January 2016 - OpenStack-announce

[release][stable][sahara] sahara release 3.0.1 (liberty)
by doug＠doughellmann.com 25 Jan '16

25 Jan '16

We are amped to announce the release of: sahara 3.0.1: Sahara project This release is part of the liberty stable release series. With source available at: http://git.openstack.org/cgit/openstack/sahara With package available at: https://pypi.python.org/pypi/sahara For more details, please see below. 3.0.1 ^^^^^ Bug Fixes ********* * Fixed issue with launching clusters without auto-security groups. * Cluster with 'is_protected' field can be created now, closed bug 1510929 * Wait condition feature can be disabled by the option. * Event log hanling fixed in case of problems with volumes formatting, closed bug 1506839 * Fixed search of devices that need to be mounted, closed bug 1508872 * Fixed issues with using Swift as an output datasource. * Fixed arguments list in latest cdh plugin * Fixed problems with validation of job binaries update, closed bug 1508507 * Job execution can be created with 'is_protected' field, closed bug 1510994 * Issues with job types call are fixed. Jobs can be launched from UI if ambari plugin enabled. * Open ports for Kafka in Ambari plugin, closed bug 1512661 * Heat engine shows reasons in case of failure * Escape unhandled unicode characters in environment configuration files * Spark workers are found by fqdn * Timeouts for ssh operations are configurable now * Removed unneeded volume serialization * In case of XFS volume will be formatted with '-f' option. * Added additional filter to volume_type check, closed bug 1508017 Other Notes *********** * Fixed client tempest tests * Fixed tempest config group * Start using reno to manage release notes. Changes in sahara 3.0.0..3.0.1 ------------------------------ 1f3a1a1 Update image address CDH plugin document c716f5b Don't configure hadoop.tmp.dir in Spark plugin abdb0ea Updated from global requirements cc218dd Add release notes for missed bugs 4cd7844 Force releasenotes warnings to be treated as errors d717068 Option for disabling wait condition feature d438011 Remove sharps from release notes b419f5e Updated from global requirements d2a792d Fix Spark installation fails when parsing spark-env.sh ea18624 Remove unneeded 'self' in plugins.cdh.v5_4_0.plugin_utils 2c8b1eb Report stack_status_reason on heat failure a6b3a88 Remove unneeded volume serialization 0920c6d Add "unreleased" release notes page ddd875a Support reno for release notes management 9cb41e4 Fix spark workers do not start in MapR plugin f04da88 Make ssh timeout configurable a944047 Fix of client tests in tempest 5d4871c Fix tempest tests 0e5198b Fixing search of devices that need to be mount ece97e9 Fixing problem with validation of job binaries update 5c7b09d Add additional filter to volume_type check 653d76c Fixing event log handling during volumes mount 0777402 Fixing cluster creation with is_protected field ab75f2b Missing stuff for Kafka in Ambari plugin 95096e6 Fixing job execution creation with is_protected field 68301c4 Add first reno-based release note d736017 Changing fedora image url for grenade job 570a0ba Fixing grenade_job faaa266 Updated from global requirements cd9df52 Add -f option to formatting volumes 2fb37cd Updated from global requirements ea70bb8 Fix issue with job types in Ambari plugin 8abaa88 Updated from global requirements bd944eb Fix .gitreview for stable/liberty branch 7ab41f1 Switch to post-versioning 307c115 Fixing cluster creation without auto_security_group Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .gitreview | 1 + devstack/upgrade/resources.sh | 2 +- devstack/upgrade/settings | 4 +- devstack/upgrade/shutdown.sh | 3 +- releasenotes/notes/.placeholder | 0 releasenotes/notes/asg-fix-6243442b85931c40.yaml | 3 + .../cluster-is-protected-eee9e2bd2595fdc8.yaml | 4 + .../notes/disable-wc-option-ddf011af6ebb32b7.yaml | 3 + .../notes/event-log-handle-97dd75f428aa28f7.yaml | 4 + .../notes/fix-search-devices-72026264ce828187.yaml | 4 + .../fix-spark-swift-outputs-b4cd588b5f4e8571.yaml | 3 + .../notes/fix-tempest-d68a1c712b219a64.yaml | 3 + .../notes/fix_cdh_args-ee888dfeaf8ef0de.yaml | 3 + .../job-binary-validation-3b97219ae8c8e7bb.yaml | 4 + .../job-exec-is-protected-31831f9f3fb51aeb.yaml | 4 + .../notes/job-types-ambari-0873ad7deeecf8ba.yaml | 4 + .../notes/ports-ambari-43c5be3f3e7b3107.yaml | 4 + ...how_stack_failure_reasons-02ca814308c61718.yaml | 3 + .../notes/spark-installation-5ed2c7ca75f79de1.yaml | 3 + .../notes/spark-workers-67ae5e0da9dec137.yaml | 3 + .../notes/ssh-timeout-310a05c55cb0a086.yaml | 3 + .../notes/start-using-reno-689372a0a8dd3093.yaml | 3 + .../notes/unneeded_volume-37032bc35630cb46.yaml | 3 + .../volume-formatting-with-f-1e4459ac32a8957c.yaml | 3 + .../notes/volume-type-check-58203c2df50999d2.yaml | 4 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 216 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/liberty.rst | 6 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 14 +- sahara/api/v10.py | 2 +- sahara/api/v11.py | 3 +- sahara/config.py | 6 +- sahara/db/sqlalchemy/api.py | 9 - sahara/plugins/ambari/plugin.py | 13 +- sahara/plugins/cdh/v5_4_0/plugin_utils.py | 2 +- sahara/plugins/mapr/domain/configuration_file.py | 12 +- sahara/plugins/mapr/services/spark/spark.py | 2 +- sahara/plugins/spark/config_helper.py | 2 - sahara/service/heat/templates.py | 62 +++--- sahara/service/validations/base.py | 4 +- sahara/service/validations/clusters.py | 7 + sahara/service/validations/edp/job_binary.py | 22 ++- sahara/service/validations/edp/job_execution.py | 8 + sahara/service/volumes.py | 69 ++++--- .../tempest/scenario/data_processing/README.rst | 22 ++- .../tempest/scenario/data_processing/plugin.py | 4 +- .../service/validation/edp/test_job_executor.py | 33 ++++ .../validation/test_cluster_update_validation.py | 36 ++++ sahara/utils/openstack/heat.py | 2 +- sahara/utils/ssh_remote.py | 46 ++++- setup.cfg | 1 - test-requirements.txt | 2 + tools/gate/scenario/pre_test_hook.sh | 5 + tox.ini | 3 + 67 files changed, 651 insertions(+), 198 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9746470..d9a2c36 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ jsonschema!=2.5.0,<3.0.0,>=2.0.0 -keystonemiddleware>=2.0.0 +keystonemiddleware!=2.4.0,>=2.0.0 @@ -21,2 +21,2 @@ oslo.log>=1.8.0 # Apache-2.0 -oslo.messaging!=1.17.0,!=1.17.1,>=1.16.0 # Apache-2.0 -oslo.middleware>=2.8.0 # Apache-2.0 +oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,!=3.1.0,>=1.16.0 # Apache-2.0 +oslo.middleware!=3.0.0,!=3.1.0,!=3.2.0,>=2.8.0 # Apache-2.0 @@ -27 +27 @@ oslo.service>=0.7.0 # Apache-2.0 -oslo.utils>=2.0.0 # Apache-2.0 +oslo.utils!=2.6.0,>=2.0.0 # Apache-2.0 @@ -29 +29 @@ paramiko>=1.13.0 -requests>=2.5.2 +requests!=2.8.0,!=2.9.0,>=2.5.2 @@ -32 +32 @@ python-cinderclient>=1.3.1 -python-keystoneclient>=1.6.0 +python-keystoneclient!=1.8.0,>=1.6.0 @@ -34 +34 @@ python-manilaclient>=1.3.0 -python-novaclient>=2.28.1 +python-novaclient!=2.33.0,>=2.28.1 diff --git a/test-requirements.txt b/test-requirements.txt index d55c732..09dba17 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -17,0 +18 @@ pylint==1.4.4 # GNU GPL v2 +reno>=0.1.1 # Apache2 @@ -22,0 +24 @@ testrepository>=0.0.18 +testresources>=0.2.4

