May 2017 - Release-announce - lists.openstack.org

[magnum] magnum 2.1.0 (mitaka)
by no-reply＠openstack.org 03 May '17

03 May '17

We jubilantly announce the release of: magnum 2.1.0: Container Management project for OpenStack This release is part of the mitaka stable release series. The source is available from: ** http://git.openstack.org/cgit/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through launchpad: ** http://bugs.launchpad.net/magnum For more details, please see below. Changes in magnum 2.0.0..2.1.0 ------------------------------ eb4b5d6 Updated from global requirements d1466e0 Remove constraints envs from tox.ini 8a9e408 Fix CVE-2016-7404 3d3d245 Fix gate: caused by tempest(removal of "service" param) 5ac9dfd Bay name must start with alphabets only c5950ca Allow passing a "insecure" flag in trusts 07285d2 Pass some common cert related arguments to clients c41470d Pass auth_token in auth_ref ba7065f Updated from global requirements 3a3d127 Gate: fix misc error in mitaka gate e2d013d Updated from global requirements fff3c0c Rename tenant to project in functional test 5a5d845 Updated from global requirements c0c2bdb Add a gitreview default target for gerrit for mitaka Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + magnum/api/controllers/v1/bay.py | 3 +- magnum/common/clients.py | 41 ++++-- magnum/common/keystone.py | 17 ++- .../fragments/write-heat-params-master.yaml | 2 +- .../mesos/fragments/write-heat-params.yaml | 2 +- .../swarm/fragments/write-heat-params.yaml | 2 +- requirements.txt | 10 +- test-requirements.txt | 2 +- tox.ini | 30 +--- 23 files changed, 355 insertions(+), 227 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2653251..6aea19f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ -Babel>=1.3 # BSD +Babel!=2.3.0,!=2.3.1,!=2.3.2,!=2.3.3,>=1.3 # BSD @@ -25 +25 @@ netaddr!=0.7.16,>=0.7.12 # BSD -oslo.concurrency>=3.5.0 # Apache-2.0 +oslo.concurrency>=3.7.1 # Apache-2.0 @@ -47 +47 @@ python-novaclient!=2.33.0,>=2.29.0 # Apache-2.0 -python-keystoneclient!=1.8.0,!=2.1.0,>=1.6.0 # Apache-2.0 +python-keystoneclient!=1.8.0,!=2.1.0,<3.0.0,>=1.6.0 # Apache-2.0 @@ -49 +49 @@ requests!=2.9.0,>=2.8.1 # Apache-2.0 -setuptools>=16.0 # PSF/ZPL +setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,>=16.0 # PSF/ZPL @@ -53 +53 @@ taskflow>=1.26.0 # Apache-2.0 -cryptography>=1.0 # BSD/Apache-2.0 +cryptography!=1.3.0,>=1.0 # BSD/Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index a0c5eb6..8cd75ea 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ doc8 # Apache-2.0 -fixtures>=1.3.1 # Apache-2.0/BSD +fixtures<2.0,>=1.3.1 # Apache-2.0/BSD

