August 2017 - Release-announce - lists.openstack.org

[mistral] mistral 5.0.0 (pike)
by no-reply＠openstack.org 30 Aug '17

30 Aug '17

We high-spiritedly announce the release of: mistral 5.0.0: Mistral Project This release is part of the pike release series. Download the package from: https://pypi.python.org/pypi/mistral For more details, please see below. Changes in mistral 5.0.0.0b3..5.0.0 ----------------------------------- a2c1db4 Add doc8 rule and check doc/source files 8a1572a [Triggers] Fix running openstack actions via triggers 827aca5 TrivialFix: Fix typo 16b54d8 Cascade pause from pause-before in subworkflows 8b642e9 Cascade pause and resume to and from subworkflows 4a64ae1 Move dsl_v2 document to user guide f45f609 Updated from global requirements b8e1664 [Trusts] Fix deleting trust cab9435 Fix event-triggers workflow namespace 0b93cfa Small typo fix c5b46ba Fixed crontrigger execution error. 1f35e91 Fix drop index in version 022 DB upgrade script c9fcb03 Allow async action execution to be paused and resumed 087f705 Set mistral-dashboard default branch to master 356a1cf Create and run a workflow within a namespace 7d8d4fb Allow to list all cron-triggers cbee740 Create and run a workflow within a namespace 5c15556 Fix auth in actions if there is no auth_uri in context b345505 Use more specific asserts in tests 96e2f8e Add releasenote for public event triggers 4e38d9d Remove deprecation warning from tests fec8513 Add Glare action pack 1539bfa TrivialFix: Fix typo 700366e Use recommended function to setup auth middleware in devstack 0ab0392 Updated from global requirements 2b0d4f0 Updated from global requirements f64f6c1 Fix the pep8 commands failed e0f2fb7 Fix cron-triggers and openstack actions e780ffb [Event-triggers] Allow public triggers 601e09b Fix some reST field lists in docstrings Diffstat (except docs and test files) ------------------------------------- HACKING.rst | 1 - README.rst | 2 +- devstack/plugin.sh | 15 +- devstack/settings | 3 +- etc/policy.json | 2 + mistral/actions/generator_factory.py | 1 + mistral/actions/openstack/actions.py | 29 + mistral/actions/openstack/mapping.json | 19 + mistral/api/controllers/v2/action_execution.py | 40 +- mistral/api/controllers/v2/cron_trigger.py | 13 +- mistral/api/controllers/v2/event_trigger.py | 4 + mistral/api/controllers/v2/execution.py | 1 + mistral/api/controllers/v2/resources.py | 23 +- mistral/api/controllers/v2/workflow.py | 49 +- .../versions/022_namespace_support.py | 125 ++ mistral/db/v2/api.py | 20 +- mistral/db/v2/sqlalchemy/api.py | 99 +- mistral/db/v2/sqlalchemy/models.py | 10 +- mistral/engine/action_handler.py | 25 + mistral/engine/actions.py | 29 +- mistral/engine/base.py | 5 +- mistral/engine/default_engine.py | 25 +- mistral/engine/engine_server.py | 24 +- mistral/engine/policies.py | 3 +- mistral/engine/task_handler.py | 104 + mistral/engine/tasks.py | 33 + mistral/engine/utils.py | 9 +- mistral/engine/workflow_handler.py | 38 +- mistral/engine/workflows.py | 38 +- mistral/event_engine/default_event_engine.py | 38 +- mistral/exceptions.py | 5 + mistral/hacking/checks.py | 25 - mistral/rpc/clients.py | 39 +- mistral/services/periodic.py | 21 +- mistral/services/security.py | 32 +- mistral/services/triggers.py | 46 +- mistral/services/workbooks.py | 1 + mistral/services/workflows.py | 38 +- .../for_wf_namespace/lowest_level_wf.yaml | 6 + .../resources/for_wf_namespace/middle_wf.yaml | 6 + .../resources/for_wf_namespace/top_level_wf.yaml | 6 + .../actions/openstack/test_openstack_actions.py | 13 + .../unit/engine/test_direct_workflow_rerun.py | 22 +- .../engine/test_direct_workflow_rerun_cancelled.py | 8 +- .../engine/test_direct_workflow_with_cycles.py | 6 +- .../test_execution_fields_size_limitation.py | 11 +- .../unit/engine/test_reverse_workflow_rerun.py | 5 +- .../test_reverse_workflow_rerun_cancelled.py | 2 +- .../unit/engine/test_subworkflows_pause_resume.py | 2287 ++++++++++++++++++++ mistral/utils/openstack/keystone.py | 97 +- .../services/v2/mistral_client.py | 92 +- ...add_public_event_triggers-ab6249ca85fd5497.yaml | 7 + ...rkflows-within-namespaces-e4fba869a889f55f.yaml | 17 + requirements.txt | 7 +- tools/get_action_list.py | 13 +- tox.ini | 12 +- 131 files changed, 6062 insertions(+), 2009 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2476fd3..c81f27a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -33 +33 @@ pecan!=1.0.2,!=1.0.3,!=1.0.4,!=1.2,>=1.0.0 # BSD -python-barbicanclient>=4.0.0 # Apache-2.0 +python-barbicanclient!=4.5.0,!=4.5.1,>=4.0.0 # Apache-2.0 @@ -35 +35 @@ python-ceilometerclient>=2.5.0 # Apache-2.0 -python-cinderclient>=3.0.0 # Apache-2.0 +python-cinderclient>=3.1.0 # Apache-2.0 @@ -37 +37,2 @@ python-designateclient>=1.5.0 # Apache-2.0 -python-glanceclient>=2.7.0 # Apache-2.0 +python-glanceclient>=2.8.0 # Apache-2.0 +python-glareclient>=0.3.0 # Apache-2.0

