We are ecstatic to announce the release of: tripleo-heat-templates 6.0.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the ocata release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 6.0.0 ^^^^^ Support for Manila/CephFS with TripleO managed Ceph cluster New Features ************ * It is now possible to configure Manila with CephFS to use a TripleO managed Ceph cluster. When using the Heat environment file at environments/manila-cephfsnative-config.yaml Manila will be configured to use the TripleO managed Ceph cluster if CephMDS is deployed as well, which can be done using the file environments/services/ceph-mds.yaml Changes in tripleo-heat-templates 5.0.0.0rc2..6.0.0 --------------------------------------------------- 5f278eb reno: prepare 6.0.0 (Ocata GA) ff48624 Make UpdateDeployment depend on NetworkDeployment 04035a8 Fix Panko API upgrade process ec42700 Install nova-placement package on upgrade ec200a8 Add upgrade task for panko api 16c4cd6 Upgrades: fix up the rabbitmq HA mode like in new ocata deployments edb2220 Add mistral service support for composable upgrades 53225d5 upgrades/validation: only run validation when services exist d968747 Put service stop at step1 and quiesce at step2. d0d9395 Adding upgrade_tasks to tacker bb9867e Adding upgrade steps to congress service dda25e8 Add upgrade support for Horizon a27b97d Add etcd composable upgrade steps e082540 upgrades: fix ec2api conditional 3907fcb Adding keystone parameters for Congress 28cc7e6 Adding keystone parameters for Tacker 4f3a72e Add auditd upgrate steps 1555183 Add zaqar service for composable upgrade 05e0a5f Add support for upgrading ec2-api f0d6c7b Adds http proxy support for registering RHEL overcloud nodes dd4524c Updated from global requirements 7a08ed7 Update the Nova Endpoint information for Cinder 94e27e6 Don't recalculate EndpointMap to get outputs 7f99e6d Install openstack-heat-agents on upgrade 74561e6 Install openstack-panko-api on upgrade daac054 Don't assume default network names in net_ip*map 8c9cef2 Deploy CI scenarios with Pacemaker c472b36 Remove forgotten sahara dbsync from step5 upgrades tasks 077c72b multinode_major_upgrade: enable Pacemaker 577ea9b Upgrade nova-api/scheduler/conductor packages at step3 not step2. 2358764 Align HCI environment file with list of services from roles_data a41c5eb Add checks in ansible upgrade tasks for CephMon and CephOSD 38cbdc5 Add release notes for Manila/CephFS with managed Ceph bded9a1 Adding the ip_conntrack_proto_sctp kernel module 039e7ef Increase ansible-pacemaker default service start timeout fd3ac00 neutron: don't set external_network_bridge option by default dfa98bc Re-add the disable_upgrade_deployment note in roles_data.yaml 7b17083 Update ci environment for multinode jobs to support Ceph 77af536 Increase apache ServerLimit and workers to 100 3166631 Enable panko service by default on overcloud 7c280a3 Add step0,validation checks for heat services 9014197 Stop nova-api before upgrading package 3a7ed44 Make the DB URIs host-independent for all services a61ca21 multinode/upgrade: add nova services to environment 0d348d1 Switch to net-config-multinode e160cd2 Add explicit swift check to tripleo_upgrade_node.sh 695efa6 Deploy Manila with CephMDS in scenario004 3440d9d Apply puppet in non-controller script in step. a334a15 Automatically backup and restore Swift rings from the undercloud 824c54d Add Newton to Ocata UpgradeInitCommonCommand a36cac3 Apply post-upgrade step to not run puppet in post upgrade aef946f CI fix broken references to multinode-core.yaml fcf62ae Update .gitreview for stable/ocata 0b99c32 Add major-upgrade-converge environment. 701b544 Setup FreeIPA to serve DNS in the setup script 8424e21 Declare variables for freeipa_setup.sh script 5353f1c Add nova service support for composable upgrades 47d29db Release notes ha composable ac29fde OVN bridge mappings for tripleo 35c64e1 Add upgrade tasks for opstools services 246370e Containers: Add required EndpointMap parameter b80a89c Configuring a default ntp server. fa29c83 Add Ceph RGW to capabilities map 093949d Updated from global requirements 8896c4e Fix empty parameter_default error in environment file 3ee40f3 Add release note for services endpoint change d1edc33 Use Keystone internal endpoint instead of admin for nova-ironic d1eb0bc Use Keystone internal endpoint instead of admin for services f2ab850 Remove duplicated release notes aa7134b Add missing TripleO services to ci/multinode ef7b38a nova-placement: support upgrade ec5ba08 Remove [heat,glance,ironic,cinder,keystone] db sync from ansible d23c164 Remove the ansible neutron-api db sync as for other services ca843e1 Configure the placement API's interface to use the internal endpoint 97e0768 Reduce memcached memory configuration 7bca48b Add missing release notes for Ocata fbb7298 placement: switch service to use NovaPlacementNetwork 94a0d14 Fix Neutron region in nova.conf 8a77f29 Remove gnocchi db sync from the ansible upgrade step 5e411fa Adds cluster status check_and_fail before running upgrade (step0) f55d670 Dump and run puppet for role which are disable_upgrade_deployment true f666228 adding Congress Support c389ced Remove legacy major upgrade scripts for Ceph and BlockStorage ed220ae Delivers upgrade scripts where upgrade steps are disabled 9df2928 Make UpgradeBatch resource depends on BatchConfig step0 76e89a5 Remove aodh db sync from ansible upgrade b49b443 Adding Tacker Support 53619e2 Remove deprecated metering_secret da91bb6 Re-organizes Contrail services to the correct roles 9f48b91 Stop deploying Nova API in WSGI with Apache 2026ee4 Enables support for configuring Cinder with Dell EMC ScaleIO storage backend. 6d27319 Stop setting bind_address on nova db uri. a19e570 Composable services support for Cinder Dell EMC PS Series 490c19b implement a collectd composable service 7a14359 Remove precheck on services which run on httpd for upgrade 353c2de Remove openstack-ceilometer-api pre upgrade check 2afc240 Adds default Keystone region to regionOne Closes-Bug: #1661839 341afb9 Composable service support for Cinder Dell EMC Storage Center 07876f2 Add registry and role service list entries for Octavia f48c665 net-config-multinode: make controlplane int idempotent e32164c Provide a default value for Ironic cleaning_network configuration 6c5ded0 Remove openstack-ceilometer-expirer check 0bd4cfc Disable batch upgrade deployments for disabled roles 1b58806 Reduce number of steps for upgrades efa4c0f Simplify/fix config enabled conditions for upgrades 87af02d Disable puppet on upgrade for roles not upgrading 526d434 Added further security functionality in release notes. aeeed8b CI: enable debug on multinode and upgrade job 1cb731b Remove old host param 05fdd46 Switch item notation to jinja format eaafa92 OVN plugin configuration fixes a6a69ad Add pacemaker composable upgrade steps e5d594e Moving the validation for using the template alias