1 0

[release] mitaka-2 development milestone
by Thierry Carrez 22 Jan '16

22 Jan '16

1 0

[heat] heat-cfntools release 1.4.2
by Steve Baker 21 Jan '16

21 Jan '16

We are chuffed to announce the release of: heat-cfntools 1.4.2: Tools required to be installed on Heat provisioned cloud instances With source available at: http://git.openstack.org/cgit/openstack/heat-cfntools Please report issues through launchpad: http://bugs.launchpad.net/heat-cfntools For more details, please see below. Changes in heat-cfntools 1.4.1..1.4.2 ------------------------------------- fe2b57b Remove argparse from requirements d3a0e97 Trivial: Remove vim header from source files 6a83420 py26/py33 is no longer supported by Infra's CI 032c385 remove python 2.6 trove classifier 5684248 Put py34 first in the env order of tox e4503e4 Replace assertEqual(None, *) with assertIsNone in tests c737d48 Deprecated tox -downloadcache option removed 6571e5a Don't run commands given as list on shell Diffstat (except docs and test files) ------------------------------------- heat_cfntools/cfntools/cfn_helper.py | 7 ++----- requirements.txt | 1 - setup.cfg | 1 - tools/lintstack.py | 1 - tox.ini | 5 +---- 6 files changed, 30 insertions(+), 16 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 531eb32..e595465 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +1,0 @@ pbr>=0.6,!=0.7,<1.0 -argparse

1 0

[OSSA 2016-004] Swift proxy-server DoS through Large Object (CVE-2016-0737, CVE-2016-0738)
by Tristan Cacqueray 20 Jan '16

20 Jan '16

========================================================== OSSA-2016-004: Swift proxy-server DoS through Large Object ========================================================== :Date: January 20, 2016 :CVE: CVE-2016-0737 (client to proxy), CVE-2016-0738 (proxy to server) Affects ~~~~~~~ - Swift: >=2.2.1 <= 2.3.0, >= 2.4.0 <= 2.5.0 Description ~~~~~~~~~~~ Romain LE DISEZ from OVH and Örjan Persson from Kiliaro independently reported two vulnerabilities in Swift Large Object. By repeatedly requesting and interrupting connections to a Large Object (Dynamic or Static) URL, a remote attacker may exhausts Swift proxy-server resources, potentially resulting in a denial of service. Note that there are two distinct bugs that can exhaust proxy resources, one for client connection (client to proxy), one for servers connection (proxy to server). All Swift setup are affected. Patches ~~~~~~~ - https://review.openstack.org/217750 (client to proxy) (Kilo) - https://review.openstack.org/270234 (proxy to server) (Kilo) - https://review.openstack.org/270235 (proxy to server) (Liberty) - https://review.openstack.org/270233 (proxy to server) (Mitaka) Credits ~~~~~~~ - Romain LE DISEZ from OVH (CVE-2016-0737) - Örjan Persson from Kiliaro (CVE-2016-0738) References ~~~~~~~~~~ - https://bugs.launchpad.net/bugs/1466549 (client to proxy) - https://bugs.launchpad.net/bugs/1493303 (proxy to server) - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0737 (client to proxy) - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0738 (proxy to server) Notes ~~~~~ - The client to proxy issue (CVE-2016-0737) is already fixed in Liberty - The remaining fix will be included in future 2.3.1 (Kilo) and 2.5.1 (Liberty) releases. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[release][stable][heat] python-heatclient release 0.8.1 (liberty)
by doug＠doughellmann.com 20 Jan '16

20 Jan '16

We are glad to announce the release of: python-heatclient 0.8.1: OpenStack Orchestration API Client Library This release is part of the liberty stable release series. With source available at: https://git.openstack.org/cgit/openstack/python-heatclient With package available at: https://pypi.python.org/pypi/python-heatclient Please report issues through launchpad: https://bugs.launchpad.net/python-heatclient For more details, please see below. Changes in python-heatclient 0.8.0..0.8.1 ----------------------------------------- 98b45c3 Fix error message on authentication failure 66af4e3 Update --template-object to support nested stacks f0877c5 Fix Resource.__eq__ mismatch semantics of object equal 6fcf1e8 Fix environment files parsing bug for stack-adopt 706fabe Fix error in stack-list metadata 5d02fc7 Fix the bug when showing event in log format cc7e250 Updated from global requirements d812114 Add option for detailed template error 308f0f8 Update .gitreview for stable/liberty Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + heatclient/common/environment_format.py | 14 +++-- heatclient/common/http.py | 16 ++--- heatclient/common/template_format.py | 14 +++-- heatclient/common/template_utils.py | 30 +++++++--- heatclient/common/utils.py | 4 +- heatclient/openstack/common/apiclient/base.py | 18 +++++- heatclient/v1/shell.py | 6 +- requirements.txt | 8 +-- setup.py | 2 +- test-requirements.txt | 2 +- 20 files changed, 274 insertions(+), 52 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index de9c353..c554db1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ Babel>=1.3 -pbr<2.0,>=1.6 +pbr>=1.6 @@ -12,2 +12,2 @@ oslo.serialization>=1.4.0 # Apache-2.0 -oslo.utils>=2.0.0 # Apache-2.0 -python-keystoneclient>=1.6.0 +oslo.utils!=2.6.0,>=2.0.0 # Apache-2.0 +python-keystoneclient!=1.8.0,>=1.6.0 @@ -16 +16 @@ PyYAML>=3.1.0 -requests>=2.5.2 +requests!=2.8.0,!=2.9.0,>=2.5.2 diff --git a/test-requirements.txt b/test-requirements.txt index 49e38ee..49c83b6 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16 @@ sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -tempest-lib>=0.6.1 +tempest-lib>=0.8.0

1 0

[release][stable][heat] heat release 5.0.1 (liberty)
by doug＠doughellmann.com 20 Jan '16

