We eagerly announce the release of:

tripleo-heat-templates 15.1.0: Heat templates for deploying OpenStack with OpenStack.

The source is available from:

https://opendev.org/openstack/tripleo-heat-templates

Download the package from:

https://tarballs.openstack.org/tripleo-heat-templates/

For more details, please see below.

15.1.0 ^^^^^^

Prelude *******

Environment file collectd-write-qdr.yaml no longer specifies a default CollectdAmqpInstances hash.

Enablement of data collection and transportation to an STF instance is now handled via existing templates.

New Features ************

* Added new heat role specific parameter option 'DdpPackage' to select the required DDP Package.

* Added new heat role specific param OVNAvailabilityZone to set availability-zones for ovn. This param replace seting availability- zones throught OVNCMSOptions

* Adds two new parameters 'IronicAuthStrategy' and 'NeutronAuthStrategy' that defaults to 'keystone'. This would allow deploying standalone ironic and neutron services without keystone using different 'auth_strategies' like 'http_basic' and 'noauth'.

* The libvirt driver has added support for hardware-offloaded OVS with vDPA (vhost Data Path Acceleration) type interfaces. vDPA allows virtio net interfaces to be presented to the guest while the datapath can be offloaded to a software or hardware implementation. This enables high performance networking with the portablity of standard virtio interfaces.

Nova added support for vhost-vdpa devices in Wallaby.

* Added OVN DBs clustering support. In this service model, a clustered database runs across multiple hosts in multi-active mode.

* To help operators protect their workload, they can now enable the KernelArgsDeferReboot role parameter. This will prevent the tripleo- kernel ansible module from automatically rebooting nodes even if KernelArgs were changed unexpectedly.

* To support Glance Distributed Image Import, adding configuration of "worker_self_reference_url" by providing the internal API URL for each node where glance api will run with glance-direct method of image-import is enabled.

* Add param NeutronAgentDownTime to configure neutron server agent_down_time Seconds to regard the agent as down; should be at least twice report_interval, to be sure the agent is down for good. agent_down_time is a config for neutron-server, set by class neutron::server report_interval is a config for neutron agents, set by class neutron

* The new "ApacheTimeout" parameter has been added, which determines the timeout used for IO operations in Apache.

* The following parameters add support for mounting Cinder's image conversion directory on an external NFS share.

* CinderImageConversionNfsShare

* CinderImageConversionNfsOptions

* A new "CinderPolicyEnforceNewDefaults" parameter adds the ability to disable Cinder's deprecated authorization policies. The default value is False, which means Cinder's deprecated policies are enabled. Setting the parameter to True disables the deprecated policies, which causes Cinder to enforce the project-admin, project- member, and project-reader RBAC personas. Support for system personas is planned for a future release.

* Enable image copy for multiple RBD Glance stores

Previously when using multiple RBD glance stores the operator was responsible for copying the image to all stores. Nova-compute now has the ability to automatically copy an image to the local glance store when required. This change enables the feature and adds the following role specific parameters to control the behaviour.

* "NovaGlanceRbdCopyPollInterval"

* "NovaGlanceRbdCopyTimeout"

* A new Heat parameter HAProxyConfigBackendSyntax news drives the generation of HAproxy configuration. Prior to that, every service was mapped to a 'listen' section in the configuration. Now a service definition is split in two sections 'frontend' and 'backend', which allow for more complex proxying configurations.

* New configuration "IronicDefaultBootMode" allows to change the default boot mode to use for bare metal instances. The default for now remains "bios" for legacy BIOS boot but may switch to "uefi" in the future.

* The new "MemcacheUseAdvancedPool" parameter is added which enables usage of advanced poll for memcached connections in keystone middleware. This parameter is set to "true" by default to avoind bursting connections in some services like neutron.

* This change adds functionality to enable modular libvirt daemons. All these daemons runs in its respective container. Also the default configuration is to use modular libvirt daemons instead of monolithic libvirt daemon. Here is the list of libvirt daemon which are added in this change. - virtnodedevd - virtproxyd - virtqemud - virtsecretd - virtstoraged

It's possible to define the individual log filters for each one of these daemon using the following new parameters: - "LibvirtVirtlogdLogFilters" - "LibvirtVirtsecretdLogFilters" - "LibvirtVirtnodedevdLogFilters" - "LibvirtVirtstoragedLogFilters" - "LibvirtVirtqemudLogFilters" - "LibvirtVirtproxydLogFilters"

More information regarding modular libvirt daemons is available here. *Libvirt Daemons https://libvirt.org/daemons.html* _.

* Introduce new parameters {{role.name}}NetworkConfigUpdate. This will be a bool. When {{role.name}}NetworkConfigUpdate is True existing network configurations will be updated. By default, this is False and only new deployments will have the networks configured. This parameter is role based only, with no global option.

* New config options for Neutron logging service plugin configuration were added. There are options added for L3 Agent: "NeutronL3AgentLoggingRateLimit", "NeutronL3AgentLoggingBurstLimit", "NeutronL3AgentLoggingLocalOutputLogBase", for OVS agent: "NeutronOVSAgentLoggingRateLimit", "NeutronOVSAgentLoggingBurstLimit", "NeutronOVSAgentLoggingLocalOutputLogBase" and for ML2/OVN backend: "NeutronOVNLoggingRateLimit", "NeutronOVNLoggingBurstLimit", "NeutronOVNLoggingLocalOutputLogBase".

* Adds NovaRestrictLiveMigration boolean parmeter to enable an api policy to allow live migration only for a specific role which can be customized using NovaRestrictLiveMigrationRole. This feature is to prevent the default admin role users to be able to use live migration on coincidence. Additional policies specified using NovaApiPolicies get merged with this policy.

* Adds new NovaCronArchiveDeleteRowsTaskLog parameter which controls to also archive task_log records while archiving the database. Defaults to true.

* OctaviaLogOffload is now enabled by default, it creates a rsyslog container of the controllers that collects logs from the Octavia amphorae.

* *OctaviaWorkers* and *HorizonWorkers* allow to configure the process workers count for the Octavia API and Horizon WSGI applications.

* With conditional monitoring enabled in OVN, southbound ovsdb-serve takes lot of time in handling the monitoring and sending the updates to all its connected clients. Its takes lot of CPU. With monitor-all option, all ovn-controllers do not enable conditional monitoring there by reducing the load on the Southbound ovsdb-server.

* Add support for OVS DPDK pmd auto balance parameters. This feature adds 3 new role specific THT parameters to set pmd-auto-lb-load- threshold, pmd-auto-lb-improvement-threshold, and pmd-auto-lb-rebal- interval in OVS through OvsPmdLoadThreshold, OvsPmdImprovementThreshold and OvsPmdRebalInterval respectively.

* Introduce new parameter to configure OVS PMD Auto Load Balance for OVS DPDK

* Users can now override or add individual entries to EndpointMap without having to specify complete EndpointMap in parameter_defaults section of an environment file.

* The new "PlacementPolicies" parameter has been added.

