April 2015 - OpenStack-announce - lists.openstack.org

OpenStack 2015.1.0 ("Kilo") is released !
by Thierry Carrez 30 Apr '15

30 Apr '15

Hello everyone, I'm delighted to announce the final release of OpenStack 2015.1.0, code-named "Kilo". This concludes the 6-month Kilo development cycle, which saw the completion of more than 400 features and the fixing of more than 3300 bugs (only considering the 12 projects that make up this release !). In the name of all the contributors to this release, the OpenStack Technical Committee would like to dedicate it to the loving memory of Chris Yeoh, who passed away from cancer earlier this month. Chris was a long time and prolific open source developer, most recently with IBM. He contributed significantly to the OpenStack project, most notably in the Nova project team. His community spirit, technical contributions and friendship will be missed. You can find source tarballs, together with complete lists of features and bugfixes for each project, at the following links: Compute (Nova): https://launchpad.net/nova/kilo/2015.1.0 Object Storage (Swift): https://launchpad.net/swift/kilo/2.3.0 Image Service (Glance): https://launchpad.net/glance/kilo/2015.1.0 Networking (Neutron): https://launchpad.net/neutron/kilo/2015.1.0 Block Storage (Cinder): https://launchpad.net/cinder/kilo/2015.1.0 Identity (Keystone): https://launchpad.net/keystone/kilo/2015.1.0 Dashboard (Horizon): https://launchpad.net/horizon/kilo/2015.1.0 Telemetry (Ceilometer): https://launchpad.net/ceilometer/kilo/2015.1.0 Orchestration (Heat): https://launchpad.net/heat/kilo/2015.1.0 Database Service (Trove): https://launchpad.net/trove/kilo/2015.1.0 Data Processing (Sahara): https://launchpad.net/sahara/kilo/2015.1.0 Bare metal (Ironic): https://launchpad.net/ironic/kilo/2015.1.0 The Kilo Release Notes wikipage contains an overview of the key features, as well as upgrade notes and current lists of known issues. You can access them at: https://wiki.openstack.org/wiki/ReleaseNotes/Kilo Thanks again to all the individuals who contributed to this development cycle and helped in making this release a success ! -- Thierry Carrez (ttx)

1 0

OpenStack Community Weekly Newsletter (Apr 17 - 24)
by Stefano Maffulli 24 Apr '15

24 Apr '15

Why you should attend an OpenStack Summit OpenStack Summits don’t miss a beat - with a schedule full of diverse breakout sessions, captivating speakers, off-the-wall evening events and the occasional surprise, it’s the twice-yearly event you simply cannot miss. What would you add to the list of 10 most memorable summit moments to date? Gnocchi 1.0: storing metrics and resources at scale Gnocchi provides a scalable way to store and retrieve data and metrics from instances, volumes, networks and all the things that make an OpenStack cloud. Gnocchi also provides a REST API that allows the user to manipulate resources (CRUD) and their attributes, while preserving the history of those resources and their attributes. The Gnocchi team takes great pride in the quality of their documentation too, fully available online. The Road to Vancouver * Canada Visa Information * Official Hotel Room Blocks * 2015 OpenStack T-Shirt Design Contest * Preparation to Design summit * What's a Design Summit? We can squeeze few more people in Upstream Training Relevant Conversations * Please stop reviewing code while asking questions * A big tent home for Neutron backend code * upcoming library releases to unfreeze requirements in master * [Zaqar] Call for adoption (or exclusion?) * Sharing resources across OpenStack instances * 3 API Guidelines up for final review * Third-Party CI Operators: Let's use a common CI Solution! Deadlines and Development Priorities * Candidates for TC (Technical Committee): election is ongoing. Reports from Previous Events * China hosts OpenStack bug-fix hackathon * PyCon 2015 Security Advisories and Notices * [OSSN 0047] Keystone does not validate that identity providers match federation mappings Tips ‘n Tricks * By Steve Hardy: Debugging TripleO Heat templates * By Luc Van Steen: Moving from CityCloud legacy to OpenStack – Part 1 and Part 2 Upcoming Events OpenStack Israel CFP Voting is Open PyCon-AU Openstack miniconf CFP open * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 09, 2015 OpenStack Meetup Hanoi Hanoi, Hanoi, VN * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 02, 2015 OpenStack Day LATAM Mexico City, MX * Jun 04, 2015 OpenStack Days Istanbul – 2015 Istanbul, TR * Jun 08, 2015 OpenStack CEE Day 2015 Budapest, HU * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jun 15, 2015 OpenStack Israel Tel Aviv, IL * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US Other News * EC2-API release 0.1.0 available * OpenStack SWIFT Object Storage Tape Library Connector * OVN and OpenStack Status – 2015-04-21 * OpenStack Kilo RC1 for Ubuntu 14.04 LTS and Ubuntu 15.04 * StackTach.v3 now in production The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

