June 2016 - OpenStack-announce - lists.openstack.org

[new][tacker] python-tackerclient 0.4.0 release (newton)
by no-reply＠openstack.org 28 Jun '16

28 Jun '16

We are chuffed to announce the release of: python-tackerclient 0.4.0: CLI and Client Library for OpenStack Tacker This release is part of the newton release series. With package available at: https://pypi.python.org/pypi/python-tackerclient For more details, please see below. Changes in python-tackerclient 0.3.0..0.4.0 ------------------------------------------- 805ca41 Change the initial letter to capitals in Tacker CLI help texts ffa34ca Updated from global requirements fc363ee Add client side support for error_reason 67c034b Change bind_port to 9890 f48c03d Add reno support to python-tackerclient 51e493e Updated from global requirements 4d00030 Updated from global requirements d477472 Fix incompatible code with python3 for tox pep8 test 05ac550 Capitalize help descriptions 3319684 Updated from global requirements af528be Updated from global requirements a6bd47c Updated from global requirements 4312359 Updated from global requirements f7b1168 py3.x: Use six.iteritems for Iterable dict items. 12e2230 Fix deprecation warning in tackerclient 0744420 Do not display password in VIM command outputs 83cfe93 Clean device from help message 25337d6 Updated from global requirements 1ea8b98 Updated from global requirements 6a2df0a Clean unused code. 20d3658 Cleanup copyright header 82e3268 Updated from global requirements 00d3c97 Cleanup vim settings 23dc390 Help message correction Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 261 ++++++++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 13 +- setup.cfg | 7 +- tackerclient/client.py | 2 +- tackerclient/common/exceptions.py | 6 - tackerclient/tacker/v1_0/__init__.py | 15 +- tackerclient/tacker/v1_0/nfvo/vim.py | 18 +- tackerclient/tacker/v1_0/vm/vnf.py | 24 ++- tackerclient/tacker/v1_0/vm/vnfd.py | 16 +- tackerclient/v1_0/client.py | 11 +- tackerclient/version.py | 2 - test-requirements.txt | 9 +- tox.ini | 3 + 25 files changed, 392 insertions(+), 72 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 87bcc64..9451986 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ cliff!=1.16.0,!=1.17.0,>=1.15.0 # Apache-2.0 -iso8601>=0.1.9 # MIT +iso8601>=0.1.11 # MIT @@ -8,2 +8,2 @@ netaddr!=0.7.16,>=0.7.12 # BSD -requests!=2.9.0,>=2.8.1 # Apache-2.0 -python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +python-keystoneclient!=1.8.0,!=2.1.0,>=1.7.0 # Apache-2.0 @@ -12 +12 @@ six>=1.9.0 # MIT -Babel>=1.3 # BSD +Babel>=2.3.4 # BSD @@ -14,2 +14,3 @@ Babel>=1.3 # BSD -oslo.i18n>=2.1.0 # Apache-2.0 -oslo.utils>=3.5.0 # Apache-2.0 +oslo.i18n>=2.1.0 # Apache-2.0 +oslo.utils>=3.11.0 # Apache-2.0 +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 3fbb155..8ba8d0b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ discover # BSD -fixtures>=1.3.1 # Apache-2.0/BSD +fixtures>=3.0.0 # Apache-2.0/BSD @@ -10 +10 @@ mox>=0.5.3 # Apache-2.0 -flake8<2.6.0,>2.4.1 # MIT +flake8<2.6.0,>=2.5.4 # MIT @@ -14 +14 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD @@ -16,0 +17,3 @@ testtools>=1.4.0 # MIT + +# releasenotes +reno>=1.6.2 # Apache2

1 0

RCE vulnerability in Openstack Murano using insecure YAML tags (CVE-2016-4972)
by Kirill Zaitsev 24 Jun '16