1 0

[magnum] magnum 3.2.0 (newton)
by no-reply＠openstack.org 03 May '17

03 May '17

We joyfully announce the release of: magnum 3.2.0: Container Management project for OpenStack This release is part of the newton stable release series. The source is available from: ** http://git.openstack.org/cgit/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through launchpad: ** http://bugs.launchpad.net/magnum For more details, please see below. 3.2.0 ^^^^^ New Features ************ * Add Support of LBaaS v2, LBaaS v1 is removed by neutron community in Newton release. Until now, LBaaS v1 was used by all clusters created using magnum. This release adds support of LBaaS v2 for all supported drivers. Upgrade Notes ************* * To let clusters communicate directly with OpenStack service other than Magnum, in the *trust* section of magnum.conf, set *cluster_user_trust* to True. The default value is False. Security Issues *************** * Every magnum cluster is assigned a trustee user and a trustID. This user is used to allow clusters communicate with the key-manager service (Barbican) and get the certificate authority of the cluster. This trust user can be used by other services too. It can be used to let the cluster authenticate with other OpenStack services like the Block Storage service, Object Storage service, Load Balancing etc. The cluster with this user and the trustID has full access to the trustor's OpenStack project. A new configuration parameter has been added to restrict the access to other services than Magnum. Bug Fixes ********* * Fixes CVE-2016-7404 for newly created clusters. Existing clusters will have to be re-created to benefit from this fix. Part of this fix is the newly introduced setting *cluster_user_trust* in the *trust* section of magnum.conf. This setting defaults to False. *cluster_user_trust* dictates whether to allow passing a trust ID into a cluster's instances. For most clusters this capability is not needed. Clusters with *registry_enabled=True* or *volume_driver=rexray* will need this capability. Other features that require this capability may be introduced in the future. To be able to create such clusters you will need to set *cluster_user_trust* to True. Changes in magnum 3.1.1..3.2.0 ------------------------------ 07f94c0 Install client in install guide instructions 83dd988 Updated from global requirements 96797bf Add reno for cluster_user_trust option 324c8bc Updated from global requirements 2d4e617 Fix CVE-2016-7404 fb67f87 Fix mesos gate d8ca5ac Fix: InvalidParameterValue Exception not raised correctly 1abcdc9 Fix typo: clustser-->cluster in python_client_base.py 73212db Make cinder volume optional 24994d1 [install] Fix endpoint creation 5b456cd [install] Fix 'host' config param in [api] section ada6f27 k8s_ironic: fix minion template d8dadde Reduce security groups # for k8s coreos cluster c192eff [instll] Update a more simple rabbitmq configuration 93bd547 Fix: k8s cluster creation with lb enabled/fip disabled 7508908 [coreos] Fix: k8s cluster creation with loadbalancer enabled 7521a94 Add missing reno: bp-magnum-lbaasv2-support 3f86cc4 Fix failure of systemd service kube-ui Diffstat (except docs and test files) ------------------------------------- devstack/lib/magnum | 1 + etc/magnum/policy.json | 54 ++++++------ .../source/common/configure_2_edit_magnum_conf.rst | 19 +++-- install-guide/source/common/prerequisites.rst | 15 ++-- install-guide/source/install-obs.rst | 2 +- install-guide/source/install-rdo.rst | 2 +- install-guide/source/install-ubuntu.rst | 2 +- magnum/api/validation.py | 2 +- magnum/common/keystone.py | 12 +++ magnum/common/policy.py | 12 +++ magnum/conductor/handlers/common/trust_manager.py | 13 ++- magnum/db/sqlalchemy/api.py | 17 +++- magnum/drivers/common/k8s_fedora_template_def.py | 20 +++-- magnum/drivers/common/template_def.py | 16 +++- .../environments/disable_floating_ip.yaml | 2 +- .../common/templates/environments/no_volume.yaml | 4 + .../common/templates/environments/with_volume.yaml | 4 + .../fragments/configure-docker-storage.sh | 46 ++++++----- .../configure_docker_storage_driver_atomic.sh | 16 ++-- .../fragments/kube-system-namespace-service.sh | 7 +- .../kubernetes/fragments/kube-ui-service.sh | 20 ++++- .../kubernetes/fragments/make-cert-client.sh | 5 -- .../templates/kubernetes/fragments/make-cert.sh | 5 -- .../fragments/write-heat-params-master.yaml | 3 +- .../kubernetes/fragments/write-heat-params.yaml | 3 +- .../templates/fragments/make-cert-client.yaml | 5 -- .../templates/fragments/make-cert.yaml | 5 -- .../fragments/write-heat-params-master.yaml | 2 +- .../templates/fragments/write-heat-params.yaml | 2 +- .../k8s_coreos_v1/templates/kubecluster.yaml | 40 +++++++++ .../k8s_coreos_v1/templates/kubemaster.yaml | 44 ++-------- .../k8s_coreos_v1/templates/kubeminion.yaml | 20 ++--- .../templates/kubecluster.yaml | 2 +- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 5 +- .../k8s_fedora_atomic_v1/templates/kubeminion.yaml | 5 +- .../templates/kubecluster.yaml | 4 +- .../k8s_fedora_ironic_v1/templates/kubemaster.yaml | 7 ++ .../k8s_fedora_ironic_v1/templates/kubeminion.yaml | 9 +- .../templates/fragments/write-heat-params.yaml | 2 +- .../drivers/swarm_fedora_atomic_v1/template_def.py | 13 ++- .../swarm_fedora_atomic_v1/templates/cluster.yaml | 2 +- .../templates/fragments/make-cert.py | 6 -- .../fragments/write-heat-params-master.yaml | 3 +- .../fragments/write-heat-params-node.yaml | 3 +- .../templates/swarmmaster.yaml | 5 +- .../templates/swarmnode.yaml | 5 +- .../api/controllers/v1/test_cluster_template.py | 1 - .../handlers/common/test_trust_manager.py | 3 +- .../conductor/handlers/test_cluster_conductor.py | 5 ++ .../handlers/test_k8s_cluster_conductor.py | 96 ++++++++++++++++++---- .../handlers/test_mesos_cluster_conductor.py | 9 +- .../handlers/test_swarm_cluster_conductor.py | 23 ++++-- .../notes/CVE-2016-7404-f53e62a4a40e4d30.yaml | 29 +++++++ ...bp-magnum-lbaasv2-support-3e7023c23b7c864e.yaml | 7 ++ requirements.txt | 2 +- 64 files changed, 539 insertions(+), 286 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e31a5a2..3013f05 100644 --- a/requirements.txt +++ b/requirements.txt @@ -52 +52 @@ requests>=2.10.0 # Apache-2.0 -setuptools!=24.0.0,>=16.0 # PSF/ZPL +setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,>=16.0 # PSF/ZPL

