We are excited to announce the release of: tripleo-heat-templates 13.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.0.0 ^^^^^^ Prelude ******* This change deprecates the novajoin and the composable service that enables TLS-Everywhere using novajoin. Instead, TLS Everywhere will be implemented using the tripleo-ipa ansible module. New Features ************ * Add parameter "NovaAllowResizeToSameHost" to allow instances to resize to the host they are currently on. Normally the source host is excluded. * To isolate LVM volumes created by compute guests, within Cinder volumes, from the LVM volumes created/managed by the host itself, a new task has been introduced to create an allowlist and denylist of devices which should be accessible (or not) to the host, configured in lvm.conf using the global_filter key. The allowlist is generated gathering the list of existing in-use physical disks (or partitions) and appending to it any user provided device passed via *LVMFilterAllowlist* parameter. The denylist is configured via *LVMFilterDenylist* and defaults to ['.*'], which means it blocks any device not explicitly allowed. Both the list parameters can be specified per-role. The feature is, by default, disabled and can be enabled passing *LVMFilterEnabled: true*; when disabled the existing lvm.conf won't be touched and a version of it which includes the global_filter will be left, for debugging, in */tmp/tripleo_lvmfilter.conf*. * A new multipathd-container-ansible.yaml heat template replaces the multipathd-container.yaml template. The new template adds support for the following new parameters. * MultipathdSkipKpartx * MultipathdCustomConfigFile * Add parameters *NovaLibvirtCPUMode*, *NovaLibvirtCPUModels* and *NovaLibvirtCPUModelExtraFlags* to allow configuration of CPU related parameters *libvirt/cpu_mode*, *libvirt/cpu_models* and *libvirt/cpu_model_extra_flags* respectively. * Add GlanceSparseUploadEnabled to enable sparse image upload for rbd and filesystem glance backends. By default GlanceSparseUploadEnabled is disabled, it needs to be enabled while using sparse image upload for rbd and file stores. * Add a Heat parameter *HorizonSessionTimeout* to expose Puppet variable *horizon::session_timeout*, so operators can configure session timeout of horizon in seconds. It currently defaults to *1800* seconds. * The parameter "NetworkDeletionPolicy" (defaults to: "delete") was added to enable control of the "deletion_policy" for overcloud network resources (networks, segments and subnets). By setting the parameter to "retain" the physical resources will not be deleted if removed from the heat templates, or the stack is deleted. * This changes network config generation with ansible, using the provided jinja templates for roles, the default. To keep using old heat templates for network config with``OS::TripleO::{{role.name}}::Net::SoftwareConfig`` mappings, use "NetworkConfigWithAnsible: false" "parameter_defaults" in an environment file. * A new parameter, "NovaEnableVTPM", can be used to enable vTPM support in Nova. * The new "SshServerOptionsOverrides" parameter has been added. This parameter can be used to override a part of sshd_config, which is defined by the "SshServerOptions". Upgrade Notes ************* * Cinder's legacy "volume" service and its associated endpoints are automatically removed from the keystone catalog. The "volume" service is associated with Cinder's v1 API, which was removed in Queens. * When upgrading from the multipathd-container.yaml template to the new multipathd-container-ansible.yaml template, bear in mind the new MultipathdSkipKpartx