September 2020 - Release-announce

sahara-plugin-ambari 4.0.0.0rc1 (victoria)
by no-reply＠openstack.org 23 Sep '20

23 Sep '20

Hello everyone, A new release candidate for sahara-plugin-ambari for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/sahara-plugin-ambari/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/sahara-plugin-ambari/src/branch/stable/victor… Release notes for sahara-plugin-ambari can be found at: https://docs.openstack.org/releasenotes/sahara-plugin-ambari/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/1101 and tag it *victoria-rc-potential* to bring it to the sahara-plugin-ambari release crew's attention.

1 0

sahara-plugin-vanilla 4.0.0.0rc1 (victoria)
by no-reply＠openstack.org 23 Sep '20

23 Sep '20

Hello everyone, A new release candidate for sahara-plugin-vanilla for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/sahara-plugin-vanilla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/sahara-plugin-vanilla/src/branch/stable/victo… Release notes for sahara-plugin-vanilla can be found at: https://docs.openstack.org/releasenotes/sahara-plugin-vanilla/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/1106 and tag it *victoria-rc-potential* to bring it to the sahara-plugin-vanilla release crew's attention.

1 0

sahara-plugin-spark 4.0.0.0rc1 (victoria)
by no-reply＠openstack.org 23 Sep '20

23 Sep '20

Hello everyone, A new release candidate for sahara-plugin-spark for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/sahara-plugin-spark/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/sahara-plugin-spark/src/branch/stable/victoria Release notes for sahara-plugin-spark can be found at: https://docs.openstack.org/releasenotes/sahara-plugin-spark/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/1104 and tag it *victoria-rc-potential* to bring it to the sahara-plugin-spark release crew's attention.

1 0

bifrost 8.1.1 (ussuri)
by no-reply＠openstack.org 23 Sep '20

23 Sep '20

We are stoked to announce the release of: bifrost 8.1.1: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/bifrost For more details, please see below. 8.1.1 ^^^^^ Upgrade Notes ************* * Bifrost no longer adds ironic and ironic-inspector endpoints to the public firewalld zone, the operator has to do it explicitly if external access is expected. * Adds the explicit setting of file access permissions to get_url calls in bifrost ansible playbooks to ensure that the contents of "/httpboot" are world-readable independently of which Ansible version is in use. Bug Fixes ********* * Fixes fast-track deployment after inspection/discovery by providing the correct ironic API URL to the ramdisk. * Fixes deployment in a testing environment on CentOS 8 by using firewalld instead of iptables to enable access from nodes to ironic. * Automatically enables DHCP and TFTP services in firewalld on CentOS/RHEL. * Instead of modifying the "public" firewalld zone, creates a new zone "bifrost" and puts the "network_interface" in it. Set "firewalld_internal_zone=public" to revert to the previous behavior. * Makes "/var/lib/ironic" and its images subdirectories readable by nginx. This is required for using the images cache. * Fixes ACL of PXE and iPXE boot files to make sure they are world- readable. * Resolves the issue with ansible versions 2.9.12 and 2.8.14 where implicit setting of file permissions on files downloaded with get_url calls results in overly restrictive permissions. This leads to access denied while attempting to read the contents of "/httpboot" and results in failed deployments. * Removing dependency on libselinux-python for Fedora OS family. This package is no longer present in Fedora 32 and was causing installation failures. It is safe to remove as it is used with python2 only. * On systems with SELinux enforcing, enables nginx to read symbolic links. Fixes network boot of instances. * Adds correct SELinux context for "/tftpboot". Changes in bifrost 8.1.0..8.1.1 ------------------------------- 829e670 Fix install on systems without systemd 924534a Create our own firewalld zone and use it on real bare metal d900a76 Make /var/lib/ironic/{,images,master_images} readable by nginx 49de1f9 Add correct SELinux context for /tftpboot and fix map-file ACL 5db92e3 Explicitly set permissions on /httpboot contents 3348099 Explicitly enable DHCP services on baremetal CentOS/RHEL 55f7ad3 Use firewalld to open ports on CentOS and RHEL. b3b4b85 Make the iPXE and PXE boot files world-readable 1877ad5 bifrost_inventory: use stderr for logging 334c309 selinux: allow nginx to read symbolic links d371d2d Removing libselinux-python package from Fedora dependencies dc87231 Do not use 'sudo pip install' when venv is used 1070784 Fix bifrost_venv_dir default assignment 37a9205 install-deps: install setuptools early for Debian 98442ec Fix fast-track deployment after discovery/inspection 8b3f75a Install packages all at once instead of looping over them Diffstat (except docs and test files) ------------------------------------- bifrost/inventory.py | 1 + .../bifrost-create-dib-image/defaults/main.yml | 2 +- .../bifrost-create-vm-nodes/defaults/main.yml | 2 +- .../defaults/required_defaults_Fedora.yml | 2 +- .../roles/bifrost-create-vm-nodes/tasks/main.yml | 3 +- .../roles/bifrost-ironic-install/defaults/main.yml | 4 +- .../defaults/required_defaults_Fedora.yml | 1 - .../defaults/required_defaults_RedHat_family.yml | 2 + .../bifrost-ironic-install/files/ironic_policy.te | 4 +- .../bifrost-ironic-install/tasks/bootstrap.yml | 45 ++++++++++++++++- .../tasks/create_tftpboot.yml | 57 ++++++++++++++++++---- .../tasks/download_ipa_image.yml | 22 ++++++++- .../bifrost-ironic-install/tasks/get_ipxe.yml | 6 +++ .../tasks/inspector_bootstrap.yml | 18 ++++++- .../roles/bifrost-ironic-install/tasks/install.yml | 6 +-- .../tasks/setup_firewalld.yml | 50 +++++++++++++++++++ .../templates/inspector-default-boot-ipxe.j2 | 2 +- .../bifrost-keystone-install/defaults/main.yml | 2 +- .../bifrost-keystone-install/tasks/install.yml | 3 +- .../fast-track-inspection-a28a062e86f06190.yaml | 5 ++ releasenotes/notes/firewalld-d53c6396828b91ee.yaml | 5 ++ .../notes/firewalld-services-4c255c02d8d427f8.yaml | 4 ++ .../notes/firewalld-zone-d8c72fb5924a4916.yaml | 11 +++++ .../notes/images-permissions-2042490e3ca13656.yaml | 5 ++ releasenotes/notes/pxe-acl-26f3be809caa0c88.yaml | 4 ++ .../notes/releasenote-341a5eebe6168aea.yaml | 13 +++++ .../notes/releasenote-94bcb2b0da207f94.yaml | 7 +++ .../notes/selinux-lnk_file-527ac51c60f9c2ad.yaml | 5 ++ .../notes/tftp-context-6f918743ba9052b0.yaml | 4 ++ scripts/install-deps.sh | 14 ++++-- 30 files changed, 276 insertions(+), 33 deletions(-)

