October 2019 - Release-announce - lists.openstack.org

keystone 13.0.4 (queens)
by no-reply＠openstack.org 01 Nov '19

01 Nov '19

We are pumped to announce the release of: keystone 13.0.4: OpenStack Identity This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. Changes in keystone 13.0.3..13.0.4 ---------------------------------- e8b04cc42 Revert "Fix python3 compatibility on LDAP search DN from id" Diffstat (except docs and test files) ------------------------------------- keystone/identity/backends/ldap/common.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-)

1 0

keystonemiddleware 4.22.0 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We are amped to announce the release of: keystonemiddleware 4.22.0: Middleware for OpenStack Identity This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 4.22.0 ^^^^^^ New Features ************ * [bug 1695038 (https://bugs.launchpad.net/keystonemiddleware/+bug/1695038)] The use_oslo_messaging configuration option is added for services such as Swift, which need the audit middleware to use the local logger instead of the oslo.messaging notifier regardless of whether the oslo.messaging package is present or not. Leave this option set to its default True value to keep the previous behavior unchanged - the audit middleware will use the oslo.messaging notifier if the oslo.messaging package is present, and the local logger otherwise. Services that rely on the local logger for audit notifications must set this option to False. Bug Fixes ********* * [bug 1800017 (https://bugs.launchpad.net/keystonemiddleware/+bug/1800017)] Fix audit middleware service catalog parsing for the scenario where a service does not contain any endpoints. In that case, we should just skip over that service. Changes in keystonemiddleware 4.21.0..4.22.0 -------------------------------------------- bc03de9 Skip the services with no endpoints when parsing service catalog d68942d Update stable/queens upper constraints file location 3487771 OpenDev Migration Patch 30ccceb import zuul job settings from project-config c21f7f4 Add arguments for MemcacheClientPool init 3fc10b2 Fix KeystoneMiddleware memcachepool abstraction 1b617cf Fix the doc CI failure b8f34e9 Add option to disable using oslo_message notifier 05f5744 Updated from global requirements 0e6b10a Update UPPER_CONSTRAINTS_FILE for stable/queens cbb8231 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .zuul.yaml | 11 ++++++++ keystonemiddleware/audit/__init__.py | 7 +++++ keystonemiddleware/audit/_api.py | 5 ++++ keystonemiddleware/audit/_notifier.py | 2 +- keystonemiddleware/auth_token/_cache.py | 16 +++++++++-- .../notes/bug-1695038-2cbedcabf8ecc057.yaml | 13 +++++++++ .../notes/bug-1800017-0e5a9b8f62b5ca60.yaml | 7 +++++ requirements.txt | 4 +-- test-requirements.txt | 4 +-- tools/tox_install.sh | 4 ++- tox.ini | 2 +- 16 files changed, 130 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6ab23e6..c37f8a8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ oslo.i18n>=3.15.3 # Apache-2.0 -oslo.log>=3.30.0 # Apache-2.0 +oslo.log>=3.36.0 # Apache-2.0 @@ -12 +12 @@ oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 -oslo.utils>=3.31.0 # Apache-2.0 +oslo.utils>=3.33.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index eae2aa1..5b2504b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ mock>=2.0.0 # BSD -oslotest>=1.10.0 # Apache-2.0 +oslotest>=3.2.0 # Apache-2.0 @@ -24 +24 @@ WebTest>=2.0.27 # MIT -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<=1.5.1 # Apache-2.0

1 0

python-keystoneclient 3.15.1 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We are satisfied to announce the release of: python-keystoneclient 3.15.1: Client Library for OpenStack Identity This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/python-keystoneclient Download the package from: https://pypi.org/project/python-keystoneclient Please report issues through: https://bugs.launchpad.net/python-keystoneclient/+bugs For more details, please see below. Changes in python-keystoneclient 3.15.0..3.15.1 ----------------------------------------------- cc13d5b OpenDev Migration Patch 6027596 import zuul job settings from project-config 0de3d28 Updated from global requirements 13d8361 Override find function in project 7f63cfa Update UPPER_CONSTRAINTS_FILE for stable/queens 9981cb9 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 15 +++++++++++++++ keystoneclient/v3/projects.py | 5 +++++ tox.ini | 2 +- 5 files changed, 24 insertions(+), 3 deletions(-)