1 0

[manila] manila 5.0.0 (pike)
by no-reply＠openstack.org 30 Aug '17

30 Aug '17

We are pleased to announce the release of: manila 5.0.0: Shared Storage for OpenStack This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/manila/ For more details, please see below. 5.0.0 ^^^^^ Bug Fixes * Re-enabled the consistent snapshot code in the NetApp driver, now compatible with the Manila Share Groups API instead of the deprecated and removed Manila Consistency Groups API. Changes in manila 5.0.0.0b3..5.0.0 ---------------------------------- 80fe5f1 Re-enable broken CG code in NetApp driver c408401 Fix wrong links 05b5f7a [Api-ref] Add supported protocol "MAPRFS" in doc 52ea955 Add API document for share group quotas fae39f7 [Doc] Remove unused 'provider_location' parameter ee5fd42 [Doc] Fix API document for Consistency group 29a5226 [Tempest] Fix tests for pre-existing share network 5e8df29 NetApp cDOT: Fix security style for CIFS shares e37f1eb Remove duplicate variables. 345021d Remove tempest pin 73a72ae Imported Translations from Zanata 553fdbf Update links in README e3b6f4a Fix NFSHelper 0-length netmask bug fb17422 Enable some off-by-default checks 06d73fc Imported Translations from Zanata 5cb87d5 Fix multiple issues with revert to snapshot in LVM bbb1426 Add exception for no default share type configured a1ba28c Fix cannot deny ipv6 access rules 98255e6 Removed unnecessary setUp() calls in tests 5084efe [Trivialfix]Fix typos bc46dc6 Imported Translations from Zanata 56718fe Use tempest-plugin service client registration f6372af Imported Translations from Zanata e202f75 Add ipaddress in manila requirements 8f365c6 Updated from global requirements 236b7ad Enable IPv6 in manila(documentation) 7555048 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- README.rst | 8 +- api-ref/source/consistency-group-snapshots.inc | 8 +- api-ref/source/consistency-groups.inc | 8 +- api-ref/source/parameters.yaml | 74 ++++--- api-ref/source/quota-sets.inc | 12 ++ .../source/samples/quota-show-detail-response.json | 8 +- api-ref/source/samples/quota-show-response.json | 4 +- api-ref/source/samples/quota-update-response.json | 4 +- api-ref/source/share-types.inc | 12 +- api-ref/source/shares.inc | 2 + contrib/ci/common.sh | 1 - contrib/ci/pre_test_hook.sh | 3 - contrib/share_driver_hooks/zaqar_notification.py | 6 +- .../share_back_ends_feature_support_mapping.rst | 224 ++++++++++----------- etc/manila/rootwrap.d/share.filters | 4 - manila/api/openstack/wsgi.py | 6 +- .../3651e16d7c43_add_consistency_groups.py | 2 +- .../e1949a93157a_add_share_group_types_table.py | 2 +- ...8723178_remove_host_from_driver_private_data.py | 6 +- manila/db/sqlalchemy/api.py | 4 + manila/exception.py | 5 + manila/message/api.py | 6 +- manila/scheduler/drivers/filter.py | 8 +- manila/scheduler/filters/ignore_attempted_hosts.py | 6 +- manila/scheduler/host_manager.py | 4 +- manila/service.py | 2 +- manila/share/access.py | 18 +- manila/share/api.py | 8 +- manila/share/driver.py | 24 ++- manila/share/drivers/container/driver.py | 8 +- manila/share/drivers/container/protocol_helper.py | 2 +- manila/share/drivers/container/storage_helper.py | 2 +- manila/share/drivers/generic.py | 4 +- manila/share/drivers/glusterfs/common.py | 2 +- manila/share/drivers/helpers.py | 57 +++--- manila/share/drivers/hitachi/hnas/driver.py | 10 +- manila/share/drivers/hitachi/hnas/ssh.py | 2 +- manila/share/drivers/huawei/v3/helper.py | 2 +- manila/share/drivers/ibm/gpfs.py | 4 +- manila/share/drivers/lvm.py | 81 ++++---- manila/share/drivers/netapp/common.py | 4 +- .../netapp/dataontap/client/client_cmode.py | 38 +++- .../netapp/dataontap/cluster_mode/drv_multi_svm.py | 53 +++-- .../dataontap/cluster_mode/drv_single_svm.py | 53 +++-- .../netapp/dataontap/cluster_mode/lib_base.py | 90 +++++---- .../netapp/dataontap/cluster_mode/lib_multi_svm.py | 2 +- .../dataontap/cluster_mode/lib_single_svm.py | 2 +- .../netapp/dataontap/protocols/cifs_cmode.py | 4 + .../netapp/dataontap/protocols/nfs_cmode.py | 6 +- manila/share/drivers/netapp/utils.py | 10 +- manila/share/drivers/qnap/qnap.py | 2 +- manila/share/drivers/quobyte/jsonrpc.py | 2 +- manila/share/drivers/quobyte/quobyte.py | 8 +- manila/share/drivers/service_instance.py | 4 +- manila/share/drivers/windows/windows_smb_helper.py | 6 +- manila/share/drivers/zfsonlinux/driver.py | 2 +- manila/share/manager.py | 32 +-- manila/share/snapshot_access.py | 5 + .../share/drivers/hitachi/hnas/test_driver.py | 2 +- .../share/drivers/hpe/test_hpe_3par_driver.py | 3 - .../netapp/dataontap/client/test_client_cmode.py | 43 ++++ .../netapp/dataontap/cluster_mode/test_lib_base.py | 179 +++++++++------- .../netapp/dataontap/protocols/test_cifs_cmode.py | 2 + .../services/share/json/__init__.py | 17 ++ .../services/share/json/shares_client.py | 10 +- .../services/share/v2/json/shares_client.py | 4 +- .../api/test_security_services_mapping_negative.py | 4 +- ...bug-1659023-netapp-cg-fix-56bb77b7bc61c3f5.yaml | 5 + ...rity-style-on-cifs-shares-cbdd557a27d11961.yaml | 4 + ...for-no-default-share-type-b1dd9bbe8c9cb3df.yaml | 5 + ...deny-ipv6-access-in-error-bce379ee310060f6.yaml | 7 + ...ke-lvm-revert-synchronous-0ef5baee3367fd27.yaml | 4 + ...7946-nfs-helper-0-netmask-224da94b82056f93.yaml | 5 + .../source/locale/es/LC_MESSAGES/releasenotes.po | 2 +- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 2 +- requirements.txt | 5 +- test-requirements.txt | 2 +- tox.ini | 5 + 114 files changed, 1113 insertions(+), 726 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1f101de..5c9a28c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ greenlet>=0.3.2 # MIT +ipaddress>=1.0.7;python_version<'3.3' # PSF @@ -33 +34 @@ python-neutronclient>=6.3.0 # Apache-2.0 -keystoneauth1>=3.0.1 # Apache-2.0 +keystoneauth1>=3.1.0 # Apache-2.0 @@ -42 +43 @@ tooz>=1.47.0 # Apache-2.0 -python-cinderclient>=3.0.0 # Apache-2.0 +python-cinderclient>=3.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 5dc7f0d..7ef57e2 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16 @@ oslosphinx>=4.7.0 # Apache-2.0 -openstackdocstheme>=1.11.0 # Apache-2.0 +openstackdocstheme>=1.16.0 # Apache-2.0