1 0

networking-bgpvpn 13.0.0.0rc1 (victoria)
by no-reply＠openstack.org 23 Sep '20

23 Sep '20

Hello everyone, A new release candidate for networking-bgpvpn for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/networking-bgpvpn/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/networking-bgpvpn/src/branch/stable/victoria Release notes for networking-bgpvpn can be found at: https://docs.openstack.org/releasenotes/networking-bgpvpn/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/bgpvpn/+bugs and tag it *victoria-rc-potential* to bring it to the networking-bgpvpn release crew's attention.

1 0

ironic-inspector 10.1.1 (ussuri)
by no-reply＠openstack.org 23 Sep '20

23 Sep '20

We are psyched to announce the release of: ironic-inspector 10.1.1: Hardware introspection for OpenStack Bare Metal This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 10.1.1 ^^^^^^ Bug Fixes * Fixes the issue that IPv6 link local addresses are ignored during interface validation which fails introspection. * Fixes "AttributeError: 'Node' object has no attribute 'uuid'" when trying to introspect an active node that is not currently in the cache. * No longer aborts the whole process if one periodic task fails. * Fixes the node identification logic to enable a user to list the "redfish_address" label for "driver_info" field values for identification of a machine using the "[DEFAULT]ipmi_address_fields" configuration option. Previously the host would just not be matched as the full URL would be evaluated instead of what the URL may resolve to. * Fixes accessing API endpoints with trailing slashes. Now they're treated the same way as without slashes, although the latter remain canonical URLs. * No longer uses introspection delay for nodes with "manage_boot==False" (i.e. boot is managed by ironic). It is useless and may actually break introspection if a node boots before it gets whitelisted in the PXE filter. * The introspection start API is now synchronous when "manage_boot==False". This means that any failures will be propagated to ironic, preventing it from powering a node on and booting it without the PXE filter updated. * No longer tries to set "local_gb" to -1 if the matched root device has size of zero. Changes in ironic-inspector 10.1.0..10.1.1 ------------------------------------------ bc4311e Fix URL parsing to enable redfish_address matching 1f676f9 Add variable to set inspection timeout in tempest tests 470c2f4 Do not try to set local_gb to -1 when the matched root device size is 0 19e0281 Make inspector base CI job use 2 CPUs 4cb904f Use node.id instead of node.uuid in record_node 0551943 Accept IPv6 link local address during interface validation 244cb9c Stop running a periodic task for the noop PXE filter beb14ad Set tempest_test_timeout for managed job 42c64f7 Update TOX_CONSTRAINTS_FILE for stable/ussuri 963e9cf Treat endpoints with trailing slashes the same way as without them 391267f Make POST /v1/introspection synchronous when manage_boot==False 6c7fda7 Avoid using introspection start delays with non-managed boot ba259cd Monkey patch original current_thread _active 9befd27 Update local.conf example file. aa12a8b Fix grenade job f95c81e Silence debug logging from oslo_messaging 5eb1731 Stop aborting the process on periodic task failures f34ddbc Remove testresources and testscenarios from test-requirements 61f46d9 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/example.local.conf | 60 ++++++++++++---------- devstack/plugin.sh | 4 ++ ironic_inspector/cmd/__init__.py | 6 +++ ironic_inspector/common/ironic.py | 8 +++ ironic_inspector/conductor/manager.py | 28 +++++----- ironic_inspector/conf/default.py | 8 +-- ironic_inspector/conf/opts.py | 5 +- ironic_inspector/introspect.py | 42 ++++++++------- ironic_inspector/main.py | 18 ++++--- ironic_inspector/node_cache.py | 5 +- ironic_inspector/plugins/standard.py | 19 ++++--- ironic_inspector/pxe_filter/base.py | 3 ++ ironic_inspector/test/unit/test_common_ironic.py | 37 +++++++++++++ ironic_inspector/test/unit/test_introspect.py | 18 +++++++ ironic_inspector/test/unit/test_main.py | 10 +++- ironic_inspector/test/unit/test_manager.py | 37 +------------ ironic_inspector/test/unit/test_node_cache.py | 1 + .../test/unit/test_plugins_standard.py | 29 ++++------- ironic_inspector/test/unit/test_pxe_filter.py | 12 +++-- ...accept-link-local-address-1fbb9cbdc3f980bb.yaml | 5 ++ releasenotes/notes/node-id-920629472f01c83a.yaml | 5 ++ releasenotes/notes/periodics-18bf7fb57777c043.yaml | 4 ++ .../support_redfish_address-94eae2c0d2879f53.yaml | 8 +++ .../notes/trailing-slashes-93c2466b71829ec1.yaml | 5 ++ .../notes/unmanaged-delay-d39871e1346d9448.yaml | 6 +++ .../notes/unmanaged-result-4de3788e7820e3c5.yaml | 6 +++ releasenotes/notes/zero-size-55c4b4f2b9e8384d.yaml | 5 ++ test-requirements.txt | 2 - tox.ini | 2 +- zuul.d/ironic-inspector-jobs.yaml | 10 +++- 31 files changed, 264 insertions(+), 145 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ce6c002..c35985f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -19,2 +18,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -testresources>=2.0.0 # Apache-2.0/BSD -testscenarios>=0.4 # Apache-2.0/BSD

1 0

networking-sfc 11.0.0.0rc1 (victoria)
by no-reply＠openstack.org 23 Sep '20

23 Sep '20

Hello everyone, A new release candidate for networking-sfc for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/networking-sfc/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/networking-sfc/src/branch/stable/victoria Release notes for networking-sfc can be found at: https://docs.openstack.org/releasenotes/networking-sfc/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/networking-sfc/+bugs and tag it *victoria-rc-potential* to bring it to the networking-sfc release crew's attention.

1 0

networking-odl 17.0.0.0rc1 (victoria)
by no-reply＠openstack.org 23 Sep '20

23 Sep '20

Hello everyone, A new release candidate for networking-odl for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/networking-odl/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/networking-odl/src/branch/stable/victoria Release notes for networking-odl can be found at: https://docs.openstack.org/releasenotes/networking-odl/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/networking-odl/+bugs and tag it *victoria-rc-potential* to bring it to the networking-odl release crew's attention.

1 0

networking-bagpipe 13.0.0.0rc1 (victoria)
by no-reply＠openstack.org 23 Sep '20

23 Sep '20

Hello everyone, A new release candidate for networking-bagpipe for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/networking-bagpipe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/networking-bagpipe/src/branch/stable/victoria Release notes for networking-bagpipe can be found at: https://docs.openstack.org/releasenotes/networking-bagpipe/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/networking-bagpipe/+bugs and tag it *victoria-rc-potential* to bring it to the networking-bagpipe release crew's attention.

1 0

neutron-vpnaas 17.0.0.0rc1 (victoria)
by no-reply＠openstack.org 23 Sep '20

23 Sep '20

Hello everyone, A new release candidate for neutron-vpnaas for the end of the Victoria cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron-vpnaas/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Victoria release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/victoria release branch at: https://opendev.org/openstack/neutron-vpnaas/src/branch/stable/victoria Release notes for neutron-vpnaas can be found at: https://docs.openstack.org/releasenotes/neutron-vpnaas/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron/+bugs and tag it *victoria-rc-potential* to bring it to the neutron-vpnaas release crew's attention.

1 0