1 0

ldappool 2.2.1 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We are amped to announce the release of: ldappool 2.2.1: A simple connector pool for python-ldap. This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/ldappool Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/ldappool/+bugs For more details, please see below. Changes in ldappool 2.2.0..2.2.1 -------------------------------- bf7190e OpenDev Migration Patch 7a071a7 PY3: switch to using unicode text values e8b7845 import zuul job settings from project-config 6b334f2 Updated from global requirements 60b38df Update UPPER_CONSTRAINTS_FILE for stable/queens 9ef497e Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 5 +++++ ldappool/__init__.py | 7 +++++-- test-requirements.txt | 2 +- tox.ini | 2 +- 5 files changed, 14 insertions(+), 5 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 0c615ee..1acddcb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ sphinx!=1.6.6,>=1.6.2 # BSD -openstackdocstheme>=1.17.0 # Apache-2.0 +openstackdocstheme>=1.18.1 # Apache-2.0

1 0

keystone 13.0.3 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We jubilantly announce the release of: keystone 13.0.3: OpenStack Identity This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. 13.0.3 ^^^^^^ Bug Fixes * [bug 1780503 (https://bugs.launchpad.net/keystone/+bug/1780503)] The notification wrapper now sets the initiator's id to the given user id. This fixes an issue where identity.authentication event would result in the initiator id being a random default UUID, rather than the user's id when said user would authenticate against keystone. * [bug 1782922 (https://bugs.launchpad.net/keystone/+bug/1782922)] Fixed the problem where Keystone indiscriminately return the first RDN as the user ID, regardless whether it matches the configured 'user_id_attribute' or not. This will break deployments where 'group_members_are_ids' are set to False and 'user_id_attribute' is not in the DN. This patch will perform a lookup by DN if the first RND does not match the configured 'user_id_attribute'. * [bug 1801873 (https://bugs.launchpad.net/keystone/+bug/1801873)] This fixes an issue where an LDAP-backed domain could not be deleted due to the existence of shadow users in the SQL database. * [bug 1840291 (https://bugs.launchpad.net/keystone/+bug/1840291)] Adds retries for "delete_credential_for_user" method to avoid DBDeadlocks when deleting large number of credentials concurrently. * [*bug 1843609 <https://bugs.launchpad.net/keystone/+bug/1843609>*] Fixed an issue where system-scoped tokens couldn't be used to list users and groups (e.g., GET /v3/users or GET /v3/groups) if "keystone.conf [identity] domain_specific_drivers_enabled=True" and the API would return an "HTTP 401 Unauthorized". These APIs now recognize system-scoped tokens when using domain-specific drivers. Changes in keystone 13.0.2..13.0.3 ---------------------------------- 65cb669e7 Make system tokens work with domain-specific drivers d57733f4e Add test case for expanding implied roles in system tokens a6a438c9f Import LDAP job into project 686d52930 Add retry for DBDeadlock in credential delete 79ed42ee6 Fix python3 compatibility on LDAP search DN from id 9d9451e13 Fixing dn_to_id function for cases were id is not in the DN 71f45f12c Remove experimental openSUSE 42.3 job a3a2d75ea Cap bandit c2f619b14 Blacklist bandit 1.6.0 e4c01229e OpenDev Migration Patch 86428a6c6 Delete shadow users when domain is deleted bb1b98b65 Replace openstack.org git:// URLs with https:// 0161ffadd Set initiator id as user_id for auth events a6703dff0 Remove publish-loci post job 34185638d Update the RDO installation guide to use port 5000 Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 35 +++++++------- keystone/common/controller.py | 2 + keystone/credential/backends/sql.py | 3 ++ keystone/identity/backends/ldap/common.py | 34 +++++++++++-- keystone/identity/backends/ldap/core.py | 7 ++- keystone/identity/core.py | 13 ++--- keystone/identity/shadow_backends/sql.py | 12 +++++ keystone/notifications.py | 9 ++-- .../keystone-dsvm-functional-v3-only/run.yaml | 8 ++-- playbooks/legacy/keystone-dsvm-functional/run.yaml | 6 +-- .../keystone-dsvm-grenade-multinode/run.yaml | 10 ++-- .../keystone-dsvm-py35-functional-v3-only/run.yaml | 8 ++-- .../notes/bug-1780503-70ca1ba3f428dd41.yaml | 8 ++++ .../notes/bug-1782922-db822fda486ac773.yaml | 10 ++++ .../notes/bug-1801873-0eb9a5ec3e801190.yaml | 6 +++ .../notes/bug-1840291-35af1ac7ba06e166.yaml | 6 +++ .../notes/bug-1843609-8498b132222596b7.yaml | 9 ++++ setup.cfg | 2 +- 26 files changed, 295 insertions(+), 61 deletions(-)

