles_data 01a91d3 Add Newton to Ocata UpgradeInitCommonCommand b3fe9f7 CI fix broken references to multinode-core.yaml c6dc623 Enable docker services in the registry 2902640 Add docker ironic services 84626c8 Add docker_puppet_tasks initialization on primary node 500bec5 Add docker keystone service ad2ea29 docker: new hybrid deployment architecture and configuration d8e75b2 Add explicit swift check to tripleo_upgrade_node.sh 237cd20 Apply puppet in non-controller script in step. bae2d11 FQDN validation db58ec8 Deploy Manila with CephMDS in scenario004 826e96d Adds 'trunk' to ODL env service plugins c150097 Configure authtoken in nova-placement api service b323f8a Automatically backup and restore Swift rings from the undercloud b2ee58c Don't recalculate EndpointMap to get outputs 9b70330 Add release notes for Manila/CephFS with managed Ceph 892827c Set number of Swift proxy server workers to auto 21d2afd neutron: don't set external_network_bridge option by default 480e35a Keystone token flush cron job should log to a file 1066241 Fix a typo ed2ed55 Add support for node groups in NetConfigDataLookup Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + .gitreview | 1 + .testr.conf | 4 + README.rst | 145 +- all-nodes-validation.yaml | 14 +- bindep.txt | 4 + bootstrap-config.yaml | 2 +- capabilities-map.yaml | 579 +++-- ci/common/all-nodes-validation-disabled.yaml | 43 + ci/common/net-config-multinode-os-net-config.yaml | 6 +- ci/common/net-config-multinode.yaml | 6 +- ci/environments/README.rst | 4 + ci/environments/ceph-min-osds.yaml | 2 + ci/environments/multinode-3nodes.yaml | 12 +- ci/environments/multinode-containers.yaml | 77 + ci/environments/multinode-core.yaml | 38 + ci/environments/multinode.yaml | 31 +- ci/environments/multinode_major_upgrade.yaml | 31 +- .../scenario001-multinode-containers.yaml | 158 ++ ci/environments/scenario001-multinode.yaml | 66 +- .../scenario002-multinode-containers.yaml | 79 + ci/environments/scenario002-multinode.yaml | 40 +- .../scenario003-multinode-containers.yaml | 76 + ci/environments/scenario003-multinode.yaml | 22 +- .../scenario004-multinode-containers.yaml | 101 + ci/environments/scenario004-multinode.yaml | 59 +- .../scenario006-multinode-containers.yaml | 62 + .../scenario007-multinode-containers.yaml | 83 + ci/environments/scenario007-multinode.yaml | 77 + common/deploy-steps-tasks.yaml | 87 + common/deploy-steps.j2 | 361 +++ common/major_upgrade_steps.j2.yaml | 198 ++ common/post-upgrade.j2.yaml | 4 + common/post.j2.yaml | 1 + common/services.yaml | 275 +++ default_passwords.yaml | 2 +- deployed-server/README.rst | 4 +- deployed-server/ctlplane-port.yaml | 2 +- deployed-server/deployed-neutron-port.yaml | 2 +- .../deployed-server-bootstrap-centos.sh | 6 +- .../deployed-server-bootstrap-centos.yaml | 3 +- deployed-server/deployed-server-bootstrap-rhel.sh | 6 +- .../deployed-server-bootstrap-rhel.yaml | 3 +- .../deployed-server-environment-output.yaml | 55 + deployed-server/deployed-server-roles-data.yaml | 13 + deployed-server/deployed-server.yaml | 11 +- deployed-server/scripts/enable-ssh-admin.sh | 60 + deployed-server/scripts/get-occ-config.sh | 38 +- environments/cadf.yaml | 2 + .../ceph-ansible/ceph-ansible-external.yaml | 30 + environments/ceph-ansible/ceph-ansible.yaml | 12 + environments/ceph-ansible/ceph-mds.yaml | 2 + environments/ceph-ansible/ceph-rgw.yaml | 5 + environments/cinder-dellemc-unity-config.yaml | 14 + environments/cinder-dellemc-vmax-iscsi-config.yaml | 9 + environments/cinder-dellps-config.yaml | 1 + environments/cinder-dellsc-config.yaml | 11 +- environments/cinder-netapp-config.yaml | 6 +- environments/cinder-pure-config.yaml | 13 + environments/collectd-environment.yaml | 32 +- environments/composable-roles/monolithic-ha.yaml | 59 + .../composable-roles/monolithic-nonha.yaml | 59 + environments/composable-roles/standalone.yaml | 84 + .../contrail/contrail-net-storage-mgmt.yaml | 37 + environments/contrail/contrail-net.yaml | 31 +- .../contrail/contrail-nic-config-compute.yaml | 167 -- environments/contrail/contrail-services.yaml | 27 +- environments/contrail/roles_data_contrail.yaml | 40 + .../deployed-server-deployed-neutron-ports.yaml | 4 + environments/deployed-server-environment.j2.yaml | 11 + environments/deployed-server-environment.yaml | 4 - .../deployed-server-pacemaker-environment.yaml | 4 + environments/disable-telemetry.yaml | 23 + environments/docker-ha.yaml | 22 + environments/docker-network.yaml | 4 +- environments/docker-services-tls-everywhere.yaml | 54 + environments/docker.yaml | 80 +- environments/enable-internal-tls.yaml | 10 +- environments/enable-tls.yaml | 4 + environments/external-loadbalancer-vip-v6.yaml | 7 +- environments/external-loadbalancer-vip.yaml | 7 +- environments/fixed-ip-vips-v6.yaml | 21 + environments/fixed-ip-vips.yaml | 21 + environments/host-config-and-reboot.j2.yaml | 18 + environments/host-config-pre-network.j2.yaml | 16 - environments/hyperconverged-ceph.yaml | 15 + environments/inject-trust-anchor-hiera.yaml | 4 + environments/inject-trust-anchor.yaml | 4 + environments/ips-from-pool-all.yaml | 2 +- environments/logging-environment.yaml | 2 +- environments/low-memory-usage.yaml | 6 +- environments/major-upgrade-all-in-one.yaml | 2 - environments/major-upgrade-aodh-migration.yaml | 6 - ...ajor-upgrade-ceilometer-wsgi-mitaka-newton.yaml | 7 - .../major-upgrade-composable-steps-docker.yaml | 11 + environments/major-upgrade-composable-steps.yaml | 14 +- environments/major-upgrade-converge-docker.yaml | 10 + environments/major-upgrade-converge.yaml | 6 +- environments/major-upgrade-pacemaker-converge.yaml | 6 - environments/major-upgrade-pacemaker-init.yaml | 6 - environments/major-upgrade-pacemaker.yaml | 6 - environments/major-upgrade-remove-sahara.yaml | 6 - .../manila-cephfsnative-config-docker.yaml | 20 + environments/manila-cephfsnative-config.yaml | 2 +- environments/manila-isilon-config.yaml | 17 + environments/manila-netapp-config-docker.yaml | 32 + environments/manila-unity-config.yaml | 17 + environments/manila-vmax-config.yaml | 19 + environments/manila-vnx-config.yaml | 18 + environments/net-bond-with-vlans-no-external.yaml | 4 - environments/net-bond-with-vlans-v6.yaml | 6 - environments/net-bond-with-vlans.yaml | 6 - .../net-single-nic-linux-bridge-with-vlans.yaml | 6 - .../net-single-nic-with-vlans-no-external.yaml | 4 - environments/net-single-nic-with-vlans-v6.yaml | 6 - environments/net-single-nic-with-vlans.yaml | 6 - environments/network-environment-v6.yaml | 60 + environments/network-environment.yaml | 6 +- environments/network-isolation-v6.j2.yaml | 58 + environments/network-isolation-v6.yaml | 57 - environments/network-isolation.j2.yaml | 37 + environments/network-isolation.yaml | 59 - environments/network-management-v6.yaml | 4 + environments/network-management.yaml | 4 + environments/networking/neutron-midonet.yaml | 66 + environments/neutron-bgpvpn-opendaylight.yaml | 12 + environments/neutron-bgpvpn.yaml | 16 + environments/neutron-l2gw-opendaylight.yaml | 18 + environments/neutron-l2gw.yaml | 27 + environments/neutron-linuxbridge.yaml | 8 + environments/neutron-midonet.yaml | 4 + environments/neutron-ml2-bigswitch.yaml | 12 +- environments/neutron-ml2-cisco-n1kv.yaml | 4 +- environments/neutron-ml2-cisco-nexus-ucsm.yaml | 1 + environments/neutron-ml2-ovn-ha.yaml | 25 + environments/neutron-ml2-ovn.yaml | 13 +- environments/neutron-ml2-vpp.yaml | 22 + environments/neutron-nsx.yaml | 15 + environments/neutron-nuage-config.yaml | 24 +- environments/neutron-opendaylight-dpdk.yaml | 46 + environments/neutron-opendaylight-sriov.yaml | 28 + environments/neutron-opendaylight.yaml | 3 +- environments/neutron-ovs-dpdk.yaml | 44 +- environments/neutron-sriov.yaml | 2 +- environments/nonha-arch.yaml | 16 + environments/nova-api-policy.yaml | 10 + environments/nova-nuage-config.yaml | 6 + environments/overcloud-baremetal.j2.yaml | 13 + environments/overcloud-services.yaml | 2 + .../predictable-placement/custom-domain.yaml | 35 + .../predictable-placement/custom-hostnames.yaml | 33 + environments/puppet-ceph-devel.yaml | 2 + environments/puppet-ceph-external.yaml | 5 + environments/puppet-ceph.yaml | 4 + environments/puppet-pacemaker.yaml | 4 +- environments/securetty.yaml | 12 + environments/services-docker/collectd.yaml | 2 + environments/services-docker/congress.yaml | 2 + environments/services-docker/ec2-api.yaml | 2 + environments/services-docker/etcd.yaml | 2 + environments/services-docker/ironic.yaml | 7 + environments/services-docker/manila.yaml | 4 + environments/services-docker/mistral.yaml | 4 + .../services-docker/neutron-opendaylight.yaml | 14 + environments/services-docker/neutron-ovn-ha.yaml | 28 + environments/services-docker/neutron-ovn.yaml | 27 + environments/services-docker/octavia.yaml | 10 + environments/services-docker/sahara.yaml | 3 + environments/services-docker/sensu-client.yaml | 3 + environments/services-docker/tacker.yaml | 2 + environments/services-docker/undercloud-aodh.yaml | 5 + .../services-docker/undercloud-ceilometer.yaml | 4 + .../services-docker/undercloud-gnocchi.yaml | 4 + environments/services-docker/undercloud-panko.yaml | 2 + environments/services-docker/zaqar.yaml | 3 + environments/services/ceilometer-api.yaml | 6 + environments/services/ceilometer-collector.yaml | 3 + environments/services/ceilometer-expirer.yaml | 2 + environments/services/disable-ceilometer-api.yaml | 2 - environments/services/ironic.yaml | 2 + .../keystone_domain_specific_ldap_backend.yaml | 18 + environments/services/neutron-lbaasv2.yaml | 18 + environments/services/panko.yaml | 2 - environments/services/qdr.yaml | 2 + environments/services/vpp.yaml | 9 + environments/services/zaqar.yaml | 3 +- .../split-stack-consistent-hostname-format.j2.yaml | 5 + environments/sshd-banner.yaml | 6 +- environments/ssl/enable-internal-tls.yaml | 36 + environments/ssl/enable-tls.yaml | 40 + environments/ssl/inject-trust-anchor-hiera.yaml | 22 + environments/ssl/inject-trust-anchor.yaml | 20 + environments/ssl/tls-endpoints-public-dns.yaml | 98 + environments/ssl/tls-endpoints-public-ip.yaml | 98 + environments/ssl/tls-everywhere-endpoints-dns.yaml | 98 + environments/storage/cinder-netapp-config.yaml | 127 + environments/storage/cinder-nfs.yaml | 27 + environments/storage/enable-ceph.yaml | 39 + environments/storage/external-ceph.yaml | 78 + environments/storage/glance-nfs.yaml | 34 + environments/swift-external.yaml | 12 + environments/tls-endpoints-public-dns.yaml | 46 +- environments/tls-endpoints-public-ip.yaml | 46 +- environments/tls-everywhere-endpoints-dns.yaml | 42 +- environments/undercloud.yaml | 6 + .../updates/update-from-192_0_2-subnet.yaml | 3 + .../cinder-veritas-hyperscale-config.yaml | 18 + .../veritas-hyperscale-config.yaml | 31 + .../all_nodes/contrail/enable_contrail_repo.yaml | 43 + extraconfig/all_nodes/mac_hostname.j2.yaml | 2 +- extraconfig/all_nodes/random_string.j2.yaml | 2 +- extraconfig/all_nodes/swap-partition.j2.yaml | 2 +- extraconfig/all_nodes/swap.j2.yaml | 2 +- .../nova_metadata/krb-service-principals.j2.yaml | 100 + .../nova_metadata/krb-service-principals.yaml | 84 - extraconfig/post_deploy/default.yaml | 2 +- extraconfig/post_deploy/example.yaml | 2 +- extraconfig/post_deploy/example_run_on_update.yaml | 5 +- extraconfig/post_deploy/undercloud_post.sh | 94 +- extraconfig/post_deploy/undercloud_post.yaml | 22 +- .../environment-rhel-registration.yaml | 4 + .../rhel-registration/rhel-registration.yaml | 82 +- .../rhel-registration/scripts/rhel-registration | 145 +- .../pre_network/ansible_host_config.ansible | 58 - extraconfig/pre_network/ansible_host_config.yaml | 58 + extraconfig/pre_network/config_then_reboot.yaml | 26 +- .../pre_network/contrail/compute_pre_network.yaml | 162 ++ .../contrail/contrail_dpdk_pre_network.yaml | 168 ++ .../host_config_and_reboot.role.j2.yaml | 35 +- .../pre_network/host_config_and_reboot.yaml | 289 +++ extraconfig/tasks/aodh_data_migration.sh | 19 - ...ajor_upgrade_ceilometer_wsgi_mitaka_newton.yaml | 62 - extraconfig/tasks/major_upgrade_check.sh | 109 - .../tasks/major_upgrade_controller_pacemaker_1.sh | 36 - .../tasks/major_upgrade_controller_pacemaker_2.sh | 176 -- .../tasks/major_upgrade_controller_pacemaker_3.sh | 68 - .../tasks/major_upgrade_controller_pacemaker_4.sh | 17 - .../tasks/major_upgrade_controller_pacemaker_5.sh | 8 - .../tasks/major_upgrade_controller_pacemaker_6.sh | 15 - extraconfig/tasks/major_upgrade_pacemaker.yaml | 179 -- .../tasks/major_upgrade_pacemaker_migrations.sh | 200 -- .../mitaka_to_newton_aodh_data_migration.yaml | 25 - .../mitaka_to_newton_ceilometer_wsgi_upgrade.pp | 103 - extraconfig/tasks/pacemaker_common_functions.sh | 134 +- extraconfig/tasks/post_puppet_pacemaker.j2.yaml | 43 + extraconfig/tasks/post_puppet_pacemaker.yaml | 37 - .../tasks/post_puppet_pacemaker_restart.yaml | 5 +- extraconfig/tasks/pre_puppet_pacemaker.yaml | 4 +- extraconfig/tasks/run_puppet.sh | 30 + extraconfig/tasks/ssh/host_public_key.yaml | 51 + extraconfig/tasks/ssh/known_hosts_config.yaml | 36 + extraconfig/tasks/tripleo_upgrade_node.sh | 30 +- extraconfig/tasks/yum_update.sh | 104 +- extraconfig/tasks/yum_update.yaml | 2 +- extraconfig/tasks/yum_update_noop.yaml | 2 +- firstboot/install_vrouter_kmod.yaml | 105 - firstboot/os-net-config-mappings.yaml | 53 +- firstboot/userdata_default.yaml | 2 +- firstboot/userdata_dev_rsync.yaml | 2 +- firstboot/userdata_example.yaml | 5 +- firstboot/userdata_heat_admin.yaml | 2 +- firstboot/userdata_root_password.yaml | 2 +- hosts-config.yaml | 4 +- j2_excludes.yaml | 10 +- net-config-bond.yaml | 19 +- net-config-bridge.yaml | 6 +- net-config-linux-bridge.yaml | 8 +- net-config-noop.yaml | 6 +- net-config-static-bridge-with-external-dhcp.yaml | 6 +- net-config-static-bridge.yaml | 6 +- net-config-static.yaml | 6 +- net-config-undercloud.yaml | 6 +- network/config/bond-with-vlans/ceph-storage.yaml | 16 +- network/config/bond-with-vlans/cinder-storage.yaml | 16 +- network/config/bond-with-vlans/compute-dpdk.yaml | 11 +- network/config/bond-with-vlans/compute.yaml | 31 +- .../bond-with-vlans/controller-no-external.yaml | 16 +- network/config/bond-with-vlans/controller-v6.yaml | 16 +- network/config/bond-with-vlans/controller.yaml | 16 +- network/config/bond-with-vlans/networker.yaml | 174 ++ network/config/bond-with-vlans/swift-storage.yaml | 16 +- .../contrail/contrail-nic-config-compute.yaml | 167 ++ network/config/contrail/contrail-nic-config.yaml | 164 ++ network/config/multiple-nics/ceph-storage.yaml | 6 +- network/config/multiple-nics/cinder-storage.yaml | 6 +- network/config/multiple-nics/compute-dvr.yaml | 6 +- network/config/multiple-nics/compute.yaml | 21 +- network/config/multiple-nics/controller-v6.yaml | 6 +- network/config/multiple-nics/controller.yaml | 6 +- network/config/multiple-nics/networker.yaml | 159 ++ network/config/multiple-nics/swift-storage.yaml | 6 +- .../ceph-storage.yaml | 6 +- .../cinder-storage.yaml | 6 +- .../single-nic-linux-bridge-vlans/compute.yaml | 21 +- .../controller-v6.yaml | 6 +- .../single-nic-linux-bridge-vlans/controller.yaml | 6 +- .../single-nic-linux-bridge-vlans/networker.yaml | 160 ++ .../swift-storage.yaml | 6 +- network/config/single-nic-vlans/ceph-storage.yaml | 6 +- .../config/single-nic-vlans/cinder-storage.yaml | 6 +- network/config/single-nic-vlans/compute.yaml | 24 +- .../single-nic-vlans/controller-no-external.yaml | 6 +- network/config/single-nic-vlans/controller-v6.yaml | 6 +- network/config/single-nic-vlans/controller.yaml | 6 +- network/config/single-nic-vlans/networker.yaml | 152 ++ network/config/single-nic-vlans/swift-storage.yaml | 6 +- network/endpoints/build_endpoint_map.py | 2 +- network/endpoints/endpoint_data.yaml | 93 +- network/endpoints/endpoint_map.yaml | 2568 ++------------------ network/external.yaml | 67 - network/external_v6.yaml | 74 - network/internal_api.yaml | 63 - network/internal_api_v6.yaml | 70 - network/management.yaml | 69 - network/management_v6.yaml | 6 +- network/network.j2 | 105 + network/network.network.j2.yaml | 1 + network/network_v6.network.j2.yaml | 2 + network/networks.j2.yaml | 27 + network/networks.yaml | 26 - network/ports/ctlplane_vip.yaml | 8 +- network/ports/external.yaml | 61 - network/ports/external_from_pool.yaml | 46 - network/ports/external_from_pool_v6.yaml | 52 - network/ports/external_v6.yaml | 66 - network/ports/from_service.yaml | 2 +- network/ports/from_service_v6.yaml | 2 +- network/ports/internal_api.yaml | 57 - network/ports/internal_api_from_pool.yaml | 46 - network/ports/internal_api_from_pool_v6.yaml | 52 - network/ports/internal_api_v6.yaml | 61 - network/ports/management.yaml | 49 - network/ports/management_from_pool.yaml | 46 - network/ports/management_from_pool_v6.yaml | 52 - network/ports/management_v6.yaml | 54 - network/ports/net_ip_list_map.j2.yaml | 190 ++ network/ports/net_ip_list_map.yaml | 157 -- network/ports/net_ip_map.j2.yaml | 81 + network/ports/net_ip_map.yaml | 103 - network/ports/net_vip_map_external.j2.yaml | 40 + network/ports/net_vip_map_external.yaml | 64 - network/ports/net_vip_map_external_v6.j2.yaml | 45 + network/ports/net_vip_map_external_v6.yaml | 84 - network/ports/noop.yaml | 14 +- network/ports/port.j2 | 72 + network/ports/port.network.j2.yaml | 1 + network/ports/port_from_pool.j2 | 65 + network/ports/port_from_pool.network.j2.yaml | 1 + network/ports/port_from_pool_v6.network.j2.yaml | 2 + network/ports/port_v6.network.j2.yaml | 2 + network/ports/storage.yaml | 56 - network/ports/storage_from_pool.yaml | 46 - network/ports/storage_from_pool_v6.yaml | 52 - network/ports/storage_mgmt.yaml | 57 - network/ports/storage_mgmt_from_pool.yaml | 46 - network/ports/storage_mgmt_from_pool_v6.yaml | 52 - network/ports/storage_mgmt_v6.yaml | 61 - network/ports/storage_v6.yaml | 61 - network/ports/tenant.yaml | 56 - network/ports/tenant_from_pool.yaml | 46 - network/ports/tenant_from_pool_v6.yaml | 51 - network/ports/tenant_v6.yaml | 61 - network/ports/vip.yaml | 4 +- network/ports/vip_v6.yaml | 4 +- network/scripts/run-os-net-config.sh | 9 +- network/service_net_map.j2.yaml | 11 +- network/storage.yaml | 63 - network/storage_mgmt.yaml | 63 - network/storage_mgmt_v6.yaml | 70 - network/storage_v6.yaml | 70 - network/tenant.yaml | 63 - network/tenant_v6.yaml | 70 - network_data.yaml | 91 + overcloud-resource-registry-puppet.j2.yaml | 128 +- overcloud.j2.yaml | 645 +++-- plan-environment.yaml | 8 + plan-samples/README.rst | 22 + plan-samples/plan-environment-derived-params.yaml | 35 + puppet/all-nodes-config.yaml | 90 +- puppet/blockstorage-role.yaml | 518 ---- puppet/cephstorage-role.yaml | 529 ---- puppet/compute-role.yaml | 555 ----- puppet/config.role.j2.yaml | 4 +- puppet/controller-role.yaml | 601 ----- puppet/deploy-artifacts.sh | 10 +- puppet/deploy-artifacts.yaml | 2 +- .../all_nodes/neutron-midonet-all-nodes.yaml | 67 +- .../all_nodes/neutron-ml2-cisco-nexus-ucsm.j2.yaml | 304 +++ .../all_nodes/neutron-ml2-cisco-nexus-ucsm.yaml | 341 --- .../pre_deploy/compute/neutron-ml2-bigswitch.yaml | 24 +- .../extraconfig/pre_deploy/compute/nova-nuage.yaml | 31 +- .../pre_deploy/controller/cinder-netapp.yaml | 158 -- .../pre_deploy/controller/multiple.yaml | 2 +- .../controller/neutron-ml2-bigswitch.yaml | 37 +- .../controller/neutron-ml2-cisco-n1kv.yaml | 87 +- puppet/extraconfig/pre_deploy/default.yaml | 2 +- puppet/extraconfig/pre_deploy/per_node.yaml | 2 +- puppet/extraconfig/tls/ca-inject.yaml | 2 +- puppet/extraconfig/tls/freeipa-enroll.yaml | 2 +- puppet/extraconfig/tls/tls-cert-inject.yaml | 3 +- puppet/major_upgrade_steps.j2.yaml | 238 -- puppet/objectstorage-role.yaml | 516 ---- puppet/post-upgrade.j2.yaml | 27 - puppet/post.j2.yaml | 28 - puppet/puppet-steps.j2 | 88 - puppet/role.role.j2.yaml | 614 +++-- puppet/services/README.rst | 109 +- puppet/services/aodh-api.yaml | 41 +- puppet/services/aodh-base.yaml | 59 +- puppet/services/aodh-evaluator.yaml | 26 +- puppet/services/aodh-listener.yaml | 26 +- puppet/services/aodh-notifier.yaml | 26 +- .../services/apache-internal-tls-certmonger.yaml | 69 - puppet/services/apache.yaml | 79 +- puppet/services/auditd.yaml | 30 +- puppet/services/barbican-api.yaml | 88 +- puppet/services/ca-certs.yaml | 14 +- puppet/services/ceilometer-agent-central.yaml | 31 +- puppet/services/ceilometer-agent-compute.yaml | 36 +- puppet/services/ceilometer-agent-ipmi.yaml | 92 + puppet/services/ceilometer-agent-notification.yaml | 28 +- puppet/services/ceilometer-api.yaml | 36 +- puppet/services/ceilometer-base.yaml | 124 +- puppet/services/ceilometer-collector.yaml | 84 +- puppet/services/ceilometer-expirer.yaml | 19 +- puppet/services/ceph-base.yaml | 62 +- puppet/services/ceph-client.yaml | 17 +- puppet/services/ceph-external.yaml | 56 +- puppet/services/ceph-mds.yaml | 29 +- puppet/services/ceph-mon.yaml | 66 +- puppet/services/ceph-osd.yaml | 67 +- puppet/services/ceph-rgw.yaml | 34 +- puppet/services/certmonger-user.yaml | 57 + puppet/services/cinder-api.yaml | 81 +- puppet/services/cinder-backend-dellemc-unity.yaml | 85 + .../cinder-backend-dellemc-vmax-iscsi.yaml | 65 + puppet/services/cinder-backend-dellps.yaml | 18 +- puppet/services/cinder-backend-dellsc.yaml | 34 +- puppet/services/cinder-backend-netapp.yaml | 149 ++ puppet/services/cinder-backend-pure.yaml | 80 + puppet/services/cinder-backend-scaleio.yaml | 16 +- .../cinder-backend-veritas-hyperscale.yaml | 56 + puppet/services/cinder-backup.yaml | 17 +- puppet/services/cinder-base.yaml | 46 +- puppet/services/cinder-hpelefthand-iscsi.yaml | 14 +- puppet/services/cinder-scheduler.yaml | 26 +- puppet/services/cinder-volume.yaml | 48 +- puppet/services/congress.yaml | 98 +- puppet/services/database/mongodb-base.yaml | 14 +- puppet/services/database/mongodb.yaml | 65 +- puppet/services/database/mysql-client.yaml | 52 + .../database/mysql-internal-tls-certmonger.yaml | 47 - puppet/services/database/mysql.yaml | 68 +- puppet/services/database/redis-base.yaml | 40 +- puppet/services/database/redis.yaml | 81 +- .../services/disabled/ceilometer-api-disabled.yaml | 45 + .../disabled/ceilometer-collector-disabled.yaml | 42 + .../disabled/ceilometer-expirer-disabled.yaml | 45 + .../disabled/glance-registry-disabled.yaml | 42 + puppet/services/disabled/glance-registry.yaml | 30 - puppet/services/disabled/mongodb-disabled.yaml | 47 + puppet/services/docker.yaml | 58 + puppet/services/ec2-api.yaml | 83 +- puppet/services/etcd.yaml | 108 +- puppet/services/external-swift-proxy.yaml | 82 + puppet/services/glance-api.yaml | 205 +- puppet/services/glance-base.yaml | 126 - puppet/services/gnocchi-api.yaml | 44 +- puppet/services/gnocchi-base.yaml | 68 +- puppet/services/gnocchi-metricd.yaml | 26 +- puppet/services/gnocchi-statsd.yaml | 26 +- .../services/haproxy-internal-tls-certmonger.yaml | 43 +- puppet/services/haproxy-public-tls-certmonger.yaml | 46 +- puppet/services/haproxy.yaml | 88 +- puppet/services/heat-api-cfn.yaml | 86 +- puppet/services/heat-api-cloudwatch.yaml | 88 +- puppet/services/heat-api.yaml | 93 +- puppet/services/heat-base.yaml | 43 +- puppet/services/heat-engine.yaml | 75 +- puppet/services/horizon.yaml | 74 +- puppet/services/ironic-api.yaml | 62 +- puppet/services/ironic-base.yaml | 46 +- puppet/services/ironic-conductor.yaml | 115 +- puppet/services/ironic-inspector.yaml | 155 ++ puppet/services/iscsid.yaml | 41 + puppet/services/keepalived.yaml | 18 +- puppet/services/kernel.yaml | 76 +- puppet/services/keystone.yaml | 164 +- puppet/services/logging/fluentd-base.yaml | 14 +- puppet/services/logging/fluentd-client.yaml | 30 +- puppet/services/logging/fluentd-config.yaml | 14 +- puppet/services/manila-api.yaml | 21 +- puppet/services/manila-backend-cephfs.yaml | 25 +- puppet/services/manila-backend-generic.yaml | 14 +- puppet/services/manila-backend-isilon.yaml | 72 + puppet/services/manila-backend-netapp.yaml | 14 +- puppet/services/manila-backend-unity.yaml | 74 + puppet/services/manila-backend-vmax.yaml | 74 + puppet/services/manila-backend-vnx.yaml | 75 + puppet/services/manila-base.yaml | 53 +- puppet/services/manila-scheduler.yaml | 21 +- puppet/services/manila-share.yaml | 17 +- puppet/services/memcached.yaml | 14 +- puppet/services/metrics/collectd.yaml | 31 +- puppet/services/mistral-api.yaml | 76 +- puppet/services/mistral-base.yaml | 59 +- puppet/services/mistral-engine.yaml | 36 +- puppet/services/mistral-executor.yaml | 36 +- puppet/services/monitoring/sensu-base.yaml | 29 +- puppet/services/monitoring/sensu-client.yaml | 33 +- .../network/contrail-analytics-database.yaml | 17 +- puppet/services/network/contrail-analytics.yaml | 48 +- puppet/services/network/contrail-base.yaml | 114 +- puppet/services/network/contrail-config.yaml | 25 +- puppet/services/network/contrail-control.yaml | 22 +- puppet/services/network/contrail-database.yaml | 17 +- puppet/services/network/contrail-dpdk.yaml | 82 + puppet/services/network/contrail-heat.yaml | 17 +- .../services/network/contrail-neutron-plugin.yaml | 21 +- puppet/services/network/contrail-provision.yaml | 39 - puppet/services/network/contrail-tsn.yaml | 34 +- puppet/services/network/contrail-vrouter.yaml | 35 +- puppet/services/network/contrail-webui.yaml | 29 +- puppet/services/neutron-api.yaml | 96 +- puppet/services/neutron-base.yaml | 92 +- puppet/services/neutron-bgpvpn-api.yaml | 46 + puppet/services/neutron-bigswitch-agent.yaml | 41 + .../services/neutron-compute-plugin-midonet.yaml | 14 +- puppet/services/neutron-compute-plugin-nuage.yaml | 26 +- puppet/services/neutron-compute-plugin-ovn.yaml | 59 - .../services/neutron-compute-plugin-plumgrid.yaml | 14 +- puppet/services/neutron-dhcp.yaml | 26 +- puppet/services/neutron-l2gw-agent.yaml | 110 + puppet/services/neutron-l2gw-api.yaml | 66 + puppet/services/neutron-l3-compute-dvr.yaml | 43 +- puppet/services/neutron-l3.yaml | 40 +- puppet/services/neutron-lbaas.yaml | 75 + puppet/services/neutron-linuxbridge-agent.yaml | 88 + puppet/services/neutron-metadata.yaml | 51 +- puppet/services/neutron-midonet.yaml | 14 +- puppet/services/neutron-ovs-agent.yaml | 55 +- puppet/services/neutron-ovs-dpdk-agent.yaml | 81 +- .../services/neutron-plugin-ml2-fujitsu-cfab.yaml | 17 +- .../services/neutron-plugin-ml2-fujitsu-fossw.yaml | 17 +- puppet/services/neutron-plugin-ml2-nuage.yaml | 99 + puppet/services/neutron-plugin-ml2-odl.yaml | 60 + puppet/services/neutron-plugin-ml2-ovn.yaml | 17 +- puppet/services/neutron-plugin-ml2.yaml | 33 +- puppet/services/neutron-plugin-nsx.yaml | 78 + puppet/services/neutron-plugin-nuage.yaml | 24 +- puppet/services/neutron-plugin-plumgrid.yaml | 33 +- puppet/services/neutron-sriov-agent.yaml | 39 +- puppet/services/neutron-vpp-agent.yaml | 61 + puppet/services/nova-api.yaml | 250 +- puppet/services/nova-base.yaml | 108 +- puppet/services/nova-compute.yaml | 90 +- puppet/services/nova-conductor.yaml | 28 +- puppet/services/nova-consoleauth.yaml | 19 +- puppet/services/nova-ironic.yaml | 23 +- puppet/services/nova-libvirt.yaml | 160 +- puppet/services/nova-metadata.yaml | 53 +- puppet/services/nova-migration-target.yaml | 57 + puppet/services/nova-placement.yaml | 35 +- puppet/services/nova-scheduler.yaml | 31 +- puppet/services/nova-vnc-proxy.yaml | 19 +- puppet/services/octavia-api.yaml | 46 +- puppet/services/octavia-base.yaml | 46 +- puppet/services/octavia-health-manager.yaml | 17 +- puppet/services/octavia-housekeeping.yaml | 17 +- puppet/services/octavia-worker.yaml | 17 +- puppet/services/opendaylight-api.yaml | 59 +- puppet/services/opendaylight-ovs.yaml | 120 +- puppet/services/openvswitch.yaml | 184 ++ puppet/services/ovn-controller.yaml | 86 + puppet/services/ovn-dbs.yaml | 35 +- puppet/services/pacemaker.yaml | 31 +- puppet/services/pacemaker/ceph-rbdmirror.yaml | 17 +- puppet/services/pacemaker/cinder-backup.yaml | 17 +- puppet/services/pacemaker/cinder-volume.yaml | 38 +- puppet/services/pacemaker/database/mysql.yaml | 24 +- puppet/services/pacemaker/database/redis.yaml | 29 +- puppet/services/pacemaker/haproxy.yaml | 17 +- puppet/services/pacemaker/manila-share.yaml | 20 +- puppet/services/pacemaker/ovn-dbs.yaml | 66 + puppet/services/pacemaker/rabbitmq.yaml | 19 +- puppet/services/pacemaker_remote.yaml | 65 +- puppet/services/panko-api.yaml | 57 +- puppet/services/panko-base.yaml | 50 +- puppet/services/qdr.yaml | 72 + puppet/services/rabbitmq.yaml | 156 +- .../notes/mod_ssl-e7fd4db71189242e.yaml | 5 + puppet/services/sahara-api.yaml | 26 +- puppet/services/sahara-base.yaml | 61 +- puppet/services/sahara-engine.yaml | 22 +- puppet/services/securetty.yaml | 48 + puppet/services/services.yaml | 126 - puppet/services/snmp.yaml | 26 +- puppet/services/sshd.yaml | 45 +- puppet/services/swift-base.yaml | 14 +- puppet/services/swift-proxy.yaml | 85 +- puppet/services/swift-ringbuilder.yaml | 24 +- puppet/services/swift-storage.yaml | 20 +- puppet/services/tacker.yaml | 96 +- puppet/services/time/ntp.yaml | 14 +- puppet/services/time/timezone.yaml | 14 +- puppet/services/tripleo-firewall.yaml | 20 +- puppet/services/tripleo-packages.yaml | 20 +- puppet/services/tuned.yaml | 50 + puppet/services/veritas-hyperscale-controller.yaml | 106 + puppet/services/vpp.yaml | 69 + puppet/services/zaqar-api.yaml | 217 ++ puppet/services/zaqar.yaml | 66 - puppet/upgrade_config.yaml | 2 +- releasenotes/notes/6.0.0-b52a14a71fc62788.yaml | 2 + ...nal-TLS-CA-File-parameter-c24ee13daaa11dfc.yaml | 6 + ...Change-zaqar-profile-path-7b00c68c0812fb3d.yaml | 6 + ...isable-mongodb-by-default-cce37d3254a77d27.yaml | 8 + .../Enable-TLS-for-libvirt-0aab48cd8339da0f.yaml | 6 + ...stoneFernetKeys-parameter-2478cf5fc5e64256.yaml | 6 + ...ts-interface-configurable-2b634793c4f13950.yaml | 4 + ...-token-provider-to-fernet-2542fccb5a588852.yaml | 6 + ...stoneFernetKeys-parameter-bd635a106bb8e00f.yaml | 10 + ...d-all-hosts-to-hostsentry-20a8ee8a1a210ce2.yaml | 9 + .../notes/add-bgpvpn-support-f60c5a9cee0bb393.yaml | 3 + .../add-cadf-environment-0ce0078348c5333f.yaml | 7 + ...add-ceilometer-agent-ipmi-2c86726d0373d354.yaml | 3 + ...der-nas-secure-parameters-53f9d6a6e9bc129b.yaml | 5 + ...entswiftdatamap-parameter-351ee63800016e4d.yaml | 6 + ...efault-for-host-parameter-02e3d48de1f69765.yaml | 9 + .../add-ipv6-diable-options-9aaee219bb87ac6a.yaml | 7 + .../notes/add-l2gw-agent-1a2f14a6ceefe362.yaml | 3 + .../add-l2gw-api-support-2206d3d14f409088.yaml | 3 + .../notes/add-ldap-backend-0bda702fb0aa24bf.yaml | 5 + .../notes/add-odl-sriov-env-e31982064c2bf646.yaml | 4 + .../add-opendaylight-ha-e46ef46e29689dde.yaml | 5 + ...