September 2018 - Release-announce

openstack-release-test 1.2.0 (stein)
by no-reply＠openstack.org 25 Sep '18

25 Sep '18

We are satisfied to announce the release of: openstack-release-test 1.2.0: Package for testing OpenStack release tools. This release is part of the stein release series. The source is available from: http://git.openstack.org/cgit/openstack/release-test Download the package from: https://tarballs.openstack.org/release-test/ For more details, please see below. Changes in openstack-release-test 1.0.0..1.2.0 ---------------------------------------------- 3da9679 remove bad bug link Diffstat (except docs and test files) ------------------------------------- README.rst | 1 - 1 file changed, 1 deletion(-)

1 0

nova 18.0.1 (rocky)
by no-reply＠openstack.org 24 Sep '18

24 Sep '18

We are gleeful to announce the release of: nova 18.0.1: Cloud computing fabric controller This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 18.0.1 ^^^^^^ Bug Fixes * A change has been introduced in the libvirt driver to correctly handle IPv6 addresses for live migration. Changes in nova 18.0.0..18.0.1 ------------------------------ 6c29183 Fix soft deleting vm fails after "nova resize" vm 9125fc7 Update RequestSpec.flavor on resize_revert d026d4d [placement] split gigantor SQL query, add logging 69d17be import zuul job settings from project-config 1a22c45 Do not dump all instances in the scheduler 7f25c3e Configure placement DB context manager for nova-manage/status 1cae9b8 placement: use simple code paths when possible cd0a0ef Fix a failure to format config sample 3051a0d Make scheduler.utils.setup_instance_group query all cells f588a0b Fix nova-status "_check_resource_providers" check c091909 Fix DB archiver AttributeError due to wrong table name attribute used 9dbe8cd Add functional test for affinity with multiple cells a039f83 Document unset/reset wrinkle for *_allocation_ratio options 01265b9 Don't persist zero allocation ratios in ResourceTracker e7ac7a1 libvirt: skip setting rx/tx queue sizes for not virto interfaces 7ee5499 libvirt: Always escape IPv6 addresses when used in migration URI 40e1868 Don't use '_TransactionContextManager._async' 3987f59 Move conductor wait_until_ready() delay before manager init 6d8426a Fix image-defined numa claims during evacuate 4c27443 Delete instance_group_member records from API DB during archive 49ce59e Restart scheduler in TestNovaManagePlacementHealAllocations 43f6f74 Fix a broken conf file description in networking doc 3724280 Remove noisy DEBUG log a890e3d Handle binding_failed vif plug errors on compute restart Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 338 +++++++++++++++++++++ .../placement/objects/resource_provider.py | 232 +++++++------- nova/cmd/manage.py | 9 +- nova/cmd/status.py | 7 +- nova/compute/api.py | 27 ++ nova/compute/manager.py | 20 +- nova/compute/resource_tracker.py | 29 +- nova/conf/compute.py | 12 +- nova/conf/workarounds.py | 5 + nova/config.py | 2 + nova/db/sqlalchemy/api.py | 4 +- nova/network/os_vif_util.py | 14 + nova/notifications/objects/base.py | 10 +- nova/objects/instance_group.py | 19 ++ nova/scheduler/host_manager.py | 3 +- nova/scheduler/utils.py | 54 +++- nova/service.py | 6 +- nova/virt/libvirt/driver.py | 5 + nova/virt/libvirt/vif.py | 42 +-- ...t_fix_ipv6_live_migration-bbcde8f3b7d17921.yaml | 4 + 37 files changed, 1079 insertions(+), 213 deletions(-)