20 Jan '16

We are delighted to announce the release of: heat 5.0.1: OpenStack Orchestration This release is part of the liberty stable release series. With package available at: https://pypi.python.org/pypi/heat For more details, please see below. 5.0.1 ^^^^^ Other Notes * Start using reno to manage release notes. Changes in heat 5.0.0..5.0.1 ---------------------------- 87116e2 Load template files only from their known source 688089c Support unicode in parameter values 17710f1 Do not return None when get_attr if res is in SNAPSHOT/CHECK 775acf5 Make minimum default num_engine_workers>=4 15a4e99 Fix validation of server personality property d11ed6c Imported Translations from Zanata 93cb720 heat-manage resource_data_list 8b0b513 Fixes the error logic in resource_data_get_all() a50eeef Use negative timeout for convergence unittests 923b8b9 Updated from global requirements f3f753f Fixup ceilometerclient tests 884c644 Eliminate unnecessary sleeps during no-op update d821de5 Don't snapshot if server hasn't been created yet faacb52 Make sure update successful if there is encrypt param 209eb58 Correct list_join function 046ad02 Fix 'release' and 'state_set' for UPDATE action 1012e89 Correct reset_state_on_error() handling ab3c525 Neutron port, tolerate switching network name/id 4d49366 Translate properties before update ca0929b Make SoftwareDeployment name updateable 3dd5200 Don't remove user from groups if groups don't change 54d7b8e Correct nova extension check before saving ports 01d002b Fix VolumeType projects property handling 9e56a47 Make Server software_config_transport updatable f2edd6e add first reno-based release note 3e8bdb7 Don't remove role assignment if no change 4d4846e Reauthenticate on token expiration 5bbb2f9 Add _show_resource to EncryptedVolumeType bd4dbd2 Add reno for release notes management d9eeb2a Fix MagnumClientPluginTests 775b862 Fix HTTP error codes due to invalid templates c3d924f Ensure that stacks can't get stuck IN_PROGRESS fde608d Copy the env to the backup stack in failed update 9688aa6 Reset stack status even when lock engine_id is None 532c8f4 Fix stack lock ActionInProgress in the admin case 531e6ce Allow in-place updates for all compatible types 86198c3 Log an error on an uncaught exception in a thread 04f57ac Catch exceptions for restore_prev_rsrc/prepare_for_replace 4e72e43 Fix mixin class clients 57f6644 Break circular references in client plugins d4c7e3a Try polling swift object before creating stack 3000b92 Fix purging of raw_template rows 070384b Resource.has_interface check get_resource_info result 546e5b1 StackUser tolerate missing user on delete fc9e234 Assert has_calls in tests 2f2b4e0 Allow 'allocation_pools' updatable for neutron subnet e6565b1 Fix handling of FAILED ResourceGroup members on rolling update 3d82e68 Do nothing in prepare_for_replace if port not created 2e71172 Use correct constraint for allowed_address_pairs 0733de2 Updated from global requirements cb39d45 Imported Translations from Zanata 764ec45 Add more informative error during parsing 6c510b7 Allow get_attr: [res_name] format to get all attribute 6d611b7 Merge of three backported commits for fixing liberty gate c7795a7 Fix parameter_defaults for comma_delimited_list and json 020f0c1 Sync integration test requirements Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + heat/api/middleware/fault.py | 1 + heat/cmd/engine.py | 8 +- heat/cmd/manage.py | 15 + heat/common/config.py | 12 +- heat/common/context.py | 3 + heat/common/environment_format.py | 11 +- heat/common/exception.py | 9 +- heat/common/template_format.py | 14 +- heat/db/api.py | 4 +- heat/db/sqlalchemy/api.py | 17 +- heat/engine/api.py | 2 +- heat/engine/cfn/functions.py | 17 +- heat/engine/clients/__init__.py | 15 +- heat/engine/clients/client_plugin.py | 33 +- heat/engine/clients/os/nova.py | 10 +- heat/engine/environment.py | 47 +- heat/engine/hot/functions.py | 45 +- heat/engine/parameters.py | 33 +- heat/engine/resource.py | 66 +- .../openstack/cinder/cinder_encrypted_vol_type.py | 5 + .../openstack/cinder/cinder_volume_type.py | 6 +- heat/engine/resources/openstack/cinder/volume.py | 4 +- .../resources/openstack/heat/random_string.py | 10 +- .../resources/openstack/heat/resource_group.py | 13 +- .../openstack/heat/software_deployment.py | 1 + .../openstack/keystone/role_assignments.py | 66 +- heat/engine/resources/openstack/keystone/user.py | 66 +- .../resources/openstack/neutron/floatingip.py | 12 +- .../resources/openstack/neutron/loadbalancer.py | 4 +- .../resources/openstack/neutron/network_gateway.py | 4 +- heat/engine/resources/openstack/neutron/neutron.py | 8 +- heat/engine/resources/openstack/neutron/port.py | 40 +- heat/engine/resources/openstack/neutron/router.py | 4 +- heat/engine/resources/openstack/neutron/subnet.py | 10 +- .../resources/openstack/neutron/vpnservice.py | 4 +- heat/engine/resources/openstack/nova/server.py | 142 ++-- .../openstack/nova/server_network_mixin.py | 13 +- heat/engine/resources/stack_user.py | 2 + heat/engine/resources/template_resource.py | 26 +- heat/engine/scheduler.py | 9 +- heat/engine/service.py | 104 ++- heat/engine/service_software_config.py | 6 +- heat/engine/stack.py | 37 +- heat/engine/stack_lock.py | 8 +- heat/engine/update.py | 4 +- heat/locale/cs/LC_MESSAGES/heat-log-critical.po | 16 +- heat/locale/de/LC_MESSAGES/heat-log-critical.po | 17 +- heat/locale/de/LC_MESSAGES/heat.po | 33 +- heat/locale/es/LC_MESSAGES/heat-log-critical.po | 17 +- heat/locale/fr/LC_MESSAGES/heat-log-critical.po | 17 +- heat/locale/fr/LC_MESSAGES/heat-log-error.po | 17 +- heat/locale/heat-log-error.pot | 108 ++- heat/locale/heat-log-info.pot | 133 ++-- heat/locale/heat.pot | 847 +++++++++++---------- heat/locale/it/LC_MESSAGES/heat-log-critical.po | 17 +- heat/locale/ja/LC_MESSAGES/heat-log-critical.po | 17 +- heat/locale/ko_KR/LC_MESSAGES/heat-log-critical.po | 17 +- heat/locale/pt/LC_MESSAGES/heat-log-critical.po | 17 +- heat/locale/pt_BR/LC_MESSAGES/heat-log-critical.po | 17 +- heat/locale/tr_TR/LC_MESSAGES/heat-log-critical.po | 17 +- heat/locale/zh_CN/LC_MESSAGES/heat-log-critical.po | 17 +- heat/locale/zh_TW/LC_MESSAGES/heat-log-critical.po | 17 +- heat/objects/raw_template.py | 3 +- heat/objects/resource_data.py | 5 +- .../functional/test_create_update.py | 131 ++++ .../test_create_update_neutron_subnet.py | 88 +++ releasenotes/notes/.placeholder | 0 .../notes/60fdcaba00e30d02-start-using-reno.yaml | 3 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 273 +++++++ releasenotes/source/index.rst | 9 + releasenotes/source/liberty.rst | 6 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 14 +- setup.cfg | 1 - test-requirements.txt | 2 + tox.ini | 3 + 115 files changed, 2974 insertions(+), 1241 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5df80f6..5f4738e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11 @@ greenlet>=0.3.2 -keystonemiddleware>=2.0.0 +keystonemiddleware!=2.4.0,>=2.0.0 @@ -22,2 +22,2 @@ oslo.log>=1.8.0 # Apache-2.0 -oslo.messaging!=1.17.0,!=1.17.1,>=1.16.0 # Apache-2.0 -oslo.middleware>=2.8.0 # Apache-2.0 +oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,!=3.1.0,>=1.16.0 # Apache-2.0 +oslo.middleware!=3.0.0,!=3.1.0,!=3.2.0,>=2.8.0 # Apache-2.0 @@ -28 +28 @@ oslo.service>=0.7.0 # Apache-2.0 -oslo.utils>=2.0.0 # Apache-2.0 +oslo.utils!=2.6.0,>=2.0.0 # Apache-2.0 @@ -39 +39 @@ python-heatclient>=0.3.0 -python-keystoneclient>=1.6.0 +python-keystoneclient!=1.8.0,>=1.6.0 @@ -44 +44 @@ python-neutronclient>=2.6.0 -python-novaclient>=2.28.1 +python-novaclient!=2.33.0,>=2.28.1 @@ -51 +51 @@ PyYAML>=3.1.0 -requests>=2.5.2 +requests!=2.8.0,!=2.9.0,>=2.5.2 diff --git a/test-requirements.txt b/test-requirements.txt index 6b71384..443625f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -17,0 +18 @@ psycopg2>=2.5 +reno>=0.1.1 # Apache2 @@ -21,0 +23 @@ testtools>=1.4.0 +testresources>=0.2.4

