We joyfully announce the release of: tripleo-heat-templates 12.4.5: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.4.5 ^^^^^^ New Features ************ * The following parameters add support for mounting Cinder's image conversion directory on an external NFS share. * CinderImageConversionNfsShare * CinderImageConversionNfsOptions * The new "MemcacheUseAdvancedPool" parameter is added which enables usage of advanced poll for memcached connections in keystone middleware. This parameter is set to "true" by default to avoind bursting connections in some services like neutron. * Add support for OVS DPDK pmd auto balance parameters. This feature adds 3 new role specific THT parameters to set pmd-auto-lb-load- threshold, pmd-auto-lb-improvement-threshold, and pmd-auto-lb-rebal- interval in OVS through OvsPmdLoadThreshold, OvsPmdImprovementThreshold and OvsPmdRebalInterval respectively. * Introduce new parameter to configure OVS PMD Auto Load Balance for OVS DPDK Bug Fixes ********* * InternalTLSNbdCAFile, InternalTLSVncCAFile and InternalTLSQemuCAFile do not point to the default IPA ca.crt file and instead are requested to be loaded to component specific CA files (even if they are the same). This can lead to a race where the CA cert is not being written by certmonger in time. Ib868465c20d97c62cbcb214bfc62d949bd6efc62 already changed the default to use the IPA system cacert file '/etc/ipa/ca.crt' per default starting with the wallaby release using the ansible role. This change backports to also use the IPA system cacert file '/etc/ipa/ca.crt' to previous release when managing the certs via puppet-tripleo. Other Notes *********** * These parameters can now be set per-role - DnfStreams, UpgradeInitCommand, UpgradeLeappCommandOptions, UpgradeLeappDevelSkip, UpgradeLeappToRemove, UpgradeLeappToInstall Changes in tripleo-heat-templates 12.4.4..12.4.5 ------------------------------------------------ 8f79482b4 Do not log amphora ssh keys 4c49a20d2 Add OS version to check reboot happened b303b5091 Support cinder image conversion on an NFS share ba393720b Make default of NeutronDefaultAvailabilityZones empty array 6a3ebac50 Neutron: Use the pids subsystem to look up container id bef9856ab Add support for keystone_authtoken/memcache_use_advanced_pool a10dee72c Enforce internal api for token verification 8e412bd6c Add TLS support to services using memcached cc89c48df Add non-tls listener to Memcached de54e5ab6 Remove NovaVncProxyNetwork from ServiceNetMap b43962a0d Enable DPDK OVS PMD Auto Load Balance 4f1f2b730 Make memcache also listen to localhost 61b8fdf7a Added the posibility of skipping the NFS ping test on the rear installation 92be03fcb Support for OVS DPDK pmd auto balance parameters. 21c696d2d Always run network config for undercloud 63bd84405 Revert "Always run network config for undercloud" 785460825 Do not run Swift rsync container in single replica mode 6d304d61b Limit collectds memory usage d63e66567 Fix NetworkDeploymentActionValue format 67a08dee5 Remove usage of RetryFilter 50ed57fd0 Add option for enabling rsyslog reopenOnTruncate 819870702 Remove heat::heat_keystone_clients_url definition 4efcf1862 Always run network config for undercloud 58e691375 [victoria/ussuri/train] Change nbd, vnc and qemu default cacert file 98ba67989 Remove no longer used NovaNfsEnabled parameter and condtion 7815009e4 Make UpgradeLeappDevelSkip per-role 76c2e05db HA minor update: fix bad pcs invocation a56ab848c Fix broken restart of ovndb_server during minor update 1a81309da Bump ovs and ovn versions to 2.15 for FFWD. ab2f7cf5c Fix cinder's cephx keyring file permissions e580b849e set ganesha idmap.conf file path and overrides 90e0ede26 Update rhsm repo examples for RHEL8 deployments 73837b8b0 Set vlan-limit value depending on vlan_transparent setting 9fda7f090 Fix typo in ceilometer-write-qdr environment file 4abbadb46 Add environment for external network VIP f43f11f7d HA: inject public certificates without blocking container 866cc9bcb Create post-deploy.conf on