January 2022 - Release-announce - lists.openstack.org

manila 12.1.1 (wallaby)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We are thrilled to announce the release of: manila 12.1.1: Shared Storage for OpenStack This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 12.1.1 ^^^^^^ Bug Fixes * Fixed an issue during snapshot creation where a database error was being mishandled with dead code. See Launchpad bug 1475351 (https://launchpad.net/bugs/1475351) for more details. * Fixed periodic_share_replica_update() to skip active replicas similarly to periodic_share_replica_snapshot_update(). The intention is to check on non-active replicas, that can be 'in_sync', 'out_of_sync' or in 'error' state. * When "cephfs_ganesha_server_ip" is not set, the current hostname is used as a default for such config option. The driver was treating this value as an IP address and trying to perform validations on it. The CEPH NFS driver will no longer treat hostnames as ip addresses and try to validate them as such. Changes in manila 12.1.0..12.1.1 -------------------------------- a5aecc22 Update admin, user and contributor guide f7376849 early return for _share_replica_update() if there is no active replica 9cf0afce Handle successful deletion of snapshot if quota commit fails cffad6fd Modify docker instalation for fedora systems c034ed19 Drop non-ASCII character from manila config 027e4cb5 [doc] Fix config and install guide for the generic driver c44108f9 Don't run periodic_share_replica_update() on active replicas 909d437f Adapt CephFS driver to do not try to escape export ip Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 2 +- .../admin/shared-file-systems-share-networks.rst | 15 ++ .../common/dhss-true-mode-configuration.rst | 17 +- manila/share/api.py | 5 +- manila/share/drivers/cephfs/driver.py | 11 +- manila/share/drivers/netapp/options.py | 14 +- manila/share/manager.py | 22 ++- ...hot-if-quota-commit-fails-4d150bf0b71a2fd9.yaml | 6 + ...c-task-for-active-replica-030a982af92f8a62.yaml | 6 + ...t-ip-escaping-on-hostname-e2866be32a8f5e38.yaml | 8 + 14 files changed, 453 insertions(+), 35 deletions(-)

1 0

keystone 18.1.0 (victoria)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We high-spiritedly announce the release of: keystone 18.1.0: OpenStack Identity This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/keystone/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. 18.1.0 ^^^^^^ Security Issues *************** * [bug 1901207 (https://bugs.launchpad.net/keystone/+bug/1901207) Policy enforcement for application credentials has been updated to protect against invalid ownership checks resulting in unauthorized users being able to get and delete application credentials for other users. Bug Fixes ********* * [bug 1688137 (https://bugs.launchpad.net/keystone/+bug/1688137) Fixed the AccountLocked exception being shown to the end user since it provides some information that could be exploited by a malicious user. The end user will now see Unauthorized instead of AccountLocked, preventing user info oracle exploitation. * [bug 1878938 (https://bugs.launchpad.net/keystone/+bug/1878938) Previously when a user used to have system role assignment and tries to delete the same role, the system role assignments still existed in system_assignment table. This causes keystone to return *HTTP 404 Not Found* errors when listing role assignments with names (e.g., *--names* or *?include_names*). If you are affected by this bug, you must remove stale role assignments manually. The following is an example SQL statement you can use to fix the issue, but you should verify it's applicability to your deployment's SQL implementation and version. SQL: * delete from system_assignment where role_id not in (select id from role); * [bug 1885753 (https://bugs.launchpad.net/keystone/+bug/1885753) Keystone's SQL identity backend now retries update user requests to safely handle stale data when two clients update a user at the same time. * [bug 1896125 (https://bugs.launchpad.net/keystone/+bug/1896125) Introduced more robust connection handling for asynchronous LDAP requests to address memory leaks fetching data from LDAP backends with low page sizes. * [bug 1901654 (https://bugs.launchpad.net/keystone/+bug/1901654) Previously, generate_public_ID() in sha256.py assumed the passed arguments is str data type. However, python-ldap 3.0 or later returns bytes data type for attribute values except fields of distinguished names, relative distinguished names, attribute names, queries. If keystone running on Python3 is integrated with LDAP and the LDAP server has local_id variable in its attribute, user login operations will fail due to the assumption and modifiation of python-ldap. By this fix, generate_public_ID() properly handles bytes data type in the parameter. Changes in keystone 18.0.0..18.1.0 ---------------------------------- 4063ad98e Fix typos in application credential policies 65c99d6ef Fix typos in ec2 credential policies f742fadef Fix typo in identity provider policies 4649fe6bf Hide AccountLocked exception from end users 5b7d4c80d Retry update_user when sqlalchemy raises StaleDataErrors 5b860e0b3 Support bytes type in generate_public_ID() 66c3bd8d2 Use app cred user ID in policy enforcement 665948998 Update TOX_CONSTRAINTS_FILE for stable/victoria 42faeb277 Drop lower-constraints job 6f93063ff Delete system role assignments from system_assignment table a26a40d44 Implement more robust connection handling for asynchronous LDAP calls 5680b482c Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - keystone/api/users.py | 47 ++++++++- keystone/assignment/backends/sql.py | 5 + keystone/common/policies/application_credential.py | 4 +- keystone/common/policies/ec2_credential.py | 12 +-- keystone/common/policies/identity_provider.py | 8 +- keystone/identity/backends/ldap/common.py | 106 +++++++++++++-------- keystone/identity/backends/sql.py | 8 ++ keystone/identity/id_generators/sha256.py | 10 +- keystone/notifications.py | 2 + .../protection/v3/test_application_credential.py | 66 +++++++++++++ .../notes/bug-1688137-e4203c9a728690a7.yaml | 8 ++ .../notes/bug-1878938-70ee2af6fdf66004.yaml | 16 ++++ .../notes/bug-1885753-51df25f3ff1d9ae8.yaml | 6 ++ .../notes/bug-1896125-b17a4d12730fe493.yaml | 7 ++ .../notes/bug-1901207-13762f85b8a04481.yaml | 7 ++ .../notes/bug-1901654-69b9f35d11cd0c75.yaml | 10 ++ tox.ini | 6 +- 24 files changed, 352 insertions(+), 64 deletions(-)

1 0

manila 13.0.2 (xena)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We are delighted to announce the release of: manila 13.0.2: Shared Storage for OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 13.0.2 ^^^^^^ Known Issues ************ * User specified scheduler hints such as "same_host" and "different_host" are stored as share metadata with keys such as "__affinity_same_host" and "__affinity_different_host" respectively. These can be manipulated or deleted by end users like all metadata unless prevented by RBAC policy. In a future release, the service will restrict the deletion or manipulation of these specific metadata items. Bug Fixes ********* * Fixed an issue during snapshot creation where a database error was being mishandled with dead code. See Launchpad bug 1475351 (https://launchpad.net/bugs/1475351) for more details. Changes in manila 13.0.1..13.0.2 -------------------------------- 3d812459 Set tempest api version config in devstack plugin 31f7c972 early return for _share_replica_update() if there is no active replica 720f6e3f Update admin, user and contributor guide c72c607e XENA release note regarding scheduler filters f96d6278 Handle successful deletion of snapshot if quota commit fails 967a6ded Modify docker instalation for fedora systems 0fb10e6c Drop non-ASCII character from manila config Diffstat (except docs and test files) ------------------------------------- contrib/ci/post_test_hook.sh | 17 --- devstack/plugin.sh | 18 ++- .../admin/shared-file-systems-share-networks.rst | 15 +++ manila/share/api.py | 5 +- manila/share/drivers/netapp/options.py | 14 +-- manila/share/manager.py | 19 ++- ...-only-metadata-xena-issue-91690edef7bc13aa.yaml | 10 ++ ...hot-if-quota-commit-fails-4d150bf0b71a2fd9.yaml | 6 + 11 files changed, 251 insertions(+), 29 deletions(-)

