Open Stack

We are glad to announce the release of:

instack-undercloud 6.1.0: instack-undercloud

This release is part of the ocata stable release series.

The source is available from:

    http://git.openstack.org/cgit/openstack/instack-undercloud

Download the package from:

    https://tarballs.openstack.org/instack-undercloud/

Please report issues through launchpad:

    http://bugs.launchpad.net/tripleo

For more details, please see below.

6.1.0
^^^^^


Upgrade Notes
*************

* Changed the configuration of endpoints that UI uses in order to
  connect to the Undercloud in a non-SSL deployment.  The port number
  that the UI now uses to communicate with the Undercloud for non-SSL
  connections is 3000, which supports endpoint proxy configuration.
  Previously, this port number was the default port number for the
  service endpoint that UI connected to.


Bug Fixes
*********

* Fixes bug 1668775 Certmonger certificate does not include EKUs

* Add gnocchi to events dispatcher so ceilometer can publish events
  to panko and gnocchi.

* Add OS_AUTH_TYPE to undercloud stackrc file. Not all clients
  default to keystone auth, so lets explicitly set the auth type in
  env.

* Fixes bug 1663199 UI doesn't work without manual update on HTTP
  undercloud

* In /etc/heat/heat.conf, [clients]/endpoint_type was configured to
  use the internal endpoints and this was hardcoded in puppet-stack-
  config.pp so there was no way to change it. It's now configurable
  via the hiera key heat_clients_endpoint_type.

* The Heat CFN endpoint is now created in Keystone during the
  undercloud install. A new configuration option,
  undercloud_heat_cfn_password is added for the heat_cfn service user
  associated with the endpoint.

* Previously, when an IP value was provided for the
  undercloud_public_host or undercloud_admin_host config value, it was
  validated to ensure it fell within the network_cidr.  This was to
  avoid problems when the CIDR was changed but the IPs were not.
  However, this validation was broken for a time in the case where
  generate_service_certificate was used.  During this time, the UI
  began to depend on the broken validation as it needs to listen on a
  routable network, which the provisioning network often is not. When
  the validation was fixed, the user was no longer able to configure
  the host values to listen on a different routable network.

  To enable this UI functionality again, the host validation has been
  disabled when enable_ui is true.  This means the user is responsible
  for selecting functional host values, but the UI can once again be
  configured to listen on a separate network.

* Add a dependency to restart collector after other services are up
  and ceilometer upgrade is complete.

* Run ceilometer-upgrade conditionally when gnocchi is running so
  that gnocchi resource types are created.

Changes in instack-undercloud 6.0.0..6.1.0
------------------------------------------

6790ae8 Update Gemfile to pull spec_helper from stable/ocata
f879305 Set a dependency on collector
d8aa7d1 Dont include wsgi profile when legacy flag is disabled
ff55e17 Set default domain for all keystone users
dc6566d Replace hardcoded regions by hiera call
7aff3cd Remove obsolete flag on gnocchi-upgrade
f23f320 Add gnocchi to events dispatchers
c01722c Create Heat API CFN endpoint
8c0de18 Increase size of heat json message
e32b025 Disable VIP validation when UI is enabled
f62bc50 Set OS_AUTH_TYPE on undercloud stackrc
63d085e Run ceilometer-upgrade for gnocchi conditionally
d29886e Configurable [clients]/endpoint_type for heat.conf
97f3eeb Use purged for firewalld
5f47eeb Align stars to fix CI
9a1bafa Provide correct non-SSL port config in ui config
dd5c683 Add certificate EKUs to public endpoint cert


Diffstat (except docs and test files)
-------------------------------------

Gemfile                                            |  6 +--
bindep.txt                                         |  0
.../puppet-stack-config/puppet-stack-config.pp     | 43 +++++++++++++++++++---
.../puppet-stack-config.yaml.template              | 28 +++++++++-----
.../os-apply-config/root/stackrc                   |  2 +
instack_undercloud/undercloud.py                   | 32 ++++++++++------
instack_undercloud/validator.py                    |  9 ++++-
.../add-certificate-ekus-13e92513c562f0dc.yaml     |  5 +++
...-gnocchi-event-dispatcher-d70df046292e333e.yaml |  4 ++
.../notes/add-os-auth-type-5ed9338e73e0e172.yaml   |  4 ++
...t-nonssl-undercloud-ports-34e60f87f3eb7ad6.yaml | 12 ++++++
...ble-clients-endpoint_type-fc658f7ae935133f.yaml |  7 ++++
.../create-heat-cfn-endpoint-c7c00e3b61a98b5e.yaml |  6 +++
.../relax-validation-for-ui-f27a5e9b64d1d6c1.yaml  | 17 +++++++++
.../notes/restart-collector-b043489fcdf1e9c7.yaml  |  4 ++
...eilometer-gnocchi-upgrade-215cb426d25d11e9.yaml |  4 ++
scripts/instack-haproxy-cert-update                | 11 ++++++
tox.ini                                            |  3 +-
undercloud.conf.sample                             |  8 +++-
21 files changed, 181 insertions(+), 40 deletions(-)