Open Stack

We eagerly announce the release of:

tripleo-heat-templates 8.0.2: Heat templates for deploying OpenStack
with OpenStack.

This release is part of the queens stable release series.

The source is available from:

    http://git.openstack.org/cgit/openstack/tripleo-heat-templates

Download the package from:

    https://tarballs.openstack.org/tripleo-heat-templates/

Please report issues through launchpad:

    https://bugs.launchpad.net/tripleo

For more details, please see below.

8.0.2
^^^^^


New Features
************

* Add Parameters to Configure Ulimit for Containers. These
  parameters can be used to configure ulimit per container basis as
  per the requirement of the deployment. Following parameters are
  added for neutron, nova and cinder:- - DockerNeutronDHCPAgentUlimit
  defaults to nofile=1024 - DockerNeutronL3AgentUlimit defaults to
  nofile=1024 - DockerOpenvswitchUlimit defaults to nofile=1024 -
  DockerNovaComputeUlimit defaults to nofile=1024 -
  DockerCinderVolumeUlimit defaults to nofile=131072


Deprecation Notes
*****************

* Using 'client' for OvsVhostuserMode parameter. See 'vhost-user'
  section at http://docs.openvswitch.org/en/latest/topics/dpdk/vhost-
  user/

* odl-dlux-all feature for OpenDaylight is no longer supported and
  removed from default installed OpenDaylightFeatures. See
  https://bugs.launchpad.net/tripleo/+bug/1751857


Bug Fixes
*********

* When using get-occ-config.sh with a role using a count greater
  than 1, the script will now configure all nodes that are of that
  role type instead of exiting after only configuring the first.

* Fixes Neutron certificate and key for TLS deployments to have the
  correct user/group IDs.

* Fixes missing type "flat" from the default allowed network types
  for the ODL OVS parameter HostAllowedNetworkTypes.  See
  https://bugs.launchpad.net/tripleo/+bug/1762495

* Fixes default of vhostuser_mode in ODL-OVS to be server, and
  clarifies the configuration parameter. See
  https://bugs.launchpad.net/tripleo/+bug/1762473

* Delete ODL data folder while updating/upgrading ODL.

* The default values for the PcsdPassword and PacemakerRemoteAuthkey
  parameters have been removed, as they did not result in a
  functioning pacemaker installation. These values are instead
  generated by tripleo-common, and in the cases where they are not
  (direct API), we want to fail explicitly if they are not provided.

* "{{role.name}}ExtraConfig" will now be honored even when using
  deprecated params in roles_data.yaml. Previously, its value was
  ignored and never used even though it is defined as a valid
  parameter in the rendered template.

Changes in tripleo-heat-templates 8.0.1..8.0.2
----------------------------------------------

5818195 Revert "Fixes ceph-external docker service name"
17be56b Disallow SSLv2, SSLv3 and TLS1.0 in httpd for FedRAMP compliance.
d838e87 Reduce verbosity during mysql bootstrap
eec1d48 Correct indentation and file path
4390032 Rely on client defaults for the Ceph container image to use in CI
bb9d778 FFU: Use yum shell instead of ansible yum module
eff22ee Disable FluentClient service for ffwd/upgrades.
e4a85e5 Consume RoleData config from config download files
e00e5b2 Upgrade: make bundles use new container image name after upgrade
af81644 Add validation task in docker services [Octavia]
a51fa30 Removes odl-dlux-gui feature for ODL
7fb5171 Update environment files for Q upgrade and ffwd upgrade
9d2fe5b Add prepare/converge env files for update
367605c Update OS::TripleO::Services::ComputeNeutronCorePlugin for containers
ca09d08 Set ulimit for nova-compute and cinder-volume
a16c4ec Fix typo in ovn_cms_options config
5592670 Removed unnecessary services from the LiquidioCompute role.
9e7417b Mount the public TLS certificate for HAProxy on up(date|grade) on pacemaker
ba7e1b5 Fix missing allowed network type 'flat' for ODL OVS
c36e41f Added network enabled check in multiple nic role rendering file
d5f8581 Remove config.json for old style nic config files when using new style
c80ce85 Fixes the OvsVhostuserMode heat parameter
b055eb3 Apply the vhost group parameter for the vhost_sockets directory creation
630874f Fixes ceph-external docker service name
ff37016 Correct the InternalTLSVncCAFile to comply with selinux policy
f30d135 [queens] Put back (now empty) fluentd-client.yaml
6d936d6 Set ulimit for neutron agent containers
c72c1fa Add firewall rule to octavia health mgmt iface
18892b0 Enable Octavia dashboard on horizon container
324646d Revert "FFU: Add support for panko service upgrade"
cbb1ed5 Added Liquidio service definition in overcloud puppet registry
da28a08 Do not create NetworkVlanID is the value is not defined
7299ad4 Fixes Neutron certificate and key permissions
5d76614 Collectd needs access to /var/run/ceph to load the ceph plugin
c454aea Refresh keystone after deployment
d97fc05 get-occ-config.sh: fix handling multiple nodes in a role
7f95de6 Remove default value for pacmaker passwords
2113bf3 Remove the os-net-config element config.json template
6b656b9 FFU: Add support for panko service upgrade
e48be8e Remove the lacp bond mode constraints
f8b5a94 Added the missing attributes for roles_data of ovs-dpdk-agent docker service
8fece3d Resource name correction
aec6b1d Fix fluentd upgrade tasks during FFU.
5a49f34 FFU: Fix gnocchi FFU tasks
123e6fe HAProxy: expose stats socket in HA deployment after upgrade
f2e19a5 Honor {{role.name}}ExtraConfig with deprecated params
8c22a64 Correctly set NeutronMl2PluginBase for OVN scenario
9cb286d Upgrade data on disk on mysql major upgrade - non HA
2968876 Assign Cinder's backend_host when deploying for HA
f4cd1f9 Make heat parameter plugin_dirs configurable
8b13e83 Add support of netapp configuration for glance in THT