1 0

[release][heat] heat release 6.0.0.0b2 (mitaka)
by doug＠doughellmann.com 20 Jan '16

20 Jan '16

We are tickled pink to announce the release of: heat 6.0.0.0b2: OpenStack Orchestration This release is part of the mitaka release series. With package available at: https://pypi.python.org/pypi/heat For more details, please see below. Changes in heat 6.0.0.0b1..6.0.0.0b2 ------------------------------------ c435133 Updated from global requirements b3a5665 Provide software deployment id on create 89dc06e Replace the word "printf'd" with "formatted" a0b93fe Support neutron address scope ed33ec5 deprecate module heat.api.middleware.ssl bf20657 Unify workers options for API services 6ffc503 Imported Translations from Zanata 82687a6 Use correct user_domain_id when create trust auth plugin 434295e Support unicode in parameter values 2d29793 Incorrect grammar with dot f7b7e55 Use wrapped message in error log bb9d34c use stderr for error echo message b445f42 Updated from global requirements eaca2f4 Update links for CLI Reference 34b49ce Convert from mox to mock in test_signal 1636b3b Handle invalid stack names which are non-string 89abb70 Raise with traceback 6a9fa9d Remove extra whitespace cae55d8 Remove unconditional return of user_id 6d4c95a Fixup ceilometerclient tests cfe9b25 Add release notes for event-transport c5aec2b Make volume type is_public property updatable 4200b2c Use client_plugin as a function b797457 Don't wait for undefined actions in SoftwareComponent 6b07d55 Create zaqar queues with the proper token 397acd7 Enable commented software component test adb2121 Make minimum default num_engine_workers>=4 4808c93 Fix OS::Neutron:Net handle_update 3fc7dee Fix provider_net resource update ce46629 Populate context roles when using stored context db52df4 Updated from global requirements 48257a0 Add tests for heat template apis c8818c8 Add resolve_outputs parameter to stacks API b84417b Convergence: Pick resource from dead engine worker 0e9f78d Fix race condition in tests with swift key 054f680 Fix validation of server personality property 794a39c Improve gateway_ip updation for subnet 100f915 Remove stray debug from context.py 4f3246d Event transport 994b1e4 Replace deprecated LOG.warn with LOG.warning b36b535 Use user_domain for password auth_plugin a9d7623 Revert "Disable CeilometerAlarmTest.test_alarm" e64c194 Fix grammatical mistake, Changed character from "an" to "a" in below files: 5eec4c0 Pass domain id to ceilometer client 378bcde Init local request context with user/project domain infos 2ca6914 Replace logging lib 0976a20 Replace assertTrue(isinstance()) with assertIsInstance() a5bcc33 Updated from global requirements dd3bc77 Add basic get_live_state implementation 509790c Add join to workflow (mistral resource) dcac282 Add OS::Senlin::Profile resource 18a3d93 Add release note for bp/api-call-output 208d2de Using LOG.warning replace LOG.warn bf8f99e Fix some inconsistency in docstrings 32ddfbf Use flavors.get when finding with id c9abb47 Wrong usage of "an" 3b37f10 Make sure update access mode for volume in available 4235bd3 Wrong usage of "a" bb79efe Trivial: Remove unused logging import a0ab6ef Fix using mock return_value in unittests 6294168 Add descriptions to all openstack resources (Part 1) 7ae4b32 Disable CeilometerAlarmTest.test_alarm 90ea972 Remove defaults for handle_update parameters f98943f Use create_with_template for RG create 9d864e8 Remove meaningless default value in __get__() afb7b73 Add OS::Senlin::Cluster resource d954d06 Add release note for bp/support-host-aggregate 3a5abef Add release note for bp/support-neutron-qos cb07090 replace deprecated oslo_messaging _impl_messaging cbd48bd Add neutron vpnaas configuration in integration tests. 58624d4 Support RackConnect V3 LB in Rackspace AutoScaleGroup Resource aa3d01e Remove duplicate keys from dictionary 8e5fe96 Added ResourceChain plugin f2dcc46 Neutron port allow switching between network_id and network c3a8cc4 Use flavors.find interface to find flavors eb68e1f remove the mutable default arguments "[]" or "{}" f9de87f Don't call neutron when there is no prop_diff c1a3af1 Updated from global requirements 4dc9155 Add note for subnet pool support 599311d Enable simple json format in workflow signal 6cece5b Fix database purge query 3a82e0c Neutron port, tolerate switching network name/id efa46fa Flag to observe live state for resources de61800 Add neutron provider constraints 6ef46af heat-manage resource_data_list 4e39eb0 Make value_specs updatable for firewall resource 8d2672d Fixes the error logic in resource_data_get_all() ea0d926 Remove check for managed cloud role 087bbe9 Make SoftwareDeployment name updateable 0e66dd9 Provide the QoS capability for port 385aa7d Correct errors of HostAggregate handling bed7e1f Use specified client service name for client usage d915471 Stop ignore skipped crypt_operation option a77739b Remove unused argument 'current_version' 390cdb9 Refactor neutron constraints f5e083e Fix _show_resource in Designate::Record ef224da Fix property TTL in Designate::Domain 44c958b Provide QoS capability for neutron network 8b19e85 Make root_stack_id determination more robust 357c790 Updated from global requirements e1d0b6c Call _persist_state for UPDATE in 'state_set' c87eddf Fix min value in ttl range of Designate::Record 7264fc5 Use EntityNotFound instead of NotFound from Manila c265494 Add validate_with_client in BaseCustomConstraint b8c5199 Fix time mocking on wait condition timeout tests e343725 Support neutron QoSBandwidthLimitRule resource plugin b646c6b Fix mocking in several tests causing excessive run-times 1e75301 Remove unused LOG variable with logging import 5626364 Fix event filtering in event-show a23e6a6 Don't remove user from groups if groups don't change bd83d85 Updated from global requirements 7034a27 Support neutron QoSPolicy resource plugin d66d57f Eliminate unnecessary sleeps during no-op update 67f12e5 Add trustee config group to sample config f663909 Add tests for api calls show and list outputs 31537ee Use user id instead of user name in notification body 53e1665 Re-enable ceilometer test 6b88bd7 Skip CeilometerAlarmTest.test_alarm 242b066 Improve log messages from scheduler db7ab8d Get rid of bogus debug logging in parameter groups 2fe6dee Make sure update successful if there is encrypt param 63141b2 Correct reset_state_on_error() handling 8cc95ba Updated from global requirements 9f66112 Improve output when output resolve raises error 411360f Fix to send only one notification when update completes 4fdba06 Remove version from setup.cfg 0500ac6 Don't remove role assignment if no change ef2a841 Update OS::Magnum::BayModel to not require network_driver b5576d4 Add subnetpool property to subnet resource c716c8b Add SubnetPool neutron Resource 3d75cc8 Add neutron