* Add support for the Pure Storage FlashBlade Manila driver

* The following parmaeters have been added so that users can change timeout for communication over rpc call.

* "AodhRpcResponseTimeout"

* "CeilometerRpcResponseTimeout"

* "DesignateRpcResponseTimeout"

* "HeatRpcResponseTimeout"

* "IronicRpcResponseTimeout"

* "ManilaRpcResponseTimeout"

* "NeutronRpcResponseTimeout"

* "NovaRpcResponseTimeout"

* "OctaviaRpcResponseTimeout"

* The new "swift_recon_cron" container has been added to the SwiftStorage service, to reflect metrics related to async pendings to recon middleware in swift.

Upgrade Notes *************

* Upgrades from OVN non-HA and OVN DBs pacemaker to OVN DBs clustered are currently not supported.

* Changes the ironic PXE container TFTP service from "in.tftpd" to use the "dnsmasq" TFTP service. This is because the "in.tftpd" service is not anticipated to be carried by Linux distributions moving forward, and "dnsmasq" is actively maintained.

* When upgrading an environment that uses collectd-write-qdr.yaml the CollectdAmqpInstances defaults previously specified need to be added to an administrator provided environment file and used during the overcloud deploy process.

* When upgrading a deployment with the use of enable-stf.yaml, add the following files to your overcloud deployment command in order to maintain the existing services defined in enable-stf.yaml.

* environments/metrics/collectd-write-qdr.yaml

* environments/metrics/ceilometer-write-qdr.yaml

* environments/metrics/qdr-edge-only.yaml

* Mistral has been removed as it was Deprecated in Wallaby and is no longer in use.

* With the change to EndpointMap interface, existing environments where it has been overridden have to specify 'merge' strategy in a new 'parameter_merge_strategies' section.

* Support for Cavium/Liquidio has been removed.

* "`OS::TripleO::Services::LiquidioCompute`" has been removed and should be removed from role data during upgrade.

* The "`ComputeLiquidio`" role has been removed.

* The "CinderPowerStoreAppliances" parameter has been removed because it has had no effect since the actual parameter was deprecated in cinder.

* Support for the HPE Lefthand cinder driver has been removed.

* The "OS::TripleO::Services::CinderHPELeftHandISCSI" service was removed, so it should be removed from role data during upgrade.

* The "OctaviaPostWorkflowName" parameter has been removed.

* Zaqar has been removed as it was deprecated in Wallaby and is no longer in use on the undercloud. Additionally it hasn't been supproted in the overcloud.

Deprecation Notes *****************

* The parameter IronicIPXEEnabled has been deprecated since Ironic uses per-node boot interfaces since Ussuri.

* The environment environments/deployed-server-deployed-neutron- ports.yaml, the deployed-neutron-port.yaml template, and DeployedServerPortMap parameter are deprecated in favor of NodePortMap, ControlPlaneVipData, and VipPortMap, which can be used with the generated environments/deployed-ports.yaml.

* The following parameters have been deprecated and have no effect.

* ManilaIsilonDriverHandlesShareServers

* ManilaVNXDriverHandlesShareServers

* ManilaVMAXDriverHandlesShareServers

* The "ManilaCephFSCephFSEnableSnapshots" parameter has been deprecated, and has no effect now. Manila always enables snapshot support in Ceph FS backend since Wallaby.

* VPP service and Neutron ML2/VPP plugin are deprecated in Xena release. VPP service relies on puppet project which isn't maintained for a while. Neutron ML2/VPP plugin is not actively supported in TripleO. Both services would be disabled in future releases.

* This change deprecates the nova-libvirt-container-puppet.yaml heat- template which configures monolithic modular libvirt daemon. The newly added heat-template for modular libvirt daemons will be used to configure libvirt services in different containers.

* This change removes NetworkDeploymentActions and {{role.name}}NetworkDeploymentActions. Since we can no longer rely on the Heat stack action when using Ephemeral Heat in tripleo.

* The "Neutron(OVS|Vnic)VnicTypeBlackList" parameters are deprecated in favor of the new "Neutron(OVS|Sriov)VnicTypeProhibitList" parameters.

* The "NovaSchedulerQueryPlacementForAvailabilityZone" parameter has been deprecated. The parameter has no effect now.

* The "AdminToken" parameter has been deprecated. Use the new "KeystonePassword" parameter instead.

Security Issues ***************

* The OVN database servers in an OVN DBs clustering and TLS- everywhere deployment will listen on all IP addresses (0.0.0.0). This is a caveat that can only be addressed once RHBZ 1952038 is fixed.

Bug Fixes *********

* The collectd-write-qdr.yaml no longer specifies a default CollectdAmqpInstances hash. When specified, it was not possible to override the parameter, resulting in a combined hash of the default values and the administrators custom values which could lead to unexpected issues.

* Default of the "NovaSyncPowerStateInterval" parameter has been changed from 0 to 600, to use the default value consistent with the one defined in nova.

* Fixes issues with PPC64le hardware utilization where documented steps require a "/tftpboot/ppc64le" folder to exist for artifacts to be placed as it is required path for the firmware loader in order to boot the kernel and ramdisk. The folder is now automatically created for the container.

* The neutron agent report interval was recently changed from the 30s default to 300s. This caused issues whith timeouts when providing baremetal nodes. A new parameter IronicNeutronAgentReportInterval has been added with a default of 30s so that the report interval specifically for the networking baremetal agent is restored. See bug: 1940838 (https://bugs.launchpad.net/tripleo/+bug/1940838).

* NFSv4.2 is now there for long time and default in RHEL/CentOS 8. This changes the default for NovaNfsVersion to be v4.2 instead of v4 to have this the new default.

* On the compute nodes, right now ssl certificates got created for libvirt, qemu-default, qemu-vnc and qemu-nbd. This is not required because the all services use the same NovaLibvirtNetwork network and therefore multiple certificates for the same hostname get created. Also from qemu point of view, if default_tls_x509_cert_dir and default_tls_x509_verify parameters get set for all certificates, there is no need to specify any of the other **_tls** config options. From Secure live migration with QEMU-native TLS (https://docs.openstack.org/nova/latest/admin/secure-live-migration- with-qemu-native-tls.html)

The intention (of libvirt) is that you can just use the default_tls_x509_* config attributes so that you don’t need to set any other **_tls** parameters, unless you need different certificates for some services. The rationale for that is that some services (e.g. migration / NBD) are only exposed to internal infrastructure; while some sevices (VNC, Spice) might be exposed publically, so might need different certificates. For OpenStack this does not matter, though, we will stick with the defaults.

Therefore with this change InternalTLSNbdCAFile, InternalTLSVncCAFile and InternalTLSQemuCAFile get removed (which defaulted to /etc/ipa/ca.crt anyways) and just use InternalTLSCAFile.

Also all cerfificates get created when EnableInternalTLS is true to and mount all SSL certificates from the host. This is to prevent certificate information is not available in a qemu's process container environment if features get switched later, which has shown to be problematic.