24 Jun '16

============================================================== RCE vulnerability in Openstack Murano using insecure YAML tags ============================================================== :Date: June 23, 2016 :CVE: CVE-2016-4972 Affects ~~~~~~~ - Murano: <=2015.1.1; <=1.0.2; ==2.0.0 - Murano-dashboard: <=2015.1.1; <=1.0.2; ==2.0.0 - Python-muranoclient: <=0.7.2; >=0.8.0<=0.8.4 Description ~~~~~~~~~~~ Kirill Zaitsev from Mirantis reported a vulnerability in OpenStack Murano applications processing. Using extended YAML tags in Murano application YAML files, an attacker can perform a Remote Code Execution attack. Vulnerability has been verified in all currently supported branches. Further examination of code suggest, that it is also present in kilo and juno versions of murano. Patches ~~~~~~~ - https://review.openstack.org/#/c/333444/ (Liberty) - https://review.openstack.org/#/c/333425/ (Liberty) - https://review.openstack.org/#/c/333432/ (Liberty) - https://review.openstack.org/#/c/333443/ (Mitaka) - https://review.openstack.org/#/c/333424/ (Mitaka) - https://review.openstack.org/#/c/333439/ (Mitaka) - https://review.openstack.org/#/c/333423/ (Newton) - https://review.openstack.org/#/c/333440/ (Newton) - https://review.openstack.org/#/c/333428/ (Newton) Credits ~~~~~~~ - Kirill Zaitsev from Mirantis (CVE-2016-4972) References ~~~~~~~~~~ - https://bugs.launchpad.net/python-muranoclient/+bug/1586078 - https://bugs.launchpad.net/murano/+bug/1586079 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4972 Notes ~~~~~ - Fixes for this bug are going to be included in the upcoming releases of murano 1.0.3(liberty), 2.0.1(mitaka), 3.0.0(newton) and python-muranoclient 0.7.3(liberty), 0.8.5(mitaka), 0.9.0(newton) -- Kirill Zaitsev Murano Project Technical Lead

1 0

Ironic node information including credentials exposed to unathenticated users
by Jim Rollenhagen 22 Jun '16

22 Jun '16

============================================================================= Ironic node information including credentials exposed to unathenticated users ============================================================================= :Date: June 21, 2016 :CVE: CVE-2016-4985 Affects ~~~~~~~ - Ironic: >=2014.2, >=4.0.0 <=4.2.4, >=4.3.0 <=5.1.1 Description ~~~~~~~~~~~ Devananda van der Veen (IBM) reported the following vulnerability in Ironic. A client with network access to the ironic-api service can bypass Keystone authentication and retrieve all information about any Node registered with Ironic, if they know (or are able to guess) the MAC address of a network card belonging to that Node, by sending a crafted POST request to the /v1/drivers/$DRIVER_NAME/vendor_passthru resource. The response will include the full Node details, including management passwords, even when /etc/ironic/policy.json is configured to hide passwords in API responses. This vulnerability has been verified in all currently supported branches (liberty, mitaka, master) and traced back to code introduced in commit 3e568fbbbcc5748035c1448a0bdb26306470797c during the Juno development cycle. Therefore, it is likely that both juno and kilo braches (and their releases) are also affected. Patches ~~~~~~~ https://review.openstack.org/332195 (Newton) https://review.openstack.org/332196 (Mitaka) https://review.openstack.org/332197 (Liberty) Credits ~~~~~~~ - Devananda van der Veen from IBM (CVE-2016-4985) References ~~~~~~~~~~ - https://bugs.launchpad.net/ironic/+bug/1572796 - http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2016-4985 Notes ~~~~~ - This fix is included in the upcoming 4.2.5 (Liberty), 5.1.2 (Mitaka), and 6.0.0 (Newton) releases of Ironic. -- Jim Rollenhagen OpenStack Ironic Project Team Lead

1 0

[new][telemetry] ceilometer 6.1.0 release (mitaka)
by no-reply＠openstack.org 22 Jun '16

