January 2018 - Release-announce - lists.openstack.org

[zun] python-zunclient 1.0.0 (queens)
by no-reply＠openstack.org 05 Jan '18

05 Jan '18

We eagerly announce the release of: python-zunclient 1.0.0: Client Library for Zun This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/python-zunclient Download the package from: https://pypi.python.org/pypi/python-zunclient Please report issues through launchpad: https://bugs.launchpad.net/zun For more details, please see below. Changes in python-zunclient 0.5.0..1.0.0 ---------------------------------------- 6fdb1a5 Updated from global requirements 303b3f7 Update new documentation PTI jobs 8657881 Add support for image show 9546a78 Rephrase the helptext of runtime parameter 09b3b16 Updated from global requirements 0143655 Add size option to "--mount" when run container 8728989 Updated add-security-group help text 97e976f Add image-search support 8a87ea0 Revise the implementation in container exec_resize 9b6c529 Remove the debug code in websocketclient 5ee3b99 Support stop and delete container 296a10c Updated from global requirements dcc2cde Updated from global requirements 64171f6 Wait for container deletion in tests 6374f11 Include zun-tempest-plugin as required project 915fd86 Zuul: add file extension to playbook path ea89513 Remove the runtime constraint ec873e0 Add argument 'mounts' to container ef64a29 Generate stestr.conf 4f75b4a Cleanup the containers at zunclient funtional tests Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .stestr.conf | 3 ++ .zuul.yaml | 5 +-- playbooks/zunclient-devstack-docker-sql/run.yaml | 1 + requirements.txt | 8 ++--- setup.cfg | 1 + test-requirements.txt | 9 ++--- tox.ini | 13 +++++-- zunclient/api_versions.py | 2 +- zunclient/common/base.py | 11 ++++++ zunclient/common/utils.py | 32 +++++++++++++++++ .../common/websocketclient/websocketclient.py | 6 ++-- zunclient/osc/v1/containers.py | 33 ++++++++++++++---- zunclient/osc/v1/images.py | 29 ++++++++++++++++ zunclient/v1/containers.py | 2 +- zunclient/v1/containers_shell.py | 30 ++++++++++++---- zunclient/v1/images.py | 18 ++++++++++ zunclient/v1/images_shell.py | 26 ++++++++++++++ 26 files changed, 314 insertions(+), 78 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bcc703b..566f913 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,2 +8,2 @@ python-openstackclient>=3.12.0 # Apache-2.0 -keystoneauth1>=3.2.0 # Apache-2.0 -osc-lib>=1.7.0 # Apache-2.0 +keystoneauth1>=3.3.0 # Apache-2.0 +osc-lib>=1.8.0 # Apache-2.0 @@ -11,2 +11,2 @@ oslo.i18n>=3.15.3 # Apache-2.0 -oslo.utils>=3.28.0 # Apache-2.0 -websocket-client>=0.33.0 # LGPLv2+ +oslo.utils>=3.33.0 # Apache-2.0 +websocket-client<=0.40.0,>=0.33.0 # LGPLv2+ diff --git a/test-requirements.txt b/test-requirements.txt index 6a475ce..d7fe175 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +9,0 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -openstackdocstheme>=1.17.0 # Apache-2.0 @@ -14,3 +13,2 @@ os-testr>=1.0.0 # Apache-2.0 -python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.6.2 # BSD -tempest>=16.1.0 # Apache-2.0 +python-subunit>=1.0.0 # Apache-2.0/BSD +tempest>=17.1.0 # Apache-2.0 @@ -20 +18 @@ testscenarios>=0.4 # Apache-2.0/BSD -testtools>=1.4.0 # MIT +testtools>=2.2.0 # MIT @@ -23 +20,0 @@ testtools>=1.4.0 # MIT -reno>=2.5.0 # Apache-2.0

