Open Stack

We high-spiritedly announce the release of:

tripleo-heat-templates 6.2.0: Heat templates for deploying OpenStack
with OpenStack.

This release is part of the ocata stable release series.

The source is available from:

    http://git.openstack.org/cgit/openstack/tripleo-heat-templates

Download the package from:

    https://tarballs.openstack.org/tripleo-heat-templates/

Please report issues through launchpad:

    http://bugs.launchpad.net/tripleo

For more details, please see below.

6.2.0
^^^^^


New Features
************

* Add parameters to control the Cinder NAS security settings
  associated with the NFS and NetApp Cinder back ends. The settings
  are disabled by default.


Upgrade Notes
*************

* We are not changing the rabbitmq ha-mode policy during upgrades
  any longer. The policy chosen at deploy time will remain the same
  but can be changed manually.

* Disabled cephfs snapshot support
  (ManilaCephFSNativeCephFSEnableSnapshots parameter) in manila by
  default.


Bug Fixes
*********

* When "environments/services/ironic.yaml" is used, enable periodic
  task in nova-scheduler to automatically discover new nodes.
  Otherwise a user has to run nova management command on controllers
  each time.

* Due to https://bugs.launchpad.net/tripleo/+bug/1686337 we switch
  the default of rabbitmq back ha-mode "all". This is to make the
  installation more robust in the face of network issues.

* Disable ceilometer in the swift proxy middleware pipeline out of
  the box. This generates a lot of events with gnocchi and swift
  backend and causes heavy load. It should be easy to enable if
  needed.

* Expose metric_processing_delay to tweak gnocchi performance.

* Incorrect network used for Glance API service.

* The stack name can now be overridden in the get-occ-config.sh
  script for deployed-server's by setting the $STACK_NAME variable in
  the environment.

* This commit merges both [Pre|Post]Puppet and [Pre|Post]Config
  resources, giving an agnostic name for the configuration steps. The
  [Pre|Post]Puppet resource is removed and should not be used anymore.


Other Notes
***********

* All nodes now enable "arp_accept" sysctl setting to help with
  honoring gratuitous ARP packets in their ARP tables. While sources
  of gratuitous ARP packets are diverse, this comes especially useful
  for Neutron floating IP addresses that roam between devices, and for
  which Neutron L3 agent sends gratuitous ARP packets to update all
  network nodes about IP address new locations.

Changes in tripleo-heat-templates 6.1.0..6.2.0
----------------------------------------------

08a8980 Adds check for existing yum process during the legacy minor update
c23fa40 Backport container CI environments to Ocata
ec87f2b cisco nexus: keep OVS on the Compute
f762bbc Disable swift middleware ceilometer pipeline by default
97c3806 Enable periodic task to discover cell hosts when ironic is used
fa37664 Fixes incorrect glance api network
80e5f50 Add parameter Ec2ApiExternalNetwork for VPCs
21eb374 Add support for Cinder "NAS secure" driver params
32e5fe6 Add ignore_projects to filter gnocchi events
3f053a9 Dell SC: Add exclude_domain_ip option
cd7b497 Add fqdn_external
628d7a7 Moving *postconfig where it was *postpuppet
adf344a Add support for autofencing to Pacemaker Remote.
c9afae9 Expose metric delay processing metric
c32bbba Fix the constraints for THT params NeutronDpdkCoreList and HostCpusList
862585b Handle upgrading cinder-volume under pacemaker
558f8e5 Restrict nova migration ssh tunnel
144f02f Updated from global requirements
0b6ce86 Enable arp_accept for all interfaces
7859f30 Add heat environment for disabling all telemetry services
d8e2730 Add $STACK_NAME input var
92bc869 Dell SC: Add secondary DSM support
e32ff14 Add NodeCreateBatchSize parameter
75a5a46 Timeout early on pcs cluster status check0 during upgrade.
9f272bd Fix SshHostPubKeyDeployment on containerized nova-compute.
7017ba9 Disable ComputeNeutron* for cisco-nexus-ucsm
687b0da Fix for the resource ControllerPostPuppetMaintenanceModeDeployment
ffb7ba5 Merge pre|post puppet resources into pre|post config.
43b33c7 Fix up pacemaker_status test in yum_update.sh
c224a4c Initial VIP ipv6 minor update code
37a8eaf Addition of firewall rules for Nuage
f907ee3 Ensure AllNodesExtraConfig runs before AllNodesDeploySteps
cc9695e Unset the UpgradeInitCommand on converge
4707843 upgrades: deploy mod_ssl when upgrading apache
ff4db0d Change the default for rabbitmq back to ha-mode: all
12f0f6c Disable Manila CephFS snapshots by default