1 0

openstack-ansible 22.4.1 (victoria)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We enthusiastically announce the release of: openstack-ansible 22.4.1: Ansible playbooks for deploying OpenStack This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 22.4.0..22.4.1 ------------------------------------------- 9f0f3710c Fix definition of ssl_protocol 69ae9db95 Bump OpenStack-Ansible Victoria eee3e2b4a Add nfs deployment scenario 0c181a028 Fix rich version for ansible-lint Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 14 +-- global-requirement-pins.txt | 1 + inventory/group_vars/all/ssl.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 112 ++++++++++----------- .../bootstrap-host/tasks/prepare_aio_config.yml | 3 + .../templates/user_variables_nfs.yml.j2 | 9 ++ zuul.d/jobs.yaml | 5 + zuul.d/project-templates.yaml | 9 ++ 16 files changed, 212 insertions(+), 67 deletions(-)

1 0

openstack-ansible 23.2.1 (wallaby)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We are satisfied to announce the release of: openstack-ansible 23.2.1: Ansible playbooks for deploying OpenStack This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 23.2.0..23.2.1 ------------------------------------------- c2db3718f Fix infra scenario repo server cluster c722b7815 Gather additional facts for haproxy playbook a06cd7192 Fix definition of ssl_protocol c33deff11 Set infra_lxc job to centos-8-stream 1c59a829f Bump OpenStack-Ansible Wallaby 839f97ab2 Remove CI jobs for centos-8 7700ae53a Fix rich version for ansible-lint 8a7ceff3d Add nfs deployment scenario b27fe341d [doc] Clean out project index page for stable branches Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 18 +-- .../openstack_user_config.yml.aio.j2 | 5 +- inventory/group_vars/all/ssl.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 112 ++++++++--------- playbooks/haproxy-install.yml | 4 + scripts/gate-check-commit.sh | 3 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 3 + .../templates/user_variables_nfs.yml.j2 | 9 ++ zuul.d/jobs.yaml | 74 ++---------- zuul.d/playbooks/pre-gate-cleanup.yml | 11 -- zuul.d/project-templates.yaml | 26 ++-- 20 files changed, 229 insertions(+), 293 deletions(-)

1 0

openstack-ansible 24.0.1 (xena)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We are pumped to announce the release of: openstack-ansible 24.0.1: Ansible playbooks for deploying OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 24.0.1 ^^^^^^ Known Issues * In the Xena release, TLS for VNC is enabled by default, for existing deployments this will prevent console access to existing virtual machines, as this configuration change does not apply to existing virtual machines. Virtual machines created after the configuration change are not affected. The virtual machines will run correctly, but your are not able to access them via the console. There are three possible solutions to enable console access for existing virtual machines; disable TLS for VNC, restart the virtual machine or live migrate the virtual machine. TLS for VNC can be disabled by setting "nova_qemu_vnc_tls" variable to "0" in the "/etc/openstack_deploy/user_variables.yml" file. Changes in openstack-ansible 24.0.0..24.0.1 ------------------------------------------- 725d19bc0 Fix infra scenario repo server cluster b44b6d8f3 Gather additional facts for haproxy playbook f57d9983d Fix definition of ssl_protocol 027803010 Remove CI jobs for centos-8 147997cd8 Bump OpenStack-Ansible Xena 20d2ba990 Add Ironic-related bridges to AIO e1a067ab3 Fix rich version for ansible-lint b32678a5f Update notes on how to enable TLS for VNC Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 24 ++--- etc/openstack_deploy/openstack_user_config.yml.aio | 14 +++ .../openstack_user_config.yml.aio.j2 | 25 ++++- inventory/group_vars/all/ssl.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 110 ++++++++++----------- playbooks/haproxy-install.yml | 4 + .../notes/vnc-proxy-error-c081c682cacec70e.yaml | 15 +++ scripts/gate-check-commit.sh | 3 +- .../bootstrap-host/tasks/prepare_networking.yml | 26 +++++ .../templates/user_variables.aio.yml.j2 | 2 +- .../templates/user_variables_ironic.yml.j2 | 7 ++ zuul.d/jobs.yaml | 64 ------------ zuul.d/playbooks/pre-gate-cleanup.yml | 11 --- zuul.d/project-templates.yaml | 13 --- 17 files changed, 172 insertions(+), 164 deletions(-)

1 0

kuryr-lib 2.1.1 (victoria)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We are pleased to announce the release of: kuryr-lib 2.1.1: Kuryr shared config and utilities This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kuryr-lib Download the package from: https://tarballs.openstack.org/kuryr/ For more details, please see below. Changes in kuryr-lib 2.1.0..2.1.1 --------------------------------- 0af5226 Remove run_as_root which fails without root_helper e43bf23 Remove the unused coding style modules 4081dfd Fix pep8 and lower-constraints gates a338724 Update TOX_CONSTRAINTS_FILE for stable/victoria 35eafe2 Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + kuryr/cmd/status.py | 1 + kuryr/lib/binding/drivers/hw_veb.py | 1 - kuryr/lib/binding/drivers/veth.py | 5 ++--- kuryr/lib/opts.py | 7 ++++--- lower-constraints.txt | 9 ++------- requirements.txt | 2 +- test-requirements.txt | 2 +- tox.ini | 2 +- 11 files changed, 16 insertions(+), 22 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e7df952..205b94f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -pyroute2>=0.4.21;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) +pyroute2>=0.5.6;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) diff --git a/test-requirements.txt b/test-requirements.txt index c5ea2e5..c899d1c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ ddt>=1.0.1 # MIT -hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 +hacking>=3.0.1,<3.1.0 # Apache-2.0

1 0

oslo.service 2.5.1 (wallaby)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We enthusiastically announce the release of: oslo.service 2.5.1: oslo.service library This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. 2.5.1 ^^^^^ New Features * A new config options, "[DEFAULT] wsgi_server_debug", has been added. This allows admins to configure whether the server should send exception tracebacks to the clients on HTTP 500 errors. This defaults to "False", preserving previous behavior. Changes in oslo.service 2.5.0..2.5.1 ------------------------------------ c1e3398 Make debug option of wsgi server configurable 36f5e36 Update TOX_CONSTRAINTS_FILE for stable/wallaby d26fc6f Update .gitreview for stable/wallaby 20e089f Move flake8 as a pre-commit local target. Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pre-commit-config.yaml | 10 +++++++--- oslo_service/_options.py | 5 +++++ oslo_service/wsgi.py | 2 +- .../notes/add-wsgi_server_debug-opt-70d818b5b78bfc7c.yaml | 7 +++++++ tox.ini | 4 ++-- 6 files changed, 23 insertions(+), 6 deletions(-)

1 0

oslo.service 2.6.1 (xena)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We exuberantly announce the release of: oslo.service 2.6.1: oslo.service library This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. 2.6.1 ^^^^^ New Features * A new config options, "[DEFAULT] wsgi_server_debug", has been added. This allows admins to configure whether the server should send exception tracebacks to the clients on HTTP 500 errors. This defaults to "False", preserving previous behavior. Changes in oslo.service 2.6.0..2.6.1 ------------------------------------ 13ee22c Make debug option of wsgi server configurable 7be76c2 Update TOX_CONSTRAINTS_FILE for stable/xena 48881c4 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_service/_options.py | 5 +++++ oslo_service/wsgi.py | 2 +- releasenotes/notes/add-wsgi_server_debug-opt-70d818b5b78bfc7c.yaml | 7 +++++++ tox.ini | 4 ++-- 5 files changed, 16 insertions(+), 3 deletions(-)

