We contentedly announce the release of: tripleo-heat-templates 15.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * New config option "OVNEncapType" was added to the ovn-controller- container-puppet.yaml module. It can be used to define what encapsulation type will be used in the deployment. * The parameters CephHciOsdCount and CephHciOsdType were added in order to support the derive parameters feature for hyperconverged deployments when using cephadm. * The "glance_api_cron" container has been introduced, which executes db purge job for Glance service. Use GlanceCronDbPurge* parameters to override cron parameters. * When nova_virtlogd container gets restarted the instance console auth files will not be reopened again by virtlogd. As a result either instances need to be restarted or live migrated to a different compute node to get new console logs messages logged again. Usually on receipt of SIGUSR1, virtlogd will re-exec() its binary, while maintaining all current logs and clients. This allows for live upgrades of the virtlogd service on non containerized environments where updates just by doing an RPM update. To reduce the likelihood in a containerized environment virtlogd should only be restarted on manual request, or on compute node reboot. It should not be restarted on a minor update without migration off instances. This introduces a nova_virtlogd_wrapper container and virtlogd wrapper script, to only restart virtlogd on either manual or compute node restart. * New parameter *RbdDiskCachemodes* allows to override the disk cache modes for RBD. Defaults to ['network=writeback']. * A new service, OS::TripleO::Services::UndercloudUpgradeEphemeralHeat is added to the Undercloud role. The service is mapped to OS::Heat::None by default, but when environments/lifecycle /undercloud-upgrade- prepare.yaml is included, the service will be enabled and will migrate any already deployed stacks in the undercloud's Heat instance to be able to be used with the ephemeral Heat deployment option from tripleoclient. * This changes the ServiceNetMap and VipSubnetMap interfaces to allow for server side env merging. This would, for example, allow for adding network for a new services without having to specify complete ServiceNetMap in parameter_defaults section of an environment file. Upgrade Notes ************* * With the change to ServiceNetMap/VipSubnetMap interface, existing environments where they are overridden have to specify 'merge' strategy for the parameters in a new 'parameter_merge_strategies' section. Other Notes *********** * In Wallaby, dcn-hci.yaml has been renamed to dcn-storage.yaml though a copy of dcn-hci.yaml was kept in place for backwards compatability until Xena. With the Xena release dcn-hci.yaml has been removed. Changes in tripleo-heat-templates 14.1.0..15.0.0 ------------------------------------------------ 1662600e6 HA minor update: fix bad pcs invocation 6e67e7377 Fix typo that breaks Octavia db sync step 36e680fee Remove iscsi deploy interface from minion node 289cfd7a5 Fix typo in ceilometer-write-qdr environment file 0f5246410 Add alertmanager port parameter 00f930049 Set ganesha idmap.conf file path and overrides 02e50c163 Nova: Remove unused EnableSQLAlchemyCollectd from base template b7fe78758 Update rhsm repo examples for RHEL8 deployments 7150a747b Pass custom CephConfigPath parameter to ceph-nfs role b252d4573 