version for all templates ca0bf43 Remove unused SR-IOV parameter NeutronSupportedPCIVendorDevs 2ca1624 Add more explicit messagae to build_endpoint_map's check option 5e0a7ee Validate that endpoint_map.yaml is up to date in the gate 064f7d6 Configure VNC Server listen address through t-h-t f6d8dc6 FreeIPA: don't preprovision service principals if novajoin is enabled c99a607 Don't run ceilometer-upgrade via upgrade_tasks 5beb31a Remove Gemfile and Rakefile a81ccd8 Disable the deprecation warnings as errors for puppet-syntax ad4cc3e Add ability to toggle swift's ceilometer transport_url SSL 79f148b Use common directory in CI scenario for net-config 474783e Introduce Octavia implementation services 5339b91 Describe use of Manila/CephFS in capabilites_map 9d82796 docker: eliminate copy-json.py in favor of json-file ceebfa2 multinode/upgrade: set heat::rpc_response_timeout to 600 12b0d72 Pass parameters for TLS proxy in front of neutron server 1dd364f Use os-net-config in multinode jobs 6bdfd93 Add support for Jinja2 includes afdc138 Add AuditD composable service d14c56e Adds a pre-upgrade check that service is running (step0) 4869212 Allow the override of pacemaker::corosync::settle_tries 581cfa7 Allow to separate Horizon from Neutron 5461971 Add deployed server bootstrap for RHEL ffd62b2 Remove create-legacy-resource-types opts a0c5f65 Add upgrade support for CephRGW service 708d337 Add release note for composable upgrades bf4c3f2 Do not try to update the 'ceph' metapackage from CephMon role 54667d3 ci: import multinode_major_upgrade.yaml from tripleo-ci bdfc7c6 Add Ceph RBD mirror Pacemaker profile 73f5879 Adds SSH Banner text into sshd_config f1c2675 Add SkipUpgradeConfigTags for upgrade config 5750df8 Add telemetry service support for composable upgrades 405ccc3 Add ironic service support for composable upgrades 5e575fb Skip upgrade steps where no tasks are defined 9f908e9 Add upgrade support for ceph OSD service 6fb4eec Add upgrade support for ceph-mon service 1cdc514 Add support for batched upgrades to composable upgrades 11f487f Use versionless keystone endpoint for barbican-related configurations c7ae882 Set the correct default for gnocchi workers c6b6466 Add novajoin entries to the TLS-everywhere environment file 08bac5a Add a release note for using deployed-servers (aka split-stack) 8bf0468 Conform CephExternal template to the new hiera hook 6466cbd Add release notes for Ocata 6.0.0 0e18ac5 Manage password_validator regex e252295 Add snmp service support for composable upgrades d33422d Remove spurious for loop from post deploy j2 80086fd Add metadata settings for needed kerberos principals 4f4582e Add glance registry service to disable on upgrade ac70b82 Import multinode + pingtest from tripleo-ci 3d1c202 cinder-api: cleanup TODO 35e49d5 Specify what to do if endpoint map environment don't match a88261a Pass parameters for TLS proxy in front of Glance-API e02c3c2 Add ec2-api service cf8c1eb pacemaker remote profile support 44ec613 scenario002: updating volume encryption provider 275bbe8 Allow for specifying the output_dir 5fbe0c5 Ignore hidden files in directories 3330089 Add support for not using admin_token in Ceph/RGW 1cbf097 Remove unused nova_url from neutron config 67f9413 Add disable_upgrade_deployment flag to roles_data.yaml a7b3f81 Set manila default_share_type config option cb56496 Move nova placement hiera to nova-base 2254d38 cinder: move glance params into base e9cb6de Allow dnsmasq_dns_servers to be configured for DHCP Agent 07cdf9b Enabling until_complete to be configured dynamically e56b191 Add THT for fossw ML2 plugin in networking-fujitsu 24952e0 Make ServiceNetMap support custom network names ee26457 Add sahara service support for composable upgrades 04084ba Add swift service support for composable upgrades 2dee58a Swift proxy align *-quotas with puppet-swift syntax df1e016 Don't start all services during upgrade steps d5d8701 Disable glance registry during upgrade 49dc4d2 Ignore systemctl return code in yum_update.sh 550dde6 Deploy NTP with puppet-tripleo profile 52573da Adds etcd composable service 312f357 Fix comment in freeipa_setup.sh script c644d83 Add entry in serviceNetMap for Nova Placement 70e8e7a Expose instance discovery method for compute agent dcfc581 Remove CeilometerStoreEvents parameter 78215fa Add IP to provisioning interface for FreeIPA if requested 51fa5a5 Add Octavia API service definitions 0561ae1 Revert "Revert "Specify cell0 db creation"" 8568de4 Add a environment file to disable ceilo api 7efa88b Check that all templates are using the release alias 22ffadd set -e in run-os-net-config.sh 08c6a86 Add deployed server bootstrap to noop-ctlplane d1e6731 Add endpoint map matching validation to validate-yaml.py 26ae162 Nova Placement API composable service e4c2b99 Add release notes for the HA-by-default change ddca775 Bump missing template names to ocata 18e6dc9 Conditionally set OVS agent firewall driver 4320ee5 Simplify passing config to ovs agent container 269a3bb Allow user to configure Ceph rbd_default_features 4ccb27a Remove Glance Registry service c9dca84 Fix typo in template description 62a84e7 Use custom role names in deployed-server roles c913d9b Deployed server bootstrap via Heat 92e203a Fix for AllNodesExtraConfig and fix environment files to create swap files/partitions e1f223b Configure cron parameters for Cinder Heat Keystone and Nova fa45e05 Updated from global requirements e8996d9 Removes deprecated neutron-opendaylight-l3 env file 5efee26 Add ReNo support 34f3ab6 Revert "Specify cell0 db creation" ca8face HPELeftHandISCSIDriver support for Cinder aaf4dc1 Add git to FreeIPA test server install script 399a048 Add heat service support for composable upgrades 11f3bde Add cinder service support for composable upgrades 04ed7e5 Add neutron service support for composable upgrades 7ac5ef5 Adds a step0 for pre upgrade-init checks c3d69c1 Parameterizes Nova API default floating IP pool 9245880 Add glance service support for composable upgrades 9087536 Fix protocol for ZaqarWebsockets endpoint f25458d Make build_endpoint_map.py output an ocata versioned template 3af65ff Fix error path for tools/process-templates.py 00b2529 Allow freeipa environment file to be in /tmp 8428553 Removes deprecated OpenDaylight L2 only deployments 6f20304 Add deployed-server backwards compatible template 42c31dc Add support for the deployment of Ceph MDS 4183f66 Add THT for networking-fujitsu f97ee52 Add retry to RHEL registration 216aa0d Updated from global requirements 1e606a1 Correct typo in ManagementAllocationPools in network-environment.yaml d31c78e README: Add mistral a0e6c8f Configure specific module path for ansible. 