We are thrilled to announce the release of: tripleo-heat-templates 12.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.0.0 ^^^^^^ New Features ************ * Added the "connection_logging" parameter for the Octavia service. * Added support for running the Octavia driver agent in a container. This will enable features such as the OVN load balancer provider in octavia as well as other third party providers. * Added the Octavia log offload parameters. * Inclusion and configuration of ReaR service to undercloud and overcloud nodes. * The ManageNetworks parameter has been added. The parameter controls management of the network and related resources (subnets and segments) with either create, update, or delete operations (depending on the stack operation). Does not apply to ports which will always be managed as needed. Defaults to true. For multi-stack use cases where the network related resources have already been managed by a separate stack, this parameter can be set to false. * Provides the option to set the "ovn_emit_need_to_frag" configuration option to the "ovn" section of etc/neutron/plugins/ml2_conf.ini. This option tells ovn whether it should emit ICMP "need to frag" packets in case of MTU mismatch. Before enabling this configuration make sure that it's supported by the host kernel (version >= 5.2) or by checking the output of the following command 'ovs-appctl -t ovs- vswitchd dpif/show-dp-features br-int | grep "Check pkt length action"'. Defaults to False. * This parameter sets inactive probe interval of the JSON session from ovn-metadata to the OVN SB database. By default this it is 5s which not be sufficient in loaded systems or during high control- plane activity spikes, leading to unnecessary reconnections to OVSDB server. Now it is extended by default to 1 min and it is configurable by param OVNRemoteProbeInterval. * Added new heat param OVNOpenflowProbeInterval to set ovn_openflow_probe_interval which is inactivity probe interval of the OpenFlow connection to the OpenvSwitch integration bridge, in seconds. If the value is zero, it disables the connection keepalive feature, by default this value is set on 60s. If the value is nonzero, then it will be forced to a value of at least 5s. * On undercloud and standalone, install rsyslog on the host by default. See https://bugs.launchpad.net/tripleo/+bug/1850562 * Under pressure, the default monitor timeout value of 20 seconds is not enough to prevent unnecessary failovers of the ovn-dbs pacemaker resource. While spawning a few VMs in the same time this could lead to unnecessary movements of master DB, then re-connections of ovn- controllers (slaves are read-only), further peaks of load on DBs, and at the end it could lead to snowball effect. Now this value can be configurable by OVNDBSPacemakerTimeout which will configure tripleo::profile::pacemaker::ovn_dbs_bundle (default is set to 60s). * TripleO will now configure *iptables* using the TripleO-Ansible role, **tripleo-firewall**. This role implements all of the same interfaces and behaviors as the puppet manifest. * A new parameter has been added, *ExtraFirewallRules*. This parameter provides a user interface to configure additional *iptables* rules. Upgrade Notes ************* * If deprecated parameter "InotifyIntancesMax" is used in deployment, then user should use parameter "InotifyInstancesMax" with correct spelling during upgrade. Deprecation Notes ***************** * Deprecated "InotifyIntancesMax" parameter as it is misspelt. * The OS::TripleO::Services::NeutronServer service mapping is deprecated in favor of using OS::TripleO::Services::NeutronApi. Any role definitions still using OS::TripleO::Services::NeutronServer need to either