From no-reply at openstack.org Wed Jul 1 10:21:43 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 01 Jul 2020 10:21:43 -0000 Subject: [release-announce] python-magnumclient 3.0.1 (ussuri) Message-ID: We are thrilled to announce the release of: python-magnumclient 3.0.1: Client library for Magnum API This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-magnumclient Download the package from: https://pypi.org/project/python-magnumclient Please report issues through: https://bugs.launchpad.net/python-magnumclient/+bugs For more details, please see below. Changes in python-magnumclient 3.0.0..3.0.1 ------------------------------------------- 6d1a386 Labels override 8fd3b04 Rename variables to address pep8 error 75fec05 Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 366893e Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + magnumclient/common/cliutils.py | 4 ++-- magnumclient/common/utils.py | 6 +++--- magnumclient/osc/v1/clusters.py | 17 ++++++++++++++++- magnumclient/osc/v1/nodegroups.py | 17 ++++++++++++++++- magnumclient/v1/clusters.py | 1 + magnumclient/v1/nodegroups.py | 2 +- tox.ini | 6 +++--- 9 files changed, 49 insertions(+), 11 deletions(-) From no-reply at openstack.org Wed Jul 1 16:59:45 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 01 Jul 2020 16:59:45 -0000 Subject: [release-announce] cinder 14.2.0 (stein) Message-ID: We are satisfied to announce the release of: cinder 14.2.0: OpenStack Block Storage This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 14.2.0 ^^^^^^ Upgrade Notes * This release updates the os-brick library used by Cinder to version 2.8.6 to correct a problem with the fix for Bug #1823200 (https://bugs.launchpad.net/cinder/+bug/1823200) in the previous os- brick release. It does not contain any Cinder code changes. See the os-brick 2.8.6 release notes (https://docs.openstack.org/releasenotes/os- brick/stein.html#relnotes-2-8-6-stable-stein) for more information. Changes in cinder 14.1.0..14.2.0 -------------------------------- a14fd58f5 Update os-brick library to 2.8.6 6a158d22c Make greande jobs n-v for EM and oldest stable Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 9 +++------ lower-constraints.txt | 2 +- releasenotes/notes/ossn-0086-followup-f82a0efa264f68d6.yaml | 11 +++++++++++ requirements.txt | 2 +- 4 files changed, 16 insertions(+), 8 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1e316627f..cf85363e1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -61 +61 @@ oslo.vmware>=2.17.0 # Apache-2.0 -os-brick>=2.8.5 # Apache-2.0 +os-brick>=2.8.6 # Apache-2.0 From no-reply at openstack.org Thu Jul 2 10:26:28 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 02 Jul 2020 10:26:28 -0000 Subject: [release-announce] oslo.utils 4.1.2 (ussuri) Message-ID: We are pumped to announce the release of: oslo.utils 4.1.2: Oslo Utility library This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 4.1.1..4.1.2 ---------------------------------- eeb7b10 Release greenthread when computing checksum 854850d Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 5ae04f0 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- oslo_utils/fileutils.py | 3 +++ tox.ini | 4 ++-- 4 files changed, 26 insertions(+), 3 deletions(-) From no-reply at openstack.org Thu Jul 2 10:28:21 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 02 Jul 2020 10:28:21 -0000 Subject: [release-announce] oslo.policy 3.1.1 (ussuri) Message-ID: We eagerly announce the release of: oslo.policy 3.1.1: Oslo Policy library This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 3.1.1 ^^^^^ Bug Fixes * [bug 1880959 (https://bugs.launchpad.net/keystone/+bug/1880959)] The behavior of policy file reloading from policy directories was fixed. Previously the rules from policy files located in the directories specified in the "policy_dirs" option were not reapplied after the rules from the primary policy file have been reapplied due to a change. Changes in oslo.policy 3.1.0..3.1.1 ----------------------------------- c8c138e Reload files in policy_dirs on primary file change d4a2c64 Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri ab7ce35 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_policy/policy.py | 41 +++++++++++++++++---- .../notes/bug-1880959-8f1370a59759d40d.yaml | 8 ++++ tox.ini | 2 +- 5 files changed, 87 insertions(+), 8 deletions(-) From no-reply at openstack.org Thu Jul 2 10:37:56 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 02 Jul 2020 10:37:56 -0000 Subject: [release-announce] oslo.utils 3.41.6 (train) Message-ID: We are chuffed to announce the release of: oslo.utils 3.41.6: Oslo Utility library This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 3.41.5..3.41.6 ------------------------------------ f4deaad Release greenthread when computing checksum c3c5aac tox: Use upper-constraints for docs jobs Diffstat (except docs and test files) ------------------------------------- oslo_utils/fileutils.py | 3 +++ tox.ini | 11 +++++++---- 3 files changed, 29 insertions(+), 4 deletions(-) From no-reply at openstack.org Fri Jul 3 13:03:48 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 03 Jul 2020 13:03:48 -0000 Subject: [release-announce] os-traits 2.4.0 Message-ID: We high-spiritedly announce the release of: os-traits 2.4.0: A library containing standardized trait strings The source is available from: https://opendev.org/openstack/os-traits Download the package from: https://pypi.org/project/os-traits For more details, please see below. Changes in os-traits 2.3.0..2.4.0 --------------------------------- e32a13f Switch to newer openstackdocstheme and reno versions 066a2a9 CPU: add traits for new AVX512 support 0cfd42e Fix hacking min version to 3.0.1 77bf79e Cleanup py27 support Diffstat (except docs and test files) ------------------------------------- os_traits/hw/cpu/x86/__init__.py | 8 ++++++++ releasenotes/source/conf.py | 11 ++++------- setup.py | 9 --------- test-requirements.txt | 2 +- 6 files changed, 21 insertions(+), 28 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 6349b14..e10642c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=2.0.0,<2.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 6 09:21:41 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 06 Jul 2020 09:21:41 -0000 Subject: [release-announce] sushy-tools 0.11.0 Message-ID: We high-spiritedly announce the release of: sushy-tools 0.11.0: A set of tools to support the development and test of the Sushy library (https://docs.openstack.org/sushy/) The source is available from: https://opendev.org/openstack/sushy-tools Download the package from: https://tarballs.openstack.org/sushy-tools/ For more details, please see below. 0.11.0 ^^^^^^ New Features * Adds basic support for virtual media devices on non-IDE buses, such as SATA and SCSI, as IDE devices are not supported on Q35 libvirt domains. Changes in sushy-tools 0.10.0..0.11.0 ------------------------------------- ff2be83 Support non-ide virtual media buses dea62db vmedia: fix TypeError when accessing a URL without content-disposition Diffstat (except docs and test files) ------------------------------------- ...rtual-media-alternate-bus-6d984ae45acb7ac4.yaml | 5 ++ .../emulator/resources/systems/libvirtdriver.py | 24 ++++-- .../emulator/resources/vmedia/staticdriver.py | 4 +- .../emulator/resources/systems/test_libvirt.py | 97 +++++++++++++++++++++- .../unit/emulator/resources/vmedia/test_static.py | 86 +++++++++++++++++++ 7 files changed, 256 insertions(+), 8 deletions(-) From no-reply at openstack.org Mon Jul 6 18:39:39 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 06 Jul 2020 18:39:39 -0000 Subject: [release-announce] keystoneauth1 3.17.3 (train) Message-ID: We are chuffed to announce the release of: keystoneauth1 3.17.3: Authentication Library for OpenStack Identity This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/keystoneauth1 Download the package from: https://pypi.org/project/keystoneauth1 For more details, please see below. 3.17.3 ^^^^^^ Bug Fixes * [bug 1876317 (https://bugs.launchpad.net/keystoneauth/+bug/1876317)] The v3 authentication plugins now attempt to add /v3 to the token path if it's not present on the authentication URL. Changes in keystoneauth1 3.17.2..3.17.3 --------------------------------------- 7d7b956 Inject /v3 in token path for v3 plugins Diffstat (except docs and test files) ------------------------------------- keystoneauth1/identity/v3/base.py | 6 +++++- .../notes/bug-1876317-1db97d1b12a3e4b4.yaml | 6 ++++++ 3 files changed, 35 insertions(+), 1 deletion(-) From no-reply at openstack.org Wed Jul 8 09:56:48 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 08 Jul 2020 09:56:48 -0000 Subject: [release-announce] ironic-python-agent 5.0.3 (train) Message-ID: We are glad to announce the release of: ironic-python-agent 5.0.3: Ironic Python Agent Ramdisk This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 5.0.3 ^^^^^ Bug Fixes * Fixes deployment failures when the image download is interrupted mid-stream while the contents are being downloaded. Previously retries were limited to only opening the initial connection. * Fixes the short timeout retries interval, which was previously "5" seconds, to a length that will allow the agent to retry after a network interruption. The time between retries is now "10" seconds, and the number of retries are set to "9" to help ensure intermittent network outages do not cause recoverable failures. * Speeds up going from inspection to cleaning with fast-track enabled by caching hardware information between the steps. * Fixes serializing exceptions originating from ironic-lib. Previously an attempt to do so would result in a "TypeError", for example: *Object of type 'InstanceDeployFailure' is not JSON serializable*. * Fixes failure to detect a hung file download connection in the event that the kernel has not rapidly detected that the remote server has hung up the socket. This can happen when there is intermittent and transient connectivity issues such as those that can occur due to LACP failure response hold-downs timers in switching fabrics. Changes in ironic-python-agent 5.0.2..5.0.3 ------------------------------------------- 3e053f0 Limit Inspection->Lookup->Heartbeat lag 7c036fa Fix serializing ironic-lib exceptions 72ba11a Extend retries to 9, 10 seconds apart. 0e34f02 Add full download retries db925ba Add timeout operations to try and prevent hang on read() cf28f3a Fix confusing logging when running asynchronous commands 167b98f Omit configdrive and system_logs from logging Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/agent.py | 11 ++- ironic_python_agent/config.py | 4 +- ironic_python_agent/encoding.py | 12 +++ ironic_python_agent/extensions/base.py | 30 ++++--- ironic_python_agent/extensions/standby.py | 100 ++++++++++++++++----- ironic_python_agent/hardware.py | 20 +++++ ironic_python_agent/inspector.py | 2 +- ironic_python_agent/utils.py | 22 +++++ ...y-retries-image-downloads-67409a493c6d08ae.yaml | 6 ++ .../extend-retry-timeout-30c930a33d97c193.yaml | 8 ++ .../notes/inspect-to-clean-b3616d843775c187.yaml | 5 ++ releasenotes/notes/lib-exc-41ee122eb4a04bc4.yaml | 6 ++ .../timeout_on_file_download-ed77918318316075.yaml | 9 ++ 20 files changed, 349 insertions(+), 47 deletions(-) From no-reply at openstack.org Wed Jul 8 09:57:38 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 08 Jul 2020 09:57:38 -0000 Subject: [release-announce] ironic 13.0.5 (train) Message-ID: We are overjoyed to announce the release of: ironic 13.0.5: OpenStack Bare Metal Provisioning This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 13.0.5 ^^^^^^ Bug Fixes * Fixes a rare issue when agent successfully powers off a node after deployment, but ironic never learns about it and does another reboot. * Cleans up nodes stuck in the "deleting" state on conductor restart. * Fixes fast-track deployments with the "direct" deploy interface that used to hang previously. * Fixes a workaround for hardware that does not support persistent boot device setting with the "redfish" or "idrac-redfish" management interface implementation. When such situation is detected, ironic falls back to one-time boot device setting, restoring it on every reboot or power on. For more information, see story 2007733 (https://storyboard.openstack.org/#!/story/2007733). * No longer tries to set "local_gb" to "MAX" when building RAID with the root disk using "MAX" for its size. Changes in ironic 13.0.4..13.0.5 -------------------------------- fa6c71ff1 Software RAID: don't try to set local_gb to MAX a436d666d Fix the error message when reached max number of traits 94d74f2de Clean up nodes in DELETING on conductor restart 089b84e4c Fix fast-track with the direct deploy interface 49ce9993e Fix Redfish handle no continuous override boot src 87ccb8376 devstack: Use uwsgi binary from path; temporary disable grenade b7c4ce4ca agent: do not hard power off if soft power off actually succeeds Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 2 +- ironic/common/raid.py | 3 +- ironic/common/states.py | 4 +- ironic/conductor/manager.py | 5 ++- ironic/db/sqlalchemy/api.py | 12 +++--- ironic/drivers/modules/agent.py | 17 ++++----- ironic/drivers/modules/agent_base_vendor.py | 17 +++++++-- ironic/drivers/modules/redfish/management.py | 23 ++++++------ .../unit/drivers/modules/test_agent_base_vendor.py | 43 +++++++++++++++++++++- .../notes/agent-power-off-2115fcfaac030bd0.yaml | 5 +++ releasenotes/notes/deleting-dcdb9cf0d2a6a1a6.yaml | 4 ++ .../notes/direct-fast-track-d0f43850b6e80751.yaml | 5 +++ ...edfish-sadness-workaround-ed02cb310ff369f4.yaml | 11 ++++++ releasenotes/notes/raid-max-c0920cc44b9779ee.yaml | 5 +++ zuul.d/project.yaml | 5 ++- 19 files changed, 158 insertions(+), 44 deletions(-) From no-reply at openstack.org Wed Jul 8 14:23:37 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 08 Jul 2020 14:23:37 -0000 Subject: [release-announce] bifrost 8.2.0 (victoria) Message-ID: We jubilantly announce the release of: bifrost 8.2.0: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/bifrost For more details, please see below. 8.2.0 ^^^^^ New Features ************ * It is now possible to use the "bifrost" cloud with introspection commands even in no-auth mode. * Debian Buster is now supported as a base operating system. * Configures the default deploy and rescue kernel/ramdisk, setting them in "driver_info" is now optional. * Ubuntu Focal (20.04) is now supported as a base operating system. * The values of "enabled_bios_interfaces", "enabled_boot_interfaces", "enabled_management_interfaces" and "enabled_power_interfaces" are now derived from the "enabled_hardware_types" if left empty (the default). * Adds a new parameter "internal_ip" specifying which IP address to use for nodes to reach ironic and the HTTP server, and for cross- service interactions when keystone is disabled. By default the IPv4 address of the "network_interface" is used. * The "manual-management" hardware type is now enabled by default. It can be used with hardware that does not feature a supported BMC. * The "noop" management interface can now be used out-of-box with "ipmi" and "redfish" nodes to prevent ironic from changing the boot device and order. * MetalSmith (https://docs.openstack.org/metalsmith/) is now installed by default. * A normal ironic "nodes.json" (suitable for the "baremetal create" command) is now generated when creating testing VMs. The default location is "/tmp/nodes.json". * Sets the default resource class for newly enrolled nodes without an explicit resource class. Defaults to "baremetal", can be changed via the "default_resource_class" parameter. * Fedora 30 is now supported as a base operating system. * Adds two new parameters for controlling how existing git checkouts are handled: * "update_repos" can be set to "false" to prevent the repositories from being updated. * "force_update_repos" can be set to "false" to prevent Bifrost from overwriting local changes. * Changes the default version of Ansible to version 2.9. * The new variable "use_tinyipa" (defaulting to "true") defines whether to use the pre-built tinyIPA images or production-ready CentOS images built with DIB. Upgrade Notes ************* * Explicit support for Fedora versions precedent to 30 has been removed. * Explicit support for Debian Jessie has been removed. * OpenStackClient is no longer installed when keystone is not enabled. Use the ironic native "baremetal" command instead. For example, instead of openstack baremetal node list use just baremetal node list * The shade library is no longer used, nor installed by default. * The default version of Ansible used for this release of bifrost is version 2.9. Operators may wish to upgrade if they are directly invoking playbooks or roles. * All packages are now installed in a virtual environment in "/opt/stack/bifrost" by default instead of system-wide. Deprecation Notes ***************** * The "bifrost-inspector" cloud in "clouds.yaml" is now deprecated, use the main "bifrost" cloud for all commands. * The "os_ironic_facts" module is deprecated. Please use "os_ironic_node_info" that returns information in the "node" parameter. * Support for system-wide installation of packages is deprecated, untested and may be removed in a future release. Bug Fixes ********* * Fixes installing Keystone under CentOS 8. * Fixes failure to install on systems with a local resolved by setting "disable_dnsmasq_dns" to "True" by default. * Fixes fast-track deployment after inspection/discovery by providing the correct ironic API URL to the ramdisk. * Fixes deployment in a testing environment on CentOS 8 by using firewalld instead of iptables to enable access from nodes to ironic. * An ironic-python-agent image is now updated every time the installation playbooks are run. This is done to avoid discrepancy between ironic and the ramdisk on updates. Set "update_ipa" to "false" to prevent the ramdisk update (not recommended) or "update_repos" to "false" to disable any updates. Other Notes *********** * Support for Ubuntu Xenial and Debian Stretch has been officially removed (Bifrost has been broken on them since Ussuri because of the transition to Python 3.6). Changes in bifrost 8.0.0..8.2.0 ------------------------------- 0b58a05 Do not use 'sudo pip install' when venv is used 3d2ee60 Prepare release notes for release 8.2 00ac26e Fix bifrost_venv_dir default assignment deaa4d7 Use firewalld to open ports on CentOS and RHEL. 27d8752 install-deps: install setuptools early for Debian dbb3f24 Get rid of venv_python_path f5906a9 Derive enabled hardware interfaces from enabled_hardware_types c0499c4 Consolidate the default IP address handling fa1b8ea Add openstack collection 77a5ad3 CI: clean up non-votings jobs ec72e0c Make bifrost more metalsmith-friendly 835a487 Fix fast-track deployment after discovery/inspection 188e121 Update IPA if update_repos is true (the default) ed26a19 Only install proliantutils if ilo is enabled; support idrac 2c9ede3 Migrate pip_install.yml to a new role bifrost-pip-install 99b93f4 Remove the ansible_pkg_mgr hack a78e64b Allow changing 'update' and 'force' when cloning repos a071eb9 Update ansible versions in README of the roles 9f78723 Remove the workaround for PEP517 issues 7283e3d Convert with_items to loop 1ddaf56 reno: update release versions for Ussuri and Train 12c6f71 Quick start Bifrost CLI 3fe85c5 Add an option to use pre-built DIB images 59a0185 Install packages all at once instead of looping over them 81389bc drop mock from lower-constraints 3ffa9c7 Fix bifrost_inventory.py with no nodes enrolled d5a279a bifrost-create-vm-nodes: generate a normal nodes.json 0477e45 Set default deploy/rescue kernel/ramdisk in ironic.conf a077a50 Remove empty files from the roles 23f467b Restore installing DIB-specific dependencies 9c9c014 Moving to ansible 2.9 8aa8086 Switch to using virtual envs by default b86f478 Set disable_dnsmasq_dns to True 4b2913a Documentation: minor fixes in the user guide 1dfe31d Documentation: reorder the contributors guide 7e363d4 Drop hard requirement on debootstrap and EPEL c9866a0 Enable manual-management and the noop management interface 8593f23 Install uWSGI from PyPI to repair CentOS 8 support 6f44cd8 Stop supporting non-systemd systems 8b43bf0 Get rid of the shade dependency 95e78f1 Install metalsmith by default 85e1b82 CI: reduce memory and disk for testing nodes e35293b Support Ubuntu Focal (20.04) 979bcae Remove support for Ubuntu Xenial and Debian Stretch ccdfa1d Support Debian Buster and add CI jobs for it 7a7022b [Trivial] Correct a typo in the docs 3532919 Avoid running functional jobs for api-ref changes ccfe458 Follow up on add Fedora 30 support d8e8297 Add Fedora 30 based job d8ff9ff CI: move the libvirt storage pool to /opt 5182388 Fix pip3 path d75a07c Fix check packages command 2be8ee6 Fix detection of mkisofs bb807b2 Correct handling enable_venv in pip_install.yml d804de8 Remove explicit support for EOL Fedora versions and Debian Jessie a381b0f install-deps: use system pip and bindep for installing dependencies 08b5bd7 Deprecate a separate bifrost-inspector cloud 0b7fd20 Stop installing openstackclient if keystone is not enabled 8b7a41e Make the keystone job voting and re-enable commented out jobs 28eb779 Fix pygments style c1c360c Update docs references for CentOS 8 cc415e5 Install python3-pip system package 5d126e3 Switch to newer openstackdocstheme and reno versions 50132a8 Remove .testr.conf 327cc85 Remove the unused coding style modules 62ccb03 Remove translation sections from setup.cfg 999e1bb Update lower-constraints.txt ceb5a49 Add py38 package metadata 80022d9 No need to import print from future anymore f1cbedd Add Python3 victoria unit tests ad48cad Update master for stable/ussuri 556ce37 Upgrade flake8-import-order version to 0.17.1 Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 + .testr.conf | 7 - ansible-collection-requirements.yml | 4 + babel.cfg | 2 - bifrost-cli | 13 ++ bifrost/__init__.py | 10 +- bifrost/cli.py | 240 +++++++++++++++++++++ bifrost/inventory.py | 56 ++--- bindep.txt | 4 + lower-constraints.txt | 30 +-- playbooks/ci/run.yaml | 4 +- playbooks/example-deploy-all-available-nodes.yaml | 8 +- playbooks/library/os_ironic_facts.py | 148 +------------ playbooks/library/os_ironic_node_info.py | 178 +++++++++++++++ playbooks/redeploy-dynamic.yaml | 15 +- .../bifrost-configdrives-dynamic/handlers/main.yml | 2 - .../bifrost-configdrives-dynamic/meta/main.yml | 6 +- .../bifrost-configdrives-dynamic/tasks/main.yml | 24 +-- .../tasks/update_facts_from_ironic.yaml | 3 +- .../roles/bifrost-create-bootable-image/README.md | 2 +- playbooks/roles/bifrost-create-dib-image/README.md | 4 +- .../bifrost-create-dib-image/defaults/main.yml | 4 +- .../roles/bifrost-create-dib-image/meta/main.yml | 6 +- .../roles/bifrost-create-dib-image/tasks/main.yml | 16 +- .../bifrost-create-vm-nodes/defaults/main.yml | 7 +- .../defaults/required_defaults_Debian.yml | 4 +- .../defaults/required_defaults_Debian_jessie.yml | 2 - .../defaults/required_defaults_Ubuntu_20.04.yml | 14 ++ .../bifrost-create-vm-nodes/handlers/main.yml | 2 - .../roles/bifrost-create-vm-nodes/meta/main.yml | 6 +- .../bifrost-create-vm-nodes/tasks/create_vm.yml | 15 ++ .../roles/bifrost-create-vm-nodes/tasks/main.yml | 46 ++-- .../tasks/prepare_libvirt.yml | 32 +-- .../roles/bifrost-create-vm-nodes/vars/main.yml | 2 - .../bifrost-deploy-nodes-dynamic/defaults/main.yml | 1 + .../bifrost-deploy-nodes-dynamic/handlers/main.yml | 2 - .../bifrost-deploy-nodes-dynamic/meta/main.yml | 6 +- .../bifrost-deploy-nodes-dynamic/tasks/main.yml | 6 +- .../bifrost-deploy-nodes-dynamic/vars/main.yml | 2 - playbooks/roles/bifrost-ironic-install/README.md | 21 +- .../roles/bifrost-ironic-install/defaults/main.yml | 51 +++-- .../defaults/required_defaults_Debian_family.yml | 5 +- .../defaults/required_defaults_Debian_jessie.yml | 37 ---- ..._Fedora_26.yml => required_defaults_Fedora.yml} | 41 ++-- .../defaults/required_defaults_Fedora_22.yml | 5 - .../defaults/required_defaults_Fedora_25.yml | 42 ---- .../defaults/required_defaults_Fedora_27.yml | 43 ---- .../defaults/required_defaults_RedHat_family.yml | 5 +- .../defaults/required_defaults_Suse_family.yml | 3 - ...untu_16.04.yml => required_defaults_Ubuntu.yml} | 5 +- .../defaults/required_defaults_Ubuntu_18.04.yml | 36 ---- .../bifrost-ironic-install/tasks/bootstrap.yml | 62 ++++-- .../tasks/create_tftpboot.yml | 2 +- .../tasks/download_ipa_image.yml | 27 +-- .../bifrost-ironic-install/tasks/get_ipxe.yml | 9 +- .../bifrost-ironic-install/tasks/hw_types.yml | 45 ++++ .../tasks/inspector_bootstrap.yml | 27 ++- .../tasks/inspector_install.yml | 30 +-- .../roles/bifrost-ironic-install/tasks/install.yml | 167 +++++++------- .../bifrost-ironic-install/tasks/ironic_config.yml | 6 +- .../tasks/keystone_setup.yml | 28 +-- .../tasks/keystone_setup_inspector.yml | 20 +- .../bifrost-ironic-install/tasks/pip_install.yml | 81 ------- .../tasks/staging_install.yml | 13 +- .../roles/bifrost-ironic-install/tasks/start.yml | 7 +- .../bifrost-ironic-install/tasks/vendor_deps.yml | 26 +++ .../templates/dnsmasq.conf.j2 | 4 +- .../templates/inspector-default-boot-ipxe.j2 | 2 +- .../templates/ironic.conf.j2 | 16 +- .../templates/systemd_template.j2 | 2 +- .../templates/clouds.yaml.j2 | 5 +- .../bifrost-keystone-install/defaults/main.yml | 8 +- .../defaults/required_defaults_Debian_family.yml | 8 +- .../defaults/required_defaults_Debian_jessie.yml | 19 -- .../defaults/required_defaults_Fedora_22.yml | 5 - .../defaults/required_defaults_RedHat_family.yml | 6 +- .../defaults/required_defaults_Suse_family.yml | 5 +- ...untu_18.04.yml => required_defaults_Ubuntu.yml} | 6 - .../defaults/required_defaults_Ubuntu_16.04.yml | 19 -- .../files/keystone_policy.te | 11 + .../roles/bifrost-keystone-install/meta/main.yml | 8 +- .../bifrost-keystone-install/tasks/bootstrap.yml | 36 +++- .../bifrost-keystone-install/tasks/install.yml | 105 +++------ .../bifrost-keystone-install/tasks/pip_install.yml | 78 ------- .../roles/bifrost-keystone-install/tasks/start.yml | 3 +- .../templates/systemd_template.j2 | 2 +- .../roles/bifrost-openstack-ci-prep/README.md | 5 +- .../roles/bifrost-openstack-ci-prep/vars/main.yml | 2 - playbooks/roles/bifrost-pip-install/README.md | 32 +++ .../roles/bifrost-pip-install/defaults/main.yml | 17 ++ playbooks/roles/bifrost-pip-install/tasks/main.yml | 78 +++++++ playbooks/roles/bifrost-prep-for-install/README.md | 10 +- .../bifrost-prep-for-install/defaults/main.yml | 11 +- .../roles/bifrost-prep-for-install/tasks/main.yml | 8 +- .../handlers/main.yml | 2 - .../tasks/main.yml | 2 +- .../bifrost-prepare-for-test-dynamic/vars/main.yml | 2 - playbooks/roles/bifrost-rabbitmq/tasks/main.yml | 4 +- .../roles/bifrost-test-dhcp/defaults/main.yml | 2 - .../roles/bifrost-test-dhcp/files/test-dhcp.py | 1 - .../roles/bifrost-test-dhcp/handlers/main.yml | 3 - playbooks/roles/bifrost-test-dhcp/vars/main.yml | 2 - .../bifrost-test-inspection/defaults/main.yml | 2 - .../bifrost-test-inspection/handlers/main.yml | 2 - .../roles/bifrost-test-inspection/tasks/main.yml | 4 +- .../roles/bifrost-test-inspection/vars/main.yml | 2 - playbooks/roles/bifrost-test-vm/defaults/main.yml | 2 - playbooks/roles/bifrost-test-vm/handlers/main.yml | 2 - playbooks/roles/bifrost-test-vm/vars/main.yml | 2 - .../handlers/main.yml | 2 - .../bifrost-unprovision-node-dynamic/vars/main.yml | 2 - .../roles/ironic-delete-dynamic/handlers/main.yml | 2 - .../roles/ironic-delete-dynamic/vars/main.yml | 2 - playbooks/roles/ironic-enroll-dynamic/README.md | 4 +- .../roles/ironic-enroll-dynamic/handlers/main.yml | 2 - .../roles/ironic-enroll-dynamic/tasks/main.yml | 5 +- .../roles/ironic-enroll-dynamic/vars/main.yml | 2 - playbooks/roles/ironic-inspect-node/README.md | 4 +- .../roles/ironic-inspect-node/handlers/main.yml | 2 - playbooks/roles/ironic-inspect-node/vars/main.yml | 2 - playbooks/roles/venv_python_path/tasks/main.yml | 33 --- playbooks/test-bifrost.yaml | 11 +- .../ancient-fedora-jessie-773ba251b28f4a94.yaml | 6 + .../notes/bifrost-inspector-a154561802d8d614.yaml | 9 + .../notes/centos-keystone-acad21e70153067d.yaml | 4 + .../notes/debian-buster-dd7cfde9908deb09.yaml | 4 + .../notes/default-ipa-fe012dfdba580bf4.yaml | 5 + .../disable_dnsmasq_dns-0d545cdaa81b92a2.yaml | 5 + .../fast-track-inspection-a28a062e86f06190.yaml | 5 + releasenotes/notes/firewalld-d53c6396828b91ee.yaml | 5 + releasenotes/notes/focal-36208207a571f354.yaml | 4 + releasenotes/notes/hw-types-17106c0397f34ef1.yaml | 6 + .../notes/internal-address-c1f9ffb731373ea3.yaml | 7 + .../notes/manual-management-c204a200b0f0e6e0.yaml | 9 + .../notes/metalsmith-7044429597a5f137.yaml | 5 + releasenotes/notes/no-osc-b39d14591103b2c3.yaml | 15 ++ releasenotes/notes/no-shade-b861f699b8a9919f.yaml | 8 + releasenotes/notes/no-xenial-1c27b7bb2cf165ed.yaml | 6 + .../notes/nodes.json-d47a30a22a04c7ed.yaml | 6 + .../notes/resource-class-243535c9049cbd73.yaml | 6 + .../notes/support-fedora-3b14bffb24097b28.yaml | 4 + .../notes/update-ipa-76691dbca92246b6.yaml | 8 + .../notes/update-repos-b60563ee51b574fc.yaml | 10 + ...pdate_default_ansible_2.9-e96335c0ef609642.yaml | 9 + .../notes/use-tinyipa-31f5343def1c0bf4.yaml | 6 + .../notes/venv-default-895f7b633803297f.yaml | 9 + releasenotes/source/conf.py | 12 +- releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 2 +- releasenotes/source/ussuri.rst | 6 + scripts/collect-test-info.sh | 4 +- scripts/env-setup.sh | 26 ++- scripts/install-deps.sh | 133 ++++-------- scripts/split_json.py | 2 - scripts/test-bifrost.sh | 113 ++++------ setup.cfg | 15 +- test-requirements.txt | 3 + tox.ini | 3 + zuul.d/bifrost-jobs.yaml | 46 ++-- zuul.d/project.yaml | 26 ++- 176 files changed, 1689 insertions(+), 1546 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 64ddfa3..08571a1 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15,0 +16,3 @@ Pygments>=2.2.0 # BSD license +flake8-import-order>=0.17.1 # LGPLv3 + +openstacksdk>=0.37.0 # Apache-2.0 From no-reply at openstack.org Wed Jul 8 18:57:32 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 08 Jul 2020 18:57:32 -0000 Subject: [release-announce] oslo.policy 2.3.4 (train) Message-ID: We high-spiritedly announce the release of: oslo.policy 2.3.4: Oslo Policy library This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 2.3.4 ^^^^^ Bug Fixes * [bug 1880959 (https://bugs.launchpad.net/keystone/+bug/1880959)] The behavior of policy file reloading from policy directories was fixed. Previously the rules from policy files located in the directories specified in the "policy_dirs" option were not reapplied after the rules from the primary policy file have been reapplied due to a change. Changes in oslo.policy 2.3.3..2.3.4 ----------------------------------- 5904564 Reload files in policy_dirs on primary file change Diffstat (except docs and test files) ------------------------------------- oslo_policy/policy.py | 41 +++++++++++++++++---- .../notes/bug-1880959-8f1370a59759d40d.yaml | 8 ++++ 3 files changed, 85 insertions(+), 7 deletions(-) From no-reply at openstack.org Wed Jul 8 19:04:38 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 08 Jul 2020 19:04:38 -0000 Subject: [release-announce] oslo.policy 2.1.3 (stein) Message-ID: We are tickled pink to announce the release of: oslo.policy 2.1.3: Oslo Policy library This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 2.1.3 ^^^^^ Bug Fixes * [bug 1880959 (https://bugs.launchpad.net/keystone/+bug/1880959)] The behavior of policy file reloading from policy directories was fixed. Previously the rules from policy files located in the directories specified in the "policy_dirs" option were not reapplied after the rules from the primary policy file have been reapplied due to a change. Changes in oslo.policy 2.1.2..2.1.3 ----------------------------------- a49f31d Reload files in policy_dirs on primary file change Diffstat (except docs and test files) ------------------------------------- oslo_policy/policy.py | 41 +++++++++++++++++---- .../notes/bug-1880959-8f1370a59759d40d.yaml | 8 ++++ 3 files changed, 85 insertions(+), 7 deletions(-) From no-reply at openstack.org Wed Jul 8 19:12:38 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 08 Jul 2020 19:12:38 -0000 Subject: [release-announce] ironic-inspector 10.2.0 (victoria) Message-ID: We eagerly announce the release of: ironic-inspector 10.2.0: Hardware introspection for OpenStack Bare Metal This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 10.2.0 ^^^^^^ New Features ************ * Adds the ability for periodic clean-up and synchronization tasks with "ironic" to be able to be disabled by setting the "[DEFAULT]clean_up_period" to a value of "0". This is intended for "stand-alone" operators only as it may result in unexpected behaviors if used in a non-standalone environment. * Adds a new configuration option "[discovery]enroll_node_fields" that specifies additional fields to set on a node (e.g. driver interfaces). * Enable Basic HTTP authentication middleware. When the config option "[DEFAULT]auth_strategy" is set to "http_basic" then non-public API calls require a valid HTTP Basic authentication header to be set. The config option "[DEFAULT]http_basic_auth_user_file" defaults to "/etc/ironic- inspector/htpasswd" and points to a file that supports the Apache htpasswd syntax[1]. This file is read for every request, so no service restart is required when changes are made. The only password digest supported is bcrypt, and the "bcrypt" python library is used for password checks since it supports "$2y$" prefixed bcrypt passwords as generated by the Apache htpasswd utility. To try basic authentication, the following can be done: * Set "/etc/ironic-inspector/inspector.conf" "[DEFAULT]auth_strategy" to "http_basic" * Populate the htpasswd file with entries, for example: "htpasswd -nbB myName myPassword >> /etc/ironic-inspector/htpasswd" * Make basic authenticated HTTP requests, for example: "curl --user myName:myPassword http://localhost:6385/v1/introspection" [1] https://httpd.apache.org/docs/current/misc/password_encryptions.html * Adds periodic leader election for the cleanup sync with Ironic. The election interval is configured by the new "leader_election_interval" config option. * Adds a configuration option "[processing]update_pxe_enabled" to control whether the pxe_enabled should be updated according to introspection data for ports. The default value is True which is backwards compatible. Upgrade Notes ************* * Remove upper constraint for python construct library and use the latest version available. The minimum compatible version for python construct is now 2.9.39 * The raw data from the "extra_hardware" processing hook is no longer stored in Swift in an object named "extra_hardware-". The same information is already available as part of the unprocessed introspection data without a hard dependency on Swift. Deprecation Notes ***************** * The deprecated "[swift]max_retries" parameter has been removed. Bug Fixes ********* * Fixes an issue where IPv6 link local addresses are ignored during interface validation, making introspection fail. * Fixes "AttributeError: 'Node' object has no attribute 'uuid'" when trying to introspect an active node that is not currently in the cache. * No longer aborts the whole process if one periodic task fails. * Fixes accessing API endpoints with trailing slashes. Now they're treated the same way as without slashes, although the latter remain canonical URLs. * No longer uses introspection delay for nodes with "manage_boot==False" (i.e. boot is managed by ironic). It is useless and may actually break introspection if a node boots before it gets whitelisted in the PXE filter. * The introspection start API is now synchronous when "manage_boot==False". This means that any failures will be propagated to ironic, preventing it from powering a node on and booting it without the PXE filter updated. Changes in ironic-inspector 10.1.0..10.2.0 ------------------------------------------ b1e79e0 Add release version to release notes 06390e3 Use node.id instead of node.uuid in record_node 79878d7 Prepare release notes for release 10.2 0d20064 Add leader election for periodic sync with ironic 2f828ae Allow operators to disable clean_up sync f78229f Allow setting other fields on discovery 2532be9 Document [ironic] auth options for inspector b31888a Fix incorrect pxe-enabled was set during introspection f416673 Merge jobs 610228a Imported Translations from Zanata 7166617 Accept IPv6 link local address during interface validation 463cc07 Remove cimc_address from address field list 2b87caa CI: make grenade voting again 47315f9 devstack: Use uwsgi binary from path; temporary disable grenade 52138f2 Update doc for multi-arch x86 80167d4 Use unittest.mock instead of mock 6175bc4 [doc] Add misconfigured BMC channel to trouble shooting guide 196c019 Enable Basic HTTP authentication middleware. 7470320 Remove introspection timeout option 5004f93 Update lower-constraints.txt 542db84 Set default timeouts for ironic inspector base job 5960cde Cap jsonschema 3.2.0 as the minimal version 5d61513 Add py38 package metadata 06ee500 Set tempest_test_timeout for managed job c2224fd Bump hacking min version to 3.0.1 68ab6a0 Switch to newer openstackdocstheme and reno versions 0a037c5 Increase timeout for introspection in ironic-inspector-tempest-managed 9951b72 Imported Translations from Zanata c044ebd extra_hardware: stop storing raw data in swift b9f1746 Stop configuring install_command in tox. 721bd81 Use latest version of python construct 1818bda Remove translation sections from setup.cfg 5ccef9c Treat endpoints with trailing slashes the same way as without them 9643451 Stop creating a green thread in the introspection unit tests f3e27c1 Make POST /v1/introspection synchronous when manage_boot==False 3d1bf55 Avoid using introspection start delays with non-managed boot b5d3214 Convert jobs to dib a7ef716 Revert disabling the grenade job edfec4c Temporary disbling grenade and non-standalone-tempest 6ba9e00 [docs] remove the horribly outdated version support matrix bb71167 Fix grenade job a02fcd1 Add variable to set inspection timeout in tempest tests fe15db0 Silence debug logging from oslo_messaging 8a02e5a Stop running a periodic task for the noop PXE filter 6e38eff Stop aborting the process on periodic task failures 1b972c7 Monkey patch original current_thread _active 8211ab4 Update local.conf example file. 84c47d9 Cleanup deprecated [swift]max_retries 41b3323 [trivial] Remove duplicate entry in lldp test d580714 Remove testresources and testscenarios from test-requirements cee5922 Hacking: enforce usage of autospec=True in tests c4a057c Imported Translations from Zanata a5a81cf Add Python3 victoria unit tests 3c23ad1 Update master for stable/ussuri 61cd2af Upgrade flake8-import-order version to 0.17.1 773b199 No need to import print function anymore Diffstat (except docs and test files) ------------------------------------- api-ref/source/conf.py | 36 +--- babel.cfg | 1 - devstack/example.local.conf | 60 ++++--- devstack/plugin.sh | 6 +- ironic_inspector/cmd/__init__.py | 6 + ironic_inspector/cmd/migration.py | 2 - ironic_inspector/common/coordination.py | 35 ++++ ironic_inspector/common/lldp_parsers.py | 13 +- ironic_inspector/common/lldp_tlvs.py | 16 +- ironic_inspector/conductor/manager.py | 95 ++++++---- ironic_inspector/conf/default.py | 32 +++- ironic_inspector/conf/discovery.py | 2 + ironic_inspector/conf/opts.py | 5 +- ironic_inspector/conf/processing.py | 5 + ironic_inspector/conf/swift.py | 3 - ironic_inspector/introspect.py | 42 +++-- .../locale/en_GB/LC_MESSAGES/ironic_inspector.po | 57 ++++-- ironic_inspector/main.py | 27 ++- ironic_inspector/node_cache.py | 5 +- ironic_inspector/plugins/discovery.py | 2 +- ironic_inspector/plugins/extra_hardware.py | 19 -- ironic_inspector/plugins/lldp_basic.py | 1 - ironic_inspector/plugins/local_link_connection.py | 5 +- ironic_inspector/plugins/standard.py | 6 +- ironic_inspector/pxe_filter/base.py | 3 + ironic_inspector/test/functional.py | 43 ++++- ironic_inspector/test/unit/test_common_ironic.py | 6 +- ironic_inspector/test/unit/test_introspect.py | 38 +++- ironic_inspector/test/unit/test_iptables.py | 2 +- ironic_inspector/test/unit/test_main.py | 85 ++++++--- ironic_inspector/test/unit/test_manager.py | 62 ++----- ironic_inspector/test/unit/test_migrations.py | 22 +-- ironic_inspector/test/unit/test_node_cache.py | 13 +- .../test/unit/test_plugins_base_physnet.py | 3 +- .../test/unit/test_plugins_discovery.py | 23 +++ .../test/unit/test_plugins_extra_hardware.py | 73 +------- .../test/unit/test_plugins_lldp_basic.py | 25 ++- .../unit/test_plugins_local_link_connection.py | 3 +- .../test/unit/test_plugins_pci_devices.py | 18 +- .../test/unit/test_plugins_physnet_cidr_map.py | 14 +- .../test/unit/test_plugins_standard.py | 23 +-- ironic_inspector/test/unit/test_process.py | 9 +- ironic_inspector/test/unit/test_pxe_filter.py | 12 +- ironic_inspector/test/unit/test_utils.py | 5 + ironic_inspector/test/unit/test_wsgi_service.py | 10 ++ ironic_inspector/utils.py | 12 +- lower-constraints.txt | 110 ++++++++++-- ...to-turn-off-periodic-sync-5309ff2aa8a9ec14.yaml | 8 + ...accept-link-local-address-1fbb9cbdc3f980bb.yaml | 5 + .../notes/construct-fly-free-fab62c0a5cb71fa5.yaml | 6 + .../notes/enroll-node-fields-3f4e22213fd90307.yaml | 5 + .../extra-hardware-data-2346f0163e4b7699.yaml | 7 + .../notes/http-basic-auth-fbe1da9669f5388c.yaml | 27 +++ .../notes/leader-election-c6692d9962f30ad1.yaml | 6 + releasenotes/notes/node-id-920629472f01c83a.yaml | 5 + releasenotes/notes/periodics-18bf7fb57777c043.yaml | 4 + .../pxe-enabled-for-pxe-a199e81128557bc0.yaml | 6 + ...swift-max-retries-removal-8f3c117240448760.yaml | 4 + .../notes/trailing-slashes-93c2466b71829ec1.yaml | 5 + .../notes/unmanaged-delay-d39871e1346d9448.yaml | 6 + .../notes/unmanaged-result-4de3788e7820e3c5.yaml | 6 + releasenotes/source/conf.py | 9 +- releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 194 ++++++++++++++++++++- releasenotes/source/train.rst | 6 +- releasenotes/source/ussuri.rst | 6 + requirements.txt | 10 +- setup.cfg | 15 +- test-requirements.txt | 12 +- tox.ini | 4 +- zuul.d/ironic-inspector-jobs.yaml | 38 ++-- zuul.d/project.yaml | 8 +- 76 files changed, 1055 insertions(+), 521 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 95c0dd4..27b08bb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5,2 @@ automaton>=1.9.0 # Apache-2.0 -alembic>=0.8.10 # MIT -construct<2.9,>=2.8.10 # MIT +alembic>=0.9.6 # MIT +construct>=2.9.39 # MIT @@ -10 +10 @@ futurist>=1.2.0 # Apache-2.0 -ironic-lib>=2.17.0 # Apache-2.0 +ironic-lib>=4.3.0 # Apache-2.0 @@ -12,2 +12,2 @@ jsonpath-rw<2.0,>=1.2.0 # Apache-2.0 -jsonschema>=2.6.0 # MIT -keystoneauth1>=3.14.0 # Apache-2.0 +jsonschema>=3.2.0 # MIT +keystoneauth1>=4.2.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index ce6c002..be6935d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8,3 +8,3 @@ doc8>=0.6.0 # Apache-2.0 -flake8-import-order>=0.13 # LGPLv3 -hacking>=3.0.0,<3.1.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +flake8-import-order>=0.17.1 # LGPLv3 +hacking>=3.0.1,<3.1.0 # Apache-2.0 +sphinx>=2.0.0,!=2.1.0 # BSD @@ -13 +13 @@ sphinxcontrib-apidoc>=0.2.0 # BSD -openstackdocstheme>=1.31.2 # Apache-2.0 +openstackdocstheme>=2.2.0 # Apache-2.0 @@ -17 +17 @@ stestr>=1.0.0 # Apache-2.0 -reno>=2.5.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0 @@ -19,2 +18,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -testresources>=2.0.0 # Apache-2.0/BSD -testscenarios>=0.4 # Apache-2.0/BSD From no-reply at openstack.org Wed Jul 8 19:20:50 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 08 Jul 2020 19:20:50 -0000 Subject: [release-announce] python-openstackclient 5.3.0 (victoria) Message-ID: We are ecstatic to announce the release of: python-openstackclient 5.3.0: OpenStack Command-line Client This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 5.3.0 ^^^^^ New Features ************ * Add a new option *--description* to "floating ip port forwarding create" and "floating ip port forwarding set" commands. * Added "--import" flag to "openstack image create" to allow the user to force use of the image import codepath. * Added the below mentioned parameters to the user create and set commands. * --ignore-lockout-failure-attempts * --no-ignore-lockout-failure-attempts * --ignore-password-expiry * --no-ignore-password-expiry * --ignore-change-password-upon-first-use * --no-ignore-change-password-upon-first-use * --enable-lock-password * --disable-lock-password * --enable-multi-factor-auth * --disable-multi-factor-auth * --multi-factor-auth-rule This will now allow users to set user options via CLI. * Added the below mentioned parameters to the role, project and domain commands. * --immutable * --no-immutable This will allow user to set "immutable" resource option. * Add "--force" options to the "openstack quota set" command. The compute service allows us to to force set a quota, setting a quota value that is less than the amount of the resource currently consumed. Expose this feature by way of a "--force" boolean parameter. * Add "address_scope" as a valid "--type" value for the "network rbac create" and "network rbac list" commands. * Add "subnetpool" as a valid "--type" value for the "network rbac create" and "network rbac list" commands. * Add new commands "router add route" and "router remove route" to support new Neutron extension: "extraroute-atomic" (see Neutron RFE (https://bugs.launchpad.net/neutron/+bug/1826396)). * Add "--stateful" and "--stateless" option to the "security group create" and "security group set" commands to support stateful and stateless security groups. Deprecation Notes ***************** * The use of "router set --route" to add extra routes next to already existing extra routes is deprecated in favor of "router add route --route", because "router set --route" if used from multiple clients concurrently may lead to lost updates. Bug Fixes ********* * [Story 2005246 (https://storyboard.openstack.org/#!