December 2019 - Release-announce - lists.openstack.org

puppet-openstacklib 16.0.0 (ussuri)
by no-reply＠openstack.org 12 Dec '19

12 Dec '19

We jubilantly announce the release of: puppet-openstacklib 16.0.0: Puppet module for OpenStack Openstacklib This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/puppet-openstacklib Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/puppet-openstacklib/+bugs For more details, please see below. 16.0.0 ^^^^^^ Prelude ******* Puppet OpenStack has in this release deprecated Puppet 5 support. This version of Puppet will be EOL as of May 2020 which means that you can still use it during this release but in the V release using Puppet 6 will be a requirement. New Features ************ * Add new WSGI related options that should allow faster application startup and loading. Security Issues *************** * Do not authorize directory listing Bug Fixes ********* * rhbz#1778052 * LP#1854442 Changes in puppet-openstacklib 15.4.0..16.0.0 --------------------------------------------- c0c0412 Prepare Ussuri M1 0b5a01d Convert all class usage to relative names ad48860 Ensure no directory listing is active 9606137 Update the constraints url 20af7d8 Fix rabbitmq dependency 0bad3b1 Deprecate Puppet 5 support 55668d9 Allow to activate WSGIImportScript option f2689ec Update master for stable/train Diffstat (except docs and test files) ------------------------------------- examples/virtual_packages.pp | 2 +- manifests/db/mysql.pp | 4 +- manifests/defaults.pp | 7 +++ manifests/params.pp | 2 +- manifests/wsgi/apache.pp | 52 ++++++++++++++++++++-- metadata.json | 4 +- ...eprecate-puppet-5-support-1864c361a7a9d402.yaml | 6 +++ .../no-directory-listing-8e6270ed0e1eb1d0.yaml | 6 +++ .../notes/wsgi-import-script-64665fae9dccf797.yaml | 5 +++ releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 +++ spec/acceptance/mysql_spec.rb | 2 +- spec/acceptance/rabbitmq_spec.rb | 8 ++-- spec/defines/openstacklib_db_postgresql_spec.rb | 6 +-- spec/defines/openstacklib_wsgi_apache_spec.rb | 50 ++++++++++++++++++++- tox.ini | 2 +- 16 files changed, 144 insertions(+), 19 deletions(-)

1 0

puppet-designate 16.0.0 (ussuri)
by no-reply＠openstack.org 12 Dec '19

12 Dec '19

We are glad to announce the release of: puppet-designate 16.0.0: Puppet module for OpenStack Designate This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/puppet-designate Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/puppet-designate/+bugs For more details, please see below. 16.0.0 ^^^^^^ Upgrade Notes * The designate::pool_manager, designate::pool_manager_cache::memcache and designate::pool_manager_cache::sqlalchemy class is now removed. Changes in puppet-designate 15.4.0..16.0.0 ------------------------------------------ 5e26655 Prepare Ussuri M1 b7f73b3 Convert all class usage to relative names 2d4ad36 Fix rabbitmq dependency 91c6345 Remove designate::pool_manager eee85a4 Update master for stable/train Diffstat (except docs and test files) ------------------------------------- example/all-in-one-keystone.pp | 8 +- manifests/agent.pp | 2 +- manifests/api.pp | 4 +- manifests/backend/bind9.pp | 8 +- manifests/backend/powerdns.pp | 10 +- manifests/central.pp | 4 +- manifests/client.pp | 2 +- manifests/config.pp | 2 +- manifests/db.pp | 6 +- manifests/db/mysql.pp | 2 +- manifests/db/powerdns/mysql.pp | 2 +- manifests/db/powerdns/sync.pp | 4 +- manifests/db/sync.pp | 2 +- manifests/generic_service.pp | 4 +- manifests/init.pp | 2 +- manifests/keystone/auth.pp | 2 +- manifests/keystone/authtoken.pp | 2 +- manifests/logging.pp | 2 +- manifests/mdns.pp | 4 +- manifests/params.pp | 2 +- manifests/policy.pp | 4 +- manifests/pool.pp | 2 +- manifests/pool_manager.pp | 151 --------------------- manifests/pool_manager_cache/memcache.pp | 29 ---- manifests/pool_manager_cache/sqlalchemy.pp | 56 -------- manifests/pool_nameserver.pp | 2 +- manifests/pool_target.pp | 6 +- manifests/quota.pp | 2 +- manifests/sink.pp | 2 +- manifests/worker.pp | 4 +- metadata.json | 10 +- .../remove-pool-manager-54118560ff0770d3.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 + spec/acceptance/basic_designate_spec.rb | 12 +- spec/classes/designate_api_spec.rb | 2 +- .../designate_pool_manager_cache_memcache_spec.rb | 61 --------- ...designate_pool_manager_cache_sqlalchemy_spec.rb | 68 ---------- spec/classes/designate_pool_manager_spec.rb | 139 ------------------- 39 files changed, 72 insertions(+), 564 deletions(-)

