-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 22 Jan 2025 14:16:03 +0100 Source: openstack-cluster-installer Architecture: source Version: 43.0.1 Distribution: unstable Urgency: medium Maintainer: Debian OpenStack <team+openstack@tracker.debian.org> Changed-By: Thomas Goirand <zigo@debian.org> Changes: openstack-cluster-installer (43.0.1) unstable; urgency=medium . [ Thomas Goirand ] * [34c36ca] heat: do not set trustee/project_name as this breaks RBAC. * [03b8a9a] heat: Ensure trustee/project_name isn't defined to avoid rights issue. * [d4953ea] controller.pp: fix scheduling for designate, manila and magnum. * [94cc54a] oci-cluster-upgrade-openstack-release: check for VIP in ctrl1 * [04cdca8] Automatic removal of /etc/oci/self-signed-api-cert folder of cert is not self-signed. * [19b2d22] controller.pp: breaks scheduling dependency loop Anchor['horizon::service::end'] -> Class['haproxy'] replaced by Haproxy::Frontend['openstackfe'] * [eb45904] horizon: set default_dns_nameservers within neutron_options. . [ Bertrand Lanson ] * [1e01c5b] feat: Make metric_processing_delay a variable See merge request openstack-team/debian/openstack-cluster-installer!74 . [ Simeon Gourlin ] * [502c347] Configuring nova timeout block_device_allocate_retries . [ Thomas Goirand ] * [ea33c93] Add a new and better oci-scp-ring command. * [08845a0] oci-scp-ring: a few fixups. * [66165f0] Fix syntax error in controller.pp * [32d26f9] Document how to upgrade from Bullseye to Bookworm. * [aa3625f] Generate /root/reset-rabbitmq-credentials script, useful for bookworm upgrades. * [520ae50] Feat/enable sni. See merge request openstack-team/debian/openstack-cluster-installer!71 * [9d8de1e] Fix check_rb_user * [c0db4a2] oci-poc-restore: use oci-restart-all-services * [94a79aa] New oci-cluster-upgrade-bullseye-to-bookworm script, factorize in a oci-cluster-upgrade-funcs lib. * [45d2157] Also generate /root/reset-rabbitmq-credentials in messaging nodes * [c83867c] Fix description of haproxy_admin_external_access * [875b1bd] More Bookworm upgrade fixups. * [0706312] Package list for Antelope upgrade. * [7aaf974] upgrades: Fix restarting puppetserver in bookworm. * [564dcd8] Less packages in ctrl_upgrade_depends * [31c0312] Cluster with the correct node when rejoining after Bookworm upgrade. * [85b9e0f] List of packages for bobcat upgrade. * [cc3a882] Increase the number of VCPU for the 3x cl2 keystone nodes. * [a103403] bin/oci-cluster-upgrade-openstack-release: caracal package list. * [23f7509] oci-agent/openstack-cluster-installer-bodi-hook-script: fix puppet.conf setup. * [5e8e568] README.md: Bullseye to Bookworm upgrade. * [b9604d9] bin/oci-cluster-upgrade-bullseye-to-bookworm: Fix upgrading CEPHMON. * [e06ab58] Always schedule Anchor['horizon::service::end'] -> Haproxy::Frontend['openstackfe'] even if initial_cluster_setup is no. * [481c065] poc-bin/oci-poc-provision: Fix getting the IP of controllers of cl3 in the PoC * [358524b] poc-bin/oci-poc-provision: Correctly select controller 3 IPs. * [a3e0fee] oci-restart-all-services: Restart services in order, then in parallel. * [841824d] Bullseye: final reset of rabbit cluster and restart of all services. * [f566f9d] bin/oci-cluster-upgrade-openstack-release: only upgrade packages