May 2017 - Release-announce - lists.openstack.org

[ironic] ironic-python-agent 1.5.2 (newton)
by no-reply＠openstack.org 01 Jun '17

01 Jun '17

We exuberantly announce the release of: ironic-python-agent 1.5.2: Ironic Python Agent Ramdisk This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ironic-python-agent/ For more details, please see below. 1.5.2 ^^^^^ Bug Fixes * Limits the memory usage of "qemu-img convert" command to 1 GiB to avoid it from causing the host machine to fail due not enough ram. * If ipa-api-url is not configured in pxe parameters, skip lookup and heartbeat to avoid ConnectionError when the IPA starts. See https://bugs.launchpad.net/bugs/1643966 for details. Changes in ironic-python-agent 1.5.1..1.5.2 ------------------------------------------- e46f75e Support psutil 5.0.1 7ff6948 [TinyIPA] Avoid running rm with no parameters ae01461 Limit memory usage when running qemu-img convert 566bc8d Revert "Use liberty-eol tag for liberty release notes" f55f9f3 Use liberty-eol tag for liberty release notes a834065 Skip API related work if no api url configured Diffstat (except docs and test files) ------------------------------------- imagebuild/tinyipa/finalise-tinyipa.sh | 6 +- ironic_python_agent/agent.py | 69 ++++++++------- ironic_python_agent/config.py | 2 +- ironic_python_agent/hardware.py | 6 ++ ironic_python_agent/shell/write_image.sh | 3 + .../limit-qemu-img-ram-usage-d7b7a16ac5e9c917.yaml | 5 ++ ...-if-apiurl-not-configured-5ae8b04ae1e74673.yaml | 5 ++ 9 files changed, 165 insertions(+), 37 deletions(-)

1 0

puppet-pacemaker 0.6.0
by no-reply＠openstack.org 01 Jun '17

01 Jun '17

We are pleased to announce the release of: puppet-pacemaker 0.6.0: Puppet module for Pacemaker Download the package from: https://tarballs.openstack.org/puppet-pacemaker/ For more details, please see below. Changes in puppet-pacemaker 0.5.0..0.6.0 ---------------------------------------- 05cb65f Release 0.6.0 d3a5dac Update tox configuration de9d199 Add retries for pcs cluster setup aa42b5d Add support for Pacemaker Remote to stonith drivers. 7403757 Add verify_on_create for remote resources 5134f1f Fix up race when setting a property 9081388 Fix a typo in ipv6 addrlabel 0c2e233 Add support for ipv6_addrlabel with IPaddr2 RA 0763607 Fix potential cluster setup race 56ef1e2 Update test-requirements.txt c1c2031 Fixes for race condition when adding primitives without OCF present fe4d448 Remove spurious CIB backup files b135ebb Add rspec tests for stonith fences 4552c9f Disable the deprecation warnings as errors for puppet-syntax Diffstat (except docs and test files) ------------------------------------- Rakefile | 1 + agent_generator/agent_generator.rb | 7 +- bindep.txt | 11 +++ lib/pacemaker/options.yaml | 9 +- lib/pacemaker/wait.rb | 5 +- lib/pacemaker/xml/debug.rb | 21 ++++- lib/pacemaker/xml/status.rb | 15 ++-- lib/puppet/provider/pcmk_common.rb | 6 ++ lib/puppet/provider/service/pacemaker_xml.rb | 13 +-- manifests/corosync.pp | 53 ++++++++---- manifests/property.pp | 1 + manifests/resource/ip.pp | 16 +++- manifests/resource/remote.pp | 6 ++ manifests/stonith/fence_apc.pp | 7 +- manifests/stonith/fence_apc_snmp.pp | 7 +- manifests/stonith/fence_bladecenter.pp | 7 +- manifests/stonith/fence_brocade.pp | 7 +- manifests/stonith/fence_cisco_mds.pp | 7 +- manifests/stonith/fence_cisco_ucs.pp | 7 +- manifests/stonith/fence_drac5.pp | 7 +- manifests/stonith/fence_eaton_snmp.pp | 7 +- manifests/stonith/fence_eps.pp | 7 +- manifests/stonith/fence_hpblade.pp | 7 +- manifests/stonith/fence_ibmblade.pp | 7 +- manifests/stonith/fence_idrac.pp | 7 +- manifests/stonith/fence_ifmib.pp | 7 +- manifests/stonith/fence_ilo.pp | 7 +- manifests/stonith/fence_ilo2.pp | 7 +- manifests/stonith/fence_ilo3.pp | 7 +- manifests/stonith/fence_ilo4.pp | 7 +- manifests/stonith/fence_ilo_mp.pp | 7 +- manifests/stonith/fence_imm.pp | 7 +- manifests/stonith/fence_intelmodular.pp | 7 +- manifests/stonith/fence_ipdu.pp | 7 +- manifests/stonith/fence_ipmilan.pp | 7 +- manifests/stonith/fence_ironic.pp | 7 +- manifests/stonith/fence_kdump.pp | 7 +- manifests/stonith/fence_rhevm.pp | 7 +- manifests/stonith/fence_rsb.pp | 7 +- manifests/stonith/fence_scsi.pp | 7 +- manifests/stonith/fence_virt.pp | 7 +- manifests/stonith/fence_vmware_soap.pp | 7 +- manifests/stonith/fence_wti.pp | 7 +- manifests/stonith/fence_xvm.pp | 7 +- metadata.json | 2 +- .../verify_on_create_remote-b4abeace7018480d.yaml | 5 ++ releasenotes/source/conf.py | 4 +- .../pacemaker_stonith_fence_ipmilan_spec.rb | 99 ++++++++++++++++++++++ spec/unit/puppet/provider/pacemaker_xml_spec.rb | 22 ++--- .../puppet/provider/service/pacemaker_xml_spec.rb | 9 ++ test-requirements.txt | 11 ++- tox.ini | 3 + 52 files changed, 422 insertions(+), 114 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index bedd666..1ea50a8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,7 @@ -# this is required for the docs build jobs -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 -reno>=0.1.1 # Apache-2.0 +# This is required for the docs build jobs +sphinx>=1.5.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0 + +# This is required for the releasenotes build jobs +# FIXME: reno is manually pinned to !=2.0.0 because of bug #1651995 +reno>=1.8.0,!=2.0.0 # Apache-2.0

1 0

[ironic] ironic-inspector 4.2.2 (newton)
by no-reply＠openstack.org 01 Jun '17

01 Jun '17

We are thrilled to announce the release of: ironic-inspector 4.2.2: Hardware introspection for OpenStack Bare Metal This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through launchpad: http://bugs.launchpad.net/ironic-inspector For more details, please see below. 4.2.2 ^^^^^ Bug Fixes * Loopback BMC addresses (useful e.g. with virtualbmc) are no longer used for lookup. Changes in ironic-inspector 4.2.1..4.2.2 ---------------------------------------- dfad98b Prepare for using standard python tests 796e16a Cherry-pick fixes for Grenade d05e569 Grenade: don't enable tempest plugins in settings 34d92ba Make grenade actually upgrade our source code ed69b6f Do not use loopback BMC addresses for lookup a9cb5c5 Remove upgrade from non-ironic setup 5dfdf55 Remove default_params_with_timeout_values from tempest client 95851a8 Switch func3 environment to Python 3.5 0e99daf Don't recreate db during grenade upgrade 4f92068 Stop disabling the Neutron tempest plugin Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 4 +- devstack/upgrade/settings | 3 -- devstack/upgrade/upgrade.sh | 40 ++------------- ironic_inspector/common/ironic.py | 32 +++++++----- .../test/inspector_tempest_plugin/plugin.py | 5 -- .../services/introspection_client.py | 6 +-- ironic_inspector/test/unit/test_common_ironic.py | 6 +++ ironic_inspector/test/unit/test_introspect.py | 27 ++++++++++ .../notes/loopback-bmc-e60d64fe74bdf142.yaml | 5 ++ tools/test-setup.sh | 57 ++++++++++++++++++++++ tox.ini | 2 +- 13 files changed, 130 insertions(+), 65 deletions(-)

1 0

[ironic] ironic 6.2.4 (newton)
by no-reply＠openstack.org 01 Jun '17

01 Jun '17

We are tickled pink to announce the release of: ironic 6.2.4: OpenStack Bare Metal Provisioning This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: http://bugs.launchpad.net/ironic For more details, please see below. 6.2.4 ^^^^^ Bug Fixes * Fix handling of whole disk images with 0x00000000 disk identifier. Instances failed to boot as the identifier in boot config was overwritten during config drive creation. See https://bugs.launchpad.net/ironic/+bug/1685093 Changes in ironic 6.2.3..6.2.4 ------------------------------ ebe7089 Switch to use test_utils.call_until_true dd9c4d6 Read disk identifier after config drive setup Diffstat (except docs and test files) ------------------------------------- ironic/drivers/modules/deploy_utils.py | 3 ++- .../notes/fix-disk-identifier-overwrite-42b33a5a0f7742d8.yaml | 5 +++++ 3 files changed, 10 insertions(+), 4 deletions(-)

1 0

[ironic] ironic-inspector 5.0.1 (ocata)
by no-reply＠openstack.org 01 Jun '17

01 Jun '17

We are glad to announce the release of: ironic-inspector 5.0.1: Hardware introspection for OpenStack Bare Metal This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through launchpad: http://bugs.launchpad.net/ironic-inspector For more details, please see below. 5.0.1 ^^^^^ Bug Fixes * Exception CalledProcessError is raised when running *iptables* cmd on start up. The issue is caused by eventlet bug, see: https://github.com/eventlet/eventlet/issues/357 The issue affects *ironic-inspector* only if it manages firewall - configured with "manage_firewall = True" configuration option. * Do not fail the whole introspection due to a value formatting error during introspection rules rollback. See bug 1686942 (https://bugs.launchpad.net/ironic-inspector/+bug/1686942) for an example and detailed investigation. Changes in ironic-inspector 5.0.0..5.0.1 ---------------------------------------- e4fb858 Do not fail rules rollback on bad formatting key 3115c18 Updated from global requirements 18660a1 Use eventlet version of subprocess e78f06d Updated from global requirements 4952260 Grenade: don't enable tempest plugins in settings babc2b6 Update UPPER_CONSTRAINTS_FILE for stable/ocata 62073ad Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/upgrade/settings | 3 --- ironic_inspector/firewall.py | 2 +- ironic_inspector/rules.py | 26 ++++++++++++++-------- ironic_inspector/test/unit/test_firewall.py | 5 ++--- ironic_inspector/test/unit/test_rules.py | 17 ++++++++++++++ ...edProcessError-on-startup-28d9dbed85a81542.yaml | 9 ++++++++ .../rollback-formatting-7d61c9af2600d42f.yaml | 7 ++++++ tox.ini | 2 +- 9 files changed, 55 insertions(+), 17 deletions(-)

1 0

[ironic] ironic 7.0.2 (ocata)
by no-reply＠openstack.org 01 Jun '17

01 Jun '17

We are ecstatic to announce the release of: ironic 7.0.2: OpenStack Bare Metal Provisioning This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: http://bugs.launchpad.net/ironic For more details, please see below. 7.0.2 ^^^^^ Bug Fixes * Fix handling of whole disk images with 0x00000000 disk identifier. Instances failed to boot as the identifier in boot config was overwritten during config drive creation. See https://bugs.launchpad.net/ironic/+bug/1685093 * Fixes an issue with oneview driver trying to deallocate a node when an error is encountered while performing server profile application. Also ensures only those nodes that are managed by ironic can be deallocated. * Fixes failure to update a node's driver from a hardware type to a classic driver. Changes in ironic 7.0.1..7.0.2 ------------------------------ 2df1cef Updated from global requirements 451251d Read disk identifier after config drive setup e102ce0 Validation before perform node deallocation e9ce5d1 Fix updating node.driver to classic 13eff66 [Devstack]: open firewall for ironic api on provision net Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 2 + ironic/common/driver_factory.py | 15 +- ironic/drivers/modules/deploy_utils.py | 3 +- ironic/drivers/modules/oneview/deploy_utils.py | 46 +++--- ironic/drivers/modules/oneview/power.py | 8 + .../drivers/modules/oneview/test_deploy_utils.py | 58 ++++++- .../unit/drivers/modules/oneview/test_power.py | 113 +++++++++++--- ...disk-identifier-overwrite-42b33a5a0f7742d8.yaml | 5 + ...oneview-deallocate-server-8256e279af837e5d.yaml | 7 + ...ng-node-driver-to-classic-16b0d5ba47e74d10.yaml | 4 + requirements.txt | 2 +- 12 files changed, 373 insertions(+), 56 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 54cb24f..849c9e8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0

1 0

[swift] swift 2.13.1 (ocata)
by no-reply＠openstack.org 01 Jun '17

01 Jun '17

We are excited to announce the release of: swift 2.13.1: OpenStack Object Storage This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/swift/ For more details, please see below. 2.13.1 ^^^^^^ Bug Fixes * Fixed a bug in the EC reconstructor where an unsuccessful sync would cause extra disk I/O load on the remote server. Now the extra checking work is only requested if the sync request was successful. * PUT subrequests generated from a client-side COPY will now properly log the SSC (server-side copy) Swift source field. See https://docs.openstack.org/developer/swift/logs.html#swift-source for more information. * Fixed error where a container drive error resulted in double space usage on rest drives. When drive with container or account database is unmounted, the bug would create handoff replicas on all remaining drives, increasing the drive space used and filling the cluster. * Fixed some minor test compatibility issues. * Updated docs to reference appropriate ports. Changes in swift 2.13.0..2.13.1 ------------------------------- 72ed8f2 changelog for 2.13.1 release e127f22 Do not sync suffixes when remote rejects reconstructor revert 0b3267b Fix unit tests on i386 and other archs 01156e7 Open-code eventlet.listen() 177fca2 Imported Translations from Zanata 55b2fa4 Fixed get ring name from recon cli 1582f8a Container drive error results double space usage on rest drives b7c2a91 Log the correct request type of a subrequest downstream of copy 35b41c9 More port number cleanup 75dec15 Fix port ranges in install guide 302871d Stop using client headers for cross-middleware communication 968fde5 Update UPPER_CONSTRAINTS_FILE for stable/ocata 90bd0d0 Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + CHANGELOG | 19 +++ .../samples/endpoints-list-response-headers.json | 14 +- .../source/samples/endpoints-list-response.json | 6 +- install-guide/source/initial-rings.rst | 84 +++++----- install-guide/source/storage-include1.txt | 2 +- install-guide/source/storage-include2.txt | 2 +- install-guide/source/storage-include3.txt | 2 +- .../notes/2_13_1_release-7428c88357a371bf.yaml | 22 +++ swift/cli/recon.py | 2 +- swift/common/db_replicator.py | 10 +- swift/common/middleware/copy.py | 10 +- swift/common/middleware/tempauth.py | 19 +-- swift/common/wsgi.py | 3 +- swift/locale/de/LC_MESSAGES/swift.po | 20 +-- swift/locale/es/LC_MESSAGES/swift.po | 33 +--- swift/locale/fr/LC_MESSAGES/swift.po | 24 +-- swift/locale/it/LC_MESSAGES/swift.po | 24 +-- swift/locale/ja/LC_MESSAGES/swift.po | 24 +-- swift/locale/ko_KR/LC_MESSAGES/swift.po | 77 ++++++--- swift/locale/pt_BR/LC_MESSAGES/swift.po | 24 +-- swift/locale/ru/LC_MESSAGES/swift.po | 24 +-- swift/locale/tr_TR/LC_MESSAGES/swift.po | 24 +-- swift/locale/zh_CN/LC_MESSAGES/swift.po | 24 +-- swift/locale/zh_TW/LC_MESSAGES/swift.po | 24 +-- swift/obj/reconstructor.py | 2 +- test/__init__.py | 15 ++ test/functional/__init__.py | 16 +- test/unit/__init__.py | 12 +- test/unit/cli/test_recon.py | 20 +++ test/unit/common/middleware/test_copy.py | 24 ++- .../common/middleware/test_subrequest_logging.py | 178 +++++++++++++++++++++ test/unit/common/middleware/test_tempauth.py | 21 +-- test/unit/common/test_bufferedhttp.py | 6 +- test/unit/common/test_db_replicator.py | 44 +++++ test/unit/common/test_utils.py | 7 + test/unit/common/test_wsgi.py | 10 +- test/unit/container/test_server.py | 9 +- test/unit/container/test_updater.py | 8 +- test/unit/helpers.py | 19 +-- test/unit/obj/test_reconstructor.py | 94 ++++++++--- test/unit/obj/test_server.py | 11 +- test/unit/obj/test_ssync.py | 3 +- test/unit/obj/test_ssync_receiver.py | 6 +- test/unit/obj/test_updater.py | 7 +- test/unit/proxy/test_server.py | 16 +- tox.ini | 2 +- 47 files changed, 664 insertions(+), 384 deletions(-)

1 0

[swift] swift 2.10.2 (newton)
by no-reply＠openstack.org 01 Jun '17

01 Jun '17

We are thrilled to announce the release of: swift 2.10.2: OpenStack Object Storage This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/swift/ For more details, please see below. 2.10.2 ^^^^^^ Bug Fixes * Improvements in key parts of the consistency engine - Optimized the common case for hashing filesystem trees, thus eliminating a lot of extraneous disk I/O. * Updated the *hashes.pkl* file format to include timestamp information for race detection. Also simplified hashing logic to prevent race conditions and optimize for the common case. Upgrade Impact: If you upgrade and roll back, you must delete all *hashes.pkl* files. * If using erasure coding with ISA-L in rs_vand mode and 5 or more parity fragments, Swift will emit a warning. This is a configuration that is known to harm data durability. In a future release, this warning will be upgraded to an error unless the policy is marked as deprecated. All data in an erasure code storage policy using isa_l_rs_vand with 5 or more parity should be migrated as soon as possible. Please see https://bugs.launchpad.net/swift/+bug/1639691 for more information. * Fixed a bug where the ring builder would not allow removal of a device when min_part_seconds_left was greater than zero. * PUT subrequests generated from a client-side COPY will now properly log the SSC (server-side copy) Swift source field. See https://docs.openstack.org/developer/swift/logs.html#swift-source for more information. * Rings with min_part_hours set to zero will now only move one partition replica per rebalance, thus matching behavior when min_part_hours is greater than zero. * Correctly send 412 Precondition Failed if a user sends an invalid copy destination. Previously Swift would send a 500 Internal Server Error. * Fixed error where a container drive error resulted in double space usage on rest drives. When drive with container or account database is unmounted, the bug would create handoff replicas on all remaining drives, increasing the drive space used and filling the cluster. * Account and container databases will now be quarantined if the database schema has been corrupted. * Ensure update of the container by object-updater, removing a rare possibility that objects would never be added to a container listing. * Fixed some minor test compatibility issues. * Updated docs to reference appropriate ports. Changes in swift 2.10.1..2.10.2 ------------------------------- f860faf changelog for 2.10.2 release d794179 Fix unit tests on i386 and other archs aad02ad Fix race when consolidating new partition fac6e09 Open-code eventlet.listen() a1f263c Better optimistic lock in get_hashes 80f550f Container drive error results double space usage on rest drives faa6890 Log the correct request type of a subrequest downstream of copy f59a737 Correctly send 412 Precondition Failed in copy middleware 41d90db Fix timing test error when rebalancing 735c99f More port number cleanup 5c7988b Ensure update of the container by object-updater a047516 Fix port ranges in install guide bd75a97 Warn about using EC with isa_l_rs_vand and nparity >= 5 054ee3d Fix race in new partitions detecting new/invalid suffixes. dd3a749 Simplify get_different_suffix_df args a4c1b3e Optimize noop case for suffix rehash de7348b Extract test pattern to helper 9c8c7e8 Rebalance with min_part_seconds_left > 0 e5dd050 For any part, only one replica can move in a rebalance ea1ecf3 Quarantine malformed database schema SQLite errors Diffstat (except docs and test files) ------------------------------------- CHANGELOG | 53 ++ .../samples/endpoints-list-response-headers.json | 14 +- .../source/samples/endpoints-list-response.json | 6 +- install-guide/source/initial-rings.rst | 84 +-- install-guide/source/storage-include1.txt | 2 +- install-guide/source/storage-include2.txt | 2 +- install-guide/source/storage-include3.txt | 2 +- .../notes/2_10_2_release-eb9abaa82fcc8ebc.yaml | 61 +++ swift/cli/ringbuilder.py | 17 +- swift/common/db.py | 2 + swift/common/db_replicator.py | 10 +- swift/common/middleware/copy.py | 36 +- swift/common/ring/builder.py | 36 +- swift/common/storage_policy.py | 22 + swift/common/wsgi.py | 3 +- swift/obj/diskfile.py | 157 +++--- swift/obj/updater.py | 12 +- test/__init__.py | 15 + test/functional/__init__.py | 16 +- test/probe/test_object_async_update.py | 61 +++ test/unit/cli/test_ringbuilder.py | 56 ++ test/unit/common/malformed_schema_example.db | Bin 0 -> 49152 bytes test/unit/common/middleware/test_account_quotas.py | 8 +- test/unit/common/middleware/test_copy.py | 75 ++- test/unit/common/middleware/test_quotas.py | 7 +- .../common/middleware/test_subrequest_logging.py | 178 ++++++ test/unit/common/ring/test_builder.py | 29 +- test/unit/common/ring/test_utils.py | 11 +- test/unit/common/test_bufferedhttp.py | 6 +- test/unit/common/test_db.py | 63 ++- test/unit/common/test_db_replicator.py | 44 ++ test/unit/common/test_storage_policy.py | 108 ++++ test/unit/common/test_utils.py | 7 + test/unit/common/test_wsgi.py | 10 +- test/unit/container/test_server.py | 9 +- test/unit/container/test_updater.py | 8 +- test/unit/helpers.py | 19 +- test/unit/obj/test_auditor.py | 58 +- test/unit/obj/test_diskfile.py | 600 +++++++++++++++++++-- test/unit/obj/test_server.py | 14 +- test/unit/obj/test_ssync.py | 3 +- test/unit/obj/test_ssync_receiver.py | 6 +- test/unit/obj/test_updater.py | 11 +- test/unit/proxy/test_server.py | 16 +- 45 files changed, 1614 insertions(+), 349 deletions(-)

1 0

[puppet] puppet-nova 9.5.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are thrilled to announce the release of: puppet-nova 9.5.4: Puppet module for OpenStack Nova This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/puppet-nova/ For more details, please see below. Changes in puppet-nova 9.5.3..9.5.4 ----------------------------------- e984629 Update 9.5.4 Diffstat (except docs and test files) ------------------------------------- metadata.json | 2 +- releasenotes/source/conf.py | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-plugins 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are happy to announce the release of: openstack-ansible-plugins 14.2.4: plugins for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. Changes in openstack-ansible-plugins 14.2.2..14.2.4 --------------------------------------------------- 8644195 Resolve distro package index issue Diffstat (except docs and test files) ------------------------------------- lookup/py_pkgs.py | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-os_sahara 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We joyfully announce the release of: openstack-ansible-os_sahara 14.2.4: os_sahara for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_sahara/ For more details, please see below. Changes in openstack-ansible-os_sahara 14.1.1..14.2.4 ----------------------------------------------------- aeb5cdc Install python2-pyOpenSSL package on CentOS Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_rally 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are jazzed to announce the release of: openstack-ansible-os_rally 14.2.4: os_rally for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_rally/ For more details, please see below. Changes in openstack-ansible-os_rally 14.2.0..14.2.4 ---------------------------------------------------- 8567b47 Bring consistency to tags 82bbbef Update missing database exception text Diffstat (except docs and test files) ------------------------------------- tasks/database-setup.yml | 2 +- tasks/main.yml | 3 +-- 2 files changed, 2 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-os_gnocchi 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are amped to announce the release of: openstack-ansible-os_gnocchi 14.2.4: os_gnocchi for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_gnocchi/ For more details, please see below. 14.2.4 ^^^^^^ New Features ************ * New variables have been added to allow a deployer to customize a gnocchi systemd unit file to their liking. * The task dropping the gnocchi systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. * For the "os_gnocchi" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "gnocchi_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Upgrade Notes ************* * For the "os_gnocchi" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "gnocchi_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Changes in openstack-ansible-os_gnocchi 14.2.2..14.2.4 ------------------------------------------------------ fdb1731 Rename reno to avoid conflict on integrated repo 115cbb6 Rename release note to unique hash a6e2183 Reduce init restart/kill times 73a2685 Ensure the components are isolated from the system Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 5 +++++ ...chi-init-config-overrides-4fc9ec27ea1bd090.yaml | 10 ++++++++++ ...nocchi_init_time_settings-ba554f29fc7fd351.yaml | 23 ++++++++++++++++++++++ tasks/gnocchi_init_systemd.yml | 4 +++- templates/gnocchi-systemd-init.j2 | 13 ++++++++++-- templates/gnocchi-upstart-init.j2 | 4 ++++ 6 files changed, 56 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-os_cinder 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are pleased to announce the release of: openstack-ansible-os_cinder 14.2.4: os_cinder role for OpenStack- Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. 14.2.4 ^^^^^^ New Features * New variables have been added to allow a deployer to customize a cinder systemd unit file to their liking. * The task dropping the cinder systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. Changes in openstack-ansible-os_cinder 14.2.2..14.2.4 ----------------------------------------------------- d1e18b9 Rename reno to avoid conflict on integrated repo 40aa7df Replace var approach with config_template approach cb033a4 Ensure the components are isolated from the system Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 13 +++++++++- ...der-init-config-overrides-9e495aee023deed6.yaml | 10 ++++++++ ...cinder_init_time_settings-1ef46f6b9d4fc1df.yaml | 30 ++++++++++------------ tasks/cinder_init_systemd.yml | 4 ++- templates/cinder-systemd-init.j2 | 9 +++++++ 5 files changed, 47 insertions(+), 19 deletions(-)

1 0

[openstackansible] openstack-ansible-rsyslog_server 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We enthusiastically announce the release of: openstack-ansible-rsyslog_server 14.2.4: rsyslog_server for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. Changes in openstack-ansible-rsyslog_server 14.1.1..14.2.4 ---------------------------------------------------------- 27e47df Install python2-pyOpenSSL package on CentOS Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_nova 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are glad to announce the release of: openstack-ansible-os_nova 14.2.4: os_nova for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. 14.2.4 ^^^^^^ New Features ************ * Removed dependency for "cinder_backends_rbd_inuse" in nova.conf when setting "rbd_user" and "rbd_secret_uuid" variables. Cinder delivers all necessary values via RPC when attaching the volume, so those variables are only necessary for ephemeral disks stored in Ceph. These variables are required to be set up on cinder-volume side under backend section. * New variables have been added to allow a deployer to customize a nova systemd unit file to their liking. * The task dropping the nova systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. * For the "os_nova" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "nova_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Upgrade Notes ************* * For the "os_nova" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "nova_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Changes in openstack-ansible-os_nova 14.2.2..14.2.4 --------------------------------------------------- abe370f Rename release note to unique hash fcee396 Rename reno to avoid conflict on integrated repo a493d9e Reduce init restart/kill times 423c35e Ensure the components are isolated from the system ecb2932 Allow libvirt rbd params to be independent of cinder eef8373 Add nova-lxd storage-pool option for ZFS storage backend Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 19 ++++++++++++++++++ .../libvirt-rbd-independent-5876349073463cc3.yaml | 8 ++++++++ ...ova-init-config-overrides-7221a8f9d5be9291.yaml | 9 +++++++++ .../nova_init_time_settings-cef7e89ab41da256.yaml | 23 ++++++++++++++++++++++ tasks/nova_init_systemd.yml | 4 +++- templates/lxd-init.sh.j2 | 3 +++ templates/nova-systemd-init.j2 | 13 ++++++++++-- templates/nova-upstart-init.j2 | 4 ++++ templates/nova.conf.j2 | 6 ++---- 9 files changed, 82 insertions(+), 7 deletions(-)

1 0

[openstackansible] openstack-ansible-os_swift 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are tickled pink to announce the release of: openstack-ansible-os_swift 14.2.4: os_swift for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. 14.2.4 ^^^^^^ New Features ************ * New variables have been added to allow a deployer to customize a swift systemd unit file to their liking. * The task dropping the swift systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. * For the "os_swift" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "swift_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Upgrade Notes ************* * For the "os_swift" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "swift_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Changes in openstack-ansible-os_swift 14.2.2..14.2.4 ---------------------------------------------------- 7880e4d Rename release note to unique hash f2a20da Rename reno to avoid conflict on integrated repo 61169ee Set defaults for swift_vars and swift_proxy_vars 4039d1d Reduce init restart/kill times 580a7de Ensure the components are isolated from the system Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 43 ++++++++++++++++++++++ ...ift-init-config-overrides-822ec734e02a0dd1.yaml | 10 +++++ .../swift_init_time_settings-20ea7817cbd2dca9.yaml | 23 ++++++++++++ tasks/swift_init_systemd.yml | 4 +- templates/swift-systemd-init.j2 | 13 ++++++- templates/swift-upstart-init.j2 | 4 ++ 6 files changed, 94 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-os_magnum 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are jazzed to announce the release of: openstack-ansible-os_magnum 14.2.4: os_magnum for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_magnum/ For more details, please see below. 14.2.4 ^^^^^^ New Features ************ * New variables have been added to allow a deployer to customize a magnum systemd unit file to their liking. * The task dropping the magnum systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. * For the "os_magnum" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "magnum_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Upgrade Notes ************* * For the "os_magnum" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "magnum_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Changes in openstack-ansible-os_magnum 14.2.2..14.2.4 ----------------------------------------------------- 9a89312 Rename release note to prevent duplicate 8c7bc0e Rename release note to unique hash 452018d Reduce init restart/kill times 97fa8cb Ensure the components are isolated from the system Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 3 +++ ...num-init-config-overrides-aec21cbbd9da8e4e.yaml | 9 +++++++++ .../magnum_init_time_settings-6ecc4ff27d7dca1.yaml | 23 ++++++++++++++++++++++ tasks/magnum_init.yml | 2 ++ tasks/magnum_init_systemd.yml | 4 +++- templates/magnum-systemd-init.j2 | 13 ++++++++++-- templates/upstart-init.j2 | 4 ++++ 7 files changed, 55 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-security 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are delighted to announce the release of: openstack-ansible-security 14.2.4: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. Changes in openstack-ansible-security 14.1.1..14.2.4 ---------------------------------------------------- 5f49ce1 Add missing STIG ID tags e7185d2 Install python2-pyOpenSSL package on CentOS dd52e48 Prepare vagrant centos/7 box for role testing 2a2b1e6 Fix auditd restart handler d97e7b8 Add conf file entry for chrony Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 9 +++++++++ bindep.txt | 2 +- handlers/main.yml | 11 +++++++---- tasks/misc.yml | 10 +++++++++- vars/redhat.yml | 1 + vars/ubuntu.yml | 1 + 8 files changed, 38 insertions(+), 6 deletions(-)

1 0

[openstackansible] openstack-ansible-os_glance 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are satisfied to announce the release of: openstack-ansible-os_glance 14.2.4: os_glance for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. 14.2.4 ^^^^^^ New Features ************ * New variables have been added to allow a deployer to customize a glance systemd unit file to their liking. * The task dropping the glance systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. * For the "os_glance" role, the systemd unit "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. This value can be adjusted by using the "glance_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Upgrade Notes ************* * For the "os_glance" role, the systemd unit "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. This value can be adjusted by using the "glance_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Changes in openstack-ansible-os_glance 14.2.2..14.2.4 ----------------------------------------------------- 332a740 Rename reno to avoid conflict on integrated repo e640666 Rename release note to unique hash 115e289 Reduce init restart time 0e874f2 Ensure the components are isolated from the system 6e31423 Enable proxy headers parsing Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 9 +++++++++ .../glance-init-config-overrides-dfce7e419061c4da.yaml | 10 ++++++++++ .../notes/glance_init_time_settings-d3cc064fd8acf107.yaml | 15 +++++++++++++++ tasks/glance_init_systemd.yml | 4 +++- templates/glance-api.conf.j2 | 5 +++++ templates/glance-systemd-init.j2 | 11 ++++++++++- templates/glance-upstart-init.j2 | 4 ++++ 7 files changed, 56 insertions(+), 2 deletions(-)

1 0

[openstackansible] openstack-ansible-ironic 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We exuberantly announce the release of: openstack-ansible-ironic 14.2.4: Ironic Role for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ironic/ For more details, please see below. 14.2.4 ^^^^^^ New Features ************ * New variables have been added to allow a deployer to customize a ironic systemd unit file to their liking. * The task dropping the ironic systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. * For the "os_ironic" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "ironic_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Upgrade Notes ************* * For the "os_ironic" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "ironic_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Changes in openstack-ansible-ironic 14.2.2..14.2.4 -------------------------------------------------- 1a70341 Rename release note to unique hash 83b4db5 Rename reno to avoid conflict on integrated repo 1d2d415 Reduce init restart/kill times bc677fb Ensure the components are isolated from the system Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 2 ++ ...nic-init-config-overrides-e73d9fd46a69afcf.yaml | 10 ++++++++++ .../ironic_init_time_settings-b8ab3c3c4d733dc.yaml | 23 ++++++++++++++++++++++ tasks/ironic_init.yml | 1 + tasks/ironic_init_systemd.yml | 4 +++- templates/ironic-systemd-init.j2 | 13 ++++++++++-- templates/ironic-upstart-init.j2 | 4 ++++ 7 files changed, 54 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-os_horizon 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We eagerly announce the release of: openstack-ansible-os_horizon 14.2.4: OpenStack Horizon role for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_horizon/ For more details, please see below. Changes in openstack-ansible-os_horizon 14.2.1..14.2.4 ------------------------------------------------------ 08e3924 Main tasks introduced without tags ca64484 Workaround upstream issue with apache2_module Diffstat (except docs and test files) ------------------------------------- tasks/horizon_apache.yml | 28 +++++++++++++++------------- tasks/main.yml | 4 ++++ 2 files changed, 19 insertions(+), 13 deletions(-)