1 0

nova 16.1.5 (pike)
by no-reply＠openstack.org 24 Sep '18

24 Sep '18

We high-spiritedly announce the release of: nova 16.1.5: Cloud computing fabric controller This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 16.1.5 ^^^^^^ Upgrade Notes ************* * The "nova-api" service now requires the "[placement]" section to be configured in nova.conf if you are using a separate config file just for that service. This is because the "nova-api" service now needs to talk to the placement service in order to delete resource provider allocations when deleting an instance and the "nova- compute" service on which that instance is running is down. This change is idempotent if "[placement]" is not configured in "nova- api" but it will result in new warnings in the logs until configured. See bug https://bugs.launchpad.net/nova/+bug/1679750 for more details. * The default list of non-inherited image properties to pop when creating a snapshot has been extended to include image signature properties. The properties "img_signature_hash_method", "img_signature", "img_signature_key_type" and "img_signature_certificate_uuid" are no longer inherited by the snapshot image as they would otherwise result in a Glance attempting to verify the snapshot image with the signature of the original. * A new online data migration has been added to populate missing instance.availability_zone values for instances older than Pike whose availability_zone was not specified during boot time. This can be run during the normal "nova-manage db online_data_migrations" routine. This fixes Bug 1768876 (https://bugs.launchpad.net/nova/+bug/1768876) Security Issues *************** * A new policy rule, "os_compute_api:servers:create:zero_disk_flavor", has been introduced which defaults to "rule:admin_or_owner" for backward compatibility, but can be configured to make the compute API enforce that server create requests using a flavor with zero root disk must be volume-backed or fail with a "403 HTTPForbidden" error. Allowing image-backed servers with a zero root disk flavor can be potentially hazardous if users are allowed to upload their own images, since an instance created with a zero root disk flavor gets its size from the image, which can be unexpectedly large and exhaust local disk on the compute host. See https://bugs.launchpad.net/nova/+bug/1739646 for more details. While this is introduced in a backward-compatible way, the default will be changed to "rule:admin_api" in a subsequent release. It is advised that you communicate this change to your users before turning on enforcement since it will result in a compute API behavior change. * The 'SSBD' and 'VIRT-SSBD' cpu flags have been added to the list of available choices for the "[libvirt]/cpu_model_extra_flags" config option. These are important for proper mitigation of the Spectre 3a and 4 CVEs. Note that the use of either of these flags require updated packages below nova, including libvirt, qemu (specifically >=2.9.0 for virt-ssbd), linux, and system firmware. For more information see https://www.us- cert.gov/ncas/alerts/TA18-141A Bug Fixes ********* * The "DELETE /os-services/{service_id}" compute API will now return a "409 HTTPConflict" response when trying to delete a "nova-compute" service which is still hosting instances. This is because doing so would orphan the compute node resource provider in the placement service on which those instances have resource allocations, which affects scheduling. See https://bugs.launchpad.net/nova/+bug/1763183 for more details. Changes in nova 16.1.4..16.1.5 ------------------------------ ab03100 [Stable Only] Remove soft-deleted instances from quota_usages 3da9720 import zuul job settings from project-config 37722c7 Fix DB archiver AttributeError due to wrong table name attribute used 6246488 Filter out instances without a host when populating AZ b1b5a5e Revert "libvirt: slow live-migration to ensure network