January 2023 - Release-announce - lists.openstack.org

glance 25.1.0 (zed)
by no-reply＠openstack.org 31 Jan '23

31 Jan '23

We are tickled pink to announce the release of: glance 25.1.0: OpenStack Image Service This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. Changes in glance 25.0.0..25.1.0 -------------------------------- 022e1502 Fix tox4 error 4967ab69 Enforce image safety during image_conversion 07f98747 Fix unintentional exception inspecting VMDK 06a92288 [stable-only] Remove glance-code-constants-check 014ae273 Update TOX_CONSTRAINTS_FILE for stable/zed 9cf5206c Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 --------- glance/async_/flows/plugins/image_conversion.py | 23 +++++++++++ glance/common/config.py | 12 ++++++ glance/common/format_inspector.py | 2 +- .../async_/flows/plugins/test_image_conversion.py | 47 ++++++++++++++++++++++ tox.ini | 7 ++-- 8 files changed, 106 insertions(+), 23 deletions(-)

1 0

swift 2.31.0 (antelope)
by no-reply＠openstack.org 31 Jan '23

31 Jan '23

We are psyched to announce the release of: swift 2.31.0: OpenStack Object Storage This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.31.0 ^^^^^^ New Features ************ * Added support for Python 3.10. * Added an optional "backend_ratelimit" middleware for backend servers. See the backend server sample configuration files for more information. * Sharding improvements * Added a "merge" subcommand to "swift-manage-shard-ranges" to merge arbitrary shard ranges into a container DB. Minimal safety checks are performed; it should only be used for emergency shard range manipulation by expert users. * Warnings are now emitted when sharding appears to have become stuck. Use the new "container_sharding_timeout" option to configure the "stuck" threshold; the default is 48 hours. * Metrics improvements * Added timing stats for memcached operations. * Renamed and improved the granularity of shard range cache and backend stats. Metrics dashboards may need to be updated. * Emit stats when backend nodes are error-limited. * Added the ability to configure a chance to skip checking memcache when querying account and container information. This allows some fraction of traffic to go to disk and refresh memcache before the key ages out. Recommended values for the new "account_existence_skip_cache_pct" and "container_existence_skip_cache_pct" options are in the range of 0.0 to 0.01. * Absolute-form request targets are now accepted. This enables access for certain clients and SDKs (including some older versions of rclone that were using an old version of aws-sdk-go). Upgrade Notes ************* * Static large object segments may now be deleted asynchronously by default. Operators may return to the old behavior by disabling the "allow_async_delete" option in the "[filter:slo]" section in their proxy-server.conf. Security Issues *************** * Fixed a security issue in how "s3api" handles XML parsing that allowed authenticated S3 clients to read arbitrary files from proxy servers. Refer to CVE-2022-47950 for more information. Bug Fixes ********* * S3 API improvements * Fixed a server error when handling malformed CompleteMultipartUpload requests. * Improved error reporting when attempting to set invalid "X-Delete- At" or "X-Delete-After" values via the S3 API. * Sharding improvements * Sync more shard ranges from the root database to the shards. This helps ensure shard range repairs effected at the root make their way to shards that would otherwise be stuck trying to further divide into sub-shards. * Improved performance of "delimiter" listings for sharded containers. * Added more safety checks to the "repair" subcommand of "swift- manage-shard-ranges". * Better handle "EOFError" and "KeyboardInterrupt" when prompting for input in "swift-manage-shard-ranges". * Stop warning about transient overlaps when auditing shard ranges. * Fixed a path-rewriting bug introduced in Python 3.7.14, 3.8.14, 3.9.14, and 3.10.6 that could cause some "domain_remap" requests to be routed to the wrong object. * Fixed a server error when attempting to access data in a deleted container that had an erasure-coded storage policy. * Improved error messages to clients that encounter errors using the "formpost" middleware. * Removed some inappropriate error-suppression when locking account and container databases. * Improved server start-up time when using multiple workers. * Removed some unnecessary locking when logging. * Added some basic object-metadata validation; invalid diskfiles will be quarantined via the auditor or reconstructor. * Enhanced logging when error-limiting a backend node. * Various other minor bug fixes and improvements. Changes in swift 2.30.0..2.31.0 ------------------------------- 90f9a479b Authors/ChangeLog for 2.31.0 5de745c2b Add Kota's private email address to mailmap 941b9082d Proxy: move '_get_update_shard' from base class to child class. 