We are satisfied to announce the release of: tripleo-heat-templates 17.0.0: Heat templates for deploying OpenStack with OpenStack. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ For more details, please see below. Changes in tripleo-heat-templates 16.0.0..17.0.0 ------------------------------------------------ 88ca6a07c Drop templates to create Neutron resources b82f8b415 Do not use Neutron resource by default e6a77b424 Add missing description to some Octavia API parameters dbb0224e3 Remove old workaround to upgrade deployed server environment b6b38bce0 Use deployed server by default 818983437 Drop old templates OVN bridge mac addresses b073bf76a Support role specific MessageOfTheDay 00a774f4f Enable package installation by default ae2c68170 Replace subnet_info module with osc command fe0dbc5d2 Simplify cloud-init check and use command eb57ba758 Sets higher values for timeouts 4e178d8b5 Use step condition for all upgrade tasks 8a22c7170 Allow overriding corosync token_timeout 4939e19ee Replace dnf by tripleo_dnf_stream for undercloud upgrade 700ab1505 Add observability_data_only bool f3ac1f976 Manage CA certificates using ansible 665391f63 Enable allowerasing in undercloud upgrade from wallaby 38dbd331c Run nova_wait_for_compute_service only for the default cell deployment f14174d35 Modify existing notes related to the firewall ae5fa916f Enable CAP_AUDIT_WRITE for some containers/steps 0074098f0 Cleanup iptables resources 6579d3c53 Use renamed task files for iscsid 3e0e7f200 iscsid: use puppet dir for configuration 7b57f966c Add new paramater "CeilometerEnableTenantDiscovery" e5ce31ac3 Drop environment for the removed upgrade converge step 2090ef676 Drop legacy networking resources 6e6300f1c Move update_tasks for tripleo-packages f1cf81eec Replace remaining usage of Net::SoftwareConfig 9cdf72876 Switch default firewall engine 90c52db21 Ensure container's image get updated if their name stay the same. 2d062714f Stop creating unused cinderv3/manilav2 keystone user 190420f1b Fix inconsistent <service>Workers fc93752ff Move releasenote to correct directory 52c806389 Designate: format listen addr properly when ipv6 7efe0063b Enable dns_domain_ports extension by default c8fba9b23 Eliminate unnecessary role looping in deploy-steps.j2 804414845 Allow all packet state for selected ironic services c9d04ce3c Remove unused conditions from undercloud post deployment 57e8fc590 Add release note for role specific ContainerImagePrepare 3e983806e Fix kill-script search string to match any "/libpod-" 0bb289c55 Switch cinder-backup default to active-active 607bfe855 Stop injecting deployment_type fact bc772b63f haproxy: Remove unused haproxy_docker hieradata key 31e96b9ce Deprecate snmp service b624324e6 new tht for Cinder NFS backend 3465111c5 Drop DeployedServer resources fea789f8e Avoid a pipe and grep call f1f224c1a Copy ssh_keys from mistral environment locally cc38db4c9 Filter excluded nodes from ansible delegates 8e9ade5f1 Convert httpd ironic_api configurations to new role ad6bc22f2 Add custom seccomp profile for ephemeral heat 7b55da1c7 Add note about Ipv6 provisioning with OVN on Undercloud 87622c6de Ceilometer: Ensure the ResellerAdmin role exists 3a929ba22 Remove the python3-openclient and add a new task. 3fda88c3a Fix tls-e CA cert declaration for FRR 3c5d5a12f Fix tls-e CA cert declaration for OVN 3b110bb1d support tripleo_etcd ansible role e4c5afeda Allow Undercloud to be deployed with Ml2 OVN 9fe769c51 Use python to template cell urls 18abde638 Add internal TLS CA file to group vars 5060be800 nova-ironic: Fix selinux denial when relabeling /var/lib/nova df78b6a3c Ensure /run/frr is present after (re)boot 67c4988a5 Fix Update ovn_controller. from external-update playbook 3e41f3636 Support actual hostnames in DeploymentServerBlacklist d6e203d57 Remove old network_data examples 96c9eb7a3 Correct label for /run/libvirt ea327964c Support role specific BannerText 5da1f2896 Neutron: Deprecate unmaintained features e53ba8c0e Replace remaining usage of /var/run 2a2fd0c47 Fix ignored EnableAodhExpirer 27e113902 RabbitMQ: Fix missing bind mount for .key file a10f0bb0e Enable post-copy by setting unprivileged_userfaultfd 90fe605cd Revert "Enable post-copy by setting unprivileged_userfaultfd" 2bd8eced8 Cinder: Remove clean up logic for old service entries d852952ec Remove unused NeutronCorePluginML2OVN service b6a7dd215 Undercloud install: Create clouds.yaml with mode 600 3e37e6647 Redis: replace hiera CLI 52c95b1d1 Do not change ownership recursive for Swift ddff14458 Add role specific settings for ovn_bgp_agent parameters 70509f5c3 Add parameter OVNEncapTos 931591d68 OVN: Fix wrong image used in external update tasks 2eef82ee5 Ironic: Fix incorrect type for integer values 63a08d229 Ironic: Require number for IronicIPXEPort 827236135 Revert "Disable [oslo_messaging_rabbit] heartbeat_in_pthread" 92ad83b1c RabbitMQ: Migrate environment/volumes definition c91eb1f17 Use NeutronInterfaceDriver parameter consistently 8646f99d6 Ironic: Remove incorrect override of api port a29eaddb0 Remove unneeded parameter tripleo_frr_ovn_bgp_agent_bridge_mappings 8e8efcfb3 Set /run/podman ACL before starting collectd 18824865c Fix nova_libvirt_max_queues_set conditions for nova-compute 3f55cbfbc Octavia Jobboard integration d3f4893eb Fix the wrong command to deploy undercloud 9545bb979 Swift: pass raw disk information directly to ansible aa424abf0 Remove argument to ssh-keygen for key size a8ce51561 Nova: Look up the host parameter from nova.conf 1bb1f5448 Fix