-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 13 Oct 2024 00:00:51 +0200
Source: openstack-cluster-installer
Architecture: source
Version: 43.0.0
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Changes:
openstack-cluster-installer (43.0.0) unstable; urgency=medium
.
[ Thomas Goirand ]
* [d1a359a] Add --haproxy-custom-url option to ocicli.
* [e45d4d7] Merge branch 'ceph-az' into debian/caracal
* [d1fa666] Fix fetching ceph_osbpo_release
* [e5c3047] report.php: fix typo.
* [1870467] Fix pinning of Ceph packages.
* [dbfb144] Add an lldp switchname matcher to select network cards in a
network definition.
* [505fb4d] Enable http to https redirection on haproxy level for openstack
API See merge request openstack-team/debian/openstack-cluster-installer!55
* [58308cf] Fix d/copyright.
.
[ Philippe SERAPHIN ]
* [5c3f671] In oci-hdd-maint, test if drive mounted before change owner
.
[ Thomas Goirand ]
* [25bab47] caracal: fix keystone roles creation.
* [6ecfbf8] oci-hdd-maint: implement wait_until_mounted correctly.
* [f84cd5d] oci-poc-ci: cosmetic print fix
* [d1d8913] oci-agent: allow using storcli64, not only storcli_x64.
* [b7dbb25] Fix syntax.
* [98defe8] oci-agent: always report physical disks if MegaRAID is seen.
* [55fec1e] hardware_profile.php: fix enclosure number when using storcli to
setup raid0 or raid1.
* [4789c8c] caracal: use the new cert_file and key_file parameters of
nova::migration::libvirt instead of setting it up in libvirtd_config
* [07b4e93] compute.pp: provision /etc/openstack/puppet/admin-clouds.yaml if
using extrenal keystone.
* [56444ad] compute.pp: configure the CEPH_X backend depending on the compute
AZ.
* [b87cc9f] caracal: volume.pp must use the new parameters
max_over_subscription_ratio and reserved_percentage of
cinder::backend::iscsi
.
[ Axel Jacquet ]
* [5fbbc0e] some fixes for galera role
.
[ Thomas Goirand ]
* [6efe0ee] oci-agent: fix reporting firmware version twice.
* [bc8b6dd] merge-on-all-branches: Retry pull / push as Salsa is being
annoying.
* [92b8641] Make the SQL role work
* [52f265c] The beginning of a sqlmsg role (not tested yet).
* [4b83e74] ocicli machine-wipe: Wipe 4GB instead of 1000 MB.
* [f67fb88] oci-block-device-udev-sorting: also support "ProLiant DL385 Gen10
Plus v2"
* [8a9a805] controller.pp: fix galera backend members.
* [2b772dd] oci-poc-setup: nit: fix echo to suggest
oci-poc-install-cluster-bgp instead of -full.
* [ed2c9d9] slave_actions.php: Fix setting-up first_sql_machine_id (missing
break in switch/case).
* [1f5d202] Start of implementing ceph_use_cephadm_to_deploy
* [2ce2d40] sqlmsg role: fix ENC and sql.pp.
* [7baa59b] Set messaging vip with role messaging.
* [e425b6f] ceph multiple-az: correctly pass params to get_cluster_password()
* [b3c9a1c] messaging node to use the sqlmsg IP for db connections.
* [042760e] Fix num of HDD for swiftproxy in PoC
.
[ Axel Jacquet ]
* [b823160] Add possibility to Blacklist Swift account and S3 account
independently with custom map, return 503 custom message
.
[ Thomas Goirand ]
* [963d3ea] swiftproxy.pp: Do not double-set
container-replicator/node_timeout
* [ab1f471] messaging.pp: do not depend on galera class if there's an sqlmsg
role in the cluster.
* [456e5b6] controller.pp and messaging.pp: with sql role, wait for db to be
populated before services.
* [1224016] oci-wait-for-remote-sql: missing $ when fetching --db-name.
* [8358398] create designatedb on sql node, and properly schedule the API VIP
before services.
.
[ Simeon Gourlin ]
* [aad2138] Setting default Neutron firewall driver to _openvswitch_ from
Caracal
* [6e53cd5] Setting default Neutron firewall driver to _openvswitch_ from
Caracal in controller and compute also
.