/story/2005246)] The *is_domain* property safely handles type checking. * While uploading a signed image, a private key to sign that image must be specified. The CLI client asks for the password of that private key. Due to wrong encoding handling while using Python 3, the password is not accepted, whether it is correct or not. * Makes "volume backup record" commands available in Volume API v3. Task 40279 Changes in python-openstackclient 5.2.0..5.3.0 ---------------------------------------------- c06d8256 Fix uploading an signed image does not work if private signing key is encrypted 5c4eb0bf Add a command to trigger entrypoint cache creation 870cf011 switch to stevedore for entry points b1fc587a Make volume backup record commands available in v3 4638dbc7 Remove enabling of glance v1 API c04ec16c Expose flag for forcing use of import for images ff2a70c4 Remove translation sections from setup.cfg 307d23bb port: add --host to list command 8b7a2c8d Don't display Munch objects in the output a0417296 Revert "Format location columns in network commands" da3c3bde image: autogenerate docs 26878e7d identity: autogenerate docs 7696593d Remove os-client-config references 2cb41935 Add cliff to libs-from-git for devstack functional tips aa7b84fd Add OpenStack Client for Manila docs b5389dab Remove congress a15b1add Replace assertItemsEqual with assertCountEqual 533af9f1 Client should parse string to boolean for value 'is_domain' 7049fd85 Add py38 package metadata 709dfd9c Switch to newer openstackdocstheme and reno versions 41a2e829 Make container list --all work f6ee42cd Cleanup: remove a useless reference to "object" 52ff421e Resolve PEP8 ae673171 Correct image lookup during server rebuild cc135e3b Add Python3 victoria unit tests 66202464 Update master for stable/ussuri da4e1ca9 Remove Babel from requirements b328cf74 Add '--force; parameter to 'openstack quota set' 557e65d8 Add 'subnetpool' type support to rbac commands 7f66273d Add resource option immutable bdaebeb5 Revert "Disallow setting default on internal network" 725e004d Use unittest.mock instead of third party mock 74a7c1d9 Add description field to portforwarding NAT rules 5e62411e Support for stateless security groups f01a0f33 Cleanup Python 2.7 support dba57c85 Add command: router add/remove route --route 05da145e Adding options to user cli 8efb3198 Be explicit about python version in image 97d027ca Add libc6-dev to bindep f03cb68a Add 'address_scope' type support to network rbac commands 3e83e747 Allow os quota list query to filter by project Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 17 +- Dockerfile | 7 +- babel.cfg | 1 - bindep.txt | 1 + .../command-objects/application-credentials.rst | 107 +- .../cli/command-objects/ec2-credentials-v2.rst | 6 + .../cli/command-objects/ec2-credentials-v3.rst | 6 + .../command-objects/federation-domain-project.rst | 11 + .../cli/command-objects/federation-protocol.rst | 14 +- .../cli/command-objects/identity-provider.rst | 14 +- .../cli/command-objects/registered-limit.rst | 133 +- .../cli/command-objects/service-provider.rst | 14 +- lower-constraints.txt | 17 +- openstackclient/api/object_store_v1.py | 14 +- openstackclient/common/clientmanager.py | 23 +- openstackclient/common/quota.py | 21 +- openstackclient/compute/v2/server.py | 9 +- openstackclient/identity/common.py | 24 + openstackclient/identity/v3/domain.py | 9 + openstackclient/identity/v3/project.py | 17 + openstackclient/identity/v3/role.py | 10 +- openstackclient/identity/v3/user.py | 120 +- openstackclient/image/v2/image.py | 17 + openstackclient/network/sdk_utils.py | 5 + openstackclient/network/v2/address_scope.py | 10 +- openstackclient/network/v2/floating_ip.py | 2 - .../network/v2/floating_ip_port_forwarding.py | 20 + openstackclient/network/v2/ip_availability.py | 2 - openstackclient/network/v2/network.py | 8 +- openstackclient/network/v2/network_agent.py | 1 - .../network/v2/network_auto_allocated_topology.py | 17 +- openstackclient/network/v2/network_flavor.py | 10 +- .../network/v2/network_flavor_profile.py | 10 +- openstackclient/network/v2/network_meter.py | 10 +- openstackclient/network/v2/network_meter_rule.py | 10 +- openstackclient/network/v2/network_qos_policy.py | 10 +- openstackclient/network/v2/network_qos_rule.py | 10 +- .../network/v2/network_qos_rule_type.py | 8 +- openstackclient/network/v2/network_rbac.py | 32 +- openstackclient/network/v2/network_segment.py | 10 +- .../network/v2/network_segment_range.py | 9 +- openstackclient/network/v2/port.py | 7 +- openstackclient/network/v2/router.py | 98 +- openstackclient/network/v2/security_group.py | 37 +- openstackclient/network/v2/security_group_rule.py | 10 +- openstackclient/network/v2/subnet.py | 1 - openstackclient/network/v2/subnet_pool.py | 1 - .../functional/network/v2/test_security_group.py | 4 +- .../network/v2/test_floating_ip_port_forwarding.py | 15 +- .../unit/network/v2/test_security_group_network.py | 10 + ...-field-in-port-forwarding-c536e077b243d517.yaml | 6 + .../add-image-import-flag-899869dc5a92aea7.yaml | 5 + ...ns_to_user_create_and_set-302401520f36d153.yaml | 19 + ...resource_option_immutable-efed6e1ebdc69591.yaml | 9 + .../notes/bug-2005246-3fb70206bafc5444.yaml | 5 + ...fault-on-internal-network-824fdea1a900891c.yaml | 9 - .../notes/fix-story-2007890-0974f3e69f26801e.yaml | 7 + ...orce-flag-openstackclient-c172de2717e5cfac.yaml | 6 + .../rbac-add-address-scope-7f6409ab70d36306.yaml | 4 + .../rbac-add-subnetpool-f1fc0e728ff61654.yaml | 4 + .../router-extraroute-atomic-d6d406ffb15695f2.yaml | 12 + .../stateful-security-group-a21fa8498e866b90.yaml | 6 + .../notes/task-40279-eb0d718ac1959c50.yaml | 5 + releasenotes/source/conf.py | 12 +- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 + requirements.txt | 4 +- setup.cfg | 42 +- setup.py | 9 - test-requirements.txt | 4 +- tox.ini | 2 - 143 files changed, 3038 insertions(+), 3586 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b17b6a55..2b7976e5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +6,0 @@ six>=1.10.0 # MIT -Babel!=2.4.0,>=2.3.4 # BSD @@ -9 +8 @@ cliff!=2.9.0,>=2.8.0 # Apache-2.0 -openstacksdk>=0.36.0 # Apache-2.0 +openstacksdk>=0.48.0 # Apache-2.0 @@ -15,0 +15 @@ python-cinderclient>=3.3.0 # Apache-2.0 +stevedore>=2.0.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 55ae1ea4..3dce687b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +7,0 @@ flake8-import-order>=0.13 # LGPLv3 -mock>=2.0.0 # BSD @@ -12,2 +10,0 @@ requests-mock>=1.2.0 # Apache-2.0 -stevedore>=1.20.0 # Apache-2.0 -os-client-config>=1.28.0 # Apache-2.0 @@ -19,0 +17 @@ wrapt>=1.7.0 # BSD License +ddt>=1.0.1 # MIT From no-reply at openstack.org Wed Jul 8 19:20:56 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 08 Jul 2020 19:20:56 -0000 Subject: [release-announce] ironic-python-agent 6.2.0 (victoria) Message-ID: We are excited to announce the release of: ironic-python-agent 6.2.0: Ironic Python Agent Ramdisk This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 6.2.0 ^^^^^ Bug Fixes * Fixes deployment failures when the image download is interrupted mid-stream while the contents are being downloaded. Previously retries were limited to only opening the initial connection. * Fixes the short timeout retries interval, which was previously "5" seconds, to a length that will allow the agent to retry after a network interruption. The time between retries is now "10" seconds, and the number of retries are set to "9" to help ensure intermittent network outages do not cause recoverable failures. * Fixes an issue with high cpu usage caused by ironic-python-agent greenthread eventlent implementation. Using eventlet.sleep(0.1) instead of eventlet.sleep(0) gives other processes of IPA more cpu time to run. * Speeds up going from inspection to cleaning with fast-track enabled by caching hardware information between the steps. * Fixes serializing exceptions originating from ironic-lib. Previously an attempt to do so would result in a "TypeError", for example: *Object of type 'InstanceDeployFailure' is not JSON serializable*. * The size of the ESP partition created for software RAID has been increased from 128 MiB to 550 MiB. This change is in line with the recent diskimage-builder change (https://opendev.org/openstack /diskimage-builder/commit/7fd52ba84180b4e749ccf4c9db8c49eafff46ea8) as well as the guidance from the author of gdisk (https://www.rodsbooks.com/efi-bootloaders/principles.html). * Fixes failure to detect a hung file download connection in the event that the kernel has not rapidly detected that the remote server has hung up the socket. This can happen when there is intermittent and transient connectivity issues such as those that can occur due to LACP failure response hold-downs timers in switching fabrics. Changes in ironic-python-agent 6.1.0..6.2.0 ------------------------------------------- 9d9a6bc Refactor part of image module c76b8b2 Limit Inspection->Lookup->Heartbeat lag a08029a Switch the inspector job to tinyIPA until DIB is fixed ba3caa6 Increase the ESP partition size to 550 MiB when using software RAID a4855c5 Fix serializing ironic-lib exceptions c1c093f Bump hacking min version to 3.0.1 c502279 Mount all vfat partitions before calling grub2 00ad03b Fixes minor issues in the read() retries patch 4e0981e Temporary switch to tinyipa jobs 0eee26e Fix confusing logging when running asynchronous commands 5cc44d2 Add debug message to node lookup 7abda4e Minor clean-up follow-up to timeout on read() fix c77a7df Extend retries to 9, 10 seconds apart. 159ab9f Add full download retries c5b97eb Add timeout operations to try and prevent hang on read() 29eab32 Remove .travis.yml (wow, it is ancient) 6d7ec35 Make get_partition_uuids work with whole disk images cf870ae Fix apidoc build 3dd929e Document how to output journal to console 648ac49 drop mock from lower-constraints 7e5fe11 Make the install_bootloader command asynchronous 4da53ab Add ffi development lib to bindep 9d4cf55 Add a deploy step for writing an image 6c1545b New extension call to return partition UUIDs 9524890 Fix an issue with high cpu usage caused by ironic-python-agent 557d560 Split and move logic for partition tables f108b7a Switch to newer openstackdocstheme and reno versions 437a8c6 Convert jobs to dib 06267a9 Update lower-constraints.txt 67dd91d CI: raise DIB jobs memory to 3 GiB f6ee877 Fix pep8 errors e00fe3b Add py38 package metadata 318828c Add Python3 victoria unit tests 0edc9c1 Update master for stable/ussuri 8d21063 Fix TypeError with newer version of lshw 2738e57 Add function to calculate memory Diffstat (except docs and test files) ------------------------------------- .travis.yml | 19 - bindep.txt | 2 + ironic_python_agent/agent.py | 21 +- ironic_python_agent/config.py | 4 +- ironic_python_agent/encoding.py | 12 + ironic_python_agent/extensions/base.py | 42 +- ironic_python_agent/extensions/image.py | 94 ++-- ironic_python_agent/extensions/standby.py | 168 ++++-- ironic_python_agent/hardware.py | 107 ++-- ironic_python_agent/inspector.py | 2 +- ironic_python_agent/ironic_api_client.py | 3 + ironic_python_agent/raid_utils.py | 39 +- ironic_python_agent/utils.py | 27 +- lower-constraints.txt | 37 +- ...y-retries-image-downloads-67409a493c6d08ae.yaml | 6 + .../extend-retry-timeout-30c930a33d97c193.yaml | 8 + ...x-high-cpu-usage-eventlet-1dccf3b81dd42c47.yaml | 8 + .../notes/inspect-to-clean-b3616d843775c187.yaml | 5 + releasenotes/notes/lib-exc-41ee122eb4a04bc4.yaml | 6 + .../notes/raid-esp-size-2c322adb2d3b9ce7.yaml | 9 + .../timeout_on_file_download-ed77918318316075.yaml | 9 + releasenotes/source/conf.py | 8 +- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 + setup.cfg | 1 + test-requirements.txt | 7 +- tox.ini | 4 + zuul.d/ironic-python-agent-jobs.yaml | 72 ++- zuul.d/project.yaml | 6 +- 43 files changed, 1407 insertions(+), 893 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c48ea59..0565105 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=3.0.0,<3.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -13 +13 @@ bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0 -# Doc requirements +# Doc test requirements @@ -15,3 +14,0 @@ doc8>=0.6.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD -openstackdocstheme>=1.20.0 # Apache-2.0 -reno>=2.5.0 # Apache-2.0 From no-reply at openstack.org Wed Jul 8 19:30:40 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 08 Jul 2020 19:30:40 -0000 Subject: [release-announce] ironic 15.1.0 (victoria) Message-ID: We enthusiastically announce the release of: ironic 15.1.0: OpenStack Bare Metal Provisioning This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 15.1.0 ^^^^^^ New Features ************ * Adds raid interface for ibmc driver which includes "delete_configuration" and "create_configuration" steps. * Enable Basic HTTP authentication middleware. Having noauth as the only option for standalone ironic causes constraints on how the API is exposed on the network. Having some kind of authentication layer behind a TLS deployment eases these constraints. When the config option "auth_strategy" is set to "http_basic" then non-public API calls require a valid HTTP Basic authentication header to be set. The config option "http_basic_auth_user_file" defaults to "/etc/ironic/htpasswd" and points to a file which supports the Apache htpasswd syntax[1]. This file is read for every request, so no service restart is required when changes are made. Like the "noauth" auth strategy, the "http_basic" auth strategy is intended for standalone deployments of ironic, and integration with other OpenStack services cannot depend on a service catalog. The only password digest supported is bcrypt, and the "bcrypt" python library is used for password checks since it supports "$2y$" prefixed bcrypt passwords as generated by the Apache htpasswd utility. To try HTTP basic authentication, the following can be done: * Set "/etc/ironic/ironic.conf" "DEFAULT" "auth_strategy" to "http_basic" * Populate the htpasswd file with entries, for example: "htpasswd -nbB myName myPassword >> /etc/ironic/htpassw" * Make basic authenticated HTTP requests, for example: "curl --user myName:myPassword http://localhost:6385/v1/drivers" [1] https://httpd.apache.org/docs/current/misc/password_encryptions.html * Adds a new "[ipmi]use_ipmitool_retries" option. When set to "True" and timing is supported by ipmitool, the number of retries and command interval will be passed to ipmitool so that ipmitool will do the retries. When set to "False", ironic will do the retries. Default is "True". * Adds an ability to generate network boot templates even for nodes that use local boot via the new "[pxe]enable_netboot_fallback" option. This is required to work around the situation where switching boot devices does not work reliably. * Adds the ability for Ironic to attach a node to a specific port or portgroup. This is accomplished by having the node vif_attach API accept a port_uuid or portgroup_uuid key within vif_info. If one is specified, then Ironic will attempt to attach to the specified port/portgroup. Specifying both returns an error. Known Issues ************ * Some BMCs do not support the "Channel Cipher Suites" command that newer versions of ipmitool use. These versions of ipmitool will resend this command for each ipmitool retry, resulting in long response times. Setting "[ipmi]use_ipmitool_retries" to "false" will avoid this situation by implementing retries on the ironic level. * The SNMP hardware type cannot change boot devices and thus may fail to deploy nodes with local boot. To work around this problem, set "[pxe]enable_netboot_fallback" to "True". * Some redfish-enabled hardware is known not to support persistent boot device setting that is used by the Bare Metal service for deployed instances. The "redfish" hardware type tries to work around this problem, but rebooting such an instance in-band may cause it to boot incorrectly. A predictable boot order should be configured in the node's boot firmware to avoid issues and at least metadata cleaning must be enabled. See this mailing list thread (http://lists.openstack.org/pipermail/openstack- discuss/2020-April/014543.html) for technical details. Upgrade Notes ************* * The "[conductor]api_url" was deprecated and removed, use "[service_catalog]endpoint_override" instead if required to use a specific ironic api url. * The "[cinder]url" was removed, use "[cinder]endpoint_override" instead. * The "[DEFAULT]fatal_exception_format_errors" was removed, use "[ironic_lib]fatal_exception_format_errors" instead. * Operators upgrading from earlier versions using PXE should explicitly set "[pxe]ipxe_bootfile_name", "[pxe]uefi_ipxe_bootfile_name", and possibly "[pxe]ipxe_bootfile_name_by_arch" settings, as well as a iPXE specific "[pxe]ipxe_config_template" override, if required. Setting the "[pxe]ipxe_config_template" to no value will result in the "[pxe]pxe_config_template" being used. The default value points to the supplied standard iPXE template, so only highly customized operators may have to tune this setting. * Updates required ibmcclient version for ibmc drivers to 0.2.2. * A permission setting has been added for "redfish-virtual-media" boot interface, which allows for explicit file permission setting when the driver is used. The default for the new "[redfish]file_permission setting is ``0u644", or 644 if manually changed using "chmod" on the command line. Operators may need to check "/httpboot/redfish" folder permissions if using "redfish- virtual-media" if they were running the conductor with a specific "umask" to work around the permission setting defect. Bug Fixes ********* * Instead of increasing timeout when running long synchronous tasks on ironic-python-agent, ironic now runs them asynchronously and polls the agent until completion. It is no longer necessary to account for long-running tasks when setting "[agent]command_timeout". * Fixes a rare issue where agent successfully powers off a node after deployment, but ironic never learns about it and does another reboot. * Fixes deployment in fast-track mode by keeping the required internal fields ("agent_url" and "agent_secret_token") intact when starting and finishing deployment and cleaning. * Fixes deleting nodes with maintenance mode on and an allocation present. Previously it caused an internal server error. See story 2007823 (https://storyboard.openstack.org/#!/story/2007823) for details. * Change the default for "use_ipmitool_retries" to "False" so that Ironic will do the retries by default. This is needed for certain BMCs that don't support the Cipher Suites command and ipmitool retries take an excessively long time. See story 2007632 (https://storyboard.openstack.org/#!/story/2007632) for additional information. * Cleans up nodes stuck in the "deleting" state on conductor restart. * Fixes fast-track deployments with the "direct" deploy interface that used to hang previously. * Fixes periodic task initialization options to prevent a negative number. If "[conductor]clean_callback_timeout", "[conductor]inspect_wait_timeout" or "[conductor]inspect_wait_timeout" have a negative value an error will be triggered. * Ironic now does not try to allocate the space needed for instance image conversion to raw format if it is already raw. * Addresses the lack of an ability to explicitly set different bootloaders for "iPXE" and "PXE" based boot operations via their respective "ipxe" and "pxe" boot interfaces. * Fixes a bug in "fast track" where Ironic would delete the "agent token" upon exiting cleaning steps. However, if we are in fast track mode, we can preserve the token and continue operations with the agent as it is not powered off during fast track operations. * Fixes a workaround for hardware that does not support persistent boot device setting with the "redfish" or "idrac-redfish" management interface implementation. When such situation is detected, ironic falls back to one-time boot device setting, restoring it on every reboot or power on. For more information, see story 2007733 (https://storyboard.openstack.org/#!/story/2007733). * Fixes the virtual disks creation by changing PERC H740P controller mode from *Enhanced HBA* to *RAID* in delete_configuration clean step. PERC H740P controllers supports RAID mode and Enhanced HBA mode. When the controller is in Enhanced HBA, it creates single disk RAID0 virtual disks of NON-RAID physical disks. Hence the request for VD creation with supported RAID fails due to no available physical disk. This patch converts the PERC H740P RAID controllers to RAID mode if enhanced HBA mode found enabled See bug bug 2007711 (https://storyboard.openstack.org/#!/story/2007711) for more details * Fixes fast track deployment preceeded by managed inspection by providing the ironic API URL to the ramdisk so that it can heartbeat. * Fixes the JSON RPC backend potentially hanging on inability to connect to a conductor. The default timeout is now 120 seconds. The timeout and the number of retries can be adjusted via the configuration options "[json_rpc]timeout" and "[json_rpc]connect_retries" accordingly. * Fixes logic that is applied to port deletions to also consider the presence of a VIF attachment record, which should be removed before attempting to delete the node. Failure to do so can result in erroneous records in the Networking Service. * No longer tries to set "local_gb" to "MAX" when building RAID with the root disk using "MAX" for its size. * To provide a workaround for incorrect boot order problems on some hardware, the "redfish" hardware type now supports the "noop" management interface, similarly to IPMI and SNMP. * Rebooting a node with the "redfish" power interface is now implemented via a power off request followed by power on to avoid returning success when a node stays powered on after the reboot request. * Provides a workaround for hardware that does not support persistent boot device setting with the "redfish" hardware type. When such situation is detected, ironic will fall back to one-time boot device setting, restoring it on every reboot. * Fixes an issue where the folder "/httpboot/redfish" was being created with incorrect permissions. * If the disk format of the image is provided in the instance_info, skip the memory check if it is set to *raw* and raw image streaming is enabled. That allows to stream raw images provided as URL and not through Glance. Other Notes *********** * Ramdisk logs are now collected during cleaning the same way as during deployment. * The following configuration options can now be reloaded without restarting ironic: From "[agent]": "memory_consumed_by_agent", "stream_raw_images", "deploy_logs_*", "image_download_source", "command_timeout" and "neutron_agent_poll_interval". From "[api]": "max_limit", "public_endpoint" and "ramdisk_heartbeat_timeout". From "[conductor]": "heartbeat_timeout", "force_power_state_during_sync", "automated_clean", "soft_power_off_timeout", "power_state_change_timeout", "rescue_password_hash_algorithm" and "require_rescue_password_hashed". From "[DEFAULT]": "default_resource_class", "force_raw_images", "parallel_image_downloads", "default_portgroup_mode" and "require_agent_token". From "[deploy]": "enable_ata_secure_erase", "erase_devices_priority", "erase_devices_metadata_priority", "shred_random_overwrite_iterations", "shred_final_overwrite_with_zeros", "continue_if_disk_secure_erase_fails", "disk_erasure_concurrency", "power_off_after_deploy_failure", "default_boot_option", "default_boot_mode", "configdrive_use_object_store", "fast_track", and "fast_track_timeout". From "[ipmi]": "kill_on_timeout", "disable_boot_timeout", "command_retry_interval", "min_command_interval", "debug" and "additional_retryable_ipmi_errors". From "[iscsi]": "portal_port", "conv_flags" and "verify_attempts". From "[neutron]": "port_setup_delay", "*_network", "*_network_security_groups", "request_timeout", "add_all_ports" and "dhcpv6_stateful_address_count". From "[nova]": "send_power_notifications". From "[pxe]": "pxe_append_params", "default_ephemeral_format", "pxe_config_template", "uefi_pxe_config_template", "pxe_config_template_by_arch", "ip_version" and "ipxe_use_swift". From "[redfish]": "use_swift", "swift_container", "swift_object_expiry_timeout" and "kernel_append_params". Changes in ironic 15.0.0..15.1.0 -------------------------------- 759b722a5 Add documentation on how to propose a release 5f7d84f48 Provide a path to set explicit ipxe bootloaders addbdf7c2 Do not verify error messages from jsonpatch in unit tests c85a33d65 Use assertCountEqual instead of assertItemsEqual, part 2 359d6bca9 Enforce autospec in test_task_manager f26b500ef Follow up of enforce autospec in test_manager daca49022 Follow up of fix uefi jobs with ovmf native ubuntu package af897bc82 Fix missing print format in log message b41bace32 Do not put the whole JSON error from the agent in last_error 0841943c9 Use unittest mock instead of 3rd party mock in test_raid 91b0f7383 Correct Redfish boot once fallback conditional d90459a87 Fix the error message when reached max number of traits cedc4a241 Software RAID: don't try to set local_gb to MAX 4f6374a20 Clean up nodes in DELETING on conductor restart 1a02c79ed Log when a node should be fast-track-able but it's not aac89c214 Fix uefi jobs with native ubuntu ovmf package 00519ba61 Enforce autospec in test_manager 15079e3c9 Prepare release notes and docs for release 15.1 988f61b8a Add ironic 15.1 release mapping 498ab5224 Use getfullargspec to inspect functions f9eb43d1c Fix fast track following managed inspection f1a4725fd Explicitly use python3 for ironic_lib_prefix 296c8669a Fix hacking min version to 3.0.1 d0d772d72 devstack: get rid of python3_enabled d72c42b1f Use IRONIC_VM_SPECS_RAM from ironic-base in ipv6 job 359bc24c9 Update git URLs 325f28043 DRAC: Fix a failure to create virtual disk 0fa90f658 Use virtio bus with uefi 2b412df42 Untie the ramdisk deploy from AgentDeploy a58ca1f7a Enforce autospec in test_utils caf63e403 Enforce autospec in test_flat f2425ad89 Enforce autospec in test_common dc7960982 Update [console]kill_timeout description 130f96d9d Trivial: clarify usage of AgentCommandTimeout in _wait_for_command 2f5456759 Add a bug reporting and triaging guide 58693c7f4 Make test-setup.sh compatible with mysql8 7828fe8b6 agent: poll long-running commands till completion 65480f6b9 Networking boot fallback for local boot f0803493d Fix fast-track with the direct deploy interface 42f28a4d3 Add api-ref for indicators API da49cf69d ironic-standalone, use http basic auth for json-rpc 29d711ad2 Use configure_keystone_authtoken_middleware fbebcc320 Stop allocating double space for raw images b99c71031 Enforce autospec in test_neutron 429c8013f Enforce autospec in test_base_manager 350d84ed4 Enable HTTP Basic authentication for JSON-RPC 0a7608cee Enforce autospec in test_rpc_api and test_steps 11ee8a603 Fix mock callable for Python 3.6 and precedent 0961b1750 Fix: review from dtantsur of 728123 1d84df93d Fix internal server error on deleting nodes with allocations 590916392 Fix agent token and URL handling during fast-track deployment c56777929 Fix Redfish handle no continuous override boot src e8f6fdd56 Allow node vif attach to specify port_uuid or portgroup_uuid 61c42839f CI: make grenade voting again 88b24354a devstack: Use uwsgi binary from path; temporary disable grenade 62408b32a Document http_basic auth strategy 864a0a568 doc: fix endpoint_override for inspector ca1c1b87a Use assertCountEqual instead of assertItemsEqual 69549e5d7 Use unittest.mock instead of mock 30d0296f0 Fix requirements check e8daa0f27 Add virtualbmc as an extra dependency d602543dc [doc] Fix indentation in admin/troubleshooting cd6e5ec49 Feature: Add raid configuration support for ibmc driver 1f2057680 [doc] Extend trouble shooting docs for node stuck in wait states 7a455a3ff devstack: increase concurrency and worker timeout for sushy-tools 697eb0102 Enforce autospec in test_snmp ffca0e5fb Enforce autospec in test_ipxe and test_pxe 2509d282a Use the new extension call for getting partition UUIDs 62b0071ab Enforce autospec in test_deploy_utils module f30d2f348 Follow-up patch for ilo out-of-band `erase_devices` 2e291b69e Add troubleshooting docs on -ing state failures. c6112b01c Enable Basic HTTP authentication middleware 1afb69b25 [doc] Harmonize the prompt for bash commands da28bead6 [doc] Check placement in case of "No valid host found" 5b785569b Fix fast track when exiting cleaning 64674bf0e Block port deletions where vif is present 63bd40c89 Enforce autospec in test_agent_base module 3daffe07a Enforce autospec in test_agent module be4b97828 Move introspection timeout option to base job 14a8b308d Add function definition handling 68cc5fbcb Add validate decorator to expose 2e9fede75 Remove ironic-grenade-dsvm af6cd1093 Fix redfish-virtual-media file permission 6c712454a Enforce autospec in ansible tests 3ae7e6880 Change default to ``False`` for ``use_ipmitool_retries`` bffde661e Enforce autospec in drac tests 0d0d8aae5 Extend vmedia job timeout 0fa282eee agent: do not hard power off if soft power off actually succeeds 6520b373f New configuration parameter to use ipmitool retries 17decbcb9 Add IPv6 ci Job 5f24029c4 Increase callback timeout 488797996 Set default tempest_test_timeout for ironic-base 82f1e0c92 CI: use the default devstack cirros version f266baffc Cap jsonschema 3.2.0 as the minimal version c717f0e49 change devstack ipa-builder default to BRANCHLESS_TARGET_BRANCH 51eff6010 Add the noop management interface to the redfish hardware type 4fe89203a Add agent_token param to docstrings ab262d4ff Make redfish boot interface to use `network_data` 734a0a0cb Add `get_node_network_data` to non-Neutron NetworkInterface cf12521f7 Add `get_node_network_data` method to NetworkInterface d13c6026e Change IRONIC_VM_SPECS_RAM default 16f5950f1 Do not fail when raw image is larger than memory for http c1834cc4b Add py38 package metadata 4a69b6398 [Trivial]Add missing white space between words 271ecdd11 Fix pygments style 4ae482897 Remove iDRAC Redfish boot device known issue 94af61bc1 Revert "Deprecate ibmc" 5750cca0d Increase timeout for introspection in ironic-inspector-tempest df5bb921b Collect tftpd info from journald a2efd0b82 Switch to newer openstackdocstheme and reno versions 846d70698 Fix image type reference 93202bf5a rm duplicate word 'that' d213488dd RAID docs: fix an invalid json example 805a785a3 Change ibmcclient compatible version 38137e6c4 Raise the JSON RPC connection timeout to 2 minutes and disable retries 60c7d97c9 CI: add test-requirements to irrelevant-files a017447ec Encapsulate auth_token middleware f6b9f3435 Pin the python-ibmcclient upper bounds due to six usage d31e71a73 Collect ramdisk logs also during cleaning 1deefcbae Doc building: Silence automated_steps 07fa29999 Remove deprecated [cinder]url dc2a2da1f Remove deprecated [DEFAULT]fatal_exception_format_errors c38465eaa Remove translation sections from setup.cfg 893029493 Add ussuri release notes version bb39f20d3 Fix the wrong description 774bc9264 Cap pycodestyle explicitly to be < 2.6.0 bc79bbd57 Update lower-constraints.txt ead9ecfcb Fix pep8 57e71bae2 Increase timeout value for ironic-base job 68b6378db CI: raise DIB jobs memory to 3 GiB f464e78ef If the "[conductor]XXX_timeout" is less than 0，disable periodic task ccdd5e977 [Trivial] Fix awkward mocking in redfish boot tests 18a8e2f6e redfish: handle hardware that is unable to set persistent boot 2da8a102b Change the name of the inspector job 8562df092 redfish: split reboot into power off followed by power on c5543b572 Enforce autospec in some unit tests modules 14524c265 Add timeout and retries to JSON RPC client 981b24255 Fix 3rd party driver mocks and related tests 6c8579c0d Temporary add per-file-ignores to flake8 tests 50c81cdbc Mark more configuration options as reloadable aa4332254 Silence debug messages from oslo_messaging a83dfd5b9 Do all serialization in the expose decorator 4d2567c2c Use tempest_plugins Zuul CI role 653d4e4ef Add `network_data` field to ironic node object c647408f8 Fix tempest plugin location 5ab51c977 Update grenade job ce878131c Remove testscenarios, testrepository and Babel from test-requirements 627d4dfd1 Monkey patch original current_thread _active 90777c127 Native zuulv3 grenade job for ironic 3e6dfdb3b Remove [conductor]api_url 2051b1979 Imported Translations from Zanata d6e755245 Switch to unittest mock 2ffbfb4b4 Refactor RedfishVirtualMediaBoot 32beb7d98 Add Python3 victoria unit tests 2afbd77c1 Update master for stable/ussuri b4341305d CI: exclude the inspection abort tests from the inspector-redfish-vmedia job 9c69103e3 CI: repair the SNMP job and make it voting. 1673d7b1c Fix configure-vm.py and xml file for centos8 4d810c160 Add PXE reset known issue to the docs 2dc18de2e Add ironic-standalone-redfish 0e401f3af CI: migrate UEFI jobs to Cirros 0.5.1 Diffstat (except docs and test files) ------------------------------------- api-ref/source/baremetal-api-v1-indicators.inc | 154 +++ api-ref/source/baremetal-api-v1-nodes.inc | 4 + api-ref/source/conf.py | 8 +- api-ref/source/index.rst | 1 + api-ref/source/parameters.yaml | 65 ++ api-ref/source/samples/node-create-response.json | 1 + .../node-indicators-component-list-response.json | 45 + .../node-indicators-get-state-response.json | 3 + .../samples/node-indicators-list-response.json | 34 + .../source/samples/node-indicators-set-state.json | 3 + api-ref/source/samples/node-show-response.json | 1 + .../samples/node-update-driver-info-response.json | 1 + .../samples/nodes-list-details-response.json | 2 + babel.cfg | 2 - bindep.txt | 4 +- devstack/common_settings | 26 +- devstack/files/debs/ironic | 32 +- devstack/lib/ironic | 290 ++++-- devstack/plugin.sh | 1 + devstack/tools/ironic/scripts/configure-vm.py | 2 +- devstack/tools/ironic/templates/vm.xml | 9 +- driver-requirements.txt | 2 +- ironic/api/app.py | 17 +- ironic/api/controllers/v1/allocation.py | 3 +- ironic/api/controllers/v1/chassis.py | 3 +- ironic/api/controllers/v1/deploy_template.py | 3 +- ironic/api/controllers/v1/network-data-schema.json | 580 +++++++++++ ironic/api/controllers/v1/node.py | 54 +- ironic/api/controllers/v1/port.py | 3 +- ironic/api/controllers/v1/portgroup.py | 3 +- ironic/api/controllers/v1/ramdisk.py | 1 + ironic/api/controllers/v1/utils.py | 4 +- ironic/api/controllers/v1/versions.py | 6 +- ironic/api/controllers/v1/volume_connector.py | 3 +- ironic/api/controllers/v1/volume_target.py | 3 +- ironic/api/expose.py | 204 +++- ironic/api/functions.py | 182 ++++ ironic/api/hooks.py | 2 +- ironic/api/middleware/__init__.py | 6 +- .../{auth_token.py => auth_public_routes.py} | 13 +- ironic/api/types.py | 26 + ironic/cmd/__init__.py | 11 +- ironic/common/cinder.py | 8 +- ironic/common/exception.py | 4 + ironic/common/images.py | 42 +- ironic/common/json_rpc/__init__.py | 4 +- ironic/common/json_rpc/client.py | 20 +- ironic/common/json_rpc/server.py | 10 +- ironic/common/policy.py | 6 +- ironic/common/pxe_utils.py | 42 +- ironic/common/raid.py | 3 +- ironic/common/release_mappings.py | 23 +- ironic/common/states.py | 4 +- ironic/conductor/cleaning.py | 29 +- ironic/conductor/deployments.py | 12 +- ironic/conductor/manager.py | 39 +- ironic/conductor/rpcapi.py | 1 + ironic/conductor/utils.py | 100 +- ironic/conf/agent.py | 24 +- ironic/conf/api.py | 4 + ironic/conf/cinder.py | 8 - ironic/conf/conductor.py | 21 +- ironic/conf/console.py | 4 +- ironic/conf/default.py | 23 +- ironic/conf/deploy.py | 13 + ironic/conf/ilo.py | 5 +- ironic/conf/ipmi.py | 14 + ironic/conf/iscsi.py | 3 + ironic/conf/json_rpc.py | 19 +- ironic/conf/neutron.py | 13 + ironic/conf/nova.py | 1 + ironic/conf/opts.py | 2 + ironic/conf/pxe.py | 39 +- ironic/conf/redfish.py | 12 + .../cf1a80fdb352_add_node_network_data_field.py | 30 + ironic/db/sqlalchemy/api.py | 19 +- ironic/db/sqlalchemy/models.py | 1 + ironic/drivers/base.py | 20 + ironic/drivers/ibmc.py | 6 + ironic/drivers/modules/agent.py | 153 +-- ironic/drivers/modules/agent_base.py | 140 ++- ironic/drivers/modules/agent_client.py | 130 ++- ironic/drivers/modules/deploy_utils.py | 65 +- ironic/drivers/modules/drac/bios.py | 2 +- ironic/drivers/modules/drac/raid.py | 164 ++- ironic/drivers/modules/ibmc/management.py | 2 - ironic/drivers/modules/ibmc/power.py | 2 - ironic/drivers/modules/ibmc/raid.py | 199 ++++ ironic/drivers/modules/ibmc/utils.py | 2 +- ironic/drivers/modules/ibmc/vendor.py | 23 +- ironic/drivers/modules/image_cache.py | 7 +- ironic/drivers/modules/inspector.py | 5 +- ironic/drivers/modules/ipmitool.py | 15 +- ironic/drivers/modules/irmc/boot.py | 2 +- ironic/drivers/modules/iscsi_deploy.py | 113 +-- ironic/drivers/modules/network/common.py | 77 +- ironic/drivers/modules/pxe.py | 7 +- ironic/drivers/modules/pxe_base.py | 26 +- ironic/drivers/modules/redfish/boot.py | 1067 ++++++++++---------- ironic/drivers/modules/redfish/management.py | 90 +- ironic/drivers/modules/redfish/power.py | 57 +- ironic/drivers/redfish.py | 3 +- ironic/drivers/utils.py | 10 +- ironic/objects/node.py | 29 +- .../unit/api/controllers/v1/test_allocation.py | 12 +- .../unit/api/controllers/v1/test_conductor.py | 12 +- .../api/controllers/v1/test_deploy_template.py | 40 +- .../api/controllers/v1/test_notification_utils.py | 3 +- .../unit/api/controllers/v1/test_portgroup.py | 12 +- .../api/controllers/v1/test_volume_connector.py | 12 +- .../unit/api/controllers/v1/test_volume_target.py | 12 +- .../unit/conductor/test_notification_utils.py | 3 +- .../unit/drivers/modules/ansible/test_deploy.py | 46 +- .../unit/drivers/modules/drac/test_inspect.py | 3 +- .../unit/drivers/modules/drac/test_management.py | 7 +- .../drivers/modules/drac/test_periodic_task.py | 26 +- .../unit/drivers/modules/ibmc/test_management.py | 2 +- .../drivers/modules/ilo/test_firmware_processor.py | 3 +- .../unit/drivers/modules/ilo/test_management.py | 3 +- .../drivers/modules/intel_ipmi/test_management.py | 2 +- .../unit/drivers/modules/irmc/test_inspect.py | 2 +- .../unit/drivers/modules/irmc/test_management.py | 3 +- .../drivers/modules/irmc/test_periodic_task.py | 3 +- .../modules/network/json_samples/network_data.json | 113 +++ .../unit/drivers/modules/network/test_common.py | 219 ++-- .../unit/drivers/modules/network/test_flat.py | 96 +- .../unit/drivers/modules/network/test_neutron.py | 144 +-- .../unit/drivers/modules/network/test_noop.py | 6 + .../unit/drivers/modules/redfish/test_bios.py | 17 +- .../unit/drivers/modules/redfish/test_boot.py | 289 +++--- .../unit/drivers/modules/redfish/test_inspect.py | 3 +- .../drivers/modules/redfish/test_management.py | 116 ++- .../unit/drivers/modules/redfish/test_power.py | 128 ++- .../unit/drivers/modules/redfish/test_utils.py | 2 +- .../unit/drivers/modules/storage/test_cinder.py | 3 +- .../unit/drivers/modules/storage/test_external.py | 2 +- .../unit/drivers/modules/test_agent_client.py | 99 +- .../unit/drivers/modules/test_boot_mode_utils.py | 8 +- .../unit/drivers/modules/test_console_utils.py | 2 +- .../unit/drivers/modules/test_deploy_utils.py | 103 +- .../unit/drivers/modules/test_inspect_utils.py | 3 +- .../unit/drivers/modules/test_iscsi_deploy.py | 2 +- .../unit/drivers/modules/xclarity/test_common.py | 3 +- .../drivers/modules/xclarity/test_management.py | 4 +- .../unit/drivers/modules/xclarity/test_power.py | 2 +- lower-constraints.txt | 100 +- playbooks/ci-workarounds/get_tftpd.yaml | 5 + playbooks/legacy/grenade-dsvm-ironic/run.yaml | 121 --- playbooks/legacy/ironic-dsvm-base/post.yaml | 15 - playbooks/legacy/ironic-dsvm-base/pre.yaml | 22 - .../add-ibmc-raid-interface-0c13826e134fb4ce.yaml | 5 + .../notes/agent-client-poll-ce16fd589e88c95a.yaml | 7 + .../notes/agent-power-off-2115fcfaac030bd0.yaml | 5 + .../notes/agent-token-817a03776bd46d5b.yaml | 6 + .../notes/allocation-delete-26c7c2f1651759f5.yaml | 6 + ...ault_use_ipmitool_retries-2529ce032eae7d1b.yaml | 9 + .../notes/cleaning-logs-dc115b0926ae3982.yaml | 5 + .../notes/del-api-url-eb2ea29aa63a2cb5.yaml | 6 + .../notes/del-cinder-url-cf43cd0336c22878.yaml | 3 + ...l_exception_format_errors-f63b15c8aa460dff.yaml | 5 + releasenotes/notes/deleting-dcdb9cf0d2a6a1a6.yaml | 4 + .../notes/direct-fast-track-d0f43850b6e80751.yaml | 5 + .../disable_periodic_task-590a91c0a5235cfb.yaml | 7 + .../dont-cleanup-cache-twice-0395a50ad723bca8.yaml | 5 + ...licit_ipxe_config_options-d7bf9a743a13f523.yaml | 17 + .../fast-track-with-cleaning-438225116a11662d.yaml | 7 + ...edfish-sadness-workaround-ed02cb310ff369f4.yaml | 11 + .../notes/http-basic-auth-f8c0536eba989918.yaml | 34 + .../notes/ibmcclient-fix-8c6cb49be0aef5f2.yaml | 4 + .../idrac-add-ehba-support-10b90c92b8865364.yaml | 15 + .../inspection-fast-track-ab5165e11d3e9522.yaml | 5 + ...tool-use_ipmitool_retries-b55b2b8ed5cab603.yaml | 16 + .../notes/json-rpc-timeout-ac30eea164b3a294.yaml | 7 + .../notes/netboot-fallback-b208b2c3b40a0d01.yaml | 12 + ...t-ports-with-vif-deletion-3edac3df5aa1becf.yaml | 7 + releasenotes/notes/raid-max-c0920cc44b9779ee.yaml | 5 + .../notes/redfish-noop-mgmt-b61d02b77b1c9d6b.yaml | 6 + .../notes/redfish-power-87062756bce8b047.yaml | 6 + .../notes/redfish-sadness-6e2a37b3f45ef1aa.yaml | 18 + ...tual-media-permission-fix-1909b9cdbbbf9fd1.yaml | 15 + .../notes/reloadable-301ec2aa421abf66.yaml | 48 + ...e-format-for-memory-check-25b1f06701ccdc47.yaml | 6 + .../notes/vif-port-attach-17a9993bf5c21d69.yaml | 8 + releasenotes/source/conf.py | 9 +- releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 60 +- releasenotes/source/ussuri.rst | 6 + requirements.txt | 4 +- setup.cfg | 18 +- test-requirements.txt | 7 +- tools/test-setup.sh | 4 +- tox.ini | 24 +- zuul.d/ironic-jobs.yaml | 250 ++++- zuul.d/legacy-ironic-jobs.yaml | 45 - zuul.d/project.yaml | 16 +- 337 files changed, 9072 insertions(+), 3017 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index b8d91d0bc..bb016f26e 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -20 +20 @@ ansible>=2.7 -python-ibmcclient>=0.1.0 +python-ibmcclient>=0.2.2,<0.3.0 diff --git a/requirements.txt b/requirements.txt index da87b3037..9a59e6777 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ keystoneauth1>=3.18.0 # Apache-2.0 -ironic-lib>=2.17.1 # Apache-2.0 +ironic-lib>=4.3.0 # Apache-2.0 @@ -43 +43 @@ oslo.versionedobjects>=1.31.2 # Apache-2.0 -jsonschema>=2.6.0 # MIT +jsonschema>=3.2.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 497bcdc99..4d3bdfcea 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=3.0.0,<3.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -9,2 +8,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=3.0.0 # BSD -Babel!=2.4.0,>=2.3.4 # BSD @@ -18,2 +15,0 @@ testtools>=2.2.0 # MIT -testresources>=2.0.0 # Apache-2.0/BSD -testscenarios>=0.4 # Apache-2.0/BSD @@ -21,0 +18 @@ bashate>=0.5.1 # Apache-2.0 +pycodestyle>=2.0.0,<2.6.0 # MIT From no-reply at openstack.org Thu Jul 9 09:19:35 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 09 Jul 2020 09:19:35 -0000 Subject: [release-announce] taskflow 4.3.1 (victoria) Message-ID: We jubilantly announce the release of: taskflow 4.3.1: Taskflow structured state management library. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/taskflow Download the package from: https://pypi.org/project/taskflow Please report issues through: https://bugs.launchpad.net/taskflow/+bugs For more details, please see below. Changes in taskflow 4.3.0..4.3.1 -------------------------------- 2a9761be Make test-setup.sh compatible with mysql8 1877565d Stop to use the __future__ module. Diffstat (except docs and test files) ------------------------------------- taskflow/listeners/base.py | 2 -- taskflow/listeners/claims.py | 2 -- taskflow/listeners/logging.py | 2 -- taskflow/listeners/printing.py | 2 -- taskflow/listeners/timing.py | 2 -- taskflow/logging.py | 2 -- taskflow/persistence/backends/impl_sqlalchemy.py | 2 -- taskflow/persistence/backends/sqlalchemy/alembic/env.py | 2 -- taskflow/test.py | 2 -- tools/test-setup.sh | 4 ++-- 10 files changed, 2 insertions(+), 20 deletions(-) From no-reply at openstack.org Thu Jul 9 09:21:44 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 09 Jul 2020 09:21:44 -0000 Subject: [release-announce] castellan 3.3.0 (victoria) Message-ID: We are excited to announce the release of: castellan 3.3.0: Generic Key Manager interface for OpenStack This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. Changes in castellan 3.2.0..3.3.0 --------------------------------- 3a3a738 Bump vault version Diffstat (except docs and test files) ------------------------------------- tools/setup-vault-env.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) From no-reply at openstack.org Thu Jul 9 09:22:24 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 09 Jul 2020 09:22:24 -0000 Subject: [release-announce] castellan 3.0.2 (ussuri) Message-ID: We are stoked to announce the release of: castellan 3.0.2: Generic Key Manager interface for OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. 