1 0

[glance] python-glanceclient 2.9.0 (queens)
by no-reply＠openstack.org 03 Jan '18

03 Jan '18

We are glad to announce the release of: python-glanceclient 2.9.0: OpenStack Image API Client Library This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/python-glanceclient Download the package from: https://pypi.python.org/pypi/python-glanceclient Please report issues through launchpad: https://bugs.launchpad.net/python-glanceclient For more details, please see below. Changes in python-glanceclient 2.8.0..2.9.0 ------------------------------------------- 4dcbc30 Compare against 'RequestIdProxy.wrapped' 726c50d Update Image service property keys doc 8eea3c7 Update Image service property keys docs 3ea8898 Updated from global requirements bb09119 Revise functional testing README file a598550 Restore functional testing under ssl c0e63d9 Migrate dsvm functional test jobs to project repo 79d0051 Add domain info to functional test clients 2f79a98 Updated from global requirements d158f1e Updated from global requirements 08834d0 Updated from global requirements db79d39 Remove Babel as a runtime requirement 335f1e9 image-create-via-import fails with ValueError e5b69ef Fix image-import call 14a9693 Updated from global requirements 0e50837 stage call fails with TypeError 6fe3018 Update reno for stable/pike a00ea5b Updated from global requirements Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 48 ++++++++++++++++++++++ glanceclient/v2/images.py | 12 +++--- glanceclient/v2/shell.py | 7 +++- releasenotes/source/index.rst | 1 + releasenotes/source/pike.rst | 6 +++ requirements.txt | 13 +++--- test-requirements.txt | 14 +++---- tools/fix_ca_bundle.sh | 37 +++++++++++++++++ tox.ini | 5 +++ 14 files changed, 163 insertions(+), 81 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ca2a418..40880d0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +4,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -Babel!=2.4.0,>=2.3.4 # BSD @@ -7 +6 @@ PrettyTable<0.8,>=0.7.1 # BSD -keystoneauth1>=3.0.1 # Apache-2.0 +keystoneauth1>=3.3.0 # Apache-2.0 @@ -9,4 +8,4 @@ requests>=2.14.2 # Apache-2.0 -warlock!=1.3.0,<2,>=1.0.1 # Apache-2.0 -six>=1.9.0 # MIT -oslo.utils>=3.20.0 # Apache-2.0 -oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0 +warlock!=1.3.0,<2,>=1.2.0 # Apache-2.0 +six>=1.10.0 # MIT +oslo.utils>=3.33.0 # Apache-2.0 +oslo.i18n>=3.15.3 # Apache-2.0 @@ -14 +13 @@ wrapt>=1.7.0 # BSD License -pyOpenSSL>=0.14 # Apache-2.0 +pyOpenSSL>=16.2.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 2c9bfb4..eb76e2a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7,2 +7,2 @@ coverage!=4.4,>=4.0 # Apache-2.0 -mock>=2.0 # BSD -ordereddict # MIT +mock>=2.0.0 # BSD +ordereddict>=1.1 # MIT @@ -10,2 +10,2 @@ os-client-config>=1.28.0 # Apache-2.0 -openstackdocstheme>=1.11.0 # Apache-2.0 -reno!=2.3.1,>=1.8.0 # Apache-2.0 +openstackdocstheme>=1.17.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0 @@ -14 +14 @@ testrepository>=0.0.18 # Apache-2.0/BSD -testtools>=1.4.0 # MIT +testtools>=2.2.0 # MIT @@ -17,2 +17,2 @@ fixtures>=3.0.0 # Apache-2.0/BSD -requests-mock>=1.1 # Apache-2.0 -tempest>=16.1.0 # Apache-2.0 +requests-mock>=1.1.0 # Apache-2.0 +tempest>=17.1.0 # Apache-2.0

1 0

[designate] designate-dashboard 5.0.1 (pike)
by no-reply＠openstack.org 03 Jan '18

03 Jan '18

We are chuffed to announce the release of: designate-dashboard 5.0.1: Designate Horizon UI bits This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/designate-dashboard/ For more details, please see below. Changes in designate-dashboard 5.0.0..5.0.1 ------------------------------------------- 146efd8 AngularJS unittest with Jasmine and Karma 1487123 Fix viewing detail resources e027eca Imported Translations from Zanata 080d71f Update UPPER_CONSTRAINTS_FILE for stable/pike 789ba56 Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + .gitreview | 1 + README.rst | 17 +++ designatedashboard/locale/es/LC_MESSAGES/django.po | 20 ++- .../os-designate-floatingip.module.js | 4 +- .../os-designate-recordset.module.js | 6 +- .../actions/actions.module.spec.js | 49 +++++++ .../os-designate-zone/os-designate-zone.module.js | 6 +- karma.conf.js | 141 +++++++++++++++++++++ package.json | 26 ++++ .../source/locale/de/LC_MESSAGES/releasenotes.po | 43 ------- .../source/locale/id/LC_MESSAGES/releasenotes.po | 42 ------ .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 43 ------- .../source/locale/ru/LC_MESSAGES/releasenotes.po | 37 ------ .../locale/zh_CN/LC_MESSAGES/releasenotes.po | 42 ------ test-shim.js | 110 ++++++++++++++++ tox.ini | 2 +- 17 files changed, 374 insertions(+), 217 deletions(-)

