December 2018 - Release-announce - lists.openstack.org

ironic 11.1.1 (rocky)
by no-reply＠openstack.org 21 Dec '18

21 Dec '18

We are satisfied to announce the release of: ironic 11.1.1: OpenStack Bare Metal Provisioning This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 11.1.1 ^^^^^^ New Features ************ * Setting these configuration options to 0 will disable the periodic tasks: * [conductor]sync_power_state_interval: sync power states for the nodes * [conductor]check_provision_state_interval: * check deployments and time out if the deployment takes too long * check the status of cleaning a node and time out if it takes too long * check the status of inspecting a node and time out if it takes too long * check for and handle nodes that are taken over by new conductors (if an old conductor disappeared) * [conductor]send_sensor_data_interval: send sensor data to ceilometer * [conductor]sync_local_state_interval: refresh a conductor's copy of the consistent hash ring. If any mappings have changed, determines which, if any, nodes need to be "taken over". The ensuing actions could include preparing a PXE environment, updating the DHCP server, and so on. * [oneview]periodic_check_interval: * check for nodes taken over by OneView users * check for nodes freed by OneView users Known Issues ************ * Building RAID1 is known to not work with Dell BOSS cards using **python-dracclient** 1.4.0 or earlier. Upgrade to **python- dracclient** 1.5.0 to use this feature. Upgrade Notes ************* * The "hash_ring_reset_interval" configuration option was changed from 180 to 15 seconds. Previously, this option was essentially ignored on the API side, becase the hash ring was reset on each API access. The lower value minimizes the probability of a request routed to a wrong conductor when the ring needs rebalancing. * If you are doing a minor version upgrade, please re-run the "ironic- dbsync online_data_migrations" command to properly update the versions of the Objects in the database. Otherwise, the next major upgrade may fail. Critical Issues *************** * The "ironic-dbsync online_data_migrations" command was not updating the objects to their latest versions, which could prevent upgrades from working (i.e. when running the next release's "ironic- dbsync upgrade"). Objects are updated to their latest versions now when running that command. See story 2004174 (https://storyboard.openstack.org/#!/story/2004174) for more information. Bug Fixes ********* * Fixes an issue with a baremetal node that times out during cleaning. The ironic-conductor was attempting to change the node's provision state to 'clean failed' twice, resulting in the node's "last_error" being set incorrectly. This no longer happens. For more information, see story 2004299 (https://storyboard.openstack.org/#!/story/2004299) * Fixes an issue where setting these configuration options to 0 caused a ValueError exception to be raised. You can now set them to 0 to disable the associated periodic tasks. (For more information, see story 2002059 (https://storyboard.openstack.org/#!/story/2002059).) * [conductor]sync_power_state_interval: sync power states for the nodes * [conductor]check_provision_state_interval: * check deployments and time out if the deployment takes too long * check the status of cleaning a node and time out if it takes too long * check the status of inspecting a node and time out if it takes too long * check for and handle nodes that are taken over by new conductors (if an old conductor disappeared) * [conductor]send_sensor_data_interval: send sensor data to ceilometer * [conductor]sync_local_state_interval: refresh a conductor's copy of the consistent hash ring. If any mappings have changed, determines which, if any, nodes need to be "taken over". The ensuing actions could include preparing a PXE environment, updating the DHCP server, and so on. * [oneview]periodic_check_interval: * check for nodes taken over by OneView users * check for nodes freed by OneView users * Fixes an issue where Neutron ports would be left with a baremetal MAC address associated after an instance is deleted from a baremetal host. This caused problems with MAC address conflicts in follow up deployments to the same baremetal host. bug 2004428 (https://storyboard.openstack.org/#!/story/2004428) * Fixes an issue where a flat Neutron port would be left with a host ID associated with it after an instance is deleted from a baremetal host. This caused problems with reusing the same port for a new instance as it is already bound to the old instance. * Fixes a bug where the number of CPU sockets was being returned by the "idrac" hardware type during introspection, instead of the number of virtual CPUs. See bug 2004155 (https://storyboard.openstack.org/#!/story/2004155) for details. * Fixes a race condition in the hash ring implementation that could cause an internal server error on any request. See story 2003966 (https://storyboard.openstack.org/#!/story/2003966) for details. * Properly reports an error when the image cache and the image HTTP or TFTP location are on different file system, causing hard link to fail. * Fixes an issue where iSCSI based deployments fail if the "cpu_arch" property is not specified on a node. * Fixes "redfish" hardware type to reuse HTTP session tokens when talking to BMC using session authentication. Prior to this fix "redfish" hardware type never tried to reuse session token given out by BMC during previous connection what may sometimes lead to session pool exhaustion with some BMC implementations. * Fixes an issue wherein provisioning fails if ironic node is configured with "ramdisk" deploy interface. See bug 2003532 (https://storyboard.openstack.org/#!/story/2003532) for more details. * The IPMI hardware type unconditionally instructed the BMC to not automatically clear boot flag valid bit if Chassis Control command not received within 60-second timeout (countdown restarts when a Chassis Control command is received). Some BMCs do not support setting this; if sent it causes the boot to be aborted instead. For IPMI hardware type a new driver option "node['driver_info']['ipmi_disable_boot_timeout']" can be specified. It is "True" by default; set it to "False" to bypass sending this command. See story 2004266 (https://storyboard.openstack.org/#!/story/2004266) for additional information. Changes in ironic 11.1.0..11.1.1 -------------------------------- f55ae7e [Stable Only] rename ipmi_disable_timeout to ipmi_disable_boot_timeout ff62296 Cap the maximum microversion for stable/rocky bf05501 Avoid cpu_arch None values in iscsi deployments 357375f Ensure we unbind flat network ports and clear BM mac addresses 1980d32 Add ipmi_disable_timeout to avoid problematic IPMI command 6550d48 Don't fail when node is in CLEANFAIL state d156ad3 Increase RAM for the ironic node in UEFI job 6ff4419 Improve logs when hard linking images fails 2fbe323 Reuse Redfish sessions b389cb4 Fix CPU count returned by introspection in Ironic iDRAC driver 47fc51d Migration step to update objects to latest version 4763762 Fixes a race condition in the hash ring code 931e97b Disable periodic tasks if interval set to 0 021e631 Add admin documentation for rescue mode in iLO driver 4167083 Add admin documentation for rescue interface 9b0d5fe Remove wrong install-guide-jobs in zuul setup f1e7f95 Add a more detailed release note for Dell BOSS RAID1 fix 65ab326 Fix provisioning failure with `ramdisk` deploy interface 377a4ab import zuul job settings from project-config 068e23e Update UPPER_CONSTRAINTS_FILE for stable/rocky a0686d5 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../source/samples/driver-property-response.json | 1 + devstack/lib/ironic | 2 +- ironic/cmd/dbsync.py | 5 + ironic/common/hash_ring.py | 34 +++++- ironic/common/neutron.py | 35 ++++++- ironic/conductor/manager.py | 34 ++++-- ironic/conductor/rpcapi.py | 13 ++- ironic/conductor/utils.py | 8 +- ironic/conf/conductor.py | 10 +- ironic/conf/default.py | 6 +- ironic/conf/drac.py | 1 + ironic/db/api.py | 15 +++ ironic/db/sqlalchemy/api.py | 80 ++++++++++++++ ironic/drivers/modules/drac/inspect.py | 15 ++- ironic/drivers/modules/image_cache.py | 11 ++ ironic/drivers/modules/ipmitool.py | 35 +++++-- ironic/drivers/modules/iscsi_deploy.py | 7 +- ironic/drivers/modules/network/common.py | 1 + ironic/drivers/modules/network/flat.py | 67 ++++++++++-- ironic/drivers/modules/oneview/deploy.py | 6 +- ironic/drivers/modules/pxe.py | 69 ++++++------ ironic/drivers/modules/redfish/utils.py | 57 ++++++++-- .../unit/drivers/modules/drac/test_inspect.py | 24 ++++- .../unit/drivers/modules/network/test_flat.py | 81 +++++++++++--- .../unit/drivers/modules/network/test_neutron.py | 10 +- .../unit/drivers/modules/redfish/test_utils.py | 64 +++++++++++- .../unit/drivers/modules/test_agent_base_vendor.py | 17 +-- .../unit/drivers/modules/test_iscsi_deploy.py | 9 ++ .../cleanwait_timeout_fail-4323ba7d4d4da3e6.yaml | 8 ++ .../notes/dell-boss-raid1-ec33e5b9c59d4021.yaml | 6 ++ .../disable_periodic_tasks-0ea39fa7a8a108c6.yaml | 49 +++++++++ ...-flat-vifs-and-clear-macs-34eec149618e5964.yaml | 13 +++ .../notes/fix-cpu-count-8904a4e1a24456f4.yaml | 7 ++ .../notes/hash-ring-race-da0d584de1f46788.yaml | 13 +++ ...invalid_cross_device_link-7ecf3543a8ada09f.yaml | 5 + .../iscsi-optional-cpu-arch-ebf6a90dde34172c.yaml | 6 ++ ...migration_update_versions-ea03aff12d9c036f.yaml | 13 +++ .../persist-redfish-sessions-d521a0846fa45c40.yaml | 8 ++ .../notes/ramdisk-boot-fails-4e8286e6a4e0dfb6.yaml | 7 ++ .../notes/story-2004266-4725d327900850bf.yaml | 13 +++ tox.ini | 10 +- zuul.d/ironic-jobs.yaml | 1 + zuul.d/project.yaml | 12 +++ 57 files changed, 1217 insertions(+), 167 deletions(-)

1 0

ironic 9.1.6 (pike)
by no-reply＠openstack.org 20 Dec '18

20 Dec '18

We are ecstatic to announce the release of: ironic 9.1.6: OpenStack Bare Metal Provisioning This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: https://bugs.launchpad.net/ironic For more details, please see below. 9.1.6 ^^^^^ Bug Fixes * Fixes an issue that caused the integrated Dell Remote Access Controller (iDRAC) "management" hardware interface implementation, "idrac", to fail to boot nodes in Unified Extensible Firmware Interface (UEFI) boot mode. That interface is supported by the "idrac" hardware type. The issue is resolved for Dell EMC PowerEdge 13th and 14th generation servers. It is not resolved for PowerEdge 12th generation and earlier servers. For more information, see story 1656841 (https://storyboard.openstack.org/#!/story/1656841) * Fixes an issue seen during node tear down where a port being deleted by the Bare Metal service could be deleted by the Compute service, leading to an unhandled error from the Networking service. See story 2002637 for further details. Changes in ironic 9.1.5..9.1.6 ------------------------------ f261743 Remove wrong install-guide-jobs in zuul setup a58d295 import zuul job settings from project-config 6222091 Fix iDRAC hardware type does not work with UEFI 909cdce Fix error when deleting a non-existent port Diffstat (except docs and test files) ------------------------------------- ironic/common/neutron.py | 3 + ironic/drivers/modules/drac/management.py | 172 ++++++++++-- .../unit/drivers/modules/drac/test_management.py | 304 +++++++++++++++++++-- .../idrac-uefi-boot-mode-86f4694b4247a1ca.yaml | 11 + .../notes/story-2002637-4825d60b096e475b.yaml | 7 + zuul.d/project.yaml | 12 + 7 files changed, 486 insertions(+), 35 deletions(-)

1 0

ironic 10.1.7 (queens)
by no-reply＠openstack.org 20 Dec '18

20 Dec '18

We are delighted to announce the release of: ironic 10.1.7: OpenStack Bare Metal Provisioning This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: https://bugs.launchpad.net/ironic For more details, please see below. 10.1.7 ^^^^^^ Upgrade Notes ************* * The "hash_ring_reset_interval" configuration option was changed from 180 to 15 seconds. Previously, this option was essentially ignored on the API side, becase the hash ring was reset on each API access. The lower value minimizes the probability of a request routed to a wrong conductor when the ring needs rebalancing. * If you are doing a minor version upgrade, please re-run the "ironic- dbsync online_data_migrations" command to properly update the versions of the Objects in the database. Otherwise, the next major upgrade may fail. Critical Issues *************** * The "ironic-dbsync online_data_migrations" command was not updating the objects to their latest versions, which could prevent upgrades from working (i.e. when running the next release's "ironic- dbsync upgrade"). Objects are updated to their latest versions now when running that command. See story 2004174 (https://storyboard.openstack.org/#!/story/2004174) for more information. Bug Fixes ********* * Fixes an issue with a baremetal node that times out during cleaning. The ironic-conductor was attempting to change the node's provision state to 'clean failed' twice, resulting in the node's "last_error" being set incorrectly. This no longer happens. For more information, see story 2004299 (https://storyboard.openstack.org/#!/story/2004299) * Fixes an issue where Neutron ports would be left with a baremetal MAC address associated after an instance is deleted from a baremetal host. This caused problems with MAC address conflicts in follow up deployments to the same baremetal host. bug 2004428 (https://storyboard.openstack.org/#!/story/2004428) * Fixes an issue where a flat Neutron port would be left with a host ID associated with it after an instance is deleted from a baremetal host. This caused problems with reusing the same port for a new instance as it is already bound to the old instance. * Fixes a bug where the number of CPU sockets was being returned by the "idrac" hardware type during introspection, instead of the number of virtual CPUs. See bug 2004155 (https://storyboard.openstack.org/#!/story/2004155) for details. * Fixes a race condition in the hash ring implementation that could cause an internal server error on any request. See story 2003966 (https://storyboard.openstack.org/#!/story/2003966) for details. * Properly reports an error when the image cache and the image HTTP or TFTP location are on different file system, causing hard link to fail. * Fixes "redfish" hardware type to reuse HTTP session tokens when talking to BMC using session authentication. Prior to this fix "redfish" hardware type never tried to reuse session token given out by BMC during previous connection what may sometimes lead to session pool exhaustion with some BMC implementations. Changes in ironic 10.1.6..10.1.7 -------------------------------- 7586681 Ensure we unbind flat network ports and clear BM mac addresses 162e5f3 Don't fail when node is in CLEANFAIL state 4573cfb Improve logs when hard linking images fails 50ee1a4 Reuse Redfish sessions 410f73e Fix CPU count returned by introspection in Ironic iDRAC driver a1c8f31 Migration step to update objects to latest version d8e09ae Fixes a race condition in the hash ring code cb02c676 Remove wrong install-guide-jobs in zuul setup Diffstat (except docs and test files) ------------------------------------- ironic/cmd/dbsync.py | 5 + ironic/common/hash_ring.py | 33 +++++- ironic/common/neutron.py | 35 ++++++- ironic/conductor/rpcapi.py | 14 ++- ironic/conductor/utils.py | 8 +- ironic/conf/default.py | 6 +- ironic/db/api.py | 15 +++ ironic/db/sqlalchemy/api.py | 80 ++++++++++++++ ironic/drivers/modules/drac/inspect.py | 15 ++- ironic/drivers/modules/image_cache.py | 11 ++ ironic/drivers/modules/network/common.py | 1 + ironic/drivers/modules/network/flat.py | 67 ++++++++++-- ironic/drivers/modules/redfish/utils.py | 57 ++++++++-- .../unit/drivers/modules/drac/test_inspect.py | 24 ++++- .../unit/drivers/modules/network/test_flat.py | 81 ++++++++++++--- .../unit/drivers/modules/network/test_neutron.py | 10 +- .../unit/drivers/modules/redfish/test_utils.py | 64 +++++++++++- .../unit/drivers/modules/test_agent_base_vendor.py | 17 +-- .../cleanwait_timeout_fail-4323ba7d4d4da3e6.yaml | 8 ++ ...-flat-vifs-and-clear-macs-34eec149618e5964.yaml | 13 +++ .../notes/fix-cpu-count-8904a4e1a24456f4.yaml | 7 ++ .../notes/hash-ring-race-da0d584de1f46788.yaml | 13 +++ ...invalid_cross_device_link-7ecf3543a8ada09f.yaml | 5 + ...migration_update_versions-ea03aff12d9c036f.yaml | 13 +++ .../persist-redfish-sessions-d521a0846fa45c40.yaml | 8 ++ zuul.d/project.yaml | 1 - 32 files changed, 782 insertions(+), 104 deletions(-)

1 0

openstacksdk 0.22.0 (stein)
by no-reply＠openstack.org 20 Dec '18

20 Dec '18

We are ecstatic to announce the release of: openstacksdk 0.22.0: An SDK for building applications to work with OpenStack This release is part of the stein release series. Download the package from: https://pypi.org/project/openstacksdk For more details, please see below. 0.22.0 ^^^^^^ Bug Fixes * Fixed a regression with sub-dicts of server objects were not usable with object notation. Changes in openstacksdk 0.21.0..0.22.0 -------------------------------------- 5d7e149 Properly munch for resource sub-dicts c71acc6 Turn off unneeded devstack services ca2045b Import code for building ironic-compatible configdrives dd482fe Adds kwargs support when creating a Neutron subnet 9675c1f Fix dogpile.cache 0.7.0 interaction 1bceca8 Change openstack-dev to openstack-discuss Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 ++ CONTRIBUTING.rst | 2 +- README.rst | 2 +- openstack/baremetal/configdrive.py | 116 +++++++++++++++++++++ openstack/baremetal/v1/_proxy.py | 3 +- openstack/baremetal/v1/node.py | 3 +- openstack/cloud/_normalize.py | 19 +++- openstack/cloud/_utils.py | 15 ++- openstack/cloud/openstackcloud.py | 14 ++- openstack/resource.py | 28 +++-- .../notes/munch-sub-dict-e1619c71c26879cb.yaml | 5 + 16 files changed, 341 insertions(+), 24 deletions(-)

1 0

nova 17.0.9 (queens)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are overjoyed to announce the release of: nova 17.0.9: Cloud computing fabric controller This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 17.0.9 ^^^^^^ Bug Fixes * When testing whether direct IO is possible on the backing storage for an instance, Nova now uses a block size of 4096 bytes instead of 512 bytes, avoiding issues when the underlying block device has sectors larger than 512 bytes. See bug https://launchpad.net/bugs/1801702 for details. Changes in nova 17.0.8..17.0.9 ------------------------------ 33dc9f7 Add secret=true to fixed_key configuration parameter 3dd42c2 Create BDMs/tags in cell with instance when over-quota e1f0866 Make the nova-next job voting and gating 3f37d0b Add functional regression test for bug 1806064 8bba879 compute: Ensure pre-migrating instances are destroyed during init_host d9084d0 Add regression test for bug #1764883 35923d5 Test websocketproxy with TLS in the nova-next job 1190e60 Move the nova-next job in-tree and update it 61bf7ae Default embedded instance.flavor.is_public attribute f8eb8a7 Make supports_direct_io work on 4096b sector size 346c8fe De-dupe subnet IDs when calling neutron /subnets API 62fbfdf Fix NoneType error in _notify_volume_usage_detach 4b53e4e Ensure attachment cleanup on failure in driver.pre_live_migration 6b065da Move live_migration.pre.start to the start of the method 4f3610b Fix up compute rpcapi version for pike release 3a0f26c conductor: Recreate volume attachments during a reschedule 51345d5 Add regression test for bug#1784353 6fa5aee fixtures: Track volume attachments within CinderFixtureNewAttachFlow fbf729d Add regression test for bug 1797580 53f9c8e Handle volume API failure in _post_live_migration 164b1ba Handle missing marker during online data migration 4ac57b5 Not set instance to ERROR if set_admin_password failed 0163783 Ignore VirtDriverNotReady in _sync_power_states periodic task 7c46bd3 Fix stacktraces with redis caching backend 1b2c748 Refix disk size during live migration with disk over-commit Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 14 ++ nova/compute/manager.py | 167 +++++++++++++-------- nova/compute/rpcapi.py | 8 +- nova/conductor/manager.py | 48 +++++- nova/conf/key_manager.py | 1 + nova/consoleauth/manager.py | 3 +- nova/network/neutronv2/api.py | 2 +- nova/objects/instance.py | 20 +-- nova/objects/request_spec.py | 18 ++- .../functional/compute/test_live_migration.py | 148 ++++++++++++++++++ .../functional/regressions/test_bug_1404867.py | 6 +- .../functional/regressions/test_bug_1675570.py | 6 +- .../functional/regressions/test_bug_1764883.py | 123 +++++++++++++++ .../functional/regressions/test_bug_1784353.py | 90 +++++++++++ .../functional/regressions/test_bug_1797580.py | 99 ++++++++++++ .../functional/regressions/test_bug_1806064.py | 140 +++++++++++++++++ nova/utils.py | 4 +- nova/virt/driver.py | 7 + nova/virt/libvirt/driver.py | 2 +- playbooks/legacy/nova-next/post.yaml | 15 ++ playbooks/legacy/nova-next/run.yaml | 69 +++++++++ .../notes/bug-1801702-c8203d3d55007deb.yaml | 8 + 32 files changed, 1294 insertions(+), 152 deletions(-)