* Add the missing **Workers* parameters into the low-memory footprint environment and set it to 1.

Other Notes ***********

* Using enable-stf.yaml now defines the expected configuration in OpenStack for use with Service Telemetry Framework. Removal of the defined resource_registry now requires passing additional environment files to enable the preferred data collectors and transport architecture, providing better flexibility to support additional architectures in the future.

* The "iscsi_tcp" module is no longer loaded to support the operation of the "ironic-conductor" container as the "iscsi" Deployment interface has been removed from Ironic.

* Parameter "DhcpAgentNotification" is set to "False" by default now. It should be set to "True" in case when Neutron DHCP agent is going to be deployed. It shouldn't be enabled with ML2/OVN backend.

* These parameters can now be set per-role - DnfStreams, UpgradeInitCommand, UpgradeLeappCommandOptions, UpgradeLeappDevelSkip, UpgradeLeappToRemove, UpgradeLeappToInstall

Changes in tripleo-heat-templates 15.0.0..15.1.0 ------------------------------------------------

b5ae7f846 Switch to rabbitmq fqdn hostnames and pass proper CA info 3cf046cce Add InternalApiNetwork entry in ServiceNetMap 28161b586 Default CephDashboardNetwork to storage_dashboard bf6f11824 Add a note about how glance currently supports project personas 512ba5ed4 Fix swift "Could not enable rsyncd" error c25eec5bf Limit collectds memory usage in the ansible part 768b66f88 Enable support for Libvirt modular daemons c354d2113 Use frontend/backend sections in HAProxy config 68db3d3be Allow configuring secure RBAC in nova 8ad58943d Allow configuring secure RBAC in placement 1e2d02d9e Option to select the required DDP package d0ee7e09e Nova: Remove usage of AvailabilityZoneFilter bdbd440cb Implement project personas in custom designate policy file 43a685e4b Implement project personas in custom octavia policy file 4e307cfd6 Implement project personas in custom ironic policy file 88494c90d Implement project personas in custom nova policy file c9635bf92 Implement a tool for converting policy.yaml files to heat templates e7f90201b Add parameters for manila storage availability zones 56a58f88e Fix libvirt/qemu logs location 8d51d6d3f Fix swift log redirection 012121109 Manila: Hide password strings 16e59efb3 Refactor usage of the NovaSchedulerEnabledFilters parameter b0de138b4 Explicitly point undercloud instead of localhost 33c1d9d34 Changing default tuned profile for ComputeVdpa ec5d0afa1 Add missing *Workers into low-memory footprint env d346aa94b Fix delegate_to to use group rather then undercloud 7fc781083 Only delete heat data in the DB if it exists 79dc2b994 Revert "Ensure startup files exist before containers might be started" 57a8efd40 Add a global configuration option for secure RBAC 60d77b37e Set cgroupns=host for neutron_dhcp and ovn-metadata 1a1fb2727 Update network-data v2 samples for ipv6 246d174f8 Add ipv6 network_data/vip_data for CI jobs ea5dff48c Support project personas in cinder 66492002c Don't use *-dist.conf files in commands 978f29d8c Add parameter IronicDefaultBootMode 3cb006d53 Changed minversion in tox to 3.18.0 c9f0a5af0 Added support for Neutron loggings service plugin configuration 5bcf76da0 Fix kill-script for cgroups v2 and podman e1a605833 Add environment to enable keystone in undercloud c293dfc7b Deploy standalone ironic and neutron in undercloud 6a8fb43ed Revert "Configure ironic to do UEFI boot by default" 0c167aede Remove zaqar cb630d03b Remove mistral 67bd75c8b Allow to set pacemaker cluster properties f2015da4b Simplify mysql users creation 84e1a591d Swap xinetd/tftp-server for dnsmasq to support ironic-pxe operations efd4ca085 Remove old ovndbs update workaround 5edb21ee3 Remove and replace NetworkDeploymentActions c463d2068 Install python3-openstackclient after the leapp upgrade ff3173bdc Guarantee that ovn-dbs-pcmk update_tasks are run when the cluster is up 523acec27 Fix typo in vip-data-default-network-isolation.yaml 9edbde38d Fix typo in sample network data e8beaaf88 Add logging source for collectd 33d9d19a4 Configure api_base_uri to DesignateEndpoint URI 3f9191131 Add oidc options a52294169 Remove setting ACLs during Upgrade fcfa8ac23 Add CephRbdTrashPurgeInterval parameter a0f308324 Allow configuration of the managed resource email address 27adf3bc7 Ensure startup files exist before containers might be started 46027a8f2 Allow configuring distributed image import ae139dec6 Fix the CephDashboardNetwork default dcb33e8c5 Adding json output to yaml-diff f7121a846 Do not create mysql user if it already exists 128c2bcc2 CentOS 9: support restart of HA resources e9f0a32e7 GnocchiArchivePolicy has been removed db3996369 Revert "tripleo-podman: Enable podman.socket" 8a7201cd0 Manila: Deprecate ineffctive *DriverHandlesShareServers a235b70b2 Fix the failure condition for HAproxy chgrp script 835c6a04b Revert "Adjust HAProxy script to allow for ID change" ad2a13ab4 Check whether an HA resource already exists explicitly 5539bd8c1 NovaLiveMigrationPermitAutoConverge should default to True 151ca15e8 Consider GlanceMultistoreConfig when setting glance_pool 07fa9b17f Remove unused valid_exit_codes arg 6db0f74e2 Parameter to set api policy to limit live migration to role c69733bb6 Enable Ceph RGW public port into firewall when using SSL 79e24494b Set DhcpAgentNotification to be "false" by default 4e77e1474 Revert "Disable postcopy for ovn/ovs-dpdk" 65ff578a7 Apache: increase the base timeout 733d1bad4 Disable