1 0

puppet-freezer 5.0.0 (ussuri)
by no-reply＠openstack.org 12 Dec '19

12 Dec '19

We are chuffed to announce the release of: puppet-freezer 5.0.0: Puppet module for OpenStack freezer This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/puppet-freezer Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/puppet-freezer/+bugs For more details, please see below. Changes in puppet-freezer 4.4.0..5.0.0 -------------------------------------- 27c480b Prepare Ussuri M1 5dc3b7d Convert all class usage to relative names 4e2ad29 Update master for stable/train Diffstat (except docs and test files) ------------------------------------- examples/init.pp | 2 +- manifests/client.pp | 4 ++-- manifests/config.pp | 2 +- manifests/db.pp | 2 +- manifests/db/mysql.pp | 2 +- manifests/db/postgresql.pp | 2 +- manifests/db/sync.pp | 2 +- manifests/init.pp | 2 +- manifests/keystone/auth.pp | 2 +- manifests/keystone/authtoken.pp | 2 +- manifests/logging.pp | 2 +- manifests/params.pp | 2 +- manifests/policy.pp | 4 ++-- metadata.json | 8 ++++---- releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 ++++++ 16 files changed, 26 insertions(+), 19 deletions(-)

1 0

puppet-horizon 16.0.0 (ussuri)
by no-reply＠openstack.org 12 Dec '19

12 Dec '19

We exuberantly announce the release of: puppet-horizon 16.0.0: Puppet module for OpenStack Horizon This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/puppet-horizon Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/puppet-horizon/+bugs For more details, please see below. Changes in puppet-horizon 15.4.0..16.0.0 ---------------------------------------- 875bd75 Prepare Ussuri M1 0f638cb Convert all class usage to relative names abefb0d Update master for stable/train Diffstat (except docs and test files) ------------------------------------- README.md | 2 +- manifests/init.pp | 4 ++-- manifests/params.pp | 2 +- manifests/wsgi/apache.pp | 8 ++++---- metadata.json | 4 ++-- releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 ++++++ spec/acceptance/horizon_with_apache_spec.rb | 12 ++++++------ 8 files changed, 23 insertions(+), 16 deletions(-)

1 0

oslo.rootwrap 5.17.0 (ussuri)
by no-reply＠openstack.org 12 Dec '19

12 Dec '19

We are happy to announce the release of: oslo.rootwrap 5.17.0: Oslo Rootwrap This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/oslo.rootwrap Download the package from: https://pypi.org/project/oslo.rootwrap Please report issues through: https://bugs.launchpad.net/oslo.rootwrap/+bugs For more details, please see below. Changes in oslo.rootwrap 5.16.1..5.17.0 --------------------------------------- eea57ab Update master for stable/train Diffstat (except docs and test files) ------------------------------------- releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 ++++++ 2 files changed, 7 insertions(+)