8a5c767 Setting networking-odl v2 as a mechanism driver 9d64d88 Make update-from-keystone-admin-internal-api.yaml work on newton+ c9596b7 Continue checking for request url if initially null ca4dd75 Update net-config-noop to use apply-config 64eb5a1 Add UpgradeInitCommand to deployed-server b1fe2e8 Template and role support for the undercloud 10044ba Heat engine settings required for Undercloud b7db1f4 scenario001: add Panko testing 6583d08 README: updates for CI matrix d998638 Remove unused pacemaker profiles f6511ec Auto-set SwiftMountCheck and SwiftUseLocalDir settings 4f9a16d Configure Kernel Args and Tuned and then reboot for Compute 81b0d79 Merge mysql service_config_settings for nova ea597d0 Fix a typo in deployed-server/README.rst 782c82a puppet/role.role.j2.yaml has invalid get_resource reference c172a84 nova-api: legacy cleanup with old wsgi params 806fe37 nova-api: also include hiera for new apache_api class 3bd90e2 Set rabbitmq package_provider to yum bd985f8 Add custom roles data for deployed-server 724ba3a Add example showing how to set root password via cloud-init 40cb3ab Configure Heat engine metadata URL's 3c478c4 Add missing VIP definitions into -no-tunneling env file 87bcf6b Expose enabled_perf_events libvirt options 4e3b085 Specify cell0 db creation 4b8720e Remove old ControllerConfig override from puppet-pacemaker.yaml 56ebc7e DB connection: prevent src address from binding to a VIP 437f4df Force epmd listening to a specific address 3c6ec65 Bump template version for all templates to "ocata" 7f58104 Pass nova rabbit information to mysql 356b961 Use provided qemu.conf in libvirt container 20f627c Add network_config_hook interface to run-os-net-config.sh bb26e46 Add CI matrix to THT d2da590 Add hook to generate metadata from service profiles ee7456e Add FreeIPA server installation script 8d796ea Add a per service bootstrap node variable 22ba81c Adds missing firewall rules for OpenDaylight API service c5b7aa1 Adds missing OpenDaylight username/password from ODL OVS service efd28db Set gnocchi wsgi display name 0294499 Set aodh wsgi display name 696bb73 Set the default event pipeline publisher 5d777f3 Use ws instead of http for Zaqar websocket endpoints d2c61c5 FreeIPA: Make OTP and FreeIPA server parameters optional e3edcb2 Configure DPDK options to isolate PMD cores and ovs process cores 997690b Revert "Switch mistral to use authtoken configuration" 5c272e9 Use overcloud-full instead of atomic-image d5cd18d Introduce role-specific NodeUserData, use for docker e6bc520 Add bind mounts for agent state c568891 Move UpgradeInitCommand to role templates 58c6988 Run upgrade steps before post-deploy config d169989 Split OVN northd and ml2 plugin 9313e18 Add "deployed server" fake neutron ports c6f4d5b net-conf: make bridge and interface name optional 600f9b2 Increase libvirt/qemu.conf max_files and max_processes 3078533 Introduce role-specific nova-server-metadata f3d7b97 Don't run yum_update.sh inside docker b3e5f8e Add ZaqarApiNetwork to the service net map f1cc214 Add pre-network hook and example showing config-then-reboot 4e8d5aa Use hostname -s instead of hostnamectl --transient afcb6e0 Make the openvswitch 2.4->2.5 upgrade more robust de92353 Set rabbitmq's port and IP via the config file and not the env file 45522a9 Set manila cephfs backend if ceph is deployed db31ff5 Enable SECURE_PROXY_SSL_HEADER option for horizon d49173b Synchronize NetworkDeployment inputs for generic roles 0097da7 Use OS::Heat::DeployedServer 0146b6b Manage disallow_iframe_embed 623c249 Use df instead of findmnt in cephstorage upgrade scripts 1a9c202 Decouple swift-proxy from ceilometer 5938731 Add a type for the ControlVirtualIP resource ed029e5 Switch mistral to use authtoken configuration c0cbbd5 Expose param to enable legacy ceilometer api 7611f45 Add FreeIPA enrollment template f592e19 Don't rely on lsb_release for hosts template write bb73874 docker: don't use custom run-os-net-config 5de29f8 Correction to SRIOV THT Examples 4b425b9 Enable haproxy internal TLS through enable-internal-tls.yaml ebc17a2 Remove unused attr from templates 1102b64 Remove redundant CLI arguments for neutron-db-manage d4db12b neutron: don't set router_delete_namespaces 9745e8b Fix SwiftStorage role. 8e5652e Add NIC config for compute role for DVR with multiple NICs f7e8a04 Fix bug when using multiple DeployArtifactURLs 0f1022e Revert "Use FQDN for rabbitmq's nodename env variable" 41b062a Add zaqar to the controller's list of services in roles_data.yaml d706032 Move nodes' fqdns to a map to remove clutter 64e44e8 Make get-occ-config.sh support custom roles 26c229a scenario001: deploy Cinder with RBD backend ea67638 scenario003: configure Keystone tokens with Fernet provider 072a06f Implement scenario004 with Ceph Rados Gateway scenario f334758 ceph-rgw: add missing user parameter adcb488 scenario001: deploy Ceph dbee500 scenario001/pingtest: remove gnocchi_res_alarm dbece39 Initial support for composable upgrades with Heat+Ansible 3e9fcfd Use FQDN for rabbitmq's nodename env variable b4cd2ed Use network-based fqdn entry from hiera instead of the custom fact 7a2c2b0 Introduce network-based FQDNs via hiera 7876851 Hiera optimization: use a new hiera hook b56e666 Make pep8 task run template generation 32f84e5 Use transient hostname for deployed servers f6b1dee Deployed server: switch to apply-config hook 4b5b244 Add local template generation tox task f02742a Configure /etc/hosts via os-collect-config script 413d292 Support multiple meter dispatchers in ceilometer config c5a1ea1 Add Zaqar to scenario002 5d18520 Make scenario template paths relative dddddbf Add Mistral to scenario003 0c7cbcf Fix grammar 981c33a Test encrypted volumes in scenario002 4f88933 get-occ-config.sh replace deprecated heat commands 2985cd9 Apply os-net-config with a script instead of element d1deaae Use correct type for SensuRedactVariables parameter 8a849dd Revert "Set NeutronL3HA to false when deploying DVR" 933f1af Stop using puppet to configure VIPs in /etc/hosts 9f595c8 Fix puppet/services/README.rst step description 2f50e14 Show team and repo badges on README 2819cb3 Import TripleO CI environments from tripleo-ci 2a7e044 Provide full list of services for Compute role in HCI scenario 22003fb Enable TLS in the internal networkf or Mysql 9e3bf28 Disable Neutron agents with OVN. 476b054 Run os-net-config before restarting cluster on update 4e0e4a5 Explicitly set rabbit hosts so its not overridden during upgrade e2e0f9d Cleanup some inline comments in network/config 0ca8dab Make the CloudDomain defaults match the doc strings 5a472f1 Fix ovs 2.4 to 2.5 upgrade - minor update non controllers d9b80a8 Fix resource_registry path in enable-internal-tls 6e86622 Containerized Services for Composable Roles a3f03eb Modify external loadbalancer environments to use new FixedIPs 583e052 Add necessary parameters for encrypted volumes support ab8b13d Make Ceilometer notifications non-blocking 0f742c7 Disable keepalived for HA deployments via t-h-t 0213ae9 Disable Options Indexes in horizon 06d4d08 No longer hard coding to a specifc network interface name. a2e0aa4 Add panko api support to service templates 4a35893 Remove