September 2018 - Release-announce

mistral-extra 7.0.1 (rocky)
by no-reply＠openstack.org 11 Sep '18

11 Sep '18

We are satisfied to announce the release of: mistral-extra 7.0.1: Mistral OpenStack-specific bindings This release is part of the rocky stable release series. Download the package from: https://pypi.org/project/mistral-extra For more details, please see below. Changes in mistral-extra 7.0.0..7.0.1 ------------------------------------- ab11582 import zuul job settings from project-config df298fe Update UPPER_CONSTRAINTS_FILE for stable/rocky b193594 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 5 +++++ tox.ini | 2 +- 3 files changed, 7 insertions(+), 1 deletion(-)

1 0

mistral 7.0.1 (rocky)
by no-reply＠openstack.org 11 Sep '18

11 Sep '18

We are pumped to announce the release of: mistral 7.0.1: Mistral Project This release is part of the rocky stable release series. Download the package from: https://pypi.org/project/mistral For more details, please see below. 7.0.1 ^^^^^ Upgrade Notes ************* * Run "mistral-db-manage --config-file <mistral-conf-file> upgrade head" to ensure the database schema is up-to-date. Bug Fixes ********* * [bug 1785654 (https://bugs.launchpad.net/mistral/+bug/1785654) Fixed a bug that prevents any action to run if the OpenStack catalog returned by Keystone is larger than 64kB if the backend is MySQL/MariaDB. The limit is now increased to 16MB. * Eliminated an unnecessary update of the workflow execution object when processing "on_action_complete" operation. W/o this fix all such transactions would have to compete for the workflow executions table that causes lots of DB deadlocks (on MySQL) and transaction retries. In some cases the number of retries even exceeds the limit (currently hardcoded 50) and such tasks can be fixed only with the integrity checker over time. * The header X-Target-Insecure previously accepted any string and used it for comparisons. This meant unless it was empty (or not provided) it would always evaluate as True. This change makes the validation stricter, only accepting "True" and "False" and converting these to boolean values. Any other value will return an error. Changes in mistral 7.0.0..7.0.1 ------------------------------- 2309e52 Remove extra information from std.ssh action d7ca956 Add release note for auth_context bugfix 31705ea Increase delayed_calls_v2.auth_context b7faf8d Performance: remove unnecessary workflow execution update f41fe1a Revert "Make Tripleo non-voting on Rocky" df45fc7 Explicitly convert X-Target-Insecure to a boolean 7c833a8 import zuul job settings from project-config 1395a7b Removes non needed parameter passed in magnum client creation 17055eb Update UPPER_CONSTRAINTS_FILE for stable/rocky 58c5ffc Update .gitreview for stable/rocky 2ca660e Make Tripleo non-voting on Rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 21 ++++++---- mistral/actions/openstack/actions.py | 1 - mistral/actions/std_actions.py | 5 ++- mistral/context.py | 12 +++++- .../030_increase_delayed_calls_v2_auth_context.py | 36 +++++++++++++++++ mistral/db/v2/sqlalchemy/api.py | 1 + mistral/db/v2/sqlalchemy/models.py | 2 +- mistral/engine/dispatcher.py | 15 +++++-- mistral/services/action_execution_checker.py | 34 ++++++++++------ ...-context-with-big-catalog-7647a07d616e653f.yaml | 12 ++++++ ...workflow_execution_update-bdc9526bd39539c4.yaml | 10 +++++ .../x-target-insecure-values-4b2bdbfd42526abc.yaml | 8 ++++ tox.ini | 2 +- 15 files changed, 180 insertions(+), 26 deletions(-)

1 0

mistral-dashboard 7.0.1 (rocky)
by no-reply＠openstack.org 11 Sep '18

11 Sep '18

We are excited to announce the release of: mistral-dashboard 7.0.1: Mistral dashboard This release is part of the rocky stable release series. Download the package from: https://pypi.org/project/mistral-dashboard For more details, please see below. Changes in mistral-dashboard 7.0.0..7.0.1 ----------------------------------------- 55e9a7a import zuul job settings from project-config f4d2407 Update UPPER_CONSTRAINTS_FILE for stable/rocky ab7ff87 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 5 +++++ tox.ini | 2 +- 3 files changed, 7 insertions(+), 1 deletion(-)

1 0

reno 2.11.0
by no-reply＠openstack.org 11 Sep '18

11 Sep '18

We are stoked to announce the release of: reno 2.11.0: RElease NOtes manager The source is available from: https://git.openstack.org/cgit/openstack/reno Download the package from: https://pypi.org/project/reno Please report issues through launchpad: https://storyboard.openstack.org/#!/project/933 For more details, please see below. Changes in reno 2.10.0..2.11.0 ------------------------------ 355e167 Use unicode for debug string 030785a link to the europython 2018 presentation about reno 6dec428 build our docs with the lower-constraints ba9eab1 update sphinx to at least 1.6.1 9358275 move sphinx flags to tox.ini 399049a add lower-constraints tox environment and job a847e91 Migrate the link of bug report button to storyboard Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + lower-constraints.txt | 5 +++++ reno/sphinxext.py | 2 +- requirements.txt | 2 +- setup.cfg | 11 +---------- tox.ini | 14 +++++++++++++- 8 files changed, 33 insertions(+), 15 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2cc558f..079e796 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ pbr -PyYAML>=3.1.0 +PyYAML>=3.10

1 0

kuryr-kubernetes 0.4.5 (queens)
by no-reply＠openstack.org 11 Sep '18

11 Sep '18

We are pleased to announce the release of: kuryr-kubernetes 0.4.5: Kubernetes integration with OpenStack networking This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/kuryr-kubernetes Download the package from: https://tarballs.openstack.org/kuryr-kubernetes/ Please report issues through launchpad: https://bugs.launchpad.net/kuryr-kubernetes For more details, please see below. Changes in kuryr-kubernetes 0.4.4..0.4.5 ---------------------------------------- eff5476 PodVIFDriver impl - fix release_vif() signature Diffstat (except docs and test files) ------------------------------------- kuryr_kubernetes/controller/drivers/nested_macvlan_vif.py | 2 +- kuryr_kubernetes/controller/drivers/nested_vlan_vif.py | 2 +- kuryr_kubernetes/controller/drivers/neutron_vif.py | 2 +- kuryr_kubernetes/controller/drivers/vif_pool.py | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-)

1 0

magnum-ui 4.0.1 (queens)
by no-reply＠openstack.org 09 Sep '18

09 Sep '18

We are delighted to announce the release of: magnum-ui 4.0.1: Magnum User Interface This release is part of the queens stable release series. The source is available from: http://git.openstack.org/cgit/openstack/magnum-ui Download the package from: https://tarballs.openstack.org/magnum-ui/ Please report issues through launchpad: http://bugs.launchpad.net/magnum-ui For more details, please see below. Changes in magnum-ui 4.0.0..4.0.1 --------------------------------- a6d173d Add swarm-mode as COE 08b895e Fix JS error on routed-details-view when execute show-certificate 6280e47 Fix show certificate button returning invalid CA b795e75 import zuul job settings from project-config b328895 Fix horizon dependency from master to stable branch 53f5ab4 Enable to update Lables for cluster template 051408e Update UPPER_CONSTRAINTS_FILE for stable/queens 35a8cf2 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 32 ++++++++++++++++++++++ magnum_ui/api/magnum.py | 12 +++----- .../cluster-templates/cluster-templates.module.js | 1 + .../cluster-templates/workflow/workflow.service.js | 9 ++++-- .../workflow/workflow.service.spec.js | 4 +++ .../show-certificate/show-certificate.service.js | 11 ++++++-- test-requirements.txt | 2 +- tox.ini | 2 +- 9 files changed, 59 insertions(+), 15 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3621314..cc146fc 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -28 +28 @@ xvfbwrapper>=0.1.3 #license: MIT -http://tarballs.openstack.org/horizon/horizon-master.tar.gz#egg=horizon +http://tarballs.openstack.org/horizon/horizon-stable-queens.tar.gz#egg=horizon

