November 2016 - OpenStack-announce

[new][puppet] puppet-cinder 10.0.0 release (ocata)
by no-reply＠openstack.org 19 Nov '16

19 Nov '16

We are excited to announce the release of: puppet-cinder 10.0.0: Puppet module for OpenStack Cinder This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/puppet-cinder/ For more details, please see below. 10.0.0 ^^^^^^ Upgrade Notes ************* * The default volume driver for cinder::backend::emc_vnx has been changed to be newton-compatible. * A new parameter, 'storage_protocol' has been added to cinder::backend::emc_vnx to be newton-compatible. Deprecation Notes ***************** * The backup_topic parameter is deprecated. * Deprecate iscsi_ip_address parameter in cinder::backend::emc_vnx * Deprecate iscsi_ip_address parameter in cinder::volume::emc_vnx * cinder::rabbit_host, cinder::rabbit_hosts, cinder::rabbit_password, cinder::rabbit_port, cinder::rabbit_userid and cinder::rabbit_virtual_host are deprecated. cinder::default_transport_url should be used to configure the messaging backend connection information. * Remove hp3par_iscsi define and class. * Remove all hp3par parameters in define and class. * Remove all tests related to hp3par. Other Notes *********** * Parameters that control the number of spawned child processes for distributing processing have had their default value changed from ::processorcount to ::os_workers. * removed deprecated cinder::api::keystone_user * removed deprecated cinder::api::keystone_password * removed deprecated cinder::api::keystone_tenant * removed deprecated cinder::api::auth_uri * removed deprecated cinder::api::identity_uri * removed deprecated cinder::api::memcached_servers * removed deprecated cinder::api::keystone_enabled * The verbose option was marked to be removed in Ocata, in Newton the option was deprecated. Changes in puppet-cinder 9.4.0..10.0.0 -------------------------------------- 1a2af32 Prepare 10.0.0 release d4e3055 Allow blank rabbit password if using transport_url ee08236 Remove old authtoken options ae0b525 Fix puppet version for requirements in metadata f415728 Deprecate rabbitmq connection parameters 9ba23c2 Update default volume driver on emc_vnx backend 7315a4f Modify the failure of the prompt message 2938add Remove deprecated hp3par_iscsi 68f5a1d Deprecate iscsi_ip_address, as it is not used 5919ef0 Enable release notes translation 4fcd49b Change worker defaults to ::os_workers c4ffd97 Release 9.4.1 5b2cdb4 fixed typo in ./manifests/backend/{netapp,iscsi,bdd}.pp d8c029e Changed the home-page to point Openstack Puppet Homepage 85a9472 Move rspec-puppet-facts to spec helper c7d3edd Deprecate backup_topic option a36d4f9 Added retries for db_sync 6c65ce4 Remove verbose c1c3342 Update reno for stable/newton Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 83 ++------------ manifests/backend/bdd.pp | 2 +- manifests/backend/emc_vnx.pp | 27 +++-- manifests/backend/hp3par_iscsi.pp | 120 --------------------- manifests/backend/hpe3par_iscsi.pp | 2 +- manifests/backend/iscsi.pp | 2 +- manifests/backend/netapp.pp | 2 +- manifests/backup.pp | 19 ++-- manifests/db/sync.pp | 2 + manifests/init.pp | 87 +++++++-------- manifests/keystone/authtoken.pp | 24 ++--- manifests/logging.pp | 12 --- manifests/volume/emc_vnx.pp | 13 ++- manifests/volume/hp3par_iscsi.pp | 87 --------------- manifests/wsgi/apache.pp | 4 +- metadata.json | 12 +-- ...ecate_backup_topic_option-1832f8a9d21285ae.yaml | 3 + .../notes/emc-vnx-new-driver-3bf454673e5ba9bb.yaml | 4 + ...eprecate_iscsi_ip_address-773b9c158c7751b7.yaml | 4 + ..._workers_for_worker_count-2e3b0ae4257dad7b.yaml | 5 + ...ection-params-deprecation-1e13e36113051959.yaml | 6 ++ .../notes/remove_all_hp3par-1e928df13471cf13.yaml | 5 + ...ove_old_authtoken_options-e619dc4773a373af.yaml | 9 ++ .../notes/remove_verbose-f932b850028aa72f.yaml | 4 + releasenotes/source/conf.py | 7 +- releasenotes/source/index.rst | 4 +- releasenotes/source/newton.rst | 6 ++ setup.cfg | 2 +- spec/acceptance/basic_cinder_spec.rb | 8 +- spec/classes/cinder_api_spec.rb | 64 +++-------- spec/classes/cinder_backup_glusterfs_spec.rb | 2 +- spec/classes/cinder_backup_google_spec.rb | 2 +- spec/classes/cinder_backup_nfs_spec.rb | 2 +- spec/classes/cinder_backup_posix_spec.rb | 2 +- spec/classes/cinder_backup_spec.rb | 4 +- spec/classes/cinder_backup_swift_spec.rb | 2 +- spec/classes/cinder_backup_tsm_spec.rb | 2 +- spec/classes/cinder_client_spec.rb | 2 +- spec/classes/cinder_db_postgresql_spec.rb | 2 +- spec/classes/cinder_db_sync_spec.rb | 2 +- spec/classes/cinder_glance_spec.rb | 2 +- spec/classes/cinder_logging_spec.rb | 2 +- spec/classes/cinder_quota_spec.rb | 2 +- spec/classes/cinder_scheduler_filter_spec.rb | 2 +- spec/classes/cinder_volume_emc_vnx_spec.rb | 1 - spec/classes/cinder_volume_glusterfs_spec.rb | 2 +- spec/classes/cinder_volume_hp3par_iscsi_spec.rb | 45 -------- spec/classes/cinder_volume_quobyte_spec.rb | 2 +- spec/classes/cinder_wsgi_apache_spec.rb | 2 +- spec/defines/cinder_backend_emc_vnx_spec.rb | 8 +- spec/defines/cinder_backend_glusterfs_spec.rb | 2 +- spec/defines/cinder_backend_hp3par_iscsi_spec.rb | 56 ---------- spec/defines/cinder_backend_quobyte_spec.rb | 2 +- spec/spec_helper.rb | 10 +- 54 files changed, 215 insertions(+), 574 deletions(-)

