July 2019 - Release-announce - lists.openstack.org

nova 17.0.11 (queens)
by no-reply＠openstack.org 11 Jul '19

11 Jul '19

We are ecstatic to announce the release of: nova 17.0.11: Cloud computing fabric controller This release is part of the queens stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 17.0.11 ^^^^^^^ Upgrade Notes ************* * Live migration of instances with NUMA topologies is now disabled by default when using the libvirt driver. This includes live migration of instances with CPU pinning or hugepages. CPU pinning and huge page information for such instances is not currently re- calculated, as noted in bug #1289064. This means that if instances were already present on the destination host, the migrated instance could be placed on the same dedicated cores as these instances or use hugepages allocated for another instance. Alternately, if the host platforms were not homogeneous, the instance could be assigned to non-existent cores or be inadvertently split across host NUMA nodes. The long term solution to these issues is to recalculate the XML on the destination node. When this work is completed, the restriction on live migration with NUMA topologies will be lifted. For operators that are aware of the issues and are able to manually work around them, the "[workarounds] enable_numa_live_migration" option can be used to allow the broken behavior. For more information, refer to bug #1289064. (https://bugs.launchpad.net/nova/+bug/1289064) (https://blueprints.launchpad.net/nova/+spec/numa-aware-live- migration) Bug Fixes ********* * The os-volume_attachments update API, commonly referred to as the swap volume API will now return a "400" (BadRequest) error when attempting to swap from a multi attached volume with more than one active read/write attachment resolving bug #1775418. (https://developer.openstack.org/api-ref/compute/?expanded=update-a -volume-attachment-detail) (https://launchpad.net/bugs/1775418) Changes in nova 17.0.10..17.0.11 -------------------------------- 9cbd2aedde fix up numa-topology live migration hypervisor check 9999bce00f Fail to live migration if instance has a NUMA topology ab445a027a Allow driver to properly unplug VIFs on destination on confirm resize 8519b1ce6d Move get_pci_mapping_for_migration to MigrationContext d3bdeb2615 libvirt: Do not reraise DiskNotFound exceptions during resize 2009859b52 Include all network devices in nova diagnostics 20b90f2e26 Workaround missing RequestSpec.instance_group.uuid 581df2c986 Add regression recreate test for bug 1830747 95a3e0cf6a Restore connection_info after live migration rollback 88fd40fe5d DRY up test_rollback_live_migration_set_migration_status 58a140487c Block swap volume on volumes with >1 rw attachment 55deddf65d Fix live-migration when glance image deleted 944b24f462 Add functional confirm_migration_error test 5600309a1f [stable-only] Delete allocations even if _confirm_resize raises (part 2) b8435d6001 Delete allocations even if _confirm_resize raises 0cad3089d3 Stop logging traceback when skipping quiesce f9c2503609 Fix retry of instance_update_and_get_original 89063ecb61 Teardown networking when rolling back live migration even if shared disk 01141392db Use migration_status during volume migrating and retyping 99a63a6633 libvirt: Always disconnect volumes after libvirtError exceptions 63b45a87b8 libvirt: Stop ignoring unknown libvirtError exceptions during volume attach ba3ad2d65a Fix {min|max}_version in ironic Adapter setup 22cd12dbb7 Create request spec, build request and mappings in one transaction 5b0adaa0ca xenapi/agent: Change openssl error handling ec43a1348d libvirt: Avoid using os-brick encryptors when device_path isn't provided 899e881b18 Fix nova-grenade-live-migration run book for opendev migration d4dbbb645a Fix regression in glance client call 1cee746085 OpenDev Migration Patch 76418a32cb Move legacy-grenade-dsvm-neutron-multinode-live-migration in-tree 5d5e7be8cb Fix legacy-grenade-dsvm-neutron-multinode-live-migration c8ad9f4e19 libvirt: set device address tag only if setting disk unit ee52fb12bb libvirt: disconnect volume when encryption fails 5433dc6a75 Add missing libvirt exception during device detach c6a42cd3b3 Error out migration when confirm_resize fails f1554d1b52 prevent common kwargs from glance client failure dba9b722af Define irrelevant-files for tempest-full-py3 job 1b6f48354b Delete instance_id_mappings record in instance_destroy 8f1773a7af Do not persist RequestSpec.ignore_hosts 9fd4082d7c Add functional regression test for bug 1669054 99cbbcfd61 Update instance.availability_zone on revertResize 1b15a342e3 Add functional recreate test for bug 1819963 50a0c6a4b9 [Stable Only] hardware: Handle races during pinning ddc2c9118a Fix incomplete instance data returned after build failure ee07c1c67d Update instance.availability_zone during live migration 36d93675d9 Update resources once in update_available_resource 705284e18c Don't persist zero allocation ratios in ResourceTracker 7a3b072442 Document unset/reset wrinkle for *_allocation_ratio options 1265e9e8e2 Replace openstack.org git:// URLs with https:// 4a7575bf14 Ignore VolumeAttachmentNotFound exception in compute.manager Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 74 +++++-- api-ref/source/os-volume-attachments.inc | 3 + nova/api/openstack/compute/migrate_server.py | 6 +- nova/api/openstack/compute/volumes.py | 3 +- nova/compute/api.py | 108 ++++++++- nova/compute/manager.py | 246 +++++++++++++++------ nova/compute/resource_tracker.py | 32 ++- nova/conductor/manager.py | 22 +- nova/conductor/tasks/live_migrate.py | 34 +++ nova/conf/compute.py | 12 +- nova/conf/workarounds.py | 26 +++ nova/db/sqlalchemy/api.py | 23 +- nova/exception.py | 5 + nova/image/glance.py | 45 ++-- nova/network/neutronv2/api.py | 47 +--- nova/objects/migration_context.py | 32 +++ nova/objects/request_spec.py | 22 +- .../functional/regressions/test_bug_1669054.py | 84 +++++++ .../functional/regressions/test_bug_1830747.py | 131 +++++++++++ .../openstack/compute/admin_only_action_common.py | 37 ++-- .../api/openstack/compute/test_migrate_server.py | 8 +- .../unit/api/openstack/compute/test_volumes.py | 76 +++++++ .../unit/conductor/tasks/test_live_migrate.py | 54 ++++- nova/virt/fake.py | 6 +- nova/virt/hardware.py | 12 + nova/virt/ironic/client_wrapper.py | 8 +- nova/virt/libvirt/driver.py | 94 +++++--- nova/virt/libvirt/guest.py | 3 +- nova/virt/libvirt/imagebackend.py | 14 +- nova/virt/libvirt/volume/volume.py | 17 +- nova/virt/xenapi/agent.py | 18 +- nova/volume/cinder.py | 3 + playbooks/legacy/nova-cells-v1/run.yaml | 6 +- .../legacy/nova-grenade-live-migration/post.yaml | 15 ++ .../legacy/nova-grenade-live-migration/run.yaml | 58 +++++ playbooks/legacy/nova-live-migration/run.yaml | 6 +- playbooks/legacy/nova-lvm/run.yaml | 6 +- playbooks/legacy/nova-multiattach/run.yaml | 6 +- playbooks/legacy/nova-next/run.yaml | 6 +- .../notes/bug-1775418-754fc50261f5d7c3.yaml | 10 + ...-live-migration-with-numa-bc710a1bcde25957.yaml | 25 +++ 70 files changed, 2605 insertions(+), 508 deletions(-)

