October 2020 - Release-announce - lists.openstack.org

freezer-api 9.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We are chuffed to announce the release of: freezer-api 9.0.0: OpenStack Backup and Restore API Service This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/freezer-api Download the package from: https://tarballs.openstack.org/freezer-api/ For more details, please see below. Changes in freezer-api 8.0.0..9.0.0 ----------------------------------- db0c4dd zuul: use the freezer-tempest-plugins jobs and cleanup 80de329 Fix a few mock imports still not from unittests 4bb4ec0 Add Devstack installation guide in README.rst b66bfa0 Overriding configured project name (freezer-api) b744d68 Fix docs output error 1122356 Add py38 in tox. 11dfa6a Use setstr to execute unittest test 6fabbd4 Add publish-openstack-docs-pti job in check/gate CI 6db9afe add docs check in tox.ini 355c68f Stop to use the __future__ module. 2693844 Cap jsonschema 3.2.0 as the minimal version 11abfac Fix pygments style fde440d Fix hacking min version to 3.0.1 746c97b tox: Keeping going with docs 9630a8f Add Python3 victoria unit tests a3c96f5 Update master for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .stestr.conf | 4 ++ .testr.conf | 9 --- .zuul.yaml | 122 ++------------------------------- api-ref/source/conf.py | 2 +- devstack/README.rst | 66 +++++++++++++++++- freezer_api/cmd/api.py | 2 - freezer_api/cmd/manage.py | 1 - lower-constraints.txt | 9 +-- releasenotes/source/conf.py | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 ++ requirements.txt | 2 +- test-requirements.txt | 9 ++- tox.ini | 58 +++++++--------- 18 files changed, 128 insertions(+), 180 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f4f945c..9b8aae7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ falcon>=1.0.0 # Apache-2.0 -jsonschema>=2.6.0 # MIT +jsonschema>=3.2.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index bcb8f98..fdde64c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ -hacking>=3.0,<=3.1.0 # Apache-2.0 +hacking>=3.0.1,<=3.1.0 # Apache-2.0 @@ -8 +8 @@ pylint==2.3.1 # GPLv2 -coverage!=4.4,>=4.0 # Apache-2.0 +coverage>=4.5.1 # Apache-2.0 @@ -11 +11 @@ oslotest>=3.3.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2 # BSD +sphinx>=1.8.0,!=2.1.0 # BSD @@ -12,0 +13 @@ testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.0.0 # Apache-2.0 @@ -13,0 +15,2 @@ testtools>=2.2.0 # MIT +testresources>=2.0.1 +testscenarios>=0.5.0

1 0

ec2-api 11.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We exuberantly announce the release of: ec2-api 11.0.0: OpenStack Ec2api Service This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ec2-api Download the package from: https://pypi.org/project/ec2-api Please report issues through: https://bugs.launchpad.net/ec2-api/+bugs For more details, please see below. Changes in ec2-api 10.0.0..11.0.0 --------------------------------- b27e70a Use importlib to take place of imp module da91dad Migrate zuul config v2 to native v3 9ff4975 migrate testing to ubuntu focal f1edb6d requirements: Drop references to os-testr ca2bab4 Remove elementtree deprecated methods 8de17cf drop mock from lower-constraints 1d3e05a Stop to use the __future__ module. 69f4b79 Switch to newer openstackdocstheme version ce31b3f Remove .testr.conf 5857697 Fix hacking min version to 3.0.1 cc2f1ef Add py38 package metadata 71ca61a Bump default tox env from py37 to py38 caf4e29 Add Python3 victoria unit tests Diffstat (except docs and test files) ------------------------------------- .testr.conf | 7 - .zuul.yaml | 46 +-- api-ref/source/conf.py | 9 +- ec2api/api/image.py | 2 +- ec2api/wsgi.py | 2 - lower-constraints.txt | 9 +- .../ec2-api-functional-neutron-full/post.yaml | 15 - .../ec2-api-functional-neutron-full/run.yaml | 63 ---- .../legacy/ec2-api-functional-neutron/post.yaml | 15 - .../legacy/ec2-api-functional-neutron/run.yaml | 68 ---- playbooks/legacy/ec2-api-rally-fakevirt/post.yaml | 41 --- playbooks/legacy/ec2-api-rally-fakevirt/run.yaml | 66 ---- rally-scenarios/README.rst | 5 - rally-scenarios/ec2-api-fakevirt.yaml | 84 ----- rally-scenarios/extra/README.rst | 5 - rally-scenarios/plugins/README.rst | 9 - .../plugins/context_plugin_ec2_creds.py | 88 ----- .../plugins/context_plugin_ec2_objects.py | 363 --------------------- rally-scenarios/plugins/context_plugin_images.py | 90 ----- rally-scenarios/plugins/ec2api_plugin.py | 224 ------------- rally-scenarios/post_test_hook.sh | 3 - setup.cfg | 1 + test-requirements.txt | 4 +- tox.ini | 2 +- 28 files changed, 26 insertions(+), 1218 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 2df38b8..0d2e73c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=3.0,<3.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -10 +10 @@ oslotest>=3.3.0 # Apache-2.0 -os-testr>=1.0.0 # Apache-2.0 +stestr>=2.0.0 # Apache-2.0

1 0

designate-dashboard 11.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We are excited to announce the release of: designate-dashboard 11.0.0: Designate Horizon UI bits This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/designate-dashboard Download the package from: https://tarballs.openstack.org/designate-dashboard/ Please report issues through: https://bugs.launchpad.net/designate-dashboard/+bugs For more details, please see below. Changes in designate-dashboard 10.0.0..11.0.0 --------------------------------------------- 7b1adbd [goal] Migrate testing to ubuntu focal 3858570 Remove obsolete setup 311ae36 drop mock from lower-constraints and requirements c217c03 Imported Translations from Zanata db12a89 Switch to newer openstackdocstheme and reno versions 1e0a33b Imported Translations from Zanata b3ef322 Bump default tox env from py37 to py38 c2fdace Add py38 package metadata 20ce810 Imported Translations from Zanata aad8ae3 Add Python3 victoria unit tests c2197fc Update master for stable/ussuri 7bace2a Cleanup py27 support Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- bindep.txt | 4 +++ .../dashboards/project/ngdns/reverse_dns/panel.py | 1 + .../dashboards/project/ngdns/zones/panel.py | 1 + karma.conf.js | 2 +- lower-constraints.txt | 8 +----- openstack-common.conf | 6 ----- package.json | 4 +-- releasenotes/source/conf.py | 10 +++---- releasenotes/source/index.rst | 1 + .../source/locale/cs/LC_MESSAGES/releasenotes.po | 30 +++++++++++++++++++++ .../source/locale/de/LC_MESSAGES/releasenotes.po | 18 +++++++++++-- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 15 ++++++----- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 31 ++++++++++++++++++++++ .../source/locale/id/LC_MESSAGES/releasenotes.po | 30 +++++++++++++++++++++ .../source/locale/ja/LC_MESSAGES/releasenotes.po | 30 +++++++++++++++++++++ .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 30 +++++++++++++++++++++ .../source/locale/ne/LC_MESSAGES/releasenotes.po | 30 +++++++++++++++++++++ .../locale/pt_BR/LC_MESSAGES/releasenotes.po | 31 ++++++++++++++++++++++ .../source/locale/ru/LC_MESSAGES/releasenotes.po | 28 +++++++++++++++++++ .../locale/zh_CN/LC_MESSAGES/releasenotes.po | 30 +++++++++++++++++++++ releasenotes/source/ussuri.rst | 6 +++++ requirements.txt | 1 - setup.cfg | 27 +++---------------- setup.py | 9 ------- test-requirements.txt | 6 +---- tox.ini | 6 ++--- 29 files changed, 334 insertions(+), 78 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 42289f3..8399f79 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +5,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -Babel!=2.4.0,>=2.3.4 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index aef19c9..4707b5f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0,<3.1.0 # Apache-2.0 @@ -7 +6,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -mock>=2.0.0 # BSD @@ -13,3 +11,0 @@ unittest2>=1.1.0 # BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD -openstackdocstheme>=1.18.1 # Apache-2.0 -reno>=2.5.0 # Apache-2.0

1 0

python-adjutant 1.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We exuberantly announce the release of: python-adjutant 1.0.0: An admin task workflow service for openstack. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/python-adjutant Download the package from: https://tarballs.openstack.org/adjutant/ For more details, please see below. 1.0.0 ^^^^^ New Features ************ * Tasks can now be configured to required a user to be authenticated when an Adjutant token is submitted for the final phase of a task. Actions will now be passed the "keystone_user" who submitted the token to do any processing on that as needed for the final step. Deprecation Notes ***************** * All actions now need to have "keystone_user" as a second optional paramater in the "submit``function. It should have a default of ``None", set as "keystone_user=None". Any existing actions without this will continue to work with a fallback, but that fallback will be removed in the W release cycle. Changes in python-adjutant 0.5.0..1.0.0 --------------------------------------- 43e0c62 Allow authenticated token requirement for tasks c42463b Ignore blame for Black formatting update b35fdcc Reformat with updated version of black formatter 9dd1f3a Update CONFspirator with example and toml support 9ef78c4 Fix pygments style de347e3 Stop to use the __future__ module. b32d0be Switch to newer openstackdocstheme and reno versions 571aa70 Add py38 package metadata 92793e3 Add pyc cleanup and black check to tox f61f6f2 Fix migration ordering issue 64e9a8b Community goal contributing docs 34bba2e Add Python3 victoria unit tests c5701a7 Update master for stable/ussuri de799a8 Update for Python 3 67b87e9 Use constraints for installing doc requirements 4b08096 Use unittest.mock instead of third party mock 46045d4 Add tests for Black, and ignore reformat blame 2c62daf Reformat code using the Black style linter Diffstat (except docs and test files) ------------------------------------- .git-blame-ignore-revs | 4 + .zuul.yaml | 21 +- adjutant/actions/migrations/0001_initial.py | 38 +- .../actions/migrations/0002_action_auto_approve.py | 7 +- .../actions/migrations/0003_auto_20190610_0205.py | 13 +- .../actions/migrations/0004_auto_20190610_0209.py | 13 +- adjutant/actions/models.py | 6 +- adjutant/actions/utils.py | 42 +- adjutant/actions/v1/base.py | 149 +- adjutant/actions/v1/misc.py | 59 +- adjutant/actions/v1/projects.py | 285 ++-- adjutant/actions/v1/resources.py | 241 ++-- adjutant/actions/v1/serializers.py | 55 +- adjutant/actions/v1/users.py | 278 ++-- adjutant/api/exception_handler.py | 13 +- adjutant/api/migrations/0001_initial.py | 89 +- adjutant/api/migrations/0002_auto_20160815_2249.py | 7 +- adjutant/api/migrations/0003_task_approved_by.py | 7 +- adjutant/api/migrations/0004_auto_20160929_0317.py | 7 +- adjutant/api/migrations/0005_auto_20190610_0209.py | 7 +- adjutant/api/migrations/0006_auto_20190610_0209.py | 13 +- adjutant/api/migrations/0007_auto_20190610_0209.py | 13 +- adjutant/api/migrations/0008_auto_20190610_0209.py | 13 +- adjutant/api/models.py | 7 +- adjutant/api/urls.py | 12 +- adjutant/api/utils.py | 28 +- adjutant/api/v1/openstack.py | 242 ++-- adjutant/api/v1/tasks.py | 55 +- adjutant/api/v1/urls.py | 19 +- adjutant/api/v1/utils.py | 18 +- adjutant/api/v1/views.py | 228 ++-- adjutant/api/views.py | 37 +- .../commands/management/commands/exampleconfig.py | 82 +- adjutant/common/openstack_clients.py | 27 +- adjutant/common/quota.py | 181 ++- adjutant/common/user_store.py | 132 +- adjutant/config/__init__.py | 62 +- adjutant/config/api.py | 34 +- adjutant/config/django.py | 6 +- adjutant/config/identity.py | 28 +- adjutant/config/quota.py | 84 +- adjutant/config/workflow.py | 23 +- adjutant/core.py | 6 - adjutant/exceptions.py | 26 +- adjutant/feature_set.py | 29 +- adjutant/middleware.py | 55 +- adjutant/notifications/utils.py | 6 +- adjutant/notifications/v1/base.py | 9 +- adjutant/notifications/v1/email.py | 2 +- adjutant/settings.py | 122 +- adjutant/startup/__init__.py | 2 +- adjutant/startup/checks.py | 18 +- adjutant/startup/loading.py | 2 +- adjutant/tasks/migrations/0001_initial.py | 55 +- .../tasks/migrations/0002_auto_20190619_0613.py | 72 +- adjutant/tasks/models.py | 42 +- adjutant/tasks/v1/base.py | 166 ++- adjutant/tasks/v1/manager.py | 27 +- adjutant/tasks/v1/projects.py | 22 +- adjutant/tasks/v1/resources.py | 12 +- adjutant/tasks/v1/users.py | 74 +- adjutant/tasks/v1/utils.py | 81 +- adjutant/urls.py | 2 +- adjutant/wsgi.py | 12 +- api-ref/source/conf.py | 72 +- etc/adjutant.yaml | 573 +++----- .../notes/authed_token-6d29688676e7ee32.yaml | 14 + releasenotes/notes/toml-d8fba261f61313bf.yaml | 6 + releasenotes/source/conf.py | 63 +- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 + requirements.txt | 3 +- setup.cfg | 1 + setup.py | 2 +- test-requirements.txt | 2 +- tox.ini | 38 +- 92 files changed, 5735 insertions(+), 5335 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index cfc10da..f39647c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +15,0 @@ python-octaviaclient>=1.8.0 -PyYAML>=5.1 @@ -18 +17 @@ six>=1.12.0 -confspirator>=0.1.6 +confspirator>=0.2.2 diff --git a/test-requirements.txt b/test-requirements.txt index 258f549..77bddba 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ doc8>=0.8.0 # Apache-2.0 -mock>=3.0.0 # BSD @@ -11,0 +11 @@ flake8-bugbear>=19.3.0;python_version>='3.4' # MIT +black>=19.3b0;python_version>='3.4' # MIT

1 0

ceilometer 15.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We are pumped to announce the release of: ceilometer 15.0.0: OpenStack Telemetry This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ceilometer Download the package from: https://tarballs.openstack.org/ceilometer/ Please report issues through: https://bugs.launchpad.net/ceilometer/+bugs For more details, please see below. Changes in ceilometer 14.0.0..15.0.0 ------------------------------------ 76d373b1 Fix handling of metadatas that are set to None or False c11bf913 [goal] Migrate tox based testing to ubuntu focal 549df53f Statement about complex object handling in the Dynamic pollster documentation aa6b4e86 Add logic for event_update handling and set transfer event as event_update b2c2ab75 maybe use word is better 648ce9b6 Run migration with NotFound exception as well 49b098ed Run migration with NotFound exception as well f3b60688 Fix failing unit tests for new msgpack version 790835f2 Fix volume attachment event parsing 9c4f0d93 Dynamic pollster support paging systems that return only a path for the next page 51f06518 Enable processing metadata with nested objects 39a534b3 Add support to the use of headers in the dynamic pollsters 51119ddc Allow operations on Ceilometer dynamic pollster to reference the sample itself 4c859ad4 Remove [ and ] around parameter values in http url 8db46101 Imported Translations from Zanata 4f85b7d2 Adding exception handling when inspect_disks 1456ef0a Remove glance-registry from docs 6bb26f35 Fix dynamic pollster `default_discovery` method call 49e9744f Fix dynamic pollster samples indentation in the documentation f8992d40 Trigger volume deletes only on volume deleted c3b0a808 Imported Translations from Zanata 89969ec0 Fix PDF build 71e50362 Added missing Ceilometer configuration step for controller in docs. 82de25bf drop mock from lower-constraints abba67bf Refresh tox 9c141d7d Drop undefined doc config path daaba363 Stop to use the __future__ module. b3e4e5ab Port the grenade job to Zuul v3 1a4ab34d Enable OpenStack pollster to configure Ids(project, user, and resource) ed248da3 Imported Translations from Zanata 7df74988 Add volume.manage to metrics. 9c94986c Switch to newer openstackdocstheme and reno versions 976df71b Fix pygments style 658d36f7 Imported Translations from Zanata b5756da4 Add py38 package metadata 97c2e87a Add Python3 victoria unit tests d951f3cb Update master for stable/ussuri 6f2acc6e Add support to linked samples responses bdd242e4 Add release note link in README Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 31 ++- README.rst | 4 + ceilometer/compute/virt/libvirt/inspector.py | 26 +- ceilometer/data/meters.d/meters.yaml | 2 + ceilometer/gnocchi_client.py | 4 +- ceilometer/image/glance.py | 2 - ceilometer/objectstore/swift.py | 2 - ceilometer/pipeline/data/event_definitions.yaml | 4 +- ceilometer/polling/dynamic_pollster.py | 205 ++++++++++++-- ceilometer/publisher/data/gnocchi_resources.yaml | 13 +- ceilometer/publisher/gnocchi.py | 30 ++ ceilometer/publisher/http.py | 2 +- ceilometer/publisher/udp.py | 2 +- .../test_non_openstack_credentials_discovery.py | 6 +- .../polling/test_non_openstack_dynamic_pollster.py | 123 ++++++--- ceilometer/volume/cinder.py | 2 - .../install/glance/install-glance-ubuntu.rst | 4 +- lower-constraints.txt | 11 +- playbooks/legacy/grenade-dsvm-ceilometer/post.yaml | 15 - playbooks/legacy/grenade-dsvm-ceilometer/run.yaml | 46 --- releasenotes/source/conf.py | 14 +- releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 23 +- releasenotes/source/ussuri.rst | 6 + requirements.txt | 8 +- setup.cfg | 1 + test-requirements.txt | 2 +- tox.ini | 4 +- 39 files changed, 1013 insertions(+), 301 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1626b343..66dcb189 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ jsonpath-rw-ext>=1.1.3 # Apache-2.0 -lxml>=3.4.1 # BSD +lxml>=4.2.3 # BSD @@ -18 +18 @@ pbr>=2.0.0 # Apache-2.0 -oslo.messaging>=6.2.0 # Apache-2.0 +oslo.messaging>=8.0.0 # Apache-2.0 @@ -30 +30 @@ python-cinderclient>=3.3.0 # Apache-2.0 -PyYAML>=3.12 # MIT +PyYAML>=3.13 # MIT @@ -34 +34 @@ stevedore>=1.20.0 # Apache-2.0 -tenacity>=4.4.0 # Apache-2.0 +tenacity>=4.12.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index e5d6c35b..6d10a478 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ os-win>=3.0.0 # Apache-2.0 -oslo.messaging[kafka]>=6.2.0 # Apache-2.0 +oslo.messaging[kafka]>=8.0.0 # Apache-2.0

1 0

cloudkitty-dashboard 11.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We high-spiritedly announce the release of: cloudkitty-dashboard 11.0.0: CloudKitty Horizon dashboard This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/cloudkitty-dashboard Download the package from: https://pypi.org/project/cloudkitty-dashboard Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cloudkitty- dashboard For more details, please see below. Changes in cloudkitty-dashboard 10.0.0..11.0.0 ---------------------------------------------- 01ac499 Imported Translations from Zanata 554068b Cleanup for Refactor-error-messages c05db48 [goal] Migrate testing to ubuntu focal 03cb12b Update hacking for Python3 d64e435 Add py38 package metadata 15a2a8e Drop use of third party mock 86ad84e Imported Translations from Zanata 5ea0940 Switch to newer openstackdocstheme and reno versions c5dd324 Bump default tox env from py37 to py38 17bd8df Imported Translations from Zanata dad03a9 Add Python3 victoria unit tests 99b20e4 Update master for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- .../dashboards/admin/hashmap/forms.py | 13 +++++---- .../dashboards/admin/modules/forms.py | 4 +-- .../dashboards/admin/pyscripts/forms.py | 8 +++--- .../dashboards/project/rating/views.py | 4 +-- .../locale/en_GB/LC_MESSAGES/django.po | 31 +++------------------- .../locale/fr/LC_MESSAGES/django.po | 5 +++- cloudkittydashboard/overrides.py | 1 + releasenotes/source/conf.py | 13 +++------ releasenotes/source/index.rst | 1 + .../source/locale/de/LC_MESSAGES/releasenotes.po | 15 +++++++++-- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 13 +++++---- releasenotes/source/ussuri.rst | 6 +++++ setup.cfg | 1 + test-requirements.txt | 8 +++++- tox.ini | 3 ++- 19 files changed, 74 insertions(+), 85 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 9cd5b2e..d5b8079 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4,7 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 + +hacking>=3.0.1,<3.1.0 # Apache-2.0 +# remove this pyflakes from here once you bump the +# hacking to 3.2.0 or above. hacking 3.2.0 takes +# care of pyflakes version compatibilty. +pyflakes>=2.1.1 +

1 0

openstack-cyborg 5.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We are chuffed to announce the release of: openstack-cyborg 5.0.0: Distributed Acceleration Management as a Service This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/openstack-cyborg Download the package from: https://tarballs.openstack.org/cyborg/ For more details, please see below. 5.0.0 ^^^^^ New Features ************ * In the Victoria release, cyborg introduced the new scoped RBAC policy authorization for API access, and partially implemented the blueprints. What implemented are new default rules in base policy and device_profile policy. During the development period(victoria and wallaby releases), the new and old policy will both work because a deployment sets "cyborg.conf [oslo_policy] enforce_scope = False" as the default set. Although users can set "cyborg.conf [oslo_policy] enforce_scope = True" by default in their deployment, if they want to ignore old rules and support new rules only. After we implement all the features, we'll give two cycles transition period for operators. For specification of new policy, please refer to policy default refresh. * Scope Cyborg introduced "scope_type" to protect each policy. Cyborg support two types of "sope_type" with their combination. "['system']", "['project']" and "['system', 'project']". To know each policy "scope_type", please refer the Policy Reference This feature is disabled by default can be enabled via config option "[oslo_policy]enforce_scope" in "cyborg.conf" * New Defaults Configuration Policies are default to Admin, Member and Reader roles. Old roles are also supproted. You can switch to new defaults via config option "[oslo_policy]enforce_new_defaults" in "cyborg.conf" file. * New Base policy roles Cyborg introduced seven basic roles based on the new defaults combined with different scope_types. * project_reader * project_member * project_admin * system_admin * system_reader * system_admin_or_owner * system_or_project_reader * New Defaults for device_profile APIs Rewrite check string(authorization rules) using new personas for device profile APIs. Add "checkstr=base.PROJECT_READER_OR_SYSTEM_READER" and deprecated "checkstr=base.deprecated_default" for * "cyborg:device_profile:get_one" * "cyborg:device_profile:get_all" Add "check_str=base.SYSTEM_ADMIN" and deprecated "check_str=base.deprecated_is_admin" for * "cyborg:device_profile:create" Add "check_str=base.SYSTEM_ADMIN" and deprecated "base.deprecated_default" for * "cyborg:device_profile:delete" * Added policy configuration guide on cyborg doc page Please refer to policy configuration guide (https://specs.openstack.org/openstack/cyborg- specs/specs/ussuri/approved/policy-defaults-refresh.html) (https://docs.openstack.org/cyborg/latest/configuration/policy.html) (https://docs.openstack.org/cyborg/latest/configuration/policy- guide.html) Upgrade Notes ************* * The default value of "[oslo_policy] policy_file" config option has been changed from "policy.json" to "policy.yaml". Cyborg policy new defaults since 5.0.0 and current default value of "[oslo_policy] policy_file" config option ("policy.json") does not work when "policy.json" is generated by oslopolicy-sample-generator (https://docs.openstack.org/oslo.policy/latest/cli/oslopolicy- sample-generator.html) tool. Refer to bug 1875418 (https://bugs.launchpad.net/nova/+bug/1875418) for more details. Also check oslopolicy-convert-json-to-yaml (https://docs.openstack.org/oslo.policy/latest/cli/oslopolicy- convert-json-to-yaml.html) tool to convert the JSON to YAML formatted policy file in backward compatible way. Deprecation Notes ***************** * The old basic personas below are marked as deprecated rules in base policy. * public_api * allow * deny * admin_api * is_admin * admin_or_owner * admin_or_user Changes in openstack-cyborg 4.0.0..5.0.0 ---------------------------------------- 62d7842 Add releasenote for policy refresh base and device profile policies e800b51 add document for cyborg new policy ffe409d Change default policy file from JSON to YAML c9a656d Update TOX_CONSTRAINTS_FILE for stable/victoria 98cebb1 Update .gitreview for stable/victoria 01e9a74 [goal] Fixing lower constraints for Ubuntu Focal edbc577 Programming support (v2 Deployable API) 5435d29 Add releasenote for programming method c053e5f Change arq delete to cyborg-conductor service write db 3b2faa0 Change arq create to cyborg-conductor service write db 9c1714b Introduce scope_types in Device Profiles Actions b1c223a Add new default roles in Device Profile API policies c39d180 Add releasenote for Intel QAT driver. 660b252 Suppress policy deprecated warnings in tests 270d12e Add new default rules and mapping in policy base class 27d5a7d Add policies tests for existing device_profile APIs 05f762b Add Inspur FPGA driver releasenote 61450fa Keep Inspur FPGA deployable_name unique 3108d28 Add Inspur FPGA driver fd18064 Add releasenote for add project_id for arq patch api 0154175 keep FPGA driver's deployable_name unique 970e673 Add Inspur FPGA driver matrix 3ade5f8 Add a new column in driver matrix eeae741 keep GPU driver's deployable_name unique de0823d Add instance project_id for arq patch 3fdb4f6 Correct spell error from `seperate` to `separate` d560ec1 Add a new driver for Intel QAT card 9179ed3 Optimize microversion support 40259a2 Revert "Add new default policy" c4f63f4 Add new default policy bf94ef8 update API documentation ce1cef3 Removed unused image api methods 9b99e56 Remove deprecated cyborg.image.download.modules 8826575 Remove api_servers references 59fc114 hacking: force explicit import of python's mock e6cdf3e Use uwsgi binary from path and docs job fix 6b0e1f8 Use unittest.mock instead of third party mock 8ed9135 Remove future imports 7ee7de1 Remove OPAE dependency in devstack 981d37c Enable openstackdocs config to storyboard b92dadb Always reset CONF when starting the wsgi app eef6ddd Switch to newer openstackdocstheme and reno versions 4561a16 Fix flake8 error from hacking <3.0.1 4153c1f add ut for get arqs list 4c941db Fix hacking min version to 3.0.1 1204f42 Monkey patch original current_thread _active 039b923 Fix fake attribute old interface 23eb486 optimize gpu driver generate attribute list 872b36f Fix copy-paste typo e045686 Remove translation sections from setup.cfg 771dab0 Update docs building cd97b0e Add py38 package metadata 68b7044 Add Python3 victoria unit tests dae645b Update master for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .gitreview | 1 + .zuul.yaml | 2 +- api-ref/source/conf.py | 8 +- babel.cfg | 2 - bindep.txt | 7 + cyborg/accelerator/drivers/fpga/base.py | 3 +- cyborg/accelerator/drivers/fpga/inspur/__init__.py | 0 cyborg/accelerator/drivers/fpga/inspur/driver.py | 40 +++ cyborg/accelerator/drivers/fpga/inspur/sysinfo.py | 158 ++++++++++++ cyborg/accelerator/drivers/fpga/intel/driver.py | 30 +-- cyborg/accelerator/drivers/fpga/intel/sysinfo.py | 12 +- cyborg/accelerator/drivers/fpga/utils.py | 2 +- cyborg/accelerator/drivers/gpu/utils.py | 17 +- cyborg/accelerator/drivers/qat/__init__.py | 0 cyborg/accelerator/drivers/qat/base.py | 46 ++++ cyborg/accelerator/drivers/qat/intel/__init__.py | 0 cyborg/accelerator/drivers/qat/intel/driver.py | 36 +++ cyborg/accelerator/drivers/qat/intel/sysinfo.py | 204 +++++++++++++++ cyborg/agent/manager.py | 17 +- cyborg/agent/rpcapi.py | 10 +- cyborg/api/__init__.py | 18 ++ cyborg/api/controllers/v2/arqs.py | 39 ++- cyborg/api/controllers/v2/deployables.py | 66 ++++- cyborg/api/controllers/v2/device_profiles.py | 10 +- cyborg/api/controllers/v2/devices.py | 6 +- cyborg/api/controllers/v2/utils.py | 22 ++ cyborg/api/controllers/v2/versions.py | 23 +- cyborg/api/rest_api_version_history.rst | 19 +- cyborg/api/wsgi_app.py | 3 + cyborg/cmd/__init__.py | 6 + cyborg/cmd/status.py | 30 ++- cyborg/common/authorize_wsgi.py | 207 +++++++++++++++ cyborg/common/constants.py | 10 +- cyborg/common/exception.py | 9 + cyborg/common/policy.py | 227 +--------------- cyborg/conductor/manager.py | 32 +++ cyborg/conductor/rpcapi.py | 33 +++ cyborg/conf/agent.py | 3 +- cyborg/conf/glance.py | 23 -- .../alembic/versions/7e6f1f107f2b_add_qat_type.py | 22 ++ cyborg/db/sqlalchemy/models.py | 2 +- cyborg/hacking/checks.py | 28 ++ cyborg/image/api.py | 94 +------ cyborg/image/download/__init__.py | 54 ---- cyborg/image/glance.py | 68 +---- cyborg/objects/arq.py | 3 +- cyborg/objects/driver_objects/driver_deployable.py | 2 +- cyborg/objects/ext_arq.py | 2 +- cyborg/objects/extarq/ext_arq_job.py | 9 +- cyborg/objects/extarq/fpga_ext_arq.py | 6 +- cyborg/policies/__init__.py | 34 +++ cyborg/policies/base.py | 167 ++++++++++++ cyborg/policies/device_profiles.py | 111 ++++++++ .../drivers/aichip/huawei/test_ascend.py | 2 +- .../accelerator/drivers/fpga/inspur/__init__.py | 0 .../accelerator/drivers/fpga/inspur/test_driver.py | 111 ++++++++ .../drivers/fpga/intel/prepare_test_data.py | 2 +- .../accelerator/drivers/fpga/intel/test_driver.py | 8 +- .../unit/accelerator/drivers/fpga/test_base.py | 2 + .../unit/accelerator/drivers/gpu/test_utils.py | 8 +- .../unit/accelerator/drivers/qat/intel/__init__.py | 0 .../drivers/qat/intel/prepare_test_data.py | 265 +++++++++++++++++++ .../accelerator/drivers/qat/intel/test_driver.py | 109 ++++++++ .../unit/accelerator/drivers/qat/test_base.py | 29 +++ .../accelerator/drivers/spdk/nvmf/test_nvmf.py | 2 +- .../accelerator/drivers/spdk/vhost/test_vhost.py | 2 +- .../unit/api/controllers/v2/test_deployables.py | 2 +- .../api/controllers/v2/test_device_profiles.py | 32 +-- .../unit/api/controllers/v2/test_fpga_program.py | 143 ++++++++++ devstack/lib/cyborg | 23 +- devstack/lib/opae | 57 ---- devstack/plugin.sh | 3 - devstack/settings | 13 +- .../{sample_config.rst => sample-config.rst} | 0 .../{sample_policy.rst => sample-policy.rst} | 9 + ...ADME.policy.json.txt => README.policy.yaml.txt} | 2 +- etc/cyborg/{policy.json => policy.yaml} | 0 .../add-programming-method-051b9c4244c35c71.yaml | 6 + ...oject_id-to-arq-patch-api-8270cbb26c68af46.yaml | 8 + .../notes/fpga-driver-8b1635e92b1297c1.yaml | 2 +- .../notes/inspur-fpga-driver-0257d2aeda9537fb.yaml | 6 + .../notes/intel-qat-driver-a7b4c8f110d41e0b.yaml | 8 + ...file-default-value-change-de14a3688357b081.yaml | 14 + ...h_base_and_device_profile-cef00fca580d2323.yaml | 87 +++++++ ...-dependency-from-devstack-f6db83bb37761340.yaml | 13 + .../removed-download-modules-540fa0607d7df967.yaml | 7 + releasenotes/source/conf.py | 7 +- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 + requirements.txt | 9 +- setup.cfg | 21 +- test-requirements.txt | 10 +- tools/config/cyborg-policy-generator.conf | 2 +- tox.ini | 3 +- 132 files changed, 3417 insertions(+), 871 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 80242f5..d9d60cc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ six>=1.8.0 # MIT -eventlet>=0.12.0,!=0.18.3,!=0.20.1,!=0.21.0,!=0.23.0,!=0.25.0 # MIT +eventlet>=0.26.0 # MIT @@ -17 +17 @@ oslo.service>=1.0.0,!=1.28.1 # Apache-2.0 -oslo.db>=4.1.0 # Apache-2.0 +oslo.db>=4.44.0 # Apache-2.0 @@ -20 +20 @@ oslo.upgradecheck>=0.1.0 # Apache-2.0 -oslo.utils>=3.33.0 # Apache-2.0 +oslo.utils>=4.5.0 # Apache-2.0 @@ -22 +22 @@ oslo.versionedobjects>=1.31.2 # Apache-2.0 -oslo.policy>=0.5.0 # Apache-2.0 +oslo.policy>=3.4.0 # Apache-2.0 @@ -29 +28,0 @@ psutil>=3.2.2 # BSD -mock>=2.0.0 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index bcf6fa9..9f8c255 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=3.0,<3.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -10,2 +10 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0.0 # BSD -ddt>=1.0.1 # MIT +ddt>=1.2.1 # MIT @@ -13 +12 @@ oslotest>=3.2.0 # Apache-2.0 -stestr>=2.0.0 # Apache-2.0/BSD +stestr>=2.2.0 # Apache-2.0 @@ -16 +15 @@ testscenarios>=0.4 # Apache-2.0/BSD -testtools>=0.9.32 # MIT +testtools>=2.4.0 # MIT @@ -19 +17,0 @@ doc8>=0.6.0 # Apache-2.0 -pycodestyle>=2.0.0 # MIT License