1 0

[tripleo] os-refresh-config 7.0.0 (pike)
by no-reply＠openstack.org 31 May '17

31 May '17

We are pumped to announce the release of: os-refresh-config 7.0.0: Refresh system configuration This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/os-refresh-config/ For more details, please see below. Changes in os-refresh-config 7.0.0.0b1..7.0.0 --------------------------------------------- 7595019 Updated from global requirements 2e2800e Remove unused Babel requirement afc83a6 Updated from global requirements 03c34b5 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- test-requirements.txt | 5 ++--- 2 files changed, 3 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f3e2fc7..f0b78de 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=2.0.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index bcea9ad..8699541 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,2 +6 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -Babel>=2.3.4 # BSD -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -11 +10 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[tripleo] os-apply-config 7.0.0 (pike)
by no-reply＠openstack.org 31 May '17

31 May '17

We are pleased to announce the release of: os-apply-config 7.0.0: Config files from cloud metadata This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/os-apply-config/ For more details, please see below. Changes in os-apply-config 7.0.0.0b1..7.0.0 ------------------------------------------- 89b0ba7 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b544a52..131a485 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=2.0.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_keystone 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are thrilled to announce the release of: openstack-ansible-os_keystone 14.2.4: os_keystone for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. 14.2.4 ^^^^^^ New Features ************ * New variables have been added to allow a deployer to customize a keystone systemd unit file to their liking. * The task dropping the keystone systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. * For the "os_keystone" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "keystone_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Upgrade Notes ************* * For the "os_keystone" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "keystone_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Changes in openstack-ansible-os_keystone 14.2.2..14.2.4 ------------------------------------------------------- 7dc9083 Rename release note to unique hash b7752ae Rename reno to avoid conflict on integrated repo 20ac76e Reduce init restart/kill times 15f368e Ensure the components are isolated from the system Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 2 ++ ...one-init-config-overrides-1857d5e5bc5a905f.yaml | 10 ++++++++++ ...ystone_init_time_settings-62a1aab4bcfc9779.yaml | 23 ++++++++++++++++++++++ tasks/keystone_init_systemd.yml | 4 +++- templates/keystone-uwsgi_systemd-init.j2 | 13 ++++++++++-- templates/keystone-uwsgi_upstart.conf.j2 | 4 ++++ 6 files changed, 53 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-rabbitmq_server 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are psyched to announce the release of: openstack-ansible-rabbitmq_server 14.2.4: rabbitmq_server for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. Changes in openstack-ansible-rabbitmq_server 14.2.2..14.2.4 ----------------------------------------------------------- 6009b65 Use checksum option when downloading RabbitMQ 8ee6a30 Update RabbitMQ to v3.6.9-1 f080ccb RabbitMQ Upgrade Testing Diffstat (except docs and test files) ------------------------------------- meta/main.yml | 2 +- tasks/rabbitmq_pre_install.yml | 13 +---------- vars/debian.yml | 4 ++-- vars/redhat.yml | 4 ++-- 8 files changed, 39 insertions(+), 63 deletions(-)

1 0

[openstackansible] openstack-ansible-os_neutron 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We contentedly announce the release of: openstack-ansible-os_neutron 14.2.4: os_neutron role for OpenStack- Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_neutron/ For more details, please see below. Changes in openstack-ansible-os_neutron 14.2.3..14.2.4 ------------------------------------------------------ 6f492d1 Clean up cron if l3ha legacy tool is not enabled Diffstat (except docs and test files) ------------------------------------- tasks/main.yml | 1 - tasks/neutron_l3_ha.yml | 20 +++++++++++++++++++- 2 files changed, 19 insertions(+), 2 deletions(-)

1 0

[openstackansible] openstack-ansible-os_heat 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are happy to announce the release of: openstack-ansible-os_heat 14.2.4: os_heat for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. 14.2.4 ^^^^^^ New Features ************ * New variables have been added to allow a deployer to customize a heat systemd unit file to their liking. * The task dropping the heat systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. * For the "os_heat" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "heat_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Upgrade Notes ************* * For the "os_heat" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "heat_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Changes in openstack-ansible-os_heat 14.2.2..14.2.4 --------------------------------------------------- 86573f6 Rename reno to avoid conflict on integrated repo b74cb58 Rename release note to unique hash 03edd98 Reduce init restart/kill times 7e6727d Ensure the components are isolated from the system Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 9 +++++++++ ...eat-init-config-overrides-004872081661a34c.yaml | 10 ++++++++++ .../heat_init_time_settings-5f9f7cd4326ded97.yaml | 23 ++++++++++++++++++++++ tasks/heat_init_systemd.yml | 4 +++- templates/heat-systemd-init.j2 | 13 ++++++++++-- templates/heat-upstart-init.j2 | 4 ++++ 6 files changed, 60 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-memcached_server 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are psyched to announce the release of: openstack-ansible-memcached_server 14.2.4: memcached_server for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. Changes in openstack-ansible-memcached_server 14.1.1..14.2.4 ------------------------------------------------------------ 989d695 Install python2-pyOpenSSL package on CentOS Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_aodh 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We contentedly announce the release of: openstack-ansible-os_aodh 14.2.4: os_aodh for OpenStack Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. 14.2.4 ^^^^^^ New Features ************ * New variables have been added to allow a deployer to customize a aodh systemd unit file to their liking. * The task dropping the aodh systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. * For the "os_aodh" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "aodh_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Upgrade Notes ************* * For the "os_aodh" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "aodh_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Changes in openstack-ansible-os_aodh 14.2.2..14.2.4 --------------------------------------------------- c9020b0 Rename reno to avoid conflict on integrated repo 46ae6c1 Rename release note to unique hash 22b0048 Reduce init restart/kill times 2b312c2 Ensure the components are isolated from the system Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 7 +++++++ ...odh-init-config-overrides-f152b8fd098efb0d.yaml | 10 ++++++++++ .../aodh_init_time_settings-9661d23a9bb6682c.yaml | 23 ++++++++++++++++++++++ tasks/aodh_init_systemd.yml | 4 +++- templates/aodh-systemd-init.j2 | 13 ++++++++++-- templates/aodh-upstart-init.j2 | 4 ++++ 6 files changed, 58 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-os_ceilometer 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are ecstatic to announce the release of: openstack-ansible-os_ceilometer 14.2.4: os_ceilometer role for OpenStack-Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. 14.2.4 ^^^^^^ Known Issues * When executing a deployment which includes the telemetry systems (ceilometer, gnocchi, aodh), the repo build will fail due to the inability for pip to read the constraints properly from the extras section in ceilometer's setup.cfg. The current workaround for this is to add the following content to "/etc/openstack_deploy/user_variables.yml". repo_build_upper_constraints_overrides: - gnocchiclient<3.0.0 Changes in openstack-ansible-os_ceilometer 14.2.3..14.2.4 --------------------------------------------------------- 2cee5ac Add known issue for gnocchiclient build failure Diffstat (except docs and test files) ------------------------------------- .../notes/gnocchiclient-build-fail-afc794ae014653ee.yaml | 15 +++++++++++++++ 1 file changed, 15 insertions(+)

1 0

[tripleo] os-net-config 7.0.0 (pike)
by no-reply＠openstack.org 31 May '17

31 May '17

We are happy to announce the release of: os-net-config 7.0.0: OpenStack network configuration This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through launchpad: http://bugs.launchpad.net/os-net-config For more details, please see below. Changes in os-net-config 7.0.0.0b1..7.0.0 ----------------------------------------- e7e81ac Remove unused Babel setup e5cf068 Configure mtu value for DPDK port ed0f6e6 Removed vlan port on ovs_user_bridge in dpdk bond samples b905e0d os_net_config should map nics that are down if nic is in mapping file Diffstat (except docs and test files) ------------------------------------- etc/os-net-config/samples/ovs_dpdk.json | 1 + etc/os-net-config/samples/ovs_dpdk.yaml | 2 + etc/os-net-config/samples/ovs_dpdk_bond.json | 9 ---- etc/os-net-config/samples/ovs_dpdk_bond.yaml | 6 --- os_net_config/impl_ifcfg.py | 2 + os_net_config/objects.py | 66 ++++++++++++++++------------ os_net_config/utils.py | 30 ++++++++++--- requirements.txt | 1 - setup.cfg | 14 ------ 12 files changed, 112 insertions(+), 71 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d085a12..36544e1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +5,0 @@ anyjson>=0.3.3 # BSD -Babel>=2.3.4 # BSD

1 0

[openstackansible] openstack-ansible-haproxy_server 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are jazzed to announce the release of: openstack-ansible-haproxy_server 14.2.4: haproxy_server role for OpenStack-Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-haproxy_server/ For more details, please see below. Changes in openstack-ansible-haproxy_server 14.2.3..14.2.4 ---------------------------------------------------------- b29a72f Improve role idempotency 3124b1e Download hatop to /tmp Diffstat (except docs and test files) ------------------------------------- tasks/haproxy_install_hatop.yml | 5 +++-- tasks/haproxy_pre_install.yml | 33 +++++++++++++++++++++------------ tasks/haproxy_ssl_key_store.yml | 2 -- tox.ini | 2 +- 4 files changed, 25 insertions(+), 17 deletions(-)

1 0

[openstackansible] openstack-ansible-galera_server 14.2.4 (newton)
by no-reply＠openstack.org 31 May '17

31 May '17

We are overjoyed to announce the release of: openstack-ansible-galera_server 14.2.4: Galera Server role for OpenStack-Ansible This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. 14.2.4 ^^^^^^ New Features * Implements SSL connection ability to MySQL. "galera_use_ssl" option has to be set to "true" (default), in this case playbooks create self-signed SSL bundle and sets up MySQL configs to use it or distributes user-provided bundle throughout Galera nodes. Changes in openstack-ansible-galera_server 14.2.1..14.2.4 --------------------------------------------------------- fffeb4b Added Galera SSL support Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 20 +++++++ .../notes/implement-ssl-dd42ad2ff91af0bd.yaml | 6 ++ tasks/galera_post_install.yml | 7 +++ tasks/galera_ssl.yml | 54 ++++++++++++++++++ tasks/galera_ssl_key_create.yml | 65 ++++++++++++++++++++++ templates/my.cnf.j2 | 5 ++ tox.ini | 9 +++ 7 files changed, 166 insertions(+)

1 0

[tripleo] os-collect-config 7.0.0 (pike)
by no-reply＠openstack.org 31 May '17

31 May '17

We are gleeful to announce the release of: os-collect-config 7.0.0: Collect and cache metadata, run hooks on changes. This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/os-collect-config/ For more details, please see below. Changes in os-collect-config 7.0.0.0b1..7.0.0 --------------------------------------------- bf91feb Updated from global requirements b572390 Updated from global requirements 66a2dd5 Updated from global requirements 8566ad5 Don't fail on non-valid json in cache files cb171db Use universal_newlines with subprocess.check_output Diffstat (except docs and test files) ------------------------------------- os_collect_config/config_drive.py | 2 +- os_collect_config/ec2.py | 6 +++++- requirements.txt | 6 +++--- test-requirements.txt | 4 ++-- tox.ini | 2 +- 6 files changed, 26 insertions(+), 8 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6619ebf..46cc2fe 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=2.0.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 @@ -7 +7 @@ anyjson>=0.3.3 # BSD -eventlet!=0.18.3,>=0.18.2 # MIT +eventlet!=0.18.3,<0.21.0,>=0.18.2 # MIT @@ -15 +15 @@ oslo.config>=3.22.0 # Apache-2.0 -oslo.log>=3.11.0 # Apache-2.0 +oslo.log>=3.22.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 34c7d94..8699541 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -10 +10 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[openstackansible] openstack-ansible-os_neutron 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are stoked to announce the release of: openstack-ansible-os_neutron 15.1.4: os_neutron role for OpenStack- Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_neutron/ For more details, please see below. Changes in openstack-ansible-os_neutron 15.1.3..15.1.4 ------------------------------------------------------ 4b43221 Fix for lookup and get_url occuring in different places 46864de Clean up cron if l3ha legacy tool is not enabled 60a6a1e Use package module to install distro packages Diffstat (except docs and test files) ------------------------------------- tasks/main.yml | 1 - tasks/neutron_install.yml | 9 ++++++++- tasks/neutron_l3_ha.yml | 20 +++++++++++++++++++- tasks/plumgrid_config.yml | 6 ++++-- 4 files changed, 31 insertions(+), 5 deletions(-)

1 0

[openstackansible] openstack-ansible-os_sahara 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are pumped to announce the release of: openstack-ansible-os_sahara 15.1.4: os_sahara for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_sahara/ For more details, please see below. Changes in openstack-ansible-os_sahara 15.1.3..15.1.4 ----------------------------------------------------- 5e29921 Fix for lookup and get_url occuring in different places Diffstat (except docs and test files) ------------------------------------- tasks/sahara_install.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_designate 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are overjoyed to announce the release of: openstack-ansible-os_designate 15.1.4: os_designate for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_designate/ For more details, please see below. Changes in openstack-ansible-os_designate 15.0.0.0rc1..15.1.4 ------------------------------------------------------------- fc4f0fb Install python2-pyOpenSSL package on CentOS aa2e70b Remove extras directory fa8f2b5 Update repo for stable/ocata 905a7c3 Enable current Designate services 4061ca5 Configure pools.yaml inside Designate role 4d1fba3 Update UPPER_CONSTRAINTS_FILE for stable/ocata b996422 Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 58 +++++++++---- examples/playbook.yml | 1 - extras/conf.d/designate.yml.aio | 3 - extras/env.d/designate.yml | 57 ------------- extras/group_vars_designate.yml | 13 --- extras/haproxy_designate.yml | 10 --- extras/os-designate-install.yml | 95 ---------------------- extras/repo_designate.yml | 4 - extras/user_secrets_designate.yml | 7 -- ...ignate-pools-yaml-support-d693dc2471642167.yaml | 11 +++ tasks/designate_db_setup.yml | 6 +- tasks/designate_post_install.yml | 6 ++ tasks/main.yml | 3 + templates/designate.conf.j2 | 58 +++++++++++-- tox.ini | 6 +- 24 files changed, 168 insertions(+), 350 deletions(-)

1 0

[openstackansible] openstack-ansible-rsyslog_server 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We eagerly announce the release of: openstack-ansible-rsyslog_server 15.1.4: rsyslog_server for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. Changes in openstack-ansible-rsyslog_server 15.0.0.0rc1..15.1.4 --------------------------------------------------------------- a7d4b0d Install python2-pyOpenSSL package on CentOS d82b673 Fix inconsistency for tag 7c9c6de Update repo for stable/ocata 1df82d0 Update UPPER_CONSTRAINTS_FILE for stable/ocata 526768e Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- tasks/main.yml | 4 ++-- tasks/rsyslog_server_post_install.yml | 2 +- tox.ini | 6 +++--- 6 files changed, 9 insertions(+), 8 deletions(-)

1 0

[openstackansible] openstack-ansible-os_glance 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are happy to announce the release of: openstack-ansible-os_glance 15.1.4: os_glance for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_glance/ For more details, please see below. Changes in openstack-ansible-os_glance 15.1.3..15.1.4 ----------------------------------------------------- 79d6b78 Fix for lookup and get_url occuring in different places Diffstat (except docs and test files) ------------------------------------- tasks/glance_install.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-rabbitmq_server 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are thrilled to announce the release of: openstack-ansible-rabbitmq_server 15.1.4: rabbitmq_server for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. Changes in openstack-ansible-rabbitmq_server 15.1.2..15.1.4 ----------------------------------------------------------- 0bc0ed4 Use checksum option when downloading RabbitMQ 9745615 Update RabbitMQ to v3.6.9-1 Diffstat (except docs and test files) ------------------------------------- meta/main.yml | 2 +- tasks/rabbitmq_pre_install.yml | 13 +------------ vars/debian.yml | 4 ++-- vars/redhat.yml | 4 ++-- 6 files changed, 12 insertions(+), 23 deletions(-)

1 0

[openstackansible] openstack-ansible-os_swift 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are pumped to announce the release of: openstack-ansible-os_swift 15.1.4: os_swift for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_swift/ For more details, please see below. 15.1.4 ^^^^^^ New Features * New variables have been added to allow a deployer to customize a swift systemd unit file to their liking. * The task dropping the swift systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. Changes in openstack-ansible-os_swift 15.1.2..15.1.4 ---------------------------------------------------- 70c3795 Rename reno to avoid conflict on integrated repo 3139828 Set defaults for swift_vars and swift_proxy_vars bab51af Ensure the components are isolated from the system 9dec3a6 Optimise apt cache update task Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 43 ++++++++++++++++++++++ meta/main.yml | 2 +- ...ift-init-config-overrides-822ec734e02a0dd1.yaml | 10 +++++ tasks/main.yml | 16 -------- tasks/swift_init_systemd.yml | 4 +- tasks/swift_install.yml | 9 +---- templates/swift-systemd-init.j2 | 9 +++++ 7 files changed, 68 insertions(+), 25 deletions(-)

1 0

[openstackansible] openstack-ansible-os_gnocchi 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are satisfied to announce the release of: openstack-ansible-os_gnocchi 15.1.4: os_gnocchi for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_gnocchi/ For more details, please see below. 15.1.4 ^^^^^^ New Features * The "os_gnocchi" role now includes a facility where you can place your own default "api-paste.ini" or "policy.json" file in "/etc/openstack_deploy/gnocchi" (by default) and it will be deployed to the target host after being interpreted by the template engine. Changes in openstack-ansible-os_gnocchi 15.1.3..15.1.4 ------------------------------------------------------ 5932746 Use uri module for git sourced configs bf1ded9 Provide facility for a complete file override 6c5fdbd Use package module to install distro packages e10fd65 Fix for lookup and get_url occuring in different places 342af2c Cleanup CentOS pkg 5f8da27 Perform an atomic policy file change Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 22 +++++++-- handlers/main.yml | 57 +++++++++++++++++++--- meta/main.yml | 16 +++++- ...nocchi-deploy-config-file-afba6c2a8edac025.yaml | 7 +++ tasks/gnocchi_apache.yml | 23 +++------ tasks/gnocchi_ceph_python_libs.yml | 4 +- tasks/gnocchi_init_common.yml | 27 ---------- tasks/gnocchi_init_systemd.yml | 4 +- tasks/gnocchi_install.yml | 36 ++++++++------ tasks/gnocchi_install_apt.yml | 26 ---------- tasks/gnocchi_install_yum.yml | 24 --------- tasks/gnocchi_post_install.yml | 46 +++++++++-------- tasks/main.yml | 3 +- vars/main.yml | 25 ++++++++++ vars/redhat-7.yml | 2 +- 15 files changed, 177 insertions(+), 145 deletions(-)

1 0

[openstackansible] openstack-ansible-os_rally 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are pleased to announce the release of: openstack-ansible-os_rally 15.1.4: os_rally for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_rally/ For more details, please see below. Changes in openstack-ansible-os_rally 15.1.3..15.1.4 ---------------------------------------------------- 1410d71 Fix for lookup and get_url occuring in different places 20be1b6 Use package module to install distro packages Diffstat (except docs and test files) ------------------------------------- meta/main.yml | 17 ++++++++++++++++- tasks/rally_install.yml | 22 ++++++++++++++++++---- tasks/rally_install_apt.yml | 26 -------------------------- 3 files changed, 34 insertions(+), 31 deletions(-)

1 0

[openstackansible] openstack-ansible-os_nova 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are thrilled to announce the release of: openstack-ansible-os_nova 15.1.4: os_nova for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. 15.1.4 ^^^^^^ Deprecation Notes ***************** * The upstream noVNC developers recommend that the keymap be automatically detected for virtual machine consoles. The defaults for three Ansible variables have been removed: * nova_console_keymap * nova_novncproxy_vnc_keymap * nova_spice_console_keymap The "nova.conf" template still includes these variables and it sets the keymap configuration option. Deployers who have customized this setting will not see a change in their "nova.conf". Bug Fixes ********* * Upgrading from Newton to Ocata will now correctly add existing Nova instances to the "nova_cell1_name" cell. For more information see bug 1682169 (https://bugs.launchpad.net/openstack- ansible/+bug/1682169). Changes in openstack-ansible-os_nova 15.1.3..15.1.4 --------------------------------------------------- 17dd2dd Get Cell UUID based on Cell name variable b3e55c7 Add release note for cell_V2 upgrade fix 5223270 Fix upgrades to map existing nova instances to cell1 5339cc3 Add venv_tag local fact f46544a Remove default for nova_console_keymap c4352a8 Enable using btrfs as a backend 13e78ec Remove trailing slash in nginx config 8aacdd0 Fix for lookup and get_url occuring in different places e29980d Cleanup CentOS pkg Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 9 +++++---- .../cell_v2_map_instances-dfa21951a3dcd2f5.yaml | 5 +++++ .../remove-console-keymap-ae255da81979a3a5.yaml | 14 +++++++++++++ tasks/nova_db_post_setup.yml | 23 ++++++++++++++++++++++ tasks/nova_install.yml | 18 ++++++++++++++++- templates/lxd-init.sh.j2 | 13 ++++++++++++ templates/nova-placement-nginx.conf.j2 | 2 +- templates/nova.conf.j2 | 8 ++++++-- vars/redhat-7.yml | 2 +- 9 files changed, 85 insertions(+), 9 deletions(-)

1 0

[openstackansible] openstack-ansible-os_heat 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are delighted to announce the release of: openstack-ansible-os_heat 15.1.4: os_heat for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_heat/ For more details, please see below. Changes in openstack-ansible-os_heat 15.1.3..15.1.4 --------------------------------------------------- cbe917f Fix for lookup and get_url occuring in different places 1c97856 Use package module to install distro packages Diffstat (except docs and test files) ------------------------------------- meta/main.yml | 2 +- tasks/heat_install.yml | 28 ++++++++++++++++++---------- tasks/heat_install_apt.yml | 26 -------------------------- tasks/heat_install_yum.yml | 25 ------------------------- 4 files changed, 19 insertions(+), 62 deletions(-)

1 0

[openstackansible] openstack-ansible-os_horizon 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are excited to announce the release of: openstack-ansible-os_horizon 15.1.4: OpenStack Horizon role for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_horizon/ For more details, please see below. Changes in openstack-ansible-os_horizon 15.1.3..15.1.4 ------------------------------------------------------ 2543537 Fix for lookup and get_url occuring in different places c41844e Optimise apt cache update task Diffstat (except docs and test files) ------------------------------------- meta/main.yml | 2 +- tasks/horizon_install.yml | 21 +++++++++++---------- 2 files changed, 12 insertions(+), 11 deletions(-)

1 0

[openstackansible] openstack-ansible-os_trove 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are ecstatic to announce the release of: openstack-ansible-os_trove 15.1.4: os_trove role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_trove/ For more details, please see below. Changes in openstack-ansible-os_trove 15.1.3..15.1.4 ---------------------------------------------------- 51b3891 Fix for lookup and get_url occuring in different places Diffstat (except docs and test files) ------------------------------------- tasks/trove_install.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-plugins 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are overjoyed to announce the release of: openstack-ansible-plugins 15.1.4: plugins for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-plugins/ For more details, please see below. Changes in openstack-ansible-plugins 15.1.1..15.1.4 --------------------------------------------------- 9ce61bd Don't log password arguments of keystone module Diffstat (except docs and test files) ------------------------------------- library/keystone | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-)

1 0

[openstackansible] openstack-ansible-os_cinder 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are pumped to announce the release of: openstack-ansible-os_cinder 15.1.4: os_cinder role for OpenStack- Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_cinder/ For more details, please see below. Changes in openstack-ansible-os_cinder 15.1.3..15.1.4 ----------------------------------------------------- b0a1d9e Fix for lookup and get_url occuring in different places 2e4db35 Cleanup CentOS pkg Diffstat (except docs and test files) ------------------------------------- tasks/cinder_install.yml | 9 ++++++++- vars/redhat-7.yml | 4 ++-- 2 files changed, 10 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-memcached_server 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We exuberantly announce the release of: openstack-ansible-memcached_server 15.1.4: memcached_server for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-memcached_server/ For more details, please see below. Changes in openstack-ansible-memcached_server 15.1.2..15.1.4 ------------------------------------------------------------ ddd1dc4 enable memcached for CentOS Diffstat (except docs and test files) ------------------------------------- handlers/main.yml | 1 + 1 file changed, 1 insertion(+)

1 0

[openstackansible] openstack-ansible-os_barbican 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are overjoyed to announce the release of: openstack-ansible-os_barbican 15.1.4: os_barbican for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_barbican/ For more details, please see below. 15.1.4 ^^^^^^ New Features * New variables have been added to allow a deployer to customize a barbican systemd unit file to their liking. * The task dropping the barbican systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. Changes in openstack-ansible-os_barbican 15.1.3..15.1.4 ------------------------------------------------------- 2d08717 Fix for lookup and get_url occuring in different places 7d81e74 Use package module to install distro packages Diffstat (except docs and test files) ------------------------------------- .travis.yml | 29 -------------------- ...can-init-config-overrides-ffce7e419061c4da.yaml | 10 ------- meta/main.yml | 17 +++++++++++- ...can-init-config-overrides-ffce7e419061c4da.yaml | 10 +++++++ tasks/barbican_install.yml | 23 ++++++++++++---- tasks/barbican_install_apt.yml | 32 ---------------------- 6 files changed, 44 insertions(+), 77 deletions(-)

1 0

[openstackansible] openstack-ansible-os_magnum 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are psyched to announce the release of: openstack-ansible-os_magnum 15.1.4: os_magnum for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_magnum/ For more details, please see below. Changes in openstack-ansible-os_magnum 15.1.3..15.1.4 ----------------------------------------------------- f452cc5 Fix for lookup and get_url occuring in different places d927f91 Added debug variable support ff1d9bb Use package module to install distro packages Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 3 +++ meta/main.yml | 16 +++++++++++++++- tasks/magnum_install.yml | 22 ++++++++++++++++++---- tasks/magnum_install_apt.yml | 26 -------------------------- templates/magnum.conf.j2 | 1 + 5 files changed, 37 insertions(+), 31 deletions(-)

1 0

[openstackansible] openstack-ansible-ironic 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We contentedly announce the release of: openstack-ansible-ironic 15.1.4: Ironic Role for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ironic/ For more details, please see below. Changes in openstack-ansible-ironic 15.1.3..15.1.4 -------------------------------------------------- 4110fca Fix for lookup and get_url occuring in different places a0458d3 Use package module to install distro packages Diffstat (except docs and test files) ------------------------------------- meta/main.yml | 3 ++- tasks/ironic_api_install.yml | 21 --------------------- tasks/ironic_conductor_install.yml | 29 ----------------------------- tasks/ironic_install.yml | 28 +++++++++++++++++++--------- tasks/ironic_install_apt.yml | 34 ---------------------------------- tasks/main.yml | 10 ---------- vars/main.yml | 32 ++++++++++++++++++++++++++++++++ 7 files changed, 53 insertions(+), 104 deletions(-)

1 0

[openstackansible] openstack-ansible-os_ceilometer 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We enthusiastically announce the release of: openstack-ansible-os_ceilometer 15.1.4: os_ceilometer role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_ceilometer/ For more details, please see below. 15.1.4 ^^^^^^ New Features * The "os_ceilometer" role now includes a facility where you can place your own templates in "/etc/openstack_deploy/ceilometer" (by default) and it will be deployed to the target host after being interpreted by the template engine. If no file is found there, the fallback of the git sourced template is used. Changes in openstack-ansible-os_ceilometer 15.1.3..15.1.4 --------------------------------------------------------- b4fa7cf Source template files from git or deploy host 983f2fa Add venv_tag local fact 9641155 Fix for lookup and get_url occuring in different places 7c9ab5d Perform an atomic policy file change Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 42 ++++++++-- handlers/main.yml | 57 +++++++++++-- .../deploy-node-config-files-1b272a3ec7ed71b8.yaml | 7 ++ tasks/ceilometer_apache.yml | 14 ++-- tasks/ceilometer_init_common.yml | 29 ------- tasks/ceilometer_init_systemd.yml | 2 + tasks/ceilometer_install.yml | 16 +++- tasks/ceilometer_post_install.yml | 93 +++++++++++----------- tasks/main.yml | 2 +- templates/rootwrap.conf.j2 | 27 +++++++ vars/main.yml | 42 ++++++++++ 11 files changed, 232 insertions(+), 99 deletions(-)

1 0

[openstackansible] openstack-ansible-security 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are happy to announce the release of: openstack-ansible-security 15.1.4: OpenStack-Ansible: Host security hardening This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-security/ For more details, please see below. Changes in openstack-ansible-security 15.1.1..15.1.4 ---------------------------------------------------- c58c839 Fix path to daemon init params file Diffstat (except docs and test files) ------------------------------------- tasks/rhel6stig/file_perms.yml | 4 ++-- vars/redhat.yml | 1 + vars/ubuntu.yml | 1 + 3 files changed, 4 insertions(+), 2 deletions(-)

1 0

[openstackansible] openstack-ansible-os_keystone 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We enthusiastically announce the release of: openstack-ansible-os_keystone 15.1.4: os_keystone for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_keystone/ For more details, please see below. Changes in openstack-ansible-os_keystone 15.1.3..15.1.4 ------------------------------------------------------- 600e0e5 Fix for lookup and get_url occuring in different places Diffstat (except docs and test files) ------------------------------------- tasks/keystone_install.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible-os_aodh 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are pleased to announce the release of: openstack-ansible-os_aodh 15.1.4: os_aodh for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_aodh/ For more details, please see below. Changes in openstack-ansible-os_aodh 15.1.3..15.1.4 --------------------------------------------------- a1ec96e Fix for lookup and get_url occuring in different places Diffstat (except docs and test files) ------------------------------------- tasks/aodh_install.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-)

1 0

[openstackansible] openstack-ansible 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We eagerly announce the release of: openstack-ansible 15.1.4: Ansible playbooks for deploying OpenStack This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 15.1.4 ^^^^^^ New Features ************ * New variables have been added to allow a deployer to customize a barbican systemd unit file to their liking. * The task dropping the barbican systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. Bug Fixes ********* * Upgrading from Newton to Ocata will now correctly add existing Nova instances to the "nova_cell1_name" cell. For more information see bug 1682169 (https://bugs.launchpad.net/openstack- ansible/+bug/1682169). * The version 2.1.0 of ldappool fix the issue with TLS bind on ldapserver. It is set in global pin to fix the issue in OSA until the fix is made upstream. Changes in openstack-ansible 15.1.3..15.1.4 ------------------------------------------- 0ff1e58 Add nc to the packages to install during upgrade 53c60a2 Add license boilerplate to Vagrantfile 08faa55 Add ldappool constraints to global pins 167adfc SHA Bump Nova role to fix upgrade path 7beba50 Update Ansible to 2.2.3.0 d94098f Ceilometer: Update URL used to source default configs ea2d8ae Update lxc_hosts role SHA for CentOS/cron 979a1ef Gnocchi: Update URL used to source default configs b8b82a3 Change swap creation command for CentOS a5a7ce5 Fix os_cmd script for tty 6734e9b Isolate ansible-runtime venv site packages 11d46a5 Bump unbound role tag e03f99e scripts: sources-branch-update.sh: Remove double 'sed' 13791b1 Implement http-check on haproxy services 467ece1 Update all SHAs for 15.1.4 4ab6b84 [docs] Fix Ocata deploy guide link c36e5fd Update sources-branch-updater to cater for git sourced config Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 12 +++++ ansible-role-requirements.yml | 50 +++++++++--------- global-requirement-pins.txt | 7 +++ playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 60 +++++++++++----------- playbooks/inventory/group_vars/all.yml | 2 +- playbooks/inventory/group_vars/ceilometer_all.yml | 4 +- playbooks/inventory/group_vars/gnocchi_all.yml | 4 +- playbooks/inventory/host_vars/localhost.yml | 16 ++++++ playbooks/vars/configs/haproxy_config.yml | 18 ++++--- ...can-init-config-overrides-ffce7e419061c4da.yaml | 10 ++++ .../cell_v2_map_instances-dfa21951a3dcd2f5.yaml | 5 ++ releasenotes/notes/ldappool-65dcc48c12d28d07.yaml | 5 ++ scripts/bootstrap-ansible.sh | 10 ++-- scripts/os-cmd | 2 +- scripts/sources-branch-updater.sh | 24 +++------ .../playbooks/memcached-flush.yml | 12 ++++- 19 files changed, 157 insertions(+), 92 deletions(-)

1 0

[openstackansible] openstack-ansible-haproxy_server 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are pleased to announce the release of: openstack-ansible-haproxy_server 15.1.4: haproxy_server role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-haproxy_server/ For more details, please see below. Changes in openstack-ansible-haproxy_server 15.1.3..15.1.4 ---------------------------------------------------------- 778269a Download hatop to /tmp 1b4ad44 Improve role idempotency Diffstat (except docs and test files) ------------------------------------- tasks/haproxy_install_hatop.yml | 6 +++--- tasks/haproxy_pre_install.yml | 33 +++++++++++++++++++++------------ tasks/haproxy_ssl_key_store.yml | 2 -- tox.ini | 2 +- 4 files changed, 25 insertions(+), 18 deletions(-)

1 0

[openstackansible] openstack-ansible-galera_server 15.1.4 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We joyfully announce the release of: openstack-ansible-galera_server 15.1.4: Galera Server role for OpenStack-Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-galera_server/ For more details, please see below. Changes in openstack-ansible-galera_server 15.1.3..15.1.4 --------------------------------------------------------- e47877a Fix conditional check error when run galera-bootstrap tag Diffstat (except docs and test files) ------------------------------------- tasks/galera_bootstrap.yml | 2 ++ 1 file changed, 2 insertions(+)

1 0

[horizon] django_openstack_auth 3.2.0 (pike)
by no-reply＠openstack.org 31 May '17