1 0

os-ken 1.2.1 (victoria)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We are pumped to announce the release of: os-ken 1.2.1: A component-based software defined networking framework for OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/os-ken Download the package from: https://pypi.org/project/os-ken Please report issues through: https://storyboard.openstack.org/#!/project/openstack/os-ken For more details, please see below. Changes in os-ken 1.2.0..1.2.1 ------------------------------ 5e9a961c Avoid missing key 'password' for neighbor_add e6f2c0d1 Avoid logging MD5 password for BGP add neighbor c58c8019 Add requirements.txt to tox environment 49976897 Update TOX_CONSTRAINTS_FILE for stable/victoria df38cf4a Update .gitreview for stable/victoria b17f6fcb Fix lower-constraints and pep8 for Focal Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 5 +- lower-constraints.txt | 146 ------------------------------ os_ken/lib/packet/cfm.py | 2 +- os_ken/services/protocols/bgp/api/base.py | 8 +- requirements.txt | 2 +- test-requirements.txt | 2 +- tox.ini | 17 ++-- 9 files changed, 24 insertions(+), 160 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 35763f29..9caccef8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ netaddr>=0.7.18 # BSD -oslo.config>=2.5.0 +oslo.config>=5.1.0 diff --git a/test-requirements.txt b/test-requirements.txt index f9cdda91..f429a7f2 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=0.12.0,<0.13 # Apache-2.0 +hacking>=3.2.0,<3.3.0 # Apache-2.0

1 0

ovsdbapp 1.6.1 (victoria)
by no-reply＠openstack.org 31 Jan '22

31 Jan '22

We eagerly announce the release of: ovsdbapp 1.6.1: A library for creating OVSDB applications This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 1.6.0..1.6.1 -------------------------------- 8c3896a Actually close the connection in Connection.stop() c2617f9 Don't spam retries 100s of times a second d75a4df Add an active wait in the "Backend.lookup" d7cc1b2 Fix docs job e6bd200 Dropping lower constraints testing (stable Victoria) 4807809 Don't give up when an Exception happens in idl.run Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 47 ---------------- ovsdbapp/backend/ovs_idl/__init__.py | 48 ++++++++++++++++- ovsdbapp/backend/ovs_idl/connection.py | 29 ++++++---- ovsdbapp/backend/ovs_idl/transaction.py | 10 +++- .../functional/backend/ovs_idl/test_backend.py | 63 ++++++++++++++++++++++ tox.ini | 7 +-- zuul.d/project.yaml | 1 - 7 files changed, 138 insertions(+), 67 deletions(-)

1 0

bifrost 11.2.1 (xena)
by no-reply＠openstack.org 27 Jan '22

27 Jan '22

We are tickled pink to announce the release of: bifrost 11.2.1: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/bifrost For more details, please see below. 11.2.1 ^^^^^^ Bug Fixes * Fixed an outdated grub and shim efi binaries path for Red Hat to to be under "EFI/redhat". * Fixes the iptables rule for PXE on systems not using firewalld (use port UDP/67 and UDP/69 instead of TCP/68 and TCP/69). Changes in bifrost 11.2.0..11.2.1 --------------------------------- b00da7d5 Fix incompatibility with recent rich library 109ac6c1 Catch all exceptions from pbr when importing the root package 7f7e521b Fix RedHat required defaults 9abd16fb Fix the DHCP port in iptables (68 vs 67 and TCP vs UDP) d21a2460 Change git_branch in stable/xena dfc1945f Update TOX_CONSTRAINTS_FILE for stable/xena 64788645 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bifrost/__init__.py | 4 ++-- playbooks/roles/bifrost-create-vm-nodes/defaults/main.yml | 2 +- playbooks/roles/bifrost-ironic-install/defaults/main.yml | 4 ++-- .../defaults/required_defaults_RedHat.yml | 4 ++-- .../roles/bifrost-ironic-install/tasks/bootstrap.yml | 15 +++++++++++++-- playbooks/roles/bifrost-prep-for-install/README.md | 2 +- .../roles/bifrost-prep-for-install/defaults/main.yml | 2 +- .../rhel_grub_efi_binaries_path-9b243b00bacef7a6.yaml | 5 +++++ releasenotes/notes/ubuntu-ports-6e6c2fef3dc7bccb.yaml | 5 +++++ tox.ini | 8 ++++---- 11 files changed, 37 insertions(+), 15 deletions(-)

1 0

vitrage-dashboard 3.5.0 (yoga)
by no-reply＠openstack.org 27 Jan '22

27 Jan '22

We eagerly announce the release of: vitrage-dashboard 3.5.0: Vitrage Horizon plugin This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/vitrage-dashboard Download the package from: https://tarballs.openstack.org/vitrage-dashboard/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/vitrage- dashboard For more details, please see below. Changes in vitrage-dashboard 3.4.0..3.5.0 ----------------------------------------- 5b77f07 Updating python testing classifier as per Yoga testing runtime 36c9dbe Add Python3 yoga unit tests 85d0927 Update master for stable/xena 33e8992 Replace tox's whitelist_externals by allowlist_externals option Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++++ setup.cfg | 1 + tox.ini | 4 ++-- 5 files changed, 11 insertions(+), 3 deletions(-)

1 0

vitrage 8.0.0 (yoga)
by no-reply＠openstack.org 27 Jan '22

27 Jan '22

We are happy to announce the release of: vitrage 8.0.0: The OpenStack RCA Service This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/vitrage Download the package from: https://tarballs.openstack.org/vitrage/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/vitrage For more details, please see below. Changes in vitrage 7.5.0..8.0.0 ------------------------------- a0ee94a6 remove cielometer client, not used any more 3547663c Updating python testing classifier as per Yoga testing runtime 95b33dbf Add Python3 yoga unit tests 612bb9b2 Update master for stable/xena 6a2374a6 Changed minversion in tox to 3.18.0 7630444d update install doc Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 ++++++ setup.cfg | 2 +- tox.ini | 4 ++-- 7 files changed, 14 insertions(+), 5 deletions(-)

1 0

python-manilaclient 2.3.1 (victoria)
by no-reply＠openstack.org 27 Jan '22

27 Jan '22

We are ecstatic to announce the release of: python-manilaclient 2.3.1: Client library for OpenStack Manila API. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 2.3.1 ^^^^^ Bug Fixes * Launchpad bug 1953670 (https://bugs.launchpad.net/python- manilaclient/+bug/1953670) has been fixed by updating the attribute name for the share group type access repr to be share_group_type_id. Changes in python-manilaclient 2.3.0..2.3.1 ------------------------------------------- ab673a2 Fix the id attr for share group type access repr 3feef0c [CI] Fix CI jobs d1c3a53 Update TOX_CONSTRAINTS_FILE for stable/victoria 394ce6c Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manilaclient/v2/share_group_type_access.py | 2 +- ...x-id-attr-for-share-group-type-access-repr-008338a53d7a6a50.yaml | 5 +++++ tox.ini | 6 +++--- zuul.d/project.yaml | 5 ++--- 6 files changed, 14 insertions(+), 8 deletions(-)