1 0

magnum 6.2.0 (queens)
by no-reply＠openstack.org 09 Sep '18

09 Sep '18

We contentedly announce the release of: magnum 6.2.0: Container Management project for OpenStack This release is part of the queens stable release series. The source is available from: ** http://git.openstack.org/cgit/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through launchpad: ** http://bugs.launchpad.net/magnum For more details, please see below. 6.2.0 ^^^^^ New Features ************ * This is allowing no floating IP to be usable with a multimaster configuration in terms of load balancers. Bug Fixes ********* * When creating a multi-master cluster, all master nodes will attempt to create kubernetes resources in the cluster at this same time, like coredns, the dashboard, calico etc. This race conditon shouldn't be a problem when doing declarative calls instead of imperative (kubectl apply instead of create). However, due to [1], kubectl fails to apply the changes and the deployemnt scripts fail causing cluster to creation to fail in the case of Heat SoftwareDeployments. This patch passes the ResourceGroup index of every master so that resource creation will be attempted only from the first master node. [1] https://github.com/kubernetes/kubernetes/issues/44165 * Create admin cluster role for k8s_fedora_atomic, it is defined in the configuration but it wasn't applied. * Strip signed certificate. Certificate (ca.crt) has to be striped for some application parsers as they might require pure base64 representation of the certificate itself, without empty characters at the beginning nor the end of file. Changes in magnum 6.1.1..6.2.0 ------------------------------ e24dbc3 [swarm-mode] allow TCP port 2377 to swarm master node 5f57e2b import zuul job settings from project-config 88ec6e3 [k8s] Add proxy to master and set cluster-cidr c05248d Resolve stack outputs only on COMPLETE 8d87a80 Update the default admission control list a611ecf Fix etcd race condition issue 06935c5 Support disabling floating IPs in swarm mode 5560223 Add option to specify Cgroup driver for Kubelet 8b9b6b6 Allow multimaster lb with no floating ip option 25cd7ac k8s_fedora: Create admin cluster-role 587fa6e Fix race condition issue for k8s multi masters ef5c1b8 Strip signed certificate 629ee4e Use Octavia for LoadBalancer type service Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 +- .zuul.yaml | 9 + magnum/common/x509/operations.py | 2 +- .../environments/disable_floating_ip.yaml | 6 + .../environments/disable_lb_floating_ip.yaml | 4 + .../templates/environments/enable_floating_ip.yaml | 6 + .../environments/enable_lb_floating_ip.yaml | 4 + .../templates/environments/with_master_lb.yaml | 1 - .../environments/with_master_lb_octavia.yaml | 1 - .../kubernetes/fragments/calico-service.sh | 11 +- .../fragments/configure-kubernetes-master.sh | 53 ++++- .../fragments/configure-kubernetes-minion.sh | 25 ++- .../kubernetes/fragments/core-dns-service.sh | 11 +- .../kubernetes/fragments/enable-ingress-traefik | 11 +- .../fragments/enable-prometheus-monitoring | 11 +- .../kubernetes/fragments/enable-services-master.sh | 2 +- .../fragments/kube-apiserver-to-kubelet-role.sh | 13 +- .../kubernetes/fragments/kube-dashboard-service.sh | 20 +- .../templates/kubernetes/fragments/make-cert.sh | 22 +- .../kubernetes/fragments/wc-notify-master.sh | 7 +- .../fragments/write-heat-params-master.yaml | 3 + .../kubernetes/fragments/write-heat-params.yaml | 4 + .../kubernetes/fragments/write-kube-os-config.sh | 1 + .../common/templates/swarm/fragments/make-cert.py | 42 ++-- magnum/drivers/heat/driver.py | 8 +- magnum/drivers/heat/k8s_fedora_template_def.py | 1 + magnum/drivers/heat/k8s_template_def.py | 3 + magnum/drivers/heat/swarm_mode_template_def.py | 53 +++-- magnum/drivers/heat/template_def.py | 4 + .../fragments/write-heat-params-master.yaml | 1 + .../templates/fragments/write-heat-params.yaml | 1 + .../k8s_coreos_v1/templates/kubecluster.yaml | 8 + .../k8s_coreos_v1/templates/kubemaster.yaml | 7 + .../k8s_coreos_v1/templates/kubeminion.yaml | 7 + .../templates/kubecluster.yaml | 20 +- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 22 ++ .../k8s_fedora_atomic_v1/templates/kubeminion.yaml | 17 ++ .../templates/kubecluster.yaml | 8 + .../k8s_fedora_ironic_v1/templates/kubemaster.yaml | 7 + .../templates/kubeminion_software_configs.yaml | 7 + .../templates/swarmcluster.yaml | 17 +- .../templates/swarmmaster.yaml | 2 +- .../templates/swarmnode.yaml | 2 +- .../handlers/test_k8s_cluster_conductor.py | 13 ++ .../allow-multimaster-no-fip-b11520485012d949.yaml | 5 + ...ion-for-k8s-multi-masters-29bd36de57df355a.yaml | 13 ++ ...atomic_apply_cluster_role-8a46c881de1a1fa3.yaml | 5 + .../strip-ca-certificate-a09d0c31c45973df.yaml | 7 + 52 files changed, 795 insertions(+), 75 deletions(-)

