CHANGES
=======

10.5.0
------

* Handle any network name in ServiceNetMap
* Add CinderEtcdLocalConnect parameter
* Add Etcd to DistributedCompute roles
* Add OS::TripleO::NovaAZConfig
* Fix the bond-with-vlans NIC config DPDK route indentation
* Fix typo in 2-linux-bonds-vlans NIC config templates
* Correct error catching while in "--check" mode
* Modifying the ovs-hw-offlaod file to adapt new changes
* Fixed wrong cinder store user name
* Fix OVN yaql KeyError: type error
* Update/combine docker/services/README.rst
* Move containers-common.yaml into deployment
* move logging into deployment
* Allow to disable Container Healthchecks
* Increase DockerNovaComputeUlimit default value
* Move warn clause as a shell task option
* Allow NovaRbdPoolName to be role specific
* Set Standalone's br-ctlplane MTU
* Do not set the cell endpoints for regular split-controlplane child stacks
* flatten the neutron-plugin-mlnx-sdn service
* Ensure lvm2 is installed prior to lvm commands
* Bind mount undercloud.conf with ,z in mistral\_executor
* flatten the ovn service configurations
* Set ulimit 16384 for Neutron SR-IOV container
* Ensure non-pacemaker versions for undercloud
* Do not archive ceph-ansible fetch directory if it is empty
* Add {{network.name}}NetworkVlanID to THT/net-config-\*
* Increase default ulimit values for Neutron agents containers
* Run octavia-api under httpd
* Fix minor typos
* Make Ceph RGW accept ResellerAdmin role for administration
* Ensure we get rsyslog state, even in "--check" mode
* MetricsQdr: Add InternalTLS support
* Stop writing /var/lib/container-startup-configs.json
* Run octavia external tasks with elevated permissions
* Deprecate nova-consoleauth service
* Fix usage of satellite in organization mode
* Add parameter ContainerImageRegistryCredentials
* Run nova\_api unprivileged
* Drop docker/docker-toool
* deployed-server: start and enable network service
* Make krb-service-principal metadata per-Role
* Update to the ceilometer publisher list
* Fix RabbitMQ locale for CentOS 7 (t-h-t part)
* Add systemd dependency to openvswitch to neutron agents
* Use tripleo-admin as octavia groups\_vars owner
* Fix CI ipv6 NIC config default route
* Jinja automation for %network%NetworkVlanId
* remove dep job in gate
* Backup /etc/os-net-config/config.json when os-net-config runs
* Force C.UTF-8 when dealing with rabbitmq
* Add novnc proxy to cellsv2 multicell controller
* Fix comments in environments/net-\* network configuration envs
* Add ci/common as trigger to scenarios multinode
* Disable a directory listing of /icons in httpd
* Add GnocchiStorageS3BucketPrefix into deployment
* turn voting/gating on scen009 master
* Fix conditional/if usage for amphora conversion
* Fix skydive deployment not able to read ssh private key
* Use discovered private key file
* Deprecate messaging params replaced by global oslo params
* Remove osd\_objectstore default
* Enable objects versioning for Ceph RadosGW
* Update zuul layout for new deployment directory
* Move Aide to deployments
* Default to 'podman' in container-puppet.py
* Move container-puppet.py to common
* Adding configurability to the amphora image format
* TLS everywhere: switch Octavia to use DNS entries
* Provide option to disable EMC in puppet-vswitch
* Fix Nova/Libvirt memory backed file conditions when they are role params
* Fixes for freeipa\_setup.sh
* Run mistral\_executor unprivileged
* Update scenario 10 for flattened ceph
* Deprecate opendaylight service
* Add ExternalInterfaceDefaultRoute parameter to ci nic configs
* [Configuration] Add missing py37 and corrected default envlist
* Rename docker-container-startup-configs to container-startup-configs
* Rename /var/lib/docker-config-scripts to /var/lib/container-config-scripts
* Add %network%InterfaceDefaultRoute for compatibility
* Move apache service under deployment directory
* ContainerCli param added to ceph-base heat template
* ipaclient: do not explicitely install python-simplejson
* mistral: configure heartbeat parameters to avoid action timeout
* Add external\_resource\_vip\_id property to network\_data.yaml
* Add storage\_mgmt network to DistributedComputeHCI role
* Add external\_resource\_id properties to network\_data.yaml
* Only add VlanID parameters to multiple-nics examples if using vlans
* Switch OpenShift nodes to use Podman
* Stop loading nf\_conntrack\_proto\_sctp module
* Make sure openssl-perl is installed on split stack tls-everywhere deployments
* Ensure we configure SELinux at the earliest stage
* Enable paunch logging to its full extent
* Enable flat network for ovn
* move ceph-ansible into deployment
* Use container\_cli instead of docker to run mysql upgrade command
* Octavia: set net configuration to none for mkdir in containers
* move undercloud-upgrade.yaml into deployment
* move tempest to deployment
* Replace hard-coded 'docker pull' by '{{container\_cli}} pull'
* Translating scenario010 to standalone
* We have to allow httpd to listen on those ports in some cases
* Fixup ipaclient.yaml for python3
* Use get\_attr to set %network%InterfaceDefaultRoute
* correct parameter names in openid federation support
* Tag external\_post\_deploy\_steps
* Only attempt to start previous MariaDB if the image is available
* Change scheme/port to template instead of getting from hiera
* nova: Deprecate the nova-placement service
* Change OS::TripleO::Services::OVNDBs to non ha file
* move clustercheck.yaml into deployment
* flatten the cavium liquidio service
* Remove UpgradeRemoveUnusedPackages
* Make nfs version for nova ephemeral storage configurable
* Add missing TLS configuration for ironic
* Only bind-mount internal TLS haproxy dirs if enabled
* Move neutron-plugin-ml2.yaml to deployment
* Open firewall port 3300 for ceph monitors v2 protocol
* Include python-panko client
* Remove UndercloudCtlplaneSubnets defaults in UC env
* Run chown for nova log files on every run to fix wrong permissions
* Enable authtoken cache
* rename rsyslogd service to rsyslog and deal with lack of reload
* octavia: pass container cli to external deploy tasks
* fix tox python3 overrides
* Avoid "-a" cp option in order to avoid SELinux AVC
* Add python36 job
* Drop the old python35 job
* Increase log level for command failures
* Manage system timezone with ansible
* Fix: Unknown Property ML2HostConfigs
* Switch ContainerCli to podman by default
* Make sure ContainerCli is set to the stack
* Move Designate to Experimental
* Support ctlplane subnet host routes from undercloud.conf
* Fix idempotency for horizon container logs
* Rename docker\_puppet\_apply to container\_puppet\_apply
* Reload rsyslog/cron when we change timezones
* Deploy steps playbook: add a step0 tag
* Install and configure tmpwatch for log cleanup
* flatten the gnocchi service configurations
* Suppress output from copy tasks
* Refactored configuration options for nova/neutron in manila
* Disable cinder's LVM backend when deploying Pure backend
* Test the correct placement endpoint with multiple regions

10.4.0
------

* Copy tripleo-admin key to mistral home directory
* Disable TripleO UI service
* Set setype on etcd's service directory
* Give sudo powers in Disable mysql task
* Drop unused parameters
* Remove environments/baremetal-services.yaml
* Rename docker\_config\_scripts to container\_config\_scripts
* Workaround rhel8,0 iptables bug causing neutron\_ovs\_agent to restart continuously
* Flatten and move logrotate-crond service container
* Do not restart bundles during a minor update
* CI: force ContainerCli to Docker when needed
* ci/environments/ovb-ha: force Docker for ContainerCli
* image-serve: only uninstall docker-distribution when it was installed
* Rename docker\_puppet\_tasks to container\_puppet\_tasks
* Add kek\_rewrap functionality to Barbican
* Delay check CI jobs until the pep8 passes.
* Request certificate for using host service principals
* Fix metadata\_settings for redis
* mistral-executor include host /etc/environment
* flatten the octavia service configurations
* Support cinder-volume running active-active
* Drop unused deployment services parameters
* Fix logging config on misc services
* Fix monitoring\_subscription on misc services
* Rename /var/lib/docker-puppet to /var/lib/container-puppet
* flatten database service Redis
* Disable SELinux separation for ironic\_pxe\_http
* flatten opendaylight-api service
* Deprecate TripleO UI
* Remove Docker when upgrading to Podman
* Added tar option to preserve metadata of existing fetch\_dir
* Remove Congress
* step5: flatten the neutron service configurations
* step4: flatten the neutron service configurations
* flatten database service MySQL Server
* OVN: Add VLAN to NeutronNetworkType
* allow to configure broadcast\_dhcp in neutron DHCP server
* step3: flatten the neutron service configurations
* Make heat yaql limits configurable
* Fix py3 compat for regex searches in YAML validate
* Add Mellanox SDN ML2 template for a containerized service
* Clean up after tripleo\_persist and tripleo\_transfer
* Always include step tasks in external update/upgrade
* Remove unused resources of PreNetworkConfig for NFV
* Support cephfs\_volume\_mode parameter
* container-image-prepare: redirect all output to logfile
* [FFU] Ensure compatibility with ansible 2.6
* Fix skydive\_vars evaluation
* Drop the role service override for ovb
* Add functionality to manage KSM on compute nodes per role
* flatten the ec2 service configurations
* Add OvnDbInternal to EndpointMap and use it for ovn\_db\_host
* Fix typo in get container\_id ansible task
* Add SSHD composable service to Networker role definition
* Do not bind mount the ovn\_db folder for the ovn pcmk restart bundle
* Do not ignore Swift ring changes to trigger container restart
* Use dedicated container tag per skydive service
* Switch scenario00{1,4}-standalone to Ceph bluestore
* Podman support in haproxy-public-tls-inject
* Apply stop period for paunch-managed stateful svcs
* Don't look for primary\_role ips in AllNodesValidationConfig
* Set the NTP server on Sahara too
* Remove tasks that stop and disable Horizon services
* Deprecate Docker
* Create deployment/deprecated directory
* step4: flatten nova service configuration
* Change vxlan to geneve for network environment files
* Be able to know when we are running inside a minor update workflow
* Allow embedded Skydive etcd port
* standalone: switch container registry to ImageServce
* Enable OVN baremetal by default with Ironic service
* Revert "Remove host-config-and-reboot interface"
* Switch scenario001-002-003 to use Podman
* nova\_libvirt\_init\_secret: add net=host
* Handle upper and lower case system uuids
* Remove host-config-and-reboot interface
* Remove upgrade\_tasks added during nova services flattening
* Removes all pacemaker from scenario-standalone 1-3 environments
* flatten collectd service configuration
* Correct sshd configuration within nova-migration-target
* Make openshift-ansible working dir owned by tripleo-admin
* Fix malformed mistal\_executor kolla config file
* Fail to live migration if instance has NUMA topology
* Drop step\_config from containerized Nova services
* Redis: fix podman start on reboot
* Re-Add mysql configuration for nova host discovery
* Set neutron tenant network types for ODL configurations
* Only request neutron certificate from neutron dhcp service
* Add missing RoleParameters and ServiceNames
* Add CertmongerUser role to OVB defaults
* [FFU] Make sure group access work correctly with ansible 2.6
* step2: flatten the designate service configurations
* flatten the barbican service configurations
* Add specific upgrade hiera data file
* New parameter: ContainerLogStdoutPath
* Replace docker-distribution with apache image-serve
* Move openstack clients service
* flatten qdrouterd service configs
* Fix rabbitmq restart
* Enable rabbitmq\_management plugin
* cell\_v2 multi-cell
* Translating scenario012 to standalone
* make skydive working with folder created by tripleo-admin
* Deprecate xinetd service management
* Fix keystone opt deprecations in manila manifests
* Move ipa enrollment to host\_prep\_tasks
* Add missing parts from step2: flatten nova service configuration
* Switch default neutron ML2 mechanism driver to OVN
* Default ControlPlaneMtu to 1500
* Introduce ContainerImagePrepareDebug parameter
* Switch Manila API to httpd and support TLS
* Don't mount docker.sock in the mistral-executor container
* Revert "mistral-executor: bind-mount /var/lib/containers"
* flatten ceilometer service configuration
* env/docker: add ContainerCli
* Restrict use of become to minimum necessary for Ceph deployment
* step3: flatten nova service configuration
* step2: flatten nova service configuration
* Re-Add the StackUpdateType parameter to the nova-vnc-proxy template
* Drop Docker service from Undercloud roles
* flatten sensu service configuration
* flatten tripleo-ui service configuration
* Use net=none for gnocchi\_init\_lib
* Make ceph-ansible working dir owned by tripleo-admin
* Remove RoleConfig
* Enable glance image cache's cleaner and pruner
* FFWD: Introduce workaround for neutron cisco plugin
* Do not mount ceph-ansible and octavia playbook within mistral container
* Add GlobalConfigExtraMapData
* minor update: move VIP before stopping pacemaker on a node
* Sanitize the uuid string for ceph-ansible
* Fix with\_items indentation in logs readme ec2-api
* Remove upgrade\_tasks added during nova services flatten
* Force host\_routes to be a list
* Remove the use of tests as filters as it will be deprecated
* Do not pull image while tagging pcmk images in upgrade\_tasks
* Set Ironic default interface when using networking-ansible
* Inject log-driver for podman containers
* Move container-image-prepare.j2.yaml to deployment dir
* flatten the fluentd service configurations
* step1: flatten the designate service configurations
* Push some NodeDataLookup in scenario001
* Disable tacker for scenario007
* Add support for transferring MariaDB data between nodes
* Add support for persistence of MariaDB data during reprovisioning
* Flatten rabbitmq service - step 2
* Adding dependency for NetworkDeployment in 'server\_resource\_name'Deployment
* Fix generation of configs that contain password files
* Handle case change for dmidecode >= 3.1 in Ceph templates
* Flatten rabbitmq service - step 1
* Change NodeDataLookup type from string to json
* Copy undercloud.conf file during mistral-executor start up
* Remove unneeded iptables mount points
* Export global\_config for compute-only stack
* Disable stack check and cancel update for undercloud
* Remove incorrect mapped\_data key from cisco ml2 hieradata
* step1: flatten nova service configuration
* flatten the horizon service configurations
* mysql: sync credentials in running container on password change
* Add ContainerImagePrepare service to ControllerStorageNfs role
* Clean unmanaged rules pushed by iptables-services package
* step2: flatten the neutron service configurations
* Update the min tox version to 2.0
* TLS everywhere: Mount the whole /etc/pki/libvirt/ directory in libvirt
* Catch directories we can not change ownership
* TLS everywhere: Set post-save command for neutron dhcpd
* TLS everywhere: Set post-save command for nova-vnc-proxy
* flatten the congress service
* flatten the panko service
* flatten the tacker service
* flatten the manila service configurations
* step1: flatten the neutron service configurations
* Run nova\_statedir\_owner on every run
* certmonger: Don't restart haproxy on cert renewal
* mysql: do not stop container when upgrade doesn't update mysql image
* run docker\_puppet\_tasks on any role
* Create tripleo-admin user on the undercloud
* flatten database service MySQL Client
* Add stop\_grace\_period for heat\_engine container
* flatten haproxy service configuration
* Correct \*\_short\_bootstrap\_node\_name variable
* Move the multipathd services into deployment
* flatten the iscsid service
* TLS everywhere: Set post-save command for redis
* TLS everywhere: Set post-save command for RabbitMQ
* TLS everywhere: Set post-save command for httpd
* Add PacemakerNetwork definition
* Optional ICMP validation of controllers and gateways
* Rework nova\_cell\_v2\_discover\_host.py to use nova.conf and python novaclient
* Move UpgradeInitCommand and UpgradeInitCommonCommand to run by Ansible
* flatten the swift service configurations
* Enable ML2 baremetal by default with Ironic service
* noop package installation inside docker\_puppet\_apply.sh
* Deploy Sahara with unversioned endpoints
* flatten the mistral service configurations
* Remove conf.modules.d that doesn't exist
* deployed-servers: symlink ansible-playbook
* Add VLAN as a supported network type for OVN
* Reload haproxy when certificate is renewed
* haproxy: deploy IPtables rules from the host
* Update parameters for cinder's Netapp backend
* Explicitly manage http configs
* Mount mysql client configuration in nova cell discovery container
* Introduce OpenShiftAnsiblePath parameter
* Don't disable keepalived in nonha-arch.yaml
* Remove workflow\_tasks
* Remove the scenario standalones from tht zuul layout - just use template
* container-image-prepare: disable logging on the task
* Fix nova\_cell\_v2\_discover\_host.py with python3
* Address python3 string issues with subprocess
* Add missing entries for Pure Storage Cinder Backend and fix typos
* Apply changes to cluster using updated inventory
* Generate post-deployment openshift-ansible inventory
* Store nodes information in a dict
* Fix openshift playbook import
* Adding support of glance cinder store settings
* Revert "post\_deploy: support python3 for undercloud scripts."
* Remove all glance-registry related changes
* Flatten etcd configuration
* Move login-defs to deployment directory
* Move securetty to deployment dir
* Move kernel config to deployment directory
* Move selinux to deployment folder
* post\_deploy: support python3 for undercloud scripts
* Use internal interface for keystone in "wait for placement" script
* nova-metadata: use keystone internal endpoint instead of admin
* Designate: Use keystone v3 internal endpoint instead of admin
* Include the DB password in a Mistral environment for creating backups and restores
* Avoid dangling firewall rule for ssh access
* Ensure /var/lib/config-data exists before setting selinux context
* use include\_tasks instead of include
* Remove networks from Undercloud and Standalone roles
* Add network data for the undercloud
* Skip templating disabled networks
* Service check in nova\_cell\_v2\_discover\_host.py to use internal API
* Adding pyshim.sh to missing python commands
* Drop unused puppet/services parameters
* Remove external\_network\_bridge Neutron option
* Remove configuration for cni0 bridge
* Use net=none for \*\_init\_log(s) containers
* Create /run/netns if does not exist
* mistral-executor: bind mount the docker socket only when needed
* mistral-executor: bind-mount /var/lib/containers
* UX - Useful error msg if role is not in roles data
* Enable Glance image\_conversion plugin when backend is rbd
* Allow ssh from all for undercloud
* Look for parameters in parameter\_groups
* flatten cinder service configuration
* Add support for native TLS encryption on NBD for disk migration
* Remove deprecated TLS-related environment files
* Allow Octavia deployments for Standalone
* Ensure logs folder is created in prep hosts tasks
* Added Barbican option BarbicanPkcs11AlwaysSetCkaSensitive
* flatten sahara service configuration
* Add HorizonSecureCookies to environments/ssl/enable-tls.yaml
* Fetch scheme/port from hiera instead of hard coding it
* Use the tripleo-standalone-scenarios-full template
* Update memcache config in docker-uc-light env
* Look for used parameters in conditionals
* Make neutron ovs agent work with python3
* Fix paunch logs verbosity control
* Drop duplicate keystone logging group parameter
* nova-libvirt: conditionalize selinux bind-mount
* Make ceph-ansible integration respect PythonInterpreter
* Drop zaqar param duplicates
* Enable memcached debug if Debug param is set
* Reuse the container in case we have a temporary podman failure
* Remove with\_items for 'yum/package'
* Conditionalize docker socket bind-mount
* Transitioning to HAProxy 1.8
* docker-puppet: retry container run command
* Mount system modules when calling system iptables
* Be explicit when passing vars into deploy steps
* Assure that updates job is listed in both check and gate
* Remove unused jinja code in network-isolation environment
* Remove gluster settings from previous deployments on re-deploy
* Fix deployment of gluster with openshift AllInOne
* flatten the heat service configurations
* Run 'Delete Upgrade Flag and Unset it via Rest' only once
* Remove default role-name from merge network param script
* Remove unused params from ci/environments/network/\* templates
* Add missing Aodh monitoring\_subscription
* Add missing Ironic monitoring\_subscription
* Update Barbican HSM ansible roles
* Gracefully shutdown Mysql before upgrade
* Add Swift container sharder service
* Enable virt\_sandbox\_use\_netlink SELinux boolean for port healthchecks
* Fall back service\_net\_map to ctlplane
* Make ODL deployment compatible with podman

10.3.0
------

* Set keystone bind\_host to both public and admin
* Allow container healthchecks to access netlink data
* Add scenario002-standalone to gates as we make it voting
* Allow overlay tunnel endpoints on IPv6 address
* Enable image inject metadata properties & user roles to be ignored
* Fix address for glusterfs container images
* Restart openshift master services after stack update
* Rework the generated openshift-ansible playbook
* Fix files: for scenario003 standalone - pointing to wrong env
* Move docker into deployment directory
* Fix scenario003-standalone remove extra cinder/horizon/swift
* Add horizon WebSSO support for OpenID Connect
* Fall back public\_virtual\_ip to ctlplane if External net not present
* Only add internal\_api\_virtual\_ip if InternalApi in network\_data
* Ensure /var/lib/iscsi actually exists before mounting it
* docker-puppet.py: only create docker-puppet.sh when it doesn't exist
* Add standalone scenario jobs into the gate as well as check
* Fix scenario002-standalone missing aodh/ceilo/heat/gnocchi services
* Flatten Keystone service configuration
* Do not dereference .stdout if dmidecode is missing
* Reno only - Check for available networks for a role
* Fix example in releasenotes/notes/composable-network-subnets
* Configure undercloud timezone
* docker-puppet.py: move entrypoint mount to latest in order
* Add default to network.mtu in j2 in nic configs
* Add Distributed Compute roles
* Let the operator manage openshift updates and upgrades
* Use templating for nova cell transport-url
* Deprecate duplicate NFV environment files
* Snmp - Use net\_cidr\_map for firewall rules
* Memcached - Use net\_cidr\_map for firewall rules
* Designate - Use net\_cidr\_map for rndc\_allowed\_addresses
* Apache - Use net\_cidr\_map for proxy\_ips
* Make NetCidrMapValue contain list of cidrs in each net
* Add a tag's containing subnet cidr to ctlplane network
* ironic: enable the ipxe boot interface by default
* Remove MongoDB
* Fix scenario004-standalone - remove cinder/fluentd/horizon/redis
* Fix scenario001-standalone missing aodh/ceilo/heat/gnocchi services
* Bind mount docker-puppet.py in RO without SElinux labelling
* Replace tripleo-scenario002-multinode with scenario002-standalone
* L3 routed networks - subnet fixed\_ips (3/3)
* Fix bind mount for glance-api's service directory
* Bind mount /var/lib/iscsi in containers using iSCSI
* update datatype for "OctaviaFlavorId"
* Prevent service bootstrap node facts from colliding with each other
* Ensure we get the correct setype for haproxy log dir
* Ensure we get the right SELinux context for config-data sub-dir
* Remove deprecated workflow resource registry entries
* Replace tripleo scenario004-multinode with scenario004-standalone
* Update hacking version
* L3 routed networks - network.j2 (2/3)
* L3 routed networks - data + env (1/3)
* Add keystone::wsgi::apache::api\_port
* Update auth parameters
* Use mtu of Tenant network to control neutron global\_physnet\_mtu
* Use calculated undercloud ctlplane DHCP allocation pools
* Add MTU to neutron networks and nic-config templates
* The monitoring\_subscription was lost in translation
* Replace scenario004 multinode with standalone
* Add template code to configure hsm backends for barbican
* Use templating for nova cell database\_connection
* Temporary remove selinux label mount option for neutron
* Remove unused nova packages from host during upgrade and update
* Explicitly set KVM machine\_type for migration compatibility
* Move cellv2 discovery from control plane services to compute services
* flatten sshd service configuration
* implement default ssh-from-ctlplane rule via hiera
* flatten tripleo-packages service configuration
* Add python interpreter to ansible postconfig
* flatten time service configuration
* Fix issue with when statement in docker-registry.yaml
* Don't force Horizon's secure cookies to disabled
* Add missing role\_specific tag for NUMA aware vswitches params
* Remove redis from standalone env
* Rename tripleo-ci-centos-7-scenario00{6,9}-multinode-oooq
* Replace scenario001-multinode with scenario001-standalone
* Move podman into deployment directory
* Correct file modes for rpmlint failures
* flatten tripleo-firewall service configuration
* flatten tuned service configuration
* flatten snmp service configuration
* flatten memcached service configuration
* Fix horizon's iptables rules for haproxy when split off a separate role
* Move [neutron] auth\_url to KeystoneV3Internal
* Add tripleo-ci-centos-7-scenario003-standalone job
* Remove unused params in jinja rendered network config templates
* Flatten Glance service configuration
* Flatten Zaqar service configuration
* Flatten Ironic services configuration
* Update tuned profile variable configuration file if it exists
* Allow for service\_bootstrap\_ips empty list in IpListMap
* Drop baremetal job template
* Fix and consolidate cinder-backup host prep tasks
* Flatten Keepalived service configuration
* Add deployments/README.rst
* Fix service naming conventions
* Set container images for openshift 3.11
* Fix misnaming of service in firewall rule
* Enable support for openidc federation in keystone
* Spliting compact services in multiples lines
* Fix access to /var/lib/haproxy when SELinux is enabled
* Add a dual-bond example NIC config template
* Enable image import plugins & image output format
* Ensure we get dedicated logging file for HAProxy
* Remove deploy steps on empty roles
* Ironic Inspector - disjoint ip range(s) for HA
* Replace confusing usage of update\_identifier
* Run local registry and prep cont at standalone
* Force rhsm re-registration during upgrades
* puppet\_config for rabbitmq\_bundle needs file\_line
* Perform docker reconfiguration on upgrade\_tasks
* docker: wire SELinuxMode with Ansible vars
* Add TunedCustomProfile parameter and HCI Ceph filestore environment
* Fix - ApacheServiceBase needs ServiceData
* Add ansible python interpreter configuration support
* Switch debug to use logging classes
* Remove invalid comment in ips-from-pool-ctlplane
* upgrade: remove tasks that stop and disable services
* Allow to run docker-puppet.py with SELinux enabled
* Run collectd socket cleanup on container start
* Removing the deprecated environment files for hw offloading
* Lower mistral-executor nofile to 1024
* Put user data in the main stack
* Remove HostPrepConfig
* mistral-executor: bind-mount undercloud.conf when validations are enabled
* Introduce container\_cli hiera key
* Re-implement keepalived restart without pre\_deploy
* Add support for cinder NFS snapshots
* Remove CephAnsibleSkipTags from scenario1/4 standalone ci envs
* Disable pacemaker on multinode-containers (fs010)
* Flatten Aodh service configuration
* Update yaml-validate for deployment/ folders
* Remove nic for storage\_mgt network
* Don't mount data folder
* Add relnotes for ODL migration to diagstatus API
* Fix fs035 by defining a default gateway\_ipv6
* Allow customization of more openshift-ansible vars
* Remove openshift-ansible customization
* Rely on osa defaults for enabled services
* Specify multiple NtpServers by default
* Include cpu plugin in default collect plugins
* [Core] Change openstack-dev to openstack-discuss
* Change openstack-dev to openstack-discuss
* Add comments clarifying use of deprecated\_params for roles
* neutron-cleanup skips ports marked skip\_cleanup=true
* Add env file for standalone scenario002
* nova\_compute fails to start in tls-everywhere configuration
* Allow to skip docker reconfiguration during stack update
* Use https instead of http for docs links
* Process the templates even if j2\_excludes file is not present
* Update manila environment file name in capabilities-map
* Set facter variable 'uuid' explicitly in docker-puppet.py
* Set balance to source for openshift\_router endpoints
* Use InternalApi network for openshift\_master\_cluster\_hostname
* Add DockerPuppetMountHostPuppet parameter
* Use new ODL diagstatus heath check REST URL
* Default NtpPool to an empty list
* Invoke redhat-subscription role during upgrade
* Fix pacemaker tagging race condition

10.2.0
------

* Mount config-data/puppet-generated/nova for nova\_api\_ensure\_default\_cell
* Use correct permission on Gnocchi tmp dir
* Enable ironic-inspector support in ironic when enabling ironic-inspector
* Fix Swift S3 API configuration
* Mount puppet-generated directory for tripleo-validations
* Remove ties between ceilometer and panko
* Exclude redundant letters
* ctlplane pre-alloc IPs - deprecated/non-deprecated role name
* Remove common bootstrap\_nodeid from deploy\_steps/tripleo-packages.yaml
* Fix Octavia hieradata keys
* Add Storage network to IronicConductor role
* upgrade: remove Docker containers now managed by Podman
* Add SERVICE\_bootstrap\_node\_ip values to allNodesConfig
* Add ctlplane interface routes
* Handle python binary look for scripts
* Change step to start nova placement and make compute wait for it
* Fix ServiceData in docker/services/aodh-api.yaml
* Adds ci/environments/scenario004-standalone.yaml for new job
* Fix Chinese quotes
* Adjust haproxy-public-tls-inject.yaml bootstrap variable
* Add a new standalone scenario003 env file
* Revert "Verify nova api migration finished before start placement"
* Upgrades: Ensure idempotency of pacemaker services
* Ensure directory exists before trying to use it in a container
* Create clouds.yaml for the undercloud
* mysql: do not overwrite password file during docker-puppet
* Disable deprecated parameter ControllerEnableSwiftStorage
* Stop upgrade if a task on one node fails
* Fix logging for metrics\_qdr
* Remove validation part of the online database migration pre-upgrade
* Initial conversion of scenario001 to standalone
* Don't set boot\_option=local on baremetal flavors
* Configure registry to use gluster
* Add config files/templates to integrate nsx plugin with container
* Remove unnecessary logs due to misconfiguration from pacemaker
* Set Swift workers to 2
* Allow enabling routed networks on undercloud update|upgrade
* ceph: allow curl tasks to run in dry run mode
* Honor --skip-deploy-identifier in common deploy tasks for updates
* Add bootparams service for all roles
* Fix indentation issue
* Add customized libvirt-guests unit file to properly shutdown instances
* Check for available networks for a role
* Update kolla\_config to deal with keystone fernet key rotation
* Noop out xinetd::service
* Ensure chrony is restarted
* Fix ansible conditional for ovs upgrade
* Autocreate CephAnsibleFetchDirectoryBackup
* Pass the container backend explicitely
* Ensure directories managed by libvirt-daemon exist
* Change the ordering for the xinetd class override
* Enable ovs-stats by default when using ovs
* Add python shim for docker config scripts
* Enable Glance Image Cache
* Run docker-puppet.py in debug mode
* Configure cinder's access to the nova API
* Restrict number of Swift workers to 1 on the undercloud
* Call etcd scaleup playbook when adding master nodes
* Fix Upgrade of horizon service
* Revert "Revert "Convert \*tasks from bootstrap\_nodeid to short\_bootstrap\_node\_name""
* Use ipc: host with containers that use pcs
* Add hosts to expected ansible groups
* Set flavor property resources:MEMORY\_MB to 0
* Cleanup nova metadata port in nova api service
* Convert dynamic lookups to use colon notation
* Python 3 compatibility: convert raw\_input to input
* [Templates] Use str\_replace for hosts
* Make openshift-master service idempotent
* Do not include node scale up playbook in case of new masters
* Fix new node detection
* Python 3 compatibility: fix has\_key
* Use correct python version for puppet-docker.py
* multinode-containers: include Podman service
* Allow the environment to enable Podman on the overcloud
* Set setype for log and persistant data directories
* Remove defaults from masquerade-networks service env
* Add OVN environment that works with standalone mode
* Do not ignore NtpServer by default
* Fix check-run-nova-compute script shebang
* Handle LP openvswitch meta-package on upgrade
* Handle difference between future and current container\_cli
* Move UndercloudPostDeployment to python
* Fix hiera condition in UndercloudCtlplaneNetworkDeployment
* Enable \_member\_ role for undercloud install
* Check if source directory does exist before linking
* Rework neutron/own agent wrapper tools for podman
* Support HA container tagging with podman
* CiscoNexus: Update and Remove deprecated vars
* Reimplement HA docker tagging
* Remove developer tools from tripleo .gitignore
* Fix multiple-nic sample template
* Added Dell EMC SC multipath support
* Use container\_cli for post\_upgrade\_tasks & external\_upgrade\_tasks
* Mount /usr/share/openstack-octavia-amphora-images into mistral-executor
* Remove unused networks from OpenShift roles
* Add network data for use with openshift deployments
* Export container\_cli for update & upgrades & post upgrade tasks
* Do not purge the Ironic Inspector dhcp-hostsdir
* Update to OpenShift 3.11 release
* Move set of database\_connection to OctaviaBase
* Fix whitespace around "ansible\_connection: local"
* Trim whitespace in multi-line env descriptions
* Set \`TraceEnable\` directive for apache to 'Off'
* Update min tox version to 2.0
* Deprecate environments/docker.yaml
* Switch to Chrony by default
* Fix tasks in check mode
* docker-puppet: remove -z from /var/lib/config-data mount
* low-memory-usage: configure NovaSchedulerWorkers to 1
* Remove non-voting scenarios from gate
* Pass DockerRegistryMirror to prepare
* Add chrony time service
* Add additional whitespace around "ansible\_connection: local"
* Disable MistralDockerGroup creation with podman
* Make $SSH\_OPTIONS overrideable
* Fix a typo of "rabbitmq"
* Sensu Deprecation note
* Fluentd deprecation releasenote
* Add more NSX config parameters
* Create default deployment plan
* Add OpenStack clients service
* Ensure unique containers names in docker-puppet

