We jubilantly announce the release of: tripleo-heat-templates 10.6.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 10.6.0 ^^^^^^ New Features ************ * The parameter {{role.name}}RemovalPoliciesMode can be set to 'update' to reset the existing blacklisted nodes in heat. This will help re-use the node indexes when required. * Allows a deployer to specify the IdM domain with --domain on the ipa-client-install invocation by providing the IdMDomain parameter. * Allows a deployer to direct the ipa-client-install to skip NTP setup by specifying the IdMNoNtpSetup parameter. This is useful if the ipa-client-install setup clobbers the NTP setup by puppet. * Add GlanceImageCacheDir parameter to set base directory location that the Image Cache uses. Add GlanceImageCacheMaxSize parameter to set the upper limit on cache size, in bytes, after which the cache- pruner cleans up the image cache. Add GlanceImageCacheStallTime parameter to set the amount of time to let an image remain in the cache without being accessed. * New parameters, NovaCronDBArchivedMaxDelay and CinderCronDbPurgeMaxDelay, are introduced to configure max_delay parameter to calculate randomized sleep time before db archive/purge. This avoids db collisions when performing db archive/purge operations on multiple controller nodes. * Introduce new tag into roles that will create external_bridge (usable only for multiple-nics). * The passphrase for config option 'server_certs_key_passphrase', that was recently added to Octavia, and will now be auto-generated by TripleO by adding OctaviaServerCertsKeyPassphrase to the list of parameters TripleO configures in Octavia. * To allow PAM to create home directory for user who do not have one, ipa-client-install need an option. This change allow to enable it. * Add parameter *NovaLiveMigrationWaitForVIFPlug* which allows to set *live_migration_wait_for_vif_plug* which in turn allows whether to wait for "network-vif-plugged" events before starting guest transfer. The default value for the parameter is set to true and it is set to false when *ovn* is in *NeutronMechanismDrivers* list. * Configure Neutron API for Nova Placement When the Neutron Routed Provider Networks feature is used in the overcloud, the Networking service will use those credentials to communicate with the Compute scheduler's placement API. * The parameters "NovaNfsEnabled", "NovaNfsShare", "NovaNfsOptions", "NovaNfsVersion" are changed to be role specific. This requires the usage of host aggregates as otherwise it will break live migration of instances as we can not do this with different storage backends. * Add role parameter NovaLibvirtNumPciePorts which sets *libvirt/num_pcie_ports* to specify the number of PCIe ports an instance will get. Libvirt allows a custom number of PCIe ports (pcie-root-port controllers) a target instance will get. Some will be used by default, rest will be available for hotplug use. When using the 'q35' machine type, by default, it allows only a *single* PCIe device to be hotplugged. And Nova currently sets 'num_pcie_ports' to "0" (which means, it defaults to libvirt's "1"), which is not sufficient for hotplug use. Default for NovaLibvirtNumPciePorts is 16. * Added OVN-DPDK support * Introduced two new numeric parameters OvsRevalidatorCores and OvsHandlerCores to set values of n-revalidator-threads and n -handler-threads on openvswitch. Upgrade Notes ************* * During upgrade user will need to create custom roles_data.yaml and remove external_bridge from tags to be sure that bridge will be not added. * The new role variable update_serial is introduced allowing parallel update execution. On Controller role this