22 Jun '16

We are pleased to announce the release of: ceilometer 6.1.0: OpenStack Telemetry This release is part of the mitaka stable release series. For more details, please see below. Changes in ceilometer 6.0.0..6.1.0 ---------------------------------- f7e27a2 dispacher/gnocchi: measures sent fix logging 5976031 Copy images_client from tempest + Correct concurrency of gabbi 1.22.0 9c08a89 catch DriverLoadFailure for get_transport optional 7951eb5 enable swift pollsters poll data for specific region 9d2864f Imported Translations from Zanata 1c0b83c tempest_plugin: drop telemetry decorator 9ba3c49 Updated from global requirements 9cf0397 [Trivial] Update Neutron resource status list 75c48c0 fix CI failure due to oslo.messaging 5.0.0 6292e0e Fix notification listeners usage de82727 Imported Translations from Zanata c2b7246 Imported Translations from Zanata 1266e56 Imported Translations from Zanata 333104d Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- .testr.conf | 2 +- ceilometer/dispatcher/gnocchi.py | 4 +- ceilometer/locale/ceilometer-log-error.pot | 181 ------- ceilometer/locale/ceilometer-log-info.pot | 163 ------ ceilometer/locale/ceilometer-log-warning.pot | 164 ------ ceilometer/locale/ceilometer.pot | 570 --------------------- .../locale/de/LC_MESSAGES/ceilometer-log-error.po | 6 +- .../locale/de/LC_MESSAGES/ceilometer-log-info.po | 13 +- .../de/LC_MESSAGES/ceilometer-log-warning.po | 6 +- ceilometer/locale/de/LC_MESSAGES/ceilometer.po | 20 +- .../locale/es/LC_MESSAGES/ceilometer-log-error.po | 6 +- .../locale/es/LC_MESSAGES/ceilometer-log-info.po | 6 +- ceilometer/locale/es/LC_MESSAGES/ceilometer.po | 136 ++--- ceilometer/locale/fr/LC_MESSAGES/ceilometer.po | 215 ++++---- ceilometer/locale/it/LC_MESSAGES/ceilometer.po | 6 +- ceilometer/locale/ja/LC_MESSAGES/ceilometer.po | 6 +- .../ko_KR/LC_MESSAGES/ceilometer-log-error.po | 22 +- .../ko_KR/LC_MESSAGES/ceilometer-log-info.po | 12 +- .../ko_KR/LC_MESSAGES/ceilometer-log-warning.po | 22 +- ceilometer/locale/ko_KR/LC_MESSAGES/ceilometer.po | 153 ++++-- ceilometer/locale/pt_BR/LC_MESSAGES/ceilometer.po | 107 ++-- ceilometer/locale/ru/LC_MESSAGES/ceilometer.po | 6 +- ceilometer/locale/zh_CN/LC_MESSAGES/ceilometer.po | 188 +++---- ceilometer/locale/zh_TW/LC_MESSAGES/ceilometer.po | 42 +- ceilometer/messaging.py | 5 +- ceilometer/network/services/base.py | 5 + ceilometer/notification.py | 83 ++- ceilometer/objectstore/swift.py | 8 +- ceilometer/pipeline.py | 2 + .../test_object_storage_telemetry_middleware.py | 2 +- .../tempest/service/images/v1/images_client.py | 257 ++++++++++ .../tempest/service/images/v2/images_client.py | 245 +++++++++ requirements.txt | 2 +- test-requirements.txt | 4 +- 44 files changed, 1704 insertions(+), 1596 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 15d199a..5b3158c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -32 +32 @@ python-glanceclient>=2.0.0 # Apache-2.0 -python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 +python-keystoneclient!=1.8.0,!=2.1.0,<3.0.0,>=1.6.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 6ffbce0..3ddf02b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ hacking<0.11,>=0.10.0 -Babel>=1.3 # BSD +Babel!=2.3.0,!=2.3.1,!=2.3.2,!=2.3.3,>=1.3 # BSD @@ -11 +11 @@ elasticsearch<2.0,>=1.3.0 # Apache-2.0 -fixtures>=1.3.1 # Apache-2.0/BSD +fixtures<2.0,>=1.3.1 # Apache-2.0/BSD

1 0

[new][glance] python-glanceclient 2.0.1 release (mitaka)
by no-reply＠openstack.org 22 Jun '16

22 Jun '16

We are stoked to announce the release of: python-glanceclient 2.0.1: OpenStack Image API Client Library This release is part of the mitaka stable release series. With source available at: https://git.openstack.org/cgit/openstack/python-glanceclient With package available at: https://pypi.python.org/pypi/python-glanceclient Please report issues through launchpad: https://bugs.launchpad.net/python-glanceclient For more details, please see below. Changes in python-glanceclient 2.0.0..2.0.1 ------------------------------------------- 99ca367 Add upper constraints to glanceclient f6b9e79 Get endpoint if os_image_url is not set 4a55671 Fix "Codec can't encode characters" 8ab1756 Updated from global requirements 11b0f34 Updated from global requirements b124562 Fix missing of debug info after we use session e2ddf50 Updated from global requirements 9fc5d56 Re-enable stacktracing when --debug is used d0882d1 Update .gitreview for stable/mitaka Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glanceclient/common/http.py | 32 ++++----- glanceclient/shell.py | 29 +++++--- requirements.txt | 4 +- test-requirements.txt | 2 +- tools/tox_install.sh | 55 ++++++++++++++ tox.ini | 13 +++- 9 files changed, 221 insertions(+), 51 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fbc914c..783d554 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ pbr>=1.6 # Apache-2.0 -Babel>=1.3 # BSD +Babel!=2.3.0,!=2.3.1,!=2.3.2,!=2.3.3,>=1.3 # BSD @@ -7 +7 @@ PrettyTable<0.8,>=0.7 # BSD -python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 +python-keystoneclient!=1.8.0,!=2.1.0,<3.0.0,>=1.6.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 4f56ff1..9265f4c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -17 +17 @@ testscenarios>=0.4 # Apache-2.0/BSD -fixtures>=1.3.1 # Apache-2.0/BSD +fixtures<2.0,>=1.3.1 # Apache-2.0/BSD