1 0

ironic 12.0.0 (stein)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are glad to announce the release of: ironic 12.0.0: OpenStack Bare Metal Provisioning This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 12.0.0 ^^^^^^ Prelude ******* The OpenStack Bare Metal as a Service team announces the release of ironic version 12.0 which introduces a number of new features as part of the Stein development cycle. * Per-node automated cleaning control * Redfish out-of-band introspection * Redfish BIOS configuration management * Support for direct image downloads from the conductor host. * Support for validating the enhanced image checksums introduced in the Image service in Rocky. * Dedicated "ipxe" boot interface enabling better co-existence of different hardware types. * Configurable "disk_erasure_concurrency" to speed disk cleaning. * Configurable "protected" nodes to help prevent accidential actions upon critical nodes. And many many bug fixes, Enjoy! New Features ************ * Adds the "[redfish]auth_type" ironic configuration option for the "redfish" hardware type that is used to choose one of the following authentication methods:: "basic", "session" and "auto". The "auto" setting first tries "session" method and falls back to "basic" if session authentication is not supported by the Redfish BMC. The default is "auto". This configuration option can be overridden on a per-node basis by the "driver_info/redfish_auth_type" option. * Adds out-of-band inspection support to "redfish" hardware type'. Successful inspection populates mandatory properties: "cpus", "local_gb", "cpu_arch", "memory_mb" and creates ironic ports for inspected nodes. * Allows enabling automated cleaning per node if it is disabled globally. A new "automated_clean" field has been created on the node object, allowing to control the individual automated cleaning of nodes. When automated cleaning is disabled at global level, but enabled at node level, the automated cleaning will be performed only on those nodes. The new field is accessible starting with the API version 1.47. * Adds a new configuration option "[iscsi]conv_flags", that specifies the conversion options to pass to the "dd" utility when copying an image. For example, passing "sparse" may result in less network traffic for large whole disk images. * Adds support for booting a ramdisk using virtual media to "ilo- virtual-media" boot interface when an ironic node is configured with "ramdisk" deploy interface. * Adds the ability to provision with "direct" deploy interface and custom HTTP service running at ironic conductor node. A new configuration option "[agent]image_download_source" is introduced. When set to "swift", the "direct" deploy interface uses tempurl generated via the Object service as the source of instance image during provisioning, this is the default configuration. When set to "http", the "direct" deploy interface downloads instance image from the Image service, and caches the image in the ironic conductor node. The cached instance images are referenced by symbolic links located at subdirectory "[deploy]http_image_subdir" under path "[deploy]http_root". The custom HTTP server running at ironic conductor node is supposed to be configured properly to make IPA has unauthenticated access to image URL described above. * Setting these configuration options to 0 will disable the periodic tasks: * [conductor]sync_power_state_interval: sync power states for the nodes * [conductor]check_provision_state_interval: * check deployments and time out if the deployment takes too long * check the status of cleaning a node and time out if it takes too long * check the status of inspecting a node and time out if it takes too long * check for and handle nodes that are taken over by new conductors (if an old conductor disappeared) * [conductor]send_sensor_data_interval: send sensor data to ceilometer * [conductor]sync_local_state_interval: refresh a conductor's copy of the consistent hash ring. If any mappings have changed, determines which, if any, nodes need to be "taken over". The ensuing actions could include preparing a PXE environment, updating the DHCP server, and so on. * [oneview]periodic_check_interval: * check for nodes taken over by OneView users * check for nodes freed by OneView users * In accordance with the multihash support (https://specs.openstack.org/openstack/glance- specs/specs/rocky/approved/glance/multihash.html) provided by glance, ironic now supports using the new "os_hash_algo" and "os_hash_value" fields to computes and validates image checksum when deploying instance images by the "direct" deploy interface. * Adds support to retrieve the information of conductors known by ironic: * a new endpoint "GET /v1/conductors" for listing conductor resources. * a new endpoint "GET /v1/conductors/{hostname}" for showing a conductor resource. Adds a read-only "conductor" field to the Node, which represents the conductor currently servicing a node, and can be retrieved from following node endpoints: * "GET /v1/nodes?detail=true" or "GET /v1/nodes/detail" * "GET /v1/nodes/<node_ident>" * "POST /v1/nodes" * "PATCH /v1/nodes/<node_ident>" * Adds support for the injection of Non-Masking Interrupts (NMI) to "ilo" management interface. This is supported on HPE ProLiant Gen9 and Gen10 servers. * Adds support for "soft power off" and "soft reboot" operations to "ilo" power interface. * Adds a configuration option "[ipmi]disable_boot_timeout" which is used to set the default behavior whether ironic should send a raw IPMI command to disable timeout. This configuration option can be overidden by the per-node option "ipmi_disable_boot_timeout" in node's "driver_info" field. See story 2004266 (https://storyboard.openstack.org/#!/story/2004266) and Story 2002977 (https://storyboard.openstack.org/#!/story/2002977) for additional information. * Adds an "ipxe" boot interface which allows for instance level iPXE enablement as opposed to conductor-wide enablement of iPXE. * New framework for "ironic-status upgrade check" command is added. This framework allows adding various checks which can be run before a Ironic upgrade to ensure if the upgrade can be performed safely. * Adds a configuration option "[deploy]disk_erasure_concurrency" to define the target pool size used by Ironic Python Agent ramdisk to erase disk devices. The number of threads created by IPA to erase disk devices is the minimum value of target pool size and the number of disks to be erased. This feature can greatly reduce the operation time for baremetals with multiple disks. For the backwards compatibility, the default value is 1. * It is now possible to protect a provisioned node from being undeployed, rebuilt or deleted by setting the new "protected" field to "True". The new "protected_reason" field can be used to document the reason the node was made protected. * Adds "bios" interface to the "redfish" hardware type. * Allows streaming raw partition images to the ramdisk when using the "direct" deploy interface. Requires **ironic-python-agent** from the Stein release series. Known Issues ************ * Building RAID1 is known to not work with Dell BOSS cards using **python-dracclient** 1.4.0 or earlier. Upgrade to **python- dracclient** 1.5.0 to use this feature. * Support for IPv6 and iPXE is restricted and is unlikely to work in default scenarios and configurations without external intervention. This is due to the way DHCPv6 and dnsmasq operate. At present this issue is being tracked in story 2005402 (https://storyboard.openstack.org/#!/story/2004502) Upgrade Notes ************* * The "hash_ring_reset_interval" configuration option was changed from 180 to 15 seconds. Previously, this option was essentially ignored on the API side, becase the hash ring was reset on each API access. The lower value minimizes the probability of a request routed to a wrong conductor when the ring needs rebalancing. * Deployments utilizing iPXE should consider use of the "ipxe" boot interface as opposed to the "pxe" boot interface. iPXE functionality in the "pxe" boot interface is deprecated and will be removed during the U* development cycle. * Operator can now use new CLI tool "ironic-status upgrade check" to check if Ironic deployment can be safely upgraded from N-1 to N release. * Support for using the Image API v1 was removed. It was removed from Glance in the Rocky release. * The deprecated option "[glance]glance_api_version" was removed. Only v2 is now used. * If you are doing a minor version upgrade, please re-run the "ironic- dbsync online_data_migrations" command to properly update the versions of the Objects in the database. Otherwise, the next major upgrade may fail. * The deprecated configuration option "[conductor]inspect_timeout" was removed, please use "[conductor]inspect_wait_timeout" instead. * A future release will change the default value of "[deploy]/default_boot_mode" from "bios" to "uefi". It is recommended to set an explicit value for this option. For hardware types which don't support setting boot mode, a future release will assume boot mode is set to UEFI if no boot mode is set to node's capabilities. It is also recommended to set "boot_mode" into "properties/capabilities" of a node. Deprecation Notes ***************** * The "[ilo]/power_retry" config is deprecated and will be removed in the future release. Please use "[conductor]/soft_power_off_timeout" instead. * The "[pxe]ipxe_enabled" configuration option has been deprecated in preference for the "ipxe" boot interface. The configuration option will be removed during the U* development cycle. * Support for iPXE in the "pxe" boot interface has been deprecated, and will be removed during the U* development cycle. The "ipxe" boot interface should be used instead. * Using the "fake" management interface with the "manual-management" hardware type is deprecated, please use "noop" instead. Existing nodes will have to be updated after the upgrade. * The "xclarity" hardware type, which was previously deprecated, is no longer deprecated. Lenovo has instituted third-party CI which is a requirement for a driver to remain in-tree. Critical Issues *************** * The "ironic-dbsync online_data_migrations" command was not updating the objects to their latest versions, which could prevent upgrades from working (i.e. when running the next release's "ironic- dbsync upgrade"). Objects are updated to their latest versions now when running that command. See story 2004174 (https://storyboard.openstack.org/#!/story/2004174) for more information. Bug Fixes ********* * Fixes the bug in executing asynchronous BIOS interface clean step by honoring the state returned by the BIOS interface clean step which was ignored earlier. * Fixes a misunderstanding in how DHCPv6 booting of machines operates in that only a URL to the boot loader is expected in that case, as opposed to traditional TFTP parameters. Now a URL is sent to the client in the form of "tftp://<tftp_address>/<tftp_path>/<boot_file>". See story 1744620 (https://storyboard.openstack.org/#!/story/1744620) for more information. * Fixes a bug that a node's "console_enabled" is reset to "False" at undeploying the node, which requires an operator to set it to "True" before deploying again. By this fix, while the console is stopped at tearing down, "console_enabled" remains "True". When the node is deployed again, the console is started automatically. * Fixes an issue with a baremetal node that times out during cleaning. The ironic-conductor was attempting to change the node's provision state to 'clean failed' twice, resulting in the node's "last_error" being set incorrectly. This no longer happens. For more information, see story 2004299 (https://storyboard.openstack.org/#!/story/2004299) * Fixes an issue where setting these configuration options to 0 caused a ValueError exception to be raised. You can now set them to 0 to disable the associated periodic tasks. (For more information, see story 2002059 (https://storyboard.openstack.org/#!/story/2002059).) * [conductor]sync_power_state_interval: sync power states for the nodes * [conductor]check_provision_state_interval: * check deployments and time out if the deployment takes too long * check the status of cleaning a node and time out if it takes too long * check the status of inspecting a node and time out if it takes too long * check for and handle nodes that are taken over by new conductors (if an old conductor disappeared) * [conductor]send_sensor_data_interval: send sensor data to ceilometer * [conductor]sync_local_state_interval: refresh a conductor's copy of the consistent hash ring. If any mappings have changed, determines which, if any, nodes need to be "taken over". The ensuing actions could include preparing a PXE environment, updating the DHCP server, and so on. * [oneview]periodic_check_interval: * check for nodes taken over by OneView users * check for nodes freed by OneView users * Fixes an issue where Neutron ports would be left with a baremetal MAC address associated after an instance is deleted from a baremetal host. This caused problems with MAC address conflicts in follow up deployments to the same baremetal host. bug 2004428 (https://storyboard.openstack.org/#!/story/2004428) * Fixes an issue where a flat Neutron port would be left with a host ID associated with it after an instance is deleted from a baremetal host. This caused problems with reusing the same port for a new instance as it is already bound to the old instance. * Fixes the URL generation with TFTP URLs does not account for IPv6 addresses needing to be wrapped in '[]' in order to be parsed. * Fixes DHCP option parameter generation to correctly return the proper values for IPv6 based booting when iPXE is in use. * Fixes a bug where the number of CPU sockets was being returned by the "idrac" hardware type during introspection, instead of the number of virtual CPUs. See bug 2004155 (https://storyboard.openstack.org/#!/story/2004155) for details. * Fixes an issue where the master instance image cache could not be disabled. The configuration option "[pxe]/instance_master_path" may now be set to the empty string to disable the cache. * Fixes an issue introduced during the Stein development cycle in an attempt to fix IPv6 support where the networking service was also prepending the DHCP option indicator to the number. A fix has been been submitted to the Networking service to address this issue, and the prepending code has been removed from ironic. See story 2004501 (https://storyboard.openstack.org/#!/story/2004501) for more information. * Fixes an issue with the "irmc" hardware type failing to create a boot image via the "irmc-virtual-media" boot interface. See story 2003338 (https://storyboard.openstack.org/#!/story/2003338) for more information. * Fixes an issue where the pagination marker was not being set if "uuid" was not in the list of requested fields when executing a list query. The affected API endpoints were: port, portgroup, volume_target, volume_connector, node and chassis. See story 2003192 for more details (https://storyboard.openstack.org/#!/story/2003192) * Kill "ipmitool" process invoked by ironic to read node's power state if "ipmitool" process does not exit after configured timeout expires. It appears pretty common for "ipmitool" to run for five minutes (with current ironic defauls) once it hits a non-responsive bare metal node. This could slow down the management of other nodes due periodic tasks slots exhaustion. The new behaviour could is enabled by default, but could be disabled via the "[ipmi]kill_on_timeout" ironic configuration option. * Fixes a race condition in the hash ring implementation that could cause an internal server error on any request. See story 2003966 (https://storyboard.openstack.org/#!/story/2003966) for details. * The bare metal API no longer returns HTML as part of the "error_message" field in error responses when no "Accept" header is provided. * Properly reports an error when the image cache and the image HTTP or TFTP location are on different file system, causing hard link to fail. * Adds "command_timeout" and "max_command_attempts" configuration options to IPA, so when connection errors occur the command will be executed again. The options are located in the "[agent]" section. * The ironic-python-agent (https://git.openstack.org/cgit/openstack /ironic-python-agent) version 3.5.0 contains a fix that allows multi-device objects to be selected as a root disk. These devices MAY be created automatically in the case of some ATARAID controllers with pre-existing configuration, or via the actions of a custom hardware manager. Operators who require this functionality are encouraged to ensure that their deployment ramdisks are up to date. See story 2003445 (https://storyboard.openstack.org/#!/story/2003445) for more information. * Fixes an issue where iSCSI based deployments fail if the "cpu_arch" property is not specified on a node. * The "manual-management" hardware type now defaults to the "noop" management interface. Unlike the "fake" management interface, it does not fail on attempt to set the boot device to the local disk. * Fixes "redfish" hardware type to reuse HTTP session tokens when talking to BMC using session authentication. Prior to this fix "redfish" hardware type never tried to reuse session token given out by BMC during previous connection what may sometimes lead to session pool exhaustion with some BMC implementations. * Prevents deletion of ports for active nodes. It is still possible to delete them after putting the node in the maintenance mode. * Fixes an issue wherein provisioning fails if ironic node is configured with "ramdisk" deploy interface. See bug 2003532 (https://storyboard.openstack.org/#!/story/2003532) for more details. * Fixes a locking issue where "ipmitool-shellinabox" console interface users may encounter a situation where the bare metal node is locked until the conductor is restarted. See story 1587313 (https://storyboard.openstack.org/#!/story/1587313) for additional information. * The IPMI hardware type unconditionally instructed the BMC to not automatically clear boot flag valid bit if Chassis Control command not received within 60-second timeout (countdown restarts when a Chassis Control command is received). Some BMCs do not support setting this; if sent it causes the boot to be aborted instead. For IPMI hardware type a new driver option "node['driver_info']['ipmi_disable_boot_timeout']" can be specified. It is "True" by default; set it to "False" to bypass sending this command. See story 2004266 (https://storyboard.openstack.org/#!/story/2004266) for additional information. * Fixes a bug where ironic port is not updated in node introspection as per PXE enabled setting for "idrac" hardware type. See bug 2004340 (https://storyboard.openstack.org/#!/story/2004340) for details. * Adds the version discovery information to the versioned API endpoint ("/v1"). This allows *keystoneauth* version discovery to work on this endpoint. Other Notes *********** * The support for returning "INSPECTING" state from "InspectInterface.inspect_hardware" was removed. For asynchronous inspection, please return "INSPECTWAIT" instead of "INSPECTING", otherwise the node will be moved to "inspect failed" state. * The "oneview" hardware type and related interfaces have been removed due to a lack of maintainer and 3rd-party CI. Please see story 2001924 (https://storyboard.openstack.org/#!/story/2001924) for additional information. * Removes Vagrant files and the information in documentation since the files were too outdated. This would lead to errors if developers tried to set up an environment with Vagrant. * The "xclarity" hardware type is no longer deprecated as Lenovo has implemented third-party CI to enable testing. Changes in ironic 11.1.0..12.0.0 -------------------------------- d379357 Introduce configuration option [ipmi]ipmi_disable_timeout b686182 Enroll XClarity machines in Ironic's devstack setting 3aaead7 spelling error 987d330 api-ref: update node.resource_class description 1ba41f6 Add a note regarding IPA multidevice fix 0498e29 Allow disabling instance image cache 8f06369 Add a prelude for ironic 12.0 8370907 Set proper version numbering 2f99152 Change multinode jobs to default to local boot ce71948 Follow-up Retries and timeout for IPA command 582e119 Fix "import xxx as xxx" grammar 9efb9e3 Kill misbehaving `ipmitool` process 2b74d94 Fix OOB introspection to use pxe_enabled flag in idrac driver 59b5b66 Add configurable Redfish client authentication 7c7744d Expose conductors: api 0256e1e Fix node exclusive lock not released on console start/restart. 7870883 Fix IPv6 Option Passing 360dafe Let neutron regenerate mac on port unbind 74ea2bd Slim down grenade jobs a90bdb1 Extend job build timeout eace34a Mark several tests to not test cleaning 9880262 Add BIOS interface to Redfish hardware type 9298c2d Avoid cpu_arch None values in iscsi deployments e2a768f Expose conductors: db and rpc 2344bb5 Fix Chinese quotes eb29465 Add ipmi_disable_timeout to avoid problematic IPMI command f526c03 Correct author email address db16984 Ensure we unbind flat network ports and clear BM mac addresses a2cffd8 Retries and timeout for IPA command 68d62f2 Support for protecting nodes from undeploying and rebuilding 0909509 Add download link apache configuration with mod_wsgi b754025 spelling error 53fc7fb Add Redfish inspect interface follow up 1aecb07 Add the noop management interface to the manual-management hardware type 644f6e2 Add missing ws separator between words c67b46e Switch ironic-tempest-...-tinyipa-multinode to zuulv3 440f53f Add a non-voting bifrost job to ironic 6389ad2 Increase RAM for the ironic node in UEFI job 6350954 Reuse Redfish sessions follow up 46a5899 Improve logs when hard linking images fails 78ae60f Don't fail when node is in CLEANFAIL state f6bd23e Fix ipv6 URL formatting for pxe/iPXE dd95650 Fix redfish test_get_system_resource_not_found test e841488 Improve sushy mocks 60767ae Recommend to set boot mode explicitly 41d3356 Add Redfish inspect interface 3e1fe5f Fix CPU count returned by introspection in Ironic iDRAC driver 1f1a2c3 Add ironic-status upgrade check command framework a83f13b Passing thread pool size to IPA for parallel erasure 84b94ee Change BFV job to use ipxe interface 55ac08a [devstack] Allow setting TFTP max blocksize 8a64d03 Reuse Redfish sessions b8d0f2b Migration step to update objects to latest version 38f6fff Cleanup of remaining pxe focused is_ipxe_enabled 1a4fdc4 Remove the xclarity deprecation 7995ac8 Follow-up to fix not exist deploy image of patch 592247 c28429c Remove pywsman reference 90d58ed Fix DHCPv6 support a77abba Revert "Add openstack/placement as a required project for ironic-grenade*" d269c47 Add api-ref for conductor group 016b7dd Fix ironic developer quickstart document 93670fe Add note to pxe configuration doc 5cb45a1 Create base pxe class 9ccfc31 Wrap up PXE private method to pxe_utils move 11811f2 Enhanced checksum support f532ec4 Enable configuration of conversion flags for iscsi e411297 Document how to implement a new deploy step 7543614 Refactor API code for checking microversions 1c5f9ae Allow streaming raw partition images 7a551c4 Remove Vagrant c787f68 ipxe boot interface abb0865 Remove oneview drivers fe94fb1 Completely remove support for deprecated Glance V1 223a246 Avoid race with nova on power sync and rescue ca80af2 Doc: Adds cinder as a service requires creds 38f13b6 Fix unit test run on OS X 5471157 Fixes a race condition in the hash ring code f11c949 Add automated_clean field to the API 37c9211 Stop console at tearing down without unsetting console_enabled 869b86e Add functionality for individual cleaning on nodes e25dfdc Documentation for 'ramdisk' deploy with 'ilo-virtual-media' boot 36adaa4 Add documentation for soft power for ilo hardware type b38c46f Add documentation for 'inject nmi' for ilo hardware type a00ebf4 Remove unnecessary checks in periodic task methods e6a15bd Remove token expiration f4fc39d Adds support for soft power operations to 'ilo' power interface e1272cb Add openstack/placement as a required project for ironic-grenade* 7b02130 Remove tox checkconfig 3387c9c Add admin documentation for rescue mode in iLO driver 8f2d758 Correct headings in README.rst 8a75ebf Minor fixes for docs on changing hardware types 545b4fd Add admin documentation for rescue interface 642dedf pxe/ipxe: Move common calls out pxe.py f34799b Switch ironic-tempest-dsvm-functional-python3 to zuulv3 86e9c7e Switch ironic-tempest-dsvm-functional-python2 to zuulv3 eabc48a Switch grenade nic driver to e1000 e63360c Remove ironic experimental jobs 1ba142a Restore the nova-api redirect edd0ff7 Update docs to portgroup with creating windows images 788690d Use templates for cover and lower-constraints 816ff1d Remove wrong install-guide-jobs in zuul setup 9b9f31c Fix grenade tests 2106385 Add a more detailed release note for Dell BOSS RAID1 fix 85b0d3e Honors return value from BIOS interface cleansteps 87502af Reuse checksum calculation from oslo 9ce6e55 Adds support for 'ramdisk' deploy with 'ilo-virtual-media' boot 3907f8a Remove inspecting state support from inspect_hardware 9d0c7ce Adds support for 'Inject NMI' to 'ilo' management interface bdebd56 Docs for agent http provisioning 02a3e77 Ensure pagination marker is always set bd82ead Direct deploy serve HTTP images from conductor 17c3de3 Fix doc builds for ironic 3749cd6 Fix async keyword for Python 3.7 199e490 Add vendor step placement suggestion be09169 Prevent HTML from appearing in API error messages c823572 Replace assertRaisesRegexp with assertRaisesRegex 1f03a57 Add version discovery information to the /v1 endpoint 5ffffd2 Replace assertRaisesRegexp with assertRaisesRegex 9911293 Fix provisioning failure with `ramdisk` deploy interface 1dabeb2 Minor fixes to contributor vision 94f0ced Add automated_clean field f021922 Use HostAddressOpt for opts that accept IP and hostnames ca32dd4 Remove the duplicated word dffb38c add python 3.6 unit test job 938a197 switch documentation job to new PTI 2731d47 import zuul job settings from project-config b79eecf Prevents deletion of ports for active nodes f39aae0 Disable periodic tasks if interval set to 0 f409a86 Reformat instructions related with various OS 6c751ff Imported Translations from Zanata 951e673 Add conductor_group docs 9a01311 Switch ironic-tempest-dsvm-ironic-inspector too zuulv3 e1ab512 Switch ironic-tempest-dsvm-bfv too zuulv3 fd6406f A minor update to documentation of `ilo` hardware type 26fcaac Imported Translations from Zanata 306d966 Update reno for stable/rocky 546a115 Fix not exist deploy image within irmc-virtual-media booting 54c508a Follow-up to always link MAC address files 0d3751d A vision 3530316 Don't handle warnings as errors 4969c33 update "auth_url" in documents Diffstat (except docs and test files) ------------------------------------- README.rst | 14 +- Vagrantfile | 31 - api-ref/source/baremetal-api-v1-nodes.inc | 39 +- api-ref/source/parameters.yaml | 40 +- .../source/samples/driver-property-response.json | 1 + api-ref/source/samples/node-create-response.json | 3 + api-ref/source/samples/node-show-response.json | 3 + .../samples/node-update-driver-info-response.json | 3 + .../samples/nodes-list-details-response.json | 6 + devstack/files/apache-ironic-api-redirect.template | 5 +- devstack/lib/ironic | 66 +- .../tools/ironic/templates/tftpd-xinetd.template | 2 +- devstack/upgrade/settings | 6 +- devstack/upgrade/upgrade.sh | 9 +- .../include/configure-ironic-api-mod_wsgi.inc | 60 +- .../install/include/configure-ironic-api.inc | 11 +- .../install/include/configure-ironic-conductor.inc | 12 +- driver-requirements.txt | 7 +- ironic/api/controllers/root.py | 54 +- ironic/api/controllers/v1/__init__.py | 19 + ironic/api/controllers/v1/chassis.py | 45 +- ironic/api/controllers/v1/collection.py | 6 +- ironic/api/controllers/v1/conductor.py | 251 ++++++ ironic/api/controllers/v1/node.py | 388 ++++----- ironic/api/controllers/v1/notification_utils.py | 8 +- ironic/api/controllers/v1/port.py | 63 +- ironic/api/controllers/v1/portgroup.py | 52 +- ironic/api/controllers/v1/utils.py | 121 +-- ironic/api/controllers/v1/versions.py | 7 +- ironic/api/controllers/v1/volume_connector.py | 48 +- ironic/api/controllers/v1/volume_target.py | 46 +- ironic/api/controllers/version.py | 65 ++ ironic/api/middleware/parsable_error.py | 5 + ironic/cmd/dbsync.py | 5 + ironic/cmd/status.py | 54 ++ ironic/common/cinder.py | 63 +- ironic/common/exception.py | 14 +- ironic/common/glance_service/base_image_service.py | 15 +- ironic/common/glance_service/service.py | 45 - ironic/common/glance_service/service_utils.py | 67 +- ironic/common/glance_service/v1/__init__.py | 0 ironic/common/glance_service/v1/image_service.py | 28 - ironic/common/glance_service/v2/image_service.py | 4 +- ironic/common/hash_ring.py | 34 +- ironic/common/image_service.py | 22 +- ironic/common/images.py | 30 +- ironic/common/neutron.py | 42 +- ironic/common/policy.py | 12 +- ironic/common/pxe_utils.py | 656 +++++++++++++-- ironic/common/release_mappings.py | 4 +- ironic/common/utils.py | 26 +- ironic/conductor/manager.py | 167 +++- ironic/conductor/rpcapi.py | 32 +- ironic/conductor/utils.py | 16 +- ironic/conf/__init__.py | 2 - ironic/conf/agent.py | 21 + ironic/conf/api.py | 7 +- ironic/conf/conductor.py | 11 +- ironic/conf/console.py | 4 + ironic/conf/default.py | 6 +- ironic/conf/deploy.py | 25 +- ironic/conf/drac.py | 1 + ironic/conf/glance.py | 6 - ironic/conf/ilo.py | 4 + ironic/conf/ipmi.py | 14 + ironic/conf/iscsi.py | 5 + ironic/conf/oneview.py | 50 -- ironic/conf/opts.py | 1 - ironic/conf/pxe.py | 14 +- ironic/conf/redfish.py | 18 +- ironic/db/api.py | 36 +- .../93706939026c_add_node_protected_field.py | 33 + .../d2b036ae9378_add_automated_clean_field.py | 31 + ironic/db/sqlalchemy/api.py | 94 ++- ironic/db/sqlalchemy/models.py | 6 +- ironic/drivers/base.py | 38 +- ironic/drivers/generic.py | 6 +- ironic/drivers/modules/agent.py | 64 +- ironic/drivers/modules/agent_client.py | 10 +- ironic/drivers/modules/boot_mode_utils.py | 29 + ironic/drivers/modules/console_utils.py | 54 +- ironic/drivers/modules/deploy_utils.py | 243 +++++- ironic/drivers/modules/drac/bios.py | 57 +- ironic/drivers/modules/drac/inspect.py | 68 +- ironic/drivers/modules/fake.py | 4 + ironic/drivers/modules/ilo/boot.py | 40 +- ironic/drivers/modules/ilo/common.py | 89 +- ironic/drivers/modules/ilo/inspect.py | 30 +- ironic/drivers/modules/ilo/management.py | 26 + ironic/drivers/modules/ilo/power.py | 182 +++- ironic/drivers/modules/image_cache.py | 22 +- ironic/drivers/modules/inspect_utils.py | 51 ++ ironic/drivers/modules/ipmitool.py | 97 ++- ironic/drivers/modules/ipxe.py | 292 +++++++ ironic/drivers/modules/irmc/boot.py | 41 +- ironic/drivers/modules/iscsi_deploy.py | 157 ++-- ironic/drivers/modules/network/common.py | 11 +- ironic/drivers/modules/network/flat.py | 67 +- ironic/drivers/modules/oneview/__init__.py | 0 ironic/drivers/modules/oneview/common.py | 553 ------------ ironic/drivers/modules/oneview/deploy.py | 300 ------- ironic/drivers/modules/oneview/deploy_utils.py | 384 --------- ironic/drivers/modules/oneview/inspect.py | 100 --- ironic/drivers/modules/oneview/management.py | 325 -------- ironic/drivers/modules/oneview/power.py | 224 ----- ironic/drivers/modules/pxe.py | 544 ++---------- ironic/drivers/modules/pxe_base.py | 95 +++ ironic/drivers/modules/redfish/bios.py | 283 +++++++ ironic/drivers/modules/redfish/inspect.py | 196 +++++ ironic/drivers/modules/redfish/utils.py | 103 ++- ironic/drivers/modules/snmp.py | 2 +- ironic/drivers/modules/storage/cinder.py | 10 +- ironic/drivers/modules/storage/external.py | 6 +- ironic/drivers/modules/xclarity/management.py | 9 - ironic/drivers/modules/xclarity/power.py | 9 - ironic/drivers/oneview.py | 58 -- ironic/drivers/redfish.py | 15 + ironic/drivers/xclarity.py | 9 - ironic/objects/conductor.py | 26 +- ironic/objects/node.py | 103 +-- .../unit/api/controllers/v1/test_conductor.py | 231 ++++++ .../unit/api/controllers/v1/test_portgroup.py | 23 +- .../api/controllers/v1/test_volume_connector.py | 19 + .../unit/api/controllers/v1/test_volume_target.py | 17 + .../unit/drivers/modules/drac/test_inspect.py | 126 ++- .../unit/drivers/modules/ilo/test_management.py | 34 + .../unit/drivers/modules/network/test_flat.py | 81 +- .../unit/drivers/modules/network/test_neutron.py | 10 +- .../unit/drivers/modules/oneview/test_common.py | 406 --------- .../unit/drivers/modules/oneview/test_deploy.py | 456 ---------- .../drivers/modules/oneview/test_deploy_utils.py | 327 -------- .../unit/drivers/modules/oneview/test_inspect.py | 51 -- .../drivers/modules/oneview/test_management.py | 365 -------- .../unit/drivers/modules/oneview/test_power.py | 308 ------- .../unit/drivers/modules/redfish/test_bios.py | 226 +++++ .../unit/drivers/modules/redfish/test_inspect.py | 189 +++++ .../drivers/modules/redfish/test_management.py | 29 +- .../unit/drivers/modules/redfish/test_power.py | 20 +- .../unit/drivers/modules/redfish/test_utils.py | 171 +++- .../unit/drivers/modules/test_agent_base_vendor.py | 17 +- .../unit/drivers/modules/test_agent_client.py | 86 +- .../unit/drivers/modules/test_boot_mode_utils.py | 55 ++ .../unit/drivers/modules/test_console_utils.py | 30 +- .../unit/drivers/modules/test_deploy_utils.py | 268 +++++- .../unit/drivers/modules/test_inspect_utils.py | 65 ++ .../unit/drivers/modules/test_iscsi_deploy.py | 56 +- .../unit/drivers/third_party_driver_mock_specs.py | 46 +- lower-constraints.txt | 3 +- playbooks/ci-workarounds/etc-neutron.yaml | 9 + playbooks/ci-workarounds/set-stack-key.yaml | 13 + .../run.yaml | 6 +- playbooks/legacy/grenade-dsvm-ironic/run.yaml | 8 +- playbooks/legacy/ironic-dsvm-functional/run.yaml | 42 - playbooks/legacy/tempest-dsvm-ironic-bfv/run.yaml | 90 -- .../run.yaml | 106 --- .../run.yaml | 81 -- .../legacy/tempest-dsvm-ironic-inspector/run.yaml | 85 -- .../run.yaml | 109 --- .../legacy/tempest-dsvm-ironic-parallel/run.yaml | 34 - .../tempest-dsvm-ironic-pxe_ipa-full/run.yaml | 80 -- .../add-redfish-auth-type-5fe78071b528e53b.yaml | 10 + ...redfish-inspect-interface-1577e70167f24ae4.yaml | 7 + ...add_automated_clean_field-b3e7d56f4aeaf512.yaml | 10 + ...dd_conversion_flags_iscsi-d7f846803a647573.yaml | 7 + ...ace-support-to-ilo-vmedia-1a7228a834465633.yaml | 6 + .../agent-http-provisioning-d116b3ff36669d16.yaml | 15 + .../async_bios_clean_step-7348efff3f6d02c1.yaml | 6 + .../notes/boot-from-url-98d21670e726c518.yaml | 9 + .../notes/bug-2003972-dae9b7d0f6180339.yaml | 8 + .../cleanwait_timeout_fail-4323ba7d4d4da3e6.yaml | 8 + .../notes/dell-boss-raid1-ec33e5b9c59d4021.yaml | 6 + .../disable_periodic_tasks-0ea39fa7a8a108c6.yaml | 49 ++ .../notes/enhanced-checksum-f5a2b7aa8632b88f.yaml | 7 + ...-flat-vifs-and-clear-macs-34eec149618e5964.yaml | 13 + .../notes/expose-conductor-d13c9c4ef9d9de86.yaml | 18 + .../fix-boot-url-for-v6-802abde9de8ba455.yaml | 8 + .../notes/fix-cpu-count-8904a4e1a24456f4.yaml | 7 + ...stance-master-path-config-fa524c907a7888e5.yaml | 6 + .../fix-ipv6-option6-tag-549093681dcf940c.yaml | 16 + ...ist-deploy-image-for-irmc-cb82c6e0b52b8a9a.yaml | 7 + ...r-with-custom-field-query-65ca29001a03e036.yaml | 8 + ...out-hung-ipmitool-process-519c7567bcbaa882.yaml | 11 + .../notes/hash-ring-race-da0d584de1f46788.yaml | 13 + .../notes/html-errors-27579342e7e8183b.yaml | 5 + .../notes/ilo-inject-nmi-f487db8c3bfd08ea.yaml | 6 + ...ilo-soft-power-operations-eaef33a3ff56b047.yaml | 10 + ...invalid_cross_device_link-7ecf3543a8ada09f.yaml | 5 + ...mmand-retries-and-timeout-29b0be3f2c21328c.yaml | 6 + ...mi-disable-timeout-option-e730362007f9bedd.yaml | 11 + ...e-boot-interface-addition-faacb344a72389f2.yaml | 20 + .../notes/ironic-11-prelude-6dae469633823f8d.yaml | 2 +- .../ironic-12.0-prelude-9dd8e80a1a3e8f60.yaml | 19 + ...hon-agent-multidevice-fix-3daa0760696b46b7.yaml | 12 + ...s-upgrade-check-framework-9cd216ddf3afb271.yaml | 11 + .../iscsi-optional-cpu-arch-ebf6a90dde34172c.yaml | 6 + .../notes/no-glance-v1-d249e8079f46f40c.yaml | 8 + releasenotes/notes/noop-mgmt-a4b1a248492c7638.yaml | 11 + ...migration_update_versions-ea03aff12d9c036f.yaml | 13 + .../notes/parallel-erasure-1943da9b53a2095d.yaml | 9 + .../persist-redfish-sessions-d521a0846fa45c40.yaml | 8 + .../notes/port_delete-6628b736a1b556f6.yaml | 5 + releasenotes/notes/protected-650acb2c8a387e17.yaml | 7 + .../notes/ramdisk-boot-fails-4e8286e6a4e0dfb6.yaml | 7 + .../redfish-bios-interface-a1acd8122c896a38.yaml | 3 + ...-inspecting-state-support-10325bdcdd182079.yaml | 9 + .../notes/remove-oneview-9315c7b926fd4aa2.yaml | 7 + .../notes/remove_vagrant-4472cedd0284557c.yaml | 6 + .../shellinabox-locking-fix-2fae2a451a8a489a.yaml | 8 + .../notes/story-2004266-4725d327900850bf.yaml | 13 + ...treaming-partition-images-d58fe619658b066e.yaml | 6 + .../notes/uefi-first-prepare-e7fa1e2a78b4af99.yaml | 10 + .../undeprecate-xclarity-4f4752017e8310e7.yaml | 10 + .../update-port-pxe-enabled-f954f934209cbf5b.yaml | 7 + .../notes/v1-discovery-4311398040581fe8.yaml | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 218 ++++- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 126 ++- releasenotes/source/rocky.rst | 6 + requirements.txt | 3 +- setup.cfg | 12 +- tools/config/check_uptodate.sh | 28 - tools/link_aggregation_on_windows.ps1 | 40 + tox.ini | 9 +- vagrant.yaml | 159 ---- zuul.d/ironic-jobs.yaml | 265 +++++- zuul.d/legacy-ironic-jobs.yaml | 71 -- zuul.d/project.yaml | 31 +- 299 files changed, 11741 insertions(+), 8720 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index e8cb3f3..5ee2943 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -10,4 +10 @@ python-ironic-inspector-client>=1.5.0 -python-oneviewclient<3.0.0,>=2.5.2 -python-scciclient>=0.7.2 -python-ilorest-library>=2.1.0 -hpOneView>=4.4.0 +python-scciclient>=0.8.0 @@ -22 +19 @@ ImcSdk>=0.7.2 -sushy +sushy>=1.6.0 diff --git a/requirements.txt b/requirements.txt index a566689..0bcdf48 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ keystoneauth1>=3.4.0 # Apache-2.0 -ironic-lib>=2.14.0 # Apache-2.0 +ironic-lib>=2.15.0 # Apache-2.0 @@ -30,0 +31 @@ oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 +oslo.upgradecheck>=0.1.0 # Apache-2.0