10.1.0
------

* Add posibilities to set default timeouts for octavia
* Turning off extra UIs from Horizon fixes also SQLite issue
* Standalone: Disable persisting VIPs on /etc/hosts
* Add common vars to common plays
* Skip hosts group in ceph-ansible inventory when all are blacklisted
* Sets ODL OVSDB inactivity probe timer
* Fix novajoin nova vendordata hieradata keys
* Per role Numa aware vswitch configuration
* Add scenario 012 - overlcoud baremetal+ansible-ml2
* Move metadata file creation for netapp to puppet-tripelo from THT
* Add support for configuring ppc64le in ironic
* Fix typo in standalone-tripleo environment
* ceilometer: --skip-metering-database is gone
* Ensure correct tmp ownership for Gnocchi
* Set hierdata for swift server workers conditionally
* Add parameters for cinder storage availability zones
* Fix NeutronSriovHostConfig path for ODL deployment with SRIOV
* Delete empty karaf directory on host
* Delete novajoin manual setup from freeipa setup script
* Force absolute path for CONFIG\_VOLUME\_PREFIX
* Fix cinder\_api\_apache error during upgrade
* Support for libvirt volume multipath
* Switch OpenShiftGlusterDisks to a single disk
* Change Swift storage directory to /srv/node/d1
* Add tempest workspace volume for tempest
* Fix haproxy tls mapping under pacemaker
* Add OS::TripleO::Services::ContainerImagePrepare to ControllerOpenStack
* Fix IHA with the new region\_name key
* Verify nova api migration finished before start placement
* Remove non-container zaqar-server on upgrade
* Revert "Convert \*tasks from bootstrap\_nodeid to short\_bootstrap\_node\_name"
* Apply variable to task not the block
* Add stack output ansible\_group\_vars
* Added all keystone log files to fluentd
* Parametrize OpenShift deployment type
* Correct a minor typo in the doc that could lead to some issues
* Disable non-containerized Swift services
* Swift doesn't use standard logging
* Allow standalone to manage selinux
* Ensure octavia flavor gets configured if composable octavia
* Run update jobs for fuller set of services
* Remove artificial constrains around notification drivers
* Use single replica for standalone AIO deployments
* Revert "iscsi: workaround to let podman read /dev/null"
* Disable Swift auditors/replicators on undercloud
* Standardize path to prepare log file
* Add metadata\_settings to Octavia and Glance APIs
* Do not wipe disks on OpenShift gluster nodes
* Set openshift\_docker\_insecure\_registries
* Do not modify imagestreams
* Let openshift-ansible configure the firewall
* Use Timesync service instead of Ntp
* Add OS::TripleO::Services::Rhsm to OpenShift roles
* Ensure the needed openshift resources are set
* Convert \*tasks from bootstrap\_nodeid to short\_bootstrap\_node\_name
* Remove unused tls-cert-inject.yaml template
* Rename no-tls environment
* Improve support for deploying ceph on standalone system
* import\_role takes name as a parameter, not role
* Set correct project name for designate-neutron integration
* Add /v2 suffix to Designate uris
* Split designate envs
* Add sample designate environment for ha
* Introducing Nuage Neutron VRS resource
* Update no-tls environment in ssl/ directory
* Recreate cinder LVM loopback device on startup
* Use different base virtual\_router\_id on openshift
* Fix update tasks for openshift
* Use openshift-ansible container instead of RPMs
* Use glusterfs for registry when deploying with CNS
* Deploy openshift all in one in scenario009
* Remove obsolete code for handling Pacemakerized resource restarts
* Sharing hypervisor /var/lib/ironic with ironic-conductor container
* Use nova\_api DB for [placement\_database] -> connection
* Do not reference ansible\_hostname if it is undefined
* Add SELinux configurations for a proper Standalone deploy
* Add nova-scheduler worker support
* Set octavia log directory permissions to octavia user
* Honor --skip-deploy-identifier in common deploy tasks
* Align novajoin container logging to other services
* Remove deprecated Ram/Disk filters in NovaSchedulerDefaultFilters
* Implements: liquidio-containerization
* Exposing NeutronDhcpOvsIntegrationBridge
* Remove references to logging\_source
* Upload amphora image in RAW format if RBD backend
* Run online migrations via "external-upgrade run"
* Add heat param for openshift prerequisites playbook
* Load openvswitch module from the host
* Load dm-multipath module from the host
* Load ip\_vs module from the host
* Load iscsi\_tcp module from the host
* Add provision to specify java arguments to ODL
* Fix TLS when using a containerized undercloud
* YAML NIC Config 2 script - fix comment indentation
* Ensure ceph-ansible source directory is present
* Remove 3node from CI
* Add config option for ODL IPv6 deployment

10.0.0
------

* Use valid\_interfaces instead of os\_interface for placement
* Fix placement region setting
* Introduce proper steps to external update/upgrade tasks
* Consolidate openshift-ansible global variables
* Make glusterfs the default sc when deploying with CNS
* Introduce OpenShiftGlusterNodeVars heat param
* Fix inventory files for newer openshift-ansible
* Tag container image prepare tasks to allow running them for updates/upgrades
* Name unnamed tasks
* check mode: paunch configs
* check mode: docker\_puppet\_tasks
* check mode: docker\_puppet
* Revert "Allow a containerized logrotate to access docker"
* Chunk up ceph-ansible output to prevent clogging the CLI
* Collectd documentation refactor
* Fix privileged typo in docker-puppet.py
* undercloud: deploy podman
* Introduce OS::TripleO::Services::Podman
* Allow to deactivate SELinux separation for selected containers
* Set proper setype for service directories
* check mode: puppet host
* Convert with\_dict tasks to use loop and be less chatty
* Add UseNotifySSL to environments/ssl/enable-internal-tls.yaml
* docker-puppet.py: used dedicated hiera entry, not uuid
* Remove unused parameter NeutronEnableDHCPAgent
* Mount /usr/share/ceph-ansible into mistral-executor
* Set mysql connect timeout in the undercloud
* Add a zaqar-swift-backend environment file
* Don't configure BIND to listen on localhost
* Configure http/https on OVN Metadata service to talk to Nova
* In process-templates script write output files to provided dir when using base path
* Add a fact checking xinetd service present
* Add posibilities to set tunnel\_csum in ovs agent
* Remove unused bootstrap-config.yaml
* Allow to run bootstrap containers in privileged mode
* Update standalone role
* Ping default gateways before controllers
* Add nova file\_backed\_memory and memory\_backing\_dir support for qemu.conf
* Check if openstack-glance-registry is enabled before stopping it
* Change log directory for OpenDaylight
* Dell EMC Sc: Add support for excluded\_domain\_ips
* Configure haproxy for openshift infra
* Clean up previous osa inventory dir before deployment
* Fix openshift new node detection
* Refactor openshift services for composable roles
* Add simple validation that OpenShift is deployed
* Dropped "recurse" for idempotency
* Pass NeutronMechanismDrivers parameter to prepare
* Undercloud - Restart keepalived on update
* Fix error in Tenant network routes definition
* Tag tasks in in common tasks
* Remove "when failed" from debug task names
* Tag step plays
* Pass image import conf file to command which runs glance server
* Fix list concatenation of routes in bond-with-vlan
* Ensure some directories are created with the correct SELinux label
* Conditionally mount the TLS-related certs on the haproxy container
* Remove parameter reference to non-exisingt parameter
* Add deprecated\_server\_resource\_name for ObjectStorage role
* undercloud/stackrc: unset OS\_\* variables
* Add networks to IronicConductor role
* Stop cap granting to empty pool when telemetry disabled
* Allow a containerized logrotate to access docker
* Expose IronicImageDownloadSource as a parameter
* ceilometer: Use new archive policies
* Move nova-metadata api to httpd wsgi
* Fix files conditions for scenario 007 and 008
* Pacemaker-cinder-volume & pacemaker-cinder-backup log path fix
* Add host\_routes to port\_from\_pool.j2
* Only set ca\_bundle for HAProxy if internal TLS enabled & fix mounts
* Disable OVN related services in ODL env file
* Add CephOSD service to roles/Standalone.yaml
* Add ERL args parameter for rabbit and set the busy wait threshold to none
* Use openshift\_cockpit\_deployer\_image directly
* Don't merge /etc/collectd.d
* scenario010: enable Ceph RBD
* Fix a spelling mistake
* Fix a spelling mistake
* Don't fail ironic upgrade if xinetd isn't present
* Fix syntax for set\_fact module
* Fix typo in ansible's module name
* Enable health check for OVN containers
* Enable fluentd health check
* Enable ceilometer-agent-compute health check
* Enable health check for Ironic inspector services
* Enable Sahara API health check
* ironic: enable noop management interface by default
* Handle missing or bad dmidecode
* Add tripleo-heat-templates dir to Mistral volumes
* Hook openshift deployment with image prepare
* Cleanup ControllerStorageNfs role
* Persist ceph-ansible fetch\_directory using config-download
* Add template to disable Panko services
* Initial support for Podman in docker-puppet
* Disable sync\_power\_state\_interval in containerized undercloud
* iscsi: workaround to let podman read /dev/null
* Add a gateway IP to the Management net in network\_data.yaml
* Create a Timesync service declaration
* undercloud: deploy kernel composable service
* Add chrony support to validations
* Move to openshift-ansible 3.10
* Run online data migrations
* Set virt queue size as 1024 for all OVS-DPDK roles
* Add role definition for ComputeOvsDpdkSriov role
* Pass parameters for TLS proxy in front of Octavia-API
* Add scenario010 to check job list
* switch documentation job to new PTI
* python3ification of docker-puppet.py
* Simplify ssh known\_hosts entries for non-default port
* Make redeploy idempotent
* Fix neutron dhcp log path
* Always lowercase role name
* Create missing directories before mounting them
* Enable neutron-sriov-agent health check
* Add reflection of RpcPort to health checks
* Fix the scenario007 CI job failure
* Remove references to logging\_group
* Remove unused config file when start ovs agent
* Include ssh known\_hosts entries for non-default port
* heat-api fix log path
* Stop hardcoding baremetal API version in stackrc
* heat-api-cfn fix log path
* Enable fluentd on scenario002-multinode-containers
* Set OVS local ip through OVS ODL class
* Do not enable Ram/Disk Filter with filter\_scheduler
* Fix all-nodes.sh for python3
* Fix incorrect network name "ctrlplane" to "ctlplane" for SNMPd
* neutron-api: remove /usr/share/neutron mount
* Update reno for stable/rocky
* import zuul job settings from project-config
* avoid unnecessary failure to delete a list of empty workflows

9.0.0.0rc1
----------

* IHA Default the compute endpoint check script to internal
* Remove the duplicated word
* Fix standalone home dir variable
* Bind mount the database client settings in sahara\_db\_sync
* Remove uneececary conditionals in network-environment jinja
* Fix bind-mount to manila's bootstrap container
* Update rsyslog existence check
* Group fast\_forward\_upgrade\_tasks tasks into blocks
* remove scen000 update job from gate as it's non-voting
* Only configure rsyslog when present
* Fix rsyslog restart for swift
* remove scen007 from gate jobs
* Redis: Mount certificates on TLS proxy
* Define keepalived service in environments/docker.yaml
* Remove deprecated value used to set nova\_metadata\_ip
* Fix typo in network\_data files
* Add OctaviaEventStreamerDriver and change default
* Clarify ironic classic driver removal reno
* Add role parameter for rx/tx virtio-net queue size
* Remove External network from DVR related configuration
* Remove NeutronServicePlugins from octavia environment files
* Add a FreeIPAExtraArgs param to ci/scripts/freeipa\_setup.sh
* Set the number of RPC workers to 1 for non SRIOV OVN setups
* Fix enabled tripleo-validations check
* This file intorduces OVN as a controller. I've cloned the neutron-sfc.yaml file and added to the parameter\_defaults NeutronSfcDriver:'ovn' There could be other param defaults needs to be added and i'm not aware of
* Always enable image prepare service for docker clouds
* Make vlan\_transparent in neutron.conf configurable from Undercloud
* Remove md5 checksum output from CA injection
* Fix small nit in enable\_validations parameter
* Enable collectd to connect to metrics QDR
* Decoupling number of API and RPC workers for neutron-api
* Fix logic around heat output exclusions handling
* Mount tripleo validations for mistral containers
* Add cleanup service for neutron ovs bridges
* Delete FreeIPA enroll script
* Migrate tripleo-packages service to ansible package module
* Add tags to OpenShift external tasks to allow upgrading it separately
* Fix interfaces in boot\_param\_tasks
* Add limited retries in create\_swift\_temp\_url\_key.sh
* SSL support for haproxy -> novnc proxy connection
* Skip Ceph packages when running tripleo-packages
* Fix Swift storage device setup
* OpenShift upgrade with openshift-ansible and external\_upgrade\_tasks
* Set allow\_action\_execution\_deletion to true in mistral api config
* DeployedServer support for cidr via get\_attr
* Use fqdn for live\_migration\_inbound\_addr
* Move the shebang to /usr/bin/python
* Add neutron metadata agent to the undercloud
* Default bootstrap\_server\_id
* Add BlacklistedIpAddresses stack output
* novajoin: Fix cloud-config configuration path
* Ensure Cinder has a default volume type
* Pass all vars to deploy-steps-tasks.yaml with config-download
* Parallelize server pre and post steps
* Added NovaOVSDBConnection parameter
* Fix Neutron SFC environment file
* Fixed wrong when condition in mounting staging location
* Assert container's ssl cert exists before upgrade
* Revert shebang change for InstanceHA startup script
* Mount /usr/lib/heat on undercloud Heat
* fix manila scheduler service typo
* Use /var/lib/kolla... path for TLS certificate
* undercloud-post: Discard CA usage if not set
* Allow performing Ceph update/upgrade separately
* Ceph update and upgrade in config-download era
* Drop obsolete environment for \`overcloud ceph-upgrade run\`
* Update and upgrade tasks for services deployed via external deploy tasks
* adding vxlan into Neutuon drivers for networking-ansible
* Break out image prepare into its own "service"
* Switch deployment\_source\_hosts default to "Undercloud"
* ovn: Fix minor update failure with OVN db pacemaker HA resource
* Use RPCPassword instead of RabbitPassword for novajoin
* QDR for metrics collection purposes
* Add support to set cors config in gnocchi templates
* Allow to remove xinetd service
* upgrade: move removal of services at step 3 (leftovers)
* Add NovaResumeGuestsStateOnHostBoot and NovaResumeGuestsShutdownTimeout
* Add support for containerized networking-ansible ML2 plugin
* Exercise scenarios with changes at common
* Revert "Fix deploy health checks"
* Fix parameter name used to create the Manila CephX keyring
* host\_routes using get\_attr (Composable Networks)
* Add per-network routes to NIC templates
* Add host routes to subnets
* nova: add parameters to configure nova::cron::archive\_deleted\_rows
* Fix errors using multiple-nics templates w/o VLANs defined
* Fix manila update, upgrade, and FFU tasks
* Fix python3 support in yaml-validate script
* Avoid ifcfg files modification when a reboot is not required
* Fix ironic containers data owning races

9.0.0.0b4
---------

* Set default number of rabbitmq queues to CEIL(N/2)
* Fix RST syntax (needed by release)
* Remove tftp service and package upon upgrade to container
* NUMA aware vswitches
* Set CephX user for Ganesha
* Remove HostnameFormatDefault from NFV roles
* Fix a race when upgrading Neutron & Ironic on the undercloud
* Add upgrade\_tasks for HAproxy
* undercloud: revert to using the iscsi deploy interface by default
* Fix deploy health checks
* copy ceph config in manila-share container bundle
* Instance create fails due to wrong default secontext with NFS
* Edit some post update tasks logic
* Do undercloud container prepare in external\_deploy\_tasks
* Don't run host\_prep\_tasks from {{role}}HostPrepDeployment
* Update/correct vrrp check for haproxy
* Allow setting physical network MTU via heat template
* ansible: replace yum module by package module when possible
* Don't require files key in env-generator
* Add secondary DNS server to disable-unbound environment
* Revert "Check container health as part of the deploy"
* Add scenario010 for testing Octavia
* Fix containerized ironic bind-mounts
* Bind mount mistral state for external deployments
* Move hugetlbfs gid config to BootParams service
* Update manila environment file names
* Use global ansible.cfg for nodes-uuid playbook
* Enable deep\_compare of pcmk resources by default
* Run scenario009 for more services
* Fix HostnameMap lookup - replace str\_replace with yaql
* Enable logging to stdout/stderr in memcached
* Limit deploy health checks to paunch managed ones
* Check container health as part of the deploy
* Mount my.cnf.d into the db\_sync container for Barbican and Octavia
* remove scenario005 from experimental
* Pass in rndc key to Designate deployment
* Open designate-mdns ports in firewall
* Run designate pool update only on bootstrap node
* OVN: Set sysctl value 'net.ipv4.ip\_nonlocal\_bind' to 1
* Update/upgrade prepare/converge in config-download era
* OVN: Add exec puppet tag to ovn-controller service file
* Add release note for vnx and unity template changes
* Lower Ceph PGs count in scenario004
* Set container images for CNS
* mysql/undercloud: add condition for upgrade
* Remove EXPERIMENTAL warning for manila docker deployments
* Edit environments/ovs-hw-offload.yaml file
* Add OVS-DPDK parameter as part of roles file
* DnsServers using get\_attr
* EC2MetadatIp using get\_attr
* ControlPlaneDefaultRoute using get\_attr
* ControlPlaneSubnetCidr using get\_attr
* Add ability to set openshift container images
* Move scenario009 to the check queue
* Log more details for container images prepare
* Give neutron ports names: $HOSTNAME\_$NETWORKNAME
* Iterate once in network-environment.yaml
* Increase the step for gnocchi\_db\_sync
* Configure rndc to listen on internal\_api network
* Unify the Manila HA and non-HA docker configurations
* Fluentd: Set cinder-backup log path
* Reduce default services for Standalone
* OVN: Add env file to deploy SRIOV with OVN
* Remove step\_config from NVMEoF cinder backend
* Disable sensu-client in CI
* Generate and mount wrappers for haproxy in OVN metadata agent
* Fix variables interpolation for included roles
* Replace raw\_get with dict access syntax
* HA support for OpenShift
* Make Horizon's SECURITY\_KEY 64 characters long
* Update yaml files for Dell EMC VNX, Unity drivers
* standalone run a post config to generate a clouds.yaml
* Update standalone role for a cloud
* Cleanup hosts name on initial install
* Enable configuration of Designate's pools.yaml
* Disable recursion in Designate-managed BIND
* Expose dnsmasq\_local\_resolv option
* Add AllNodesExtraMapData parameter
* Improve nova statedir ownership logic
* Remove bogus "EXPERIMENTAL" in neutron-sriov.yaml environment file
* FFU Create cell0 db points to the nova-api bootstrap node
* Leave undercloud images locally after prepare
* Add the ability to scaleup the openshift stack
* Fluentd configures rsyslog to send logs properly
* Fix bootstrap\_host\_exec check for manila\_share
* Add a ComputePPC64LE role
* Add support for {{role.name}}IPs in Composable Role
* Fix openstack-manila-share resource typo
* Correct unit file name check for heat\_api\_cfn validation
* Add subnet host\_routes to output of OS::TripleO::\*::Ports::Port
* Add some air - blank line between network's in net configs
* Double the docker puppet process counts
* Replace deprecated include module with include/import\_tasks module
* Iterate only once in network configs parameters
* yaml-validator - network\_data validate show all errors
* Add FFU upgrade steps to Sahara services
* FFU: missing ironic tasks
* Fluentd: disable log path docker transformation
* Do not disable ipv6 on loopback interface for epmd
* Refactor the inventory generation
* Update for openshift 3.9
* Set configure\_qemu to true to get qemu port range applied
* Fix missing parameters in OVN DVR environment files
* Increase max heat stack depth
* Store ODL logs to file
* Add ServerDeletionPolicy parameter
* Add networking-ansible ML2 plugin support
* ceilometer: deprecation cleanup
* OVN: Remove environment files which deploy OVN dbs in non HA
* Correct Cinder NetApp backend name parameter mapping
* Clean up env files for Cinder's Netapp backend
* Handle blank lines followed by comment in nic conversion script
* Undercloud specific volumes for mistral-executor container
* Add SELinux management to containerized undercloud
* Add default value for name\_lower in network\_data.yaml to update ServiceNetMap
* Prevent Neutron L3 and Metadata agents from running when using OVN DVR
* Role specific derive parameters workflow parameter
* Fix non-HA rabbitmq user password updates
* Add release note link in README
* Do not grant caps if pool name is empty
* Remove the OVS-DPDK deprecated parameters
* Set ODL API restart policy to unless-stopped
* Add support for NodeDataLookup for Ceph deployment
* storage\_vnx\_pool\_name is incorrect for VNX cinder driver
* Allow custom --bip CIDR for docker options
* Moving glance mount nfs block to puppet glance-api template
* Lower reserved memory for nova-compute
* Make BIND /var dir persistent
* Add release note about Designate
* Update scenario003 to deploy separate messaging backends
* Delete default ODL Password
* Add scenario011 to install ironic in the overcloud
* ovn: Add dns\_servers configuration support
* Execute post\_update\_tasks in update playbook
* Fix syntax for set\_fact ansible task
* Disable pid file usage in the swift\_rsync container
* skydive external\_deploy\_task migration
* Fix incorrect Redis VIP declaration in fixed-ip-vips-v6.yaml
* Enable Ansible error handling per role
* Handle roles w/o deprecated\_nic\_config\_name during template cleanup
* Add host prep step for ntp time sync
* use versioned keystone endpoint in OPENSTACK\_KEYSTONE\_URL
* Adding HeatEngineVolumes and HeatEngineOptEnvVars support
* Allow a containerized mistral-executor to access docker
* Make BIND listen address configurable
* Fix DNS firewall rules
* Fix gnocchi auth mode to basic
* Introduces NovaComputeCpuSharedSet parameter
* Delete deprecated parameters
* Adds support to configure enabled bios interfaces
* Call validations upload workflow instead of action
* Correct spelling
* Activate memcached debug only when using MemcachedDebug param
* Log memcached to stdout/err only
* undercloud: manage mysql user + revoke grant during upgrade
* Revert "scen007 is failing in the gate"
* Remove unecessary back-slashes in CephManilaClientKey caps mon
* Print a more informative error message on misconfigured volumes
* scen007 is failing in the gate
* Update CephX client.openstack keyring to use 'profile rbd'
* use keystone public endpoint in horizon
* Run dispatch script for all unmanaged devices
* Adds docker SFC and cleans up ODL envs
* Set tuned profile for compute roles
* Implement TripleoValidations composable service
* Reduce verbosity during mysql bootstrap, non-HA
* Remove unuseful become: true from deploy-steps
* Update capabilities-map
* Fix error in the role-specific parameter merging in rhsm service
* Fix typo
* Add environments/net-noop.yaml
* undercloud: add missing services for upgrade cleanup
* Migrate Octavia to external\_deploy\_task
* Use UpgradeInitCommonCommand with deployed-server too
* Enable secure TUNNELLED mode for NFS
* Support enabling Debug in OVN metadata agent
* Uses new format for CephX keys caps
* Fix typo
* Set Ceph pools rule\_name to replicated\_rule
* Updates: run host\_prep\_tasks between update tasks and deployment tasks
* Add host\_prep\_task to setup proper logging for Swift
* Do not fail on non existent ansible group
* Map OpenShift resources to services
* Match only haproxy for docker ps and skipp all \*-haproxy occurences
* Add missing 'update\_tasks' to the OVN dbs pacemaker service
* fix tox python3 overrides
* rerun \*\_init\_bundles all the time
* Fix update/upgrade or config change for ODL
* ffu: Add missing nova-manage db sync for Pike upgrade
* Introduce restart\_bundle containers to detect config changes and restart pacemaker resources
* Upgrades: Refactor package removal to step3
* Upgrades: Refactor playbooks to set facts
* Match Net:SoftwareConfig resource in scenario000 to other scenarios
* Fix typo with Manila upgrade template
* Add tempest container to docker.yaml
* Add docker service to OpenShift CI roles
* Fix fail\_if\_empty invocation with pipes