1 0

[nova] nova 15.1.0 (ocata)
by no-reply＠openstack.org 03 Jan '18

03 Jan '18

We are glad to announce the release of: nova 15.1.0: Cloud computing fabric controller This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 15.1.0 ^^^^^^ Known Issues ************ * Nova does not support running the nova-api service under mod_wsgi or uwsgi in Ocata. There are some experimental scripts that have been available for years which allow you do to this, but doing so in Ocata results in possible failures to list and show instance details in a cells v2 setup. See bug 1661360 for details. (https://bugs.launchpad.net/nova/+bug/1661360) Upgrade Notes ************* * This release contains a schema migration for the "nova_api" database in order to address bug 1738094: https://bugs.launchpad.net/nova/+bug/1738094 The migration is optional and can be postponed if you have not been affected by the bug. The bug manifests itself through "Data too long for column 'spec'" database errors. Bug Fixes ********* * The fix for `OSSA-2017-005`_ (CVE-2017-16239) was too far-reaching in that rebuilds can now fail based on scheduling filters that should not apply to rebuild. For example, a rebuild of an instance on a disabled compute host could fail whereas it would not before the fix for CVE-2017-16239. Similarly, rebuilding an instance on a host that is at capacity for vcpu, memory or disk could fail since the scheduler filters would treat it as a new build request even though the rebuild is not claiming *new* resources. Therefore this release contains a fix for those regressions in scheduling behavior on rebuild while maintaining the original fix for CVE-2017-16239. Note: The fix relies on a "RUN_ON_REBUILD" variable which is checked for all scheduler filters during a rebuild. The reasoning behind the value for that variable depends on each filter. If you have out- of-tree scheduler filters, you will likely need to assess whether or not they need to override the default value (False) for the new variable. * Fixes bug 1695861 in which the aggregate API accepted requests that have availability zone names including ':'. With this fix, a creation of an availabilty zone whose name includes ':' results in a "400 BadRequest" error response. (https://bugs.launchpad.net/nova/+bug/1695861) * This release includes a fix for bug 1733886 which was a regression introduced in the 2.36 API microversion where the "force" parameter was missing from the "PUT /os-quota-sets/{tenant_id}" API request schema so users could not force quota updates with microversion 2.36 or later. The bug is now fixed so that the "force" parameter can once again be specified during quota updates. There is no new microversion for this change since it is an admin-only API. (https://bugs.launchpad.net/nova/+bug/1733886) Docutils System Messages ************************ Changes in nova 15.0.8..15.1.0 ------------------------------ 4f0ff43 Make request_spec.spec MediumText 901377b Fix 'force' parameter in os-quota-sets PUT schema 10bc4fd Get original image_id from volume for volume-backed instance rebuild e26c915 Only query BDMs once in API during rebuild fe5e3e7 Add regression test for rebuilding a volume-backed server bbfc423 Refined fix for validating image on rebuild 1905407 Document the real behavior of notify_on_state_change 324d57b Update bindep.txt for doc builds 4d7acf3 Add release note for running nova-api under wsgi in Ocata c53df19 fix nova accepting invalid availability zone name with ':' 286fa12 Call terminate_connection when shelve_offloading 1bfc26b Skip test_rebuild_server_in_error_state for cells v1 