[ Thomas Goirand ]
* [96845c6] tempest.pp: support setup with Caracal version of
puppet-module-tempest.
* [ee2faf9] Always transmit designate pass to sql node.
* [45aa8b3] untested (yet): Add firewalling to SQL nodes.
* [60eee4f] Fix sql nodes firewalling.
* [68dc12f] Handle cephadm keys.
.
[ Philippe Seraphin ]
* [60ec6df] Change detection for all card type on R740xd
.
[ Thomas Goirand ]
* [e8b2748] openstack-cluster-installer-agent: report blkctrl firmware
version using storcli (instead of megacli) if available.
* [4ecf3ca] Implement: ocicli password-{list,show,set}
* [3550155] Implements IPMI management using fixed DHCP per port.
* [237b74c] ocicli: implement machine-activate-ipmi-over-lan for both HPE and
Dell server types in a better, nicer, unified way.
* [504bbf4] hardware_profile.php: reset $raid_megacli_cfg_opt before
calculating each drive cmd line.
* [4cccc6a] src/inc/hardware_profile.php: Fixup clearing all JBOD disk before
apply.
* [c5791ea] SQL and MSGSQL nodes: mount /var/lib/mysql with the 2nd data disk
* [65c8268] oci-first-boot: Fix mounting mysql folder in the data disk
sql/sqlmsg nodes.
* [1f259f5] Fix save and display of ssh keys.
* [7a01cfa] oci-block-device-udev-sorting: more for ProLiant DL365 Gen11
* [a1cb869] ocicli: also display password type "openstackkey"
* [74b62bd] Also handle ocicli password-set with type openstackkey.
* [8271fb7] Also transmit ceph_use_cephadm_to_deploy to billmon / billosd.
* [cdcf952] ocicli machine-show: order block devices by LENGTH(name),name
(that's nicer, so 2 is before 11).
* [f9e4847] ocicli password-set: use mysqli_real_escape_string() instead of
safe_pass().
* [fd68441] enc.pp: do not fetch Ceph passwords for controllers if we're in
ceph_use_cephadm_to_deploy mode.
* [d1d6462] oci-block-device-udev-sorting: handle DL365 Gen11 2x VD disks.
* [b170d94] messaging.pp: handles ceph_use_cephadm_to_deploy option.
* [3ab4315] nova-scheduler: set host_subset_size to 3 to avoid all VMs to be
poped on the same compute when doing "server create" in bulk.
* [08d3b85] api.php: removed remaining debug echo cause command passwor-set
to not return 0.
* [8ff8e09] Fix keystone access as admin from compute to be able to list and
set volume types.
* [aaf8417] Fix default value of cpu_allocation_ratio from 16 to 2 and
ram_allocation_ratio from 1.5 to 1.
* [ba1c0e5] Manage /etc/oci/self-signed-api-cert with puppet depending on
cluster flag.
* [15f4b60] Explicitly set images_type so we use RBD for Nova in Xena and
up.
* [02dc758] openstack-cluster-installer-bodi-hook-script: Increase puppet
main/top_level_facts_soft_limit from default 512 to 2048 when installing
hosts.
* [586ecb6] Fix ceph_az, without using variables.json (this has to be done by
hand on the enc.pp).
* [71aa6ed] slave_actions.php: fix sql request when not using multi az
See merge request openstack-team/debian/openstack-cluster-installer!57
* [873cee5] octavia-certs: use semicolon instead of period for chown
See merge request openstack-team/debian/openstack-cluster-installer!56
* [1e17ce2] oci-block-device-udev-sorting: More work on "ProLiant DL365
Gen11"
* [61d4349] Fix missing esac.
* [02e64d4] Fixup again "ProLiant DL365 Gen11" bootorder detection.
* [b0a51b2] auto_racking.php: better handling of comment errors, like
non-parseable auto-racking.json and no match with LLDP info.
* [d2729d5] controller.pp: Remove AvailabilityZoneFilter from filter list, as
it's been removed from Xena and up.
* [0eb3a01] Add support for cloudkitty storage V2.
* [31709e1] re-enable glance-api SSL if >= caracal, fix cloudkitty
storage_version/backend double params.
