We are glad to announce the release of: instack-undercloud 6.1.0: instack-undercloud This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 6.1.0 ^^^^^ Upgrade Notes ************* * Changed the configuration of endpoints that UI uses in order to connect to the Undercloud in a non-SSL deployment. The port number that the UI now uses to communicate with the Undercloud for non-SSL connections is 3000, which supports endpoint proxy configuration. Previously, this port number was the default port number for the service endpoint that UI connected to. Bug Fixes ********* * Fixes bug 1668775 Certmonger certificate does not include EKUs * Add gnocchi to events dispatcher so ceilometer can publish events to panko and gnocchi. * Add OS_AUTH_TYPE to undercloud stackrc file. Not all clients default to keystone auth, so lets explicitly set the auth type in env. * Fixes bug 1663199 UI doesn't work without manual update on HTTP undercloud * In /etc/heat/heat.conf, [clients]/endpoint_type was configured to use the internal endpoints and this was hardcoded in puppet-stack- config.pp so there was no way to change it. It's now configurable via the hiera key heat_clients_endpoint_type. * The Heat CFN endpoint is now created in Keystone during the undercloud install. A new configuration option, undercloud_heat_cfn_password is added for the heat_cfn service user associated with the endpoint. * Previously, when an IP value was provided for the undercloud_public_host or undercloud_admin_host config value, it was validated to ensure it fell within the network_cidr. This was to avoid problems when the CIDR was changed but the IPs were not. However, this validation was broken for a time in the case where generate_service_certificate was used. During this time, the UI began to depend on the broken validation as it needs to listen on a routable network, which the provisioning network often is not. When the validation was fixed, the user was no longer able to configure the host values to listen on a different routable network. To enable this UI functionality again, the host validation has been disabled when enable_ui is true. This means the user is responsible for selecting functional host values, but the UI can once again be configured to listen on a separate network. * Add a dependency to restart collector after other services are up and ceilometer upgrade is complete. * Run ceilometer-upgrade conditionally when gnocchi is running so that gnocchi resource types are created. Changes in instack-undercloud 6.0.0..6.1.0 ------------------------------------------ 6790ae8 Update Gemfile to pull spec_helper from stable/ocata f879305 Set a dependency on collector d8aa7d1 Dont include wsgi profile when legacy flag is disabled ff55e17 Set default domain for all keystone users dc6566d Replace hardcoded regions by hiera call 7aff3cd Remove obsolete flag on gnocchi-upgrade f23f320 Add gnocchi to events dispatchers c01722c Create Heat API CFN endpoint 8c0de18 Increase size of heat json message e32b025 Disable VIP validation when UI is enabled f62bc50 Set OS_AUTH_TYPE on undercloud stackrc 63d085e Run ceilometer-upgrade for gnocchi conditionally d29886e Configurable [clients]/endpoint_type for heat.conf 97f3eeb Use purged for firewalld 5f47eeb Align stars to fix CI 9a1bafa Provide correct non-SSL port config in ui config dd5c683 Add certificate EKUs to public endpoint cert Diffstat (except docs and test files) ------------------------------------- Gemfile | 6 +-- bindep.txt | 0 .../puppet-stack-config/puppet-stack-config.pp | 43 +++++++++++++++++++--- .../puppet-stack-config.yaml.template | 28 +++++++++----- .../os-apply-config/root/stackrc | 2 + instack_undercloud/undercloud.py | 32 ++++++++++------ instack_undercloud/validator.py | 9 ++++- .../add-certificate-ekus-13e92513c562f0dc.yaml | 5 +++ ...-gnocchi-event-dispatcher-d70df046292e333e.yaml | 4 ++ .../notes/add-os-auth-type-5ed9338e73e0e172.yaml | 4 ++ ...t-nonssl-undercloud-ports-34e60f87f3eb7ad6.yaml | 12 ++++++ ...ble-clients-endpoint_type-fc658f7ae935133f.yaml | 7 ++++ .../create-heat-cfn-endpoint-c7c00e3b61a98b5e.yaml | 6 +++ .../relax-validation-for-ui-f27a5e9b64d1d6c1.yaml | 17 +++++++++ .../notes/restart-collector-b043489fcdf1e9c7.yaml | 4 ++ ...eilometer-gnocchi-upgrade-215cb426d25d11e9.yaml | 4 ++ scripts/instack-haproxy-cert-update | 11 ++++++ tox.ini | 3 +- undercloud.conf.sample | 8 +++- 21 files changed, 181 insertions(+), 40 deletions(-)