conditional for neutron l3_ha f9b2a22 Configure Keystone Fernet Keys ca12232 Enable enforce_password_check ea22134 Remove Combination alarms support 277fbae Do not manage overcloud repositories when using external Ceph 8fe71c0 Correct AllNodesDeploySteps depends_on 42f835e Use keystone profile parameter to pass heat password 8ab22a9 Nova base cleanups for hiera json hook 133edad Horizon service cleanups for hiera json hook 2df399d Replace ceilometer-dbsync by ceilometer-upgrade bb3c742 Fix external Load Balancer deployment 59997c5 Define keystone token provider 20f8fd1 Composable Zaqar services 71ed1db Fix up Newton->Ocata rabbitmq ha policy 23ca447 Enable internal TLS for Barbican API a5cec52 Fixes missing OVS Firewall config with OpenDaylight 76b0edc Configure civetweb bind socket via puppet-tripleo c99c48b Increasing neutron timeout for low memory usage eec4587 Increase reserved memory for computes when enabling DVR c921b15 Use default Sensu redact 548bf8a Fix inconsistent Manila service naming e2ebc8e Fix typo in Keystone Sensu subscription d96b58b Use j2 loops in post.j2.yaml 36aa652 Neutron L3 service cleanups for hiera json hook 93b4d83 Handle null role_data in services 390292e Select bootstrap node by list index not name 5e52fb0 adding swift middleware that is typically enabled by default 96a458d Add firewall rules for manila api service 465d913 Disable password reveal in horizon dde12b0 Fix race during major-upgrade-pacemaker step 1482956 set url_base option in static web middleware 094bbef ceilometer compute agent needs restart on compute upgrade 17e727d Reload haproxy configuration as a post-deployment step b0f964d Temporary UCSM mapping files should be opened with write mode b1624dd Use --globoff when downloading artifacts 665fad1 Enable internal TLS for Cinder API 5ba02aa Removes deprecated overcloud VIP outputs d3f75f6 Fixes incorrect reference to OpendaylightApiNetwork b5cb4e4 Add missing Barbican endpoint from tls-everywhere environment ed95fda Ensure heat-domain hiera is in nodes that contain keystone d297e02 Move per role Services defaults into environment file b4bfc17 Add an optional extra node admin ssh key parameter 16004b9 Move db settings from manila-api to manila-base f20c044 Include keystone authtoken config in manila-share service a560e98 swift/proxy: remove swift::proxy::ceilometer::rabbit_host 69be131 Defaults kernel.pid_max to 1048576 fa5a9ad nova: add missing vnc console port in firewall d006338 nova/libvirt: add missing ports for live-migration a7af5b9 Fixup the start of swift services 56c38c1 Add Sahara plugins list as a configurable parameter 9bb00f2 Ensure we update ceph and composable nodes ba66980 Do not reference CephBase from CephExternal service c54d323 Revert "Adjust MTU to compensate for VLAN tag issue" 53ff813 Add Neutron network type and VLAN ranges to network-environment.yaml 204ebf8 gnocchi statsd should be able to send data to port 8125 d8fa70d Update openstack-puppet-modules dependencies a8e1190 Rework gnocchi-upgrade to run in a separate upgrade step eb34d8c Change nova ram_allocation_ratio to match puppet-nova 65db374 Enable internal TLS for Nova API 4a17efe Updated Nuage neutron plugin name 178b647 Add SNMP role to the CephStorage nodes 38fe61b Fix Swift proxy pipeline ordering 813b3dc Add option to disable "d1" Swift device 9e2e558 Set cinder's service name to httpd via t-h-t 61cba94 Add replacepkgs to the manual ovs upgrade workaround and fix a typo 82e262d Fix usage of SwiftRawDisks f49d4d2 Enables auto-detection for VIP interfaces 3866490 Fix the rabbitmq/redis pacemaker resource timeouts on updates d6df3c6 Clarify horizon allowed hosts setting b6a4bdc Re-add NFS backend for Glance da3b0cb Use ::os_workers fact instead of ::processorcount 9dfc243 Composable Mistral services 7cc594c Add missing Ceph endpoints from tls-everywhere environment c6ddaaf Remove double tcp_listen_options entries for rabbit 1c4ade1 Open port 16509 for libvirt for live migration f1b509c Include ceilometer in swift proxy pipeline 7ce2179 Fix the stonith property during upgrades 7e09b70 Add special case handling for OVS upgrade in updates and upgrades bf97a0f Enable internal TLS for gnocchi eb11477 Enable internal TLS for aodh 660dbd5 Enable internal TLS for ceilometer debbfbb Generate internal TLS hieradata for apache services 9bd8d53 Remove duplicate bind_host from nova-api profile e7cb607 Bind mount files to run DiD in latest atomic host 6d41f69 Have docker start script honor configuration 5f2f542 Add Barbican to the overcloud 0b62c95 Add parameters to run cinder over httpd 2cd90e8 Fix api_extensions_path in neutron-opencontrail environment 4c500c6 Add apache workers to nova-api conditional 59f19b5 Removes EnableODL heat parameter and fixes missing local_ip param d7610f7 Set nova service_name via t-h-t bb875ec Enable proxy headers parsing for Neutron 0ff21f8 glance_multiple_locations when NovaEnableRbdBackend=true 6b9fe61 Disables Neutron ML2 config on Compute for OpenDaylight ccc3a56 Ensure all HostsDeployments finish before puppet 74317f2 heat-api-cfn endpoint is created to RegionOne instead of regionOne 32d7c52 Fixes missing provider mappings for OpenDaylight 4e98b29 Pass heat domain admin password to keystone 1884d2a Modify the constraint to allow single quote for DPDK core list param 4794154 Enable Glance multiple locations when using Ceph 9f89441 Split out hosts config deployment 7b04794 Move trunk service plugin to the proper list 9d9eece Prefill Sensu client custom config dd14a8c Enable proxy headers parsing for Ceilometer 81576e9 Enable proxy headers parsing for Aodh 17c821b Enable proxy headers parsing for Gnocchi 4eacf41 Disable IPv6 RAs & Autoconf For All (Not Just Default) 38f9838 Only set NovaWorkers in the non-default case a80d13b Remove duplicate metadata keys from nova-api.yaml 3f842b5 Add contrail services to the resource registry 29306b7 Special case non-matching ObjectStorage role port names 0448622 Allow Glance API and Registry to be split 28a2a6d Enable object versioning in Swift proxy 30a570a Actually start the systemd services in step3 of the major-upgrade step 1c8ef6c Fix default Swift ring partition power 6d9f97f Set the notification driver for glance 22ab4a6 Make step an integer on the pacemaker controller ff908cc Add new environment for debug 87e83b7 Remove unneeded *_enable_backend hiera from Manila backends a6d6acd Add cloud names to hosts output eaf91da Ceilometer Wsgi Mitaka->Newton upgrades c70af3e Serialize AllNodesDeployment and UpdateWorkflow b55f6cd Specify the Ceph packages to be installed 7322d60 Enable firewalling by default on compute nodes ddd4d3c Re-enable ManageFirewall by default. e32e211 Add Select per-network hostnames for service_node_names to role.role.j2.yaml 704a78d Be more inclusive in insecure registry regex 8c52f96 Add generic template for custom roles. 