1 0

keystoneauth1 3.4.1 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We are tickled pink to announce the release of: keystoneauth1 3.4.1: Authentication Library for OpenStack Identity This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/keystoneauth1 Download the package from: https://pypi.org/project/keystoneauth1 For more details, please see below. 3.4.1 ^^^^^ Bug Fixes * [bug 1733052 (https://bugs.launchpad.net/keystoneauth/+bug/1733052)] Now the version discovery mechanism only fetches the version info from server side if the versioned url has been overrode. So that the request url's path won't be changed completely. Changes in keystoneauth1 3.4.0..3.4.1 ------------------------------------- a760e57 OpenDev Migration Patch 1f7b7f5 import zuul job settings from project-config 476d36d Add nosec to instance of sha1 2cc2b03 Add netloc and version check for version discovery fe44f35 Updated from global requirements 65bebd1 Remove tox_install.sh and align with constraints consumption 7e9564b Update UPPER_CONSTRAINTS_FILE for stable/queens 9e1ab7c Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .zuul.yaml | 7 ++++- keystoneauth1/discover.py | 20 +++++++++++++- keystoneauth1/session.py | 2 +- .../notes/bug-1733052-1b4af3b3fe1b05bb.yaml | 7 +++++ test-requirements.txt | 5 +++- tools/tox_install.sh | 30 -------------------- tox.ini | 21 +++++++------- 11 files changed, 84 insertions(+), 47 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index bcc0348..091d151 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +13 @@ oslo.config>=5.1.0 # Apache-2.0 -openstackdocstheme>=1.17.0 # Apache-2.0 +openstackdocstheme>=1.18.1 # Apache-2.0 @@ -24,0 +25,3 @@ PyYAML>=3.10 # MIT +requests-kerberos>=0.6 # ISC +lxml!=3.7.0,>=3.4.1 # BSD +oauthlib>=0.6.0 # BSD

1 0

nova 17.0.13 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We are excited to announce the release of: nova 17.0.13: Cloud computing fabric controller This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 17.0.13 ^^^^^^^ Bug Fixes * Fixes a bug that caused Nova to fail on mounting Quobyte volumes whose volume URL contained multiple registries. Changes in nova 17.0.12..17.0.13 -------------------------------- 5a3430983a rt: only map compute node if we created it 4055261eba Explain nested guest support 55a3796692 Fix unit of hw_rng:rate_period 570664743c Fix exception translation when creating volume 5d89cfed2b Stop sending bad values from libosinfo to libvirt 16b0fb01af libvirt: Rework 'EBUSY' (SIGKILL) error handling code path 37e45ad44c Fixes multi-registry config in Quobyte driver 04bcb98678 lxc: make use of filter python3 compatible 343daa98e0 Drop source node allocations if finish_resize fails 7be81af9ed doc: Fix a broken reference link 81056d1293 Fix rebuild of baremetal instance when vm_state is ERROR fb5d237d3b Fix wrong assertions in unit tests eca5608fe3 Fix 'has_calls' method calls in unit tests fab410ceec Remove experimental job on openSUSE 42.3 8d50b509ec Fix non-existent method of Mock 151c828b1f Fix misuse of nova.objects.base.obj_equal_prims 7302a625ee Hook resource_tracker to remove stale node information d74d764c15 Retrun 400 if invalid query parameters are specified 1bb555c4c9 Add functional recreate test for regression bug 1825537 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 16 --- api-ref/source/parameters.yaml | 18 ++- .../contributor/testing/zero-downtime-upgrade.rst | 2 +- nova/api/openstack/compute/schemas/flavors.py | 16 ++- nova/compute/manager.py | 42 ++++++- nova/compute/resource_tracker.py | 16 ++- nova/exception.py | 4 + .../functional/regressions/test_bug_1825537.py | 97 ++++++++++++++++ nova/virt/disk/mount/nbd.py | 5 +- nova/virt/fake.py | 7 ++ nova/virt/ironic/driver.py | 6 +- nova/virt/libvirt/driver.py | 45 ++++++-- nova/virt/libvirt/volume/quobyte.py | 54 ++++----- nova/virt/osinfo.py | 27 +++-- nova/volume/cinder.py | 16 ++- .../notes/qb-bug-1730933-6695470ebaee0fbd.yaml | 5 + 39 files changed, 889 insertions(+), 237 deletions(-)

