July 2021 - Release-announce - lists.openstack.org

tripleo-common 15.3.0 (wallaby)
by no-reply＠openstack.org 19 Jul '21

19 Jul '21

We are gleeful to announce the release of: tripleo-common 15.3.0: A common library for TripleO workflows. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 15.2.1..15.3.0 ---------------------------------------- 26f56c16 Wire up the tripleo-upgrades-wallaby-pipeline 9c427641 Remove ironic-inspector dnsmasq healthcheck 8e95b040 Add missing IPv6 support for healthcheck_port bbb5f3da directly use files instread of tcib_gather_files d6b49330 Rename hieradata_files result var 1313c8f8 Make sure Heat Ephemeral has images prepared 29d8f083 Refactor enabled_services for roles d2552f6e Cleanup OS_CLOUD env var for ephemeral heat 31468f27 [Wallaby-only] Update default container namespace for wallaby 62344e94 Move rabbitmq healthcheck to something more modern 7ba76730 Remove references to tripleo-validations legacy directory Diffstat (except docs and test files) ------------------------------------- .../container_image_prepare_defaults.yaml | 2 +- container-images/tcib/base/base.yaml | 13 +- container-images/tcib/base/mariadb/mariadb.yaml | 5 +- .../tcib/base/os/barbican-base/barbican-base.yaml | 3 +- .../cinder-base/cinder-volume/cinder-volume.yaml | 5 +- .../tcib/base/os/glance-api/glance-api.yaml | 3 +- container-images/tcib/base/os/horizon/horizon.yaml | 3 +- container-images/tcib/base/os/iscsid/iscsid.yaml | 3 +- .../tcib/base/os/keystone/keystone.yaml | 3 +- .../tcib/base/os/neutron-base/neutron-base.yaml | 3 +- .../tcib/base/os/swift-base/swift-base.yaml | 5 +- .../ovn-nb-db-server/ovn-nb-db-server.yaml | 3 +- .../ovn-sb-db-server/ovn-sb-db-server.yaml | 3 +- container-images/tcib/base/rabbitmq/rabbitmq.yaml | 3 +- .../tcib/base/tripleoclient/tripleoclient.yaml | 5 +- container-images/tripleo_containers.yaml | 178 ++++++++++----------- container-images/tripleo_containers.yaml.j2 | 6 + healthcheck/common.sh | 2 +- healthcheck/ironic-inspector | 13 +- healthcheck/rabbitmq | 2 +- tripleo_common/constants.py | 1 - tripleo_common/image/kolla_builder.py | 46 ++++-- tripleo_common/templates/deployments.yaml | 4 +- tripleo_common/utils/ansible.py | 30 +--- tripleo_common/utils/heat.py | 3 +- zuul.d/layout.yaml | 2 +- 29 files changed, 220 insertions(+), 237 deletions(-)

1 0

os-net-config 14.1.1 (wallaby)
by no-reply＠openstack.org 19 Jul '21

19 Jul '21

We are tickled pink to announce the release of: os-net-config 14.1.1: OpenStack network configuration This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/os-net-config Download the package from: https://tarballs.openstack.org/os-net-config/ Please report issues through: https://bugs.launchpad.net/os-net-config/+bugs For more details, please see below. Changes in os-net-config 14.1.0..14.1.1 --------------------------------------- e2b7ed1 Avoid creating multiple entries of udev rules Diffstat (except docs and test files) ------------------------------------- os_net_config/sriov_config.py | 27 ++++-- 2 files changed, 158 insertions(+), 8 deletions(-)