2f32d0770 swift_proxy: add memcache skip success/error stats for shard range. 30ffafb3e Clean up some cruft 3550e00dd tests: Ensure XXE injection tests have config loaded 51a944850 Skip coverage reports when running pytest directly 908595ee0 Don't run reno as part of building an sdist cc1c649de Clean up project URLs for PyPI dd9b687f7 Fix docs build b8467e190 s3api: Prevent XXE injections 69b18e3c5 tests: Remove references to soft_lock 930744f36 Declare py310 support fb477d17a CI: Remove nodeset pin for DSVM jobs ee12a11e7 Add attrs to lower-constraints b4124e0cd Memcached: add timing stats to set/get and other public functions f77172e2a CI: pin tox at the project level ec9504733 Sharder: add a new probe test for the case of slow parent sharding. f6ac7d449 Tolerate absolute-form request targets 2d7c1dc6d CI: Fix our usage of tox 20b48a690 Clean up a bunch of deprecation warnings 2d0fea6a5 CI: Add py310 unit test job ef155bd74 Switch to pytest 884f5538f Inline parse_request from cpython 597887ded Extract SwiftHttpProtocol to its own module 4cba97d7b Malformed CompleteMultipartUpload request should 400 d363236a2 s3api errors for unsupported headers x-delete-at, x-delete-after 001d931e6 sharder: update own_sr stats explicitly 07b909c26 s-m-s-r: handle EOFError and KeyboardInterrupt 861d13c51 DB locks shouldn't squelch errors 662ef2808 trivial: fix flakey account/test_auditor.py assertion a1939cba0 proxy: add test for ContainerController._GET_using_cache bd5d09903 proxy: refactor ContainerController._GET_using_cache 7a0118fca proxy-server: include suppression time in error limit log 230b467af sharding: avoid transient overlaps while auditing. 5a9f5f521 Temporary pin the swift-dsvm-functional nodeset to Focal 983622d51 account_auditor: fix warning string 26c86c0e4 db_auditor: remove logging translation 2bcf3d1a8 sharder: merge shard shard_ranges from root while sharding 12df65e37 Imported Translations from Zanata 38124221d Proxy: add metrics related to error limiter. d1b2bbdcf Mark rolling-upgrade job non-voting 623024848 proxy: extract response error handling to single method 162847d15 tests: Tolerate NoSuchBucket errors when cleaning up f08b8e0af wsgi: Start workers in parallel, rather than serially 052abed75 Move base CI job to jammy c4ad66b49 Sharder: add more logs during container cleaving. 3571cdf2f CI: Install pip from pinned upstream for py2 probe tests a8516e151 Refactor memcache config and MemcacheRing loading 51730f127 proxy: refactor error limiter to a class a7af17394 Clean up some replication error messages 326e68d70 Fix a formpost reponse bug 79e8f56ac Imported Translations from Zanata cc033154a py2constraints: pin PasteDeploy version 4ed2b89cb Sharder: warn when sharding appears to have stalled. e09d4bcf4 Stop locking in our SysLogHandler 07b5f139a playbooks: replace ansible_ssh_user with ansible_user a46f2324a sharder: always merge child shard ranges fetched from root e838d8a94 swift-drive-audit: reload systemd after editing fstab f15b92084 sharder: always get ranges from root while shrinking 429702e30 sharder: refactor _audit_shard_container 7b345e754 Update master for stable/zed a425f06ee Imported Translations from Zanata 6bcb50985 sharder: trivial tidy up of unit tests 94fb7a0e7 Set irrelevant-files for openstacksdk-functional-devstack job 0860db1f6 Fix test.probe.brain CLI 9bdb77a38 Fixes Storage-Policy AttributeError in proxy a53270a15 swift-manage-shard-ranges repair: check for parent-child overlaps. 032d7aa05 ShardName: add test and clarify docstrings 73bce6331 ShardRange: add is_child_of method 745a7f04f Add validation method for metadata in ECDiskfile 3e6650f99 Fix misuse of assertTrue d2edf6646 swift-manage-shard-ranges: add 'merge' subcommand 5c6407bf5 proxy: Add a chance to skip memcache for get_*_info calls c4ff49c32 CI: Add rolling upgrade job coming from stable/yoga a9177a4b9 Add note about rsync_bwlimit suffixes da52e5675 Migrate CentOS Stream 8 FIPS job to CentOS Stream 9 d0feee190 Add MPU to s3api tests 17664cfb9 Use daemon property instead of setDaemon method 61624ab83 swift-manage-shard-ranges repair: ignore recent overlaps 38866a396 Optimize ShardRanges a little 85d063b20 ring: Have RingBuilder.debug return to old state 25463b253 sharding: Skip shards that can't include any new subdir entries ccaf49a00 Add backend rate limiting middleware fa1058b6e slo: Default allow_async_delete to true Diffstat (except docs and test files) ------------------------------------- .mailmap | 4 +- .zuul.yaml | 155 +- AUTHORS | 6 +- CHANGELOG | 95 ++ CONTRIBUTING.rst | 4 +- bin/swift-drive-audit | 4 + bindep.txt | 2 +- etc/account-server.conf-sample | 14 +- etc/container-server.conf-sample | 20 +- etc/object-server.conf-sample | 17 +- etc/proxy-server.conf-sample | 4 +- lower-constraints.txt | 8 +- py2-constraints.txt | 7 +- py36-constraints.txt | 3 - .../notes/2_31_0_release-77e6b20dfba3b32c.yaml | 118 ++ releasenotes/source/index.rst | 2 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 164 ++- releasenotes/source/zed.rst | 6 + setup.cfg | 23 +- swift/__init__.py | 10 +- swift/account/auditor.py | 7 +- swift/account/reaper.py | 17 +- swift/cli/dispersion_report.py | 7 +- swift/cli/manage_shard_ranges.py | 222 ++- swift/common/db.py | 19 +- swift/common/db_auditor.py | 19 +- swift/common/error_limiter.py | 93 ++ swift/common/http_protocol.py | 326 +++++ swift/common/memcached.py | 118 +- swift/common/middleware/backend_ratelimit.py | 86 ++ swift/common/middleware/formpost.py | 26 +- swift/common/middleware/memcache.py | 96 +- .../middleware/s3api/controllers/multi_upload.py | 20 +- swift/common/middleware/s3api/etree.py | 2 +- swift/common/middleware/s3api/exception.py | 4 - swift/common/middleware/s3api/s3api.py | 3 + swift/common/middleware/s3api/s3request.py | 18 +- swift/common/middleware/slo.py | 4 +- .../common/middleware/versioned_writes/__init__.py | 3 + swift/common/ring/builder.py | 4 +- swift/common/swob.py | 3 + swift/common/utils.py | 354 ++++- swift/common/wsgi.py | 266 +--- swift/container/backend.py | 108 +- swift/container/sharder.py | 510 +++++-- swift/container/updater.py | 12 +- swift/obj/auditor.py | 4 + swift/obj/diskfile.py | 14 + swift/obj/reconstructor.py | 19 +- swift/obj/replicator.py | 19 +- swift/obj/ssync_sender.py | 18 +- swift/obj/updater.py | 19 +- swift/proxy/controllers/base.py | 162 +-- swift/proxy/controllers/container.py | 297 ++-- swift/proxy/controllers/obj.py | 113 +- swift/proxy/server.py | 124 +- test-requirements.txt | 7 +- test/__init__.py | 55 +- test/functional/__init__.py | 3 +- test/functional/s3api/test_object.py | 51 +- test/functional/s3api/test_presigned.py | 30 + test/functional/s3api/test_xxe_injection.py | 231 +++ test/probe/brain.py | 5 +- test/probe/common.py | 22 + test/probe/test_sharder.py | 335 ++++- test/s3api/__init__.py | 4 + test/s3api/test_mpu.py | 140 ++ test/s3api/test_request_target_style.py | 56 + test/unit/__init__.py | 4 - test/unit/account/test_auditor.py | 6 +- test/unit/cli/test_manage_shard_ranges.py | 625 +++++++- test/unit/common/middleware/helpers.py | 4 +- test/unit/common/middleware/s3api/__init__.py | 5 + .../common/middleware/s3api/test_multi_delete.py | 40 + test/unit/common/middleware/s3api/test_s3token.py | 12 +- .../common/middleware/test_backend_ratelimit.py | 170 +++ test/unit/common/middleware/test_formpost.py | 32 +- test/unit/common/middleware/test_memcache.py | 214 +-- test/unit/common/middleware/test_slo.py | 10 +- test/unit/common/test_db.py | 23 +- test/unit/common/test_db_replicator.py | 93 +- test/unit/common/test_error_limiter.py | 99 ++ test/unit/common/test_http_protocol.py | 454 ++++++ test/unit/common/test_manager.py | 6 +- test/unit/common/test_memcached.py | 276 ++++ test/unit/common/test_storage_policy.py | 5 +- test/unit/common/test_utils.py | 537 ++++++- test/unit/common/test_wsgi.py | 335 +---- test/unit/container/test_backend.py | 125 +- test/unit/container/test_server.py | 15 +- test/unit/container/test_sharder.py | 1526 +++++++++++++++++--- test/unit/helpers.py | 8 +- test/unit/obj/common.py | 1 + test/unit/obj/test_auditor.py | 31 +- test/unit/obj/test_diskfile.py | 36 +- test/unit/obj/test_replicator.py | 24 +- test/unit/obj/test_server.py | 10 +- test/unit/obj/test_ssync.py | 1 + test/unit/proxy/controllers/test_base.py | 56 +- test/unit/proxy/controllers/test_container.py | 583 +++++++- test/unit/proxy/controllers/test_obj.py | 26 +- test/unit/proxy/test_server.py | 619 ++++++-- tools/playbooks/common/install_dependencies.yaml | 24 +- tools/playbooks/multinode_setup/common_config.yaml | 4 +- tools/playbooks/multinode_setup/make_rings.yaml | 8 +- tools/playbooks/multinode_setup/run.yaml | 2 +- .../templates/make_multinode_rings.j2 | 2 +- .../saio_single_node_setup/setup_saio.yaml | 14 +- tools/test-setup.sh | 12 + tox.ini | 43 +- 117 files changed, 8657 insertions(+), 2648 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 7eb48af72..488080ae5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7,4 +7,3 @@ hacking>=2.0,<2.1.0 # Apache-2.0 -coverage>=3.6 # Apache-2.0 -nose>=1.3.7 # LGPL -nosexcover>=1.0.10 # BSD -nosehtmloutput>=0.0.3 # Apache-2.0 +coverage>=5.0.4 # Apache-2.0 +pytest>=4.6.11 # MIT +pytest-cov>=2.12.1 # MIT

1 0

ironic 21.3.0 (antelope)
by no-reply＠openstack.org 31 Jan '23

31 Jan '23

We exuberantly announce the release of: ironic 21.3.0: OpenStack Bare Metal Provisioning This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 21.3.0 ^^^^^^ New Features ************ * Adds API version "1.81" which enables fetching node inventory which might have been stored during introspection * Adds verify step and node vendor passthru method to deal with a firmware incompatibility issue with iRMC versions S6 2.00 and later in which HTTP connection to REST API is not supported and HTTPS connections to REST API is required. Verify step checks connection to iRMC REST API and if connection succeeds, it fetches version of iRMC firmware and store it in "driver_internal_info/irmc_fw_version". Ironic operators use node vendor passthru method to fetch & update iRMC firmware version cached in "driver_internal_info/irmc_fw_version". Upgrade Notes ************* * Since iRMC versions S6 2.00 and later, iRMC firmware doesn't support HTTP connection to REST API. Operators need to set "[irmc] port" in ironic.conf or "driver_info/irmc_port" to 443. * When Ironic operator uses irmc driver against Fujitsu server which runs iRMC version S6 2.00 or later, operator may need to set Redfish parameters in "driver_info" so this fix can operate properly or operator should enable IPMI over LAN through BMC settings, if possible. Bug Fixes ********* * Fixes an issue where if selinux is enabled and enforcing, and the published image is a hardlink, the source selinux context is preserved, causing access denied when retrieving the image using hardlink URL. * Fixes the default value for the "[DEFAULT]grub_config_path" variable to be the default path for UEFI bootloader configurations, where as the default was previously the BIOS grub2 configuration path. * Fixes a firmware incompatibility issue with iRMC versions S6 2.00 and later now doesn't support IPMI over LAN by default. To deal with this problem, irmc driver first tries IPMI operation then, if IPMI operation fails, it tries Redfish API of Fujitsu server. The operator must set Redfish parameters in the "driver_info" if iRMC disable or doesn't support IPMI over LAN. * Fixes "'NoneType' object is not iterable" in conductor logs for "redfish" and "idrac-redfish" RAID clean and deploy steps. The message should no longer appear. For affected nodes re-create the node or delete "raid_configs" entry from "driver_internal_info" field. Changes in ironic 21.2.0..21.3.0 -------------------------------- fbe22b23b Move and fix reno config for releasenotes job 692a383fd [CI] Swap anaconda urls b63d15ccd Make reno ignore bugfix eol tags 38777e503 Clarify release docs: bugfix releases optional fe69e06c7 Reorganise Inventory Storage 8604a799a Docs: Troubleshooting: how to exit clean failed f8608dbd9 Use new get_rpc_client API from oslo.messaging 9a85e4787 CI: Fix race prone unit test in networking f11321099 Create [inventory] d23f72ee5 [iRMC] Handle IPMI incompatibility in iRMC S6 2.x eae33a0ac [iRMC] identify BMC firmware version 2e80ea909 API for node inventory c05c09fd3 Fix selinux context of published image hardlink 2f4a156d2 Fix grub config path default 5cd7bfc52 Docs: Add considerations to anaconda docs 05f6003fe [DOC] Add entry regarding cleaning+raid ca5ed66d5 setup.py: Remove 'py_modules' 0230d361f CI: Reset VM footprint to 2.6GB 1d07be823 Use centos grub artifacts with centos ramdisk for vmedia cab04afe6 Create IRONIC_VM_MACS_CSV_FILE if it does not exist 7150478cd Fix unbound variable in devstack plugin 93158aadd Use tinycore 13 for base ramdisk image 6b84fbf8f Fix CI facd1bca6 Remove lib/neutron-legacy leftovers 17c9e58c9 Fix "'NoneType' object is not iterable" in RAID ef772c2c1 Fixes for tox 4.0 8b00932e4 Use association_proxy for ports node_uuid 44ccc397c Add doc for lsblk: /dev/nvme0n1p2: not a block device 973d3b6ea Enable alternative storage for inventory Diffstat (except docs and test files) ------------------------------------- .../source/baremetal-api-v1-nodes-inventory.inc | 40 +++ api-ref/source/parameters.yaml | 12 + .../source/samples/node-inventory-response.json | 31 ++ devstack/lib/ironic | 21 +- devstack/plugin.sh | 2 +- devstack/upgrade/upgrade.sh | 2 +- ironic/api/controllers/v1/node.py | 25 +- ironic/api/controllers/v1/port.py | 8 +- ironic/api/controllers/v1/utils.py | 5 + ironic/api/controllers/v1/versions.py | 4 +- ironic/common/policy.py | 13 + ironic/common/release_mappings.py | 4 +- ironic/common/rpc.py | 7 +- ironic/common/swift.py | 42 +++ ironic/conf/__init__.py | 2 + ironic/conf/default.py | 2 +- ironic/conf/inventory.py | 34 +++ ironic/conf/opts.py | 1 + ironic/db/sqlalchemy/api.py | 4 +- ironic/db/sqlalchemy/models.py | 10 + ironic/drivers/irmc.py | 6 + ironic/drivers/modules/image_utils.py | 10 + ironic/drivers/modules/inspect_utils.py | 87 ++++++ ironic/drivers/modules/inspector.py | 14 +- ironic/drivers/modules/irmc/common.py | 219 +++++++++++++ ironic/drivers/modules/irmc/inspect.py | 89 ++++-- ironic/drivers/modules/irmc/management.py | 287 +++++++++++++++--- ironic/drivers/modules/irmc/power.py | 57 +++- ironic/drivers/modules/irmc/vendor.py | 75 +++++ ironic/drivers/modules/redfish/raid.py | 8 +- ironic/objects/port.py | 8 +- .../unit/drivers/modules/irmc/test_inspect.py | 107 ++++++- .../unit/drivers/modules/irmc/test_management.py | 337 ++++++++++++++++++++- .../unit/drivers/modules/network/test_common.py | 4 +- .../unit/drivers/modules/redfish/test_raid.py | 4 + .../unit/drivers/modules/test_inspect_utils.py | 121 ++++++++ .../unit/drivers/third_party_driver_mock_specs.py | 2 + releasenotes/config.yaml | 5 + .../notes/add-node-inventory-7cde961b14caa11e.yaml | 5 + ...ix-context-image-hardlink-16f452974abc7327.yaml | 7 + ...ix-grub2-uefi-config-path-f1b4c5083cc97ee5.yaml | 14 + ...2.00-http-incompatibility-61a31d12aa33fbd8.yaml | 19 ++ ...2.00-ipmi-incompatibility-118484a424df02b1.yaml | 15 + ...pe-object-is-not-iterable-0592926d890d6c11.yaml | 7 + reno.yaml | 4 - requirements.txt | 2 +- setup.cfg | 1 + setup.py | 4 +- tox.ini | 12 +- zuul.d/ironic-jobs.yaml | 10 +- 67 files changed, 2303 insertions(+), 209 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8a57727ec..0c73e632e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -42 +42 @@ keystonemiddleware>=9.5.0 # Apache-2.0 -oslo.messaging>=5.29.0 # Apache-2.0 +oslo.messaging>=14.1.0 # Apache-2.0

1 0

glance 24.2.0 (yoga)
by no-reply＠openstack.org 31 Jan '23

31 Jan '23

We are jazzed to announce the release of: glance 24.2.0: OpenStack Image Service This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. 24.2.0 ^^^^^^ Upgrade Notes ************* * The Image service API call "DELETE /v2/cache/{image_id}" and "DELETE /v2/cache" now returns a 204 (No Content) response code to indicate success. In glance 24.0.0 (the initial Yoga release), it had mistakenly returned a 200. Bug Fixes ********* * Bug #1979699 (https://bugs.launchpad.net/glance/+bug/1979699): Fix the "glance-cache-prefetcher" command to set up access to backend stores when the multi store feature is used. * Bug 1980049 (https://bugs.launchpad.net/glance/+bug/1980049): Fixed the success response code of the REST API call "DELETE /v2/cache/{image_id}" and "DELETE /v2/cache" to be 204 (No Content), following the original design of the feature. Changes in glance 24.1.0..24.2.0 -------------------------------- 3f6c689b Fix tox4 error dc8e5a5c Enforce image safety during image_conversion 5fbf4737 [stable-only] Remove glance-code-constants-check f3ae67fa Mock getaddrinfo in cinder store tests 20110a7d Fix tests for logging connection info b4091752 glance-cache-prefetcher: Set up access to multistore backends ea4ed6df [APIImpact] Correct API response code for DELETE cache APIs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 19 --------- glance/api/v2/cached_images.py | 6 +++ glance/async_/flows/plugins/image_conversion.py | 23 +++++++++++ glance/cmd/cache_prefetcher.py | 12 ++++-- glance/common/config.py | 12 ++++++ .../v2/test_legacy_update_cinder_store.py | 31 ++++++++++---- .../async_/flows/plugins/test_image_conversion.py | 47 ++++++++++++++++++++++ .../notes/bug-1979699-70182ec2aead0383.yaml | 6 +++ .../notes/bug-1980049-623d2eb0fa074136.yaml | 14 +++++++ tox.ini | 5 ++- 11 files changed, 145 insertions(+), 34 deletions(-)

1 0

glance 23.1.0 (xena)
by no-reply＠openstack.org 31 Jan '23

31 Jan '23

We are overjoyed to announce the release of: glance 23.1.0: OpenStack Image Service This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. 23.1.0 ^^^^^^ Bug Fixes * Bug #1979699 (https://bugs.launchpad.net/glance/+bug/1979699): Fix the "glance-cache-prefetcher" command to set up access to backend stores when the multi store feature is used. Changes in glance 23.0.0..23.1.0 -------------------------------- e45a32d1 Fix tox4 error f45b5f02 Enforce image safety during image_conversion 2281c086 Fix unintentional exception inspecting VMDK 3cfbb69c [stable-only] Remove glance-code-constants-check fc9a53d2 Fix failing namespace list delete race 2f125d83 glance-cache-prefetcher: Set up access to multistore backends 316ce965 Fix set_property_atomic() boolean type casting e1a66af4 [CI] Add upper constraints to install command 965a9783 Add "bochs" as a possible video model 881b24a2 Update qcow test to use qcow2 instead b76dd788 [stable-only] Specify openstacksdk stable branch Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 29 +++++-------- etc/metadefs/compute-libvirt-image.json | 3 +- glance/api/v2/metadef_namespaces.py | 8 +++- glance/async_/flows/plugins/image_conversion.py | 23 +++++++++++ glance/cmd/cache_prefetcher.py | 12 ++++-- glance/common/config.py | 12 ++++++ glance/common/format_inspector.py | 2 +- glance/db/sqlalchemy/api.py | 10 ++--- .../async_/flows/plugins/test_image_conversion.py | 47 ++++++++++++++++++++++ .../notes/bug-1979699-70182ec2aead0383.yaml | 6 +++ tox.ini | 13 +++--- 15 files changed, 187 insertions(+), 40 deletions(-)

1 0

python-openstackclient 5.6.1 (xena)
by no-reply＠openstack.org 31 Jan '23

31 Jan '23

We enthusiastically announce the release of: python-openstackclient 5.6.1: OpenStack Command-line Client This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 5.6.1 ^^^^^ New Features ************ * Add support for compute API microversion 2.47, which changes how flavor details are included in server detail responses. In 2.46 and below, only the flavor ID was shown in the server detail response. Starting in 2.47, flavor information is embedded in the server response. The newer behavior is now supported. Bug Fixes ********* * Filtering servers by tags ("server list --tag", "server list --not- tag") now works correctly. [Bug 1946816 (https://bugs.launchpad.net/bugs/1946816)] * Fixed create image from volume command. If user wants to pass "visibility" and "protected" fields, they need to specify volume microversion 3.1 or greater by passing "os-volume-api-version 3.1" with the command. Changes in python-openstackclient 5.6.0..5.6.1 ---------------------------------------------- db417598 compute: Require image when rebuilding a volume-backed server 665d93ff Fix: create image from volume command cde8db3d Stop testing lower-constraints 0873e758 compute: Show flavor in 'server list' with API >= 2.47 f4adbcef compute: Reorder building of columns for 'server list' e53d034f Fix typo error in listing server's column name cbc64f94 compute: Fix filtering servers by tags ec637205 Update TOX_CONSTRAINTS_FILE for stable/xena 33b627bd Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - lower-constraints.txt | 98 ---- openstackclient/compute/v2/server.py | 226 ++++---- openstackclient/image/v2/image.py | 18 +- .../notes/bug-1946816-7665858605453578.yaml | 6 + ...er-list-microversion-2.47-af200e9bb4747e2d.yaml | 8 + ...-image-create-from-volume-c573e553161605c4.yaml | 7 + requirements.txt | 4 + tox.ini | 14 +- 12 files changed, 617 insertions(+), 453 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0ac991da..d3155a25 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. +

1 0

openstacksdk 0.62.0 (yoga)
by no-reply＠openstack.org 31 Jan '23

31 Jan '23

We are happy to announce the release of: openstacksdk 0.62.0: An SDK for building applications to work with OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. Changes in openstacksdk 0.61.0..0.62.0 -------------------------------------- 4ceff8f3 Replace deprecated inspect.getargspec call f41a2039 Update tox.ini for tox v4 compatibility fd300de6 Update TOX_CONSTRAINTS_FILE for stable/yoga d17fbb98 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + openstack/cloud/_utils.py | 2 +- tox.ini | 21 +++++++++++++-------- 3 files changed, 15 insertions(+), 9 deletions(-)

1 0

swift 2.29.2 (yoga)
by no-reply＠openstack.org 31 Jan '23

31 Jan '23

We are excited to announce the release of: swift 2.29.2: OpenStack Object Storage This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.29.2 ^^^^^^ Security Issues *************** * Fixed a security issue in how "s3api" handles XML parsing that allowed authenticated S3 clients to read arbitrary files from proxy servers. Refer to CVE-2022-47950 for more information. * Constant-time string comparisons are now used when checking S3 API signatures. Bug Fixes ********* * Fixed a path-rewriting bug introduced in Python 3.7.14, 3.8.14, 3.9.14, and 3.10.6 that could cause some "domain_remap" requests to be routed to the wrong object. * Improved compatibility with certain FIPS-mode-enabled systems. Changes in swift 2.29.1..2.29.2 ------------------------------- 198798312 Authors/ChangeLog for 2.29.2 d8d04ef43 s3api: Prevent XXE injections e84cd4414 Fix docs build 8cf39653d [stable-only] Pin tox<4 for stable branches (<=stable/zed) testing eb994ea50 CI: pin tox at the project level a6a85919a Inline parse_request from cpython 4d6d6ba51 Extract SwiftHttpProtocol to its own module 5f45626fc playbooks: replace ansible_ssh_user with ansible_user 10849f049 py2constraints: pin PasteDeploy version 3e6ce930b CI: Add nslookup_target to FIPS jobs 00763d5a0 Stop partial()ing hashlib.new 7c888bf6c tests: Fix swiftclient/requests log level & Ignore py36 deprecation warnings 36ebcc848 s3api: Use constant-time string comparisons in check_signature 687515c06 Update TOX_CONSTRAINTS_FILE for stable/yoga 59e7ddd1b Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 8 +- AUTHORS | 1 + CHANGELOG | 16 + py2-constraints.txt | 1 + .../notes/2_29_2_release-de619e50f10cc413.yaml | 20 + swift/__init__.py | 10 +- swift/common/http_protocol.py | 320 ++++++++++++++++ swift/common/middleware/s3api/etree.py | 2 +- swift/common/middleware/s3api/s3request.py | 7 +- swift/common/middleware/tempurl.py | 3 +- swift/common/wsgi.py | 234 +----------- test/__init__.py | 4 + test/functional/__init__.py | 3 +- test/functional/s3api/test_xxe_injection.py | 231 ++++++++++++ test/probe/test_sharder.py | 9 +- .../common/middleware/s3api/test_multi_delete.py | 40 ++ .../unit/common/middleware/s3api/test_s3request.py | 11 + test/unit/common/test_http_protocol.py | 412 +++++++++++++++++++++ test/unit/common/test_wsgi.py | 335 +---------------- test/unit/helpers.py | 2 +- test/unit/proxy/test_server.py | 3 +- tools/playbooks/common/install_dependencies.yaml | 20 +- tools/playbooks/dsvm/pre.yaml | 8 +- tools/playbooks/multinode_setup/common_config.yaml | 4 +- tools/playbooks/multinode_setup/make_rings.yaml | 8 +- tools/playbooks/multinode_setup/pre.yaml | 8 +- tools/playbooks/multinode_setup/run.yaml | 2 +- .../templates/make_multinode_rings.j2 | 2 +- .../saio_single_node_setup/setup_saio.yaml | 14 +- tox.ini | 7 +- 31 files changed, 1139 insertions(+), 607 deletions(-)