1 0

horizon 21.0.0 (yoga)
by no-reply＠openstack.org 26 Jan '22

26 Jan '22

We are pumped to announce the release of: horizon 21.0.0: OpenStack Dashboard This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. 21.0.0 ^^^^^^ New Features ************ * A new entry has been added to the context switcher menu, visible only when the current user has access to the system scope. This entry, labeled "system scope", allows to switch to a system-scope token, so that operations that require this kind of token can be performed. * [:bug:`1907843`] RBAC shared security groups can now be shown in the Security Groups page. Previously only the security groups owned by the login tenant can be displayed and used. Besides, a column for the shared field is added to the Security Groups table. Upgrade Notes ************* * The Django version of the launch instance form was dropped. It was deprecated since Wallaby release. "LAUNCH_INSTANCE_LEGACY_ENABLED" and "LAUNCH_INSTANCE_NG_ENABLED" setting were dropped as horizon uses angular version of launch instance by default. * Django 2.2 support was dropped. Django 2.2 ends its extended support in April 2022. Considering this horizon dropped Django 2.2 support and uses Django 3.2 as default. Bug Fixes ********* * [:bug:`1874705`] Add a new variable WEBSSO_USE_HTTP_REFERER to facilitate WEBSSO deployments where network segmentation is used per security requirement. In this case, the controllers cannot reach other services external endpoints. Therefore, using the HTTP_REFERER to derive the Keystone endpoint in the websso view will return a timeout for requests to Keystone in cases where the external Keystone endpoint is the HTTP_REFERER. WEBSSO_USE_HTTP_REFERER defaults to True to keep inline with current functionality. When set to False the OPENSTACK_KEYSTONE_URL is used instead of the HTTP_REFERER. If OPENSTACK_KEYSTONE_URL is set to the internal Keystone endpoint the requests between Horizon and Keystone should be able to connect. Changes in horizon 20.2.0..21.0.0 --------------------------------- 6ac31e0ba Drop Django based implementation of launch instance 83f864f49 Fix hardcoded link error in sphinx 4.4.0 33292ca0a Use OPENSTACK_KEYSTONE_URL instead of HTTP_REFERRER b8cc0043d Fix maximum recursion depth error when generating documentation 8918bf751 Drop Django 2.2 support 7249e7c1d Updating python testing as per Yoga testing runtime 062150f45 Include the images name on the image detail page 34a0159d1 Add system scope support to context switcher f9bab3fe1 Create Keystone admin endpoint for horizon integartion job c7ea66bc3 Support RBAC security groups in dashboard 93b18ce57 Retrieve volume groups after filtering by project e53c4d8ca Fix the instances pagination integration tests Diffstat (except docs and test files) ------------------------------------- .zuul.d/cross-jobs.yaml | 4 +- .zuul.d/django-jobs.yaml | 16 +- .zuul.d/tempest-and-integrated.yaml | 5 + horizon/tables/actions.py | 5 +- lower-constraints.txt | 2 +- openstack_auth/defaults.py | 6 + openstack_auth/plugin/base.py | 25 + openstack_auth/urls.py | 3 + openstack_auth/user.py | 26 +- openstack_auth/utils.py | 28 +- openstack_auth/views.py | 57 +- openstack_dashboard/api/neutron.py | 19 + .../dashboards/admin/volumes/views.py | 2 + .../dashboards/project/images/images/tables.py | 6 +- .../dashboards/project/instances/tables.py | 23 +- .../instances/_launch_customize_help.html | 3 - .../dashboards/project/instances/urls.py | 1 - .../dashboards/project/instances/views.py | 21 - .../project/instances/workflows/__init__.py | 3 - .../project/instances/workflows/create_instance.py | 959 -------- .../project/instances/workflows/resize_instance.py | 51 +- .../templates/network_topology/_actions_list.html | 36 +- .../templates/network_topology/index.html | 5 - .../dashboards/project/network_topology/urls.py | 2 - .../dashboards/project/network_topology/utils.py | 12 +- .../dashboards/project/network_topology/views.py | 10 - .../dashboards/project/security_groups/tables.py | 14 + .../dashboards/project/snapshots/tables.py | 7 +- .../dashboards/project/volumes/tables.py | 7 +- openstack_dashboard/defaults.py | 14 - .../management/commands/upgrade_check.py | 13 - .../static/app/core/images/details/overview.html | 2 +- .../templates/context_selection/_overview.html | 7 + .../templates/context_selection/_system_list.html | 13 + .../templates/header/_context_selection.html | 8 + .../templatetags/context_selection.py | 24 + openstack_dashboard/test/helpers.py | 28 +- .../pages/project/volumes/volumespage.py | 3 +- openstack_dashboard/test/test_data/neutron_data.py | 19 +- openstack_dashboard/test/unit/api/test_neutron.py | 45 +- .../bp-system-scope-switch-c610c028bd5de706.yaml | 7 + ...ango-launch-instance-form-c6543e1d52786b79.yaml | 9 + .../drop-django22-support-d0e2dea1509228a2.yaml | 6 + ...ort-shared-security-group-cb3dafba46dbff8b.yaml | 7 + ...t-websso_use_http_referer-6fb2dc0d292b54d4.yaml | 15 + requirements.txt | 2 +- setup.cfg | 1 + tox.ini | 2 +- 68 files changed, 875 insertions(+), 3483 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b04b6011d..151359316 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +15 @@ debtcollector>=1.2.0 # Apache-2.0 -Django>=2.2,<3.3 # BSD +Django>=3.2,<3.3 # BSD

1 0

ironic-python-agent 8.2.1 (xena)
by no-reply＠openstack.org 26 Jan '22

26 Jan '22

We are pumped to announce the release of: ironic-python-agent 8.2.1: Ironic Python Agent Ramdisk This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 8.2.1 ^^^^^ Bug Fixes * No longer ignores global TLS configuration options ("ipa- insecure", etc) when downloading a configdrive via a URL. * No longer ignores error status codes from the server when downloading a configdrive via a URL. * The configdrive downloading code now respects the "ipa-image- download-connection-timeout" option and will no longer hang for a long time if the server does not respond. * Fixes a minor issue with the regular expression used for UEFI duplicate entry cleanup which was introduced in a prior change to refactor the cleanup operation to avoid UEFI firmware which treats deletion of entries after addition as an invalid operation. * Fixes cases where duplicates may not be found in the UEFI firmware NVRAM boot entry table by explicitly looking for, and deleting for matching labels in advance of creating the EFI boot loader entry. * Fixes a race on software RAID creation: since the creation of partitions is asynchronous, we need to wait for all udev events to be processed before we can use the partitions to create an md device. * Fixes an issue where partitions are not visible due to a incorrect call to have the partition table re-read. * Fixes an issue where partitions are not visible due to an incorrect call to have the partition table re-read during raid configuration creation. * Fixes an issue when the EFI partition UUID is not set and an attempt to edit /etc/fstab is made. * The configured log file and/or log directory is now always explicitly included in the ramdisk logs. Changes in ironic-python-agent 8.2.0..8.2.1 ------------------------------------------- ede0847 Re-read the partition table with partx -a, part 2 8c88a40 Re-read the partition table with partx -a e10f052 Fix UEFI record regex 48fe889 Always include the oslo_log log file in ramdisk logs 33b3970 Delete EFI boot entry duplicate labels first f9ed56e Fix error messages in burnin code 442fc43 Respect global parameters when downloading a configdrive 5898a93 Assert EFI part UUID is not None before editing fstab a0c55b9 Software RAID: Call udev_settle before creation c28c333 Update TOX_CONSTRAINTS_FILE for stable/xena 67676e3 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_python_agent/burnin.py | 14 +-- ironic_python_agent/extensions/image.py | 38 ++++--- ironic_python_agent/hardware.py | 9 +- ironic_python_agent/partition_utils.py | 20 +++- ironic_python_agent/utils.py | 8 ++ .../notes/configdrive-ssl-02b069948dfef814.yaml | 12 ++ .../notes/correct-uefi-regex-112211c2427cd4d9.yaml | 7 ++ .../de-duplicate-by-label-baa090c5b1bff992.yaml | 6 + ...x-nvme-software-raid-race-2e0e104de9611228.yaml | 7 ++ .../notes/fix-rescan-device-7b00c6836b687ce8.yaml | 5 + .../fix-rescan-device-raid-29aa1558b036b496.yaml | 7 ++ .../notes/fix_efi_uuid_fstab-f2edbee9bfbac64a.yaml | 6 + releasenotes/notes/log-file-7aaaf31693ddc617.yaml | 5 + tox.ini | 8 +- 21 files changed, 382 insertions(+), 105 deletions(-)