1 0

[new][glance] python-glanceclient 2.1.0 release (newton)
by no-reply＠openstack.org 22 Jun '16

22 Jun '16

We are jubilant to announce the release of: python-glanceclient 2.1.0: OpenStack Image API Client Library This release is part of the newton release series. With source available at: https://git.openstack.org/cgit/openstack/python-glanceclient With package available at: https://pypi.python.org/pypi/python-glanceclient Please report issues through launchpad: https://bugs.launchpad.net/python-glanceclient For more details, please see below. Changes in python-glanceclient 2.0.0..2.1.0 ------------------------------------------- 46c3792 Updated from global requirements 2ab2678 Remove deprecated construct method from session init 10ad288 Add upper constraints to glanceclient 28f905f Updated from global requirements 3a0007a Fixed grammar in image-download command description 3ced7d5 Updated from global requirements a1cd7ef Updated from global requirements 3296620 Updated from global requirements 3066256 [Trivial] Remove unnecessary executable privilege 9329ef0 Fix "Codec can't encode characters" f0dca77 Updated from global requirements f9dade5 Update the home-page with developer documentation a862196 Get endpoint if os_image_url is not set f39647a Updated from global requirements 41e10e3 Corrected wrong parameter in docstring da22122 Updated from global requirements cd5925b Enable hacking checks 9faa9d4 Fix typos in docstrings and comments c70578a Updated from global requirements d0ec3a7 Re-enable stacktracing when --debug is used 9e532db Add last_request_id member to HTTPClient and SessionClient 444ffbe Fix v2 so that you can see the default help info 2561e40 Update auth_token before sending request 87c8c93 Fix missing of debug info after we use session d3de9ed Ship the default metadata schema in the client c6904d0 Docs are generated incorrectly 8b6dbb2 Fix location update 860908c Catch InUseByStore case in do_image_delete 6feb715 Update reno for stable/mitaka 03f13e4 trival: fix a typo in comment Diffstat (except docs and test files) ------------------------------------- glanceclient/common/exceptions.py | 2 +- glanceclient/common/http.py | 44 ++-- glanceclient/common/https.py | 15 +- glanceclient/common/progressbar.py | 15 +- glanceclient/common/utils.py | 14 +- glanceclient/shell.py | 56 ++--- glanceclient/v1/images.py | 2 +- glanceclient/v1/shell.py | 2 +- glanceclient/v2/images.py | 13 +- glanceclient/v2/metadefs.py | 17 +- glanceclient/v2/namespace_schema.py | 243 +++++++++++++++++++++ glanceclient/v2/resource_type_schema.py | 67 ++++++ glanceclient/v2/schemas.py | 9 +- glanceclient/v2/shell.py | 16 +- glanceclient/v2/tasks.py | 3 +- releasenotes/source/index.rst | 1 + releasenotes/source/mitaka.rst | 6 + requirements.txt | 8 +- setup.cfg | 2 +- test-requirements.txt | 6 +- tools/tox_install.sh | 55 +++++ tox.ini | 21 +- 30 files changed, 736 insertions(+), 158 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fbc914c..e290210 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ pbr>=1.6 # Apache-2.0 -Babel>=1.3 # BSD +Babel>=2.3.4 # BSD @@ -7,2 +7,2 @@ PrettyTable<0.8,>=0.7 # BSD -python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 -requests!=2.9.0,>=2.8.1 # Apache-2.0 +python-keystoneclient!=1.8.0,!=2.1.0,>=1.7.0 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 @@ -11 +11 @@ six>=1.9.0 # MIT -oslo.utils>=3.5.0 # Apache-2.0 +oslo.utils>=3.11.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 4f56ff1..f3f271c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ discover # BSD -mock>=1.2 # BSD +mock>=2.0 # BSD @@ -12 +12 @@ oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 -reno>=0.1.1 # Apache2 +reno>=1.6.2 # Apache2 @@ -17 +17 @@ testscenarios>=0.4 # Apache-2.0/BSD -fixtures>=1.3.1 # Apache-2.0/BSD +fixtures>=3.0.0 # Apache-2.0/BSD

1 0

[new][monasca] monasca-api 1.2.0 release (newton)
by no-reply＠openstack.org 20 Jun '16