1 0

[heat] heat-translator 0.8.0 (pike)
by no-reply＠openstack.org 02 May '17

02 May '17

We are pleased to announce the release of: heat-translator 0.8.0: Tool to translate non-heat templates to Heat Orchestration Template. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/heat-translator/ Download the package from: https://pypi.python.org/pypi/heat-translator Please report issues through launchpad: https://bugs.launchpad.net/heat-translator For more details, please see below. Changes in heat-translator 0.7.0..0.8.0 --------------------------------------- eddcaad Updated from global requirements a15c8e8 Updated from global requirements cb4883a Implement monitoring policy in HT 219265c Updated from global requirements cd664a5 Updated from global requirements d7d6aee Fix bug that only 1 volume will be attached to VDU automatically 7ccbc87 Assign floating IP to the vdu 640bbdb Add sample dockerfile to build translator container cda0680 Updated from global requirements 6493c98 [Fix gate]Update test requirement 64d760a Updated from global requirements 34e92f8 Updated from global requirements 81cc41a Updated from global requirements cb84abd Updated from global requirements c07ea2b Updated from global requirements 950f5d5 Updated from global requirements 3cf5688 Replace yaml.load() with yaml.safe_load() 221dec4 Allow boot vdu from volume 4376df0 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 14 ++-- setup.py | 2 +- test-requirements.txt | 4 +- translator/common/utils.py | 2 +- translator/container/docker/dockerfile | 18 ++++ translator/hot/syntax/hot_resource.py | 3 +- translator/hot/tosca/tosca_compute.py | 5 +- translator/hot/tosca/tosca_floating.py | 48 +++++++++++ translator/hot/tosca/tosca_policies_monitoring.py | 82 ++++++++++++++++++ translator/hot/tosca/tosca_policies_scaling.py | 2 +- translator/hot/translate_node_templates.py | 24 ++++-- translator/shell.py | 2 +- .../monitoring/hot_monitoring_scaling.yaml | 50 +++++++++++ ...ultiple_blockstorage_w_multiple_attachment.yaml | 97 ++++++++++++++++++++++ .../data/monitoring/tosca_monitoring_scaling.yaml | 59 +++++++++++++ ...ultiple_blockstorage_w_multiple_attachment.yaml | 79 ++++++++++++++++++ 20 files changed, 568 insertions(+), 32 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 29c8684..39d6c7b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,3 +4,3 @@ -pbr>=1.8 # Apache-2.0 -Babel>=2.3.4 # BSD -cliff>=2.3.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 +Babel!=2.4.0,>=2.3.4 # BSD +cliff>=2.6.0 # Apache-2.0 @@ -10,3 +10,3 @@ six>=1.9.0 # MIT -tosca-parser>=0.7.0 # Apache-2.0 -keystoneauth1>=2.16.0 # Apache-2.0 -python-novaclient!=2.33.0,>=2.29.0 # Apache-2.0 +tosca-parser>=0.8.1 # Apache-2.0 +keystoneauth1>=2.18.0 # Apache-2.0 +python-novaclient>=7.1.0 # Apache-2.0 @@ -15 +15 @@ python-glanceclient>=2.5.0 # Apache-2.0 -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests!=2.12.2,!=2.13.0,>=2.10.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 0d9fdf6..9294851 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking<0.11,>=0.10.0 +hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 @@ -10 +10 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +sphinx>=1.5.1 # BSD

