We eagerly announce the release of: tripleo-heat-templates 8.0.2: Heat templates for deploying OpenStack with OpenStack. This release is part of the queens stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 8.0.2 ^^^^^ New Features ************ * Add Parameters to Configure Ulimit for Containers. These parameters can be used to configure ulimit per container basis as per the requirement of the deployment. Following parameters are added for neutron, nova and cinder:- - DockerNeutronDHCPAgentUlimit defaults to nofile=1024 - DockerNeutronL3AgentUlimit defaults to nofile=1024 - DockerOpenvswitchUlimit defaults to nofile=1024 - DockerNovaComputeUlimit defaults to nofile=1024 - DockerCinderVolumeUlimit defaults to nofile=131072 Deprecation Notes ***************** * Using 'client' for OvsVhostuserMode parameter. See 'vhost-user' section at http://docs.openvswitch.org/en/latest/topics/dpdk/vhost- user/ * odl-dlux-all feature for OpenDaylight is no longer supported and removed from default installed OpenDaylightFeatures. See https://bugs.launchpad.net/tripleo/+bug/1751857 Bug Fixes ********* * When using get-occ-config.sh with a role using a count greater than 1, the script will now configure all nodes that are of that role type instead of exiting after only configuring the first. * Fixes Neutron certificate and key for TLS deployments to have the correct user/group IDs. * Fixes missing type "flat" from the default allowed network types for the ODL OVS parameter HostAllowedNetworkTypes. See https://bugs.launchpad.net/tripleo/+bug/1762495 * Fixes default of vhostuser_mode in ODL-OVS to be server, and clarifies the configuration parameter. See https://bugs.launchpad.net/tripleo/+bug/1762473 * Delete ODL data folder while updating/upgrading ODL. * The default values for the PcsdPassword and PacemakerRemoteAuthkey parameters have been removed, as they did not result in a functioning pacemaker installation. These values are instead generated by tripleo-common, and in the cases where they are not (direct API), we want to fail explicitly if they are not provided. * "{{role.name}}ExtraConfig" will now be honored even when using deprecated params in roles_data.yaml. Previously, its value was ignored and never used even though it is defined as a valid parameter in the rendered template. Changes in tripleo-heat-templates 8.0.1..8.0.2 ---------------------------------------------- 5818195 Revert "Fixes ceph-external docker service name" 17be56b Disallow SSLv2, SSLv3 and TLS1.0 in httpd for FedRAMP compliance. d838e87 Reduce verbosity during mysql bootstrap eec1d48 Correct indentation and file path 4390032 Rely on client defaults for the Ceph container image to use in CI bb9d778 FFU: Use yum shell instead of ansible yum module eff22ee Disable FluentClient service for ffwd/upgrades. e4a85e5 Consume RoleData config from config download files e00e5b2 Upgrade: make bundles use new container image name after upgrade af81644 Add validation task in docker services [Octavia] a51fa30 Removes odl-dlux-gui feature for ODL 7fb5171 Update environment files for Q upgrade and ffwd upgrade 9d2fe5b Add prepare/converge env files for update 367605c Update OS::TripleO::Services::ComputeNeutronCorePlugin for containers ca09d08 Set ulimit for nova-compute and cinder-volume a16c4ec Fix typo in ovn_cms_options config 5592670 Removed unnecessary services from the LiquidioCompute role. 9e7417b Mount the public TLS certificate for HAProxy on up(date|grade) on pacemaker ba7e1b5 Fix missing allowed network type 'flat' for ODL OVS c36e41f Added network enabled check in multiple nic role rendering file d5f8581 Remove config.json for old style nic config files when using new style c80ce85 Fixes the OvsVhostuserMode heat parameter b055eb3 Apply the vhost group parameter for the vhost_sockets directory creation 630874f Fixes ceph-external docker service name ff37016 Correct the InternalTLSVncCAFile to comply with selinux policy f30d135 [queens] Put back (now empty) fluentd-client.yaml 6d936d6 Set ulimit for neutron