November 2017 - Release-announce - lists.openstack.org

[openstackansible] openstack-ansible-os_glance 16.0.4 (pike)
by no-reply＠openstack.org 01 Dec '17

01 Dec '17

We are happy to announce the release of: openstack-ansible-os_glance 16.0.4: os_glance for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. Changes in openstack-ansible-os_glance 16.0.3..16.0.4 ----------------------------------------------------- 6e98bb6 Updated from OpenStack Ansible Tests e8dcc7d Initial OSA zuul v3 role jobs Diffstat (except docs and test files) ------------------------------------- releasenotes/source/conf.py | 4 +++- zuul.d/project.yaml | 31 +++++++++++++++++++++++++++++++ 5 files changed, 63 insertions(+), 22 deletions(-)

1 0

[openstackansible] openstack-ansible-os_gnocchi 16.0.4 (pike)
by no-reply＠openstack.org 01 Dec '17

01 Dec '17

We are excited to announce the release of: openstack-ansible-os_gnocchi 16.0.4: os_gnocchi for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_gnocchi/ For more details, please see below. Changes in openstack-ansible-os_gnocchi 16.0.3..16.0.4 ------------------------------------------------------ 5f8950f Initial OSA zuul v3 role jobs Diffstat (except docs and test files) ------------------------------------- releasenotes/source/conf.py | 4 +++- zuul.d/project.yaml | 29 +++++++++++++++++++++++++++++ 5 files changed, 61 insertions(+), 22 deletions(-)

1 0

[openstackansible] openstack-ansible-os_swift 16.0.4 (pike)
by no-reply＠openstack.org 01 Dec '17

01 Dec '17

We joyfully announce the release of: openstack-ansible-os_swift 16.0.4: os_swift for OpenStack Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. Changes in openstack-ansible-os_swift 16.0.3..16.0.4 ---------------------------------------------------- 65a330b Suppress rsync warnings w/command 31bf026 Updated from OpenStack Ansible Tests Diffstat (except docs and test files) ------------------------------------- bindep.txt | 12 ++++++++++++ tasks/swift_rings_distribute.yml | 4 ++++ 2 files changed, 16 insertions(+)

1 0

[openstackansible] openstack-ansible-galera_server 16.0.4 (pike)
by no-reply＠openstack.org 01 Dec '17

01 Dec '17

We are delighted to announce the release of: openstack-ansible-galera_server 16.0.4: Galera Server role for OpenStack-Ansible This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. Changes in openstack-ansible-galera_server 16.0.3..16.0.4 --------------------------------------------------------- 645dd25 Updated from OpenStack Ansible Tests 180682f Suppress command/shell warnings a1b2c06 Initial OSA zuul v3 role jobs Diffstat (except docs and test files) ------------------------------------- tasks/galera_install_yum.yml | 2 ++ tasks/galera_secure_mysql.yml | 1 + tasks/galera_upgrade_check_yum.yml | 2 ++ zuul.d/project.yaml | 31 +++++++++++++++++++++++++++++++ 6 files changed, 62 insertions(+), 20 deletions(-)

1 0

[openstackansible] ansible-hardening 16.0.4 (pike)
by no-reply＠openstack.org 01 Dec '17

01 Dec '17

We are jazzed to announce the release of: ansible-hardening 16.0.4: OpenStack-Ansible: Host security hardening This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in ansible-hardening 16.0.3..16.0.4 ------------------------------------------- d1fb76e Updated from OpenStack Ansible Tests 30ff30c Zuulv3 jobs for Pike Diffstat (except docs and test files) ------------------------------------- releasenotes/source/conf.py | 6 ++++-- zuul.d/jobs.yaml | 24 ++++++++++++++++++++++++ zuul.d/project.yaml | 33 +++++++++++++++++++++++++++++++++ 6 files changed, 93 insertions(+), 23 deletions(-)

1 0

[openstackansible] openstack-ansible 16.0.4 (pike)
by no-reply＠openstack.org 01 Dec '17