20 Jun '16

We are jazzed to announce the release of: monasca-api 1.2.0: OpenStack Monitoring as a Service This release is part of the newton release series. For more details, please see below. Changes in monasca-api 1.1.2..1.2.0 ----------------------------------- 80a84b5 Add domain variables for client 4df2cca Enable filter by severity in ORM 6f0c3b2 Allow QA teams to use the Top Level Domain .test bc2b426 Pass Credentials object instead of TestResource object 0292ca9 Fix format specifier bug in GET /names 665f38c Adjust devstack plugin for new storm/thresh version d8556ae Allow filtering by multiple severities c2f8543 Add period field to notification methods 7d69277 Added more logs to devstack log output 0cce983 (Non)deterministic support for alarms daca9b1 Remove unused and wrong pot file fcb85d1 Fix alarm definition ok action validation 8d90606 Omit error logs which say can't remove npm cache 0602f68 [monasca-api] Change tox to use https instead of git 6262514 Remove python-dateutil useless requirement fbd5871 Remove ujson useless requirement c0c8277 Remove unnecessary executable permissions 930a1df Pagination fix for ORM ea2447d [monasca-api]Constraint tox targets with upper-constraints.txt f8b7e04 Make devstack setup script use identity v3 fc51f82 Fix metrics statistics with multiple statistics 7e1eee6 Or zookeeper with true when starting Kafka 7365487 Fix group_by concurrent modification exception 4bfe0fa Add the ability to give vertica a hint to satisfy query locally ae05d04 Add support for multiple metrics in measurements and statistics resources 53d4fb7 Add equal sign on start/end time in influx 88b756c Fix metric-list limits e46a57f Honour ENABLED_SERVICES in devstack plugin ad2deb3 Return 422 when updating with invalid notification method f5d76ca [Trivial] Remove unnecessary executable privilege 8ef748c Change tox file 4abeffe Fix sqla query of getting an alarm definition f7e77bb Ignore value-meta validation when value-meta doesn't exist 69ae960 Alarm-update failed with too few arguments e5aa3e5 Add kafka python to monasca-agent virtualenv 2d57741 Fix alarms with sort_by tests 8ec9924 FIX installation to enable to install after unstack 4645a24 Replace measurements table join with subquery that fits in memory 2588d9f Fix dimension validation of alarms 567babb Update nodejs and npm packages 9cfa9d1 Fix alarmdefs multiple sort_by doesn't work correctly f10bddc Proposal of adding sort parameter to list notifications a4aa70a Add grafana 2 setup to devstack monasca setup 02bf7a9 Validate value meta key and value in python api b917418 Honor accessedViaHttps flag on self and next links f612ed7 Remove sphinx requires from test-requirements 7e7cccf Add clean up of Vertica 036e417 Add support for Vertica in the DevStack plugin 859f946 Fix install of Horizon Monasa UI in DevStack Plugin d902feb Fix statistic tests with Vertica in Devstack 1eb60c8 Fix List Alarm/Alarms History Offset in Vertica e060173 Dimension Filtering in Vertica Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + AUTHORS | 6 + devstack/README.md | 110 +++++++ devstack/README.txt | 86 ----- devstack/Vagrantfile | 14 +- devstack/files/env.sh | 2 + devstack/files/grafana/grafana-server | 146 +++++++++ devstack/files/grafana/grafana.ini | 2 + devstack/files/kafka/kafka.conf | 4 +- devstack/files/keystone/create_monasca_service.py | 221 ++++++++----- devstack/files/monasca-api/api-config.yml | 11 + .../files/monasca-notification/notification.yaml | 6 +- devstack/files/schema/mon_mysql.sql | 5 +- devstack/files/vertica/mon_alarms.sql | 14 + devstack/files/vertica/mon_metrics.sql | 105 ++++++ devstack/files/vertica/roles.sql | 18 ++ devstack/files/vertica/users.sql | 7 + devstack/plugin.sh | 353 +++++++++++++++++---- devstack/settings | 13 +- java/pom.xml | 8 - java/src/deb/etc/api-config.yml-sample | 8 + java/src/main/java/monasca/api/ApiConfig.java | 8 +- .../monasca/api/app/AlarmDefinitionService.java | 5 +- .../command/CreateNotificationMethodCommand.java | 48 +-- .../command/UpdateNotificationMethodCommand.java | 89 ++++++ .../api/app/validation/AlarmValidation.java | 14 +- .../api/app/validation/DimensionValidation.java | 110 ++++--- .../validation/NotificationMethodValidation.java | 57 ++++ .../monasca/api/app/validation/Validation.java | 51 ++- .../monasca/api/domain/model/alarm/AlarmRepo.java | 4 +- .../model/alarmdefinition/AlarmDefinition.java | 14 +- .../model/alarmdefinition/AlarmDefinitionRepo.java | 3 +- .../monasca/api/domain/model/common/Paged.java | 37 ++- .../domain/model/measurement/MeasurementRepo.java | 5 +- .../api/domain/model/measurement/Measurements.java | 4 +- .../notificationmethod/NotificationMethod.java | 17 +- .../notificationmethod/NotificationMethodRepo.java | 8 +- .../api/domain/model/statistic/StatisticRepo.java | 5 +- .../hibernate/AlarmDefinitionSqlRepoImpl.java | 51 ++- .../persistence/hibernate/AlarmSqlRepoImpl.java | 301 ++++++++++-------- .../hibernate/NotificationMethodSqlRepoImpl.java | 19 +- .../influxdb/InfluxV9MeasurementRepo.java | 68 ++-- .../influxdb/InfluxV9StatisticRepo.java | 66 +++- .../persistence/influxdb/InfluxV9Utils.java | 12 +- .../mysql/AlarmDefinitionMySqlRepoImpl.java | 59 ++-- .../persistence/mysql/AlarmMySqlRepoImpl.java | 20 +- .../persistence/mysql/MySQLUtils.java | 24 ++ .../mysql/NotificationMethodMySqlRepoImpl.java | 40 ++- .../vertica/AlarmStateHistoryVerticaRepoImpl.java | 14 +- .../vertica/MeasurementVerticaRepoImpl.java | 251 ++++++++++----- .../vertica/MetricDefinitionVerticaRepoImpl.java | 106 ++++--- .../persistence/vertica/MetricQueries.java | 151 ++++++--- .../vertica/StatisticVerticaRepoImpl.java | 168 ++++++---- .../vertica/VerticaDataSourceFactory.java | 28 ++ .../api/resource/AlarmDefinitionResource.java | 6 +- .../java/monasca/api/resource/AlarmResource.java | 12 +- java/src/main/java/monasca/api/resource/Links.java | 104 +++--- .../monasca/api/resource/MeasurementResource.java | 9 +- .../api/resource/NotificationMethodResource.java | 36 ++- .../monasca/api/resource/StatisticResource.java | 8 +- java/src/main/resources/api-config.yml | 33 +- .../app/command/CreateNotificationMethodTest.java | 93 ++++-- .../api/app/validation/AlarmExpressionsTest.java | 5 + .../monasca/api/app/validation/DimensionsTest.java | 48 ++- .../api/domain/model/NotificationMethodTest.java | 4 +- .../AlarmDefinitionSqlRepositoryImplTest.java | 23 +- .../hibernate/AlarmSqlRepositoryImplTest.java | 30 +- .../NotificationMethodSqlRepositoryImplTest.java | 36 ++- .../AlarmDefinitionMySqlRepositoryImplTest.java | 31 +- .../mysql/AlarmMySqlRepositoryImplTest.java | 2 +- .../NotificationMethodMySqlRepositoryImplTest.java | 37 ++- .../MeasurementVerticaRepositoryImplTest.java | 13 +- .../MetricDefinitionVerticaRepositoryImplTest.java | 5 +- .../persistence/vertica/MetricQueriesTest.java | 48 ++- .../NotificationMethodIntegrationTest.java | 14 +- .../api/resource/AlarmDefinitionResourceTest.java | 49 ++- .../test/java/monasca/api/resource/LinksTest.java | 84 ++++- .../monasca/api/resource/MetricResourceTest.java | 10 +- .../resource/NotificationMethodResourceTest.java | 141 ++++++-- .../api/resource/StatisticResourceTest.java | 4 +- .../api/resource/exception/ErrorMessages.java | 5 +- java/src/test/resources/fixtures/alarm.json | 2 +- .../fixtures/newNotificationMethodWithPeriod.json | 1 + .../resources/fixtures/notificationMethod.json | 2 +- java/src/test/resources/monasca-api-config.yml | 14 +- .../api/infrastructure/persistence/mysql/alarm.sql | 1 + .../persistence/mysql/notification_method.sql | 1 + monasca_api/api/server.py | 0 .../repositories/influxdb/metrics_repository.py | 8 +- .../repositories/model/sub_alarm_definition.py | 9 +- .../mysql/alarm_definitions_repository.py | 33 +- .../common/repositories/mysql/alarms_repository.py | 12 +- .../repositories/mysql/notifications_repository.py | 28 +- .../repositories/notifications_repository.py | 8 +- .../sqla/alarm_definitions_repository.py | 21 +- .../common/repositories/sqla/alarms_repository.py | 22 +- monasca_api/common/repositories/sqla/models.py | 3 + .../repositories/sqla/notifications_repository.py | 23 +- monasca_api/expression_parser/alarm_expr_parser.py | 29 +- monasca_api/locale/monasca.pot | 22 -- .../schemas/notifications_request_body_schema.py | 51 ++- monasca_api/v2/common/validation.py | 43 +++ monasca_api/v2/reference/__init__.py | 8 +- monasca_api/v2/reference/alarm_definitions.py | 40 ++- monasca_api/v2/reference/alarms.py | 30 +- monasca_api/v2/reference/helpers.py | 14 +- monasca_api/v2/reference/metrics.py | 7 +- monasca_api/v2/reference/notifications.py | 50 ++- .../test_alarms_state_history_one_transition.py | 38 ++- requirements.txt | 2 - test-requirements.txt | 6 - tools/tox_install.sh | 57 ++++ tox.ini | 7 +- 129 files changed, 4525 insertions(+), 1354 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 963bc82..7d3adcc 100755 --- a/requirements.txt +++ b/requirements.txt @@ -14 +13,0 @@ pbr -python-dateutil @@ -16 +14,0 @@ six -ujson>=1.33 diff --git a/test-requirements.txt b/test-requirements.txt index ca4d2ce..37427c3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -14,2 +13,0 @@ nose -# Docs Requirements -oslosphinx @@ -18,4 +15,0 @@ python-subunit>=0.0.18 -sphinx>=1.1.2,!=1.2.0,<1.3 -sphinxcontrib-docbookrestapi -sphinxcontrib-httpdomain -sphinxcontrib-pecanwsme>=0.8