31 May '17

We are jazzed to announce the release of: django_openstack_auth 3.2.0: Django authentication backend for use with OpenStack Identity This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/django_openstack_auth/ Download the package from: https://pypi.python.org/pypi/django_openstack_auth Please report issues through launchpad: https://bugs.launchpad.net/django-openstack-auth For more details, please see below. Changes in django_openstack_auth 3.1.1..3.2.0 --------------------------------------------- 525b76d Imported Translations from Zanata 0dd5497 Updated from global requirements 4531110 Updated from global requirements d17f699 Updated from global requirements 09233f7 Updated from global requirements 444b317 Imported Translations from Zanata 6eea808 Imported Translations from Zanata 0a730b5 Updated from global requirements bc5f1df Cleanup doc warnings and enforce warning-is-error in sphinx 13af89c Imported Translations from Zanata a8111da Updated from global requirements 4e24faa The python 3.5 added a0f213f Updated from global requirements d8a5179 Update hacking version to fix tests d0a4f14 Implement expiration date alert message 9c02a16 Updated from global requirements b19cf2c Imported Translations from Zanata 8fc4eb7 Imported Translations from Zanata c488505 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- openstack_auth/backend.py | 7 +++- openstack_auth/locale/ar/LC_MESSAGES/django.po | 47 ---------------------- openstack_auth/locale/ca/LC_MESSAGES/django.po | 48 ---------------------- openstack_auth/locale/de/LC_MESSAGES/django.po | 14 ++++--- openstack_auth/locale/fi_FI/LC_MESSAGES/django.po | 47 ---------------------- openstack_auth/locale/fr/LC_MESSAGES/django.po | 31 +++++++++++--- openstack_auth/locale/hi/LC_MESSAGES/django.po | 46 --------------------- openstack_auth/locale/id/LC_MESSAGES/django.po | 13 ++++-- openstack_auth/locale/ko_KR/LC_MESSAGES/django.po | 26 ++++++++++-- openstack_auth/locale/ne/LC_MESSAGES/django.po | 47 ---------------------- openstack_auth/locale/pt/LC_MESSAGES/django.po | 47 ---------------------- openstack_auth/locale/sl_SI/LC_MESSAGES/django.po | 47 ---------------------- openstack_auth/locale/sr/LC_MESSAGES/django.po | 49 ----------------------- openstack_auth/locale/tr_TR/LC_MESSAGES/django.po | 33 ++++++++++++--- openstack_auth/locale/zh_CN/LC_MESSAGES/django.po | 28 ++++++++++--- openstack_auth/locale/zh_TW/LC_MESSAGES/django.po | 26 ++++++++++-- openstack_auth/user.py | 43 +++++++++++++++----- openstack_auth/utils.py | 22 ++++++---- openstack_auth/views.py | 10 +++++ requirements.txt | 8 ++-- setup.cfg | 4 +- setup.py | 2 +- test-requirements.txt | 8 ++-- tox.ini | 2 +- 25 files changed, 215 insertions(+), 442 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f06a736..370fe00 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,3 +4,3 @@ -pbr>=1.8 # Apache-2.0 -Django<1.9,>=1.8 # BSD -oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 +Django<1.10,>=1.8 # BSD +oslo.config>=3.22.0 # Apache-2.0 @@ -9 +9 @@ python-keystoneclient>=3.8.0 # Apache-2.0 -keystoneauth1>=2.18.0 # Apache-2.0 +keystoneauth1>=2.20.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 4ccc23e..58047f3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,3 +4,3 @@ -hacking<0.11,>=0.10.0 -Babel>=2.3.4 # BSD -coverage>=4.0 # Apache-2.0 +hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +Babel!=2.4.0,>=2.3.4 # BSD +coverage!=4.4,>=4.0 # Apache-2.0 @@ -9 +9 @@ mox3!=0.19.0,>=0.7.0 # Apache-2.0 -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[release] reno 2.3.1
by no-reply＠openstack.org 31 May '17

31 May '17

We are satisfied to announce the release of: reno 2.3.1: RElease NOtes manager The source is available from: http://git.openstack.org/cgit/openstack/reno Download the package from: https://pypi.python.org/pypi/reno Please report issues through launchpad: http://bugs.launchpad.net/reno For more details, please see below. 2.3.1 ^^^^^ Other Notes * The oslosphinx dependency for building documentation is now optional. This breaks a build cycle between oslosphinx and reno. Changes in reno 2.3.0..2.3.1 ---------------------------- e3dcbdd Make oslosphinx requirement optional 320736b Remove oslotest from test-requirements.txt e2d60c0 fix the logic for deciding what to show as the "current" series Diffstat (except docs and test files) ------------------------------------- .../notes/optional-oslosphinx-55843a7f80a14e58.yaml | 5 +++++ reno/scanner.py | 11 ++++++++++- test-requirements.txt | 1 - 5 files changed, 31 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 2f939a5..9680a52 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +11,0 @@ oslosphinx>=2.5.0 # Apache-2.0 -oslotest>=1.10.0 # Apache-2.0

1 0

[ironic] ironic-ui 2.2.1 (ocata)
by no-reply＠openstack.org 31 May '17

31 May '17

We are jazzed to announce the release of: ironic-ui 2.2.1: Ironic plugin UI for Horizon to allow users to view and manage bare metal nodes, ports and drivers. This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/ironic-ui Download the package from: https://pypi.python.org/pypi/ironic-ui Please report issues through launchpad: http://bugs.launchpad.net/ironic-ui For more details, please see below. Changes in ironic-ui 2.2.0..2.2.1 --------------------------------- 565fc3f Updated from global requirements 6a0cdbf Updated from global requirements 0d7fbcd Imported Translations from Zanata 585a823 Correct horizon dir in installation doc f5c5494 Update UPPER_CONSTRAINTS_FILE for stable/ocata 0717158 Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_ui/locale/de/LC_MESSAGES/djangojs.po | 55 ++++++- ironic_ui/locale/id/LC_MESSAGES/djangojs.po | 55 ++++++- ironic_ui/locale/ja/LC_MESSAGES/djangojs.po | 43 ++++- ironic_ui/locale/zh_CN/LC_MESSAGES/djangojs.po | 180 +++++++++++++++++++-- .../source/locale/de/LC_MESSAGES/releasenotes.po | 102 ------------ .../source/locale/fr/LC_MESSAGES/releasenotes.po | 105 ------------ .../source/locale/id/LC_MESSAGES/releasenotes.po | 101 ------------ .../source/locale/ja/LC_MESSAGES/releasenotes.po | 96 ----------- .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 96 ----------- .../source/locale/ru/LC_MESSAGES/releasenotes.po | 101 ------------ .../locale/zh_CN/LC_MESSAGES/releasenotes.po | 68 -------- tox.ini | 2 +- 14 files changed, 313 insertions(+), 694 deletions(-)

1 0

puppet-pacemaker 0.6.0
by no-reply＠openstack.org 31 May '17

31 May '17

We are excited to announce the release of: puppet-pacemaker 0.6.0: Puppet module for Pacemaker Download the package from: https://tarballs.openstack.org/puppet-pacemaker/ For more details, please see below. Changes in puppet-pacemaker 0.5.0..0.6.0 ---------------------------------------- 05cb65f Release 0.6.0 d3a5dac Update tox configuration de9d199 Add retries for pcs cluster setup aa42b5d Add support for Pacemaker Remote to stonith drivers. 7403757 Add verify_on_create for remote resources 5134f1f Fix up race when setting a property 9081388 Fix a typo in ipv6 addrlabel 0c2e233 Add support for ipv6_addrlabel with IPaddr2 RA 0763607 Fix potential cluster setup race 56ef1e2 Update test-requirements.txt c1c2031 Fixes for race condition when adding primitives without OCF present fe4d448 Remove spurious CIB backup files b135ebb Add rspec tests for stonith fences 4552c9f Disable the deprecation warnings as errors for puppet-syntax Diffstat (except docs and test files) ------------------------------------- Rakefile | 1 + agent_generator/agent_generator.rb | 7 +- bindep.txt | 11 +++ lib/pacemaker/options.yaml | 9 +- lib/pacemaker/wait.rb | 5 +- lib/pacemaker/xml/debug.rb | 21 ++++- lib/pacemaker/xml/status.rb | 15 ++-- lib/puppet/provider/pcmk_common.rb | 6 ++ lib/puppet/provider/service/pacemaker_xml.rb | 13 +-- manifests/corosync.pp | 53 ++++++++---- manifests/property.pp | 1 + manifests/resource/ip.pp | 16 +++- manifests/resource/remote.pp | 6 ++ manifests/stonith/fence_apc.pp | 7 +- manifests/stonith/fence_apc_snmp.pp | 7 +- manifests/stonith/fence_bladecenter.pp | 7 +- manifests/stonith/fence_brocade.pp | 7 +- manifests/stonith/fence_cisco_mds.pp | 7 +- manifests/stonith/fence_cisco_ucs.pp | 7 +- manifests/stonith/fence_drac5.pp | 7 +- manifests/stonith/fence_eaton_snmp.pp | 7 +- manifests/stonith/fence_eps.pp | 7 +- manifests/stonith/fence_hpblade.pp | 7 +- manifests/stonith/fence_ibmblade.pp | 7 +- manifests/stonith/fence_idrac.pp | 7 +- manifests/stonith/fence_ifmib.pp | 7 +- manifests/stonith/fence_ilo.pp | 7 +- manifests/stonith/fence_ilo2.pp | 7 +- manifests/stonith/fence_ilo3.pp | 7 +- manifests/stonith/fence_ilo4.pp | 7 +- manifests/stonith/fence_ilo_mp.pp | 7 +- manifests/stonith/fence_imm.pp | 7 +- manifests/stonith/fence_intelmodular.pp | 7 +- manifests/stonith/fence_ipdu.pp | 7 +- manifests/stonith/fence_ipmilan.pp | 7 +- manifests/stonith/fence_ironic.pp | 7 +- manifests/stonith/fence_kdump.pp | 7 +- manifests/stonith/fence_rhevm.pp | 7 +- manifests/stonith/fence_rsb.pp | 7 +- manifests/stonith/fence_scsi.pp | 7 +- manifests/stonith/fence_virt.pp | 7 +- manifests/stonith/fence_vmware_soap.pp | 7 +- manifests/stonith/fence_wti.pp | 7 +- manifests/stonith/fence_xvm.pp | 7 +- metadata.json | 2 +- .../verify_on_create_remote-b4abeace7018480d.yaml | 5 ++ releasenotes/source/conf.py | 4 +- .../pacemaker_stonith_fence_ipmilan_spec.rb | 99 ++++++++++++++++++++++ spec/unit/puppet/provider/pacemaker_xml_spec.rb | 22 ++--- .../puppet/provider/service/pacemaker_xml_spec.rb | 9 ++ test-requirements.txt | 11 ++- tox.ini | 3 + 52 files changed, 422 insertions(+), 114 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index bedd666..1ea50a8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,7 @@ -# this is required for the docs build jobs -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 -reno>=0.1.1 # Apache-2.0 +# This is required for the docs build jobs +sphinx>=1.5.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0 + +# This is required for the releasenotes build jobs +# FIXME: reno is manually pinned to !=2.0.0 because of bug #1651995 +reno>=1.8.0,!=2.0.0 # Apache-2.0

1 0

[nova] nova 14.0.7 (newton)
by no-reply＠openstack.org 30 May '17

30 May '17

We are glad to announce the release of: nova 14.0.7: Cloud computing fabric controller This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 14.0.7 ^^^^^^ Bug Fixes * Includes the fix for bug 1673613 which could cause issues when upgrading and running "nova-manage cell_v2 simple_cell_setup" or "nova-manage cell_v2 map_cell0" where the database connection is read from config and has special characters in the URL. (https://launchpad.net/bugs/1673613) * Fixes bug 1691545 in which there was a significant increase in database connections because of the way connections to cell databases were being established. With this fix, objects related to database connections are cached in the API service and reused to prevent new connections being established for every communication with cell databases. (https://bugs.launchpad.net/nova/+bug/1691545) * The "nova-manage cell_v2 simple_cell_setup" command now creates the default cell0 database connection using the "[database]" connection configuration option rather than the "[api_database]" connection. The cell0 database schema is the *main* database, i.e. the *instances* table, rather than the *api* database schema. In other words, the cell0 database would be called something like "nova_cell0" rather than "nova_api_cell0". Changes in nova 14.0.6..14.0.7 ------------------------------ c350548 Updated from global requirements e3076f5 Handle special characters in database connection URL netloc f9a3c3f Fix the generated cell0 default database name d6a628d Cache database and message queue connection objects b4bbe68 Fixed suspend for PCI passthrough Diffstat (except docs and test files) ------------------------------------- nova/cmd/manage.py | 26 ++++++++++------ nova/context.py | 24 +++++++++++++-- nova/test.py | 3 ++ nova/virt/libvirt/driver.py | 3 +- .../notes/bug-1673613-7357d40ba9ab1fa6.yaml | 9 ++++++ .../notes/bug-1691545-1acd6512effbdffb.yaml | 10 +++++++ ...-single-migration-command-0e98d66e31e02a50.yaml | 7 ++++- ...fault-cell0-db-connection-f9717053cc34778e.yaml | 10 +++++++ requirements.txt | 2 +- 12 files changed, 150 insertions(+), 21 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e95e0d6..0ab0d64 100644 --- a/requirements.txt +++ b/requirements.txt @@ -35 +35 @@ stevedore>=1.16.0 # Apache-2.0 -setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,>=16.0 # PSF/ZPL +setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=34.3.3,>=16.0 # PSF/ZPL

1 0

[horizon] horizon 10.0.4 (newton)
by no-reply＠openstack.org 30 May '17

30 May '17

We are excited to announce the release of: horizon 10.0.4: OpenStack Dashboard This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/horizon/ For more details, please see below. Changes in horizon 10.0.3..10.0.4 --------------------------------- 99f7c8c Image list function should normalize owner filter 85c1415 Always pass the public endpoint to the client bedd322 operation_log: Honor settings parameters 9dda5ad Imported Translations from Zanata aa5814c Correct error in policy action name Diffstat (except docs and test files) ------------------------------------- horizon/middleware/operation_log.py | 4 ++-- openstack_dashboard/api/glance.py | 26 ++++++++++++++++++++-- .../dashboards/project/stacks/tabs.py | 2 +- .../locale/ja/LC_MESSAGES/django.po | 13 ++++++----- 4 files changed, 34 insertions(+), 11 deletions(-)

1 0

[quality] patrole 0.1.0 (pike)
by no-reply＠openstack.org 30 May '17

30 May '17

We high-spiritedly announce the release of: patrole 0.1.0: Patrole is a tool for verifying that Role-Based Access Control is being enforced across OpenStack deployments. This is the first release of patrole. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/patrole Download the package from: https://tarballs.openstack.org/patrole/ Please report issues through launchpad: http://bugs.launchpad.net/patrole For more details, please see below. 0.1.0 ^^^^^ This release marks the first release for Patrole, tagged as 0.1.0. New Features ************ * Add additional compute hypervisor RBAC tests, so that the previously missing hypervisor endpoints are covered. Tests for the following endpoints were written: * show_hypervisor * list_servers_on_hypervisor * show_hypervisor_statistics * show_hypervisor_uptime * search_hypervisor * Added an RBAC test for force-deleting a backup which enforces the cinder policy action: "volume_extension:backup_admin_actions:force_delete". * Adds test for glance's add_metadef_resource_type_association policy. * Add RBAC tests for cinder os-quota-class-sets API, which cover the policy action "volume_extension:quota_classes". * Refactored framework to remove unused "path" argument. Added config options to allow the path to the policy.json files for Nova, Keystone, Cinder, Neutron, and Glance to be configured without needing to manually change code. * Adds RBAC tests for the domain configuration Keystone v3 extension API. * Adds RBAC tests for the encryption types client. * Adds RBAC tests for the project-related endpoints belonging to the OS-EP-FILTER Keystone v3 extension API. * Add RBAC test for listing hypervisors with details. * Merges *rbac_auth* with *rbac_rule_validation*, because *rbac_auth* decentralized logic from *rbac_rule_validation* without providing any authentication-related utility. This change facilitates code maintenance and code readability. * Adds RBAC tests for the Nova os-volumes API which is deprecated from microversion 2.36 onward. * Added RBAC test for the volume services API, which covers the following policy action: "volume_extension:services:index". * Added test for volume summary API. * Added tests for volumes client functions set bootable, reserve, unreserve, and update metadata. Bug Fixes ********* * Corrected the policy action in the "rbac_rule_validation" decorator for the test "test_snapshot_force_delete" from "volume_extension:volume_admin_actions:force_delete" to "volume_extension:snapshot_admin_actions:force_delete". * Removed "rule" kwarg from "rbac_rule_validation" decorator for identity v2 admin tests, because the identity v2 admin API does not do policy enforcement, and instead checks whether the request object has "context_is_admin". Other Notes *********** * Patrole currently supports RBAC testing for Cinder, Glance, Nova, Neutron and Keystone. The release under current development as of this tag is Pike, meaning that every Patrole commit is also tested against master branch during the Pike cycle. However, this does not necessarily mean that using Patrole as of this tag will work against Pike (or future releases) cloud. In addition, backward compatibility with previous releases is not guaranteed. * Updated the class names for identity v2 tests to include the "Admin" substring, to convey the fact that these tests are only intended to test the v2 admin API, not the v2 API. * Renamed update metadata item and delete metadata item tests to accurately reflect what actions are being performed. Changes in patrole 859beb410fa8aaba4a7e6c52a8a5c9ffcd451fea..0.1.0 ------------------------------------------------------------------ b6f415f List hypervisors with details rbac test 0441eab Adds volume summary test reno e52cbc6 Fix rbac_rule_validation log statement raises TypeError 944e8bc Fix compute create volume test race condition 9621202 Remove incorrect compute min_microversions 682a598 Prepare release notes for release 0.1.0 20359be Fix setup.cfg using incorrect entry point 83cb0be Add oslo.policy requirement to requirements.txt fba3135 Removes client aliases b35de58 Remove singleton from RbacUtils constructor 1461ddc Fix plugin.py test directory 20e780f Include class name in resource names for resource cleanup debugging 4bf66a2 Hacking: enable extensions H106, H203 and H904 980bff3 Extra hypervisor rbac tests c15af32 [Gate fix] Fix volume metadata RBAC tests 4cf2ffb Identity V3 Tests - Domain Configurations d12d2eb Remove enforce_type=True from oslo.config set_override d2e2074 Nova test for Volume client 581268e Remove unnecessary create_volume calls b18f98b Add RBAC tests for v3 auth policy actions d55e786 Rename "Rbac Flag" to "Rbac testing" in skip exceptions 0854ded Adds initial hacking checks to Patrole 7cec526 Corrects compute microversion docstrings f1bd2b0 Volume services rbac test 4e9a496 Remove cinder v1 artifacts from code base f6b69e2 Change "admin" literal for admin role to CONF admin_role bbde022 Added stable interface and release information to documentation 3c3fc9a Consolidates rbac_base for v2 and v3 identity tests d7120bb Add force detach volume test. 2c9e3a4 Removes force_backup_delete test 6345995 Adds create metadef resource test e7e552e [Fix gate] Fix failing identity v2 admin tests 45c2b35 Remove heat tests from patrole d0b747b Add RBAC tests for cinder os-quota-class-sets API b45a05e Add RBAC test for force-deleting a backup f568d04 Adds missing volumes client tests c82ce14 Replace generic api_extensions checks 78fc489 Merge rbac_auth with rbac_rule_validation 85f79d7 Creates config options for policy.json paths edcdbec Stop using aliases for creds manager b059d49 Fix up test_volume_actions_rbac 1fa5b2e Keystone v3 tests for endpoint filters for projects e2bfb85 Add additional tests to test_images_rbac 6704253 Add encryption types test b89e584 Move tests from volumes into volumes actions. 2297aa1 Add RBAC test cases to manage cinder volume 7bc35dc Improve patrole core documentation ae7d7bb Fix: the tox cover job was not updating coverage report. 6ed0e03 Adding server evacuate test e46a27d Remove skip exception from virtual interfaces test e7df9c4 Increase unit test coverage for policy parser. 5c4b97d Add volume user messages rbac test 3f4158d Identity V3 Tests - Domains fd1db98 Identity trust rbac tests a810851 Add capabilities and scheduler stats tests a7a2916 Create heat-specific patrole gate 94c1cc6 Add RBAC tests for namespace_tags_client. 6a99c56 Remove admin namespace throughout Patrole - Identity tests 4d6264c Fix non-existent cinder policy action tests. 9909ac6 Remove admin namespace throughout Patrole - Nova tests 706fd34 Remove admin namespace throughout Patrole - Volume tests ba4881b Fix _validate_switch_role throwing incorrect error message 1529351 Fix rbac_rule_validation test being incorrectly skipped 75f2363 Renames switchToRbacRole to toggle_rbac_role a7409cf Fix volume transfers rbac test 6b6c610 Add py3.5 support in setup.cfg 521e5c1 Fix role validation edge case bug in rbac_utils f01a48f RBAC test for compute os-multinic policy action. b83861c Add RBAC tests for the Nova images API. aa19530 Add implied roles rbac tests to identity v3. 7aae506 Fix test_migration_live throwing AttributeError. 9af4e53 Update installation guide fa01d5f Add role-switching validation to Patrole framework. f512433 Identity V3 (ext) Tests - Oauth Consumers 90c7eef Update post_test_hook to use multinode environment. fb18579 Add role assignments rbac tests to identity v3. 78b1925 Fix check-uuid not working 934acae Refactor identity v3 rbac_base to use classmethods. 6da4d21 Identity V3 Tests - Roles ae2ebab Modify policy parser to combine custom and default policy files. d4a4aa6 Add heat resource types rbac tests. ee0205d Compute API Compute Flavor Rxtx Test. 06e3bc6 Tag additional slow tests to run in slow gate. dcddd6e Network tests should take advantage of net_utils to find unused ip. 0d88008 Improve Patrole config options 59c886c Add new regex for "slow test" gate 8eda8cc Refactors exceptions in rbac_rule_validation decorator. 2d95e9d Remove special_fields definition from volume tests. 42933e5 Add server tests for nova. 68015d1 Adding compute server tests 479c603 Add missing requirements ae9db6f Fix oslo_debug_helper not running e1014be Standardize tox 89f498f Configure devstack gate to use UUID tokens 8ec953f Identity V3 rbac_base method refactor 7bae840 Identity V3 tests - Regions 6ebeed0 Fixes IpAddressAlreadyAllocated thrown by fixed_ip port tests. d5d76b8 Fix failing v2 identity user tests by adding admin_only kwarg. c01b1e6 Fix failing neutron port tests for Member role. ca8844b Enhance test_server_actions_rbac with create image actions. 0d537ea Fixes server fault thrown by delete password compute rbac test. 1299894 Enhance validation decorator with error code 280a2a0 Fixes failing flavor access tests for Member role. 9abe87d Fixes router external_fixed_ip tests sometimes failing with Conflict. da03cc0 Update Cinder test that incorrectly handles 404 23923f0 Partially revert removal of time.sleep if v3 auth enabled in conf. 18120de Fixes instance actions compute rbac test failing for Member role. 68d9223 Fixes v3 identity tests with policy actions with rule admin_or_owner. 48c913d Throw skipException for invalid policy actions. 09698bb Fixes test_volume_backup_delete failing during tearDown. 3874300 Fix broken volume tests 426f3cb Compute API Quota Sets RBAC tests. 8590c0c Removal of re-switching of rbac-role from tearDown 61b9049 Switch to admin role during client set up to fix some gate bugs. dbea7df Fixes test_images_member_rbac missing os credentials for image v2. 86fdd63 Decrease overall run time when identity auth is set to v3. d5bd33b Add switchToRbacRole=True to test instance actions in compute. 503c557 Add service validation to Patrole framework 8a8b59f Fix for V2 image failing test cases. 613de66 Fixes many failing identity tests for member. ef1d21d Removing unused admin_client e68ac0b Add negative lookahead to post_test_hook to skip slow tests. 18d92b5 Add @test.attr(type='slow') to slow tests to reduce test run time. 69dacff Fix failing compute volume attachment tests. 52c5565 Add post_test_hook.sh to Patrole. 4a611bf Switch to use stable data_utils 6448b4a Add pip install patrole command to pre_test_hook.sh. 9dd3d31 Compute API Server Actions Test 2c0c55a Default rbac_flag = True for testing in gates. ac64829 Neutron tests - Security Groups 1ee5f4d Fix test coverage tox command for patrole. d028a7e Orchestration API config tests 1272679 Users RBAC test for Keystone API v2 users 313a7f8 Add pre_test_hook.sh for devstack tempest gates. b3b7bc8 Increase unit test coverage for rbac_utils. 8deb578 Compute API Keypairs e6aa86b Cinder tests - Volume types c27904d Cinder tests for Volume hosts policy actions 8913879 Compute API Server Tags Test 34a138c Refactors Patrole framework to only use admin tenant credential type. 889264e Enhance rbac policy parser to correctly interpret user_id policy actions. fc29958 Compute API Suspend Server Test df95870 Changes tox to only run unit tests and moves unit tests to tests/unit. 89cc76d Assisted Volume snapshot RBAC test for Compute v2.1 API roles bada30a Compute API Server Password Test 34552b1 Roles RBAC test for Keystone API v2 roles 322c5b6 Change name of rbac_role_converter to rbac_policy_parser. e87b92e Compute API Server Actions Test bd75098 Adds missing switch to rbac role function call to hypervisors compute test. 8c8e417 Add compute API test for config_drive policy action. 5b9ff75 Compute API Deferred Delete Tests 82443c7 Compute API Availability Zone Tests 1dc1125 Add Subnetpool test cases for RBAC. Rename FloatingIps class name to follow naming convention. 6e8f1e3 Fix for few failing network rbac tests 48c36ce Add floating IP test cases for RBAC. b0475fa Enhance test_server_actions_rbac with index/detail/show server actions. 874222f Add multi-provider networks test cases for RBAC. 8337289 Add metering labels and metering label rules test cases for RBAC. 3a6e3ca Compute API Compute Tenant Networks Tests. dc0ef43 Compute API Instance Usage Audit Log Test. 43ffff3 Compute API Compute Flavor Extra Specs Test. 1b17ee2 Fix for typo of correct volume status b911cc2 Fix for V3 identity failing test cases. d8e4e20 Compute API Aggregates Tests 317b0cc Fix for V2 identity failing test cases. 47056d5 Compute API Floating Ip Pools Test d972919 Renamed Glance test file 7029349 Identity V3 Tests - Policies c3f1c61 Compute API Floating Ips Bulk Tests. cf937f1 Compute API Floating Ips Tests. 84d6d9f Remove discoverable test from compute tests. 33e707d Compute API Agents Tests 83cfad3 Compute API Attach Interfaces Tests. ec28743 Compute API Ips Tests. 7990e52 Compute Admin Server Actions Test 7c46d45 Services test for Keystone version 2 api services 3094936 Compute API Hosts Tests. e9babc6 Identity V3 Tests - Groups 6770009 Projects test for Keystone version 2 api projects b46c30c Compute API Flavor Access Tests. f170f8a Keystone tests - v2 Endpoints ba6c929 Identity V3 tests - Endpoints 1a2186b Neutron tests - Routers bbf9369 Tests for compute security groups. 1246308 Compute API Hypervisor Tests. afddb37 Removes test_access_ips_rbac test because it cannot be tested. 3485a3c Identity V3 Tests - Services 5e05bdd Fixes test_absolute_limits testing the wrong action. 4b51a0d Compute API Instance Actions Tests. ffc2100 Neutron tests - Ports 09cd3a7 Identity V3 Tests - Projects 26b46da Identity V3 Tests - Credentials 9d0d7d6 Identity V3 tests - Users aab4feb Compute API Migrations Tests. 7807ced Compute API Rescue Test. 2d2b890 Compute API Server Diagnostics Test. 2e3bbd3 Compute API Server Groups Test. d203a1c Compute API Server Usage Test. cef6e13 Fix volume transfers RBAC tests 193c7e3 Compute API Server Volume Attachments Test. a6348e1 Copyright and other information correctness ac7c230 Cinder tests - Volume snapshot metadata ebb7c44 Compute Access IPs tests b0c0486 Compute API Services Test. 0066e2b Compute API Simple Tenant Usage Tests 9fc782e Fixes policy rules in neutron containing the keyword tenant_id. e679c14 Cinder tests - Volume backend f17ed2d Cinder tests - Volume transfers be97eb2 Cinder tests - Volume actions 575dd64 Glance tests - Image Metadef Namespace Properties 9c97850 Improve is_admin support in Patrole converter framework. a6fab3b Glance tests - Image Metadef Namespace Resource Types 1d60d6a Glance tests - Image Metadef Namespace and Namespace Objects b25f93d Fixed AT&T Copyright statements eb7e7be Cinder tests - Volume List 5e93025 Cinder tests - Volume Snapshots 652e2a2 Removing rbac_roles from config.py. bf335e9 Cinder tests - Volume QOS 5f8c46b Glance tests - API version 1 e178c30 Rbac tests for compute absolute limits 71704ba Cinder tests - Volume Extend e36e59a Cinder tests - Volume Extensions c079936 Cinder tests - Volume Availability Zone 511c46e Fix volume test copyrights cbd0617 Add try/except block to rbac_rule_validation. b059565 Fixes converter not working for certain edge cases. d1c72e3 Fixes outdated CONF setting in test_networks_rbac. 2006807 Refactor rbac_base class b71cf16 Initial neutron tests db7f981 Glance tests - Image Member 45bc1a6 Improve documentation 3589f2b Initial Cinder tests d35eef2 Cinder tests - Volume Quotas 36eba5e Initial Cinder tests 7cff6d2 Initial Cinder tests da434a2 Initial Cinder tests 25fc8c5 Remove 'MANIFEST.in' 645dfc9 Switch to oslo_log 3bbdd62 update homepage with developer documentation page 617a2a5 Initial glance tests 029d8c3 Initial functionality framework. Includes: rbac_util - Utility for switching between roles for tests. rbac_auth - Determines if a given role is valid for a given api call. rbac_rule_validation - Determines if a allowed proper access and denied improper access (403 error) rbac_role_converter - Converts policy.json files into a list of api's and the roles that can access them. 663aedf Initial Cookiecutter commit Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt new file mode 100644 index 0000000..6871057 --- /dev/null +++ b/requirements.txt @@ -0,0 +1,11 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +pbr>=1.8 # Apache-2.0 +urllib3>=1.15.1 # MIT +oslo.log>=3.11.0 # Apache-2.0 +oslo.config>=3.22.0 # Apache-2.0 +oslo.policy>=1.17.0 # Apache-2.0 +tempest>=14.0.0 # Apache-2.0 +stevedore>=1.20.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..7c97fa7 --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1,16 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +hacking>=0.12.0,!=0.13.0,<0.14 # Apache-2.0 + +sphinx>=1.2.1,!=1.3b1,<1.4 # BSD +oslosphinx>=4.7.0 # Apache-2.0 +reno>=1.8.0 # Apache-2.0 +mock>=2.0 # BSD +coverage>=4.0 # Apache-2.0 +nose # LGPL +nosexcover # BSD +oslotest>=1.10.0 # Apache-2.0 +oslo.policy>=1.17.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 +tempest>=12.1.0 # Apache-2.0

1 0

[nova] nova 15.0.5 (ocata)
by no-reply＠openstack.org 30 May '17

30 May '17

We are excited to announce the release of: nova 15.0.5: Cloud computing fabric controller This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 15.0.5 ^^^^^^ Bug Fixes * Includes the fix for bug 1673613 which could cause issues when upgrading and running "nova-manage cell_v2 simple_cell_setup" or "nova-manage cell_v2 map_cell0" where the database connection is read from config and has special characters in the URL. (https://launchpad.net/bugs/1673613) * Fixes bug 1691545 in which there was a significant increase in database connections because of the way connections to cell databases were being established. With this fix, objects related to database connections are cached in the API service and reused to prevent new connections being established for every communication with cell databases. (https://bugs.launchpad.net/nova/+bug/1691545) Changes in nova 15.0.4..15.0.5 ------------------------------ bc8d072 Fix decoding of encryption key passed to dmcrypt 1b59d60 Catch exception.OverQuota when create image for volume backed instance 92a59b3 convert unicode to string before we connect to rados b501fa7 Handle special characters in database connection URL netloc 62a5b4b Use six.text_type() when logging Instance object f4159d1 Cache database and message queue connection objects fcc931f Parse algorithm from cipher for ephemeral disk encryption cbaa706 Updated from global requirements f5a17d9 Catching OverQuota Exception Diffstat (except docs and test files) ------------------------------------- nova/api/openstack/compute/servers.py | 2 ++ nova/cells/messaging.py | 4 ++- nova/cmd/manage.py | 20 ++++++++---- nova/compute/api.py | 7 ++++ nova/compute/manager.py | 13 ++++---- nova/conf/ephemeral_storage.py | 4 ++- nova/context.py | 24 ++++++++++++-- nova/test.py | 1 + .../functional/regressions/test_bug_1554631.py | 13 ++++---- .../api/openstack/compute/test_server_actions.py | 13 +++++++- .../unit/virt/libvirt/storage/test_dmcrypt.py | 5 +-- nova/utils.py | 12 +++++++ nova/virt/libvirt/storage/dmcrypt.py | 5 +-- nova/virt/libvirt/storage/rbd_utils.py | 6 +++- nova/virt/libvirt/vif.py | 12 +++++-- nova/volume/cinder.py | 4 +-- .../notes/bug-1673613-7357d40ba9ab1fa6.yaml | 9 ++++++ .../notes/bug-1691545-1acd6512effbdffb.yaml | 10 ++++++ requirements.txt | 2 +- 24 files changed, 226 insertions(+), 39 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5f12326..90d0ffb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0

1 0

[keystone] keystone 11.0.2 (ocata)
by no-reply＠openstack.org 30 May '17

30 May '17

We are jazzed to announce the release of: keystone 11.0.2: OpenStack Identity This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/keystone/ For more details, please see below. Changes in keystone 11.0.1..11.0.2 ---------------------------------- 736149c Updated from global requirements e1ee00f Handle NotFound when listing role assignments for deleted users Diffstat (except docs and test files) ------------------------------------- keystone/assignment/core.py | 48 ++++++++++++++++++------- requirements.txt | 2 +- 3 files changed, 83 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1decc3c..1ae6ccf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ Babel>=2.3.4 # BSD -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0