be updated to use OS::TripleO::Services::NeutronApi instead, or they can make use of the environment file at environments/services/neutron-server.yaml to enable the old mapping. The environment file will be removed in the ussuri release. * The roles file at deployed-server/deployed-server-roles-data.yaml is deprecated in train. It's contents are the same as roles_data.yaml, and no special roles files are needed when using deployed-server. * The roles file at deployed-server/deployed-server-roles-data.yaml is now removed in ussuri as it was deprecated in train. Note that the default roles_data.yaml file can now be used when using deployed- server. * OpenDaylight service templates and environment files have been removed. It was deprecated in Stein and removed in Train. * The heat template *tripleo-firewall-baremetal-puppet.yaml* has been deprecated. While this template can still be used to configure the TripleO-Firewall service, it is no longer preferred and will be removed in a future release. * Configuring firewall rules with extraconfig is no longer being supported. All firewall rules should be converted such that they're set within the user defined parameter *ExtraFirewallRules*. Bug Fixes ********* * Fixed an issue where Octavia controller services were not properly configured. * Added new parameter with correct spelling "InotifyInstancesMax". * Restart certmnonger after registering system with IPA. This prevents cert requests not completely correctly when doing a brownfield update. Other Notes *********** * Add "radvd_user" configuration parameter to the Neutron L3 container. This parameter defines the user pased to radvd. The default value is "root". Changes in tripleo-heat-templates 11.3.0..12.0.0 ------------------------------------------------ af80a0d91 Drop the SELinux flags for openvswitch /var/run directory bc4219d27 Use list join for rendering rear config file in heat d5bfc36eb Add the ability to configure ovn-remote-probe-interval 8adef8587 Update scale down to fix regression 3ade96f76 Drop file test before removal 804dd0f34 Ensure "network" service is enabled 9e8d4e3c2 Add Octavia driver agent service 79bd7c447 Adding ReaR THT 553ede194 Use public network for external interface 227c516aa Derive Pci passthrough whitelist disable option fa349ee4f ovn standalone: Start OVN ovsdb-servers using the kolla startup script 10a523a03 Make sure we apply all deploy step-0 during update. 22b85a063 Configure time using tripleo-ansible a6d1f4459 Add a scenario000-standalone environment cbf5395e7 Fix typo in parameter name 8e88083bb Remove configuration options for ldap write support 03f26d045 Fix regression in removing containers in container-puppet.py 94aca797e Fix typo in MySQL upgrade tasks. d74083a2c Disable legacy telemetry by default 50367fbe3 Convert firewall rules to use TripleO-Ansible e83f2e99f Incorrect group name issue on non DPDK compute e2d2462c5 Add a version of the multiple-nics templates with tagged VLANs a7db39af7 Fix neutron api TLS issues e8ecbecb6 ovn-db standalone: Create ovndbs before starting the OVN ovsdb servers 2dc7066b0 Use a systemd service to handle sidecar containers 7ed8ab86d Split QDR environment from collectd 6687758c7 Resolve FIXME for NeutronServer mapping 709a6b78b Check if snmpd is enabled for upgrade_tasks a465243be Stop configuring install_command in tox. 0171d11c6 container without paunch: set tripleo_container_manage_systemd_order 927531adb Enable recon middleware for swift account/container server 189d9b921 Readd creation of /var/log/mariadb directory 4cbae84c7 Get rid of docker removing in post_upgrade tasks. 897678b33 Configure SNMP on undercloud 9931decca Use ansible role to create puppet cache 35ff2c37c Use python -m pip instead pip command. 