1 0

[new][monasca] python-monascaclient 1.1.0 release (newton)
by no-reply＠openstack.org 20 Jun '16

20 Jun '16

We are glad to announce the release of: python-monascaclient 1.1.0: Monasca API Client Library This release is part of the newton release series. With package available at: https://pypi.python.org/pypi/python-monascaclient For more details, please see below. Changes in python-monascaclient 1.0.30..1.1.0 --------------------------------------------- 7a9f7a0 Remove the debian folder b62c096 Oslo.utils safe_decode bb1ed7f Update copyright in monascaclient 4c103fd Adding keystoneauth sessions support 962f2de Graduate to oslo.utils strutils b72eaa4 Graduate to using oslo.utils importutils a6542c3 Graduate to oslo.serialization jsonutils 257b892 [python-monascaclient] Change tox to use https instead of git c753513 Add period field to notification methods d3a6bed code compatibility with py3 1c4d13c Constraint tox targets with upper-constraints.txt 887e1d5 Fix the homepage in setup.cfg 5758fe3 Add support for group_by to measurements and statistics resources 5a099c8 Manually sync with global-requirements 29f9d57 [Trivial] Remove executable privilege of setup.py 4568736 Add --tenant-id option for some commands 4790bd9 Specify match_by in alarm-definition-update help message 0dc4b03 Alarm def update/patch failed with empty param 731a38b Change tox file d32548f Implement monasca metric-name-list e288e8a Fix metric dimensions having only key bfb5453 Allow sorting notifications 25deb49 remove python 2.6 trove classifier Diffstat (except docs and test files) ------------------------------------- README.rst | 42 +++-- client_api_example.py | 10 +- debian/changelog | 6 - debian/compat | 1 - debian/control | 15 -- debian/copyright | 4 - debian/rules | 4 - monascaclient/__init__.py | 15 ++ monascaclient/common/http.py | 111 +++++++++-- monascaclient/common/monasca_manager.py | 7 +- monascaclient/common/utils.py | 8 +- monascaclient/exc.py | 2 +- monascaclient/ksclient.py | 112 +++++++----- monascaclient/openstack/common/apiclient/base.py | 3 +- monascaclient/openstack/common/importutils.py | 67 ------- monascaclient/openstack/common/jsonutils.py | 183 ------------------- monascaclient/openstack/common/strutils.py | 223 ----------------------- monascaclient/openstack/common/timeutils.py | 205 --------------------- monascaclient/shell.py | 91 ++++----- monascaclient/v2_0/__init__.py | 2 +- monascaclient/v2_0/client.py | 24 ++- monascaclient/v2_0/shell.py | 143 +++++++++++++-- openstack-common.conf | 2 +- requirements.txt | 36 ++-- setup.cfg | 5 +- setup.py | 12 +- test-requirements.txt | 23 ++- tools/install_venv.py | 5 +- tools/tox_install.sh | 57 ++++++ tox.ini | 7 +- 32 files changed, 590 insertions(+), 940 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9a0de05..a94c38d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,8 +1,11 @@ -oslo.config -oslo.concurrency -oslo.i18n -oslo.log -oslo.middleware -oslo.serialization -oslo.service -oslo.utils +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +oslo.config>=3.9.0 # Apache-2.0 +oslo.concurrency>=3.5.0 # Apache-2.0 +oslo.i18n>=2.1.0 # Apache-2.0 +oslo.log>=1.14.0 # Apache-2.0 +oslo.middleware>=3.0.0 # Apache-2.0 +oslo.serialization>=1.10.0 # Apache-2.0 +oslo.service>=1.0.0 # Apache-2.0 +oslo.utils>=3.5.0 # Apache-2.0 @@ -10 +13 @@ oslo.utils -python-keystoneclient +keystoneauth1>=2.1.0 # Apache-2.0 @@ -12,8 +15,7 @@ python-keystoneclient -argparse -babel -iso8601>=0.1.9 -pbr>=0.11 -PrettyTable>=0.7 -PyYAML>=3.1.0 -requests>=1.1 -six>=1.7.0 +Babel!=2.3.0,!=2.3.1,!=2.3.2,!=2.3.3,>=1.3 # BSD +iso8601>=0.1.11 # MIT +pbr>=1.6 # Apache-2.0 +PrettyTable<0.8,>=0.7 # BSD +PyYAML>=3.1.0 # MIT +requests!=2.9.0,>=2.8.1 # Apache-2.0 +six>=1.9.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index b1aa55d..ddc9e71 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,10 +1,13 @@ -coverage>=3.6 -discover -fixtures>=0.3.14 -hacking>=0.9.2,<0.10 -mock>=1.0 -mox3>=0.7.0 -sphinx>=1.1.2,<1.2 -testrepository>=0.0.18 -testscenarios>=0.4 -testtools>=0.9.34 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +coverage>=3.6 # Apache-2.0 +discover # BSD +fixtures<2.0,>=1.3.1 # Apache-2.0/BSD +hacking<0.10,>=0.9.2 +mock>=1.2 # BSD +mox3>=0.7.0 # Apache-2.0 +sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD +testrepository>=0.0.18 # Apache-2.0/BSD +testscenarios>=0.4 # Apache-2.0/BSD +testtools>=1.4.0 # MIT