* [b9602bc] messaging.pp: fix storage_backend / storage_version param twice
when calling ::cloudkitty class.
* [4307c79] Fix variables.json to not include comas in description.
* [5a6dfaf] horizon: from Caracal and up, use
django.core.cache.backends.memcached.PyMemcacheCache as BACKEND driver.
* [49ba402] messaging.pp: Fix ::cloudkitty::keystone::authtoken username if
using region-postfixed usernames.
* [12d25ae] Add CPU flags fact, and activate SEV if a compute supports it.
* [b56a149] oci-block-device-udev-sorting: fix support for drive orders in
hydra-f
* [8bd9a7b] Update apt.infomaniak.ch GPG key.
* [db9f011] Fix another instance of the apt.infomaniak.ch key.
* [407942b] Another instance of the key.
* [c6fa65f] ipmi_cmds.php: fix ocicli machine-ipmi-adopt not fetching the
ipmi username correctly.
.
[ Mathias Heyraud ]
* [d64646e] oci-sorting update gigabyte sdb
.
[ Thomas Goirand ]
* [d876370] oci-hdd-maint: support dataforge hydra-f
* [5164cae] nova: support default_schedule_zone
.
[ Olivier Chaze ]
* [5368bd5] Mounting the DB on additional disks
.
[ Thomas Goirand ]
* [c49b836] Add contrib/update-admin-project-id.
.
[ Simeon Gourlin ]
* [1e1cefd] Adding cinder az variables to compute
.
[ Thomas Goirand ]
* [c045677] Revert "Adding cinder az variables to compute"
This reverts commit 1e1cefd254fda8e144a519431466e26b6b394ccc.
* [70c6d25] Also handle storage_availability_zone for cinder on a compute
node.
* [7a97dcc] controller.pp: set correct region_name for all stuff in
Octavia, so it can handle multi-region.
* [8a1f69f] oci-puppet: unset all OpenStack env vars before running puppet.
.
[ Simeon Gourlin ]
* [199fcf3] Moving cinder_default_storage_availability_zone from cluster
config to machine config
.
[ Thomas Goirand ]
* [7a5e824] swiftproxy.pp: Support setting barbican_endpoint in
/etc/swift/keymaster.conf, needed for multi-region.
* [e9b1def] chmod update-admin-project-id
* [43fb621] Add automation to install and configure dkms with auto-signing of
kernel modules.
* [d824a5b] Document secure-boot support.
* [d854e7c] Merge branch 'feature/wipefs' into 'debian/caracal'
Use wipefs instead of dd to wipe partition signatures form drives
See merge request openstack-team/debian/openstack-cluster-installer!58
* [473e055] Run drive_full_checker as root.
* [9dd4b23] Also run drive_full_checker as root in proxy nodes.
* [d2a457a] oci-system-serial: Make "OpenStack Nova" (ie: OpenStack VMs)
report a shorter serial number.
* [76a6f94] Fix dhcp_domain description in variables.json
* [8156b08] Support setting hw_machine_type in Nova.
* [b18380d] controller.pp: give the service role to all service users.
* [cec643f] compute: add CPU model check skip options
.
[ Simeon Gourlin ]
* [0d622fc] Revert Ceph different backend name for multiple clusters
.
[ Thomas Goirand ]
* [77b9557] Add set fib_multipath_hash_policy to 1 with sysctl.
* [e372c6a] controller.pp: allow setting-up Keystone without rabbit.
* [fe40020] controller.pp: only use the "roles =>" param when available in
puppet-openstack.
* [a9e1baf] controller.pp: schedule haproxy before horizon, as apache may
otherwise temporarily bind on port 80 which clashes with haproxy.
* [aadbaef] controller.pp: fix setting-up Octavia before Bobcat.
* [e02262c] compute.pp: before yoga, provision /etc/keystone/puppet.conf
instead of openstacklib::clouds.
* [246a9c7] tempest.pp: correctly install /etc/keystone/puppet.conf if xena
or lower.
* [030513d] Disable glance_v1 API in tempest.
* [05103a0] tempest.pp: Fix keystone credentials and URL.
* [e35d646] tempest.pp: before Bobcat, write /root/openrc so that
tempest_flavor_id_setter knows how to authenticate.
