chef-bcpc

Ajay Tikoo (3):
changed permissions for socket files for ceph, haproxy
added functionality for scheduling nova db archive-deleted-rows
authentication for apache status module

David Comay (2):
Work-around change put in for TTA-2019-002 that prevents VXLAN use by
VMs
Upgrade to Calico 3.15.3, etcd3gw 0.2.6

Justin Pacheco (4):
remove osx build/linting from travis build
enable nova's auto converge feature
added support for generating chef databag secrets
mysql tuning and linting fixes

Tyler Stachecki (3):
configure-system: Install kexec-tools
configure-system: Add CPU microcode loader logic
cinder: Add backend_native_threads_pool_size tunable.

8.1.0 release highlights:

• Fix regressions preventing bring-up of non-virtual environments
• Upgrade to Calico 3.15, etcd3gw 0.2.5
  • Remove calico-compute, netfilter-persistent/iptables-persistent
  • Explicitly declare neutron-dhcp-agent as a package to upgrade
• Upgrade from bird to bird2
  • Use 3/1 timers for virtual network ToRs/spines
  • configure-networking.yml: refactoring/cleanup
• Convert the bcpc::system recipe to an Ansible task
  • Allow for specification of system kernel
  • Asserting deterministic NVME device naming
• Disable implicit dependence on IPv6
• Virtual environment provisioner refactoring
  • Update Bento box version for Ubuntu-18.04 to 202005.21.0
  • Added ability to pre-load debs, disable apt cache, use custom
    apt URLs, create operations user at provision time, and provision
    virtual builds with the 5.4 kernel.
  • Do the Ansible equivalent of an apt(8) dist upgrade as part of
    provisioning.

Bin Zhang (1):
change bgp protocol name in bird.conf to

Chris Morgan (4):
allow port forwarding from anywhere when using an ssh tunnel to access horizon
multiple apt package installs - use Chef's support for installing multiple apt package in one invocation - reduces the build time for a minimal default 1h1w by 23% - only package installs from the same recipe are collected - package installs in subsequent recipes stay there
Remove a non-fatal lint warning - Seen inhttps://github.com/bloomberg/chef-bcpc/pull/1699 - travis : https://travis-ci.com/github/bloomberg/chef-bcpc/jobs/368244065 - github : https://github.com/bloomberg/chef-bcpc/issues/1700
mention a few more upstreams

David Comay (3):
Enable RTC logging in Chrony Separate reload and restart registration in Chrony task
Enable auto-trimming of the RTC by Chrony
Squash all commits for v8.1 into a release commit.

Justin J. Pacheco (3):
chrony task
rally.rb: add python3-dev
powerdns: update zone soa ttl

Justin Pacheco (9):
added zone support
moved ubuntu apt subscripts from chef into ansible
add support to source rabbitmq from distribution
consul 1.7.2
configure host aggregate task fixes
added zone config zone attirbute check
change default ceph pool pg[p]-num
rabbitmq clustering
update cinder recipe to allow package upgrades

Marcus Furlong (2):
remove limit of 30 projects in horizon dropdown box
chef linting fix

Peter Lee (2):
per zone allocation
Revert "per zone allocation"

Srinivas Sakhamuri (3):
Add logging to chrony to get visibility
Add a new task with a tag to configure chrony
Initial commit for watcher recipe

Tyler Stachecki (11):
Use 3/1 timers for virtual network ToRs/spines.
Revert "Use 3/1 timers for virtual network ToRs/spines."
Bump up default VM topology/hardware specs.
Update minimum requirements in the README.
README: Link to the virtual topology file.
virtual/topology/hardware: Use powers of 2!
README: Also mention support for AMD-V extensions.
README: Mention use of topology/hardware overrides.
rabbitmq: Use N/2+1 queue mirrors instead of N.
Set default memcached memory limit to 64MB.
Fix a potential build issue.

npustchi (1):
Make memcached memory limit a prop tunable.