1 0

neutron-lib 1.30.0 (ussuri)
by no-reply＠openstack.org 10 Dec '19

10 Dec '19

We joyfully announce the release of: neutron-lib 1.30.0: Neutron shared routines and utilities This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 1.30.0 ^^^^^^ New Features ************ * Add a new field "description" in floating ip portforwardings that can be used to help users to manage/find easily theirs rules. * The API defintion for the "stateful-security-group" extension is now available in "neutron_lib.api.definitions.stateful_security_group". Other Notes *********** * Removes the definition of "interconnection" API extension for neutron-interconnection project. Neutron-interconnection project was removed from Neutron stadium due to lack of activity for long time so there is no need to keep the API definition in the official Neutron's API definitions. Changes in neutron-lib 1.29.1..1.30.0 ------------------------------------- f470973 add "stateful-security-group" api extension 7c352a6 Change the requirements for the subnet_dns_publish_fixed_ip extension a37378e Add description field in port forwarding API 1fc1f0e Remove 'interconnection' API extension definition (neutron-interconnection) 43f6759 Stop configuring install_command in tox. 9f56e98 Remove fwaas_v1 exceptions and definitions b27c012 Allow <project_id>, <project_name>, <user_id> and <user_name> as DNS label af5e2aa Fix rendering of api-ref main page 66cbfc8 install neutron_lib international messages d07cb36 Add retry and debug logs to NoAuthClient of placement client 53f1847 Add missing DHCP port numbers b71db3f Update master for stable/train 06ae464 Remove Neutron LBaaS 2f08f12 PDF documentation build Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/fip-port-forwarding.inc | 13 + api-ref/source/v2/flavors.inc | 4 +- api-ref/source/v2/fwaas.inc | 817 ---------- api-ref/source/v2/index.rst | 16 +- api-ref/source/v2/interconnection.inc | 237 --- api-ref/source/v2/lbaas-v2.inc | 1683 -------------------- api-ref/source/v2/parameters.yaml | 538 +------ .../extensions/extensions-list-response.json | 14 - .../v2/samples/flavors/flavor-create-request.json | 2 +- .../v2/samples/flavors/flavor-create-response.json | 2 +- .../v2/samples/flavors/flavor-show-response.json | 2 +- .../v2/samples/flavors/flavor-update-response.json | 2 +- .../v2/samples/flavors/flavors-list-response.json | 2 +- .../flavors/service-profile-create-request.json | 2 +- .../flavors/service-profile-create-response.json | 2 +- .../flavors/service-profile-show-response.json | 2 +- .../flavors/service-profile-update-request.json | 2 +- .../flavors/service-profile-update-response.json | 2 +- .../flavors/service-profiles-list-response.json | 4 +- .../interconnection-create-request.json | 11 - .../interconnection-create-response.json | 14 - .../interconnection-show-response.json | 16 - .../interconnection-update-request.json | 5 - .../interconnection-update-response.json | 16 - .../interconnections-list-response.json | 18 - .../lbaas/healthmonitor-associate-request.json | 5 - .../lbaas/healthmonitor-associate-response.json | 3 - .../lbaas/healthmonitor-create-request.json | 13 - .../lbaas/healthmonitor-create-response.json | 17 - .../samples/lbaas/healthmonitor-show-response.json | 21 - .../lbaas/healthmonitor-update-request.json | 12 - .../lbaas/healthmonitor-update-response.json | 21 - .../lbaas/healthmonitors-list-response.json | 23 - .../v2/samples/lbaas/listener-create-request.json | 16 - .../v2/samples/lbaas/listener-create-response.json | 24 - .../v2/samples/lbaas/listener-show-response.json | 24 - .../v2/samples/lbaas/listener-update-request.json | 13 - .../v2/samples/lbaas/listener-update-response.json | 24 - .../v2/samples/lbaas/listeners-list-response.json | 26 - .../samples/lbaas/loadbalancer-create-request.json | 12 - .../lbaas/loadbalancer-create-response.json | 18 - .../samples/lbaas/loadbalancer-show-response.json | 16 - .../v2/samples/lbaas/loadbalancer-status-tree.json | 47 - .../samples/lbaas/loadbalancer-update-request.json | 7 - .../lbaas/loadbalancer-update-response.json | 18 - .../samples/lbaas/loadbalancer-update-response.txt | 4 - .../samples/lbaas/loadbalancers-list-response.json | 20 - .../v2/samples/lbaas/member-create-request.json | 9 - .../v2/samples/lbaas/member-create-response.json | 12 - .../v2/samples/lbaas/member-show-response.json | 12 - .../v2/samples/lbaas/member-update-request.json | 5 - .../v2/samples/lbaas/member-update-response.json | 12 - .../v2/samples/lbaas/members-list-response.json | 16 - .../v2/samples/lbaas/pool-create-request.json | 14 - .../v2/samples/lbaas/pool-create-response.json | 23 - .../samples/lbaas/pool-members-list-response.json | 14 - .../v2/samples/lbaas/pool-show-response.json | 25 - .../v2/samples/lbaas/pool-update-request.json | 5 - .../v2/samples/lbaas/pool-update-response.json | 25 - .../v2/samples/lbaas/pools-list-response.json | 27 - .../v2/samples/lbaas/pools-list-response2.json | 25 - .../v2/samples/lbaas/vip-create-request.json | 10 - .../v2/samples/lbaas/vip-create-response.json | 20 - .../source/v2/samples/lbaas/vip-show-response.json | 20 - .../v2/samples/lbaas/vip-update-request.json | 5 - .../v2/samples/lbaas/vip-update-response.json | 20 - .../v2/samples/lbaas/vips-list-response.json | 22 - .../port-fowarding-create-request.json | 3 +- .../port-fowarding-create-response.json | 1 + .../port-fowarding-list-response.json | 2 + .../port-fowarding-show-response.json | 1 + .../port-fowarding-update-request.json | 3 +- .../port-fowarding-update-response.json | 1 + .../security-group-create-request.json | 3 +- .../security-group-create-response.json | 3 +- .../security-group-show-response.json | 3 +- .../security-group-update-request.json | 3 +- .../security-group-update-response.json | 3 +- .../security-groups-list-response.json | 3 +- .../source/v2/samples/service-type-response.json | 2 +- api-ref/source/v2/security-groups.inc | 13 + neutron_lib/__init__.py | 11 + neutron_lib/api/definitions/__init__.py | 10 +- neutron_lib/api/definitions/base.py | 7 +- neutron_lib/api/definitions/fip_pf_description.py | 41 + neutron_lib/api/definitions/firewall.py | 187 --- .../api/definitions/firewallrouterinsertion.py | 74 - neutron_lib/api/definitions/interconnection.py | 125 -- neutron_lib/api/definitions/logging_resource.py | 4 +- .../api/definitions/stateful_security_group.py | 61 + .../api/definitions/subnet_dns_publish_fixed_ip.py | 4 +- neutron_lib/constants.py | 11 +- neutron_lib/exceptions/firewall_v1.py | 140 -- neutron_lib/placement/client.py | 34 +- neutron_lib/plugins/constants.py | 7 +- ... test_floating_ip_port_forwarding_extension.py} | 15 +- ...nsertion.py => test_stateful_security_group.py} | 13 +- ...-field-in-port-forwarding-9da781b1e38ca858.yaml | 5 + ...connection-api-definition-4ff88c583f2fe47b.yaml | 8 + .../stateful-security-group-a1ece5472f029dc1.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 + tox.ini | 11 +- 107 files changed, 317 insertions(+), 4693 deletions(-)