cephadm when ceph is deployed 474182927 Explicitly set ironic::json_rpc::project_name 1ce490716 Environment for switching to using IPs for memcached 9574cd4d0 Add IronicNeutronAgentReportInterval parameter 236f14fe8 Stop rotating rabbitmq crash.log files via erlang's lager 91627638d Prefill host configuration for rsyslog-omamqp1 3100829b9 Configure ironic to do UEFI boot by default 823e4e867 Add http basic auth support for neutron api a22ef3a0b Adjust HAProxy script to allow for ID change 47e348767 Glance: Replace deprecated os_region_name 7fe0d28ad Enable CephDashboard for scenario001 2e4361c87 container-puppet.sh idempotency on restart 99f04ef90 Create the tftpboot ppc64le folder f11b5edc2 Add BGP EVPN support to the FRR service 580139d2f Setting language for the python3.6 tox environment 5ff274113 Make default of NovaSyncPowerStateInterval consistent with nova 06cc21a44 Manila: Drop tenant_id templating from v2 endpoint e737e3f3a Remove deprecated ipv6 corosync parameters 72a12aa83 cinder_api needs etcd certs inside the container 073e581e6 Enable debug of memcached when Debug is enabled 8f6d13b7e Compute HA: Remove version discovery of keystone API 5771d9318 Remove StackAction from Octavia deployment c73ecb196 cinder_api: Export /var/log/httpd on the host ad942efe7 Fix missing ssh key in scenario010 job 61f67eff1 nova_libvirt_init_secret Give a proper error if ceph is not configured properly c4bdaea3d Support both frr 7.x and frr-8.0 concurrently b921b185f qdr: Add SSL support for oslo.messaging RPC f0010f606 Add OctaviaAmphoraSshKeyDir for ssh key creation for Octavia 6d2901345 Add <service>_api_paste_ini in puppet_tags bd7c489dc Ironic: Do not override bootfile_name 198786df2 Nova: Update puppet parameters to set castellan options bec1ffeeb Change tests to run on ansible-core 2.11 b2b1915a3 Fix NovaNfsVersion parameter comment ddb8acf32 Disable postcopy for ovn/ovs-dpdk 1896b10e2 Include octavia::driver_agent via puppet-tripleo b0caee475 Revert change to use community pacemaker_cluster module 41380b510 Replace deprecated database_connection of puppet base classes 169e4e983 Replace deprecated glance::api::database_connection feb93b26b Add DeployedCeph boolean parameter be04d6fa9 Stop using tripleo_container_manage_systemd_order f684a93aa Tidy up lingering todo's 8e0bd79c6 Enabling vhost-postcopy-support when live_migration_permit_post_copy e104c6e62 Default ganesha-internal service endpoint to external network dadb112a5 Add /run/frr volume mount 5ab70af5a Add param to configure neutron agent_down_time and report_interval bd20c5958 Fix support for json-rpc in ironic c4097a028 Make indentation consistent in pacemaker config_settings 30ddf4242 Add a role to run independent designate bind backends 74ae03602 Fix condition for pacemaker resource_op_defaults a94ff466c Example configurable cap add 68d7d51e4 Remove iscsi_tcp module load 9b34719ed [c9] nova_libvirt with host's cgroupns ad28f5da4 Wire up renamed upgrade periodic template 2d92ebf07 Add Pure Storage FlashBlade Manila driver b6148410b Add support for setting min TTL limit in designate e5ba54102 Set stop grace periods for designate services 2fb783508 Remove all docker related tasks from upgrades 810b81991 Do not fail if haproxy container UUID changes ac5b3829b Enable archive task_log records while archiving the database 02b157ab2 Remove unused BarbicanPkcs11Crypto* parameters 119812b91 Remove usage of deprecated GnocchiArchivePolicy 35e701c61 Enable swift-recon-cron job 65b1f4290 Replace the deprecated nova::scheduler::filter::scheduler_max_attempts ce660af8b nova: replace deprecated nova::cinder_catalog_info 53040573a Use yaml.safe_load to load YAML files 1115698c1 Fix typo in ovn-dbs-cluster northd kolla config file d2298873f Role parameter for tripleo_kernel_defer_reboot fd893918c Only reference _bundle manifests in cinder-{backup,volume}-pacemaker-puppet.yaml bc934d18a Enable ovn-monitor-all option to ovn-controller 8d568bdb6 Change default for NovaNfsVersion to NFSv4.2 cf0b6a161 Add CephAdmDebug parameter e0cb3c627 Deprecate ineffective ManilaCephFSCephFSEnableSnapshots 2b33594c1 Add OS version to check reboot happened 51fdc9c6b Add environments/deployed-networks.yaml e04f4a618 Compute HA: Remove workaround for Newton and older e5b1ae3c3 Add sample baremetal_deployment.yaml 7ade37b9f Default network configs to Train values 04cd218c8 tripleo-podman: Enable podman.socket 2001b48ca vncproxy: removal of tags and steps change from post_upgrade_tasks 712c6025d Remove unused OctaviaPostWorkflowName 2341c892f Skip yaml validation for releasenotes and zuul.d a9ed08335 Enable enable_proxy_headers_parsing in Ironic API f5f8f4fa7 Enable enable_proxy_headers_parsing in Barbican API 726ccc1bd Remove leftover of hieradata cleanup 30574f183 Test override of CephClusterName in 004 standalone a191377b3 Add tool to convert net-data from v1 to v2 ead5443cb Replace LEAPP_DEVEL_SKIP_RHSM with LEAPP_NO_RHSM 62b17c21b Keystone: Keep default auth methods in OpenIDC Federation c769343d8 Remove ineffective CinderPowerStoreAppliances parameter cbd2842db Allow customizing policy rules for Placement Api 61ffbe989 Fix manila-cephfsganesha-config environment for cephadm abed6abbe fix typo in readme 591f2aa2d Drop CollectdAmqpInstances from collectd-write-qdr.yaml d98d6d1f5 Fix playbook_dir Ansible Warning 1aa0af059 Remove network/ports/vip[_v6].yaml dce6bee2f Moves undercloud upgrade introspection data migration to step 1 f276e7a4a Make default of NeutronDefaultAvailabilityZones empty array 02c15818f Add