We eagerly announce the release of: tripleo-heat-templates 11.3.1: Heat templates for deploying OpenStack with OpenStack. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 11.3.1 ^^^^^^ New Features ************ * Added the "connection_logging" parameter for the Octavia service. * Added support for running the Octavia driver agent in a container. This will enable features such as the OVN load balancer provider in octavia as well as other third party providers. * Added the Octavia log offload parameters. * The ManageNetworks parameter has been added. The parameter controls management of the network and related resources (subnets and segments) with either create, update, or delete operations (depending on the stack operation). Does not apply to ports which will always be managed as needed. Defaults to true. For multi-stack use cases where the network related resources have already been managed by a separate stack, this parameter can be set to false. * Introduces two new parameters to configure the archive deleted instances cron job. 1) NovaCronArchiveDeleteAllCells To make sure deleted instances get archived also from the cell0 in a single cell deployment and also in additional cell databases in case of a multi cell deployment. 2) NovaCronArchiveDeleteRowsAge --before is required to prevent the orphaning of libvirt guests if/when nova-compute is down when a db archive cron job fires. This change also modifies 1) the default from 100 to 1000 for NovaCronArchiveDeleteRowsMaxRows to match the default from the nova- manage command instead the default of 100 from the puppet-nova parameter. 2) changes the default for NovaCronPurgeShadowTablesAllCells from false to true also the nova-manage db purge command needs to run for all cells instead of only the default cell. * Added new heat param OVNOpenflowProbeInterval to set ovn_openflow_probe_interval which is inactivity probe interval of the OpenFlow connection to the OpenvSwitch integration bridge, in seconds. If the value is zero, it disables the connection keepalive feature, by default this value is set on 60s. If the value is nonzero, then it will be forced to a value of at least 5s. * Added a TripleO service OvsDpdkNetcontrold to enable netcontrold PMD rebalance tool for OvS-DPDK deployments. * HA services use a special container image name derived from the one configured in Heat parameter plus a fixed tag part, i.e. '<registry>/<namespace>/<servicename>:pcmklatest'. To implement rolling update without service disruption, this 'pcmklatest' tag is adjusted automatically during minor update every time a new image is pulled. A new Heat parameter ClusterCommonTag can now control the prefix part of the container image name. When set to true, the container name for HA services will look like 'container-common- tag/<servicename>:pcmklatest'. This allows rolling update of HA services even when the <namespace> changes in Heat. * Enable the new container image naming scheme for HA services. They are now configured in pacemaker to use container image name like 'container-common-tag/<servicename>:pcmklatest'. This allows rolling update of HA services even when the <namespace> changes in Heat. * On undercloud and standalone, install rsyslog on the host by default. See https://bugs.launchpad.net/tripleo/+bug/1850562 * Under pressure, the default monitor timeout value of 20 seconds is not enough to prevent unnecessary failovers of the ovn-dbs pacemaker resource. While