variable defaults to 1 as pacemaker has to be taken down and up in rolling fashion. The default value is 25 as that is default value for parallel ansible execution used by tripleo. Deprecation Notes ***************** * The only OVN Tunnel Encap Type that we are supporting in OVN is Geneve and this is set by default in ovn puppet. So there are no need to set it in TripleO Bug Fixes ********* * Fixed launchpad bug 1831122 (https://bugs.launchpad.net/tripleo/+bug/1831122) with the NetApp Backend. * When changeing the "name_lower" of the "InternalApi" network and using the "service_net_map_replace" option in network data. The subnet referenced in "VipSubnetMapDefaults" did not take in account the custom lowercase name for the network, causing deployment error. See bug: 1832461 (https://bugs.launchpad.net/tripleo/+bug/1832461). * Fixes an issue where deployment would fail if a non-default "name_lower" is used in network data for one of the networks: "External", "InternalApi" or "StorageMgmt". (See bug: 1830852 (https://bugs.launchpad.net/tripleo/+bug/1830852).) * Fixed service auth URL in Octavia to use the Keystone v3 internal endpoint. * [1] switched to run nova-manage discovery as non root user. In case of updates there can be already a nove-manage log owned by root from previous runs. This change make sure we change the owner of nova- manage log to nova:nova on overcloud deploy runs on the computes [1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova- compute-container-puppet.yaml * https://review.opendev.org/#/c/662109/ removed the bind mount from /run inside the nova_migration_target container. But the nova- migration-wrapper inside the container needs access to the libvirt socket - https://github.com/rdo-packages/nova-distgit/blob/rpm- master/nova-migration-wrapper#L31 . This adds the bind mount of /run/libvirt to the nova_migration_target container to fix live migration issues. * With 405366fa32583e88c34417e5f46fa574ed8f4e98 the parameters RpcPort, RpcUserName, RpcPassword and RpcUseSSL got deprecated and nova::rabbitmq_port removed. As a result the healtcheck get called with null parameter and fail. We now get the global_config_settings from RabbitMQService and use oslo_messaging_rpc_port for the healthcheck. * Change-Id: I1a159a7c2ac286373df2b7c566426b37b7734961 moved the dicovery to run on a single compute host to not race on simultanious nova-manage commands. This change make sure we run the discover on every deploy run which is required for scaling up events. Other Notes *********** * The EndpointMap parameter is now required by post_deploy templates. So if an user overrides OS::TripleO::NodeExtraConfigPost with another template, the template would need to have EndpointMap parameter to work fine. Changes in tripleo-heat-templates 10.5.0..10.6.0 ------------------------------------------------ 23d2bd9a7 Add missing tag 'role_specific' for NovaPciPassthrough parameter 9a1491a42 ceilometer_agent_notification: disable-panko.yaml 93ead16ca Avoid checking rc if we're in dry-run mode 534a23576 Setup cluster definition based on the ansible limit option. 1425671a3 Add /run/libvirt to nova_migration_target container f736d4471 Make comparisons case insensitive 80c40e03d Fix Ceph RGW listener port configuration 6f2877d98 Replace /var/log/containers/swift symlink with directories 1eaabaf36 Fix ipaclient script dcd135f99 Allow ssh from all ctlplane network subnets 273f9a32a Configure insecure registries before Pacemaker-managed image pulls 1cedab103 Change package installs for Stein and OS upgrade aaf25b8de Do not assume the CNI config directory exists 2accf4d25 Refactor ovn_dbs upgrade_tasks. 