3.0.2 ^^^^^ Bug Fixes * Add a new parameter, "verify_ssl_path", that can be used to configure the path to CA certs when verifying requests to Barbican. Changes in castellan 3.0.1..3.0.2 --------------------------------- dcbf29d add "verify_ssl_path" config for barbican key manager ae835e2 Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 4104750 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + castellan/key_manager/barbican_key_manager.py | 15 ++++++++++++--- castellan/options.py | 5 +++++ releasenotes/notes/bug-1876102-7c7288fb6e90b11d.yaml | 6 ++++++ tox.ini | 2 +- 6 files changed, 32 insertions(+), 6 deletions(-) From no-reply at openstack.org Thu Jul 9 09:24:59 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 09 Jul 2020 09:24:59 -0000 Subject: [release-announce] oslo.messaging 12.2.1 (victoria) Message-ID: We are ecstatic to announce the release of: oslo.messaging 12.2.1: Oslo Messaging API This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 12.2.0..12.2.1 ---------------------------------------- afb035d9 tests: Resolves issues with kombu > 4.6.8 7e406c31 Simplify tools/test-setup.sh c2074e47 Fix pygments style 8a6f84a5 Align contributing doc with oslo's policy Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 6 ++--- CONTRIBUTING.rst | 5 ++++ bindep.txt | 29 ++++++++++++------------ tools/test-setup.sh | 26 ++++----------------- 6 files changed, 37 insertions(+), 42 deletions(-) From no-reply at openstack.org Thu Jul 9 09:26:35 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 09 Jul 2020 09:26:35 -0000 Subject: [release-announce] oslo.policy 3.3.0 (victoria) Message-ID: We eagerly announce the release of: oslo.policy 3.3.0: Oslo Policy library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 3.3.0 ^^^^^ New Features * A new tool, "oslopolicy-validator", has been added. It allows deployers to easily run basic sanity checks against their policy files. See the documentation for full details. Changes in oslo.policy 3.2.1..3.3.0 ----------------------------------- 597fd04 docs: Add separate man page for each CLI tool 283768e Add oslopolicy-validator tool 22373d5 Align contributing doc with oslo's policy Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 5 + oslo_policy/generator.py | 69 ++++++++- .../policy-file-validator-906d5cff864a2d51.yaml | 6 + setup.cfg | 1 + 16 files changed, 541 insertions(+), 148 deletions(-) From no-reply at openstack.org Fri Jul 10 10:06:04 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 10 Jul 2020 10:06:04 -0000 Subject: [release-announce] openstack-ansible 20.1.3 (train) Message-ID: We are gleeful to announce the release of: openstack-ansible 20.1.3: Ansible playbooks for deploying OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 20.1.2..20.1.3 ------------------------------------------- 7a67afc83 Bump SHAs for stable/train 5a504268e Fix the name of the renamed network for trove efc017570 Disable test_swift_acl_anonymous_download test 26d60712d Remove pre-gate cleanup tasks for the new plain CI images 5eee6976d Fix inventory_manage when the component for a host is not defined Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 20 ++--- osa_toolkit/manage.py | 3 + playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 88 +++++++++++----------- .../templates/user_variables_ceph.yml.j2 | 3 + .../templates/user_variables_translations.yml.j2 | 4 +- zuul.d/jobs.yaml | 1 + zuul.d/playbooks/pre-gate-cleanup.yml | 40 ++-------- zuul.d/playbooks/vars/debian.yml | 19 ----- zuul.d/playbooks/vars/redhat.yml | 17 ----- 11 files changed, 72 insertions(+), 127 deletions(-) From no-reply at openstack.org Fri Jul 10 16:25:20 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 10 Jul 2020 16:25:20 -0000 Subject: [release-announce] openstack-ansible 19.1.2 (stein) Message-ID: We are chuffed to announce the release of: openstack-ansible 19.1.2: Ansible playbooks for deploying OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 19.1.2 ^^^^^^ Deprecation Notes * Fedora is no longer tested in CI for each commit. Changes in openstack-ansible 19.1.1..19.1.2 ------------------------------------------- 9a73b8d49 Bump SHAs for stable/stein c7b28d0f7 ceph: run handlers after common d15a64c17 Bump SHAs for stable/stein ca7f724de Remove pre-gate cleanup tasks for the new plain CI images 33ae718e8 Bump os_tempest to include fix for pinning telemetry plugin to py2.7 version 1c10c8303 Rewrite CI provided apt sources to be http instead of https on bionic 4352dd654 Include openstack_services.yml as vars file for Gnocchi role 55f1b8b21 Bump SHAs for stable/stein Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 34 ++++---- playbooks/ceph-install.yml | 8 +- playbooks/ceph-rgw-install.yml | 4 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 92 +++++++++++----------- playbooks/os-gnocchi-install.yml | 1 + .../fedora-latest-support-bf58ecd96cc8fbd4.yaml | 4 + zuul.d/playbooks/pre-gate-cleanup.yml | 29 ++----- zuul.d/playbooks/vars/debian.yml | 19 ----- zuul.d/playbooks/vars/redhat.yml | 17 ---- 11 files changed, 83 insertions(+), 129 deletions(-) From no-reply at openstack.org Fri Jul 10 20:05:27 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 10 Jul 2020 20:05:27 -0000 Subject: [release-announce] stevedore 3.0.0 (victoria) Message-ID: We are stoked to announce the release of: stevedore 3.0.0: Manage dynamic plugins for Python applications This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/stevedore Download the package from: https://pypi.org/project/stevedore Please report issues through: https://bugs.launchpad.net/stevedore/+bugs For more details, please see below. 3.0.0 ^^^^^ New Features ************ * Adds a caching layer. The cache is a single JSON file created automatically in the user's home directory. It stores the parsed text data from all of the metadata input files in a file with a name based on the hash of the contents and *sys.path*, ensuring uniqueness for applications installed into different virtual environments. Upgrade Notes ************* * The type of the entry point objects returned has changed from *pkg_resources.EntryPoint* to *importlib.metadata.EntryPoint*. The new objects still have a *load()* method, but some of the other APIs are different. Changes in stevedore 2.0.1..3.0.0 --------------------------------- 5eb3ef2 add release note before major version update d529716 switch to importlib.metadata package Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 + .../entry-point-type-change-06ca3b301ba7aad1.yaml | 15 ++ requirements.txt | 1 + stevedore/_cache.py | 195 +++++++++++++++++++++ stevedore/extension.py | 12 +- stevedore/sphinxext.py | 20 +-- 14 files changed, 258 insertions(+), 34 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6de9f4e..06321a9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,0 +6 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 +importlib_metadata>=1.7.0;python_version<'3.8' # Apache-2.0 From no-reply at openstack.org Mon Jul 13 15:35:31 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 13 Jul 2020 15:35:31 -0000 Subject: [release-announce] openstacksdk 0.36.4 (train) Message-ID: We high-spiritedly announce the release of: openstacksdk 0.36.4: An SDK for building applications to work with OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/760 For more details, please see below. Changes in openstacksdk 0.36.3..0.36.4 -------------------------------------- 76d3b292 Don't error if clouds.yaml is not readable Diffstat (except docs and test files) ------------------------------------- openstack/config/loader.py | 17 ++++++++++++----- 1 file changed, 12 insertions(+), 5 deletions(-) From no-reply at openstack.org Mon Jul 13 16:36:55 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 13 Jul 2020 16:36:55 -0000 Subject: [release-announce] stevedore 3.1.0 (victoria) Message-ID: We are pleased to announce the release of: stevedore 3.1.0: Manage dynamic plugins for Python applications This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/stevedore Download the package from: https://pypi.org/project/stevedore Please report issues through: https://bugs.launchpad.net/stevedore/+bugs For more details, please see below. 3.1.0 ^^^^^ New Features * Add a *module_name* property to the *Extension* class to make it easier for consumers to determine where the plugin is being loaded from. Changes in stevedore 3.0.0..3.1.0 --------------------------------- bc04ca9 sphinxext: fix warning message for detailed list Diffstat (except docs and test files) ------------------------------------- .../module-name-property-d3b2d092259dadec.yaml | 5 +++++ stevedore/extension.py | 11 ++++++++++ stevedore/sphinxext.py | 25 ++++++++++++---------- 4 files changed, 35 insertions(+), 18 deletions(-) From no-reply at openstack.org Tue Jul 14 18:03:37 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 14 Jul 2020 18:03:37 -0000 Subject: [release-announce] python-openstackclient 5.3.1 (victoria) Message-ID: We are thrilled to announce the release of: python-openstackclient 5.3.1: OpenStack Command-line Client This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 5.3.1 ^^^^^ Bug Fixes * Fixes an issue with python 3.8 and entrypoint loading where the new builtin importlib entrypoint support had a different attribute api than expected. Changes in python-openstackclient 5.3.0..5.3.1 ---------------------------------------------- 82ebddca Fix compatibility issue in 5.3 Diffstat (except docs and test files) ------------------------------------- openstackclient/common/clientmanager.py | 5 ++++- releasenotes/notes/entrypoint-3.8-0597d159889042f7.yaml | 6 ++++++ 2 files changed, 10 insertions(+), 1 deletion(-) From no-reply at openstack.org Tue Jul 14 22:06:43 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 14 Jul 2020 22:06:43 -0000 Subject: [release-announce] kolla-ansible 8.2.0 (stein) Message-ID: We are pumped to announce the release of: kolla-ansible 8.2.0: Ansible Deployment of Kolla containers This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 8.2.0 ^^^^^ New Features ************ * Kolla Ansible checks now that the local Ansible Python environment is coherent, i.e. used Ansible can see Kolla Ansible. LP#1856346 Upgrade Notes ************* * Avoids unnecessary fact gathering using the "setup" module. This should improve the performance of environments using fact caching and the Ansible "smart" fact gathering policy. See blueprint for details. * In the previous stable release, the octavia user was no longer given the admin role in the admin project, and a task was added to remove the role during upgrades. However, the octavia configuration was not updated to use the service project, causing load balancer creation to fail. There is also an issue for existing deployments in simply switching to the service project. While existing load balancers appear to continue to work, creating new load balancers fails due to the security group belonging to the admin project. For this reason, Train and Stein have been reverted to use the admin project by default, while from the Ussuri release the service project will be used by default. To provide flexibility, an "octavia_service_auth_project" variable has been added. In the Train and Stein releases this is set to "admin" by default, and from Ussuri it will be set to "service" by default. For users of Train and Stein, "octavia_service_auth_project" may be set to "service" in order to avoid a breaking change during the Ussuri upgrade. To switch an existing deployment from using the "admin" project to the "service" project, it will at least be necessary to create the required security group in the "service" project, and update "octavia_amp_secgroup_list" to this group's ID. Ideally the Amphora flavor and network would also be recreated in the "service" project, although this does not appear to be necessary for operation, and will impact existing Amphorae. See bug 1873176 for details. * Apache ZooKeeper will now be automatically deployed whenever Apache Storm is enabled. Bug Fixes ********* * Fixes Kibana deployment with the new E*K stack (6+). LP#1799689 * Fixes Grafana datasource update. LP#1881890 * Removing chrony package and AppArmor profile from docker host if containerized chrony is enabled. LP#1882513 * Do not require kolla-ansible to be installed (Stein only). LP#1882780 * Add missing "become: true" on some VMWare related tasks. Fixed on "Copying VMware vCenter CA file" and "Copying over nsx.ini". * In line with clients for other services used by Magnum, Cinder and Octavia also use endpoint_type = internalURL. In the same tune, these services also use the globally defined *openstack_region_name*. * Fixes an issue with Cinder upgrades that would cause online schema migration to fail. LP#1880753 * Fixes an issue where "fernet_token_expiry" would fail the pre- checks despite being set to a valid value. Please see bug 1856021 (https://bugs.launchpad.net/kolla-ansible/+bug/1856021) for more details. * In the previous stable release, the octavia user was no longer given the admin role in the admin project, and a task was added to remove the role during upgrades. However, the octavia configuration was not updated to use the service project, causing load balancer creation to fail. See upgrade notes for details. LP#1873176 * Improves error reporting in "kolla-genpwd" and "kolla-mergepwd" when input files are not in the expected format. LP#1880220. * Fixes Magnum trust operations in multi-region deployments. * Fixes an issue where host configuration tasks ("sysctl", loading kernel modules) could be performed during the "kolla-ansible genconfig" command. See bug 1860161 for details. * Deploys Apache ZooKeeper if Apache Storm is enabled explicitly. ZooKeeper would only be deployed if Apache Kafka was also enabled, which is often done implicitly by enabling Monasca. Changes in kolla-ansible 8.1.1..8.2.0 ------------------------------------- a96ca6065 Manage octavia health manager worker through openstack_service worker 146604674 Use the children group for site.yml 9b82c0f55 Use public interface for Magnum client and trustee Keystone interface ed426f6af octavia: Add documentation 953ae8c67 Fix Magnum trust operations in multi-region clouds c19169679 Use internalURL endpoint_type for all clients used by Magnum 2e1ab6e60 CI: Move NFV reqs installation to where it belongs 89e6f9aba Remove chrony package if containerized chrony is enabled f1ce87370 Remove post_config from the Kibana role 38166cd9e Make openstack_release more obvious 041943fa1 Remove max count from Cinder online schema migration 45e138538 Enable ZooKeeper when Storm is enabled a0868027f Make octavia service_auth project configurable fffbc32da Skip storm play when not enabled 90736f0fd Improve error reporting in password utilities f3ba8d5f2 Run tox in venv in case of building images 872a0552f CI: Install python dependencies ff8a0cce3 Fix file extension in MariaDB backup docs 9a0cf7436 Fix Grafana datasource update a14707bbc Add missing become to some VMWare tasks d0f72c604 Do not require kolla-ansible to be installed bfc435490 Avoid unconditional fact gathering 90ec823bb Revert "Remove confusing docs" 57605db6d Check that used Ansible can see Kolla Ansible dd8ff1063 Remove confusing docs 800111dda Add First login steps back into Kibana doc 4b7dc5036 Update Advanced Config guide to clarify paths fcbcd1e36 Document and test maximum supported version of Ansible ca18bee49 fix can not generate ovs-dpdk.conf 242c8a6b7 Improve fernet_token_expiry precheck d943ecba8 multipath requires udev-rules in host 4acd3fd1e CI: Discern between Ironic client and grep failure 7ab59bd01 Ignore .vscode/ in Git a898d5416 dpdk-vswitchd: some ovs tools require ovs daemons pidfiles ae6cef7f0 Separate per-service host configuration tasks Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + ansible/gather-facts.yml | 12 +- ansible/group_vars/all.yml | 4 +- ansible/roles/baremetal/defaults/main.yml | 3 + ansible/roles/baremetal/tasks/post-install.yml | 16 ++ ansible/roles/ceilometer/tasks/config.yml | 1 + ansible/roles/cinder/defaults/main.yml | 4 - ansible/roles/cinder/tasks/upgrade.yml | 1 - ansible/roles/elasticsearch/tasks/config-host.yml | 12 ++ ansible/roles/elasticsearch/tasks/config.yml | 9 - ansible/roles/elasticsearch/tasks/deploy.yml | 2 + ansible/roles/elasticsearch/tasks/upgrade.yml | 2 + ansible/roles/grafana/tasks/post_config.yml | 2 +- ansible/roles/haproxy/tasks/config-host.yml | 20 +++ ansible/roles/haproxy/tasks/config.yml | 17 -- ansible/roles/haproxy/tasks/deploy.yml | 2 + ansible/roles/haproxy/tasks/upgrade.yml | 2 + ansible/roles/ironic/tasks/config-host.yml | 8 + ansible/roles/ironic/tasks/config.yml | 7 - ansible/roles/ironic/tasks/deploy.yml | 2 + ansible/roles/ironic/tasks/legacy_upgrade.yml | 2 + ansible/roles/ironic/tasks/rolling_upgrade.yml | 2 + ansible/roles/iscsi/tasks/config-host.yml | 10 ++ ansible/roles/iscsi/tasks/config.yml | 10 -- ansible/roles/iscsi/tasks/deploy.yml | 2 + ansible/roles/keystone/tasks/precheck.yml | 24 ++- ansible/roles/kibana/defaults/main.yml | 10 -- ansible/roles/kibana/tasks/deploy.yml | 2 - ansible/roles/kibana/tasks/post_config.yml | 72 -------- ansible/roles/magnum/templates/magnum.conf.j2 | 11 ++ ansible/roles/monasca/tasks/post_config.yml | 3 +- ansible/roles/multipathd/tasks/config-host.yml | 7 + ansible/roles/multipathd/tasks/config.yml | 7 - ansible/roles/multipathd/tasks/deploy.yml | 2 + ansible/roles/multipathd/tasks/upgrade.yml | 2 + ansible/roles/neutron/tasks/config-host.yml | 22 +++ ansible/roles/neutron/tasks/config.yml | 20 +-- ansible/roles/neutron/tasks/deploy.yml | 2 + ansible/roles/neutron/tasks/legacy_upgrade.yml | 2 + ansible/roles/neutron/tasks/rolling_upgrade.yml | 2 + ansible/roles/nova/tasks/config-host.yml | 12 ++ ansible/roles/nova/tasks/config.yml | 12 -- ansible/roles/nova/tasks/deploy.yml | 2 + ansible/roles/nova/tasks/legacy_upgrade.yml | 2 + ansible/roles/nova/tasks/rolling_upgrade.yml | 2 + ansible/roles/octavia/defaults/main.yml | 4 + ansible/roles/octavia/tasks/register.yml | 14 ++ ansible/roles/octavia/templates/octavia.conf.j2 | 5 +- ansible/roles/opendaylight/tasks/config-host.yml | 12 ++ ansible/roles/opendaylight/tasks/config.yml | 12 -- ansible/roles/opendaylight/tasks/deploy.yml | 2 + ansible/roles/opendaylight/tasks/upgrade.yml | 2 + ansible/roles/openvswitch/tasks/config-host.yml | 7 + ansible/roles/openvswitch/tasks/config.yml | 7 - ansible/roles/openvswitch/tasks/deploy.yml | 2 + ansible/roles/openvswitch/tasks/upgrade.yml | 2 + .../ovs-dpdk/templates/ovsdpdk-vswitchd.json.j2 | 2 +- ansible/site.yml | 14 +- .../central-logging-guide.rst | 15 ++ etc/kolla/globals.yml | 6 +- kolla_ansible/cmd/genpwd.py | 4 + kolla_ansible/cmd/mergepwd.py | 9 + ...onditional-fact-gathering-94760984b2de0796.yaml | 8 + .../notes/bug-1799689-c8612c73649ac483.yaml | 5 + .../notes/bug-1856346-59d0f01005d56e81.yaml | 6 + .../notes/bug-1881890-72c76f5fc065588b.yaml | 5 + ...-chrony-permission-denied-917b3bffc5cdb38d.yaml | 6 + .../notes/bug-1882780-4e71976ce57a0d7c.yaml | 5 + ...-become-attributes-vmware-9ae97e49b4d7dc0d.yaml | 5 + ...in-magnum-use-internalURL-af3ad82af71a88c6.yaml | 6 + ...-cinder-upgrade-max-count-ab928f85f224c63d.yaml | 5 + .../fix-fernet-pre-check-5efbdfe43a2776e3.yaml | 6 + ...avia-service-auth-project-849a4e5bd852e9c7.yaml | 40 +++++ .../notes/improve-pwd-errors-7563a3cc941c3091.yaml | 6 + ...stee-keystone-region-name-002162a45f855faf.yaml | 4 + ...-host-config-in-genconfig-7321f0dcfc9d728d.yaml | 7 + .../storm-enable-zookeeper-2108156acced1c57.yaml | 10 ++ tools/kolla-ansible | 61 ++++++- tools/ovs-dpdkctl.sh | 6 +- tools/setup_gate.sh | 7 +- zuul.d/project.yaml | 4 +- 91 files changed, 753 insertions(+), 239 deletions(-) From no-reply at openstack.org Tue Jul 14 22:07:34 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 14 Jul 2020 22:07:34 -0000 Subject: [release-announce] kolla 10.1.0 (ussuri) Message-ID: We are pumped to announce the release of: kolla 10.1.0: Kolla OpenStack Deployment This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 10.1.0 ^^^^^^ New Features ************ * The Prometheus plugin is now installed into the Fluentd container by default. Upgrade Notes ************* * The Logstash image has been upgraded from Logstash 2 to Logstash 6. Bug Fixes ********* * Fixes Ceilometer deployment and upgrade failing due to wrong mode of argument passing applied to the "ceilometer-upgrade" command. LP#1884919 * Drop systemd support from nsswitch.conf on RHEL-based distros. This avoids unneeded systemd nss lookups inside containers and it also avoids possible selinux denials when a container bind mounts /run and makes the dbus socket available inside the container only to be denied by selinux on the host. * Fixes an issue with loading Storm and Monasca Thresh when using Centos8 containers. * Fixes a bug in Monasca Agent Statsd which causes it to fail under Python 3. Changes in kolla 10.0.0..10.1.0 ------------------------------- ddb6f9286 Upgrade to Logstash 6 d1b75e09e Fix ceilometer-upgrade params e667c10c6 Drop systemd support from nsswitch.conf on RHEL-based distros be5da6d2c Bump prometheus-openstack-exporter version to 1.1.0 714e1feae Change lang package block order e0175350a Install Fluentd Prometheus plugin out of the box e9666854d CI: use wheels from infra mirror 11903c833 Fix loading of Storm on Centos8 / Python 3 a221d08ae Fix Monasca Agent Statsd service under Py3 41aea37c0 CentOS/AArch64: RabbitMQ is back! Diffstat (except docs and test files) ------------------------------------- .../ceilometer-notification/extend_start.sh | 2 +- .../prometheus-openstack-exporter/Dockerfile.j2 | 2 +- kolla/common/config.py | 2 +- kolla/image/build.py | 2 - kolla/template/repos.yaml | 9 +++- ...fluentd-prometheus-plugin-b5c626db667c5675.yaml | 5 ++ .../add-logstash6-everywhere-7f9027ff17c6022d.yaml | 4 ++ .../notes/bug-1884919-6be7e60872c5eb86.yaml | 6 +++ ...nss-on-rhel-based-distros-5d586fcdb9a82da7.yaml | 7 +++ ...orm-in-centos8-containers-86b38c9166ceb0dd.yaml | 5 ++ .../fix-monasca-agent-stats-cc728000b6b05362.yaml | 4 ++ 18 files changed, 87 insertions(+), 76 deletions(-) From no-reply at openstack.org Tue Jul 14 22:09:43 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 14 Jul 2020 22:09:43 -0000 Subject: [release-announce] kolla 9.2.0 (train) Message-ID: We are pleased to announce the release of: kolla 9.2.0: Kolla OpenStack Deployment This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 9.2.0 ^^^^^ New Features ************ * Adds Elasticsearch Curator for managing aggregated log data. Upgrade Notes ************* * The Logstash image has been upgraded from Logstash 2 to Logstash 6 for Centos 7 and Centos 8 only. Bug Fixes ********* * Drop systemd support from nsswitch.conf on RHEL-based distros. This avoids unneeded systemd nss lookups inside containers and it also avoids possible selinux denials when a container bind mounts /run and makes the dbus socket available inside the container only to be denied by selinux on the host. * Fixes an issue with loading Storm and Monasca Thresh when using Centos8 containers. * Fixes a bug in Monasca Agent Statsd which causes it to fail under Python 3. Changes in kolla 9.1.1..9.2.0 ----------------------------- 0e6465543 Drop systemd support from nsswitch.conf on RHEL-based distros 30303fddd Add Elasticsearch Curator Docker image 97d74c37b Change lang package block order 57a05bd77 Update support matrix for ELK images 4ef9c5e67 Fix loading of Storm on Centos8 / Python 3 5be5a4e6f Add Logstash 6 for Monasca on Centos 8 151a0e15f Fix Monasca Agent Statsd service under Py3 4fc9083a6 Fix missing nfs-ganesha-rados-urls package for CentOS 0a6cd606c kolla-toolbox: use u-c while installing virtualenv c9a7b0882 Bump versions for Train f03677bf4 Bump versions for Train c63cd1686 CI: use wheels from infra mirror 729bd4507 CI: Install python deps, fix mod_wsgi in cyborg-api, disable masakari-monitors 6e6638706 Add collectd-amqp to the collectd image 9d821722f add libibverbs package for openvswitch Diffstat (except docs and test files) ------------------------------------- .../elasticsearch-curator/Dockerfile.j2 | 40 ++++++++++++++ .../elasticsearch-curator/extend_start.sh | 8 +++ .../{ => elasticsearch}/Dockerfile.j2 | 0 .../{ => elasticsearch}/extend_start.sh | 0 .../neutron-openvswitch-agent/Dockerfile.j2 | 1 + kolla/common/config.py | 64 +++++++++++----------- kolla/image/build.py | 3 + ...add-elasticsearch-curator-88089d04f7ccd549.yaml | 4 ++ .../notes/add-logstash6-7418a88dc5cb88eb.yaml | 5 ++ ...nss-on-rhel-based-distros-5d586fcdb9a82da7.yaml | 7 +++ ...orm-in-centos8-containers-86b38c9166ceb0dd.yaml | 5 ++ .../fix-monasca-agent-stats-cc728000b6b05362.yaml | 4 ++ 28 files changed, 250 insertions(+), 61 deletions(-) From no-reply at openstack.org Tue Jul 14 22:10:00 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 14 Jul 2020 22:10:00 -0000 Subject: [release-announce] kolla-ansible 9.2.0 (train) Message-ID: We are stoked to announce the release of: kolla-ansible 9.2.0: Ansible Deployment of Kolla containers This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 9.2.0 ^^^^^ New Features ************ * Adds ability to provide a custom elasticsearch config. * Adds Elasticsearch Curator for managing aggregated log data. * Kolla Ansible checks now that the local Ansible Python environment is coherent, i.e. used Ansible can see Kolla Ansible. LP#1856346 Upgrade Notes ************* * Avoids unnecessary fact gathering using the "setup" module. This should improve the performance of environments using fact caching and the Ansible "smart" fact gathering policy. See blueprint for details. * Adds "elasticsearch_use_v6" and "kibana_use_v6" flags which can be set to "true" to deploy the "elasticsearch6" and "kibana6" images on CentOS 7 or 8. These flags are "true" by default on CentOS 8, and "false" elsewhere. The services should be upgraded from 5.x to 6.x via "kolla-ansible upgrade elasticsearch,kibana", and this can be used to provide an Elasticsearch 6.x cluster that is compatible between CentOS 7 and 8. * In the previous stable release, the octavia user was no longer given the admin role in the admin project, and a task was added to remove the role during upgrades. However, the octavia configuration was not updated to use the service project, causing load balancer creation to fail. There is also an issue for existing deployments in simply switching to the service project. While existing load balancers appear to continue to work, creating new load balancers fails due to the security group belonging to the admin project. For this reason, Train and Stein have been reverted to use the admin project by default, while from the Ussuri release the service project will be used by default. To provide flexibility, an "octavia_service_auth_project" variable has been added. In the Train and Stein releases this is set to "admin" by default, and from Ussuri it will be set to "service" by default. For users of Train and Stein, "octavia_service_auth_project" may be set to "service" in order to avoid a breaking change during the Ussuri upgrade. To switch an existing deployment from using the "admin" project to the "service" project, it will at least be necessary to create the required security group in the "service" project, and update "octavia_amp_secgroup_list" to this group's ID. Ideally the Amphora flavor and network would also be recreated in the "service" project, although this does not appear to be necessary for operation, and will impact existing Amphorae. See bug 1873176 for details. * Changes the default value of "kibana_elasticsearch_ssl_verify" from "false" to "true". LP#1885110 * Apache ZooKeeper will now be automatically deployed whenever Apache Storm is enabled. * When deploying Monasca with Logstash 6 (the default for Centos 8), any custom Logstash 2 configuration for Monasca will need to be updated to work with Logstash 6. Please consult the documentation. Bug Fixes ********* * Fixes Kibana deployment with the new E*K stack (6+). LP#1799689 * Fixes Grafana datasource update. LP#1881890 * Removing chrony package and AppArmor profile from docker host if containerized chrony is enabled. LP#1882513 * Escapes table names in mariadb upgrade procedure. LP#1883141 * Fixes an issue with Manila deployment starting "openvswitch" and "neutron-openvswitch-agent" containers when "enable_manila_backend_generic" was set to "False". LP#1884939 * Fixes the Elasticsearch Curator cron schedule run. LP#1885732 * Fixes an incorrect configuration for nova-conductor when a custom Nova policy was applied, preventing the "nova_conductor" container from starting successfully. LP#1886170 * Add missing "become: true" on some VMWare related tasks. Fixed on "Copying VMware vCenter CA file" and "Copying over nsx.ini". * fix deploy nova failed when use kolla_dev_mod. * In line with clients for other services used by Magnum, Cinder and Octavia also use endpoint_type = internalURL. In the same tune, these services also use the globally defined *openstack_region_name*. * Fixes the default CloudKitty configuration, which included the "gnocchi_collector" and "keystone_fetcher" options that were deprecated in Stein and removed in Train. See bug 1876985 for details. * Fixes an issue with Cinder upgrades that would cause online schema migration to fail. LP#1880753 * Fix cyborg api container failed to load api paste file. For details please see bug 1874028. * Fix the configuration of the etcd service so that its protocol is independant of the value of the "internal_protocol" parameter. The etcd service is not load balanced by HAProxy, so there is no proxy layer to do TLS termination when "internal_protocol" is configured to be "https". * Fixes an issue where "fernet_token_expiry" would fail the pre- checks despite being set to a valid value. Please see bug 1856021 (https://bugs.launchpad.net/kolla-ansible/+bug/1856021) for more details. * The kolla_logs Docker volume is now mounted into the Elasticsearch container to expose logs which were previously written erroneously to the container filesystem (bug 1859162). It is up to the user to migrate any existing logs if they so desire and this should be done before applying this fix. * In the previous stable release, the octavia user was no longer given the admin role in the admin project, and a task was added to remove the role during upgrades. However, the octavia configuration was not updated to use the service project, causing load balancer creation to fail. See upgrade notes for details. LP#1873176 * Fixes an issue with RabbitMQ where tags would be removed from the "openstack" user after deploying Nova. This prevents the user from accessing the RabbitMQ management UI. LP#1875786 * Adds a new variable "fluentd_elasticsearch_cacert", which defaults to the value of "openstack_cacert". If set, this will be used to set the path of the CA certificate bundle used by Fluentd when communicating with Elasticsearch. LP#1885109 * Improves error reporting in "kolla-genpwd" and "kolla-mergepwd" when input files are not in the expected format. LP#1880220. * Fixes Magnum trust operations in multi-region deployments. * Deploys Apache ZooKeeper if Apache Storm is enabled explicitly. ZooKeeper would only be deployed if Apache Kafka was also enabled, which is often done implicitly by enabling Monasca. * When deploying Elasticsearch 6 (the default for Centos 8), Logstash 2 was deployed by default which is not compatible with Elasticsearch 6. Logstash 6 is now deployed by default when using Centos 8 containers. Changes in kolla-ansible 9.1.0..9.2.0 ------------------------------------- 1629f5fe0 Manage octavia health manager worker through openstack_service worker 0c1b326e3 Use kolla_logs volume for Elasticsearch 767f0ad06 Use the children group for site.yml bd055912d Remove policy file from nova-conductor config.json template 6cbd4c520 Syntax error in Fluentd Monasca output config 8418b5ae8 Use public interface for Magnum client and trustee Keystone interface 5011b6bd1 Make ES Curator schedule multinode-friendly f1af365da Fix the Elasticsearch Curator cron schedule run dfd867ad1 Fix Zun configuration for TLS 953702532 Fix etcd protocol configuration 4e1225b04 Support using Logstash 6 image with Centos8 ff9a54d01 Support custom elasticsearch configuration files 358887866 Support deploying Elasticsearch Curator 74be7b86a Escape table names in mariadb upgrade procedure 2918bae99 octavia: Add documentation aa2d2b534 Verify TLS by default for Kibana to Elasticsearch 20a1de4ee Support CA certificate for fluentd & Elasticsearch 0498b5c45 Fix Magnum trust operations in multi-region clouds 1aa4565ff Use internalURL endpoint_type for all clients used by Magnum 5699f5a32 Skip storm play when not enabled 05a384920 Change neutron-ovs-agent deploy only with manila generic backend d8b05f4c1 Improve error reporting in password utilities 0715d0d86 Enable ZooKeeper when Storm is enabled 4009a2a17 barbican: Use python3 plugin in uwsgi config c2de7ac4e nova-cell role clone failed eba42fa8c Run tox in venv in case of building images 1851d8812 Make octavia service_auth project configurable 6f227c2cd Remove max count from Cinder online schema migration 9528e5944 fix deploy nova failed when use kolla_dev_mod 473775f14 CI: Install python dependencies 57f6475ee Add EL8 packages. c677690f3 Do not ask for a SSH key password 910b405ce Fix file extension in MariaDB backup docs fda520f82 Remove chrony package if containerized chrony is enabled cf70176c0 Fix Grafana datasource update db8c2dcc5 CI: Fix periodics 31fb5cc67 CI: Move NFV reqs installation to where it belongs a8d760c4c [elasticsearch] Add migration for Kibana 6.x index d8880dd32 [elasticsearch] Update config for 6.x 9463a7499 Add missing become to some VMWare tasks bb9e7d0e7 CI: add missing base jobs 166eb87c3 Fix bug in deploying monasca_agent_forwarder 8cfb1d7a0 Avoid unconditional fact gathering 467e6876a CentOS 8: Support Elasticsearch & Kibana 6.x cfc1ba2c3 Check that used Ansible can see Kolla Ansible d76ddcbad Remove confusing docs 71acc3ef9 Make openstack_release more obvious eccb6806c Remove post_config from the Kibana role 1959e0fcc Add First login steps back into Kibana doc 7b851bdb1 Fix cyborg api failed to load api-paste.ini file afc5c9974 fix can not generate ovs-dpdk.conf 49b58151b Improve fernet_token_expiry precheck c31b2505c Configure RabbitMQ user tags in nova-cell role 7f52e04b8 multipath requires udev-rules in host 7b22f394f Document and test maximum supported version of Ansible 16da9a4a9 CI: Discern between Ironic client and grep failure 653c7ba09 Ignore .vscode/ in Git 9e5afdc17 dpdk-vswitchd: some ovs tools require ovs daemons pidfiles 360330adc Add release note for CloudKitty configuration fixes a673a069c Make nova perms consistent between applications 3efd5d6e1 Update Advanced Config guide to clarify paths 812eeb30c Update section names in cloudkitty config Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + ansible/gather-facts.yml | 12 +- ansible/group_vars/all.yml | 10 +- ansible/inventory/all-in-one | 4 + ansible/inventory/multinode | 4 + .../roles/barbican/templates/barbican-api.ini.j2 | 2 +- ansible/roles/baremetal/defaults/main.yml | 3 + ansible/roles/baremetal/tasks/post-install.yml | 16 ++ ansible/roles/ceilometer/tasks/config.yml | 1 + ansible/roles/cinder/defaults/main.yml | 4 - ansible/roles/cinder/tasks/upgrade.yml | 1 - ansible/roles/cinder/templates/cinder.conf.j2 | 2 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 4 +- ansible/roles/common/defaults/main.yml | 1 + .../common/templates/conf/output/00-local.conf.j2 | 6 + .../common/templates/conf/output/01-es.conf.j2 | 3 + .../templates/conf/output/02-monasca.conf.j2 | 2 +- ansible/roles/cyborg/tasks/config.yml | 16 +- ansible/roles/elasticsearch/defaults/main.yml | 61 ++++- ansible/roles/elasticsearch/handlers/main.yml | 15 ++ .../roles/elasticsearch/tasks/check-containers.yml | 4 +- ansible/roles/elasticsearch/tasks/config.yml | 47 +++- ansible/roles/elasticsearch/tasks/pull.yml | 4 +- ansible/roles/elasticsearch/tasks/upgrade.yml | 10 +- .../templates/elasticsearch-curator-actions.yml.j2 | 33 +++ .../templates/elasticsearch-curator.crontab.j2 | 3 + .../templates/elasticsearch-curator.json.j2 | 32 +++ .../templates/elasticsearch-curator.yml.j2 | 8 + .../elasticsearch/templates/elasticsearch.json.j2 | 2 +- .../elasticsearch/templates/elasticsearch.yml.j2 | 4 +- ansible/roles/etcd/defaults/main.yml | 10 +- ansible/roles/grafana/tasks/post_config.yml | 2 +- ansible/roles/keystone/tasks/precheck.yml | 24 +- ansible/roles/kibana/defaults/main.yml | 18 +- ansible/roles/kibana/files/kibana-6-index.json | 264 +++++++++++++++++++++ ansible/roles/kibana/tasks/deploy.yml | 2 - .../roles/kibana/tasks/migrate-kibana-index.yml | 99 ++++++++ ansible/roles/kibana/tasks/post_config.yml | 72 ------ ansible/roles/kibana/tasks/upgrade.yml | 3 + ansible/roles/magnum/templates/magnum.conf.j2 | 11 + ansible/roles/mariadb/tasks/upgrade.yml | 2 +- ansible/roles/monasca/defaults/main.yml | 6 +- ansible/roles/monasca/tasks/post_config.yml | 3 +- .../monasca-agent-forwarder/agent-forwarder.yml.j2 | 2 +- .../monasca-log-metrics/log-metrics.conf.j2 | 29 +++ .../monasca-log-metrics.json.j2 | 3 +- .../monasca-log-persister/log-persister.conf.j2 | 13 + .../monasca-log-persister.json.j2 | 3 +- .../log-transformer.conf.j2 | 24 ++ .../monasca-log-transformer.json.j2 | 3 +- ansible/roles/neutron/defaults/main.yml | 2 +- ansible/roles/neutron/tasks/config.yml | 1 + ansible/roles/nova-cell/defaults/main.yml | 7 +- .../templates/nova-cell-bootstrap.json.j2 | 3 +- .../nova-cell/templates/nova-conductor.json.j2 | 8 +- ansible/roles/nova/tasks/bootstrap.yml | 3 + ansible/roles/nova/tasks/deploy.yml | 3 - .../nova/templates/nova-api-bootstrap.json.j2 | 3 +- ansible/roles/octavia/defaults/main.yml | 4 + ansible/roles/octavia/tasks/register.yml | 14 ++ ansible/roles/octavia/templates/octavia.conf.j2 | 5 +- ansible/roles/openvswitch/defaults/main.yml | 4 +- .../ovs-dpdk/templates/ovsdpdk-vswitchd.json.j2 | 2 +- ansible/roles/qinling/templates/qinling.conf.j2 | 2 +- ansible/roles/service-rabbitmq/defaults/main.yml | 1 + ansible/roles/service-rabbitmq/tasks/main.yml | 1 + .../roles/skydive/templates/skydive-agent.conf.j2 | 4 +- .../skydive/templates/skydive-analyzer.conf.j2 | 4 +- ansible/roles/zun/templates/zun.conf.j2 | 5 + ansible/site.yml | 14 +- .../central-logging-guide.rst | 49 ++++ etc/kolla/globals.yml | 7 +- kolla_ansible/cmd/genpwd.py | 4 + kolla_ansible/cmd/mergepwd.py | 9 + ...custom-elasticsearch-conf-6fc34fbc3b471997.yaml | 3 + ...add-elasticsearch-curator-88089d04f7ccd549.yaml | 4 + ...onditional-fact-gathering-94760984b2de0796.yaml | 8 + .../notes/bug-1799689-c8612c73649ac483.yaml | 5 + .../notes/bug-1856346-59d0f01005d56e81.yaml | 6 + .../notes/bug-1881890-72c76f5fc065588b.yaml | 5 + ...-chrony-permission-denied-917b3bffc5cdb38d.yaml | 6 + .../notes/bug-1883141-336fd12b89a3a5cc.yaml | 5 + .../notes/bug-1884939-7c77b8002d3ff52d.yaml | 7 + .../notes/bug-1885732-10803d46f9c73444.yaml | 5 + .../notes/bug-1886170-f76d9d3520ab86ec.yaml | 7 + ...-become-attributes-vmware-9ae97e49b4d7dc0d.yaml | 5 + .../bug-nova-dev-mod-failed-ad4e64f5a5bc2a6a.yaml | 4 + ...in-magnum-use-internalURL-af3ad82af71a88c6.yaml | 6 + ...ty-removed-config-options-6b656fb8bfa5431d.yaml | 7 + .../elasticsearch-kibana-6-6621548e948d9d23.yaml | 10 + ...-cinder-upgrade-max-count-ab928f85f224c63d.yaml | 5 + ...ed-to-find-api-paste-file-225cec3ec16b2265.yaml | 6 + .../notes/fix-etcd-protocol-3c9482f90070ee6e.yaml | 8 + .../fix-fernet-pre-check-5efbdfe43a2776e3.yaml | 6 + ...-elasticsearch-kolla-logs-a0ba85d91d1a2c31.yaml | 8 + ...avia-service-auth-project-849a4e5bd852e9c7.yaml | 40 ++++ .../fix-rabbitmq-user-tags-8c9d626b28ff5d51.yaml | 7 + ...entd-elasticsearch-cacert-0e8824dd57052913.yaml | 8 + .../notes/improve-pwd-errors-7563a3cc941c3091.yaml | 6 + .../notes/kibana-tls-verify-8bfcb822268ad0d8.yaml | 6 + ...stee-keystone-region-name-002162a45f855faf.yaml | 4 + .../storm-enable-zookeeper-2108156acced1c57.yaml | 10 + .../notes/support-logstash-6-d64bb51217b79a77.yaml | 12 + tools/init-runonce | 2 +- tools/kolla-ansible | 83 +++++-- tools/ovs-dpdkctl.sh | 6 +- tools/setup_gate.sh | 5 +- zuul.d/base.yaml | 22 ++ zuul.d/project.yaml | 3 +- 120 files changed, 1500 insertions(+), 243 deletions(-) From no-reply at openstack.org Tue Jul 14 22:11:20 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 14 Jul 2020 22:11:20 -0000 Subject: [release-announce] kolla 8.0.4 (stein) Message-ID: We jubilantly announce the release of: kolla 8.0.4: Kolla OpenStack Deployment This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 8.0.4 ^^^^^ Bug Fixes * Drop systemd support from nsswitch.conf on RHEL-based distros. This avoids unneeded systemd nss lookups inside containers and it also avoids possible selinux denials when a container bind mounts /run and makes the dbus socket available inside the container only to be denied by selinux on the host. Changes in kolla 8.0.3..8.0.4 ----------------------------- 7038e3ff0 Drop systemd support from nsswitch.conf on RHEL-based distros 37b3df146 Bump versions for Stein 6604041eb CI: use wheels from infra mirror d12137ce6 CI: Install python deps, mark oraclelinux rsyslog as skipped 8cce9293a Bump versions for Stein fca4a088a Fix multiple issues 4b7768291 CI: Ignore more 0f7cc7c95 CI: Ignore .zuul.d Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 ++ .zuul.d/base.yaml | 5 +++ .zuul.d/centos.yaml | 1 - kolla/common/config.py | 16 ++++----- kolla/image/build.py | 3 ++ ...nss-on-rhel-based-distros-5d586fcdb9a82da7.yaml | 7 ++++ 13 files changed, 83 insertions(+), 13 deletions(-) From no-reply at openstack.org Tue Jul 14 22:11:32 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 14 Jul 2020 22:11:32 -0000 Subject: [release-announce] kayobe 7.1.0 (train) Message-ID: We are excited to announce the release of: kayobe 7.1.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 7.1.0 ^^^^^ New Features ************ * Adds a "kayobe overcloud service stop" command. This can be used to stop containerised services running on overcloud hosts. * Adds support for CentOS 8 as a host Operating System and base container image. This is the only major version of CentOS supported from the Ussuri release. The Train release supports both CentOS 7 and 8 hosts, and provides a route for migration. * Adds support for configuration of DNF repositories on CentOS 8. Variables have been added in a new configuration file, "dnf.yml". Backwards compatibility with the Yum configuration variables is provided. * Adds support for applying regular package updates on CentOS 8 via DNF Automatic. Variables have been added in a new configuration file, "dnf.yml". Backwards compatibility with the Yum-cron configuration variables is provided. * Adds a "seed_vm_interfaces" variable which defines the network interfaces to which the seed VM is attached. * Adds a variable for controlling the tag applied to built container images - "kolla_tag". This separates the configuration of the tag for image building from that used for deployment ("kolla_openstack_release"). The default for "kolla_tag" is "kolla_openstack_release". Known Issues ************ * Fixes an issue where provisioning a seed VM would fail when the Ansible control host and the seed hypervisor are different hosts. See story 2007530 (https://storyboard.openstack.org/#!/story/2007530) for more details. Upgrade Notes ************* * Some images were supported by CentOS 7 but lack suitable packages in CentOS 8, and are no longer supported for CentOS. See Kolla release notes for details. * Support for configuring an NTP daemon on the seed and overcloud hosts is no longer present for CentOS 8, as appropriate packages are not available. Instead, Kolla Ansible is configured to deploy the "chrony" container on CentOS 8 overcloud hosts by default. Note that for CentOS 8 during the Train release, the standard "kolla_enable_chrony" variable in "${KAYOBE_CONFIG_PATH}/kolla.yml" has no effect. Instead, chrony may be disabled by setting "enable_chrony" to "false" in "${KAYOBE_CONFIG_PATH}/kolla/globals.yml". * The default order of network interfaces in the seed VM is now sorted alphabetically based on their Kayobe network name. This may require the seed's network interface names to be changed in configuration if the seed VM is recreated. See story 2007259 for details. Deprecation Notes ***************** * The Yum configuration variables in "yum.yml" are deprecated and will be removed in a future release. Adapt any configuration overrides to use the new DNF variables in "dnf.yml" instead. * The yum-cron configuration variables in "yum-cron.yml" are deprecated and will be removed in a future release. Adapt any configuration overrides to use the new DNF automatic variables in "dnf.yml". Bug Fixes ********* * Fixes an issue where chronyd would be enabled as a systemd service in addition to ntpd. This causes issues in deployments where the NTP servers have been customized, as chronyd would win the race on startup, but its configuration file would not have been configured by Kayobe. See story 2005272 (https://storyboard.openstack.org/#!/story/2005272) for more details. * Fixes an issue where it was not possible to load dashboards into the Monasca Grafana fork when the default Monasca control plane OpenStack project name is used from Kolla Ansible. * Fix an issue where the StackHPC iDRAC role would break when configuring RAID when used with a recent release of the python- dracclient module. * Fixes concurrency issues while adding SSH keys to the known hosts file by performing the action serially. See story 2007628 for details. * Fixes issues running the following commands: * "kayobe baremetal compute inspect" * "kayobe baremetal compute manage" * "kayobe baremetal compute provide" See story 2007797 for details. * Fixes a package conflict while provisioning a seed VM on a CentOS 8 seed hypervisor with "coreutils-single" already installed. See story 2007612 for details. * Fixes failure to configure Docker devicemapper storage when the default value of "docker_storage_driver" is used. * Fixes an issue where the default value of "public_net_name" included a trailing newline. See story 2007654. * Fixes an issue with idempotency of Ironic Inspector rule creation. See story 2007399 for details. * Fixes a bug where introspection data save would fail. See Story 2007326 (https://storyboard.openstack.org/#!