We are amped to announce the release of: puppet-tripleo 14.0.0: Puppet module for OpenStack TripleO This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * Add ability to specify memcached port for all services. The port defaults to hiera('memcached_authtoken_port', 11211) for authtoken middleware and hiera('memcached_port', 11211) for other uses. * This change introduces two hiera keys that allow an operator to specify which NIC (or NICs) the VIPs will be bound to. One hiera key has global effect (tripleo::pacemaker::force_nic) and forces all VIPs to listen to that NIC. There is also the possibility to override that for specific VIPs with the force_vip_nic_overrides hiera hash. This change is only useful for deployments where BGP is used to advertise IP addresses from the host across multiple L3 networks. Upgrade Notes ************* * Management of login.defs file has been removed because now the file is managed by ansible. Changes in puppet-tripleo 13.4.0..14.0.0 ---------------------------------------- 9692df80 Bump metadata for wallaby-2 release 203d8aee Fix container and user name when restarting memcached 06e13188 Fix manila-share with ceph-nfs backend f460e659 Add ability to specify memcached port 4c334c0c Wire up new tripleo upgrades jobs template 83705175 Fix wrong file names of some unit test files 0a4a2dc0 Remove the unused template file for selinux 53617a34 Remove the unused template file for tripleo-ui 43a75e87 Remove the unused template file for aide support 4f1acfed Remove the unused template file for securetty 57988420 Remove management of login.defs 950275ed Glance: Include the required classes for image cache 5e51e151 Remove unused tripleo::network::os_net_config 190aebca Adding key_size option on the certmonger_certificate function 18908ff5 Defauts mariadb's innodb_strict_mode to OFF c47aa021 Fix nic selection when no nic is specified 09c5ff76 Remove /etc/ceph dependency on puppet services eaca38aa Filter haproxy_certificate_specs if hostname is empty ec21edf4 Enable ovn controller to be updated before ovn-northd. d77a3cdf Force MySQL / MariaDB log_warnings to 1 287b1b6c Stop including nova::metadata on computes f14bdbae Support configuring multiple Netapp cinder backends 056ace0c Generic cluster properties support 881084d6 Allow to specify a nic for the VIPs 2b44f5c3 Cleanup old workaround for ipv6 VIPs 5836bcc1 galera: expose 2-node mode for the galera resource 67521538 Replace deprecated UPPER_CONSTRAINTS_FILE variable b7105285 Update master for stable/victoria e3a3d3da Make sure qemu CA has correct permissions 2bce18d3 Remove Sahara support Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- files/certmonger-memcached-refresh.sh | 6 +- manifests/certmonger/ceph_dashboard.pp | 6 + manifests/certmonger/ceph_grafana.pp | 6 + manifests/certmonger/ceph_rgw.pp | 6 + manifests/certmonger/etcd.pp | 6 + manifests/certmonger/haproxy.pp | 6 + manifests/certmonger/httpd.pp | 6 + manifests/certmonger/libvirt.pp | 6 + manifests/certmonger/libvirt_vnc.pp | 6 + manifests/certmonger/memcached.pp | 6 + manifests/certmonger/metrics_qdr.pp | 6 + manifests/certmonger/mysql.pp | 6 + manifests/certmonger/neutron.pp | 6 + manifests/certmonger/neutron_ovn.pp | 6 + manifests/certmonger/novnc_proxy.pp | 5 + manifests/certmonger/openvswitch.pp | 6 + manifests/certmonger/ovn_controller.pp | 6 + manifests/certmonger/ovn_dbs.pp | 6 + manifests/certmonger/ovn_metadata.pp | 6 + manifests/certmonger/ovn_octavia.pp | 6 + manifests/certmonger/qemu.pp | 26 +++++ manifests/certmonger/rabbitmq.pp | 6 + manifests/certmonger/redis.pp | 6 + manifests/haproxy.pp | 27 ----- manifests/network/os_net_config.pp | 47 -------- manifests/pacemaker/haproxy_with_vip.pp | 18 ++- manifests/profile/base/aodh/authtoken.pp | 9 +- manifests/profile/base/barbican/authtoken.pp | 9 +- manifests/profile/base/certmonger_user.pp | 10 +- manifests/profile/base/cinder/authtoken.pp | 9 +- manifests/profile/base/cinder/volume.pp | 13 ++- manifests/profile/base/cinder/volume/netapp.pp | 102 ++++++++++------- manifests/profile/base/database/mysql.pp | 47 ++++---- manifests/profile/base/designate/authtoken.pp | 9 +- manifests/profile/base/glance/api.pp | 9 ++ manifests/profile/base/glance/authtoken.pp | 9 +- manifests/profile/base/glance/backend/rbd.pp | 28 +++-- manifests/profile/base/gnocchi/api.pp | 13 ++- manifests/profile/base/gnocchi/authtoken.pp | 9 +- manifests/profile/base/heat.pp | 9 +- manifests/profile/base/heat/authtoken.pp | 9 +- manifests/profile/base/ironic/authtoken.pp | 9 +- .../profile/base/ironic_inspector/authtoken.pp | 9 +- manifests/profile/base/keystone.pp | 7 +- manifests/profile/base/login_defs.pp | 80 ------------- manifests/profile/base/manila/authtoken.pp | 9 +- manifests/profile/base/manila/share.pp | 10 +- manifests/profile/base/mistral/authtoken.pp | 9 +- manifests/profile/base/neutron/agents/ovn.pp | 3 +- manifests/profile/base/neutron/authtoken.pp | 9 +- manifests/profile/base/nova.pp | 9 +- manifests/profile/base/nova/authtoken.pp | 9 +- manifests/profile/base/nova/compute.pp | 5 - .../profile/base/nova/compute_libvirt_shared.pp | 17 ++- manifests/profile/base/novajoin/authtoken.pp | 9 +- manifests/profile/base/octavia/authtoken.pp | 9 +- manifests/profile/base/pacemaker.pp | 7 ++ manifests/profile/base/placement/authtoken.pp | 9 +- manifests/profile/base/sahara.pp | 127 --------------------- manifests/profile/base/sahara/api.pp | 34 ------ manifests/profile/base/sahara/engine.pp | 45 -------- manifests/profile/base/swift.pp | 6 +- manifests/profile/base/swift/proxy.pp | 6 +- manifests/profile/base/zaqar/authtoken.pp | 9 +- manifests/profile/pacemaker/ceph_nfs.pp | 5 +- .../profile/pacemaker/cinder/backup_bundle.pp | 7 +- .../profile/pacemaker/cinder/volume_bundle.pp | 7 +- manifests/profile/pacemaker/database/mysql.pp | 1 + .../profile/pacemaker/database/mysql_bundle.pp | 14 ++- manifests/profile/pacemaker/haproxy_bundle.pp | 33 ++++++ manifests/profile/pacemaker/manila/share_bundle.pp | 7 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 29 ++++- metadata.json | 2 +- .../notes/add-memcached-port-048959c2f58f0a57.yaml | 6 + .../notes/remove-login_defs-408e25efb875425f.yaml | 5 + .../notes/vip-bind-nic-11e80207fcb78a20.yaml | 10 ++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + ...n_dbs.rb => tripleo_certmonger_ovn_dbs_spec.rb} | 0 ...ipleo_profile_base_cinder_volume_netapp_spec.rb | 23 ++++ .../tripleo_profile_base_cinder_volume_spec.rb | 11 +- .../tripleo_profile_base_glance_api_spec.rb | 26 +++++ .../tripleo_profile_base_login_defs_spec.rb | 56 --------- spec/fixtures/hieradata/step5.yaml | 6 + .../{ini_setting.rb => ini_setting_spec.rb} | 34 +++++- ...idio_config_sepc.rb => liquidio_config_spec.rb} | 4 +- templates/aide/aide.conf.erb | 3 - templates/securetty/securetty.erb | 4 - templates/selinux/sysconfig_selinux.erb | 11 -- templates/ui/tripleo_ui_config.js.erb | 28 ----- tox.ini | 2 +- zuul.d/layout.yaml | 1 + 93 files changed, 698 insertions(+), 635 deletions(-)