- OpenStack-announce - lists.openstack.org

[OSSA 2016-006] Glance image status manipulation through locations removal (CVE-2016-0757)
by Tristan Cacqueray 04 Feb '16

04 Feb '16

================================================================= OSSA-2016-006: Glance image status manipulation through locations removal ================================================================= :Date: February 03, 2016 :CVE: CVE-2016-0757 Affects ~~~~~~~ - Glance: <=2015.1.2, >=11.0.0 <= 11.0.1 Description ~~~~~~~~~~~ Erno Kuvaja from HPE reported a vulnerability in Glance. By removing the last location of an image, an authenticated user may change the image status back to queued and may be able to upload new image data resulting in a broken Glance's immutability promise. A malicious tenant may exploit this flaw to silently replace image data it owns, regardless of the original creator or the visibility settings. Only setups with show_multiple_locations enabled (not default) are affected. Patches ~~~~~~~ - https://review.openstack.org/275735 (Kilo) - https://review.openstack.org/275736 (Liberty) - https://review.openstack.org/275737 (Mitaka) Credits ~~~~~~~ - Erno Kuvaja from HPE (CVE-2016-0757) References ~~~~~~~~~~ - https://bugs.launchpad.net/bugs/1525915 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0757 Notes ~~~~~ - This fix will be included in future 2015.1.3 (kilo) and 11.0.2 (liberty) releases. - The proposed fix prevents the removal of the last location of an image so that an active image is always available. This action was previously incorrectly allowed and the fix might break some users who are relying on the false assumption that it would be ok to replace the data of existing image in the special case that the multiple locations has been configured. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

[release][neutron][ipam][networking-infoblox] networking-infoblox 2.0.0
by John Belamaric 02 Feb '16

02 Feb '16

I am happy to announce that we have released version 2.0.0 of the Infoblox IPAM driver for OpenStack. This driver uses the pluggable IPAM framework delivered in Neutron's Liberty release, enabling the use of Infoblox for allocating subnets and IP addresses, and automatically creating DNS zones and records in Infoblox. The driver is compatible with both Liberty and Mitaka. More information and the code may be found at the networking-infoblox Launchpad page [1], or PyPi [2]. Bugs may also be reported on the same page. [1] https://launchpad.net/networking-infoblox [2] https://pypi.python.org/pypi/networking-infoblox We are continuing to develop this driver to offer additional functionality, so please do provide any feedback you may have. Thank you, John

1 0

[release][designate] python-designateclient release 2.0.0 (mitaka)
by Doug Hellmann 02 Feb '16