heat-api environment 7010a2741 Introducing the ComputeVdpa role 1738ccfd2 Remove support for Cavium LiquidIO feef0cc1e Add a cloud profile for system-admins 5ef7f9330 FFU: change transfer parameters for database resync 95ddd09c8 Remove unused definition of PythonInterpreter cc0f113a6 Remove unused disable-unbound.yaml 6f0b375f7 Remove hieratada for ceilometer::agent::auth ec1f6102e yaml-diff.py: Making it a bit better 514f6df76 placement: Adding Debug parameter 681fa9a22 Rename AdminToken to KeystonePassword a2619ba57 Neutron: Rename VnicTypeBlacklist parameters af351b783 Update puppet parameters for networking-baremetal 4dca2a483 Allow tuning rpc_response_timeout ab4c114d5 Adjust enable-stf.yaml for latest recommendations 4aeb3f354 Enable image copy for multiple RBD Glance stores f065bb96b Add parameters to specify auth_strategy df4c7c8ce Use role var names from tripleo_podman bc2a0339e Preface tasks path with {{playbook_dir}} 5460ec844 Fix ordering of Swift pipeline values ad1ba1bc3 Add comment for libvirt/vnc network sync 978c058ef Enable LogOffload by default in Octavia dd5a5fc24 Remove from master the ceph-ansible references b1e992a73 Neutron: Use the pids subsystem to look up container id 26be31799 Deprecate DeployedServerPortMap 9da8a4059 Remove NovaVncProxyNetwork from ServiceNetMap 48918ea6d Enable healthcheck API in Octavia and Ironic 4da03adef Move ephemeral heat upgrade to the service ef7254edd Cinder: Remove support for HPE Lefthand driver 3da428352 Designate: Clean up deprecated Rabbit* parameters a96f333fa Neutron: Use placement user to talk with Placement service 5d5419a1f Octavia: Remove unused cleanup tasks of tls_proxy container e0adac953 Enable octavia driver agent puppet c904c7555 Explicit set qemu certificate group ownership ff48f2ac1 Get roles data from stack output on UC upgrade 0b5b914e3 Add THT Jinja2 data sources as stack output 28105815c Extend UC ephemeral heat to export network afc0d39dc Add Ephemeral Heat service a6118661f Fix NetworkDeploymentActionValue format 18651160a Deprecate VPP service and Neutron ML2/VPP agent fb67c2da9 Move scenario004 to cephadm 574cf2769 Drop mistral configuration from post deploy 8fb3a0b88 Use module for container puppet tasks d9b6ed3fb Include tripleo container service management once 3b043e495 Always run network config for undercloud ec444622d Add support for OVS DPDK pmd auto balance parameters. 91f06efb3 Do not run Swift rsync container in single replica mode 48fd886a0 Distribute iscsid.conf to all containers using iscsi 10e065219 Drop archive policy from enable-legacy-telemetry f94c38476 Remove PciPassthroughFilter from NovaSchedulerAvailableFilters d96a9c615 Neutron: Explicitly set the default hepervisor name 33f7868d5 Set tripleo_cephadm rbd mirror vars 94e31ab75 Enable DPDK OVS PMD Auto Load Balance e85da3e9e Add post_upgrade_task and remove puppet-ceph pkg d20f295f3 Simplify libvirt/qemu ssl certificates baf4a1614 OVN DBs clustering a263da138 Use merge strategy for EndpointMap 1ddef85c9 Add OVNAvailabilityZone to improve UX b991086fe Move designate from experimental feb63aba4 Add extra Ansible Variable perameter dcddeb3b9 Make UpgradeLeappDevelSkip per-role 1eea4ca2e Add map merge strategy for {{role.name}}Parameters a3814c08d Add service defined ansible_group_vars to RoleGroupVars 2f702f7bb Limit collectds memory usage d2bbc3fbb Deprecate IronicIPXEEnabled 454b45c7d Set OS_CLOUD instead in stackrc 019419463 Use community.general ansible collection instead of modules 6837633ea Fix broken restart of ovndb_server during minor update ed320d8a7 nova-compute: Adding failed_when to nova-compute stop task c214e99b2 Bump ovs and ovn versions to 2.15 for FFWD. ca732da9c nova-compute: Replacing yes/no with boolean values a26b064bd Add missing monitoring_subscription to Placement f86a22d33 Clean up DefaultPasswors 7b87fc691 Placement: Remove unused PlacementAPIInterface d2132dd81 Honor the Debug parameter in Zaqar template 5b34e66a7 Honor the BackupAndRestoreHieraConfigFile parameter 82de22a43 Mark NeutronFirewallDriver deprecated properly 7dbcb4157 Neutron: Remove unused NeutronMechanismDrivers from dhcp-agent template 86d3f64b0 Nova: Remove unused password parameters 90ace4f68 Don't create ExtraConfig resources per role 857807247 Add support for designate standalone jobs 06e12a1b0 Placement: Remove the unused NovaPassword parameter 09bcacd25 Add support for keystone_authtoken/memcache_use_advanced_pool be0b91ef5 Add network-v2 default files + vip data examples 035299cdc Remove all telemetry related redundant environments fcac503da Nova: Remove useless authtoken hieradata from computes 7d0320ad9 Drop usage of removed tripleo::haproxy parameters 0bb24e11e Remove ENABLE_* environment about puglins not installed c42ba433a Introducing the nova-cell environments 2225f9666 Support cinder image conversion on an NFS share 78e870712 Replace unused var 'net' with _ ab9f26b30 Remove or fix outdated/incorrect tripleo hieradata definitions 05dbd4761 Glance: Update puppet parameters to set castellan options 6dd006fc0 Add Python3 xena unit tests e9901a7fb Update master for stable/wallaby a7d238643 Make memcached port parameters globally available 4f2884ff6 Clean up usage of the deprecated aodh::auth class 2e9900e81 Set hieradata for the aodh::service_credentials class a314ad3ae Enable proxy header parsing in Octavia API 67d188f51 Clean up leftovers of Midonet support 02bb4b8aa Remove or fix outdated/incorrect neutron hieradata definitions d975e560a [VxFlex OS] Fix resource name typo in template