wrong parameter type of KeystoneCronTrustFlush* 1067b0978 Fix merge of multiple firewall rules 21f0f5c7f Do not copy syslinux files 2a5262051 Remove redundant override of vhost tcp port d1fe2a989 Fix collectd-sensubility script output 3561a7caa Fix permissions for nova/libvirt VNC certs/keys e9c9478f3 Add 'ResellerAdmin' role to ceilometer user df26a8a2d Apache: Use only required modules fcabd6e69 Add auditd Service in multinode-containers.yaml 524242606 Allow for jinja2 templating of puppet_config 3d40e77a6 Allow for jinja2 templating of docker_config e03105852 Introduce ExternalCeph boolean 7f71cda2c Revert "Workaround for subscription-manager" 298463b81 Make sure sensubility has proper permission a547f1660 Disable haproxy for etcd based on CinderEtcdLocalConnect b12a1e5ce Use ansible group var to detect instance ha 819bfbe64 etcd: Use ETCD_NAME in etcd.conf 8a5e9e68d Use the new tripleo_auditd ansible role instead of puppet 21a631f13 Fix wrong parameter assignation cf4d4f881 Disable [oslo_messaging_rabbit] heartbeat_in_pthread bd8a82d42 Fix ovsdb-server for IPv6 listening addresses c7acaa28d Ensure mode is correct for the tmp directory dbf517f32 Remove resource template to deploy OVNDB at host 7494f7492 Ironic: Add parameter to tune workers 130180e99 Add ipv6 support in environments/deployed-network-environment.j2.yaml 63461f6b1 Set host_routes in environments/deployed-network-environment.j2.yaml 602de1af0 Fix net_cidr_map in environments/deployed-network-environment.j2.yaml 7d64dd990 Fix TRIPLEO_CONFIG_HASH generation a1bdbe857 Make libvirt-guests service work with deprecated monolithic libvirt 7dd0714e9 Neutron: Remove NSX plugin support ef5d2f45a Bind mount swtpm logs in libvirt virtqemud container 8592d0c71 Fix typos in log messages 6861fb324 Fix typos in comments and parameter descriptions dd6e88783 Change --start-at-task for plays using tripleo_free e728e8cc8 Use conditions with Host prep block tasks c9647167e Fix unit test discovery e5ea92a5f Redis: Switch to the new config file path d503ee5fc Heat: Present policy rules for all services 3dd4107b1 Support role specific ContainerImagePrepare c43d69c5d Enable post-copy by setting unprivileged_userfaultfd a9dc35e86 Fix conditions for libvirt_file_backed_memory_enabled cfd23004a Use tripleo_migration_target standalone ansible role 10e292613 Remove ctlplane-subnet from example file. 7b843830c Fix typo in code e2c0b8391 Set OVSDB Connection.probe_interval d0d98aa2f Default to OVN raft clustering 6c0410c74 Set force_config_drive only when OVNMetadata is disabled 4f791902a Do not override CephClientConfigVars in standalone scenarios 1a7998bfc Remove unused Config* parameters 46a985b2e Move rndc traffic onto bind network 0590dd4b9 Fix skip_list definition for yamllint ce3796aa6 Fix indirect reference to hieradata 98b48f595 [ML2 OVN] Adding DisableOvnDhcpForBaremetalPorts parameter 7761fed0c Add credentials cache for novajoin user fb4bbc5e0 Octavia: Present certificates to driver-agent 0747cff38 nova-migration-target: Re-enable sftp subsystem 6b5fdf008 Clean up cinder parameters from scenario 010 381893c0f Octavia: Mount driver-agent directories only when it is enabled 1742a8675 Fix bindep for EL9 platforms 7d76af34f Fix restarting cinder HA services on config change e7afc2274 Remove the docker-network env file. 317875903 Skip Enable cleanup service in check mode 7146d0f65 Give uefi_pxe_bootfile_name an accurate name 10a0adee0 Set the images_type parameter 4e7a44d59 Remove leftover of xinetd service support 658eaf38b Designate: Fix wrong parameter name to set mdns base port 5c272738c Configure OVN sb connections for the OVN provider c4c5d7b84 Manila: Fix missing healthcheck for api and share 6617f0e52 [ML2 OVN] Add OVNOvsdbProbeInterval parameter 8494a5abd Remove unreachable code 34a2e1ebc Remove parameters/resources for undercloud Nova 2922e8a71 Neutron: Generate wrapper scripts during config file generation 52b119f42 Add missing hidden tags for password/credential/private keys f03115cf2 Designate: support configuring non-ooo-deployed binds 8f147c914 Glance: Remove ineffective parameters ab35091c4 Remove logic to create flavor/keypair in undercloud Nova 6312d2b22 Remove unused OS::TripleO::SoftwareDeployment 3155f8c22 Remove leftover of N1kv driver support da28eef8a Allow configuring the base port of the mini DNS proxy endpoints 4832fbfbc Update sensubility's container health check 927d08066 Allow ceilometer compute agent to access /run/libvirt 9168ffa82 nova-migration-target: Simplify port configuration 2b64419f0 Deprecate redundant DockerNovaMigrationSshdPort f6ceb0bfa Add support for log offloading over TCP 91ee65408 [collectd] Remove processes plugin from default list 2188b4ff9 Make KeystoneChangePasswordUponFirstUse boolean 728d2ad43 Nova: Start nova-compute after its NFS backend is ready a38104c04 Present metrics_qdr to the haproxy service e1c7b5f6a Remove masquerade-networks-baremetal-puppet 2107a4cf8 Present ovn_dbs_manage_lb to the haproxy service d5a9d845e Add test-requirements.txt in tox-tht deps f3c76bcf0 Stop generating certificate requests for disabled networks 7c04fad72 Provide default values for ExtraConfig parameters 22952c7e1 Remove unused NovaPlacement service 66ba918c7 Deprecate CephPoolDefaultPgNum and CephPoolDefaultSize c62903f7f Fix commands for configure_ovn_north/south_db_server 645aba41a Remove duplicate entries from .gitignore 1710b9da2 Fixing typo in HAProxyBase for DCN 2e1b4ef0a Add merge strategy for ExtraConfig b9148e452 Fix undefined