1 0

aodh 11.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We are pumped to announce the release of: aodh 11.0.0: OpenStack Telemetry Alarming This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/aodh Download the package from: https://tarballs.openstack.org/aodh/ Please report issues through: https://bugs.launchpad.net/aodh/+bugs For more details, please see below. Changes in aodh 10.0.0..11.0.0 ------------------------------ 8635b677 Use SETUPTOOLS_USE_DISTUTILS=stdlib for global pip installs 932b1e0e Stop to use the __future__ module. 32e95651 Cap jsonschema 3.2.0 as the minimal version d86bc73d Switch to newer openstackdocstheme and reno versions a62aaaba Imported Translations from Zanata 3127609e Remove translation sections from setup.cfg 9af9f096 Imported Translations from Zanata 04f82e1a Add py38 package metadata d35a1469 Add Python3 victoria unit tests 692572bd Update master for stable/ussuri 6792853f Add irrelevant-files for tempest jobs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 31 +++++++++++++--------- aodh/storage/impl_sqlalchemy.py | 2 -- aodh/storage/sqlalchemy/alembic/env.py | 2 -- babel.cfg | 2 -- devstack/plugin.sh | 3 ++- releasenotes/source/conf.py | 8 +++--- releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 13 +++++---- releasenotes/source/ussuri.rst | 6 +++++ requirements.txt | 2 +- setup.cfg | 15 +---------- 14 files changed, 57 insertions(+), 54 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 74fd63cf..73671d67 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ futurist>=0.11.0 # Apache-2.0 -jsonschema>=2.6.0 # MIT +jsonschema>=3.2.0 # MIT

1 0

adjutant-ui 1.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We are ecstatic to announce the release of: adjutant-ui 1.0.0: Adjutant User Interface This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/adjutant-ui Download the package from: https://tarballs.openstack.org/adjutant-ui/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/adjutant-ui For more details, please see below. Changes in adjutant-ui 0.5.0..1.0.0 ----------------------------------- a52d588 drop mock from lower-constraints 92c5533 Stop to use the __future__ module. dc3e444 Switch to newer openstackdocstheme and reno versions 9c2e432 Fix hacking min version to 3.0.1 f932b4e Cleanup py27 support 070fe96 Add py38 package metadata 7b8e159 Add Python3 victoria unit tests 61a1ca1 Update hacking for Python3 b7ab048 Follow PTI for docs builds d528b3c Use unittest.mock instead of third party mock f3b42da [ussuri][goal] Drop python 2.7 support and testing bd59ec3 Sync Sphinx requirement a9a4989 Fix some flake8 warnings 310b86b Add pep8 jobs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 14 +++ README.rst | 4 +- adjutant_ui/api/adjutant.py | 36 +++---- adjutant_ui/content/notifications/tabs.py | 6 +- adjutant_ui/content/notifications/views.py | 6 +- adjutant_ui/content/quota/views.py | 2 +- adjutant_ui/content/tasks/tabs.py | 2 +- adjutant_ui/content/tasks/views.py | 4 +- bindep.txt | 2 + lower-constraints.txt | 140 ++++++++++++++++++++++++++++ setup.cfg | 14 ++- setup.py | 9 -- test-requirements.txt | 11 +-- tools/install_venv.py | 1 + tools/install_venv_common.py | 2 - tox.ini | 26 ++++-- 19 files changed, 226 insertions(+), 73 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 40ac5a5..a64165a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ -hacking>=0.12.0,!=0.13.0,<0.14 # Apache-2.0 +hacking>=3.0.1,<3.1 # Apache-2.0 @@ -12,2 +11,0 @@ coverage>=4.0 # Apache-2.0 -mock>=2.0 # BSD -mox3!=0.19.0,>=0.7.0 # Apache-2.0 @@ -15,2 +13 @@ nodeenv>=0.9.4 # BSD -oslosphinx>=4.7.0 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0 @@ -18 +15 @@ selenium>=2.50.1 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx>=2.0.0,!=2.1.0 # BSD @@ -22 +19 @@ xvfbwrapper>=0.1.3 #license: MIT -sphinx-rtd-theme>=0.2.4 +openstackdocstheme>=2.2.1 # Apache-2.0

1 0

freezer-web-ui 9.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We are happy to announce the release of: freezer-web-ui 9.0.0: Freezer - Backup as a Service User Interface This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/freezer-web-ui Download the package from: https://pypi.org/project/freezer-web-ui Please report issues through: https://storyboard.openstack.org/#!/project/openstack/freezer-web- ui For more details, please see below. Changes in freezer-web-ui 8.0.0..9.0.0 -------------------------------------- 1f5004d zuul: migrate the freezer-web-ui job to native Zuul v3 e57a654 Add py38 in tox. b2af707 Stop to use the __future__ module. 2a46542 Switch to newer openstackdocstheme and reno versions b248f85 Update to hacking 3.0 cf9a3e3 Add py38 package metadata 3e95dbc Remove the mock installed c79bc4f Add Python3 victoria unit tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 31 +++++---- disaster_recovery/backups/views.py | 4 +- lower-constraints.txt | 11 +--- playbooks/legacy/freezer-web-ui-ubuntu/post.yaml | 80 ------------------------ playbooks/legacy/freezer-web-ui-ubuntu/run.yaml | 67 -------------------- setup.cfg | 1 + test-requirements.txt | 6 +- tools/install_venv_common.py | 2 - tox.ini | 11 ++-- 11 files changed, 39 insertions(+), 195 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 357561e..6d39eaf 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -8 +7,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -mock>=2.0.0 # BSD @@ -12,2 +11 @@ testtools>=2.2.0 # MIT -unittest2>=1.1.0 # BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx>=2.0.0,!=2.1.0 # BSD

1 0

barbican 11.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We are overjoyed to announce the release of: barbican 11.0.0: OpenStack Secure Key Management This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. Changes in barbican 10.0.0..11.0.0 ---------------------------------- 5ea6872b Fix debug log string 6642a608 Set db_auto_create default to False 9da15bf3 Rebase alembic migrations 25a56939 Remove six.PY3 06e85569 Keep barbican functional jobs on Bionic a40c430e Log beginning of request processing to INFO 129c0c5f migrate tox based testing to ubuntu focal a1f3b836 Fix dogtag functional job 0edaaf27 Fix kmip&dogtag level problem in the document hierarchy 79f0f101 zuul: switch to the new tempest native jobs 4b52ae7e devstack: Honor SERVICE_PROTOCOL for endpoints ab801116 Stop setting USE_PYTHON3 for jobs 6b568e3c Drop configure_keystone_authtoken_middleware function 03665ece Switch from unittest2 compat methods to Python 3.x methods 549e0624 Imported Translations from Zanata 71bad5df Ussuri contrib docs community goal df194df8 Fix PDF build 5df6c0cf Fixes index.rst titles and add mascot f97e5aa1 Imported Translations from Zanata 9e117427 Stop to use the __future__ module. 146b6e6b docs: Minor tweaks to DevStack guide 6f160e27 Cap jsonschema 3.2.0 as the minimal version 138375ea Switch to newer openstackdocstheme and reno versions 2f157e09 delete invalid url in README.rst 724f0125 Add Python3 victoria unit tests e2f37f5e Remove install_cmd,lower-constraints d3d46709 Fix py38 failures a4b8d5b3 Imported Translations from Zanata 9c98b9a7 Fix config option type 02b82e5a Cleanup py27 support e3285601 Add undercloud-containers to gate ad467b0d Update README 32a71003 Use unittest.mock instead of third party mock 9a56d3a5 Add barbican-spec link to readme.rst 3e7b92d8 Update master for stable/ussuri b8266ef4 Use Zuulv3 devstack jobs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 189 +++----- README.rst | 27 +- api-guide/source/conf.py | 25 +- babel.cfg | 1 - barbican/api/middleware/context.py | 2 + barbican/cmd/barbican_manage.py | 2 - barbican/common/config.py | 2 +- barbican/common/validators.py | 2 +- barbican/locale/en_GB/LC_MESSAGES/barbican.po | 40 +- barbican/locale/zh_CN/LC_MESSAGES/barbican.po | 17 +- barbican/model/migration/alembic_migrations/env.py | 1 - ...20ccbe7fa_remove_transport_keys_column_from_.py | 30 -- ...127569afa_create_secret_store_metadata_table.py | 50 -- ...9933643_add_project_column_to_consumer_table.py | 46 -- ...687_fill_project_id_to_secrets_where_missing.py | 73 --- .../versions/1a0c2cdafb38_initial_version.py | 28 -- ...f79559e3_new_secret_and_container_acl_tables.py | 118 ----- .../1bc885808c76_add_project_id_to_secrets.py | 36 -- .../1bece815014f_remove_projectsecret_table.py | 30 -- ...f328bfce0_fixing_composite_primary_keys_and_.py | 97 ---- ...8af2dd_add_new_columns_type_meta_containerid.py | 37 -- ...5565185_removing_redundant_fields_from_order.py | 35 -- ...e0c5f_change_keystone_id_for_external_id_in_.py | 33 -- .../2843d6469f25_add_sub_status_info_for_orders.py | 36 -- ...3f5371bde_dsa_in_container_type_modelbase_to.py | 49 -- .../2d21598e7e70_added_ca_related_tables.py | 116 ----- ...95d7_remove_size_limits_on_meta_table_values.py | 41 -- .../30dba269cc64_update_order_retry_tasks_table.py | 64 --- .../39a96e67e990_add_missing_constraints.py | 47 -- ...f2e645cba_model_for_multiple_backend_support.py | 75 --- .../versions/39cf2e645cba_ocata_rebase.py | 530 +++++++++++++++++++++ ...040bfe_add_owning_project_and_creator_to_cas.py | 38 -- ...36a26b88af_add_order_barbican_metadata_table.py | 48 -- ...6f6972_add_orders_plugin_metadata_table_and_.py | 48 -- ...f4a69ac_added_secret_type_column_to_secrets_.py | 32 -- .../46b98cde536_add_project_quotas_table.py | 58 --- ...9e523451_made_plugin_names_in_kek_datum_non_.py | 32 -- ...3a72a_add_cas_column_to_project_quotas_table.py | 33 -- ...457517a3_rename_acl_creator_only_to_project_.py | 45 -- .../795737bb3c3_change_tenants_to_projects.py | 95 ---- .../versions/aa2cf96a1d5_add_orderretrytask.py | 43 -- .../cd4106a1a0_add_cert_to_container_type.py | 34 -- .../versions/d2780d5aa510_change_url_length.py | 35 -- .../dce488646127_add_secret_user_metadata.py | 52 -- .../alembic_migrations/versions/juno_initial.py | 44 -- .../alembic_migrations/versions/kilo_release.py | 31 -- barbican/plugin/dogtag.py | 2 +- barbican/plugin/dogtag_config_opts.py | 2 +- barbican/plugin/util/translations.py | 6 +- .../model/repositories/test_repositories_quotas.py | 14 +- .../plugin/interface/test_certificate_manager.py | 2 +- bindep.txt | 1 - devstack/lib/barbican | 12 +- devstack/settings | 5 +- .../api/v1/functional/test_consumers.py | 2 +- .../api/v1/functional/test_containers.py | 4 +- lower-constraints.txt | 139 ------ .../barbican-devstack-tempest-base/post.yaml | 15 - .../barbican-devstack-tempest-base/run-ipv6.yaml | 76 --- .../legacy/barbican-devstack-tempest-base/run.yaml | 67 --- .../fixed-mysql-migrations-23221671ba17ea5e.yaml | 4 + ...date-autodbcreate-default-31b5a86063b91444.yaml | 8 + releasenotes/source/conf.py | 12 +- releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 50 +- releasenotes/source/ussuri.rst | 6 + requirements.txt | 7 +- setup.cfg | 31 +- setup.py | 9 - test-requirements.txt | 4 +- tox.ini | 32 +- 125 files changed, 1120 insertions(+), 2452 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index cc3d8f7c..031dbcc7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +4,0 @@ alembic>=0.8.10 # MIT -Babel!=2.4.0,>=2.3.4 # BSD @@ -9,2 +8,2 @@ eventlet>=0.18.2,!=0.18.3,!=0.20.1 # MIT -jsonschema>=2.6.0 # MIT -oslo.config>=5.2.0 # Apache-2.0 +jsonschema>=3.2.0 # MIT +oslo.config>=6.4.0 # Apache-2.0 @@ -17 +16 @@ oslo.log>=3.36.0 # Apache-2.0 -oslo.policy>=1.30.0 # Apache-2.0 +oslo.policy>=1.33.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 385b1739..4a70342e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,0 +7 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +pyflakes>=2.1.1 @@ -10 +10,0 @@ ddt>=1.0.1 # MIT -mock>=2.0.0 # BSD @@ -16 +16 @@ fixtures>=3.0.0 # Apache-2.0/BSD -requests>=2.14.2 # Apache-2.0 +requests>=2.18.0 # Apache-2.0

1 0

blazar-dashboard 4.0.0 (victoria)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We are ecstatic to announce the release of: blazar-dashboard 4.0.0: Horizon plugin for the Blazar Reservation Service for OpenStack This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/blazar-dashboard Download the package from: https://tarballs.openstack.org/blazar-dashboard/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 4.0.0 ^^^^^ Security Issues * Uses "json.loads` instead of ``eval()" for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under. Changes in blazar-dashboard 3.0.0..4.0.0 ---------------------------------------- 5c7608d Use json.loads instead of eval for JSON parsing 77d4edc Update TOX_CONSTRAINTS_FILE for stable/victoria 85a2a1a Update .gitreview for stable/victoria f494ec1 Cleanup for Refactor-error-messages 1bc2c22 drop mock from lower-constraints and requirements daf0e0d Stop to use the __future__ module. dd86bf5 Add Python3 victoria unit tests b3d4325 Update master for stable/ussuri d249b80 Switch to newer openstackdocstheme and reno versions 76040f4 Bump default tox env from py37 to py38 049594c Add py38 package metadata 98944bf Fix hacking min version to 3.0.1 4209178 Fix build of html docs Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 2 +- blazar_dashboard/api/client.py | 5 ++--- blazar_dashboard/content/hosts/forms.py | 9 +++++---- blazar_dashboard/content/hosts/workflows.py | 7 ++++--- blazar_dashboard/content/leases/forms.py | 11 ++++++----- blazar_dashboard/test/test_data/blazar_data.py | 4 ++-- lower-constraints.txt | 1 - releasenotes/notes/remove-use-of-eval-ef359dec791c97cd.yaml | 6 ++++++ releasenotes/source/conf.py | 9 +++++---- releasenotes/source/index.rst | 1 + releasenotes/source/ussuri.rst | 6 ++++++ setup.cfg | 1 + test-requirements.txt | 3 +-- tox.ini | 10 +++++----- 17 files changed, 55 insertions(+), 37 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b993b1e..6ec717e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ -hacking>=3.0,<3.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -13 +12,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -mock>=2.0.0 # BSD

1 0

bifrost 6.0.5 (stein)
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We are pleased to announce the release of: bifrost 6.0.5: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/bifrost For more details, please see below. 6.0.5 ^^^^^ Upgrade Notes ************* * Drops support for Ubuntu and openSUSE OS distributions, which are no longer able to successfully start the Ironic Inspector service. CentOS is still supported. Note that this affect the Stein release series only. Bug Fixes ********* * Forces using pyghmi==1.5.13 when creating a testing environment to fix every operation in ipmitool taking minutes. Changes in bifrost 6.0.4..6.0.5 ------------------------------- 84bbf92 [Train and older] Fix several CI problems 00fbdfb CI: reduce memory and disk for testing nodes Diffstat (except docs and test files) ------------------------------------- .../bifrost-create-vm-nodes/tasks/prepare_libvirt.yml | 7 +++++++ .../defaults/required_defaults_Debian_family.yml | 1 - .../defaults/required_defaults_RedHat_family.yml | 1 - .../defaults/required_defaults_Suse_family.yml | 1 - .../defaults/required_defaults_Ubuntu_16.04.yml | 1 - .../defaults/required_defaults_Ubuntu_16.04.yml | 1 - .../notes/drop-ubuntu-opensuse-7a284f20584e52d3.yaml | 6 ++++++ releasenotes/notes/pyghmi-version-a6e35ddc0792aa8d.yaml | 5 +++++ requirements.txt | 1 + scripts/collect-test-info.sh | 2 +- scripts/install-deps.sh | 13 +++++++------ scripts/test-bifrost.sh | 5 ++--- zuul.d/project.yaml | 16 ++++++++-------- 14 files changed, 39 insertions(+), 24 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7531fba..d4ec934 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9,0 +10 @@ setuptools!=24.0.0,!=34.0.0,!=34.0.1,!=34.0.2,!=34.0.3,!=34.1.0,!=34.1.1,!=34.2. +six>=1.11.0 # MIT

1 0

ironic-python-agent-builder 2.3.0
by no-reply＠openstack.org 14 Oct '20

14 Oct '20

We are thrilled to announce the release of: ironic-python-agent-builder 2.3.0: Tools and scripts to build Ironic Python Agent The source is available from: https://opendev.org/openstack/ironic-python-agent-builder Download the package from: https://tarballs.openstack.org/ironic-python-agent-builder/ For more details, please see below. 2.3.0 ^^^^^ New Features * Adds a new element "extra-hardware" for configuring extra hardware collection in the ramdisk. Changes in ironic-python-agent-builder 2.2.0..2.3.0 --------------------------------------------------- 5e72595 Use tinycore 11 to build tinyipa 8adfcc6 Add an element to install python-hardware 0cc5ba8 Advertise HTTPS in IPA ramdisk without Ironic assist 4d0547a tinyipa: use python 3 for building on all systems Diffstat (except docs and test files) ------------------------------------- dib/extra-hardware/README.rst | 21 ++++++ dib/extra-hardware/element-deps | 5 ++ .../package-installs-extra-hardware | 1 + .../80-extra-hardware-install | 21 ++++++ dib/extra-hardware/package-installs.yaml | 10 +++ dib/extra-hardware/pkg-map | 17 +++++ .../environment.d/20-disable-epel.bash | 4 - .../pre-finalise.d/10-configure-ipa-tls | 1 + .../notes/extra-hardware-73e3c9b5a0143bfa.yaml | 5 ++ tinyipa/build-instance-images.sh | 4 - tinyipa/build-tinyipa.sh | 9 +-- tinyipa/build_files/buildreqs.lst | 7 +- tinyipa/build_files/fakeuname | 2 +- tinyipa/build_files/finalreqs.lst | 8 +- tinyipa/finalise-tinyipa.sh | 4 - tinyipa/install-deps.sh | 4 +- tinyipa/patches/ipmitool-openssl.patch | 86 ++++++++++++++++++++++ tinyipa/patches/tce-load_squashfs.patch | 20 ----- zuul.d/ironic-python-agent-builder-jobs.yaml | 6 ++ zuul.d/project.yaml | 2 + 20 files changed, 188 insertions(+), 49 deletions(-)

1 0

ironic 16.0.1 (victoria)
by no-reply＠openstack.org 12 Oct '20

12 Oct '20

We enthusiastically announce the release of: ironic 16.0.1: OpenStack Bare Metal Provisioning This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 16.0.1 ^^^^^^ Bug Fixes * Fix an issue when using idrac with vmedia and trying to inspect a node. * Fixes wiping agent token on rebooting via API. Changes in ironic 16.0.0..16.0.1 -------------------------------- 8448d3909 Trivial: use the correct error handler for do_next_clean_step 3c4884903 Wiping agent tokens on reboot via API - take 2 dabb756b5 Fix inspection for idrac 0978e4a84 Update TOX_CONSTRAINTS_FILE for stable/victoria e941f5f92 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic/conductor/cleaning.py | 2 +- ironic/conductor/utils.py | 4 ++-- ironic/drivers/modules/image_utils.py | 8 ++++++++ .../notes/fix-inspection-for-idrac-34b3ea09452af8be.yaml | 4 ++++ releasenotes/notes/token-reboot-3f18cf73e4dd10d3.yaml | 4 ++++ tox.ini | 10 +++++----- 8 files changed, 30 insertions(+), 9 deletions(-)

1 0

ironic-python-agent 6.4.1 (victoria)
by no-reply＠openstack.org 12 Oct '20

12 Oct '20

We are amped to announce the release of: ironic-python-agent 6.4.1: Ironic Python Agent Ramdisk This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 6.4.1 ^^^^^ Bug Fixes * Fixes the "write_image" deploy step to actually check and return any errors during its execution. * Avoids a traceback when using "install_bootloader" with whole disk images. If the root UUID cannot be detected, don't try to call grub. Changes in ironic-python-agent 6.4.0..6.4.1 ------------------------------------------- 7306c73 Do not silently swallow errors in the write_image deploy step 7705b3f Log a warning of target_boot_mode does not match current boot mode 840e165 Don't try to call GRUB when root UUID is not provided 7bb40c0 Update TOX_CONSTRAINTS_FILE for stable/victoria d32aa6f Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_python_agent/extensions/base.py | 11 +++++++++++ ironic_python_agent/extensions/image.py | 15 +++++++++++++++ ironic_python_agent/hardware.py | 2 +- releasenotes/notes/prepare-image-49744276cef719d5.yaml | 5 +++++ releasenotes/notes/whole-disk-grub-0b1b8b9c44e31d28.yaml | 5 +++++ tox.ini | 2 +- 9 files changed, 65 insertions(+), 2 deletions(-)

1 0

oslo.privsep 1.33.5 (train)
by no-reply＠openstack.org 12 Oct '20

12 Oct '20

We are tickled pink to announce the release of: oslo.privsep 1.33.5: OpenStack library for privilege separation This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. Changes in oslo.privsep 1.33.4..1.33.5 -------------------------------------- ced0e7b Make compatible with msgpack 1.0.0 Diffstat (except docs and test files) ------------------------------------- oslo_privsep/comm.py | 18 ++++++++++++++++-- 1 file changed, 16 insertions(+), 2 deletions(-)

1 0

openstack-cyborg 5.0.0.0rc2 (victoria)
by no-reply＠openstack.org 10 Oct '20

10 Oct '20

Hello everyone, A new release candidate for openstack-cyborg for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/cyborg/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/openstack-cyborg/src/branch/stable/victoria Release notes for openstack-cyborg can be found at: https://docs.openstack.org/releasenotes/cyborg/

1 0

tacker 4.0.0.0rc3 (victoria)
by no-reply＠openstack.org 09 Oct '20

09 Oct '20

Hello everyone, A new release candidate for tacker for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/tacker/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/tacker/src/branch/stable/victoria Release notes for tacker can be found at: https://docs.openstack.org/releasenotes/tacker/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/tacker/+bugs and tag it *victoria-rc-potential* to bring it to the tacker release crew's attention.

1 0

swift 2.25.1 (ussuri)
by no-reply＠openstack.org 09 Oct '20

09 Oct '20

We are happy to announce the release of: swift 2.25.1: OpenStack Object Storage This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.25.1 ^^^^^^ Upgrade Notes ************* * **If your cluster has encryption enabled and is still running Swift under Python 2**, we recommend upgrading Swift *before* transitioning to Python 3. Otherwise, new writes to objects with non-ASCII characters in their paths may result in corrupted downloads when read from a proxy-server still running old swift on Python 2. See bug 1888037 for more information. * The above bug was caused by a difference in string types that resulted in ambiguity when decrypting. To prevent the ambiguity for new data, set "meta_version_to_write = 3" in your keymaster configuration *after* upgrading all proxy servers. If upgrading from Swift 2.20.0 or Swift 2.19.1 or earlier, set "meta_version_to_write = 1" in your keymaster configuration *prior* to upgrading. See the provided "keymaster.conf-sample" for more information about this setting. Bug Fixes ********* * Python 3 bug fixes: * Fixed an error when reading encrypted data that was written while running Python 2 for a path that includes non-ASCII characters. * Object expiration respects the "expiring_objects_container_divisor" config option. * "fallocate_reserve" may be specified as a percentage in more places. * The ETag-quoting middleware no longer raises TypeErrors. * Improved how containers reclaim deleted rows to reduce locking and object update throughput. * Fix a proxy-server error when retrieving erasure coded data when there are durable fragments but not enough to reconstruct. * Fixed some SignatureDoesNotMatch errors when using the AWS .NET SDK. * Region name config option is now respected when configuring S3 credential caching. Changes in swift 2.25.0..2.25.1 ------------------------------- be644a7a2 Authors/ChangeLog for 2.25.1 b00df2969 py3: Fix swift-dispersion-populate 093207f8a Fixing S3 credential caching region support a1e152e88 s3api: Allow lower-cased region name for AWS .NET SDK compatibility 8ed74c264 py3: Work with proper native string paths in crypto meta 0bdbbc4a6 Stop syncing empty suffixes list 5aefa86a1 py3: Stop munging RAW_PATH_INFO 2e53fa8ed Use latest pip in gate jobs bb0a283a0 Breakup reclaim into batches b40f25f9e py3: (Better) fix percentages in configs 5b1d50866 Fix stable gate 85593e8d8 py3: Fix expirer container generation 16f6af9c9 Switch to new grenade job name bb0e2f171 Use separate name for HeaderKeyDict var vs list of response headers cdc477e81 py3: Make etag-quoter work c46270ead Imported Translations from Zanata 0f4dfe779 func tests: Allow test_etag_quoter to be run multiple times 1155ef77f Make rolling-upgrade job non-voting 5f9048fc2 Update TOX_CONSTRAINTS_FILE for stable/ussuri 630fea683 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 6 +- AUTHORS | 1 + CHANGELOG | 34 + bin/swift-dispersion-populate | 9 +- etc/keymaster.conf-sample | 27 + etc/proxy-server.conf-sample | 12 + .../notes/2_25_1_release-a018fda22052deeb.yaml | 51 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 1698 -------------------- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 1351 ---------------- swift/cli/ringbuilder.py | 2 +- swift/common/db.py | 53 +- swift/common/middleware/crypto/keymaster.py | 61 +- swift/common/middleware/etag_quoter.py | 10 +- swift/common/middleware/s3api/s3request.py | 12 + swift/common/middleware/s3api/s3token.py | 4 +- swift/common/utils.py | 28 +- swift/common/wsgi.py | 34 +- swift/container/backend.py | 10 +- swift/locale/de/LC_MESSAGES/swift.po | 9 +- swift/obj/replicator.py | 3 + swift/proxy/controllers/obj.py | 10 +- test/functional/test_object.py | 14 +- test/unit/account/test_backend.py | 66 + .../common/middleware/crypto/test_keymaster.py | 227 ++- test/unit/common/middleware/s3api/test_s3token.py | 4 + test/unit/common/ring/test_builder.py | 2 +- test/unit/common/test_db.py | 4 +- test/unit/common/test_utils.py | 10 + test/unit/common/test_wsgi.py | 99 +- test/unit/container/test_backend.py | 93 ++ test/unit/obj/test_replicator.py | 37 +- test/unit/proxy/controllers/test_obj.py | 12 + tools/playbooks/common/install_dependencies.yaml | 8 +- tox.ini | 5 +- 35 files changed, 844 insertions(+), 3163 deletions(-)

1 0

swift 2.23.2 (train)
by no-reply＠openstack.org 09 Oct '20

09 Oct '20

We are amped to announce the release of: swift 2.23.2: OpenStack Object Storage This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.23.2 ^^^^^^ Upgrade Notes ************* * **If your cluster has encryption enabled and is still running Swift under Python 2**, we recommend upgrading Swift *before* transitioning to Python 3. Otherwise, new writes to objects with non-ASCII characters in their paths may result in corrupted downloads when read from a proxy-server still running old swift on Python 2. See bug 1888037 for more information. * The above bug was caused by a difference in string types that resulted in ambiguity when decrypting. To prevent the ambiguity for new data, set "meta_version_to_write = 3" in your keymaster configuration *after* upgrading all proxy servers. If upgrading from Swift 2.20.0 or Swift 2.19.1 or earlier, set "meta_version_to_write = 1" in your keymaster configuration *prior* to upgrading. See the provided "keymaster.conf-sample" for more information about this setting. Bug Fixes ********* * Python 3 bug fixes: * Fixed an error when reading encrypted data that was written while running Python 2 for a path that includes non-ASCII characters. * Fixed an issue when reading or writing objects with a content- type like "message/*". Previously, Swift would fail to respond. * Object expiration respects the "expiring_objects_container_divisor" config option. * "fallocate_reserve" may be specified as a percentage in more places. * The formpost middleware now works with unicode file names. * Certain S3 API headers are now lower case as they would be coming from AWS. * Improved how containers reclaim deleted rows to reduce locking and object update throughput. * Fix a proxy-server error when retrieving erasure coded data when there are durable fragments but not enough to reconstruct. * Fixed 500 from cname_lookup middleware. Previously, if the looked- up domain was used by domain_remap to update the request path, the server would respond Internal Error. * The bulk extract middleware once again allows clients to specify metadata (including expiration timestamps) for all objects in the archive. * Errors encountered while validating static symlink targets no longer cause BadResponseLength errors in the proxy-server. * Fixed some SignatureDoesNotMatch errors when using the AWS .NET SDK. * Various other minor bug fixes and improvements. Changes in swift 2.23.1..2.23.2 ------------------------------- ab921f22f ChangeLog for 2.23.2 91b2cd0ac py3: Fix swift-dispersion-populate 40b88bf53 s3api: Allow lower-cased region name for AWS .NET SDK compatibility eef87ee21 py3: Work with proper native string paths in crypto meta 69225ada6 Stop syncing empty suffixes list 19b909741 py3: Stop munging RAW_PATH_INFO 498454a13 Use latest pip in gate jobs 170dddaac Breakup reclaim into batches bb1263b8d py3: (Better) fix percentages in configs 9e2805bb7 Use ensure-pip role 71476cce2 py3: Fix expirer container generation 2e50b5817 Use separate name for HeaderKeyDict var vs list of response headers afb572f60 py3: stop barfing on message/rfc822 Content-Types 4be20e0d8 Ensure domain stored in memcached gets utf8 decoded on py2 b76ea70b0 tests: Use timedelta to adjust dates, not string manipulations 092054da6 s3api: Better handle 498/429 responses e413c650e Allow bulk to fwd some headers at tar extraction 48099c982 py3: Fix formpost unicode filename issues d1d0b706e account-server: Correctly handle containers starting with delimiter f98396e6a py3: Fix s3api header casing 4963aebd3 Update known-failures and config for up-rev'ed ceph/s3tests 289181ea3 Fix BadResponseLength error when creating symlink 6e4fe1d5f Switch py2 DSVM jobs to only run swift under py2 a96e8c05c Make our py2 func tests more explicitly py2 40f9b9068 Fix misleading error msg if swift.conf unreadable c23f4fe24 pin lower-constraints to run against python 2.7 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 54 +++-- CHANGELOG | 49 ++++ bin/swift-dispersion-populate | 9 +- etc/keymaster.conf-sample | 27 +++ etc/proxy-server.conf-sample | 12 + .../notes/2_23_2_release-03f1cc3f2e28c7b3.yaml | 69 ++++++ swift/account/backend.py | 2 +- swift/common/bufferedhttp.py | 2 + swift/common/db.py | 53 ++++- swift/common/header_key_dict.py | 37 +-- swift/common/http.py | 1 + swift/common/middleware/bulk.py | 11 + swift/common/middleware/cname_lookup.py | 17 +- swift/common/middleware/crypto/keymaster.py | 61 ++++- swift/common/middleware/formpost.py | 10 +- swift/common/middleware/s3api/s3request.py | 18 +- swift/common/middleware/s3api/s3response.py | 44 +--- swift/common/middleware/symlink.py | 12 +- swift/common/utils.py | 65 ++++-- swift/common/wsgi.py | 36 ++- swift/container/backend.py | 10 +- swift/obj/replicator.py | 3 + swift/proxy/controllers/obj.py | 10 +- test/unit/account/test_backend.py | 66 ++++++ test/unit/account/test_server.py | 51 +++++ .../common/middleware/crypto/test_keymaster.py | 227 ++++++++++++++++++- test/unit/common/middleware/s3api/__init__.py | 6 +- .../unit/common/middleware/s3api/test_s3request.py | 6 +- .../common/middleware/s3api/test_s3response.py | 18 ++ test/unit/common/middleware/test_bulk.py | 39 +++- test/unit/common/middleware/test_cname_lookup.py | 9 + test/unit/common/middleware/test_formpost.py | 124 +++++++++- test/unit/common/middleware/test_symlink.py | 15 ++ test/unit/common/ring/test_ring.py | 2 +- test/unit/common/test_db.py | 2 +- test/unit/common/test_utils.py | 26 ++- test/unit/common/test_wsgi.py | 99 +++++--- test/unit/container/test_backend.py | 93 ++++++++ test/unit/obj/test_replicator.py | 37 ++- test/unit/proxy/controllers/test_obj.py | 12 + test/unit/proxy/test_server.py | 11 +- tools/playbooks/common/install_dependencies.yaml | 8 +- tox.ini | 13 +- 45 files changed, 1515 insertions(+), 223 deletions(-)

1 0

horizon 18.6.1 (victoria)
by no-reply＠openstack.org 09 Oct '20

09 Oct '20

We are pumped to announce the release of: horizon 18.6.1: OpenStack Dashboard This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. 18.6.1 ^^^^^^ Upgrade Notes * Password forms in horizon now does not strip leading/trailing spaces included in input passwords. Previously horizon stripped leading/trailing spaces in input passwords but on the other hand keystone accepts leading/trailing spaces and it can be an issue when such passwords are set via keystone API. To handle this situation horizon no longer strips leading/trailing spaces in passwords. See [:bug:`1861224`] and the related mailing thread for more detail. (Note that this change is part of horizon 18.5.0 release but we forgot to mention it.) Changes in horizon 18.6.0..18.6.1 --------------------------------- 970969776 users: Correct lock_password status visibility (Yes/No) in user details 53aaa9177 Imported Translations from Zanata 8a834f7ac Imported Translations from Zanata 445a64437 Imported Translations from Zanata 4bfa767f0 Relnote on disabling stripping leading/trailing spaces in password 12967125c Update TOX_CONSTRAINTS_FILE for stable/victoria c410e860b Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../locale/en_GB/LC_MESSAGES/doc-configuration.po | 61 +- .../locale/id/LC_MESSAGES/doc-configuration.po | 61 +- .../dashboards/identity/users/tabs.py | 2 + .../dashboards/identity/users/views.py | 2 - .../locale/de/LC_MESSAGES/django.po | 42 +- .../locale/en_GB/LC_MESSAGES/django.po | 21 +- .../locale/id/LC_MESSAGES/django.po | 39 +- ...p-trailing-space-password-856bd5595938a094.yaml | 14 + .../source/locale/de/LC_MESSAGES/releasenotes.po | 4543 -------------- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 6110 ------------------- .../source/locale/id/LC_MESSAGES/releasenotes.po | 6248 -------------------- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 5592 ------------------ .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 1708 ------ .../locale/pt_BR/LC_MESSAGES/releasenotes.po | 3937 ------------ .../locale/zh_CN/LC_MESSAGES/releasenotes.po | 508 -- tox.ini | 4 +- 17 files changed, 231 insertions(+), 28662 deletions(-)

1 0

senlin-dashboard 2.0.0.0rc2 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

Hello everyone, A new release candidate for senlin-dashboard for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/senlin-dashboard/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/senlin-dashboard/src/branch/stable/victoria Release notes for senlin-dashboard can be found at: https://docs.openstack.org/releasenotes/senlin-dashboard/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/senlin-dashboard/+bugs and tag it *victoria-rc-potential* to bring it to the senlin-dashboard release crew's attention.

