June 2020 - Release-announce - lists.openstack.org

openstackdocstheme 2.2.3
by no-reply＠openstack.org 16 Jun '20

16 Jun '20

We exuberantly announce the release of: openstackdocstheme 2.2.3: OpenStack Docs Theme The source is available from: https://opendev.org/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ For more details, please see below. Changes in openstackdocstheme 2.2.2..2.2.3 ------------------------------------------ d50612c Add py38 package metadata Diffstat (except docs and test files) ------------------------------------- setup.cfg | 1 + 1 file changed, 1 insertion(+)

1 0

openstack-doc-tools 3.1.0
by no-reply＠openstack.org 16 Jun '20

16 Jun '20

We high-spiritedly announce the release of: openstack-doc-tools 3.1.0: Tools for OpenStack Documentation The source is available from: https://opendev.org/openstack/openstack-doc-tools Download the package from: https://tarballs.openstack.org/openstack-doc-tools/ For more details, please see below. Changes in openstack-doc-tools 3.0.0..3.1.0 ------------------------------------------- 7ee7713 Switch to newer openstackdocstheme and reno versions f13c797 Cleanup py27 support ae0833a Update hacking for Python3 b9d280a Update sitemap for Python3 Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 6 +++--- releasenotes/source/conf.py | 7 ++++--- requirements.txt | 2 +- setup.cfg | 5 ++--- setup.py | 9 --------- sitemap/generator/pipelines.py | 3 ++- sitemap/generator/spiders/sitemap_file.py | 3 ++- test-requirements.txt | 6 +++--- test/test_pipelines.py | 1 + 10 files changed, 22 insertions(+), 27 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c893d12..157b9ba 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ docutils>=0.11 # OSI-Approved Open Source, Public Domain -sphinx>=1.8.0,!=2.1.0 # BSD +sphinx>=2.0.0,!=2.1.0 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index e31827f..990511d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0,<3.1.0 # Apache-2.0 @@ -13,2 +13,2 @@ pylint==1.7.1 # GPLv2 -reno>=2.5.0 # Apache-2.0 -openstackdocstheme>=1.20.0 # Apache-2.0 +reno>=3.1.0 # Apache-2.0 +openstackdocstheme>=2.2.1 # Apache-2.0

1 0

oslo.serialization 4.0.0 (victoria)
by no-reply＠openstack.org 16 Jun '20

16 Jun '20

We exuberantly announce the release of: oslo.serialization 4.0.0: Oslo Serialization library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.serialization Download the package from: https://pypi.org/project/oslo.serialization Please report issues through: https://bugs.launchpad.net/oslo.serialization/+bugs For more details, please see below. 4.0.0 ^^^^^ Other Notes * Remove the yamlutils, the pyyaml is now safe by default. Changes in oslo.serialization 3.2.0..4.0.0 ------------------------------------------ 3847688 Remove the yamlutils module. 08855bd Fix pygments style Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 - oslo_serialization/yamlutils.py | 93 ---------------------- .../notes/remove-yamlutils-94c921247ab33003.yaml | 3 + releasenotes/source/conf.py | 2 +- requirements.txt | 2 - 7 files changed, 5 insertions(+), 186 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9a3a7f1..d8c62c4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14,2 +13,0 @@ pytz>=2013.6 # MIT -PyYAML>=3.12 # MIT -debtcollector>=1.2.0 # Apache-2.0

1 0

oslotest 4.4.0 (victoria)
by no-reply＠openstack.org 16 Jun '20

16 Jun '20

We are psyched to announce the release of: oslotest 4.4.0: Oslo test framework This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslotest Download the package from: https://pypi.org/project/oslotest Please report issues through: https://bugs.launchpad.net/oslotest/+bugs For more details, please see below. Changes in oslotest 4.3.0..4.4.0 -------------------------------- 21beb15 Revert "Revert "Switch to unittest.mock from mock"" Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 1 - oslotest/base.py | 2 +- oslotest/mock_fixture.py | 37 +++++++++++++++++++------------- requirements.txt | 1 - 9 files changed, 31 insertions(+), 25 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9826c3b..32baed1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +8,0 @@ testtools>=2.2.0 # MIT -mock>=2.0.0 # BSD