NeutronCorePluginML2Ansible 4cceeebc8 Galera: initial support for mariabackup SST 6c290124b Remove the Backup and Restore ReaR Heat templates 9be1ee2c5 Neutron: Migrate dvr parameters for ml2+ovs to ovs agent template be7f55bdf THT cleanup of scenario001/004/010 for Deployed Ceph a0809cbde Fix Cinder Dell EMC Powerflex backend template dfbccb0b9 Remove hieradata keys for non-bundle implementations 95a02d241 Fix Cinder Dell EMC SC backend template 226d5cb2a Comment out the empty "parameter_defaults" ba2e68501 Add SwiftSystemReader role when Rbac is enabled 340a8625c Fix typo in aodh-base template 78a51efb6 Designate: configure collocation IP on bind and neutron dns integration a1b7510b7 Adapt on puppet-rsyslog update 491fefe7c Fix ignored HeatConfigureDelegatedRoles da1e3e250 Simplify HostnameResolveNetwork in ServiceNetMap a817193ae Replace deprecated octavia::api:provider_drivers 8b39501ee Designate: Fix missing LoggingSource parameters 631e36c58 Manila: Fix missing LoggingSource parameters 8ef751c4e Fix incorrect Designate*LoggingSource 9c96fd5fe Add CephRbdTrashSchedulerEnable boolean 8297e0517 Fix rgw ssl_verify option key 30213bd0f Glance: Remove unnecessary override of [paste_deploy] config_file add91e79c nova-compute: Refactor hieradata generation 4243a1f46 Fix ignored NovaLibvirtMaxQueues e0835ccd1 Neutron: Set br-int as default integration bridge 65014b48c Keystone: Remove ineffective [ssl] enable_ssl b2639fa10 Moves the shared zuul queue tripleo to the project level 13e84c4f5 Swift: Do not enable the whole rsync::server class 376a8a46c Glance: Avoid simultaneous clean/pruner job dccd879ce Fix libvirt-guests handling post virt-guest-shutdown 86d4a348a Fix 'Ensure DNF modules have the right stream' 6db7153b3 Enable Horizon in CI 8592fc32a Ceilometer: Remove snmpd_* parameters db92d55b3 Revert "task-core basic framework" e5a071dbc ironic: Remove tasks for image migration 3290e6f9d ironic tftp: Do not format IPv6 address for bind_host ac5b16012 Octavia: Remove unnecessary neutronclient package 796f6a5dc etcd: fix service config to work with latest versions f04bec312 Render all_nodes_data in check mode 348546ea1 cinder-backup/volume: Remove unused parameters 47f642d01 Nova AZ: Remove unused AdminPassword 41801f614 Remove unused parameters from undercloud post deployment template 2a3732143 Remove leftover of the tripleo::firewall class 076c26c40 Enable use_multipath_for_image_xfer 8ee95985b Support for multiple Cinder NFS storage backends a1379a3cb nova-compute: Remove unused parameters/condition 9ed1c7b92 Restore missing SAN IP in etcd cert 2de73e762 Keystone: Remove unnecessary binds for admin endpoint 215d91865 Workaround for subscription-manager 185397553 Keystone: Get rid of unnecessary noop_resource abeb98a07 Remove remaining reference to removed services a40e5b3b6 Remove leftover of ntp service 668e3d624 Heat: Clean up leftover of CloudWatch API df58fe7bf Make NeutronEnableDVR parameter boolean eac874338 Start ceilometer-compute after libvirt is started f90f685d5 Deprecate support for networking-ansible f5963e236 Fix a syntax error in Horizon's Apache config 6168a9d4b Add new parameter in order to switch firewall engine e89088784 nova-migration-target: Restrict access to the core sshd f2b211267 Support for multiple Cinder Dell EMC VNX storage backends 97f223445 Support for multiple Cinder Dell EMC Unity storage backends 068ca82a4 Re enable DVR with ml2 ovn by default e28adc27d Fix release name in release note 0b9d3bf77 Remove redundant usage of hieradata 5a3f0f336 Remove deprecated ceph-base parameters c2a6a5664 Octavia: Migrate [health_manager] heartbeat_key to base 0f86aab78 Remove deprecated memcached::listen_ip e2b9b630d Remove deprecated parameter 5ddeac53c Set amphora timezone based on TimeZone setting d15794339 Fix service dependency on libvirt daemons e3408da15 Use tripleo_iscsid standalone ansible role 6f5a8e2d8 Use tripleo_kernel standalone role for upgrade_tasks 5139180f3 Revert "Revert "Use tripleo_keystone role"" e174fd82c Deprecate SshServerOptionsOverrides b1b989471 Manage masquerade via Ansible instead of Puppet 9f53e0ce5 Remove Docker support 8c3e0e901 Remove unused environment files for undercloud b7d34e299 Remove Keystone and Memcache from Undercloud abbd67f6f Use tripleo_ovn standalone role for external_deploy_tasks 6a55550a8 NetApp: Deprecate parameters for 7mode systems and E-Series systems 5e314d9f7 Fix run_after of certs_requests in modular libvirt 1da46d9c8 Restrict networks used by nova migration target de96a96f4 Remove redundant *_migration_ssh_inbound_addr 6c673528f Use python job template for Zed 9b06e0850 Add service OS::TripleO::Services::ManilaBackendPowerMax 3378b4c37 Fix deploy failure of keystone for undercloud aa1ad7a5d Revert "Use tripleo_keystone role" 9f2866a33 Octavia ryslog container image set incorrectly 7f6a4b438 Filter empty string in PingTestGatewayIPsMap yagl b2a35f13d Remove 'u' prefix dfcff68e3 Remove old interface from plan-sample 696fd60a7 Only specify nfsver for local Nova NFS backend 3001bc82e Undercloud: Remove iscsid service 5a3d998a2 Clean up removed services from undercloud environment e9bc8e2a0 Use tripleo_keystone role 406e4853d Remove unused libvirt_vnc_specific_ca_set condition 3eda1ad21 Drop removed tripleo::firewall parameters e64e47ebc Remove usage of tripleo::firewall d8d59c2cb Horizon: Fix missing firewall rule for ssl backend 4e1940f15 neutorn-ironic-agent: Use internal endpoint to query Neutron API eae3c2543 Remove implementation for Nuage integration d6e9f84fb