We are pumped to announce the release of: tripleo-common 9.2.0: A common library for TripleO workflows. This release is part of the rocky release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo-common For more details, please see below. 9.2.0 ^^^^^ New Features ************ * The config_download_deploy workflow now uses a consistent working directory for the config-download directory. Since the directory is now managed by git, it can be reused across executions. * Initialize a git repository in the config-download directory and automatically snapshot changes made to the repository. * The GetOvercloudConfig action now sets a commit message that indicates the config was downloaded by the Mistral action and what user/project were used to execute the action. * Since the config download directory is now managed by git, the GetOvercloudConfig action will now first download the existing config container (default of overcloud-config), so that the git history is preserved and new changes will reuse the same git repo. Each new change to the config-download directory creates a new git commit. * New workflows are added for manipulating the deployment status, including tripleo.deployment.v1.set_deployment_status_success, tripleo.deployment.v1.set_deployment_status_failed, and tripleo.deployment.v1.set_deployment_status_deploying. * Generating roles_data.yaml file has been enhanced to generate the defined roles's properties with a differnet name, so that a cluster can have multiple roles with same set of service, without manual edit. Adds the support to provide role name input as "Compute:ComputeA" so that the role "ComputeA" can be generated from the defined role "Compute", by only chaning the name. * We are changing nova metadata api to be served via httpd wsgi. Therefore we'll have a new config volume for the nova_metadata container. Adding DockerNovaMetadataConfigImage for this. Upgrade Notes ************* * The tripleo.plan_management.v1.create_default_deployment_plan workflow has been removed, since it's been deprecated since the pike release and is no longer used in TripleO. Any other users of this workflow should switch to tripleo.plan_management.v1.create_deployment_plan instead. Deprecation Notes ***************** * Un-deprecated *pm_service_profile* option support at the UCS ironic driver. Bug Fixes ********* * The tripleo.plan_management.v1.update_roles workflow didn't pass the plan name (container name) or Zaqar queue name to the sub- workflow it triggered. This caused the behaviour to be incorrect when using a name other than the default. It now correctly passes on these parameters. * Previously, ironic nodes that only differ in *pm_service_profile* or *ucs_service_profile* would override one another ultimately leaving just one of them in ironic configuration. This fix un- deprecates *pm_service_profile* option support at the UCS ironic driver. Changes in tripleo-common 9.1.0..9.2.0 -------------------------------------- 49c169a Action to perform container image prepare 4d86579 Add --xattrs to sudoers. 81b022c Use /var/lib/mistral/<plan-name> as config-download dir ec40eb3 git integration for GetOvercloudConfig action 088ccf7 Generate additional roles with defined roles file 783e533 Replace Exception.message with str(Exception) 3ea9f95 Add DockerNovaMetadataConfigImage as part of metadata httpd wsgi move f1a1c32 Take WSGIScriptAlias into account in docker healthcheck. 