[release-announce] puppet-tripleo 14.1.0 (wallaby)
no-reply at openstack.org
no-reply at openstack.org
Wed May 5 15:51:52 UTC 2021
We exuberantly announce the release of:
puppet-tripleo 14.1.0: Puppet module for OpenStack TripleO
This release is part of the wallaby stable release series.
The source is available from:
https://opendev.org/openstack/puppet-tripleo
Download the package from:
https://tarballs.openstack.org/puppet-tripleo/
Please report issues through:
https://bugs.launchpad.net/puppet-tripleo/+bugs
For more details, please see below.
14.1.0
^^^^^^
New Features
************
* Add ability to specify the memcache_security_strategy and
memcache_secret_key for keystone authtoken middleware. The keys used
by individual services are hashed with a salt (the service name), to
isolate them.
* New "tripleo::profile::base::cinder::backup::gcs" and
"tripleo::profile::base::cinder::backup::s3" classes add support for
configuring the cinder backup service's GCS (Google Cloud service)
and Amazon S3 backends.
* Add support for configuring multiple cinder RBD backends, each
associated with a different ceph cluster.
* Add parameter for setting monitor interval for ovndbs (default is
30s)
* Add posibilities to configure replication_probe_interval for
ovsdb- server. It configure probe interval for connection for ovsdb-
server when it is in backup mode and connects to the active ovsdb-
server for replication
Upgrade Notes
*************
* The following deprecated parameters in the
"tripleo::profile::base::nova::api" class have been removed.
* "nova_metadata_network"
* "metadata_tls_proxy_bind_ip"
* "metadata_tls_proxy_fqdn"
* "metadata_tls_proxy_port"
* Remove deprecated
tripleo::profile::base::cinder::volume::dellemc_xtremio_iscsi. Use
tripleo::profile::base::cinder::volume::dellemc_xtremio instead.
Deprecation Notes
*****************
* Remove support for puppet_certmonger. All certificates are now
managed by the linux-system-roles.certificate ansible role
configured from each service's heat template. ::tripleo::certmonger
puppet files are removed.
Bug Fixes
*********
* libvirt 6.8.0 introduces virt-ssh-helper which prepends the
libvirt ssh command with a "which virt-ssh-helper". libvirt used to
first check for *nc* (netcat). But these two libvirt commits[1][2]
have now changed it to first look for *virt-ssh-helper*, if it not
available, then fall back to *nc*. This trips up the 'nova-
migration-wrapper' as it does not support virt-ssh-helper atm. Until
this is implemented, this change force to use "netcat" (*nc*) by
appending to the migration URI: "&proxy=netcat" [1]
https://libvirt.org/git/?p=libvirt.git;a=commit;h=f8ec7c842d (rpc:
use new virt-ssh-helper binary for remote tunnelling, 2020-07-08)
[2] https://libvirt.org/git/?p=libvirt.git;a=commit;h=7d959c302d
(rpc: Fix virt-ssh-helper detection, 2020-10-27)
* Bug #1915800 (https://bugs.launchpad.net/cinder/+bug/1915800): Add
support for ports filtering in XtremIO driver.
