Open Stack

We are happy to announce the release of:

puppet-tripleo 5.6.9

This release is part of the newton release series.

Download the package from:

    https://tarballs.openstack.org/puppet-tripleo/

For more details, please see below.

5.6.9
^^^^^


New Features
************

* Adds composable service interface for Neutron LBaaSv2 service.


Security Issues
***************

* TLS v1.0 connections are no longer accepted by our HAProxy
  configuration.

Changes in puppet-tripleo 5.6.8..5.6.9
--------------------------------------

0a921f5 Release 5.6.9 (newton)
b83cc42 Disallow TLS v1.0 from HAProxy
712df44 Extract local CA if it expired
26dfe7a firewall: don't reload IPtables after cleanup
419afe4 Set rgw_keystone_revocation_interval to 0 for ceph::rgw::keystone
64e40fa Composable Role for Neutron LBaaS
5618a27 Make exposing the keystone admin port optional


Diffstat (except docs and test files)
-------------------------------------

manifests/certmonger/ca/local.pp                   |  2 +-
manifests/firewall.pp                              | 35 ++++++-----------
manifests/haproxy.pp                               | 31 ++++++++++-----
manifests/profile/base/ceph/rgw.pp                 |  9 +++--
manifests/profile/base/neutron/lbaas.pp            | 44 ++++++++++++++++++++++
manifests/profile/pacemaker/neutron/lbaas.pp       | 44 ++++++++++++++++++++++
metadata.json                                      |  2 +-
...le_role_for_neutron_lbaas-acdf08f1a9dfd3fe.yaml |  3 ++
.../notes/No-TLS-v1.0-0edeac680bb51f94.yaml        |  4 ++
9 files changed, 136 insertions(+), 38 deletions(-)