Diffstat (except docs and test files) ------------------------------------- api-ref/source/parameters.yaml | 3 +- bindep.txt | 7 +- devstack/tempest-dsvm-cells-rc | 3 + .../v2.36/quotas-show-defaults-get-resp.json | 15 ++++ .../v2.36/quotas-show-detail-get-resp.json | 55 +++++++++++++ .../os-quota-sets/v2.36/quotas-show-get-resp.json | 15 ++++ .../v2.36/quotas-update-force-post-req.json | 6 ++ .../v2.36/quotas-update-force-post-resp.json | 14 ++++ .../v2.36/quotas-update-post-req.json | 5 ++ .../v2.36/quotas-update-post-resp.json | 14 ++++ .../v2.36/user-quotas-show-get-resp.json | 15 ++++ .../v2.36/user-quotas-update-post-req.json | 6 ++ .../v2.36/user-quotas-update-post-resp.json | 14 ++++ .../openstack/compute/rest_api_version_history.rst | 6 ++ nova/api/openstack/compute/schemas/aggregates.py | 4 +- nova/api/openstack/compute/schemas/quota_sets.py | 2 +- nova/api/validation/parameter_types.py | 30 +++++++ nova/api/validation/validators.py | 27 +++++++ nova/compute/api.py | 50 +++++++++--- nova/compute/manager.py | 10 ++- nova/conf/notifications.py | 15 ++-- .../versions/031_request_specs_spec_mediumtext.py | 25 ++++++ nova/db/sqlalchemy/api_models.py | 2 +- nova/scheduler/filters/__init__.py | 22 ++++- nova/scheduler/filters/affinity_filter.py | 12 +++ .../aggregate_image_properties_isolation.py | 2 + .../filters/aggregate_instance_extra_specs.py | 2 + .../filters/aggregate_multitenancy_isolation.py | 2 + nova/scheduler/filters/all_hosts_filter.py | 2 + nova/scheduler/filters/availability_zone_filter.py | 2 + .../filters/compute_capabilities_filter.py | 2 + nova/scheduler/filters/compute_filter.py | 2 + nova/scheduler/filters/core_filter.py | 2 + nova/scheduler/filters/disk_filter.py | 4 + nova/scheduler/filters/exact_core_filter.py | 2 + nova/scheduler/filters/exact_disk_filter.py | 2 + nova/scheduler/filters/exact_ram_filter.py | 2 + nova/scheduler/filters/image_props_filter.py | 2 + nova/scheduler/filters/io_ops_filter.py | 2 + nova/scheduler/filters/isolated_hosts_filter.py | 2 + nova/scheduler/filters/json_filter.py | 3 + nova/scheduler/filters/metrics_filter.py | 2 + nova/scheduler/filters/num_instances_filter.py | 2 + nova/scheduler/filters/numa_topology_filter.py | 2 + nova/scheduler/filters/pci_passthrough_filter.py | 2 + nova/scheduler/filters/ram_filter.py | 2 + nova/scheduler/filters/retry_filter.py | 4 + nova/scheduler/filters/trusted_filter.py | 2 + nova/scheduler/filters/type_filter.py | 4 + nova/scheduler/host_manager.py | 9 ++- nova/scheduler/utils.py | 13 +++ .../quotas-update-force-resp.json.tpl | 19 ----- .../v2.36/quotas-show-defaults-get-resp.json.tpl | 15 ++++ .../v2.36/quotas-show-detail-get-resp.json.tpl | 55 +++++++++++++ .../v2.36/quotas-show-get-resp.json.tpl | 15 ++++ .../v2.36/quotas-update-force-post-req.json.tpl | 6 ++ .../v2.36/quotas-update-force-post-resp.json.tpl | 14 ++++ .../v2.36/quotas-update-post-req.json.tpl | 5 ++ .../v2.36/quotas-update-post-resp.json.tpl | 14 ++++ .../v2.36/user-quotas-show-get-resp.json.tpl | 15 ++++ .../v2.36/user-quotas-update-post-req.json.tpl | 6 ++ .../v2.36/user-quotas-update-post-resp.json.tpl | 14 ++++ .../functional/regressions/test_bug_1732947.py | 93 ++++++++++++++++++++++ .../unit/api/openstack/compute/test_aggregates.py | 15 ++++ ...-1661360-wsgi-known-issue-ee439d193a4b56ad.yaml | 10 +++ ...ne-validate-image-rebuild-6d730042438eec10.yaml | 20 +++++ .../notes/bug-1695861-ebc8a0aa7a87f7e0.yaml | 9 +++ ...-os-quota-sets-force-2.36-5866924621ecc857.yaml | 12 +++ ...uest_specs.spec-migration-22d3421ea1536a37.yaml | 11 +++ 78 files changed, 883 insertions(+), 70 deletions(-)