spawning a few VMs in the same time this could lead to unnecessary movements of master DB, then re-connections of ovn- controllers (slaves are read-only), further peaks of load on DBs, and at the end it could lead to snowball effect. Now this value can be configurable by OVNDBSPacemakerTimeout which will configure tripleo::profile::pacemaker::ovn_dbs_bundle (default is set to 60s). * Enabling additional healtchecks for Swift to monitor account, container and object replicators as well as the rsync process. Deprecation Notes ***************** * The roles file at deployed-server/deployed-server-roles-data.yaml is deprecated in train. It's contents are the same as roles_data.yaml, and no special roles files are needed when using deployed-server. * OpenDaylight service templates and environment files have been removed. It was deprecated in Stein and removed in Train. Bug Fixes ********* * After we switch default neutron driver to ovn also NeutronPluginExtensions should contain dns because "qos,port_security,dns" is default value for ovn * Fixed an issue where Octavia controller services were not properly configured. * Fixes an issue where filtering of networks for kerberos service principals was too aggressive, causing deployment failure. See bug 1854846 (https://bugs.launchpad.net/tripleo/+bug/1854846). * Restart certmnonger after registering system with IPA. This prevents cert requests not completely correctly when doing a brownfield update. Other Notes *********** * Add "radvd_user" configuration parameter to the Neutron L3 container. This parameter defines the user pased to radvd. The default value is "root". Changes in tripleo-heat-templates 11.3.0..11.3.1 ------------------------------------------------ 63de4d066 Enable additional Swift healtchecks 88492a965 Create /var/log/journal directory during step-0 3b2f7e603 HA: enable cluster-common-tag naming scheme by default 24e723475 Increase rabbitmq tcp backlog feca89c12 Delegate and run once debug start-at-task messages 80be9b8f0 Install tmpwatch on the overcloud 2337e80eb Properly set loopback_users via rabbitmq::loopback_users 58521422f Update environment var for keystone bootstrap f763f2e50 Change default value for NeutronPluginExtensions bdb10ef2c Add netcontrold service for DPDK roles 0ab43fd88 Add CephGrafana resource to the ControllerStorageNFS role 7a4015f22 scale: fixes for compute scale down 3a02caa86 Ensure rabbitmq deployment container is restarted at every update 8f2ffba0c New Parameter NovaCronArchiveDeleteAllCells and NovaCronArchiveDeleteRowsAge 44b6e6b85 HA: minor update of arbitrary container image name e2326868e overcloud/service_names: merge service_names & enabled_services 5a615eca8 Ensure we set proper SELinux label on container-puppet.sh cfe728a51 Relax filtering in krb-service-principals jinja d8b060727 Re-enable "service_names" hieradata b701f9110 Fix the Octavia amphora provider driver description a364005e0 Check if snmpd is enabled for upgrade_tasks 0f1ffe9a1 ovn-db standalone: Create ovndbs before starting the OVN ovsdb servers 3185cb183 Add healthcheck for nova-virtlogd container 299063a21 Use public network for external interface 6be8329c9 Split QDR environment from collectd 4bd8ecb5f Fix sed in run-os-net-config to only replace values, not keys 5a0d21c4c Use yaml.SafeLoader instead of yaml.FullLoader b1abede84 ovn_dbs upgrade-with-os work 32f9d03af [Train-Only] Remove the Fluentd role. 655a0e4ce Make containerized-undercloud-upgrades