1 0

openstacksdk 0.39.0 (ussuri)
by no-reply＠openstack.org 09 Dec '19

09 Dec '19

We are amped to announce the release of: openstacksdk 0.39.0: An SDK for building applications to work with OpenStack This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 0.39.0 ^^^^^^ New Features * The "openstack.baremetal.v1.Node" resource now has an "owner" property which was added in the baremetal API microversion 1.50. (https://docs.openstack.org/ironic/latest/contributor/webapi- version-history.html#id7) Changes in openstacksdk 0.38.0..0.39.0 -------------------------------------- 5cac3f72 update OVH vendor entry eafa75bd Fix reno index list indent c585ed19 Expose baremetal Node.owner 800cbf7c Update deps for tox venv target 97375f21 Fix .. note:: rendering in doc 84137a1a tox: Keeping going with docs Diffstat (except docs and test files) ------------------------------------- openstack/baremetal/v1/node.py | 3 +++ openstack/config/vendors/ovh.json | 14 +++++++++++++- releasenotes/notes/node-owner-7f4b083ff9da8cce.yaml | 7 +++++++ releasenotes/source/index.rst | 18 +++++++++--------- tox.ini | 12 +++++++++--- 9 files changed, 47 insertions(+), 17 deletions(-)

1 0

magnum 7.2.0 (rocky)
by no-reply＠openstack.org 06 Dec '19

06 Dec '19

We contentedly announce the release of: magnum 7.2.0: Container Management project for OpenStack This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. 7.2.0 ^^^^^ New Features ************ * To get a better cluster template versioning and relieve the pain of maintaining public cluster template, now the name of cluster template can be changed. * Add heat_container_agent_tag label to allow users select the heat- agent tag. Rocky default: rocky-stable * Now cloud-provider-openstack of Kubernetes has a webhook to support Keystone authorization and authentication. With this feature, user can use a new label 'keystone-auth-enabled' to enable the keystone authN and authZ. * Add a new option 'octavia' for the label 'ingress_controller' and a new label 'octavia_ingress_controller_tag' to enable the deployment of octavia-ingress-controller (https://github.com/kubernetes/cloud- provider- openstack/blob/master/docs/using-octavia-ingress- controller.md) in the kubernetes cluster. The 'ingress_controller_role' label is not used for this option. * k8s_fedora_atomic_v1 Add PodSecurityPolicy for privileged pods. Use privileged PSP for calico and node-problem-detector. Add PSP for flannel from upstream. Bug Fixes ********* * Fixes the problem with Mesos cluster creation where the nodes_affinity_policy was not properly conveyed as it is required in order to create the corresponding server group in Nova. https://storyboard.openstack.org/#!/story/2005116 * Add iptables -P FORWARD ACCEPT unit. On node reboot, kubelet and kube-proxy set iptables -P FORWARD DROP which doesn't work with flannel in the way we use it. Add a systemd unit to set the rule to ACCEPT after flannel, docker, kubelet, kube-proxy. * In kubernetes cluster, a floating IP is created and associated with the vip of a load balancer which is created corresponding to the service of LoadBalancer type inside kubernetes, it should be deleted when the cluster is deleted. Changes in magnum 7.1.0..7.2.0 ------------------------------ 1df886df k8s_fedora: Move rp_filter=1 for calico up 925628b6 k8s_fedora_atomic: Add PodSecurityPolicy dbe2abd2 k8s: Clear cni configuration 174fc15a fix: Deploy enable_service last (rocky only) 7aa12a55 k8s_fedora: Label master nodes with kubectl ca7eed7a k8s: stop introspecting instance name e430da9b Fix proportional autoscaler image 9c79084a Using Fedora Atomic 29 as default image 660e62b0 Revert "support http/https proxy for discovery url" acb30af7 Fix registry on k8s_fedora_atomic 98847b8c Blacklist bandit 1.6.0 and cap Sphinx on Python2 f12a91ca Partial backport: Disable broken image building 62ab17f6 Use rocky heat-container-agent for stable/rocky da3c37c3 OpenDev Migration Patch 29324920 Replace openstack.org git:// URLs with https:// dfa0d515 k8s_fedora: Add ca_key before all deployments 5d3e0eac Ensure http proxy environment is available during 'atomic install' for k8s fb47454f make sure to set node_affinity_policy for Mesos template definition 263d0788 Add iptables -P FORWARD ACCEPT unit c056ac4c Delete loadbalancers and floatingips for service and ingress 4d814229 Allow cluster template being renamed b153fb5e Support octavia-ingress-controller 50bddcb1 [k8s_fedora_atomic] Delete floating ip for load balancer a7dc26a2 Support Keystone AuthN and AuthZ for k8s 21720308 Add heat_container_agent_tag label a2097745 Fix prometheus monitoring e8d0ee1b support http/https proxy for discovery url baf46f03 Bump k8s version up to v1.11.5 Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 20 +- devstack/lib/magnum | 13 +- devstack/plugin.sh | 3 +- magnum/common/neutron.py | 76 +++++++ magnum/common/octavia.py | 13 +- magnum/db/sqlalchemy/api.py | 7 +- .../kubernetes/fragments/configure-etcd.sh | 12 ++ .../fragments/configure-kubernetes-master.sh | 76 ++++++- .../fragments/configure-kubernetes-minion.sh | 39 +++- .../kubernetes/fragments/core-dns-service.sh | 2 +- .../fragments/enable-ingress-controller.sh | 19 +- .../kubernetes/fragments/enable-ingress-octavia.sh | 122 ++++++++++++ .../kubernetes/fragments/enable-keystone-auth.sh | 185 +++++++++++++++++ .../kubernetes/fragments/enable-node-exporter.sh | 32 --- .../fragments/enable-prometheus-monitoring.sh | 89 ++++++++- .../kubernetes/fragments/enable-services-master.sh | 10 +- .../kubernetes/fragments/flannel-service.sh | 23 +++ .../fragments/kube-apiserver-to-kubelet-role.sh | 72 ++++++- .../kubernetes/fragments/make-cert-client.sh | 3 +- .../templates/kubernetes/fragments/make-cert.sh | 1 - .../kubernetes/fragments/start-container-agent.sh | 14 +- .../fragments/write-heat-params-master.yaml | 7 + .../kubernetes/fragments/write-heat-params.yaml | 4 + .../kubernetes/fragments/write-kube-os-config.sh | 1 + .../templates/swarm/fragments/network-service.sh | 23 +++ magnum/drivers/heat/k8s_fedora_template_def.py | 6 +- magnum/drivers/heat/k8s_template_def.py | 25 ++- .../templates/fragments/enable-kubelet-master.yaml | 4 +- .../templates/fragments/enable-kubelet-minion.yaml | 4 +- .../templates/kubecluster.yaml | 47 ++++- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 35 +++- .../k8s_fedora_atomic_v1/templates/kubeminion.yaml | 15 +- .../templates/kubecluster.yaml | 3 + .../templates/kubeminion_software_configs.yaml | 7 - magnum/drivers/mesos_ubuntu_v1/template_def.py | 5 + .../api/controllers/v1/test_cluster_template.py | 21 +- .../handlers/test_k8s_cluster_conductor.py | 25 ++- .../handlers/test_mesos_cluster_conductor.py | 5 + playbooks/magnum-buildimages-base.yaml | 2 +- playbooks/magnum-functional-base.yaml | 2 +- playbooks/pre/prepare-workspace.yaml | 6 +- ...cy-for-mesos-template-def-82627eb231aa4d28.yaml | 7 + ...er-template-being-renamed-82f7d5d1f33a7957.yaml | 7 + .../notes/flannel-reboot-fix-f1382818daed4fa8.yaml | 7 + .../heat-container-agent-tag-92848c1062c16c76.yaml | 5 + .../notes/k8s-delete-vip-fip-b2ddf61ddbc080bc.yaml | 6 + .../notes/k8s-keystone-auth-6c88c1a2d406fb61.yaml | 7 + ...ctavia-ingress-controller-32c0b97031fd0dd4.yaml | 8 + .../notes/podsecuritypolicy-2400063d73524e06.yaml | 6 + test-requirements.txt | 5 +- 59 files changed, 1562 insertions(+), 155 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 209b0c4b..ff04da12 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ -bandit>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0 # Apache-2.0 @@ -20 +20,2 @@ pytz>=2013.6 # MIT -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD

1 0

magnum 8.2.0 (stein)
by no-reply＠openstack.org 06 Dec '19

06 Dec '19

We enthusiastically announce the release of: magnum 8.2.0: Container Management project for OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. 8.2.0 ^^^^^ New Features ************ * k8s_fedora_atomic_v1 Add PodSecurityPolicy for privileged pods. Use privileged PSP for calico and node-problem-detector. Add PSP for flannel from upstream. Other Notes *********** * The default value of flannel_backend will be replaced with *vxlan* which was *udp* based on the recommendation at https://github.com/c oreos/flannel/blob/master/Documentation/backends.md Changes in magnum 8.1.0..8.2.0 ------------------------------ 4807e647 k8s_fedora: Move rp_filter=1 for calico up c3323938 Set a fixed cipher suite set for Traefik 261b0eea Using vxlan as default value for flannel_backend d13c2b7c k8s: stop introspecting instance name 6762a974 k8s_fedora_atomic: Add PodSecurityPolicy 49791feb k8s_fedora: Label master nodes with kubectl 0f5f950c Fix proportional autoscaler image 7d71a148 Using Fedora Atomic 29 as default image Diffstat (except docs and test files) ------------------------------------- devstack/lib/magnum | 13 ++- devstack/plugin.sh | 3 +- .../kubernetes/fragments/calico-service.sh | 116 ++++++++++++++++++++- .../fragments/configure-kubernetes-master.sh | 14 ++- .../fragments/configure-kubernetes-minion.sh | 13 +-- .../kubernetes/fragments/core-dns-service.sh | 2 +- .../kubernetes/fragments/enable-auto-healing.sh | 17 +++ .../kubernetes/fragments/enable-ingress-traefik.sh | 39 +++++++ .../kubernetes/fragments/enable-services-master.sh | 11 +- .../kubernetes/fragments/flannel-service.sh | 82 ++++++++++++--- .../fragments/kube-apiserver-to-kubelet-role.sh | 63 ++++++++++- .../kubernetes/fragments/make-cert-client.sh | 3 +- .../templates/kubernetes/fragments/make-cert.sh | 1 - .../fragments/write-heat-params-master.yaml | 1 + .../kubernetes/fragments/write-heat-params.yaml | 1 + .../templates/fragments/enable-kubelet-master.yaml | 4 +- .../templates/fragments/enable-kubelet-minion.yaml | 4 +- .../templates/kubecluster.yaml | 6 +- .../k8s_fedora_atomic_v1/templates/kubemaster.yaml | 1 + .../k8s_fedora_atomic_v1/templates/kubeminion.yaml | 1 + .../notes/podsecuritypolicy-2400063d73524e06.yaml | 6 ++ ...vxlan-for-flannel-backend-8d82a290ca97d6e2.yaml | 6 ++ 23 files changed, 360 insertions(+), 51 deletions(-)

