We are jazzed to announce the release of: puppet-tripleo 16.0.0: Puppet module for OpenStack TripleO The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 16.0.0 ^^^^^^ New Features ************ * Add the ability to override the "backend_availability_zone" parameter in every Manila share backend. * Add support to configure Pure Storage FlashBlade Manila backend. * Haproxy configuration file can now use the frontend and backend keywords to describe a service, rather than using the listen keyword. The new format can be enabled via hiera parameter *haproxy_backend_syntax*. When enabled, any frontend or backend configuration can be overriden on a per service-basis via new hiera keys *tripleo::haproxy::<service>::frontend_options* and *tripleo::haproxy::<service>::frontend_options*. The original hiera key *tripleo::haproxy::<service>::options* has no effect on the frontend and backend sections. * This change adds functionality to enable modular libvirt daemons support. Also all the daemons runs in separate containers, so the configuration is done for all the daemon containers. Here is the list of daemons added in this change. - virtnodedevd - virtproxyd - virtqemud - virtsecretd - virtstoraged More information regarding modular libvirt daemons is available here. *Libvirt Daemons <https://libvirt.org/daemons.html>* _. * When nova_virtlogd container gets restarted the instance console auth files will not be reopened again by virtlogd. As a result either instances need to be restarted or live migrated to a different compute node to get new console logs messages logged again. Usually on receipt of SIGUSR1, virtlogd will re-exec() its binary, while maintaining all current logs and clients. This allows for live upgrades of the virtlogd service on non containerized environments where updates just by doing an RPM update. To reduce the likelihood in a containerized environment virtlogd should only be restarted on manual request, or on compute node reboot. It should not be restarted on a minor update without migration off instances. This introduces a nova_virtlogd_wrapper container and virtlogd wrapper script, to only restart virtlogd on either manual or compute node restart. * New hiera setting *rbd_disk_cachemodes* allows to override the disk cache modes for RBD. Defaults to ['network=writeback']. * Added "scripts" parameters for class tripleo::profile::base::metrics::collectd::sensubility enabling download of various scripts for usage within sensubility check definitions. Supported transfer method is HTTP only currently. * Adds a new option "audit_enabled" to add the pycadf audit middleware to the Swift proxy server pipeline. * Introduces the tripleo::profile::pacemaker::rabbitmq_bundle::use_ma sterslave_rabbitmqra class parameter to be able to use the resource agent from the rabbitmq upstream repository (as opposed to the resource-agent maintained under the clusterlabs umbrella). Upgrade Notes ************* * Services managed by Pacemaker will be restarted when this change is applied as an Update or Upgrade process. Changes in puppet-tripleo 15.0.0..16.0.0 ---------------------------------------- f9790932 Bump metadata for release 42bcb193 Fix typo in SSL file resource 1a42b83b Modernize rabbitmq's TLS support fdca31a2 Bind mount the IPA crt when internal_tls is enabled 12f14d95 haproxy: Add missing default_backend option 830ae9e5 Revert Horizon's Memecached config to use IP addresses 8e6e49d2 Add ability to noop a service 98af2c58 Add a new bind-mount for vTPM logs 1b7d23e3 Remove unused modules from testing 9771593f Do not bind-mount qemu logs into another host path 705e9888 Add missing haproxy listen options 65e7e338 Add support for share backend availability zones 24f137df Remove zaqar b59135d9 Remove mistral 4e89b1cc Fix front/back-end options bbdad5c2 Enable support for Libvirt modular daemons e91aac28 Add missing "z" flag for specific mounts 5a9b957a Replace rsprep directive with http-response replace-header e5e2a455 Revert "Pin puppet-redis to 8.0.0" a67a36b1 Redis: Remove unused implementations for clustering 89bd8abe Manila: Remove usage of deprecated driver_handles_share_servers 90005dd8 Extend fencing to hosts using fence_kubevirt agent. 