01 Dec '17

We are thrilled to announce the release of: openstack-ansible 16.0.4: Ansible playbooks for deploying OpenStack This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 16.0.4 ^^^^^^ New Features ************ * Adds a new flag to enable Octavia V2 API (disabled by default) to facilitate to run Octavia stand alone (without Neutron) * Adds a new flag to toggle Octavia V1 API (the API needed to run in conjunction with Neutron) and enables it by default. * Deployers can set "lxc_hosts_opensuse_mirror_url" to use their preferred mirror for the openSUSE repositories. They can also set the "lxc_hosts_opensuse_mirror_obs_url" if they want to set a different mirror for the OBS repositories. If they want to use the same mirror in both cases then they can leave the latter variable to its default value. The full list of mirrors and their capabilities can be obtained at http://mirrors.opensuse.org/ * Deployers can set "pip_install_opensuse_mirror_url" to use their preferred mirror for the openSUSE repositories. They can also set the "pip_install_opensuse_mirror_obs_url" if they want to set a different mirror for the OBS repositories. If they want to use the same mirror in both cases then they can leave the latter variable to its default value. The full list of mirrors and their capabilities can be obtained at http://mirrors.opensuse.org/ * The "tempest_images" data structure for the "os_tempest" role now expects the values for each image to include "name" (optionally) and "format" (the disk format). Also, the optional variable "checksum" may be used to set the checksum expected for the file in the format "<algorithm>:<checksum>". * The default location for the image downloads in the "os_tempest" role set by the "tempest_image_dir" variable has now been changed to be "/opt/cache/files" in order to match the default location in nodepool. This improves the reliability of CI testing in OpenStack CI as it will find the file already cached there. * A new variable has been introduced into the "os_tempest" role named "tempest_image_downloader". When set to "deployment-host" (which is the default) it uses the deployment host to handle the download of images to be used for tempest testing. The images are then uploaded to the target host for uploading into Glance. * Enable Kernel Shared Memory support by setting "nova_compute_ksm_enabled" to "True". Deprecation Notes ***************** * The following variables have been removed from the "os_tempest" role to simplify it. They have been replaced through the use of the data structure "tempest_images" which now has equivalent variables per image. - cirros_version - tempest_img_url - tempest_image_file - tempest_img_disk_format - tempest_img_name - tempest_images.sha256 (replaced by checksum) Security Issues *************** * The following headers were added as additional default (and static) values. *X-Content-Type-Options nosniff*, *X-XSS-Protection "1; mode=block"*, and *Content-Security-Policy "default-src 'self' https: wss:;"*. Additionally, the *X-Frame-Options DENY* header was added, defaulting to DENY. You may override the header via the *keystone_x_frame_options* variable. Bug Fixes ********* * The "os_tempest" tempest role was downloading images twice - once arbitrarily, and once to use for testing. This has been consolidated into a single download to a consistent location. Changes in openstack-ansible 16.0.3..16.0.4 ------------------------------------------- aee35c8 Fix in-tree version 600754f Revert "Add ceph_mons to ceph example" 7a40b17 Run dstat in gate tests 6249a8c [DOCS] Correct secret uuid in Ceph example e98b0fe Make pw-token-gen.py more random ac05785 Retry apt cache update 83e2b54 Add ceph_mons to ceph example 1037caf Update all SHAs for 16.0.4 156e34e [DOCS] Add ceph production example configuration af2ad0e Set ceph_mons in group_vars a016318 Update lxc_hosts role SHA for continue option removal Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 90 ++++++------ .../source/app-advanced-config-options.rst | 2 +- deploy-guide/source/app-ceph.rst | 2 +- deploy-guide/source/app-config-prod-ceph.rst | 131 +++++++++++++++++ deploy-guide/source/app-custom-layouts.rst | 2 +- deploy-guide/source/app-limited-connectivity.rst | 2 +- deploy-guide/source/app-networking.rst | 2 +- deploy-guide/source/app-resources.rst | 2 +- deploy-guide/source/app-security.rst | 2 +- deploy-guide/source/app.rst | 1 + .../source/figures/arch-layout-production-ceph.png | Bin 0 -> 167033 bytes .../source/figures/arch-layout-production-ceph.svg | 3 + deploy-guide/source/figures/arch-layout.graffle | Bin 6161 -> 8655 bytes .../openstack_user_config.yml.prod-ceph.example | 162 +++++++++++++++++++++ .../user_variables.yml.prod-ceph.example | 41 ++++++ group_vars/all/all.yml | 2 +- group_vars/all/ceph.yml | 6 + playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 68 ++++----- ...tavia-V2-(standalone)-API-d644b92ad374f2cf.yaml | 7 + .../add-security-headers-e46c205b42b9598b.yaml | 8 + ...nsuse-mirror-url-variable-6660f16c3e9bf1ff.yaml | 10 ++ ...nsuse-mirror-url-variable-74d22825e808211e.yaml | 10 ++ ...emove-duplicated-download-99a9ec5bfe4ba749.yaml | 37 +++++ .../notes/support-ksm-fe6993158768a14e.yaml | 5 + scripts/gate-check-commit.sh | 7 +- scripts/pw-token-gen.py | 3 +- scripts/scripts-library.sh | 35 ++++- .../bootstrap-host/tasks/install_packages.yml | 4 + zuul.d/jobs.yaml | 2 +- 31 files changed, 553 insertions(+), 98 deletions(-)

