December 2018 - Release-announce - lists.openstack.org

ironic 11.1.1 (rocky)
by no-reply＠openstack.org 21 Dec '18

21 Dec '18

We are satisfied to announce the release of: ironic 11.1.1: OpenStack Bare Metal Provisioning This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 11.1.1 ^^^^^^ New Features ************ * Setting these configuration options to 0 will disable the periodic tasks: * [conductor]sync_power_state_interval: sync power states for the nodes * [conductor]check_provision_state_interval: * check deployments and time out if the deployment takes too long * check the status of cleaning a node and time out if it takes too long * check the status of inspecting a node and time out if it takes too long * check for and handle nodes that are taken over by new conductors (if an old conductor disappeared) * [conductor]send_sensor_data_interval: send sensor data to ceilometer * [conductor]sync_local_state_interval: refresh a conductor's copy of the consistent hash ring. If any mappings have changed, determines which, if any, nodes need to be "taken over". The ensuing actions could include preparing a PXE environment, updating the DHCP server, and so on. * [oneview]periodic_check_interval: * check for nodes taken over by OneView users * check for nodes freed by OneView users Known Issues ************ * Building RAID1 is known to not work with Dell BOSS cards using **python-dracclient** 1.4.0 or earlier. Upgrade to **python- dracclient** 1.5.0 to use this feature. Upgrade Notes ************* * The "hash_ring_reset_interval" configuration option was changed from 180 to 15 seconds. Previously, this option was essentially ignored on the API side, becase the hash ring was reset on each API access. The lower value minimizes the probability of a request routed to a wrong conductor when the ring needs rebalancing. * If you are doing a minor version upgrade, please re-run the "ironic- dbsync online_data_migrations" command to properly update the versions of the Objects in the database. Otherwise, the next major upgrade may fail. Critical Issues *************** * The "ironic-dbsync online_data_migrations" command was not updating the objects to their latest versions, which could prevent upgrades from working (i.e. when running the next release's "ironic- dbsync upgrade"). Objects are updated to their latest versions now when running that command. See story 2004174 (https://storyboard.openstack.org/#!/story/2004174) for more information. Bug Fixes ********* * Fixes an issue with a baremetal node that times out during cleaning. The ironic-conductor was attempting to change the node's provision state to 'clean failed' twice, resulting in the node's "last_error" being set incorrectly. This no longer happens. For more information, see story 2004299 (https://storyboard.openstack.org/#!/story/2004299) * Fixes an issue where setting these configuration options to 0 caused a ValueError exception to be raised. You can now set them to 0 to disable the associated periodic tasks. (For more information, see story 2002059 (https://storyboard.openstack.org/#!/story/2002059).) * [conductor]sync_power_state_interval: sync power states for the nodes * [conductor]check_provision_state_interval: * check deployments and time out if the deployment takes too long * check the status of cleaning a node and time out if it takes too long * check the status of inspecting a node and time out if it takes too long * check for and handle nodes that are taken over by new conductors (if an old conductor disappeared) * [conductor]send_sensor_data_interval: send sensor data to ceilometer * [conductor]sync_local_state_interval: refresh a conductor's copy of the consistent hash ring. If any mappings have changed, determines which, if any, nodes need to be "taken over". The ensuing actions could include preparing a PXE environment, updating the DHCP server, and so on. * [oneview]periodic_check_interval: * check for nodes taken over by OneView users * check for nodes freed by OneView users * Fixes an issue where Neutron ports would be left with a baremetal MAC address associated after an instance is deleted from a baremetal host. This caused problems with MAC address conflicts in follow up deployments to the same baremetal host. bug 2004428 (https://storyboard.openstack.org/#!/story/2004428) * Fixes an issue where a flat Neutron port would be left with a host ID associated with it after an instance is deleted from a baremetal host. This caused problems with reusing the same port for a new instance as it is already bound to the old instance. * Fixes a bug where the number of CPU sockets was being returned by the "idrac" hardware type during introspection, instead of the number of virtual CPUs. See bug 2004155 (https://storyboard.openstack.org/#!/story/2004155) for details. * Fixes a race condition in the hash ring implementation that could cause an internal server error on any request. See story 2003966 (https://storyboard.openstack.org/#!/story/2003966) for details. * Properly reports an error when the image cache and the image HTTP or TFTP location are on different file system, causing hard link to fail. * Fixes an issue where iSCSI based deployments fail if the "cpu_arch" property is not specified on a node. * Fixes "redfish" hardware type to reuse HTTP session tokens when talking to BMC using session authentication. Prior to this fix "redfish" hardware type never tried to reuse session token given out by BMC during previous connection what may sometimes lead to session pool exhaustion with some BMC implementations. * Fixes an issue wherein provisioning fails if ironic node is configured with "ramdisk" deploy interface. See bug 2003532 (https://storyboard.openstack.org/#!/story/2003532) for more details. * The IPMI hardware type unconditionally instructed the BMC to not automatically clear boot flag valid bit if Chassis Control command not received within 60-second timeout (countdown restarts when a Chassis Control command is received). Some BMCs do not support setting this; if sent it causes the boot to be aborted instead. For IPMI hardware type a new driver option "node['driver_info']['ipmi_disable_boot_timeout']" can be specified. It is "True" by default; set it to "False" to bypass sending this command. See story 2004266 (https://storyboard.openstack.org/#!/story/2004266) for additional information. Changes in ironic 11.1.0..11.1.1 -------------------------------- f55ae7e [Stable Only] rename ipmi_disable_timeout to ipmi_disable_boot_timeout ff62296 Cap the maximum microversion for stable/rocky bf05501 Avoid cpu_arch None values in iscsi deployments 357375f Ensure we unbind flat network ports and clear BM mac addresses 1980d32 Add ipmi_disable_timeout to avoid problematic IPMI command 6550d48 Don't fail when node is in CLEANFAIL state d156ad3 Increase RAM for the ironic node in UEFI job 6ff4419 Improve logs when hard linking images fails 2fbe323 Reuse Redfish sessions b389cb4 Fix CPU count returned by introspection in Ironic iDRAC driver 47fc51d Migration step to update objects to latest version 4763762 Fixes a race condition in the hash ring code 931e97b Disable periodic tasks if interval set to 0 021e631 Add admin documentation for rescue mode in iLO driver 4167083 Add admin documentation for rescue interface 9b0d5fe Remove wrong install-guide-jobs in zuul setup f1e7f95 Add a more detailed release note for Dell BOSS RAID1 fix 65ab326 Fix provisioning failure with `ramdisk` deploy interface 377a4ab import zuul job settings from project-config 068e23e Update UPPER_CONSTRAINTS_FILE for stable/rocky a0686d5 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../source/samples/driver-property-response.json | 1 + devstack/lib/ironic | 2 +- ironic/cmd/dbsync.py | 5 + ironic/common/hash_ring.py | 34 +++++- ironic/common/neutron.py | 35 ++++++- ironic/conductor/manager.py | 34 ++++-- ironic/conductor/rpcapi.py | 13 ++- ironic/conductor/utils.py | 8 +- ironic/conf/conductor.py | 10 +- ironic/conf/default.py | 6 +- ironic/conf/drac.py | 1 + ironic/db/api.py | 15 +++ ironic/db/sqlalchemy/api.py | 80 ++++++++++++++ ironic/drivers/modules/drac/inspect.py | 15 ++- ironic/drivers/modules/image_cache.py | 11 ++ ironic/drivers/modules/ipmitool.py | 35 +++++-- ironic/drivers/modules/iscsi_deploy.py | 7 +- ironic/drivers/modules/network/common.py | 1 + ironic/drivers/modules/network/flat.py | 67 ++++++++++-- ironic/drivers/modules/oneview/deploy.py | 6 +- ironic/drivers/modules/pxe.py | 69 ++++++------ ironic/drivers/modules/redfish/utils.py | 57 ++++++++-- .../unit/drivers/modules/drac/test_inspect.py | 24 ++++- .../unit/drivers/modules/network/test_flat.py | 81 +++++++++++--- .../unit/drivers/modules/network/test_neutron.py | 10 +- .../unit/drivers/modules/redfish/test_utils.py | 64 +++++++++++- .../unit/drivers/modules/test_agent_base_vendor.py | 17 +-- .../unit/drivers/modules/test_iscsi_deploy.py | 9 ++ .../cleanwait_timeout_fail-4323ba7d4d4da3e6.yaml | 8 ++ .../notes/dell-boss-raid1-ec33e5b9c59d4021.yaml | 6 ++ .../disable_periodic_tasks-0ea39fa7a8a108c6.yaml | 49 +++++++++ ...-flat-vifs-and-clear-macs-34eec149618e5964.yaml | 13 +++ .../notes/fix-cpu-count-8904a4e1a24456f4.yaml | 7 ++ .../notes/hash-ring-race-da0d584de1f46788.yaml | 13 +++ ...invalid_cross_device_link-7ecf3543a8ada09f.yaml | 5 + .../iscsi-optional-cpu-arch-ebf6a90dde34172c.yaml | 6 ++ ...migration_update_versions-ea03aff12d9c036f.yaml | 13 +++ .../persist-redfish-sessions-d521a0846fa45c40.yaml | 8 ++ .../notes/ramdisk-boot-fails-4e8286e6a4e0dfb6.yaml | 7 ++ .../notes/story-2004266-4725d327900850bf.yaml | 13 +++ tox.ini | 10 +- zuul.d/ironic-jobs.yaml | 1 + zuul.d/project.yaml | 12 +++ 57 files changed, 1217 insertions(+), 167 deletions(-)

1 0

ironic 9.1.6 (pike)
by no-reply＠openstack.org 20 Dec '18

20 Dec '18

We are ecstatic to announce the release of: ironic 9.1.6: OpenStack Bare Metal Provisioning This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: https://bugs.launchpad.net/ironic For more details, please see below. 9.1.6 ^^^^^ Bug Fixes * Fixes an issue that caused the integrated Dell Remote Access Controller (iDRAC) "management" hardware interface implementation, "idrac", to fail to boot nodes in Unified Extensible Firmware Interface (UEFI) boot mode. That interface is supported by the "idrac" hardware type. The issue is resolved for Dell EMC PowerEdge 13th and 14th generation servers. It is not resolved for PowerEdge 12th generation and earlier servers. For more information, see story 1656841 (https://storyboard.openstack.org/#!/story/1656841) * Fixes an issue seen during node tear down where a port being deleted by the Bare Metal service could be deleted by the Compute service, leading to an unhandled error from the Networking service. See story 2002637 for further details. Changes in ironic 9.1.5..9.1.6 ------------------------------ f261743 Remove wrong install-guide-jobs in zuul setup a58d295 import zuul job settings from project-config 6222091 Fix iDRAC hardware type does not work with UEFI 909cdce Fix error when deleting a non-existent port Diffstat (except docs and test files) ------------------------------------- ironic/common/neutron.py | 3 + ironic/drivers/modules/drac/management.py | 172 ++++++++++-- .../unit/drivers/modules/drac/test_management.py | 304 +++++++++++++++++++-- .../idrac-uefi-boot-mode-86f4694b4247a1ca.yaml | 11 + .../notes/story-2002637-4825d60b096e475b.yaml | 7 + zuul.d/project.yaml | 12 + 7 files changed, 486 insertions(+), 35 deletions(-)

1 0

ironic 10.1.7 (queens)
by no-reply＠openstack.org 20 Dec '18

20 Dec '18

We are delighted to announce the release of: ironic 10.1.7: OpenStack Bare Metal Provisioning This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: https://bugs.launchpad.net/ironic For more details, please see below. 10.1.7 ^^^^^^ Upgrade Notes ************* * The "hash_ring_reset_interval" configuration option was changed from 180 to 15 seconds. Previously, this option was essentially ignored on the API side, becase the hash ring was reset on each API access. The lower value minimizes the probability of a request routed to a wrong conductor when the ring needs rebalancing. * If you are doing a minor version upgrade, please re-run the "ironic- dbsync online_data_migrations" command to properly update the versions of the Objects in the database. Otherwise, the next major upgrade may fail. Critical Issues *************** * The "ironic-dbsync online_data_migrations" command was not updating the objects to their latest versions, which could prevent upgrades from working (i.e. when running the next release's "ironic- dbsync upgrade"). Objects are updated to their latest versions now when running that command. See story 2004174 (https://storyboard.openstack.org/#!/story/2004174) for more information. Bug Fixes ********* * Fixes an issue with a baremetal node that times out during cleaning. The ironic-conductor was attempting to change the node's provision state to 'clean failed' twice, resulting in the node's "last_error" being set incorrectly. This no longer happens. For more information, see story 2004299 (https://storyboard.openstack.org/#!/story/2004299) * Fixes an issue where Neutron ports would be left with a baremetal MAC address associated after an instance is deleted from a baremetal host. This caused problems with MAC address conflicts in follow up deployments to the same baremetal host. bug 2004428 (https://storyboard.openstack.org/#!/story/2004428) * Fixes an issue where a flat Neutron port would be left with a host ID associated with it after an instance is deleted from a baremetal host. This caused problems with reusing the same port for a new instance as it is already bound to the old instance. * Fixes a bug where the number of CPU sockets was being returned by the "idrac" hardware type during introspection, instead of the number of virtual CPUs. See bug 2004155 (https://storyboard.openstack.org/#!/story/2004155) for details. * Fixes a race condition in the hash ring implementation that could cause an internal server error on any request. See story 2003966 (https://storyboard.openstack.org/#!/story/2003966) for details. * Properly reports an error when the image cache and the image HTTP or TFTP location are on different file system, causing hard link to fail. * Fixes "redfish" hardware type to reuse HTTP session tokens when talking to BMC using session authentication. Prior to this fix "redfish" hardware type never tried to reuse session token given out by BMC during previous connection what may sometimes lead to session pool exhaustion with some BMC implementations. Changes in ironic 10.1.6..10.1.7 -------------------------------- 7586681 Ensure we unbind flat network ports and clear BM mac addresses 162e5f3 Don't fail when node is in CLEANFAIL state 4573cfb Improve logs when hard linking images fails 50ee1a4 Reuse Redfish sessions 410f73e Fix CPU count returned by introspection in Ironic iDRAC driver a1c8f31 Migration step to update objects to latest version d8e09ae Fixes a race condition in the hash ring code cb02c676 Remove wrong install-guide-jobs in zuul setup Diffstat (except docs and test files) ------------------------------------- ironic/cmd/dbsync.py | 5 + ironic/common/hash_ring.py | 33 +++++- ironic/common/neutron.py | 35 ++++++- ironic/conductor/rpcapi.py | 14 ++- ironic/conductor/utils.py | 8 +- ironic/conf/default.py | 6 +- ironic/db/api.py | 15 +++ ironic/db/sqlalchemy/api.py | 80 ++++++++++++++ ironic/drivers/modules/drac/inspect.py | 15 ++- ironic/drivers/modules/image_cache.py | 11 ++ ironic/drivers/modules/network/common.py | 1 + ironic/drivers/modules/network/flat.py | 67 ++++++++++-- ironic/drivers/modules/redfish/utils.py | 57 ++++++++-- .../unit/drivers/modules/drac/test_inspect.py | 24 ++++- .../unit/drivers/modules/network/test_flat.py | 81 ++++++++++++--- .../unit/drivers/modules/network/test_neutron.py | 10 +- .../unit/drivers/modules/redfish/test_utils.py | 64 +++++++++++- .../unit/drivers/modules/test_agent_base_vendor.py | 17 +-- .../cleanwait_timeout_fail-4323ba7d4d4da3e6.yaml | 8 ++ ...-flat-vifs-and-clear-macs-34eec149618e5964.yaml | 13 +++ .../notes/fix-cpu-count-8904a4e1a24456f4.yaml | 7 ++ .../notes/hash-ring-race-da0d584de1f46788.yaml | 13 +++ ...invalid_cross_device_link-7ecf3543a8ada09f.yaml | 5 + ...migration_update_versions-ea03aff12d9c036f.yaml | 13 +++ .../persist-redfish-sessions-d521a0846fa45c40.yaml | 8 ++ zuul.d/project.yaml | 1 - 32 files changed, 782 insertions(+), 104 deletions(-)

1 0

openstacksdk 0.22.0 (stein)
by no-reply＠openstack.org 20 Dec '18

20 Dec '18

We are ecstatic to announce the release of: openstacksdk 0.22.0: An SDK for building applications to work with OpenStack This release is part of the stein release series. Download the package from: https://pypi.org/project/openstacksdk For more details, please see below. 0.22.0 ^^^^^^ Bug Fixes * Fixed a regression with sub-dicts of server objects were not usable with object notation. Changes in openstacksdk 0.21.0..0.22.0 -------------------------------------- 5d7e149 Properly munch for resource sub-dicts c71acc6 Turn off unneeded devstack services ca2045b Import code for building ironic-compatible configdrives dd482fe Adds kwargs support when creating a Neutron subnet 9675c1f Fix dogpile.cache 0.7.0 interaction 1bceca8 Change openstack-dev to openstack-discuss Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 ++ CONTRIBUTING.rst | 2 +- README.rst | 2 +- openstack/baremetal/configdrive.py | 116 +++++++++++++++++++++ openstack/baremetal/v1/_proxy.py | 3 +- openstack/baremetal/v1/node.py | 3 +- openstack/cloud/_normalize.py | 19 +++- openstack/cloud/_utils.py | 15 ++- openstack/cloud/openstackcloud.py | 14 ++- openstack/resource.py | 28 +++-- .../notes/munch-sub-dict-e1619c71c26879cb.yaml | 5 + 16 files changed, 341 insertions(+), 24 deletions(-)

1 0

nova 17.0.9 (queens)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are overjoyed to announce the release of: nova 17.0.9: Cloud computing fabric controller This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 17.0.9 ^^^^^^ Bug Fixes * When testing whether direct IO is possible on the backing storage for an instance, Nova now uses a block size of 4096 bytes instead of 512 bytes, avoiding issues when the underlying block device has sectors larger than 512 bytes. See bug https://launchpad.net/bugs/1801702 for details. Changes in nova 17.0.8..17.0.9 ------------------------------ 33dc9f7 Add secret=true to fixed_key configuration parameter 3dd42c2 Create BDMs/tags in cell with instance when over-quota e1f0866 Make the nova-next job voting and gating 3f37d0b Add functional regression test for bug 1806064 8bba879 compute: Ensure pre-migrating instances are destroyed during init_host d9084d0 Add regression test for bug #1764883 35923d5 Test websocketproxy with TLS in the nova-next job 1190e60 Move the nova-next job in-tree and update it 61bf7ae Default embedded instance.flavor.is_public attribute f8eb8a7 Make supports_direct_io work on 4096b sector size 346c8fe De-dupe subnet IDs when calling neutron /subnets API 62fbfdf Fix NoneType error in _notify_volume_usage_detach 4b53e4e Ensure attachment cleanup on failure in driver.pre_live_migration 6b065da Move live_migration.pre.start to the start of the method 4f3610b Fix up compute rpcapi version for pike release 3a0f26c conductor: Recreate volume attachments during a reschedule 51345d5 Add regression test for bug#1784353 6fa5aee fixtures: Track volume attachments within CinderFixtureNewAttachFlow fbf729d Add regression test for bug 1797580 53f9c8e Handle volume API failure in _post_live_migration 164b1ba Handle missing marker during online data migration 4ac57b5 Not set instance to ERROR if set_admin_password failed 0163783 Ignore VirtDriverNotReady in _sync_power_states periodic task 7c46bd3 Fix stacktraces with redis caching backend 1b2c748 Refix disk size during live migration with disk over-commit Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 14 ++ nova/compute/manager.py | 167 +++++++++++++-------- nova/compute/rpcapi.py | 8 +- nova/conductor/manager.py | 48 +++++- nova/conf/key_manager.py | 1 + nova/consoleauth/manager.py | 3 +- nova/network/neutronv2/api.py | 2 +- nova/objects/instance.py | 20 +-- nova/objects/request_spec.py | 18 ++- .../functional/compute/test_live_migration.py | 148 ++++++++++++++++++ .../functional/regressions/test_bug_1404867.py | 6 +- .../functional/regressions/test_bug_1675570.py | 6 +- .../functional/regressions/test_bug_1764883.py | 123 +++++++++++++++ .../functional/regressions/test_bug_1784353.py | 90 +++++++++++ .../functional/regressions/test_bug_1797580.py | 99 ++++++++++++ .../functional/regressions/test_bug_1806064.py | 140 +++++++++++++++++ nova/utils.py | 4 +- nova/virt/driver.py | 7 + nova/virt/libvirt/driver.py | 2 +- playbooks/legacy/nova-next/post.yaml | 15 ++ playbooks/legacy/nova-next/run.yaml | 69 +++++++++ .../notes/bug-1801702-c8203d3d55007deb.yaml | 8 + 32 files changed, 1294 insertions(+), 152 deletions(-)

