Open Stack

We are happy to announce the release of:

openstack-heat 12.1.0: OpenStack Orchestration

This release is part of the stein stable release series.

The source is available from:

    https://opendev.org/openstack/openstack-heat

Download the package from:

    https://tarballs.openstack.org/heat/

For more details, please see below.

12.1.0
^^^^^^


New Features
************

* Added a new config option server_keystone_endpoint_type to specify
  the keystone authentication endpoint (public/internal/admin) to pass
  into cloud-init data. If left unset the original behavior should
  remain unchanged.

  This feature allows the deployer to unambiguously specify the
  keystone endpoint passed to user provisioned servers, and is
  particularly useful where the deployment network architecture
  requires the heat service to interact with the internal endpoint,
  but user provisioned servers only have access to the external
  network.

  For more information see http://lists.openstack.org/pipermail
  /openstack-discuss/2019-February/002925.html


Bug Fixes
*********

* Erroneously, availability_zone for host aggregate resource types
  was considered mandatory in heat templates.

  Behaviour has been adjusted to bring this in line with the CLI and
  GUI, in which it is optional.

Changes in openstack-heat 12.0.0..12.1.0
----------------------------------------

8f1bcbaf8 Fix Tempest installtion on system wide for stable branch
1c6dee1f9 Ignore Not Found when deleting Keystone role assignment
7480a8f31 Handle OS::Mistral::Workflow resource replacement properly
73663f673 Update Fedora image ref and add UPPER_CONSTRAINTS_FILE
c59a158da Docs: Fix link broken since Stein release
258c6ea79 Docs: use extrefs to link to other projects' docs
389936787 Correct BRANCH_OVERRIDE for stable/stein
d9368ecb2 Correct availability_zone to be non-mandatory in heat
e109d6d49 Fix the wrong time unit for OS::Octavia::HealthMonitor
a0329a3b9 Use connect_retries when creating clients
302add5bb Add retries when loading keystone data and fetching endpoints
35ef93d03 Add dedicated auth endpoint config for servers
36dab46bd Add retry for sync_point_update_input_data
98bacfb9d Show an engine as down if service record is not updated twice
84fe2ec4f Don't resolve properties for OS::Heat::None resource
916fd0562 Add local bindep.txt and limit bandit version
7d49ff235 Add periodic job template
cec8b079c Fix allowed address pair validation
e5b6c90b4 Return None for attributes of sd with no actions
bc6b4d9e7 Fix regression with SW deployments when region not configured
8023c090b Add entry_point for oslo policy scripts
43377ef7d Blacklist bandit 1.6.0 and cap Sphinx on Python2
8ab042a6a Retry on DB deadlock in event_create()
48c6be4f9 OpenDev Migration Patch


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |  2 +-
.zuul.yaml                                         |  9 ++-
bindep.txt                                         | 41 +++++++++++
devstack/plugin.sh                                 |  4 +-
devstack/upgrade/resources.sh                      | 20 +++--
heat/common/config.py                              |  9 ++-
heat/common/context.py                             | 13 ++++
heat/common/policy.py                              |  9 +++
heat/common/service_utils.py                       | 12 +--
heat/db/sqlalchemy/api.py                          |  4 +
heat/engine/clients/client_plugin.py               |  2 +
heat/engine/clients/os/aodh.py                     |  2 +
heat/engine/clients/os/barbican.py                 |  2 +
heat/engine/clients/os/blazar.py                   |  2 +
heat/engine/clients/os/cinder.py                   |  2 +
heat/engine/clients/os/glance.py                   |  2 +
heat/engine/clients/os/heat_plugin.py              |  1 +
.../clients/os/keystone/fake_keystoneclient.py     |  3 +
.../clients/os/keystone/heat_keystoneclient.py     | 25 +++++++
heat/engine/clients/os/magnum.py                   |  2 +
heat/engine/clients/os/manila.py                   |  2 +
heat/engine/clients/os/neutron/__init__.py         |  4 +-
heat/engine/clients/os/nova.py                     |  1 +
heat/engine/clients/os/sahara.py                   |  2 +
heat/engine/clients/os/trove.py                    |  2 +
heat/engine/constraint/common_constraints.py       | 14 ++--
heat/engine/resource.py                            |  7 +-
.../resources/openstack/heat/none_resource.py      |  4 +
.../openstack/heat/software_deployment.py          | 21 +++---
.../openstack/keystone/role_assignments.py         |  6 +-
.../engine/resources/openstack/mistral/workflow.py | 15 ++++
.../resources/openstack/nova/host_aggregate.py     |  1 -
.../resources/openstack/octavia/health_monitor.py  |  4 +-
heat/engine/resources/server_base.py               |  6 +-
heat/engine/resources/signal_responder.py          |  3 +-
.../openstack/heat/test_software_deployment.py     |  3 +-
playbooks/devstack/functional/run.yaml             | 23 +++---
playbooks/devstack/grenade/run.yaml                | 12 +--
...dpoint-config-for-servers-b20f7eb351f619d0.yaml | 16 ++++
...-zone-to-be-non-mandatory-ee4c124b15449393.yaml |  8 ++
setup.cfg                                          |  3 +
test-requirements.txt                              |  2 +-
tox.ini                                            | 12 +++
64 files changed, 495 insertions(+), 153 deletions(-)


Requirements updates
--------------------

diff --git a/test-requirements.txt b/test-requirements.txt
index 4500a40b8..678a0e443 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -7 +7 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0
-bandit>=1.1.0 # Apache-2.0
+bandit<1.6.0,>=1.1.0 # Apache-2.0