02 Feb '16

We are glad to announce the release of: python-designateclient 2.0.0: OpenStack DNS as a Service - Client This release is part of the mitaka release series. With source available at: https://git.openstack.org/cgit/openstack/python-designateclient With package available at: https://pypi.python.org/pypi/python-designateclient Please report issues through launchpad: https://bugs.launchpad.net/python-designateclient For more details, please see below. Changes in python-designateclient 1.5.0..2.0.0 ---------------------------------------------- 8f3e935 Allow the OSC CLI Plugin to walk pages f22cabc Improvement in zone transfer request command description 3f18b79 Fixed grammar mistake in shell.rst c77290a Updated from global requirements 4545335 Update typos a4a6313 Show output on transfer accept 3b3cacf Change to ShowOne to display output upon update 76a007f Updated from global requirements d3d739a Updated from global requirements 90a01cb Put py34 first in the env order of tox 940b610 Replace assertEqual(None, *) with assertIsNone in tests 0cb5deb Add a missing whitespace 7ce74b1 Deprecated tox -downloadcache option removed 51e875d Indicate py34 support 8d858b2 Removes MANIFEST.in as it is not needed explicitely by PBR 729301a Pass environment variables of proxy to tox b34d20d Remove py26 support from designateclient 9b02acb Updated from global requirements 44d5f0a Updated from global requirements 849ce56 Improve logging in designateclient 2dad9c3 Support OS_INTERFACE and set V2 API as default ca01ddc Pass OS_ENDPOINT_TYPE from shell to client 18b94f4 Updated from global requirements fa5f6c4 Adds changes related to py3 compatibility 7d5c1ec Clearing out .pyc file before a tox run aeeac45 Fix support for --os-endpoint 793cdee Updates shell doc of v1 client 02f23f2 Fixes doc for v2 cli eea5b4d Add functional tests for blacklists a98de81 Add functional tests for tlds b7c0245 Adds different filter option for zone listing dcaf441 Updated from global requirements b13ac20 Resolve TLD's by name 02f2d5e improve readme contents 90e63ca Removes --name argument from zone set command 9c240d9 Fixes error over quota update 6d9a45b Fixes order of argument in assertEqual 0a9b6d1 Fixes typos in zone transfer request show command description b4674f8 Add functional tests for recordsets 374970c Flesh out zone-related test cases b8704aa Fixes exception message for zone creation command e1e0772 Fixes target-project-id argument in zone transfer command 08d14dc Removes name argument from openstack recordset set command 729852d Fixes openstack zone blacklist set command 1c07c41 Added test cases for v2 client 3f8ab77 Adds test cases for servers in designateclient 54a9d4c Adds test cases for domain in designate v1 client 87a48c7 Makes error msg more helpful 4634993 Add period in help message 6daf827 Layout some functional tests for the V2 CLI Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + .testr.conf | 8 +- MANIFEST.in | 13 - README.rst | 22 +- designateclient/cli/base.py | 6 +- designateclient/cli/domains.py | 24 +- designateclient/cli/quotas.py | 15 +- designateclient/cli/records.py | 40 +-- designateclient/cli/servers.py | 10 +- designateclient/client.py | 2 +- designateclient/exceptions.py | 20 +- designateclient/osc/plugin.py | 6 +- designateclient/shell.py | 3 +- designateclient/utils.py | 4 +- designateclient/v2/base.py | 43 +++ designateclient/v2/cli/blacklists.py | 13 +- designateclient/v2/cli/recordsets.py | 16 +- designateclient/v2/cli/reverse.py | 9 +- designateclient/v2/cli/tlds.py | 9 +- designateclient/v2/cli/zones.py | 73 +++-- designateclient/v2/recordsets.py | 4 +- designateclient/v2/tlds.py | 19 +- designateclient/v2/utils.py | 42 +++ designateclient/v2/zones.py | 13 +- requirements.txt | 14 +- setup.cfg | 3 +- test-requirements.txt | 17 +- tox.ini | 20 +- 56 files changed, 1953 insertions(+), 263 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d268274..821e828 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,7 +4,7 @@ -cliff>=1.14.0 # Apache-2.0 -jsonschema!=2.5.0,<3.0.0,>=2.0.0 -oslo.utils>=2.0.0 # Apache-2.0 -pbr>=1.6 -python-keystoneclient>=1.6.0 -requests>=2.5.2 -six>=1.9.0 +cliff>=1.15.0 # Apache-2.0 +jsonschema!=2.5.0,<3.0.0,>=2.0.0 # MIT +oslo.utils>=3.4.0 # Apache-2.0 +pbr>=1.6 # Apache-2.0 +python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 +requests!=2.9.0,>=2.8.1 # Apache-2.0 +six>=1.9.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index bbaed9e..8c7f767 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,3 +6,3 @@ hacking<0.10,>=0.9.2 -coverage>=3.6 -mock>=1.2 -discover +coverage>=3.6 # Apache-2.0 +mock>=1.2 # BSD +discover # BSD @@ -10,5 +10,6 @@ oslotest>=1.10.0 # Apache-2.0 -python-subunit>=0.0.18 -requests-mock>=0.6.0 # Apache-2.0 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -testrepository>=0.0.18 -oslosphinx>=2.5.0 # Apache-2.0 +python-subunit>=0.0.18 # Apache-2.0/BSD +requests-mock>=0.7.0 # Apache-2.0 +sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD +testrepository>=0.0.18 # Apache-2.0/BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +tempest-lib>=0.13.0 # Apache-2.0

1 0

[release][ironic] python-ironicclient release 1.1.0 (mitaka)
by Doug Hellmann 01 Feb '16

