We eagerly announce the release of: tripleo-heat-templates 8.0.7: Heat templates for deploying OpenStack with OpenStack. This release is part of the queens stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 8.0.7 ^^^^^ New Features ************ * Add cleanup services for neutron bridges that work with container based deployments. * Introduce NovaLibvirtRxQueueSize and NovaLibvirtTxQueueSize to set virtio-net queue sizes as a role parameter. Valid values are 256, 512 and 1024 Deprecation Notes ***************** * The following parameters are deprecated when deploying Manila with CephFS: ManilaCephFSNativeShareBackendName, use ManilaCephFSShareBackendName instead ManilaCephFSNativeBackendName, use ManilaCephFSBackendName instead ManilaCephFSNativeCephFSAuthId, use ManilaCephFSCephFSAuthId instead ManilaCephFSNativeDriverHandlesShareServers, use ManilaCephFSDriverHandlesShareServers instead ManilaCephFSNativeCephFSEnableSnapshots, use ManilaCephFSCephFSEnableSnapshots instead ManilaCephFSNativeCephFSClusterName, matches CephClusterName parameter ManilaCephFSNativeCephFSConfPath, autogenerated from CephClusterName * Environment file "ovs-dpdk-permissions.yaml" is deprecated and the mandatory parameter "VhostuserSocketGroup" is added to the roles data file of the missing OvS-DPDK role. Using this environment file is redundant and it will be removed in S-release. Bug Fixes ********* * Previously the default throughput-performance was set on the computes. Now virtual-host is set as default for the Compute roles. For compute NFV use case cpu-partitioning, RT realtime-virtual-host and HCI throughput-performance. * Previously, when blacklisting all servers of the primary role, the stack would fail since the bootstrap server id was empty. The value is now defaulted in case all primary role servers are blacklisted. * Instance create fails due to wrong default secontext with NFS With NovaNfsEnabled instance create fails due to wrong default secontext. The default in THT is set to nova_var_lib_t in Ie4fe217bd119b638f42c682d21572547f02f17b2 while system_u:object_r:nfs_t:s0 should have access. The virt_use_nfs boolean, which is turned on by openstack-selinux, should cover this use case. This changes the default to context=system_u:object_r:nfs_t:s0 * manila-backend-vnx.yaml: 1. Remove ManilaVNXServerMetaPool since meta_pool is not used by Manila VNX. 2. Add ManilaVNXServerContainer. * cinder-dellemc-vnx-config.yaml: 1. Remove default value of CinderDellEMCVNXStorageSecurityFileDir since it is not mandatory option for Cinder VNX driver. Other Notes *********** * BlacklistedHostnames has been added as a stack output. The value of the output is a list of blacklisted hostnames. Changes in tripleo-heat-templates 8.0.5..8.0.7 ---------------------------------------------- 78358da [Queens] Don't stop docker on config changes dded2d4 Run online data migrations 5b9945b Add validation on role names fe4f6e2 Don't use keystone admin endpoint for nova placement c68f853 Fix interfaces in boot_param_tasks be05b9b Make redeploy idempotent cfa7039 Add BlacklistedIpAddresses stack output 60dc6c0 Add BlacklistedHostnames stack output cc9c898 Always lowercase role name bb503cb Remove unused config file when start ovs agent 9684486 Add FFU upgrade steps to Sahara services acba675 import zuul job settings from project-config 18710ec IHA Default the compute endpoint check script to internal f606c84 Edit some post update tasks logic 08e0aee Redis: Mount certificates on TLS proxy fdcdb90 undercloud/mysql: remove useless task for upgrade 7d81e25 Add role parameter for rx/tx virtio-net queue size fd5f080 Add OVS-DPDK parameter as part of roles file 64938d5 Set tuned profile for compute roles c6fa26d Revert "SSL support for haproxy -> novnc proxy connection" a01dc10 Add cleanup service for neutron ovs bridges 9060b17 Make VhostuserSocketGroup param as mandatory for ComputeOvsDpdkRT role 406d25d Remove ceph-osd where not needed 