1 0

os-testr 1.1.0
by no-reply＠openstack.org 10 Jul '19

10 Jul '19

We joyfully announce the release of: os-testr 1.1.0: A testr wrapper to provide functionality for OpenStack projects The source is available from: https://opendev.org/openstack/os-testr Download the package from: https://pypi.org/project/os-testr For more details, please see below. 1.1.0 ^^^^^ Deprecation Notes * The "ostestr" command is now deprecated explicitly. We already switched to use "stestr" command instead. And we haven't maintained this command recently. For more information about stestr, see https://stestr.readthedocs.io/en/latest/ Changes in os-testr 1.0.0..1.1.0 -------------------------------- 414bbf6 Update hacking version ad00e6d Replace git.openstack.org URLs with opendev.org URLs a5bc990 Deprecate ostestr command 70f183c Fix warning message with double "to" 77002ea Dropping the py35 testing 5674bb0 OpenDev Migration Patch 595c06c Default concurrency to 0 to avoid TypeError in stestr a36d10a add python 3.7 unit test job bb4bfbf Removed older version of python3.4 from setup.cfg 59db2de Change openstack-dev to openstack-discuss 6a73644 Update the home-page URL ed3bc63 Use updated hacking url link dd00f4b add python 3.6 unit test job 1807cef switch documentation job to new PTI de316a6 import zuul job settings from project-config 9b412d7 fix tox python3 overrides ca7669b Trivial: Update pypi url to new url cc19ccf Updated from global requirements 2b3e2e8 Fix load command in pdb/no-discover path 3eba9cd Avoid tox_install.sh for constraints support 88bdf7d Remove useless links and indentations 96db910 Fix regex builder 22644f4 Updated from global requirements 3fd82f6 Updated from global requirements b6ac6ac Fix .testr.conf detection: test path follows discover Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 8 ++ CONTRIBUTING.rst | 6 +- HACKING.rst | 4 +- README.rst | 23 ++++- os_testr/ostestr.py | 63 +++++++----- os_testr/regex_builder.py | 68 +++++++------ os_testr/subunit2html.py | 22 ++--- ...deprecate-ostestr-command-3ac0bff93265fa09.yaml | 7 ++ releasenotes/source/conf.py | 96 ++++++++++++++++++ releasenotes/source/index.rst | 14 +++ releasenotes/source/unreleased.rst | 5 + requirements.txt | 4 +- setup.cfg | 7 +- test-requirements.txt | 8 +- tools/tox_install.sh | 30 ------ tox.ini | 35 +++++-- 26 files changed, 522 insertions(+), 227 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 95cd081..2b57d08 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,2 +7,2 @@ stestr>=1.0.0 # Apache-2.0 -python-subunit>=0.0.18 # Apache-2.0/BSD -testtools>=1.4.0 # MIT +python-subunit>=1.0.0 # Apache-2.0/BSD +testtools>=2.2.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 7e12060..01cca94 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0 @@ -8,3 +8 @@ coverage!=4.4,>=4.0 # Apache-2.0 -sphinx>=1.6.2 # BSD -openstackdocstheme>=1.16.0 # Apache-2.0 -oslotest>=1.10.0 # Apache-2.0 +oslotest>=3.2.0 # Apache-2.0 @@ -13 +11 @@ ddt>=1.0.1 # MIT -six>=1.9.0 # MIT +six>=1.10.0 # MIT