01 Feb '16

We are eager to announce the release of: python-ironicclient 1.1.0: OpenStack Bare Metal Provisioning API Client Library This release is part of the mitaka release series. With source available at: http://git.openstack.org/cgit/openstack/python-ironicclient With package available at: https://pypi.python.org/pypi/python-ironicclient Please report issues through launchpad: http://bugs.launchpad.net/python-ironicclient For more details, please see below. 1.1.0 ^^^^^ New Features ************ * Add support to the openstackclient plugin for all Ironic API versions of the form 1.x, up to the latest known minor version. The regular Ironic CLI already supports all known versions. Other Notes *********** * Start using reno to manage release notes. Changes in python-ironicclient 1.0.0..1.1.0 ------------------------------------------- fe422e5 Allow to initialize keystone v3 client c3811ed Updated from global requirements 429b88e Support all API versions up to 1.latest 4445f76 Put py34 first in the env order of tox . 0c3d3a5 Updated from global requirements 367333d Updated from global requirements 5f87416 Fix params order in assertEqual 995fa39 Updated from global requirements e471083 Remove openstack-common.conf 5fb807c Move ironicclient/common tests to their respective directory eeb327b Do not log secrets 36821fc Fix test cases of listing with provisioning state 0495d3d Replace assertTrue with explicit assertIsInstance b79105a Add first reno-based release note c38ff2e Updated from global requirements b40b96e Updated from global requirements 10cca4f Updated from global requirements 6246818 Add reno for release notes management 324efd9 Add Sanity tests for testing actions with Driver a90b16c Replace assertEqual(None, *) with assertIsNone in tests eae47b9 Removes MANIFEST.in as it is not needed explicitely by PBR b1dfb53 Switch tox unit test command to use ostestr a2c7e34 Drop py33 support e8f251c Add --uuid to port-create dd94f23 Add --uuid to chassis-create 4aa1167 Deprecated tox -downloadcache option removed 8224859 Scale back on how many warnings we issue 20cefcf Refactoring and removing duplicate code of "base.Manager" heirs without changing the API f89739b Correct node-port-list help info e6db2c7 Fix exceptions.from_response() parameter 9f863f3 Updated from global requirements 6670dd4 Tests for testing node-set-power-state command e3183da Add --wrap option for "ironic driver-properties" aa5e9ad Fix misprints in docstring af7760e Updated from global requirements 861b1f4 Revert "Refactoring and removing duplicate code of "base.Manager" heirs" 46b279b Refactoring and removing duplicate code of "base.Manager" heirs a212b85 Updated from global requirements 41d0f8f Add sanity tests for testing actions with Node 0cbe73c Remove httpretty workaround 5d0de8f Use a dict to translate node power states to json data. 0faf28c Use requests-mock instead of httpretty 65f2b18 Updated from global requirements eaa2456 Add missing translation markers c275bc1 update node shell help info b08c3cb replace LOG.warn with LOG.warning adad8f6 Updated from global requirements 517f509 A minor change for driver_shell test f5c478b Add documentation on how to run tests 0a7f179 Add more unit tests for clituils Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .testr.conf | 2 +- MANIFEST.in | 6 - ironicclient/client.py | 20 +- ironicclient/common/base.py | 96 ++- ironicclient/common/http.py | 52 +- ironicclient/exc.py | 2 +- ironicclient/osc/client.py | 51 -- ironicclient/osc/plugin.py | 27 +- ironicclient/v1/chassis.py | 33 +- ironicclient/v1/chassis_shell.py | 7 +- ironicclient/v1/driver.py | 24 +- ironicclient/v1/driver_shell.py | 15 +- ironicclient/v1/node.py | 64 +- ironicclient/v1/node_shell.py | 4 +- ironicclient/v1/port.py | 32 +- ironicclient/v1/port_shell.py | 7 +- openstack-common.conf | 7 - releasenotes/notes/.placeholder | 0 .../notes/add_api_versions-a59e5b6899833c33.yaml | 5 + .../notes/start-using-reno-ccd220efa2c7022a.yaml | 3 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 276 ++++++++ releasenotes/source/current-series.rst | 5 + releasenotes/source/index.rst | 8 + requirements.txt | 22 +- setup.cfg | 2 +- test-requirements.txt | 25 +- tox.ini | 17 +- 65 files changed, 3646 insertions(+), 2596 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a66b402..923e066 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,2 +4,2 @@ -pbr>=1.6 -anyjson>=0.3.3 +pbr>=1.6 # Apache-2.0 +anyjson>=0.3.3 # BSD @@ -7,9 +7,9 @@ appdirs>=1.3.0 # MIT License -dogpile.cache>=0.5.4 -cliff>=1.14.0 # Apache-2.0 -httplib2>=0.7.5 -oslo.i18n>=1.5.0 # Apache-2.0 -oslo.utils!=2.6.0,>=2.4.0 # Apache-2.0 -PrettyTable<0.8,>=0.7 -python-keystoneclient!=1.8.0,>=1.6.0 -python-openstackclient>=1.5.0 -six>=1.9.0 +dogpile.cache>=0.5.4 # BSD +cliff>=1.15.0 # Apache-2.0 +httplib2>=0.7.5 # MIT +oslo.i18n>=2.1.0 # Apache-2.0 +oslo.utils>=3.4.0 # Apache-2.0 +PrettyTable<0.8,>=0.7 # BSD +python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 +python-openstackclient>=2.0.0 # Apache-2.0 +six>=1.9.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 1d1caf2..4cdc05a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,2 +5,2 @@ hacking<0.11,>=0.10.0 -coverage>=3.6 -discover +coverage>=3.6 # Apache-2.0 +discover # BSD @@ -8,5 +8,6 @@ doc8 # Apache-2.0 -fixtures>=1.3.1 -httpretty<0.8.7,>=0.8.4 -mock>=1.2 -Babel>=1.3 -oslosphinx>=2.5.0 # Apache-2.0 +fixtures>=1.3.1 # Apache-2.0/BSD +requests-mock>=0.7.0 # Apache-2.0 +mock>=1.2 # BSD +Babel>=1.3 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +reno>=0.1.1 # Apache2 @@ -14,5 +15,5 @@ oslotest>=1.10.0 # Apache-2.0 -python-subunit>=0.0.18 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -testrepository>=0.0.18 -testtools>=1.4.0 -tempest-lib>=0.10.0 +python-subunit>=0.0.18 # Apache-2.0/BSD +sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD +testtools>=1.4.0 # MIT +tempest-lib>=0.13.0 # Apache-2.0 +os-testr>=0.4.1 # Apache-2.0