1 0

[neutron] ovsdbapp 0.9.0 (queens)
by no-reply＠openstack.org 01 Dec '17

01 Dec '17

We are tickled pink to announce the release of: ovsdbapp 0.9.0: A library for creating OVSDB applications This release is part of the queens release series. The source is available from: http://git.openstack.org/cgit/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through launchpad: http://bugs.launchpad.net/ovsdbapp For more details, please see below. Changes in ovsdbapp 0.8.0..0.9.0 -------------------------------- 8ffd90d Don't throw NotConnectedError in queue_txn 5c64956 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/connection.py | 5 ++--- ovsdbapp/exceptions.py | 4 ---- requirements.txt | 2 +- test-requirements.txt | 4 ++-- 5 files changed, 10 insertions(+), 14 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c862953..bc850d3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -six>=1.9.0 # MIT +six>=1.10.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 5c73a10..26dc93f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ coverage!=4.4,>=4.0 # Apache-2.0 -python-subunit>=0.0.18 # Apache-2.0/BSD +python-subunit>=1.0.0 # Apache-2.0/BSD @@ -16 +16 @@ testscenarios>=0.4 # Apache-2.0/BSD -testtools>=1.4.0 # MIT +testtools>=2.2.0 # MIT

1 0

[cinder] os-brick 2.1.1 (queens)
by no-reply＠openstack.org 30 Nov '17

30 Nov '17

We jubilantly announce the release of: os-brick 2.1.1: OpenStack Cinder brick library for managing local volume attaches This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/os-brick Download the package from: https://pypi.python.org/pypi/os-brick Please report issues through launchpad: https://bugs.launchpad.net/os-brick For more details, please see below. Changes in os-brick 2.1.0..2.1.1 -------------------------------- 63b45f5 Fix a typographical error in a release notes entry. cedf281 Make close on cryptsetup volumes idempotent Diffstat (except docs and test files) ------------------------------------- os_brick/encryptors/cryptsetup.py | 10 ++++++---- releasenotes/notes/remove-old-constants-20021f5b30bde890.yaml | 2 +- 3 files changed, 9 insertions(+), 7 deletions(-)

1 0

[security] syntribos 0.5.0
by no-reply＠openstack.org 30 Nov '17

30 Nov '17

We are delighted to announce the release of: syntribos 0.5.0: API Security Scanner Download the package from: https://pypi.python.org/pypi/syntribos Please report issues through launchpad: https://bugs.launchpad.net/syntribos For more details, please see below. Changes in syntribos 0.4.0..0.5.0 --------------------------------- 575348d Updated from global requirements daa6575 Fixed logging issue in payload downloading cb46017 Fixed Broken Payload Downloading e1c5432 Remove explicit version info from setup.cfg 6708119 Updated from global requirements 373f92b Update the documentation link for doc migration Diffstat (except docs and test files) ------------------------------------- requirements.txt | 8 ++++---- setup.cfg | 5 ++--- syntribos/clients/http/base_http_client.py | 5 ++--- syntribos/utils/remotes.py | 6 ++++-- test-requirements.txt | 2 +- 5 files changed, 13 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d6c059c..81935e0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0 +oslo.i18n>=3.15.3 # Apache-2.0 @@ -7,3 +7,3 @@ requests>=2.14.2 # Apache-2.0 -oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0 -oslo.utils>=3.20.0 # Apache-2.0 -python-cinderclient>=3.1.0 # Apache-2.0 +oslo.config>=4.6.0 # Apache-2.0 +oslo.utils>=3.31.0 # Apache-2.0 +python-cinderclient>=3.2.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index aa2a2c5..2f3725a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ flake8<2.6.0,>=2.5.4 # MIT -unittest2 # BSD +unittest2>=1.1.0 # BSD

