We are stoked to announce the release of: tripleo-heat-templates 18.0.0: Heat templates for deploying OpenStack with OpenStack. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ For more details, please see below. 18.0.0 ^^^^^^ New Features ************ * Add support for Cinder IBM Spectrum virtualize family (Svf) driver. * Relocate the existing cinder RBD parameters in their own template. There are no new parameters, and the existing parameters retain the same default values. * Two instances of the glance-api service are now deployed per the recommendations outlined in OSSN-0090 (https://wiki.openstack.org/wiki/OSSN/OSSN-0090). The user facing service does not provide access to image location data, whereas a new internal glance-api service provides location data to administrators and services that need it (e.g. cinder and nova), and is accessible via the admin and internal keystone endpoints. Upgrade Notes ************* * Cinder IBM Spectrum virtualize family (Svf) driver deployed using ExtraConfig can switch to new template by using "environments /cinder-ibm-svf-config.yaml". * Although the cinder RBD parameters have been moved to their own file, there is no impact on upgrades because the parameters themselves are unchanged. * A new OS::TripleO::Services::GlanceApiInternal service is introduced to handle deploying the internal instance of the glance- api service. When upgrading an overcloud deployed with a custom roles file, the new GlanceApiInternal service must be added to every role that includes the GlanceApi service. Roles that include the GlanceApiEdge service should not include the new GlanceApiInternal service. Deployment of the new internal glance-api service is generally transparent, and includes updating glance's endpoints in the keystone catalog. In a Distributed Compute Node (DCN) deployment, the control plane and all DCN sites need to be updated in order to fully deploy the new internal glance-api service. * For Nova computes that need to keep running EL8, you can replace "OS::TripleO::Services::NovaLibvirt" service with "OS::TripleO::Services::NovaLibvirtLegacy" in its role files to run the monolithic libvirt. Unlike the modular deamons consumable with EL9 computes, that legacy service should only be used for Train to Wallaby skip-level (fast-forward) upgrades, and should not be used in new deployments. * Support for the "networking-ansible" plugin has been removed. * Support for VPP service and Neutron ML2/VPP plugin have been removed. Deprecation Notes ***************** * The GlanceShowMultipleLocations parameter is deprecated. * CephHciOsdType and CephHciOsdCount parameters, used by the deprecated derive parameters feature, have been removed. Changes in tripleo-heat-templates 17.0.0..18.0.0 ------------------------------------------------ fdf603173 Glance: Fix wrong format of depeneds_on key 1217a61b7 Fix list_concat for Nfs mounts db297a428 Configure a step when the old ironic-api configuration is cleaned d24d6121c Fix GlanceApiInternal network definition 4e62ae536 Remove CephHciOsdType and CephHciOsdCount parameters 3fabe90b2 Fix logs permissions for swtpm 59300dfb3 Use --force when creating pacemaker resources b532a0421 Expose /var/lib/glance to cron container 889dffa6a Fix openstack-tox* failures 3feb00400 Add support for new ovn-bgp-agent config flag d60969cb5 Deploy separate glance-api services for OSSN-0090 c36313639 Use renamed task files for podman. f813a554a