1 0

openstacksdk 0.58.0 (xena)
by no-reply＠openstack.org 16 Jul '21

16 Jul '21

We contentedly announce the release of: openstacksdk 0.58.0: An SDK for building applications to work with OpenStack This release is part of the xena release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 0.58.0 ^^^^^^ New Features * Added support for the "ResourceClass" Placement resource. Changes in openstacksdk 0.57.0..0.58.0 -------------------------------------- 6c2a5ccb Move to OFTC 30600da9 Fix import order in accelerator and config unit tests 2e7b48ff tests: Rename 'TestProxyBase._verify2' to '_verify' 40cc84d5 Add IPsecSiteConnection resource and proxy layer functionality for it 6f985394 tests: Remove final use of 'TestProxyBase._verify' 2e726ef7 tests: Sanity check 'test_proxy_base' 5edbb15e tests: Remove dead code 38e9ca00 placement: Add support for resource classes Diffstat (except docs and test files) ------------------------------------- .../resources/network/v2/ipsec_site_connection.rst | 13 + .../user/resources/placement/v1/resource_class.rst | 13 + openstack/baremetal/v1/_proxy.py | 9 +- openstack/block_storage/v2/_proxy.py | 7 +- openstack/block_storage/v3/_proxy.py | 7 +- openstack/clustering/v1/_proxy.py | 4 +- openstack/compute/v2/_proxy.py | 12 +- openstack/image/v2/_proxy.py | 22 +- openstack/network/v2/_proxy.py | 96 ++++ openstack/network/v2/ipsec_site_connection.py | 105 ++++ openstack/placement/v1/_proxy.py | 84 +++- openstack/placement/v1/resource_class.py | 32 ++ openstack/proxy.py | 19 +- .../accelerator/v2/test_accelerator_request.py | 2 +- .../unit/accelerator/v2/test_device_profile.py | 3 +- .../unit/load_balancer/{ => v2}/test_proxy.py | 105 ++-- .../unit/network/v2/test_ipsec_site_connection.py | 80 +++ ...-placement-resource-class-e1c644d978b886bc.yaml | 4 + tox.ini | 2 - 51 files changed, 1953 insertions(+), 1381 deletions(-)

1 0

python-ironic-inspector-client 4.6.0 (xena)
by no-reply＠openstack.org 16 Jul '21

16 Jul '21

We high-spiritedly announce the release of: python-ironic-inspector-client 4.6.0: Python client for Ironic Inspector This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-ironic-inspector-client Download the package from: https://pypi.org/project/python-ironic-inspector-client Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- ironic-inspector-client For more details, please see below. 4.6.0 ^^^^^ New Features * Exposes "switch_mgmt_addresses" and "switch_system_description" in interface details. Changes in python-ironic-inspector-client 4.5.0..4.6.0 ------------------------------------------------------ 4046b74 [doc] Fix lldp_basic name 0687489 Expose more interface fields b95e72c Add Python3 xena unit tests db9bdd1 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- ironic_inspector_client/resource.py | 2 ++ ironic_inspector_client/v1.py | 4 ++-- .../notes/expose-more-interface-fields-de82d634c2af05e0.yaml | 5 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++++ zuul.d/project.yaml | 2 +- 6 files changed, 17 insertions(+), 3 deletions(-)

1 0

metalsmith 1.5.0 (xena)
by no-reply＠openstack.org 16 Jul '21

16 Jul '21

We contentedly announce the release of: metalsmith 1.5.0: Deployment and Scheduling tool for Bare Metal This release is part of the xena release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. 1.5.0 ^^^^^ Bug Fixes * Images sourced by HTTP would never have the node instance_info *image_disk_format* set to *raw* because the image file is not processed by ironic. This would result in errors for large images, or ironic-python-agent never using streaming to copy the image to disk. To work around this, *image_disk_format* is set to *raw* when the image URL ends with a *.raw* file extension. Changes in metalsmith 1.4.2..1.5.0 ---------------------------------- 407e505 Set image_disk_format from file extension for HTTP images 2fe1733 setup.cfg: Replace dashes with underscores 048ddb5 Stop testing the iscsi deploy interface 8cd0f73 Add Python3 xena unit tests 3114db1 Update master for stable/wallaby 621cd8c remove unicode from code Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 28 ++++----------- metalsmith/sources.py | 22 +++++++++--- metalsmith/test/test_sources.py | 42 ++++++++++++++++++++++ .../notes/raw_http_images-41007351896ff642.yaml | 9 +++++ releasenotes/source/conf.py | 4 +-- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++++ setup.cfg | 8 ++--- 9 files changed, 92 insertions(+), 34 deletions(-)

