diff options
Diffstat (limited to 'releasenotes/notes')
15 files changed, 147 insertions, 1 deletions
diff --git a/releasenotes/notes/6.2.0-64eaf596539f3ed1.yaml b/releasenotes/notes/6.2.0-64eaf596539f3ed1.yaml new file mode 100644 index 0000000..c41deab --- /dev/null +++ b/releasenotes/notes/6.2.0-64eaf596539f3ed1.yaml @@ -0,0 +1,64 @@ +--- +features: + - Add networking-fujitsu support to Neutron ML2 profile. + - Split OVN plugin and northd configuration. + - Introduce tripleo::tls_proxy used to set up a TLS proxy using + mod_proxy that redirects towards localhost. + - HPELeftHandISCSIDriver support for Cinder Volume profile. + - Add support for CollectD profile, for performance monitoring. + - Configure Nova Cells v2 database, required in Ocata. + - Configure the basic setup for Nova Cells v2. + - Support for opendalight_v2 mechanism_driver in Neutron ML2 profile. + - Support for Ceph MDS service profile. + - Add IPv6 support to Firewall rules. It will create both IPv4 & IPv6 rules + at the same time. It automatically converts icmp rules to ipv6-icmp. When + a source or destination is specified, it will only create rules to the + right version of IP that is needed. + - Add support for not using admin_token in Ceph/RGW profile. + - Add Docker Registry profile. + - Add Nova Placement API profile. + - Add NTP profile. + - Add etcd profile, used by networking-vpp ML2 plugin. + - Add profiles for Octavia services. + - Enable object-expirer on Swift proxy profile. + - Set memcache_servers in /etc/swift/object-expirer.conf. + - Add support for fence_ironic fencing agent. + - Add a noop_resource function, which allow to disable any resource type + in a catalog, with --tags option to puppet apply. + - Add Ceph RBD mirrog Pacemaker profile. + - Remove Glance Registry profile, not used anymore. Glance API v1 is not + available anymore. + - Add Nova EC2API profile. + - Add support for Pacemaker Remote with a new profile. + - Updates Pacemaker profiles for Composable HA architecture. + - Add Tacker profile. + - Add Congress profile. + - Add a default rule for dhcpv6 traffic. + - Re-organizes Contrail services to the correct roles. + - Set innodb_file_per_table to ON for MySQL / Galera + - Switch Nova / Libvirt VNC server binding to use the IP address + provided in Hiera instead of 0.0.0.0. + - Proxy API endpoints that TripleO UI uses. + - Rebranding of Eqlx to Dell EMC PS Series. + - Add support for ScaleIO backend in Cinder Volume profile. + - Add support to changing the Rabbitmq password on stack-update. +deprecations: + - Remove tripleo::vip_hosts class, no longer used. +security: + - CVE-2016-9599 Enforce Firewall TCP / UDP rules management, by + sanitizing dynamic HAproxy endpoints firewall rules, securing + firewall rules creations (disallow TCP/UDP rules without sport or + dport), but allow to open all traffic for TCP/UDP when actually + desired. +fixes: + - Fixes `bug 1648736 + <https://bugs.launchpad.net/tripleo/+bug/1648736>`__ so swift-proxy + is decoupled from ceilometer packages. + - Fixes `bug 1652107 + <https://bugs.launchpad.net/tripleo/+bug/1652107>`__ so we ensure + package updates don't happen unexpectedly. + - Fixes `bug 1645898 + <https://bugs.launchpad.net/tripleo/+bug/1645898>`__ so we ensure + to bind the rabbit inter-cluster to a specific interface. +other: + - Introduce more Puppet rspec tests that improve testing quality. diff --git a/releasenotes/notes/add-support-for-octavia-f1e472af89e9a05c.yaml b/releasenotes/notes/add-support-for-octavia-f1e472af89e9a05c.yaml new file mode 100644 index 0000000..62744e0 --- /dev/null +++ b/releasenotes/notes/add-support-for-octavia-f1e472af89e9a05c.yaml @@ -0,0 +1,4 @@ +--- +features: + - | + Add profiles for the Octavia LBaaS service. diff --git a/releasenotes/notes/enable-languages-in-ui-88a8caa6db9b4dd7.yaml b/releasenotes/notes/enable-languages-in-ui-88a8caa6db9b4dd7.yaml new file mode 100644 index 0000000..2f7939d --- /dev/null +++ b/releasenotes/notes/enable-languages-in-ui-88a8caa6db9b4dd7.yaml @@ -0,0 +1,5 @@ +--- +features: + - The undercloud UI is available in multiple languages, which can now + be configured via the manifest. All available languages are enabled + by default. diff --git a/releasenotes/notes/hpelefthand_8474c416b0d411e6.yaml b/releasenotes/notes/hpelefthand_8474c416b0d411e6.yaml new file mode 100644 index 0000000..a92cbae --- /dev/null +++ b/releasenotes/notes/hpelefthand_8474c416b0d411e6.yaml @@ -0,0 +1,3 @@ +--- +features: + - Added hpelefthand_iscsi backend support for cinder diff --git a/releasenotes/notes/innodb_file_per_table-f925b3bbf29d44ea.yaml b/releasenotes/notes/innodb_file_per_table-f925b3bbf29d44ea.yaml new file mode 100644 index 0000000..e0b7c3c --- /dev/null +++ b/releasenotes/notes/innodb_file_per_table-f925b3bbf29d44ea.yaml @@ -0,0 +1,20 @@ +--- +features: + - Enable innodb_file_per_table for MySQL/MariaDB databases +upgrade: + - | + Newly created MySQL database tables will be stored in their own datafiles, + instead of in a single monolithic ibdata file. + - | + Existing MySQL database tables that are persisted within the monolithic + ibdata file will remain so unless the database is migrated as well. + - | + Migration of all current database tables out of the monolithic ibdata + file is possible by dumping and restoring the whole database to a new data + directory, however when using Galera the entire cluster must be shut + down and upgraded at once. + - | + Migration of individual tables to datafiles is possible using the + MySQL command "ALTER TABLE <databasename>.