parameter will configure the corresponding skip_kpartx setting in /etc/multipath.conf. * This change deprecates novajoin and the service that depends on novajoin to enable TLS-Everywhere. From now on, TLS-Everywhere will be set up using the tripleo-ansible ansible module instead. * When the undercloud is upgraded, for TLS Everywhere systems, a new composable service will run to remove the novajoin containers. * A pre-upgrade validation has been written to ensure that some necessary permissions and ACIs have been added to the IPA server. As these changes require admin privileges, they cannot be automated in THT. * The environments/ssl/enable-internal-tls.j2.yaml file has been modified to automatically point to the new service that implements TLS-Everywhere using tripleo-ansible. Assuming you are adding this environment file to your templates (which is typically the case when setting up TLS-Everywhere) no other changes are required. * Now NotificationDriver is set to noop by default, as legacy telemetry services are disabled by default. Explicitly set NotificationDriver parameter to notifications from each services. * Network config generation with ansible is the default now. Please make necessary changes in the custom environment files and migrate the custom network config temmplates used. To keep using the old heat network config templates use "NetworkConfigWithAnsible: false" "parameter_defaults" in an environment file. * Use of the role name in jinja2 tripleo heat templates has been replaced with the use of role tags. Users of custom role data should update the tags for their custom roles data file adding the relevant tags. The following tag should be added, depending on the role: * **Compute** roles: add the "compute" tag. * **HciCeph** roles: add the "compute" tag. * **DistributedCompute** roles: add the "compute" tag. * **Ceph** roles: add the "ceph" and "storage" tag. * **ObjectStorage** roles: add the "storage" tag. * **BlockStorage** roles: add the "storage" tag. * **ComputeOvsDpdk** roles: add the "ovsdpdk" tag. Deprecation Notes ***************** * The multipathd-container.yaml template is deprecated in favor of a new multipathd-container-ansible.yaml template. The new template is backward compatible with the old template, but see the features and upgrade notes for additional details. * This change deprecates novajoin, the service that deploys it on the undercloud, and the corresponding service that implements TLS- Everywhere using novajoin. TLS everywhere will be implemented from now on using the tripleo-ipa ansible module instead. * These services are novajoin-container-puppet.yaml and ipaclient- baremetal-ansible.yaml * On undercloud upgrade, a new composable service will remove the novajoin and novajoin-notifier containers from the undercloud. * Mistral services are deprecated and will be removed in a next release. * The old way of generating network configs with heat templates has been deprecated. * Use of the role name in jinja2 tripleo heat templates has been replaced with the use of role tags. By using tags the role name become truly customizable. To keep backward compatiblity tags will be added automatically to roles based on the role name until the next release. Bug Fixes ********* * As per launchpad bug 1855704, the lvmfilter task aims at hiding to the host the LVM2 volumes created by compute guests in Cinder volumes or Glance images. * When using the Shared File Systems service (manila), you may now use the Heat template parameter "ManilaEnabledShareProtocols" to configure the NAS protocols that users may use. If not set, the value is inferred