January 2022 - Release-announce - lists.openstack.org

manila 12.1.1 (wallaby)
by no-reply＠openstack.org 01 Feb '22

01 Feb '22

We are thrilled to announce the release of: manila 12.1.1: Shared Storage for OpenStack This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 12.1.1 ^^^^^^ Bug Fixes * Fixed an issue during snapshot creation where a database error was being mishandled with dead code. See Launchpad bug 1475351 (https://launchpad.net/bugs/1475351) for more details. * Fixed periodic_share_replica_update() to skip active replicas similarly to periodic_share_replica_snapshot_update(). The intention is to check on non-active replicas, that can be 'in_sync', 'out_of_sync' or in 'error' state. * When "cephfs_ganesha_server_ip" is not set, the current hostname is used as a default for such config option. The driver was treating this value as an IP address and trying to perform validations on it. The CEPH NFS driver will no longer treat hostnames as ip addresses and try to validate them as such. Changes in manila 12.1.0..12.1.1 -------------------------------- a5aecc22 Update admin, user and contributor guide f7376849 early return for _share_replica_update() if there is no active replica 9cf0afce Handle successful deletion of snapshot if quota commit fails cffad6fd Modify docker instalation for fedora systems c034ed19 Drop non-ASCII character from manila config 027e4cb5 [doc] Fix config and install guide for the generic driver c44108f9 Don't run periodic_share_replica_update() on active replicas 909d437f Adapt CephFS driver to do not try to escape export ip Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 2 +- .../admin/shared-file-systems-share-networks.rst | 15 ++ .../common/dhss-true-mode-configuration.rst | 17 +- manila/share/api.py | 5 +- manila/share/drivers/cephfs/driver.py | 11 +- manila/share/drivers/netapp/options.py | 14 +- manila/share/manager.py | 22 ++- ...hot-if-quota-commit-fails-4d150bf0b71a2fd9.yaml | 6 + ...c-task-for-active-replica-030a982af92f8a62.yaml | 6 + ...t-ip-escaping-on-hostname-e2866be32a8f5e38.yaml | 8 + 14 files changed, 453 insertions(+), 35 deletions(-)

1 0

keystone 18.1.0 (victoria)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We high-spiritedly announce the release of: keystone 18.1.0: OpenStack Identity This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/keystone/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. 18.1.0 ^^^^^^ Security Issues *************** * [bug 1901207 (https://bugs.launchpad.net/keystone/+bug/1901207)] Policy enforcement for application credentials has been updated to protect against invalid ownership checks resulting in unauthorized users being able to get and delete application credentials for other users. Bug Fixes ********* * [bug 1688137 (https://bugs.launchpad.net/keystone/+bug/1688137)] Fixed the AccountLocked exception being shown to the end user since it provides some information that could be exploited by a malicious user. The end user will now see Unauthorized instead of AccountLocked, preventing user info oracle exploitation. * [bug 1878938 (https://bugs.launchpad.net/keystone/+bug/1878938)] Previously when a user used to have system role assignment and tries to delete the same role, the system role assignments still existed in system_assignment table. This causes keystone to return *HTTP 404 Not Found* errors when listing role assignments with names (e.g., *--names* or *?include_names*). If you are affected by this bug, you must remove stale role assignments manually. The following is an example SQL statement you can use to fix the issue, but you should verify it's applicability to your deployment's SQL implementation and version. SQL: * delete from system_assignment where role_id not in (select id from role); * [bug 1885753 (https://bugs.launchpad.net/keystone/+bug/1885753)] Keystone's SQL identity backend now retries update user requests to safely handle stale data when two clients update a user at the same time. * [bug 1896125 (https://bugs.launchpad.net/keystone/+bug/1896125)] Introduced more robust connection handling for asynchronous LDAP requests to address memory leaks fetching data from LDAP backends with low page sizes. * [bug 1901654 (https://bugs.launchpad.net/keystone/+bug/1901654)] Previously, generate_public_ID() in sha256.py assumed the passed arguments is str data type. However, python-ldap 3.0 or later returns bytes data type for attribute values except fields of distinguished names, relative distinguished names, attribute names, queries. If keystone running on Python3 is integrated with LDAP and the LDAP server has local_id variable in its attribute, user login operations will fail due to the assumption and modifiation of python-ldap. By this fix, generate_public_ID() properly handles bytes data type in the parameter. Changes in keystone 18.0.0..18.1.0 ---------------------------------- 4063ad98e Fix typos in application credential policies 65c99d6ef Fix typos in ec2 credential policies f742fadef Fix typo in identity provider policies 4649fe6bf Hide AccountLocked exception from end users 5b7d4c80d Retry update_user when sqlalchemy raises StaleDataErrors 5b860e0b3 Support bytes type in generate_public_ID() 66c3bd8d2 Use app cred user ID in policy enforcement 665948998 Update TOX_CONSTRAINTS_FILE for stable/victoria 42faeb277 Drop lower-constraints job 6f93063ff Delete system role assignments from system_assignment table a26a40d44 Implement more robust connection handling for asynchronous LDAP calls 5680b482c Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - keystone/api/users.py | 47 ++++++++- keystone/assignment/backends/sql.py | 5 + keystone/common/policies/application_credential.py | 4 +- keystone/common/policies/ec2_credential.py | 12 +-- keystone/common/policies/identity_provider.py | 8 +- keystone/identity/backends/ldap/common.py | 106 +++++++++++++-------- keystone/identity/backends/sql.py | 8 ++ keystone/identity/id_generators/sha256.py | 10 +- keystone/notifications.py | 2 + .../protection/v3/test_application_credential.py | 66 +++++++++++++ .../notes/bug-1688137-e4203c9a728690a7.yaml | 8 ++ .../notes/bug-1878938-70ee2af6fdf66004.yaml | 16 ++++ .../notes/bug-1885753-51df25f3ff1d9ae8.yaml | 6 ++ .../notes/bug-1896125-b17a4d12730fe493.yaml | 7 ++ .../notes/bug-1901207-13762f85b8a04481.yaml | 7 ++ .../notes/bug-1901654-69b9f35d11cd0c75.yaml | 10 ++ tox.ini | 6 +- 24 files changed, 352 insertions(+), 64 deletions(-)

