Open Stack

We are amped to announce the release of:

puppet-tripleo 11.6.0: Puppet module for OpenStack TripleO

This release is part of the train stable release series.

The source is available from:

    https://opendev.org/openstack/puppet-tripleo

Download the package from:

    https://tarballs.openstack.org/puppet-tripleo/

Please report issues through:

    https://bugs.launchpad.net/puppet-tripleo/+bugs

For more details, please see below.

11.6.0
^^^^^^


New Features
************

* Add ability to specify the memcache_security_strategy and
  memcache_secret_key for keystone authtoken middleware. The keys used
  by individual services are hashed with a salt (the service name), to
  isolate them.

* Add ability to specify memcached port for all services. The port
  defaults to hiera('memcached_authtoken_port', 11211) for authtoken
  middleware and hiera('memcached_port', 11211) for other uses.


Bug Fixes
*********

* libvirt 6.8.0 introduces virt-ssh-helper which prepends the
  libvirt ssh command with a "which virt-ssh-helper". libvirt used to
  first check for *nc* (netcat). But these two libvirt commits[1][2]
  have now changed it to first look for *virt-ssh-helper*, if it not
  available, then fall back to *nc*. This trips up the 'nova-
  migration-wrapper' as it does not support virt-ssh-helper atm. Until
  this is implemented, this change force to use "netcat" (*nc*) by
  appending to the migration URI: "&proxy=netcat" [1]
  https://libvirt.org/git/?p=libvirt.git;a=commit;h=f8ec7c842d (rpc:
  use new virt-ssh-helper binary for remote tunnelling, 2020-07-08)
  [2] https://libvirt.org/git/?p=libvirt.git;a=commit;h=7d959c302d
  (rpc: Fix virt-ssh-helper detection, 2020-10-27)

Changes in puppet-tripleo 11.5.0..11.6.0
----------------------------------------

1bdc2863 Handle cinder_mount_point_base for cinder mounting needs
0108687c Add parameters for multipath connection in cinder store
d0c88554 Fix novavnc haproxy network
c765a81e Fix live-migration with libvirt >= 6.8.0
8d5bb4b8 Add ability to specify memcached port
e54d6040 Add check for bootstrap_node for downcase
112f3799 Stop including nova::metadata on computes
cb960b93 Allow OCF resources to be created with --force
817e6a36 Fix manila-share with ceph-nfs backend
cff548bb Add authtoken security options