/story/2007326) for more details. * Fixes an issue with seed VMs with multiple network interfaces where interfaces could come up in a different order if the VM is recreated. The interfaces are now created in alphabetical order of their Kayobe network name by default. See story 2007259 for details. * Fixes an issue seen when "libselinux-python" is not installed on the Ansible control host. See story 2007703 for details. * Improves error message seen when discovering SSH known hosts for a host without an IP address defined in "${KAYOBE_CONFIG_PATH }/network-allocation.yml". * Fixes an issue where "OS_CACERT" variable in "openrc" files would be set to the path of a non-existent file. New "openrc" files can be generated with the "kayobe control host bootstrap" command. See story 2007516 (https://storyboard.openstack.org/#!/story/2007516) for more details. * Fixes an issue where host configuration would fail if "ntp_service_enabled" is set to "false" or "kolla_enable_chrony" is set to "true". See story 2007384 for details. Changes in kayobe 7.0.0..7.1.0 ------------------------------ 3c32015b Use latest release of StackHPC iDRAC role 49cef61f Remove newline from default public_net_name fe6cbcfa Fix kayobe baremetal compute commands 1774d9e9 CI: Update IPA images during upgrade 31b90d51 Fix ironic inspector store endpoint configuration 35bf59f8 CI: don't run virtualenv on an existing virtualenv 62c4de41 Add missing colon 47ca2fe7 CentOS 8: add docs and release note 847bd9e9 Fix seed VM interface ordering 33724452 CentOS 8: separate kolla build tag from deploy tag 981658d5 Fix concurrency issues while adding SSH keys to known_hosts 5eb0ed6e Make the root disk image build command more visible 7bb215ea CI: mark pytest results as a Zuul artifact 7baa657f docs: fix route configuration example syntax fdaa6375 Add note about hardware package dropping python 2 support d932d435 Fix docker-devicemapper playbook c731e8e9 Bump version of os-images role 0fd6fa7d Install libselinux-python on Ansible control host f6ce46dc CI: Encrypt passwords.yml in overcloud host configure job 0c5415e9 Python 3: fix Ansible Vault password helper 6ef18d6a Install coreutils package before using configdrive role c631b6f4 CentOS 8: Fix network configuration persistence 0d699b53 Use ensure-docker role instead of install-docker eba57aff Constraint python-openstackclient install with requirements.txt 64de1b42 Fix ironic inspector rule creation idempotency 9f6e4395 Remove nameservers with any IP in overcloud resolv.conf workaround 5f836518 CI: fix kayobe-tox-molecule job c7b43e00 Improve SSH known host error messages 3a8b0585 Fix loading of Monasca Grafana dashboards dec617c3 Docs: Configure firewall to allow testing of baremetal 275bdd80 Docs: fix libvirt connection URI for tenks 0119ff58 CI: Add overcloud host configure jobs f6a24dd3 Fix passwords.yml generation with vault encryption on Python 3 41c52849 Fix seed VM provisioning on a remote seed hypervisor 773ac2e4 Add support for stopping overcloud services fb1316a5 Use upper constraints when installing Tenks fe1df0f7 Fix ntp and chrony in mixed CentOS 7 and 8 environments b5aa3938 Prevent openrc files from using wrong OS_CACERT value 359d2b0d CentOS 8: seed VM & bifrost de8f5592 CentOS 8: Enable seed job 9e5e7955 CentOS 8: Support DNF 1fa84a6f Switch to stackhpc fork of resmo.ntp 6255b382 Fix multiple CI failures 0a0d37c7 Fix Kayobe overcloud introspection data save 13f5fa48 CentOS 8: Add seed and overcloud CI jobs 047f84ad CentOS 8: Use same local python version for kolla-ansible 612575a4 CentOS 8: Disable ntpd, enable chrony container 034e7791 CentOS 8: Bump MichaelRigart.interfaces to 1.4.0 20f45f2b Make Kayobe code compatible with Python 3 2a23b89e CentOS 8: Use ansible_playbook_python for localhost dependencies d3d9dbdb Remove activate-virtualenv and deactivate-virtualenv roles a14be331 Switch from shade to openstacksdk 2f6e5344 Make local kolla-ansible Python executable configurable 1be05c17 Stop gzipping logs in get-logs.sh 369fc3a8 Skip resmo.ntp role if ntp_service_enabled is false 61690b7e Blacklist Ansible 2.8.9 0208801f [docs] Change CoreOS URLs to Centos URLs fir IPA 6f34cf12 CI: Make provision-net external Diffstat (except docs and test files) ------------------------------------- ansible/baremetal-compute-inspect.yml | 27 ++-- ansible/baremetal-compute-manage.yml | 27 ++-- ansible/baremetal-compute-provide.yml | 25 ++- ansible/baremetal-compute-serial-console.yml | 8 + ansible/disable-selinux.yml | 1 + ansible/dnf.yml | 16 ++ ansible/docker-registry.yml | 2 +- ansible/external-net.yml | 8 +- ansible/group_vars/all/dnf | 52 +++++++ ansible/group_vars/all/docker | 3 + ansible/group_vars/all/grafana | 4 +- ansible/group_vars/all/kolla | 11 +- ansible/group_vars/all/network | 2 +- ansible/group_vars/all/ntp | 6 +- ansible/group_vars/all/overcloud | 15 +- ansible/group_vars/all/seed-vm | 3 + ansible/group_vars/all/yum | 28 ++++ ansible/group_vars/all/yum-cron | 6 + ansible/inspection-store.yml | 2 +- ansible/ip-allocation.yml | 17 ++ ansible/kayobe-ansible-user.yml | 4 +- ansible/kayobe-target-venv.yml | 43 +++-- ansible/kolla-openstack.yml | 5 +- ansible/kolla-target-venv.yml | 21 ++- ansible/network.yml | 3 +- ansible/ntp.yml | 4 +- ansible/opensm.yml | 2 +- ansible/overcloud-extras.yml | 2 +- ansible/overcloud-grafana-configure.yml | 24 ++- ansible/overcloud-host-image-workaround-resolv.yml | 15 +- ansible/overcloud-introspection-data-save.yml | 3 +- ...ud-introspection-rules-dell-lldp-workaround.yml | 6 +- ansible/overcloud-introspection-rules.yml | 6 +- ansible/overcloud-ipa-images.yml | 6 +- ansible/pip.yml | 2 + ansible/provision-net.yml | 20 +-- .../roles/activate-virtualenv/defaults/main.yml | 3 - ansible/roles/activate-virtualenv/tasks/main.yml | 10 -- .../library/console_allocation.py | 2 +- ansible/roles/console-allocation/tasks/main.yml | 53 ++++--- ansible/roles/console-allocation/vars/Debian.yml | 7 - .../roles/deactivate-virtualenv/defaults/main.yml | 5 - ansible/roles/deactivate-virtualenv/tasks/main.yml | 6 - ansible/roles/disable-selinux/tasks/main.yml | 3 +- ansible/roles/dnf-automatic/defaults/main.yml | 6 + ansible/roles/dnf-automatic/tasks/main.yml | 27 ++++ ansible/roles/dnf/defaults/main.yml | 35 +++++ ansible/roles/dnf/tasks/custom-repo.yml | 27 ++++ ansible/roles/dnf/tasks/local-mirror.yml | 46 ++++++ ansible/roles/dnf/tasks/main.yml | 14 ++ .../roles/dnf/templates/CentOS-AppStream.repo.j2 | 19 +++ ansible/roles/dnf/templates/CentOS-Base.repo.j2 | 19 +++ ansible/roles/dnf/templates/CentOS-Extras.repo.j2 | 20 +++ ansible/roles/dnf/templates/epel-modular.repo.j2 | 23 +++ ansible/roles/dnf/templates/epel.repo.j2 | 23 +++ ansible/roles/docker-registry/defaults/main.yml | 2 +- ansible/roles/docker-registry/tasks/stop.yml | 9 ++ ansible/roles/inspection-store/defaults/main.yml | 2 +- ansible/roles/inspection-store/tasks/stop.yml | 9 ++ .../roles/ip-allocation/library/ip_allocation.py | 2 +- ansible/roles/ip-allocation/tasks/main.yml | 53 ++++--- ansible/roles/ip-allocation/vars/Debian.yml | 8 - ansible/roles/ipa-images/defaults/main.yml | 2 +- ansible/roles/ipa-images/meta/main.yml | 6 +- ansible/roles/ipa-images/tasks/main.yml | 131 ++++++++-------- ansible/roles/ironic-inspector-rules/README.md | 2 +- .../library/os_ironic_inspector_rule.py | 26 +++- ansible/roles/ironic-inspector-rules/meta/main.yml | 6 +- .../roles/ironic-inspector-rules/tasks/main.yml | 12 +- ansible/roles/kolla-ansible/defaults/main.yml | 6 + .../roles/kolla-ansible/library/kolla_passwords.py | 8 +- ansible/roles/kolla-ansible/tasks/config.yml | 8 + ansible/roles/kolla-ansible/tasks/install.yml | 28 +++- .../roles/kolla-ansible/templates/globals.yml.j2 | 14 +- .../kolla-ansible/templates/overcloud-top-level.j2 | 9 ++ .../kolla-ansible/templates/requirements.txt.j2 | 5 +- ansible/roles/kolla-ansible/vars/Debian.yml | 7 +- ansible/roles/kolla-ansible/vars/RedHat.yml | 8 +- ansible/roles/kolla-ansible/vars/main.yml | 1 - ansible/roles/kolla-build/defaults/main.yml | 2 +- .../kolla-build/templates/kolla-build.conf.j2 | 2 +- ansible/roles/kolla/tasks/install.yml | 7 +- ansible/roles/opensm/defaults/main.yml | 2 +- ansible/roles/opensm/tasks/stop.yml | 9 ++ ansible/roles/pip/tasks/pip_local_mirror.yml | 20 --- ansible/roles/snat/tasks/main.yml | 5 + ansible/roles/ssh-known-host/tasks/main.yml | 24 ++- .../roles/swift-rings/files/swift-ring-builder.py | 2 +- ansible/seed-introspection-rules.yml | 6 +- ansible/seed-vm-provision.yml | 33 ++-- ansible/yum.yml | 17 +- dev/config.sh | 3 + dev/functions | 103 ++++++++++-- etc/kayobe/bifrost.yml | 24 +-- etc/kayobe/dnf.yml | 67 ++++++++ etc/kayobe/kolla.yml | 10 +- etc/kayobe/ntp.yml | 6 +- etc/kayobe/overcloud.yml | 13 +- etc/kayobe/seed-vm.yml | 19 ++- etc/kayobe/yum-cron.yml | 2 + etc/kayobe/yum.yml | 3 + kayobe/ansible.py | 5 +- kayobe/cli/commands.py | 54 ++++++- kayobe/vault.py | 5 +- playbooks/kayobe-overcloud-base/overrides.yml.j2 | 7 + playbooks/kayobe-overcloud-base/pre.yml | 8 + .../overrides.yml.j2 | 128 +++++++++++++++ .../kayobe-overcloud-host-configure-base/pre.yml | 42 +++++ .../kayobe-overcloud-host-configure-base/run.yml | 41 +++++ playbooks/kayobe-seed-base/overrides.yml.j2 | 7 + playbooks/kayobe-seed-base/pre.yml | 8 + playbooks/kayobe-tox-molecule/pre.yml | 2 +- .../notes/add-stop-command-8f66235870720f31.yaml | 5 + .../notes/blacklist-chrony-019d39fad263905c.yaml | 9 ++ ...-grafana-dashboard-config-b81781cf10c2a236.yaml | 6 + .../bugfix-update-idrac-role-71ede6900dc000a7.yaml | 5 + releasenotes/notes/centos-8-12073e91a157d0a2.yaml | 12 ++ .../notes/centos-8-chrony-bec9d7bc8b346363.yaml | 11 ++ ...urrent-known-hosts-update-8dc94557e9a48021.yaml | 6 + releasenotes/notes/dnf-2071fc40b0d783b6.yaml | 20 +++ ...aremetal-compute-commands-b72862a53f88c5ef.yaml | 11 ++ ...coreutils-single-conflict-208036c66b9f7e59.yaml | 6 + ...ult-docker-storage-driver-e05832be7a4c2ab8.yaml | 5 + ...x-default-public-net-name-067338275460b50d.yaml | 7 + ...nspector-rule-idempotency-f6e5a61f7dca580f.yaml | 6 + ...x-introspection-data-save-cfc83714f66fd63c.yaml | 6 + ...mote-seed-vm-provisioning-faa8de569ca6bc89.yaml | 7 + ...ix-seed-multiple-networks-458915b085a9478c.yaml | 19 +++ ...ix-selinux-python-missing-8bae7ffce4ba460d.yaml | 6 + ...rove-ssh-known-host-error-15fbc6ae4fa3dbd6.yaml | 6 + .../kolla-tag-and-suffix-a223b0c7173a245e.yaml | 7 + ...t-wrong-oscacert-variable-9ede7f60c1562a77.yaml | 8 + .../skip-ntp-if-disabled-585c756f01b34bfa.yaml | 7 + requirements.txt | 3 +- requirements.yml | 26 ++-- roles/kayobe-diagnostics/files/get_logs.sh | 2 - setup.cfg | 1 + test-requirements.txt | 2 + tox.ini | 3 +- zuul.d/jobs.yaml | 59 ++++++- zuul.d/nodesets.yaml | 8 +- zuul.d/project.yaml | 24 ++- 158 files changed, 2260 insertions(+), 511 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a368d266..3989ce9e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ pbr>=2.0 # Apache-2.0 -ansible>=2.6.0,<2.9.0 # GPLv3 +ansible>=2.6.0,<2.9.0,!=2.8.9 # GPLv3 @@ -10,0 +11 @@ setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2. +selinux;python_version>='3' # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 9b9f3d3c..26dece02 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10,0 +11,2 @@ hacking>=0.12.0,<0.13 # Apache-2.0 +# sh 1.13.1 causes molecule yamllint to fail. +sh<1.13 # MIT From no-reply at openstack.org Tue Jul 14 22:16:38 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 14 Jul 2020 22:16:38 -0000 Subject: [release-announce] kolla-ansible 10.1.0 (ussuri) Message-ID: We enthusiastically announce the release of: kolla-ansible 10.1.0: Ansible Deployment of Kolla containers This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 10.1.0 ^^^^^^ New Features ************ * Adds ability to provide a custom elasticsearch config. Upgrade Notes ************* * Changes the default value of "kibana_elasticsearch_ssl_verify" from "false" to "true". LP#1885110 * Apache ZooKeeper will now be automatically deployed whenever Apache Storm is enabled. Bug Fixes ********* * Fixes an issue when using ip addresses instead of hostnames in Ansible inventory. OpenvSwitch role sets system-id based on inventory_hostname, which in case of ip addresses in is first ip octet. Such a deployment would result in multiple OVN chassis with duplicate name e.g. "10" connecting to OVN Southbound database - which spawns high numbers of create/delete events in Encap database table - leading to near 100% CPU usage of OVN/OVS/Neutron processes. * Fixes an issue with Manila deployment starting "openvswitch" and "neutron-openvswitch-agent" containers when "enable_manila_backend_generic" was set to "False". LP#1884939 * Fixes the Elasticsearch Curator cron schedule run. LP#1885732 * Fixes an incorrect configuration for nova-conductor when a custom Nova policy was applied, preventing the "nova_conductor" container from starting successfully. LP#1886170 * Fixes an incorrect Ceph keyring file configuration in "gnocchi.conf", which prevented Gnocchi from connecting to Ceph. LP#1886711 * In line with clients for other services used by Magnum, Cinder and Octavia also use endpoint_type = internalURL. In the same tune, these services also use the globally defined *openstack_region_name*. * Fix the configuration of the etcd service so that its protocol is independant of the value of the "internal_protocol" parameter. The etcd service is not load balanced by HAProxy, so there is no proxy layer to do TLS termination when "internal_protocol" is configured to be "https". * Fixes LP#1885885 where the default chunk size in the Monasca Fluentd output plugin increased from 8MB to 256MB for file buffering which exceeded the limit allowed by the Monasca Log / Unified API. * Adds a new variable "fluentd_elasticsearch_cacert", which defaults to the value of "openstack_cacert". If set, this will be used to set the path of the CA certificate bundle used by Fluentd when communicating with Elasticsearch. LP#1885109 * Improves error reporting in "kolla-genpwd" and "kolla-mergepwd" when input files are not in the expected format. LP#1880220. * Fixes Magnum trust operations in multi-region deployments. * Deploys Apache ZooKeeper if Apache Storm is enabled explicitly. ZooKeeper would only be deployed if Apache Kafka was also enabled, which is often done implicitly by enabling Monasca. Changes in kolla-ansible 10.0.0..10.1.0 --------------------------------------- 6bba8cc52 Manage octavia health manager worker through openstack_service worker 1636ea073 Fix incorrect value of [storage]/ceph_keyring in gnocchi.conf e0a1072b8 Use the children group for site.yml 33f186c94 Remove policy file from nova-conductor config.json template 0ae152d1d Fix Fluentd date format for MariaDB xinetd ea58710ff Set a chunk size for Fluentd bulk log upload to Monasca f6a70e666 Syntax error in Fluentd Monasca output config 6a0a4877e Use public interface for Magnum client and trustee Keystone interface acfabc77a Make ES Curator schedule multinode-friendly 3114af254 Fix the Elasticsearch Curator cron schedule run 4a5aa528b Fix Zun configuration for TLS 2f3ecdb34 [docs] Update quickstart for Ussuri+ 81e9565ed Fix etcd protocol configuration f6bd4eaa5 Support custom elasticsearch configuration files 73b6ccd1f Verify TLS by default for Kibana to Elasticsearch d3da72c2c Support CA certificate for fluentd & Elasticsearch a0a184e95 Use internalURL endpoint_type for all clients used by Magnum b0359f8a2 Fix Magnum trust operations in multi-region clouds 934cf3985 Skip storm play when not enabled c5ddd19ea openvswitch: Use ansible_hostname for system-id 58a3ba13f Change neutron-ovs-agent deploy only with manila generic backend 9b6ec38b8 octavia: Add documentation 94c7e5a96 Improve error reporting in password utilities 7f0d03183 Enable ZooKeeper when Storm is enabled 8e0c0cd8c CI: use venv only (and not virtualenv) 2ca01f25f nova-cell role clone failed Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 3 +- ansible/roles/cinder/templates/cinder.conf.j2 | 2 +- ansible/roles/common/defaults/main.yml | 1 + .../common/templates/conf/input/02-mariadb.conf.j2 | 2 +- .../common/templates/conf/output/00-local.conf.j2 | 15 ++ .../common/templates/conf/output/01-es.conf.j2 | 3 + .../templates/conf/output/02-monasca.conf.j2 | 5 +- ansible/roles/elasticsearch/defaults/main.yml | 16 +- ansible/roles/elasticsearch/tasks/config.yml | 8 +- .../templates/elasticsearch-curator.crontab.j2 | 2 + .../templates/elasticsearch-curator.json.j2 | 5 +- ansible/roles/etcd/defaults/main.yml | 10 +- ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 2 +- ansible/roles/kibana/defaults/main.yml | 2 +- ansible/roles/magnum/templates/magnum.conf.j2 | 11 ++ ansible/roles/neutron/defaults/main.yml | 2 +- ansible/roles/nova-cell/defaults/main.yml | 2 +- .../nova-cell/templates/nova-conductor.json.j2 | 8 +- ansible/roles/octavia/templates/octavia.conf.j2 | 3 + ansible/roles/openvswitch/defaults/main.yml | 6 +- ansible/roles/qinling/templates/qinling.conf.j2 | 2 +- .../roles/skydive/templates/skydive-agent.conf.j2 | 4 +- .../skydive/templates/skydive-analyzer.conf.j2 | 4 +- ansible/roles/zun/templates/zun.conf.j2 | 5 + ansible/site.yml | 14 +- etc/kolla/globals.yml | 2 +- kolla_ansible/cmd/genpwd.py | 4 + kolla_ansible/cmd/mergepwd.py | 9 + ...custom-elasticsearch-conf-6fc34fbc3b471997.yaml | 3 + .../notes/bug-1884734-ec054799d3300778.yaml | 10 ++ .../notes/bug-1884939-7c77b8002d3ff52d.yaml | 7 + .../notes/bug-1885732-10803d46f9c73444.yaml | 5 + .../notes/bug-1886170-f76d9d3520ab86ec.yaml | 7 + .../notes/bug-1886711-a1a1fd1343f1a644.yaml | 6 + ...in-magnum-use-internalURL-af3ad82af71a88c6.yaml | 6 + .../notes/fix-etcd-protocol-3c9482f90070ee6e.yaml | 8 + ...k-size-for-monasca-output-882338103d2e1f13.yaml | 8 + ...entd-elasticsearch-cacert-0e8824dd57052913.yaml | 8 + .../notes/improve-pwd-errors-7563a3cc941c3091.yaml | 6 + .../notes/kibana-tls-verify-8bfcb822268ad0d8.yaml | 6 + ...stee-keystone-region-name-002162a45f855faf.yaml | 4 + .../storm-enable-zookeeper-2108156acced1c57.yaml | 10 ++ zuul.d/base.yaml | 2 +- 50 files changed, 442 insertions(+), 95 deletions(-) From no-reply at openstack.org Fri Jul 17 07:52:21 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 17 Jul 2020 07:52:21 -0000 Subject: [release-announce] openstackdocstheme 2.2.5 Message-ID: We contentedly announce the release of: openstackdocstheme 2.2.5: OpenStack Docs Theme The source is available from: https://opendev.org/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ For more details, please see below. Changes in openstackdocstheme 2.2.4..2.2.5 ------------------------------------------ 0ef4eb2 Add version dropdown on docs.starlingx.io Diffstat (except docs and test files) ------------------------------------- openstackdocstheme/theme/starlingxdocs/titlerow.html | 12 ++++++++++++ 1 file changed, 12 insertions(+) From no-reply at openstack.org Fri Jul 17 13:53:16 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 17 Jul 2020 13:53:16 -0000 Subject: [release-announce] stevedore 3.2.0 (victoria) Message-ID: We exuberantly announce the release of: stevedore 3.2.0: Manage dynamic plugins for Python applications This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/stevedore Download the package from: https://pypi.org/project/stevedore Please report issues through: https://bugs.launchpad.net/stevedore/+bugs For more details, please see below. 3.2.0 ^^^^^ New Features * Add *extras* and *attr* properties to the *Extension* class to make it easier for consumers to access the underlying properties, regardless of the version of *importlib.metadata* being used. Changes in stevedore 3.1.0..3.2.0 --------------------------------- e9204ee add property methods to extension for more entry point values Diffstat (except docs and test files) ------------------------------------- ...se-entry-point-properties-6f2d868d4342fc0d.yaml | 6 +++ stevedore/extension.py | 21 ++++++++++ 3 files changed, 73 insertions(+) From no-reply at openstack.org Fri Jul 17 13:54:17 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 17 Jul 2020 13:54:17 -0000 Subject: [release-announce] oslo.policy 3.3.1 (victoria) Message-ID: We are stoked to announce the release of: oslo.policy 3.3.1: Oslo Policy library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. Changes in oslo.policy 3.3.0..3.3.1 ----------------------------------- 65b96ab Don't deepcopy objects before mask_dict_password d02e5cd Include example of literal comparison policy rule Diffstat (except docs and test files) ------------------------------------- oslo_policy/policy.py | 9 +++------ 2 files changed, 20 insertions(+), 6 deletions(-) From no-reply at openstack.org Fri Jul 17 13:54:33 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 17 Jul 2020 13:54:33 -0000 Subject: [release-announce] oslo.db 8.3.0 (victoria) Message-ID: We are happy to announce the release of: oslo.db 8.3.0: Oslo Database library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 8.2.1..8.3.0 ------------------------------- a9e6992 requirements: Drop os-testr 7af699e Make test-setup.sh compatible with mysql8 2ce2f4c Align contributing doc with oslo's policy Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 5 +++++ lower-constraints.txt | 1 - test-requirements.txt | 1 - tools/test-setup.sh | 4 ++-- 4 files changed, 7 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 523af12..d55902a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +12,0 @@ testtools>=2.2.0 # MIT -os-testr>=1.0.0 # Apache-2.0 From no-reply at openstack.org Fri Jul 17 13:55:15 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 17 Jul 2020 13:55:15 -0000 Subject: [release-announce] castellan 3.4.0 (victoria) Message-ID: We jubilantly announce the release of: castellan 3.4.0: Generic Key Manager interface for OpenStack This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. 3.4.0 ^^^^^ New Features * Historically, the vault key manager backend converts its managed objects to dictionaries in order to send them as a json object. To promote cross-backend compatibility, suck feature should be migrated to managed objects. Methods from_dict() and to_dict() added to class ManagedObject. The Method from_dict() is a class method to create instances based on a dictionary while the method to_dict() is an instance method to translate an instance to a dictionary. Changes in castellan 3.3.0..3.4.0 --------------------------------- c2a9f19 migrate testing to ubuntu focal 883e960 Add to_dict and from_dict conversions to managed objects Diffstat (except docs and test files) ------------------------------------- castellan/common/exception.py | 8 +++ castellan/common/objects/__init__.py | 49 +++++++++++++++ castellan/common/objects/key.py | 38 +++++++++++- castellan/common/objects/managed_object.py | 72 +++++++++++++++++++++- castellan/common/objects/opaque_data.py | 8 ++- castellan/common/objects/passphrase.py | 8 ++- castellan/common/objects/private_key.py | 10 +-- castellan/common/objects/public_key.py | 10 +-- castellan/common/objects/symmetric_key.py | 10 +-- castellan/common/objects/x_509.py | 8 ++- ...rsions-to-managed-objects-95a9f0fdbd371a87.yaml | 10 +++ test-requirements.txt | 4 ++ 19 files changed, 275 insertions(+), 27 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index fe6146b..212a0c9 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,0 +5,4 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0 +# remove this pyflakes from here once you bump the +# hacking to 3.2.0 or above. hacking 3.2.0 takes +# care of pyflakes version compatibilty. +pyflakes>=2.1.1 From no-reply at openstack.org Fri Jul 17 14:06:53 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 17 Jul 2020 14:06:53 -0000 Subject: [release-announce] oslo.vmware 3.5.0 (victoria) Message-ID: We are ecstatic to announce the release of: oslo.vmware 3.5.0: Oslo VMware library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.vmware Download the package from: https://pypi.org/project/oslo.vmware Please report issues through: https://bugs.launchpad.net/oslo.vmware/+bugs For more details, please see below. 3.5.0 ^^^^^ Upgrade Notes * "ManagedObjectReference"'s "value" and "_type" attributes must not be used anymore in depending projects. Instead, "vim_util.get_moref_value()" and "vim_util.get_moref_type()" have to be used, because with this spec (https://specs.openstack.org/openstack/oslo-specs/specs/victoria /oslo-vmware-soap-library-switch.html) we switch the backing SOAP library and different libraries have different representations of those attributes. Changes in oslo.vmware 3.4.0..3.5.0 ----------------------------------- 32c8d43 Add moref helper functions ab9ccf6 Align contributing doc with oslo's policy Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 5 +++ oslo_vmware/api.py | 2 +- oslo_vmware/dvs_util.py | 2 +- oslo_vmware/pbm.py | 6 +-- oslo_vmware/service.py | 5 ++- oslo_vmware/vim_util.py | 40 +++++++++++++++++++- ...y-switch-helper-functions-21330be61cf7922a.yaml | 9 +++++ 13 files changed, 102 insertions(+), 46 deletions(-) From no-reply at openstack.org Mon Jul 20 09:39:23 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 09:39:23 -0000 Subject: [release-announce] oslo.messaging 9.5.2 (stein) Message-ID: We joyfully announce the release of: oslo.messaging 9.5.2: Oslo Messaging API This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 9.5.1..9.5.2 -------------------------------------- fd795bbb Print warning message when connection running out c5d17905 Simplify tools/test-setup.sh Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 ++ bindep.txt | 27 ++++++++++++++------------- oslo_messaging/_drivers/pool.py | 4 ++++ tools/test-setup.sh | 26 ++++---------------------- 4 files changed, 24 insertions(+), 35 deletions(-) From no-reply at openstack.org Mon Jul 20 09:40:41 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 09:40:41 -0000 Subject: [release-announce] castellan 1.2.3 (stein) Message-ID: We are chuffed to announce the release of: castellan 1.2.3: Generic Key Manager interface for OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. 1.2.3 ^^^^^ Bug Fixes * Add a new parameter, "verify_ssl_path", that can be used to configure the path to CA certs when verifying requests to Barbican. Changes in castellan 1.2.2..1.2.3 --------------------------------- 46575f0 add "verify_ssl_path" config for barbican key manager a288335 Add bindep.txt b126176 OpenDev Migration Patch 38fb4e5 Replace openstack.org git:// URLs with https:// eae06cf Update UPPER_CONSTRAINTS_FILE for stable/stein b11e410 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 4 ++-- bindep.txt | 4 ++++ castellan/key_manager/barbican_key_manager.py | 15 ++++++++++++--- castellan/options.py | 5 +++++ releasenotes/notes/bug-1876102-7c7288fb6e90b11d.yaml | 6 ++++++ tox.ini | 14 +++++++++++++- 8 files changed, 51 insertions(+), 9 deletions(-) From no-reply at openstack.org Mon Jul 20 09:40:44 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 09:40:44 -0000 Subject: [release-announce] castellan 1.3.3 (train) Message-ID: We are pumped to announce the release of: castellan 1.3.3: Generic Key Manager interface for OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. 1.3.3 ^^^^^ Bug Fixes * Add a new parameter, "verify_ssl_path", that can be used to configure the path to CA certs when verifying requests to Barbican. Changes in castellan 1.3.2..1.3.3 --------------------------------- 884dee7 add "verify_ssl_path" config for barbican key manager 1f8529e Removes context "validation". Diffstat (except docs and test files) ------------------------------------- castellan/key_manager/barbican_key_manager.py | 15 ++++-- castellan/key_manager/vault_key_manager.py | 30 ------------ castellan/options.py | 5 ++ .../functional/key_manager/test_key_manager.py | 1 + .../key_manager/test_vault_key_manager.py | 53 ++-------------------- .../notes/bug-1876102-7c7288fb6e90b11d.yaml | 6 +++ 7 files changed, 34 insertions(+), 85 deletions(-) From no-reply at openstack.org Mon Jul 20 09:43:13 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 09:43:13 -0000 Subject: [release-announce] oslo.messaging 10.2.1 (train) Message-ID: We are psyched to announce the release of: oslo.messaging 10.2.1: Oslo Messaging API This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 10.2.0..10.2.1 ---------------------------------------- 1613b7a9 Print warning message when connection running out 88cf5aeb Simplify tools/test-setup.sh 29c1f399 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 9d6a66b5 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 2 ++ bindep.txt | 29 +++++++++++++++-------------- oslo_messaging/_drivers/pool.py | 4 ++++ tools/test-setup.sh | 26 ++++---------------------- tox.ini | 2 +- 6 files changed, 27 insertions(+), 37 deletions(-) From no-reply at openstack.org Mon Jul 20 09:46:40 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 09:46:40 -0000 Subject: [release-announce] blazar 3.0.1 (stein) Message-ID: We are psyched to announce the release of: blazar 3.0.1: Reservation Service for OpenStack clouds This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/blazar Download the package from: https://tarballs.openstack.org/blazar/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 3.0.1 ^^^^^ Bug Fixes * Updates the on_start failure handlers to look up the freepool aggregate by ID, not by name, when moving hosts back to the freepool. Fixes issue where hosts wind up without any aggregate during lease start failure. For more details, see bug 1847821 (https://bugs.launchpad.net/blazar/+bug/1847821). * Fixes host creation in the presence of availability zones with no hosts. For more details, see bug 1880646 (https://bugs.launchpad.net/blazar/+bug/1880646). * Fixes placement operations in multi-region deployments. Changes in blazar 3.0.0..3.0.1 ------------------------------ 6bbad1b Fix up adding availability zone (AZ) to a host on creation f1551cd Fix placement operations in multi-region deployments 5d30225 Fix issue moving hosts back to freepool 66dc446 Add bindep.txt to fix unit tests 536ea88 OpenDev Migration Patch 39afb01 Replace openstack.org git:// URLs with https:// 6e6ffeb Update UPPER_CONSTRAINTS_FILE for stable/stein 57388cb Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 8 ++++---- bindep.txt | 8 ++++++++ blazar/utils/openstack/nova.py | 6 +++--- blazar/utils/openstack/placement.py | 2 ++ playbooks/legacy/blazar-devstack-dsvm-py35/run.yaml | 8 ++++---- playbooks/legacy/blazar-devstack-dsvm/run.yaml | 8 ++++---- releasenotes/notes/bug-1847821-2f9d6e61f438dc4f.yaml | 8 ++++++++ releasenotes/notes/bug-1880646-f1af8c48f895f00e.yaml | 6 ++++++ .../notes/region-in-placement-client-dfbd0bcd09f81aac.yaml | 4 ++++ tox.ini | 13 ++++++++++++- 12 files changed, 60 insertions(+), 20 deletions(-) From no-reply at openstack.org Mon Jul 20 09:55:58 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 09:55:58 -0000 Subject: [release-announce] tacker 1.0.1 (stein) Message-ID: We are delighted to announce the release of: tacker 1.0.1: OpenStack NFV Orchestration This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tacker Download the package from: https://tarballs.openstack.org/tacker/ Please report issues through: https://bugs.launchpad.net/tacker/+bugs For more details, please see below. Changes in tacker 1.0.0..1.0.1 ------------------------------ aee46c86 Update heat-translator-1.3.1 for param values bd23a645 update sphinx requirement baff0a73 OpenDev Migration Patch 8bea538d Update UPPER_CONSTRAINTS_FILE for stable/stein 48a34ea3 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 18 +++++++++--------- lower-constraints.txt | 2 +- requirements.txt | 2 +- tox.ini | 2 +- 6 files changed, 16 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5525b594..395e2d22 100644 --- a/requirements.txt +++ b/requirements.txt @@ -42 +42 @@ tosca-parser>=0.8.1 # Apache-2.0 -heat-translator>=1.3.0 # Apache-2.0 +heat-translator>=1.3.1 # Apache-2.0 From no-reply at openstack.org Mon Jul 20 10:01:28 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:01:28 -0000 Subject: [release-announce] tacker-horizon 0.14.1 (stein) Message-ID: We are tickled pink to announce the release of: tacker-horizon 0.14.1: Tacker extension for Horizon This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tacker-horizon Download the package from: https://tarballs.openstack.org/tacker-horizon/ Please report issues through: https://bugs.launchpad.net/tacker/+bugs For more details, please see below. Changes in tacker-horizon 0.14.0..0.14.1 ---------------------------------------- ee3e7bf OpenDev Migration Patch 4f37772 Creating VNFD in Dashboard doesn't work 137005a Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- tacker_horizon/openstack_dashboard/dashboards/nfv/vnfcatalog/forms.py | 3 ++- 2 files changed, 4 insertions(+), 2 deletions(-) From no-reply at openstack.org Mon Jul 20 10:01:54 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:01:54 -0000 Subject: [release-announce] horizon 15.3.1 (stein) Message-ID: We are stoked to announce the release of: horizon 15.3.1: OpenStack Dashboard This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. Changes in horizon 15.3.0..15.3.1 --------------------------------- 8da0dcd21 Fix horizon-nodejs jobs 32129b3a6 Incoming tenant id when creating a subnet on create network form 3d7ae5156 Switch to new javascript jobs 21d91974a Fix tenant_id for a new port. Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 44 ++++++++++++---------- .../dashboards/admin/networks/ports/views.py | 6 +++ .../dashboards/project/networks/ports/views.py | 4 +- .../dashboards/project/networks/workflows.py | 3 +- playbooks/horizon-nodejs/pre.yaml | 6 +++ 9 files changed, 111 insertions(+), 24 deletions(-) From no-reply at openstack.org Mon Jul 20 10:04:27 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:04:27 -0000 Subject: [release-announce] aodh 8.0.1 (stein) Message-ID: We exuberantly announce the release of: aodh 8.0.1: OpenStack Telemetry Alarming This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/aodh Download the package from: https://tarballs.openstack.org/aodh/ Please report issues through: https://bugs.launchpad.net/aodh/+bugs For more details, please see below. Changes in aodh 8.0.0..8.0.1 ---------------------------- 167bce0d Add _static folder to fix docs build error and make postgresql job non-voting ed2dd757 Byte encoding of member Id 1b1b8e20 Add user_domain_name to keystone client. a0e5a099 OpenDev Migration Patch a2d562bf Replace openstack.org git:// URLs with https:// f8430c76 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 - .gitreview | 3 +- .zuul.yaml | 10 +++-- aodh/coordination.py | 4 +- aodh/keystone_client.py | 1 + devstack/plugin.sh | 2 +- .../legacy/aodh-dsvm-tempest-plugin-mysql/run.yaml | 12 +++--- .../aodh-dsvm-tempest-plugin-postgresql/run.yaml | 12 +++--- 11 files changed, 80 insertions(+), 20 deletions(-) From no-reply at openstack.org Mon Jul 20 10:07:10 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:07:10 -0000 Subject: [release-announce] manila 8.1.3 (stein) Message-ID: We are delighted to announce the release of: manila 8.1.3: Shared Storage for OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 8.1.3 ^^^^^ Bug Fixes * Fixed the Generic driver to evict and kill any user processes accessing a share before attempting to extend or shrink a CIFS share. * Fixed an issue with Unity driver fails to delete CIFS share if wrong access was set. * A new user message has been added in case of share extensions failing asynchronously. * Fixed unneeded all ports list request to Neutron in service instance helper module on tearing down service subnet, Neutron can filter them by subnet_id itself. * Fixed bug #1882590 (https://bugs.launchpad.net/manila/+bug/1882590) that caused an error on starting a NetApp backend when using the SVM scoped account. Changes in manila 8.1.2..8.1.3 ------------------------------ baefbcd0 Add asynchronous error info into messages when share extend error 908041c4 Get ports filtered by subnet id on share-server cleanup a26b027b CIFS extension failing because of volume in use 036908dd [NetApp] Fix svm scoped account b983eda9 [devstack] Allow cephfs daemon port access 913ef96e Fix uwsgi path location 4b0d0a70 [devstack][ci] Move bgp setup to plugin 3f2f7b66 [devstack][ci] Modify firewall in ds-plugin 26ff9383 [devstack][ci] Set public network ID in tempest.conf 99c0a110 Conditionally restore default route in setup_ipv6 d39d9302 Make manila-tempest-plugin installation optional d1c42a02 [Unity]: Failed to delete cifs share if wrong access set Diffstat (except docs and test files) ------------------------------------- contrib/ci/post_test_hook.sh | 24 ------ contrib/ci/pre_test_hook.sh | 5 ++ devstack/plugin.sh | 93 +++++++++++++++++++--- devstack/settings | 11 +++ .../contributor/samples/container_local.conf | 3 + .../contributor/samples/zfsonlinux_local.conf | 3 + manila/message/message_field.py | 13 ++- .../share/drivers/dell_emc/plugins/unity/client.py | 6 +- .../drivers/dell_emc/plugins/unity/connection.py | 4 +- manila/share/drivers/helpers.py | 24 ++++++ .../netapp/dataontap/cluster_mode/lib_base.py | 38 +++++++-- manila/share/drivers/service_instance.py | 13 ++- manila/share/manager.py | 8 +- .../dell_emc/plugins/unity/fake_exceptions.py | 4 + .../drivers/dell_emc/plugins/unity/test_client.py | 7 ++ .../netapp/dataontap/cluster_mode/test_lib_base.py | 68 +++++++++++----- playbooks/legacy/grenade-dsvm-manila/run.yaml | 2 + .../run.yaml | 3 + .../run.yaml | 3 + .../run.yaml | 2 + .../run.yaml | 3 + .../manila-tempest-dsvm-glusterfs-native/run.yaml | 3 + .../run.yaml | 3 + .../manila-tempest-dsvm-glusterfs-nfs/run.yaml | 3 + playbooks/legacy/manila-tempest-dsvm-hdfs/run.yaml | 3 + .../manila-tempest-dsvm-mysql-generic/run.yaml | 2 + .../run.yaml | 3 + .../run.yaml | 2 + .../run.yaml | 3 + .../legacy/manila-tempest-dsvm-scenario/run.yaml | 2 + .../run.yaml | 3 +- .../run.yaml | 3 +- .../run.yaml | 4 +- .../run.yaml | 5 +- .../manila-tempest-minimal-dsvm-dummy/run.yaml | 2 + .../manila-tempest-minimal-dsvm-lvm/run.yaml | 3 + .../run.yaml | 2 +- .../run.yaml | 2 +- ...-because-of-volume-in-use-3fea31c4a58e2f1b.yaml | 4 + ...fail-to-delete-cifs-share-c502a10ae306e506.yaml | 4 + ...r-when-share-extend-error-a0c458204b395994.yaml | 5 ++ ...-1879754-teardown-network-d1887cdf6eb83388.yaml | 5 ++ ...590-fix-svm-scoped-netapp-85b53830135f7558.yaml | 6 ++ 48 files changed, 377 insertions(+), 98 deletions(-) From no-reply at openstack.org Mon Jul 20 10:07:16 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:07:16 -0000 Subject: [release-announce] ceilometer 12.1.1 (stein) Message-ID: We are excited to announce the release of: ceilometer 12.1.1: OpenStack Telemetry This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/ceilometer Download the package from: https://tarballs.openstack.org/ceilometer/ Please report issues through: https://bugs.launchpad.net/ceilometer/+bugs For more details, please see below. Changes in ceilometer 12.1.0..12.1.1 ------------------------------------ 6787bfc0 Revert "Make greande jobs n-v for EM and oldest stable" b471af8a Make greande jobs n-v for EM and oldest stable 41428813 [stable-only] Add confluent-kafka to test-requirements 80bdf6bc Temporary failures should be treated as temporary. 25d057f4 [stable-only] Cap stestr for python 2 Diffstat (except docs and test files) ------------------------------------- ceilometer/compute/pollsters/__init__.py | 1 - test-requirements.txt | 5 ++++- 4 files changed, 4 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 7f7c5608..fc77c03d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8,0 +9,2 @@ os-win>=0.2.3 # Apache-2.0 +confluent-kafka>=0.11.6,<1.4.2; python_version<'3.0' # Apache-2.0 +confluent-kafka>=0.11.6; python_version>='3.0' # Apache-2.0 @@ -17 +19,2 @@ requests-aws>=0.1.4 # BSD License (3 clause) -stestr>=1.0.0 # Apache-2.0 +stestr>=1.0.0,<3.0.0;python_version<'3.0' # Apache-2.0 +stestr>=1.0.0;python_version>='3.0' # Apache-2.0 From no-reply at openstack.org Mon Jul 20 10:08:23 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:08:23 -0000 Subject: [release-announce] zaqar 8.0.1 (stein) Message-ID: We exuberantly announce the release of: zaqar 8.0.1: OpenStack Queuing and Notification Service This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/zaqar Download the package from: https://tarballs.openstack.org/zaqar/ Please report issues through: https://bugs.launchpad.net/zaqar/+bugs For more details, please see below. Changes in zaqar 8.0.0..8.0.1 ----------------------------- a5752f84 Imported Translations from Zanata 82910945 Imported Translations from Zanata 8f814adf Fix Sphinx formating errors edba6faa OpenDev Migration Patch 0638b086 Replace openstack.org git:// URLs with https:// 8cca26a5 Update UPPER_CONSTRAINTS_FILE for stable/stein cbdba206 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .zuul.yaml | 8 +- .../legacy/grenade-devstack-zaqar-base/run.yaml | 12 +- playbooks/legacy/rally-dsvm-zaqar-zaqar/run.yaml | 40 +- .../legacy/tempest-devstack-zaqar-base/run.yaml | 8 +- .../source/locale/de/LC_MESSAGES/releasenotes.po | 90 ---- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 501 -------------------- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 48 -- .../source/locale/id/LC_MESSAGES/releasenotes.po | 517 --------------------- tox.ini | 2 +- zaqar/locale/de/LC_MESSAGES/zaqar.po | 21 +- zaqar/locale/en_GB/LC_MESSAGES/zaqar.po | 84 +++- zaqar/locale/id/LC_MESSAGES/zaqar.po | 14 +- 16 files changed, 139 insertions(+), 1251 deletions(-) From no-reply at openstack.org Mon Jul 20 10:09:39 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:09:39 -0000 Subject: [release-announce] murano 7.1.0 (stein) Message-ID: We are amped to announce the release of: murano 7.1.0: Murano API This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/murano Download the package from: https://tarballs.openstack.org/murano/ Please report issues through: https://bugs.launchpad.net/murano/+bugs For more details, please see below. Changes in murano 7.0.0..7.1.0 ------------------------------ 75a85b0c Remove retired congress 61f8206c Add local bindep.txt 175f05b7 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 43 ++++------------------- bindep.txt | 9 +++++ playbooks/legacy/grenade-devstack-murano/run.yaml | 14 ++++---- tox.ini | 12 +++++++ 5 files changed, 35 insertions(+), 45 deletions(-) From no-reply at openstack.org Mon Jul 20 10:10:03 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:10:03 -0000 Subject: [release-announce] vitrage 4.3.2 (stein) Message-ID: We are pleased to announce the release of: vitrage 4.3.2: The OpenStack RCA Service This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/vitrage Download the package from: https://tarballs.openstack.org/vitrage/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/vitrage For more details, please see below. Changes in vitrage 4.3.1..4.3.2 ------------------------------- c3aaf504 use explicitly public network 432ff9e8 fix image size for tempest f85a842f Bugfix: Consistency query timestamp format is not the same as vertices 96bbd0c3 Fix sampling timestamp format of deduced alarms. e3c90aaf Make sure we use the right tempest e385d952 Bugfix: Overcome mysql failure during Vitrage init. 3efa8dd8 Make the keycloak middleware thread safe 3267bffb Bugfix - If graph is empty is_alive returns false. e1afaf5d Instantiate logger per process. 30bf8fb2 Fix get changes periodic. 