2384b77a Make sure there is a space after debug in virtlogd_wrapper 4931d2cc Pin puppet-redis to 8.0.0 7a6c5281 haproxy: frontend/backend syntax in config 414ff9b0 Glance: Add support for cinder_os_region_name 1ccc83a3 Remove unused variables in tripleo::profile::base::gnocchi 38162e4a Remove duplicate spec file 3841151a Add /dev/log to ovn-dbs-bundle 423046a6 qdr: Add SSL support feed67dc Allow tuning of Galera gcache size a6432b98 Nova: Include new puppet classes for castellan options e9d96dce Replace deprecated ip functions 212f47ca Replace deprecated is_integer 8a2dd483 Revert "Deprecate warnings for Ceilometer and Gnocchi" 3ed78ec0 Unpin puppet-rsyslog 27d9510b Replace rsyslog::server by rsyslog::config 1d1ab8ec Replace deprecated is_string/is_array/is_hash method 3d53beb6 Octavia: Add optional inclusion of driver_agent class 8966029a Horizon: Enable manila-dashboard configurations 8a00edfa Horizon: Enable octavia-dashboard configurations a194d727 Horizon: Enable heat-dashboard configurations ae8e9c49 Allow to use the upstream rabbitmq-server-ha OCF resource agent 8a847689 Configure json_rpc/authtoken sections for ironic 4b0410a3 [c9] wrappers should start containers with host's cgroupns 7b3a8cd8 Include db classes explicitly 03edf2ab Enable configuration of swift-recon-cron job 35dbf4e6 nova_virtlogd_wrapper: Simplify string matching b55ffb5b Drop all non bundle implementations fb9ba4b8 Don't generate 10-neutron_wsgi.conf with internal tls 4c3b1ef2 nova_virtlogd_wrapper: trap "created" containers c039e212 Add Pure Storage FlashBlade Manila backend 256d677d Trim line breaks from pacemaker bundle function 49921d57 Set memcached server list from memcached_node_names 93d102ea Add puppet support to deploy neutron-api with httpd 24de78a1 PowerStore: Remove usage of deprecated powerstore_appliances 504c35c2 Manila: Remove usage of cephfs_enable_snapshots 150b3259 Telemetry: Use new coordination classes de1b69e0 Remove side-car containers in Create status 0278c925 Remove support for Cavium LiquidIO cbda8fe6 Designate: Use designate::coordination bf889579 Revert "Aodh deprecation" 9fa3836f Manila: Use defaults defined in puppet-manila 33ac8dcc Cinder: Use defaults defined in puppet-cinder a4ea71d3 Cinder: Dell EMC PowerMax: Fix typo in hash key b714aa37 Glance: Use defaults defined in puppet-glance 5f7af6b7 Cinder: Remove implementation for HPE Lefthand driver a4803b26 Add audit middleware to Swift proxy pipeline 6fd83b96 Create SSL certificates from sslProfiles df456427 Clear last dependency on puppet-ceph from Manila manifest 5413116c Allow tuning timeouts for mysql pacemaker resource 519f8fbc Remove puppet-ceph prameters from unit test hieradata 26ee01a0 Allow tuning timeouts for rabbitmq pacemaker resource eae3b158 haproxy: Use healthcheck API for Ironic and Octavia 46024cd5 haproxy: Use healthcheck middleware to monitor service availability 1a0b5134 haproxy: Enable httplog for all http endpoints 06f663d6 haproxy: Use httpchk instead of tcpchk for heat endpoints 98a0af7c Remove bind and bind pool generation for designate from puppet 44d5d172 Cinder: Include new puppet classes for castellan options e0993e50 setup.cfg: Replace dashes with underscores 634cc266 Manila: Use manila::backend::ganesha