8717890 Default bootstrap_server_id 1a079fe Generate and mount wrappers for haproxy in OVN metadata agent 6855b9d OVN: Add exec puppet tag to ovn-controller service file 8c19bd0 undercloud: enable KernelIpNonLocalBind e0adcc6 OVN: Set sysctl value 'net.ipv4.ip_nonlocal_bind' to 1 9881eab SSL support for haproxy -> novnc proxy connection d675eb5 Upgrades: Refactor package removal to step3 1adbf76 ovn: Fix minor update failure with OVN db pacemaker HA resource 4e25ce0 Correct Cinder NetApp backend name parameter mapping 36a977f Skip Ceph packages when running tripleo-packages c6acdc9 Use fqdn for live_migration_inbound_addr 49f2e01 Upgrades: Refactor playbooks to set facts 6d4a336 Move the shebang to /usr/bin/python 2959f0d Fix manila update, upgrade, and FFU tasks 388d54e Fixed wrong when condition in mounting staging location 4765282 Lower reserved memory for nova-compute 024a1c6 Fix Neutron SFC environment file 6499f09 Disable pid file usage in the swift_rsync container 3e5fb26 Remove unecessary back-slashes in CephManilaClientKey caps mon d40980e Uses new format for CephX keys caps fb86ba1 nova: add parameters to configure nova::cron::archive_deleted_rows 8d48f83 Fix parameter name used to create the Manila CephX keyring 0cdb5b3 Set CephX user for Ganesha 9cfc081 remove scenario005 from experimental 481396a Revert shebang change for InstanceHA startup script 0033569 Instance create fails due to wrong default secontext with NFS 5b2d0f4 Add release note for vnx and unity template changes Diffstat (except docs and test files) ------------------------------------- common/deploy-steps.j2 | 6 +- environments/low-memory-usage.yaml | 2 + environments/neutron-ml2-ovn-dvr-ha.yaml | 1 + environments/neutron-ml2-ovn-ha.yaml | 1 + environments/ovs-dpdk-permissions.yaml | 4 + environments/services/neutron-ovn-dvr-ha.yaml | 1 + environments/services/neutron-ovn-ha.yaml | 1 + .../services/neutron-sfc-opendaylight.yaml | 3 +- environments/storage-environment.yaml | 2 +- environments/storage/nova-nfs.yaml | 2 +- environments/undercloud.yaml | 1 + extraconfig/pre_network/ansible_host_config.yaml | 4 +- .../tasks/instanceha/check-run-nova-compute | 24 +++- network/endpoints/endpoint_data.yaml | 4 +- network/endpoints/endpoint_map.yaml | 32 ++--- overcloud.j2.yaml | 6 + puppet/role.role.j2.yaml | 8 +- puppet/services/ceph-base.yaml | 4 +- puppet/services/ceph-external.yaml | 4 +- puppet/services/ceph-mds.yaml | 4 +- puppet/services/cinder-backend-netapp.yaml | 2 +- puppet/services/docker.yaml | 8 +- puppet/services/glance-api.yaml | 2 +- puppet/services/kernel.yaml | 8 ++ puppet/services/nova-api.yaml | 30 +++++ puppet/services/nova-compute.yaml | 24 +++- puppet/services/nova-libvirt.yaml | 2 +- puppet/services/nova-placement.yaml | 2 +- puppet/services/opendaylight-ovs.yaml | 72 ++++------- puppet/services/tripleo-packages.yaml | 30 ++++- ...tedhostnames-stack-output-02c9f93f9d1ce7d8.yaml | 4 + .../compute-tuned-profile-cbe4e22b1e185c5e.yaml | 7 ++ ...fault-bootstrap-server-id-eff49ef40bfde414.yaml | 5 + ...a-cephfsnative-parameters-e24978c8b344573b.yaml | 11 ++ .../neutron-cleanup-services-3a8579cd03fac953.yaml | 4 + ...virt_queue_size_parameter-b4409a91c553ce1b.yaml | 6 + ...ova_nfs_default_secontext-5ad33675aaf0b521.yaml | 13 ++ .../ovs-dpdk-perms-deprecate-cfddb148fce9656d.yaml | 7 ++ ...ate-dellemc-vnx-templates-74a0596fac39b488.yaml | 11 ++ roles/Compute.yaml | 2 + roles/ComputeAlt.yaml | 2 + roles/ComputeDVR.yaml | 2 + roles/ComputeHCI.yaml | 2 + roles/ComputeInstanceHA.yaml | 2 + roles/ComputeLiquidio.yaml | 2 + roles/ComputeOvsDpdk.yaml | 3 + roles/ComputeOvsDpdkRT.yaml | 1 + roles/ComputeSriov.yaml | 2 + roles/ControllerStorageNfs.yaml | 4 +- roles/HciCephAll.yaml | 2 + roles/HciCephFile.yaml | 2 + roles/HciCephMon.yaml | 2 + roles/HciCephObject.yaml | 2 + roles_data.yaml | 2 + tools/yaml-validate.py | 12 ++ zuul.d/layout.yaml | 14 +-- 138 files changed, 2434 insertions(+), 1690 deletions(-)