Open Stack

We are pleased to announce the release of:

manila 10.1.0: Shared Storage for OpenStack

This release is part of the ussuri stable release series.

The source is available from:

    https://opendev.org/openstack/manila

Download the package from:

    https://tarballs.openstack.org/manila/

Please report issues through:

    https://bugs.launchpad.net/manila/+bugs

For more details, please see below.

10.1.0
^^^^^^


Upgrade Notes
*************

* Added a new config option *netapp_ssl_cert_path* for NetApp
  driver. This option enables the user to choose the directory with
  certificates of trusted CA or the CA bundle. If set to a directory,
  it must have been processed using the c_rehash utility supplied with
  OpenSSL. If not informed, it will use the Mozilla's carefully
  curated collection of Root Certificates for validating the
  trustworthiness of SSL certificates.


Security Issues
***************

* An RBAC policy check has been enforced against the GET /share-
  access-rules API to ensure that users are permitted to access the
  share that the access rule belongs to. See bug 1917417
  (https://launchpad.net/bugs/1917417) for more details.


Bug Fixes
*********

* Fixed an issue on ONTAP NetApp driver that caused access rules not
  to be applied to a promoted replica using CIFS protocol. Please
  refer to the Launchpad bug #1896949
  (https://bugs.launchpad.net/manila/+bug/1896949) for more details.

* Fixed an issue on ONTAP NetApp driver that was forcing the
  location of CA certificates for SSL verification during HTTPS
  requests. It adds the *netapp_ssl_cert_path* configuration, enabling
  the user to choose the directory with certificates of trusted CA or
  the CA bundle. If set to a directory, it must have been processed
  using the c_rehash utility supplied with OpenSSL. If not informed,
  it will use the Mozilla's carefully curated collection of Root
  Certificates for validating the trustworthiness of SSL certificates.
  Please refer to the Launchpad bug #1900191
  (https://bugs.launchpad.net/manila/+bug/1900191) for more details.

* A bug with storage protocol filtering in the scheduler has been
  fixed. See bug (https://launchpad.net/bugs/1783736) for more
  details.

* Fixed bug #1886232
  (https://bugs.launchpad.net/manila/+bug/1886232) that causes an INFO
  message saying the python-manila package was not found. Now, the
  package name was updated to python3-manila. This fix solves only in
  the case that the user installed the manila using the default
  packages found in OS.

* New user messages now alert users of possible remediations during
  access rule creation errors with CephFS shares. This includes hints
  to users to not use cephx client users that are prohibited by CephFS
  or the share driver. See CVE-2020-27781 (https://cve.mitre.org/cgi-
  bin/cvename.cgi?name=CVE-2020-27781) and bug #1904015
  <https://launchpad.net/bugs/1904015>`_ for more details.

* Fixed a bug that if extend a volume after shrink it under generic
  driver, it may have a wrong real size. Please see Launchpad bug
  #1909951 (https://bugs.launchpad.net/manila/+bug/1909951) for more
  details.

* The scheduler stats resource APIs (/scheduler-stats/pools and
  /scheduler-stats/pools/detail) have been fixed to not return an
  arbitrary traceback in the error message body to the caller when
  access to the resource has been denied.

* Fixed bug #1922075
  (https://bugs.launchpad.net/manila/+bug/1922075) Fixed the problem
  that "gluster volume set nfs.rpc-auth-reject '*'" failed when the
  glusterfs driver created an instance from a snapshot.

* Fixed NotFound error in share replica periodic tasks. It could
  happen that the parent share of the replica that was being worked on
  had already been deleted.

* Corrected an error message for attempts to create snapshots from
  shares that do not support this operation.  The message said that
  the share backend has no such support but that is not always true.
  The original share for the snapshot does not support snapshots
  because it was created with a share type without the
  "snapshot_support" extra-spec set, irrespective of whether the back
  end used can itself support snapshots or not.

Changes in manila 10.0.2..10.1.0
--------------------------------

a853b0cc [ci][devstack] Install bridge-utils for Container driver
ed316557 Fix CI issues and adjust test jobs
c591c0da Update IRC references
6707ca7b Reuse _set_instances_share_data for replicas.
3b31aae9 [Native CephFS] Add messages for async ACL ops
94bb8fea Fix traceback in scheduler-stats API
4a75c699 Filter storage protocol in the scheduler
4fab48de Fix api error message for snapshot creation failure
f40a428b [Glusterfs] Fix create share from snapshot failed
ff97dc01 RBAC tightening for share access rule
6b9532ee [NetApp] Fix python-manila package version
282787fb Always use new_size when extend
ac667519 [NetApp] Fix hard-coded CA cert path for SSL
460f4470 [NetApp] Fix access rules for CIFS promoted replica
be76d7eb Move shares filtering to database layer