9.0.0.0b3
---------

* Fix GlanceRegistry FFU cleanup
* Add blankline for readability
* Add pvremove to the disk clean step
* Add sanity checks for xinetd service restart
* trivialfix:fix a typo
* Use wait\_for\_connection module instead of local action for reboot wait
* Decouple OpenShiftGlusterDisks from openshift-master.yaml
* Add a way to override base path when file driver is used
* undercloud: enable KernelIpNonLocalBind
* Revert "Only add internal\_api\_virtual\_ip if InternalApi is in network\_data"
* Fail yaml-validate.py on new deployments with outputs
* Deprecate templates replaced with config-download
* Add release note for PasswordAuthentication parameter
* Add OPNFV scenario environment
* Enable inspector dnsmasq dhcp filter
* snmp: listen on ctrlplane
* ssh: enable PasswordAuthentication for containerized undercloud
* Support containerized DVR in compute role
* Ensure WorkflowSteps resource is enabled in ceph-upgrade-prepare
* Pike to Queens controller upgrade guard rerun with no images
* Create docker-puppet.sh only once to avoid ETXTBSY errors
* Optimized Ansible tasks in deplay-steps-tasks.yaml
* Run image prepare after registry install
* standalone: cleanup environment
* Manage public certificate with ansible
* Upgrades: Refactor httpd\_enabled variable
* Make VhostuserSocketGroup param as mandatory for ComputeOvsDpdkRT role
* Reset Cinder RPC versions after upgrade
* Add flag to enable QoS DSCP marking in ODL
* Add site id parameter to cisco vts ml2 template
* Unset UpgradeRemoveUnusedPackages on converge
* Pass designate configuration to neutron
* Enable s3api by default
* Fix Designate worker conditional
* Drop old ceilometer services
* Parameterized deployment hosts
* Containerized control plane with Dell EMC ScaleIO storage
* Use user specified private key when deleting temp keys
* Add stack name to env() for OS::TripleO::WorkflowSteps
* NeutronSriovHostConfig missing in SRIOV's env files
* gnocchi: add missing /var/lib/gnocchi
* Replace hiera lookup for ceph::profile::params::fsid
* Remove CephAnsiblePlaybook parameter reset from ceph-ansible env files
* Remove UpgradeRemoveUnusedPackages from undercloud-upgrade-prepare.yaml
* Set default application for Ceph Luminous openstack\_pools
* nova-ironic: add support for post-upgrade cleanup
* Add acl to paths that are shared among related neutron processes
* Fix 3node deployment
* Make lb-mgmt-subnet a class B subnet
* Use /usr/bin/env python to autodetect python
* Fix upgrade\_tasks for TripleO UI
* Rename Dell EMC XTREMIO iSCSI environment file
* fix a typo in collectd.yaml
* Bring update/upgrade tasks for OsloMessagingRpc up to date
* Trigger scenario003 on designate changes
* docker: cleanup update tasks
* Fix known hosts config script value
* Add support of shared staging location for glance-direct
* collectd: give access to the libvirt socket in ro
* Don't delete br-ex on upgrade in multinode jobs
* Use str\_replace for known\_hosts
* Only add internal\_api\_virtual\_ip if InternalApi is in network\_data
* Deployed Server - portmap should match neutron API
* Mount /var/run/redis for the redis socket
* Deploy Docker via Ansible and not Puppet
* Add ability to pre-assign IPs by role on ctlplane
* Remove support for puppet-ceph
* Correct log location in container environment for Fluentd
* Allow custom time constraints to rotate logs
* Don't use crudini to get rhn server
* Enable logging for tempest container
* Use rabbitmq service principal in metadata settings
* undercloud: change upgrade steps
* Revert "Switch public endpoints to use FQDNs by default"
* Add basics for standalone node
* Add missing UndercloudUpgrade to environment
* undercloud: set OS\_CACERT when TLS is used
* Remove support for classic drivers
* FFU Add cinder-backup missing fast\_forward\_upgrade\_tasks
* Allow configuration of NFS backend for Nova
* update tht jobs to include network/endpoints
* Revert "Change default endpoint map entries to use TLS"
* deploy-steps: switch to tripleo\_role\_name
* fix spelling misktake
* NFV: Support for config-download to deploy node with kernel args
* Expose parameter MistralDockerGroup
* Add ability to control Glance's enabled\_import\_methods
* Fix for the manila backend configuration errors
* Enable default polling interval override
* Clear up Upgrade params on converge
* Add fast\_forward\_upgrade\_tasks in ironic services
* FFU Set NetworkDeploymentActions CREATE,UPDATE for ffwd-upgrade prepare
* Default Octavia SSH pub key to UC default keypair
* Fix cinder-backup image wrangling on update
* Add a 60 seconds timeout to ping\_metadata\_ip()
* Add option to override confirmation in yaml-nic-config-2-script.py
* Remove undercloud specific service definitions
* yaml-validate: sets isn't python3
* Change template names to rocky
* Add compute node L3 agent container for DVR
* Generate and mount wrappers for neutron agent processes
* ironic-inspector: store ramdisk logs even on success in debug mode
* Switch public endpoints to use FQDNs by default
* Change default endpoint map entries to use TLS
* Add no-tls environment to env-generator
* add tripleo update job as voting
* Add EnablePublicTLS flag
* Add necessary tags in Controller role for multinode job
* Make the KeystoneURL stack output versionless
* Do not overescape the Manila keyring caps
* Add support for NVMeOF cinder backend
* Clean up Cinder backends in capabilities map
* undercloud: do not hardcode eth1 for public interface
* Undercloud upgrades will use upgrade\_tasks
* Fix typo in multiple-nics/role.role.j2.yaml
* Mount ODL log file on host node
* Set normal CephAnsiblePlaybook on update/upgrade/ffwd converge
* heat: align config with instack-undercloud
* Delay collectd start
* Fix case-sensitive OctaviaUserName parameter
* Instance HA: prevent compute to start on a host being evacuated
* Remove ironic\_host\_manager usage
* Add missing check for gnocchi api enabled
* Expose Horizon "DocumentRoot" on host
* Copy-in libvirt certs via kolla extended/start
* undercloud: switch to the "direct" deploy interface by default
* Copy-in neutron cert via kolla extended/start
* Add parameter for UndercloudNetConfigOverride
* Fix sample env data
* Ensure tasks aren't empty dicts
* Add BlacklistedHostnames stack output
* Move Nova Compute undercloud upgrade logic into nova-ironic
* Run tasks on primary role first
* Remove deprecated NeutronExternalNetworkBridge from CI environments
* Convert resource\_name to number
* undercloud-upgrade: use deploy\_steps\_tasks for yum update
* Revert Ceph bridge names to previous values
* Remove empty host prep tasks for Tempest
* Remove UndercloudLight
* Remove step\_config from CinderVolume backend services
* Copy-in redis certs via kolla extended/start
* Removing the deprecated environment files for hw offloading in containers
* Remove redundant config bond-with-vlans/compute-dpdk.j2.yaml
* Revert "Fixes ceph-external docker service name"
* Execute ceph-ansible with its own ansible.cfg
* Make novajoin vendordata timeout configurable
* Add DeployIdentifier to Swift set\_swift\_secret container
* Download IPA kernel and ramdisk
* Restrict tenant network to geneve
* Ensure config-download mappings are unset on ceph-upgrade
* Switch remaining env files to containers defaults
* Fixes chowning neutron cert/key perms
* Fix deprecations in the ironic modules
* Disable StrictHostKeyChecking when removing keys too
* Add validation on role names
* Upload validations to swift on undercloud install
* Add defaults into name property for config-download
* Switch to config-download by default
* Fix few issues with deploying with baremetal-services.yaml
* [DellEMC]Update Manila Unity driver
* [DellEMC]Update Manila VNX driver
* Add volumes list of docker-puppet container when merging config volumes
* Fix path to deployed-server-environment.yaml
* Deploy Designate in scenario003
* Set live\_migration\_inbound\_addr for ssh transport
* Enable heat-ui plugin for horizon by default
* Octavia amphora image handling updates
* Introduce Ceph upgrade environments
* Do not pass ceph\_release to ceph-ansible
* Add neutron "segments" plugin to the default list
* Add /var/log/opendaylight directory to ODL
* Fail validation on new workflow\_tasks
* Suppress warnings with -qq
* Parameterizing Puppet Tags
* Explicitly set nova/neutron/ceilometer host to expected fqdn
* Default collectd to overcloud gnocchi
* Add neutron-plugin-ml2 to the scenario007
* Add support to ironic "direct" deploy interface
* Move remnants of environments/services-docker
* Make pcs resource bundle image name update tolerant of rerun
* Added missing pki volume for custom CA
* No-op Mistral workflow resources for update/upgrade/ffwd
* Add OVNCMSOptions in dvr environment files
* Telemetry services need to access to Storage
* Define Octavia SSH key name and file path
* Fix openstack-nova-consoleauth service upgrade check
* Support separate oslo.messaging services for RPC and Notification
* Revert "Fix neutron-plugin-ml2.yaml puppet base ref"
* add lower-constraints job
* Enable management network in network\_data
* Add an openshift-cns service
* Add missing undercloud upgrade tasks
* Add validation for SoftwareConfig outputs
* Deprecate support for workflow\_tasks in Ceph services
* Omit hiera YAML validations for external deploys
* Fix neutron-plugin-ml2.yaml puppet base ref
* Reduce verbosity during mysql bootstrap
* [tripleo-ui] Explicitly configure Nova CORS
* Track global failures flag for YAML validations
* Disallow SSLv2, SSLv3 and TLS1.0 in httpd for FedRAMP compliance
* undercloud: deploy SSH service
* Add dry-run mode for process templates
* Add environment file for Mellanox SDN
* Add CACerts service to scenario003
* Add IronicInspector to the Controller roles
* Improve nova-ironic cellv2 discovery
* Rely on client defaults for the Ceph container image to use in CI
* Containerize Neutron LBaaS service plugin
* Add www\_authenticate\_uri option to replace auth\_uri
* Add validation for hiera interpolation in services
* Add missing hiera interpolation calls
* ovn: Mount /run instead of /run/openvswitch when starting ovn-controller container

9.0.0.0b2
---------

* Modify libvirt port range for live-migration
* Disable FluentClient service for ffwd/upgrades
* Move mod\_ssl release note
* Remove todo as mistral tag filtering is fixed
* Correct indentation and file path
* Upgrade: make bundles use new container image name after upgrade
* Migrate Ceph deployment to external\_deploy\_task
* Environment to disable workflow\_tasks
* Add Barbican to the list of services for the undercloud
* [DNM] ceph-nfs: disable ganesha caching
* Logging Added nova-metadata log file
* Update environment files for Q upgrade and ffwd upgrade
* Use hiera interpolation for memcached\_network
* Add condition to ovs run during upgrade
* pep8: include no-tls-endpoints-public-ip.yaml in validation
* FFU: Use yum shell instead of ansible yum module
* Add the service\_config\_settings from {{service-name}} base
* Handle undercloud upgrades via host\_prep\_tasks
* Add Ironic Networking Baremetal Templates
* no-tls: add missing endpoint for Designate
* Use external IP for public interfaces
* Set ulimit for nova-compute and cinder-volume
* Enable SSL when UI is containerized
* Removes odl-dlux-gui feature for ODL
* Replace LOG.warn with LOG.warning
* Mark Designate as experimental
* Adding missing OVN Metadata service to DVR environments
* Add CACerts service to all scenario environment files
* Always run mysql init bundle
* Mount the public TLS certificate for HAProxy on up(date|grade) on pacemaker
* Removed unnecessary services from the LiquidioCompute role
* Stop configuring nova\_catalog\_admin\_info for cinder
* Don't use keystone admin endpoint for nova placement
* Delete not-used services-docker files
* Add endpoint map environment without TLS
* masquerade-networks: update defaults
* Fix missing allowed network type 'flat' for ODL OVS
* Update OS::TripleO::Services::ComputeNeutronCorePlugin for containers
* Fix typo in ovn\_cms\_options config
* Fixes the OvsVhostuserMode heat parameter
* Sanitize the uuid string
* Run the dispatch script for vlans as well
* Default NodeTLSData to always attempt setting TLS cert
* Default CertmongerUser to be defined for undercloud setup
* Add ability to set protocol in endpoint\_data.yaml file
* zaqar: fix hieradata to enable Debug
* Revert "Run containerized mistral-api eventlet"
* Add nfs as a cinder backup driver option to CinderBackupBackend
* Correct the InternalTLSVncCAFile to comply with selinux policy
* Set ulimit for neutron agent containers
* Switch Zaqar to use Redis
* Fix Cinder's default db purge cron settings
* Add prepare/converge env files for update
* Added network enabled check in multiple nic role rendering file
* mistral: align parameters with undercloud
* ironic-conductor: configure ipxe\_timeout to 60
* Fixes ceph-external docker service name
* masquerade: stop using YAQL for iptables data
* undercloud: increase token expiration time
* Support deploy\_steps\_tasks step 0
* Don't log set\_fact tasks for role\_data
* Add spacing for readability
* Fixes Neutron certificate and key permissions
* Enable ironic rescue mode by default
* Collectd needs access to /var/run/ceph to load the ceph plugin
* Remove unused OS::TripleO::StructuredDeployment reference
* Added Liquidio service definition in overcloud puppet registry
* Revert "FFU: Add support for panko service upgrade"
* Enable Octavia dashboard on horizon container
* Add ctlplane networking for routed networks
* Add firewall rule to octavia health mgmt iface
* Refresh keystone after deployment
* Add static routes for routed ctlplane
* Use IronicInspectorSubnets in undercloud.yaml
* Remove no longer used disable\_upgrade\_deployment flag
* get-occ-config.sh: fix handling multiple nodes in a role
* FFU: Add support for panko service upgrade
* Add purge to Nova cleanup cron
* Resource name correction
* Add environment to enable Designate
* Containerized Designate
* Designate Integration
* Implement MasqueradeNetworks services
* Default environment/services/\* to docker
* HAProxy: expose stats socket in HA deployment after upgrade
* Use sensu-client healthcheck parameter
* Remove config.json for old style nic config files when using new style
* Remove the os-net-config element config.json template
* Correctly set NeutronMl2PluginBase for OVN scenario
* remove OS::TripleO::Services::CephClient from CephAll
* Upgrade data on disk on mariadb major upgrade
* Set TripleoUI bind\_host via ServiceNetMap
* Honor {{role.name}}ExtraConfig with deprecated params
* Container Undercloud - Enable neutron segments
* Use ironic::inspector::dnsmasq\_ip\_subnets
* Apply the vhost group parameter for the vhost\_sockets directory creation
* Move API cors config to their services
* ironic/undercloud: align configuration with instack-undercloud
* HAProxy: fix bind mount to expose stats socket
* Make HA containers log to /var/log/containers after upgrade
* Fix undercloud key upload to nova keypairs UC post
* Fix ssh keys validation workflow trigger UC post
* Add environment/services-baremetal/\*
* Upgrade data on disk on mysql major upgrade - non HA
* Include pacemaker in Telemetry role
* Allow stacks to remove old update resources
* Enable octavia-api health check
* Fix fluentd upgrade tasks during FFU
* Allow for passing boot-time vars/args to OC nodes
* Added the missing attributes for roles\_data of ovs-dpdk-agent docker service
* undercloud: remove IronicInspectorCollectors in environment
* Mount openvswitch dir rather than socket
* Do not create NetworkVlanID is the value is not defined
* Remove the lacp bond mode constraints
* Fix update of pacemaker container images during major upgrade
* Add access to /var/run/openvswitch from collectd
* Add the service\_config\_settings from nova-compute base
* Changing the description of NeutronSriovNumVFs parameter
* Add support to ping IPv6 metadata IP
* Changing to L2GW Opendaylight v2 driver
* FFU: Fix gnocchi FFU tasks
* [CVE-2018-1000115] memcached: restrict to TCP & internal\_api network
* Support SshKnownHostsDeployment with config-download
* [FFU] Hook to allow user to pass a custom script for repo switching
* undercloud: enable only metadata cleaning
* undercloud: set cleaning and provisioning networks to 'ctlplane'
* Add check for old-style nic config files
* Consume ceph-container project's new style of tags
* Remove hiera interpolation from ceph-ansible parameters
* Fixes ODL container failing to start due to missing etc config
* FFU: Introduce Aodh fast-forward-upgrade tasks
* Update service readme files
* Add pre\_upgrade\_rolling\_tasks
* docker: add support for TripleO UI
* Remove unused minor update code
* FFU: Introduce fluentd fast-forward-upgrade tasks
* FFU: Introduce collectd fast-forward-upgrade tasks
* FFU: Fix Keystone FFU tasks
* Fix newton compat mode for deployed server
* FFU: Fix swift FFU tasks
* FFU: Upgrades: fix pacemaker checks
* FFU: Introduce post FFU steps and use them for qeens switch
* fix typo in scenario graph
* Updated from global requirements
* fix the scenario chart
* Fix gnocchi-upgrade Table <..> already exists errors
* FFU: Fix glance tasks
* FFU: Add mongodb fast forward upgrade tasks
* Configure qemu group setting as hugetlbfs for ovs-dpdk
* Don't stop openvswitch when deploying OpenShift
* Add novajoin service
* FFU: Fix Cinder services action order
* Added release notes of tempest container
* Configure firewall rules for Congress
* undercloud\_post: manage post mistral config
* mistral/undercloud: align configuration with instack-undercloud
* Add EnablePuppet (defaults to true)
* Assignning a value to NeutronServiceName propertiy in neutron-ovs-dpdk-agent.yaml
* Updated from global requirements
* neutron: rename db when upgrading a containerized undercloud
* Set firewall rules for the tacker service
* Configure firewall rules for Zaqar
* Added t-h-t for tempest container
* Replacing the count with loop.index for indexing
* A keystone only controller deployment
* Updated from global requirements
* Convert ServiceNetMap evals to hiera interpolation
* Fix typo in network templates
* neutron: Call destroy-patch-ports before starting ovs-agent
* Add support for Dell EMC XtremIO Cinder ISCSI Backend
* Remove registry special casing which no longer has any effect
* undercloud\_post: override stackrc
* DPDK deployment fails when there is no deprecated parameters
* Treat enable\_debug in Ansible as a bool
* docker-puppet.py: don't pull if image exists
* Fixes certificate generation error for Neutron agents
* Configure deploy logs for Ironic
* Minor update steps for ODL
* Enable nova-metadata health check
* kernel: make ExtraKernelModules and ExtraSysctlSettings role-specific
* undercloud: disable nova-compute disabling
* neutron/undercloud: align configuration with instack-undercloud
* Consume RoleData config from config download files
* Adds fast\_forward\_upgrade\_tasks for Heat services
* Enable libvirt health check
* Add fast\_forward\_upgrade\_tasks for ceilometer services
* ffu: Introduce Neutron fast-forward upgrade tasks
* FFU: add fast forward upgrade support for sensu client
* Add KernelIpForward configuration
* Remove default value for pacmaker passwords
* Fix default nic config file names
* Fix network-isolation.yaml relative paths for ci
* Assign Cinder's backend\_host when deploying for HA
* Make ping test support older overcloud release
* Add validation task in docker services [Octavia]
* Delete rendered nic configs during --clean
* Add step to run secret\_store\_sync before instance startup
* Add ovs\_extra netconfig for undercloud CI compat
* Increase size of Heat HeatMaxJsonBodySize
* Add UndercloudLocalMtu parameter
* Add IronicAutomatedClean parameter
* Update reno for stable/queens

8.0.0.0rc1
----------

* Import net-config-simple-bridge.yaml from tropleo-ci repo
* Add support of netapp configuration for glance in THT
* FFU: Add memcached fast forward upgrade tasks
* Enable containers by default
* FFU: Fix nova fast forward steps
* Add role\_specific tag to missing role-specific parameters
* Disable murano horizon plugin until dep is met
* Use ipaddress module
* Revert "Add firewall chain configuration"
* Fixes OpenDaylight healthcheck/GUI feature
* Make the minor update for docker idempotent
* Enable nova placement health check
* Enable Tacker health check
* Enable gnocchi-metricd health check
* Enable gnocchi-api health check
* Enable nova-migration-target health check
* Enable gnocchi-statsd health check
* Enable cinder-api health check
* Enable collectd health check
* Enable aodh-api health check
* Enable etcd health check
* Enable ceilometer-agent-central health check
* Enable memcached health check
* Enable iscsid health check
* Zaqar: Bind to IP, not proxied host
* Enable mistral-api health check
* Enable mistral-event-engine health check
* Set openshift\_(ip|hostname) to ctrlplane ip
* Adding a workaround for enabling steering in ConnectX-3 devices
* Introduce wait\_backoff, fail\_if\_empty wrappers
* ffu: Introduce Keystone fast-forward upgrade tasks
* Add support for libvirt VNC TLS
* Return old ranges to network\_data.yaml
* Fix invalid Ceph and BlockStorage role template
* Add a ComputeInstanceHA role
* FFU: Add update-from-ceph-newton.yaml
* FFU: repo section string manipulation error
* Add extra yaml validations in upgrade tasks
* Remove tags from upgrade tasks for ptp.yaml
* Allows Configuration of Additional of Lbaas and Neutron
* Do not remove packages during FFU
* Add cisco VTS ML2 template for a dockerized service and default environment settings
* Add OVN Hardware Offloading environment files
* ffu: Introduce Glance fast-forward upgrade tasks
* ffu: Introduce Cinder fast-forward upgrade tasks
* ffu: Introduce Nova fast-forward upgrade tasks
* ffu: Introduce Swift fast-forward upgrade tasks
* ffu: Introduce Pacemaker fast-forward upgrade tasks
* ffu: Introduce prep workarounds for FFU
* ffu: Add fast-forward-upgrade env
* Refactor get-occ-config.sh
* FFU: Introduce gnocchi fast-forward-upgrade tasks
* Adding support for ComputeLiquidio role in Network jinja file. Since Liquidio compute nodes contain Liquidio smart NIC, tenant network ip is assigned in the smart NIC instead of Compute node
* Allows for configuration of the Ceph cluster name
* Add enpoints for TripleO UI Config
* Add firewall chain configuration
* Do not use the 3rd argument of yaql groupBy
* Enable multipathd health check
* Improve the minor update of the docker service
* Remove unused DeploymentActions resource
* Add RHELRegistrationActions to rhel-registration template
* Removed ovs-dpdk workaround to fix the vhost socket permission
* Simplify FastForwardRepoArgs structure used in FFU repo selection
* Revert "Disable SNMP service in all CI jobs"
* Restrict SNMP to internal network
* docker: don't override horizon::vhost\_extra\_params
* Add TripleOFirewall service to undercloud roles
* undercloud: remove duplicate Neutron Server entry
* docker-registry: add missing firewall rules
* mistral-executor: mount /var/lib/mistral
* Update YAQL queries with groupBy
* Add reno for manila generic driver removal
* Fix a typo in docker\_puppet\_apply.sh
* Add non-production ceph defaults to low-memory-usage.yaml
* docker: configure group/user for deployment\_user
* Disable UseDNS in sshd config
* Mount netns as shared to persist namespaces
* Add pacemaker upgrade\_tasks for P..Q major upgrade
* Align zaqar max\_messages\_post\_size with undercloud
* Undercloud: support for external VIP for SSL
* Fix PublicVirtualFixedIPs in envs
* undercloud\_post: fix subnet name
* Unify the Cinder HA and non-HA docker configurations
* Undercloud: fix stackrc TLS URL detection
* Add tls roles for undercloud
* Disable SNMP service in all CI jobs
* Do not depends on the order of the hash vars in ffu repo switching
* Added and modified the services for ComputeLiquidio role
* Add docker service for neutron-ovs-dpdk-agent service
* Fixes missing SSL configuration for Neutron DHCP agent
* Adding new config parameters for Cisco UCSM ML2 driver
* ffu: Allow FASTFORWARDUPGRADE as a StackUpdateType
* Allow passing custom openshift-ansible playbook
* Revert "Enable \*\_use\_fqdn in ceph-ansible when EnableInternalTLS"
* Render NIC config templates with jinja2
* Add support for OVN hw offloading in containers
* Ensure node is rebooted before enabling DPDK
* Enable Barbican health checks
* Add name to debug tasks
* Ignore same file errors for templates processor
* Cleanup /etc/sysconfig/iptables on stack update
* Remove the heat upgrade steps for Q upgrade workflow
* Fix docker neutron logging
* ffu: tripleo-packages repo management
* ffu: Add fast-forward upgrade outputs to RoleConfig
* Always evaluate step first in conditional
* Fix custom output dir for templates processor
* [Upgrade] Reuse OVS workaround in docker neutron ovs agent
* Adding docker service for the L2GW
* Adding docker service for BGPVPN Service Plugin
* Fix docker nova logging
* Expose params to enable panko expirer cron
* Mount central agent log dir to access outside the container
* Add S3 storage driver as an option and its config
* Adding /usr/share/neutron/server config dir
* Do not generate apache/haproxy certs for invalid networks
* OpenShift: Properly disable bare metal OVS
* Set rgw\_keystone\_revocation\_interval to 0 for ceph-ansible
* Remove tags from upgrade tasks for aide.yml
* Add PTP composable service
* Add new encryption middleware to swift proxy
* Add Mistral to the provided controller roles
* Add --live-restore to the docker\_options in puppet/services/docker.yaml
* Move options out of the OpenShiftMaster template
* OpenShift: Accept generic global parameters
* Fix missing Swift d1 directory
* logging: use service\_config\_settings for fluentd
* Fixes SSL/TLS with OpenDaylight docker service
* RHSM: update parameters in doc
* Pass storage nfs VIP to ceph-ansible
* Add support for ceph-nfs manila backend
* horizon: trigger \_member\_ role creation in Keystone
* Remove heat-api-cloudwatch service support
* Include check of deployed server configs in multinode
* Restore disable templates for telemetry for Queens
* Fix Redis TLS setup and its HA deployment
* Fix the paths for the enable-internal-tls.yaml file in the ssl/ dir
* Add a StorageNFS network for use by Manila/Ganesha
* Revert "Introduce wait\_backoff, fail\_if\_empty wrappers"
* Remove redundant action key on NetworkDeployment
* Add bond-network-templates for OVB public bond CI
* Add subnet property to ctlplane network for server resources
* Add incoming storage driver param
* Disable ceph-mgr dashboard module
* Enable Neutron server health check
* Fix OpenDaylightConnectionProtocol deprecated
* Zuul: Remove project name
* Change type of CephAnsiblePlaybook from string to comma\_delimited\_list
* Expose param to configure EventTTL
* inspector: fix perms on /var/lib/ironic
* Add CephClient and CephExternal to the Telemetry role
* Bind mount the database client settings in cinder\_api\_db\_sync
* Fix hardcoded dependency for ExtraConfigPost
* Add release notes for IPSec
* Adding support for odl hw offloading in containers
* Make sure deploy\_steps\_max is defined for update playbook
* Add support for Dell EMC VNX Cinder Backend
* Enable configuring tripleo-ipsec variables through IpsecVars
* Upgrade ODL
* Added realtime NFV roles for OVS-DPDK and SR-IOV
* Tie keystone admin API port to what we configure in t-h-t
* Disable memcached's cachedump
* Configure qemu group setting as hugetlbfs for ovs-dpdk
* Run cinder-backup in a privileged container
* Sync services on roles/Telemetry.yaml
* Add {{step}} var to Task name
* Add post\_upgrade\_tasks with post\_upgrade\_steps\_playbook output
* Switch to ceph-ansible rolling\_update on upgrade converge
* Add OVNController service to Networker role
* ovn: Provide the option to configure OVNCMSOptions ('ovn-cms-options') as a role parameter
* Introduce wait\_backoff, fail\_if\_empty wrappers
* Pass blacklisted\_{ip\_addresses,hostnames} to major\_upgrade\_steps
* Update to openshift 3.7
* Assign labels to nodes
* Default service plugin for OpenDaylight scenario are not present
* Add tag "always" to the inclusion of global\_vars.yaml

8.0.0.0b3
---------

* Environment to disable Neutron networks
* Add custom role for realtime compute
* Add IPSEC service to ovb-ha environment
* Update pingtest description
* Ensure packages for octavia only when EnablePackageInstall is True
* Add endpoint for ODL
* Updated from global requirements
* Configure neutron notifier to use internal endpoint type for nova
* Make heat parameter plugin\_dirs configurable
* Add release notes for the migration of Ceph env files to containers
* Add rgw\_keystone\_implicit\_tenants to ceph-ansible/ceph-base.yaml
* Add barbican keystone notification topics
* OpenShift: Don't pre-install Docker
* Add yaml validations for FFU
* Allowing Non-IP Traffic in L2 and L3 domains
* Enables configuring Octavia flavor by default
* Don't run check-tripleo OVB jobs frm RH1 anymore
* Adds SSL/TLS everywhere for OpenDaylight
* Enable Redis health check
* Migrates ceph-{radosgw,mds,rbdmirror} to ceph-ansible
* Containerize keepalived
* Enable panko API health check
* Do not format output for kubespray or openshift deployments
* Fix server post deploy step with config-download
* Align Manila Share docker templates
* Allow defaults for Image/Flavor/RoleParameters in roles\_data.yaml
* Fix path to ceph-mgr in storage-environment
* Move step 1 preparation to deploy-steps-tasks.yaml
* Point heat.conf[clients\_keystone/auth\_uri] to the public endpoint
* Split IPSEC deployment in two
* Updated from global requirements
* Set permissions for openstack keyring on CephPools
* Introduce tests for yaql structures
* Include common\_deploy\_steps\_tasks.yaml
* Correct erroneous upgrade tasks
* Adding support for ovs hw offloading in containers
* modify assignment spelling
* Enable \*\_use\_fqdn in ceph-ansible when EnableInternalTLS
* Replace hardcoded profile name with \_TUNED\_PROFILE\_NAME\_
* Revert "Revert "Re-enable voting on scenario002-container""
* Run Octavia configuration on the overcloud
* Updated from global requirements
* Default empty map for docker\_config steps
* Deprecate CeilometerWorkers
* Updated from global requirements
* Updated from global requirements
* Configure ODL Logging mechanism
* Add become: true for host\_prep\_tasks
* Also pass blacklisted hostnames
* Workflow execution blacklist support
* Implements AIDE Intrusion Detection System
* Update default value for derive params workflow inputs
* Add support for outputting role-specific parameters
* Revert "Re-enable voting on scenario002-container"
* Cinder containers: volume and env customizations
* Latest Nexus Configuration Variables Updates
* Add support for OVN Metadata Agent
* Containerize multinode-3nodes
* Drop redundant delay param
* zuul: run scenarios when touching pacemaker services
* Set cloud\_name hiera parameter for composable networks
* Reinstate common overcloud manifest for all roles
* Configure auth\_uri for swift proxy explicitly without suffix
* Remove unused env var during mysql bootstrap
* Enhance completion message when upgrading non controller nodes
* Create Swift directory d1 if required
* OvsDpdkMemoryChannels parameter default value
* Fix the dellemc vmax to use the correct hiera name
* ci: update multinode-3nodes-registry
* Start using nova\_metadata\_host
* Fixes generating public certificates
* update example repos to more closely match OSP 13 requirements
* Re-enable voting on scenario002-container
* kernel: allow to override modules & sysctl settings
* Fix log file nova-conductor service
* Use docker\_config\_scripts for puppet apply
* Correct panko auth region
* Remove Octavia LBaaS service plugin from neutron config
* Fix path for iscsi config file
* Add DockerPuppetDebug to environments/config-debug.yaml
* Update CI coverage in README
* Convert ipv4 nic-config templates
* Use relative path in ipv6 nic configs
* Start step at 0 for update\_ + upgrade\_steps\_playbook
* Update Ceph container CPU/memory limits in Ceph scenarios
* Convert tags to when statements for Q major upgrade workflow
* Revert "zuul: disable voting on scenario 001, 002 and 003"
* Removal of Contrail templates
* Enable DockerPuppetDebug
* Add connection timeout options to ssh
* ci/telemetry: Decrease test\_telemetry\_integration time
* Allow for optinal volumes and env variables
* OpenShift: allow scheduling on all nodes
* IPSEC: stop relying on cloning the repository from t-h-t
* Add PublicVirtualFixedIPs to ci network-environment.yaml
* Add composable network VIPs for puppet configuration
* puppet apply: add --summarize
* Add missing CephClient service to ControllerNoCeph role
* Add parameters to configure options in keystone's security\_compliance group
* Set tftp to only listen to the provisioning network
* Define 'NeutronPluginExtensions' in OVN environment files with dns extension
* Fix puppet config volume for iscsid in containers
* Clean trailing whitespace in HciCeph roles
* zuul: cleanup old unused jobs
* CI: move tacker / congress from scenario001 to 007
* heat-base: remove default policy rules
* scenario001: disable mongodb (not used)
* Remove pingtest env for scenario007
* multinode-contaier: reduce the number of services
* Introduce OS::TripleO::Services::Rhsm
* Remove \_member\_ role from the keystone accepted roles
* Telemetry Needs Redis
* Add MinPoll and MaxPoll options to NTP module
* Add docker-registry service
* Adds environment file for ODL OVS Hardware Offload
* fix generate\_environments to run in python3
* Fixing bug in "test\_environment\_generator.py"
* Add new roles for Ceph containerization
* zuul: disable voting on scenario 001, 002 and 003
* Allow to increase docker daemon verbosity
* Enable barbican keystone listener
* Add support for DVR in OVN based environments
* swift\_rsync: don't bind mount /run
* Parameterize ceph-ansible environment variables
* nova: Add VerifyGlanceSignatures compute param
* Update templates alias to queens
* Create flavors for undercloud
* Manila network plugin address family support
* Wait for rabbitmq\_ready tag
* Enable collectd to send metrics to Gnocchi
* Check for yum lock befor all yum\* operations
* fix the description of CongressDebug
* Add proper debug switch on init\_bundles
* Add ovs hardware Offload support to ovs mechansim driver
* Improve comment re nova live\_migration\_tunnelled setting
* Enable queueing to use barbican workers for key generation
* Fix permissions on .ssh directory
* Add readme for experimental extraconfig/services
* Deploy OpenShift using OOO on the overcloud
* Add ceph-rbdmirror ansible container service
* Add "clean" tox target
* Revert "Add upgrade task to run gnocchi upgrade"
* Expose logs from nova\_libvirt container
* Improve debugging possibilities for docker-puppet.py time handling
* Passes NodeDataLookup to ceph-ansible workflow
* Cleanup dead code
* Search for containers within stopped containers
* Autogenerate the barbican simple crypto KEK
* Disable SSH key access to amphora
* Add auth\_type to service\_auth configuration
* Add missing keystone\_domain\_config
* Add Novacontrol role
* Implements: Heat template for integrating Cavium SmartNIC LiquidIO
* Set barbican to be configured in step 3
* Add parameters for Barbican worker image
* Add glance config for barbican
* Add Instance HA support
* Add DockerDebug
* undercloud: set default\_resource\_class to 'baremetal'
* Generate a default keypair for nova
* Add a new UndercloudHomeDir parameter
* Add NovaSchedulerMaxAttempts parameter
* Enable docker-puppet.py for a single config\_volume
* Add support for providing Octavia cert data
* Add Octavia certificate parameters
* Add support for Octavia service-to-service credentials
* Use StrictHostKeyChecking=no in enable-ssh-admin.sh
* Add modulepath option when applying puppet inside docker
* Add a tag to all the role specific parameters
* deploy-steps.j2: use ansible to bootstrap environment
* Add parameters for Barbican keystone listener
* Add DockerRegistryMirror parameter
* SR-IOV agent: allow to configure agent extensions
* Add -c for clean\_templates
* Make Kubespray install work without --private-key too
* Add multiple secret store backends for barbican
* Add IPSEC composable service
* Set simple crypto plugin as global default for Barbican
* Add deploy\_steps\_tasks interface
* Add noop's for docker pacemaker for rabbitmq
* Add name property where missing
* CI: Test multi-rbd backend for cinder in scenario001