1 0

octavia 4.1.2 (stein)
by no-reply＠openstack.org 15 Jun '20

15 Jun '20

We are tickled pink to announce the release of: octavia 4.1.2: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 4.1.2 ^^^^^ Upgrade Notes ************* * After this upgrade, users will no longer be able use network resources they cannot see or "show" on load balancers. Operators can revert this behavior by setting the "allow_invisible_resource_usage" configuration file setting to "True". * Any amphorae running a py3 based image must be recycled or else they will eventually fail on certificate rotation. * An amphora image update is recommended to pick up a workaround to an HAProxy issue where it would fail to reload on configuration change should the local peer name start with "-x". Security Issues *************** * Previously, if a user knew or could guess the UUID for a network resource, they could use that UUID to create load balancer resources using that UUID. Now the user must have permission to see or "show" the resource before it can be used with a load balancer. This will be the new default, but operators can disable this behavior via the setting the configuration file setting "allow_invisible_resource_usage" to "True". This issue falls under the "Class C1" security issue as the user would require a valid UUID. Bug Fixes ********* * Fixed an issue when a loadbalancer is disabled, Octavia Health Manager keeps failovering the amphorae * Add listener and pool protocol validation. The pool and listener can't be combined arbitrarily. We need some constraints on the protocol side. * Resolved broken certificate upload on py3 based amphora images. On a housekeeping certificate rotation event, the amphora would clear out its server certificate and return a 500, putting the amphora in ERROR status and breaking further communication. See upgrade notes. * Fixed an issue where the the amphora image create tool would checkout the master amphora-agent code and master upper constraints. * Fixes an issue where load balancers with more than one TLS enabled listener, using client authentication and/or backend re-encryption, may load incorrect certificates for the listener. * Fix a bug that could interrupt resource creation when performing a graceful shutdown of the house keeping service and leave resources such as amphorae in a BOOTING status. * Fixed an issue where load balancers would go into ERROR when setting data not visible to providers (e.g. tags). * Workaround an HAProxy issue where it would fail to reload on configuration change should the local peer name start with "-x". * Delay between checks on UDP healthmonitors was using the incorrect config value "timeout", when it should have been "delay". Changes in octavia 4.1.1..4.1.2 ------------------------------- 0c1e588d Fix multi-listener LB client auth/re-encryption 07ef9ef8 Fix allow_invisible_resource_usage typo in relnotes 8bd0fbc8 Workaround peer name starting with hyphen cac753d3 Fix healthmanager not update amphora health when LB disable e719a472 Validate resource access when creating loadbalancer or member 5f4fd9c5 Fix py3 amphora-agent cert-rotation type bug 80e389ad Correct delay between UDP healthchecks bdfaba4c Fix load balancer update with provider filtered params d3df7e43 Fix padding logic for UDP health daemon aefbef12 Do not install diskimage-builder from Git ae03653a Pick stale amphora randomly 5dd672c5 Do not run Tempest in octavia-grenade job 922c4987 Remove xenial based jobs from stein