1 0

[new][puppet] puppet-designate 10.0.0 release (ocata)
by no-reply＠openstack.org 19 Nov '16

19 Nov '16

We are tickled pink to announce the release of: puppet-designate 10.0.0: Puppet module for OpenStack Designate This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/puppet-designate/ For more details, please see below. 10.0.0 ^^^^^^ Upgrade Notes ************* * designate::rabbit_ha_queues has been exposed and will need to be configured based on the desired use of ha queues. Previously, the value for this was being configured using the designate::rabbit_hosts parameter. This automatic configuration will be dropped during the Pike cycle. * The designate module will now use the oslo::messaging::rabbit resource to configure the rabbit configuration settings. Deprecation Notes ***************** * designate::rabbit_host, designate::rabbit_hosts, designate::rabbit_password, designate::rabbit_port, designate::rabbit_userid and designate::rabbit_virtual_host are deprecated. designate::default_transport_url should be used instead. * rabbit_ha_queues will no longer be configured to be True when rabbit_hosts is configured and will need to be specified. This automatic configuration will be dropped in the Pike cycle. Bug Fixes ********* * Fixed documentation for log_dir parameter Other Notes *********** * removed deprecated designate::api::keystone_user * removed deprecated designate::api::keystone_password * removed deprecated designate::api::keystone_tenant * removed deprecated designate::api::keystone_host * removed deprecated designate::api::keystone_port * removed deprecated designate::api::keystone_protocol * removed deprecated designate::api::keystone_memcached_servers * The verbose option was marked to be removed in Ocata, in Newton the option was deprecated. Changes in puppet-designate 9.4.0..10.0.0 ----------------------------------------- a620689 Prepare 10.0.0 release 609859b Deprecate rabbitmq connection parameters 05d0fc5 Remove old authtoken options 1724414 Align equals in designate::params 85a4eb0 Fix puppet version for requirements in metadata b49fb78 Fix documentation for log_dir parameter 871d649 Changed the home-page to point Openstack Puppet Homepage 77761b0 Enable release notes translation 4e47963 Move rspec-puppet-facts to spec helper 0ffa512 Added retries for db_sync d01eba7 Remove verbose 7365906 Update define tests to use rspec-puppet-facts 2cfda26 Update reno for stable/newton Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 64 --------- manifests/db/sync.pp | 2 + manifests/init.pp | 151 +++++++++++++-------- manifests/keystone/authtoken.pp | 21 +-- manifests/logging.pp | 13 +- manifests/params.pp | 11 +- metadata.json | 12 +- ...fix_log_dir_documentation-166697be95de0c72.yaml | 3 + ...ection-params-deprecation-40bf3559eb8145af.yaml | 16 +++ ...ove_old_authtoken_options-cbc07a893270043f.yaml | 9 ++ .../notes/remove_verbose-901d2a550777616b.yaml | 4 + releasenotes/source/conf.py | 7 +- releasenotes/source/index.rst | 3 +- releasenotes/source/newton.rst | 6 + setup.cfg | 2 +- spec/acceptance/basic_designate_spec.rb | 6 +- spec/classes/designate_api_spec.rb | 60 ++------ spec/classes/designate_init_spec.rb | 6 +- spec/defines/designate_generic_service_spec.rb | 49 ++++--- spec/defines/designate_pool_nameserver_spec.rb | 53 ++++---- spec/defines/designate_pool_spec.rb | 61 ++++----- spec/defines/designate_pool_target_spec.rb | 65 +++++---- spec/spec_helper.rb | 10 +- 23 files changed, 289 insertions(+), 345 deletions(-)

1 0

[new][puppet] puppet-glance 10.0.0 release (ocata)
by no-reply＠openstack.org 19 Nov '16

19 Nov '16

We are tickled pink to announce the release of: puppet-glance 10.0.0: Puppet module for OpenStack Glance This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/puppet-glance/ For more details, please see below. 10.0.0 ^^^^^^ Deprecation Notes ***************** * glance::notify::rabbitmq::rabbit_host, glance::notify::rabbitmq::rabbit_hosts, glance::notify::rabbitmq::rabbit_password, glance::notify::rabbitmq::rabbit_port, glance::notify::rabbitmq::rabbit_userid and glance::notify::rabbitmq::rabbit_virtual_host are deprecated. glance::notify::rabbitmq::default_transport_url should be used instead. Bug Fixes ********* * Fixed documentation for log_dir parameter Other Notes *********** * Parameters that control the number of spawned child processes for distributing processing have had their default value changed from ::processorcount to ::os_workers. * The verbose option was marked to be removed in Ocata, in Newton the option was deprecated. Changes in puppet-glance 9.4.0..10.0.0 -------------------------------------- d4bcd17 Prepare 10.0.0 release 1b123d9 Deprecate rabbitmq connection parameters 800dcf4 Fix puppet version for requirements in metadata f7daa47 Add test for policy 8684c85 Remove verbose 88713c9 Fix documentation for log_dir parameter 33f96d7 Ensure that swiftclient is installed 74e52d2 Change worker defaults to ::os_workers f4df279 Enable release notes translation 975d7ab Changed the home-page to point Openstack Puppet Homepage 3468d0f Move rspec-puppet-facts to spec helper 0fc2099 Added retries for db_sync 5d98b75 Update reno for stable/newton Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 15 +--- manifests/api/logging.pp | 14 +--- manifests/backend/swift.pp | 3 + manifests/cache/logging.pp | 15 +--- manifests/db/sync.pp | 2 + manifests/glare.pp | 4 +- manifests/glare/logging.pp | 14 +--- manifests/notify/rabbitmq.pp | 88 ++++++++++++++-------- manifests/registry.pp | 14 +--- manifests/registry/logging.pp | 14 +--- metadata.json | 16 ++-- ...fix_log_dir_documentation-0e2dcaf9a5d5c58c.yaml | 3 + ..._workers_for_worker_count-f86aa67474d5cac9.yaml | 5 ++ ...ection-params-deprecation-d1405f1fe22481b8.yaml | 9 +++ .../notes/remove_verbose-228877cddeed6640.yaml | 4 + releasenotes/source/conf.py | 7 +- releasenotes/source/index.rst | 3 +- releasenotes/source/newton.rst | 6 ++ setup.cfg | 2 +- spec/classes/glance_backend_swift_spec.rb | 2 + spec/classes/glance_notify_rabbitmq_spec.rb | 12 +++ spec/classes/glance_policy_spec.rb | 2 + spec/classes/glance_registry_spec.rb | 2 +- spec/spec_helper.rb | 10 +-- 24 files changed, 137 insertions(+), 129 deletions(-)