1 0

[oslo] stevedore 1.22.0 (pike)
by no-reply＠openstack.org 30 May '17

30 May '17

We are stoked to announce the release of: stevedore 1.22.0: Manage dynamic plugins for Python applications This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/stevedore Download the package from: https://pypi.python.org/pypi/stevedore Please report issues through launchpad: https://bugs.launchpad.net/python-stevedore For more details, please see below. Changes in stevedore 1.21.0..1.22.0 ----------------------------------- 27500a3 Remove oslotest from test-requirements 1d7b19c Updated from global requirements 56ef734 Updated from global requirements 486d7cd Updated from global requirements 23ef8c3 Update reno for stable/ocata Diffstat (except docs and test files) ------------------------------------- releasenotes/source/index.rst | 1 + releasenotes/source/ocata.rst | 6 ++++++ requirements.txt | 2 +- test-requirements.txt | 5 ++--- 6 files changed, 13 insertions(+), 7 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1e8f8e5..76ecae7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=2.0.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index a96d6cf..bbd7ef8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ Pillow>=2.4.0 # PIL License -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD @@ -8 +8 @@ mock>=2.0 # BSD -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -10 +9,0 @@ testrepository>=0.0.18 # Apache-2.0/BSD -oslotest>=1.10.0 # Apache-2.0

1 0

[oslo] oslo.policy 1.23.0 (pike)
by no-reply＠openstack.org 30 May '17

30 May '17

We high-spiritedly announce the release of: oslo.policy 1.23.0: Oslo Policy library This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.policy Download the package from: https://pypi.python.org/pypi/oslo.policy Please report issues through launchpad: https://bugs.launchpad.net/oslo.policy For more details, please see below. Changes in oslo.policy 1.22.1..1.23.0 ------------------------------------- 2a8d18a Updated from global requirements 4cc1417 Simplify message of exception PolicyNotAuthorized 1a34590 Updated from global requirements 2320ee6 Add Sphinx extension to pretty-print modules 08a38fa Check reStructuredText documents for common style issues. Diffstat (except docs and test files) ------------------------------------- HACKING.rst | 4 +- oslo_policy/generator.py | 22 ++--- oslo_policy/policy.py | 4 +- oslo_policy/sphinxext.py | 157 ++++++++++++++++++++++++++++++++++++ requirements.txt | 2 +- test-requirements.txt | 2 +- 8 files changed, 259 insertions(+), 20 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e56e6ca..a56807d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ oslo.config>=3.22.0 # Apache-2.0 -oslo.i18n>=2.1.0 # Apache-2.0 +oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 3f6d4a2..ab024c8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +13 @@ oslosphinx>=4.7.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[oslo] oslo.log 3.27.0 (pike)
by no-reply＠openstack.org 30 May '17

30 May '17

We are pumped to announce the release of: oslo.log 3.27.0: oslo.log library This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.log Download the package from: https://pypi.python.org/pypi/oslo.log Please report issues through launchpad: https://bugs.launchpad.net/oslo.log For more details, please see below. 3.27.0 ^^^^^^ New Features * If the log format string includes "%(error_summary)s", it will be replaced with a summary of the current error when there is one and with ""-"" when there is no error. If the log format string does not include "%(error_summary)s" the error summary will be appended to the end of the line automatically, only if there is an error. Changes in oslo.log 3.26.1..3.27.0 ---------------------------------- a1b924d Updated from global requirements 76e8bb1 clarify release note for error summary handling 3ecd5c9 fix test description comment e568abd Updated from global requirements da55f6f Oslo i18n 3.15.2 has broken deps a7dbfa3 Remove deprecated module loggers 39a974d Updated from global requirements 2663df2 add line number information to fluentd formatter 9ccd0dc add error_summary support for fluentd formatter c06db3c add error_summary support to JSONFormatter b9f339e refactor error summary logic so it can be reused 0defdcf improve the documentation for log format strings 0caffbd skip built-in exceptions when adding error_summary 426aae5 make handling of error_summary more flexible 48d284a add exception summaries to the main log line 84341f6 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- oslo_log/formatters.py | 93 ++++++++++++-- oslo_log/log.py | 5 +- oslo_log/loggers.py | 29 ----- .../always-add-error-text-715022964364ffa0.yaml | 9 ++ requirements.txt | 4 +- test-requirements.txt | 4 +- 8 files changed, 352 insertions(+), 68 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9d9427c..9cddaa8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,2 +8,2 @@ oslo.config>=3.22.0 # Apache-2.0 -oslo.context>=2.12.0 # Apache-2.0 -oslo.i18n>=2.1.0 # Apache-2.0 +oslo.context>=2.14.0 # Apache-2.0 +oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 60af642..3e4219d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16 @@ oslotest>=1.10.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -19 +19 @@ coverage>=4.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[oslo] oslo.config 4.2.0 (pike)
by no-reply＠openstack.org 30 May '17

30 May '17

We exuberantly announce the release of: oslo.config 4.2.0: Oslo Configuration API This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.config Download the package from: https://pypi.python.org/pypi/oslo.config Please report issues through launchpad: https://bugs.launchpad.net/oslo.config For more details, please see below. Changes in oslo.config 4.1.1..4.2.0 ----------------------------------- f0a915f Remove dependency oslo.i18n from test-requirements.txt 741abca Updated from global requirements ab3b8b6 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- test-requirements.txt | 5 +---- 2 files changed, 2 insertions(+), 5 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 09204d1..4004936 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ stevedore>=1.20.0 # Apache-2.0 -oslo.i18n>=2.1.0 # Apache-2.0 +oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index e440094..87231cb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -19 +19 @@ coverage!=4.4,>=4.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD @@ -23,3 +22,0 @@ reno>=1.8.0 # Apache-2.0 -# Required only for tests -oslo.i18n>=2.1.0 # Apache-2.0 -

1 0

[oslo] oslo.messaging 5.25.0 (pike)
by no-reply＠openstack.org 30 May '17

30 May '17

We are excited to announce the release of: oslo.messaging 5.25.0: Oslo Messaging API This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.messaging Download the package from: https://pypi.python.org/pypi/oslo.messaging Please report issues through launchpad: https://bugs.launchpad.net/oslo.messaging For more details, please see below. Changes in oslo.messaging 5.24.2..5.25.0 ---------------------------------------- aa931f4 Updated from global requirements dad5796 Updated from global requirements d20e89c Add missing {posargs:} to AMQP 1.0 functional tests da02bc2 rabbit: restore synchronous ack/requeue Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/amqpdriver.py | 105 ++++++++++++++++++++++++++-------- requirements.txt | 4 +- tox.ini | 4 +- 3 files changed, 86 insertions(+), 27 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a6bd0b3..6ffc8c1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ oslo.service>=1.10.0 # Apache-2.0 -oslo.i18n>=2.1.0 # Apache-2.0 +oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0 @@ -39 +39 @@ tenacity>=3.2.1 # Apache-2.0 -oslo.middleware>=3.10.0 # Apache-2.0 +oslo.middleware>=3.27.0 # Apache-2.0

1 0

[oslo] debtcollector 1.14.0 (pike)
by no-reply＠openstack.org 30 May '17

30 May '17

We are stoked to announce the release of: debtcollector 1.14.0: A collection of Python deprecation patterns and strategies that help you collect your technical debt in a non- destructive manner. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/debtcollector Download the package from: https://pypi.python.org/pypi/debtcollector Please report issues through launchpad: http://bugs.launchpad.net/debtcollector For more details, please see below. Changes in debtcollector 1.13.0..1.14.0 --------------------------------------- da416d6 Do not require oslotest for testing fba977e Updated from global requirements 6b273fb Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- test-requirements.txt | 5 ++--- 3 files changed, 5 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a22e829..0070b8d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=2.0.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 71fb72a..8ea24fc 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ hacking<0.11,>=0.10.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -9 +9 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD @@ -11 +10,0 @@ oslosphinx>=4.7.0 # Apache-2.0 -oslotest>=1.10.0 # Apache-2.0

1 0

[oslo] oslosphinx 4.13.0 (pike)
by no-reply＠openstack.org 30 May '17

30 May '17

We are chuffed to announce the release of: oslosphinx 4.13.0: OpenStack Sphinx Extensions and Theme This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/oslosphinx Download the package from: https://pypi.python.org/pypi/oslosphinx Please report issues through launchpad: http://bugs.launchpad.net/oslosphinx For more details, please see below. Changes in oslosphinx 4.12.0..4.13.0 ------------------------------------ ef759e9 Fix doc build from tarball using eventlet>0.19.0 82420fe Updated from global requirements Diffstat (except docs and test files) ------------------------------------- oslosphinx/__init__.py | 2 +- test-requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 212ef58..2716d92 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[oslo] oslo.db 4.22.0 (pike)
by no-reply＠openstack.org 30 May '17

30 May '17

We are overjoyed to announce the release of: oslo.db 4.22.0: Oslo Database library This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.db Download the package from: https://pypi.python.org/pypi/oslo.db Please report issues through launchpad: http://bugs.launchpad.net/oslo.db For more details, please see below. 4.22.0 ^^^^^^ Upgrade Notes * oslo.db now logs a warning when the connection URL does not explicitly mention a driver. The default driver is still used, but in some cases, such as MySQL, the default is incompatible with the concurrency library eventlet. * It is strongly recommended to use the PyMySQL driver when connecting to a MySQL-compatible database to ensure the best compatibility with the concurrency library eventlet. To use PyMySQL, ensure the connection URL is specified with "mysql+pymysql://" as the scheme. Changes in oslo.db 4.21.1..4.22.0 --------------------------------- 9523255 Updated from global requirements 1821897 add release note for new warning about missing driver 2166490 Warn on URL without a drivername c23e571 Updated from global requirements 2c53ccd Move oslo.context to test-requirements Diffstat (except docs and test files) ------------------------------------- oslo_db/sqlalchemy/engines.py | 20 ++++++++++ .../warn-incomplete-url-c44cd03baf630c7c.yaml | 14 +++++++ requirements.txt | 5 +-- setup.cfg | 1 + 5 files changed, 83 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d868a68..f60d6aa 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ debtcollector>=1.2.0 # Apache-2.0 -oslo.i18n>=2.1.0 # Apache-2.0 +oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0 @@ -10 +9,0 @@ oslo.config>=3.22.0 # Apache-2.0 -oslo.context>=2.12.0 # Apache-2.0 @@ -13 +12 @@ SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT -sqlalchemy-migrate>=0.9.6 # Apache-2.0 +sqlalchemy-migrate>=0.11.0 # Apache-2.0

1 0

[packaging-rpm] renderspec 1.6.1
by no-reply＠openstack.org 30 May '17

30 May '17

We enthusiastically announce the release of: renderspec 1.6.1: Jinja2 template renderer for generating .spec files Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 1.6.0..1.6.1 ---------------------------------- a97ffcf Sort found archives by mtime for version detection fbef878 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- renderspec/utils.py | 8 +++++--- test-requirements.txt | 2 +- 3 files changed, 11 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 491d0a9..702d9ee 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ mock>=2.0 # BSD -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[ironic] ironic-python-agent 2.1.0 (pike)
by no-reply＠openstack.org 30 May '17

30 May '17

We are thrilled to announce the release of: ironic-python-agent 2.1.0: Ironic Python Agent Ramdisk This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/ironic-python-agent/ For more details, please see below. 2.1.0 ^^^^^ New Features ************ * Adds an extra field "biosdevname" (BIOS given NICs name) to network interface inventory collected by "default" collector of ironic- python-agent. Biosdevname utility is used for collecting bios given NICs name. * Adds new optional NUMA topology collector named "numa_topology". It collects NUMA specific RAM, CPU and NIC information. Known Issues ************ * Collecting the 'biosdevname' field on network interfaces is impossible on any Debian-based images due to the missing 'biosdevname' utility. This includes the CoreOS image, as the CoreOS image utilizes a Debian-based chroot. Bug Fixes ********* * Correct message output when failed to download image. * JSON serialization of logs collected for ironic-python-agent. In python3 logs were encoded as byte strings, which can't be serialized. Make sure that logs are encoded as text for both py2.7 and py3. See https://bugs.launchpad.net/ironic-python- agent/+bug/1668533 for details. Changes in ironic-python-agent 2.0.0..2.1.0 ------------------------------------------- 35ea727 Add a new location of isolinux.bin for Ubuntu 16.04 40ddf86 Fix compatibility with Pint 0.5 efe739f Replace assertRaisesRegexp with assertRaisesRegex fdcb092 Collect NIC name given by BIOS 50f914d Add missing description for params of 'start_iscsi_target'. 116ddde Updated from global requirements cc9e05d NUMA-topology collector fbefa53 Updated from global requirements f57cbcc Prevent tests' unmocked access to utils.execute() 85869a1 Remove unused function _configdrive_location 32ed014 Set valid inspection_dhcp_wait_timeout value in tests 92c33a0 Updated from global requirements 393d686 Add a debug tox environment 819eaf8 Updated from global requirements 1695cb1 Add missing 'autospec' argument to mock.patch e934407 flake8: Specify 'ironic_python_agent' as name of app 000eaa3 Fix logs encoding in py3 b9afdba Updated from global requirements 9c2d0cd Correct failure message output when downloading a07c855 Python 3.4 (py34) is removed from tox envlist 4f938e8 imagebuild: coreos: Build sha256 checksum files 8e1226e Updated from global requirements ec7990b Updated from global requirements 3c27726 imagebuild: tinyipa: Build sha256 checksum files 975f4c7 Use specific end version since liberty is EOL 949f4f5 Use flake8-import-order a2a0db7 Clean up release notes post-ocata release 43b23ac Updated from global requirements Diffstat (except docs and test files) ------------------------------------- imagebuild/coreos/full_trusty_build.sh | 12 + imagebuild/coreos/iso-image-create | 7 +- imagebuild/tinyipa/Makefile | 1 + imagebuild/tinyipa/README.rst | 10 + imagebuild/tinyipa/build-tinyipa.sh | 14 +- imagebuild/tinyipa/build_files/buildreqs.lst | 2 + imagebuild/tinyipa/build_files/finalreqs.lst | 1 + imagebuild/tinyipa/finalise-tinyipa.sh | 15 + ironic_python_agent/agent.py | 2 +- ironic_python_agent/errors.py | 7 + ironic_python_agent/extensions/iscsi.py | 3 + ironic_python_agent/extensions/standby.py | 26 +- ironic_python_agent/hardware.py | 38 ++- ironic_python_agent/hardware_managers/mlnx.py | 3 +- ironic_python_agent/numa_inspector.py | 255 +++++++++++++++ ironic_python_agent/utils.py | 2 +- ...ct_NIC_name_given_by_BIOS-657c68c0ae16365b.yaml | 11 + .../add-numa-topology-info-8c253fd9e56169f1.yaml | 4 + ...ut-when-downloading-image-39f93838d1ed2928.yaml | 3 + ...rializable-collected-logs-ad61022b287dc3e2.yaml | 6 + releasenotes/source/current-series.rst | 5 - releasenotes/source/index.rst | 9 +- releasenotes/source/liberty.rst | 6 +- releasenotes/source/mitaka.rst | 6 +- releasenotes/source/newton.rst | 6 +- releasenotes/source/ocata.rst | 6 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 16 +- setup.cfg | 1 + setup.py | 2 +- test-requirements.txt | 6 +- tox.ini | 8 +- 53 files changed, 1343 insertions(+), 385 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9972014..9e1106f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,2 +4,2 @@ -pbr>=1.8 # Apache-2.0 -eventlet!=0.18.3,>=0.18.2 # MIT +pbr!=2.1.0,>=2.0.0 # Apache-2.0 +eventlet!=0.18.3,<0.21.0,>=0.18.2 # MIT @@ -9 +9 @@ netifaces>=0.10.4 # MIT -oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 +oslo.config>=3.22.0 # Apache-2.0 @@ -11 +11 @@ oslo.concurrency>=3.8.0 # Apache-2.0 -oslo.log>=3.11.0 # Apache-2.0 +oslo.log>=3.22.0 # Apache-2.0 @@ -14 +14 @@ oslo.service>=1.10.0 # Apache-2.0 -oslo.utils>=3.18.0 # Apache-2.0 +oslo.utils>=3.20.0 # Apache-2.0 @@ -17 +17 @@ Pint>=0.5 # BSD -psutil>=3.0.1 # BSD +psutil>=3.2.2 # BSD @@ -19 +19 @@ pyudev # LGPLv2.1+ -requests!=2.12.2,>=2.10.0 # Apache-2.0 +requests!=2.12.2,!=2.13.0,>=2.10.0 # Apache-2.0 @@ -22 +22 @@ six>=1.9.0 # MIT -stevedore>=1.17.1 # Apache-2.0 +stevedore>=1.20.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index d204b3a..2afc89d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ hacking<0.13,>=0.12.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -11,0 +12,2 @@ bashate>=0.2 # Apache-2.0 +flake8-import-order==0.11 # LGPLv3 + @@ -14 +16 @@ doc8 # Apache-2.0 -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[neutron] python-neutronclient 6.3.0 (pike)
by no-reply＠openstack.org 30 May '17

30 May '17

We are thrilled to announce the release of: python-neutronclient 6.3.0: CLI and Client Library for OpenStack Networking This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/python-neutronclient Download the package from: https://pypi.python.org/pypi/python-neutronclient Please report issues through launchpad: https://bugs.launchpad.net/python-neutronclient For more details, please see below. 6.3.0 ^^^^^ New Features * Adds a new "global_request_id" parameter to the Client constructors, which will pass that id on all requests as the "X -OpenStack-Request- ID" header. * Tag operation for subnet, port, subnetpool and router resources are now supported. Changes in python-neutronclient 6.2.0..6.3.0 -------------------------------------------- af869a4 Allow global_request_id in Client constructor d632743 Updated from global requirements 030b8ad Updated from global requirements e406692 Machine-readable output for JSON/YAML format 632671e FWaaS UT: Fake rule should return value returned from API c66f972 Drop deprecated neutronclient.i18n wrapper 5a7e65d Updated from global requirements 235c4e6 Now empty tags are not added to Networks 2e60acd Be explicit about the identity plugin required in unit tests fbef092 Supports adding tags for port, router, subnet, subnetpool 4295dfb Add optional_keys and required_keys to --subport argument ef69c72 Updated from global requirements 4d4e4de Fix using wrong status code in some tests db37751 Updated from global requirements a905f75 Do not append .json to sending URL 6df0b27 Handle log message interpolation by the logger f801289 Revert "HAProxy uses milliseconds for its timeout values." c91f9f2 Don't decode empty response body Diffstat (except docs and test files) ------------------------------------- neutronclient/client.py | 18 ++- neutronclient/i18n.py | 23 ---- neutronclient/neutron/v2_0/__init__.py | 2 +- neutronclient/neutron/v2_0/lb/healthmonitor.py | 7 +- neutronclient/neutron/v2_0/lb/v2/loadbalancer.py | 1 - neutronclient/neutron/v2_0/rbac.py | 1 - neutronclient/neutron/v2_0/tag.py | 5 +- neutronclient/osc/v2/fwaas/firewallgroup.py | 6 +- neutronclient/osc/v2/fwaas/firewallpolicy.py | 4 +- neutronclient/osc/v2/fwaas/firewallrule.py | 13 ++- neutronclient/osc/v2/networking_bgpvpn/bgpvpn.py | 13 ++- neutronclient/osc/v2/trunk/network_trunk.py | 13 ++- neutronclient/osc/v2/utils.py | 7 +- .../unit/osc/v2/networking_bgpvpn/test_bgpvpn.py | 31 ++--- neutronclient/v2_0/client.py | 4 +- .../notes/global_request_id-56856a93b982a6b3.yaml | 6 + ...et-port-subnetpool-router-6250ec4714ee8690.yaml | 4 + requirements.txt | 12 +- test-requirements.txt | 6 +- tox.ini | 2 + 34 files changed, 327 insertions(+), 157 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index db647de..1e6bdaf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,2 +4,2 @@ -pbr>=2.0.0 # Apache-2.0 -cliff>=2.3.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 +cliff>=2.6.0 # Apache-2.0 @@ -9 +9 @@ netaddr!=0.7.16,>=0.7.13 # BSD -osc-lib>=1.2.0 # Apache-2.0 +osc-lib>=1.5.1 # Apache-2.0 @@ -13,2 +13,2 @@ oslo.utils>=3.20.0 # Apache-2.0 -os-client-config>=1.22.0 # Apache-2.0 -keystoneauth1>=2.18.0 # Apache-2.0 +os-client-config>=1.27.0 # Apache-2.0 +keystoneauth1>=2.20.0 # Apache-2.0 @@ -21 +21 @@ six>=1.9.0 # MIT -Babel>=2.3.4 # BSD +Babel!=2.4.0,>=2.3.4 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index b4efe10..f8a0c38 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -13 +13 @@ osprofiler>=1.4.0 # Apache-2.0 -python-openstackclient>=3.3.0 # Apache-2.0 +python-openstackclient!=3.10.0,>=3.3.0 # Apache-2.0 @@ -17 +17 @@ requests-mock>=1.1 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[horizon] horizon 11.0.2 (ocata)
by no-reply＠openstack.org 30 May '17

30 May '17

We enthusiastically announce the release of: horizon 11.0.2: OpenStack Dashboard This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/horizon/ For more details, please see below. Changes in horizon 11.0.1..11.0.2 --------------------------------- a7ec524 Use BooleanField for admin_state_up form 4bcbd2c Update documentation for Theme Preview panel 9a9dc36 Updated from global requirements aab378b Image list function should normalize owner filter 2684552 Remove the invalid example of floating IPs tab from doc 2bf9872 Enable breadcrumbs for AngularIndexView 03aec78 operation_log: Honor settings parameters 7d6d606 Update the access_and_security url 1f2e5a8 Clarify message if key file has wrong permissions cfdaa2e Imported Translations from Zanata 3fac233 Fix issues with updating project/domain members 600d3a9 Softreboot can be done when the instance not in active status 0d0a872 Remove link for user id field on project action log 7603ae6 Use correct policy name for "Edit Network" form setup d6d6032 Remove non-existent "test" target from Make help bc8fa9b Instance snapshots shown in 'boot from image' list 09417eb Define profiler constant to fix /jasmine test run 8ce86d4 Do not try to show L3 agent action when enable_router is False 2366fd7 Populate device_id/owner fields in Admin Edit Port form 45fe2b4 Imported Translations from Zanata b7c8fc2 Imported Translations from Zanata 7fd7439 Updated from global requirements 4d0b785 Correct error in policy action name Diffstat (except docs and test files) ------------------------------------- Makefile | 1 - horizon/browsers/views.py | 16 ++ horizon/locale/pt_BR/LC_MESSAGES/django.po | 17 ++- horizon/locale/pt_BR/LC_MESSAGES/djangojs.po | 14 +- horizon/middleware/operation_log.py | 4 +- horizon/static/horizon/js/horizon.membership.js | 21 ++- horizon/utils/secret_key.py | 4 +- openstack_dashboard/api/glance.py | 24 ++- .../developer/profiler/profiler.module.js | 12 +- .../dashboards/admin/info/tables.py | 4 + .../dashboards/admin/instances/tables.py | 16 ++ .../dashboards/admin/instances/tabs.py | 30 ++++ .../dashboards/admin/instances/views.py | 2 + .../dashboards/admin/networks/forms.py | 16 +- .../dashboards/admin/networks/ports/forms.py | 3 +- .../dashboards/admin/networks/ports/views.py | 2 + .../dashboards/project/firewalls/forms.py | 6 +- .../dashboards/project/firewalls/workflows.py | 11 +- .../dashboards/project/instances/audit_tables.py | 9 +- .../dashboards/project/instances/tables.py | 6 + .../project/instances/workflows/create_instance.py | 18 ++- .../key_pairs/templates/key_pairs/create.html | 2 +- .../key_pairs/templates/key_pairs/import.html | 2 +- .../dashboards/project/networks/forms.py | 11 +- .../dashboards/project/networks/ports/forms.py | 7 +- .../dashboards/project/networks/workflows.py | 12 +- .../dashboards/project/routers/forms.py | 14 +- .../templates/security_groups/create.html | 2 +- .../dashboards/project/security_groups/views.py | 2 +- .../dashboards/project/stacks/mappings.py | 4 +- .../dashboards/project/stacks/tabs.py | 2 +- .../dashboards/project/vpn/forms.py | 14 +- .../vpn/templates/vpn/_add_vpn_service_help.html | 4 +- .../dashboards/project/vpn/workflows.py | 22 +-- .../locale/ja/LC_MESSAGES/django.po | 12 +- .../locale/pt_BR/LC_MESSAGES/django.po | 164 ++++++++++++++++++++- .../locale/pt_BR/LC_MESSAGES/djangojs.po | 139 ++++++++++++++++- openstack_dashboard/templates/angular.html | 2 - 42 files changed, 547 insertions(+), 155 deletions(-)

1 0

openstack-ansible-security 15.1.3 (ocata)
by no-reply＠openstack.org 26 May '17

26 May '17

We eagerly announce the release of: openstack-ansible-security 15.1.3: OpenStack-Ansible: Host security hardening This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 15.1.1..15.1.3 ---------------------------------------------------- c58c839 Fix path to daemon init params file Diffstat (except docs and test files) ------------------------------------- tasks/rhel6stig/file_perms.yml | 4 ++-- vars/redhat.yml | 1 + vars/ubuntu.yml | 1 + 3 files changed, 4 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 15.1.2 (ocata)
by no-reply＠openstack.org 26 May '17

26 May '17

We are glad to announce the release of: openstack-ansible-security 15.1.2: OpenStack-Ansible: Host security hardening This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 15.1.1..15.1.2 ---------------------------------------------------- c58c839 Fix path to daemon init params file Diffstat (except docs and test files) ------------------------------------- tasks/rhel6stig/file_perms.yml | 4 ++-- vars/redhat.yml | 1 + vars/ubuntu.yml | 1 + 3 files changed, 4 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 14.0.6 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are psyched to announce the release of: openstack-ansible-security 14.0.6: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.5..14.0.6 ---------------------------------------------------- bf463a0 Add libxslt headers to bindep 2d07959 Fix issues from new CentOS 7 release Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 ++ tasks/auditd.yml | 2 +- 3 files changed, 9 insertions(+), 3 deletions(-)

1 0

openstack-ansible-security 15.1.1 (ocata)
by no-reply＠openstack.org 26 May '17

26 May '17

We exuberantly announce the release of: openstack-ansible-security 15.1.1: OpenStack-Ansible: Host security hardening This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 15.1.0..15.1.1 ---------------------------------------------------- 77aec08 Change PASS_WARN_DAYS --> PASS_WARN_AGE Diffstat (except docs and test files) ------------------------------------- tasks/rhel6stig/auth.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 14.1.1 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are ecstatic to announce the release of: openstack-ansible-security 14.1.1: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.1.0..14.1.1 ---------------------------------------------------- 83e3c20 Fix issues from new CentOS 7 release 86cc144 Unblock security role gate 4702320 Enable ntp client functionality with chronyd Diffstat (except docs and test files) ------------------------------------- tasks/auditd.yml | 11 +++++++++++ tasks/file_perms.yml | 4 ++++ templates/chrony.conf.j2 | 5 +++-- templates/osas-auditd.j2 | 6 ++++++ 5 files changed, 25 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 15.1.0 (ocata)
by no-reply＠openstack.org 26 May '17

26 May '17

We are stoked to announce the release of: openstack-ansible-security 15.1.0: OpenStack-Ansible: Host security hardening This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 15.1.0 ^^^^^^ Security Issues * The security role will no longer fix file permissions and ownership based on the contents of the RPM database by default. Deployers can opt in for these changes by setting "security_reset_perm_ownership" to "yes". * The tasks that search for ".shosts" and "shosts.equiv" files (STIG ID: RHEL-07-040330) are now skipped by default. The search takes a long time to complete on systems with lots of files and it also causes a significant amount of disk I/O while it runs. Changes in openstack-ansible-security 15.0.0..15.1.0 ---------------------------------------------------- 032d98f Rename vars/common.yml to vars/main.yml e7dc4ee Enable ntp client functionality with chronyd 160cb80 Make .shosts search/removal opt in 3bc5432 Disable file perm/ownership reset Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 4 +- ...-rpm-perms-fix-by-default-b164e39717f0ada7.yaml | 6 + ...shosts-file-search-opt-in-887f600a79eef07e.yaml | 7 + tasks/main.yml | 5 - templates/chrony.conf.j2 | 5 +- vars/common.yml | 337 --------------------- vars/main.yml | 331 +++++++++++++++++++- 10 files changed, 354 insertions(+), 364 deletions(-)

1 0

openstack-ansible-security 13.3.7
by no-reply＠openstack.org 26 May '17

26 May '17

We are overjoyed to announce the release of: openstack-ansible-security 13.3.7: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.7 ---------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 14.0.8 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are chuffed to announce the release of: openstack-ansible-security 14.0.8: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.5..14.0.8 ---------------------------------------------------- bf463a0 Add libxslt headers to bindep 2d07959 Fix issues from new CentOS 7 release Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 ++ tasks/auditd.yml | 2 +- 3 files changed, 9 insertions(+), 3 deletions(-)

1 0

openstack-ansible-security 13.3.16
by no-reply＠openstack.org 26 May '17

26 May '17

We enthusiastically announce the release of: openstack-ansible-security 13.3.16: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.14..13.3.16 ------------------------------------------------------ 65b28f9 Make all tests use upper-constraints 4664346 Use stable/mitaka branch when cloning plugins repo Diffstat (except docs and test files) ------------------------------------- tox.ini | 19 ++----------------- 1 file changed, 2 insertions(+), 17 deletions(-)

1 0

openstack-ansible-security 13.3.18
by no-reply＠openstack.org 26 May '17

26 May '17

We are jazzed to announce the release of: openstack-ansible-security 13.3.18: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.14..13.3.18 ------------------------------------------------------ 65b28f9 Make all tests use upper-constraints 4664346 Use stable/mitaka branch when cloning plugins repo Diffstat (except docs and test files) ------------------------------------- tox.ini | 19 ++----------------- 1 file changed, 2 insertions(+), 17 deletions(-)

1 0

openstack-ansible-security 14.0.3 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are pumped to announce the release of: openstack-ansible-security 14.0.3: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.1..14.0.3 ---------------------------------------------------- 5e8714c Replace github with git.o.o Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- bindep.txt | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-)

1 0

openstack-ansible-security 14.0.4 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We joyfully announce the release of: openstack-ansible-security 14.0.4: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.3..14.0.4 ---------------------------------------------------- 4251bc5 Backport of package optimization Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 4 +- .../chrony-config-variable-7a1a7862c05c9675.yaml | 5 + tasks/aide.yml | 23 ---- tasks/apt.yml | 32 +++++ tasks/auditd.yml | 32 ----- tasks/auth.yml | 75 ----------- tasks/lsm.yml | 31 ----- tasks/mail.yml | 20 --- tasks/misc.yml | 48 +------ tasks/rpm.yml | 41 ++++-- tasks/services.yml | 145 --------------------- tox.ini | 2 +- vars/redhat.yml | 55 ++++++++ vars/ubuntu.yml | 56 ++++++++ 15 files changed, 196 insertions(+), 380 deletions(-)

1 0

openstack-ansible-security 14.0.7 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are psyched to announce the release of: openstack-ansible-security 14.0.7: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.5..14.0.7 ---------------------------------------------------- bf463a0 Add libxslt headers to bindep 2d07959 Fix issues from new CentOS 7 release Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 ++ tasks/auditd.yml | 2 +- 3 files changed, 9 insertions(+), 3 deletions(-)

1 0

openstack-ansible-security 13.3.9
by no-reply＠openstack.org 26 May '17

26 May '17

We are ecstatic to announce the release of: openstack-ansible-security 13.3.9: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.9 ---------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 14.0.1 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We jubilantly announce the release of: openstack-ansible-security 14.0.1: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.0..14.0.1 ---------------------------------------------------- af2226f Use centralised Ansible test scripts Diffstat (except docs and test files) ------------------------------------- tasks/apt.yml | 1 + tox.ini | 67 ++++++++++------------------------------------------ 4 files changed, 29 insertions(+), 78 deletions(-)

1 0

openstack-ansible-security 13.3.4
by no-reply＠openstack.org 26 May '17

26 May '17

We are jazzed to announce the release of: openstack-ansible-security 13.3.4: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 13.3.4 ^^^^^^ New Features ************ * AIDE is configured to skip the entire "/var" directory when it does the database initialization and when it performs checks. This reduces disk I/O and allows these jobs to complete faster. This also allows the initialization to become a blocking process and Ansible will wait for the initialization to complete prior to running the next task. * Although the STIG requires martian packets to be logged, the logging is now disabled by default. The logs can quickly fill up a syslog server or make a physical console unusable. Deployers that need this logging enabled will need to set the following Ansible variable: security_sysctl_enable_martian_logging: yes Upgrade Notes ************* * All of the discretionary access control (DAC) auditing is now disabled by default. This reduces the amount of logs generated during deployments and minor upgrades. The following variables are now set to "no": security_audit_DAC_chmod: no security_audit_DAC_chown: no security_audit_DAC_lchown: no security_audit_DAC_fchmod: no security_audit_DAC_fchmodat: no security_audit_DAC_fchown: no security_audit_DAC_fchownat: no security_audit_DAC_fremovexattr: no security_audit_DAC_lremovexattr: no security_audit_DAC_fsetxattr: no security_audit_DAC_lsetxattr: no security_audit_DAC_setxattr: no Bug Fixes ********* * The "/run" directory is excluded from AIDE checks since the files and directories there are only temporary and often change when services start and stop. * AIDE initialization is now always run on subsequent playbook runs when "initialize_aide" is set to "yes". The initialization will be skipped if AIDE isn't installed or if the AIDE database already exists. See bug 1616281 (https://launchpad.net/bugs/1616281) for more details. * The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly labeled in the auditd logs with the key of "export-V-38568". They are now correctly logged with the key "filesystem_mount-V-38568". Changes in openstack-ansible-security 13.3.3..13.3.4 ---------------------------------------------------- ca9b7de Disable DAC change auditing 775f641 Disable martian logging by default a329034 Exclude /run from AIDE checks c16d117 Ensure AIDE initializes on subsequent runs e0d0e36 Fix numbering on V-38583 Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 22 +++--- handlers/main.yml | 6 -- .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 ++ .../aide-initialization-fix-16ab0223747d7719.yaml | 17 +++++ ...figurable-martian-logging-370ede40b036db0b.yaml | 13 ++++ .../reduce-auditd-logging-633677a74aee5481.yaml | 25 +++++++ tasks/aide.yml | 86 ++++++++++++++++++++++ tasks/boot.yml | 4 +- tasks/kernel.yml | 2 +- tasks/main.yml | 1 + tasks/misc.yml | 49 ------------ templates/osas-auditd.j2 | 8 +- 22 files changed, 293 insertions(+), 94 deletions(-)

1 0

openstack-ansible-security 13.1.3
by no-reply＠openstack.org 26 May '17

26 May '17

We are pumped to announce the release of: openstack-ansible-security 13.1.3: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 13.1.3 ^^^^^^ Bug Fixes * The security role previously set the permissions on all audit log files in "/var/log/audit" to "0400", but this prevents the audit daemon from writing to the active log file. This will prevent "auditd" from starting or restarting cleanly. The task now removes any permissions that are not allowed by the STIG. Any log files that meet or exceed the STIG requirements will not be modified.

