We are glad to announce the release of: tripleo-common 8.4.0: A common library for TripleO workflows. This release is part of the queens release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo-common For more details, please see below. 8.4.0 ^^^^^ New Features ************ * Add OctaviaCaKeyPassphrase to the list of passwords to generate, so users don't have to pick a string or rely on a default value for octavia CA private key passphrase. * HeatAuthEncryptionKey, HorizonSecret, MysqlRootPassword, PcsdPassword and RabbitCookie are now generated by tripleo-common among other passwords managed by TripleO. If existing version of these parameters have been generated by the Heat stack we first harvest those before generating new version. Security Issues *************** * The *enable_ssh_admin* workflow is now always expecting a list of servers to operate on, passed via *ssh_servers* input which is left empty when unset. Bug Fixes ********* * Recognizes the "root_device" property when enrolling nodes. We recommend it to be set for multi-disk nodes, but the enrolling procedure does not actually accept it. * Node properties are no longer converted to strings on enrolling. This is not required by the Bare Metal service and may yield incorrect results. Changes in tripleo-common 8.3.0..8.4.0 -------------------------------------- 6d82f5e Updated from global requirements 65f91f4 Add healthcheck script for Redis f02c9cb Add healthcheck script for Panko API 9ca845b Remove RH1 OVB jobs from configuration 9e32c7c Add healthcheck script for Nova placement API 59e73b8 Add Keepalived image 16ac2a0 Add more UndercloudCinder services to auto eval b032d62 Make config-download workflow's verbosity configurable fe9c189 Updated from global requirements 18a1349 Skip unnecessary image uploads 32b48af Discover every tag on prepare 448a6c2 Re-enable voting on scenario002-container 2bcbddf Octavia post deployment mistral wrapper 362029b Updated from global requirements eb7dc11 Updated from global requirements 5e426c2 Updated from global requirements f98c136 Consume blacklisted_ip_addresses in workflows 9551bfa Use community packages for Sensu 56c6af9 Fix OVN metadata agent container image footer 896d207 Add missing support for the root_device property dd24163 [Sensu] Don't use gem based plugins 49cb3b2 Always pass the plan name to fernet workbook c7c66b9 Add ansible playbook for configuring octavia 09e70b4 Discover nova hosts in cells right before deployment c4344c4 Removed incorrect user input comments 5dc478d Manage legacy OS::TripleO::RandomString resources in constants c94c707 Make plan_name configurable for config_download_deploy 7b7dd7c Convert ansible action to TripleoInventory class 785c9c0 Add get_session function to base action class 61230f4 Revert "zuul: disable voting on scenario 001, 002 and 003" a756307 Add role_data* keys to inventory 6d52b6a Switch static ansible inventory to yaml format f32e264 Fail config-download when group:os-apply-config used 81808a9 Add new image for realtime computes 117bacd Log any exceptions that occur in the tripleo.plan.update_from_dir action bf8e6be Use push_destination as the registry host in env file 73b38b0 Move more prepare logic into kolla_builder 4ea26fa Use skopeo for tag discover 0f6c3df Add docs for reloading workbooks during development 04317ff Update AnsibleGenerateInventoryAction to match new mistral interfaces 5215919 Validate parameters before updating 718aa38 Install additional packages using kolla mechanism ee98516 Lowering the number of ansible forks to 25 720a82d kolla: override mysql packages for sensu fe8619f Cleanup mistral-api override 6daf22c OvsDpdkSocketMemory