7badaab2 OpenDev Migration Patch c994e6aa use the right tempest version for stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 16 ++++---- devstack/plugin.sh | 11 ++++++ playbooks/legacy/vitrage-dsvm-api-py27/run.yaml | 17 +++++++-- playbooks/legacy/vitrage-dsvm-api-py35/run.yaml | 17 +++++++-- .../legacy/vitrage-dsvm-datasources-py27/run.yaml | 17 +++++++-- .../legacy/vitrage-dsvm-datasources-py35/run.yaml | 17 +++++++-- playbooks/legacy/vitrage-dsvm-mock-py27/run.yaml | 17 +++++++-- playbooks/legacy/vitrage-dsvm-mock-py35/run.yaml | 17 +++++++-- playbooks/legacy/vitrage-grenade/run.yaml | 12 +++--- vitrage/api_handler/apis/operational.py | 2 +- .../consistency/consistency_enforcer.py | 14 +++---- vitrage/entity_graph/scheduler.py | 4 +- vitrage/entity_graph/workers.py | 9 ++++- vitrage/evaluator/actions/action_executor.py | 2 +- vitrage/middleware/keycloak.py | 43 +++++++++++----------- vitrage/storage/__init__.py | 8 +++- .../entity_graph/consistency/test_consistency.py | 27 ++++++++------ vitrage/utils/datetime.py | 12 ++++++ 19 files changed, 181 insertions(+), 83 deletions(-) From no-reply at openstack.org Mon Jul 20 10:10:17 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:10:17 -0000 Subject: [release-announce] ironic-python-agent 3.6.4 (stein) Message-ID: We joyfully announce the release of: ironic-python-agent 3.6.4: Ironic Python Agent Ramdisk This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 3.6.4 ^^^^^ Bug Fixes * Fixes an issue where the agent was failing to rescan the device deployed upon before checking uefi contents. This would occur with an iSCSI based deployment, as partition management operations are performed by the conductor, and not locally. Changes in ironic-python-agent 3.6.3..3.6.4 ------------------------------------------- 0819e41 Rescan devices before performing uefi checks Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/extensions/image.py | 28 ++++++++++----- ...scan-before-checking-uefi-64597c937880134d.yaml | 7 ++++ 3 files changed, 59 insertions(+), 16 deletions(-) From no-reply at openstack.org Mon Jul 20 10:11:40 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:11:40 -0000 Subject: [release-announce] ironic-inspector 8.2.5 (stein) Message-ID: We are psyched to announce the release of: ironic-inspector 8.2.5: Hardware introspection for OpenStack Bare Metal This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 8.2.5 ^^^^^ Bug Fixes * Makes the way ironic-inspector creates an ironic client compatible with future (post-Stein) versions of ironicclient. Changes in ironic-inspector 8.2.4..8.2.5 ---------------------------------------- 72510ea [stable-only] Make ironicclient initialization future-proof Diffstat (except docs and test files) ------------------------------------- ironic_inspector/common/ironic.py | 14 ++++++++------ ironic_inspector/test/unit/test_common_ironic.py | 13 ++++++++----- .../notes/stein-ironicclient-d512f9d49ea29257.yaml | 5 +++++ 3 files changed, 21 insertions(+), 11 deletions(-) From no-reply at openstack.org Mon Jul 20 10:11:50 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:11:50 -0000 Subject: [release-announce] kuryr-libnetwork 3.0.1 (stein) Message-ID: We high-spiritedly announce the release of: kuryr-libnetwork 3.0.1: Docker libnetwork driver for OpenStack Neutron This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/kuryr-libnetwork Download the package from: https://tarballs.openstack.org/kuryr-libnetwork/ Please report issues through: https://bugs.launchpad.net/kuryr-libnetwork/+bugs For more details, please see below. Changes in kuryr-libnetwork 3.0.0..3.0.1 ---------------------------------------- edb9a8c Install tox before running tests c8af040 Handle subnet without gateway 4682b2d Update install guide for stein release 496474b OpenDev Migration Patch 137be78 Update UPPER_CONSTRAINTS_FILE for stable/stein 3ccd554 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 10 +++++----- kuryr_libnetwork/controllers.py | 10 ++++++++-- playbooks/kuryr-libnetwork-fullstack-base/run.yaml | 8 ++++---- playbooks/kuryr-libnetwork-install-multinode/run.yaml | 8 ++++---- playbooks/kuryr-libnetwork-install/run.yaml | 8 ++++---- tox.ini | 2 +- 10 files changed, 36 insertions(+), 25 deletions(-) From no-reply at openstack.org Mon Jul 20 10:12:27 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:12:27 -0000 Subject: [release-announce] octavia 4.1.3 (stein) Message-ID: We exuberantly announce the release of: octavia 4.1.3: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. Changes in octavia 4.1.2..4.1.3 ------------------------------- d2bef9a4 Fix batch member create for v1 amphora driver 1ea2fb18 Remove install DIB from Git option 04b3d6a1 Set octavia-grenade job non-voting Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 7 ----- octavia/controller/worker/controller_worker.py | 15 +++++++++-- .../controller/worker/test_controller_worker.py | 4 ++- .../legacy/octavia-v1-dsvm-py3x-scenario/run.yaml | 1 - playbooks/legacy/octavia-v1-dsvm-scenario/run.yaml | 1 - zuul.d/jobs.yaml | 2 -- zuul.d/projects.yaml | 31 +++------------------- 8 files changed, 19 insertions(+), 45 deletions(-) From no-reply at openstack.org Mon Jul 20 10:12:31 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:12:31 -0000 Subject: [release-announce] zun 3.0.1 (stein) Message-ID: We are thrilled to announce the release of: zun 3.0.1: OpenStack Containers service This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/zun Download the package from: https://tarballs.openstack.org/zun/ Please report issues through: https://bugs.launchpad.net/zun/+bugs For more details, please see below. Changes in zun 3.0.0..3.0.1 --------------------------- 30761780 Add the 'containers' field back to capsule 3f4ea79e Replace tox_envlist 'all-plugin' with 'all' 1ce71146 wsproxy: get the underlying socket for exec ce14e2d7 Fix detaching a volume that failed to attach 0336582c Increase exec timeout to 15 seconds 28fb8324 Endpoint type for glanceclient 59b45b34 Fix requirement job 9bfbbd9a Trivial: fix a format issue in api history docs 244cb32f Skip image validation if failed 29481171 Update installation guide for stein release 383a94a3 Fix a TypeError on _get_network_info 9a58ed6f OpenDev Migration Patch c1783224 Fix an AttributeError on rebuild 0056de65 Add middleware generated request_id to context Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 18 ++++++++++++------ zun/api/hooks.py | 3 +++ zun/api/rest_api_version_history.rst | 2 +- zun/common/clients.py | 8 ++++++++ zun/compute/api.py | 6 ++---- zun/compute/manager.py | 7 +++---- zun/objects/container.py | 5 +++++ zun/volume/driver.py | 2 +- zun/websocket/websocketproxy.py | 5 +++++ 17 files changed, 74 insertions(+), 33 deletions(-) From no-reply at openstack.org Mon Jul 20 10:15:46 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:15:46 -0000 Subject: [release-announce] python-zunclient 3.3.1 (stein) Message-ID: We exuberantly announce the release of: python-zunclient 3.3.1: Client Library for Zun This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-zunclient Download the package from: https://pypi.org/project/python-zunclient Please report issues through: https://bugs.launchpad.net/python-zunclient/+bugs For more details, please see below. Changes in python-zunclient 3.3.0..3.3.1 ---------------------------------------- d3cec7f OpenDev Migration Patch fef4d06 Fix command parsing on legacy api version b5f1c47 Replace openstack.org git:// URLs with https:// 217e177 Update UPPER_CONSTRAINTS_FILE for stable/stein a30081b Update UPPER_CONSTRAINTS_FILE for stable/stein 751663a Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 4 ++-- playbooks/zunclient-devstack-docker-sql/run.yaml | 8 ++++---- tox.ini | 4 ++-- zunclient/common/utils.py | 2 ++ 5 files changed, 12 insertions(+), 9 deletions(-) From no-reply at openstack.org Mon Jul 20 10:15:48 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:15:48 -0000 Subject: [release-announce] kuryr-kubernetes 1.0.1 (stein) Message-ID: We are psyched to announce the release of: kuryr-kubernetes 1.0.1: Kubernetes integration with OpenStack networking This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/kuryr-kubernetes Download the package from: https://tarballs.openstack.org/kuryr-kubernetes/ Please report issues through: https://bugs.launchpad.net/kuryr-kubernetes/+bugs For more details, please see below. 1.0.1 ^^^^^ New Features * Added a new driver for handling network policy (https://kubernetes.io/docs/concepts/services-networking/network- policies/) support as introduced in this blueprint (https://blueprints.launchpad.net/openstack/?searchtext=k8s-network- policies) . In order to enable it the following configuration must be followed: [kubernetes] enabled_handlers=vif,lb,lbaasspec,namespace,pod_label,policy,kuryrnetpolicy pod_subnets_driver=namespace pod_security_groups_driver=policy Changes in kuryr-kubernetes 1.0.0..1.0.1 ---------------------------------------- cb0ff6c Remove dragonflow 38688f8 Remove downloading amphora image 81067ea Delete Kuryr Net CRD in case of k8s exception 2a58fa8 Fix fail to recreate namespace when previous KuryrNet CRD is not deleted 851d63c Raise right exception in case Kubernetes respond with not found 86a331c Support None from Octavia get_api_major_version() 64567e1 Fix adding pods with host networking to svc in L2 mode 5542c6d Fix network pool deletion method 6db30e5 Fix Pod creation do not triggers affected SVC SG update 8c018df Fix CRD update on SG rule creation 53ffeb9 Ensure Pod SG is updated on podSelector of NP spec update 1c2503a Fix ingress/egress of UDP traffic on allow to/from everywhere Policy dd562e6 OpenDev Migration Patch 362947f Add NP release note c90243a Fix conflict exceptions handling in LB creation f311e2b NP: Delete default egress rules 060b841 NP: Create allow-all SG and add it to pod SG's 7e4b662 Pin coredns container image to 1.4.0 tag d193767 Dropping the py35 testing a2ac570 Ensure port_range_min is optional 7d03fb1 Ensure port_range_min is optional 1ab83dd Add support for policyTypes at Network Policies 2a9f5fd Fix conflict exceptions handling in LB creation 559b785 Pin coredns container image to 1.4.0 tag b653be4 Add support for policyTypes at Network Policies ae1d1dd Fix LBaaS SG rules update 69a02f6 NP: Create allow-all SG and add it to pod SG's 591d8bc Enable tox to run inside containers b35b087 Switch to CentOS Amphora 49ca932 Add missing ws separator between words d29e150 NP: Delete default egress rules e4619d4 Update UPPER_CONSTRAINTS_FILE for stable/stein 4a3b23d Update master for stable/stein 80a603e Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .zuul.d/base.yaml | 9 ++-- .zuul.d/multinode.yaml | 16 +++--- .zuul.d/octavia.yaml | 10 ++-- .zuul.d/project.yaml | 1 - .zuul.d/sdn.yaml | 33 +----------- cni.Dockerfile | 2 +- cni_py3.Dockerfile | 2 +- controller.Dockerfile | 2 +- controller_py3.Dockerfile | 2 +- devstack/plugin.sh | 24 +++++++-- kuryr_kubernetes/controller/drivers/lbaasv2.py | 38 ++++++++++---- .../controller/drivers/network_policy.py | 59 ++++++++++++++++++++-- .../drivers/network_policy_security_groups.py | 10 ++-- kuryr_kubernetes/controller/drivers/utils.py | 17 ++++--- kuryr_kubernetes/controller/drivers/vif_pool.py | 4 +- kuryr_kubernetes/controller/handlers/lbaas.py | 47 +++++------------ kuryr_kubernetes/controller/handlers/namespace.py | 48 +++++++++++++----- kuryr_kubernetes/controller/handlers/pod_label.py | 2 +- kuryr_kubernetes/controller/handlers/vif.py | 5 +- kuryr_kubernetes/k8s_client.py | 5 +- .../unit/controller/drivers/test_network_policy.py | 50 +++++++++++++++--- .../drivers/test_network_policy_security_groups.py | 37 ++++++++++++++ .../unit/controller/handlers/test_namespace.py | 19 ++++++- kuryr_kubernetes/utils.py | 28 ++++++++++ playbooks/get_amphora_tarball.yaml | 4 +- .../network-policy-support-5807fcbc27a890ad.yaml | 13 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 +++ setup.cfg | 2 +- tox.ini | 5 +- 34 files changed, 397 insertions(+), 166 deletions(-) From no-reply at openstack.org Mon Jul 20 10:16:20 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:16:20 -0000 Subject: [release-announce] sahara-plugin-mapr 1.0.2 (stein) Message-ID: We joyfully announce the release of: sahara-plugin-mapr 1.0.2: Mapr Plugin for Sahara Project This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/sahara-plugin-mapr Download the package from: https://tarballs.openstack.org/sahara-plugin-mapr/ Please report issues through: https://storyboard.openstack.org/#!/project/1103 For more details, please see below. Changes in sahara-plugin-mapr 1.0.1..1.0.2 ------------------------------------------ f58087b Imported Translations from Zanata 24e39c2 Fixing image creation Diffstat (except docs and test files) ------------------------------------- .../locale/en_GB/LC_MESSAGES/sahara_plugin_mapr.po | 217 +++++++++++++++++++++ .../mapr/resources/images/centos/configure_hue | 4 +- .../plugins/mapr/resources/images/image.yaml | 1 - 3 files changed, 219 insertions(+), 3 deletions(-) From no-reply at openstack.org Mon Jul 20 10:16:49 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:16:49 -0000 Subject: [release-announce] solum 6.0.1 (stein) Message-ID: We exuberantly announce the release of: solum 6.0.1: Application Lifecycle Management for OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/solum Download the package from: https://tarballs.openstack.org/solum/ Please report issues through: https://bugs.launchpad.net/solum/+bugs For more details, please see below. Changes in solum 6.0.0..6.0.1 ----------------------------- c9d7760 Fix string argument without an encoding error c4ce6a2 OpenDev Migration Patch 8ed48d5 Replace openstack.org git:// URLs with https:// ae9dadf Update UPPER_CONSTRAINTS_FILE for stable/stein 5e0bba4 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 14 ++++++++------ devstack/README.rst | 2 +- devstack/devstack-provenance | 22 +++++++++++----------- devstack/local.conf | 6 +++--- solum/api/handlers/plan_handler.py | 3 ++- tox.ini | 6 +++--- 7 files changed, 30 insertions(+), 26 deletions(-) From no-reply at openstack.org Mon Jul 20 10:17:32 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:17:32 -0000 Subject: [release-announce] sahara-dashboard 10.0.2 (stein) Message-ID: We are jazzed to announce the release of: sahara-dashboard 10.0.2: Sahara Management Dashboard This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/sahara-dashboard Download the package from: https://tarballs.openstack.org/sahara-dashboard/ Please report issues through: https://bugs.launchpad.net/sahara/+bugs For more details, please see below. Changes in sahara-dashboard 10.0.1..10.0.2 ------------------------------------------ a63c7b4 Imported Translations from Zanata 9a6fbe4 Fix (lower) requirements (sync with horizon constraints) Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 7 ++-- requirements.txt | 2 +- .../locale/en_GB/LC_MESSAGES/django.po | 41 ++++++++++++++++++++-- 4 files changed, 46 insertions(+), 7 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8a26dca..d4ce256 100644 --- a/requirements.txt +++ b/requirements.txt @@ -17 +17 @@ pytz>=2013.6 # MIT -horizon>=14.0.0.0b3 # Apache-2.0 +horizon>=14.0.0,<16.0.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 20 10:19:22 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:19:22 -0000 Subject: [release-announce] python-octaviaclient 1.8.2 (stein) Message-ID: We joyfully announce the release of: python-octaviaclient 1.8.2: Octavia client for OpenStack Load Balancing This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- octaviaclient For more details, please see below. Changes in python-octaviaclient 1.8.1..1.8.2 -------------------------------------------- c9069d5 Fix long CLI error messages Diffstat (except docs and test files) ------------------------------------- octaviaclient/osc/v2/constants.py | 8 +++ octaviaclient/osc/v2/listener.py | 5 ++ octaviaclient/osc/v2/member.py | 12 ++-- octaviaclient/osc/v2/validate.py | 38 +++++++++++ 6 files changed, 139 insertions(+), 8 deletions(-) From no-reply at openstack.org Mon Jul 20 10:26:19 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:26:19 -0000 Subject: [release-announce] ironic 12.1.5 (stein) Message-ID: We jubilantly announce the release of: ironic 12.1.5: OpenStack Bare Metal Provisioning This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 12.1.5 ^^^^^^ New Features ************ * Adds a new "[ipmi]debug" option that allows users to explicitly turn IPMI command debugging on, as opposed to relying upon the system debug setting "[DEFAULT]debug". Users wishing to continue to log this output should set "[ipmi]debug" to "True" in their ironic.conf. Upgrade Notes ************* * Debug logging control has been moved to the "[ipmi]debug" configuration setting as opposed to the "conductor" "[DEFAULT]debug" setting as the existing "ipmitool" output can be extremely misleading for users. Operators who wish to continue to log "ipmitool" verbose output in their logs should explicitly set the "[ipmi]debug" command to True. Bug Fixes ********* * Fixes an issue with the agent client code where checks of the agent command status had no logic to prevent an intermittent or transient connection failure from causing the entire operation to fail. * Fixes 'Invalid parameter value for SpanLength' when configuring RAID using Python 3. This passed incorrect data type to iDRAC, e.g., instead of *2* it passed *2.0*. See story 2004265 (https://storyboard.openstack.org/#!/story/2004265). * Fixes vague node "last_error" field reporting upon deploy step failure by providing the exception error message in addition to the step that failed. * Fixed a bug where rebooting a node managed by the "idrac" hardware type when using the WS-MAN power interface sometimes fails with a "The command failed to set RequestedState" error. See bug 2007487 (https://storyboard.openstack.org/#!/story/2007487) for details. Changes in ironic 12.1.4..12.1.5 -------------------------------- d21b82b42 Workaround for uefi job with ubuntu bionic 7d0366447 Fix issue where server fails to reboot 722d9d452 Fix SpanLength calculation for DRAC RAID configuration ac6de2b25 Make deploy step failure logging indicate the error d1aa76d0c Move ipmi logging to a separate option 9c116c4ef Retry agent get_command_status upon failures Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 17 +++-- ironic/conductor/manager.py | 5 +- ironic/conf/ipmi.py | 6 ++ ironic/drivers/modules/agent_client.py | 15 +++- ironic/drivers/modules/drac/power.py | 80 +++++++++++++++++----- ironic/drivers/modules/drac/raid.py | 2 +- ironic/drivers/modules/ipmitool.py | 2 +- .../unit/drivers/modules/test_agent_client.py | 11 +++ ...gent-command-status-retry-f9b6f53a823c6b01.yaml | 6 ++ .../notes/bug-2004265-cd9056868295f374.yaml | 7 ++ .../notes/deploy-step-error-d343e8cb7d1b2305.yaml | 6 ++ .../idrac-fix-reboot-failure-c740e765ff41bcf0.yaml | 7 ++ .../notes/ipmi-debug-1c7e090c6cc71903.yaml | 13 ++++ zuul.d/ironic-jobs.yaml | 1 - 17 files changed, 219 insertions(+), 34 deletions(-) From no-reply at openstack.org Mon Jul 20 10:33:53 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:33:53 -0000 Subject: [release-announce] neutron-lbaas-dashboard 6.0.1 (stein) Message-ID: We are pumped to announce the release of: neutron-lbaas-dashboard 6.0.1: Horizon panels for Neutron LBaaS This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/neutron-lbaas-dashboard Download the package from: https://pypi.org/project/neutron-lbaas-dashboard Please report issues through: https://storyboard.openstack.org/#!/project/907 For more details, please see below. 6.0.1 ^^^^^ Bug Fixes * Fixed an issue where TERMINATED_HTTPS listener type was greyed out. Changes in neutron-lbaas-dashboard 6.0.0..6.0.1 ----------------------------------------------- fdc34d2 Fix auth url for Barbican client 87d0c15 Imported Translations from Zanata 82000e6 OpenDev Migration Patch ae51e99 Update UPPER_CONSTRAINTS_FILE for stable/stein 87ffeb5 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- neutron_lbaas_dashboard/api/rest/barbican.py | 19 +++++-------------- .../locale/de/LC_MESSAGES/django.po | 14 +++++++------- .../locale/id/LC_MESSAGES/django.po | 14 +++++++------- .../locale/ko_KR/LC_MESSAGES/django.po | 12 ++++++------ .../locale/tr_TR/LC_MESSAGES/django.po | 19 ------------------- ...fix-auth-url-barbican-client-87530b5626810544.yaml | 3 +++ tox.ini | 4 ++-- 8 files changed, 32 insertions(+), 56 deletions(-) From no-reply at openstack.org Mon Jul 20 10:37:08 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 10:37:08 -0000 Subject: [release-announce] cinder 14.2.1 (stein) Message-ID: We high-spiritedly announce the release of: cinder 14.2.1: OpenStack Block Storage This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 14.2.1 ^^^^^^ Bug Fixes * Solidfire fix extend volume with qos-Scaling to honor the increased size with increased iops on the extended volume. * Fix HPE 3PAR driver issue where volumes that were live migrated to it would end up being inaccessible. We would no longer be able to use the volume for any operation, such as attach, detach, delete, snapshot, etc. (bug 1697422) * Fix the HPE 3PAR driver's attempt to rename the backend volume after it was migrated. If the original volume resides on the same 3PAR backend then the pre and post migration volume names are swapped. Otherwise, the newly migrated volume is renamed to match the original name. (bug 1858119) Changes in cinder 14.2.0..14.2.1 -------------------------------- ce9077467 3PAR: Fix live migration 097eb5601 3PAR - Fix renaming volume after migration 70ab1b359 PowerMax Driver - Snapshot restore payload fix 6bcb6fea7 SF: Handle qos values on extend volume Diffstat (except docs and test files) ------------------------------------- .../dell_emc/powermax/test_powermax_rest.py | 1 - .../volume/drivers/solidfire/test_solidfire.py | 84 ++++- cinder/volume/drivers/dell_emc/powermax/rest.py | 1 - cinder/volume/drivers/hpe/hpe_3par_common.py | 282 ++++++++++---- cinder/volume/drivers/hpe/hpe_3par_iscsi.py | 8 +- cinder/volume/drivers/solidfire.py | 15 +- .../notes/bug-1782588-7e058b379da95309.yaml | 5 + .../fix-3par-live-migration-0065bd2626fdb4a1.yaml | 7 + .../fix-3par-migrate-rename-662d984e070a1de2.yaml | 8 + 10 files changed, 623 insertions(+), 204 deletions(-) From no-reply at openstack.org Mon Jul 20 14:09:48 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 20 Jul 2020 14:09:48 -0000 Subject: [release-announce] octavia-lib 2.1.0 (victoria) Message-ID: We jubilantly announce the release of: octavia-lib 2.1.0: A library to support Octavia provider drivers. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/octavia-lib Download the package from: https://pypi.org/project/octavia-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia-lib For more details, please see below. 2.1.0 ^^^^^ New Features * Added a "NotFound" exception class that provider drivers can raise when a resource cannot be found. Changes in octavia-lib 2.0.0..2.1.0 ----------------------------------- ec7195d Add missing assertIsInstance checks b6d20c0 Switch to victoria jobs 684e0b9 Add NotFound exception class bf1824a Update test-requirements to match Octavia repo 0ce11e8 Add py38 classifier 1e04120 Add SCTP protocol and health-monitor constants ab0beac Define the protocols supported by listener and pool respectively 51b25a5 Add releasenotes link to README 2f59a4b Switch to newer openstackdocstheme and reno versions b993b5f Fix hacking min version to 3.0.1 4df7006 Update master for stable/ussuri Diffstat (except docs and test files) ------------------------------------- README.rst | 1 + lower-constraints.txt | 1 - octavia_lib/api/drivers/data_models.py | 4 ++-- octavia_lib/api/drivers/driver_lib.py | 2 +- octavia_lib/api/drivers/exceptions.py | 27 ++++++++++++++++++++++ octavia_lib/api/drivers/provider_base.py | 3 ++- octavia_lib/common/constants.py | 13 +++++++++-- octavia_lib/hacking/checks.py | 4 ++-- .../add-not-found-exception-7f9d188cd22f69e1.yaml | 5 ++++ releasenotes/source/conf.py | 6 ++--- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 +++++ setup.cfg | 1 + test-requirements.txt | 6 ++--- zuul.d/projects.yaml | 2 +- 18 files changed, 86 insertions(+), 32 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index f417486..3fa0310 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=3.0,<3.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -7 +7 @@ hacking>=3.0,<3.1.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0 # Apache-2.0 @@ -10 +10 @@ doc8>=0.6.0 # Apache-2.0 -pylint==1.9.2 # GPLv2 +pylint>=2.2.0 # GPLv2 From no-reply at openstack.org Tue Jul 21 16:38:56 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 21 Jul 2020 16:38:56 -0000 Subject: [release-announce] tooz 2.7.0 (victoria) Message-ID: We are delighted to announce the release of: tooz 2.7.0: Coordination library for distributed systems. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz Please report issues through: https://bugs.launchpad.net/python-tooz/+bugs For more details, please see below. 2.7.0 ^^^^^ New Features ************ * "HashRing" now accepts a new argument "hash_function", allowing using a different hash function. Bug Fixes ********* * Fixes AttributeError in the "mysql" driver with PyMySQL 0.10.0. Changes in tooz 2.6.0..2.7.0 ---------------------------- d59b283 Fix breakage with PyMySQL 0.10.0 f5d3248 hashring: allow choosing hash function 5ac72fc Remove six library Diffstat (except docs and test files) ------------------------------------- examples/group_membership.py | 4 +--- examples/group_membership_watch.py | 4 +--- examples/leader_election.py | 4 +--- .../notes/hashring-algo-8a279397b8ff8a6a.yaml | 5 +++++ .../notes/mysql-0.10.0-7660f75a1c57a920.yaml | 4 ++++ requirements.txt | 1 - tooz/coordination.py | 11 +++++---- tooz/drivers/etcd.py | 4 ++-- tooz/drivers/etcd3.py | 3 +-- tooz/drivers/etcd3gw.py | 5 +++-- tooz/drivers/file.py | 11 ++++----- tooz/drivers/ipc.py | 5 ++--- tooz/drivers/memcached.py | 9 ++++---- tooz/drivers/mysql.py | 18 +++++++-------- tooz/drivers/pgsql.py | 6 +---- tooz/drivers/redis.py | 23 +++++++++---------- tooz/drivers/zookeeper.py | 8 +++---- tooz/hashring.py | 26 +++++++++++++++------- tooz/locking.py | 5 +---- tooz/partitioner.py | 4 ++-- tooz/utils.py | 9 ++++---- 26 files changed, 97 insertions(+), 100 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c1f072c..a448b67 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +5,0 @@ stevedore>=1.16.0 # Apache-2.0 -six>=1.9.0 # MIT From no-reply at openstack.org Wed Jul 22 13:08:52 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 22 Jul 2020 13:08:52 -0000 Subject: [release-announce] octavia-lib 2.1.1 (victoria) Message-ID: We exuberantly announce the release of: octavia-lib 2.1.1: A library to support Octavia provider drivers. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/octavia-lib Download the package from: https://pypi.org/project/octavia-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia-lib For more details, please see below. Changes in octavia-lib 2.1.0..2.1.1 ----------------------------------- 397653c Fix NotFound exception in docstring Diffstat (except docs and test files) ------------------------------------- octavia_lib/api/drivers/provider_base.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) From no-reply at openstack.org Wed Jul 22 13:12:09 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 22 Jul 2020 13:12:09 -0000 Subject: [release-announce] python-novaclient 17.2.0 (victoria) Message-ID: We are jazzed to announce the release of: python-novaclient 17.2.0: Client library for OpenStack Compute API This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/python-novaclient Download the package from: https://pypi.org/project/python-novaclient Please report issues through: https://bugs.launchpad.net/python-novaclient/+bugs For more details, please see below. Changes in python-novaclient 17.1.0..17.2.0 ------------------------------------------- 13221998 migrate testing to ubuntu focal b7ae8c75 Switch legacy Zuul jobs to native Zuul v3 jobs 109d41e7 use stevedore to load extensions Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 17 ++--- bindep.txt | 2 +- lower-constraints.txt | 10 +-- novaclient/client.py | 15 ++-- .../legacy/novaclient-dsvm-functional/post.yaml | 80 ---------------------- .../legacy/novaclient-dsvm-functional/run.yaml | 54 --------------- playbooks/post.yaml | 6 ++ playbooks/python-novaclient-functional.yaml | 14 ++++ requirements.txt | 1 + roles/get-os-environment/defaults/main.yaml | 2 + roles/get-os-environment/tasks/main.yaml | 12 ++++ tox.ini | 2 +- 16 files changed, 123 insertions(+), 225 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 682f6b94..3f6c9280 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ simplejson>=3.5.1 # MIT +stevedore>=2.0.1 # Apache-2.0 From no-reply at openstack.org Wed Jul 22 13:18:00 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 22 Jul 2020 13:18:00 -0000 Subject: [release-announce] manila-tempest-plugin 1.1.0 (victoria) Message-ID: We are amped to announce the release of: manila-tempest-plugin 1.1.0: Tempest plugin manila-tempest-plugin This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/manila-tempest-plugin Download the package from: https://tarballs.openstack.org/manila-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. Changes in manila-tempest-plugin 1.0.0..1.1.0 --------------------------------------------- 5af7cb4 Verify applying a new cephx rule after a previous failure 170cc45 [ci] Re-enable scenario tests in the LVM job 517a7a2 Fix ReplicaQuotasNegativeTest 3854458 Fix usage of tenant_id in tests b28c6cd Add native zuulv3 job for cephfs nfs 2ed5826 Enable snapshot tests in the CephFS job 8ccba23 [ci] Temporarily disable scenario tests 4a0b732 Seek network resources from tempest 1753a59 Add security service to share networks af44826 Stop forcing creation of "isolated" credentials 8f333bd [ci] Use dynamic credential provider in DHSS=False tests f8894b6 Skip snapshot cloning if there is no capability 3c20c06 Add CephFS Native scenario tests 8e68e44 Preparation for support scenario tests on CephFS Native 62ff787 Add native zuulv3 job for cephfs native 1727f7a Cleanup access rule test skip conditions 0e53a7f [Negative] Test different tenants cannot use same cephx id acc536e Zuulv3 generic driver testing 0e78026 Fix hacking min version to 3.0.1 304abed Test different users in same tenant can use same cephx id 5e0152b Fix pep8 issues f888d7f Fix dict.values usage 228893d Skip multi availability zones test when there is a single az 7a8f5ef Add native zuulv3 job for container 4484d1a Add native zuulv3 job for lvm 696a057 TrivialFix: Remove unnecessary import 5dd6301 Add native zuulv3 job for zfsonlinux 13b7469 Rename "_get_ip_server_ip" method to "_get_server_ip" 7636a1f Specifies the appropriate ip address in case of multi-networking Diffstat (except docs and test files) ------------------------------------- .../services/share/json/shares_client.py | 5 +- .../test_snapshot_export_locations_negative.py | 22 +- .../api/test_access_rules_metadata_negative.py | 27 +- .../api/test_shares_from_snapshot_across_pools.py | 6 +- test-requirements.txt | 2 +- zuul.d/manila-tempest-jobs.yaml | 312 +++++++++++++ .zuul.yaml => zuul.d/project.yaml | 22 +- 35 files changed, 1273 insertions(+), 747 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index e3eead6..f230fa9 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=3.0,<3.1.0;python_version>'3' # Apache-2.0 +hacking>=3.0.1,<3.1.0;python_version>'3' # Apache-2.0 From no-reply at openstack.org Wed Jul 22 13:56:47 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 22 Jul 2020 13:56:47 -0000 Subject: [release-announce] hacking 3.2.0 Message-ID: We contentedly announce the release of: hacking 3.2.0: OpenStack Hacking Guideline Enforcement The source is available from: https://opendev.org/openstack/hacking Download the package from: https://pypi.org/project/hacking For more details, please see below. Changes in hacking 3.1.0..3.2.0 ------------------------------- 93e6cd2 migrate testing to ubuntu focal 46c876f drop mock from lower-constraints and requirements 3c289f8 Add in-tree upper-constraints for py35 job ce8d260 Revert "Remove py35 job" 4d84a3b Switch to newer openstackdocstheme and reno versions 3735d2d Add PDF documentation build 7d49633 Remove py35 job ef8c7b9 Switch testing to Victoria testing runtime Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- lower-constraints.txt | 7 +++---- py35-upper-constraints.txt | 1 + releasenotes/source/conf.py | 13 +++++-------- requirements.txt | 2 +- setup.cfg | 1 + test-requirements.txt | 1 - tox.ini | 16 ++++++++++++++-- 10 files changed, 34 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2883078..8367022 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -flake8<3.9.0,>=3.6.0 # MIT +flake8<3.9.0,>=3.8.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 3028635..203cea2 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +5,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0.0 # BSD From no-reply at openstack.org Wed Jul 22 14:13:33 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 22 Jul 2020 14:13:33 -0000 Subject: [release-announce] ansible-config_template 1.1.1 Message-ID: We jubilantly announce the release of: ansible-config_template 1.1.1: Config Template plugin for Ansible The source is available from: https://opendev.org/openstack/ansible-config_template Download the package from: https://tarballs.openstack.org/ansible-config_template/ For more details, please see below. Changes in ansible-config_template 1.1.0..1.1.1 ----------------------------------------------- 4ed672e Update config_template to use the builtin _get_remote_user function 4e6d993 Make code compatible with older ansible versions 802cafb Modernise tox.ini and run OSA metal jobs in CI 170e46b Templar: use available_variables 91878d7 Updated from OpenStack Ansible Tests d7bf68f Stop to use the __future__ module. 453a759 Add publish-to-pypi template which publishes tarball 9d2ea0d Updated from OpenStack Ansible Tests 436042e Update docstheme for style Diffstat (except docs and test files) ------------------------------------- action/config_template.py | 39 ++++++++++++++++++++++----------------- bindep.txt | 1 + releasenotes/source/conf.py | 2 +- tox.ini | 35 ++++++++--------------------------- zuul.d/project.yaml | 4 ++-- 7 files changed, 38 insertions(+), 51 deletions(-) From no-reply at openstack.org Wed Jul 22 14:24:36 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 22 Jul 2020 14:24:36 -0000 Subject: [release-announce] validations-common 1.1.0 Message-ID: We are glad to announce the release of: validations-common 1.1.0: A common Ansible libraries and plugins for the validations framework The source is available from: https://opendev.org/openstack/validations-common Download the package from: https://tarballs.openstack.org/validations-common/ For more details, please see below. Changes in validations-common 1.0.0..1.1.0 ------------------------------------------ b49cc0c Revert "Add TripleO Jobs back" c25c009 Output duration not only on failed and skipped states 1403d41 Log output results instead of print on the console f70ad1a Add validation cli script 29dda46 drop mock from lower-constraints 3e88681 Stop to use the __future__ module. 7628adc Avoid broken dogpile.cache 686e751 Remove the pytest import. efc61fd Update the tox minversion parameter. 07d9c96 Move unit tests execution to stestr 0f35ac3 Bump default tox env from py37 to py38 a7835fe Add py38 package metadata 676a5c9 Add check-disk-space-pre-upgrade playbooks 327e7a9 Add Python3 victoria unit tests 4f0eb75 Update master for stable/ussuri 0f88309 Make mock import python 2.7 compatible Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .stestr.conf | 3 + .testr.conf | 7 - lower-constraints.txt | 2 +- molecule-requirements.txt | 2 + releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 + requirements.txt | 1 + setup.cfg | 1 + test-requirements.txt | 2 +- tox.ini | 8 +- .../callback_plugins/validation_json.py | 15 +- .../callback_plugins/validation_output.py | 2 - validations_common/library/__init__.py | 0 .../playbooks/check-disk-space-pre-upgrade.yaml | 18 ++ validations_common/validation.py | 187 +++++++++++++++++++++ zuul.d/layout.yaml | 24 +-- 20 files changed, 246 insertions(+), 50 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index 034ea3a..c55af13 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -4,0 +5,2 @@ docker +# https://github.com/sqlalchemy/dogpile.cache/issues/178 +dogpile.cache>=0.6.5,<0.9.1 # MIT diff --git a/requirements.txt b/requirements.txt index dd5b2c6..56b58c8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,0 +7 @@ PyYAML>=3.12 # MIT +PrettyTable>=0.7.2 diff --git a/test-requirements.txt b/test-requirements.txt index 2066973..0b513ef 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ oslotest>=3.2.0 # Apache-2.0 -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=3.0.1 # Apache-2.0 From no-reply at openstack.org Wed Jul 22 14:29:36 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 22 Jul 2020 14:29:36 -0000 Subject: [release-announce] validations-libs 1.0.2 Message-ID: We are pleased to announce the release of: validations-libs 1.0.2: A common library for the validations framework The source is available from: https://opendev.org/openstack/validations-libs Download the package from: https://tarballs.openstack.org/validations-libs/ For more details, please see below. Changes in validations-libs 1.0.0..1.0.2 ---------------------------------------- 21a722a Show history by play and add get status action c317b78 Change zuul config for functional CI execution de03576 Remove playbook param from run_validation a842d33 Add base_dir param to override the constants value easily c1d9cb9 Filter get_all_log_file by extension 373bdb0 Catch value error when extract log info from log name 5804a0f Switch to newer openstackdocstheme and reno versions b5cc8df Handle multiple validation logs results 7b14f9c Add API Documentation structure 1477887 Avoid None value when missing data in ansible log 91414c2 Fix title. ade5d57 Raise exception if no validation is found d3e0515 Update the minversion parameter. 6e1ab6f Add asynchronous option to validation libs 3cc5263 Move unit tests execution to stestr 1ee6fa4 Bump default tox env from py37 to py38 6f26733 Add py38 package metadata aeeca6d Add Python3 victoria unit tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + .stestr.conf | 3 + .testr.conf | 7 -- .zuul.yaml | 27 ++++++ README.rst | 1 + lower-constraints.txt | 5 +- .../legacy/validations-dsvm-functional/post.yaml | 96 ++++++++++++++++++++++ .../legacy/validations-dsvm-functional/run.yaml | 37 +++++++++ .../legacy/validations-dsvm-functional/setup.yaml | 60 ++++++++++++++ .../validations-dsvm-functional/validations.yaml | 23 ++++++ setup.cfg | 1 + test-requirements.txt | 5 +- tox.ini | 29 ++++++- validations_libs/ansible.py | 33 ++++---- validations_libs/validation_actions.py | 81 ++++++++++++------ validations_libs/validation_logs.py | 73 ++++++++++++---- zuul.d/layout.yaml | 29 ------- 29 files changed, 850 insertions(+), 114 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 20d9c64..eaa8652 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +4,0 @@ -openstackdocstheme>=1.20.0 # Apache-2.0 @@ -10,3 +9 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx>=1.8.0,<2.0.0;python_version=='2.7' # BSD -sphinx>=1.8.0,!=2.1.0;python_version>='3.4' # BSD -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=1.0.0 # Apache-2.0 From no-reply at openstack.org Thu Jul 23 09:11:51 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 23 Jul 2020 09:11:51 -0000 Subject: [release-announce] oslo.config 8.3.0 (victoria) Message-ID: We are gleeful to announce the release of: oslo.config 8.3.0: Oslo Configuration API This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. Changes in oslo.config 8.2.0..8.3.0 ----------------------------------- 392922a drop use of pkg_resources da866fc Align contributing doc with oslo's policy Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 5 +++++ lower-constraints.txt | 1 + oslo_config/generator.py | 13 +++++++++---- oslo_config/validator.py | 10 ++++++++-- requirements.txt | 1 + 5 files changed, 24 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 70a27d7..9c1d5c3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ requests>=2.18.0 # Apache-2.0 +importlib_metadata>=1.7.0;python_version<'3.8' # Apache-2.0 From no-reply at openstack.org Thu Jul 23 09:15:11 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 23 Jul 2020 09:15:11 -0000 Subject: [release-announce] openstack-doc-tools 3.2.0 Message-ID: We are glad to announce the release of: openstack-doc-tools 3.2.0: Tools for OpenStack Documentation The source is available from: https://opendev.org/openstack/openstack-doc-tools Download the package from: https://tarballs.openstack.org/openstack-doc-tools/ For more details, please see below. Changes in openstack-doc-tools 3.1.0..3.2.0 ------------------------------------------- c2ecc30 Remove demjson from requirements 8cca447 Update sitemap Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- lower-constraints.txt | 1 - requirements.txt | 1 - sitemap/generator/spiders/sitemap_file.py | 31 +++++++++++++++++++++---------- test/test_sitemap_file.py | 2 +- 5 files changed, 23 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 157b9ba..4ee2b52 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +9,0 @@ sphinx>=2.0.0,!=2.1.0 # BSD -demjson>=2.2.2 # GLGPLv3+ From no-reply at openstack.org Thu Jul 23 09:17:19 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 23 Jul 2020 09:17:19 -0000 Subject: [release-announce] oslo.utils 4.3.0 (victoria) Message-ID: We are pleased to announce the release of: oslo.utils 4.3.0: Oslo Utility library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 4.2.2..4.3.0 ---------------------------------- c804ba7 versionutils: switch from pkg_resources to packaging 676d534 Align contributing doc with oslo's policy Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 5 +++++ lower-constraints.txt | 1 + oslo_utils/versionutils.py | 13 +++++-------- requirements.txt | 1 + 4 files changed, 12 insertions(+), 8 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 30aa6a8..22d2b78 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18,0 +19 @@ pyparsing>=2.1.0 # MIT +packaging>=20.4 # BSD From no-reply at openstack.org Thu Jul 23 09:19:12 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 23 Jul 2020 09:19:12 -0000 Subject: [release-announce] osprofiler 3.3.0 (victoria) Message-ID: We high-spiritedly announce the release of: osprofiler 3.3.0: OpenStack Profiler Library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler Please report issues through: https://bugs.launchpad.net/osprofiler/+bugs For more details, please see below. Changes in osprofiler 3.2.2..3.3.0 ---------------------------------- e8dd381 switch to importlib.metadata to find package version Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 + osprofiler/__init__.py | 9 +++++++-- requirements.txt | 1 + 3 files changed, 9 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2239282..7719bc4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,0 +9 @@ WebOb>=1.7.1 # MIT +importlib_metadata>=1.7.0;python_version<'3.8' # Apache-2.0 From no-reply at openstack.org Thu Jul 23 09:19:59 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 23 Jul 2020 09:19:59 -0000 Subject: [release-announce] oslo.vmware 3.6.0 (victoria) Message-ID: We are pumped to announce the release of: oslo.vmware 3.6.0: Oslo VMware library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.vmware Download the package from: https://pypi.org/project/oslo.vmware Please report issues through: https://bugs.launchpad.net/oslo.vmware/+bugs For more details, please see below. 3.6.0 ^^^^^ Upgrade Notes * Code accessing the "cookiejar" must use "session.client.cookiejar" instead of the previous "session.client.options.transport.cookiejar", because with this spec (https://specs.openstack.org/openstack/oslo-specs/specs/victoria /oslo-vmware-soap-library-switch.html) we switch the backing SOAP library and different libraries have different locations for their transport and cookiejar objects. Changes in oslo.vmware 3.5.0..3.6.0 ----------------------------------- dc4eb02 Add backend-independent access to cookiejar Diffstat (except docs and test files) ------------------------------------- oslo_vmware/rw_handles.py | 4 +-- oslo_vmware/service.py | 31 +++++++++++++++++----- ...y-switch-cookiejar-access-d7efcc23d0eaee98.yaml | 8 ++++++ 6 files changed, 41 insertions(+), 14 deletions(-) From no-reply at openstack.org Thu Jul 23 09:35:23 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 23 Jul 2020 09:35:23 -0000 Subject: [release-announce] octavia-dashboard 3.1.0 (stein) Message-ID: We are happy to announce the release of: octavia-dashboard 3.1.0: Horizon panels for Octavia This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/octavia-dashboard Download the package from: https://pypi.org/project/octavia-dashboard Please report issues through: https://storyboard.openstack.org/#!/project/909 For more details, please see below. Changes in octavia-dashboard 3.0.1..3.1.0 ----------------------------------------- bea8572 Fix dashboard certificates skipping pkcs12 bundles bceefa8 Add missing fields for HTTPS health monitors 433de45 Imported Translations from Zanata 97c1041 Fix Django version in lower-constraints Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 12 ++--- .../locale/en_GB/LC_MESSAGES/djangojs.po | 55 +++++++++++++++++++++- .../project/lbaasv2/workflow/model.service.js | 19 +++++++- .../project/lbaasv2/workflow/model.service.spec.js | 12 +++-- .../project/lbaasv2/workflow/monitor/monitor.html | 2 +- requirements.txt | 2 +- 7 files changed, 89 insertions(+), 16 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c953f1f..9556630 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -horizon>=14.0.0.0b3 # Apache-2.0 +horizon>=15.0.0 # Apache-2.0 From no-reply at openstack.org Thu Jul 23 09:38:24 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 23 Jul 2020 09:38:24 -0000 Subject: [release-announce] oslo.service 2.3.2 (victoria) Message-ID: We are happy to announce the release of: oslo.service 2.3.2: oslo.service library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. Changes in oslo.service 2.3.1..2.3.2 ------------------------------------ 91d4eee Do not import "oslo.log" in the main module Diffstat (except docs and test files) ------------------------------------- oslo_service/__init__.py | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) From no-reply at openstack.org Thu Jul 23 09:39:42 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 23 Jul 2020 09:39:42 -0000 Subject: [release-announce] cinderlib 2.0.0 (ussuri) Message-ID: We are satisfied to announce the release of: cinderlib 2.0.0: Direct usage of Cinder Block Storage drivers without the services This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/cinderlib Download the package from: https://tarballs.openstack.org/cinderlib/ Please report issues through: https://bugs.launchpad.net/cinderlib/+bugs For more details, please see below. Changes in cinderlib 1.0.0..2.0.0 --------------------------------- d982db6 Fix and improve cross-project functional testing efcec1d RBD: Fix error on disconnect acf4119 Tests: Fix format arg mismatch db57386 Prevent duplicated backend names b6ddbcd Support references in driver configuration a37a931 Improve cinder supported drivers output 3a1ff32 RBD: Ensure rbd_keyring_conf is available 9e17143 RBD: Fix missing root_helper 669235b RBD: Fix containerized detection 01dfcb1 DBMS: Fix db_sync between N and N+1 releases a6ce0fb Stop to use the __future__ module. 