1 0

swift 2.30.1 (zed)
by no-reply＠openstack.org 31 Jan '23

31 Jan '23

We are satisfied to announce the release of: swift 2.30.1: OpenStack Object Storage This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.30.1 ^^^^^^ Security Issues *************** * Fixed a security issue in how "s3api" handles XML parsing that allowed authenticated S3 clients to read arbitrary files from proxy servers. Refer to CVE-2022-47950 for more information. Bug Fixes ********* * Fixed a path-rewriting bug introduced in Python 3.7.14, 3.8.14, 3.9.14, and 3.10.6 that could cause some "domain_remap" requests to be routed to the wrong object. Changes in swift 2.30.0..2.30.1 ------------------------------- fbec7694e Authors/ChangeLog for 2.30.1 041cb672e tests: Ensure XXE injection tests have config loaded d444fc73b Fix docs build 8dd96470a s3api: Prevent XXE injections a2d363de6 [stable-only] Pin tox<4 for stable branches (<=stable/zed) testing 191bb266d CI: pin tox at the project level 5637dddcd CI: Pin tox<4 on stable branches aa81e4f2b Inline parse_request from cpython f37cf45f7 Extract SwiftHttpProtocol to its own module c8662c6f0 Mark rolling-upgrade job non-voting 88e3f7be9 Fix Zed CI 6fd031055 Migrate CentOS Stream 8 FIPS job to CentOS Stream 9 49d35e0c3 Update TOX_CONSTRAINTS_FILE for stable/zed 86c46d614 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .mailmap | 1 + .zuul.yaml | 75 ++-- AUTHORS | 3 +- CHANGELOG | 13 +- py2-constraints.txt | 1 + .../notes/2_30_1_release-856dd70ec466aa74.yaml | 13 + swift/__init__.py | 10 +- swift/common/http_protocol.py | 320 ++++++++++++++++ swift/common/middleware/s3api/etree.py | 2 +- swift/common/wsgi.py | 234 +----------- test/functional/__init__.py | 3 +- test/functional/s3api/test_xxe_injection.py | 231 ++++++++++++ .../common/middleware/s3api/test_multi_delete.py | 40 ++ test/unit/common/test_http_protocol.py | 412 +++++++++++++++++++++ test/unit/common/test_wsgi.py | 335 +---------------- test/unit/helpers.py | 2 +- test/unit/proxy/test_server.py | 3 +- tools/playbooks/common/install_dependencies.yaml | 20 +- tools/playbooks/dsvm/pre.yaml | 8 +- tools/playbooks/multinode_setup/common_config.yaml | 4 +- tools/playbooks/multinode_setup/make_rings.yaml | 8 +- tools/playbooks/multinode_setup/pre.yaml | 8 +- tools/playbooks/multinode_setup/run.yaml | 2 +- .../templates/make_multinode_rings.j2 | 2 +- .../saio_single_node_setup/setup_saio.yaml | 14 +- tools/test-setup.sh | 12 + tox.ini | 7 +- 29 files changed, 1155 insertions(+), 637 deletions(-)

