- OpenStack-announce - lists.openstack.org

[release][openstackclient] python-openstackclient release 1.4.0 (liberty)
by doug＠doughellmann.com 15 Jun '15

15 Jun '15

We are thrilled to announce the release of: python-openstackclient 1.4.0: OpenStack Command-line Client This release is part of the liberty release series. With source available at: https://git.openstack.org/cgit/openstack/python-openstackclient For more details, please see the git log history below and: https://launchpad.net/python-openstackclient/+milestone/1.4.0 Please report issues through launchpad: https://bugs.launchpad.net/python-openstackclient Changes in python-openstackclient 1.3.0..1.4.0 ---------------------------------------------- 9f69b43 Improve the hint message b328960 Fix the typo in `openstackclient/shell.py` ec903a1 Add oidc plugin for listing federation projects aac0d58 Skip trying to set project_domain_id if not using password f3725b4 Updated from global requirements 18991ab Updated from global requirements 1f1ed4c Imported Translations from Transifex 4afd308 Include links to developer workflow documentation f7feef7 Enable specifying domain for group and role commands 7cf7790 Not use the deprecated argument b808566 Create 1.4.0 release notes 43d12db Updated from global requirements 31d785e Allow --insecure to override --os-cacert 3fa0bbc Clean up ec2 credentials help text 8d185a6 Add functional tests for volume set and unset 7665d52 Add domain support for ec2creds in v3 identity 15d3717 Add EC2 support for identity v3 API db7d4eb Imported Translations from Transifex bf99218 Add a reference to the IRC channels 226fc6c Change Credentials header to Blob from data f737160 Get rid of oslo_i18n deprecation notice b2cf651 Fix security group list command a05cbf4 Rework shell tests 746f642 Add image functional tests f9fa307 Add volume functional tests 0c9f5c2 Ignore cover directory from git 3ae247f Set tenant options on parsed namespace 5361652 Add support for volume v2 API d14316a add domain scope arguments to v3 role add in doc 01573be project create is missing --parent in doc 542f587 add --domain argument to v3 project set 224d375 Add --wait to server delete ae29f7f Use ostestr for test runs 2c4b878 Add cli tests for --verify and friends da083d1 Small tweaks to osc plugin docs 211c14c Fix shell tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + README.rst | 5 + examples/object_api.py | 4 +- examples/osc-lib.py | 4 +- functional/common/test.py | 2 +- openstackclient/api/auth.py | 10 +- openstackclient/common/clientmanager.py | 4 + openstackclient/common/utils.py | 46 ++ openstackclient/compute/v2/security_group.py | 2 +- openstackclient/compute/v2/server.py | 17 + openstackclient/i18n.py | 4 +- openstackclient/identity/common.py | 16 +- openstackclient/identity/v2_0/ec2creds.py | 18 +- openstackclient/identity/v3/credential.py | 5 +- openstackclient/identity/v3/ec2creds.py | 251 +++++++ openstackclient/identity/v3/group.py | 116 ++- openstackclient/identity/v3/project.py | 8 + openstackclient/identity/v3/role.py | 321 +++------ openstackclient/identity/v3/unscoped_saml.py | 2 +- openstackclient/identity/v3/user.py | 2 +- openstackclient/shell.py | 50 +- openstackclient/volume/client.py | 3 +- openstackclient/volume/v2/__init__.py | 0 openstackclient/volume/v2/backup.py | 70 ++ openstackclient/volume/v2/snapshot.py | 71 ++ openstackclient/volume/v2/volume.py | 83 +++ openstackclient/volume/v2/volume_type.py | 68 ++ .../de/LC_MESSAGES/python-openstackclient.po | 783 +++++++++++---------- .../locale/python-openstackclient.pot | 208 +++--- .../zh_TW/LC_MESSAGES/python-openstackclient.po | 687 +++++++++--------- requirements.txt | 8 +- setup.cfg | 18 + test-requirements.txt | 1 + tox.ini | 4 +- 60 files changed, 2907 insertions(+), 1337 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 415d27a..d420b1a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ cliff-tablib>=1.0 -os-client-config +os-client-config>=1.2.0 @@ -14,2 +14,2 @@ oslo.utils>=1.4.0 # Apache-2.0 -python-glanceclient>=0.17.1 -python-keystoneclient>=1.3.0 +python-glanceclient>=0.18.0 +python-keystoneclient>=1.6.0 @@ -20 +20 @@ requests>=2.5.2 -stevedore>=1.3.0 # Apache-2.0 +stevedore>=1.5.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 24f5c68..f82e48d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,0 +14 @@ sphinx>=1.1.2,!=1.2.0,!=1.3b1,<1.3 +os-testr>=0.1.0

1 0

OpenStack Community Weekly Newsletter (June 5 - 12)
by Stefano Maffulli 12 Jun '15

12 Jun '15

1 0

[OSSA 2015-010] XSS in Horizon Heat stack creation (CVE-2015-3219)
by Tristan Cacqueray 09 Jun '15