1 0

nova 16.1.7 (pike)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We eagerly announce the release of: nova 16.1.7: Cloud computing fabric controller This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 16.1.7 ^^^^^^ Bug Fixes * When testing whether direct IO is possible on the backing storage for an instance, Nova now uses a block size of 4096 bytes instead of 512 bytes, avoiding issues when the underlying block device has sectors larger than 512 bytes. See bug https://launchpad.net/bugs/1801702 for details. Changes in nova 16.1.6..16.1.7 ------------------------------ 44e2ecd Add secret=true to fixed_key configuration parameter 1abdb4c compute: Ensure pre-migrating instances are destroyed during init_host 6380226 Add regression test for bug #1764883 c5cd6c8 Update docs for _destroy_evacuated_instances ba844f2 Make supports_direct_io work on 4096b sector size d004b0e Fix NoneType error in _notify_volume_usage_detach 28bc3c8 Handle volume API failure in _post_live_migration 0bd38db Enforce case-sensitive hostnames in aggregate host add c5cae2f Revert "Make host_aggregate_map dictionary case-insensitive" 1a26663 Make scheduler.utils.setup_instance_group query all cells aa1966a Add functional test for affinity with multiple cells 3bae260 Fix the request context in ServiceFixture 5ddcda0 Consider hostdev devices when building metadata 2460d0e Refactor _build_device_metadata 0b45fcd Handle HostMappingNotFound when deleting a compute service Diffstat (except docs and test files) ------------------------------------- nova/api/openstack/compute/services.py | 10 +- nova/compute/api.py | 13 ++- nova/compute/manager.py | 51 +++++++-- nova/conf/key_manager.py | 1 + nova/objects/instance_group.py | 8 ++ nova/scheduler/host_manager.py | 6 +- nova/scheduler/utils.py | 54 ++++++++- nova/test.py | 3 +- .../functional/compute/test_live_migration.py | 98 ++++++++++++++++ .../functional/regressions/test_bug_1764883.py | 123 ++++++++++++++++++++ .../unit/api/openstack/compute/test_services.py | 33 ++++++ nova/virt/driver.py | 7 ++ nova/virt/libvirt/driver.py | 124 ++++++++++++++++----- .../notes/bug-1801702-c8203d3d55007deb.yaml | 8 ++ 24 files changed, 691 insertions(+), 74 deletions(-)