1 0

ironic 12.0.0 (stein)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are glad to announce the release of: ironic 12.0.0: OpenStack Bare Metal Provisioning This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 12.0.0 ^^^^^^ Prelude ******* The OpenStack Bare Metal as a Service team announces the release of ironic version 12.0 which introduces a number of new features as part of the Stein development cycle. * Per-node automated cleaning control * Redfish out-of-band introspection * Redfish BIOS configuration management * Support for direct image downloads from the conductor host. * Support for validating the enhanced image checksums introduced in the Image service in Rocky. * Dedicated "ipxe" boot interface enabling better co-existence of different hardware types. * Configurable "disk_erasure_concurrency" to speed disk cleaning. * Configurable "protected" nodes to help prevent accidential actions upon critical nodes. And many many bug fixes, Enjoy! New Features ************ * Adds the "[redfish]auth_type" ironic configuration option for the "redfish" hardware type that is used to choose one of the following authentication methods:: "basic", "session" and "auto". The "auto" setting first tries "session" method and falls back to "basic" if session authentication is not supported by the Redfish BMC. The default is "auto". This configuration option can be overridden on a per-node basis by the "driver_info/redfish_auth_type" option. * Adds out-of-band inspection support to "redfish" hardware type'. Successful inspection populates mandatory properties: "cpus", "local_gb", "cpu_arch", "memory_mb" and creates ironic ports for inspected nodes. * Allows enabling automated cleaning per node if it is disabled globally. A new "automated_clean" field has been created on the node object, allowing to control the individual automated cleaning of nodes. When automated cleaning is disabled at global level, but enabled at node level, the automated cleaning will be performed only on those nodes. The new field is accessible starting with the API version 1.47. * Adds a new configuration option "[iscsi]conv_flags", that specifies the conversion options to pass to the "dd" utility when copying an image. For example, passing "sparse" may result in less network traffic for large whole disk images. * Adds support for booting a ramdisk using virtual media to "ilo- virtual-media" boot interface when an ironic node is configured with "ramdisk" deploy interface. * Adds the ability to provision with "direct" deploy interface and custom HTTP service running at ironic conductor node. A new configuration option "[agent]image_download_source" is introduced. When set to "swift", the "direct" deploy interface uses tempurl generated via the Object service as the source of instance image during provisioning, this is the default configuration. When set to "http", the "direct" deploy interface downloads instance image from the Image service, and caches the image in the ironic conductor node. The cached instance images are referenced by symbolic links located at subdirectory "[deploy]http_image_subdir" under path "[deploy]http_root". The custom HTTP server running at ironic conductor node is supposed to be configured properly to make IPA has unauthenticated access to image URL described above. * Setting these configuration options to 0 will disable the periodic tasks: * [conductor]sync_power_state_interval: sync power states for the nodes * [conductor]check_provision_state_interval: * check deployments and time out if the deployment takes too long * check the status of cleaning a node and time out if it takes too long * check the status of inspecting a node and time out if it takes too long * check for and handle nodes that are taken over by new conductors (if an old conductor disappeared) * [conductor]send_sensor_data_interval: send sensor data to ceilometer * [conductor]sync_local_state_interval: refresh a conductor's copy of the consistent hash ring. If any mappings have changed, determines which, if any, nodes need to be "taken over". The ensuing actions could include preparing a PXE environment, updating the DHCP server, and so on. * [oneview]periodic_check_interval: * check for nodes taken over by OneView users * check for nodes freed by OneView users * In accordance with the multihash support (https://specs.openstack.org/openstack/glance- specs/specs/rocky/approved/glance/multihash.html) provided by glance, ironic now supports using the new "os_hash_algo" and "os_hash_value" fields to computes and validates image checksum when deploying instance images by the "direct" deploy interface. * Adds support to retrieve the information of conductors known by ironic: * a new endpoint "GET /v1/conductors" for listing conductor resources. * a new endpoint "GET /v1/conductors/{hostname}" for showing a conductor resource. Adds a read-only "conductor" field to the Node, which represents the conductor currently servicing a node, and can be retrieved from following node endpoints: * "GET /v1/nodes?detail=true" or "GET /v1/nodes/detail" * "GET /v1/nodes/<node_ident>" * "POST /v1/nodes" * "PATCH /v1/nodes/<node_ident>" * Adds support for the injection of Non-Masking Interrupts (NMI) to "ilo" management interface. This is supported on HPE ProLiant Gen9 and Gen10 servers. * Adds support for "soft power off" and "soft reboot" operations to "ilo" power interface. * Adds a configuration option "[ipmi]disable_boot_timeout" which is used to set the default behavior whether ironic should send a raw IPMI command to disable timeout. This configuration option can be overidden by the per-node option "ipmi_disable_boot_timeout" in node's "driver_info" field. See story 2004266 (https://storyboard.openstack.org/#!/story/2004266) and Story 2002977 (https://storyboard.openstack.org/#!/story/2002977) for additional information. * Adds an "ipxe" boot interface which allows for instance level iPXE enablement as opposed to conductor-wide enablement of iPXE. * New framework for "ironic-status upgrade check" command is added. This framework allows adding various checks which can be run before a Ironic upgrade to ensure if the upgrade can be performed safely. * Adds a configuration option "[deploy]disk_erasure_concurrency" to define the target pool size used by Ironic Python Agent ramdisk to erase disk devices. The number of threads created by IPA to erase disk devices is the minimum value of target pool size and the number of disks to be erased. This feature can greatly reduce the operation time for baremetals with multiple disks. For the backwards compatibility, the default value is 1. * It is now possible to protect a provisioned node from being undeployed, rebuilt or deleted by setting the new "protected" field to "True". The new "protected_reason" field can be used to document the reason the node was made protected. * Adds "bios" interface to the "redfish" hardware type. * Allows streaming raw partition images to the ramdisk when using the "direct" deploy interface. Requires **ironic-python-agent** from the Stein release series. Known Issues ************ * Building RAID1 is known to not work with Dell BOSS cards using **python-dracclient** 1.4.0 or earlier. Upgrade to **python- dracclient** 1.5.0 to use this feature. * Support for IPv6 and iPXE is restricted and is unlikely to work in default scenarios and configurations without external intervention. This is due to the way DHCPv6 and dnsmasq operate. At present this issue is being tracked in story 2005402 (https://storyboard.openstack.org/#!/story/2004502) Upgrade Notes ************* * The "hash_ring_reset_interval" configuration option was changed from 180 to 15 seconds. Previously, this option was essentially ignored on the API side, becase the hash ring was reset on each API access. The lower value minimizes the probability of a request routed to a wrong conductor when the ring needs rebalancing. * Deployments utilizing iPXE should consider use of the "ipxe" boot interface as opposed to the "pxe" boot interface. iPXE functionality in the "pxe" boot interface is deprecated and will be removed during the U* development cycle. * Operator can now use new CLI tool "ironic-status upgrade check" to check if Ironic deployment can be safely upgraded from N-1 to N release. * Support for using the Image API v1 was removed. It was removed from Glance in the Rocky release. * The deprecated option "[glance]glance_api_version" was removed. Only v2 is now used. * If you are doing a minor version upgrade, please re-run the "ironic- dbsync online_data_migrations" command to properly update the versions of the Objects in the database. Otherwise, the next major upgrade may fail. * The deprecated configuration option "[conductor]inspect_timeout" was removed, please use "[conductor]inspect_wait_timeout" instead. * A future release will change the default value of "[deploy]/default_boot_mode" from "bios" to "uefi". It is recommended to set an explicit value for this option. For hardware types which don't support setting boot mode, a future release will assume boot mode is set to UEFI if no boot mode is set to node's capabilities. It is also recommended to set "boot_mode" into "properties/capabilities" of a node. Deprecation Notes ***************** * The "[ilo]/power_retry" config is deprecated and will be removed in the future release. Please use "[conductor]/soft_power_off_timeout" instead. * The "[pxe]ipxe_enabled" configuration option has been deprecated in preference for the "ipxe" boot interface. The configuration option will be removed during the U* development cycle. * Support for iPXE in the "pxe" boot interface has been deprecated, and will be removed during the U* development cycle. The "ipxe" boot interface should be used instead. * Using the "fake" management interface with the "manual-management" hardware type is deprecated, please use "noop" instead. Existing nodes will have to be updated after the upgrade. * The "xclarity" hardware type, which was previously deprecated, is no longer deprecated. Lenovo has instituted third-party CI which is a requirement for a driver to remain in-tree. Critical Issues *************** * The "ironic-dbsync online_data_migrations" command was not updating the objects to their latest versions, which could prevent upgrades from working (i.e. when running the next release's "ironic- dbsync upgrade"). Objects are updated to their latest versions now when running that command. See story 2004174 (https://storyboard.openstack.org/#!/story/2004174) for more information. Bug Fixes ********* * Fixes the bug in executing asynchronous BIOS interface clean step by honoring the state returned by the BIOS interface clean step which was ignored earlier. * Fixes a misunderstanding in how DHCPv6 booting of machines operates in that only a URL to the boot loader is expected in that case, as opposed to traditional TFTP parameters. Now a URL is sent to the client in the form of "tftp://<tftp_address>/<tftp_path>/<boot_file>". See story 1744620 (https://storyboard.openstack.org/#!/story/1744620) for more information. * Fixes a bug that a node's "console_enabled" is reset to "False" at undeploying the node, which requires an operator to set it to "True" before deploying again. By this fix, while the console is stopped at tearing down, "console_enabled" remains "True". When the node is deployed again, the console is started automatically. * Fixes an issue with a baremetal node that times out during cleaning. The ironic-conductor was attempting to change the node's provision state to 'clean failed' twice, resulting in the node's "last_error" being set incorrectly. This no longer happens. For more information, see story 2004299 (https://storyboard.openstack.org/#!/story/2004299) * Fixes an issue where setting these configuration options to 0 caused a ValueError exception to be raised. You can now set them to 0 to disable the associated periodic tasks. (For more information, see story 2002059 (https://storyboard.openstack.org/#!/story/2002059).) * [conductor]sync_power_state_interval: sync power states for the nodes * [conductor]check_provision_state_interval: * check deployments and time out if the deployment takes too long * check the status of cleaning a node and time out if it takes too long * check the status of inspecting a node and time out if it takes too long * check for and handle nodes that are taken over by new conductors (if an old conductor disappeared) * [conductor]send_sensor_data_interval: send sensor data to ceilometer * [conductor]sync_local_state_interval: refresh a conductor's copy of the consistent hash ring. If any mappings have changed, determines which, if any, nodes need to be "taken over". The ensuing actions could include preparing a PXE environment, updating the DHCP server, and so on. * [oneview]periodic_check_interval: * check for nodes taken over by OneView users * check for nodes freed by OneView users * Fixes an issue where Neutron ports would be left with a baremetal MAC address associated after an instance is deleted from a baremetal host. This caused problems with MAC address conflicts in follow up deployments to the same baremetal host. bug 2004428 (https://storyboard.openstack.org/#!/story/2004428) * Fixes an issue where a flat Neutron port would be left with a host ID associated with it after an instance is deleted from a baremetal host. This caused problems with reusing the same port for a new instance as it is already bound to the old instance. * Fixes the URL generation with TFTP URLs does not account for IPv6 addresses needing to be wrapped in '[]' in order to be parsed. * Fixes DHCP option parameter generation to correctly return the proper values for IPv6 based booting when iPXE is in use. * Fixes a bug where the number of CPU sockets was being returned by the "idrac" hardware type during introspection, instead of the number of virtual CPUs. See bug 2004155 (https://storyboard.openstack.org/#!/story/2004155) for details. * Fixes an issue where the master instance image cache could not be disabled. The configuration option "[pxe]/instance_master_path" may now be set to the empty string to disable the cache. * Fixes an issue introduced during the Stein development cycle in an attempt to fix IPv6 support where the networking service was also prepending the DHCP option indicator to the number. A fix has been been submitted to the Networking service to address this issue, and the prepending code has been removed from ironic. See story 2004501 (https://storyboard.openstack.org/#!/story/2004501) for more information. * Fixes an issue with the "irmc" hardware type failing to create a boot image via the "irmc-virtual-media" boot interface. See story 2003338 (https://storyboard.openstack.org/#!/story/2003338) for more information. * Fixes an issue where the pagination marker was not being set if "uuid" was not in the list of requested fields when executing a list query. The affected API endpoints were: port, portgroup, volume_target, volume_connector, node and chassis. See story 2003192 for more details (https://storyboard.openstack.org/#!/story/2003192) * Kill "ipmitool" process invoked by ironic to read node's power state if "ipmitool" process does not exit after configured timeout expires. It appears pretty common for "ipmitool" to run for five minutes (with current ironic defauls) once it hits a non-responsive bare metal node. This could slow down the management of other nodes due periodic tasks slots exhaustion. The new behaviour could is enabled by default, but could be disabled via the "[ipmi]kill_on_timeout" ironic configuration option. * Fixes a race condition in the hash ring implementation that could cause an internal server error on any request. See story 2003966 (https://storyboard.openstack.org/#!/story/2003966) for details. * The bare metal API no longer returns HTML as part of the "error_message" field in error responses when no "Accept" header is provided. * Properly reports an error when the image cache and the image HTTP or TFTP location are on different file system, causing hard link to fail. * Adds "command_timeout" and "max_command_attempts" configuration options to IPA, so when connection errors occur the command will be executed again. The options are located in the "[agent]" section. * The ironic-python-agent (https://git.openstack.org/cgit/openstack /ironic-python-agent) version 3.5.0 contains a fix that allows multi-device objects to be selected as a root disk. These devices MAY be created automatically in the case of some ATARAID controllers with pre-existing configuration, or via the actions of a custom hardware manager. Operators who require this functionality are encouraged to ensure that their deployment ramdisks are up to date. See story 2003445 (https://storyboard.openstack.org/#!/story/2003445) for more information. * Fixes an issue where iSCSI based deployments fail if the "cpu_arch" property is not specified on a node. * The "manual-management" hardware type now defaults to the "noop" management interface. Unlike the "fake" management interface, it does not fail on attempt to set the boot device to the local disk. * Fixes "redfish" hardware type to reuse HTTP session tokens when talking to BMC using session authentication. Prior to this fix "redfish" hardware type never tried to reuse session token given out by BMC during previous connection what may sometimes lead to session pool exhaustion with some BMC implementations. * Prevents deletion of ports for active nodes. It is still possible to delete them after putting the node in the maintenance mode. * Fixes an issue wherein provisioning fails if ironic node is configured with "ramdisk" deploy interface. See bug 2003532 (https://storyboard.openstack.org/#!/story/2003532) for more details. * Fixes a locking issue where "ipmitool-shellinabox" console interface users may encounter a situation where the bare metal node is locked until the conductor is restarted. See story 1587313 (https://storyboard.openstack.org/#!/story/1587313) for additional information. * The IPMI hardware type unconditionally instructed the BMC to not automatically clear boot flag valid bit if Chassis Control command not received within 60-second timeout (countdown restarts when a Chassis Control command is received). Some BMCs do not support setting this; if sent it causes the boot to be aborted instead. For IPMI hardware type a new driver option "node['driver_info']['ipmi_disable_boot_timeout']" can be specified. It is "True" by default; set it to "False" to bypass sending this command. See story 2004266 (https://storyboard.openstack.org/#!/story/2004266) for additional information. * Fixes a bug where ironic port is not updated in node introspection as per PXE enabled setting for "idrac" hardware type. See bug 2004340 (https://storyboard.openstack.org/#!/story/2004340) for details. * Adds the version discovery information to the versioned API endpoint ("/v1"). This allows *keystoneauth* version discovery to work on this endpoint. Other Notes *********** * The support for returning "INSPECTING" state from "InspectInterface.inspect_hardware" was removed. For asynchronous inspection, please return "INSPECTWAIT" instead of "INSPECTING", otherwise the node will be moved to "inspect failed" state. * The "oneview" hardware type and related interfaces have been removed due to a lack of maintainer and 3rd-party CI. Please see story 2001924 (https://storyboard.openstack.org/#!/story/2001924) for additional information. * Removes Vagrant files and the information in documentation since the files were too outdated. This would lead to errors if developers tried to set up an environment with Vagrant. * The "xclarity" hardware type is no longer deprecated as Lenovo has implemented third-party CI to enable testing. Changes in ironic 11.1.0..12.0.0 -------------------------------- d379357 Introduce configuration option [ipmi]ipmi_disable_timeout b686182 Enroll XClarity machines in Ironic's devstack setting 3aaead7 spelling error 987d330 api-ref: update node.resource_class description 1ba41f6 Add a note regarding IPA multidevice fix 0498e29 Allow disabling instance image cache 8f06369 Add a prelude for ironic 12.0 8370907 Set proper version numbering 2f99152 Change multinode jobs to default to local boot ce71948 Follow-up Retries and timeout for IPA command 582e119 Fix "import xxx as xxx" grammar 9efb9e3 Kill misbehaving `ipmitool` process 2b74d94 Fix OOB introspection to use pxe_enabled flag in idrac driver 59b5b66 Add configurable Redfish client authentication 7c7744d Expose conductors: api 0256e1e Fix node exclusive lock not released on console start/restart. 7870883 Fix IPv6 Option Passing 360dafe Let neutron regenerate mac on port unbind 74ea2bd Slim down grenade jobs a90bdb1 Extend job build timeout eace34a Mark several tests to not test cleaning 9880262 Add BIOS interface to Redfish hardware type 9298c2d Avoid cpu_arch None values in iscsi deployments e2a768f Expose conductors: db and rpc 2344bb5 Fix Chinese quotes eb29465 Add ipmi_disable_timeout to avoid problematic IPMI command f526c03 Correct author email address db16984 Ensure we unbind flat network ports and clear BM mac addresses a2cffd8 Retries and timeout for IPA command 68d62f2 Support for protecting nodes from undeploying and rebuilding 0909509 Add download link apache configuration with mod_wsgi b754025 spelling error 53fc7fb Add Redfish inspect interface follow up 1aecb07 Add the noop management interface to the manual-management hardware type 644f6e2 Add missing ws separator between words c67b46e Switch ironic-tempest-...-tinyipa-multinode to zuulv3 440f53f Add a non-voting bifrost job to ironic 6389ad2 Increase RAM for the ironic node in UEFI job 6350954 Reuse Redfish sessions follow up 46a5899 Improve logs when hard linking images fails 78ae60f Don't fail when node is in CLEANFAIL state f6bd23e Fix ipv6 URL formatting for pxe/iPXE dd95650 Fix redfish test_get_system_resource_not_found test e841488 Improve sushy mocks 60767ae Recommend to set boot mode explicitly 41d3356 Add Redfish inspect interface 3e1fe5f Fix CPU count returned by introspection in Ironic iDRAC driver 1f1a2c3 Add ironic-status upgrade check command framework a83f13b Passing thread pool size to IPA for parallel erasure 84b94ee Change BFV job to use ipxe interface 55ac08a [devstack] Allow setting TFTP max blocksize 8a64d03 Reuse Redfish sessions b8d0f2b Migration step to update objects to latest version 38f6fff Cleanup of remaining pxe focused is_ipxe_enabled 1a4fdc4 Remove the xclarity deprecation 7995ac8 Follow-up to fix not exist deploy image of patch 592247 c28429c Remove pywsman reference 90d58ed Fix DHCPv6 support a77abba Revert "Add openstack/placement as a required project for ironic-grenade*" d269c47 Add api-ref for conductor group 016b7dd Fix ironic developer quickstart document 93670fe Add note to pxe configuration doc 5cb45a1 Create base pxe class 9ccfc31 Wrap up PXE private method to pxe_utils move 11811f2 Enhanced checksum support f532ec4 Enable configuration of conversion flags for iscsi e411297 Document how to implement a new deploy step 7543614 Refactor API code for checking microversions 1c5f9ae Allow streaming raw partition images 7a551c4 Remove Vagrant c787f68 ipxe boot interface abb0865 Remove oneview drivers fe94fb1 Completely remove support for deprecated Glance V1 223a246 Avoid race with nova on power sync and rescue ca80af2 Doc: Adds cinder as a service requires creds 38f13b6 Fix unit test run on OS X 5471157 Fixes a race condition in the hash ring code f11c949 Add automated_clean field to the API 37c9211 Stop console at tearing down without unsetting console_enabled 869b86e Add functionality for individual cleaning on nodes e25dfdc Documentation for 'ramdisk' deploy with 'ilo-virtual-media' boot 36adaa4 Add documentation for soft power for ilo hardware type b38c46f Add documentation for 'inject nmi' for ilo hardware type a00ebf4 Remove unnecessary checks in periodic task methods e6a15bd Remove token expiration f4fc39d Adds support for soft power operations to 'ilo' power interface e1272cb Add openstack/placement as a required project for ironic-grenade* 7b02130 Remove tox checkconfig 3387c9c Add admin documentation for rescue mode in iLO driver 8f2d758 Correct headings in README.rst 8a75ebf Minor fixes for docs on changing hardware types 545b4fd Add admin documentation for rescue interface 642dedf pxe/ipxe: Move common calls out pxe.py f34799b Switch ironic-tempest-dsvm-functional-python3 to zuulv3 86e9c7e Switch ironic-tempest-dsvm-functional-python2 to zuulv3 eabc48a Switch grenade nic driver to e1000 e63360c Remove ironic experimental jobs 1ba142a Restore the nova-api redirect edd0ff7 Update docs to portgroup with creating windows images 788690d Use templates for cover and lower-constraints 816ff1d Remove wrong install-guide-jobs in zuul setup 9b9f31c Fix grenade tests 2106385 Add a more detailed release note for Dell BOSS RAID1 fix 85b0d3e Honors return value from BIOS interface cleansteps 87502af Reuse checksum calculation from oslo 9ce6e55 Adds support for 'ramdisk' deploy with 'ilo-virtual-media' boot 3907f8a Remove inspecting state support from inspect_hardware 9d0c7ce Adds support for 'Inject NMI' to 'ilo' management interface bdebd56 Docs for agent http provisioning 02a3e77 Ensure pagination marker is always set bd82ead Direct deploy serve HTTP images from conductor 17c3de3 Fix doc builds for ironic 3749cd6 Fix async keyword for Python 3.7 199e490 Add vendor step placement suggestion be09169 Prevent HTML from appearing in API error messages c823572 Replace assertRaisesRegexp with assertRaisesRegex 1f03a57 Add version discovery information to the /v1 endpoint 5ffffd2 Replace assertRaisesRegexp with assertRaisesRegex 9911293 Fix provisioning failure with `ramdisk` deploy interface 1dabeb2 Minor fixes to contributor vision 94f0ced Add automated_clean field f021922 Use HostAddressOpt for opts that accept IP and hostnames ca32dd4 Remove the duplicated word dffb38c add python 3.6 unit test job 938a197 switch documentation job to new PTI 2731d47 import zuul job settings from project-config b79eecf Prevents deletion of ports for active nodes f39aae0 Disable periodic tasks if interval set to 0 f409a86 Reformat instructions related with various OS 6c751ff Imported Translations from Zanata 951e673 Add conductor_group docs 9a01311 Switch ironic-tempest-dsvm-ironic-inspector too zuulv3 e1ab512 Switch ironic-tempest-dsvm-bfv too zuulv3 fd6406f A minor update to documentation of `ilo` hardware type 26fcaac Imported Translations from Zanata 306d966 Update reno for stable/rocky 546a115 Fix not exist deploy image within irmc-virtual-media booting 54c508a Follow-up to always link MAC address files 0d3751d A vision 3530316 Don't handle warnings as errors 4969c33 update "auth_url" in documents Diffstat (except docs and test files) ------------------------------------- README.rst | 14 +- Vagrantfile | 31 - api-ref/source/baremetal-api-v1-nodes.inc | 39 +- api-ref/source/parameters.yaml | 40 +- .../source/samples/driver-property-response.json | 1 + api-ref/source/samples/node-create-response.json | 3 + api-ref/source/samples/node-show-response.json | 3 + .../samples/node-update-driver-info-response.json | 3 + .../samples/nodes-list-details-response.json | 6 + devstack/files/apache-ironic-api-redirect.template | 5 +- devstack/lib/ironic | 66 +- .../tools/ironic/templates/tftpd-xinetd.template | 2 +- devstack/upgrade/settings | 6 +- devstack/upgrade/upgrade.sh | 9 +- .../include/configure-ironic-api-mod_wsgi.inc | 60 +- .../install/include/configure-ironic-api.inc | 11 +- .../install/include/configure-ironic-conductor.inc | 12 +- driver-requirements.txt | 7 +- ironic/api/controllers/root.py | 54 +- ironic/api/controllers/v1/__init__.py | 19 + ironic/api/controllers/v1/chassis.py | 45 +- ironic/api/controllers/v1/collection.py | 6 +- ironic/api/controllers/v1/conductor.py | 251 ++++++ ironic/api/controllers/v1/node.py | 388 ++++----- ironic/api/controllers/v1/notification_utils.py | 8 +- ironic/api/controllers/v1/port.py | 63 +- ironic/api/controllers/v1/portgroup.py | 52 +- ironic/api/controllers/v1/utils.py | 121 +-- ironic/api/controllers/v1/versions.py | 7 +- ironic/api/controllers/v1/volume_connector.py | 48 +- ironic/api/controllers/v1/volume_target.py | 46 +- ironic/api/controllers/version.py | 65 ++ ironic/api/middleware/parsable_error.py | 5 + ironic/cmd/dbsync.py | 5 + ironic/cmd/status.py | 54 ++ ironic/common/cinder.py | 63 +- ironic/common/exception.py | 14 +- ironic/common/glance_service/base_image_service.py | 15 +- ironic/common/glance_service/service.py | 45 - ironic/common/glance_service/service_utils.py | 67 +- ironic/common/glance_service/v1/__init__.py | 0 ironic/common/glance_service/v1/image_service.py | 28 - ironic/common/glance_service/v2/image_service.py | 4 +- ironic/common/hash_ring.py | 34 +- ironic/common/image_service.py | 22 +- ironic/common/images.py | 30 +- ironic/common/neutron.py | 42 +- ironic/common/policy.py | 12 +- ironic/common/pxe_utils.py | 656 +++++++++++++-- ironic/common/release_mappings.py | 4 +- ironic/common/utils.py | 26 +- ironic/conductor/manager.py | 167 +++- ironic/conductor/rpcapi.py | 32 +- ironic/conductor/utils.py | 16 +- ironic/conf/__init__.py | 2 - ironic/conf/agent.py | 21 + ironic/conf/api.py | 7 +- ironic/conf/conductor.py | 11 +- ironic/conf/console.py | 4 + ironic/conf/default.py | 6 +- ironic/conf/deploy.py | 25 +- ironic/conf/drac.py | 1 + ironic/conf/glance.py | 6 - ironic/conf/ilo.py | 4 + ironic/conf/ipmi.py | 14 + ironic/conf/iscsi.py | 5 + ironic/conf/oneview.py | 50 -- ironic/conf/opts.py | 1 - ironic/conf/pxe.py | 14 +- ironic/conf/redfish.py | 18 +- ironic/db/api.py | 36 +- .../93706939026c_add_node_protected_field.py | 33 + .../d2b036ae9378_add_automated_clean_field.py | 31 + ironic/db/sqlalchemy/api.py | 94 ++- ironic/db/sqlalchemy/models.py | 6 +- ironic/drivers/base.py | 38 +- ironic/drivers/generic.py | 6 +- ironic/drivers/modules/agent.py | 64 +- ironic/drivers/modules/agent_client.py | 10 +- ironic/drivers/modules/boot_mode_utils.py | 29 + ironic/drivers/modules/console_utils.py | 54 +- ironic/drivers/modules/deploy_utils.py | 243 +++++- ironic/drivers/modules/drac/bios.py | 57 +- ironic/drivers/modules/drac/inspect.py | 68 +- ironic/drivers/modules/fake.py | 4 + ironic/drivers/modules/ilo/boot.py | 40 +- ironic/drivers/modules/ilo/common.py | 89 +- ironic/drivers/modules/ilo/inspect.py | 30 +- ironic/drivers/modules/ilo/management.py | 26 + ironic/drivers/modules/ilo/power.py | 182 +++- ironic/drivers/modules/image_cache.py | 22 +- ironic/drivers/modules/inspect_utils.py | 51 ++ ironic/drivers/modules/ipmitool.py | 97 ++- ironic/drivers/modules/ipxe.py | 292 +++++++ ironic/drivers/modules/irmc/boot.py | 41 +- ironic/drivers/modules/iscsi_deploy.py | 157 ++-- ironic/drivers/modules/network/common.py | 11 +- ironic/drivers/modules/network/flat.py | 67 +- ironic/drivers/modules/oneview/__init__.py | 0 ironic/drivers/modules/oneview/common.py | 553 ------------ ironic/drivers/modules/oneview/deploy.py | 300 ------- ironic/drivers/modules/oneview/deploy_utils.py | 384 --------- ironic/drivers/modules/oneview/inspect.py | 100 --- ironic/drivers/modules/oneview/management.py | 325 -------- ironic/drivers/modules/oneview/power.py | 224 ----- ironic/drivers/modules/pxe.py | 544 ++---------- ironic/drivers/modules/pxe_base.py | 95 +++ ironic/drivers/modules/redfish/bios.py | 283 +++++++ ironic/drivers/modules/redfish/inspect.py | 196 +++++ ironic/drivers/modules/redfish/utils.py | 103 ++- ironic/drivers/modules/snmp.py | 2 +- ironic/drivers/modules/storage/cinder.py | 10 +- ironic/drivers/modules/storage/external.py | 6 +- ironic/drivers/modules/xclarity/management.py | 9 - ironic/drivers/modules/xclarity/power.py | 9 - ironic/drivers/oneview.py | 58 -- ironic/drivers/redfish.py | 15 + ironic/drivers/xclarity.py | 9 - ironic/objects/conductor.py | 26 +- ironic/objects/node.py | 103 +-- .../unit/api/controllers/v1/test_conductor.py | 231 ++++++ .../unit/api/controllers/v1/test_portgroup.py | 23 +- .../api/controllers/v1/test_volume_connector.py | 19 + .../unit/api/controllers/v1/test_volume_target.py | 17 + .../unit/drivers/modules/drac/test_inspect.py | 126 ++- .../unit/drivers/modules/ilo/test_management.py | 34 + .../unit/drivers/modules/network/test_flat.py | 81 +- .../unit/drivers/modules/network/test_neutron.py | 10 +- .../unit/drivers/modules/oneview/test_common.py | 406 --------- .../unit/drivers/modules/oneview/test_deploy.py | 456 ---------- .../drivers/modules/oneview/test_deploy_utils.py | 327 -------- .../unit/drivers/modules/oneview/test_inspect.py | 51 -- .../drivers/modules/oneview/test_management.py | 365 -------- .../unit/drivers/modules/oneview/test_power.py | 308 ------- .../unit/drivers/modules/redfish/test_bios.py | 226 +++++ .../unit/drivers/modules/redfish/test_inspect.py | 189 +++++ .../drivers/modules/redfish/test_management.py | 29 +- .../unit/drivers/modules/redfish/test_power.py | 20 +- .../unit/drivers/modules/redfish/test_utils.py | 171 +++- .../unit/drivers/modules/test_agent_base_vendor.py | 17 +- .../unit/drivers/modules/test_agent_client.py | 86 +- .../unit/drivers/modules/test_boot_mode_utils.py | 55 ++ .../unit/drivers/modules/test_console_utils.py | 30 +- .../unit/drivers/modules/test_deploy_utils.py | 268 +++++- .../unit/drivers/modules/test_inspect_utils.py | 65 ++ .../unit/drivers/modules/test_iscsi_deploy.py | 56 +- .../unit/drivers/third_party_driver_mock_specs.py | 46 +- lower-constraints.txt | 3 +- playbooks/ci-workarounds/etc-neutron.yaml | 9 + playbooks/ci-workarounds/set-stack-key.yaml | 13 + .../run.yaml | 6 +- playbooks/legacy/grenade-dsvm-ironic/run.yaml | 8 +- playbooks/legacy/ironic-dsvm-functional/run.yaml | 42 - playbooks/legacy/tempest-dsvm-ironic-bfv/run.yaml | 90 -- .../run.yaml | 106 --- .../run.yaml | 81 -- .../legacy/tempest-dsvm-ironic-inspector/run.yaml | 85 -- .../run.yaml | 109 --- .../legacy/tempest-dsvm-ironic-parallel/run.yaml | 34 - .../tempest-dsvm-ironic-pxe_ipa-full/run.yaml | 80 -- .../add-redfish-auth-type-5fe78071b528e53b.yaml | 10 + ...redfish-inspect-interface-1577e70167f24ae4.yaml | 7 + ...add_automated_clean_field-b3e7d56f4aeaf512.yaml | 10 + ...dd_conversion_flags_iscsi-d7f846803a647573.yaml | 7 + ...ace-support-to-ilo-vmedia-1a7228a834465633.yaml | 6 + .../agent-http-provisioning-d116b3ff36669d16.yaml | 15 + .../async_bios_clean_step-7348efff3f6d02c1.yaml | 6 + .../notes/boot-from-url-98d21670e726c518.yaml | 9 + .../notes/bug-2003972-dae9b7d0f6180339.yaml | 8 + .../cleanwait_timeout_fail-4323ba7d4d4da3e6.yaml | 8 + .../notes/dell-boss-raid1-ec33e5b9c59d4021.yaml | 6 + .../disable_periodic_tasks-0ea39fa7a8a108c6.yaml | 49 ++ .../notes/enhanced-checksum-f5a2b7aa8632b88f.yaml | 7 + ...-flat-vifs-and-clear-macs-34eec149618e5964.yaml | 13 + .../notes/expose-conductor-d13c9c4ef9d9de86.yaml | 18 + .../fix-boot-url-for-v6-802abde9de8ba455.yaml | 8 + .../notes/fix-cpu-count-8904a4e1a24456f4.yaml | 7 + ...stance-master-path-config-fa524c907a7888e5.yaml | 6 + .../fix-ipv6-option6-tag-549093681dcf940c.yaml | 16 + ...ist-deploy-image-for-irmc-cb82c6e0b52b8a9a.yaml | 7 + ...r-with-custom-field-query-65ca29001a03e036.yaml | 8 + ...out-hung-ipmitool-process-519c7567bcbaa882.yaml | 11 + .../notes/hash-ring-race-da0d584de1f46788.yaml | 13 + .../notes/html-errors-27579342e7e8183b.yaml | 5 + .../notes/ilo-inject-nmi-f487db8c3bfd08ea.yaml | 6 + ...ilo-soft-power-operations-eaef33a3ff56b047.yaml | 10 + ...invalid_cross_device_link-7ecf3543a8ada09f.yaml | 5 + ...mmand-retries-and-timeout-29b0be3f2c21328c.yaml | 6 + ...mi-disable-timeout-option-e730362007f9bedd.yaml | 11 + ...e-boot-interface-addition-faacb344a72389f2.yaml | 20 + .../notes/ironic-11-prelude-6dae469633823f8d.yaml | 2 +- .../ironic-12.0-prelude-9dd8e80a1a3e8f60.yaml | 19 + ...hon-agent-multidevice-fix-3daa0760696b46b7.yaml | 12 + ...s-upgrade-check-framework-9cd216ddf3afb271.yaml | 11 + .../iscsi-optional-cpu-arch-ebf6a90dde34172c.yaml | 6 + .../notes/no-glance-v1-d249e8079f46f40c.yaml | 8 + releasenotes/notes/noop-mgmt-a4b1a248492c7638.yaml | 11 + ...migration_update_versions-ea03aff12d9c036f.yaml | 13 + .../notes/parallel-erasure-1943da9b53a2095d.yaml | 9 + .../persist-redfish-sessions-d521a0846fa45c40.yaml | 8 + .../notes/port_delete-6628b736a1b556f6.yaml | 5 + releasenotes/notes/protected-650acb2c8a387e17.yaml | 7 + .../notes/ramdisk-boot-fails-4e8286e6a4e0dfb6.yaml | 7 + .../redfish-bios-interface-a1acd8122c896a38.yaml | 3 + ...-inspecting-state-support-10325bdcdd182079.yaml | 9 + .../notes/remove-oneview-9315c7b926fd4aa2.yaml | 7 + .../notes/remove_vagrant-4472cedd0284557c.yaml | 6 + .../shellinabox-locking-fix-2fae2a451a8a489a.yaml | 8 + .../notes/story-2004266-4725d327900850bf.yaml | 13 + ...treaming-partition-images-d58fe619658b066e.yaml | 6 + .../notes/uefi-first-prepare-e7fa1e2a78b4af99.yaml | 10 + .../undeprecate-xclarity-4f4752017e8310e7.yaml | 10 + .../update-port-pxe-enabled-f954f934209cbf5b.yaml | 7 + .../notes/v1-discovery-4311398040581fe8.yaml | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 218 ++++- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 126 ++- releasenotes/source/rocky.rst | 6 + requirements.txt | 3 +- setup.cfg | 12 +- tools/config/check_uptodate.sh | 28 - tools/link_aggregation_on_windows.ps1 | 40 + tox.ini | 9 +- vagrant.yaml | 159 ---- zuul.d/ironic-jobs.yaml | 265 +++++- zuul.d/legacy-ironic-jobs.yaml | 71 -- zuul.d/project.yaml | 31 +- 299 files changed, 11741 insertions(+), 8720 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index e8cb3f3..5ee2943 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -10,4 +10 @@ python-ironic-inspector-client>=1.5.0 -python-oneviewclient<3.0.0,>=2.5.2 -python-scciclient>=0.7.2 -python-ilorest-library>=2.1.0 -hpOneView>=4.4.0 +python-scciclient>=0.8.0 @@ -22 +19 @@ ImcSdk>=0.7.2 -sushy +sushy>=1.6.0 diff --git a/requirements.txt b/requirements.txt index a566689..0bcdf48 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ keystoneauth1>=3.4.0 # Apache-2.0 -ironic-lib>=2.14.0 # Apache-2.0 +ironic-lib>=2.15.0 # Apache-2.0 @@ -30,0 +31 @@ oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 +oslo.upgradecheck>=0.1.0 # Apache-2.0