Diffstat (except docs and test files)
-------------------------------------

ci/common/all-nodes-validation-disabled.yaml       |  43 +++++++
ci/environments/multinode-containers.yaml          |  73 +++++++++++
ci/environments/multinode.yaml                     |   4 +-
ci/environments/multinode_major_upgrade.yaml       |   4 +-
.../scenario001-multinode-containers.yaml          | 139 +++++++++++++++++++++
ci/environments/scenario001-multinode.yaml         |   4 +-
.../scenario002-multinode-containers.yaml          |  74 +++++++++++
ci/environments/scenario002-multinode.yaml         |   4 +-
.../scenario003-multinode-containers.yaml          |  72 +++++++++++
ci/environments/scenario003-multinode.yaml         |   4 +-
.../scenario004-multinode-containers.yaml          |  98 +++++++++++++++
ci/environments/scenario004-multinode.yaml         |   4 +-
deployed-server/scripts/get-occ-config.sh          |   7 +-
environments/cinder-dellsc-config.yaml             |  11 +-
.../deployed-server-pacemaker-environment.yaml     |   4 +-
environments/disable-telemetry.yaml                |  20 +++
environments/major-upgrade-converge.yaml           |   1 +
environments/manila-cephfsnative-config.yaml       |   2 +-
environments/neutron-ml2-cisco-nexus-ucsm.yaml     |   1 +
environments/neutron-nuage-config.yaml             |   1 -
environments/puppet-pacemaker.yaml                 |   4 +-
environments/services/ironic.yaml                  |   2 +
extraconfig/tasks/pacemaker_common_functions.sh    |  61 +++++++++
extraconfig/tasks/post_puppet_pacemaker.j2.yaml    |  42 +++++++
extraconfig/tasks/post_puppet_pacemaker.yaml       |  37 ------
.../tasks/post_puppet_pacemaker_restart.yaml       |   2 +-
extraconfig/tasks/pre_puppet_pacemaker.yaml        |   2 +-
extraconfig/tasks/yum_update.sh                    |  36 ++++--
network/service_net_map.j2.yaml                    |   3 +-
overcloud-resource-registry-puppet.j2.yaml         |   5 -
overcloud.j2.yaml                                  |   9 ++
puppet/blockstorage-role.yaml                      |   1 +
puppet/cephstorage-role.yaml                       |   1 +
puppet/compute-role.yaml                           |   1 +
puppet/controller-role.yaml                        |   1 +
puppet/objectstorage-role.yaml                     |   1 +
puppet/puppet-steps.j2                             |  44 +++----
puppet/role.role.j2.yaml                           |   1 +
puppet/services/aodh-api.yaml                      |  12 +-
puppet/services/apache.yaml                        |   3 +
puppet/services/barbican-api.yaml                  |  32 +++--
puppet/services/ceilometer-api.yaml                |  12 +-
puppet/services/cinder-api.yaml                    |  50 ++++----
puppet/services/cinder-backend-dellsc.yaml         |  20 +++
puppet/services/cinder-backend-netapp.yaml         |   8 ++
puppet/services/cinder-volume.yaml                 |  16 +++
puppet/services/ec2-api.yaml                       |  15 +++
puppet/services/gnocchi-api.yaml                   |  12 +-
puppet/services/gnocchi-base.yaml                  |   5 +
puppet/services/kernel.yaml                        |   2 +
puppet/services/keystone.yaml                      |  15 ++-
puppet/services/manila-backend-cephfs.yaml         |   2 +-
puppet/services/neutron-compute-plugin-nuage.yaml  |  10 ++
puppet/services/neutron-ovs-dpdk-agent.yaml        |   4 +-
puppet/services/neutron-plugin-nuage.yaml          |   7 +-
puppet/services/nova-compute.yaml                  |   5 +
puppet/services/nova-scheduler.yaml                |   9 ++
puppet/services/pacemaker.yaml                     |   2 +
puppet/services/pacemaker/cinder-volume.yaml       |  15 +++
puppet/services/pacemaker/rabbitmq.yaml            |  29 -----
puppet/services/pacemaker_remote.yaml              |  38 ++++++
puppet/services/panko-api.yaml                     |  42 ++++---
puppet/services/rabbitmq.yaml                      |   8 +-
.../notes/mod_ssl-e7fd4db71189242e.yaml            |   5 +
puppet/services/swift-proxy.yaml                   |  26 +++-
...der-nas-secure-parameters-53f9d6a6e9bc129b.yaml |   5 +
.../baremetal-cell-hosts-cd5cf5aa8a33643c.yaml     |   6 +
...mq-ha-mode-policy-default-6c6cd7f02181f0e0.yaml |  11 ++
.../disable-ceilo-middleware-6853cb92e3e08161.yaml |   5 +
...phfs-snapshots-by-default-d5320a05d9b501cf.yaml |   5 +
.../notes/enable-arp_accept-6296b0113bc56b10.yaml  |   9 ++
...e-metric-processing-delay-0c098d7ec0af0728.yaml |   3 +
.../fix-glance-api-network-4f9d7c20475a5994.yaml   |   3 +
.../notes/stack-name-input-73f4d4d052f1377e.yaml   |   5 +
...-preconfig-and-postconfig-debd5f28bc578d51.yaml |   6 +
requirements.txt                                   |   2 +-
79 files changed, 1085 insertions(+), 232 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index cb3f96e..057aa28 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4 +4 @@
-pbr<2.0.0,>=1.8 # Apache-2.0
+pbr>=1.8 # Apache-2.0