0af8eb1c6 Remove baremetal to containerized pacemaker upgrade_tasks. 34450cc63 Remove OpenStack packages right before upgrading the operating system 7f393a3d4 Add operating system upgrade preparation via Leapp 6c60a77c1 Reintroduce upgrade tasks for stopping pacemaker cluster 8d6b51b77 Stop all services before upgrading node's OS. 1f6a24f6a Don't create symlink for swift container logs 086238e91 Enable Ceph RGW 'account in url' option 04320fe1b Remove os-collect-config related poperties and attributes 99039a819 Override ovn::controller::hostname to use hiera:fqdn_canonical aa280e94c Remove duplicate mount destinations in containers 1d2d1b29a Revert "ceilometer_agent_notification: disable-panko.yaml" 5e70fa869 Disable iscsi.service to avoid iscsid on host from getting started 6b5defe6d Add new parameter NovaLiveMigrationWaitForVIFPlug eff837623 Fix bare reference of cinder_enable_iscsi_backend 126ab3981 Put on hold the Ansible package update until is fixed 459b873c2 Fix network rename + service_net_map_replace 247e8e86f Fix NovaNfs role parameters d5d227b54 Explicitly set ansible_python_interpreter in external upgrade playbook 0f5bc4d1b Set cache_backend for token caching d76839874 Remove scenario008 jobs c433f9258 Remove incorrect use of PlacementApi in ControllerStorageNfs 09465e426 Handle openvswitch meta-package on undercloud upgrade. 46741fc85 Fix RedisVirtualIP when overrdiing InternalApi name_lower 0339c45d9 Force ansible serial to 1 for the Controller 1d02e964d Fix log owner on computes during overcloud deploy runs d52e34b8c Re-enable manila dashboard e5e7fea69 Add networks to Standalone role 3ba431d30 Make NovaResumeGuestsStateOnHostBoot podman compatible 1797d56cc OVS Revalidator and handler threads e6c610ac6 Fix correct network for nova-vnc c2ceefcd5 Add panko_api_cron container b4779ec17 Add {{role.name}}RemovalPoliciesMode parameter aa2be6cbe Add ComputeHCIOvsDpdk role 242efd05c Fix disappearing Puppet logs b12c8035d Add more settings for glance image cache fb659ead8 DVR neutron template should enable ARP responder 96444da0e Clean metrics related environments c6294bd8a Add creating br-ex for compute node in ovn 13b693676 Add healthcheck to ironic_pxe_http b9992d965 Add new role parameter NovaLibvirtNumPciePorts bc9397f32 Configure Neutron API for Nova Placement... b74dad7a8 Fix ssl.yaml generating GaneshaInternal in the endpoint map 5b1ba9846 Do not bind /run on host to nova_migration_target a199e335b Set TenantNetPhysnetMtu to 0 to allow different MTUs fd5619871 Ensure openstack clients are installed 517175cce Fix service auth URL in Octavia 7d18d96a4 Add DPDK support for OVN c1865bafb Fix custom network.name_lower in krb-service-principals 152e46575 Fix netapp deployment manifest 8b3fceb0b Fix haproxy stats network binding 705fdb625 ceph-base: Update ceph-ansible default playbook d0eb1d939 Remove unnecessary openldap-clients package from overcloud controllers 5d1aa80d0 Adapt sensu on refactor 37ec3710a Configure server_certs_key_passphrase for Octavia 1f79242a0 Correct ceph configuration for scenario 10 environments 4514ed6c3 Re-add amphora flavor management settings 108b8469f Initialize ip(6)tables "raw" table ece7858d7 Fix manila-scheduler-container-puppet.yaml typo 9f3bb796f Add domain and no-ntp options to ipaclient e1f51a5f5 Add CephAnsibleEnvironmentVariables to nodes-uuid call 3fddb7711 Fix run-os-net-config.sh to use ping6 for IPv6 hostnames 6b4f03f9e Remove the iptables rules set via service_config_settings d033c1a3e Add ability to specify dns search domains 952511f65 Fix IPA client when doing brownfield deployment of internal TLS aa6dc4cbc Add mkhomedir option to ipa-client-install 5c014c674 Set force_config_drive