per the storage backends that have been enabled. * The keystone catalog is automatically updated to remove any entries associated with Cinder's v1 API "volume" service. This fixes bug 1897761 (https://bugs.launchpad.net/tripleo/+bug/1897761). * Fixed the Octavia OctaviaTenantLogFacility setting default to 0 to align it with the project default. Changes in tripleo-heat-templates 12.7.0..13.0.0 ------------------------------------------------ acf08419b Make memcache also listen to localhost 42c5fa16a Update some more environments to use new ansible nic config 8d9621e2e Revert "Use the appropriate name for horizon ssl ca parameter" b756944d4 Add NovaDisableImageDownloadToRbd parameter bc0ab07c5 Add package install for openssl-perl 132c0b1e7 Add ssl_verify_client parameter for horizon 80fcd3324 Deploy multipathd using tripleo_multipathd ansible role 58ca6aebb Fix some typos in the releasenote for nic config with ansible d3b099fac Use the appropriate name for horizon ssl ca parameter d18209799 Run online migration tasks from external_update_tasks too. 0bd041a6d Run tripleo_lvmfilter role to restrict block devices visible to LVM2 f65052db5 Rename NeutronMl2PluginBase TripleO service 6fef2d86b Config options for AMQP1 transport in collectd sensubility 1471976c6 Make NovaComputeOptVolumes and NovaComputeOptEnvVars role aware 50c22d629 Add TLS capabilities to Memcached service 03aa8b10f Don't use POLL_SERVER_CFN transport for DeployedServer e9e0eb3d9 Make NetworkConfigWithAnsible parameter non-role specific 92b6f3062 ovn: Add neutron-cleanup a81ce0b93 Change deployed server environment for ansible nic config c9a8988ab Use native ansible for nic configuration 6de80864a Use native ansible for nic configuration in some envs ff4d1fbb6 Use tags instead of role names cf7afced0 Use consistent naming for MistralRpcResponseTimeout f84655ed5 Return details in output of container health check c86fa4fb4 Don't manage bridge mappings in scenario file 772b7398a Expose new THT params for cpu model flags f2317a2a7 Add content provider jobs to THT 40ca173b9 Add CephClientConfigOverrides resource 6ec3578a0 Ensure name consistency for tmpfiles.d configurations 832326de7 Fix names of the puppet parameters used to set min bw limits in Neutron e9da1a2a7 Check for network in role.networks for resolve and qdr 69ee0acbf Remove mount for tripleo-validations from mistral containers 37548ddb4 Enforce internal api for token verification 77e56441f Add OVN chassis macs to hieradata 39d552070 undercloud: disable placement api by default 47ab368ca Deprecate Mistral services aafb50961 Force CephAnsiblePlaybook to its default value on FFU prepare cd6dc467c Retry container pull 3 times 473db72e8 Speed up ansible facts gathering fa8ed0c8c Remove all unused ci specific nic config templates 143dd289e [manila] Add "ManilaEnabledShareProtocols" param ac916a38c Use `undercloud` instead of `Undercloud` when delegating tasks cdad826ad HA: option to use static pacemaker image name 29735474f Switch to use native ansible for remaining CI nic configs 74ffb82fd Fix ansible var ebef16836 Use ansible for default simple ovs bridge config ab760a1ba Use native ansible for nic config of undercloud minion bda5567f7 Add bond options to to overcloud.j2 34fae762a Concatenate host_routes and default route in overcloud.yaml 5c51ade11 Enable glance sparse image upload d44c1f8b3 trivial: fix a minor grammatical nit in ipaservices 122accc0f Quote lookup var 191ef2d97 include gcc,python36-devel in bindep, for tests 5d0f624d8 Make NovaLibvirtOptVolumes role specific 6f0c7a109 Use OS::Heat::None in place of net-config-noop.yaml be06f959c