to set up ganesha options 781d197a Add pcmk_host_list stonith-fence_compute-fence-nova 41853690 Deprecate the swift_store_config_file parameter f3737649 Replace the deprecated aodh::auth class Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 24 +- lib/puppet/functions/is_ip_addresses.rb | 29 - lib/puppet/functions/merge_hash_values.rb | 30 + lib/puppet/functions/noop_resource.rb | 11 + lib/puppet/functions/pacemaker_bundle_replicas.rb | 3 +- lib/puppet/functions/qdr_ssl_certificate.rb | 39 + lib/puppet/provider/liquidio_config/ini_setting.rb | 10 - lib/puppet/type/liquidio_config.rb | 49 -- manifests/fencing.pp | 15 +- manifests/haproxy.pp | 858 +++++++++++++-------- manifests/haproxy/endpoint.pp | 75 +- manifests/haproxy/horizon_endpoint.pp | 61 +- manifests/haproxy/stats.pp | 38 +- manifests/host/liquidio/compute.pp | 86 --- manifests/host/liquidio/config.pp | 31 - manifests/pacemaker/haproxy_with_vip.pp | 10 +- manifests/profile/base/aodh.pp | 3 +- manifests/profile/base/aodh/api.pp | 2 +- manifests/profile/base/aodh/authtoken.pp | 25 +- manifests/profile/base/aodh/evaluator.pp | 14 +- manifests/profile/base/aodh/listener.pp | 1 - manifests/profile/base/aodh/notifier.pp | 1 - manifests/profile/base/barbican.pp | 1 + manifests/profile/base/barbican/api.pp | 1 + manifests/profile/base/barbican/authtoken.pp | 27 +- manifests/profile/base/ceilometer.pp | 3 +- manifests/profile/base/ceilometer/agent/polling.pp | 4 +- manifests/profile/base/cinder.pp | 3 + manifests/profile/base/cinder/api.pp | 14 +- manifests/profile/base/cinder/authtoken.pp | 25 +- manifests/profile/base/cinder/volume.pp | 13 - .../base/cinder/volume/dellemc_powerflex.pp | 40 +- .../profile/base/cinder/volume/dellemc_powermax.pp | 20 +- .../base/cinder/volume/dellemc_powerstore.pp | 18 +- manifests/profile/base/cinder/volume/dellemc_sc.pp | 38 +- .../profile/base/cinder/volume/dellemc_unity.pp | 18 +- .../base/cinder/volume/dellemc_vmax_iscsi.pp | 8 +- .../profile/base/cinder/volume/dellemc_vnx.pp | 28 +- .../profile/base/cinder/volume/dellemc_vxflexos.pp | 34 +- .../profile/base/cinder/volume/dellemc_xtremio.pp | 24 +- manifests/profile/base/cinder/volume/dellsc.pp | 36 +- .../profile/base/cinder/volume/hpelefthand.pp | 77 -- manifests/profile/base/cinder/volume/iscsi.pp | 12 +- manifests/profile/base/cinder/volume/netapp.pp | 50 +- manifests/profile/base/cinder/volume/nfs.pp | 20 +- manifests/profile/base/cinder/volume/nvmeof.pp | 24 +- manifests/profile/base/cinder/volume/pure.pp | 18 +- manifests/profile/base/cinder/volume/rbd.pp | 36 +- manifests/profile/base/cinder/volume/scaleio.pp | 36 +- manifests/profile/base/database/mysql.pp | 7 - manifests/profile/base/database/mysql/client.pp | 2 +- manifests/profile/base/database/redis.pp | 27 +- manifests/profile/base/designate.pp | 25 +- manifests/profile/base/designate/api.pp | 1 + manifests/profile/base/designate/authtoken.pp | 25 +- manifests/profile/base/designate/backend.pp | 6 +- manifests/profile/base/designate/central.pp | 17 +- manifests/profile/base/designate/producer.pp | 17 +- manifests/profile/base/designate/worker.pp | 8 +- manifests/profile/base/glance/api.pp | 2 + manifests/profile/base/glance/authtoken.pp | 25 +- manifests/profile/base/glance/backend/cinder.pp | 38 +- manifests/profile/base/glance/backend/file.pp | 10 +- manifests/profile/base/glance/backend/rbd.pp | 18 +- manifests/profile/base/glance/backend/swift.pp | 50 +- manifests/profile/base/gnocchi.pp | 16 +- manifests/profile/base/gnocchi/authtoken.pp | 25 +- manifests/profile/base/heat.pp | 24 +- manifests/profile/base/heat/api.pp | 1 + manifests/profile/base/heat/api_cfn.pp | 2 +- manifests/profile/base/heat/authtoken.pp | 25 +- manifests/profile/base/horizon.pp | 36 +- manifests/profile/base/ironic.pp | 2 + manifests/profile/base/ironic/api.pp | 1 + manifests/profile/base/ironic/authtoken.pp | 25 +- manifests/profile/base/ironic/conductor.pp | 1 + manifests/profile/base/ironic_inspector.pp | 9 +- .../profile/base/ironic_inspector/authtoken.pp | 25 +- manifests/profile/base/keystone.pp | 22 +- manifests/profile/base/logging/rsyslog.pp | 3 +- manifests/profile/base/manila.pp | 1 + manifests/profile/base/manila/api.pp | 37 +- manifests/profile/base/manila/authtoken.pp | 25 +- manifests/profile/base/manila/share.pp | 228 +++--- manifests/profile/base/metrics/qdr.pp | 26 +- manifests/profile/base/mistral.pp | 126 --- manifests/profile/base/mistral/api.pp | 97 --- manifests/profile/base/mistral/authtoken.pp | 68 -- manifests/profile/base/mistral/engine.pp | 46 -- manifests/profile/base/mistral/event_engine.pp | 46 -- manifests/profile/base/mistral/executor.pp | 63 -- manifests/profile/base/neutron/authtoken.pp | 25 +- manifests/profile/base/neutron/server.pp | 9 +- manifests/profile/base/nova.pp | 23 +- manifests/profile/base/nova/authtoken.pp | 25 +- manifests/profile/base/nova/compute.pp | 22 +- manifests/profile/base/nova/libvirt.pp | 70 +- manifests/profile/base/novajoin/authtoken.pp | 25 +- manifests/profile/base/octavia.pp | 12 +- manifests/profile/base/octavia/api.pp | 1 + manifests/profile/base/octavia/authtoken.pp | 25 +- manifests/profile/base/pacemaker/instance_ha.pp | 5 +- manifests/profile/base/placement.pp | 2 +- manifests/profile/base/placement/authtoken.pp | 25 +- manifests/profile/base/qdr.pp | 59 +- manifests/profile/base/rabbitmq.pp | 54 +- manifests/profile/base/swift.pp | 4 +- manifests/profile/base/swift/add_devices.pp | 2 +- manifests/profile/base/swift/proxy.pp | 12 +- manifests/profile/base/swift/storage.pp | 1 + manifests/profile/base/zaqar.pp | 134 ---- manifests/profile/base/zaqar/authtoken.pp | 68 -- manifests/profile/pacemaker/ceph_nfs.pp | 2 +- manifests/profile/pacemaker/cinder/backup.pp | 81 -- .../profile/pacemaker/cinder/backup_bundle.pp | 6 +- manifests/profile/pacemaker/cinder/volume.pp | 81 -- .../profile/pacemaker/cinder/volume_bundle.pp | 6 +- manifests/profile/pacemaker/clustercheck.pp | 2 +- manifests/profile/pacemaker/database/mysql.pp | 376 --------- .../profile/pacemaker/database/mysql_bundle.pp | 75 +- manifests/profile/pacemaker/database/redis.pp | 249 ------ .../profile/pacemaker/database/redis_bundle.pp | 4 +- manifests/profile/pacemaker/haproxy.pp | 157 ---- manifests/profile/pacemaker/haproxy_bundle.pp | 2 +- manifests/profile/pacemaker/manila/share_bundle.pp | 6 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 17 +- manifests/profile/pacemaker/rabbitmq.pp | 167 ---- manifests/profile/pacemaker/rabbitmq_bundle.pp | 188 ++++- metadata.json | 2 +- ...ila-backend-az-parameters-de4d7e84fc65a3ed.yaml | 5 + .../notes/flashblade_driver-bd6df03b7f140071.yaml | 4 + .../haproxy-frontend-backend-e3719b323e84fd2c.yaml | 12 + .../notes/modular-libvirt-c19ccf0f0118c88c.yaml | 15 + .../notes/pacemaker-selinux-8dc0344afd5d64bd.yaml | 5 + ...roxy-add-audit-middleware-290db6db952d690f.yaml | 5 + ...ver-ha-ocf-resource-agent-0db89eb7c55e64ca.yaml | 6 + setup.cfg | 6 +- spec/classes/tripleo_host_liquidio_compute_spec.rb | 22 - spec/classes/tripleo_host_liquidio_config_spec.rb | 20 - spec/classes/tripleo_profile_base_aodh_api_spec.rb | 6 + .../tripleo_profile_base_aodh_authtoken_spec.rb | 4 +- .../tripleo_profile_base_aodh_evaluator_spec.rb | 11 +- spec/classes/tripleo_profile_base_aodh_spec.rb | 12 +- .../tripleo_profile_base_barbican_api_spec.rb | 4 + ...tripleo_profile_base_barbican_authtoken_spec.rb | 4 +- spec/classes/tripleo_profile_base_barbican_spec.rb | 2 + ...o_profile_base_ceilometer_agent_polling_spec.rb | 5 +- .../tripleo_profile_base_ceilometer_spec.rb | 2 + .../tripleo_profile_base_cinder_api_spec.rb | 5 + .../tripleo_profile_base_cinder_authtoken_spec.rb | 4 +- .../tripleo_profile_base_cinder_powermax_spec.rb | 4 +- spec/classes/tripleo_profile_base_cinder_spec.rb | 18 + .../tripleo_profile_base_database_redis_spec.rb | 57 +- .../tripleo_profile_base_designate_api_spec.rb | 2 + ...ripleo_profile_base_designate_authtoken_spec.rb | 4 +- .../tripleo_profile_base_designate_central_spec.rb | 34 - ...tripleo_profile_base_designate_producer_spec.rb | 19 + .../classes/tripleo_profile_base_designate_spec.rb | 2 - .../tripleo_profile_base_glance_api_spec.rb | 8 + .../tripleo_profile_base_glance_authtoken_spec.rb | 4 +- ...pleo_profile_base_glance_backend_cinder_spec.rb | 2 + ...ipleo_profile_base_glance_backend_swift_spec.rb | 1 - .../tripleo_profile_base_gnocchi_authtoken_spec.rb | 4 +- spec/classes/tripleo_profile_base_gnocchi_spec.rb | 8 +- .../tripleo_profile_base_heat_api_cfn_spec.rb | 4 + spec/classes/tripleo_profile_base_heat_api_spec.rb | 4 + .../tripleo_profile_base_heat_authtoken_spec.rb | 4 +- spec/classes/tripleo_profile_base_heat_spec.rb | 10 +- spec/classes/tripleo_profile_base_horizon_spec.rb | 63 ++ .../tripleo_profile_base_ironic_api_spec.rb | 4 + .../tripleo_profile_base_ironic_authtoken_spec.rb | 4 +- ...profile_base_ironic_inspector_authtoken_spec.rb | 4 +- .../tripleo_profile_base_ironic_inspector_spec.rb | 4 + spec/classes/tripleo_profile_base_ironic_spec.rb | 4 + spec/classes/tripleo_profile_base_keystone_spec.rb | 12 +- .../tripleo_profile_base_manila_api_spec.rb | 8 + .../tripleo_profile_base_manila_authtoken_spec.rb | 4 +- .../tripleo_profile_base_manila_share_spec.rb | 8 + .../tripleo_profile_base_metrics_qdr_spec.rb | 33 + .../tripleo_profile_base_mistral_api_spec.rb | 103 --- .../tripleo_profile_base_mistral_authtoken_spec.rb | 70 -- .../tripleo_profile_base_mistral_engine_spec.rb | 88 --- ...ipleo_profile_base_mistral_event_engine_spec.rb | 88 --- .../tripleo_profile_base_mistral_executor_spec.rb | 92 --- spec/classes/tripleo_profile_base_mistral_spec.rb | 112 --- .../tripleo_profile_base_neutron_authtoken_spec.rb | 4 +- .../tripleo_profile_base_neutron_server_spec.rb | 12 + .../tripleo_profile_base_nova_authtoken_spec.rb | 4 +- .../tripleo_profile_base_nova_compute_spec.rb | 25 +- .../tripleo_profile_base_nova_libvirt_spec.rb | 115 ++- spec/classes/tripleo_profile_base_nova_spec.rb | 2 +- ...tripleo_profile_base_novajoin_authtoken_spec.rb | 4 +- .../tripleo_profile_base_octavia_api_spec.rb | 8 + .../tripleo_profile_base_octavia_authtoken_spec.rb | 4 +- spec/classes/tripleo_profile_base_octavia_spec.rb | 61 +- ...ripleo_profile_base_placement_authtoken_spec.rb | 4 +- .../classes/tripleo_profile_base_placement_spec.rb | 8 +- spec/classes/tripleo_profile_base_qdr_spec.rb | 39 + .../tripleo_profile_base_zaqar_authtoken_spec.rb | 70 -- spec/classes/tripleo_profile_base_zaqar_spec.rb | 174 ----- .../tripleo_profile_zaqar_authtoken_spec.rb | 70 -- spec/defines/tripleo_haproxy_endpoint_spec.rb | 25 + ...profile_base_logging_rsyslog_file_input_spec.rb | 5 +- spec/fixtures/hieradata/default.yaml | 70 +- spec/functions/is_ip_addresses_spec.rb | 12 - .../provider/liquidio_config/ini_setting_spec.rb | 75 -- spec/unit/type/liquidio_config_spec.rb | 52 -- templates/designate/pools.yaml.erb | 43 -- templates/neutron/dibbler-client.epp | 4 +- templates/neutron/dnsmasq.epp | 1 + templates/neutron/haproxy.epp | 4 +- templates/neutron/keepalived.epp | 4 +- templates/neutron/radvd.epp | 4 +- templates/nova/virtlogd.epp | 15 +- templates/rabbitmq/ssl-dist.conf.erb | 21 + 215 files changed, 2741 insertions(+), 4572 deletions(-)