1 0

[kuryr] kuryr-kubernetes 0.3.0 (queens)
by no-reply＠openstack.org 03 Jan '18

03 Jan '18

We are amped to announce the release of: kuryr-kubernetes 0.3.0: Kubernetes integration with OpenStack networking This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/kuryr-kubernetes Download the package from: https://tarballs.openstack.org/kuryr-kubernetes/ Please report issues through launchpad: https://bugs.launchpad.net/kuryr-kubernetes For more details, please see below. 0.3.0 ^^^^^ New Features ************ * oslo.cache support has been added to the default_subnet driver. This allows to skip unnecessary calls to neutron to retrieve network and subnet information that can be cached and retrieved faster. It includes the generic oslo caching options to enable/disable it as well as to specify the backend to use (dogpile.cache.memory by default). In addition it includes the specific options ofr the subnet driver, to enable/disable it just for this driver, as well as to specify the cache time. To change default configurations, the next can be modified at kuryr.conf [cache] enable=True backend=dogpile.cache.memory [subnet_caching] caching=True cache_time=3600 Other Notes *********** * Started using reno for release notes. Changes in kuryr-kubernetes 0.2.0..0.3.0 ---------------------------------------- bb5be50 Updates ports pool doc information 25f5498 Remove hardcoded "/opt/stack/new" from DevStack 657ade1 Remove Cinder from tempest gates e450cfa rm tools/tox_install.sh 904ed6c Fix kuryr-daemon for Werkzeug 0.13 d76558b Update service documentation with Octavia loadbalancer topology configurtaion. 18db649 Support kuryr-daemon when running containerized b584be7 Disable functional jobs on docs or reno changes 653ee56 Make some Tempest gates voting a93415b Use K8s 1.8 with Hyperkube 1aebde0 Ensure readiness probe is not always enabled bcc851a Add oslo_cache to default_subnet driver 94f5059 Enable debug log level in DevStack b689288 Add OpenShift gates 9fb0370 Add Reno release notes support to Kuryr-Kubernetes 3acc25d Add CNI daemon Tempest job 2a1fa61 devstack: add openshift support 2f65d99 CNI split - introducing CNI daemon d12442e Add VIF-Handler And Drivers Design approach 1c2320e Prevent pyroute2.IPDB threads leaking 00c5f00 Ignore the headless services 8b05365 Add readiness probe to kuryr-controller pod 79d8e23 Avoid neutron calls at recovering precreated ports db4b514 Enable Neutron Metadata Agent in Tempest jobs d64582f Add icmp sg rules to k8s project 60abd6b Zuul: add file extension to playbook path 353c193 Fix mistakes in tempest playbook cfdc991 Fix KeyError exception upon service/deployment deletion 4d603cb Use OVS_BRIDGE variable for bridge configuration 87b2418 Eliminate wrong ERROR report when service of type LoadBalancer type is deleted 2c018c9 Fix ports pool documentation 26e68ef Update dragonflow devstack local.conf 36ffdcb Add basic DevStack installation tutorial 3ebbe5f Enable port debug in devstack 3de8933 Add list and show pool commands to Pool Manager 38697dd Add Pool Manager to handle subports f53188a Speed up neutron request_vifs function e836272 Remove 99-loopback.conf e707f7a Add devstack ports pool configuration options 05a25af metadata.resourceVersion: Invalid value 39f615b Migrate to Zuulv3 12a87db Remove SCREEN_LOGDIR from devstack a9cb428 Add exception handling to _get_in_use_ports 5b3b02b Add support for service type=LoadBalancer 5a117db Optimize return_to_pool actions at Pool drivers b67a077 Recover precreated ports at NeutronVIFPool driver e74debf Updated from global requirements b268274 Add Octavia L2 member mode support f5e8f48 Avoid port update neutron call during pods boot up 3a8f419 [Trivial] Doc fix K8S/K8s -> Kubernetes eb428c1 Clean up ENV vars mistmatches in Dockerfiles 0448547 Fix local.conf.sample once again 2d9a2fc devstack: optionally run kuryr containerized 460cab6 CNI container: parametrize and clean up 632d32b Add support to install Kuryr as a network addon 1dd9d7a Fix local.conf.sample in without Octavia d10b927 Add methods to populate/free subport pools 7c2ec72 "Install kuryr-cni a virtualenv"->"Install kuryr-cni in a virtualenv" a3a25fd Dragonflow support: Installation & Configuration 6ba3122 Fix typo at local.conf.odl.sample template 055b4b7 Make precreated ports pool recovery not ML2/OVS specific 8697baf Ensure pool_key is properly created/retrieved 0c5b37c OpenDaylight support: Installation & Configuration d47fa2e Add DevStack base installation section ae22fe6 Updated from global requirements f1f19d6 modify some misspellings in doc 0da4345 Fix Incorrect Module Reference 78ad9e2 [Trivial] Using Similar Format of path like other places in same Doc Diffstat (except docs and test files) ------------------------------------- .dockerignore | 1 + .gitignore | 7 + .zuul.yaml | 162 +++++ cni.Dockerfile | 26 + cni.spec | 28 + cni_builder | 13 + cni_builder.Dockerfile | 45 ++ cni_ds_init | 42 ++ cni_main.patch | 12 + contrib/pools-management/README.rst | 320 +++++++++ contrib/pools-management/subports.py | 187 +++++ controller.Dockerfile | 23 + devstack/lib/kuryr_kubernetes | 411 ++++++++++- devstack/local.conf.df.sample | 90 ++- devstack/local.conf.odl.sample | 39 +- devstack/local.conf.openshift.sample | 220 ++++++ devstack/local.conf.pod-in-vm.overcloud.sample | 33 + devstack/local.conf.pod-in-vm.undercloud.df.sample | 49 ++ .../local.conf.pod-in-vm.undercloud.odl.sample | 83 +++ devstack/local.conf.pod-in-vm.undercloud.sample | 2 - devstack/local.conf.sample | 67 +- devstack/plugin.sh | 280 +++++++- devstack/settings | 28 +- .../installation/devstack/dragonflow_support.rst | 191 +++++ .../installation/devstack/nested-macvlan.rst | 42 ++ .../installation/testing_nested_connectivity.rst | 54 ++ etc/cni/net.d/99-loopback.conf | 4 - hooks/hook-backports.ssl_match_hostname.py | 15 + hooks/hook-dns.py | 2 + hooks/hook-kuryr_kubernetes.cni.binding.py | 9 + hooks/hook-os_vif.py | 7 + hooks/hook-pyroute2.py | 7 + hooks/hook-vif_plug_linux_bridge.py | 2 + hooks/hook-vif_plug_ovs.py | 2 + k8s_client.patch | 11 + kuryr_kubernetes/cmd/daemon.py | 22 + kuryr_kubernetes/cni/api.py | 151 ++-- kuryr_kubernetes/cni/binding/base.py | 54 +- kuryr_kubernetes/cni/binding/bridge.py | 38 +- kuryr_kubernetes/cni/binding/nested.py | 51 +- kuryr_kubernetes/cni/daemon/__init__.py | 0 kuryr_kubernetes/cni/daemon/service.py | 305 ++++++++ kuryr_kubernetes/cni/handlers.py | 9 + kuryr_kubernetes/cni/main.py | 44 +- kuryr_kubernetes/cni/utils.py | 47 ++ kuryr_kubernetes/config.py | 76 +- kuryr_kubernetes/constants.py | 10 + kuryr_kubernetes/controller/drivers/base.py | 46 ++ .../controller/drivers/default_subnet.py | 20 +- .../controller/drivers/lb_public_ip.py | 115 +++ kuryr_kubernetes/controller/drivers/lbaasv2.py | 17 + .../controller/drivers/nested_vlan_vif.py | 18 +- kuryr_kubernetes/controller/drivers/neutron_vif.py | 26 +- kuryr_kubernetes/controller/drivers/public_ip.py | 145 ++++ kuryr_kubernetes/controller/drivers/vif_pool.py | 410 ++++++++--- kuryr_kubernetes/controller/handlers/lbaas.py | 120 +++- kuryr_kubernetes/controller/managers/__init__.py | 0 kuryr_kubernetes/controller/managers/pool.py | 256 +++++++ kuryr_kubernetes/k8s_client.py | 46 +- kuryr_kubernetes/objects/lbaas.py | 17 + kuryr_kubernetes/opts.py | 7 + .../unit/controller/drivers/test_lb_public_ip.py | 323 +++++++++ .../controller/drivers/test_nested_vlan_vif.py | 13 +- .../unit/controller/drivers/test_neutron_vif.py | 54 +- .../unit/controller/drivers/test_public_ip.py | 191 +++++ kuryr_kubernetes/utils.py | 19 + playbooks/kuryr-kubernetes-install-base/post.yaml | 15 + playbooks/kuryr-kubernetes-install-base/run.yaml | 56 ++ playbooks/tempest-kuryr-kubernetes-base/post.yaml | 80 +++ playbooks/tempest-kuryr-kubernetes-base/run.yaml | 136 ++++ .../tempest-kuryr-kubernetes-multinode/post.yaml | 80 +++ .../tempest-kuryr-kubernetes-multinode/run.yaml | 99 +++ .../notes/oslo-caching-b11881cfb9dc306c.yaml | 22 + .../notes/started-using-reno-90dbe9da108ec5c4.yaml | 2 + releasenotes/source/README.rst | 10 + releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 163 +++++ releasenotes/source/index.rst | 11 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 18 +- setup.cfg | 4 + test-requirements.txt | 8 +- tools/build_cni_daemonset_image | 28 + tools/generate_k8s_resource_definitions.sh | 106 +++ tools/tox_install.sh | 43 -- tox.ini | 5 +- 126 files changed, 8522 insertions(+), 841 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7c3425b..a5fd650 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,0 +5,2 @@ +cotyledon>=1.3.0 # Apache-2.0 +Flask>=0.10,!=0.11,<1.0 # BSD @@ -9,6 +11,7 @@ eventlet!=0.18.3,!=0.20.1,<0.21.0,>=0.18.2 # MIT -oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0 -oslo.log>=3.22.0 # Apache-2.0 -oslo.reports>=0.6.0 # Apache-2.0 -oslo.serialization!=2.19.1,>=1.10.0 # Apache-2.0 -oslo.service>=1.10.0 # Apache-2.0 -oslo.utils>=3.20.0 # Apache-2.0 +oslo.cache>=1.26.0 # Apache-2.0 +oslo.config>=4.6.0 # Apache-2.0 +oslo.log>=3.30.0 # Apache-2.0 +oslo.reports>=1.18.0 # Apache-2.0 +oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 +oslo.service>=1.24.0 # Apache-2.0 +oslo.utils>=3.28.0 # Apache-2.0 @@ -16 +19,2 @@ os-vif>=1.7.0 # Apache-2.0 -pyroute2>=0.4.17 # Apache-2.0 (+ dual licensed GPL2) +pyroute2>=0.4.21 # Apache-2.0 (+ dual licensed GPL2) +retrying>=1.2.3,!=1.3.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index b58ef95..c7464ab 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ docutils>=0.11 # OSI-Approved Open Source, Public Domain -mock>=2.0 # BSD +mock>=2.0.0 # BSD @@ -13,2 +13,2 @@ sphinx>=1.6.2 # BSD -os-testr>=0.8.0 # Apache-2.0 -openstackdocstheme>=1.11.0 # Apache-2.0 +os-testr>=1.0.0 # Apache-2.0 +openstackdocstheme>=1.17.0 # Apache-2.0 @@ -19 +19 @@ testtools>=1.4.0 # MIT -reno!=2.3.1,>=1.8.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0