is ready" 6864804 block_device: Rollback volumes to in-use on DeviceDetachFailed 62d3b29 Fix bad links for admin-guide e279ac4 Make ResourceTracker.stats node-specific bee3e96 Reload oslo_context after calling monkey_patch() dbce613 Add recreate test for RT.stats bug 1784705 1316e08 Add unshelve instance error info to fault table e0f1c2c libvirt: add method to configure migration speed 8f5fbd8 Make host_aggregate_map dictionary case-insensitive 6d60c74 Fix unbound local when saving an unchanged RequestSpec 70de423 cleanup mapping/reqspec after archive instance 06387be Default embedded instance.flavor.disabled attribute 9fe847b Cleanup RP and HM records while deleting a compute service. cd50dca Delete allocations from API if nova-compute is down 5939ae9 Backport tox.ini to switch to stestr 8cd1204 Block deleting compute services which are hosting instances 93854e4 api-ref: add a note in DELETE /os-services about deleting computes c8dd4c6 Add functional test for deleting a compute service 8d26d38 factor out compute service start in ServerMovingTest e847eed Moving more utils to ProviderUsageBaseTestCase 53fc4ab Make nova service-list use scatter-gather routine ba0eb30 mock utils.execute() in qemu-img unit test ff74779 libvirt: slow live-migration to ensure network is ready ce7ad87 Use instance project/user when creating RequestSpec during resize reschedule 682ee60 [Stable Only] Add amd-ssbd and amd-no-ssb CPU flags aa2f0bf Fixed auto-convergence option name in doc 0bf7562 Add policy rule to block image-backed servers with 0 root disk flavor bdb5c3b Change consecutive build failure limit to a weigher 6e1dd28 Ensure resource class cache when listing usages 487c6dd Metadata-API fails to retrieve avz for instances created before Pike 51e8b8e placement: Fix HTTP error generation 978066f Avoid showing password in log Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .stestr.conf | 3 + .testr.conf | 18 -- .zuul.yaml | 341 ++++++++++++++++++++- api-ref/source/os-services.inc | 16 +- api-ref/source/parameters.yaml | 4 +- nova/api/openstack/compute/servers.py | 3 +- nova/api/openstack/compute/services.py | 27 +- nova/api/openstack/placement/handlers/inventory.py | 2 +- nova/api/openstack/placement/handlers/trait.py | 18 +- nova/cmd/__init__.py | 8 + nova/cmd/manage.py | 47 ++- nova/compute/api.py | 32 +- nova/compute/manager.py | 68 ++-- nova/compute/resource_tracker.py | 37 ++- nova/compute/stats.py | 8 + nova/conductor/manager.py | 8 +- nova/conf/compute.py | 20 +- nova/conf/libvirt.py | 16 +- nova/conf/scheduler.py | 28 ++ nova/db/sqlalchemy/api.py | 38 ++- nova/exception.py | 5 + nova/objects/instance.py | 33 ++ nova/objects/instance_mapping.py | 11 + nova/objects/request_spec.py | 24 +- nova/objects/resource_provider.py | 2 + nova/policies/servers.py | 29 ++ nova/scheduler/host_manager.py | 9 +- nova/scheduler/ironic_host_manager.py | 3 + nova/scheduler/weights/compute.py | 33 ++ nova/test.py | 5 + .../functional/compute/test_resource_tracker.py | 95 +++++- .../functional/regressions/test_bug_1679750.py | 75 ++++- .../unit/scheduler/weights/test_weights_compute.py | 57 ++++ nova/virt/block_device.py | 1 + nova/virt/libvirt/guest.py | 7 + ...-local-delete-allocations-cb7bfbcb6c36b6a2.yaml | 12 + ...cked_for_zero_disk_flavor-b36a6eb4fa8b2964.yaml | 20 ++ ...ice-delete-with-instances-d7c5c47e4ce31239.yaml | 9 + ...ailure-counter-to-weigher-428de7da0ed2033a.yaml | 23 ++ ...odel-extra-flags-amd-ssbd-1c0d0cec14073dec.yaml | 8 + ...tool-to-populate-inst.avz-29fed2fe57a9764d.yaml | 10 + test-requirements.txt | 3 +- tox.ini | 67 ++-- 74 files changed, 1935 insertions(+), 378 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 9a3948d..b2444f6 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -20 +20 @@ oslotest>=1.10.0 # Apache-2.0 -os-testr>=0.8.0 # Apache-2.0 +stestr>=2.0.0 # Apache-2.0 @@ -22 +21,0 @@ osprofiler>=1.4.0 # Apache-2.0 -testrepository>=0.0.18 # Apache-2.0/BSD