* [4f59bb9] tempest.pp: add region_name in /root/openrc and /root/oci-openrc
* [9f9a547] Do not run test_volume_from_snapshot_cascade_delete
* [b0eec46] controller.pp: schedule apache after haproxy.
* [5eb92c3] validate_password(): accept equal sign.
.
[ Simeon Gourlin ]
* [8991e63] Adding memcache_use_advanced_pool to neutron-api
.
[ Thomas Goirand ]
* [5ac77eb] controller.pp: Fixup swift_store_region in glance setup, in the
swift extrenal case.
* [10c90f8] messaging.pp: Fixup [ociadmin_authtoken]/password in the case of
external keystone.
* [bbce6b5] cloudkitty storage v2: set storage_elasticsearch/use_datastream
to true.
* [099dd05] Add comment for calling ::cloudkitty::storage.
* [f6b3eca] Fix detecting serial number in the case of an OpenStack VM.
* [38c4ea8] Restart haproxy between controllers puppet run at first boot.
* [bf0048b] Also attempt restarting mariadb server in oci-first-boot script
in sql / sqlmsg roles.
* [7af2c66] oci-poc-provision-image: Insert the password "password" into the
test image.
* [4e2c036] OCI PoC: Really run oci-poc-provision-network-cl3 on cluster3
* [856711d] tempest.pp: also set region name for identity and image.
.
[ Axel Jacquet ]
* [bf27377] add blacklist test in poc-test list: test not maintened:
neutron_tempest_plugin group
* [5bf352b] add blacklist test in poc-test list: Tests passed with bigger
timeout, 10 secod is to small
* [e4b4521] add blacklist test in poc-test: neutron_plugin: Doesn't work
without SNI : https://api:443/v2.0/networks\? doesn't start with
https://api:443/network
* [53590d6] add blacklist test in poc-test: neutron_plugin: Doesn't work
without SNI : https://api:443/v2.0/networks\? doesn't start with
https://api:443/network
* [e9c7059] add blacklist test in poc-test: neutron_plugin: Doesn't work
without SNI : https://api:443/v2.0/networks\? doesn't start with
https://api:443/network again
* [6ca3d06] add blacklist test in poc-test: neutron_plugin: Doesn't work
without SNI : https://api:443/v2.0/networks\? doesn't start with
https://api:443/network again
.
[ Thomas Goirand ]
* [baed889] Also apply neutron dnsmasq_dns_servers parameter on controllers
with network subrole
See merge request openstack-team/debian/openstack-cluster-installer!59
* [da49907] Don't attempt to upgrade python3-pypowervm package, which was
removed in bookworm
See merge request openstack-team/debian/openstack-cluster-installer!61
* [fd0e5b2] Also display monitoring password type.
* [279c460] oci-poc-save & restore: now understand multiple clusters,
messaging, sql and sqlmsg nodes, and restart galera clusters accordingly.
* [2b6c8c9] oci-poc-save: understand multiple clusters when turning off
Galera.
* [a5f6992] pupppet-master service is now puppetserver
See merge request openstack-team/debian/openstack-cluster-installer!60
* [c31050e] oci-poc: setup the correct debian image name in
openstack-cluster-installer.conf depending on debian release.
* [0f20165] oci-poc-provision: correctly provision network on cl3.
* [43704bc] poc-bin/oci-poc-provision: Provision flavors in cl3.
.
[ Axel Jacquet ]
* [4f1d530] add blacklist test in poc-test: neutron_plugin: work with relaod
of dhclient oinside vm like upstream recent tests
* [37b3ec3] add blacklist test in poc-test: image_test: upload works but
code try to checko store=swift with store metadate of image = swift,file
* [77e1eae] add blacklist test in poc-test: neutron: We not use qos extension
for floating, test skipped is buggy method
skip_if_no_extension_enabled_in_l3_agents need reason arg
* [54a6438] add blacklist test in poc-test: neutron: We not use qos extension
for floating, test skipped is buggy method
skip_if_no_extension_enabled_in_l3_agents need reason arg
* [72246b2] add blacklist test in poc-test: compute:work with
fixed_network_name different of floating_ip network -> cant create port on
it
* [97e2a1d] add blacklist test in poc-test: compute:work with
fixed_network_name different of floating_ip network -> cant create port on
it
* [28b7972] add blacklist test in poc-test: compute:work with
fixed_network_name different of floating_ip network -> cant create port on
it
.