David A. Desrosiers (2):
Fixing up yaml.load() call so we're insulated from bad input data (#1630)
Small fix to correct the ownership of the synced_folder directory, removes sandboxed error with root ownership (#1633)

David Comay (10):
Expose Unbound's unblock-lan-zones option to the configuration. (#1534)
Some upstream chef-bcpc cleanup (#1548)
Grant "ro" role read/write access to all of /calico/felix/ per Tigera. (#1570)
Disable usage reporting to projectcalico.org. (#1579)
Restrict Calico fail-safe ports to minimum required. (#1586)
Work-around chronyd being unable to sync at boot before network is online. (#1588)
nova-api-metadata can race w/systemd-resolved at boot & use wrong name servers (#1599)
Use 201812.27.0 as the default box version to avoid vagrant ssh issues (#1607)
Work-around calico-dhcp-agent not restarting after seeing an exception. (#1621)
Move automation for chrony from Chef to Ansible (#1635)

Justin J. Pacheco (47):
moved ssh configuration from chef into ansible (#1517)
Update ansible.cfg (#1530)
updated default nova quotas (#1532)
automated host aggregates (#1533)
Update Makefile (#1535)
adjusted etcd ssl cert permissions (#1537)
configure libvirt to use ssh (#1540)
disable openstack heat by default (#1541)
Update etcd-ssl.rb (#1542)
added etcd roles, passwords and certificates (#1551)
refactored mysql and etcd service installation/configuration (#1552)
removed memcached from nova-compute recipe (#1564)
add enable/disable toggle to rally. removed proxy usage (#1563)
configure calico-felix on all nodes and etcd-proxy on all non-headnodes (#1562)
add support for tinyproxy (#1565)
updated tinyproxy to support no upstream params (#1566)
configure qemu to run as non-root user (#1567)
update tinyproxy.conf (#1568)
improved network creation (#1569)
added support for neutron quotas (#1571)
move neutron quota management to the os-quota recipe (#1572)
updated flavor enable boolean (#1573)
tinyproxy.conf removed connectport config (#1575)
updated calico-felix logging configuration (#1577)
Update nova.conf.erb (#1582)
update reverse dns zones ttl and soa values (#1589)
added support for neutron default quotas (#1590)
ceph tuning config (#1595)
add support for configurable network interface mtu (#1597)
add configure-host-aggregates to list of targets under all (#1598)
Update ansible.cfg (#1608)
update horizon to wait for keystone to come back online after restart (#1613)
update glance-api.conf (#1615)
refactored configure-networking and Makefile (#1618)
Update ceph-destroy-osds.yml (#1619)
generate libvirt host uuid (#1625)
calico-dhcp-agent dhcp.py (#1624)
refactored register-compute-nodes make target (#1626)
updated hwrng and linux kernel installation (#1627)
updated calico-dhcp-agent service drop-in (#1628)
replaced missing disable_bgp function call with remove_cloud_ip() (#1632)
Update haproxy-watch.erb (#1634)
separated osd creation and activation into two separate operations (#1636)
systemd resolved fixes #1640

Marcus Furlong (58):
upgrade to latest chef 14 client
disable and stop glance-registry
remove unused dns catalog entry
remove unneeded haproxy fragment on head node
Merge pull request #1518 from bloomberg/bugfix/update-chef-client
Merge pull request #1520 from bloomberg/bugfix/remove-unused-catalog-entry
Merge pull request #1519 from bloomberg/bugfix/disable-glance-registry
remove glance registry test
Merge pull request #1521 from bloomberg/bugfix/remove-unneeded-haproxy-fragment
Merge pull request #1522 from bloomberg/bugfix/remove-glance-registry-test
remove unused mysql blocks and unused cron cookbook
remove cron file asset
Merge pull request #1523 from bloomberg/bugfix/remove-unused-mysql-and-cron
add ceph mon compaction on startup
forward-port v7 mysql tuning
Merge pull request #1525 from bloomberg/feature/mon-compact-on-startup
Merge pull request #1526 from bloomberg/bugfix/mysql-tuning
remove unused hostsfile cookbook (#1527)
add support for openstack heat (#1531)
lint fixes in provisoner script (#1539)
remove redundent project catalog elements (#1528)
update travis config (#1538)
don't fail when reprovisioning when file is already deleted (#1536)
use v3 endpoint (#1543)
remove unused files and templates (#1544)
cache apt packages for all vagrant VMs (#1515)
enable heat by default (#1545)
disable unbound trying to listen on ipv6 (#1546)
reduce memory requirements for network nodes (#1495)
update headers to fix cookstyle rubocop issues (#1550)
reorder network configuration tasks (#1549)
wait for heat api before restarting apache for heat-api-cfn (#1553)
add vagrant tunnel and vagrant ssh helpers (#1529)
only attempt to alter if user exists (#1554)
wait for heat api after restarting either heat api (#1556)
fix typo in etcd vars (#1558)
simplify rally installation (#1547)
use correct var for cloud region (#1559)
rename file server to web server (#1561)
fix cookstyle: The long_description metadata.rb method is not used and is unnecessary in cookbooks (#1581)
clean up motd (#1578)
consistent repo handling with configurable keys (#1580)
use consistent apache wsgi site configs (#1514)
rejig apt cache code (#1583)
update A records to have 600 TTL (#1587)
libvirt build support (#1584)
separate linting and build jobs in travis (#1592)
fix osx build (#1596)
add global default workers variable (#1560)
use global workers var for heat (#1604)
be more specific about libvirt builds (#1603)
add oslo healthchecks to openstack apis (#1606)
disable placement api healthcheck (#1610)
enable heat dashboard (#1609)
run horizon recipe before heat recipe (#1612)
fix horizon setting that causes manage.py/heat-dashboard failure (#1616)
use correct jinja2 boolean logic (#1622)
convert libvirt cidr to netmask (#1623)

