We enthusiastically announce the release of: tripleo-common 11.4.0: A common library for TripleO workflows. This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 11.4.0 ^^^^^^ New Features ************ * Added *overcloud-images-ceph.yaml*, *overcloud-images-ceph- centos8.yaml*, and *overcloud-images-ceph-rhel8.yaml* to allow an operator to build an image that can be used for dedicated ceph nodes. This *overcloud-ceph* image would not have the openstack client, ha or openvswitch related packages. Bug Fixes ********* * The RootStackName parameter is now added to the plan in plan- environment.yaml on both stack create and update. Previously it was only added on create. Changes in tripleo-common 11.3.2..11.4.0 ---------------------------------------- 90c79df8 Modify roles to remove unused services 6945b147 Do not rotate CephX secrets 17b2e731 Remove unnecessary Ceph{Admin,Mon,Mds}Key constants c8b92cb3 Add Octavia use of the rsyslog image bf9b6c66 Switch to tripleo stdout callback 724e8012 Fix nova-virtlogd container healthcheck 55153c3d Fix dry-run for "remote copy deployment file" task d101ebc3 [Train only] Fix for CentOS8 containers build ac010d62 Bump ceph/daemon container image to v4.0.12 d8998006 Removed job tripleo-ci-centos-7-scenario009-multinode-oooq-container 835c27ca Enhance error messages when building containers d60c5db6 Provide container name when raising exceptions a868f4b6 Improve error reporting for not_done jobs in buildah f34eabd4 Fix the log path on the host. 34138a86 builder/buildah: use tenacity to retry failing pushes f108ecaa buildah: exclude build and push, not only build a15da5a8 buildah: allow images without type add2a027 Switch fact caching connection d1079c15 Enable centos-release-opstools repo for centos-8 babb9afd linters refresh w/ afferent bugfixes 183c206d [stable-only] check for stack status IN_PROGRESS to retry 7367d939 tripleo-ci-centos-7-containerized-undercloud-upgrades -> NV 52b7a89d Revert "[Train only] Add ssh timeout for baremetal_deploy" ccc078cd buildah: allow to exclude images from build 2fc6a065 buildah: allow to bind mount volumes when image build 72e41f86 image/builder/buildah: support Containerfile 76c4359f [train-only] Ensure overcloud inventory group exists a04357b1 Fix deployments playbook to work in check mode 27ff473a Don't allow provisioned in the defaults section 6ffdf2bf Use a full string match for container images 61f9c77b Prevent duplicated hosts in overcloudrc no_proxy 4edf36c2 Use healthcheck_port for ironic_inspector_dnsmasq healthcheck 1b875ff9 utils/config: allows a when to have boolean conditions db322ee7 Only add non-empty blacklisted hostnames. e319325e [stable-only] Pass timeout in mins to create_temp_url() 5691454d mariadb: add pynacl dependency to support ed25519 9fc3c571 Include uc plan var when TripleoInventories contains a single plan 8e6a86d6 Fix multistack inventory 1c003700 Add tripleo_role_networks to inventory role group vars e76de0f1 [Train-Only] Expose --limit, --skip-tags, and --tags in config-download. 2b5c8ab1 Preserve existing placement password during extraction a5e3f268 [Train only] Fix misused timeout values in the deployment workflow 22a170c6 [stable/train only] Use nodes as hostnames if ironic lookup fails 6d119d14 Allow ansible_group_vars to be overriden by RoleGroupVars 454518be [Train only] Wire-in missing concurrency for deploy_instances 3d3afa62 [Train only] Add ssh timeout for baremetal_deploy 5eaf3dbb [train-only] Update tripleo-ansible path for fernet playbook 8ea46bf5 Fixes for CentOS8 containers build 56c0fd5c Match hostname when doing node delete cf9f0019 Fix placement dependencies to work with mysql's ed25519 ffc287e7 [Q->T] Introduce Queens to Train Upgrade eec15ed2 Disable fact gathering for create_admin 9faf10dd config-download timeout should KILL the process. f7513603 Fix path of log file. 41959811 Handle race for the already existing layer 3ae13ab4 Add libcgroup-tools to libvirt container 4ee02060 Refactor registry request actions 7b517267 Improve authentication retries for slow transfers 92879675 Fix path of log file. 235ab53d Re-raise same exception type in export_stream e76a1c19 Use unversioned RHEL element w/ RHEL8 69158f67 Change how we test for call e64cccf5 Add interface-names to centos8 images bd81d3b6 Add overcloud-ceph image build yaml 81d9792c Fix upload-swift-artifacts handling of json data d2e9011f Improve upload-swift-artifacts handling of json data 89f84051 Increase randomness of generated CephFSID 7be309b4 deployment: set DeployIdentifier to '' if --skip-deploy-identifier is used dc3a2a51 Fix memcached healthcheck regression 194c8025 Added overcloud images yaml for CentOS-8 5b363038 Do not create temporary swift URLS for ceph-ansible 89a7df07 