[ Olivier Chaze ]
* [991c4c2] Enabling port_forwarding
* [12ffa52] Enabling port_forwarding
.
[ Axel Jacquet ]
* [eb7b882] add blacklist test in poc-test: cinder:Encrypted volume not
supported yet
* [c284dbe] add blacklist test in poc-test: neutron:Tests passed with bigger
timeout, 10 secod is to small , test is really long on Poc
* [4d76392] add blacklist test in poc-test: neutron:route bgb announce wait
for 1 route but have more i our setup but route are annonced
* [44cf8cd] add blacklist test in poc-test: neutron:advertise route cant
match expected value in our setup
* [9c98576] add blacklist test in poc-test: neutron: try to test external
connectivity real test, proxy ssh on public ip to priv ip but we don't use
real public ip on our setup
.
[ Thomas Goirand ]
* [74dffcd] controller.pp: also enable port_forwarding if network nodes are
the controllers.
* [7c2adfd] New command oci-run-command-on-nodes
See merge request openstack-team/debian/openstack-cluster-installer!64
.
[ Axel Jacquet ]
* [a09dba1] add blacklist test in poc-test: neutron: security group tests
with to small timeout , 10seconde, works with highter
* [5d41fb1] add blacklist test in poc-test: neutron: missing package in
image for test, nc cmd
.
[ Simeon Gourlin ]
* [14300b5] In multi-ceph az setup, add all keys to libvirt on all computes
to allow cross-az attach in nova
.
[ Axel Jacquet ]
* [ba772e2] add blacklist test in poc-test: volume: Work with check file in
/etc and not in /tmp witch is rm after vms deletion --> need patch upstream
* [5e59c0d] add blacklist test in poc-test: cinder old test: non determistic
tests, random fail or succces
* [2e53d0b] add blacklist test in poc-test: compute: Tiemout reached when
snap is at 50%, works with increased value
* [6adc8a9] add blacklist test in poc-test: compute: Tiemout reached for
backup, works with increased value
* [ec6b93d] add blacklist test in poc-test: compute: Timeout during upload
image of shelving reached, shelve works fine
* [4932961] Merge branch 'feat/vip6-support' into 'debian/caracal'
feat: add virtual ipv6 address support and allow customization of nova
host_subset_size
See merge request openstack-team/debian/openstack-cluster-installer!65
* [8ecf9a3] add blacklist test in poc-test: compute: Timeout during shelving
reachede
.
[ Simeon Gourlin ]
* [eb36a0c] Merge branch 'fix/multi-az-cinder' into 'debian/caracal'
fix: configure all availability_zones on all storage nodes
See merge request openstack-team/debian/openstack-cluster-installer!66
.
[ Thomas Goirand ]
* [41252a1] Fix description for new v6 API cluster attributes.
.
[ Axel Jacquet ]
* [8a75bfa] add option to set pci ports for vms: default 16: issue upstream
https://review.opendev.org/c/openstack/nova/+/545034
.
[ Simeon Gourlin ]
* [07299ba] Don't create a default volume type in Ceph config
.
[ Thomas Goirand ]
* [7c7f5a5] Correctly setup of Heat's trustee for when >= Yoga.
* [e7cf4c6] oci-agent/oci-agent-report-status: Do not install racadm if
server isn't from Dell.
* [424ba18] swiftproxy_haproxy.pp: listen on both v4 and v6.
* [4c3bb66] swiftproxy_haproxy.pp: listen on both v4 and v6 take 2.
* [b310641] Add region_name when calling the main '::heat' class, so that
region_name_for_services is automatically set.
* [ebbf1ab] Merge branch 'feat/glance-http-proxy' into 'debian/caracal'
Feat/glance http proxy
See merge request openstack-team/debian/openstack-cluster-installer!67
* [382c0bb] Octavia: Set controller_worker/user_data_config_drive to true.
* [0faae8b] controller.pp: provision
/etc/oci/monitoring_openstack_api_region with the region_name in it.
* [791b941] controller.pp: - Syntax error when setting
controller_worker/user_data_config_drive for Octavia. - missing
region_name for heat.