1 0

nova 17.0.6 (queens)
by no-reply＠openstack.org 24 Sep '18

24 Sep '18

We are ecstatic to announce the release of: nova 17.0.6: Cloud computing fabric controller This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 17.0.6 ^^^^^^ Known Issues ************ * The initial implementation of native LUKS decryption within Libvirt 2.2.0 had a known issue with the use of passphrases that were a multiple of 16 bytes in size. This was resolved in the upstream 3.3.0 release of Libvirt and has been backported to various downstream distribution specific versions. A simple warning will reference the above if this issue is encountered by Nova however operators of the environment will still need to update Libvirt to a version where this issue has been fixed to resolve the issue. (https://bugzilla.redhat.com/show_bug.cgi?id=1447297) (https://libvirt.org/git/?p=libvirt.git;a=commit;h=7189099) Upgrade Notes ************* * A new online data migration has been added to populate missing instance.availability_zone values for instances older than Pike whose availability_zone was not specified during boot time. This can be run during the normal "nova-manage db online_data_migrations" routine. This fixes Bug 1768876 (https://bugs.launchpad.net/nova/+bug/1768876) Security Issues *************** * A new policy rule, "os_compute_api:servers:create:zero_disk_flavor", has been introduced which defaults to "rule:admin_or_owner" for backward compatibility, but can be configured to make the compute API enforce that server create requests using a flavor with zero root disk must be volume-backed or fail with a "403 HTTPForbidden" error. Allowing image-backed servers with a zero root disk flavor can be potentially hazardous if users are allowed to upload their own images, since an instance created with a zero root disk flavor gets its size from the image, which can be unexpectedly large and exhaust local disk on the compute host. See https://bugs.launchpad.net/nova/+bug/1739646 for more details. While this is introduced in a backward-compatible way, the default will be changed to "rule:admin_api" in a subsequent release. It is advised that you communicate this change to your users before turning on enforcement since it will result in a compute API behavior change. * To mitigate potential issues with compute nodes disabling themselves in response to failures that were either non-fatal or user- generated, the consecutive build failure counter functionality in the compute service has been changed to advise the scheduler of the count instead of self-disabling the service upon exceeding the threshold. The "[compute]/consecutive_build_service_disable_threshold" configuration option still controls whether the count is tracked, but the action taken on this value has been changed to a scheduler weigher. This allows the scheduler to be configured to weigh hosts with consecutive failures lower than other hosts, configured by the "[filter_scheduler]/build_failure_weight_multiplier" option. If the compute threshold option is nonzero, computes will report their failure count for the scheduler to consider. If the threshold value is zero, then computes will not report this value and the scheduler will assume the number of failures for non-reporting compute nodes to be zero. By default, the scheduler weigher is enabled and configured with a very large multiplier to ensure that hosts with consecutive failures are scored low by default. * The 'AMD-SSBD' and 'AMD-NO-SSB' flags have been added to the list of available choices for the "[libvirt]/cpu_model_extra_flags" config option. These are important for proper mitigation of security issues in AMD CPUs. For more information see https://www.redhat.com/archives/libvir-list/2018-June/msg01111.html Bug Fixes ********* * Listing server and migration records used to give a 500 to users when a cell database was unreachable. Now only records from available cells are included to avoid the 500 error. The down cells are basically skipped when forming the results and this solution is planned to be further enhanced through the blueprint handling-down- cell. (https://blueprints.launchpad.net/nova/+spec/handling-down-cell) * For libvirt driver. Now when creating tap devices the MTU will be configured. Requires libvirt 3.3.0 at least. Other Notes *********** * A new configuration option, "[compute]/live_migration_wait_for_vif_plug", has been added which can be used to configure compute services to wait for network interface plugging to complete on the destination host before starting the guest transfer on the source host during live migration. If you set this option the same on all of your compute hosts, which you should do if you use the same networking backend universally, you do not have to worry about this. This is disabled by default for backward compatibilty and because the compute service cannot reliably determine which types of virtual interfaces ("port.binding:vif_type") will send "network-vif-plugged" events without an accompanying port "binding:host_id" change. Open vSwitch and linuxbridge should be OK, but OpenDaylight is at least one known backend that will not currently work in this case, see bug https://launchpad.net/bugs/1755890 for more details. Changes in nova 17.0.5..17.0.6 ------------------------------ 7871204 Fix soft deleting vm fails after "nova resize" vm e19d6f0 Set default of oslo.privsep.daemon logging to INFO level 3340d17 import zuul job settings from project-config 6ece888 Remove noisy DEBUG log ab93937 Make scheduler.utils.setup_instance_group query all cells c6960e8 Fix DB archiver AttributeError due to wrong table name attribute used c35f290 Add functional test for affinity with multiple cells ab6f78b Fix the request context in ServiceFixture 8ca3b07 Move conductor wait_until_ready() delay before