OpenStack Community Weekly Newsletter (Apr 10 - 17)
by Stefano Maffulli 17 Apr '15

17 Apr '15

OpenStack DefCore Community Review – TWO Sessions April 21 (agenda) During the DefCore process, we’ve had regular community check points to review and discuss the latest materials from the committee. With the latest work on the official process and flurry of Guidelines, we’ve got a lot of concrete material to show. To accommodate global participants, we’ll have TWO sessions (and record both): 1. April 21 8 am Central (1 pm UTC) https://join.me/874-029-687 2. April 21 8 pm Central (9 am Hong Kong) https://join.me/903-179-768 Help pick the new logos for OpenStack User Groups & OpenStack Days We are introducing a unique logo for OpenStack User Groups, to help recognize official groups and their important role in helping grow the OpenStack Community. The deadline to complete the survey is Wednesday April 22, 2015. Let your voice be heard: vote for the Superuser Award! The Superuser Awards, first launched at the Paris Summit, recognize a team that uses OpenStack to meaningfully improve their business and differentiate in a competitive industry, while also contributing back to the community. This time, the OpenStack community votes to select the winner. * National Supercomputer Center in Guangzhou * Walmart * eBay Inc. * Comcast OpenStack breaks a new record for active contributors With 556 active contributors per month, this first quarter of 2015 is the highest in the history of OpenStack. Compared to the previous quarter, core and regular contributors have also increased 10 percent and 20 percent, respectively. You can read the complete report, including details of the methodology, on the Activity Board repository or take deep into the activity of OpenStack individual projects. PTL Election Conclusion and Results Congratulations to the newly elected PTL John Garbutt for Nova and thank you Michael Still for the hard work. The other PTLs have been confirmed. The list and full announcement on the mailing list. The Road to Vancouver * Canada Visa Information * Official Hotel Room Blocks * 2015 OpenStack T-Shirt Design Contest * Preparation to Design summit * Liberty Design Summit - Proposed room / time layout * What's a Design Summit? We can squeeze few more people in Upstream Training Relevant Conversations * Proposed Liberty release schedule Deadlines and Development Priorities * Candidate proposals for TC (Technical Committee) positions are now open * proposed/kilo is dead, long live stable/kilo Security Advisories and Notices * Unauthorized delete of versioned Swift object (CVE-2015-1856) * S3Token TLS cert verification option not honored (CVE-2015-1852) Tips ‘n Tricks * By Sergey Melikyan: OpenStack Murano application catalog: Heat-based applications in the cloud * By Steve Dake: Preserving contaner properties via volume mounts * By Assaf Muller: Distributed Virtual Routing – Overview and East/West Routing and Distributed Virtual Routing – SNAT and Distributed Virtual Routing – Floating IPs * By Michael J. Clarkson, Jr.: OpenStack Juno multi compute node Lab – Ready to use environment on AWS and Google Cloud * By Adam Young: Creating a new Network for a dual NIC VM and Using the openstack command line interface to create a new server. Upcoming Events * Apr 17, 2015 Inaugural OpenStack PDX Meetup * Apr 17, 2015 SFBay OpenStack Advanced Track #OSSFO Topic: Keystone * Apr 18, 2015 April Sydney Hackathon * Apr 18, 2015 OpenStack India Meetup, Bangalore Bangalore, Karnataka, IN * Apr 20, 2015 Assemblée générale OpenStackFR 2015 Paris, FR * Apr 20, 2015 Meetup#14 Placement intelligent et SLA avancé avec Nova Scheduler Paris, FR * Apr 20, 2015 Melbourne Meetup featuring Randy Bias * Apr 20 - 21, 2015 OpenStack Conference, part of the CONNECT Show Melbourne, AU * Apr 20, 2015 Ubuntu OpenStack Roadshow London, GB * Apr 20, 2015 OpenStackFR annual general meeting Paris, US * Apr 20, 2015 Advanced placement with Nova Paris, FR * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 21 - 24, 2015 The Great Indian HP Code Off @ GIDS Bangalore, Karnataka, IN * Apr 21, 2015 Ubuntu OpenStack Roadshow Paris, FR * Apr 22, 2015 Canonical Ubuntu OpenStack Roadshow Amsterdam, NL * Apr 22, 2015 Data storage in clouds Athens, GR * Apr 22, 2015 OpenStack’te farkli mimari ornekleri, farklari, artilari, eksileri * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * Apr 22, 2015 OpenStack NYC Meetup New York, NY, US * Apr 22, 2015 Ubuntu OpenStack Roadshow Amsterdam, NL * Apr 22, 2015 Data storage in OpenStack clouds Athens, GR * Apr 23, 2015 OpenStack Philadelphia Meetup Philadelphia, PA, US * Apr 23, 2015 OpenStack L.A. Meetup Pasadena, CA, US * Apr 23, 2015 Ubuntu OpenStack Roadshow Frankfurt, DE * Apr 23, 2015 Business Agility with OpenStack New York City, New York, US * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 09, 2015 OpenStack Meetup Hanoi Hanoi, Hanoi, VN * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 02, 2015 OpenStack Day LATAM Mexico City, MX * Jun 04, 2015 OpenStack Days Istanbul – 2015 Istanbul, TR * Jun 08, 2015 OpenStack CEE Day 2015 Budapest, HU * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jun 15, 2015 OpenStack Israel Tel Aviv, IL * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US Other News * OpenStack Technical Committee candidates * Real innovation? It means keeping cloud solutions simple * What's Up Doc? April 17, 2015 The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 1