* [582bf31] Swift auto mount block devices toggle
See merge request openstack-team/debian/openstack-cluster-installer!68
.
[ Simeon Gourlin ]
* [69a42b9] Adding ResellerAdmin role to ceilometer to query Swift
.
[ Thomas Goirand ]
* [30b73fc] Make puppet-module-rally as recommends rather than depends.
* [f2c91ae] Move puppet-module-puppetlabs-cron-core,
puppet-module-puppetlabs-mount-core to recommends.
* [619d506] controller.pp: add /etc/oci/monitoring_pass_rabbitmq
* [e73e531] Adding cinder region in nova properly
* [5b0431d] Adding cookie for Horizon and multi-region
* [2053ef3] Disable AODH debug logs
* [2598756] Add the possibility to redirect /horizon to a custom
redirection URL.
* [f14f696] Do not set default_nameserver_{1,2} when calling '::horizon'
before Victoria (the patch isn't there in the puppet module).
* [9685f99] No limitreqbody in horizon before Victoria.
* [ae192c1] Tweak glance proxy only if glance is installed.
* [5483dc5] swiftproxy.pp: ::swift::proxy::symlink only appears in
Victoria
* [f2a6687] swiftproxy.pp: compat with train.
* [2b3eab0] Add bookworm-dalmatian to
etc/openstack-cluster-installer/pubkey.gpg
* [b6854ad] Switch to Dalmatian.
.
[ Bertrand Lanson ]
* [f87d764] fix: typo in heat trustee config
.
[ Thomas Goirand ]
* [cbc62fe] src/variables.json: tabs instead of spaces.
* [1155cdc] controller.pp: trustee/user_domain_name set twice.
* [e80e805] regression fix: Whitelist compute + volume nodes in the
controller iptables port 3306.
* [8949b53] controller.pp: Configure Nova's max_instances_per_host which by
default is set to a low "50".
.
[ Simeon Gourlin ]
* [9859ee6] Fix messaging monitoring keystone url with extenal_keystone
.
[ Thomas Goirand ]
* [7bf3936] Promote puppet-module-puppetlabs-cron-core and
puppet-module-puppetlabs-mount-core as depends (from recommends).
* [7d48a40] Also set default volume type when using OSDs on compute nodes
See merge request openstack-team/debian/openstack-cluster-installer!70
* [2541251] controller_iptables.pp: allow access to rabbitmq.
.
[ Jim Scadden ]
* [88134cb] Added support for ovs-bridge interfaces on nodes without a vm-net
interface
.
[ Thomas Goirand ]
* [3d595ef] cp .csr optional
* [354d953] src/variables.json: Use swiftstore, not swiftobject as role.
* [b58077c] messaging.pp: correctly set region_name for gnocchi authtoken.
* [584adf2] Merge branch 'fix/haproxy-ipv6-listener' into 'debian/dalmatian'
fix: enable ipv6 listener on haproxy if ipv6 vip is enabled
See merge request openstack-team/debian/openstack-cluster-installer!72
* [8636033] oci-first-boot: check if /lib/systemd/system/mariadb.service
exists before attempting to restart mysql.
* [fe56ff2] sysctl.pp: Add net.ipv6.ip_nonlocal_bind, needed for the
OpenStack API over v6.
* [288ad6f] Fix syntax error.
* [a293c1e] Merge branch 'fix/libvirt-restart-issue' into 'debian/dalmatian'
fix: libvirtd restarting every 30 minutes on compute nodes
See merge request openstack-team/debian/openstack-cluster-installer!73
* [5fd59eb] Fixed versioned_writes and symlink pipeline stuff.
* [6f4d683] Add a unic key in the passwd table.
* [046e21e] Do not call swift::proxy::versioned_writes twice.
* [bf5c03c] Promote puppet-module-rally as depens: as it is otherwise
breaking CI.
* [e731fc8] Use Glance without UWSGI, and do re-encryption with haproxy.
* [49385fb] Fix glancecrypt backend path for glance.pem
* [d3d81e7] Configure apache until end before attempting to configure
haproxy, so they don't step on each-other's foot, both binding on port 80.
* [7b4623e] Do not schedule haproxy before apache.