1 0

tripleo-upgrade 3.0.0
by no-reply＠openstack.org 09 Sep '18

09 Sep '18

We are pumped to announce the release of: tripleo-upgrade 3.0.0: tripleo-upgrade - An ansible role for upgrade and update a TripleO deployment Download the package from: https://tarballs.openstack.org/tripleo-upgrade/ For more details, please see below. Changes in tripleo-upgrade 2.0.0..3.0.0 --------------------------------------- 6b914d2 Fix README syntax checks to enable branch out. f0e0c42 switch documentation job to new PTI eb55d02 import zuul job settings from project-config 0efd4a4 Use full path to workaround scripts. 94d6d42 Adjust load test templates. 8e55883 HTTP test during update/upgrade/ffwd. db03475 Add the overcloud stack name when calling upgrade-non-controller.sh ba9879a Adjust roles_data also for updates. aa2e40e Fix issue with failed OOO upgrade 0228961 Workload flavor customization. 6293092 Change include for include_tasks when including loop controled scripts. 40b3406 cont/uc: remove --use-heat 05c711e Minor updates of pre-provisioned envrionments. a359c3a Allow pingloss adjustment. b5797d4 Adjust roles_data during FFU 5a7e5aa Allow fast forward upgrade of custom roles be343de Filter qrouter containers from images validation script 0d471e9 Make service check output more verbose. d3f7b20 Load roles list from yaml instead of awk parsing 789df29 Pass stack's name with variable overcloud_stack_name 2ce0f12 Use up to date parameter name for cli options conversion 91f7034 Add splitstack detection to auxilary-facts 3c9de31 add containerized-undercloud-upgrades to tripleo-upgrades 1a9050d Add split-stack environment support. 9f66399 Create L3 start/stop scripts for minor updates. dfc1b98 Add timestamps to logs of upgrade tasks b254e04 Add timestamps to update log files 26d6e83 Set docker environment files during ffu prepare and converge 46ffad4 Fix docker images validation script a20a44d Pass custom roles_data during minor update baff4a2 Add log artifacts for upgrade steps b15c9aa Move scenario000-multinode-oooq-container-upgrades to check a66ee2c Remove the --container-registry-file parameter from upgrade clis bb6980d Don't hardcode OC user name for various checks. 651da4a Move L3 agent checks inside overcloud upgrade script. febf252 Fix validation for A/P services 99ecafd Add ceph minor update step 0b0732c Expose option to delete 'unused rpms' 3c02aa0 Pass --ssh-user option during fast forward upgrade run ec485ad Add -y when upgrading the containerized undercloud 6b3ff54 Set mon_max_pg_per_osd to 300 during ceph upgrade 85eac0b Do not run nic template conversion on default tht location 9a68678 Move SSL undercloud validation out of UC script create tasks. 0fd5d40 Separate scripts creation tasks for under/overcloud. 70cc10e add container minimal check and gate 72b55d6 Run Ceph upgrade before converge. a03fe57 Cleanup on oc_roles var a489810 Use tripleo_role_name instead of role_name 5ca79c2 Call L3 checks before/after Role upgrade. e35639b Pass overcloud stack name to upgrade run. fc4907d Convert nic templates to new format before starting fast forward 2db8b26 Add tag for post fast forward upgrade tasks 1d5f1d0 Fix typo in ceph-ansible 460008a Add stack name option to steps missing it 74c9afa Include nova check script during update/upgrade/ffwd 72e473e Fix search for compute roles c60e7a9 Convert CLI options to variables for updates/upgrades/ffwd. b8b71e6 Add validation-errors-nonfatal in ceph upgrade. 26a7d90 Update the fast forward workflow to use CLI commands 7f47c43 Add missed options for bash script. cec6d97 Add Neutron L3 agent failover check during upgrade dea6989 Allow running update/upgrade converge with --update-plan-only 23ee103 Add Ceph upgrade tasks 22b5394 Add missed post-controller scripts 38e9f53 Adjust roles-data file for P->Q upgrade. cf852f3 Fix linters in role and make them fit oooq rules 9f6dbb0 Revert "undercloud: workaround for containers" 85507ae Add post upgrade Nova operation check 0fa7558 undercloud: workaround for containers 78a7724 Use --roles in overcloud upgrade run. 6dcd632 Add overcloud update converge tasks. 71c16f2 Fix release var in undercloud upgrade script d8370a5 Add FFU converge step 2717fb7 Pass environment files to upgrade converge step. 85afc96 Update fast forward upgrade environment file location 3693144 Lint directory instead of files and match exclude from oooq-extra. 2bead7f Adhere to ANSIBLE0011 All tasks should be named. eb0019d Support containerized undercloud upgrade cf86a8e Fix newline stripping in upgrade template. 71aaf58 Add Neutron L3 agent failover check during upgrade f5929d5 Re-use undercloud upgrades tasks. 9372740 Pass env-files and roles-data file to update/upgrade prepare cli. ca46430 Fix a nit in the oooq transformation process. 9cb62d9 Handle special characters when parsing roles. 6415178 Support --ssh-user argument to upgrade/update run command 247036e Expose overcloud_ssh_user var to infrared options f8e1dbf Fix tag for rolling upgrade compute task 1f004ee Add support for per role FFU upgrade 7ff440d Support custom stack names during FFU e2fbfae Ensure ansible-pacemaker installation for updates/upgrades. 680993e Correct var name tripleo_upgrade_validations_non_fatal. 55ff3f7 Include connectivity check prepare scripts during FFU 84017ba Use rhos-release role pin puddle option c28e85c Include new CLI changes for overcloud update. 22dcdf6 FFU: We need to be root to install ansible-pacemaker package. 29ba7d1 Set osd_scenario and journals during ceph params conversion 799eea8 New major upgrade workflow implementation. d195142 Ensure ansible-pacemaker is present on the undercloud. db75499 Add floating ip connectivity check to common dir and use it for FFU b579889 Add Ceph upgrade steps for FFU 93647db Check if undercloud is rebooted. 036166e [FFU] For deployed server in CI, make sure to get the compta layer. 29aa281 FFU upgrade issue with the release loop var. ecc86f4 Update reno for stable/queens 688679d Fix non working repo upgrade command for ffu. Diffstat (except docs and test files) ------------------------------------- README.md | 18 +- ci-scripts/ansible-lint.sh | 35 +-- ci-scripts/ansible_rules/ShellPipefail.py | 53 +++++ defaults/main.yml | 127 ++++++++--- infrared_plugin/main.yml | 40 ++++ infrared_plugin/plugin.spec | 46 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/queens.rst | 6 + tasks/common/adjust-roles-data.yaml | 15 ++ tasks/common/auxilary-facts.yaml | 58 +++++ tasks/common/controller_post_script.yml | 4 +- tasks/common/controller_post_scripts.yml | 2 +- tasks/common/convert_ceph_params.yaml | 108 +++++++++ tasks/common/convert_cli_opts_params.yaml | 108 +++++++++ tasks/common/convert_nic_templates.yaml | 44 ++++ tasks/common/convert_roles_data.yaml | 248 +++++++++++++++++++++ tasks/common/create_http_test_scripts.yml | 9 + .../create_l3_agent_connectivity_check_script.yml | 13 ++ .../create_l3_agent_failover_check_script.yml | 13 ++ tasks/common/create_nova_actions_check_script.yml | 6 + .../l3_agent_connectivity_check_start_script.yml | 8 + .../l3_agent_connectivity_check_stop_script.yml | 6 + .../common/l3_agent_failover_check_post_script.yml | 6 + .../common/l3_agent_failover_check_pre_script.yml | 6 + tasks/common/load_roles_from_inventory.yaml | 25 +++ tasks/common/nova_actions_check.yml | 8 + tasks/common/undercloud_validate_upgrade.yaml | 94 ++++++++ tasks/fast-forward-upgrade/convert_roles_data.yaml | 161 +++++++++++++ tasks/fast-forward-upgrade/create-ffu-scripts.yaml | 15 +- .../create-prepare-scripts.yaml | 100 +++++---- .../fast-forward-upgrade/ffu_download_config.yaml | 8 - .../ffu_update_stack_outputs.yaml | 14 +- tasks/fast-forward-upgrade/ffu_upgrade_ceph.yaml | 26 +++ .../fast-forward-upgrade/ffu_upgrade_converge.yaml | 28 +++ tasks/fast-forward-upgrade/main.yml | 141 +++++++----- tasks/fast-forward-upgrade/overcloud_bulk.yaml | 27 +++ tasks/fast-forward-upgrade/overcloud_role.yaml | 74 ++++++ tasks/fast-forward-upgrade/undercloud-upgrade.yml | 17 +- tasks/update/ceph_update_run.yml | 17 ++ tasks/update/create-overcloud-update-scripts.yaml | 78 +++++++ tasks/update/create-undercloud-update-scripts.yaml | 19 ++ tasks/update/create-update-scripts.yaml | 54 ----- tasks/update/main.yml | 107 ++++++--- tasks/update/overcloud_update_converge.yml | 24 ++ tasks/update/overcloud_update_prepare.yml | 33 +++ tasks/update/overcloud_update_run.yml | 20 ++ tasks/upgrade/ceph_upgrade_run.yml | 16 ++ tasks/upgrade/compute_upgrade.yml | 2 +- tasks/upgrade/controller_node_upgrade.yml | 6 +- tasks/upgrade/controller_post_upgrade.yml | 2 +- tasks/upgrade/convert_ceph_params.yaml | 50 ----- tasks/upgrade/convert_roles_data.yaml | 248 --------------------- .../upgrade/create-overcloud-upgrade-scripts.yaml | 99 ++++++++ .../upgrade/create-undercloud-upgrade-scripts.yaml | 18 ++ tasks/upgrade/create-upgrade-scripts.yaml | 222 ------------------ tasks/upgrade/docker_composable_upgrade.yml | 36 --- tasks/upgrade/docker_converge_upgrade.yml | 30 --- tasks/upgrade/main.yml | 142 ++++++++---- tasks/upgrade/non_controller_upgrade_scripts.yml | 2 +- tasks/upgrade/overcloud_upgrade_converge.yml | 18 ++ tasks/upgrade/overcloud_upgrade_prepare.yml | 44 ++++ tasks/upgrade/overcloud_upgrade_run.yml | 13 ++ tasks/upgrade/swiftstorage_upgrade.yml | 2 +- tasks/upgrade/undercloud_ssl_camap.yaml | 10 +- tasks/upgrade/undercloud_validate_upgrade.yaml | 64 ------ templates/ceph-update-run.sh.j2 | 27 +++ templates/ceph-upgrade-run.sh.j2 | 37 +++ templates/cephosd.yaml.j2 | 14 ++ templates/check_service_galera.sh.j2 | 15 +- templates/check_service_haproxy.sh.j2 | 9 +- templates/check_service_haproxy_backend.sh.j2 | 3 +- templates/check_service_rabbitmq.sh.j2 | 7 +- templates/check_service_reboot.sh.j2 | 9 +- templates/check_service_redis.sh.j2 | 7 +- templates/create_registry_env.sh.j2 | 54 ----- templates/download_images.sh.j2 | 40 ---- templates/dpdk-upgrade-env.yaml.j2 | 11 - templates/extraconfig_override.yaml.j2 | 11 - .../fast-forward-upgrade/cli_opts_params.yaml.j2 | 22 ++ .../ffu_upgrade_playbook.sh.j2 | 12 - .../overcloud_upgrade_nodes.sh.j2 | 9 + .../overcloud_upgrade_role.sh.j2 | 12 + .../overcloud_upgrade_run.sh.j2 | 7 + .../fast-forward-upgrade/undercloud_upgrade.sh.j2 | 6 +- .../undercloud_workarounds_post.sh.j2 | 8 +- .../undercloud_workarounds_pre.sh.j2 | 8 +- templates/fast-forward-upgrade/workarounds.sh.j2 | 25 +-- templates/fip_http_check_start.sh.j2 | 16 ++ templates/fip_http_check_stop.sh.j2 | 9 + templates/l3_agent_failover_post.sh.j2 | 14 ++ templates/l3_agent_failover_pre.sh.j2 | 7 + templates/l3_agent_start_ping.sh.j2 | 10 +- templates/l3_agent_stop_ping.sh.j2 | 6 +- templates/node_upgrade.sh.j2 | 2 +- templates/nova_actions_check.sh.j2 | 36 +++ templates/oooq_deploy_transformation.sh.j2 | 2 +- templates/overcloud_update.sh.j2 | 23 -- templates/overcloud_update_converge.sh.j2 | 36 +++ templates/overcloud_update_prepare.sh.j2 | 33 +++ templates/overcloud_update_run.sh.j2 | 37 +++ templates/overcloud_update_setup.sh.j2 | 10 - templates/overcloud_upgrade_converge.sh.j2 | 91 ++++++++ templates/overcloud_upgrade_prepare.sh.j2 | 47 ++++ templates/overcloud_upgrade_run.sh.j2 | 125 +++++++++++ templates/undercloud_update.sh.j2 | 5 - templates/undercloud_upgrade.sh.j2 | 9 +- templates/validate_docker_images_versions.sh.j2 | 61 ++++- templates/workload_launch.sh.j2 | 10 +- zuul.d/layout.yaml | 19 ++ 109 files changed, 2842 insertions(+), 1213 deletions(-)

