Current Series Release Notes

28.0.0-11

New Features

• Add possibility to specify database connection parameters for api and main database (parameters nova::db::connection_parameters and nova::db::api_connection_parameters). This allows to eg. to specify ssl connection with a trusted certificate.

• The value parameter of the nova::compute::libvirt::secret_ceph resource and the libvirt_rbd_secret_key parameter of the nova::compute::rbd class now accept values wrapped in Sensitive.

• The new nova::migration::libvirt::live_migration_monitor_interval parameter has been added.

• PostgreSQL support has been removed.

Upgrade Notes

• The following parmaeters have been removed.

  • The nova::api class

    • api_bind_address

    • metadata_listen

    • metadata_listen_port

    • enabled_apis

    • osapi_compute_workers

    • osapi_compute_listen_port

    • metadata_workers

  • The nova class

    • use_ssl

    • enabled_ssl_apis

    • ca_file

    • cert_file

    • key_file

Deprecation Notes

• The nova::db::mysql_enable_ndb parameter has been deprecated.

• The nova::policy::enforce_scope parameter has been deprecated.

Security Issues

• The cephx key managed by the nova::compute::libvirt::secret_ceph resource is now always handled as a Sensitive value, so that it is redacted in puppet logs, reports and the catalog. This applies to the value parameter of nova::compute::libvirt::secret_ceph and the libvirt_rbd_secret_key parameter of nova::compute::rbd. Wrap the value passed to these parameters in Sensitive to also redact the parameter itself in the catalog.