1 0

[OSSA 2016-005] Potential reuse of revoked Identity tokens (CVE-2015-7546)
by Tristan Cacqueray 30 Jan '16

30 Jan '16

========================================================= OSSA-2016-005: Potential reuse of revoked Identity tokens ========================================================= :Date: January 29, 2016 :CVE: CVE-2015-7546 Affects ~~~~~~~ - Keystone: <= 2015.1.2, >= 8.0.0 <= 8.0.1 - Keystonemiddleware: >= 1.5.0 <= 1.5.3, >= 1.6.0 <= 2.3.2 Description ~~~~~~~~~~~ Liu Sheng reported a vulnerability in Keystone. By manipulating a token content, an authenticated user may prevent its revocation. This can allow unauthorized access to cloud resources if a revoked token is intercepted by an attacker. Only keystone setups using PKI or PKIZ token are affected Patches ~~~~~~~ - https://review.openstack.org/266045 (keystone) (Kilo) - https://review.openstack.org/266607 (keystonemiddleware) (Kilo) - https://review.openstack.org/266022 (keystone) (Liberty) - https://review.openstack.org/265988 (keystonemiddleware) (Liberty) - https://review.openstack.org/258141 (keystone) (Mitaka) - https://review.openstack.org/258143 (keystonemiddleware) (Mitaka) Credits ~~~~~~~ - Liu Sheng from Huawei (CVE-2015-7546) References ~~~~~~~~~~ - https://bugs.launchpad.net/bugs/1490804 - https://wiki.openstack.org/wiki/OSSN/OSSN-0062 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7546 Notes ~~~~~ - The keystone fix is included in 2015.1.3 (Kilo) and will be included in a future 8.0.2 (Liberty) releases. - The keystonemiddleware fix will be included in future 1.5.4 (Kilo) and 2.3.3 (Liberty) releases. - Both keystone and keystonemiddleware needs to be updated -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

Gnocchi 1.3.4 released
by Julien Danjou 28 Jan '16

28 Jan '16

Hello, The OpenStack Telemetry team is pleased to announce the release of Gnocchi 1.3.4. You can get more information about bugs fixed on Launchpad: https://launchpad.net/gnocchi/1.3/1.3.4 It's also available on PyPI: https://pypi.python.org/pypi/gnocchi/1.3.4 Highlights ---------- - Do not create empty revision when updating resources with no changes - Fix a few issues in the Ceph drivers - Do not create an InfluxDB database automatically anymore - Compatibility with Keystonemiddleware >=4 added - Fix timestamp parsing in aggregation queries - Fix RBAC application when listing resources Cheers, -- Julien Danjou ;; Free Software hacker ;; https://julien.danjou.info