1 0

nova 16.1.7 (pike)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We eagerly announce the release of: nova 16.1.7: Cloud computing fabric controller This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 16.1.7 ^^^^^^ Bug Fixes * When testing whether direct IO is possible on the backing storage for an instance, Nova now uses a block size of 4096 bytes instead of 512 bytes, avoiding issues when the underlying block device has sectors larger than 512 bytes. See bug https://launchpad.net/bugs/1801702 for details. Changes in nova 16.1.6..16.1.7 ------------------------------ 44e2ecd Add secret=true to fixed_key configuration parameter 1abdb4c compute: Ensure pre-migrating instances are destroyed during init_host 6380226 Add regression test for bug #1764883 c5cd6c8 Update docs for _destroy_evacuated_instances ba844f2 Make supports_direct_io work on 4096b sector size d004b0e Fix NoneType error in _notify_volume_usage_detach 28bc3c8 Handle volume API failure in _post_live_migration 0bd38db Enforce case-sensitive hostnames in aggregate host add c5cae2f Revert "Make host_aggregate_map dictionary case-insensitive" 1a26663 Make scheduler.utils.setup_instance_group query all cells aa1966a Add functional test for affinity with multiple cells 3bae260 Fix the request context in ServiceFixture 5ddcda0 Consider hostdev devices when building metadata 2460d0e Refactor _build_device_metadata 0b45fcd Handle HostMappingNotFound when deleting a compute service Diffstat (except docs and test files) ------------------------------------- nova/api/openstack/compute/services.py | 10 +- nova/compute/api.py | 13 ++- nova/compute/manager.py | 51 +++++++-- nova/conf/key_manager.py | 1 + nova/objects/instance_group.py | 8 ++ nova/scheduler/host_manager.py | 6 +- nova/scheduler/utils.py | 54 ++++++++- nova/test.py | 3 +- .../functional/compute/test_live_migration.py | 98 ++++++++++++++++ .../functional/regressions/test_bug_1764883.py | 123 ++++++++++++++++++++ .../unit/api/openstack/compute/test_services.py | 33 ++++++ nova/virt/driver.py | 7 ++ nova/virt/libvirt/driver.py | 124 ++++++++++++++++----- .../notes/bug-1801702-c8203d3d55007deb.yaml | 8 ++ 24 files changed, 691 insertions(+), 74 deletions(-)

1 0

nova 17.0.8 (queens)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are psyched to announce the release of: nova 17.0.8: Cloud computing fabric controller This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 17.0.8 ^^^^^^ Bug Fixes * A change has been introduced in the libvirt driver to correctly handle IPv6 addresses for live migration. Changes in nova 17.0.6..17.0.8 ------------------------------ 0c9bd9c stable-only: fix typo in IVS related privsep method d8b99f0 nova-manage - fix online_data_migrations counts 2e3912b Skip more rebuild tests for cells v1 job 7bd6220 Skip ServerShowV247Test.test_update_rebuild_list_server in nova-cells-v1 job 9a72b72 Skip ServerShowV254Test.test_rebuild_server in cells v1 job 22197f3 Enforce case-sensitive hostnames in aggregate host add 329780e Revert "Make host_aggregate_map dictionary case-insensitive" c223869 Skip ServerActionsTestJSON.test_rebuild_server for cells v1 job 72d2e82 nova-status - don't count deleted compute_nodes d01336a Filter deleted computes from get_all_by_uuids() b588057 libvirt: Use os.stat and os.path.getsize for RAW disk inspection 105dbbc Add tempest-slow job to run the tempest slow tests 551a7a4 libvirt: Always escape IPv6 addresses when used in migration URI d085c8f libvirt: Reduce calls to qemu-img during update_available_resource 3b17251 Fix service list for disabled compute using MC driver f2d2a9a Update RequestSpec.flavor on resize_revert 5a960e0 cover migration cases with functional tests 4472c11 Follow devstack-plugin-ceph job rename 6a806de Fix nova-status "_check_resource_providers" check Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 36 +++- devstack/tempest-dsvm-cells-rc | 10 + nova/cmd/manage.py | 14 +- nova/cmd/status.py | 10 +- nova/compute/api.py | 28 ++- nova/objects/compute_node.py | 3 +- nova/privsep/libvirt.py | 5 +- nova/scheduler/host_manager.py | 6 +- nova/servicegroup/drivers/mc.py | 6 +- .../unit/servicegroup/test_mc_servicegroup.py | 10 + nova/virt/disk/api.py | 9 + nova/virt/libvirt/driver.py | 54 +++--- ...t_fix_ipv6_live_migration-bbcde8f3b7d17921.yaml | 4 + 21 files changed, 512 insertions(+), 193 deletions(-)

1 0

octavia 3.0.2 (rocky)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We contentedly announce the release of: octavia 3.0.2: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the rocky stable release series. Download the package from: https://pypi.org/project/octavia For more details, please see below. 3.0.2 ^^^^^ Upgrade Notes ************* * To resolve the IPv6 VIP issues on active/standby load balancers you need to build a new amphora image. Security Issues *************** * Fixed a debug level logging of Amphora certificates for flows such as 'octavia-create-amp-for-lb-subflow-octavia-generate-serverpem' (triggered with loadbalancer failover) and 'octavia-create-amp-for- lb-subflow-octavia-update-cert-expiration'. Bug Fixes ********* * Fixes issues using IPv6 VIP addresses with load balancers configured for active/standby topology. This fix requires a new amphora image to be built. * Add new parameters to specify the number of threads for updating amphora health and stats. * This will automatically nova delete zombie amphora when they are detected by Octavia. Zombie amphorae are amphorae which report health messages but appear DELETED in Octavia's database. Other Notes *********** * Processing zombie amphora is already expensive and this adds another step which could increase the load on Octavia Health Manager, especially during Nova API slowness. Changes in octavia 3.0.1..3.0.2 ------------------------------- ec4c88e Stop Logging Amphora Cert d560ef4 Bring up secondary IPs on member networks e2b7f01 Fix IPv6 in Active/Standby topology ddb948a Separate the thread pool for health and stats update a38bc49 Fix VIP plug failure if netns directory exists 256a1c1 Log the compute ID when nova fails bcad29b Ensure pool object contains the listener_id if passed 94533e5 Delete zombie amphorae when detected Diffstat (except docs and test files) ------------------------------------- .../post-install.d/20-haproxy-tune-kernel | 1 + .../post-install.d/11-ip6-tables | 11 +++ etc/octavia.conf | 8 +- octavia/amphorae/backends/agent/agent_jinja_cfg.py | 3 +- .../backends/agent/api_server/keepalived.py | 8 +- .../amphorae/backends/agent/api_server/listener.py | 1 - .../amphorae/backends/agent/api_server/osutils.py | 46 ++++++---- octavia/amphorae/backends/agent/api_server/plug.py | 10 +-- .../api_server/templates/plug_vip_ethX.conf.j2 | 25 +++++- .../api_server/templates/rh_route_ethX.conf.j2 | 2 + .../agent/templates/amphora_agent_conf.template | 3 + octavia/amphorae/drivers/health/heartbeat_udp.py | 10 ++- .../amphorae/drivers/keepalived/jinja/jinja_cfg.py | 26 +++++- .../jinja/templates/keepalived_base.template | 11 ++- .../drivers/keepalived/vrrp_rest_driver.py | 10 ++- octavia/cmd/health_manager.py | 3 +- octavia/common/config.py | 13 +++ octavia/common/exceptions.py | 2 +- .../healthmanager/health_drivers/update_db.py | 26 +++++- octavia/controller/worker/controller_worker.py | 7 +- octavia/controller/worker/flows/amphora_flows.py | 3 +- .../worker/tasks/amphora_driver_tasks.py | 5 +- octavia/controller/worker/tasks/compute_tasks.py | 2 +- octavia/db/repositories.py | 7 ++ .../backend/agent/api_server/test_server.py | 81 +++++++++-------- .../backends/agent/api_server/test_plug.py | 100 ++++++++++++++++++++- .../backends/agent/test_agent_jinja_cfg.py | 12 ++- .../amphorae/drivers/health/test_heartbeat_udp.py | 16 ++-- .../drivers/keepalived/jinja/test_jinja_cfg.py | 73 ++++++++++++++- .../drivers/keepalived/test_vrrp_rest_driver.py | 10 ++- .../healthmanager/health_drivers/test_update_db.py | 11 +++ .../controller/worker/flows/test_amphora_flows.py | 2 +- .../worker/tasks/test_amphora_driver_tasks.py | 6 +- .../fix_active_standby_ipv6-0317d5cd9e5d50e5.yaml | 10 +++ ...l-for-health-stats-update-c263c844075a7721.yaml | 5 ++ ...stop-logging-amphora-cert-2e188675699d60d5.yaml | 7 ++ .../notes/zombie_amp-1b435eb66643dab8.yaml | 12 +++ 37 files changed, 477 insertions(+), 111 deletions(-)

1 0

octavia 2.0.3 (queens)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are chuffed to announce the release of: octavia 2.0.3: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the queens stable release series. Download the package from: https://pypi.org/project/octavia For more details, please see below. 2.0.3 ^^^^^ Known Issues ************ * Octavia Queens release was released with insufficient lower constraints for Jinja2 and pyOpenSSL requirements. Please make sure your environment can install Jinja2>=2.10 and pyOpenSSL>=17.1.0. Security Issues *************** * Fixed a debug level logging of Amphora certificates for flows such as 'octavia-create-amp-for-lb-subflow-octavia-generate-serverpem' (triggered with loadbalancer failover) and 'octavia-create-amp-for- lb-subflow-octavia-update-cert-expiration'. Bug Fixes ********* * Fixed an issue when Octavia cannot reach the database (all database instances are down) bringing down all running loadbalancers. The Health Manager is more resilient to DB outages now. * Add new parameters to specify the number of threads for updating amphora health and stats. * This will automatically nova delete zombie amphora when they are detected by Octavia. Zombie amphorae are amphorae which report health messages but appear DELETED in Octavia's database. Other Notes *********** * Processing zombie amphora is already expensive and this adds another step which could increase the load on Octavia Health Manager, especially during Nova API slowness. Changes in octavia 2.0.2..2.0.3 ------------------------------- 2bd9b68 Stop Logging Amphora Cert 8149aca Bring up secondary IPs on member networks a33e2e0 Separate the thread pool for health and stats update aa4f3ab Fix the version discovery document 9d5f833 Fix VIP plug failure if netns directory exists 50d0135 Log the compute ID when nova fails 344a995 Delete zombie amphorae when detected e04ddb3 Add note to lower constraints for Jinja and pyOpenSSL 2f3bb0b Validate member address for batch update members 37c86aa Make health checks resilient to DB outages cee582e Add octavia-tempest-plugin jobs to stable/queens 5957498 Validate member address for lb graph creation c60b198 Update zuul/projects.yaml 95361c4 Fix passphrase None errors 2e5cad7 import zuul job settings from project-config ccdc03d Fix a no-op network driver bug on plug_port Diffstat (except docs and test files) ------------------------------------- etc/octavia.conf | 8 +- .../amphorae/backends/agent/api_server/osutils.py | 16 ++-- octavia/amphorae/drivers/health/heartbeat_udp.py | 10 ++- octavia/api/root_controller.py | 57 +++++++++----- octavia/api/v2/controllers/member.py | 1 + octavia/api/v2/controllers/pool.py | 2 + octavia/certificates/generator/local.py | 3 +- octavia/cmd/health_manager.py | 3 +- octavia/common/config.py | 13 ++++ octavia/common/exceptions.py | 2 +- .../healthmanager/health_drivers/update_db.py | 26 ++++++- octavia/controller/healthmanager/health_manager.py | 17 ++++- octavia/controller/worker/controller_worker.py | 7 +- octavia/controller/worker/tasks/compute_tasks.py | 2 +- octavia/db/api.py | 21 ++++++ octavia/network/base.py | 4 +- octavia/network/drivers/noop_driver/driver.py | 14 ++-- .../backends/agent/api_server/test_plug.py | 86 +++++++++++++++++++++- .../amphorae/drivers/health/test_heartbeat_udp.py | 16 ++-- .../unit/certificates/generator/test_local.py | 45 +++++++++++ .../healthmanager/health_drivers/test_update_db.py | 11 +++ .../healthmanager/test_health_manager.py | 10 ++- .../network/drivers/test_network_noop_driver.py | 7 +- ...s-for-jinja-and-pyopenssl-1e5d556745e48fa1.yaml | 6 ++ ...ix-health-check-db-outage-279b0bc1d0039312.yaml | 6 ++ ...l-for-health-stats-update-c263c844075a7721.yaml | 5 ++ ...stop-logging-amphora-cert-2e188675699d60d5.yaml | 7 ++ .../notes/zombie_amp-1b435eb66643dab8.yaml | 12 +++ zuul.d/jobs.yaml | 8 -- zuul.d/projects.yaml | 43 ++++++----- 33 files changed, 419 insertions(+), 94 deletions(-)

1 0

nova 18.1.0 (rocky)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are amped to announce the release of: nova 18.1.0: Cloud computing fabric controller This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 18.1.0 ^^^^^^ Upgrade Notes ************* * The "nova-manage db online_data_migrations" command now returns exit status 2 in the case where some migrations failed (raised exceptions) and no others were completed successfully from the last batch attempted. This should be considered a fatal condition that requires intervention. Exit status 1 will be returned in the case where the "--max-count" option was used and some migrations failed but others succeeded (updated at least one row), because more work may remain for the non-failing migrations, and their completion may be a dependency for the failing ones. The command should be reiterated while it returns exit status 1, and considered completed successfully only when it returns exit status 0. Bug Fixes ********* * The "long_rpc_timeout" configuration option is now used for the RPC call to the scheduler to select a host. This is in order to avoid a timeout when scheduling multiple servers in a single request and/or when the scheduler needs to process a large number of hosts. * A new "[workarounds]/report_ironic_standard_resource_class_inventory" configuration option has been added. Starting in the 16.0.0 Pike release, ironic nodes can be scheduled using custom resource classes rather than the standard resource classes VCPU, MEMORY_MB and DISK_GB: https://docs.openstack.org/ironic/rocky/install/configure-nova- flavors.html However, existing ironic instances require a data migration which can be achieved either by restarting "nova-compute" services managing ironic nodes or running "nova-manage db ironic_flavor_migration". The completion of the data migration can be checked by running the "nova-status upgrade check" command and checking the "Ironic Flavor Migration" result. Once all data migrations are complete, you can set this option to False to stop reporting VCPU, MEMORY_MB and DISK_GB resource class inventory to the Placement service so that scheduling will only rely on the custom resource class for each ironic node, as described in the document above. Note that this option does not apply starting in the 19.0.0 Stein release since the ironic compute driver no longer reports standard resource class inventory regardless of configuration. Alternatives to this workaround would be unsetting "memory_mb" and/or "vcpus" properties from ironic nodes, or using host aggregates to segregate VM from BM compute hosts and restrict flavors to those aggregates, but those alternatives might not be feasible at large scale. See related bug https://bugs.launchpad.net/nova/+bug/1796920 for more details. * When testing whether direct IO is possible on the backing storage for an instance, Nova now uses a block size of 4096 bytes instead of 512 bytes, avoiding issues when the underlying block device has sectors larger than 512 bytes. See bug https://launchpad.net/bugs/1801702 for details. * The "os-simple-tenant-usage" pagination has been fixed. In some cases, nova usage-list would have returned incorrect results because of this. See bug https://launchpad.net/bugs/1796689 for details. Changes in nova 18.0.3..18.1.0 ------------------------------ 25dc6a4 Remove GROUP BY clause from CellMapping.get_by_project_id 7ef3304 Add secret=true to fixed_key configuration parameter cbb9eb5 Handle tags in _bury_in_cell0 58d3ac0 Only warn about not having computes nodes once in rpcapi bbc431f Ignore MoxStubout deprecation warnings 3028d25 Create BDMs/tags in cell with instance when over-quota 5b7e904 Add functional regression test for bug 1806064 899b4ca Note the aggregate allocation ratio restriction in scheduler docs 0208d64 Fix InstanceNotFound during _destroy_evacuated_instances 83d74db Add functional regression test for bug 1794996 7e6375c Add a bug tag for nova doc d571e43 Remove unnecessary redirect e54c5fb Add description of custom resource classes 4b5a21b Use long_rpc_timeout in select_destinations RPC call 031f04a Imported Translations from Zanata 99b1b3f Don't use private interface in oslo.service c689c09 Default embedded instance.flavor.is_public attribute 386e574 Make supports_direct_io work on 4096b sector size e90e892 Consider root id is None in the database case 2ddb689 Add recreate test for bug 1799892 7520d15 Handle unicode characters in migration params 4c0342b Mention meta key suffix in tenant isolation with placement docs 74ed2fe Harden placement init under wsgi 980013d Properly track local root disk usage during moves d4ec966 Add regression test for bug 1796737 26c5ee1 Provide allocation_ratio/reserved amounts from update_provider_tree() 57ca928 Add functional recreate test for bug 1799727 133b194 Fix os-simple-tenant-usage result order 732b057 Update resources once in update_available_resource 954b200 Don't persist RequestSpec.requested_destination cb9c96f Add regression test for bug 1797580 dd8354e Handle online_data_migrations exceptions 940034c Fix NoneType error in _notify_volume_usage_detach dfbcf5e Handle IndexError in _populate_neutron_binding_profile 8e463aa Time how long select_destinations() takes in conductor f7d0a76 [stable-only] Add report_ironic_standard_resource_class_inventory option 3d4e4a4 Set defult value of num_nvme_discover_tries=5 057a05d De-dupe subnet IDs when calling neutron /subnets API 74f1db7 placement: Always reset conf.CONF when starting the wsgi app b35b812 Wait for network-vif-plugged on resize revert 3c2f07f Validate transport_url in nova-manage cell_v2 commands 1c1c373 Refix disk size during live migration with disk over-commit 5e69018 hardware: fix memory check usage for small/large pages Diffstat (except docs and test files) ------------------------------------- .../v2.40/simple-tenant-usage-get-all.json | 68 ++++++ nova/api/openstack/compute/simple_tenant_usage.py | 3 +- nova/api/openstack/placement/db_api.py | 6 +- .../placement/objects/resource_provider.py | 50 ++++- nova/api/openstack/placement/wsgi.py | 5 + nova/cmd/manage.py | 40 +++- nova/compute/manager.py | 20 +- nova/compute/resource_tracker.py | 39 ++-- nova/compute/rpcapi.py | 13 +- nova/conductor/manager.py | 40 +++- nova/conf/key_manager.py | 1 + nova/conf/libvirt.py | 2 +- nova/conf/rpc.py | 1 + nova/conf/workarounds.py | 33 +++ nova/locale/ko_KR/LC_MESSAGES/nova.po | 28 ++- nova/network/neutronv2/api.py | 21 +- nova/objects/cell_mapping.py | 16 +- nova/objects/instance.py | 20 +- nova/objects/request_spec.py | 8 +- nova/privsep/utils.py | 4 +- nova/scheduler/client/__init__.py | 3 - nova/scheduler/rpcapi.py | 4 +- nova/scheduler/utils.py | 33 --- .../placement/db/test_allocation_candidates.py | 107 +++++++++ .../v2.40/simple-tenant-usage-get-all.json.tpl | 68 ++++++ .../functional/compute/test_resource_tracker.py | 99 ++++++++ .../functional/regressions/test_bug_1794996.py | 179 +++++++++++++++ .../functional/regressions/test_bug_1797580.py | 97 ++++++++ .../functional/regressions/test_bug_1806064.py | 140 ++++++++++++ .../functional/regressions/test_bug_1806515.py | 69 ++++++ .../unit/api/openstack/placement/test_db_api.py | 52 +++++ .../api_samples_test_base/test_compare_result.py | 2 +- nova/utils.py | 43 ++++ nova/virt/driver.py | 18 ++ nova/virt/fake.py | 33 +++ nova/virt/hardware.py | 89 +++++--- nova/virt/ironic/driver.py | 33 +-- nova/virt/libvirt/driver.py | 19 +- nova/virt/libvirt/guest.py | 4 +- ...meout-select_destinations-9712e8690160928f.yaml | 7 + ..._resource_class_inventory-85c1fc629a08038d.yaml | 35 +++ .../notes/bug-1801702-c8203d3d55007deb.yaml | 8 + ...e-tenant-usage-pagination-393ed6e7d0e31594.yaml | 6 + ...ne-migrations-exit-status-9de5ea7836d0e368.yaml | 13 ++ 75 files changed, 2262 insertions(+), 344 deletions(-)

1 0

octavia 1.0.4 (pike)
by no-reply＠openstack.org 19 Dec '18

19 Dec '18

We are gleeful to announce the release of: octavia 1.0.4: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the pike stable release series. Download the package from: https://pypi.org/project/octavia For more details, please see below. 1.0.4 ^^^^^ Security Issues * Fixed a debug level logging of Amphora certificates for flows such as 'octavia-create-amp-for-lb-subflow-octavia-generate-serverpem' (triggered with loadbalancer failover) and 'octavia-create-amp-for- lb-subflow-octavia-update-cert-expiration'. Changes in octavia 1.0.3..1.0.4 ------------------------------- b3a25ee Stop Logging Amphora Cert Diffstat (except docs and test files) ------------------------------------- octavia/controller/worker/controller_worker.py | 7 ++++++- releasenotes/notes/stop-logging-amphora-cert-2e188675699d60d5.yaml | 7 +++++++ 2 files changed, 13 insertions(+), 1 deletion(-)

1 0

tosca-parser 1.4.0 (stein)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We enthusiastically announce the release of: tosca-parser 1.4.0: Parser for TOSCA Simple Profile in YAML. This release is part of the stein release series. The source is available from: http://git.openstack.org/cgit/openstack/tosca-parser/ Download the package from: https://pypi.org/project/tosca-parser For more details, please see below. Changes in tosca-parser 1.3.0..1.4.0 ------------------------------------ f90efb1 Change openstack-dev to openstack-discuss fd3c74b Add reservation policy support 4bdad8e Add py36 to tox.ini and setup.cfg Diffstat (except docs and test files) ------------------------------------- setup.cfg | 3 +- toscaparser/elements/TOSCA_definition_1_0.yaml | 5 +++ toscaparser/elements/policytype.py | 8 +++- toscaparser/policy.py | 14 ++++++- toscaparser/reservation.py | 47 ++++++++++++++++++++++ tox.ini | 2 +- 9 files changed, 160 insertions(+), 6 deletions(-)