1 0

[oslo] oslo.policy 1.33.0 (queens)
by no-reply＠openstack.org 02 Jan '18

02 Jan '18

We are pumped to announce the release of: oslo.policy 1.33.0: Oslo Policy library This release is part of the queens release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.policy Download the package from: https://pypi.python.org/pypi/oslo.policy Please report issues through launchpad: https://bugs.launchpad.net/oslo.policy For more details, please see below. 1.33.0 ^^^^^^ New Features * A new configuration option has been added to the "[oslo_policy]" group called "enforce_scope". When set to "True", oslo.policy will raise an "InvalidScope" exception if the context passed into the enforce method doesn't match the policy's "scope_types". If "False", a warning will be logged for operators. Note that operators should only enable this option once they've audited their users to ensure system users have roles on the system. This could potentially prevent some users from being able to make system-level API calls. This will also give other services the flexibility to fix long- standing RBAC issues in OpenStack once they start introducing "scope_types" for policies used in their service. Changes in oslo.policy 1.32.2..1.33.0 ------------------------------------- 8835af6 Add a release note for enforce_scope 5dc2ab7 Add configuration option for enforcing scope Diffstat (except docs and test files) ------------------------------------- oslo_policy/opts.py | 10 ++++++++++ oslo_policy/policy.py | 10 ++-------- .../notes/enforce_scope_types-1e92f6a34e4173ef.yaml | 13 +++++++++++++ 4 files changed, 26 insertions(+), 9 deletions(-)

1 0