1 0

nova 17.0.8 (queens)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are psyched to announce the release of: nova 17.0.8: Cloud computing fabric controller This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 17.0.8 ^^^^^^ Bug Fixes * A change has been introduced in the libvirt driver to correctly handle IPv6 addresses for live migration. Changes in nova 17.0.6..17.0.8 ------------------------------ 0c9bd9c stable-only: fix typo in IVS related privsep method d8b99f0 nova-manage - fix online_data_migrations counts 2e3912b Skip more rebuild tests for cells v1 job 7bd6220 Skip ServerShowV247Test.test_update_rebuild_list_server in nova-cells-v1 job 9a72b72 Skip ServerShowV254Test.test_rebuild_server in cells v1 job 22197f3 Enforce case-sensitive hostnames in aggregate host add 329780e Revert "Make host_aggregate_map dictionary case-insensitive" c223869 Skip ServerActionsTestJSON.test_rebuild_server for cells v1 job 72d2e82 nova-status - don't count deleted compute_nodes d01336a Filter deleted computes from get_all_by_uuids() b588057 libvirt: Use os.stat and os.path.getsize for RAW disk inspection 105dbbc Add tempest-slow job to run the tempest slow tests 551a7a4 libvirt: Always escape IPv6 addresses when used in migration URI d085c8f libvirt: Reduce calls to qemu-img during update_available_resource 3b17251 Fix service list for disabled compute using MC driver f2d2a9a Update RequestSpec.flavor on resize_revert 5a960e0 cover migration cases with functional tests 4472c11 Follow devstack-plugin-ceph job rename 6a806de Fix nova-status "_check_resource_providers" check Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 36 +++- devstack/tempest-dsvm-cells-rc | 10 + nova/cmd/manage.py | 14 +- nova/cmd/status.py | 10 +- nova/compute/api.py | 28 ++- nova/objects/compute_node.py | 3 +- nova/privsep/libvirt.py | 5 +- nova/scheduler/host_manager.py | 6 +- nova/servicegroup/drivers/mc.py | 6 +- .../unit/servicegroup/test_mc_servicegroup.py | 10 + nova/virt/disk/api.py | 9 + nova/virt/libvirt/driver.py | 54 +++--- ...t_fix_ipv6_live_migration-bbcde8f3b7d17921.yaml | 4 + 21 files changed, 512 insertions(+), 193 deletions(-)

1 0

octavia 3.0.2 (rocky)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We contentedly announce the release of: octavia 3.0.2: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the rocky stable release series. Download the package from: https://pypi.org/project/octavia For more details, please see below. 3.0.2 ^^^^^ Upgrade Notes ************* * To resolve the IPv6 VIP issues on active/standby load balancers you need to build a new amphora image. Security Issues *************** * Fixed a debug level logging of Amphora certificates for flows such as 'octavia-create-amp-for-lb-subflow-octavia-generate-serverpem' (triggered with loadbalancer failover) and 'octavia-create-amp-for- lb-subflow-octavia-update-cert-expiration'. Bug Fixes ********* * Fixes issues using IPv6 VIP addresses with load balancers configured for active/standby topology. This fix requires a new amphora image to be built. * Add new parameters to specify the number of threads for updating amphora health and stats. * This will automatically nova delete zombie amphora when they are detected by Octavia. Zombie amphorae are amphorae which report health messages but appear DELETED in Octavia's database. Other Notes *********** * Processing zombie amphora is already expensive and this adds another step which could increase the load on Octavia Health Manager, especially during Nova API slowness. Changes in octavia 3.0.1..3.0.2 ------------------------------- ec4c88e Stop Logging Amphora Cert d560ef4 Bring up secondary IPs on member networks e2b7f01 Fix IPv6 in Active/Standby topology ddb948a Separate the thread pool for health and stats update a38bc49 Fix VIP plug failure if netns directory exists 256a1c1 Log the compute ID when nova fails bcad29b Ensure pool object contains the listener_id if passed 94533e5 Delete zombie amphorae when detected Diffstat (except docs and test files) ------------------------------------- .../post-install.d/20-haproxy-tune-kernel | 1 + .../post-install.d/11-ip6-tables | 11 +++ etc/octavia.conf | 8 +- octavia/amphorae/backends/agent/agent_jinja_cfg.py | 3 +- .../backends/agent/api_server/keepalived.py | 8 +- .../amphorae/backends/agent/api_server/listener.py | 1 - .../amphorae/backends/agent/api_server/osutils.py | 46 ++++++---- octavia/amphorae/backends/agent/api_server/plug.py | 10 +-- .../api_server/templates/plug_vip_ethX.conf.j2 | 25 +++++- .../api_server/templates/rh_route_ethX.conf.j2 | 2 + .../agent/templates/amphora_agent_conf.template | 3 + octavia/amphorae/drivers/health/heartbeat_udp.py | 10 ++- .../amphorae/drivers/keepalived/jinja/jinja_cfg.py | 26 +++++- .../jinja/templates/keepalived_base.template | 11 ++- .../drivers/keepalived/vrrp_rest_driver.py | 10 ++- octavia/cmd/health_manager.py | 3 +- octavia/common/config.py | 13 +++ octavia/common/exceptions.py | 2 +- .../healthmanager/health_drivers/update_db.py | 26 +++++- octavia/controller/worker/controller_worker.py | 7 +- octavia/controller/worker/flows/amphora_flows.py | 3 +- .../worker/tasks/amphora_driver_tasks.py | 5 +- octavia/controller/worker/tasks/compute_tasks.py | 2 +- octavia/db/repositories.py | 7 ++ .../backend/agent/api_server/test_server.py | 81 +++++++++-------- .../backends/agent/api_server/test_plug.py | 100 ++++++++++++++++++++- .../backends/agent/test_agent_jinja_cfg.py | 12 ++- .../amphorae/drivers/health/test_heartbeat_udp.py | 16 ++-- .../drivers/keepalived/jinja/test_jinja_cfg.py | 73 ++++++++++++++- .../drivers/keepalived/test_vrrp_rest_driver.py | 10 ++- .../healthmanager/health_drivers/test_update_db.py | 11 +++ .../controller/worker/flows/test_amphora_flows.py | 2 +- .../worker/tasks/test_amphora_driver_tasks.py | 6 +- .../fix_active_standby_ipv6-0317d5cd9e5d50e5.yaml | 10 +++ ...l-for-health-stats-update-c263c844075a7721.yaml | 5 ++ ...stop-logging-amphora-cert-2e188675699d60d5.yaml | 7 ++ .../notes/zombie_amp-1b435eb66643dab8.yaml | 12 +++ 37 files changed, 477 insertions(+), 111 deletions(-)

1 0

octavia 2.0.3 (queens)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are chuffed to announce the release of: octavia 2.0.3: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the queens stable release series. Download the package from: https://pypi.org/project/octavia For more details, please see below. 2.0.3 ^^^^^ Known Issues ************ * Octavia Queens release was released with insufficient lower constraints for Jinja2 and pyOpenSSL requirements. Please make sure your environment can install Jinja2>=2.10 and pyOpenSSL>=17.1.0. Security Issues *************** * Fixed a debug level logging of Amphora certificates for flows such as 'octavia-create-amp-for-lb-subflow-octavia-generate-serverpem' (triggered with loadbalancer failover) and 'octavia-create-amp-for- lb-subflow-octavia-update-cert-expiration'. Bug Fixes ********* * Fixed an issue when Octavia cannot reach the database (all database instances are down) bringing down all running loadbalancers. The Health Manager is more resilient to DB outages now. * Add new parameters to specify the number of threads for updating amphora health and stats. * This will automatically nova delete zombie amphora when they are detected by Octavia. Zombie amphorae are amphorae which report health messages but appear DELETED in Octavia's database. Other Notes *********** * Processing zombie amphora is already expensive and this adds another step which could increase the load on Octavia Health Manager, especially during Nova API slowness. Changes in octavia 2.0.2..2.0.3 ------------------------------- 2bd9b68 Stop Logging Amphora Cert 8149aca Bring up secondary IPs on member networks a33e2e0 Separate the thread pool for health and stats update aa4f3ab Fix the version discovery document 9d5f833 Fix VIP plug failure if netns directory exists 50d0135 Log the compute ID when nova fails 344a995 Delete zombie amphorae when detected e04ddb3 Add note to lower constraints for Jinja and pyOpenSSL 2f3bb0b Validate member address for batch update members 37c86aa Make health checks resilient to DB outages cee582e Add octavia-tempest-plugin jobs to stable/queens 5957498 Validate member address for lb graph creation c60b198 Update zuul/projects.yaml 95361c4 Fix passphrase None errors 2e5cad7 import zuul job settings from project-config ccdc03d Fix a no-op network driver bug on plug_port Diffstat (except docs and test files) ------------------------------------- etc/octavia.conf | 8 +- .../amphorae/backends/agent/api_server/osutils.py | 16 ++-- octavia/amphorae/drivers/health/heartbeat_udp.py | 10 ++- octavia/api/root_controller.py | 57 +++++++++----- octavia/api/v2/controllers/member.py | 1 + octavia/api/v2/controllers/pool.py | 2 + octavia/certificates/generator/local.py | 3 +- octavia/cmd/health_manager.py | 3 +- octavia/common/config.py | 13 ++++ octavia/common/exceptions.py | 2 +- .../healthmanager/health_drivers/update_db.py | 26 ++++++- octavia/controller/healthmanager/health_manager.py | 17 ++++- octavia/controller/worker/controller_worker.py | 7 +- octavia/controller/worker/tasks/compute_tasks.py | 2 +- octavia/db/api.py | 21 ++++++ octavia/network/base.py | 4 +- octavia/network/drivers/noop_driver/driver.py | 14 ++-- .../backends/agent/api_server/test_plug.py | 86 +++++++++++++++++++++- .../amphorae/drivers/health/test_heartbeat_udp.py | 16 ++-- .../unit/certificates/generator/test_local.py | 45 +++++++++++ .../healthmanager/health_drivers/test_update_db.py | 11 +++ .../healthmanager/test_health_manager.py | 10 ++- .../network/drivers/test_network_noop_driver.py | 7 +- ...s-for-jinja-and-pyopenssl-1e5d556745e48fa1.yaml | 6 ++ ...ix-health-check-db-outage-279b0bc1d0039312.yaml | 6 ++ ...l-for-health-stats-update-c263c844075a7721.yaml | 5 ++ ...stop-logging-amphora-cert-2e188675699d60d5.yaml | 7 ++ .../notes/zombie_amp-1b435eb66643dab8.yaml | 12 +++ zuul.d/jobs.yaml | 8 -- zuul.d/projects.yaml | 43 ++++++----- 33 files changed, 419 insertions(+), 94 deletions(-)

1 0

nova 18.1.0 (rocky)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are amped to announce the release of: nova 18.1.0: Cloud computing fabric controller This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 18.1.0 ^^^^^^ Upgrade Notes ************* * The "nova-manage db online_data_migrations" command now returns exit status 2 in the case where some migrations failed (raised exceptions) and no others were completed successfully from the last batch attempted. This should be considered a fatal condition that requires intervention. Exit status 1 will be returned in the case where the "--max-count" option was used and some migrations failed but others succeeded (updated at least one row), because more work may remain for the non-failing migrations, and their completion may be a dependency for the failing ones. The command should be reiterated while it returns exit status 1, and considered completed successfully only when it returns exit status 0. Bug Fixes ********* * The "long_rpc_timeout" configuration option is now used for the RPC call to the scheduler to select a host. This is in order to avoid a timeout when scheduling multiple servers in a single request and/or when the scheduler needs to process a large number of hosts. * A new "[workarounds]/report_ironic_standard_resource_class_inventory" configuration option has been added. Starting in the 16.0.0 Pike release, ironic nodes can be scheduled using custom resource classes rather than the standard resource classes VCPU, MEMORY_MB and DISK_GB: https://docs.openstack.org/ironic/rocky/install/configure-nova- flavors.html However, existing ironic instances require a data migration which can be achieved either by restarting "nova-compute" services managing ironic nodes or running "nova-manage db ironic_flavor_migration". The completion of the data migration can be checked by running the "nova-status upgrade check" command and checking the "Ironic Flavor Migration" result. Once all data migrations are complete, you can set this option to False to stop reporting VCPU, MEMORY_MB and DISK_GB resource class inventory to the Placement service so that scheduling will only rely on the custom resource class for each ironic node, as described in the document above. Note that this option does not apply starting in the 19.0.0 Stein release since the ironic compute driver no longer reports standard resource class inventory regardless of configuration. Alternatives to this workaround would be unsetting "memory_mb" and/or "vcpus" properties from ironic nodes, or using host aggregates to segregate VM from BM compute hosts and restrict flavors to those aggregates, but those alternatives might not be feasible at large scale. See related bug https://bugs.launchpad.net/nova/+bug/1796920 for more details. * When testing whether direct IO is possible on the backing storage for an instance, Nova now uses a block size of 4096 bytes instead of 512 bytes, avoiding issues when the underlying block device has sectors larger than 512 bytes. See bug https://launchpad.net/bugs/1801702 for details. * The "os-simple-tenant-usage" pagination has been fixed. In some cases, nova usage-list would have returned incorrect results because of this. See bug https://launchpad.net/bugs/1796689 for details. Changes in nova 18.0.3..18.1.0 ------------------------------ 25dc6a4 Remove GROUP BY clause from CellMapping.get_by_project_id 7ef3304 Add secret=true to fixed_key configuration parameter cbb9eb5 Handle tags in _bury_in_cell0 58d3ac0 Only warn about not having computes nodes once in rpcapi bbc431f Ignore MoxStubout deprecation warnings 3028d25 Create BDMs/tags in cell with instance when over-quota 5b7e904 Add functional regression test for bug 1806064 899b4ca Note the aggregate allocation ratio restriction in scheduler docs 0208d64 Fix InstanceNotFound during _destroy_evacuated_instances 83d74db Add functional regression test for bug 1794996 7e6375c Add a bug tag for nova doc d571e43 Remove unnecessary redirect e54c5fb Add description of custom resource classes 4b5a21b Use long_rpc_timeout in select_destinations RPC call 031f04a Imported Translations from Zanata 99b1b3f Don't use private interface in oslo.service c689c09 Default embedded instance.flavor.is_public attribute 386e574 Make supports_direct_io work on 4096b sector size e90e892 Consider root id is None in the database case 2ddb689 Add recreate test for bug 1799892 7520d15 Handle unicode characters in migration params 4c0342b Mention meta key suffix in tenant isolation with placement docs 74ed2fe Harden placement init under wsgi 980013d Properly track local root disk usage during moves d4ec966 Add regression test for bug 1796737 26c5ee1 Provide allocation_ratio/reserved amounts from update_provider_tree() 57ca928 Add functional recreate test for bug 1799727 133b194 Fix os-simple-tenant-usage result order 732b057 Update resources once in update_available_resource 954b200 Don't persist RequestSpec.requested_destination cb9c96f Add regression test for bug 1797580 dd8354e Handle online_data_migrations exceptions 940034c Fix NoneType error in _notify_volume_usage_detach dfbcf5e Handle IndexError in _populate_neutron_binding_profile 8e463aa Time how long select_destinations() takes in conductor f7d0a76 [stable-only] Add report_ironic_standard_resource_class_inventory option 3d4e4a4 Set defult value of num_nvme_discover_tries=5 057a05d De-dupe subnet IDs when calling neutron /subnets API 74f1db7 placement: Always reset conf.CONF when starting the wsgi app b35b812 Wait for network-vif-plugged on resize revert 3c2f07f Validate transport_url in nova-manage cell_v2 commands 1c1c373 Refix disk size during live migration with disk over-commit 5e69018 hardware: fix memory check usage for small/large pages Diffstat (except docs and test files) ------------------------------------- .../v2.40/simple-tenant-usage-get-all.json | 68 ++++++ nova/api/openstack/compute/simple_tenant_usage.py | 3 +- nova/api/openstack/placement/db_api.py | 6 +- .../placement/objects/resource_provider.py | 50 ++++- nova/api/openstack/placement/wsgi.py | 5 + nova/cmd/manage.py | 40 +++- nova/compute/manager.py | 20 +- nova/compute/resource_tracker.py | 39 ++-- nova/compute/rpcapi.py | 13 +- nova/conductor/manager.py | 40 +++- nova/conf/key_manager.py | 1 + nova/conf/libvirt.py | 2 +- nova/conf/rpc.py | 1 + nova/conf/workarounds.py | 33 +++ nova/locale/ko_KR/LC_MESSAGES/nova.po | 28 ++- nova/network/neutronv2/api.py | 21 +- nova/objects/cell_mapping.py | 16 +- nova/objects/instance.py | 20 +- nova/objects/request_spec.py | 8 +- nova/privsep/utils.py | 4 +- nova/scheduler/client/__init__.py | 3 - nova/scheduler/rpcapi.py | 4 +- nova/scheduler/utils.py | 33 --- .../placement/db/test_allocation_candidates.py | 107 +++++++++ .../v2.40/simple-tenant-usage-get-all.json.tpl | 68 ++++++ .../functional/compute/test_resource_tracker.py | 99 ++++++++ .../functional/regressions/test_bug_1794996.py | 179 +++++++++++++++ .../functional/regressions/test_bug_1797580.py | 97 ++++++++ .../functional/regressions/test_bug_1806064.py | 140 ++++++++++++ .../functional/regressions/test_bug_1806515.py | 69 ++++++ .../unit/api/openstack/placement/test_db_api.py | 52 +++++ .../api_samples_test_base/test_compare_result.py | 2 +- nova/utils.py | 43 ++++ nova/virt/driver.py | 18 ++ nova/virt/fake.py | 33 +++ nova/virt/hardware.py | 89 +++++--- nova/virt/ironic/driver.py | 33 +-- nova/virt/libvirt/driver.py | 19 +- nova/virt/libvirt/guest.py | 4 +- ...meout-select_destinations-9712e8690160928f.yaml | 7 + ..._resource_class_inventory-85c1fc629a08038d.yaml | 35 +++ .../notes/bug-1801702-c8203d3d55007deb.yaml | 8 + ...e-tenant-usage-pagination-393ed6e7d0e31594.yaml | 6 + ...ne-migrations-exit-status-9de5ea7836d0e368.yaml | 13 ++ 75 files changed, 2262 insertions(+), 344 deletions(-)

1 0

octavia 1.0.4 (pike)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are gleeful to announce the release of: octavia 1.0.4: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the pike stable release series. Download the package from: https://pypi.org/project/octavia For more details, please see below. 1.0.4 ^^^^^ Security Issues * Fixed a debug level logging of Amphora certificates for flows such as 'octavia-create-amp-for-lb-subflow-octavia-generate-serverpem' (triggered with loadbalancer failover) and 'octavia-create-amp-for- lb-subflow-octavia-update-cert-expiration'. Changes in octavia 1.0.3..1.0.4 ------------------------------- b3a25ee Stop Logging Amphora Cert Diffstat (except docs and test files) ------------------------------------- octavia/controller/worker/controller_worker.py | 7 ++++++- releasenotes/notes/stop-logging-amphora-cert-2e188675699d60d5.yaml | 7 +++++++ 2 files changed, 13 insertions(+), 1 deletion(-)

1 0

tosca-parser 1.4.0 (stein)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We enthusiastically announce the release of: tosca-parser 1.4.0: Parser for TOSCA Simple Profile in YAML. This release is part of the stein release series. The source is available from: http://git.openstack.org/cgit/openstack/tosca-parser/ Download the package from: https://pypi.org/project/tosca-parser For more details, please see below. Changes in tosca-parser 1.3.0..1.4.0 ------------------------------------ f90efb1 Change openstack-dev to openstack-discuss fd3c74b Add reservation policy support 4bdad8e Add py36 to tox.ini and setup.cfg Diffstat (except docs and test files) ------------------------------------- setup.cfg | 3 +- toscaparser/elements/TOSCA_definition_1_0.yaml | 5 +++ toscaparser/elements/policytype.py | 8 +++- toscaparser/policy.py | 14 ++++++- toscaparser/reservation.py | 47 ++++++++++++++++++++++ tox.ini | 2 +- 9 files changed, 160 insertions(+), 6 deletions(-)