Peter Lee (1):
add suffix to virtualbox VMs and network names (#1638)

Srinivas Sakhamuri (8):
Update perms for ceph admin/client keyring (#1601)
Pin rally version to avoid using cutting edge releases that may break (#1602)
Add base url to return during paging (#1605)
Update rally and rally-openstack version (#1637)
Don't download if skip_download set to true for an asset
Merge pull request #1639 from bloomberg/feature/selective-download-asset
Use python3 as runtime environment for rally
Merge pull request #1648 from bloomberg/fix/rally-python3

Tyler Stachecki (3):
apache2: use event MPM, add attributes for it
apache2: disable mod_status by default
apache2: Add keepalive tunables.

roys-lb (1):
virtual: Fix multibox configuration node assignment (#1555)

wstevens11 (1):
Update TTL for zone to 10min (#1585)

dkaplan34 (1):
Update system.rb

Srinivas Sakhamuri (1):
Fix the format of the SHASUMS file (#1576)

BCPC Releases (1):
Merge branch 'releases/7.1.21'

Justin J. Pacheco (1):
added updated nova-network model.py that includes wait method (#1557)

Srinivas Sakhamuri (1):
Add base_url to fix a pagination bug (#1574)

BCPC Releases (1):
Merge branch 'releases/7.1.21'

Justin J. Pacheco (1):
added updated nova-network model.py that includes wait method (#1557)

Srinivas Sakhamuri (1):
Add base_url to fix a pagination bug (#1574)

David Comay (13):
Align VirtualBox (5.1 or 5.2) VM configuration with V7 settings.
Switch to 4-byte AS numbers.
Anycast address should only be exported by Consul leader. (#1387)
Recipe for chrony should restart the service.
Use :immediately consistently in Chef notifications.
Address several whitespace nits.
Set default project for admin user in default domain
Update Calico version to 3.4 (#1457)
Update etcd version to 3.3.10 (#1459)
Add subjectAltName extension to self-signed BCPC certificate. (#1463)
Introduce script to determine if a headnode is the Consul Raft leader. (#1464)
Introduce DynamicJSON metadata-related attributes to Nova. (#1465)
Allow setting of RBD's default feature set; turn off problematic values. (#1473)
Address some issues with AS #s in larger configuration. (#1479)
Various fixes including chef-client upgrade & moving hardware packages out of build. (#1511)