1 0

tripleo-common 10.2.0 (stein)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are chuffed to announce the release of: tripleo-common 10.2.0: A common library for TripleO workflows. This release is part of the stein release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo-common For more details, please see below. 10.2.0 ^^^^^^ New Features ************ * The "ironic-staging-drivers" are now installed in the ironic- conductor container so that these drivers can be used without rebuilding the container. The Ironic Staging Drivers (https ://ironic-staging-drivers.readthedocs.io/en/latest/) is used to hold out-of-tree Ironic drivers which doesn't have means to provide a 3rd Party CI at this point in time which is required by Ironic. * Node's profile can now be specified as a separate "profile" field in the "instackenv.json" instead of inside capabilities. * A new Ansible role to tag containers managed by Pacemaker. This role will be consummed by services managed by Pacemaker. * The new tripleo-docker-rm will be useful to remove the containers that were managed by Docker and that are now managed by Podman. Upgrade Notes ************* * Package octavia-amphora-image (RHEL) will no longer be installed by role octavia-undercloud, and it now installs image files in directory /usr/share/openstack-octavia-amphora-images/. Please ensure you have the latest package version installed in the undercloud node beforehand deploying or updating the overcloud. Deprecation Notes ***************** * Specifying profile in capabilities when enrolling nodes is deprecated. Please use the new "profile" field instead. Bug Fixes ********* * Node update now works correctly when capabilities are specified as a dict. * The list of pre and post deployment names generated with config- download are now written per server instead of per role. This change handles the case where a deployment may apply to only an individual or set of servers within a role, and not all servers in that role. host_vars are used to set the variable of deployment names per server instead of group_vars. * Remove the tripleo specific inclusion of the openstack-ironic- statging-drivers package into the ironic-conductor container as this has been included in kolla. Other Notes *********** * TripleoInventory class no longer supports the parameters being passed in as as config object. This was added to support transition in in tripleo-validations that was corrected in Queens. Changes in tripleo-common 10.1.0..10.2.0 ---------------------------------------- c01edb5 Fix DeploymentStatusAction KeyError 981a217 Drop baremetal job template bdbce00 Address python3 string issues with subprocess d8de81f Add excludes to kolla builder cdcafad Implement python based uploader b6e82e2 Fix syntax error in role octavia-controller-config 7ab5342 Remove tripleo ironic-staging-drivers addition 092cddf overrides for transitioning from mariadb 10.1 to 10.3 0923fca Add a way to update ContainerImagePrepare params e07dc79 Only update parameters once in backup workflow 90fe24c Add python-notario package to mistral-executor container 936a599 Fix environments sorting 25183dd Increase ansible gather_timeout to 30secs for config-download e22f143 Set heatclient exceptions to verbose a719804 Stops growth of massive dentry cache growth 37dee4a Don't accumulate ansible output uselessly 8bfa351 Don't upcall run on UpdateParametersAction errors ece0944 Fix broken YAQL expressions in heat_environments.yaml 4490cc5 Fix non-exiting link to TripleO-common bugs 3a0cc64 image_uploader: use /v2 suffix to validate SSL 2c76f9f Specify python interpreter for undercloud c907add Set DeployIdentifier on update/upgrade/ffwd prepare actions ea9703a Rename tripleo-ci-centos-7-scenario009-multinode-oooq 4f89896 Add tripleoclient container 7032f25 Bump the Ceph container image to 3.2.0 84603a0 Generating fencing for capitalized MACs 7cd99c8 Persist region name in overcloudrc cebf6d7 Update swift_backup workflow success status message e05349d Do not fail deploy for empty ceph ansible fetch directory 08b89e6 Stop setting boot_option=local on ironic nodes a1cef57 Use stestr for unit tests 51e1f34 Simplify logic in docker detection for docker-rm role b7f0688 Fix rotate_fernet_keys workflow to not use heat deployment 51519d7 Catch heat exceptions in DeployStackAction 7c960d0 Exit when container is missing or empty when downloading logs 9198805 Select message IDs properly when publishing to swift 9288f0f Remove configs parameter from TripleoInventory d610129 Add advanced deployment options c6fab39 Install ironic-staging-drivers in ironic-conductor da02cd1 Fix nova-api healthcheck 678d564 Pass execution_id to tripleo.ansible-playbook. 9780889 Implement tripleo-docker-rm role 7370ca7 tripleo-container-tag: pull image before tagging 5b10047 Cache swift responses in process_environments_and_files 5c204c3 Don't reset parameter cache in a loop 42ea35f Revert "Revert "Add crane service to overcloud_containers.yaml.j2"" 70267db Add container build job e3a410f Supports specifying profile explicitly in instackenv.json 2c225f1 Correct handling of capabilities on node update 73631a2 Option to upload Octavia amphora img in RAW format de6f820 Omit grep process in nova_api healthcheck. b00b866 Move Octavia config opts to common config directory 8abbdeb Add image_source to containers de06f93 Sync state if needed during retrieval d22611b Fix config-download timeout 82bf5ad Implement tripleo-container-tag role f9389e3 Stop installing octavia-amphora-image package bdb78ef [Core] Fix the KeyError exception. f3cff15 Revert to coreos images hosted on quay.io 388ffae Delete old tarball from config container on download 042a281 Add container images for openshift 3.11 2f0f339 Revert "Add crane service to overcloud_containers.yaml.j2" 279543d Use pyyaml to output group vars f5ce5d7 Support v1 container image manifests e703ec1 Use DockerRegistryMirror to proxy requests 99dab22 Remove non-voting scenarios from gate 6d565e1 Move some container deps out of base e3bcc24 Don't resolve Heat stack output when unnecessary d1619ed Run Mistral workflow to make temporary Swift URLs on upgrade 8b16971 Refactor image uploader class structure 6cc6395 Fix - config-download tarball upload OverflowError 6d74a84 Per server deployments instead of per role a4048bf Add debug to container image prepare 90a1891 Store prepare defaults in packaged yaml 9f08626 Add crane service to overcloud_containers.yaml.j2 3933a66 Handle failed nodes when enabling ssh admin Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .stestr.conf | 3 + .testr.conf | 7 - CONTRIBUTING.rst | 2 +- .../container_image_prepare_defaults.yaml | 73 ++ container-images/overcloud_containers.yaml | 169 ++- container-images/overcloud_containers.yaml.j2 | 253 +++- .../tripleo_kolla_template_overrides.j2 | 21 +- healthcheck/common.sh | 1 + healthcheck/nova-api | 2 +- playbooks/octavia-files.yaml | 1 + playbooks/roles/common/defaults/main.yml | 1 + .../roles/octavia-controller-config/tasks/main.yml | 2 +- .../octavia-controller-config/tasks/octavia.yml | 20 +- .../templates/worker-post-deploy.conf.j2 | 4 - .../roles/octavia-undercloud/tasks/image_mgmt.yml | 31 +- playbooks/roles/octavia-undercloud/tasks/main.yml | 7 +- ...nd-ironic-staging-drivers-d278905bb1ec0683.yaml | 9 + releasenotes/notes/caps-fix-f6f8817a48fa5c25.yaml | 4 + .../deployments-per-server-ea747fcff19c884d.yaml | 7 + ...-inventory-config-support-c2132b897da2d290.yaml | 6 + releasenotes/notes/profile-17e2650c8da9e8b5.yaml | 9 + ...-staging-drivers-override-ce9776ec030ec02a.yaml | 6 + ...via-amphora-image-install-5d26e3d37c7b508f.yaml | 8 + .../tripleo-container-tag-ec42e64289cb17e2.yaml | 5 + .../notes/tripleo-docker-rm-b64297d5f9f42988.yaml | 5 + roles/tripleo-container-tag/README.md | 41 + roles/tripleo-container-tag/defaults/main.yaml | 2 + roles/tripleo-container-tag/tasks/main.yaml | 6 + roles/tripleo-docker-rm/README.md | 40 + roles/tripleo-docker-rm/defaults/main.yaml | 2 + roles/tripleo-docker-rm/tasks/main.yaml | 14 + scripts/container-update.py | 18 +- scripts/tripleo-container-image-prepare | 13 +- setup.cfg | 2 + sudoers | 1 - test-requirements.txt | 2 +- tox.ini | 12 +- tripleo_common/actions/__init__.py | 4 + tripleo_common/actions/ansible.py | 18 +- tripleo_common/actions/baremetal.py | 9 +- tripleo_common/actions/config.py | 12 +- tripleo_common/actions/container_images.py | 38 + tripleo_common/actions/deployment.py | 105 +- tripleo_common/actions/files.py | 5 +- tripleo_common/actions/package_update.py | 14 +- tripleo_common/actions/parameters.py | 5 +- tripleo_common/actions/plan.py | 3 +- tripleo_common/actions/templates.py | 7 +- tripleo_common/image/image_uploader.py | 1356 +++++++++++++++----- tripleo_common/image/kolla_builder.py | 87 +- tripleo_common/inventory.py | 40 +- tripleo_common/templates/group_var_role.j2 | 14 - tripleo_common/templates/host_var_server.j2 | 10 + .../utils/data/host_vars/overcloud-controller-0 | 7 + .../utils/data/host_vars/overcloud-novacompute-0 | 6 + .../utils/data/host_vars/overcloud-novacompute-1 | 6 + .../utils/data/host_vars/overcloud-novacompute-2 | 7 + tripleo_common/utils/config.py | 51 +- tripleo_common/utils/nodes.py | 39 +- tripleo_common/utils/overcloudrc.py | 3 +- tripleo_common/utils/plan.py | 13 +- tripleo_common/utils/swift.py | 14 +- workbooks/access.yaml | 12 +- workbooks/baremetal.yaml | 4 +- workbooks/container_images.yaml | 51 + workbooks/deployment.yaml | 58 +- workbooks/fernet-key-rotate.yaml | 14 +- workbooks/heat_environments.yaml | 4 +- workbooks/octavia_post.yaml | 4 + workbooks/plan_management.yaml | 64 +- workbooks/rename_ceph_ansible_fetch_directory.yaml | 2 +- workbooks/skydive-ansible.yaml | 1 + workbooks/swift_backup.yaml | 23 +- workbooks/swift_ring_rebalance.yaml | 9 +- zuul.d/layout.yaml | 20 +- 93 files changed, 4199 insertions(+), 795 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index d422644..4ad7698 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -14 +14 @@ oslotest>=3.2.0 # Apache-2.0 -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.0.0 # Apache-2.0

1 0

oslo.log 3.42.1 (stein)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are happy to announce the release of: oslo.log 3.42.1: oslo.log library This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.log Download the package from: https://pypi.org/project/oslo.log Please report issues through launchpad: https://bugs.launchpad.net/oslo.log For more details, please see below. Changes in oslo.log 3.42.0..3.42.1 ---------------------------------- 7558bc7 Default oslo.policy logging to INFO dde54e7 Update mailinglist from dev to discuss 8db5661 Fix up nits in log rotation change 4293cd8 Advancing the protocal of the website to HTTPS in usage.rst. Diffstat (except docs and test files) ------------------------------------- oslo_log/_options.py | 1 + releasenotes/notes/log-rotation-595f8232cd987a6d.yaml | 1 + setup.cfg | 2 +- 8 files changed, 11 insertions(+), 9 deletions(-)

1 0

oslo.utils 3.39.0 (stein)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are amped to announce the release of: oslo.utils 3.39.0: Oslo Utility library This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through launchpad: https://bugs.launchpad.net/oslo.utils For more details, please see below. Changes in oslo.utils 3.38.0..3.39.0 ------------------------------------ d7e70b1 Don't use monotonic on Python >=3.3 e675797 Update mailinglist from dev to discuss Diffstat (except docs and test files) ------------------------------------- oslo_utils/timeutils.py | 6 +++++- requirements.txt | 2 +- setup.cfg | 2 +- 3 files changed, 7 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 803e5a6..9e3c458 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +15 @@ oslo.i18n>=3.15.3 # Apache-2.0 -monotonic>=0.6 # Apache-2.0 +monotonic>=0.6;python_version<'3.3' # Apache-2.0

1 0

tripleo-heat-templates 8.2.0 (queens)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are pleased to announce the release of: tripleo-heat-templates 8.2.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the queens stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 8.2.0 ^^^^^ New Features ************ * Add support for ODL deployment on IPv6 networks. * Added Dell EMC SC multipath support This change adds support for cinder::backend::dellsc_iscsi::use_multipath_for_image_xfer Added a new parameter CinderDellScMultipathXfer. Bug Fixes ********* * The deployed-server get-occ-config.sh script now allows $SSH_OPTIONS to be overridden. Changes in tripleo-heat-templates 8.1.0..8.2.0 ---------------------------------------------- 14ae943 Added Dell EMC SC multipath support 10e8ea2 Set facter variable 'uuid' explicitly in docker-puppet.py c699660 ctlplane pre-alloc IPs - deprecated/non-deprecated role name 655fc21 Remove unnecessary logs due to misconfiguration from pacemaker 3db0816 Switch scenarios to non-voting b64e6eb Configure cinder's access to the nova API 4dfd98f Add config option for ODL IPv6 deployment 7992960 Set `TraceEnable` directive for apache to 'Off' 3469955 Make $SSH_OPTIONS overrideable Diffstat (except docs and test files) ------------------------------------- deployed-server/scripts/get-occ-config.sh | 2 +- environments/cinder-dellsc-config.yaml | 1 + environments/network-isolation-v6.j2.yaml | 2 + puppet/extraconfig/pre_deploy/per_node.yaml | 2 +- puppet/role.role.j2.yaml | 25 ++++++--- puppet/services/apache.j2.yaml | 1 + puppet/services/cinder-backend-dellsc.yaml | 4 ++ puppet/services/cinder-base.yaml | 8 +++ puppet/services/opendaylight-ovs.yaml | 5 ++ ...pport-for-IPv6-deployment-4c5b577cfb38c416.yaml | 4 ++ .../notes/dellsc-driver-d7cd300a24a64b01.yaml | 6 ++ .../overrideable-ssh-options-1bd4a78408eb6c2c.yaml | 4 ++ zuul.d/layout.yaml | 64 ---------------------- 15 files changed, 58 insertions(+), 75 deletions(-)

1 0

ironic-inspector 7.2.2 (queens)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are pumped to announce the release of: ironic-inspector 7.2.2: Hardware introspection for OpenStack Bare Metal This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through launchpad: https://bugs.launchpad.net/ironic-inspector For more details, please see below. 7.2.2 ^^^^^ Bug Fixes * A new rootwrap filter is now included to allow control of the systemd dnsmasq service used by ironic-inspector. This fixes a permission issue when systemctl commands are used as "dnsmasq_start_command" and "dnsmasq_stop_command" in the configuration for the dnsmasq pxe filter. See bug 2002818 (https://storyboard.openstack.org/#!/story/2002818) Note: The filter uses the systemd service name used by the RDO distrubution ("openstack-ironic-inspector-dnsmasq.service"). * Fixes issue that can result in introspection failure when a network switch sends incomplete information for LLDP switch_id or port_id. The validation expects these fields when a port is updated, this fix now handles the validation exception. * The "dnsmasq" PXE filter no longer whitelists the MAC addresses of ports deleted from the Bare Metal service. Instead they are blacklisted unless introspection is active or the "node_not_found_hook" is set in the configuration. This ensures that no previously enrolled node accidentally boot the inspection image when no node introspection is active. Bug #2001979 (https://storyboard.openstack.org/#!/story/2001979) Changes in ironic-inspector 7.2.1..7.2.2 ---------------------------------------- c9b739a Handle validation failure if not all switch fields received 04dc40d Add rootwrap filter for systemctl control of dnsmasq 41a5f11 import zuul job settings from project-config c29c28e PXE Filter dnsmasq: manage macs not in ironic Diffstat (except docs and test files) ------------------------------------- ironic_inspector/plugins/local_link_connection.py | 8 +- ironic_inspector/pxe_filter/dnsmasq.py | 61 ++++++++++++--- .../test/unit/test_dnsmasq_pxe_filter.py | 90 ++++++++++++++++------ .../unit/test_plugins_local_link_connection.py | 18 +++++ ...filter-rootwrap-systemctl-099964ad39d38b4c.yaml | 11 +++ ...handle-patch-port-failure-9a8b85749104506f.yaml | 6 ++ ...anage-deleted-ironic-macs-4bb766efad8c6d02.yaml | 9 +++ rootwrap.d/ironic-inspector-firewall.filters | 6 -- rootwrap.d/ironic-inspector.filters | 10 +++ zuul.d/project.yaml | 8 ++ 10 files changed, 184 insertions(+), 43 deletions(-)

1 0

tripleo-heat-templates 9.1.0 (rocky)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are happy to announce the release of: tripleo-heat-templates 9.1.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the rocky stable release series. The source is available from: http://git.openstack.org/cgit/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through launchpad: https://bugs.launchpad.net/tripleo For more details, please see below. 9.1.0 ^^^^^ New Features ************ * Add support for ODL deployment on IPv6 networks. * Allow plugins that support it to create VLAN transparent networks The vlan_transparent determines if plugins that support it to create VLAN transparent networks or not * We now provide an example set of environment files that can be used to deploy a single all-in-one standalone cloud node via the 'openstack overcloud deploy' and 'openstack tripleo deploy' (experimental) commands. For the overcloud deployment, use *environments/standalone/standalone-overcloud.yaml*. For the tripleo deploy deployment, use *environments/standalone/standalone- tripleo.yaml*. * Adds posibilities to set 'neutron::agents::ml2::ovs::tunnel_csum' via NeutronOVSTunnelCsum in heat template. This param set or un-set the tunnel header checksum on outgoing IP packet carrying GRE/VXLAN tunnel in ovs agent. * Now it's possible to define the number of API and RPC workers separately for neutron-api service. This is good for certain network backends such as OVN that don't require RPC communication. * Usage of eventlet of all the WSGI-run nova services get deprecated, including nova-api and nova-metadata-api. See https://review.openstack.org/#/c/549510/ for more details. With this change we move nova-metadata to run via httpd wsgi. * Add provision to set java options like heap size configurations in ODL. * Add support for libvirt volume_use_multipath the ability to use multipath connection of the iSCSI or FC volume. Volumes can be connected in the LibVirt as multipath devices. Adds new parameter "NovaLibvirtVolumeUseMultipath". Upgrade Notes ************* * swift worker count parameter defaults have been changed from 'auto' to 0. If not provided, puppet module default would instead be used and the number of server processes will be limited to '12'. * The online part of the service upgrades (online data migrations) is now run using: openstack overcloud external-upgrade run --tags online_upgrade or per-service like: openstack overcloud external-upgrade run --tags online_upgrade_nova openstack overcloud external-upgrade run --tags online_upgrade_cinder openstack overcloud external-upgrade run --tags online_upgrade_ironic Consult the upgrade documentation regarding the full upgrade workflow. Deprecation Notes ***************** * The environments/standalone.yaml has been deprecated and should be replaced with environments/standalone/standalone-tripleo.yaml when using the 'openstack tripleo deploy' command. Bug Fixes ********* * Fixed an issue where if Octavia API or Glance API were deployed away from the controller node with internal TLS, the service principals wouldn't be created. * Nova Scheduler added worker support in Rocky. Added *NovaSchedulerWorkers* to allow it to be configurable. * An issue causing undercloud installer re-run (or update) to fail because VIP's where lost in case the networking configuration was changed has been fixed. See Bug: 1791238 (https://bugs.launchpad.net/tripleo/+bug/1791238) * Fixes openDaylight karaf file log rotation by changing karaf log rollover parameters in PAX logging configuration. Reference https://git.opendaylight.org/gerrit/#/c/75480/ for more details. Also, moves openDaylight karaf log file location to /var/log/containers/opendaylight/karaf/logs/karaf.log. Reference https://review.openstack.org/#/c/603907/ for more details. * Fixes an issue in the legacy port_from_pool templates for predictable IP addressing. Prior to this fix using these tamplates would fail with the following error: **Referenced Attribute (%network_name%%Port host_routes) is incorrect.** (Bug: 1792968 (https://bugs.launchpad.net/tripleo/+bug/1792968).) * Add customized libvirt-guests unit file to properly shutdown instances If resume_guests_state_on_host_boot is set in nova.conf instances need to be shutdown using libvirt-guests after nova_compute container is shut down. Therefore we need a customized libvirt- guests unit file 1) removes the dependency to libvirt (non container) that it don't get started as a dependency and make the nova_libvirt container to fail. 2) adds a dependency to docker related services that a shutdown of nova_compute container is possible on system reboot. 3) stops nova_compute container 4) shutdown VMs This is a missing part of Bug 1778216. * With OOO we configure a separate DB for placement for the undercloud and overcloud since the beginning. But the placement_database config options were reverted with https://review.openstack.org/#/c/442762/1 , which means so far even if the config option was set, it was not used. With rocky the options were introduced again which is not a problem on a fresh installed env, but on upgrades from queens to rocky. We should use the same DB for both fresh deployments on and upgrades to rocky before we switch to the new DB as part of the extraction of placement. * Empty /var/lib/config-data/puppet-generated/opendaylight/opt/ opendaylight/etc/opendaylight/karaf directory on host empties /opt/opendaylight/etc/opendaylight/karaf inside the ODL container because of the mount. This leads to deployment failure on redeploy. Delete the empty karaf directory on host before redeploying. * The previous installation method for the undercloud installed some extra OpenStack clients during the installation. Since we did not have an equivalent way in the containerized version of the undercloud, we've added a new TripleO 'service' to install all of the OpenStack clients on a system. OS::TripleO::Services::OpenStackClients has been added which can be added to a custom role to install the clients. By default, only the Undercloud and Standalone roles will have this available. * Ping the default gateways before controllers in validation script. In certain situations when using IPv6 its necessary to establish connectivity to the router before other hosts. * SELinux can be configured on the Standalone deployment by setting SELinuxMode. Other Notes *********** * A new parameter called 'RabbitAdditionalErlArgs' that specifies additional arguments to the Erlang VM has been added. It now defaults to "'+sbwt none'" (http://erlang.org/doc/man/erl.html#+sbwt) This threshold determines how long schedulers are to busy wait when running out of work before going to sleep. By setting it to none we let the erlang threads go to sleep right away when they do not have any work to do. * The common tasks in deploy-steps-tasks.yaml that are common to all roles are now tagged with one of: host_config, container_config, container_config_tasks, container_config_scripts, or container_startup_configs. * The step plays in deploy-steps.j2 (which generates the deploy_steps_tasks.yaml playbook) are now tagged with step[1-5] so that they can run individually if needed. Changes in tripleo-heat-templates 9.0.0..9.1.0 ---------------------------------------------- 2f12128 Switch scenarios to non-voting 5a64736 Fix ansible conditional for ovs upgrade. 9be794b ceph: allow curl tasks to run in dry run mode 959aa9d Add customized libvirt-guests unit file to properly shutdown instances 0bc3e99 Honor --skip-deploy-identifier in common deploy tasks for updates 3deef82 Fix new node detection c7e16c3 Configure cinder's access to the nova API 4f191cb Set hierdata for swift server workers conditionally bc8cb17 [Templates] Use str_replace for hosts. e810103 Handle LP openvswitch meta-package on upgrade d10e704 Do not purge the Ironic Inspector dhcp-hostsdir aa0e0d3 Remove unused networks from OpenShift roles b129f24 Add network data for use with openshift deployments 3061e5d Switch stable scenarios to voting 49000ad Fix NeutronSriovHostConfig path for ODL deployment with SRIOV dac8bfc Sets ODL OVSDB inactivity probe timer a6247e8 switch documentation job to new PTI 7eb2024 Update to OpenShift 3.11 release ff09510 Set `TraceEnable` directive for apache to 'Off' e9b5d5f Fix novajoin nova vendordata hieradata keys c607f6c Create default deployment plan 8b13603 Allow standalone to manage selinux 0fe76ef Support for libvirt volume multipath b26af24 Add OpenStack clients service 5ccbdda Ensure unique containers names in docker-puppet 22b25cc Parametrize OpenShift deployment type d0752e3 Turning off extra UIs from Horizon fixes also SQLite issue 715781f Decoupling number of API and RPC workers for neutron-api 89e8e7e Set the number of RPC workers to 1 for non SRIOV OVN setups e229da2 Delete empty karaf directory on host 617bc44 Merge new params - nic-config templates 6c17d0f Skip hosts group in ceph-ansible inventory when all are blacklisted aab9049 Fix IHA with the new region_name key a9db3bb Change Swift storage directory to /srv/node/d1 c05b035 Fix cinder_api_apache error during upgrade. c314222 Do not wipe disks on OpenShift gluster nodes 71c1c76 Set openshift_docker_insecure_registries 2ada546 Do not modify imagestreams d100bb5 Let openshift-ansible configure the firewall 51eac99 Change log directory for OpenDaylight 60d7e1f Name unnamed tasks c09b258 check mode: paunch configs cb4fc55 check mode: docker_puppet_tasks 25f9448 Add OS::TripleO::Services::Rhsm to OpenShift roles 32c01f3 Use nova_api DB for [placement_database] -> connection 552ba0a Use different base virtual_router_id on openshift 5ef1ade Recreate cinder LVM loopback device on startup 17226a0 Switch OpenShiftGlusterDisks to a single disk 5aa3d8a Add OS::TripleO::Services::ContainerImagePrepare to ControllerOpenStack 7efe108 [Rocky ONLY] Fix haproxy cert inject for check mode 4fbf761 Apply variable to task not the block d9ec075 Run online migrations via "external-upgrade run" 54af7a0 Introduce proper steps to external update/upgrade tasks 65a8b44 check mode: docker_puppet 1d736b7 Remove deprecated Ram/Disk filters in NovaSchedulerDefaultFilters 085e49b Add provision to specify java arguments to ODL 2cd338a Fix update tasks for openshift f78ee08 Use openshift-ansible container instead of RPMs 4b44627 Set octavia log directory permissions to octavia user 7026e61 Add tripleo-heat-templates dir to Mistral volumes 9f0975a Disable Swift auditors/replicators on undercloud 1efec7e Ensure the needed openshift resources are set bae445a Add posibilities to set tunnel_csum in ovs agent 130bdea Use glusterfs for registry when deploying with CNS 55a1226 Pass image import conf file to command which runs glance server 776da14 Add metadata_settings to Octavia and Glance APIs 9a785ae Deploy openshift all in one in scenario009 001cadf Add nova-scheduler worker support 481916b Honor --skip-deploy-identifier in common deploy tasks d55940c Do not reference ansible_hostname if it is undefined 0969dfa Tag container image prepare tasks to allow running them for updates/upgrades 893e4c0 Add heat param for openshift prerequisites playbook bee73a8 Fix list concatenation of routes in bond-with-vlan 6341fe4 Hook openshift deployment with image prepare 59a5243 check mode: puppet host 95c10d1 Disable OVN related services in ODL env file 39302f2 Consolidate openshift-ansible global variables a45119e Make glusterfs the default sc when deploying with CNS b35cd6f Introduce OpenShiftGlusterNodeVars heat param 9ebb6e5 Fix inventory files for newer openshift-ansible 732e1c4 Configure haproxy for openshift infra f168115 Add config option for ODL IPv6 deployment ca765f7 Fix TLS when using a containerized undercloud d4f0725 Update standalone role 32ecb8a Fix error in Tenant network routes definition b1f7dd4 Remove parameter reference to non-exisingt parameter 597a43d Remove 3node from CI 8e5a437 Don't fail ironic upgrade if xinetd isn't present 94df25e Convert with_dict tasks to use loop and be less chatty 6bf333a Add a zaqar-swift-backend environment file 1efba03 Mount /usr/share/ceph-ansible into mistral-executor 091cd60 docker-puppet.py: used dedicated hiera entry, not uuid aed9d77 Chunk up ceph-ansible output to prevent clogging the CLI 43b27a3 Add UseNotifySSL to environments/ssl/enable-internal-tls.yaml 8a02c78 Revert "Allow a containerized logrotate to access docker" c46632b In process-templates script write output files to provided dir when using base path b3dd79b Clean up previous osa inventory dir before deployment 5aedecc Fix openshift new node detection 65e75d7 Refactor openshift services for composable roles f0d00ef Add simple validation that OpenShift is deployed 0cc922b Use openshift_cockpit_deployer_image directly 03a8a6b Move to openshift-ansible 3.10 a0d7e74 Define keepalived service in environments/docker.yaml 9040c41 Set container images for CNS 244b7bf Ping default gateways before controllers 60f2bf9 Add networks to IronicConductor role. 993840d Don't merge /etc/collectd.d 3d422bb Add a fact checking xinetd service present 212568e Pacemaker-cinder-volume & pacemaker-cinder-backup log path fix 90afd18 Cleanup ControllerStorageNfs role ea067e4 Move nova-metadata api to httpd wsgi 74d821a Set mysql connect timeout in the undercloud 2ee39f2 Tag tasks in in common tasks 8af4465 Persist ceph-ansible fetch_directory using config-download dfb3e75 Remove "when failed" from debug task names 624c775 Tag step plays 4aa7f8c Pass NeutronMechanismDrivers parameter to prepare e8563c0 Add ERL args parameter for rabbit and set the busy wait threshold to none 7c52f94 Undercloud - Restart keepalived on update 78e0205 Allow a containerized logrotate to access docker 03ebfc9 undercloud/stackrc: unset OS_* variables 5a66f6c Stop cap granting to empty pool when telemetry disabled ab9c7b9 Fix syntax for set_fact module. 13a2474 Add host_routes to port_from_pool.j2 dfa3eca Add CephOSD service to roles/Standalone.yaml 2e21bb7 Add reflection of RpcPort to health checks 032db24 Make vlan_transparent in neutron.conf configurable from Undercloud Diffstat (except docs and test files) ------------------------------------- ci/environments/scenario009-multinode.yaml | 28 +- common/deploy-steps-tasks.yaml | 299 ++++++++- common/deploy-steps.j2 | 14 +- .../services/logging/files/opendaylight-api.yaml | 6 +- environments/cavium-liquidio.yaml | 2 +- environments/docker.yaml | 1 + environments/network-isolation-v6.j2.yaml | 2 + environments/neutron-ml2-ovn-hw-offload.yaml | 2 +- environments/neutron-ovs-dpdk.yaml | 2 +- environments/neutron-sriov.yaml | 2 +- environments/no-tls-endpoints-public-ip.yaml | 3 + environments/openshift-cns.yaml | 5 - environments/openshift.yaml | 5 +- environments/ovs-hw-offload.yaml | 2 +- .../neutron-opendaylight-dpdk.yaml | 4 +- .../neutron-opendaylight-hw-offload.yaml | 4 +- .../neutron-opendaylight-sriov.yaml | 2 +- .../services-baremetal/neutron-opendaylight.yaml | 2 + .../services-baremetal/neutron-ovs-dpdk.yaml | 2 +- .../services-baremetal/neutron-ovs-hw-offload.yaml | 2 +- environments/services-baremetal/neutron-sriov.yaml | 2 +- .../services/neutron-opendaylight-dpdk.yaml | 4 +- .../services/neutron-opendaylight-hw-offload.yaml | 4 +- .../services/neutron-opendaylight-sriov.yaml | 4 +- environments/services/neutron-opendaylight.yaml | 2 + environments/services/neutron-ovn-dvr-ha.yaml | 1 + environments/services/neutron-ovn-ha.yaml | 1 + environments/services/neutron-ovn-hw-offload.yaml | 1 + environments/services/neutron-ovn-sriov.yaml | 2 +- environments/services/neutron-ovs-dpdk.yaml | 2 +- environments/services/neutron-ovs-hw-offload.yaml | 2 +- environments/services/neutron-sriov.yaml | 2 +- environments/services/zaqar-swift-backend.yaml | 4 + environments/ssl/enable-internal-tls.yaml | 4 + environments/ssl/no-tls-endpoints-public.yaml | 3 + environments/ssl/tls-endpoints-public-dns.yaml | 3 + environments/ssl/tls-endpoints-public-ip.yaml | 3 + environments/ssl/tls-everywhere-endpoints-dns.yaml | 3 + environments/standalone.yaml | 6 + environments/standalone/standalone-overcloud.yaml | 99 +++ environments/standalone/standalone-tripleo.yaml | 107 ++++ environments/stdout-logging.yaml | 1 + environments/tls-endpoints-public-dns.yaml | 3 + environments/tls-endpoints-public-ip.yaml | 3 + environments/tls-everywhere-endpoints-dns.yaml | 3 + environments/undercloud.yaml | 10 + extraconfig/post_deploy/undercloud_post.sh | 11 + extraconfig/pre_deploy/undercloud_pre.sh | 8 + extraconfig/pre_deploy/undercloud_pre.yaml | 23 + extraconfig/services/openshift-cns.yaml | 149 +++-- extraconfig/services/openshift-infra.yaml | 82 +++ extraconfig/services/openshift-master.yaml | 683 ++++++++++++--------- extraconfig/services/openshift-node.yaml | 161 +++++ extraconfig/services/openshift-worker.yaml | 105 +--- extraconfig/services/rhsm.yaml | 5 +- .../tasks/instanceha/check-run-nova-compute | 10 +- hosts-config.yaml | 19 +- lower-constraints.txt | 1 + network/config/bond-with-vlans/role.role.j2.yaml | 5 +- network/endpoints/endpoint_data.yaml | 13 +- network/endpoints/endpoint_map.yaml | 246 ++++++++ network/ports/port_from_pool.j2 | 3 + network/service_net_map.j2.yaml | 1 + network_data_openshift.yaml | 75 +++ network_data_routed.yaml | 2 +- overcloud-resource-registry-puppet.j2.yaml | 3 + puppet/role.role.j2.yaml | 1 + puppet/services/apache.j2.yaml | 1 + puppet/services/cinder-base.yaml | 8 + puppet/services/container-image-prepare.j2.yaml | 8 + puppet/services/glance-api.yaml | 8 +- puppet/services/haproxy-public-tls-inject.yaml | 3 +- puppet/services/ironic-inspector.yaml | 1 + puppet/services/neutron-api.yaml | 22 +- puppet/services/neutron-base.yaml | 7 + puppet/services/neutron-metadata.yaml | 9 +- puppet/services/neutron-ovs-agent.yaml | 50 +- puppet/services/neutron-ovs-dpdk-agent.yaml | 2 - puppet/services/nova-api.yaml | 7 +- puppet/services/nova-base.yaml | 4 +- puppet/services/nova-compute.yaml | 49 ++ puppet/services/nova-metadata.yaml | 128 ++-- puppet/services/nova-scheduler.yaml | 13 + puppet/services/octavia-api.yaml | 2 + puppet/services/opendaylight-api.yaml | 15 +- puppet/services/opendaylight-ovs.yaml | 52 +- puppet/services/openstack-clients.yaml | 55 ++ puppet/services/openvswitch.yaml | 48 -- puppet/services/pacemaker/cinder-backup.yaml | 1 + puppet/services/pacemaker/cinder-volume.yaml | 1 + puppet/services/rabbitmq.yaml | 9 + ...t-inactivity-probe-config-a89f6dcd204192a8.yaml | 6 + puppet/services/swift-proxy.yaml | 9 +- puppet/services/swift-storage.yaml | 27 +- puppet/services/tripleo-packages.yaml | 149 +++++ ...a-and-glance-tls-internal-5d8e46650b174626.yaml | 6 + ...-scheduler-worker-support-0ab66160b936a0c0.yaml | 4 + ...pport-for-IPv6-deployment-4c5b577cfb38c416.yaml | 4 + ...d-vlan_transparent-config-5623f8cffc8b41f0.yaml | 5 + ...n-one-via-undercloud.yaml-8766b43a20a4270f.yaml | 14 + .../notes/bug-1794268-0f875aa640b4246e.yaml | 6 + ...nge-swift-worker-defaults-b98f12fb2f677bf1.yaml | 6 + ...i_rpc_workers_neutron_api-eb5820d6bcedb53b.yaml | 6 + ...-keepalived-needs-restart-6d7efbb9788e0f95.yaml | 7 + .../fix-odl-karaf-logging-eca10973e57caa3a.yaml | 12 + ...ort-from-pool-host-routes-7fcc4d00cb11603d.yaml | 8 + ...ustom_libvirt-guests_unit-7ac2c4b5511ca549.yaml | 16 + .../notes/nova_metadata_wsgi-bfb240bc84194d05.yaml | 7 + ...nova_api_db_for_placement-eea44dd48c768f04.yaml | 12 + ...lete_karaf_folder_on_host-b81465f62fe422d6.yaml | 9 + ...igration-external-upgrade-5093de6bd8993b5c.yaml | 16 + .../openstack-client-service-86d28dab98f1763f.yaml | 11 + ...ateway-before-controllers-e029e81961dbaee8.yaml | 6 + .../notes/rabbitmq-erl-args-9029cf4605d63dd9.yaml | 8 + ...et_java_opts_from_tripleo-d969b1151ec244a0.yaml | 4 + ...one-selinux-configuration-39a0c7285d8e4c66.yaml | 4 + .../notes/tag-common-tasks-4a78275787655fdd.yaml | 6 + .../notes/tag-step-plays-b1b1ea7584f1665d.yaml | 5 + ...se_multipath-for-libvirt--c8e93a0bb83e0bc8.yaml | 7 + requirements.txt | 1 + roles/ControllerOpenstack.yaml | 1 + roles/ControllerStorageNfs.yaml | 9 +- roles/IronicConductor.yaml | 2 + roles/OpenShiftAllInOne.yaml | 35 ++ roles/OpenShiftInfra.yaml | 25 + roles/OpenShiftMaster.yaml | 16 +- roles/OpenShiftWorker.yaml | 10 +- roles/Standalone.yaml | 10 +- roles/Undercloud.yaml | 2 +- roles_data_undercloud.yaml | 2 +- sample-env-generator/ssl.yaml | 17 + sample-env-generator/standalone.yaml | 264 ++++++++ scripts/hosts-config.sh | 1 + tools/merge-new-params-nic-config-script.py | 267 ++++++++ tools/process-templates.py | 6 +- tools/yaml-validate.py | 5 +- validation-scripts/all-nodes.sh | 2 +- zuul.d/layout.yaml | 62 +- 187 files changed, 4161 insertions(+), 1389 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bda4743..9474928 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,0 +9 @@ tripleo-common>=7.1.0 # Apache-2.0 +paunch>=3.2.0 # Apache-2.0