vote on train 34ae01ddb Don't set all_nodes data as group_vars in check mode 871c1a303 Use '0' instead of root in container-puppet.py a764b832e Make sure glance_api_tls_proxy logs are persisted on the host 222281878 Move 'Ensure network service is enabled' after os-net-config has run 8002eb7df Force redis::ulimit to be an integer 945ca7322 ml2-ansible: Set api_max_retries when net-ansible is used 3a9bbec27 Add a version of the multiple-nics templates with tagged VLANs 0395aa9f1 Derive Pci passthrough whitelist disable option 589490c33 Enable healthcheck for ironic-neutron-agent 58c36233b Add Octavia driver agent service 26338c3e2 Enable recon middleware for swift account/container server 00e9ede7b Update scale down to fix regression 414d4d99c Ensure "network" service is enabled a03496346 Drop file test before removal e8e9965eb Don't fail hard when facter cache doesn't work correctly 3c71c99d7 Make sure we apply all deploy step-0 during update. e40d7be9b Disable legacy telemetry by default cc4b7f463 Get rid of docker removing in post_upgrade tasks. 819d577b8 Fix typo in MySQL upgrade tasks. 8df489a79 Add the Octavia log offload parameters 0606eb648 Check that facter.conf is a file 76ee8f55f Incorrect group name issue on non DPDK compute fa5086f1f Add configurable monitor timeouts for ovn dbs 491ffccbb Fix neutron api TLS issues 278638511 Add NovaAZConfig service to compute roles 88e764ba1 ooo updates/upgrades working well on train, move to vote/gate a1482abe9 Updates for dcn/dcn-hci sample envs c562d6dd7 Add ManageNetworks parameter f27938660 Remove odl in ComputeSriovIB ef5e84f8e Correct mysql-pacemaker upgrade task aad1d31df Fix the amqp presettle option for metrics and events in collectd 06b12b33c Define ovn_dbs_image fact for upgrades. 18ce57ea8 Fix typo in OVN upgrade tasks. 712343119 Move KernelArgs and OvS-DPDK deployment to ansible role b8f5427d3 Fix debug hiera keys e866739b6 Adds ceph-systemd tag in external_upgrade_tasks for systemd units 1b74f3a11 Fix duplicate mount point in neutron_dhcp fdc08ebba Move bootstrap password to an environment var 04e2bb933 Do not run rendering all_nodes data as group_vars in check mode 36ddd6f13 Mode 0750 for /var/log/containers 6d1ddeafb Remove OpenDaylight templates and environments d4e4c1bbe Disable haproxy when using external LB c37c7bd0c Add "radvd_user" config parameter to Neutron L3 container 6393f55c2 remove SensuClient from ComputeSriovIB role dbbac78df Fix "neutron-mlnx-agent.yaml" to use the new Role ComputeSriovIB 83ae5542c Install and start Rsyslog on the Undercloud & Standalone eb6fd5354 Honor Debug for container image prepare d7306bb95 Configure amphora for upload and run tempest fa70c21df Added the connection_logging parameter for Octavia 60854d12f Correct ovn-dbs upgrade image id variable 2ed6cf2fd Restart certmnonger after registering system with IPA d8e614661 deploy-steps-tasks: remove duplicate "when" for paunch debug a7c161fed Deprecate deployed-server-roles-data.yaml 19693b711 HA: ensure TRIPLEO_MINOR_UPDATE is defined for <svc>_restart_bundle 58daee494 Fix placement_wait_for_service 594662cc2 Less agressive cleanup of docker containers in post_upgrade_tasks 25d8177d1 Simplify octavia post deploy configs a2ed2a6b8 Derives NovaPCIPassthrough per SR-IOV node 4e81c3ad5 Fix missing environment variable in rabbitmq_init_bundle acd19fcd3 Disable ceph dashboard to fix upstream ci aebd41667 Add posibilities to set ovn_openflow_probe_interval