Add OS::TripleO::UndercloudUpgradeEphemeralHeat 4ea2a6eb7 Allow customizing podman's [engine]/events_logger ed8bdde21 Set default for network.ip_subnet 45fca9e02 Ignore puppet_config is an empty dict 2b9b8eed9 Switch barbican actions to use kolla_config f1cd8006f Fix cinder's cephx keyring file permissions dbb4f619a Disable tunnelled migration 8e052715c Use kolla_config for other actions 3ecad17ed Map RedisVipPort and OVNDBsVipPort to OS::Heat::None 5ca2702b1 Temporarily remove the unbound resolver from scenario 003 49c49d3c0 Include the standalone ganesha tasks when ceph is external 9a42686dc set ganesha idmap.conf file path and overrides f38d6cef0 Fix VLAN placement d297c822c Add environment for external network VIP 8a3cf6aa8 Add param for RBD disk cache modes e40a346d7 Use collection FQCN for podman modules 83668920e Fix octavia_nodes rendering in octavia-deployment-config.j2.yaml 859f31303 Breakdown the deploy-steps playbook 181505145 Fix network_cidrs when ManageNetworks: false c761ebeca Simplify rest of the service templates 4c9b1ba81 Simplify swift service templates b356d3d1e Simplify rabbitmq service templates 464bc1e7f Simplify sshd, timemaster and timesync service templates 85bc69916 Simplify qdrouterd and snmp service templates 7a9cc5c83 Simplify placement and podman service templates 9642f034b Skip cephadm playbook when there is no mon or nfs group 5541696d4 Simplify jinja for primary_role_name 65ddeed5f libvirt: fix formatting of the log_outputs parameter 127a8945f Fix artifact module usage 2aa1f6364 Cleanup optional flag for conf.modules.d 66c964bf9 Pass scripts list for download for sensubility ad95ac04e Make clustercheck service accessible over socat aeaaa90b3 Remove deprecated dcn-hci.yaml 866645db1 Add OVNCMSOptions to Controller and Networker roles b253d564f Use server side env merging for ServiceNetMap/VipSubnetMap 807d5a6e5 Support additional IP so bind and unbound can collocate f606968dd Simplify pacemaker service templates e172a7ff4 Simplify openvswitch and ovn service templtes 094918d85 Simplify octavia service templates 0a4904aff Simplify nova service templates 9fb6b36f1 Move ceph_admin_extra_vars logic to tripleo-ansible 36648cf7f Re-add NovaVncProxyNetwork to service_net_map.j2.yaml 3a472cbbe Disable tunneled mode when use_tls_for_live_migration 96a2c3742 Remove unused cvol_active_active_tls_enabled condition 659cc5527 Add neutron port tag hint for role name 5369ff9bd Expose the monitoring_stack network to cephadm 86daa77b3 Added the posibility of skipping the NFS ping test on the rear installation f14bfb14c Introduce CephHciOsdCount and CephHciOsdType c65058889 Do not log amphora ssh keys e270d5329 Add openstack-tox-tht to the gate 89f596012 Fix container security_opts type 7fd0dd5d4 Don't add external tasks for roles with zero count 4af0c6cca Don't assume every role has default_route_networks 742dc894f Stop handler flush 4872e36c0 Add option for enabling rsyslog reopenOnTruncate 6e236a4e1 Fix RoleParameters in tuned-baremetal-ansible.yaml da7bcec27 Add base Neutron service plugins to BGPVPN 92f722a05 Do not ask for cephdashboard certificates when it is disabled a120ada72 Refactor OVN bridge MAC addresses a8f527d8d Fix hiera variable used to set cinder's backend_host dad101720 Simplify neutron service templates 1b1960e4c Add release note for the OVNEncapType 49415d04b Introduce nova virtlogd wrapper