8a10389fb Remove odl in ComputeSriovIB 132aec7cd Updates for dcn/dcn-hci sample envs 013f6ca2d Remove deployed-server-roles-data.yaml aade43dd1 Add ManageNetworks parameter c01f383ea container-puppet: update 'env' when not null 8b07a2259 Correct mysql-pacemaker upgrade task cf3fa9d77 Fix debug hiera keys 460d4771a Define ovn_dbs_image fact for upgrades. ccf1bca97 zuul: remove "files" for openstack-tox-tht eda88f0c7 Fix typo in OVN upgrade tasks. ccf3f0b58 Added the ability to disable Mellanox SDN sync f6dd82342 Remove duplicate mount in rabbit containers de14bc555 Use distinct params for ca cert in nova-vnc-proxy and nova-libvirt 427e54164 Do not run rendering all_nodes data as group_vars in check mode 068527d13 Move bootstrap password to an environment var 632ad172e Do not log startup config output 14228a33d Disable haproxy when using external LB ab958c2f3 Set ServerDeletionPolicy during upgrade prepare and converge 7906fb43b Drop legacy log folder and readme f2147c997 Ensure service log folder permissions fb53535ca Add "radvd_user" config parameter to Neutron L3 container 57afa87fd Mode 0750 for /var/log/containers bfa44f0bb tox: Keeping going with docs f70ba4bfa Honor Debug for container image prepare 3d75a00a4 Add an environment to disable Paunch 1c1f78bc5 Fix the amqp presettle option for metrics and events in collectd 5d4f3ad4a Move globals into main level 0 case 99c7e2afa Convert subprocess to a reusable method 5ff628f1c Install and start Rsyslog on the Undercloud & Standalone 7282c1128 Move basic global functions into ansible tasks 1b718b2ca Fix duplicate mount point in neutron_dhcp e8048707f Adds ceph-systemd tag in external_upgrade_tasks for systemd units 0de387ee3 Ansible lint check in THT a2713ea20 Add in-flight validation for keystone container ed85ec884 container-manage: use new variables f157e1afb Add experimental support to deploy containers without Paunch 41a17bfc1 Correct ovn-dbs upgrade image id variable bf0bc85ef Restart certmnonger after registering system with IPA b5a33168a Generate startup configs files per step and per container 6d76836e4 Drop the overcloud designation for deploy steps bd0e7c4cc Use single quotes for --start-at-task debug tasks 81610bdc3 HA: ensure TRIPLEO_MINOR_UPDATE is defined for <svc>_restart_bundle 7adb850fb Remove EC2 api 4282b4302 deploy-steps-tasks: remove duplicate "when" for paunch debug 16679d0ec Move KernelArgs and OvS-DPDK deployment to ansible role e6b5deef9 Deprecate deployed-server-roles-data.yaml 84b18f8fe OVN: Add ovn_emit_need_to_frag configuration option a7ed27c30 Derives NovaPCIPassthrough per SR-IOV node 8c2cba372 Disable ceph dashboard to fix upstream ci b18c1f554 Fix missing environment variable in rabbitmq_init_bundle 0299c483a Update master for stable/train 3164744b8 Connect collectd to QDR instead of Gnocchi 879657abd memcached: do not run memcached from a bash process 9c3638b8a Remove OpenDaylight templates and environments 88daacd04 Enable healthcheck for ironic-neutron-agent 7d756756d Add the Octavia log offload parameters d80d948fe Fix placement_wait_for_service ad1ef91aa Add configurable monitor timeouts for ovn dbs ae453229a Less agressive cleanup of docker containers in post_upgrade_tasks 6353a6cbc Pass server metadata to ansible group vars 4495c14c2 remove SensuClient from ComputeSriovIB role 98eeb1328 Fix "neutron-mlnx-agent.yaml" to use the new Role ComputeSriovIB 373a27163 Replace chronyc "waitsync" with "makestep" bf3ef6e3b Add posibilities to set ovn_openflow_probe_interval for controller 4bee12fea Add SQLAlchemy-collectd support 45c226c8f Add NovaAZConfig service to compute roles 0c638605e Set octavia-ansible dir ownership to