We are amped to announce the release of: puppet-tripleo 11.6.0: Puppet module for OpenStack TripleO This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 11.6.0 ^^^^^^ New Features ************ * Add ability to specify the memcache_security_strategy and memcache_secret_key for keystone authtoken middleware. The keys used by individual services are hashed with a salt (the service name), to isolate them. * Add ability to specify memcached port for all services. The port defaults to hiera('memcached_authtoken_port', 11211) for authtoken middleware and hiera('memcached_port', 11211) for other uses. Bug Fixes ********* * libvirt 6.8.0 introduces virt-ssh-helper which prepends the libvirt ssh command with a "which virt-ssh-helper". libvirt used to first check for *nc* (netcat). But these two libvirt commits[1][2] have now changed it to first look for *virt-ssh-helper*, if it not available, then fall back to *nc*. This trips up the 'nova- migration-wrapper' as it does not support virt-ssh-helper atm. Until this is implemented, this change force to use "netcat" (*nc*) by appending to the migration URI: "&proxy=netcat" [1] https://libvirt.org/git/?p=libvirt.git;a=commit;h=f8ec7c842d (rpc: use new virt-ssh-helper binary for remote tunnelling, 2020-07-08) [2] https://libvirt.org/git/?p=libvirt.git;a=commit;h=7d959c302d (rpc: Fix virt-ssh-helper detection, 2020-10-27) Changes in puppet-tripleo 11.5.0..11.6.0 ---------------------------------------- 1bdc2863 Handle cinder_mount_point_base for cinder mounting needs 0108687c Add parameters for multipath connection in cinder store d0c88554 Fix novavnc haproxy network c765a81e Fix live-migration with libvirt >= 6.8.0 8d5bb4b8 Add ability to specify memcached port e54d6040 Add check for bootstrap_node for downcase 112f3799 Stop including nova::metadata on computes cb960b93 Allow OCF resources to be created with --force 817e6a36 Fix manila-share with ceph-nfs backend cff548bb Add authtoken security options Diffstat (except docs and test files) ------------------------------------- manifests/haproxy.pp | 4 +-- manifests/profile/base/aodh.pp | 2 +- manifests/profile/base/aodh/api.pp | 2 +- manifests/profile/base/aodh/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/barbican/api.pp | 2 +- manifests/profile/base/barbican/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/ceilometer/upgrade.pp | 2 +- manifests/profile/base/cinder.pp | 2 +- manifests/profile/base/cinder/api.pp | 2 +- manifests/profile/base/cinder/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/database/mysql.pp | 2 +- manifests/profile/base/designate/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/designate/central.pp | 2 +- manifests/profile/base/glance/api.pp | 2 +- manifests/profile/base/glance/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/glance/backend/cinder.pp | 18 ++++++++++++ manifests/profile/base/gnocchi/api.pp | 2 +- manifests/profile/base/gnocchi/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/heat/api.pp | 2 +- manifests/profile/base/heat/api_cfn.pp | 2 +- manifests/profile/base/heat/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/heat/engine.pp | 2 +- manifests/profile/base/horizon.pp | 2 +- manifests/profile/base/ironic.pp | 2 +- manifests/profile/base/ironic/api.pp | 2 +- manifests/profile/base/ironic/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/ironic/conductor.pp | 2 +- manifests/profile/base/ironic_inspector.pp | 2 +- .../profile/base/ironic_inspector/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/keystone.pp | 8 +++++- manifests/profile/base/manila.pp | 2 +- manifests/profile/base/manila/api.pp | 2 +- manifests/profile/base/manila/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/mistral.pp | 2 +- manifests/profile/base/mistral/api.pp | 2 +- manifests/profile/base/mistral/engine.pp | 2 +- manifests/profile/base/mistral/event_engine.pp | 2 +- manifests/profile/base/mistral/executor.pp | 2 +- manifests/profile/base/neutron/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/neutron/ovn_northd.pp | 2 +- manifests/profile/base/neutron/plugins/ml2.pp | 2 +- manifests/profile/base/neutron/plugins/nsx.pp | 2 +- manifests/profile/base/neutron/plugins/nuage.pp | 2 +- .../profile/base/neutron/plugins/opencontrail.pp | 2 +- manifests/profile/base/neutron/plugins/plumgrid.pp | 2 +- manifests/profile/base/neutron/server.pp | 2 +- manifests/profile/base/nova.pp | 13 ++++++--- manifests/profile/base/nova/api.pp | 2 +- manifests/profile/base/nova/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/nova/compute.pp | 5 ---- manifests/profile/base/nova/conductor.pp | 2 +- manifests/profile/base/nova/ec2api.pp | 2 +- manifests/profile/base/nova/metadata.pp | 2 +- manifests/profile/base/nova/migration/client.pp | 5 +++- manifests/profile/base/octavia/api.pp | 2 +- manifests/profile/base/octavia/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/panko/api.pp | 2 +- manifests/profile/base/panko/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/placement.pp | 2 +- manifests/profile/base/placement/api.pp | 2 +- manifests/profile/base/placement/authtoken.pp | 32 +++++++++++++++++++--- manifests/profile/base/rabbitmq.pp | 2 +- manifests/profile/base/sahara.pp | 2 +- manifests/profile/base/sahara/engine.pp | 2 +- manifests/profile/base/swift/proxy.pp | 10 +++---- manifests/profile/base/trove/api.pp | 2 +- manifests/profile/base/zaqar.pp | 2 +- manifests/profile/pacemaker/ceph_nfs.pp | 7 +++-- manifests/profile/pacemaker/cinder/backup.pp | 2 +- .../profile/pacemaker/cinder/backup_bundle.pp | 2 +- manifests/profile/pacemaker/cinder/volume.pp | 2 +- .../profile/pacemaker/cinder/volume_bundle.pp | 2 +- manifests/profile/pacemaker/database/mysql.pp | 2 +- .../profile/pacemaker/database/mysql_bundle.pp | 7 ++++- manifests/profile/pacemaker/database/redis.pp | 2 +- .../profile/pacemaker/database/redis_bundle.pp | 7 ++++- manifests/profile/pacemaker/haproxy.pp | 2 +- manifests/profile/pacemaker/haproxy_bundle.pp | 2 +- manifests/profile/pacemaker/manila.pp | 2 +- manifests/profile/pacemaker/manila/share_bundle.pp | 2 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 7 ++++- manifests/profile/pacemaker/rabbitmq.pp | 2 +- manifests/profile/pacemaker/rabbitmq_bundle.pp | 7 ++++- .../add-memcache-security-92060c4fe540774c.yaml | 7 +++++ .../notes/add-memcached-port-048959c2f58f0a57.yaml | 6 ++++ ...e_live_migration_force_nc-f903a09955164ad9.yaml | 15 ++++++++++ ...pleo_profile_base_glance_backend_cinder_spec.rb | 6 ++++ 87 files changed, 584 insertions(+), 140 deletions(-)