Open Stack

We are excited to announce the release of:

ironic-inspector 9.0.0: Hardware introspection for OpenStack Bare
Metal

This release is part of the train release series.

The source is available from:

    https://opendev.org/openstack/ironic-inspector

Download the package from:

    https://tarballs.openstack.org/ironic-inspector/

Please report issues through:

    https://storyboard.openstack.org/#!/project/944

For more details, please see below.

9.0.0
^^^^^


New Features
************

* A new option "enable_mdns" allows to enable publishing the
  baremetal introspection API endpoint via mDNS as specified in the
  API SIG guideline (http://specs.openstack.org/openstack/api-
  sig/guidelines /dns-sd.html).

* Adds support to reapply with provided unprocessed introspection
  data. The introspection data is supplied in the body of POST request
  to "/v1/introspection/<node_id>/data/unprocessed". The introspection
  data will also be saved to storage backend.


Upgrade Notes
*************

* The deprecated SSL configuration options "[DEFAULT]ssl_cert_path"
  and "[DEFAULT]ssl_key_path" were removed, please use configuration
  options from "[ssl]" section.

* The deprecated configuration option
  "[processing]store_data_location" was removed.


Security Issues
***************

* Fixes insufficient input filtering when looking up a node by
  information from the introspection data. It could potentially allow
  SQL injections via the "/v1/continue" API endpoint. See story
  2005678 (https://storyboard.openstack.org/#!/story/2005678) for
  details.


Bug Fixes
*********

* Fixes an issue when extra_hardware plugin failed to save extra
  hardware information to Swift, the collected information is not
  processed and consumed.

* Fixes an issue while mapping port InfiniBand MAC address to
  EthernetOverInfiniBand MAC. Prior to this fix, it will fail to map
  and raise an exception.

Changes in ironic-inspector 8.2.0..9.0.0
----------------------------------------

cebeb82 Convert Swift connection errors into more obvious ones
3c21947 Update sphinx and uncap jsonschema
258d738 Expose baremetal-introspection endpoint via mdns
fc8a326 devstack: check if swift is enabled when deciding on the data backend
9d10790 Eliminate SQL injection vulnerability in node_cache
dc7e4d2 pxe_filter: fix get blacklist error
09938a3 Improve error handling of extra_hardware
b8d1bda Add storing introspection data in database option
72bd8ce OpenDev Migration Patch
541dec6 Fix validate_interfaces processing hook format
29d8515 Support reapply with supplied introspection data
6e7b62a Remove deprecated ssl options
0e11af2 Remove deprecated store_data_location
7222802 Replace openstack.org git:// URLs with https://
172356d Add versions to release notes series
d1b1e5b Update master for stable/stein
688c6eb Follow up to api-ref revision


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |   2 +-
api-ref/source/index.rst                           |   1 +
...trospection-api-v1-introspection-management.inc | 104 ++++++++++++++
.../source/introspection-api-v1-introspection.inc  | 149 ++++-----------------
api-ref/source/introspection-api-v1-rules.inc      |   3 +-
devstack/example.local.conf                        |   6 +-
devstack/plugin.sh                                 |  11 +-
ironic_inspector/common/keystone.py                |   5 +
ironic_inspector/common/rpc.py                     |   4 +-
ironic_inspector/common/service_utils.py           |   6 -
ironic_inspector/common/swift.py                   |  21 ++-
ironic_inspector/conductor/manager.py              |  40 ++++--
ironic_inspector/conf/__init__.py                  |   2 +
ironic_inspector/conf/default.py                   |  15 +--
ironic_inspector/conf/opts.py                      |   1 +
ironic_inspector/conf/processing.py                |   7 -
ironic_inspector/conf/service_catalog.py           |  22 +++
ironic_inspector/main.py                           |  19 ++-
ironic_inspector/node_cache.py                     |  15 +--
ironic_inspector/plugins/extra_hardware.py         |  13 +-
ironic_inspector/plugins/introspection_data.py     |  10 --
ironic_inspector/process.py                        |  29 +++-
ironic_inspector/pxe_filter/iptables.py            |   4 +-
ironic_inspector/test/functional.py                |   8 ++
ironic_inspector/test/unit/test_iptables.py        |  18 ++-
ironic_inspector/test/unit/test_main.py            |  24 +++-
ironic_inspector/test/unit/test_manager.py         |  50 ++++++-
ironic_inspector/test/unit/test_node_cache.py      |   5 +
.../test/unit/test_plugins_extra_hardware.py       |  37 +++++
.../test/unit/test_plugins_introspection_data.py   |  19 ---
ironic_inspector/test/unit/test_process.py         |  28 ++--
ironic_inspector/test/unit/test_swift.py           |  20 ++-
ironic_inspector/test/unit/test_wsgi_service.py    |  27 ----
lower-constraints.txt                              |   2 +-
.../legacy/ironic-inspector-grenade-dsvm/run.yaml  |  18 +--
...find-node-input-filtering-e8ea529252e80739.yaml |   7 +
...ix-extra-hardware-process-c0635a972de37b0a.yaml |   6 +
...-pxe-filter-get-blacklist-2dde59d51c1d010f.yaml |   6 +
releasenotes/notes/mdns-a5f4034257139e31.yaml      |   6 +
.../post-introspection-data-9cdd39a3de446e92.yaml  |   7 +
...remove-deprecated-ssl-opt-f6e6bd841f2c1061.yaml |   5 +
...emove-store-data-location-e68462ff6ba257e0.yaml |   4 +
releasenotes/source/index.rst                      |   1 +
releasenotes/source/rocky.rst                      |   6 +-
releasenotes/source/stein.rst                      |   6 +
requirements.txt                                   |   4 +-
test-requirements.txt                              |   3 +-
tools/config-generator.conf                        |   3 +-
zuul.d/ironic-inspector-jobs.yaml                  |   3 +-
zuul.d/legacy-ironic-inspector-jobs.yaml           |   4 +-
52 files changed, 511 insertions(+), 310 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index c0f4edc..d750d33 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11 +11 @@ futurist>=1.2.0 # Apache-2.0
-ironic-lib>=2.5.0 # Apache-2.0
+ironic-lib>=2.17.0 # Apache-2.0
@@ -13 +13 @@ jsonpath-rw<2.0,>=1.2.0 # Apache-2.0
-jsonschema<3.0.0,>=2.6.0 # MIT
+jsonschema>=2.6.0 # MIT
diff --git a/test-requirements.txt b/test-requirements.txt
index 204e4ce..2507ea4 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -9 +9,2 @@ mock>=2.0.0 # BSD
-sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD
+sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD
+sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD