October 2017 - Release-announce - lists.openstack.org

[openstackansible] openstack-ansible-os_aodh 15.1.10 (ocata)
by no-reply＠openstack.org 26 Oct '17

26 Oct '17

We are tickled pink to announce the release of: openstack-ansible-os_aodh 15.1.10: os_aodh for OpenStack Ansible This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. Changes in openstack-ansible-os_aodh 15.1.5..15.1.10 ---------------------------------------------------- 96b86fa Ensure that policy file has correct group/mode Diffstat (except docs and test files) ------------------------------------- handlers/main.yml | 3 +++ 1 file changed, 3 insertions(+)

1 0

[openstackansible] ansible-hardening 15.1.10 (ocata)
by no-reply＠openstack.org 26 Oct '17

26 Oct '17

We are stoked to announce the release of: ansible-hardening 15.1.10: OpenStack-Ansible: Host security hardening This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 15.1.10 ^^^^^^^ Bug Fixes * The sysctl configuration task was not skipping configurations where "enabled" was set to "no". Instead, it was removing configurations when "enabled: no" was set. There is now a fix in place that ensures any sysctl configuration with "enabled: no" will be skipped and the configuration will be left unaltered on the system. Changes in ansible-hardening 15.1.9..15.1.10 -------------------------------------------- 6e82b64 Cast security_shadow_utils_fail_delay as int d0ec2e8 Configure pam_faildelay on Ubuntu 46ff2e5 Updated from OpenStack Ansible Tests 10672ae Skip sysctl configs when enabled: no Diffstat (except docs and test files) ------------------------------------- .gitignore | 9 +-- Vagrantfile | 62 ++++++--------- bindep.txt | 37 ++++++--- ...skip-sysctl-when-disabled-b32eca48df5b1437.yaml | 10 +++ tasks/rhel7stig/auth.yml | 18 +++++ tasks/rhel7stig/kernel.yml | 2 + vars/main.yml | 10 ++- 8 files changed, 132 insertions(+), 103 deletions(-)

1 0

[openstackansible] openstack-ansible-os_keystone 15.1.10 (ocata)
by no-reply＠openstack.org 26 Oct '17

26 Oct '17

We enthusiastically announce the release of: openstack-ansible-os_keystone 15.1.10: os_keystone for OpenStack Ansible This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. 15.1.10 ^^^^^^^ New Features * Extra headers can be added to Keystone responses by adding items to "keystone_extra_headers". Example: keystone_extra_headers: - parameter: "Access-Control-Expose-Headers" value: "X-Subject-Token" - parameter: "Access-Control-Allow-Headers" value: "Content-Type, X-Auth-Token" - parameter: "Access-Control-Allow-Origin" value: "*" Changes in openstack-ansible-os_keystone 15.1.9..15.1.10 -------------------------------------------------------- be9e9bd Remove Developer Tools package group d98b894 Add extra headers for Keystone Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 14 ++++++++++++++ releasenotes/notes/extra-headers-e54a672d3a78dd89.yaml | 15 +++++++++++++++ templates/keystone_nginx.conf.j2 | 3 +++ vars/redhat-7.yml | 2 +- 4 files changed, 33 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-haproxy_server 15.1.10 (ocata)
by no-reply＠openstack.org 26 Oct '17

26 Oct '17

We are delighted to announce the release of: openstack-ansible-haproxy_server 15.1.10: haproxy_server role for OpenStack-Ansible This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-haproxy_server/ For more details, please see below. Changes in openstack-ansible-haproxy_server 15.1.9..15.1.10 ----------------------------------------------------------- 0a81aac Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 +-- Vagrantfile | 28 ++++++++++++++----- bindep.txt | 2 +- 4 files changed, 75 insertions(+), 50 deletions(-)

1 0

[documentation] whereto 0.3.0
by no-reply＠openstack.org 26 Oct '17

26 Oct '17

We are happy to announce the release of: whereto 0.3.0: Test Apache redirect rules. The source is available from: http://git.openstack.org/cgit/openstack/whereto Download the package from: https://tarballs.openstack.org/whereto/ Please report issues through launchpad: http://bugs.launchpad.net/whereto For more details, please see below. Changes in whereto 0.2.0..0.3.0 ------------------------------- 7e37a20 add support for testing paths are not redirected 7200a06 add 410 example to docs 18eb1ae fix test parsing for 410 tests 3a3c3e5 fix use of verbosity flag Diffstat (except docs and test files) ------------------------------------- whereto/app.py | 17 ++++++--- whereto/parser.py | 20 +++++++++++ whereto/rules.py | 2 +- 7 files changed, 182 insertions(+), 14 deletions(-)

1 0

[openstackansible] openstack-ansible 14.2.10 (newton)
by no-reply＠openstack.org 26 Oct '17