1 0

nova 21.2.2 (ussuri)
by no-reply＠openstack.org 15 Jul '21

15 Jul '21

We are gleeful to announce the release of: nova 21.2.2: Cloud computing fabric controller This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 21.2.2 ^^^^^^ Bug Fixes * Improved detection of anti-affinity policy violation when performing live and cold migrations. Most of the violations caused by race conditions due to performing concurrent live or cold migrations should now be addressed by extra checks in the compute service. Upon detection, cold migration operations are automatically rescheduled, while live migrations have two checks and will be rescheduled if detected by the first one, otherwise the live migration will fail cleanly and revert the instance state back to its previous value. Changes in nova 21.2.1..21.2.2 ------------------------------ be4a514c8a [neutron] Get only ID and name of the SGs from Neutron bf90a1e061 Error anti-affinity violation on migrations 31ead3839e Remove broken legacy zuul jobs 341ba7aa17 [CI] Fix gate by using zuulv3 live migration and grenade jobs 22daca3e7f Ignore PCI devices with 32bit domain 8e9859b95c Reproduce bug 1897528 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 71 ++++--- gate/live_migration/hooks/ceph.sh | 208 --------------------- gate/live_migration/hooks/nfs.sh | 50 ----- gate/live_migration/hooks/utils.sh | 11 -- nova/compute/manager.py | 110 +++++++++-- nova/conf/pci.py | 8 +- nova/network/neutron.py | 8 +- nova/pci/manager.py | 39 +++- playbooks/legacy/nova-grenade-multinode/post.yaml | 15 -- playbooks/legacy/nova-grenade-multinode/run.yaml | 65 ------- playbooks/legacy/nova-live-migration/post.yaml | 15 -- playbooks/legacy/nova-live-migration/run.yaml | 60 ------ playbooks/nova-evacuate/run.yaml | 8 + playbooks/nova-live-migration/post-run.yaml | 10 + .../notes/bug-1821755-7bd03319e34b6b10.yaml | 11 ++ roles/run-evacuate-hook/README.rst | 1 + .../files/setup_evacuate_resources.sh | 34 ++++ roles/run-evacuate-hook/files/test_evacuate.sh | 55 ++++++ .../files/test_negative_evacuate.sh | 37 ++++ roles/run-evacuate-hook/tasks/main.yaml | 64 +++++++ 25 files changed, 573 insertions(+), 550 deletions(-)

1 0

nova 22.2.2 (victoria)
by no-reply＠openstack.org 15 Jul '21

15 Jul '21

We enthusiastically announce the release of: nova 22.2.2: Cloud computing fabric controller This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 22.2.2 ^^^^^^ Bug Fixes * Improved detection of anti-affinity policy violation when performing live and cold migrations. Most of the violations caused by race conditions due to performing concurrent live or cold migrations should now be addressed by extra checks in the compute service. Upon detection, cold migration operations are automatically rescheduled, while live migrations have two checks and will be rescheduled if detected by the first one, otherwise the live migration will fail cleanly and revert the instance state back to its previous value. Changes in nova 22.2.1..22.2.2 ------------------------------ bec6dd4752 Stop leaking ceph df cmd in RBD utils f7d84db587 [neutron] Get only ID and name of the SGs from Neutron 6ede6df7f4 Error anti-affinity violation on migrations e3085fa631 Initialize global data separately and run_once in WSGI app init f20346bc00 Honor [neutron]http_retries in the manual client 2af08fb5ea zuul: Replace grenade and nova-grenade-multinode with grenade-multinode 0405709999 rbd: Get rbd_utils unit tests running again 90ffc553d7 Ignore PCI devices with 32bit domain 0354d4d9f4 Reproduce bug 1897528 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 32 ++-- gate/live_migration/hooks/ceph.sh | 208 --------------------- gate/live_migration/hooks/nfs.sh | 50 ----- gate/live_migration/hooks/utils.sh | 11 -- nova/api/openstack/wsgi_app.py | 24 ++- nova/compute/manager.py | 110 +++++++++-- nova/conf/pci.py | 8 +- nova/network/neutron.py | 9 +- nova/pci/manager.py | 38 +++- nova/storage/rbd_utils.py | 9 +- nova/test.py | 5 + nova/utils.py | 46 +++++ playbooks/legacy/nova-grenade-multinode/post.yaml | 15 -- playbooks/legacy/nova-grenade-multinode/run.yaml | 65 ------- playbooks/legacy/nova-live-migration/post.yaml | 15 -- playbooks/legacy/nova-live-migration/run.yaml | 60 ------ .../notes/bug-1821755-7bd03319e34b6b10.yaml | 11 ++ 27 files changed, 609 insertions(+), 544 deletions(-)