manager init bfe89fe Wait for network-vif-plugged before starting live migration 77a831d Fix cancel_all_events event name parsing 059c2d4 Filter out instances without a host when populating AZ dee99b1 Revert "libvirt: slow live-migration to ensure network is ready" 997b385 VMware: fix TypeError while get console log 838ecb3 block_device: Rollback volumes to in-use on DeviceDetachFailed 0a60496 Fix host validity check for live-migration 4e83188 Fix bad links for admin-guide 559de0d0 Update nova network info when doing rebuild for evacuate operation 91d47b11 Fix message for unexpected external event 410eca7 Reload oslo_context after calling monkey_patch() 66a47b7 [placement] Retry allocation writes server side 7d99f57 Make ResourceTracker.stats node-specific cc8167a Add recreate test for RT.stats bug 1784705 ab1fd87 Disable limits if force_hosts or force_nodes is set 2caf8f6 Make host_aggregate_map dictionary case-insensitive 59075b8 Call generate_image_url only for legacy notification 0be8cbc Handle HostMappingNotFound when deleting a compute service d543ddd Add unshelve instance error info to fault table 58538ac [Stable Only] Remove soft-deleted instances from quota_usages 1aa81eb Fix server_group_members quota check c7b0779 Add functional regressions tests for server_group_members OverQuota d7864fb hardware: fix hugepages memory usage per intances 246c61d Fix TypeError in prep_resize allocation cleanup bcae081 unquiesce instance after quiesce failure e57f66a Consider hostdev devices when building metadata 0f253ea Refactor _build_device_metadata b2146b0 Default embedded instance.flavor.disabled attribute 509e0a0 libvirt: add qemu version check when configuring mtu for network a31ebd8 Fix unbound local when saving an unchanged RequestSpec 127dd73 add mtu to libvirt xml for ethernet and bridge types 1e16b5f Use ironic-tempest-dsvm-ipa-wholedisk-bios-agent_ipmitool-tinyipa in tree f1cb6f1 Fix regression when listing build_requests with marker and ip filter 22583a0 Update admin/flavors document 3163c93 libvirt: Fix the rescue race for vGPU instances 4917d4d Make nova service-list use scatter-gather routine 40de025 Handle CannotDeleteParentResourceProvider to 409 Conflict b872eb2 Fix unit test modifying global state c8756d5 Handle network-changed event for a specific port 0626dd0 Make nova list and migration-list ignore down cells 1162902 Use instance project/user when creating RequestSpec during resize reschedule 875afe9 libvirt: Log breadcrumb for known encryption bug ebdd39d Be graceful about vif plugging in early ironic driver startup f8aca77 [Stable Only] Add amd-ssbd and amd-no-ssb CPU flags 7bcd581 Add policy rule to block image-backed servers with 0 root disk flavor 274739f ironic: stop lying to the RT when ironic is down d26dc0c [Stable Only] Initialise failed_builds in IronicNodeState cf927f1 mock utils.execute() in qemu-img unit test ab1b714 Fix the file name of development-environment.rst 79a1a11 Ensure resource class cache when listing usages 43a84db Change consecutive build failure limit to a weigher 4e3dd81 Fix interpretation of max_attempts for scheduling alternates c7d87f6 Allow cinderv2 endpoints within the request context catalog 0a481a5 Metadata-API fails to retrieve avz for instances created before Pike Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 358 +++++++++++++++++++++ api-ref/source/parameters.yaml | 4 +- nova/api/openstack/compute/servers.py | 3 +- nova/api/openstack/compute/services.py | 10 +- .../placement/handlers/resource_provider.py | 4 + nova/cmd/__init__.py | 8 + nova/cmd/manage.py | 6 + nova/compute/api.py | 54 +++- nova/compute/manager.py | 191 +++++++---- nova/compute/multi_cell_list.py | 20 +- nova/compute/resource_tracker.py | 37 ++- nova/compute/stats.py | 8 + nova/compute/utils.py | 3 +- nova/conductor/manager.py | 8 +- nova/conf/compute.py | 71 +++- nova/conf/libvirt.py | 16 +- nova/conf/scheduler.py | 28 ++ nova/config.py | 5 + nova/context.py | 9 +- nova/db/sqlalchemy/api.py | 8 +- nova/exception.py | 14 + nova/network/neutronv2/api.py | 70 +++- nova/notifications/base.py | 51 ++- nova/notifications/objects/base.py | 10 +- nova/objects/instance.py | 33 ++ nova/objects/instance_group.py | 8 + nova/objects/request_spec.py | 13 +- nova/objects/resource_provider.py | 46 ++- nova/policies/servers.py | 29 ++ nova/quota.py | 15 +- nova/scheduler/client/report.py | 3 +- nova/scheduler/filter_scheduler.py | 10 +- nova/scheduler/host_manager.py | 9 +- nova/scheduler/ironic_host_manager.py | 3 + nova/scheduler/utils.py | 63 +++- nova/scheduler/weights/compute.py | 33 ++ nova/service.py | 6 +- nova/test.py | 8 +- .../placement/gabbits/resource-provider.yaml | 7 + .../functional/compute/test_resource_tracker.py | 95 +++++- .../functional/regressions/test_bug_1741125.py | 9 + .../functional/regressions/test_bug_1780373.py | 110 +++++++ .../unit/api/openstack/compute/test_services.py | 33 ++ .../unit/scheduler/weights/test_weights_compute.py | 57 ++++ nova/virt/block_device.py | 1 + nova/virt/hardware.py | 2 +- nova/virt/ironic/driver.py | 49 ++- nova/virt/libvirt/config.py | 7 + nova/virt/libvirt/designer.py | 7 + nova/virt/libvirt/driver.py | 217 +++++++------ nova/virt/libvirt/vif.py | 26 ++ nova/virt/vmwareapi/driver.py | 7 +- placement-api-ref/source/resource_provider.inc | 3 + ...01-list-across-down-cells-82726cac592e9728.yaml | 10 + ...cked_for_zero_disk_flavor-b36a6eb4fa8b2964.yaml | 20 ++ .../notes/bug-1778044-f498ee2f2cfb35ea.yaml | 15 + ...ailure-counter-to-weigher-428de7da0ed2033a.yaml | 23 ++ ...odel-extra-flags-amd-ssbd-1c0d0cec14073dec.yaml | 8 + ...libvirt-mtu-configuration-0a3e9129dd33b0bc.yaml | 6 + ...gration_wait_for_vif_plug-c9dcb034067890d8.yaml | 19 ++ ...tool-to-populate-inst.avz-29fed2fe57a9764d.yaml | 10 + 109 files changed, 3506 insertions(+), 723 deletions(-)