Diffstat (except docs and test files)
-------------------------------------

manifests/haproxy.pp                               |  4 +--
manifests/profile/base/aodh.pp                     |  2 +-
manifests/profile/base/aodh/api.pp                 |  2 +-
manifests/profile/base/aodh/authtoken.pp           | 32 +++++++++++++++++++---
manifests/profile/base/barbican/api.pp             |  2 +-
manifests/profile/base/barbican/authtoken.pp       | 32 +++++++++++++++++++---
manifests/profile/base/ceilometer/upgrade.pp       |  2 +-
manifests/profile/base/cinder.pp                   |  2 +-
manifests/profile/base/cinder/api.pp               |  2 +-
manifests/profile/base/cinder/authtoken.pp         | 32 +++++++++++++++++++---
manifests/profile/base/database/mysql.pp           |  2 +-
manifests/profile/base/designate/authtoken.pp      | 32 +++++++++++++++++++---
manifests/profile/base/designate/central.pp        |  2 +-
manifests/profile/base/glance/api.pp               |  2 +-
manifests/profile/base/glance/authtoken.pp         | 32 +++++++++++++++++++---
manifests/profile/base/glance/backend/cinder.pp    | 18 ++++++++++++
manifests/profile/base/gnocchi/api.pp              |  2 +-
manifests/profile/base/gnocchi/authtoken.pp        | 32 +++++++++++++++++++---
manifests/profile/base/heat/api.pp                 |  2 +-
manifests/profile/base/heat/api_cfn.pp             |  2 +-
manifests/profile/base/heat/authtoken.pp           | 32 +++++++++++++++++++---
manifests/profile/base/heat/engine.pp              |  2 +-
manifests/profile/base/horizon.pp                  |  2 +-
manifests/profile/base/ironic.pp                   |  2 +-
manifests/profile/base/ironic/api.pp               |  2 +-
manifests/profile/base/ironic/authtoken.pp         | 32 +++++++++++++++++++---
manifests/profile/base/ironic/conductor.pp         |  2 +-
manifests/profile/base/ironic_inspector.pp         |  2 +-
.../profile/base/ironic_inspector/authtoken.pp     | 32 +++++++++++++++++++---
manifests/profile/base/keystone.pp                 |  8 +++++-
manifests/profile/base/manila.pp                   |  2 +-
manifests/profile/base/manila/api.pp               |  2 +-
manifests/profile/base/manila/authtoken.pp         | 32 +++++++++++++++++++---
manifests/profile/base/mistral.pp                  |  2 +-
manifests/profile/base/mistral/api.pp              |  2 +-
manifests/profile/base/mistral/engine.pp           |  2 +-
manifests/profile/base/mistral/event_engine.pp     |  2 +-
manifests/profile/base/mistral/executor.pp         |  2 +-
manifests/profile/base/neutron/authtoken.pp        | 32 +++++++++++++++++++---
manifests/profile/base/neutron/ovn_northd.pp       |  2 +-
manifests/profile/base/neutron/plugins/ml2.pp      |  2 +-
manifests/profile/base/neutron/plugins/nsx.pp      |  2 +-
manifests/profile/base/neutron/plugins/nuage.pp    |  2 +-
.../profile/base/neutron/plugins/opencontrail.pp   |  2 +-
manifests/profile/base/neutron/plugins/plumgrid.pp |  2 +-
manifests/profile/base/neutron/server.pp           |  2 +-
manifests/profile/base/nova.pp                     | 13 ++++++---
manifests/profile/base/nova/api.pp                 |  2 +-
manifests/profile/base/nova/authtoken.pp           | 32 +++++++++++++++++++---
manifests/profile/base/nova/compute.pp             |  5 ----
manifests/profile/base/nova/conductor.pp           |  2 +-
manifests/profile/base/nova/ec2api.pp              |  2 +-
manifests/profile/base/nova/metadata.pp            |  2 +-
manifests/profile/base/nova/migration/client.pp    |  5 +++-
manifests/profile/base/octavia/api.pp              |  2 +-
manifests/profile/base/octavia/authtoken.pp        | 32 +++++++++++++++++++---
manifests/profile/base/panko/api.pp                |  2 +-
manifests/profile/base/panko/authtoken.pp          | 32 +++++++++++++++++++---
manifests/profile/base/placement.pp                |  2 +-
manifests/profile/base/placement/api.pp            |  2 +-
manifests/profile/base/placement/authtoken.pp      | 32 +++++++++++++++++++---
manifests/profile/base/rabbitmq.pp                 |  2 +-
manifests/profile/base/sahara.pp                   |  2 +-
manifests/profile/base/sahara/engine.pp            |  2 +-
manifests/profile/base/swift/proxy.pp              | 10 +++----
manifests/profile/base/trove/api.pp                |  2 +-
manifests/profile/base/zaqar.pp                    |  2 +-
manifests/profile/pacemaker/ceph_nfs.pp            |  7 +++--
manifests/profile/pacemaker/cinder/backup.pp       |  2 +-
.../profile/pacemaker/cinder/backup_bundle.pp      |  2 +-
manifests/profile/pacemaker/cinder/volume.pp       |  2 +-
.../profile/pacemaker/cinder/volume_bundle.pp      |  2 +-
manifests/profile/pacemaker/database/mysql.pp      |  2 +-
.../profile/pacemaker/database/mysql_bundle.pp     |  7 ++++-
manifests/profile/pacemaker/database/redis.pp      |  2 +-
.../profile/pacemaker/database/redis_bundle.pp     |  7 ++++-
manifests/profile/pacemaker/haproxy.pp             |  2 +-
manifests/profile/pacemaker/haproxy_bundle.pp      |  2 +-
manifests/profile/pacemaker/manila.pp              |  2 +-
manifests/profile/pacemaker/manila/share_bundle.pp |  2 +-
manifests/profile/pacemaker/ovn_dbs_bundle.pp      |  7 ++++-
manifests/profile/pacemaker/rabbitmq.pp            |  2 +-
manifests/profile/pacemaker/rabbitmq_bundle.pp     |  7 ++++-
.../add-memcache-security-92060c4fe540774c.yaml    |  7 +++++
.../notes/add-memcached-port-048959c2f58f0a57.yaml |  6 ++++
...e_live_migration_force_nc-f903a09955164ad9.yaml | 15 ++++++++++
...pleo_profile_base_glance_backend_cinder_spec.rb |  6 ++++
87 files changed, 584 insertions(+), 140 deletions(-)