only when OVNMetadata is disabled ed5f481aa standalone/undercloud - post: use EndpointMap to fetch Keystone URL 93f31d38b Enable serial execution for ansible host b23fd9f70 Try a timesync as part of first boot 3aa22c917 Add cinder credentials to nova conf 1616da335 Set arp_notify to match ndisc_notify 0c31f04f4 Activate health checks for cron containers 53fbc70e7 Fix NovaNfs role parameter precedence in conditions 999626d85 Ensure we aren't running some dry-run also for Pacemaker case 0317a5b7d Modified the way fluentd configures rsyslog 2b4268e7d Re-add undercloud-aodh.yaml 038d887d8 Fix haproxy firewall rules bfc0add03 Remove OVNTunnelEncapType 9118472dc Use RpcPort for container healthchecks 3978faeaa Adapt check-docker-health for podman 039ce1c3c Gracefully handle empty config json data ba1e21743 Fix the step_config input in the OvS-DPDK template 93155b544 Allow multiple same options in nova.conf 835b862c9 Enable zaqar healthchecks 5715c98b5 Copy keys for tripleo-admin user b15532ae0 Enable ndisc_notify sysctl setting to notify of MAC changes eb898e234 Use timesync service 0152ce48b Clean up leftover mount point after docker stop. 480100564 Enable Podman Service For Lacking Roles 9096b4941 Use oslo_messaging_rpc_port for nova rpc healthchecks f5ef977e1 Revert "mistral: configure heartbeat parameters to avoid action timeout" 125cecfcb Fix cinder-backup deployment templates 6e6d23838 Avoid issues with non-existing directories 28a0d3c53 Set debug level of nova container_config_scripts only when enabled 2ee3e849e Adjust deployed-server install package list for RHEL8 4e36f4918 Change setype for non container /var/log/nova-placement 2093cca40 Change setype for non container /var/log/<service> directories 44f39920b Remove ceph-ansible fetch directory as privileged user e6c0e71d7 Update UPPER_CONSTRAINTS_FILE for stable/stein 4d43cffd3 Update .gitreview for stable/stein 8437f6c9c ensure /var/run/redis is present upon reboot 1762e9b63 ceilometer_agent_notification: disable-panko.yaml 3a4a77356 Add parameter to configure maxdelay in db purge/archive job cc2517688 Remove ceph-ansible fetch directory after it is saved 517033961 Ensure there is no redis on host 2c0785069 Run nova_cell_v2_discover_hosts.py on every deploy run 4a6ba2bba Run nova-manage as root to prevent wrong nova-manage.log permissions 04a24ed7a Drop puppet/services/metrics/collectd.yaml 7fd94ab52 MetricsQdr: Build sslProfiles without internal TLS a32d70319 fix storage.yaml to write environments/storage/nova-nfs.yaml 0cd185954 Allow NovaNfs parameters to be role specific 63a7d6d92 heat: use oslo_messaging_rpc_port for nova rpc healthchecks 6dbd0d3fe Add ANSIBLE_GATHER_TIMEOUT=60 to ceph-ansible run d5234ca15 Move Manila backends into deployment 8b7590dd0 Override ceph_mon to v2 protocol 8fd58b4b8 Avoid concurrent nova cell_v2 discovery instances 847a2057c Use oslo_messaging_rpc_port for nova rpc healthchecks d4218d1f3 Evaluating ansible_check_mode as a boolean c630f13fd OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- ci/common/vbmc_setup.yaml | 5 + ci/environments/multinode-3nodes.yaml | 4 +- ci/environments/multinode-containers.yaml | 2 +- .../nic-configs/compute-dvr.yaml | 5 + .../multiple-nics-ipv6/nic-configs/compute.yaml | 5 + .../multiple-nics-ipv6/nic-configs/controller.yaml | 5 + .../multiple-nics/nic-configs/compute-dvr.yaml | 5 + .../network/multiple-nics/nic-configs/compute.yaml | 5 + .../multiple-nics/nic-configs/controller.yaml | 5 + .../network/public-bond/nic-configs/compute.yaml | 5 + .../public-bond/nic-configs/controller.yaml | 5 + .../scenario000-multinode-containers.yaml | 2 +- .../scenario001-multinode-containers.yaml | 2 +- ci/environments/scenario001-standalone.yaml | 1 + .../scenario002-multinode-containers.yaml | 2 +- .../scenario003-multinode-containers.yaml | 2 +- .../scenario004-multinode-containers.yaml | 4 +- ci/environments/scenario004-standalone.yaml | 3 +- .../scenario006-multinode-containers.yaml | 2 +- ci/environments/scenario006-multinode.yaml | 4 +- .../scenario007-multinode-containers.yaml | 2 +- .../scenario008-multinode-containers.yaml | 2 +- ci/environments/scenario009-multinode.yaml | 2 +- .../scenario010-multinode-containers.yaml | 3 +- ci/environments/scenario010-standalone.yaml | 2 + .../scenario012-multinode-containers.yaml | 2 +- common/container-puppet.py | 12 +- common/deploy-steps-tasks.yaml | 60 +-- common/deploy-steps.j2 | 31 +- .../nova_cell_v2_discover_hosts.py | 62 +++ .../nova_statedir_ownership.py | 9 +- ...er_host.py => nova_wait_for_compute_service.py} | 63 +-- .../nova_wait_for_placement_service.py | 29 +- deployed-server/deployed-server-bootstrap-rhel.sh | 4 +- deployed-server/deployed-server-roles-data.yaml | 10 +- .../aodh/aodh-listener-container-puppet.yaml | 10 +- .../aodh/aodh-notifier-container-puppet.yaml | 10 +- ...ometer-agent-notification-container-puppet.yaml | 18 +- deployment/ceph-ansible/ceph-base.yaml | 18 +- deployment/ceph-ansible/ceph-rgw.yaml | 2 +- deployment/cinder/cinder-api-container-puppet.yaml | 4 +- .../cinder/cinder-backup-container-puppet.yaml | 19 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 45 +-- deployment/cinder/cinder-base.yaml | 8 +- .../cinder/cinder-common-container-puppet.yaml | 2 +- .../cinder/cinder-scheduler-container-puppet.yaml | 10 +- .../cinder/cinder-volume-container-puppet.yaml | 10 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 49 --- deployment/containers-common.yaml | 16 +- deployment/database/mysql-pacemaker-puppet.yaml | 110 +++--- deployment/database/redis-container-puppet.yaml | 18 +- deployment/database/redis-pacemaker-puppet.yaml | 95 +++-- .../logging/fluentd-container-puppet.yaml | 27 +- .../monitoring/sensu-client-container-puppet.yaml | 42 +- .../panko/panko-api-container-puppet.yaml | 28 ++ deployment/glance/glance-api-container-puppet.yaml | 23 ++ deployment/haproxy/haproxy-container-puppet.yaml | 13 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 99 ++--- deployment/heat/heat-api-container-puppet.yaml | 2 + deployment/heat/heat-engine-container-puppet.yaml | 10 +- deployment/horizon/horizon-container-puppet.yaml | 8 +- .../ironic/ironic-conductor-container-puppet.yaml | 10 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 3 +- deployment/iscsid/iscsid-container-puppet.yaml | 9 + deployment/kernel/kernel-baremetal-puppet.yaml | 4 + deployment/keystone/keystone-container-puppet.yaml | 2 + deployment/logging/files/barbican-api.yaml | 2 +- deployment/logging/files/heat-api-cfn.yaml | 2 +- deployment/logging/files/heat-api.yaml | 2 +- deployment/logging/files/heat-engine.yaml | 2 +- deployment/logging/files/keystone.yaml | 2 +- deployment/logging/files/neutron-api.yaml | 2 +- deployment/logging/files/neutron-common.yaml | 2 +- deployment/logging/files/nova-api.yaml | 2 +- deployment/logging/files/nova-common.yaml | 2 +- deployment/logging/files/nova-metadata.yaml | 2 +- deployment/logging/files/nova-placement.yaml | 2 +- deployment/logging/files/opendaylight-api.yaml | 2 +- deployment/logging/files/panko-api.yaml | 2 +- .../logrotate-crond-container-puppet.yaml | 2 + .../manila}/manila-backend-cephfs.yaml | 0 .../manila}/manila-backend-isilon.yaml | 0 .../manila}/manila-backend-netapp.yaml | 0 .../manila}/manila-backend-unity.yaml | 0 .../manila}/manila-backend-vmax.yaml | 0 .../manila}/manila-backend-vnx.yaml | 