Justin J. Pacheco (69):
general cleanup and additional refactoring (#1368)
refactored virtual environment (#1369)
ip_conntrack module loading (#1372)
add pod support (#1373)
networking fixes and configuration file cleanup (#1375)
ported json files to yaml. removed virtual ansible (#1376)
ansible refactoring and chef role generation (#1377)
bugfix: nova-manage race condition (#1379)
added chef role generation to ansible (#1381)
new make targets and bootstrap ufw updates (#1382)
az and ha support (#1384)
networking refactoring (#1392)
ceph, nova, glance and make improvements (#1402)
add openstack designate, powerdns and misc fixes (#1405)
updated calico to version 3.2 (#1406)
ansible, apache, horizon and ceph fixes/updates
removed local style on html code block
added crudini
dns zone creation/fill, misc fixes/updates (#1413)
improved keystone domain support, additional updates (#1426)
keystone, horizon and cinder updates (#1427)
Feature/host aggregates (#1428)
version updates and custom role removal (#1429)
update calico recipe to use current apt dist pool (#1432)
Rally (#1433)
haproxy configuration refactor, misc fixes
updated haproxy options
improved axfr support (#1434)
powerdns, horizon, calico and cinder updates (#1440)
updated neutron config (#1441)
fixed horizon default domain config param (#1442)
updated dns zone creation/management (#1443)
keystone and neutron updates (#1445)
ansible group_vars and pdns conf updates (#1446)
added nova cpu_mode and cpu_model attribute defaults
replaced kvm64 with qemu64
default to kvm64. updated virtual env to use qemu64 and additional cpu flags
various automation and virtual updates (#1448)
automation updates and cleanup (#1449)
mysqlchk xinetd fix and primary network cidr update (#1450)
new chef/ansible role: storagenode (#1451)
added ceph osd destroy feature (#1454)
changed install path for ceph.bootstrap osd keyring (#1455)
nova-compute and cinder updates (#1456)
policy.d support for nova/cinder (#1458)
Feature/local networking (#1460)
added ecmp support
refactored ansible overrides and misc updates (#1468)
refactored chef-node update and ssh recipe (#1470)
Update base.yml (#1471)
cinder automation and ansible conf fixes (#1472)
removed apache redirect. removed domain dropdown (#1474)
add support for cinderv2 (#1476)
Ansible refactoring (#1477)
remove support for creating az's (#1478)
added support for separate hypervisor domain (#1480)
all in one network vm (#1481)
add openstack flavor toggle (#1483)
added support for custom config (#1486)
added config option for ansible to validate ssl certs (#1488)
update etcd to only use tls (#1490)
calico 3.6 (#1498)
Bugfix/nova misc fixes (#1503)
removed package upgrade statement from calico package installs (#1504)
Update common-packages.rb (#1505)
updated ansible tasks to use /bin/bash as their shell (#1506)
added /etc/openstack/clouds.yml and virtual overrides (#1509)
added legal notice to ansible filter
update neutron configuration (#1512)
BCPC: v8 bionic
removed checked in ansible bootstrap inventory
added additional default ntp server
fixed python import error
linting fixes
reverted numeric style changes recommended by rubocop
added rubocop to list of osx linters
moved gem installs to the same line
added vlan and mtu support
Makefile improvements
white space fix
separate cinder ceph backend creation
updated netcfg to use default network renderer
nova config vcpu_pin_set fix

Kelvin Koh (1):
BCPC v8: xenial release

Marcus Furlong (21):
first pass at doc updates for v8
use python3 print function (#1370)
further python3 compat (#1371)
fix chef-client error when proxy is not required (#1383)
travis integration for linting
use matrix instead of os
automation and linting updates
remaining cookstyle fixes (#1398)
fix broken cloud-archive recipe (#1418)
upgrade to openstack rocky (#1419)
use a consistent vimrc and fix cursor keys outside screen
install bash completion to speed up common ops
ensure local zones are resolved by powerdns
powerdns webserver listening on the local interface only
explicitly remove i386 archicture
remove extra commas from usernames
bugfix/linting (#1499)
fix case when multiple forward addresses are in use
fix dns domain on vms to match v7 behaviour
remove unneeded dns extension driver that breaks floats
Merge pull request #1513 from bloomberg/bugfix/floating-ip-dns-issue

Srinivas Sakhamuri (8):
Add sudo ability for rally (#1436)
Fix rally sudoer, and make cirros image available on bootstrap (#1438)
Upgrade rally via rally-openstack (#1444)
Update rally-existing template to newer format
Add testinfra basic tests to v8 for service checks (#1452)
Add missing variables for adhoc ansible commands (#1482)
Create glance policy.d directory, to allow specification of policy overrides (#1500)
Add util function to find we are on storagenode (#1502)

Minor Release 7.1.21

69057e7 fix incorrect order of shasums

Minor version 7.1.20

2b0b655 clean up nova patches for clarity
8cc3319 add patches for nova-network to teardown bridges
3962ed3 fix multiple erronaeous fixed ip address allocations
e1f19ee use upstream rubygems url due to 500 on fastly
418f6cf Merge pull request #1484 from bloomberg/bugfix/rubygems-url
b8b647d move shasum to correct locations
e4f8760 use correct sha1sums

Minor version 7.1.19

#1439 - Remove restart of nova-compute
#1461 - Change ceph parameter mon_osd_down_out_subtree_limit from rack to host

Minor version 7.1.18

Minor version 7.1.17

Minor version 7.1.16

#1421 - haproxy fixes

Minor version 7.1.15

#1422 - reverting powerdns addtional float record generation

Minor version 7.1.14

Minor version 7.1.13

Minor version 7.1.12

#1414 - Set the wsrep config before innodb config, so that cluster starts properly

Minor version 7.1.11

#1411 - patch nova-network to allow more ebtables failures

Minor version 7.1.10

#1411 - patch nova-network to allow more ebtables failures