1 0

[keystone] keystoneauth1 2.20.0 (pike)
by no-reply＠openstack.org 02 May '17

02 May '17

We are satisfied to announce the release of: keystoneauth1 2.20.0: Authentication Library for OpenStack Identity This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/keystoneauth Download the package from: https://pypi.python.org/pypi/keystoneauth1 Please report issues through launchpad: https://bugs.launchpad.net/keystoneauth For more details, please see below. Changes in keystoneauth1 2.19.0..2.20.0 --------------------------------------- 1fd43be Introduce keystoneauth1.loading.adapter 1859a7f Uncomment warning-is-error for doc building 2c45a1f Updated from global requirements 503be91 Add bindep.txt file d0cdc35 Updated inconsistent value of scope parameter 63573d6 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- bindep.txt | 8 ++ keystoneauth1/adapter.py | 6 + keystoneauth1/identity/v3/base.py | 2 +- keystoneauth1/loading/__init__.py | 15 +++ keystoneauth1/loading/adapter.py | 131 +++++++++++++++++++++ requirements.txt | 2 +- setup.cfg | 8 +- test-requirements.txt | 2 +- 11 files changed, 219 insertions(+), 15 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ceb5155..db884a4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=2.0.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 206672a..852165a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ mock>=2.0 # BSD -oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 +oslo.config>=3.22.0 # Apache-2.0

1 0

[tripleo] paunch 1.0.0 (pike)
by no-reply＠openstack.org 02 May '17

02 May '17

We are satisfied to announce the release of: paunch 1.0.0: Utility to launch and manage containers using YAML based configuration data This is the first release of paunch. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through launchpad: http://bugs.launchpad.net/paunch For more details, please see below. Changes in paunch ceed164766f0b3cb2a69c021625957f52af24c75..1.0.0 ----------------------------------------------------------------- 508468b Predictable unit test label order 2ed8091 Start of documenting the configuration format f2331a8 Fix --volumes-from argument 9392c7a Document command-line usage 9e2f56c First trivial example 21459cf Fix cleanup with multiple arguments 02126d0 Fix positional args to cleanup command 83b7c2f update doc links a0ab5d1 Add missing config_id argument 7177f33 docstrings for implemented library API f620007 Fix delete_missing_configs f55b00c Allow docker command path to be set via paunch functions 835eaa5 do --env-file before --env 7e20b05 Fix up the still unimplemented commands 97caee6 Implement env_file 7a8c9d0 Add managed_by argument to all API functions 8de699e Start to write docs 678a2c1 Unit test for builder e0de578 Unit tests for runner 2904088 Unit test for main library interface 124e827 Make runner an object 06036fd Implement apply, cleanup commands 0ad26ad Builder object, transform config data to docker arguments 820ea16 Runner functions which call docker d89877d Create stub commands Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1a62d2e..857dda2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,0 +6,2 @@ pbr>=1.8 # Apache-2.0 + +cliff>=1.4

1 0

[documentation] openstackdocstheme 1.8.0
by no-reply＠openstack.org 02 May '17

02 May '17

We are pumped to announce the release of: openstackdocstheme 1.8.0: OpenStack Docs Theme The source is available from: https://git.openstack.org/cgit/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ Please report issues through launchpad: https://launchpad.net/openstack-doc-tools For more details, please see below. Changes in openstackdocstheme 1.7.0..1.8.0 ------------------------------------------ d31e4de Use new OpenStack logo and header c1964c6 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- openstackdocstheme/theme/openstackdocs/header.html | 26 +- .../theme/openstackdocs/static/favicon.ico | Bin 1150 -> 338 bytes .../static/images/openstack-logo-full.png | Bin 3180 -> 937 bytes .../static/images/openstack-logo-full.svg | 285 -------------------- .../static/images/openstack-logo-vert.png | Bin 2539 -> 658 bytes .../static/images/openstack-logo-vert.svg | 286 --------------------- requirements.txt | 2 +- 7 files changed, 25 insertions(+), 574 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9ee958b..6de9f4e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=2.0.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0