0 .../manila/manila-share-pacemaker-puppet.yaml | 43 -- deployment/metrics/collectd-container-puppet.yaml | 4 +- deployment/metrics/qdr-container-puppet.yaml | 2 +- deployment/mistral/mistral-base.yaml | 35 -- .../mistral/mistral-executor-container-puppet.yaml | 1 + .../neutron/neutron-api-container-puppet.yaml | 10 + .../neutron/neutron-metadata-container-puppet.yaml | 10 +- .../neutron-ovn-dpdk-config-container-puppet.yaml | 91 +++++ .../neutron-ovs-agent-container-puppet.yaml | 1 - .../neutron-ovs-dpdk-agent-container-puppet.yaml | 3 +- deployment/nova/nova-api-container-puppet.yaml | 10 +- .../nova/nova-compute-common-container-puppet.yaml | 11 +- deployment/nova/nova-compute-container-puppet.yaml | 287 +++++++++++--- deployment/nova/nova-ironic-container-puppet.yaml | 35 +- deployment/nova/nova-libvirt-container-puppet.yaml | 7 +- .../nova-migration-target-container-puppet.yaml | 2 +- .../nova/nova-scheduler-container-puppet.yaml | 10 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 6 +- .../octavia/octavia-api-container-puppet.yaml | 17 +- deployment/octavia/octavia-base.yaml | 8 +- .../octavia/octavia-deployment-config.j2.yaml | 11 +- .../ovn/ovn-controller-container-puppet.yaml | 13 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 112 +++--- deployment/podman/podman-baremetal-ansible.yaml | 40 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 83 ++-- .../rabbitmq-messaging-pacemaker-puppet.yaml | 83 ++-- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 83 ++-- .../sahara/sahara-engine-container-puppet.yaml | 10 +- deployment/swift/swift-proxy-container-puppet.yaml | 22 +- .../swift/swift-storage-container-puppet.yaml | 36 +- .../tripleo-firewall-baremetal-puppet.yaml | 60 ++- .../tripleo-packages-baremetal-puppet.yaml | 99 ++++- deployment/undercloud/undercloud-upgrade.yaml | 150 ++++++- deployment/zaqar/zaqar-container-puppet.yaml | 8 + environments/lifecycle/upgrade-prepare.yaml | 5 - environments/manila-cephfsganesha-config.yaml | 2 +- environments/manila-cephfsnative-config.yaml | 2 +- environments/manila-isilon-config.yaml | 2 +- environments/manila-netapp-config.yaml | 6 +- environments/manila-unity-config.yaml | 2 +- environments/manila-vmax-config.yaml | 2 +- environments/manila-vnx-config.yaml | 2 +- environments/metrics/collect-read-rabbitmq.yaml | 15 + .../collectd-standalone.yaml} | 2 +- .../collectd-write-qdr.yaml} | 4 +- environments/neutron-ovs-dvr.yaml | 3 + environments/services-baremetal/octavia.yaml | 5 +- environments/services/neutron-ovn-dpdk.yaml | 7 + environments/services/octavia.yaml | 5 +- environments/services/undercloud-aodh.yaml | 7 + environments/ssl/tls-everywhere-endpoints-dns.yaml | 2 +- environments/storage/nova-nfs.yaml | 4 + environments/undercloud.yaml | 8 +- .../krb-service-principals/role.role.j2.yaml | 22 +- extraconfig/post_deploy/default.yaml | 5 + extraconfig/post_deploy/standalone_post.yaml | 42 +- extraconfig/post_deploy/undercloud_post.yaml | 34 +- .../pre_network/host_config_and_reboot.yaml | 2 +- extraconfig/services/ipaclient.yaml | 67 +++- firstboot/userdata_timesync.yaml | 97 +++++ net-config-bond.j2.yaml | 8 + net-config-standalone.j2.yaml | 6 + net-config-static-bridge.j2.yaml | 6 + net-config-static.j2.yaml | 6 + net-config-undercloud.j2.yaml | 6 + .../config/2-linux-bonds-vlans/role.role.j2.yaml | 6 + .../bond-with-vlans/controller-no-external.j2.yaml | 8 + .../config/bond-with-vlans/controller-v6.j2.yaml | 6 + network/config/bond-with-vlans/role.role.j2.yaml | 6 + network/config/multiple-nics/compute-dvr.j2.yaml | 6 + network/config/multiple-nics/controller-v6.j2.yaml | 6 + network/config/multiple-nics/role.role.j2.yaml | 9 +- .../controller-v6.j2.yaml | 6 + .../role.role.j2.yaml | 6 + .../controller-no-external.j2.yaml | 6 + .../config/single-nic-vlans/controller-v6.j2.yaml | 6 + network/config/single-nic-vlans/role.role.j2.yaml | 6 + network/endpoints/endpoint_data.yaml | 6 +- network/endpoints/endpoint_map.yaml | 147 +++---- network/scripts/run-os-net-config.sh | 3 +- network/service_net_map.j2.yaml | 4 +- overcloud-resource-registry-puppet.j2.yaml | 4 + overcloud.j2.yaml | 44 +-- puppet/role.role.j2.yaml | 34 +- puppet/services/metrics/collectd.yaml | 433 --------------------- puppet/services/neutron-plugin-ml2-ovn.yaml | 21 + puppet/services/openvswitch.yaml | 18 + puppet/services/pacemaker.yaml | 107 ++++- ...add-removal-policies-mode-6869362fbeed2cd2.yaml | 6 + ...n_and_no_ntp_to_ipaclient-048fdfccf0cb7835.yaml | 7 + .../add_image_cache_settings-50af5ff56a7d7f75.yaml | 10 + .../notes/bug-1823274-ca992c1055035c7b.yaml | 7 + ...31122-fix-netapp-env-file-e5aeb0c2bf417d2b.yaml | 6 + ...alApi-name-lower-override-7ea2635877b753c7.yaml | 8 + .../create-br-ex-for-compute-b967312323d45d9b.yaml | 9 + .../notes/endpointmap-8825fcd5fa5a2ba2.yaml | 7 + ...-lower-and-tls-everywhere-1f2300f9a2ba4d98.yaml | 7 + ...-service-auth-url-octavia-90f19c835cb1cc0a.yaml | 4 + ...rver_certs_key_passphrase-229a677df1b7f6e0.yaml | 6 + .../notes/ipa-mkhomedir-c126291bcbdd0111.yaml | 5 + ...gration_wait_for_vif_plug-6d16da261a138fb8.yaml | 9 + .../notes/mistral_timeout-c00344d5b3d8c4b0.yaml | 6 - .../notes/neutron-placement-6ea6de89bd30b592.yaml | 8 + ...a-nfs-parms-role-specific-527915c6e99ceb89.yaml | 7 + ...mpute_fix_log_permissions-e866f91848d647fb.yaml | 9 + ...va_libvirt_num_pcie_ports-f904bf0fb9a7b19e.yaml | 12 + ...ion_target_libvirt_socket-585fa579e5b2704d.yaml | 9 + .../nova_rpc_healthcheck-adbe5307dc04eeac.yaml | 9 + ...ell_discovery_on_each_run-11dbb6096ebbf51b.yaml | 7 + releasenotes/notes/ovn-dpdk-15e8747068682f91.yaml | 3 + .../ovn_tunnel_encap_type-04df21d622874c27.yaml | 7 + ...ator-handler-threads.yaml-f5a12d1066b042f1.yaml | 3 + .../notes/update_serial-785ff794ff88fb2e.yaml | 9 + roles/BlockStorage.yaml | 1 + roles/CellController.yaml | 4 +- roles/CephAll.yaml | 2 + roles/CephFile.yaml | 2 + roles/CephObject.yaml | 2 + roles/CephStorage.yaml | 2 + roles/Compute.yaml | 4 + roles/ComputeAlt.yaml | 1 + roles/ComputeDVR.yaml | 3 + roles/ComputeHCI.yaml | 2 + roles/ComputeHCIOvsDpdk.yaml | 65 ++++ roles/ComputeInstanceHA.yaml | 1 + roles/ComputeLiquidio.yaml | 1 + roles/ComputeOvsDpdk.yaml | 2 + roles/ComputeOvsDpdkRT.yaml | 2 + roles/ComputeOvsDpdkSriov.yaml | 5 +- roles/ComputeOvsDpdkSriovRT.yaml | 5 +- roles/ComputePPC64LE.yaml | 1 + roles/ComputeRealTime.yaml | 1 + roles/ComputeSriov.yaml | 1 + roles/ComputeSriovRT.yaml | 1 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 3 +- roles/ControllerStorageNfs.yaml | 2 + roles/Database.yaml | 1 + roles/DistributedCompute.yaml | 1 + roles/DistributedComputeHCI.yaml | 2 + roles/HciCephAll.yaml | 2 + roles/HciCephFile.yaml | 2 + roles/HciCephMon.yaml | 2 + roles/HciCephObject.yaml | 2 + roles/IronicConductor.yaml | 1 + roles/Messaging.yaml | 1 + roles/Networker.yaml | 3 + roles/Novacontrol.yaml | 1 + roles/ObjectStorage.yaml | 2 + roles/OpenShiftAllInOne.yaml | 1 + roles/OpenShiftInfra.yaml | 1 + roles/OpenShiftMaster.yaml | 1 + roles/OpenShiftWorker.yaml | 1 + roles/README.rst | 3 + roles/Standalone.yaml | 11 + roles/Telemetry.yaml | 1 + roles_data.yaml | 11 + sample-env-generator/ssl.yaml | 2 +- sample-env-generator/storage.yaml | 3 +- tools/yaml-validate.py | 6 +- tox.ini | 2 +- validation-scripts/all-nodes.sh | 10 +- zuul.d/layout.yaml | 11 - 253 files changed, 2567 insertions(+), 1626 deletions(-)