-for-heat-apis-over-httpd-df83ab04d9f9ebb2.yaml | 6 + releasenotes/notes/add-qdr-99a27dffef42c13e.yaml | 8 + ...er-os-collect-config-data-eeea2f57b3a82654.yaml | 6 + ...d-support-for-pure-cinder-1a595f1940d5a06f.yaml | 3 + .../add_db_sync_timeout-c9b2f401cca0b37d.yaml | 3 + ...s-per-network-calculation-536c70391497256d.yaml | 8 + .../notes/api-policy-4ca739519537f6f4.yaml | 13 + .../baremetal-cell-hosts-cd5cf5aa8a33643c.yaml | 6 + .../notes/baremetal-role-34cb48cc30d7bdb4.yaml | 5 + .../notes/big-switch-agent-4c743a2112251234.yaml | 5 + .../ceph-ansible-workflow-70f7d52faf4cd419.yaml | 14 + .../change-db-sync-timeout-57abe3e48d741842.yaml | 6 + .../change-panko-api-port-fb8967420cd036b1.yaml | 4 + ...mq-ha-mode-policy-default-6c6cd7f02181f0e0.yaml | 11 + .../cleanup-odl-clustering-93a3ec132f3c2343.yaml | 6 + ...veritas-hyperscale-driver-e7f0a35d7d9a8df1.yaml | 3 + ...compute_deprecated_params-a2d69efd75f7c50f.yaml | 9 + .../computeovsdpdk-role-67d53a405ce4174b.yaml | 4 + ...onfigurable-snmpd-options-3954c5858e2c7656.yaml | 6 + ...ring-snat-in-opendaylight-d5ed4d62275e1876.yaml | 5 + .../containarise-barbican-1253606411d497ff.yaml | 4 + ...ugfixes-and-dpdk-enabling-0233a06e23259660.yaml | 9 + ...troller_deprecated_params-7f009de6d17c05a4.yaml | 8 + .../notes/debug_per_service-54a260917c4a7e3a.yaml | 9 + ...server-environment-output-d838c782f76823b7.yaml | 6 + ...yed-server-firewall-purge-9d9fe73faf925056.yaml | 6 + ...tronExternalNetworkBridge-7d42f1a0718da327.yaml | 10 + ...recate-ceilometer-expirer-83b193a07631d89d.yaml | 11 + .../deprecate-collector-a16e5d58ae00806d.yaml | 14 + ...deprecate-management-envs-bbc7fddb0ca871af.yaml | 5 + .../notes/deprecate-panko-b2bdce647d2b9a6d.yaml | 5 + ...ve-params-custom-plan-env-3a810ff58a68e0ad.yaml | 4 + .../notes/disable-ceilo-api-dfe5d0947563bbe0.yaml | 4 + .../disable-ceilo-middleware-6853cb92e3e08161.yaml | 5 + ...-dump-for-setuid-programs-e83a2a5da908b9c3.yaml | 12 + ...ameter-for-icmp-redirects-f325f91d71b58b5f.yaml | 19 + ...phfs-snapshots-by-default-d5320a05d9b501cf.yaml | 5 + ...able_default_apache_vhost-f41d11fe07605f7f.yaml | 6 + .../docker-service-all-roles-5c22a018caeafcf0.yaml | 5 + ...dont-unregister-on-delete-9708f7cbc73a0d2f.yaml | 8 + .../notes/enable-arp_accept-6296b0113bc56b10.yaml | 9 + .../enable-dpdk-on-boot-f5b098b10152b436.yaml | 8 + ...ogging-suspicious-packets-d5545586f917d2ca.yaml | 9 + ...neutron-lbaas-integration-b72126f2c7e71cee.yaml | 4 + ...neutron-lbaas-integration-fa999ccd548ee6b6.yaml | 4 + ...-for-external-swift-proxy-941917f8bcc63a5d.yaml | 5 + releasenotes/notes/etcdtoken-4c46bdfac940acda.yaml | 6 + .../notes/example-roles-d27c748090f6a154.yaml | 6 + ...e-metric-processing-delay-0c098d7ec0af0728.yaml | 3 + ...ix-cinder-nfs-share-usage-0968f88eff7ffb99.yaml | 6 + .../fix-glance-api-network-4f9d7c20475a5994.yaml | 3 + ...at-condition-for-rhel-reg-311a3dce76cc0ec1.yaml | 9 + ...fix-neutron-dpdk-firewall-436aee39a0d7ed65.yaml | 5 + ...ix-neutron_admin_auth_url-c88224251d8eb807.yaml | 4 + ...dl-provider-mapping-hiera-5b3472184be490e2.yaml | 4 + ...-rpm-deploy-artifact-urls-03d5694073ad159d.yaml | 4 + ...rated-sample-environments-8b523f55f36e940c.yaml | 21 + ...cc-config-local-connector-5bbec3f591a9f311.yaml | 10 + .../notes/glance-keystonev3-d35182ba9a3778eb.yaml | 4 + .../notes/gnocchi-keystonev3-d288ba40226545c9.yaml | 4 + .../notes/ha-by-default-55326e699ee8602c.yaml | 5 - ...nova-reserved-host-memory-80434e8484a29680.yaml | 4 + ...install-openstack-selinux-d14b2e26feb6d04e.yaml | 6 + .../notes/ipv6_defaults-7dbb62113f4e5084.yaml | 10 + .../notes/ironic-boot-option-3f3036aa5e82ec7e.yaml | 12 + .../ironic-hardware-types-fe5140549d3bb792.yaml | 9 + .../notes/ironic-inspector-43441782bdf0f84e.yaml | 5 + ...ronic-neutron-integration-76c4f9e0d10785e4.yaml | 9 + .../notes/isilon_manila_e9677898724a11e7.yaml | 4 + ...ve-satellite-repo-enabled-8b60528bd5450c7b.yaml | 6 + .../notes/make-panko-default-8d0e824fc91cef56.yaml | 4 + .../manila-with-managed-ceph-e5178fd06127624f.yaml | 11 + ...dvr-with-NeutronEnableDVR-fe8aac6c4ce52bce.yaml | 6 + .../max-active-fernet-keys-f960f08838a75eee.yaml | 5 + .../notes/migration_over_ssh-003e2a92f5f5374d.yaml | 14 + .../notes/mistral-mod-wsgi-24d41a6f427237ff.yaml | 7 + ...on-ml2-overlay-ip-version-4f14932355847aa0.yaml | 5 + .../notification-driver-noop-e322ca6704a5bc50.yaml | 10 + .../notes/nsx-support-1254839718d8df8c.yaml | 3 + .../notes/num-storage-sacks-f640be5fcd374a6b.yaml | 3 + ...storage_deprecated_params-f7642b6541a0d09c.yaml | 8 + .../notes/octavia-1687026-c01313aab53f55a4.yaml | 5 + .../notes/odl-port-binding-d420cac81f714778.yaml | 9 + releasenotes/notes/odl-user-a4c58ac0c3a64d90.yaml | 5 + ...opendaylight-manage-repos-9eaf900c08e8d96f.yaml | 5 + .../ovn-container-support-3ab333fff6e90dc4.yaml | 5 + releasenotes/notes/ovn-fcd4b0168e6745a8.yaml | 6 + releasenotes/notes/ovn-ha-c0139ac519680872.yaml | 3 + .../ovs-2-7-support-for-dpdk-fe665cf9c6b0a750.yaml | 5 + ...sable-upgrades-workaround-73f4e56127c910b4.yaml | 12 + ...pdk-permission-workaround-20aaebcc8d6009ec.yaml | 6 + ...able-server-type-per-role-314f38f8e5d4c84e.yaml | 8 + ...work-config-role-specific-b36cc4bd6383e493.yaml | 11 + .../notes/ps-san_private_key-5aa111e7907ba600.yaml | 4 + releasenotes/notes/redfish-9203af1f7bf02bc5.yaml | 8 + .../notes/refactor-dpdk-dd37ccf14f711bb1.yaml | 23 + .../remove-ceilometer-cron-85362e197ba245a0.yaml | 5 + ...eferences-to-old-ctlplane-0df7f2ae8910559c.yaml | 20 + ...