We are excited to announce the release of: puppet-tripleo 9.4.0: Puppet module for OpenStack TripleO This release is part of the rocky stable release series. The source is available from: http://git.openstack.org/cgit/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo (tag: puppet) For more details, please see below. 9.4.0 ^^^^^ New Features ************ * Support setting values for "cephfs_volume_mode" parameter which controls the rwx mode of the cephfs volumes, snapshots, and groups of these that back manila shares. * Add support to enable ODL deployment on IPv6 networks * Added Dell EMC SC multipath support This change adds support for cinder::backend::dellsc_iscsi::use_multipath_for_image_xfer. * Add new parameter haproxy_log_facility. * Adds support to configure disjoint address pools for Ironic Inspector. When Inspector is deployed as a HA service disjoint address pools should be served by the DHCP instances to avoid address conflict issues. Bug Fixes ********* * Masquerading and forwarding rules are now correctly created when using routed networks. (See bug: 1797455 (https://bugs.launchpad.net/tripleo/+bug/1797455).) * With nova metadata api running via wsgi we do not need the ssl proxy when configure tls-everywhere as we terminate ssl direct in the httpd wsgi. With this change we only create the ssl proxy vhost if we do not run nova metadata via wsgi. Changes in puppet-tripleo 9.3.0..9.4.0 -------------------------------------- ae1f373f Prepare 9.4.0 (Rocky) release d62923b8 Support cephfs_volume_mode parameter d2c020c6 Change haproxy mode to http for octavia 4ddb8a6b Prepare 9.3.1 (Rocky) release f6ff6ca9 neutron dhcpd: Add script for certmonger postsave_cmd 381a1e0a novnc-proxy: Remove default post-save command for certmonger 763467d7 redis: Remove default post-save command for certmonger 219c0f48 rabbitmq: Remove default post-save command for certmonger f7c71486 httpd: Remove default post-save command for certmonger 4fcbe24b Reload HAProxy when certificate is renewed ed2c3d22 mysql: fix root password update for containerized mysql b35b8076 mysql: use clustercheck credentials to poll galera state c5977cd0 Allow to set log facility for HAProxy 54f9be0a Configure the Metadata Agent only when enable_metadata_agent is set e8adf4b3 Create barbican's creator role by default 035c834e Explicitly set certmonger's CA cert's permissions 60a0f973 Filter apache_certificates_specs if hostname is empty 9c35d049 Configure switchedv while there is no vfs bounded 608096fb Remove some of the excessive rabbitmq bundle logging 33063cdd Make sure we do not match multiple remotes when waiting for them fa04ef8f Ironic Inspector - disjoint ip range(s) for HA d983e954 Add additional tuning options for mariadb/galera 19eb214c Allow user to define a custom tuned profile ee80be0c Increase websocket timeout fbbca5c0 Include octavia::controller fd933ab3 Set balance to source for openshift_master endpoints 19c97f0b Switch scenarios to non-voting 68301f4f Dell EMC SC: Add use_multipath_for_image_xfer e816143c Pass variable from puppet-tripleo to puppet-neutron 34bf798e Enable disablereuse option in Zaqar proxy backend 1c6d1831 Include ::cinder::nova in cinder's configuration 0f5e96c7 Switch stable scenarios to voting 6ec97c70 Make sure that the _member_ role is assigned to admin. 2a3225af Fix Undercloud masquerading firewall rules b6ed72c6 Pin puppet-snmp daa67198 Disable puppet-5 jobs c6f8f9bf ceilometer: escape % in crontab 148347b2 Fix ceph-nfs duplicate property 78b51d07 Add support for ODL-OVS IPv6 deployment 123be292 Fix nic_alias fact error 80180aab Introduce alternative to get ip_addresses and server_names b3d4ca0b Copytruncate containerized logrotate configuration 91e1ff09 Do not create metadata ssl proxy if we have metadata api via httpd wsgi 6805fcad Make sure that ceph-nfs and the VIP start in the right order 681e07a7 Disable chrony-wait 501f10c4 adding deployment_type fact in support 0070ba91 Fix fluentd multifile problem. afef5413 Enable TLS in the internal network for Octavia API a6eaab14 Make sure rhel-plugin-push.service is stopped after