Map NetworkConfig resource to net-config-noop.yaml d02f9f100 Network config with ansible for all multinode jobs 0d5194787 Network config with ansible for ci jobs using multi-nics c583e429c Fix allow_resize_to_same_host 5b0982a98 Fixed Neutron environment file service descriptions f2fc8c8fa Add possibility to set logging source for Horizon 13eb67841 Use show base attribute for network/subnet attrs dbe38cac1 firewall: make ExtraFirewallRules role specific 932aecf33 Add ability to manage irqbalance on compute per role bf910512c Deprecate novajoin bfd97da0b Allow partial override about SshServerOptions afc0b731e Disable notification from services by default c02738aec Fix temp namespace tasks to work in check mode 824f1b8d3 Add config option for collectd libpodstats 0fdef46ea [FFU] Remove cinder's v1 keystone service 0f7ed0b8d Default cinder_volume_node_names to [] d99940843 Remove dashboard_frontend_vip from the ceph mgr template 2f675e464 Add deleton_policy to network resources 0b63621a5 Add 'NovaAllowResizeToSameHost' parameter a9f264436 Add redis to designate environment 1be92c1c1 Cleanup NetworkConfig after moving to role-level ff30e794d Create NetworkConfig per-role in overcloud.yaml f7e35f9fc Add VLAN id to ansible group_vars 5746d9d9a Assume Grafana and Ceph Dashboard to be on the storage or ctlplane nets 9cebbf149 Set NeutronEnableDVR to False for OVN-HA 4680c4439 Remove sync_db parameters 29ca61a4b Add some more RoleVars needed for nic configuration 31831cf4e Also configure Ironic for UC minions 5c4351304 Allow optional volumes for nova_libvirt container eb8691c23 Add script to covert nic configs to use OS::Heat::Value 02f80c05d Use ansible for undercloud/standalone network config a5f432b84 Add parameter for setting horizon session timeout 03bb3bbdb Create container-puppet-tasks files per step in check mode 06cbf1c85 Change enable-ssh-admin.sh script to use playbook 699aa4664 Fix Octavia OctaviaTenantLogFacility default 518bb2673 Implement a Minimal role b2d7b3e5e Replace deprecated libvirt_* options 7b8c6b07d Add ctlplane subnet attrs to group_vars 7e9a07212 Add ctlplane network attrs to Networks resource output 0d8231c16 Add support for Glance disk_formats configuration 7ea7c259c Add parameters for vTPM feature 6362a0205 Refactor OVNMacAddressNetwork 43b5b0875 Configure rsyncd without pid file for Swift Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 + ci/common/net-config-multinode.yaml | 202 ------------------ ci/common/net-config-simple-bridge.yaml | 202 ------------------ ci/environments/multinode-containers.yaml | 6 +- .../multiple-nics-ipv6/network-environment.yaml | 14 +- .../nic-configs/ceph-storage.yaml | 126 ----------- .../nic-configs/cinder-storage.yaml | 122 ----------- .../nic-configs/compute-dvr.yaml | 181 ---------------- .../multiple-nics-ipv6/nic-configs/compute.yaml | 164 --------------- .../multiple-nics-ipv6/nic-configs/controller.yaml | 233 --------------------- .../nic-configs/swift-storage.yaml | 122 ----------- .../network/multiple-nics/network-environment.yaml | 15 +- .../multiple-nics/nic-configs/ceph-storage.yaml | 125 ----------- .../multiple-nics/nic-configs/cinder-storage.yaml | 100 --------- .../multiple-nics/nic-configs/compute-dvr.yaml | 179 ---------------- .../network/multiple-nics/nic-configs/compute.yaml | 163 -------------- .../multiple-nics/nic-configs/controller.yaml | 228 -------------------- .../multiple-nics/nic-configs/swift-storage.yaml | 122 ----------- .../network/public-bond/network-environment.yaml | 14 +- .../public-bond/nic-configs/ceph-storage.yaml | 125 ----------- .../public-bond/nic-configs/cinder-storage.yaml | 122 ----------- .../network/public-bond/nic-configs/compute.yaml | 163 -------------- .../public-bond/nic-configs/controller.yaml | 230 -------------------- .../public-bond/nic-configs/swift-storage.yaml | 122 ----------- ci/environments/octavia-kvm.yaml | 4 +- ci/environments/ovb-ha.yaml | 2 +- .../scenario000-multinode-containers.yaml | 6 +- .../scenario001-multinode-containers.yaml | 8 +- ci/environments/scenario001-standalone.yaml | 11 +- ci/environments/scenario002-standalone.yaml | 5 + ci/environments/scenario003-standalone.yaml | 15 +- .../scenario007-multinode-containers.yaml | 10 +- ci/environments/scenario007-standalone.yaml | 2 +- .../scenario010-multinode-containers.yaml | 6 +- ci/environments/scenario012-standalone.yaml | 3 - common/deploy-steps.j2 | 5 +- common/hiera-steps-tasks.yaml | 1 + common/host-container-puppet-tasks.yaml | 3 +- config-download-software.yaml | 1 + config-download-structured.yaml | 1 + .../monitoring/collectd_check_health.py | 45 ++-- deployed-server/README.rst | 10 +- deployed-server/scripts/enable-ssh-admin.sh | 96 +-------- deployment/aodh/aodh-base.yaml | 3 +- .../barbican/barbican-api-container-puppet.yaml | 3 +- .../ceilometer-base-container-puppet.yaml | 2 +- deployment/ceph-ansible/ceph-client.yaml | 10 + deployment/ceph-ansible/ceph-mgr.yaml | 1 - deployment/ceph-ansible/ceph-osd.yaml | 2 +- deployment/cinder/cinder-api-container-puppet.yaml | 17 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 32 ++- .../cinder/cinder-volume-pacemaker-puppet.yaml | 34 ++- deployment/database/mysql-pacemaker-puppet.yaml | 32 ++- deployment/database/redis-container-puppet.yaml | 28 ++- deployment/database/redis-pacemaker-puppet.yaml | 44 +++- deployment/{ => deprecated}/mistral/mapping.json | 0 .../mistral/mistral-api-container-puppet.yaml | 4 +- .../{ => deprecated}/mistral/mistral-base.yaml | 7 +- .../mistral/mistral-engine-container-puppet.yaml | 5 +- .../mistral-event-engine-container-puppet.yaml | 5 +- .../mistral/mistral-executor-container-puppet.yaml | 5 +- .../multipathd-container.yaml | 0 .../novajoin}/ipaclient-baremetal-ansible.yaml | 0 .../novajoin}/novajoin-container-puppet.yaml | 3 +- deployment/deprecated/sahara/sahara-base.yaml | 3 +- .../designate/designate-api-container-puppet.yaml | 1 + .../experimental/designate/designate-base.yaml | 2 +- deployment/glance/glance-api-container-puppet.yaml | 34 ++- .../gnocchi/gnocchi-api-container-puppet.yaml | 1 + deployment/haproxy/haproxy-pacemaker-puppet.yaml | 32 ++- deployment/heat/heat-base-puppet.yaml | 3 +- deployment/horizon/horizon-container-puppet.yaml | 25 ++- deployment/ipa/ipaservices-baremetal-ansible.yaml | 20 +- deployment/ironic/ironic-api-container-puppet.yaml | 6 +- .../ironic/ironic-inspector-container-puppet.yaml | 1 + deployment/iscsid/iscsid-container-puppet.yaml | 51 +++++ deployment/keystone/keystone-container-puppet.yaml | 2 +- deployment/manila/manila-api-container-puppet.yaml | 8 + deployment/manila/manila-base.yaml | 2 +- .../manila/manila-share-container-puppet.yaml | 1 + .../manila/manila-share-pacemaker-puppet.yaml | 32 ++- .../memcached/memcached-container-puppet.yaml | 123 ++++++++--- deployment/metrics/collectd-container-puppet.yaml | 27 ++- .../multipathd/multipathd-container-ansible.yaml | 128 +++++++++++ .../neutron/neutron-api-container-puppet.yaml | 2 +- deployment/neutron/neutron-base.yaml | 2 +- .../neutron/neutron-dhcp-container-puppet.yaml | 2 +- .../neutron/neutron-l3-container-puppet.yaml | 2 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 2 +- .../neutron-plugin-ml2-container-puppet.yaml | 2 +- .../neutron-sriov-agent-container-puppet.