1 0

[murano] murano 4.0.0 (pike)
by no-reply＠openstack.org 30 Aug '17

30 Aug '17

We enthusiastically announce the release of: murano 4.0.0: Murano API This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/murano/ For more details, please see below. Changes in murano 4.0.0.0rc1..4.0.0 ----------------------------------- ecaf6ef Add securityGroups param to NovaNetwork joinInstance method in Core Library 6958134 Ensure assigned-ips output is present in Heat template with Nova Network 07fd0b4 Deploy murano-api via uwsgi fee8c6e Update UPPER_CONSTRAINTS_FILE for stable/pike 38ca5c9 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/files/apache-murano-api.template | 25 ++++++++++++ devstack/plugin.sh | 49 ++++++++++++++++++----- devstack/settings | 1 + meta/io.murano/Classes/resources/NovaNetwork.yaml | 15 ++++--- murano/common/server.py | 24 +++++++++++ murano/httpd/murano_api.py | 3 ++ tox.ini | 2 +- 8 files changed, 105 insertions(+), 15 deletions(-)

1 0

[mistral] mistral-extra 5.0.0 (pike)
by no-reply＠openstack.org 30 Aug '17

30 Aug '17

We are amped to announce the release of: mistral-extra 5.0.0: Mistral OpenStack-specific bindings This release is part of the pike release series. Download the package from: https://pypi.python.org/pypi/mistral-extra For more details, please see below. Changes in mistral-extra 5.0.0.0b2..5.0.0 ----------------------------------------- b542d7f Change author Diffstat (except docs and test files) ------------------------------------- setup.cfg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

[cinder] cinder 11.0.0 (pike)
by no-reply＠openstack.org 30 Aug '17

30 Aug '17

We joyfully announce the release of: cinder 11.0.0: OpenStack Block Storage This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/cinder/ For more details, please see below. 11.0.0 ^^^^^^ Upgrade Notes ************* * The default value for pure_replica_interval_default used by Pure Storage volume drivers has changed from 900 to 3600 seconds. * When managing volume types an OpenStack provider is now given more control to grant access to for different storage type operations. The provider can now customize access to type create, delete, update, list, and show using new entries in the cinder policy file. As an example one provider may have roles called viewer, admin, type_viewer, and say type_admin. Admin and type_admin can create, delete, update types. Everyone can list the storage types. Admin, type_viewer, and type_admin can view the extra_specs. "volume_extension:types_extra_specs:create": "rule:admin or rule:type_admin", "volume_extension:types_extra_specs:delete": "rule:admin or rule:type_admin", "volume_extension:types_extra_specs:index": "", "volume_extension:types_extra_specs:show": "rule:admin or rule:type_admin or rule:type_viewer", "volume_extension:types_extra_specs:update": "rule:admin or rule:type_admin" Bug Fixes ********* * Fixes an issue where starting the Pure volume drivers with replication enabled and default values for pure_replica_interval_default would cause an error to be raised from the backend. Changes in cinder 11.0.0.0rc1..11.0.0 ------------------------------------- 6f663fb [Doc Bld Fix] Add links to man page contents 3bd4dc8 Allow v3.0 volume metadata API calls 1d7825d IBM Storage: add QoS documentation a5ec54a Ibm_storage - fix failover_replication. aed99f5 Revert "Mark Virtuozzo driver as unsupported" 57a2ddc SMBFS: enable thin provisioning support flag 9412d14 3PAR: Fixed image cache enabled capability. bfa0954 IBM storage: check pyxcli version on initialize 075df50 Ibm_storage - fix delete group with replication 3de35b3 [Docs] Storwize:Update document for Pike release 5231511 [Docs] Add documentation contribution docs 46d9b40 Make VolumeTypeExtraSpecsController policy more granular 0d02e6f Change pure drivers default replication interval 85767ed Update UPPER_CONSTRAINTS_FILE for stable/pike 2e03e09 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + cinder/api/v3/volume_metadata.py | 40 +++---- .../unit/volume/drivers/ibm/test_xiv_proxy.py | 101 ++++++++++++++-- cinder/volume/drivers/hpe/hpe_3par_common.py | 29 ++++- cinder/volume/drivers/ibm/ibm_storage/xiv_proxy.py | 76 ++++++++---- .../drivers/ibm/ibm_storage/xiv_replication.py | 4 +- cinder/volume/drivers/pure.py | 6 +- cinder/volume/drivers/remotefs.py | 8 +- cinder/volume/drivers/vzstorage.py | 3 - cinder/volume/drivers/windows/smbfs.py | 1 + .../drivers/ibm-storage-volume-driver.rst | 123 ++++++++++++++------ .../drivers/ibm-storwize-svc-driver.rst | 54 ++++++--- .../block-storage/drivers/pure-storage-driver.rst | 4 +- driver-requirements.txt | 2 +- ...mark-vzstorage-deprecated-598e5c4f2dc65f29.yaml | 14 --- ...-default-replica-interval-07de0a56f61c7c1e.yaml | 10 ++ .../type-extra-spec-policies-b7742b0ac2732864.yaml | 16 +++ tox.ini | 2 +- 36 files changed, 623 insertions(+), 171 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 694d770..299a2c4 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -28 +28 @@ pywbem>=0.7.0 # LGPLv2.1+ -pyxcli>=1.1.0 # Apache-2.0 +pyxcli>=1.1.5 # Apache-2.0