8.0.0.0b2
---------

* Make CephPools override properties of other pools
* Create /var/log/containers on Swift storage-only nodes
* scenario002: enable panko and ceilo-compute-agent
* Remove -U from pip install
* undercloud: enable ansible deploy method by default
* Cleanup CI files for scenario007 on baremetal
* scenario002: configure SimpleCryptoKek
* Enable Barbican simple\_crypto backend
* Move scenario001 and scenario003 back to the gate
* zuul: remove file rule for ovb-ha
* OpenDaylight BGPVPN driver has been deprecated
* Do not use lsns to kill non-containerized epmd on the host
* Move Kubespray job from experimental to check
* Avoid tox\_install.sh for constraints support
* Exclude 'vnet' interfaces from being candidates for running a dhcp client
* Reintroduce TripleoPackages in the default Controller service
* gnocchi: mount the correct volume for /etc/ceph
* Fix optional services-docker environment files
* Allow to override manage polling param
* zuul: run container jobs when touching puppet services
* Add NovaMigrationTarget service to SR-IOV Compute role
* Redis replication does not work with TLS
* Redis replication does not work with TLS
* Update capabilities-map.yaml to include latest storage environments
* Don't fail Kubespray scenario if swap is enabled
* Implements management of \`/etc/login.defs\`
* Add ComputeAlt role and environment
* Fix neutron agent start order
* ci: add ovb-ha.yaml
* Swap the order of stdout and stderr in debug output
* Add validation task in docker services [Horizon]
* Pass private key file from parent Ansible to Kubespray
* Stop creating kubectl binary on undercloud
* Download Kubespray instead of git clone
* Remove hiera hook transition from the upgradeinitcommand
* Memory channels parameter default value
* Ensure rsyncd PID file is removed during overcloud updates
* Select first node as bootstrap node not using name
* Don't assume single sub\_node in nic config
* Remove Cinder UID from CephX keyrings' ACLs
* Enable ironic staging drivers in the undercloud
* undercloud: support the standard set of hardware types and interface
* Remove unused pre\_network configuration
* Remove httpd log dir for glance-api
* Remove hardcoded skydive container image
* Remove hardcoded docker image names
* Fix applying pci whitelist in nova compute
* Fix ovs/netns mounts for neutron agents
* Mount /var/cache/swift across containers
* Ensure os-net-config conditional for upgrade doesn’t fail
* Fix wrong logic for triggering os-net-config special handling
* Set the default CephAnsiblePlaybook to use into the env files
* Add EndpointMapOverride parameter
* Add parameter ExtraHostFileEntries
* Allow empty list of enabled\_roles
* Trigger Kubernetes/OpenShift jobs on changing themselves
* docker/internal TLS: spawn extra container for ec2api TLS proxy
* Change template names to queens
* Add DeployIdentifier to Nova discover hosts container
* ci: remove Heat services from some scenarios
* Fix glance config generation when using NFS
* Add noop-deploy-steps.yaml environment
* Add external\_post\_deploy\_tasks interface
* CI: remove useless templates
* Make CephPools type json instead of list
* Make scenario007-container voting
* RHEL/Update: replace wc by yum to check updates
* Stop the object-expirer service before removing swift-proxy
* Remove scenario003 from the gate
* Host access fixes for Kubespray playbook run
* Fix all outputs|failed and outputs is defined
* Add upgrade task to run gnocchi upgrade
* Deploy Ceph Luminous and add support for CephMgr service
* Add swift\_config puppet tag to the dockerized proxy service
* Correct ignore\_error -> ignore\_errors
* Add option for barbican API container to log to stdout/stderr
* Format SwiftRawDisks before attempting to mount
* Add debug to neutron agents
* Disabled fwaas plugin for horizon
* Dynamically generate VIP hiera entries
* Re-enable libvirt TLS with SCRAM SHA-1 auth
* logging: merge fluentd-client and fluentd-base
* Add validation task in docker services [Aodh]
* Add option for HAProxy (non-HA) container to log to stdout/stderr
* Add rsyslog-sidecar resource and configuration
* Update Iscsid puppet\_config to reset host's IQN
* Debug configuration for neutron metadata agent
* Add ignore\_errors for memcached readme.txt
* Updated from global requirements
* Added NovaMigrationTarget service to OVS-DPDK role
* Dynamically generate FQDN hiera entries
* Migrate THT to zuul v3 jobs
* Drop step\_config as top level docker requirement
* Revert "Revert "Tag workflows created by the templates""
* Set file mode permission for Ceph keyrings in containers
* Remove too opinionated parameters from kubernetes.yaml environment
* Run rabbitmq\_policy,rabbitmq\_user with pacemaker
* Enable httpd to request certificates for the "external" network
* Using stevedore alias for BGPVPN/L2GW Service Plugin
* Remove TLS-specific docker environment
* Add yml extension to kubespray inventory
* Polish swift containers logging configuration
* Write readme.txt into old log directories
* OVN: Provide the option to define NeutronBridgeMappings as a role parameter
* Set restrictive file permissions on Ceph keyrings for non-containerized deployment
* Undercloud: Add router for IPv6 ctlplane subnet
* Set host name explicitly for telemetry
* Enable ntp iburst
* Add validation task in docker services [Mixed-2]
* Use 'NeutronTenantNetwork' instead of 'NeutronApiNetwork' for ovn-encap-ip
* Enable TLS for ec2api metadata service
* Pass the CloudDomain parameter down to hiera on all nodes
* Add undercloud cinder roles and environment files
* Set notification\_format to 'unversioned'
* Move parameter to parameter\_defaults section
* Add missing host\_prep\_tasks for memcached
* Add option for panko container to log to stdout/stderr
* Add option for heat containers to log to stdout/stderr
* Add option for nova-libvirt container to log to stdout/stderr
* Deprecate hyperconverged-ceph.yaml
* Fail on upgrade if legacy ceph::profile::params::osds hiera is found
* libvirt: Remove unnecessary binding of /var/log/containers/nova
* Add option for nova compute container to log to stdout/stderr
* Add Docker service to the undercloud roles
* Update default cell\_v2 cell when it already exists
* Refactor cellv2 host discovery logic to avoid races
* Change default ml2 firewall driver back to iptables\_hybrid
* Add missing host\_prep\_tasks for log dirs creation
* Make sure /var/lib/mysql rights are setup correctly
* Add tags to plays
* Rename Undercloud->External deployment
* Add CephAnsiblePlaybookVerbosity parameter to overcloud-ceph-ansible
* Clone kubespray to location accessible by the user
* Fix rights to local\_settings.d for dockerized Horizon
* Fixing typos in the Bagpipe driver environment file
* Add support for multiple Cinder RBD backends
* Start using nic-configs from THT repo instead of tripleo-ci
* Enable in-cluster loadbalancing of kubernetes API
* Remove deprecated Telemetry services from roles data
* Set become:false for undercloud plays
* Remove certificate before updating it
* Add option for Neutron containers to log to stdout/stderr
* Update ansible before the ansible upgrade tasks
* Disable live migration over TLS
* Set bind mount propegatation to shared for /var/lib/nova
* Allow containerized undercloud deploy with SELinux
* Fix wrong permission on database during mysql\_init tasks
* Add condition to os-net-config run during upgrade
* Add constraints to service Debug flags
* Tell HAProxy container template that the public cert was autogenerated
* Re-enable containerized fluentd
* Add validation task in docker services [Mistral]
* Add validation task in docker services [Mixed-3]
* Add validation task in docker services [Swift]
* Add validation task in docker services [Ovn]
* Add validation task in docker services [Manila]
* Add validation task in docker services [Sahara]
* Add validation task in docker services [Ironic]
* Add validation task in docker services [Nova]
* Add validation task in docker services [Mixed-1]
* Add validation task in docker services [Gnocchi]
* Add validation task in docker services [Heat]
* Add validation task in docker services [Neutron]
* Add validation task in docker services [Ceilometer]
* Make KeystoneURL versionless
* Add trunk service plugin to OVN environment files
* Barbican: Add ability to specify KEK for simple crypto plugin
* Add containerized barbican environment
* Containerize cinder services under pacemaker in CI
* Fix cinder-{backup,volume} container with pacemaker
* Migrates storage-environment.yaml to ceph-ansible
* Speed up deployment by reusing facts
* Allow installing multiple-node Kubernetes
* Only mount Haproxy TLS if contents are set
* HAProxy: Mount the CA certificate if TLS everywhere is enabled
* Set ipc=host for services attaching encrypted volumes
* cinder: switch CinderCronDbPurgeUser to 'cinder'
* Fix nova-cpu/collectd hieradata
* Only mount selinux sysfs in nova\_libvirt container
* mysql: Only set certificate specs if TLS everywhere is enabled
* Keystone: Enable notification topics to be configured
* Set keystone notification topics if ceilometer is enabled
* Increase the Mistral RPC timeout
* Set notification\_bind on zaqar websocket
* Increase the size of the Mistral output limit
* Fix iptables rules override bug in clustercheck docker service
* Expose role tags via heat RoleTags output
* Add NetIpMap to hieradata for \*ExtraConfig overrides
* Enable keystone db sync to log to stdout
* Force memcached container log to file
* Add docker templates to configure Ironic inspector
* docker: Run mistral-db-manage populate at step 5
* RHSM: when using proxy, test its connectivity first
* Upgrade rhel\_reg\_sat\_repo to 6.2
* RHSM: do not use retry to deploy katello-agent
* Allow the configuration of image\_member\_quota from THT
* ovn: Remove setting of DockerNeutronApiImage param
* Define PGs for cephfs pools
* Configure docker0 bridge address
* Make memcached logs verbosity configurable
* persist memcached logs in /var/log/containers/memcached/memcached.log
* Set verbosity by default for memcached
* Remove log-dir option from neutron-dhcp execution
* Add option for nova containers to log to stdout/stderr
* glance logging: Fix description and use yaml anchor
* Move keystone init log container to files logging template
* Add --detailed-exitcodes when running puppet via ansible
* Env files for ODL deployments
* Enable TLS for ec2api service
* Fix networking settings for ObjectStorage role
* Set metric procssing delay for metricd
* update nova keymgr parameter for Queens
* Enable horizon plugins by default in docker
* Added a new role definition for SR-IOV Compute role
* Add option for Glance API containers to log to stdout/stderr
* Add option for keystone containers to log to stdout/stderr
* Update CephPools format in the docker templates to fit ceph-ansible
* Run containerized mistral-api eventlet
* nova-placement: switch auth\_uri to keystone versionless endpoint
* Start using ipv6 nic-configs from THT repo instead of tripleo-ci
* Temporarily disable fluentd from scenario001-multinode-containers
* update cinder kmgr parameter for Queens
* Don't open unused nova ports in iptables
* Transform mongodb::server::bind\_ip in an array
* Switch cinder\_catalog\_info from v2 to v3
* Disable MongoDB in scenario002
* Enable neutron-lbaasv2 UI in Horizon
* Update scenarios doc for Ceph RGW
* Do not set cluster in maintenance mode during split stack upgrade
* Don't alter default docker configuration during kubernetes install
* Generate Kubespray artifacts on undercloud
* Kubespray installation via config download mechanism
* Add validation task in docker services [cinder]
* Create short lived ssh key for enable-ssh-admin.sh

8.0.0.0b1
---------

* Support for Satellite Capsule in rhel-registration
* Switch scenario004-containers to use ceph-ansible
* Adding multinode-3nodes-registry.yaml
* Do not rely on openstack-puppet-modules
* Default pre\_deployments/post\_deployments to empty lists
* Disable xinetd class when creating swift-storage puppet configuration
* Disable SwiftDispersion when using docker
* Removes manila-generic-config from TripleO
* Fixes InternalApi Heat network resource
* Remove deprecation handling from custom roles
* Add advanced features to ironic-inspector templates
* Fix ConfigDebug for puppet host runs
* Add all services to container scenarios
* Switch RabbitFDLimit to a Puppet integer
* Add external deployment tasks executed on undercloud
* Add validation to logging templates
* Config download support for standalone deployments
* Revert "Fixes heat resource name for Internal API Network"
* Sync deployed-server-roles-data and roles-data
* Remove monitor\_interface from ceph-ansible parameters
* Fix /etc/openstack-dashboard/ permissions for access to \*policy.json
* Enable Cinder as a backend for Glance
* Hardcode tag-stable-3.0-jewel-centos-7 in scenario001-containers
* ci-ovn: Disable Swift services in scenario 007 container job
* Remove Heat Cloudwatch API
* Addition of Nuage bridge MTU parameter
* Make Horizon parameters: vhost\_extra\_params and customization\_module configurable
* Add networking-sfc support
* Remove rsync from xinetd when upgrading to containerized deployment
* Correct template names from ocata to pike
* Remove Heat Cloudwatch API during upgrade and disable by default
* Adding Cisco VTS ML2 mechanism driver service template
* Take all mounted config\_volumes into account
* Explicitly list Apache License as 2.0
* Allow configuration Zaqar with Redis
* our undercloud default nic should be eth1
* Fix standalone ControllerOpenstack vars
* RabbitMQ should use net\_ticktime
* rabbitmq: set cluster\_partition\_handling to 'ignore'
* Temporarily fallback to BM fluentd
* Adds pacemaker update\_tasks for Pike minor update workflow
* Fixes dynamic networks falling back to ctlplane
* Remove package if service stopped and disabled
* List all unhealthy containers
* Reintroduce containerized Cinder
* Use sub\_nodes\_private instead of node\_private
* Fixes missing type for heat param TenantNetName
* Pin scenario001-multinode-containers to earlier ceph docker container
* Create mysql user for non-ha deployments
* Add a Skydive composable service
* Special treatment for os-net-config upgrade
* Fix some missed hard-coded network references
* mysql: expose IPv6 configuration to mysql puppet modules
* Remove External network from Networker role NIC configs
* Also match config volumes for /var/lib/config-data/puppet-generated/
* Fix cold/live migration network config
* added level of indirection causes incorrect hiera config
* Add a name to the post deployment
* Explicitly set healthcheck command
* ovn: Provide the option to configure the integration bridge
* Add Mistral event engine
* Fixes heat resource name for Internal API Network
* Fix logging for docker-puppet
* Allow Sensu to connect to RabbitMQ cluster
* Ensure Debug is a boolean
* Use "become: true" in deploy steps tasks
* Make CephConfigOverrides append to ceph.conf[global]
* Fix stackrc for containerized undercloud
* Fix permissions for dockerized horizon
* Stop mapping docker to OS::Heat::None in scenarios
* docker: add logging(source & groups)
* Add all services to scenario004-containers
* Start sequence at 1 for deploy steps playbook
* Disable role host\_prep\_tasks on controlplane upgrade
* Make containerized galera use mysql\_network everywhere
* Add Neutron DHCP Agent Interface Driver configuration option
* Updated from global requirements
* Add IronicPxe to the default controller
* Bump fs.inotify.max\_user\_instances for scale
* Fixes missing keystone authtoken pw for Tacker
* Sync undercloud stackrc w/ instack
* Remove pacemaker remote from the Networker role
* Remove healthcheck override in docker-puppet
* Default Ceph pg\_num and pgp\_num to 128
* Fix upgrades that use Management network
* Fix issue where 2 Redis VIPs are assigned, but only one used
* Fixed resource registry path in neutron-lbaasv2.yaml
* Run roles data validation in CI
* Containerized Fluentd client
* Move neutron api services to ControllerOpenstack
* Use conditional to set heat-engine workers
* Update panko port in env ssl yaml files to correct one
* Set Ceph pgp\_num after pg\_num
* Use haproxy-systemd-wrapper as pid1 in containerized Haproxy
* Disable all uses of wsrep-provider in mysql\_bootstrap container
* Remove extra noop.yaml ports from network-isolation files
* Make our json output prettier
* Remove deploy\_steps\_tasks.yaml from upgrade\_steps\_playbook
* Create network-isolation-no-tunneling.yaml using jinja2
* Rename service\_workflow\_tasks into workflow\_tasks
* Revert "Tag workflows created by the templates"
* Adds post\_upgrade\_tasks for any service post-upgrade ansible tasks
* Deploy Mistral with Keystone v3 options (authtoken)
* Add RoleConfig output to major\_upgrade\_steps.j2.yaml
* Tag workflows created by the templates
* One time delete pacemaker resources during upgrade to containers
* Use the make\_url function in the endpoint map
* Providing required priviledges to the mounted NFS volume
* Case insentitive MAC address matching in OsNetConfigMappings
* Enable redis TLS proxy in HA deployments
* Change to boolean for boolean type params
* Move the clustercheck service to the DB role
* Retry if the pacemaker\_resource commands failed
* Add panko config to ceilometer notification agent container
* Remove VXLAN type driver from OVN environment files
* Add a docker pull retry to docker-puppet.py
* Add pep8 check that generated environments are up to date
* Update custom-domain.yaml environment
* teach yaml-validate.py how to be --quiet
* Add CephConfigOverrides to allow arbitrary configs in ceph.conf
* Support for Ocata-Pike live-migration over ssh
* Add defaults for ceilometer-agent-compute upgrade tasks
* Add Neutron SR-IOV agent container
* Fix env-generator doc formatting
* Fixes OpenDaylight updating port status
* Disables QoS with OpenDaylight deployments
* Enable Ceilometer agent logging for containers
* Change all references of nsx\_v3 to nsx
* Add yaml validation for upgrade\_tasks section
* Use containerized mongodb in scenario002-multinode-containers
* OpenStack containerized qdrouterd service
* Add CephExternal role for ceph-ansible
* Escape ceph capabilities for manila client
* Add tags in upgrade\_tasks for mongodb services
* Add tags to baremetal cron removal tasks
* Mount folders and log file
* Maintain ceph-osd package only on nodes hosting CephOSD service
* Containerized mongodb, disable by default, fix upgrade
* Enable selinux in containers
* Run gnocchi statsd and metrcd at step 5
* docker-puppet.py duplicated import
* Mount public certificate in haproxy init container
* Use DeployedSSLCertificatePath for public TLS via certmonger
* Add param to configure snat mechanism
* Set mode for ansible written files
* Environment to deploy BGPVPN with Bagpipe in a unique file
* Fix NeutronServicePlugins parameter to match ODL L3 feature
* Mount vhost\_sockets directory for vhost-user socket creation
* Remove tacker from containers scenario001
* Allow upgrade tasks to run when looping through steps
* Make nova patching parameters configurable in Nuage
* Switch manila-share to pacemaker version in scenario004/containers
* Fix hardcoded references to deprecated \*ExtraConfig parameters
* Add Bagpipe driver composable service
* Remove ipv6 specific network templates
* Add storage backends env files for containerized deployment
* Fix containerized zaqar-api db\_sync
* Unset default value for the DockerCephDaemonImage
* TLS proxy for redis
* Remove bgp-vpn from scenario004-multinode-containers
* Add DhcpAgentNotification param to neutron base
* Add --wsrep-provider=none to the mysql\_bootstrap container
* Add a lightweight UC template/role data for deployed-servers
* Remove hard-coded image reference
* Provide DPDK nic configs and add multiqueue config
* Use list\_concat in place of yaql
* Add support for Dell EMC Isilon Manila  backend
* Add support for Dell EMC VMAX Manila Backend
* Add support for Dell EMC VMAX ISCSI Backend
* Use Python to compute release notes version
* Convert enable-internal-tls.yaml to be generated
* Update generated ssl environments
* Add missing Docker service
* Add support for deploying RGW with ceph-ansible
* Rabbitmq: Enable Erlang distribution TLS
* Remove puppet run and workarounds from tripleo\_upgrade\_node.sh
* Use integers for rabbitmq ports
* container ovs-agent, ensure br-ex exists
* Telemetry specific config for scenario001
* Change ManageEventPipeline to true
* Use switch to containers instead of take over playbook for ceph-ansible
* Separate config\_volume for ringbuilder
* Remove src\_ceph from manila kolla\_config
* Add clustercheck to service list for scenarios
* Configure Zaqar trust notifier
* Support HA for OVN DBs containers using pacemaker bundle
* Make archive policy configurable
* fluentd: log configuration was not generated correctly
* Add DockerPuppetProcessCount defaults to 3
* Set docker-puppet --health-cmd = /bin/true
* Manually set healthchecks for \_cron services
* Add verbose output to containerized cell\_v2 host discovery
* Persist containerized services httpd logs
* Enable ceilometer compute agent
* Expose account/container/object worker count
* Add Swift dispersion profile
* Update reno for stable/pike
* manila: set "neutron\_admin\_auth\_url" correctly

7.0.0.0rc1
----------

* manila: set "host" to "hostgroup"
* Handle failure of carrier check in configure\_safe\_defaults()
* Containarise Barbican API
* Do not install additional CentOS packages via ceph-ansible
* Add panko publisher in the event pipeline
* Support deploying OVN as container services
* Move deprecated SchedulerHints logic to overcloud.j2.yaml
* Specify the start count to 0 for the update step loop
* Configure listen\_address for libvirtd when TLS is enabled
* Docker: Enable TLS in the internal network for libvirt
* Add support for Dell EMC VNX Manila Backend
* Add support for Dell EMC Unity Manila Backend
* Zaqar: Match service name with service-net-map
* Fix configuration files path for logrotate container
* Render port templates via j2
* Add nova metadata to TLS everywhere/docker services list
* TLS for containerized horizon
* Add logrotate with crond service
* Mount ceph config on gnocchi statsd
* Prepare reno for TripleO Pike RC1
* More fixes for the Ceph docker images url parsing
* ci: don't deploy swift on basic multinode job
* Let mds create manila key and fs
* Tag the ha containers with 'pcmklatest' at deploy time
* Enable TLS for containerized RabbitMQ
* TLS everywhere/haproxy: Remove empty postsave command
* Convert scenario001-multinode-containers job to ceph-ansible
* Enable listening on TLS for the internal network for horizon
* Restore and split nova metadata docker service out of nova-api
* Workaround for RHEL registration as "localhost"
* Enable TLS for nova-metadata
* Add certmonger user profile to all overcloud roles
* Add Ceilometer API and Collector service to roles\_data
* Refactor setup\_docker\_host.sh as host\_prep\_tasks
* Provide sample environment for composable roles
* NetworkDeploymentActions shall be made role specific
* Swith to the appropriate ceph-ansible playbook on upgrade
* Add support for Dell EMC Unity Cinder backend
* TLS everywhere/docker: add nova services to environment
* Remove iscsid from TLS everywhere docker environment
* Make swift's endpoint type configurable for gnocchi storage
* scenario002/multinode: do not run containerized Zaqar
* scenario002/container: run Barbican non-containerized
* Containerize Manila Share for HA
* Stricter heat template version validation
* README: Fix CI coverage layout
* Add params needed for the ceph-ansible switch to containers playbook
* Add support for installing Ceph MDS via ceph-ansible
* Render IP map and host maps according to network\_data.yaml
* Drop extraconfig for nova-nuage
* Set default OSD pool size to 1 in scenario 001/004 containers
* docker: Stop all active ceilometer services during compute upgrade
* Stop hardcoding host's config volume path
* Add NeutronOverlayIPVersion parameter to neutron-plugins-ml2 service
* Also write an upgrade\_tasks\_playbook
* Convert network templates to be rendered via j2
* Delete docker-centos-tripleoupstream.yaml
* Set file mode permission of Ceph keyrings
* Enable TLS for containerized MySQL
* Extend VNC port range
* Enable TLS for containerized haproxy
* Don't unregister on system/resource delete
* Fix Heat condition for RHEL registration yum update
* Fix metadata\_settings in containerized mongodb
* Bind mount tripleo.cnf in transient bootstrap containers
* Containerize virtlogd
* Consolidate deployment in major-upgrade-composable-steps
* change sriovnicswitch to be first with openvswitch
* Fix parsing of DockerCephDaemonImage parameter
* Pass monitor\_address\_block to ceph-ansible for mon\_host
* Add environment to disable deploy steps
* Add support for update\_tasks
* Add RoleConfig output
* Default docker\_puppet\_debug to false
* Move deploy-steps-playbook to deploy-steps-tasks
* Add ServiceData to hidden params
* Correct gnocchi-upgrade command quotes
* Consolidate puppet/docker deployments with one deploy steps workflow
* Convert cephstorage-role.yaml to role.role.j2.yaml
* Convert blockstorage-role.yaml to role.role.j2.yaml
* Convert objectstorage-role.yaml to role.role.j2.yaml
* Convert compute-role.yaml to role.role.j2.yaml
* Convert controller-role.yaml to role.role.j2.yaml
* Internal TLS support for mongodb container
* TLS everywhere: Configure CA for mongodb
* Enable TLS for nova api and placement containers
* Make containerized nova-api run with httpd
* Enable TLS configuration for containerized Galera
* Move HAProxy's public TLS logic from controller to service template
* Accept multiple registries in DockerInsecureRegistryAddress
* Remove duplicate Iscsid service in resource registry
* Mount NFS volume to docker container
* Enable TLS configuration for containerized HAProxy
* Set virsh secret with an init step when using Ceph
* Enable TLS configuration for containerized RabbitMQ
* Make network-isolation-v6 environment rendered for all roles
* Make HA container bundle work on remote nodes
* Fix cidr get\_attr in custom networks
* Make cinder-manage db sync run on only one controller during upgrade
* Docker/TLS everywhere: Add telemetry and neutron services to environment
* Keep dynamic network creation backward compatible
* Add script to create tripleo-admin on deployed servers
* Create parameters for haproxy TLS certs and keys
* Use number for KeystoneCronTokenFlushMaxDelay instead of string
* Render VIPs dynamically based on network\_data.yaml
* Change the directory for haproxy certs/keys to be service-specific
* Update EventPipelinePublisher param description to include zaqar
* Addition of Nuage as mechanism driver for ML2
* Remove baremetal cron jobs on docker upgrade
* Update documentation links in README
* Stop and disable openstack-nova-compute service on compute nodes
* Make UpgradeLevelNovaCompute parameters consistent
* Make many networking parameters consistent
* Make RoleParameters and key\_name descriptions consistent
* Add Telemetry services to scenario002
* Start redis service after upgrade
* openstack-heat-templates: fix deprecation path
* Update capabilities map to match latest environments
* Fix up multipath docker indentation
* Cinder volume/backup containers shouldn't mount two paths at same point
* Set redis password hiera value in compute agent
* Fix ceilometer agent compute service name
* Run gnocchi upgrade with sacks in docker template
* Adds stop and disable for libvirtd on upgrade to containers
* Fix keystone, cinder, heat-api cron containers
* Fix CA file bind mounting in containers
* Update TLS-everywhere docker environment
* Remove empty metadata\_settings from iscsid and multipathd templates
* MariaDB: create clustercheck user at container bootstrap
* Add missing metadata\_settings from docker services
* Copy scheduler configuration from service/ironic to services-docker/ironic
* Enable Dpdk after rebooting with Hugepages for OvS2.7
* Also log docker-puppet.py puppet output to console
* Changing the default port-binding configuration
* Add 'ovn-controller' service
* Also log puppet output to console
* Generate MySQL client config if service requires database
* Fix iscsid role data's section
* Add environment for setting a custom domain name
* Do not run clustercheck on the host after O->P upgrade
* Don't hardcode eth1 for undercloud nic config
* Enable Zaqar API SSL
* Deploy Ceph in containers using ceph-ansible via external workflow
* Adds environment file for ODL + SRIOV
* Render isolated network templates using jinja2