1 0

nova 23.0.2 (wallaby)
by no-reply＠openstack.org 15 Jul '21

15 Jul '21

We joyfully announce the release of: nova 23.0.2: Cloud computing fabric controller This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 23.0.2 ^^^^^^ Security Issues *************** * A vulnerability in the console proxies (novnc, serial, spice) that allowed open redirection has been patched. The novnc, serial, and spice console proxies are implemented as websockify servers and the request handler inherits from the python standard SimpleHTTPRequestHandler. There is a known issue in the SimpleHTTPRequestHandler which allows open redirects by way of URLs in the following format: http://vncproxy.my.domain.com//example.com/%2F.. which if visited, will redirect a user to example.com. The novnc, serial, and spice console proxies will now reject requests that pass a redirection URL beginning with "//" with a 400 Bad Request. (https://bugs.launchpad.net/nova/+bug/1927677) (https://bugs.python.org/issue32084) Bug Fixes ********* * Improved detection of anti-affinity policy violation when performing live and cold migrations. Most of the violations caused by race conditions due to performing concurrent live or cold migrations should now be addressed by extra checks in the compute service. Upon detection, cold migration operations are automatically rescheduled, while live migrations have two checks and will be rescheduled if detected by the first one, otherwise the live migration will fail cleanly and revert the instance state back to its previous value. * Bug 1851545 (https://bugs.launchpad.net/nova/+bug/1851545), wherein unshelving an instance with SRIOV Neutron ports did not update the port binding's "pci_slot" and could cause libvirt PCI conflicts, has been fixed. Important: Constraints in the fix's implementation mean that it only applies to instances booted **after** it has been applied. Existing instances will still experience bug 1851545 after being shelved and unshelved, even with the fix applied. * To fix device detach issues in the libvirt driver the detach logic has been changed from a sleep based retry loop to waiting for libvirt domain events. During this change we also introduced two new config options to allow fine tuning the retry logic. For details see the description of the new "[libvirt]device_detach_attempts" and "[libvirt]device_detach_timeout" config options. (https://bugs.launchpad.net/nova/+bug/1882521) Changes in nova 23.0.1..23.0.2 ------------------------------ fef0305abe Move 'check-cherry-picks' test to gate, n-v check 5d65680095 libvirt: Set driver_iommu when attaching virtio devices to SEV instance c45bedd98d zuul: Replace grenade and nova-grenade-multinode with grenade-multinode 8b62a4ec9b Error anti-affinity violation on migrations 46aa3f4ec7 Honor [neutron]http_retries in the manual client bf7254b794 Update SRIOV port pci_slot when unshelving 3625d5336a Test SRIOV port move operations with PCI conflicts 83ca8b3563 Neutron fixture: don't clobber profile and vif_details if empty 5ede75c65e Stop leaking ceph df cmd in RBD utils 4709256142 Reject open redirection in the console proxy 8f018d754d rbd: Get rbd_utils unit tests running again 8b50f48ed2 Consolidate device detach error handling ebf1ceb7d6 Move instance power state check to _detach_with_retry 14596ca30f libvirt: Remove dead error handling code 9f90c7268c Follow up type hints for a634103 3fcd11a403 Enable mypy on libvirt/guest.py 5f488d8cd1 Move the guest.get_disk test to test_guest 30317e6b3f Replace blind retry with libvirt event waiting in detach Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 46 +- gate/live_migration/hooks/ceph.sh | 208 ---- gate/live_migration/hooks/nfs.sh | 50 - gate/live_migration/hooks/utils.sh | 11 - mypy-files.txt | 1 + nova/compute/manager.py | 124 +- nova/conf/libvirt.py | 24 + nova/console/websocketproxy.py | 23 + nova/network/neutron.py | 86 +- nova/storage/rbd_utils.py | 9 +- .../functional/libvirt/test_pci_sriov_servers.py | 116 ++ nova/virt/libvirt/designer.py | 10 +- nova/virt/libvirt/driver.py | 559 ++++++--- nova/virt/libvirt/guest.py | 139 +-- nova/virt/libvirt/migration.py | 9 +- playbooks/legacy/nova-grenade-multinode/post.yaml | 15 - playbooks/legacy/nova-grenade-multinode/run.yaml | 65 -- playbooks/legacy/nova-live-migration/post.yaml | 15 - playbooks/legacy/nova-live-migration/run.yaml | 60 - .../notes/bug-1821755-7bd03319e34b6b10.yaml | 11 + .../notes/bug-1851545-781c358939d96cea.yaml | 12 + ...roxy-reject-open-redirect-4ac0a7895acca7eb.yaml | 19 + ...event-based-device-detach-23ac037004d753b1.yaml | 11 + tools/check-cherry-picks.sh | 5 - tox.ini | 12 +- 39 files changed, 2180 insertions(+), 1347 deletions(-)