1 0

python-neutronclient 6.10.0 (stein)
by no-reply＠openstack.org 09 Sep '18

09 Sep '18

We high-spiritedly announce the release of: python-neutronclient 6.10.0: CLI and Client Library for OpenStack Networking This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through launchpad: https://bugs.launchpad.net/python-neutronclient For more details, please see below. 6.10.0 ^^^^^^ New Features * CLI support for the "firewal_group" as a loggable resource type for logging feature, which is enhanced FWaaS functionality, as OSC plugin commands. Changes in python-neutronclient 6.9.0..6.10.0 --------------------------------------------- 0aefe1c Ensure API calls for subnets are in URL length limit d5a89fe add lib-forward-testing-python3 test job bec7dd0 add python 3.6 unit test job 124dd33 switch documentation job to new PTI 01ec2cc import zuul job settings from project-config f064057 fix tox python3 overrides 80f9164 [log] Add 'firewall_group' as a loggable resource type for logging bcf895c Add B303 into list of skipped bandit plugins bca82e2 Fix broken unittests a8106b1 Update reno for stable/rocky 61056c4 Add release note link in README 834ad17 Add bandit to pep8 gate 5a6b756 Update links in README Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 44 ++++++++++ README.rst | 5 +- lower-constraints.txt | 2 +- neutronclient/neutron/v2_0/network.py | 5 ++ neutronclient/osc/v2/logging/network_log.py | 44 ++++++---- ...ewall-group-resource-type-5ad1b69cabcb4aa6.yaml | 5 ++ releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 ++ test-requirements.txt | 3 +- tox.ini | 16 +++- 14 files changed, 211 insertions(+), 25 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 58c378a..77a33e6 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,0 +6 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +bandit>=1.1.0 # Apache-2.0 @@ -11 +12 @@ oslotest>=3.2.0 # Apache-2.0 -osprofiler>=1.4.0 # Apache-2.0 +osprofiler>=2.3.0 # Apache-2.0

1 0

neutron 13.0.1 (rocky)
by no-reply＠openstack.org 09 Sep '18

09 Sep '18

We are stoked to announce the release of: neutron 13.0.1: OpenStack Networking This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. 13.0.1 ^^^^^^ Bug Fixes * Add "resource_type" into log object query to distinguish between security group and firewall group log objects. For more information see bug 1787119 (https://bugs.launchpad.net/neutron/+bug/1787119) Changes in neutron 13.0.0..13.0.1 --------------------------------- 116e73b ovs fw: apply the NORMAL action on egress traffic in a single table aa30246 doc: Additional fixes to the SR-IOV doc 59f3380 Remove deprecated RamFilter from admin guide 3e68398 Fix incorrect log resources querying cf38c37 DVR: Add IPv6 csnat port address correctly b478424 import zuul job settings from project-config 6eb7d20 Reduce qos rpc times on the ovs-agent side 7908ca6 Remove fdb entries for ha router interfaces when going DOWN 3cc89a9 Fix neutron-openvswitch-agent Windows support Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 116 ++++++++++- .../contributor/internals/openvswitch_firewall.rst | 71 ++++--- neutron/agent/common/ip_lib.py | 2 + neutron/agent/common/utils.py | 4 + neutron/agent/l2/extensions/qos.py | 3 +- neutron/agent/linux/async_process.py | 9 +- neutron/agent/linux/iptables_manager.py | 2 +- .../agent/linux/openvswitch_firewall/firewall.py | 23 ++- neutron/agent/linux/utils.py | 16 +- neutron/agent/windows/ip_lib.py | 6 + neutron/agent/windows/utils.py | 61 +++++- neutron/common/exceptions.py | 6 + neutron/db/l3_dvr_db.py | 30 ++- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 26 ++- .../drivers/openvswitch/agent/common/constants.py | 2 + neutron/services/logapi/common/db_api.py | 12 +- .../logapi/drivers/openvswitch/ovs_firewall_log.py | 3 +- .../functional/services/logapi/test_logging.py | 25 ++- .../unit/agent/linux/test_iptables_manager.py | 4 +- .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 40 ++++ .../unit/services/logapi/common/test_db_api.py | 25 +++ .../drivers/openvswitch/test_ovs_firewall_log.py | 6 +- ...g-logging-and-fwg-logging-ef16077880d76449.yaml | 7 + 29 files changed, 797 insertions(+), 132 deletions(-)

1 0

oslo.service 1.32.0 (stein)
by no-reply＠openstack.org 07 Sep '18

07 Sep '18

We high-spiritedly announce the release of: oslo.service 1.32.0: oslo.service library This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through launchpad: https://bugs.launchpad.net/oslo.service For more details, please see below. Changes in oslo.service 1.31.3..1.32.0 -------------------------------------- 2705800 Ensure connection is active in graceful shutdown tests a850fda Stop asserting on Eventlet internals 2ee3894 Skips signal handling on Windows e969bea add lib-forward-testing-python3 test job 88af130 add python 3.6 unit test job a741708 import zuul job settings from project-config 9b3e6ad Update reno for stable/rocky Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 10 +++++++++ oslo_service/__init__.py | 2 ++ oslo_service/service.py | 4 +++- releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 ++++++ 8 files changed, 53 insertions(+), 45 deletions(-)

1 0

openstackdocstheme 1.23.2
by no-reply＠openstack.org 06 Sep '18

06 Sep '18

We are pleased to announce the release of: openstackdocstheme 1.23.2: OpenStack Docs Theme The source is available from: https://git.openstack.org/cgit/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ Please report issues through launchpad: https://launchpad.net/openstack-doc-tools For more details, please see below. Changes in openstackdocstheme 1.23.1..1.23.2 -------------------------------------------- fde94a8 Fix use_storyboard Diffstat (except docs and test files) ------------------------------------- openstackdocstheme/ext.py | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-)