c5c558229 Simplify metrics and messaging service templates 37bb2ecce Add glance db purge job dc083686d Remove heat::heat_keystone_clients_url definition e5a5fc97e Enable configuration of omamqp1 plugin 1f0f6f332 Remove Ceph cluster replica and PG num from low-memory-usage.yaml 1925e85fd CI - Add vip_data file Diffstat (except docs and test files) ------------------------------------- ci/environments/disable-unbound.yaml | 4 +- ci/environments/multinode-core.yaml | 4 +- ci/environments/scenario001-standalone.yaml | 1 + ci/environments/scenario003-standalone.yaml | 1 - ci/vip_data.yaml | 6 + common/deploy-steps-playbooks-common.yaml | 7 +- common/deploy-steps.j2 | 139 +++++-- common/services/role.role.j2.yaml | 4 +- .../pacemaker_restart_bundle.sh | 2 +- deployed-server/deployed-neutron-port.yaml | 5 + deployment/README.rst | 6 +- deployment/aide/aide-baremetal-ansible.yaml | 4 +- deployment/aodh/aodh-api-container-puppet.yaml | 26 +- deployment/aodh/aodh-base.yaml | 4 +- .../aodh/aodh-evaluator-container-puppet.yaml | 4 +- .../aodh/aodh-listener-container-puppet.yaml | 4 +- .../aodh/aodh-notifier-container-puppet.yaml | 4 +- deployment/apache/apache-baremetal-puppet.j2.yaml | 4 +- deployment/auditd/auditd-baremetal-puppet.yaml | 4 +- .../backup-and-restore/rear-baremetal-ansible.yaml | 11 +- .../barbican/barbican-api-container-puppet.yaml | 207 +++++---- .../barbican/barbican-backend-dogtag-puppet.yaml | 4 +- .../barbican/barbican-backend-kmip-puppet.yaml | 4 +- .../barbican-backend-pkcs11-crypto-puppet.yaml | 4 +- .../barbican-backend-simple-crypto-puppet.yaml | 4 +- deployment/barbican/barbican-client-puppet.yaml | 4 +- .../ceilometer-agent-central-container-puppet.yaml | 18 +- .../ceilometer-agent-compute-container-puppet.yaml | 4 +- .../ceilometer-agent-ipmi-container-puppet.yaml | 4 +- ...ometer-agent-notification-container-puppet.yaml | 4 +- .../ceilometer-base-container-puppet.yaml | 4 +- deployment/ceph-ansible/ceph-base.yaml | 9 +- deployment/ceph-ansible/ceph-client.yaml | 9 +- deployment/ceph-ansible/ceph-external.yaml | 9 +- deployment/ceph-ansible/ceph-grafana.yaml | 9 +- deployment/ceph-ansible/ceph-mds.yaml | 9 +- deployment/ceph-ansible/ceph-mgr.yaml | 9 +- deployment/ceph-ansible/ceph-mon.yaml | 9 +- deployment/ceph-ansible/ceph-nfs.yaml | 18 +- deployment/ceph-ansible/ceph-osd.yaml | 9 +- deployment/ceph-ansible/ceph-rbdmirror.yaml | 9 +- deployment/ceph-ansible/ceph-rgw.yaml | 9 +- deployment/cephadm/ceph-base.yaml | 33 +- deployment/cephadm/ceph-client.yaml | 21 +- deployment/cephadm/ceph-external.yaml | 9 +- deployment/cephadm/ceph-grafana.yaml | 15 +- deployment/cephadm/ceph-mds.yaml | 9 +- deployment/cephadm/ceph-mgr.yaml | 76 ++-- deployment/cephadm/ceph-mon.yaml | 9 +- deployment/cephadm/ceph-nfs.yaml | 24 +- deployment/cephadm/ceph-osd.yaml | 41 +- deployment/cephadm/ceph-rbdmirror.yaml | 9 +- deployment/cephadm/ceph-rgw.yaml | 9 +- deployment/certs/ca-certs-baremetal-puppet.yaml | 4 +- deployment/cinder/cinder-api-container-puppet.yaml | 39 +- .../cinder-backend-dellemc-powerflex-puppet.yaml | 4 +- .../cinder-backend-dellemc-powermax-puppet.yaml | 4 +- .../cinder-backend-dellemc-powerstore-puppet.yaml | 4 +- .../cinder/cinder-backend-dellemc-sc-puppet.yaml | 4 +- .../cinder-backend-dellemc-unity-puppet.yaml | 4 +- .../cinder-backend-dellemc-vmax-iscsi-puppet.yaml | 4 +- .../cinder/cinder-backend-dellemc-vnx-puppet.yaml | 4 +- .../cinder-backend-dellemc-xtremio-puppet.yaml | 4 +- .../cinder/cinder-backend-dellsc-puppet.yaml | 4 +- .../cinder/cinder-backend-netapp-puppet.yaml | 4 +- .../cinder/cinder-backend-nvmeof-puppet.yaml | 4 +- deployment/cinder/cinder-backend-pure-puppet.yaml | 4 +- .../cinder/cinder-backup-container-puppet.yaml | 4 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 4 +- deployment/cinder/cinder-base.yaml | 4 +- .../cinder/cinder-common-container-puppet.yaml | 54 ++- .../cinder/cinder-hpelefthand-iscsi-puppet.yaml | 4 +- .../cinder/cinder-scheduler-container-puppet.yaml | 4 +- .../cinder/cinder-volume-container-puppet.yaml | 11 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 6 +- .../openstack-clients-baremetal-ansible.yaml | 4 +- ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 4 +- deployment/containers-common.yaml | 21 +- deployment/database/mysql-base.yaml | 4 +- deployment/database/mysql-client.yaml | 4 +- deployment/database/mysql-container-puppet.yaml | 6 +- deployment/database/mysql-pacemaker-puppet.yaml | 4 +- deployment/database/redis-base-puppet.yaml | 4 +- deployment/database/redis-container-puppet.yaml | 4 +- deployment/database/redis-pacemaker-puppet.yaml | 4 +- .../liquidio-compute-config-container-puppet.yaml | 4 +- .../cinder-backend-dellemc-vxflexos-puppet.yaml | 4 +- .../cinder/cinder-backend-scaleio-puppet.yaml | 4 +- .../mistral/mistral-api-container-puppet.yaml | 34 +- deployment/deprecated/mistral/mistral-base.yaml | 4 +- .../mistral/mistral-engine-container-puppet.yaml | 4 +- .../mistral-event-engine-container-puppet.yaml | 4 +- .../mistral/mistral-executor-container-puppet.yaml | 4 +- deployment/deprecated/multipathd-container.yaml | 4 +- .../novajoin/ipaclient-baremetal-ansible.yaml | 4 +- .../novajoin/novajoin-container-puppet.yaml | 4 +- .../deprecated/zaqar/zaqar-container-puppet.yaml | 18 +- deployment/etcd/etcd-container-puppet.yaml | 7 +- .../designate/designate-api-container-puppet.yaml | 4 +- .../experimental/designate/designate-base.yaml | 4 +- .../designate/designate-bind-container.yaml | 4 +- .../designate-central-container-puppet.yaml | 30 +- .../designate/designate-mdns-container-puppet.yaml | 4 +- .../designate-producer-container-puppet.yaml | 4 +- .../designate/designate-sink-container-puppet.yaml | 4 +- .../designate-worker-container-puppet.yaml | 4 +- deployment/frr/frr-container-ansible.yaml | 4 +- deployment/glance/glance-api-container-puppet.yaml | 97 ++++- .../glance/glance-api-edge-container-puppet.yaml | 4 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 7 +- deployment/gnocchi/gnocchi-base.yaml | 4 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 4 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 4 +- deployment/haproxy/haproxy-container-puppet.yaml | 7 +- .../haproxy/haproxy-edge-container-puppet.yaml | 4 +- .../haproxy-internal-tls-certmonger.j2.yaml | 4 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 4 +- .../haproxy/haproxy-public-tls-certmonger.yaml | 4 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 4 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 7 +- .../heat/heat-api-cloudwatch-disabled-puppet.yaml | 4 +- deployment/heat/heat-api-container-puppet.yaml | 7 +- deployment/heat/heat-base-puppet.yaml | 5 +- deployment/heat/heat-engine-container-puppet.yaml | 23 +- deployment/horizon/horizon-container-puppet.yaml | 7 +- .../image-serve/image-serve-baremetal-ansible.yaml | 4 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 4 +- deployment/ipsec/ipsec-baremetal-ansible.yaml | 4 +- deployment/ironic/ironic-api-container-puppet.yaml | 22 +- deployment/ironic/ironic-base-puppet.yaml | 4 +- .../ironic/ironic-conductor-container-puppet.yaml | 4 +- .../ironic/ironic-inspector-container-puppet.yaml | 18 +- .../ironic-neutron-agent-container-puppet.yaml | 4 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 10 +- deployment/iscsid/iscsid-container-puppet.yaml | 4 +- deployment/kernel/kernel-baremetal-ansible.yaml | 4 +- .../kernel-boot-params-baremetal-ansible.yaml | 4 +- deployment/keystone/keystone-container-puppet.yaml | 9 +- deployment/logging/files/nova-libvirt.yaml | 34 +- deployment/logging/rsyslog-baremetal-ansible.yaml | 9 +- deployment/logging/rsyslog-container-puppet.yaml | 53 ++- .../logging/rsyslog-sidecar-container-puppet.yaml | 4 +- deployment/logging/stdout/nova-libvirt.yaml | 34 +- .../login-defs/login-defs-baremetal-ansible.yaml | 4 +- .../logrotate-crond-container-puppet.yaml | 4 +- deployment/logrotate/tmpwatch-install.yaml | 4 +- deployment/manila/manila-api-container-puppet.yaml | 23 +- deployment/manila/manila-backend-cephfs.yaml | 4 +- deployment/manila/manila-backend-isilon.yaml | 4 +- deployment/manila/manila-backend-netapp.yaml | 4 +- deployment/manila/manila-backend-unity.yaml | 4 +- deployment/manila/manila-backend-vmax.yaml | 4 +- deployment/manila/manila-backend-vnx.yaml | 4 +- deployment/manila/manila-base.yaml | 4 +- .../manila/manila-scheduler-container-puppet.yaml | 4 +- deployment/manila/manila-share-common.yaml | 4 +- .../manila/manila-share-container-puppet.yaml | 4 +- .../manila/manila-share-pacemaker-puppet.yaml | 4 +- .../masquerade-networks-baremetal-puppet.yaml | 4 +- .../memcached/memcached-container-puppet.yaml | 4 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 8 +- deployment/metrics/collectd-container-ansible.yaml | 11 +- deployment/metrics/collectd-container-puppet.yaml | 103 ++--- deployment/metrics/qdr-container-ansible.yaml | 29 +- deployment/metrics/qdr-container-puppet.yaml | 45 +- .../multipathd/multipathd-container-ansible.yaml | 7 +- .../neutron-agents-ib-config-container-puppet.yaml | 12 +- .../neutron/neutron-api-container-puppet.yaml | 147 +++---- deployment/neutron/neutron-base.yaml | 17 +- .../neutron-bgpvpn-api-container-puppet.yaml | 5 +- .../neutron-bgpvpn-bagpipe-baremetal-puppet.yaml | 4 +- .../neutron-bigswitch-agent-baremetal-puppet.yaml | 5 +- .../neutron/neutron-compute-plugin-nuage.yaml | 4 +- .../neutron/neutron-controller-plugin-nuage.yaml | 10 +- .../neutron/neutron-dhcp-container-puppet.yaml | 67 ++- .../neutron-l2gw-agent-baremetal-puppet.yaml | 10 +- .../neutron/neutron-l2gw-api-container-puppet.yaml | 9 +- .../neutron/neutron-l3-container-puppet.yaml | 60 +-- ...neutron-linuxbridge-agent-baremetal-puppet.yaml | 14 +- .../neutron/neutron-metadata-container-puppet.yaml | 35 +- .../neutron-mlnx-agent-container-puppet.yaml | 18 +- .../neutron-ovn-dpdk-config-container-puppet.yaml | 5 +- .../neutron-ovs-agent-container-puppet.yaml | 63 ++- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 8 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 5 +- ...tron-plugin-ml2-cisco-vts-container-puppet.yaml | 5 +- .../neutron-plugin-ml2-container-puppet.yaml | 5 +- ...lugin-ml2-mlnx-sdn-assist-container-puppet.yaml | 15 +- deployment/neutron/neutron-plugin-ml2-nuage.yaml | 5 +- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 28 +- deployment/neutron/neutron-plugin-ml2.yaml | 14 +- .../neutron-plugin-nsx-container-puppet.yaml | 4 +- deployment/neutron/neutron-plugin-nuage.yaml | 5 +- .../neutron/neutron-sfc-api-container-puppet.yaml | 4 +- .../neutron-sriov-agent-container-puppet.yaml | 17 +- .../neutron-vpp-agent-baremetal-puppet.yaml | 8 +- deployment/nova/nova-api-container-puppet.yaml | 148 +++---- deployment/nova/nova-apidb-client-puppet.yaml | 25 +- deployment/nova/nova-az-config.yaml | 27 +- deployment/nova/nova-base-puppet.yaml | 34 +- .../nova/nova-compute-common-container-puppet.yaml | 5 +- deployment/nova/nova-compute-container-puppet.yaml | 250 +++++------ .../nova/nova-conductor-container-puppet.yaml | 55 ++- deployment/nova/nova-db-client-puppet.yaml | 27 +- deployment/nova/nova-ironic-container-puppet.yaml | 50 ++- deployment/nova/nova-libvirt-container-puppet.yaml | 462 +++++++++++---------- .../nova/nova-libvirt-guests-container-puppet.yaml | 4 +- deployment/nova/nova-manager-container-puppet.yaml | 8 +- .../nova/nova-metadata-container-puppet.yaml | 52 +-- .../nova-migration-target-container-puppet.yaml | 10 +- .../nova/nova-scheduler-container-puppet.yaml | 23 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 77 ++-- .../octavia/octavia-api-container-puppet.yaml | 56 +-- deployment/octavia/octavia-base.yaml | 171 ++++---- .../octavia/octavia-deployment-config.j2.yaml | 101 +++-- .../octavia-health-manager-container-puppet.yaml | 15 +- .../octavia-housekeeping-container-puppet.yaml | 17 +- .../octavia/octavia-worker-container-puppet.yaml | 8 +- .../octavia/providers/ovn-provider-config.yaml | 50 +-- .../openvswitch-dpdk-baremetal-ansible.yaml | 11 +- ...vswitch-dpdk-netcontrold-container-ansible.yaml | 10 +- .../ovn/ovn-controller-container-puppet.yaml | 109 +++-- deployment/ovn/ovn-dbs-container-puppet.yaml | 20 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 57 ++- deployment/ovn/ovn-metadata-container-puppet.yaml | 68 ++- .../pacemaker/clustercheck-container-puppet.yaml | 27 +- .../compute-instanceha-baremetal-puppet.yaml | 4 +- deployment/pacemaker/ovn-dbs-baremetal-puppet.yaml | 5 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 78 ++-- .../pacemaker-remote-baremetal-puppet.yaml | 4 +- .../placement/placement-api-container-puppet.yaml | 80 ++-- deployment/podman/podman-baremetal-ansible.yaml | 27 +- deployment/qdr/qdrouterd-container-puppet.yaml | 8 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 67 ++- ...rabbitmq-messaging-notify-container-puppet.yaml | 56 +-- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 18 +- .../rabbitmq-messaging-notify-shared-puppet.yaml | 5 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 18 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 50 +-- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 18 +- deployment/rhsm/rhsm-baremetal-ansible.yaml | 4 +- .../securetty/securetty-baremetal-ansible.yaml | 4 +- deployment/snmp/snmp-baremetal-puppet.yaml | 17 +- deployment/sshd/sshd-baremetal-ansible.yaml | 17 +- deployment/sshd/sshd-baremetal-puppet.yaml | 9 +- .../external-swift-proxy-baremetal-puppet.yaml | 4 +- deployment/swift/swift-base.yaml | 4 +- .../swift/swift-dispersion-baremetal-puppet.yaml | 4 +- deployment/swift/swift-proxy-container-puppet.yaml | 87 ++-- .../swift/swift-ringbuilder-container-puppet.yaml | 17 +- .../swift/swift-storage-container-puppet.yaml | 72 ++-- deployment/time/ptp-baremetal-ansible.yaml | 4 +- deployment/time/timezone-baremetal-ansible.yaml | 4 +- .../timemaster/timemaster-baremetal-ansible.yaml | 23 +- deployment/timesync/chrony-baremetal-ansible.yaml | 25 +- deployment/tls/undercloud-remove-novajoin.yaml | 4 +- deployment/tls/undercloud-tls.yaml | 5 +- .../tripleo-firewall-baremetal-ansible.yaml | 23 +- .../tripleo-packages-baremetal-puppet.yaml | 4 +- deployment/tuned/tuned-baremetal-ansible.yaml | 23 +- deployment/unbound/unbound-container-ansible.yaml | 55 ++- deployment/undercloud/minion-rabbitmq-puppet.yaml | 4 +- .../undercloud-upgrade-ephemeral-heat.yaml | 54 +++ deployment/undercloud/undercloud-upgrade.yaml | 9 +- .../tripleo-validations-baremetal-ansible.yaml | 4 +- deployment/vpp/vpp-baremetal-puppet.yaml | 4 +- environments/dcn-hci.yaml | 53 --- environments/external-network-vip.yaml | 5 + .../lifecycle/undercloud-upgrade-prepare.yaml | 4 +- environments/low-memory-usage.yaml | 4 - environments/manila-cephfsganesha-config.yaml | 4 + environments/metrics/ceilometer-write-qdr.yaml | 2 +- environments/neutron-bgpvpn-bagpipe.yaml | 2 +- environments/neutron-bgpvpn.yaml | 2 +- environments/rhsm.yaml | 35 +- environments/standalone/standalone-overcloud.yaml | 2 - environments/standalone/standalone-tripleo.yaml | 2 - environments/undercloud.yaml | 4 - environments/undercloud/undercloud-minion.yaml | 4 +- .../default-network-isolation-ipv6.yaml | 14 +- .../default-network-isolation.yaml | 14 +- network-data-samples/ganesha-ipv6.yaml | 2 +- network-data-samples/ganesha.yaml | 3 +- .../legacy-routed-networks-ipv6.yaml | 20 +- network-data-samples/legacy-routed-networks.yaml | 20 +- network-data-samples/management-ipv6.yaml | 4 +- network-data-samples/management.yaml | 2 +- network-data-samples/routed-networks-ipv6.yaml | 18 +- network-data-samples/routed-networks.yaml | 14 +- network/network.j2 | 47 +-- network/ports/deployed_port.j2 | 5 + network/ports/noop.yaml | 5 + network/ports/port.j2 | 9 + network/ports/port_from_pool.j2 | 10 +- network/service_net_map.j2.yaml | 154 +------ overcloud-resource-registry-puppet.j2.yaml | 110 ++++- overcloud.j2.yaml | 25 +- puppet/role.role.j2.yaml | 32 +- ...OVNEncapType-option-added-85296d2fe1d94f35.yaml | 6 + .../ceph-hci-osd-count-type-241614543ef7cc58.yaml | 6 + .../notes/glance-db-purge-bb185353a45880c7.yaml | 6 + .../nova_virtlogd_wrapper-120fcfcfa0787b2b.yaml | 17 + .../rbd-disk-cache-modes-284a73271741ea62.yaml | 5 + ...remove-deprecated-dcn-hci-1aca499135c31e17.yaml | 5 + ...ud-upgrade-ephemeral-heat-c838a9c61fc742a3.yaml | 8 + ...e-merging-service-net-map-0c65b5e421ce05bd.yaml | 12 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 2 + roles/ControllerSriov.yaml | 2 + roles/ControllerStorageDashboard.yaml | 2 + roles/ControllerStorageNfs.yaml | 2 + roles/Networker.yaml | 2 + roles/NetworkerSriov.yaml | 2 + roles/Undercloud.yaml | 1 + roles_data.yaml | 2 + roles_data_undercloud.yaml | 1 + sample-env-generator/standalone.yaml | 7 - sample-env-generator/undercloud-minion.yaml | 6 +- scripts/undercloud-upgrade-ephemeral-heat.py | 256 ++++++++++++ tools/yaml-validate.py | 3 +- zuul.d/layout.yaml | 1 + 325 files changed, 3359 insertions(+), 3134 deletions(-)