-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 29 Mar 2020 22:18:39 +0200 Source: openstack-cluster-installer Architecture: source Version: 28 Distribution: unstable Urgency: medium Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Changes: openstack-cluster-installer (28) unstable; urgency=medium . * Do not use StrictHostKeyChecking=no when rsyncing fernet tokens, as we have signed ssh host keys. * Add missing authors from d/copyright. * Add an option for LVM volume nodes to configure volume_copy_bps_limit. * ocicli: use csvlook from csvkit instead of column by default. * Fixup volume backup backend in volume.pp * Make it possible choose ceph or swift for cinder-backup. * Add oci-puppet to lauch puppet -t more easily. * Fix ports for Ceph OSDs so that they are each 4, not each 3 ports. * oci-make-osd: Fix calculating DEFROUTE_IP if using BGP 2 host. * Prioritize Swift over Ceph as a backend for cinder-backup and Glance. * Load kernel and ramdisk over http instead of tftp (much faster). * Make Glance swift-backend works if we're using a local swift and a non-rocky setup. * Fix generating the scp-ring script so it doesn't scp to IPMI IPs. * Fix swift ring building so it wont add IPMI IPs. * Add a new oci-cluster-upgrade-stretch-to-buster. * Set arp_responder to True everywhere. * Fix ipxe.php to chain to any IP address that runs on the PXE server, not just hardcoded 192.168.100.2. * Fix Glance over Ceph when >= train. * Add filters to lvm.conf to avoid nested LVM issues. * Add a new oci-cluster-upgrade-stretch-to-buster script to minimize downtime when upgrading from stretch. * Automatically add new cluster's SSH CA key into OCI's /etc/ssh/ssh_known_hosts * Configure ocicli within the PoC's PXE server. * Add a PoC oci-poc-{save,restore} to be able to save a cluster state. * Add sync-oci-code script. * Make neutron's global_physnet_mtu and path_mtu tweakable cluster variables. * octavia::worker: base image now uses 4GB HDD. * Add oci-cluster-upgrade-stretch-to-buster script (currently PoC) * Allow controllers configuration for Cinder storage_availability_zone and default_volume_type * Do not manage policy-rc.d for keystone if not using Rocky. * Redirect output of oci-fernet-keys-rotate to /dev/null to avoid cron job to spam. * Fix ENC regarding non-master-controller IPs. * Do not use StrictHostKeyChecking=no when rsyncing fernet tokens, as we have signed ssh host keys. * Add a --first-master option to ocicli cluster-set, so one can change who's the first master in the cluster. * Fix-up volume.pp to allow using ceph as backend for cinder-backup. Checksums-Sha1: 07c3f95f3fbb0af0aacfe5f829e211500c25ae23 2397 openstack-cluster-installer_28.dsc 98c10d57d7d78e1ddf75f5181c42b09f2f195515 220396 openstack-cluster-installer_28.tar.xz 55170421aeec68567aa5d0e2cd96e697cd841f48 7604 openstack-cluster-installer_28_amd64.buildinfo Checksums-Sha256: 62de77fcc9651556592862ae61d9e0e683a2f5e821c5b627ea1969817620b619 2397 openstack-cluster-installer_28.dsc 07d526189be11cf1e450dcb8db2558df56e05589df8e990eeeee6f111beb21c4 220396 openstack-cluster-installer_28.tar.xz ea78afefe3dbaa7634d66a159b26de8f4f42ed515062fe1a02f2b34b75fc68ae 7604 openstack-cluster-installer_28_amd64.buildinfo Files: bc675f1a4e14b60317f2889c976145e1 2397 net optional openstack-cluster-installer_28.dsc 3bc2a888075dca8f234b7096a85d0f9d 220396 net optional openstack-cluster-installer_28.tar.xz 3f96c90c5cb7a2c5ec95d154da193687 7604 net optional openstack-cluster-installer_28_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAl6gdSAACgkQ1BatFaxr Q/4+Dg/9EctmjiWmpoxfbWLMnBFsoN+pZfsehKb8wGZV3onjbq0xcKPJrqKz+OMw 8yMh2RZcumekK3w8i+jADpO3Hu4GLJCN8cEVgdE1rsiZNaE4xg0hv/hdlKYEk1u2 1IH1it7RvOnwEmETg5HdS96YXIIVHybl1L0JckW0B1R8BwbH+0RiQgQm8qn+qSny B5ajwm2wen4C8Dw+pzaGzcYfRhOKKB3Zw50ni3Z65I0oGQYZol14uL/45fnQH15g 0vIbrrG2R79dPtLuutUPIgOGsyTiW1dJgmn8WVhm+JoVgBC6dBVfRG+ll/72eoXn Duv5pbZrxHUlQKVnLRpJEf42p5X8vA2vbTYQKjVdyqHbzYGIQPUF5pbrmCHi2unw wCFghZEqy9EYQ4VIxJwSsll9reeWfkWtgjNdkbYQtDFrNjXB1s5TJ2tAVvuQSPCy keCKaAexj8xy+/L1L7G3rv8K2ZdzDBjr6IFzAhKTw8dN5BThrhI1yjomGBWCPwQX YUt2vtiU0bUnJ+xpVaYvYCTxmKA7JsWxdYJt8KKzV7n3DsRllKuVIgsc4QgUCMyr pUGWzp106hlCExOl3GvZrgr06dlC5RIXyfu3RXKUW587NZosDPPuLu1Fy+MVeUF3 1x9ZE8AQgtiC3ITecBGo3NEqXWjYb+wqkVqJIu12imNEfKdBVxk= =IQDo -----END PGP SIGNATURE-----