We enthusiastically announce the release of: tripleo-heat-templates 7.0.4: Heat templates for deploying OpenStack with OpenStack. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 7.0.4 ^^^^^ New Features ************ * When using RHSM proxy, TripleO will now verify that the proxy can be reached otherwise we'll stop early and not try to subscribe nodes. Upgrade Notes ************* * The format to use for the CephPools parameter needs to be updated into the form expected by ceph-ansible. For example, for a new pool named *mypool* it should change from: { "mypool": { "size": 3, "pg_num": 128, "pgp_num": 128 } } into: [ { "name": "mypool", "pg_num": 128, "rule_name": "" } ] The first is a map where each key is a pool name and its value the pool properties, the second is a list where each item describes all properties of a pool, including its name. * Changed default address of docker0 bridge to be in the last class B private network -- 172.31.0.1/24 -- to stop conflicting with the default network range for InternalApiNetCidr. The docker0 bridge is normally unused in TripleO deployment. * When deploying with RHSM, sat-tools 6.2 will be installed instead of 6.1. The new version is supported by RHEL 7.4 and provides katello- agent package. Security Issues *************** * Live migration over TLS has been disabled since the settings it was using don't meet the required security standards. It is currently not possible to enable it via t-h-t. Other Notes *********** * With the migration from puppet-ceph to ceph-ansible for the deployment of Ceph, the format of CephPools parameter changes because the two tools use a different format to represent the list of additional pools to create. Changes in tripleo-heat-templates 7.0.3..7.0.4 ---------------------------------------------- 994922a Disable live migration over TLS 3205096 Update default cell_v2 cell when it already exists 4217767 Refactor cellv2 host discovery logic to avoid races fe9b223 Fix cinder-{backup,volume} container with pacemaker 2623100 Configure docker0 bridge address b48c114 Re-enable containerized fluentd c95a8a5 Env files for ODL deployments efcd879 Fix rights to local_settings.d for dockerized Horizon bcea7e7 Do not set cluster in maintenance mode during split stack upgrade 0ae06e1 Add --detailed-exitcodes when running puppet via ansible 2e286ec Temporarily disable fluentd from scenario001-multinode-containers 8484676 Set bind mount propegatation to shared for /var/lib/nova. 211149c Fix wrong permission on database during mysql_init tasks. 0c44d5a Set metric procssing delay for metricd 7d8b3c4 cinder: switch CinderCronDbPurgeUser to 'cinder' ba80b2b Fix iptables rules override bug in clustercheck docker service ce4bce4 mysql: Only set certificate specs if TLS everywhere is enabled 4d5686b Set ipc=host for services attaching encrypted volumes 1b1739c RHSM: when using proxy, test its connectivity first b9a04a7 Upgrade rhel_reg_sat_repo to 6.2 c1e7ff1 Add all services to container scenarios 4a08ce6 Fix nova-cpu/collectd hieradata 7779bc8 Add NetIpMap to hieradata for *ExtraConfig overrides 8f0ae91 RHSM: do not use retry to deploy katello-agent b3277ed Only mount selinux sysfs in nova_libvirt container a73cfc0 added level of indirection causes incorrect hiera config 3ac5cce Add tags to baremetal cron removal tasks 39d4fa3 Force memcached container log to file 0ec618e Fix standalone ControllerOpenstack vars f0bd09d Update CephPools format in the docker templates to fit ceph-ansible 505cecb Switch scenario004-containers to use ceph-ansible 94c624c Enable Cinder as a backend for Glance 6a7c88f Disable MongoDB in scenario002 bfbef94 Enable neutron-lbaasv2 UI in Horizon 8dff0be Run containerized mistral-api eventlet e3e0f84 Fix /etc/openstack-dashboard/ permissions for access to *policy.json 9326e34 nova-placement: switch auth_uri to keystone versionless endpoint 7e3f35d Switch RabbitFDLimit to a Puppet integer 34c286a mysql: expose IPv6 configuration to mysql puppet modules f42b2b8 Providing required priviledges to the mounted NFS volume Diffstat (except docs and test files) ------------------------------------- ci/environments/multinode-containers.yaml | 23 ++++-- .../scenario001-multinode-containers.yaml | 48 ++++++----- .../scenario002-multinode-containers.yaml | 38 +++++++-- ci/environments/scenario002-multinode.yaml | 4 +- .../scenario003-multinode-containers.yaml | 17 ++-- .../scenario004-multinode-containers.yaml | 36 ++++---- common/deploy-steps-tasks.yaml | 5 +- common/deploy-steps.j2 | 6 ++ common/services.yaml | 27 ++++++ environments/composable-roles/standalone.yaml | 12 +-- .../deployed-server-pacemaker-environment.yaml | 4 +- environments/network-isolation-v6.j2.yaml | 2 + environments/neutron-opendaylight-dpdk.yaml | 12 +-- environments/neutron-opendaylight-sriov.yaml | 9 -- .../services-docker/neutron-opendaylight-dpdk.yaml | 37 +++++++++ .../neutron-opendaylight-sriov.yaml | 22 +++++ environments/storage/enable-ceph.yaml | 2 +- environments/storage/external-ceph.yaml | 2 +- environments/storage/glance-nfs.yaml | 2 +- .../environment-rhel-registration.yaml | 2 +- .../rhel-registration/scripts/rhel-registration | 40 +++++++-- overcloud.j2.yaml | 15 ++++ puppet/all-nodes-config.j2.yaml | 6 ++ .../pre_deploy/compute/neutron-ml2-bigswitch.yaml | 21 +++-- .../controller/neutron-ml2-bigswitch.yaml | 19 ++--- puppet/role.role.j2.yaml | 12 +++ puppet/services/cinder-base.yaml | 2 +- puppet/services/database/mysql.yaml | 50 ++++++----- puppet/services/docker.yaml | 12 ++- puppet/services/glance-api.yaml | 4 +- puppet/services/gnocchi-metricd.yaml | 5 ++ puppet/services/neutron-lbaas.yaml | 3 + puppet/services/nova-compute.yaml | 2 +- puppet/services/nova-libvirt.yaml | 19 +++-- puppet/services/nova-placement.yaml | 2 +- puppet/services/rabbitmq.yaml | 2 +- ...h-pools-with-ceph-ansible-f82425e585f90ef6.yaml | 17 ++++ ...e_default_docker0_address-6a017b7078825996.yaml | 7 ++ .../notes/libvirtd-tls-6de6fb35e0ac0ab1.yaml | 6 ++ .../notes/rhsm_proxy_verify-548f104c97cf5f90.yaml | 5 ++ releasenotes/notes/sat-tools-0d0f0c53de9d34a5.yaml | 5 ++ sample-env-generator/composable-roles.yaml | 25 ++++-- tools/yaml-validate.py | 10 ++- 63 files changed, 702 insertions(+), 235 deletions(-)