1 0

trove 14.0.0.0rc2 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

Hello everyone, A new release candidate for trove for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/trove/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/trove/src/branch/stable/victoria Release notes for trove can be found at: https://docs.openstack.org/releasenotes/trove/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/trove/+bugs and tag it *victoria-rc-potential* to bring it to the trove release crew's attention.

1 0

cloudkitty 13.0.0.0rc2 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

Hello everyone, A new release candidate for cloudkitty for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/cloudkitty/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria Release notes for cloudkitty can be found at: https://docs.openstack.org/releasenotes/cloudkitty/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/cloudkitty and tag it *victoria-rc-potential* to bring it to the cloudkitty release crew's attention.

1 0

puppet-sahara 17.4.1 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

We eagerly announce the release of: puppet-sahara 17.4.1: Puppet module for OpenStack Sahara This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-sahara Download the package from: https://tarballs.openstack.org/puppet-sahara/ Please report issues through: https://bugs.launchpad.net/puppet-sahara/+bugs For more details, please see below. 17.4.1 ^^^^^^ Upgrade Notes * The following ZeroMQ parameters in ::sahara are now removed: * "zeromq_bind_address" * "zeromq_contexts" * "zeromq_topic_backlog" * "zeromq_ipc_dir" * "zeromq_host" * "cast_timeout" Changes in puppet-sahara 17.4.0..17.4.1 --------------------------------------- d181b8b Prepare Victoria GA 06d36d3 Remove deprecated zmq parameters Diffstat (except docs and test files) ------------------------------------- manifests/init.pp | 30 ---------------------- metadata.json | 2 +- .../remove-deprecated-zmq-2930f5610c7a82932.yaml | 11 ++++++++ 3 files changed, 12 insertions(+), 31 deletions(-)

1 0

puppet-swift 17.4.1 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

We contentedly announce the release of: puppet-swift 17.4.1: Puppet module for OpenStack Swift This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-swift Download the package from: https://tarballs.openstack.org/puppet-swift/ Please report issues through: https://bugs.launchpad.net/puppet-swift/+bugs For more details, please see below. 17.4.1 ^^^^^^ Deprecation Notes * The "swift::proxy::authtoken::auth_plugin" parameter has been deprecated and will be removed in a future release. Use the "auth_type" parameter instead. Changes in puppet-swift 17.4.0..17.4.1 -------------------------------------- adcdf49 Prepare Victoria GA 5722f71 Replace deprecated auth_plugin by auth_type Diffstat (except docs and test files) ------------------------------------- manifests/proxy/authtoken.pp | 25 ++++++++++++++++++---- metadata.json | 2 +- .../authtoken-auth_type-c315ce3b88c9ef02.yaml | 6 ++++++ spec/classes/swift_proxy_authtoken_spec.rb | 6 ++++-- 4 files changed, 32 insertions(+), 7 deletions(-)

1 0

puppet-glance 17.5.0 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

We are satisfied to announce the release of: puppet-glance 17.5.0: Puppet module for OpenStack Glance This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. 17.5.0 ^^^^^^ New Features * Add new configuration option 'rbd_thin_provisioning' and 'filesystem_thin_provisioning' to rbd and filesystem backends to enable or not sparse upload, default are False. Changes in puppet-glance 17.4.0..17.5.0 --------------------------------------- 97add64 Prepare a new release for victoria cut off de74ce4 Prepare Victoria GA a7ed6f0 Follow redirects in glance_image provider da9e1a7 Add sparse image upload configuration parameters Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/glance_image/openstack.rb | 36 ++++++++++++++-------- manifests/backend/file.pp | 20 +++++++----- manifests/backend/multistore/file.pp | 14 ++++++--- manifests/backend/multistore/rbd.pp | 6 ++++ manifests/backend/rbd.pp | 6 ++++ metadata.json | 2 +- ...ble_handling_sparse_image-0a68af239b413df1.yaml | 6 ++++ spec/classes/glance_backend_file_spec.rb | 7 ++++- spec/classes/glance_backend_rbd_spec.rb | 3 ++ .../defines/glance_backend_multistore_file_spec.rb | 7 ++++- spec/defines/glance_backend_multistore_rbd_spec.rb | 3 ++ 11 files changed, 84 insertions(+), 26 deletions(-)

1 0

puppet-neutron 17.5.0 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

We are psyched to announce the release of: puppet-neutron 17.5.0: Puppet module for OpenStack Neutron This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-neutron Download the package from: https://tarballs.openstack.org/puppet-neutron/ Please report issues through: https://bugs.launchpad.net/puppet-neutron/+bugs For more details, please see below. 17.5.0 ^^^^^^ New Features * Add new configuration parameter explicitly_egress_direct for ML2 OVS agent When set to True, the accepted egress unicast traffic will not use action NORMAL. The accepted egress packets will be taken care of in the final egress tables direct output flows for unicast traffic so that operators can set customized integration bridge name in l3 agent configuration. This can be enabled on some nodes to prevent flooding on integration bridge. Changes in puppet-neutron 17.4.0..17.5.0 ---------------------------------------- 59d60747 Prepare a new release for victoria cut off d0bc82d8 Add agent/explicitly_egress_direct support Diffstat (except docs and test files) ------------------------------------- manifests/agents/ml2/ovs.pp | 8 ++++++++ metadata.json | 2 +- .../ovs_agent_explicitly_egress_direct-a5989bd33844c0f4.yaml | 9 +++++++++ spec/classes/neutron_agents_ml2_ovs_spec.rb | 11 +++++++++++ 4 files changed, 29 insertions(+), 1 deletion(-)

1 0

puppet-panko 17.5.0 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

We are amped to announce the release of: puppet-panko 17.5.0: Puppet module for OpenStack Panko This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-panko Download the package from: https://tarballs.openstack.org/puppet-panko/ Please report issues through: https://bugs.launchpad.net/puppet-panko/+bugs For more details, please see below. 17.5.0 ^^^^^^ New Features * Added events_delete_batch_size parameter to the expirer class to enable configuration of the parameter with same name. It serves the purpose of limiting number of deleted events in single purge run. Changes in puppet-panko 17.4.0..17.5.0 -------------------------------------- 7c09909 Prepare a new release for victoria cut off 66d1272 Prepare Victoria GA 89c3f38 Allow configuration of limit of batch size for exirer Diffstat (except docs and test files) ------------------------------------- manifests/expirer.pp | 23 +++++++++++++++------- metadata.json | 2 +- releasenotes/notes/batchsize-9f201b538828370d.yaml | 6 ++++++ spec/classes/panko_expirer_spec.rb | 7 +++++-- 4 files changed, 28 insertions(+), 10 deletions(-)

1 0

puppet-nova 17.5.0 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

We exuberantly announce the release of: puppet-nova 17.5.0: Puppet module for OpenStack Nova This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 17.5.0 ^^^^^^ New Features ************ * The new "nova::compute::libvirt::ovs_timeout" parameter has been added to support the ovs_timeout parameter in libvirtd.conf. * The following parameters have been added to the "nova::compute::libvirt" class. These parameters can be used to configure the corresponding parameters in nova, to set up emulated TPM support. * "swtpm_enabled" * "swtpm_user" * "swtpm_group" * The new "nova::scheduler::filter::shuffle_best_same_weighed_hosts" parameter has been added, to manage the corresponding parameter in nova-scheduler. * Add new parameter *reserved_host_disk*. This sets the amount of disk resources in MB to make them always available to host. * The new "nova::scheduler::filter::build_failure_weight_multiplier" parameter has been added, to support the corresponding parameter in nova-scheduler. * The new "nova::scheduler::filter::cross_cell_move_weight_multiplier" parameter has been added, to manage the corresponding parameter in nova-scheduler. * Add parameter *vgpu_types_device_addresses_mapping* to provide mapping for multiple vgpu devices and corresponding device addresses. Upgrade Notes ************* * The default value of the following parameters has been changed to $::os_service_default. The previous default, undef, can still be used to remove parameters from config file, but this behavior will be removed in a future release. Make sure that $::os_service_default is used instead of undef. * "nova::compute::libvirt::remove_unused_resized_minimum_age_second s" * "nova::compute::libvirt::remove_unused_base_images" * "nova::compute::libvirt::remove_unused_original_minimum_age_secon ds" * The deprecated "nova::image_service" parameter has been removed. Deprecation Notes ***************** * The "nova::compute::libvirt::libvirt_cpu_model" parameter has been deprecated and will be removed in a future release. Use the "cpu_models" parameter instead. * The following parameters in the "nova::compute::libvirt" class have been renamed to shorten names without "libvirt_" prefix. The old parameter names have been deprecated and will be removed in a future release. * "libvirt_virt_type" * "libvirt_cpu_mode" * "libvirt_cpu_model_extra_flags" * "libvirt_snapshot_image_format" * "libvirt_disk_cachemodes" * "libvirt_hw_disk_discard" * "libvirt_hw_machine_type" * "libvirt_inject_password" * "libvirt_inject_key" * "libvirt_inject_partition" * "libvirt_enabled_perf_events" * The "nova::compute::ironic::max_concurrent_builds" parameter has been deprecated and will be removed in a future release. Use the "nova::compute::max_concurrent_builds" parameter instead. * The "nova::compute::xenapi" class has been deprecated and will be removed in a future release. The XenApiDriver driver has already been deprecated in nova. * The "nova::compute::vmware" class has been deprecated and will be removed in a future release. The vmwareapi driver has already been deprecated in nova. * The following parmaeters in the "nova::scheduler::filter" class have been deprecated and will be removed in a future release. Use the new parameters in the "nova::scheduler" class. * "nova::scheduler::filter::scheduler_max_attempts" is replaced by "nova::scheduler::max_attempts" * "nova::scheduler::filter::periodic_task_interval" is replaced by "nova::scheduler::periodic_task_interval" * Deprecate parameter *enabled_vgpu_types* which was used for providing list of vgpu devices and instead use *vgpu_types_device_addresses_mapping*. Changes in puppet-nova 17.4.0..17.5.0 ------------------------------------- 1d848e5a Prepare a new release for victoria cut off ab9d6c53 Prepare Victoria GA d8d9e674 Add support for filter_scheduler/cross_cell_move_weight_multiplier 349d87d7 Add support for filter_scheduler/shuffle_best_same_weighed_hosts 2613b670 libvirt: Add support for ovs_timeout 248deef1 Migrate scheduler-generic parameters to nova::scheduler 09e13388 Add support for build_failure_weight_multiplier 7a3c226a Add `swtpm_enabled`, 'swtpm_user', 'swtpm_group' parameters e28dee84 Remove overrides about default values 73576db8 Support libvirt/cpu_models instead of libvirt/cpu_model e2daa4e2 Remove redundant "libvirt_" prefix from parameter names Diffstat (except docs and test files) ------------------------------------- manifests/compute.pp | 13 +- manifests/compute/libvirt.pp | 367 ++++++++++++++++----- manifests/scheduler.pp | 19 ++ manifests/scheduler/filter.pp | 66 +++- metadata.json | 2 +- ...ompute-libvirt-cpu_models-55755b320b7a0379.yaml | 6 + ...ute-libvirt-rename-params-663631444f02c946.yaml | 18 + .../libvirt-ovs_timeout-832a00ff71950dd3.yaml | 5 + .../notes/libvirt-swtpm-4306f35771b7d253.yaml | 10 + ...ameters-to-nova-scheduler-58e73aede02f712b.yaml | 11 + ...e_best_same_weighed_hosts-eb328a7d95a0081b.yaml | 6 + ...failure_weight_multiplier-a2d2c112d7bfaee4.yaml | 6 + ...ll_move_weight_multiplier-280eead3d1455f18.yaml | 6 + spec/classes/nova_compute_libvirt_spec.rb | 73 ++-- spec/classes/nova_compute_spec.rb | 6 +- spec/classes/nova_scheduler_filter_spec.rb | 39 ++- spec/classes/nova_scheduler_spec.rb | 18 + 17 files changed, 539 insertions(+), 132 deletions(-)

1 0

puppet-cloudkitty 6.5.0 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

We eagerly announce the release of: puppet-cloudkitty 6.5.0: Puppet module for OpenStack cloudkitty This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-cloudkitty Download the package from: https://tarballs.openstack.org/puppet-cloudkitty/ Please report issues through: https://bugs.launchpad.net/puppet-cloudkitty/+bugs For more details, please see below. 6.5.0 ^^^^^ New Features ************ * Add cloudkitty::fetcher::gnocchi class to configure the gnocchi tenant fetcher. * add class cloudkitty::storage::influxdb to configure influxdb storage Deprecation Notes ***************** * cloudkitty::tenant_fetcher_backend parameter is deprecated instead use cloudkitty::fetcher_backend Changes in puppet-cloudkitty 6.4.0..6.5.0 ----------------------------------------- dd32873 Prepare a new release for victoria cut off b5fcbab Prepare Victoria GA 9113348 add fetcher::gnocchi class to configure the gnocchi tenant fetcher d58a0a2 deprecate cloudkitty::tenant_fetcher_backend 8556da0 add class to configure influxdb storage configuration ed3e99b Change configuration section names Diffstat (except docs and test files) ------------------------------------- manifests/fetcher/gnocchi.pp | 57 ++++++++++++++++++++ manifests/init.pp | 27 +++++++--- manifests/processor.pp | 4 +- manifests/storage/influxdb.pp | 52 ++++++++++++++++++ metadata.json | 2 +- .../add_fetcher_gnocchi-cb561f1ee3371658.yaml | 3 ++ .../class_storage_influxdb-262bcc03108b69e1.yaml | 3 ++ ...te_tenant_fetcher_backend-c032fdfda0ea04c5.yaml | 3 ++ spec/classes/cloudkitty_fetcher_gnocchi_spec.rb | 63 ++++++++++++++++++++++ spec/classes/cloudkitty_init_spec.rb | 4 +- spec/classes/cloudkitty_processor_spec.rb | 4 +- spec/classes/cloudkitty_storage_influxdb_spec.rb | 63 ++++++++++++++++++++++ 12 files changed, 271 insertions(+), 14 deletions(-)

1 0

openstack-ansible 19.1.6 (stein)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

We are thrilled to announce the release of: openstack-ansible 19.1.6: Ansible playbooks for deploying OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 19.1.5..19.1.6 ------------------------------------------- 5a98afbf6 Bump SHAs for stable/stein 491d97d5e Bump SHAs for stable/stein Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 6 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 92 +++++++++++----------- 4 files changed, 51 insertions(+), 51 deletions(-)

1 0

openstack-ansible 20.1.7 (train)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

We are amped to announce the release of: openstack-ansible 20.1.7: Ansible playbooks for deploying OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 20.1.6..20.1.7 ------------------------------------------- 00b0887ac Remove opensuse periodic jobs from train branch a230cf7eb Bump SHAs for stable/train f4fefd625 Use branch specific test-ansible-deps da6bfe2e6 Revert "Remove nova_api_placement from inventory" 1b171f8fe Run tempest install when tempest_run is False 6bde4f936 Bump SHAs for stable/train Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 14 ++-- inventory/group_vars/haproxy/haproxy.yml | 3 + playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 2 +- .../defaults/repo_packages/openstack_services.yml | 88 +++++++++++----------- playbooks/os-tempest-install.yml | 3 +- tox.ini | 2 +- zuul.d/project-templates.yaml | 6 -- 8 files changed, 58 insertions(+), 62 deletions(-)

1 0

puppet-aodh 17.5.0 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

We joyfully announce the release of: puppet-aodh 17.5.0: Puppet module for OpenStack Aodh This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-aodh Download the package from: https://tarballs.openstack.org/puppet-aodh/ Please report issues through: https://bugs.launchpad.net/puppet-aodh/+bugs For more details, please see below. 17.5.0 ^^^^^^ New Features ************ * Now the "aodh::expirer" class installs aodh-expire package automatically. The status of package can be defined by the "package_ensure" parameter. Deprecation Notes ***************** * Usage of "undef" for the following parameters has been deprecated and it won't be replaced by the default value automatically in a future release. Set the exact value or use the parameters defined in the "aodh::param" class. * "wsgi::apache::aodh_wsgi_script_path" * "wsgi::apache::aodh_wsgi_script_source" Changes in puppet-aodh 17.4.0..17.5.0 ------------------------------------- abd842f Prepare new minor release for victoria ga 3357fe3 Prepare Victoria GA 0f63427 Fix inconsistent parameter name in aodh::params 007d3a8 Manage aodh-expirer package by aodh::expirer class fa753ea Remove redundant usage of undef f2b581e Fix rspec-puppet 2.7.1 support Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 60 +++++++++++----------- manifests/db.pp | 7 ++- manifests/evaluator.pp | 16 +++--- manifests/expirer.pp | 24 ++++++--- manifests/listener.pp | 16 +++--- manifests/notifier.pp | 16 +++--- manifests/params.pp | 4 +- manifests/wsgi/apache.pp | 19 +++++-- metadata.json | 2 +- .../notes/expirer-package-a318c98f11722956.yaml | 5 ++ .../wsgi-script-use-param-a9408ab5d05478e3.yaml | 10 ++++ spec/classes/aodh_api_spec.rb | 11 +--- spec/classes/aodh_evaluator_spec.rb | 11 +--- spec/classes/aodh_expirer_spec.rb | 22 ++++++++ spec/classes/aodh_listener_spec.rb | 11 +--- spec/classes/aodh_notifier_spec.rb | 11 +--- 16 files changed, 139 insertions(+), 106 deletions(-)

1 0

openstack-ansible 21.1.0 (ussuri)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

We exuberantly announce the release of: openstack-ansible 21.1.0: Ansible playbooks for deploying OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 21.0.1..21.1.0 ------------------------------------------- f4946d3ac Bump SHAs for stable/ussuri e87baa0c1 Run tempest install when tempest_run is False 7ad531dca Use branch specific test-ansible-deps 8dbc91574 Bump SHAs for stable/ussuri 18a59ea6c Add integrated test for Ubuntu using ML2/OVN driver 232bb43eb [doc] Fix deployment guide to correspond relevant OS 1d5a617cb Allow usage of haproxy_ssl_all_vips for services Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 16 ++-- deploy-guide/source/deploymenthost.rst | 13 +-- deploy-guide/source/targethosts-prepare.rst | 13 ++- etc/openstack_deploy/env.d/neutron_ovn.yml.example | 16 ++++ etc/openstack_deploy/env.d/nova_ovn.yml.example | 13 +++ inventory/group_vars/haproxy/haproxy.yml | 29 +++++++ playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 94 +++++++++++----------- playbooks/os-tempest-install.yml | 3 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 17 ++++ .../templates/user_variables_neutron_ovn.yml.j2 | 34 ++++++++ tox.ini | 2 +- zuul.d/jobs.yaml | 21 +++++ zuul.d/project-templates.yaml | 1 + 15 files changed, 204 insertions(+), 74 deletions(-)

1 0

neutron 17.0.0.0rc2 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

Hello everyone, A new release candidate for neutron for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/neutron/src/branch/stable/victoria Release notes for neutron can be found at: https://docs.openstack.org/releasenotes/neutron/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron/+bugs and tag it *victoria-rc-potential* to bring it to the neutron release crew's attention.

1 0

cinder 17.0.0.0rc2 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

Hello everyone, A new release candidate for cinder for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/cinder/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/cinder/src/branch/stable/victoria Release notes for cinder can be found at: https://docs.openstack.org/releasenotes/cinder/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/cinder/+bugs and tag it *victoria-rc-potential* to bring it to the cinder release crew's attention.

1 0

octavia-dashboard 6.0.0.0rc2 (victoria)
by no-reply＠openstack.org 08 Oct '20

08 Oct '20

Hello everyone, A new release candidate for octavia-dashboard for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/octavia-dashboard/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/octavia-dashboard/src/branch/stable/victoria Release notes for octavia-dashboard can be found at: https://docs.openstack.org/releasenotes/octavia-dashboard/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/octavia-dashboard and tag it *victoria-rc-potential* to bring it to the octavia-dashboard release crew's attention.

1 0

neutron 15.3.0 (train)
by no-reply＠openstack.org 07 Oct '20

07 Oct '20

We are excited to announce the release of: neutron 15.3.0: OpenStack Networking This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 15.3.0 ^^^^^^ New Features * New config option "keepalived_use_no_track" was added. If keepalived version used on the deployment does not support "no_track" flag in its config file (e.g. keepalived 1.x), this option should be set to "False". Default value of this option is "True". Changes in neutron 15.2.0..15.3.0 --------------------------------- fa5967012d Drop invalid rootwrap filters d351ba1137 "ping"/"ping6" command support in rootwrap filters ba65cdc817 Remove "vf_management" and "vf_extended_management" checks 13e32a4e4d Don't raise FileNotFoundError during disabling keepalived a96ad52c7e Not remove the running router when MQ is unreachable b934ae57f1 Handle properly existing LLA address during l3 agent restart b2b9fd66b9 Add 'keepalived_use_no_track' config option a95ddf8ae8 Fix deletion of subnet_id from pd_subnets 2ee84a52f7 Fix get_ipv6_llas method in the interface driver 40a6b4b9e6 Fix port can not be created with the sg of other project Diffstat (except docs and test files) ------------------------------------- etc/neutron/rootwrap.d/debug.filters | 6 +- neutron/agent/l3/agent.py | 3 - neutron/agent/l3/ha_router.py | 5 +- neutron/agent/l3/router_info.py | 2 +- neutron/agent/linux/ip_lib.py | 3 + neutron/agent/linux/keepalived.py | 5 +- neutron/agent/linux/pd.py | 25 +++-- neutron/cmd/sanity/checks.py | 2 + neutron/cmd/sanity_check.py | 4 - neutron/conf/agent/l3/config.py | 6 + neutron/db/securitygroups_db.py | 3 +- .../functional/agent/l3/test_legacy_router.py | 2 +- .../functional/agent/linux/test_keepalived.py | 2 + ...se_no_track-config-option-4fa10304ee2960e6.yaml | 7 ++ 24 files changed, 381 insertions(+), 72 deletions(-)

1 0

neutron 14.4.0 (stein)
by no-reply＠openstack.org 07 Oct '20

07 Oct '20

We are satisfied to announce the release of: neutron 14.4.0: OpenStack Networking This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 14.4.0 ^^^^^^ New Features * New config option "keepalived_use_no_track" was added. If keepalived version used on the deployment does not support "no_track" flag in its config file (e.g. keepalived 1.x), this option should be set to "False". Default value of this option is "True". Changes in neutron 14.3.1..14.4.0 --------------------------------- b3582e1ae3 Drop invalid rootwrap filters 201c27202c Replace ctype.CDLL by ctypes.PyDLL in linux.ip_lib e42c15de3b Load the glibc library only once for Pyroute2 6f5ebbd3de "ping"/"ping6" command support in rootwrap filters 97f6e2569e Use dict .get() to avoid a KeyError in the segment plugin 0b1fd4fc26 String to byte conversion should provide the encoding type 5656f3cc89 Don't raise FileNotFoundError during disabling keepalived 71f22834f2 Not remove the running router when MQ is unreachable 2400a2b15b Handle properly existing LLA address during l3 agent restart abd4e84925 Add 'keepalived_use_no_track' config option 907bd92595 Fix deletion of subnet_id from pd_subnets 3f3e5d619f Fix get_ipv6_llas method in the interface driver aaf87aeb55 [OVS][FW] Remote SG IDs left behind when a SG is removed 494f9751d3 Fix port can not be created with the sg of other project Diffstat (except docs and test files) ------------------------------------- etc/neutron/rootwrap.d/debug.filters | 6 +- neutron/agent/l3/agent.py | 3 - neutron/agent/l3/ha_router.py | 5 +- neutron/agent/l3/router_info.py | 2 +- neutron/agent/linux/ip_lib.py | 3 + neutron/agent/linux/keepalived.py | 5 +- .../agent/linux/openvswitch_firewall/firewall.py | 100 ++++++++++++----- neutron/agent/linux/pd.py | 25 +++-- neutron/cmd/sanity/checks.py | 2 + neutron/conf/agent/l3/config.py | 6 + neutron/db/securitygroups_db.py | 3 +- neutron/privileged/agent/linux/ip_lib.py | 21 +++- neutron/services/segments/plugin.py | 23 ++-- .../functional/agent/l3/test_legacy_router.py | 2 +- .../functional/agent/linux/test_keepalived.py | 2 + .../linux/openvswitch_firewall/test_firewall.py | 116 +++++++++++++++---- ...se_no_track-config-option-4fa10304ee2960e6.yaml | 7 ++ 28 files changed, 586 insertions(+), 114 deletions(-)

1 0

neutron 16.2.0 (ussuri)
by no-reply＠openstack.org 07 Oct '20

07 Oct '20

We are stoked to announce the release of: neutron 16.2.0: OpenStack Networking This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 16.2.0 ^^^^^^ New Features * New config option "keepalived_use_no_track" was added. If keepalived version used on the deployment does not support "no_track" flag in its config file (e.g. keepalived 1.x), this option should be set to "False". Default value of this option is "True". Changes in neutron 16.1.0..16.2.0 --------------------------------- 0621e9d29e ovn migration: Fix neutron server container name 93459c1c88 ovn: Use new OVS commit hash 4fa690c1dd [OVN] Fix test_add_interface_in_use negative test addc31d5b1 Remove "vf_management" and "vf_extended_management" checks 8ba796ea7f Ensure fip ip rules deleted when fip removed cd8fbdc04e Remove some unnecessary usages of verify() 7fd54d0876 Don't raise FileNotFoundError during disabling keepalived 5eeb98cdb5 Not remove the running router when MQ is unreachable b7d3a9471c Handle properly existing LLA address during l3 agent restart 43079e3fc9 Add 'keepalived_use_no_track' config option 29b4f9561c Fix deletion of subnet_id from pd_subnets c13d6f527c [OVN] Use the Chassis_Private table for agents healthcheck 4a2cc2beec Clean up some of the OVN agent API methods 49ae201b3e Fix get_ipv6_llas method in the interface driver 423e3907bc [ovn]: gracefully handle logical switch ports with tag set to None Diffstat (except docs and test files) ------------------------------------- devstack/lib/ovs | 2 +- neutron/agent/l3/agent.py | 3 - neutron/agent/l3/dvr_fip_ns.py | 3 + neutron/agent/l3/dvr_local_router.py | 27 ++++- neutron/agent/l3/ha_router.py | 5 +- neutron/agent/l3/router_info.py | 2 +- neutron/agent/linux/ip_lib.py | 3 + neutron/agent/linux/keepalived.py | 5 +- neutron/agent/linux/pd.py | 25 +++-- neutron/agent/ovn/metadata/agent.py | 52 ++++++--- neutron/agent/ovn/metadata/ovsdb.py | 6 +- neutron/cmd/sanity/checks.py | 2 + neutron/cmd/sanity_check.py | 4 - neutron/conf/agent/l3/config.py | 6 + neutron/plugins/ml2/drivers/ovn/agent/__init__.py | 0 .../plugins/ml2/drivers/ovn/agent/neutron_agent.py | 124 ++++++++++++++++++++ .../ml2/drivers/ovn/mech_driver/mech_driver.py | 111 ++++++------------ .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 94 ++++++---------- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 6 - .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 5 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 2 + neutron/services/ovn_l3/plugin.py | 4 +- .../functional/agent/linux/test_keepalived.py | 2 + .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 12 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 6 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 54 ++++----- ...se_no_track-config-option-4fa10304ee2960e6.yaml | 7 ++ .../playbooks/roles/migration/tasks/sync-dbs.yml | 2 +- zuul.d/base.yaml | 4 +- zuul.d/tempest-singlenode.yaml | 8 +- 39 files changed, 666 insertions(+), 270 deletions(-)

1 0

heat-dashboard 3.0.1 (ussuri)
by no-reply＠openstack.org 07 Oct '20

07 Oct '20

We eagerly announce the release of: heat-dashboard 3.0.1: Heat Management Dashboard This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/heat-dashboard Download the package from: https://tarballs.openstack.org/heat-dashboard/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/heat- dashboard For more details, please see below. Changes in heat-dashboard 3.0.0..3.0.1 -------------------------------------- 3469cc9 Move image_field_data method in-tree 0039b79 Update hacking for Python3 27d1995 Use unittest.mock instead of third party mock 0d76fe7 Update TOX_CONSTRAINTS_FILE for stable/ussuri fd82268 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- heat_dashboard/content/stacks/forms.py | 33 +++++++++++++++++++++++- heat_dashboard/test/helpers.py | 2 +- lower-constraints.txt | 12 +++------ requirements.txt | 2 +- test-requirements.txt | 3 +-- tox.ini | 13 +++++----- 10 files changed, 49 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index aff7b71..b737e47 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +15 @@ python-heatclient>=1.10.0 # Apache-2.0 -horizon>=17.1.0 # Apache-2.0 +horizon>=18.3.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 5043ae3..89058eb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0,<3.1.0 # Apache-2.0 @@ -15 +14,0 @@ flake8-import-order==0.12 # LGPLv3 -mock>=2.0.0 # BSD

1 0

openstack-heat 14.1.0 (ussuri)
by no-reply＠openstack.org 07 Oct '20

07 Oct '20

We are jazzed to announce the release of: openstack-heat 14.1.0: OpenStack Orchestration This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/openstack-heat Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. Changes in openstack-heat 14.0.0..14.1.0 ---------------------------------------- cdfb5df55 Add U release codename for docs generation 9d9ca3607 Check external resources after creation 1f66e61ca Don't check stack staus for already migrated stacks 81a7f1e79 Check for nova exception.Conflict rather than task_state 1e4488b70 Use never expiring alarm_url for resource attributes 95296e55c Don't store signal_url for ec2 signaling of deployments 28ae09970 Add native grenade zuul v3 jobs 2c3a95051 Allow scale-down of ASG as part of update 3c7701170 Fix hacking min version to 3.0.1 2e6ae7393 Monkey patch original current_thread _active 5bc6787a8 Imported Translations from Zanata a24a2265d Update TOX_CONSTRAINTS_FILE for stable/ussuri 52840e6bc Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 42 +- heat/cmd/all.py | 6 + heat/cmd/api.py | 6 + heat/cmd/api_cfn.py | 6 + heat/cmd/engine.py | 6 + heat/engine/clients/os/nova.py | 11 +- heat/engine/resource.py | 2 +- .../resources/aws/autoscaling/autoscaling_group.py | 4 + .../resources/aws/autoscaling/scaling_policy.py | 5 +- heat/engine/resources/openstack/cinder/volume.py | 51 +- .../resources/openstack/heat/instance_group.py | 20 +- .../resources/openstack/heat/scaling_policy.py | 5 +- .../engine/resources/openstack/mistral/workflow.py | 5 +- heat/engine/resources/openstack/sahara/job.py | 5 +- heat/engine/resources/signal_responder.py | 22 +- heat/engine/resources/wait_condition.py | 9 + heat/engine/service.py | 8 +- heat/locale/de/LC_MESSAGES/heat.po | 10 +- .../heat/test_instance_group_update_policy.py | 1 + playbooks/devstack/grenade/post.yaml | 14 - playbooks/devstack/grenade/run.yaml | 61 - playbooks/devstack/multinode-networking/pre.yaml | 3 - .../locale/en_GB/LC_MESSAGES/releasenotes.po | 2219 -------------------- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 71 - .../source/locale/ja/LC_MESSAGES/releasenotes.po | 854 -------- .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 137 -- test-requirements.txt | 2 +- tox.ini | 4 +- 39 files changed, 202 insertions(+), 3510 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 9e9a488a4..63e14aa9e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ -hacking>=3.0,<3.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0

1 0

openstack-heat 12.2.0 (stein)
by no-reply＠openstack.org 07 Oct '20

07 Oct '20

We are chuffed to announce the release of: openstack-heat 12.2.0: OpenStack Orchestration This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/openstack-heat Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. Changes in openstack-heat 12.1.0..12.2.0 ---------------------------------------- e6598a50d Use never expiring alarm_url for resource attributes 913c428b3 Don't store signal_url for ec2 signaling of deployments 0f8a34ff0 Allow scale-down of ASG as part of update Diffstat (except docs and test files) ------------------------------------- .../resources/aws/autoscaling/autoscaling_group.py | 4 ++ .../resources/aws/autoscaling/scaling_policy.py | 5 +- .../resources/openstack/heat/instance_group.py | 20 +++++-- .../resources/openstack/heat/scaling_policy.py | 5 +- .../engine/resources/openstack/mistral/workflow.py | 5 +- heat/engine/resources/openstack/sahara/job.py | 5 +- heat/engine/resources/signal_responder.py | 22 ++++--- heat/engine/resources/wait_condition.py | 9 +++ .../heat/test_instance_group_update_policy.py | 1 + 15 files changed, 102 insertions(+), 66 deletions(-)