pacemaker stops 05c72215 import zuul job settings from project-config aeb5ce50 Update Gemfile for stable/rocky 0134f91b Conditionalize rndc changes cda96f8b add scenario003 tests when designate changes 9ca548e0 Update UPPER_CONSTRAINTS_FILE for stable/rocky 0a4a7961 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 1 + Puppetfile_extras | 6 +- files/certmonger-haproxy-refresh.sh | 51 +++++++++++++++ files/certmonger-neutron-dhcpd-refresh.sh | 21 +++++++ files/certmonger-novnc-proxy-refresh.sh | 17 +++++ files/certmonger-rabbitmq-refresh.sh | 17 +++++ files/certmonger-redis-refresh.sh | 14 +++++ lib/facter/nic_alias.rb | 11 +++- lib/puppet/functions/add_brackets.rb | 14 +++++ lib/puppet/provider/sriov_vf_config/numvfs.rb | 60 +----------------- manifests/certmonger/ca/local.pp | 7 +++ manifests/certmonger/haproxy.pp | 29 +++++---- manifests/certmonger/httpd.pp | 3 +- manifests/certmonger/neutron.pp | 8 ++- manifests/certmonger/novnc_proxy.pp | 10 ++- manifests/certmonger/rabbitmq.pp | 11 +++- manifests/certmonger/redis.pp | 8 ++- manifests/fencing.pp | 2 +- manifests/haproxy.pp | 13 +++- manifests/haproxy/endpoint.pp | 24 +++++++- manifests/host/sriov/numvfs_persistence.pp | 7 ++- manifests/masquerade_networks.pp | 24 +++++--- manifests/profile/base/ceilometer/expirer.pp | 2 +- manifests/profile/base/certmonger_user.pp | 38 +++++++----- manifests/profile/base/cinder.pp | 1 + manifests/profile/base/cinder/volume/dellsc.pp | 29 ++++----- manifests/profile/base/database/mysql.pp | 19 ++++++ manifests/profile/base/database/mysql/client.pp | 2 +- manifests/profile/base/designate.pp | 20 +++--- manifests/profile/base/designate/worker.pp | 10 +-- manifests/profile/base/ironic_inspector.pp | 51 +++++++++++++-- manifests/profile/base/keystone.pp | 13 +++- .../base/logging/fluentd/fluentd_service.pp | 4 +- manifests/profile/base/logging/logrotate.pp | 5 ++ manifests/profile/base/manila/share.pp | 1 + manifests/profile/base/neutron/agents/nuage.pp | 27 +++++--- .../base/neutron/plugins/ml2/opendaylight.pp | 9 +++ .../base/neutron/plugins/ovs/opendaylight.pp | 26 ++++++-- manifests/profile/base/nova/api.pp | 2 +- manifests/profile/base/octavia/api.pp | 72 +++++++++++++++++++++- manifests/profile/base/octavia/health_manager.pp | 1 + manifests/profile/base/octavia/housekeeping.pp | 1 + manifests/profile/base/octavia/worker.pp | 1 + manifests/profile/base/pacemaker.pp | 7 ++- manifests/profile/base/pacemaker_remote.pp | 5 ++ manifests/profile/base/time/ntp.pp | 5 ++ manifests/profile/base/tuned.pp | 22 ++++++- manifests/profile/pacemaker/ceph_nfs.pp | 38 +++++++++--- .../profile/pacemaker/database/mysql_bundle.pp | 37 +++++++++-- manifests/profile/pacemaker/rabbitmq_bundle.pp | 14 +++++ manifests/ui.pp | 5 +- metadata.json | 2 +- ...eph_volume_mode-parameter-220b1026aebd9e3b.yaml | 5 ++ ...pport-for-IPv6-deployment-988400c781b92066.yaml | 4 ++ .../notes/dellsc-driver-b7cd300a24a64b01.yaml | 5 ++ .../fix-masquerade-networks-c9ab4affb17627e1.yaml | 6 ++ .../notes/haproxy-facility-8196cc8e1299d79b.yaml | 3 + ...joint-inspection-ip-range-f10297dd32f3721b.yaml | 6 ++ ...otate-copytruncate-hourly-f0851bec551f5f5f.yaml | 5 ++ .../nova-metadata-wsgi-ssl-a64c2b9a99deb7a9.yaml | 7 +++ spec/classes/tripleo_certmonger_ca_local_spec.rb | 8 +++ spec/classes/tripleo_haproxy_spec.rb | 26 ++++++++ spec/classes/tripleo_masquerade_networks_spec.rb | 15 ++++- ...tripleo_profile_base_ceilometer_expirer_spec.rb | 2 +- spec/classes/tripleo_profile_base_cinder_spec.rb | 6 ++ ...pleo_profile_base_database_mysql_client_spec.rb | 22 +++++++ .../tripleo_profile_base_logging_fluentd_spec.rb | 29 +++++++++ ...o_profile_base_neutron_ovs_opendaylight_spec.rb | 59 ++++++++++++++++-- .../tripleo_profile_base_octavia_api_spec.rb | 31 ++++++++++ spec/classes/tripleo_profile_base_tuned_spec.rb | 23 ++++++- .../tripleo_host_sriov_numvfs_persistence_spec.rb | 29 --------- templates/logrotate/containers_logrotate.conf.erb | 12 ++-- templates/switchdev/switchdev.epp | 29 --------- tox.ini | 2 +- zuul.d/layout.yaml | 54 +++------------- 76 files changed, 898 insertions(+), 318 deletions(-)