address_scope constraint 02a0025 Allow many-to-one glob mapping in registry af495fe Move update_policy parsing to Resource 6e0a9f9 Add profile constraint to senlin_plugin 734c63c Use constants for URL schemes in template_resource e0db248 Refactor template_resource.generate_class() 9a3c3c0 Get rid of the Resource.resource_class() method 06a713c Add a separate get_class_to_instantiate() method to Environment 9935c38 Raise EntityNotFound in get_resource_info() 0af8a5d Use EntityNotFound as super class for exceptions. Diffstat (except docs and test files) ------------------------------------- bin/heat-db-setup | 12 +- bin/heat-keystone-setup | 6 +- bin/heat-keystone-setup-domain | 2 +- config-generator.conf | 1 + .../heat_docker/resources/docker_container.py | 3 +- contrib/rackspace/heat_keystoneclient_v2/client.py | 4 +- contrib/rackspace/rackspace/clients.py | 2 +- .../rackspace/rackspace/resources/auto_scale.py | 33 +- .../rackspace/rackspace/resources/cloud_server.py | 34 +- .../rackspace/rackspace/resources/cloudnetworks.py | 6 +- contrib/rackspace/requirements.txt | 2 +- devstack/upgrade/upgrade.sh | 2 +- etc/heat/api-paste.ini | 9 +- heat/api/cfn/v1/stacks.py | 2 +- heat/api/cfn/versions.py | 2 +- heat/api/cloudwatch/watch.py | 2 +- heat/api/middleware/ssl.py | 5 + heat/api/openstack/__init__.py | 3 + heat/api/openstack/v1/events.py | 2 +- heat/api/openstack/v1/stacks.py | 11 +- heat/api/openstack/versions.py | 2 +- heat/cmd/engine.py | 8 +- heat/cmd/manage.py | 26 +- heat/common/auth_password.py | 3 +- heat/common/cache.py | 3 +- heat/common/config.py | 18 +- heat/common/context.py | 75 +- heat/common/custom_backend_auth.py | 2 +- heat/common/environment_format.py | 6 +- heat/common/exception.py | 10 +- heat/common/heat_keystoneclient.py | 8 +- heat/common/netutils.py | 26 + heat/common/wsgi.py | 32 +- heat/db/api.py | 6 +- heat/db/sqlalchemy/api.py | 112 +- heat/db/sqlalchemy/models.py | 2 +- heat/db/sqlalchemy/utils.py | 9 +- heat/engine/api.py | 21 +- heat/engine/attributes.py | 35 +- heat/engine/clients/__init__.py | 2 +- heat/engine/clients/client_plugin.py | 2 +- heat/engine/clients/os/barbican.py | 4 +- heat/engine/clients/os/ceilometer.py | 14 +- heat/engine/clients/os/cinder.py | 42 +- heat/engine/clients/os/designate.py | 15 +- heat/engine/clients/os/glance.py | 20 +- heat/engine/clients/os/heat_plugin.py | 19 +- heat/engine/clients/os/keystone.py | 49 +- heat/engine/clients/os/magnum.py | 10 +- heat/engine/clients/os/manila.py | 24 +- heat/engine/clients/os/mistral.py | 4 +- heat/engine/clients/os/monasca.py | 10 +- heat/engine/clients/os/neutron/__init__.py | 16 +- .../engine/clients/os/neutron/lbaas_constraints.py | 42 +- .../clients/os/neutron/neutron_constraints.py | 95 +- heat/engine/clients/os/nova.py | 111 +- heat/engine/clients/os/sahara.py | 27 +- heat/engine/clients/os/senlin.py | 13 + heat/engine/clients/os/swift.py | 8 +- heat/engine/clients/os/trove.py | 37 +- heat/engine/clients/os/zaqar.py | 24 +- heat/engine/clients/progress.py | 6 + heat/engine/constraints.py | 13 +- heat/engine/environment.py | 103 +- heat/engine/event.py | 21 + heat/engine/hot/functions.py | 2 +- heat/engine/parameter_groups.py | 6 +- heat/engine/resource.py | 97 +- heat/engine/resources/__init__.py | 8 + .../resources/aws/autoscaling/scaling_policy.py | 3 - heat/engine/resources/aws/ec2/eip.py | 3 +- heat/engine/resources/aws/ec2/instance.py | 26 +- heat/engine/resources/openstack/barbican/order.py | 7 + heat/engine/resources/openstack/barbican/secret.py | 7 + .../engine/resources/openstack/ceilometer/alarm.py | 15 + .../openstack/ceilometer/gnocchi/alarm.py | 16 + .../openstack/cinder/encrypted_volume_type.py | 3 + heat/engine/resources/openstack/cinder/volume.py | 123 +- .../resources/openstack/cinder/volume_type.py | 13 +- .../engine/resources/openstack/designate/domain.py | 19 +- .../engine/resources/openstack/designate/record.py | 17 +- heat/engine/resources/openstack/glance/image.py | 6 +- .../resources/openstack/heat/autoscaling_group.py | 9 +- .../resources/openstack/heat/instance_group.py | 17 +- .../resources/openstack/heat/random_string.py | 10 +- .../resources/openstack/heat/remote_stack.py | 5 +- .../resources/openstack/heat/resource_chain.py | 212 ++ .../resources/openstack/heat/resource_group.py | 22 +- .../resources/openstack/heat/software_config.py | 3 - .../openstack/heat/software_deployment.py | 16 +- .../resources/openstack/heat/test_resource.py | 2 +- .../resources/openstack/keystone/endpoint.py | 7 +- heat/engine/resources/openstack/keystone/group.py | 9 +- .../engine/resources/openstack/keystone/project.py | 9 +- heat/engine/resources/openstack/keystone/role.py | 7 +- .../openstack/keystone/role_assignments.py | 50 +- .../engine/resources/openstack/keystone/service.py | 5 +- heat/engine/resources/openstack/keystone/user.py | 36 +- heat/engine/resources/openstack/magnum/baymodel.py | 28 +- .../resources/openstack/manila/share_type.py | 2 +- .../resources/openstack/mistral/cron_trigger.py | 8 + .../engine/resources/openstack/mistral/workflow.py | 118 +- .../openstack/monasca/alarm_definition.py | 7 +- .../resources/openstack/monasca/notification.py | 7 +- .../resources/openstack/neutron/address_scope.py | 104 + .../engine/resources/openstack/neutron/firewall.py | 10 +- .../resources/openstack/neutron/loadbalancer.py | 3 + heat/engine/resources/openstack/neutron/net.py | 60 +- heat/engine/resources/openstack/neutron/neutron.py | 20 +- heat/engine/resources/openstack/neutron/port.py | 56 +- .../resources/openstack/neutron/provider_net.py | 36 +- heat/engine/resources/openstack/neutron/qos.py | 221 ++ heat/engine/resources/openstack/neutron/router.py | 5 + heat/engine/resources/openstack/neutron/subnet.py | 82 +- .../resources/openstack/neutron/subnetpool.py | 212 ++ .../resources/openstack/nova/host_aggregate.py | 31 +- heat/engine/resources/openstack/nova/server.py | 18 +- .../engine/resources/openstack/sahara/templates.py | 2 +- heat/engine/resources/openstack/senlin/__init__.py | 0 heat/engine/resources/openstack/senlin/cluster.py | 214 ++ heat/engine/resources/openstack/senlin/profile.py | 108 + heat/engine/resources/openstack/swift/swift.py | 2 +- heat/engine/resources/openstack/trove/cluster.py | 14 +- .../resources/openstack/trove/os_database.py | 14 +- heat/engine/resources/openstack/zaqar/queue.py | 2 +- heat/engine/resources/signal_responder.py | 4 +- heat/engine/resources/stack_resource.py | 4 +- heat/engine/resources/stack_user.py | 11 +- heat/engine/resources/template_resource.py | 45 +- heat/engine/resources/wait_condition.py | 4 +- heat/engine/scheduler.py | 25 +- heat/engine/service.py | 51 +- heat/engine/service_software_config.py | 33 +- heat/engine/service_stack_watch.py | 5 +- heat/engine/stack.py | 111 +- heat/engine/stack_lock.py | 4 +- heat/engine/sync_point.py | 2 +- heat/engine/template.py | 3 - heat/engine/update.py | 3 +- heat/engine/watchrule.py | 15 +- heat/engine/worker.py | 6 + heat/locale/cs/LC_MESSAGES/heat-log-critical.po | 14 +- heat/locale/de/LC_MESSAGES/heat-log-critical.po | 14 +- heat/locale/de/LC_MESSAGES/heat.po | 135 +- heat/locale/es/LC_MESSAGES/heat-log-critical.po | 14 +- heat/locale/fr/LC_MESSAGES/heat-log-critical.po | 14 +- heat/locale/fr/LC_MESSAGES/heat-log-error.po | 14 +- heat/locale/heat-log-error.pot | 112 +- heat/locale/heat-log-info.pot | 254 +- heat/locale/heat-log-warning.pot | 154 +- heat/locale/heat.pot | 3152 +++++++++++--------- heat/locale/it/LC_MESSAGES/heat-log-critical.po | 14 +- heat/locale/ja/LC_MESSAGES/heat-log-critical.po | 14 +- heat/locale/ko_KR/LC_MESSAGES/heat-log-critical.po | 14 +- heat/locale/pt/LC_MESSAGES/heat-log-critical.po | 14 +- heat/locale/pt_BR/LC_MESSAGES/heat-log-critical.po | 14 +- heat/locale/tr_TR/LC_MESSAGES/heat-log-critical.po | 14 +- heat/locale/zh_CN/LC_MESSAGES/heat-log-critical.po | 14 +- heat/locale/zh_TW/LC_MESSAGES/heat-log-critical.po | 14 +- heat/objects/raw_template.py | 3 +- heat/objects/resource_data.py | 5 +- heat/objects/stack.py | 9 +- heat/rpc/api.py | 8 +- heat/rpc/client.py | 15 +- .../heat/test_instance_group_update_policy.py | 15 +- .../openstack/heat/test_software_component.py | 25 +- .../openstack/heat/test_software_deployment.py | 82 +- .../openstack/keystone/test_role_assignments.py | 14 + .../openstack/neutron/test_neutron_firewall.py | 43 +- .../openstack/neutron/test_neutron_floating_ip.py | 33 +- .../openstack/neutron/test_neutron_loadbalancer.py | 34 +- .../neutron/test_neutron_network_gateway.py | 27 +- .../openstack/neutron/test_neutron_provider_net.py | 22 +- .../openstack/neutron/test_neutron_subnetpool.py | 271 ++ .../openstack/neutron/test_neutron_vpnservice.py | 12 +- .../functional/test_autoscaling.py | 10 +- .../test_create_update_neutron_subnet.py | 60 +- .../functional/test_resource_chain.py | 148 + .../scenario/test_ceilometer_alarm.py | 4 +- .../notes/api-outputs-6d09ebf5044f51c3.yaml | 11 + ...bp-support-host-aggregate-fbc4097f4e6332b8.yaml | 6 + .../bp-support-neutron-qos-3feb38eb2abdcc87.yaml | 10 + .../notes/event-transport-302d1db6c5a5daa9.yaml | 5 + .../legacy-stack-user-id-cebbad8b0f2ed490.yaml | 7 + .../neutron-address-scope-ce234763e22c7449.yaml | 10 + .../subnet-pool-resource-c32ff97d4f956b73.yaml | 9 + requirements.txt | 91 +- setup.cfg | 14 +- test-requirements.txt | 28 +- uninstall.sh | 4 +- 276 files changed, 9266 insertions(+), 3794 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index dfb8258..c53cfc7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5,2 @@ -pbr>=1.6 -Babel>=1.3 +pbr>=1.6 # Apache-2.0 +Babel>=1.3 # BSD @@ -8,6 +8,7 @@ croniter>=0.3.4 # MIT License -cryptography>=1.0 # Apache-2.0 -eventlet>=0.17.4 -greenlet>=0.3.2 -keystonemiddleware!=2.4.0,>=2.0.0 -lxml>=2.3 -netaddr!=0.7.16,>=0.7.12 +cryptography>=1.0 # BSD/Apache-2.0 +debtcollector>=0.3.0 # Apache-2.0 +eventlet>=0.17.4 # MIT +greenlet>=0.3.2 # MIT +keystonemiddleware>=4.0.0 # Apache-2.0 +lxml>=2.3 # BSD +netaddr!=0.7.16,>=0.7.12 # BSD @@ -15 +16 @@ oslo.cache>=0.8.0 # Apache-2.0 -oslo.config>=2.7.0 # Apache-2.0 +oslo.config>=3.2.0 # Apache-2.0 @@ -18 +19 @@ oslo.context>=0.2.0 # Apache-2.0 -oslo.db>=3.2.0 # Apache-2.0 +oslo.db>=4.1.0 # Apache-2.0 @@ -20,2 +21,2 @@ oslo.i18n>=1.5.0 # Apache-2.0 -oslo.log>=1.12.0 # Apache-2.0 -oslo.messaging!=2.8.0,>2.6.1 # Apache-2.0 +oslo.log>=1.14.0 # Apache-2.0 +oslo.messaging!=2.8.0,!=3.1.0,>2.6.1 # Apache-2.0 @@ -26,32 +27,32 @@ oslo.serialization>=1.10.0 # Apache-2.0 -oslo.service>=0.12.0 # Apache-2.0 -oslo.utils>=2.8.0 # Apache-2.0 -osprofiler>=0.3.1 # Apache-2.0 -oslo.versionedobjects>=0.13.0 -PasteDeploy>=1.5.0 -pycrypto>=2.6 -python-barbicanclient>=3.3.0 -python-ceilometerclient>=2.0.0 -python-cinderclient>=1.3.1 -python-designateclient>=1.5.0 -python-glanceclient>=0.18.0 -python-heatclient>=0.6.0 -python-keystoneclient!=1.8.0,>=1.6.0 -python-magnumclient>=0.2.1 -python-manilaclient>=1.3.0 -python-mistralclient>=1.0.0 -python-neutronclient>=2.6.0 -python-novaclient!=2.33.0,>=2.29.0 -python-openstackclient>=1.5.0 -python-saharaclient>=0.10.0 -python-senlinclient>=0.1.7 -python-swiftclient>=2.2.0 -python-troveclient>=1.2.0 -python-zaqarclient>=0.3.0 -pytz>=2013.6 -PyYAML>=3.1.0 -requests>=2.8.1 -Routes!=2.0,!=2.1,>=1.12.3;python_version=='2.7' -Routes!=2.0,>=1.12.3;python_version!='2.7' -six>=1.9.0 -SQLAlchemy<1.1.0,>=0.9.9 -sqlalchemy-migrate>=0.9.6 +oslo.service>=1.0.0 # Apache-2.0 +oslo.utils>=3.4.0 # Apache-2.0 +osprofiler>=0.4.0 # Apache-2.0 +oslo.versionedobjects>=0.13.0 # Apache-2.0 +PasteDeploy>=1.5.0 # MIT +pycrypto>=2.6 # Public Domain +python-barbicanclient>=3.3.0 # Apache-2.0 +python-ceilometerclient>=2.2.1 # Apache-2.0 +python-cinderclient>=1.3.1 # Apache-2.0 +python-designateclient>=1.5.0 # Apache-2.0 +python-glanceclient>=1.2.0 # Apache-2.0 +python-heatclient>=0.6.0 # Apache-2.0 +python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 +python-magnumclient>=0.2.1 # Apache-2.0 +python-manilaclient>=1.3.0 # Apache-2.0 +python-mistralclient>=1.0.0 # Apache-2.0 +python-neutronclient>=2.6.0 # Apache-2.0 +python-novaclient!=2.33.0,>=2.29.0 # Apache-2.0 +python-openstackclient>=2.0.0 # Apache-2.0 +python-saharaclient>=0.10.0 # Apache-2.0 +python-senlinclient>=0.1.7 # Apache-2.0 +python-swiftclient>=2.2.0 # Apache-2.0 +python-troveclient>=1.2.0 # Apache-2.0 +python-zaqarclient>=0.3.0 # Apache-2.0 +pytz>=2013.6 # MIT +PyYAML>=3.1.0 # MIT +requests!=2.9.0,>=2.8.1 # Apache-2.0 +Routes!=2.0,!=2.1,>=1.12.3;python_version=='2.7' # MIT +Routes!=2.0,>=1.12.3;python_version!='2.7' # MIT +six>=1.9.0 # MIT +SQLAlchemy<1.1.0,>=1.0.10 # MIT +sqlalchemy-migrate>=0.9.6 # Apache-2.0 @@ -59 +60 @@ stevedore>=1.5.0 # Apache-2.0 -WebOb>=1.2.3 +WebOb>=1.2.3 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index a6e0bba..a32e422 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7,5 +7,5 @@ hacking<0.11,>=0.10.0 -bandit>=0.13.2 -coverage>=3.6 -kombu>=3.0.7 -mock>=1.2 -mox3>=0.7.0 +bandit>=0.13.2 # Apache-2.0 +coverage>=3.6 # Apache-2.0 +kombu>=3.0.7 # BSD +mock>=1.2 # BSD +mox3>=0.7.0 # Apache-2.0 @@ -15,9 +15,9 @@ oslotest>=1.10.0 # Apache-2.0 -paramiko>=1.13.0 -qpid-python;python_version=='2.7' -psycopg2>=2.5 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -testrepository>=0.0.18 -testscenarios>=0.4 -testtools>=1.4.0 -testresources>=0.2.4 -reno>=0.1.1 # Apache2 +paramiko>=1.13.0 # LGPL +qpid-python;python_version=='2.7' # Apache-2.0 +psycopg2>=2.5 # LGPL/ZPL +sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD +testrepository>=0.0.18 # Apache-2.0/BSD +testscenarios>=0.4 # Apache-2.0/BSD +testtools>=1.4.0 # MIT +testresources>=0.2.4 # Apache-2.0/BSD +reno>=0.1.1 # Apache2