1 0

[designate] designate-dashboard 5.0.0 (pike)
by no-reply＠openstack.org 30 Aug '17

30 Aug '17

We are chuffed to announce the release of: designate-dashboard 5.0.0: Designate Horizon UI bits This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/designate-dashboard/ For more details, please see below. Changes in designate-dashboard 5.0.0.0b3..5.0.0 ----------------------------------------------- 8169c4b Updated from global requirements Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 73dc412..b8e2bc4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16 @@ sphinx>=1.6.2 # BSD -openstackdocstheme>=1.11.0 # Apache-2.0 +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -25 +25 @@ nosexcover # BSD -Django<1.11,>=1.8 # BSD +Django<2.0,>=1.8 # BSD @@ -27 +27 @@ django-compressor>=2.0 # MIT -django-openstack-auth>=3.1.0 # Apache-2.0 +django-openstack-auth>=3.5.0 # Apache-2.0

1 0

[keystone] keystone 12.0.0 (pike)
by no-reply＠openstack.org 30 Aug '17

30 Aug '17

We are overjoyed to announce the release of: keystone 12.0.0: OpenStack Identity This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/keystone/ For more details, please see below. 12.0.0 ^^^^^^ Upgrade Notes ************* * [bug 1702211 (https://bugs.launchpad.net/keystone/+bug/1702211) Password *created_at* field under some versions/deployments of MySQL would lose sub-second precision. This means that it was possible for passwords to be returned out-of-order when changed within one second (especially common in testing). This change stores password *created_at* and *expires_at* as an integer instead of as a DATETIME data-type. * The resource backend cannot be configured to anything but SQL if the SQL Identity backend is being used. The resource backend must now be SQL which allows for the use of Foreign Keys to domains/projects wherever desired. This makes managing project relationships and such much more straight forward. The inability to configure non-SQL resource backends has been in Keystone since at least Ocata. This is eliminating some complexity and preventing the need for some really ugly back-port SQL migrations in favor of a better model. Resource is highly relational and should be SQL based. Bug Fixes ********* * [bug 1701324 (https://bugs.launchpad.net/keystone/+bug/1701324) Token bodies now contain only unique roles in the authentication response. Changes in keystone 12.0.0.0rc1..12.0.0 --------------------------------------- 10a9ef5 Remove duplicate roles from federated auth 66a1047 Add int storage of datetime for password created/expires 05c535c Resource backend is SQL only now Diffstat (except docs and test files) ------------------------------------- .../024_contract_create_created_at_int_columns.py | 61 +++++++++++++++++++ keystone/common/sql/core.py | 48 +++++++++++++++ .../024_migrate_create_created_at_int_columns.py | 22 +++++++ .../024_expand_create_created_at_int_columns.py | 33 +++++++++++ keystone/conf/resource.py | 8 +++ keystone/identity/backends/sql_model.py | 35 +++++++++-- keystone/resource/backends/sql.py | 2 + keystone/resource/core.py | 9 ++- keystone/token/providers/common.py | 24 ++++++-- .../notes/bug-1701324-739a31f38037f77b.yaml | 5 ++ .../notes/bug-1702211-abb59adda73fd78e.yaml | 9 +++ ...resource-backend-sql-only-03154d8712b36bd0.yaml | 12 ++++ requirements.txt | 1 + setup.cfg | 3 - test-requirements.txt | 1 + 20 files changed, 380 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fa2f24d..7fb3993 100644 --- a/requirements.txt +++ b/requirements.txt @@ -42,0 +43 @@ osprofiler>=1.4.0 # Apache-2.0 +pytz>=2013.6 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 88f0c44..a67eaf0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10,0 +11 @@ freezegun>=0.3.6 # Apache-2.0 +pytz>=2013.6 # MIT