1 0

oslo.limit 1.5.0 (yoga)
by no-reply＠openstack.org 26 Jan '22

26 Jan '22

We are amped to announce the release of: oslo.limit 1.5.0: Limit enforcement library to assist with quota calculation. This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. 1.5.0 ^^^^^ New Features * "Enforcer" objects now cache limits by default for the lifetime of the object to provide improved performance when multiple calls of "enforce()" are needed. This behavior is controlled by the boolean "cache" keyword argument to the "__init__" method. Changes in oslo.limit 1.4.0..1.5.0 ---------------------------------- bf9deb1 Add interfaces for getting limits without enforcing 7e4f36a Allow project_id=None for enforce/calculate a49f3a0 Make calculate_usage() work if limits are missing 43683f5 Add caching of limits in Enforcer ea5ff2d Add auth plugin options to options list 489feb5 Add Python3 yoga unit tests e60489f Update master for stable/xena a7d8f41 setup.cfg: Replace dashes with underscores a625860 Changed minversion in tox to 3.18.0 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_limit/fixture.py | 2 +- oslo_limit/limit.py | 127 +++++++++---- oslo_limit/opts.py | 3 + .../enforcer-limit-caching-fb59725aad88b039.yaml | 7 + releasenotes/source/index.rst | 1 + releasenotes/source/xena.rst | 6 + setup.cfg | 8 +- tox.ini | 6 +- 11 files changed, 309 insertions(+), 69 deletions(-)

1 0

python-manilaclient 2.6.2 (wallaby)
by no-reply＠openstack.org 26 Jan '22

26 Jan '22

We are thrilled to announce the release of: python-manilaclient 2.6.2: Client library for OpenStack Manila API. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 2.6.2 ^^^^^ Bug Fixes * Launchpad bug 1953670 (https://bugs.launchpad.net/python- manilaclient/+bug/1953670) has been fixed by updating the attribute name for the share group type access repr to be share_group_type_id. Changes in python-manilaclient 2.6.1..2.6.2 ------------------------------------------- a9d1193 Fix the id attr for share group type access repr 1412265 [CI] Fix CI jobs Diffstat (except docs and test files) ------------------------------------- manilaclient/v2/share_group_type_access.py | 2 +- ...ix-id-attr-for-share-group-type-access-repr-008338a53d7a6a50.yaml | 5 +++++ zuul.d/project.yaml | 5 ++--- 4 files changed, 10 insertions(+), 5 deletions(-)

1 0

horizon 18.6.3 (victoria)
by no-reply＠openstack.org 26 Jan '22

26 Jan '22

We are stoked to announce the release of: horizon 18.6.3: OpenStack Dashboard This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. Changes in horizon 18.6.2..18.6.3 --------------------------------- c82c41a46 Imported Translations from Zanata aa9e33fe1 Imported Translations from Zanata 2d7b3e9dc Escape unicode characters when setting logout_reason cookie e96945376 Dropping lower constraints testing from stable branches a7b4da125 Add horizontal scrollbar to role dropdown ad30888c0 Handle an attached volume without volume_image_metadata 78ba522c7 Fix Unable to use multiattach volume as boot for new server 0d14e7dd1 Change with_data=False for swift_get_container 146beeda5 Imported Translations from Zanata f9da495c5 Imported Translations from Zanata 7f230afdb Imported Translations from Zanata e1bfc5239 Imported Translations from Zanata 3daa963fa doc: Update our IRC server to OFTC f0f429543 Imported Translations from Zanata c63e4c91a Fix community image handling in launch instance form 00d24d7ca Don't load user role assignment or groups tabs for non-admins 8e69282bf Save instace_id inside Associate Floating IP workflow 06902eb31 Fix Material theme to work with any combination of pyScss and MDI icons 23a21efb7 Imported Translations from Zanata 862c37cf1 On the create instance from, when the image name is empty, show id 77df0abd6 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- .zuul.d/project.yaml | 1 - .../locale/en_GB/LC_MESSAGES/doc-contributor.po | 11 +- .../locale/id/LC_MESSAGES/doc-contributor.po | 7 +- horizon/locale/es/LC_MESSAGES/django.po | 9 +- horizon/locale/es/LC_MESSAGES/djangojs.po | 9 +- horizon/templates/auth/_login_form.html | 6 +- horizon/templates/auth/_password_form.html | 6 +- horizon/utils/functions.py | 2 +- lower-constraints.txt | 156 --- openstack_auth/locale/es/LC_MESSAGES/django.po | 10 +- openstack_auth/locale/ru/LC_MESSAGES/django.po | 12 +- openstack_auth/locale/zh_CN/LC_MESSAGES/django.po | 10 +- openstack_auth/views.py | 18 +- openstack_dashboard/api/microversions.py | 4 +- openstack_dashboard/api/nova.py | 3 +- openstack_dashboard/api/swift.py | 2 +- .../dashboards/identity/users/tabs.py | 8 + .../dashboards/project/floating_ips/workflows.py | 26 +- .../dashboards/project/instances/tabs.py | 13 +- .../launch-instance-model.service.js | 28 +- .../launch-instance-model.service.spec.js | 67 +- .../launch-instance/source/source.controller.js | 2 +- .../locale/es/LC_MESSAGES/django.po | 1262 +++++++++++++++++++- .../locale/es/LC_MESSAGES/djangojs.po | 668 +++++++++-- .../locale/zh_CN/LC_MESSAGES/django.po | 157 ++- .../locale/zh_CN/LC_MESSAGES/djangojs.po | 13 +- .../dashboard/scss/components/_membership.scss | 2 + .../pages/project/network/floatingipspage.py | 6 +- openstack_dashboard/test/unit/api/test_nova.py | 2 +- openstack_dashboard/test/unit/api/test_swift.py | 3 +- .../themes/material/static/horizon/_icons.scss | 3 + .../static/horizon/components/_checkboxes.scss | 2 + .../horizon/components/_context_selection.scss | 6 +- .../static/horizon/components/_datepicker.scss | 4 + .../static/horizon/components/_navbar.scss | 6 +- .../static/horizon/components/_radiobuttons.scss | 2 + .../static/horizon/components/_spinners.scss | 6 + tox.ini | 6 - 42 files changed, 2203 insertions(+), 391 deletions(-)