1 0

ironic-python-agent 3.2.2 (queens)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are psyched to announce the release of: ironic-python-agent 3.2.2: Ironic Python Agent Ramdisk This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/ironic-python-agent/ For more details, please see below. 3.2.2 ^^^^^ Bug Fixes * Fixes detection of IPMI address in CoreOS-based images, by ensuring that parsing of "ipmitool" output is compatible with the bundled implementation of "awk" ("mawk"). Changes in ironic-python-agent 3.2.1..3.2.2 ------------------------------------------- dc154a1 Fix BMC IP address detection on CoreOS images c6492f6 Add missing dependencies to CoreOS IPA docker image b04651c import zuul job settings from project-config 2cb36f0 fix uname mock arguments for get-pip.py 006bfb1 Switch from sourceforge to github for ipmitool Diffstat (except docs and test files) ------------------------------------- Dockerfile | 3 ++- imagebuild/tinyipa/build-tinyipa.sh | 5 +++-- imagebuild/tinyipa/build_files/buildreqs.lst | 6 ++++++ imagebuild/tinyipa/build_files/fakeuname | 5 +++++ ironic_python_agent/hardware.py | 2 +- .../notes/fix-bmc-ip-detection-for-coreos-483be0286593e393.yaml | 6 ++++++ zuul.d/project.yaml | 6 ++++++ 7 files changed, 29 insertions(+), 4 deletions(-)

1 0

ironic-inspector 8.0.1 (rocky)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are tickled pink to announce the release of: ironic-inspector 8.0.1: Hardware introspection for OpenStack Bare Metal This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through launchpad: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 8.0.1 ^^^^^ Bug Fixes * A new rootwrap filter is now included to allow control of the systemd dnsmasq service used by ironic-inspector. This fixes a permission issue when systemctl commands are used as "dnsmasq_start_command" and "dnsmasq_stop_command" in the configuration for the dnsmasq pxe filter. See bug 2002818 (https://storyboard.openstack.org/#!/story/2002818) Note: The filter uses the systemd service name used by the RDO distrubution ("openstack-ironic-inspector-dnsmasq.service"). * Fixes issue that can result in introspection failure when a network switch sends incomplete information for LLDP switch_id or port_id. The validation expects these fields when a port is updated, this fix now handles the validation exception. Changes in ironic-inspector 8.0.0..8.0.1 ---------------------------------------- b235c9f Handle validation failure if not all switch fields received ba32de4 Python 3.7: fix os.errno -> errno 4ec7d66 Add rootwrap filter for systemctl control of dnsmasq af52e6f import zuul job settings from project-config 83386c3 Update UPPER_CONSTRAINTS_FILE for stable/rocky 4c3dff4 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_inspector/plugins/local_link_connection.py | 8 +++++++- ironic_inspector/pxe_filter/dnsmasq.py | 8 ++++++-- ironic_inspector/test/unit/test_dnsmasq_pxe_filter.py | 10 +++++++--- .../test/unit/test_plugins_local_link_connection.py | 18 ++++++++++++++++++ ...pxe-filter-rootwrap-systemctl-099964ad39d38b4c.yaml | 11 +++++++++++ .../handle-patch-port-failure-9a8b85749104506f.yaml | 6 ++++++ rootwrap.d/ironic-inspector-firewall.filters | 6 ------ rootwrap.d/ironic-inspector.filters | 10 ++++++++++ tox.ini | 2 +- zuul.d/project.yaml | 8 ++++++++ 11 files changed, 75 insertions(+), 13 deletions(-)

1 0

ironic-python-agent 3.3.1 (rocky)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are glad to announce the release of: ironic-python-agent 3.3.1: Ironic Python Agent Ramdisk This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/ironic-python-agent/ For more details, please see below. 3.3.1 ^^^^^ Bug Fixes * Fixes detection of IPMI address in CoreOS-based images, by ensuring that parsing of "ipmitool" output is compatible with the bundled implementation of "awk" ("mawk"). Changes in ironic-python-agent 3.3.0..3.3.1 ------------------------------------------- aab9f53 Fix BMC IP address detection on CoreOS images 4b20765 Add missing dependencies to CoreOS IPA docker image 6588066 Raise udevadm settle timeout from 5 to 20 seconds 8eb2096 import zuul job settings from project-config 505dc36 Update UPPER_CONSTRAINTS_FILE for stable/rocky 3316454 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Dockerfile | 2 +- imagebuild/tinyipa/build_files/dhcp.sh | 21 +++++++++++++++++++++ imagebuild/tinyipa/finalise-tinyipa.sh | 5 +++++ ironic_python_agent/hardware.py | 2 +- ...mc-ip-detection-for-coreos-483be0286593e393.yaml | 6 ++++++ tox.ini | 2 +- zuul.d/project.yaml | 6 ++++++ 8 files changed, 42 insertions(+), 3 deletions(-)

1 0

openstacksdk 0.21.0 (stein)
by no-reply＠openstack.org 18 Dec '18

18 Dec '18

We are thrilled to announce the release of: openstacksdk 0.21.0: An SDK for building applications to work with OpenStack This release is part of the stein release series. Download the package from: https://pypi.org/project/openstacksdk For more details, please see below. 0.21.0 ^^^^^^ New Features ************ * Add "propagate_uplink_status" attribute to "port" resource. Users can set this attribute to "True" or "False". If it is set to "True", uplink status propagation is enabled. Otherwise, it is disabled. Neutron server needs to have the API extension "uplink-status- propagation" in order to support this feature. This feature can be used in SRIOV scenario, in which users enable uplink status propagation of the SRIOV port so that the link status of the VF will follow the PF. * Implement block-storage.v2 Backup resource with restore functionality. * Vendor profiles can now be fetched from an RFC 5785 compliant URL on a cloud, namely, "https://example.com/.well-known/openstack/api". A cloud can manage their own vendor profile and serve it from that URL, allowing a user to simply list "https://example.com" as the profile name. * Added the newly supported "description" parameter and the missing "domain_id" parameter to "Role" resource. Bug Fixes ********* * Fixes specifying fields when listing bare metal resources. Changes in openstacksdk 0.20.0..0.21.0 -------------------------------------- fd61b54 Avoid dogpile.cache 0.7.0 5a1983a Add host aggregate missing functions 79dff76 Fix requesting specific fields from ironic f06b60f Deal with double-normalization of host_id d027626 Add propagate_uplink_status to port 1ce6562 Fix query parameters of network.port_forwarding 0c6ede9 Change openstack-dev to openstack-discuss d6527b8 block_storage.backup func tests to use configurable timeout 51182f3 Replace neutron-grenade job with grenade-py3 65fd4a9 Change openstack-dev to openstack-discuss 08dfc16 Support non-public volume types 41ccc07 Move server munch transformation into normalize 3ed8f0e object_store: exposes the prefix parameter 120a9d1 Add support for octavia's resuorces quota 9939c93 Transform server with munch before normalizing 8d71f76 syntax errors and undefined exceptions in service_description.py e25e977 Refactor tag support 3d08643 Support remote vendor profiles 1da367b Slightly refactor vendor profile loading 9b29b88 Add CRUD methods for Neutron Port Forwarding bcc9965 Update link address for vendor support 8f97fb7 Check result of server metadata operation 5df573b Add missing properties for role 4d48309 Add missing seperator between words 40322ba Register proxy directly in add_service 37a1dec implement block-storage backup resource b450b45 Fix some spelling in documentation Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 5 +- .../user/resources/block_storage/v2/backup.rst | 21 +++ examples/connect.py | 2 +- openstack/baremetal/v1/_common.py | 7 + openstack/baremetal/v1/chassis.py | 5 +- openstack/baremetal/v1/node.py | 3 +- openstack/baremetal/v1/port.py | 3 +- openstack/baremetal/v1/port_group.py | 3 +- openstack/block_storage/v2/_proxy.py | 107 +++++++++++- openstack/block_storage/v2/backup.py | 100 +++++++++++ openstack/block_storage/v2/type.py | 4 + openstack/cloud/_normalize.py | 5 +- openstack/cloud/openstackcloud.py | 68 ++++---- openstack/compute/v2/_proxy.py | 41 +++++ openstack/compute/v2/aggregate.py | 26 +++ openstack/compute/v2/metadata.py | 3 + openstack/compute/v2/server.py | 9 +- openstack/config/cloud_region.py | 2 +- openstack/config/loader.py | 63 +++---- openstack/config/vendors/__init__.py | 67 ++++++-- openstack/config/vendors/vexxhost.json | 14 +- openstack/connection.py | 7 +- openstack/identity/v3/project.py | 3 +- openstack/identity/v3/role.py | 4 + openstack/image/v2/image.py | 12 +- openstack/load_balancer/v2/_proxy.py | 66 ++++++++ openstack/load_balancer/v2/quota.py | 62 +++++++ openstack/network/v2/_proxy.py | 118 +++++++++++++ openstack/network/v2/floating_ip.py | 5 +- openstack/network/v2/network.py | 5 +- openstack/network/v2/port.py | 8 +- openstack/network/v2/port_forwarding.py | 46 ++++++ openstack/network/v2/qos_policy.py | 5 +- openstack/network/v2/router.py | 5 +- openstack/network/v2/security_group.py | 5 +- openstack/network/v2/security_group_rule.py | 3 +- openstack/network/v2/subnet.py | 5 +- openstack/network/v2/subnet_pool.py | 5 +- openstack/network/v2/tag.py | 35 ---- openstack/network/v2/trunk.py | 3 +- openstack/object_store/v1/container.py | 4 + openstack/object_store/v1/obj.py | 4 + openstack/resource.py | 150 ++++++++++++++++- openstack/service_description.py | 11 +- .../functional/baremetal/test_baremetal_chassis.py | 12 ++ .../functional/baremetal/test_baremetal_node.py | 12 ++ .../functional/baremetal/test_baremetal_port.py | 13 ++ .../baremetal/test_baremetal_port_group.py | 8 + .../functional/block_storage/v2/test_backup.py | 68 ++++++++ .../load_balancer/v2/test_load_balancer.py | 32 ++++ .../functional/network/v2/test_port_forwarding.py | 175 ++++++++++++++++++++ ...ate_uplink_status-to-port-0152d476c65979e3.yaml | 12 ++ .../notes/baremetal-fields-1f6fbcd8bd1ea2aa.yaml | 4 + .../block-storage-backup-5886e91fd6e423bf.yaml | 3 + .../notes/remote-profile-100218d08b25019d.yaml | 7 + .../update-role-property-b16e902e913c7b25.yaml | 5 + requirements.txt | 2 +- setup.cfg | 2 +- 82 files changed, 2021 insertions(+), 283 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 78f7585..87ed65e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -21 +21 @@ netifaces>=0.10.4 # MIT -dogpile.cache>=0.6.2 # BSD +dogpile.cache>=0.6.2,<0.7.0 # BSD

1 0

swift 2.20.0 (stein)
by no-reply＠openstack.org 17 Dec '18

17 Dec '18

We are satisfied to announce the release of: swift 2.20.0: OpenStack Object Storage This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/swift/ For more details, please see below. 2.20.0 ^^^^^^ New Features * S3 API compatibility updates * Swift can now cache the S3 secret from Keystone to use for subsequent requests. This functionality is disabled by default but can be enabled by setting the "secret_cache_duration" in the "[filter:s3token]" section of the proxy server config to a number greater than 0. * s3api now mimics the AWS S3 behavior of periodically sending whitespace characters on a Complete Multipart Upload request to keep the connection from timing out. Note that since a request could fail after the initial 200 OK response has been sent, it is important to check the response body to determine if the request succeeded. * s3api now properly handles "x-amz-metadata-directive" headers on COPY operations. * s3api now uses concurrency (default 2) to handle multi-delete requests. This allows multi-delete requests to be processed much more quickly. * s3api now mimics some forms of AWS server-side encryption based on whether Swift's at-rest encryption functionality is enabled. Note that S3 API users are now able to know more about how the cluster is configured than they were previously, ie knowledge of encryption at-rest functionality being enabled or not. * s3api responses now include a '-' in multipart ETags. For new multipart-uploads via the S3 API, the ETag that is stored will be calculated in the same way that AWS uses. This ETag will be used in GET/HEAD responses, bucket listings, and conditional requests via the S3 API. Accessing the same object via the Swift API will use the SLO Etag; however, in JSON container listings the multipart upload etag will be exposed in a new "s3_etag" key. Previously, some S3 clients would complain about download corruption when the ETag did not have a '-'. * S3 ETag for SLOs now include a '-'. Ordinary objects in S3 use the MD5 of the object as the ETag, just like Swift. Multipart Uploads follow a different format, notably including a dash followed by the number of segments. To that end (and for S3 API requests *only*), SLO responses via the S3 API have a literal '-N' added on the end of the ETag. * The default location is now set to "us-east-1". This is more likely to be the default region that a client will try when using v4 signatures. Deployers with clusters that relied on the old implicit default location of "US" should explicitly set "location = US" in the "[filter:s3api]" section of proxy-server.conf before upgrading. * Add basic support for ?versions bucket listings. We still do not have support for toggling S3 bucket versioning, but we can at least support getting the latest versions of all objects. * Fixed an issue with SSYNC requests to ensure that only one request can be running on a partition at a time. * Data encryption updates * The "kmip_keymaster" middleware can now be configured directly in the proxy-server config file. The existing behavior of using an external config file is still supported. * Multiple keymaster middlewares are now supported. This allows migration from one key provider to another. Note that "secret_id" values must remain unique across all keymasters in a given pipeline. If they are not unique, the right- most keymaster will take precedence. When looking for the active root secret, only the right-most keymaster is used. * Prevent PyKMIP's kmip_protocol logger from logging at DEBUG. Previously, some versions of PyKMIP would include all wire data when the root logger was configured to log at DEBUG; this could expose key material in logs. Only the "kmip_keymaster" was affected. * Fixed an issue where a failed drive could prevent the container sharder from making progress. * Storage policy definitions in swift.conf can now define the diskfile to use to access objects. See the included swift.conf- sample file for a description of usage. * The EC reconstructor will now attempt to remove empty directories immediately, while the inodes are still cached, rather than waiting until the next run. * Added a "keep_idle" config option to configure KEEPIDLE time for TCP sockets. The default value is the old constant of 600. * Add "databases_per_second" to the account-replicator, container- replicator, and container-sharder. This prevents them from using a full CPU core when they are not IO limited. * Allow direct_client users to overwrite the "X-Timestamp" header. * Various other minor bug fixes and improvements. Changes in swift 2.19.0..2.20.0 ------------------------------- fbad538 authors/changelog for 2.20.0 release defae1d Fix rolling upgrade job f98d5d1 Py3: Add working tests to tox.ini 7458f23 Python3: fix test_xprofile.py b0aea93 s3 secret caching bce2ac6 Fix container sharding doc fba94b2 fix a typo in docstring f765f4b Py3: Use BytesIO when we want bytes 00be3f5 s3api: Allow concurrent multi-deletes 8e95a93 s3api: Allow some forms of server-side-encryption b7e2278 Support long-running multipart uploads 3379235 api-ref: Clean up container and object response code formatting 9ab276d Change openstack-dev to openstack-discuss c26d67e fixed _check_node() in the container sharder a883ada Py3: Replace map() with a list comprehension 014d46f Fix SSYNC concurrency on partition 333ae30 Fix in-process func tests to work with newer PasteDeploy 010cdc2 Py3: Fix test_memcache 59d66e3 Py3: fix a simple bytes vs str issue 3a51771 Py3: Use dict.items instead of dict.iteritems d75d15b Py3: We cannot use len(filter(...)) 21a3423 Py3: Fix a relative import c3cbe69 Py3: Use collections.MutableMapping rather than UserDict.DictMixin 6c8b4c8 Py3: Port test/unit/test_ringcomposer.py 9017db4 Only print "SKIPPING FUNCTIONAL TESTS ..." messages once 34aef9d Add chaging secret key for external KMS section fda3052 Multi-key KMS keymaster 4809884 Use eventlet.patcher.original to get Python select module in get_hub 42b4cdc s3api: Include '-' in S3 ETags of normal SLOs 582f058 py3: encryption follow-up 37b8146 py3: port encryption 3465d63 Add missing ws seperator between words 370f7d7 Handle non-ASCII characters in S3 v2 listings. 692a034 s3api: Change default location to us-east-1 a85dc0a update docs link address c1c65a7 Only url-quote Keys when encoding-type=url 662fd81 Fix typo c5e33b0 Fix typo a2fb335 s3api: Add basic support for ?versions bucket listings 34e48d5 Remove setup.py check from pep8 job bc4494f py3: port account/container replicators c112203 py3: Monkey-patch json.loads to accept bytes on py35 7a21272 Update min tox version to 2.3.2 887ba87 Add "historical document" note to ring background docs 3420921 Clean up HASH_PATH_* patching 11e81cf added note about double url quoting 441df4f Use correct headers in reconstructor requests e8a7729 Fix usage of multiple accounts in functional tests 06cf5d2 Add databases_per_second to db daemons 2d1c438 SSYNC: stop sharing global available_map/send_map 6b94cf2 SSYNC: Stop sharing a global response e4ad56a SSYNC: Stop sharing a global connection 46c6fab SSYNC: Remove useless self.failures in sender d306345 Remove empty directories after a revert job 1663782 Fix up the test for .ismount 654187e py3: adapt common/db_replicator.py b5a9172 Require gettext for all non-SUSE distros 0a564d8 Check for .ismount stubs with symlinks, too 3bf9f82 Reduce code duplication in SSYNC sender 781da07 Stop accomodating 5+ year old object-server code in unit tests 6676d74 py3: everything account except the real things b39d2ef Allow multiple keymasters 00f7732 Simplify the decryption of container listings 0d77486 Unify handle_get/handle_head in decrypter 28a582f py3: adapt account/backend.py and utils.py 83a7ce8 Python 3 compatibility: fix xrange/range issues b90c792 Follow up s3api ensures any string for secret as bytes string 45c840a s3api: Ensure secret is utf8 in check_signature dd49f17 Add coverage reports to py27/35/36 unit test jobs ce51893 Tighten status code assertions for object POST 78c9fd9 Change PUT bucket conflict error 4ca605c Move base64-decoding/unpickling into DatabaseBroker 6e7ca26 DB follow-up 3770f3f internal_client: Require that request_tries be positive e3a5b63 py3: Adapt db.py 5558b92 Properly handle custom metadata upon an object COPY operation 12b6d46 Prevent kmip_protocol logger from logging at DEBUG 27d8523 Give better errors for malformed credentials c90d34b py3: port tempauth c8e3b99 Enabling direct_client users to overwrite X-Timestamp 9686680 Tolerate missing containers when trying to clean up 93fb77e Ignore ENOENT and ENOTEMPTY errors in delete_partition 8c7ca01 Unquote URL before using splited parts. 36a3fee update 1space url in associated projects ae49663 py3: port internal_client ddd5cc1 py3: port direct_client b7fda3b Allow kmip_keymaster to be configured in proxy-server.conf ecebea1 s3api: Increase max body size for Delete Multiple Objects requests 050f879 Use latest eventlet in probe tests 70d31e0 set up a lower constraints job that uses an XFS tmpdir 62f8e64 Use templates for cover and lower-constraints 1b0172f py3: Port listing_formats middleware 78344bf py3: get proxy-server willing and able to respond to some API requests 904e7c9 Add more doc and test for cors_expose_headers option 5d70396 add multinode functional test to swift 0c97888 fixed a manpage and added the manpage syntax checker to pep8 jobs 2ef21ac py3: port request_helpers a7dd5f6 Replace Chinese quotes with English quotes b4567e6 py3: include test_base_storage_server cfeb32c Adding keep_idle config value to socket dbacdcf Add punch_hole utility function 1142202 py3: port list_endpoints 5a8cfd6 Add another user for s3api func tests 80001aa Add ceph-s3 test non-voting job 123f6f5 Allow EC to ignore invalid request ETag cbfa585 Refactor obj.server.ObjectController.PUT 52ecbf9 Add a chunks_finished to BaseDiskFileWriter 84b85f0 s3api: Include '-' in multipart ETags ebcc95a added some bootstrapping info to the top of the SAIO doc ce257b3 DiskFile(Writer) refactor cleanups a42c1da DiskFile(Writer) refactor cleanup for unused use_linkat 33c7650 Add writer method to DiskFile 8bc1434 Import quote directly from swift.common.utils 7914826 Let error messages to be normal strings again 560db71 Drop neutron jobs from our gate 2ae00de Add py36 test job 77734bc Disable the docs badge saying the docs aren't accurate b4be37c Remove post_as_copy deprecated warning from copy middleware b478a07 Add IPv6 DSVM tests 8cab628 remove legacy-swift-dsvm-functional jobs 1f29508 Allow for backwards compatibility with swift3. 125bb87 Remove install-guide-jobs d562659 Tighten up pep8 irrelevant-files 6f00d42 bulk: Use make_subrequest to make subrequests 85f4f94 Factor out a proper BaseKeyMaster class 1d65219 Move legacy-swift-dsvm-functional job in-tree 1e800fc switch documentation job to new PTI 90e260e import zuul job settings from project-config 9167e95 Imported Translations from Zanata df954e2 py3: port bufferedhttp (hopefully) 673fda7 Configure diskfile per storage policy e547448 Fix warning while building docs 04d3d68 minor updates to changelog and release notes ae9536e Update reno for stable/rocky dd313b8 Reference legacy-tempest-dsvm-neutron-full and neutron-grenade in-tree 2ddc979 Add irrelevant-files lists for in-tree check/gate jobs 6994a2e ratelimit: ignore requests with invalid API versions b2fbc74 Clean up comment about 404s leaking out during COPYs e9d0a7a Replacing six.iter/dict.iter usages 9295ba8 Add validation for sorting_method values 51622fd Pass empty etag override values through encrypter Diffstat (except docs and test files) ------------------------------------- .mailmap | 1 + .zuul.yaml | 281 ++++++- AUTHORS | 13 +- CHANGELOG | 108 ++- CONTRIBUTING.rst | 2 +- api-ref/source/storage-container-services.inc | 15 +- api-ref/source/storage-object-services.inc | 17 +- bindep.txt | 4 +- etc/account-server.conf-sample | 4 + etc/container-server.conf-sample | 7 + etc/object-server.conf-sample | 1 + etc/proxy-server.conf-sample | 19 +- etc/swift.conf-sample | 7 + .../notes/2_10_0_release-666a76f4975657a5.yaml | 6 +- .../notes/2_19_0_release-3e6ee3e6a1fcc6bb.yaml | 6 +- .../notes/2_20_0_release-7b090a5f4bd916e4.yaml | 116 +++ releasenotes/source/index.rst | 2 + .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 75 ++ releasenotes/source/rocky.rst | 6 + setup.cfg | 5 +- swift/__init__.py | 35 + swift/account/backend.py | 19 +- swift/account/reaper.py | 13 +- swift/account/utils.py | 2 +- swift/cli/manage_shard_ranges.py | 2 +- swift/common/bufferedhttp.py | 56 +- swift/common/constraints.py | 38 +- swift/common/db.py | 34 +- swift/common/db_replicator.py | 14 +- swift/common/direct_client.py | 55 +- swift/common/internal_client.py | 28 +- swift/common/memcached.py | 4 +- swift/common/middleware/bulk.py | 52 +- swift/common/middleware/copy.py | 20 +- swift/common/middleware/crypto/crypto_utils.py | 8 +- swift/common/middleware/crypto/decrypter.py | 123 ++-- swift/common/middleware/crypto/encrypter.py | 17 +- swift/common/middleware/crypto/keymaster.py | 216 +++--- swift/common/middleware/crypto/kmip_keymaster.py | 19 +- swift/common/middleware/crypto/kms_keymaster.py | 56 +- swift/common/middleware/listing_formats.py | 30 +- swift/common/middleware/ratelimit.py | 3 + swift/common/middleware/s3api/acl_handlers.py | 2 +- .../common/middleware/s3api/controllers/bucket.py | 125 +++- .../middleware/s3api/controllers/location.py | 2 +- .../middleware/s3api/controllers/multi_delete.py | 50 +- .../middleware/s3api/controllers/multi_upload.py | 173 +++-- swift/common/middleware/s3api/controllers/obj.py | 21 +- swift/common/middleware/s3api/etree.py | 16 +- swift/common/middleware/s3api/s3api.py | 92 ++- swift/common/middleware/s3api/s3request.py | 160 +++- swift/common/middleware/s3api/s3response.py | 47 +- swift/common/middleware/s3api/s3token.py | 182 +++-- swift/common/middleware/symlink.py | 4 +- swift/common/middleware/tempauth.py | 28 +- swift/common/middleware/x_profile/html_viewer.py | 10 +- swift/common/middleware/xprofile.py | 16 +- swift/common/request_helpers.py | 6 +- swift/common/ring/ring.py | 2 +- swift/common/storage_policy.py | 39 +- swift/common/swob.py | 8 +- swift/common/utils.py | 297 ++++++-- swift/common/wsgi.py | 10 +- swift/container/backend.py | 22 +- swift/container/reconciler.py | 8 +- swift/container/replicator.py | 5 +- swift/container/server.py | 9 +- swift/container/sharder.py | 21 +- swift/locale/en_GB/LC_MESSAGES/swift.po | 10 +- swift/locale/es/LC_MESSAGES/swift.po | 6 +- swift/locale/ja/LC_MESSAGES/swift.po | 6 +- swift/obj/diskfile.py | 234 +++--- swift/obj/mem_diskfile.py | 43 +- swift/obj/reconstructor.py | 18 +- swift/obj/replicator.py | 7 +- swift/obj/server.py | 393 ++++++---- swift/obj/ssync_receiver.py | 4 +- swift/obj/ssync_sender.py | 292 ++++---- swift/proxy/controllers/base.py | 18 +- swift/proxy/controllers/container.py | 2 +- swift/proxy/controllers/obj.py | 80 +- swift/proxy/server.py | 22 +- test/functional/__init__.py | 80 +- test/functional/s3api/s3_test_client.py | 7 +- test/functional/s3api/test_acl.py | 19 +- test/functional/s3api/test_bucket.py | 215 +++--- test/functional/s3api/test_multi_delete.py | 21 +- test/functional/s3api/test_multi_upload.py | 85 ++- test/functional/s3api/test_object.py | 29 + test/functional/swift_test_client.py | 19 +- test/functional/test_access_control.py | 4 +- test/functional/test_slo.py | 55 +- test/functional/test_symlink.py | 4 + test/functional/test_tempurl.py | 41 +- test/functional/test_versioned_writes.py | 112 +-- test/probe/test_signals.py | 18 +- test/sample.conf | 8 +- test/unit/__init__.py | 18 +- test/unit/account/test_backend.py | 37 +- test/unit/account/test_reaper.py | 6 +- test/unit/cli/test_relinker.py | 21 +- test/unit/cli/test_ringcomposer.py | 2 +- .../common/middleware/crypto/crypto_helpers.py | 14 +- .../common/middleware/crypto/test_crypto_utils.py | 199 ++--- .../common/middleware/crypto/test_decrypter.py | 272 +++---- .../common/middleware/crypto/test_encrypter.py | 201 +++-- .../common/middleware/crypto/test_encryption.py | 59 +- .../common/middleware/crypto/test_keymaster.py | 144 +++- .../middleware/crypto/test_kmip_keymaster.py | 74 +- .../common/middleware/crypto/test_kms_keymaster.py | 73 +- test/unit/common/middleware/helpers.py | 8 +- test/unit/common/middleware/s3api/__init__.py | 15 +- test/unit/common/middleware/s3api/helpers.py | 15 +- test/unit/common/middleware/s3api/test_acl.py | 4 +- test/unit/common/middleware/s3api/test_bucket.py | 209 ++++-- .../common/middleware/s3api/test_multi_delete.py | 89 ++- .../common/middleware/s3api/test_multi_upload.py | 241 +++++- test/unit/common/middleware/s3api/test_obj.py | 114 ++- test/unit/common/middleware/s3api/test_s3api.py | 285 ++++++-- .../unit/common/middleware/s3api/test_s3request.py | 83 ++- .../common/middleware/s3api/test_s3response.py | 7 +- test/unit/common/middleware/s3api/test_s3token.py | 136 ++++ test/unit/common/middleware/s3api/test_service.py | 5 +- test/unit/common/middleware/test_copy.py | 49 -- test/unit/common/middleware/test_list_endpoints.py | 31 +- .../unit/common/middleware/test_listing_formats.py | 84 +-- test/unit/common/middleware/test_memcache.py | 2 +- test/unit/common/middleware/test_ratelimit.py | 48 +- test/unit/common/middleware/test_tempauth.py | 97 ++- test/unit/common/middleware/test_xprofile.py | 6 +- test/unit/common/test_bufferedhttp.py | 37 +- test/unit/common/test_daemon.py | 4 +- test/unit/common/test_db.py | 58 +- test/unit/common/test_db_replicator.py | 8 +- test/unit/common/test_direct_client.py | 264 +++---- test/unit/common/test_internal_client.py | 206 +++--- test/unit/common/test_request_helpers.py | 57 +- test/unit/common/test_storage_policy.py | 86 ++- test/unit/common/test_utils.py | 809 ++++++++++++++------- test/unit/common/test_wsgi.py | 35 +- test/unit/container/test_replicator.py | 34 +- test/unit/container/test_sharder.py | 135 +++- test/unit/container/test_sync.py | 4 +- test/unit/container/test_updater.py | 4 +- test/unit/helpers.py | 42 +- test/unit/obj/test_auditor.py | 2 +- test/unit/obj/test_diskfile.py | 215 ++++-- test/unit/obj/test_reconstructor.py | 73 +- test/unit/obj/test_replicator.py | 4 +- test/unit/obj/test_server.py | 25 +- test/unit/obj/test_ssync.py | 13 +- test/unit/obj/test_ssync_receiver.py | 59 +- test/unit/obj/test_ssync_sender.py | 487 ++++++------- test/unit/obj/test_updater.py | 4 +- test/unit/proxy/controllers/test_info.py | 10 +- test/unit/proxy/controllers/test_obj.py | 11 + test/unit/proxy/test_server.py | 88 ++- tools/playbooks/common/cover-post.yaml | 3 + tools/playbooks/common/install_dependencies.yaml | 30 + tools/playbooks/dsvm/post.yaml | 4 + tools/playbooks/dsvm/pre.yaml | 9 + tools/playbooks/dsvm/run.yaml | 11 + tools/playbooks/multinode_setup/common_config.yaml | 75 ++ .../multinode_setup/configure_loopback.yaml | 64 ++ tools/playbooks/multinode_setup/make_rings.yaml | 126 ++++ tools/playbooks/multinode_setup/pre.yaml | 8 + tools/playbooks/multinode_setup/run.yaml | 42 ++ .../templates/make_multinode_rings.j2 | 38 + .../multinode_setup/templates/rc.local.j2 | 8 + .../multinode_setup/templates/test.conf.j2 | 122 ++++ .../install_dependencies.yaml | 24 - .../saio_single_node_setup/setup_saio.yaml | 2 +- tox.ini | 33 +- 200 files changed, 8007 insertions(+), 3563 deletions(-)