1 0

[new][puppet] puppet-gnocchi 10.0.0 release (ocata)
by no-reply＠openstack.org 19 Nov '16

19 Nov '16

We are mirthful to announce the release of: puppet-gnocchi 10.0.0: Puppet module for OpenStack Gnocchi This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/puppet-gnocchi/ For more details, please see below. 10.0.0 ^^^^^^ New Features ************ * This adds the enable_proxy_headers parsing option which is used by the http_proxy_to_wsgi middleware. Upgrade Notes ************* * Default the metricd workers parameter to a safer value. Now defaulted to os_workers will configure this parameter to the maximum value between '(<# processors> / 4)' and '2' without exeeding '8' Other Notes *********** * Parameters that control the number of spawned child processes for distributing processing have had their default value changed from ::processorcount to ::os_workers. * removed deprecated gnocchi::api::keystone_user * removed deprecated gnocchi::api::keystone_password * removed deprecated gnocchi::api::keystone_tenant * removed deprecated gnocchi::api::keystone_auth_uri * removed deprecated gnocchi::api::keystone_identity_uri * The verbose option was marked to be removed in Ocata, in Newton the option was deprecated. Changes in puppet-gnocchi 9.4.0..10.0.0 --------------------------------------- f58a550 Prepare 10.0.0 release 3de5b5d Remove old authtoken options 0acd871 Fix common options position in params.pp ede2deb Fix puppet version for requirements in metadata 718be4c Change worker defaults to ::os_workers c19a798 Release 9.4.1 (newton) 8eab030 Add option to enable Gnocchi's SSL middleware d494ac7 Enable release notes translation a5738c5 Changed the home-page to point Openstack Puppet Homepage 1cae07c Move rspec-puppet-facts to spec helper ae2db9f Remove unnecesary spaces in log messages. 81c45cd Added retries for db_sync 419492a Default metricd workers to a safer value f9f8f4f Remove verbose 8bc6094 Update reno for stable/newton Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 85 ++++++---------------- manifests/db/sync.pp | 2 + manifests/init.pp | 13 ---- manifests/keystone/authtoken.pp | 18 ++--- manifests/logging.pp | 12 --- manifests/metricd.pp | 10 +-- manifests/params.pp | 9 ++- manifests/wsgi/apache.pp | 4 +- metadata.json | 12 +-- ...able-proxy-header-parsing-3f3da693df01b5ec.yaml | 4 + ...lt-metricd-to-safer-value-529c85e617105424.yaml | 6 ++ ..._workers_for_worker_count-3517788058682645.yaml | 5 ++ ...ove_old_authtoken_options-2ea2763a69ea5f76.yaml | 7 ++ .../notes/remove_verbose-6f796fb4c2fde1e3.yaml | 4 + releasenotes/source/conf.py | 7 +- releasenotes/source/index.rst | 3 +- releasenotes/source/newton.rst | 6 ++ setup.cfg | 2 +- spec/classes/gnocchi_api_spec.rb | 29 ++++++-- spec/classes/gnocchi_db_sync_spec.rb | 2 +- spec/classes/gnocchi_metricd_spec.rb | 3 +- spec/classes/gnocchi_wsgi_apache_spec.rb | 6 +- spec/spec_helper.rb | 10 +-- 23 files changed, 118 insertions(+), 141 deletions(-)

1 0

[new][puppet] puppet-ceilometer 10.0.0 release (ocata)
by no-reply＠openstack.org 19 Nov '16