1 0

openstack-ansible 17.1.1 (queens)
by no-reply＠openstack.org 24 Sep '18

24 Sep '18

We high-spiritedly announce the release of: openstack-ansible 17.1.1: Ansible playbooks for deploying OpenStack This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ For more details, please see below. 17.1.1 ^^^^^^ New Features ************ * The "os_horizon" role now supports distribution of user custom themes. Deployers can use the new key "theme_src_archive" of "horizon_custom_themes" dictionary to provide absolute path to the archived theme. Only .tar.gz, .tgz, .zip, .tar.bz, .tar.bz2, .tbz, .tbz2 archives are supported. Structure inside archive should be as a standard theme, without any leading folders. * Octavia is creating vms, securitygroups, and other things in its project. In most cases the default quotas are not big enough. This will adjust them to (configurable) reasonable values. Security Issues *************** * Avoid setting the quotas too high for your cloud since this can impact the performance of other servcies and lead to a potential Denial-of-Service attack if Loadbalancer quotas are not set properly or RBAC is not properly set up. Bug Fixes ********* * Fixes bug https://bugs.launchpad.net/openstack- ansible/+bug/1778098 where playbook failed, if "horizon_custom_themes" is specified, and directory for theme is not provided Changes in openstack-ansible 17.1.0..17.1.1 ------------------------------------------- 45b044b Move ara to scripts-library e3a688e Avoid using loop_var in endpoint manage 9435dc9 Bump plugins SHA to include recent bugfixes fcbb63d Improve get-pip.py reliability 7778be9 Remove obsolete instruction 39b718a Make sure the branch to track is in YAML e64fa56 docs: Add links to very useful Galera recovery docs 6d2b205 Update all SHAs for 17.1.1 94a5348 Revert "Revert "Work around nested virt issues on OVH test nodes"" Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 68 ++++++------ inventory/group_vars/all/all.yml | 2 +- playbooks/common-playbooks/nova.yml | 8 +- playbooks/common-tasks/haproxy-endpoint-manage.yml | 4 +- playbooks/defaults/repo_packages/gnocchi.yml | 1 + playbooks/defaults/repo_packages/nova_consoles.yml | 2 + .../defaults/repo_packages/openstack_services.yml | 123 ++++++++++++++------- .../defaults/repo_packages/openstack_testing.yml | 1 + playbooks/os-keystone-install.yml | 4 +- .../notes/drop-custom-themes-724c40e5cd69b8e2.yaml | 10 ++ releasenotes/notes/fix_quota-e3d4bf0b896dc393.yaml | 12 ++ scripts/bootstrap-ansible.sh | 1 - scripts/gate-check-commit.sh | 20 +--- scripts/scripts-library.sh | 32 +++++- .../bootstrap-host/tasks/prepare_aio_config.yml | 7 ++ 17 files changed, 197 insertions(+), 107 deletions(-)

1 0

puppet-tripleo 8.3.6 (queens)
by no-reply＠openstack.org 24 Sep '18

24 Sep '18

We are amped to announce the release of: puppet-tripleo 8.3.6: Puppet module for OpenStack TripleO This release is part of the queens stable release series. The source is available from: http://git.openstack.org/cgit/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo (tag: puppet) For more details, please see below. 8.3.6 ^^^^^ Bug Fixes * Fixes issue where OpenFlow port for an ODL deployment would be set incorrectly to 6640 instead of 6653 in OVS. For more information see https://bugs.launchpad.net/tripleo/+bug/1786037 Changes in puppet-tripleo 8.3.5..8.3.6 -------------------------------------- 60eb50f Prepare 8.3.6 (Queens) release f8432c6 Fix docker debug/mirrors JSON augeas changes cee0cc2 import zuul job settings from project-config ed08695 Use exec for CA CRL instead of file resource 5e64097 import zuul job settings from project-config 2fc929d Force cinder properties to be set on ly on nodes with pcmk on it 27bbfa8 Revert "SSL support for haproxy -> novnc proxy connection" 5b49cc1 SSL support for haproxy -> novnc proxy connection 242915b Fixes ODL issue where OF port may be set wrong 82b7b4c Fix default value for Gnocchi auth mode 9f27b65 Adding wrapper script for haproxy in OVN metadata agent Diffstat (except docs and test files) ------------------------------------- manifests/certmonger/ca/crl.pp | 47 +++++++++++------ manifests/profile/base/docker.pp | 14 ++--- manifests/profile/base/metrics/collectd.pp | 6 +-- manifests/profile/base/metrics/collectd/gnocchi.pp | 6 +-- .../base/neutron/ovn_metadata_agent_wrappers.pp | 60 ++++++++++++++++++++++ .../base/neutron/plugins/ovs/opendaylight.pp | 2 +- .../profile/pacemaker/cinder/backup_bundle.pp | 6 +-- .../profile/pacemaker/cinder/volume_bundle.pp | 6 +-- metadata.json | 2 +- ...-ovs-openflow-port-resync-79b5f69b71740a6c.yaml | 6 +++ spec/classes/tripleo_certmonger_ca_crl_spec.rb | 30 +++++++---- spec/classes/tripleo_profile_base_docker_spec.rb | 8 +-- ..._profile_pacemaker_cinder_backup_bundle_spec.rb | 6 +-- ..._profile_pacemaker_cinder_volume_bundle_spec.rb | 6 +-- spec/fixtures/hieradata/default.yaml | 4 +- templates/collectd/collectd-gnocchi.conf.erb | 2 +- zuul.d/layout.yaml | 1 + 17 files changed, 155 insertions(+), 57 deletions(-)