1 0

kuryr-kubernetes 0.6.0 (stein)
by no-reply＠openstack.org 17 Dec '18

17 Dec '18

We are stoked to announce the release of: kuryr-kubernetes 0.6.0: Kubernetes integration with OpenStack networking This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/kuryr-kubernetes Download the package from: https://tarballs.openstack.org/kuryr-kubernetes/ Please report issues through launchpad: https://bugs.launchpad.net/kuryr-kubernetes For more details, please see below. 0.6.0 ^^^^^ New Features ************ * Added support for using cri-o (and podman & buildah) as container engine in both container images and DevStack. Upgrade Notes ************* * Before upgrading to T (0.7.x) run "kuryr-k8s-status upgrade check" to check if upgrade is possible. In case of negative result refer to kuryr-kubernetes documentation for mitigation steps. Deprecation Notes ***************** * The scripts/run_server.py scripts gets removed as we no longer use it in DevStack plugin. Changes in kuryr-kubernetes 0.5.0..0.6.0 ---------------------------------------- 74fdd3c Ensure network policies are not applied on pod with host networking 3036950 Add support for podSelector bfbb165 Ensure kubelet pod has default connectivity with Network Policies 8f42cd8 Add support to match expressions in Network Policies 791d8dc Ensure pod_label handler skips host_network pods 344b02c Update the kuryr-kubernetes path in devstack 0c2d88d spelling error 54a221a Move job list to project-template 3da5c32 fix a typo in docstring b5c6505 devstack: move master config to separate dir 2b31921 Fix -D option on build_cni_daemonset_image a208571 Fix labels encode 300dc36 Allocate service FIP after LB was provisioned 0d4cbac Set kuryr_daemon_enabled in tempest.conf correctly 90eced9 Introduce test case document for SRIOV functionality 96e314b Ensure pod relabeling is supported by the Network Policy cbc6141 Add experimental gate with cri-o 819992f Add KURYR_ENABLED_HANDLERS to devstack sample files fce2c38 Change openstack-dev to openstack-discuss cfa2962 Debugging extra fips generation for port_pool failures 364bfa1 devstack: Update Kubernetes to 1.13.0 543b8a2 Add namespaceSelector support for NetworkPolicies 4bf6662 Add missing $ for bash variable in plugin.sh eecd44d cri-o support e4f6857 devstack: parametrize openshift version fetching 064fe74 Lowercase hostname when using it as K8s nodeName 914123d devstack: Wait for the k8s api to be healthy d029ddb Ensure existing pods use the right network policy 38f5416 Fix quota readiness check 6dfd406 Add security groups driver for NP 76db817 Support network policy update a08e8ad Remove unused functions from devstack/plugin.sh 00eacbe Fix definition of CNIRunner.get_container_id() 82e32e1 Allow UDP traffic from host when SG=namespace b215aae Add quota readiness check to controller 80fe759 Add missing ws separator between words 65e05c3 Work out situation with KUBERNETES_NODE_NAME aa5ec45 Rename kuryr-status to kuryr-k8s-status 4199205 Revert "Make LBaaS v2 gates non-voting" 5e44d17 Add missing key check while lbaas member add 88e584e Ensure floatingip information is retrieved 66757cf Delete duplicate words in network_policy.rst 3ec212a Link to public document instead of private 72b6722 Adds CRDs readiness checks to Kuryr-Controller 3a6ec33 Use show_floatingip method instead of get_floatingip 237c773 Update the HTTP links to HTTPS in manual.rstl. 63fe375 Remove hooks directory 282564e Omit the twice occured words in npwg_spec_support.rst 18e2c82 devstack: Update Kubernetes to 1.12.2 0b211cd Remove np spec from kuryrnetworkpolicy annotations a5ee0fd Ignore exc on FIP association if state is correct 1c575a2 Make sure we never have 2 kuryr-controllers 6274bad Make LBaaS v2 gates non-voting 1871596 Add HA gate 4595eec Trivial fix for network namespace doc ee626d8 Remove race between sync_pools and other pool actions a8567e9 Remove race between sync_pools and _get_port_from_pool 651da66 Ensure namespace and network policy compatibility 7381d0b Set the UDP services enabled flag at tempest.conf 2ecf343 Remove etcd_legacy f0cde86 Move KUBERNETES_NODE_NAME env var to controller 92becbd Remove kuryr-kubernetes-tempest-lbaasv2 job e176dd3 Fix tests in test_public_ip.py 8f871ee K8S-services: add support for UDP ports 6acbb7a LBaaS driver: optimize Octavia polling timers 72d2d05 Enable `--restart on-failure` for K8s containers 984e8e5 Move Python 3.6 jobs to check and gate as voting efbb344 Add `--force` to `docker rm` in DevStack plugin 9430dd5 Add missing space in debug log 4a96e1a Switch Python 3.6 job to not run pools tests 593e5a0 Fix k8s API server access on Nested deployment 51dfd98 fix tox -e debug target a25da70 Use /var/run instead of /var/run/openvswitch a85a027 Merging port pool and namespace gates 381e3ca Howto document for UDP services 3d1a37f Add missing documentation for nested deployment dcd3773 Don't quote {posargs} in tox.ini b814a12 Add NetworkPolicies resources to kuryr's CR 81b953b Add routes and multi-vif resources to Kuryr's CR 5358702 Add kuryr-status utility for upgrade-checkers d968c43 devstack: Add compatibility for newer k8s ff3d458 Fix devstack deployment when ovn-provider is selected 451add3 svc namespace isolation support for different octavia drivers 5fb232a drop reraise from the controller 402a041 Add support for pre-commit-hooks 5963d01 Add support for OVN provider in Endpoint LBaaS driver ef00f34 Drop unnecessary import 0e95704 Translate security group rules. 3d16aeb ignore Editor tags 0dd1e05 Add HOWTO for SRIOV use case 4d53db2 Add SR-IOV binding driver to CNI 8e60dcc Add SR-IOV pod vif driver 8a38f84 Add non-containerized Python 3.6 gate ed218a4 LBaaS driver: Add provider support fa927d4 cni_ds_init: exec into the main process e430665 Spec for vhost-user port type ea2323a Cleanup cni.main file 0478a47 Add container_id to connect method of BaseBindingDriver d008293 Pass sys.stdin.buffer to json.load() in Python 3 a42e63a Fix Python 3 compatiblity in K8sClient.watch() e20dcad Add support for python3 containerized kuryr-kubernetes f1db813 Add kuryr_daemon_enabled when kuryr-daemon exists 721932d Refactor DriverBase.get_instance() f854378 Remove commented code that should be deleted 783b93c Fix small typo in controller/handlers/lbaas.py 346f762 Clean up watch resources after watcher.stop() 027a17f Produce mount volume only if OVS_HOST_PATH is defined 1d5364a Health Manager details update 4465c20 Implement NP SG create/delete actions 8608966 Ensure ports pool are not duplicated with kuryr-controller HA c9f03a6 Introduce proper diver mapping in VIF handler 6183d8f Move dragonflow job to experimental 68367dc Add experimental check for NPWG multi-vif driver 11ddd78 Add interface for binding driver 810865c Verify keystone connection using token be67776 Fix typo and indents in document fd1c86f Add namespace handler in ingress gate 0c163a5 Ensure non-daemon gates run without cni daemon 9ac72c8 add python 3.6 unit test job 5174db4 switch documentation job to new PTI 9baf629 import zuul job settings from project-config 831ee03 OCP-Router - Fix Ingress controller LB listener creation eb8b411 Update reno for stable/rocky b4b2c7b Ensure OpenShift gate uses the namespace subnet/sg drivers 8e8c3fc Add a new gate for network policies e3a3359 Avoid release_vif race when using namespaces and pools b52f820 PodVIFDriver impl - fix release_vif() signature a37d999 Update links in README 5502e97 Remove the duplicated word 579cdf1 OCP-Router: fix external network bug in devstack 2301ca8 [Trivialfix]Modify a grammatical error Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 + .pre-commit-config.yaml | 6 + .zuul.d/base.yaml | 3 +- .zuul.d/lbaasv2.yaml | 1 + .zuul.d/multi-vif.yaml | 23 + .zuul.d/multinode.yaml | 29 +- .zuul.d/octavia.yaml | 68 ++- .zuul.d/project.yaml | 31 +- .zuul.d/sdn.yaml | 2 +- CONTRIBUTING.rst | 9 + README.rst | 6 +- cni_ds_init | 39 +- cni_py3.Dockerfile | 30 ++ controller_py3.Dockerfile | 26 ++ devstack/lib/kuryr_kubernetes | 243 +++++----- devstack/local.conf.df.sample | 25 +- devstack/local.conf.odl.sample | 20 +- devstack/local.conf.openshift.sample | 25 +- devstack/local.conf.ovn.sample | 51 ++- devstack/local.conf.sample | 30 +- devstack/plugin.sh | 472 ++++++++++++------- devstack/settings | 28 +- .../installation/multi_vif_with_npwg_spec.rst | 42 +- .../installation/testing_sriov_functional.rst | 244 ++++++++++ hooks/hook-backports.ssl_match_hostname.py | 15 - hooks/hook-dns.py | 2 - hooks/hook-kuryr_kubernetes.cni.binding.py | 9 - hooks/hook-os_vif.py | 7 - hooks/hook-pyroute2.py | 7 - hooks/hook-vif_plug_linux_bridge.py | 2 - hooks/hook-vif_plug_ovs.py | 2 - kubernetes_crds/kuryrnetpolicy.yaml | 14 + kuryr_kubernetes/cmd/status.py | 266 +++++++++++ kuryr_kubernetes/cni/api.py | 2 +- kuryr_kubernetes/cni/binding/base.py | 28 +- kuryr_kubernetes/cni/binding/bridge.py | 26 +- kuryr_kubernetes/cni/binding/nested.py | 6 +- kuryr_kubernetes/cni/binding/sriov.py | 194 ++++++++ kuryr_kubernetes/cni/daemon/service.py | 5 +- kuryr_kubernetes/cni/handlers.py | 8 +- kuryr_kubernetes/cni/health.py | 2 +- kuryr_kubernetes/cni/main.py | 19 +- kuryr_kubernetes/cni/plugins/k8s_cni_registry.py | 9 +- kuryr_kubernetes/config.py | 31 +- kuryr_kubernetes/constants.py | 12 + kuryr_kubernetes/controller/drivers/base.py | 105 ++++- .../controller/drivers/default_security_groups.py | 12 + .../controller/drivers/lb_public_ip.py | 13 +- kuryr_kubernetes/controller/drivers/lbaasv2.py | 182 ++++++-- kuryr_kubernetes/controller/drivers/multi_vif.py | 4 +- .../controller/drivers/nested_macvlan_vif.py | 2 +- .../controller/drivers/nested_vlan_vif.py | 4 +- .../controller/drivers/network_policy.py | 508 ++++++++++++++++++++- .../drivers/network_policy_security_groups.py | 176 +++++++ kuryr_kubernetes/controller/drivers/neutron_vif.py | 14 +- kuryr_kubernetes/controller/drivers/public_ip.py | 47 +- kuryr_kubernetes/controller/drivers/sriov.py | 132 ++++++ kuryr_kubernetes/controller/drivers/utils.py | 116 +++++ kuryr_kubernetes/controller/drivers/vif_pool.py | 107 ++++- kuryr_kubernetes/controller/handlers/lbaas.py | 59 ++- kuryr_kubernetes/controller/handlers/namespace.py | 49 +- kuryr_kubernetes/controller/handlers/pod_label.py | 97 ++++ kuryr_kubernetes/controller/handlers/policy.py | 69 ++- kuryr_kubernetes/controller/handlers/vif.py | 87 ++-- kuryr_kubernetes/controller/ingress/ingress_ctl.py | 16 +- kuryr_kubernetes/controller/managers/health.py | 58 ++- kuryr_kubernetes/controller/service.py | 6 + kuryr_kubernetes/handlers/health.py | 17 +- kuryr_kubernetes/handlers/retry.py | 9 +- kuryr_kubernetes/k8s_client.py | 17 +- kuryr_kubernetes/objects/lbaas.py | 6 +- kuryr_kubernetes/objects/vif.py | 12 + kuryr_kubernetes/opts.py | 7 + kuryr_kubernetes/os_vif_plug_noop.py | 20 + kuryr_kubernetes/os_vif_util.py | 34 ++ .../unit/cni/plugins/test_k8s_cni_registry.py | 9 +- .../unit/controller/drivers/test_multi_vif.py | 2 +- .../unit/controller/drivers/test_network_policy.py | 416 +++++++++++++++++ .../drivers/test_network_policy_security_groups.py | 254 +++++++++++ .../unit/controller/drivers/test_public_ip.py | 154 +++---- .../unit/controller/handlers/test_ingress_lbaas.py | 10 +- .../unit/controller/handlers/test_pod_label.py | 120 +++++ .../unit/controller/ingress/test_ingress_ctl.py | 35 +- kuryr_kubernetes/utils.py | 26 +- kuryr_kubernetes/version.py | 3 +- kuryr_kubernetes/watcher.py | 13 +- .../notes/cri-o-support-ab7e810775754ea7.yaml | 5 + .../notes/remove-run-server-aca25a2d9d723dc7.yaml | 5 + .../notes/stein-upgrade-226c8e7b735701ee.yaml | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + requirements.txt | 1 + scripts/run_server.py | 17 - setup.cfg | 10 +- tools/build_cni_daemonset_image | 69 ++- tools/gate/copy_k8s_logs.sh | 10 +- tox.ini | 10 +- 127 files changed, 6410 insertions(+), 1117 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f7df836..9a55d20 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18,0 +19 @@ os-vif!=1.8.0,>=1.7.0 # Apache-2.0 +PrettyTable<0.8,>=0.7.2 # BSD

1 0

os-ken 0.3.1 (stein)
by no-reply＠openstack.org 17 Dec '18

17 Dec '18

We are ecstatic to announce the release of: os-ken 0.3.1: A component-based software defined networking framework for OpenStack. This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/os-ken Download the package from: https://pypi.org/project/os-ken Please report issues through launchpad: https://bugs.launchpad.net/os-ken For more details, please see below. Changes in os-ken 0.3.0..0.3.1 ------------------------------ a74bac9 Add CLI scripts from osken to be installed via setup.cfg Diffstat (except docs and test files) ------------------------------------- bin/osken | 20 ----------------- bin/osken-manager | 19 ---------------- os_ken/services/protocols/vrrp/manager.py | 6 ++--- os_ken/services/protocols/vrrp/sample_manager.py | 8 +++---- os_ken/services/protocols/vrrp/sample_router.py | 8 +++---- setup.cfg | 5 +++++ tools/osken-manager.spec | 28 ------------------------ 16 files changed, 33 insertions(+), 95 deletions(-)

1 0

git-os-job 1.1.3
by no-reply＠openstack.org 17 Dec '18

17 Dec '18

We are pumped to announce the release of: git-os-job 1.1.3: Show the OpenStack job logs for a commit Download the package from: https://pypi.org/project/git-os-job For more details, please see below.

1 0

os-resource-classes 0.1.0 (stein)
by no-reply＠openstack.org 14 Dec '18

14 Dec '18

We are psyched to announce the release of: os-resource-classes 0.1.0: Resource Classes for OpenStack This is the first release of os-resource-classes. This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/os-resource-classes Download the package from: https://pypi.org/project/os-resource-classes Please report issues through launchpad: https://bugs.launchpad.net/nova For more details, please see below. Changes in os-resource-classes 373e6d16d1b9016e1c7d34038368e870839b0469..0.1.0 ------------------------------------------------------------------------------ 1ae04e7 Tune up documentation to be more useful 3d038f5 Sync STANDARDS with placement/nova rc_fields df25145 Rename ORDERED_CLASSES to STANDARDS 385310e Initial automated testing for os-resource-classes 926cd18 fix formatting in README a6f30f6 Set some real tests for the ids in ORDERED_CLASSES 5fc979e Initial tuning from cookiecutter start

1 0

openstackclient 0.1.0
by no-reply＠openstack.org 14 Dec '18

14 Dec '18

We are satisfied to announce the release of: openstackclient 0.1.0: OpenStack Command-line Client This is the first release of openstackclient. The source is available from: https://git.openstack.org/cgit/openstack/openstackclient Download the package from: https://pypi.org/project/openstackclient Please report issues through launchpad: https://bugs.launchpad.net/python-openstackclient For more details, please see below. Changes in openstackclient 245be3b3dd71ba43f39fb9392c666c02f00222d9..0.1.0 -------------------------------------------------------------------------- 9155930 fix tox python3 overrides 06a7f96 add python 3.6 unit test job 55c0c42 import zuul job settings from project-config 530e586 Update openstackclient-check-plugins to honor constraints aebbade Switch to stestr e26281d Trivial: Update pypi url to new url ed9fc78 Add python-qinlingclient to zuul job ca95da0 Zuul: Remove project name 47bd5d8 Update homepage url ef2f57b Fix check plugins: zuul.projects is now a dict f811fba Zuul: add file extension to playbook path 9b23f48 Always find the test python module in this repo fac9e32 Add OSC plugin job ea505bb Updated from global requirements 4ce2ea6 Add python-octaviaclient dc5a48e Updated from global requirements bf4441a Updated from global requirements db478f6 Explicitly depend on python-openstackclient 61eda5e Updated from global requirements 169f8a1 Updated from global requirements 9b9928d add new plugins to requirements.txt ef9dec8 Fix for Sphinx 1.5 and pbr 1.10 f85764d Updated from global requirements ddf48da Updated from global requirements a1d37b3 Updated from global requirements e7924ad Updated from global requirements 49b361d Initial commit for the OSC metapackage repo. Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt new file mode 100644 index 0000000..4806598 --- /dev/null +++ b/requirements.txt @@ -0,0 +1,24 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +pbr!=2.1.0,>=2.0.0 # Apache-2.0 +aodhclient>=0.9.0 # Apache-2.0 +gnocchiclient>=3.3.1 # Apache-2.0 +python-barbicanclient>=4.5.2 # Apache-2.0 +python-congressclient<2000,>=1.3.0 # Apache-2.0 +python-designateclient>=2.7.0 # Apache-2.0 +python-heatclient>=1.10.0 # Apache-2.0 +python-ironicclient>=1.14.0 # Apache-2.0 +python-ironic-inspector-client>=1.5.0 # Apache-2.0 +python-mistralclient>=3.1.0 # Apache-2.0 +python-muranoclient>=0.8.2 # Apache-2.0 +python-neutronclient>=6.3.0 # Apache-2.0 +python-octaviaclient>=1.0.0 # Apache-2.0 +python-openstackclient>=3.12.0 # Apache-2.0 +python-saharaclient>=1.2.0 # Apache-2.0 +python-searchlightclient>=1.0.0 #Apache-2.0 +python-senlinclient>=1.1.0 # Apache-2.0 +python-troveclient>=2.2.0 # Apache-2.0 +python-vitrageclient>=1.3.0 # Apache-2.0 +python-watcherclient>=1.1.0 # Apache-2.0 +python-zaqarclient>=1.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..890b469 --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1,12 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +hacking<0.11,>=0.10.0 + +# this is required for the tests +oslotest>=1.10.0 # Apache-2.0 +stestr>=2.0.0 # Apache-2.0 + +# this is required for the docs +sphinx>=1.6.2 # BSD +oslosphinx>=4.7.0 # Apache-2.0

1 0

os_vif 1.13.1 (stein)
by no-reply＠openstack.org 13 Dec '18

13 Dec '18

We are amped to announce the release of: os_vif 1.13.1: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/os-vif Download the package from: https://pypi.org/project/os_vif Please report issues through launchpad: https://bugs.launchpad.net/os-vif For more details, please see below. Changes in os_vif 1.13.0..1.13.1 -------------------------------- db52163 Create iproute.IPRoute() inside a context Diffstat (except docs and test files) ------------------------------------- os_vif/internal/command/ip/linux/impl_pyroute2.py | 86 +++++++++++----------- .../internal/command/ip/test_impl_pyroute2.py | 10 +++ 2 files changed, 53 insertions(+), 43 deletions(-)

1 0

tosca-parser 1.3.0 (stein)
by no-reply＠openstack.org 13 Dec '18

13 Dec '18

We contentedly announce the release of: tosca-parser 1.3.0: Parser for TOSCA Simple Profile in YAML. This release is part of the stein release series. The source is available from: http://git.openstack.org/cgit/openstack/tosca-parser/ Download the package from: https://pypi.org/project/tosca-parser For more details, please see below. Changes in tosca-parser 1.2.0..1.3.0 ------------------------------------ 0c77377 Move extension tests to where stestr can find them c08022d Fix error using get_attribute with HOST in case of setting host relationship in "long" format. 803b2a8 Use stestr instead of testr Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 ++- .stestr.conf | 4 +++ .testr.conf | 7 ------ lower-constraints.txt | 1 + test-requirements.txt | 2 +- toscaparser/functions.py | 18 ++++++++++++++ tox.ini | 9 +++++-- 13 files changed, 97 insertions(+), 40 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 8f58289..1fe45ee 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.0.0 # Apache-2.0

1 0

pymod2pkg 0.17.0
by no-reply＠openstack.org 13 Dec '18

13 Dec '18

We are delighted to announce the release of: pymod2pkg 0.17.0: python module name to package name map Download the package from: https://tarballs.openstack.org/pymod2pkg/ For more details, please see below. Changes in pymod2pkg 0.16.0..0.17.0 ----------------------------------- 380865c Add entry for python-octaviaclient 68cf34d Add zun to the client/services list 6c35e3c added regex rule for horizon dashboard packages for suse bfdd7ec Change openstack-dev to openstack-discuss 1905e8b fix tox python3 overrides Diffstat (except docs and test files) ------------------------------------- pymod2pkg/__init__.py | 25 ++++++++++++------------- setup.cfg | 2 +- tox.ini | 2 ++ 4 files changed, 22 insertions(+), 14 deletions(-)