update/upgrade for octavia Diffstat (except docs and test files) ------------------------------------- ci/environments/scenario001-standalone.yaml | 1 + .../pacemaker_restart_bundle.sh | 2 +- deployed-server/deployed-server.yaml | 2 + deployment/aodh/aodh-base.yaml | 7 ++ .../backup-and-restore/rear-baremetal-ansible.yaml | 7 ++ .../barbican/barbican-api-container-puppet.yaml | 7 ++ .../ceilometer-base-container-puppet.yaml | 13 ++ deployment/ceph-ansible/ceph-nfs.yaml | 9 ++ deployment/cinder/cinder-api-container-puppet.yaml | 7 ++ .../cinder/cinder-common-container-puppet.yaml | 132 ++++++++++++++++++--- .../cinder/cinder-volume-container-puppet.yaml | 3 +- deployment/deprecated/sahara/sahara-base.yaml | 1 + .../designate/designate-api-container-puppet.yaml | 7 ++ deployment/glance/glance-api-container-puppet.yaml | 7 ++ .../gnocchi/gnocchi-api-container-puppet.yaml | 7 ++ deployment/haproxy/haproxy-public-tls-inject.yaml | 6 +- deployment/heat/heat-base-puppet.yaml | 32 +++-- deployment/ironic/ironic-api-container-puppet.yaml | 7 ++ .../ironic/ironic-inspector-container-puppet.yaml | 1 + deployment/keystone/keystone-container-puppet.yaml | 28 ++++- deployment/logging/rsyslog-container-puppet.yaml | 10 +- deployment/manila/manila-api-container-puppet.yaml | 7 ++ .../manila/manila-share-container-puppet.yaml | 1 + .../memcached/memcached-container-puppet.yaml | 111 ++++++++++++++--- deployment/metrics/collectd-container-puppet.yaml | 1 + deployment/mistral/mistral-base.yaml | 7 ++ deployment/neutron/kill-script | 2 +- .../neutron/neutron-api-container-puppet.yaml | 11 +- deployment/nova/nova-api-container-puppet.yaml | 7 ++ deployment/nova/nova-base-puppet.yaml | 28 +++-- deployment/nova/nova-compute-container-puppet.yaml | 8 +- deployment/nova/nova-ironic-container-puppet.yaml | 12 -- deployment/nova/nova-libvirt-container-puppet.yaml | 25 ++-- .../nova/nova-metadata-container-puppet.yaml | 7 ++ .../nova-migration-target-container-puppet.yaml | 14 --- .../nova/nova-vnc-proxy-container-puppet.yaml | 6 +- deployment/nova/novajoin-container-puppet.yaml | 7 ++ .../octavia/octavia-api-container-puppet.yaml | 102 +++++++++------- deployment/octavia/octavia-base.yaml | 17 +++ .../octavia/octavia-deployment-config.j2.yaml | 2 + .../octavia-health-manager-container-puppet.yaml | 3 +- .../octavia-housekeeping-container-puppet.yaml | 3 +- .../octavia/octavia-worker-container-puppet.yaml | 3 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 56 +++++++++ .../ovn/ovn-controller-container-puppet.yaml | 12 ++ deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 2 +- .../placement/placement-api-container-puppet.yaml | 7 ++ deployment/swift/swift-proxy-container-puppet.yaml | 10 ++ .../swift/swift-storage-container-puppet.yaml | 51 ++++---- .../tripleo-packages-baremetal-puppet.yaml | 19 ++- deployment/undercloud/undercloud-upgrade.yaml | 2 + deployment/zaqar/zaqar-container-puppet.yaml | 7 ++ environments/cavium-liquidio.yaml | 2 +- environments/external-network-vip.yaml | 5 + environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/manila-cephfsganesha-config.yaml | 4 + environments/metrics/ceilometer-write-qdr.yaml | 2 +- environments/ovs-hw-offload.yaml | 2 +- environments/rhsm.yaml | 35 +++--- environments/services-baremetal/neutron-sriov.yaml | 2 +- environments/services/neutron-mlnx-agent.yaml | 2 +- environments/services/neutron-ovn-sriov.yaml | 2 +- environments/services/neutron-sriov.yaml | 2 +- environments/ssl/enable-memcached-tls.yaml | 10 ++ environments/undercloud.yaml | 3 +- network/service_net_map.j2.yaml | 7 +- overcloud.j2.yaml | 8 +- puppet/role.role.j2.yaml | 2 + ...cinder-nfs-conversion-dir-ba9b8dce515808ce.yaml | 8 ++ ...emcache_use_advanced_pool-41ca18221e60c05a.yaml | 7 ++ ...a_libvirt_default_ca_cert-d1a7acaa5cbc9293.yaml | 13 ++ .../ovs-dpdk-pmd-params-55df11e67acb6736.yaml | 7 ++ .../notes/ovs_dpdk_pmd-74f4cfa0ef280cc0.yaml | 5 + .../upgradeleapp-per-role-ad2e84e317ec1291.yaml | 6 + 74 files changed, 773 insertions(+), 209 deletions(-)