09 Jun '15

================================================= OSSA-2015-010: XSS in Horizon Heat stack creation ================================================= :Date: June 09, 2015 :CVE: CVE-2015-3219 Affects ~~~~~~~ - Horizon: 2014.2 versions through 2014.2.3 and version 2015.1.0 Description ~~~~~~~~~~~ Nikita Konovalov from Mirantis reported a vulnerability in Horizon. By tricking a Horizon user into using a malicious template in the Orchestration/Stack section of Horizon, a remote attacker may trigger a cross-site-scripting vulnerability during the stack creation. It may result in potential assets theft like user access credentials. Only setups exposing the orchestration dashboard in Horizon are affected. Patches ~~~~~~~ - https://review.openstack.org/189821 (Juno) - https://review.openstack.org/189822 (Kilo) - https://review.openstack.org/189820 (Liberty) Credits ~~~~~~~ - Nikita Konovalov from Mirantis (CVE-2015-3219) References ~~~~~~~~~~ - https://launchpad.net/bugs/1453074 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3219 Notes ~~~~~ - This fix will be included in future 2014.2.4 (juno) and 2015.1.1 (kilo) releases. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

OpenStack Community Weekly Newsletter (May 29 - June 5)
by Stefano Maffulli 05 Jun '15

05 Jun '15

1 0

OpenStack Community Weekly Newsletter (May 8 - 22)
by Stefano Maffulli 30 May '15

30 May '15

1 0

[OSSA 2015-009] Persistent XSS in Horizon metadata dashboard (CVE-2015-3988)
by Tristan Cacqueray 25 May '15

25 May '15

=========================================================== OSSA-2015-009: Persistent XSS in Horizon metadata dashboard =========================================================== :Date: May 25, 2015 :CVE: CVE-2015-3988 Affects ~~~~~~~ - Horizon: 2014.2 versions through 2014.2.3 and version 2015.1.0 Description ~~~~~~~~~~~ Sunil Yadav from IBM Security Services reported a persistent XSS in Horizon. An authenticated user may conduct a persistent XSS attack by setting a malicious metadata to a Glance image, a Nova flavor or a Host Aggregate and tricking an administrator to load the update metadata page. Once executed in a legitimate context this attack may result in a privilege escalation. All Horizon setups are affected. Patches ~~~~~~~ - https://review.openstack.org/183659 (Juno) - https://review.openstack.org/183656 (Kilo) - https://review.openstack.org/179429 (Liberty) Credits ~~~~~~~ - Sunil Yadav from IBM (CVE-2015-3988) References ~~~~~~~~~~ - https://launchpad.net/bugs/1449260 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3988 Notes ~~~~~ - This fix will be included in future 2014.2.4 (juno) and 2015.1.1 (kilo) releases. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

OpenStack Community Weekly Newsletter (May 1 - 8)
by Stefano Maffulli 08 May '15

08 May '15

1 0

[OSSA 2015-008] Potential Keystone cache backend password leak in log (CVE-2015-3646)
by Tristan Cacqueray 05 May '15

05 May '15

==================================================================== OSSA-2015-008: Potential Keystone cache backend password leak in log ==================================================================== :Date: May 04, 2015 :CVE: CVE-2015-3646 Affects ~~~~~~~ - Keystone: versions through 2014.1.4, and 2014.2 versions through 2014.2.3 Description ~~~~~~~~~~~ Eric Brown from VMware reported a vulnerability in Keystone. The backend_argument configuration option content is being logged, and it may contain sensitive information for specific backends (like a password for MongoDB). An attacker with read access to Keystone logs may therefore obtain sensitive data about certain backends. All Keystone setups are potentially impacted. Patches ~~~~~~~ - https://review.openstack.org/175519 (Icehouse) - https://review.openstack.org/173116 (Juno) Credits ~~~~~~~ - Eric Brown from VMware (CVE-2015-3646) References ~~~~~~~~~~ - https://launchpad.net/bugs/1443598 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3646 Notes ~~~~~ - This fix will be included in future 2014.1.5 (icehouse) and 2014.2.4 (juno) releases. - The 2015.1.0 (kilo) release is not affected.

1 0

OpenStack Community Weekly Newsletter (Apr 24 - May 1)
by Stefano Maffulli 01 May '15

