We exuberantly announce the release of: puppet-tripleo 14.1.0: Puppet module for OpenStack TripleO This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 14.1.0 ^^^^^^ New Features ************ * Add ability to specify the memcache_security_strategy and memcache_secret_key for keystone authtoken middleware. The keys used by individual services are hashed with a salt (the service name), to isolate them. * New "tripleo::profile::base::cinder::backup::gcs" and "tripleo::profile::base::cinder::backup::s3" classes add support for configuring the cinder backup service's GCS (Google Cloud service) and Amazon S3 backends. * Add support for configuring multiple cinder RBD backends, each associated with a different ceph cluster. * Add parameter for setting monitor interval for ovndbs (default is 30s) * Add posibilities to configure replication_probe_interval for ovsdb- server. It configure probe interval for connection for ovsdb- server when it is in backup mode and connects to the active ovsdb- server for replication Upgrade Notes ************* * The following deprecated parameters in the "tripleo::profile::base::nova::api" class have been removed. * "nova_metadata_network" * "metadata_tls_proxy_bind_ip" * "metadata_tls_proxy_fqdn" * "metadata_tls_proxy_port" * Remove deprecated tripleo::profile::base::cinder::volume::dellemc_xtremio_iscsi. Use tripleo::profile::base::cinder::volume::dellemc_xtremio instead. Deprecation Notes ***************** * Remove support for puppet_certmonger. All certificates are now managed by the linux-system-roles.certificate ansible role configured from each service's heat template. ::tripleo::certmonger puppet files are removed. Bug Fixes ********* * libvirt 6.8.0 introduces virt-ssh-helper which prepends the libvirt ssh command with a "which virt-ssh-helper". libvirt used to first check for *nc* (netcat). But these two libvirt commits[1][2] have now changed it to first look for *virt-ssh-helper*, if it not available, then fall back to *nc*. This trips up the 'nova- migration-wrapper' as it does not support virt-ssh-helper atm. Until this is implemented, this change force to use "netcat" (*nc*) by appending to the migration URI: "&proxy=netcat" [1] https://libvirt.org/git/?p=libvirt.git;a=commit;h=f8ec7c842d (rpc: use new virt-ssh-helper binary for remote tunnelling, 2020-07-08) [2] https://libvirt.org/git/?p=libvirt.git;a=commit;h=7d959c302d (rpc: Fix virt-ssh-helper detection, 2020-10-27) * Bug #1915800 (https://bugs.launchpad.net/cinder/+bug/1915800): Add support for ports filtering in XtremIO driver. Changes in puppet-tripleo 14.0.0..14.1.0 ---------------------------------------- 21bb81dd Bump metadata.json major to 14.1.0 for TripleO wallaby release 57383212 Remove the manifest for the Keepalived service 52a9396a cinder: remove support for the Veritas HyperScale Driver 48832c96 Remove puppet-certmonger related puppet-files 7486679c Remove redundant import of barbican::keystone::authtoken 92c76046 Add haproxy prometheus/alertmanager endpoint for Ceph Dashboard 1afa7f5a Remove deprecated dellemc_xtremio_iscsi resource 59076017 Move stonith resource creation to step2 0b51d825 Allow ovn_db_host to be of type