1 0

openstack-ansible-security 13.3.6
by no-reply＠openstack.org 26 May '17

26 May '17

We are psyched to announce the release of: openstack-ansible-security 13.3.6: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.6 ---------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 14.2.3 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are excited to announce the release of: openstack-ansible-security 14.2.3: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.1.1..14.2.3 ---------------------------------------------------- 5f49ce1 Add missing STIG ID tags e7185d2 Install python2-pyOpenSSL package on CentOS dd52e48 Prepare vagrant centos/7 box for role testing 2a2b1e6 Fix auditd restart handler d97e7b8 Add conf file entry for chrony Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 9 +++++++++ bindep.txt | 2 +- handlers/main.yml | 11 +++++++---- tasks/misc.yml | 10 +++++++++- vars/redhat.yml | 1 + vars/ubuntu.yml | 1 + 8 files changed, 38 insertions(+), 6 deletions(-)

1 0

openstack-ansible-security 14.1.0 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are tickled pink to announce the release of: openstack-ansible-security 14.1.0: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.8..14.1.0 ---------------------------------------------------- f33e72f Handle SELinux properly when it is disabled Diffstat (except docs and test files) ------------------------------------- tasks/misc.yml | 1 + 1 file changed, 1 insertion(+)

1 0

openstack-ansible-security 13.3.5
by no-reply＠openstack.org 26 May '17

26 May '17

We contentedly announce the release of: openstack-ansible-security 13.3.5: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.4..13.3.5 ---------------------------------------------------- 1446cc3 Fix a minor documentation typo. Diffstat (except docs and test files) ------------------------------------- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 14.2.2 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are jazzed to announce the release of: openstack-ansible-security 14.2.2: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.1.1..14.2.2 ---------------------------------------------------- 5f49ce1 Add missing STIG ID tags e7185d2 Install python2-pyOpenSSL package on CentOS dd52e48 Prepare vagrant centos/7 box for role testing 2a2b1e6 Fix auditd restart handler d97e7b8 Add conf file entry for chrony Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 9 +++++++++ bindep.txt | 2 +- handlers/main.yml | 11 +++++++---- tasks/misc.yml | 10 +++++++++- vars/redhat.yml | 1 + vars/ubuntu.yml | 1 + 8 files changed, 38 insertions(+), 6 deletions(-)

1 0

openstack-ansible-security 13.3.3
by no-reply＠openstack.org 26 May '17

26 May '17

We exuberantly announce the release of: openstack-ansible-security 13.3.3: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.0..13.3.3 ---------------------------------------------------- 373a03e Fix duplicated config options in auditd.conf Diffstat (except docs and test files) ------------------------------------- tasks/auditd.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 13.3.11
by no-reply＠openstack.org 26 May '17

26 May '17

We are satisfied to announce the release of: openstack-ansible-security 13.3.11: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.11 ----------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 13.2.0
by no-reply＠openstack.org 26 May '17

26 May '17

We enthusiastically announce the release of: openstack-ansible-security 13.2.0: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below.

1 0

openstack-ansible-security 13.3.17
by no-reply＠openstack.org 26 May '17

26 May '17

We enthusiastically announce the release of: openstack-ansible-security 13.3.17: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.14..13.3.17 ------------------------------------------------------ 65b28f9 Make all tests use upper-constraints 4664346 Use stable/mitaka branch when cloning plugins repo Diffstat (except docs and test files) ------------------------------------- tox.ini | 19 ++----------------- 1 file changed, 2 insertions(+), 17 deletions(-)

1 0

openstack-ansible-security 14.0.2 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We eagerly announce the release of: openstack-ansible-security 14.0.2: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.1..14.0.2 ---------------------------------------------------- 5e8714c Replace github with git.o.o Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- bindep.txt | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-)

1 0

openstack-ansible-security 13.3.8
by no-reply＠openstack.org 26 May '17

26 May '17

We are overjoyed to announce the release of: openstack-ansible-security 13.3.8: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.8 ---------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 13.1.4
by no-reply＠openstack.org 26 May '17

26 May '17

We are pumped to announce the release of: openstack-ansible-security 13.1.4: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 13.1.4 ^^^^^^ New Features ************ * The audit rules added by the security role now have key fields that make it easier to link the audit log entry to the audit rule that caused it to appear. Bug Fixes ********* * The role previously did not restart the audit daemon after generating a new rules file. The bug (https://launchpad.net/bugs/1590916) has been fixed and the audit daemon will be restarted after any audit rule changes. * When the security role was run in Ansible's check mode and a tag was provided, the "check_mode" variable was not being set. Any tasks which depend on that variable would fail. This bug is fixed (https://bugs.launchpad.net/openstack-ansible/+bug/1590086) and the "check_mode" variable is now set properly on every playbook run.

1 0

openstack-ansible-security 12.0.14
by no-reply＠openstack.org 26 May '17

26 May '17

We are stoked to announce the release of: openstack-ansible-security 12.0.14: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 12.0.14 ^^^^^^^ Bug Fixes * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * Failed access logging is now disabled by default and can be enabled by changing "security_audit_failed_access" to "yes". The rsyslog daemon checks for the existence of log files regularly and this audit rule was triggered very frequently, which led to very large audit logs. * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file.

1 0

openstack-ansible-security 13.3.12
by no-reply＠openstack.org 26 May '17

26 May '17

We are psyched to announce the release of: openstack-ansible-security 13.3.12: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.12 ----------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 13.3.14
by no-reply＠openstack.org 26 May '17

26 May '17

We are chuffed to announce the release of: openstack-ansible-security 13.3.14: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.14 ----------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 13.3.15
by no-reply＠openstack.org 26 May '17

26 May '17

We are delighted to announce the release of: openstack-ansible-security 13.3.15: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.14..13.3.15 ------------------------------------------------------ 65b28f9 Make all tests use upper-constraints 4664346 Use stable/mitaka branch when cloning plugins repo Diffstat (except docs and test files) ------------------------------------- tox.ini | 19 ++----------------- 1 file changed, 2 insertions(+), 17 deletions(-)

1 0

openstack-ansible-security 15.0.0 (ocata)
by no-reply＠openstack.org 26 May '17

26 May '17

We are tickled pink to announce the release of: openstack-ansible-security 15.0.0: OpenStack-Ansible: Host security hardening This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.0.0.0rc2..15.0.0 --------------------------------------------------------- 2d4fb83 Add missing STIG ID tags 82cc48f Install python2-pyOpenSSL package on CentOS 333d11c Install python2-pyOpenSSL package on CentOS dcad939 Only enable ssh, not start 656dad3 Use async for file perms corrections 9f4a20d Use async for updating ClamAV DB 602f3e0 Use async for RPM verification a678596 Fix the regex 9b820be Update repo for stable/ocata 4c23bf1 Update UPPER_CONSTRAINTS_FILE for stable/ocata bf514f7 Update .gitreview for stable/ocata 1025238 Restore RHEL 6 STIG content gating 8d223fe Move test plugins into security role 87b635e Always check for EFI b14056e Don't fail when checking for FIPS dc8dc3d Install chrony when enabled in RHEL7 STIG dc949de Add Ubuntu audit packages for RHEL 7 STIG cdcfb46 Fix clamav_service variable to "clamav-daemon" 6f6c08f Enable RHEL 7 STIG tasks as default [+Docs] cd0fad3 Make umask change opt-in 354b87c Fix copy/paste error in task name c322abe Updated from global requirements ea8a0f0 Remove groupby filter to avoid bug 30ad9d5 DOC Remove some repeated words f69e851 Updated the broken link 672c028 Fix pip check in run_tests.sh 2a11c9c Add openstack-ansible-plugins dependency cce8ed6 Update and clean up run_tests.sh 17a4661 Fix invalid user/group checks bug 3e908d3 Handle SELinux properly when it is disabled 3942b20 Unblock security role gate f60dc47 Fix a typo de5f161 Updated from global requirements 9294b06 [Docs] Exceptions for user init files 8e82b13 Set cron.allow owner/group owner [+Docs] c0517ec Find world-writable dirs with bad group owners 5fdee29 Set home dir mode/owner/group owner [+Docs] ce386ec Add libxslt headers to bindep 1cf9fba Enable FIPS [+Docs] 111fa30 [Docs] Fix missing code-block property 61dd6e6 [Docs] Update for RHEL7 STIG a0b88da Add checks for remote syslog [+Docs] 71a3847 Fix issues from new CentOS 7 release 325fe75 Ensure separate filesystems exist [+Docs] f92f29d Set permissions on sshd host keys [+Docs] 7534fba Check for default SNMP comm strings [+Docs] 5b06a44 Check for TFTP secure mode [+Docs] fc2c356 Restrict mail relaying [+Docs] 14fa6e5 Enable chrony [+Docs] b1435ff Set TMOUT variable for all sessions [+Docs] 81807a1 Check for promiscuous interfaces [+Docs] 553ad01 Set action_email_acct in auditd [+Docs] 9f3921a Set space_left_action in auditd [+Docs] 42ca47b Set space_left in auditd [+Docs] efbeb69 Add AIDE checks for ACL/xattrs [+Docs] af84a27 Remove .shosts/shosts.equiv files [+Docs] 28cd873 Check for pam_lastlogin [+Docs] 404175d Check for cackey/coolkey values [+Docs] 4bee87b Check for ocsp_on in PKCS config [+Docs] 280e797 Set grub2 password [+Docs] e5db852 Enable automatic package updates [+Docs] 505a4a9 Enable AIDE [+Docs] 0e05d2e Search for unlabeled device files [+Docs] 46bb44c [Docs] User init file exceptions 222627c [Docs] Refer to other control for firewalld 2944081 [Docs] Exception: firewall port auditing 0e8feaf Verify password age limits [+Docs] d5ee4c3 Check for groups that don't exist [+Docs] 30c225b Extend get_users module to get groups 9c7b923 [Docs] Exception for firewalld config d63a709 [Docs] Exception: Disable syslog reception 3d51712 [Docs] Exception: Add AUTH_GSS for NFS fd4fa2d Set audisp failure options [+Docs] 806e364 Set maxlogins limit [+Docs] 2a17cd1 Disable accounts w/expired passwords [+Docs] 655b5f9 [Docs] Add missing docs for GSSAPI e841a78 [Docs] Docs for TFTP server removal c9aaf90 [Docs] Fix swapped docs 69db20a [Docs] Exception: grub on removable media 25f3d5c [Docs] Exception: logging level 5559b1c [Docs] Virus definition update frequency 1487c85 [Docs] Fix broken/missing auditd docs 439cd3d Enable/start auditd [+Docs] 85a337b [Docs] Exception for cron logging 21454af Disable kdump [+Docs] 83fe89e [Docs] Exception for user init file umask ec68313 [Docs] Exceptions for filesystem mounts 4e8bf67 Trivial fix to the documentation 2ac6dd6 [Docs] Exception for removing unnecessary accounts ab8cdc3 Fix status/tag for RHEL-07-010040 971c6df [Docs] Exception for removing default accounts fa65790 Apply pam_faillock restrictions [+Docs] 113947b Delete deprecated Hacking in tox.ini 8ad6816 Set minimum password length [+Docs] 708cb62 Prevent password re-use [+Docs] e06fc87 Ensure prep tasks have 'always' tag 0eef112 Refactor login.defs adjustments [+Docs] 711dc28 Updated from global requirements f9a3a16 Check for two nameservers [+Docs] 0085792 Add firewalld rate limit rule [+Docs] 61dbdd6 Check for SHA512 password storage [+Docs] 3fa6fd2 Display MOTD warning banner [+Docs] 51bd12f Point roles docs bugs to openstack-ansible LP e84a295 [Docs] Enable graphical login banner 992f196 Enable sshd [+Docs] c777f73 Enable firewalld [+Docs] 40ca9cf Disable ctrl-alt-del key sequence [+Docs] 9880ceb Disable autofs [+Docs] c229c43 Find files/dirs without valid owners [+Docs] 8fe505e Expire cached sssd authenticators [+Docs] f61fc49 Require auth for sudo [+Docs] fce1e4f Verify that home directories exist [+Docs] acdd6d5 Create home directories by default [+Docs] 66ebdc9 Check for users w/o home dirs [+Docs] 637d0f3 Set lifetime limits for passwords [+Docs] 0eece28 Set auditd failure flag [+Docs] 3efe849 Enable SELinux/AppArmor [+Docs] dcb3034 [Docs] Exceptions for disk encryption aacea94 Disable usb-storage module [+Docs] 2739579 [Docs] Exception for SELinux user confinement 63a900f [Docs] Exception for MFA/smartcards 29cbeb5 [Docs] Apply password quality rules 06090a2 Ensure libuser crypt_style is SHA512 [+Docs] 63131e0 Ensure passwords hashed with SHA512 [+Docs] c59d5b6 Apply password quality rules b8597c8 [Docs] Capitalize severity 04ff6e1 Show team and repo badges on README 4c79244 Move common variables to common.yml 53ffc83 Use dynamic includes for speedup 85630fd Enable graphical login banner 57748b7 Correct lineinfile option 60a8205 [Docs] Refactor auditd rules ff5bbe1 Refactor auditd rules 5c97321 Move clamav packages to rhel7 vars 6f256af [Docs] Set cn_map permissions/owner 6a3ee0f Set cn_map permissions/owner 4c91f21 Fix stig_packages_rhel7 typo 716232c [Docs] Securing sysctl configurations 746816c Securing sysctl configurations 1435ce5 [Doc] Exceptions for LDAP SSL/TLS checks 401f321 [Docs] Exception for PKI revocation 300c9f8 Check for other UID 0 accounts 215001c Add exception for supported release check f23aace Handle sshd_config without Match properly 8868011 Disable repo GPG checks by default 8efb235 Change package state to 'present' 3c0cc41 Enable virus scanner 770b2ad [Docs] Set graphical session locks 5fbc456 Set graphical session locks db2663b Automatically remove package deps 4405271 [Docs] Configure sshd based on the RHEL 7 STIG 1335d0b [Docs] Audit rules 09487fd Add template for audit rules 235ee06 Use ansible_service_mgr fact 9d12469 [Docs] Declutter controls listing 14baa91 [Docs] Exception for RHEL-07-040830 365ad65 Configure sshd based on the RHEL 7 STIG f383afe Encrypt transmitted audit logs 8daae8c Transmit audit logs to other servers a3e0f68 Remove deprecated always_run 9e66cde [Docs] Auditing setuid/setgid applications 35fa42e Refactor package removal 9d74dbd Install screen and ssh client/server 1f557eb Fix tags 0df4169 GPG verification for packages e5f3528 Remove packages according to STIG fec2cb3 Add conf file entry for chrony 23af709 Fix auditd restart handler d63b6ce Remove ansible<2.2 apt cache hack 784a38e Speed up package install/removal 0b2a381 Fix linting issues for ansible-lint 3.4.1 7f7d1da [Docs] Adjust docs for Ocata 20976bc Updated from global requirements 8424eb4 Replace github with git.o.o e4d3ea4 Add RHEL-07-010430 and RHEL-07-010431 19cfb16 [Docs] Add 'only' to clarify status 0637257 Add RHEL-07-010270 (ssh - empty password) de92fbd [Docs] Fix indentation for bullets bc9cc7b Fix stdout_lines check 1a0724d Security: Add tasks for RHEL-07-010260 0a7a993 Security: Add tasks for RHEL-07-010020 6971f03 Security: Add tasks for RHEL-07-010010 eed96b4 Use upper constraints for all tox targets 13e3fd4 Security: Remove quotes from extra vars 90c3630 Use centralised Ansible test scripts c906216 Enable release notes translation 3fdc656 Initial docs scaffolding for RHEL 7 STIG b87effb Add dividers to defaults/main.yml 4e7e57a Skip some test assertions for RHEL7 STIG 687dcdc Remove install_test_packages variable d001b9d Initial scaffolding for RHEL 7 STIG 401ccd7 Skip V-38620 (chrony) in gate 4913b29 Updated from global requirements b8c7c40 Update reno for stable/newton ec1b42a Use centralised test scripts Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 +- .gitreview | 1 + README.md | 2 +- README.rst | 9 + bindep.txt | 6 +- defaults/main.yml | 302 +- ...Enterprise_Linux_7_STIG_V1R0-2_Manual-xccdf.xml | 10364 +++++++++++++++++++ files/aide_extra.conf | 14 + files/dconf-profile-gdm | 3 + files/dconf-user-profile | 2 + handlers/main.yml | 25 +- library/get_users | 122 + manual-test.rc | 2 +- .../chrony-config-variable-7a1a7862c05c9675.yaml | 5 + .../package-state-present-951161faa5384abd.yaml | 7 + .../notes/rhel7-stig-default-f6c7c97498a8b2e7.yaml | 19 + releasenotes/source/conf.py | 3 + releasenotes/source/index.rst | 1 + releasenotes/source/newton.rst | 6 + tasks/aide.yml | 115 - tasks/apt.yml | 112 - tasks/auditd.yml | 313 - tasks/auth.yml | 467 - tasks/boot.yml | 66 - tasks/console.yml | 59 - tasks/file_perms.yml | 184 - tasks/kernel.yml | 222 - tasks/lsm.yml | 83 - tasks/mail.yml | 92 - tasks/main.yml | 52 +- tasks/misc.yml | 375 - tasks/nfsd.yml | 74 - tasks/rhel6stig/aide.yml | 94 + tasks/rhel6stig/apt.yml | 129 + tasks/rhel6stig/auditd.yml | 290 + tasks/rhel6stig/auth.yml | 408 + tasks/rhel6stig/boot.yml | 66 + tasks/rhel6stig/console.yml | 61 + tasks/rhel6stig/file_perms.yml | 188 + tasks/rhel6stig/kernel.yml | 222 + tasks/rhel6stig/lsm.yml | 52 + tasks/rhel6stig/mail.yml | 72 + tasks/rhel6stig/main.yml | 42 + tasks/rhel6stig/misc.yml | 339 + tasks/rhel6stig/nfsd.yml | 74 + tasks/rhel6stig/rpm.yml | 125 + tasks/rhel6stig/services.yml | 167 + tasks/rhel6stig/sshd.yml | 234 + tasks/rhel7stig/aide.yml | 102 + tasks/rhel7stig/apt.yml | 92 + tasks/rhel7stig/auditd.yml | 186 + tasks/rhel7stig/auth.yml | 521 + tasks/rhel7stig/file_perms.yml | 187 + tasks/rhel7stig/graphical.yml | 154 + tasks/rhel7stig/kernel.yml | 94 + tasks/rhel7stig/lsm.yml | 89 + tasks/rhel7stig/main.yml | 86 + tasks/rhel7stig/misc.yml | 408 + tasks/rhel7stig/packages.yml | 90 + tasks/rhel7stig/rpm.yml | 71 + tasks/rhel7stig/sshd.yml | 108 + tasks/rpm.yml | 109 - tasks/services.yml | 312 - tasks/sshd.yml | 234 - templates/chrony.conf.j2 | 2 +- templates/dconf-gdm-banner-message.j2 | 3 + templates/dconf-screensaver-lock.j2 | 24 + templates/dconf-session-user-config-lockout.j2 | 8 + templates/osas-auditd-rhel7.j2 | 97 + templates/osas-auditd.j2 | 6 + templates/pam_faillock.j2 | 3 + templates/pwquality.conf.j2 | 8 + templates/sshd_config_block.j2 | 58 + test-requirements.txt | 12 +- tox.ini | 180 +- vars/common.yml | 337 + vars/main.yml | 30 +- vars/redhat.yml | 150 +- vars/ubuntu.yml | 134 +- 351 files changed, 20987 insertions(+), 3345 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 73b06a3..326f6eb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ pyOpenSSL>=0.14 # Apache-2.0 -requests>=2.10.0 # Apache-2.0 +requests!=2.12.2,>=2.10.0 # Apache-2.0 @@ -12,2 +12,2 @@ ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0 @@ -16,3 +16,3 @@ doc8 # Apache-2.0 -reno>=1.8.0 # Apache2 -Jinja2>=2.8 # BSD License (3 clause) -lxml>=2.3 # BSD +reno>=1.8.0 # Apache-2.0 +Jinja2!=2.9.0,!=2.9.1,!=2.9.2,!=2.9.3,!=2.9.4,>=2.8 # BSD License (3 clause) +lxml!=3.7.0,>=2.3 # BSD

1 0

openstack-ansible-security 14.2.0 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We contentedly announce the release of: openstack-ansible-security 14.2.0: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.1.1..14.2.0 ---------------------------------------------------- 5f49ce1 Add missing STIG ID tags e7185d2 Install python2-pyOpenSSL package on CentOS dd52e48 Prepare vagrant centos/7 box for role testing 2a2b1e6 Fix auditd restart handler d97e7b8 Add conf file entry for chrony Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 9 +++++++++ bindep.txt | 2 +- handlers/main.yml | 11 +++++++---- tasks/misc.yml | 10 +++++++++- vars/redhat.yml | 1 + vars/ubuntu.yml | 1 + 8 files changed, 38 insertions(+), 6 deletions(-)

1 0

openstack-ansible-security 14.0.5 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are chuffed to announce the release of: openstack-ansible-security 14.0.5: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 14.0.5 ^^^^^^ New Features * The installation of "chrony" is still enabled by default, but it is now controlled by the "security_enable_chrony" variable. Changes in openstack-ansible-security 14.0.3..14.0.5 ---------------------------------------------------- 4251bc5 Backport of package optimization Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 4 +- .../chrony-config-variable-7a1a7862c05c9675.yaml | 5 + tasks/aide.yml | 23 ---- tasks/apt.yml | 32 +++++ tasks/auditd.yml | 32 ----- tasks/auth.yml | 75 ----------- tasks/lsm.yml | 31 ----- tasks/mail.yml | 20 --- tasks/misc.yml | 48 +------ tasks/rpm.yml | 41 ++++-- tasks/services.yml | 145 --------------------- tox.ini | 2 +- vars/redhat.yml | 55 ++++++++ vars/ubuntu.yml | 56 ++++++++ 15 files changed, 196 insertions(+), 380 deletions(-)

1 0

openstack-ansible-security 14.2.1 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We joyfully announce the release of: openstack-ansible-security 14.2.1: OpenStack-Ansible: Host security hardening This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 14.1.1..14.2.1 ---------------------------------------------------- 5f49ce1 Add missing STIG ID tags e7185d2 Install python2-pyOpenSSL package on CentOS dd52e48 Prepare vagrant centos/7 box for role testing 2a2b1e6 Fix auditd restart handler d97e7b8 Add conf file entry for chrony Diffstat (except docs and test files) ------------------------------------- Vagrantfile | 9 +++++++++ bindep.txt | 2 +- handlers/main.yml | 11 +++++++---- tasks/misc.yml | 10 +++++++++- vars/redhat.yml | 1 + vars/ubuntu.yml | 1 + 8 files changed, 38 insertions(+), 6 deletions(-)

1 0

openstack-ansible-security 13.3.0
by no-reply＠openstack.org 26 May '17

26 May '17

We are amped to announce the release of: openstack-ansible-security 13.3.0: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below.

1 0

openstack-ansible-security 12.0.15
by no-reply＠openstack.org 26 May '17

26 May '17

We joyfully announce the release of: openstack-ansible-security 12.0.15: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 12.0.15 ^^^^^^^ Bug Fixes * The security role previously set the permissions on all audit log files in "/var/log/audit" to "0400", but this prevents the audit daemon from writing to the active log file. This will prevent "auditd" from starting or restarting cleanly. The task now removes any permissions that are not allowed by the STIG. Any log files that meet or exceed the STIG requirements will not be modified.

1 0

openstack-ansible-security 14.0.0 (newton)
by no-reply＠openstack.org 26 May '17

26 May '17

We are chuffed to announce the release of: openstack-ansible-security 14.0.0: OpenStack-Ansible: Host security hardening This release is part of the newton release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 14.0.0 ^^^^^^ New Features ************ * The role now enables auditing during early boot to comply with the requirements in V-38438. By default, the GRUB configuration variables in "/etc/default/grub.d/" will be updated and the active "grub.cfg" will be updated. Deployers can opt-out of the change entirely by setting a variable: security_enable_audit_during_boot: no Deployers may opt-in for the change without automatically updating the active "grub.cfg" file by setting the following Ansible variables: security_enable_audit_during_boot: yes security_enable_grub_update: no * A task was added to disable secure ICMP redirects per the requirements in V-38526. This change can cause problems in some environments, so it is disabled by default. Deployers can enable the task (which disables secure ICMP redirects) by setting "security_disable_icmpv4_redirects_secure" to "yes". * A new task was added to disable ICMPv6 redirects per the requirements in V-38548. However, since this change can cause problems in running OpenStack environments, it is disabled by default. Deployers who wish to enable this task (and disable ICMPv6 redirects) should set "security_disable_icmpv6_redirects" to "yes". * AIDE is configured to skip the entire "/var" directory when it does the database initialization and when it performs checks. This reduces disk I/O and allows these jobs to complete faster. This also allows the initialization to become a blocking process and Ansible will wait for the initialization to complete prior to running the next task. * The auditd rules template included a rule that audited changes to the AppArmor policies, but the SELinux policy changes were not being audited. Any changes to SELinux policies in "/etc/selinux" are now being logged by auditd. * Although the STIG requires martian packets to be logged, the logging is now disabled by default. The logs can quickly fill up a syslog server or make a physical console unusable. Deployers that need this logging enabled will need to set the following Ansible variable: security_sysctl_enable_martian_logging: yes * The security role now has tasks that will disable the graphical interface on a server using upstart (Ubuntu 14.04) or systemd (Ubuntu 16.04 and CentOS 7). These changes take effect after a reboot. Deployers that need a graphical interface will need to set the following Ansible variable: security_disable_x_windows: no * An Ansible was added to disable the "rdisc" service on CentOS systems if the service is installed on the system. Deployers can opt-out of this change by setting "security_disable_rdisc" to "no". * The Linux Security Module (LSM) that is appropriate for the Linux distribution in use will be automatically enabled by the security role by default. Deployers can opt out of this change by setting the following Ansible variable: security_enable_linux_security_module: False The documentation for STIG V-51337 has more information about how each LSM is enabled along with special notes for SELinux. * A task was added that restricts ICMPv4 redirects to meet the requirements of V-38524 in the STIG. This configuration is disabled by default since it could cause issues with LXC in some environments. Deployers can enable this configuration by setting an Ansible variable: security_disable_icmpv4_redirects: yes * The audit rules added by the security role now have key fields that make it easier to link the audit log entry to the audit rule that caused it to appear. * A new configuration parameter "security_ntp_bind_local_interfaces" was added to the security role to restrict the network interface to which chronyd will listen for NTP requests. * The security role now supports the ability to configure whether apt/yum tasks install the latest available package, or just ensure that the package is present. The default action is to ensure that the latest package is present. The action taken may be changed to only ensure that the package is present by setting "security_package_state" to "present". * The GPG key checks for package verification in V-38476 are now working for Red Hat Enterprise Linux 7 in addition to CentOS 7. The checks only look for GPG keys from Red Hat and any other GPG keys, such as ones imported from the EPEL repository, are skipped. * Tasks were added to search for any device files without a proper SELinux label on CentOS systems. If any of these device labels are found, the playbook execution will stop with an error message. * The openstack-ansible-security role supports the application of the Red Hat Enterprise Linux 6 STIG configurations to systems running CentOS 7 and Ubuntu 16.04 LTS. Upgrade Notes ************* * The variable "security_audit_apparmor_changes" is now renamed to "security_audit_mac_changes" and is enabled by default. Setting "security_audit_mac_changes" to "no" will disable syscall auditing for any changes to AppArmor policies (in Ubuntu) or SELinux policies (in CentOS). * The variable "security_sysctl_enable_tcp_syncookies" has replaced "security_sysctl_tcp_syncookies" and it is now a boolean instead of an integer. It is still enabled by default, but deployers can disable TCP syncookies by setting the following Ansible variable: security_sysctl_enable_tcp_syncookies: no * The security role always checks whether the latest package is installed when executed. If a deployer wishes to change the check to only validate the presence of the package, the option "security_package_state" should be set to "present". * All of the discretionary access control (DAC) auditing is now disabled by default. This reduces the amount of logs generated during deployments and minor upgrades. The following variables are now set to "no": security_audit_DAC_chmod: no security_audit_DAC_chown: no security_audit_DAC_lchown: no security_audit_DAC_fchmod: no security_audit_DAC_fchmodat: no security_audit_DAC_fchown: no security_audit_DAC_fchownat: no security_audit_DAC_fremovexattr: no security_audit_DAC_lremovexattr: no security_audit_DAC_fsetxattr: no security_audit_DAC_lsetxattr: no security_audit_DAC_setxattr: no * All variables in the security role are now prepended with "security_" to avoid collisions with variables in other roles. All deployers who have used the security role in previous releases will need to prepend all security role variables with "security_". For example, a deployer could have disabled direct root ssh logins with the following variable: ssh_permit_root_login: yes That variable would become: security_ssh_permit_root_login: yes Bug Fixes ********* * The "/run" directory is excluded from AIDE checks since the files and directories there are only temporary and often change when services start and stop. * AIDE initialization is now always run on subsequent playbook runs when "security_initialize_aide" is set to "yes". The initialization will be skipped if AIDE isn't installed or if the AIDE database already exists. See bug 1616281 (https://launchpad.net/bugs/1616281) for more details. * The role previously did not restart the audit daemon after generating a new rules file. The bug (https://launchpad.net/bugs/1590916) has been fixed and the audit daemon will be restarted after any audit rule changes. * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * Failed access logging is now disabled by default and can be enabled by changing "security_audit_failed_access" to "yes". The rsyslog daemon checks for the existence of log files regularly and this audit rule was triggered very frequently, which led to very large audit logs. * An Ansible task was added to disable the "netconsole" service on CentOS systems if the service is installed on the system. Deployers can opt-out of this change by setting "security_disable_netconsole" to "no". * The security role previously set the permissions on all audit log files in "/var/log/audit" to "0400", but this prevents the audit daemon from writing to the active log file. This will prevent "auditd" from starting or restarting cleanly. The task now removes any permissions that are not allowed by the STIG. Any log files that meet or exceed the STIG requirements will not be modified. * When the security role was run in Ansible's check mode and a tag was provided, the "check_mode" variable was not being set. Any tasks which depend on that variable would fail. This bug is fixed (https://bugs.launchpad.net/openstack-ansible/+bug/1590086) and the "check_mode" variable is now set properly on every playbook run. * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file. * The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly labeled in the auditd logs with the key of "export-V-38568". They are now correctly logged with the key "filesystem_mount-V-38568". Changes in openstack-ansible-security 13.0.0..14.0.0 ---------------------------------------------------- 72ef48f Update tox.ini tests target for stable/newton 5ee9ead Skip V-38620 (chrony) in gate 5f263af Use centralised test scripts 081e46e Update UPPER_CONSTRAINTS_FILE for stable/newton 888fd8e Update .gitreview for stable/newton f460a97 [Docs] Fix sphinx pickling error 481ad31 Force Ansible to use dynamic includes bb37cfd Fix a minor typo in documentation e5a346f Update testing bits for consistency 4cdf533 [Docs] More cleanup c93b167 Add network conf auditing on CentOS 3d6cac0 [Docs] Update configuration/controls docs 3c19f00 [Docs] Metadata cleanup 4b6cbd5 [Docs] Update dev guide for metadata docs 79eeaa4 Updated from global requirements e57593d Automate the STIG documentation 28c73b4 Use command to avoid alias execution for log compression in CI 6d67b6a Rename collected logs for easier CI viewing 98fdd52 Disable DAC change auditing 1889953 Collect compressed logs after functional test execution 2aca828 Adding V-38438 (auditd during boot) e58ae24 Disable martian logging by default 83dd342 Add additional nullok check 427cd00 Enable log collection after functional testing 1fdd5b4 Remove extra AIDE tasks 129e629 Exclude /run from AIDE checks 4525cae Updated from global requirements 87e2190 Disable automatic ToC generation 578ce32 Ensure AIDE initializes on subsequent runs 31823b7 Implemented: V-38548. a189e05 Fix numbering on V-38583 fb33be7 Update to Ansible 2.1.1 8945ecb Restore logrotate cron job in CI 9ea5033 Fix AIDE cron job creation 862b713 Make all linting tests use upper-constraints 2c4393f Added SNI support for os_security role via OS packages 822ffad Add AIDE cron job in CentOS 7 704e1c8 Implemented: V-38526. 36e7d54 Updated from global requirements f85e9e4 Skip SNMPv1/2 (V-38660) checks in gate 06997d1 Add python packages for SNI support in tests f1acb0f Move other-requirements.txt to bindep.txt 1625f2a Add workaround for CVE-2016-5696 675c9e8 Show idempotency check output a715acf Fix auditd rpmverify check 8d2cde7 Add python-apt for check mode c458db6 Include ansible commands for ansible linting 43c81eb Adjust TCP syncookes variable to bool 08bd55d Correct tags attribute typo 70d9224 Add ability to change apt/yum package state 088884c Ensure that doc linting is included in the linters test 5e70944 Add audit rules to support ppc64le architecture. fa11dd4 Add idempotency check 983f20a Updated from global requirements 20b8d9a Fix duplicated config options in auditd.conf 7f7098c Restore check/audit test in tox.ini b5b92c1 Fix chrony daemon name for rh derivatives cc01563 Use plugins repo version of the human_log callback plugin 7eeaf92 Updated from global requirements e75613e Resolve 'E501 line too long' linters error 7003129 Remove doc8 check ignores 7751415 Update sphinx configuration 65293e8 Update tox configuration e831f70 Docs: Add note about RHEL 7 testing 432a9eb Switch to openstackdocs theme 5f8a93c Ignore ansible-lint warnings about rpm command usage 076be96 Docs: Fix rendering of :orphan: a95aeaa Pin test-requirements to match OpenStack requirements ff07803 Add support for Xenial and CentOS 7 to the Vagrantfile 2538d3c Fix documentation warnings from sphinx 6a9230c Ensure aide-common package is installed ba25681 Use standard check for systemd b937e5b Docs: Specify supported distributions 809b6cb Restart auditd after running augenrules 44e6056 Add key fields to audit rules ef69ba2 Add initial support for Red Hat Enterprise Linux 7 24f3f73 Add release note for V-38524 implementation d56468f Docs: Add developer guide for security role 03d436f Fix grub configuration file path in RHEL/CentOS 7 d8ae1e3 Set check_mode variable every time ee00627 Add check/audit to gate testing 5112569 Implemented: V-38524. 2683e56 Fix broken check mode for CentOS 7 45330fe Don't start LSM in check mode ecb0329 Consistency for multi-os in the includes bf28fdf Search for unlabeled device files 42deedc Remove one more "FAILED" from a custom fail message 40634db Add /etc/apparmor.d/ for auditing 6476ef7 Ensure V-38574 works reliably on CentOS 65a7bc4 Setting default runlevel/target to non-graphical 9fbe88a Fix unlocked account check on Ansible 2.2 09a60bf Remove "FAILED" from custom fail messages 7d2964a Add a note to the README file where to report bugs 7b313ee Adding audit rule for SELinux policy modifications 3114703 Add new parameter 'security_ntp_bind_local_interfaces_only' 31424a4 Enable LSM instead of checking status a841e18 Docs: Update dev notes for Cat 2 controls 32ce224 Docs: Update dev notes for Cat 3 controls e954ff5 Docs: Update dev notes for Cat 1 controls a972b4f Fix null password auth in CentOS 490d2f4 Fix auditd log permission bug 5cd0192 Fixing the "dry-run" errors. 2459cb4 Disable the rdisc service (if present) 3107e7c Disable the netconsole service (if present) 750260d Use ansible_managed variable in templates 05e3a1f Do not use bare variables with with_items b562271 Use fail module instead of debug module with failed_when 8a3a83a Add multi-release docs index 22c4c21 Add CentOS 7 and Ubuntu 16.04 support fa28004 Migrate to unique variable names 54de1b5 Handle Match properly in sshd_config 6f8b686 Removing equal signs in docs f5061fd Switch from dict to individual variables c7d2d84 Add .swp files to .gitignore e57f251 Fix verbiage in docs on auditd rule 19999b4 Add dependencies for paramiko 2.0 77b8b45 Disable failed access auditd logging 8389ec0 Add reno scaffolding for release notes management 5b5eabd blacklist Ansible 1.9.6 d1ca8db Add ability to enable unattended upgrades e44efd0 Doc updates 72cbd94 Fix flake8 violation in conf.py 9058a3f Improved search for unlocked system accounts Diffstat (except docs and test files) ------------------------------------- .gitignore | 19 +- .gitreview | 1 + README.md | 50 +- README.rst | 26 +- Vagrantfile | 59 +- bindep.txt | 44 + defaults/main.yml | 237 +- files/20auto-upgrades | 2 + handlers/main.yml | 23 +- manual-test.rc | 33 + meta/main.yml | 4 + other-requirements.txt | 16 - releasenotes/notes/.placeholder | 0 .../notes/add-v38438-3f7e905892be4b4f.yaml | 21 + .../notes/adding-v38526-381a407caa566b14.yaml | 8 + .../notes/adding-v38548-9c51b30bf9780ff3.yaml | 8 + .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 + .../aide-initialization-fix-16ab0223747d7719.yaml | 17 + ...diting-mac-policy-changes-fb83e0260a6431ed.yaml | 15 + .../notes/augenrules-restart-39fe3e1e2de3eaba.yaml | 5 + ...figurable-martian-logging-370ede40b036db0b.yaml | 13 + ...tionary-variables-removed-957c7b7b2108ba1f.yaml | 9 + ...iled-access-audit-logging-789dc01c8bcbef17.yaml | 6 + ...sable-graphical-interface-5db89cd1bef7e12d.yaml | 13 + ...isable-netconsole-service-915bb33449b4012c.yaml | 7 + .../disabling-rdisc-centos-75115b3509941bfa.yaml | 8 + .../notes/enable-lsm-bae903e463079a3f.yaml | 14 + ...ble-tcp-syncookes-boolean-4a884a66a3a0e4d7.yaml | 11 + ...-audit-log-permission-bug-81a772e2e6d0a5b3.yaml | 10 + .../fix-check-mode-with-tags-bf798856a27c53eb.yaml | 7 + ...ndling-sshd-match-stanzas-fa40b97689004e46.yaml | 7 + .../notes/implemented-v38524-b357edec95128307.yaml | 12 + .../improved-audit-rule-keys-9fa85f758386446c.yaml | 5 + ...ind-local-interfaces-only-05f03de632e81097.yaml | 5 + .../notes/package-state-6684c5634bdf127a.yaml | 13 + .../reduce-auditd-logging-633677a74aee5481.yaml | 25 + .../notes/rhel-gpg-check-0b483a824314d1b3.yaml | 7 + ...rch-for-unlabeled-devices-cb047c5f767e93ce.yaml | 6 + ...support-for-centos-xenial-2b89c318cc3df4b0.yaml | 5 + ...unique-variable-migration-c0639030b495438f.yaml | 20 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 281 ++ releasenotes/source/index.rst | 10 + releasenotes/source/liberty.rst | 6 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/unreleased.rst | 5 + setup.cfg | 2 +- setup.py | 11 +- tasks/aide.yml | 115 + tasks/apt.yml | 60 +- tasks/auditd.yml | 97 +- tasks/auth.yml | 167 +- tasks/boot.yml | 32 +- tasks/console.yml | 27 +- tasks/file_perms.yml | 18 +- tasks/kernel.yml | 67 +- tasks/lsm.yml | 83 + tasks/mail.yml | 27 +- tasks/main.yml | 56 +- tasks/misc.yml | 218 +- tasks/nfsd.yml | 24 +- tasks/rpm.yml | 109 + tasks/services.yml | 191 +- tasks/sshd.yml | 82 +- templates/ZZ_aide_exclusions.j2 | 5 +- templates/chrony.conf.j2 | 14 +- templates/jail.local.j2 | 6 +- templates/osas-auditd.j2 | 346 +- test-requirements.txt | 22 +- tox.ini | 172 +- vars/redhat.yml | 38 + vars/ubuntu.yml | 41 + 889 files changed, 10206 insertions(+), 10525 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3422d65..73b06a3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +1,9 @@ -ansible-lint<=2.3.9 -ansible>=1.9.1,<2.0.0 -bashate -flake8 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +bashate>=0.2 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +pyasn1 # BSD +pyOpenSSL>=0.14 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 +ndg-httpsclient>=0.4.2;python_version<'3.0' # BSD @@ -7,2 +12,7 @@ flake8 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 -oslosphinx>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +openstackdocstheme>=1.5.0 # Apache-2.0 +doc8 # Apache-2.0 +reno>=1.8.0 # Apache2 +Jinja2>=2.8 # BSD License (3 clause) +lxml>=2.3 # BSD