1 0

monasca-agent 4.0.1 (victoria)
by no-reply＠openstack.org 26 Jan '22

26 Jan '22

We are satisfied to announce the release of: monasca-agent 4.0.1: Monitoring agent for gathering metrics and sending them to the Monasca API. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/monasca-agent Download the package from: https://tarballs.openstack.org/monasca-agent/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-agent 4.0.0..4.0.1 ------------------------------------- 91db19f Fix Monasca-Setup Keystone detection 4fb0ae6 Fix PY3 issue 574a067 Fix Docker builds a2d412f Set 'libvirt_type' and 'libvirt_uri' options in the 'libvirt' plugin to be defined in conf.d/libvirt.yaml 1aa5a17 Fix small issue in dokcer plugin. e340d36 Remove incorrect plugins configuration for docker image. 9db15dd Fix zuul publish docker image job 8be2a8d Update TOX_CONSTRAINTS_FILE for stable/victoria 73d8b18 Update .gitreview for stable/victoria c0b8ad5 Adding python3-libvirt for Ubuntu-focal Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + bindep.txt | 3 +- conf.d/libvirt.yaml.example | 5 +++ monasca_agent/collector/checks_d/docker.py | 2 +- monasca_agent/collector/checks_d/mysql.py | 6 ++- monasca_agent/collector/virt/libvirt/inspector.py | 47 +++++++++++++++-------- monasca_setup/detection/plugins/keystone.py | 5 ++- playbooks/docker-publish.yml | 6 +-- tox.ini | 2 +- 18 files changed, 58 insertions(+), 54 deletions(-)

1 0

ironic 16.0.4 (victoria)
by no-reply＠openstack.org 26 Jan '22

26 Jan '22

We are delighted to announce the release of: ironic 16.0.4: OpenStack Bare Metal Provisioning This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 16.0.4 ^^^^^^ Security Issues *************** * Fixes an issue with the "/v1/nodes/detail" endpoint where an authenticated user could explicitly ask for an "instance_uuid" lookup and the associated node would be returned to the user with sensitive fields redacted in the result payload if the user did not explicitly have "owner" or "lessee" permissions over the node. This is considered a low-impact low-risk issue as it requires the API consumer to already know the UUID value of the associated instance, and the returned information is mainly metadata in nature. More information can be found in Storyboard story 2008976 (https://storyboard.openstack.org/#!/story/2008976) Bug Fixes ********* * If the agent accepts a command, but is unable to reply to Ironic (which sporadically happens before of the eventlet's TLS implementation), we currently retry the request and fail because the command is already executing. Ironic now detects this situation by checking the list of executing commands after receiving a connection error. If the requested command is the last one, we assume that the command request succeeded. * Fixes fast-track to prevent marking the agent as alive if trying to rebuild a node before the fast-track timeout has expired. * Fixes potential cache coherency issues by caching the AgentClient per task, rather than globally. * Fixes the "[deploy]configdrive_use_object_store" option that was broken during the Python 3 transition. * Fixes an issue with the "/v1/nodes/detail" endpoint where requests for an explicit "instance_uuid" match would not follow the standard query handling path and thus not be filtered based on policy determined access level and node level "owner" or "lessee" fields appropriately. Additional information can be found in story 2008976 (https://storyboard.openstack.org/#!/story/2008976) * Fixes recognition of a busy agent to also handle recognition during deployment steps by more uniformly detecting and identifying when the "ironic-python-agent" service is busy. * Fixes the problem about grub2 config file. Some higher versions of grub2 (e.g. 2.05 or 2.06-rc1) use grub.cfg-01-MAC, while another lower versions of grub2 (e.g. 2.04) use MAC.conf, so we generate both paths in order to be compatible with both. * Fixes "idrac-wsman" management interface "set_boot_device" method that would fail deployment when there are existing jobs present with error "Failed to change power state to ''power on'' by ''rebooting''. Error: DRAC operation failed. Reason: Unfinished config jobs found: <list of existing jobs>. Make sure they are completed before retrying.". Now there can be non-BIOS jobs present during deployment. This will still fail for cases when there are BIOS jobs present. In such cases should consider moving to "idrac- redfish" that does not have this limitation when setting boot device. * Fixed an issue where provisioning/cleaning would fail on IPv6 routed provider networks. See bug: 2009773 (https://storyboard.openstack.org/#!/story/2009773) * Fixes "idrac-wsman" BIOS "apply_configuration" and "factory_reset" clean and deploy steps to fail correctly in case of error when checking completed jobs. Before the fix when BIOS job failed, then node clean or deploy failed with timeout instead of actual error in cleaning or deploying step. * Fixes redfish firmware update for ilo5 based hardware by making necessary changes to check whether sushy_task.messages is present, since in case of iLo task data does not contain messages attribute. Also it was not calling prepare_ramdisk() before rebooting the system to update the firmware which has been fixed in this patch. * Fixes "idrac-wsman" power interface to wait for the hardware to reach the target state before returning. For systems where soft power off at the end of deployment to boot to instance failed and forced hard power off was used, this left node successfully deployed in off state without any errors. This broke other workflows expecting node to be on booted into OS at the end of deployment. Additional information can be found in story 2009204 (https://storyboard.openstack.org/#!/story/2009204) * Correctly wipes agent token on inspection start and abort. * Calculating the ipmitool *-N* and *-R* arguments from ironic.conf [ipmi] *command_retry_timeout* and *min_command_interval* now takes into account the 1 second interval increment that ipmitool adds on each retry event. Failure-path ipmitool run duration will now be just less than *command_retry_timeout* instead of much longer. * Adds handling of Redfish BMC's which lack a "BootSourceOverrideMode" flag, such that it is no longer a fatal error for a deployment if the BMC does not support this field. This most common on BMCs which feature only a partial implementation of the "ComputerSystem" resource "boot", but may also be observable on some older generations of BMCs which recieved updates to have partial Redfish support. * The "redfish-virtual-media" boot interface no longer passes validation for Dell nodes. The "idrac-redfish-virtual-media" boot interface must be used for these nodes instead. * The fix for story 2008252 (https://storyboard.openstack.org/#!/story/2008252) synced the boot mode after changing the boot device because Supermicro nodes reset the boot mode if not included in the boot device set. However this can cause a problem on Dell nodes when changing the mode uefi->bios or bios->uefi, see story 2008712 (https://storyboard.openstack.org/#!/story/2008712) for details. Restrict the syncing of the boot mode to Supermicro. * Retries virtual media insert on failure to allow for an eject that may not have finished. https://storyboard.openstack.org/#!/story/2008504 * Fixes a bug where a conductor could fail to complete a deployment if there was contention on a shared lock. This would manifest as an instance being stuck in the "deploying" state, though the node had in fact started or even completed its final boot. * When Ironic configures the BootSourceOverrideTarget setting via Redfish, on Supermicro BMCs it must always configure BootSourceOverrideEnabled or that will revert to default (Once) on the BMC, see story 2008547 (https://storyboard.openstack.org/#!/story/2008547) for details. This is different than what is currently implemented for other BMCs in which the BootSourceOverrideEnabled is not configured if it matches the current setting (see story 2007355 (https://storyboard.openstack.org/#!/story/2007355)) This requires that node.properties['vendor'] be 'supermicro' which will be set by Ironic from the Redfish system response or can be set manually. * Introduces lazy-loading of ports, portgroups, volume connections and volume targets in task manager to fix performance issues. For periodic tasks which create a task manager object but don't require the aforementioned data (e.g. power sync), this change should reduce the number of database interactions by around two thirds, speeding up overall execution. * Fixes an issue of powering off with the "idrac-wsman" management interface while the execution of a clear job queue cleaning step is proceeding. Prior to this fix, the clean step would fail when powering off a node. Changes in ironic 16.0.3..16.0.4 -------------------------------- 87f15ec6e Ensure 'port' is up2date after binding:host_id 259647c7c CI: Lower test VM memory by 400MB 969cfefee Fix idrac-wsman deploy with existing non-BIOS jobs 0df43f758 Fix idrac-wsman set_power_state to wait on HW 87dee0250 Use shim-signed on Ubuntu, shim is empty now 2df5dc42a Use openstack-tox for ironic-tox-unit-with-driver-libs d09a158cc Fix iPXE docs: snponly is not always available 0cb15a223 Cache AgentClient on Task, not globally 4ac6ad731 Update the clear job id's constant 755c75e2e Fix node detail instance_uuid request handling 0bc5265ec Refactor iDRAC OEM extension manager calls e2ede2607 Set IPA download branch to stable/victoria for victoria 05f864706 Update project conundrum related docs 3258e49a5 Delete unavailable py2 package 0df78f600 Point ipa-builder to stable/wallaby 678714261 Fix deployment when executing a command fails after the command starts e88436688 Inherit InvalidImageRef from InvalidParameterValue c9425f995 Wipe agent tokens on inspection start and abort 550c4e075 update grub2 file name b205a32ca Fix ipmitool timing argument calculation 6130dc15e Fix idrac-wsman BIOS step async error handling 4fd099345 Restrict syncing of boot mode to Supermicro 13fc01fe3 Allow unsupported redfish set_boot_mode c2647f101 Prepare to use tinycore 12 for tinyipa 4ed8ceef6 Lazy-load node details from the DB b2b862f53 [Trivial] Fix testing of volume connector exception 25a05cf35 Always retry locking when performing task handoff d1ffc6a55 Handle agent still doing the prior command 90da180a1 devstack: a safeguard for disabled tempurls a1f596590 Enable swift temporary URLs in grenade and provide a good error message dea33cbaf Fix broken configdrive_use_object_store 73a600afa Switch multinode jobs to 512M RAM 78924eca2 Move the IPv6 job to the experimental pipeline cbccfa2a9 Don't mark an agent as alive if rebooted 46b34a73b Prevent redfish-virtual-media from being used with Dell nodes 80017a1d3 Fixes issue of redfish firmware update 7d74ea0ee For Supermicro BMCs set enable when changing boot device 1e8e54041 Refactor vendor detection and add Redfish implementation 0e4e00e82 Add a delay/retry is vmedia insert fails 26e8b9b01 [stable] Remove lower-constraints job Diffstat (except docs and test files) ------------------------------------- bindep.txt | 2 +- devstack/lib/ironic | 16 +- .../include/configure-ironic-api-mod_wsgi.inc | 10 +- .../install/include/configure-ironic-api.inc | 2 +- ironic/api/controllers/v1/node.py | 99 ++++++------- ironic/common/exception.py | 7 +- ironic/common/neutron.py | 3 +- ironic/common/pxe_utils.py | 14 +- ironic/common/swift.py | 7 +- ironic/conductor/cleaning.py | 11 ++ ironic/conductor/deployments.py | 13 +- ironic/conductor/manager.py | 18 ++- ironic/conductor/task_manager.py | 85 +++++++++-- ironic/conductor/utils.py | 38 +++++ ironic/db/sqlalchemy/api.py | 2 +- ironic/drivers/modules/agent.py | 14 +- ironic/drivers/modules/agent_base.py | 41 +++--- ironic/drivers/modules/agent_client.py | 144 +++++++++++++++--- ironic/drivers/modules/ansible/deploy.py | 6 +- ironic/drivers/modules/drac/bios.py | 20 ++- ironic/drivers/modules/drac/boot.py | 70 ++------- ironic/drivers/modules/drac/management.py | 4 +- ironic/drivers/modules/drac/power.py | 45 +++--- ironic/drivers/modules/drac/utils.py | 121 +++++++++++++++ ironic/drivers/modules/ipmitool.py | 87 +++++------ ironic/drivers/modules/iscsi_deploy.py | 4 +- ironic/drivers/modules/redfish/boot.py | 36 ++++- ironic/drivers/modules/redfish/management.py | 63 +++++++- .../unit/drivers/modules/drac/test_management.py | 13 +- .../unit/drivers/modules/irmc/test_inspect.py | 17 --- .../unit/drivers/modules/redfish/test_boot.py | 80 ++++++++++ .../drivers/modules/redfish/test_management.py | 95 +++++++++++- .../unit/drivers/modules/test_agent_client.py | 162 +++++++++++++++++++++ .../unit/drivers/modules/test_iscsi_deploy.py | 3 +- .../notes/agent-last-command-4ec6967c995ba84a.yaml | 9 ++ .../notes/agent-rebooted-fab20d012fe6cbe8.yaml | 6 + ...ache-agentclient-per-task-ec2231684e6876d9.yaml | 5 + ...figdrive_use_object_store-93cfd7dc27d90003.yaml | 5 + ...ed-instance-info-behavior-1375914a30621eca.yaml | 20 +++ .../fix-busy-agent-check-3cf75242b4783009.yaml | 6 + ...ix-grub2-config-file-name-88e689a982a21684.yaml | 7 + ...th-existing-non-bios-jobs-78aa2195d0c3016f.yaml | 12 ++ ...g-routed-provider-network-bbd0c46559f618ac.yaml | 6 + ...async-step-error-handling-80cd30c54c71c595.yaml | 8 + ...ish-firmware-update-issue-c6dfcd71a2f659a5.yaml | 9 ++ ...sman-set-power-state-wait-cd8f9ff41b19c7a7.yaml | 10 ++ .../notes/inspection-token-b3d9e8e34341d680.yaml | 4 + ...pmi_command_retry_timeout-889a49b402e82b97.yaml | 9 ++ ...ride-not-present-handling-92e7263617e467c4.yaml | 9 ++ .../redfish-vmedia-vendor-fc76086893d99415.yaml | 6 + ...fter-device-to-supermicro-218e8cb57735c685.yaml | 11 ++ .../notes/retry-vmedia-1999742c84f11103.yaml | 6 + ...fix-stuck-deploying-state-43d51149a02c08b8.yaml | 7 + ...-redfish-override-enabled-aa51686ed33d3061.yaml | 15 ++ .../taskmanager-lazy-load-32a14526c647c2f0.yaml | 9 ++ ...clear-job-id-constant-fix-c69cf96c55364bb3.yaml | 7 + zuul.d/ironic-jobs.yaml | 34 +++-- zuul.d/project.yaml | 6 +- 85 files changed, 2001 insertions(+), 591 deletions(-)