1 0

heat-dashboard 2.0.2 (train)
by no-reply＠openstack.org 07 Oct '20

07 Oct '20

We are delighted to announce the release of: heat-dashboard 2.0.2: Heat Management Dashboard This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/heat-dashboard Download the package from: https://tarballs.openstack.org/heat-dashboard/ Please report issues through: https://bugs.launchpad.net/heat-dashboard/+bugs For more details, please see below. Changes in heat-dashboard 2.0.1..2.0.2 -------------------------------------- 7d643ab Move image_field_data method in-tree Diffstat (except docs and test files) ------------------------------------- heat_dashboard/content/stacks/forms.py | 33 ++++++++++++++++++++++++++++++++- 1 file changed, 32 insertions(+), 1 deletion(-)

1 0

heat-dashboard 1.5.1 (stein)
by no-reply＠openstack.org 07 Oct '20

07 Oct '20

We are pleased to announce the release of: heat-dashboard 1.5.1: Heat Management Dashboard This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/heat-dashboard Download the package from: https://tarballs.openstack.org/heat-dashboard/ Please report issues through: https://bugs.launchpad.net/heat-dashboard/+bugs For more details, please see below. Changes in heat-dashboard 1.5.0..1.5.1 -------------------------------------- 7269ad1 Enforces unicode decoding of data d1fc0ac Limit esquery to fix gates f539152 Imported Translations from Zanata 34aba82 Imported Translations from Zanata 88bddbf OpenDev Migration Patch d24f8a8 Imported Translations from Zanata 9f75cf5 Update UPPER_CONSTRAINTS_FILE for stable/stein 401ab0b Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 4 +- .zuul.yaml | 4 +- heat_dashboard/content/stacks/forms.py | 18 ++-- heat_dashboard/locale/fr/LC_MESSAGES/django.po | 29 ++++++- heat_dashboard/locale/fr/LC_MESSAGES/djangojs.po | 26 +++++- heat_dashboard/locale/zh_CN/LC_MESSAGES/django.po | 11 ++- .../locale/zh_CN/LC_MESSAGES/djangojs.po | 63 +++++++++++++- package.json | 1 + .../source/locale/cs/LC_MESSAGES/releasenotes.po | 18 ---- .../source/locale/de/LC_MESSAGES/releasenotes.po | 99 ---------------------- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 94 -------------------- .../source/locale/es/LC_MESSAGES/releasenotes.po | 21 ----- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 22 ----- .../source/locale/id/LC_MESSAGES/releasenotes.po | 95 --------------------- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 63 -------------- .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 96 --------------------- .../locale/pt_BR/LC_MESSAGES/releasenotes.po | 95 --------------------- .../source/locale/ru/LC_MESSAGES/releasenotes.po | 22 ----- .../locale/zh_CN/LC_MESSAGES/releasenotes.po | 25 ------ tox.ini | 6 +- 21 files changed, 138 insertions(+), 678 deletions(-)

1 0

openstack-heat 13.1.0 (train)
by no-reply＠openstack.org 07 Oct '20

07 Oct '20

We are amped to announce the release of: openstack-heat 13.1.0: OpenStack Orchestration This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/openstack-heat Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. Changes in openstack-heat 13.0.2..13.1.0 ---------------------------------------- d5bb97b6a Check external resources after creation ba6218cd3 Don't check stack staus for already migrated stacks 991197e20 Check for nova exception.Conflict rather than task_state eb8bfd530 Use never expiring alarm_url for resource attributes a4346b328 Don't store signal_url for ec2 signaling of deployments e4c940089 [stable/train] Allow resizing of instances on same host a0ff3081e Allow scale-down of ASG as part of update Diffstat (except docs and test files) ------------------------------------- heat/engine/clients/os/nova.py | 11 +++- heat/engine/resource.py | 2 +- .../resources/aws/autoscaling/autoscaling_group.py | 4 ++ .../resources/aws/autoscaling/scaling_policy.py | 5 +- heat/engine/resources/openstack/cinder/volume.py | 51 +++------------- .../resources/openstack/heat/instance_group.py | 20 +++++-- .../resources/openstack/heat/scaling_policy.py | 5 +- .../engine/resources/openstack/mistral/workflow.py | 5 +- heat/engine/resources/openstack/sahara/job.py | 5 +- heat/engine/resources/signal_responder.py | 22 ++++--- heat/engine/resources/wait_condition.py | 9 +++ heat/engine/service.py | 8 +-- .../heat/test_instance_group_update_policy.py | 1 + playbooks/devstack/grenade/run.yaml | 1 + 23 files changed, 148 insertions(+), 119 deletions(-)

1 0

python-heatclient 1.18.1 (train)
by no-reply＠openstack.org 07 Oct '20

07 Oct '20

We jubilantly announce the release of: python-heatclient 1.18.1: OpenStack Orchestration API Client Library This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/python-heatclient Download the package from: https://pypi.org/project/python-heatclient Please report issues through: https://bugs.launchpad.net/python-heatclient/+bugs For more details, please see below. Changes in python-heatclient 1.18.0..1.18.1 ------------------------------------------- dd6560f Ignore not found when delete in test 56e5188 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 03c90bd Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 6 +++--- 3 files changed, 12 insertions(+), 4 deletions(-)

1 0

python-heatclient 1.17.1 (stein)
by no-reply＠openstack.org 07 Oct '20

07 Oct '20

We are overjoyed to announce the release of: python-heatclient 1.17.1: OpenStack Orchestration API Client Library This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-heatclient Download the package from: https://pypi.org/project/python-heatclient Please report issues through: https://bugs.launchpad.net/python-heatclient/+bugs For more details, please see below. Changes in python-heatclient 1.17.0..1.17.1 ------------------------------------------- 39cda16 Set Content-Type header explictly for SessionClient 37a531f OpenDev Migration Patch b03888f Replace openstack.org git:// URLs with https:// f1c321f Update UPPER_CONSTRAINTS_FILE for stable/stein 50fc780 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.yaml | 2 +- heatclient/common/http.py | 3 +++ playbooks/devstack/functional-run.yaml | 8 ++++---- tox.ini | 6 +++--- 6 files changed, 19 insertions(+), 11 deletions(-)

1 0

karbor-dashboard 1.5.1 (victoria)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are jazzed to announce the release of: karbor-dashboard 1.5.1: Karbor Dashboard This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/karbor-dashboard Download the package from: https://tarballs.openstack.org/karbor-dashboard/ Please report issues through: https://bugs.launchpad.net/karbor-dashboard/+bugs For more details, please see below. Changes in karbor-dashboard 1.5.0..1.5.1 ---------------------------------------- 74badc3 Add Python3 victoria unit tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

heat-agents 2.1.1 (victoria)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are overjoyed to announce the release of: heat-agents 2.1.1: heat-agents This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/heat-agents Download the package from: https://tarballs.openstack.org/heat-agents/ Please report issues through: https://bugs.launchpad.net/heat-agents/+bugs For more details, please see below. Changes in heat-agents 2.1.0..2.1.1 ----------------------------------- cde92ce Add Python3 victoria unit tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

blazar-dashboard 2.0.1 (train)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are excited to announce the release of: blazar-dashboard 2.0.1: Horizon plugin for the Blazar Reservation Service for OpenStack This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/blazar-dashboard Download the package from: https://tarballs.openstack.org/blazar-dashboard/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 2.0.1 ^^^^^ Security Issues * Uses "json.loads` instead of ``eval()" for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under. Changes in blazar-dashboard 2.0.0..2.0.1 ---------------------------------------- 63e9c5d Use json.loads instead of eval for JSON parsing e39e27a Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 75b32f1 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + blazar_dashboard/api/client.py | 3 ++- blazar_dashboard/content/hosts/forms.py | 7 ++++--- blazar_dashboard/content/hosts/workflows.py | 7 ++++--- blazar_dashboard/content/leases/forms.py | 7 ++++--- blazar_dashboard/test/test_data/blazar_data.py | 4 ++-- releasenotes/notes/remove-use-of-eval-ef359dec791c97cd.yaml | 6 ++++++ tox.ini | 6 +++--- 8 files changed, 26 insertions(+), 15 deletions(-)

1 0

blazar-dashboard 1.3.1 (stein)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are excited to announce the release of: blazar-dashboard 1.3.1: Horizon plugin for the Blazar Reservation Service for OpenStack This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/blazar-dashboard Download the package from: https://tarballs.openstack.org/blazar-dashboard/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 1.3.1 ^^^^^ Security Issues * Uses "json.loads` instead of ``eval()" for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under. Changes in blazar-dashboard 1.3.0..1.3.1 ---------------------------------------- ee10b2c Use json.loads instead of eval for JSON parsing 17b53e9 OpenDev Migration Patch f1b8b15 Update UPPER_CONSTRAINTS_FILE for stable/stein f5e6a4e Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- blazar_dashboard/api/client.py | 3 ++- blazar_dashboard/content/hosts/forms.py | 7 ++++--- blazar_dashboard/content/hosts/workflows.py | 7 ++++--- blazar_dashboard/content/leases/forms.py | 7 ++++--- blazar_dashboard/test/test_data/blazar_data.py | 4 ++-- releasenotes/notes/remove-use-of-eval-ef359dec791c97cd.yaml | 6 ++++++ tox.ini | 6 +++--- 8 files changed, 27 insertions(+), 16 deletions(-)

1 0

blazar-dashboard 3.0.1 (ussuri)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

We are stoked to announce the release of: blazar-dashboard 3.0.1: Horizon plugin for the Blazar Reservation Service for OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/blazar-dashboard Download the package from: https://tarballs.openstack.org/blazar-dashboard/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 3.0.1 ^^^^^ Security Issues * Uses "json.loads` instead of ``eval()" for JSON parsing, which could allow users of the Blazar dashboard to trigger code execution on the Horizon host as the user the Horizon service runs under. Changes in blazar-dashboard 3.0.0..3.0.1 ---------------------------------------- 168b4ae Use json.loads instead of eval for JSON parsing 1c2fc55 Update TOX_CONSTRAINTS_FILE for stable/ussuri 70c77cc Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + blazar_dashboard/api/client.py | 3 ++- blazar_dashboard/content/hosts/forms.py | 7 ++++--- blazar_dashboard/content/hosts/workflows.py | 7 ++++--- blazar_dashboard/content/leases/forms.py | 7 ++++--- blazar_dashboard/test/test_data/blazar_data.py | 4 ++-- releasenotes/notes/remove-use-of-eval-ef359dec791c97cd.yaml | 6 ++++++ tox.ini | 8 ++++---- 8 files changed, 27 insertions(+), 16 deletions(-)

1 0

blazar-dashboard 4.0.0.0rc2 (victoria)
by no-reply＠openstack.org 06 Oct '20

06 Oct '20

Hello everyone, A new release candidate for blazar-dashboard for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/blazar-dashboard/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/blazar-dashboard/src/branch/stable/victoria Release notes for blazar-dashboard can be found at: https://docs.openstack.org/releasenotes/blazar-dashboard/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/blazar/+bugs and tag it *victoria-rc-potential* to bring it to the blazar-dashboard release crew's attention.

1 0

os-collect-config 11.0.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We high-spiritedly announce the release of: os-collect-config 11.0.1: Collect and cache metadata, run hooks on changes. This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. 11.0.1 ^^^^^^ Upgrade Notes * Python 2.7 support has been dropped. Last release os-collect- config support py2.7 is OpenStack Train. The minimum version of Python now supported by os-collect-config is Python 3.6. Changes in os-collect-config 11.0.0..11.0.1 ------------------------------------------- 24245ce Use unittest.mock instead of mock ab98550 Drop python version constraints for sphinx d1607f9 Add tls proxy support for Zaqar 6dd0e53 Stop testing python2.7 Diffstat (except docs and test files) ------------------------------------- os_collect_config/zaqar.py | 14 +++++++++++++- .../notes/drop-python2.7-support-f133b716812d39f0.yaml | 6 ++++++ setup.cfg | 2 -- test-requirements.txt | 4 +--- tox.ini | 6 ++---- zuul.d/layout.yaml | 3 --- 10 files changed, 38 insertions(+), 17 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a498fff..1cb1476 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +7,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0.0 # BSD @@ -10,2 +9 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2 # BSD

1 0

os-net-config 12.3.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are satisfied to announce the release of: os-net-config 12.3.2: OpenStack network configuration This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 12.3.1..12.3.2 --------------------------------------- 6238283 Add NIC Partitioning support for Mellanox VFs edad325 Avoid openvswitch restarts during re-run Diffstat (except docs and test files) ------------------------------------- os_net_config/cli.py | 8 +++++++- os_net_config/utils.py | 26 +++++++++++++++++++------- 3 files changed, 47 insertions(+), 8 deletions(-)

1 0

puppet-tripleo 12.4.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We eagerly announce the release of: puppet-tripleo 12.4.1: Puppet module for OpenStack TripleO This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/puppet-tripleo Download the package from: https://tarballs.openstack.org/puppet-tripleo/ Please report issues through: https://bugs.launchpad.net/puppet-tripleo/+bugs For more details, please see below. Changes in puppet-tripleo 12.4.0..12.4.1 ---------------------------------------- 49ca4208 Bump metadata for ussuri 12.4.1 release 3ffaf2d7 Replace union to create tcp-check list for redis a365e541 Change branch name for selinux_core puppet module e8dfd034 Fix tls - zaqar wss default port e75842e5 HA: ensure scaling up galera does not cause promotion errors d8fa754a Fix typos, extreamio and xtreamio to xtremio c3e86ea6 Make sure python3-novaclient is installed before creating fence_compute 16bb6f5d Use pcs 0.9 style authkey/remotes when doing an upgrade 37b8666f Add certmonger-etcd-refresh.sh script ef7818ec Fix up cluster_setup_extras usage Diffstat (except docs and test files) ------------------------------------- Puppetfile_extras | 2 +- files/certmonger-etcd-refresh.sh | 25 ++++++++++++ lib/puppet/functions/pacemaker_bundle_replicas.rb | 23 +++++++++++ manifests/certmonger/etcd.pp | 8 +++- manifests/haproxy.pp | 23 ++++++----- manifests/profile/base/cinder/volume.pp | 4 +- manifests/profile/base/pacemaker.pp | 44 +++++++++++++++++----- manifests/profile/base/pacemaker_remote.pp | 8 ++++ .../profile/pacemaker/database/mysql_bundle.pp | 19 +++++++++- metadata.json | 2 +- ...ipleo_profile_base_cinder_xtremio_iscsi_spec.rb | 2 +- 11 files changed, 132 insertions(+), 28 deletions(-)

1 0

tripleo-heat-templates 12.4.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We jubilantly announce the release of: tripleo-heat-templates 12.4.1: Heat templates for deploying OpenStack with OpenStack. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.4.1 ^^^^^^ New Features ************ * Adds a new ContainerNovaLibvirtPidsLimit parameter in order to set the PIDs limit for nova_libvirt container. Defaults to 65536, set to 0 for unlimited. * The following parameters were added to support configuration of gnocchi nfs backend. * GnocchiNfsEnabled * GnocchiNfsShare * GnocchiNfsOptions * Add the NovaImageCacheTTL to the nova compute service. This exposes the remove_unused_original_minimum_age_seconds from nova.conf which controls the time (in seconds) that nova compute should continue caching an image once it is no longer used by and instances on the host. Defaults to 86400 (24hrs) * When SwiftRawDisks is set, try to mount the disks using uuids instead of paths. This makes mounts more stable, eg. if a kernel gets updates and device orders are changed. * A new Heat parameter 'ZaqarWsTimeout' exposes the Puppet variable 'tripleo::haproxy::zaqar_ws_timeout_tunnel'. This allows operators to configure the Mistral API timeout. It currently defaults to four hours. Upgrade Notes ************* * The CIDR for the StorageNFS network in the sample network_data_ganesha.yaml file has been modified to provide more usable IPs for the corresponding Neutron overcloud StorageNFS provider network. Since the CIDR of an existing network cannot be modified, deployments with existing StorageNFS networks should be sure to customize the StorageNFS network definition to use the same CIDR as that in their existing deployment in order to avoid a heat resource failure when updating or upgrading the overcloud. Deprecation Notes ***************** * As the fast forward upgrade workflow to skip multiple releases now relies on the very same upgrade_tasks, there is no need to mantain the fast_forward_upgrade_tasks, as well as any of its references. Bug Fixes ********* * Ansible GroupVars incorrectly keept a single subnet prefix per- network. This caused a problem when multiple subnets using different subnet prefixes where defined. Resulting in the wrong subnet prefix being referenced in the NetworkConfig for roles. AnsibleHostVars stores networks subnet prefixes instead. See bug: 1895899 (https://bugs.launchpad.net/tripleo/+bug/1895899) * Fixed issue in the sample network_data_ganesha.yaml file where the IPv4 allocation range for the StorageNFS network occupies almost the whole of its CIDR. If network_data_ganesha.yaml is used without modification in a customer deployment then there are too few IPs left over in its CIDR for use by the corresponding overcloud Neutron StorageNFS provider network for its overcloud DHCP service. (See bug: #1889682 (https://bugs.launchpad.net/tripleo/+bug/1889682)) * Fix Swift ring synchronization to ensure every node on the overcloud has the same copy to start with. This is especially required when replacing nodes or using manually modifed rings. Changes in tripleo-heat-templates 12.4.0..12.4.1 ------------------------------------------------ b2b553f4f Implement a Minimal role 1f5218100 Default cinder_volume_node_names to [] cd0448f01 Force container fetch 164a28d5d Adapt container health check for built-in podman health checks 9b6b665bd Assume Grafana and Ceph Dashboard to be on the storage or ctlplane nets 95e8fbd49 Set NeutronEnableDVR to False for OVN-HA 94a301c01 Create container-puppet-tasks files per step in check mode 7bfe3701a Gather more extra stats with the collectd virt plugin af26d0ff3 Configure rsyncd without pid file for Swift 1e4ce7537 Allow optional volumes for nova_libvirt container fdb9a3954 enable-ssh-admin: allow to override plan name b09c769a7 Clear cached facts based on the tag as well 3752f15cd Get the CIDR of the neutron port for NetworkConfig 92b7d4950 Use UUID for mounted SwiftRawDisks 011a2d867 Add dashboard_tls_external ceph-ansible parameter 47d18baf3 Revert "Disable Designate service for scenario 03" 0f0e7fa11 Remove race during mysql database creation ca8d98cf3 Complete missing description 76b5ae081 Memcached collectd plugin uses host URI instead of IP address. 0ad235806 pcs commands on host: rabbitmq 0eb998930 pcs commands on host: redis bundle ec70716ad pcs commands on host: ovn dbs 4f56371f9 pcs commands on host: cinder backup/volume 06209fa28 pcs commands on host: manila-share be1fee4af pcs commands on host: mysql 3f8c22b56 pcs commands on host: haproxy bundle 3a803c618 Mount libpod container volume into collectd container aeeacb507 Bind mount /var/lib/container-config-scripts inside the restart bundles 1cde17b81 Make sure IPA has the right ACI c4ce02707 Add parameter and CI config to enable Ceph OTW encryption b42881eae Add the NovaImageCacheTTL to the nova compute service 8d3a89dbf Fix Swift ring file synchronization issue 451c83f1b Fix nCipher (aka thales) ansible role name 9471eb030 DCN: use FQDN in glance endpoint with internal TLS ee90c5d60 Remove Etcd from DCN roles that don't need it 2406ffc4c Use container_file_t for Cinder*NfsMountOptions by default 6efb29dcc Use appropriate allocation pools for StorageNFS 472deb921 Remove remaining Skydive references 4907bf8fb Default to storage_dashboard, when set, for the CephDashboard service daff4688f Set a higher PIDs limit for nova_libvirt container 991395882 Re-enable driver agent for scenario 10 eddbc4b2c Avoid failing on deleted file cc17467c5 minor update: only migrate HA VIP away when needed 3e7c6b9a3 Use tripleo_network_config 05470b62e Create container config scripts with a new module b54a4be78 Create Container configs with a new module 10be0c53b Modify how libvirt related containers use SELinux bc8e2f9b9 [FFWD Ceph] Fix ceph post_upgrade_tasks for osd options 91c17d54e Fix endpoint map tls - zaqar wss port 3ce68de0f Fix up ovn-dbs update tasks 7dcd5eb87 Add new Luna HSM parameter for Barbican 9ee9b945f Fix pcs restart in composable HA 701841df5 Do not hard-code vars_from 2c1db9ed0 Update, avoid task skipping by directly importing step file. aaad2cd70 undercloud_upgrade: tear-down keepalived 838741633 pcmk_remote FFU support for Instance HA 3e2a8d91c Add PermitRootLogin option in sshd_config before leapp. 26e532449 Run external_deploy_tasks per step for each role 00850a30a Reset sriov_numvfs to 0 before leapp upgrade b245565d7 Fix delegation with FreeIPA cleanup 3631ee2ff Add support for Gnocchi NFS Backend 70a099159 Fix permissions for paunch 28ed5c0b8 Align kernel args for system upgrade using leapp 7f8770b6e Stop using a conditional for role tasks 7f3eb2371 Fix HA resource restart when no replicas are running 978c4e05d Revamp how etcd's cert and key are handled in containers e4192e033 Add CephAnsibleRepo warning to make this validation more flexible 94f62d874 Prevent skip package fact to run on all steps. 5f336195f Update octavia playbooks parameters c59f31ea4 Remove redundant file management for /run/redis fdd0547c4 Expose the zaqar_ws_timeout_tunnel variable. c2b828fbb Add openvswitch special treatment to update too. 8c6ada0d1 Do not manage healthcheck for nova-compute anymore ebea6f33e Add dashboard_protocol variable when internal_tls is enabled aeaeff3a3 Remove /var/lib/config-data context task b66f39550 Generated passthrough_whitelist shall use all the user_configs fields 729bb5259 Remove ffwd-upgrade leftovers from THT. 09f524e70 Unset keystone::public_endpoint bad56a5fd Add missing config_files kolla directives be1184b06 Use a single task for fact gathering a1443bb82 Relax facts gathering plays on the overcloud 7e3315110 Prevent ovn dbs related facts to run on each step. 2971c4fbb Attempt to remove octavia tls proxy service only present 4ac41b46d Improve documentations for NovaLibvirtFileBackedMemory Diffstat (except docs and test files) ------------------------------------- ci/environments/scenario001-standalone.yaml | 1 + ci/environments/scenario003-standalone.yaml | 17 +- ci/environments/scenario010-standalone.yaml | 1 - common/deploy-steps-playbooks-common.yaml | 52 ++-- common/deploy-steps-tasks-step-1.yaml | 29 +-- common/deploy-steps-tasks.yaml | 1 + common/deploy-steps.j2 | 242 +++--------------- common/generate-config-tasks.yaml | 2 +- common/host-container-puppet-tasks.yaml | 3 +- common/services/role.role.j2.yaml | 20 -- .../monitoring/collectd_check_health.py | 92 +++++++ .../nova_statedir_ownership.py | 68 +++-- .../pacemaker_restart_bundle.sh | 13 +- deployed-server/scripts/enable-ssh-admin.sh | 3 +- deployment/README.rst | 30 --- deployment/aodh/aodh-api-container-puppet.yaml | 46 ---- .../aodh/aodh-evaluator-container-puppet.yaml | 18 -- .../aodh/aodh-listener-container-puppet.yaml | 18 -- .../aodh/aodh-notifier-container-puppet.yaml | 18 -- .../barbican/barbican-api-container-puppet.yaml | 31 ++- .../ceilometer-agent-central-container-puppet.yaml | 18 -- .../ceilometer-agent-compute-container-puppet.yaml | 18 -- .../ceilometer-agent-ipmi-container-puppet.yaml | 18 -- ...ometer-agent-notification-container-puppet.yaml | 18 -- deployment/ceph-ansible/ceph-base.yaml | 50 +++- deployment/ceph-ansible/ceph-mds.yaml | 3 +- deployment/ceph-ansible/ceph-mgr.yaml | 1 + deployment/ceph-ansible/ceph-mon.yaml | 3 +- deployment/ceph-ansible/ceph-osd.yaml | 52 +++- deployment/ceph-ansible/ceph-rgw.yaml | 3 +- deployment/cinder/cinder-api-container-puppet.yaml | 55 +--- .../cinder/cinder-backend-netapp-puppet.yaml | 2 +- .../cinder/cinder-backup-container-puppet.yaml | 11 +- .../cinder/cinder-backup-pacemaker-puppet.yaml | 107 +++----- .../cinder/cinder-common-container-puppet.yaml | 4 +- .../cinder/cinder-scheduler-container-puppet.yaml | 27 +- .../cinder/cinder-volume-container-puppet.yaml | 46 +--- .../cinder/cinder-volume-pacemaker-puppet.yaml | 103 ++------ deployment/containers-common.yaml | 3 +- deployment/database/mysql-container-puppet.yaml | 24 +- deployment/database/mysql-pacemaker-puppet.yaml | 70 ++--- deployment/database/redis-container-puppet.yaml | 3 - deployment/database/redis-pacemaker-puppet.yaml | 120 ++------- .../sahara/sahara-api-container-puppet.yaml | 30 --- .../sahara/sahara-engine-container-puppet.yaml | 18 -- deployment/etcd/etcd-container-puppet.yaml | 55 ++-- deployment/glance/glance-api-container-puppet.yaml | 28 -- .../glance/glance-api-edge-container-puppet.yaml | 22 +- .../gnocchi/gnocchi-api-container-puppet.yaml | 128 +++++----- .../gnocchi/gnocchi-metricd-container-puppet.yaml | 34 ++- .../gnocchi/gnocchi-statsd-container-puppet.yaml | 36 ++- deployment/haproxy/haproxy-container-puppet.yaml | 5 + .../haproxy/haproxy-edge-container-puppet.yaml | 22 +- deployment/haproxy/haproxy-pacemaker-puppet.yaml | 71 ++---- deployment/heat/heat-api-cfn-container-puppet.yaml | 18 -- .../heat/heat-api-cloudwatch-disabled-puppet.yaml | 24 -- deployment/heat/heat-api-container-puppet.yaml | 30 --- deployment/heat/heat-engine-container-puppet.yaml | 18 -- deployment/ipa/ipaservices-baremetal-ansible.yaml | 2 +- deployment/ironic/ironic-api-container-puppet.yaml | 36 --- .../ironic/ironic-conductor-container-puppet.yaml | 25 -- .../kernel-boot-params-baremetal-ansible.yaml | 20 ++ deployment/keystone/keystone-container-puppet.yaml | 44 ---- deployment/manila/manila-api-container-puppet.yaml | 32 --- .../manila/manila-scheduler-container-puppet.yaml | 20 -- .../manila/manila-share-container-puppet.yaml | 20 -- .../manila/manila-share-pacemaker-puppet.yaml | 101 ++------ .../memcached/memcached-container-puppet.yaml | 21 +- deployment/metrics/collectd-container-puppet.yaml | 58 ++--- .../neutron/derive_pci_passthrough_whitelist.py | 11 +- .../neutron/neutron-api-container-puppet.yaml | 37 --- .../neutron/neutron-dhcp-container-puppet.yaml | 18 -- .../neutron/neutron-l3-container-puppet.yaml | 18 -- .../neutron/neutron-metadata-container-puppet.yaml | 18 -- .../neutron-ovs-agent-container-puppet.yaml | 18 -- .../neutron-ovs-dpdk-agent-container-puppet.yaml | 2 - .../neutron-sriov-agent-container-puppet.yaml | 31 ++- deployment/nova/nova-api-container-puppet.yaml | 149 ----------- deployment/nova/nova-compute-container-puppet.yaml | 50 ++-- .../nova/nova-conductor-container-puppet.yaml | 18 -- deployment/nova/nova-ironic-container-puppet.yaml | 24 -- deployment/nova/nova-libvirt-container-puppet.yaml | 43 ++-- .../nova-migration-target-container-puppet.yaml | 2 +- .../nova/nova-scheduler-container-puppet.yaml | 18 -- .../nova/nova-vnc-proxy-container-puppet.yaml | 20 +- deployment/nova/novajoin-container-puppet.yaml | 10 + .../octavia/octavia-api-container-puppet.yaml | 36 +-- .../octavia/octavia-deployment-config.j2.yaml | 10 +- deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 65 +++-- .../pacemaker/pacemaker-baremetal-puppet.yaml | 4 +- .../pacemaker-remote-baremetal-puppet.yaml | 60 +++++ deployment/podman/podman-baremetal-ansible.yaml | 3 +- ...rabbitmq-messaging-notify-pacemaker-puppet.yaml | 79 ++---- .../rabbitmq-messaging-pacemaker-puppet.yaml | 79 ++---- .../rabbitmq-messaging-rpc-pacemaker-puppet.yaml | 79 ++---- deployment/swift/swift-proxy-container-puppet.yaml | 22 -- .../swift/swift-ringbuilder-container-puppet.yaml | 2 +- .../swift/swift-storage-container-puppet.yaml | 56 +--- .../tripleo-packages-baremetal-puppet.yaml | 282 +++------------------ deployment/undercloud/undercloud-upgrade.yaml | 163 ++---------- environments/barbican-backend-pkcs11-lunasa.yaml | 29 ++- environments/ceph-ansible/ceph-ansible.yaml | 7 + environments/cinder-netapp-config.yaml | 2 +- environments/lifecycle/ffwd-upgrade-prepare.yaml | 1 - environments/services/neutron-ovn-ha.yaml | 1 + environments/ssl/no-tls-endpoints-public-ip.yaml | 1 + environments/ssl/tls-endpoints-public-dns.yaml | 3 +- environments/ssl/tls-endpoints-public-ip.yaml | 3 +- environments/ssl/tls-everywhere-endpoints-dns.yaml | 3 +- environments/storage-environment.yaml | 2 +- environments/storage/cinder-netapp-config.yaml | 2 +- environments/storage/cinder-nfs.yaml | 2 +- network/service_net_map.j2.yaml | 2 +- network_data_ganesha.yaml | 50 +++- overcloud.j2.yaml | 25 -- puppet/role.role.j2.yaml | 14 + ...ainerNovaLibvirtPidsLimit-cdad2166b6c0195f.yaml | 6 + .../notes/bug-1895899-8d675670a0d05c15.yaml | 12 + ...e-for-StorageNFS-net.yaml-bd77be924e8b7056.yaml | 20 ++ .../gnocchi-nfs-backend-90febc9f87e7df08.yaml | 9 + .../nova_image_cache_ttl-824f241363b9dd4e.yaml | 8 + .../notes/remove_ffwd_tasks-d1ab630d96a66a59.yaml | 6 + .../swift-fix-ring-sync-7bf3ddbb1ea1e342.yaml | 6 + .../swift-mount-by-uuid-7744fe7696db4b85.yaml | 6 + .../zaqar_ws_timeout_tunnel-d5d1e900dce79b34.yaml | 7 + roles/ControllerSriov.yaml | 2 - roles/DistributedCompute.yaml | 1 - roles/DistributedComputeHCI.yaml | 2 +- roles/DistributedComputeHCIScaleOut.yaml | 3 +- roles/DistributedComputeScaleOut.yaml | 3 +- roles/Minimal.yaml | 30 +++ roles/NetworkerSriov.yaml | 1 - roles/README.rst | 1 + sample-env-generator/ssl.yaml | 6 +- sample-env-generator/storage.yaml | 1 + tools/yaml-validate.py | 24 -- 138 files changed, 1383 insertions(+), 2814 deletions(-)