1 0

[release][stable][neutron] neutron-vpnaas release 7.0.2 (liberty)
by doug＠doughellmann.com 28 Jan '16

28 Jan '16

We are stoked to announce the release of: neutron-vpnaas 7.0.2: OpenStack Networking VPN as a Service This release is part of the liberty stable release series. With package available at: https://pypi.python.org/pypi/neutron-vpnaas For more details, please see below. 7.0.2 ^^^^^ Other Notes * Start using reno to manage release notes. Changes in neutron-vpnaas 7.0.1..7.0.2 -------------------------------------- 427ba7e Updated from global requirements a063923 Updated from global requirements 6226f57 Add first reno based release note 668267c Add reno for release notes management Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + releasenotes/notes/.placeholder | 0 .../notes/start-using-reno-928202c562738816.yaml | 3 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 276 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/liberty.rst | 6 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 4 +- test-requirements.txt | 1 + tox.ini | 3 + 12 files changed, 308 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6f603b6..eaa6b17 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ pbr>=1.6 -requests!=2.8.0,>=2.5.2 +requests!=2.8.0,!=2.9.0,>=2.5.2 @@ -16 +16 @@ oslo.log>=1.8.0 # Apache-2.0 -oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,>=1.16.0 # Apache-2.0 +oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,!=3.1.0,>=1.16.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index d78f46d..e261842 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -21,0 +22 @@ oslotest>=1.10.0 # Apache-2.0 +reno>=0.1.1 # Apache2

1 0

[release][stable][neutron] neutron-lbaas release 7.0.2 (liberty)
by doug＠doughellmann.com 28 Jan '16

28 Jan '16

We are glad to announce the release of: neutron-lbaas 7.0.2: OpenStack Networking Load Balancing as a Service This release is part of the liberty stable release series. With package available at: https://pypi.python.org/pypi/neutron-lbaas For more details, please see below. 7.0.2 ^^^^^ Other Notes * Start using reno to manage release notes. Changes in neutron-lbaas 7.0.1..7.0.2 ------------------------------------- 9171888 Fix db refresh race condition bug e44dec4 Sync db models to migrations e1eee56 Updated from global requirements b922c54 Add first reno based release note d08eb58 Add reno for release notes management bc662c0 Add service_plugins entry_point for LBaaS v2 plugin Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + neutron_lbaas/db/loadbalancer/loadbalancer_dbv2.py | 2 - neutron_lbaas/db/loadbalancer/models.py | 4 +- releasenotes/notes/.placeholder | 0 .../notes/start-using-reno-c8a90a4549353a6a.yaml | 3 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 275 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/liberty.rst | 6 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 4 +- setup.cfg | 2 + test-requirements.txt | 1 + tox.ini | 3 + 15 files changed, 311 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index eb3fe7c..71558ee 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ eventlet>=0.17.4 -requests!=2.8.0,>=2.5.2 +requests!=2.8.0,!=2.9.0,>=2.5.2 @@ -15 +15 @@ oslo.log>=1.8.0 # Apache-2.0 -oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,>=1.16.0 # Apache-2.0 +oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,!=3.1.0,>=1.16.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index b4a26da..de35ca3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -19,0 +20 @@ WebTest>=2.0 +reno>=0.1.1 # Apache2

1 0

[release][stable][neutron] neutron-fwaas release 7.0.2 (liberty)
by doug＠doughellmann.com 28 Jan '16

28 Jan '16

We are psyched to announce the release of: neutron-fwaas 7.0.2: OpenStack Networking FWaaS This release is part of the liberty stable release series. With package available at: https://pypi.python.org/pypi/neutron-fwaas For more details, please see below. 7.0.2 ^^^^^ Other Notes * Start using reno to manage release notes. Changes in neutron-fwaas 7.0.1..7.0.2 ------------------------------------- 33c06d9 Updated from global requirements 12c76d2 Add first reno based release note a137f36 Add reno for release notes management Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + releasenotes/notes/.placeholder | 0 .../notes/start-using-reno-e45e439ce1a0965d.yaml | 3 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 275 +++++++++++++++++++++ releasenotes/source/index.rst | 9 + releasenotes/source/liberty.rst | 6 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 2 +- test-requirements.txt | 1 + tox.ini | 3 + 12 files changed, 306 insertions(+), 1 deletion(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 26ab150..05f38d0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +15 @@ oslo.log>=1.8.0 # Apache-2.0 -oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,>=1.16.0 # Apache-2.0 +oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,!=3.1.0,>=1.16.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 6417bfe..fcd0992 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -19,0 +20 @@ oslotest>=1.10.0 # Apache-2.0 +reno>=0.1.1 # Apache2