1 0

tripleo-common 10.2.0 (stein)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are chuffed to announce the release of: tripleo-common 10.2.0: A common library for TripleO workflows. This release is part of the stein release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo-common For more details, please see below. 10.2.0 ^^^^^^ New Features ************ * The "ironic-staging-drivers" are now installed in the ironic- conductor container so that these drivers can be used without rebuilding the container. The Ironic Staging Drivers (https ://ironic-staging-drivers.readthedocs.io/en/latest/) is used to hold out-of-tree Ironic drivers which doesn't have means to provide a 3rd Party CI at this point in time which is required by Ironic. * Node's profile can now be specified as a separate "profile" field in the "instackenv.json" instead of inside capabilities. * A new Ansible role to tag containers managed by Pacemaker. This role will be consummed by services managed by Pacemaker. * The new tripleo-docker-rm will be useful to remove the containers that were managed by Docker and that are now managed by Podman. Upgrade Notes ************* * Package octavia-amphora-image (RHEL) will no longer be installed by role octavia-undercloud, and it now installs image files in directory /usr/share/openstack-octavia-amphora-images/. Please ensure you have the latest package version installed in the undercloud node beforehand deploying or updating the overcloud. Deprecation Notes ***************** * Specifying profile in capabilities when enrolling nodes is deprecated. Please use the new "profile" field instead. Bug Fixes ********* * Node update now works correctly when capabilities are specified as a dict. * The list of pre and post deployment names generated with config- download are now written per server instead of per role. This change handles the case where a deployment may apply to only an individual or set of servers within a role, and not all servers in that role. host_vars are used to set the variable of deployment names per server instead of group_vars. * Remove the tripleo specific inclusion of the openstack-ironic- statging-drivers package into the ironic-conductor container as this has been included in kolla. Other Notes *********** * TripleoInventory class no longer supports the parameters being passed in as as config object. This was added to support transition in in tripleo-validations that was corrected in Queens. Changes in tripleo-common 10.1.0..10.2.0 ---------------------------------------- c01edb5 Fix DeploymentStatusAction KeyError 981a217 Drop baremetal job template bdbce00 Address python3 string issues with subprocess d8de81f Add excludes to kolla builder cdcafad Implement python based uploader b6e82e2 Fix syntax error in role octavia-controller-config 7ab5342 Remove tripleo ironic-staging-drivers addition 092cddf overrides for transitioning from mariadb 10.1 to 10.3 0923fca Add a way to update ContainerImagePrepare params e07dc79 Only update parameters once in backup workflow 90fe24c Add python-notario package to mistral-executor container 936a599 Fix environments sorting 25183dd Increase ansible gather_timeout to 30secs for config-download e22f143 Set heatclient exceptions to verbose a719804 Stops growth of massive dentry cache growth 37dee4a Don't accumulate ansible output uselessly 8bfa351 Don't upcall run on UpdateParametersAction errors ece0944 Fix broken YAQL expressions in heat_environments.yaml 4490cc5 Fix non-exiting link to TripleO-common bugs 3a0cc64 image_uploader: use /v2 suffix to validate SSL 2c76f9f Specify python interpreter for undercloud c907add Set DeployIdentifier on update/upgrade/ffwd prepare actions ea9703a Rename tripleo-ci-centos-7-scenario009-multinode-oooq 4f89896 Add tripleoclient container 7032f25 Bump the Ceph container image to 3.2.0 84603a0 Generating fencing for capitalized MACs 7cd99c8 Persist region name in overcloudrc cebf6d7 Update swift_backup workflow success status message e05349d Do not fail deploy for empty ceph ansible fetch directory 08b89e6 Stop setting boot_option=local on ironic nodes a1cef57 Use stestr for unit tests 51e1f34 Simplify logic in docker detection for docker-rm role b7f0688 Fix rotate_fernet_keys workflow to not use heat deployment 51519d7 Catch heat exceptions in DeployStackAction 7c960d0 Exit when container is missing or empty when downloading logs 9198805 Select message IDs properly when publishing to swift 9288f0f Remove configs parameter from TripleoInventory d610129 Add advanced deployment options c6fab39 Install ironic-staging-drivers in ironic-conductor da02cd1 Fix nova-api healthcheck 678d564 Pass execution_id to tripleo.ansible-playbook. 9780889 Implement tripleo-docker-rm role 7370ca7 tripleo-container-tag: pull image before tagging 5b10047 Cache swift responses in process_environments_and_files 5c204c3 Don't reset parameter cache in a loop 42ea35f Revert "Revert "Add crane service to overcloud_containers.yaml.j2"" 70267db Add container build job e3a410f Supports specifying profile explicitly in instackenv.json 2c225f1 Correct handling of capabilities on node update 73631a2 Option to upload Octavia amphora img in RAW format de6f820 Omit grep process in nova_api healthcheck. b00b866 Move Octavia config opts to common config directory 8abbdeb Add image_source to containers de06f93 Sync state if needed during retrieval d22611b Fix config-download timeout 82bf5ad Implement tripleo-container-tag role f9389e3 Stop installing octavia-amphora-image package bdb78ef [Core] Fix the KeyError exception. f3cff15 Revert to coreos images hosted on quay.io 388ffae Delete old tarball from config container on download 042a281 Add container images for openshift 3.11 2f0f339 Revert "Add crane service to overcloud_containers.yaml.j2" 279543d Use pyyaml to output group vars f5ce5d7 Support v1 container image manifests e703ec1 Use DockerRegistryMirror to proxy requests 99dab22 Remove non-voting scenarios from gate 6d565e1 Move some container deps out of base e3bcc24 Don't resolve Heat stack output when unnecessary d1619ed Run Mistral workflow to make temporary Swift URLs on upgrade 8b16971 Refactor image uploader class structure 6cc6395 Fix - config-download tarball upload OverflowError 6d74a84 Per server deployments instead of per role a4048bf Add debug to container image prepare 90a1891 Store prepare defaults in packaged yaml 9f08626 Add crane service to overcloud_containers.yaml.j2 3933a66 Handle failed nodes when enabling ssh admin Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .stestr.conf | 3 + .testr.conf | 7 - CONTRIBUTING.rst | 2 +- .../container_image_prepare_defaults.yaml | 73 ++ container-images/overcloud_containers.yaml | 169 ++- container-images/overcloud_containers.yaml.j2 | 253 +++- .../tripleo_kolla_template_overrides.j2 | 21 +- healthcheck/common.sh | 1 + healthcheck/nova-api | 2 +- playbooks/octavia-files.yaml | 1 + playbooks/roles/common/defaults/main.yml | 1 + .../roles/octavia-controller-config/tasks/main.yml | 2 +- .../octavia-controller-config/tasks/octavia.yml | 20 +- .../templates/worker-post-deploy.conf.j2 | 4 - .../roles/octavia-undercloud/tasks/image_mgmt.yml | 31 +- playbooks/roles/octavia-undercloud/tasks/main.yml | 7 +- ...nd-ironic-staging-drivers-d278905bb1ec0683.yaml | 9 + releasenotes/notes/caps-fix-f6f8817a48fa5c25.yaml | 4 + .../deployments-per-server-ea747fcff19c884d.yaml | 7 + ...-inventory-config-support-c2132b897da2d290.yaml | 6 + releasenotes/notes/profile-17e2650c8da9e8b5.yaml | 9 + ...-staging-drivers-override-ce9776ec030ec02a.yaml | 6 + ...via-amphora-image-install-5d26e3d37c7b508f.yaml | 8 + .../tripleo-container-tag-ec42e64289cb17e2.yaml | 5 + .../notes/tripleo-docker-rm-b64297d5f9f42988.yaml | 5 + roles/tripleo-container-tag/README.md | 41 + roles/tripleo-container-tag/defaults/main.yaml | 2 + roles/tripleo-container-tag/tasks/main.yaml | 6 + roles/tripleo-docker-rm/README.md | 40 + roles/tripleo-docker-rm/defaults/main.yaml | 2 + roles/tripleo-docker-rm/tasks/main.yaml | 14 + scripts/container-update.py | 18 +- scripts/tripleo-container-image-prepare | 13 +- setup.cfg | 2 + sudoers | 1 - test-requirements.txt | 2 +- tox.ini | 12 +- tripleo_common/actions/__init__.py | 4 + tripleo_common/actions/ansible.py | 18 +- tripleo_common/actions/baremetal.py | 9 +- tripleo_common/actions/config.py | 12 +- tripleo_common/actions/container_images.py | 38 + tripleo_common/actions/deployment.py | 105 +- tripleo_common/actions/files.py | 5 +- tripleo_common/actions/package_update.py | 14 +- tripleo_common/actions/parameters.py | 5 +- tripleo_common/actions/plan.py | 3 +- tripleo_common/actions/templates.py | 7 +- tripleo_common/image/image_uploader.py | 1356 +++++++++++++++----- tripleo_common/image/kolla_builder.py | 87 +- tripleo_common/inventory.py | 40 +- tripleo_common/templates/group_var_role.j2 | 14 - tripleo_common/templates/host_var_server.j2 | 10 + .../utils/data/host_vars/overcloud-controller-0 | 7 + .../utils/data/host_vars/overcloud-novacompute-0 | 6 + .../utils/data/host_vars/overcloud-novacompute-1 | 6 + .../utils/data/host_vars/overcloud-novacompute-2 | 7 + tripleo_common/utils/config.py | 51 +- tripleo_common/utils/nodes.py | 39 +- tripleo_common/utils/overcloudrc.py | 3 +- tripleo_common/utils/plan.py | 13 +- tripleo_common/utils/swift.py | 14 +- workbooks/access.yaml | 12 +- workbooks/baremetal.yaml | 4 +- workbooks/container_images.yaml | 51 + workbooks/deployment.yaml | 58 +- workbooks/fernet-key-rotate.yaml | 14 +- workbooks/heat_environments.yaml | 4 +- workbooks/octavia_post.yaml | 4 + workbooks/plan_management.yaml | 64 +- workbooks/rename_ceph_ansible_fetch_directory.yaml | 2 +- workbooks/skydive-ansible.yaml | 1 + workbooks/swift_backup.yaml | 23 +- workbooks/swift_ring_rebalance.yaml | 9 +- zuul.d/layout.yaml | 20 +- 93 files changed, 4199 insertions(+), 795 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index d422644..4ad7698 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -14 +14 @@ oslotest>=3.2.0 # Apache-2.0 -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.0.0 # Apache-2.0

1 0

oslo.log 3.42.1 (stein)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are happy to announce the release of: oslo.log 3.42.1: oslo.log library This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.log Download the package from: https://pypi.org/project/oslo.log Please report issues through launchpad: https://bugs.launchpad.net/oslo.log For more details, please see below. Changes in oslo.log 3.42.0..3.42.1 ---------------------------------- 7558bc7 Default oslo.policy logging to INFO dde54e7 Update mailinglist from dev to discuss 8db5661 Fix up nits in log rotation change 4293cd8 Advancing the protocal of the website to HTTPS in usage.rst. Diffstat (except docs and test files) ------------------------------------- oslo_log/_options.py | 1 + releasenotes/notes/log-rotation-595f8232cd987a6d.yaml | 1 + setup.cfg | 2 +- 8 files changed, 11 insertions(+), 9 deletions(-)

1 0

oslo.utils 3.39.0 (stein)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are amped to announce the release of: oslo.utils 3.39.0: Oslo Utility library This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through launchpad: https://bugs.launchpad.net/oslo.utils For more details, please see below. Changes in oslo.utils 3.38.0..3.39.0 ------------------------------------ d7e70b1 Don't use monotonic on Python >=3.3 e675797 Update mailinglist from dev to discuss Diffstat (except docs and test files) ------------------------------------- oslo_utils/timeutils.py | 6 +++++- requirements.txt | 2 +- setup.cfg | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 803e5a6..9e3c458 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +15 @@ oslo.i18n>=3.15.3 # Apache-2.0 -monotonic>=0.6 # Apache-2.0 +monotonic>=0.6;python_version<'3.3' # Apache-2.0

1 0

tripleo-heat-templates 8.2.0 (queens)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are pleased to announce the release of: tripleo-heat-templates 8.2.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the queens stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 8.2.0 ^^^^^ New Features ************ * Add support for ODL deployment on IPv6 networks. * Added Dell EMC SC multipath support This change adds support for cinder::backend::dellsc_iscsi::use_multipath_for_image_xfer Added a new parameter CinderDellScMultipathXfer. Bug Fixes ********* * The deployed-server get-occ-config.sh script now allows $SSH_OPTIONS to be overridden. Changes in tripleo-heat-templates 8.1.0..8.2.0 ---------------------------------------------- 14ae943 Added Dell EMC SC multipath support 10e8ea2 Set facter variable 'uuid' explicitly in docker-puppet.py c699660 ctlplane pre-alloc IPs - deprecated/non-deprecated role name 655fc21 Remove unnecessary logs due to misconfiguration from pacemaker 3db0816 Switch scenarios to non-voting b64e6eb Configure cinder's access to the nova API 4dfd98f Add config option for ODL IPv6 deployment 7992960 Set `TraceEnable` directive for apache to 'Off' 3469955 Make $SSH_OPTIONS overrideable Diffstat (except docs and test files) ------------------------------------- deployed-server/scripts/get-occ-config.sh | 2 +- environments/cinder-dellsc-config.yaml | 1 + environments/network-isolation-v6.j2.yaml | 2 + puppet/extraconfig/pre_deploy/per_node.yaml | 2 +- puppet/role.role.j2.yaml | 25 ++++++--- puppet/services/apache.j2.yaml | 1 + puppet/services/cinder-backend-dellsc.yaml | 4 ++ puppet/services/cinder-base.yaml | 8 +++ puppet/services/opendaylight-ovs.yaml | 5 ++ ...pport-for-IPv6-deployment-4c5b577cfb38c416.yaml | 4 ++ .../notes/dellsc-driver-d7cd300a24a64b01.yaml | 6 ++ .../overrideable-ssh-options-1bd4a78408eb6c2c.yaml | 4 ++ zuul.d/layout.yaml | 64 ---------------------- 15 files changed, 58 insertions(+), 75 deletions(-)

1 0

ironic-inspector 7.2.2 (queens)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are pumped to announce the release of: ironic-inspector 7.2.2: Hardware introspection for OpenStack Bare Metal This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through launchpad: https://bugs.launchpad.net/ironic-inspector For more details, please see below. 7.2.2 ^^^^^ Bug Fixes * A new rootwrap filter is now included to allow control of the systemd dnsmasq service used by ironic-inspector. This fixes a permission issue when systemctl commands are used as "dnsmasq_start_command" and "dnsmasq_stop_command" in the configuration for the dnsmasq pxe filter. See bug 2002818 (https://storyboard.openstack.org/#!/story/2002818) Note: The filter uses the systemd service name used by the RDO distrubution ("openstack-ironic-inspector-dnsmasq.service"). * Fixes issue that can result in introspection failure when a network switch sends incomplete information for LLDP switch_id or port_id. The validation expects these fields when a port is updated, this fix now handles the validation exception. * The "dnsmasq" PXE filter no longer whitelists the MAC addresses of ports deleted from the Bare Metal service. Instead they are blacklisted unless introspection is active or the "node_not_found_hook" is set in the configuration. This ensures that no previously enrolled node accidentally boot the inspection image when no node introspection is active. Bug #2001979 (https://storyboard.openstack.org/#!/story/2001979) Changes in ironic-inspector 7.2.1..7.2.2 ---------------------------------------- c9b739a Handle validation failure if not all switch fields received 04dc40d Add rootwrap filter for systemctl control of dnsmasq 41a5f11 import zuul job settings from project-config c29c28e PXE Filter dnsmasq: manage macs not in ironic Diffstat (except docs and test files) ------------------------------------- ironic_inspector/plugins/local_link_connection.py | 8 +- ironic_inspector/pxe_filter/dnsmasq.py | 61 ++++++++++++--- .../test/unit/test_dnsmasq_pxe_filter.py | 90 ++++++++++++++++------ .../unit/test_plugins_local_link_connection.py | 18 +++++ ...filter-rootwrap-systemctl-099964ad39d38b4c.yaml | 11 +++ ...handle-patch-port-failure-9a8b85749104506f.yaml | 6 ++ ...anage-deleted-ironic-macs-4bb766efad8c6d02.yaml | 9 +++ rootwrap.d/ironic-inspector-firewall.filters | 6 -- rootwrap.d/ironic-inspector.filters | 10 +++ zuul.d/project.yaml | 8 ++ 10 files changed, 184 insertions(+), 43 deletions(-)