1 0

manila 13.0.2 (xena)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We are delighted to announce the release of: manila 13.0.2: Shared Storage for OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 13.0.2 ^^^^^^ Known Issues ************ * User specified scheduler hints such as "same_host" and "different_host" are stored as share metadata with keys such as "__affinity_same_host" and "__affinity_different_host" respectively. These can be manipulated or deleted by end users like all metadata unless prevented by RBAC policy. In a future release, the service will restrict the deletion or manipulation of these specific metadata items. Bug Fixes ********* * Fixed an issue during snapshot creation where a database error was being mishandled with dead code. See Launchpad bug 1475351 (https://launchpad.net/bugs/1475351) for more details. Changes in manila 13.0.1..13.0.2 -------------------------------- 3d812459 Set tempest api version config in devstack plugin 31f7c972 early return for _share_replica_update() if there is no active replica 720f6e3f Update admin, user and contributor guide c72c607e XENA release note regarding scheduler filters f96d6278 Handle successful deletion of snapshot if quota commit fails 967a6ded Modify docker instalation for fedora systems 0fb10e6c Drop non-ASCII character from manila config Diffstat (except docs and test files) ------------------------------------- contrib/ci/post_test_hook.sh | 17 --- devstack/plugin.sh | 18 ++- .../admin/shared-file-systems-share-networks.rst | 15 +++ manila/share/api.py | 5 +- manila/share/drivers/netapp/options.py | 14 +-- manila/share/manager.py | 19 ++- ...-only-metadata-xena-issue-91690edef7bc13aa.yaml | 10 ++ ...hot-if-quota-commit-fails-4d150bf0b71a2fd9.yaml | 6 + 11 files changed, 251 insertions(+), 29 deletions(-)

1 0

openstack-ansible 22.4.1 (victoria)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We enthusiastically announce the release of: openstack-ansible 22.4.1: Ansible playbooks for deploying OpenStack This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 22.4.0..22.4.1 ------------------------------------------- 9f0f3710c Fix definition of ssl_protocol 69ae9db95 Bump OpenStack-Ansible Victoria eee3e2b4a Add nfs deployment scenario 0c181a028 Fix rich version for ansible-lint Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 14 +-- global-requirement-pins.txt | 1 + inventory/group_vars/all/ssl.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 112 ++++++++++----------- .../bootstrap-host/tasks/prepare_aio_config.yml | 3 + .../templates/user_variables_nfs.yml.j2 | 9 ++ zuul.d/jobs.yaml | 5 + zuul.d/project-templates.yaml | 9 ++ 16 files changed, 212 insertions(+), 67 deletions(-)