26 Oct '17

We are psyched to announce the release of: openstack-ansible 14.2.10: Ansible playbooks for deploying OpenStack This release is part of the newton release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 14.2.10 ^^^^^^^ New Features ************ * A new repository for installing modern erlang from ESL (erlang solutions) has been added giving us the ability to install and support modern stable erlang over numerous operating systems. * The ability to set the RabbitMQ repo URL for both erlang and RabbitMQ itself has been added. This has been done to allow deployers to define the location of a given repo without having to fully redefine the entire set of definitions for a specific repository. The default variables *rabbitmq_gpg_keys*, *rabbitmq_repo_url*, and *rabbitmq_erlang_repo_url* have been created to facilitate this capability. * The ansible-hardening role supports the application of the Red Hat Enterprise Linux 6 STIG configurations to systems running CentOS 7 and Ubuntu 16.04 LTS. * The default ulimit for RabbitMQ is now 65536. Deployers can still adjust this limit using the "rabbitmq_ulimit" Ansible variable. Upgrade Notes ************* * Changing to the ESL repos has no upgrade impact. The version of erlang provided by ESL is newer than that what is found in the distro repos. Furthermore, a pin has been added to ensure that APT always uses the ESL repos as it's preferred source which has been done to simply ensure APT is always pointed at ESL. Security Issues *************** * The "net.bridge.bridge-nf-call-*" kernel parameters were set to "0" in previous releases to improve performance and it was left up to neutron to adjust these parameters when security groups are applied. This could cause situations where bridge traffic was not sent through iptables and this rendered security groups ineffective. This could allow unexpected ingress and egress traffic within the cloud. These kernel parameters are now set to "1" on all hosts by the "openstack_hosts" role, which ensures that bridge traffic is always sent through iptables. * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. Bug Fixes ********* * Based on documentation from RabbitMQ [ https://www.rabbitmq.com /which-erlang.html ] this change ensures the version of erlang we're using across distros is consistent and supported by RabbitMQ. Changes in openstack-ansible 14.2.9..14.2.10 -------------------------------------------- 7267d21 Update os_neutron role SHA to include dns_domain ba03543 Update all SHAs for 14.2.10 Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 50 +++++++++++----------- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 48 ++++++++++----------- playbooks/inventory/group_vars/all.yml | 2 +- ...ity-groups-always-applied-eb6e3bdc7b77f022.yaml | 13 ++++++ releasenotes/notes/esl-repo-6ff0c7f24ad2a043.yaml | 25 +++++++++++ ...ot-login-without-password-948ec79c6508c19b.yaml | 6 +++ ...support-for-centos-xenial-2b89c318cc3df4b0.yaml | 2 +- .../ulimit-increased-65536-50b418d8e8ca4eef.yaml | 5 +++ 9 files changed, 101 insertions(+), 52 deletions(-)

1 0

[heat] python-heatclient 1.12.0 (queens)
by no-reply＠openstack.org 26 Oct '17

26 Oct '17

We are pumped to announce the release of: python-heatclient 1.12.0: OpenStack Orchestration API Client Library This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/python-heatclient Download the package from: https://pypi.python.org/pypi/python-heatclient Please report issues through launchpad: https://bugs.launchpad.net/python-heatclient For more details, please see below. Changes in python-heatclient 1.11.0..1.12.0 ------------------------------------------- 046fbf8 Use generic user for both zuul v2 and v3 7ed9834 No longer use oslotest.mockpatch 2a8ce0d Don't override sections in deep_update 4b397ae Updated from global requirements 2a39275 Support --show-nested in openstack stack update --dry-run 4661e4d Updated from global requirements 551e6be Remove vestigate HUDSON_PUBLISH_DOCS reference a669d59 Updated from global requirements 42ccce3 Imported Translations from Zanata 23ae4d9 Updated from global requirements 485a679 Decode content before checking Diffstat (except docs and test files) ------------------------------------- heatclient/common/http.py | 4 +- heatclient/common/template_utils.py | 3 ++ .../zh_CN/LC_MESSAGES/heatclient-log-error.po | 25 ------------ .../zh_CN/LC_MESSAGES/heatclient-log-info.po | 24 ------------ .../zh_CN/LC_MESSAGES/heatclient-log-warning.po | 26 ------------- heatclient/osc/v1/stack.py | 7 ++++ requirements.txt | 12 +++--- test-requirements.txt | 11 +++--- 14 files changed, 85 insertions(+), 99 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ee88d71..785f6b2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -cliff>=2.8.0 # Apache-2.0 +cliff!=2.9.0,>=2.8.0 # Apache-2.0 @@ -11,4 +11,4 @@ PrettyTable<0.8,>=0.7.1 # BSD -oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0 -oslo.serialization!=2.19.1,>=1.10.0 # Apache-2.0 -oslo.utils>=3.20.0 # Apache-2.0 -keystoneauth1>=3.0.1 # Apache-2.0 +oslo.i18n>=3.15.3 # Apache-2.0 +oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 +oslo.utils>=3.28.0 # Apache-2.0 +keystoneauth1>=3.2.0 # Apache-2.0 @@ -16 +16 @@ python-swiftclient>=3.2.0 # Apache-2.0 -PyYAML>=3.10.0 # MIT +PyYAML>=3.10 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 743509f..5c6d8d3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,6 +9,5 @@ fixtures>=3.0.0 # Apache-2.0/BSD -requests-mock>=1.1 # Apache-2.0 -mock>=2.0 # BSD -mox3!=0.19.0,>=0.7.0 # Apache-2.0 -openstackdocstheme>=1.11.0 # Apache-2.0 -oslotest>=1.10.0 # Apache-2.0 -python-openstackclient!=3.10.0,>=3.3.0 # Apache-2.0 +requests-mock>=1.1.0 # Apache-2.0 +mock>=2.0.0 # BSD +mox3>=0.20.0 # Apache-2.0 +openstackdocstheme>=1.17.0 # Apache-2.0 +python-openstackclient>=3.12.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_nova 14.2.10 (newton)
by no-reply＠openstack.org 26 Oct '17