03f660c Generate rndc key in password list 2f300df Persist ceph-ansible fetch_directory using mistral ab3503f Use scenario001 as check and gate job f8d2726 Move scenario009 to the check queue ba0de39 Select default "openstack" plan when no plan-environment.yaml found 9d8eded Add workflow to select sample plan fff8a73 tripleo-validations, group-validations fails with notify_running task exception 2b5bcaa Update heat container healthchecks 218065b Fix gnocchi_statsd and ceilometer_agent_ipmi healthcheck 50c2a66 Use oslo log for image_uploader as a library 69d84bb ansible: enable pipelining 82b4a0c Fix ssh_known_hosts format e9089dc Re add upload_validations 712e197 healthcheck/memcached: add brackets if ipv6 db79bc8 Include microversion in OS_VOLUME_API_VERSION 2dbcc90 Retry inspect of container images 83bdc58 Parametrize ansible transport setting cb6c10c Make config-download directory a git repository b3f901d Fix the messaging workflow name for the validations workflow. ffa8300 Add workflow to get available plans f1640a1 Add utility workflow to verify if an object exists bd53b4e Increase gb_per_osd from 3 to 5 in derive_params_formulas bae4296 Fixes ordering of environment files in a deployment plan 89cefb9 Allow platform in instackenv.json ca290cf IPMI doesn't mandate a username or password so tripleo shouldn't either 39c6c98 Updates OpenDaylight healthcheck URI c37559e Adds OpenDaylight sceanrio008 check bb35200 Remove the unhandled_error task from baremetal.yaml d830d0b Fix generate fencing command 05a8478 Remove validations that moved to tripleo-validations b5d5cba Verify the Swift container exists with a small utility workflow 6f60152 Set deployment_status on error in get_blacklisted_hostnames 6a9f923 Workflows for manipulating deployment status 7149253 Fix unit tests under python 3.6 4704d56 Add new undeploy_plan workflow bc5981a Include docker package in mistral-executor image 15bf0f5 Add different upload cleanup behaviours a0222c1 Remove create_default_deployment_plan workflow cd699f6 filter available role by tags 893faba Send a zaqar message with 'list_validations' result f7bd4e7 Switch ansible tmp for local connections 7e53931 Let TripleO generate ODLPassword 330bf47 Add openshift sti-builder image bd11ebc Include --xattrs when creating the undercloud backup. b1be9bf Use the standard messaging in the support workbook 48bbdc3 Use upstream etcd container image for openshift e3834bb Use the standard messaging in the parameters workbook 6e4b8dc Workflow for configuring BIOS settings to ironic nodes acd1bed Force lowercase hostnames 21b575a Add security hardened images that can boot from uefi 3886653 Use the standard messaging in the baremetal workbook 6c32361 Use the standard messaging in the stack workbook 9ca3346 Use the standard messaging in the undercloud_backup workbook 4c24a04 Use the standard messaging in the scale workbook 5dac6ed Provide timestamps in Ansible output by default e47bbf6 Use the standard messaging in the plan_management workbook 14c73ee Use the standard messaging in the package_update workbook 721f9ba Add mistral job to rotate passwords on the overcloud f827ee9 Add workflow for uploading validations to Swift a70bf70 Add XClarity in the list of supported hw types 2d4c5d3 Install python2-networking-ansible in neutron-server ed54160 Revert "Revert "Pass connection info via ansible config file"" 21a66f2 Don't resolve outputs when getting stacks 9843ee4 Revert "scen007 is failing in the gate" 782e03b scen007 is failing in the gate 6079a58 kolla_builder: use any templates except puppet 5e6ae77 ensure the updates workflow checks container changes 2587486 Adds no_proxy input to create_overcloudrc workflow ed81f73 Stop assuming all containers are plans 025905d Delete messages container on plan deletion a7a5c79 Verify host_vars and group_vars are valid yaml 0530b2d enable the update job on scripts/* changes 1ceb21c Write to /etc/ssh with super user privileges 4d98aab Add dbus-python to overcloud-full image e3a9dd0 Use correct modify_append_tag key (again) 57da674 Don't return image tags during dry_run=True fd8c629 Copy deployments.yaml to top level config-dir 6ffbf62 Set deployment status to UNDEPLOYED on plan creation 0fa557c UpdatePlanEnvironmentAction enable overwrite or merge 2812b1c Improve ssh connection handling ee2c7d8 Set the initial introspection attempt to 0 b6c6881 Pass container and queue_name inputs to the list_available_roles workflow 345c4fe Whitelist k8s and OpenShift services as containerized 79b3bd2 Add container images needed