1 0

[OSSA 2016-003] Heat denial of service through template-validate (CVE-2015-5295)
by Tristan Cacqueray 19 Jan '16

19 Jan '16

=============================================================== OSSA-2016-003: Heat denial of service through template-validate =============================================================== :Date: January 19, 2016 :CVE: CVE-2015-5295 Affects ~~~~~~~ - Heat: <=2015.1.2, ==5.0.0 Description ~~~~~~~~~~~ Steven Hardy from Red Hat reported a vulnerability in Heat template validation. By referencing a local file like /dev/zero, an authenticated user may trick the heat engine service to load arbitrary local file content resulting in a Denial of Service attack through memory exhaustion. Note that the file content is not written back to the user, though the user can determine if a file exists and if it is readable by heat-engine. All Heat setups are affected. Patches ~~~~~~~ - https://review.openstack.org/269692 (Kilo) - https://review.openstack.org/269691 (Liberty) - https://review.openstack.org/269689 (Mitaka) Credits ~~~~~~~ - Steven Hardy from Red Hat (CVE-2015-5295) References ~~~~~~~~~~ - https://bugs.launchpad.net/bugs/1496277 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5295 Notes ~~~~~ - This fix will be included in future 2015.1.3 (kilo) and 5.0.1 (liberty) releases. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[release][stable][neutron] python-neutronclient release 3.1.1 (liberty)
by doug＠doughellmann.com 19 Jan '16

19 Jan '16

We are pumped to announce the release of: python-neutronclient 3.1.1: CLI and Client Library for OpenStack Networking This release is part of the liberty stable release series. With source available at: http://git.openstack.org/cgit/openstack/python-neutronclient With package available at: https://pypi.python.org/pypi/python-neutronclient Please report issues through launchpad: http://bugs.launchpad.net/python-neutronclient For more details, please see below. Changes in python-neutronclient 3.1.0..3.1.1 -------------------------------------------- c5e1d2b Ensure to decode bytes or fail 67d1b49 Do not allow name lookups on RBAC policies c816799 Updated from global requirements ac031aa Updated from global requirements 0590835 Revert parent_id and obj_id parameter order eb97444 Updated from global requirements c5d04c9 Let devstack-gate handle the gate hook timeout db7eb55 Py3k compliance: check for bytes when making a string ef326ae Update .gitreview for stable/liberty Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + neutronclient/neutron/v2_0/rbac.py | 4 ++++ neutronclient/v2_0/client.py | 6 +++--- requirements.txt | 6 +++--- 6 files changed, 13 insertions(+), 12 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6a677ab..279f605 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,3 +11,3 @@ oslo.serialization>=1.4.0 # Apache-2.0 -oslo.utils>=2.0.0 # Apache-2.0 -requests>=2.5.2 -python-keystoneclient>=1.6.0 +oslo.utils!=2.6.0,>=2.0.0 # Apache-2.0 +requests!=2.8.0,>=2.5.2 +python-keystoneclient!=1.8.0,>=1.6.0

1 0

[release][stable][nova] nova release 12.0.1 (liberty)
by doug＠doughellmann.com 19 Jan '16

