September 2017 - Release-announce

[oslo] oslo.concurrency 3.22.0 (queens)
by no-reply＠openstack.org 06 Sep '17

06 Sep '17

We are excited to announce the release of: oslo.concurrency 3.22.0: Oslo Concurrency library This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.concurrency Download the package from: https://pypi.python.org/pypi/oslo.concurrency Please report issues through launchpad: https://bugs.launchpad.net/oslo.concurrency For more details, please see below. Changes in oslo.concurrency 3.21.0..3.22.0 ------------------------------------------ a7d35cc Minor correction to docstrings aeaee20 Updated from global requirements f976110 Updated from global requirements 3ac3c16 Windows: ensure exec calls don't block other greenthreads 6d3efba Update reno for stable/pike e7cd9ff Updated from global requirements 9b3c8f3 Add debug log to indicate when external lock is taken Diffstat (except docs and test files) ------------------------------------- oslo_concurrency/lockutils.py | 3 ++ oslo_concurrency/processutils.py | 35 ++++++++++++++++----- releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 ++++ requirements.txt | 2 +- test-requirements.txt | 4 +-- 7 files changed, 80 insertions(+), 10 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e8af677..7e9df9e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11 @@ six>=1.9.0 # MIT -fasteners>=0.7 # Apache-2.0 +fasteners>=0.7.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 852abde..0940f55 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ fixtures>=3.0.0 # Apache-2.0/BSD -openstackdocstheme>=1.11.0 # Apache-2.0 +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -14 +14 @@ sphinx>=1.6.2 # BSD -reno!=2.3.1,>=1.8.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0

1 0

[oslo] oslo.db 4.26.0 (queens)
by no-reply＠openstack.org 06 Sep '17

06 Sep '17

We are stoked to announce the release of: oslo.db 4.26.0: Oslo Database library This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.db Download the package from: https://pypi.python.org/pypi/oslo.db Please report issues through launchpad: https://bugs.launchpad.net/oslo.db For more details, please see below. 4.26.0 ^^^^^^ Deprecation Notes * The configuration option "idle_timeout" is now deprecated and has been renamed to "connection_recycle_time", including within the main oslo.db options, as well as in the keyword arguments to "engines.create_engine()", "enginefacade.configure()" and "enginefacade.configure_defaults()". The new name more accurately describes what this option does, in that it is not directly related to the "idle" time of the connection itself, nor is the connection disconnected at any specific time. It refers to a rule stating that any connection which has been present more than N seconds as a member of the connection pool will be automatically discarded and replaced the next time it is checked out from the pool. Changes in oslo.db 4.25.0..4.26.0 --------------------------------- 338b39d Updated from global requirements 6634218 Rename idle_timeout to connection_recycle_time c4843bc Workaround non-compatible type.adapt() for SQLAlchemy < 1.1 d77af64 Let others listen to SQLAlchemy errors 10d17ea Update reno for stable/pike 41174be Replace ndb "auto" types with unified String 6814281 Updated from global requirements 24f0402 Remove deprecation warning when loading tests/sqlalchemy 3ef34da Replace six.iteritems() with .items() 83563e0 Log an exception when reconnect-to-disconnected occurs Diffstat (except docs and test files) ------------------------------------- oslo_db/options.py | 28 +++++--- oslo_db/sqlalchemy/compat/utils.py | 24 +++++++ oslo_db/sqlalchemy/enginefacade.py | 18 +++-- oslo_db/sqlalchemy/engines.py | 9 ++- oslo_db/sqlalchemy/exc_filters.py | 4 +- oslo_db/sqlalchemy/models.py | 6 +- oslo_db/sqlalchemy/ndb.py | 84 ++++++++++------------ oslo_db/sqlalchemy/types.py | 27 ++++++- .../deprecate_idle_timeout-029d9f2cb7184b28.yaml | 15 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 ++ setup.cfg | 6 +- 19 files changed, 256 insertions(+), 94 deletions(-)

1 0

[oslo] oslo.context 2.18.0 (queens)
by no-reply＠openstack.org 06 Sep '17

06 Sep '17

We are stoked to announce the release of: oslo.context 2.18.0: Oslo Context library This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.context Download the package from: https://pypi.python.org/pypi/oslo.context Please report issues through launchpad: https://bugs.launchpad.net/oslo.context For more details, please see below. Changes in oslo.context 2.17.0..2.18.0 -------------------------------------- b1bbc69 Updated from global requirements 3d96a20 Update reno for stable/pike 03ddf2c Updated from global requirements Diffstat (except docs and test files) ------------------------------------- releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 ++++++ test-requirements.txt | 4 ++-- 3 files changed, 9 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c64e166..670d2e0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ coverage!=4.4,>=4.0 # Apache-2.0 -openstackdocstheme>=1.11.0 # Apache-2.0 +openstackdocstheme>=1.16.0 # Apache-2.0 @@ -13 +13 @@ sphinx>=1.6.2 # BSD -reno!=2.3.1,>=1.8.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0

1 0

[oslo] oslo.messaging 5.31.0 (queens)
by no-reply＠openstack.org 06 Sep '17

06 Sep '17

We joyfully announce the release of: oslo.messaging 5.31.0: Oslo Messaging API This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.messaging Download the package from: https://pypi.python.org/pypi/oslo.messaging Please report issues through launchpad: https://bugs.launchpad.net/oslo.messaging For more details, please see below. Changes in oslo.messaging 5.30.0..5.31.0 ---------------------------------------- d15a6de Remove envelope argument from driver send() interface f74328c Imported Translations from Zanata 501862b Updated from global requirements 8203b9e Update amqp 1.0 driver deployment guide f059bba Prevent rabbit from raising unexpected exceptions 38d8bdc Updated from global requirements 80c6283 Remove unnecessary setUp function in testcase b7382d5 Ensure RPC endpoint target attribute is correct b3b1ae1 Fix a typo cd589ff Update links in README 0976185 Updated from global requirements 1038a1c fix 'configration' typo 4aec303 Update reno for stable/pike 2c9ac20 Remove the test that counts kombu connect calls Diffstat (except docs and test files) ------------------------------------- README.rst | 4 +- oslo_messaging/_drivers/base.py | 6 +- oslo_messaging/_drivers/impl_amqp1.py | 7 +- oslo_messaging/_drivers/impl_rabbit.py | 15 +-- .../en_GB/LC_MESSAGES/oslo_messaging-log-error.po | 61 ----------- .../en_GB/LC_MESSAGES/oslo_messaging-log-info.po | 34 ------- .../LC_MESSAGES/oslo_messaging-log-warning.po | 45 --------- oslo_messaging/rpc/dispatcher.py | 9 ++ releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 30 ------ releasenotes/source/pike.rst | 6 ++ requirements.txt | 4 +- test-requirements.txt | 6 +- 25 files changed, 229 insertions(+), 277 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2d9bd1a..63e3634 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0 -oslo.log>=3.22.0 # Apache-2.0 +oslo.log>=3.30.0 # Apache-2.0 @@ -25 +25 @@ WebOb>=1.7.1 # MIT -PyYAML>=3.10.0 # MIT +PyYAML>=3.10 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 31991e8..85a81bd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0 # BSD +mock>=2.0.0 # BSD @@ -32,2 +32,2 @@ sphinx>=1.6.2 # BSD -openstackdocstheme>=1.11.0 # Apache-2.0 -reno!=2.3.1,>=1.8.0 # Apache-2.0 +openstackdocstheme>=1.16.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0

