We jubilantly announce the release of: tripleo-heat-templates 13.1.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.1.0 ^^^^^^ New Features ************ * The NovaApiMaxLimit parameter allows the operator to set Nova API max_limit using a Heat parameter in their templates. Bug Fixes ********* * Certificates get merged into the containers using kolla_config mechanism. If a certificate changes, or e.g. UseTLSTransportForNbd gets disabled and enabled at a later point the containers running the qemu process miss the required certificates and live migration fails. This change moves to use bind mount for the certificates and in case of UseTLSTransportForNbd ans creates the required certificates even if UseTLSTransportForNbd is set to False. With this UseTLSTransportForNbd can be enabled/disabled as the required bind mounts/certificates are already present. * https://review.opendev.org/q/I8df21d5d171976cbb8670dc5aef744b5fae65 7b2 introduced THT parameters to set libvirt/cpu_mode. The patch sets the NovaLibvirtCPUMode wrong to 'none' string which results in puppet-nova not to handle the default cases correct and sets libvirt/cpu_mode to none which results in 'qemu64' CPU model, which is highly buggy and undesirable for production usage. This changes the default to the recommended CPU mode 'host-model', for various benefits documented elsewhere. * When using RHSM Service (deployment/rhsm/rhsm-baremetal- ansible.yaml) based registration of the overcloud nodes and enabling the KSM using NovaComputeEnableKsm=True the overcloud deployment will fail because the RHSM registration and the ksm task run as host_prep task. The handling of enable/disable ksm is now handled in deploy step 1. * In case of cellv2 multicell environment nova-metadata is the only httpd managed service on the cell controller role. In case of tls- everywhere it is required that the cell controller host has ther needed metadata to be able to request the HTTP certificates. Otherwise the getcert request fails with "Insufficient 'add' privilege to add the entry 'krbprincipalname=HTTP/cell1-cellcontrol-0....'" Changes in tripleo-heat-templates 13.0.0..13.1.0 ------------------------------------------------ 4142778f8 Rely on the HOSTNAME var to resolve the mon container name 4ee64076f Set up right DNF module stream for Upgrades and Updates. e66714853 Run os-net-config on step 3 8fa2fa0b4 Skip Trilio dirs when setting ownership in /var/lib/nova 27678af1a Ensure cinder LVM volumes work after system restart 7228eb32a Set setgid mode bit for /var/lib/ironic b0a068c38 Add qemu metadata to compute node when tls for live migration 6f7d495ab The lower constraint file has been removed 5ebdd0b07 Adding Ceph Dashboard to the Edge roles eccd5435d Add NovaApiMaxLimit configure max_limit for nova 6f4bf3160 Fix barbican settings missing from glance Edge nodes c1fcfaf47 Add {{ network.name }}_mtu for all networks to group_vars 87645fc58 Make sure networks_skip_config defaults to [] 125d41b85 Set correct default NovaLibvirtCPUMode e4f921e7b Add file which enables QoS related L3 agent extensions c2c1a10e1 Make sure apache metadata is set for nova-metadata service 8ba9fa5c8 Refresh ceph-ansible group_vars values 36dae322d Move enable ksm on compute node to deploy step 1 79222eb18 Add CinderBackupOptVolumes parameter e92bd3598 node_exporter_container_image is needed in 'all' group 7ffaf82e7 Properly compute hostname when looking for the ceph-mon container 5eb57c09f Filter computes with nova_host defined db441a7ca Fix MetricsQdrUseSSL value 9db592d26 Fix ceilometer_agent_compute healthcheck 6e59a84ec Use bind mounts for tls certificates 48f274a39 cinder/iscsi backend: remove lvm2-lvmetad.service dependency 9991cadc3 Always set dashboard_protocol when Ceph Dashboard is enabled 3bb25122e Remove jobs from layout d7d9e05ff Fix memcached logging 3ef2fb1bf Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ci/environments/neutron_l3_qos.yaml | 2 + .../nova_statedir_ownership.py | 21 ++- deployment/barbican/barbican-client-puppet.yaml | 3 +- .../ceilometer-agent-compute-container-puppet.yaml | 3 +- deployment/ceph-ansible/ceph-base.yaml | 9 ++ deployment/ceph-ansible/ceph-grafana.yaml | 4 - deployment/ceph-ansible/ceph-mgr.yaml | 6 +- deployment/ceph-ansible/ceph-osd.yaml | 4 +- deployment/ceph-ansible/ceph-rgw.yaml | 4 - .../cinder/cinder-common-container-puppet.yaml | 17 ++- .../ironic/ironic-conductor-container-puppet.yaml | 2 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 2 +- deployment/iscsid/iscsid-container-puppet.yaml | 16 +- .../memcached/memcached-container-puppet.yaml | 4 +- deployment/metrics/qdr-container-puppet.yaml | 7 +- deployment/nova/nova-api-container-puppet.yaml | 5 + deployment/nova/nova-az-config.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 85 ++++++----- deployment/nova/nova-libvirt-container-puppet.yaml | 169 ++++++++------------- .../nova/nova-metadata-container-puppet.yaml | 2 + .../tripleo-packages-baremetal-puppet.yaml | 28 ++++ deployment/undercloud/undercloud-upgrade.yaml | 34 +++++ .../lifecycle/undercloud-upgrade-prepare.yaml | 1 + environments/lifecycle/update-prepare.yaml | 1 + environments/lifecycle/upgrade-prepare.yaml | 1 + lower-constraints.txt | 164 -------------------- overcloud.j2.yaml | 11 +- ...use_bind_mounts_for_certs-64cb88f78538a64b.yaml | 13 ++ ...ova_api_max_limit-support-43fe9792eca63599.yaml | 5 + ..._compute_default_cpu_mode-cda2bb3e56463b3a.yaml | 11 ++ .../notes/nova_compute_ksm-444f1cc51ceafb66.yaml | 8 + ...tadata_http_cert_metadata-274e7e8a66727983.yaml | 9 ++ roles/DistributedComputeHCI.yaml | 1 + roles/DistributedComputeHCIDashboard.yaml | 80 ++++++++++ tox.ini | 6 - zuul.d/layout.yaml | 101 +----------- 38 files changed, 425 insertions(+), 447 deletions(-)