agent containers c72c1fa Add firewall rule to octavia health mgmt iface 18892b0 Enable Octavia dashboard on horizon container 324646d Revert "FFU: Add support for panko service upgrade" cbb1ed5 Added Liquidio service definition in overcloud puppet registry da28a08 Do not create NetworkVlanID is the value is not defined 7299ad4 Fixes Neutron certificate and key permissions 5d76614 Collectd needs access to /var/run/ceph to load the ceph plugin c454aea Refresh keystone after deployment d97fc05 get-occ-config.sh: fix handling multiple nodes in a role 7f95de6 Remove default value for pacmaker passwords 2113bf3 Remove the os-net-config element config.json template 6b656b9 FFU: Add support for panko service upgrade e48be8e Remove the lacp bond mode constraints f8b5a94 Added the missing attributes for roles_data of ovs-dpdk-agent docker service 8fece3d Resource name correction aec6b1d Fix fluentd upgrade tasks during FFU. 5a49f34 FFU: Fix gnocchi FFU tasks 123e6fe HAProxy: expose stats socket in HA deployment after upgrade f2e19a5 Honor {{role.name}}ExtraConfig with deprecated params 8c22a64 Correctly set NeutronMl2PluginBase for OVN scenario 9cb286d Upgrade data on disk on mysql major upgrade - non HA 2968876 Assign Cinder's backend_host when deploying for HA f4cd1f9 Make heat parameter plugin_dirs configurable 8b13e83 Add support of netapp configuration for glance in THT Diffstat (except docs and test files) ------------------------------------- .../scenario001-multinode-containers.yaml | 1 - .../scenario004-multinode-containers.yaml | 1 - .../scenario007-multinode-containers.yaml | 1 + common/deploy-steps-tasks.yaml | 64 +++++++- deployed-server/scripts/get-occ-config.sh | 2 +- environments/cavium-liquidio.yaml | 6 + environments/fast-forward-upgrade.yaml | 18 --- environments/lifecycle/ffwd-upgrade-converge.yaml | 10 ++ environments/lifecycle/ffwd-upgrade-prepare.yaml | 27 ++++ environments/lifecycle/update-converge.yaml | 5 + environments/lifecycle/update-prepare.yaml | 7 + environments/lifecycle/upgrade-converge.yaml | 9 ++ environments/lifecycle/upgrade-prepare.yaml | 21 +++ .../major-upgrade-composable-steps-docker.yaml | 15 -- environments/major-upgrade-composable-steps.yaml | 13 -- environments/major-upgrade-converge-docker.yaml | 12 -- environments/major-upgrade-converge.yaml | 11 -- environments/network-environment-v6.j2.yaml | 2 + environments/network-environment.j2.yaml | 2 + environments/storage/glance-nfs.yaml | 8 + .../bond-with-vlans/controller-no-external.j2.yaml | 4 - .../config/bond-with-vlans/controller-v6.j2.yaml | 4 - network/config/bond-with-vlans/role.role.j2.yaml | 4 - network/config/multiple-nics/role.role.j2.yaml | 2 +- network/scripts/run-os-net-config.sh | 8 + overcloud-resource-registry-puppet.j2.yaml | 3 +- puppet/extraconfig/tls/tls-cert-inject.yaml | 33 +++- puppet/role.role.j2.yaml | 2 +- puppet/services/apache.j2.yaml | 1 + puppet/services/glance-api.yaml | 39 +++++ puppet/services/heat-engine.yaml | 5 + puppet/services/neutron-plugin-ml2-nuage.yaml | 4 +- puppet/services/nova-libvirt.yaml | 2 +- puppet/services/nova-vnc-proxy.yaml | 2 +- puppet/services/octavia-health-manager.yaml | 11 ++ puppet/services/opendaylight-api.yaml | 2 +- puppet/services/opendaylight-ovs.yaml | 13 +- puppet/services/pacemaker.yaml | 2 - puppet/services/pacemaker/cinder-volume.yaml | 2 +- puppet/services/pacemaker_remote.yaml | 2 - ...arams_to_configure_ulimit-2359aa058da58054.yaml | 15 ++ ...with-role-count-greater-1-10ce2010556e5b76.yaml | 5 + ...utron-cert-key-perms.yaml-efcc17f188798cc4.yaml | 5 + ...ovs-allowed-network-types-d196d6d40fadb1bc.yaml | 6 + ...fix-odl-ovs-vhostusermode-7bc2b64fd2676ca2.yaml | 10 ++ .../odl_delete_data_folder-b8c2f9a9382fd692.yaml | 3 + .../remove-odl-dlux-gui-4728de06c973cd53.yaml | 6 + ...-passwords-default-values-dd0cfdf7922ecf90.yaml | 7 + ...aConfig-with-deprecations-2688f34fbc6de74a.yaml | 6 + roles/ComputeLiquidio.yaml | 3 - sample-env-generator/storage.yaml | 2 + 87 files changed, 1066 insertions(+), 226 deletions(-)