19 Nov '16

We are frolicsome to announce the release of: puppet-ceilometer 10.0.0: Puppet module for OpenStack Ceilometer This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/puppet-ceilometer/ For more details, please see below. 10.0.0 ^^^^^^ New Features ************ * This adds the enable_proxy_headers parsing option which is used by the http_proxy_to_wsgi middleware. Deprecation Notes ***************** * ceilometer::rabbit_host, ceilometer::rabbit_hosts, ceilometer::rabbit_password, ceilometer::rabbit_port, ceilometer::rabbit_userid and ceilometer::rabbit_virtual_host are deprecated. ceilometer::default_transport_url should be used to configure the messaging backend connection information. Bug Fixes ********* * Fixed documentation for log_dir parameter * In ocata cycle, ceilometer-dbsync has been removed and ceilometer- upgrade must be used to create or upgrade database schema and gnocchi resource types. Other Notes *********** * Parameters that control the number of spawned child processes for distributing processing have had their default value changed from ::processorcount to ::os_workers. * removed deprecated ceilometer::api::keystone_user * removed deprecated ceilometer::api::keystone_password * removed deprecated ceilometer::api::keystone_tenant * removed deprecated ceilometer::api::auth_uri * removed deprecated ceilometer::api::identity_uri * removed deprecated ceilometer::api::memcached_servers * The verbose option was marked to be removed in Ocata, in Newton the option was deprecated. Changes in puppet-ceilometer 9.4.0..10.0.0 ------------------------------------------ 16af61e Prepare 10.0.0 release 52ebcc9 Switch ceilometer to rspec-puppet-facts e885baf Fix common options position in params.pp af4af18 Replace ceilometer-dbsync by ceilometer-upgrade b39fa37 Remove old authtoken options 7c34dbf Fix puppet version for requirements in metadata 9dbbf98 Define libvirt_group for RHEL family d77e706 Deprecate rabbitmq connection parameters bd83c2a Add test for policy a1b8f3b Remove verbose 765557b Fix documentation for log_dir parameter 5fad254 Release 9.4.1 (newton) 51f5519 Change worker defaults to ::os_workers d4aa3e5 Add option to enable Ceilometer's SSL middleware 191da2c Enable release notes translation 5ceee6f Changed the home-page to point Openstack Puppet Homepage aefbf40 Move rspec-puppet-facts to spec helper b7d3c18 Added retries for db_sync babb60d Update reno for stable/newton Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 82 ++++------------ manifests/db.pp | 2 +- manifests/db/sync.pp | 6 +- manifests/init.pp | 85 +++++++++-------- manifests/keystone/authtoken.pp | 21 ++--- manifests/logging.pp | 14 +-- manifests/params.pp | 12 +-- manifests/wsgi/apache.pp | 4 +- metadata.json | 12 +-- ...able-proxy-header-parsing-64b78b56d8787e1d.yaml | 4 + ...fix_log_dir_documentation-6f0c7311a8678413.yaml | 3 + ..._workers_for_worker_count-05563e8178495993.yaml | 5 + ...ection-params-deprecation-62caee6af8c19d29.yaml | 7 ++ ...ove_old_authtoken_options-8dc42a864cc1d9eb.yaml | 8 ++ .../notes/remove_verbose-bc90fdffa0a9c0cc.yaml | 4 + ...recated-ceilometer-dbsync-ddf62d90341731d7.yaml | 5 + releasenotes/source/conf.py | 7 +- releasenotes/source/index.rst | 1 + releasenotes/source/newton.rst | 6 ++ setup.cfg | 2 +- spec/acceptance/ceilometer_wsgi_apache_spec.rb | 6 +- spec/classes/ceilometer_agent_auth_spec.rb | 20 ++-- spec/classes/ceilometer_agent_central_spec.rb | 40 ++++---- spec/classes/ceilometer_agent_compute_spec.rb | 56 +++++------ spec/classes/ceilometer_agent_notification_spec.rb | 103 ++++----------------- spec/classes/ceilometer_agent_polling_spec.rb | 57 +++++------- spec/classes/ceilometer_api_spec.rb | 96 ++++++++----------- spec/classes/ceilometer_client_spec.rb | 33 +++---- spec/classes/ceilometer_collector_spec.rb | 42 ++++----- spec/classes/ceilometer_db_mysql_spec.rb | 74 +++++++-------- spec/classes/ceilometer_db_postgresql_spec.rb | 1 - spec/classes/ceilometer_db_spec.rb | 59 ++++++------ spec/classes/ceilometer_db_sync_spec.rb | 7 +- spec/classes/ceilometer_dispatcher_gnocchi_spec.rb | 20 ++-- spec/classes/ceilometer_expirer_spec.rb | 35 ++++--- spec/classes/ceilometer_init_spec.rb | 36 ++++--- spec/classes/ceilometer_keystone_auth_spec.rb | 20 ++-- spec/classes/ceilometer_keystone_authtoken_spec.rb | 2 +- spec/classes/ceilometer_logging_spec.rb | 22 ++--- spec/classes/ceilometer_policy_spec.rb | 3 +- spec/classes/ceilometer_wsgi_apache_spec.rb | 67 ++++++-------- spec/spec_helper.rb | 10 +- 42 files changed, 458 insertions(+), 641 deletions(-)

1 0

Subscribe to release-announces to get future OpenStack release announcements !
by Thierry Carrez 19 Nov '16

19 Nov '16

Hi everyone, As OpenStack produces more deliverables (and some projects do frequent intermediary releases within the cycle), release announcements have been creating a lot of noise on the openstack-announce and openstack-dev mailing-lists, sometimes creating distraction away from more important announcements, or discouraging people to subscribe. In order to cut that noise while preserving that information, the release team proposed[1] to create a specific mailing-list for release announcements, distinct from openstack-announce (now limited to key announcements) and openstack-dev (now limited to development discussion). [1] http://lists.openstack.org/pipermail/openstack-dev/2016-November/106579.html So if you are interested in directly receiving release announcements in the future, please subscribe to: http://lists.openstack.org/cgi-bin/mailman/listinfo/release-announce To reduce noise, the list is set up by default to send only one email per day (digest mode) with all the release announcements of that day. If you would like to switch to receiving release announces immediately (one email per announcement), just switch the "Set Digest Mode" option to "Off" in your subscription options. This list will start to be used for release announcements starting Monday, November 21. PS: if you're not currently subscribed to openstack-announce, please consider joining it. Starting next week, it will only be used for major announcements for the OpenStack Community (one release announce email per cycle at the end of the release, urgent security advisories, election announcements, etc...) and be very low-traffic again. You can find it here: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-announce Regards, -- Thierry Carrez (ttx)

