We are tickled pink to announce the release of: puppet-nova 20.2.0: Puppet module for OpenStack Nova This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 20.2.0 ^^^^^^ New Features ************ * Added "enable_qemu_monitor_announce_self" paramter to "nova::workarounds" to configure the configuration option with the same name. * Add options to configure pymemcache's HashClient retrying mechanisms (dogpile.cache) backend. * Add cache client retry options for the pymemcache (dogpile.cache) backend. * Add socket keepalive options for the pymemcache (dogpile.cache) backend. * The following parameter and class have been added, to support usage of the service token feature with the Barbican key manager. * The "nova::key_manager::barbican::send_service_user_token" parameter * The "nova::key_manager::barbican::service_user" class * Now this module supports CentOS 9 and Red Hat Enterprise Linux 9. * The following parameters were removed. Use the "nova::glance" class instead. * "nova::compute::verify_glance_signatures" * "nova::glance_endpoint_override" * "nova::glance_endpoint_override" * "nova::glance_num_retries" * The new "nova::keystone" class has been added. This class manages the parameters in the "[keystone]" section. * The "nova_flavor" resource now supports the "project_name" property. This property should be used instead of the "project" property when project name is used instead of project id. * The "nova::key_manager::barbican::service_user" class now supports the "system_scope" parameter. * The "nova::keystone::auth" class now supports the following new parameters to define system-scoped roles. * "system_scope" * "system_roles" * The "system_scope" parameter has been added to the following classes. * "nova::keystone::authtoken" * "nova::keystone::service_user" * The new "system_scope" parameter has been added to the "nova::keystone" class. * The new "system_scope" parameter has been added to the "nova::network::neutron" class. * The "system_scope" parameter has been added to the "nova::metadata::novajoin::authtoken" class. * The "nova::metadata::novajoin::auth" class now supports customizing roles assigned to the novajoin service user. * The "nova::metadata::novajoinkeystone::auth" class now supports defining assignmet of system-scoped roles to the novajoin service user. * The new "sysem_scope" parameter has been added to the "nova::placement" class. * Added parameter "wait_for_vif_plugged_event_during_hard_reboot" to "nova::workarounds" to configure the config option with the same name. Upgrade Notes ************* * The following deprecated parameters of the "nova::metadata::novajoin::api" class have been removed. * "service_password" * "service_user" * "user_domain_id" * Now puppet-nova requires libvirt 5.6 or later. * The "nova::amqp_allow_insecure_clients" parameter has been removed. * The "nova::compute::allow_resize_to_same_host" parameter has been removed. Use the same parameter of the "nova::api" class. * The "nova::compute::pci_passthrough" parameter has been removed. * The following parameters of the "nova" class have been removed. * "database_min_pool_size" * "database_connection" * "slave_connection" * "api_database_connection" * "api_slave_connection" * "database_idle_timeout" * "database_max_overflow" * "database_max_pool_size" * "database_max_retries" * "database_retry_interval" * The "database_min_pool_size" parameter of the "nova::db" class has been removed. Deprecation Notes ***************** * The "nova::cinder::region_name" parameter has been deprecated and it has no effect. Use the "nova::cinder::os_region_name" which is actually used by nova. * The "nova::cross_az_attach" parameter has been deprecated. Use the "nova::cinder::cross_az_attach" parmaeter instead. Changes