1 0

python-neutronclient 6.9.1 (rocky)
by no-reply＠openstack.org 05 Sep '18

05 Sep '18

We are pleased to announce the release of: python-neutronclient 6.9.1: CLI and Client Library for OpenStack Networking This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through launchpad: https://bugs.launchpad.net/python-neutronclient For more details, please see below. Changes in python-neutronclient 6.9.0..6.9.1 -------------------------------------------- 96f2131 Update UPPER_CONSTRAINTS_FILE for stable/rocky d17e520 Update .gitreview for stable/rocky 272f097 Fix broken unittests Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lower-constraints.txt | 2 +- test-requirements.txt | 2 +- tox.ini | 2 +- 5 files changed, 5 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 58c378a..6d52ae0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ oslotest>=3.2.0 # Apache-2.0 -osprofiler>=1.4.0 # Apache-2.0 +osprofiler>=2.3.0 # Apache-2.0

1 0

python-openstackclient 3.16.1 (rocky)
by no-reply＠openstack.org 05 Sep '18

05 Sep '18

We are delighted to announce the release of: python-openstackclient 3.16.1: OpenStack Command-line Client This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through launchpad: https://storyboard.openstack.org/#!/project/975 For more details, please see below. Changes in python-openstackclient 3.16.0..3.16.1 ------------------------------------------------ 3e5a2d2 Fix broken gate jobs d711cdd import zuul job settings from project-config fa0350e Update UPPER_CONSTRAINTS_FILE for stable/rocky 46cd672 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 9 ++ .../functional/volume/v1/test_transfer_request.py | 37 ++++--- .../functional/volume/v2/test_transfer_request.py | 42 +++++--- .../functional/volume/v3/test_transfer_request.py | 2 + openstackclient/volume/v2/volume.py | 14 +-- tox.ini | 8 +- 12 files changed, 174 insertions(+), 180 deletions(-)

1 0

magnum-ui 5.0.1 (rocky)
by no-reply＠openstack.org 05 Sep '18

05 Sep '18

We are satisfied to announce the release of: magnum-ui 5.0.1: Magnum User Interface This release is part of the rocky stable release series. The source is available from: http://git.openstack.org/cgit/openstack/magnum-ui Download the package from: https://tarballs.openstack.org/magnum-ui/ Please report issues through launchpad: http://bugs.launchpad.net/magnum-ui For more details, please see below. Changes in magnum-ui 5.0.0..5.0.1 --------------------------------- c23a2d8 Add swarm-mode as COE ffc1010 Fix JS error on routed-details-view when execute show-certificate 8a03c55 Fix show certificate button returning invalid CA fd65446 import zuul job settings from project-config 70c60ee Remove mox3 from doc/requirements.txt fbce62b Imported Translations from Zanata 04bb029 Drop nose dependencies 30edce6 Imported Translations from Zanata b223551 Update UPPER_CONSTRAINTS_FILE for stable/rocky 546d355 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 31 ++++++++++- lower-constraints.txt | 7 --- .../cluster-templates/cluster-templates.module.js | 1 + .../cluster-templates/workflow/workflow.service.js | 5 ++ .../workflow/workflow.service.spec.js | 4 ++ .../show-certificate/show-certificate.service.js | 11 +++- .../source/locale/de/LC_MESSAGES/releasenotes.po | 10 ++-- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 11 ++-- .../source/locale/id/LC_MESSAGES/releasenotes.po | 61 +++++++++++++++++++++- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 5 +- requirements.txt | 7 +-- test-requirements.txt | 6 --- tox.ini | 4 +- 15 files changed, 122 insertions(+), 44 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ef0746f..d120733 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,5 +11,0 @@ python-magnumclient>=2.6.0 # Apache-2.0 -Babel!=2.4.0,>=2.3.4 # BSD -Django<2.0,>=1.11 # BSD -django-babel>=0.6.2 # BSD -django-compressor>=2.0 # MIT -django-pyscss>=2.0.2 # BSD License (2 clause) @@ -18 +13 @@ django-pyscss>=2.0.2 # BSD License (2 clause) -horizon>=13.0.0 # Apache-2.0 +horizon>=14.0.0.0b3 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 6f6e94b..020ffec 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +11,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -django-nose>=1.4.4 # BSD @@ -15,5 +13,0 @@ nodeenv>=0.9.4 # BSD -nose>=1.3.7 # LGPL -nose-exclude>=0.3.0 # LGPL -nosehtmloutput>=0.0.3 # Apache-2.0 -nosexcover>=1.0.10 # BSD -openstack.nose-plugin>=0.7 # Apache-2.0

1 0

monasca-tempest-plugin 0.2.0 (rocky)
by no-reply＠openstack.org 05 Sep '18

05 Sep '18

We are thrilled to announce the release of: monasca-tempest-plugin 0.2.0: Tempest plugin for Monasca project This release is part of the rocky release series. The source is available from: https://git.openstack.org/cgit/openstack/monasca-tempest-plugin Download the package from: https://tarballs.openstack.org/monasca-tempest-plugin/ Please report issues through launchpad: https://bugs.launchpad.net/monasca For more details, please see below. Changes in monasca-tempest-plugin 0.1.0..0.2.0 ---------------------------------------------- aea636e switch documentation job to new PTI 9533e56 import zuul job settings from project-config f983593 Make log test compatible with python3 33bc7a0 Make metrics test compatible with python3 bfad66a Remove UNICODE_MESSAGES template 3478474 Initialize alarm in test_alarm_metric_mixcase e62fff1 Drop py34 and py33 target in tox.ini 0517969 Add test case f. alarms: metric name in mixed case f5ef89e Remove test for log_api/v2 version b14a771 Enable api and log-api tempest test 6d21f39 Update pep8 checks 51baa8b Add release notes link to README d874b00 Revert "Remove UNICODE_MESSAGES template" fc24ef0 Remove UNICODE_MESSAGES template 3e72b5c Fix unicode tempest test 2f218b1 Update the url links in CONTRIBUTING.rst cc4de07 Fix instructions for running tempest tests feb5207 Updated from global requirements 5385ae9 Updated from global requirements e8ca307 Updated from global requirements 4ea57e0 Extend wait time after alarm definitions creation 7ef3ef3 Updated from global requirements e6f7f44 correct url in readme file and update home-page url Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + .zuul.yaml | 17 +++++ CONTRIBUTING.rst | 8 +- README.rst | 3 +- devstack/README.rst | 4 +- .../services/log_api_v2_client.py | 51 ------------- .../services/log_search_client.py | 4 +- .../test_alarms_state_history_one_transition.py | 4 +- requirements.txt | 3 +- setup.cfg | 4 +- test-requirements.txt | 2 +- tox.ini | 9 +-- 28 files changed, 259 insertions(+), 332 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8d361a0..3e5b06e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -oslo.config>=5.1.0 # Apache-2.0 +oslo.config>=5.2.0 # Apache-2.0 @@ -12,0 +13 @@ mock>=2.0.0 # BSD +monasca-common>=2.8.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 4d7f782..0a805cb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ hacking<0.13,>=0.12.0 # Apache-2.0 -sphinx!=1.6.6,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD

1 0

oslo.utils 3.37.0 (stein)
by no-reply＠openstack.org 05 Sep '18

05 Sep '18

We are satisfied to announce the release of: oslo.utils 3.37.0: Oslo Utility library This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through launchpad: https://bugs.launchpad.net/oslo.utils For more details, please see below. Changes in oslo.utils 3.36.4..3.37.0 ------------------------------------ 9fdcf64 Fix docstring formatting nit in uuidsentinel 63d7649 UUID sentinel 1935289 Remove moxstubout usage 9c5b806 add lib-forward-testing-python3 test job f9db836 add python 3.6 unit test job e43edb1 import zuul job settings from project-config d3ef97c Update reno for stable/rocky 25ed5ce Remove extra copy.deepcopy Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 10 ++++++++++ oslo_utils/fixture.py | 41 +++++++++++++++++++++++++++++++++++++++ oslo_utils/strutils.py | 5 +---- releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 ++++++ 7 files changed, 85 insertions(+), 8 deletions(-)