1 0

[keystone] keystoneauth1 3.3.0 (queens)
by no-reply＠openstack.org 30 Nov '17

30 Nov '17

We exuberantly announce the release of: keystoneauth1 3.3.0: Authentication Library for OpenStack Identity This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/keystoneauth Download the package from: https://pypi.python.org/pypi/keystoneauth1 Please report issues through launchpad: https://bugs.launchpad.net/keystoneauth For more details, please see below. Changes in keystoneauth1 3.2.0..3.3.0 ------------------------------------- d268367 Remove setting of version/release from releasenotes f431ba3 Updated from global requirements 38e4a67 Updated from global requirements 5ac9cde Add EndpointData.__str__ for debugging 65dffd8 Correct docs usage of keystoneauth1 session 7f41c9b Updated from global requirements ea3bfb1 Migrate to stestr 46286b1 Add version discovery support to BaseAuthPlugin e495c33 Recommend unversioned for endpoint-override bd9a9eb Nits in using-sessions.rst 772284c Extract iterables for test_keystone_version_data 97f633f Sanely order assertion args in test_discovery 70e1f44 Add tests for mutually exclusive [min|max]version 1de528e Make discover._version_between more consistent d545c4e Add loading mock fixtures 4b15f57 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .stestr.conf | 3 + .testr.conf | 4 - HACKING.rst | 8 +- keystoneauth1/discover.py | 70 +++--- keystoneauth1/fixture/__init__.py | 3 + keystoneauth1/fixture/plugin.py | 176 ++++++++++++++ keystoneauth1/identity/base.py | 1 - keystoneauth1/identity/v3/oidc.py | 2 +- keystoneauth1/loading/adapter.py | 6 +- keystoneauth1/plugin.py | 65 +++++- keystoneauth1/token_endpoint.py | 28 +++ releasenotes/source/conf.py | 13 +- requirements.txt | 2 +- setup.cfg | 6 +- test-requirements.txt | 22 +- tox.ini | 9 +- 21 files changed, 674 insertions(+), 140 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2a21f6b..6e43b67 100644 --- a/requirements.txt +++ b/requirements.txt @@ -17 +17 @@ requests>=2.14.2 # Apache-2.0 -six>=1.9.0 # MIT +six>=1.10.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 7313a36..a203c5d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,4 +11,4 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0 # BSD -oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0 -openstackdocstheme>=1.16.0 # Apache-2.0 -oslo.utils>=3.20.0 # Apache-2.0 +mock>=2.0.0 # BSD +oslo.config>=4.6.0 # Apache-2.0 +openstackdocstheme>=1.17.0 # Apache-2.0 +oslo.utils>=3.31.0 # Apache-2.0 @@ -16 +16 @@ oslotest>=1.10.0 # Apache-2.0 -os-testr>=0.8.0 # Apache-2.0 +os-testr>=1.0.0 # Apache-2.0 @@ -18,2 +18,2 @@ betamax>=0.7.0 # Apache-2.0 -reno!=2.3.1,>=1.8.0 # Apache-2.0 -requests-mock>=1.1 # Apache-2.0 +reno>=2.5.0 # Apache-2.0 +requests-mock>=1.1.0 # Apache-2.0 @@ -21,4 +21,4 @@ sphinx>=1.6.2 # BSD -testrepository>=0.0.18 # Apache-2.0/BSD -testresources>=0.2.4 # Apache-2.0/BSD -testtools>=1.4.0 # MIT -PyYAML>=3.10.0 # MIT +stestr>=1.0.0 # Apache-2.0 +testresources>=2.0.0 # Apache-2.0/BSD +testtools>=2.2.0 # MIT +PyYAML>=3.10 # MIT

1 0