1 0

ironic-inspector 9.1.0 (train)
by no-reply＠openstack.org 09 Jul '19

09 Jul '19

We are overjoyed to announce the release of: ironic-inspector 9.1.0: Hardware introspection for OpenStack Bare Metal This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 9.1.0 ^^^^^ New Features ************ * Adds the capability for introspection data to be posted to the API when a baremetal node is in "active" or "rescue" states. This feature may be useful for data center operators who wish to update introspection data periodically. To enable this feature, set "[processing]permit_active_introspection" to "True". When this is set, the value of "[processing]power_off" is overridden for nodes in "active" or "rescue" states. * Adds support to enroll node with IPv6 BMC address. Introduces a configuration option "[discovery]enabled_bmc_address_version" to specify the order of preferred IP version of the BMC address. Upgrade Notes ************* * The deprecated options from the "ironic" section "os_region", "auth_strategy", "ironic_url", "os_service_type" and "os_endpoint_type" have been removed. Please use **keystoneauth** options instead. * The deprecation configuration options "os_service_type", "os_region" and "os_endpoint_type" from the "[swift]" section have been removed. Deprecation Notes ***************** * The configuration option "[swift]max_retries" is deprecated. It has been doing nothing for a few releases already. Bug Fixes ********* * No longer fails introspection if memory or CPU information is not provided in the inventory. These are no longer required for scheduling, introspection should not require them either. Changes in ironic-inspector 9.0.0..9.1.0 ---------------------------------------- 59a4c64 Move dbsync to the correct path 9d1c6a4 Use oslo_db.sqlalchemy.test_fixtures 46a90d6 Enable processing of active nodes a6509ba Revert "Lets temporarily disable broken templates so we can fix gate" da7d3bb Lets temporarily disable broken templates so we can fix gate f3fd8e9 Comment out race prone sqlite db model sync test b7bb387 add local bindep.txt 30a4e09 Adds bandit template and exclude some of tests 85a3186 Use openstacksdk for accessing Swift fcb0ca8 Use bmc ipv6 address while processing introspection data 40450dc Remove deprecated authentication options for accessing ironic 48d5d56 Document storage backends and migrating between them ca044c9 Remove deprecated options for accessing Swift 463d0a2 Stop failing on missing memory or CPU 686a64b Update Python 3 test runtimes for Train d571794 Simplify locking code f53cbe3 Remove pci_devices config option 52349c6 Incorporate bandit support in CI Diffstat (except docs and test files) ------------------------------------- bindep.txt | 6 + ironic_inspector/{ => cmd}/dbsync.py | 4 +- ironic_inspector/common/ironic.py | 65 ++-- ironic_inspector/common/swift.py | 42 +-- ironic_inspector/conf/discovery.py | 10 + ironic_inspector/conf/ironic.py | 35 -- ironic_inspector/conf/opts.py | 1 - ironic_inspector/conf/processing.py | 10 +- ironic_inspector/conf/swift.py | 22 +- ironic_inspector/introspect.py | 2 +- ironic_inspector/node_cache.py | 75 ++-- ironic_inspector/plugins/discovery.py | 13 +- ironic_inspector/plugins/pci_devices.py | 17 - ironic_inspector/plugins/standard.py | 32 +- ironic_inspector/process.py | 16 +- ironic_inspector/test/base.py | 4 +- ironic_inspector/test/functional.py | 2 +- ironic_inspector/test/unit/test_common_ironic.py | 20 +- ironic_inspector/test/unit/test_introspect.py | 12 +- ironic_inspector/test/unit/test_migrations.py | 100 ++---- ironic_inspector/test/unit/test_node_cache.py | 41 ++- .../test/unit/test_plugins_discovery.py | 34 +- .../test/unit/test_plugins_standard.py | 36 +- ironic_inspector/test/unit/test_process.py | 47 ++- ironic_inspector/test/unit/test_swift.py | 144 +++----- ironic_inspector/utils.py | 23 +- lower-constraints.txt | 4 +- .../active-introspection-949f4a50c9d5218a.yaml | 11 + .../notes/cpu-memory-cfdc72b625780871.yaml | 6 + .../notes/deprecated-ironic-1751ceec6295917d.yaml | 7 + ...-nodes-with-bmc-v6address-ba224f4a8a151c53.yaml | 6 + .../notes/swift-deprecations-d7680b867fae7f3d.yaml | 5 + .../notes/swift-max-retries-dfaecb74bd3aba9a.yaml | 5 + requirements.txt | 2 +- setup.cfg | 5 +- test-requirements.txt | 1 + tools/bandit.yml | 400 +++++++++++++++++++++ tox.ini | 6 + zuul.d/ironic-inspector-jobs.yaml | 21 ++ zuul.d/project.yaml | 5 +- 42 files changed, 894 insertions(+), 432 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d750d33..ae6ea25 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19 +18,0 @@ python-ironicclient>=2.3.0 # Apache-2.0 -python-swiftclient>=3.2.0 # Apache-2.0 @@ -20,0 +20 @@ pytz>=2013.6 # MIT +openstacksdk>=0.30.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 2507ea4..ce3392e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -3,0 +4 @@ +bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0