[OSSA 2015-007] S3Token TLS cert verification option not honored (CVE-2015-1852)
by Tristan Cacqueray 14 Apr '15

14 Apr '15

=============================================================== OSSA-2015-007: S3Token TLS cert verification option not honored =============================================================== :Date: April 14, 2015 :CVE: CVE-2015-1852 Affects ~~~~~~~ - python-keystoneclient: versions through 1.3.0 - keystonemiddleware: versions through 1.5.0 Description ~~~~~~~~~~~ Brant Knudson from IBM reported a vulnerability in keystonemiddleware (formerly shipped as python-keystoneclient). When the 'insecure' option is set in a S3Token paste configuration file its value is effectively ignored and instead assumed to be true. As a result certificate verification will be disabled, leaving TLS connections open to MITM attacks. Note that it's unusual to explicitly add this option and then set it to false, so the impact of this bug is thought to be limited. All versions of s3_token middleware with TLS settings configured are affected by this flaw. Patches ~~~~~~~ - https://review.openstack.org/173378 (python-keystoneclient) (Icehouse) - https://review.openstack.org/173376 (keystonemiddleware) (Juno) - https://review.openstack.org/173377 (python-keystoneclient) (Juno) - https://review.openstack.org/173365 (keystonemiddleware) (Kilo) - https://review.openstack.org/173370 (python-keystoneclient) (Kilo) Credits ~~~~~~~ - Brant Knudson from IBM (CVE-2015-1852) References ~~~~~~~~~~ - https://launchpad.net/bugs/1411063 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1852 Notes ~~~~~ - This fix will be included in keystonemiddleware 1.6.0 release and python-keystoneclient 1.4.0 release. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[OSSA 2015-006] Unauthorized delete of versioned Swift object (CVE-2015-1856)
by Tristan Cacqueray 14 Apr '15

14 Apr '15

============================================================ OSSA-2015-006: Unauthorized delete of versioned Swift object ============================================================ :Date: April 14, 2015 :CVE: CVE-2015-1856 Affects ~~~~~~~ - Swift: versions through 2.2.2 Description ~~~~~~~~~~~ Clay Gerrard from SwiftStack reported a vulnerability in Swift object versioning. An authenticated user can delete the most recent version of any versioned object whose name is known if the user have listing access to the x-versions-location container. Only Swift setups with allow_version setting are affected. Patches ~~~~~~~ - https://review.openstack.org/173366 (Icehouse) - https://review.openstack.org/173363 (Juno) - https://review.openstack.org/173361 (Kilo) Credits ~~~~~~~ - Clay Gerrard from SwiftStack (CVE-2015-1856) References ~~~~~~~~~~ - https://launchpad.net/bugs/1430645 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1856 Notes ~~~~~ - This fix will be included in the upcoming 2.3.0 release. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