1 0

[quality] hacking 1.0.0
by no-reply＠openstack.org 06 Sep '17

06 Sep '17

We are excited to announce the release of: hacking 1.0.0: OpenStack Hacking Guideline Enforcement Download the package from: https://pypi.python.org/pypi/hacking For more details, please see below. 1.0.0 ^^^^^ New Features * This release includes a new check, disabled by default. [H210] Require 'autospec', 'spec', or 'spec_set' in mock.patch/mock.patch.object calls [H204] Use assert(Not)Equal to check for equality. [H205] Use assert(Greater|Less)(Equal) for comparison. Changes in hacking 0.13.0..1.0.0 -------------------------------- d842b77 Release notes for 0.14.0 1eea811 Add tests to show '# noqa' works with mock.patch check 5fa587d Update the doc URL in the documents c4cdad7 rearrange existing documentation to fit the new standard layout 39271f9 Switch from oslosphinx to openstackdocstheme f45fe0a Turn on warning-is-error in doc build b273261 Add a check to enforce use of 'autospec' in mock.patch f733b31 Add py3.5 support in setup.cfg 635d5d3 Updated from global requirements 4576fdc Add explicit support for py35 8ee5feb Remove support for py33/py26 e32cbcb Fix broken link c82a0b0 Remove discover from test-requirements 5917e79 Add Constraints support 74ced1a Updated from global requirements 206b421 Revert "local-check-factory CLI option" 65b4a03 Add a check to make sure the right assert* method is used Diffstat (except docs and test files) ------------------------------------- HACKING.rst | 37 +++++- README.rst | 20 ++- hacking/checks/except_checks.py | 105 +++++++++++++++- hacking/checks/mock_checks.py | 137 +++++++++++++++++++++ hacking/core.py | 23 ++-- .../notes/start-of-queens-c3024ebbb49aef6f.yaml | 8 ++ releasenotes/source/conf.py | 13 +- requirements.txt | 2 +- setup.cfg | 13 +- test-requirements.txt | 9 +- tools/tox_install.sh | 30 +++++ tox.ini | 12 +- 20 files changed, 383 insertions(+), 79 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7146fce..3fd3f6a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=1.6 # Apache-2.0 +pbr>=1.8 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 92e335f..53f7da5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,2 +4 @@ -coverage>=3.6 # Apache-2.0 -discover # BSD +coverage>=4.0 # Apache-2.0 @@ -9,2 +8,2 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx!=1.3b1,<1.4,>=1.2.1 # BSD -oslosphinx>=4.7.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.11.0 # Apache-2.0 @@ -22 +21 @@ eventlet!=0.18.3,>=0.18.2 # MIT -reno>=1.8.0 # Apache2 +reno>=1.8.0 # Apache-2.0

1 0

[quality] patrole 0.2.0 (pike)
by no-reply＠openstack.org 06 Sep '17

06 Sep '17

We enthusiastically announce the release of: patrole 0.2.0: Patrole is a tool for verifying that Role-Based Access Control is being enforced across OpenStack deployments. This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/patrole/ Please report issues through launchpad: https://bugs.launchpad.net/patrole For more details, please see below. 0.2.0 ^^^^^ Prelude ******* This release marks the start of support for the Pike release in Patrole. New Features ************ * Add security groups and server security groups tests to Nova RBAC tests. * Add additional port-related RBAC tests to "test_ports_rbac" in the network module, providing coverage for the following policy actions: * create_port:device_owner * create_port:port_security_enabled * create_port:binding:profile * update_port:device_owner * Add additional RBAC tests for network routers API, providing coverage for the following policy actions: * create_router:ha * create_router:distributed * get_router:distributed * update_router:ha * update_router:distributed * Added tests to test_agents_rbac.py for PUT and DELETE endpoints. * Add RBAC test for communitizing image, providing coverage for the policy action "communitize_image". * Adds tests for compute snapshot APIs. * Adds tests for os-console-output and os-remote-console to compute module. * Added RBAC network test for listing dhcp agents on a hosting network, providing coverage for the "get_dhcp-agents" policy. * Add new configuration option "[rbac] custom_policy_files", allowing users to specify list of the paths to search for custom policy files. Each policy path assumes that the service name is included in the path once. Also assumes Patrole is on the same host as the policy files. The paths should be ordered by precedence, with high- priority paths before low-priority paths. The first path that is found to contain the service's policy file will be used. * Add group-specific RBAC tests for the identity v3 extension API, OS- EP-FILTER, providing coverage for the following policy actions: * identity:create_endpoint_group * identity:list_endpoint_groups * identity:show_endpoint_group (get endpoint group) * identity:check_endpoint_group * identity:list_endpoint_group (get endpoint groups) * identity:update_endpoint_group * identity:delete_endpoint_group * Add RBAC tests for APIs that enforce "os_compute_api:os-extended- availability-zone". * Added RBAC tests for volume type access and volume type extra specs APIs, providing coverage for the following policy actions: * "volume_extension:types_extra_specs" * "volume_extension:volume_type_access" * "volume_extension:volume_type_access:addProjectAccess" * "volume_extension:volume_type_access:removeProjectAccess" * Add test coverage for the os-flavor-manage compute API, which includes tests for the following policy actions: * "os_compute_api:os-flavor-manage:create" * "os_compute_api:os-flavor-manage:delete" * Add RBAC tests related to the "image_size" compute policy action: "os_compute_api:image-size". * Adds tests for Nova's lock_server policies: lock, unlock, and unlock_override. * Add additional RBAC tests to "VolumesBackupsRbacTest", providing coverage for "volume_extension:backup_admin_actions:reset_status". * Add Patrole DevStack plugin, allowing Patrole to be installed using DevStack by adding "enable_plugin patrole" to "local" section of local.conf. * Added in a new logging feature which logs the result of each Patrole test The format of the new log output is: "[Service]: %s, [Test]: %s, [Rule]: %s, [Expected]: %s, [Actual]: %s" where each "%s" is a string that contains: * [Service] - The openstack service being tested (Nova, Neutron, etc) * [Test] - The name of the test function being invoked (eg: test_list_aggregate_rbac) * [Rule] - The name of the rule the Patrole test is testing (eg: os_compute_api:os-aggregates) * [Expected] - The expected outcome (one of Allowed/Denied) * [Actual] - The actual outcome from the Patrole test (one of Allowed/Denied/Error) This logging feature has two config variables: These variables are part of a new config group "patrole_log" * enable_reporting: This enables or disables the enhanced rbac reporting * report_log_name: This variable specifies the name of the log file to write * report_log_path: This variable specifies the path (relative or absolute) of the log file to write * Add RBAC tests for os_compute_api:os-extended-status, which validate that the following attributes: * OS-EXT-STS:task_state * OS-EXT-STS:vm_state * OS-EXT-STS:power_state are present in the relevant response bodies. * Add RBAC tests for os-extended-volumes:volumes_attached policies, which validate that "os-extended-volumes:volumes_attached" is returned in the response body. * Implements RBAC tests for Tempest network agents_client, providing coverage for the following policies: * update_agent * get_agent * create_dhcp-network * delete_dhcp-network * get_dhcp-networks * create_l3-router * delete_l3-router * get_l3-routers * Add RBAC tests for compute quota class sets API, providing coverage for the following policy actions: * os_compute_api:os-quota-class-sets:show * os_compute_api:os-quota-class-sets:update * Add RBAC tests for the compute server metadata API, providing coverage for the following policy actions: * os_compute_api:server-metadata:index * os_compute_api:server-metadata:update_all * os_compute_api:server-metadata:create * os_compute_api:server-metadata:show * os_compute_api:server-metadata:update * os_compute_api:server-metadata:delete * Adds test for Neutron's get_service_provider policy. * Add RBAC tests for network subnet endpoints, providing coverage for the following policy actions: * create_subnet * get_subnet * update_subnet * delete_subnet * Add RBAC test for updating the default subnetpool, providing coverage for the policy action: "update_subnetpool:is_default". * Add support of running Patrole against a custom requirements YAML that defines RBAC requirements. The YAML file lists all the APIs and the roles that should have access to the APIs. The purpose of running Patrole against a requirements YAML is to verify that the RBAC policy is in accordance to deployment specific requirements. Running Patrole against a requirements YAML is completely optional and can be enabled by setting the "[rbac] test_custom_requirements" option to True in Tempest's configuration file. The requirements YAML must be located on the same host that Patrole runs on. * Add test_oauth_tokens_rbac.py with RBAC test cases related to the OS-OAUTH1 Keystone v3 extension API. * Added RBAC test scenarios for the token-related v3 identity API * Added RBAC test scenarios for the token-related admin v2 identity API. * Add test for updating a volume group, providing coverage for group:update policy action. * Add RBAC test to provide coverage for the following cinder policy: "volume_extension:volume_actions:upload_public". * Add RBAC tests for the volume v3 groups and group types APIs, providing coverage for the following policy actions: * group:create * group:get * group:get_all * group:delete * group:group_types_manage * group:access_group_types_specs Deprecation Notes ***************** * The "[rbac]" configuration group has been deprecated and will be removed in the next release. Use "[patrole]" group instead, which has the exact same options. * Deprecate the following configuration options from "[rbac]" group: * cinder_policy_file * glance_policy_file * keystone_policy_file * neutron_policy_file * nova_policy_file It is better to use "[rbac] custom_policy_files" which supports any OpenStack service. * Glance v1 APIs are deprecated and v2 APIs are current. Glance v1 APIs are removed from volume tests and Glance v1 RBAC tests are removed. * Remove assisted volume snapshot RBAC tests, because the Tempest client does not yet exist. Bug Fixes ********* * Add microversion check to test_security_groups_rbac as tests in this file will fail with a 404 after 2.36. * Rename test_server_security_groups to test_list_security_groups to properly reflect the test actually being run. * Add "test.requires_ext" above tests that require the "binding" extension. Other Notes *********** * OpenStack Releases supported after this release are **Pike**. The release under current development of this tag is Queens, meaning that every Patrole commit is also tested against master during the Queens cycle. However, this does not necessarily mean that using Patrole as of this tag will work against a Queens (or future release) cloud. Changes in patrole 0.1.0..0.2.0 ------------------------------- 45fffa5 Prepare release notes for release 0.2.0 88a5bab Rename rbac_policy_parser to policy_authority 7f8993f Add a per-test log 3983d13 RBAC tests for os-extended-volumes policies c27a62f Fix router tests expecting wrong error code 25b1281 [TrivialFix] Move security group tests into correct test file bc39ee8 Do not use test.get_service_list() d889ffd Updated from global requirements dc73cff Remove identity v3 change_password test 9d086ab Use create_test_server for attach volume server test 146735d Test coverage for compute flavor_manage policies 5f72954 RBAC tests for extended availability zone policies 6056d6b Move some slow tests into the multinode gate 2a3b513 Docstring for RbacAuthority class. 39c460b Updated from global requirements 3e14f47 Use configured admin creds in rbac utils 01d633b Update rbac_rule_validation docstrings f6eb862 Deprecate [rbac] configuration group. b6a9c21 Adds unit tests for hacking checks 11b0232 Update and replace http with https for doc links in patrole 2693bf7 Only sleep following a role switch d2fcf03 Add RBAC test for updating volume group 36bea05 Adds meaningful exceptions for missing attributes 6f663e0 Update the documentation link 0df097d Remove usage of credentials_factory.AdminManager 4360a29 Fix a comment issue 428c44a Adds update and delete agent tests 7de1905 Update tox to correctly use OS_TEST_PATH 8a043fb Change rbac_utils.RbacUtils is_admin to function 0328650 RBAC tests for os-extended-status policies 10fdf98 Move instance actions test into misc policy actions file 7b9ae3f Updated from global requirements d8e0d08 Updated from global requirements 7be94e8 Switch to enabled version of identity clients c7880ac Replace test.attr with decorators.attr ffa47e6 Create rbac utils fixture and refactor tests 864b0f3 Add missing test for os-instance-usage-audit-log 268b71d Update URLs in documents according to document migration 7c7b570 README: Fix headers e8d93e0 Remove need to include admin in credentials in base classes 780210d Rewrite Patrole README to be high-level document ccfa23e Add missing v3 token related testcases 8a5f69a docs: Update configuration docs c8a5e29 Update test.attr to decorators.attr e922e1e Updates test_volume_types_extra_specs_rbac 6c068fc Move config drive tests into misc policy actions file d55dec5 Updated from global requirements 6b1a2f4 [Gate fix] Fix volumes_client AttributeError e85d266 Replace inconsistent skipException messages 529988b Correct policy action for check_endpoint_group test 0cef808 Unit tests for dynamic policy file discovery d982731 Move virtual interfaces test into misc policy actions file 3ab2c35 Dynamic policy file discovery 7de839d Doc warnings as errors ed95005 Add support for testing custom RBAC requirements a7d9425 Group together tests that create server and require network resources 4047a19 Move tenant usage tests into misc policy actions file c971b45 Updated from global requirements dea1384 Add docstring for rbac_rule_validation is_authorized 3203253 Replace os with os_primary 9f1b60f Add test cases for oauth1 token related APIs. 1430ac2 RBAC tests for volume v3 groups and group types a662f82 Minimize number of servers created for more tests 6661e2f Additional volume v2 backup RBAC tests 34193e3 Switch from oslosphinx to openstackdocstheme 0f010a5 RBAC tests for compute quota class sets 4781dc9 Replace the usage of 'admin_manager' with 'os_admin' 7a52b61 Policy update for volume v2 qos-specs RBAC tests a20add2 Use admin creds for waiting 5c12849 Remove unusued create_test_server 1e0a20d Remove unnecessary LOG/CONF statements f85cedc Add missing v2 token related testcases c5ebd76 Identity v3 RBAC Tests - EP Filter Groups 54959dd Minimize number of servers created for certain tests 973a1bc Docstring for rbac_rule_validation _get_exception_type d9607c4 Refactor policy parser init so that validate service is in helper c471d41 Volume test for volume_extension:volume_actions:upload_public 93dae2a Add waiter to test_volume_backup_delete 747e029 Adds lock server tests 65ce70d Fix snapshot rbac test race condition e8f7917 Additional network router RBAC tests 3c1de67 Subnet rbac tests 1442d57 RBAC tests for Tempest network agents_client 7b761b8 Adds server security group tests 4aa609e Fix test_volumes_snapshots_rbac throwing BadRequest c458932 Show team and repo badges on README 1b7d5d5 Adds service_providers client tests f98d8b8 Patrole should only test glance v2 api. f129686 Fix volume backup tests throwing BadRequest 94c9a47 Update Patrole documentation 7888d97 Clean up test_admin_password_rbac 8fe31c2 Adds extension skip checks for Neutron tests 57127fd Remove support for py34 12a52d9 Add vol extra specs/type access RBAC tests 757ea55 Fix test_force_detach_volume_from_instance 189e138 Adds console output RBAC tests b573cea Update plugin.py c1f67b2 Correct reno list formatting 9a6f20f Adds tests for compute snapshots API 31b968d Optimize the link address 9817838 RBAC test for update_subnetpool:is_default 7ae2ff1 Add a page for release 0.1.0 to release notes 3fde3cb RBAC test for "dhcp_agent_scheduler" network policy 7942336 Update test/installation documentation dca00e8 Add RBAC test for communitize_image policy 17e9b49 Add rbac_utils is_admin helper method ace85ac RBAC tests for image_size compute policy action. eeb271a [Gate fix] Fix py35 gate due to incompatible import dd02c62 Additional port-related RBAC tests a44dddf Patrole devstack plugin 6e78dca [Gate fix] Fix test_server_actions raising BadRequest cd87077 Add hacking check to enforce no client aliases 96f826d Compute server metadata rbac tests e6fbe0f Remove assisted volume snapshot RBAC tests Diffstat (except docs and test files) ------------------------------------- .testr.conf | 2 +- CONTRIBUTING.rst | 17 - HACKING.rst | 13 +- README.rst | 206 +++---- contrib/post_test_hook.sh | 83 --- contrib/pre_test_hook.sh | 18 - devstack/plugin.sh | 35 ++ devstack/settings | 8 + patrole_tempest_plugin/config.py | 146 ++++- patrole_tempest_plugin/hacking/checks.py | 43 +- patrole_tempest_plugin/plugin.py | 50 +- patrole_tempest_plugin/policy_authority.py | 264 +++++++++ patrole_tempest_plugin/rbac_exceptions.py | 31 +- patrole_tempest_plugin/rbac_policy_parser.py | 232 -------- patrole_tempest_plugin/rbac_rule_validation.py | 267 ++++++--- patrole_tempest_plugin/rbac_utils.py | 173 ++++-- patrole_tempest_plugin/requirements_authority.py | 72 +++ .../api/compute/test_admin_server_actions_rbac.py | 65 --- .../compute/test_assisted_volume_snapshot_rbac.py | 73 --- .../api/compute/test_attach_interfaces_rbac.py | 92 ---- .../api/compute/test_flavor_extra_specs_rbac.py | 2 +- .../api/compute/test_instance_actions_rbac.py | 56 -- .../compute/test_instance_usages_audit_log_rbac.py | 18 +- .../api/compute/test_quota_class_sets_rbac.py | 84 +++ .../api/compute/test_server_diagnostics_rbac.py | 44 -- .../api/compute/test_server_migrations_rbac.py | 7 +- .../test_server_misc_policy_actions_rbac.py | 599 +++++++++++++++++++++ .../compute/test_server_virtual_interfaces_rbac.py | 41 -- .../compute/test_server_volume_attachments_rbac.py | 9 +- .../api/compute/test_simple_tenant_usage_rbac.py | 56 -- .../api/identity/v3/test_endpoint_filter_rbac.py | 91 ---- .../api/identity/v3/test_ep_filter_groups_rbac.py | 108 ++++ .../identity/v3/test_ep_filter_projects_rbac.py | 90 ++++ .../api/identity/v3/test_oauth_consumers_rbac.py | 8 +- .../api/identity/v3/test_oauth_tokens_rbac.py | 138 +++++ .../api/identity/v3/test_tokens_negative_rbac.py | 100 ++++ .../api/image/test_image_namespace_objects_rbac.py | 106 ++++ .../image/test_image_namespace_property_rbac.py | 97 ++++ .../api/image/test_image_namespace_tags_rbac.py | 109 ++++ .../api/image/test_image_resource_types_rbac.py | 72 +++ .../image/v2/test_image_namespace_objects_rbac.py | 106 ---- .../image/v2/test_image_namespace_property_rbac.py | 97 ---- .../api/image/v2/test_image_namespace_rbac.py | 76 --- .../api/image/v2/test_image_namespace_tags_rbac.py | 109 ---- .../api/image/v2/test_image_resource_types_rbac.py | 72 --- .../api/network/test_metering_label_rules_rbac.py | 2 - .../network/test_networks_multiprovider_rbac.py | 5 +- .../api/network/test_service_providers_rbac.py | 29 + .../api/volume/test_volume_types_access_rbac.py | 81 +++ .../volume/test_volume_types_extra_specs_rbac.py | 86 ++- .../api/volume/test_volumes_snapshots_rbac.py | 12 + patrole_tempest_plugin/version.py | 18 + releasenotes/notes/agents-ca4a5e232ce242a5.yaml | 5 + ...mmunitize-image-rbac-test-bdf1109e58a6c2e0.yaml | 5 + releasenotes/notes/console-6db96c4e329c0ab2.yaml | 5 + .../deprecate-rbac-group-148e222913dc74cc.yaml | 6 + ...dhcp-agent-scheduler-test-842fc1df45799def.yaml | 5 + ...mic-policy-file-discovery-104cbfc64b55d605.yaml | 22 + ...vailability-zone-policies-2ec19e8bbb9ce158.yaml | 5 + .../glance-v1-api-deprecated-1aba7b6ae0b6e063.yaml | 4 + .../notes/lock-server-460767a02d15bb29.yaml | 5 + .../patrole-devstack-plugin-551c9af3325723c9.yaml | 6 + .../notes/rbac-per-test-log-071a530e957c1c26.yaml | 28 + ...r-compute-extended-status-ef00256e58b66223.yaml | 11 + ...-compute-extended-volumes-7f3ccab122d22737.yaml | 6 + ...ests-for-quota-class-sets-20d874b185902308.yaml | 8 + .../notes/service-provider-bc71da578e717c3a.yaml | 4 + .../start-of-pike-support-360e27b4d192e3d2.yaml | 10 + ...ls_update_is_default_test-d3540a87469b6dc8.yaml | 5 + ...support_requirements_yaml-a90e0188a19421ba.yaml | 12 + .../test_oauth_tokens_rbac-13e1d3b5decbaf79.yaml | 4 + .../notes/test_tokens_rbac-63a93e507d079a03.yaml | 3 + .../notes/test_tokens_rbac-7f36919b786e9ffc.yaml | 3 + .../update-group-volume-test-06c7475ccbe36aa8.yaml | 5 + ...volume-upload-public-test-f8e741a838ae7607.yaml | 5 + releasenotes/source/conf.py | 21 +- releasenotes/source/index.rst | 7 +- releasenotes/source/v0.1.0.rst | 6 + requirements.txt | 14 +- setup.cfg | 4 +- setup.py | 5 +- test-requirements.txt | 19 +- test-whitelist.txt | 1 - tox.ini | 11 +- 177 files changed, 7107 insertions(+), 4231 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6871057..00c7e64 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,7 +5,7 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -pbr>=1.8 # Apache-2.0 -urllib3>=1.15.1 # MIT -oslo.log>=3.11.0 # Apache-2.0 -oslo.config>=3.22.0 # Apache-2.0 -oslo.policy>=1.17.0 # Apache-2.0 -tempest>=14.0.0 # Apache-2.0 -stevedore>=1.20.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 +urllib3>=1.21.1 # MIT +oslo.log>=3.30.0 # Apache-2.0 +oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0 +oslo.policy>=1.23.0 # Apache-2.0 +tempest>=16.1.0 # Apache-2.0 +stevedore>=1.20.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 7c97fa7..0657438 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=0.12.0,!=0.13.0,<0.14 # Apache-2.0 +hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 @@ -6,5 +6,6 @@ hacking>=0.12.0,!=0.13.0,<0.14 # Apache-2.0 -sphinx>=1.2.1,!=1.3b1,<1.4 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 -mock>=2.0 # BSD -coverage>=4.0 # Apache-2.0 +sphinx>=1.6.2 # BSD +openstackdocstheme>=1.16.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0 +fixtures>=3.0.0 # Apache-2.0/BSD +mock>=2.0.0 # BSD +coverage!=4.4,>=4.0 # Apache-2.0 @@ -14,3 +15,3 @@ oslotest>=1.10.0 # Apache-2.0 -oslo.policy>=1.17.0 # Apache-2.0 -oslo.log>=3.11.0 # Apache-2.0 -tempest>=12.1.0 # Apache-2.0 +oslo.policy>=1.23.0 # Apache-2.0 +oslo.log>=3.30.0 # Apache-2.0 +tempest>=16.1.0 # Apache-2.0

1 0

[cinder] cinder 10.0.6 (ocata)
by no-reply＠openstack.org 06 Sep '17

06 Sep '17

We are tickled pink to announce the release of: cinder 10.0.6: OpenStack Block Storage This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/cinder/ For more details, please see below. Changes in cinder 10.0.5..10.0.6 -------------------------------- 7580fac Allow v3.0 volume metadata API calls 7973f02 3PAR: Get host from os-brick b3c7cca VMAX driver - Ocata assigning QoS attributes to the correct SG 740c715 Eliminate randomness in encode_name&encode_host_name methods ee8e859 Fix bug of detaching failed while concurrently attach/detach e57409b Do proper cleanup if connect volume fails Diffstat (except docs and test files) ------------------------------------- cinder/api/v3/volume_metadata.py | 38 +++--- .../unit/volume/drivers/dell_emc/test_vmax.py | 41 ++++++ .../volume/drivers/huawei/test_huawei_drivers.py | 126 ++++++++++++++++-- cinder/volume/driver.py | 31 +++-- cinder/volume/drivers/dell_emc/vmax/common.py | 8 -- cinder/volume/drivers/dell_emc/vmax/masking.py | 4 + cinder/volume/drivers/hpe/hpe_3par_iscsi.py | 9 +- cinder/volume/drivers/huawei/constants.py | 2 +- cinder/volume/drivers/huawei/huawei_driver.py | 143 +++++++-------------- cinder/volume/drivers/huawei/huawei_utils.py | 70 +++++++++- cinder/volume/drivers/huawei/hypermetro.py | 46 ++++--- cinder/volume/drivers/huawei/rest_client.py | 72 ++++------- cinder/volume/manager.py | 7 +- 17 files changed, 440 insertions(+), 242 deletions(-)

1 0

[ironic] python-ironic-inspector-client 2.1.0 (pike)
by no-reply＠openstack.org 06 Sep '17

06 Sep '17

We are satisfied to announce the release of: python-ironic-inspector-client 2.1.0: Python client for Ironic Inspector This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-ironic-inspector- client Download the package from: https://pypi.python.org/pypi/python-ironic-inspector-client Please report issues through launchpad: https://bugs.launchpad.net/python-ironic-inspector-client For more details, please see below. Changes in python-ironic-inspector-client 2.0.0..2.1.0 ------------------------------------------------------ acde2b6 Updated from global requirements ed01dd2 Update UPPER_CONSTRAINTS_FILE for stable/pike 63d732b Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + requirements.txt | 2 +- test-requirements.txt | 2 +- tox.ini | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 53f1481..6228830 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -keystoneauth1>=3.0.1 # Apache-2.0 +keystoneauth1>=3.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 97d2df4..c8b3eb4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ sphinx>=1.6.2 # BSD -openstackdocstheme>=1.11.0 # Apache-2.0 +openstackdocstheme>=1.16.0 # Apache-2.0

1 0

[tripleo] tripleo-common 6.1.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We eagerly announce the release of: tripleo-common 6.1.1: A common library for TripleO workflows. This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo-common For more details, please see below. 6.1.1 ^^^^^ New Features ************ * The introspection workflow now accepts an additional parameter "concurrency" which defines how many nodes should be introspected in parallel. The default is 20, but can be changed to any positive integer. * Add a new action argument, skip_deploy_identifier to DeployStackAction. The argument will disable setting a unique value for the DeployIdentifier parameter, which means the SoftwareDeployment resources in the templates will only be triggered if there is an actual change to their configuration. This argument can be used to avoid always applying configuration, such as during node scale out. This option should be used with Caution, and only if there is confidence that the software configuration does not need to be run, such as when scaling out certain roles. Bug Fixes ********* * When performing an interactive minor update with deployed-server, the client never prompted to clear breakpoints and just ran to completion and exited. The stack was left IN_PROGRESS. That issue has now been fixed so that the client will prompt to clear breakpoints. * The default "OS_BAREMETAL_API_VERSION" and "IRONIC_API_VERSION" in "overcloudrc" were bumped to 1.29, which corresponds to Ocata final and allows using all recent features without specifying an explicit version. * The update abort command was introduced many releases ago. However, it is not a safe operation in the context of TripleO. The TripleO Heat stack could become irrepairably damage should a rollback be attempted. As such, it is best to remove this functionality without a deprecation period. The workaround for this command is to wait until the stack times out or completes the update. Changes in tripleo-common 6.1.0..6.1.1 -------------------------------------- 6a939cb Prompt to clear breakpoints when using deployed-server c535ca4 Remove svg links 3beb340 Remove update abort 5046bea Ensure Swift Rings backup container and URLs 67599bb Remove symlinks causing hiera hook to exit early 894631c Updated from global requirements 409cec8 Run introspection 20 nodes at a time c4c3499 Bump OS_BAREMETAL_API_VERSION to 1.29 320960c Add skip_deploy_identifier 3ec8d49 Remove ntp element Diffstat (except docs and test files) ------------------------------------- README.rst | 9 --- heat_docker_agent/configure_container.sh | 13 +--- image-yaml/overcloud-images.yaml | 3 +- image-yaml/overcloud-odl-rhel7.yaml | 3 +- ...d-server-clear-breakpoint-ee1a984f3366598a.yaml | 6 ++ .../introspection-batch-size-47723bceb0281baf.yaml | 5 ++ .../notes/ironic-api-version-d2b4ec1474918f12.yaml | 6 ++ .../notes/remove-abort-7214f376c9672644.yaml | 8 ++ .../skip-deploy-identifier-d5abb0d4e6af0ecd.yaml | 10 +++ requirements.txt | 2 +- setup.cfg | 1 - tripleo_common/_stack_update.py | 50 ++++++++----- tripleo_common/actions/deployment.py | 7 +- tripleo_common/actions/package_update.py | 13 ---- tripleo_common/constants.py | 4 + tripleo_common/utils/overcloudrc.py | 4 + workbooks/baremetal.yaml | 80 ++++++++++++++++++-- workbooks/deployment.yaml | 55 ++++---------- workbooks/package_update.yaml | 31 -------- workbooks/plan_management.yaml | 15 ++++ workbooks/swift_rings_backup.yaml | 87 ++++++++++++++++++++++ 24 files changed, 389 insertions(+), 170 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5bd4da4..6595615 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0

1 0

[tripleo] tripleo-ui 3.2.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We are delighted to announce the release of: tripleo-ui 3.2.1: tripleo-ui This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/tripleo-ui/ For more details, please see below. 3.2.1 ^^^^^ Bug Fixes * Fixes bug 1689507 IPMI port is now possible to specify when registering Nodes. Fixes bug 1688543 Node UUID is not generated by UI when registering nodes any more. Changes in tripleo-ui 3.2.0..3.2.1 ---------------------------------- 10dcc36 Release 3.2.1 (ocata) c9fffb2 Use Python to compute release notes version 771c237 Imported Translations from Zanata c0ca8fc Imported Translations from Zanata e873eb1 Fix nodes registration Diffstat (except docs and test files) ------------------------------------- i18n/locales/es.json | 4 ++ i18n/locales/ja.json | 4 ++ i18n/locales/ko-KR.json | 4 ++ i18n/locales/zh-CN.json | 4 ++ npm-shrinkwrap.json | 2 +- package.json | 2 +- .../nodes-register-port-080747965014e1b3.yaml | 6 ++ releasenotes/source/conf.py | 4 +- .../components/nodes/driver_fields/DriverFields.js | 75 +++++++++++++++------- .../nodes/driver_fields/PXEAndDRACDriverFields.js | 15 +++-- .../driver_fields/PXEAndIPMIToolDriverFields.js | 15 +++-- .../nodes/driver_fields/PXEAndSSHDriverFields.js | 15 +++-- src/js/immutableRecords/nodes.js | 4 +- 13 files changed, 113 insertions(+), 41 deletions(-)

1 0

[tripleo] tripleo-validations 5.6.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We are excited to announce the release of: tripleo-validations 5.6.1: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo/+bugs?field.tag=validations For more details, please see below. Changes in tripleo-validations 5.6.0..5.6.1 ------------------------------------------- 0a2641a Updated from global requirements 0291000 [Ocata only] Fix inventory - no PublicVip in ocata tht 94c51d3 Updated from global requirements 8e7ccad Add ability to write static inventory 54d7ff1 Improve performance when fetching outputs 3ddf186 Add 'become: true' to haproxy validation Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- scripts/tripleo-ansible-inventory | 60 ++++++++++++++++++++++++++++++--------- test-requirements.txt | 2 +- validations/haproxy.yaml | 1 + 4 files changed, 50 insertions(+), 15 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1629f21..1dcd51a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 3d2d86b..c8020a7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ -setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,>=16.0 # PSF/ZPL +setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2.0,!=34.3.0,!=34.3.1,!=34.3.2,!=36.2.0,>=16.0 # PSF/ZPL

1 0

[tripleo] python-tripleoclient 6.2.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We are amped to announce the release of: python-tripleoclient 6.2.1: TripleO client This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/python-tripleoclient/ For more details, please see below. 6.2.1 ^^^^^ New Features ************ * Added new os-image-name parameter, that replaces os-image one, because it was conflicting with glance parameter naming, causing os- image to don't work properly. * Add a new cli argument, --skip-deploy-identifier. The argument will disable setting a unique value for the DeployIdentifier parameter, which means the SoftwareDeployment resources in the templates will only be triggered if there is an actual change to their configuration. This argument can be used to avoid always applying configuration, such as during node scale out. This option should be used with Caution, and only if there is confidence that the software configuration does not need to be run, such as when scaling out certain roles. Upgrade Notes ************* * If the operator specifies a roles_data.yaml for the deployment or upgrade this adds a check that the disable_upgrade_deployment flag is set at least once in that file and otherwise logs a warning. If the validation-warnings-fatal parameter is set to True (default is False) then this check will also raise an InvalidConfiguration exception. Bug Fixes ********* * The "introspection bulk status" command no longer aborts if some nodes in the Ironic registry were never introspected. See bug 1689540 (https://bugs.launchpad.net/tripleo/+bug/1689540) * The update abort command was introduced many releases ago. However, it is not a safe operation in the context of TripleO. The TripleO Heat stack could become irrepairably damage should a rollback be attempted. As such, it is best to remove this functionality without a deprecation period. The workaround for this command is to wait until the stack times out or completes the update. Changes in python-tripleoclient 6.2.0..6.2.1 -------------------------------------------- 8dbebd4 Install policycoreutils-python 5ca47d1 Add check for disable_upgrade_deployment flag in roles_data 8ea64c4 Modified --os-image option in overcloud image upload 879d73c Remove update abort 5372231 Update UPPER_CONSTRAINTS_FILE for stable/ocata 7622ea3 Fix 'introspection bulk status' when some nodes were never introspected 1cec082 Updated from global requirements 1b87769 Add --skip-deploy-identifier Diffstat (except docs and test files) ------------------------------------- bindep.txt | 1 + ...e-upgrade-deployment-flag-f074554e47e85b27.yaml | 8 ++ .../bulk-status-missing-50cc60281c6e20f5.yaml | 6 ++ ...modify-os-image-parameter-004b1cc81df2b88e.yaml | 6 ++ .../notes/remove-abort-9aa90d73d09507c9.yaml | 8 ++ .../skip-deploy-identifier-f7eb0d3ff5126f62.yaml | 10 ++ requirements.txt | 2 +- setup.cfg | 1 - tox.ini | 4 +- .../v1/overcloud_deploy/test_overcloud_deploy.py | 113 +++++++++++++++++++-- tripleoclient/v1/baremetal.py | 13 ++- tripleoclient/v1/overcloud_deploy.py | 53 ++++++++-- tripleoclient/v1/overcloud_image.py | 10 +- tripleoclient/v1/overcloud_update.py | 29 ------ tripleoclient/workflows/deployment.py | 4 +- tripleoclient/workflows/package_update.py | 18 ---- 19 files changed, 236 insertions(+), 79 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8f8278d..8932964 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0