1 0

ironic-python-agent 4.0.0 (train)
by no-reply＠openstack.org 09 Jul '19

09 Jul '19

We joyfully announce the release of: ironic-python-agent 4.0.0: Ironic Python Agent Ramdisk This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent/+bugs For more details, please see below. 4.0.0 ^^^^^ New Features ************ * Adds a new CLI command "ironic-collect-introspection-data" to enable manually publishing into the "baremetal-introspection" service. Executing this command on a system unknown to the Bare Metal service will likely result in the machine becoming registered to Ironic, and as such this command should be used with caution. If the capability to update introspection data for running machines has been enabled in the Bare Metal introspection service, then an operator may use this command in the "active" or "rescue" states to update introspection data. Bug Fixes ********* * The "lshw" output no longer pollutes the debug logging. Instead, it's stored as part of the ramdisk logs. * Fixes the missing ipv6 module for TinyCore based IPA images which are used in CI testing. Changes in ironic-python-agent 3.7.0..4.0.0 ------------------------------------------- 696606f manual introspection trigger command f7740c7 improve error messages during node lookup failures 69064a8 Correct formatting of a warning when lshw cannot be run dc3e26a Add Python 3 Train unit tests 6f634c3 Adds bandit template and exclude some of tests 94048fe Stop logging lshw output, collect it with other logs instead cf30024 Add IPv6 module for tinycore dd7e7fd Removes tinyipa from IPA Diffstat (except docs and test files) ------------------------------------- imagebuild/README.rst | 2 - imagebuild/tinyipa/.gitignore | 13 - imagebuild/tinyipa/Makefile | 45 --- imagebuild/tinyipa/README.rst | 146 -------- imagebuild/tinyipa/add-ssh-tinyipa.sh | 139 ------- imagebuild/tinyipa/build-instance-images.sh | 36 -- imagebuild/tinyipa/build-iso.sh | 16 - imagebuild/tinyipa/build-tinyipa.sh | 197 ---------- imagebuild/tinyipa/build_files/bootlocal.sh | 74 ---- imagebuild/tinyipa/build_files/buildreqs.lst | 25 -- .../tinyipa/build_files/buildreqs_python2.lst | 2 - .../tinyipa/build_files/buildreqs_python3.lst | 2 - imagebuild/tinyipa/build_files/dhcp.sh | 21 -- imagebuild/tinyipa/build_files/fakeuname | 110 ------ imagebuild/tinyipa/build_files/finalreqs.lst | 17 - .../tinyipa/build_files/finalreqs_python2.lst | 1 - .../tinyipa/build_files/finalreqs_python3.lst | 2 - imagebuild/tinyipa/build_files/isolinux.cfg | 9 - imagebuild/tinyipa/common.sh | 56 --- imagebuild/tinyipa/finalise-tinyipa.sh | 246 ------------- imagebuild/tinyipa/install-deps.sh | 23 -- imagebuild/tinyipa/tc-mirror.sh | 53 --- imagebuild/tinyipa/udhcpc.script | 44 --- ironic_python_agent/agent.py | 9 +- ironic_python_agent/cmd/inspect.py | 30 ++ ironic_python_agent/config.py | 12 + ironic_python_agent/extensions/standby.py | 3 +- ironic_python_agent/hardware.py | 4 +- ironic_python_agent/inspect.py | 86 +++++ ironic_python_agent/inspector.py | 4 +- ironic_python_agent/ironic_api_client.py | 19 +- ironic_python_agent/utils.py | 1 + releasenotes/notes/lshw-cb89894be057bdc9.yaml | 5 + .../manual-introspection-b04b5c25f5e004ac.yaml | 13 + .../notes/tinycore-ipv6-1b620c61402b5720.yaml | 5 + setup.cfg | 17 +- tools/bandit.yml | 401 +++++++++++++++++++++ tox.ini | 3 +- zuul.d/ironic-python-agent-jobs.yaml | 3 +- zuul.d/project.yaml | 2 +- 44 files changed, 638 insertions(+), 1305 deletions(-)