1 0

[release][stable][neutron] neutron release 7.0.2 (liberty)
by doug＠doughellmann.com 28 Jan '16

28 Jan '16

We are tickled pink to announce the release of: neutron 7.0.2: OpenStack Networking This release is part of the liberty stable release series. With package available at: https://pypi.python.org/pypi/neutron For more details, please see below. Changes in neutron 7.0.1..7.0.2 ------------------------------- 3b42dee Imported Translations from Zanata ca193d0 Revert "Change function call order in ovs_neutron_agent." 96d4ab3 Remove check on dhcp enabled subnets while scheduling dvr f5299d3 Check gateway ip when update subnet a370fa3 Log INFO message when setting admin state up flag to False for OVS port bf92dbb DVR: notify specific agent when deleting floating ip 99d1c0d Call _allocate_vr_id outside of transaction 2468b3d Move notifications before DB retry decorator 1b609d2 DVR: handle dvr serviceable port's host change ad75ccc Imported Translations from Zanata 2e6e135 Run functional gate jobs in a constrained environment 6902c87 DVR: notify specific agent when creating floating ip 00b800d Tox: Remove fullstack env, keep only dsvm-fullstack d11e9cb Force L3 agent to resync router it could not configure 42f4332 Support migrating of legacy routers to HA and back 4d85fa1 Updated from global requirements ff021e7 Catch known exceptions during deleting last HA router f175cd7 ML2: Add tests to validate quota usage tracking 79d4a08 test_migrations: Avoid returning a filter object for python3 e89141e move usage_audit to cmd/eventlet package 745b546 Do not autoreschedule routers if l3 agent is back online fc034fc Make port binding message on dead agents clear 7839f76 Disallow updating SG rule direction in RESOURCE_ATTRIBUTE_MAP 2a0f860 Force service provider relationships to load 430892a Avoid full_sync in l3_agent for router updates fa9fba2 In port_dead, handle case when port already deleted 3a70a5b Kill the vrrp orphan process when (re)spawn keepalived 53c46fe Add check that list of agents is not empty in _get_enabled_agents 7c1fb08 Batch db segment retrieval 70e7d3e Ignore possible suffix in iproute commands. 1d8aff3 Add compatibility with iproute2 >= 4.0 5bbff07 Tune _get_candidates for faster scheduling in dvr 31f1847 Separate rbac calculation from _make_network_dict a0747e6 Skip keepalived_respawns test 4dc4ba5 Support Unicode request_id on Python 3 1a709b2 Validate local_ip for linuxbridge-agent fb55693 Use diffs for iptables restore instead of all rules 6a44ec3 Fix timestamp in RBAC extension 7fc31ff Notify about port create/update unconditionally b49181a DVR: only notify needed agents on new VM port creation 12634d6 DVR:don't reschedule the l3 agent running on compute node 1eb40b4 Ensure l3 agent receives notification about added router f8d1bf2 get_device_by_ip: don't fail if device was deleted c24c24c Make fullstack test_connectivity tests more forgiving c996fda Adding security-groups unittests 91c17c0 Check missed IPSet utility using neutron-sanity-check 2d1eaf3 Remove duplicate deprecation messages for quota_items option db896c4 Lower l2pop "isn't bound to any segement" log to debug Diffstat (except docs and test files) ------------------------------------- neutron/agent/l3/agent.py | 16 +- neutron/agent/linux/ip_lib.py | 73 +- neutron/agent/linux/ip_monitor.py | 3 +- neutron/agent/linux/iptables_firewall.py | 11 +- neutron/agent/linux/iptables_manager.py | 355 ++++--- neutron/agent/linux/keepalived.py | 41 +- .