Diffstat (except docs and test files) -------------------------------------

.gitignore | 1 + README.rst | 4 - baremetal-samples/baremetal_deployment.yaml | 79 + ci/environments/disable-unbound.yaml | 57 - ci/environments/scenario000-standalone.yaml | 8 +- .../scenario001-multinode-containers.yaml | 41 +- ci/environments/scenario001-standalone.yaml | 8 +- ci/environments/scenario002-standalone.yaml | 6 +- ci/environments/scenario003-standalone.yaml | 18 +- ci/environments/scenario004-standalone.yaml | 61 +- .../scenario007-multinode-containers.yaml | 1 + ci/environments/scenario007-standalone.yaml | 1 + .../scenario010-multinode-containers.yaml | 38 +- ci/environments/scenario010-standalone.yaml | 39 +- ci/environments/scenario012-standalone.yaml | 1 + ci/network_data_v6.yaml | 54 + ci/vip_data_v6.yaml | 6 + common/common-container-config-scripts.yaml | 2 +- common/container-puppet.sh | 1 + common/deploy-steps-tasks-step-0.j2.yaml | 2 +- common/deploy-steps-tasks.yaml | 2 - common/deploy-steps.j2 | 35 +- common/generate-config-tasks.yaml | 21 +- common/host-container-puppet-tasks.yaml | 22 +- .../nova_libvirt_init_secret.sh | 10 + .../pacemaker_mutex_restart_bundle.sh | 15 +- .../pacemaker_restart_bundle.sh | 30 +- container_config_scripts/pacemaker_wait_bundle.sh | 29 +- deployed-server/README.rst | 2 +- deployed-server/deployed-neutron-port.yaml | 18 + deployed-server/deployed-server.yaml | 37 +- deployment/aodh/aodh-api-container-puppet.yaml | 6 + deployment/aodh/aodh-base.yaml | 20 +- deployment/apache/apache-baremetal-puppet.j2.yaml | 6 + .../backup-and-restore/rear-baremetal-ansible.yaml | 1 + .../barbican/barbican-api-container-puppet.yaml | 34 +- deployment/barbican/barbican-client-puppet.yaml | 20 +- ...ometer-agent-notification-container-puppet.yaml | 2 - .../ceilometer-base-container-puppet.yaml | 26 +- deployment/ceph-ansible/ceph-base.yaml | 760 ---- deployment/ceph-ansible/ceph-client.yaml | 71 - deployment/ceph-ansible/ceph-external.yaml | 73 - deployment/ceph-ansible/ceph-grafana.yaml | 186 - deployment/ceph-ansible/ceph-mds.yaml | 81 - deployment/ceph-ansible/ceph-mgr.yaml | 179 - deployment/ceph-ansible/ceph-mon.yaml | 122 - deployment/ceph-ansible/ceph-nfs.yaml | 137 - deployment/ceph-ansible/ceph-osd.yaml | 137 - deployment/ceph-ansible/ceph-rbdmirror.yaml | 99 - deployment/ceph-ansible/ceph-rgw.yaml | 200 - deployment/cephadm/ceph-base.yaml | 118 +- deployment/cephadm/ceph-client.yaml | 4 - deployment/cephadm/ceph-external.yaml | 4 - deployment/cephadm/ceph-grafana.yaml | 4 - deployment/cephadm/ceph-mds.yaml | 3 - deployment/cephadm/ceph-mgr.yaml | 4 - deployment/cephadm/ceph-mon.yaml | 4 - deployment/cephadm/ceph-nfs.yaml | 4 - deployment/cephadm/ceph-osd.yaml | 4 - deployment/cephadm/ceph-rbdmirror.yaml | 28 +- deployment/cephadm/ceph-rgw.yaml | 5 +- deployment/cinder/cinder-api-container-puppet.yaml | 18 +- .../cinder-backend-dellemc-powerstore-puppet.yaml | 3 - .../cinder/cinder-backup-container-puppet.yaml | 2 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 4 +- deployment/cinder/cinder-base.yaml | 11 +- .../cinder/cinder-common-container-puppet.yaml | 68 +- .../cinder/cinder-hpelefthand-iscsi-puppet.yaml | 73 - .../cinder/cinder-scheduler-container-puppet.yaml | 2 +- .../cinder/cinder-volume-container-puppet.yaml | 5 +- .../cinder/cinder-volume-pacemaker-puppet.yaml | 6 +- deployment/database/mysql-base.yaml | 6 - deployment/database/mysql-container-puppet.yaml | 4 +- deployment/database/mysql-pacemaker-puppet.yaml | 16 + deployment/database/redis-container-puppet.yaml | 2 +- deployment/database/redis-pacemaker-puppet.yaml | 2 +- .../liquidio-compute-config-container-puppet.yaml | 124 - deployment/deprecated/mistral/mapping.json | 373 -- .../mistral/mistral-api-container-puppet.yaml | 270 -- deployment/deprecated/mistral/mistral-base.yaml | 118 - .../mistral/mistral-engine-container-puppet.yaml | 141 - .../mistral-event-engine-container-puppet.yaml | 116 - .../mistral/mistral-executor-container-puppet.yaml | 252 -- .../neutron-vpp-agent-baremetal-puppet.yaml | 0 .../nova/nova-libvirt-container-puppet.yaml | 222 +- .../novajoin/novajoin-container-puppet.yaml | 6 + .../{ => deprecated}/vpp/vpp-baremetal-puppet.yaml | 0 .../deprecated/zaqar/zaqar-container-puppet.yaml | 395 -- .../designate/designate-api-container-puppet.yaml | 12 +- .../designate/designate-base.yaml | 36 +- .../designate/designate-bind-container.yaml | 3 +- .../designate-central-container-puppet.yaml | 44 +- .../designate/designate-mdns-container-puppet.yaml | 10 +- .../designate-producer-container-puppet.yaml | 3 +- .../designate/designate-sink-container-puppet.yaml | 3 +- .../designate-worker-container-puppet.yaml | 3 +- deployment/frr/frr-container-ansible.yaml | 39 +- deployment/glance/glance-api-container-puppet.yaml | 30 +- .../glance/glance-api-edge-container-puppet.yaml | 12 + .../gnocchi/gnocchi-api-container-puppet.yaml | 11 +- deployment/haproxy/haproxy-container-puppet.yaml | 11 +- .../haproxy/haproxy-edge-container-puppet.yaml | 6 - deployment/haproxy/haproxy-public-tls-inject.yaml | 5 + deployment/heat/heat-api-container-puppet.yaml | 2 +- deployment/heat/heat-base-puppet.yaml | 12 +- deployment/heat/heat-engine-container-puppet.yaml | 9 +- .../heat/heat-ephemeral-container-ansible.yaml | 124 + deployment/horizon/horizon-container-puppet.yaml | 30 +- .../image-serve/image-serve-baremetal-ansible.yaml | 2 +- deployment/ipa/ipaservices-baremetal-ansible.yaml | 6 +- deployment/ironic/ironic-api-container-puppet.yaml | 83 +- deployment/ironic/ironic-base-puppet.yaml | 18 +- .../ironic/ironic-conductor-container-puppet.yaml | 147 +- .../ironic/ironic-inspector-container-puppet.yaml | 75 +- .../ironic-neutron-agent-container-puppet.yaml | 44 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 6 +- deployment/iscsid/iscsid-container-puppet.yaml | 2 +- .../kernel-boot-params-baremetal-ansible.yaml | 16 + deployment/keystone/keystone-container-puppet.yaml | 106 +- deployment/logging/files/nova-libvirt.yaml | 67 +- deployment/logging/rsyslog-container-puppet.yaml | 26 + deployment/manila/manila-api-container-puppet.yaml | 6 + deployment/manila/manila-backend-cephfs.yaml | 65 +- .../manila/manila-backend-flashblade-puppet.yaml | 77 + deployment/manila/manila-backend-isilon.yaml | 37 +- deployment/manila/manila-backend-netapp.yaml | 52 +- deployment/manila/manila-backend-unity.yaml | 36 +- deployment/manila/manila-backend-vmax.yaml | 39 +- deployment/manila/manila-backend-vnx.yaml | 45 +- deployment/manila/manila-base.yaml | 15 +- .../manila/manila-scheduler-container-puppet.yaml | 2 +- .../manila/manila-share-container-puppet.yaml | 4 +- .../manila/manila-share-pacemaker-puppet.yaml | 2 +- .../memcached/memcached-container-puppet.yaml | 26 +- .../messaging/rpc-qdrouterd-container-puppet.yaml | 100 +- deployment/metrics/collectd-container-ansible.yaml | 14 +- deployment/metrics/collectd-container-puppet.yaml | 21 +- deployment/metrics/qdr-container-ansible.yaml | 3 - deployment/neutron/kill-script | 11 +- .../neutron/neutron-api-container-puppet.yaml | 91 +- deployment/neutron/neutron-base.yaml | 21 +- .../neutron/neutron-dhcp-container-puppet.yaml | 43 +- .../neutron/neutron-l3-container-puppet.yaml | 56 +- .../neutron/neutron-metadata-container-puppet.yaml | 42 +- .../neutron-ovs-agent-container-puppet.yaml | 26 +- deployment/neutron/neutron-plugin-ml2-ovn.yaml | 29 +- deployment/neutron/neutron-plugin-ml2.yaml | 37 +- .../neutron-sriov-agent-container-puppet.yaml | 3 +- deployment/nova/nova-api-container-puppet.yaml | 57 +- deployment/nova/nova-apidb-client-puppet.yaml | 7 +- deployment/nova/nova-base-puppet.yaml | 12 +- deployment/nova/nova-compute-container-puppet.yaml | 131 +- .../nova/nova-conductor-container-puppet.yaml | 4 - deployment/nova/nova-db-client-puppet.yaml | 7 +- deployment/nova/nova-ironic-container-puppet.yaml | 4 +- .../nova/nova-metadata-container-puppet.yaml | 8 +- .../nova-modular-libvirt-container-puppet.yaml | 979 +++++ .../nova/nova-scheduler-container-puppet.yaml | 19 +- deployment/nova/nova-virt-common.yaml | 158 + .../nova/nova-vnc-proxy-container-puppet.yaml | 20 +- .../octavia/octavia-api-container-puppet.yaml | 72 +- deployment/octavia/octavia-base.yaml | 5 + .../octavia/octavia-deployment-config.j2.yaml | 36 +- .../octavia-health-manager-container-puppet.yaml | 4 +- .../octavia-housekeeping-container-puppet.yaml | 2 +- .../octavia/octavia-worker-container-puppet.yaml | 2 +- .../octavia/providers/ovn-provider-config.yaml | 3 + .../openvswitch-dpdk-baremetal-ansible.yaml | 103 +- .../ovn/ovn-controller-container-puppet.yaml | 19 +- deployment/ovn/ovn-dbs-cluster-ansible.yaml | 307 ++ deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 28 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 8 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 66 +- .../placement/placement-api-container-puppet.yaml | 50 +- deployment/podman/podman-baremetal-ansible.yaml | 69 +- deployment/qdr/qdrouterd-container-puppet.yaml | 2 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 19 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 2 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 2 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 4 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 2 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 4 +- deployment/swift/swift-proxy-container-puppet.yaml | 47 +- .../swift/swift-storage-container-puppet.yaml | 119 +- .../timemaster/timemaster-baremetal-ansible.yaml | 3 - .../tripleo-packages-baremetal-puppet.yaml | 22 +- deployment/unbound/unbound-container-ansible.yaml | 29 + .../undercloud-upgrade-ephemeral-heat.yaml | 54 - deployment/undercloud/undercloud-upgrade.yaml | 24 +- environments/cavium-liquidio.yaml | 31 - .../ceph-ansible/ceph-ansible-external.yaml | 31 - .../ceph-ansible/ceph-ansible-per-role.yaml | 19 - environments/ceph-ansible/ceph-ansible.yaml | 25 - environments/ceph-ansible/ceph-dashboard.yaml | 5 - environments/ceph-ansible/ceph-mds.yaml | 2 - environments/ceph-ansible/ceph-rbdmirror.yaml | 2 - environments/ceph-ansible/ceph-rgw.yaml | 6 - environments/cinder-dellemc-powerstore-config.yaml | 1 - environments/cinder-dellemc-vxflexos-config.yaml | 2 +- environments/cinder-hpelefthand-config.yaml | 13 - environments/dcn-storage.yaml | 2 +- environments/deployed-networks.yaml | 2 + environments/deployed-ports.j2.yaml | 24 + .../deployed-server-deployed-neutron-ports.yaml | 8 +- environments/disable-telemetry.yaml | 21 - environments/enable-designate.yaml | 19 +- environments/enable-federation-openidc.yaml | 2 +- environments/enable-legacy-telemetry.yaml | 5 +- environments/enable-secure-rbac.yaml | 4126 ++++++++++++++++++++ environments/enable-stf.yaml | 99 +- .../lifecycle/undercloud-upgrade-prepare.yaml | 1 - environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/low-memory-usage.yaml | 15 +- environments/manila-cephfsganesha-config.yaml | 5 +- environments/manila-cephfsnative-config.yaml | 1 - environments/manila-flashblade-config.yaml | 15 + environments/memcached-use-ips.yaml | 6 + environments/metrics/collectd-write-qdr.yaml | 8 - environments/neutron-ml2-vpp.yaml | 4 +- environments/neutron-ovs-dvr.yaml | 1 + environments/nova-cell.yaml | 23 + environments/ovs-hw-offload.yaml | 11 +- environments/services-baremetal/mistral.yaml | 6 - .../services-baremetal/neutron-ovn-dvr-ha.yaml | 1 - .../services-baremetal/neutron-ovn-ha.yaml | 1 - environments/services-baremetal/neutron-sriov.yaml | 10 +- environments/services/heat-api.yaml | 2 + environments/services/ironic-overcloud.yaml | 3 +- environments/services/mistral.yaml | 6 - environments/services/neutron-mlnx-agent.yaml | 11 +- environments/services/neutron-ovn-dvr-ha.yaml | 1 - environments/services/neutron-ovn-ha.yaml | 1 - environments/services/neutron-ovn-sriov.yaml | 10 +- environments/services/neutron-ovn-standalone.yaml | 1 - environments/services/neutron-ovs-dpdk.yaml | 6 +- environments/services/neutron-ovs-dvr.yaml | 1 + environments/services/neutron-ovs.yaml | 1 + environments/services/neutron-sriov.yaml | 10 +- environments/services/undercloud-aodh.yaml | 7 - environments/services/undercloud-ceilometer.yaml | 9 - environments/services/undercloud-gnocchi.yaml | 7 - environments/services/vpp.yaml | 2 +- environments/services/zaqar-swift-backend.yaml | 4 - environments/services/zaqar.yaml | 3 - environments/ssl/enable-memcached-tls.yaml | 3 - environments/ssl/no-tls-endpoints-public-ip.yaml | 82 - environments/ssl/tls-endpoints-public-dns.yaml | 54 +- environments/ssl/tls-endpoints-public-ip.yaml | 54 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 