Ensure standalone role data is up-to-date 9172e88a1 Ceilometer: Remove ceilometer::db parameters 243166902 Remove remaining reference to VPP and ML2/VPP plugin d52619381 Remove unnecesary tls-verify 88e510415 Glance: Ensure nfs is mounted before starting glance-api 5c34b2ff5 Use python -m instead pip directly. d940f5861 Improve volumes format check of yaml-validate.py 3626ac3df Remove support for networking-ansible 4ecf3ecaa Remove support for VPP and Neutron ML2/VPP plugin 4a1abe6c0 Fix tripleo_delegate_to parameter in heat-engine 2a0b569e1 Support for Cinder IBM Svf driver ddaa270bd Support setting ovn-ofctrl-wait-before-clear 3df912576 Inject VipPortMap to ansible group vars 673945d82 HAProxy: Remove usage of non-existing haproxy-systemd-wrapper 762a1bfd4 new tht for Cinder RBD backend 913ede039 Drop unused OS::TripleO::*::Steps resource types fff89083b Move podman socket 6560f10d1 Remove no longer used libvirt log hostpaths c084e9e31 Add legacy monolithic libvirt service for FFUv3 98e7c16ef Drop empty environment files 743c5fa0c Add roles data file for Standalone deployment e098b8172 Removing NIC scripts as the heat network config is no longer supported 8443a1be4 Remove reference to Contrail d98eaa115 OpendaylightApiNetwork is no longer used d08ee9b28 Remove leftover of MongoDB support 7bba86fc5 Run virtqemud with umask 0027 73d0abe1c Gnocchi: Remove ineffective [api] middleware 085614f1b Replace deprecated nova::os_region_name d373c4952 nova-compute: Remove old workaround to purge nova packages 9c93826b8 sshd: Strictly validate value for PasswordAuthentication 845c4625f Configure OVN DB connections by ansible fdb85e2cd Designate/Octavia: Use HA Redis by default b29ccd30e Nova: Generate wrapper scripts during config file generation Diffstat (except docs and test files) ------------------------------------- ci/custom_ci_roles_data.yaml | 9 +- ci/environments/multinode-containers.yaml | 1 + ci/environments/scenario000-standalone.yaml | 4 +- .../scenario001-multinode-containers.yaml | 1 + ci/environments/scenario001-standalone.yaml | 2 + ci/environments/scenario003-standalone.yaml | 2 +- .../scenario007-multinode-containers.yaml | 1 + .../scenario010-multinode-containers.yaml | 1 + ci/environments/scenario012-standalone.yaml | 6 +- .../ceilometer-base-container-puppet.yaml | 1 - deployment/cephadm/ceph-osd.yaml | 32 --- .../cinder/cinder-backend-ibm-svf-puppet.yaml | 96 ++++++++ deployment/cinder/cinder-backend-rbd-puppet.yaml | 117 +++++++++ .../cinder/cinder-volume-container-puppet.yaml | 80 ------ deployment/database/mysql-container-puppet.yaml | 2 +- deployment/database/mysql-pacemaker-puppet.yaml | 3 + deployment/database/redis-pacemaker-puppet.yaml | 3 + ...eutron-plugin-ml2-ansible-container-puppet.yaml | 87 ------- .../neutron-vpp-agent-baremetal-puppet.yaml | 57 ----- .../nova/nova-libvirt-container-puppet.yaml | 34 +-- .../deprecated/vpp/vpp-baremetal-puppet.yaml | 69 ------ deployment/frr/frr-container-ansible.yaml | 12 + deployment/glance/glance-api-container-puppet.yaml | 42 +++- .../glance/glance-api-edge-container-puppet.yaml | 30 +-- .../glance-api-internal-container-puppet.yaml | 183 ++++++++++++++ .../gnocchi/gnocchi-api-container-puppet.yaml | 1 - deployment/haproxy/haproxy-container-puppet.yaml | 5 +- .../haproxy/haproxy-edge-container-puppet.yaml | 16 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 5 +- deployment/heat/heat-engine-container-puppet.yaml | 2 +- deployment/ironic/ironic-api-container-puppet.yaml | 2 + deployment/metrics/collectd-container-puppet.yaml | 66 ++--- deployment/nova/nova-base-puppet.yaml | 3 +- deployment/nova/nova-compute-container-puppet.yaml | 20 +- .../nova-modular-libvirt-container-puppet.yaml | 36 ++- .../ovn/ovn-controller-container-puppet.yaml | 7 + deployment/ovn/ovn-dbs-container-puppet.yaml | 87 +++---- deployment/podman/podman-baremetal-ansible.yaml | 12 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 3 + deployment/sshd/sshd-baremetal-ansible.yaml | 2 + environments/cinder-ibm-svf-config.yaml | 31 +++ environments/deployed-server-environment.j2.yaml | 1 - environments/deployed-server-noop-ctlplane.yaml | 1 - environments/disable-neutron.yaml | 2 - environments/enable-designate.yaml | 2 +- environments/lifecycle/upgrade-prepare.yaml | 2 - environments/neutron-bgpvpn.yaml | 2 - environments/neutron-l2gw.yaml | 1 - environments/neutron-ml2-ansible.yaml | 11 - environments/neutron-ml2-vpp.yaml | 20 -- environments/noop-deploy-steps.yaml | 1 - environments/services-baremetal/octavia.yaml | 2 +- environments/services/designate.yaml | 2 +- environments/services/neutron-ml2-ansible.yaml | 11 - environments/services/octavia.yaml | 2 +- environments/services/vpp.yaml | 9 - environments/ssl/tls-everywhere-endpoints-dns.yaml | 4 +- overcloud-resource-registry-puppet.j2.yaml | 21 +- overcloud.j2.yaml | 6 + ...upport-for-ibm_svf-driver-342ca73422326f62.yaml | 9 + ..._rbd_backend_new_template-b25b017fdd7c90c1.yaml | 9 + .../glance-internal-service-86274f56712ffaac.yaml | 26 ++ .../nova_compute_el8_legacy-273fb004d090191a.yaml | 10 + ...remove-networking-ansible-c3fca3209b864aa0.yaml | 4 + .../notes/remove-vpp-d950a159ad7b3371.yaml | 4 + ...params_osd_type_osd_count-6fe114130d1e4b2e.yaml | 5 + roles/CellController.yaml | 1 - roles/Compute.yaml | 2 - roles/ComputeAlt.yaml | 2 - roles/ComputeDVR.yaml | 2 - roles/ComputeHCI.yaml | 2 - roles/ComputeHCISriov.yaml | 2 - roles/ComputeInstanceHA.yaml | 2 - roles/ComputeLocalEphemeral.yaml | 2 - roles/ComputePPC64LE.yaml | 2 - roles/ComputeRBDEphemeral.yaml | 2 - roles/ComputeRealTime.yaml | 2 - roles/ComputeSriov.yaml | 2 - roles/ComputeSriovIB.yaml | 2 - roles/ComputeSriovRT.yaml | 2 - roles/ComputeVdpa.yaml | 2 - roles/Controller.yaml | 7 +- roles/ControllerAllNovaStandalone.yaml | 2 +- roles/ControllerNoCeph.yaml | 7 +- roles/ControllerNovaStandalone.yaml | 7 +- roles/ControllerOpenstack.yaml | 2 +- roles/ControllerSriov.yaml | 7 +- roles/ControllerStorageDashboard.yaml | 7 +- roles/ControllerStorageNfs.yaml | 7 +- roles/DistributedCompute.yaml | 2 - roles/DistributedComputeHCI.yaml | 2 - roles/DistributedComputeHCIDashboard.yaml | 2 - roles/DistributedComputeHCIScaleOut.yaml | 2 - roles/DistributedComputeScaleOut.yaml | 2 - roles/HciCephAll.yaml | 2 - roles/HciCephFile.yaml | 2 - roles/HciCephMon.yaml | 2 - roles/HciCephObject.yaml | 2 - roles/Networker.yaml | 1 - roles/NetworkerSriov.yaml | 1 - roles/README.rst | 2 - roles/Standalone.yaml | 9 +- roles_data.yaml | 9 +- roles_data_standalone.yaml | 186 ++++++++++++++ sample-env-generator/ssl.yaml | 4 +- setup.py | 8 - tools/convert_nic_config.py | 220 ----------------- tools/merge-new-params-nic-config-script.py | 270 --------------------- tools/roles-data-generate-samples.sh | 3 + tools/roles-data-validation.sh | 1 + tools/yaml-validate.py | 39 ++- tox.ini | 6 +- 112 files changed, 946 insertions(+), 1246 deletions(-)