We are pleased to announce the release of: tripleo-common 8.6.7: A common library for TripleO workflows. This release is part of the queens stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo-common For more details, please see below. 8.6.7 ^^^^^ New Features ************ * Increase the size of the security hardened images to 40G. With the move to containers more disk space is needed and the disk layout has been modified. It needs a global size of 40G to work. Bug Fixes ********* * Node update now works correctly when capabilities are specified as a dict. * Add missing httpd and mod_ssl packages to octavia container image to support TLS proxy for internal TLS. * The ServerAliveInterval and ServerAliveCountMax SSH options are now set in the mistral ansible action so that when networking configuration is performed on the overcloud nodes SSH will not drop the connection. Changes in tripleo-common 8.6.6..8.6.7 -------------------------------------- 8a34366 Bump the Ceph container image to 3.2.1 bd9da1f Publish error for package_update workflow 85722e0 Set heatclient exceptions to verbose eae3867 Look for lower-case hostname when adding to ssh_known_hosts ae2d4b7 Fail node cleaning on timeout d02470c Increase size for security hardened images 8b99bba Fix AnsibleAction.run() when argument is not a dict 8c0676f IPMI doesn't mandate a username or password so tripleo shouldn't either d65c43c IPv6 healthcheck fixes for nova-vnc-proxy 5f93512 Generating fencing for capitalized MACs 80ec46f Move Octavia config opts to common config directory a95b5c5 Option to upload Octavia amphora img in RAW format 44ec3a6 Increase ansible gather_timeout to 30secs for config-download 5fd9048 Install python2-networking-ansible in neutron-server 3376b35 Bump the Ceph container image to 3.2.0 bc0d97a Catch heat exceptions in DeployStackAction 6f20788 Switch scenarios to non-voting 4f09911 Correct handling of capabilities on node update 0137623 [Queens only] Fix the default for docker registry. c4f94e3 Do not fail deploy for empty ceph ansible fetch directory 56bf1d6 Set SSH server keep alive options 660c712 Revert "Fix nova-placement healthcheck" 85f3b5f Make ODL healthcheck IPv6 compatible ada3ed7 Switch stable scenarios to voting 20ca41a Add UEFI support for hardened images ffae36c [Queens only] Fix syntax error. 91da000 Add httpd and mod_ssl packages to octavia api image 814bd2c Add on-error task to parse_node_data_lookup 2cf55be [Queens Only]Rename uwsgi-plugin-python to uwsgi-plugin-python2 for barbican 34f1c50 Revert "Remove ceph-osd after deployment succeeded in containers" 79bb8e7 Fix nova-placement healthcheck 01a4d26 Avoid getting one-empty-element-list in blacklisted_hostnames. 8076809 Upgrade docker ceph container 62711e0 Remove container_registry parameter from update workflows 573b22b Disable external plugins in rabbitmq container f51047c Add missing service for DockerCinderVolumeImage 397d42a kolla overrides: Remove yum cache Diffstat (except docs and test files) ------------------------------------- container-images/overcloud_containers.yaml | 194 ++++++++++----------- container-images/overcloud_containers.yaml.j2 | 1 + .../tripleo_kolla_template_overrides.j2 | 23 ++- healthcheck/nova-vnc-proxy | 5 + healthcheck/opendaylight-api | 5 + ...a-vnc-proxy-ipv6-handling-5d0625f1ab10d13f.yaml | 5 + .../overcloud-hardened-images-uefi-centos7.yaml | 9 + .../overcloud-hardened-images-uefi-rhel7.yaml | 5 + image-yaml/overcloud-hardened-images-uefi.yaml | 50 ++++++ image-yaml/overcloud-hardened-images.yaml | 2 +- playbooks/octavia-files.yaml | 1 + playbooks/roles/common/defaults/main.yml | 1 + .../roles/octavia-controller-config/tasks/main.yml | 2 +- .../octavia-controller-config/tasks/octavia.yml | 20 ++- .../templates/worker-post-deploy.conf.j2 | 4 - .../roles/octavia-undercloud/tasks/image_mgmt.yml | 31 +++- releasenotes/notes/caps-fix-f6f8817a48fa5c25.yaml | 4 + ...-security-hardened-images-3fc4df73a48d4a91.yaml | 7 + ...avia-internal-tls-support-f595ed1c3a1f3353.yaml | 5 + ...server-keep-alive-options-071e1b3b570e78a7.yaml | 5 + roles/tripleo-ssh-known-hosts/tasks/main.yml | 2 +- scripts/container-update.py | 4 +- tripleo_common/actions/__init__.py | 4 + tripleo_common/actions/ansible.py | 7 +- tripleo_common/actions/deployment.py | 14 +- tripleo_common/actions/files.py | 5 +- tripleo_common/actions/parameters.py | 2 +- tripleo_common/image/kolla_builder.py | 4 +- tripleo_common/utils/nodes.py | 30 +++- workbooks/baremetal.yaml | 10 +- workbooks/ceph-ansible.yaml | 22 +-- workbooks/deployment.yaml | 2 +- workbooks/octavia_post.yaml | 2 + workbooks/package_update.yaml | 14 +- zuul.d/layout.yaml | 19 +- 40 files changed, 557 insertions(+), 239 deletions(-)