1 0

openstack-ansible 23.2.1 (wallaby)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We are satisfied to announce the release of: openstack-ansible 23.2.1: Ansible playbooks for deploying OpenStack This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 23.2.0..23.2.1 ------------------------------------------- c2db3718f Fix infra scenario repo server cluster c722b7815 Gather additional facts for haproxy playbook a06cd7192 Fix definition of ssl_protocol c33deff11 Set infra_lxc job to centos-8-stream 1c59a829f Bump OpenStack-Ansible Wallaby 839f97ab2 Remove CI jobs for centos-8 7700ae53a Fix rich version for ansible-lint 8a7ceff3d Add nfs deployment scenario b27fe341d [doc] Clean out project index page for stable branches Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 18 +-- .../openstack_user_config.yml.aio.j2 | 5 +- inventory/group_vars/all/ssl.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 112 ++++++++--------- playbooks/haproxy-install.yml | 4 + scripts/gate-check-commit.sh | 3 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 3 + .../templates/user_variables_nfs.yml.j2 | 9 ++ zuul.d/jobs.yaml | 74 ++---------- zuul.d/playbooks/pre-gate-cleanup.yml | 11 -- zuul.d/project-templates.yaml | 26 ++-- 20 files changed, 229 insertions(+), 293 deletions(-)

1 0

openstack-ansible 24.0.1 (xena)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We are pumped to announce the release of: openstack-ansible 24.0.1: Ansible playbooks for deploying OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 24.0.1 ^^^^^^ Known Issues * In the Xena release, TLS for VNC is enabled by default, for existing deployments this will prevent console access to existing virtual machines, as this configuration change does not apply to existing virtual machines. Virtual machines created after the configuration change are not affected. The virtual machines will run correctly, but your are not able to access them via the console. There are three possible solutions to enable console access for existing virtual machines; disable TLS for VNC, restart the virtual machine or live migrate the virtual machine. TLS for VNC can be disabled by setting "nova_qemu_vnc_tls" variable to "0" in the "/etc/openstack_deploy/user_variables.yml" file. Changes in openstack-ansible 24.0.0..24.0.1 ------------------------------------------- 725d19bc0 Fix infra scenario repo server cluster b44b6d8f3 Gather additional facts for haproxy playbook f57d9983d Fix definition of ssl_protocol 027803010 Remove CI jobs for centos-8 147997cd8 Bump OpenStack-Ansible Xena 20d2ba990 Add Ironic-related bridges to AIO e1a067ab3 Fix rich version for ansible-lint b32678a5f Update notes on how to enable TLS for VNC Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 24 ++--- etc/openstack_deploy/openstack_user_config.yml.aio | 14 +++ .../openstack_user_config.yml.aio.j2 | 25 ++++- inventory/group_vars/all/ssl.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 110 ++++++++++----------- playbooks/haproxy-install.yml | 4 + .../notes/vnc-proxy-error-c081c682cacec70e.yaml | 15 +++ scripts/gate-check-commit.sh | 3 +- .../bootstrap-host/tasks/prepare_networking.yml | 26 +++++ .../templates/user_variables.aio.yml.j2 | 2 +- .../templates/user_variables_ironic.yml.j2 | 7 ++ zuul.d/jobs.yaml | 64 ------------ zuul.d/playbooks/pre-gate-cleanup.yml | 11 --- zuul.d/project-templates.yaml | 13 --- 17 files changed, 172 insertions(+), 164 deletions(-)