1 0

ironic-inspector 10.4.2 (victoria)
by no-reply＠openstack.org 26 Jan '22

26 Jan '22

We are overjoyed to announce the release of: ironic-inspector 10.4.2: Hardware introspection for OpenStack Bare Metal This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 10.4.2 ^^^^^^ Bug Fixes * Fixes an issue where a failed inspection due to a transient failure can prevent retry attempts to inspect to be perceived as a failure. If a prior inspection fails and is in "error" state, when a new introspection is requested, the state is now appropriately set to "starting". Changes in ironic-inspector 10.4.1..10.4.2 ------------------------------------------ e1d457d Ignored error state cache for new requests 7ebc8fa Point ipa-builder to stable/wallaby 995febc Use port.id instead of port.uuid 6a668c6 Fix port id vs uuid in ValidateInterfacesHook abe6eb4 Enable tempurls for Swift in grenade 6e29310 Fix node id vs uuid in processing_logger_prefix bbef83f Avoid a full install in tox environments that do not need it 965a4f5 Fix memcached host address. 52a6452 Remove lower-constraints job Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 2 +- ironic_inspector/node_cache.py | 8 +++++++- ironic_inspector/plugins/base_physnet.py | 2 +- ironic_inspector/plugins/local_link_connection.py | 2 +- ironic_inspector/plugins/standard.py | 2 +- ironic_inspector/test/unit/test_node_cache.py | 11 +++++++++++ .../unit/test_plugins_local_link_connection.py | 2 +- .../test/unit/test_plugins_physnet_cidr_map.py | 4 ++-- .../test/unit/test_plugins_standard.py | 2 +- ironic_inspector/test/unit/test_utils.py | 8 ++++---- ironic_inspector/utils.py | 2 +- .../fix-cache-error-on-start-27f492ba863d5f92.yaml | 7 +++++++ test-requirements.txt | 6 ------ tox.ini | 22 +++++++++++++++++++--- zuul.d/ironic-inspector-jobs.yaml | 8 ++++++-- zuul.d/project.yaml | 1 - 17 files changed, 69 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index be6935d..46ecfaf 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10,5 +9,0 @@ hacking>=3.0.1,<3.1.0 # Apache-2.0 -sphinx>=2.0.0,!=2.1.0 # BSD -sphinxcontrib-svg2pdfconverter>=0.1.0 # BSD -sphinxcontrib-apidoc>=0.2.0 # BSD -openstackdocstheme>=2.2.0 # Apache-2.0 -os-api-ref>=1.4.0 # Apache-2.0 @@ -17 +11,0 @@ stestr>=1.0.0 # Apache-2.0 -reno>=3.1.0 # Apache-2.0