* [6e756d1] Sleep 1 sec instead of 2 when spawning oci-poc-vms.
* [e54e044] Better scheduling of controllers.
* [8174fc1] Unfuck the puppet scheduling for all-in-one controllers.
* [8f50f93] Dalmatian tempest blacklist.
* [5050e73] Edit README.md for the PoC.
* [d41c3ee] More doc for the PoC.
* [d597bba] Document MY_IP in ikvswitch.conf.
* [8d3ee1d] Document using an HTTP proxy for the PoC.
* [3ef3b6b] Document host ssh to VMs in the PoC.
* [121287a] Fix using chrony puppet module 3.x on bullseye.
* [dd967fe] Always re-encrypt glance.
* [1a2a73e] oci-cluster-upgrade-openstack-release: Do not attempt keystone
upgrade if external.
* [5dd8094] cluster-upgrade: check if components are present before doing
upgrades.
* [3de95a5] controller.pp: Fix heat::trustee for yoga and up, and cloudkitty
coordination url too.
* [eb0073f] Check the location of the VIP before upgrade. It *must* be on the
controller where drains are performed.
* [840eabc] exclude.conf: blacklist 5 more tests explaining why.
* [3b7b877] PoC: reduce reserved memory and disk.
* [6b26075] controller.pp Calling ::cloudkitty::storage before ::cloudkitty
* [7c317fe] Also displaying passwords of type messaging.
* [d73c111] Do not use transport_url = '', but undef instead.
* [7d77219] controller.pp: remove enabled_certificate_plugins when calling
::barbican::api. What we do is the default in Victoria, and it's remove
later on, so removing the param is the easiest way.
* [2015bb5] Get controller.pp to work with Dalmatian.
* [0bb066f] Removed amqp_sasl_mechanisms = 'PLAIN' everywhere: we're using
rabbit/kombu, not amqp.
* [784ba6b] compute.pp: Fix the cpu_models param of ::nova::compute::libvirt
for Dalmatian.
* [79ded48] swiftproxy and swiftstore: do not define config_file_path, as
we're using the default, and in Dalmatian and up this param is gone.
* [a65eeb8] PoC: Since it's often breaking, try multiple times to spam VMs
with oci-poc-vms start
* [5642f2c] PoC: Switch back to sleep 2s (and not 1) when spawning VMs.
* [e50da15] Handle failure to spawn VMs.
* [c405938] oci-fixup-compute-node: do not attempt to read
/etc/nova/secret.xml, as this is handled in puppet.
* [ef3d942] puppet.conf: increaste runtimeout to 2h instead of 1.
* [f573828] Fix secret.xml with puppet and Dalmatian, using epp instead of
erb.
* [6ff69a9] Make tempest work with Dalmatian.
Checksums-Sha1:
8316bc2eb9cce24790751eb6ec84768ec77da5b5 2636 openstack-cluster-installer_43.0.0.dsc
4589529f31cfd20f35ca1fc9bd371c2348f08c55 446284 openstack-cluster-installer_43.0.0.tar.xz
3e7e0063e490939515828d663170de59bf078777 9769 openstack-cluster-installer_43.0.0_amd64.buildinfo
Checksums-Sha256:
0ce51d512428a360c0560b4888333f39ec9406e022b1d525cfe2ebd2db75badc 2636 openstack-cluster-installer_43.0.0.dsc
84acbaa93681a975119afe3fe651a278595e1813ebcab52f9f620d20365643e1 446284 openstack-cluster-installer_43.0.0.tar.xz
f64bdb0e4f9e4cd5f9201f2be966baca1d92ff06133f8de61e5b28da1bf038f7 9769 openstack-cluster-installer_43.0.0_amd64.buildinfo
Files:
cae420325ae0799d5587042c2f0e4eb7 2636 net optional openstack-cluster-installer_43.0.0.dsc
719cd4b4fdee394face1fb440e59db59 446284 net optional openstack-cluster-installer_43.0.0.tar.xz
05c1ce2e19ce711644881e0e40a1f3e4 9769 net optional openstack-cluster-installer_43.0.0_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=KyWB
-----END PGP SIGNATURE-----
Attachment:
pgptT54nIkPzF.pgp
Description: PGP signature