273a449 Set proper ceph config path for manila dd162f4 restore missing fluentd client functionality 78500bc Renames OpenDaylight to OpenDaylightApi and splits out OVS configuration eaa385f Fix OpendaylightApiNetwork key naming ec282c4 Open tripleo-heat-templates for Ocata 2e6cc07 Adds Environment File for Removing Sahara during M/N upgrade 6a408ff Select per-network hostnames for service_node_names ff86a85 j2 template per-role ServiceNetMapDefaults 883addf Move the main template files for defalut services to new syntax generation 3fa2ab4 Include redis/mongo hiera when using pacemaker 2b06ed8 Disable all repos during rhel registration dc6f93d Update $service to $resource this variable does not exist in the context b74b679 reload HAProxy config in HA setups when certificate is updated 1d7231a Change the rabbitmq ha policies during an M/N Upgrade 1c5d168 Change rabbitmq queues HA mode from ha-all to ha-exactly c947008 Make keystone api network hiera composable 94fddff j2 template role config templates b3c73a7 Replace per role manifests with a common role manifest d720f22 telemetry: remove coordination_url hiera settings b97c913 Telemetry: add redis_password hiera parameter b6b35e4 Fixed NoneType issue when monitoring-environment.yaml a23f192 Fixed NoneType issue when logging-environment.yaml is used d2af1b8 Add flag for internal TLS 9bf37e0 Add HAProxy TLS handled by certmonger as composable service 57f14d9 Add option to specify Certmonger CA 5e41f15 Balance Rabbitmq Queue Master Location on queue declaration with min-masters strategy 27e1d10 Set ceph osd max object name and namespace len on upgrade when on ext4 1da253f Add parameters to run nova over httpd 7822c97 Cinder volume service is not managed by Pacemaker on BlockStorage b0d6607 Move the rest of static roles resource registry entries to j2 371698a Fix typo in fixing gnocchi upgrade. 0593077 Use -L with chown and set crush map tunables when upgrading Ceph 752394a Use netapp_host_type instead of netapp_eseries_host_type 333f6b3 Use correct password for keystone bootstrap 06da49e Fixing resources path in OpenDaylight ff20b53 Added support for pass-through iSER configuration 1fa4c02 Add gateway_ip in OS::Neutron::Subnet Diffstat (except docs and test files) ------------------------------------- .gitignore | 18 + .gitreview | 1 + Gemfile | 24 - README.rst | 84 + Rakefile | 6 - all-nodes-validation.yaml | 2 +- bootstrap-config.yaml | 2 +- capabilities-map.yaml | 126 +- ci/README.rst | 11 + ci/common/net-config-multinode-os-net-config.yaml | 114 + ci/common/net-config-multinode.yaml | 66 + ci/environments/multinode-3nodes.yaml | 78 + ci/environments/multinode-core.yaml | 37 + ci/environments/multinode.yaml | 64 + ci/environments/multinode_major_upgrade.yaml | 65 + ci/environments/scenario001-multinode.yaml | 115 + ci/environments/scenario002-multinode.yaml | 67 + ci/environments/scenario003-multinode.yaml | 64 + ci/environments/scenario004-multinode.yaml | 84 + ci/scripts/freeipa_setup.sh | 120 + default_passwords.yaml | 2 +- deployed-server/README.rst | 13 +- deployed-server/ctlplane-port.yaml | 17 +- deployed-server/deployed-neutron-port.yaml | 67 + .../deployed-server-bootstrap-centos.sh | 16 + .../deployed-server-bootstrap-centos.yaml | 22 + deployed-server/deployed-server-bootstrap-rhel.sh | 13 + .../deployed-server-bootstrap-rhel.yaml | 22 + deployed-server/deployed-server-config.yaml | 22 - deployed-server/deployed-server-roles-data.yaml | 173 + deployed-server/deployed-server.yaml | 80 +- deployed-server/scripts/get-occ-config.sh | 60 +- environments/auditd.yaml | 119 + environments/cinder-dellps-config.yaml | 31 + environments/cinder-dellsc-config.yaml | 4 +- environments/cinder-eqlx-config.yaml | 17 - environments/cinder-hpelefthand-config.yaml | 13 + environments/cinder-iser.yaml | 19 + environments/cinder-netapp-config.yaml | 2 +- environments/cinder-scaleio-config.yaml | 35 + environments/collectd-environment.yaml | 23 + environments/contrail/contrail-net.yaml | 26 + .../contrail/contrail-nic-config-compute.yaml | 167 + environments/contrail/contrail-services.yaml | 45 + environments/contrail/roles_data_contrail.yaml | 237 + environments/debug.yaml | 5 + ...ployed-server-bootstrap-environment-centos.yaml | 7 + ...deployed-server-bootstrap-environment-rhel.yaml | 7 + environments/deployed-server-environment.yaml | 4 +- environments/deployed-server-noop-ctlplane.yaml | 4 +- environments/docker-network-isolation.yaml | 4 - environments/docker.yaml | 32 +- environments/enable-internal-tls.yaml | 19 + environments/enable-swap-partition.yaml | 3 + environments/enable-swap.yaml | 3 + environments/enable_congress.yaml | 2 + environments/enable_tacker.yaml | 2 + environments/external-loadbalancer-vip-v6.yaml | 21 +- environments/external-loadbalancer-vip.yaml | 19 +- environments/horizon_password_validation.yaml | 5 + environments/host-config-pre-network.j2.yaml | 16 + environments/hyperconverged-ceph.yaml | 26 +- environments/logging-environment.yaml | 2 +- environments/low-memory-usage.yaml | 7 +- environments/major-upgrade-all-in-one.yaml | 2 + ...ajor-upgrade-ceilometer-wsgi-mitaka-newton.yaml | 7 + environments/major-upgrade-composable-steps.yaml | 15 + environments/major-upgrade-converge.yaml | 7 + environments/major-upgrade-pacemaker-converge.yaml | 4 + environments/major-upgrade-remove-sahara.yaml | 6 + environments/manage-firewall.yaml | 2 - environments/manila-cephfsnative-config.yaml | 11 +- environments/manila-generic-config.yaml | 9 +- environments/manila-netapp-config.yaml | 9 +- environments/monitoring-environment.yaml | 38 +- environments/net-bond-with-vlans-no-external.yaml | 4 - environments/net-bond-with-vlans-v6.yaml | 6 - environments/net-bond-with-vlans.yaml | 6 - .../net-single-nic-linux-bridge-with-vlans.yaml | 6 - .../net-single-nic-with-vlans-no-external.yaml | 4 - environments/net-single-nic-with-vlans-v6.yaml | 6 - environments/net-single-nic-with-vlans.yaml | 6 - environments/network-environment.yaml | 9 +- environments/network-isolation-no-tunneling.yaml | 30 +- environments/network-isolation.yaml | 3 - environments/neutron-ml2-fujitsu-cfab.yaml | 21 + environments/neutron-ml2-fujitsu-fossw.yaml | 22 + environments/neutron-ml2-ovn.yaml | 14 +- environments/neutron-nuage-config.yaml | 2 +- environments/neutron-opencontrail.yaml | 25 - environments/neutron-opendaylight-l3.yaml | 14 - environments/neutron-opendaylight.yaml | 12 +- environments/neutron-ovs-dvr.yaml | 19 +- environments/neutron-sriov.yaml | 3 - environments/puppet-ceph-external.yaml | 3 + environments/puppet-ceph.yaml | 12 + environments/puppet-pacemaker.yaml | 5 +- environments/services/barbican.yaml | 4 + environments/services/ceph-mds.yaml | 2 + environments/services/ceph-rbdmirror.yaml | 2 + environments/services/disable-ceilometer-api.yaml | 2 + environments/services/ec2-api.yaml | 3 + environments/services/etcd.yaml | 2 + .../services/haproxy-internal-tls-certmonger.yaml | 4 + .../services/haproxy-public-tls-certmonger.yaml | 4 + environments/services/octavia.yaml | 9 + environments/services/panko.yaml | 2 + environments/services/zaqar.yaml | 2 + environments/sshd-banner.yaml | 13 + environments/storage-environment.yaml | 22 +- environments/tls-endpoints-public-dns.yaml | 64 +- environments/tls-endpoints-public-ip.yaml | 64 +- environments/tls-everywhere-endpoints-dns.yaml | 117 + environments/undercloud.yaml | 18 + environments/updates/README.md | 3 + .../update-from-deployed-server-newton.yaml | 2 + .../update-from-keystone-admin-internal-api.yaml | 29 +- environments/use-dns-for-vips.yaml | 4 +- extraconfig/all_nodes/mac_hostname.j2.yaml | 2 +- extraconfig/all_nodes/random_string.j2.yaml | 2 +- extraconfig/all_nodes/swap-partition.j2.yaml | 19 +- extraconfig/all_nodes/swap.j2.yaml | 10 +- .../nova_metadata/krb-service-principals.yaml | 84 + extraconfig/post_deploy/default.yaml | 2 +- extraconfig/post_deploy/example.yaml | 2 +- extraconfig/post_deploy/example_run_on_update.yaml | 2 +- extraconfig/post_deploy/undercloud_post.sh | 126 + extraconfig/post_deploy/undercloud_post.yaml | 93 + .../environment-rhel-registration.yaml | 4 + .../rhel-registration/rhel-registration.yaml | 18 +- .../rhel-registration/scripts/rhel-registration | 122 +- .../pre_network/ansible_host_config.ansible | 58 + extraconfig/pre_network/config_then_reboot.yaml | 48 + .../host_config_and_reboot.role.j2.yaml | 100 + extraconfig/tasks/major_upgrade_block_storage.sh | 8 - ...ajor_upgrade_ceilometer_wsgi_mitaka_newton.yaml | 62 + extraconfig/tasks/major_upgrade_ceph_mon.sh | 78 - extraconfig/tasks/major_upgrade_ceph_storage.sh | 92 - extraconfig/tasks/major_upgrade_check.sh | 19 +- extraconfig/tasks/major_upgrade_compute.sh | 28 - .../tasks/major_upgrade_controller_pacemaker_1.sh | 176 +- .../tasks/major_upgrade_controller_pacemaker_2.sh | 212 +- .../tasks/major_upgrade_controller_pacemaker_3.sh | 74 +- .../tasks/major_upgrade_controller_pacemaker_4.sh | 17 + .../tasks/major_upgrade_controller_pacemaker_5.sh | 8 + .../tasks/major_upgrade_controller_pacemaker_6.sh | 15 + extraconfig/tasks/major_upgrade_object_storage.sh | 40 - extraconfig/tasks/major_upgrade_pacemaker.yaml | 108 +- .../tasks/major_upgrade_pacemaker_init.j2.yaml | 87 - .../tasks/major_upgrade_pacemaker_migrations.sh | 35 +- .../mitaka_to_newton_aodh_data_migration.yaml | 2 +- .../mitaka_to_newton_ceilometer_wsgi_upgrade.pp | 103 + extraconfig/tasks/pacemaker_common_functions.sh | 26 +- extraconfig/tasks/pacemaker_resource_restart.sh | 14 +- extraconfig/tasks/post_puppet_pacemaker.yaml | 2 +- .../tasks/post_puppet_pacemaker_restart.yaml | 2 +- extraconfig/tasks/pre_puppet_pacemaker.yaml | 2 +- extraconfig/tasks/run_puppet.sh | 27 + extraconfig/tasks/swift-ring-deploy.yaml | 31 + extraconfig/tasks/swift-ring-update.yaml | 42 + extraconfig/tasks/tripleo_upgrade_node.sh | 66 + extraconfig/tasks/yum_update.sh | 42 +- extraconfig/tasks/yum_update.yaml | 9 +- extraconfig/tasks/yum_update_noop.yaml | 2 +- firstboot/install_vrouter_kmod.yaml | 105 + firstboot/os-net-config-mappings.yaml | 6 +- firstboot/userdata_default.yaml | 2 +- firstboot/userdata_dev_rsync.yaml | 2 +- firstboot/userdata_example.yaml | 2 +- firstboot/userdata_heat_admin.yaml | 8 +- firstboot/userdata_root_password.yaml | 38 + hosts-config.yaml | 37 + j2_excludes.yaml | 10 + net-config-bond.yaml | 72 +- net-config-bridge.yaml | 44 +- net-config-linux-bridge.yaml | 60 +- net-config-noop.yaml | 6 +- net-config-static-bridge-with-external-dhcp.yaml | 78 +- net-config-static-bridge.yaml | 67 +- net-config-static.yaml | 58 +- net-config-undercloud.yaml | 77 + network/config/bond-with-vlans/ceph-storage.yaml | 121 +- network/config/bond-with-vlans/cinder-storage.yaml | 131 +- network/config/bond-with-vlans/compute-dpdk.yaml | 155 +- network/config/bond-with-vlans/compute.yaml | 131 +- .../bond-with-vlans/controller-no-external.yaml | 141 +- network/config/bond-with-vlans/controller-v6.yaml | 165 +- network/config/bond-with-vlans/controller.yaml | 153 +- network/config/bond-with-vlans/swift-storage.yaml | 131 +- network/config/multiple-nics/ceph-storage.yaml | 88 +- network/config/multiple-nics/cinder-storage.yaml | 101 +- network/config/multiple-nics/compute-dvr.yaml | 162 + network/config/multiple-nics/compute.yaml | 108 +- network/config/multiple-nics/controller-v6.yaml | 155 +- network/config/multiple-nics/controller.yaml | 145 +- network/config/multiple-nics/swift-storage.yaml | 101 +- .../ceph-storage.yaml | 95 +- .../cinder-storage.yaml | 109 +- .../single-nic-linux-bridge-vlans/compute.yaml | 113 +- .../controller-v6.yaml | 155 +- .../single-nic-linux-bridge-vlans/controller.yaml | 152 +- .../swift-storage.yaml | 109 +- network/config/single-nic-vlans/ceph-storage.yaml | 87 +- .../config/single-nic-vlans/cinder-storage.yaml | 97 +- network/config/single-nic-vlans/compute.yaml | 97 +- .../single-nic-vlans/controller-no-external.yaml | 107 +- network/config/single-nic-vlans/controller-v6.yaml | 129 +- network/config/single-nic-vlans/controller.yaml | 117 +- network/config/single-nic-vlans/swift-storage.yaml | 97 +- network/endpoints/build_endpoint_map.py | 7 +- network/endpoints/endpoint_data.yaml | 189 +- network/endpoints/endpoint_map.yaml | 6450 +++++++++++++++++--- network/external.yaml | 7 +- network/external_v6.yaml | 7 +- network/internal_api.yaml | 3 +- network/internal_api_v6.yaml | 3 +- network/management.yaml | 9 +- network/management_v6.yaml | 2 +- network/networks.yaml | 2 +- network/ports/ctlplane_vip.yaml | 2 +- network/ports/external.yaml | 2 +- network/ports/external_from_pool.yaml | 2 +- network/ports/external_from_pool_v6.yaml | 2 +- network/ports/external_v6.yaml | 2 +- network/ports/from_service.yaml | 2 +- network/ports/from_service_v6.yaml | 2 +- network/ports/internal_api.yaml | 2 +- network/ports/internal_api_from_pool.yaml | 2 +- network/ports/internal_api_from_pool_v6.yaml | 2 +- network/ports/internal_api_v6.yaml | 2 +- network/ports/management.yaml | 2 +- network/ports/management_from_pool.yaml | 2 +- network/ports/management_from_pool_v6.yaml | 2 +- network/ports/management_v6.yaml | 2 +- network/ports/net_ip_list_map.yaml | 138 +- network/ports/net_ip_map.yaml | 157 +- network/ports/net_vip_map_external.yaml | 2 +- network/ports/net_vip_map_external_v6.yaml | 2 +- network/ports/noop.yaml | 2 +- network/ports/storage.yaml | 2 +- network/ports/storage_from_pool.yaml | 2 +- network/ports/storage_from_pool_v6.yaml | 2 +- network/ports/storage_mgmt.yaml | 2 +- network/ports/storage_mgmt_from_pool.yaml | 2 +- network/ports/storage_mgmt_from_pool_v6.yaml | 2 +- network/ports/storage_mgmt_v6.yaml | 2 +- network/ports/storage_v6.yaml | 2 +- network/ports/tenant.yaml | 2 +- network/ports/tenant_from_pool.yaml | 2 +- network/ports/tenant_from_pool_v6.yaml | 2 +- network/ports/tenant_v6.yaml | 2 +- network/ports/vip.yaml | 2 +- network/ports/vip_v6.yaml | 2 +- network/scripts/run-os-net-config.sh | 148 + network/service_net_map.j2.yaml | 169 + network/service_net_map.yaml | 100 - network/storage.yaml | 3 +- network/storage_mgmt.yaml | 3 +- network/storage_mgmt_v6.yaml | 3 +- network/storage_v6.yaml | 3 +- network/tenant.yaml | 3 +- network/tenant_v6.yaml | 3 +- overcloud-resource-registry-puppet.j2.yaml | 101 +- overcloud.j2.yaml | 246 +- puppet/all-nodes-config.yaml | 316 +- puppet/blockstorage-config.yaml | 41 - puppet/blockstorage-role.yaml | 528 ++ puppet/ceph-storage.yaml | 407 -- puppet/cephstorage-config.yaml | 41 - puppet/cephstorage-role.yaml | 539 ++ puppet/cinder-storage.yaml | 397 -- puppet/compute-config.yaml | 41 - puppet/compute-role.yaml | 565 ++ puppet/compute.yaml | 434 -- puppet/config.role.j2.yaml | 59 + puppet/controller-config-pacemaker.yaml | 38 - puppet/controller-config.yaml | 41 - puppet/controller-role.yaml | 611 ++ puppet/controller.yaml | 483 -- puppet/deploy-artifacts.sh | 2 +- puppet/deploy-artifacts.yaml | 2 +- .../all_nodes/neutron-midonet-all-nodes.yaml | 2 +- .../all_nodes/neutron-ml2-cisco-nexus-ucsm.yaml | 10 +- .../pre_deploy/compute/neutron-ml2-bigswitch.yaml | 2 +- .../pre_deploy/compute/neutron-opencontrail.yaml | 59 - .../extraconfig/pre_deploy/compute/nova-nuage.yaml | 2 +- .../pre_deploy/controller/cinder-dellsc.yaml | 87 - .../pre_deploy/controller/cinder-eqlx.yaml | 86 - .../pre_deploy/controller/cinder-netapp.yaml | 20 +- .../pre_deploy/controller/multiple.yaml | 2 +- .../controller/neutron-ml2-bigswitch.yaml | 2 +- .../controller/neutron-ml2-cisco-n1kv.yaml | 2 +- puppet/extraconfig/pre_deploy/default.yaml | 2 +- puppet/extraconfig/pre_deploy/per_node.yaml | 2 +- puppet/extraconfig/tls/ca-inject.yaml | 2 +- puppet/extraconfig/tls/freeipa-enroll.yaml | 83 + puppet/extraconfig/tls/tls-cert-inject.yaml | 8 +- puppet/major_upgrade_steps.j2.yaml | 239 + puppet/manifests/overcloud_cephstorage.pp | 21 - puppet/manifests/overcloud_compute.pp | 21 - puppet/manifests/overcloud_controller.pp | 21 - puppet/manifests/overcloud_controller_pacemaker.pp | 21 - puppet/manifests/overcloud_object.pp | 21 - puppet/manifests/overcloud_role.pp | 30 + puppet/manifests/overcloud_volume.pp | 21 - puppet/objectstorage-config.yaml | 41 - puppet/objectstorage-role.yaml | 526 ++ puppet/post-upgrade.j2.yaml | 27 + puppet/post.j2.yaml | 125 +- puppet/puppet-steps.j2 | 106 + puppet/role.role.j2.yaml | 560 ++ puppet/services/README.rst | 85 +- puppet/services/aodh-api.yaml | 29 +- puppet/services/aodh-base.yaml | 14 +- puppet/services/aodh-evaluator.yaml | 16 +- puppet/services/aodh-listener.yaml | 16 +- puppet/services/aodh-notifier.yaml | 16 +- .../services/apache-internal-tls-certmonger.yaml | 75 + puppet/services/apache.yaml | 60 +- puppet/services/auditd.yaml | 50 + puppet/services/barbican-api.yaml | 161 + puppet/services/ca-certs.yaml | 2 +- puppet/services/ceilometer-agent-central.yaml | 25 +- puppet/services/ceilometer-agent-compute.yaml | 26 +- puppet/services/ceilometer-agent-notification.yaml | 16 +- puppet/services/ceilometer-api.yaml | 25 +- puppet/services/ceilometer-base.yaml | 29 +- puppet/services/ceilometer-collector.yaml | 16 +- puppet/services/ceilometer-expirer.yaml | 2 +- puppet/services/ceph-base.yaml | 85 +- puppet/services/ceph-client.yaml | 2 +- puppet/services/ceph-external.yaml | 75 +- puppet/services/ceph-mds.yaml | 49 + puppet/services/ceph-mon.yaml | 55 +- puppet/services/ceph-osd.yaml | 84 +- puppet/services/ceph-rgw.yaml | 46 +- puppet/services/cinder-api.yaml | 73 +- puppet/services/cinder-backend-dellps.yaml | 85 + puppet/services/cinder-backend-dellsc.yaml | 85 + puppet/services/cinder-backend-scaleio.yaml | 111 + puppet/services/cinder-backup.yaml | 2 +- puppet/services/cinder-base.yaml | 53 +- puppet/services/cinder-hpelefthand-iscsi.yaml | 56 + puppet/services/cinder-scheduler.yaml | 16 +- puppet/services/cinder-volume.yaml | 21 +- puppet/services/congress.yaml | 116 + puppet/services/database/mongodb-base.yaml | 2 +- puppet/services/database/mongodb.yaml | 9 +- puppet/services/database/mysql-client.yaml | 30 + .../database/mysql-internal-tls-certmonger.yaml | 47 + puppet/services/database/mysql.yaml | 120 +- puppet/services/database/redis-base.yaml | 6 +- puppet/services/database/redis.yaml | 2 +- puppet/services/disabled/glance-registry.yaml | 30 + puppet/services/ec2-api.yaml | 138 + puppet/services/etcd.yaml | 73 + puppet/services/glance-api.yaml | 205 +- puppet/services/glance-base.yaml | 126 + puppet/services/glance-registry.yaml | 98 - puppet/services/gnocchi-api.yaml | 23 +- puppet/services/gnocchi-base.yaml | 14 +- puppet/services/gnocchi-metricd.yaml | 18 +- puppet/services/gnocchi-statsd.yaml | 20 +- .../services/haproxy-internal-tls-certmonger.yaml | 66 + puppet/services/haproxy-public-tls-certmonger.yaml | 41 + puppet/services/haproxy.yaml | 75 +- puppet/services/heat-api-cfn.yaml | 30 +- puppet/services/heat-api-cloudwatch.yaml | 16 +- puppet/services/heat-api.yaml | 30 +- puppet/services/heat-base.yaml | 82 +- puppet/services/heat-engine.yaml | 49 +- puppet/services/horizon.yaml | 102 +- puppet/services/ironic-api.yaml | 13 +- puppet/services/ironic-base.yaml | 3 +- puppet/services/ironic-conductor.yaml | 17 +- puppet/services/keepalived.yaml | 45 +- puppet/services/kernel.yaml | 13 +- puppet/services/keystone.yaml | 119 +- puppet/services/logging/fluentd-base.yaml | 2 +- puppet/services/logging/fluentd-client.yaml | 22 +- puppet/services/logging/fluentd-config.yaml | 4 +- puppet/services/manila-api.yaml | 40 +- puppet/services/manila-backend-cephfs.yaml | 26 +- puppet/services/manila-backend-generic.yaml | 6 +- puppet/services/manila-backend-netapp.yaml | 6 +- puppet/services/manila-base.yaml | 25 +- puppet/services/manila-scheduler.yaml | 11 +- puppet/services/manila-share.yaml | 12 +- puppet/services/memcached.yaml | 17 +- puppet/services/metrics/collectd.yaml | 131 + puppet/services/mistral-api.yaml | 71 + puppet/services/mistral-base.yaml | 94 + puppet/services/mistral-engine.yaml | 57 + puppet/services/mistral-executor.yaml | 57 + puppet/services/monitoring/sensu-base.yaml | 19 +- puppet/services/monitoring/sensu-client.yaml | 39 +- .../network/contrail-analytics-database.yaml | 43 + puppet/services/network/contrail-analytics.yaml | 59 +- puppet/services/network/contrail-base.yaml | 87 +- puppet/services/network/contrail-config.yaml | 30 +- puppet/services/network/contrail-control.yaml | 23 +- puppet/services/network/contrail-database.yaml | 14 +- puppet/services/network/contrail-heat.yaml | 40 + .../services/network/contrail-neutron-plugin.yaml | 45 + puppet/services/network/contrail-provision.yaml | 39 + puppet/services/network/contrail-tsn.yaml | 64 + puppet/services/network/contrail-vrouter.yaml | 64 + puppet/services/network/contrail-webui.yaml | 32 +- puppet/services/neutron-api.yaml | 100 +- puppet/services/neutron-base.yaml | 19 +- .../services/neutron-compute-plugin-midonet.yaml | 2 +- puppet/services/neutron-compute-plugin-nuage.yaml | 2 +- .../neutron-compute-plugin-opencontrail.yaml | 29 - puppet/services/neutron-compute-plugin-ovn.yaml | 26 +- .../services/neutron-compute-plugin-plumgrid.yaml | 2 +- puppet/services/neutron-dhcp.yaml | 21 +- puppet/services/neutron-l3-compute-dvr.yaml | 27 +- puppet/services/neutron-l3.yaml | 45 +- puppet/services/neutron-metadata.yaml | 20 +- puppet/services/neutron-midonet.yaml | 2 +- puppet/services/neutron-ovs-agent.yaml | 49 +- puppet/services/neutron-ovs-dpdk-agent.yaml | 12 +- .../services/neutron-plugin-ml2-fujitsu-cfab.yaml | 73 + .../services/neutron-plugin-ml2-fujitsu-fossw.yaml | 78 + puppet/services/neutron-plugin-ml2-ovn.yaml | 29 +- puppet/services/neutron-plugin-ml2.yaml | 62 +- puppet/services/neutron-plugin-nuage.yaml | 2 +- puppet/services/neutron-plugin-opencontrail.yaml | 74 - puppet/services/neutron-plugin-plumgrid.yaml | 5 +- puppet/services/neutron-sriov-agent.yaml | 7 +- puppet/services/nova-api.yaml | 230 +- puppet/services/nova-base.yaml | 186 +- puppet/services/nova-compute.yaml | 37 +- puppet/services/nova-conductor.yaml | 28 +- puppet/services/nova-consoleauth.yaml | 6 +- puppet/services/nova-ironic.yaml | 10 +- puppet/services/nova-libvirt.yaml | 22 +- puppet/services/nova-metadata.yaml | 14 +- puppet/services/nova-placement.yaml | 129 + puppet/services/nova-scheduler.yaml | 8 +- puppet/services/nova-vnc-proxy.yaml | 11 +- puppet/services/octavia-api.yaml | 98 + puppet/services/octavia-base.yaml | 62 + puppet/services/octavia-health-manager.yaml | 61 + puppet/services/octavia-housekeeping.yaml | 70 + puppet/services/octavia-worker.yaml | 102 + puppet/services/opendaylight-api.yaml | 31 +- puppet/services/opendaylight-ovs.yaml | 30 +- puppet/services/ovn-dbs.yaml | 40 + puppet/services/pacemaker.yaml | 33 +- .../pacemaker/ceilometer-agent-central.yaml | 45 - .../pacemaker/ceilometer-agent-notification.yaml | 45 - puppet/services/pacemaker/ceilometer-api.yaml | 45 - .../services/pacemaker/ceilometer-collector.yaml | 45 - puppet/services/pacemaker/ceph-rbdmirror.yaml | 47 + puppet/services/pacemaker/cinder-api.yaml | 45 - puppet/services/pacemaker/cinder-backup.yaml | 2 +- puppet/services/pacemaker/cinder-scheduler.yaml | 45 - puppet/services/pacemaker/cinder-volume.yaml | 3 +- puppet/services/pacemaker/core.yaml | 29 - puppet/services/pacemaker/database/mongodb.yaml | 42 - puppet/services/pacemaker/database/mysql.yaml | 10 +- puppet/services/pacemaker/database/redis.yaml | 4 +- puppet/services/pacemaker/glance-api.yaml | 74 - puppet/services/pacemaker/glance-registry.yaml | 47 - puppet/services/pacemaker/gnocchi-api.yaml | 45 - puppet/services/pacemaker/gnocchi-metricd.yaml | 47 - puppet/services/pacemaker/gnocchi-statsd.yaml | 46 - puppet/services/pacemaker/haproxy.yaml | 6 +- puppet/services/pacemaker/heat-api-cfn.yaml | 44 - puppet/services/pacemaker/heat-api-cloudwatch.yaml | 44 - puppet/services/pacemaker/heat-api.yaml | 44 - puppet/services/pacemaker/heat-engine.yaml | 45 - puppet/services/pacemaker/horizon.yaml | 41 - puppet/services/pacemaker/keystone.yaml | 45 - puppet/services/pacemaker/manila-share.yaml | 2 +- puppet/services/pacemaker/memcached.yaml | 42 - puppet/services/pacemaker/neutron-dhcp.yaml | 46 - puppet/services/pacemaker/neutron-l3.yaml | 46 - puppet/services/pacemaker/neutron-metadata.yaml | 44 - puppet/services/pacemaker/neutron-midonet.yaml | 41 - puppet/services/pacemaker/neutron-ovs-agent.yaml | 42 - puppet/services/pacemaker/neutron-plugin-ml2.yaml | 42 - .../services/pacemaker/neutron-plugin-nuage.yaml | 40 - .../pacemaker/neutron-plugin-opencontrail.yaml | 40 - .../pacemaker/neutron-plugin-plumgrid.yaml | 40 - puppet/services/pacemaker/neutron-server.yaml | 48 - puppet/services/pacemaker/nova-api.yaml | 45 - puppet/services/pacemaker/nova-conductor.yaml | 45 - puppet/services/pacemaker/nova-consoleauth.yaml | 45 - puppet/services/pacemaker/nova-scheduler.yaml | 45 - puppet/services/pacemaker/nova-vnc-proxy.yaml | 45 - puppet/services/pacemaker/rabbitmq.yaml | 31 +- puppet/services/pacemaker/sahara-api.yaml | 45 - puppet/services/pacemaker/sahara-engine.yaml | 45 - puppet/services/pacemaker_remote.yaml | 57 + puppet/services/panko-api.yaml | 105 + puppet/services/panko-base.yaml | 74 + puppet/services/rabbitmq.yaml | 27 +- puppet/services/sahara-api.yaml | 6 +- puppet/services/sahara-base.yaml | 17 +- puppet/services/sahara-engine.yaml | 6 +- puppet/services/services.yaml | 39 +- puppet/services/snmp.yaml | 6 +- puppet/services/sshd.yaml | 34 + puppet/services/swift-base.yaml | 2 +- puppet/services/swift-proxy.yaml | 83 +- puppet/services/swift-ringbuilder.yaml | 21 +- puppet/services/swift-storage.yaml | 34 +- puppet/services/tacker.yaml | 116 + puppet/services/time/ntp.yaml | 10 +- puppet/services/time/timezone.yaml | 2 +- puppet/services/tripleo-firewall.yaml | 4 +- puppet/services/tripleo-packages.yaml | 14 +- puppet/services/vip-hosts.yaml | 56 - puppet/services/zaqar.yaml | 86 + puppet/swift-storage.yaml | 396 -- puppet/upgrade_config.yaml | 58 + releasenotes/notes/6.0.0-b52a14a71fc62788.yaml | 125 + .../add-default-ntp-server-696b8568e09be497.yaml | 6 + .../notes/composable-ha-37e2d7e1f57f5c10.yaml | 12 + .../composable-upgrades-d9ec7c634365e8e0.yaml | 14 + .../notes/deployed-servers-fd47f18204cea105.yaml | 8 + .../notes/ha-by-default-55326e699ee8602c.yaml | 5 + .../ironic-cleaning-network-1e06881df0402221.yaml | 10 + .../notes/keystone_internal-53cc7b24ebdd9df4.yaml | 9 + .../manila-with-managed-ceph-e5178fd06127624f.yaml | 11 + .../memcached-max-memory-ef6834d17953fca6.yaml | 7 + ...tavia-service-integration-03bd3eb6cfe1efaf.yaml | 4 + .../notes/puppet-auditd-6504295e8c6c7a3b.yaml | 9 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/conf.py | 264 + releasenotes/source/index.rst | 18 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 7 +- roles_data.yaml | 74 +- roles_data_undercloud.yaml | 35 + scripts/hosts-config.sh | 39 + setup.py | 11 +- test-requirements.txt | 10 +- tools/process-templates.py | 168 + tools/releasenotes_tox.sh | 28 + tools/tox_install.sh | 30 + tools/yaml-nic-config-2-script.py | 219 + tools/yaml-validate.py | 115 + tox.ini | 11 +- 561 files changed, 26052 insertions(+), 10496 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4e46b89..057aa28 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1,6 @@ -pbr>=0.5.21,<1.0 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +pbr>=1.8 # Apache-2.0 +Jinja2!=2.9.0,!=2.9.1,!=2.9.2,!=2.9.3,!=2.9.4,>=2.8 # BSD License (3 clause) +six>=1.9.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index c3726e8..06bce5a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1,9 @@ -pyyaml +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +PyYAML>=3.10.0 # MIT +Jinja2!=2.9.0,!=2.9.1,!=2.9.2,!=2.9.3,!=2.9.4,>=2.8 # BSD License (3 clause) +six>=1.9.0 # MIT +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0 +reno>=1.8.0 # Apache-2.0