for controller 698e7dbd4 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train d3117b85b Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + capabilities-map.yaml | 5 - .../scenario001-multinode-containers.yaml | 1 + ci/environments/scenario001-standalone.yaml | 4 +- .../scenario002-multinode-containers.yaml | 1 + ci/environments/scenario002-standalone.yaml | 1 + .../scenario004-multinode-containers.yaml | 1 + ci/environments/scenario004-standalone.yaml | 1 + .../scenario007-multinode-containers.yaml | 1 + ci/environments/scenario007-standalone.yaml | 1 + .../scenario008-multinode-containers.yaml | 58 --- .../scenario010-multinode-containers.yaml | 3 + ci/environments/scenario010-standalone.yaml | 6 + .../scenario012-multinode-containers.yaml | 1 + ci/environments/scenario012-standalone.yaml | 1 + common/container-puppet.py | 7 +- common/container-puppet.sh | 2 +- common/deploy-steps-tasks-step-0.j2.yaml | 20 ++ common/deploy-steps-tasks-step-1.yaml | 1 + common/deploy-steps-tasks.yaml | 30 +- common/deploy-steps.j2 | 74 ++-- .../pacemaker_restart_bundle.sh | 1 + .../placement_wait_for_service.py | 39 ++- deployed-server/deployed-server-roles-data.yaml | 14 +- deployment/aodh/aodh-api-container-puppet.yaml | 8 - .../aodh/aodh-evaluator-container-puppet.yaml | 8 - .../aodh/aodh-listener-container-puppet.yaml | 8 - .../aodh/aodh-notifier-container-puppet.yaml | 8 - .../barbican/barbican-api-container-puppet.yaml | 10 - .../liquidio-compute-config-container-puppet.yaml | 8 - .../ceilometer-agent-central-container-puppet.yaml | 57 +-- .../ceilometer-agent-compute-container-puppet.yaml | 8 - .../ceilometer-agent-ipmi-container-puppet.yaml | 8 - ...ometer-agent-notification-container-puppet.yaml | 8 - .../ceilometer-base-container-puppet.yaml | 4 +- deployment/ceph-ansible/ceph-base.yaml | 10 + deployment/cinder/cinder-api-container-puppet.yaml | 9 - .../cinder/cinder-backup-container-puppet.yaml | 8 - .../cinder/cinder-backup-pacemaker-puppet.yaml | 24 +- .../cinder/cinder-scheduler-container-puppet.yaml | 8 - .../cinder/cinder-volume-container-puppet.yaml | 8 - .../cinder/cinder-volume-pacemaker-puppet.yaml | 24 +- ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 6 +- deployment/database/mysql-container-puppet.yaml | 7 - deployment/database/mysql-pacemaker-puppet.yaml | 36 +- deployment/database/redis-base-puppet.yaml | 2 +- deployment/database/redis-container-puppet.yaml | 14 - deployment/database/redis-pacemaker-puppet.yaml | 24 +- .../docker/docker-baremetal-ansible.yaml | 7 +- .../opendaylight-api-container-puppet.yaml | 390 --------------------- .../opendaylight-ovs-baremetal-puppet.yaml | 267 -------------- .../telemetry/enable-legacy-telemetry.yaml | 26 ++ deployment/etcd/etcd-container-puppet.yaml | 8 - .../designate/designate-api-container-puppet.yaml | 8 - .../designate-central-container-puppet.yaml | 8 - .../designate/designate-mdns-container-puppet.yaml | 8 - .../designate-producer-container-puppet.yaml | 8 - .../designate/designate-sink-container-puppet.yaml | 8 - .../designate-worker-container-puppet.yaml | 9 - deployment/glance/glance-api-container-puppet.yaml | 15 +- .../glance/glance-api-logging-file-container.yaml | 2 + .../gnocchi/gnocchi-api-container-puppet.yaml | 8 - .../gnocchi/gnocchi-metricd-container-puppet.yaml | 8 - .../gnocchi/gnocchi-statsd-container-puppet.yaml | 8 - deployment/haproxy/haproxy-container-puppet.yaml | 55 ++- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 