1 0

[congress] congress-dashboard 1.0.0 (pike)
by no-reply＠openstack.org 30 Aug '17

30 Aug '17

We are pleased to announce the release of: congress-dashboard 1.0.0: Horizon Plugin for Congress This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/congress-dashboard Download the package from: https://tarballs.openstack.org/congress-dashboard/ Please report issues through launchpad: https://bugs.launchpad.net/congress For more details, please see below. Changes in congress-dashboard 1.0.0.0b3..1.0.0 ---------------------------------------------- acc972d structure docs for doc migration de4dfc8 Update README to include enabling monitoring pane becbd71 Suppress 0s in monitoring pane rows a80f94e Update links in README 791ad08 Fix typo in setup.cfg classifier Diffstat (except docs and test files) ------------------------------------- README.rst | 18 ++++++++++-------- congress_dashboard/datasources/utils.py | 6 ++++-- .../monitoring/templates/monitoring/index.html | 14 ++++++++------ setup.cfg | 2 +- 10 files changed, 50 insertions(+), 47 deletions(-)

1 0

[glance] glance 15.0.0 (pike)
by no-reply＠openstack.org 30 Aug '17

30 Aug '17

We are happy to announce the release of: glance 15.0.0: OpenStack Image Service This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/glance/ For more details, please see below. 15.0.0 ^^^^^^ New Features ************ * A new policy, "tasks_api_access" has been introduced so that ordinary user credentials may be used by Glance to manage the tasks that accomplish the interoperable image import process without requiring that operators expose the Tasks API to end users. Upgrade Notes ************* * If you wish to enable the EXPERIMENTAL version 2.6 API that contains the new interoperable image import functionality, set the configuration option "enable_image_import" to True in the glance- api.conf file. The default value for this option is False. The interoperable image import functionality uses the Glance tasks engine. This is transparent to end users, as they do *not* use the Tasks API for the interoperable image import workflow. The operator, however, must make sure that the following configuration options are set correctly. * "enable_image_import" * "node_staging_uri" * the options in the "[task]" group * the options in the "[taskflow_executor]" group See the documentation in the sample glance-api.conf file for more information. Additionally, you will need to verify that the task-related policies in the Glance policy.json file are set correctly. These settings are described below. * A new policy, "tasks_api_access" has been introduced so that ordinary user credentials may be used by Glance to manage the tasks that accomplish the interoperable image import process without requiring that operators expose the Tasks API to end users. The Tasks API was made admin-only by default in Mitaka by restricting the following policy targets to **role:admin**: **get_task**, **get_tasks**, **add_task**, and **modify_task**. The new "tasks_api_access" policy target directly controls access to the Tasks API, whereas targets just mentioned indirectly affect what can be manipulated via the API by controlling what operations can be performed on Glance's internal task objects. The key point is that if you want to expose the new interoperable image import process to end users while keeping the Tasks API admin-only, you can accomplish this by using the following settings: To summarize: end users do **not** need access to the Tasks API in order to use the new interoperable image import process. They do, however, need permission to access internal Glance task objects. We recommend that all operators adopt the policy settings just described independently of the decision whether to expose the EXPERIMENTAL version 2.6 