We are thrilled to announce the release of: puppet-tripleo 7.4.11: Puppet module for OpenStack TripleO This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo (tag: puppet) For more details, please see below. 7.4.11 ^^^^^^ Security Issues * TLS v1.0 connections are no longer accepted by our HAProxy configuration. Changes in puppet-tripleo 7.4.10..7.4.11 ---------------------------------------- c780d20 Release 7.4.11 (pike) a525507 Replace perl with awk ebfdb8a Extract local CA if it expired 2df761b Disallow TLS v1.0 from HAProxy c95c51c firewall: don't reload IPtables after cleanup 8777c29 Pin puppet-systemd 6e4aeda Fix stack update with rabbitmq containers e1bd129 Correct Neutron RabbitMQ User Param Mapping 7a1b8c7 Ensure ip_forward set before Docker 6f41f74 Set rgw_keystone_revocation_interval to 0 for ceph::rgw::keystone dcebe43 Use --live-restore when setting up the docker service Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 3 +- manifests/certmonger/ca/local.pp | 2 +- manifests/firewall.pp | 35 ++++++++-------------- manifests/haproxy.pp | 4 +-- manifests/profile/base/ceph/rgw.pp | 22 +++++++------- manifests/profile/base/docker.pp | 7 +++-- manifests/profile/base/neutron.pp | 8 ++--- manifests/profile/base/rabbitmq.pp | 24 +++++++++------ metadata.json | 2 +- .../notes/No-TLS-v1.0-0edeac680bb51f94.yaml | 4 +++ spec/classes/tripleo_certmonger_ca_local_spec.rb | 2 +- spec/classes/tripleo_profile_base_ceph_rgw_spec.rb | 16 +++++----- spec/classes/tripleo_profile_base_docker_spec.rb | 2 +- templates/logrotate/containers_logrotate.conf.erb | 2 +- 14 files changed, 70 insertions(+), 63 deletions(-)