1 0

[tripleo] tripleo-puppet-elements 6.2.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We are jazzed to announce the release of: tripleo-puppet-elements 6.2.1: Puppet building rules for OpenStack images. This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ For more details, please see below. Changes in tripleo-puppet-elements 6.2.0..6.2.1 ----------------------------------------------- 8582a29 Use Python to compute release notes version Diffstat (except docs and test files) ------------------------------------- releasenotes/source/conf.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

[tripleo] tripleo-heat-templates 6.2.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We are happy to announce the release of: tripleo-heat-templates 6.2.1: Heat templates for deploying OpenStack with OpenStack. This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 6.2.1 ^^^^^ Bug Fixes * Fix support for RPMs to be installed via DeployArtifactURLs. LP#1697102 * Previously the RHEL registration script disabled the satellite repo after installing the necessary packages from it. This makes it awkward to update those packages later, so the repo will no longer be disabled. Changes in tripleo-heat-templates 6.2.0..6.2.1 ---------------------------------------------- cea4908 Use Python to compute release notes version 2321346 Don't disable satellite repo after registration 703ff06 Fix rpms being installed via DeployArtifactURLs 14406f8 Remove docker references from stable/ocata scenarios. 564e3fe Use number for KeystoneCronTokenFlushMaxDelay instead of string eeaa235 Modifying Cisco templates to support composable roles 9af7850 Revert "Use optimal (instead of default) tunables for Ceph on upgrade" 7d5929f Ensure yum cache is ready before update 40de798 Use optimal (instead of default) tunables for Ceph on upgrade 92ee6c1 Fix conntrack proto sctp module 8458911 Disable network validation in multinode jobs 9d97427 Use conditionals for neutron and glance worker defaults Diffstat (except docs and test files) ------------------------------------- ci/common/all-nodes-validation-disabled.yaml | 2 +- ci/environments/multinode.yaml | 3 + .../scenario001-multinode-containers.yaml | 46 +-- ci/environments/scenario001-multinode.yaml | 3 + .../scenario002-multinode-containers.yaml | 19 +- ci/environments/scenario002-multinode.yaml | 3 + .../scenario003-multinode-containers.yaml | 22 +- ci/environments/scenario003-multinode.yaml | 3 + .../scenario004-multinode-containers.yaml | 23 +- ci/environments/scenario004-multinode.yaml | 3 + .../rhel-registration/scripts/rhel-registration | 1 - extraconfig/tasks/pacemaker_common_functions.sh | 2 + extraconfig/tasks/yum_update.sh | 3 + puppet/deploy-artifacts.sh | 8 +- .../all_nodes/neutron-ml2-cisco-nexus-ucsm.j2.yaml | 304 ++++++++++++++++++ .../all_nodes/neutron-ml2-cisco-nexus-ucsm.yaml | 340 --------------------- puppet/services/glance-api.yaml | 7 +- puppet/services/kernel.yaml | 2 +- puppet/services/keystone.yaml | 4 +- puppet/services/neutron-api.yaml | 21 +- puppet/services/openvswitch-upgrade.yaml | 2 + ...-rpm-deploy-artifact-urls-03d5694073ad159d.yaml | 4 + ...ve-satellite-repo-enabled-8b60528bd5450c7b.yaml | 6 + releasenotes/source/conf.py | 4 +- 24 files changed, 385 insertions(+), 450 deletions(-)

1 0

[tripleo] os-collect-config 6.1.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We enthusiastically announce the release of: os-collect-config 6.1.1: Collect and cache metadata, run hooks on changes. This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/os-collect-config/ For more details, please see below. Changes in os-collect-config 6.1.0..6.1.1 ----------------------------------------- 7154ef2 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 65f9723..21d5a7a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0

1 0

[tripleo] os-refresh-config 6.1.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We are chuffed to announce the release of: os-refresh-config 6.1.1: Refresh system configuration This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/os-refresh-config/ For more details, please see below. Changes in os-refresh-config 6.1.0..6.1.1 ----------------------------------------- 41eabb3 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 148947f..edcdc78 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0

1 0

[tripleo] os-net-config 6.1.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We exuberantly announce the release of: os-net-config 6.1.1: OpenStack network configuration This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through launchpad: http://bugs.launchpad.net/os-net-config For more details, please see below. Changes in os-net-config 6.1.0..6.1.1 ------------------------------------- 914635c Fix --noop being ignored for dhclient execution 9e081bf Use os-net-config mapping file when interface in bond or bridge 621fa2a os_net_config should map nics that are down if nic is in mapping file Diffstat (except docs and test files) ------------------------------------- os_net_config/impl_ifcfg.py | 5 +- os_net_config/objects.py | 205 +++++++++++++++++------------------- os_net_config/utils.py | 30 ++++-- 5 files changed, 269 insertions(+), 125 deletions(-)

1 0

[tripleo] puppet-tripleo 6.5.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We high-spiritedly announce the release of: puppet-tripleo 6.5.1: Puppet module for OpenStack TripleO This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 6.5.1 ^^^^^ New Features ************ * Enable innodb_buffer_pool_size configuration for all MySQL databases. Known Issues ************ * Ignore failures if nf_conntrack_proto_sctp module failed to load. Since RHEL 7.4, nf_conntrack_proto_sctp module is compiled into the kernel instead of as a module as the sctp support. TripleO will still try to load the module to support RHEL 7.3, but in the future will remove the module management and rely on the kernel provided in newer versions of RHEL. Bug Fixes ********* * Allow VF configuration files to be written for non-existent PCI devices to allow updates while physical functions are currently in use by a guest. * In order to avoid service restarts, all services deploy their httpd configuration at the same time. Thus, httpd now starts in step 3 for the bootstrap nodes, and step 4 for all other nodes. Changes in puppet-tripleo 6.5.0..6.5.1 -------------------------------------- 406ef10 Prepare 6.5.1 (ocata) 121d318 Use Python to compute release notes version ff56fb5 Always start httpd at the same time 3d67149 Enable innodb_buffer_pool_size configuration fd9fbf0 Remove unnecessary references to neutron core plugin hiera f175a6e Fix selinux unit tests b7c0383 Only set the stonith property on the pacemaker_master node 788df58 Use correct manage_firewall hieradata ebebbd7 Retry ceilometer-upgrade d195972 Do not fail if PCI device is missing 2aac2e2 Addition of Nuage as mechanism driver for ML2 0566aae Ignore failures when loading nf_conntrack_proto_sctp kernel module Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/sriov_vf_config/numvfs.rb | 2 +- manifests/haproxy.pp | 4 +- manifests/haproxy/endpoint.pp | 2 +- manifests/host/sriov.pp | 2 +- manifests/profile/base/aodh/api.pp | 12 ++++- manifests/profile/base/ceilometer/api.pp | 13 ++++- manifests/profile/base/ceilometer/collector.pp | 12 ++++- manifests/profile/base/database/mysql.pp | 22 +++++--- manifests/profile/base/heat/api.pp | 15 +++++- manifests/profile/base/heat/api_cfn.pp | 15 +++++- manifests/profile/base/heat/api_cloudwatch.pp | 15 +++++- manifests/profile/base/horizon.pp | 15 +++++- manifests/profile/base/kernel.pp | 28 ++++++++-- manifests/profile/base/neutron/plugins/ml2.pp | 4 ++ .../profile/base/neutron/plugins/ml2/nuage.pp | 31 ++++++++++++ manifests/profile/base/neutron/sriov.pp | 14 ++--- manifests/profile/base/nova/placement.pp | 6 +-- manifests/profile/base/pacemaker.pp | 8 +-- manifests/profile/base/pacemaker_remote.pp | 7 --- manifests/profile/base/zaqar.pp | 15 ++++-- metadata.json | 2 +- ...missing-pci-dev-for-sriov-bbc29f62fcac10ff.yaml | 5 ++ .../innodb_buffer_pool_size-6fa946cf008a4606.yaml | 4 ++ .../nf_conntrack_proto_sctp-a64300a3fc7b4e55.yaml | 9 ++++ .../start-httpd-step3-and-4-2bd7be9e1429ef6d.yaml | 5 ++ releasenotes/source/conf.py | 4 +- spec/classes/tripleo_host_sriov_spec.rb | 4 +- spec/classes/tripleo_profile_base_aodh_api_spec.rb | 25 ++++++++- .../tripleo_profile_base_ceilometer_api_spec.rb | 27 +++++++++- spec/classes/tripleo_profile_base_horizon_spec.rb | 28 +++++++++- spec/classes/tripleo_profile_base_kernel_spec.rb | 59 ++++++++++++++++++++++ spec/classes/tripleo_selinux_spec.rb | 2 +- 32 files changed, 348 insertions(+), 68 deletions(-)