1 0

python-octaviaclient 2.4.0 (xena)
by no-reply＠openstack.org 15 Jul '21

15 Jul '21

We are pumped to announce the release of: python-octaviaclient 2.4.0: Octavia client for OpenStack Load Balancing This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- octaviaclient For more details, please see below. 2.4.0 ^^^^^ Bug Fixes * Improved the client performance when using a name instead of the resource ID. * Fixed some issues when the number of Octavia resources exceeded the 'pagination_max_limit' parameter in Octavia API. The list calls now support pagination. Changes in python-octaviaclient 2.3.0..2.4.0 -------------------------------------------- 6ef3eed Fix some typos 84e927d Improve the client performance on large clouds cf0c4be Support pagination for 'list' API calls 32a6c09 setup.cfg: Replace dashes with underscores 7927aec Add Python3 xena unit tests 7776264 Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- octaviaclient/api/constants.py | 50 +++++++---- octaviaclient/api/v2/octavia.py | 98 +++++++++++++++++----- octaviaclient/osc/v2/amphora.py | 10 +-- octaviaclient/osc/v2/availabilityzoneprofile.py | 4 +- octaviaclient/osc/v2/flavor.py | 2 +- octaviaclient/osc/v2/flavorprofile.py | 2 +- octaviaclient/osc/v2/health_monitor.py | 8 +- octaviaclient/osc/v2/l7policy.py | 12 +-- octaviaclient/osc/v2/l7rule.py | 8 +- octaviaclient/osc/v2/listener.py | 14 ++-- octaviaclient/osc/v2/load_balancer.py | 12 +-- octaviaclient/osc/v2/member.py | 34 ++++---- octaviaclient/osc/v2/pool.py | 12 +-- octaviaclient/osc/v2/quota.py | 2 +- octaviaclient/osc/v2/utils.py | 91 +++++++++++++++----- .../unit/osc/v2/test_availabilityzoneprofile.py | 2 + ...sing-a-name-instead-of-ID-51a6637050386a90.yaml | 5 ++ .../notes/fix-cli-pagination-792ad8cd386eb0e7.yaml | 6 ++ releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 ++ setup.cfg | 8 +- zuul.d/projects.yaml | 2 +- 31 files changed, 281 insertions(+), 129 deletions(-)

1 0

oslo.middleware 4.3.0 (xena)
by no-reply＠openstack.org 15 Jul '21

15 Jul '21

We are overjoyed to announce the release of: oslo.middleware 4.3.0: Oslo Middleware library This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.middleware Download the package from: https://pypi.org/project/oslo.middleware Please report issues through: https://bugs.launchpad.net/oslo.middleware/+bugs For more details, please see below. Changes in oslo.middleware 4.2.0..4.3.0 --------------------------------------- 2c415ff Upgrade the pre-commit-hooks version 2ec633c setup.cfg: Replace dashes with underscores b1ce931 Warning about /healthcheck c7fabf4 Add Python3 xena unit tests c1a30f3 Update master for stable/wallaby 3a0f7e4 Fix requirements issues 5c806d4 Fix requirements issues 2eb27aa remove unicode from code ea0d1ab Use py3 as the default runtime for tox a220331 ignore reno generated artifacts Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 ++ .pre-commit-config.yaml | 10 ++++--- .zuul.yaml | 3 +-- lower-constraints.txt | 43 ------------------------------ oslo_middleware/healthcheck/__init__.py | 6 +++++ releasenotes/source/conf.py | 10 +++---- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 +++++ setup.cfg | 8 +++--- tox.ini | 8 +----- 12 files changed, 35 insertions(+), 66 deletions(-)

1 0