1 0

[new][swift] swift 2.11.0 release (ocata)
by no-reply＠openstack.org 19 Nov '16

19 Nov '16

We are mirthful to announce the release of: swift 2.11.0: OpenStack Object Storage This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/swift/ For more details, please see below. 2.11.0 ^^^^^^ New Features ************ * The improvements to EC reads made in Swift 2.10.0 have also been applied to the reconstructor. This allows fragments to be rebuilt in more circumstances, resulting in faster recovery from failures. * Instead of using a separate .durable file to indicate the durable status of an EC fragment archive, we rename the .data to include a durable marker in the filename. This saves one inode for every EC .data file. Existing .durable files will not be removed, and they will continue to work just fine. * Closed a bug where ssync may have written bad fragment data in some circumstances. A check was added to ensure the correct number of bytes is written for a fragment before finalizing the write. Also, erasure coded fragment metadata will now be validated on read requests and, if bad data is found, the fragment will be quarantined. * Added a configurable URL base to staticweb. * Support multi-range GETs for static large objects. * TempURLs using the "inline" parameter can now also set the "filename" parameter. Both are used in the Content-Disposition response header. * Mirror X-Trans-Id to X-Openstack-Request-Id. * SLO will now concurrently HEAD segments, resulting in much faster manifest validation and object creation. By default, two HEAD requests will be done at a time, but this can be changed by the operator via the new *concurrency* setting in the "[filter:slo]" section of the proxy server config. * Suppressed the KeyError message when auditor finds an expired object. * Daemons using InternalClient can now be properly killed with SIGTERM. * Added a "user" option to the drive-audit config file. Its value is used to set the owner of the drive-audit recon cache. * Throttle update_auditor_status calls so it updates no more than once per minute. * Suppress unexpected-file warnings for rsync temp files. Upgrade Notes ************* * Updated the PyECLib dependency to 1.3.1. * Note that after writing EC data with Swift 2.11.0 or later, that data will not be accessible to earlier versions of Swift. Critical Issues *************** * WARNING: If you are using the ISA-L library for erasure codes, please upgrade to liberasurecode 1.3.1 (or later) as soon as possible. If you are using isa_l_rs_vand with more than 4 parity, please read https://bugs.launchpad.net/swift/+bug/1639691 and take necessary action. Other Notes *********** * Various other minor bug fixes and improvements. Changes in swift 2.10.0..2.11.0 ------------------------------- bf473dd 2.11.0 release notes ba1f285 Fix typos in test_container.py e8a5448 Add X-Openstack-Request-Id to Access-Control-Expose-Headers f850ff0 SLO: Concurrently HEAD segments 40152f4 Fix up X-Trans-Id-Extra docs 8e122c6 Document X-Openstack-Request-Id in all responses d25216b remove double checks on account/container info 721cd16 Show file parameters as mandatory in swift-*-info man pages 243dd97 Add OPTIONS in manpages b69caea Include debug message for rsync tempfiles e6dea4d adding reno sphinx tree 5de9747 Stop shadowing built-in iter 2f31c04 Py3: Fixes header key dict f4adb2f Fix ZeroDivisionError in reconstructor.stats_line c2ce92a Fix signal handling for daemons with InternalClient 116462d Add probetest for response with duplicate frags 6574ce3 EC: reconstruct using non-durable fragments a4d77d9 Fix KeyError when auditor finds an expired object 3b88933 Make NullLogger more logger like 300d388 Use more specific asserts in test/probe tests 2a75091 Make ECDiskFileReader check fragment metadata e166e19 Remove duplicated 'User-Agent' header from object-updater's requests 33c18c5 Remove executable flag from some test modules 2bd8d05 Suppress unexpected file warnings for rsync temp files d0fe922 Mirror X-Trans-Id to X-Openstack-Request-Id c91ca53 Ignore Range values like "bytes=--0" 30f672e Refactor SLO If-Match / HEAD tests c3bc9f3 Add links for more detailed overview in overview_architecture 99a13d9 Fixed rysnc -> rsync typo 9847796 Set owner of drive-audit recon cache to swift user a8b80f0 update urls to newton 5064ebb Make Content-Disposition support `inline; filename=...` format. c3bc830 SAIO install bash scripts for a novice install 3218f8b Prevent ssync writing bad fragment data to diskfile 77f5b20 Throttle update_auditor_status calls f3be45c Simplify container_updater test code 19102c6 Apply bash error handling consistently in all bash scripts b13b49a EC - eliminate .durable files f0a8af2 Update pyeclib dependency to 1.3.1 1942618 [api-ref] Remove temporary block in conf.py f62df7b Add a configurable URL base to staticweb 53aebba Fix a typo in documentation 2ec4189 Fix when we set state in Spliterator a3dbc13 add assert error information ddd40a0 Add unit test content 45e4fd5 Fix typo: remove redundant 'that' 396baf4 Update test-requirements.txt 7dcfe5a Remove unneeded line from ring.utils.dispersion_report 9b98c89 Revises 'url' to 'URL' and 'json' to 'JSON' 1004509 Fix failing cross-policy-versioning functional test 05642d2 fix word spelling mistake 03b5e76 Improve functional tests and test client 3ae0b80 Remove redundant 'the' 52473ea Use six.moves.urllib.parse instead of urllib ccff366 Update diskfile docstring for get_ondisk_files 2f880f0 Fix typo in docstring a09e427 Fix a typo in proxy-server.conf-sample 7d2f8e5 Fix typo in docstring 31c92ac Update link reference in Swift document 0c8c764 Add functional tests for new versioned_write mode f07dfa2 Add test_PUT/DELETE_bad_timestamp in obj/test_server 19a684d Fix using filter() to meet python2,3 18bb999 Add more comment to authtoken sample options bb24695 updated output for swift stat 1f690df Use ConfigParser instead of SafeConfigParser eea574a Py3: Fixes eventlet ImportError: No module named urllib2 3f00148 Config logABug feature for Swift api-ref 4bcd3d7 Support multi-range GETs for static large objects. 