1 0

openstack-ansible 18.1.1 (rocky)
by no-reply＠openstack.org 12 Dec '18

12 Dec '18

We are ecstatic to announce the release of: openstack-ansible 18.1.1: Ansible playbooks for deploying OpenStack This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 18.1.1 ^^^^^^ New Features ************ * This role now optionally enables your compute nodes' KVM kernel module nested virtualization capabilities, by setting nova_nested_virt_enabled to true. Depending on your distribution and libvirt version, you might need to set additional variables to fully enabled nested virtualization. For details, please see https://docs.openstack.org/nova/latest/admin/configuration /hypervisor-kvm.html#nested-guest-support. * You can now set the Libvirt CPU model and feature flags from the appropriate entry under the "nova_virt_types" dictionary variable (normally "kvm"). "nova_cpu_model" is a string value that sets the CPU model; this value is ignored if you set any "nova_cpu_mode" other than "custom". "nova_cpu_model_extra_flags" is a list that allows you to specify extra CPU feature flags not normally passed through with "host-model", or the "custom" CPU model of your choice. Upgrade Notes ************* * If your configuration previously set the "libvirt/cpu_model" and/or "libvirt/cpu_model_extra_flags" variables in a "nova_nova_conf_overrides" dictionary, you should consider moving those to "nova_cpu_model" and "nova_cpu_model_extra_flags" in the appropriate entry (normally "kvm") in the "nova_virt_types" dictionary. Bug Fixes ********* * With the release of CentOS 7.6, deployments were breaking and becoming very slow when we restart dbus in order to catch some PolicyKit changes. However, those changes were never actaully used so they were happening for no reason. We no longer make any modifications to the systemd-machined configuration and/or PolicyKit to maintain upstream compatibility. Changes in openstack-ansible 18.1.0..18.1.1 ------------------------------------------- 55bfbdb Implement AIO changes to allow test usage by roles 6c94d8e [docs] Clean up the AIO user story bb63b08 Implement documentation changes for translations 1716ca7 Ensure AIO container_tech/install_method vars are namespaced e9a1d96 Remove unnecessary octavia scenario AIO bootstrap bae39fb Update lxc_hosts SHA for CentOS systemd fix a83274a Fix "configure container (other services)" when statement 159ef81 Add bionic to Vagrantfile 70ffc0b Update doc to use chrony instead of ntp 4287eda Add extra volume types to AIO 70b83f2 Add openstackclient bash completion 2905299 Move ARA install to end of bootstrap a70dc3a Update all SHAs for 18.1.1 0cd6fdb Ensure that a consistent mirror is used for RDO 43a165e haproxy: remove repo_cache service 41a76e7 Add MariaDB infrastructure mirrors d43ee86 Set SUSE ceph-distro job to non-voting 90bf004 Use loop_var name in when clause 72358b3 Docs: Fix VLAN bridge interface in example setup Diffstat (except docs and test files) ------------------------------------- .gitignore | 9 +- Vagrantfile | 11 ++ ansible-role-requirements.yml | 34 ++--- deploy-guide/source/targethosts-prepare.rst | 22 +-- .../openstack_interface.cfg.test.example | 2 +- etc/openstack_deploy/conf.d/cinder.yml.aio | 27 ++++ .../openstack_user_config.yml.aio.j2 | 16 +-- inventory/group_vars/all/all.yml | 2 +- inventory/group_vars/haproxy/haproxy.yml | 5 + inventory/group_vars/utility_all.yml | 1 + playbooks/common-playbooks/cinder.yml | 4 +- playbooks/common-playbooks/nova.yml | 8 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 74 +++++----- playbooks/utility-install.yml | 3 + .../notes/add-nested-virt-1db2270e73d1b34.yaml | 7 + .../notes/nova-cpu-model-006da20048168842.yaml | 18 +++ ...ve-machinectl-workarounds-d67a4739f6385f54.yaml | 7 + scripts/bootstrap-ansible.sh | 10 +- .../bootstrap-host/tasks/check-requirements.yml | 23 ++- .../bootstrap-host/tasks/prepare_aio_config.yml | 42 ++++-- .../roles/bootstrap-host/tasks/prepare_octavia.yml | 80 ----------- .../templates/user_variables.aio.yml.j2 | 14 +- .../templates/user_variables_octavia.yml.j2 | 25 ---- .../templates/user_variables_translations.yml.j2 | 2 +- zuul.d/jobs.yaml | 44 +++--- zuul.d/project-templates.yaml | 13 +- 36 files changed, 399 insertions(+), 520 deletions(-)

1 0

octavia-lib 1.0.0 (stein)
by no-reply＠openstack.org 12 Dec '18

12 Dec '18

We are pleased to announce the release of: octavia-lib 1.0.0: A library to support Octavia provider drivers. This is the first release of octavia-lib. This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/octavia-lib Download the package from: https://pypi.org/project/octavia-lib Please report issues through launchpad: https://storyboard.openstack.org/#!/project/openstack/octavia-lib For more details, please see below. 1.0.0 ^^^^^ Other Notes * This is the initial cookiecutter commit for this new library. Changes in octavia-lib dbdf1c58e4f34ed7918458325040cf5b85221fb7..1.0.0 ---------------------------------------------------------------------- 96df205 Change openstack-dev to openstack-discuss e55c7ec Initial provider driver library checkin 5f833c7 Initial cookie-cutter commit for octavia-lib Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt new file mode 100644 index 0000000..932c39e --- /dev/null +++ b/requirements.txt @@ -0,0 +1,8 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. + +oslo.i18n>=3.15.3 # Apache-2.0 +oslo.log>=3.36.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 +six>=1.10.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt new file mode 100644 index 0000000..ea27439 --- /dev/null +++ b/test-requirements.txt @@ -0,0 +1,15 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. + +hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 + +bandit>=1.1.0 # Apache-2.0 +coverage>=4.0,!=4.4 # Apache-2.0 +doc8>=0.6.0 # Apache-2.0 +pylint==1.9.2 # GPLv2 +python-subunit>=1.0.0 # Apache-2.0/BSD +oslo.utils>=3.33.0 # Apache-2.0 +oslotest>=3.2.0 # Apache-2.0 +stestr>=2.0.0 # Apache-2.0 +testtools>=2.2.0 # MIT

1 0

os-api-ref 1.6.0
by no-reply＠openstack.org 12 Dec '18

12 Dec '18

We are ecstatic to announce the release of: os-api-ref 1.6.0: Sphinx Extensions to support API reference sites in OpenStack The source is available from: https://git.openstack.org/cgit/openstack/os-api-ref Download the package from: https://tarballs.openstack.org/os-api-ref/ For more details, please see below. Changes in os-api-ref 1.5.0..1.6.0 ---------------------------------- b23ce2f Fixing duplicate label issue. d636ddd readthedocs.io support 4fdeb69 Update the remained discuss email 58fe67b Change openstack-dev to openstack-discuss ba9b019 Update sphinx extension logging fd9f284 tests: Support Sphinx 1.8+ 26fc4a3 docs: Remove broken link 55f4a81 switch documentation job to new PTI ec28fa9 Fix sphinx-build invocation 4f27e52 import zuul job settings from project-config 9cebd34 Use 'sphinx.util.logging' d680549 General overhaul of testing setup 982382a Raise warning if top-level value is not a dict 6483fe2 Updated from global requirements 40ec412 Updated from global requirements 4698943 Updated from global requirements 801515b Use openstackdocstheme 594ce13 Remove name from project stanza 99b9b75 Fix UnicodeDecodeError Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .stestr.conf | 3 + .zuul.yaml | 7 +- README.rst | 2 +- os_api_ref/__init__.py | 114 +++++++++++++++------------------ os_api_ref/http_codes.py | 22 ++++--- requirements.txt | 6 +- setup.cfg | 2 +- test-requirements.txt | 2 +- tox.ini | 15 +++-- 16 files changed, 125 insertions(+), 95 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 73f7cc1..4c5a592 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -PyYAML>=3.10 # MIT +PyYAML>=3.12 # MIT @@ -8,2 +8,2 @@ six>=1.10.0 # MIT -sphinx!=1.6.6,>=1.6.2 # BSD -openstackdocstheme>=1.17.0 # Apache-2.0 +sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +openstackdocstheme>=1.18.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 585a62e..38f028b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -oslosphinx>=4.7.0 # Apache-2.0 @@ -13,0 +13 @@ beautifulsoup4>=4.6.0 # MIT +stestr>=2.0.0 # Apache-2.0

1 0

networking-generic-switch 1.3.0 (stein)
by no-reply＠openstack.org 12 Dec '18

12 Dec '18

We high-spiritedly announce the release of: networking-generic-switch 1.3.0: Generic Switch ML2 Neutron Driver This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/networking-generic-switch Download the package from: https://pypi.org/project/networking-generic-switch Please report issues through launchpad: https://storyboard.openstack.org/#!/project/956 For more details, please see below. 1.3.0 ^^^^^ New Features * Adds support for disabling inactive switch interfaces. This is configured on a per-device basis using the "ngs_disable_inactive_ports" flag. See Story 2003391 for details. Changes in networking-generic-switch 1.2.0..1.3.0 ------------------------------------------------- 59cf11b Fix encoding for python3 lock naming 4f7ecb1 Update min tox version to 2.0 1d6290e Use oslo_utils for string to bool conversion d2a653d Set config filename for neutron-metering 39ae573 Support disabling inactive links for Juniper 55a9efe Support disabling inactive links 9fa0acc Install doc requirements in venv tox environment e306c93 Detection of errors for Dell PowerConnect devices 2485e41 Convert error detection to use a decorator 8d09e97 switch documentation job to new PTI 5c03f6c import zuul job settings from project-config 679d08e Update reno for stable/rocky d5f7ab3 Detection of config errors for netmiko drivers Diffstat (except docs and test files) ------------------------------------- devstack/upgrade/upgrade.sh | 4 + networking_generic_switch/devices/__init__.py | 10 +- .../devices/netmiko_devices/__init__.py | 79 +++++++++++++++- .../devices/netmiko_devices/brocade.py | 7 +- .../devices/netmiko_devices/dell.py | 9 ++ .../devices/netmiko_devices/juniper.py | 8 ++ networking_generic_switch/locking.py | 2 +- .../disable-inactive-ports-bd6c42ceb232aab2.yaml | 7 ++ releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 ++ requirements.txt | 1 + tox.ini | 6 +- zuul.d/project.yaml | 7 ++ 18 files changed, 368 insertions(+), 45 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 678ca14..9f68dcc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10,0 +11 @@ oslo.log>=3.36.0 # Apache-2.0 +oslo.utils>=3.33.0 # Apache-2.0

1 0

ironic-inspector 8.1.0 (stein)
by no-reply＠openstack.org 12 Dec '18

12 Dec '18

We contentedly announce the release of: ironic-inspector 8.1.0: Hardware introspection for OpenStack Bare Metal This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through launchpad: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 8.1.0 ^^^^^ New Features ************ * Adds a configuration option "[iptables]ip_version" to specify the desired ip version for the iptables pxe filter, possible values are "4" and "6", the default value is "4". When set to "6", the iptables pxe filter will use "ip6tables" command to manage rules for the DHCPv6 port "547". * Adds new introspection rules actions to add or remove traits on nodes: "add-trait" and "remove-trait". Upgrade Notes ************* * The deprecated configuration option "[DEFAULT]node_status_keep_time" was removed. * Adds rpc related configuration options for the communication between ironic-inspector API and worker. It needs to be configured properly during upgrade. Set "[DEFAULT]transport_url" to "fake://" if a rpc backend is not available or not desired. Deprecation Notes ***************** * Configuration options "[DEFAULT]ssl_cert_path" and "[DEFAULT]ssl_key_path" are deprecated for ironic-inspector now uses oslo.service as underlying HTTP service instead of Werkzeug. Please use "[ssl]cert_file" and "[ssl]key_file". Bug Fixes ********* * A new rootwrap filter is now included to allow control of the systemd dnsmasq service used by ironic-inspector. This fixes a permission issue when systemctl commands are used as "dnsmasq_start_command" and "dnsmasq_stop_command" in the configuration for the dnsmasq pxe filter. See bug 2002818 (https://storyboard.openstack.org/#!/story/2002818) Note: The filter uses the systemd service name used by the RDO distribution ("openstack-ironic-inspector-dnsmasq.service"). * Fixes issue that can result in introspection failure when a network switch sends incomplete information for LLDP switch_id or port_id. The validation expects these fields when a port is updated, this fix now handles the validation exception. * Allows the "set-attribute" introspection rule action to accept "None" as value for a property. * Fixes the issue that ports were not collected when there were only IPv6 addresses (no IPv4), and the configuration option "[processing]add_ports" was not set to "all". Inspector will report "No suitable interfaces found" if no interface is collected. For more information see Story 1744073 (https://storyboard.openstack.org/#!/story/1744073) Changes in ironic-inspector 8.0.0..8.1.0 ---------------------------------------- 77cfa93 spelling error 22294ab Accept None value for set-attribute 63dceb5 Change openstack-dev to openstack-discuss f8ae2c4 spelling error f15e470 Add a voting bifrost job to ironic-inspector a1c44d2 Support IPv6 address when validating interfaces b750ef5 Replaces http with https in release notes 7703aab Handle validation failure if not all switch fields received 74dcdc4 Remove the repetition words in usage.rst f37eb0f Support ip6tables for iptables pxe filter 3247cb5 Zuul migration edd6810 Wrap Flask into oslo.service a228912 Wrap rpc server into oslo.service 05a86b3 Add API reference 8ab225e Rearrange conf and policy configuration file 4f2f4d8 Test swift python3 support 1ef55e3 Replace subprocess with processutils 4261218 Use templates for cover and lower-constraints 0a26a66 Add introspection rules actions to add/remove traits on nodes d13d814 Replace assertEqual(True/False, *) with assertTrue/assertFalse in tests 86d6173 Imported Translations from Zanata da40b42 Use set_defaults from cors 34b1503 Imported Translations from Zanata 5b44f6e Imported Translations from Zanata 2459cd8 Python 3.7: fix os.errno -> errno 8c5d7de Add rootwrap filter for systemctl control of dnsmasq 574af47 add python 3.6 unit test job 744138a switch documentation job to new PTI 320cc22 import zuul job settings from project-config d188c10 Imported Translations from Zanata 0c7a52b Remove deprecated option node_status_keep_time e1d1d4e Update reno for stable/rocky 9be2d68 Remove unused pydot3 dependency Diffstat (except docs and test files) ------------------------------------- api-ref/source/conf.py | 238 +++++++++++++ api-ref/source/index.rst | 12 + api-ref/source/introspection-api-v1-continue.inc | 68 ++++ .../source/introspection-api-v1-introspection.inc | 226 ++++++++++++ api-ref/source/introspection-api-v1-rules.inc | 155 ++++++++ api-ref/source/introspection-api-versions.inc | 81 +++++ api-ref/source/parameters.yaml | 257 ++++++++++++++ api-ref/source/samples/api-root-response.json | 14 + .../source/samples/api-v1-common-node-uuid.json | 3 + .../source/samples/api-v1-common-rule-uuid.json | 3 + .../source/samples/api-v1-continue-request.json | 75 ++++ .../source/samples/api-v1-create-rule-request.json | 26 ++ .../samples/api-v1-create-rule-response.json | 36 ++ .../api-v1-data-introspection-response.json | 114 ++++++ .../samples/api-v1-get-introspection-response.json | 14 + .../api-v1-get-introspections-response.json | 32 ++ .../source/samples/api-v1-get-rule-response.json | 41 +++ .../source/samples/api-v1-get-rules-response.json | 24 ++ api-ref/source/samples/api-v1-root-response.json | 31 ++ config-generator.conf | 8 - devstack/plugin.sh | 5 +- devstack/upgrade/upgrade.sh | 3 + ironic_inspector/cmd/all.py | 12 +- ironic_inspector/common/rpc.py | 29 +- ironic_inspector/common/rpc_service.py | 62 ++++ ironic_inspector/common/service_utils.py | 6 + ironic_inspector/conductor/manager.py | 108 ++++++ ironic_inspector/conf/default.py | 25 +- ironic_inspector/conf/iptables.py | 6 + ironic_inspector/conf/opts.py | 4 +- .../locale/en_GB/LC_MESSAGES/ironic_inspector.po | 60 ++-- ironic_inspector/main.py | 2 +- ironic_inspector/node_cache.py | 33 +- ironic_inspector/plugins/local_link_connection.py | 8 +- ironic_inspector/plugins/rules.py | 26 +- ironic_inspector/plugins/standard.py | 13 +- ironic_inspector/pxe_filter/dnsmasq.py | 8 +- ironic_inspector/pxe_filter/iptables.py | 42 ++- ironic_inspector/test/functional.py | 1 + .../test/unit/test_dnsmasq_pxe_filter.py | 16 +- ironic_inspector/test/unit/test_iptables.py | 73 +++- ironic_inspector/test/unit/test_manager.py | 203 +++++++++++ ironic_inspector/test/unit/test_node_cache.py | 24 -- .../unit/test_plugins_local_link_connection.py | 18 + ironic_inspector/test/unit/test_plugins_rules.py | 40 +++ .../test/unit/test_plugins_standard.py | 44 +++ ironic_inspector/test/unit/test_rules.py | 12 + ironic_inspector/test/unit/test_wsgi_service.py | 395 ++------------------- ironic_inspector/wsgi_service.py | 204 ++--------- lower-constraints.txt | 4 +- .../post.yaml | 15 - .../run.yaml | 174 --------- .../post.yaml | 15 - .../ironic-inspector-tempest-dsvm-python3/run.yaml | 132 ------- policy-generator.conf | 3 - releasenotes/notes/cors-5f345c65da7f5c99.yaml | 6 +- .../notes/deprecate-ssl-opts-40ce8f4618c786ef.yaml | 7 + ...filter-rootwrap-systemctl-099964ad39d38b4c.yaml | 11 + .../notes/extend-rules-9a9d38701e970611.yaml | 2 +- ...handle-patch-port-failure-9a8b85749104506f.yaml | 6 + .../no-downgrade-migrations-514bf872d9f944ed.yaml | 2 +- ...move-opt-keep-node-status-7d6b96f1a6e498a8.yaml | 5 + .../notes/rpc-backends-0e7405aa1c7723a0.yaml | 7 + ...op-when-setbootdev-failed-68d84fec0843bdc8.yaml | 2 +- .../notes/support-ip6tables-ce30f614de502adb.yaml | 8 + .../notes/trait-actions-eec05cbb6a944619.yaml | 5 + ...perty_instrospectionrules-78d64b8b7643e40d.yaml | 4 + .../validate-ipv6-address-fda29c929754352e.yaml | 9 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 126 +++++-- releasenotes/source/rocky.rst | 6 + requirements.txt | 1 + rootwrap.d/ironic-inspector-firewall.filters | 6 - rootwrap.d/ironic-inspector.filters | 11 + setup.cfg | 4 +- test-requirements.txt | 3 +- tools/config-generator.conf | 12 + tools/policy-generator.conf | 3 + tox.ini | 10 +- zuul.d/ironic-inspector-jobs.yaml | 133 +++++++ zuul.d/legacy-ironic-inspector-jobs.yaml | 20 +- zuul.d/project.yaml | 13 +- 86 files changed, 2620 insertions(+), 1102 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ef6c055..c0f4edc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -31,0 +32 @@ oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 +oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index aced9f8..204e4ce 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10,0 +11 @@ openstackdocstheme>=1.18.1 # Apache-2.0 +os-api-ref>=1.4.0 # Apache-2.0 @@ -17,2 +17,0 @@ oslotest>=3.2.0 # Apache-2.0 -pydot3>=1.0.8 # MIT License -

1 0

python-glanceclient 2.10.1 (queens)
by no-reply＠openstack.org 11 Dec '18

11 Dec '18

We contentedly announce the release of: python-glanceclient 2.10.1: OpenStack Image API Client Library This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-glanceclient Download the package from: https://pypi.org/project/python-glanceclient Please report issues through launchpad: https://bugs.launchpad.net/python-glanceclient For more details, please see below. Changes in python-glanceclient 2.10.0..2.10.1 --------------------------------------------- 626f503 import zuul job settings from project-config ae8d7d5 Update local copy of image schema for 2.6 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 14 ++++++++++++-- glanceclient/v2/image_schema.py | 3 ++- 3 files changed, 18 insertions(+), 4 deletions(-)

1 0

openstack-ansible 16.0.23 (pike)
by no-reply＠openstack.org 11 Dec '18

11 Dec '18

We are glad to announce the release of: openstack-ansible 16.0.23: Ansible playbooks for deploying OpenStack This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. Changes in openstack-ansible 16.0.22..16.0.23 --------------------------------------------- a12b7b6 Update doc to use chrony instead of ntp 5a8dc13 Update all SHAs for 16.0.23 acff6f2 Fix ansible-sshd version 8451034 Move ARA install to end of bootstrap a7736cd Use loop_var name in when clause Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 8 +-- deploy-guide/source/targethosts-prepare.rst | 22 ++++---- group_vars/all/all.yml | 2 +- playbooks/common-playbooks/nova.yml | 8 +-- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 64 +++++++++++----------- scripts/bootstrap-ansible.sh | 10 ++-- .../bootstrap-host/tasks/prepare_aio_config.yml | 9 +-- 8 files changed, 60 insertions(+), 65 deletions(-)

1 0

python-glanceclient 2.13.1 (rocky)
by no-reply＠openstack.org 11 Dec '18

11 Dec '18

We are pleased to announce the release of: python-glanceclient 2.13.1: OpenStack Image API Client Library This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-glanceclient Download the package from: https://pypi.org/project/python-glanceclient Please report issues through launchpad: https://bugs.launchpad.net/python-glanceclient For more details, please see below. Changes in python-glanceclient 2.13.0..2.13.1 --------------------------------------------- e0673a1 Don't quote colon in HTTP headers Diffstat (except docs and test files) ------------------------------------- glanceclient/common/http.py | 6 +++++- 2 files changed, 12 insertions(+), 2 deletions(-)

1 0

openstack-ansible 17.1.5 (queens)
by no-reply＠openstack.org 11 Dec '18

11 Dec '18

We exuberantly announce the release of: openstack-ansible 17.1.5: Ansible playbooks for deploying OpenStack This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 17.1.5 ^^^^^^ New Features * This role now optionally enables your compute nodes' KVM kernel module nested virtualization capabilities, by setting nova_nested_virt_enabled to true. Depending on your distribution and libvirt version, you might need to set additional variables to fully enabled nested virtualization. For details, please see https://docs.openstack.org/nova/latest/admin/configuration /hypervisor-kvm.html#nested-guest-support. Changes in openstack-ansible 17.1.4..17.1.5 ------------------------------------------- 5c2edcc Docs: Fix VLAN bridge interface in example setup 1f4dca7 Update doc to use chrony instead of ntp 944f682 Add MariaDB infrastructure mirrors and disable nested virt 6356c80 Update all SHAs for 17.1.5 ea1d05c Move ARA install to end of bootstrap aae1435 Add extra volume types to AIO 0b489b6 Use loop_var name in when clause Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 16 ++--- deploy-guide/source/targethosts-prepare.rst | 22 +++--- .../openstack_interface.cfg.test.example | 2 +- etc/openstack_deploy/conf.d/cinder.yml.aio | 27 ++++++++ inventory/group_vars/all/all.yml | 2 +- playbooks/common-playbooks/nova.yml | 8 +-- .../defaults/repo_packages/openstack_services.yml | 78 +++++++++++----------- .../notes/add-nested-virt-1db2270e73d1b34.yaml | 7 ++ scripts/bootstrap-ansible.sh | 10 +-- .../bootstrap-host/tasks/prepare_aio_config.yml | 5 +- 10 files changed, 105 insertions(+), 72 deletions(-)

1 0

oslo.cache 1.31.2 (stein)
by no-reply＠openstack.org 10 Dec '18

10 Dec '18

We are psyched to announce the release of: oslo.cache 1.31.2: Cache storage for OpenStack projects. This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.cache/ Download the package from: https://pypi.org/project/oslo.cache Please report issues through launchpad: https://bugs.launchpad.net/oslo.cache For more details, please see below. Changes in oslo.cache 1.31.1..1.31.2 ------------------------------------ 33aa6d2 Update mailinglist from dev to discuss 356cdc1 Only split url arg with memcache backend Diffstat (except docs and test files) ------------------------------------- oslo_cache/core.py | 12 +++++++++++- setup.cfg | 2 +- 2 files changed, 12 insertions(+), 2 deletions(-)

1 0

oslo.rootwrap 5.15.1 (stein)
by no-reply＠openstack.org 10 Dec '18

10 Dec '18

We are ecstatic to announce the release of: oslo.rootwrap 5.15.1: Oslo Rootwrap This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.rootwrap Download the package from: https://pypi.org/project/oslo.rootwrap Please report issues through launchpad: https://bugs.launchpad.net/oslo.rootwrap For more details, please see below. Changes in oslo.rootwrap 5.15.0..5.15.1 --------------------------------------- b58f3c5 Update mailinglist from dev to discuss 8f148f5 Fix portability issue Diffstat (except docs and test files) ------------------------------------- oslo_rootwrap/cmd.py | 39 +++++++++++++++++++++++---------------- setup.cfg | 2 +- 2 files changed, 24 insertions(+), 17 deletions(-)

1 0

os_vif 1.13.0 (stein)
by no-reply＠openstack.org 10 Dec '18

10 Dec '18

We exuberantly announce the release of: os_vif 1.13.0: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/os-vif Download the package from: https://pypi.org/project/os_vif Please report issues through launchpad: https://bugs.launchpad.net/os-vif For more details, please see below. 1.13.0 ^^^^^^ New Features ************ * In this release the OVS plugin was extended to always plug VIFs even when libvirt could plug the vif. This will enable faster migration leveraging the multiple port bindings work completed in the Rocky release. Security Issues *************** * In this release an edgecase where libvirt plugged the VIF instead of os-vif was addressed. Previously if "ovs_hybrid_plug" was set to "False" in the port binding details, os-vif would only ensure the ovs bridge existed and the plugging would be done by libvirt. As a result during live migration, there was a short interval where a guest could receive tagged broadcast, multicast, or flooded traffic to/from another tenant. This vulnerability is described in bug 1734320. By ensuring that os-vif always creates the OVS port as part of vif plugging we enable neutron to isolate the port prior to nova resuming the VM on the destination node. Note that as Nova cannot rely on Neutron to send "network-vif-plugged" events on completion of wiring up an interface it cannot wait to receive a notification before proceeding with the migration. As a result this is a partial mitigation and additional changes will be required to fully address this bug. (https://bugs.launchpad.net/neutron/+bug/1734320) * A new config option was introduced for the OVS VIF plugin. The "isolate_vif" option was added as a partial mitigation of bug 1734320. The "isolate_vif" option defaults to "False" for backwards compatibility with SDN controller based OpenStack deployments. For all deployments using the reference implementation of ML2/OVS with the neutron L2 agents, "isolate_vif" should be set to "True". This option instructs the OVS plugin to assign the VIF to the Neutron dead VLAN (4095) when attaching the interface to OVS. By setting the VIF's VLAN to this dead VLAN number, we eliminate the small attack vector that exists for other tenants to read packets during the VIF's bring up. Changes in os_vif 1.12.0..1.13.0 -------------------------------- d291213 add isolate_vif config option 165ed32 always create ovs port during plug 8df626b Update min tox version to 2.0 dd69c70 Do not import pyroute2 on Windows Diffstat (except docs and test files) ------------------------------------- os_vif/internal/command/ip/api.py | 10 ++-- .../always-plug-vifs-for-ovs-1d033fc49a9c6c4e.yaml | 37 ++++++++++++++ tox.ini | 2 +- vif_plug_ovs/constants.py | 3 ++ vif_plug_ovs/linux_net.py | 4 +- vif_plug_ovs/ovs.py | 48 ++++++++++++++++-- vif_plug_ovs/ovsdb/ovsdb_lib.py | 4 +- 8 files changed, 140 insertions(+), 25 deletions(-)