1 0

[karbor] karbor 0.5.1 (pike)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We eagerly announce the release of: karbor 0.5.1: Application Data Protection as a Service for OpenStack This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/karbor Download the package from: https://tarballs.openstack.org/karbor/ Please report issues through launchpad: https://bugs.launchpad.net/karbor For more details, please see below. Changes in karbor 0.5.0..0.5.1 ------------------------------ 78d1bed Fix checkpoints pagination error a307ebd Add project_id in neutron operations af72fdb Fix restore security group error 6b1ef02 Remove network dependency of server resource 3f35eaa Update UPPER_CONSTRAINTS_FILE for stable/pike 195ae6f Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + karbor/services/protection/bank_plugin.py | 14 ++++- .../protection/protectable_plugins/network.py | 59 ++++------------------ .../network/neutron_protection_plugin.py | 17 ++++--- .../plugins/test_network_protectable_plugin.py | 3 +- tox.ini | 2 +- 8 files changed, 50 insertions(+), 61 deletions(-)

1 0

[nova] osc-placement 0.1.0 (queens)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We are tickled pink to announce the release of: osc-placement 0.1.0: OpenStackClient plugin for the Placement service This is the first release of osc-placement. This release is part of the queens release series. The source is available from: http://git.openstack.org/cgit/openstack/osc-placement Download the package from: https://pypi.python.org/pypi/osc-placement Please report issues through launchpad: http://bugs.launchpad.net/osc-placement For more details, please see below.

1 0

neutron-vpnaas 11.0.0 (pike)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We jubilantly announce the release of: neutron-vpnaas 11.0.0: OpenStack Networking VPN as a Service This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/neutron-vpnaas/ For more details, please see below. 11.0.0 ^^^^^^ Prelude ******* Flavor framework integration. New Features ************ * Neutron VPNaaS is now integrated with Neutron flavor framework. Multiple VPN service providers might be configured at the same time. A flavor of service type VPN associated with a profile containing a driver is used to find the provider for a newly created VPN service. Changes in neutron-vpnaas 11.0.0.0rc1..11.0.0 --------------------------------------------- 60e4e71 tox_install.sh: Update for stable/pike 1af618a Update UPPER_CONSTRAINTS_FILE for stable/pike 1647779 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tools/tox_install.sh | 2 +- tox.ini | 2 +- 3 files changed, 3 insertions(+), 2 deletions(-)

1 0

[tripleo] os-apply-config 6.1.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We are overjoyed to announce the release of: os-apply-config 6.1.1: Config files from cloud metadata This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/os-apply-config/ For more details, please see below. Changes in os-apply-config 6.1.0..6.1.1 --------------------------------------- 92f6066 Updated from global requirements Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 66aa504..33f9008 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr<2.0.0,>=1.8 # Apache-2.0 +pbr>=1.8 # Apache-2.0

1 0

[tripleo] instack-undercloud 6.1.1 (ocata)
by no-reply＠openstack.org 05 Sep '17

05 Sep '17

We exuberantly announce the release of: instack-undercloud 6.1.1: instack-undercloud This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/instack-undercloud Download the package from: https://tarballs.openstack.org/instack-undercloud/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 6.1.1 ^^^^^ Upgrade Notes ************* * Undercloud upgrade will handle the change of ownership for ironic- dbsync.log to become ironic:ironic instead of root:root. Indeed, https://review.openstack.org/#/c/457478/ broke TripleO upgrades but it's to fix a valid issue in the puppet-ironic module. We still want to handle upgrades for existing deployments, that's why we manage the ownership change in instack-undercloud. * During upgrade make sure to remove any left over tuskar packages. This has been known to cause problems during the upgrade. See bug 1691744 for more information Bug Fixes ********* * The description of the "enable_cinder" option was fixed to not imply that booting from Cinder volumes is implemented in the undercloud. * The default "IRONIC_API_VERSION" in "stackrc" is now set to the same value as "OS_BAREMETAL_API_VERSION" for consistency between two clients. * Closes bug https://bugs.launchpad.net/tripleo/+bug/1691744 which is caused by left-over tuskar packages. This would only affect environments deployed with TripleoO since Kilo and for which tuskar has not explicitly been removed. Other Notes *********** * The default "OS_BAREMETAL_API_VERSION" in "stackrc" was bumped to 1.29, which corresponds to Ocata final and allows using all recent features without specifying and explicit version. Changes in instack-undercloud 6.1.0..6.1.1 ------------------------------------------ 02d2584 Remove isolated-build element b86f03e Fail-fast if the undercloud-passwords.conf file is missing 83efba6 Add ssl development headers to bindep dca0042 Add unit test and release note for tuskar package removal 6736ac1 Clarify the enable_cinder option description 7cbdf71 Remove any left-over tuskar packages on upgrade d286b7f Bump OS_BAREMETAL_API_VERSION to 1.29 bf96206 undercloud/upgrade: change ownership for ironic-dbsync.log Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 + elements/isolated-build/README.md | 13 ------ .../environment.d/no-source-repositories.bash | 1 - .../pre-install.d/00-disable-external-installs | 10 ----- .../os-apply-config/root/stackrc | 5 ++- instack_undercloud/undercloud.py | 50 +++++++++++++++++++--- ...enable-cinder-description-c53f8dc3a61e27c1.yaml | 5 +++ .../notes/ironic-api-version-d2b4ec1474918f12.yaml | 10 +++++ .../notes/ironic-dbsync-da5d047e92841f78.yaml | 9 ++++ ...-leftover-tuskar-packages-eeba9cf583a11ee3.yaml | 10 +++++ undercloud.conf.sample | 4 +- 12 files changed, 117 insertions(+), 41 deletions(-)

1 0

[tripleo] tripleo-heat-templates 5.3.1 (newton)
by no-reply＠openstack.org 04 Sep '17

