We are glad to announce the release of: puppet-octavia 14.1.0: Puppet module for OpenStack Octavia This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-octavia/ For more details, please see below. 14.1.0 ^^^^^^ New Features ************ * Added new parameter octavia::api::allow_tls_terminated_listeners which can be used to set the allow_tls_terminated_listeners config option. * Added new parameters octavia::api::api_v1_enabled and api_v2_enabled that can be used for enable/disable the API versions. * Listeners default timeouts can be set by config in section haproxy_amphora: * *timeout_client_data*: Frontend client inactivity timeout * *timeout_member_connect*: Backend member connection timeout * *timeout_member_data*: Backend member inactivity timeout * *timeout_tcp_inspect*: Time to wait for TCP packets for content inspection The value for all of these options is expected to be in milliseconds. * Added new parameter cert_generator, cert_manager, region_name and endpoint_type to the octavia::certificates class that configures the certificates section in the octavia.conf file. * Added new parameter client_ca and client_data_data to octavia::certificates. These can be used to separate the ca_certificate/server_ca and client_ca used which is something you want to do in production environment to avoid a compromised Amphora being able to connect to the other running amphoras. * Added new parameter octavia::worker::workers that can be used to set the number of worker processes. * Added all databases parameters in octavia::db in octavia::init. * Added new class octavia::wsgi::apache, you can now run the API under Apache with mod_wsgi. * Added new octavia::glance class that can be used to configure the glance section in octavia.conf * Added new octavia::neutron class that can be used to configure the neutron section in octavia.conf * Added new octavia::nova class that can be used to configure the nova section in octavia.conf * When certificate data or file paths change in octavia::certificates it will not cause a restart of the Octavia services so that for example the octavia-worker service can use the new certificates. Upgrade Notes ************* * The octavia::db class should now be considered a private class. You should set all your database parameters in the init class. * Octavia option [haproxy_amphora]/key_path will no longer be set. None of the maintained Octavia releases support it (removed in Mitaka). Deprecation Notes ***************** * The following octavia::worker parameters are deprecated and have been moved to octavia::controller class. * amp_flavor_id * amp_image_tag * amp_secgroup_list * amp_boot_network_list * loadbalancer_topology * amphora_driver * compute_driver * network_driver * amp_ssh_key_name * enable_ssh_access * timeout_member_connect * timeout_member_data * timeout_tcp_inspect Bug Fixes ********* * There are a couple of configuration options that need to be set not only for the worker but also for other Octavia services. For example, on a composable node deployment where the API runs on a separate node than the rest of the Octavia services, the network driver was not being set (hence defaulting to noop driver) while for the worker the driver was allowed_address_pairs_driver. Another example is the database that was only being set for the API service. Such configuration misalignment and omissions lead to operate Octavia services and its resources. Changes in puppet-octavia 13.3.0..14.1.0 ---------------------------------------- 01593b1 Prepare Stein M1 d86bba9 Fix stdlib version in metadata ab310a6 Certificate changes should restart services b264336 Set common configuration options across services 6c768b0 Do not set inexistent haproxy_amphora/key_path 2bf9dc6 Add posibilities to set default values for timeouts 13989b4 Removed faulty option in context block a040311 Update min tox version to 2.0 7acccc6 Dissuade .gitignore references to personal tools 7820189 Add release note for database change c65d6cc Fix the duplicated vars defined 8833f40 Fix stupid spacing 2b83ae2 Add octavia::certificates::client_ca and data e78054f switch documentation job to new PTI 28421c7 import zuul job settings from project-config 45673ee Added missing DB params to init class e1531c3 Add Octavia API WSGI support 9825353 Bump version for the start of Stein d2a9586 Add octavia::neutron to configure nova section 6731e53 Add octavia::glance to configure glance section 9b285e7 Add missing options to octavia::certificates 6864cd0 Add octavia::nova to configure nova section 7d6bada Add workers support to octavia::worker class 6e7dacc Add api_v1_enabled and api_v2_enabled options 14c5257 Add allow_tls_terminated_listeners config option e361fe8 Add the missing 'Table of Contents' 54c9e53 Update reno for stable/rocky 3296b0f Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitignore | 12 +- .zuul.yaml | 1 + README.md | 2 + manifests/api.pp | 80 +++++++--- manifests/certificates.pp | 78 ++++++++- manifests/controller.pp | 129 +++++++++++++++ manifests/db.pp | 33 ++-- manifests/deps.pp | 3 + manifests/glance.pp | 38 +++++ manifests/health_manager.pp | 1 + manifests/housekeeping.pp | 1 + manifests/init.pp | 48 ++++++ manifests/neutron.pp | 38 +++++ manifests/nova.pp | 57 +++++++ manifests/params.pp | 7 +- manifests/worker.pp | 175 +++++++++++---------- manifests/wsgi/apache.pp | 155 ++++++++++++++++++ metadata.json | 18 +-- ..._tls_terminated_listeners-5555b0b3bc8c5313.yaml | 5 + .../notes/api-v1-v2-options-393e026d4d22b94d.yaml | 5 + .../notes/bug-1797130-789318b2dff121d3.yaml | 11 ++ .../certificates-options-45294bca5186878e.yaml | 6 + releasenotes/notes/client-ca-b05d5a5e4a93bfe3.yaml | 6 + .../notes/controller-workers-947eada7f23b5da9.yaml | 5 + releasenotes/notes/db-init-7a0087aca12e0530.yaml | 8 + .../notes/octavia-api-wsgi-2d9469478fd2cd28.yaml | 5 + .../notes/octavia-glance-37d48b9829d6ca8d.yaml | 5 + .../notes/octavia-neutron-7d3d9cc0e95ecb11.yaml | 5 + .../notes/octavia-nova-0205d7406d58e871.yaml | 5 + ...-haproxy-amphora-key-path-bf21706a6504e28f.yaml | 4 + ...start-service-certificate-b4000c445374129c.yaml | 6 + ...n-options-across-services-91a9057d62b52de0.yaml | 29 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + spec/classes/octavia_api_spec.rb | 74 +++++++-- spec/classes/octavia_certificates_spec.rb | 90 ++++++++++- spec/classes/octavia_controller_spec.rb | 68 ++++++++ spec/classes/octavia_glance_spec.rb | 45 ++++++ spec/classes/octavia_init_spec.rb | 17 +- spec/classes/octavia_neutron_spec.rb | 45 ++++++ spec/classes/octavia_nova_spec.rb | 54 +++++++ spec/classes/octavia_worker_spec.rb | 10 +- tox.ini | 2 +- 43 files changed, 1236 insertions(+), 157 deletions(-)