1 0

ironic-inspector 11.3.0 (antelope)
by no-reply＠openstack.org 31 Jan '23

31 Jan '23

We are satisfied to announce the release of: ironic-inspector 11.3.0: Hardware introspection for OpenStack Bare Metal This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 11.3.0 ^^^^^^ Upgrade Notes ************* * The minimum version of SQLAlchemy is now "1.4.0", in preparation for the future anticipated release of SQLAlchemy "2.0.0". * The minimum version of Oslo.DB is now "12.1.0", in preparation for the future anticipated release of SQLAlchemy "2.0.0". * Database schema upgrades from versions prior to "7.3.0" are not supported. Please upgrade to an intermediate release prior to upgrading to this release. Deprecation Notes ***************** * Plugin maintainers should be aware that the Node Cache object field "version_id" filed is no longer in use. It is still returned by the data model if stored for the purposes of compatability, but Inspector will not update the field through the normal course of it's operation. Bug Fixes ********* * Fixes an issue where database responses of nodes would get orphaned in inspector process RAM, and would not be garbage collected. We were able to discover and reproduce this issue while working on database connectivity locks remaining in place. Please see story 2009727 (https://storyboard.openstack.org/#!/story/2009727) for more details. Other Notes *********** * Plugin maintainers who are directly working with the database will need to update their plugins. Specifically the Database API has been delineated into using "enginefacade" with a dedicated reader and writer model, in anticipation of support for SQLAlchemy 2.0 and an eventual merge of Inspector into Ironic at some point in the future. Database actions are now performed through the "ironic_inspector.db.api" module, where previously they were spread across "ironic_inspector.db" and "ironic_inspector.node_cache". Changes in ironic-inspector 11.2.0..11.3.0 ------------------------------------------ 20797f0 Stop gating on unit test coverage e1f3b71 Make reno ignore bugfix eol tags 84b5f8c Use new get_rpc_client API from oslo.messaging f853061 setup.py: Remove 'py_modules' cb1e856 Rename NodeInfo._lock to avoid conflict with Mock._lock in tests 0f5bbf6 Fix tox4 and setuptools errors dac7f02 Remove lib/neutron-legacy leftovers 3fe42b5 SQLAlchemy 2.0 Support Diffstat (except docs and test files) ------------------------------------- devstack/upgrade/upgrade.sh | 2 +- ironic_inspector/cmd/dbsync.py | 4 +- ironic_inspector/common/rpc.py | 2 +- ironic_inspector/conductor/manager.py | 8 +- ironic_inspector/db/__init__.py | 19 + ironic_inspector/{ => db}/alembic.ini | 0 ironic_inspector/db/api.py | 637 +++++++++++++++++++++ ironic_inspector/db/migration.py | 118 ++++ ironic_inspector/{ => db}/migrations/env.py | 36 +- .../{ => db}/migrations/script.py.mako | 0 .../18440d0834af_introducing_the_aborting_state.py | 59 ++ .../2970d2d44edc_add_manage_boot_to_nodes.py | 0 .../versions/578f84f38d_inital_db_schema.py | 0 .../882b2d84cb1b_attribute_constraints_relaxing.py | 0 ...5109d5063a_added_scope_column_to_rules_table.py | 0 .../bf8dec16023c_add_introspection_data_table.py | 0 ...d00d6e3f38c4_change_created_finished_at_type.py | 0 ...2e48801c8ef_introducing_node_state_attribute.py | 0 .../migrations/versions/d588418040d_add_rules.py | 0 ...9a4a81d88_add_invert_field_to_rule_condition.py | 0 ironic_inspector/{db.py => db/model.py} | 91 +-- .../18440d0834af_introducing_the_aborting_state.py | 43 -- ironic_inspector/node_cache.py | 311 +++++----- ironic_inspector/plugins/introspection_data.py | 8 +- ironic_inspector/process.py | 12 +- ironic_inspector/rules.py | 63 +- ironic_inspector/test/base.py | 93 ++- ironic_inspector/test/functional.py | 23 +- ironic_inspector/test/unit/db/__init__.py | 0 ironic_inspector/test/unit/db/test_api.py | 146 +++++ .../test/unit/{ => db}/test_migrations.py | 11 +- ironic_inspector/test/unit/test_db.py | 80 --- ironic_inspector/test/unit/test_introspect.py | 4 +- ironic_inspector/test/unit/test_manager.py | 7 - ironic_inspector/test/unit/test_node_cache.py | 399 +++++-------- .../test/unit/test_plugins_introspection_data.py | 15 +- ironic_inspector/test/unit/test_process.py | 24 +- ironic_inspector/test/unit/test_rules.py | 16 +- ironic_inspector/test/unit/test_utils.py | 1 + ironic_inspector/utils.py | 26 + releasenotes/config.yaml | 2 + ...qlalchemy-minimum-version-cd34a2e10d7946fd.yaml | 37 ++ requirements.txt | 6 +- setup.py | 3 +- tox.ini | 9 +- zuul.d/project.yaml | 4 +- 46 files changed, 1519 insertions(+), 800 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d09d388..5d1c2de 100644 --- a/requirements.txt +++ b/requirements.txt @@ -27 +27 @@ oslo.context>=2.22.0 # Apache-2.0 -oslo.db>=6.0.0 # Apache-2.0 +oslo.db>=12.1.0 # Apache-2.0 @@ -30 +30 @@ oslo.log>=4.3.0 # Apache-2.0 -oslo.messaging>=5.32.0 # Apache-2.0 +oslo.messaging>=14.1.0 # Apache-2.0 @@ -40 +40 @@ stevedore>=1.20.0 # Apache-2.0 -SQLAlchemy>=1.2.19 # MIT +SQLAlchemy>=1.4.0 # MIT

1 0