7.0.0.0b3
---------

* Fix enable-ceph sample environment
* Noop controller pre and post config resources
* Fix creation of iptables rules for non-HA containerized HAproxy
* Add NodeTLSData to generic role.role.j2.yaml
* Don't curl metadata server in userdata example
* Provides Ceph config into OpenStack clients
* Enable libvirtd\_config puppet tag in nova-libvirtd docker service
* Adding Tuned Service
* Contrail network realignement + DPDK enablement
* add lbaasv2 to NeutronServicePlugins in octavia containers
* Modifying Cisco templates to support composable roles
* Consistent hostname format env for split-stack
* Add parameters for Veritas HyperScale distributed setup
* Release 7.0.0.0b3
* Add metadata\_settings in Heat APIs
* Move docker\_puppet\_tasks calculation into services.yaml
* Move services.yaml output calculation into Value resources
* Drop MongoDB from the undercloud
* Support configurable Zaqar backends
* CI/scenarios : Add scenario007 for OVN services
* Add support for nova live/cold-migration with containers
* Mount /var/lib/neutron in neutron agents for metadata proxy
* Make various password descriptions consistent
* Make Deploy/UpdateIdentifier definition semi-consistent
* Make EnablePackageInstall and Debug descriptions consistent
* Revert "Disable systemd-networkd & systemd-resolved"
* Cleans up exec workaround for ODL container clustering
* Add all existing parameter mismatches to exclusion list
* Fall back to non-containerized cinder-backup and cinder-volume for HA
* Open up firewall for the control-ports in the bundles
* Move step\_config/docker\_config calculation into services.yaml
* Add keystone cron container to run token\_flush
* Add heat api container to run cron purge\_deleted
* Add cinder cron container to run db purge
* nova\_api\_cron docker fix: add /var/spool/cron/nova
* Fix network-isolation.j2.yaml to ignore VIPs for disabled networks
* Remove DockerNamespace references
* Revert "Use optimal (instead of default) tunables for Ceph on upgrade"
* Fix description of NeutronNetworkVLANRanges
* Switch MonitoringRabbitUseSSL to boolean
* Disable env evaluation in workflow executions
* Remove non-containerized pacemaker resources on upgrade
* Updated from global requirements
* Add containerized manila-share to CI
* Increase default RabbitMQ/Erlang TCP timeout from 5 to 15 seconds
* Stop Heat WSGI services on docker upgrade
* Add nova::compute::rbd setting into nova-libvirt profile
* Make collectd run as root inside the container
* Use static environment for deployed-server neutron mappings
* aodh: add gnocchi\_external\_project\_owner config
* Ps Cinder: Added support for password less login
* Stop also openstack-swift-object-expirer when upgrading swift services
* Use optimal (instead of default) tunables for Ceph on upgrade
* Set name property on missing deployments
* Refactor iscsi initiator-name reset into separate service
* Handles {controller,NovaCompute}ExtraConfig deprecation in ovecloud.j2
* Update the services README with the ServiceData parameter
* Add composable services for the Veritas HyperScale
* Use a single configuration file for specifying docker containers
* CI/scenarios: set NotificationDriver to 'noop'
* Add role\_merged\_configs into workflow executions environmentxi
* Enable Neutron LBaaS Integration
* Add validation task in docker services
* Adds network/cidr mapping into a new service property
* Improve logs from ansible, puppet, docker-puppet.py
* Add a new role for ComputeOvsDpdk and clean-up parameters
* Disable systemd-networkd & systemd-resolved
* Support deprecated controllerExtraConfig naming in role template
* Remove special-case of memcache node ips for ipv6
* Adds check for existing yum process during the legacy minor update
* Move services.yaml to common directory
* Ensure yum cache is ready before update
* Corrected wrong os\_region\_name in glance-api conf file
* Fix ironic-pxe startup issues
* Containerize Manila Share service
* Drop ComputeServices from environments/docker.yaml
* Add support for running crontabs in containers
* Run rsync for Swift without xinetd
* Allow to set Notification Driver to 'noop'
* Add dependency relationship between nested get\_attr targets
* Remove hardcoded enable\_load\_balancer from Controller role
* Remove controller specific bootstack\_nodeid
* Add PCI to nova compute container for passthrough support
* Allow modprobing from cinder-volume container
* LVM in cinder-volume container without udev
* Don't confuse Heat with empty parameter\_defaults
* Fixing a bug when setting a password for ODL controller
* Revert "Revert "Blacklist support for ExtraConfig""
* Replace outdated instruction with link to upstream doc
* Use ServerOsCollectConfigData value in output
* Add DeployedServerEnvironmentOutput
* Bind mount needed cert for haproxy for HA too
* Added OvS permission workaround for enabling DPDK
* Copy only generated puppet files into the container
* Disable network validation in multinode jobs
* Remove ceilometer apache files on upgrade
* Add in roles data validation
* Rename CongressApi to Congress (docker)
* Wrap ceilometer-upgrade in boostrap\_host\_exec
* Switch from oslosphinx to openstackdocstheme
* Modify generic role template to support custom networks
* Workflow input parameter update in plan-environment
* Updated from global requirements
* Fix typo in roles/Networker.yaml
* Enable Neutron LBaaS Integration
* Convert role templates to consume roles\_data map
* Adds docker OpenDaylight
* Update NovaCompute to consume CephClientKey
* Add ComputeHCI role and related validations
* adding --config-dir parameters to neutron containers
* New environment file to configure containers
* Drop MANIFEST.in - it's not needed by pbr
* Tolerate network errors in pingtest retry logic
* Ensure boostrap\_host\_exec runs as root
* Fix typo in config\_volume
* Bind mount needed cert for haproxy
* Allow volumes in puppet\_config containers spec
* cisco nexus: keep OVS on the Compute
* Add stack\_name/ctlplane\_service\_ips into post-upgrade.j2.yaml
* Force mtime for tar used in container config md5sums
* Make ceilometer crontab removal idempotent
* scenario001: containerize services for CI
* Add missing tags in iscsid upgrade\_tasks
* Install ansible-pacemaker on O->P upgrade
* Add ServerIdMap output
* Make NeutronEnableDVR parameter consistent
* Make Rabbit parameters consistent
* Make CephValidationDelay/Retries default consistent
* Remove ceilometer upgrade from other ceilometer containers
* Enable nova-api to run over httpd again
* Default docker-puppet.py logging to INFO
* Disable swift middleware ceilometer pipeline by default
* Add missing xinetd/rsync container for Swift
* Add heat parameter for all of config\_volume images
* Add ctlplane\_service\_ips param to upgrade steps
* Exposing the ability to enable/disable the repository
* Add README to ci/environments directory
* Add Ceph configuration with PoolDefaultSize 1
* Re-enable default for RoleParameters
* Make \*AdminStateUp parameters consistent
* Make NovaWorkers descriptions consistent
* Add validation check for divergent parameter definitions
* Allow stack\_name into major\_upgrade\_steps.yaml
* Provides a list of per-service ctlplane IPs to the workflows env
* Allows use of Mistral workflows during deployment steps
* Add non-ha env file
* Add docker templates for octavia services
* Add flag to enable/disable the HAProxy stats interface
* Temporarily disable containerized cinder
* Replace hardcoded 'br-ex' with NeutronPhysicalBridge parameter
* Enable periodic task to discover cell hosts when ironic is used
* scenario004: containerize services for CI
* Fix manila-api volumes list
* Adds service for OVS and enables ODL DPDK deployments
* scenario002: containerize services for CI
* Implement scenario006 with Ironic in overcloud
* Enable DPDK on boot using PreNetworkConfig
* scenario003: containerize services for CI
* Make collectd log to file
* Revert "Blacklist support for ExtraConfig"
* Fix descriptions on bonding templates
* Create NIC templates for Neutron Networker composable role
* Fix fallback logic in run-os-net-config.sh
* Fixes incorrect glance api network
* Deploy ironic-api with WSGI
* Specify file url when deploy-artifacts fails
* Make sensu-client log to file
* Add sample usage of StorageMgmt network for compute nodes
* Move glance::api::show\_multiple\_locations within GlanceApi
* Update cinder-netapp-config environment
* Add release note for generated sample environments
* Add an upgrade task for redis service
* Remove add\_listen: false from Horizon hieradata
* Test Horizon by default in multinode jobs
* Fix roles dict object' has no attribute 'lower' error
* Add node's FQDN to mysql certificate request and CA file
* Comment parameters for registry in docker tls env
* Re-enable docker service in docker.yaml
* Updated from global requirements
* Blacklist support for ExtraConfig
* Make a copy of files touched by puppet in container
* Fall back to non-containerized cinder-backup to unblock OVB CI
* Fall back to non-containerized cinder-volume to unblock CI
* Make fernet max active keys configurable
* Only pass distinct services to enabled\_services list
* Ignore case for bootstrap node checks
* Add VipMap output
* Add split-stack environments
* Add DeploymentSwiftDataMap parameter
* Add os-collect-config data as an output
* Update CloudDomain description
* Add Ec2Api to container based deployment
* Input enabled\_services in all-nodes-config as comma\_delimited\_list
* Fixup for manila-api containerized service
* Add an example IronicConductor role
* Remove trailing whitespace
* Add a docker-ha.yaml environment file for containerized HA deployments
* Update Panko api port
* Fix race conditions between containers
* Remove reference too puppet/services/ironic-pxe.yaml
* Fix network names when using network isolation
* Enable heat/puppet to manage the fernet keys and make it configurable
* Use KeystoneFernetKeys instead of individual parameters
* Replace NO\_ARCHIVE block with single call to rsync
* Containerize Ceilometer Agent Ipmi
* Add fqdn\_external
* Configuration for containerized MySQL clients
* Add Nova Vncproxy service to containerized deployment
* Add Nova Consoleauth service to containerized deployment
* Bind mount internal CA file to all containers
* Conditional LVM storage setup for cinder-volume
* Make network-isolation environment rendered for all roles
* Unblock CI by reverting to non-containerized HAProxy
* Modify PreNetworkConfig config inline with role-specific parameters
* Add support to configure Num of Storage sacks
* Fix IronicInspectorAdmin to be https
* Add nested sample environments for inject-trust-anchor
* Add storage sample environments
* Add neutron-midonet sample environment
* Support config dir for env generator input files
* Sample environment generator
* Moving \*postconfig where it was \*postpuppet
* Containerize Manila Scheduler service
* Add support for Cinder "NAS secure" driver params
* Remove deprecated multinode-container-upgrade.yaml
* Containerize Sahara
* Docker service for Cinder Volume
* Docker services for Cinder Backup
* Docker services for Cinder Api and Scheduler
* Containerize multipathd
* Move iscsid to a container
* Generate HAproxy iptables rules for containerized HA deployments
* Pacemaker HA suport for OVN DB servers
* Execute Swift ring up-/download in containerized environments
* Add support for autofencing to Pacemaker Remote
* Providing parameters specific to a workflow via plan-environment
* Don't mount all of config-data /etc, /etc/httpd
* Remove pip install paunch
* Fix rpms being installed via DeployArtifactURLs
* Remove duplicate docker/puppet services.yaml
* Configure credentials for ironic to access cinder
* Add templates to configure Ironic inspector
* Revert "Add support to configure Num of Storage sacks"
* Make container names consistent
* Add detach to docker-toool
* Fix bug in docker-toool where values are sometimes empty
* Change HorizonSecureCookies default to False
* Run the nova-compute container as the nova user
* Containerized collectd
* Write md5sum for service config directories

7.0.0.0b2
---------

* Fix typo in haproxy docker mapping
* Containerize Cinder-volume for HA
* Containerize Cinder-backup for HA
* Containerized Sensu client
* Containerize Tacker Services
* Containerize Congress API service
* Fix containerized SwiftRawDisks usage
* Role Specific parameter for nova-compute service
* Configure crl file for HAProxy
* Configure CRL URI if TLS in the internal network is enabled
* Role Specific parameters for neutron-sriov-agent service
* Modify libvirtd container command line when TLS is enabled
* Dell SC: Add exclude\_domain\_ip option
* Standardize example role definitions
* Mount /var/run/libvirt on ceilo agent compute
* Add host logging for redis service template
* Containerize Manila API service
* Fix the disable expirer to remove crontab
* Add support to configure Num of Storage sacks
* Use Deployment actions for blacklist
* Don't create networks if neutron is not enabled
* Map /etc/ssh/ssh\_known\_hosts to all containers
* Ensure /etc/ssh/ssh\_known\_hosts exist in docker config-data
* Stop/disable l3 agent in docker service upgrade\_tasks
* Ability to enable/disable debug mode per OpenStack service
* Updated from global requirements
* Fix upgrade tasks to use correct service name
* Convert puppet and docker steps to ansible
* Containerize HAProxy for the non-ha case
* Release 7.0.0.0b2
* Update metric processing delay default
* Containerize Redis for HA
* Fix CephPoolDefaultSize typo
* Increase default for NovaReservedHostMemory to 4096
* Server blacklist support
* Fix the constraints for THT params NeutronDpdkCoreList and HostCpusList
* Upgrade gnocchi without skip-storage
* ceilometer-expirer: remove the crontab during upgrade
* Containerized nova-compute working with Deployed Server
* Add sshd service to containerized compute role
* Container-specific variants of scenarios 001-004
* Handle upgrading cinder-volume under pacemaker
* Add heat environment for disabling all telemetry services
* Enable arp\_accept for all interfaces
* Add ignore\_projects to filter gnocchi events
* Align optional services with optional services-docker
* Add support for linuxbridge agent
* Include mongodb in scenario002 job
* Containerize RabbitMQ for HA
* Containerize MySQL for HA
* Containerize HAProxy for HA
* Remove duplicate PreConfig definition
* Fix race condition between docker-puppet and container steps
* Containerize clustercheck galera monitor for HA deployments
* Example environment file to use Neutron BGPVPN driver with ODL
* Remove osd\_pool\_default\_min\_size to allow Ceph cluster to do the right thing by default
* docker bootstrap service commands
* Updated from global requirements
* docker/TLS-everywhere: Add metadata\_settings output to templates
* Example environment file to use L2GW Neutron Driver with ODL
* Disable mongodb by default
* Use disabled suffix for disabled service names
* Modify vhost user socket directory's default value in environment file
* Re-Add ceilometer expirer to roles\_data
* Add Neutron L2 Gateway service to scenario 004
* Change database sync timeout from 300 to 900 in low-memory-usage environment file
* Add RoleNetHostnameMap output
* Role Specific paramaeter support for neutron-ovs-dpdk-agent service
* Update the template\_version alias for all the templates to pike
* Make sure that manila share is created after share type
* neutron: set enable\_dvr = False if NeutronEnableDVR is false
* Add containerized neutron-metadata agent
* Comment parameters for registry in docker.yaml
* Add l2gw neutron agent support
* Use upper-constraints for tox
* Store role\_data in an OS::Heat::Value resource
* Containerize Horizon
* Consolidate writing json configs with HostPrepTasks
* TLS-everywhere: Configure CA for apache
* Only set apache certificates if TLS everywhere is enabled
* TLS everywhere: configure mongodb's TLS settings
* Don't delete failed docker-puppet containers
* Containerize Ceilometer Agents
* docker/internal TLS: spawn extra container for neutron server's TLS proxy
* Use neutron-server image for neutron services
* Optimize kernel neighbour table for large scale environments
* Fix resource type in ObjectStorage role
* Add missing type for RoleParameters parameter
* Fix absolute paths in scenario001-multinode.yaml
* Default snmp to less verbose logging
* Update the services README documentation
* Add role specific information to the service template
* docker/internal TLS: spawn extra container for glance API's TLS proxy
* docker/internal TLS: spawn extra container for swift's TLS proxy
* Add params to manage and configure pipeline publisher
* Deprecate Ceilometer Expirer
* Disabling replacing fernet keys from puppet
* Fix paths for optional docker services
* Add missing release note for cadf environment
* Change neutron-metadata number of workers determination method
* multinode-container-upgrade.yaml usable for mixed upgrade
* Make docker-puppet.sh a static file
* Use httpd in Zaqar docker service
* Make upgrade steps unconditional to fix broken dependencies
* Containers: Bind mount directories with the key/certs for heat
* Add syslog socket to common containers volumes
* Set puppet-redis managed\_by\_cluster\_manager to true
* Enable mistral to run under mod\_wsgi
* Use the make\_url function to build URLs
* Mount hostpath logs on /var/log
* Remove nova placement config for compute service node on upgrade
* Add StackUpdateType to set hiera on upgrade
* Fix up pacemaker\_status test in yum\_update.sh
* [N->O] Add openstack-nova-migration to compute nodes
* Restrict nova migration ssh tunnel
* Add back Heat conditions in upgrade workflow
* Configure snmpd auth params in ceilometer profile
* Set reasonable TTL defaults for Ceilometer DB
* Expose metric delay processing metric
* Internal TLS: Use specific CA file for mysql-client
* Use httpd in Heat docker services
* Internal TLS: use common CA file parameter for libvirt CA cert
* Internal TLS: Use specific CA file for haproxy
* Disable ComputeNeutron\* for cisco-nexus-ucsm
* Add deprecation notes for panko service
* Initial VIP ipv6 minor update code
* snmp: add SnmpdBindHost parameter
* Ensure AllNodesExtraConfig runs before AllNodesDeploySteps
* Fix for the resource ControllerPostPuppetMaintenanceModeDeployment
* Add parameter Ec2ApiExternalNetwork for VPCs
* Move containers common volumes from yaql to list\_concat
* Use list\_concat for metadata\_settings for haproxy
* Improve logging for docker-puppet.py
* Enable splay for os-collect-config
* Disable Telemetry services on undercloud containers
* Allow to deploy Octavia API & Neutron Server on 2 different nodes
* Support Redfish hardware in the overcloud Ironic
* Unset the UpgradeInitCommand on converge
* Remove deprecated minor update pcs code
* Add $STACK\_NAME input var
* Fix redis container
* Disable default vhost for apache
* TLS-everywhere: Add missing profiles to docker compute services
* upgrades: deploy mod\_ssl when upgrading apache
* Open ports 443 and 80 on haproxy's firewall when horizon is standalone
* Change the default for rabbitmq back to ha-mode: all
* Fix etcd\_init\_task volume
* Upgrade failure when service parameter is changed for PankoApi
* Deprecate ceilometer collector
* Fix dependencies for PreConfig/PostConfig resources
* Deploy ceilometer\_auth\_enabled to node containing keystone
* Pass httpd service\_name to Zaqar
* Updated from global requirements
* Dell SC: Add secondary DSM support
* Containerize etcd service
* Fix containerized RabbitMQ service deployment
* Containerize Redis service
* Remove no longer used environment files - older upgrade workflows
* Don't attempt to configure live migration
* Add defaults for docker puppet tasks
* N->O Manual puppet commands have the right modulepath
* Run Zaqar with httpd in puppet service
* glance: deploy services with Keystone v3 endpoints
* SSHD Service extensions
* Containers: disable downloading rabbitmqadmin
* Add missing tag to nova-placement docker image
* N->O upgrade, fix wrong parameters to nova placement
* containers: TLS in the internal network for telemetry services
* TLS-everywhere: Enable for TLS libvirt live migration
* Add IronicInspector settings to the network map
* scenario001/pingtest: enable Gnocchi resource again
* Run token flush cron job hourly by default
* Introduce common CAs to be mounted to the containers
* Introduce common resources for docker templates
* Support for external swift proxy
* Add all hosts to HostsEntry output
* aodh-base.yaml uses a hard coded keystone region name
* Revert "Use httpd in Zaqar docker service"
* Add migration SSH tunneling support
* Rework DOCKER\_PUPPET\_CONFIG validate tool
* SSH known\_hosts config
* Validate NTP servers
* Pluggable server type per Role
* Fix nova-compute service name in upgrade steps
* Use underscore for Aodh and Gnocchi's container names
* Add service config settings to agent services
* Add name and description fields to plan-environment.yaml
* Add tags to roles
* Non-ha multinode environment for container upgrade job
* Use comma\_delimited\_list for token flush cron time settings
* Bind mount directories that contain the key/certs for keystone
* docker/all: Bind-mount OpenSSL CA bundle
* Use -net=host for docker-puppet.py config gen
* Add RoleNetIpMap output to overcloud.j2.yaml
* docker: use noop\_resource for Nova\_cell\_v2
* Change the directory for httpd certs/keys to be service-specific
* Add Docker to services list in multinode CI environments
* Do not log errors on non-existing container
* Add IPv6 disable option

7.0.0.0b1
---------

* Update Dell EMC Cinder back end services
* Add networking-vpp ML2 mechanism driver support
* Add composable role support for NetApp Cinder back end
* Add upgrade tasks for gnocchi container services
* Replace references to the 192.0.2 network
* metadatahook: Use coalesce to handle null values
* Remove yaql call when building logging\_groups
* [ironic] expose default boot\_option in configuration and change it to local
* Decouple Swift ringbuilding logic
* Enable internal network TLS for etcd
* Prepare 7.0.0.0b1 (pike-1)
* Use conditionals for neutron and glance worker defaults
* Add environment to preselect only VIP IP addresses
* sensu: fix upgrade case when service is added
* Timeout early on pcs cluster status check0 during upgrade
* Allow for update after RHEL registration
* Add Docker service to all roles
* Avoid awk error in hosts-config.sh for large deployments
* Add password to authtoken section in congress.conf
* Add BGPVPN services to scenario004
* Replace six.iteritems() with .items()
* Fix conntrack proto sctp module
* Disable Manila CephFS snapshots by default
* Adds service for managing securetty
* Add initial support for NSX plugin
* ovn: Add missing configurations required
* Add trigger to setup a LDAP backend as keystone domaine
* Remove "Core" Service from the CI Environment file
* add configurable timeouts for DB sync
* yum\_update.sh - Use the yum parameter: check-update
* Ironic containers: chown /var/lib/ironic correctly
* Fixing acronym for BGPVPN composable service
* Allow configuring enabled hardware types for Ironic
* Use httpd in Zaqar docker service
* Use kolla api to set ownership
* Add parameters for internal TLS for swift proxy
* Use the local collector to bootstrap deployed servers
* Enables support for configuring Cinder with Pure Storage FlashArray storage backend
* Add monitoring agents deployment to CI
* Enforce upgrade\_batch\_tasks before upgrade\_tasks order
* Ensure upgrade step orchestration accross roles
* Increase documentation about parameters
* Add params to tweak memory limit on mongodb
* Add support for "neutron" Ironic networking plugin
* Addition of firewall rules for Nuage
* Purge initial firewall for deployed-server's
* Remove kolla\_config copy from services
* Remove not-working all-in-one upgrade environment
* Disable ceilometer API
* Add missing name properties on deloyment resources
* Set auth flag so ceilometer auth is enabled
* Update ceph-rgw acccepted roles to fix OSP upgrade
* Add special case upgrade from openvswitch 2.5.0-14
* Add manual ovs upgrade script for workaround ovs upgrade issue
* Setting keystone region for tacker
* Remove EC2 endpoint from EndpointMap
* Change heat and mistral to use v3/ec2tokens url
* Add logging agents deployment to CI
* Add l2gw neutron service plugin support
* Don't check haproxy if external load-balancer is used
* Output service\_metadata\_settings in docker services.yaml
* Do not install openstack-heat-agents
* Add ceilometer ipmi agent
* Add NeutronDnsDomain heat option, undercloud fix
* Add network sysctl tweaks for security
* Qpid dispatch router composable role
* Allow to configure policy.json for OpenStack projects
* Include panko in the default dispatcher
* Grouped all the Operational tools
* Updated from global requirements
* Run cluster check on nodes configured in wsrep\_cluster\_address
* Modify pci\_passthrough hiera value as string
* Disable core dump for setuid programs
* Add missing ec2api::api::keystone\_ec2\_tokens\_url config
* Fixes port binding controller for OpenDaylight
* Remove 'Controller' role references from overcloud.j2.yaml
* Remove kolla\_config copy from keystone service
* Swift auth url should use a suffix
* MySQL: Use conditional instead of nested stack for TLS-specific bits
* Apache: Use conditional instead of nested stack for TLS-specific bits
* Rabbitmq: Use conditional instead of nested stack for TLS-specific bits
* N->O upgrade, blanks ipv6 rules before activating it
* docker/keystone: Bind mount entire fernet keys repository
* Stop openstack-nova-compute during nova-ironic upgrade
* N->O Upgrade, make sure all nova placement parameter properly set
* Rework container volumes as hostpath mounts
* [N->O] Fix wrong database connection for cell0 during upgrade
* Fixes OpenDaylightProviderMappings hiera parsing
* [N->O] is creating 2 default cell\_v2 cells
* Add missing metadata\_settings from neutron-api profile
* Fix usage of CinderNfsServers
* Adds Horizon secure cookie map
* Install openstack-selinux for deployed-server
* Nic config mappings for deployed-server
* Fixes missing firewall rules for neutron\_ovs\_dpdk\_agent service
* Run nova-api hosts discovery after nova-compute start
* Remove unused KeystoneRegion parameter from gnocchi-base
* Only set EnableConfigPurge on major upgrades
* Remove useless trailing '\n' in /etc/hosts file
* docker/keystone: Actually set fernet as the default token provider
* docker-puppet: skip empty volume entries
* Restrict Access to Kernel Message Buffer
* Use tripleo profile for bigswitch agent
* Change kolla\_config from required to optional in pep8
* Setting keystone region for congress
* Enables OpenDaylight clustering in HA deployments
* Keep existing data for containerized ironic-conductor
* Re-Add bigswitch agent support
* Make sure PrePuppet runs before any Deployment\_Step
* Containerize panko api service
* Bind redis-sentinel to its network
* Add NodeCreateBatchSize parameter
* Pick dynamically the first node for stack validation
* Explicitly configure credentials used by ironic to access other services
* docker/keystone: add metadata\_settings to output
* docker: Add metadata\_settings to optional parameters for yaml validate
* Keep existing data for containerized Libvirt
* Keep existing data for containerized Swift
* etcd: secure EtcdInitialClusterToken parameter
* Add upgrade tasks for aodh containers
* Don't disable satellite repo after registration
* Cleanup no longer used upgrade files
* Switch keystone default provider to fernet
* keystone/containers: Add support for fernet keys
* Keep existing data for containerized RabbitMQ
* Keep existing data for containerized MongoDB
* Keep existing data when moving to containerized MariaDB
* Fixes multiple issues with retry function in rhel-registration
* Update README for Glance coverage
* Add bindep support
* Containerize gnocchi services
* Add certmonger-user profile
* congress/tacker: switch auth\_uri to use uri\_no\_suffix
* Don't try to run os-net-config from yum\_update.sh
* gnocchi: deploy services with Keystone v3 endpoints
* telemetry: switch auth\_uri to uri\_no\_suffix
* cinder: switch auth\_uri to uri\_no\_suffix
* heat: switch auth\_uri to use uri\_no\_suffix
* ironic: switch auth\_uri to uri\_no\_suffix
* manila: switch auth\_uri to use uri\_no\_suffix
* neutron: switch auth\_uri to uri\_no\_suffix
* nova: switch auth\_uri to keystone versionless endpoint
* Tasks hook for preparing BM host for deploying containerized services
* Remove unnecesary code to enable panko-api
* Upgrades: wait for galera to be settled
* Remove double quotes in the "when" Ansible conditional
* Add upgrade tasks for heat over httpd
* horizon: switch keystone\_url to use uri\_no\_suffix
* Remove ha-by-default release note
* Clarify Kolla build overrides for tripleo
* Containerize Aodh alarm services
* Add BGPVPN composable service
* Cleanup docker services templates
* Add pep8 tests on docker/services/\*
* Remove docker\_image sections (unused)
* Pass hieradata relevant for httpd in the Heat APIs
* Update docs per new puppet\_config interface
* Improve SSL support for Sensu
* Pass hieradata for internal TLS for RabbitMQ
* docker-puppet.py fail if any worker fails
* Enables increasing mariadb open files for noha deployments
* Move zaqar into services-docker
* Move mistral into services-docker
* Move ironic into services-docker
* sahara: configure keystone\_authtoken parameters
* barbican: Use versionless keystone endpoints
* Move nova-scheduler data into puppet\_config
* Enable Docker service for Compute role
* Remove glance-base service
* Add puppet\_config to docker neutron-l3 service
* sshd template, rename hiera key
* Fix bogus parameters in get\_param
* Enable keystone cadf notifications
* Enable composable upgrades for docker service templates
* Add docker composable service template
* Add validation for VPP upgrade tasks
* Cinder-api upgrade: use httpd instead of apachectl
* Use the new hiera hook in all remaining templates
* Add network\_data.yaml to encapsulate list of networks for j2
* Update properties being set for octavia rabbit properties
* Removes old environment file references
* Fix httpd dir create to not error if exists
* Remove root\_template and root\_environment from capabilities-map.yaml
* etcd: Get FQDN from hiera instead of puppet fact
* ec2-api: Get FQDN from hiera instead of puppet fact
* Remove the openvswitch special case upgrade code
* Fix Panko API upgrade process
* Overwrite nova placement with stub for docker
* Enable IronicPxe in the undercloud
* Removes opencontrail reference
* Add upgrade task for panko api
* Upgrades: fix up the rabbitmq HA mode like in new ocata deployments
* Put docker puppet config in puppet\_config dict
* Adds upgrade tasks for OpenDaylight services
* Add mistral service support for composable upgrades
* upgrades/validation: only run validation when services exist
* Containerize neutron-l3 agent
* Associate unmapped hosts with cell mappings
* Pass the DOCKER\_\* env vars when running docker
* Add plan-environment.yaml
* Make UpdateDeployment depend on NetworkDeployment
* Switch to dict format for docker\_puppet\_tasks
* Use --disable= in subscription-manager to avoid shell expansion
* Disable exit on error for pacemaker commands for update flow
* Put service stop at step1 and quiesce at step2
* upgrades: fix ec2api conditional
* Align hyperconverged-ceph.yaml environment and adds some validation
* Adding keystone parameters for Tacker
* Make neutron dhcp agents per network conditional
* Adding keystone parameters for Congress
* mysqlclient: Use actual parameter in puppet to set bind-address
* Add zaqar service for composable upgrade
* Add support for upgrading ec2-api
* Add etcd composable upgrade steps
* Add auditd upgrate steps
* Add upgrade support for Horizon
* Configure SSL connection for MySQL client via client config file
* Deploy CI scenarios with Pacemaker
* Deploy versionless keystone endpoints (for keystone only)
* Add VPP composable service
* Install openstack-heat-agents on upgrade
* Install openstack-panko-api on upgrade
* Switch central and compute templates to use polling agent
* multinode\_major\_upgrade: enable Pacemaker
* Enable docker for all roles
* Add option to diff containers after config stage
* Upgrade nova-api/scheduler/conductor packages at step3 not step2
* Adding definition of backup\_flags
* Make heat max\_json\_body\_size configurable
* Containers: workaround for neutron DB sync
* Added release note for NeutronExternalNetworkBridge deprecation
* Add step to docker\_puppet\_tasks
* Enable TLS for swift-proxy's ceilometer notifications
* Increase ansible-pacemaker default service start timeout
* Remove forgotten sahara dbsync from step5 upgrades tasks
* Adds http proxy support for registering RHEL overcloud nodes
* Add docker mysql service
* Adding the ip\_conntrack\_proto\_sctp kernel module
* Update the Nova Endpoint information for Cinder
* Parallelize docker-puppet.py
* Write out a json file containing container startup info and create tool to use it
* Containerized Swift Services
* Add docker Glance API service
* Containerized MongoDB
* multinode/upgrade: add nova services to environment
* Re-add the disable\_upgrade\_deployment note in roles\_data.yaml
* Increase apache ServerLimit and workers to 100
* Improve the README for the \_setting keys
* Add checks in ansible upgrade tasks for CephMon and CephOSD
* Enable panko service by default on overcloud
* Add step0,validation checks for heat services
* Adding upgrade steps to congress service
* Add docker memcached service
* Add docker rabbitmq service
* Add docker zaqar service
* Add docker mistral services
* Add docker neutron services
* Add docker nova services
* Add docker heat services
* Stop nova-api before upgrading package
* Adding upgrade\_tasks to tacker
* Make the DB URIs host-independent for all services
* Sort ResourceGroup resource list
* Add environment for deployed-server with pacemaker
* Generate Pre/Post Puppet Tasks for all roles
* Don't assume default network names in net\_ip\*map
* Switch to net-config-multinode
* Install nova-placement package on upgrade
* Add OpenDaylightConnectionProtocol parameter to opendaylight-api service
* Update ci environment for multinode jobs to support Ceph
* Add missing releasenotes for Swift ring management
* Apply post-upgrade step to not run puppet in post upgrade
* Update reno for stable/ocata