1 0

ironic 10.1.5 (queens)
by no-reply＠openstack.org 24 Sep '18

24 Sep '18

We exuberantly announce the release of: ironic 10.1.5: OpenStack Bare Metal Provisioning This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: https://bugs.launchpad.net/ironic For more details, please see below. 10.1.5 ^^^^^^ Known Issues ************ * Building RAID1 is known to not work with Dell BOSS cards using **python-dracclient** 1.4.0 or earlier. Upgrade to **python- dracclient** 1.5.0 to use this feature. Bug Fixes ********* * Fixes an issue where RAID 10 creation fails with greater than 16 drives when using the "idrac" hardware type. See bug 2002771 (https://storyboard.openstack.org/#!/story/2002771) for details. * Fixes support for RAID 1 creation on Dell Boot Optimized Storage Solution (BOSS). Changes in ironic 10.1.4..10.1.5 -------------------------------- 011bd1d Add a more detailed release note for Dell BOSS RAID1 fix 9850a86 Fix for Unable to create RAID1 on Dell BOSS card e8a730c import zuul job settings from project-config 4abd4d0 iDRAC RAID10 creation with greater than 16 drives Diffstat (except docs and test files) ------------------------------------- ironic/drivers/modules/drac/raid.py | 10 +++- ironic/drivers/raid_config_schema.json | 3 +- .../notes/dell-boss-raid1-ec33e5b9c59d4021.yaml | 6 +++ ...10-greater-than-16-drives-a4cb107e34371a51.yaml | 6 +++ .../notes/raid-dell-boss-e9c5da9ddceedd67.yaml | 4 ++ zuul.d/project.yaml | 13 ++++++ 9 files changed, 107 insertions(+), 5 deletions(-)

1 0

congress 7.0.1 (queens)
by no-reply＠openstack.org 24 Sep '18

24 Sep '18

We high-spiritedly announce the release of: congress 7.0.1: Congress: The open policy framework for the cloud. This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/congress/ For more details, please see below. 7.0.1 ^^^^^ Prelude ******* Known Issues ************ * novaclient>=10.0.0 breaks Congress nova driver because it removed the methods for accessing os-hosts. To avoid the issue, please use a lower novaclient version (9.1.1 recommended). Bug Fixes ********* * Fixed a bug that prevented custom polling interval from being specified for Monasca driver. * Fixed a bug that caused high CPU usage of cfgvalidator data source. Changes in congress 7.0.0..7.0.1 -------------------------------- 6e0f8d4 Update and fix tag-based policy in library 190a569 Monasca driver poll time type fixed 09308ce temporarily disable murano in dsvm-py35 test 6775ad8 skipping nova driver tests for queens 5c878aa import zuul job settings from project-config 8a30678 7.0.1 release notes 49a9f84 Correct handling of known configs in cfgvalidator datasource fce20ab add instruction to install rabbitmq-server 832bd8e Updated from global requirements Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 8 ++ congress/datasources/cfgvalidator_driver.py | 103 +++++++++++---------- congress/datasources/monasca_driver.py | 2 +- devstack/plugin.sh | 6 ++ library/tag_based_network_security_zone.yaml | 14 +-- .../congress-devstack-py35-api-mysql/run.yaml | 2 +- .../notes/7_0_1-notes-54db8e8ab3547112.yaml | 10 ++ requirements.txt | 2 +- 9 files changed, 85 insertions(+), 65 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d68087f..a1b8c73 100644 --- a/requirements.txt +++ b/requirements.txt @@ -24 +24 @@ python-ironicclient>=2.2.0 # Apache-2.0 -python-mistralclient>=3.1.0 # Apache-2.0 +python-mistralclient!=3.2.0,>=3.1.0 # Apache-2.0