<tablename> ENGINE=InnoDB;", + however this will not shrink the ibdata file and also is not safe to run + on a running Galera cluster for large tables. diff --git a/releasenotes/notes/nova_cells_setup-2c3e3344d8adcc26.yaml b/releasenotes/notes/nova_cells_setup-2c3e3344d8adcc26.yaml new file mode 100644 index 0000000..79439b2 --- /dev/null +++ b/releasenotes/notes/nova_cells_setup-2c3e3344d8adcc26.yaml @@ -0,0 +1,3 @@ +--- +features: + - Configure the basic cells setup for Nova, now required in Ocata. diff --git a/releasenotes/notes/proxy-api-endpoints-359e5fb64d80d400.yaml b/releasenotes/notes/proxy-api-endpoints-359e5fb64d80d400.yaml new file mode 100644 index 0000000..63830e5 --- /dev/null +++ b/releasenotes/notes/proxy-api-endpoints-359e5fb64d80d400.yaml @@ -0,0 +1,6 @@ +--- +features: + - Added ability to proxy API service endpoints through + Apache mod_rewrite rules by creating ProxyPass and + ProxyPassReverse directives for each API service + diff --git a/releasenotes/notes/puppet-auditd-0f6cbd6a2d193aac.yaml b/releasenotes/notes/puppet-auditd-0f6cbd6a2d193aac.yaml new file mode 100644 index 0000000..9eb7c79 --- /dev/null +++ b/releasenotes/notes/puppet-auditd-0f6cbd6a2d193aac.yaml @@ -0,0 +1,4 @@ +--- +features: + - Adds the ability to manage auditd.service and enter audit.rules + diff --git a/releasenotes/notes/rabbitmq_password_change-4fce15c9ebb0e20c.yaml b/releasenotes/notes/rabbitmq_password_change-4fce15c9ebb0e20c.yaml new file mode 100644 index 0000000..351db74 --- /dev/null +++ b/releasenotes/notes/rabbitmq_password_change-4fce15c9ebb0e20c.yaml @@ -0,0 +1,4 @@ +--- +issues: + - Invoke rabbitmq_user resource explicity to apply password change during + update, if any. diff --git a/releasenotes/notes/remove-old-urls-dea2b7fdcb50dd48.yaml b/releasenotes/notes/remove-old-urls-dea2b7fdcb50dd48.yaml new file mode 100644 index 0000000..d82ff11 --- /dev/null +++ b/releasenotes/notes/remove-old-urls-dea2b7fdcb50dd48.yaml @@ -0,0 +1,12 @@ +--- +upgrade: + - | + Removed the following URL configuration variables from tripleo::ui: + + * keystone_url + * heat_url + * ironic_url + * mistral_url + * swift_url + * zaqar_websocket_url + diff --git a/releasenotes/notes/rgw-keystone-v3-43ef17dd10f825be.yaml b/releasenotes/notes/rgw-keystone-v3-43ef17dd10f825be.yaml new file mode 100644 index 0000000..6159415 --- /dev/null +++ b/releasenotes/notes/rgw-keystone-v3-43ef17dd10f825be.yaml @@ -0,0 +1,5 @@ +--- +features: + - Add support for configuring Ceph RGW to use + keystone V3 service authentication instead + of admin token authentication diff --git a/releasenotes/notes/sriov_numvfs-40564db9e1be589b.yaml b/releasenotes/notes/sriov_numvfs-40564db9e1be589b.yaml index 85cbdec..5bcb588 100644 --- a/releasenotes/notes/sriov_numvfs-40564db9e1be589b.yaml +++ b/releasenotes/notes/sriov_numvfs-40564db9e1be589b.yaml @@ -1,4 +1,4 @@ --- features: - Added a provider to configure VFs for SR-IOV interface. - Added a define for persistence of the VFs configuratin. + - Added a define for persistence of the VFs configuration. diff --git a/releasenotes/notes/sshd-437c531301f458bb.yaml b/releasenotes/notes/sshd-437c531301f458bb.yaml new file mode 100644 index 0000000..0086cb0 --- /dev/null +++ b/releasenotes/notes/sshd-437c531301f458bb.yaml @@ -0,0 +1,3 @@ +--- +features: + - Added manifest and template to enable configuration of sshd_config diff --git a/releasenotes/notes/use-reno-80402e5526a598aa.yaml b/releasenotes/notes/use-reno-80402e5526a598aa.yaml new file mode 100644 index 0000000..8102962 --- /dev/null +++ b/releasenotes/notes/use-reno-80402e5526a598aa.yaml @@ -0,0 +1,6 @@ +--- +prelude: > + Release notes are generated by Reno. +features: + - Release notes are no longer maintained by hand, we now use the reno tool to + manage them.
\ No newline at end of file diff --git a/releasenotes/notes/vncserver_listen-4417377cac38464c.yaml b/releasenotes/notes/vncserver_listen-4417377cac38464c.yaml new file mode 100644 index 0000000..0c0f8ea --- /dev/null +++ b/releasenotes/notes/vncserver_listen-4417377cac38464c.yaml @@ -0,0 +1,7 @@ +--- +features: + - Configure VNC server to be binded on internal network interface on compute nodes. + This value comes from tripleo-heat-templates and is configured by default to use + an IP address from the internal API network. + We use the ServiceNetMap in tripleo-heat-templates to compute the IP address, and we won't + configure 0.0.0.0 anymore as it used to open the binding to any network, which is unsecure. |