Changes in puppet-tripleo 14.0.0..14.1.0
----------------------------------------
21bb81dd Bump metadata.json major to 14.1.0 for TripleO wallaby release
57383212 Remove the manifest for the Keepalived service
52a9396a cinder: remove support for the Veritas HyperScale Driver
48832c96 Remove puppet-certmonger related puppet-files
7486679c Remove redundant import of barbican::keystone::authtoken
92c76046 Add haproxy prometheus/alertmanager endpoint for Ceph Dashboard
1afa7f5a Remove deprecated dellemc_xtremio_iscsi resource
59076017 Move stonith resource creation to step2
0b51d825 Allow ovn_db_host to be of type array
6aa46811 Gnocchi: Do not manage facl of ceph keyring
885c540c Always update the local certmonger ca cert
14528b26 cinder: remove ineffective implementation about key_mgr_backend
22a5dd19 Add cinder RBD support for multiple ceph clusters
0dcb1290 Handle cinder volume type for multiple cinder stores
852d753b Remove the unused list_to_zookeeper_hash function
0cfd1160 Swift: Include puppet classes for gatekeeper and listing_formats
8d76ecab Enable configuration of omamqp1 plugin
c06f6f3f Add support for cinder-backup GCS and S3 backends
d8988a10 Add support for configuring designate DNS backend
844e7919 Drop old cruft-removal code in ovn_dbs_bundle
cc9c81db Fix novavnc haproxy network
56fe3433 Add parameter for chap_algs in iscsid.conf
27528965 Include the nova::glance class in more common place
4586911e Fix memcached restart on cert renewal
04a97f92 Fix live-migration with libvirt >= 6.8.0
62063946 Replace deprecated zuul template tripleo-standalone-multinode-ipa
5ffbfbb8 Add replication_probe_interval for ovsdbs
61c61c89 Add monitor interval for ovn dbs
ef44eebd Set ovn_chassis_mac_map in ovn::controller
bcf9c9ee Remove unnecessary usage of hiera
36a39af9 Add new nova::compute::provider class to compute nodes
4c981b57 Add ports filtering support to XtremIO Cinder driver
a2dbbaed Handle cinder_mount_point_base for cinder mounting needs
9466c801 Add parameters for multipath connection in cinder store
ff14ad4c Remove support for networking-cisco
8310c55b Neutron: remove support for N1kv driver
c376d64e Refactor how key manager backend is set
072785e5 Include nova::glance class
59b54b6f Add authtoken security options
91629ff6 Remove parameters to manage keystone resources and volume type
5ec22bbd Remove the unused tripleo::host::sriov class
337a7855 Revert "Revert "Update horizon manifest to use new ssl variable names""
021a94e6 Remove the wrongly placed release note files
ee2f1b8f Clean up deprecated parameters for nova metadata eventlet service
99544cf5 Include nova::compute::image_cache class explicitly
ed78eacb Update the community page.
Diffstat (except docs and test files)
-------------------------------------
Puppetfile_extras | 6 +-
files/certmonger-dashboard-refresh.sh | 10 -
files/certmonger-etcd-refresh.sh | 25 --
files/certmonger-grafana-refresh.sh | 9 -
files/certmonger-haproxy-refresh.sh | 54 ----
files/certmonger-memcached-refresh.sh | 18 --
files/certmonger-metrics-qdr-refresh.sh | 24 --
files/certmonger-neutron-dhcpd-refresh.sh | 21 --
files/certmonger-novnc-proxy-refresh.sh | 17 --
files/certmonger-rabbitmq-refresh.sh | 17 --
files/certmonger-redis-refresh.sh | 14 -
files/certmonger-rgw-refresh.sh | 9 -
files/cm_ipa_subca_wrapper.py | 74 -----
lib/puppet/functions/list_to_zookeeper_hash.rb | 24 --
lib/puppet/provider/sriov_vf_config/numvfs.rb | 129 ---------