1 0

openstack-ansible-security 13.3.2
by no-reply＠openstack.org 26 May '17

26 May '17

We are chuffed to announce the release of: openstack-ansible-security 13.3.2: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.0..13.3.2 ---------------------------------------------------- 373a03e Fix duplicated config options in auditd.conf Diffstat (except docs and test files) ------------------------------------- tasks/auditd.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 13.1.0
by no-reply＠openstack.org 26 May '17

26 May '17

We exuberantly announce the release of: openstack-ansible-security 13.1.0: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below.

1 0

openstack-ansible-security 12.2.0
by no-reply＠openstack.org 26 May '17

26 May '17

We are amped to announce the release of: openstack-ansible-security 12.2.0: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below.

1 0

openstack-ansible-security 13.3.13
by no-reply＠openstack.org 26 May '17

26 May '17

We exuberantly announce the release of: openstack-ansible-security 13.3.13: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.13 ----------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 12.2.7
by no-reply＠openstack.org 26 May '17

26 May '17

We are pleased to announce the release of: openstack-ansible-security 12.2.7: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 12.2.5..12.2.7 ---------------------------------------------------- 44c1bc9 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 12.2.8
by no-reply＠openstack.org 26 May '17

26 May '17

We joyfully announce the release of: openstack-ansible-security 12.2.8: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 12.2.5..12.2.8 ---------------------------------------------------- 44c1bc9 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 12.2.3
by no-reply＠openstack.org 26 May '17

26 May '17

We are ecstatic to announce the release of: openstack-ansible-security 12.2.3: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 12.2.0..12.2.3 ---------------------------------------------------- 6826bcc Fix duplicated config options in auditd.conf Diffstat (except docs and test files) ------------------------------------- tasks/auditd.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 12.2.2
by no-reply＠openstack.org 26 May '17

26 May '17

We are amped to announce the release of: openstack-ansible-security 12.2.2: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 12.2.0..12.2.2 ---------------------------------------------------- 6826bcc Fix duplicated config options in auditd.conf Diffstat (except docs and test files) ------------------------------------- tasks/auditd.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 12.2.4
by no-reply＠openstack.org 26 May '17

26 May '17

We eagerly announce the release of: openstack-ansible-security 12.2.4: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 12.2.3..12.2.4 ---------------------------------------------------- 77eaaf2 Disable DAC change auditing 31a8ff5 Disable martian logging by default e7373c4 Exclude /run from AIDE checks 6c9eb50 Ensure AIDE initializes on subsequent runs 23fe90b Fix numbering on V-38583 Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 22 +++--- handlers/main.yml | 6 -- .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 ++ .../aide-initialization-fix-16ab0223747d7719.yaml | 17 +++++ ...figurable-martian-logging-370ede40b036db0b.yaml | 13 ++++ .../reduce-auditd-logging-633677a74aee5481.yaml | 25 +++++++ tasks/aide.yml | 86 ++++++++++++++++++++++ tasks/boot.yml | 4 +- tasks/kernel.yml | 2 +- tasks/main.yml | 1 + tasks/misc.yml | 49 ------------ templates/osas-auditd.j2 | 8 +- 22 files changed, 293 insertions(+), 94 deletions(-)

1 0

openstack-ansible-security 12.2.1
by no-reply＠openstack.org 26 May '17

26 May '17

We are stoked to announce the release of: openstack-ansible-security 12.2.1: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 12.2.0..12.2.1 ---------------------------------------------------- 6826bcc Fix duplicated config options in auditd.conf Diffstat (except docs and test files) ------------------------------------- tasks/auditd.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 13.3.10
by no-reply＠openstack.org 26 May '17

26 May '17

We enthusiastically announce the release of: openstack-ansible-security 13.3.10: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.5..13.3.10 ----------------------------------------------------- d57be75 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 13.3.1
by no-reply＠openstack.org 26 May '17

26 May '17

We are glad to announce the release of: openstack-ansible-security 13.3.1: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 13.3.0..13.3.1 ---------------------------------------------------- 373a03e Fix duplicated config options in auditd.conf Diffstat (except docs and test files) ------------------------------------- tasks/auditd.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

openstack-ansible-security 13.1.2
by no-reply＠openstack.org 26 May '17

26 May '17

We are amped to announce the release of: openstack-ansible-security 13.1.2: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 13.1.2 ^^^^^^ Bug Fixes * The dictionary-based variables in "defaults/main.yml" are now individual variables. The dictionary-based variables could not be changed as the documentation instructed. Instead it was required to override the entire dictionary. Deployers must use the new variable names to enable or disable the security configuration changes applied by the security role. For more information, see Launchpad Bug 1577944 (https://bugs.launchpad.net/openstack- ansible/+bug/1577944). * The security role now handles "ssh_config" files that contain "Match" stanzas. A marker is added to the configuration file and any new configuration items will be added below that marker. In addition, the configuration file is validated for each change to the ssh configuration file.

1 0

openstack-ansible-security 13.1.1
by no-reply＠openstack.org 26 May '17

26 May '17

We are tickled pink to announce the release of: openstack-ansible-security 13.1.1: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 13.1.1 ^^^^^^ Bug Fixes * Failed access logging is now disabled by default and can be enabled by changing "auditd_rules['failed_access']" to "yes". The rsyslog daemon checks for the existence of log files regularly and this audit rule was triggered very frequently, which led to very large audit logs.

1 0

openstack-ansible-security 12.1.0
by no-reply＠openstack.org 26 May '17

26 May '17

We exuberantly announce the release of: openstack-ansible-security 12.1.0: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below.

1 0

openstack-ansible-security 12.0.13
by no-reply＠openstack.org 26 May '17

26 May '17

We are psyched to announce the release of: openstack-ansible-security 12.0.13: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below.

1 0

openstack-ansible-security 12.0.0 (liberty)
by no-reply＠openstack.org 26 May '17

26 May '17

We are thrilled to announce the release of: openstack-ansible-security 12.0.0: Security hardening role for openstack-ansible This release is part of the liberty release series. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below.

1 0

openstack-ansible-security 13.0.1
by no-reply＠openstack.org 26 May '17

26 May '17

We are glad to announce the release of: openstack-ansible-security 13.0.1: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below.

1 0

openstack-ansible-security 12.2.5
by no-reply＠openstack.org 26 May '17

26 May '17

We are tickled pink to announce the release of: openstack-ansible-security 12.2.5: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 12.2.5 ^^^^^^ New Features ************ * AIDE is configured to skip the entire "/var" directory when it does the database initialization and when it performs checks. This reduces disk I/O and allows these jobs to complete faster. This also allows the initialization to become a blocking process and Ansible will wait for the initialization to complete prior to running the next task. * Although the STIG requires martian packets to be logged, the logging is now disabled by default. The logs can quickly fill up a syslog server or make a physical console unusable. Deployers that need this logging enabled will need to set the following Ansible variable: security_sysctl_enable_martian_logging: yes Upgrade Notes ************* * All of the discretionary access control (DAC) auditing is now disabled by default. This reduces the amount of logs generated during deployments and minor upgrades. The following variables are now set to "no": security_audit_DAC_chmod: no security_audit_DAC_chown: no security_audit_DAC_lchown: no security_audit_DAC_fchmod: no security_audit_DAC_fchmodat: no security_audit_DAC_fchown: no security_audit_DAC_fchownat: no security_audit_DAC_fremovexattr: no security_audit_DAC_lremovexattr: no security_audit_DAC_fsetxattr: no security_audit_DAC_lsetxattr: no security_audit_DAC_setxattr: no Bug Fixes ********* * The "/run" directory is excluded from AIDE checks since the files and directories there are only temporary and often change when services start and stop. * AIDE initialization is now always run on subsequent playbook runs when "initialize_aide" is set to "yes". The initialization will be skipped if AIDE isn't installed or if the AIDE database already exists. See bug 1616281 (https://launchpad.net/bugs/1616281) for more details. * The auditd rules for auditing V-38568 (filesystem mounts) were incorrectly labeled in the auditd logs with the key of "export-V-38568". They are now correctly logged with the key "filesystem_mount-V-38568". Changes in openstack-ansible-security 12.2.3..12.2.5 ---------------------------------------------------- 77eaaf2 Disable DAC change auditing 31a8ff5 Disable martian logging by default e7373c4 Exclude /run from AIDE checks 6c9eb50 Ensure AIDE initializes on subsequent runs 23fe90b Fix numbering on V-38583 Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 22 +++--- handlers/main.yml | 6 -- .../notes/aide-exclude-run-4d3c97a2d08eb373.yaml | 6 ++ .../aide-initialization-fix-16ab0223747d7719.yaml | 17 +++++ ...figurable-martian-logging-370ede40b036db0b.yaml | 13 ++++ .../reduce-auditd-logging-633677a74aee5481.yaml | 25 +++++++ tasks/aide.yml | 86 ++++++++++++++++++++++ tasks/boot.yml | 4 +- tasks/kernel.yml | 2 +- tasks/main.yml | 1 + tasks/misc.yml | 49 ------------ templates/osas-auditd.j2 | 8 +- 22 files changed, 293 insertions(+), 94 deletions(-)

1 0

openstack-ansible-security 12.2.6
by no-reply＠openstack.org 26 May '17

26 May '17

We are overjoyed to announce the release of: openstack-ansible-security 12.2.6: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. Changes in openstack-ansible-security 12.2.5..12.2.6 ---------------------------------------------------- 44c1bc9 Skip V-38620 (chrony) in gate Diffstat (except docs and test files) ------------------------------------- tox.ini | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-)

1 0

openstack-ansible-security 13.0.0
by no-reply＠openstack.org 26 May '17

26 May '17

We exuberantly announce the release of: openstack-ansible-security 13.0.0: Security hardening role for openstack-ansible This is the first release of openstack-ansible-security. Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below.

1 0

openstack-ansible-security 12.0.16
by no-reply＠openstack.org 26 May '17

26 May '17

We exuberantly announce the release of: openstack-ansible-security 12.0.16: Security hardening role for openstack-ansible Download the package from: https://tarballs.openstack.org/ansible-hardening/ For more details, please see below. 12.0.16 ^^^^^^^ New Features ************ * The audit rules added by the security role now have key fields that make it easier to link the audit log entry to the audit rule that caused it to appear. Bug Fixes ********* * The role previously did not restart the audit daemon after generating a new rules file. The bug (https://launchpad.net/bugs/1590916) has been fixed and the audit daemon will be restarted after any audit rule changes. * When the security role was run in Ansible's check mode and a tag was provided, the "check_mode" variable was not being set. Any tasks which depend on that variable would fail. This bug is fixed (https://bugs.launchpad.net/openstack-ansible/+bug/1590086) and the "check_mode" variable is now set properly on every playbook run.

1 0

[cinder] python-cinderclient 2.1.0 (pike)
by no-reply＠openstack.org 25 May '17

25 May '17

We are overjoyed to announce the release of: python-cinderclient 2.1.0: OpenStack Block Storage API Client Library This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/python-cinderclient Download the package from: https://pypi.python.org/pypi/python-cinderclient Please report issues through launchpad: https://bugs.launchpad.net/python-cinderclient For more details, please see below. 2.1.0 ^^^^^ New Features ************ * Use 'cinder reset-state' as generic resource reset state command for resource 'volume', 'snapshot', 'backup' 'group' and 'group- snapshot'. Also change volume's default status from 'available' to none when no status is specified. * Cinderclient now supports noauth mode using *--os-auth-type noauth* param. Also python-cinderclient now supports keystoneauth1 plugins. Deprecation Notes ***************** * --bypass-url param is now deprecated. Please use --os-endpoint instead of it. --os-auth-system param is now deprecated. Please --os-auth-type instead of it. Bug Fixes ********* * The mountpoint argument was ignored when creating an attachment and now has been fixed. [Bug 1675973 (https://bugs.launchpad.net/bugs/1675973) * The 'tenant' argument was ignored when listing attachments, and now has been fixed. [Bug 1675974 (https://bugs.launchpad.net/bugs/1675974) * The 'server_id' is now a required parameter when creating an attachment, that means we should create an attachment with a command like, 'cinder attachment-create <volume> <server_id>'. [Bug 1675975 (https://bugs.launchpad.net/bugs/1675975) Changes in python-cinderclient 2.0.1..2.1.0 ------------------------------------------- 5075eb2 support global_request_id in constructor 8471c6c Eliminate function redefined pylint error 2bfd512 Updated from global requirements 69f0090 Handle dashes in encryption-type-create arguments da4e810 Add doc for noauth usage 3a62acc Updated from global requirements af921bb Cinder client reset-state improvements 990527e Fix the wrong help message of marker 16af9f7 Pretty print 'extra_specs' and 'group_specs' 85b56e1 Fix client `retries` default value. 371831a Tests: Add info to assert_called failure message 650dc13 Replace http with https c384975 Remove direct dependency on requests 51f6668 Updated from global requirements ae7ab7d [BugFix] Make 'instance_id' required in attachment-create CLI. 4ed7118 [BugFix] Add 'all_tenants', 'project_id' in attachment-list 273c724 [BugFix] 'Mountpoint' is missing in attachment CLIs. 60f92db Fix noauth support 7b213a9 Remove log translations bb912de Remove duplicate do_upload_to_image() method def 31a7ba7 Update README.rst to remain consistent with python-cinderclient. c022b73 Fix pep8 errors 25ba0fb Add cinder tests for cinder snapshot create commands with parameters 7b5a91a Update tox to delete py34 Diffstat (except docs and test files) ------------------------------------- README.rst | 315 +++++++++++++---- cinderclient/__init__.py | 5 +- cinderclient/_i18n.py | 10 - cinderclient/auth_plugin.py | 141 -------- cinderclient/client.py | 40 ++- cinderclient/contrib/__init__.py | 0 cinderclient/contrib/noauth.py | 77 ++++ cinderclient/shell.py | 116 +++--- cinderclient/utils.py | 12 +- cinderclient/v1/client.py | 2 +- cinderclient/v2/client.py | 2 +- cinderclient/v2/shell.py | 66 +--- cinderclient/v2/volume_backups.py | 3 +- cinderclient/v3/client.py | 2 +- cinderclient/v3/group_snapshots.py | 15 + cinderclient/v3/groups.py | 15 + cinderclient/v3/shell.py | 125 +++++-- cinderclient/v3/volume_snapshots.py | 3 +- ...neric-reset-state-command-d83v1f3accbf5807.yaml | 7 + .../notes/bug-1675973-ad91a7a9f50e658a.yaml | 5 + .../notes/bug-1675974-34edd5g9870e65b2.yaml | 5 + .../notes/bug-1675975-ad91a7a34e0esywc.yaml | 6 + releasenotes/notes/noauth-7d95e5af31a00e96.yaml | 11 + requirements.txt | 9 +- setup.cfg | 6 +- test-requirements.txt | 4 +- tox.ini | 2 +- 40 files changed, 1054 insertions(+), 813 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 35e2989..d453c69 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=2.0.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 @@ -6,2 +6 @@ PrettyTable<0.8,>=0.7.1 # BSD -keystoneauth1>=2.18.0 # Apache-2.0 -requests!=2.12.2,!=2.13.0,>=2.10.0 # Apache-2.0 +keystoneauth1>=2.20.0 # Apache-2.0 @@ -9 +8 @@ simplejson>=2.2.0 # MIT -Babel>=2.3.4 # BSD +Babel!=2.4.0,>=2.3.4 # BSD @@ -11 +10 @@ six>=1.9.0 # MIT -oslo.i18n>=2.1.0 # Apache-2.0 +oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 8f2783a..c2d1d5b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -14 +14 @@ requests-mock>=1.1 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

ldappool 2.1.0
by no-reply＠openstack.org 25 May '17

25 May '17

We are amped to announce the release of: ldappool 2.1.0: A simple connector pool for python-ldap. Download the package from: https://pypi.python.org/pypi/ldappool For more details, please see below.

1 0

[oslo] oslo.middleware 3.27.0 (pike)
by no-reply＠openstack.org 25 May '17

25 May '17

We are pumped to announce the release of: oslo.middleware 3.27.0: Oslo Middleware library This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.middleware Download the package from: https://pypi.python.org/pypi/oslo.middleware Please report issues through launchpad: https://bugs.launchpad.net/oslo.middleware For more details, please see below. 3.27.0 ^^^^^^ New Features * This adds a new "compat_headers" class attribute to the "RequestId" middleware. That allows projects like Nova that have API contracts on alternative request-id headers to adopt the oslo "RequestId" middleware but still retain their API contract. * This adds support for "global_request_id" to the "RequestId" middleware. An inbound header of "X-OpenStack-Request-ID" is accepted as long as it is of the format "req-$uuid", and made available to oslo.context. This will allow for cross project request id tracking. Changes in oslo.middleware 3.26.0..3.27.0 ----------------------------------------- 0e3dbba Set global_request_id if passed in as X-OpenStack-Request-ID. 9b94bae Allow compatibility headers for request_id c45f9a2 Updated from global requirements e4bf01a Updated from global requirements 2eaf1eb Updated from global requirements 93a07b7 Optimize the link address Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 4 +- README.rst | 6 +- oslo_middleware/request_id.py | 30 +++++++++- .../notes/compat_headers-55a635b8ec01b6f1.yaml | 7 +++ .../notes/global_request_id-a8ec7260fbd76444.yaml | 8 +++ requirements.txt | 2 +- test-requirements.txt | 4 +- 8 files changed, 118 insertions(+), 10 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 344c088..39cda6a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ oslo.context>=2.12.0 # Apache-2.0 -oslo.i18n>=2.1.0 # Apache-2.0 +oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 6462cd9..7f665ad 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ oslotest>=1.10.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD @@ -12 +12 @@ testtools>=1.4.0 # MIT -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0

1 0

[oslo] oslo.context 2.14.0 (pike)
by no-reply＠openstack.org 25 May '17

25 May '17

We exuberantly announce the release of: oslo.context 2.14.0: Oslo Context library This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.context Download the package from: https://pypi.python.org/pypi/oslo.context Please report issues through launchpad: http://bugs.launchpad.net/oslo.context For more details, please see below. Changes in oslo.context 2.13.0..2.14.0 -------------------------------------- cce83ad Provide unified calling interface for global_id ec7cdc4 Add global_request_id to context f147f09 Updated from global requirements a6f994b Updated from global requirements 68b0476 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- oslo_context/context.py | 17 ++++++++++++++++- requirements.txt | 2 +- test-requirements.txt | 4 ++-- 5 files changed, 39 insertions(+), 7 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8366c07..42d89c8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=2.0.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 5a52edd..bb821ca 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ oslotest>=1.10.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -12 +12 @@ oslosphinx>=4.7.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[cinder] os-brick 1.13.1 (pike)
by no-reply＠openstack.org 24 May '17

24 May '17

We are stoked to announce the release of: os-brick 1.13.1: OpenStack Cinder brick library for managing local volume attaches This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/os-brick Download the package from: https://pypi.python.org/pypi/os-brick Please report issues through launchpad: http://bugs.launchpad.net/os-brick For more details, please see below. Changes in os-brick 1.13.0..1.13.1 ---------------------------------- 32b4b24 Stop ignoring E123 and E125 pycodestyle rules 4e17533 Update hacking version to align with Cinder 06e9d9c Fixed the veritas connector path Diffstat (except docs and test files) ------------------------------------- os_brick/initiator/connectors/scaleio.py | 2 +- os_brick/initiator/connectors/vrtshyperscale.py | 2 +- test-requirements.txt | 2 +- tox.ini | 3 +-- 6 files changed, 8 insertions(+), 9 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 5c550ae..eef55e9 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking<0.11,>=0.10.0 +hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0

1 0

[ironic] sushy 0.2.0 (pike)
by no-reply＠openstack.org 24 May '17

24 May '17

We are jazzed to announce the release of: sushy 0.2.0: Sushy is a small Python library to communicate with Redfish based systems This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through launchpad: http://bugs.launchpad.net/sushy For more details, please see below. Changes in sushy 0.1.0..0.2.0 ----------------------------- 0c3ebfb Declarative approach to parsing JSON fields ee0925e Updated from global requirements a279b3d Updated from global requirements 11ec354 Fix working with requests Session object fe07266 Improve logging and error handling in base code 18febd0 Add System Processor/Memory info 3a6e665 Properly support upper-constraints d616dc0 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- sushy/connector.py | 73 +++---- sushy/exceptions.py | 82 +++++++- sushy/resources/base.py | 195 ++++++++++++++++--- sushy/resources/system/constants.py | 12 ++ sushy/resources/system/mappings.py | 11 ++ sushy/resources/system/processor.py | 131 +++++++++++++ sushy/resources/system/system.py | 173 ++++++++++------- .../unit/json_samples/processor_collection.json | 16 ++ test-requirements.txt | 4 +- tools/tox_install.sh | 55 ++++++ tox.ini | 3 +- 21 files changed, 1228 insertions(+), 260 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b358c17..ab2bdb0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=2.0.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 3f920d2..44d6906 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -9 +9 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[shade] shade 1.21.0 (pike)
by no-reply＠openstack.org 24 May '17

24 May '17

We are delighted to announce the release of: shade 1.21.0: Simple client library for interacting with OpenStack clouds This release is part of the pike release series. Download the package from: https://pypi.python.org/pypi/shade For more details, please see below. 1.21.0 ^^^^^^ New Features ************ * get_compute_usage now has a default value for the start parameter of 2010-07-06. That was the date the OpenStack project started. It's completely impossible for someone to have Nova usage data that goes back further in time. Also, both the start and end date parameters now also accept strings which will be parsed and timezones will be properly converted to UTC which is what Nova expects. Bug Fixes ********* * Added requests and Babel to the direct dependencies list to work around issues with pip installation, entrypoints and transitive dependencies with conflicting exclusion ranges. Packagers of shade do not need to add these two new requirements to shade's dependency list - they are transitive depends and should be satisfied by the other things in the requirements list. Both will be removed from the list again once the python client libraries that pull them in have been removed. Changes in shade 1.20.0..1.21.0 ------------------------------- ba0e945 Pick most recent rather than first fixed address 072001a Allow a user to submit start and end time as strings 12b07e1 Fix get_compute_limits error message 8d34399 Fix get_compute_usage normalization problem e3d43e7 Find private ip addr based on fip attachment 329b939 Add ability to run any tox env in python3 ee01121 Fix issue with list_volumes when pagination is used b9872da Make sure security_groups is always a list c19a797 Updated from global requirements 750e0a9 Remove direct uses of nova_client in functional tests 5991a5e Updated from global requirements 892b502 Remove designateclient mock from recordset tests 4199976 Convert list_server_security_groups to REST f11edd7 Remove two unused nova tasks dbb42fc Include error message from server if one exists 9ecf600 Optimize the case of versioned image endpoint in catalog 40f66c7 Fix broken version discovery endpoints e1dfc72 Remove cinderclient from install-tips.sh a88d41e Fix tips jobs and convert Nova Floating IP calls dc77e7d Convert first ironic_client test to REST f94880c Move mocks of designate API discovery calls to base test class be0a0c9 Fix exception when using boot_from_volume for create_server 1c0a95b Move legacy client constructors to mixin 103bc13 Fix pep8 errors that were lurking 3f76b25 Remove cinder client 3ed9725 Make deprecated client helper method d3b653f Add 'public' as a default interface for get_mock_url ef35f02 Add super basic machine normalization d1d9ed7 Remove designateclient mock from zones tests 61141ae Remove direct calls to cinderclient fcaf06c Add "Multi Cloud with Shade" presentation 7801de7 Use REST API for volume quotas calls b6926bb Add pprint and pformat helper methods 2f8285d extend security_group and _rule with project id 81239f6 Remove neutronclient from shade's dependencies 1a8cb0a Remove cinderclient mocks from quotas tests e00ff9c Fix Neutron floating IP test c43f1d8 Use REST API for volume snapshot calls ad516fb Remove usage of neutron_client from functional tests 55ef136 Enable neutron service in server create and rebuild tests 072be85 Replace neutronclient with REST API calls in FIP commands 81d39a9 Updated from global requirements b390450 Add assert_calls check testing volume calls with timeout enabled f7f54d0 Remove has_service mock from Neutron FIP tests 4b75c85 Remove cinderclient mocks from snapshot tests 2449488 Remove neutronclient mocks from floating ips tests 689d3bb Use REST API for volume attach and volume backup calls f52448d Replace neutronclient with REST API calls in ports commands f7b1eb5 Don't get ports info from unavailable neutron service a2aad70 Removing unsed fake methods and classes 77bac2b Replace neutronclient with REST API calls in quotas commands cbc233d Replace neutronclient with REST API calls in security groups commands bcc7ea6 Use REST API for volume delete and detach calls be92751 Use REST API for volume type_access and volume create f430b94 Refactor the test_create_volume_invalidates test 7abe4e9 Replace neutronclient with REST API calls in router commands 478d4ba Move REST error_messages to error_message argument 944556e Remove two lines that are leftover and broken 17ab75b Convert test_role_assignments to requests mock 05f1600 Remove neutronclient mocks from sec groups tests 2079366 Remove neutronclient mocks from quotas tests b9073b5 Remove neutronclient mocks from ports tests e81bec0 Add optional error_message to adapter.request 8a4f997 Add in a bunch of TODOs about interface=admin a5c49cb Set interface=admin for keystonev2 keystone tests 60569b2 Add a _normalize_volume_backups method ca2f10b Use requests-mock for the volume backup tests a71bea8 Remove neutronclient mocks from router tests 8b6ae89 Replace neutronclient with REST API calls in subnet commands b964757 Define a base function to remove unneeded attributes 66e3168 Remove neutronclient mocks from subnet tests 80ebf88 Replace neutronclient with REST API calls in network commands 1c0c81f Move router related tests to separate module c214477 Updated from global requirements 65c350f Move subnet related tests to separate module cee8b6c Fix list_servers tests to not need a ton of neutron 950c450 Remove neutronclient mocks from network create tests d1d6706 Remove neutronclient mocks from network exceptions tests 0a39c01 Remove neutronclient mocks from network delete tests e61a5c0 Remove neutronclient mocks from network list tests 258a6a3 Use requests-mock for the list/add/remove volume types tests 09af82b Fix create/rebuild tests to not need a ton of neutron 7a2b579 Don't do all the network stuff in the rebuild poll 5dae187 Move unit tests for list networks to test_network.py file 4f807b8 Include two transitive dependencies to work around conflicts 0bfdaf4 Use requests-mock for all the attach/detach/delete tests 5c0f3f5 Remove stray line d5396cf Strip trailing slashes in test helper method 49fe112 Clarify some variable names in glance discovery afed15f Remove extra unneeded API calls Diffstat (except docs and test files) ------------------------------------- .../examples/service-conditional-overrides.py | 5 + extras/install-tips.sh | 11 +- .../compute-usage-defaults-5f5b2936f17ff400.yaml | 9 + ...orkaround-transitive-deps-1e7a214f3256b77e.yaml | 9 + requirements.txt | 14 +- shade/__init__.py | 2 - shade/_adapter.py | 10 +- shade/_legacy_clients.py | 197 ++ shade/_normalize.py | 113 +- shade/_tasks.py | 282 -- shade/_utils.py | 30 +- shade/exc.py | 38 +- shade/meta.py | 45 +- shade/openstackcloud.py | 1208 +++---- shade/operatorcloud.py | 193 +- .../unit/fixtures/catalog-versioned-image.json | 71 + test-requirements.txt | 4 +- tox.ini | 3 +- 77 files changed, 8411 insertions(+), 3595 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 30a7fdd..8472bc6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11,8 @@ ipaddress>=1.0.7;python_version<'3.3' # PSF -os-client-config>=1.22.0 # Apache-2.0 +os-client-config>=1.27.0 # Apache-2.0 +# These two are here to prevent issues with version pin mismatches from our +# client library transitive depends. +# Babel can be removed when ironicclient is removed (because of openstackclient +# transitive depend) +Babel!=2.4.0,>=2.3.4 # BSD +# requests can be removed when designateclient is removed +requests!=2.12.2,!=2.13.0,>=2.10.0 # Apache-2.0 @@ -14,0 +22 @@ futures>=3.0;python_version=='2.7' or python_version=='2.6' # BSD +iso8601>=0.1.11 # MIT @@ -16 +24 @@ futures>=3.0;python_version=='2.7' or python_version=='2.6' # BSD -keystoneauth1>=2.18.0 # Apache-2.0 +keystoneauth1>=2.20.0 # Apache-2.0 @@ -20,2 +27,0 @@ python-keystoneclient>=3.8.0 # Apache-2.0 -python-cinderclient>=2.0.1 # Apache-2.0 -python-neutronclient>=5.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index d1c79ca..2241f2a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking<0.12,>=0.11.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -12 +12 @@ requests-mock>=1.1 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[freezer] freezer-api 3.0.1 (newton)
by no-reply＠openstack.org 24 May '17