1 0

tripleo-common 12.4.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are tickled pink to announce the release of: tripleo-common 12.4.2: A common library for TripleO workflows. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. 12.4.2 ^^^^^^ New Features ************ * Added *modify_only_with_source* to the ContainerImagePrepare set that can be used to limit modify container images to a specific image_source as defined in the services to container images mapping. Bug Fixes ********* * When using specifying ContainerImagePrepare if a tag is explicitly provided in a set, the tag_from_label functionality will not be run as we use the defined tag for the containers. Previously we would still attempt tag lookups even if we wanted a specific tag. Other Notes *********** * *container-images/tripleo_containers.yaml.j2* is now used to determine what containers are used for which services when running the container image prepare process runs. Changes in tripleo-common 12.4.1..12.4.2 ---------------------------------------- 84411ff9 Lower default verbosity for ansible bb7a2548 Consume ceph, prom, grafana containers from quay.io 9da62e66 Remove the base layers 10e5e6cc Update container build to better reign in threads 6b115444 Run tripleo-build-containers-ubi-8 on BuildahBuilder code cc67c4ee Include virt-admin in the nova_libvirt container f438b4d7 Add neutron-mlnx-agent container image 66cdee5a Fix handling of default_tag 93c508e2 Support basic auth for image registry cb219766 Add interface-names to Rhel8 images 427e600b Remove sahara-* from list in tripleo_containers.yaml 50d235ba Switch to tripleo_containers.yaml 968dd034 Restore default log path for image prepare 0f67579c Add modify_only_with_source 0a9da42e Fix config parser warning 1b1f0229 TCIB: move RHEL modules into base image a0361597 Ensure atomic inventory file rename runs on the same mountpoint ee720ed1 tcib: rename kolla_version to tcib_managed 70b1ca4b (backward compatibility) create kolla UIDs/GIDs for TCIB 26bd7c22 Remove check for ./puppet/services when filtering services bc01f1c4 Ensure image files are readable to apache 50f86d05 Don't build image upload tasks when dry_run=True 8c46cbb0 Correct the inventory generation 62f40845 Ensure tripleo ansible inventory file update is atomic be81e6ee Add exponential backoff to ratelimited requests d3c11cd5 Stop doing tag_from_label lookup with tag 84fc9430 Reduce workers for label lookups aa4825cb Handle redirects for blobs better f38f6bdf Switch 55-heat-config to async 8a09eb94 container-images: add librados2 to gnocchi-base 4c4ba312 Properly collect tasks with or conditional in step file. 4396f91b Add update and post update tasks to step generated file. e56cdbff Add a strict option to per role tasks file generation. e073112c Generate a play per step for external_deploy_tasks d31c419d config-download remove role arg from _write_tasks_per_step() 8e544693 First pass at script cleanup 42aea5f3 Revert "Add kolla template override to remove python3-networking-mlnx" Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 15 +- container-images/kolla/barbican-base/sudoers | 1 + container-images/kolla/base/httpd_setup.sh | 2 +- container-images/kolla/base/sudoers | 2 +- container-images/kolla/base/uid_gid_manage.sh | 124 ++++ container-images/kolla/horizon/extend_start.sh | 2 +- .../kolla/neutron-base/neutron_sudoers | 2 - container-images/tcib/base/base.yaml | 14 +- container-images/tcib/base/collectd/collectd.yaml | 11 +- container-images/tcib/base/etcd/etcd.yaml | 2 +- container-images/tcib/base/mariadb/mariadb.yaml | 6 +- .../tcib/base/memcached/memcached.yaml | 3 +- .../tcib/base/os/aodh-base/aodh-base.yaml | 2 +- .../tcib/base/os/barbican-base/barbican-base.yaml | 6 +- .../base/os/ceilometer-base/ceilometer-base.yaml | 2 +- .../ceilometer-central/ceilometer-central.yaml | 4 - .../ceilometer-compute/ceilometer-compute.yaml | 4 - .../ceilometer-ipmi/ceilometer-ipmi.yaml | 4 - .../tcib/base/os/cinder-base/cinder-base.yaml | 6 +- .../base/os/designate-base/designate-base.yaml | 2 +- .../tcib/base/os/glance-api/glance-api.yaml | 6 +- .../tcib/base/os/gnocchi-base/gnocchi-base.yaml | 3 +- .../tcib/base/os/heat-base/heat-base.yaml | 2 +- .../tcib/base/os/ironic-base/ironic-base.yaml | 2 +- .../ironic-conductor/ironic-conductor.yaml | 4 - .../ironic-inspector/ironic-inspector.yaml | 2 +- .../tcib/base/os/keystone/keystone.yaml | 2 +- .../tcib/base/os/manila-base/manila-base.yaml | 2 +- .../tcib/base/os/mistral-base/mistral-base.yaml | 2 +- .../mistral-executor/mistral-executor.yaml | 6 - .../neutron-agent-base/neutron-agent-base.yaml | 4 - .../tcib/base/os/neutron-base/neutron-base.yaml | 2 +- .../neutron-mlnx-agent/neutron-mlnx-agent.yaml | 8 + .../tcib/base/os/nova-base/nova-base.yaml | 2 +- .../nova-compute-ironic/nova-compute-ironic.yaml | 6 +- .../os/nova-base/nova-compute/nova-compute.yaml | 6 +- .../os/nova-base/nova-libvirt/nova-libvirt.yaml | 7 +- .../nova-base/nova-scheduler/nova-scheduler.yaml | 4 - .../tcib/base/os/novajoin-base/novajoin-base.yaml | 2 +- .../tcib/base/os/octavia-base/octavia-base.yaml | 2 +- .../tcib/base/os/swift-base/swift-base.yaml | 2 +- container-images/tcib/base/os/tempest/tempest.yaml | 3 +- .../tcib/base/qdrouterd/qdrouterd.yaml | 2 +- container-images/tcib/base/rabbitmq/rabbitmq.yaml | 2 +- container-images/tcib/base/redis/redis.yaml | 5 +- container-images/tripleo_containers.yaml | 406 +++++------ container-images/tripleo_containers.yaml.j2 | 806 +++++++++++++++++++++ .../tripleo_kolla_template_overrides.j2 | 7 +- image-yaml/overcloud-hardened-images-rhel8.yaml | 2 + image-yaml/overcloud-images-ceph-rhel8.yaml | 2 + image-yaml/overcloud-images-rhel8.yaml | 2 + ...e-modify_only_with_source-d9be8cc7236e7c94.yaml | 6 + ...g-lookup-if-tag-specified-2284c45dc0f87693.yaml | 7 + ...e-tripleo-containers-file-0590a59f56fb3907.yaml | 6 + tripleo_common/actions/ansible.py | 6 +- tripleo_common/constants.py | 13 +- tripleo_common/image/builder/buildah.py | 203 ++++-- tripleo_common/image/exception.py | 4 + tripleo_common/image/image_export.py | 4 +- tripleo_common/image/image_uploader.py | 169 ++++- tripleo_common/image/kolla_builder.py | 63 +- tripleo_common/inventories.py | 13 +- tripleo_common/inventory.py | 10 +- tripleo_common/templates/deployments.yaml | 32 +- tripleo_common/utils/config.py | 70 +- tripleo_common/utils/plan.py | 2 +- zuul.d/layout.yaml | 5 + 81 files changed, 3489 insertions(+), 1005 deletions(-)

1 0

python-tripleoclient 13.4.1 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are delighted to announce the release of: python-tripleoclient 13.4.1: TripleO client This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.4.1 ^^^^^^ New Features ************ * A new command "openstack overcloud export ceph" is added. The command is used to export the Ceph deployment data from one stack for use in another stack with storage services which use that Ceph cluster when using the multi-stack deployment feature. Bug Fixes ********* * openstack overcloud export now exports user defined password values instead of just always exporting the generated password values. Changes in python-tripleoclient 13.4.0..13.4.1 ---------------------------------------------- 92654c55 Fix tcib build d25d7d98 Add openstack overcloud export ceph 69896778 Fix if conditions in constants.py 9a7411cb Ensure the ansible log file always has a correct UID 98e45893 Allow to pass a static inventory to the validator CLI 0b437456 Inject both paths for validations roles location 53fa8ad7 Add --temp-dir to overcloud image build 7d598f85 Combined cherry-pick to allow TCIB to run config-less 1de68cbb Update tripleo-validations path to /usr/share/ansible 27873c91 Remove playbook param from tripleo_validator.py b0494327 Fix extra_env_files option and type in format string c2a77064 Allow usage of duplicated IPs for undercloud config d154d50c (UX) Improve logging if the ephemeral heat stack wasn't created 96196522 Implement validations-libs framework for ALL validator commands e2e5fd96 TCIB: add --rhel-modules argument 1ffc56ed overcloud_deploy: move horizon url/rc files before config-download 018ef121 overcloud_cell: fix location of config-download 7fcc694d Limit ip_version when resolving public_host and admin_host 31aeb48e Use user set password values in overcloud export a06c7194 Cleanup UndercloudHostsEntries b0fbe6dc Don't build image upload tasks when dry_run is True e3525066 Simplify error handling in tripleo_deploy 3d5bd5a0 Close session objects in container_image.py 87aa47ca [ussuri] TCIB: change default namespace to tripleou ac50ee66 Rename UpgradeConvergeOvercloud into UpgradeConverge. 5e1475b5 Set portmap cidr fields to extracted CIDR Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 + ...ack-overcloud-export-ceph-f36421e1685db302.yaml | 6 + ...vercloud-export-passwords-bfa698491601a734.yaml | 4 + requirements.txt | 1 + setup.cfg | 3 +- tripleoclient/constants.py | 18 +- tripleoclient/export.py | 99 +++- .../v1/overcloud_deploy/test_overcloud_deploy.py | 20 +- .../test_tripleo_container_image.py | 31 +- tripleoclient/utils.py | 253 ++-------- tripleoclient/v1/container_image.py | 51 +- tripleoclient/v1/overcloud_cell.py | 8 +- tripleoclient/v1/overcloud_deploy.py | 52 +- tripleoclient/v1/overcloud_export_ceph.py | 115 +++++ tripleoclient/v1/overcloud_image.py | 8 + tripleoclient/v1/overcloud_upgrade.py | 4 +- tripleoclient/v1/tripleo_deploy.py | 50 +- tripleoclient/v1/tripleo_validator.py | 523 ++++++--------------- tripleoclient/v1/undercloud_config.py | 25 +- tripleoclient/v2/tripleo_container_image.py | 151 +++++- 27 files changed, 1042 insertions(+), 840 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d450d571..1e8e61ef 100644 --- a/requirements.txt +++ b/requirements.txt @@ -20,0 +21 @@ ansible-runner>=1.4.4 # Apache 2.0 +validations-libs>=1.0.0

1 0

tripleo-validations 12.3.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are happy to announce the release of: tripleo-validations 12.3.2: A collection of Ansible playbooks to detect and report potential issues during TripleO deployments This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-validations Download the package from: https://tarballs.openstack.org/tripleo-validations/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-validations 12.3.1..12.3.2 --------------------------------------------- f7b2ea2 Remove callback plugin from tripleo-validation e1af4c9 Remove objects migrated to validations-common a947d7e New validation: ensure we have access to the right package version cebe0b4 New validation: Ensure sVirt is active ffe221f Add validation to check status of ipa server d1f7935 Add new Upgrades validation groups. c6a59a1 Add os-cloud support for tripleo-ansible-inventory script 70b766c Corrected work directory for validate-selinux 088c4a1 Allows to use custom role name for validations b7d679d Updated "overcloud" to "allovercloud" group 7c01af7 Fix neutron_sanity_check for ML2/OVS overcloud 791502c Fix ceph-ansible permissions when checking the repo name 1de1854 Make Get OSD stat percentage compatible with jq < 1.5 f97940e Make Get OSD stat percentage compatible with both Luminous and Nautilus c3edb5d Ensure virtualenv is installed. 1ae0e2c Remove mock as test requirement Diffstat (except docs and test files) ------------------------------------- callback_plugins/.keep | 0 callback_plugins/fail_if_no_hosts.py | 31 --- callback_plugins/validation_json.py | 202 -------------------- callback_plugins/validation_output.py | 207 --------------------- .../modules/modules-check_package_update.rst | 15 -- .../modules/modules-validations_read_ini.rst | 15 -- .../roles/role-advanced_format_512e_support.rst | 7 - .../roles/role-check_latest_packages_version.rst | 6 - groups.yaml | 40 ++++ library/advanced_format.py | 97 ---------- library/check_package_update.py | 145 --------------- library/haproxy_conf.py | 89 --------- library/hiera.py | 64 ------- library/reportentry.py | 89 --------- library/validations_read_ini.py | 166 ----------------- library/warn.py | 55 ------ playbooks/512e.yaml | 13 -- playbooks/ceph-dependencies-installed.yaml | 4 +- playbooks/check-ftype.yaml | 12 -- playbooks/check-latest-packages-version.yaml | 13 -- playbooks/container-status.yaml | 2 +- playbooks/controller-token.yaml | 4 +- playbooks/controller-ulimits.yaml | 2 +- playbooks/dns.yaml | 12 -- playbooks/haproxy.yaml | 17 -- playbooks/healthcheck-service-status.yaml | 2 +- playbooks/mysql-open-files-limit.yaml | 4 +- playbooks/neutron-sanity-check.yaml | 13 +- playbooks/no-op.yaml | 12 -- playbooks/nova-event-callback.yaml | 2 +- playbooks/nova-svirt.yaml | 13 ++ playbooks/ntp.yaml | 14 -- playbooks/ovs-dpdk-pmd-cpus-check.yaml | 2 +- playbooks/pacemaker-status.yaml | 2 +- playbooks/package-version.yaml | 18 ++ playbooks/rabbitmq-limits.yaml | 2 +- playbooks/repos.yaml | 2 +- playbooks/service-status.yaml | 16 -- playbooks/stonith-exists.yaml | 2 +- playbooks/tls-everywhere-post-deployment.yaml | 2 +- playbooks/undercloud-cpu.yaml | 16 -- playbooks/undercloud-ram.yaml | 17 -- playbooks/undercloud-selinux-mode.yaml | 13 -- playbooks/validate-selinux.yaml | 21 --- role-addition.yml | 10 + .../molecule/default/converge.yml | 26 --- roles/advanced_format_512e_support/tasks/main.yml | 10 - roles/advanced_format_512e_support/vars/main.yml | 9 - roles/ceph/tasks/ceph-ansible-installed.yaml | 1 + roles/ceph/tasks/ceph-health.yaml | 4 +- .../defaults/main.yml | 10 - .../molecule/default/Dockerfile.j2 | 37 ---- .../molecule/default/converge.yml | 51 ----- .../molecule/default/molecule.yml | 46 ----- roles/check_latest_packages_version/tasks/main.yml | 16 -- roles/check_latest_packages_version/vars/main.yml | 8 - roles/dns/defaults/main.yml | 2 - roles/dns/molecule/default/Dockerfile.j2 | 37 ---- roles/dns/molecule/default/molecule.yml | 45 ----- roles/dns/tasks/main.yml | 4 - roles/dns/vars/main.yml | 7 - roles/haproxy/README.md | 42 ----- roles/haproxy/defaults/main.yml | 8 - roles/haproxy/molecule/default/Dockerfile | 37 ---- roles/haproxy/molecule/default/converge.yml | 71 ------- roles/haproxy/molecule/default/molecule.yml | 48 ----- roles/haproxy/tasks/main.yml | 51 ----- roles/haproxy/vars/main.yml | 6 - roles/neutron_sanity_check/defaults/main.yml | 3 + roles/neutron_sanity_check/tasks/main.yml | 69 ++++--- roles/no_op/tasks/main.yml | 4 - roles/no_op/vars/main.yml | 8 - roles/node_health/tasks/main.yml | 4 +- .../prepare.yml => nova_svirt/defaults/main.yml} | 12 +- .../molecule/default/Dockerfile | 4 +- .../molecule/default/converge.yml | 32 ++-- .../molecule/default/molecule.yml | 8 +- roles/nova_svirt/molecule/default/prepare.yml | 60 ++++++ roles/nova_svirt/tasks/main.yml | 14 ++ roles/nova_svirt/tasks/validate.yml | 28 +++ roles/ntp/molecule/default/Dockerfile.j2 | 37 ---- roles/ntp/molecule/default/converge.yml | 26 --- roles/ntp/molecule/default/molecule.yml | 46 ----- roles/ntp/tasks/main.yml | 26 --- roles/ntp/vars/main.yml | 10 - .../tasks/openshift-nw-requirements.yaml | 2 +- roles/openstack_endpoints/tasks/main.yml | 2 +- roles/package_version/defaults/main.yaml | 2 + .../molecule/default/Dockerfile.j2 | 0 .../molecule/default}/converge.yml | 34 ++-- .../molecule/default/molecule.yml | 0 roles/package_version/tasks/compare.yaml | 16 ++ roles/package_version/tasks/main.yaml | 67 +++++++ roles/package_version/vars/centos.yml | 2 + roles/package_version/vars/redhat-8.yml | 6 + roles/service_status/defaults/main.yaml | 2 - .../service_status/molecule/default/Dockerfile.j2 | 37 ---- roles/service_status/molecule/default/converge.yml | 25 --- roles/service_status/molecule/default/molecule.yml | 48 ----- roles/service_status/molecule/docker/Dockerfile.j2 | 37 ---- roles/service_status/molecule/docker/converge.yml | 59 ------ roles/service_status/molecule/docker/molecule.yml | 56 ------ roles/service_status/molecule/docker/prepare.yml | 65 ------- roles/service_status/molecule/podman/Dockerfile.j2 | 37 ---- roles/service_status/molecule/podman/bolt_state.db | Bin 131072 -> 0 bytes roles/service_status/molecule/podman/molecule.yml | 48 ----- roles/service_status/molecule/podman/prepare.yml | 39 ---- .../service_status/molecule/systemd/Dockerfile.j2 | 37 ---- roles/service_status/molecule/systemd/converge.yml | 44 ----- roles/service_status/molecule/systemd/molecule.yml | 48 ----- roles/service_status/molecule/systemd/prepare.yml | 39 ---- roles/service_status/tasks/containers.yaml | 59 ------ roles/service_status/tasks/main.yaml | 3 - roles/service_status/tasks/systemd.yaml | 13 -- roles/tls_everywhere/defaults/main.yml | 3 + roles/tls_everywhere/molecule/default/converge.yml | 36 +++- roles/tls_everywhere/molecule/default/prepare.yml | 21 +++ roles/tls_everywhere/tasks/ipa-server-check.yaml | 107 +++++++++++ roles/tls_everywhere/vars/main.yml | 1 - roles/undercloud_cpu/README.md | 36 ---- roles/undercloud_cpu/defaults/main.yml | 3 - .../undercloud_cpu/molecule/default/Dockerfile.j2 | 37 ---- roles/undercloud_cpu/molecule/default/converge.yml | 42 ----- roles/undercloud_cpu/molecule/default/molecule.yml | 45 ----- roles/undercloud_cpu/tasks/main.yml | 7 - roles/undercloud_cpu/vars/main.yaml | 10 - roles/undercloud_ram/README.md | 36 ---- roles/undercloud_ram/defaults/main.yml | 3 - .../undercloud_ram/molecule/default/Dockerfile.j2 | 37 ---- roles/undercloud_ram/molecule/default/converge.yml | 42 ----- roles/undercloud_ram/molecule/default/molecule.yml | 45 ----- roles/undercloud_ram/tasks/main.yml | 9 - roles/undercloud_ram/vars/main.yaml | 11 -- roles/undercloud_selinux_mode/README.md | 37 ---- .../molecule/default/Dockerfile.j2 | 37 ---- .../molecule/default/converge.yml | 26 --- .../molecule/default/molecule.yml | 46 ----- roles/undercloud_selinux_mode/tasks/main.yml | 24 --- roles/undercloud_selinux_mode/vars/main.yml | 8 - roles/validate_selinux/defaults/main.yml | 27 --- roles/validate_selinux/handlers/main.yml | 15 -- .../validate_selinux/molecule/default/converge.yml | 63 ------- .../validate_selinux/molecule/default/prepare.yml | 60 ------ roles/validate_selinux/molecule/default/verify.yml | 15 -- roles/validate_selinux/tasks/main.yml | 123 ------------ roles/validate_selinux/templates/skip-list.j2 | 3 - roles/validate_selinux/vars/main.yml | 22 --- .../xfs_check_ftype/molecule/default/Dockerfile.j2 | 37 ---- .../xfs_check_ftype/molecule/default/converge.yml | 21 --- .../xfs_check_ftype/molecule/default/molecule.yml | 47 ----- roles/xfs_check_ftype/molecule/default/prepare.yml | 60 ------ roles/xfs_check_ftype/molecule/default/verify.yml | 15 -- roles/xfs_check_ftype/tasks/main.yml | 25 --- roles/xfs_check_ftype/vars/main.yml | 8 - scripts/tripleo-ansible-inventory | 60 ++++-- zuul.d/molecule.yaml | 113 ++--------- zuul.d/playbooks/pre.yml | 4 + 180 files changed, 654 insertions(+), 4482 deletions(-)

1 0

tripleo-puppet-elements 12.3.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are satisfied to announce the release of: tripleo-puppet-elements 12.3.2: Puppet building rules for OpenStack images. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-puppet-elements Download the package from: https://tarballs.openstack.org/tripleo-puppet-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 12.3.2 ^^^^^^ Other Notes * Element overcloud-opstools has been removed. The puropose of this element was to install osops-tools-monitoring-oschecks package in overcloud images. This package is not supported in CentOS 8. Changes in tripleo-puppet-elements 12.3.1..12.3.2 ------------------------------------------------- db14e58 Remove overcloud-opstools element 405c8d4 Drop podman-docker from CentOS/RHEL8 Diffstat (except docs and test files) ------------------------------------- elements/overcloud-base/pkg-map | 8 ++------ elements/overcloud-ceph-storage/element-deps | 1 - elements/overcloud-compute/element-deps | 1 - elements/overcloud-contrail-controller/element-deps | 1 - elements/overcloud-controller/element-deps | 1 - elements/overcloud-network-midonet/element-deps | 1 - elements/overcloud-opstools/README.md | 1 - elements/overcloud-opstools/element-deps | 2 -- .../install.d/package-installs-overcloud-opstools | 1 - elements/overcloud-opstools/pkg-map | 12 ------------ .../remove-overcloud-opstools-element-5846bee068294751.yaml | 6 ++++++ 11 files changed, 8 insertions(+), 27 deletions(-)

1 0

paunch 7.0.2 (ussuri)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are ecstatic to announce the release of: paunch 7.0.2: Utility to launch and manage containers using YAML based configuration data This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/paunch Download the package from: https://tarballs.openstack.org/paunch/ Please report issues through: https://bugs.launchpad.net/paunch/+bugs For more details, please see below. Changes in paunch 7.0.1..7.0.2 ------------------------------ 4ae7d88 Trigger container update on image id update 6ad9b29 Use unittest.mock instead of third party mock 368827e [USSURI-ONLY] Add new parameter: pids_limit 861ed06 [USSURY-Only] Log benign command errors as warns b995b0a [USSURI-ONLY] Do not manage masked service units 5c4a55c Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + paunch/builder/base.py | 71 +++++++---- paunch/builder/podman.py | 1 + paunch/runner.py | 32 +++-- paunch/utils/systemctl.py | 30 ++++- paunch/utils/systemd.py | 6 +- 14 files changed, 458 insertions(+), 115 deletions(-)

1 0

puppet-pacemaker 1.1.0
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We jubilantly announce the release of: puppet-pacemaker 1.1.0: Puppet module for Pacemaker The source is available from: https://opendev.org/openstack/puppet-pacemaker Download the package from: https://tarballs.openstack.org/puppet-pacemaker/ For more details, please see below. Changes in puppet-pacemaker 1.0.0..1.1.0 ---------------------------------------- af9f15a Update metadata for a release 441e0c4 Fix pcs 0.10 detection for 8-stream b3596d1 Add disable-http-filter option b501c08 Convert all class usage to relative names a53120f Add tripleo-standalone sc4 job a385603 Revert "Make sure we pass cluster_setup_extras when using pcs 0.10" 034102e Fix up upgrade coordination around authkey b7af3b6 Retry calling backup_cib() 7a82bae Do not create stonith location constraint when there is a single node 1bb2fe7 Fix typo in CRMDIFF_BIN 3cbc4da Make sure we pass cluster_setup_extras when using pcs 0.10 bb6709c Add support for promoted-max meta attribute 5ab1505 Switch to newer openstackdocstheme and reno versions 9f3f5c7 Update Puppet requirement to >= 6.0.0 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 ++++ Gemfile | 2 +- Rakefile | 1 - agent_generator/src_xml/fence_rhevm.xml | 5 +++ examples/pacemaker/host.pp | 4 +- examples/pacemaker/setup.pp | 4 +- examples/service/start.pp | 2 +- examples/service/stop.pp | 2 +- lib/puppet/provider/pcmk_bundle/default.rb | 14 +++++++ lib/puppet/provider/pcmk_common.rb | 59 +++++++++++++++++++---------- lib/puppet/provider/pcmk_stonith/default.rb | 3 +- lib/puppet/type/pcmk_bundle.rb | 15 ++++++++ manifests/contain.pp | 2 - manifests/corosync.pp | 33 +++++++++++----- manifests/init.pp | 8 ++-- manifests/install.pp | 2 +- manifests/new.pp | 22 +++++------ manifests/new/firewall.pp | 2 +- manifests/new/install.pp | 2 +- manifests/new/service.pp | 2 +- manifests/new/setup.pp | 10 ++--- manifests/new/setup/auth_key.pp | 4 +- manifests/new/setup/config.pp | 2 +- manifests/new/setup/debian.pp | 4 +- manifests/new/setup/pcsd.pp | 2 +- manifests/params.pp | 5 ++- manifests/remote.pp | 40 ++++++++++++++----- manifests/resource/bundle.pp | 29 +++++++++++++- manifests/resource/remote.pp | 5 ++- manifests/resource/service.pp | 2 +- manifests/service.pp | 8 ++-- manifests/stonith/fence_rhevm.pp | 9 +++++ metadata.json | 4 +- releasenotes/source/conf.py | 13 +++---- 35 files changed, 232 insertions(+), 102 deletions(-)

1 0

glance 21.0.0.0rc2 (victoria)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

Hello everyone, A new release candidate for glance for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/glance/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/glance/src/branch/stable/victoria Release notes for glance can be found at: https://docs.openstack.org/releasenotes/glance/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/glance/+bugs and tag it *victoria-rc-potential* to bring it to the glance release crew's attention.

1 0

oslo.privsep 1.33.4 (train)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

We are amped to announce the release of: oslo.privsep 1.33.4: OpenStack library for privilege separation This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. 1.33.4 ^^^^^^ Other Notes * The "oslo.privsep" client can be called from a program using eventlet. If "eventlet.monkey_patch", some libraries will be patched, for example "threading" or "os". When the root daemon is forked from the client process, those libraries remain patched. Now, when the daemon is forked from the client process, those libraries and methods are restored to the original values. The goal is to prevent some timeouts when using eventlet threads (user threads); system threads are preemptive and the code does not need to care about the executor token. Changes in oslo.privsep 1.33.3..1.33.4 -------------------------------------- 00e69d4 Undo the eventlet monkey patch for the privileged daemon 6db45ef Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 9c798d3 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_privsep/daemon.py | 36 ++++++++++++++++++++++ ...y-patch-privileged-daemon-160e00296549df3d.yaml | 11 +++++++ tox.ini | 2 +- 5 files changed, 79 insertions(+), 1 deletion(-)

1 0

tacker 4.0.0.0rc2 (victoria)
by no-reply＠openstack.org 05 Oct '20

05 Oct '20

Hello everyone, A new release candidate for tacker for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/tacker/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/tacker/src/branch/stable/victoria Release notes for tacker can be found at: https://docs.openstack.org/releasenotes/tacker/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/tacker/+bugs and tag it *victoria-rc-potential* to bring it to the tacker release crew's attention.

1 0

neutron-lib 2.6.1 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are ecstatic to announce the release of: neutron-lib 2.6.1: Neutron shared routines and utilities This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 2.6.0..2.6.1 ----------------------------------- 73d868b remove rc from allocation dict if value is 0 dbd369e Update TOX_CONSTRAINTS_FILE for stable/victoria 2439128 Update .gitreview for stable/victoria a175451 Fix lower-constraints job for focal Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lower-constraints.txt | 14 +++---- neutron_lib/placement/client.py | 11 ++++- requirements.txt | 4 +- tox.ini | 10 ++--- 6 files changed, 64 insertions(+), 31 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0e6244b..17b8abf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +16 @@ oslo.context>=2.19.2 # Apache-2.0 -oslo.db>=4.37.0 # Apache-2.0 +oslo.db>=4.44.0 # Apache-2.0 @@ -19 +19 @@ oslo.log>=3.36.0 # Apache-2.0 -oslo.messaging>=5.29.0 # Apache-2.0 +oslo.messaging>=7.0.0 # Apache-2.0

1 0

python-openstackclient 5.4.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are pumped to announce the release of: python-openstackclient 5.4.0: OpenStack Command-line Client This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 5.4.0 ^^^^^ New Features ************ * Add NUMA affinity policy to "port create", "port set" and "port unset" commands. * Support for image search via properties of image. Currently "openstack server create --image-property" only takes image property. Now it can also search image via properties (user defined) too. Story https://storyboard.openstack.org/#!/story/2007860. Bug Fixes ********* * You can now remove role assignments from keystone that reference non-existent users or groups. [Bug 2006635 (https://storyboard.openstack.org/#!/story/2006635) * The "openstack server show -f json" command was not outputting json for security groups, volumes and properties properly. Changes in python-openstackclient 5.3.1..5.4.0 ---------------------------------------------- 4b709a2c Remove install unnecessary packages cbc1fb08 bump py37 to py38 in tox.ini bae89b30 Output correct json for security groups in 'openstack server show' 5aeec307 Remove install unnecessary packages 99b5adf9 Fix gate due to switch to focal fbd2c00b Fix --image-property option in 'create server' f0642bc0 Update developing.rst 67700e6d Support tagging Neutron ports on creation 4a3c5207 Show words indicating booted from volume for server image 51a1ea65 Add API check for server_groups.create ed6d8d94 Add API check for server_groups.list e2467326 Bypass user and group verification in RemoveRole 454b2195 Add NUMA affinity policy parameter to "port" 4e2aefb5 Delete the testcases that arent needed anymore 0a8753dc Fix reverted osc-lib interface change a8aad9fe Add system role assignment tests for users and groups 176907f7 Allow openstack flavor set to update flavor description using name Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + bindep.txt | 1 - lower-constraints.txt | 4 +- openstackclient/compute/v2/flavor.py | 2 +- openstackclient/compute/v2/server.py | 47 ++- openstackclient/compute/v2/server_group.py | 17 +- openstackclient/identity/common.py | 2 +- openstackclient/identity/v3/role.py | 68 ++-- openstackclient/network/v2/port.py | 48 ++- ...port-numa-affinity-policy-4706b0f9485a5d4d.yaml | 5 + .../notes/bug-2006635-3110f7a87a186e62.yaml | 7 + ...image-property-field.yaml-c51bf37c3106d6ff.yaml | 6 + ...ecurity-grp-json-fix.yaml-2af1f48a48034d64.yaml | 4 + tox.ini | 3 +- 26 files changed, 976 insertions(+), 125 deletions(-)

1 0

telemetry_tempest_plugin 1.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are satisfied to announce the release of: telemetry_tempest_plugin 1.1.0: Tempest plugin for Telemetry Projects This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/telemetry_tempest_plugin Download the package from: https://tarballs.openstack.org/telemetry-tempest-plugin/ For more details, please see below. Changes in telemetry_tempest_plugin 1.0.0..1.1.0 ------------------------------------------------ e720b9e [goal] Migrate telemetry-tempest-plugin jobs to focal c0b4506 Use image_create() from tempest scenario manager ece24e0 Stop to use the __future__ module. c78c6c7 Switch to newer openstackdocstheme and reno versions 8bef48e Fix hacking min version to 3.0.1 e81cb44 Fix the endpoint url trailing slash issue 5d5366a Add stable branch jobs on the plugins master gate 7716ce0 Further py27 cleanup support Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 17 +++++++++++++++++ releasenotes/source/conf.py | 12 ++++-------- setup.cfg | 14 -------------- telemetry_tempest_plugin/exceptions.py | 4 ++-- telemetry_tempest_plugin/scenario/test_gnocchi.py | 2 -- .../scenario/test_telemetry_integration.py | 6 +++--- telemetry_tempest_plugin/scenario/utils.py | 6 ++---- test-requirements.txt | 9 ++++----- tox.ini | 7 ++++--- 10 files changed, 40 insertions(+), 45 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b2555d0..f8e7e3a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -7,3 +7,2 @@ hacking>=1.1.0,<1.2.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD -openstackdocstheme>=1.11.0 # Apache-2.0 +sphinx>=2.0.0,!=2.1.0 # BSD +openstackdocstheme>=2.2.1 # Apache-2.0 @@ -11 +10 @@ openstackdocstheme>=1.11.0 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0

1 0

monasca-tempest-plugin 2.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are glad to announce the release of: monasca-tempest-plugin 2.1.0: Tempest plugin for Monasca project This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/monasca-tempest-plugin Download the package from: https://tarballs.openstack.org/monasca-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-tempest-plugin 2.0.0..2.1.0 ---------------------------------------------- 7752b4c Switch to newer openstackdocstheme and reno versions bdd3a1e Add py38 package metadata 08e45ac Fix hacking min version to 3.0.1 47f2042 Set tempest tests for logs as voting again Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 ++-- releasenotes/source/conf.py | 8 ++++---- setup.cfg | 1 + test-requirements.txt | 6 +++--- 5 files changed, 15 insertions(+), 15 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ef101de..ae03f19 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=3.0,<3.1.0;python_version>='3.5' # Apache-2.0 +hacking>=3.0.1,<3.1.0;python_version>='3.5' # Apache-2.0 @@ -8 +8 @@ sphinx>=2.0.0,!=2.1.0 # BSD -openstackdocstheme>=2.0.0 # Apache-2.0 +openstackdocstheme>=2.2.1 # Apache-2.0 @@ -10 +10 @@ openstackdocstheme>=2.0.0 # Apache-2.0 -reno>=2.5.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0

1 0

heat-tempest-plugin 1.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are chuffed to announce the release of: heat-tempest-plugin 1.1.0: OpenStack Orchestration Tempest Plugin This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/heat-tempest-plugin Download the package from: https://tarballs.openstack.org/heat-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/heat/+bugs For more details, please see below. Changes in heat-tempest-plugin 1.0.0..1.1.0 ------------------------------------------- fa9f6cc [goal] Migrate tox based testing to Focal 9f622d8 Fixing typo for cert_validate eb16aa8 Add stable ussuri job on master gate b210ea2 Remove Extended maintainance stable branch job from master gate b4624c8 Use Bionic node for stable stein or train jobs 87030db Add tls support for tests 4e56c72 Allow empty list of tags instead of None Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 53 +++++----------------- test-requirements.txt | 5 +- 6 files changed, 23 insertions(+), 47 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c699d8c..3cd55cb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7,4 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 - +# remove this pyflakes from here once you bump the +# hacking to 3.2.0 or above. hacking 3.2.0 takes +# care of pyflakes version compatibilty. +pyflakes>=2.1.1

1 0

barbican_tempest_plugin 1.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are ecstatic to announce the release of: barbican_tempest_plugin 1.1.0: OpenStack barbican tempest tests. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/barbican_tempest_plugin Download the package from: https://tarballs.openstack.org/barbican-tempest-plugin/ For more details, please see below. Changes in barbican_tempest_plugin 1.0.0..1.1.0 ----------------------------------------------- 826e26f Fix setup.cfg keywords 3f35bff Deprecate scenario.img_dir option da01199 Ceph Multibackend changes a0d3e45 [goal] Migrate testing to ubuntu focal 73a0d09 zuul: migrate and clean the tempest native jobs 0a13a38 Use the encryption provider constants f36d46b Add certificate validation scenario tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 82 +++++++++- .../scenario/test_ephemeral_disk_encryption.py | 10 ++ setup.cfg | 9 +- test-requirements.txt | 4 + tools/pre_test_hook.sh | 1 + 10 files changed, 356 insertions(+), 23 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c2d595b..b99db27 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,0 +6,4 @@ hacking<0.13,>=0.12.0 # Apache-2.0 +# remove this pyflakes from here once you bump the +# hacking to 3.2.0 or above. hacking 3.2.0 takes +# care of pyflakes version compatibilty. +pyflakes>=2.1.1