for OpenShift e2615e8 Do not explode on empty containers list b6b0396 Order jobs by number 5ed2245 Run container jobs on kolla_builder changes 19ce98e Add experimental job for OpenShift deployment 6f10387 Pass DockerCephDaemonImage to CephMgr b9905a0 Add health check for OVN containers ea50e58 ensure unique ironic node ID with UCS driver df70817 Optimize horizon URI retrieval ce0db07 Remove the output from the heat.stacks_get action result 5f90172 Add recover_deployment workflow 1adc25c Use the standard messaging in the swift_rings_backup workbook 34b4d10 Use the standard messaging in the validations workbook dca8418 Use the standard messaging in the plan_management workbook 1df519b Create config-download-latest symlink 6f6ffe1 Prevent updating derived_parameters in plan environment 4bed100 Support deployment blacklist with --limit 4c21551 Update swift plan in UpdatePlanEnvironmentAction Diffstat (except docs and test files) ------------------------------------- container-images/overcloud_containers.yaml | 10 + container-images/overcloud_containers.yaml.j2 | 65 ++ .../tripleo_kolla_template_overrides.j2 | 9 +- healthcheck/ceilometer-agent-ipmi | 4 +- healthcheck/common.sh | 23 +- healthcheck/gnocchi-statsd | 9 +- healthcheck/heat-api | 2 +- healthcheck/heat-api-cfn | 2 +- healthcheck/memcached | 6 + healthcheck/nova-placement | 2 +- healthcheck/opendaylight-api | 2 +- healthcheck/ovn-controller | 14 + healthcheck/ovn-dbs | 13 + .../overcloud-hardened-images-uefi-centos7.yaml | 9 + .../overcloud-hardened-images-uefi-rhel7.yaml | 5 + image-yaml/overcloud-hardened-images-uefi.yaml | 51 ++ image-yaml/overcloud-images.yaml | 1 + ...nload-consistent-work-dir-b8a37550c3970722.yaml | 5 + .../config-download-git-repo-9a18681afbfb9136.yaml | 5 + ...nload-git-repo-commit-msg-9a550daaae1fc55e.yaml | 10 + ...ployment-status-workflows-7f6ba3b69f805f06.yaml | 6 + ...th-custom-overcloud-names-35404ceae3ac380e.yaml | 7 + ...generate-roles-with-colon-c903826db084b8a6.yaml | 9 + ...river-node-uniqueness-fix-c74110a9728d1023.yaml | 11 + ...ova_metadata_config_image-26e727263be52408.yaml | 7 + ...e_default_deployment_plan-397b259f6f641ab9.yaml | 7 + roles/tripleo-ssh-known-hosts/tasks/main.yml | 1 + .../templates/ssh_known_hosts.j2 | 2 +- scripts/container-update.py | 8 +- setup.cfg | 9 +- sudoers | 2 +- tripleo_common/actions/ansible.py | 60 +- tripleo_common/actions/config.py | 33 +- tripleo_common/actions/container_images.py | 74 +- tripleo_common/actions/deployment.py | 26 + tripleo_common/actions/files.py | 117 ++- tripleo_common/actions/heat_capabilities.py | 17 + tripleo_common/actions/parameters.py | 32 +- tripleo_common/actions/plan.py | 53 +- tripleo_common/actions/undercloud.py | 2 +- tripleo_common/actions/validations.py | 345 -------- tripleo_common/constants.py | 15 +- tripleo_common/image/exception.py | 4 + tripleo_common/image/image_uploader.py | 70 +- tripleo_common/image/kolla_builder.py | 20 +- tripleo_common/inventory.py | 4 +- tripleo_common/templates/deployments.yaml | 4 +- tripleo_common/utils/config.py | 50 +- tripleo_common/utils/nodes.py | 60 +- tripleo_common/utils/passwords.py | 19 +- tripleo_common/utils/plan.py | 39 + tripleo_common/utils/roles.py | 58 +- tripleo_common/utils/swift.py | 25 +- tripleo_common/utils/tarball.py | 15 + workbooks/baremetal.yaml | 259 ++++-- workbooks/ceph-ansible.yaml | 26 +- workbooks/deployment.yaml | 256 +++++- workbooks/derive_params.yaml | 5 +- workbooks/derive_params_formulas.yaml | 2 +- workbooks/messaging.yaml | 15 +- workbooks/package_update.yaml | 96 +-- workbooks/parameters.yaml | 26 +- workbooks/plan_management.yaml | 875 ++++++++++++--------- workbooks/scale.yaml | 16 +- workbooks/stack.yaml | 55 +- workbooks/support.yaml | 109 +-- workbooks/swift.yaml | 79 ++ workbooks/swift_rings_backup.yaml | 24 +- workbooks/undercloud_backup.yaml | 16 +- workbooks/validations.yaml | 651 ++------------- zuul.d/layout.yaml | 45 +- 89 files changed, 3080 insertions(+), 2522 deletions(-)