in puppet-nova 20.1.0..20.2.0 ------------------------------------- 02b85ba3 Prepare Yoga M3 29d37409 Add CentOS/RHEL 9 to supported operating systems 77138476 nova_flavor: Add the new project_name property 0f5904a0 Do not assert TCP/80 593de425 Add HashClient retry options for the dogpile.cache backend 81e4ee07 Add cache client retry options for the pymemcache backend 20fec074 CentOS 9: Disable unit tests dependent on puppet-postgresql 6c3a8115 Drop support for old libvirt package f40bf357 nova_flavor: Refactor property setter 599703b5 Remove unused str2hash c89593bb Remove redundant usage of pick function 0ce7d9fe Ensure auth_endpoint is cleared by reset 60acc82c Fix missing update of property_hash 84e565b1 Add wait_for_vif_plugged_event_during_hard_reboot ed1b0dbf nova_flavor: Strip '' from project id value aa2db561 Do not define service resource when service management is disabled 70b843b5 TripleO jobs: Replace CentOS 8 jobs by CentOS 9 jobs c3470d16 Remove deprecated amqp_allow_insecure_clients 0378d590 Fix typo causing a warning message d47a0d7b Simplify definition to ensure keystone resource creation f626e649 Add support for [cinder] debug 3c376bd7 Migrate cross_az_attach from nova to nova::cinder e2889d1b Deprecate support for unused [cinder] region_name 99830f8a CentOS: Ensure /etc/sysconfig/libvirtd(-guests) exists b052a4c1 Fix error in 140chars lint check ebce6ffd Remove deprecated pci_passthrough from nova::compute 396515f6 Remove deprecated parameters related to Glance 8e2f1006 Remove deprecated nova::compute::allow_resize_to_same_host 47e61bd3 Fix duplicate (Optional) in parameter description 54c63dc0 Add socket keepalive options for the pymemcache backend 47a56f16 Remove deprecated parameters of nova::metadata::novajoin::api e082614f novajoin: Accept system scope credentials for Keystone API request f6553128 barbican_service_user: Accept system scope credential f4271788 Accept system scope credential for Neutron API request 228e3aa7 Debian/Ubuntu: Use ceph-common instead of ceph f9726781 Clean up deprecated database parameters 053c6e77 Avoid testing details of nova::db multiple times d62be4a3 Avoid testing details of oslo::db 3b47f970 Remove inefficient usage of autorequire 4a77e0a5 Add enable_qemu_monitor_announce_self workaround 63966683 Accept system scope credential for Keystone API request ab3a58f0 Add support for [keystone] parameters 65eea0d9 cinder: Remove credential parameters if password is not set 3453611d key_manager: Add service user options for Barbican key manager 86b21807 Remove usage of custom os_package_type fact cafc1868 Accept system scope credential for Placement API request af93169d Accept system scope credentials for Keystone API request Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- lib/puppet/provider/nova.rb | 11 +- lib/puppet/provider/nova_aggregate/openstack.rb | 2 + lib/puppet/provider/nova_cell_v2/nova_manage.rb | 20 +-- lib/puppet/provider/nova_flavor/openstack.rb | 124 +++++++++++------- lib/puppet/provider/nova_service/openstack.rb | 8 +- lib/puppet/type/nova_aggregate.rb | 4 - lib/puppet/type/nova_flavor.rb | 30 ++++- manifests/cache.pp | 75 ++++++++++- manifests/cinder.pp | 92 +++++++++---- manifests/compute.pp | 42 +----- manifests/compute/libvirt/qemu.pp | 20 +-- manifests/compute/libvirt/version.pp | 14 +- manifests/compute/libvirt_guests.pp | 9 ++ manifests/compute/pci.pp | 12 +- manifests/compute/rbd.pp | 2 +- manifests/cron/archive_deleted_rows.pp | 5 +- manifests/cron/purge_shadow_tables.pp | 5 +- manifests/db.pp | 46 ++----- manifests/generic_service.pp | 14 +- manifests/glance.pp | 10 +- manifests/init.pp | 145 ++------------------- manifests/key_manager/barbican.pp | 34 +++-- manifests/key_manager/barbican/service_user.pp | 100 ++++++++++++++ manifests/keystone.pp | 109 ++++++++++++++++ manifests/keystone/auth.pp | 16 ++- manifests/keystone/authtoken.pp | 6 + manifests/keystone/service_user.pp | 6 + manifests/metadata/novajoin/api.pp | 108 +++++---------- manifests/metadata/novajoin/auth.pp | 23 +++- manifests/metadata/novajoin/authtoken.pp | 6 + manifests/migration/libvirt.pp | 101 +++++++------- manifests/network/neutron.pp | 18 ++- manifests/params.pp | 2 +- manifests/placement.pp | 36 +++-- manifests/workarounds.pp | 27 +++- manifests/wsgi/uwsgi_api.pp | 2 +- manifests/wsgi/uwsgi_api_metadata.pp | 2 +- metadata.json | 16 ++- ...emu_monitor_announce_self-9e307efdb0061fce.yaml | 6 + ..._hashclient_retry_options-d0ce282343bb7fe9.yaml | 5 + .../add_cache_retry_options-0c96612c73d576cf.yaml | 4 + .../add_keepalive_options-3802510b6d4461e1.yaml | 4 + .../barbican_service_user-887eb51cb8e9efce.yaml | 8 ++ .../notes/centos-9-support-2402954dc9a017e3.yaml | 4 + .../notes/cinder-region_name-5385736bf050dde3.yaml | 6 + .../clean-up-novaoin-api-494d685dde2fc108.yaml | 9 ++ ...cross_az_attach-in-cinder-2f13b4fce6a11f4d.yaml | 5 + .../glance-opts-cleanup-47de15f1bcd3a1b3.yaml | 10 ++ .../keystone-parameters-2222c1f0038d641b.yaml | 5 + ...migration-libvirt-cleanup-6cf91ed5dd736420.yaml | 4 + .../nova_flavor-project_name-fbab75b57ad9d4b3.yaml | 6 + ...qp_allow_insecure_clients-37462e39cb6e73a5.yaml | 4 + ...allow_resize_to_same_host-b5c77e6a44aae77f.yaml | 5 + ...e-compute-pci_passthrough-967e7f041e433151.yaml | 4 + .../remove-database-params-ce46e46c43f7beca.yaml | 19 +++ ...pe-barbincan_service_user-855ece0e25484297.yaml | 5 + .../system_scope-keystone-443335bece968e41.yaml | 14 ++ .../system_scope-keystone-ed62f90dc93ea10d.yaml | 5 + .../system_scope-neutron-6d5421393cbf7759.yaml | 5 + ...m_scope-novajoin-keystone-5be4c7f5240e74d9.yaml | 13 ++ .../system_scope-placement-e92481eb296c9e57.yaml | 5 + ..._event_during_hard_reboot-092dada6f6a1e632.yaml | 5 + spec/acceptance/nova_wsgi_apache_spec.rb | 34 ++--- spec/classes/nova_api_spec.rb | 42 +----- spec/classes/nova_cache_spec.rb | 30 +++++ spec/classes/nova_cinder_spec.rb | 53 ++++++-- spec/classes/nova_compute_libvirt_guests_spec.rb | 29 ++++- spec/classes/nova_compute_libvirt_qemu_spec.rb | 122 +++-------------- spec/classes/nova_compute_pci_spec.rb | 2 +- spec/classes/nova_compute_rbd_spec.rb | 5 +- spec/classes/nova_compute_spec.rb | 59 +-------- spec/classes/nova_conductor_spec.rb | 31 +---- spec/classes/nova_db_postgresql_api_spec.rb | 5 +- spec/classes/nova_db_postgresql_spec.rb | 5 +- spec/classes/nova_init_spec.rb | 12 -- .../nova_key_manager_barbican_service_user_spec.rb | 82 ++++++++++++ spec/classes/nova_key_manager_barbican_spec.rb | 45 ++++--- spec/classes/nova_keystone_auth_spec.rb | 6 + spec/classes/nova_keystone_authtoken_spec.rb | 3 + spec/classes/nova_keystone_service_user_spec.rb | 3 + spec/classes/nova_keystone_spec.rb | 93 +++++++++++++ spec/classes/nova_metadata_novajoin_api_spec.rb | 36 +---- spec/classes/nova_metadata_novajoin_auth_spec.rb | 9 ++ .../nova_metadata_novajoin_authtoken_spec.rb | 3 + spec/classes/nova_metadata_spec.rb | 39 ------ spec/classes/nova_migration_libvirt_spec.rb | 145 ++++++++------------- spec/classes/nova_network_neutron_spec.rb | 16 +++ spec/classes/nova_placement_spec.rb | 16 +++ spec/classes/nova_scheduler_spec.rb | 31 +---- spec/classes/nova_serial_proxy_spec.rb | 4 +- spec/classes/nova_spicehtml5proxy_spec.rb | 4 +- spec/classes/nova_vnc_proxy_spec.rb | 4 +- spec/classes/nova_workarounds_spec.rb | 14 +- .../unit/provider/nova_aggregate/openstack_spec.rb | 3 +- spec/unit/provider/nova_flavor/openstack_spec.rb | 107 ++++++++++++++- spec/unit/provider/nova_spec.rb | 27 ---- 97 files changed, 1495 insertions(+), 1088 deletions(-)