OpenStack 2014.2.3 released
by Adam Gandelman 13 Apr '15

13 Apr '15

Hello everyone, The OpenStack Stable Maintenance team is happy to announce the release of the 2014.2.3 stable Juno release. We have been busy reviewing and accepting backported bugfixes to the stable/juno branches according to the criteria set at: https://wiki.openstack.org/wiki/StableBranch A total of 109 bugs have been fixed across all projects. These updates to Juno are intended to be low risk with no intentional regressions or API changes. The list of bugs, tarballs and other milestone information for each project may be found on Launchpad: https://launchpad.net/ceilometer/juno/2014.2.3 https://launchpad.net/cinder/juno/2014.2.3 https://launchpad.net/glance/juno/2014.2.3 https://launchpad.net/heat/juno/2014.2.3 https://launchpad.net/horizon/juno/2014.2.3 https://launchpad.net/keystone/juno/2014.2.3 https://launchpad.net/nova/juno/2014.2.3 https://launchpad.net/neutron/juno/2014.2.3 https://launchpad.net/trove/juno/2014.2.3 Release notes may be found on the wiki: https://wiki.openstack.org/wiki/ReleaseNotes/2014.2.3 The freeze on the stable/juno branches will be lifted today as we begin working toward the 2014.2.4 release. Thanks, Adam

1 0

OpenStack Community Weekly Newsletter (Apr 3 - 10)
by Stefano Maffulli 10 Apr '15

10 Apr '15

Making your list and checking it twice for the OpenStack Vancouver Summit Emily Hugenbruch shared her pre-summit checklists: great tips there. OVN and OpenStack Integration Development Update The Open vSwitch project announced the OVN effort back in January and Russell Bryant started to look into it. He reports about OVN, calling it “a promising open source backend for OpenStack Neutron”. OpenStack in the classroom Amrith Kumar announced an effort to work with educational institutions in Massachusetts and near Toronto (where Tesora has offices) to try and make available a course on cloud computing with OpenStack as the exemplar system. OpenStack In The Enterprise A new mini-portal on openstack.org website to discover use cases and white papers from the enterprise world. The Road to Vancouver * Sign up for OpenStack Upstream Training in Vancouver * Canada Visa Information * Official Hotel Room Blocks * 2015 OpenStack T-Shirt Design Contest * Preparation to Design summit * Liberty Design Summit - Proposed slot allocation * What's a Design Summit? There is still room for Upstream Training Relevant Conversations * PTL Voting is now open * Kilo stable branches for "other" libraries * The Evolution of core developer to maintainer? * The Core Deficiency * Implementation of Pacemaker Managed OpenStack VM Recovery * Neutron Kilo Retrospective and a Look Toward Liberty * [Neutron] The specs process, effective operators feedback and product management Deadlines and Development Priorities * [Nova] Identifying release critical bugs in Kilo * [Cinder] Bug Triage - Call for Participation * [Nova] Liberty specs are now open and [Nova] Trunk is now Liberty * [neutron] Liberty Specs are now open! Security Advisories and Notices * None Tips ‘n Tricks * By Adam Young: Horizon WebSSO via SSSD * By Assaf Muller: Multinode DVR Devstack * By Alessandro Pilotti: VirtualBox driver for OpenStack Upcoming Events * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 13 - 16, 2015 StackAttack! A HOLatCollaborate15 Las Vegas, NV, US * Apr 15, 2015 iX OpenStack Tag Köln, NRW, DE * Apr 15 - 16, 2015 1º Hangout OpenStack Brasil 2015 Brasil, BR * Apr 16 - 18, 2015 Open Cloud 2015 Beijing, Beijing, CN * Apr 16, 2015 8th OpenStack Meetup Stockholm Stockholm, SE * Apr 16, 2015 8th OpenStack User Group Nordics meetup Stockholm, SE * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * Apr 22, 2015 OpenStack NYC Meetup New York, NY, US * Apr 23, 2015 OpenStack Philadelphia Meetup Philadelphia, PA, US * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC Other News * A community distribution of OpenStack * Why adopting OpenStack for dev/test matters * Gophercloud Update * Why OpenStack will change the way we live, work and play The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