24 May '17

We are pumped to announce the release of: freezer-api 3.0.1: OpenStack Backup and Restore API Service This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/freezer-api/ For more details, please see below. Changes in freezer-api 3.0.0..3.0.1 ----------------------------------- 9e3d6a5 Fix for preventing the client to register itself again and again f348962 Fix sessions: session_tag 089f249 Fix a bug of doing devstack installation on CentOS d95b930 Fix failed tempest tests with KeystoneV2 084199a Added OpenJDK 7 ppa for xenial Added py35 environment configuration to tox.ini Diffstat (except docs and test files) ------------------------------------- devstack/gate_hook.sh | 2 ++ devstack/lib/freezer-api | 10 ++++++++++ freezer_api/api/v1/sessions.py | 10 +++++++--- freezer_api/common/utils.py | 2 +- freezer_api/storage/elastic.py | 2 +- tox.ini | 11 +++++++++++ 8 files changed, 35 insertions(+), 8 deletions(-)

1 0

[freezer] freezer 3.0.1 (newton)
by no-reply＠openstack.org 24 May '17

24 May '17

We are happy to announce the release of: freezer 3.0.1: The OpenStack Backup Restore and Disaster Recovery as a Service Platform This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/freezer/ For more details, please see below. Changes in freezer 3.0.0..3.0.1 ------------------------------- 2e83f67 Updated from global requirements 94a5e51 Fix some issues with tempest test when not running with devstack e1b0a57 Updated from global requirements ce323fe Updated from global requirements 804fdf2 Fix manifest upload with ceph backend 0530352 Constraints are ready to be used for tox.ini 1f68586 Added py35 environment configuration to tox.ini 8ac09d4 Updated from global requirements 88f53f7 Fixing max_retries Diffstat (except docs and test files) ------------------------------------- freezer/scheduler/scheduler_job.py | 6 +++--- freezer/storage/swift.py | 3 ++- requirements.txt | 4 ++-- tox.ini | 13 ++++++++++++- 7 files changed, 36 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 63992b1..7eeadc5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ astroid<1.4.0 # LGPLv2.1 # breaks pylint 1.4.4 -setuptools!=24.0.0,>=16.0 # PSF/ZPL +setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=34.3.3,>=16.0 # PSF/ZPL @@ -26 +26 @@ apscheduler # MIT License -psutil>=1.1.1,<2.0.0 # BSD +psutil<2.0.0,>=1.1.1 # BSD

1 0

[freezer] freezer-web-ui 3.0.1 (newton)
by no-reply＠openstack.org 24 May '17

24 May '17

We are glad to announce the release of: freezer-web-ui 3.0.1: Freezer - Backup as a Service User Interface This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/freezer-web-ui/ For more details, please see below. Changes in freezer-web-ui 3.0.0..3.0.1 -------------------------------------- 10fd008 Update .gitreview for stable/newton Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + 1 file changed, 1 insertion(+)

1 0

[freezer] freezer-dr 3.0.1 (newton)
by no-reply＠openstack.org 24 May '17

24 May '17

We are gleeful to announce the release of: freezer-dr 3.0.1: OpenStack Disaster Recovery This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/freezer-dr/ For more details, please see below. Changes in freezer-dr 3.0.0..3.0.1 ---------------------------------- a8ba585 Added py35 environement configuration to tox.ini Diffstat (except docs and test files) ------------------------------------- tox.ini | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-)

1 0

[monasca] monasca_transform 0.9.0 (ocata)
by no-reply＠openstack.org 23 May '17

23 May '17

We are jazzed to announce the release of: monasca_transform 0.9.0: Data aggregation for metrics This is the first release of monasca_transform. This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/monasca-transform/ For more details, please see below. Changes in monasca_transform 52504f802da029399c0133c0aa1be895f5b65b67..0.9.0 ---------------------------------------------------------------------------- 8b1819b Enable monasca transform functional tests 8feb6db Monasca Transform devstack rotate spark logs in /var/run/spark 5c15a99 Enhanced refresh monasca transform script 2da3904 Hourly aggregation account for early arrving metrics 83650f7 Add Constraints support 47235b4 Updated from global requirements f99a3fa Fix development environment and functional tests 738a53f Optimize the link address 5fe82bf Replaces uuid.uuid4 with uuidutils.generate_uuid() 8a77c4f Updated from global requirements d78ac09 Updated from global requirements 9f9082d Delete doc/build/html/.root-marker 81b239c Updated from global requirements 8aef98d Use to kafka_lib library in monasca common a64f124 Change Spark version to 1.6.3 d8f283c Started adding kubernetes metrics aggregation 8d3f0b9 [Fix gate]Update test requirement 1579d8b Reuse existing spark sql context f8f5667 Remove unused logging import 00b4797 Corrected catch up aggregation logic 6cba31c Replaced e.message with str(e) 45a989e Updated from global requirements 41df30d Update monasca-transform git path in README f341768 Adjust proxy port parsing to only return number. c189fee Delete hourly offsets from offsets table d725b41 Updated from global requirements 88e04a3 Fix ci 903c9fe Addressed proxy issues for maven in vagrant 5998f16 Added tools/vagrant/.vagrant file to .gitignore 014c2b5 Delete deprecated Hacking in tox.ini 51001d2 Manual sync with openstack/requirements ecde33a Show team and repo badges on README 0a73dc9 Refactored vagrant environment for xenial 043eec2 Added blank test hooks for ci 26e5333 Add configurable amnesty period for late metrics c3fcd61 Remove unique metric count aggregation fd6a79c Fixed vagrant provision script d76af6a Corrected test environment 8a6e619 Populate the project id for kafka publish 30b9540 Fixed the refresh script 501297a Enable cleanup for spark-worker 8ac3250 Remove metric filters from transform-spec 6cc6f94 Fixed minor issues in unstack 698856b Use database password from variable 1c65ca0 Validate metrics before publishing to kafka 0ea79c0 Added aggregation results to application log 87a8960 Changed hourly storage.objects.size_agg operation 4edad02 Eliminated ceiling function for utilization metrics 3cdb0d1 Made corrections such that swiftlm.diskusage.rate_agg is now correctly based on swiftlm.diskusage.host.val.avail (instead of incorrectly being based on swiftlm.diskusage.host.val.size). bf2e42b Made changes to prevent multiple metrics in the same batch. eff0e74 Eliminated processing_meta from hourly metrics. d4f791e Added aggregation of storage-objects.size. 0365bfa Modifications to include processing_meta in pre-hourly metrics. 615e52d Modifications to make rate calculations work with two-stage aggregation. accbacb Reintroduced some aggregations which were apparently lost when we transitioned to the upstream Monasca-Transform OpenStack repo. Specifically, the missing aggregations were those for the nova.vm.cpu.total_allocated and nova.vm.mem.total_allocated_mb source metrics. This set of changes also includes the resolution of a couple pre-existing pep8 errors. 442b7fb add test_fetch_quantity_util_agg 3d9e1d9 Removed version from monasca-common dependency 6b40f66 add test cases for first and second stage of host and vm cpu usage processing a977550 Removed 'device' as an expected dimension on incoming Swift metrics (since it is no longer included in them). bb83b30 Add TLS/SSL capability to database connection acba178 add test cases for fetch_quantity_prehourly_instance_usage c498564 add 'string' to all firstrecord_timestamp and lastrecord_timestamp to fix bug c7128b0 Added filter capability for transform specs. bbf977a timestamp parsed into utc instead of localtime(which was default) Closes Bug:#160531 90b20bf Change to monasca-common simport b3f85e1 Change jdbc driver to drizzle 1c3a798 Added some bulletproofing to catch invalid configuration entries for caching levels. Also changed the calculate_rate component to use values from instance usage if available (rather than using 'all'). 82fe3b9 Update kafka-python version to 0.9.5 1afd082 fix no_proxy bug in tools/vagrant/Vagrantfile 9c95206 Corrected log file name 00b874a Two stage transformation d8e73f3 Added several Swift aggregations (including a new usage component for calculating rate changes). Also fixed some pep8 issues. 02b2374 Removed spark-events from config 633aff4 Vagrant to use local branch for devstack 72f240b Removed patch for monasca-api plugin c7aabb6 Added aggregation for vm.mem.used_mb and swiftlm.diskusage.host.val.size. Also renamed disk.allocation to vm.disk.allocation and resolved a problem with resource_id not being found for certain aggregations. 11e8bac Added aggregation for cpu.total_logical_cores and cpu.utilized_logical_cores by host. 05c36ab Allow configurable SPARK_HOME e4ade60 Implemented aggregation for disk.allocation. Also set the apache download source to use the archive site to ensure that the dependency package does not disappear. Also brought the vagrant environment inline with monasca-api (i.e., use the same values for private network, add substitution for kafka brokers ip address to the conf). Also parameterised dependency sources (i.e., added settings to parameterise the maven and apache repositories for the devstack plugin). 8f61dd9 monasca-transform initial commit Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt new file mode 100644 index 0000000..eb18bd6 --- /dev/null +++ b/requirements.txt @@ -0,0 +1,13 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +pbr!=2.1.0,>=2.0.0 # Apache-2.0 +PyMySQL>=0.7.6 # MIT License +six>=1.9.0 # MIT +SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT +stevedore>=1.20.0 # Apache-2.0 +monasca-common>=1.4.0 # Apache-2.0 +oslo.config>=3.22.0 # Apache-2.0 +oslo.log>=3.22.0 # Apache-2.0 +oslo.service>=1.10.0 # Apache-2.0 +tooz>=1.47.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..920e5eb --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1,16 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +# mock object framework +hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +flake8<2.6.0,>=2.5.4 # MIT +nose # LGPL +mock>=2.0 # BSD +fixtures>=3.0.0 # Apache-2.0/BSD +os-testr>=0.8.0 # Apache-2.0 +# required to build documentation +sphinx>=1.5.1 # BSD +#oslosphinx>=4.7.0 # Apache-2.0 +testrepository>=0.0.18 # Apache-2.0/BSD +# computes code coverage percentages +coverage>=4.0 # Apache-2.0

1 0

[freezer] freezer-dr 4.0.1 (ocata)
by no-reply＠openstack.org 23 May '17

23 May '17

We are satisfied to announce the release of: freezer-dr 4.0.1: OpenStack Disaster Recovery This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/freezer-dr/ For more details, please see below. Changes in freezer-dr 4.0.0..4.0.1 ---------------------------------- 3dacdc8 Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + 1 file changed, 1 insertion(+)

1 0

[freezer] python-freezerclient 1.3.1 (ocata)
by no-reply＠openstack.org 23 May '17

23 May '17

We are pleased to announce the release of: python-freezerclient 1.3.1: OpenStack Disaster Recovery API Client Library This release is part of the ocata stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-freezerclient Download the package from: https://tarballs.openstack.org/python-freezerclient/ Please report issues through launchpad: https://bugs.launchpad.net/python-freezerclient For more details, please see below. Changes in python-freezerclient 1.3.0..1.3.1 -------------------------------------------- 24b3489 Updated from global requirements 526a931 Use bindep to define binary deps 75f6666 Updated from global requirements 28c2456 Updated from global requirements 3b3d9bd Updated from global requirements Diffstat (except docs and test files) ------------------------------------- bindep.txt | 13 +++++++++++++ requirements.txt | 2 +- 2 files changed, 14 insertions(+), 1 deletion(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e4c9986..32033bb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ astroid<1.4.0 # LGPLv2.1 # breaks pylint 1.4.4 -setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,>=16.0 # PSF/ZPL +setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,>=16.0 # PSF/ZPL

1 0

[freezer] freezer-api 4.0.1 (ocata)
by no-reply＠openstack.org 23 May '17

23 May '17

We are psyched to announce the release of: freezer-api 4.0.1: OpenStack Backup and Restore API Service This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/freezer-api/ For more details, please see below. Changes in freezer-api 4.0.0..4.0.1 ----------------------------------- 7cfaeaf Update freezer-api dsvm gate job 2124791 Use bindep to define binary deps 5d7fb4b Fix for preventing the client to register itself again and again 9495ce8 Fix sessions: session_tag 5780600 Update UPPER_CONSTRAINTS_FILE for stable/ocata f7cad8b Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 14 ++++++++++++++ devstack/lib/freezer-api | 5 +++++ freezer_api/api/v1/sessions.py | 10 +++++++--- freezer_api/common/utils.py | 2 +- freezer_api/storage/elastic.py | 2 +- tox.ini | 2 +- 8 files changed, 31 insertions(+), 7 deletions(-)

1 0

[freezer] freezer 4.0.1 (ocata)
by no-reply＠openstack.org 23 May '17

23 May '17

We are pumped to announce the release of: freezer 4.0.1: The OpenStack Backup Restore and Disaster Recovery as a Service Platform This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/freezer/ For more details, please see below. Changes in freezer 4.0.0..4.0.1 ------------------------------- 56ae13c Fix some issues with tempest test when not running with devstack 1e8aef3 Updated from global requirements d709944 Replace unintented key removal behavior using getter 6b319c2 Force Swift storage driver to always get a new client 2a6d156 Use bindep to define binary deps 7300764 Updated from global requirements c891769 Updated from global requirements 80c9360 Fix Tempest tests running on dsvm 90c1ed9 Tune logging level for swift chunks 8dc5b7a Fix backups of nameless volumes 44a3c27 Allow for multiple jobs to be executed at the same time 5328f75 Fix ssh connection while restore e10cbe0 Fix Cinder restore 66eaa16 Fix max_segment_size parameter beaa914 Updated from global requirements 47d2f8b Remove verify option as it is not in the args of freezerclient ce20d50 Fix the fetch of the stream generator 46624e1 Fix SSL connections to connect to swift, glance, nova 3d2505a Use correct arugment for nova restore cdc9b17 Added missing OS options 931c24a Update UPPER_CONSTRAINTS_FILE for stable/ocata 5852694 Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 16 +++++ etc/scheduler.conf.sample | 6 ++ freezer/job.py | 4 +- freezer/openstack/backup.py | 7 +- freezer/openstack/osclients.py | 13 ++-- freezer/openstack/restore.py | 14 +++- freezer/scheduler/arguments.py | 20 ++++++ freezer/scheduler/freezer_scheduler.py | 20 +++--- freezer/scheduler/scheduler_job.py | 77 +++++++++++----------- freezer/scheduler/win_daemon.py | 4 +- freezer/scheduler/win_service.py | 3 +- freezer/storage/ssh.py | 17 +++++ freezer/storage/swift.py | 16 ++--- freezer/utils/utils.py | 2 + requirements.txt | 2 +- tox.ini | 2 +- 20 files changed, 165 insertions(+), 82 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8fb8342..47cb835 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ astroid<1.4.0 # LGPLv2.1 # breaks pylint 1.4.4 -setuptools!=24.0.0,>=16.0 # PSF/ZPL +setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,>=16.0 # PSF/ZPL

1 0

[oslo] oslo.i18n 3.15.3 (pike)
by no-reply＠openstack.org 23 May '17

23 May '17

We jubilantly announce the release of: oslo.i18n 3.15.3: Oslo i18n library This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.i18n Download the package from: https://pypi.python.org/pypi/oslo.i18n Please report issues through launchpad: http://bugs.launchpad.net/oslo.i18n For more details, please see below. Changes in oslo.i18n 3.15.2..3.15.3 ----------------------------------- b9eed49 Revert "Remove Babel as a runtime requirement" Diffstat (except docs and test files) ------------------------------------- requirements.txt | 1 + test-requirements.txt | 1 - 2 files changed, 1 insertion(+), 1 deletion(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 76ecae7..592e5d4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,0 +6 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 +Babel!=2.4.0,>=2.3.4 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 819fcc5..1ba37d7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -18 +17,0 @@ reno>=1.8.0 # Apache-2.0 -Babel!=2.4.0,>=2.3.4 # BSD

1 0

[tripleo] paunch 1.1.0 (pike)
by no-reply＠openstack.org 23 May '17

23 May '17

We enthusiastically announce the release of: paunch 1.1.0: Utility to launch and manage containers using YAML based configuration data This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through launchpad: http://bugs.launchpad.net/paunch For more details, please see below. Changes in paunch 1.0.0..1.1.0 ------------------------------ 82d6ff4 Implement idempotency behaviour 903bc38 Split out container_names to its own method 6d0481c Store the config data in a label 491358c Fix multiple rename case e4cf82b Remove unimplemented 'show' command aebcaba Implement the list command d98f2b4 Implement delete command c4a0164 Fix testenv Diffstat (except docs and test files) ------------------------------------- README.rst | 38 ++++++- paunch/__init__.py | 25 ++++- paunch/builder/compose1.py | 49 +++++++- paunch/cmd.py | 55 ++++----- paunch/runner.py | 45 ++++++-- requirements.txt | 4 +- setup.cfg | 1 - test-requirements.txt | 6 +- tox.ini | 16 ++- 12 files changed, 469 insertions(+), 84 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 857dda2..bf4e10e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=1.8 # Apache-2.0 +pbr>=2.0.0,!=2.1.0 # Apache-2.0 @@ -7 +7 @@ pbr>=1.8 # Apache-2.0 -cliff>=1.4 +cliff>=2.6.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 4a7d204..20dda9f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=0.12.0,<0.13 # Apache-2.0 +hacking>=0.12.0,!=0.13.0,<0.14 # Apache-2.0 @@ -7 +7 @@ hacking>=0.12.0,<0.13 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage>=4.0,!=4.4 # Apache-2.0 @@ -9 +9 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.2.1,!=1.3b1,<1.4 # BSD +sphinx>=1.5.1,!=1.6.1 # BSD

1 0

[oslo] oslo.privsep 1.20.0 (pike)
by no-reply＠openstack.org 23 May '17

23 May '17

We are overjoyed to announce the release of: oslo.privsep 1.20.0: OpenStack library for privilege separation This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.privsep Download the package from: https://pypi.python.org/pypi/oslo.privsep Please report issues through launchpad: http://bugs.launchpad.net/oslo.privsep For more details, please see below. Changes in oslo.privsep 1.19.0..1.20.0 -------------------------------------- 1974564 Updated from global requirements 99e997e Add test to verify log record can be formatted fc61029 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 4 ++-- test-requirements.txt | 2 +- 3 files changed, 26 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 77be859..adcc6c2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -oslo.log>=3.11.0 # Apache-2.0 +oslo.log>=3.22.0 # Apache-2.0 @@ -11 +11 @@ cffi # MIT -eventlet!=0.18.3,>=0.18.2 # MIT +eventlet!=0.18.3,<0.21.0,>=0.18.2 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 69c76f1..1fa96c8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ oslosphinx>=4.7.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[oslo] oslo.versionedobjects 1.24.0 (pike)
by no-reply＠openstack.org 23 May '17

23 May '17

We eagerly announce the release of: oslo.versionedobjects 1.24.0: Oslo Versioned Objects library This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.versionedobjects Download the package from: https://pypi.python.org/pypi/oslo.versionedobjects Please report issues through launchpad: http://bugs.launchpad.net/oslo.versionedobjects For more details, please see below. Changes in oslo.versionedobjects 1.23.0..1.24.0 ----------------------------------------------- f69bb43 Fix string interpolation in ValueError ba00a61 Updated from global requirements 9f4da6b Updated from global requirements cd613cf Updated from global requirements Diffstat (except docs and test files) ------------------------------------- oslo_versionedobjects/fields.py | 6 +++--- requirements.txt | 4 ++-- test-requirements.txt | 4 ++-- 3 files changed, 7 insertions(+), 7 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 82a7481..4765cb4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12 +12 @@ iso8601>=0.1.11 # MIT -oslo.log>=3.11.0 # Apache-2.0 +oslo.log>=3.22.0 # Apache-2.0 @@ -14 +14 @@ oslo.i18n>=2.1.0 # Apache-2.0 -WebOb>=1.6.0 # MIT +WebOb>=1.7.1 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 3bd136b..49ffadf 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ oslosphinx>=4.7.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD @@ -11 +11 @@ sphinx>=1.5.1 # BSD -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0

1 0

[oslo] castellan 0.8.0 (pike)
by no-reply＠openstack.org 23 May '17

23 May '17

We are psyched to announce the release of: castellan 0.8.0: Generic Key Manager interface for OpenStack This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through launchpad: http://bugs.launchpad.net/castellan For more details, please see below. Changes in castellan 0.7.0..0.8.0 --------------------------------- 3042780 MockKeyManager should return a copy of the object instead of actual object 067c765 Replacing six.iteritems() with .items() 29500eb Updated from global requirements a216e48 Updated from global requirements 80249ab Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- test-requirements.txt | 4 ++-- 5 files changed, 25 insertions(+), 7 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 90e1bc2..6e3f3b9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ oslo.utils>=3.20.0 # Apache-2.0 -keystoneauth1>=2.18.0 # Apache-2.0 +keystoneauth1>=2.20.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index cf5835c..9f68652 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -9 +9 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[oslo] oslo.i18n 3.15.2 (pike)
by no-reply＠openstack.org 23 May '17

23 May '17

We exuberantly announce the release of: oslo.i18n 3.15.2: Oslo i18n library This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.i18n Download the package from: https://pypi.python.org/pypi/oslo.i18n Please report issues through launchpad: http://bugs.launchpad.net/oslo.i18n For more details, please see below. Changes in oslo.i18n 3.15.1..3.15.2 ----------------------------------- 66a3e38 Updated from global requirements 0658992 Remove Babel as a runtime requirement Diffstat (except docs and test files) ------------------------------------- requirements.txt | 1 - test-requirements.txt | 3 ++- 2 files changed, 2 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 592e5d4..76ecae7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +5,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -Babel!=2.4.0,>=2.3.4 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index c49c9ef..819fcc5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD @@ -17,0 +18 @@ reno>=1.8.0 # Apache-2.0 +Babel!=2.4.0,>=2.3.4 # BSD

1 0

[oslo] tooz 1.57.0 (pike)
by no-reply＠openstack.org 23 May '17

23 May '17

We are gleeful to announce the release of: tooz 1.57.0: Coordination library for distributed systems. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/tooz Download the package from: https://pypi.python.org/pypi/tooz Please report issues through launchpad: https://bugs.launchpad.net/python-tooz/ For more details, please see below. Changes in tooz 1.56.1..1.57.0 ------------------------------ 6ec73a0 Separate etcd3gw driver that uses the etcd3 grpc gateway 24101cf etcd3: use discard() rather than remove() ae1e422 etcd: fix blocking argument 1a57bbc etcd: fix acquire(blocking=True) on request exception 9eb820b etcd3: fix test run cae8421 coordination: factorize common async result futures code Diffstat (except docs and test files) ------------------------------------- setup.cfg | 3 + tooz/coordination.py | 25 ++++++ tooz/drivers/etcd.py | 4 +- tooz/drivers/etcd3.py | 87 ++++++++++++++++----- tooz/drivers/etcd3gw.py | 193 ++++++++++++++++++++++++++++++++++++++++++++++ tooz/drivers/file.py | 25 +----- tooz/drivers/ipc.py | 27 ++----- tooz/drivers/memcached.py | 70 ++++++++--------- tooz/drivers/redis.py | 25 +----- tox.ini | 17 +++- 12 files changed, 354 insertions(+), 176 deletions(-)

1 0

[oslo] oslo.db 4.21.1 (pike)
by no-reply＠openstack.org 23 May '17

23 May '17

We are ecstatic to announce the release of: oslo.db 4.21.1: Oslo Database library This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.db Download the package from: https://pypi.python.org/pypi/oslo.db Please report issues through launchpad: http://bugs.launchpad.net/oslo.db For more details, please see below. Changes in oslo.db 4.21.0..4.21.1 --------------------------------- 7ae3af7 Updated from global requirements 7c0106b Attach context being used to session/connection info 311e8b8 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- oslo_db/sqlalchemy/enginefacade.py | 45 ++++++++++++++++++--------- setup.cfg | 6 ++-- 3 files changed, 53 insertions(+), 19 deletions(-)

1 0

[oslo] oslo.messaging 5.24.2 (pike)
by no-reply＠openstack.org 23 May '17

23 May '17

We exuberantly announce the release of: oslo.messaging 5.24.2: Oslo Messaging API This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.messaging Download the package from: https://pypi.python.org/pypi/oslo.messaging Please report issues through launchpad: https://bugs.launchpad.net/oslo.messaging For more details, please see below. 5.24.2 ^^^^^^ New Features ************ * Add get_rpc_transport call to make the API clear for the separation of RPC and Notification messaging backends. Deprecation Notes ***************** * Deprecate get_transport and use get_rpc_transport or get_notification_transport to make the API usage clear for the separation of RPC and Notification messaging backends. Changes in oslo.messaging 5.24.1..5.24.2 ---------------------------------------- 7678848 Updated from global requirements 62b8ac6 [AMQP 1.0] Properly shut down test RPC server 12dafbb Fix the amqp1 SSL test CA certificate ec4d663 Add get_rpc_transport call d778aa5 [AMQP 1.0] if RPC call is configured as presettled ignore acks Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/amqp1_driver/controller.py | 4 +- oslo_messaging/_drivers/impl_amqp1.py | 3 +- oslo_messaging/notify/notifier.py | 4 +- oslo_messaging/rpc/__init__.py | 2 + oslo_messaging/rpc/client.py | 14 ++-- oslo_messaging/rpc/server.py | 8 +-- oslo_messaging/rpc/transport.py | 47 ++++++++++++++ oslo_messaging/transport.py | 75 ++++++++++++++++------ .../notes/get_rpc_transport-4aa3511ad9754a60.yaml | 10 +++ test-requirements.txt | 4 +- 14 files changed, 172 insertions(+), 74 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 432c62e..d859abe 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -31 +31 @@ coverage!=4.4,>=4.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD @@ -42 +42 @@ bandit>=1.1.0 # Apache-2.0 -eventlet!=0.18.3,>=0.18.2 # MIT +eventlet!=0.18.3,<0.21.0,>=0.18.2 # MIT

1 0

[mistral] mistral-lib 0.2.0 (pike)
by no-reply＠openstack.org 23 May '17

23 May '17

We are pleased to announce the release of: mistral-lib 0.2.0: Mistral shared routings and utilities (Actions API, YAQL functions API, data types etc.) This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/mistral-lib Download the package from: https://pypi.python.org/pypi/mistral-lib Please report issues through launchpad: http://bugs.launchpad.net/mistral For more details, please see below. Changes in mistral-lib 0.1.0..0.2.0 ----------------------------------- bb1b87b Updated from global requirements 2eadc62 Updated from global requirements e4b9b55 Update serialization from 'mistral' repo with latest changes 6980ad0 Fix documentation for custom actions b5066c3 Remove the unused ApplicationContextNotFoundException 121ba2f Remove unused requirements c0982f4 Make the Result class more convienient to use 2bf7602 Sync tools/tox_install.sh with Mistral dba6056 Updated from global requirements 1718e7d Updated from global requirements Diffstat (except docs and test files) ------------------------------------- mistral_lib/actions/__init__.py | 3 +- mistral_lib/exceptions.py | 5 --- mistral_lib/serialization.py | 18 +++++++++++ requirements.txt | 3 +- test-requirements.txt | 6 ++-- tools/tox_install.sh | 56 +++++++++++++++++++++++++++++++++ tox.ini | 15 ++++++--- 9 files changed, 102 insertions(+), 21 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e8a7482..7f4089a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5 @@ -pbr>=2.0.0 # Apache-2.0 -Babel>=2.3.4 # BSD +pbr!=2.1.0,>=2.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index a787e96..fd918c2 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -8 +8 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD @@ -12,2 +11,0 @@ testrepository>=0.0.18 # Apache-2.0/BSD -testscenarios>=0.4 # Apache-2.0/BSD -testtools>=1.4.0 # MIT

1 0

nova_powervm 4.0.1 (ocata)
by no-reply＠openstack.org 23 May '17

23 May '17

We are happy to announce the release of: nova_powervm 4.0.1: PowerVM driver for OpenStack Nova. This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/nova-powervm/ For more details, please see below.

1 0

networking-powervm 4.0.1 (ocata)
by no-reply＠openstack.org 23 May '17

23 May '17

We are jazzed to announce the release of: networking-powervm 4.0.1: PowerVM Neutron ML2 Agent for OpenStack Neutron. This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/networking-powervm/ For more details, please see below.

1 0

[telemetry] ceilometer-powervm 4.0.1 (ocata)
by no-reply＠openstack.org 23 May '17

23 May '17

We are glad to announce the release of: ceilometer-powervm 4.0.1: PowerVM Ceilometer Inspector for OpenStack Ceilometer. This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/ceilometer-powervm/ For more details, please see below.