26 Oct '17

We joyfully announce the release of: openstack-ansible-os_nova 14.2.10: os_nova for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. Changes in openstack-ansible-os_nova 14.2.8..14.2.10 ---------------------------------------------------- 9167787 Ensure online migrations can run ba256e3 Updated from OpenStack Ansible Tests 2091c57 Updated from OpenStack Ansible Tests 688aa8b Fail if TLS + TCP are enabled for libvirtd Diffstat (except docs and test files) ------------------------------------- .gitignore | 5 ++- Vagrantfile | 36 +++++++++++++++---- bindep.txt | 15 +++++++- tasks/main.yml | 20 +++++++++++ tasks/nova_db_setup.yml | 1 + 6 files changed, 119 insertions(+), 49 deletions(-)

1 0

[openstackansible] ansible-hardening 14.2.10 (newton)
by no-reply＠openstack.org 26 Oct '17

26 Oct '17

We are glad to announce the release of: ansible-hardening 14.2.10: OpenStack-Ansible: Host security hardening This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 14.2.10 ^^^^^^^ New Features ************ * The ansible-hardening role supports the application of the Red Hat Enterprise Linux 6 STIG configurations to systems running CentOS 7 and Ubuntu 16.04 LTS. Security Issues *************** * "PermitRootLogin" in the ssh configuration has changed from "yes" to "without-password". This will only allow ssh to be used to authenticate root via a key. Changes in ansible-hardening 14.2.3..14.2.10 -------------------------------------------- 31bfec7 Change default prohibit root sshd password auth d12b33b Updated from OpenStack Ansible Tests 436b6b6 [Docs] Replace security role references 62d5932 Fix ansible-hardening references in tox/playbook 6bbc4e9 Do not update grub if grub not used c339fcf Fix .gitreview for older branches 5ee3c4e Don't install python-ndg_httpsclient Diffstat (except docs and test files) ------------------------------------- .gitignore | 7 +- .gitreview | 2 +- README.md | 6 +- README.rst | 4 +- Vagrantfile | 72 ++++++----------- bindep.txt | 22 ++++-- defaults/main.yml | 16 ++-- files/V-38682-modprobe.conf | 2 +- handlers/main.yml | 4 + ...ot-login-without-password-948ec79c6508c19b.yaml | 6 ++ ...support-for-centos-xenial-2b89c318cc3df4b0.yaml | 2 +- setup.cfg | 2 +- tasks/main.yml | 7 ++ tasks/sshd.yml | 28 +++---- tox.ini | 2 +- vars/main.yml | 2 +- vars/redhat.yml | 2 +- vars/ubuntu.yml | 2 +- 29 files changed, 174 insertions(+), 163 deletions(-)

1 0

[openstackansible] openstack-ansible-os_heat 14.2.10 (newton)
by no-reply＠openstack.org 26 Oct '17

26 Oct '17

We contentedly announce the release of: openstack-ansible-os_heat 14.2.10: os_heat for OpenStack Ansible This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. Changes in openstack-ansible-os_heat 14.2.9..14.2.10 ---------------------------------------------------- 3143369 Updated from OpenStack Ansible Tests 5916cd3 Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 -- Vagrantfile | 36 ++++++++++++++++++++---- bindep.txt | 15 +++++++++- 4 files changed, 96 insertions(+), 49 deletions(-)

1 0