1 0

[new][monasca] monasca-notification 1.3.0 release (newton)
by no-reply＠openstack.org 20 Jun '16

20 Jun '16

We are satisfied to announce the release of: monasca-notification 1.3.0: UNKNOWN This release is part of the newton release series. For more details, please see below. Changes in monasca-notification 1.2.13..1.3.0 --------------------------------------------- 978dd35 Update copyright in monasca-nofitication 79f8afb [monasca-notification] Change tox to use https instead of git 17522ad [monasca-notification] Constraint tox targets with upper-constraints 79189ca Adding support for periodic notifications 1fcb2fd Change tox file 20b5652 Retry engine trys to write bad data to Kafka 6e2961c Retry engine trys to write bad data to Kafka Diffstat (except docs and test files) ------------------------------------- .../common/repositories/base/base_repo.py | 6 +- .../common/repositories/mysql/mysql_repo.py | 19 +++- .../common/repositories/orm/models.py | 2 + .../common/repositories/orm/orm_repo.py | 11 ++- .../common/repositories/postgres/pgsql_repo.py | 16 +++- monasca_notification/common/utils.py | 23 +++++ monasca_notification/main.py | 11 ++- monasca_notification/notification.py | 15 ++- monasca_notification/notification_engine.py | 16 +++- monasca_notification/notification_exceptions.py | 2 +- monasca_notification/periodic_engine.py | 101 +++++++++++++++++++++ monasca_notification/processors/alarm_processor.py | 8 +- monasca_notification/retry_engine.py | 7 +- notification.yaml | 5 + tools/tox_install.sh | 57 ++++++++++++ tox.ini | 6 +- 23 files changed, 360 insertions(+), 55 deletions(-)

1 0

[OSSA-2016-010] XSS in Horizon client side template (CVE-2016-4428)
by Tristan Cacqueray 17 Jun '16

17 Jun '16

================================================== OSSA-2016-010: XSS in Horizon client side template ================================================== :Date: June 15, 2016 :CVE: CVE-2016-4428 Affects ~~~~~~~ - Horizon: <=8.0.1, >=9.0.0 <=9.0.1 Description ~~~~~~~~~~~ Beth Lancaster and Brandon Sawyers from Virginia Tech reported a vulnerability in Horizon. By injecting Angularjs template in dashboard forms, such as image's description, an authenticated user may trigger a cross-site-scripting vulnerability when another user browses the affected pages. It may result in potential assets theft like user access credentials. All Horizon setups are affected. Patches ~~~~~~~ - https://review.openstack.org/329997 (Liberty) - https://review.openstack.org/329996 (Mitaka) - https://review.openstack.org/329998 (Newton) Credits ~~~~~~~ - Beth Lancaster from Virginia Tech (CVE-2016-4428) - Brandon Sawyers from Virginia Tech (CVE-2016-4428) References ~~~~~~~~~~ - https://bugs.launchpad.net/bugs/1567673 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4428 -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0