1 0

neutron-fwaas 13.0.2 (rocky)
by no-reply＠openstack.org 08 Jul '19

08 Jul '19

We are jazzed to announce the release of: neutron-fwaas 13.0.2: OpenStack Networking FWaaS This release is part of the rocky stable release series. The source is available from: https://opendev.org/openstack/neutron-fwaas Download the package from: https://tarballs.openstack.org/neutron-fwaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-fwaas 13.0.1..13.0.2 --------------------------------------- ea7590e4e netfilter_log: Correctly decode binary type prefix 55a5a41b4 OpenDev Migration Patch 0a7172bd0 Fix the verification method before creating and updating the firewall rule 54a8a5bc1 Replace openstack.org git:// URLs with https:// 5b31f2320 Subscribe Neutron port update events for FWG Logging handling 2f55bd16e Fix firewall rule 'shared' check in updating fwp 78159b799 Load neutron_fwaas.conf with '--config-file' for neutron-server 42ea1e0fa Correct package name libnetfilter-log on CentOS 90951a5ec Upper-constrain neutron to stable/rocky 5ece265b6 Move port validation support into the driver eafcbce19 Fix associating firewall group with DVR/L3HA port Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 8 +- devstack/plugin.sh | 15 +- lower-constraints.txt | 2 +- neutron_fwaas/common/exceptions.py | 4 +- neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 40 ++-- .../privileged/netfilter_log/libnetfilter_log.py | 4 +- neutron_fwaas/services/firewall/fwaas_plugin_v2.py | 44 ++--- .../firewall/service_drivers/agents/agents.py | 17 ++ .../firewall/service_drivers/driver_api.py | 6 + .../logapi/agents/drivers/iptables/driver.py | 4 + neutron_fwaas/services/logapi/common/log_db_api.py | 19 +- .../services/logapi/common/port_callback.py | 40 ++++ .../unit/db/firewall/v2/test_firewall_db_v2.py | 64 +++++-- .../unit/services/firewall/test_fwaas_plugin_v2.py | 51 +++++- .../unit/services/logapi/common/test_log_db_api.py | 38 +++- .../services/logapi/common/test_port_callback.py | 203 +++++++++++++++++++++ playbooks/neutron-fwaas-fullstack/run.yaml | 6 +- requirements.txt | 2 +- 19 files changed, 483 insertions(+), 86 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f4bd3c06a..5cf313b4c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -20 +20 @@ pyroute2>=0.4.21;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) -neutron>=13.0.0.0b1 # Apache-2.0 +neutron>=13.0.0.0b1,<14.0.0.0b1 # Apache-2.0

1 0

python-tripleoclient 11.5.0 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We are happy to announce the release of: python-tripleoclient 11.5.0: TripleO client This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 11.4.0..11.5.0 ---------------------------------------------- 9bd04ae3 Improve validations run outputs through the CLI f78809a3 Ensure files exist before building/uploading plan 7d41f81e Send terminal erase sequence on tripleo deploy 34bde896 Retry heat stack polling on gateway problems f36d8995 Drop the port from DockerInsecureRegistryAddress c67f4862 Fix sample_default for host_routes option 7c21abb2 Replace git.openstack.org URLs with opendev.org URLs a55573f2 Add ODL deprecation warning in CLI 94645382 Increase max_nested_stack_depth for heat 098fdb2c undercloud: resolve undercloud_*_host de5027d6 Get validations playbooks from playbooks directory f6862341 Do not log tracebacks for expected exceptions e7875ece Add a comment about nodes and roles options. 9808a162 Revert "Remove nodes and roles options." 97fe3def Update undercloud_nameserver help text 7b368365 Remove nodes and roles options. 0fe4fb67 undercloud: wire ContainerHealthcheckDisabled 61240a06 Remove service environment file and images file. 2bab41de OpenDev Migration Patch f09d8402 Add checking mechanism driver during upgrade 3ae5ac60 Make overcloud_config working with Python 3 0ca816dc Update UPPER_CONSTRAINTS_FILE for stable/stein 14f02dd6 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- tox.ini | 6 +- tripleoclient/command.py | 4 +- tripleoclient/config/undercloud.py | 14 +- tripleoclient/constants.py | 15 +- tripleoclient/exceptions.py | 50 +++--- tripleoclient/heat_launcher.py | 3 +- .../healthcheck_disabled-d0878072273d1496.yaml | 5 + .../v1/overcloud_deploy/test_overcloud_deploy.py | 7 +- .../v1/overcloud_upgrade/test_overcloud_upgrade.py | 11 ++ tripleoclient/utils.py | 186 ++++++++++++++++++++- tripleoclient/v1/container_image.py | 25 --- tripleoclient/v1/overcloud_config.py | 2 +- tripleoclient/v1/overcloud_deploy.py | 31 ++++ tripleoclient/v1/overcloud_update.py | 7 + tripleoclient/v1/overcloud_upgrade.py | 8 + tripleoclient/v1/tripleo_deploy.py | 19 ++- tripleoclient/v1/tripleo_validator.py | 22 +-- tripleoclient/v1/undercloud_config.py | 46 +++-- tripleoclient/workflows/plan_management.py | 2 +- tripleoclient/workflows/validations.py | 15 +- 24 files changed, 559 insertions(+), 116 deletions(-)

1 0

tripleo-image-elements 10.4.1 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We are delighted to announce the release of: tripleo-image-elements 10.4.1: Disk image builder elements for deploying OpenStack. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 10.4.0..10.4.1 ------------------------------------------------ 2c8a6a57 Remove note in README regarding security hardened images 3228347d [Documentation] Migrate the format. 7d6edd9c OpenDev Migration Patch dceeba5e Update UPPER_CONSTRAINTS_FILE for stable/stein 067819e1 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- README.md => README.rst | 17 ++++++++++------- elements/overcloud-secure-uefi/README.rst | 4 ---- elements/overcloud-secure/README.rst | 4 ---- setup.cfg | 2 +- tox.ini | 2 +- 6 files changed, 14 insertions(+), 18 deletions(-)