gates. e3a95c9b Remove the barbican "Grant access" from cookbook 372e047a Fix uncaught DB exception when trying to get a spare amphora 24858a5a Use stable upper-constraints.txt in Amphora builds 84020ae6 Fix pep8 failures on stable/stein branch 4ebdce39 Fix multi-listener LB with missing certificate c09d7299 Fix house keeping graceful shutdown db75e58e Fix update API when barbican secret is missing 1f37a73e Add listener and pool protocol validation d0ef7a82 Cap hacking version to <2 9904b26a Accept oslopolicy-policy-generator path arguments Diffstat (except docs and test files) ------------------------------------- api-ref/source/parameters.yaml | 15 +- api-ref/source/v2/general.inc | 52 +++++++ devstack/plugin.sh | 8 +- devstack/settings | 3 - .../amphora-agent/source-repository-amphora-agent | 4 +- etc/octavia.conf | 10 ++ .../agent/api_server/certificate_update.py | 2 +- .../amphorae/backends/utils/keepalivedlvs_query.py | 2 +- .../amphorae/drivers/haproxy/rest_api_driver.py | 98 ++++++++----- octavia/api/v2/controllers/base.py | 12 ++ octavia/api/v2/controllers/l7policy.py | 26 ++-- octavia/api/v2/controllers/listener.py | 19 ++- octavia/api/v2/controllers/load_balancer.py | 28 ++-- octavia/api/v2/controllers/member.py | 8 +- octavia/api/v2/controllers/pool.py | 3 +- octavia/cmd/house_keeping.py | 23 ++-- octavia/common/clients.py | 28 ++++ octavia/common/config.py | 6 + octavia/common/constants.py | 8 ++ .../jinja/haproxy/combined_listeners/jinja_cfg.py | 77 +++++------ octavia/common/jinja/lvs/templates/macros.j2 | 12 +- octavia/common/policy.py | 13 +- octavia/common/utils.py | 5 +- octavia/common/validate.py | 13 +- .../healthmanager/health_drivers/update_db.py | 15 +- octavia/controller/worker/tasks/database_tasks.py | 48 ++----- octavia/controller/worker/tasks/network_tasks.py | 2 +- octavia/db/repositories.py | 14 +- octavia/network/base.py | 9 +- octavia/network/drivers/neutron/base.py | 21 +-- octavia/network/drivers/noop_driver/driver.py | 6 +- .../drivers/haproxy/test_rest_api_driver_0_5.py | 30 ++-- .../drivers/haproxy/test_rest_api_driver_1_0.py | 31 +++-- .../unit/certificates/generator/test_local.py | 4 +- .../haproxy/combined_listeners/test_jinja_cfg.py | 32 +++-- .../unit/common/jinja/lvs/test_lvs_jinja_cfg.py | 40 ++---- .../sample_configs/sample_configs_combined.py | 8 +- .../healthmanager/health_drivers/test_update_db.py | 22 ++- .../controller/worker/tasks/test_database_tasks.py | 45 +----- .../controller/worker/tasks/test_network_tasks.py | 16 +++ .../unit/network/drivers/neutron/test_base.py | 67 +++++++++ playbooks/legacy/grenade-devstack-octavia/run.yaml | 11 +- ...a-health-when-LB-disabled-46a4fb295c6d0850.yaml | 6 + .../add-protocol-validation-0f9129a045e372ce.yaml | 5 + .../allow-invisible-subnets-e30b0b5fbd216294.yaml | 16 +++ ...nt-py3-cert-upload-binary-74e0ab35c5a85c68.yaml | 11 ++ ...ora-agent-branch-checkout-e2eeb19c6aa09535.yaml | 5 + ...lient-auth-single-process-749af7791454ff03.yaml | 6 + ...ix-house-keeping-shutdown-17b04417a2c4849f.yaml | 6 + ...ix-lb-update-with-no-data-abefe7860b8fb4c7.yaml | 5 + ...ix-peer-name-prefix-hypen-e74a87e9a01b4f4c.yaml | 10 ++ ...-based-on-correct-setting-6a60856de2927ccd.yaml | 5 + test-requirements.txt | 2 +- zuul.d/jobs.yaml | 7 +- zuul.d/projects.yaml | 21 ++- 66 files changed, 1090 insertions(+), 409 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 8e0b2e39..14be4f6d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking!=0.13.0,<0.14,>=0.12.0,<2 # Apache-2.0