OpenStack Community Weekly Newsletter (Mar 27 - Apr 3)
by Stefano Maffulli 03 Apr '15

03 Apr '15

Game changer: inside Adobe’s new Marketing Cloud architecture The Adobe Marketing Cloud powers software-as-a-service marketing for outfits such as the Los Angeles Kings, eBags and Verizon Wireless. When the IT infrastructure team in Adobe’s Digital Marketing group realized it was time for an evolutionary revamp, it turned to OpenStack and VMware to up its game. Nominations for OpenStack PTLs (Program Technical Leads) are now open Nominations for OpenStack PTLs (Program Technical Leads) are now open and will remain open until April 9, 2015 05:59 UTC. To announce your candidacy please start a new openstack-dev at lists.openstack.org mailing list thread with the program name as a tag, example [Glance] PTL Candidacy with the body as your announcement of intent. People who are not the candidate, please refrain from posting +1 to the candidate announcement posting. Additional information about the nomination process can be found on the wiki. Additions to OpenStack git namespace * Magnum is now in the openstack git namespace * [congress] is an openstack project The Road to Vancouver * Sign up for OpenStack Upstream Training in Vancouver * Canada Visa Information * Official Hotel Room Blocks * 2015 OpenStack T-Shirt Design Contest * Preparation to Design summit * Liberty Design Summit planning * [Nova] Tracking ideas for summit sessions * [QA] Tracking Ideas for Summit Sessions * [neutron] Design Summit Session etherpad Relevant Conversations * The Evolution of core developer to maintainer? * [Nova][Neutron] Status of the nova-network to Neutron migration work * "First App" Tutorial for OpenStack * [api] Erring is Caring: An API Working Group Guideline for Errors * "The Security Team" for OpenStack Deadlines and Development Priorities * [Nova] Identifying release critical bugs in Kilo * [neutron] FF and our march towards the RC * [cinder] Proposals for Liberty Summit * [Cinder] Bug Triage - Call for Participation * [sahara] Design summit proposals for Liberty Summit * [Nova] Liberty specs are now open * [neutron] Liberty Specs are now open! Security Advisories and Notices * None Tips ‘n Tricks * By Victoria Martínez de la Cruz: Creation of Trove-Compatible Images for RDO Reports from Previous Events * OpenStack QA Code Sprint in NYC * Best Practices and Considerations Deploying OpenStack In Production Upcoming Events * Apr 06 - 07, 2015 April Meetup: “I Can Haz Moar Networks?” w/Midokura & Cumulus Networks Morrisville, NC, US * Apr 07, 2015 April Sydney Meetup * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 08 - 09, 2015 Software Defined Networks (SDN) & Linux Based Network OS (#20) Washington D.C., DC, US * Apr 09 - 10, 2015 Are you getting the most out of Cinder block storage in OpenStack? * Apr 09, 2015 OpenStack Howto part 1 - Install and Run Prague, CZ * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 13 - 16, 2015 StackAttack! A HOLatCollaborate15 Las Vegas, NV, US * Apr 15, 2015 iX OpenStack Tag Köln, NRW, DE * Apr 15 - 16, 2015 1º Hangout OpenStack Brasil 2015 Brasil, BR * Apr 16 - 18, 2015 Open Cloud 2015 Beijing, Beijing, CN * Apr 16, 2015 8th OpenStack Meetup Stockholm Stockholm, SE * Apr 16, 2015 8th OpenStack User Group Nordics meetup Stockholm, SE * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * Apr 22, 2015 OpenStack NYC Meetup New York, NY, US * Apr 23, 2015 OpenStack Philadelphia Meetup Philadelphia, PA, US * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC Other News * Parallels goes open source, wants OpenStack’s help to penetrate enterprise * Passion + community support = Success with OpenStack * python-barbicanclient 3.0.3 released * Million level scalability test report from cascading * What's Up Doc? Apr 2 2015 * [release] taskflow 0.8.1 * Call for testing: 2014.2.3 candidate tarballs The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0