Iptables rule for geneve traffic should match UNTRACKED state 8911d02f8 Add back FRR to Undercloud dee269d7a Horizon: Support Strict-Transport-Security header 280e4daaf Remove leftover of Undercloud-specific services a5d7c2f02 Add predictable IP's sample file f71723aa5 Remove legacy network-isolation env files d8604df61 Log source ips instead of controller ips in apache access log 55e7629ab Horizon: Enable client ip detection by X-Forwarded-For header 4e3d90094 Stop generating certificate requests for disabled networks e604adb95 Specify steps for some of the upgrade tasks 0da3db3b9 Install ansible.posix.debug stdout callback plugin 9f028a9a0 Pin ansible-runner <2.2.0 4611aef0b Set tls-verify false when using insecure reg aaa8ce1a6 Remove sidecar containers after SIGTERM is send to stop them 146360efa Don't cleanup catalog entries in check mode e0a338565 Disable crl file in non-pacemaker haproxy too ae900ab27 Fix manila policy override config d9fabc20e Add missing cert generation tasks to glance-api ce0686a55 Don't use hardcoded subnets in VipSubnetMap c20eeb3ac Add until to retry pulling the container images 4d91ad67f Add AdminPassword and KeystoneRegion stack outputs 3699a5689 Remove deprecated storage template and parameters a3dd02377 Define frontend firewall rules separately 6d65b784a Add DNS resolver forwarding support to Unbound ef16c081b Designate/unbound: fix typo in ctlplane subnet name d5e7fd5b1 Add IPA client service to Cell ctrlr role 32e1511b1 Drop all installed heat related parameters d24425f4a Remove non-existing worker parameters 6c26d3378 Remove label=disable for ironic related containers e94814f4a Set ownership of files in external_post_deploy_tasks b5cbc06da Remove parameter to run stunnel by systemd c11604c14 Remove ineffective ovn_remote_probe_interval 7acb4f490 Use Octavia's own default user_log_format value fef8dacd9 Octavia: Accept lists for Ciphers parameters 0e24d92e5 Swift: Get rid of xinetd configuration cdb32139b Globally disable service resource in containers ab2761541 Decouple ssh for nova migration from the host sshd 807f0e638 Heat: Remove non-existing puppet parameters ff83505e8 Replace hiera by lookup 6b2d6d9a0 Deprecate `NovaVGPUTypesDeviceAddressesMapping parameter 5c6283625 Update cinder keystone endpoints 52bf7ee05 Fix CinderDefaultVolumeType constraints 90cf6a6db Switch to stestr 73486ded4 Set rx permissions for all in /var/lib/config-data 7c3f9f1a8 Remove OvsDpdkDriverType 64c75f2f2 Remove unused freeipa_setup.sh 53d3af77f Disabling container validation when running redhat-subscription a8a24184d Nova: Disable instance usage audit by default 21c50b2e6 Move permissions from neutron to ovn-bgp abee6b765 libvirt: Fix invalid dependencies when virtlogd wrapper is enabled a5e081873 Expose new paramter `NovaMDEVTypes` ca4c49613 Cleanup usage of StackAction parameter 42506f635 Deprecate DnsServers THT parameter 0176edf25 Disable auto discovery f78ba117a Add nvidia firstboot yaml to tripleo-heat-template f41324444 Correct hieradata for neutron log rate limiting for ovn 6d0033c95 Fail at first boot if time can't be synced 936aa927d Remove StackAction/StackUpdateType 7fcaf62a8 Remove support for collectd-gnocchi 72a30f2df Ensure cell0 database uri is correct 17fadfbe0 memcached: Replace usage of hiera CLI 47ee7b2f1 OVN: Use puppet-ovn to set ovn-cms-options 86f56244a Fix missing roles for Octavia services Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 29 +- .gitignore | 5 +- .stestr.conf | 3 + .testr.conf | 4 - README.rst | 2 - baremetal-samples/baremetal_deployment.yaml | 131 ++++-- bindep.txt | 9 +- ci/README.rst | 2 +- ci/custom_ci_roles_data.yaml | 11 +- ci/environments/multinode-containers.yaml | 4 +- ci/environments/ovb-ha.yaml | 3 + .../scenario000-multinode-containers.yaml | 1 - ci/environments/scenario000-standalone.yaml | 16 +- .../scenario001-multinode-containers.yaml | 9 - ci/environments/scenario001-standalone.yaml | 23 +- ci/environments/scenario002-standalone.yaml | 1 - ci/environments/scenario003-standalone.yaml | 4 +- ci/environments/scenario004-standalone.yaml | 14 +- .../scenario007-multinode-containers.yaml | 16 + ci/environments/scenario007-standalone.yaml | 2 + .../scenario010-multinode-containers.yaml | 4 +- ci/environments/scenario010-standalone.yaml | 19 +- ci/environments/scenario013-standalone.yaml | 1 + ci/scripts/freeipa_setup.sh | 119 ----- common/common-container-setup-tasks.yaml | 3 +- common/container-puppet.sh | 12 +- common/deploy-steps-playbooks-common.yaml | 2 - ...ep-0.j2.yaml => deploy-steps-tasks-step-0.yaml} | 13 +- common/deploy-steps-tasks-step-1.yaml | 2 +- common/deploy-steps.j2 | 181 +++----- common/services/deployment-bootstrap.yaml | 71 --- common/services/deployment-host-prep.yaml | 52 --- common/services/deployment-legacy-deploy.yaml | 31 -- common/services/deployment-network.yaml | 41 -- common/services/deployment-post-deploy.yaml | 42 -- common/services/deployment-state.yaml | 104 ----- common/services/role.role.j2.yaml | 50 ++- config-download-software.yaml | 8 +- config-download-structured.yaml | 8 +- .../monitoring/collectd_check_health.py | 122 +++--- .../nova_api_ensure_default_cells.py | 161 +++++++ .../nova_statedir_ownership.py | 2 +- .../pacemaker_mutex_restart_bundle.sh | 2 +- .../pacemaker_mutex_shutdown.sh | 4 +- container_config_scripts/pacemaker_wait_bundle.sh | 2 +- .../placement_wait_for_service.py | 1 - deployed-server/ctlplane-port.yaml | 47 -- deployed-server/deployed-server.yaml | 46 -- deployment/README.rst | 9 +- deployment/aodh/aodh-api-container-puppet.yaml | 18 +- deployment/aodh/aodh-base.yaml | 4 +- .../aodh/aodh-evaluator-container-puppet.yaml | 2 +- .../aodh/aodh-listener-container-puppet.yaml | 2 +- .../aodh/aodh-notifier-container-puppet.yaml | 2 +- deployment/apache/apache-baremetal-ansible.j2.yaml | 211 +++++++++ deployment/apache/apache-baremetal-puppet.j2.yaml | 18 +- ...l-puppet.yaml => auditd-baremetal-ansible.yaml} | 17 +- .../backup-and-restore/rear-baremetal-ansible.yaml | 110 ----- .../barbican/barbican-api-container-puppet.yaml | 27 +- .../ceilometer-agent-central-container-puppet.yaml | 10 +- .../ceilometer-agent-compute-container-puppet.yaml | 4 +- ...ometer-agent-notification-container-puppet.yaml | 4 +- .../ceilometer-base-container-puppet.yaml | 12 +- deployment/cephadm/ceph-base.yaml | 181 +++----- deployment/cephadm/ceph-client.yaml | 2 + deployment/cephadm/ceph-grafana.yaml | 24 +- deployment/cephadm/ceph-mgr.yaml | 6 + deployment/cephadm/ceph-osd.yaml | 2 +- deployment/cephadm/ceph-rgw.yaml | 12 +- ...puppet.yaml => ca-certs-baremetal-ansible.yaml} | 12 +- deployment/cinder/cinder-api-container-puppet.yaml | 63 ++- .../cinder-backend-dellemc-powerflex-puppet.yaml | 2 +- .../cinder-backend-dellemc-powermax-puppet.yaml | 2 +- .../cinder/cinder-backend-dellemc-sc-puppet.yaml | 5 +- .../cinder-backend-dellemc-unity-puppet.yaml | 11 +- .../cinder/cinder-backend-dellemc-vnx-puppet.yaml | 11 +- .../cinder/cinder-backend-dellsc-puppet.yaml | 154 ------- .../cinder/cinder-backend-netapp-puppet.yaml | 42 +- deployment/cinder/cinder-backend-nfs-puppet.yaml | 109 +++++ .../cinder/cinder-backend-nvmeof-puppet.yaml | 2 +- deployment/cinder/cinder-backend-pure-puppet.yaml | 2 +- .../cinder/cinder-backup-container-puppet.yaml | 4 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 16 +- .../cinder/cinder-scheduler-container-puppet.yaml | 2 +- .../cinder/cinder-volume-container-puppet.yaml | 75 +--- .../cinder/cinder-volume-pacemaker-puppet.yaml | 16 +- ...ntainer-image-prepare-baremetal-ansible.j2.yaml | 9 + deployment/containers-common.yaml | 6 +- deployment/database/mysql-base.yaml | 4 +- deployment/database/mysql-client.yaml | 2 +- deployment/database/mysql-container-puppet.yaml | 4 + deployment/database/mysql-pacemaker-puppet.yaml | 67 +-- deployment/database/redis-base-puppet.yaml | 2 +- deployment/database/redis-container-puppet.yaml | 25 +- deployment/database/redis-pacemaker-puppet.yaml | 35 +- .../etcd-container-puppet.yaml | 32 +- .../neutron-bgpvpn-api-container-puppet.yaml | 0 .../neutron-bgpvpn-bagpipe-baremetal-puppet.yaml | 2 +- .../neutron-l2gw-agent-baremetal-puppet.yaml | 0 .../neutron/neutron-l2gw-api-container-puppet.yaml | 0 ...neutron-linuxbridge-agent-baremetal-puppet.yaml | 3 +- ...eutron-plugin-ml2-ansible-container-puppet.yaml | 0 .../nova/nova-libvirt-container-puppet.yaml | 53 ++- .../snmp/snmp-baremetal-puppet.yaml | 5 + .../designate/designate-api-container-puppet.yaml | 18 +- deployment/designate/designate-base.yaml | 6 + deployment/designate/designate-bind-container.yaml | 110 ++++- .../designate-central-container-puppet.yaml | 53 ++- .../designate/designate-mdns-container-puppet.yaml | 45 +- .../designate-producer-container-puppet.yaml | 2 +- .../designate/designate-sink-container-puppet.yaml | 10 +- .../designate-worker-container-puppet.yaml | 24 +- deployment/etcd/etcd-container-ansible.yaml | 334 ++++++++++++++ deployment/experimental/README.rst | 2 +- deployment/frr/frr-container-ansible.yaml | 58 ++- deployment/glance/glance-api-container-puppet.yaml | 62 ++- .../glance/glance-api-edge-container-puppet.yaml | 19 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 16 +- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 13 +- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 2 +- deployment/haproxy/haproxy-container-puppet.yaml | 40 +- .../haproxy/haproxy-edge-container-puppet.yaml | 12 +- .../haproxy-internal-tls-certmonger.j2.yaml | 27 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 35 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 2 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 16 +- .../heat/heat-api-cloudwatch-disabled-puppet.yaml | 36 -- deployment/heat/heat-api-container-puppet.yaml | 31 +- deployment/heat/heat-base-puppet.yaml | 11 +- deployment/heat/heat-engine-container-puppet.yaml | 15 +- .../heat/heat-ephemeral-container-ansible.yaml | 18 + deployment/horizon/horizon-container-puppet.yaml | 35 +- .../image-serve/image-serve-baremetal-ansible.yaml | 7 + deployment/ipa/ipaservices-baremetal-ansible.yaml | 26 +- deployment/ipsec/ipsec-baremetal-ansible.yaml | 2 +- deployment/ironic/ironic-api-container-puppet.yaml | 87 ++-- .../ironic/ironic-conductor-container-puppet.yaml | 62 +-- .../ironic/ironic-inspector-container-puppet.yaml | 21 +- .../ironic-neutron-agent-container-puppet.yaml | 1 + deployment/ironic/ironic-pxe-container-puppet.yaml | 29 +- deployment/iscsid/iscsid-container-puppet.yaml | 81 +--- deployment/kernel/kernel-baremetal-ansible.yaml | 20 +- .../kernel-boot-params-baremetal-ansible.yaml | 20 +- deployment/keystone/keystone-container-puppet.yaml | 248 ++++------- deployment/logging/files/keystone.yaml | 12 +- deployment/logging/rsyslog-container-puppet.yaml | 11 +- .../login-defs/login-defs-baremetal-ansible.yaml | 4 +- .../logrotate-crond-container-puppet.yaml | 4 +- deployment/manila/manila-api-container-puppet.yaml | 49 ++- deployment/manila/manila-backend-cephfs.yaml | 17 - deployment/manila/manila-backend-isilon.yaml | 13 - deployment/manila/manila-backend-vmax.yaml | 13 - deployment/manila/manila-backend-vnx.yaml | 13 - .../manila/manila-scheduler-container-puppet.yaml | 14 +- .../manila/manila-share-container-puppet.yaml | 14 +- .../manila/manila-share-pacemaker-puppet.yaml | 4 +- ... => masquerade-networks-baremetal-ansible.yaml} | 16 +- .../memcached/memcached-container-puppet.yaml | 77 ++-- .../messaging/rpc-qdrouterd-container-puppet.yaml | 2 +- deployment/metrics/collectd-container-ansible.yaml | 12 +- deployment/metrics/collectd-container-puppet.yaml | 198 ++------- deployment/metrics/qdr-container-ansible.yaml | 71 +-- deployment/metrics/qdr-container-puppet.yaml | 6 +- .../neutron/derive_pci_passthrough_whitelist.py | 16 +- deployment/neutron/kill-script | 12 +- .../neutron-agents-ib-config-container-puppet.yaml | 6 +- .../neutron/neutron-api-container-puppet.yaml | 53 ++- deployment/neutron/neutron-base.yaml | 2 +- .../neutron/neutron-compute-plugin-nuage.yaml | 103 ----- .../neutron/neutron-controller-plugin-nuage.yaml | 72 ---- .../neutron/neutron-dhcp-container-puppet.yaml | 36 +- .../neutron/neutron-l3-container-puppet.yaml | 39 +- .../neutron/neutron-metadata-container-puppet.yaml | 14 +- .../neutron-ovs-agent-container-puppet.yaml | 38 +- deployment/neutron/neutron-plugin-ml2-nuage.yaml | 114 ----- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 27 +- deployment/neutron/neutron-plugin-ml2.yaml | 6 +- .../neutron-plugin-nsx-container-puppet.yaml | 125 ------ .../neutron-sriov-agent-container-puppet.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 124 ++---- deployment/nova/nova-az-config.yaml | 27 +- deployment/nova/nova-base-puppet.yaml | 4 +- .../nova/nova-compute-common-container-puppet.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 198 +++++---- .../nova/nova-conductor-container-puppet.yaml | 7 +- deployment/nova/nova-ironic-container-puppet.yaml | 2 +- deployment/nova/nova-libvirt-common.yaml | 2 +- .../nova/nova-metadata-container-puppet.yaml | 16 +- .../nova-migration-target-container-puppet.yaml | 154 +++---- .../nova-modular-libvirt-container-puppet.yaml | 83 ++-- .../nova/nova-scheduler-container-puppet.yaml | 3 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 106 ++--- .../octavia/octavia-api-container-puppet.yaml | 105 +++-- deployment/octavia/octavia-base.yaml | 224 ++++++---- .../octavia/octavia-deployment-config.j2.yaml | 13 +- .../octavia-health-manager-container-puppet.yaml | 23 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 28 +- .../octavia/providers/ovn-provider-config.yaml | 5 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 16 - .../ovn/ovn-controller-container-puppet.yaml | 110 +++-- deployment/ovn/ovn-dbs-cluster-ansible.yaml | 49 ++- deployment/ovn/ovn-dbs-container-puppet.yaml | 63 ++- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 24 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 53 +-- .../pacemaker/clustercheck-container-puppet.yaml | 4 +- .../compute-instanceha-baremetal-puppet.yaml | 2 +- deployment/pacemaker/ovn-dbs-baremetal-puppet.yaml | 61 --- .../pacemaker/pacemaker-baremetal-puppet.yaml | 21 +- .../pacemaker-remote-baremetal-puppet.yaml | 4 +- .../placement/placement-api-container-puppet.yaml | 15 +- deployment/podman/podman-baremetal-ansible.yaml | 20 +- deployment/qdr/qdrouterd-container-puppet.yaml | 2 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 12 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 4 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 20 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 2 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 4 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 20 +- deployment/rhsm/rhsm-baremetal-ansible.yaml | 17 +- deployment/snmp/snmpd-disabled-puppet.yaml | 85 ++++ deployment/sshd/sshd-baremetal-ansible.yaml | 73 ++-- deployment/sshd/sshd-baremetal-puppet.yaml | 94 ---- deployment/swift/swift-proxy-container-puppet.yaml | 21 +- .../swift/swift-storage-container-puppet.yaml | 56 +-- deployment/time/ptp-baremetal-ansible.yaml | 2 +- .../timemaster/timemaster-baremetal-ansible.yaml | 4 +- deployment/timesync/chrony-baremetal-ansible.yaml | 4 +- .../tripleo-firewall-baremetal-ansible.yaml | 59 +-- .../tripleo-packages-baremetal-puppet.yaml | 104 ++--- deployment/unbound/unbound-container-ansible.yaml | 135 +++--- deployment/undercloud/undercloud-upgrade.yaml | 18 +- environments/auditd.yaml | 77 ++-- environments/backup-and-restore/rear.yaml | 3 - environments/barbican-backend-pkcs11-atos.yaml | 4 +- environments/cinder-backup-active-passive.yaml | 2 + environments/cinder-backup.yaml | 4 +- environments/cinder-dellemc-unity-config.yaml | 14 + environments/cinder-dellemc-vnx-config.yaml | 14 + environments/cinder-netapp-config.yaml | 5 - environments/cinder-nfs-config.yaml | 21 + environments/cinder-volume-active-active.yaml | 2 +- environments/composable-roles/monolithic-ha.yaml | 13 - .../composable-roles/monolithic-nonha.yaml | 13 - environments/composable-roles/standalone.yaml | 25 -- environments/dcn-storage.yaml | 6 +- environments/dcn.yaml | 4 - environments/deployed-network-environment.j2.yaml | 19 +- .../deployed-server-deployed-neutron-ports.yaml | 1 - environments/deployed-server-environment.j2.yaml | 14 +- environments/deployed-server-noop-ctlplane.yaml | 4 +- environments/disable-heat.yaml | 1 - environments/disable-neutron.yaml | 5 - environments/docker-ha.yaml | 6 +- environments/docker-network.yaml | 2 - environments/enable-designate.yaml | 2 +- environments/enable-legacy-telemetry.yaml | 1 + environments/enable-stf.yaml | 4 +- environments/external-ceph.yaml | 1 + environments/firewall.yaml | 4 +- environments/ha-redis.yaml | 2 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 2 +- environments/lifecycle/update-prepare.yaml | 2 +- environments/lifecycle/upgrade-converge.yaml | 9 - environments/lifecycle/upgrade-prepare.yaml | 3 +- environments/low-memory-usage.yaml | 2 - environments/manila-cephfsganesha-config.yaml | 2 +- environments/manila-isilon-config.yaml | 1 - environments/manila-vmax-config.yaml | 1 - environments/manila-vnx-config.yaml | 1 - environments/metrics/ceilometer-write-qdr.yaml | 1 + environments/metrics/collectd-read-rabbitmq.yaml | 8 +- environments/net-2-linux-bonds-with-vlans.j2.yaml | 4 - .../net-bond-with-vlans-no-external.j2.yaml | 17 +- environments/net-bond-with-vlans.j2.yaml | 4 - environments/net-dpdkbond-with-vlans.j2.yaml | 4 - environments/net-multiple-nics-vlans.j2.yaml | 4 - environments/net-multiple-nics.j2.yaml | 4 - environments/net-noop.j2.yaml | 5 +- .../net-single-nic-linux-bridge-with-vlans.j2.yaml | 4 - .../net-single-nic-with-vlans-no-external.j2.yaml | 3 - environments/net-single-nic-with-vlans.j2.yaml | 4 - environments/network-environment-v6-all.j2.yaml | 12 - environments/network-environment-v6.j2.yaml | 8 - environments/network-environment.j2.yaml | 8 - .../network-isolation-no-tunneling.j2.yaml | 44 -- environments/network-isolation-v6-all.j2.yaml | 50 --- environments/network-isolation-v6.j2.yaml | 57 --- environments/network-isolation.j2.yaml | 38 -- environments/neutron-bgpvpn-bagpipe.yaml | 4 +- environments/neutron-bgpvpn.yaml | 3 +- environments/neutron-l2gw.yaml | 4 +- environments/neutron-linuxbridge.yaml | 3 +- environments/neutron-ml2-ansible.yaml | 1 + environments/neutron-ml2-vpp.yaml | 7 +- environments/neutron-nsx.yaml | 17 - environments/neutron-nuage-config.yaml | 38 -- environments/nova-cell.yaml | 4 - environments/nova-nuage-config.yaml | 12 - environments/nsx-config.yaml | 22 - environments/podman-ha.yaml | 21 + environments/rhsm.yaml | 44 +- environments/services-baremetal/etcd.yaml | 2 +- .../services-baremetal/neutron-ovn-dvr-ha.yaml | 3 +- .../services-baremetal/neutron-ovn-ha.yaml | 3 +- .../services-baremetal/undercloud-ceilometer.yaml | 8 - .../services-baremetal/undercloud-cinder.yaml | 4 - .../services-baremetal/undercloud-gnocchi.yaml | 5 - .../services-baremetal/undercloud-haproxy.yaml | 2 - environments/services/designate.yaml | 2 +- environments/services/etcd.yaml | 2 +- environments/services/masquerade-networks.yaml | 2 +- environments/services/neutron-ml2-ansible.yaml | 1 + environments/services/neutron-mlnx-agent.yaml | 1 + environments/services/neutron-ovn-dvr-ha.yaml | 3 +- environments/services/neutron-ovn-ha.yaml | 3 +- environments/services/neutron-ovn-standalone.yaml | 3 +- environments/services/undercloud-cinder.yaml | 6 - .../services/undercloud-neutron-ovn-dhcp.yaml | 31 ++ environments/standalone/standalone-overcloud.yaml | 6 +- environments/standalone/standalone-tripleo.yaml | 8 +- environments/storage/cinder-netapp-config.yaml | 28 -- environments/undercloud-enable-keystone.yaml | 12 - environments/undercloud-enable-nova.yaml | 34 -- environments/undercloud-enable-swift.yaml | 12 - environments/undercloud.yaml | 61 +-- environments/updates/README.md | 2 +- .../update-from-deployed-server-newton.yaml | 2 - .../post_deploy/undercloud_ctlplane_network.py | 8 +- extraconfig/post_deploy/undercloud_post.py | 65 +-- extraconfig/post_deploy/undercloud_post.sh | 2 +- extraconfig/post_deploy/undercloud_post.yaml | 37 +- firstboot/.gitkeep | 0 firstboot/conntectx3_streering.yaml | 31 -- firstboot/os-net-config-mappings.yaml | 51 --- firstboot/userdata_default.yaml | 20 - firstboot/userdata_dev_rsync.yaml | 49 --- firstboot/userdata_example.yaml | 59 --- firstboot/userdata_heat_admin.yaml | 35 -- firstboot/userdata_root_password.yaml | 38 -- firstboot/userdata_timesync.yaml | 98 ----- network/endpoints/endpoint_map.yaml | 478 ++------------------- network/network.j2 | 333 -------------- network/network.network.j2.yaml | 1 - network/network_v6.network.j2.yaml | 2 - network/ovn_mac_addr_net.yaml | 37 -- .../ports/external_resource_port.network.j2.yaml | 2 - .../external_resource_port_v6.network.j2.yaml | 3 - network/ports/from_service_v6.yaml | 8 +- network/ports/ovn_mac_addr_port.yaml | 48 --- network/ports/port.j2 | 153 ------- network/ports/port.network.j2.yaml | 1 - network/ports/port_v6.network.j2.yaml | 2 - network/service_net_map.j2.yaml | 2 +- network_data.yaml | 150 ------- network_data_dashboard.yaml | 128 ------ network_data_ganesha.yaml | 170 -------- network_data_routed.yaml | 211 --------- network_data_subnets_routed.yaml | 188 -------- overcloud-resource-registry-puppet.j2.yaml | 88 ++-- overcloud.j2.yaml | 189 +++----- plan-samples/plan-environment-derived-params.yaml | 38 +- puppet/role.role.j2.yaml | 137 +----- ...Unbound-forwarder-support-8f29e47d4275a798.yaml | 5 + ...swordUponFirstUse-boolean-a3b35fa933da1d6b.yaml | 5 + .../notes/OVNEncapTos-d3312e58600050b3.yaml | 7 + ...-name-discovery-parameter-a113a6de8a220408.yaml | 7 + ...avia-log-offload-protocol-dfc5d8387c3d83bc.yaml | 5 + ...cp-for-baremetal-disabled-4bc4e648da33f4da.yaml | 5 + ...-ovn-ovsdb-probe-interval-243e66290a72eb3c.yaml | 6 + ...