6.0.0.0rc1
----------

* Align HCI environment file with list of services from roles\_data
* Add Newton to Ocata UpgradeInitCommonCommand
* CI fix broken references to multinode-core.yaml
* Enable docker services in the registry
* Add major-upgrade-converge environment
* Add docker ironic services
* Add docker\_puppet\_tasks initialization on primary node
* Add docker keystone service
* docker: new hybrid deployment architecture and configuration
* Add explicit swift check to tripleo\_upgrade\_node.sh
* Apply puppet in non-controller script in step
* Setup FreeIPA to serve DNS in the setup script
* Declare variables for freeipa\_setup.sh script
* Add nova service support for composable upgrades
* FQDN validation
* Release notes ha composable
* OVN bridge mappings for tripleo
* Add upgrade tasks for opstools services
* Containers: Add required EndpointMap parameter
* Configuring a default ntp server
* Add Ceph RGW to capabilities map
* Deploy Manila with CephMDS in scenario004
* Updated from global requirements
* Fix empty parameter\_default error in environment file
* Add release note for services endpoint change
* Use Keystone internal endpoint instead of admin for nova-ironic
* Use Keystone internal endpoint instead of admin for services
* Adds 'trunk' to ODL env service plugins
* Remove duplicated release notes
* Add missing TripleO services to ci/multinode
* Configure authtoken in nova-placement api service
* nova-placement: support upgrade
* Remove [heat,glance,ironic,cinder,keystone] db sync from ansible
* Remove the ansible neutron-api db sync as for other services
* Configure the placement API's interface to use the internal endpoint
* Reduce memcached memory configuration
* Add missing release notes for Ocata
* placement: switch service to use NovaPlacementNetwork
* Fix Neutron region in nova.conf
* Remove gnocchi db sync from the ansible upgrade step
* Adds cluster status check\_and\_fail before running upgrade (step0)
* Dump and  run puppet for role which are disable\_upgrade\_deployment true
* adding Congress Support
* Remove legacy major upgrade scripts for Ceph and BlockStorage
* Delivers upgrade scripts where upgrade steps are disabled
* Make UpgradeBatch resource depends on BatchConfig step0
* Remove aodh db sync from ansible upgrade
* Adding Tacker Support
* Remove deprecated metering\_secret
* Re-organizes Contrail services to the correct roles
* Stop deploying Nova API in WSGI with Apache
* Enables support for configuring Cinder with Dell EMC ScaleIO storage backend
* Stop setting bind\_address on nova db uri
* Composable services support for Cinder Dell EMC PS Series
* implement a collectd composable service
* Remove precheck on services which run on httpd for upgrade
* Remove openstack-ceilometer-api pre upgrade check
* Automatically backup and restore Swift rings from the undercloud
* Adds default Keystone region to regionOne Closes-Bug: #1661839
* Don't recalculate EndpointMap to get outputs
* Composable service support for Cinder Dell EMC Storage Center
* Add registry and role service list entries for Octavia
* net-config-multinode: make controlplane int idempotent
* Provide a default value for Ironic cleaning\_network configuration
* Remove openstack-ceilometer-expirer check
* Disable batch upgrade deployments for disabled roles
* Reduce number of steps for upgrades
* Simplify/fix config enabled conditions for upgrades
* Disable puppet on upgrade for roles not upgrading
* Added further security functionality in release notes
* CI: enable debug on multinode and upgrade job
* Remove old host param
* Switch item notation to jinja format
* OVN plugin configuration fixes
* Add pacemaker composable upgrade steps
* Moving the validation for using the template alias version for all templates
* Remove unused SR-IOV parameter NeutronSupportedPCIVendorDevs
* Add more explicit messagae to build\_endpoint\_map's check option
* Validate that endpoint\_map.yaml is up to date in the gate
* Configure VNC Server listen address through t-h-t
* FreeIPA: don't preprovision service principals if novajoin is enabled
* Don't run ceilometer-upgrade via upgrade\_tasks
* Remove Gemfile and Rakefile
* Disable the deprecation warnings as errors for puppet-syntax
* Add ability to toggle swift's ceilometer transport\_url SSL
* Use common directory in CI scenario for net-config
* Introduce Octavia implementation services
* Describe use of Manila/CephFS in capabilites\_map
* docker: eliminate copy-json.py in favor of json-file
* multinode/upgrade: set heat::rpc\_response\_timeout to 600
* Pass parameters for TLS proxy in front of neutron server
* Use os-net-config in multinode jobs
* Add support for Jinja2 includes
* Add AuditD composable service
* Adds a pre-upgrade check that service is running (step0)
* Allow the override of pacemaker::corosync::settle\_tries
* Allow to separate Horizon from Neutron
* Add deployed server bootstrap for RHEL
* Remove create-legacy-resource-types opts
* Add upgrade support for CephRGW service
* Add release notes for Manila/CephFS with managed Ceph
* Add release note for composable upgrades
* Do not try to update the 'ceph' metapackage from CephMon role
* ci: import multinode\_major\_upgrade.yaml from tripleo-ci
* Add Ceph RBD mirror Pacemaker profile
* Adds SSH Banner text into sshd\_config
* Add SkipUpgradeConfigTags for upgrade config
* Add telemetry service support for composable upgrades
* Add ironic service support for composable upgrades
* Skip upgrade steps where no tasks are defined
* Add upgrade support for ceph OSD service
* Add upgrade support for ceph-mon service
* Add support for batched upgrades to composable upgrades
* Use versionless keystone endpoint for barbican-related configurations
* Set the correct default for gnocchi workers
* Add novajoin entries to the TLS-everywhere environment file
* Add a release note for using deployed-servers (aka split-stack)
* Conform CephExternal template to the new hiera hook
* Add release notes for Ocata 6.0.0
* Manage password\_validator regex
* Add snmp service support for composable upgrades
* Remove spurious for loop from post deploy j2
* Add metadata settings for needed kerberos principals
* Add glance registry service to disable on upgrade
* Import multinode + pingtest from tripleo-ci
* cinder-api: cleanup TODO
* Specify what to do if endpoint map environment don't match
* Pass parameters for TLS proxy in front of Glance-API
* Add ec2-api service
* pacemaker remote profile support
* scenario002: updating volume encryption provider
* Allow for specifying the output\_dir
* Ignore hidden files in directories
* Add support for not using admin\_token in Ceph/RGW
* Remove unused nova\_url from neutron config
* Add disable\_upgrade\_deployment flag to roles\_data.yaml
* Set manila default\_share\_type config option
* Move nova placement hiera to nova-base
* cinder: move glance params into base
* Allow dnsmasq\_dns\_servers to be configured for DHCP Agent
* Enabling until\_complete to be configured dynamically
* Add THT for fossw ML2 plugin in networking-fujitsu
* Make ServiceNetMap support custom network names
* Add sahara service support for composable upgrades
* Add swift service support for composable upgrades
* Swift proxy align \*-quotas with puppet-swift syntax
* Don't start all services during upgrade steps
* Disable glance registry during upgrade
* Ignore systemctl return code in yum\_update.sh
* Deploy NTP with puppet-tripleo profile
* Adds etcd composable service
* Fix comment in freeipa\_setup.sh script
* Add entry in serviceNetMap for Nova Placement
* Expose instance discovery method for compute agent
* Remove CeilometerStoreEvents parameter
* Add IP to provisioning interface for FreeIPA if requested
* Add Octavia API service definitions
* Revert "Revert "Specify cell0 db creation""
* Add a environment file to disable ceilo api
* Check that all templates are using the release alias
* set -e in run-os-net-config.sh
* Add deployed server bootstrap to noop-ctlplane
* Add endpoint map matching validation to validate-yaml.py
* Nova Placement API composable service
* Add release notes for the HA-by-default change
* Bump missing template names to ocata
* Conditionally set OVS agent firewall driver
* Simplify passing config to ovs agent container
* Allow user to configure Ceph rbd\_default\_features
* Remove Glance Registry service
* Fix typo in template description
* Use custom role names in deployed-server roles
* Deployed server bootstrap via Heat
* Fix for AllNodesExtraConfig and fix environment files to create swap files/partitions
* Configure cron parameters for Cinder Heat Keystone and Nova
* Updated from global requirements
* Removes deprecated neutron-opendaylight-l3 env file
* Add ReNo support
* Revert "Specify cell0 db creation"
* HPELeftHandISCSIDriver support for Cinder
* Add git to FreeIPA test server install script
* Add heat service support for composable upgrades
* Add cinder service support for composable upgrades
* Add neutron service support for composable upgrades
* Adds a step0 for pre upgrade-init checks
* Parameterizes Nova API default floating IP pool
* Add glance service support for composable upgrades
* Fix protocol for ZaqarWebsockets endpoint
* Make build\_endpoint\_map.py output an ocata versioned template
* Fix error path for tools/process-templates.py
* Allow freeipa environment file to be in /tmp
* Removes deprecated OpenDaylight L2 only deployments
* Add deployed-server backwards compatible template
* Add support for the deployment of Ceph MDS
* Add THT for networking-fujitsu
* Add retry to RHEL registration
* Updated from global requirements
* Correct typo in ManagementAllocationPools in network-environment.yaml
* README: Add mistral
* Set number of Swift proxy server workers to auto
* Configure specific module path for ansible
* Setting networking-odl v2 as a mechanism driver
* Make update-from-keystone-admin-internal-api.yaml work on newton+
* Continue checking for request url if initially null
* Update net-config-noop to use apply-config
* Add UpgradeInitCommand to deployed-server
* Template and role support for the undercloud
* Heat engine settings required for Undercloud
* scenario001: add Panko testing
* README: updates for CI matrix
* Remove unused pacemaker profiles
* Auto-set SwiftMountCheck and SwiftUseLocalDir settings
* Configure Kernel Args and Tuned and then reboot for Compute
* Fix a typo in deployed-server/README.rst
* puppet/role.role.j2.yaml has invalid get\_resource reference
* nova-api: legacy cleanup with old wsgi params
* nova-api: also include hiera for new apache\_api class
* Set rabbitmq package\_provider to yum
* Add custom roles data for deployed-server
* Add example showing how to set root password via cloud-init
* Configure Heat engine metadata URL's
* Add missing VIP definitions into -no-tunneling env file
* Expose enabled\_perf\_events libvirt options
* Specify cell0 db creation
* Remove old ControllerConfig override from puppet-pacemaker.yaml
* DB connection: prevent src address from binding to a VIP
* Force epmd listening to a specific address
* Bump template version for all templates to "ocata"
* Pass nova rabbit information to mysql
* Use provided qemu.conf in libvirt container
* Add network\_config\_hook interface to run-os-net-config.sh
* Add CI matrix to THT
* Add hook to generate metadata from service profiles
* Add FreeIPA server installation script
* Add a per service bootstrap node variable
* Adds missing firewall rules for OpenDaylight API service
* Adds missing OpenDaylight username/password from ODL OVS service
* Set gnocchi wsgi display name
* Set aodh wsgi display name
* Set the default event pipeline publisher
* Use ws instead of http for Zaqar websocket endpoints
* FreeIPA: Make OTP and FreeIPA server parameters optional
* Configure DPDK options to isolate PMD cores and ovs process cores
* Revert "Switch mistral to use authtoken configuration"
* Use overcloud-full instead of atomic-image
* Introduce role-specific NodeUserData, use for docker
* Add bind mounts for agent state
* Move UpgradeInitCommand to role templates
* Run upgrade steps before post-deploy config
* Split OVN northd and ml2 plugin
* Add "deployed server" fake neutron ports
* net-conf: make bridge and interface name optional
* Increase libvirt/qemu.conf max\_files and max\_processes
* Introduce role-specific nova-server-metadata
* Don't run yum\_update.sh inside docker
* Add ZaqarApiNetwork to the service net map
* Add pre-network hook and example showing config-then-reboot
* Use hostname -s instead of hostnamectl --transient
* Make the openvswitch 2.4->2.5 upgrade more robust
* Set rabbitmq's port and IP via the config file and not the env file
* Set manila cephfs backend if ceph is deployed
* Enable SECURE\_PROXY\_SSL\_HEADER option for horizon
* Synchronize NetworkDeployment inputs for generic roles
* Use OS::Heat::DeployedServer

6.0.0.0b2
---------

* Manage disallow\_iframe\_embed
* Use df instead of findmnt in cephstorage upgrade scripts
* neutron: don't set external\_network\_bridge option by default
* Decouple swift-proxy from ceilometer
* Add a type for the ControlVirtualIP resource
* Switch mistral to use authtoken configuration
* Expose param to enable legacy ceilometer api
* Add FreeIPA enrollment template
* Don't rely on lsb\_release for hosts template write
* docker: don't use custom run-os-net-config
* Correction to SRIOV THT Examples
* Keystone token flush cron job should log to a file
* Fix a typo
* Enable haproxy internal TLS through enable-internal-tls.yaml
* Remove unused attr from templates
* Remove redundant CLI arguments for neutron-db-manage
* neutron: don't set router\_delete\_namespaces
* Fix SwiftStorage role
* Add support for node groups in NetConfigDataLookup
* Add NIC config for compute role for DVR with multiple NICs
* Fix bug when using multiple DeployArtifactURLs
* Revert "Use FQDN for rabbitmq's nodename env variable"
* Add zaqar to the controller's list of services in roles\_data.yaml
* Move nodes' fqdns to a map to remove clutter
* Make get-occ-config.sh support custom roles
* scenario001: deploy Cinder with RBD backend
* scenario003: configure Keystone tokens with Fernet provider
* Implement scenario004 with Ceph Rados Gateway scenario
* ceph-rgw: add missing user parameter
* scenario001: deploy Ceph
* scenario001/pingtest: remove gnocchi\_res\_alarm
* Initial support for composable upgrades with Heat+Ansible
* Use FQDN for rabbitmq's nodename env variable
* Use network-based fqdn entry from hiera instead of the custom fact
* Introduce network-based FQDNs via hiera
* Hiera optimization: use a new hiera hook
* Make pep8 task run template generation
* Use transient hostname for deployed servers
* Deployed server: switch to apply-config hook
* Add local template generation tox task
* Configure /etc/hosts via os-collect-config script
* Support multiple meter dispatchers in ceilometer config
* Add Zaqar to scenario002
* Make scenario template paths relative
* Add Mistral to scenario003
* Fix grammar
* Test encrypted volumes in scenario002
* get-occ-config.sh replace deprecated heat commands
* Apply os-net-config with a script instead of element
* Use correct type for SensuRedactVariables parameter
* Revert "Set NeutronL3HA to false when deploying DVR"
* Stop using puppet to configure VIPs in /etc/hosts
* Fix puppet/services/README.rst step description
* Show team and repo badges on README
* Import TripleO CI environments from tripleo-ci
* Provide full list of services for Compute role in HCI scenario
* Enable TLS in the internal networkf or Mysql
* Disable Neutron agents with OVN
* Run os-net-config before restarting cluster on update
* Explicitly set rabbit hosts so its not overridden during upgrade
* Cleanup some inline comments in network/config
* Make the CloudDomain defaults match the doc strings
* Fix ovs 2.4 to 2.5 upgrade - minor update non controllers
* Fix resource\_registry path in enable-internal-tls
* Containerized Services for Composable Roles
* Modify external loadbalancer environments to use new FixedIPs
* Add necessary parameters for encrypted volumes support
* Make Ceilometer notifications non-blocking
* Disable keepalived for HA deployments via t-h-t
* Disable Options Indexes in horizon
* No longer hard coding to a specifc network interface name
* Add panko api support to service templates
* Remove conditional for neutron l3\_ha
* Configure Keystone Fernet Keys
* Enable enforce\_password\_check
* Remove Combination alarms support

6.0.0.0b1
---------

* Do not manage overcloud repositories when using external Ceph
* Correct AllNodesDeploySteps depends\_on
* Use keystone profile parameter to pass heat password
* Nova base cleanups for hiera json hook
* Horizon service cleanups for hiera json hook
* Replace ceilometer-dbsync by ceilometer-upgrade
* Fix external Load Balancer deployment
* Define keystone token provider
* Composable Zaqar services
* Fix up Newton->Ocata rabbitmq ha policy
* Enable internal TLS for Barbican API
* Fixes missing OVS Firewall config with OpenDaylight
* Configure civetweb bind socket via puppet-tripleo
* Increasing neutron timeout for low memory usage
* Increase reserved memory for computes when enabling DVR
* Use default Sensu redact
* Fix inconsistent Manila service naming
* Fix typo in Keystone Sensu subscription
* Use j2 loops in post.j2.yaml
* Neutron L3 service cleanups for hiera json hook
* Handle null role\_data in services
* Select bootstrap node by list index not name
* adding swift middleware that is typically enabled by default
* Add firewall rules for manila api service
* Disable password reveal in horizon
* Fix race during major-upgrade-pacemaker step
* set url\_base option in static web middleware
* ceilometer compute agent needs restart on compute upgrade
* Reload haproxy configuration as a post-deployment step
* Temporary UCSM mapping files should be opened with write mode
* Use --globoff when downloading artifacts
* Enable internal TLS for Cinder API
* Removes deprecated overcloud VIP outputs
* Fixes incorrect reference to OpendaylightApiNetwork
* Add missing Barbican endpoint from tls-everywhere environment
* Ensure heat-domain hiera is in nodes that contain keystone
* Move per role Services defaults into environment file
* Add an optional extra node admin ssh key parameter
* Move db settings from manila-api to manila-base
* Include keystone authtoken config in manila-share service
* swift/proxy: remove swift::proxy::ceilometer::rabbit\_host
* Defaults kernel.pid\_max to 1048576
* nova: add missing vnc console port in firewall
* nova/libvirt: add missing ports for live-migration
* Fixup the start of swift services
* Add Sahara plugins list as a configurable parameter
* Ensure we update ceph and composable nodes
* Do not reference CephBase from CephExternal service
* Revert "Adjust MTU to compensate for VLAN tag issue"
* Add Neutron network type and VLAN ranges to network-environment.yaml
* gnocchi statsd should be able to send data to port 8125
* Update openstack-puppet-modules dependencies
* Rework gnocchi-upgrade to run in a separate upgrade step
* Change nova ram\_allocation\_ratio to match puppet-nova
* Enable internal TLS for Nova API
* Updated Nuage neutron plugin name
* Add SNMP role to the CephStorage nodes
* Fix Swift proxy pipeline ordering
* Add option to disable "d1" Swift device
* Set cinder's service name to httpd via t-h-t
* Add replacepkgs to the manual ovs upgrade workaround and fix a typo
* Fix usage of SwiftRawDisks
* Enables auto-detection for VIP interfaces
* Fix the rabbitmq/redis pacemaker resource timeouts on updates
* Clarify horizon allowed hosts setting
* Re-add NFS backend for Glance
* Use ::os\_workers fact instead of ::processorcount
* Composable Mistral services
* Add missing Ceph endpoints from tls-everywhere environment
* Remove double tcp\_listen\_options entries for rabbit
* Open port 16509 for libvirt for live migration
* Include ceilometer in swift proxy pipeline
* Fix the stonith property during upgrades
* Add special case handling for OVS upgrade in updates and upgrades
* Enable internal TLS for gnocchi
* Enable internal TLS for aodh
* Enable internal TLS for ceilometer
* Generate internal TLS hieradata for apache services
* Remove duplicate bind\_host from nova-api profile
* Bind mount files to run DiD in latest atomic host
* Have docker start script honor configuration
* Add Barbican to the overcloud
* Add parameters to run cinder over httpd
* Fix api\_extensions\_path in neutron-opencontrail environment
* Add apache workers to nova-api conditional
* Removes EnableODL heat parameter and fixes missing local\_ip param
* Set nova service\_name via t-h-t
* Enable proxy headers parsing for Neutron
* glance\_multiple\_locations when NovaEnableRbdBackend=true
* Disables Neutron ML2 config on Compute for OpenDaylight
* Ensure all HostsDeployments finish before puppet
* heat-api-cfn endpoint is created to RegionOne instead of regionOne
* Fixes missing provider mappings for OpenDaylight
* Pass heat domain admin password to keystone
* Modify the constraint to allow single quote for DPDK core list param
* Enable Glance multiple locations when using Ceph
* Split out hosts config deployment
* Move trunk service plugin to the proper list
* Prefill Sensu client custom config
* Enable proxy headers parsing for Ceilometer
* Enable proxy headers parsing for Aodh
* Enable proxy headers parsing for Gnocchi
* Disable IPv6 RAs & Autoconf For All (Not Just Default)
* Only set NovaWorkers in the non-default case
* Remove duplicate metadata keys from nova-api.yaml
* Add contrail services to the resource registry
* Special case non-matching ObjectStorage role port names
* Allow Glance API and Registry to be split
* Enable object versioning in Swift proxy
* Actually start the systemd services in step3 of the major-upgrade step
* Fix default Swift ring partition power
* Set the notification driver for glance
* Make step an integer on the pacemaker controller
* Add new environment for debug
* Remove unneeded \*\_enable\_backend hiera from Manila backends
* Add cloud names to hosts output
* Ceilometer Wsgi Mitaka->Newton upgrades
* Serialize AllNodesDeployment and UpdateWorkflow
* Specify the Ceph packages to be installed
* Enable firewalling by default on compute nodes
* Re-enable ManageFirewall by default
* Add Select per-network hostnames for service\_node\_names to role.role.j2.yaml
* Be more inclusive in insecure registry regex
* Add generic template for custom roles
* Set proper ceph config path for manila
* restore missing fluentd client functionality
* Renames OpenDaylight to OpenDaylightApi and splits out OVS configuration
* Fix OpendaylightApiNetwork key naming
* Open tripleo-heat-templates for Ocata
* Adds Environment File for Removing Sahara during M/N upgrade
* Select per-network hostnames for service\_node\_names
* j2 template per-role ServiceNetMapDefaults
* Move the main template files for defalut services to new syntax generation
* Include redis/mongo hiera when using pacemaker
* Disable all repos during rhel registration
* Update $service to $resource this variable does not exist in the context
* reload HAProxy config in HA setups when certificate is updated
* Change the rabbitmq ha policies during an M/N Upgrade
* Change rabbitmq queues HA mode from ha-all to ha-exactly
* Make keystone api network hiera composable
* j2 template role config templates
* Replace per role manifests with a common role manifest
* telemetry: remove coordination\_url hiera settings
* Telemetry: add redis\_password hiera parameter
* Fixed NoneType issue when monitoring-environment.yaml
* Fixed NoneType issue when logging-environment.yaml is used
* Add flag for internal TLS
* Add HAProxy TLS handled by certmonger as composable service
* Add option to specify Certmonger CA
* Balance Rabbitmq Queue Master Location on queue declaration with min-masters strategy
* Set ceph osd max object name and namespace len on upgrade when on ext4
* Add parameters to run nova over httpd
* Cinder volume service is not managed by Pacemaker on BlockStorage
* Move the rest of static roles resource registry entries to j2

5.0.0.0rc2
----------

* Fix typo in fixing gnocchi upgrade
* Use -L with chown and set crush map tunables when upgrading Ceph
* j2 template per-role things in default registry
* Use netapp\_host\_type instead of netapp\_eseries\_host\_type
* Relax pre-upgrade check for failed actions
* Fix races in major-upgrade-pacemaker Step2
* Update gnocchi database during M/N upgrade
* Move db::mysql into service\_config\_settings
* Full HA->HA NG migration might fail setting maintenance-mode
* Fix "Not all flavors have been migrated to the API database"
* Use correct password for keystone bootstrap
* Fix NTP servers hieradata
* Set manila::keystone::auth::tenant
* Fix predictable placement indexing
* Fix ignore warning on ceph major upgrade
* Use parameter name to configure gmcast\_listen\_addr
* Remove double definition of config\_settings key in keystone
* Bind MySQL address to hostname appropriate to its network
* Add metricd workers support in gnocchi
* get\_param calls with multiple arguments need brackets around them
* A few major-upgrade issues
* Fixing resources path in OpenDaylight
* Disable openstack-cinder-volume in step1 and reenable it in step2
* Start mongod before calling ceilometer-dbsync
* Remove deprecated scheduler\_driver settings
* Reinstantiate parts of code that were accidentally removed
* Add FixedIPs parameter to from\_service.yaml
* Added support for pass-through iSER configuration
* Add integration with Manila CephFS Native driver
* Move keystone::auth into service\_config\_settings
* Activate StorageMgmtPort on computes in HCI environment
* Remove hard-coded roles in EnabledServices output
* Neutron metadata agent worker count fix
* explicitly set fluentd service\_provider
* Deprecate the NeutronL3HA parameter
* Tolerate missing keys from role\_data in service templates
* No-op Puppet for upgrades/migrations according to composable roles
* Define step input as a Number type
* Glance worker count fix
* Provide for RAM-constrained environments
* Make defaults from roles\_data.yaml more robust
* Make apache-based services use network-dependent servername
* Make sure major upgrade script fails
* Set Neutron's metadata\_ip to the nova metadata VIP
* Add nova-metadata template
* RabbitMQ threads should be configured dynamically
* Enable L3 HA when multiple controllers and no DVR
* Add a function to upgrade from full HA to NG HA
* Use osd\_pool\_default\_\* puppet parameters when creating the pools

5.0.0.0rc1
----------

* M/N upgrade sahara-api fails to restart
* Set VNC URL parameters for nova-compute
* Rework the pacemaker\_common\_functions for M..N upgrades
* Add fluentd client service
* Move rabbit's clustering port away from the ephemeral port range
* Add mongo config settings in collector service templates
* Fix \_from\_pool\_v6.yaml str\_split
* Fix use of batch\_create in CephMon major upgrade template
* Add CephRgw to roles\_data.yaml
* Fixes the Ceph upgrade scripts
* Convert AllNodesExtraConfig to support composable roles
* Convert UpdateWorkflow to support composable roles
* Convert deploy steps to jinja2 loop
* Set client protocol for glance registry client
* Expose parameter to enable combination alarms
* Convert allNodesConfig properties to composable jinja2
* Move role ResourceGroups inside the jinja2 loop
* Add NetApp Manila driver integration and tidy up generic
* Unset Keystone public\_endpoint
* De-bracket vncproxy\_host in compute profile
* Configure Keystone credentials
* Add explicit entry for ctlplane IP in /etc/hosts
* Refactor upgrade checks
* Enable proxy header parsing for Manila
* Move per-role NetIpListMap's into jinja template loop
* Add support for deploying Ceph RGW role
* Add Heat's Cfn and Cloudwatch networks to ServiceNetMap
* Make Nova VNC Proxy service name match service net map
* Adjust MTU to compensate for VLAN tag issue
* Move AllNodesValidationDeployments into jinja template loop
* Move AllNodesDeployments into jinja template loop
* Convert overcloud.yaml to support jinja2 templating
* Remove \*ExtraConfig parameters from overcloud.yaml
* Move role deployment steps into puppet/post.yaml
* Generate VIP info for ctlplane VIP, not management
* Convert SwiftDevicesAndProxyConfig to composable format
* Populate vnc\_api\_lib.ini on compute nodes with OpenContrail
* Add support for configuring the OVS firewall driver
* Update capabilities-map.yaml
* Add keystone networks for the different endpoints
* Fix service config files having wrong map\_merge format
* Add base neutron service configuration
* Create entries for overcloud VIPs in /etc/hosts
* Add VIP names to allNodesConfig
* Add bootstrap\_node and vip\_data to hierarchy for all roles
* Update OpenContrail loadbalancer plugin value
* Fix aodh auth url to remove suffix
* Use Redis VIP when deploying with keepalived
* Set Redis VIP on all nodes
* Add service networks to hieradata
* add composable services for Contrail
* Move VIP-related data to AllNodesConfig
* Ironic: update default enabled drivers
* Remove mangling swift memcached list (now in puppet-tripleo)
* Composable per-service VIP hieradata
* Create NetIpListMap for all roles
* Remove hard-coded per-service rabbitmq hieradata
* Mv pacemaker and firewall out of controller
* Drop overcloud-without-mergepy.yaml (again!)
* Generate composable service node\_names lists
* Move snmp settings into composable services
* Ironic: configure disk erasing during cleaning
* Ironic: enable iPXE by default and make it configurable
* Ironic: enabled\_services moved from ironic to ironic::conductor manifest
* OVN heat templates
* Change NeutronWorkers default to result in previous behavior
* Add default for DeployIdentifier in nested templates
* Ironic: service catalog entries should not have a suffix
* Added environment file for SR-IOV deployment
* Pass cinder\_iscsi\_address without brackets
* Add missing reference to ExternalPort for DVR
* Last round of modern authtoken update
* Remove repeated apache-related hieradata
* Restart only services that need it
* Availability monitoring agents support
* apache: Remove product informations
* Add trunking plugin to list of default ML2 service plugins
* Add Ceph cluster health validation on upgrade
* Upgrade ceph-osd
* Add NeutronGlobalPhysnetMtu to neutron-base.yaml
* configure Heat with new authtoken parameters
* Mv Nova, Neutron, Horizon out of controller.yaml