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 7 +- deployment/nova/nova-base-puppet.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 89 +++++++- .../nova/nova-conductor-container-puppet.yaml | 5 +- deployment/nova/nova-libvirt-container-puppet.yaml | 28 ++- .../nova/nova-metadata-container-puppet.yaml | 1 + .../nova-migration-target-container-puppet.yaml | 14 +- .../octavia/octavia-api-container-puppet.yaml | 16 +- deployment/octavia/octavia-base.yaml | 4 +- .../ovn/ovn-controller-container-puppet.yaml | 15 ++ deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 32 ++- deployment/ovn/ovn-metadata-container-puppet.yaml | 2 +- .../placement/placement-api-container-puppet.yaml | 1 + ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 32 ++- .../rabbitmq-messaging-pacemaker-puppet.yaml | 32 ++- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 32 ++- deployment/sshd/sshd-baremetal-ansible.yaml | 10 +- deployment/sshd/sshd-baremetal-puppet.yaml | 10 +- deployment/swift/swift-proxy-container-puppet.yaml | 1 + .../swift/swift-storage-container-puppet.yaml | 15 +- deployment/tls/undercloud-remove-novajoin.yaml | 60 ++++++ .../tripleo-firewall-baremetal-ansible.yaml | 19 +- .../tripleo-packages-baremetal-puppet.yaml | 5 +- deployment/zaqar/zaqar-container-puppet.yaml | 1 + environments/dcn-hci.yaml | 4 + environments/dcn.yaml | 4 + environments/deployed-server-environment.j2.yaml | 6 +- environments/enable-designate.yaml | 1 + environments/enable-legacy-telemetry.yaml | 1 + environments/enable-stf.yaml | 1 + environments/firewall.yaml | 23 ++ environments/lifecycle/update-prepare.yaml | 3 + environments/lifecycle/upgrade-prepare.yaml | 1 + environments/metrics/ceilometer-write-qdr.yaml | 1 + environments/multipathd.yaml | 2 +- environments/net-2-linux-bonds-with-vlans.j2.yaml | 16 +- environments/net-bond-with-vlans.j2.yaml | 13 +- environments/net-dpdkbond-with-vlans.j2.yaml | 17 +- environments/net-multiple-nics-vlans.j2.yaml | 13 +- environments/net-multiple-nics.j2.yaml | 13 +- environments/net-noop.j2.yaml | 2 +- .../net-single-nic-linux-bridge-with-vlans.j2.yaml | 12 +- .../net-single-nic-with-vlans-no-external.j2.yaml | 16 +- environments/net-single-nic-with-vlans.j2.yaml | 11 +- environments/network-environment-v6-all.j2.yaml | 26 +-- environments/network-environment-v6.j2.yaml | 26 +-- environments/network-environment.j2.yaml | 25 +-- environments/neutron-nuage-config.yaml | 2 +- environments/neutron-ovs-dvr.yaml | 4 +- environments/services-baremetal/mistral.yaml | 9 +- .../services-baremetal/neutron-ovn-dvr-ha.yaml | 2 +- .../services-baremetal/neutron-ovn-ha.yaml | 3 +- .../services-baremetal/undercloud-ceilometer.yaml | 3 + environments/services/mistral.yaml | 9 +- environments/services/neutron-ovn-dvr-ha.yaml | 4 +- environments/services/neutron-ovn-ha.yaml | 5 +- environments/services/neutron-ovn-standalone.yaml | 2 +- environments/services/neutron-ovs-dvr.yaml | 12 +- environments/services/neutron-ovs.yaml | 10 +- environments/services/novajoin.yaml | 5 +- environments/services/undercloud-ceilometer.yaml | 3 + .../services/undercloud-remove-novajoin.yaml | 4 + environments/ssl/enable-internal-tls.j2.yaml | 4 +- environments/standalone/standalone-overcloud.yaml | 5 +- environments/standalone/standalone-tripleo.yaml | 7 +- environments/undercloud-enable-nova.yaml | 2 + environments/undercloud.yaml | 6 +- environments/undercloud/undercloud-minion.yaml | 81 ++++++- net-config-noop.j2.yaml | 9 +- net-config-standalone.j2.yaml | 4 + net-config-undercloud.j2.yaml | 4 + .../config/2-linux-bonds-vlans/role.role.j2.yaml | 36 +--- .../bond-with-vlans/controller-no-external.j2.yaml | 6 +- network/config/bond-with-vlans/role.role.j2.yaml | 30 +-- .../config/multiple-nics-vlans/compute-dvr.j2.yaml | 6 +- .../config/multiple-nics-vlans/role.role.j2.yaml | 28 +-- network/config/multiple-nics/compute-dvr.j2.yaml | 6 +- network/config/multiple-nics/role.role.j2.yaml | 28 +-- .../role.role.j2.yaml | 20 +- .../controller-no-external.j2.yaml | 4 - network/config/single-nic-vlans/role.role.j2.yaml | 18 +- network/network.j2 | 18 +- network/networks.j2.yaml | 12 +- network/ports/ctlplane_vip.yaml | 4 - network/ports/noop.yaml | 13 -- network/ports/port.j2 | 16 -- network/ports/port_from_pool.j2 | 29 --- network/ports/vip.yaml | 4 - network/ports/vip_v6.yaml | 4 - network/service_net_map.j2.yaml | 29 +-- overcloud-resource-registry-puppet.j2.yaml | 10 +- overcloud.j2.yaml | 220 +++++++++++++++---- puppet/role.role.j2.yaml | 185 ++-------------- ...allow-resize-to-same-host-62f05a5370993425.yaml | 5 + .../automated-lvmfilter-3bee670c0108585a.yaml | 23 ++ ...ng-manila-share-protocols-6ea6bcbbe21b25ee.yaml | 7 + .../notes/cinder-v1-cleanup-7154ca07652804cf.yaml | 11 + ...e-multipathd-with-ansible-f32f3ea627815191.yaml | 20 ++ releasenotes/notes/cpu-flags-5b027db3eb2b86c2.yaml | 7 + .../notes/deprecate-novajoin-ef06b1ca33a2b80c.yaml | 28 +++ .../notes/deprecate_mistral-9136fd5e41b37e0d.yaml | 4 + ...sable-notification-driver-a888d4e9b8eed1dc.yaml | 6 + ...lance_sparse_image_upload-fe9e594f91cf57f1.yaml | 7 + ...nant-log-facility-default-7b6d0670a51fe845.yaml | 5 + .../horizon-session-timeout-ba4a62b5f38cbd11.yaml | 7 + ...resources-deletion-policy-a1aee566e650468c.yaml | 8 + ...nfig-with-ansible-default-cbcaedd0a5ad49b0.yaml | 19 ++ .../notes/nova-enable_vtpm-b24db74522c8a2eb.yaml | 5 + ...-server-options-overrides-f677913bfd65efe1.yaml | 6 + ...tion-instead-of-role-name-3c15f9faaa59362e.yaml | 22 ++ roles/BlockStorage.yaml | 2 + roles/CephAll.yaml | 3 + roles/CephFile.yaml | 3 + roles/CephObject.yaml | 3 + roles/CephStorage.yaml | 3 + roles/Compute.yaml | 1 + roles/ComputeAlt.yaml | 2 + roles/ComputeDVR.yaml | 1 + roles/ComputeHCI.yaml | 2 + roles/ComputeHCIOvsDpdk.yaml | 3 + roles/ComputeHCISriov.yaml | 2 + roles/ComputeInstanceHA.yaml | 2 + roles/ComputeLiquidio.yaml | 2 + roles/ComputeLocalEphemeral.yaml | 1 + roles/ComputeOvsDpdk.yaml | 3 + roles/ComputeOvsDpdkRT.yaml | 4 + roles/ComputeOvsDpdkSriov.yaml | 3 + roles/ComputeOvsDpdkSriovRT.yaml | 4 + roles/ComputePPC64LE.yaml | 2 + roles/ComputeRBDEphemeral.yaml | 1 + roles/ComputeRealTime.yaml | 3 + roles/ComputeSriov.yaml | 2 + roles/ComputeSriovIB.yaml | 2 + roles/ComputeSriovRT.yaml | 3 + roles/DistributedCompute.yaml | 2 + roles/DistributedComputeHCI.yaml | 2 + roles/DistributedComputeHCIScaleOut.yaml | 2 + roles/DistributedComputeScaleOut.yaml | 2 + roles/HciCephAll.yaml | 2 + roles/HciCephFile.yaml | 2 + roles/HciCephMon.yaml | 2 + roles/HciCephObject.yaml | 2 + roles/Minimal.yaml | 30 +++ roles/ObjectStorage.yaml | 2 + roles/README.rst | 1 + roles/Standalone.yaml | 4 + roles/Undercloud.yaml | 5 + roles/UndercloudMinion.yaml | 1 + roles_data.yaml | 8 + roles_data_undercloud.yaml | 5 + sample-env-generator/dcn.yaml | 4 + sample-env-generator/enable-services.yaml | 1 + sample-env-generator/ssl.yaml | 4 +- sample-env-generator/standalone.yaml | 24 ++- sample-env-generator/undercloud-minion.yaml | 59 +++++- tools/convert_nic_config.py | 220 +++++++++++++++++++ tools/merge-new-params-nic-config-script.py | 12 +- tools/process-templates.py | 48 ++++- zuul.d/layout.yaml | 27 +-- 250 files changed, 2333 insertions(+), 4049 deletions(-)