88b14a0 Add functional test for access control (RBAC INFO) with Keystone 5448a55 Add functional test for access control (container ACL) with Keystone Diffstat (except docs and test files) ------------------------------------- .mailmap | 1 + AUTHORS | 540 ++--- CHANGELOG | 62 + REVIEW_GUIDELINES.rst | 2 +- api-ref/source/conf.py | 44 +- api-ref/source/parameters.yaml | 17 +- .../account-containers-list-http-response-json.txt | 3 +- .../account-containers-list-http-response-xml.txt | 3 +- .../samples/objects-list-http-response-json.txt | 3 +- .../samples/objects-list-http-response-xml.txt | 3 +- api-ref/source/storage-account-services.inc | 7 + api-ref/source/storage-container-services.inc | 15 + api-ref/source/storage-object-services.inc | 16 + bin/swift-drive-audit | 3 +- .../api/use_the_content-disposition_metadata.rst | 1 + etc/account-server.conf-sample | 2 +- etc/container-server.conf-sample | 2 +- etc/drive-audit.conf-sample | 1 + etc/object-server.conf-sample | 2 +- etc/proxy-server.conf-sample | 35 +- install-guide/source/controller-install-debian.rst | 2 +- install-guide/source/controller-install-rdo.rst | 2 +- install-guide/source/controller-install-ubuntu.rst | 2 +- install-guide/source/finalize-installation-rdo.rst | 2 +- .../source/finalize-installation-ubuntu-debian.rst | 2 +- install-guide/source/storage-install-rdo.rst | 6 +- .../source/storage-install-ubuntu-debian.rst | 6 +- install-guide/source/verify.rst | 4 +- .../notes/2_11_0_release-ac1d256e455d347e.yaml | 54 + releasenotes/source/conf.py | 345 +++ releasenotes/source/current.rst | 5 + releasenotes/source/index.rst | 10 + releasenotes/source/newton.rst | 6 + requirements.txt | 2 +- swift/cli/recon.py | 8 +- swift/common/constraints.py | 2 +- swift/common/container_sync_realms.py | 2 +- swift/common/daemon.py | 4 +- swift/common/header_key_dict.py | 4 +- swift/common/internal_client.py | 7 +- swift/common/middleware/catch_errors.py | 2 + swift/common/middleware/slo.py | 263 ++- swift/common/middleware/staticweb.py | 37 +- swift/common/middleware/tempurl.py | 34 +- swift/common/middleware/versioned_writes.py | 11 +- swift/common/request_helpers.py | 23 +- swift/common/ring/utils.py | 1 - swift/common/swob.py | 12 +- swift/common/utils.py | 104 +- swift/obj/auditor.py | 12 +- swift/obj/diskfile.py | 255 ++- swift/obj/mem_diskfile.py | 2 +- swift/obj/reconstructor.py | 14 +- swift/obj/server.py | 4 +- swift/obj/ssync_receiver.py | 17 +- swift/obj/ssync_sender.py | 20 +- swift/obj/updater.py | 3 +- swift/proxy/controllers/base.py | 13 +- swift/proxy/controllers/obj.py | 7 +- test-requirements.txt | 27 +- test/functional/__init__.py | 1 + test/functional/swift_test_client.py | 9 +- test/functional/test_access_control.py | 2009 ++++++++++++++++- test/functional/test_account.py | 0 test/functional/test_container.py | 4 +- test/functional/test_object.py | 0 test/probe/test_account_failures.py | 0 .../probe/test_account_get_fake_responses_match.py | 0 test/probe/test_container_failures.py | 0 test/probe/test_container_merge_policy_index.py | 24 +- test/probe/test_empty_device_handoff.py | 0 test/probe/test_object_async_update.py | 2 +- test/probe/test_object_expirer.py | 8 +- test/probe/test_object_failures.py | 0 test/probe/test_object_handoff.py | 122 +- test/probe/test_object_metadata_replication.py | 42 +- test/probe/test_reconstructor_durable.py | 157 -- test/probe/test_reconstructor_rebuild.py | 290 ++- test/probe/test_reconstructor_revert.py | 2 +- test/probe/test_replication_servers_working.py | 8 +- test/probe/test_signals.py | 155 ++ test/probe/test_wsgi_servers.py | 105 - test/unit/__init__.py | 30 + test/unit/cli/test_recon.py | 8 +- .../common/middleware/crypto/test_encrypter.py | 22 +- test/unit/common/middleware/test_except.py | 44 +- test/unit/common/middleware/test_slo.py | 515 +++-- test/unit/common/middleware/test_staticweb.py | 53 + test/unit/common/middleware/test_tempurl.py | 4 +- .../common/middleware/test_versioned_writes.py | 2 +- test/unit/common/test_constraints.py | 114 +- test/unit/common/test_daemon.py | 31 +- test/unit/common/test_direct_client.py | 68 +- test/unit/common/test_header_key_dict.py | 36 + test/unit/common/test_internal_client.py | 6 +- test/unit/common/test_manager.py | 6 +- test/unit/common/test_storage_policy.py | 0 test/unit/common/test_swob.py | 10 +- test/unit/common/test_utils.py | 114 + test/unit/container/test_backend.py | 12 +- test/unit/container/test_updater.py | 79 +- test/unit/obj/common.py | 56 +- test/unit/obj/test_auditor.py | 109 +- test/unit/obj/test_diskfile.py | 2345 +++++++++++++------- test/unit/obj/test_reconstructor.py | 128 +- test/unit/obj/test_server.py | 243 +- test/unit/obj/test_ssync.py | 480 +++- test/unit/obj/test_ssync_receiver.py | 56 +- test/unit/obj/test_ssync_sender.py | 9 +- test/unit/proxy/controllers/test_base.py | 7 +- test/unit/proxy/controllers/test_obj.py | 20 +- test/unit/proxy/test_server.py | 160 +- tox.ini | 4 + 141 files changed, 7921 insertions(+), 2461 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index eed45fa..9f1582e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12 +12 @@ xattr>=0.4 -PyECLib>=1.2.0 # BSD +PyECLib>=1.3.1 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index b5cc75f..04ea66b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,11 +6,11 @@ -hacking>=0.10.0,<0.11 -coverage -nose -nosexcover -nosehtmloutput -openstackdocstheme>=1.0.3 # Apache-2.0 -oslosphinx -sphinx>=1.1.2,!=1.2.0,!=1.3b1,<1.3 # BSD -os-api-ref>=0.1.0 # Apache-2.0 -os-testr>=0.4.1 -mock>=1.0 +hacking>=0.11.0,<0.12 # Apache-2.0 +coverage>=3.6 # Apache-2.0 +nose # LGPL +nosexcover # BSD +nosehtmloutput>=0.0.3 # Apache-2.0 +openstackdocstheme>=1.5.0 # Apache-2.0 +oslosphinx>=4.7.0 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +os-api-ref>=1.0.0 # Apache-2.0 +os-testr>=0.8.0 # Apache-2.0 +mock>=2.0 # BSD @@ -18 +18,2 @@ python-swiftclient -python-keystoneclient>=1.3.0 +python-keystoneclient!=2.1.0,>=2.0.0 # Apache-2.0 +reno>=1.8.0 # Apache-2.0 @@ -21 +22 @@ python-keystoneclient>=1.3.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0 # Apache-2.0