1 0

tripleo-heat-templates 9.1.0 (rocky)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are happy to announce the release of: tripleo-heat-templates 9.1.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the rocky stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 9.1.0 ^^^^^ New Features ************ * Add support for ODL deployment on IPv6 networks. * Allow plugins that support it to create VLAN transparent networks The vlan_transparent determines if plugins that support it to create VLAN transparent networks or not * We now provide an example set of environment files that can be used to deploy a single all-in-one standalone cloud node via the 'openstack overcloud deploy' and 'openstack tripleo deploy' (experimental) commands. For the overcloud deployment, use *environments/standalone/standalone-overcloud.yaml*. For the tripleo deploy deployment, use *environments/standalone/standalone- tripleo.yaml*. * Adds posibilities to set 'neutron::agents::ml2::ovs::tunnel_csum' via NeutronOVSTunnelCsum in heat template. This param set or un-set the tunnel header checksum on outgoing IP packet carrying GRE/VXLAN tunnel in ovs agent. * Now it's possible to define the number of API and RPC workers separately for neutron-api service. This is good for certain network backends such as OVN that don't require RPC communication. * Usage of eventlet of all the WSGI-run nova services get deprecated, including nova-api and nova-metadata-api. See https://review.openstack.org/#/c/549510/ for more details. With this change we move nova-metadata to run via httpd wsgi. * Add provision to set java options like heap size configurations in ODL. * Add support for libvirt volume_use_multipath the ability to use multipath connection of the iSCSI or FC volume. Volumes can be connected in the LibVirt as multipath devices. Adds new parameter "NovaLibvirtVolumeUseMultipath". Upgrade Notes ************* * swift worker count parameter defaults have been changed from 'auto' to 0. If not provided, puppet module default would instead be used and the number of server processes will be limited to '12'. * The online part of the service upgrades (online data migrations) is now run using: openstack overcloud external-upgrade run --tags online_upgrade or per-service like: openstack overcloud external-upgrade run --tags online_upgrade_nova openstack overcloud external-upgrade run --tags online_upgrade_cinder openstack overcloud external-upgrade run --tags online_upgrade_ironic Consult the upgrade documentation regarding the full upgrade workflow. Deprecation Notes ***************** * The environments/standalone.yaml has been deprecated and should be replaced with environments/standalone/standalone-tripleo.yaml when using the 'openstack tripleo deploy' command. Bug Fixes ********* * Fixed an issue where if Octavia API or Glance API were deployed away from the controller node with internal TLS, the service principals wouldn't be created. * Nova Scheduler added worker support in Rocky. Added *NovaSchedulerWorkers* to allow it to be configurable. * An issue causing undercloud installer re-run (or update) to fail because VIP's where lost in case the networking configuration was changed has been fixed. See Bug: 1791238 (https://bugs.launchpad.net/tripleo/+bug/1791238) * Fixes openDaylight karaf file log rotation by changing karaf log rollover parameters in PAX logging configuration. Reference https://git.opendaylight.org/gerrit/#/c/75480/ for more details. Also, moves openDaylight karaf log file location to /var/log/containers/opendaylight/karaf/logs/karaf.log. Reference https://review.openstack.org/#/c/603907/ for more details. * Fixes an issue in the legacy port_from_pool templates for predictable IP addressing. Prior to this fix using these tamplates would fail with the following error: **Referenced Attribute (%network_name%%Port host_routes) is incorrect.** (Bug: 1792968 (https://bugs.launchpad.net/tripleo/+bug/1792968).) * Add customized libvirt-guests unit file to properly shutdown instances If resume_guests_state_on_host_boot is set in nova.conf instances need to be shutdown using libvirt-guests after nova_compute container is shut down. Therefore we need a customized libvirt- guests unit file 1) removes the dependency to libvirt (non container) that it don't get started as a dependency and make the nova_libvirt container to fail. 2) adds a dependency to docker related services that a shutdown of nova_compute container is possible on system reboot. 3) stops nova_compute container 4) shutdown VMs This is a missing part of Bug 1778216. * With OOO we configure a separate DB for placement for the undercloud and overcloud since the beginning. But the placement_database config options were reverted with https://review.openstack.org/#/c/442762/1 , which means so far even if the config option was set, it was not used. With rocky the options were introduced again which is not a problem on a fresh installed env, but on upgrades from queens to rocky. We should use the same DB for both fresh deployments on and upgrades to rocky before we switch to the new DB as part of the extraction of placement. * Empty /var/lib/config-data/puppet-generated/opendaylight/opt/ opendaylight/etc/opendaylight/karaf directory on host empties /opt/opendaylight/etc/opendaylight/karaf inside the ODL container because of the mount. This leads to deployment failure on redeploy. Delete the empty karaf directory on host before redeploying. * The previous installation method for the undercloud installed some extra OpenStack clients during the installation. Since we did not have an equivalent way in the containerized version of the undercloud, we've added a new TripleO 'service' to install all of the OpenStack clients on a system. OS::TripleO::Services::OpenStackClients has been added which can be added to a custom role to install the clients. By default, only the Undercloud and Standalone roles will have this available. * Ping the default gateways before controllers in validation script. In certain situations when using IPv6 its necessary to establish connectivity to the router before other hosts. * SELinux can be configured on the Standalone deployment by setting SELinuxMode. Other Notes *********** * A new parameter called 'RabbitAdditionalErlArgs' that specifies additional arguments to the Erlang VM has been added. It now defaults to "'+sbwt none'" (http://erlang.org/doc/man/erl.html#+sbwt) This threshold determines how long schedulers are to busy wait when running out of work before going to sleep. By setting it to none we let the erlang threads go to sleep right away when they do not have any work to do. * The common tasks in deploy-steps-tasks.yaml that are common to all roles are now tagged with one of: host_config, container_config, container_config_tasks, container_config_scripts, or container_startup_configs. * The step plays in deploy-steps.j2 (which generates the deploy_steps_tasks.yaml playbook) are now tagged with step[1-5] so that they can run individually if needed. Changes in tripleo-heat-templates 9.0.0..9.1.0 ---------------------------------------------- 2f12128 Switch scenarios to non-voting 5a64736 Fix ansible conditional for ovs upgrade. 9be794b ceph: allow curl tasks to run in dry run mode 959aa9d Add customized libvirt-guests unit file to properly shutdown instances 0bc3e99 Honor --skip-deploy-identifier in common deploy tasks for updates 3deef82 Fix new node detection c7e16c3 Configure cinder's access to the nova API 4f191cb Set hierdata for swift server workers conditionally bc8cb17 [Templates] Use str_replace for hosts. e810103 Handle LP openvswitch meta-package on upgrade d10e704 Do not purge the Ironic Inspector dhcp-hostsdir aa0e0d3 Remove unused networks from OpenShift roles b129f24 Add network data for use with openshift deployments 3061e5d Switch stable scenarios to voting 49000ad Fix NeutronSriovHostConfig path for ODL deployment with SRIOV dac8bfc Sets ODL OVSDB inactivity probe timer a6247e8 switch documentation job to new PTI 7eb2024 Update to OpenShift 3.11 release ff09510 Set `TraceEnable` directive for apache to 'Off' e9b5d5f Fix novajoin nova vendordata hieradata keys c607f6c Create default deployment plan 8b13603 Allow standalone to manage selinux 0fe76ef Support for libvirt volume multipath b26af24 Add OpenStack clients service 5ccbdda Ensure unique containers names in docker-puppet 22b25cc Parametrize OpenShift deployment type d0752e3 Turning off extra UIs from Horizon fixes also SQLite issue 715781f Decoupling number of API and RPC workers for neutron-api 89e8e7e Set the number of RPC workers to 1 for non SRIOV OVN setups e229da2 Delete empty karaf directory on host 617bc44 Merge new params - nic-config templates 6c17d0f Skip hosts group in ceph-ansible inventory when all are blacklisted aab9049 Fix IHA with the new region_name key a9db3bb Change Swift storage directory to /srv/node/d1 c05b035 Fix cinder_api_apache error during upgrade. c314222 Do not wipe disks on OpenShift gluster nodes 71c1c76 Set openshift_docker_insecure_registries 2ada546 Do not modify imagestreams d100bb5 Let openshift-ansible configure the firewall 51eac99 Change log directory for OpenDaylight 60d7e1f Name unnamed tasks c09b258 check mode: paunch configs cb4fc55 check mode: docker_puppet_tasks 25f9448 Add OS::TripleO::Services::Rhsm to OpenShift roles 32c01f3 Use nova_api DB for [placement_database] -> connection 552ba0a Use different base virtual_router_id on openshift 5ef1ade Recreate cinder LVM loopback device on startup 17226a0 Switch OpenShiftGlusterDisks to a single disk 5aa3d8a Add OS::TripleO::Services::ContainerImagePrepare to ControllerOpenStack 7efe108 [Rocky ONLY] Fix haproxy cert inject for check mode 4fbf761 Apply variable to task not the block d9ec075 Run online migrations via "external-upgrade run" 54af7a0 Introduce proper steps to external update/upgrade tasks 65a8b44 check mode: docker_puppet 1d736b7 Remove deprecated Ram/Disk filters in NovaSchedulerDefaultFilters 085e49b Add provision to specify java arguments to ODL 2cd338a Fix update tasks for openshift f78ee08 Use openshift-ansible container instead of RPMs 4b44627 Set octavia log directory permissions to octavia user 7026e61 Add tripleo-heat-templates dir to Mistral volumes 9f0975a Disable Swift auditors/replicators on undercloud 1efec7e Ensure the needed openshift resources are set bae445a Add posibilities to set tunnel_csum in ovs agent 130bdea Use glusterfs for registry when deploying with CNS 55a1226 Pass image import conf file to command which runs glance server 776da14 Add metadata_settings to Octavia and Glance APIs 9a785ae Deploy openshift all in one in scenario009 001cadf Add nova-scheduler worker support 481916b Honor --skip-deploy-identifier in common deploy tasks d55940c Do not reference ansible_hostname if it is undefined 0969dfa Tag container image prepare tasks to allow running them for updates/upgrades 893e4c0 Add heat param for openshift prerequisites playbook bee73a8 Fix list concatenation of routes in bond-with-vlan 6341fe4 Hook openshift deployment with image prepare 59a5243 check mode: puppet host 95c10d1 Disable OVN related services in ODL env file 39302f2 Consolidate openshift-ansible global variables a45119e Make glusterfs the default sc when deploying with CNS b35cd6f Introduce OpenShiftGlusterNodeVars heat param 9ebb6e5 Fix inventory files for newer openshift-ansible 732e1c4 Configure haproxy for openshift infra f168115 Add config option for ODL IPv6 deployment ca765f7 Fix TLS when using a containerized undercloud d4f0725 Update standalone role 32ecb8a Fix error in Tenant network routes definition b1f7dd4 Remove parameter reference to non-exisingt parameter 597a43d Remove 3node from CI 8e5a437 Don't fail ironic upgrade if xinetd isn't present 94df25e Convert with_dict tasks to use loop and be less chatty 6bf333a Add a zaqar-swift-backend environment file 1efba03 Mount /usr/share/ceph-ansible into mistral-executor 091cd60 docker-puppet.py: used dedicated hiera entry, not uuid aed9d77 Chunk up ceph-ansible output to prevent clogging the CLI 43b27a3 Add UseNotifySSL to environments/ssl/enable-internal-tls.yaml 8a02c78 Revert "Allow a containerized logrotate to access docker" c46632b In process-templates script write output files to provided dir when using base path b3dd79b Clean up previous osa inventory dir before deployment 5aedecc Fix openshift new node detection 65e75d7 Refactor openshift services for composable roles f0d00ef Add simple validation that OpenShift is deployed 0cc922b Use openshift_cockpit_deployer_image directly 03a8a6b Move to openshift-ansible 3.10 a0d7e74 Define keepalived service in environments/docker.yaml 9040c41 Set container images for CNS 244b7bf Ping default gateways before controllers 60f2bf9 Add networks to IronicConductor role. 993840d Don't merge /etc/collectd.d 3d422bb Add a fact checking xinetd service present 212568e Pacemaker-cinder-volume & pacemaker-cinder-backup log path fix 90afd18 Cleanup ControllerStorageNfs role ea067e4 Move nova-metadata api to httpd wsgi 74d821a Set mysql connect timeout in the undercloud 2ee39f2 Tag tasks in in common tasks 8af4465 Persist ceph-ansible fetch_directory using config-download dfb3e75 Remove "when failed" from debug task names 624c775 Tag step plays 4aa7f8c Pass NeutronMechanismDrivers parameter to prepare e8563c0 Add ERL args parameter for rabbit and set the busy wait threshold to none 7c52f94 Undercloud - Restart keepalived on update 78e0205 Allow a containerized logrotate to access docker 03ebfc9 undercloud/stackrc: unset OS_* variables 5a66f6c Stop cap granting to empty pool when telemetry disabled ab9c7b9 Fix syntax for set_fact module. 13a2474 Add host_routes to port_from_pool.j2 dfa3eca Add CephOSD service to roles/Standalone.yaml 2e21bb7 Add reflection of RpcPort to health checks 032db24 Make vlan_transparent in neutron.conf configurable from Undercloud Diffstat (except docs and test files) ------------------------------------- ci/environments/scenario009-multinode.yaml | 28 +- common/deploy-steps-tasks.yaml | 299 ++++++++- common/deploy-steps.j2 | 14 +- .../services/logging/files/opendaylight-api.yaml | 6 +- environments/cavium-liquidio.yaml | 2 +- environments/docker.yaml | 1 + environments/network-isolation-v6.j2.yaml | 2 + environments/neutron-ml2-ovn-hw-offload.yaml | 2 +- environments/neutron-ovs-dpdk.yaml | 2 +- environments/neutron-sriov.yaml | 2 +- environments/no-tls-endpoints-public-ip.yaml | 3 + environments/openshift-cns.yaml | 5 - environments/openshift.yaml | 5 +- environments/ovs-hw-offload.yaml | 2 +- .../neutron-opendaylight-dpdk.yaml | 4 +- .../neutron-opendaylight-hw-offload.yaml | 4 +- .../neutron-opendaylight-sriov.yaml | 2 +- .../services-baremetal/neutron-opendaylight.yaml | 2 + .../services-baremetal/neutron-ovs-dpdk.yaml | 2 +- .../services-baremetal/neutron-ovs-hw-offload.yaml | 2 +- environments/services-baremetal/neutron-sriov.yaml | 2 +- .../services/neutron-opendaylight-dpdk.yaml | 4 +- .../services/neutron-opendaylight-hw-offload.yaml | 4 +- .../services/neutron-opendaylight-sriov.yaml | 4 +- environments/services/neutron-opendaylight.yaml | 2 + environments/services/neutron-ovn-dvr-ha.yaml | 1 + environments/services/neutron-ovn-ha.yaml | 1 + environments/services/neutron-ovn-hw-offload.yaml | 1 + environments/services/neutron-ovn-sriov.yaml | 2 +- environments/services/neutron-ovs-dpdk.yaml | 2 +- environments/services/neutron-ovs-hw-offload.yaml | 2 +- environments/services/neutron-sriov.yaml | 2 +- environments/services/zaqar-swift-backend.yaml | 4 + environments/ssl/enable-internal-tls.yaml | 4 + environments/ssl/no-tls-endpoints-public.yaml | 3 + environments/ssl/tls-endpoints-public-dns.yaml | 3 + environments/ssl/tls-endpoints-public-ip.yaml | 3 + environments/ssl/tls-everywhere-endpoints-dns.yaml | 3 + environments/standalone.yaml | 6 + environments/standalone/standalone-overcloud.yaml | 99 +++ environments/standalone/standalone-tripleo.yaml | 107 ++++ environments/stdout-logging.yaml | 1 + environments/tls-endpoints-public-dns.yaml | 3 + environments/tls-endpoints-public-ip.yaml | 3 + environments/tls-everywhere-endpoints-dns.yaml | 3 + environments/undercloud.yaml | 10 + extraconfig/post_deploy/undercloud_post.sh | 11 + extraconfig/pre_deploy/undercloud_pre.sh | 8 + extraconfig/pre_deploy/undercloud_pre.yaml | 23 + extraconfig/services/openshift-cns.yaml | 149 +++-- extraconfig/services/openshift-infra.yaml | 82 +++ extraconfig/services/openshift-master.yaml | 683 ++++++++++++--------- extraconfig/services/openshift-node.yaml | 161 +++++ extraconfig/services/openshift-worker.yaml | 105 +--- extraconfig/services/rhsm.yaml | 5 +- .../tasks/instanceha/check-run-nova-compute | 10 +- hosts-config.yaml | 19 +- lower-constraints.txt | 1 + network/config/bond-with-vlans/role.role.j2.yaml | 5 +- network/endpoints/endpoint_data.yaml | 13 +- network/endpoints/endpoint_map.yaml | 246 ++++++++ network/ports/port_from_pool.j2 | 3 + network/service_net_map.j2.yaml | 1 + network_data_openshift.yaml | 75 +++ network_data_routed.yaml | 2 +- overcloud-resource-registry-puppet.j2.yaml | 3 + puppet/role.role.j2.yaml | 1 + puppet/services/apache.j2.yaml | 1 + puppet/services/cinder-base.yaml | 8 + puppet/services/container-image-prepare.j2.yaml | 8 + puppet/services/glance-api.yaml | 8 +- puppet/services/haproxy-public-tls-inject.yaml | 3 +- puppet/services/ironic-inspector.yaml | 1 + puppet/services/neutron-api.yaml | 22 +- puppet/services/neutron-base.yaml | 7 + puppet/services/neutron-metadata.yaml | 9 +- puppet/services/neutron-ovs-agent.yaml | 50 +- puppet/services/neutron-ovs-dpdk-agent.yaml | 2 - puppet/services/nova-api.yaml | 7 +- puppet/services/nova-base.yaml | 4 +- puppet/services/nova-compute.yaml | 49 ++ puppet/services/nova-metadata.yaml | 128 ++-- puppet/services/nova-scheduler.yaml | 13 + puppet/services/octavia-api.yaml | 2 + puppet/services/opendaylight-api.yaml | 15 +- puppet/services/opendaylight-ovs.yaml | 52 +- puppet/services/openstack-clients.yaml | 55 ++ puppet/services/openvswitch.yaml | 48 -- puppet/services/pacemaker/cinder-backup.yaml | 1 + puppet/services/pacemaker/cinder-volume.yaml | 1 + puppet/services/rabbitmq.yaml | 9 + ...t-inactivity-probe-config-a89f6dcd204192a8.yaml | 6 + puppet/services/swift-proxy.yaml | 9 +- puppet/services/swift-storage.yaml | 27 +- puppet/services/tripleo-packages.yaml | 149 +++++ ...a-and-glance-tls-internal-5d8e46650b174626.yaml | 6 + ...-scheduler-worker-support-0ab66160b936a0c0.yaml | 4 + ...pport-for-IPv6-deployment-4c5b577cfb38c416.yaml | 4 + ...d-vlan_transparent-config-5623f8cffc8b41f0.yaml | 5 + ...n-one-via-undercloud.yaml-8766b43a20a4270f.yaml | 14 + .../notes/bug-1794268-0f875aa640b4246e.yaml | 6 + ...nge-swift-worker-defaults-b98f12fb2f677bf1.yaml | 6 + ...i_rpc_workers_neutron_api-eb5820d6bcedb53b.yaml | 6 + ...-keepalived-needs-restart-6d7efbb9788e0f95.yaml | 7 + .../fix-odl-karaf-logging-eca10973e57caa3a.yaml | 12 + ...ort-from-pool-host-routes-7fcc4d00cb11603d.yaml | 8 + ...ustom_libvirt-guests_unit-7ac2c4b5511ca549.yaml | 16 + .../notes/nova_metadata_wsgi-bfb240bc84194d05.yaml | 7 + ...nova_api_db_for_placement-eea44dd48c768f04.yaml | 12 + ...lete_karaf_folder_on_host-b81465f62fe422d6.yaml | 9 + ...igration-external-upgrade-5093de6bd8993b5c.yaml | 16 + .../openstack-client-service-86d28dab98f1763f.yaml | 11 + ...ateway-before-controllers-e029e81961dbaee8.yaml | 6 + .../notes/rabbitmq-erl-args-9029cf4605d63dd9.yaml | 8 + ...et_java_opts_from_tripleo-d969b1151ec244a0.yaml | 4 + ...one-selinux-configuration-39a0c7285d8e4c66.yaml | 4 + .../notes/tag-common-tasks-4a78275787655fdd.yaml | 6 + .../notes/tag-step-plays-b1b1ea7584f1665d.yaml | 5 + ...se_multipath-for-libvirt--c8e93a0bb83e0bc8.yaml | 7 + requirements.txt | 1 + roles/ControllerOpenstack.yaml | 1 + roles/ControllerStorageNfs.yaml | 9 +- roles/IronicConductor.yaml | 2 + roles/OpenShiftAllInOne.yaml | 35 ++ roles/OpenShiftInfra.yaml | 25 + roles/OpenShiftMaster.yaml | 16 +- roles/OpenShiftWorker.yaml | 10 +- roles/Standalone.yaml | 10 +- roles/Undercloud.yaml | 2 +- roles_data_undercloud.yaml | 2 +- sample-env-generator/ssl.yaml | 17 + sample-env-generator/standalone.yaml | 264 ++++++++ scripts/hosts-config.sh | 1 + tools/merge-new-params-nic-config-script.py | 267 ++++++++ tools/process-templates.py | 6 +- tools/yaml-validate.py | 5 +- validation-scripts/all-nodes.sh | 2 +- zuul.d/layout.yaml | 62 +- 187 files changed, 4161 insertions(+), 1389 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bda4743..9474928 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,0 +9 @@ tripleo-common>=7.1.0 # Apache-2.0 +paunch>=3.2.0 # Apache-2.0

1 0

ironic-python-agent 3.2.2 (queens)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are psyched to announce the release of: ironic-python-agent 3.2.2: Ironic Python Agent Ramdisk This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/ironic-python-agent/ For more details, please see below. 3.2.2 ^^^^^ Bug Fixes * Fixes detection of IPMI address in CoreOS-based images, by ensuring that parsing of "ipmitool" output is compatible with the bundled implementation of "awk" ("mawk"). Changes in ironic-python-agent 3.2.1..3.2.2 ------------------------------------------- dc154a1 Fix BMC IP address detection on CoreOS images c6492f6 Add missing dependencies to CoreOS IPA docker image b04651c import zuul job settings from project-config 2cb36f0 fix uname mock arguments for get-pip.py 006bfb1 Switch from sourceforge to github for ipmitool Diffstat (except docs and test files) ------------------------------------- Dockerfile | 3 ++- imagebuild/tinyipa/build-tinyipa.sh | 5 +++-- imagebuild/tinyipa/build_files/buildreqs.lst | 6 ++++++ imagebuild/tinyipa/build_files/fakeuname | 5 +++++ ironic_python_agent/hardware.py | 2 +- .../notes/fix-bmc-ip-detection-for-coreos-483be0286593e393.yaml | 6 ++++++ zuul.d/project.yaml | 6 ++++++ 7 files changed, 29 insertions(+), 4 deletions(-)

1 0

ironic-inspector 8.0.1 (rocky)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are tickled pink to announce the release of: ironic-inspector 8.0.1: Hardware introspection for OpenStack Bare Metal This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through launchpad: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 8.0.1 ^^^^^ Bug Fixes * A new rootwrap filter is now included to allow control of the systemd dnsmasq service used by ironic-inspector. This fixes a permission issue when systemctl commands are used as "dnsmasq_start_command" and "dnsmasq_stop_command" in the configuration for the dnsmasq pxe filter. See bug 2002818 (https://storyboard.openstack.org/#!/story/2002818) Note: The filter uses the systemd service name used by the RDO distrubution ("openstack-ironic-inspector-dnsmasq.service"). * Fixes issue that can result in introspection failure when a network switch sends incomplete information for LLDP switch_id or port_id. The validation expects these fields when a port is updated, this fix now handles the validation exception. Changes in ironic-inspector 8.0.0..8.0.1 ---------------------------------------- b235c9f Handle validation failure if not all switch fields received ba32de4 Python 3.7: fix os.errno -> errno 4ec7d66 Add rootwrap filter for systemctl control of dnsmasq af52e6f import zuul job settings from project-config 83386c3 Update UPPER_CONSTRAINTS_FILE for stable/rocky 4c3dff4 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_inspector/plugins/local_link_connection.py | 8 +++++++- ironic_inspector/pxe_filter/dnsmasq.py | 8 ++++++-- ironic_inspector/test/unit/test_dnsmasq_pxe_filter.py | 10 +++++++--- .../test/unit/test_plugins_local_link_connection.py | 18 ++++++++++++++++++ ...pxe-filter-rootwrap-systemctl-099964ad39d38b4c.yaml | 11 +++++++++++ .../handle-patch-port-failure-9a8b85749104506f.yaml | 6 ++++++ rootwrap.d/ironic-inspector-firewall.filters | 6 ------ rootwrap.d/ironic-inspector.filters | 10 ++++++++++ tox.ini | 2 +- zuul.d/project.yaml | 8 ++++++++ 11 files changed, 75 insertions(+), 13 deletions(-)