1 0

keystone_tempest_plugin 0.5.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We contentedly announce the release of: keystone_tempest_plugin 0.5.0: Tempest plugin keystone_tempest_plugin This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/keystone_tempest_plugin Download the package from: https://tarballs.openstack.org/keystone-tempest-plugin/ For more details, please see below. Changes in keystone_tempest_plugin 0.4.0..0.5.0 ----------------------------------------------- 4774d61 [goal] Migrate keystone-tempest-plugin jobs to focal 5ee9af8 Add tempest clients for limits fd5ab8a Update docs building, cleanup da7e045 Add addCleanup just after resource creation 7814dc2 Use ephemeral test user for k2k tests bd8ba4e Add stable branches testing on keystone-tempest-plugin master gate b8f6b25 Remove func not in use in test_service_providers e105e8c Don't test openstack_groups on stable branches 9c8933c Remove six library Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 21 +++ keystone_tempest_plugin/clients.py | 9 ++ keystone_tempest_plugin/config.py | 6 + .../services/identity/clients.py | 17 ++- .../services/identity/v3/auth_client.py | 3 +- .../identity/v3/identity_providers_client.py | 9 +- .../services/identity/v3/limits_client.py | 156 +++++++++++++++++++++ .../api/identity/v3/test_service_providers.py | 4 - .../scenario/test_federated_authentication.py | 43 ++++-- releasenotes/source/conf.py | 11 +- requirements.txt | 1 - setup.cfg | 23 --- test-requirements.txt | 6 - tox.ini | 9 +- 17 files changed, 255 insertions(+), 77 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e7efdc4..790e605 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12 +11,0 @@ testtools>=2.2.0 # MIT -six>=1.10.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 16165e0..9c7d865 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,6 +5,0 @@ hacking>=3.0,<3.1.0;python_version>='3.5' # Apache-2.0 - -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD -openstackdocstheme>=1.18.1 # Apache-2.0 - -# releasenotes -reno>=2.5.0 # Apache-2.0

1 0

designate-tempest-plugin 0.9.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are thrilled to announce the release of: designate-tempest-plugin 0.9.0: OpenStack DNS As A Service (Designate) Functional Tests This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/designate-tempest-plugin Download the package from: https://tarballs.openstack.org/designate-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/designate/+bugs For more details, please see below. Changes in designate-tempest-plugin 0.8.0..0.9.0 ------------------------------------------------ a32ccf7 Stop to use the __future__ module. 88c40db Switch to newer openstackdocstheme version 2f5a25a Add py38 package metadata 5fb81fa Update hacking for Python3 Diffstat (except docs and test files) ------------------------------------- designate_tempest_plugin/hacking/__init__.py | 0 designate_tempest_plugin/hacking/checks.py | 31 ---------------------------- requirements.txt | 2 +- setup.cfg | 1 + test-requirements.txt | 6 +++--- tools/pretty_flake8.py | 1 - tox.ini | 22 ++++++++++++++------ 8 files changed, 27 insertions(+), 61 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8d0dc5f..3a1f2f3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -dnspython3!=1.13.0,!=1.14.0,>=1.12.0 # http://www.dnspython.org/LICENSE +dnspython>=1.16.0 # http://www.dnspython.org/LICENSE diff --git a/test-requirements.txt b/test-requirements.txt index 6e6ab00..df0e096 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,3 +6,3 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 -openstackdocstheme>=1.18.1 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +hacking>=3.0.1,<3.1.0 # Apache-2.0 +openstackdocstheme>=2.2.1 # Apache-2.0 +sphinx>=2.0.0,!=2.1.0 # BSD

1 0

solum-tempest-plugin 2.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are glad to announce the release of: solum-tempest-plugin 2.1.0: Tempest plugin for the solum project. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/solum-tempest-plugin Download the package from: https://tarballs.openstack.org/solum-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/solum/+bugs For more details, please see below. Changes in solum-tempest-plugin 2.0.0..2.1.0 -------------------------------------------- 80e23bb [goal] Migrate solum-tempest-plugin jobs to focal 46a90f1 Fix hacking min version to 3.0.1 fa58e28 Add stable branch jobs on the plugins master gate a2262b7 Update docs building, cleanup Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 29 +++++++++++++++++++++++++++++ setup.cfg | 14 -------------- test-requirements.txt | 6 +----- tox.ini | 14 +++++++++----- 5 files changed, 47 insertions(+), 24 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a9c8b03..5ba0c48 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking<0.13,>=0.12.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -9 +8,0 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD @@ -13,3 +11,0 @@ testtools>=2.2.0 # MIT -openstackdocstheme>=1.18.1 # Apache-2.0 -# releasenotes -reno>=2.5.0 # Apache-2.0

1 0

murano-tempest-plugin 2.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are satisfied to announce the release of: murano-tempest-plugin 2.1.0: Tempest plugin for the murano project. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/murano-tempest-plugin Download the package from: https://tarballs.openstack.org/murano-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/murano/+bugs For more details, please see below. Changes in murano-tempest-plugin 2.0.0..2.1.0 --------------------------------------------- 2590256 [goal] Migrate murano-tempest-plugin jobs to focal 110bde6 Remove retired congress 80c0851 Switch to newer openstackdocstheme and reno versions 9b3a8ee Add py38 package metadata 32ce7f0 Fix hacking min version to 3.0.1 f209fc4 Add stable branch jobs on the plugins master gate 6053cba Update docs building Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 24 ++++++ .../functional/integration/integration_base.py | 85 -------------------- .../functional/integration/test_policy_enf.py | 90 ---------------------- releasenotes/notes/.placeholder | 0 releasenotes/source/conf.py | 9 ++- requirements.txt | 1 - setup.cfg | 16 +--- test-requirements.txt | 6 +- tox.ini | 10 ++- 12 files changed, 48 insertions(+), 224 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d9a635c..7202fd4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18 +17,0 @@ python-muranoclient>=0.8.2 # Apache-2.0 -python-congressclient<2000,>=1.9.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index ee5b8b4..e3c4063 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=3.0,<3.1.0;python_version>='3.5' # Apache-2.0 +hacking>=3.0.1,<3.1.0;python_version>='3.5' # Apache-2.0 @@ -9 +8,0 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD @@ -13,3 +11,0 @@ testtools>=2.2.0 # MIT -openstackdocstheme>=1.18.1 # Apache-2.0 -# releasenotes -reno>=2.5.0 # Apache-2.0

1 0

freezer_tempest_plugin 1.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are tickled pink to announce the release of: freezer_tempest_plugin 1.1.0: Tempest plugin for the freezer project. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/freezer_tempest_plugin Download the package from: https://tarballs.openstack.org/freezer-tempest-plugin/ For more details, please see below. Changes in freezer_tempest_plugin 1.0.0..1.1.0 ---------------------------------------------- 564b037 Fix a bug for tempst e804615 [goal] Migrate freezer-tempest-plugin jobs to focal 36d588a zuul: cleanup the jobs a bit d82ad4b Update DevStack installation guide a352e40 Remove keystone v2 related code. e4b0b93 Switch to newer openstackdocstheme and reno versions 0659d19 Fix hacking min version to 3.0.1 3300282 Add stable branch jobs on the plugins master gate a153805 Update docs building Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 68 +++++++++++----------- devstack/README.rst | 11 +++- freezer_tempest_plugin/README.rst | 8 +-- freezer_tempest_plugin/common.py | 14 ++--- releasenotes/source/conf.py | 12 +++- setup.cfg | 23 -------- test-requirements.txt | 8 +-- tox.ini | 14 +++-- 13 files changed, 90 insertions(+), 90 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index efaff3a..7ef9f3d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,7 +5 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 - -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD -oslosphinx>=4.7.0 # Apache-2.0 - -# releasenotes -reno>=2.5.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0

1 0

mistral_tempest_tests 1.1.0 (victoria)
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are satisfied to announce the release of: mistral_tempest_tests 1.1.0: Tempest plugin for Mistral project This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/mistral_tempest_tests Download the package from: https://tarballs.openstack.org/mistral-tempest-plugin/ For more details, please see below. Changes in mistral_tempest_tests 1.0.0..1.1.0 --------------------------------------------- 776b590 Adjust Actions API tests b9c3d57 Fix Action API tests c3bf5af [goal] Migrate mistral-tempest-plugin jobs to focal 64d1029 Switch to newer openstackdocstheme and reno versions 66f2455 Add py38 package metadata 4d9545b Fix hacking min version to 3.0.1 d9a58d0 try to fix pip error 9482b65 Add stable branch jobs on the plugins master gate Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 29 ++++- releasenotes/source/conf.py | 9 +- setup.cfg | 2 + test-requirements.txt | 2 +- 7 files changed, 129 insertions(+), 49 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 807c375..7ef9f3d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=1.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0

1 0

renderspec 2.1.0
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are glad to announce the release of: renderspec 2.1.0: Jinja2 template renderer for generating .spec files The source is available from: https://opendev.org/openstack/renderspec Download the package from: https://tarballs.openstack.org/renderspec/ For more details, please see below. Changes in renderspec 2.0.0..2.1.0 ---------------------------------- eb69d47 Improve distro detection for recent Fedora releases 8e84ccd Switch to newer openstackdocstheme version ece74aa Cleanup py27 support 1910877 Python 3.8 tests are passing, declare as supported Diffstat (except docs and test files) ------------------------------------- renderspec/__init__.py | 21 ++++++++++++++++++--- setup.cfg | 19 ++++--------------- setup.py | 9 --------- tox.ini | 3 ++- 7 files changed, 33 insertions(+), 38 deletions(-)

1 0

pymod2pkg 0.26.0
by no-reply＠openstack.org 02 Oct '20

02 Oct '20

We are overjoyed to announce the release of: pymod2pkg 0.26.0: python module name to package name map The source is available from: https://opendev.org/openstack/pymod2pkg Download the package from: https://tarballs.openstack.org/pymod2pkg/ For more details, please see below. Changes in pymod2pkg 0.25.0..0.26.0 ----------------------------------- 3b2f6d7 Fix PyYAML mapping for RDO 052a798 Stop to use the __future__ module. Diffstat (except docs and test files) ------------------------------------- pymod2pkg/__init__.py | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-)

1 0

openstack-governance 0.8.0
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We are pumped to announce the release of: openstack-governance 0.8.0: OpenStack Governance Documents The source is available from: https://opendev.org/openstack/openstack-governance Download the package from: https://tarballs.openstack.org/governance/ For more details, please see below. Changes in openstack-governance 0.7.0..0.8.0 -------------------------------------------- add9a06e Reorder repos alphabetically 67f7be00 Add exception for Sept 2020 term election 297e1a43 Add openstack/osops to Ops Docs and Tooling SIG 8382a101 kolla-cli: deprecation - Mark as deprecated a9a1b07f Reinstate weekly meetings 70fa9c90 Add openstack-helm-deployments to openstack-helm 403f588a Retire the devstack-plugin-zmq project 7f1058a1 Add openstack-ansible/os_senlin role e7a8fe84 Move ansible-role-XXX-hsm projects to Barbican team 1d7fb74f Update and simplify comparison of working groups e90a4464 Add etcd3gw to Oslo 1174effc Move towards dual office hours in diff TZ 08763131 Resolution to define distributed leadership for projects 6b2e491d Fix names inside check-review-status 0aa813b5 Add python-dracclient to be owned by Hardware Vendor SIG 56442877 Pierre Riteau as CloudKitty PTL for Victoria 0e9ffd10 Clean up expired i18n SIG extra-ATCs 4db165ec Sort SIG names in repo owner list 5084a1e1 Drop all exceptions for legacy validation d5a9229e Add legacy repository validation cf2872a1 Drop neutron-vpnaas from legacy projects f1e5071a Reverse sort series in selected goals fbebf372 Add Ceph iSCSI charm to OpenStack charms 611f026c Declare supported runtimes for Wallaby release 40200267 Add Keystone Kerberos charm to OpenStack charms 3a3017f3 Deprecate os_congress project 5d5805c8 Create starter-kit:kubernetes-in-virt tag Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 15 ++ goals/selected/index.rst | 1 + reference/charter.rst | 2 +- .../comparison-of-official-group-structures.rst | 289 +++++++++------------ reference/election-exceptions.rst | 26 ++ reference/index.rst | 1 + reference/legacy.yaml | 12 +- reference/projects.yaml | 65 ++++- reference/runtimes/wallaby.rst | 47 ++++ reference/sigs-repos.yaml | 182 ++----------- reference/tags/index.rst | 1 + reference/tags/starter-kit_kubernetes-in-virt.rst | 161 ++++++++++++ reference/team-formats.png | Bin 147642 -> 42888 bytes .../20200803-distributed-project-leadership.rst | 199 ++++++++++++++ resolutions/20200831-reinstate-weekly-meetings.rst | 67 +++++ .../20170425-drop-tc-weekly-meetings.rst | 0 tools/check_review_status.py | 2 +- tools/validate-legacy.py | 85 ++++++ tools/validate_repositories.py | 25 -- tox.ini | 5 + 21 files changed, 821 insertions(+), 370 deletions(-)

1 0

sahara-tests 0.11.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We are happy to announce the release of: sahara-tests 0.11.0: Sahara tests This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/sahara-tests Download the package from: https://tarballs.openstack.org/sahara-tests/ Please report issues through: https://storyboard.openstack.org/#!/project/940 For more details, please see below. Changes in sahara-tests 0.10.0..0.11.0 -------------------------------------- 8c3c00c [goal] Migrate sahara tempest plugin jobs to focal a98a644 Revert "Revert "Temporarily disable ceilometer (currently broken)"" afa2701 Revert "Temporarily disable ceilometer (currently broken)" dc388e1 Temporarily disable ceilometer (currently broken) 1eb866f Fix URL of Maven Central Repository 8dd47f3 scenario tests: use py2 on <=train branches 21c5b0b zuul: use the correct syntax for a jinja test (non filter) ff53c44 Use unittest.mock instead of mock f119332 Switch to newer openstackdocstheme and reno versions b31e536 Add support for python 3.8 d9695cd Remove .testr.conf 7d33a65 Fix hacking min version to 3.0.1 Diffstat (except docs and test files) ------------------------------------- .testr.conf | 8 -------- .zuul.yaml | 21 +++++++++++++++++---- releasenotes/source/conf.py | 9 ++++----- requirements.txt | 2 +- roles/setup-sahara-scenario-env/tasks/main.yaml | 4 ++-- .../defaults/edp-examples/edp-spark/README.rst | 2 +- setup.cfg | 3 ++- setup.py | 8 -------- test-requirements.txt | 3 +-- tox.ini | 2 +- 16 files changed, 40 insertions(+), 54 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b5a7778..0c89a28 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ fixtures>=3.0.0 # Apache-2.0/BSD -jsonschema!=2.5.0,<3.0.0,>=2.0.0 # MIT +jsonschema>=3.2.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 412b233..b590895 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=3.0,<3.1.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -11 +10,0 @@ doc8 # Apache-2.0 -mock>=1.2 # BSD

1 0

ironic 16.0.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We are pumped to announce the release of: ironic 16.0.0: OpenStack Bare Metal Provisioning This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 16.0.0 ^^^^^^ Prelude ******* The Ironic team is proud to announce the release of Ironic 16.0. For over six years, the contributors to this project have continued to drive forth and provide what we collectively feel is the best platform for managing and deploying bare metal hardware. The innovation, the drive, and the pursuit of improving infrastructure operators' lives has yet to cease, and has no signs of stopping anytime soon. As with any release, we have some things we are particularly proud of: * Support for TLS encryption of Agent communications. * Support for in-band deployment steps enabling software RAID to be configured at deployment time. * Ramdisk/Virtual Media pass-through of ISO images. * BMC-less "agent" power control, so BMC's are not required for deployments. * Network configuration injection with virtual media based ramdisks. * Integrated basic authentication for standalone Ironic operators. And with any major release, a number of bugs have been fixed. Cross- vendor features see increased parity. Every contributor has something to be proud of in this release. And with that, we hope you enjoy it! New Features ************ * Adds "ilo-uefi-https" boot interface to "ilo5" hardware type. This boot interface levereges the iLO UEFI firmware capability to boot from given HTTPS URLs hosted securely over HTTPS webserver with standard/custom certificates. * Adds functionality to the "ilo" and "ilo5" hardware types by enabling virtual media boot without user-built deploy/rescue/boot ISO images. Instead, ironic will build necessary images out of common kernel/ramdisk pair (though user needs to provide ESP image). User provided deploy/rescue/boot ISO images are also supported. * Adds support of DHCP less deploy to "ilo" and "ilo5" hardware types by using the "network_data" property on the node field, operators can now apply network configuration to be embedded in iLO based Virtual Media based deployment ramdisks which include networking configuration enabling the deployment to operate without the use of DHCP. * Adds an ability to accept a custom TLS certificate in the heartbeat API. * Adds a configuration option "webserver_verify_ca" to support custom certificates to validate URLs hosted on a HTTPS webserver. * Using the "network_data" property on the node field, operators can now apply network configuration to be embedded in Redfish based Virtual Media based deployment ramdisks which include networking configuration enabling the deployment to operate without the use of DHCP. See Redfish driver documentation for more information (https: //docs.openstack.org/ironic/latest/admin/drivers/redfish.html#layer -3-or-dhcp-less-ramdisk-booting). * "file://" images are now supported in the "direct" deploy interface. * Adds a new possible value for "image_download_source": "local". When used, even "http://" images are downloaded, converted to RAW if needed and served from the conductor's HTTP server. This feature targets primarily nodes with low RAM. * Adds support in "idrac-wsman" inspect hardware interface for reporting number of GPU devices connected to a system. This information is advertised through capability "pci_gpu_devices", which can be used to make scheduling decisions for the node. Currently, NVIDIA Tesla T4 GPU devices are reported. * Adds support for managing BIOS settings via the Redfish out-of- band (OOB) management protocol to the "idrac" hardware type. The new hardware BIOS interface implementation which offers it is named "idrac-redfish". The "idrac" hardware type declares support for that new interface implementation, in addition to all BIOS interface implementations it has been supporting. The highest priority BIOS interface remains the same, the one which relies on the Web Services Management (WS-Man) OOB management protocol. The new "idrac-redfish" immediately follows it. It now supports the following BIOS interface implementations, listed in priority order from highest to lowest: "idrac-wsman", "idrac-redfish", and "no-bios". For more information, see story 2008100 (https://storyboard.openstack.org/#!/story/2008100) * Adds a new configuration option "[ilo]verify_ca" and a new "driver_info" parameter "ilo_verify_ca" to enhance certificate verification for hardware type ilo and ilo5 which can take directory and bolean values apart from file. * Adds functionality to perform out-of-band one button secure erase operation for iLO5 based HPE Proliant servers as a "management" clean step "one_button_secure_erase" for "ilo5" hardware type. * The "image_download_source" configuration option can now also be set per node in the "instance_info" or "driver_info" (the former having the highest priority). * Allows configuring IPMI cipher suite via the new "driver_info" parameter "ipmi_cipher_suite". * Adds "driver_internal_info" field to the node-related notification "baremetal.node.provision_set.*", new payload version 1.16. * Adds support for performing firmware updates using the "redfish" and "idrac" hardware types. A new firmware update cleaning step has been added to the "redfish" hardware type. The "idrac" hardware type also automatically gains this capability through inheritance. * A new configuration option "[agent]require_tls" allows rejecting ramdisk callback URLs that don't use the "https://" schema. * Supports the Fujitsu "irmc" hardware type again. The Third Party CI for the driver has started to work correctly in September 2020. Upgrade Notes ************* * The "one_button_secure_erase" clean step in the "ilo5" hardware type requires "proliantutils" version "2.10.0". Please upgrade this library to leverage this feature. * The default value of the configuration option "[agent]image_download_source" has been changed to "http" to simplify transition from the "iscsi" deploy interface. Set it to "swift" explicitly to maintain the previous behavior. * The deprecated "iscsi" deploy interface is no longer enabled by default, set "enabled_deploy_interfaces" to override. It is also no longer the first in the list of deploy interface priorities, so it has to be requested explicitly if the "direct" deploy is also enabled. * Since the "direct" deploy interface is now used by default, you need to configure "[deploy]http_url" and "[deploy]http_root" to point at a local HTTP server or configure access to Swift. * Support for token-less agents has been removed as the token-less agent support was deprecated in the Ussuri development cycle. The ironic-python-agent must be updated to 6.1.0 or higher to support communicating with the Ironic deployment after upgrade. This will generally require deployment, cleaning, and rescue kernels and ramdisks to be updated. If this is not done, actions such as cleaning and deployment will time out as the agent will be unable to record heartbeats with Ironic. For more information, please see the agent token (https://docs.openstack.org/ironic/latest/admin/agent- token.html) documentation. * The "redfish-virtual-media" boot interface is now the last in the list of priorities from the "redfish" hardware type. This means that new nodes will be created with "ipxe" or "pxe" boot if they are enabled. The reason for this change is limited support for pure Redfish virtual media from hardware vendors. To use virtual media with Redfish, please provide an explicit "boot_interface" parameter when creating nodes. If you enable only the "redfish" hardware type, you can also set the "default_boot_interface" configuration option to "redfish-virtual- media". Deprecation Notes ***************** * The "[ilo]ca_file" configuration option is deprecated for removal, please use "[ilo]verify_ca" instead which can take directory and boolean values apart from file for certificate verification. * The "iscsi" deploy interface is now deprecated, "direct" or "ansible" deploy should be used instead. We expected the complete removal of the "iscsi" deploy code to happen in the "X" release. * With the switch from neutronclient to openstacksdk the "[neutron]/retries" option has been deprecated, use "[neutron]/status_code_retries" and "[neutron]/status_code_retry_delay" instead. Security Issues *************** * Ramdisks supporting agent token are now globally required by Ironic. As this is a core security mechanism, it cannot be disabled and support for the "[DEFAULT]require_agent_token" configuration parameter has been removed as tokens are now always required by Ironic. For more information, please see the agent token (https://docs.openstack.org/ironic/latest/admin/agent-token.html) documentation. Bug Fixes ********* * Fixes compatability with some hardware that requires the file name of any virtual media to end with the suffix ".iso" when Ironic generates a virtual media image. We recommend operators generating their own virtual media files to name the files with proper extensions. * Fixes the deployment failure with Ussuri (and older) ramdisks that happens when another IPA command runs after "prepare_image". * Fixes an issue with the "ansible" deployment interface where automatic root deviec selection would accidently choose the system CD-ROM device, which was likely to occur when the ansible deployment interface was used with virtual media boot. The "ansible" deployment interface now ignores all Ramdisks, Loopbacks, CD-ROMs, and floppy disk devices. * Fixes an issue that caused in-band deploy steps inserted before "write_image" to be skipped when fast-track is used. * Fixes an issue where in-band deploy and clean steps were being cached across reboots of the agent. * Fixed iRMC inspection for getting MAC address. * Fixes an issue with agent token handling where the agent has not been upgraded resulting in an AgentAPIError, when the token is not required. The conductor now retries without sending an agent token. * Fixes a potential race in the hash ring code that could result in the hash rings never updated after their initial load. * Fixes the deprecated "idrac" hardware interface implementation "__init__" methods to call their base class "__init__" methods before emitting a log message warning about their deprecation. For more information, see story 2008197 (https://storyboard.openstack.org/#!/story/2008197) * Fixes an issue where agent heartbeats would be queued if a pre- existing lock was being held for the node which performed a heartbeat operation. The agent heartbeat implementation will no longer retry attempts to acquire an exclusive lock. * Prevents a take over from happening in the middle of a deploy step processing. This could happen if the RPC call "continue_node_deploy" is routed to a different conductor. * Fixes wiping the agent secret token on manual power off or reboot. Also makes sure to remove the agent URL since it may potentially change. * Fixes HTTP 500 when trying to unset the "protected" attribute via the CLI. * Fixes cleaning and managed inspection not respecting the "default_boot_mode" configuration option. * Fixes cleaning and managed inspection not following the standard boot mode handling logic, particularly, not trying to assert the requested boot mode if the driver allows it. * Fixes "redfish" BIOS interface "apply_configuration" cleaning/deploy step to work with Redfish Services that must be supplied the Distributed Management Task Force (DMTF) Redfish standard "@Redfish.SettingsApplyTime" annotation [1] to specify when to apply the requested settings, such as the Dell EMC integrated Dell Remote Acesss Controller (iDRAC). For more information, see story 2008163 (https://storyboard.openstack.org/#!/story/2008163) [1] http://redfish.dmtf.org/schemas/DSP0266_1.11.0.html#settings- resource * No longer silently ignores exceptions that happen when trying to run the next clean or deploy step. Other Notes *********** * The ironic conductor internal logic has been updated to return an error if no agent version has been submitted during a heartbeat. This is because versions have been transmitted by the agents for quite some time and support for the default use of agent token forces all agents to be updated. As such redundant code been removed and tests updated accordingly. * Communication with neutron is now using openstacksdk, removing the dependency on neutronclient. Changes in ironic 15.2.0..16.0.0 -------------------------------- 101fc2968 Add GPU reporting to idrac-wsman inspect interface 42d83a2bf Don't migrate away from iscsi if it is the default 68cea19d9 Minor agent version code cleanup 8bd138ca8 Support iRMC hardware type again 365005ba4 devstack: do not default to swift if SWIFT_ENABLE_TEMPURLS is False f2d5e88e0 Trivial: fix formatting in the prelude 0e399f750 Fix handling OctetString for pysnmp a1c5559fa Handle patching node /protected value with None 631fe9d8c Handle conductor_affinity earlier in the deployment process eae15a40e Update 'idrac' driver requirements for Victoria f0e0ef634 Redfish driver firmware update 9c171efdc Release notes prelude for the Victoria release 0c3f52ec9 Do not silently ignore exceptions when running next steps d3872cfcd Fix a race condition in the hash ring code 09f79416e Follow-up patch for iso less vmedia support bc628ac6e Route conductor notification RPC to the same conductor d5df36feb Fix invalid assert_has_calls b4fafd887 Adding changes for iso less vmedia support 76a6fca8d Use correct error handler instead of calling process_event('fail') 5ff3defb5 Fix deprecated 'idrac' interface '__init__'s 3e362dff5 Amend the agent_verify_ca release note to mention the configuration option 8d8d9de90 Add documentation for ISO boot 38349c5b8 Update release mappings and API history for 16.0 a0b28708b autospec for classmethods and staticmethods for Python < 3.7.4 cd2e557ac Release note updates for Victoria release 1a9020deb Update tests for Redfish BIOS apply_configuration 796e2302c Add Redfish BIOS interface to idrac HW type cb8cc0ca6 Expose agent_verify_ca in configuration and correctly handle booleans 29c507f0e Use tempdirs for /tftpboot, /httpboot creation tests 65d506639 Fix redfish BIOS to use @Redfish.SettingsApplyTime b0b71653c Make the standalone-redfish job voting d8dccc8d0 Deprecate the iscsi deploy interface ed0ef6cf5 Reduce VMs for multinode and standalone jobs 7d0661a1b Reduce grenade node count a141b6f17 Limit inspector jobs to 1 testing VM 4e8f664ea CI: Remove the build check for pre-build ramdisks only e6e774f52 Do not retry locking when heartbeating 6d36b0b78 Adds ilo-uefi-https boot interface to ilo5 1f0174bb4 Native zuulv3 grenade multinode multitenant 2773c5fb2 Allow configuring IPMI cipher suite a1bb35983 Clarify HPE Edgeline support ce6947755 Add redfish options to the generated docs bc04a42a9 Also wipe agent token on manual power off or reboot d87550049 Remove install unnecessary packages 19d97e656 Fix lower-constraints for Ubuntu Focal ab4fdb8e7 Add release note for dhcp-less deploy 5f9efb34e Handle default_boot_mode during cleaning/inspection with PXE/iPXE 3334b7177 Add 'agent_token' to heartbeat request c715e35c8 Follow-up patch for One Button Secure Erase clean step 2b676a686 Accept and use a TLS certificate from the agent 41f15dba6 clean up mac address with the pxe configuration files b5d5e5774 Change [agent]image_download_source=http f6b65cb68 Add an option to require TLS for agent callback_url 1154292d4 Allow HttpImageService to accept custom certificate 6ee91fc3a Adds few of the security dashboard parameters to capabilities 5b272b0c4 Remove token-less agent support fa383c916 Detail iPXE + LACP troubleshooting information ce46cc461 Do not assume that prepare_image is the last command to run 9fb4074bf OOB one button secure erase for iLO5 based HPE Proliant servers. 95f569ade Add missing log for clean failed 485126e8a Trivial: fix minor typo on RFC number 44cf63c23 Update deploy steps documentation 958f15a07 documentation: follow-up to file:// support in direct deploy 778d715b5 Enhance certificate verification for ilo harware type 747753f91 Add L3 boot section to the docs 840ce1666 Allow setting image_download_source per node 9ac5c0277 Support caching http:// images locally in the direct deploy c31cb7d99 Support file:/// images for the direct deploy ce39115fa Explicitely do not allocate initial space for virtual volumes f28d30eaf Feat: add ibmc hardware info support for devstack ed6f9a14e [trivial] remove emacs config from devstack script 02fc64a35 Remove absolute path with iptables when L3 enabled 5c467e7d3 Update nodes in notifications documentation 71f5cfb42 Suffix the ISO names with '.iso' 2e91f7b2b Remove the unused coding style modules 3945fa4c2 driver_internal_info in provision notifications 8fff98a6f Enforce autospec in ilo tests 269ada268 Enforce autospec in common tests c165f71a5 Decouple the ISO creation logic from redfish 0071d2846 Ansible deploy - Ignore invalid devices c9720b025 Move redfish-virtual-media to the back of supported_boot_interfaces e9bda223f Increase memory of tinyipa vms 7dd611dc5 Ensure in-band deploy steps are present in time for fast-track deployments dae84efd6 Fix network_data path for dhcpless deployments ff00047b4 Switch Ironic to openstacksdk for Neutron 90bb75b39 Fix: port attribute name propagate_uplink_status 26d08bdda Remove qemu-img rootwrap filter 9e7f1cb57 ISO ramdisk virtual media test enablement 3e9360fc3 Documentation update for ilo hardware type 2f184f7c4 Pass global-request-id to ironic-python-agent 30d9cb47e Handle an older agent with agent_token Diffstat (except docs and test files) ------------------------------------- api-ref/source/baremetal-api-v1-misc.inc | 4 + api-ref/source/parameters.yaml | 7 + devstack/lib/ironic | 113 +- devstack/tools/ironic/scripts/create-node.sh | 2 +- devstack/upgrade/upgrade.sh | 1 + driver-requirements.txt | 8 +- etc/ironic/rootwrap.d/ironic-images.filters | 6 - ironic/api/controllers/v1/node.py | 3 + ironic/api/controllers/v1/ramdisk.py | 24 +- ironic/api/controllers/v1/utils.py | 5 + ironic/api/controllers/v1/versions.py | 4 +- ironic/cmd/conductor.py | 12 - ironic/cmd/dbsync.py | 2 + ironic/common/hash_ring.py | 28 +- ironic/common/image_service.py | 38 +- ironic/common/images.py | 6 +- ironic/common/keystone.py | 24 +- ironic/common/neutron.py | 326 +++--- ironic/common/pxe_utils.py | 13 +- ironic/common/release_mappings.py | 28 +- ironic/conductor/cleaning.py | 2 + ironic/conductor/deployments.py | 19 +- ironic/conductor/manager.py | 59 +- ironic/conductor/rpcapi.py | 13 +- ironic/conductor/task_manager.py | 7 +- ironic/conductor/utils.py | 122 +- ironic/conf/agent.py | 26 +- ironic/conf/auth.py | 18 +- ironic/conf/default.py | 33 +- ironic/conf/ilo.py | 21 + ironic/conf/neutron.py | 6 +- ironic/conf/opts.py | 3 +- ironic/conf/redfish.py | 10 + ironic/db/api.py | 12 + ironic/db/sqlalchemy/api.py | 53 + ironic/dhcp/neutron.py | 38 +- ironic/drivers/base.py | 4 +- ironic/drivers/drac.py | 2 +- ironic/drivers/generic.py | 2 +- ironic/drivers/ilo.py | 6 + ironic/drivers/irmc.py | 2 - ironic/drivers/modules/agent.py | 81 +- ironic/drivers/modules/agent_base.py | 8 +- ironic/drivers/modules/agent_client.py | 75 +- .../ansible/playbooks/library/root_hints.py | 6 + ironic/drivers/modules/boot_mode_utils.py | 5 +- ironic/drivers/modules/deploy_utils.py | 158 ++- ironic/drivers/modules/drac/bios.py | 11 + ironic/drivers/modules/drac/inspect.py | 25 +- ironic/drivers/modules/drac/management.py | 3 +- ironic/drivers/modules/drac/power.py | 1 + ironic/drivers/modules/drac/raid.py | 1 + ironic/drivers/modules/drac/vendor_passthru.py | 1 + ironic/drivers/modules/ilo/boot.py | 567 +++++++-- ironic/drivers/modules/ilo/common.py | 155 ++- ironic/drivers/modules/ilo/inspect.py | 4 +- ironic/drivers/modules/ilo/management.py | 48 +- ironic/drivers/modules/ilo/raid.py | 6 +- ironic/drivers/modules/image_utils.py | 534 +++++++++ ironic/drivers/modules/ipmitool.py | 35 +- ironic/drivers/modules/irmc/bios.py | 2 - ironic/drivers/modules/irmc/boot.py | 6 - ironic/drivers/modules/irmc/inspect.py | 4 +- ironic/drivers/modules/irmc/power.py | 2 - ironic/drivers/modules/irmc/raid.py | 2 - ironic/drivers/modules/iscsi_deploy.py | 5 + ironic/drivers/modules/network/common.py | 39 +- ironic/drivers/modules/network/flat.py | 16 +- ironic/drivers/modules/pxe_base.py | 3 +- ironic/drivers/modules/redfish/bios.py | 9 +- ironic/drivers/modules/redfish/boot.py | 465 +------- ironic/drivers/modules/redfish/management.py | 337 ++++++ ironic/drivers/modules/redfish/utils.py | 65 +- ironic/drivers/redfish.py | 6 +- ironic/objects/node.py | 7 +- ironic/objects/notification.py | 12 +- .../common/json_samples/neutron_port_show.json | 4 +- .../json_samples/neutron_port_show_ipv6.json | 2 +- .../unit/drivers/modules/drac/test_inspect.py | 115 +- .../drivers/modules/ilo/test_firmware_processor.py | 2 +- .../unit/drivers/modules/ilo/test_management.py | 68 +- .../drivers/modules/intel_ipmi/test_intel_ipmi.py | 3 +- .../unit/drivers/modules/irmc/test_inspect.py | 23 +- .../unit/drivers/modules/network/test_flat.py | 22 +- .../unit/drivers/modules/network/test_neutron.py | 127 +- .../unit/drivers/modules/redfish/test_bios.py | 71 +- .../unit/drivers/modules/redfish/test_boot.py | 494 ++------ .../drivers/modules/redfish/test_management.py | 564 +++++++++ .../unit/drivers/modules/redfish/test_utils.py | 17 + .../unit/drivers/modules/test_agent_client.py | 125 +- .../unit/drivers/modules/test_boot_mode_utils.py | 11 + .../unit/drivers/modules/test_deploy_utils.py | 150 ++- .../unit/drivers/modules/test_iscsi_deploy.py | 7 +- .../unit/drivers/third_party_driver_mock_specs.py | 4 + lower-constraints.txt | 19 +- .../run.yaml | 173 --- .../legacy/ironic-dsvm-base-multinode/post.yaml | 15 - .../legacy/ironic-dsvm-base-multinode/pre.yaml | 22 - ...uefi-https-boot-interface-f3b163a8a6243283.yaml | 7 + .../add-iso-less-vmedia-ilo-5816922c03d0fd85.yaml | 18 + .../notes/add-iso-suffix-557a4fc4382fd7f3.yaml | 7 + ...urity_capabilities_to_ilo-1ff11b01e5930cc7.yaml | 9 + .../notes/agent-uuid-5d86bc18849acda3.yaml | 5 + .../notes/agent-verify-ca-6efa3dfc469bab02.yaml | 4 + .../notes/agent-verify-ca-ddbfbb0f27198d82.yaml | 3 +- ...om_certificate_validation-8ba00759ed79e429.yaml | 5 + ...ble-device-name-filtering-0adfca7d8ba4cbcc.yaml | 9 + .../notes/dhcpless-deploy-4b91de74adeff781.yaml | 9 + .../notes/direct-file-6f80728d76093530.yaml | 4 + .../notes/fast-track-steps-81bd79a2a91e1b30.yaml | 8 + .../fix-irmc-inspection-c9ae3864a96b2588.yaml | 4 + ...andle-older-agent-command-5930124fd03bb327.yaml | 6 + releasenotes/notes/hash-ring-6ce212ab86c2592d.yaml | 5 + .../notes/http-local-4e8f32c6d5309f12.yaml | 7 + ...add-gpu-reporting-support-f4d80e2071f85f6a.yaml | 8 + ...-add-redfish-bios-support-3633d2fc94d31f62.yaml | 19 + ...-idrac-interface-__init__-362696b389c86d5d.yaml | 8 + ...-verification-enhancement-8eefd541cfc2a9da.yaml | 12 + ...b-one-button-secure-erase-f55628f8aa767c20.yaml | 9 + .../image-download-http-976c82f440c61c96.yaml | 7 + .../image_download_source-842282c70b226e93.yaml | 6 + .../notes/ipmi-cipher-suite-499097740f7c86ee.yaml | 5 + .../notes/iscsi-deprecation-eb184141f88e7182.yaml | 16 + ...nor-agent-version-cleanup-842e3919a366b9d6.yaml | 8 + .../no-heartbeat-retries-d6837684e7257249.yaml | 7 + .../no-tokenless-agents-c6c16d79ccc0da7a.yaml | 20 + ...ions_driver_internal_info-3012f9834b6ade6b.yaml | 5 + .../notes/notify-topic-451493784ce45e73.yaml | 6 + .../notes/power-off-token-0403e8a054f31125.yaml | 5 + .../prelude-for-victoria-e65b4c63ce1e1a7a.yaml | 26 + .../notes/protected-unset-0620b844afbb635e.yaml | 5 + .../notes/pxe-boot-mode-9084ccf35e54bbc0.yaml | 9 + .../redfish-firmware-update-a06d0624325a66ca.yaml | 9 + ...-bios-settings-apply-time-9b50979d2afc0d27.yaml | 14 + .../notes/redfish-priorities-adf4b7bfbee0ca25.yaml | 13 + ...nclient-with-openstacksdk-20c06d9d0316c2df.yaml | 10 + .../notes/require-tls-3880e6bec3075f4d.yaml | 5 + .../notes/spawn-error-2249f94606388fbd.yaml | 5 + ...support-irmc-driver-again-589db26927e32847.yaml | 5 + requirements.txt | 9 +- setup.cfg | 2 + test-requirements.txt | 5 +- tox.ini | 4 - zuul.d/ironic-jobs.yaml | 235 +++- zuul.d/legacy-ironic-jobs.yaml | 46 - zuul.d/project.yaml | 11 +- 205 files changed, 8171 insertions(+), 3392 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 539d27ba9..b00680fa2 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -7 +7 @@ -proliantutils>=2.9.5 +proliantutils>=2.10.0 @@ -10 +10 @@ python-scciclient>=0.8.0 -python-dracclient>=3.1.0,<5.0.0 +python-dracclient>=5.1.0,<6.0.0 @@ -14 +14 @@ python-xclarityclient>=0.1.6 -sushy>=3.2.0 +sushy>=3.4.0 @@ -23 +23 @@ python-ibmcclient>=0.2.2,<0.3.0 -sushy-oem-idrac<=1.0.0 +sushy-oem-idrac<2.0.0 diff --git a/requirements.txt b/requirements.txt index 9f7593b3c..b36a38789 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5,2 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT -alembic>=0.9.6 # MIT +SQLAlchemy>=1.2.19 # MIT +alembic>=1.4.2 # MIT @@ -11 +10,0 @@ python-cinderclient!=4.0.0,>=3.3.0 # Apache-2.0 -python-neutronclient>=6.7.0 # Apache-2.0 @@ -22 +21 @@ oslo.context>=2.19.2 # Apache-2.0 -oslo.db>=4.40.0 # Apache-2.0 +oslo.db>=6.0.0 # Apache-2.0 @@ -46 +45 @@ tooz>=2.7.0 # Apache-2.0 -openstacksdk>=0.37.0 # Apache-2.0 +openstacksdk>=0.48.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 4d3bdfcea..fb628fe40 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ fixtures>=3.0.0 # Apache-2.0/BSD -PyMySQL>=0.7.6 # MIT License +PyMySQL>=0.8.0 # MIT License @@ -14 +14 @@ stestr>=1.0.0 # Apache-2.0 -psycopg2>=2.7.3 # LGPL/ZPL +psycopg2>=2.8.5 # LGPL/ZPL @@ -18,0 +19 @@ pycodestyle>=2.0.0,<2.6.0 # MIT +pysnmp>=4.4.12