5.0.0.0b3
---------

* Change CloudName default value to include domain
* Cleanup haproxy service from explicit services enablement
* Move ceph cluster config out of allNodesConfig
* Added DPDK environment file and nic configs samples
* Customize the reservation of memory for host processes
* Fix Ironic service bind IPs
* Upgrade ceph-mon
* Add hyperconverged-ceph environment to include CephOSD on computes
* Conditionally expose haproxy endpoints
* Add flag to assert that puppet manages the keystone endpoints
* Create composable mapping between enabled services and role ips
* Rename opendaylight service to opendaylight\_api
* Create hiera service\_enabled keys for enabled services
* Configure the pci\_passthrough\_whitelist via THT
* Fix debug parameter in gnocchi-base.yaml
* Modify sriov\_numvfs config from puppet-neutron to tripleo
* M/N upgrade fix galera restart
* Fix check of rpm-python
* M/N upgrade set scheduler\_host\_manager right
* Skip warning for required parameters
* Adds OpenDaylight composable service
* Move ceilometer api to run under apache wsgi
* Customize vcpu\_pin\_set in nova.conf
* Add global\_config\_settings to services' output
* Customize scheduler\_default\_filters (nova.conf)
* Move Redis, Memcached, Sahara, OVS agent out of role templates
* Add constraint to prohibit balance-tcp from BondInterfaceOvsOptions
* Mv ceilo, aodh, and gnocchi out of controller.yaml
* Mv keystone, mongo, manila out of controller.yaml
* Move Swift hiera settings into composable services
* Fix base service type inheriting gnocchi service templates
* Fix base service type inheriting ceilometer service pcmk templates
* Move glance/heat hiera settings to services
* Ironic: add missing haproxy and firewall configuration
* Added a new composable service for enabling DPDK on compute nodes
* Update authtoken parameters to match recent changes
* Fixes Neutron metadata parameters in THT
* Make OVS ARP responder feature configurable
* Set the default gnocchi driver to swift
* Move network bind IPs out of compute.yaml
* Clean up old functions
* Set NeutronL3HA to false when deploying DVR
* M/N upgrade fail to restart nova-scheduler
* Fix Flavor get\_param for Block Storage
* Enable usage of FQDNs for the endpoints
* Move Keepalived/HAproxy settings out of controller
* Fix check for MariaDB upgrade manual switch off
* Move out of roles any Ceph setting
* Move RabbitMQ settings out of controller.yaml
* Move MySQL settings out of puppet/controller.yaml
* Revert "Pin puppetlabs\_spec\_helper to 1.1.1"
* Pin puppetlabs\_spec\_helper to 1.1.1
* Permit usage of raw disks as backends for Swift storage
* Move resource registry override to enable-tls.yaml
* Don't trigger mariadb upgrade dump/restore when not needed
* Set cinder::api::bind\_host within service template
* Add deployment of CAs via hieradata
* Fix path to sahara templates
* Add sriov\_numvfs in THT
* SR-IOV nic agent changes in line with composable roles
* Disable Sahara by default
* Disable cinder-backup by default
* Enable gnocchi systemd services
* Add DefaultPasswords to composable services
* Pass ServiceNetMap to services
* Allow scheduler\_available\_filter to be customizable
* Remove OS::Tripleo::Services::ManilaShare: from puppet-pacemaker.yaml
* Make sahara run via systemd
* Use modulepath for Puppet
* Upgrade scripts to migrate aodh alarm data
* Add tripleo-firewall composable service
* Add tripleo-packages composable service
* gnocchi: use new authtoken parameters
* Update pacemaker\_resource\_restart.sh for new HA arch
* Remove unneeded net\_ip\_map dump into hieradata
* Remove deprecated net\_ip\_uri\_map output
* Remove deprecated net\_ip\_subnet\_map output
* Move neutron settings out of puppet/compute.yaml
* Mv Ceilometer settings out of puppet/compute.yaml
* Move Nova settings out of puppet/compute.yaml
* Remove NeutronEnableTunnelling from templates
* Rename NeutronServer to NeutronApi to align with ServiceNetMap
* Remove deprecated node\_ips hiera keys
* Convert ServiceNetMap to a nested template
* Decouple EndpointMap from SSL certificate params
* Set coordination url for gnocchi storage
* Update Ironic composable services
* Reinstate CloudDomain properties for Controller/Compute roles
* Convert EndpointMap to not require per-service VIP parameters
* Align node\_ips hiera keys with the service name
* Add hieradata for Manila v1 and v2 endpoints
* Add support for cinder v3 endpoint
* Add cinder-backup service as role
* Add parameter for enabling purging configuration files
* Allow map\_replace substitution of network names
* Remove KeystoneRegion from controller.yaml
* Move gnocchi's kestone::auth parameters to API profile
* Remove Compute role parameters from overcloud.yaml
* Move neutron-related options for nova to base profile
* Move nova's kestone::auth parameters to API profile
* Remove deprecated hdp plugin and add ambari
* Updates and fixes to NIC config template routes
* Remove static hieradata
* Support arbitrary attributes for the Ceph pools
* Move setting of Glance's keystone region to API profile
* Configure project name for keystone::auth resource in heat
* Move cinder's kestone::auth parameters to API profile
* Move neutron's kestone::auth parameters to server profile
* Remove outdated Neutron auth options
* Allow a fixed IP to be allocated to RedisVirtualIP
* Make deployed-server OS::Neutron::Port optional
* Add Sahara services to ControllerServices list
* Disable mistral services by default
* Update cinder-api with new authtoken parameters
* Add Aodh composable roles
* Disable the Mon/OSD/Client resources in puppet-ceph-external
* Remove keystone PKI related parameters
* Adding optional aci-opflex hiera data
* Set Coordination url for central agent
* Add environment file to enable DVR
* Next generation HA architecture work
* Add management network to list of networks to ping
* Replace hard-coded regionOne with parameter references
* Enable Manila integration - as a composable controller service
* Remove usage of ::nova class in THT
* Enable glance to use the SSL middleware
* Enable keystone to use the SSL middleware
* move hieradata/ceph into ceph-base service
* Convert AllNodesConfig hosts config to a map
* Add EnabledServices output to overcloud.yaml
* Update heat-agents setup files
* Add default value for \`RoleData\`
* Move constraints to their respective services
* We don't need to set a default for the CephX keys and cluster FSID
* Convert service\_name to underscore syntax
* Move nova constraints from controller manifest to each service
* Create role for the fake openstack-core resource
* Migrate Puppet Hieradata to composable services
* Move \*Flavor parameters into per-role templates
* Move \*Image parameters into role templates
* Remove KeyName parameter from overcloud template
* Move per-role \*SchedulerHints parameters into role templates
* Remove some properties from overcloud.yaml Controller group
* Filter null/None service names
* Force a tty for sudo in get-occ-config.sh
* Set MDS/OSD firewall ports from ceph-osd template
* Composable firewall rules
* Cleanup templates from the shared CephCluster config
* Convert Swift ringbuilder to composable services format
* Move nova::db data within service template
* Add 'service\_name' to composable services
* Fixes type and description for NeutronL3HA
* Explicitly set nova and neutron host on controllers
* Move mysql::host param from MysqlInternal to MysqlNoBracketsInternal
* Deploy Horizon with composable apache service
* Remove unused redis\_vip parameter
* Include new apache pacemaker profile
* Fix KeystoneWorkers default value
* Fix ceilometer auth url for compute
* Remove the ControllerCount contraint
* Remove ::nova::cron::archive\_deleted\_rows
* Fix gnocchi::storage::ceph::ceph\_keyring
* gnocchi: configure db\_sync command in the profile
* Remove enable\_load\_balancer on nonha manifest
* Remove useless mongodb variables in ha manifest
* Don't collect gnocchi-service tag in THT
* overcloud\_compute.pp: remove nova\_config params
* Add MysqlNoBracketsInternal to enable-tls.yaml
* Move MySQL Galera within composable services
* Composable Pacemaker service
* Ceilometer Compute Agent composable service
* Remove ceilometer mysql db hieradata
* Fix network-isolation.yaml to stop clobbering Management net
* Composable OpenContrail compute plugin
* Composable Plumgrid compute plugin
* Composable Midonet compute plugin
* Composable Nuage Compute Plugin
* Composable Neutron Core Compute Plugin
* compute: moving out iscsi bits, now in puppet-tripleo
* Gnocchi composable roles
* Composable Horizon service - tripleo-heat-templates
* Use already Deployed/Installed servers
* Missing CephClientKey parameter in puppet-ceph-devel and storage-environment
* Re-enable Ceilometer composable roles for controller
* Add a second proxy-logging middleware entry to swift-proxy
* Repurpose KeystoneWorkers add keystone::wsgi::apache::threads
* Move ironic::db data within service template
* Move neutron::db data within service template
* Move sahara::db data within service template
* Move heat::db data within service template
* Move cinder::db data within service template
* Move glance::db data within service template
* Composable Midonet for Neutron
* Include bulk in swift proxy pipeline
* Move keystone::db data within service template
* Pass MysqlVirtualIP without brackets to EndpointMap
* Add StepConfig to docker compute-post.yaml
* Restore the NtpServer parameter name

5.0.0.0b2
---------

* Convert AllNodesExtraConfig to OS::Heat::None
* Remove config\_identifier from all\_nodes extraconfig examples
* neutron: remove tenant MTU configuration options
* Add kernel service
* Combine BootstrapNodeDeployment with AllNodesDeployment
* Customize "supported\_pci\_vendor\_devs" for SR-IOV
* Set os-refresh-config timeout to 4 hours
* Template param for what command occ runs
* Remove depends\_on: Networks from ControllerServiceChain
* Replace NodeConfigIdentifiers with DeployIdentifier
* overcloud\_volume: cleanup unused Puppet code
* volume: deploy snmp using composable role
* Switch Ceph Monitor/OSD/Client/External to composable roles
* pacemaker: don't override Service resource for Nova & Neutron
* Remove NFS bits from overcloud\_compute manifest
* Add example of creating per-node os-net-config mappings
* Stop no-opping PackageUpdate on upgrade
* Pass RoleData into -post.yaml stacks
* Output generic role\_data in services.yaml
* Add Rabbit/epmd port to firewall
* Use create-legacy-resource-types during gnocchi-upgrade
* First iteration of libvirt and nova-compute as a composable services
* Wire NTP and Timezone services into BlockStorage nodes
* Composable Timezone service - ObjectStorage
* Composable Timezone service - CephStorage
* Composable Timezone service - Compute
* Composable Timezone service - Controller
* Configure BlockStorage services via resource chains
* Dump and restore galera db during major upgrades
* Increase cluster sync timeout for M->N major upgrades
* Drop unused VIP params to controller.yaml
* Convert SNMP configuration to composable services format
* Basic support for deploying Ironic in overcloud
* Don't set selinux in 'permissive' mode on CephStorage nodes
* Add Management net to ips-from-pool-all example
* Convert swift storage to composable services
* Convert noop NetworkExtraConfig to OS::Heat::None
* Disable stonith temporarily during upgrades
* Fix ceilometer auth url
* Increase RabbitMQ maximum file descriptors
* Revert "Ceilometer composable roles for controller"
* Allow neutron\_options customization for dashboard
* Revert "Pin puppet-lint-absolute\_classname-check to 0.1.3"
* Ceilometer composable roles for controller
* Pin puppet-lint-absolute\_classname-check to 0.1.3
* Update neutron ml2 class
* Split Heat pacemaker roles into separate services
* Heat upstream default policy.json works in devstack
* Composable roles within services - NTP - ObjectStorage
* Composable roles within services - NTP - CephStorage
* Composable roles within services - NTP - Compute
* Composable roles within services - NTP
* Parametrize and increase default of swift-proxy node\_timeout
* Change Aodh to use own backend
* Enable firewall by default on the overcloud
* Allow sahara ports in firewall
* Allow pacemaker ports in firewall
* Remove nova::db classes, moved to puppet-tripleo
* Remove ::nova::network::neutron, now in puppet-tripleo
* Create Cinder backup pool in Ceph
* Add IPv6 support for the management network
* Stop using deprecated port param in firewall rules
* Drop extraconfig for neutron-opencontrail.yaml
* Composable opencontrail plugin
* Drop extraconfig for neutron-nuage.yaml
* Composable neutron nuage plugin
* Colocation make a group for pcmk nova resources
* Stop passing charset=utf8 for neutron database connection option
* Allow to manually disable post-puppet restarts
* Add gateway\_ip in OS::Neutron::Subnet
* Enable nova-compute as a composable service
* Enable nova-vncproxy as a composable service
* Enable nova-consoleauth as a composable service
* Enable nova-scheduler as a composable service
* Enable nova-api as a composable service
* Drop extraconfig for neutron-plumgrid.yaml
* Composable Neutron Plumgrid plugin
* Move Neutron core and service plugin to base
* Composable roles within services - MongoDB
* neutron: stop include ::neutron & ::neutron::config
* Remove unused Neutron parameters from roles
* composable neutron ml2 and ovs agent
* composable neutron server
* Replace no-op TLS stacks with OS::Heat::None
* set aodh auth\_url explicitly
* Remove nova-cert from TripleO
* Enable nova-conductor as a composable service
* Explode Loadbalancer role into HAproxy + keepalived
* Switch Cinder Api/Scheduler/Volume to composable roles
* Composable roles within services - Redis
* Composable Sahara services
* Enable proxy header handling for nova
* Take 'host' parameter from neutron manifest into use
* Take 'host' parameter from nova manifest into use

5.0.0.0b1
---------

* Cleanup hieradata to reduce Puppet warnings
* Adjust UpgradeLevelNovaCompute rpc messaging pin to mitaka
* Don't overwrite ceph osd\_journal\_size
* Configure ObjectStorage services via resource chains
* Fix inconsistency with ringbuilder/storage steps
* Convert Swift proxy to composable services format
* loadbalancer: update hiera parameters for HAproxy/keepalived split
* compute: use new param for live\_migration\_tunnelled
* Pass MysqlVirtualIP via EndpointMap
* Configure ComputeServices via resource chains
* Remove custom SSL-related resource for cinder
* Enable proxy header handling for cinder
* Enable proxy header parsing for heat
* Remove the delay resource and its constraints
* Set rabbitmq loopback\_users explicitely
* Configure CephStorage services via resource chains
* Fix ceph keyring setting for gnocchi
* Update management\_from\_pool template version to 2015-10-15
* Adds memcached as a composable service
* composable heat services
* Deploy Loadbalancer as a composable role
* Tighten the access rules for galera
* Deploy RabbitMQ as a composable role
* Dump IPs configuration as hieradata
* Pass enabled and manage\_service to Neutron/L3 when Pacemaker
* Add step to ObjectStorage RingBuilder deployment
* composable neutron metadata service
* composable neutron l3 service
* Move dhcp agent maps to OS::Heat::None to resource\_registry
* Remove ControllerClusterConfig from overcloud.yaml
* Remove tenant\_id from nova v2.1 endpoint
* Remove Nova EC2 deployment
* Ensure manage\_service and enabled are false for Pacemaker
* add heat-api-cfn to endpoint map
* composable neutron dhcp service
* deployment: drop step6
* deployment: remove Step7
* Set nova neutron auth back to 'v3password'
* Change ping wait flag
* Use docker-cmd hook
* Combine parameter\_default fields
* Pass parameters to manage endpoints via puppet
* Leave start/stop/restart for Keystone and Glance in charge to the role
* Remove calls to ::mysql from the manifests
* Optimize Nova disk\_cachemodes and hw\_disk\_discard options for RBD
* Disable VIPs before stopping cluster during version upgrade
* Use str\_split to compute netmask in \_v6 port templates
* Wire missing RabbitClientPort into Glance API role
* Additional parameters for Nuage Neutron plugin integration
* Fixes ovs bonding option
* Fix the Sahara public endpoint and make it point to the Public VIP
* Run sync in step 3 when $sync\_db
* Fix the ManagementNetValueSpecs param type
* Fix controller-no-external.yaml in bonded configs
* The Sahara SSL endpoint was announced on the wrong port
* Use 'deeper' hiera\_hash merge behavior for all roles
* composable glance services
* Fix ControllerExtraConfig parameter name
* Enable client address in Horizon's logs
* Make HeatWorkers param affect the engine workers
* Fix Neutron enable\_\*\_agent\* Hiera parameters
* Retain existing ComputeHostnameFormat when upgrading older envs
* Add GlanceRegistry to the endpoint map
* Keep setting backend\_host to 'hostgroup' for rbd backends
* Add ping\_retry function
* Refactor HAproxy and VIP creation
* Make sure openstack services are dependent on openstack-core
* Add net-config-static.yaml
* Add missing ManagementIpSubnet
* Document IPv6 syntax for GlanceFilePcmkDevice
* Always use parameter\_defaults in environment files
* Deploy Gnocchi as a Ceilometer metrics storage backend
* Fix distinguishing between stack-create and stack-update
* Update .sh references from openstack-keystone to openstack-core
* Don't have separate protocols/ports for Keystone v3
* composable keystone services
* Replace extraconfig/tasks/noop.yaml w/ Heat::None
* Remove network/noop.yaml, use OS::Heat::None
* ha/glance-fs: avoid a race condition
* Add removal of the /etc/resolv.conf.save file for +bug/1567004
* Revert "Ping retry"
* Use a different ceph key for admin/client user
* Add network ExtraConfig hook
* Increase corosync token timeout
* Reload haproxy after injecting certs w/o pcmk too
* Change /etc/hosts format and add domain
* Nova needs the proper volumes to use Cinder
* Filter for local nodes in check\_resource function
* Restart haproxy after configuring SSL certs
* Disable Nova v3 API
* Configure ControllerServices via resource chains
* Add EndpointMap as output
* Updates ControlPlaneSubnetCidr to be a string
* Remove hack the pulls latest docker
* Centos gives /dev/pts/ptmx the wrong perms
* Enable galera replication for Mariadb 10.1
* Ping retry
* compute: restart OVS agent on neutron.conf changes
* change the default satellite tools rpm repo
* Don't restart Pacemaker-managed services from Puppet
* Increment step count to include ringbuilder
* Set UpdateIdentifier for upgrade converge, to prevent services down
* Remove password default for AodhPassword

2.0.0
-----

* Add quotes around the cinder\_iscsi\_ip\_address value
* Wire redis\_password to the tripleo module
* configure horizon with memcached ipv6 when needed
* Add simple parameter test to yaml-validate.py
* Pass iSCSI bind address in brackets to Cinder when IPv6
* Add systemctl reload haproxy to the pacemaker\_resource\_restart.sh
* Add ExtraConfig example that always runs on update
* nonha: fix memcached servers string in nova.conf for ipv6
* Fix satellite registration for http or https
* Remove the glance/rbd user name from static hieradata
* Fix redis coordination url
* Allow option to disable Swift ring management
* Remove CephStorageCount
* Remove unused user resource
* Deploy Aodh services, replacing Ceilometer Alarm
* Comment out the ManagementPort in external-loadbalancer-vip.yaml
* PLUMgrid Neutron integration
* Remove GlanceRegistry from EndpointMap
* Remove default for the RabbitMQ password
* compute: use live\_migration\_tunnelled
* Add database directory mount for openvswitchdb
* compute: include VIR\_MIGRATE\_TUNNELLED when doing VM shared storage
* Support the deployment of Ceph over IPv6
* Fix vncproxy\_host for IPv6
* Allow the vnc server to bind on IPv6 address on computes
* Surround MongoDB IPs with braces in the connection string if IPv6
* Upgrades: quiet yum upgrade on cinder nodes
* Keystone domain for Heat
* Wire in HAProxy stats user and password
* Enable predictable IPs on non-controllers
* Remove unused Neutron Agents container
* Allow the containerized compute node to spawn larger VMs
* Ensure access to Redis is password protected
* Remove forced rabbitmq::file\_limit conversion to string
* Upgrades: object storage node upgrade fix
* Fixup systemctl\_swift stop/start  during the controller upgrade
* Upgrades: initialization command/snippet
* Make External Load Balancer templates work with IPv6
* Add Rabbit IPv6 only support
* Change the CinderISCSIHelper to lioadm
* Update enable-tls.yaml with new endpoints
* Add a ceph-storage node upgrade script for the upgrade workflow
* Increase default netdev\_max\_backlog to 10x
* Fix typos
* Store events in Ceilometer
* Set host in nova.conf for compute nodes
* Fixup the memcached servers string in nova.conf for v6
* Fixup swift device string to delimit the ipv6 address with []
* Add an environment to use a swap partition
* Revert "Deploy Aodh services, replacing Ceilometer Alarm"
* Set /64 cidr\_netmask for pcmk VIPs when IPv6
* Allow to enable IPv6 on Corosync
* Make the Neutron subnet ipv6\_{ra,address}\_mode configurable
* Add IPv6 versions of the Controller NIC configs
* Fix rabbit\_hosts list for glance-api for IPv6
* Use MysqlVirtualIPUri for nova\_api and sahara database
* Make AllNodesExtraConfig depend on the validation deployments
* Parameterize the heat-docker-agents image
* Run keystone-manage bootstrap for HA deployment too
* Add IPv6 Support to Isolated Networks
* Allow for usage of pre-allocated IPs for the management network
* Updated the heat\_template\_version
* Deploy Aodh services, replacing Ceilometer Alarm
* Function library for major upgrades
* Introduce a UpgradeScriptDeliveryWorfklow as part of tripleo upgrades
* Upgrade of Cinder block storage nodes
* Moves the swift start/stop into the common\_functions.sh file
* Upgrades: install zaqarclient
* Upgrades: quiet yum update
* Support adding a swap file to overcloud nodes
* endpoint\_map: bump nova api from 2.0 to 2.1
* Move ordering constraints from httpd to openstack-core
* controller/ha: disable keystone-manage bootstrap
* Cisco nexus config template - obsolete parameter (replay count)
* Add Satellite 5 support
* Add missing createUser line to /etc/snmp/snmpd.conf
* Use set -e for validation-scripts/all-nodes.sh
* Add support for DeployArtifactURLs
* Write the compute upgrade script for tripleo major upgrade workflow
* Add NovaVNCProxy back into endpoint\_map
* Set notification driver for nova to send
* Enable notifications on the overcloud
* Add a sample network-environment.yaml file to environments
* Emits a different hostname for each network the node is on
* Add BondInterfaceOvsOptions parameter to net-config-bond.yaml
* Nova RPC unpinning
* Generate the endpoint map statically
* Change the default value for NetworkNexusVxlanGlobalConfig
* Permits configuration of Cinder enabled\_backend via hieradata
* Add UpgradeLevelNovaCompute parameter
* Introduce update/upgrade workflow
* Add resources for major upgrade in Pacemaker scenario
* Nova Neutron configuration now uses keystone v3 endpoint
* Add meta notify=true to rabbitmq resource
* Add extra config yaml files for big switch agents
* Update nova::network::neutron variables to drop deprecated parameters
* Use the class param to configure Cinder 'host' setting
* Add sysctl settings to disable IPv6 autoconfig and accept\_ra
* Add TripleO Heat Template Parameters for Neutron Tenant MTU
* Make injected CA file readable by others
* Wire the Glance rbd user correctly into the external Ceph template
* Pass public\_addr to ceph::profile::params instead of ceph::mon
* Update the path to the Docker file
* Minor fixes to allow local docker registry usage
* Add missing : in hieradata key name
* Remove DNS hack
* Remove start-delay=10s for the Nova resources monitor
* Enable heat-manage purge\_deleted cron job
* Rename tox env to pep8
* Nova now requires an api database to be created
* Install mongodb client package
* puppet: run keystone in wsgi
* Increase size of connection tracking table
* Update Dell Storage Center api port setting
* Set 'host' globally in Cinder instead of per-backend basis
* Fixed typo in Dell Equallogic Cinder settings
* Pass -q option to yum
* Makes the iSCSI initiator name unique for compute nodes
* Increase default Cinder LVM backing file to 10G
* Add HostnameMap to allow granular control of hostnames
* Fix endpoint names
* Update yaml-validate.py to accept files or directories
* Allow the deployer to pick a predefined IP for VIPs
* Increase galera sync timeout in yum\_update.sh
* Split pacemaker common check\_service function out of \_restart.sh
* Use timeout to check for services status
* Remove empty value for wsrep\_notify\_cmd
* Enable SSL middleware for cinder
* neutron: delete by default router/dhcp namespaces
* puppet: allow config of ad-hoc Neutron settings
* puppet: allow config of ad-hoc Cinder settings
* puppet: allow config of ad-hoc Heat settings
* puppet: allow config of ad-hoc Glance settings
* puppet: allow config of ad-hoc Ceph settings
* Removing Sahara password default
* OpenContrail heat templates
* Rename validate tox env to linters
* Don't write CLOUDNAME to the hosts file
* Fix MidoNet errors
* Create linux bridge vlans environments
* Allow container template to recognize an update
* Adds v6 capability to the deploy validation test (pings)
* Fix tunnel\_types hieradata on compute nodes
* Fix neutron-nova notifications
* Let Puppet update all packages on non-controllers
* Allow vncproxy to work with ssl enabled
* Bind Galera on a hostname for compat with IPv6 addresses
* Enable keystone handling of X-Forwarded-Proto header
* Configure keystone public\_endpoint
* Convert port cidr splitting to str\_split
* Use pymysql database driver for OpenStack DBs
* Use service tenant for ceilometer
* Sahara Integration
* Remove not needed completion-signal
* Switch for Keystone DB cron job
* Enable the ML2 port security extension driver by default

1.0.0
-----

* Enable configuration of Neutron QoS
* Enable Dell Storage Center iscsi Backends in Cinder
* Remove deleted Cinder rows
* updating enable\_ceph conditions for controller
* Add ExtraConfig to cinder storage role
* Bump the pacemaker service op\_params to 200s for start and stop
* Ensure cluster remains stable during services restarts
* Use new heat-docker-agents images
* Add TimeZone parameter for all node types
* Adding ManagementIpSubnet to linux bridge net conf
* Network Isolation support for containerized compute
* Wait for cluster to settle in yum\_update.sh
* Remove deleted Nova rows
* MidoNet heat templates
* Fix yaml validation errors in multiple-nics templates
* Add all isolated networks to all nodes
* Add Management Network For System Administration
* Align template defaults with the client
* Convert JSON generations from bash to python
* Update the capabilities map file name to be more consistent
* Update VNI and TunnelID ranges
* Add capabilities map
* Add fixup for pcs order constraints after update to new templates
* Wire Neutron ML2 plugin and OVS agent settings as arrays
* Fix description of control plane route parameter
* Add update yaml backward compatibe with PublicVirtualIP on ctlplane
* Add sample environment file to document usage of predictable IPs
* Allow for usage of pre-allocated IPs for the controller nodes
* Fix typo in HostsEntry output description
* Set swift replicas = min(device\_count, replicas)
* Pacemaker maintenance mode for the duration of Puppet run on update
* Switch to POLL\_TEMP\_URL for config transport
* Add SoftwareConfigTransport for switching transports
* pacemaker: run neutron-server-start-wait-stop only at step 4
* Fix wrong keypair parameter description
* Set the name property for all deployment resources
* Remove unsafe "unset" defaults
* Remove deprecated overcloud-resource-registry.yaml
* Implement Workers parameters
* Enable per-role SchedulerHints
* Enable TLS in loadbalancer if cert path is detected
* Change for configuring use\_forwarded\_for value for Nuage
* Remove Ceilometer Alarm from the overcloud
* Making nova parameters configurable for nuage-metadata-agent
* Add output for host entries
* Add option to add metadata for the overcloud nodes
* Drop os-apply-config. No longer maintained
* Rename overcloud-without-mergepy to overcloud
* Add pcmk constraints against haproxy-clone only if applicable
* Introduce domain configuration through parameter
* Fix default route in multiple nics net isolation templates
* Changes for configuring Nuage
* Changes for configuring Nuage
* Minor fixes to TLS related resources
* Make enabling of controller services configurable
* Drop deprecated templates/Makefile/merge.py
* Output the SSL Certificate and Key modulus
* Enable trust anchor injection
* Apply mongod timeout via cib-push
* Update typos
* Update: clean keepalived and radvd instances after pcs cluster stop
* Make load balancer deployment optional via template param
* Add net\_vip\_map\_external to be used for an external balancer
* Sample environment with old ServiceNetMap value
* Fixup neutron constraints in older overclouds before updating
* Inject TLS certificate and keys for the Overcloud
* Allows for customization of NetworkDeployment actions
* Point registry at tripleoupstream
* Change default host reserved memory to 2048MB from 512MB
* Implement Advanced Firewalling support
* Add constraints and timeouts from file in single step
* Added libvirt\_vif\_driver, ovs\_bridge and security\_group\_api parameters
* neutron: enable nova-event-callback by default
* Implement Neutron enable\_isolated\_metadata parameters
* Verify galera is sync'd in yum\_update.sh
* Add simple linux bridge as network environment
* Add support for enabling L2 population in Neutron
* Make all network ports type to consume FixedIPs
* Pass ceph::pool arguments when calling class
* Fix cinder error when CinderNfsMountOptions option is absent
* Set start/stop pacemaker resource timeouts for updates
* Bump further the stop/start timeout for pcmk/systemd services
* Enable Equallogic Backends in Cinder
* Add DeployIdentifier overcloud parameter
* Change default bond-mode
* Add missing constraints in yum\_update.sh
* Add the GlanceRegistry and Horizon endpoints to EndpointMap
* Expose the IP of the Endpoints
* Make CloudName available for Endpoints
* Refacter Endpoints into EndpointMap
* Change the Atomic image name so it's less specific
* Nova-libvirt needs to bind to /sys/fs/cgroup
* honor the rabbit user and password provided
* Set default start/stop timeout for pcmk services to 95s
* Pin docker version for atomic at 1.8.2
* Fix the wrong selinux context when glance uses nfs backend
* Add support to tag patch port for Cisco Nexus1000v VSM bringup
* Allow customization of Ceph client user
* Allow customization of the Ceph pool names
* Make puppet manifests compliant with Puppet 4.x
* Add Puppet 4.x lint checks
* Add network templates for multiple NIC configuration
* Revert "Manage keystone initialization directly in t-h-t manifests"
* Do not enforce start timeout to 90s for neutron-server
* Manage keystone initialization directly in t-h-t manifests
* Create keystone roles and admin user from t-h-t manifests
* Fix dependency for Ceilometer agent when using MySQL
* Add local docker registry support
* Update docker compute environment to use json config
* compute/ceilometer: use internalURL for os endpoint type
* Fix password issue with mysql address for ceilometer
* Add validation to ping the default gateway(s)
* Ensure ping returns after 5mins timeout
* Align some defaults with with ControllerCount default
* Allow ctlplane network or ID, and default to "ctlplane"
* Update overcloud template description and Count constraints
* Support NFS backend for Glance (via Pacemaker)
* controller/ceilometer: use internalURL for os endpoint type
* nova: set catalog\_info to InternalURL
* Ensure memcached resource uses interleave=true
* Sync httpd vhost settings in between pcmk and non-pcmk scenarios
* Cisco Nexus ML2 MD: Need unique key for server level keys in hieradata
* Set Django cache backend to Memcached instead of LocMemCache
* Allow a user to specify a comma separated list of ntp servers
* Add more components virtual ip mapping into controller
* Parameterize RabbitMQ FD limit
* Allow a deployer to specify HAProxy syslog server address
* Puppet / Compute: allow to run Ephemeral only storage with RBD
* Set shared secrets, keys and passwords as hidden
* Allow one to specify horizon ALLOWED\_HOSTS
* Ensure httpd is not enabled by puppet on system boot
* Update README.rst
* Ensure Glance API reaches Registry using the service VIP
* Docker compute role configured via Puppet
* Rework pacemaker constraints from ovs and netns cleanup agents
* Fix MariaDB account removal race condition
* Move os-apply-config templates into a directory
* Drop stale base, nagios, debian-mirror templates
* Drop examples
* puppet: allow to configure any ceilometer param with Hiera
* Deprecate the undercloud templates
* Move RHEL (un)registration to NodeExtraConfig
* Wire in NodeExtraConfig interface
* Force stop a single node pacemaker on yum update
* Make package upgrade pacemaker-aware
* Ensure present/latest for puppet driven package updates
* Write package names out to flat files
* Add DnsServers param to network config templates
* Allow enabling debug mode for config management (Puppet)
* Enable Cisco N1KV driver
* Adding core\_plugin, type\_drivers and service\_plugins parameters
* Add CephStorageExtraConfigPre resource
* Allow a user to set specific setting per host
* Example of passing per-node config data in pre\_deploy config
* Remove nameserver lookup dependency from Cisco ML2 CollectMacConfig
* Put staticweb middleware after keystoneauth in proxy pipeline
* swift::storage::all deprecation cleanup
* Enable glance-api show\_image\_direct\_url for COW
* Rename -puppet.yaml templates
* Remove default\_floating\_pool in compute.yaml
* Pass default\_floating\_pool into nova::api class
* Configure ctlplane network with a static IP
* Support new form of servers config for ML2 cisco nexus allnodes config
* Port Cisco Nexus/UCSM ExtraConfig to AllNodes
* Add "AllNodes" ExtraConfig interface
* Big Switch Neutron ML2 plugin integration
* Enable Cisco Nexus and UCSM plugins
* Add YAML sanity check
* Set NetValueSpecs parameter types to Json
* Don't add 'host' parameter to cinder.conf
* Set default KeystoneAdminApiNetwork to ctlplane
* Keystone network isolation fixes
* Allow 'ctlplane' to be used within Net IP Maps
* Add NodeAdminUserData interface for "heat-admin" user
* Add redis ordering with ceilometer-central
* Set pacemaker default resource-stickiness
* Re-add constranits between nova-api and nova-novncproxy
* Set the nova scheduler ram\_allocation\_ration to 1.0
* Add 4 pacemaker constraints for keystone
* Add environment for isolated networks without tunneling VLAN
* Consume the NeutronMechanismDrivers from the hiera data
* switch to vxlan by default
* Enable Keystone notifications
* Remove hardcoded bridge name in bonded compute NIC config
* Support for using external Ceph clusters
* Support network isolation without external nets
* Ensure mysql root can only connect from localhost
* Wire in Compute pre-deployment extraconfig
* Provide a sample storage environment file
* Add a default setting for BondInterfaceOvsOptions
* network validation to ping test each interface
* Keystone token flushing
* Set default external port to noop for puppet
* Use 'public' instead of 'nova' as default floating pool name
* Convert PublicVirtualIP to new port creation method
* Provide list of memcached servers to Nova
* Drive DB initialization via Hiera
* Increase default start timeout for Pacemaker from 20s to 90s
* Puppet: wire in tripleo::packages
* Fix Puppet Configuring NetApp Cinder Backend
* Set rabbitmq heatbeat timeout threshold to 60
* Allow overlapping IPs in Neutron
* Ensure CinderStorage nodes use internalURL as catalog\_info
* Ensure compute nodes use internalURL as catalog\_info
* Wire in hieradata overrides via ExtraConfig for CephStorage
* Wire in hieradata overrides via ExtraConfig for ObjectStorage
* Wire in hieradata overrides via ExtraConfig for BlockStorage
* Wire in hieradata overrides via ExtraConfig for NovaCompute
* Increase default max\_connections for MySQL from 1024 to 4096
* Enable hieradata ExtraConfig overrides for Controller
* Ensure SELinux is permissive on Ceph OSDs
* neutron-server: Remove start/sleep/stop pattern
* Provide manage\_service to neutron::agents::ml2::ovs
* Adds the NeutronTunnelIdRanges and NeutronVniRanges parameters
* Allow a user to disable MongoDB journaling
* Allow configuration of MySQL max\_connections setting
* RHEL registration shouldn't use attach with activation key
* Use parameter\_defaults in env files
* Adds the NeutronDhcpAgentsPerNetwork parameter
* Set heat::instance\_user to empty string
* Add services to ServiceNetMap to select hostnames resolution network
* Add RemovalPolicies param for resource groups
* Output internal API VIPs
* Don't set heat\_stack\_user\_role to empty string
* NFS backend for Cinder
* Add NeutronExternalNetworkBridge parameter
* Configure Heat's ec2 auth uri correctly
* Wire in Controller pre-deployment extraconfig
* Allow customization of included classes via hieradata
* Add IP to HAProxy kind=Optional constraint
* Removes the NeutronScale resource from controller pcmk manifest
* Drop swift ceilometer middleware for pacemaker
* Map NovaEnableRbdBackend to ephemeral\_storage from nova::compute::rbd
* controller: enable HTTP Glance backend
* Allow to enable fencing, pass through fencing config
* Remove unwanted constraints between the Redis vip and Ceilometer
* Add a default route to the external isolated network
* Remove bridge from nic1 in network bond templates
* Add ControlPlaneNetwork to vip.yaml
* Include Redis VIP in example environment
* Add missing Pacemaker constraint against Keystone
* Enable mysql\_clustercheck for Pacemaker scenario
* Ensure mysql/mariadb service is not enabled on boot
* Set MariaDB package name in RedHat.yaml
* Increase mongodb\_conn\_validator timeout to 600
* Do not set explicitly galera\_master to any of the nodes
* Add special handling of neutron-server service startup to fix race
* Fix MongoDB connection url configuration in Ceilometer
* Add support for isolating block storage nets
* Drop swift ceilometer middleware
* Leave control of Redis balancing in static hieradata
* Enable httpd balancing for Horizon
* Use SoftwareDeployments for consistency in extraconfig
* Enable loadbalancing of the Redis VIP, defaults to False
* Bind novncproxy to its own network
* Allow control of hostname formatting
* Fix allocation pool in external.yaml
* Configurable vlan\_id's for isolated networks
* Make puppet-applying \*Post resources depend on hieradata
* Add $hostname.localdomain alias to /etc/hosts
* Remove Redis VirtualIP from params and build it from Neutron::Port
* Flexible IP allocations for isolated nets
* Fix Redis bind setting to use redis\_network
* Adds horizon to pacemaker when puppet-pacemaker is enabled
* Remove external bridge from Compute nodes
* Rename ServiceNetMap: NeutronLocalIp
* Isolate network traffic for Nova VNC proxy
* Add support for isolating swift storage nets
* Add BondInterfaceOvsOptions parameter
* network/config storage role fixes
* Config & deployments to update overcloud packages
* Update mongodb implementation to reflect master
* Enable use of coordination\_url in ceilometer
* Add Redis as a Pacemaker resource
* Enable NetApp Backends in Cinder
* Fix list of type\_drivers for ML2 plugin
* Wire Neutron VLAN ranges param as array to puppet
* Isolate the Ceph storage and storage\_mgmt nets
* configure pacemaker VIPs for isolated networks
* Set glance\_api\_servers for cinder
* puppet controller role: per service VIP settings