19 Jan '16

We are thrilled to announce the release of: nova 12.0.1: Cloud computing fabric controller This release is part of the liberty stable release series. With package available at: https://pypi.python.org/pypi/nova For more details, please see below. 12.0.1 ^^^^^^ The 12.0.1 release contains fixes for two security issues. Security Issues *************** * [OSSA 2016-001] Nova host data leak through snapshot (CVE-2015-7548) * Bug 1524274 (https://bugs.launchpad.net/nova/+bug/1524274) * Announcement [OSSA 2016-002] Xen connection password leak in logs via StorageError (CVE-2015-8749) * Bug 1516765 (https://bugs.launchpad.net/nova/+bug/1516765) * Announcement Bug Fixes ********* * Fixes a bug where Nova services won't recover after a temporary DB connection issue, when service group DB driver is used together with local conductor, as the driver only handles RPC timeout errors. For more info see https://bugs.launchpad.net/nova/+bug/1505471 * Fixes a bug where Nova services won't recover after a temporary DB / MQ connection issue, when service group DB driver is used together with remote conductor, as the driver only handles RPC timeout errors and does not account for other types of errors (e.g. wrapped DB errors on the remote conductor transported over RPC) For more info see https://bugs.launchpad.net/nova/+bug/1517926 Other Notes *********** * Start using reno to manage release notes. Changes in nova 12.0.0..12.0.1 ------------------------------ 0dac205 Treat sphinx warnings as errors when building release notes 9c3cce7 Fix warning in 12.0.1-cve-bugs-7b04b2e34a3e9a70.yaml release note c9c0b1b Fix backing file detection in libvirt live snapshot 9dbf601 Imported Translations from Zanata b2acc9f Add security fixes to the release notes for 12.0.1 a9c8dee Fix format conversion in libvirt snapshot cd4eeea Fix format detection in libvirt snapshot 51bfbbd VMware: specify chunk size when reading image data 1590e13 Imported Translations from Zanata cf75bf2 Revert "Fixes Python 3 str issue in ConfigDrive creation" 7c1f1af Don't load deleted instances b20f058 Imported Translations from Zanata 9d47930 Make scheduler_hints schema allow list of id 05e54eb Add -constraints sections for CI jobs 1a688e3 Remove the TestRemoteObject class 8005a1e Updated from global requirements b8c20a8 VMware: fix bug for config drive when inventory folder is used 94d6b69 Omnibus stable fix for upstream requirements breaks 288c87f Refresh stale volume BDMs in terminate_connection ff36a23 Fix metadata service security-groups when using Neutron 6ba4803 Add "vnc" option group for sample nova.conf file 29f70e7 Scheduler: honor the glance metadata for hypervisor details 821f644 reno: document fixes for service state reporting issues e0647dd servicegroup: stop zombie service due to exception 1f94018 Imported Translations from Zanata cf197ec xen: mask passwords in volume connection_data dict d0f4a37 Fix is_volume_backed_instance() for unset image_ref b04d0b1 Split up test_is_volume_backed_instance() into five functions 626139e Handle DB failures in servicegroup DB driver 0134d88 Fixes Python 3 str issue in ConfigDrive creation 0ff44c9 Fix Nova's indirection fixture override f04cf8c Updated from global requirements 70fbad4 Add first reno-based release note 999267c Add "unreleased" release notes page 5207013 Add reno for release notes management d3fe7e4 cells is a sad panda about scheduler hints aea8790 libvirt:on snapshot delete, use qemu-img to blockRebase if VM is stopped 474e7bb Fix attibute error when cloning raw images in Ceph cc19164 Exclude all BDM checks for cells 50db2a5 Image meta: treat legacy vmware adapter type values 9a1ff88 Switch to post-versioning e6d3b85 update .gitreview for stable/liberty Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .gitreview | 1 + devstack/tempest-dsvm-cells-rc | 6 +- nova/api/metadata/base.py | 6 +- .../openstack/compute/schemas/scheduler_hints.py | 13 +- nova/compute/api.py | 11 +- nova/compute/manager.py | 16 + nova/db/sqlalchemy/__init__.py | 23 -- nova/locale/cs/LC_MESSAGES/nova-log-critical.po | 10 +- nova/locale/cs/LC_MESSAGES/nova-log-error.po | 10 +- nova/locale/cs/LC_MESSAGES/nova-log-info.po | 14 +- nova/locale/cs/LC_MESSAGES/nova-log-warning.po | 10 +- nova/locale/cs/LC_MESSAGES/nova.po | 6 +- nova/locale/de/LC_MESSAGES/nova-log-error.po | 11 +- nova/locale/de/LC_MESSAGES/nova-log-info.po | 16 +- nova/locale/de/LC_MESSAGES/nova.po | 27 +- nova/locale/es/LC_MESSAGES/nova-log-critical.po | 13 +- nova/locale/es/LC_MESSAGES/nova-log-error.po | 11 +- nova/locale/es/LC_MESSAGES/nova-log-info.po | 11 +- nova/locale/es/LC_MESSAGES/nova-log-warning.po | 11 +- nova/locale/es/LC_MESSAGES/nova.po | 28 +- nova/locale/es_MX/LC_MESSAGES/nova-log-critical.po | 11 +- nova/locale/fr/LC_MESSAGES/nova-log-critical.po | 13 +- nova/locale/fr/LC_MESSAGES/nova-log-error.po | 18 +- nova/locale/fr/LC_MESSAGES/nova-log-info.po | 11 +- nova/locale/fr/LC_MESSAGES/nova-log-warning.po | 11 +- nova/locale/fr/LC_MESSAGES/nova.po | 55 ++-- nova/locale/it/LC_MESSAGES/nova-log-error.po | 13 +- nova/locale/it/LC_MESSAGES/nova-log-info.po | 11 +- nova/locale/it/LC_MESSAGES/nova.po | 7 +- nova/locale/ja/LC_MESSAGES/nova.po | 83 ++++-- nova/locale/ko_KR/LC_MESSAGES/nova-log-critical.po | 19 ++ nova/locale/ko_KR/LC_MESSAGES/nova.po | 205 ++++++++++++- nova/locale/nova-log-error.pot | 138 ++++----- nova/locale/nova-log-info.pot | 323 +++++++++++---------- nova/locale/nova.pot | 215 +++++++------- nova/locale/pa_IN/LC_MESSAGES/nova-log-critical.po | 11 +- nova/locale/pt_BR/LC_MESSAGES/nova-log-critical.po | 19 ++ nova/locale/pt_BR/LC_MESSAGES/nova.po | 30 +- nova/locale/ru/LC_MESSAGES/nova.po | 26 +- nova/locale/tr_TR/LC_MESSAGES/nova-log-critical.po | 11 +- nova/locale/tr_TR/LC_MESSAGES/nova-log-error.po | 11 +- nova/locale/tr_TR/LC_MESSAGES/nova-log-info.po | 11 +- nova/locale/tr_TR/LC_MESSAGES/nova-log-warning.po | 11 +- nova/locale/tr_TR/LC_MESSAGES/nova.po | 7 +- nova/locale/zh_CN/LC_MESSAGES/nova-log-critical.po | 11 +- nova/locale/zh_CN/LC_MESSAGES/nova-log-error.po | 11 +- nova/locale/zh_CN/LC_MESSAGES/nova-log-info.po | 14 +- nova/locale/zh_CN/LC_MESSAGES/nova-log-warning.po | 11 +- nova/locale/zh_CN/LC_MESSAGES/nova.po | 7 +- nova/locale/zh_TW/LC_MESSAGES/nova.po | 7 +- nova/objects/image_meta.py | 3 +- nova/opts.py | 2 +- nova/scheduler/host_manager.py | 3 +- nova/servicegroup/drivers/db.py | 20 +- .../api/openstack/compute/test_scheduler_hints.py | 29 +- .../unit/servicegroup/test_db_servicegroup.py | 42 +++ nova/virt/block_device.py | 27 +- nova/virt/images.py | 34 ++- nova/virt/libvirt/driver.py | 105 +++++-- nova/virt/libvirt/imagebackend.py | 19 +- nova/virt/libvirt/storage/rbd_utils.py | 4 +- nova/virt/libvirt/utils.py | 35 ++- nova/virt/vmwareapi/io_util.py | 3 +- nova/virt/vmwareapi/vmops.py | 4 +- nova/virt/xenapi/volume_utils.py | 3 +- nova/virt/xenapi/volumeops.py | 6 +- releasenotes/notes/.placeholder | 0 .../notes/12.0.1-cve-bugs-7b04b2e34a3e9a70.yaml | 14 + .../notes/bug-1505471-28ef47bdc9487a31.yaml | 8 + .../notes/bug-1517926-ed0dda23ea525306.yaml | 10 + .../notes/start-using-reno-e4ea112d593415da.yaml | 3 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 259 +++++++++++++++++ releasenotes/source/index.rst | 18 ++ releasenotes/source/liberty.rst | 6 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 12 +- setup.cfg | 1 - test-requirements.txt | 5 +- tox.ini | 49 +++- 97 files changed, 1836 insertions(+), 905 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 62bdcf8..494b09d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11 @@ Jinja2>=2.6 # BSD License (3 clause) -keystonemiddleware>=2.0.0 +keystonemiddleware!=2.4.0,>=2.0.0 @@ -29 +29 @@ python-cinderclient>=1.3.1 -python-keystoneclient>=1.6.0 +python-keystoneclient!=1.8.0,>=1.6.0 @@ -32 +32 @@ python-glanceclient>=0.18.0 -requests>=2.5.2 +requests!=2.8.0,!=2.9.0,>=2.5.2 @@ -43 +43 @@ oslo.serialization>=1.4.0 # Apache-2.0 -oslo.utils>=2.0.0 # Apache-2.0 +oslo.utils!=2.6.0,>=2.0.0 # Apache-2.0 @@ -46 +46 @@ oslo.rootwrap>=2.0.0 # Apache-2.0 -oslo.messaging!=1.17.0,!=1.17.1,>=1.16.0 # Apache-2.0 +oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,!=3.1.0,>=1.16.0 # Apache-2.0 @@ -50 +50 @@ rfc3986>=0.2.0 # Apache-2.0 -oslo.middleware>=2.8.0 # Apache-2.0 +oslo.middleware!=3.0.0,!=3.1.0,!=3.2.0,>=2.8.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index fd27b73..074337d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -19 +19 @@ sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -Pillow>=2.4.0,<3.0.0 # MIT +Pillow<3.0.0,>=2.4.0 # MIT @@ -30,0 +31,3 @@ oslo.vmware>=1.16.0 # Apache-2.0 + +# releasenotes +reno>=0.1.1 # Apache2

1 0