1 0

[mistral] mistral 4.0.2 (ocata)
by no-reply＠openstack.org 22 May '17

22 May '17

We are gleeful to announce the release of: mistral 4.0.2: Mistral Project This release is part of the ocata stable release series. Download the package from: https://pypi.python.org/pypi/mistral For more details, please see below. Changes in mistral 4.0.1..4.0.2 ------------------------------- ce3bec7 Fix work of task() without task name within on-clause cases eea496e Updated from global requirements Diffstat (except docs and test files) ------------------------------------- mistral/workflow/data_flow.py | 4 +--- mistral/workflow/direct_workflow.py | 3 +++ requirements.txt | 2 +- 4 files changed, 30 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index aa3bfdf..b969d91 100644 --- a/requirements.txt +++ b/requirements.txt @@ -29 +29 @@ paramiko>=2.0 # LGPLv2.1+ -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0

1 0

[freezer] freezer-web-ui 4.0.1 (ocata)
by no-reply＠openstack.org 22 May '17

22 May '17

We are pumped to announce the release of: freezer-web-ui 4.0.1: Freezer - Backup as a Service User Interface This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/freezer-web-ui/ For more details, please see below. Changes in freezer-web-ui 4.0.0..4.0.1 -------------------------------------- 466d66e Removes useless 'verify' option in Client args 20f7706 Switch BackupObject to use backup_id 7452397 Use bindep to define binary deps 4b4ef0e Update UPPER_CONSTRAINTS_FILE for stable/ocata e850db9 Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 13 +++++++++++++ disaster_recovery/api/api.py | 10 ++++------ tox.ini | 2 +- 4 files changed, 19 insertions(+), 7 deletions(-)

1 0

[cinder] os-brick 1.13.0 (pike)
by no-reply＠openstack.org 22 May '17

22 May '17

We enthusiastically announce the release of: os-brick 1.13.0: OpenStack Cinder brick library for managing local volume attaches This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/os-brick Download the package from: https://pypi.python.org/pypi/os-brick Please report issues through launchpad: http://bugs.launchpad.net/os-brick For more details, please see below. Changes in os-brick 1.12.0..1.13.0 ---------------------------------- c68131d Return correct device path from Veritas connector e48d21b Updated from global requirements 13f2765 Changed way of providing RBD keyring from keyring_path to client token 8b86a2d Change log level on _get_hba_channel_scsi_target 0319bfb Veritas os-brick connector should use privsep 67e1a39 Adding support for FibreChannelConnector for PPC64 520e756 Updated from global requirements f0cc76d Replace random uuid with fake uuid in unit tests f1738d0 Include identity information in rbd commands Diffstat (except docs and test files) ------------------------------------- os_brick/initiator/__init__.py | 3 + os_brick/initiator/connector.py | 15 +++++ .../initiator/connectors/fibre_channel_ppc64.py | 65 ++++++++++++++++++ os_brick/initiator/connectors/rbd.py | 51 +++++++++++---- os_brick/initiator/connectors/vrtshyperscale.py | 14 ++-- os_brick/initiator/linuxfc.py | 55 ++++++++++++++-- .../connectors/test_fibre_channel_ppc64.py | 43 ++++++++++++ .../initiator/connectors/test_vrtshyperscale.py | 42 +++--------- requirements.txt | 4 +- test-requirements.txt | 6 +- 13 files changed, 306 insertions(+), 79 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 887df31..58a4d29 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ Babel!=2.4.0,>=2.3.4 # BSD -eventlet!=0.18.3,>=0.18.2 # MIT +eventlet!=0.18.3,<0.21.0,>=0.18.2 # MIT @@ -12 +12 @@ oslo.i18n>=2.1.0 # Apache-2.0 -oslo.privsep>=1.9.0 # Apache-2.0 +oslo.privsep!=1.17.0,>=1.9.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 24dee74..5c550ae 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking<0.11,>=0.10.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -10 +10 @@ reno>=1.8.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD @@ -18 +18 @@ oslo.vmware>=2.17.0 # Apache-2.0 -castellan>=0.4.0 # Apache-2.0 +castellan>=0.7.0 # Apache-2.0

1 0

[neutron] neutron-lib 1.7.0 (pike)
by no-reply＠openstack.org 22 May '17

22 May '17

We are pleased to announce the release of: neutron-lib 1.7.0: Neutron shared routines and utilities This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/neutron-lib Download the package from: https://pypi.python.org/pypi/neutron-lib Please report issues through launchpad: http://bugs.launchpad.net/neutron For more details, please see below. 1.7.0 ^^^^^ New Features * The constants "VALID_BLANK_EXTRA_DHCP_OPTS" and "DHCP_OPT_VALUE_MAX_LEN" are now public in the "neutron_lib.api.definitions.extra_dhcp_opt" API definition module. Changes in neutron-lib 1.6.0..1.7.0 ----------------------------------- a64b97d Remove duplicated "set of" 2f43cc9 Add VIF_TYPE_TAP constant to portbindings 5c60203 Updated from global requirements 3f290de make extra_dhcp_opt vars public df9c357 rehome NETWORK_ID ml2 constant 43cb255 use constants rather than static strings Diffstat (except docs and test files) ------------------------------------- neutron_lib/api/definitions/data_plane_status.py | 5 +++-- neutron_lib/api/definitions/extra_dhcp_opt.py | 15 ++++++++------- neutron_lib/api/definitions/firewall_v2.py | 19 +++++++++++-------- .../api/definitions/firewallrouterinsertion.py | 3 ++- neutron_lib/api/definitions/network.py | 7 ++++--- neutron_lib/api/definitions/port_security.py | 6 ++++-- neutron_lib/api/definitions/portbindings.py | 6 ++++-- neutron_lib/api/definitions/provider_net.py | 5 +++-- neutron_lib/api/definitions/trunk_details.py | 5 +++-- neutron_lib/plugins/ml2/api.py | 1 + .../extra-dhcp-opt-public-vars-ec4e1c2dcac43d69.yaml | 5 +++++ test-requirements.txt | 4 ++-- 13 files changed, 51 insertions(+), 32 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 0ae82ed..e6692b7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -10 +10 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[release] reno 2.3.0
by no-reply＠openstack.org 22 May '17

22 May '17

We are satisfied to announce the release of: reno 2.3.0: RElease NOtes manager The source is available from: http://git.openstack.org/cgit/openstack/reno Download the package from: https://pypi.python.org/pypi/reno Please report issues through launchpad: http://bugs.launchpad.net/reno For more details, please see below. 2.3.0 ^^^^^ New Features ************ * Add a "lint" command for checking the contents and names of the release notes files against some basic validation rules. Bug Fixes ********* * Sphinx 1.6.1 now interprets error and warning log messages as reasons to abort the build when strict mode is enabled. This release changes the log level for some calls that weren't really errors to begin with to avoid having Sphinx abort the build unnecessarily. Changes in reno 2.2.1..2.3.0 ---------------------------- 2d0d05d add release note for log level fix 65a6939 lower the log level for an error message c985f88 do not use sphinx 1.6.1 06d6574 add a lint command Diffstat (except docs and test files) ------------------------------------- .../notes/add-linter-ce0a861ade64baf2.yaml | 5 ++ ...log-levels-and-sphinx-161-6efe0d291718a657.yaml | 8 ++++ reno/linter.py | 54 ++++++++++++++++++++++ reno/main.py | 13 ++++++ reno/scanner.py | 6 +-- setup.cfg | 2 +- tox.ini | 4 +- 8 files changed, 96 insertions(+), 5 deletions(-)

1 0

[oslo] oslo.rootwrap 5.4.1 (ocata)
by no-reply＠openstack.org 22 May '17

22 May '17

We are stoked to announce the release of: oslo.rootwrap 5.4.1: Oslo Rootwrap This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.rootwrap Download the package from: https://pypi.python.org/pypi/oslo.rootwrap Please report issues through launchpad: http://bugs.launchpad.net/oslo.rootwrap For more details, please see below. Changes in oslo.rootwrap 5.4.0..5.4.1 ------------------------------------- fdacd0e Allow rootwrap-daemon to timeout and exit 776cd50 Avoid importing Linux specific modules on Windows f080dff [daemon] Close inherited filedescriptors after forking bcea49d Update UPPER_CONSTRAINTS_FILE for stable/ocata ef6fe9d Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + etc/rootwrap.conf.sample | 3 +++ oslo_rootwrap/client.py | 3 ++- oslo_rootwrap/daemon.py | 40 +++++++++++++++++++++++++++++++++- oslo_rootwrap/filters.py | 7 +++++- oslo_rootwrap/wrapper.py | 11 +++++++++- tox.ini | 2 +- 8 files changed, 73 insertions(+), 5 deletions(-)

1 0

[oslo] oslo.rootwrap 5.1.2 (newton)
by no-reply＠openstack.org 22 May '17

22 May '17

We are thrilled to announce the release of: oslo.rootwrap 5.1.2: Oslo Rootwrap This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.rootwrap Download the package from: https://pypi.python.org/pypi/oslo.rootwrap Please report issues through launchpad: http://bugs.launchpad.net/oslo.rootwrap For more details, please see below. Changes in oslo.rootwrap 5.1.1..5.1.2 ------------------------------------- af8ad2d Allow rootwrap-daemon to timeout and exit f8fbd3e [daemon] Close inherited filedescriptors after forking Diffstat (except docs and test files) ------------------------------------- etc/rootwrap.conf.sample | 3 +++ oslo_rootwrap/client.py | 3 ++- oslo_rootwrap/daemon.py | 40 +++++++++++++++++++++++++++++++++- oslo_rootwrap/wrapper.py | 6 +++++ 5 files changed, 61 insertions(+), 2 deletions(-)

1 0

[cinder] cinder 10.0.2 (ocata)
by no-reply＠openstack.org 19 May '17

19 May '17

We are satisfied to announce the release of: cinder 10.0.2: OpenStack Block Storage This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/cinder/ For more details, please see below. Changes in cinder 10.0.1..10.0.2 -------------------------------- 589b9aa Fix Pep8 Failures for Python3 501485b genopts: Fix python 3 compat, sort options bbf5d73 Use cg object when invoking update cg method. 30de1d7 Give more time for LVM deactivation cd3c1c2 NetApp: Refresh directory before waiting cc05498 Fix for Group API update to include check policy 418bfec Dell EMC SC: Raise on _init_volume create_snapshot failure a79ddcc Unity driver: fail to disconnect volume 1695e7c [BugFix]Cinder forgets to update 'deleted_at' when deleting 57d2951 VMAX driver - Live Migration is dropping connection 7c3bfd2 Correct Extend lvm Volume a32b0e1 VMAX driver - superfluous debug messages causing error 0f5c408 Don't use tempest special_fields 7880ab7 Fix create_consistencygroup when using CG objects dcb2962 VMAX driver - volumes part of CG not managed correctly 04c7e6a XtremIO: allow a cloned volume with larger size 6c858f2 VMAX driver - Change vendor_name from EMC to Dell EMC Diffstat (except docs and test files) ------------------------------------- cinder/brick/local_dev/lvm.py | 18 +- cinder/config/generate_cinder_opts.py | 15 +- cinder/db/sqlalchemy/api.py | 7 +- cinder/group/api.py | 4 +- cinder/opts.py | 40 +- .../tempest/api/volume/test_consistencygroups.py | 12 +- .../tempest/api/volume/test_volume_unicode.py | 7 +- .../unit/volume/drivers/dell/test_dellscapi.py | 18 + .../unit/volume/drivers/dell_emc/test_vmax.py | 313 ++++++++----- .../unit/volume/drivers/dell_emc/test_xtremio.py | 46 ++ .../volume/drivers/dell_emc/unity/test_client.py | 5 +- .../drivers/netapp/dataontap/test_nfs_cmode.py | 53 ++- .../drivers/nexenta/test_nexenta5_jsonrpc.py | 502 ++++++++++----------- .../drivers/coprhd/helpers/commoncoprhdapi.py | 8 +- .../volume/drivers/dell/dell_storagecenter_api.py | 17 +- cinder/volume/drivers/dell_emc/unity/client.py | 13 +- cinder/volume/drivers/dell_emc/vmax/common.py | 213 ++++++--- cinder/volume/drivers/dell_emc/vmax/iscsi.py | 2 +- cinder/volume/drivers/dell_emc/vmax/masking.py | 263 ++++++----- .../volume/drivers/dell_emc/vmax/provision_v3.py | 3 +- cinder/volume/drivers/dell_emc/vmax/utils.py | 73 --- cinder/volume/drivers/dell_emc/xtremio.py | 11 + cinder/volume/drivers/ibm/ibm_storage/xiv_proxy.py | 2 +- cinder/volume/drivers/netapp/dataontap/nfs_base.py | 13 + cinder/volume/manager.py | 2 +- etc/cinder/rootwrap.d/volume.filters | 3 +- 32 files changed, 1115 insertions(+), 717 deletions(-)

1 0

[documentation] openstackdocstheme 1.9.0
by no-reply＠openstack.org 18 May '17

18 May '17

We are tickled pink to announce the release of: openstackdocstheme 1.9.0: OpenStack Docs Theme The source is available from: https://git.openstack.org/cgit/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ Please report issues through launchpad: https://launchpad.net/openstack-doc-tools For more details, please see below. Changes in openstackdocstheme 1.8.0..1.9.0 ------------------------------------------ 3d4e8ce Updated from global requirements d5c241a Fix links in drop-down menu under Join; add https Diffstat (except docs and test files) ------------------------------------- openstackdocstheme/theme/openstackdocs/header.html | 70 +++++++++++----------- test-requirements.txt | 2 +- 2 files changed, 36 insertions(+), 36 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ae28e29..583e372 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[oslo] pbr 3.0.1
by no-reply＠openstack.org 18 May '17

18 May '17

We are glad to announce the release of: pbr 3.0.1: Python Build Reasonableness The source is available from: http://git.openstack.org/cgit/openstack-dev/pbr Download the package from: https://pypi.python.org/pypi/pbr Please report issues through launchpad: http://bugs.launchpad.net/pbr For more details, please see below. Changes in pbr 3.0.0..3.0.1 --------------------------- c024066 builddoc: uses the new Sphinx 1.6 code for multiple builder 12a1c1d Updated from global requirements 2cf1d2e Fix missing comment from previous change 0469bf3 trivial: Add note about multiple builders support ebd9ae8 Make oslosphinx optional Diffstat (except docs and test files) ------------------------------------- pbr/builddoc.py | 8 ++++++++ pbr/git.py | 9 ++++----- test-requirements.txt | 2 +- 4 files changed, 21 insertions(+), 8 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 9af2728..c40f6e5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0

1 0

[telemetry] ceilometer 7.0.4 (newton)
by no-reply＠openstack.org 17 May '17

17 May '17

We are pumped to announce the release of: ceilometer 7.0.4: OpenStack Telemetry This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/ceilometer/ For more details, please see below. Changes in ceilometer 7.0.3..7.0.4 ---------------------------------- 1276d46 add configuration instructions from admin guide and dev docs c16d089 chill out on the number of items in toc e67d103 tests: fix tests for functional tests without dsvm 46f817a tests: fix messaging driver 2db73af Swallow & report 404s from Swift (missing tenant) c6ff6f6 Adds 'disabled' to the possible states for a member in LBaaSv2 c6b8f5b tripleo: Fix logging of tripleo discovery Diffstat (except docs and test files) ------------------------------------- bindep.txt | 8 ++ ceilometer/hardware/discovery.py | 17 ++-- ceilometer/network/services/lbaas.py | 3 +- ceilometer/objectstore/swift.py | 25 +++-- .../source/cinder/install-cinder-config-common.inc | 16 ++++ install-guide/source/cinder/install-cinder-obs.rst | 40 ++++++++ install-guide/source/cinder/install-cinder-rdo.rst | 40 ++++++++ .../source/cinder/install-cinder-ubuntu.rst | 41 +++++++++ .../cinder/install-cinder-obs.rst | 44 --------- .../cinder/install-cinder-rdo.rst | 44 --------- .../cinder/install-cinder-ubuntu.rst | 45 --------- .../glance/install-glance-obs.rst | 44 --------- .../glance/install-glance-rdo.rst | 44 --------- .../glance/install-glance-ubuntu.rst | 45 --------- .../nova/install-nova-common.rst | 82 ----------------- .../configure_services/nova/install-nova-obs.rst | 32 ------- .../configure_services/nova/install-nova-rdo.rst | 32 ------- .../nova/install-nova-ubuntu.rst | 31 ------- .../swift/install-swift-config-common.rst | 40 -------- .../configure_services/swift/install-swift-obs.rst | 31 ------- .../swift/install-swift-prereq-common.rst | 36 -------- .../configure_services/swift/install-swift-rdo.rst | 31 ------- .../swift/install-swift-ubuntu.rst | 31 ------- install-guide/source/glance/install-glance-obs.rst | 44 +++++++++ install-guide/source/glance/install-glance-rdo.rst | 44 +++++++++ .../source/glance/install-glance-ubuntu.rst | 45 +++++++++ install-guide/source/heat/install-heat-obs.rst | 28 ++++++ install-guide/source/heat/install-heat-rdo.rst | 28 ++++++ install-guide/source/heat/install-heat-ubuntu.rst | 29 ++++++ install-guide/source/index.rst | 17 +--- .../source/install-base-config-common.inc | 76 +++++++++++++++ .../source/install-base-config-common.rst | 76 --------------- install-guide/source/install-base-obs.rst | 8 +- .../source/install-base-prereq-common.inc | 102 +++++++++++++++++++++ .../source/install-base-prereq-common.rst | 102 --------------------- install-guide/source/install-base-rdo.rst | 8 +- install-guide/source/install-base-ubuntu.rst | 8 +- install-guide/source/install-compute-common.inc | 82 +++++++++++++++++ install-guide/source/install-compute-obs.rst | 32 +++++++ install-guide/source/install-compute-rdo.rst | 32 +++++++ install-guide/source/install-compute-ubuntu.rst | 31 +++++++ install-guide/source/install-compute.rst | 17 ++++ install-guide/source/install-controller.rst | 82 +++++++++++++++++ .../source/neutron/install-neutron-obs.rst | 27 ++++++ .../source/neutron/install-neutron-rdo.rst | 27 ++++++ .../source/neutron/install-neutron-ubuntu.rst | 27 ++++++ .../source/swift/install-swift-config-common.inc | 40 ++++++++ install-guide/source/swift/install-swift-obs.rst | 31 +++++++ .../source/swift/install-swift-prereq-common.inc | 36 ++++++++ install-guide/source/swift/install-swift-rdo.rst | 31 +++++++ .../source/swift/install-swift-ubuntu.rst | 31 +++++++ 57 files changed, 1138 insertions(+), 926 deletions(-)

1 0

[mistral] mistral 4.0.1 (ocata)
by no-reply＠openstack.org 17 May '17

17 May '17

We are overjoyed to announce the release of: mistral 4.0.1: Mistral Project This release is part of the ocata stable release series. Download the package from: https://pypi.python.org/pypi/mistral For more details, please see below. 4.0.1 ^^^^^ Bug Fixes * When we pass a workflow environment to workflow parameters using 'env' Mistral first evaluates it assuming that it can contain expressions (YAQL/Jinja) For example, one environment variable can be expressed through the other. In some cases it causes problems. For example, if the environment is too big and has many expressions, especially something like <% $ %> or <% env() %>. Also, in some cases we don't want any evaluations to happen if we want to have some informative text in the environment containing expressions. In order to address that the 'evaluate_env' workflow parameter was added, defaulting to True for backwards compatibility. If it's set to False then it disables evaluation of expressions in the environment. Changes in mistral 4.0.0..4.0.1 ------------------------------- 88f82e9 Release notes for "evaluate_env" 8173522 Add 'evaluate_env' workflow parameter 0663485 Add hide_args=True to @profiler.trace() where it may cause problems b6114b0 Updated from global requirements ffb22c5 Add missing swift actions cb5919c Updated from global requirements d817f07 Updated from global requirements 0e03d18 Updated from global requirements 060a153 Fix memory leak related to cached lookups Diffstat (except docs and test files) ------------------------------------- mistral/actions/openstack/mapping.json | 2 + mistral/api/controllers/v2/resources.py | 2 +- mistral/engine/default_engine.py | 3 +- mistral/engine/dispatcher.py | 2 +- mistral/engine/workflow_handler.py | 8 +-- mistral/engine/workflows.py | 13 +++- mistral/workflow/base.py | 4 +- mistral/workflow/data_flow.py | 10 ++- mistral/workflow/lookup_utils.py | 43 +++++++++--- .../evaluate_env_parameter-14baa54c860da11c.yaml | 16 +++++ requirements.txt | 4 +- 14 files changed, 232 insertions(+), 28 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 088b372..aa3bfdf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -29 +29 @@ paramiko>=2.0 # LGPLv2.1+ -pbr>=1.8 # Apache-2.0 +pbr<2.0.0,>=1.8 # Apache-2.0 @@ -53 +53 @@ tenacity>=3.2.1 # Apache-2.0 -setuptools!=24.0.0,>=16.0 # PSF/ZPL +setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,>=16.0 # PSF/ZPL

1 0

gnocchi 3.0.7
by no-reply＠openstack.org 16 May '17

16 May '17

We are glad to announce the release of: gnocchi 3.0.7: Metric as a Service Download the package from: https://tarballs.openstack.org/gnocchi/ For more details, please see below. Changes in gnocchi 3.0.6..3.0.7 ------------------------------- 0f831a8 swift: make sure to retry if the client cannot find Swift Diffstat (except docs and test files) ------------------------------------- gnocchi/storage/swift.py | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-)

1 0

[quality] os-testr 0.8.2
by no-reply＠openstack.org 16 May '17

16 May '17

We are psyched to announce the release of: os-testr 0.8.2: A testr wrapper to provide functionality for OpenStack projects The source is available from: http://git.openstack.org/cgit/openstack/os-testr Download the package from: https://pypi.python.org/pypi/os-testr Please report issues through launchpad: http://bugs.launchpad.net/os-testr For more details, please see below. Changes in os-testr 0.8.1..0.8.2 -------------------------------- e84d062 Updated from global requirements 2fac2de Remove unused Babel setup Diffstat (except docs and test files) ------------------------------------- requirements.txt | 3 +-- setup.cfg | 14 -------------- test-requirements.txt | 2 +- 3 files changed, 2 insertions(+), 17 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f0b1c09..4fc7eb7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5 @@ -pbr>=2.0.0 # Apache-2.0 -Babel>=2.3.4 # BSD +pbr!=2.1.0,>=2.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 5519481..350f294 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0

1 0

[neutron] ovsdbapp 0.4.0 (pike)
by no-reply＠openstack.org 15 May '17

15 May '17

We exuberantly announce the release of: ovsdbapp 0.4.0: A library for creating OVSDB applications This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through launchpad: http://bugs.launchpad.net/ovsdbapp For more details, please see below. Changes in ovsdbapp 0.3.0..0.4.0 -------------------------------- 71ce425 Updated from global requirements 108d231 Pass the Idl directly to Connection baf68b5 Allow choosing vlog levels to patch and restoring the vlog 326d129 Remove all the deprecated methods and parameters from Connection 558f088 Add a description to README.rst 864a579 Remove empty unit test directory 70e4daa Break out BaseCommand into backend.ovs_idl 4a1f7c1 Fixes retrieving row_by_record for ports on Windows 8022fa9 Ignore .testrepository and editor(s) files Diffstat (except docs and test files) ------------------------------------- .gitignore | 6 ++ README.rst | 10 +- ovsdbapp/backend/ovs_idl/command.py | 46 +++++++++ ovsdbapp/backend/ovs_idl/connection.py | 107 +++++++-------------- ovsdbapp/backend/ovs_idl/fixtures.py | 32 ++++++ ovsdbapp/backend/ovs_idl/idlutils.py | 12 ++- ovsdbapp/backend/ovs_idl/vlog.py | 60 ++++++++++-- ovsdbapp/schema/open_vswitch/commands.py | 31 +----- .../schema/open_vswitch/test_impl_idl.py | 15 +-- requirements.txt | 1 + test-requirements.txt | 2 +- 15 files changed, 284 insertions(+), 177 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6d71977..6269b43 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,0 +5 @@ +fixtures>=3.0.0 # Apache-2.0/BSD diff --git a/test-requirements.txt b/test-requirements.txt index 2a78f0c..d267ffd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ hacking<0.13,>=0.12.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0

1 0

[oslo] oslo.policy 1.22.1 (pike)
by no-reply＠openstack.org 15 May '17

15 May '17

We are stoked to announce the release of: oslo.policy 1.22.1: Oslo Policy library This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.policy Download the package from: https://pypi.python.org/pypi/oslo.policy Please report issues through launchpad: https://bugs.launchpad.net/oslo.policy For more details, please see below. Changes in oslo.policy 1.22.0..1.22.1 ------------------------------------- 6715695 Updated from global requirements a7ab49e Optimize the link address 03e4352 Add release note for DocumentedRuleDefault 5d461fa Remove log translations Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 4 ++-- HACKING.rst | 4 ++-- README.rst | 10 +++++----- oslo_policy/_i18n.py | 10 ---------- oslo_policy/_parser.py | 7 +++---- oslo_policy/policy.py | 9 ++++----- .../oslo-policy-descriptive-support-3ee688c5fa48d751.yaml | 11 +++++++++++ test-requirements.txt | 2 +- 8 files changed, 28 insertions(+), 29 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 799c3ab..3f6d4a2 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ requests-mock>=1.1 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0

1 0

[oslo] oslo.config 4.1.1 (pike)
by no-reply＠openstack.org 15 May '17

15 May '17

We enthusiastically announce the release of: oslo.config 4.1.1: Oslo Configuration API This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.config Download the package from: https://pypi.python.org/pypi/oslo.config Please report issues through launchpad: https://bugs.launchpad.net/oslo.config For more details, please see below. Changes in oslo.config 4.1.0..4.1.1 ----------------------------------- a8046b4 Updated from global requirements 47d7c1c Handle multi-line default values in olso-config-generator 0b02005 Clarify info on a comment Diffstat (except docs and test files) ------------------------------------- oslo_config/cfg.py | 5 ++++- oslo_config/generator.py | 2 +- test-requirements.txt | 2 +- 4 files changed, 22 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index d0d49be..e440094 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16 @@ oslotest>=1.10.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0

1 0

[oslo] oslo.utils 3.25.1 (pike)
by no-reply＠openstack.org 15 May '17

15 May '17

We are gleeful to announce the release of: oslo.utils 3.25.1: Oslo Utility library This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.utils Download the package from: https://pypi.python.org/pypi/oslo.utils Please report issues through launchpad: http://bugs.launchpad.net/oslo.utils For more details, please see below. Changes in oslo.utils 3.25.0..3.25.1 ------------------------------------ 9e913db Updated from global requirements 3be07ed Remove split conversion to tuple f69aa3c Updated from global requirements Diffstat (except docs and test files) ------------------------------------- oslo_utils/timeutils.py | 8 ++++---- requirements.txt | 2 +- test-requirements.txt | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ad7beae..46af08f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ -pbr>=2.0.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 2fe4170..fe0f99d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -17 +17 @@ oslotest>=1.10.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0

1 0

[oslo] oslo.i18n 3.15.1 (pike)
by no-reply＠openstack.org 15 May '17

15 May '17

We high-spiritedly announce the release of: oslo.i18n 3.15.1: Oslo i18n library This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/oslo.i18n Download the package from: https://pypi.python.org/pypi/oslo.i18n Please report issues through launchpad: http://bugs.launchpad.net/oslo.i18n For more details, please see below. Changes in oslo.i18n 3.15.0..3.15.1 ----------------------------------- 9d76e94 Updated from global requirements 1f0c093 Updated from global requirements 2e90bc6 Updated from global requirements 220901c Check reStructuredText documents for common style issues Diffstat (except docs and test files) ------------------------------------- HACKING.rst | 6 +++--- requirements.txt | 4 ++-- test-requirements.txt | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1894adb..592e5d4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5,2 @@ -pbr>=2.0.0 # Apache-2.0 -Babel>=2.3.4 # BSD +pbr!=2.1.0,>=2.0.0 # Apache-2.0 +Babel!=2.4.0,>=2.3.4 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index f48a979..c49c9ef 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ oslotest>=1.10.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0

1 0

[oslo] tooz 1.56.1 (pike)
by no-reply＠openstack.org 15 May '17

15 May '17

We jubilantly announce the release of: tooz 1.56.1: Coordination library for distributed systems. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/tooz Download the package from: https://pypi.python.org/pypi/tooz Please report issues through launchpad: https://bugs.launchpad.net/python-tooz/ For more details, please see below. Changes in tooz 1.56.0..1.56.1 ------------------------------ c9421c6 Fix psycopg2 connection argument Diffstat (except docs and test files) ------------------------------------- tooz/drivers/pgsql.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[oslo] oslo.messaging 5.24.1 (pike)
by no-reply＠openstack.org 15 May '17

15 May '17

We are stoked to announce the release of: oslo.messaging 5.24.1: Oslo Messaging API This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.messaging Download the package from: https://pypi.python.org/pypi/oslo.messaging Please report issues through launchpad: https://bugs.launchpad.net/oslo.messaging For more details, please see below. Changes in oslo.messaging 5.24.0..5.24.1 ---------------------------------------- 831cbf8 Updated from global requirements 8f5cfda Disable AMQP 1.0 SSL unit tests Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 2 +- 2 files changed, 3 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 711a433..432c62e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -28 +28 @@ kafka-python>=1.3.1 # Apache-2.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0

1 0

[openstackansible] openstack-ansible-os_nova 15.1.3 (ocata)
by no-reply＠openstack.org 15 May '17

15 May '17

We are satisfied to announce the release of: openstack-ansible-os_nova 15.1.3: os_nova for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_nova/ For more details, please see below. 15.1.3 ^^^^^^ New Features ************ * New variables have been added to allow a deployer to customize a nova systemd unit file to their liking. * The task dropping the nova systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. * For the "os_nova" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "nova_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Upgrade Notes ************* * For the "os_nova" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "nova_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Changes in openstack-ansible-os_nova 15.1.2..15.1.3 --------------------------------------------------- 664ff93 Rename release note to unique hash 57e562d Rename reno to avoid conflict on integrated repo 3bc0b7d Reduce init restart/kill times 2116690 Ensure the components are isolated from the system 227e4c8 Enable Nginx for nova-placement Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 19 ++++++++++++++++++ handlers/main.yml | 1 + ...ova-init-config-overrides-7221a8f9d5be9291.yaml | 9 +++++++++ .../nova_init_time_settings-cef7e89ab41da256.yaml | 23 ++++++++++++++++++++++ tasks/nova_init_systemd.yml | 4 +++- templates/nova-systemd-init.j2 | 13 ++++++++++-- 6 files changed, 66 insertions(+), 3 deletions(-)

1 0

[openstackansible] openstack-ansible-os_rally 15.1.3 (ocata)
by no-reply＠openstack.org 15 May '17

15 May '17

We are gleeful to announce the release of: openstack-ansible-os_rally 15.1.3: os_rally for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_rally/ For more details, please see below. Changes in openstack-ansible-os_rally 15.0.0.0rc1..15.1.3 --------------------------------------------------------- 36c7a43 Install python2-pyOpenSSL package on CentOS 28dcce9 Update repo for stable/ocata e8065e4 Update UPPER_CONSTRAINTS_FILE for stable/ocata ab214ad Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 2 +- tox.ini | 6 +++--- 5 files changed, 17 insertions(+), 16 deletions(-)

1 0

[openstackansible] openstack-ansible-os_designate 15.1.3 (ocata)
by no-reply＠openstack.org 15 May '17

15 May '17

We are gleeful to announce the release of: openstack-ansible-os_designate 15.1.3: os_designate for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_designate/ For more details, please see below. Changes in openstack-ansible-os_designate 15.0.0.0rc1..15.1.3 ------------------------------------------------------------- fc4f0fb Install python2-pyOpenSSL package on CentOS aa2e70b Remove extras directory fa8f2b5 Update repo for stable/ocata 905a7c3 Enable current Designate services 4061ca5 Configure pools.yaml inside Designate role 4d1fba3 Update UPPER_CONSTRAINTS_FILE for stable/ocata b996422 Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- defaults/main.yml | 58 +++++++++---- examples/playbook.yml | 1 - extras/conf.d/designate.yml.aio | 3 - extras/env.d/designate.yml | 57 ------------- extras/group_vars_designate.yml | 13 --- extras/haproxy_designate.yml | 10 --- extras/os-designate-install.yml | 95 ---------------------- extras/repo_designate.yml | 4 - extras/user_secrets_designate.yml | 7 -- ...ignate-pools-yaml-support-d693dc2471642167.yaml | 11 +++ tasks/designate_db_setup.yml | 6 +- tasks/designate_post_install.yml | 6 ++ tasks/main.yml | 3 + templates/designate.conf.j2 | 58 +++++++++++-- tox.ini | 6 +- 24 files changed, 168 insertions(+), 350 deletions(-)

1 0

[openstackansible] openstack-ansible-rsyslog_server 15.1.3 (ocata)
by no-reply＠openstack.org 15 May '17

15 May '17

We are happy to announce the release of: openstack-ansible-rsyslog_server 15.1.3: rsyslog_server for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rsyslog_server/ For more details, please see below. Changes in openstack-ansible-rsyslog_server 15.0.0.0rc1..15.1.3 --------------------------------------------------------------- a7d4b0d Install python2-pyOpenSSL package on CentOS d82b673 Fix inconsistency for tag 7c9c6de Update repo for stable/ocata 1df82d0 Update UPPER_CONSTRAINTS_FILE for stable/ocata 526768e Update .gitreview for stable/ocata Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 2 +- tasks/main.yml | 4 ++-- tasks/rsyslog_server_post_install.yml | 2 +- tox.ini | 6 +++--- 6 files changed, 9 insertions(+), 8 deletions(-)

1 0

[openstackansible] openstack-ansible-rabbitmq_server 15.1.3 (ocata)
by no-reply＠openstack.org 15 May '17

15 May '17

We eagerly announce the release of: openstack-ansible-rabbitmq_server 15.1.3: rabbitmq_server for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-rabbitmq_server/ For more details, please see below. Changes in openstack-ansible-rabbitmq_server 15.1.2..15.1.3 ----------------------------------------------------------- 0bc0ed4 Use checksum option when downloading RabbitMQ 9745615 Update RabbitMQ to v3.6.9-1 Diffstat (except docs and test files) ------------------------------------- meta/main.yml | 2 +- tasks/rabbitmq_pre_install.yml | 13 +------------ vars/debian.yml | 4 ++-- vars/redhat.yml | 4 ++-- 6 files changed, 12 insertions(+), 23 deletions(-)

1 0

[openstackansible] openstack-ansible-os_gnocchi 15.1.3 (ocata)
by no-reply＠openstack.org 15 May '17

15 May '17

We are glad to announce the release of: openstack-ansible-os_gnocchi 15.1.3: os_gnocchi for OpenStack Ansible This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/openstack-ansible-os_gnocchi/ For more details, please see below. 15.1.3 ^^^^^^ New Features ************ * New variables have been added to allow a deployer to customize a gnocchi systemd unit file to their liking. * The task dropping the gnocchi systemd unit files now uses the "config_template" action plugin allowing deployers access to customize the unit files as they see fit without having to load extra options into the defaults and polute the generic systemd unit file with jinja2 variables and conditionals. * For the "os_gnocchi" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "gnocchi_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Upgrade Notes ************* * For the "os_gnocchi" role, the systemd unit "TimeoutSec" value which controls the time between sending a SIGTERM signal and a SIGKILL signal when stopping or restarting the service has been reduced from 300 seconds to 120 seconds. This provides 2 minutes for long-lived sessions to drain while preventing new ones from starting before a restart or a stop. The "RestartSec" value which controls the time between the service stop and start when restarting has been reduced from 150 seconds to 2 seconds to make the restart happen faster. These values can be adjusted by using the "gnocchi_*_init_config_overrides" variables which use the "config_template" task to change template defaults. Changes in openstack-ansible-os_gnocchi 15.1.2..15.1.3 ------------------------------------------------------ 39d9785 Rename release note to unique hash 4650829 Rename reno to avoid conflict on integrated repo 2c2ebfd Reduce init restart/kill times 6d95f76 Ensure the components are isolated from the system Diffstat (except docs and test files) ------------------------------------- defaults/main.yml | 5 +++++ ...chi-init-config-overrides-4fc9ec27ea1bd090.yaml | 10 ++++++++++ ...nocchi_init_time_settings-ba554f29fc7fd351.yaml | 23 ++++++++++++++++++++++ tasks/gnocchi_init_systemd.yml | 4 +++- templates/gnocchi-systemd-init.j2 | 13 ++++++++++-- 5 files changed, 52 insertions(+), 3 deletions(-)

1 0