1 0

octavia 2.0.2 (queens)
by no-reply＠openstack.org 04 Sep '18

04 Sep '18

We joyfully announce the release of: octavia 2.0.2: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the queens stable release series. Download the package from: https://pypi.org/project/octavia For more details, please see below. 2.0.2 ^^^^^ Security Issues *************** * Adds a configuration option, "reserved_ips" that allows the operator to block addresses from being used in load balancer members. The default setting blocks the nova metadata service address. Bug Fixes ********* * Fixes an issue where if more than one amphora fails at the same time, failover might not fully complete, leaving the load balancer in ERROR. * Fixes an issue where VIP return traffic was always routed, if a gateway was defined, through the gateway address even if it was local traffic. * Fixes a bug where unspecified or unlimited listener connection limit settings would lead to a 2000 connection limit when using the amphora/octavia driver. This was the compiled in connection limit in some HAproxy packages. * Fixes a neutron-lbaas LBaaS v2 API compatibility issue when requesting a load balancer status tree via '/statuses'. Changes in octavia 2.0.1..2.0.2 ------------------------------- d281a2a Fix stable/queens for bad backport. 3b944e8 Correct flavor to flavor_id in LB API 01a473c Fix neutron "tenat_id" compatibility 931be56 Delete amphora regardless of status 730037c Allow blocking IPs from member addresses 12bf440 "Resolve" bandit issue with sha1 hashes 127ce63 Fix DIB_REPOREF_amphora_agent not set on Git !=1.8.5 72715ba Fix failover when multiple amphora have failed f9c3456 Add exception handling for housekeeping service e2c5d4e Fixes unlimited listener connection limit 0cee3ce Fix package version querying on non-dpkg distros 24a4220 Ignore a port not found when deleting an LB d685af8 Fix RedHat family image building d8f4e71 Fix fields translation on filtering a99f70f [amphora-agent] add local net to routing table 1 59590d2 Mark LBs in failover PENDING_UPDATE f1f36be Fix health manager to be spare amphora aware 97b8423 Improve the error logging for zombie amphora aef4f78 Exclude amphora instances already DELETED when failover loadbalancer 14c7883 Add API alias for '/statuses' 2077d82 Add pool session persistence validation dd1f2fe Allow fields filter on single object GETs eac320d Update introduction documention page 9e53155 Fix configured haproxy restarts daa567b Allow using spaces for primary common name in SSL certificates 8a62c60 When SG delete fails on vip deallocate, try harder 337c0e1 Let healthmanager process shutdown cleanly (again) 7636fb3 Improve Health Manager error handling becb708 Use HMAC.hexdigest to avoid non-ascii characters for package data 917bebd Devstack plugin image build option quoting fix c747396 Fix kvm-centos.7 gate 05b57b4 Remove snapd from stable branch images d048948 Update auth_uri option to www_authenticate_uri 65755f7 Correct field filtering for member/l7rule/amphora 2dbf565 Move o-hm0 dhcp config under /etc/dhcp df34872 Pool PUT should validate name/description length 0bd3559 Health Monitor url_path requires leading slash aa46758 Fix CentOS gate for stable/queens ecceaaa Fix statistics update typo 9848433 Overhaul HealthManager update threading 9e1ced7 Pin pip < 10 in the amphora image f9b3e34 Defend against neutron error response missing keys 0457ea3 Make keepalived initialization more predictable Diffstat (except docs and test files) ------------------------------------- api-ref/source/parameters.yaml | 2 +- .../source/v2/examples/loadbalancer-create-curl | 2 +- .../v2/examples/loadbalancer-create-response.json | 2 +- .../examples/loadbalancer-full-create-request.json | 2 +- .../loadbalancer-full-create-response.json | 2 +- .../v2/examples/loadbalancer-show-response.json | 2 +- .../v2/examples/loadbalancer-update-response.json | 2 +- .../v2/examples/loadbalancers-list-response.json | 2 +- api-ref/source/v2/loadbalancer.inc | 14 +- devstack/plugin.sh | 15 +- devstack/settings | 4 +- diskimage-create/diskimage-create.sh | 4 +- .../75-amphora-agent-install | 9 + .../amphora-agent-source-install/cap-pip.txt | 1 + elements/amphora-agent/package-installs.yaml | 6 + elements/amphora-agent/pkg-map | 4 +- .../post-install.d/20-haproxy-tune-kernel | 7 +- etc/octavia.conf | 22 +- .../backends/agent/api_server/amphora_info.py | 5 +- .../backends/agent/api_server/keepalived.py | 14 + .../amphorae/backends/agent/api_server/osutils.py | 16 +- .../api_server/templates/plug_vip_ethX.conf.j2 | 2 + .../api_server/templates/rh_route_ethX.conf.j2 | 1 + .../agent/api_server/templates/systemd.conf.j2 | 3 +- .../backends/health_daemon/status_message.py | 45 +- octavia/amphorae/drivers/driver_base.py | 21 +- .../amphorae/drivers/haproxy/rest_api_driver.py | 100 +- octavia/amphorae/drivers/health/heartbeat_udp.py | 53 +- .../drivers/keepalived/vrrp_rest_driver.py | 5 +- octavia/amphorae/drivers/noop_driver/driver.py | 13 + octavia/api/v2/controllers/amphora.py | 10 +- octavia/api/v2/controllers/health_monitor.py | 6 +- octavia/api/v2/controllers/l7policy.py | 11 +- octavia/api/v2/controllers/l7rule.py | 15 +- octavia/api/v2/controllers/listener.py | 7 +- octavia/api/v2/controllers/load_balancer.py | 22 +- octavia/api/v2/controllers/member.py | 18 +- octavia/api/v2/controllers/pool.py | 17 +- octavia/api/v2/types/load_balancer.py | 11 +- octavia/api/v2/types/pool.py | 16 +- octavia/cmd/health_manager.py | 17 +- octavia/cmd/house_keeping.py | 20 +- octavia/common/config.py | 25 +- octavia/common/constants.py | 27 + octavia/common/jinja/haproxy/jinja_cfg.py | 7 +- octavia/common/tls_utils/cert_parser.py | 5 + octavia/common/utils.py | 15 +- octavia/common/validate.py | 39 +- .../healthmanager/health_drivers/__init__.py | 0 .../healthmanager/health_drivers/update_base.py | 27 + .../healthmanager/health_drivers/update_db.py | 421 ++++++++ .../healthmanager/health_drivers/update_logging.py | 29 + octavia/controller/healthmanager/health_manager.py | 37 +- octavia/controller/healthmanager/update_db.py | 396 ------- octavia/controller/worker/controller_worker.py | 21 +- octavia/controller/worker/flows/amphora_flows.py | 83 +- .../worker/tasks/amphora_driver_tasks.py | 63 +- octavia/controller/worker/tasks/compute_tasks.py | 9 +- .../controller/worker/tasks/controller_tasks.py | 50 - octavia/controller/worker/tasks/database_tasks.py | 20 + octavia/controller/worker/tasks/network_tasks.py | 49 + octavia/db/base_models.py | 7 +- octavia/db/repositories.py | 57 +- .../drivers/neutron/allowed_address_pairs.py | 60 +- octavia/network/drivers/neutron/base.py | 10 + .../backend/agent/api_server/test_server.py | 42 +- .../agent/api_server/test_haproxy_compatibility.py | 18 +- .../backends/agent/api_server/test_listener.py | 6 +- .../backends/agent/api_server/test_osutils.py | 6 +- .../backends/health_daemon/test_envelope.py | 17 + .../backends/health_daemon/test_health_sender.py | 8 +- .../drivers/haproxy/test_rest_api_driver.py | 109 +- .../amphorae/drivers/health/test_heartbeat_udp.py | 84 +- .../test_noop_amphoraloadbalancer_driver.py | 15 + .../unit/api/v2/types/test_health_monitors.py | 9 + .../unit/common/jinja/haproxy/test_jinja_cfg.py | 184 +++- .../unit/common/sample_configs/sample_certs.py | 1 + .../unit/common/sample_configs/sample_configs.py | 33 +- .../unit/common/tls_utils/test_cert_parser.py | 4 + .../healthmanager/health_drivers/__init__.py | 0 .../health_drivers/test_update_base.py | 38 + .../healthmanager/health_drivers/test_update_db.py | 1104 ++++++++++++++++++++ .../health_drivers/test_update_logging.py | 44 + .../controller/healthmanager/test_update_db.py | 1094 ------------------- .../controller/worker/flows/test_amphora_flows.py | 25 +- .../worker/tasks/test_amphora_driver_tasks.py | 65 +- .../controller/worker/tasks/test_compute_tasks.py | 6 +- .../worker/tasks/test_controller_tasks.py | 80 -- .../controller/worker/tasks/test_database_tasks.py | 53 + .../controller/worker/tasks/test_network_tasks.py | 64 ++ .../controller/worker/test_controller_worker.py | 118 ++- .../drivers/neutron/test_allowed_address_pairs.py | 95 +- .../unit/network/drivers/neutron/test_base.py | 11 + .../octavia-v1-dsvm-scenario-kvm-centos.7/run.yaml | 2 +- ...x-multi-amp-down-failover-952618fb8d3d8ae6.yaml | 5 + .../notes/fix-route-table-b2ec0aa7b92d2abc.yaml | 5 + ...nlimited-connection-limit-48079688de033c1a.yaml | 7 + .../notes/reserved-ips-7ef3a63ab0b6b28a.yaml | 6 + .../notes/statuses_alias-27559e3d74b9eaf0.yaml | 5 + setup.cfg | 6 + tools/create_flow_docs.py | 5 +- 117 files changed, 3849 insertions(+), 2080 deletions(-)