-to-kernel-message-buffer-809160674b92a073.yaml | 11 + .../restrict-mongodb-memory-de7bf6754d7234d9.yaml | 3 + releasenotes/notes/role-tags-16ac2e9e8fcab218.yaml | 18 + .../roles-data-validation-7845702b5ed85366.yaml | 8 + .../roles_deprecated_params-50b4bbe8b9e4abc7.yaml | 21 + .../notes/sahara_auth_v3-65bd276b39b4e284.yaml | 4 + .../server-blacklist-support-370c1a1f15a28a41.yaml | 6 + .../notes/service-role-name-0b8609d314564885.yaml | 4 + .../service_workflow_tasks-4da5830821b7154b.yaml | 8 + .../set-ceilometer-auth-flag-382f68ddb2cbcb6b.yaml | 5 + .../notes/snmp_listen-2364188f73d43b14.yaml | 7 + .../split-stack-environments-1f817e24b5d90959.yaml | 7 + .../sriov-pci-passthrough-8f28719b889bdaf7.yaml | 4 + .../notes/ssh_known_hosts-287563590632d1aa.yaml | 4 + .../sshd-service-extensions-0c4d0879942a2052.yaml | 5 + .../notes/stack-name-input-73f4d4d052f1377e.yaml | 5 + ...net-mapping-into-services-999a2c5a90b85709.yaml | 6 + ...-preconfig-and-postconfig-debd5f28bc578d51.yaml | 6 + .../notes/swift-ring-keeper-c04b440d7d5ce13f.yaml | 9 + .../token-flush-twice-a-day-d4b00a2953a6b383.yaml | 7 + .../notes/tuned-service-650c0eec1cf12a4d.yaml | 4 + .../notes/unity_cinder_e9872898724a11e7.yaml | 4 + .../notes/unity_manila_1967789872aa11e7.yaml | 3 + ...set-ceph-default-min-size-0297620ed99dab5b.yaml | 12 + ...ate-manage-event-pipeline-0a21e9ca92cbff4f.yaml | 6 + ...date-metric-delay-default-963d073026e2cc15.yaml | 4 + ...date-on-rhel-registration-afbef3ead983b08f.yaml | 6 + .../update-plan-environment-4e164b57a801e2cb.yaml | 3 + .../upgrade-stack-action-94598796a9d3511f.yaml | 9 + .../notes/vhost_default_dir-cac327a0ac05df90.yaml | 6 + .../notes/vipmap-output-4a9ce99930960346.yaml | 5 + .../notes/vmax_cinder_a6672898724a11e7.yaml | 4 + .../notes/vmax_manila_2967789872aa11e8.yaml | 4 + .../notes/vnx_manila_2967789872aa11e7.yaml | 4 + releasenotes/notes/vpp-84d35e51ff62a58c.yaml | 6 + releasenotes/notes/vpp-ml2-8e115f7763510531.yaml | 3 + ...d-unset-fqdn-for-rhel-reg-be9c4620146096be.yaml | 8 + .../notes/zaqar-httpd-e7d91bf396da28d0.yaml | 3 + .../notes/zaqar_backends-ccf8adfd24a17bf5.yaml | 5 + ...zaqar_undercloud_backends-f63224a2a3aa684e.yaml | 5 + releasenotes/source/conf.py | 13 +- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 + requirements.txt | 3 +- roles/BlockStorage.yaml | 32 + roles/CephStorage.yaml | 29 + roles/Compute.yaml | 58 + roles/ComputeHCI.yaml | 49 + roles/ComputeOvsDpdk.yaml | 42 + roles/Controller.yaml | 147 ++ roles/ControllerOpenstack.yaml | 115 + roles/Database.yaml | 28 + roles/IronicConductor.yaml | 25 + roles/Messaging.yaml | 28 + roles/Networker.yaml | 42 + roles/ObjectStorage.yaml | 39 + roles/README.rst | 213 ++ roles/Telemetry.yaml | 37 + roles/Undercloud.yaml | 59 + roles_data.yaml | 362 ++- roles_data_undercloud.yaml | 72 +- sample-env-generator/README.rst | 160 ++ sample-env-generator/composable-roles.yaml | 174 ++ sample-env-generator/networking.yaml | 32 + sample-env-generator/predictable-placement.yaml | 32 + sample-env-generator/ssl.yaml | 394 +++ sample-env-generator/storage.yaml | 137 ++ scripts/hosts-config.sh | 18 +- setup.py | 2 +- test-requirements.txt | 14 +- tools/process-templates.py | 85 +- tools/roles-data-generate-samples.sh | 26 + tools/roles-data-generate.py | 49 + tools/roles-data-validation.sh | 48 + tools/yaml-nic-config-2-script.py | 2 +- tools/yaml-validate.py | 391 ++- tox.ini | 20 + tripleo_heat_templates/__init__.py | 0 tripleo_heat_templates/environment_generator.py | 212 ++ validation-scripts/all-nodes.sh | 51 +- 924 files changed, 39013 insertions(+), 14347 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 057aa28..d4e343e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=1.8 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 @@ -6,0 +7 @@ six>=1.9.0 # MIT +tripleo-common>=7.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 1c9e3b4..6ba8e17 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -3,0 +4 @@ +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -7,3 +8,10 @@ six>=1.9.0 # MIT -sphinx>=1.5.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +reno!=2.3.1,>=1.8.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 +fixtures>=3.0.0 # Apache-2.0/BSD +python-subunit>=0.0.18 # Apache-2.0/BSD +testrepository>=0.0.18 # Apache-2.0/BSD +testscenarios>=0.4 # Apache-2.0/BSD +testtools>=1.4.0 # MIT +mock>=2.0 # BSD +oslotest>=1.10.0 # Apache-2.0