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 7 +- neutron/api/rpc/agentnotifiers/l3_rpc_agent_api.py | 27 +- neutron/api/v2/base.py | 21 +- neutron/cmd/eventlet/usage_audit.py | 47 + neutron/cmd/sanity/checks.py | 11 + neutron/cmd/sanity_check.py | 13 + neutron/cmd/usage_audit.py | 47 - neutron/db/db_base_plugin_common.py | 24 +- neutron/db/db_base_plugin_v2.py | 9 +- neutron/db/l3_agentschedulers_db.py | 91 +- neutron/db/l3_db.py | 14 +- neutron/db/l3_dvr_db.py | 45 +- neutron/db/l3_dvrscheduler_db.py | 93 +- neutron/db/l3_hamode_db.py | 79 +- neutron/db/servicetype_db.py | 8 + neutron/extensions/l3_ext_ha_mode.py | 2 +- neutron/extensions/rbac.py | 2 +- neutron/extensions/securitygroup.py | 2 +- neutron/locale/de/LC_MESSAGES/neutron.po | 17 +- neutron/locale/es/LC_MESSAGES/neutron.po | 17 +- neutron/locale/fr/LC_MESSAGES/neutron.po | 18 +- neutron/locale/it/LC_MESSAGES/neutron.po | 17 +- neutron/locale/ja/LC_MESSAGES/neutron.po | 20 +- neutron/locale/ko_KR/LC_MESSAGES/neutron.po | 22 +- neutron/locale/neutron-log-error.pot | 256 ++--- neutron/locale/neutron-log-info.pot | 165 +-- neutron/locale/neutron-log-warning.pot | 141 +-- neutron/locale/neutron.pot | 438 ++++---- neutron/locale/pt_BR/LC_MESSAGES/neutron.po | 19 +- neutron/locale/ru/LC_MESSAGES/neutron.po | 19 +- .../locale/tr_TR/LC_MESSAGES/neutron-log-error.po | 14 +- .../locale/tr_TR/LC_MESSAGES/neutron-log-info.po | 14 +- .../tr_TR/LC_MESSAGES/neutron-log-warning.po | 35 +- neutron/locale/tr_TR/LC_MESSAGES/neutron.po | 23 +- neutron/locale/zh_CN/LC_MESSAGES/neutron.po | 21 +- neutron/locale/zh_TW/LC_MESSAGES/neutron.po | 19 +- neutron/plugins/ml2/db.py | 13 +- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 5 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 23 +- neutron/plugins/ml2/drivers/mech_agent.py | 5 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 9 +- neutron/plugins/ml2/managers.py | 16 +- neutron/plugins/ml2/plugin.py | 21 +- neutron/quota/__init__.py | 5 - neutron/quota/resource.py | 13 +- neutron/scheduler/l3_agent_scheduler.py | 27 +- .../agent/linux/test_iptables_firewall.py | 110 ++ .../functional/agent/linux/test_keepalived.py | 16 +- .../l3_router/test_l3_dvr_router_plugin.py | 226 ++++ .../unit/agent/linux/test_iptables_manager.py | 373 ++++--- .../rpc/agentnotifiers/test_dhcp_rpc_agent_api.py | 7 +- .../agent/test_linuxbridge_neutron_agent.py | 59 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 36 +- .../unit/plugins/ml2/test_tracked_resources.py | 292 ++++++ .../plugins/opencontrail/test_contrail_plugin.py | 6 + .../unit/scheduler/test_l3_agent_scheduler.py | 152 +-- requirements.txt | 6 +- setup.cfg | 2 +- tools/check_unit_test_structure.sh | 1 + tools/configure_for_func_testing.sh | 5 + tox.ini | 37 +- 86 files changed, 3367 insertions(+), 2117 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 108fe39..c309417 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +15 @@ httplib2>=0.7.5 -requests!=2.8.0,>=2.5.2 +requests!=2.8.0,!=2.9.0,>=2.5.2 @@ -34,2 +34,2 @@ oslo.log>=1.8.0 # Apache-2.0 -oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,>=1.16.0 # Apache-2.0 -oslo.middleware>=2.8.0 # Apache-2.0 +oslo.messaging!=1.17.0,!=1.17.1,!=2.6.0,!=2.6.1,!=2.7.0,!=2.8.0,!=2.8.1,!=2.9.0,!=3.1.0,>=1.16.0 # Apache-2.0 +oslo.middleware!=3.0.0,!=3.1.0,!=3.2.0,>=2.8.0 # Apache-2.0

1 0