1 0

[OSSA 2016-013] Network information disclosure through Heat template source URL (CVE-2016-9185)
by Tristan Cacqueray 18 Nov '16

18 Nov '16

============================================================================== OSSA-2016-013: Network information disclosure through Heat template source URL ============================================================================== :Date: November 18, 2016 :CVE: CVE-2016-9185 Affects ~~~~~~~ - Heat: <=5.0.3, >=6.0.0 <=6.1.0 and ==7.0.0 Description ~~~~~~~~~~~ Tom Patzig from SAP reported a vulnerability in Heat. By launching a new Heat stack with a local URL an authenticated user may conduct network discovery revealing internal network configuration. All Heat setup are affected. Patches ~~~~~~~ - https://review.openstack.org/393149 (Liberty) - https://review.openstack.org/393148 (Mitaka) - https://review.openstack.org/393147 (Newton) - https://review.openstack.org/393146 (Ocata) Credits ~~~~~~~ - Tom Patzig from SAP (CVE-2015-9185) References ~~~~~~~~~~ - https://launchpad.net/bugs/1606500 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9185 -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[new][trove] python-troveclient 2.6.0 release (ocata)
by no-reply＠openstack.org 18 Nov '16

18 Nov '16

We are satisfied to announce the release of: python-troveclient 2.6.0: Client library for OpenStack DBaaS API This release is part of the ocata release series. The source is available from: https://git.openstack.org/cgit/openstack/python-troveclient Download the package from: https://pypi.python.org/pypi/python-troveclient Please report issues through launchpad: https://bugs.launchpad.net/python-troveclient For more details, please see below. 2.6.0 ^^^^^ Other Notes * Add ephemeral column in flavor-list Bug 1617980. * Use i18n for shell.py Partial-Bug 1379001. * Use i18n for v1/shell.py Changes in python-troveclient 2.5.0..2.6.0 ------------------------------------------ f243545 Updated from global requirements eed19c8 move old apiclient code out of openstack/common c4d9ebb Updated from global requirements 91e098e Avoid use xx=[] for parameter in function cd61fe3 Add i18n to v1/shell.py ab7a083 Updated from global requirements 1a5dc62 Updated from global requirements 43a88e4 Enable release notes translation 9372355 Replace assertTrue(a in b) with assertIn(a, b) 71b0ff6 Using assertIsNotNone() instead of assertNotEqual(None) ad8be62 Updated from global requirements ca9be53 Throw correct error on creation of size 0 12be321 Avoid use xx=[] for parameter initial value cbcb688 Add tests to fake 8b27e7f Add a new command in the readme 18bf918 Use i18n for shell.py 4dc495e Delete unnessary as e a9bfc7b Add fixtures to test-requirements 7a70882 Display flavor-ephemeral in trove flavor-list command e403659 Update reno for stable/newton b592b42 Use strutils.to_slug() instead of utils.slugify() Diffstat (except docs and test files) ------------------------------------- .coveragerc | 2 +- README.rst | 434 +++++------ .../flavor-list-ephemeral-de4eee3a30b09b64.yaml | 4 + .../use-i18n-for-shell.py-924c1624e30a6617.yaml | 3 + .../use-i18n-for-v1-shell.py-08209f5721f20a1f.yaml | 3 + releasenotes/source/conf.py | 3 + releasenotes/source/index.rst | 4 +- releasenotes/source/newton.rst | 6 + requirements.txt | 8 +- test-requirements.txt | 11 +- troveclient/apiclient/__init__.py | 0 troveclient/apiclient/auth.py | 221 ++++++ troveclient/apiclient/base.py | 496 +++++++++++++ troveclient/apiclient/client.py | 358 +++++++++ troveclient/apiclient/exceptions.py | 445 +++++++++++ troveclient/base.py | 4 +- troveclient/client.py | 10 +- troveclient/common.py | 7 +- troveclient/compat/base.py | 5 +- troveclient/compat/common.py | 6 +- troveclient/compat/utils.py | 17 - troveclient/exceptions.py | 2 +- troveclient/openstack/__init__.py | 0 troveclient/openstack/common/__init__.py | 0 troveclient/openstack/common/apiclient/__init__.py | 0 troveclient/openstack/common/apiclient/auth.py | 221 ------ troveclient/openstack/common/apiclient/base.py | 496 ------------- troveclient/openstack/common/apiclient/client.py | 358 --------- .../openstack/common/apiclient/exceptions.py | 445 ----------- .../openstack/common/apiclient/fake_client.py | 175 ----- troveclient/service_catalog.py | 2 +- troveclient/shell.py | 119 +-- troveclient/utils.py | 21 +- troveclient/v1/limits.py | 2 +- troveclient/v1/management.py | 6 +- troveclient/v1/shell.py | 811 +++++++++++---------- 42 files changed, 2322 insertions(+), 2423 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d828a30..495e727 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,2 +4,2 @@ -pbr>=1.6 # Apache-2.0 -PrettyTable<0.8,>=0.7 # BSD +pbr>=1.8 # Apache-2.0 +PrettyTable<0.8,>=0.7.1 # BSD @@ -9 +9 @@ oslo.i18n>=2.1.0 # Apache-2.0 -oslo.utils>=3.16.0 # Apache-2.0 +oslo.utils>=3.18.0 # Apache-2.0 @@ -11 +11 @@ Babel>=2.3.4 # BSD -keystoneauth1>=2.10.0 # Apache-2.0 +keystoneauth1>=2.14.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index d27d55a..9ddd426 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,2 +5,3 @@ hacking<0.11,>=0.10.0 -coverage>=3.6 # Apache-2.0 -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +coverage>=4.0 # Apache-2.0 +fixtures>=3.0.0 # Apache-2.0/BSD +oslosphinx>=4.7.0 # Apache-2.0 @@ -8,2 +9,2 @@ oslotest>=1.10.0 # Apache-2.0 -requests-mock>=1.0 # Apache-2.0 -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +requests-mock>=1.1 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD @@ -16 +17 @@ pycrypto>=2.6 # Public Domain -reno>=1.8.0 # Apache2 +reno>=1.8.0 # Apache-2.0