1 0

oslo.messaging 9.3.0 (stein)
by no-reply＠openstack.org 10 Dec '18

10 Dec '18

We eagerly announce the release of: oslo.messaging 9.3.0: Oslo Messaging API This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through launchpad: https://bugs.launchpad.net/oslo.messaging For more details, please see below. 9.3.0 ^^^^^ Upgrade Notes ************* * With the change in the client library used, projects using the Kafka driver should use extras oslo.messaging[kafka] to pull in dependencies for the driver. Bug Fixes ********* * Threading issues with the kafka-python consumer client were identified and documented. The driver has been updated to integrate the confluent-kafka python library. The confluent-kafka client leverages the high performance librdkafka C client and is safe for multiple thread use. Changes in oslo.messaging 9.2.1..9.3.0 -------------------------------------- c047f43 Update mailinglist from dev to discuss 5a842ae Switch driver to confluent-kafka client library 2528448 Don't use monotonic with Python >=3.3 d913c17 Add a test for rabbit URLs lacking terminating '/' Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 5 +- bindep.txt | 2 + lower-constraints.txt | 2 +- oslo_messaging/_drivers/amqp1_driver/controller.py | 7 +- oslo_messaging/_drivers/amqp1_driver/eventloop.py | 7 +- oslo_messaging/_drivers/impl_kafka.py | 245 ++++++++++++--------- ...fka-client-library-change-fe16d5a34550db7f.yaml | 13 ++ requirements.txt | 2 +- setup-test-env-kafka.sh | 2 +- setup.cfg | 5 +- test-requirements.txt | 3 +- 16 files changed, 239 insertions(+), 162 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0d0353b..4eb7e33 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +16 @@ debtcollector>=1.2.0 # Apache-2.0 -monotonic>=0.6 # Apache-2.0 +monotonic>=0.6;python_version<'3.3' # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 22636cb..25b019b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -17,2 +17 @@ pifpaf>=0.10.0 # Apache-2.0 -tenacity>=4.4.0 # Apache-2.0 -kafka-python>=1.3.1 # Apache-2.0 +confluent-kafka>=0.11.6 # Apache-2.0

1 0

python-glanceclient 2.15.0 (stein)
by no-reply＠openstack.org 10 Dec '18

10 Dec '18

We enthusiastically announce the release of: python-glanceclient 2.15.0: OpenStack Image API Client Library This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/python-glanceclient Download the package from: https://pypi.org/project/python-glanceclient Please report issues through launchpad: https://bugs.launchpad.net/python-glanceclient For more details, please see below. Changes in python-glanceclient 2.14.0..2.15.0 --------------------------------------------- 5fb14f5 Show the backend store info 1156346 Don't quote colon in HTTP headers Diffstat (except docs and test files) ------------------------------------- glanceclient/common/http.py | 6 ++- glanceclient/v2/shell.py | 10 ++++ 4 files changed, 104 insertions(+), 2 deletions(-)

1 0

os_vif 1.7.1 (pike)
by no-reply＠openstack.org 09 Dec '18

09 Dec '18

We are gleeful to announce the release of: os_vif 1.7.1: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/os-vif Download the package from: https://pypi.org/project/os_vif Please report issues through launchpad: https://bugs.launchpad.net/os-vif For more details, please see below. Changes in os_vif 1.7.0..1.7.1 ------------------------------ a362f90 import zuul job settings from project-config 4d108c1 ovs-hybrid: should permanently keep MAC entries 89b0bea ovs: do not delete port if already exists 5f7ad52 Check if interface belongs to a Linux Bridge before removing 5184b7f Update .gitreview for stable/pike Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 7 +++++++ vif_plug_ovs/linux_net.py | 13 ++++++++++--- 4 files changed, 43 insertions(+), 7 deletions(-)

1 0

freezer 7.0.0 (stein)
by no-reply＠openstack.org 09 Dec '18

09 Dec '18

We are amped to announce the release of: freezer 7.0.0: The OpenStack Backup Restore and Disaster Recovery as a Service Platform This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/freezer/ For more details, please see below. Changes in freezer 7.0.0.0b1..7.0.0 ----------------------------------- d59b138 Modify a few bugs for supporting ftp/ftps d3854dd Add ftps subclass of BaseFtpStorage f4b02c3 Change openstack-dev to openstack-discuss 285b59a Update link address of installation guide 4d9cafb Add ftp subclass of BaseFtpStorage 75ca834 Add BaseFtpStorage class fot freezer 806fe6f Add logs places in README.rst 42dd057 Add describe about ssh(sftp) in freezer-agent user guides 4423a80 Add describes about sql database in freezer in images 750c4e7 Add ftp support document modification 93dbf58 Add ftp support framework in freezer b876cbc Add sftp support with password for freezer ec86236 Remove invaild field "os_auth_version" 68b0a8b Add IRC info f83cdaa Update .gitignore 5226536 Freezer Backup for nova and cinder should accept instances names 7c2c3db Use openSUSE 15.0 for testing eb5a0fe Update API routes in Developer Guide 4d9f20c Fix duplicate option in documentation 5de4f7c Update freezer's zuul jobs 43b64a1 Correct errors about freezer-api supporting for V1 and V2 api 961af3f Add freezer-tempest-scheduler job in freezer 8c5013f Update python-freezerclinet version to 2.0.0 a24a025 python 3.6 unit test job 1086fce Fix a typo 94c6557 Update freezer_api config doc 29865ce Modify freezer-api v1 and v2 and scheduler configuration b21e8cd In default mode , disable "debug" f632022 Remove "--os-identity-api-version" argument 3c9528d Remove unneeded if statements 98ea424 lvm-backup: Normalize path when comparing current path and mount point 1bfbfc3 lvm backup: calculate path_to_backup after volume is mounted 60c0fc6 Implement create_dirs and put_metadata methods for multiple storage b1c6d53 Don't quote {posargs} in tox.ini adc7e19 Delete the unnecessary empty mode check 3b63e40 Make nova tests less strict afbbaa2 Fixed using 'os_auth_ver' parameter when passed via --config 1467df8 Clean up docs and specs directories e7f6b83 fix tox python3 overrides 29a4e90 Fix openstack-tox-docs failure ea466cc add python 3.6 unit test job 3e1e0bd update pylint to 1.9.2 4dec666 switch documentation job to new PTI ee2b2b8 import zuul job settings from project-config 0bc0e04 fix bug link in readme f1380cb Drop all qpid related explanations 61a28e1 fix some mistake in freezer user guide document(nova backup) e82092a Refactor freezer legacy jobs db99a4a Switch to stestr 401256a Adds doc8 check to pep8 9ec49d9 use queue from six.moves for python{2,3} compatibility 66adfd9 Replace 'raise StopIteration' with 'return' 4f6e8ce Add py36 testenv 94115d0 add release notes to README.rst 7c16877 switch to cryptography 1081414 fix lower constraints c1499e5 Fix KeyError if a deprecated key is given 2ee0583 fix pep8 errors under python 3 df5c6c4 Correct file names in README.rst 39f57bd update keysone url ac7d039 Fixes starting freezer-scheduler with --no-daemon 4c89c0a Update "auth_port" in install docs 9f8d6c3 Fix license boilerplates be3872f Fix indentation in docs 54a0015 Fix typos in docs cb8f9b1 Revise the code-block format of documentation 4d320d2 Restoring Encrypted Backup with encrypt-file. 1ebd6d1 Add note about installing dependencies ea2d68a Fix doc README.rst image patch error 0f44646 Fix doc common_configure '..' format error 3600a93 Update auth_uri option to www_authenticate_uri 9a5aae5 fix a typo in HACKING.rst 348fe7e Fix the path of RichQueue 0eb17ac Move the __init__ method to top to improve readability Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 +- .pylintrc | 2 +- .stestr.conf | 4 + .testr.conf | 9 - .zuul.yaml | 56 +- HACKING.rst | 6 +- INSTALL.rst | 18 - README.rst | 22 +- TODO.rst | 1 - config-generator/scheduler.conf | 6 - devstack/lib/freezer | 2 +- .../images/admin/Service_Architecture_02.png | Bin 49928 -> 69418 bytes .../images/admin/freezer_agent_backup_api.png | Bin 34065 -> 44168 bytes .../images/admin/freezer_scheduler_api_scale.png | Bin 49841 -> 65873 bytes etc/config-generator.conf | 6 + etc/scheduler.conf.sample | 6 +- freezer/common/client_manager.py | 28 +- freezer/common/config.py | 88 ++- freezer/engine/engine.py | 39 +- freezer/engine/manager.py | 28 +- freezer/engine/nova/nova.py | 87 ++- freezer/engine/osbrick/osbrick.py | 34 +- freezer/engine/rsync/pyrsync.py | 24 +- freezer/engine/rsync/rsync.py | 30 +- freezer/engine/rsyncv2/pyrsync.py | 25 +- freezer/engine/rsyncv2/rsyncv2.py | 29 +- freezer/engine/tar/tar.py | 28 +- freezer/engine/tar/tar_builders.py | 28 +- freezer/exceptions/engine.py | 29 +- freezer/job.py | 175 ++++-- freezer/lib/pep3143daemon/__init__.py | 10 +- freezer/lib/pep3143daemon/daemon.py | 9 +- freezer/main.py | 70 ++- freezer/openstack/admin.py | 32 +- freezer/openstack/backup.py | 27 +- freezer/openstack/restore.py | 62 +- freezer/scheduler/arguments.py | 39 +- freezer/scheduler/daemon.py | 34 +- freezer/scheduler/freezer_scheduler.py | 58 +- freezer/scheduler/scheduler_job.py | 28 +- freezer/scheduler/utils.py | 28 +- freezer/snapshot/lvm.py | 39 +- freezer/snapshot/snapshot.py | 27 +- freezer/storage/fslike.py | 2 +- freezer/storage/ftp.py | 341 +++++++++++ freezer/storage/local.py | 28 +- freezer/storage/multiple.py | 31 +- freezer/storage/physical.py | 28 +- freezer/storage/s3.py | 27 +- freezer/storage/ssh.py | 55 +- freezer/storage/swift.py | 28 +- freezer/utils/crypt.py | 53 +- freezer/utils/streaming.py | 27 +- freezer/utils/utils.py | 30 +- lower-constraints.txt | 61 +- playbooks/legacy/freezer-centos-7/post.yaml | 80 --- playbooks/legacy/freezer-centos-7/run.yaml | 65 -- playbooks/legacy/freezer-opensuse-423/post.yaml | 80 --- playbooks/legacy/freezer-opensuse-423/run.yaml | 65 -- playbooks/legacy/freezer-ubuntu-xenial/post.yaml | 80 --- playbooks/legacy/freezer-ubuntu-xenial/run.yaml | 65 -- playbooks/legacy/freezer/post.yaml | 80 +++ playbooks/legacy/freezer/run.yaml | 65 ++ requirements.txt | 4 +- setup.cfg | 14 +- specs/Service_Architecture_02.png | Bin 49928 -> 0 bytes specs/freezer_agent_backup.png | Bin 22183 -> 0 bytes specs/freezer_agent_backup_api.png | Bin 34065 -> 0 bytes specs/freezer_dashboard.png | Bin 35444 -> 0 bytes specs/freezer_how_to_scale.png | Bin 71183 -> 0 bytes specs/freezer_scheduler_api.png | Bin 49841 -> 0 bytes specs/integration_test_procedure.rst | 652 --------------------- specs/job-backup.conf.example | 223 ------- specs/job_session.png | Bin 87344 -> 0 bytes specs/python-freezerclient.rst | 85 --- specs/template.rst | 87 --- specs/tenant_based_backups.rst | 163 ------ test-requirements.txt | 13 +- tox.ini | 58 +- 112 files changed, 2097 insertions(+), 2735 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index dc05daf..67f3214 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ python-neutronclient>=6.7.0 # Apache-2.0 -python-freezerclient>=1.3.0 # Apache-2.0 +python-freezerclient>=2.0.0 # Apache-2.0 @@ -21 +21 @@ oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 -pycrypto>=2.6 # Public Domain +cryptography>=2.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 5d2b7ac..cf46530 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,4 +9,2 @@ mock>=2.0.0 # BSD -pylint==1.4.5 # GPLv2 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD -openstackdocstheme>=1.18.1 # Apache-2.0 -testrepository>=0.0.18 # Apache-2.0/BSD +pylint==1.9.2 # GPLv2 +stestr>=2.0.0 # Apache-2.0 @@ -14,2 +12 @@ testtools>=2.2.0 # MIT -reno>=2.5.0 # Apache-2.0 -astroid<1.4.0 # LGPLv2.1 # breaks pylint 1.4.4 +astroid==1.6.5 # LGPLv2.1 @@ -21,0 +19,4 @@ python-openstackclient>=3.12.0 # Apache-2.0 + +# Used in doc8 check +doc8>=0.6.0 # Apache-2.0 +Pygments>=2.2.0 # BSD license

1 0

freezer-api 7.0.0 (stein)
by no-reply＠openstack.org 09 Dec '18

09 Dec '18

We are happy to announce the release of: freezer-api 7.0.0: OpenStack Backup and Restore API Service This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/freezer-api/ For more details, please see below. 7.0.0 ^^^^^ Prelude ******* Added new tool "freezer-manager-status upgrade check". Currently freezer-api v1 is the default api version to be used in different freezer components. Freezer-api v1 doesn't support multi- tenancy and will be a blocker to support sqlalchemy. Freezer-api v2 was already implement and was being use as *experimental*. Freezer api v1 will be disabled by default in gate jobs Currently freezer-api supports only elasticsearch as database engine. Elasticsearch is adding complexity in deploying and running freezer, the need and planning to move to sqlalchemy has been a moving target since Pike. Now freezer-api should be able to support sqlalchemy, it's still under development, so not fully supported yet. There is work in progress to unify the database api so freezer can support more than one database driver at the same time. New Features ************ * Completely support sqlalchemy driver for freezer-api. The previous version only implemented part one. In this patch, sqlalchemy driver has been completely implemented for freezer-api. See links in detail: https://storyboard.openstack.org/#!/story/2004132 The configuration example is as follows: [database] connection = mysql+pymysql://root:stack@127.0.0.1/freezer?charset=utf8 [storage] backend = sqlalchemy driver = sqlalchemy * New framework for "freezer-manager-status upgrade check" command is added. This framework allows adding various checks which can be run before a Freezer API upgrade to ensure if the upgrade can be performed safely. * Fixed some minor bugs in freezer-api v2. Set freezer-api version 2 to stable and use it as the current version. The default behaviour of freezer now is to support multi-tenancy! All tempest tests are running against freezer api v2 * Freezer support for sqlalchemy in development. freezer-manage fully supports sqlalchemy database now! Known Issues ************ * No Backward compitibility support! * No Backward compitibility support! sqlalchemy will be only supported for freezer api version 2 Upgrade Notes ************* * Operator can now use new CLI tool "freezer-manager-status upgrade check" to check if Freezer API deployment can be safely upgraded from N-1 to N release. Deprecation Notes ***************** * Freezer api version 1 is deprecated and will be out of support end of Rocky release, to be removed in future releases!. Critical Issues *************** * All Freezer mappings needs to be upgraded to reflect project_id. Now smooth upgrade facility is provided! * Freezer api version 1 is broken and won't be supported! Bug Fixes ********* * Delete Backups using freezer-api v2 * Fixed remove mappings in freezer-manage as elasticsearch removed this feature, so now we have to delete the index not individual mappings! Changes in freezer-api 7.0.0.0b1..7.0.0 --------------------------------------- a73b804 Support search otion and limit, offset for sqlalchemy c480fa5 Change openstack-dev to openstack-discuss cdd34ec Add search option for list query 75d07f6 Add search_client unit test for search option from client cmd 95da463 Add search_client unit test for search option from client api 7b55e1b Add client search for sql 1cc79e1 Add search_session unit test for search option from client cmd 6cfcf2c Add search_action unit test for search option from client cmd 7927579 Add search_session unit test for search option 4862eb0 Add search_action unit test for search option from client api 11977ba Add backup search for sql f75a21c Add search_job unit test for search option from freezer client cmd cfcb707 Add search_job unit test for search option from freezer agent 1492a5e Support search in search_action for sqlalchemy b0b18bb Support search in search_session for sqlalchemy 2d5a483 Freezer scheduler search jobs error for sqlalchemy 57835be Add client search unit test for sql 8a351cc Add client delete unit test for sql 51b1e8e Add backup search unit test for sql 25376c4 Add session search unit test for sqlalchemy 3aa1b1d Add job search unit test for sqlalchemy 8f4a306 Add job replace unit test for sqlalchemy 15ef824 Add session replace unit test for sqlalchemy df2993f Add backup delete unit test for sql e3b5353 Add action search unit test 08e22ad Add session update unit test for sqlalchemy d9007cf Add job update unit test for sqlalchemy c084016 Add action replace unit test for sql c0f3449 Add action update unit test for sql ee85197 Add session delete unit test for sqlalchemy 3ec01e7 Add backup unit test for sql bf682fa Add job delete unit test for sqlalchemy 38c4a0b Add unit test for session table in sqlalchemy 18d0df6 Add client add and get unit test for sql 758830a Correct session_tag field type error 320b357 Add action delete unit test for sql 54c0e5c Add unit test for job table in sqlalchemy 421cb41 Add Action unit test for sql 0c23230 Update freezer-tempest-basic-salqlchemy job as a voting job 463c13a Add freezer-tempest-basic-sqlalchemy job in freezer-api 944e16b Fix tempest failure in sqlalchemy driver ab7d385 Add unit test framework for sqlalchemy driver 50f65ae Refactor sql driver api 9aa9028 Update jobs(v2) api-def 27403cc Don't quote {posargs} in tox.ini 75c1b64 Update min tox version to 2.0 6925ba2 modify document for api version v1 support for sql driver d1a5e93 Correct errors about freezer-api supporting for V1 and V2 api fc701f9 add api version v1 support for sql driver 4cf9e1c Upgrade Checkers : spelling correction ca1c830 Update tox.ini bffde58 Add devstack sqlalchemy support for freezer cb83529 Update clients(v2) api-ref 63927a3 set enable_v1_api=false in config sample 1130896 Update backups(v2) api-ref 25a9065 Modify driver for bp add-mysql-support-for-freezer 88ce38c Add freezer-manager-status upgrade check command framework 48ea1e4 Fix a typo in delete job api d79df98 Update actions-v2 api-ref cee24d3 Update Backup Service api-ref 60b1cb7 Add jobs api for bp add-mysql-support-for-freezer 83fb412 Add backup api for bp add-mysql-support-for-freezer aacbe8a Add backup table for bp add-mysql-support-for-freezer 796c41a Add jobs table for bp add-mysql-support-for-freezer 6064f9f Add session api for bp add-mysql-support-for-freezer 83d1996 Add session table for bp add-mysql-support-for-freezer d2e1c19 Release the notes about Sqlalchemy driver for freezer-api 4f68595 Add action api for bp add-mysql-support-for-freezer 8c63de5 Add action table for bp add-mysql-support-for-freezer 9db61ba Add clients api for bp add-mysql-support-for-freezer 93a000a Change config_id to client_id in clients table 522e55a Add clients table for bp add-mysql-support-for-freezer 1937caa Add sqlalchemy migration in v2 for bp add-mysql-support-for-freezer 45f06cb There are errors in executing session-add-job in v2 interface 4db4a6c Add freezer_api.api.v2.homedoc unit test cases 3bded47 Add gate/check test job b76b4bc Fix freezer_api.api.v2.sessions bug: doc.items() is not a iter object 1178086 Add freezer_api.api.v2.jobs unit test cases ef24c92 Add freezer_api.api.v2.clients unit test cases 4aa9702 Add unit test cases of v2 interfaces: backup 023616a when installing from pip python plugin is embedded in the binary 5fbb03d Add unit test cases of v2 interfaces: action. 339bff2 Adjust unit test directory. 45b9bc9 Modifying code comments errors. "v1" modified to "v2",and add new parameter {project_id} fc08821 Remove ababdoned code. 2b45672 python3.6 expects 'encoding' as keyword argument. 1424395 add python 3.6 unit test job e6fdd0b switch release job to python 3 d1f713e import zuul job settings from project-config 32ac17c fix bug link in readme 2c2e604 fix request mock object due to change in oslo.policy 85b8aee fix tox python3 overrides fc4fb5a update pylint to 1.9.2 db4b507 Add py36 testenv 8e6f9c7 fix pep8 error under python 3 67e5953 Rework AseertEqual params order in freezer-api from (got, expected) to (expected, got) a4a68b3 Delete request for non-existent ID will be 404. Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 48 + README.rst | 2 +- api-ref/source/v1/actions-v1.inc | 9 +- api-ref/source/v1/backups-v1.inc | 7 + api-ref/source/v1/clients-v1.inc | 7 + api-ref/source/v1/index.rst | 6 +- api-ref/source/v1/jobs-v1.inc | 7 + api-ref/source/v1/parameters.yaml | 9 + .../source/v1/samples/actions-list-request.json | 12 + api-ref/source/v1/samples/backup-list-request.json | 12 + .../source/v1/samples/clients-list-request.json | 12 + api-ref/source/v1/samples/jobs-list-request.json | 12 + .../source/v1/samples/sessions-list-request.json | 12 + api-ref/source/v1/sessions-v1.inc | 7 + api-ref/source/v2/actions-v2.inc | 252 +++++ api-ref/source/v2/backups-v2.inc | 91 +- api-ref/source/v2/clients-v2.inc | 186 ++++ api-ref/source/v2/index.rst | 6 +- api-ref/source/v2/jobs-v2.inc | 183 +++- api-ref/source/v2/parameters.yaml | 239 ++++- .../source/v2/samples/actions-create-request.json | 15 + .../source/v2/samples/actions-create-response.json | 4 + .../source/v2/samples/actions-get-response.json | 19 + .../source/v2/samples/actions-list-request.json | 12 + .../source/v2/samples/actions-list-response.json | 44 + .../source/v2/samples/actions-update-request.json | 15 + .../source/v2/samples/actions-update-response.json | 5 + api-ref/source/v2/samples/backup-get-response.json | 39 + api-ref/source/v2/samples/backup-list-request.json | 12 + .../source/v2/samples/backup-list-response.json | 2 + api-ref/source/v2/samples/client-get-response.json | 11 + .../source/v2/samples/clients-create-request.json | 8 + .../source/v2/samples/clients-create-response.json | 1 + .../source/v2/samples/clients-list-request.json | 12 + .../source/v2/samples/clients-list-response.json | 26 + api-ref/source/v2/samples/job-create-request.json | 2 - api-ref/source/v2/samples/job-get-response.json | 41 + api-ref/source/v2/samples/job-update-request.json | 25 + api-ref/source/v2/samples/job-update-response.json | 1 + api-ref/source/v2/samples/jobs-list-request.json | 12 + api-ref/source/v2/samples/jobs-list-response.json | 6 +- .../source/v2/samples/session-start-request.json | 6 + .../source/v2/samples/session-start-response.json | 4 + .../source/v2/samples/sessions-create-request.json | 10 + .../v2/samples/sessions-create-response.json | 4 + .../source/v2/samples/sessions-get-response.json | 16 + .../v2/samples/sessions-get-with-job-response.json | 26 + .../source/v2/samples/sessions-list-request.json | 12 + .../source/v2/samples/sessions-list-response.json | 30 + .../source/v2/samples/sessions-update-request.json | 10 + .../v2/samples/sessions-update-response.json | 5 + api-ref/source/v2/sessions-v2.inc | 353 +++++++ devstack/README.rst | 5 + devstack/lib/freezer-api | 57 +- etc/freezer/freezer-api.conf.sample | 48 +- etc/freezer/freezer-paste.ini | 3 - freezer_api/api/common/resource.py | 2 +- freezer_api/api/common/utils.py | 10 + freezer_api/api/v1/actions.py | 13 +- freezer_api/api/v1/backups.py | 15 +- freezer_api/api/v1/clients.py | 15 +- freezer_api/api/v1/jobs.py | 12 +- freezer_api/api/v1/sessions.py | 13 +- freezer_api/api/v2/actions.py | 20 +- freezer_api/api/v2/backups.py | 13 +- freezer_api/api/v2/clients.py | 11 +- freezer_api/api/v2/jobs.py | 21 +- freezer_api/api/v2/sessions.py | 33 +- freezer_api/api/versions.py | 3 +- freezer_api/cmd/manage.py | 2 +- freezer_api/cmd/status.py | 52 + freezer_api/common/config.py | 50 +- freezer_api/db/base.py | 1 + freezer_api/db/elasticsearch/driver.py | 11 +- freezer_api/db/sqlalchemy/api.py | 1002 ++++++++++++++++++++ freezer_api/db/sqlalchemy/driver.py | 39 +- freezer_api/db/sqlalchemy/migrate_repo/__init__.py | 0 freezer_api/db/sqlalchemy/migrate_repo/migrate.cfg | 20 + .../migrate_repo/versions/001_freezer_api_init.py | 170 ++++ .../sqlalchemy/migrate_repo/versions/__init__.py | 0 freezer_api/db/sqlalchemy/models.py | 155 ++- freezer_api/service.py | 13 +- lower-constraints.txt | 45 +- ...l-support-for-freezer-api-e226f59425a2183c.yaml | 13 + ...s-upgrade-check-framework-f3d73fc7ee4c4b20.yaml | 13 + requirements.txt | 3 +- setup.cfg | 5 +- test-requirements.txt | 4 +- tox.ini | 37 +- 128 files changed, 8738 insertions(+), 1861 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8f6a80d..3d9337a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -elasticsearch<=3.0.0,>=2.0.0 # Apache-2.0 +elasticsearch<3.0.0,>=2.0.0 # Apache-2.0 @@ -16,0 +17 @@ oslo.policy>=1.30.0 # Apache-2.0 +oslo.upgradecheck>=0.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 82a56fd..9b95872 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -astroid<1.4.0 # LGPLv2.1 # breaks pylint 1.4.4 +astroid==1.6.5 # LGPLv2.1 @@ -6 +6 @@ flake8<2.6.0,>=2.5.4 # MIT -pylint==1.4.5 # GPLv2 +pylint==1.9.2 # GPLv2

1 0

freezer-web-ui 7.0.0 (stein)
by no-reply＠openstack.org 09 Dec '18

09 Dec '18

We are glad to announce the release of: freezer-web-ui 7.0.0: Freezer - Backup as a Service User Interface This release is part of the stein release series. Download the package from: https://pypi.org/project/freezer-web-ui For more details, please see below. Changes in freezer-web-ui 7.0.0.0b1..7.0.0 ------------------------------------------ 6763ff9 Use freezerclient.client to support v1 or v2 76bd7e2 Update min tox version to 2.0 2a53faa Fix README.rst error 6b2b395 Support freezer API v2 f1effba add python 3.6 unit test job 7be38ca import zuul job settings from project-config 736f2fc Use Storyboards to replace Release, Blueprints and bugs link d5b5899 fix tox python3 overrides 2c76fee Drop nose dependencies e28dfcf Remove the redundant attributes d2ecd75 Add test 'node_modules' in '.gitignore' 40a07a0 Avoid using deprecated opt in Web-UI 739e664 Imported Translations from Zanata 357117b Added engine_name parameter to action creation. 6bf2035 Django 2.0 support f2feb0f Use Horizon UT framework Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .zuul.yaml | 7 + README.rst | 10 +- disaster_recovery/actions/tables.py | 2 +- disaster_recovery/actions/views.py | 2 +- disaster_recovery/actions/workflows/action.py | 28 +++- disaster_recovery/api/api.py | 18 +-- disaster_recovery/api/rest/urls.py | 3 +- disaster_recovery/backups/tables.py | 5 +- disaster_recovery/clients/tables.py | 5 +- disaster_recovery/jobs/tables.py | 8 +- disaster_recovery/jobs/views.py | 8 +- disaster_recovery/locale/de/LC_MESSAGES/django.po | 161 ++++++++++++++++++++- .../locale/en_GB/LC_MESSAGES/django.po | 36 ++++- disaster_recovery/sessions/tables.py | 7 +- disaster_recovery/sessions/workflows/attach.py | 2 +- disaster_recovery/sessions/workflows/create.py | 2 +- disaster_recovery/utils.py | 2 +- lower-constraints.txt | 8 +- requirements.txt | 6 +- test-requirements.txt | 9 -- tox.ini | 19 +-- 23 files changed, 259 insertions(+), 95 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3543449..e1469c8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,2 +4,2 @@ -Django<2.0,>=1.11 # BSD -python-freezerclient>=1.3.0 # Apache-2.0 +python-freezerclient>=2.0.0 # Apache-2.0 +oslo.log>=3.36.0 # Apache-2.0 @@ -9 +9 @@ python-freezerclient>=1.3.0 # Apache-2.0 -horizon>=13.0.0 # Apache-2.0 +horizon>=14.0.0.0b3 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index b48e2cd..9af8954 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15,9 +14,0 @@ oslosphinx>=4.7.0 # Apache-2.0 -nose>=1.3.7 # LGPL -nosehtmloutput>=0.0.3 # Apache-2.0 -openstack.nose-plugin>=0.7 # Apache-2.0 -django-nose>=1.4.4 # BSD -nosexcover>=1.0.10 # BSD - -# Horizon requirements -Django<2.0,>=1.11 # BSD -django-compressor>=2.0 # MIT

1 0