Diffstat (except docs and test files)
-------------------------------------

.../scenario001-multinode-containers.yaml          |   1 -
.../scenario004-multinode-containers.yaml          |   1 -
.../scenario007-multinode-containers.yaml          |   1 +
common/deploy-steps-tasks.yaml                     |  64 +++++++-
deployed-server/scripts/get-occ-config.sh          |   2 +-
environments/cavium-liquidio.yaml                  |   6 +
environments/fast-forward-upgrade.yaml             |  18 ---
environments/lifecycle/ffwd-upgrade-converge.yaml  |  10 ++
environments/lifecycle/ffwd-upgrade-prepare.yaml   |  27 ++++
environments/lifecycle/update-converge.yaml        |   5 +
environments/lifecycle/update-prepare.yaml         |   7 +
environments/lifecycle/upgrade-converge.yaml       |   9 ++
environments/lifecycle/upgrade-prepare.yaml        |  21 +++
.../major-upgrade-composable-steps-docker.yaml     |  15 --
environments/major-upgrade-composable-steps.yaml   |  13 --
environments/major-upgrade-converge-docker.yaml    |  12 --
environments/major-upgrade-converge.yaml           |  11 --
environments/network-environment-v6.j2.yaml        |   2 +
environments/network-environment.j2.yaml           |   2 +
environments/storage/glance-nfs.yaml               |   8 +
.../bond-with-vlans/controller-no-external.j2.yaml |   4 -
.../config/bond-with-vlans/controller-v6.j2.yaml   |   4 -
network/config/bond-with-vlans/role.role.j2.yaml   |   4 -
network/config/multiple-nics/role.role.j2.yaml     |   2 +-
network/scripts/run-os-net-config.sh               |   8 +
overcloud-resource-registry-puppet.j2.yaml         |   3 +-
puppet/extraconfig/tls/tls-cert-inject.yaml        |  33 +++-
puppet/role.role.j2.yaml                           |   2 +-
puppet/services/apache.j2.yaml                     |   1 +
puppet/services/glance-api.yaml                    |  39 +++++
puppet/services/heat-engine.yaml                   |   5 +
puppet/services/neutron-plugin-ml2-nuage.yaml      |   4 +-
puppet/services/nova-libvirt.yaml                  |   2 +-
puppet/services/nova-vnc-proxy.yaml                |   2 +-
puppet/services/octavia-health-manager.yaml        |  11 ++
puppet/services/opendaylight-api.yaml              |   2 +-
puppet/services/opendaylight-ovs.yaml              |  13 +-
puppet/services/pacemaker.yaml                     |   2 -
puppet/services/pacemaker/cinder-volume.yaml       |   2 +-
puppet/services/pacemaker_remote.yaml              |   2 -
...arams_to_configure_ulimit-2359aa058da58054.yaml |  15 ++
...with-role-count-greater-1-10ce2010556e5b76.yaml |   5 +
...utron-cert-key-perms.yaml-efcc17f188798cc4.yaml |   5 +
...ovs-allowed-network-types-d196d6d40fadb1bc.yaml |   6 +
...fix-odl-ovs-vhostusermode-7bc2b64fd2676ca2.yaml |  10 ++
.../odl_delete_data_folder-b8c2f9a9382fd692.yaml   |   3 +
.../remove-odl-dlux-gui-4728de06c973cd53.yaml      |   6 +
...-passwords-default-values-dd0cfdf7922ecf90.yaml |   7 +
...aConfig-with-deprecations-2688f34fbc6de74a.yaml |   6 +
roles/ComputeLiquidio.yaml                         |   3 -
sample-env-generator/storage.yaml                  |   2 +
87 files changed, 1066 insertions(+), 226 deletions(-)