Ansible user c2bb9c093 Simplify octavia post deploy configs 39517657e Override policy for undercloud novajoin 144bea268 Create an endpoint entry for novajoin b89454af6 Added the connection_logging parameter for Octavia d41f0d7c3 ml2-ansible: Set api_max_retries when net-ansible is used 6359f1e37 Configure amphora for upload and run tempest Diffstat (except docs and test files) ------------------------------------- README.rst | 2 - capabilities-map.yaml | 10 - ci/environments/multinode-containers.yaml | 2 +- ci/environments/multinode-core.yaml | 11 +- ci/environments/scenario000-standalone.yaml | 215 ++++++ .../scenario001-multinode-containers.yaml | 4 +- ci/environments/scenario001-standalone.yaml | 5 +- .../scenario002-multinode-containers.yaml | 5 +- ci/environments/scenario002-standalone.yaml | 2 +- .../scenario003-multinode-containers.yaml | 2 +- .../scenario004-multinode-containers.yaml | 3 +- ci/environments/scenario004-standalone.yaml | 1 + .../scenario006-multinode-containers.yaml | 2 +- ci/environments/scenario006-multinode.yaml | 2 +- .../scenario007-multinode-containers.yaml | 3 +- ci/environments/scenario007-standalone.yaml | 1 - .../scenario008-multinode-containers.yaml | 58 -- .../scenario010-multinode-containers.yaml | 5 +- ci/environments/scenario010-standalone.yaml | 6 + .../scenario012-multinode-containers.yaml | 3 +- ci/environments/scenario012-standalone.yaml | 1 + common/container-puppet.py | 784 ++++++++++++--------- common/container-puppet.sh | 2 +- common/container_startup_configs_tasks.yaml | 19 + common/deploy-steps-tasks-step-0.j2.yaml | 18 + common/deploy-steps-tasks-step-1.yaml | 26 +- common/deploy-steps-tasks.yaml | 122 ++-- common/deploy-steps.j2 | 63 +- common/services/role.role.j2.yaml | 19 +- .../pacemaker_restart_bundle.sh | 1 + .../placement_wait_for_service.py | 39 +- deployed-server/deployed-server-roles-data.yaml | 418 ----------- deployment/aodh/aodh-api-container-puppet.yaml | 30 +- deployment/aodh/aodh-base.yaml | 20 +- .../aodh/aodh-evaluator-container-puppet.yaml | 18 +- .../aodh/aodh-listener-container-puppet.yaml | 18 +- .../aodh/aodh-notifier-container-puppet.yaml | 17 +- .../backup-and-restore/rear-baremetal-ansible.yaml | 105 +++ .../barbican/barbican-api-container-puppet.yaml | 40 +- .../liquidio-compute-config-container-puppet.yaml | 8 - .../ceilometer-agent-central-container-puppet.yaml | 67 +- .../ceilometer-agent-compute-container-puppet.yaml | 18 +- .../ceilometer-agent-ipmi-container-puppet.yaml | 18 +- ...ometer-agent-notification-container-puppet.yaml | 18 +- .../ceilometer-base-container-puppet.yaml | 4 +- deployment/ceph-ansible/ceph-base.yaml | 10 + deployment/ceph-ansible/ceph-grafana.yaml | 8 + deployment/ceph-ansible/ceph-mds.yaml | 21 +- deployment/ceph-ansible/ceph-mgr.yaml | 21 +- deployment/ceph-ansible/ceph-mon.yaml | 23 +- deployment/ceph-ansible/ceph-nfs.yaml | 13 +- deployment/ceph-ansible/ceph-osd.yaml | 21 +- deployment/ceph-ansible/ceph-rbdmirror.yaml | 11 +- deployment/ceph-ansible/ceph-rgw.yaml | 21 +- deployment/cinder/cinder-api-container-puppet.yaml | 31 +- .../cinder/cinder-backup-container-puppet.yaml | 8 - deployment/cinder/cinder-base.yaml | 20 +- .../cinder/cinder-common-container-puppet.yaml | 10 +- .../cinder/cinder-scheduler-container-puppet.yaml | 18 +- .../cinder/cinder-volume-container-puppet.yaml | 14 +- ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 6 +- deployment/database/mysql-base.yaml | 18 +- deployment/database/mysql-container-puppet.yaml | 17 +- deployment/database/mysql-pacemaker-puppet.yaml | 43 +- deployment/database/redis-container-puppet.yaml | 36 +- deployment/database/redis-pacemaker-puppet.yaml | 22 +- .../docker/docker-baremetal-ansible.yaml | 7 +- .../docker/docker-registry-baremetal-ansible.yaml | 12 +- .../deprecated/ec2/ec2-api-container-puppet.yaml | 377 ---------- .../deprecated/kernel/kernel-baremetal-puppet.yaml | 4 +- .../kubernetes-master-baremetal-ansible.yaml | 29 +- .../kubernetes-worker-baremetal-ansible.yaml | 38 +- .../opendaylight-api-container-puppet.yaml | 390 ---------- .../opendaylight-ovs-baremetal-puppet.yaml | 267 ------- .../telemetry/enable-legacy-telemetry.yaml | 26 + .../time/ptp-baremetal-puppet.yaml | 16 +- .../tripleo-firewall-baremetal-puppet.yaml | 21 +- deployment/etcd/etcd-container-puppet.yaml | 18 +- .../designate/designate-api-container-puppet.yaml | 28 +- .../designate-central-container-puppet.yaml | 38 +- .../designate/designate-mdns-container-puppet.yaml | 54 +- .../designate-producer-container-puppet.yaml | 18 +- .../designate/designate-sink-container-puppet.yaml | 18 +- .../designate-worker-container-puppet.yaml | 41 +- deployment/glance/glance-api-container-puppet.yaml | 44 +- .../glance/glance-api-logging-file-container.yaml | 10 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 32 +- deployment/gnocchi/gnocchi-base.yaml | 21 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 18 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 30 +- deployment/haproxy/haproxy-container-puppet.yaml | 71 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 56 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 18 +- deployment/heat/heat-api-container-puppet.yaml | 19 +- deployment/heat/heat-base-puppet.yaml | 2 +- deployment/heat/heat-engine-container-puppet.yaml | 28 +- deployment/horizon/horizon-container-puppet.yaml | 30 +- .../image-serve/image-serve-baremetal-ansible.yaml | 12 +- deployment/ipa/ipaclient-baremetal-ansible.yaml | 19 +- deployment/ipsec/ipsec-baremetal-ansible.yaml | 68 +- deployment/ironic/ironic-api-container-puppet.yaml | 31 +- deployment/ironic/ironic-base-puppet.yaml | 20 +- .../ironic/ironic-conductor-container-puppet.yaml | 30 +- .../ironic/ironic-inspector-container-puppet.yaml | 101 ++- .../ironic-neutron-agent-container-puppet.yaml | 9 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 21 +- deployment/iscsid/iscsid-container-puppet.yaml | 8 - .../keepalived/keepalived-container-puppet.yaml | 24 +- deployment/kernel/kernel-baremetal-ansible.yaml | 23 +- .../kernel-boot-params-baremetal-ansible.yaml | 71 +- deployment/keystone/keystone-container-puppet.yaml | 64 +- deployment/logging/files/barbican-api.yaml | 12 +- deployment/logging/files/heat-api-cfn.yaml | 12 +- deployment/logging/files/heat-api.yaml | 12 +- deployment/logging/files/heat-engine.yaml | 10 +- deployment/logging/files/keystone.yaml | 12 +- deployment/logging/files/neutron-api.yaml | 12 +- deployment/logging/files/neutron-common.yaml | 10 +- deployment/logging/files/nova-api.yaml | 12 +- deployment/logging/files/nova-common.yaml | 10 +- deployment/logging/files/nova-libvirt.yaml | 9 +- deployment/logging/files/nova-metadata.yaml | 12 +- deployment/logging/files/opendaylight-api.yaml | 33 - deployment/logging/files/placement-api.yaml | 12 +- deployment/logging/rsyslog-baremetal-ansible.yaml | 57 ++ deployment/logging/rsyslog-container-puppet.yaml | 9 +- .../logrotate-crond-container-puppet.yaml | 8 - deployment/manila/manila-api-container-puppet.yaml | 30 +- deployment/manila/manila-base.yaml | 22 +- .../manila/manila-scheduler-container-puppet.yaml | 18 +- .../manila/manila-share-container-puppet.yaml | 18 +- .../manila/manila-share-pacemaker-puppet.yaml | 10 +- .../memcached/memcached-container-puppet.yaml | 74 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 29 +- deployment/metrics/collectd-container-puppet.yaml | 47 +- deployment/metrics/qdr-container-puppet.yaml | 36 +- .../mistral/mistral-api-container-puppet.yaml | 28 +- deployment/mistral/mistral-base.yaml | 22 +- .../mistral/mistral-engine-container-puppet.yaml | 18 +- .../mistral-event-engine-container-puppet.yaml | 18 +- .../mistral/mistral-executor-container-puppet.yaml | 18 +- deployment/multipathd/multipathd-container.yaml | 8 - .../neutron/derive_pci_passthrough_whitelist.py | 125 ++++ deployment/neutron/kill-script | 71 -- .../neutron/neutron-api-container-puppet.yaml | 54 +- .../neutron/neutron-compute-plugin-nuage.yaml | 12 +- .../neutron/neutron-dhcp-container-puppet.yaml | 136 ++-- .../neutron-l2gw-agent-baremetal-puppet.yaml | 39 +- .../neutron/neutron-l3-container-puppet.yaml | 122 ++-- .../neutron/neutron-metadata-container-puppet.yaml | 8 - .../neutron-ovn-dpdk-config-container-puppet.yaml | 26 +- .../neutron-ovs-agent-container-puppet.yaml | 27 +- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 36 +- ...lugin-ml2-mlnx-sdn-assist-container-puppet.yaml | 4 + deployment/neutron/neutron-plugin-ml2-odl.yaml | 75 -- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 10 + .../neutron-sriov-agent-container-puppet.yaml | 41 +- deployment/nova/nova-api-container-puppet.yaml | 19 +- deployment/nova/nova-base-puppet.yaml | 48 +- deployment/nova/nova-compute-container-puppet.yaml | 34 +- .../nova/nova-conductor-container-puppet.yaml | 8 - deployment/nova/nova-ironic-container-puppet.yaml | 29 +- deployment/nova/nova-libvirt-container-puppet.yaml | 21 +- .../nova/nova-metadata-container-puppet.yaml | 20 +- .../nova-migration-target-container-puppet.yaml | 16 +- .../nova/nova-scheduler-container-puppet.yaml | 8 - .../nova/nova-vnc-proxy-container-puppet.yaml | 28 +- deployment/nova/novajoin-container-puppet.yaml | 65 +- .../octavia/octavia-api-container-puppet.yaml | 84 ++- deployment/octavia/octavia-base.yaml | 73 +- .../octavia/octavia-deployment-config.j2.yaml | 1 + .../octavia-health-manager-container-puppet.yaml | 40 +- .../octavia-housekeeping-container-puppet.yaml | 30 +- .../octavia/octavia-worker-container-puppet.yaml | 30 +- ...aml => openvswitch-dpdk-baremetal-ansible.yaml} | 65 +- .../ovn/ovn-controller-container-puppet.yaml | 47 +- deployment/ovn/ovn-dbs-container-puppet.yaml | 83 +-- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 38 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 82 +-- .../pacemaker/clustercheck-container-puppet.yaml | 11 - .../pacemaker-remote-baremetal-puppet.yaml | 10 +- .../placement/placement-api-container-puppet.yaml | 81 ++- deployment/qdr/qdrouterd-container-puppet.yaml | 26 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 40 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 35 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 24 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 24 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 40 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 25 +- deployment/rhsm/rhsm-baremetal-ansible.yaml | 3 - deployment/sahara/sahara-api-container-puppet.yaml | 28 +- deployment/sahara/sahara-base.yaml | 22 +- .../sahara/sahara-engine-container-puppet.yaml | 18 +- .../skydive-analyzer-baremetal-ansible.yaml | 17 +- deployment/snmp/snmp-baremetal-puppet.yaml | 53 +- deployment/sshd/sshd-baremetal-puppet.yaml | 34 +- deployment/swift/swift-proxy-container-puppet.yaml | 67 +- .../swift/swift-storage-container-puppet.yaml | 92 +-- deployment/time/ptp-baremetal-ansible.yaml | 114 +++ deployment/time/timezone-baremetal-ansible.yaml | 24 +- deployment/timesync/chrony-baremetal-ansible.yaml | 12 +- .../tripleo-firewall-baremetal-ansible.yaml | 177 +++++ .../undercloud/tempest-container-puppet.yaml | 10 +- deployment/zaqar/zaqar-container-puppet.yaml | 55 +- environments/backup-and-restore/rear.yaml | 3 + .../ceph-ansible/ceph-ansible-external.yaml | 6 +- .../ceph-ansible/ceph-ansible-per-role.yaml | 3 +- environments/ceph-ansible/ceph-ansible.yaml | 3 +- environments/computealt.yaml | 5 +- environments/dcn-hci.yaml | 5 + environments/dcn.yaml | 5 + environments/disable-paunch.yaml | 6 + environments/disable-telemetry.yaml | 1 + environments/docker-uc-light.yaml | 1 - environments/external-loadbalancer-vip-v6-all.yaml | 2 + environments/external-loadbalancer-vip-v6.yaml | 2 + environments/external-loadbalancer-vip.yaml | 2 + environments/host-config-and-reboot.j2.yaml | 7 +- environments/hyperconverged-ceph.yaml | 3 +- environments/lifecycle/upgrade-converge.yaml | 1 + environments/lifecycle/upgrade-prepare.yaml | 1 + environments/metrics/ceilometer-write-qdr.yaml | 11 + ...d-rabbitmq.yaml => collectd-read-rabbitmq.yaml} | 0 environments/metrics/collectd-standalone.yaml | 142 ---- environments/metrics/collectd-write-qdr.yaml | 26 +- environments/metrics/qdr-edge-only.yaml | 26 + environments/metrics/qdr-form-controller-mesh.yaml | 27 + environments/net-multiple-nics-vlans.j2.yaml | 13 + environments/network-isolation-v6-all.j2.yaml | 2 - environments/network-isolation-v6.j2.yaml | 2 - environments/neutron-ml2-mlnx-sdn.yaml | 1 + environments/neutron-ovs-dvr.yaml | 1 - environments/odl-dscp-marking-inheritance.yaml | 4 - environments/services-baremetal/ec2-api.yaml | 2 - .../neutron-bgpvpn-opendaylight.yaml | 12 - .../neutron-l2gw-opendaylight.yaml | 18 - .../neutron-opendaylight-sriov.yaml | 22 - .../services-baremetal/neutron-opendaylight.yaml | 17 - .../services-baremetal/undercloud-ceilometer.yaml | 1 + .../services-baremetal/undercloud-gnocchi.yaml | 6 +- environments/services/ec2-api.yaml | 3 - .../keystone_domain_specific_ldap_backend.yaml | 3 - .../services/neutron-bgpvpn-opendaylight.yaml | 12 - .../services/neutron-l2gw-opendaylight.yaml | 18 - environments/services/neutron-ml2-ansible.yaml | 1 + environments/services/neutron-mlnx-agent.yaml | 2 +- .../services/neutron-opendaylight-dpdk.yaml | 37 - .../services/neutron-opendaylight-sriov.yaml | 23 - environments/services/neutron-opendaylight.yaml | 20 - environments/services/neutron-ovs-dvr.yaml | 1 - environments/services/neutron-ovs.yaml | 1 - environments/services/neutron-server.yaml | 5 + .../services/neutron-sfc-opendaylight.yaml | 9 - environments/services/ptp.yaml | 2 +- environments/ssl/no-tls-endpoints-public-ip.yaml | 5 - environments/ssl/tls-endpoints-public-dns.yaml | 5 - environments/ssl/tls-endpoints-public-ip.yaml | 5 - environments/ssl/tls-everywhere-endpoints-dns.yaml | 5 - environments/standalone/standalone-tripleo.yaml | 4 +- environments/storage-environment-external.yaml | 6 +- environments/storage-environment.yaml | 3 +- environments/undercloud.yaml | 11 +- environments/undercloud/undercloud-minion.yaml | 5 - extraconfig/pre_network/boot_param_tasks.yaml | 101 --- .../pre_network/host_config_and_reboot.yaml | 163 ----- firstboot/userdata_timesync.yaml | 2 +- lower-constraints.txt | 3 +- network/config/multiple-nics-vlans/README.md | 46 ++ .../config/multiple-nics-vlans/compute-dvr.j2.yaml | 198 ++++++ .../config/multiple-nics-vlans/role.role.j2.yaml | 231 ++++++ network/endpoints/endpoint_data.yaml | 16 - network/endpoints/endpoint_map.yaml | 719 +------------------ network/network.j2 | 39 +- network/service_net_map.j2.yaml | 2 - overcloud-resource-registry-puppet.j2.yaml | 40 +- overcloud.j2.yaml | 3 + ...nection-logging-parameter-e51f59175c8da204.yaml | 3 + ...avia-driver-agent-support-470fa6fd769c8428.yaml | 6 + ...ia-log-offload-parameters-dc645daf909a85c2.yaml | 3 + .../adding-rear-service-5fac71fa6fbd9c9e.yaml | 5 + ...tavia-post-deploy-configs-bc251a5446e5615d.yaml | 5 + .../deprecate-misspelt-param-34fee48da69fc480.yaml | 12 + ...te-neutron-server-mapping-af17af3d8e09ade4.yaml | 10 + ...eployed-server-roles-data-464b3147ae7434d3.yaml | 6 + .../l3_agent_radvd_user-1814df18745101d6.yaml | 6 + .../notes/manage-networks-9b1e5be19180deff.yaml | 10 + ...eed-to-frag-config-option-33fe0ee3f6ac0372.yaml | 11 + ...ata_remote_probe_interval-b90c7eea0c3fb2f6.yaml | 9 + ...n_openflow_probe_interval-fd99301d95aac62e.yaml | 8 + ...ed-server-roles-data.yaml-090c4f589ca493fd.yaml | 6 + .../notes/remove-odl-735ca4129c2a450e.yaml | 5 + .../notes/restart-certmonger-244416f537859bac.yaml | 5 + releasenotes/notes/rsyslog-5dc93db5eb8fc953.yaml | 5 + .../setup_timeouts_ovn_dbs-141be475dd2cd7ae.yaml | 11 + .../tripleo-firewall-ansible-3928f04478a09668.yaml | 15 + releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 + roles/BlockStorage.yaml | 1 + roles/Compute.yaml | 3 +- roles/ComputeAlt.yaml | 2 +- roles/ComputeDVR.yaml | 2 +- roles/ComputeHCI.yaml | 3 +- roles/ComputeHCIOvsDpdk.yaml | 3 +- roles/ComputeInstanceHA.yaml | 2 +- roles/ComputeLiquidio.yaml | 1 + roles/ComputeLocalEphemeral.yaml | 3 +- roles/ComputeOvsDpdk.yaml | 3 +- roles/ComputeOvsDpdkRT.yaml | 3 +- roles/ComputeOvsDpdkSriov.yaml | 2 +- roles/ComputeOvsDpdkSriovRT.yaml | 2 +- roles/ComputePPC64LE.yaml | 3 +- roles/ComputeRBDEphemeral.yaml | 3 +- roles/ComputeRealTime.yaml | 3 +- roles/ComputeSriov.yaml | 3 +- roles/ComputeSriovIB.yaml | 2 - roles/ComputeSriovRT.yaml | 3 +- roles/Controller.yaml | 4 +- roles/ControllerAllNovaStandalone.yaml | 2 - roles/ControllerNoCeph.yaml | 4 +- roles/ControllerNovaStandalone.yaml | 2 - roles/ControllerOpenstack.yaml | 4 +- roles/ControllerStorageDashboard.yaml | 3 - roles/ControllerStorageNfs.yaml | 3 - roles/DistributedCompute.yaml | 2 +- roles/DistributedComputeHCI.yaml | 2 +- roles/HciCephAll.yaml | 3 +- roles/HciCephFile.yaml | 3 +- roles/HciCephMon.yaml | 3 +- roles/HciCephObject.yaml | 3 +- roles/Networker.yaml | 1 - roles/Novacontrol.yaml | 2 - roles/ObjectStorage.yaml | 1 + roles/README.rst | 1 - roles/Standalone.yaml | 4 +- roles/Undercloud.yaml | 3 + roles/UndercloudMinion.yaml | 1 + roles_data.yaml | 10 +- roles_data_undercloud.yaml | 3 + sample-env-generator/dcn.yaml | 7 + sample-env-generator/ssl.yaml | 20 - sample-env-generator/standalone.yaml | 4 + sample-env-generator/undercloud-minion.yaml | 5 - test-ansible-requirements.txt | 12 + test-requirements.txt | 5 +- tools/releasenotes_tox.sh | 2 +- tools/render-ansible-tasks.py | 127 ++++ tools/yaml-validate.py | 9 +- tox.ini | 35 +- zuul.d/layout.yaml | 13 + 352 files changed, 4709 insertions(+), 6338 deletions(-) Requirements updates -------------------- diff --git a/test-ansible-requirements.txt b/test-ansible-requirements.txt new file mode 100644 index 000000000..3e87cc19c --- /dev/null +++ b/test-ansible-requirements.txt @@ -0,0 +1,12 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +yaql>=1.1.3 # Apache 2.0 License +ansible>=2.8.6 # GPL +ansible-runner>=1.4.2 # Apache +ansi2html>=1.5.2 # GPL (soft-dependency of pytest-html) +pytest>=5.2.2 # MIT +pytest-ansible-playbook-runner>=0.0.2 # Apache-2.0 +pytest-cov>=2.8.1 # MIT +pytest-html>=1.22.0 # MPL 2.0 +pytest-xdist>=1.30.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index c19bd2dc8..2162496ad 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,2 +9,2 @@ six>=1.10.0 # MIT -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD +sphinx>=1.8.0,<2.0.0;python_version=='2.7' # BSD +sphinx>=1.8.0,!=2.1.0;python_version>='3.4' # BSD @@ -20,0 +21 @@ yaql>=1.1.3 # Apache 2.0 License +ansible-runner>=1.4.2 # Apache