that are installed. * [57c23b8] bin/oci-cluster-upgrade-openstack-release: upgrade all installed horizon plugin at the same time as Horizon. * [47a63b9] bullseye-to-bookworm: handle the case when clusters has no rabbit * [1000523] Also schedule: Service['httpd'] -> Haproxy::Frontend['openstackfe'] * [6628035] utils/usr/bin/oci-restart-all-services: launch "Restarting in parallel" only if there are some services left to start. * [db279c3] haproxy: Do not bind port 80 by default, as it conficts with Apache on PoC cl2 (keystone only). * [9d0b2e3] oci-restart-all-services: fix test. * [9321c05] oci-restart-all-services: remove double-defined nova-conductor. * [b5d9ced] bin/oci-cluster-upgrade-openstack-release: Fix list of horizon plugin packages. * [0c101bc] Package depends list for Dalmatian. * [1a0b563] oci-cluster-upgrade: only upgrade packages that are installed and that are in a higher version. * [a6d26e4] upgrade to bookworm: automatically add non-free-firmware to standard sources.list. * [ac8cc17] bin/oci-cluster-upgrade-openstack-release: add checks from and to OS release names. * [5fc07df] Increase number of VM from 53 to 54. * [2d8ac70] Schedule restart of rabbit just right after RabbitMQ nodes have been dist-upgraded and rebooted. * [059e344] oci-cluster-upgrade-bullseye-to-bookworm: install zstd if not present. * [154774b] bin/oci-cluster-upgrade-bullseye-to-bookworm: correctly call rejoin_rabbit_cluster with first node hostname. * [14fb7e0] Colorize output of oci-poc-{save,restore} * [3a366df] Merge branch 'feat/swtpm-options' into 'debian/dalmatian' feat: enable swtpm option for compute nodes above Xena See merge request openstack-team/debian/openstack-cluster-installer!75 * [8429fd0] bin/oci-cluster-upgrade-openstack-release: run db online_data_migrations for cinder and placement after upgrade, plus run cinder db purge 0 before upgrade. . [ Bertrand Lanson ] * [42fff9a] feat: regionalize barbican service for nova-compute. This force the setting of the barbican_region_name parameter, in order to let nova-compute communicate with the barbican api in case of multi-region deployments . [ Thomas Goirand ] * [56c895d] uncollorize some of oci-poc-save * [ef75fa1] Add region_name param in neutron::designate call. See https://review.opendev.org/c/openstack/puppet-neutron/+/936823 * [675b8f0] openstack-api-vip * [f4ec0ef] vip-6: only setup when initial-cluster-setup is yes. * [7537a7a] Always setup the VIP, not only if initial-cluster-setup is set. * [4042bd5] Fix auth_url in neutron::designate for multi-region. * [efeddcd] controller.pp: correctly user and pass for ::neutron::designate * [99baa12] Also display authtoken passwords. * [06549d5] tempest.pp: Fix login_url and dashboard_url to include https:// * [3ce2571] Fix login_url and dashboard_url in all OpenStack release, not just last one. * [33b0d42] Fix again neutron::designate credential. Hopefully correct this time. * [1f4b38a] PoC: setup designate project owner managed resources. * [611bfe6] Implement possible customization of resize_confirm_window in compute.pp. * [ca13edb] report.php: fix using the correct regexp for validating network card names. * [d1c6d13] oci-disable-puppet: now understand multi-cluster. * [af443f2] oci-enable-puppet: understand