1 0

[neutron] neutron-lib 1.6.0 (pike)
by no-reply＠openstack.org 01 May '17

01 May '17

We are pleased to announce the release of: neutron-lib 1.6.0: Neutron shared routines and utilities This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/neutron-lib Download the package from: https://pypi.python.org/pypi/neutron-lib Please report issues through launchpad: http://bugs.launchpad.net/neutron For more details, please see below. 1.6.0 ^^^^^ New Features * A bulk of the "neutron.api.v2.attributes" functionality is now available in "neutron_lib.api.attributes". A new "AttributeInfo" class is available in that acts as a wrapper for an API resource's attribute dict and allows consumers to perform operations with the underlying attribute dict. The "populate_project_info" function is now available. The global attribute map "RESOURCES" is now available and will take the place of neutron's global "RESOURCE_ATTRIBUTE_MAP". * The "neutron_lib.fixture.APIDefinitionFixture" has been updated to handle backing-up and restoring the global "RESOURCES" dict. By default the constructor now also uses all API definitions if none are passed to it's constructor. This is the default behavior almost all consumers need and is thus a convenience change. Changes in neutron-lib 1.5.0..1.6.0 ----------------------------------- e401652 Rehome neutron.api.v2.attributes 714b810 Patch _get_callback_manager for callback fixture Diffstat (except docs and test files) ------------------------------------- neutron_lib/api/attributes.py | 183 ++++++++++++++++- neutron_lib/api/definitions/base.py | 13 -- neutron_lib/fixture.py | 36 +++- .../notes/core-attributes-43e6969f1b187e5c.yaml | 14 ++ 9 files changed, 570 insertions(+), 52 deletions(-)

1 0

[magnum] magnum 4.1.1 (ocata)
by no-reply＠openstack.org 01 May '17

01 May '17

We are tickled pink to announce the release of: magnum 4.1.1: Container Management project for OpenStack This release is part of the ocata stable release series. The source is available from: ** http://git.openstack.org/cgit/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through launchpad: ** http://bugs.launchpad.net/magnum For more details, please see below. 4.1.1 ^^^^^ Upgrade Notes ************* * To let clusters communicate directly with OpenStack service other than Magnum, in the *trust* section of magnum.conf, set *cluster_user_trust* to True. The default value is False. Security Issues *************** * Every magnum cluster is assigned a trustee user and a trustID. This user is used to allow clusters communicate with the key-manager service (Barbican) and get the certificate authority of the cluster. This trust user can be used by other services too. It can be used to let the cluster authenticate with other OpenStack services like the Block Storage service, Object Storage service, Load Balancing etc. The cluster with this user and the trustID has full access to the trustor's OpenStack project. A new configuration parameter has been added to restrict the access to other services than Magnum. Bug Fixes ********* * Fixes CVE-2016-7404 for newly created clusters. Existing clusters will have to be re-created to benefit from this fix. Part of this fix is the newly introduced setting *cluster_user_trust* in the *trust* section of magnum.conf. This setting defaults to False. *cluster_user_trust* dictates whether to allow passing a trust ID into a cluster's instances. For most clusters this capability is not needed. Clusters with *registry_enabled=True* or *volume_driver=rexray* will need this capability. Other features that require this capability may be introduced in the future. To be able to create such clusters you will need to set *cluster_user_trust* to True. Changes in magnum 4.1.0..4.1.1 ------------------------------ 7be95f2 Update Fedora images 9b93f3a Install client in install guide instructions aaa94e1 Add reno for cluster_user_trust option 9f6296e Pass 'context' to create_client_files method 1ff12b0 Pin images for ocata 1e07c37 Missing root-ca-file parameter for proper service account support 0748029 Fix mesos gate 0c7625f Fix CVE-2016-7404 6c9ef67 Update UPPER_CONSTRAINTS_FILE for stable/ocata 8fd822a Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/lib/magnum | 1 + devstack/plugin.sh | 2 +- etc/magnum/policy.json | 54 +++++++++++----------- install-guide/source/install-obs.rst | 2 +- install-guide/source/install-rdo.rst | 2 +- install-guide/source/install-ubuntu.rst | 2 +- install-guide/source/launch-instance.rst | 14 +++--- magnum/common/docker_utils.py | 2 +- magnum/common/keystone.py | 1 + magnum/common/policy.py | 12 +++++ magnum/conductor/handlers/common/trust_manager.py | 13 ++++-- magnum/conf/trust.py | 11 +++++ magnum/db/sqlalchemy/api.py | 17 ++++++- .../fragments/configure-kubernetes-master.sh | 2 +- .../kubernetes/fragments/make-cert-client.sh | 5 -- .../templates/kubernetes/fragments/make-cert.sh | 5 -- .../fragments/write-heat-params-master.yaml | 2 +- .../kubernetes/fragments/write-heat-params.yaml | 2 +- .../common/templates/swarm/fragments/make-cert.py | 6 --- .../swarm/fragments/write-heat-params-master.yaml | 2 +- .../swarm/fragments/write-heat-params-node.yaml | 2 +- .../swarm/fragments/write-swarm-agent-service.sh | 2 +- .../swarm/fragments/write-swarm-master-service.sh | 2 +- magnum/drivers/heat/template_def.py | 16 ++++++- .../templates/fragments/make-cert-client.yaml | 5 -- .../templates/fragments/make-cert.yaml | 5 -- .../fragments/write-heat-params-master.yaml | 2 +- .../templates/fragments/write-heat-params.yaml | 2 +- .../templates/kubecluster.yaml | 2 +- .../image/kubernetes/Readme.md | 10 ++-- .../image/kubernetes/package-installs.yaml | 3 +- .../templates/kubecluster.yaml | 2 +- .../templates/fragments/write-heat-params.yaml | 2 +- .../handlers/common/test_trust_manager.py | 3 +- .../conductor/handlers/test_cluster_conductor.py | 5 ++ .../handlers/test_k8s_cluster_conductor.py | 14 ++++-- .../handlers/test_mesos_cluster_conductor.py | 9 ++-- .../handlers/test_swarm_cluster_conductor.py | 8 +++- .../notes/CVE-2016-7404-f53e62a4a40e4d30.yaml | 29 ++++++++++++ tox.ini | 2 +- 47 files changed, 244 insertions(+), 117 deletions(-)