1 0

heat 10.0.2 (queens)
by no-reply＠openstack.org 04 Sep '18

04 Sep '18

We are tickled pink to announce the release of: heat 10.0.2: OpenStack Orchestration This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. 10.0.2 ^^^^^^ Bug Fixes * Previously, when deleting a convergence stack, the API call would return immediately, so that it was possible for a client immediately querying the status of the stack to see the state of the previous operation in progress or having failed, and confuse that with a current status. (This included Heat itself when acting as a client for a nested stack.) Convergence stacks are now guaranteed to have moved to the "DELETE_IN_PROGRESS" state before the delete API call returns, so any subsequent polling will reflect up-to-date information. * Previously, the suspend, resume, and check API calls for all stacks, and the update, restore, and delete API calls for non- convergence stacks, returned immediately after starting the stack operation. This meant that for a client reading the state immediately when performing the same operation twice in a row, it could have misinterpreted a previous state as the latest unless careful reference were made to the updated_at timestamp. Stacks are now guaranteed to have moved to the "IN_PROGRESS" state before any of these APIs return (except in the case of deleting a non- convergence stack where another operation was already in progress). Changes in heat 10.0.1..10.0.2 ------------------------------ 1f08105 Eliminate client races in legacy operations a13476e Eliminate client race condition in convergence delete 990acd8 Delete snapshots using contemporary resources 87a9f10 Ignore RESOLVE translation errors when translating before_props 36b0108 Ignore NotFound error in prepare_for_replace f46a439 Fix multi region issue for software deployment 6b7e258 Support region_name for software deployment 0572319 Ignore errors in purging events 63f2539 Replace deprecated nova calls for floatingip 034679d Don't allow nested or stacks in FAILED state to be migrated b723a12 Download octavia image in tests 442d74c Reset resource replaced_by field for rollback a06fb94 Delete internal ports for ERROR-ed nodes 55533a1 Fixing Senlin incompatibility with openstacksdk 0.11.x 108da6c Retry resource check if atomic key incremented b76d187 Fixing unicode issue when to_dict is called on py2.7 env e279311 Persist external resources on update Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + heat/cmd/manage.py | 6 +- heat/common/context.py | 4 +- heat/common/exception.py | 5 + heat/db/sqlalchemy/api.py | 60 ++--- heat/engine/check_resource.py | 39 ++- heat/engine/clients/client_exception.py | 4 + heat/engine/clients/os/nova.py | 54 +++- heat/engine/clients/os/openstacksdk.py | 6 +- heat/engine/clients/os/senlin.py | 5 + heat/engine/properties.py | 6 +- heat/engine/resource.py | 11 +- heat/engine/resources/aws/ec2/eip.py | 111 +++------ .../openstack/heat/software_deployment.py | 8 +- heat/engine/resources/openstack/neutron/port.py | 12 +- heat/engine/resources/openstack/nova/floatingip.py | 33 +-- .../openstack/nova/server_network_mixin.py | 18 +- heat/engine/resources/server_base.py | 8 +- heat/engine/resources/signal_responder.py | 4 +- heat/engine/service.py | 112 +++++++-- heat/engine/stack.py | 107 +++++--- heat/engine/translation.py | 34 ++- heat/engine/worker.py | 8 +- .../update_user_replace_rollback_update.py | 54 ++++ playbooks/devstack/functional/run.yaml | 3 + playbooks/get_amphora_tarball.yaml | 6 + .../convergence-delete-race-5b821bbd4c5ba5dc.yaml | 11 + .../legacy-client-races-ba7a60cef5ec1694.yaml | 12 + tox.ini | 2 +- 45 files changed, 1039 insertions(+), 451 deletions(-)

1 0

heat 9.0.5 (pike)
by no-reply＠openstack.org 04 Sep '18

04 Sep '18

We contentedly announce the release of: heat 9.0.5: OpenStack Orchestration This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. 9.0.5 ^^^^^ Security Issues * Passwords generated by the OS::Heat::RandomString resource may have had less entropy than expected, depending on what is specified in the "character_class" and "character_sequence" properties. This has been corrected so that each character present in any of the specified classes or sequences now has an equal probability of appearing at each point in the generated random string. Changes in heat 9.0.4..9.0.5 ---------------------------- 258d22c Reset resource replaced_by field for rollback 1239765 Ignore RESOLVE translation errors when translating before_props b92f421 Ignore NotFound error in prepare_for_replace 7daa3bd Ignore errors in purging events 6526311 Update test image c496882 Fixing unicode issue when to_dict is called on py2.7 env b84a741 Generate user passwords with special characters a08893d Fix entropy problems with OS::Random::String Diffstat (except docs and test files) ------------------------------------- heat/common/context.py | 4 +- heat/common/password_gen.py | 117 ++++++++++++++++++++ heat/db/sqlalchemy/api.py | 57 +++++----- .../clients/os/keystone/heat_keystoneclient.py | 5 +- heat/engine/properties.py | 6 +- heat/engine/resource.py | 9 +- .../resources/openstack/heat/random_string.py | 99 ++++------------- .../openstack/heat/wait_condition_handle.py | 5 +- heat/engine/resources/openstack/neutron/port.py | 12 +- heat/engine/resources/server_base.py | 3 +- heat/engine/resources/signal_responder.py | 7 +- heat/engine/translation.py | 34 ++++-- .../update_user_replace_rollback_update.py | 54 +++++++++ .../random-string-entropy-9b8e23874cd79b8f.yaml | 9 ++ 23 files changed, 513 insertions(+), 156 deletions(-)

1 0

sahara 8.0.2 (queens)
by no-reply＠openstack.org 04 Sep '18

04 Sep '18

We are amped to announce the release of: sahara 8.0.2: Sahara project This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/sahara Download the package from: https://tarballs.openstack.org/sahara/ For more details, please see below. 8.0.2 ^^^^^ Bug Fixes * Fixes story 2002551 in which CDH cluster creation was stuck when the image was generated using sahara-image-elements, and at the same time extjs 2.2 was not injected inside the images generated using sahara-image-pack. (https://storyboard.openstack.org/#!/story/2002551) * Hadoop is now better configured to use the proper Keystone domain for interaction with Swift; previously the 'default' domain may have been incorrectly used. Changes in sahara 8.0.1..8.0.2 ------------------------------ f8e7026 Correct Hbase ports in Ambari plugin bda0e09 Fixing anti-affinity for Sahara cb2abe3 import zuul job settings from project-config ed03a8d Sets correct permission for /etc/hosts da199be Update the command to change the hostname 5439834 Fixing extjs check on cdh and mapr 44ec64b Better default value for domain in swift config Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 18 +++++++++++++ .../notes/fix-cdh-extjs-f6d977bcb303e134.yaml | 9 +++++++ .../hadoop-swift-domain-fix-c1dfdf6c52b5aa25.yaml | 5 ++++ sahara/plugins/ambari/ha_helper.py | 2 +- sahara/plugins/ambari/plugin.py | 6 ++--- .../v5_11_0/resources/images/common/install_extjs | 30 ++++++++++++++-------- .../cdh/v5_11_0/resources/images/image.yaml | 2 +- .../v5_7_0/resources/images/common/install_extjs | 30 ++++++++++++++-------- .../plugins/cdh/v5_7_0/resources/images/image.yaml | 2 +- .../v5_9_0/resources/images/common/install_extjs | 30 ++++++++++++++-------- .../plugins/cdh/v5_9_0/resources/images/image.yaml | 2 +- .../mapr/resources/images/common/configure_extjs | 30 ++++++++++++++-------- sahara/service/engine.py | 9 ++++--- sahara/service/heat/templates.py | 11 +++++--- sahara/swift/swift_helper.py | 10 ++++++++ 16 files changed, 139 insertions(+), 59 deletions(-)