1 0

ironic-python-agent 3.3.1 (rocky)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are glad to announce the release of: ironic-python-agent 3.3.1: Ironic Python Agent Ramdisk This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/ironic-python-agent/ For more details, please see below. 3.3.1 ^^^^^ Bug Fixes * Fixes detection of IPMI address in CoreOS-based images, by ensuring that parsing of "ipmitool" output is compatible with the bundled implementation of "awk" ("mawk"). Changes in ironic-python-agent 3.3.0..3.3.1 ------------------------------------------- aab9f53 Fix BMC IP address detection on CoreOS images 4b20765 Add missing dependencies to CoreOS IPA docker image 6588066 Raise udevadm settle timeout from 5 to 20 seconds 8eb2096 import zuul job settings from project-config 505dc36 Update UPPER_CONSTRAINTS_FILE for stable/rocky 3316454 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Dockerfile | 2 +- imagebuild/tinyipa/build_files/dhcp.sh | 21 +++++++++++++++++++++ imagebuild/tinyipa/finalise-tinyipa.sh | 5 +++++ ironic_python_agent/hardware.py | 2 +- ...mc-ip-detection-for-coreos-483be0286593e393.yaml | 6 ++++++ tox.ini | 2 +- zuul.d/project.yaml | 6 ++++++ 8 files changed, 42 insertions(+), 3 deletions(-)

1 0

openstacksdk 0.21.0 (stein)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are thrilled to announce the release of: openstacksdk 0.21.0: An SDK for building applications to work with OpenStack This release is part of the stein release series. Download the package from: https://pypi.org/project/openstacksdk For more details, please see below. 0.21.0 ^^^^^^ New Features ************ * Add "propagate_uplink_status" attribute to "port" resource. Users can set this attribute to "True" or "False". If it is set to "True", uplink status propagation is enabled. Otherwise, it is disabled. Neutron server needs to have the API extension "uplink-status- propagation" in order to support this feature. This feature can be used in SRIOV scenario, in which users enable uplink status propagation of the SRIOV port so that the link status of the VF will follow the PF. * Implement block-storage.v2 Backup resource with restore functionality. * Vendor profiles can now be fetched from an RFC 5785 compliant URL on a cloud, namely, "https://example.com/.well-known/openstack/api". A cloud can manage their own vendor profile and serve it from that URL, allowing a user to simply list "https://example.com" as the profile name. * Added the newly supported "description" parameter and the missing "domain_id" parameter to "Role" resource. Bug Fixes ********* * Fixes specifying fields when listing bare metal resources. Changes in openstacksdk 0.20.0..0.21.0 -------------------------------------- fd61b54 Avoid dogpile.cache 0.7.0 5a1983a Add host aggregate missing functions 79dff76 Fix requesting specific fields from ironic f06b60f Deal with double-normalization of host_id d027626 Add propagate_uplink_status to port 1ce6562 Fix query parameters of network.port_forwarding 0c6ede9 Change openstack-dev to openstack-discuss d6527b8 block_storage.backup func tests to use configurable timeout 51182f3 Replace neutron-grenade job with grenade-py3 65fd4a9 Change openstack-dev to openstack-discuss 08dfc16 Support non-public volume types 41ccc07 Move server munch transformation into normalize 3ed8f0e object_store: exposes the prefix parameter 120a9d1 Add support for octavia's resuorces quota 9939c93 Transform server with munch before normalizing 8d71f76 syntax errors and undefined exceptions in service_description.py e25e977 Refactor tag support 3d08643 Support remote vendor profiles 1da367b Slightly refactor vendor profile loading 9b29b88 Add CRUD methods for Neutron Port Forwarding bcc9965 Update link address for vendor support 8f97fb7 Check result of server metadata operation 5df573b Add missing properties for role 4d48309 Add missing seperator between words 40322ba Register proxy directly in add_service 37a1dec implement block-storage backup resource b450b45 Fix some spelling in documentation Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 5 +- .../user/resources/block_storage/v2/backup.rst | 21 +++ examples/connect.py | 2 +- openstack/baremetal/v1/_common.py | 7 + openstack/baremetal/v1/chassis.py | 5 +- openstack/baremetal/v1/node.py | 3 +- openstack/baremetal/v1/port.py | 3 +- openstack/baremetal/v1/port_group.py | 3 +- openstack/block_storage/v2/_proxy.py | 107 +++++++++++- openstack/block_storage/v2/backup.py | 100 +++++++++++ openstack/block_storage/v2/type.py | 4 + openstack/cloud/_normalize.py | 5 +- openstack/cloud/openstackcloud.py | 68 ++++---- openstack/compute/v2/_proxy.py | 41 +++++ openstack/compute/v2/aggregate.py | 26 +++ openstack/compute/v2/metadata.py | 3 + openstack/compute/v2/server.py | 9 +- openstack/config/cloud_region.py | 2 +- openstack/config/loader.py | 63 +++---- openstack/config/vendors/__init__.py | 67 ++++++-- openstack/config/vendors/vexxhost.json | 14 +- openstack/connection.py | 7 +- openstack/identity/v3/project.py | 3 +- openstack/identity/v3/role.py | 4 + openstack/image/v2/image.py | 12 +- openstack/load_balancer/v2/_proxy.py | 66 ++++++++ openstack/load_balancer/v2/quota.py | 62 +++++++ openstack/network/v2/_proxy.py | 118 +++++++++++++ openstack/network/v2/floating_ip.py | 5 +- openstack/network/v2/network.py | 5 +- openstack/network/v2/port.py | 8 +- openstack/network/v2/port_forwarding.py | 46 ++++++ openstack/network/v2/qos_policy.py | 5 +- openstack/network/v2/router.py | 5 +- openstack/network/v2/security_group.py | 5 +- openstack/network/v2/security_group_rule.py | 3 +- openstack/network/v2/subnet.py | 5 +- openstack/network/v2/subnet_pool.py | 5 +- openstack/network/v2/tag.py | 35 ---- openstack/network/v2/trunk.py | 3 +- openstack/object_store/v1/container.py | 4 + openstack/object_store/v1/obj.py | 4 + openstack/resource.py | 150 ++++++++++++++++- openstack/service_description.py | 11 +- .../functional/baremetal/test_baremetal_chassis.py | 12 ++ .../functional/baremetal/test_baremetal_node.py | 12 ++ .../functional/baremetal/test_baremetal_port.py | 13 ++ .../baremetal/test_baremetal_port_group.py | 8 + .../functional/block_storage/v2/test_backup.py | 68 ++++++++ .../load_balancer/v2/test_load_balancer.py | 32 ++++ .../functional/network/v2/test_port_forwarding.py | 175 ++++++++++++++++++++ ...ate_uplink_status-to-port-0152d476c65979e3.yaml | 12 ++ .../notes/baremetal-fields-1f6fbcd8bd1ea2aa.yaml | 4 + .../block-storage-backup-5886e91fd6e423bf.yaml | 3 + .../notes/remote-profile-100218d08b25019d.yaml | 7 + .../update-role-property-b16e902e913c7b25.yaml | 5 + requirements.txt | 2 +- setup.cfg | 2 +- 82 files changed, 2021 insertions(+), 283 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 78f7585..87ed65e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -21 +21 @@ netifaces>=0.10.4 # MIT -dogpile.cache>=0.6.2 # BSD +dogpile.cache>=0.6.2,<0.7.0 # BSD

1 0

swift 2.20.0 (stein)
by no-reply＠openstack.org 17 Dec '18

17 Dec '18

We are satisfied to announce the release of: swift 2.20.0: OpenStack Object Storage This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/swift/ For more details, please see below. 2.20.0 ^^^^^^ New Features * S3 API compatibility updates * Swift can now cache the S3 secret from Keystone to use for subsequent requests. This functionality is disabled by default but can be enabled by setting the "secret_cache_duration" in the "[filter:s3token]" section of the proxy server config to a number greater than 0. * s3api now mimics the AWS S3 behavior of periodically sending whitespace characters on a Complete Multipart Upload request to keep the connection from timing out. Note that since a request could fail after the initial 200 OK response has been sent, it is important to check the response body to determine if the request succeeded. * s3api now properly handles "x-amz-metadata-directive" headers on COPY operations. * s3api now uses concurrency (default 2) to handle multi-delete requests. This allows multi-delete requests to be processed much more quickly. * s3api now mimics some forms of AWS server-side encryption based on whether Swift's at-rest encryption functionality is enabled. Note that S3 API users are now able to know more about how the cluster is configured than they were previously, ie knowledge of encryption at-rest functionality being enabled or not. * s3api responses now include a '-' in multipart ETags. For new multipart-uploads via the S3 API, the ETag that is stored will be calculated in the same way that AWS uses. This ETag will be used in GET/HEAD responses, bucket listings, and conditional requests via the S3 API. Accessing the same object via the Swift API will use the SLO Etag; however, in JSON container listings the multipart upload etag will be exposed in a new "s3_etag" key. Previously, some S3 clients would complain about download corruption when the ETag did not have a '-'. * S3 ETag for SLOs now include a '-'. Ordinary objects in S3 use the MD5 of the object as the ETag, just like Swift. Multipart Uploads follow a different format, notably including a dash followed by the number of segments. To that end (and for S3 API requests *only*), SLO responses via the S3 API have a literal '-N' added on the end of the ETag. * The default location is now set to "us-east-1". This is more likely to be the default region that a client will try when using v4 signatures. Deployers with clusters that relied on the old implicit default location of "US" should explicitly set "location = US" in the "[filter:s3api]" section of proxy-server.conf before upgrading. * Add basic support for ?versions bucket listings. We still do not have support for toggling S3 bucket versioning, but we can at least support getting the latest versions of all objects. * Fixed an issue with SSYNC requests to ensure that only one request can be running on a partition at a time. * Data encryption updates * The "kmip_keymaster" middleware can now be configured directly in the proxy-server config file. The existing behavior of using an external config file is still supported. * Multiple keymaster middlewares are now supported. This allows migration from one key provider to another. Note that "secret_id" values must remain unique across all keymasters in a given pipeline. If they are not unique, the right- most keymaster will take precedence. When looking for the active root secret, only the right-most keymaster is used. * Prevent PyKMIP's kmip_protocol logger from logging at DEBUG. Previously, some versions of PyKMIP would include all wire data when the root logger was configured to log at DEBUG; this could expose key material in logs. Only the "kmip_keymaster" was affected. * Fixed an issue where a failed drive could prevent the container sharder from making progress. * Storage policy definitions in swift.conf can now define the diskfile to use to access objects. See the included swift.conf- sample file for a description of usage. * The EC reconstructor will now attempt to remove empty directories immediately, while the inodes are still cached, rather than waiting until the next run. * Added a "keep_idle" config option to configure KEEPIDLE time for TCP sockets. The default value is the old constant of 600. * Add "databases_per_second" to the account-replicator, container- replicator, and container-sharder. This prevents them from using a full CPU core when they are not IO limited. * Allow direct_client users to overwrite the "X-Timestamp" header. * Various other minor bug fixes and improvements. Changes in swift 2.19.0..2.20.0 ------------------------------- fbad538 authors/changelog for 2.20.0 release defae1d Fix rolling upgrade job f98d5d1 Py3: Add working tests to tox.ini 7458f23 Python3: fix test_xprofile.py b0aea93 s3 secret caching bce2ac6 Fix container sharding doc fba94b2 fix a typo in docstring f765f4b Py3: Use BytesIO when we want bytes 00be3f5 s3api: Allow concurrent multi-deletes 8e95a93 s3api: Allow some forms of server-side-encryption b7e2278 Support long-running multipart uploads 3379235 api-ref: Clean up container and object response code formatting 9ab276d Change openstack-dev to openstack-discuss c26d67e fixed _check_node() in the container sharder a883ada Py3: Replace map() with a list comprehension 014d46f Fix SSYNC concurrency on partition 333ae30 Fix in-process func tests to work with newer PasteDeploy 010cdc2 Py3: Fix test_memcache 59d66e3 Py3: fix a simple bytes vs str issue 3a51771 Py3: Use dict.items instead of dict.iteritems d75d15b Py3: We cannot use len(filter(...)) 21a3423 Py3: Fix a relative import c3cbe69 Py3: Use collections.MutableMapping rather than UserDict.DictMixin 6c8b4c8 Py3: Port test/unit/test_ringcomposer.py 9017db4 Only print "SKIPPING FUNCTIONAL TESTS ..." messages once 34aef9d Add chaging secret key for external KMS section fda3052 Multi-key KMS keymaster 4809884 Use eventlet.patcher.original to get Python select module in get_hub 42b4cdc s3api: Include '-' in S3 ETags of normal SLOs 582f058 py3: encryption follow-up 37b8146 py3: port encryption 3465d63 Add missing ws seperator between words 370f7d7 Handle non-ASCII characters in S3 v2 listings. 692a034 s3api: Change default location to us-east-1 a85dc0a update docs link address c1c65a7 Only url-quote Keys when encoding-type=url 662fd81 Fix typo c5e33b0 Fix typo a2fb335 s3api: Add basic support for ?versions bucket listings 34e48d5 Remove setup.py check from pep8 job bc4494f py3: port account/container replicators c112203 py3: Monkey-patch json.loads to accept bytes on py35 7a21272 Update min tox version to 2.3.2 887ba87 Add "historical document" note to ring background docs 3420921 Clean up HASH_PATH_* patching 11e81cf added note about double url quoting 441df4f Use correct headers in reconstructor requests e8a7729 Fix usage of multiple accounts in functional tests 06cf5d2 Add databases_per_second to db daemons 2d1c438 SSYNC: stop sharing global available_map/send_map 6b94cf2 SSYNC: Stop sharing a global response e4ad56a SSYNC: Stop sharing a global connection 46c6fab SSYNC: Remove useless self.failures in sender d306345 Remove empty directories after a revert job 1663782 Fix up the test for .ismount 654187e py3: adapt common/db_replicator.py b5a9172 Require gettext for all non-SUSE distros 0a564d8 Check for .ismount stubs with symlinks, too 3bf9f82 Reduce code duplication in SSYNC sender 781da07 Stop accomodating 5+ year old object-server code in unit tests 6676d74 py3: everything account except the real things b39d2ef Allow multiple keymasters 00f7732 Simplify the decryption of container listings 0d77486 Unify handle_get/handle_head in decrypter 28a582f py3: adapt account/backend.py and utils.py 83a7ce8 Python 3 compatibility: fix xrange/range issues b90c792 Follow up s3api ensures any string for secret as bytes string 45c840a s3api: Ensure secret is utf8 in check_signature dd49f17 Add coverage reports to py27/35/36 unit test jobs ce51893 Tighten status code assertions for object POST 78c9fd9 Change PUT bucket conflict error 4ca605c Move base64-decoding/unpickling into DatabaseBroker 6e7ca26 DB follow-up 3770f3f internal_client: Require that request_tries be positive e3a5b63 py3: Adapt db.py 5558b92 Properly handle custom metadata upon an object COPY operation 12b6d46 Prevent kmip_protocol logger from logging at DEBUG 27d8523 Give better errors for malformed credentials c90d34b py3: port tempauth c8e3b99 Enabling direct_client users to overwrite X-Timestamp 9686680 Tolerate missing containers when trying to clean up 93fb77e Ignore ENOENT and ENOTEMPTY errors in delete_partition 8c7ca01 Unquote URL before using splited parts. 36a3fee update 1space url in associated projects ae49663 py3: port internal_client ddd5cc1 py3: port direct_client b7fda3b Allow kmip_keymaster to be configured in proxy-server.conf ecebea1 s3api: Increase max body size for Delete Multiple Objects requests 050f879 Use latest eventlet in probe tests 70d31e0 set up a lower constraints job that uses an XFS tmpdir 62f8e64 Use templates for cover and lower-constraints 1b0172f py3: Port listing_formats middleware 78344bf py3: get proxy-server willing and able to respond to some API requests 904e7c9 Add more doc and test for cors_expose_headers option 5d70396 add multinode functional test to swift 0c97888 fixed a manpage and added the manpage syntax checker to pep8 jobs 2ef21ac py3: port request_helpers a7dd5f6 Replace Chinese quotes with English quotes b4567e6 py3: include test_base_storage_server cfeb32c Adding keep_idle config value to socket dbacdcf Add punch_hole utility function 1142202 py3: port list_endpoints 5a8cfd6 Add another user for s3api func tests 80001aa Add ceph-s3 test non-voting job 123f6f5 Allow EC to ignore invalid request ETag cbfa585 Refactor obj.server.ObjectController.PUT 52ecbf9 Add a chunks_finished to BaseDiskFileWriter 84b85f0 s3api: Include '-' in multipart ETags ebcc95a added some bootstrapping info to the top of the SAIO doc ce257b3 DiskFile(Writer) refactor cleanups a42c1da DiskFile(Writer) refactor cleanup for unused use_linkat 33c7650 Add writer method to DiskFile 8bc1434 Import quote directly from swift.common.utils 7914826 Let error messages to be normal strings again 560db71 Drop neutron jobs from our gate 2ae00de Add py36 test job 77734bc Disable the docs badge saying the docs aren't accurate b4be37c Remove post_as_copy deprecated warning from copy middleware b478a07 Add IPv6 DSVM tests 8cab628 remove legacy-swift-dsvm-functional jobs 1f29508 Allow for backwards compatibility with swift3. 125bb87 Remove install-guide-jobs d562659 Tighten up pep8 irrelevant-files 6f00d42 bulk: Use make_subrequest to make subrequests 85f4f94 Factor out a proper BaseKeyMaster class 1d65219 Move legacy-swift-dsvm-functional job in-tree 1e800fc switch documentation job to new PTI 90e260e import zuul job settings from project-config 9167e95 Imported Translations from Zanata df954e2 py3: port bufferedhttp (hopefully) 673fda7 Configure diskfile per storage policy e547448 Fix warning while building docs 04d3d68 minor updates to changelog and release notes ae9536e Update reno for stable/rocky dd313b8 Reference legacy-tempest-dsvm-neutron-full and neutron-grenade in-tree 2ddc979 Add irrelevant-files lists for in-tree check/gate jobs 6994a2e ratelimit: ignore requests with invalid API versions b2fbc74 Clean up comment about 404s leaking out during COPYs e9d0a7a Replacing six.iter/dict.iter usages 9295ba8 Add validation for sorting_method values 51622fd Pass empty etag override values through encrypter Diffstat (except docs and test files) ------------------------------------- .mailmap | 1 + .zuul.yaml | 281 ++++++- AUTHORS | 13 +- CHANGELOG | 108 ++- CONTRIBUTING.rst | 2 +- api-ref/source/storage-container-services.inc | 15 +- api-ref/source/storage-object-services.inc | 17 +- bindep.txt | 4 +- etc/account-server.conf-sample | 4 + etc/container-server.conf-sample | 7 + etc/object-server.conf-sample | 1 + etc/proxy-server.conf-sample | 19 +- etc/swift.conf-sample | 7 + .../notes/2_10_0_release-666a76f4975657a5.yaml | 6 +- .../notes/2_19_0_release-3e6ee3e6a1fcc6bb.yaml | 6 +- .../notes/2_20_0_release-7b090a5f4bd916e4.yaml | 116 +++ releasenotes/source/index.rst | 2 + .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 75 ++ releasenotes/source/rocky.rst | 6 + setup.cfg | 5 +- swift/__init__.py | 35 + swift/account/backend.py | 19 +- swift/account/reaper.py | 13 +- swift/account/utils.py | 2 +- swift/cli/manage_shard_ranges.py | 2 +- swift/common/bufferedhttp.py | 56 +- swift/common/constraints.py | 38 +- swift/common/db.py | 34 +- swift/common/db_replicator.py | 14 +- swift/common/direct_client.py | 55 +- swift/common/internal_client.py | 28 +- swift/common/memcached.py | 4 +- swift/common/middleware/bulk.py | 52 +- swift/common/middleware/copy.py | 20 +- swift/common/middleware/crypto/crypto_utils.py | 8 +- swift/common/middleware/crypto/decrypter.py | 123 ++-- swift/common/middleware/crypto/encrypter.py | 17 +- swift/common/middleware/crypto/keymaster.py | 216 +++--- swift/common/middleware/crypto/kmip_keymaster.py | 19 +- swift/common/middleware/crypto/kms_keymaster.py | 56 +- swift/common/middleware/listing_formats.py | 30 +- swift/common/middleware/ratelimit.py | 3 + swift/common/middleware/s3api/acl_handlers.py | 2 +- .../common/middleware/s3api/controllers/bucket.py | 125 +++- .../middleware/s3api/controllers/location.py | 2 +- .../middleware/s3api/controllers/multi_delete.py | 50 +- .../middleware/s3api/controllers/multi_upload.py | 173 +++-- swift/common/middleware/s3api/controllers/obj.py | 21 +- swift/common/middleware/s3api/etree.py | 16 +- swift/common/middleware/s3api/s3api.py | 92 ++- swift/common/middleware/s3api/s3request.py | 160 +++- swift/common/middleware/s3api/s3response.py | 47 +- swift/common/middleware/s3api/s3token.py | 182 +++-- swift/common/middleware/symlink.py | 4 +- swift/common/middleware/tempauth.py | 28 +- swift/common/middleware/x_profile/html_viewer.py | 10 +- swift/common/middleware/xprofile.py | 16 +- swift/common/request_helpers.py | 6 +- swift/common/ring/ring.py | 2 +- swift/common/storage_policy.py | 39 +- swift/common/swob.py | 8 +- swift/common/utils.py | 297 ++++++-- swift/common/wsgi.py | 10 +- swift/container/backend.py | 22 +- swift/container/reconciler.py | 8 +- swift/container/replicator.py | 5 +- swift/container/server.py | 9 +- swift/container/sharder.py | 21 +- swift/locale/en_GB/LC_MESSAGES/swift.po | 10 +- swift/locale/es/LC_MESSAGES/swift.po | 6 +- swift/locale/ja/LC_MESSAGES/swift.po | 6 +- swift/obj/diskfile.py | 234 +++--- swift/obj/mem_diskfile.py | 43 +- swift/obj/reconstructor.py | 18 +- swift/obj/replicator.py | 7 +- swift/obj/server.py | 393 ++++++---- swift/obj/ssync_receiver.py | 4 +- swift/obj/ssync_sender.py | 292 ++++---- swift/proxy/controllers/base.py | 18 +- swift/proxy/controllers/container.py | 2 +- swift/proxy/controllers/obj.py | 80 +- swift/proxy/server.py | 22 +- test/functional/__init__.py | 80 +- test/functional/s3api/s3_test_client.py | 7 +- test/functional/s3api/test_acl.py | 19 +- test/functional/s3api/test_bucket.py | 215 +++--- test/functional/s3api/test_multi_delete.py | 21 +- test/functional/s3api/test_multi_upload.py | 85 ++- test/functional/s3api/test_object.py | 29 + test/functional/swift_test_client.py | 19 +- test/functional/test_access_control.py | 4 +- test/functional/test_slo.py | 55 +- test/functional/test_symlink.py | 4 + test/functional/test_tempurl.py | 41 +- test/functional/test_versioned_writes.py | 112 +-- test/probe/test_signals.py | 18 +- test/sample.conf | 8 +- test/unit/__init__.py | 18 +- test/unit/account/test_backend.py | 37 +- test/unit/account/test_reaper.py | 6 +- test/unit/cli/test_relinker.py | 21 +- test/unit/cli/test_ringcomposer.py | 2 +- .../common/middleware/crypto/crypto_helpers.py | 14 +- .../common/middleware/crypto/test_crypto_utils.py | 199 ++--- .../common/middleware/crypto/test_decrypter.py | 272 +++---- .../common/middleware/crypto/test_encrypter.py | 201 +++-- .../common/middleware/crypto/test_encryption.py | 59 +- .../common/middleware/crypto/test_keymaster.py | 144 +++- .../middleware/crypto/test_kmip_keymaster.py | 74 +- .../common/middleware/crypto/test_kms_keymaster.py | 73 +- test/unit/common/middleware/helpers.py | 8 +- test/unit/common/middleware/s3api/__init__.py | 15 +- test/unit/common/middleware/s3api/helpers.py | 15 +- test/unit/common/middleware/s3api/test_acl.py | 4 +- test/unit/common/middleware/s3api/test_bucket.py | 209 ++++-- .../common/middleware/s3api/test_multi_delete.py | 89 ++- .../common/middleware/s3api/test_multi_upload.py | 241 +++++- test/unit/common/middleware/s3api/test_obj.py | 114 ++- test/unit/common/middleware/s3api/test_s3api.py | 285 ++++++-- .../unit/common/middleware/s3api/test_s3request.py | 83 ++- .../common/middleware/s3api/test_s3response.py | 7 +- test/unit/common/middleware/s3api/test_s3token.py | 136 ++++ test/unit/common/middleware/s3api/test_service.py | 5 +- test/unit/common/middleware/test_copy.py | 49 -- test/unit/common/middleware/test_list_endpoints.py | 31 +- .../unit/common/middleware/test_listing_formats.py | 84 +-- test/unit/common/middleware/test_memcache.py | 2 +- test/unit/common/middleware/test_ratelimit.py | 48 +- test/unit/common/middleware/test_tempauth.py | 97 ++- test/unit/common/middleware/test_xprofile.py | 6 +- test/unit/common/test_bufferedhttp.py | 37 +- test/unit/common/test_daemon.py | 4 +- test/unit/common/test_db.py | 58 +- test/unit/common/test_db_replicator.py | 8 +- test/unit/common/test_direct_client.py | 264 +++---- test/unit/common/test_internal_client.py | 206 +++--- test/unit/common/test_request_helpers.py | 57 +- test/unit/common/test_storage_policy.py | 86 ++- test/unit/common/test_utils.py | 809 ++++++++++++++------- test/unit/common/test_wsgi.py | 35 +- test/unit/container/test_replicator.py | 34 +- test/unit/container/test_sharder.py | 135 +++- test/unit/container/test_sync.py | 4 +- test/unit/container/test_updater.py | 4 +- test/unit/helpers.py | 42 +- test/unit/obj/test_auditor.py | 2 +- test/unit/obj/test_diskfile.py | 215 ++++-- test/unit/obj/test_reconstructor.py | 73 +- test/unit/obj/test_replicator.py | 4 +- test/unit/obj/test_server.py | 25 +- test/unit/obj/test_ssync.py | 13 +- test/unit/obj/test_ssync_receiver.py | 59 +- test/unit/obj/test_ssync_sender.py | 487 ++++++------- test/unit/obj/test_updater.py | 4 +- test/unit/proxy/controllers/test_info.py | 10 +- test/unit/proxy/controllers/test_obj.py | 11 + test/unit/proxy/test_server.py | 88 ++- tools/playbooks/common/cover-post.yaml | 3 + tools/playbooks/common/install_dependencies.yaml | 30 + tools/playbooks/dsvm/post.yaml | 4 + tools/playbooks/dsvm/pre.yaml | 9 + tools/playbooks/dsvm/run.yaml | 11 + tools/playbooks/multinode_setup/common_config.yaml | 75 ++ .../multinode_setup/configure_loopback.yaml | 64 ++ tools/playbooks/multinode_setup/make_rings.yaml | 126 ++++ tools/playbooks/multinode_setup/pre.yaml | 8 + tools/playbooks/multinode_setup/run.yaml | 42 ++ .../templates/make_multinode_rings.j2 | 38 + .../multinode_setup/templates/rc.local.j2 | 8 + .../multinode_setup/templates/test.conf.j2 | 122 ++++ .../install_dependencies.yaml | 24 - .../saio_single_node_setup/setup_saio.yaml | 2 +- tox.ini | 33 +- 200 files changed, 8007 insertions(+), 3563 deletions(-)