Diffstat (except docs and test files)
-------------------------------------

contrib/ci/post_test_hook.sh                       |  25 +--
devstack/plugin.sh                                 |   7 +
manila/api/v1/scheduler_stats.py                   |   8 +-
manila/api/v1/share_snapshots.py                   |   4 +-
manila/db/sqlalchemy/api.py                        | 188 +++++++++++++--------
manila/exception.py                                |   4 +
manila/message/message_field.py                    |  75 ++++----
manila/scheduler/drivers/filter.py                 |  24 ++-
manila/scheduler/filters/capabilities.py           |   3 -
manila/share/api.py                                |  29 ++--
manila/share/drivers/cephfs/driver.py              |  66 ++++++--
manila/share/drivers/generic.py                    |   2 +-
manila/share/drivers/glusterfs/layout_volume.py    |  33 +++-
.../share/drivers/netapp/dataontap/client/api.py   |  11 +-
.../drivers/netapp/dataontap/client/client_base.py |   1 +
.../netapp/dataontap/cluster_mode/data_motion.py   |   1 +
.../netapp/dataontap/cluster_mode/lib_base.py      |   6 +-
manila/share/drivers/netapp/options.py             |  10 +-
manila/share/drivers/netapp/utils.py               |   2 +-
.../share/drivers/glusterfs/test_layout_volume.py  |  13 +-
.../share/drivers/netapp/dataontap/client/fakes.py |   1 +
.../dataontap/cluster_mode/test_data_motion.py     |   7 +-
.../post.yaml                                      |  15 --
.../run.yaml                                       | 108 ------------
.../post.yaml                                      |  15 --
.../run.yaml                                       |  94 -----------
.../post.yaml                                      |  15 --
.../run.yaml                                       | 107 ------------
.../post.yaml                                      |  15 --
.../run.yaml                                       |  83 ---------
.../manila-tempest-dsvm-glusterfs-native/run.yaml  |   2 +-
.../post.yaml                                      |  15 --
.../run.yaml                                       |  84 ---------
.../manila-tempest-dsvm-glusterfs-nfs/run.yaml     |   2 +-
.../legacy/manila-tempest-dsvm-hdfs/post.yaml      |  15 --
playbooks/legacy/manila-tempest-dsvm-hdfs/run.yaml |  74 --------
.../manila-tempest-dsvm-mysql-generic/run.yaml     |  22 +--
.../run.yaml                                       |   2 +-
.../post.yaml                                      |  15 --
.../run.yaml                                       |  92 ----------
.../run.yaml                                       |   2 +-
.../legacy/manila-tempest-dsvm-scenario/run.yaml   |   2 +-
.../run.yaml                                       |   2 +-
.../run.yaml                                       |   2 +-
.../run.yaml                                       |   2 +-
.../run.yaml                                       |   2 +-
.../manila-tempest-minimal-dsvm-dummy/run.yaml     |   2 +-
.../manila-tempest-minimal-dsvm-lvm/run-ipv6.yaml  |   2 +-
.../manila-tempest-minimal-dsvm-lvm/run.yaml       |   2 +-
.../post.yaml                                      |  15 --
.../run.yaml                                       | 109 ------------
.../post.yaml                                      |  28 ---
.../run.yaml                                       | 109 ------------
...ss-rules-promoted-replica-70b32991cc90e1ca.yaml |   7 +
...-fix-ssl-cert-path-option-35354c9b7a9c37e6.yaml |  20 +++
...he-capabilities-scheduler-d8391183335def9f.yaml |   5 +
...p-fix-python-package-name-0f3ec3f2deec8887.yaml |   8 +
...1-cephx-asynchronous-msgs-6a683076a1fb5a54.yaml |   9 +
...ix-extend-have-wrong-size-7938eaa6591bd2ad.yaml |   7 +
...eck-on-share-access-rules-efdddaf9e6f68fdf.yaml |   7 +
...-user-if-action-forbidden-0da51825756fd5fc.yaml |   7 +
...hare-from-snapshot-failed-053a583522a6fc0e.yaml |   6 +
...ound-replica-parent-share-d8e50659c02b941a.yaml |   5 +
...hot-support-api-error-msg-eaf5fd2b1df97d15.yaml |  10 ++
zuul.d/grenade-jobs.yaml                           |   1 +
zuul.d/project.yaml                                | 124 --------------
76 files changed, 751 insertions(+), 1373 deletions(-)