MTU Roundup in bytes 5b61f5a Retry the check_default_nodes_count workflow for 2 minutes Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + README.rst | 20 ++ container-images/overcloud_containers.yaml | 1 + container-images/overcloud_containers.yaml.j2 | 9 + .../tripleo_kolla_template_overrides.j2 | 78 ++--- healthcheck/nova-placement | 6 + healthcheck/panko-api | 6 + healthcheck/redis | 27 ++ image-yaml/overcloud-realtime-compute-centos7.yaml | 9 + image-yaml/overcloud-realtime-compute-rhel7.yaml | 5 + image-yaml/overcloud-realtime-compute.yaml | 35 +++ playbooks/octavia-files.yaml | 82 ++++++ playbooks/roles/common/defaults/main.yml | 13 + .../octavia-controller-config/handlers/main.yml | 5 + .../roles/octavia-controller-config/meta/main.yml | 2 + .../tasks/certificate.yml | 15 + .../roles/octavia-controller-config/tasks/main.yml | 15 + .../tasks/netinterface.yml | 20 ++ .../octavia-controller-config/tasks/netport.yml | 57 ++++ .../octavia-controller-config/tasks/octavia.yml | 19 ++ .../templates/ifcfg-br-int.j2 | 6 + .../octavia-controller-config/templates/ifcfg.j2 | 19 ++ .../templates/manager-post-deploy.conf.j2 | 2 + .../templates/worker-post-deploy.conf.j2 | 4 + .../defaults/main.yml | 1 + .../octavia-controller-post-config/meta/main.yml | 2 + .../octavia-controller-post-config/tasks/main.yml | 44 +++ .../roles/octavia-overcloud-config/meta/main.yml | 2 + .../octavia-overcloud-config/tasks/certs_gen.yml | 72 +++++ .../roles/octavia-overcloud-config/tasks/main.yml | 5 + .../octavia-overcloud-config/tasks/network.yml | 70 +++++ playbooks/roles/octavia-undercloud/meta/main.yml | 2 + playbooks/roles/octavia-undercloud/tasks/main.yml | 15 + .../blacklisted_ips_support-f362e008ae1af210.yaml | 6 + .../notes/enroll-root-device-a172f98f50706a12.yaml | 9 + .../notes/octavia-passphrase-285a06885ac735df.yaml | 7 + releasenotes/notes/passwords-79661a3f27a33528.yaml | 8 + requirements.txt | 4 +- scripts/upgrade-non-controller.sh | 10 +- test-requirements.txt | 6 +- tripleo_common/actions/ansible.py | 47 ++- tripleo_common/actions/base.py | 30 +- tripleo_common/actions/derive_params.py | 12 +- tripleo_common/actions/parameters.py | 164 ++++++++--- tripleo_common/actions/plan.py | 2 + tripleo_common/actions/templates.py | 4 +- tripleo_common/constants.py | 14 + tripleo_common/exception.py | 11 + tripleo_common/image/image_uploader.py | 173 +++++++++-- tripleo_common/image/kolla_builder.py | 91 +++++- tripleo_common/inventory.py | 11 + tripleo_common/utils/config.py | 5 + tripleo_common/utils/nodes.py | 18 +- tripleo_common/utils/passwords.py | 15 + workbooks/access.yaml | 6 +- workbooks/ceph-ansible.yaml | 38 ++- workbooks/deployment.yaml | 20 +- workbooks/derive_params_formulas.yaml | 2 +- workbooks/fernet-key-rotate.yaml | 2 +- workbooks/octavia_post.yaml | 139 +++++++++ workbooks/skydive-ansible.yaml | 16 +- workbooks/validations.yaml | 2 + zuul.d/layout.yaml | 15 +- 71 files changed, 2174 insertions(+), 366 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 085fcd0..ca75eb6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12 +12 @@ oslo.config>=5.1.0 # Apache-2.0 -oslo.log>=3.30.0 # Apache-2.0 +oslo.log>=3.36.0 # Apache-2.0 @@ -18 +18 @@ mistral-lib>=0.3.0 # Apache-2.0 -oslo.concurrency>=3.20.0 # Apache-2.0 +oslo.concurrency>=3.25.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 5b8d803..619e6f5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -openstackdocstheme>=1.17.0 # Apache-2.0 +openstackdocstheme>=1.18.1 # Apache-2.0 @@ -12,2 +12,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx>=1.6.2 # BSD -oslotest>=1.10.0 # Apache-2.0 +sphinx!=1.6.6,>=1.6.2 # BSD +oslotest>=3.2.0 # Apache-2.0