1 0

bifrost 9.0.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We are excited to announce the release of: bifrost 9.0.0: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/bifrost For more details, please see below. 9.0.0 ^^^^^ New Features ************ * Adds support to install the Ironic Prometheus Exporter. It can be done through the "bifrost-cli" using "--enable-prometheus-exporter" option, or when setting *enable_prometheus_expoter=True* when deploying. * The first IPv4 address of the "network_interface" is now used for ironic and ironic-inspector API URLs in "clouds.yaml" in "openrc" instead of "localhost". Use "ironic_api_url" and "ironic_inspector_api_url" to override. * The "bifrost-keystone-client-config" role now validates that CLI access actually works with the generated configuration, use "skip_validation=false" to disable. * Supports TLS configuration by setting "enable_tls=true" and, optionally, "generate_tls=true". The corresponding "bifrost-cli" argument is "--enable-tls" (auto-generated certificates only). * The "bifrost-ironic-install" role now validates that the services have been started successfully, use "skip_validation" to disable. Known Issues ************ * Because of Ansible dependencies Bifrost only works on virtual environments created with "--system-site-packages". * When using Keystone for authentication, it may not be possible to disable TLS after enabling it if the certificate is in a non- standard location. * Due to upgrade limitations, it may not be possible to enable TLS on upgrading from a previous version. Do an upgrade first, then enable TLS in a separate installation step. Upgrade Notes ************* * The "use_public_urls" parameter is no longer supported, just provide "public_ip" instead. * Bifrost no longer adds ironic and ironic-inspector endpoints to the public firewalld zone, the operator has to do it explicitly if external access is expected. * Support for the legacy CSV inventory format has been removed, only JSON and YAML are supported now. * Support for installing and using RabbitMQ has been removed. * Support for storing introspection data in nginx has been removed. It was useful before ironic-inspector started supporting storing data in the database, which is the default nowadays. * Support for the OpenStack MetaData version 2012-08-10 has been removed from the "bifrost-configdrives-dynamic" role. The newest supported metadata version is now 2015-10-15. * The deprecated parameter "node_network_info" has been removed, use "node_network_data" instead. * Adds the explicit setting of file access permissions to get_url calls in bifrost ansible playbooks to ensure that the contents of "/httpboot" are world-readable independently of which Ansible version is in use. * Packaged iPXE ROMs are now used by default on openSUSE, set "download_ipxe=true" to override. * Bifrost will no longer kill all running dnsmasq processes for you. If you have dnsmasq processes that are not managed by systemd, you have to stop them yourself. * No longer supports installation outside of a virtual environment. The parameter "enable_venv" has been removed. Bug Fixes ********* * Fixes an issue where the bifrost-create-dib-image role overrides any existing ELEMENTS_PATH environment variable value. This fix appends any existing ELEMENTS_PATH value to the path set in the role. * Changes to keystone endpoint configuration are now automatically reflected on existing endpoints. * Correctly updates repositories copied with "copy_from_local_path". * When copying repositories using "copy_from_local_path", make sure they are consistently owned by the local user. Previously some repositories could end up owned by "root". * Correctly updates IPA images checksums on a major upgrade. * Automatically enables DHCP and TFTP services in firewalld on CentOS/RHEL. * Instead of modifying the "public" firewalld zone, creates a new zone "bifrost" and puts the "network_interface" in it. Set "firewalld_internal_zone=public" to revert to the previous behavior. * Makes "/var/lib/ironic" and its images subdirectories readable by nginx. This is required for using the images cache. * Fixes ACL of PXE and iPXE boot files to make sure they are world- readable. * Resolves the issue with ansible versions 2.9.12 and 2.8.14 where implicit setting of file permissions on files downloaded with get_url calls results in overly restrictive permissions. This leads to access denied while attempting to read the contents of "/httpboot" and results in failed deployments. * Ensures that repositories are consistently owned by the calling user. * Removes the "test_vm_network_enable_dhcp" option and disables DHCP on the libvirt network instead of unconditionally killing all dnsmasq processes on the machine. * Adds correct SELinux context for "/tftpboot". Other Notes *********** * The file "env-vars" has been removed. It contains variables that only work for no-auth mode and only for ironic itself (not inspector). Use the generated "clouds.yaml" or "openrc" in the home directory. * The primary supported version of Ubuntu is now 20.04 (Focal). Ubuntu 18.04 (Bionic) is still supported, but may be removed in a future release. * Ironic JSON RPC is now always authenticated, even in no-auth mode. * Removes the no longer used "transform_boot_image" variable. Changes in bifrost 8.3.0..9.0.0 ------------------------------- 4f175fd Add ipe installation to bifrost ac9eab4 Document a potential issue with firewalld and SSH a454be2 Always default skip_validation to skip_start 120fc5d Switch integration testing to Ubuntu Focal 813e323 Add some interfaces for development hardware types d550a1f bifrost-configdrives-dynamic: automatically find ed25519 SSH keys eaa04b1 bifrost-cli: do not provide any release if non can be detected dc57b72 Fix internal_ip detection in {enroll,deploy}-dynamic 90a98d0 Move CLI validation to bifrost-keystone-client-config 0ef62ca Ensure that repositories are owned by the running users 0c242fa test-bifrost: use existing playbooks 20863aa Cleanup test-bifrost.yaml 8a4e36a Correct the auth_strategy value (noauth instead of none) cd3fcaf Recover support for installing stable/ussuri 08339c3 Discourage using non-matching versions of Bifrost and Ironic 736eccf redfish-emulator: log handled requests 8cce676 Remove install unnecessary packages 3fcd7c5 [CI] Check with Kolla Ansible 321c823 Fix l-c testing for Ubuntu Focal (py38) 7e8e60f Re-download checkums on upgrades and updates c7f3935 Force updating repos with copy_from_local_path 3d07f8e Remove transform_boot_image a874c7a Always setup environment in bifrost-cli and make it less verbose 28c0848 Remove unnecessary overrides of ansible_python_interpreter 5e7f72a Fix install on systems without systemd e4ad94c Follow up on "Fix error 601" ddafc94 TLS support for API services e4d0325 Fix error 601 ea4ee59 Use packaged iPXE ROMs for openSUSE 710e0db Create our own firewalld zone and use it on real bare metal eb8d858 Workaround for setuptools 50.0 2e6ce41 ansible-lint: fix error 602 4140536 ansible-lint: fix error 504 0eee2d0 ansible-lint: fix error 206 ef51bdc Let us finish the rabbit hunt ee5fb69 Update keystone documentation 114c210 Move services to internal_ip by default and refactor endpoint creation 807700c Change LANG in install-deps.sh to en_US.UTF-8 57edf29 Make /var/lib/ironic/{,images,master_images} readable by nginx 5befa87 Disable DHCP on the libvirt network rather than doing `killall dnsmasq` 3aacfd3 Add correct SELinux context for /tftpboot and fix map-file ACL 9a026a7 Allow custom elements by appending existing ELEMENTS_PATH var fc022bd Trivial: remove a reference to update-rc.d 1f37c41 Explicitly set permissions on /httpboot contents 04a6973 Remove support for OpenStack MetaData version 2012-08-10 156a316 Authentication JSON RPC even in no-auth mode 7445e6f Stop supporting storing introspection data in nginx 790f81c Remove support for the legacy CSV format 2cf2125 Remove support for non-venv deployments b51efc1 ansible-lint: fix errors 303, 305, 306 62a803f ansible-lint: fix error 204 (Lines should be no longer than 160 chars) 6f825b0 Add a CI job with ansible-lint 3b52787 Remove env-vars 2eabfd7 Make the iPXE and PXE boot files world-readable 6e1bae9 Explicitly enable DHCP services on baremetal CentOS/RHEL d203955 dynamic: always use clouds.yaml when it is available df33abf Validate that the services are running after installation Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 10 + bifrost/cli.py | 55 ++--- bifrost/inventory.py | 144 +------------ env-vars | 2 - lower-constraints.txt | 2 +- playbooks/ci/run.yaml | 3 +- playbooks/cleanup-deployment-images.yaml | 6 +- playbooks/deploy-dynamic.yaml | 5 + playbooks/enroll-dynamic.yaml | 7 +- playbooks/example-deploy-all-available-nodes.yaml | 14 +- playbooks/install.yaml | 17 +- playbooks/inventory/group_vars/localhost | 5 - playbooks/inventory/group_vars/target | 5 - playbooks/redeploy-dynamic.yaml | 21 +- playbooks/roles/bifrost-cloud-config/README.md | 4 + .../roles/bifrost-cloud-config/defaults/main.yml | 11 + .../roles/bifrost-cloud-config/tasks/main.yml | 35 +++- .../bifrost-configdrives-dynamic/defaults/main.yml | 12 +- .../bifrost-configdrives-dynamic/tasks/main.yml | 43 ++-- .../tasks/ssh_public_key_path.yaml | 36 +++- .../tasks/update_facts_from_ironic.yaml | 1 + .../bifrost-configdrives-dynamic/vars/main.yml | 5 - .../defaults/main.yml | 3 +- .../tasks/create_bootable_image.yml | 37 ++-- .../bifrost-create-bootable-image/tasks/main.yml | 2 +- .../bifrost-create-dib-image/defaults/main.yml | 3 +- .../roles/bifrost-create-dib-image/tasks/main.yml | 124 ++++++++---- playbooks/roles/bifrost-create-vm-nodes/README.md | 11 +- .../bifrost-create-vm-nodes/defaults/main.yml | 6 +- .../bifrost-create-vm-nodes/tasks/create_vm.yml | 8 +- .../roles/bifrost-create-vm-nodes/tasks/main.yml | 80 +++----- .../tasks/prepare_libvirt.yml | 8 +- .../bifrost-create-vm-nodes/templates/net.xml.j2 | 8 +- .../templates/redfish-emulator.service.j2 | 10 +- .../templates/vbmcd.service.j2 | 7 +- .../bifrost-deploy-nodes-dynamic/defaults/main.yml | 3 +- .../bifrost-deploy-nodes-dynamic/tasks/main.yml | 14 +- playbooks/roles/bifrost-ironic-install/README.md | 21 +- .../roles/bifrost-ironic-install/defaults/main.yml | 65 ++++-- .../defaults/required_defaults_Suse_family.yml | 11 +- .../bifrost-ironic-install/tasks/bootstrap.yml | 200 +++++++++--------- .../tasks/create_tftpboot.yml | 71 +++++-- .../tasks/download_ipa_image.yml | 92 +++++---- .../bifrost-ironic-install/tasks/get_ipxe.yml | 8 +- .../bifrost-ironic-install/tasks/hw_types.yml | 11 +- .../tasks/inspector_bootstrap.yml | 44 +++- .../roles/bifrost-ironic-install/tasks/install.yml | 12 +- .../bifrost-ironic-install/tasks/ironic_config.yml | 11 +- .../tasks/keystone_setup.yml | 224 +++++++-------------- .../tasks/keystone_setup_inspector.yml | 178 ++++++---------- .../roles/bifrost-ironic-install/tasks/main.yml | 33 +-- .../bifrost-ironic-install/tasks/migrations.yml | 7 +- .../tasks/prometheus_exporter_install.yml} | 26 +-- .../tasks/prometheus_exporter_start.yml | 38 ++++ .../tasks/set_ssh_private_key.yml | 10 +- .../tasks/setup_firewalld.yml | 50 +++++ .../roles/bifrost-ironic-install/tasks/start.yml | 30 ++- .../bifrost-ironic-install/tasks/validate.yml | 97 +++++++++ .../templates/inspector-default-boot-ipxe.j2 | 2 +- .../templates/ironic-inspector.conf.j2 | 28 ++- .../ironic-prometheus-exporter.service.j2 | 10 + .../templates/ironic.conf.j2 | 57 ++++-- .../bifrost-ironic-install/templates/nginx.conf.j2 | 8 - .../defaults/main.yml | 21 +- .../bifrost-keystone-client-config/tasks/main.yml | 11 +- .../tasks/validate.yml | 60 ++++++ .../templates/clouds.yaml.j2 | 15 ++ .../templates/openrc.j2 | 4 + .../bifrost-keystone-install/defaults/main.yml | 18 +- .../bifrost-keystone-install/tasks/bootstrap.yml | 73 ++++--- .../roles/bifrost-keystone-install/tasks/main.yml | 41 ++-- .../roles/bifrost-keystone-install/tasks/start.yml | 3 +- .../bifrost-keystone-install/tasks/upgrade.yml | 121 +++++++++++ .../templates/keystone-admin.ini.j2 | 4 +- .../templates/keystone-public.ini.j2 | 4 +- .../nginx_conf.d_bifrost-keystone.conf.j2 | 12 ++ .../roles/bifrost-pip-install/defaults/main.yml | 3 +- playbooks/roles/bifrost-pip-install/tasks/main.yml | 30 +-- .../bifrost-prep-for-install/defaults/main.yml | 13 +- .../roles/bifrost-prep-for-install/tasks/main.yml | 27 ++- .../defaults/main.yml | 7 +- .../tasks/main.yml | 8 +- playbooks/roles/bifrost-rabbitmq/defaults/main.yml | 11 - playbooks/roles/bifrost-rabbitmq/tasks/main.yml | 62 ------ .../roles/bifrost-test-dhcp/files/test-dhcp.py | 24 --- playbooks/roles/bifrost-test-dhcp/tasks/main.yml | 4 +- playbooks/roles/bifrost-tls/README.md | 86 ++++++++ playbooks/roles/bifrost-tls/defaults/main.yml | 34 ++++ playbooks/roles/bifrost-tls/tasks/main.yml | 54 +++++ .../defaults/main.yml | 3 +- .../tasks/main.yml | 1 + .../roles/ironic-delete-dynamic/defaults/main.yml | 3 +- .../roles/ironic-delete-dynamic/tasks/main.yml | 1 + .../roles/ironic-enroll-dynamic/defaults/main.yml | 3 +- .../roles/ironic-enroll-dynamic/tasks/main.yml | 3 +- .../roles/ironic-inspect-node/defaults/main.yml | 3 +- playbooks/roles/ironic-inspect-node/tasks/main.yml | 7 +- playbooks/test-bifrost-create-vm.yaml | 20 +- playbooks/test-bifrost.yaml | 100 ++------- releasenotes/notes/add-ipe-1f57e04d2881215f.yaml | 6 + .../allow-custom-elements-05c9495c8fd840e8.yaml | 7 + releasenotes/notes/api-url-a6f79de3cc8b0e3d.yaml | 15 ++ .../notes/cli-validate-474e15ba9631e72f.yaml | 6 + .../copy_from_local_path-8aff180483e6bced.yaml | 8 + .../download-ipa-upgrade-91e0fc4beea7419e.yaml | 4 + releasenotes/notes/env-vars-f07a4779a881c039.yaml | 6 + .../notes/firewalld-services-4c255c02d8d427f8.yaml | 4 + .../notes/firewalld-zone-d8c72fb5924a4916.yaml | 11 + releasenotes/notes/focal-e40fdd37d11faac9.yaml | 5 + .../notes/images-permissions-2042490e3ca13656.yaml | 5 + .../notes/interpreter-a6cd3a98e9cd239f.yaml | 5 + .../notes/json-rpc-auth-2430cc7432cbfe10.yaml | 4 + releasenotes/notes/no-csv-b7f149e88aba1b85.yaml | 5 + releasenotes/notes/no-rabbit-95434aaea3bb5528.yaml | 4 + .../notes/no-store-nginx-75bc3f9068fb8f78.yaml | 6 + .../notes/old-network-info-33a853faf6d6c6d0.yaml | 8 + releasenotes/notes/pxe-acl-26f3be809caa0c88.yaml | 4 + .../notes/releasenote-341a5eebe6168aea.yaml | 13 ++ .../notes/repo-owner-41db02a4d0406a7a.yaml | 4 + releasenotes/notes/suse-ipxe-ce4f1bf07db78860.yaml | 5 + ...st_vm_network_enable_dhcp-78923ef94b44e6d1.yaml | 11 + .../notes/tftp-context-6f918743ba9052b0.yaml | 4 + releasenotes/notes/tls-988e725820bb8aca.yaml | 14 ++ .../transform_boot_image-16fe26bd1a849aa0.yaml | 3 + releasenotes/notes/validate-261b92bc614f5d4a.yaml | 5 + .../notes/venv-forever-ba8b85b04a28a293.yaml | 5 + scripts/env-setup.sh | 45 ++--- scripts/install-deps.sh | 78 +++---- scripts/test-bifrost.sh | 12 +- tools/ansible-lint.sh | 25 +++ tools/vagrant_dev_env/vagrant.yml | 6 +- tox.ini | 9 +- zuul.d/bifrost-jobs.yaml | 42 +++- zuul.d/project.yaml | 38 +++- 143 files changed, 2198 insertions(+), 1735 deletions(-)

1 0

ironic-python-agent 6.4.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We are psyched to announce the release of: ironic-python-agent 6.4.0: Ironic Python Agent Ramdisk This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 6.4.0 ^^^^^ New Features ************ * Enables support in IPA for hosting the API server over TLS. Using this support requires setting "[DEFAULT]listen_tls" to True, and then setting "[ssl]cert_file", "[ssl]key_file", and optionally "[ssl]ca_file" to files embedded in the ramdisk IPA runs inside. * When a recent enough version of ironic is detected and "listen_tls" is "False", agent will now generate a self-signed TLS certificate and send it to ironic on heartbeat. This ensures encrypted communication from ironic to the agent. Set "enable_auto_tls" to "False" to disable this behavior. * The "logs" inspection collector is now enabled by default, change "ipa-inspection-collectors" to disable. Upgrade Notes ************* * IPA heartbeat intervals now rely on accurate clock time. Any clean or deploy steps which attempt to sync the clock may cause heartbeats to not be emitted. IPA syncs time at startup and shutdown, so these steps should not be required. Bug Fixes ********* * Fixes an issue with nodes undergoing fast-track from introspection to deployment where the agent internal cache of the node may be stale. In particular, this can be observed if node does not honor a root device hint which is saved to Ironic's API *after* the agent was started. More information can be found in story 2008039 (https://storyboard.openstack.org/#!/story/2008039) * Fixes a minor incorrect keyword argument that was matching between the method caller and the unit test but not the actual method, unit test, and caller. This was a non-fatal issue, and should now permit the agent to attempt to lookup the node one last time before deploying the instance image to pick-up a root device hint. * Fixes an issue with the IntelCnaHardwareManager which prevented hardware managers with lower priority to be executed and therefore may blocked the initialization and collection of hardware these managers are supposed to take care of. * Fixes a bug where the partitions created during software RAID setup are cleaned too early and therefore may prevent the proper cleaning of the md superblocks. Leaving superblocks behind will impact the creation of new md devices later on. * Detects md component devices by their UUID, rather than by scanning the output of mdadm. This will prevent that devices miss md superblock cleanup when they are currently not part of an array. * Since the Ussuri release, IPA has ignored the listen_host and listen_port directives. This fixes the behavior and restores those configuration values to working status. https://storyboard.openstack.org/#!/story/2008016 Other Notes *********** * Adds an explicit capture of connectivity failures in the heartbeat process to provide a more verbose error message in line with what is occuring as opposed to just indicating that an error occured. This new exception is called "HeartbeatConnectionError" and is likely only going to be visible if there is a local connectivity failure such as a router failure, switchport in a blocking state, or connection centered transient failure. Changes in ironic-python-agent 6.3.0..6.4.0 ------------------------------------------- 044c64d Software RAID: Get component devices by md UUID c7aec77 Software RAID: Don't delete partitions too early 565d596 Document ramdisk TLS and update existing TLS docs 4b0ef13 Fix: make Intel CNA hardware manager none generic a01646f Simplify heartbeating by removing use of select() afb521d CI: Lower memory usage of VMs/Increase swap 8f49757 Documentation: fix incorrect step names fe6b687 When reporting that agent is busy, report the executed command 9dd968f [doc] Clarify custom hardware manager inheritance 021e0a6 Generate a TLS certificate and send it to ironic 6a80564 Refactor API version negotiation code 08fdae9 Fix l-c 3426963 Fix backup node lookup 9b75453 Fix and run the correct functional tests job 63513ae Remove unused jobs 85bd44d Prepare to move ipa-builder jobs 1d11f0b If listen_tls is true, enable TLS on wsgi server 700c14c Move ironic-standalone-ipa-src to Ubuntu Focal 4716669 Replace oslo's loopingcall with tenacity 7d0ad36 Make WSGI server respect listen_* directives d3c3d4d Update the cache if we don't have a root device hint ffacb71 Document in-band deploy steps and add more docs for custom steps 3faf13b Refactor and fix documentation 82c7043 Remove experimental jobs d415287 Revert "Temporary disable multiple jobs to land CI fixes." 2a5ba7e Increase memory for tinyipa jobs 9ebab1b Temporary disable multiple jobs to land CI fixes. f670f70 Clarify connection error on heartbeats d50ff06 Enable the logs collection by default ba6ca24 Add possibility to pass global request ID Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/__init__.py | 8 + ironic_python_agent/agent.py | 91 +++++---- ironic_python_agent/api/app.py | 25 ++- ironic_python_agent/config.py | 26 ++- ironic_python_agent/errors.py | 19 ++ ironic_python_agent/extensions/base.py | 2 +- ironic_python_agent/extensions/iscsi.py | 3 +- ironic_python_agent/extensions/standby.py | 6 +- ironic_python_agent/hardware.py | 143 +++++++++++--- ironic_python_agent/hardware_managers/cna.py | 23 +-- ironic_python_agent/ironic_api_client.py | 69 ++++--- ironic_python_agent/tls_utils.py | 111 +++++++++++ lower-constraints.txt | 6 +- .../add-optional-tls-support-3ab6a834154fedec.yaml | 8 + releasenotes/notes/auto-tls-b52b873663f35618.yaml | 8 + .../change-heartbeat-method-d0119406137022e3.yaml | 7 + ...artbeat-connection-errors-2af152bf2d7928e2.yaml | 10 + .../fasttrack-stale-cache-fd93b56a955c7ab1.yaml | 9 + ...arly-node-lookup-argument-83d3f717c039e454.yaml | 9 + ...nx-hardware-mgr-never-run-72072580be4d6e7a.yaml | 7 + .../fix_partition_cleanup-46491861c930db12.yaml | 6 + ...get_md_components_by_uuid-7f08d423ea9e7c94.yaml | 6 + .../notes/inspector-logs-9b7c010c219691d2.yaml | 5 + ...respect-listen-directives-94fb863c5b692c07.yaml | 7 + requirements.txt | 4 +- zuul.d/ironic-python-agent-jobs.yaml | 98 ++-------- zuul.d/project.yaml | 8 +- 47 files changed, 1335 insertions(+), 469 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 28ea8ac..690a5b1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18,0 +19 @@ stevedore>=1.20.0 # Apache-2.0 +tenacity>=6.2.0 # Apache-2.0 @@ -20 +21,2 @@ ironic-lib>=4.1.0 # Apache-2.0 -Werkzeug>=0.15.0 # BSD License +Werkzeug>=1.0.1 # BSD License +cryptography>=2.3 # BSD/Apache-2.0

1 0

ironic-inspector 10.4.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We jubilantly announce the release of: ironic-inspector 10.4.0: Hardware introspection for OpenStack Bare Metal This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 10.4.0 ^^^^^^ New Features ************ * Adds an "accelerators" plugin to identify acclerator devices and update the bare metal node for future scheduling. The accelerator devices will be saved to node properties under the key "accelerators". Introduces a configuration option "[accelerators]known_devices" to specify a configuration file which contains required information to identify accelerator devices, by default it uses the in-tree configuration file named "known_accelerators.yaml". * The dnsmasq pxe-filter now supports mapping between host InfiniBand MAC to EthernetOverInfiniBand MAC. (This was previously only supported by the iptables pxe-filter.) * By default the DHCP filtering will open the DHCP server for any node when introspection is active. It will only block DHCP for enrolled nodes that are not being introspected. Doing so is required to support interface discovery (which by default will enroll the pxe port to ironic if not present). This behaviour is not always wanted, as nodes not managed by ironic may boot the inspection image. A new option was added "[pxe_filter]deny_unknown_macs" which allow changeing this behaviour so that the DHCP server only allow enrolled nodes being introspected and deny everything else. Note: If this option is "True", nodes must have at least one enrolled port prior to introspection. Bug Fixes ********* * Fixes the node identification logic to enable a user to list the "redfish_address" label for "driver_info" field values for identification of a machine using the "[DEFAULT]ipmi_address_fields" configuration option. Previously the host would just not be matched as the full URL would be evaluated instead of what the URL may resolve to. Changes in ironic-inspector 10.3.0..10.4.0 ------------------------------------------ b4f008f Revert "Power off before inspection" 7a067a9 pxe filter - option to always block unknown hosts 245cbed Correct the docstring for _should_enable_unknown_hosts 2f6df39 Limit inspector jobs to 1 testing VM 4644981 Add NVIDIA V100 to known accelerator devices 9a89c30 Fix l-c and mysql GRANT syntex for Ubuntu Focal 34b264e Power off before inspection de2a27a Identify accelerator devices during introspection f4648fa Replace retrying with tenacity 6792848 Minor doc fix to kernel options bbc5cd7 Fix URL parsing to enable redfish_address matching 17f58aa Log outcome of `check_conditions` method. 6732d5e Follow up to incorrect pxe-enabled was set Diffstat (except docs and test files) ------------------------------------- ironic_inspector/common/ironic.py | 18 +- ironic_inspector/conf/__init__.py | 2 + ironic_inspector/conf/accelerators.py | 35 ++++ ironic_inspector/conf/default.py | 3 +- ironic_inspector/conf/iptables.py | 2 +- ironic_inspector/conf/pxe_filter.py | 9 + ironic_inspector/known_accelerators.yaml | 9 + ironic_inspector/node_cache.py | 3 +- ironic_inspector/plugins/accel_device.py | 78 ++++++++ ironic_inspector/pxe_filter/base.py | 77 ++++++++ ironic_inspector/pxe_filter/dnsmasq.py | 16 +- ironic_inspector/pxe_filter/iptables.py | 95 ++++------ ironic_inspector/rules.py | 13 +- ironic_inspector/test/functional.py | 2 +- ironic_inspector/test/unit/test_common_ironic.py | 37 ++++ .../test/unit/test_dnsmasq_pxe_filter.py | 54 +++++- ironic_inspector/test/unit/test_iptables.py | 205 ++++++++------------- ironic_inspector/test/unit/test_node_cache.py | 26 +++ .../test/unit/test_plugins_accel_device.py | 52 ++++++ ironic_inspector/test/unit/test_pxe_filter.py | 197 ++++++++++++++++++++ lower-constraints.txt | 11 +- .../notes/accelerators-2aa4f0cedf359810.yaml | 10 + ...e-filter-eoib-mac-support-7567bbc7c6bf1878.yaml | 6 + ...-deny-unknown-host-option-b84b2aa1f7f49a17.yaml | 17 ++ .../support_redfish_address-94eae2c0d2879f53.yaml | 8 + requirements.txt | 11 +- setup.cfg | 1 + tools/test-setup.sh | 4 +- zuul.d/ironic-inspector-jobs.yaml | 1 + 31 files changed, 791 insertions(+), 226 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a31f8d9..bbf3a80 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ automaton>=1.9.0 # Apache-2.0 -alembic>=0.9.6 # MIT +alembic>=1.4.2 # MIT @@ -17,0 +18 @@ pytz>=2013.6 # MIT +PyYAML>=5.3.1 @@ -22 +23 @@ oslo.context>=2.19.2 # Apache-2.0 -oslo.db>=4.40.0 # Apache-2.0 +oslo.db>=6.0.0 # Apache-2.0 @@ -32 +33 @@ oslo.utils>=3.33.0 # Apache-2.0 -retrying!=1.3.0,>=1.2.3 # Apache-2.0 +tenacity>=6.2.0 # Apache-2.0 @@ -34,2 +35,2 @@ stevedore>=1.20.0 # Apache-2.0 -SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT -tooz>=1.64.0 # Apache-2.0 +SQLAlchemy>=1.2.19 # MIT +tooz>=2.5.1 # Apache-2.0