lib/puppet/type/sriov_vf_config.rb | 10 -
manifests/certmonger/apache_dirs.pp | 55 ----
manifests/certmonger/ca/crl.pp | 165 -----------
manifests/certmonger/ca/libvirt_vnc.pp | 65 -----
manifests/certmonger/ca/local.pp | 46 ---
manifests/certmonger/ca/qemu.pp | 65 -----
manifests/certmonger/ceph_dashboard.pp | 87 ------
manifests/certmonger/ceph_grafana.pp | 87 ------
manifests/certmonger/ceph_rgw.pp | 123 --------
manifests/certmonger/etcd.pp | 92 ------
manifests/certmonger/haproxy.pp | 159 ----------
manifests/certmonger/haproxy_dirs.pp | 55 ----
manifests/certmonger/httpd.pp | 86 ------
manifests/certmonger/libvirt.pp | 86 ------
manifests/certmonger/libvirt_dirs.pp | 56 ----
manifests/certmonger/libvirt_vnc.pp | 122 --------
manifests/certmonger/libvirt_vnc_dirs.pp | 56 ----
manifests/certmonger/memcached.pp | 85 ------
manifests/certmonger/metrics_qdr.pp | 89 ------
manifests/certmonger/mysql.pp | 78 -----
manifests/certmonger/neutron.pp | 84 ------
manifests/certmonger/neutron_ovn.pp | 76 -----
manifests/certmonger/novnc_proxy.pp | 97 -------
manifests/certmonger/openvswitch.pp | 80 -----
manifests/certmonger/ovn_controller.pp | 76 -----
manifests/certmonger/ovn_dbs.pp | 75 -----
manifests/certmonger/ovn_metadata.pp | 76 -----
manifests/certmonger/ovn_octavia.pp | 76 -----
manifests/certmonger/qemu.pp | 108 -------
manifests/certmonger/qemu_dirs.pp | 41 ---
manifests/certmonger/qemu_nbd_dirs.pp | 42 ---
manifests/certmonger/rabbitmq.pp | 84 ------
manifests/certmonger/redis.pp | 91 ------
manifests/haproxy.pp | 36 ++-
manifests/host/sriov.pp | 31 --
manifests/host/sriov/numvfs_persistence.pp | 88 ------
manifests/keepalived.pp | 201 -------------
manifests/profile/base/aodh/authtoken.pp | 21 +-
manifests/profile/base/barbican/api.pp | 1 -
manifests/profile/base/barbican/authtoken.pp | 21 +-
manifests/profile/base/certmonger_user.pp | 322 ---------------------
manifests/profile/base/cinder/api.pp | 36 +--
manifests/profile/base/cinder/authtoken.pp | 21 +-
manifests/profile/base/cinder/backup/gcs.pp | 56 ++++
manifests/profile/base/cinder/backup/s3.pp | 36 +++
manifests/profile/base/cinder/volume.pp | 87 ++----
.../profile/base/cinder/volume/dellemc_xtremio.pp | 2 +
.../base/cinder/volume/dellemc_xtremio_iscsi.pp | 52 ----
manifests/profile/base/cinder/volume/rbd.pp | 63 ++--
.../base/cinder/volume/veritas_hyperscale.pp | 45 ---
manifests/profile/base/database/mysql.pp | 3 -
manifests/profile/base/designate/authtoken.pp | 21 +-
manifests/profile/base/designate/backend.pp | 41 +++
manifests/profile/base/glance/authtoken.pp | 21 +-
manifests/profile/base/glance/backend/cinder.pp | 61 ++--
manifests/profile/base/gnocchi/api.pp | 14 +-
manifests/profile/base/gnocchi/authtoken.pp | 21 +-
manifests/profile/base/heat/authtoken.pp | 21 +-
manifests/profile/base/horizon.pp | 13 +-
manifests/profile/base/ironic/authtoken.pp | 21 +-
.../profile/base/ironic_inspector/authtoken.pp | 21 +-
manifests/profile/base/iscsid.pp | 38 ++-
manifests/profile/base/keystone.pp | 14 -
manifests/profile/base/logging/rsyslog.pp | 107 ++++---
manifests/profile/base/manila/authtoken.pp | 21 +-
manifests/profile/base/mistral/authtoken.pp | 21 +-
manifests/profile/base/neutron/agents/ovn.pp | 32 +-
manifests/profile/base/neutron/authtoken.pp | 21 +-
manifests/profile/base/neutron/n1k.pp | 54 ----
manifests/profile/base/neutron/ovn_metadata.pp | 12 +-
manifests/profile/base/neutron/plugins/ml2.pp | 13 -
