We are delighted to announce the release of: tripleo-heat-templates 5.3.11: Heat templates for deploying OpenStack with OpenStack. This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 5.3.11 ^^^^^^ Security Issues *************** * Restrict memcached service to TCP and internal_api network (CVE-2018-1000115). Bug Fixes ********* * As documented in launchpad bug 1708680 the templates for manila with the "generic" back end do not yield a successful manila deployment even if they do not cause the overall overcloud deployment to fail, so we are dropping these faulty and unmaintained manila "generic" back end templates. * Fix Heat condition for RHEL registration yum update There were 2 problems with this condition making the rhel-registration.yaml template broken: "conditions" should be "condition" and the condition should refer to just a condition name defined in the "conditions:" section of the template. See https://bugs.launchpad.net/tripleo/+bug/1709916 Changes in tripleo-heat-templates 5.3.10..5.3.11 ------------------------------------------------ 067941d [CVE-2018-1000115] memcached: restrict to TCP & internal_api network 979143f Add reno for manila generic driver removal f2be057 Fix networking settings for ObjectStorage role pt 2 0b256bc Removes manila-generic-config from TripleO 2735cfc Fix Heat condition for RHEL registration yum update 1fb9f1a Zuul: Remove project name b7fa0d3 Optimize kernel neighbour table for large scale environments Diffstat (except docs and test files) ------------------------------------- capabilities-map.yaml | 8 -- environments/manila-generic-config.yaml | 25 ------ environments/network-isolation-no-tunneling.yaml | 9 ++- environments/network-isolation-v6.yaml | 6 +- environments/network-isolation.yaml | 12 +-- .../rhel-registration/rhel-registration.yaml | 9 ++- overcloud-resource-registry-puppet.j2.yaml | 1 - puppet/objectstorage-role.yaml | 12 +-- puppet/services/kernel.yaml | 29 +++++++ puppet/services/manila-backend-generic.yaml | 93 ---------------------- puppet/services/memcached.yaml | 31 +++++++- ...-generic-driver-templates-b33e8966c263a1fd.yaml | 7 ++ ...at-condition-for-rhel-reg-311a3dce76cc0ec1.yaml | 9 +++ .../memcached_hardening-2529734099da27f4.yaml | 4 + roles_data.yaml | 1 - zuul.d/layout.yaml | 2 - 16 files changed, 107 insertions(+), 151 deletions(-)