04 Sep '17

We enthusiastically announce the release of: tripleo-heat-templates 5.3.1: Heat templates for deploying OpenStack with OpenStack. This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo For more details, please see below. 5.3.1 ^^^^^ New Features ************ * Add support for cold migration over ssh. This enables nova cold migration. This also switches to SSH as the default transport for live- migration. The tripleo-common mistral action that generates passwords supplies the MigrationSshKey parameter that enables this. * SSH host key exchange. The ssh host keys are collected from each host, combined, and written to /etc/ssh/ssh_known_hosts. Deprecation Notes ***************** * The TCP transport is no longer used for live-migration and the firewall port has been closed. Bug Fixes ********* * Remove ceilometer from swift proxy middleware pipeline. This generates a lot of events data and spams swift and gnocchi, inturn heavily impacting performance. This can also flood mongodb if you're using it for events. * Expose metric_processing_delay to tweak gnocchi performance. * Incorrect network used for Glance API service. * Fix support for RPMs to be installed via DeployArtifactURLs. LP#1697102 * Previously the RHEL registration script disabled the satellite repo after installing the necessary packages from it. This makes it awkward to update those packages later, so the repo will no longer be disabled. * The token flush cron job has been modified to run hourly instead of once a day. This is because this was causing issues with larger deployments, as the operation would take too long and sometimes even fail because of the transaction being so large. Note that this only affects people using the UUID token provider. * os-net-config is updated and executed before other packages to avoid premature restart of Open vSwitch. * Workaround systems getting registered as "localhost" during RHEL registration if they don't have a fqdn set by first rm'ing the /etc/rhsm/facts directory. When the directory does not exist, the katello-rshm-consumer which runs when installing the katello-ca- consumer will not set the hostname.override fact to "localhost". See https://bugs.launchpad.net/tripleo/+bug/1711435 Other Notes *********** * All nodes now enable "arp_accept" sysctl setting to help with honoring gratuitous ARP packets in their ARP tables. While sources of gratuitous ARP packets are diverse, this comes especially useful for Neutron floating IP addresses that roam between devices, and for which Neutron L3 agent sends gratuitous ARP packets to update all network nodes about IP address new locations. Changes in tripleo-heat-templates 5.3.0..5.3.1 ---------------------------------------------- a33d7dd Workaround for RHEL registration as "localhost" 8acff7b Don't disable satellite repo after registration 43745b2 Fix rpms being installed via DeployArtifactURLs 4692bb3 Adds SSH Banner text into sshd_config 3f1a336 [NEWTON-ONLY] Ignore Ceph healt warning states by default ce75b84 Adjust for new pcs output. 5b3c4df Ensure yum cache is ready before update 058b855 Modifying Cisco templates to support composable roles 89f90c0 Remove ceilometer from swift middleware pipeline 0edf1cf Revert "Use optimal (instead of default) tunables for Ceph on upgrade" a18621e Use optimal (instead of default) tunables for Ceph on upgrade 6299a16 Run token flush cron job hourly by default 02b69cc Fix conntrack proto sctp module ebd6c01 Adds check for existing yum process during the legacy minor update 36a16de Disable network validation in multinode jobs 3633d16 Change the project to service 7db285f cisco nexus: keep OVS on the Compute 64f789d [newton only] Ensure cinder services are cleanup during upgrade. a1e633c Ensure nova migration package is installed during minor update 864777f Fixes incorrect glance api network c443e22 Install openstack-nova-migration on computes during M->N upgrade 40cdd83 Add ignore_projects to filter gnocchi events 9f8ba2c Reconfigure interfaces before updating openvswitch c2d08c4 Expose events ttl for ceilometer 688d7fe Expose metric delay processing metric 016140b Cleanup cinder paste configuration for ssl. 0eb81a2 Addition of firewall rules for Nuage dc505ce Restrict nova migration ssh tunnel c7e1f28 Add migration SSH tunneling support 307735c Enable arp_accept for all interfaces 885bf88 SSH known_hosts config db34e8e Disable ComputeNeutron* for cisco-nexus-ucsm dd42fe9 [Newton only] - Manually touch ssl.conf before installing mod_ssl 3a9da61 Ensure AllNodesExtraConfig runs before AllNodesDeploySteps c325059 Touch /etc/httpd/conf.d/ssl.conf e903efc [M->N] Ensure mod_ssl is installed during upgrade. 3890eb1 [NEWTON-ONLY] Fix Ceph upgrade from Hammer to Jewel >= 10.2.4 Diffstat (except docs and test files) ------------------------------------- ci/common/all-nodes-validation-disabled.yaml | 43 +++ ci/environments/multinode.yaml | 3 + ci/environments/scenario001-multinode.yaml | 13 + ci/environments/scenario002-multinode.yaml | 3 + ci/environments/scenario003-multinode.yaml | 3 + ci/environments/scenario004-multinode.yaml | 3 + environments/neutron-ml2-cisco-nexus-ucsm.yaml | 1 + environments/neutron-nuage-config.yaml | 1 - environments/sshd-banner.yaml | 13 + .../rhel-registration/scripts/rhel-registration | 15 +- extraconfig/tasks/major_upgrade_block_storage.sh | 2 +- extraconfig/tasks/major_upgrade_ceph_mon.sh | 5 +- extraconfig/tasks/major_upgrade_ceph_storage.sh | 9 +- extraconfig/tasks/major_upgrade_compute.sh | 4 +- .../tasks/major_upgrade_controller_pacemaker_2.sh | 27 +- extraconfig/tasks/major_upgrade_object_storage.sh | 3 +- extraconfig/tasks/major_upgrade_pacemaker.yaml | 2 +- .../tasks/major_upgrade_pacemaker_migrations.sh | 10 +- extraconfig/tasks/pacemaker_common_functions.sh | 37 +++ extraconfig/tasks/ssh/host_public_key.yaml | 42 +++ extraconfig/tasks/ssh/known_hosts_config.yaml | 36 +++ extraconfig/tasks/yum_update.sh | 36 ++- network/service_net_map.j2.yaml | 3 +- overcloud-resource-registry-puppet.j2.yaml | 3 + overcloud.j2.yaml | 18 ++ puppet/blockstorage-role.yaml | 65 ++++ puppet/cephstorage-role.yaml | 65 ++++ puppet/compute-role.yaml | 65 ++++ puppet/controller-role.yaml | 65 ++++ puppet/deploy-artifacts.sh | 8 +- .../all_nodes/neutron-ml2-cisco-nexus-ucsm.j2.yaml | 305 ++++++++++++++++++ .../all_nodes/neutron-ml2-cisco-nexus-ucsm.yaml | 341 --------------------- puppet/objectstorage-role.yaml | 65 ++++ puppet/role.role.j2.yaml | 65 ++++ puppet/services/ceilometer-base.yaml | 5 + puppet/services/gnocchi-base.yaml | 5 + puppet/services/kernel.yaml | 4 +- puppet/services/keystone.yaml | 54 ++++ puppet/services/neutron-compute-plugin-nuage.yaml | 10 + puppet/services/neutron-plugin-nuage.yaml | 7 +- puppet/services/nova-compute.yaml | 13 + puppet/services/nova-libvirt.yaml | 1 - puppet/services/sshd.yaml | 34 ++ puppet/services/swift-proxy.yaml | 10 +- ...meter-from-swift-pipeline-6ee079b9c7b919f8.yaml | 6 + .../notes/enable-arp_accept-6296b0113bc56b10.yaml | 9 + ...e-metric-processing-delay-0c098d7ec0af0728.yaml | 3 + .../fix-glance-api-network-4f9d7c20475a5994.yaml | 3 + ...-rpm-deploy-artifact-urls-03d5694073ad159d.yaml | 4 + ...ve-satellite-repo-enabled-8b60528bd5450c7b.yaml | 6 + .../notes/migration_over_ssh-003e2a92f5f5374d.yaml | 14 + .../notes/ssh_known_hosts-287563590632d1aa.yaml | 4 + .../token-flush-twice-a-day-d4b00a2953a6b383.yaml | 7 + .../update-interfaces-first-f3c214ee9bdc1587.yaml | 4 + ...d-unset-fqdn-for-rhel-reg-be9c4620146096be.yaml | 8 + roles_data.yaml | 5 + 56 files changed, 1214 insertions(+), 381 deletions(-)

1 0

[tripleo] tripleo-common 5.4.3 (newton)
by no-reply＠openstack.org 04 Sep '17

04 Sep '17

We are psyched to announce the release of: tripleo-common 5.4.3: A common library for TripleO workflows. This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo-common For more details, please see below. 5.4.3 ^^^^^ New Features * Add MigrationSshKey to generated passwords. This ssh key-pair is used by nova cold-migration and libvirt live-migration unless TLS is enabled. * Add a new action argument, skip_deploy_identifier to DeployStackAction. The argument will disable setting a unique value for the DeployIdentifier parameter, which means the SoftwareDeployment resources in the templates will only be triggered if there is an actual change to their configuration. This argument can be used to avoid always applying configuration, such as during node scale out. This option should be used with Caution, and only if there is confidence that the software configuration does not need to be run, such as when scaling out certain roles. Changes in tripleo-common 5.4.2..5.4.3 -------------------------------------- de872dd Add skip_deploy_identifier 59eb2de Add element to regenerate dracut on the agent 935912d Ensure Swift Rings backup container and URLs c49755c Add MigrationSshKey to generated passwords 0781056 Handle re-created resources in StackUpdateManager Diffstat (except docs and test files) ------------------------------------- image-yaml/overcloud-images.yaml | 2 +- .../notes/migration_ssh_key-6e772d18d4d24485.yaml | 4 + .../skip-deploy-identifier-d5abb0d4e6af0ecd.yaml | 10 +++ requirements.txt | 1 + tripleo_common/_stack_update.py | 6 +- tripleo_common/actions/deployment.py | 7 +- tripleo_common/actions/validations.py | 23 +----- tripleo_common/constants.py | 1 + tripleo_common/utils/passwords.py | 19 ++++- tripleo_common/utils/validations.py | 9 +-- workbooks/deployment.yaml | 54 ++++---------- workbooks/plan_management.yaml | 15 ++++ workbooks/swift_rings_backup.yaml | 87 ++++++++++++++++++++++ 19 files changed, 265 insertions(+), 102 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ae2d440..9899647 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19,0 +20 @@ passlib>=1.6 # BSD +paramiko>=2.0 # LGPLv2.1+

1 0