3003681 Fix hacking min version to 3.0.1 c0641a1 Switch to newer openstackdocstheme and reno versions 543fe8a Fix rbd attach on python3 186bc1c Cleanup py27 support 330ff41 Update hacking for Python3 2fec756 Pin cinder version 5ef9a57 Switch from mock to unittest.mock cefeef4 DBMS: Fix volume deletion with MySQL 4e4247b NotLocal exception after refresh 3db2b2a Fix CI jobs 154e80d Ussuri contrib docs community goal 2f55c3a Drop use of unittest2 08108b5 Use Python 3 by default and drop Python 2 fbd7a72 Fix configuration options 5a1e313 Fix: add a default value for cinderlib_pool_name cafeb6e Update master for stable/train 6fd1e62 Support passing pool to functional tests 56a2b46 Relax checks on functional stats test Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 18 +- CONTRIBUTING.rst | 23 +- bindep.txt | 3 + cinderlib/__init__.py | 1 - cinderlib/_fake_packages.py | 1 - cinderlib/cinderlib.py | 311 ++++++++-------- cinderlib/nos_brick.py | 30 +- cinderlib/objects.py | 9 +- cinderlib/persistence/__init__.py | 19 - cinderlib/persistence/base.py | 2 - cinderlib/persistence/dbms.py | 17 +- lower-constraints.txt | 9 - playbooks/setup-ceph.yaml | 32 +- playbooks/setup-lvm.yaml | 11 +- .../accept-template-values-e228d065800ac5b5.yaml | 5 + .../notes/backend-same-name-86a06844b57600a0.yaml | 6 + releasenotes/notes/drop-py2-a56fb12674516c67.yaml | 6 + .../fix-mysql-vol-delete-f675778ea150cb9a.yaml | 5 + .../notes/fix-not-local-a8cf22a2092c8a98.yaml | 5 + .../improve-list-drivers-9bd501689d5eeb27.yaml | 6 + .../notes/mysql-db-sync-8a9e50a12bbe724d.yaml | 6 + ...e-containerized-detection-2bd8a2f995215cdd.yaml | 6 + ...missing-file-or-directory-c835abac22f6b32e.yaml | 7 + .../notes/rbd-non-root-ac971f51461d4d6b.yaml | 6 + releasenotes/source/conf.py | 6 +- releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 + requirements.txt | 2 +- setup.cfg | 12 +- setup.py | 9 - test-requirements.txt | 2 +- tox.ini | 50 +-- 56 files changed, 1013 insertions(+), 504 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 522d8c9..afeb1c2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -cinder +cinder>=15.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 9ba0853..3368534 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 From no-reply at openstack.org Thu Jul 23 09:40:13 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 23 Jul 2020 09:40:13 -0000 Subject: [release-announce] neutron 14.3.0 (stein) Message-ID: We are tickled pink to announce the release of: neutron 14.3.0: OpenStack Networking This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 14.3.0 ^^^^^^ New Features * A new configuration option "http_retries" was added. This option allows configuring the number of times the nova or ironic client should retry on a failed HTTP call. * Add new configuration option "igmp_snooping_enable". New option is in "OVS" config section and is used by openvswitch agent. This option is used to enable support for Internet Group Management Protocol (IGMP) in integration bridge. Changes in neutron 14.2.0..14.3.0 --------------------------------- 6fd89dacf3 [stable only] Configure logging in keepalived_state_change 5bba624867 Fix pep8 job 01f4e09753 [DVR] Related routers should be included if are requested 56aa95b88c Revert "Make greande jobs n-v for EM and oldest stable" 5d06db0989 Add config option ``http_retries`` 13f8296d5c Make _ensure_default_security_group method atomic ac6084494a Improve log message when port losts its vlan tag ca11545e06 Avoid empty "vsctl" transactions 6dfc35680f Do not block connection between br-int and br-phys on startup 81dfa48466 Workaround for TCP checksum issue with ovs-dpdk and veth pair 7edfb0ef4a [OVS] Make QoS OVS agent deletion operations more resilient 9313dce459 Make greande jobs n-v for EM and oldest stable 1f1f45d65c No rpc_response_max_timeout in LB-agent ea0b03a19d Add "igmp_snooping_enable" config option for OVS agent 3e7abdf7ac ovsdb monitor: handle modified ports 89fd5ec537 [DVR] Reconfigure re-created physical bridges for dvr routers 6cf718c505 Ensure that stale flows are cleaned from phys_bridges Diffstat (except docs and test files) ------------------------------------- etc/neutron/rootwrap.d/dhcp.filters | 1 + etc/neutron/rootwrap.d/l3.filters | 1 + lower-constraints.txt | 1 + neutron/agent/common/ovs_lib.py | 35 ++++++---- neutron/agent/common/ovsdb_monitor.py | 16 ++++- neutron/agent/l3/keepalived_state_change.py | 2 +- neutron/agent/linux/ethtool.py | 34 ++++++++++ neutron/agent/linux/interface.py | 10 +++ neutron/conf/agent/ovs_conf.py | 11 +++ neutron/conf/common.py | 10 ++- neutron/db/l3_dvrscheduler_db.py | 19 ++++-- neutron/db/securitygroups_db.py | 13 +++- neutron/notifiers/nova.py | 1 + neutron/opts.py | 2 + .../linuxbridge/agent/linuxbridge_neutron_agent.py | 3 + .../openvswitch/agent/ovs_dvr_neutron_agent.py | 26 ++++--- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 79 ++++++++++++++-------- .../l3_router/test_l3_dvr_router_plugin.py | 50 ++++++++++++++ .../openvswitch/agent/test_ovsdb_handler.py | 3 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 70 ++++++++++++++++--- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 19 ++++-- ...ttp_retries-config-option-b81dd29c03ba8c6a.yaml | 6 ++ ...ping_enable-config-option-6a0e15e4ed0a2cf7.yaml | 7 ++ test-requirements.txt | 1 + 31 files changed, 465 insertions(+), 79 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index e4e6d09c69..a5c12ddbdb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -24,0 +25 @@ pylint==2.2.0;python_version>="3.0" # GPLv2 +isort==4.3.21 # MIT From no-reply at openstack.org Thu Jul 23 09:40:26 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 23 Jul 2020 09:40:26 -0000 Subject: [release-announce] magnum 8.2.1 (stein) Message-ID: We jubilantly announce the release of: magnum 8.2.1: Container Management project for OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum 8.2.0..8.2.1 ------------------------------ 38a3c879 Revert "Change the order of resource creation" 5dc483e6 api: Do not guess based on name extension 67d7bd4b Fix Field `health_status_reason[api]' cannot be None` 0a5d070a Use ensure-* roles 18be349d Change the order of resource creation 4d7c03f6 Remove buildimage jobs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 39 ------------ magnum/api/app.py | 1 + magnum/drivers/common/k8s_monitor.py | 3 +- playbooks/container-builder-setup-gate.yaml | 2 +- playbooks/magnum-buildimages-base.yaml | 98 ----------------------------- playbooks/post/upload-images.yaml | 21 ------- 6 files changed, 4 insertions(+), 160 deletions(-) From no-reply at openstack.org Thu Jul 23 09:41:15 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Thu, 23 Jul 2020 09:41:15 -0000 Subject: [release-announce] barbican 8.0.1 (stein) Message-ID: We are tickled pink to announce the release of: barbican 8.0.1: OpenStack Secure Key Management This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. Changes in barbican 8.0.0..8.0.1 -------------------------------- 3d23804a Fix the barbicanclient installation not from source deca49e3 Don't use branch matching bb40485d Make broken fedora_latest job n-v 7a3396dc Fix py3 compatibility issue in PKCS#11 plugin c7d48bb3 Update UPPER_CONSTRAINTS_FILE for stable/stein cefccb07 Update .gitreview for stable/stein 367453b5 Fix the bug of pep8 and building api-guide 35f698da OpenDev Migration Patch 93864076 Replace openstack.org git:// URLs with https:// Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 24 +++++++++++----------- barbican/plugin/crypto/pkcs11.py | 12 +++++++++-- barbican/plugin/crypto/simple_crypto.py | 2 +- barbican/plugin/util/multiple_backends.py | 2 +- barbican/plugin/util/translations.py | 16 +++++++-------- devstack/lib/barbican | 8 +++++--- devstack/plugin.sh | 1 - devstack/settings | 8 ++++---- .../api/v1/functional/test_secretstores.py | 4 ++-- playbooks/legacy/barbican-devstack-base/run.yaml | 8 ++++---- .../barbican-devstack-functional-base/run.yaml | 8 ++++---- .../legacy/barbican-devstack-tempest-base/run.yaml | 8 ++++---- .../legacy/grenade-devstack-barbican/run.yaml | 10 ++++----- tox.ini | 7 ++++--- 19 files changed, 89 insertions(+), 69 deletions(-) From no-reply at openstack.org Fri Jul 24 15:13:31 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 15:13:31 -0000 Subject: [release-announce] monasca-ui 1.15.1 (stein) Message-ID: We joyfully announce the release of: monasca-ui 1.15.1: Monasca Plugin for Horizon This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/monasca-ui Download the package from: https://tarballs.openstack.org/monasca-ui/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-ui 1.15.0..1.15.1 ------------------------------------ 9ba0b0d Hide Graph Metric action of alarm when Grafana is not available 8f2455c Update UPPER_CONSTRAINTS_FILE for stable/stein 99fbd31 Update .gitreview for stable/stein e8497ad Fix failing unit tests b7bedc0 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- monitoring/alarms/tables.py | 7 ++++--- monitoring/test/settings.py | 24 ++++++++++++++++++++++++ monitoring/test/test_alarm_tables.py | 16 ++++++++++++++++ tox.ini | 2 +- 5 files changed, 47 insertions(+), 5 deletions(-) From no-reply at openstack.org Fri Jul 24 17:26:15 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 17:26:15 -0000 Subject: [release-announce] openstacksdk 0.27.1 (stein) Message-ID: We jubilantly announce the release of: openstacksdk 0.27.1: An SDK for building applications to work with OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/760 For more details, please see below. 0.27.1 ^^^^^^ Bug Fixes ********* * Fixes "openstack.baremetal.configdrive.build" to actually handle the "network_data" argument. Other Notes *********** * "openstack.resource.Resource.find" now can use the database back- end to filter by name. If the resource class has "name" in the query parameters, this function will add this filter parameter in the "list" command, instead of retrieving the whole list and then manually filtering. Changes in openstacksdk 0.27.0..0.27.1 -------------------------------------- c6873187 Add tests for Ansible built-in modules in 2.8,2.9 6657626b [tests] Improve devstack/post playbook efficiency b600ee08 Run fetch-subunit-output role conditionally a259bf46 Add ansible collection job to stein branch 6d4eac84 Add "name" filter in "list" call when retrieving a single register 2aa22099 Revert "Add fake support for global_request_id" 5f4ad7ea Keep connection backrefs with weakref.proxy a9d1c9f8 Add fake support for global_request_id e6a7844f Fix branch for stable job testing 5f395479 Replace nodepool func jobs 17e079c3 fixing timing 459c6dd2 OpenDev Migration Patch 11005cc3 Actually pass on network_data when building configdrive Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 83 ++++++++++++----- openstack/baremetal/configdrive.py | 3 +- openstack/config/cloud_region.py | 1 + openstack/connection.py | 3 +- openstack/resource.py | 4 + playbooks/devstack/post.yaml | 12 ++- .../notes/network-data-bd94e4a499ba3e0d.yaml | 5 ++ ...ource-find-filter-by-name-e647e5c507ff4b6c.yaml | 7 ++ 13 files changed, 225 insertions(+), 93 deletions(-) From no-reply at openstack.org Fri Jul 24 18:32:49 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:32:49 -0000 Subject: [release-announce] monasca-agent 2.10.1 (stein) Message-ID: We are happy to announce the release of: monasca-agent 2.10.1: Monitoring agent for gathering metrics and sending them to the Monasca API. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/monasca-agent Download the package from: https://tarballs.openstack.org/monasca-agent/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-agent 2.10.0..2.10.1 --------------------------------------- 84110ea Fix libvirt ping_checks documentation 03b344f Add debug output for libvirt ping checks 0785ffc Do not copy /sbin/ip to /usr/bin/monasa-agent-ip 0d171ed Remove incorrect assignment of ping_cmd to 'True' 583e572 add X.509 certificate check plugin 29c1f7d Update hacking version to 1.1.x c4eaa48 OpenDev Migration Patch d91bb02 Update the cloudkitty detection plugin search pattern 900fbdd Update UPPER_CONSTRAINTS_FILE for stable/stein 10be452 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- monasca_agent/collector/checks/collector.py | 4 +- monasca_agent/collector/checks/utils.py | 2 +- .../collector/checks_d/cert_file_check.py | 68 ++++++++++ monasca_agent/collector/checks_d/disk.py | 4 +- monasca_agent/collector/checks_d/libvirt.py | 29 +++-- monasca_agent/collector/checks_d/lxc.py | 2 +- monasca_agent/common/util.py | 6 +- monasca_agent/forwarder/daemon.py | 2 +- monasca_setup/detection/plugins/cert_file_check.py | 73 +++++++++++ monasca_setup/detection/plugins/cloudkitty.py | 2 +- monasca_setup/detection/plugins/influxdb.py | 4 +- monasca_setup/detection/plugins/influxdb_relay.py | 4 +- monasca_setup/detection/plugins/kafka_consumer.py | 4 +- monasca_setup/detection/plugins/libvirt.py | 77 ++++------- monasca_setup/detection/plugins/ovs.py | 4 +- monasca_setup/detection/plugins/vcenter.py | 10 +- setup.cfg | 2 + test-requirements.txt | 4 +- tox.ini | 10 +- 24 files changed, 550 insertions(+), 110 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 0c9982c..1273a46 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=1.0.0,<1.1.0 # Apache-2.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0 @@ -11,0 +12,2 @@ docutils>=0.11 # OSI-Approved Open Source, Public Domain +freezegun>=0.3.6 # Apache-2.0 + From no-reply at openstack.org Fri Jul 24 18:35:30 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:35:30 -0000 Subject: [release-announce] monasca-notification 1.17.1 (stein) Message-ID: We high-spiritedly announce the release of: monasca-notification 1.17.1: Reads alarms from Kafka and then notifies the customer using their configured notification method. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/monasca-notification Download the package from: https://tarballs.openstack.org/monasca-notification/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-notification 1.17.0..1.17.1 ---------------------------------------------- 5d573af [GateFix] Ignore false positive bandit B105 test failure 8e36cd1 Fix loading of notification plugins 95dec88 Blacklist bandit and update sphinx requirement fa4078d OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- bindep.txt | 4 ++++ lower-constraints.txt | 1 + monasca_notification/conf/__init__.py | 2 +- monasca_notification/conf/database.py | 2 +- monasca_notification/conf/notifiers.py | 6 +++--- test-requirements.txt | 2 +- tox.ini | 12 ++++++++++++ 9 files changed, 27 insertions(+), 9 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index e00b105..b89e4b7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ -bandit>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0 # Apache-2.0 From no-reply at openstack.org Fri Jul 24 18:35:59 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:35:59 -0000 Subject: [release-announce] monasca_transform 0.17.2 (stein) Message-ID: We are gleeful to announce the release of: monasca_transform 0.17.2: Data Aggregation and Transformation component for Monasca This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/monasca_transform Download the package from: https://tarballs.openstack.org/monasca-transform/ For more details, please see below. Changes in monasca_transform 0.17.1..0.17.2 ------------------------------------------- 863e7f0 Fix Swift Rate Calculation 6324541 OpenDev Migration Patch fa639b6 Update UPPER_CONSTRAINTS_FILE for stable/stein 56fb1c3 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .../pre_transform_specs/pre_transform_specs.json | 16 +++++------ .../transform_specs/transform_specs.json | 2 +- .../transform/grouping/group_sort_by_timestamp.py | 14 ++++++++-- .../pre_transform_specs/pre_transform_specs.json | 32 +++++++++++----------- .../data_driven_specs/test_data_driven_specs.py | 16 +++++------ .../transform_specs/transform_specs.json | 10 +++---- ...park_test.py => test_first_attempt_at_spark.py} | 0 tox.ini | 2 +- 9 files changed, 52 insertions(+), 43 deletions(-) From no-reply at openstack.org Fri Jul 24 18:37:55 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:37:55 -0000 Subject: [release-announce] monasca-api 3.0.1 (stein) Message-ID: We are excited to announce the release of: monasca-api 3.0.1: OpenStack Monitoring as a Service This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/monasca-api Download the package from: https://tarballs.openstack.org/monasca-api/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. 3.0.1 ^^^^^ New Features * Allow metric_dimensions filter to filter on multiple dimension values, on alarms count endpoint (IE metric_dimension=hostname:host1|host2). This brings the query parameters into parity between the alarms list and alarms count endpoints. This also restores functionality that was available on the deprecated java api. Changes in monasca-api 3.0.0..3.0.1 ----------------------------------- 41871ffd Update UPPER_CONSTRAINTS_FILE for stable/stein 1b417f58 OpenDev Migration Patch b8b70f4b Update branch to stable/stein for DevStack 06322736 Update /v2/alarms/count api endpoint f3cff1bf Detect missing metric_id before passing through bytearray() 20cb5877 Update Ubuntu release in documentation 6d98ac8b Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .zuul.yaml | 4 +- devstack/README.md | 2 +- devstack/settings | 18 ++++----- .../repositories/cassandra/metrics_repository.py | 9 +++++ .../common/repositories/sqla/alarms_repository.py | 21 ++++++++-- .../alarms-count-dimensions-f746ca6c725335b2.yaml | 8 ++++ tox.ini | 2 +- 10 files changed, 95 insertions(+), 19 deletions(-) From no-reply at openstack.org Fri Jul 24 18:42:18 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:42:18 -0000 Subject: [release-announce] os-net-config 12.3.1 (ussuri) Message-ID: We are chuffed to announce the release of: os-net-config 12.3.1: OpenStack network configuration This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 12.3.0..12.3.1 --------------------------------------- eb9942a Set OVSBOOTPROTO to dhcp when using dhcpv6 with OVS b60b7f0 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + os_net_config/impl_ifcfg.py | 6 +++--- 3 files changed, 27 insertions(+), 3 deletions(-) From no-reply at openstack.org Fri Jul 24 18:42:56 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:42:56 -0000 Subject: [release-announce] paunch 7.0.1 (ussuri) Message-ID: We are excited to announce the release of: paunch 7.0.1: Utility to launch and manage containers using YAML based configuration data This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. Changes in paunch 7.0.0..7.0.1 ------------------------------ b8f412d Make sure failed containers get stopped by systemd 7ea9455 podman: get cpus allowed list only when isolcpus in cmdline 2729221 Allow to pass a list for "security_opt" param Diffstat (except docs and test files) ------------------------------------- paunch/builder/compose1.py | 7 +++++-- paunch/builder/podman.py | 7 +++++-- paunch/utils/systemd.py | 1 + 7 files changed, 42 insertions(+), 39 deletions(-) From no-reply at openstack.org Fri Jul 24 18:43:34 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:43:34 -0000 Subject: [release-announce] ironic-lib 4.3.1 (victoria) Message-ID: We are amped to announce the release of: ironic-lib 4.3.1: Ironic common library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-lib For more details, please see below. Changes in ironic-lib 4.3.0..4.3.1 ---------------------------------- c080681 Return correct response on HTTP basic failure 01574fa Set min version of tox to 3.2.1 f898a78 Support more bcrypt prefixes c3d9449 Use unittest.mock instead of mock 4c18543 Fix for latest zeroconf version Diffstat (except docs and test files) ------------------------------------- ironic_lib/auth_basic.py | 22 +++++++++++++++------- ironic_lib/exception.py | 1 + lower-constraints.txt | 1 - requirements.txt | 1 + tox.ini | 2 +- 7 files changed, 48 insertions(+), 18 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 53d867c..84b9647 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15,0 +16 @@ bcrypt>=3.1.3 # Apache-2.0 +WebOb>=1.7.1 # MIT From no-reply at openstack.org Fri Jul 24 18:45:23 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:45:23 -0000 Subject: [release-announce] puppet-tripleo 12.4.0 (ussuri) Message-ID: We are delighted to announce the release of: puppet-tripleo 12.4.0: Puppet module for OpenStack TripleO This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 12.4.0 ^^^^^^ New Features ************ * Added support for VxFlexOS backend driver Deprecation Notes ***************** * Keepalived is deprecated in Ussuri and will be removed in the next cycle. * Resource tripleo::profile::base::cinder::volume::dellemc_vxflexos will be removed in W-Release. Changes in puppet-tripleo 12.3.0..12.4.0 ---------------------------------------- fa42b3b6 bump metadata for new ussuri release e0fa5abd Ensure post-save certmonger scripts target the right HA container 9b02574d Make promote timeout configurable d5c6e1c5 Update Gemfile for stable/ussuri 855bad9a Make haproxy.pp honor EnableInternalTLS for rgw 2a34eb1c Add FFU support for ceph_nfs 7097c48b Enable to modify params of logrotate-crond.conf fe64cf37 Switch RGW HAProxy healthcheck to use special RGW healthcheck url 30c8cb3b Fix haproxy ceph dashboard condition 146674dc Ensure that the HAProxy certificate is updated 3a564e7e Fix RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS usage with a proper override mechanism + Make the additional_erl_args change more independent c76b60b4 Fix the default values for ca_file and cert_file b8568c4b Finish HAProxy config for metrics_qdr b1b435e9 Remove obsolete 'http' backend from glance configuration cdee1e34 Support for Dell EMC VXFlexOS Backend d2dfda96 Remove selinux relabel mount option for neutron bfbe25b3 Deprecate Keepalived a9831936 Deprecating ScaleIO Volume Config 6ee41de6 metadata/ussuri: fix openstacklib requirement 7c9cd6e6 Only run the VIP creation code when enable_load_balancer is set to true 844975ef Allow OCF resources to be created with --force c6456e38 Include vendordata in nova-api and nova-metadata-api b2ffbe7f Fix ipv6 addrlabel for ceph-nfs ec4e5892 Allow the Mistral tunnel timeout to be configurable. b3348f08 Update TOX_CONSTRAINTS_FILE for stable/ussuri 388ecb74 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 1 + files/certmonger-haproxy-refresh.sh | 5 +- files/certmonger-rabbitmq-refresh.sh | 2 +- manifests/haproxy.pp | 47 ++++-- manifests/keepalived.pp | 2 + manifests/network/contrail/neutron_plugin.pp | 8 +- manifests/profile/base/cinder/volume.pp | 14 ++ .../profile/base/cinder/volume/dellemc_vxflexos.pp | 55 +++++++ manifests/profile/base/cinder/volume/scaleio.pp | 3 + manifests/profile/base/glance/api.pp | 2 +- manifests/profile/base/logging/logrotate.pp | 10 ++ manifests/profile/base/metrics/collectd.pp | 19 +-- manifests/profile/base/metrics/qdr.pp | 10 +- manifests/profile/base/nova/api.pp | 1 + manifests/profile/base/nova/metadata.pp | 1 + manifests/profile/base/rabbitmq.pp | 27 +++- manifests/profile/pacemaker/ceph_nfs.pp | 20 ++- manifests/profile/pacemaker/database/mysql.pp | 8 +- .../profile/pacemaker/database/mysql_bundle.pp | 14 +- .../profile/pacemaker/database/redis_bundle.pp | 5 + manifests/profile/pacemaker/ovn_dbs_bundle.pp | 163 +++++++++++---------- manifests/profile/pacemaker/rabbitmq_bundle.pp | 5 + metadata.json | 4 +- .../keepalived_deprecated-199df5a0f3f35189.yaml | 4 + ...caleio_driver_deprecation_4468457faab68824.yaml | 4 + .../notes/vxflexos-driver-aec8e372280c44e6.yaml | 3 + .../tripleo_profile_base_cinder_volume_spec.rb | 24 ++- .../tripleo_profile_base_cinder_vxflexos_spec.rb | 58 ++++++++ .../tripleo_profile_base_glance_api_spec.rb | 3 +- spec/classes/tripleo_profile_base_nova_api_spec.rb | 8 + .../tripleo_profile_base_nova_metadata_spec.rb | 6 + templates/logrotate/containers_logrotate.conf.erb | 4 +- templates/neutron/dibbler-client.epp | 2 +- templates/neutron/dnsmasq.epp | 2 +- templates/neutron/haproxy.epp | 2 +- templates/neutron/keepalived.epp | 2 +- templates/neutron/radvd.epp | 2 +- tox.ini | 2 +- 39 files changed, 403 insertions(+), 150 deletions(-) From no-reply at openstack.org Fri Jul 24 18:45:50 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:45:50 -0000 Subject: [release-announce] tripleo-heat-templates 12.4.0 (ussuri) Message-ID: We are gleeful to announce the release of: tripleo-heat-templates 12.4.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.4.0 ^^^^^^ New Features ************ * Add new BarbicanClient tripleo service for configuring DCN/Edge nodes to access a barbican service running in the control plane. The client service is disabled by default, and can be enabled by including the environments/services/barbican-edge.yaml environment file when deploying a DCN/Edge stack. * Added new PublicTLSCAFile parameter, that is used to set the ca cert in clouds.yaml for keystone public endpoint. This defaults to empty string ('') assuming that the certs are already trusted. * Add GlanceImagePrefetcherInterval parameter to run periodic job which fetches the queued images for caching in cache directory, when image cache is enabled. * Add boolean parameter *NovaSchedulerQueryPlacementForAvailabilityZone* that sets *scheduler/query_placement_for_availability_zone* parameter. It allows the scheduler to look up a host aggregate with metadata key of availability zone set to the value provided by incoming request, and request result from placement be limited to that aggregate. Default value for NovaSchedulerQueryPlacementForAvailabilityZone is false. * Adds the "OctaviaLogOffload" setting to enable amphora log offloading. * Added support for VxFlexOS cinder block storage backend driver Deprecation Notes ***************** * Usage of the option "NeutronFirewallDriver" which was used to set "firewall_driver" config option in the Neutron server's config is now deprecated. Firewall driver should be set per agent in the agent's config. It can be done using "NeutronOVSFirewallDriver" option. Option in the Neutron server was in there just for backward compatybility reasons but since Newton release all Neutron agents are reporting to the server what firewall driver is used so there is no need to keep this legacy, server side option anymore. Bug Fixes ********* * Ensure the barbican Key Manager settings are configured on DCN/Edge nodes when the barbican service is deployed in the control plane. See bug 1886070 (https://bugs.launchpad.net/tripleo/+bug/1886070). Other Notes *********** * The ValidateNtp has been removed from the all nodes validation configuration. During the time sync configuration we already do a check to ensure the ntp servers are available. If they are not we will fail with an appropriate message. The ValidateNtp option came from a time before we could fail in a more explicit way. Changes in tripleo-heat-templates 12.3.0..12.4.0 ------------------------------------------------ 1ed3cef04 Remove strategy comment 507898442 Ensure redis_tls_proxy starts after all redis instances afc7e2c28 Use tripleo linear when not using tripleo free b5b2bb640 Add BarbicanClient service for configuring edge sites 6358fd4a1 Remove /run from some services 0d587d8ce Drop the relabel flag for bind-mount 22544669d Switch deploy steps to tripleo_free 9c861fcfc Revert "Prevent nftables to interfere with tripleo firewall" 0c2bee43b Add become: true to the container json file modules c6bafbf03 FFU support for ceph_nfs 71a8917a1 deploy-steps-playbooks-common: fix logic for scale_ignore_unreachable 3b6874daa Convert roles section into tasks-include_role in deploy-steps.j2. eefa55e34 Simplify host entries generation 381f0146f Check for correct column name for execution show d29386d8b Move sidecar kill scripts to host prep f917423be Fix privilege escalation 4ed5c76e4 Generate container startup configs with a new module 03ab2f26d Fix bind mount volumes for novajoin containers 155a2b2a5 Always clear cached facts first 3166f641c Collapse host prep tasks ccb139178 Collapse deploy steps 6cf0b38c4 Don't set RABBITMQ_SERVER_ERL_ARGS 3c48469a7 Task should fail on any failure 4465977d9 Fix default BlockStorageCinderVolume template d423af38a undercloud/heat: set YAQL memory quota to 200000 cdfaab952 Add filestore to bluestore migration tags 7ab3de589 Exclude /etc/hostname 48d735e72 Add non-string value support for CephAnsibleEnvironmentVariables b366fd9e1 Sync httpd conf.modules.d configs de45a1fc6 Cleanup all container startup configs before generating the new ones 51e697362 Fix Error: invalid arguments you must use just one container 48940849b Add new parameter PublicTLSCACert bd8756ef9 Add project template for IPA multinode 35a3bb146 Adding amphora architecture to heat templates 31832bda9 Disable Sahara in scenario003-standalone 4cb98be4d Increase the default UpgradeLeappRebootTimeout to 60 mins 0ed634442 Allow more tasks to be run in check mode 61b564480 Add composible service for tls enrollment ccdbbc9ab Disable presettled metrics fe759c675 Disable Designate service for scenario 03 454a0e652 Allow overriding InterfaceDefaultRoute with ips_from_pool template c775af9e6 collectd: add support for mcelog service 1ca404cbc Move nova online migrations to nova-conductor 64641facd Fix syntax error 7f96ee799 Adding env file for octavia with kvm c8d6df463 Update loop_vars 81b479b14 Allow triggering ceph-ansible filestore-to-bluestore with ceph_fstobs tag faf2ae187 Ironic create_swift_temp_url_key use internal edpoint 71919ffed Support for Dell EMC VXFlexOS Backend 2c9034053 Consider user configuration during the derivation of passthrough whitelist 8a8cf9a5d Only enable leapp tasks when distribution is correct b26167919 Unify metrics_qdr name to underscore 3ac4735cc Fix dry-run for NetworkConfig tasks da727d0c4 Fix reserved name variable 89a2b9a3e Remove ValidateNtp 201f4db58 enable dpdk plugin on neutron ovn and ovs dadc45daa Use empty string for overcloud InternalTLSCAFile param 213bb2680 Remove Ceph{Admin,Mon,Mds}Key parameters e1670159d Add an option to adjust help URL in horizon 31f2658df Add the ability to offload amphora logs 6a119dcfb Ensure net.ipv6.conf.lo.disable_ipv6=0 9ee2f7418 Check transfer data flag to skip pacemaker normal upgrade. e25ff3d50 Update minion rabbit credentials 66683ad94 Fix node scaling db5f2b1d7 Add additional files to ipa standalone test 1d7070e92 Update scn003 to exercise ExtraFirewallrules capabilities 96327c8ef Revert "Only enable leapp tasks when distribution is correct" b225e6b48 Add reserved ports for some services 392de5157 Change the :Z mount flag to :z 97464f164 Enable glance cache prefetcher interval 1c87fae29 MaxFailPercentage: default to 0 4ab32733a Configure valid_exit_code for startup containers d6e86c4cf Fix sending SIGTERM to the sidecar containers 8bdf199af Set default InternalTLSCAFile in enable-tls.yaml 9551cfa6a rhsm: add rhsm_release in environment for doc purpose 8eaf18682 Move chcon for /var/lib/config-data 7dbd96c43 Make user value for GlanceImageImportPlugin prevail on logic e52cfc03c Include tripleo_ceph_workdir role on rgw variables override 05f19f2c5 Force container deletion if namespace does not exist in service_kill a01c36127 Modify tls-e service to not install packages by default c56920c79 Correctly match openvswitch package 00c2da440 Enable adding packages into Leapp's to_remove/to_install files. 4dba85d81 Use /32 or /128 netmask for VIPs c939d913b Remove unnecessary check after removing libvirt rpm dependencies 3a44feeb4 Only enable leapp tasks when distribution is correct 5bbc3ab7d Fix typo in the description of the Neutron related options 5d50ea313 Split ansible_limit with a colon. 7436ab8db Deprecate old NeutronFirewallDriver option 66e029cc3 Add new parameter NovaSchedulerQueryPlacementForAvailabilityZone 8e45fac85 Update TOX_CONSTRAINTS_FILE for stable/ussuri 829bc7268 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + README.rst | 2 + all-nodes-validation.yaml | 6 - ci/common/all-nodes-validation-disabled.yaml | 6 - ci/environments/octavia-kvm.yaml | 7 + ci/environments/scenario000-standalone.yaml | 1 + .../scenario001-multinode-containers.yaml | 6 +- ci/environments/scenario001-standalone.yaml | 8 +- ci/environments/scenario003-standalone.yaml | 30 ++- ci/environments/scenario004-standalone.yaml | 7 +- .../scenario010-multinode-containers.yaml | 2 - ci/environments/scenario010-standalone.yaml | 6 +- common/container-puppet.sh | 13 +- common/container_startup_configs_tasks.yaml | 19 -- common/deploy-steps-playbooks-common.yaml | 36 ++- common/deploy-steps-tasks-step-0.j2.yaml | 3 + common/deploy-steps-tasks-step-1.yaml | 48 ++-- common/deploy-steps-tasks.yaml | 8 + common/deploy-steps.j2 | 165 ++++++-------- common/generate-config-tasks.yaml | 2 + common/hiera-steps-tasks.yaml | 1 + container_config_scripts/wait-port-and-run.sh | 18 ++ deployed-server/scripts/enable-ssh-admin.sh | 3 +- deployment/aodh/aodh-api-container-puppet.yaml | 7 + .../barbican/barbican-api-container-puppet.yaml | 7 + deployment/barbican/barbican-client-puppet.yaml | 60 +++++ deployment/ceph-ansible/ceph-base.yaml | 16 +- deployment/ceph-ansible/ceph-client.yaml | 5 +- deployment/ceph-ansible/ceph-external.yaml | 5 +- deployment/ceph-ansible/ceph-grafana.yaml | 5 +- deployment/ceph-ansible/ceph-mds.yaml | 12 +- deployment/ceph-ansible/ceph-mgr.yaml | 5 +- deployment/ceph-ansible/ceph-mon.yaml | 22 +- deployment/ceph-ansible/ceph-nfs.yaml | 49 +++- deployment/ceph-ansible/ceph-osd.yaml | 5 +- deployment/ceph-ansible/ceph-rbdmirror.yaml | 5 +- deployment/ceph-ansible/ceph-rgw.yaml | 9 +- deployment/cinder/cinder-api-container-puppet.yaml | 7 + .../cinder-backend-dellemc-vxflexos-puppet.yaml | 148 +++++++++++++ .../cinder/cinder-backup-pacemaker-puppet.yaml | 4 +- .../cinder/cinder-common-container-puppet.yaml | 4 + .../cinder/cinder-volume-pacemaker-puppet.yaml | 4 +- deployment/containers-common.yaml | 3 + deployment/database/mysql-pacemaker-puppet.yaml | 4 +- deployment/database/redis-container-puppet.yaml | 1 - deployment/database/redis-pacemaker-puppet.yaml | 14 +- .../docker/docker-baremetal-ansible.yaml | 4 +- deployment/glance/glance-api-container-puppet.yaml | 23 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 7 + deployment/haproxy/haproxy-pacemaker-puppet.yaml | 6 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 15 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 7 + deployment/heat/heat-api-container-puppet.yaml | 7 + deployment/horizon/horizon-container-puppet.yaml | 13 ++ deployment/ipa/ipaservices-baremetal-ansible.yaml | 2 +- deployment/ironic/ironic-api-container-puppet.yaml | 7 + .../ironic/ironic-conductor-container-puppet.yaml | 1 + deployment/ironic/ironic-pxe-container-puppet.yaml | 7 + deployment/kernel/kernel-baremetal-ansible.yaml | 4 + deployment/keystone/keystone-container-puppet.yaml | 15 +- deployment/logrotate/tmpwatch-install.yaml | 3 +- deployment/manila/manila-api-container-puppet.yaml | 7 + .../manila/manila-share-pacemaker-puppet.yaml | 4 +- deployment/metrics/collectd-container-puppet.yaml | 8 + deployment/metrics/qdr-container-puppet.yaml | 28 +-- .../neutron/derive_pci_passthrough_whitelist.py | 246 ++++++++++++++++++--- deployment/neutron/kill-script | 27 ++- .../neutron/neutron-api-container-puppet.yaml | 7 + .../neutron/neutron-dhcp-container-puppet.yaml | 65 +++--- .../neutron/neutron-l3-container-puppet.yaml | 93 ++++---- .../neutron-ovn-dpdk-config-container-puppet.yaml | 6 + .../neutron-ovs-dpdk-agent-container-puppet.yaml | 6 +- deployment/neutron/neutron-plugin-ml2.yaml | 17 +- .../neutron-sriov-agent-container-puppet.yaml | 4 +- deployment/nova/nova-api-container-puppet.yaml | 16 +- deployment/nova/nova-compute-container-puppet.yaml | 10 +- .../nova/nova-conductor-container-puppet.yaml | 9 + deployment/nova/nova-libvirt-container-puppet.yaml | 2 +- .../nova/nova-metadata-container-puppet.yaml | 7 + .../nova/nova-scheduler-container-puppet.yaml | 9 +- deployment/nova/novajoin-container-puppet.yaml | 4 +- .../octavia/octavia-api-container-puppet.yaml | 7 + .../octavia/octavia-deployment-config.j2.yaml | 12 + .../octavia-health-manager-container-puppet.yaml | 84 +++++-- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 4 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 49 ++-- .../pacemaker/pacemaker-baremetal-puppet.yaml | 32 ++- .../placement/placement-api-container-puppet.yaml | 11 + deployment/podman/podman-baremetal-ansible.yaml | 4 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 3 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 4 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 4 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 4 +- deployment/swift/swift-proxy-container-puppet.yaml | 8 +- deployment/tls/undercloud-tls.yaml | 99 +++++++++ .../tripleo-firewall-baremetal-ansible.yaml | 35 +-- .../tripleo-packages-baremetal-puppet.yaml | 53 ++++- deployment/undercloud/minion-rabbitmq-puppet.yaml | 25 +-- deployment/undercloud/undercloud-upgrade.yaml | 2 +- deployment/zaqar/zaqar-container-puppet.yaml | 7 + environments/cinder-dellemc-vxflexos-config.yaml | 35 +++ environments/enable-stf.yaml | 2 +- environments/lifecycle/upgrade-prepare.yaml | 2 + environments/metrics/collectd-write-qdr.yaml | 2 +- environments/public-tls-undercloud.yaml | 1 + environments/rhsm.yaml | 2 + environments/services/barbican-edge.yaml | 4 + environments/services/undercloud-tls.yaml | 4 + environments/ssl/enable-tls.yaml | 4 + environments/storage-environment.yaml | 4 - environments/undercloud.yaml | 3 +- environments/undercloud/undercloud-minion.yaml | 1 + net-config-standalone.j2.yaml | 6 +- net-config-undercloud.j2.yaml | 6 +- network/ports/port_from_pool.j2 | 27 ++- overcloud-resource-registry-puppet.j2.yaml | 6 +- overcloud.j2.yaml | 82 +++---- puppet/role.role.j2.yaml | 37 ++-- ...tronFirewallDriver-option-f4289b404abcc0b3.yaml | 12 + ...d-barbican-client-for-dcn-7182e8bab41fce21.yaml | 13 ++ ...publictlscafile-parameter-0fd9c19dcd20be0b.yaml | 6 + ...ce_image_cache_prefetcher-288120ffa6ee2a13.yaml | 6 + ...ent_for_availability_zone-ffd415710a9cb903.yaml | 9 + .../octavia-log-offload-d1617e767f688da1.yaml | 4 + .../notes/remove-ValidateNtp-15724eaa8345aa4f.yaml | 8 + .../notes/vxflexos-driver-bec8e372280c44e6.yaml | 4 + roles/Controller.yaml | 1 + roles/ControllerNoCeph.yaml | 1 + roles/ControllerNovaStandalone.yaml | 1 + roles/ControllerStorageDashboard.yaml | 1 + roles/ControllerStorageNfs.yaml | 1 + roles/DistributedCompute.yaml | 1 + roles/DistributedComputeHCI.yaml | 1 + roles/DistributedComputeHCIScaleOut.yaml | 1 + roles/DistributedComputeScaleOut.yaml | 1 + roles/Standalone.yaml | 1 + roles/Undercloud.yaml | 1 + roles_data.yaml | 1 + roles_data_undercloud.yaml | 1 + sample-env-generator/ssl.yaml | 4 + sample-env-generator/undercloud-minion.yaml | 1 + tools/yaml-validate.py | 4 + tox.ini | 2 +- validation-scripts/all-nodes.sh | 40 ---- zuul.d/layout.yaml | 8 +- 145 files changed, 1637 insertions(+), 667 deletions(-) From no-reply at openstack.org Fri Jul 24 18:47:27 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:47:27 -0000 Subject: [release-announce] os-apply-config 11.2.1 (ussuri) Message-ID: We are pumped to announce the release of: os-apply-config 11.2.1: Config files from cloud metadata This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ Please report issues through: https://bugs.launchpad.net/os-apply-config/+bugs For more details, please see below. Changes in os-apply-config 11.2.0..11.2.1 ----------------------------------------- bc8f061 Update TOX_CONSTRAINTS_FILE for stable/ussuri 1c36bbe Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) From no-reply at openstack.org Fri Jul 24 18:48:09 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:48:09 -0000 Subject: [release-announce] tripleo-validations 12.3.1 (ussuri) Message-ID: We jubilantly announce the release of: tripleo-validations 12.3.1: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 12.3.0..12.3.1 --------------------------------------------- 0bc2cad Update Ceph role's Get OSD stat to use new data structure 6566987 Update TOX_CONSTRAINTS_FILE for stable/ussuri adf1dc0 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + roles/ceph/tasks/ceph-health.yaml | 2 +- tox.ini | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) From no-reply at openstack.org Fri Jul 24 18:48:33 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:48:33 -0000 Subject: [release-announce] tripleo-common 12.4.1 (ussuri) Message-ID: We are jazzed to announce the release of: tripleo-common 12.4.1: A common library for TripleO workflows. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 12.4.1 ^^^^^^ Bug Fixes * When the default tag doesn't exist in the container repo during container image prepare, and a tag wasn't set in the actual input for ContainerImagePrepare, the latest tag from the repo will be used instead of failing with a not found error. * Fix bug 1887692 so limit_hosts will take precedence over the blacklisted_hostnames. And therefore Ansible won't be run with two --limit if both limit hosts and blacklisted hostnames are in use. When we want to run Ansible on specific hosts, we will ignore the blacklisted nodes and assume we know what we do. In the case of the scale-down scenario, the unreachable nodes are ignored. Changes in tripleo-common 12.4.0..12.4.1 ---------------------------------------- 2fc3d1f3 Update container image sources in U 20f32171 Retry fetching {{ deployment_uuid }}.notify.json file ec65b686 Don't assume default tag exists in container repo b113157b image_uploader: switch stdout_callback to tripleo_dense d5dc49f8 TCIB: add python3-pynacl to mariadb image abd0d701 TCIB: bump ceph image to align with kolla images 5af8278c Drop systemd support from nsswitch.conf c9adf14a ansible: limit_hosts now takes precedence over blacklisted_hostnames cb828e7e TCIB: add etcd user to the kolla group d270b07f Add tripleo_states to default callback whitelist 6a8c5c24 Fix OVN Octavia provider driver package name 55573ec4 tcib: move cradox to gnocchi-base & enable ci on scenario001 d8d398dc Relax filter_images_with_labels() and re-add kolla_version 25bb1f2e (TCIB) Remove validation related things from mistral container b53977c7 Run standalone jobs with locally built images 654025c9 tcib/ceilometer-base: remove panko dependency 1473cad0 Implement a new Container Images layout b11292ad Catch exception if servers are in error state with no bm_node attached 0d7f60c5 Switch to tripleo_dense fadce762 Fix stdout_callback 700888b9 [Q->T] Include manila in the Queens to Train Upgrade 93cba1fc Set undercloud ansible_connection to local 5aba85f4 Avoid tox-in-tox issue 10bcbc41 Ensure lanplus is unset when using redfish 422a39ea [Ussuri Only] Sync template overrides with Kolla fe1e354c Switch to tripleo stdout callback dbc2a37e Remove unnecessary Ceph{Admin,Mon,Mds}Key constants 28437614 Add Octavia use of the rsyslog image 2f23164b Fix nova-virtlogd container healthcheck e15ad2c2 Do not rotate CephX secrets 3da8561b Switch namespace for ussuri bac59623 Remove tripleo.deployment.overcloudrc action fcdffb9b Fix dry-run for "remote copy deployment file" task 68f96f0c Update TOX_CONSTRAINTS_FILE for stable/ussuri 17de6de9 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../container_image_prepare_defaults.yaml | 3 +- container-images/kolla/base/httpd_setup.sh | 20 + container-images/kolla/base/set_configs.py | 436 +++++++++++++++++++++ container-images/kolla/base/start.sh | 18 + container-images/kolla/base/sudoers | 18 + container-images/kolla/glance-api/extend_start.sh | 9 + container-images/kolla/horizon/extend_start.sh | 126 ++++++ container-images/kolla/iscsid/extend_start.sh | 7 + container-images/kolla/keystone/extend_start.sh | 31 ++ container-images/kolla/mariadb/extend_start.sh | 35 ++ .../kolla/mariadb/security_reset.expect | 58 +++ .../kolla/neutron-base/neutron_sudoers | 6 + .../ovn/ovn-nb-db-server/start_nb_db_server.sh | 28 ++ .../ovn/ovn-sb-db-server/start_sb_db_server.sh | 29 ++ container-images/kolla/rabbitmq/extend_start.sh | 16 + container-images/kolla/swift-base/swift-rootwrap | 10 + container-images/kolla/swift-base/swift-sudoers | 2 + .../kolla/tripleoclient/create_super_user.sh | 18 + container-images/overcloud_containers.yaml | 184 ++++----- container-images/overcloud_containers.yaml.j2 | 9 + container-images/tcib/base/base.yaml | 55 +++ container-images/tcib/base/collectd/collectd.yaml | 64 +++ container-images/tcib/base/cron/cron.yaml | 6 + container-images/tcib/base/etcd/etcd.yaml | 8 + container-images/tcib/base/haproxy/haproxy.yaml | 10 + .../tcib/base/keepalived/keepalived.yaml | 6 + container-images/tcib/base/mariadb/mariadb.yaml | 36 ++ .../tcib/base/memcached/memcached.yaml | 9 + .../tcib/base/multipathd/multipathd.yaml | 6 + .../tcib/base/os/aodh-base/aodh-api/aodh-api.yaml | 11 + .../tcib/base/os/aodh-base/aodh-base.yaml | 6 + .../aodh-base/aodh-evaluator/aodh-evaluator.yaml | 7 + .../os/aodh-base/aodh-listener/aodh-listener.yaml | 7 + .../os/aodh-base/aodh-notifier/aodh-notifier.yaml | 7 + .../barbican-base/barbican-api/barbican-api.yaml | 11 + .../tcib/base/os/barbican-base/barbican-base.yaml | 7 + .../barbican-keystone-listener.yaml | 7 + .../barbican-worker/barbican-worker.yaml | 7 + .../base/os/ceilometer-base/ceilometer-base.yaml | 8 + .../ceilometer-central/ceilometer-central.yaml | 11 + .../ceilometer-compute/ceilometer-compute.yaml | 10 + .../ceilometer-ipmi/ceilometer-ipmi.yaml | 11 + .../ceilometer-notification.yaml | 8 + .../base/os/cinder-base/cinder-api/cinder-api.yaml | 11 + .../cinder-base/cinder-backup/cinder-backup.yaml | 13 + .../tcib/base/os/cinder-base/cinder-base.yaml | 15 + .../cinder-scheduler/cinder-scheduler.yaml | 3 + .../cinder-base/cinder-volume/cinder-volume.yaml | 18 + .../designate-api/designate-api.yaml | 6 + .../designate-backend-bind9.yaml | 6 + .../base/os/designate-base/designate-base.yaml | 9 + .../designate-central/designate-central.yaml | 6 + .../designate-mdns/designate-mdns.yaml | 6 + .../designate-producer/designate-producer.yaml | 6 + .../designate-sink/designate-sink.yaml | 6 + .../designate-worker/designate-worker.yaml | 7 + .../tcib/base/os/glance-api/glance-api.yaml | 22 ++ .../os/gnocchi-base/gnocchi-api/gnocchi-api.yaml | 7 + .../tcib/base/os/gnocchi-base/gnocchi-base.yaml | 13 + .../gnocchi-metricd/gnocchi-metricd.yaml | 7 + .../gnocchi-statsd/gnocchi-statsd.yaml | 7 + .../tcib/base/os/heat-base/heat-all/heat-all.yaml | 8 + .../os/heat-base/heat-api-cfn/heat-api-cfn.yaml | 7 + .../tcib/base/os/heat-base/heat-api/heat-api.yaml | 7 + .../tcib/base/os/heat-base/heat-base.yaml | 10 + .../base/os/heat-base/heat-engine/heat-engine.yaml | 6 + container-images/tcib/base/os/horizon/horizon.yaml | 18 + .../base/os/ironic-base/ironic-api/ironic-api.yaml | 11 + .../tcib/base/os/ironic-base/ironic-base.yaml | 6 + .../ironic-conductor/ironic-conductor.yaml | 34 ++ .../ironic-inspector/ironic-inspector.yaml | 9 + .../base/os/ironic-base/ironic-pxe/ironic-pxe.yaml | 14 + container-images/tcib/base/os/iscsid/iscsid.yaml | 12 + .../tcib/base/os/keystone/keystone.yaml | 23 ++ .../base/os/manila-base/manila-api/manila-api.yaml | 10 + .../tcib/base/os/manila-base/manila-base.yaml | 6 + .../manila-scheduler/manila-scheduler.yaml | 3 + .../os/manila-base/manila-share/manila-share.yaml | 14 + .../os/mistral-base/mistral-api/mistral-api.yaml | 11 + .../tcib/base/os/mistral-base/mistral-base.yaml | 9 + .../mistral-engine/mistral-engine.yaml | 7 + .../mistral-event-engine/mistral-event-engine.yaml | 7 + .../mistral-executor/mistral-executor.yaml | 19 + .../ironic-neutron-agent/ironic-neutron-agent.yaml | 8 + .../neutron-agent-base/neutron-agent-base.yaml | 10 + .../neutron-dhcp-agent/neutron-dhcp-agent.yaml | 3 + .../neutron-l3-agent/neutron-l3-agent.yaml | 3 + .../neutron-metadata-agent-ovn.yaml | 7 + .../tcib/base/os/neutron-base/neutron-base.yaml | 18 + .../neutron-metadata-agent.yaml | 3 + .../neutron-openvswitch-agent.yaml | 7 + .../neutron-server-ovn/neutron-server-ovn.yaml | 12 + .../neutron-server/neutron-server.yaml | 11 + .../neutron-sriov-agent/neutron-sriov-agent.yaml | 7 + .../tcib/base/os/nova-base/nova-api/nova-api.yaml | 12 + .../tcib/base/os/nova-base/nova-base.yaml | 6 + .../nova-compute-ironic/nova-compute-ironic.yaml | 14 + .../os/nova-base/nova-compute/nova-compute.yaml | 29 ++ .../nova-base/nova-conductor/nova-conductor.yaml | 7 + .