multi-cluster. * [989fc18] Fix syntax error in compute.pp near resize_confirm_window * [ddea9d7] Add oci_check_all_nodes_alive check before upgrade. * [c38e04b] network.pp: fix base_url not including proto. * [072ee8e] Increase max_stacks_per_tenant to 50000 (ie: x10). * [bb12de6] haproxy: switch nbthread to 32 by default (which is what we have in production). * [29d7b09] Merge branch 'quorum-queues' into 'debian/dalmatian' Add quorum queue feature. See merge request openstack-team/debian/openstack-cluster-installer!76 * [997de70] Remove unnecessary ceph configurations See merge request openstack-team/debian/openstack-cluster-installer!77 * [7b3c3ab] tempest.pp: fix keystone password working without external keystone. * [bafa508] API: haproxy binds on IPv6 (Code misteriously was gone...). * [859afa5] src/inc/validate_param.php: allow ip_list to contain CIDRs. * [476748a] Allow to set API into a maintenance mode. * [736a5a6] Merge branch 'feature/json-logging' into 'debian/dalmatian' Enable use json for exiting logging See merge request openstack-team/debian/openstack-cluster-installer!78 * [a79e7fe] swift_container_replicator_per_region_scheduling * [1c3f74c] Create a new class oci::pxe_server that may be called by the ENC if hostname is self. * [59cf122] Fix management of ssh keys in /usr/bin/oci-live. * [068995e] oci-live: do mkdir -p /var/lib/openstack-cluster-installer early enough. * [eeb5544] oci-live: mkdir -p /var/lib/openstack-cluster-installer/tftp/live * [f5c4bd9] Add postfix in oci::pxe_server Checksums-Sha1: 4ac95006e3189fb5391bd61cd4757a41d822a355 2636 openstack-cluster-installer_43.0.1.dsc 229a2d24d7ea8b5200d29c6879cc0d17f2c59524 458724 openstack-cluster-installer_43.0.1.tar.xz 1c09c11a240db6cf65dc704255d5528f14d8bbac 9481 openstack-cluster-installer_43.0.1_amd64.buildinfo Checksums-Sha256: 1d4aaeed4cd2c884e96651ef0a2eefd32f8dd5fe68ce0650a0ce462216c11b59 2636 openstack-cluster-installer_43.0.1.dsc 38a243ee52d56f994d8007241fecdf635cb1b447234691da39b9ae6e6b56e6d2 458724 openstack-cluster-installer_43.0.1.tar.xz dc6da417b4dc1131aed88b7195f209f6091487e8211eff6952f9fe3c29e6d315 9481 openstack-cluster-installer_43.0.1_amd64.buildinfo Files: cabf03352105b0887305951a40b61577 2636 net optional openstack-cluster-installer_43.0.1.dsc 63938c8ec4223b43d6ac7ca0a60e55ac 458724 net optional openstack-cluster-installer_43.0.1.tar.xz 845c69c0fbc5de092707faf6d86cddc6 9481 net optional openstack-cluster-installer_43.0.1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAmeRDR0ACgkQ1BatFaxr Q/5nVBAAmd7bH93wCEJpjIcR/YQ6c23OWhU684y4UPSHu5SY8jLuTqFTeewsy5ck lfzAyueONAanVQgEJ0FXu3wqOsYGp72qJIB9QHknmme8JM/jk0m1wHowOYcZaoWJ gfjeNbc+wlQBss6jCtIr4vDtnRt914HBV+3a12IhiyyUDt9YkJVpnX/Qcpd8XXQO UOw2uU4DHzx/lnTK7TfmPfNAVN54mH4CvkfDvTBZ74p/ExHHvwlesF1GQ1TKcmt+ bWS8rpyMkD3gBymJSxS9Uu/+4GIHTBSVg27SCJEepywbFYcbs7CGeTA374CSBw7/ 2+wqjlM6z9CVFnLEvjukgDkK1gDUXaKo/9+1bSznk8MzK2aHDG1zewSXcqSVv3A0 9TPL3cktFsaGTaTe7g78y8rv0XfFTt7uqv4Z012S4JspHPWb1pf0s1lBtnI67HWt mST2a3P7oMuQS36JSE8VbfgIjb6TCeNpXko2kwE9qBgVjpxCgdDcWVoM/NYbnGOG KQiomoaNnb38e1MrlBkKj9BOlfXOPqxL1IJZCSQx6FZX40uaaDmLzWLY9S/u/EeB dkO2sMFnvgOigwUhc8x93cdT0YEi5tLyjDzXdTllZIUEPX13srC0EmcKOek8qhja nUD7qlujC5j7yZgObsf9GlZgizpzjMDWjHNuJaYfYhgQud+dIeo= =Dlmh -----END PGP SIGNATURE-----