1 0

tripleo-validations 10.5.0 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We are delighted to announce the release of: tripleo-validations 10.5.0: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 10.5.0 ^^^^^^ Deprecation Notes * All the validations in the *validations* directory have been migrated into their own Ansible roles from Stein release and will be removed from Train. You can now run the validations from the *playbooks* directory. For more information, please see: https://docs.openstack.org/tripleo-validations/latest/readme.html #directory-structure Changes in tripleo-validations 10.4.0..10.5.0 --------------------------------------------- fb838d3 Deprecate all the `validations` directory contents fae8a85 Documentation update with the new validations architecture 367fbf3 Add support for the chrony implementation 673148d Use sorted dictionary before iteration 7193778 Update the Undercloud Services list for the uc-service-status role 2d6b0da Improve stackrc file sourcing e0f9050 Use Undercloud local_ip to ensure the registry does answer or not 869ca65 Add pkg names better management between OS releases d0cece2 Add nova-status Ansible role 853d731 Update ceph-health for containers and failure options d5e22f8 Sync 'validations/check-network-gateway.yaml' with the new role 97ee5d4 Sync 'validations/lookup_plugins/tht.py' 8727fda Sync 'validations/callback_plugins/validation_output.py' 472d4a8 Sync 'validations/ceilometerdb-size.yaml' with the new role 73392f4 Sync 'validations/check-latest-minor-version.yaml' with the new role f233d2e Sync 'validations/ctlplane-ip-range.yaml' with the new role 983e33f Sync 'validations/controller-token.yaml' with the new role 2e75f97 Sync 'validations/haproxy.yaml' with the new role ea91001 Sync 'validations/ironic-boot-configuration.yaml' with the new role 41813f3 Sync 'validations/dhcp-provisioning.yaml' with the new role 40f33af Add run-validations.sh script 427f596 Sync 'validations/dhcp-introspection.yaml' with the new role f702793 Sync 'validations/no-op-firewall-nova-driver.yaml' with the new role 4ab6701 Fix typo in the command to get the file_descriptors total_limit 619e4d7 Sync 'validations/mysql-open-files-limit.yaml' with the new role 7a24b92 Sync 'validations/node-disks.yaml' with the new role 4f0edec Sync 'validations/nova-event-callback.yaml' with the new role e57d5b1 Sync 'validations/pacemaker-status.yaml' with the new role 337a9ff Sync 'validations/openstack-endpoints.yaml' with the new role 396e54a Sync 'validations/rabbitmq-limits.yaml' with the new role 4f94b30 Sync Sphinx requirement 8ee7475 Fix validations-specific Ansible output callback 7c4ab4a Sync 'validations/undercloud-debug.yaml' with the new role 5e96673 Sync 'validations/stonith-exists.yaml' with the new role 00b4857 Sync 'validations/repos.yaml' with the new role 5a8b859 Sync 'validations/switch-vlans.yaml' with the new role 8fb4099 Sync 'validations/tasks/disk_space.yaml' with the new role 637142b Sync 'validations/stack-health.yaml' with the new role 373d262 Sync 'validations/undercloud-cpu.yaml' with the new role 920710f Sync 'validations/undercloud-process-count.yaml' with the new role 3b784f2 Sync 'validations/undercloud-service-status.yaml' with the new role 80c5d07 Sync 'validations/undercloud-heat-purge-deleted.yaml' with the new role a6ee958 Sync 'validations/check-ftype.yaml' with the new role 448ea8d Sync 'validations/ceph-ansible-installed.yaml' with the new role 9d40d16 Sync 'validations/undercloud-tokenflush.yaml' with the new role 9aeeb97 Sync 'validations/undercloud-ram.yaml' with the new role 9d3d676 New validation: ensure image-serve service is working as expected 4af560c Add option to fail if ceph-ansible is not installed 904bd27 Clean up some old roles dependencies. 25012a4 Add collect-flavors-and-verify-profiles role a919cb3 Fix invalid 'ignore_missing_file' attribute in a task 1027a4f [Python3] Adds bytes to str conversion management db89c5d Makes rogue_dhcp.py script Python3 aware 6ead160 Fix Jinja2's default filter usage db08b15 Adds roles support in the script generating the validations doc. 47ad831 Update UPPER_CONSTRAINTS_FILE for stable/stein 001288a Migrate ansible-lint to pre-commit ebe7ad2 Fix Jinja2's default filter usage 9d08e89 OpenDev Migration Patch deaf09e Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 23 +++ .gitreview | 3 +- .pre-commit-config.yaml | 29 +++ README.rst | 3 +- callback_plugins/validation_output.py | 172 +++++++++--------- library/switch_vlans.py | 18 +- lookup_plugins/tht.py | 5 + playbooks/ceph-ansible-installed.yaml | 1 + playbooks/ceph-health.yaml | 2 + playbooks/check-latest-minor-version.yaml | 2 - playbooks/collect-flavors-and-verify-profiles.yaml | 13 ++ playbooks/image-serve.yaml | 13 ++ playbooks/nova-status.yaml | 24 +++ playbooks/{ntpstat.yaml => ntp.yaml} | 6 +- ...ons-directory-deprecation-6ff07dae6f456743.yaml | 10 ++ roles/ceph/defaults/main.yml | 5 + roles/ceph/tasks/ceph-ansible-installed.yaml | 10 +- roles/ceph/tasks/ceph-health.yaml | 66 ++++++- roles/check-latest-minor-version/defaults/main.yml | 9 +- roles/check-network-gateway/tasks/main.yml | 6 +- .../meta/main.yml | 27 +++ .../tasks/main.yml | 11 ++ .../vars/main.yml | 9 + roles/ctlplane-ip-range/tasks/main.yml | 4 +- roles/dhcp-validations/files/rogue_dhcp.py | 31 ++-- .../dhcp-validations/tasks/dhcp-provisioning.yaml | 2 +- roles/image-serve/defaults/main.yaml | 2 + .../meta/main.yml => image-serve/meta/main.yaml} | 0 roles/image-serve/tasks/main.yaml | 40 +++++ roles/image-serve/vars/main.yml | 7 + roles/mysql-open-files-limit/tasks/main.yml | 4 +- roles/neutron-sanity-check/tasks/main.yml | 2 +- roles/no-op-firewall-nova-driver/meta/main.yml | 3 +- roles/nova-status/meta/main.yml | 27 +++ roles/nova-status/tasks/main.yml | 26 +++ roles/nova-status/vars/main.yml | 20 +++ roles/ntp/meta/main.yml | 28 +++ roles/ntp/tasks/main.yml | 26 +++ roles/{ntpstat => ntp}/vars/main.yml | 4 +- roles/ntpstat/tasks/main.yml | 5 - roles/rabbitmq-limits/tasks/main.yml | 5 +- roles/undercloud-debug/tasks/main.yml | 2 +- roles/undercloud-heat-purge-deleted/meta/main.yml | 3 +- roles/undercloud-heat-purge-deleted/tasks/main.yml | 2 +- roles/undercloud-process-count/meta/main.yml | 3 +- roles/undercloud-process-count/tasks/main.yml | 2 +- roles/undercloud-service-status/defaults/main.yml | 13 +- roles/undercloud-tokenflush/meta/main.yml | 3 +- roles/undercloud-tokenflush/tasks/main.yml | 2 +- scripts/run-validations.sh | 106 +++++++++++ setup.cfg | 1 + test-requirements.txt | 3 +- tools/ansible-lint.sh | 22 --- tools/validate-files.py | 6 +- tox.ini | 7 +- tripleo_validations/utils.py | 13 +- validations/512e.yaml | 1 + validations/callback_plugins/validation_output.py | 172 +++++++++--------- validations/ceilometerdb-size.yaml | 9 +- validations/ceph-ansible-installed.yaml | 12 +- validations/ceph-health.yaml | 1 + validations/check-ftype.yaml | 4 +- validations/check-latest-minor-version.yaml | 10 +- validations/check-network-gateway.yaml | 23 ++- .../collect-flavors-and-verify-profiles.yaml | 2 + validations/containerized-undercloud-docker.yaml | 1 + validations/controller-token.yaml | 9 +- validations/controller-ulimits.yaml | 2 + validations/ctlplane-ip-range.yaml | 9 +- validations/default-node-count.yaml | 3 +- validations/deployment-images.yaml | 2 + validations/dhcp-introspection.yaml | 15 +- validations/dhcp-provisioning.yaml | 4 +- validations/dns.yaml | 2 + validations/haproxy.yaml | 45 ++++- validations/ironic-boot-configuration.yaml | 13 +- validations/lookup_plugins/tht.py | 5 + validations/mysql-open-files-limit.yaml | 12 +- validations/network-environment.yaml | 2 + validations/neutron-sanity-check.yaml | 2 + validations/no-op-firewall-nova-driver.yaml | 8 +- validations/node-disks.yaml | 15 +- validations/node-health.yaml | 2 + validations/nova-event-callback.yaml | 126 +++++++------ validations/ntpstat.yaml | 2 + validations/openshift-hw-requirements.yaml | 2 +- validations/openshift-nw-requirements.yaml | 2 + validations/openstack-endpoints.yaml | 16 +- validations/ovs-dpdk-pmd-cpus-check.yaml | 2 + validations/pacemaker-status.yaml | 5 +- validations/rabbitmq-limits.yaml | 15 +- validations/repos.yaml | 7 + validations/stack-health.yaml | 6 +- validations/stonith-exists.yaml | 11 +- validations/switch-vlans.yaml | 15 +- validations/tasks/deprecation.yaml | 12 ++ validations/tasks/disk_space.yaml | 4 +- validations/undercloud-cpu.yaml | 7 +- validations/undercloud-debug.yaml | 19 +- validations/undercloud-disk-space-pre-upgrade.yaml | 1 + validations/undercloud-disk-space.yaml | 1 + validations/undercloud-heat-purge-deleted.yaml | 28 ++- validations/undercloud-neutron-sanity-check.yaml | 2 + validations/undercloud-process-count.yaml | 18 +- validations/undercloud-ram.yaml | 7 +- validations/undercloud-selinux-mode.yaml | 3 +- validations/undercloud-service-status.yaml | 10 +- validations/undercloud-tokenflush.yaml | 20 ++- 111 files changed, 1371 insertions(+), 460 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a0ef4bd..25a16ff 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10,2 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD

1 0

tripleo-common 10.8.0 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We are gleeful to announce the release of: tripleo-common 10.8.0: A common library for TripleO workflows. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 10.8.0 ^^^^^^ Security Issues *************** * Fixed a vulnerability where an attacker may cause new Octavia amphorae to run based on any arbitrary image (CVE-2019-3895). Bug Fixes ********* * Fixed an issue were amphora load balancers would fail to create. The problem was because Octavia certificate files were being created in a wrong path and with invalid content. * Ensure [controller_worker]/amp_image_owner_id is set. This configuration option restricts Glance image selection to a specific owner ID. This is a recommended security setting. Changes in tripleo-common 10.7.0..10.8.0 ---------------------------------------- f48331f3 Fix tripleo-upgrade-hiera key deleting 783a6924 remove plotnetcfg from overcloud image yaml 6763c998 Overcloud-full image templates for RHEL8 f08c6058 Update the Undercloud Services list in the inventory. 5cdd4692 Increase timeout of temp swift URLs from 1 to 4 hours c258f87e Remove scenario008 jobs 277902e6 Fix bare variable usage in ansible 571422a1 Add the ability to compute osds number counting lvm devices 728e59ed [CVE-2019-3895] Set image owner id c93be003 Adds redfish support to 'overcloud generate fencing'. 71c099f2 Fix Octavia certificate file path and content f38d89e7 fix 404 when requesting empty tripleo container image catalog af719c4c Fix validations_inputs temporary file name 93314d98 [Stein-Only] Switch container images to stein namespace 4ed86885 Add task to read remote pub key a9e05d47 Make get_enabled_services() more robust fac2c32d bootstrap: install network-scripts if EL8 6f55c891 Use oslo_rootwrap subprocess module in order to gain proper eventlet awareness 59738bd5 Use 'DEFAULT_VALIDATIONS_BASEDIR' variable from constants.py 27a4322b Fix chown command in write_inputs_file function 787ec853 Add new healthchecks for zaqar services 5de8867b tripleo-bootstrap: only enable network, not starting. 24c55464 tripleo-bootstrap: ensure network service is enabled & started 83d05ffc Update default Ceph container image to use to the Nautilus version f19863f3 docker-rm: check if rpm dependency is actually installed 992749c6 Check for file existance in file modification check 83526f8a OpenDev Migration Patch b90b0e61 Update UPPER_CONSTRAINTS_FILE for stable/stein 0917a3e6 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .../container_image_prepare_defaults.yaml | 4 +- container-images/overcloud_containers.yaml | 210 ++++++++++----------- .../tripleo_kolla_template_overrides.j2 | 4 +- healthcheck/common.sh | 5 + healthcheck/zaqar-api | 6 + healthcheck/zaqar-socket | 15 ++ image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 9 +- image-yaml/overcloud-images-rhel8.yaml | 19 ++ image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute.yaml | 1 - lower-constraints.txt | 1 + playbooks/octavia-files.yaml | 1 + .../tasks/certificate.yml | 8 +- .../octavia-controller-config/tasks/octavia.yml | 12 ++ .../roles/octavia-undercloud/tasks/image_mgmt.yml | 45 ++++- ...ificates-path-and-content-e8acf1e859e75135.yaml | 6 + ...ctavia-set-image-owner-id-adb197d5daae54f1.yaml | 10 + requirements.txt | 1 + roles/tripleo-bootstrap/tasks/main.yml | 23 +++ roles/tripleo-create-admin/tasks/create_user.yml | 7 +- roles/tripleo-docker-rm/tasks/main.yaml | 13 +- roles/tripleo-upgrade-hiera/tasks/remove.yml | 12 +- sudoers | 1 - tox.ini | 2 +- tripleo_common/actions/ansible.py | 26 +-- tripleo_common/actions/parameters.py | 14 +- tripleo_common/image/image_uploader.py | 11 +- tripleo_common/image/kolla_builder.py | 6 + tripleo_common/inventory.py | 6 +- tripleo_common/templates/deployments.yaml | 20 +- tripleo_common/utils/validations.py | 7 +- workbooks/deployment.yaml | 2 +- workbooks/derive_params_formulas.yaml | 8 +- zuul.d/layout.yaml | 5 - 42 files changed, 500 insertions(+), 263 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c304a4be..51b6b604 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ oslo.log>=3.36.0 # Apache-2.0 +oslo.rootwrap>=5.8.0 # Apache-2.0

1 0

tripleo-puppet-elements 10.3.1 (stein)
by no-reply＠openstack.org 05 Jul '19

05 Jul '19

We jubilantly announce the release of: tripleo-puppet-elements 10.3.1: Puppet building rules for OpenStack images. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-puppet-elements 10.3.0..10.3.1 ------------------------------------------------- 79c0c76 Add element to install all openstack clients f18333d Add upper constraints 9ba1438 OpenDev Migration Patch 223633d Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- elements/overcloud-controller/element-deps | 1 + .../package-installs-overcloud-controller | 1 - elements/overcloud-controller/pkg-map | 1 - elements/overcloud-openstack-clients/README.md | 1 + elements/overcloud-openstack-clients/element-deps | 3 + .../package-installs-overcloud-openstack-clients | 18 ++++++ elements/overcloud-openstack-clients/pkg-map | 68 ++++++++++++++++++++++ tox.ini | 4 +- 9 files changed, 96 insertions(+), 4 deletions(-)

1 0