1 0

kuryr-lib 2.1.1 (victoria)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We are pleased to announce the release of: kuryr-lib 2.1.1: Kuryr shared config and utilities This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kuryr-lib Download the package from: https://tarballs.openstack.org/kuryr/ For more details, please see below. Changes in kuryr-lib 2.1.0..2.1.1 --------------------------------- 0af5226 Remove run_as_root which fails without root_helper e43bf23 Remove the unused coding style modules 4081dfd Fix pep8 and lower-constraints gates a338724 Update TOX_CONSTRAINTS_FILE for stable/victoria 35eafe2 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + kuryr/cmd/status.py | 1 + kuryr/lib/binding/drivers/hw_veb.py | 1 - kuryr/lib/binding/drivers/veth.py | 5 ++--- kuryr/lib/opts.py | 7 ++++--- lower-constraints.txt | 9 ++------- requirements.txt | 2 +- test-requirements.txt | 2 +- tox.ini | 2 +- 11 files changed, 16 insertions(+), 22 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e7df952..205b94f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -pyroute2>=0.4.21;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) +pyroute2>=0.5.6;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) diff --git a/test-requirements.txt b/test-requirements.txt index c5ea2e5..c899d1c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ ddt>=1.0.1 # MIT -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0

1 0

oslo.service 2.5.1 (wallaby)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We enthusiastically announce the release of: oslo.service 2.5.1: oslo.service library This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. 2.5.1 ^^^^^ New Features * A new config options, "[DEFAULT] wsgi_server_debug", has been added. This allows admins to configure whether the server should send exception tracebacks to the clients on HTTP 500 errors. This defaults to "False", preserving previous behavior. Changes in oslo.service 2.5.0..2.5.1 ------------------------------------ c1e3398 Make debug option of wsgi server configurable 36f5e36 Update TOX_CONSTRAINTS_FILE for stable/wallaby d26fc6f Update .gitreview for stable/wallaby 20e089f Move flake8 as a pre-commit local target. Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pre-commit-config.yaml | 10 +++++++--- oslo_service/_options.py | 5 +++++ oslo_service/wsgi.py | 2 +- .../notes/add-wsgi_server_debug-opt-70d818b5b78bfc7c.yaml | 7 +++++++ tox.ini | 4 ++-- 6 files changed, 23 insertions(+), 6 deletions(-)

1 0

oslo.service 2.6.1 (xena)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We exuberantly announce the release of: oslo.service 2.6.1: oslo.service library This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. 2.6.1 ^^^^^ New Features * A new config options, "[DEFAULT] wsgi_server_debug", has been added. This allows admins to configure whether the server should send exception tracebacks to the clients on HTTP 500 errors. This defaults to "False", preserving previous behavior. Changes in oslo.service 2.6.0..2.6.1 ------------------------------------ 13ee22c Make debug option of wsgi server configurable 7be76c2 Update TOX_CONSTRAINTS_FILE for stable/xena 48881c4 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_service/_options.py | 5 +++++ oslo_service/wsgi.py | 2 +- releasenotes/notes/add-wsgi_server_debug-opt-70d818b5b78bfc7c.yaml | 7 +++++++ tox.ini | 4 ++-- 5 files changed, 16 insertions(+), 3 deletions(-)

1 0

os-ken 1.2.1 (victoria)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We are pumped to announce the release of: os-ken 1.2.1: A component-based software defined networking framework for OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/os-ken Download the package from: https://pypi.org/project/os-ken Please report issues through: https://storyboard.openstack.org/#!/project/openstack/os-ken For more details, please see below. Changes in os-ken 1.2.0..1.2.1 ------------------------------ 5e9a961c Avoid missing key 'password' for neighbor_add e6f2c0d1 Avoid logging MD5 password for BGP add neighbor c58c8019 Add requirements.txt to tox environment 49976897 Update TOX_CONSTRAINTS_FILE for stable/victoria df38cf4a Update .gitreview for stable/victoria b17f6fcb Fix lower-constraints and pep8 for Focal Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 5 +- lower-constraints.txt | 146 ------------------------------ os_ken/lib/packet/cfm.py | 2 +- os_ken/services/protocols/bgp/api/base.py | 8 +- requirements.txt | 2 +- test-requirements.txt | 2 +- tox.ini | 17 ++-- 9 files changed, 24 insertions(+), 160 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 35763f29..9caccef8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ netaddr>=0.7.18 # BSD -oslo.config>=2.5.0 +oslo.config>=5.1.0 diff --git a/test-requirements.txt b/test-requirements.txt index f9cdda91..f429a7f2 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=0.12.0,<0.13 # Apache-2.0 +hacking>=3.2.0,<3.3.0 # Apache-2.0

1 0