85 +++-- deployment/heat/heat-api-cfn-container-puppet.yaml | 8 - deployment/heat/heat-api-container-puppet.yaml | 9 - deployment/heat/heat-base-puppet.yaml | 2 +- deployment/heat/heat-engine-container-puppet.yaml | 8 - deployment/horizon/horizon-container-puppet.yaml | 8 - deployment/ipa/ipaclient-baremetal-ansible.yaml | 19 +- deployment/ironic/ironic-api-container-puppet.yaml | 8 - .../ironic/ironic-conductor-container-puppet.yaml | 8 - .../ironic/ironic-inspector-container-puppet.yaml | 9 - .../ironic-neutron-agent-container-puppet.yaml | 9 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 9 - deployment/iscsid/iscsid-container-puppet.yaml | 8 - .../keepalived/keepalived-container-puppet.yaml | 8 - .../kernel-boot-params-baremetal-ansible.yaml | 71 ++-- deployment/keystone/keystone-container-puppet.yaml | 12 +- deployment/logging/files/opendaylight-api.yaml | 33 -- deployment/logging/rsyslog-baremetal-ansible.yaml | 57 +++ .../logrotate-crond-container-puppet.yaml | 8 - deployment/logrotate/tmpwatch-install.yaml | 4 +- deployment/manila/manila-api-container-puppet.yaml | 8 - deployment/manila/manila-base.yaml | 2 +- .../manila/manila-scheduler-container-puppet.yaml | 8 - .../manila/manila-share-container-puppet.yaml | 8 - .../manila/manila-share-pacemaker-puppet.yaml | 24 +- .../memcached/memcached-container-puppet.yaml | 8 - .../messaging/rpc-qdrouterd-container-puppet.yaml | 8 - deployment/metrics/collectd-container-puppet.yaml | 8 - deployment/metrics/qdr-container-puppet.yaml | 19 +- .../mistral/mistral-api-container-puppet.yaml | 8 - deployment/mistral/mistral-base.yaml | 2 +- .../mistral/mistral-engine-container-puppet.yaml | 8 - .../mistral-event-engine-container-puppet.yaml | 8 - .../mistral/mistral-executor-container-puppet.yaml | 8 - deployment/multipathd/multipathd-container.yaml | 8 - .../neutron/derive_pci_passthrough_whitelist.py | 125 +++++++ .../neutron/neutron-api-container-puppet.yaml | 24 +- .../neutron/neutron-dhcp-container-puppet.yaml | 12 - .../neutron/neutron-l3-container-puppet.yaml | 18 +- .../neutron/neutron-metadata-container-puppet.yaml | 8 - .../neutron-ovn-dpdk-config-container-puppet.yaml | 26 +- .../neutron-ovs-agent-container-puppet.yaml | 8 - .../neutron-ovs-dpdk-agent-container-puppet.yaml | 31 +- deployment/neutron/neutron-plugin-ml2-odl.yaml | 75 ---- deployment/neutron/neutron-plugin-ml2.yaml | 2 +- .../neutron-sriov-agent-container-puppet.yaml | 41 ++- deployment/nova/nova-api-container-puppet.yaml | 9 - deployment/nova/nova-base-puppet.yaml | 20 +- deployment/nova/nova-compute-container-puppet.yaml | 34 +- .../nova/nova-conductor-container-puppet.yaml | 8 - deployment/nova/nova-ironic-container-puppet.yaml | 19 +- deployment/nova/nova-libvirt-container-puppet.yaml | 13 +- .../nova/nova-metadata-container-puppet.yaml | 8 - .../nova-migration-target-container-puppet.yaml | 8 - .../nova/nova-scheduler-container-puppet.yaml | 8 - .../nova/nova-vnc-proxy-container-puppet.yaml | 8 - deployment/nova/novajoin-container-puppet.yaml | 9 - .../octavia/octavia-api-container-puppet.yaml | 62 +++- deployment/octavia/octavia-base.yaml | 53 +++ .../octavia-health-manager-container-puppet.yaml | 20 +- .../octavia-housekeeping-container-puppet.yaml | 20 +- .../octavia/octavia-worker-container-puppet.yaml | 20 +- ...aml => openvswitch-dpdk-baremetal-ansible.yaml} | 65 +++- ...vswitch-dpdk-netcontrold-container-ansible.yaml | 81 +++++ .../ovn/ovn-controller-container-puppet.yaml | 15 +- deployment/ovn/ovn-dbs-container-puppet.yaml | 47 ++- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 84 ++++- deployment/ovn/ovn-metadata-container-puppet.yaml | 8 - .../pacemaker/clustercheck-container-puppet.yaml | 8 - .../placement/placement-api-container-puppet.yaml | 49 ++- deployment/qdr/qdrouterd-container-puppet.yaml | 8 - deployment/rabbitmq/rabbitmq-container-puppet.yaml | 18 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 15 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 25 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 25 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 15 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 26 +- deployment/sahara/sahara-api-container-puppet.yaml | 8 - deployment/sahara/sahara-base.yaml | 2 +- .../sahara/sahara-engine-container-puppet.yaml | 8 - deployment/snmp/snmp-baremetal-puppet.yaml | 13 +- deployment/swift/swift-proxy-container-puppet.yaml | 55 ++- .../swift/swift-storage-container-puppet.yaml | 75 ++-- deployment/zaqar/zaqar-container-puppet.yaml | 9 - .../ceph-ansible/ceph-ansible-external.yaml | 6 +- .../ceph-ansible/ceph-ansible-per-role.yaml | 3 +- environments/ceph-ansible/ceph-ansible.yaml | 3 +- environments/computealt.yaml | 5 +- environments/dcn-hci.yaml | 5 + environments/dcn.yaml | 5 + environments/disable-telemetry.yaml | 1 + environments/docker-ha.yaml | 1 + environments/external-loadbalancer-vip-v6-all.yaml | 2 + environments/external-loadbalancer-vip-v6.yaml | 2 + environments/external-loadbalancer-vip.yaml | 2 + environments/host-config-and-reboot.j2.yaml | 7 +- environments/hyperconverged-ceph.yaml | 2 +- environments/metrics/ceilometer-write-qdr.yaml | 11 + environments/metrics/collectd-write-qdr.yaml | 26 +- environments/metrics/qdr-edge-only.yaml | 26 ++ environments/metrics/qdr-form-controller-mesh.yaml | 27 ++ environments/net-multiple-nics-vlans.j2.yaml | 13 + environments/network-isolation-v6-all.j2.yaml | 2 - environments/network-isolation-v6.j2.yaml | 2 - environments/odl-dscp-marking-inheritance.yaml | 4 - .../neutron-bgpvpn-opendaylight.yaml | 12 - .../neutron-l2gw-opendaylight.yaml | 18 - .../services-baremetal/neutron-ml2-cisco-vts.yaml | 1 + .../neutron-opendaylight-sriov.yaml | 22 -- .../services-baremetal/neutron-opendaylight.yaml | 17 - environments/services-baremetal/neutron-sriov.yaml | 1 + .../services-baremetal/undercloud-ceilometer.yaml | 1 + .../services-baremetal/undercloud-gnocchi.yaml | 6 +- environments/services/netcontrold.yaml | 2 + .../services/neutron-bgpvpn-opendaylight.yaml | 12 - .../services/neutron-l2gw-opendaylight.yaml | 18 - environments/services/neutron-ml2-ansible.yaml | 1 + environments/services/neutron-ml2-cisco-vts.yaml | 1 + environments/services/neutron-mlnx-agent.yaml | 3 +- .../services/neutron-opendaylight-dpdk.yaml | 37 -- .../services/neutron-opendaylight-sriov.yaml | 23 -- environments/services/neutron-opendaylight.yaml | 20 -- environments/services/neutron-ovs-dpdk.yaml | 1 + environments/services/neutron-ovs-dvr.yaml | 1 + environments/services/neutron-ovs.yaml | 1 + .../services/neutron-sfc-opendaylight.yaml | 9 - environments/services/neutron-sriov.yaml | 1 + environments/ssl/no-tls-endpoints-public-ip.yaml | 2 - environments/ssl/tls-endpoints-public-dns.yaml | 2 - environments/ssl/tls-endpoints-public-ip.yaml | 2 - environments/ssl/tls-everywhere-endpoints-dns.yaml | 2 - environments/standalone/standalone-tripleo.yaml | 1 + environments/storage-environment-external.yaml | 6 +- environments/storage-environment.yaml | 3 +- environments/undercloud.yaml | 3 + environments/undercloud/undercloud-minion.yaml | 3 - .../krb-service-principals/role.role.j2.yaml | 2 +- extraconfig/pre_network/boot_param_tasks.yaml | 101 ------ .../pre_network/host_config_and_reboot.yaml | 163 --------- network/config/multiple-nics-vlans/README.md | 46 +++ .../config/multiple-nics-vlans/compute-dvr.j2.yaml | 198 +++++++++++ .../config/multiple-nics-vlans/role.role.j2.yaml | 231 ++++++++++++ network/endpoints/endpoint_data.yaml | 7 - network/endpoints/endpoint_map.yaml | 262 -------------- network/network.j2 | 39 ++- network/scripts/run-os-net-config.sh | 2 +- overcloud-resource-registry-puppet.j2.yaml | 32 +- overcloud.j2.yaml | 5 +- ...nection-logging-parameter-e51f59175c8da204.yaml | 3 + ...avia-driver-agent-support-470fa6fd769c8428.yaml | 6 + ...ia-log-offload-parameters-dc645daf909a85c2.yaml | 3 + ...t_NeutronPluginExtensions-b31ed1c44fec4568.yaml | 5 + ...tavia-post-deploy-configs-bc251a5446e5615d.yaml | 5 + ...eployed-server-roles-data-464b3147ae7434d3.yaml | 6 + ...ot-filter-on-vip-in-jinja-c8f996ffed94d3cd.yaml | 7 + .../l3_agent_radvd_user-1814df18745101d6.yaml | 6 + .../notes/manage-networks-9b1e5be19180deff.yaml | 10 + ...archive_delete_parameters-19288fa689965c58.yaml | 22 ++ ...n_openflow_probe_interval-fd99301d95aac62e.yaml | 8 + .../ovsdpdk_netcontrold-0a1d4f3e26cea0c6.yaml | 5 + ...emaker-cluster-common-tag-45c4e8a6e7b08735.yaml | 12 + ...enable-cluster-common-tag-fe03c47bbcbba13c.yaml | 6 + .../notes/remove-odl-735ca4129c2a450e.yaml | 5 + .../notes/restart-certmonger-244416f537859bac.yaml | 5 + releasenotes/notes/rsyslog-5dc93db5eb8fc953.yaml | 5 + .../setup_timeouts_ovn_dbs-141be475dd2cd7ae.yaml | 11 + ...t-additional-healthchecks-c286f7b7116e6543.yaml | 5 + roles/Compute.yaml | 2 +- roles/ComputeAlt.yaml | 2 +- roles/ComputeDVR.yaml | 2 +- roles/ComputeHCI.yaml | 2 +- roles/ComputeHCIOvsDpdk.yaml | 3 +- roles/ComputeInstanceHA.yaml | 2 +- roles/ComputeLiquidio.yaml | 1 + roles/ComputeLocalEphemeral.yaml | 2 +- roles/ComputeOvsDpdk.yaml | 3 +- roles/ComputeOvsDpdkRT.yaml | 3 +- roles/ComputeOvsDpdkSriov.yaml | 3 +- roles/ComputeOvsDpdkSriovRT.yaml | 3 +- roles/ComputePPC64LE.yaml | 2 +- roles/ComputeRBDEphemeral.yaml | 2 +- roles/ComputeRealTime.yaml | 2 +- roles/ComputeSriov.yaml | 2 +- roles/ComputeSriovIB.yaml | 2 - roles/ComputeSriovRT.yaml | 2 +- roles/Controller.yaml | 2 - roles/ControllerAllNovaStandalone.yaml | 2 - roles/ControllerNoCeph.yaml | 2 - roles/ControllerNovaStandalone.yaml | 2 - roles/ControllerOpenstack.yaml | 2 - roles/ControllerStorageDashboard.yaml | 7 +- roles/ControllerStorageNfs.yaml | 6 +- roles/DistributedCompute.yaml | 2 +- roles/DistributedComputeHCI.yaml | 2 +- roles/HciCephAll.yaml | 2 +- roles/HciCephFile.yaml | 2 +- roles/HciCephMon.yaml | 2 +- roles/HciCephObject.yaml | 2 +- roles/Networker.yaml | 1 - roles/Novacontrol.yaml | 1 - roles/README.rst | 1 - roles/Standalone.yaml | 2 - roles/Undercloud.yaml | 1 + roles_data.yaml | 5 +- roles_data_undercloud.yaml | 2 + sample-env-generator/dcn.yaml | 7 + sample-env-generator/ssl.yaml | 8 - sample-env-generator/standalone.yaml | 2 + sample-env-generator/undercloud-minion.yaml | 3 - tools/yaml-nic-config-2-script.py | 2 +- tools/yaml-validate.py | 59 ++-- tox.ini | 2 +- zuul.d/layout.yaml | 6 + 278 files changed, 2262 insertions(+), 2823 deletions(-)