1 0

ironic-inspector 9.2.3 (train)
by no-reply＠openstack.org 15 Jun '20

15 Jun '20

We jubilantly announce the release of: ironic-inspector 9.2.3: Hardware introspection for OpenStack Bare Metal This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 9.2.3 ^^^^^ Bug Fixes * Fixes accessing API endpoints with trailing slashes. Now they're treated the same way as without slashes, although the latter remain canonical URLs. Changes in ironic-inspector 9.2.2..9.2.3 ---------------------------------------- 182bd7e Treat endpoints with trailing slashes the same way as without them b897b20 Stop running a periodic task for the noop PXE filter Diffstat (except docs and test files) ------------------------------------- ironic_inspector/conductor/manager.py | 10 +++++++--- ironic_inspector/main.py | 18 ++++++++++++------ ironic_inspector/pxe_filter/base.py | 3 +++ ironic_inspector/test/unit/test_main.py | 10 ++++++++-- ironic_inspector/test/unit/test_pxe_filter.py | 12 ++++++++---- .../notes/trailing-slashes-93c2466b71829ec1.yaml | 5 +++++ 6 files changed, 43 insertions(+), 15 deletions(-)

1 0

neutron-vpnaas-dashboard 1.6.1 (train)
by no-reply＠openstack.org 15 Jun '20

15 Jun '20

We are psyched to announce the release of: neutron-vpnaas-dashboard 1.6.1: Neutron VPNaaS Dashboard This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/neutron-vpnaas-dashboard Download the package from: https://tarballs.openstack.org/neutron-vpnaas-dashboard/ Please report issues through: https://bugs.launchpad.net/neutron-vpnaas-dashboard/+bugs For more details, please see below. Changes in neutron-vpnaas-dashboard 1.6.0..1.6.1 ------------------------------------------------ db7db31 Imported Translations from Zanata 126a773 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 233940c Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../locale/ru/LC_MESSAGES/django.po | 964 +++++++++++++++++++++ .../source/locale/cs/LC_MESSAGES/releasenotes.po | 25 - .../source/locale/de/LC_MESSAGES/releasenotes.po | 97 --- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 104 --- .../source/locale/es/LC_MESSAGES/releasenotes.po | 25 - .../source/locale/fr/LC_MESSAGES/releasenotes.po | 32 - .../source/locale/id/LC_MESSAGES/releasenotes.po | 110 --- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 39 - .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 39 - .../locale/pt_BR/LC_MESSAGES/releasenotes.po | 30 - .../source/locale/ru/LC_MESSAGES/releasenotes.po | 29 - .../locale/zh_CN/LC_MESSAGES/releasenotes.po | 34 - tox.ini | 6 +- 14 files changed, 968 insertions(+), 567 deletions(-)

1 0

python-octaviaclient 1.10.1 (train)
by no-reply＠openstack.org 15 Jun '20

15 Jun '20

We are amped to announce the release of: python-octaviaclient 1.10.1: Octavia client for OpenStack Load Balancing This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- octaviaclient For more details, please see below. Changes in python-octaviaclient 1.10.0..1.10.1 ---------------------------------------------- b5397ea Fix long CLI error messages 3e83788 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 95fa5fe Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + octaviaclient/osc/v2/constants.py | 8 +++ octaviaclient/osc/v2/listener.py | 5 ++ octaviaclient/osc/v2/member.py | 12 ++-- octaviaclient/osc/v2/validate.py | 38 +++++++++++ tox.ini | 6 +- 8 files changed, 143 insertions(+), 11 deletions(-)

1 0

glance 19.0.3 (train)
by no-reply＠openstack.org 15 Jun '20

15 Jun '20

We are chuffed to announce the release of: glance 19.0.3: OpenStack Image Service This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. Changes in glance 19.0.2..19.0.3 -------------------------------- faa06f61 fix properties' missing underline for VirtCPUTopology Diffstat (except docs and test files) ------------------------------------- etc/metadefs/compute-vcputopology.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)

1 0

aodh 9.0.1 (train)
by no-reply＠openstack.org 15 Jun '20

15 Jun '20

We are satisfied to announce the release of: aodh 9.0.1: OpenStack Telemetry Alarming This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/aodh Download the package from: https://tarballs.openstack.org/aodh/ Please report issues through: https://bugs.launchpad.net/aodh/+bugs For more details, please see below. Changes in aodh 9.0.0..9.0.1 ---------------------------- 5415b96d Use config options when creating keystone session 9e17daad heat notifier: Fix getting unhealthy resource names f041de28 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 91cc8681 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + aodh/api/controllers/v2/alarms.py | 6 +++-- aodh/evaluator/loadbalancer.py | 2 +- aodh/keystone_client.py | 17 +++++++------- aodh/notifier/heat.py | 42 ++++++++++------------------------- tox.ini | 2 +- 7 files changed, 30 insertions(+), 79 deletions(-)

1 0