1 0

[new][tripleo] tripleo-validations 5.2.0 release (ocata)
by no-reply＠openstack.org 18 Nov '16

18 Nov '16

We are psyched to announce the release of: tripleo-validations 5.2.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the ocata release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo/+bugs?field.tag=validations For more details, please see below. Changes in tripleo-validations 5.1.0..5.2.0 ------------------------------------------- 32620fe Fix the DHCP validations d6f10a2 callback_plugins/validation_output.py: improved output ab2a0e5 undercloud-tokenflush: changed group to pre-introspection 25ac8b9 Updated from global requirements 50c33f6 Validation stonith device exists in OpenStack Platform HA cluster 8976ba0 Updated from global requirements 9256d01 undercloud-disk-space.yaml: improved output b3c75f0 Change HAProxy timeouts to match the defaults de78744 Fix the mysql-open-files-limit validation 44fe6a7 Fix the pacemaker-status validation 6899fe0 Fix the ctlplane-ip-range validation ea7aed4 Fix the rabbitmq-limits validations 172049f Fix the check-network-gateway validation 567b9db Fix typo in the group for check-network-gateway e120b6b Pass the the custom cacert to nova and heat client 622454b Use custom CA cert with tripleo-ansible-inventory fe79942 Updated from global requirements 126e74a Updated from global requirements 4349bfc Validate the IP range for the control plane 2e1a198 Validation to detect if undercloud disks use 512e b8eda48 Validation to verify connectivity to overcloud 29de0e2 Validate haproxy configuration values 8e311b6 Add the NoopFirewallDriver validation e10338c Add a validation-specific Ansible output callback 0a608f8 Validate rogue DHCP servers 77f1245 Updated from global requirements 2fca276 Add network gateway validation 8502c3a Make the ini-based validations more robust 108a454 modify the home-page info with the developer documentation ad1439a Generate documentation for validations 9e66114 Remove `become: true` from the inventory script 077942e Cleanup tox.ini, enable constraints 6238fa0 Validate rabbitmq limits dbea526 Validate the open-files-limit value in mysql e17db70 Validate pacemaker status 31874e7 Validate ntp is running and synchronised 37585b1 Validation to check ulimits on controller 10e8b94 Validation to check the undercloud processes Diffstat (except docs and test files) ------------------------------------- ansible.cfg | 4 + generate_validation_list.py | 45 ------ requirements.txt | 8 +- scripts/tripleo-ansible-inventory | 15 +- setup.cfg | 2 +- test-requirements.txt | 6 +- tox.ini | 29 +--- validations/512e.yaml | 19 +++ validations/callback_plugins/validation_output.py | 166 ++++++++++++++++++++++ validations/ceilometerdb-size.yaml | 4 +- validations/check-network-gateway.yaml | 23 +++ validations/controller-ulimits.yaml | 38 +++++ validations/ctlplane-ip-range.yaml | 23 +++ validations/dhcp-introspection.yaml | 27 ++++ validations/dhcp-provisioning.yaml | 26 ++++ validations/files/rogue_dhcp.py | 62 ++++++++ validations/haproxy.yaml | 36 +++++ validations/library/advanced_format.py | 74 ++++++++++ validations/library/haproxy_conf.py | 66 +++++++++ validations/library/hiera.py | 41 ++++++ validations/library/icmp_ping.py | 61 ++++++++ validations/library/ini.py | 32 +++-- validations/library/ip_range.py | 47 ++++++ validations/library/overcloudrc.py | 54 +++++++ validations/library/pacemaker.py | 58 ++++++++ validations/library/undercloud_conf.py | 46 ++++++ validations/mysql-open-files-limit.yaml | 23 +++ validations/no-op-firewall-nova-driver.yaml | 22 +++ validations/ntpstat.yaml | 16 +++ validations/openstack-endpoints.yaml | 40 ++++++ validations/pacemaker-status.yaml | 20 +++ validations/rabbitmq-limits.yaml | 20 +++ validations/stonith-exists.yaml | 36 +++++ validations/undercloud-debug.yaml | 4 +- validations/undercloud-disk-space.yaml | 14 +- validations/undercloud-process-count.yaml | 38 +++++ validations/undercloud-tokenflush.yaml | 2 +- 40 files changed, 1283 insertions(+), 107 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3d279c0..0e54649 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,4 +5,4 @@ -pbr>=1.6 # Apache-2.0 -oslo.config>=3.14.0 # Apache-2.0 -python-heatclient>=1.4.0 # Apache-2.0 -python-keystoneclient!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=1.8 # Apache-2.0 +oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 +python-heatclient>=1.5.0 # Apache-2.0 +python-keystoneclient>=3.6.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 757b1b9..edce4f1 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ hacking<0.12,>=0.11.0 # Apache-2.0 -coverage>=3.6 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -9,2 +9,2 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0

1 0