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 29 ++ .../nova-base/nova-novncproxy/nova-novncproxy.yaml | 8 + .../nova-base/nova-scheduler/nova-scheduler.yaml | 12 + .../tcib/base/os/novajoin-base/novajoin-base.yaml | 6 + .../novajoin-notifier/novajoin-notifier.yaml | 2 + .../novajoin-server/novajoin-server.yaml | 2 + .../os/octavia-base/octavia-api/octavia-api.yaml | 12 + .../tcib/base/os/octavia-base/octavia-base.yaml | 6 + .../octavia-health-manager.yaml | 7 + .../octavia-housekeeping/octavia-housekeeping.yaml | 7 + .../octavia-worker/octavia-worker.yaml | 7 + container-images/tcib/base/os/os.yaml | 20 + .../tcib/base/os/placement-api/placement-api.yaml | 11 + .../os/swift-base/swift-account/swift-account.yaml | 7 + .../tcib/base/os/swift-base/swift-base.yaml | 12 + .../swift-container/swift-container.yaml | 7 + .../os/swift-base/swift-object/swift-object.yaml | 7 + .../swift-proxy-server/swift-proxy-server.yaml | 12 + container-images/tcib/base/os/tempest/tempest.yaml | 9 + .../tcib/base/os/zaqar-wsgi/zaqar-wsgi.yaml | 10 + container-images/tcib/base/ovn-base/ovn-base.yaml | 9 + .../ovn-base/ovn-controller/ovn-controller.yaml | 6 + .../ovn-nb-db-server/ovn-nb-db-server.yaml | 8 + .../tcib/base/ovn-base/ovn-northd/ovn-northd.yaml | 12 + .../ovn-sb-db-server/ovn-sb-db-server.yaml | 8 + .../tcib/base/qdrouterd/qdrouterd.yaml | 11 + container-images/tcib/base/rabbitmq/rabbitmq.yaml | 18 + container-images/tcib/base/redis/redis.yaml | 19 + container-images/tcib/base/rsyslog/rsyslog.yaml | 9 + .../tcib/base/tripleoclient/tripleoclient.yaml | 16 + container-images/tripleo_containers.yaml | 229 +++++++++++ .../tripleo_kolla_template_overrides.j2 | 15 +- healthcheck/nova-libvirt | 2 +- .../check_for_default_tag-09fe34d2ac434890.yaml | 6 + .../limit_over_blacklist-3ce81ecf04b09997.yaml | 10 + scripts/containerfile-converter.py | 245 ++++++++++++ setup.cfg | 1 - tox.ini | 6 +- tripleo_common/actions/ansible.py | 19 +- tripleo_common/actions/deployment.py | 49 --- tripleo_common/constants.py | 7 +- tripleo_common/image/image_uploader.py | 44 ++- tripleo_common/image/kolla_builder.py | 12 +- tripleo_common/inventory.py | 1 - tripleo_common/templates/deployments.yaml | 4 +- tripleo_common/utils/nodes.py | 15 +- tripleo_common/utils/passwords.py | 13 +- tripleo_common/utils/stack_parameters.py | 5 +- zuul.d/layout.yaml | 36 ++ 154 files changed, 2958 insertions(+), 220 deletions(-) From no-reply at openstack.org Fri Jul 24 18:49:15 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:49:15 -0000 Subject: [release-announce] tripleo-puppet-elements 12.3.1 (ussuri) Message-ID: We are overjoyed to announce the release of: tripleo-puppet-elements 12.3.1: Puppet building rules for OpenStack images. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 12.3.0..12.3.1 ------------------------------------------------- 4eca5b7 Remove centos7 RT repo from centos8 builds 22afbbd Update TOX_CONSTRAINTS_FILE for stable/ussuri f353558 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + elements/overcloud-compute/pre-install.d/03-centos-rt | 2 +- tox.ini | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-) From no-reply at openstack.org Fri Jul 24 18:49:19 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 24 Jul 2020 18:49:19 -0000 Subject: [release-announce] tripleo-image-elements 12.0.1 (ussuri) Message-ID: We are satisfied to announce the release of: tripleo-image-elements 12.0.1: Disk image builder elements for deploying OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.0.0..12.0.1 ------------------------------------------------ e1445603 Update TOX_CONSTRAINTS_FILE for stable/ussuri 5ff1cc0c Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) From no-reply at openstack.org Mon Jul 27 06:07:56 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 06:07:56 -0000 Subject: [release-announce] puppet-tripleo 13.1.0 (victoria) Message-ID: We are tickled pink to announce the release of: puppet-tripleo 13.1.0: Puppet module for OpenStack TripleO This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. 13.1.0 ^^^^^^ New Features ************ * Added support for VxFlexOS backend driver Deprecation Notes ***************** * Keepalived is deprecated in Ussuri and will be removed in the next cycle. * Resource tripleo::profile::base::cinder::volume::dellemc_vxflexos will be removed in W-Release. * Resource tripleo::profile::base::cinder::volume::dellemc_xtremio_iscsi will be removed in V-Release. Changes in puppet-tripleo 12.3.0..13.1.0 ---------------------------------------- 545eba0d first devel release for Victoria ( victoria-1 ) a4ea2451 Test neutron::db inclusion 07e0aca2 Use relative names to include classes 6cfb7d36 Fix up cluster_setup_extras usage f1994dba Switch RGW HAProxy healthcheck to use special RGW healthcheck url 4243119d Add FFU support for ceph_nfs a37229ff Remove support for token_flush cron job 4e8a3933 Add support for trust_flush cron job in keystone c1e09672 Ensure that the HAProxy certificate is updated f1b34196 Remove stonith level warning when running on a non cluster node be2550f6 Include neutron::db cfc20b28 Make the additional_erl_args change more independent 344c4b5c Remove deprecated keystone::enable_bootstrap 3e942b7f Ensure post-save certmonger scripts target the right HA container a21b5ee7 Fix haproxy ceph dashboard condition 4d386424 Fix RABBITMQ_SERVER_ADDITIONAL_ERL_ARGS usage with a proper override mechanism 7cb19e66 Cleanup remaining implementation for EC2 API 0606e22e Make promote timeout configurable f6f878d4 Enable to modify params of logrotate-crond.conf 9befc582 Fix the default values for ca_file and cert_file 436bfaa1 Make haproxy.pp honor EnableInternalTLS for rgw 7c485d82 Include placement::api class a2a04ed4 Remove obsolete 'http' backend from glance configuration c76bbf87 Switch to newer openstackdocstheme and reno versions 14fadeda Stop to use the __future__ module. 3fa8c735 Remove selinux relabel mount option for neutron 3d14df74 metadata.json: bump version for the start of Victoria c71e527f Support for Dell EMC VXFlexOS Backend 54a9aba2 Update master for stable/ussuri dab61ed2 Include vendordata class in nova-compute 5c3e736e Allow the Mistral tunnel timeout to be configurable. 5df2066a Include vendordata in nova-api and nova-metadata-api 6a27375c Deprecating ScaleIO Volume Config 50c5e1e6 Only run the VIP creation code when enable_load_balancer is set to true 57d04446 Deprecate Keepalived d185cbf0 Allow OCF resources to be created with --force 72ccc63d Remove support for Neutron FUJITSU plugin f0f031b2 Finish HAProxy config for metrics_qdr 91f366c5 Fix ipv6 addrlabel for ceph-nfs e5612139 Deprecating Dell EMC Xtremio Iscsi Volume Config ef254f7d Use puppet-openstack-module-unit-jobs to define unit test jobs f04f4d14 Add the missing ':' in README Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- files/certmonger-haproxy-refresh.sh | 5 +- files/certmonger-rabbitmq-refresh.sh | 2 +- files/cm_ipa_subca_wrapper.py | 1 - lib/facter/stonith_levels.rb | 2 +- manifests/haproxy.pp | 99 +++++-------- manifests/keepalived.pp | 2 + manifests/network/contrail/analytics.pp | 4 +- manifests/network/contrail/analyticsdatabase.pp | 4 +- manifests/network/contrail/config.pp | 6 +- manifests/network/contrail/control.pp | 4 +- manifests/network/contrail/database.pp | 4 +- manifests/network/contrail/heat.pp | 2 +- manifests/network/contrail/neutron_plugin.pp | 8 +- manifests/network/contrail/provision.pp | 4 +- manifests/network/contrail/vrouter.pp | 4 +- manifests/network/contrail/webui.pp | 2 +- .../profile/base/ceilometer/agent/notification.pp | 2 +- manifests/profile/base/cinder/volume.pp | 14 ++ .../profile/base/cinder/volume/dellemc_vxflexos.pp | 55 +++++++ .../base/cinder/volume/dellemc_xtremio_iscsi.pp | 3 + manifests/profile/base/cinder/volume/scaleio.pp | 3 + manifests/profile/base/database/mysql.pp | 3 - manifests/profile/base/etcd.pp | 2 +- manifests/profile/base/glance/api.pp | 2 +- manifests/profile/base/haproxy.pp | 2 +- manifests/profile/base/keystone.pp | 3 +- manifests/profile/base/logging/logrotate.pp | 10 ++ manifests/profile/base/metrics/collectd.pp | 21 +-- manifests/profile/base/metrics/qdr.pp | 10 +- manifests/profile/base/mistral.pp | 2 +- .../profile/base/neutron/opencontrail/vrouter.pp | 2 +- manifests/profile/base/neutron/plugins/ml2.pp | 10 -- manifests/profile/base/neutron/server.pp | 1 + manifests/profile/base/nova/api.pp | 1 + manifests/profile/base/nova/compute.pp | 1 + manifests/profile/base/nova/metadata.pp | 1 + manifests/profile/base/pacemaker.pp | 17 +-- manifests/profile/base/placement/api.pp | 1 + manifests/profile/base/rabbitmq.pp | 27 +++- manifests/profile/base/zaqar.pp | 2 +- manifests/profile/pacemaker/ceph_nfs.pp | 20 ++- manifests/profile/pacemaker/database/mysql.pp | 8 +- .../profile/pacemaker/database/mysql_bundle.pp | 14 +- .../profile/pacemaker/database/redis_bundle.pp | 5 + manifests/profile/pacemaker/haproxy.pp | 2 +- manifests/profile/pacemaker/ovn_dbs_bundle.pp | 163 +++++++++++---------- manifests/profile/pacemaker/rabbitmq_bundle.pp | 5 + metadata.json | 4 +- .../keepalived_deprecated-199df5a0f3f35189.yaml | 4 + ...caleio_driver_deprecation_4468457faab68824.yaml | 4 + .../notes/vxflexos-driver-aec8e372280c44e6.yaml | 3 + ...io_old_driver_deprecation_3368457faab68824.yaml | 4 + releasenotes/source/conf.py | 13 +- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 + .../tripleo_profile_base_cinder_volume_spec.rb | 24 ++- .../tripleo_profile_base_cinder_vxflexos_spec.rb | 58 ++++++++ .../tripleo_profile_base_glance_api_spec.rb | 3 +- spec/classes/tripleo_profile_base_keystone_spec.rb | 18 +-- .../tripleo_profile_base_neutron_server_spec.rb | 6 + spec/classes/tripleo_profile_base_nova_api_spec.rb | 8 + .../tripleo_profile_base_nova_compute_spec.rb | 11 +- .../tripleo_profile_base_nova_metadata_spec.rb | 6 + .../tripleo_profile_base_placement_api_spec.rb | 5 + spec/fixtures/hieradata/default.yaml | 1 - templates/logrotate/containers_logrotate.conf.erb | 4 +- templates/neutron/dibbler-client.epp | 2 +- templates/neutron/dnsmasq.epp | 2 +- templates/neutron/haproxy.epp | 2 +- templates/neutron/keepalived.epp | 2 +- templates/neutron/radvd.epp | 2 +- zuul.d/layout.yaml | 17 +-- 74 files changed, 484 insertions(+), 299 deletions(-) From no-reply at openstack.org Mon Jul 27 06:09:46 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 06:09:46 -0000 Subject: [release-announce] tripleo-common 12.5.0 (victoria) Message-ID: We are tickled pink to announce the release of: tripleo-common 12.5.0: A common library for TripleO workflows. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 12.5.0 ^^^^^^ Bug Fixes * When the default tag doesn't exist in the container repo during container image prepare, and a tag wasn't set in the actual input for ContainerImagePrepare, the latest tag from the repo will be used instead of failing with a not found error. * Fix bug 1887692 so limit_hosts will take precedence over the blacklisted_hostnames. And therefore Ansible won't be run with two --limit if both limit hosts and blacklisted hostnames are in use. When we want to run Ansible on specific hosts, we will ignore the blacklisted nodes and assume we know what we do. In the case of the scale-down scenario, the unreachable nodes are ignored. Changes in tripleo-common 12.4.0..12.5.0 ---------------------------------------- d2431b95 Revert "Remove chunk size for url stream" e6634751 Retry fetching {{ deployment_uuid }}.notify.json file 76bc13e3 ansible: limit_hosts now takes precedence over blacklisted_hostnames 1b22253e TCIB: add python3-pynacl to mariadb image 415457e6 TCIB: bump ceph image to align with kolla images 0c4de9c7 Don't assume default tag exists in container repo c19ee504 image_uploader: switch stdout_callback to tripleo_dense 4d26b5dc TCIB: add etcd user to the kolla group 733caa90 Switch tripleo-cross-tripleoclient to python 3.7 af74c389 Relax filter_images_with_labels() and re-add kolla_version 05b24009 Remove the duplicated entry of designate-base dfe80685 (TCIB) Remove validation related things from mistral container c1dad1ce Add tripleo_states to default callback whitelist 7d2c2531 Catch exception if servers are in error state with no bm_node attached 55f6aecf [Q->T] Include manila in the Queens to Train Upgrade db71bdb6 Drop systemd support from nsswitch.conf 7ecc2634 tcib: move cradox to gnocchi-base & enable ci on scenario001 679aeb56 Run standalone jobs with locally built images b440733f Ensure lanplus is unset when using redfish ed3fdb77 Fix stdout_callback 97c7d267 Set undercloud ansible_connection to local 8ea44dbd Remove Validations Mistral Workflows 9f499a22 Revert "Revert "Remove config-download related mistral actions"" e7847afb Implement tripleo-cross-tripleoclient-py38 21b55a02 Run tripleo-build-containers-ubi-8 under specific conditions 4eceb236 Add ensure_global_symlinks: true c915208f Revert "Remove config-download related mistral actions" 3c8f2144 Fix OVN Octavia provider driver package name ff9fe2ed Add interface-names to Rhel8 images 2c47084b Remove config-download related mistral actions b471d2cd Remove AnsibleGenerateInventoryAction mistal action ab65e221 tcib/ceilometer-base: remove panko dependency b84805d3 Implement a new Container Images layout cded1f63 Switch to newer openstackdocstheme and reno versions 45d650be Revert "Add kolla template override to remove python3-networking-mlnx" 4e23fd93 Remove tripleoclient container f6942744 Fix nova-virtlogd container healthcheck d472c88e Add Python3 victoria unit tests df6008b2 Update master for stable/ussuri 9caed1b8 Add support for python 3.8 4d4c9c0b Strictly check pm_type string d1662ad4 Do not rotate CephX secrets d0c60a28 Change generate_ansible_inventory() arguments 49a3d13e Fix dry-run for "remote copy deployment file" task c3b47051 Remove unnecessary Ceph{Admin,Mon,Mds}Key constants 4349f209 Remove tripleo.deployment.overcloudrc action 0186702a Switch to tripleo_dense b3c87dda Switch to tripleo stdout callback 32c96fe4 Add Octavia use of the rsyslog image Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 1 + container-images/kolla/base/httpd_setup.sh | 20 + container-images/kolla/base/set_configs.py | 436 +++++++++++++++++++++ container-images/kolla/base/start.sh | 18 + container-images/kolla/base/sudoers | 18 + container-images/kolla/glance-api/extend_start.sh | 9 + container-images/kolla/horizon/extend_start.sh | 126 ++++++ container-images/kolla/iscsid/extend_start.sh | 7 + container-images/kolla/keystone/extend_start.sh | 31 ++ container-images/kolla/mariadb/extend_start.sh | 35 ++ .../kolla/mariadb/security_reset.expect | 58 +++ .../kolla/neutron-base/neutron_sudoers | 6 + .../ovn/ovn-nb-db-server/start_nb_db_server.sh | 28 ++ .../ovn/ovn-sb-db-server/start_sb_db_server.sh | 29 ++ container-images/kolla/rabbitmq/extend_start.sh | 16 + container-images/kolla/swift-base/swift-rootwrap | 10 + container-images/kolla/swift-base/swift-sudoers | 2 + .../kolla/tripleoclient/create_super_user.sh | 18 + container-images/overcloud_containers.yaml | 2 - container-images/overcloud_containers.yaml.j2 | 18 +- container-images/tcib/base/base.yaml | 55 +++ container-images/tcib/base/collectd/collectd.yaml | 64 +++ container-images/tcib/base/cron/cron.yaml | 6 + container-images/tcib/base/etcd/etcd.yaml | 8 + container-images/tcib/base/haproxy/haproxy.yaml | 10 + .../tcib/base/keepalived/keepalived.yaml | 6 + container-images/tcib/base/mariadb/mariadb.yaml | 36 ++ .../tcib/base/memcached/memcached.yaml | 9 + .../tcib/base/multipathd/multipathd.yaml | 6 + .../tcib/base/os/aodh-base/aodh-api/aodh-api.yaml | 11 + .../tcib/base/os/aodh-base/aodh-base.yaml | 6 + .../aodh-base/aodh-evaluator/aodh-evaluator.yaml | 7 + .../os/aodh-base/aodh-listener/aodh-listener.yaml | 7 + .../os/aodh-base/aodh-notifier/aodh-notifier.yaml | 7 + .../barbican-base/barbican-api/barbican-api.yaml | 11 + .../tcib/base/os/barbican-base/barbican-base.yaml | 7 + .../barbican-keystone-listener.yaml | 7 + .../barbican-worker/barbican-worker.yaml | 7 + .../base/os/ceilometer-base/ceilometer-base.yaml | 8 + .../ceilometer-central/ceilometer-central.yaml | 11 + .../ceilometer-compute/ceilometer-compute.yaml | 10 + .../ceilometer-ipmi/ceilometer-ipmi.yaml | 11 + .../ceilometer-notification.yaml | 8 + .../base/os/cinder-base/cinder-api/cinder-api.yaml | 11 + .../cinder-base/cinder-backup/cinder-backup.yaml | 13 + .../tcib/base/os/cinder-base/cinder-base.yaml | 15 + .../cinder-scheduler/cinder-scheduler.yaml | 3 + .../cinder-base/cinder-volume/cinder-volume.yaml | 18 + .../designate-api/designate-api.yaml | 6 + .../designate-backend-bind9.yaml | 6 + .../base/os/designate-base/designate-base.yaml | 9 + .../designate-central/designate-central.yaml | 6 + .../designate-mdns/designate-mdns.yaml | 6 + .../designate-producer/designate-producer.yaml | 6 + .../designate-sink/designate-sink.yaml | 6 + .../designate-worker/designate-worker.yaml | 7 + .../tcib/base/os/glance-api/glance-api.yaml | 22 ++ .../os/gnocchi-base/gnocchi-api/gnocchi-api.yaml | 7 + .../tcib/base/os/gnocchi-base/gnocchi-base.yaml | 13 + .../gnocchi-metricd/gnocchi-metricd.yaml | 7 + .../gnocchi-statsd/gnocchi-statsd.yaml | 7 + .../tcib/base/os/heat-base/heat-all/heat-all.yaml | 8 + .../os/heat-base/heat-api-cfn/heat-api-cfn.yaml | 7 + .../tcib/base/os/heat-base/heat-api/heat-api.yaml | 7 + .../tcib/base/os/heat-base/heat-base.yaml | 10 + .../base/os/heat-base/heat-engine/heat-engine.yaml | 6 + container-images/tcib/base/os/horizon/horizon.yaml | 18 + .../base/os/ironic-base/ironic-api/ironic-api.yaml | 11 + .../tcib/base/os/ironic-base/ironic-base.yaml | 6 + .../ironic-conductor/ironic-conductor.yaml | 34 ++ .../ironic-inspector/ironic-inspector.yaml | 9 + .../base/os/ironic-base/ironic-pxe/ironic-pxe.yaml | 14 + container-images/tcib/base/os/iscsid/iscsid.yaml | 12 + .../tcib/base/os/keystone/keystone.yaml | 23 ++ .../base/os/manila-base/manila-api/manila-api.yaml | 10 + .../tcib/base/os/manila-base/manila-base.yaml | 6 + .../manila-scheduler/manila-scheduler.yaml | 3 + .../os/manila-base/manila-share/manila-share.yaml | 14 + .../os/mistral-base/mistral-api/mistral-api.yaml | 11 + .../tcib/base/os/mistral-base/mistral-base.yaml | 9 + .../mistral-engine/mistral-engine.yaml | 7 + .../mistral-event-engine/mistral-event-engine.yaml | 7 + .../mistral-executor/mistral-executor.yaml | 19 + .../ironic-neutron-agent/ironic-neutron-agent.yaml | 8 + .../neutron-agent-base/neutron-agent-base.yaml | 10 + .../neutron-dhcp-agent/neutron-dhcp-agent.yaml | 3 + .../neutron-l3-agent/neutron-l3-agent.yaml | 3 + .../neutron-metadata-agent-ovn.yaml | 7 + .../tcib/base/os/neutron-base/neutron-base.yaml | 18 + .../neutron-metadata-agent.yaml | 3 + .../neutron-openvswitch-agent.yaml | 7 + .../neutron-server-ovn/neutron-server-ovn.yaml | 12 + .../neutron-server/neutron-server.yaml | 11 + .../neutron-sriov-agent/neutron-sriov-agent.yaml | 7 + .../tcib/base/os/nova-base/nova-api/nova-api.yaml | 12 + .../tcib/base/os/nova-base/nova-base.yaml | 6 + .../nova-compute-ironic/nova-compute-ironic.yaml | 14 + .../os/nova-base/nova-compute/nova-compute.yaml | 29 ++ .../nova-base/nova-conductor/nova-conductor.yaml | 7 + .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 29 ++ .../nova-base/nova-novncproxy/nova-novncproxy.yaml | 8 + .../nova-base/nova-scheduler/nova-scheduler.yaml | 12 + .../tcib/base/os/novajoin-base/novajoin-base.yaml | 6 + .../novajoin-notifier/novajoin-notifier.yaml | 2 + .../novajoin-server/novajoin-server.yaml | 2 + .../os/octavia-base/octavia-api/octavia-api.yaml | 12 + .../tcib/base/os/octavia-base/octavia-base.yaml | 6 + .../octavia-health-manager.yaml | 7 + .../octavia-housekeeping/octavia-housekeeping.yaml | 7 + .../octavia-worker/octavia-worker.yaml | 7 + container-images/tcib/base/os/os.yaml | 20 + .../tcib/base/os/placement-api/placement-api.yaml | 11 + .../os/swift-base/swift-account/swift-account.yaml | 7 + .../tcib/base/os/swift-base/swift-base.yaml | 12 + .../swift-container/swift-container.yaml | 7 + .../os/swift-base/swift-object/swift-object.yaml | 7 + .../swift-proxy-server/swift-proxy-server.yaml | 12 + container-images/tcib/base/os/tempest/tempest.yaml | 9 + .../tcib/base/os/zaqar-wsgi/zaqar-wsgi.yaml | 10 + container-images/tcib/base/ovn-base/ovn-base.yaml | 9 + .../ovn-base/ovn-controller/ovn-controller.yaml | 6 + .../ovn-nb-db-server/ovn-nb-db-server.yaml | 8 + .../tcib/base/ovn-base/ovn-northd/ovn-northd.yaml | 12 + .../ovn-sb-db-server/ovn-sb-db-server.yaml | 8 + .../tcib/base/qdrouterd/qdrouterd.yaml | 11 + container-images/tcib/base/rabbitmq/rabbitmq.yaml | 18 + container-images/tcib/base/redis/redis.yaml | 19 + container-images/tcib/base/rsyslog/rsyslog.yaml | 9 + .../tcib/base/tripleoclient/tripleoclient.yaml | 16 + container-images/tripleo_containers.yaml | 229 +++++++++++ .../tripleo_kolla_template_overrides.j2 | 4 - healthcheck/nova-libvirt | 2 +- image-yaml/overcloud-hardened-images-rhel8.yaml | 2 + image-yaml/overcloud-images-ceph-rhel8.yaml | 2 + image-yaml/overcloud-images-rhel8.yaml | 2 + lower-constraints.txt | 8 +- .../check_for_default_tag-09fe34d2ac434890.yaml | 6 + .../limit_over_blacklist-3ce81ecf04b09997.yaml | 10 + releasenotes/source/conf.py | 8 +- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 + requirements.txt | 2 +- scripts/containerfile-converter.py | 245 ++++++++++++ scripts/run-validation | 111 ------ setup.cfg | 9 +- sudoers | 16 - test-requirements.txt | 6 +- tox.ini | 7 +- tripleo_common/actions/ansible.py | 50 +-- tripleo_common/actions/config.py | 81 ---- tripleo_common/actions/deployment.py | 49 --- tripleo_common/actions/validations.py | 97 ----- tripleo_common/constants.py | 7 +- tripleo_common/image/image_uploader.py | 47 ++- tripleo_common/image/kolla_builder.py | 12 +- tripleo_common/inventory.py | 11 +- tripleo_common/templates/deployments.yaml | 4 +- tripleo_common/utils/nodes.py | 55 +-- tripleo_common/utils/passwords.py | 13 +- tripleo_common/utils/plan.py | 11 +- tripleo_common/utils/stack.py | 3 +- tripleo_common/utils/stack_parameters.py | 5 +- tripleo_common/utils/validations.py | 204 ---------- workbooks/validations.yaml | 224 ----------- zuul.d/cross-jobs.yaml | 9 + zuul.d/layout.yaml | 48 ++- 175 files changed, 2949 insertions(+), 1387 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a928ca51..67e9f8a7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -32 +32 @@ metalsmith>=0.13.0 # Apache-2.0 -jsonschema>=2.6.0 # MIT +jsonschema>=3.2.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 815966b4..cc5fc015 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -openstackdocstheme>=1.31.2 # Apache-2.0 +openstackdocstheme>=2.2.1 # Apache-2.0 @@ -10 +10 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx>=1.8.0,!=2.1.0 # BSD +sphinx>=2.0.0,!=2.1.0 # BSD @@ -16 +16 @@ PyYAML>=3.12 # MIT -reno>=2.5.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 27 06:12:16 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 06:12:16 -0000 Subject: [release-announce] python-tripleoclient 13.5.0 (victoria) Message-ID: We are satisfied to announce the release of: python-tripleoclient 13.5.0: TripleO client This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.5.0 ^^^^^^ New Features ************ * The upgrade/update commands have a prompt by default now that ask for confirmation before proceeding. It'll prevent an operator to run the command and cause the problems to infrastructure. This prompt can be skipped with --yes/-y argument. Deprecation Notes ***************** * undercloud_enable_paunch option is removed as we retire Paunch project. * The ffwd-upgrade command isn't needed anymore since Queens. The ffwd upgrade now relies on the overcloud upgrade commands, therefore there is no need to keep the old ffwd-upgrade commands around as they could just cause confusion to the user. Changes in python-tripleoclient 13.3.0..13.5.0 ---------------------------------------------- bced6469 Eliminate the usage of kwargs in update_deployment_plan a39424c1 Ensure --limit option takes precedence over skiplist 47dc9aae Throw warning if --limit used with a skip list in Heat 5805ee4d Don't run config-download for --stack-only 7a044ca2 Add "yes" prompt for update/upgrades commands 9c53cb3e Fix package manager used during undercloud packages update 6fe832a1 Correct a typo in a string 33123f6e Log error when fail_on_rc disabled 7e7c3c23 Add tripleo_states to default callback whitelist 8e733109 Remove ffwd-upgrade commands from tripleoclient. cf195c4b Rename UpgradeConvergeOvercloud into UpgradeConverge. 7b75187a Fix extra_env_files option and type in format string c9d05765 Add CLI options for introspection command 921bcef2 Set portmap cidr fields to extracted CIDR 5b639581 overcloud_deploy: raise at the end if Ansible Runner had exception e4d9bb17 Don't use stack name in default config_download_dir fbc1eba8 Identify not allowed parameters in upgrades. 9d16152e Stop to use the __future__ module. 6f67c20a Further cleanup unit tests d57fb767 zuul: run standalone job with locally built images adf29a1e Remove actions.config and AnsibleGenerateInventoryAction references 9806e390 Run tripleo-build-containers-ubi-8 under specific conditions 8d2cc4b3 Refactor upgrade prepare and converge. 064ce9c8 Remove translation sections from setup.cfg 6dee93a9 Implement validations-libs framework for ALL validator commands 846836a1 Add backup functionality to Openstack client for undercloud and overcloud. eb6c831f Don't run get_config() in update/upgrade prepare a20dc2d8 Use playbook for config-download export 97d54f2b Detect TLS for pre-provisioned nodes 4967f4f6 Add tripleo container image hotfix command 2edb378b Remove undercloud_enable_paunch option 1c09e837 Add openstack tripleo container image build ed470de9 Use tripleo custom stdout plugins in utils 185d9f89 Bump tripleo-common f6c366eb Switch to newer openstackdocstheme and reno versions 1b552243 Use cli-config-download.yaml playbook 671f9453 Update master for stable/ussuri d33d6d87 Stop patching tripleo_common.actions.deployment.OvercloudRcAction e001960d Don't set DeployIdentifier in tripleoclient 2f9215b2 Remove shenanigans for stack event verbosity ce948ae0 Configure ansible forks based on cores Diffstat (except docs and test files) ------------------------------------- babel.cfg | 1 - bindep.txt | 1 + lower-constraints.txt | 5 +- .../notes/paunch_retiring-eed2580b80dcbe74.yaml | 4 + ...ove_ffwd-upgrade_commands-579f885957f02863.yaml | 7 + .../upgrade_update_prompt-f6ace53f02b62fa0.yaml | 7 + releasenotes/source/conf.py | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 + requirements.txt | 4 +- setup.cfg | 24 +- tripleoclient/config/undercloud.py | 4 - tripleoclient/constants.py | 28 +- tripleoclient/exceptions.py | 12 + tripleoclient/heat_launcher.py | 1 - .../__init__.py | 0 .../v1/overcloud_config/test_overcloud_config.py | 47 +- .../v1/overcloud_deploy/test_overcloud_deploy.py | 69 ++- .../test_overcloud_ffwd_upgrade.py | 231 -------- .../v1/overcloud_update/test_overcloud_update.py | 18 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 51 +- .../v2/{undercloud => container_image}/__init__.py | 0 .../test_tripleo_container_image.py | 278 +++++++++ tripleoclient/utils.py | 278 +-------- tripleoclient/v1/overcloud_backup.py | 107 ++++ tripleoclient/v1/overcloud_cell.py | 2 - tripleoclient/v1/overcloud_config.py | 53 +- tripleoclient/v1/overcloud_deploy.py | 119 ++-- tripleoclient/v1/overcloud_export.py | 7 +- tripleoclient/v1/overcloud_external_update.py | 14 + tripleoclient/v1/overcloud_external_upgrade.py | 15 + tripleoclient/v1/overcloud_ffwd_upgrade.py | 213 ------- tripleoclient/v1/overcloud_image.py | 2 - tripleoclient/v1/overcloud_netenv_validate.py | 1 - tripleoclient/v1/overcloud_node.py | 27 +- tripleoclient/v1/overcloud_plan.py | 2 - tripleoclient/v1/overcloud_roles.py | 2 - tripleoclient/v1/overcloud_update.py | 44 +- tripleoclient/v1/overcloud_upgrade.py | 95 ++-- tripleoclient/v1/tripleo_config.py | 1 - tripleoclient/v1/tripleo_deploy.py | 17 +- tripleoclient/v1/tripleo_launch_heat.py | 1 - tripleoclient/v1/tripleo_validator.py | 495 ++++------------ tripleoclient/v1/undercloud.py | 6 +- tripleoclient/{v2 => v1}/undercloud_backup.py | 72 ++- tripleoclient/v1/undercloud_config.py | 9 +- tripleoclient/v1/undercloud_preflight.py | 2 +- tripleoclient/v2/overcloud_node.py | 16 + tripleoclient/v2/tripleo_container_image.py | 627 +++++++++++++++++++++ tripleoclient/workflows/baremetal.py | 29 +- tripleoclient/workflows/deployment.py | 141 ++--- tripleoclient/workflows/package_update.py | 11 +- tripleoclient/workflows/parameters.py | 81 +++ tripleoclient/workflows/plan_management.py | 27 +- tripleoclient/workflows/scale.py | 10 +- zuul.d/layout.yaml | 8 + 73 files changed, 2190 insertions(+), 1842 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b252e10f..98a26e00 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +5,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -Babel!=2.4.0,>=2.3.4 # BSD @@ -18 +17 @@ websocket-client>=0.44.0 # LGPLv2+ -tripleo-common>=12.2.0 # Apache-2.0 +tripleo-common>=12.4.0 # Apache-2.0 @@ -20,0 +20 @@ ansible-runner>=1.4.4 # Apache 2.0 +validations-libs>=1.0.0 From no-reply at openstack.org Mon Jul 27 06:12:55 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 06:12:55 -0000 Subject: [release-announce] os-net-config 12.4.0 (victoria) Message-ID: We are delighted to announce the release of: os-net-config 12.4.0: OpenStack network configuration This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 12.3.0..12.4.0 --------------------------------------- 869d3c1 Switch from unittest2 compat methods to Python 3.x methods 247f54d Set OVSBOOTPROTO to dhcp when using dhcpv6 with OVS d0fa8a7 Missing document start "---" e662da0 Switch to newer openstackdocstheme and reno versions 0544ee1 Add Python3 victoria unit tests 2651fa4 Update master for stable/ussuri 00b3ae2 Add support for python 3.8 Diffstat (except docs and test files) ------------------------------------- os_net_config/impl_ifcfg.py | 6 +++--- releasenotes/source/conf.py | 8 +++++++- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 ++++++ requirements.txt | 2 +- setup.cfg | 1 + test-requirements.txt | 2 +- tox.ini | 2 +- zuul.d/layout.yaml | 3 ++- 14 files changed, 57 insertions(+), 18 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7253862..abf39eb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ PyYAML>=3.10.0 # MIT -jsonschema>=2.0.0 # MIT +jsonschema>=3.2.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 8fa262d..35c208b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ testtools>=1.4.0 # MIT -reno>=2.5.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 27 06:14:04 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 06:14:04 -0000 Subject: [release-announce] tripleo-heat-templates 12.5.0 (victoria) Message-ID: We high-spiritedly announce the release of: tripleo-heat-templates 12.5.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.5.0 ^^^^^^ New Features ************ * Add new BarbicanClient tripleo service for configuring DCN/Edge nodes to access a barbican service running in the control plane. The client service is disabled by default, and can be enabled by including the environments/services/barbican-edge.yaml environment file when deploying a DCN/Edge stack. * Added new PublicTLSCAFile parameter, that is used to set the ca cert in clouds.yaml for keystone public endpoint. This defaults to empty string ('') assuming that the certs are already trusted. * Add GlanceImagePrefetcherInterval parameter to run periodic job which fetches the queued images for caching in cache directory, when image cache is enabled. * Add boolean parameter *NovaSchedulerQueryPlacementForAvailabilityZone* that sets *scheduler/query_placement_for_availability_zone* parameter. It allows the scheduler to look up a host aggregate with metadata key of availability zone set to the value provided by incoming request, and request result from placement be limited to that aggregate. Default value for NovaSchedulerQueryPlacementForAvailabilityZone is false. * Adds the "OctaviaLogOffload" setting to enable amphora log offloading. * Added TCP Segmentation Offload (TSO) support for ovs-dpdk. * Added support for VxFlexOS cinder block storage backend driver * A new Heat parameter 'ZaqarWsTimeout' exposes the Puppet variable 'tripleo::haproxy::zaqar_ws_timeout_tunnel'. This allows operators to configure the Mistral API timeout. It currently defaults to four hours. Deprecation Notes ***************** * Usage of the option "NeutronFirewallDriver" which was used to set "firewall_driver" config option in the Neutron server's config is now deprecated. Firewall driver should be set per agent in the agent's config. It can be done using "NeutronOVSFirewallDriver" option. Option in the Neutron server was in there just for backward compatybility reasons but since Newton release all Neutron agents are reporting to the server what firewall driver is used so there is no need to keep this legacy, server side option anymore. * Paunch was deprecated in Ussuri and is now being retired, to be fully replaced by the new tripleo-ansible role, tripleo_container_manage. * Support for Neutron FUJITSU plugin has been removed. * Resource OS::TripleO::Services::CinderBackendScaleIO is no longer supported. Use the new resource OS::TripleO::Services::CinderBackendDellEMCVxFlexOS. * NeutronSriovNumVFs parameter to configure the VFs for SR-IOV is removed. Instead, use the network interface types sriov_pf in the nic configs to configure the VFs for SR-IOV devices. Bug Fixes ********* * Ensure the barbican Key Manager settings are configured on DCN/Edge nodes when the barbican service is deployed in the control plane. See bug 1886070 (https://bugs.launchpad.net/tripleo/+bug/1886070). Other Notes *********** * Ensure we're using only /run location, since /var/run is a symlink to /run * The ValidateNtp has been removed from the all nodes validation configuration. During the time sync configuration we already do a check to ensure the ntp servers are available. If they are not we will fail with an appropriate message. The ValidateNtp option came from a time before we could fail in a more explicit way. Changes in tripleo-heat-templates 12.3.0..12.5.0 ------------------------------------------------ 27ec857cf Use a single task for fact gathering 586416703 Remove /var/lib/config-data context task 98d2271d1 Drop the relabel flag for bind-mount b29099559 Replace deprecated ironoc::inspector parameters in puppet-ironic 233710ad5 Bind mount /var/lib/container-config-scripts inside the restart bundles 4395e4a3c Add become: true to the container json file modules 107b9c4c9 Relax facts gathering plays on the overcloud 029722ef1 Use tripleo linear when not using tripleo free af30d7d29 deploy-steps-playbooks-common: fix logic for scale_ignore_unreachable 4354d8ed0 FFU support for ceph_nfs 1cbb95e09 Allow disabling the ovn provider in scen013 120cb95e2 Add scenario013: Octavia standalone without Ceph c587d74ae Generate container startup configs with a new module a5f974075 Switch deploy steps to tripleo_free d573f4e87 Simplify host entries generation 881565960 Remove duplicated hieradata bd4b57c26 Remove /run from some services 8e3c4f572 Revert "Prevent nftables to interfere with tripleo firewall" 5080e45fd Add BarbicanClient service for configuring edge sites 0e8a7ba20 Prevent ovn dbs related facts to run on each step. e75d05263 Prevent skip package fact to run on all steps. df8003384 Allow more tasks to be run in check mode 938166b93 Don't set RABBITMQ_SERVER_ERL_ARGS 53900ae3a Fix bind mount volumes for novajoin containers 1192ea168 Task should fail on any failure e047d8314 Ensure we use only /run instead of /var/run 1f9942fd7 Always clear cached facts first 4e39acd14 Fix privilege escalation 89840a543 Add TSO configuration for OVS DPDK datapath. c9cd67124 Add filestore to bluestore migration tags c67c53a8d undercloud/heat: set YAQL memory quota to 200000 f82af5595 Collapse deploy steps 230481674 Move sidecar kill scripts to host prep 88446a6d8 Cleanup all container startup configs before generating the new ones bff0c6cfa Fix default BlockStorageCinderVolume template be280e39c Stop to use the __future__ module. 9cf9a5a8a Check for correct column name for execution show 70eacd3da Convert roles section into tasks-include_role in deploy-steps.j2. a5b5230ec Use neutron::db::database_connection 777920dfb Exclude /etc/hostname 2acb0d376 Add new parameter PublicTLSCACert 336425636 Use native YAML syntax in mount tasks 1a48fa61f Sync httpd conf.modules.d configs d37579fd7 Fix Error: invalid arguments you must use just one container 3ef8f6008 Collapse host prep tasks 554844d32 Log neutron.cmd.destroy_patch_ports in to log file d58efb58e Increase the default UpgradeLeappRebootTimeout to 60 mins 832f71096 Fix regexes in yaml-validate.py with python 3.8 a38995a50 Adding amphora architecture to heat templates 4152e78fc Disable Designate service for scenario 03 648cde501 Update octavia playbooks parameters 15dfacb65 Disable presettled metrics 22df3dbcb Move nova online migrations to nova-conductor 620112173 Improve documentations for NovaLibvirtFileBackedMemory 03285912f Disable Sahara in scenario003-standalone 13326b564 Only enable leapp tasks when distribution is correct 0e99ceda4 Add composible service for tls enrollment 11f84b630 Use unittest.mock instead of mock 4b8059c2b Adding env file for octavia with kvm e408b86d8 Increase zaqar max_messages_post_size to 2097152 cfc6dac88 Fix dry-run for NetworkConfig tasks 54a1d4153 Add project template for IPA multinode 95563da90 Ironic create_swift_temp_url_key use internal edpoint a13b7f07f Add resource claim in the environment example 96e26ef81 Elevated privs are required to access files in home directory 1fdfe54cc Allow triggering ceph-ansible filestore-to-bluestore with ceph_fstobs tag b7fbb7b83 Check transfer data flag to skip pacemaker normal upgrade. 524d2d9e7 Remove unused code and environment file of sriov deployment e51920623 Consider user configuration during the derivation of passthrough whitelist ba3ff972a Remove useless hieradata for octavia tls_proxy 4f198c32c Remove some deprecated services 5843a7667 Fix reserved name variable ed2df1a05 Remove ValidateNtp 3a00c029f Deprecate EnablePaunch and remove Paunch support 396b26fe9 Allow overriding InterfaceDefaultRoute with ips_from_pool template 8086310fc Revert "Only enable leapp tasks when distribution is correct" 7bf8d7720 Ensure net.ipv6.conf.lo.disable_ipv6=0 cf5382daf Use empty string for overcloud InternalTLSCAFile param 5e4f319ed Deprecating Old ScaleIO Volume Config ffd31df7d Add reserved ports for some services 93f07d36c Update minion rabbit credentials d3207d8a6 Expose the zaqar_ws_timeout_tunnel variable. 69fe39c8e Update scn003 to exercise ExtraFirewallrules capabilities 57652b8ef Support for Dell EMC VXFlexOS Backend 3c8f4a5af MaxFailPercentage: default to 0 910d54b60 test-requirements: remove python 2.7 dependency for sphinx dbf0e083b Fix syntax error f186f8e45 Add the ability to offload amphora logs 7f2ee8566 Set default InternalTLSCAFile in enable-tls.yaml 3acb698c7 Silence huge human-unreadable logs d56161c5f Make IronicConductorGroup role_specific 1121735b0 Update master for stable/ussuri 0bc1383a6 Force container deletion if namespace does not exist in service_kill e3331ea72 Fix sending SIGTERM to the sidecar containers 1666f1ec3 enable dpdk plugin on neutron ovn and ovs 7c46fd014 Add non-string value support for CephAnsibleEnvironmentVariables a0cbe7672 collectd: add support for mcelog service 4290e8b15 Move chcon for /var/lib/config-data 245fc4403 Modify tls-e service to not install packages by default 2d7bad73a rhsm: add rhsm_release in environment for doc purpose 41addbbf2 Split ansible_limit with a colon. 09742b7ab Fix typo in the description of the Neutron related options 1ed331a45 Add additional files to ipa standalone test ff1361b2b Only enable leapp tasks when distribution is correct ffab078d9 Remove unnecessary check after removing libvirt rpm dependencies a9ab36989 Include tripleo_ceph_workdir role on rgw variables override 2f3888074 Use /32 or /128 netmask for VIPs d76241710 Add an option to adjust help URL in horizon 13b06b524 Enable glance cache prefetcher interval 161071f2d Include copy-image for GlanceEnabledImportMethods for dcn-hci d9bae4c55 Deprecate old NeutronFirewallDriver option fe4253102 Make user value for GlanceImageImportPlugin prevail on logic f14007220 Fix node scaling a6fa60272 Change the :Z mount flag to :z 5b2daa499 Correctly match openvswitch package a833432b1 Update loop_vars de4dc46ea Configure valid_exit_code for startup containers 8d968a213 Add new parameter NovaSchedulerQueryPlacementForAvailabilityZone 18274de03 Remove Ceph{Admin,Mon,Mds}Key parameters 8213618f3 Remove support for Neutron FUJITSU plugin 996b1888d Enable adding packages into Leapp's to_remove/to_install files. 