01 May '15

Kilo Logo Superuser Awards final faceoff: your vote counts Four great finalists, but only one can win: it’s a close call as the voting deadline approaches for this edition of the Superuser Awards. Snapshot of the OpenStack community behind Kilo The OpenStack community that helped create the Kilo release has done some seriously heavy lifting. For the 11th release, there were more contributors, more companies involved and more work across time zones than ever before. The Road to Vancouver * Canada Visa Information * Official Hotel Room Blocks * Preparation to Design summit * What's a Design Summit? * (Unofficial) Social activities: Geocaching in Vancover Relevant Conversations * Results of the TC Election * Go! Swift! * API working group liaisons and responsibilities Deadlines and Development Priorities * Relax for a day :) Reports from Previous Events * OpenStack superusers deliver the goods at CONNECT Security Advisories and Notices * [OSSN 0048] Glance method filtering does not work under certain conditions Tips ‘n Tricks * By Adam Young: Creating Hierarchical Projects in Keystone * By Spencer Smith: Image Creation - Packer and OpenStack * By Ronald Bradford: Running openstack tests with tox and Understanding the different Openstack tox configs * By Nir Yechiel: SR-IOV Networking – Part II: Walking Through the Implementation * By Craige McWhirter: Rebuilding An OpenStack Instance and Keeping the Same Fixed IP * By Daisy.Guo: reStructuredText markups in manuals and the translation tips * By Kyle Mestery: Subnetpools in Neutron * By Robert Collins: Dealing with deps in OpenStack * By Joe Topjian: introducing and using Terraform * By Swapnil Kulkarni: OpenStack oslo packages not available in devstack? * By Steve Martinelli: Debugging keystone tests and live deployments Upcoming Events OpenStack Israel CFP Voting is Open PyCon-AU Openstack miniconf CFP closes May 8th * May 04, 2015 [ONLINE MEETUP] OpenStack & Beyond Podcast: Talking NFV + SDN in the Cloud with * May 05, 2015 London OpenStack May Meetup London, GB * May 05, 2015 May Sydney Meetup - Midokura presents "I Can Haz Moar Networks?" * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 06 - 07, 2015 OpenStack Meetup May - Ceilometer Telemetry Presentation Richardson, TX, US * May 07, 2015 Online Meetup: How StackStorm builds and Operates StackStorm Software Itself Mountain View, CA, US * May 07, 2015 OpenStack Seattle Meetup: The Ins and Outs of Deploying OpenStack Seattle, WA, US * May 07, 2015 Open...House. Community. Stack. Sunnyvale, CA, US * May 08, 2015 Open... House. Community. Stack. Sunnyvale, CA, US * May 09, 2015 OpenStack Meetup Hanoi Hanoi, Hanoi, VN * May 12, 2015 OpenStack Munich Meetup Munich, DE * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 02, 2015 OpenStack Day LATAM Mexico City, MX * Jun 04, 2015 OpenStack Days Istanbul – 2015 Istanbul, TR * Jun 06, 2015 OpenStack Meetup, Bangalore Bangalore, Karnataka, IN * Jun 08, 2015 OpenStack CEE Day 2015 Budapest, HU * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jun 15, 2015 OpenStack Israel 2015 Tev Aviv, IL * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US * Jul 30 - 31, 2015 DCD INTERNET San Francisco, CA, US Other News * Neutron, ZeroMQ and Git – Ubuntu OpenStack 15.04 Charm release! * OpenStack SWIFT Object Storage Tape Library Connector, first release * Support for Python 2.6 in Swift * Introducing the Xen Project – OpenStack CI Loop * What AWS Revenues Mean for Public Cloud and OpenStack More Generally The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

OpenStack 2015.1.0 ("Kilo") is released !
by Thierry Carrez 30 Apr '15

30 Apr '15

Hello everyone, I'm delighted to announce the final release of OpenStack 2015.1.0, code-named "Kilo". This concludes the 6-month Kilo development cycle, which saw the completion of more than 400 features and the fixing of more than 3300 bugs (only considering the 12 projects that make up this release !). In the name of all the contributors to this release, the OpenStack Technical Committee would like to dedicate it to the loving memory of Chris Yeoh, who passed away from cancer earlier this month. Chris was a long time and prolific open source developer, most recently with IBM. He contributed significantly to the OpenStack project, most notably in the Nova project team. His community spirit, technical contributions and friendship will be missed. You can find source tarballs, together with complete lists of features and bugfixes for each project, at the following links: Compute (Nova): https://launchpad.net/nova/kilo/2015.1.0 Object Storage (Swift): https://launchpad.net/swift/kilo/2.3.0 Image Service (Glance): https://launchpad.net/glance/kilo/2015.1.0 Networking (Neutron): https://launchpad.net/neutron/kilo/2015.1.0 Block Storage (Cinder): https://launchpad.net/cinder/kilo/2015.1.0 Identity (Keystone): https://launchpad.net/keystone/kilo/2015.1.0 Dashboard (Horizon): https://launchpad.net/horizon/kilo/2015.1.0 Telemetry (Ceilometer): https://launchpad.net/ceilometer/kilo/2015.1.0 Orchestration (Heat): https://launchpad.net/heat/kilo/2015.1.0 Database Service (Trove): https://launchpad.net/trove/kilo/2015.1.0 Data Processing (Sahara): https://launchpad.net/sahara/kilo/2015.1.0 Bare metal (Ironic): https://launchpad.net/ironic/kilo/2015.1.0 The Kilo Release Notes wikipage contains an overview of the key features, as well as upgrade notes and current lists of known issues. You can access them at: https://wiki.openstack.org/wiki/ReleaseNotes/Kilo Thanks again to all the individuals who contributed to this development cycle and helped in making this release a success ! -- Thierry Carrez (ttx)

1 0