Use config for layers a75de99d Bracket IPv6 address in ironic_inspector healthcheck 82ebd068 Always convert to docker media format 467f89e3 Improve step task check to cater for whitespace 41aa894b Make ()'s around step|int optional 5a1f5dbd Make healthchecks more strict efd2449f Revert "Added support of overcloud os_cloud" 84032f3b Add RootStackName parameter on stack update 3a157a4a Bump ceph/daemon container image to v4.0.10 bcec69e0 image_uploader (attempt #3): fix images upload with no labels 7de9415e tests: Get RoleData correctly 98a54fab Tune ansible configuration for better performance f805411e Revert "Make healthchecks more strict" 95c11749 Raise exception on KeyboardInterrupt dddf5845 Make healthchecks more strict 8b1b9dbd Clarify introspection failed attempt log message 6fc665cb Force docker format 41cf8e84 Enforce 0600 permissions on an existing SSH private key file. d4b1ab05 Using API instead yaql to get manageable nodes 64718a79 container_update: Retry removing containers. 40b9c183 Dynamically set the number of Ansible forks. 8dc539b5 Handle stack not found during inventory generation 3e227efe Improve error messaging around auth failures 9e5bcae6 Derive network config fails 7852bff6 Derive new nova compute parameters f6bcc3bc Image uploader: use HTTPS for "no verify" registries 74159dc1 Remove checking for already running config_download_deploy 62d24f12 Change the python interpreter discovery mode. 34fed58c Clean up instance defaults setting d5a26f31 image_uploader/base handle when an image has null labels a1088e86 workbooks/deployment: ignore uuid to hostname errors with splitstack & nova-less c49b143e add and unify the retries when messages are published to swift 720bc5c7 Add container images for DCN/Edge deployments f318103f Fix quoting for PYTHONWARNINGS ce403472 image_uploader: handle when an image has null labels fe282fc5 Ensure blacklisted nodes are not included in server_names 97480760 Default to 50 Ansible forks. cf5b6024 Add deploy_steps_tasks to PER_TASK_STEPS ccfa1ad1 config: refactor how per step tasks are generated 8f54f3b2 Bump ceph/daemon container image to v4.0.8 Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 11 - .pre-commit-config.yaml | 15 +- .../container_image_prepare_defaults.yaml | 2 +- container-images/overcloud_containers.yaml | 2 +- container-images/overcloud_containers.yaml.j2 | 94 ++ .../tripleo_kolla_template_overrides.j2 | 36 +- healthcheck/common.sh | 48 +- healthcheck/fluentd | 2 +- healthcheck/glance-api | 7 +- healthcheck/ironic-inspector | 4 +- healthcheck/ironic-pxe | 2 +- healthcheck/memcached | 8 +- healthcheck/neutron-api | 7 +- healthcheck/nova-libvirt | 2 +- healthcheck/nova-vnc-proxy | 7 +- healthcheck/opendaylight-api | 7 +- healthcheck/sahara-api | 6 +- healthcheck/swift-account-server | 6 +- healthcheck/swift-container-server | 6 +- healthcheck/swift-object-server | 6 +- healthcheck/swift-proxy | 6 +- healthcheck/tacker | 6 +- image-yaml/overcloud-hardened-images-centos8.yaml | 10 + image-yaml/overcloud-images-centos8.yaml | 21 + image-yaml/overcloud-images-ceph-centos8.yaml | 9 + image-yaml/overcloud-images-ceph-rhel8.yaml | 6 + image-yaml/overcloud-images-ceph.yaml | 38 + ...ud-ceph-image-build-yamls-8ad8fe8b013a314e.yaml | 8 + ...d-rootstackname-on-update-258dbf091fea497e.yaml | 5 + scripts/container-update.py | 23 +- scripts/upload-swift-artifacts | 11 +- setup.cfg | 3 +- tox.ini | 5 +- tripleo_common/actions/ansible.py | 27 +- tripleo_common/actions/baremetal_deploy.py | 19 +- tripleo_common/actions/deployment.py | 104 ++- tripleo_common/actions/parameters.py | 30 + tripleo_common/actions/scale.py | 25 +- tripleo_common/actions/templates.py | 33 +- tripleo_common/constants.py | 13 +- tripleo_common/image/builder/buildah.py | 122 ++- tripleo_common/image/image_export.py | 52 +- tripleo_common/image/image_uploader.py | 671 +++++++++----- tripleo_common/image/kolla_builder.py | 3 +- tripleo_common/inventories.py | 92 +- tripleo_common/inventory.py | 100 ++- tripleo_common/templates/deployments.yaml | 10 +- tripleo_common/utils/clouds_yaml.py | 74 -- tripleo_common/utils/config.py | 34 +- tripleo_common/utils/overcloudrc.py | 10 +- tripleo_common/utils/passwords.py | 13 +- tripleo_common/utils/roles.py | 6 +- workbooks/access.yaml | 1 + workbooks/baremetal.yaml | 16 +- workbooks/baremetal_deploy.yaml | 3 +- workbooks/deployment.yaml | 89 +- workbooks/derive_params_formulas.yaml | 2 +- workbooks/fernet-key-rotate.yaml | 2 +- workbooks/messaging.yaml | 15 +- workbooks/package_update.yaml | 6 +- workbooks/plan_management.yaml | 53 +- workbooks/rename_ceph_ansible_fetch_directory.yaml | 105 --- workbooks/stack.yaml | 2 +- zuul.d/layout.yaml | 10 - 88 files changed, 6737 insertions(+), 1426 deletions(-)