1 0

ironic-ui 4.2.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We enthusiastically announce the release of: ironic-ui 4.2.0: Ironic plugin UI for Horizon to allow users to view and manage bare metal nodes, ports and drivers. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ironic-ui Download the package from: https://pypi.org/project/ironic-ui Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-ui For more details, please see below. Changes in ironic-ui 4.1.0..4.2.0 --------------------------------- 927b4c2 [goal] Migrate testing to ubuntu focal Diffstat (except docs and test files) ------------------------------------- bindep.txt | 1 + ironic_ui/karma.conf.js | 2 +- lower-constraints.txt | 2 +- package.json | 2 +- 4 files changed, 4 insertions(+), 3 deletions(-)

1 0

ironic-prometheus-exporter 2.1.1 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We are stoked to announce the release of: ironic-prometheus-exporter 2.1.1: Prometheus Exporter for Ironic Hardware Sensor data This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ironic-prometheus-exporter Download the package from: https://tarballs.openstack.org/ironic-prometheus-exporter/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- prometheus-exporter For more details, please see below. 2.1.1 ^^^^^ Bug Fixes * Fix an issue where IPE fails if the node does not have *node_name* set Changes in ironic-prometheus-exporter 2.1.0..2.1.1 -------------------------------------------------- 6e6f218 Fallback to `node_uuid` if`node_name` is not present 4ac00a8 Update ram to avoid Kernel Panic Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- ironic_prometheus_exporter/messaging.py | 5 +- ironic_prometheus_exporter/parsers/header.py | 9 +- ironic_prometheus_exporter/parsers/ipmi.py | 4 + ironic_prometheus_exporter/parsers/redfish.py | 6 +- .../json_samples/notification-empty-node_name.json | 17 + .../notification-ipmi-none-node_name.json | 2348 ++++++++++++++++++++ .../json_samples/notification-none-node_name.json | 17 + .../notification-redfish-none-node_name.json | 67 + .../notes/no-node_name-ae693f6a030fed5f.yaml | 4 + 13 files changed, 2615 insertions(+), 9 deletions(-)

1 0

oslo.privsep 2.1.2 (ussuri)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We high-spiritedly announce the release of: oslo.privsep 2.1.2: OpenStack library for privilege separation This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. 2.1.2 ^^^^^ Other Notes * The "oslo.privsep" client can be called from a program using eventlet. If "eventlet.monkey_patch", some libraries will be patched, for example "threading" or "os". When the root daemon is forked from the client process, those libraries remain patched. Now, when the daemon is forked from the client process, those libraries and methods are restored to the original values. The goal is to prevent some timeouts when using eventlet threads (user threads); system threads are preemptive and the code does not need to care about the executor token. Changes in oslo.privsep 2.1.1..2.1.2 ------------------------------------ 6d41ef9 Undo the eventlet monkey patch for the privileged daemon a376b53 Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 9b239b5 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lower-constraints.txt | 2 +- oslo_privsep/daemon.py | 36 ++++++++++++++++++++++ ...y-patch-privileged-daemon-160e00296549df3d.yaml | 11 +++++++ requirements.txt | 2 +- tox.ini | 4 +-- 7 files changed, 80 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7228b1a..8541ac3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ cffi>=1.7.0 # MIT -eventlet!=0.18.3,!=0.20.1,>=0.18.2 # MIT +eventlet>=0.21.0 # MIT

1 0

manila-tempest-plugin 1.2.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We enthusiastically announce the release of: manila-tempest-plugin 1.2.0: Tempest plugin manila-tempest-plugin This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/manila-tempest-plugin Download the package from: https://tarballs.openstack.org/manila-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. Changes in manila-tempest-plugin 1.1.0..1.2.0 --------------------------------------------- e0c51e8 Keep few integration jobs running on Bionic 7836ae8 Fix export location sent to manage share operation b3089a7 Fix share server migration tests 125959e Don't ignore invalid export location ip version a6602ec Increase CephFS backing file size a98919f [Negative] Create share with non allowed share type 0d523bb Add tests for share server migration 1e115c5 Remove unused "_ping_host_from_export_location" method 88452b3 Add uuid for tests 4f0dbe0 Ping to export location until it is reachable d672a3e Add share resize scenario tests for CephFS Native 75f0d60 Revert CephFS test image to Bionic Beaver 2b30874 SSH over IPv4 when using a storage network d354d67 Remove experimental flag from share replication feature 1369e54 Fix skip condition for "test_default_share_group_type_applied" 1d1461d Add flake8-import-order extension to tox.ini 6db73a3 Ensure share server is created when driver handles share servers 58723ff Fixed InvalidConfiguration() exception to print correct message 842d08b Zuulv3 native "standalone" GlusterFS native, NFS jobs df804d8 Add Zuulv3 native jobs for the dummy driver 3cf113b Add py38 package metadata Diffstat (except docs and test files) ------------------------------------- .../services/share/json/shares_client.py | 2 +- .../services/share/v2/json/shares_client.py | 166 +++++++-- .../api/admin/test_export_locations_negative.py | 9 + .../api/admin/test_share_group_types_negative.py | 13 + .../api/admin/test_share_instances_negative.py | 3 + .../admin/test_share_servers_manage_negative.py | 8 + .../api/admin/test_share_servers_migration.py | 408 +++++++++++++++++++++ .../admin/test_share_servers_migration_negative.py | 392 ++++++++++++++++++++ .../api/admin/test_share_snapshot_instances.py | 5 + .../test_share_snapshot_instances_negative.py | 6 + .../api/admin/test_share_types_extra_specs.py | 7 + .../admin/test_share_types_extra_specs_negative.py | 33 ++ .../api/admin/test_snapshot_export_locations.py | 5 + .../test_snapshot_export_locations_negative.py | 9 + .../api/admin/test_snapshot_manage_negative.py | 5 + .../api/test_access_rules_metadata_negative.py | 3 + .../test_replication_export_locations_negative.py | 5 + .../api/test_security_services_mapping_negative.py | 13 + .../api/test_share_network_subnets_negative.py | 14 +- .../api/test_share_type_availability_zones.py | 6 + .../test_share_type_availability_zones_negative.py | 5 + .../api/test_shares_from_snapshot_across_pools.py | 3 + .../manila-tempest-plugin-standalone/post.yaml | 6 + .../manila-tempest-plugin-standalone/run.yaml | 11 + roles/set-tempest-config/README.rst | 19 + roles/set-tempest-config/defaults/main.yml | 3 + roles/set-tempest-config/tasks/main.yml | 14 + setup.cfg | 1 + test-requirements.txt | 1 + tox.ini | 9 +- zuul.d/manila-tempest-jobs.yaml | 285 +++++++++++++- zuul.d/project.yaml | 16 +- 109 files changed, 2395 insertions(+), 154 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index f230fa9..cf025c3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15,0 +16 @@ reno>=2.5.0 # Apache-2.0 +flake8-import-order

1 0

kuryr-tempest-plugin 0.7.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We are excited to announce the release of: kuryr-tempest-plugin 0.7.0: Kuryr Tempest Plugin This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/kuryr-tempest-plugin Download the package from: https://tarballs.openstack.org/kuryr-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/kuryr/+bugs For more details, please see below. Changes in kuryr-tempest-plugin 0.6.0..0.7.0 -------------------------------------------- bc8b216 Fail get_controller_pod_names when no pods found 53f01c4 Support for vifs being in 'spec' and 'status' objects. 2fe1791 Remove skip of test_service_udp_ping 2b388b8 Support KuryrLoadbalancer CRD 5dc54de Adapt NP tests to new CRD format 8456f2f Fix test in order to work with new kuryrport CRD. 6760376 Skip service_udp_ping until Bug 1886909 is fixed a916c0f Workaround missing DIB on stable jobs 07b2267 Retrieve KuryrNets CR when supported 58ca0d1 Use unittest.mock instead of mock 0b0dd66 Switch to newer openstackdocstheme version fe8af6c Add py38 package metadata c281c48 Raise timeout exception kuryrnetwork events 952fce3 Fix a typo in base 3cc3a5d Raise Time out exception for Network policy events Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 6 + kuryr_tempest_plugin/config.py | 5 + setup.cfg | 1 + test-requirements.txt | 1 - 11 files changed, 621 insertions(+), 423 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index cf070f5..c7981e5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -mock>=2.0.0 # BSD

1 0

oswin-tempest-plugin 1.1.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We are glad to announce the release of: oswin-tempest-plugin 1.1.0: This project contains Tempest tests to cover the os_win project, as well as a plugin to automatically load these tests into Tempest. This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oswin-tempest-plugin Download the package from: https://tarballs.openstack.org/oswin-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/os-win/+bugs For more details, please see below. Changes in oswin-tempest-plugin 1.0.0..1.1.0 -------------------------------------------- 4e2b705 Switch to newer openstackdocstheme version 0a11b66 Drop Python 3.5 testing 35ddb0d Add py38 package metadata ddc698e Fix hacking min version to 3.0.1 8019247 Update docs building, cleanup Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - oswin_tempest_plugin/clients/wsman.py | 4 ++-- setup.cfg | 27 ++-------------------- test-requirements.txt | 4 +--- tox.ini | 19 +++++++-------- 9 files changed, 30 insertions(+), 46 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index c760fb8..c20e8a3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -9 +8,0 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,>=1.6.2 # BSD @@ -11 +9,0 @@ stestr>=2.0.0 # Apache-2.0 -oslosphinx>=4.7.0 # Apache-2.0

1 0

watcher-tempest-plugin 2.1.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We are amped to announce the release of: watcher-tempest-plugin 2.1.0: Tempest plugin watcher-tempest-plugin This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/watcher-tempest-plugin Download the package from: https://tarballs.openstack.org/watcher-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/watcher/+bugs For more details, please see below. Changes in watcher-tempest-plugin 2.0.0..2.1.0 ---------------------------------------------- 7fbabca [goal] Migrate watcher-tempest-plugin jobs to focal 2e097b6 Stop to use the __future__ module. 25d06aa Switch to newer openstackdocstheme and reno versions 819b94b Add stable branch jobs on the plugins master gate e15055d check microversion before create EVENT audit Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 26 ++++++++++++++++++++++ releasenotes/source/conf.py | 9 ++++---- test-requirements.txt | 10 ++++++--- .../scenario/test_execute_host_maintenance.py | 2 -- .../test_execute_vm_workload_consolidation.py | 2 -- .../scenario/test_execute_workload_balancing.py | 2 -- 22 files changed, 53 insertions(+), 47 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 49a2713..32d0800 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5,0 +6,4 @@ hacking<0.13,>=0.12.0 # Apache-2.0 +# remove this pyflakes from here once you bump the +# hacking to 3.2.0 or above. hacking 3.2.0 takes +# care of pyflakes version compatibilty. +pyflakes>=2.1.1 @@ -10 +14 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx>=2.0.0,!=2.1.0 # BSD @@ -14 +18 @@ testtools>=2.2.0 # MIT -openstackdocstheme>=1.32.1 # Apache-2.0 +openstackdocstheme>=2.2.1 # Apache-2.0 @@ -16 +20 @@ openstackdocstheme>=1.32.1 # Apache-2.0 -reno>=2.5.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0

1 0

cinder 14.3.0 (stein)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We are psyched to announce the release of: cinder 14.3.0: OpenStack Block Storage This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 14.3.0 ^^^^^^ Upgrade Notes ************* * This release updates the os-brick library used by Cinder to version 2.8.7 to correct hopefully the final problem with the fix for Bug #1823200 (https://bugs.launchpad.net/cinder/+bug/1823200) in the previous os-brick release. See the os-brick 2.8.7 release notes (https://docs.openstack.org/releasenotes/os- brick/stein.html#relnotes-2-8-7-stable-stein) for more information. Bug Fixes ********* * Now cinder will be rollback the "quota_usages" table when failed to create an incremental backup if there doesn't exist a parent backup or the backup is not in available state. * Cinder no longer allows an incremental backup to be created while having the parent backup in another project. * Bug #1875570 (https://bugs.launchpad.net/cinder/+bug/1875570) Fixed issue with NFS backend where the image-volume cache was never used to create a volume, even when the cache was enabled. * Bug #1873738 (https://bugs.launchpad.net/cinder/+bug/1873738) RBD Driver: Added cleanup for residue destination file if the copy image to encrypted volume operation fails. Changes in cinder 14.2.1..14.3.0 -------------------------------- 8dbc04d27 Add release note for 14.3.0 0e72ffa98 Remove experimental job legacy-tempest-dsvm-zeromq-multibackend 4cc9e7b5f Require os-brick >= 2.8.7 14f5a20da Creating image-volume cache on NFS backend fails 175eb6281 RBD: Cleanup temporary file during exception aa78aea3a Revert "Make greande jobs n-v for EM and oldest stable" 5983eee1c Fix cross-project incremental backups ef07bc954 Rollback the quota_usages table when failed to create a incremental backup 6727f5cbe Fix DriverFilter to accept None volume type Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 11 ++-- cinder/backup/api.py | 7 ++- cinder/db/api.py | 4 +- cinder/db/sqlalchemy/api.py | 4 +- cinder/image/image_utils.py | 7 ++- cinder/objects/backup.py | 6 +- cinder/scheduler/filters/driver_filter.py | 2 +- cinder/volume/drivers/rbd.py | 15 +++-- cinder/volume/drivers/remotefs.py | 3 +- lower-constraints.txt | 2 +- ...809323-fix-invalid-backup-4a341dc362ded88e.yaml | 6 ++ ...746-cross-project-incremental-backup-error.yaml | 6 ++ ...70-nfs-image-volume-cache-c45e840a6ec2a702.yaml | 6 ++ ...-file-during-convert-fail-3848e9dbe7e15fc6.yaml | 6 ++ .../notes-for-14.3.0-release-995ee2c3c8f550b2.yaml | 12 ++++ requirements.txt | 2 +- 22 files changed, 207 insertions(+), 39 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index cf85363e1..ef1e6a959 100644 --- a/requirements.txt +++ b/requirements.txt @@ -61 +61 @@ oslo.vmware>=2.17.0 # Apache-2.0 -os-brick>=2.8.6 # Apache-2.0 +os-brick>=2.8.7 # Apache-2.0

1 0

magnum_tempest_plugin 1.1.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We contentedly announce the release of: magnum_tempest_plugin 1.1.0: Tempest plugin for Magnum Project This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/magnum_tempest_plugin Download the package from: https://tarballs.openstack.org/magnum-tempest-plugin/ For more details, please see below. Changes in magnum_tempest_plugin 1.0.0..1.1.0 --------------------------------------------- abe58fe Fix HTTP 400 error bcf46c5 Stop to use the __future__ module. 5da8cf6 Switch to newer openstackdocstheme and reno versions 0770360 Add py38 package metadata 7c9ce96 Remove six 6bb7b82 Update docs building, cleanup 599a7c3 Updated from global requirements 9cdd32c [ci] Define/enable magnum-tempest-plugin-tests-api d75cbd1 [ci] Support fedora-coreos in magnum-tempest-plugin Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 61 ++++++++++++++++++++++ magnum_tempest_plugin/common/client.py | 6 +-- magnum_tempest_plugin/common/datagen.py | 16 +++--- magnum_tempest_plugin/common/manager.py | 4 +- magnum_tempest_plugin/common/utils.py | 4 +- magnum_tempest_plugin/config.py | 10 ++-- releasenotes/source/conf.py | 24 ++------- requirements.txt | 7 ++- setup.cfg | 25 +-------- setup.py | 2 +- test-requirements.txt | 6 +-- tox.ini | 20 ++++--- 18 files changed, 122 insertions(+), 91 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6b299af..27b2ae4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=2.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 @@ -7,3 +7,2 @@ tempest>=17.1.0 # Apache-2.0 -oslo.config>=3.22.0 # Apache-2.0 -six>=1.9.0 -oslo.log>=3.30.0 # Apache-2.0 +oslo.config>=5.2.0 # Apache-2.0 +oslo.log>=3.36.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index dc23a99..f0f54ee 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0.0,<3.1.0 # Apache-2.0 @@ -7,4 +6,0 @@ hacking>=1.1.0,<1.2.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD -openstackdocstheme>=1.11.0 # Apache-2.0 -# releasenotes -reno>=1.8.0 # Apache-2.0

1 0

cinder 15.4.0 (train)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We exuberantly announce the release of: cinder 15.4.0: OpenStack Block Storage This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 15.4.0 ^^^^^^ Prelude ******* The Cinder project team would like to point out some issues addressed by this release: * The online data migrations for Train have been updated to address an upgrade issue (Bug #1893107 (https://bugs.launchpad.net/cinder/+bug/1893107)) The issue does not manifest itself in the Train release of cinder, but under specific circumstances it can prevent a cinder database upgrade from Train to Ussuri. See the "Upgrade Notes" and "Bug Fixes" sections below for more information. * This release improves the handling of the "__DEFAULT__" volume- type (see "Other Notes", below) and fixes Bug #1879578 (https://bugs.launchpad.net/cinder/+bug/1879578) in which the default type was applied too aggressively (see the discussion of this issue in "Bug Fixes", below). * Operators affected by OSSN-0086 (https://wiki.openstack.org/wiki/OSSN/OSSN-0086) should note that this release updates the os-brick library used by cinder to version 2.10.5 in order to address an issue associated with the previous fixes for Bug #1823200 (https://bugs.launchpad.net/cinder/+bug/1823200) Known Issues ************ * HPE 3PAR driver now supports networks with duplicated FQDNs via configuration option *unique_fqdn_network* so attaching in these networks will work (bug #1834695). Upgrade Notes ************* * The "default_volume_type" configuration option is now required to have a value. The default value is "__DEFAULT__", so you should see no change in behavior whether or not you have set a value for "default_volume_type". See Bug #1886632 (https://bugs.launchpad.net/cinder/+bug/1886632) for more information about this change. * This release modifies the online database migrations to address an an upgrade issue (Bug #1893107 (https://bugs.launchpad.net/cinder/+bug/1893107)) The issue does not manifest itself in the Train release of cinder, but under specific circumstances it can prevent a cinder database upgrade from Train to Ussuri. This upgrade notice applies to you only if **all** of the following conditions are met: 1. You upgraded to Train from Stein 2. Before upgrading from Stein, you did **not** purge the cinder database 3. Your original upgrade from Stein was to cinder version 15.3.0 or earlier. Note: If you are upgrading a Stein installation directly to this release (cinder 15.4.0) or later, this notice does *not* apply to you. If all the above three items apply to you, as part of your upgrade to cinder 15.4.0 you should re-run the online database migrations contained in this release. This will prepare your cinder database for an eventual upgrade to the Ussuri release. Note: The online database migrations in this release require the existence of a volume type named "__DEFAULT__". A "__DEFAULT__" volume type was created as part of your original installation of/upgrade to a Train release of cinder. If you have renamed (or renamed and deleted) the "__DEFAULT__" volume type, you must re- create it before running the online migrations. (If you renamed it, you don't have to un-rename it; you can create a new one just for the purposes of the online database migration.)If necessary, you can create a new "__DEFAULT__" volume type as follows using the Block Storage API, or by using the python-cinderclient or python-openstackclient to do the equivalent:API request: "POST /v3/{project_id}/types"Request body: { "volume_type": { "name": "__DEFAULT__", "description": "Default Volume Type", "os-volume-type-access:is_public": true } } The "__DEFAULT__" volume type may safely be renamed (or renamed and deleted) after you have run the online migrations as long as the "default_volume_type" configuration option is set to a valid existing volume type. * This release updates the os-brick library used by Cinder to version 2.10.5 to correct hopefully the final problem with the fix for Bug #1823200 (https://bugs.launchpad.net/cinder/+bug/1823200) in the previous os-brick release. See the os-brick 2.10.5 release notes (https://docs.openstack.org/releasenotes/os- brick/train.html#relnotes-2-10-5-stable-train) for more information. Bug Fixes ********* * Bug #1886632 (https://bugs.launchpad.net/cinder/+bug/1886632) The system defined "__DEFAULT__" volume type is now treated as a regular volume-type and may be updated or deleted. Since the configured "default_volume_type" cannot be deleted, however, the "__DEFAULT__" volume type may not be deleted if it is the value of that configuration option. * Fix *UnboundLocalError* on the Brocade lookup driver on southbound client creation failure during the device mapping retrieval (Bug #1888550). * Add Python 3 support to the Brocade Zone Manager driver. (bug #1888548). * Fix *AttributeError* on the Brocade ZM driver when using setting REST_HTTP or REST_HTTPS as the fc_southbound_protocol option and an exception is raised by the client (Bug #1866860). * NetApp SolidFire driver: Fixed an issue that causes failback to fail after a volume service restart. This change fixes bug 1859653 (https://bugs.launchpad.net/cinder/+bug/1859653) * Cinder no longer allows an incremental backup to be created while having the parent backup in another project. * Fix volume migration fails in the same ceph RBD pool. Bug 1871524. * Fix bug #1874134 (https://bugs.launchpad.net/cinder/+bug/1874134) allowing an iSCSI or FCP volume to be extended to a size up to 16TB regardless of its original size, even if it's attached to an instance. * Bug #1875570 (https://bugs.launchpad.net/cinder/+bug/1875570) Fixed issue with NFS backend where the image-volume cache was never used to create a volume, even when the cache was enabled. * Bug #1879578 (https://bugs.launchpad.net/cinder/+bug/1879578) A regression in the Train release caused Cinder to assign the default volume type too aggressively when a volume type was not specified in a volume-create request. As a result, some alternative methods of specifying the volume type were ignored and the default type (either configured by the operator or the system default) would be assigned. This release restores the intended behavior, which is described as follows: If a "volume_type" is not specified when a volume is created, Cinder tries to infer the volume type from other information in the volume- create request: * if a "source_volid" is supplied in the request, the volume type is inferred from the source volume's volume type * if a "snapshot_id" is supplied in the request, the volume type is inferred from the volume type associated with the snapshot * if an "imageRef" is supplied in the request, and the image has a "cinder_img_volume_type" image property, the volume type is inferred from the value of that image property Otherwise, the volume type is the default volume type configured by the operator, and if no volume type is so configured, the volume type is the system default volume type, namely, "__DEFAULT__". When a volume type is specified explicitly in a volume-create call, Cinder will use the specified type. If the specified type cannot be assigned due to a conflict with other parameters in the volume- create call, however, the call will result in a 400 (Bad Request) response. * Bug #1893107 (https://bugs.launchpad.net/cinder/+bug/1893107) The Ussuri release changes the cinder database schema to make the "volume_type_id" column in the "volumes" and "snapshots" tables non- nullable because all volumes have been required to have a volume type since the Train release. The online database migration in the cinder Train series (release 15.3.0 or earlier), however, did not process soft-deleted rows, leaving the possibility that there could be a deleted volume or snapshot with a null "volume_type_id", which in turn will make the database upgrade fail when the non-nullability constraint cannot be applied when a Train installation is upgraded to Ussuri. If you are upgrading to this release from an earlier release in the Train series (that is, you are upgrading from cinder>=15.0.0,<=15.3.0), under specific circumstances you should re-run the online database migrations so that your database will be in the correct state when you eventually upgrade to a Ussuri release. See the "Upgrade Notes" for more information. * Bug #1873738 (https://bugs.launchpad.net/cinder/+bug/1873738) RBD Driver: Added cleanup for residue destination file if the copy image to encrypted volume operation fails. * Fix HPE 3PAR driver issue where volumes that were live migrated to it would end up being inaccessible. We would no longer be able to use the volume for any operation, such as attach, detach, delete, snapshot, etc. (bug 1697422) * Fix "unique_fqdn_network" configuration option for the Kaminario driver, as it was being ignored when defined in the driver section, which used to work. (Bug #1886042). * NetApp ONTAP: Fixes bug 1839384 Detaching any instance from multiattached volume terminates connection. Now the connection is terminated only if there're no other instances using the same initiator. * Fix revert to snapshot not working for non admin users when using the snapshot's name (bug #1889758). Other Notes *********** * Beginning with the Train release, untyped volumes (that is, volumes with no volume-type) have been disallowed. To facilitate this, a "__DEFAULT__" volume-type was included as part of the Train database migration. In this release, handling of the default volume-type has been improved: * The "default_volume_type" configuration option is required to have a value. The default value is "__DEFAULT__". * A request to delete the currently configured "default_volume_type" will fail. (You can delete that volume- type, but you cannot do it while it is the value of the configuration option.) * There must always be at least one volume-type defined in a Cinder installation. This is enforced by the type-delete call. * If the "default_volume_type" is misconfigured (that is, if the value refers to a non-existent volume-type), requests that rely on the default volume-type (for example, a volume-create request that does not specify a volume-type) will result in a HTTP 500 response. Changes in cinder 15.3.0..15.4.0 -------------------------------- 58f0e7379 Add general release note for 15.4.0 e62ac1808 Modify default/delete volume type logic 54433cb8c Fix revert to snapshot for non admins 9e3e2ab25 Require os-brick >= 2.10.5 00ac80bba Include deleted volumes for online data migrations 49b0c5ec6 Fix rekeying volume with legacy encryption provider 9c13d7706 Brocade: Fix lookup UnboundLocalError b70e6a337 Brocade: Fix AttributeError when raising exception 7a9bc8434 Brocade: Python 3 support 193f3e97c Creating image-volume cache on NFS backend fails 48774c89a RBD: Cleanup temporary file during exception b8138986a zuul: collect cinderlib logs from tempest node(s) only 039b2bfd6 Kaminario: Fix unique_fqdn_network option 5122b1465 Default volume_type set too early d77377c23 Disable siblings for the cinderlib functional tests f3cdc2756 Fix cross-project incremental backups 4cf0d1124 HPE 3PAR: Support duplicated FQDN in network f13475f71 NetApp ONTAP: Fix extend volume for iSCSI/FCP d10df8c00 Native Zuul v3 cinder-grenade jobs fc59ea9e6 Port several legacy tempest jobs to Zuul v3 cfde6bd1c 3PAR: Fix live migration eec1b9217 NetApp SolidFire: Fix failback failing after service restart a11460f36 Fix volume migration fails in the same ceph RBD pool b9c6d4a7f NetApp ONTAP: Fix iSCSI multiattach volume terminates connection 257c1c16f Fix revert snapshot issue 20a55fc0c PowerMax Driver - PowerMax Pools Fix Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 141 ++++-- cinder/api/contrib/types_manage.py | 10 +- cinder/api/v2/volumes.py | 17 +- cinder/api/v3/volumes.py | 19 +- cinder/backup/api.py | 5 +- cinder/common/config.py | 2 + cinder/db/api.py | 4 +- cinder/db/sqlalchemy/api.py | 15 +- cinder/exception.py | 16 +- cinder/image/image_utils.py | 4 + cinder/objects/backup.py | 6 +- cinder/opts.py | 1 + cinder/test.py | 22 + .../drivers/dell_emc/powermax/powermax_data.py | 4 + .../dell_emc/powermax/test_powermax_common.py | 68 +-- .../dell_emc/powermax/test_powermax_masking.py | 21 + .../unit/volume/drivers/ibm/test_storwize_svc.py | 63 +++ .../netapp/dataontap/client/test_client_base.py | 157 ++++++- .../netapp/dataontap/client/test_client_cmode.py | 2 + .../unit/volume/drivers/netapp/dataontap/fakes.py | 26 ++ .../drivers/netapp/dataontap/test_block_base.py | 188 ++++++-- .../drivers/netapp/dataontap/test_block_cmode.py | 4 +- .../volume/drivers/solidfire/test_solidfire.py | 48 +- .../unit/volume/flows/api/test_create_volume.py | 207 +++++++++ .../unit/volume/flows/test_create_volume_flow.py | 144 +++--- .../zonemanager/test_brcd_fc_san_lookup_service.py | 10 + .../unit/zonemanager/test_brcd_fc_zone_driver.py | 137 +++--- .../zonemanager/test_brcd_http_fc_zone_client.py | 7 + .../zonemanager/test_brcd_rest_fc_zone_client.py | 297 +++++++++++++ cinder/volume/api.py | 7 +- cinder/volume/driver.py | 12 + cinder/volume/drivers/dell_emc/powermax/common.py | 116 ++--- cinder/volume/drivers/dell_emc/powermax/fc.py | 3 +- cinder/volume/drivers/dell_emc/powermax/iscsi.py | 3 +- cinder/volume/drivers/dell_emc/powermax/masking.py | 2 +- cinder/volume/drivers/dell_emc/powermax/utils.py | 17 +- cinder/volume/drivers/hpe/hpe_3par_common.py | 337 +++++++++----- cinder/volume/drivers/hpe/hpe_3par_fc.py | 4 +- cinder/volume/drivers/hpe/hpe_3par_iscsi.py | 12 +- .../ibm/storwize_svc/storwize_svc_common.py | 39 +- .../volume/drivers/kaminario/kaminario_common.py | 11 +- .../volume/drivers/netapp/dataontap/block_base.py | 41 +- .../volume/drivers/netapp/dataontap/block_cmode.py | 2 +- .../volume/drivers/netapp/dataontap/client/api.py | 6 + .../drivers/netapp/dataontap/client/client_base.py | 55 ++- .../netapp/dataontap/client/client_cmode.py | 2 + cinder/volume/drivers/rbd.py | 33 +- cinder/volume/drivers/remotefs.py | 3 +- cinder/volume/drivers/solidfire.py | 84 ++-- cinder/volume/flows/api/create_volume.py | 49 ++- cinder/volume/volume_types.py | 54 ++- cinder/volume/volume_utils.py | 1 + .../drivers/brocade/brcd_fc_san_lookup_service.py | 1 + .../drivers/brocade/brcd_fc_zone_driver.py | 13 +- .../drivers/brocade/brcd_http_fc_zone_client.py | 2 +- .../drivers/brocade/brcd_rest_fc_zone_client.py | 2 +- .../block-storage/drivers/hpe-3par-driver.rst | 28 ++ lower-constraints.txt | 2 +- playbooks/cinderlib-run.yaml | 49 --- .../cinder-tempest-dsvm-lvm-lio-barbican/post.yaml | 15 - .../cinder-tempest-dsvm-lvm-lio-barbican/run.yaml | 88 ---- playbooks/post-cinderlib.yaml | 6 + playbooks/tempest-and-cinderlib-run.yaml | 14 +- ...deleting-__DEFAULT__-type-d35dfb5d89760b9b.yaml | 38 ++ ...ade_looup_fail_get_client-179151d449a34aa4.yaml | 5 + .../notes/brocade_py3-15647dbe3981d44b.yaml | 5 + .../brocade_rest_client-202cfd474c96d3fe.yaml | 6 + ...ver-after-service-restart-77e5e4da45c9c1aa.yaml | 6 + ...746-cross-project-incremental-backup-error.yaml | 6 + .../notes/bug-1871524-5f6df9a61bf6b775.yaml | 5 + ...ONTAP-fix-max-resize-size-ad2d88da8721560e.yaml | 6 + ...70-nfs-image-volume-cache-c45e840a6ec2a702.yaml | 6 + ...78-volume_type-regression-de82f4152c7b2f77.yaml | 33 ++ .../notes/bug-1893107-train-45bb91952c3170e1.yaml | 78 ++++ ...-file-during-convert-fail-3848e9dbe7e15fc6.yaml | 6 + .../fix-3par-live-migration-0065bd2626fdb4a1.yaml | 7 + ...nario-unique_fqdn_network-ecde36f614c30733.yaml | 7 + ...r-support-duplicated-fqdn-751ad1dbcd137fbb.yaml | 7 + ...ap-fix-detach-multiattach-d99d33dff2fefb4c.yaml | 7 + .../notes-for-15.4.0-release-98b7a0f6834ae2ba.yaml | 37 ++ ...revert-snapshot-non-admin-8485be55060eab0d.yaml | 5 + requirements.txt | 2 +- 101 files changed, 3090 insertions(+), 996 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3f8c9bac9..3bd2ee40e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -61 +61 @@ oslo.vmware>=2.17.0 # Apache-2.0 -os-brick>=2.10.4 # Apache-2.0 +os-brick>=2.10.5 # Apache-2.0

1 0

zaqar_tempest_plugin 1.1.0 (victoria)
by no-reply＠openstack.org 01 Oct '20

01 Oct '20

We jubilantly announce the release of: zaqar_tempest_plugin 1.1.0: Tempest plugin zaqar_tempest_plugin This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/zaqar_tempest_plugin Download the package from: https://tarballs.openstack.org/zaqar-tempest-plugin/ For more details, please see below. Changes in zaqar_tempest_plugin 1.0.0..1.1.0 -------------------------------------------- 9146cc9 New native Zuul v3 version of the tempest jobs 4195ae1 Cleanup py27 support 820a426 Switch to newer openstackdocstheme and reno versions Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 86 ++++++++++++++++++---- babel.cfg | 2 - releasenotes/source/conf.py | 9 ++- requirements.txt | 1 - setup.cfg | 30 ++------ setup.py | 9 --- test-requirements.txt | 8 +- tox.ini | 9 ++- .../services/messaging/json/messaging_client.py | 11 +-- 16 files changed, 111 insertions(+), 86 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fc1071a..42d28fd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +6,0 @@ oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0 -six>=1.9.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index f559c0e..00b5616 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=0.12.0,<0.13 # Apache-2.0 +hacking>=3.1.0,<3.2.0 # Apache-2.0 @@ -9 +9 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx>=1.6.2 # BSD +sphinx>=2.0.0,!=2.1.0 # BSD @@ -13 +13 @@ testtools>=1.4.0 # MIT -openstackdocstheme>=1.11.0 # Apache-2.0 +openstackdocstheme>=2.2.1 # Apache-2.0 @@ -15 +15 @@ openstackdocstheme>=1.11.0 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0

1 0