1 0

ovsdbapp 0.12.1 (rocky)
by no-reply＠openstack.org 04 Sep '18

04 Sep '18

We are delighted to announce the release of: ovsdbapp 0.12.1: A library for creating OVSDB applications This release is part of the rocky stable release series. The source is available from: http://git.openstack.org/cgit/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through launchpad: http://bugs.launchpad.net/ovsdbapp For more details, please see below. Changes in ovsdbapp 0.12.0..0.12.1 ---------------------------------- 6419a2e Check for oslo library usage 912a3a9 Remove the oslo-utils dependency d151372 Update UPPER_CONSTRAINTS_FILE for stable/rocky 7291671 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + HACKING.rst | 14 +++++++-- ovsdbapp/schema/ovn_northbound/commands.py | 3 +- .../schema/ovn_northbound/test_impl_idl.py | 5 ++-- ovsdbapp/utils.py | 34 ++++++++++++++++++++++ requirements.txt | 1 - tools/coding-checks.sh | 16 +++++++++- tox.ini | 6 ++-- 9 files changed, 86 insertions(+), 12 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index dd26a80..ff6ceb4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +6,0 @@ netaddr>=0.7.18 # BSD -oslo.utils>=3.33.0 # Apache-2.0

1 0

heat 8.0.7 (ocata)
by no-reply＠openstack.org 04 Sep '18

04 Sep '18

We enthusiastically announce the release of: heat 8.0.7: OpenStack Orchestration This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. 8.0.7 ^^^^^ Security Issues * Passwords generated by the OS::Heat::RandomString resource may have had less entropy than expected, depending on what is specified in the "character_class" and "character_sequence" properties. This has been corrected so that each character present in any of the specified classes or sequences now has an equal probability of appearing at each point in the generated random string. * Heat no longer uses standard Python RNG when generating values for OS::Heat::RandomString resource, and instead relies on system's RNG for that. Changes in heat 8.0.6..8.0.7 ---------------------------- 0187203 Ignore RESOLVE translation errors when translating before_props 41fd131 Ignore NotFound error in prepare_for_replace 472c710 Update test image 73361b4 Generate user passwords with special characters 8ce005c Fix entropy problems with OS::Random::String de568e0 Replace random with SystemRandom for RandomString b9a2f48 Add .testr.conf to work with latest Tempest 2bf19f5 Zuul: Remove project name 9ef06cc Fix non-destructive upgrade for deprecated res types in convergence fe3bffa Migrate functional jobs to Zuul v3 475051b Install guide bug fix: incorrect auth_uri for ec2authtoken Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 92 ++++++++++++++++ heat/common/password_gen.py | 117 ++++++++++++++++++++ .../clients/os/keystone/heat_keystoneclient.py | 5 +- heat/engine/resource.py | 45 +++++--- .../resources/openstack/heat/random_string.py | 95 ++++------------ .../openstack/heat/wait_condition_handle.py | 5 +- heat/engine/resources/openstack/neutron/port.py | 12 +- heat/engine/resources/server_base.py | 3 +- heat/engine/resources/signal_responder.py | 7 +- heat/engine/translation.py | 74 ++++++++----- .../functional/test_replace_deprecated.py | 12 +- install-guide/source/install-obs.rst | 2 +- install-guide/source/install-rdo.rst | 2 +- install-guide/source/install-ubuntu.rst | 2 +- playbooks/devstack/functional/post.yaml | 15 +++ playbooks/devstack/functional/run.yaml | 120 ++++++++++++++++++++ .../random-string-entropy-9b8e23874cd79b8f.yaml | 9 ++ .../system-random-string-38a14ae2cb6f4a24.yaml | 6 + 27 files changed, 669 insertions(+), 160 deletions(-)

1 0

python-blazarclient 2.0.1 (rocky)
by no-reply＠openstack.org 04 Sep '18

04 Sep '18

We are pleased to announce the release of: python-blazarclient 2.0.1: Client for OpenStack Reservation Service This release is part of the rocky stable release series. Download the package from: https://pypi.org/project/python-blazarclient Please report issues through launchpad: https://launchpad.net/blazar For more details, please see below. 2.0.1 ^^^^^ Bug Fixes * Creating leases using version 2.0.0 of the CLI client without specifying a start date was failing with the error "The lease parameters are incorrect", following changes related to bug 1783296 (https://launchpad.net/bugs/1783296) For more details, see bug 1784038 (https://launchpad.net/bugs/1784038) * When there are multiple leases with the same name, lease actions identifying the lease by name would display an error message including a dictionary of lease values, instead of "type 'lease'". For more details, see bug 1786030 (https://launchpad.net/bugs/1786030) Changes in python-blazarclient 2.0.0..2.0.1 ------------------------------------------- ef481e8 Add release notes for bugs 1784038 and 1786030 ef40eea Fix exception message when there are leases with the same name 065d0c5 Fix lease creation when start date is not provided 2b78f5c Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + blazarclient/utils.py | 13 +++---- blazarclient/v1/shell_commands/leases.py | 28 ++++++++++----- ...create-without-start-date-73ce2bb28bc883f7.yaml | 8 +++++ ...age-with-same-name-leases-561ece8e602b4c68.yaml | 7 ++++ 6 files changed, 83 insertions(+), 15 deletions(-)

1 0

kuryr-kubernetes 0.4.4 (queens)
by no-reply＠openstack.org 04 Sep '18

04 Sep '18

We are amped to announce the release of: kuryr-kubernetes 0.4.4: Kubernetes integration with OpenStack networking This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/kuryr-kubernetes Download the package from: https://tarballs.openstack.org/kuryr-kubernetes/ Please report issues through launchpad: https://bugs.launchpad.net/kuryr-kubernetes For more details, please see below. Changes in kuryr-kubernetes 0.4.3..0.4.4 ---------------------------------------- 531ed16 Verify keystone connection using token 8fdb5b4 import zuul job settings from project-config 4f5f00c devstack: Fix load balancing project membership 495b788 Services: Fix service connectivity after service port edit procedure f4769c3 process to gracefully exit when last watcher exits 8c3ce7c Fetch CONTAINERID from Docker API in kuryr-cni 7aaef63 Really use the test handler ec286c6 Devstack deployment - handle LoadBalancer creation failure 99b65e6 Add timeout to the wait_for method in plugin.sh 24cb1c5 Really ignore unsupported service types 061a875 Ensure endpoint has pods before add/remove members 19d63cc Remove admin rights need from verify_keystone_connection Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 12 +++- cni_ds_init | 42 +++++++------- devstack/lib/kuryr_kubernetes | 65 ++++++++++++++++++---- devstack/plugin.sh | 16 ++++-- devstack/settings | 1 + kuryr_kubernetes/cni/daemon/service.py | 2 +- kuryr_kubernetes/controller/handlers/lbaas.py | 17 ++++-- kuryr_kubernetes/controller/managers/health.py | 15 ++--- kuryr_kubernetes/controller/service.py | 2 +- kuryr_kubernetes/watcher.py | 15 ++++- 12 files changed, 154 insertions(+), 80 deletions(-)

1 0