Accepted openstack-cluster-installer 41 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 16 Feb 2021 19:08:35 +0100
Source: openstack-cluster-installer
Architecture: source
Version: 41
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 992951
Changes:
openstack-cluster-installer (41) unstable; urgency=medium
.
[ Thomas Goirand ]
* Fix poc-bin/oci-poc-install-cluster-swift with the new VM layout.
* Add udev rule and sort script to restore sanity in drive orders on
HP DL385, Qemu and others.
* Handle region_name per cluster.
* Set net.ipv4.ip_nonlocal_bind on all servers, needed if we set
LocalAddress in sshd + bgp-to-the-host.
* Cloudkitty: use keystone as fetcher_backend.
* Fix rabbit URL for ceilometer notifications in the controller.
* Add ceilometermiddleware support for swiftproxy.
* Call ::nova::cinder for any OpenStack release >= train, in both the
controller and compute classes.
* Add support for Ceilometer dynamic pollsters.
* Make Nova's reserved_host_memory_mb configurable, and set default to 16GB.
* Add optional activation of tempurl, symlink and staticweb swiftproxy
middlewares on swiftproxy nodes.
* Move cloudkitty & gnocchi dbs to the messaging nodes, on a new Galera
cluster for billing.
* Automatically write /etc/ceilometer/gnocchi_resources.yaml from
/etc/openstack-cluster-installer/gnocchi_resources.yaml. Same with
/etc/cloudkitty/metrics.yml for the processor.
* Rate limit the API to a customizable value, at the iptables level (default:
100 queries/s connection max per /24), and haproxy (default: 20 concurrent
sockets), with no limit for cluster internal use.
* Increased memcached max_connections to 16k (instead of 8k).
* Only keep 7 days of haproxy logs instead of the default which is 52.
* controller: also install python3-pankoclient.
* Configure by default the number of keystone uwsgi workers.
* Added filebeat support.
* Add missing pciutils depends in the openstack-cluster-installer-common
package (the agent uses it).
* Manage the number of API workers with $::os_workers and the new classes
foo::wsgi::uwsgi contributed to puppet-openstack.
* Add code to force a debian suite name for the MegaCli repo.
* Setup postfix with correct relayhost in all machines of clusters.
* Use "ceph-volume lvm batch --osds-per-device 2" instead of calling the
ceph::osd class to create the OSDs.
* Allow overriding the debian suite name for the HPE repo.
* Add support for installing PERCCLI.
* Fix swiftproxy.pp haproxy setup for Bullseye (ie: haproxy >= 2.1).
* Add missing call to class { '::octavia::housekeeping': } in controllers.
* Transmit all of the PKIs through the ENC, so there's no need to use a
script to update them. Administartors can simply edit the SSL key
materials on the OCI machine under /var/lib/oci/ssl/slave-nodes. The
puppet manifests are now taking care of updating the certs, and restarting
daemons appropriately.
* Fix-up correct rights and location for PKI materials in the cluster.
* Addresses OSSN-0088: disable glance metadef for non-admins.
* Fix compute node setup in case there's no data disk.
* Set enable_new_services => false when calling nova::conductor, to have new
compute nodes appear disabled by default, which is better for production.
* oci-poc: added support for AMD virtualization, and added modprobe.d options
to enable nested virtualization.
* Add an option to not provision CephOSD automatically.
* Optionnaly, OCI can set an HTTP proxy in the aodh-notifier's service
environment, which is very useful if the controller have no internet
access (this way, aodh-notifier can notify any URL).
* Do not attempt to setup swiftstore disks if they appear commented out in
the fstab.
* Add an option to install Panko or not (do not install by default).
* Set correct collect_statistics_interval and cluster_partition_handling.
* If using victoria and up, do not use SSL for Glance, as the package has
changed to not use UWSGI, and therefore, lost SSL support.
* Added support for Manila (share as a service).
* Add VRRP auth password (for Neutron L3 routers in HA).
* Make it possible to select available Horizon themes.
* Report and display machine block device controller and ethernet driver,
with their firmware driver version.
* Add a custom oci_facts.yaml in each nodes in /etc/facter/facts.d,
maintained by both puppet and at provisionning time. This is helpful for
anyone willing to customize his puppet environment depending on node role
and this type of info, directly in puppet or hiera.
* Depends on qemu-system, not just qemu (Closes: #992951).
.
[ Axel Jacquet ]
* Added rate limit for swift proxies.
Checksums-Sha1:
f88cb7240716db16715a4bed32902cc64c84ed88 2397 openstack-cluster-installer_41.dsc
8bc07ddde84cb2d0d8c3a88448c0a10e3d6ef1a6 302208 openstack-cluster-installer_41.tar.xz
d92efef5e3c18f07ac16b3299312601345c72ab4 8536 openstack-cluster-installer_41_amd64.buildinfo
Checksums-Sha256:
472bd865796c1bacfb3e8c5683259ea8fdcc4aeec6d6d80b61bac03e58b9ec8b 2397 openstack-cluster-installer_41.dsc
8df1889deb010eea9d8bdecbcd32c9b5e19531c9780198c23afbf42955282c21 302208 openstack-cluster-installer_41.tar.xz
44fd4fdfaf757f50306295a8cdcc23d436ea0cc3e42fb7b7828d19526038df11 8536 openstack-cluster-installer_41_amd64.buildinfo
Files:
8bd68be6ab64984849a8f61ebd9a074f 2397 net optional openstack-cluster-installer_41.dsc
78ea390405ababeb9ad5bd8c8c6b3164 302208 net optional openstack-cluster-installer_41.tar.xz
b6d683881b239335775f468129751dd3 8536 net optional openstack-cluster-installer_41_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=eFDc
-----END PGP SIGNATURE-----