We are chuffed to announce the release of: puppet-tripleo 6.5.11: Puppet module for OpenStack TripleO This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 6.5.11 ^^^^^^ New Features ************ * Adds composable service interface for Neutron LBaaSv2 service. Security Issues *************** * TLS v1.0 connections are no longer accepted by our HAProxy configuration. Changes in puppet-tripleo 6.5.10..6.5.11 ---------------------------------------- 4cfd3bb Release 6.5.11 (ocata) fef73cc Extract local CA if it expired 30c7009 Disallow TLS v1.0 from HAProxy 3d3201f firewall: don't reload IPtables after cleanup 598c712 Pin puppet-systemd 14bdcfb Fix ipv6 horizon haproxy endpoint 8396e8b Set rgw_keystone_revocation_interval to 0 for ceph::rgw::keystone 7f54e79 Composable Role for Neutron LBaaS 5ca2ec8 Use rabbitmq ipv6 flag Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 3 +- manifests/certmonger/ca/local.pp | 2 +- manifests/firewall.pp | 35 ++++++----------- manifests/haproxy.pp | 9 +++-- manifests/profile/base/ceph/rgw.pp | 22 ++++++----- manifests/profile/base/neutron/lbaas.pp | 44 ++++++++++++++++++++++ manifests/profile/base/rabbitmq.pp | 15 ++------ manifests/profile/pacemaker/neutron/lbaas.pp | 44 ++++++++++++++++++++++ metadata.json | 2 +- ...le_role_for_neutron_lbaas-acdf08f1a9dfd3fe.yaml | 3 ++ .../notes/No-TLS-v1.0-0edeac680bb51f94.yaml | 4 ++ spec/classes/tripleo_profile_base_ceph_rgw_spec.rb | 16 ++++---- 12 files changed, 142 insertions(+), 57 deletions(-)