1 0

aodhclient 1.4.0 (ussuri)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We are glad to announce the release of: aodhclient 1.4.0: Python client library for Aodh This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/aodhclient Download the package from: https://pypi.org/project/aodhclient For more details, please see below. Changes in aodhclient 1.3.0..1.4.0 ---------------------------------- ec0ee16 Add support for loadbalancer_member_health alarms 015226c Update master for stable/train 0d7aa08 Bump the openstackdocstheme extension to 1.20 Diffstat (except docs and test files) ------------------------------------- aodhclient/v2/alarm.py | 9 ++++++++ aodhclient/v2/alarm_cli.py | 40 ++++++++++++++++++++++++++++++++- releasenotes/source/conf.py | 16 ------------- releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 +++++ 8 files changed, 68 insertions(+), 24 deletions(-)

1 0

python-novaclient 10.1.1 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We enthusiastically announce the release of: python-novaclient 10.1.1: Client library for OpenStack Compute API This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/python-novaclient Download the package from: https://pypi.org/project/python-novaclient Please report issues through: https://bugs.launchpad.net/python-novaclient/+bugs For more details, please see below. 10.1.1 ^^^^^^ Bug Fixes * The user data argument in the "nova rebuild" command was passing the filename as userdata. Now this passes the contents of the file as intended. Changes in python-novaclient 10.1.0..10.1.1 ------------------------------------------- af961861 OpenDev Migration Patch 26d80661 Replace openstack.org git:// URLs with https:// 777ca6f2 Follow up "Fix up userdata argument to rebuild" 154b29b7 Fix up userdata argument to rebuild. ea866538 import zuul job settings from project-config 57a03074 Switch to stestr 52dbdd3f Updated from global requirements b3553f2e Update UPPER_CONSTRAINTS_FILE for stable/queens abe2087a Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 +- .gitreview | 3 ++- .stestr.conf | 3 +++ .testr.conf | 7 ----- .zuul.yaml | 13 ++++++++-- novaclient/v2/shell.py | 18 ++++++++++--- .../legacy/novaclient-dsvm-functional/run.yaml | 6 ++--- .../fix-rebuild-userdata-9315e5784feb8ba9.yaml | 6 +++++ test-requirements.txt | 2 +- tools/pretty_tox.sh | 16 ------------ tox.ini | 30 ++++++++++------------ 13 files changed, 74 insertions(+), 56 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index d66dda68..34eb71b5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -18 +18 @@ osprofiler>=1.4.0 # Apache-2.0 -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=1.0.0 # Apache-2.0

1 0

os_vif 1.9.2 (queens)
by no-reply＠openstack.org 30 Oct '19

30 Oct '19

We eagerly announce the release of: os_vif 1.9.2: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/os_vif Download the package from: https://pypi.org/project/os_vif For more details, please see below. 1.9.2 ^^^^^ Security Issues * Prevent Linux Bridge from replying to ARP messages. It should reply only if the target IP address is a local address configured on the incoming interface and it should always use the best local address. See The ARP flux problem (http://linux-ip.net/html/ether- arp.html #ether-arp-flux) for more information. Changes in os_vif 1.9.1..1.9.2 ------------------------------ 7b84b52 Prevent "qbr" Linux Bridge from replying to ARP messages e09d879 add upper_constraints support 67db840 OpenDev Migration Patch 3d551a9 import zuul job settings from project-config 37da821 fix tox py27 job b026d54 Fix VF-rep lookup routine to use parent PF number Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 7 ++ .../prevent-lb-reply-arp-6459133bfb056069.yaml | 8 ++ tox.ini | 11 ++- vif_plug_linux_bridge/linux_net.py | 17 +++++ vif_plug_ovs/linux_net.py | 69 ++++++++++++++++- 8 files changed, 189 insertions(+), 19 deletions(-)

1 0