0.8.6
-----

* Pass NeutronEnableTunnelling to controllers
* Set VXLAN tunnels range to match GRE range
* Remove DefaultSignalTransport from top-level template
* Remove NO\_SIGNAL from ControllerClusterConfig
* Remove NO\_SIGNAL from Controller|ObjectSwiftDeployment
* Remove NO\_SIGNAL from ControllerBootstrapNodeDeployment
* Make CephStorageDeployment depend on NetworkDeployment
* Remove NO\_SIGNAL from puppet role templates
* horizon/keystone api should use internal\_api NW
* Add virtual IPs for split out networks
* Add PortName to ports stacks
* Combine Heat API networks into single net
* Make all-nodes Ip networks configurable
* Wire ServiceNetMap as a top level parameter
* Wire Neutron allow\_automatic\_l3agent\_failover param to module
* os-net-config templates to configure vlans
* Neutron: Remove hiera lookup to controller\_host
* Add Heat as a Pacemaker resource
* Add Ceilometer as a Pacemaker resource
* Add Nova as Pacemaker resource
* Adds neutron-server and agents as pacemaker resources
* Map Mysql to isolated networks
* Use heat inputs for network port settings
* Specify mariadb package name to meet puppetlabs-mysql requirement
* Fix colocation order to match ref-arch
* Add keystone-glance-registry constraint
* Add a keystone-cinder-api constraint
* Use the proper parameter to set --master
* Add Memcache as a Pacemaker resource
* Map Horizon, Redis, Rabbit, memcached to isolated nets
* Map Swift services to isolated networks
* Map Nova services to isolated networks
* Map Heat services to isolated networks
* Map Neutron services to isolated networks
* Map Keystone services to isolated networks
* Map Glance services to isolated networks
* Fix grammar nits in bond-with-vlans templates
* Map Cinder services to isolated networks
* Map Ceilometer services to isolated networks
* os-net-config templates to configure vlans on bond
* An environment file to enable network isolation
* Switch net-config templates to use OS::stack\_id
* Update neutron local\_ip to use the tenant network
* Add a network ports IP mapping resource
* Add isolated network ports to block storage roles
* Add isolated network ports to swift roles
* Add isolated network ports to ceph roles
* Add isolated network ports to compute roles
* Add isolated network ports to controller roles
* Add isolated net parameters to net-config stacks
* Add a ports (ip address) abstraction layer
* overcloud stepped deployment environment
* Wire in optional network creation for overcloud
* Define Glance Pacemaker resources on $pacemaker\_master node only
* Remove unused EnablePacemaker param from templates
* Add Keystone as Pacemaker resource
* Align puppet Controller post-deploy Deployment names
* Add Glance as Pacemaker resource
* Add Cinder services as Pacemaker resources
* We don't need to create the clustercheck user anymore
* Start non-pacemakerized services in step 4
* Overcloud: bump HOT version to 2015-04-30
* Move sysctl settings into hieradata
* Use clustercheck script to control galera-ready
* Ensures mongodb configuration only happens if mongodb is needed
* Prepare for adding OpenStack services to Pacemaker
* Clone params for pacemaker rabbitmq resource
* Provide RabbitMQ clients with a list of servers instead of VIP
* Consolidate use of $pacemaker\_master in step 2
* Enable VIPs via Pacemaker from step 2 instead of step 1
* Move NTP and Memacache respectively into step 1 and step 2
* Ensure sync\_db is consumed by Keystone and Cinder classes
* Remove unused enable\_pacemaker setting from templates
* Configure HAProxy, Galera and MongoDB before start
* Update to reflect puppet-pacemaker changes
* Set up corosync using hostnames rather than IPs
* Fix RabbitMQ startup race
* Environment which configures puppet pacemaker
* Add a directory for overcloud heat environments
* Makes sure galera can handle the connections
* Ensure haproxy is not enabled by puppet-tripleo when EnablePacemaker
* Add Galera as a Pacemaker resource when EnablePacemaker
* Use optimized config for RabbitMQ cluster
* Use pacemaker::resource::service instead of ::systemd
* Puppet: Split out controller pacemaker manifest
* post-deploy hook for rhel registration
* Create split out neutron networks via Heat

0.8.5
-----

* Reuse the undercloud service passwords as db passwords
* Add MongoDB as a Pacemaker resource when EnablePacemaker
* Add support for Glance RBD backend
* Firstboot rsync for development purposes
* Revert "Keystone domain for Heat"
* Reuse the various service passwords as db passwords
* Allow deployer to choose Ceilometer backend
* Add RabbitMQ as a Pacemaker resource when EnablePacemaker
* Disable dhcp\_domain in Nova for the overcloud as well
* Remove hardcoded references to .novalocal in hostnames
* Configures haproxy as a Pacemaker resource
* Switch VIP management from Keepalived to Pacemaker
* puppet: install Horizon on overcloud-controller
* Separate the network configuration per flavor
* Move Ceph OSD data path configuration into static ceph.yaml file
* Add hooks for extra post-deployment config
* Enable passing optional first-boot user-data
* Set EnablePacemaker == false be default
* Keystone domain for Heat
* Parameter to enable/disable controller swift store
* Add option to enable ceph storage on controller
* Perform basic setup of Pacemaker cluster using puppet-pacemaker
* Refresh description for swift/cinder/ceph storage nodes
* Add support for Redis configuration
* puppet: add missing ::glance include on controller
* puppet: Ceilometer use MongoDB datastore backend
* Fix MongoDB setup on nonha setup
* Do not downcase IP addresses
* puppet: implement MongoDB on controller nodes
* Perform basic setup of pacemaker cluster on controllers
* MariaDB bind on correct address
* Make all default values match overcloud defaults

0.8.4
-----

* Pass in libvirt\_rbd\_secret\_key for nova compute
* Make rabbitmq bind on ctlplane instead of 0.0.0.0
* Make memcached bind on ctlplane instead of 0.0.0.0
* Wire in list of controller nodes as memcache\_servers for Swift proxy
* Remove enforced deps on RabbitMQ resources before config
* Remove deprecated ceph-source.yaml
* Update descriptions comments for Ceph params
* Provide a way to know the boostrap\_nodeid IP
* puppet: wire in osfamily hieradata support
* puppet: add debug mode for OpenStack services
* lb: Allow multiple backend
* puppet: correct cinder enabled\_backends format
* Restructure Ceph/Puppet params to reflect changes in puppet-ceph
* puppet+devtest: make compute nodes reachable
* Implement mongo\_node\_ips hiera key
* Refactor allNodesConfig
* Set all RabbitMQ queues as mirrored when clustered
* Add support for Neutron l3\_ha option in puppet templates
* Ensure all Rabbit params are propagated to interested nodes
* puppet: use identity\_uri and auth\_uri
* Update puppet post config to enable stepped deployments
* Add support for Ceph as a Cinder and Nova backend
* controller-puppet: Honor MysqlRootPassword
* puppet/loadbalancer: use puppet-tripleo
* Make heat auth\_encryption\_key random
* puppet: tidy up the Nova ceilo auth configs
* puppet: tidy up the Nova glance API server config
* puppet: tidy up the compute nova neutron config
* Use Cinder multibackend by default

0.8.3
-----

* Puppet: Configure neutron\_api\_class on controller
* puppet: add ordering for Neutron agents
* Include cinder::glance into the ctrl manifest
* Puppet: define swift\_store\_auth\_address in hiera
* puppet: set heat-user using class parameter
* Correct the parameter\_defaults section name
* Puppet: First support Ceph
* Deprecate the old mergepy overcloud templates
* Add allNodesConfig to Swift storage nodes
* BlockStore: Exec puppet after all configuration
* ObjectStore: Exec puppet after all configuration
* Compute: Exec puppet after all configuration
* Split out BootstrapNode SoftwareConfig
* Puppet/RabbitMQ: support clustering
* Split out allNodesConfig SoftwareConfig
* Revert "puppet: disable swift proxy and glance backend"
* Split out SwiftDevicesAndProxy SoftwareConfig
* Controller: Exec puppet after all configuration
* Move all puppet templates into puppet directory
* Add Ceph related templates needed to configure Cinder with Ceph
* puppet: only enable Ntp if ntp::servers is set
* puppet: disable swift proxy and glance backend
* puppet: Add EnablePackageInstall option
* Puppet: SNMP support for undercloud ceilometer
* Puppet: wire in neutron\_dnsmasq\_options
* Puppet: correct neutron metadata agents nova ip
* Puppet: move LB configs onto LB resources
* Puppet: Heat API and Engine
* Puppet: Ntp support
* Puppet: Ceilometer controller support

0.8.2
-----

* Remove unused cinder params from -without-mergepy
* Puppet: Cinder common block storage support
* Swift: set default replicas to 3
* Remove unused swift params from -without-mergepy
* Puppet: Switch glance to use a swift backend
* Puppet: Swift Storage node support
* Puppet: Swift Overcloud Proxy/Storage support
* Compute: consolidated nested stack
* Controller: consolidated nested stack

0.8.1
-----

* Add parameter to manage usage of Neutron l3\_ha option
* Add SwiftMountCheck to overcloud-without-mergepy
* Add SwiftMinPartHours to overcloud-without-mergepy
* Default BlockStorageCount to 0 for without-mergepy jobs
* Remove invalid NTP configuration in templates
* Puppet: overcloud controller config
* Allow setting Neutron tunnel type in no mergepy
* Controller: Drive os-net-config via software conf
* Controller: Split out software config
* Puppet: overcloud compute config
* Drop the MysqlClusterUniquePart validation
* Pass Horizon port through to controller nodes
* Compute: drive NW configuration via software conf
* Set more aggressive keepalive timings
* Bring back (abandoned) support for Cinder/NFS

0.8.0
-----

* Don't store Ceilo DB credentials on compute node
* Don't store Neutron DB credentials on compute node
* Don't store Nova DB credentials on compute nodes
* Remove missing cinder-storage Neutron\* parameters
* Add missing novncproxy settings to controller
* Add missing HAProxy settings to controller
* Add missing Neutron DVR params to without-mergepy
* Remove duplicate Neutron params in overcloud
* Add missing Keystone params to without-mergepy
* Add missing Rabbit params to without-mergepy
* Set default network interfaces to nic1
* Align the cinder-storage.yaml template with block-storage.yaml
* Remove LiveUpdate params
* bump up the number of sesson limit for rabbitmq
* Remove default flavor from every template
* Fix empty local\_ip in ml2\_conf.ini on undercloud
* Split out Nova software config
* Provide a single stunnel connect\_host
* Add swift.mount-check metadata
* Don't replace OS::Neutron::Port on update of undercloud
* Use HAProxy httpchk for openstack services
* Don't replace OS::Neutron::Port on update
* Add overcloud options for SSL RabbitMQ connections
* Use parameter constraints for image, key and flavor
* Enable Neutron DVR support in TripleO installation
* Add SSL PKI properties for keystone
* Simplify the layout of haproxy net binds config
* Add converted version of block and object storage
* Add block completion signal
* Compute and controller templates without merge.py
* Passthrough{Specific} and allNodesConfig for BlockStorage nodes
* Refactor Heat dependencies for nova compute

0.7.9
-----

* Sort inputs and parameters
* Secure the MySQL bind-address on the undercloud
* Configures haproxy to serve novnc\_proxy

0.7.8
-----

* Add SwiftMinPartHours parameter
* undercloud: use Nova compute Ironic driver
* Drop CinderLVMLoopDeviceSize from the undercloud
* Remove unnecessary completion signal

0.7.7
-----

* Parameterize network type and tunnel types
* Use the server name attribute

0.7.6
-----

* Deprecate Role and ImageBuilder metadata handling
* Update overcloud examples for ExtraConfig
* Undercloud params for compute driver and manager
* Parametrize Swift partition power
* Fix spelling of controller0\_VLANPort

0.7.5
-----

* Add specific pass-through config for each role
* Change | to > in templates
* Remove unused Neutron values
* Expose public\_interface\_tag support
* Make turning debug on globally easy

0.7.4
-----

* MySQL connections via HAProxy should not timeout
* Set vnc to use controller virtual\_ip
* Remove hardcoded version
* Make signal\_transport a parameter
* Ensure glance.host and glance.cinder are set for BlockStorage nodes
* Make BlockStorage deployment dependent on controller0AllNodes

0.7.3
-----

* Replace occurrences of list\_join with Fn::Join
* Use VIP for rabbit/keystone and mysql in block-storage.yaml
* Remove unneeded neutron config parts from block-storage.yaml
* Add strict dependencies to the undercloud template
* Set the MySQL root password
* Permit specifying VLAN mappings to overclouds
* Fixup network configuration for ext-net
* Make Swift replica count configurable
* Switch to heat\_template\_version: 2013-05-23
* Change overcloud to use VIP for MySQL
* Move cacert property out of "stunnel" and into a new "ssl" group
* Make removing nodes from scaled items possible
* Restore rabbit.host and add an haproxy rabbit listener
* Fix overcloud controller scaling
* Use VIP for keystone host in swift template
* Set basic pacemaker and corosync properties in undercloud
* Rename NovaCompute resources suffix to be consistent with controller
* Move config options under neutron.ovs
* Add BlockStorage and SwiftStorage nodes into hosts
* Fix BLOCKSTORAGESCALE and SWIFTSTORAGESCALE in Makefile
* Remove duplicate config section from block-storage.yaml
* Fix bash env var conditionals in merge.py call to be consistent
* fix incorrect reference to rabbit\_username

0.7.2
-----

* Convert Fn::Select to extended get\_attr
* Port all templates to HOT
* merge.py --hot to process and generate HOT

0.7.1
-----

* Add strict dependencies to the overcloud template
* Correct overcloud template to inherit passthrough
* Rename NovaCompute0Config to NovaCompute0Deploy
* controller0AllNodesConfig to controller0AllNodes
* Fix swift memcache and device properties
* Remove nova-compute-group.yaml
* Add signal\_transport property
* Add user\_data\_format
* Define and bind a public virtual IP
* Fix SSL with HAProxy
* merge.py use a class to represent template syntax
* Remove extra list
* Remove ImageBuilder::Elements from templates
* expose glance\_port,protocol as glance.port,protocol

0.7.0
-----

* add Horizon caches backend definition (memcached)
* make glance.host point to controller\_virtual\_ip
* make keystone.host point to controller\_virtual\_ip
* use ControlVirtualInterface for keepalived VRRP
* Add corosync and pacemaker properties into overcloud template
* Make target to validate a template
* Specify the network for nodes
* Make stack complete depend on all nodes

0.6.4
-----

* Enable multi-node rabbitmq cluster
* Compute all hosts matrix once
* Add galera clustering properties
* Haproxy configuration
* Use the right DSN for neutron agents

0.6.3
-----

* Add parameters for setting up keystone keys/certs in undercloud

0.6.2
-----

* Set glance protocol and port as Heat configurable

0.6.1
-----

* Use virtual ip for OS services
* Replace nagios3 template with HOT rewrite

0.6.0
-----

* Setup SSL for Ceilometer
* Remove the tuskar-source template
* Add custom public IP support to the undercloud
* Add passthrough configuration glue
* Move to software-config for the undercloud
* Move bootstrap-host out from bootstack

0.5.6
-----

* Export new bootstack keys for cluster init
* Add Controller scale param to merge.py
* Fixes to swift-storage-source.yaml

0.5.5
-----

* Add parameters for setting up keystone keys/certs
* Use vip address where controller0 was used for endpoints
* ssl: Add support for a CA Certificate
* Sequence deploys - compute after control plane
* Introduce configurable virtual ip in templates

0.5.4
-----

* Defer to element mysql.innodb\_buffer\_pool\_size
* Add NeutronControlPlaneID parameter
* Configure NTP for overcloud compute
* Specify group os-apply-config for config resources
* Scale the control plane in hosts files
* Adding SNMPd auth credentials
* Make size of loop device used by cinder LVM configurable
* Increase PXE deployment timeout for overcloud

0.5.3
-----

* Expose dnsmasq options

0.5.2
-----

* Add passthrough configuration glue
* Adding Swift proxy-server memcache metadata
* Adding undercloud ceilometer

0.5.1
-----

* Switch overcloud to software-config

0.5.0
-----

* Stop using notCompute in favor of controller
* Adding NTP to undercloud template
* Add enable\_tunneling to swift storage metadata
* Add mysql innodb buffer pool size
* Allow setting the cinder iscsi-helper option
* Add BlockStorage0Config Resource

0.4.4
-----

* Drop dnsmasq\_range from the undercloud source
* Update templates to default to preserve ephemeral

0.4.3
-----

* Fix Ironic templates
* Pass undercloud metadata to overcloud compute
* Adding image update policy to undercloud template

0.4.2
-----

* Change nova compute driver location
* Remove unnecessary cinder metadata
* Add Wait Condition to Block Storage Templates
* Add heat.stack\_domain\_admin\_password
* Remove Duplicate Rabbit Parameters
* Swift storage heat templates
* Adds block-storage-nfs template
* Fix bad indentation
* Fix Merge::Map for scatter-gather in Configs
* Add a check target
* Make Wait Conditions depend on config creation
* Add GlanceLogFile and GlanceNotifierStrategy
* Add rabbit.cookie attribute
* Different Flavors for Tuskar roles

0.4.1
-----

* Fix the hosts setting - nova uses novalocal
* Gather all hypervisor names into /etc/hosts
* Add a Merge::Map feature
* Fix tests
* Remove uses of functions in parameter defaults
* Add username parameter for rabbit
* Fix typo in undercloud-vm-source.yaml
* Support TripleO-CI for overcloud builds
* Allow manual hosts entry exports in overcloud

0.4.0
-----

* Make it possible to do physical networks for VMs
* Permit overriding the undercloud controller ip
* Drop PowerUserName from overcloud-source.yaml
* Support neutron.flat-networks in overclouds
* Make make overcloud.yaml DTRT always
* Remove image parameter changing from merge
* Add a debian-mirror heat template
* Remove file injection config option
* Prep work for a scalable control plane
* Update overcloud to support N compute hosts
* Remove InstanceType and ImageId from cinder template
* Make scaling out a feature for merge.py
* Make debugging merge.py in the test suite possible
* Permit writing output to other than stdout
* Allow setting a single NTP Server

0.3.4
-----

* Expose bridge\_mappings in the overcloud
* Add license file
* Use OS::Heat::UpdateWaitConditionHandle
* Add SSL configuration metadata for overclouds
* Add optional cinder storage node to overcloud

0.3.3
-----

* Add all and clean targets to makefile
* Avoid echoing comment from makefile recipe
* Add a wait condition to undercloud stack
* Add undercloud-vm-ironic-source yaml file
* Configure undercloud to use ext4 ephemeral FS
* Add Ceilometer parameters for the overcloud

0.3.2
-----

* Make merge.py installable as a package using pbr
* Permit setting overcloud image update policies
* Adds included-template-dir param for resolving template FileIncludes

0.3.1
-----

* Make merge.py invokable from another script

0.3.0
-----

* Fix case of OpenStack in templates
* Name the undercloud resources with 'undercloud'
* Wait for o-r-c on nova compute as well
* Use merge.py for the undercloud templates

0.2.0
-----

* enable Ironic password for keystone auth
* Add metadata to configure swift

0.1.1
-----

* Drop NeutronNativePXE option from undercloud tmpls
* Fix KeystoneURL

0.1.0
-----

* Rename heat\_watch\_server\_url to watch\_server\_url
* Add Ironic-source.yaml
* Disable nova bm file injection in undercloud
* Add release configuration
* Add KeystoneURL to Outputs section
* Move os-collect-config section
* Add tuskar API service configuration
* Make LaunchConfiguration resources mergeable
* Hide the AdminToken too
* Add metadata for the nova floating-ips extension
* Alpha sort the nova and neutron sections
* Add parameters for undercloud power\_managers
* Permit overriding the default route for neutron
* Allow making the public interface a vlan
* Make it possible to set the public interface ip
* Make neutron public interface configurable
* Delete unused interfaces.control key
* Remove an unsed target from Makefile
* Add a waitcondition for signalling stack-up
* Make test\_merge.bash executable

0.0.1
-----

* Add a bare metal undercloud template
* Add recursive whole-file \_\_include\_\_ tag
* Set the undercloud host name to 'undercloud'
* Make it possible to enable native neutron PXE
* Refactor test\_merge.bash for multiple tests
* Add functional tests and examples for merge
* Provide Neutron password in compute metadata
* Set NoEcho: true for parameters containing secrets
* Finish correcting all OS::Nova::Server references
* Replace broken usage of first\_private\_address
* Allow customising the Nova BM architecture
* Update PrivateIp to first\_private\_address
* Make Heat service password configurable
* Remove unused swift undercloud definition
* Get rid of global service-password
* Add Nova service password
* Add Glance service password
* Add cinder service-password
* Remove trailing whitespace
* Remove unmaintained individual service templates
* Use native server resource in overcloud
* Use native resource for nova-compute-instance
* Update undercloud-vm.yaml to use OS::Nova::Server
* Add support for merging OS::Nova::Server
* escription -> Description
* Add in Neutron service password
* Make admin-password configurable
* Make the keystone admin token configurable
* Update stackforge references to openstack
* Migrate nova-compute-instance to split Metadata
* Correct os-collect-config.cfn.path to be string
* Load local IP using separate post-boot Metadata
* Migrate from cfn-hup to os-collect-config
* Make Resource names suitable for merge/include
* Fix missing NovaComputeLibvirtType parameter
* Add ability to set overcloud hypervisor type
* Set a physical bridge for network nodes
* Remove unused network configuration metadata
* Ignore built files
* Increase PXE deploy timeout
* Fixed merge code populating properties from yaml
* Reinstate architecture binding for nova-bm
* Stop passing no longer honoured keys in
* overcloud-source: Fix overcloud parameters
* Provide values for all nova compute params needed
* Generate overcloud.yaml using overcloud-source
* Add an example of Type: FileInclude
* Add handling of parameter replacements
* Add FileInclude special type
* Quantum -> Neutron rename
* Update boot-stack vm image for overcloud use
* Set a default image name for compute nodes
* Make merge.py output deterministic
* Refine the Makefile rules
* Update bootstack-vm to match undercloud
* Update nova-compute-instance URL
* Update nagios3.yaml to reflect changes to the postfix element
* Update undercloud-vm for new networking config
* Remove reference to KeystoneLaunch
* A template for dev-test underclouds
* Ignore editor files
* Fixup https://review.openstack.org/#/c/33308
* Remove references to Fn::GetAtt
* Fix default mysql usernames
* Adding floatingip\_start and floatingip\_end to heat template
* Add sample template for nagios3 element
* Parameterise more settings for nova and quantum
* Add .gitreview setup
* Nested stack of nova-compute-instance.yaml
* New single instance nova-compute
* Adding bootstack-vm template
* PrivateIp is not assigned yet, plus 127.0.0.1 will work fine
* Fixed the nova-compute template
* Pushing passwords into mysql and other fixes
* Hand modifying notcompute to work with elements
* Adding username/password for Nova in notcompute
* Hand modified notcompute.yaml to work properly
* Remove unused NovaAPISize from nova-api
* Use slave roles in Makefile
* Add a Makefile for regenerating common merges
* Removing unused TemplateURL
* Add glance heat and keystone to notcompute
* Make descriptions less redundant
* Adding OpenStack:: hints to engine
* Simplify keystone into one instance
* Add a smaller scale heat-allinone template
* Add a 'notcompute' template
* Add ability to combine roles into one role
* Support DependsOn
* Replace in AllowedResources
* Create a utility for merging templates
* Fix type-o in rabbitmq.yaml
* Adding nova-api and finishing nova-compute split
* Splitting nova-api and nova-compute
* Fixes for nova element changes
* Adding a (non-working) nova template
* Fixes for quantum template
* Add a template for OpenStack Networking (Quantum)
* Add glance to mysql and base
* Fix swift Metadata section
* Un-do all use of generic-user.yaml and remove it
* Cannot use generic-user.yaml, copy/paste in
* Try List param again
* CommaSeparatedList -> CommaDelimitedList
* Invalid Parameter type "list"
* Fix yaml formatting
* Adding basic glance template
* Refactor Heat template to use generic user
* Match Metadata with tripleo-image-elements
* Add Heat and RabbitMQ to base stack
* Add stack for deploying Heat
* Add stack for deploying rabbitmq
* Remove UserData, was workaround for Heat bug
* Specify the usernames for dump/root explicitly
* Refactoring to have a mysql-migration element
* Adding functionality to mysql
* works but missing stuff
* fixes
* Adding bootstrap parameters
* Refactor a bit around new thinking
* use openstack-db
* Removing HA pair
* Adding keystone and mysql
* Initial commit