1 0

sushy-tools 0.8.0
by no-reply＠openstack.org 05 Dec '19

05 Dec '19

We are ecstatic to announce the release of: sushy-tools 0.8.0: A set of tools to support the development and test of the Sushy library (https://docs.openstack.org/sushy/) The source is available from: https://opendev.org/openstack/sushy-tools Download the package from: https://tarballs.openstack.org/null/ For more details, please see below. 0.8.0 ^^^^^ Upgrade Notes ************* * Python 2.7 support has been dropped. Last release of sushy-tools to support Python 2.7 is OpenStack Train. The minimum version of Python now supported by sushy-tools is Python 3.6. Bug Fixes ********* * Fixes one of the allowed values for "BootSourceOverrideMode" element - Redfish specification requires UEFI boot mode to be indicated as "UEFI", not "Uefi" as the dynamic Redfish emulator erroneously adopted. * Fixes occasional failure when setting boot image to libvirt domain in response to virtual media "Insert" operation. * Fixes potential failure on reading/setting boot device of libvirt domain. Prior to this fix, boot device has only been respected in the boot loader part of libvirt domain XML. However per-device boot configuration can also be used. If the latter way is in place in a libvirt domain, reading boot device would yield nothing, while setting it in the boot loader would fail. This fix respects both ways of configuring libvirt boot device preferring the per-device configuration when setting new boot device. * Brings libvirt domain down prior to any change. When Redfish emulator is running against libvirt virtualization backend, any changes being done to domain are not applied for as long as the domain is up. This leads to two nuisances: * REST API is not really REST-ful meaning that successfully applied change is not reflected in the document tree * Multiple changes done to live domain XML tree may override one another because N-1 change done to a domain is not visible to N's change The fix is to bring running domain down briefly while the change is applied. * Fixes situation when changing boot image could invalidate current boot device selection. The fix is to note current libvirt boot device and restore it if the image being changed resides on the active boot device. * Fixes defaults to storage and drive resources. Prior to this fix, if storage and/or drive resource emulation is not set up via sushy emulator configuration, the clients trying to read either of these resources would hit hard HTTP 500 response. Changes in sushy-tools 0.7.0..0.8.0 ----------------------------------- 907c3ad Retain boot device selection upon boot image change 564ae30 Bring libvirt domain down prior to any change 723ffd2 Fix libvirt CD image insertion 4279ee0 Fix `BootSourceOverrideMode` enumeration eb2943d Fix emulator socket binding options 9d87099 Fix defaults to storage and drive resources 538d98d Fix incorrect parameter description in docstrings c772be0 Fix reading/setting libvirt domain boot device 3034226 Drop python 2.7 support and testing 87b7e00 Correct doc link to point to sushy-tools docs ab8cfdd Switch to Ussuri job dbc20db Fix libvirt set-boot-image implementation Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- .../notes/drop-python2-48e8388f96998244.yaml | 6 + .../fix-boot-mode-constant-71e6a7ec6b010273.yaml | 7 + .../fix-libvirt-boot-image-965d94fd30bca7b0.yaml | 5 + .../fix-libvirt-boot-mode-3ec2ccf49f96aec8.yaml | 10 + .../fix-libvirt-statefulness-0a2a7812d79fdd25.yaml | 16 ++ .../fix-retain-boot-device-5ae02731d2a000d3.yaml | 6 + ...ix-storage-drive-defaults-3a925a0063738b77.yaml | 7 + setup.cfg | 2 - sushy_tools/emulator/main.py | 53 ++-- .../emulator/resources/drives/staticdriver.py | 4 +- .../emulator/resources/storage/staticdriver.py | 4 +- sushy_tools/emulator/resources/systems/base.py | 11 +- .../emulator/resources/systems/libvirtdriver.py | 271 +++++++++++++++++---- .../emulator/resources/systems/novadriver.py | 21 +- .../emulator/resources/systems/test_libvirt.py | 227 +++++++++++++++-- test-requirements.txt | 1 - tox.ini | 11 +- zuul.d/project.yaml | 3 +- 23 files changed, 581 insertions(+), 135 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 89cb481..3b861cd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +10,0 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD

1 0