1 0

ironic 7.0.6 (ocata)
by no-reply＠openstack.org 24 Sep '18

24 Sep '18

We are delighted to announce the release of: ironic 7.0.6: OpenStack Bare Metal Provisioning This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through launchpad: http://bugs.launchpad.net/ironic For more details, please see below. 7.0.6 ^^^^^ Bug Fixes * Fixes an issue that caused the integrated Dell Remote Access Controller (iDRAC) "management" hardware interface implementation, "idrac", to fail to boot nodes in Unified Extensible Firmware Interface (UEFI) boot mode. That interface is supported by the "idrac" hardware type. The issue is resolved for Dell EMC PowerEdge 13th and 14th generation servers. It is not resolved for PowerEdge 12th generation and earlier servers. For more information, see story 1656841 (https://storyboard.openstack.org/#!/story/1656841) * Fixes an issue seen during node tear down where a port being deleted by the Bare Metal service could be deleted by the Compute service, leading to an unhandled error from the Networking service. See story 2002637 for further details. Changes in ironic 7.0.5..7.0.6 ------------------------------ 11ab776 import zuul job settings from project-config a00a0bf Fix iDRAC hardware type does not work with UEFI 27fea91 Fix error when deleting a non-existent port Diffstat (except docs and test files) ------------------------------------- ironic/common/neutron.py | 3 + ironic/drivers/modules/drac/management.py | 172 ++++++++++-- .../unit/drivers/modules/drac/test_management.py | 304 +++++++++++++++++++-- .../idrac-uefi-boot-mode-86f4694b4247a1ca.yaml | 11 + .../notes/story-2002637-4825d60b096e475b.yaml | 7 + zuul.d/project.yaml | 13 + 7 files changed, 487 insertions(+), 35 deletions(-)

1 0

puppet-tripleo 7.4.16 (pike)
by no-reply＠openstack.org 24 Sep '18

24 Sep '18

We are overjoyed to announce the release of: puppet-tripleo 7.4.16: Puppet module for OpenStack TripleO This release is part of the pike stable release series. The source is available from: http://git.openstack.org/cgit/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through launchpad: http://bugs.launchpad.net/tripleo (tag: puppet) For more details, please see below. 7.4.16 ^^^^^^ Upgrade Notes ************* * Rotated logs of containerized services in /var/log/containers will be purged with the next containerized logrotate run triggered via cron, if the rotated logs have been kept longer than *purge_after_days* (defaults to a 14 days). Containerized logrotate now always compresses the rotated /var/log/containers logs and this can no longer be delayed with delaycompress. Size parameter does not honor time-based constraints and is disabled as not GDPR compliant. From now on, it configures maxsize instead. Minsize is set to a 1 byte to put all /var/log/containers logs under the containerized logrotate control. Security Issues *************** * Forcibly purge rotated /var/log/containers logs after *purge_after_days* (defaults to a 14 days). New param *rotation* additionally allows to alter logrotate rotation interval. Defaults to a 'daily'. Make sure to adjust *purge_after_days* as needed. Any files in /var/log/containers, if not managed by the containerized logrotate, will be purged forcibly with each containerized logrotate run triggered via cron. Bug Fixes ********* * Fixed how deprecated parameters for Cinder's Netapp backend are handled so that empty strings are not misinterpreted. Fixes bug 1782376. Other Notes *********** * Add the compress option for the containerized logrotate service to compress rotated logs by default. Changes in puppet-tripleo 7.4.15..7.4.16 ---------------------------------------- be81353 Prepare 7.4.16 (Pike) release 13b3166 Force GDPR compliance of containers logs eb0b424 Add logrotate compress option e7300e6 import zuul job settings from project-config 70307b0 Use exec for CA CRL instead of file resource e536d44 import zuul job settings from project-config a8def9c [Ocata,Pike,Queens-Only] Fix Cinder's Netapp backend Diffstat (except docs and test files) ------------------------------------- manifests/certmonger/ca/crl.pp | 47 ++++++++++++++------- manifests/profile/base/cinder/volume/netapp.pp | 33 +++++++++++++-- manifests/profile/base/logging/logrotate.pp | 48 ++++++++++++++++++---- metadata.json | 2 +- ...-netapp-deprecated-params-80bcfac1b1d2f88e.yaml | 6 +++ ...otate-containers-compress-96934a4e76b9689d.yaml | 5 +++ ...ogrotate-containers-purge-56143a979ba80b51.yaml | 26 ++++++++++++ spec/classes/tripleo_certmonger_ca_crl_spec.rb | 30 ++++++++++---- templates/logrotate/containers_logrotate.conf.erb | 21 +++++++--- zuul.d/layout.yaml | 1 + 10 files changed, 178 insertions(+), 41 deletions(-)

1 0