-ovn-ovsdb-probe-interval-7ec6aa7f68b9a133.yaml | 8 + .../notes/auditd-to-ansible-f39bd119bf25320e.yaml | 13 + .../notes/bug-1984222-bd32dbd29741ad51.yaml | 4 + .../notes/ca-certs-ansible-7a06114f0571d7f3.yaml | 5 + ...le-dellemc_unity-backends-96c6d2764209e317.yaml | 7 + ...iple-dellemc_vnx-backends-930c8e9309a6ccf5.yaml | 7 + ...der-multiple-nfs-backends-a6b7a107be066596.yaml | 12 + .../cinder-v3-endpoints-498e00f96e77f3c6.yaml | 5 + ...kup_default_switch_to_A-A-4adb439183be78f0.yaml | 11 + ..._nfs_backend_new_template-21243ef33346ed9a.yaml | 9 + ...eanup-heat-api-cloudwatch-f12315e86c7f12d4.yaml | 5 + .../notes/cleanup-xinetd-e2f59fda914b32d9.yaml | 6 + ...-processes-plugin-default-1d07c9ddfde0c2f7.yaml | 6 + .../corosync_token_timeout-d674c873c505cfe6.yaml | 6 + ...fault-ovn-to-raft-cluster-9a1fb213d28d0650.yaml | 16 + .../deprecate-DnsServers-a65541c2dceced08.yaml | 15 + ...pesDeviceAddressesMapping-b4af9f1a48b66854.yaml | 6 + ...ptionsOverrides-parameter-40820bd943e20018.yaml | 5 + ..._nova_migration_sshd_port-b99c1ba0ac012276.yaml | 5 + ...recate-networking-ansible-11004424696a71a4.yaml | 5 + ...ate-neutron-host-services-93a7187fdebe0302.yaml | 9 + ...te-removed-netapp-systems-15c58d7e807ba33a.yaml | 18 + .../notes/deprecate-snmp-084d9e625f4f4e56.yaml | 5 + ...recate_ceph_pg_num_in_tht-91fe6303cc5ba07e.yaml | 13 + .../dnf-streams-interface-c7191173efb7b139.yaml | 8 + ...orts-extension-by-default-4a620563ff5954d6.yaml | 5 + ...atConfigureDelegatedRoles-d16ddb5eb037c4c8.yaml | 10 + ...-yaql-filter-empty-string-b024ce1bce9754ef.yaml | 11 + ...missing-roles-for-octavia-ca024308bf15f0cf.yaml | 4 + .../galera-sst-mariabackup-5a667eed1787353f.yaml | 17 + .../notes/horizon-hsts-43ac1c7b602a4381.yaml | 6 + .../notes/ironic-workers-e752707221a86c36.yaml | 5 + .../notes/libvirt_swtpm_logs-a3ba8c5dcbd53c8c.yaml | 5 + .../notes/mdev_types-84da20d1791afbd2.yaml | 4 + releasenotes/notes/nftables-13caf0261a170667.yaml | 21 + ...nova-instance_usage_audit-dfb17d89446352ae.yaml | 10 + ...e-NeutronCorePluginML2OVN-8641be21f069c1bd.yaml | 6 + .../remove-NovaPlacement-c33569f37b788eaf.yaml | 5 + .../notes/remove-docker-ef1f16744ff03979.yaml | 6 + ...emove-heat-installed-rear-feae3174fb303416.yaml | 6 + ...ove-iscsi-from-undercloud-b7424ffcdc9c02ea.yaml | 5 + .../remove-legacy-networking-e9b7f996722bb93b.yaml | 11 + .../remove-misspelt-param-eeeea6fab711932e.yaml | 5 + .../notes/remove-nsx-support-e118640eebf0ce23.yaml | 6 + .../remove-puppet-masquerade-28ae63cfa7f613d6.yaml | 9 + ...ve-stack-action-parameter-285044bb49ad1f5b.yaml | 5 + .../remove-uc-nova-params-edff776d30992aa3.yaml | 20 + ...move-unused-glance-params-ae24869fef23fa06.yaml | 6 + ...rage-templates-and-params-a2707785af9f617b.yaml | 13 + .../notes/role-image-prepare-602ee8bf86463a97.yaml | 6 + .../set-amphora-timezone-d62de55c993c5d70.yaml | 5 + ...ployment-server-blacklist-532221db0e7d2bef.yaml | 5 + ...ft-do-not-chown-recursive-1086879873cd9fa6.yaml | 7 + ...n-user-log-format-default-3e9bb40c678388fc.yaml | 6 + releasenotes/source/conf.py | 16 +- roles/BlockStorage.yaml | 2 - roles/CellController.yaml | 12 +- roles/CephStorage.yaml | 1 - roles/Compute.yaml | 4 - roles/ComputeAlt.yaml | 1 - roles/ComputeDVR.yaml | 1 - roles/ComputeHCI.yaml | 1 - roles/ComputeHCIOvsDpdk.yaml | 1 - roles/ComputeHCISriov.yaml | 2 - roles/ComputeInstanceHA.yaml | 1 - roles/ComputeLocalEphemeral.yaml | 1 - roles/ComputeOvsDpdk.yaml | 2 - roles/ComputeOvsDpdkRT.yaml | 1 - roles/ComputeOvsDpdkSriov.yaml | 1 - roles/ComputeOvsDpdkSriovRT.yaml | 1 - roles/ComputePPC64LE.yaml | 1 - roles/ComputeRBDEphemeral.yaml | 1 - roles/ComputeRealTime.yaml | 1 - roles/ComputeSriov.yaml | 1 - roles/ComputeSriovIB.yaml | 1 - roles/ComputeSriovRT.yaml | 1 - roles/ComputeVdpa.yaml | 1 - roles/Controller.yaml | 9 +- roles/ControllerAllNovaStandalone.yaml | 3 +- roles/ControllerNoCeph.yaml | 5 +- roles/ControllerNovaStandalone.yaml | 4 +- roles/ControllerOpenstack.yaml | 3 +- roles/ControllerSriov.yaml | 9 +- roles/ControllerStorageDashboard.yaml | 6 +- roles/ControllerStorageNfs.yaml | 6 +- roles/Database.yaml | 1 - roles/DistributedCompute.yaml | 1 - roles/DistributedComputeHCI.yaml | 1 - roles/DistributedComputeHCIScaleOut.yaml | 1 - roles/DistributedComputeScaleOut.yaml | 1 - roles/HciCephAll.yaml | 1 - roles/HciCephFile.yaml | 1 - roles/HciCephMon.yaml | 1 - roles/HciCephObject.yaml | 1 - roles/IronicConductor.yaml | 1 - roles/Messaging.yaml | 1 - roles/Networker.yaml | 1 - roles/NetworkerSriov.yaml | 1 - roles/Novacontrol.yaml | 1 - roles/ObjectStorage.yaml | 4 - roles/README.rst | 2 +- roles/Standalone.yaml | 4 +- roles/Telemetry.yaml | 1 - roles/Undercloud.yaml | 10 +- roles_data.yaml | 20 +- roles_data_undercloud.yaml | 10 +- sample-env-generator/composable-roles.yaml | 53 --- sample-env-generator/dcn.yaml | 6 +- sample-env-generator/nova-cell.yaml | 4 - sample-env-generator/ssl.yaml | 2 +- sample-env-generator/standalone.yaml | 20 +- sample-env-generator/storage.yaml | 33 +- scripts/check-run-nova-compute | 38 +- scripts/undercloud-upgrade-ephemeral-heat.py | 37 +- setup.py | 1 + test-requirements.txt | 1 + tools/convert_heat_nic_config_to_ansible_j2.py | 4 +- tools/convert_nic_config.py | 4 +- tools/convert_policy_yaml_to_heat_template.py | 2 +- tools/merge-new-params-nic-config-script.py | 11 +- tools/process-templates.py | 10 +- tools/yaml-diff.py | 2 +- tools/yaml-validate.py | 34 +- tox.ini | 16 +- tripleo_heat_templates/environment_generator.py | 18 +- zuul.d/layout.yaml | 4 +- 502 files changed, 5040 insertions(+), 8121 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 90fd4a994..d59d447df 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,0 +14 @@ testtools>=2.2.0 # MIT +stestr>=2.0.0 # Apache-2.0