API. (https://developer.openstack.org/api-ref/image/v2/index.html#tasks) Security Issues *************** * A new policy, "tasks_api_access" has been introduced so that ordinary user credentials may be used by Glance to manage the tasks that accomplish the interoperable image import process without requiring that operators expose the Tasks API to end users. This is a good time to review your Glance "policy.json" file to make sure that if it contains a "default" target, the rule is fairly restrictive ("role:admin" or "!" are good choices). The "default" target is used when the policy engine cannot find the target it's looking for. This can happen when a new policy is introduced but the policy file in use is from a prior release. Other Notes *********** * The Image Service API Reference has been updated with a section on the Interoperable image import process (also known as "image import refactored") and the API calls that are exposed to implement it in the EXPERIMENTAL v2.6 of the API. (https://developer.openstack.org/api-ref/image/v2/index.html #interoperable-image-import) Changes in glance 15.0.0.0rc1..15.0.0 ------------------------------------- 9820166 Fix api_image_import tasks stuck in 'pending' 4920799 Add doc note on using chunked encoding with uwsgi 8b13f43 Regenerate sample config files 92e2048 Correct group name in config 4e1d51e Add release note for Glance Pike RC-2 1a0ac2b api-ref: add interoperable image import docs fc65a9e Fix Image API 'versions' response c8873cc Return 404 for import-info call c99a9c9 Fix 500 error from image-import call 84c7ad4 api-ref: update container_format, disk_format f6d384f Add 'tasks_api_access' policy 7a14edd Add 'api_image_import' type to task(s) schemas beb3e98 Fix 500 error from image-stage call 3a28118 Update invalid path and link for Image Properties e612a90 Update UPPER_CONSTRAINTS_FILE for stable/pike 8bba8b5 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + api-ref/source/v2/images-images-v2.inc | 2 + api-ref/source/v2/images-import.inc | 244 +++++++++++ .../source/v2/images-parameters-descriptions.inc | 24 +- api-ref/source/v2/images-parameters.yaml | 34 +- api-ref/source/v2/index.rst | 1 + .../source/v2/samples/image-import-request.json | 5 + .../v2/samples/image-info-import-response.json | 9 + .../v2/samples/schemas-image-show-response.json | 4 +- .../v2/samples/schemas-images-list-response.json | 4 +- api-ref/source/versions/versions.inc | 2 + etc/glance-api.conf | 4 +- etc/glance-cache.conf | 4 +- etc/glance-registry.conf | 4 +- etc/glance-scrubber.conf | 4 +- etc/policy.json | 9 +- etc/schema-image.json | 4 +- glance/api/middleware/version_negotiation.py | 3 +- glance/api/v2/discovery.py | 14 +- glance/api/v2/image_data.py | 20 +- glance/api/v2/images.py | 34 +- glance/api/v2/tasks.py | 21 +- glance/api/versions.py | 4 +- glance/async/flows/api_image_import.py | 33 +- glance/async/taskflow_executor.py | 2 + glance/common/config.py | 4 +- glance/common/scripts/utils.py | 7 +- glance/db/sqlalchemy/api.py | 2 +- glance/domain/__init__.py | 3 +- httpd/glance-api-uwsgi.ini | 5 + httpd/uwsgi-glance-api.conf | 1 + releasenotes/notes/pike-rc-2-acc173005045e16a.yaml | 89 ++++ setup.cfg | 1 + tox.ini | 2 +- 41 files changed, 1087 insertions(+), 403 deletions(-)

1 0

[freezer] freezer-dr 5.0.0 (pike)
by no-reply＠openstack.org 30 Aug '17

30 Aug '17

We are overjoyed to announce the release of: freezer-dr 5.0.0: OpenStack Disaster Recovery This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/freezer-dr/ For more details, please see below. Changes in freezer-dr 5.0.0.0b3..5.0.0 -------------------------------------- 44e6f2b Removed unused config options Diffstat (except docs and test files) ------------------------------------- freezer_dr/monitors/drivers/monasca/driver.py | 8 -------- 1 file changed, 8 deletions(-)

1 0