8dbaed0c3 Unify metrics_qdr name to underscore Diffstat (except docs and test files) ------------------------------------- README.rst | 152 +++--- all-nodes-validation.yaml | 6 - ci/common/all-nodes-validation-disabled.yaml | 6 - ci/environments/octavia-kvm.yaml | 7 + ci/environments/scenario000-standalone.yaml | 4 +- .../scenario001-multinode-containers.yaml | 6 +- ci/environments/scenario001-standalone.yaml | 8 +- ci/environments/scenario003-standalone.yaml | 30 +- ci/environments/scenario004-standalone.yaml | 7 +- .../scenario010-multinode-containers.yaml | 2 - ci/environments/scenario010-standalone.yaml | 6 +- ci/environments/scenario013-standalone.yaml | 39 ++ common/container-puppet.py | 576 --------------------- common/container-puppet.sh | 21 +- common/container_startup_configs_tasks.yaml | 19 - common/deploy-steps-playbooks-common.yaml | 56 +- common/deploy-steps-tasks-step-0.j2.yaml | 15 +- common/deploy-steps-tasks-step-1.yaml | 48 +- common/deploy-steps-tasks.yaml | 51 +- common/deploy-steps.j2 | 182 +++---- common/generate-config-tasks.yaml | 48 +- common/hiera-steps-tasks.yaml | 1 + common/host-container-puppet-tasks.yaml | 41 -- .../nova_statedir_ownership.py | 1 - .../placement_wait_for_service.py | 2 - deployed-server/scripts/enable-ssh-admin.sh | 4 +- deployment/README.rst | 8 +- deployment/aodh/aodh-api-container-puppet.yaml | 7 + .../barbican/barbican-api-container-puppet.yaml | 7 + deployment/barbican/barbican-client-puppet.yaml | 60 +++ .../ceilometer-agent-compute-container-puppet.yaml | 2 +- deployment/ceph-ansible/ceph-base.yaml | 16 +- deployment/ceph-ansible/ceph-client.yaml | 5 +- deployment/ceph-ansible/ceph-external.yaml | 5 +- deployment/ceph-ansible/ceph-grafana.yaml | 5 +- deployment/ceph-ansible/ceph-mds.yaml | 12 +- deployment/ceph-ansible/ceph-mgr.yaml | 5 +- deployment/ceph-ansible/ceph-mon.yaml | 22 +- deployment/ceph-ansible/ceph-nfs.yaml | 49 +- deployment/ceph-ansible/ceph-osd.yaml | 5 +- deployment/ceph-ansible/ceph-rbdmirror.yaml | 5 +- deployment/ceph-ansible/ceph-rgw.yaml | 9 +- deployment/cinder/cinder-api-container-puppet.yaml | 7 + .../cinder-backend-dellemc-vxflexos-puppet.yaml | 148 ++++++ .../cinder/cinder-backup-pacemaker-puppet.yaml | 6 +- .../cinder/cinder-common-container-puppet.yaml | 4 + .../cinder/cinder-volume-pacemaker-puppet.yaml | 6 +- deployment/containers-common.yaml | 3 +- deployment/database/mysql-pacemaker-puppet.yaml | 6 +- deployment/database/redis-container-puppet.yaml | 13 +- deployment/database/redis-pacemaker-puppet.yaml | 14 +- .../cinder/cinder-backend-scaleio-puppet.yaml | 25 +- .../openstack-clients-baremetal-puppet.yaml | 55 -- .../docker/docker-baremetal-ansible.yaml | 267 ---------- .../docker/docker-registry-baremetal-ansible.yaml | 74 --- .../neutron/neutron-sriov-host-config.yaml | 92 ---- .../tripleo-firewall-baremetal-puppet.yaml | 179 ------- deployment/glance/glance-api-container-puppet.yaml | 39 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 7 + deployment/haproxy/haproxy-container-puppet.yaml | 34 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 22 +- deployment/haproxy/haproxy-public-tls-inject.yaml | 15 +- deployment/heat/heat-api-cfn-container-puppet.yaml | 7 + deployment/heat/heat-api-container-puppet.yaml | 7 + deployment/horizon/horizon-container-puppet.yaml | 13 + deployment/ipa/ipaservices-baremetal-ansible.yaml | 2 +- deployment/ironic/ironic-api-container-puppet.yaml | 7 + .../ironic/ironic-conductor-container-puppet.yaml | 28 +- .../ironic/ironic-inspector-container-puppet.yaml | 30 +- deployment/ironic/ironic-pxe-container-puppet.yaml | 7 + deployment/kernel/kernel-baremetal-ansible.yaml | 4 + deployment/keystone/keystone-container-puppet.yaml | 15 +- deployment/logrotate/tmpwatch-install.yaml | 3 +- deployment/manila/manila-api-container-puppet.yaml | 7 + deployment/manila/manila-share-common.yaml | 2 +- .../manila/manila-share-pacemaker-puppet.yaml | 6 +- deployment/metrics/collectd-container-puppet.yaml | 12 +- deployment/metrics/qdr-container-puppet.yaml | 28 +- .../mistral/mistral-executor-container-puppet.yaml | 2 +- .../neutron/derive_pci_passthrough_whitelist.py | 246 ++++++++- deployment/neutron/kill-script | 27 +- .../neutron/neutron-api-container-puppet.yaml | 10 +- .../neutron/neutron-dhcp-container-puppet.yaml | 65 ++- .../neutron/neutron-l3-container-puppet.yaml | 93 ++-- .../neutron-ovn-dpdk-config-container-puppet.yaml | 6 + .../neutron-ovs-agent-container-puppet.yaml | 21 +- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 6 +- .../neutron/neutron-plugin-ml2-fujitsu-cfab.yaml | 90 ---- .../neutron/neutron-plugin-ml2-fujitsu-fossw.yaml | 94 ---- deployment/neutron/neutron-plugin-ml2.yaml | 17 +- .../neutron-sriov-agent-container-puppet.yaml | 23 +- deployment/nova/nova-api-container-puppet.yaml | 16 +- deployment/nova/nova-compute-container-puppet.yaml | 22 +- .../nova/nova-conductor-container-puppet.yaml | 9 + deployment/nova/nova-libvirt-container-puppet.yaml | 14 +- .../nova/nova-metadata-container-puppet.yaml | 7 + .../nova-migration-target-container-puppet.yaml | 8 +- .../nova/nova-scheduler-container-puppet.yaml | 9 +- deployment/nova/novajoin-container-puppet.yaml | 4 +- .../octavia/octavia-api-container-puppet.yaml | 19 +- .../octavia/octavia-deployment-config.j2.yaml | 29 +- .../octavia-health-manager-container-puppet.yaml | 84 ++- .../openvswitch-dpdk-baremetal-ansible.yaml | 11 + deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 22 +- deployment/ovn/ovn-metadata-container-puppet.yaml | 49 +- .../pacemaker/clustercheck-container-puppet.yaml | 2 +- .../pacemaker/pacemaker-baremetal-puppet.yaml | 32 +- .../placement/placement-api-container-puppet.yaml | 11 + deployment/podman/podman-baremetal-ansible.yaml | 12 +- deployment/rabbitmq/rabbitmq-container-puppet.yaml | 5 +- ...rabbitmq-messaging-notify-container-puppet.yaml | 2 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 6 +- .../rabbitmq-messaging-pacemaker-puppet.yaml | 6 +- .../rabbitmq-messaging-rpc-container-puppet.yaml | 2 +- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 6 +- deployment/swift/swift-proxy-container-puppet.yaml | 8 +- .../swift/swift-storage-container-puppet.yaml | 2 +- deployment/tls/undercloud-tls.yaml | 99 ++++ .../tripleo-firewall-baremetal-ansible.yaml | 35 +- .../tripleo-packages-baremetal-puppet.yaml | 65 ++- deployment/undercloud/minion-rabbitmq-puppet.yaml | 25 +- deployment/undercloud/undercloud-upgrade.yaml | 2 +- deployment/zaqar/zaqar-container-puppet.yaml | 9 +- environments/cinder-dellemc-vxflexos-config.yaml | 35 ++ environments/cinder-scaleio-config.yaml | 4 + environments/config-debug.yaml | 2 +- environments/dcn-hci.yaml | 10 +- environments/dcn.yaml | 8 - environments/disable-paunch.yaml | 4 +- environments/docker-ha.yaml | 1 - environments/docker-uc-light.yaml | 32 -- environments/docker.yaml | 9 - environments/enable-stf.yaml | 2 +- environments/lifecycle/upgrade-prepare.yaml | 2 + environments/metrics/collectd-write-qdr.yaml | 2 +- environments/neutron-ml2-fujitsu-cfab.yaml | 21 - environments/neutron-ml2-fujitsu-fossw.yaml | 22 - environments/public-tls-undercloud.yaml | 1 + environments/rhsm.yaml | 2 + environments/services-baremetal/neutron-sriov.yaml | 1 - environments/services/barbican-edge.yaml | 4 + environments/services/neutron-ovn-sriov.yaml | 1 - environments/services/neutron-sriov.yaml | 1 - environments/services/undercloud-tls.yaml | 4 + environments/ssl/enable-tls.yaml | 4 + environments/storage-environment.yaml | 4 - environments/storage/glance-nfs.yaml | 2 +- environments/undercloud.yaml | 3 +- environments/undercloud/undercloud-minion.yaml | 4 +- firstboot/os-net-config-mappings.yaml | 2 + lower-constraints.txt | 2 - net-config-standalone.j2.yaml | 6 +- net-config-undercloud.j2.yaml | 6 +- network/endpoints/build_endpoint_map.py | 2 - network/ports/port_from_pool.j2 | 27 +- overcloud-resource-registry-puppet.j2.yaml | 9 +- overcloud.j2.yaml | 84 ++- puppet/role.role.j2.yaml | 37 +- ...tronFirewallDriver-option-f4289b404abcc0b3.yaml | 12 + ...d-barbican-client-for-dcn-7182e8bab41fce21.yaml | 13 + ...publictlscafile-parameter-0fd9c19dcd20be0b.yaml | 6 + ...ce_image_cache_prefetcher-288120ffa6ee2a13.yaml | 6 + .../converge-var_run-to-run-20286a74e780e999.yaml | 4 + ...ent_for_availability_zone-ffd415710a9cb903.yaml | 9 + .../octavia-log-offload-d1617e767f688da1.yaml | 4 + .../notes/ovs-dpdk-tso-f96406621ec69bd1.yaml | 4 + .../notes/paunch_retiring-9aab8248a0b2973b.yaml | 5 + .../notes/remove-ValidateNtp-15724eaa8345aa4f.yaml | 8 + ...e-neutron-fujitsu-plugins-6414a5d6962e3260.yaml | 4 + ...leio-deprecate-old-driver-ab28e372280c44e6.yaml | 5 + .../sriov-vf-param-removed-fd6f4519b4eeb05a.yaml | 6 + .../notes/vxflexos-driver-bec8e372280c44e6.yaml | 4 + .../zaqar_ws_timeout_tunnel-d5d1e900dce79b34.yaml | 7 + releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 + requirements.txt | 1 - roles/ComputeHCISriov.yaml | 1 - roles/ComputeOvsDpdkSriov.yaml | 1 - roles/ComputeOvsDpdkSriovRT.yaml | 1 - roles/ComputeSriov.yaml | 1 - roles/ComputeSriovIB.yaml | 1 - roles/ComputeSriovRT.yaml | 1 - roles/Controller.yaml | 3 +- roles/ControllerNoCeph.yaml | 3 +- roles/ControllerNovaStandalone.yaml | 3 +- roles/ControllerSriov.yaml | 2 - roles/ControllerStorageDashboard.yaml | 3 +- roles/ControllerStorageNfs.yaml | 3 +- roles/DistributedCompute.yaml | 1 + roles/DistributedComputeHCI.yaml | 1 + roles/DistributedComputeHCIScaleOut.yaml | 1 + roles/DistributedComputeScaleOut.yaml | 1 + roles/Networker.yaml | 2 - roles/NetworkerSriov.yaml | 2 - roles/Standalone.yaml | 3 +- roles/Undercloud.yaml | 1 + roles_data.yaml | 3 +- roles_data_undercloud.yaml | 1 + sample-env-generator/dcn.yaml | 8 +- sample-env-generator/ssl.yaml | 4 + sample-env-generator/undercloud-minion.yaml | 4 +- test-requirements.txt | 4 +- tools/yaml-validate.py | 4 +- validation-scripts/all-nodes.sh | 40 -- zuul.d/layout.yaml | 8 +- 207 files changed, 2006 insertions(+), 2661 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2527f95bc..bda47437c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +8,0 @@ tripleo-common>=7.1.0 # Apache-2.0 -paunch>=4.2.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 2162496ad..31a7e4d0b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,2 +9 @@ six>=1.10.0 # MIT -sphinx>=1.8.0,<2.0.0;python_version=='2.7' # BSD -sphinx>=1.8.0,!=2.1.0;python_version>='3.4' # BSD +sphinx>=1.8.0,!=2.1.0 # BSD @@ -18 +16,0 @@ testtools>=2.2.0 # MIT -mock>=2.0.0 # BSD From no-reply at openstack.org Mon Jul 27 06:14:37 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 06:14:37 -0000 Subject: [release-announce] tripleo-validations 12.4.0 (victoria) Message-ID: We are glad to announce the release of: tripleo-validations 12.4.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 12.3.0..12.4.0 --------------------------------------------- 3150534 Remove mock as test requirement 35821c4 Make Get OSD stat percentage compatible with both Luminous and Nautilus 9315f04 Fix ceph-ansible permissions when checking the repo name 18608d1 Ensure virtualenv is installed. 5dfccb8 Add "mock" in test-requirements and lower-constraints 95898bf Add TripleO validation CLI script 861d6b4 Update openstackdocstheme. aa330a8 Update Ceph role's Get OSD stat to use new data structure 467ebf5 Switch to newer openstackdocstheme and reno versions 2d565ad Stop to use the __future__ module. 3320df4 Add Python3 victoria unit tests 27d541b Update master for stable/ussuri 5741b79 Update python version. Diffstat (except docs and test files) ------------------------------------- callback_plugins/validation_json.py | 2 - callback_plugins/validation_output.py | 2 - library/docker_facts.py | 4 -- lower-constraints.txt | 8 ++-- releasenotes/source/conf.py | 9 ++-- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 +++ roles/ceph/tasks/ceph-ansible-installed.yaml | 1 + roles/ceph/tasks/ceph-health.yaml | 2 +- scripts/tripleo-ansible-inventory | 2 - scripts/tripleo-validation.py | 48 ++++++++++++++++++++++ setup.cfg | 1 + test-requirements.txt | 6 +-- tox.ini | 2 +- tripleo_validations/utils.py | 2 - zuul.d/layout.yaml | 2 +- zuul.d/playbooks/pre.yml | 4 ++ 22 files changed, 98 insertions(+), 38 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index cfbc20e..b86e1e7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -openstackdocstheme>=1.31.2 # Apache-2.0 +openstackdocstheme>=2.2.1 # Apache-2.0 @@ -10 +10 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx>=1.8.0,!=2.1.0 # BSD +sphinx>=2.0.0,!=2.1.0 # BSD @@ -15 +15 @@ testtools>=2.2.0 # MIT -reno>=2.5.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 27 06:15:54 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 06:15:54 -0000 Subject: [release-announce] tripleo-puppet-elements 12.4.0 (victoria) Message-ID: We contentedly announce the release of: tripleo-puppet-elements 12.4.0: Puppet building rules for OpenStack images. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.4.0 ^^^^^^ Other Notes * Element overcloud-opstools has been removed. The puropose of this element was to install osops-tools-monitoring-oschecks package in overcloud images. This package is not supported in CentOS 8. Changes in tripleo-puppet-elements 12.3.0..12.4.0 ------------------------------------------------- 9245195 Revert "add buildah to overcloud-base" 96199e9 add buildah to overcloud-base 4b60b7c Remove overcloud-opstools element cc4338c Switch to newer openstackdocstheme and reno versions f14ac99 Remove centos7 RT repo from centos8 builds 4c69ead Add Python3 victoria unit tests c04961a Update master for stable/ussuri fc075f9 Fix hacking min version to 3.0.1 Diffstat (except docs and test files) ------------------------------------- elements/overcloud-ceph-storage/element-deps | 1 - elements/overcloud-compute/element-deps | 1 - elements/overcloud-compute/pre-install.d/03-centos-rt | 2 +- elements/overcloud-contrail-controller/element-deps | 1 - elements/overcloud-controller/element-deps | 1 - elements/overcloud-network-midonet/element-deps | 1 - elements/overcloud-opstools/README.md | 1 - elements/overcloud-opstools/element-deps | 2 -- .../install.d/package-installs-overcloud-opstools | 1 - elements/overcloud-opstools/pkg-map | 12 ------------ .../remove-overcloud-opstools-element-5846bee068294751.yaml | 6 ++++++ releasenotes/source/conf.py | 8 ++++---- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 ++++++ test-requirements.txt | 6 +++--- zuul.d/layout.yaml | 2 +- 17 files changed, 26 insertions(+), 34 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index cfdd4f9..fd1dd17 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=3.0,<3.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -9 +9 @@ sphinx>=2.0.0,!=2.1.0 # BSD -openstackdocstheme>=2.0.0 # Apache-2.0 +openstackdocstheme>=2.2.1 # Apache-2.0 @@ -13 +13 @@ testrepository>=0.0.18 -reno>=2.5.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0 From no-reply at openstack.org Mon Jul 27 06:21:00 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 06:21:00 -0000 Subject: [release-announce] XStatic-Dagre 0.6.4.1 Message-ID: We are overjoyed to announce the release of: XStatic-Dagre 0.6.4.1: Dagre 0.6.4 (XStatic packaging standard) This is the first release of XStatic-Dagre. The source is available from: https://opendev.org/openstack/XStatic-Dagre Download the package from: https://pypi.org/project/XStatic-Dagre For more details, please see below. Changes in XStatic-Dagre 50c90d167ccd15900cdaf4a4eb8099e6049976f7..0.6.4.1 -------------------------------------------------------------------------- f3fd721 Bump release to 0.6.4.1 8e4aa99 Add noop-jobs project template jobs From no-reply at openstack.org Mon Jul 27 06:23:36 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 06:23:36 -0000 Subject: [release-announce] XStatic-lodash 4.16.4.2 Message-ID: We high-spiritedly announce the release of: XStatic-lodash 4.16.4.2: lodash 4.16.4 (XStatic packaging standard) This is the first release of XStatic-lodash. The source is available from: https://opendev.org/openstack/XStatic-lodash Download the package from: https://pypi.org/project/XStatic-lodash For more details, please see below. Changes in XStatic-lodash ba379b20939575ce9a7a2153aba7743f4ca46a0a..4.16.4.2 ---------------------------------------------------------------------------- 3bbd3db Bump release to 4.16.4.2 661ab31 Add noop-jobs project template jobs From no-reply at openstack.org Mon Jul 27 06:24:22 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 06:24:22 -0000 Subject: [release-announce] XStatic-moment 2.8.4.3 Message-ID: We are glad to announce the release of: XStatic-moment 2.8.4.3: moment 2.8.4 (XStatic packaging standard) This is the first release of XStatic-moment. The source is available from: https://opendev.org/openstack/XStatic-moment Download the package from: https://pypi.org/project/XStatic-moment For more details, please see below. Changes in XStatic-moment 2c50651dcd2e5ab6f37f87a290955cb9c52eab9f..2.8.4.3 --------------------------------------------------------------------------- 7734ce7 Bump release to 2.8.4.3 a56d200 Add noop-jobs project template jobs From no-reply at openstack.org Mon Jul 27 20:10:15 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 20:10:15 -0000 Subject: [release-announce] networking-ovn 6.1.1 (stein) Message-ID: We enthusiastically announce the release of: networking-ovn 6.1.1: OpenStack Neutron integration with OVN This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/networking-ovn Download the package from: https://pypi.org/project/networking-ovn Please report issues through: https://bugs.launchpad.net/networking-ovn/+bugs For more details, please see below. Changes in networking-ovn 6.1.0..6.1.1 -------------------------------------- 2cb0739b [OVN] Don't set virtual port type on ports with similar addresses 9db1fc89 Set class ovsdb_conection to None 28f879d8 Fix pep8 job cb105360 Fix functional jobs by installing missing dependencies f87fbc9c Enforce Python 3 usage for rally job 56b39d30 Fix ovn-db-sync-util after removing l3 ovsdb connection 3f465074 [OVN][metadata] Adding ERROR trace upon unexpected data 46f5abea [OVN] Remove VLAN check when setting external_mac Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 + networking_ovn/agent/metadata/server.py | 14 ++++++++++- networking_ovn/cmd/neutron_ovn_db_sync_util.py | 6 ++++- networking_ovn/common/ovn_client.py | 10 ++++---- networking_ovn/ovsdb/impl_idl_ovn.py | 1 + test-requirements.txt | 1 + zuul.d/networking-ovn-jobs.yaml | 1 + 10 files changed, 53 insertions(+), 29 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ce1fcab0..7e93ee83 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -22,0 +23 @@ testtools>=2.2.0 # MIT +isort==4.3.21 # MIT From no-reply at openstack.org Mon Jul 27 20:16:34 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 20:16:34 -0000 Subject: [release-announce] oslo.utils 4.4.0 (victoria) Message-ID: We are overjoyed to announce the release of: oslo.utils 4.4.0: Oslo Utility library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 4.4.0 ^^^^^ New Features * New method "netutils.get_mac_addr_by_ipv6(ipv6, dialect)" extracts the MAC address from IPv6 addresses generated from MACs. Changes in oslo.utils 4.3.0..4.4.0 ---------------------------------- bbf6898 New method in netutils: get_mac_addr_by_ipv6 Diffstat (except docs and test files) ------------------------------------- oslo_utils/netutils.py | 29 +++++++++++++++++++ ...tils-get_mac_addr_by_ipv6-c3ce6a35a69f7c2b.yaml | 5 ++++ 3 files changed, 67 insertions(+) From no-reply at openstack.org Mon Jul 27 20:17:11 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 20:17:11 -0000 Subject: [release-announce] python-troveclient 5.0.0 (victoria) Message-ID: We are thrilled to announce the release of: python-troveclient 5.0.0: Client library for OpenStack DBaaS API This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/python-troveclient Download the package from: https://pypi.org/project/python-troveclient Please report issues through: https://bugs.launchpad.net/python-troveclient/+bugs For more details, please see below. 5.0.0 ^^^^^ New Features * Support backup strategy CLI. * Change flavor as an optional parameter ("--flavor") for creating instance. When creating replicas, flavor is not requried. Changes in python-troveclient 4.1.0..5.0.0 ------------------------------------------ c23da58 Flavor is optional for creating instance 40af556 Support backup strategy a9c3174 Use primary instead of master for listing instances b9f0891 Use unittest.mock instead of mock b3f8c0b Replace assertItemsEqual with assertCountEqual 39b6a22 Add py38 package metadata Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 - releasenotes/notes/victoria-backup-strategy.yaml | 3 + releasenotes/notes/victoria-flavor-optional.yaml | 4 + setup.cfg | 4 + troveclient/base.py | 1 + troveclient/osc/v1/database_backup_strategy.py | 105 +++++++++++++++++++++ troveclient/osc/v1/database_backups.py | 22 ++++- troveclient/osc/v1/database_instances.py | 17 ++-- troveclient/v1/backup_strategy.py | 60 ++++++++++++ troveclient/v1/backups.py | 5 +- troveclient/v1/client.py | 2 + troveclient/v1/instances.py | 14 +-- 17 files changed, 317 insertions(+), 31 deletions(-) From no-reply at openstack.org Mon Jul 27 20:18:54 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 20:18:54 -0000 Subject: [release-announce] oslo.policy 3.3.2 (victoria) Message-ID: We are delighted to announce the release of: oslo.policy 3.3.2: Oslo Policy library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. Changes in oslo.policy 3.3.1..3.3.2 ----------------------------------- 6296fce Fix unit tests to work with stevedore > 2.0.1 Diffstat (except docs and test files) ------------------------------------- 1 file changed, 2 insertions(+), 2 deletions(-) From no-reply at openstack.org Mon Jul 27 20:22:32 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Mon, 27 Jul 2020 20:22:32 -0000 Subject: [release-announce] oslo.config 8.3.1 (victoria) Message-ID: We are happy to announce the release of: oslo.config 8.3.1: Oslo Configuration API This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. Changes in oslo.config 8.3.0..8.3.1 ----------------------------------- a2652b3 Fix unit tests to work with stevedore > 2.0.1 Diffstat (except docs and test files) ------------------------------------- 1 file changed, 2 insertions(+), 2 deletions(-) From no-reply at openstack.org Tue Jul 28 14:40:00 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 28 Jul 2020 14:40:00 -0000 Subject: [release-announce] python-magnumclient 3.2.0 (victoria) Message-ID: We eagerly announce the release of: python-magnumclient 3.2.0: Client library for Magnum API This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/python-magnumclient Download the package from: https://pypi.org/project/python-magnumclient Please report issues through: https://bugs.launchpad.net/python-magnumclient/+bugs For more details, please see below. Changes in python-magnumclient 3.1.0..3.2.0 ------------------------------------------- 3da3b48 Use overlay2 driver by default 190a34b Use unittest.mock instead of mock c6b7952 Support master_lb_enabled when creating cluster 7ecbab5 Show cluster fixed_network, fixed_subnet, floating_ip_enabled c010846 Print response after issuing CA rotate request d66530f Stop to use the __future__ module. Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 - magnumclient/common/cliutils.py | 2 -- magnumclient/osc/v1/certificates.py | 2 ++ magnumclient/osc/v1/cluster_templates.py | 10 ++++++++-- magnumclient/osc/v1/clusters.py | 14 ++++++++++++++ magnumclient/shell.py | 2 -- magnumclient/v1/clusters.py | 1 + 11 files changed, 36 insertions(+), 13 deletions(-) From no-reply at openstack.org Tue Jul 28 14:41:48 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 28 Jul 2020 14:41:48 -0000 Subject: [release-announce] debtcollector 2.2.0 (victoria) Message-ID: We are tickled pink to announce the release of: debtcollector 2.2.0: A collection of Python deprecation patterns and strategies that help you collect your technical debt in a non- destructive manner. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/debtcollector Download the package from: https://pypi.org/project/debtcollector Please report issues through: https://bugs.launchpad.net/debtcollector/+bugs For more details, please see below. Changes in debtcollector 2.1.0..2.2.0 ------------------------------------- 649189d Update lower-constraints versions Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 26 ++++++++++++++++++-------- test-requirements.txt | 2 +- 2 files changed, 19 insertions(+), 9 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 9eee3fc..fbcaa92 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -14 +14 @@ fixtures>=3.0.0 # Apache-2.0/BSD -doc8>=0.6.0 # Apache-2.0 +doc8>=0.8.1 # Apache-2.0 From no-reply at openstack.org Tue Jul 28 14:42:54 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 28 Jul 2020 14:42:54 -0000 Subject: [release-announce] metalsmith 1.1.0 (victoria) Message-ID: We are excited to announce the release of: metalsmith 1.1.0: Deployment and Scheduling tool for Bare Metal This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. Changes in metalsmith 1.0.0..1.1.0 ---------------------------------- ea6d4e6 Metalsmith to use DevStack's neutron"-legacy" module c086a4d Set min version of tox to 3.2.1 72072cd Remove ussuri jobs in favor of victoria 35e0457 Use is instead of ambiguous pipe 8c3f646 Avoid running functional jobs for non-code changes 7f25b01 Switch to newer openstackdocstheme and reno versions 548382c Update lower-constraints.txt a1bdb28 Update tox.ini 5e2be52 Upgrade flake8-import-order version to 0.17.1 954a6ca Start enforcing W504 in pep8 90671a0 Get rid of testtools and fixtures 05ed2cf No need to import print function anymore f6fb359 Use unittest.mock instead of third party mock 0236797 Cleanup py27 support f689cfa CI: increase the swift loopback disk size for the CentOS job cfb4e17 Update master for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 26 ++++++------ lower-constraints.txt | 42 +++++++++++++++++-- metalsmith/_format.py | 2 - metalsmith/sources.py | 6 +-- metalsmith/test/test_cmd.py | 74 ++++++++++++++++----------------- metalsmith/test/test_instance.py | 2 +- metalsmith/test/test_instance_config.py | 7 ++-- metalsmith/test/test_provisioner.py | 32 +++++++------- metalsmith/test/test_scheduler.py | 8 ++-- metalsmith/test/test_sources.py | 6 +-- metalsmith/test/test_utils.py | 4 +- playbooks/integration/centos-image.yaml | 2 +- releasenotes/source/conf.py | 10 ++--- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 +++ setup.cfg | 3 ++ setup.py | 9 ---- test-requirements.txt | 5 +-- tox.ini | 4 ++ 21 files changed, 150 insertions(+), 121 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index bc9b6fb..26d1b18 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,2 +6 @@ doc8>=0.6.0 # Apache-2.0 -flake8-import-order>=0.13 # LGPLv3 -fixtures>=3.0.0 # Apache-2.0/BSD +flake8-import-order>=0.17.1 # LGPLv3 @@ -9 +7,0 @@ hacking>=3.0.0,<3.1.0 # Apache-2.0 -mock>=2.0 # BSD @@ -11 +8,0 @@ stestr>=1.0.0 # Apache-2.0 -testtools>=2.2.0 # MIT From no-reply at openstack.org Tue Jul 28 14:49:46 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Tue, 28 Jul 2020 14:49:46 -0000 Subject: [release-announce] automaton 2.2.0 (victoria) Message-ID: We are glad to announce the release of: automaton 2.2.0: Friendly state machines for python. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/automaton Download the package from: https://pypi.org/project/automaton Please report issues through: https://bugs.launchpad.net/automaton/+bugs For more details, please see below. Changes in automaton 2.1.0..2.2.0 --------------------------------- a30803c Update lower-constraints list 3370750 drop mock from lower-constraints Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 29 +++++++++-------------------- 1 file changed, 9 insertions(+), 20 deletions(-) From no-reply at openstack.org Wed Jul 29 12:38:48 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 29 Jul 2020 12:38:48 -0000 Subject: [release-announce] manila 10.0.1 (ussuri) Message-ID: We are ecstatic to announce the release of: manila 10.0.1: Shared Storage for OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 10.0.1 ^^^^^^ Upgrade Notes ************* * The configuration option "netapp_migration_cancel_timeout" can be specified in the NetApp backend section to redefine the amount of time that the NetApp driver must attempt to wait on the asynchronous operation to cancel an ongoing migration. This option is set to 3600 seconds by default, which is sufficient time in most cases. Bug Fixes ********* * Dell EMC Unity Driver: Fixes bug 1841035 to avoid lots of error messages displayed in logs. * NetApp ONTAP share delete operation can fail sometimes when is triggered immediately after migration cancelation on a overloaded NetApp backend. Canceling an ongoing migration is an asynchronous operation on an ONTAP storage system. Now the NetApp driver checks if the asynchronous API has ended its operation before reporting migration cancelation success. If the operation of the asynchronous API did not end within the specified timeout, the "migration cancel" cancel operation will be considered unsuccessful. To do so, a new configuration option "netapp_migration_cancel_timeout" has been added. * Fixed the Generic driver to evict and kill any user processes accessing a share before attempting to extend or shrink a CIFS share. * Added a new user message when share shrinking fails due to operation not being supported by the driver. * Fixed bug #1878993 (https://bugs.launchpad.net/manila/+bug/1878993) that caused a failure on HTTPS connections within NetApp backend using python 3.7. * Fixed unneeded all ports list request to Neutron in service instance helper module on tearing down service subnet, Neutron can filter them by subnet_id itself. * NetApp ONTAP driver is now fixed to avoid the deletion of *Cluster* and *Default* ipspaces when deleting a share server. This issue was happening only when operating in *driver_handles_share_servers* enabled mode and creating shares using *flat* network type. See Launchpad bug 1880747 (https://launchpad.net/bugs/1880747) for more details. * Fixed bug #1882590 (https://bugs.launchpad.net/manila/+bug/1882590) that caused an error on starting a NetApp backend when using the SVM scoped account. * Fixed launchpad bug #1885956 (https://bugs.launchpad.net/manila/+bug/1885956) by ensuring that policy checks are enforced when looking up a share-type by name. This prevents a problem where shares could be stuck in CREATING status when a user attempts to create a share using the name of a private share-type to which the user lacks access. * The NetApp cDOT driver now validates the configuration of preferred domain controller(s) added in CIFS security service server setup. The mandatory option "skip-config-validation" was introduced to "cifs-domain-preferred-dc-add" with ONTAP 9.5. Changes in manila 10.0.0..10.0.1 -------------------------------- 7248532d [NetApp] update set_preferred_dc for ontapi 1.150 eb0de241 Update NFS helper restart 2a3c18ed Update LVM volume extend e02cc6d6 Enforce policy checks getting share-type by name 71c3a08e [NetApp] Fix falsely report migration cancelation success 2dbdace6 [NetApp] Fix HTTPS connection for python 3.7 b5e541a6 [NetApp] Fix svm scoped account 09cb988f Fix uwsgi path location 1e8e154f [Unity]: Failed to enabled ACE for share c1bebf39 Add documentation for share replica quotas 5d1c3067 [devstack] Allow cephfs daemon port access 9468f385 Add user guide for share network subnets 43d0241b Update admin guide for share network subnets change 3cbceccc Add user message when share shrinking fails at the driver 95d251e3 CIFS extension failing because of volume in use 2fe7452b [NetApp] Fix default ipspace deletion issue 1c25df05 Get ports filtered by subnet id on share-server cleanup 7196cfcb Monkey patch original current_thread _active 294ba7c3 [devstack][ci] Set public network ID in tempest.conf fc9ac3cb [devstack][ci] Move bgp setup to plugin 94486eb4 [devstack][ci] Modify firewall in ds-plugin 58105a2d [devstack][ci] Stop requiring g-reg service Diffstat (except docs and test files) ------------------------------------- api-ref/source/limits.inc | 14 +- api-ref/source/parameters.yaml | 87 ++++++ api-ref/source/quota-classes.inc | 11 + api-ref/source/quota-sets.inc | 17 ++ api-ref/source/samples/limits-response.json | 6 +- .../samples/quota-classes-show-response.json | 4 +- .../samples/quota-classes-update-response.json | 4 +- .../source/samples/quota-show-detail-response.json | 8 +- api-ref/source/samples/quota-show-response.json | 4 +- api-ref/source/samples/quota-update-request.json | 3 +- api-ref/source/samples/quota-update-response.json | 4 +- contrib/ci/post_test_hook.sh | 24 -- contrib/ci/pre_test_hook.sh | 2 + devstack/plugin.sh | 64 ++++- devstack/settings | 5 + ...ared-file-systems-manage-and-unmanage-share.rst | 6 + .../admin/shared-file-systems-share-networks.rst | 157 ++++++++++- .../shared-file-systems-share-replication.rst | 23 +- .../admin/shared-file-systems-share-resize.rst | 8 + ...shared-file-systems-share-server-management.rst | 11 + .../configuration/shared-file-systems/overview.rst | 4 + .../development-environment-devstack.rst | 2 +- .../contributor/samples/container_local.conf | 3 + .../contributor/samples/zfsonlinux_local.conf | 3 + .../user/share-network-subnet-operations.rst | 120 ++++++++ manila/api/v1/shares.py | 3 +- manila/cmd/api.py | 6 + manila/cmd/data.py | 6 + manila/cmd/scheduler.py | 6 + manila/cmd/share.py | 6 + manila/db/sqlalchemy/api.py | 3 +- manila/message/message_field.py | 7 +- .../share/drivers/dell_emc/plugins/unity/client.py | 10 +- .../drivers/dell_emc/plugins/unity/connection.py | 3 +- manila/share/drivers/helpers.py | 31 ++- manila/share/drivers/lvm.py | 3 +- .../share/drivers/netapp/dataontap/client/api.py | 51 ++-- .../netapp/dataontap/client/client_cmode.py | 6 + .../netapp/dataontap/cluster_mode/lib_base.py | 67 ++++- .../netapp/dataontap/cluster_mode/lib_multi_svm.py | 6 +- manila/share/drivers/netapp/options.py | 8 +- manila/share/drivers/service_instance.py | 13 +- manila/share/manager.py | 10 + .../share/drivers/netapp/dataontap/client/fakes.py | 4 +- .../drivers/netapp/dataontap/client/test_api.py | 47 ++-- .../netapp/dataontap/client/test_client_cmode.py | 27 +- .../netapp/dataontap/cluster_mode/test_lib_base.py | 128 ++++++--- .../run.yaml | 1 + .../run.yaml | 1 + .../run.yaml | 1 + .../run.yaml | 1 + .../run.yaml | 3 +- .../manila-tempest-minimal-dsvm-lvm/run-ipv6.yaml | 3 +- .../manila-tempest-minimal-dsvm-lvm/run.yaml | 3 +- ...nity-fix-ace-enable-error-b00281bb306d176b.yaml | 7 + ...app-migration-cancelation-fb913131eb8eb82a.yaml | 20 ++ ...-because-of-volume-in-use-3fea31c4a58e2f1b.yaml | 4 + ...sage-when-shrinking-fails-83d0f60ead6f4a4b.yaml | 5 + ...-1878993-netapp-fix-https-3eddf9eb5b762f3a.yaml | 6 + ...-1879754-teardown-network-d1887cdf6eb83388.yaml | 5 + ...ot-delete-default-ipspace-aee638279e0f8e93.yaml | 9 + ...590-fix-svm-scoped-netapp-85b53830135f7558.yaml | 6 + ...etting-share-type-by-name-5eca17b02bea5261.yaml | 8 + ...dd-cifs-dc-add-skip-check-c8ea9b952cedb643.yaml | 7 + 74 files changed, 1378 insertions(+), 194 deletions(-) From no-reply at openstack.org Wed Jul 29 12:42:00 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 29 Jul 2020 12:42:00 -0000 Subject: [release-announce] openstack-ansible 19.1.3 (stein) Message-ID: We are glad to announce the release of: openstack-ansible 19.1.3: Ansible playbooks for deploying OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 19.1.2..19.1.3 ------------------------------------------- 0195dace9 Bump SHAs for stable/stein 099c316b4 Bump SHAs for stable/stein f59ee5bdb Fix KeyError raised when max hostname length exceeded Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 12 +-- osa_toolkit/generate.py | 6 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 92 +++++++++++----------- 5 files changed, 57 insertions(+), 57 deletions(-) From no-reply at openstack.org Wed Jul 29 12:44:02 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 29 Jul 2020 12:44:02 -0000 Subject: [release-announce] openstack-ansible 20.1.4 (train) Message-ID: We exuberantly announce the release of: openstack-ansible 20.1.4: Ansible playbooks for deploying OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 20.1.3..20.1.4 ------------------------------------------- 435296788 Bump ansible version to 2.8.13 32bc849b8 Bump SHAs for stable/train 664d9457f Fix KeyError raised when max hostname length exceeded Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 12 +-- osa_toolkit/generate.py | 6 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 88 +++++++++++----------- scripts/bootstrap-ansible.sh | 2 +- 6 files changed, 56 insertions(+), 56 deletions(-) From no-reply at openstack.org Wed Jul 29 20:26:50 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Wed, 29 Jul 2020 20:26:50 -0000 Subject: [release-announce] os-brick 3.2.0 (victoria) Message-ID: We are delighted to announce the release of: os-brick 3.2.0: OpenStack Cinder brick library for managing local volume attaches This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 3.2.0 ^^^^^ Bug Fixes * Fix an incompatibility with ceph 13.2.0 (Mimic) or later, caused by a change in the output of "rbd map". Changes in os-brick 3.1.0..3.2.0 -------------------------------- 188cbed Switch from unittest2 compat methods to Python 3.x methods a87ef7b rbd: Support 'rbd showmapped' output from ceph 13.2.0+ 5d5f8e0 Fix os-brick in virtual environments 0804e81 Bump pycodestyle to 2.6.0 d95ebc4 Update lower-constraints versions 0d6f6bd Add iscsi-initiator-utils requirement 720270d Add oslo.context dependency 223a849 Add oslo.serialization dependency Diffstat (except docs and test files) ------------------------------------- bindep.txt | 3 + lower-constraints.txt | 73 ++++++++++------------ os_brick/initiator/connectors/hgst.py | 4 +- os_brick/initiator/connectors/iscsi.py | 6 +- os_brick/initiator/connectors/rbd.py | 38 ++++++++++- os_brick/privileged/__init__.py | 13 +++- os_brick/remotefs/remotefs.py | 4 +- .../initiator/connectors/test_fibre_channel.py | 2 +- .../notes/bug-1884052-798094496dccf23c.yaml | 5 ++ requirements.txt | 12 ++-- test-requirements.txt | 7 ++- 15 files changed, 124 insertions(+), 67 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 40dcf9f..e5a2d24 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5,2 @@ -pbr!=2.1.0,>=2.0.0 # Apache-2.0 -eventlet!=0.18.3,!=0.20.1,!=0.21.0,!=0.23.0,!=0.25.0,>=0.18.2 # MIT +pbr!=2.1.0,>=5.4.1 # Apache-2.0 +eventlet>=0.25.1 # MIT @@ -8,2 +8,3 @@ oslo.concurrency>=3.26.0 # Apache-2.0 -oslo.log>=3.36.0 # Apache-2.0 -oslo.i18n>=3.15.3 # Apache-2.0 +oslo.context>=2.23.0 # Apache-2.0 +oslo.log>=3.44.0 # Apache-2.0 +oslo.i18n>=3.24.0 # Apache-2.0 @@ -10,0 +12 @@ oslo.privsep>=1.32.0 # Apache-2.0 +oslo.serialization>=2.29.0 # Apache-2.0 @@ -12 +14 @@ oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 -oslo.utils>=3.33.0 # Apache-2.0 +oslo.utils>=3.34.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 42c20fb..9dd1095 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0 -coverage!=4.4,>=4.0 # Apache-2.0 +coverage!=4.4,>=4.1 # Apache-2.0 @@ -9 +9 @@ oslotest>=3.2.0 # Apache-2.0 -testscenarios>=0.4 # Apache-2.0/BSD +testscenarios>=0.5.0 # Apache-2.0/BSD @@ -13 +13,2 @@ oslo.vmware>=2.17.0 # Apache-2.0 -castellan>=0.16.0 # Apache-2.0 +castellan>=1.3.0 # Apache-2.0 +pycodestyle==2.6.0 # MIT From no-reply at openstack.org Fri Jul 31 10:08:37 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 31 Jul 2020 10:08:37 -0000 Subject: [release-announce] manila 9.1.4 (train) Message-ID: We jubilantly announce the release of: manila 9.1.4: Shared Storage for OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 9.1.4 ^^^^^ Upgrade Notes ************* * The configuration option "netapp_migration_cancel_timeout" can be specified in the NetApp backend section to redefine the amount of time that the NetApp driver must attempt to wait on the asynchronous operation to cancel an ongoing migration. This option is set to 3600 seconds by default, which is sufficient time in most cases. Bug Fixes ********* * Dell EMC Unity Driver: Fixes bug 1841035 to avoid lots of error messages displayed in logs. * NetApp ONTAP share delete operation can fail sometimes when is triggered immediately after migration cancelation on a overloaded NetApp backend. Canceling an ongoing migration is an asynchronous operation on an ONTAP storage system. Now the NetApp driver checks if the asynchronous API has ended its operation before reporting migration cancelation success. If the operation of the asynchronous API did not end within the specified timeout, the "migration cancel" cancel operation will be considered unsuccessful. To do so, a new configuration option "netapp_migration_cancel_timeout" has been added. * Fixed the Generic driver to evict and kill any user processes accessing a share before attempting to extend or shrink a CIFS share. * A new user message has been added in case of share extensions failing asynchronously. * Fixed unneeded all ports list request to Neutron in service instance helper module on tearing down service subnet, Neutron can filter them by subnet_id itself. * NetApp ONTAP driver is now fixed to avoid the deletion of *Cluster* and *Default* ipspaces when deleting a share server. This issue was happening only when operating in *driver_handles_share_servers* enabled mode and creating shares using *flat* network type. See Launchpad bug 1880747 (https://launchpad.net/bugs/1880747) for more details. * Fixed bug #1882590 (https://bugs.launchpad.net/manila/+bug/1882590) that caused an error on starting a NetApp backend when using the SVM scoped account. * Fixed launchpad bug #1885956 (https://bugs.launchpad.net/manila/+bug/1885956) by ensuring that policy checks are enforced when looking up a share-type by name. This prevents a problem where shares could be stuck in CREATING status when a user attempts to create a share using the name of a private share-type to which the user lacks access. * The NetApp cDOT driver now validates the configuration of preferred domain controller(s) added in CIFS security service server setup. The mandatory option "skip-config-validation" was introduced to "cifs-domain-preferred-dc-add" with ONTAP 9.5. * The LVM driver no longer fails to delete shares, snapshots and access rules that are missing from storage. See Launchpad bug #1888915 (https://launchpad.net/bugs/1888915) for more details. Changes in manila 9.1.3..9.1.4 ------------------------------ 4e292ea8 Harden LVM driver deletion paths 2063c93c Update LVM volume extend afb63e9d [ci] Remove explicit compression of log files bf97dcc9 [NetApp] Fix default ipspace deletion issue c915918f [NetApp] Fix falsely report migration cancelation success 779ae5f1 Monkey patch original current_thread _active 6ad361a1 [NetApp] update set_preferred_dc for ontapi 1.150 0a312543 Update NFS helper restart 2f2ed258 Enforce policy checks getting share-type by name 9a0036a2 [Unity]: Failed to enabled ACE for share b252cb80 [NetApp] Fix svm scoped account f9110240 Fix uwsgi path location badb3967 Add asynchronous error info into messages when share extend error 51b918a8 [devstack] Allow cephfs daemon port access b07c2484 CIFS extension failing because of volume in use 6542f2f1 Get ports filtered by subnet id on share-server cleanup Diffstat (except docs and test files) ------------------------------------- contrib/ci/common.sh | 19 +-- devstack/plugin.sh | 37 +++--- manila/api/v1/shares.py | 3 +- manila/cmd/api.py | 6 + manila/cmd/data.py | 6 + manila/cmd/scheduler.py | 6 + manila/cmd/share.py | 6 + manila/db/sqlalchemy/api.py | 3 +- manila/message/message_field.py | 13 ++- .../share/drivers/dell_emc/plugins/unity/client.py | 10 +- .../drivers/dell_emc/plugins/unity/connection.py | 3 +- manila/share/drivers/helpers.py | 45 +++++++- manila/share/drivers/lvm.py | 19 +-- .../netapp/dataontap/client/client_cmode.py | 6 + .../netapp/dataontap/cluster_mode/lib_base.py | 67 +++++++++-- .../netapp/dataontap/cluster_mode/lib_multi_svm.py | 6 +- manila/share/drivers/netapp/options.py | 8 +- manila/share/drivers/service_instance.py | 13 +-- manila/share/manager.py | 8 +- .../netapp/dataontap/client/test_client_cmode.py | 27 ++++- .../netapp/dataontap/cluster_mode/test_lib_base.py | 128 ++++++++++++++++----- ...nity-fix-ace-enable-error-b00281bb306d176b.yaml | 7 ++ ...app-migration-cancelation-fb913131eb8eb82a.yaml | 20 ++++ ...-because-of-volume-in-use-3fea31c4a58e2f1b.yaml | 4 + ...r-when-share-extend-error-a0c458204b395994.yaml | 5 + ...-1879754-teardown-network-d1887cdf6eb83388.yaml | 5 + ...ot-delete-default-ipspace-aee638279e0f8e93.yaml | 9 ++ ...590-fix-svm-scoped-netapp-85b53830135f7558.yaml | 6 + ...etting-share-type-by-name-5eca17b02bea5261.yaml | 8 ++ ...dd-cifs-dc-add-skip-check-c8ea9b952cedb643.yaml | 7 ++ ...8915-harden-lvm-deletions-2a735ab0ee4a4903.yaml | 6 + 35 files changed, 501 insertions(+), 135 deletions(-) From no-reply at openstack.org Fri Jul 31 20:10:29 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 31 Jul 2020 20:10:29 -0000 Subject: [release-announce] oslo.privsep 2.3.0 (victoria) Message-ID: We eagerly announce the release of: oslo.privsep 2.3.0: OpenStack library for privilege separation This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. 2.3.0 ^^^^^ Other Notes * The "oslo.privsep" client can be called from a program using eventlet. If "eventlet.monkey_patch", some libraries will be patched, for example "threading" or "os". When the root daemon is forked from the client process, those libraries remain patched. Now, when the daemon is forked from the client process, those libraries and methods are restored to the original values. The goal is to prevent some timeouts when using eventlet threads (user threads); system threads are preemptive and the code does not need to care about the executor token. Changes in oslo.privsep 2.2.1..2.3.0 ------------------------------------ 1dc378c Undo the eventlet monkey patch for the privileged daemon c388354 Align contributing doc with oslo's policy Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 5 +++ lower-constraints.txt | 2 +- oslo_privsep/daemon.py | 36 ++++++++++++++++++++++ ...y-patch-privileged-daemon-160e00296549df3d.yaml | 11 +++++++ requirements.txt | 2 +- 6 files changed, 82 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7228b1a..8541ac3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ cffi>=1.7.0 # MIT -eventlet!=0.18.3,!=0.20.1,>=0.18.2 # MIT +eventlet>=0.21.0 # MIT From no-reply at openstack.org Fri Jul 31 20:16:27 2020 From: no-reply at openstack.org (no-reply at openstack.org) Date: Fri, 31 Jul 2020 20:16:27 -0000 Subject: [release-announce] tooz 2.7.1 (victoria) Message-ID: We enthusiastically announce the release of: tooz 2.7.1: Coordination library for distributed systems. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz Please report issues through: https://bugs.launchpad.net/python-tooz/+bugs For more details, please see below. Changes in tooz 2.7.0..2.7.1 ---------------------------- 9aa22c3 Use safe_decode for decoding in zookeeper driver Diffstat (except docs and test files) ------------------------------------- tooz/drivers/zookeeper.py | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-)