11 +- environments/standalone/standalone-overcloud.yaml | 8 +- environments/standalone/standalone-tripleo.yaml | 8 +- environments/storage/nova-nfs.yaml | 2 +- environments/undercloud-enable-keystone.yaml | 12 + environments/undercloud-enable-nova.yaml | 10 +- environments/undercloud.yaml | 14 +- environments/undercloud/undercloud-minion.yaml | 14 +- .../updates/update-from-ml2-ovs-from-rocky.yaml | 1 - extraconfig/post_deploy/undercloud_post.py | 85 +- extraconfig/post_deploy/undercloud_post.sh | 24 +- extraconfig/post_deploy/undercloud_post.yaml | 27 +- .../default-network-isolation-ipv6.yaml | 5 + network-data-samples/ganesha-ipv6.yaml | 1 + .../legacy-routed-networks-ipv6.yaml | 9 + network-data-samples/management-ipv6.yaml | 1 + network-data-samples/routed-networks-ipv6.yaml | 5 + network-data-samples/routed-networks.yaml | 2 +- .../vip-data-default-network-isolation.yaml | 39 + network-data-samples/vip-data-fixed-ip.yaml | 35 + network-data-samples/vip-data-routed-networks.yaml | 40 + network/endpoints/build_endpoint_map.py | 308 -- network/endpoints/endpoint_data.yaml | 353 -- network/endpoints/endpoint_map.yaml | 2709 +++---------- network/ports/vip.yaml | 122 - network/ports/vip_v6.yaml | 112 - network/service_net_map.j2.yaml | 14 +- network_data_default.yaml | 7 + overcloud-resource-registry-puppet.j2.yaml | 99 +- overcloud.j2.yaml | 53 +- puppet/role.role.j2.yaml | 2 + .../notes/DdpPackage-581e67f08908ed51.yaml | 5 + .../OVNAvailabilityZone-bc3d44a7e11d83e5.yaml | 5 + ...parameters-neutron-ironic-3d7330a7dc82f43d.yaml | 7 + .../add-computevdpa-role-1f7c5df94d9900b6.yaml | 11 + ...d-ovn-dbs-cluster-support-6193cba5be432865.yaml | 14 + ...ter-kernelargsdeferreboot-5b8e8b2f64c64a91.yaml | 7 + ..._distributed_image_import-97458c56a1ad95d9.yaml | 7 + .../notes/agent_down_time-d6aebe530ca31b9e.yaml | 8 + .../notes/apache-timeout-d61a3910ce7dc162.yaml | 5 + ...hange-ironic-tftp-service-21cc25629b15992f.yaml | 7 + ...cinder-nfs-conversion-dir-ba9b8dce515808ce.yaml | 8 + ...keystone-project-personas-b71c35c4c1a8bbd8.yaml | 9 + .../notes/collectd-write-qdr-f790703e3f0c3245.yaml | 16 + ...precate-IronicIPXEEnabled-6cb68b0bfee5ac4d.yaml | 5 + ...-deployed-server-port-map-99d4d6a01f630d04.yaml | 7 + ...ver_handles_share_servers-d6af4e7c25c34c6e.yaml | 8 + ...la-cephfs-enable-snapshot-7857604802378720.yaml | 6 + .../notes/deprecate-vpp-2911807152cd4b62.yaml | 7 + ...-stf-no-resource-registry-db6ee6319964ab7f.yaml | 20 + ...sync-power-state-interval-90778dbcb0104130.yaml | 6 + ...64le-tftp-folder-creation-36e73d187334dbbe.yaml | 7 + .../notes/glance_image_copy-34a3e62c48eaee0e.yaml | 13 + .../haproxy-frontend-backend-b253d26eeadbfb6b.yaml | 8 + .../notes/ironic-boot-mode-07df530490bead50.yaml | 6 + ...emcache_use_advanced_pool-41ca18221e60c05a.yaml | 7 + .../notes/mistral-removal-df87b8dd8bf6bd4e.yaml | 5 + .../modular-libvirt-daemons-b5ad6043d6510077.yaml | 31 + .../notes/network-update-var-355dbbb4daee7f46.yaml | 14 + ...baremetal-report-interval-d08a44a147a1846e.yaml | 10 + ...ging-plugin-support-added-b2e1292d49e087c3.yaml | 12 + ...on-vnic_type_prohibitlist-21e23e511ca0e922.yaml | 5 + ...api_live_migration_policy-04fe402b554085b9.yaml | 10 + ..._compute_nfs_default_vers-e61d0bf78794be28.yaml | 6 + ...ive_deleted_rows-task_log-efbf0aac77aab128.yaml | 6 + ...t_ssl_cert_simplification-dbee541be9f55ce5.yaml | 30 + ...le-log-offload-by-default-53faec2d64688109.yaml | 6 + .../octavia_service_workers-70887b5882ce0bb0.yaml | 9 + .../notes/ovn-monitor-all-2fefb215c6f7166c.yaml | 8 + .../ovs-dpdk-pmd-params-55df11e67acb6736.yaml | 7 + .../notes/ovs_dpdk_pmd-74f4cfa0ef280cc0.yaml | 5 + ...rge-strategy-endpoint-map-83b8321c72421fd6.yaml | 11 + .../notes/placement-policies-db2704ea63d0bdad.yaml | 4 + .../purestorage_flashblade-75cbbdae48f233e0.yaml | 4 + ...-availability-zone-filter-24a0f480bb2a345b.yaml | 5 + .../notes/remove-cavium-2d8cbe8a5085517a.yaml | 11 + ...der-powerstore_appliances-0a4905808b2b66f1.yaml | 5 + .../remove-hpe-lefthand-23c6beaa777e3dfb.yaml | 8 + ...nductor-iscsi-module-load-1e7d3c72a222196a.yaml | 6 + ...ctavia_post_workflow_name-84083c092cf79c8d.yaml | 4 + .../notes/rename-admin-token-ae1b694f063035c8.yaml | 5 + .../rpc_reponse_timeout-6feb5f62819b2eaf.yaml | 15 + ...on-to-be-false-by-default-4fe7acaa60d2a95f.yaml | 6 + .../notes/swift-recon-cron-8a3023ab693486bd.yaml | 6 + ...ud-upgrade-ephemeral-heat-c838a9c61fc742a3.yaml | 9 +- .../upgradeleapp-per-role-ad2e84e317ec1291.yaml | 6 + .../notes/zaqar-removal-6cdb31276d5a26dc.yaml | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + roles/{ComputeLiquidio.yaml => ComputeVdpa.yaml} | 22 +- roles/Controller.yaml | 7 +- roles/ControllerAllNovaStandalone.yaml | 7 +- roles/ControllerNoCeph.yaml | 7 +- roles/ControllerNovaStandalone.yaml | 7 +- roles/ControllerOpenstack.yaml | 7 +- roles/ControllerSriov.yaml | 7 +- roles/ControllerStorageDashboard.yaml | 7 +- roles/ControllerStorageNfs.yaml | 7 +- roles/DesignateBind.yaml | 42 + roles/Standalone.yaml | 7 +- roles/Undercloud.yaml | 7 +- roles_data.yaml | 7 +- roles_data_undercloud.yaml | 7 +- sample-env-generator/dcn.yaml | 2 +- sample-env-generator/enable-services.yaml | 12 +- sample-env-generator/nova-cell.yaml | 20 + sample-env-generator/openidc.yaml | 2 +- sample-env-generator/ssl.yaml | 221 +- sample-env-generator/standalone.yaml | 16 +- sample-env-generator/undercloud-minion.yaml | 17 +- scripts/check-run-nova-compute | 56 +- scripts/undercloud-upgrade-ephemeral-heat.py | 168 +- test-ansible-requirements.txt | 2 +- tools/convert_policy_yaml_to_heat_template.py | 73 + tools/convert_v1_net_data.py | 74 + tools/merge-new-params-nic-config-script.py | 2 - tools/process-templates.py | 2 +- tools/render-ansible-tasks.py | 11 +- tools/yaml-diff.py | 127 +- tools/yaml-validate.py | 154 +- tox.ini | 15 +- tripleo_heat_templates/environment_generator.py | 4 + vip_data_default.yaml | 8 + zuul.d/layout.yaml | 3 +- 372 files changed, 10682 insertions(+), 9560 deletions(-)

Requirements updates --------------------

diff --git a/test-ansible-requirements.txt b/test-ansible-requirements.txt index 3e87cc19c..28fed0367 100644 --- a/test-ansible-requirements.txt +++ b/test-ansible-requirements.txt @@ -5 +5 @@ yaql>=1.1.3 # Apache 2.0 License -ansible>=2.8.6 # GPL +ansible-core<2.12 # GPL