1 0

[openstackansible] openstack-ansible-plugins 15.1.2 (ocata)
by no-reply＠openstack.org 01 May '17

01 May '17

We are delighted to announce the release of: openstack-ansible-plugins 15.1.2: plugins for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. Changes in openstack-ansible-plugins 15.1.1..15.1.2 --------------------------------------------------- 9ce61bd Don't log password arguments of keystone module Diffstat (except docs and test files) ------------------------------------- library/keystone | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-)

1 0

[openstackansible] openstack-ansible-os_nova 15.1.2 (ocata)
by no-reply＠openstack.org 01 May '17

01 May '17

We joyfully announce the release of: openstack-ansible-os_nova 15.1.2: os_nova for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. 15.1.2 ^^^^^^ New Features ************ * Removed dependency for "cinder_backends_rbd_inuse" in nova.conf when setting "rbd_user" and "rbd_secret_uuid" variables. Cinder delivers all necessary values via RPC when attaching the volume, so those variables are only necessary for ephemeral disks stored in Ceph. These variables are required to be set up on cinder-volume side under backend section. Bug Fixes ********* * Nova features that use libguestfs (libvirt password/key injection) now work on compute hosts running Ubuntu. When Nova is deployed to Ubuntu compute hosts and either "nova_libvirt_inject_key" or "nova_libvirt_inject_password" are set to True, then kernels stored in /boot/vmlinuz-* will be made readable to nova user. See launchpad bug 1507915. Changes in openstack-ansible-os_nova 15.1.1..15.1.2 --------------------------------------------------- b715834 nova user can read kernel for libguestfs on Ubuntu 5190365 Allow libvirt rbd params to be independent of cinder Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 3 ++ files/nova_kernel_permissions.sh | 20 +++++++++++ .../fix-libguestfs-ubuntu-a1436d2724c9189a.yaml | 6 ++++ .../libvirt-rbd-independent-5876349073463cc3.yaml | 8 +++++ tasks/nova_compute_kvm.yml | 6 ++++ tasks/nova_kernel_permissions.yml | 39 ++++++++++++++++++++++ templates/nova.conf.j2 | 6 ++-- 7 files changed, 84 insertions(+), 4 deletions(-)

1 0