array 6aa46811 Gnocchi: Do not manage facl of ceph keyring 885c540c Always update the local certmonger ca cert 14528b26 cinder: remove ineffective implementation about key_mgr_backend 22a5dd19 Add cinder RBD support for multiple ceph clusters 0dcb1290 Handle cinder volume type for multiple cinder stores 852d753b Remove the unused list_to_zookeeper_hash function 0cfd1160 Swift: Include puppet classes for gatekeeper and listing_formats 8d76ecab Enable configuration of omamqp1 plugin c06f6f3f Add support for cinder-backup GCS and S3 backends d8988a10 Add support for configuring designate DNS backend 844e7919 Drop old cruft-removal code in ovn_dbs_bundle cc9c81db Fix novavnc haproxy network 56fe3433 Add parameter for chap_algs in iscsid.conf 27528965 Include the nova::glance class in more common place 4586911e Fix memcached restart on cert renewal 04a97f92 Fix live-migration with libvirt >= 6.8.0 62063946 Replace deprecated zuul template tripleo-standalone-multinode-ipa 5ffbfbb8 Add replication_probe_interval for ovsdbs 61c61c89 Add monitor interval for ovn dbs ef44eebd Set ovn_chassis_mac_map in ovn::controller bcf9c9ee Remove unnecessary usage of hiera 36a39af9 Add new nova::compute::provider class to compute nodes 4c981b57 Add ports filtering support to XtremIO Cinder driver a2dbbaed Handle cinder_mount_point_base for cinder mounting needs 9466c801 Add parameters for multipath connection in cinder store ff14ad4c Remove support for networking-cisco 8310c55b Neutron: remove support for N1kv driver c376d64e Refactor how key manager backend is set 072785e5 Include nova::glance class 59b54b6f Add authtoken security options 91629ff6 Remove parameters to manage keystone resources and volume type 5ec22bbd Remove the unused tripleo::host::sriov class 337a7855 Revert "Revert "Update horizon manifest to use new ssl variable names"" 021a94e6 Remove the wrongly placed release note files ee2f1b8f Clean up deprecated parameters for nova metadata eventlet service 99544cf5 Include nova::compute::image_cache class explicitly ed78eacb Update the community page. Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 6 +- files/certmonger-dashboard-refresh.sh | 10 - files/certmonger-etcd-refresh.sh | 25 -- files/certmonger-grafana-refresh.sh | 9 - files/certmonger-haproxy-refresh.sh | 54 ---- files/certmonger-memcached-refresh.sh | 18 -- files/certmonger-metrics-qdr-refresh.sh | 24 -- files/certmonger-neutron-dhcpd-refresh.sh | 21 -- files/certmonger-novnc-proxy-refresh.sh | 17 -- files/certmonger-rabbitmq-refresh.sh | 17 -- files/certmonger-redis-refresh.sh | 14 - files/certmonger-rgw-refresh.sh | 9 - files/cm_ipa_subca_wrapper.py | 74 ----- lib/puppet/functions/list_to_zookeeper_hash.rb | 24 -- lib/puppet/provider/sriov_vf_config/numvfs.rb | 129 --------- lib/puppet/type/sriov_vf_config.rb | 10 - manifests/certmonger/apache_dirs.pp | 55 ---- manifests/certmonger/ca/crl.pp | 165 ----------- manifests/certmonger/ca/libvirt_vnc.pp | 65 ----- manifests/certmonger/ca/local.pp | 46 --- manifests/certmonger/ca/qemu.pp | 65 ----- manifests/certmonger/ceph_dashboard.pp | 87 ------ manifests/certmonger/ceph_grafana.pp | 87 ------ manifests/certmonger/ceph_rgw.pp | 123 -------- manifests/certmonger/etcd.pp | 92 ------ manifests/certmonger/haproxy.pp | 159 ---------- manifests/certmonger/haproxy_dirs.pp | 55 ---- manifests/certmonger/httpd.pp | 86 ------ manifests/certmonger/libvirt.pp | 86 ------ manifests/certmonger/libvirt_dirs.pp | 56 ---- manifests/certmonger/libvirt_vnc.pp | 122 -------- manifests/certmonger/libvirt_vnc_dirs.pp | 56 ---- manifests/certmonger/memcached.pp | 85 ------ manifests/certmonger/metrics_qdr.pp | 89 ------ manifests/certmonger/mysql.pp | 78 ----- manifests/certmonger/neutron.pp | 84 ------ manifests/certmonger/neutron_ovn.pp | 76 ----- manifests/certmonger/novnc_proxy.pp | 97 ------- manifests/certmonger/openvswitch.pp | 80 ----- manifests/certmonger/ovn_controller.pp | 76 ----- manifests/certmonger/ovn_dbs.pp | 75 ----- manifests/certmonger/ovn_metadata.pp | 76 ----- manifests/certmonger/ovn_octavia.pp | 76 ----- manifests/certmonger/qemu.pp | 108 ------- manifests/certmonger/qemu_dirs.pp | 41 --- manifests/certmonger/qemu_nbd_dirs.pp | 42 --- manifests/certmonger/rabbitmq.pp | 84 ------ manifests/certmonger/redis.pp | 91 ------ manifests/haproxy.pp | 36 ++- manifests/host/sriov.pp | 31 -- manifests/host/sriov/numvfs_persistence.pp | 88 ------ manifests/keepalived.pp | 201 ------------- manifests/profile/base/aodh/authtoken.pp | 21 +- manifests/profile/base/barbican/api.pp | 1 - manifests/profile/base/barbican/authtoken.pp | 21 +- manifests/profile/base/certmonger_user.pp | 322 --------------------- manifests/profile/base/cinder/api.pp | 36 +-- manifests/profile/base/cinder/authtoken.pp | 21 +- manifests/profile/base/cinder/backup/gcs.pp | 56 ++++ manifests/profile/base/cinder/backup/s3.pp | 36 +++ manifests/profile/base/cinder/volume.pp | 87 ++---- .../profile/base/cinder/volume/dellemc_xtremio.pp | 2 + .../base/cinder/volume/dellemc_xtremio_iscsi.pp | 52 ---- manifests/profile/base/cinder/volume/rbd.pp | 63 ++-- .../base/cinder/volume/veritas_hyperscale.pp | 45 --- manifests/profile/base/database/mysql.pp | 3 - manifests/profile/base/designate/authtoken.pp | 21 +- manifests/profile/base/designate/backend.pp | 41 +++ manifests/profile/base/glance/authtoken.pp | 21 +- manifests/profile/base/glance/backend/cinder.pp | 61 ++-- manifests/profile/base/gnocchi/api.pp | 14 +- manifests/profile/base/gnocchi/authtoken.pp | 21 +- manifests/profile/base/heat/authtoken.pp | 21 +- manifests/profile/base/horizon.pp | 13 +- manifests/profile/base/ironic/authtoken.pp | 21 +- .../profile/base/ironic_inspector/authtoken.pp | 21 +- manifests/profile/base/iscsid.pp | 38 ++- manifests/profile/base/keystone.pp | 14 - manifests/profile/base/logging/rsyslog.pp | 107 ++++--- manifests/profile/base/manila/authtoken.pp | 21 +- manifests/profile/base/mistral/authtoken.pp | 21 +- manifests/profile/base/neutron/agents/ovn.pp | 32 +- manifests/profile/base/neutron/authtoken.pp | 21 +- manifests/profile/base/neutron/n1k.pp | 54 ---- manifests/profile/base/neutron/ovn_metadata.pp | 12 +- manifests/profile/base/neutron/plugins/ml2.pp | 13 - manifests/profile/base/neutron/plugins/ml2/ovn.pp | 14 +- manifests/profile/base/nova.pp | 1 + manifests/profile/base/nova/api.pp | 24 -- manifests/profile/base/nova/authtoken.pp | 21 +- manifests/profile/base/nova/compute.pp | 30 +- manifests/profile/base/nova/migration/client.pp | 5 +- manifests/profile/base/novajoin/authtoken.pp | 21 +- manifests/profile/base/octavia/authtoken.pp | 21 +- manifests/profile/base/pacemaker.pp | 9 +- manifests/profile/base/placement/authtoken.pp | 21 +- manifests/profile/base/qdr.pp | 8 +- manifests/profile/base/rabbitmq.pp | 3 - manifests/profile/base/swift/proxy.pp | 32 +- manifests/profile/base/zaqar/authtoken.pp | 21 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 167 +++++------ metadata.json | 2 +- .../add-memcache-security-92060c4fe540774c.yaml | 7 + ...er-backup-gcs-s3-backends-52503ffa22c0b83d.yaml | 7 + .../cinder-rbd-multiconfig-285d1542ef08fa10.yaml | 6 + .../monitor_interval_ovndbs-6af18ba7f4a17cc5.yaml | 4 + ...e_live_migration_force_nc-f903a09955164ad9.yaml | 15 + .../nova_libvirt_guests-d0e5424d40d9e26e.yaml | 10 - .../notes/nova_metadata_wsgi-bbc8e5e053282a83.yaml | 2 +- ...ova_metadata_wsgi-cleanup-4b4877fe73f25c2e.yaml | 10 + .../remove_puppet_certmonger-843205d2ef88d6e4.yaml | 6 + ...on_probe_interval_ovn_dbs-df22bef3bb12a0f7.yaml | 6 + ...-object-expirer-memcached-3c1e7037683ee89a.yaml | 8 - .../xtremio-add-ports-option-b1e60a97ba56f21e.yaml | 5 + ...o-iscsi-remove-deprecated-da9224d14cef4fde.yaml | 6 + spec/classes/tripleo_certmonger_ca_crl_spec.rb | 116 -------- spec/classes/tripleo_certmonger_ca_local_spec.rb | 59 ---- spec/classes/tripleo_certmonger_etcd_spec.rb | 82 ------ spec/classes/tripleo_certmonger_memcached_spec.rb | 60 ---- spec/classes/tripleo_certmonger_mysql_spec.rb | 58 ---- .../classes/tripleo_certmonger_openvswitch_spec.rb | 68 ----- spec/classes/tripleo_certmonger_ovn_dbs_spec.rb | 60 ---- spec/classes/tripleo_certmonger_rabbitmq_spec.rb | 60 ---- spec/classes/tripleo_host_sriov_spec.rb | 39 --- spec/classes/tripleo_keepalive_spec.rb | 215 -------------- .../tripleo_profile_base_cinder_api_spec.rb | 14 +- .../tripleo_profile_base_cinder_backup_gcs_spec.rb | 84 ++++++ ... tripleo_profile_base_cinder_backup_s3_spec.rb} | 24 +- .../tripleo_profile_base_cinder_volume_rbd_spec.rb | 60 ++++ .../tripleo_profile_base_cinder_volume_spec.rb | 40 +-- ...ipleo_profile_base_cinder_xtremio_iscsi_spec.rb | 57 ---- .../tripleo_profile_base_designate_backend_spec.rb | 56 ++++ ...pleo_profile_base_glance_backend_cinder_spec.rb | 62 +++- .../tripleo_profile_base_gnocchi_api_spec.rb | 2 - spec/classes/tripleo_profile_base_iscsid_spec.rb | 30 +- .../tripleo_profile_base_logging_rsyslog_spec.rb | 49 +++- .../tripleo_profile_base_nova_compute_spec.rb | 23 +- spec/classes/tripleo_profile_base_nova_spec.rb | 4 + spec/defines/tripleo_certmonger_httpd_spec.rb | 65 ----- .../tripleo_host_sriov_numvfs_persistence_spec.rb | 134 --------- spec/fixtures/hieradata/default.yaml | 3 + spec/fixtures/hieradata/step4.yaml | 2 - spec/fixtures/hieradata/step5.yaml | 7 + spec/functions/list_to_zookeeper_hash_spec.rb | 15 - spec/unit/provider/sriov_vf_config/numvfs_spec.rb | 117 -------- spec/unit/type/sriov_vf_config_spec.rb | 78 ----- templates/switchdev/switchdev.epp | 39 --- zuul.d/layout.yaml | 2 +- 148 files changed, 1353 insertions(+), 5757 deletions(-)