manifests/profile/base/neutron/plugins/ml2/ovn.pp | 14 +-
manifests/profile/base/nova.pp | 1 +
manifests/profile/base/nova/api.pp | 24 --
manifests/profile/base/nova/authtoken.pp | 21 +-
manifests/profile/base/nova/compute.pp | 30 +-
manifests/profile/base/nova/migration/client.pp | 5 +-
manifests/profile/base/novajoin/authtoken.pp | 21 +-
manifests/profile/base/octavia/authtoken.pp | 21 +-
manifests/profile/base/pacemaker.pp | 9 +-
manifests/profile/base/placement/authtoken.pp | 21 +-
manifests/profile/base/qdr.pp | 8 +-
manifests/profile/base/rabbitmq.pp | 3 -
manifests/profile/base/swift/proxy.pp | 32 +-
manifests/profile/base/zaqar/authtoken.pp | 21 +-
manifests/profile/pacemaker/ovn_dbs_bundle.pp | 167 +++++------
metadata.json | 2 +-
.../add-memcache-security-92060c4fe540774c.yaml | 7 +
...er-backup-gcs-s3-backends-52503ffa22c0b83d.yaml | 7 +
.../cinder-rbd-multiconfig-285d1542ef08fa10.yaml | 6 +
.../monitor_interval_ovndbs-6af18ba7f4a17cc5.yaml | 4 +
...e_live_migration_force_nc-f903a09955164ad9.yaml | 15 +
.../nova_libvirt_guests-d0e5424d40d9e26e.yaml | 10 -
.../notes/nova_metadata_wsgi-bbc8e5e053282a83.yaml | 2 +-
...ova_metadata_wsgi-cleanup-4b4877fe73f25c2e.yaml | 10 +
.../remove_puppet_certmonger-843205d2ef88d6e4.yaml | 6 +
...on_probe_interval_ovn_dbs-df22bef3bb12a0f7.yaml | 6 +
...-object-expirer-memcached-3c1e7037683ee89a.yaml | 8 -
.../xtremio-add-ports-option-b1e60a97ba56f21e.yaml | 5 +
...o-iscsi-remove-deprecated-da9224d14cef4fde.yaml | 6 +
spec/classes/tripleo_certmonger_ca_crl_spec.rb | 116 --------
spec/classes/tripleo_certmonger_ca_local_spec.rb | 59 ----
spec/classes/tripleo_certmonger_etcd_spec.rb | 82 ------
spec/classes/tripleo_certmonger_memcached_spec.rb | 60 ----
spec/classes/tripleo_certmonger_mysql_spec.rb | 58 ----
.../classes/tripleo_certmonger_openvswitch_spec.rb | 68 -----
spec/classes/tripleo_certmonger_ovn_dbs_spec.rb | 60 ----
spec/classes/tripleo_certmonger_rabbitmq_spec.rb | 60 ----
spec/classes/tripleo_host_sriov_spec.rb | 39 ---
spec/classes/tripleo_keepalive_spec.rb | 215 --------------
.../tripleo_profile_base_cinder_api_spec.rb | 14 +-
.../tripleo_profile_base_cinder_backup_gcs_spec.rb | 84 ++++++
... tripleo_profile_base_cinder_backup_s3_spec.rb} | 24 +-
.../tripleo_profile_base_cinder_volume_rbd_spec.rb | 60 ++++
.../tripleo_profile_base_cinder_volume_spec.rb | 40 +--
...ipleo_profile_base_cinder_xtremio_iscsi_spec.rb | 57 ----
.../tripleo_profile_base_designate_backend_spec.rb | 56 ++++
...pleo_profile_base_glance_backend_cinder_spec.rb | 62 +++-
.../tripleo_profile_base_gnocchi_api_spec.rb | 2 -
spec/classes/tripleo_profile_base_iscsid_spec.rb | 30 +-
.../tripleo_profile_base_logging_rsyslog_spec.rb | 49 +++-
.../tripleo_profile_base_nova_compute_spec.rb | 23 +-
spec/classes/tripleo_profile_base_nova_spec.rb | 4 +
spec/defines/tripleo_certmonger_httpd_spec.rb | 65 -----
.../tripleo_host_sriov_numvfs_persistence_spec.rb | 134 ---------
spec/fixtures/hieradata/default.yaml | 3 +
spec/fixtures/hieradata/step4.yaml | 2 -
spec/fixtures/hieradata/step5.yaml | 7 +
spec/functions/list_to_zookeeper_hash_spec.rb | 15 -
spec/unit/provider/sriov_vf_config/numvfs_spec.rb | 117 --------
spec/unit/type/sriov_vf_config_spec.rb | 78 -----
templates/switchdev/switchdev.epp | 39 ---
zuul.d/layout.yaml | 2 +-
148 files changed, 1353 insertions(+), 5757 deletions(-)
More information about the Release-announce
mailing list