1 0

kuryr-kubernetes 0.6.0 (stein)
by no-reply＠openstack.org 17 Dec '18

17 Dec '18

We are stoked to announce the release of: kuryr-kubernetes 0.6.0: Kubernetes integration with OpenStack networking This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/kuryr-kubernetes Download the package from: https://tarballs.openstack.org/kuryr-kubernetes/ Please report issues through launchpad: https://bugs.launchpad.net/kuryr-kubernetes For more details, please see below. 0.6.0 ^^^^^ New Features ************ * Added support for using cri-o (and podman & buildah) as container engine in both container images and DevStack. Upgrade Notes ************* * Before upgrading to T (0.7.x) run "kuryr-k8s-status upgrade check" to check if upgrade is possible. In case of negative result refer to kuryr-kubernetes documentation for mitigation steps. Deprecation Notes ***************** * The scripts/run_server.py scripts gets removed as we no longer use it in DevStack plugin. Changes in kuryr-kubernetes 0.5.0..0.6.0 ---------------------------------------- 74fdd3c Ensure network policies are not applied on pod with host networking 3036950 Add support for podSelector bfbb165 Ensure kubelet pod has default connectivity with Network Policies 8f42cd8 Add support to match expressions in Network Policies 791d8dc Ensure pod_label handler skips host_network pods 344b02c Update the kuryr-kubernetes path in devstack 0c2d88d spelling error 54a221a Move job list to project-template 3da5c32 fix a typo in docstring b5c6505 devstack: move master config to separate dir 2b31921 Fix -D option on build_cni_daemonset_image a208571 Fix labels encode 300dc36 Allocate service FIP after LB was provisioned 0d4cbac Set kuryr_daemon_enabled in tempest.conf correctly 90eced9 Introduce test case document for SRIOV functionality 96e314b Ensure pod relabeling is supported by the Network Policy cbc6141 Add experimental gate with cri-o 819992f Add KURYR_ENABLED_HANDLERS to devstack sample files fce2c38 Change openstack-dev to openstack-discuss cfa2962 Debugging extra fips generation for port_pool failures 364bfa1 devstack: Update Kubernetes to 1.13.0 543b8a2 Add namespaceSelector support for NetworkPolicies 4bf6662 Add missing $ for bash variable in plugin.sh eecd44d cri-o support e4f6857 devstack: parametrize openshift version fetching 064fe74 Lowercase hostname when using it as K8s nodeName 914123d devstack: Wait for the k8s api to be healthy d029ddb Ensure existing pods use the right network policy 38f5416 Fix quota readiness check 6dfd406 Add security groups driver for NP 76db817 Support network policy update a08e8ad Remove unused functions from devstack/plugin.sh 00eacbe Fix definition of CNIRunner.get_container_id() 82e32e1 Allow UDP traffic from host when SG=namespace b215aae Add quota readiness check to controller 80fe759 Add missing ws separator between words 65e05c3 Work out situation with KUBERNETES_NODE_NAME aa5ec45 Rename kuryr-status to kuryr-k8s-status 4199205 Revert "Make LBaaS v2 gates non-voting" 5e44d17 Add missing key check while lbaas member add 88e584e Ensure floatingip information is retrieved 66757cf Delete duplicate words in network_policy.rst 3ec212a Link to public document instead of private 72b6722 Adds CRDs readiness checks to Kuryr-Controller 3a6ec33 Use show_floatingip method instead of get_floatingip 237c773 Update the HTTP links to HTTPS in manual.rstl. 63fe375 Remove hooks directory 282564e Omit the twice occured words in npwg_spec_support.rst 18e2c82 devstack: Update Kubernetes to 1.12.2 0b211cd Remove np spec from kuryrnetworkpolicy annotations a5ee0fd Ignore exc on FIP association if state is correct 1c575a2 Make sure we never have 2 kuryr-controllers 6274bad Make LBaaS v2 gates non-voting 1871596 Add HA gate 4595eec Trivial fix for network namespace doc ee626d8 Remove race between sync_pools and other pool actions a8567e9 Remove race between sync_pools and _get_port_from_pool 651da66 Ensure namespace and network policy compatibility 7381d0b Set the UDP services enabled flag at tempest.conf 2ecf343 Remove etcd_legacy f0cde86 Move KUBERNETES_NODE_NAME env var to controller 92becbd Remove kuryr-kubernetes-tempest-lbaasv2 job e176dd3 Fix tests in test_public_ip.py 8f871ee K8S-services: add support for UDP ports 6acbb7a LBaaS driver: optimize Octavia polling timers 72d2d05 Enable `--restart on-failure` for K8s containers 984e8e5 Move Python 3.6 jobs to check and gate as voting efbb344 Add `--force` to `docker rm` in DevStack plugin 9430dd5 Add missing space in debug log 4a96e1a Switch Python 3.6 job to not run pools tests 593e5a0 Fix k8s API server access on Nested deployment 51dfd98 fix tox -e debug target a25da70 Use /var/run instead of /var/run/openvswitch a85a027 Merging port pool and namespace gates 381e3ca Howto document for UDP services 3d1a37f Add missing documentation for nested deployment dcd3773 Don't quote {posargs} in tox.ini b814a12 Add NetworkPolicies resources to kuryr's CR 81b953b Add routes and multi-vif resources to Kuryr's CR 5358702 Add kuryr-status utility for upgrade-checkers d968c43 devstack: Add compatibility for newer k8s ff3d458 Fix devstack deployment when ovn-provider is selected 451add3 svc namespace isolation support for different octavia drivers 5fb232a drop reraise from the controller 402a041 Add support for pre-commit-hooks 5963d01 Add support for OVN provider in Endpoint LBaaS driver ef00f34 Drop unnecessary import 0e95704 Translate security group rules. 3d16aeb ignore Editor tags 0dd1e05 Add HOWTO for SRIOV use case 4d53db2 Add SR-IOV binding driver to CNI 8e60dcc Add SR-IOV pod vif driver 8a38f84 Add non-containerized Python 3.6 gate ed218a4 LBaaS driver: Add provider support fa927d4 cni_ds_init: exec into the main process e430665 Spec for vhost-user port type ea2323a Cleanup cni.main file 0478a47 Add container_id to connect method of BaseBindingDriver d008293 Pass sys.stdin.buffer to json.load() in Python 3 a42e63a Fix Python 3 compatiblity in K8sClient.watch() e20dcad Add support for python3 containerized kuryr-kubernetes f1db813 Add kuryr_daemon_enabled when kuryr-daemon exists 721932d Refactor DriverBase.get_instance() f854378 Remove commented code that should be deleted 783b93c Fix small typo in controller/handlers/lbaas.py 346f762 Clean up watch resources after watcher.stop() 027a17f Produce mount volume only if OVS_HOST_PATH is defined 1d5364a Health Manager details update 4465c20 Implement NP SG create/delete actions 8608966 Ensure ports pool are not duplicated with kuryr-controller HA c9f03a6 Introduce proper diver mapping in VIF handler 6183d8f Move dragonflow job to experimental 68367dc Add experimental check for NPWG multi-vif driver 11ddd78 Add interface for binding driver 810865c Verify keystone connection using token be67776 Fix typo and indents in document fd1c86f Add namespace handler in ingress gate 0c163a5 Ensure non-daemon gates run without cni daemon 9ac72c8 add python 3.6 unit test job 5174db4 switch documentation job to new PTI 9baf629 import zuul job settings from project-config 831ee03 OCP-Router - Fix Ingress controller LB listener creation eb8b411 Update reno for stable/rocky b4b2c7b Ensure OpenShift gate uses the namespace subnet/sg drivers 8e8c3fc Add a new gate for network policies e3a3359 Avoid release_vif race when using namespaces and pools b52f820 PodVIFDriver impl - fix release_vif() signature a37d999 Update links in README 5502e97 Remove the duplicated word 579cdf1 OCP-Router: fix external network bug in devstack 2301ca8 [Trivialfix]Modify a grammatical error Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .pre-commit-config.yaml | 6 + .zuul.d/base.yaml | 3 +- .zuul.d/lbaasv2.yaml | 1 + .zuul.d/multi-vif.yaml | 23 + .zuul.d/multinode.yaml | 29 +- .zuul.d/octavia.yaml | 68 ++- .zuul.d/project.yaml | 31 +- .zuul.d/sdn.yaml | 2 +- CONTRIBUTING.rst | 9 + README.rst | 6 +- cni_ds_init | 39 +- cni_py3.Dockerfile | 30 ++ controller_py3.Dockerfile | 26 ++ devstack/lib/kuryr_kubernetes | 243 +++++----- devstack/local.conf.df.sample | 25 +- devstack/local.conf.odl.sample | 20 +- devstack/local.conf.openshift.sample | 25 +- devstack/local.conf.ovn.sample | 51 ++- devstack/local.conf.sample | 30 +- devstack/plugin.sh | 472 ++++++++++++------- devstack/settings | 28 +- .../installation/multi_vif_with_npwg_spec.rst | 42 +- .../installation/testing_sriov_functional.rst | 244 ++++++++++ hooks/hook-backports.ssl_match_hostname.py | 15 - hooks/hook-dns.py | 2 - hooks/hook-kuryr_kubernetes.cni.binding.py | 9 - hooks/hook-os_vif.py | 7 - hooks/hook-pyroute2.py | 7 - hooks/hook-vif_plug_linux_bridge.py | 2 - hooks/hook-vif_plug_ovs.py | 2 - kubernetes_crds/kuryrnetpolicy.yaml | 14 + kuryr_kubernetes/cmd/status.py | 266 +++++++++++ kuryr_kubernetes/cni/api.py | 2 +- kuryr_kubernetes/cni/binding/base.py | 28 +- kuryr_kubernetes/cni/binding/bridge.py | 26 +- kuryr_kubernetes/cni/binding/nested.py | 6 +- kuryr_kubernetes/cni/binding/sriov.py | 194 ++++++++ kuryr_kubernetes/cni/daemon/service.py | 5 +- kuryr_kubernetes/cni/handlers.py | 8 +- kuryr_kubernetes/cni/health.py | 2 +- kuryr_kubernetes/cni/main.py | 19 +- kuryr_kubernetes/cni/plugins/k8s_cni_registry.py | 9 +- kuryr_kubernetes/config.py | 31 +- kuryr_kubernetes/constants.py | 12 + kuryr_kubernetes/controller/drivers/base.py | 105 ++++- .../controller/drivers/default_security_groups.py | 12 + .../controller/drivers/lb_public_ip.py | 13 +- kuryr_kubernetes/controller/drivers/lbaasv2.py | 182 ++++++-- kuryr_kubernetes/controller/drivers/multi_vif.py | 4 +- .../controller/drivers/nested_macvlan_vif.py | 2 +- .../controller/drivers/nested_vlan_vif.py | 4 +- .../controller/drivers/network_policy.py | 508 ++++++++++++++++++++- .../drivers/network_policy_security_groups.py | 176 +++++++ kuryr_kubernetes/controller/drivers/neutron_vif.py | 14 +- kuryr_kubernetes/controller/drivers/public_ip.py | 47 +- kuryr_kubernetes/controller/drivers/sriov.py | 132 ++++++ kuryr_kubernetes/controller/drivers/utils.py | 116 +++++ kuryr_kubernetes/controller/drivers/vif_pool.py | 107 ++++- kuryr_kubernetes/controller/handlers/lbaas.py | 59 ++- kuryr_kubernetes/controller/handlers/namespace.py | 49 +- kuryr_kubernetes/controller/handlers/pod_label.py | 97 ++++ kuryr_kubernetes/controller/handlers/policy.py | 69 ++- kuryr_kubernetes/controller/handlers/vif.py | 87 ++-- kuryr_kubernetes/controller/ingress/ingress_ctl.py | 16 +- kuryr_kubernetes/controller/managers/health.py | 58 ++- kuryr_kubernetes/controller/service.py | 6 + kuryr_kubernetes/handlers/health.py | 17 +- kuryr_kubernetes/handlers/retry.py | 9 +- kuryr_kubernetes/k8s_client.py | 17 +- kuryr_kubernetes/objects/lbaas.py | 6 +- kuryr_kubernetes/objects/vif.py | 12 + kuryr_kubernetes/opts.py | 7 + kuryr_kubernetes/os_vif_plug_noop.py | 20 + kuryr_kubernetes/os_vif_util.py | 34 ++ .../unit/cni/plugins/test_k8s_cni_registry.py | 9 +- .../unit/controller/drivers/test_multi_vif.py | 2 +- .../unit/controller/drivers/test_network_policy.py | 416 +++++++++++++++++ .../drivers/test_network_policy_security_groups.py | 254 +++++++++++ .../unit/controller/drivers/test_public_ip.py | 154 +++---- .../unit/controller/handlers/test_ingress_lbaas.py | 10 +- .../unit/controller/handlers/test_pod_label.py | 120 +++++ .../unit/controller/ingress/test_ingress_ctl.py | 35 +- kuryr_kubernetes/utils.py | 26 +- kuryr_kubernetes/version.py | 3 +- kuryr_kubernetes/watcher.py | 13 +- .../notes/cri-o-support-ab7e810775754ea7.yaml | 5 + .../notes/remove-run-server-aca25a2d9d723dc7.yaml | 5 + .../notes/stein-upgrade-226c8e7b735701ee.yaml | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + requirements.txt | 1 + scripts/run_server.py | 17 - setup.cfg | 10 +- tools/build_cni_daemonset_image | 69 ++- tools/gate/copy_k8s_logs.sh | 10 +- tox.ini | 10 +- 127 files changed, 6410 insertions(+), 1117 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f7df836..9a55d20 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18,0 +19 @@ os-vif!=1.8.0,>=1.7.0 # Apache-2.0 +PrettyTable<0.8,>=0.7.2 # BSD

1 0