1 0

ironic-python-agent 6.4.4 (victoria)
by no-reply＠openstack.org 26 Jan '22

26 Jan '22

We are tickled pink to announce the release of: ironic-python-agent 6.4.4: Ironic Python Agent Ramdisk This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 6.4.4 ^^^^^ New Features ************ * Adds an configuration option which can be encoded into the ramdisk itself or the PXE parameters being provided to instruct the agent to ignore bootloader installation or configuration failures. This functionality is useful to work around well-intentioned hardware which is auto-populating all possible device into the UEFI nvram firmware in order to try and help ensure the machine boots. Except, this can also mean any explict configuration attempt will fail. Operators needing this bypass can use the "ipa-ignore-bootloader- failure" configuration option on the PXE command line or utilize the "ignore_bootloader_failure" option for the Ramdisk configuration. In a future version of ironic, this setting may be able to be overriden by ironic node level configuration. * Adds the capability into the agent to read and act upon bootloader CSV files which serve as authoritative indicators of what bootloader to load instead of leaning towards utilizing the default. Known Issues ************ * If multiple bootloader CSV files are present on the EFI filesystem, the first CSV file discovered will be utilized. The Ironic team considers multiple files to be a defect in the image being deployed. This may be changed in the future. Bug Fixes ********* * Setting the new "ipa-ignore-bootloader-failure" config option prevents errors due to bootloader installation failure generated by automatic bootloader entries configuration from multiple attached devices. * The system file system configuration file for Linux machines, the "/etc/fstab" file is now updated to include a reference to the EFI partition in the case of a partition image base deployment. Without this reference, images deployed using partition images could end up in situations where upgrading the bootloader could fail. * Fixes a minor issue with the regular expression used for UEFI duplicate entry cleanup which was introduced in a prior change to refactor the cleanup operation to avoid UEFI firmware which treats deletion of entries after addition as an invalid operation. * Fixes cases where duplicates may not be found in the UEFI firmware NVRAM boot entry table by explicitly looking for, and deleting for matching labels in advance of creating the EFI boot loader entry. * IPA now properly checks if the root partition is already mounted. See Story 2008631 (https://storyboard.openstack.org/#!/story/2008631) for details. * Fixes an error with UEFI based deployments where using a partition image a NVMe device was previously failing due to the different device name pattern. * Fixes an issue where partitions are not visible due to a incorrect call to have the partition table re-read. * Fixes an issue where partitions are not visible due to an incorrect call to have the partition table re-read during raid configuration creation. * Fixes an issue where the NTP time sync at the IPA startup via chronyd is not immediate (which can break time sensitive components such as the generation of a TLS certificate). * Fixes failures with disk image conversions which result in memory allocation or input/output errors due to memory limitations by limiting the number of available memory allocation pools to a non- dynamic reasonable number which should not exceed the available system memory. * The lshw package version B.02.19.2-5 on CentOS 8.4 and 8.5 contains a bug (https://bugzilla.redhat.com/show_bug.cgi?id=1955250) that prevents the size of individual memory banks from being reported, with the result that the total memory size would be reported as 0 in some places. The total memory size is now taken from lshw's total memory size output (which does not suffer from the same problem) when available. * No longer crashes if MAC address cannot be determined for one of the network interfaces. * Fixes an issue where metadata erasure cleaning fails for partitions because the read-only file isn't found, while it is available at the base device. Adds a check for the base device file on failure. See story 2008696 (https://storyboard.openstack.org/#!/story/2008696) * Fixes the agent's EFI boot handling such that EFI assets from a partition image are preserved and used instead of overridden. This should permit operators to use Secure Boot with partition images IF the assets are already present in the partition image. * Mirrors the previously disconnected EFI system partitions (ESPs) in UEFI software RAID setups. Disconnected ESPs can lead to nodes booting with outdated kernel parameters or the UEFI firmware not finding bootable kernels at all. * Fixes incorrect root partition UUID after streaming a raw partition image. * Fixes nodes failing after deployment completes due to issues in the Grub2 EFI loader entry addition where a "BOOT.CSV" file provides the authoritative pointer to the bootloader to be used for booting the OS. The base issue with Grub2 is that it would update the UEFI bootloader NVRAM entries with whatever is present in a vendor specific "BOOT.CSV" or "BOOTX64.CSV" file. In some cases, a baremetal machine *can* crash when this occurs. More information can be found at story 2008962 (https://storyboard.openstack.org/#!/story/2008962) * Adds a call to "udevadm settle" in write_image.sh. After GPT and MBR are destroyed systemd-udevd gets triggered which may hold /dev/sda open preventing qemu-img from writting its image. * Provides a more specific error message if a UEFI-incompatible image is used in the UEFI mode. * Increase memory usage limit for "qemu-img convert" command to 2 GiB. See Story 2008667 (https://storyboard.openstack.org/#!/story/2008667) for details. Changes in ironic-python-agent 6.4.3..6.4.4 ------------------------------------------- 0b292a1 Re-read the partition table with partx -a, part 2 06cf7f3 Re-read the partition table with partx -a 9525a11 Fix UEFI record regex 47ac40a Delete EFI boot entry duplicate labels first 750934a Output verbose info from efibootmgr 48ffbaa Force immediate NTP time sync with chronyd at IPA startup 97ce08d Fix getting memory size in some lshw output 2645240 Reduce logging verbosity when collecting logs 474d2a9 Utilize CSV file for EFI loader selection 350a67e Make _get_efi_bootloaders return relative paths ee81184 Limit qemu-img execution arenas 601b833 Fix NVMe Partition image on UEFI b307c34 Point ipa-builder to stable/wallaby 6e0d08c Software RAID: RAID the ESPs 37c39b1 Fix missing data in log messages bc13adf Add a call to "udevadm settle" in write_image.sh b3f489c Do not fail network interface collection on unsupported interface 92a7d7a Fix root UUID for streamed partition images 2076df9 Add fstab pointer to EFI partition 1a19f8b Prepare to use tinycore 12 99b9953 Check the base device if the read-only file cannot be read de1e751 Increase the memory limit for qemu-img d1a365e Fixes local boot for partition images 0ff5726 Fix error message with UEFI-incompatible images a820851 Mock tests to return bios boot mode 9961ed6 Prevent broken partition image UEFI deploys 07cf2c1 Option to enable bootloader config failure bypass Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/config.py | 12 + ironic_python_agent/extensions/image.py | 682 +++++++--- ironic_python_agent/extensions/standby.py | 4 + ironic_python_agent/hardware.py | 49 +- ironic_python_agent/shell/write_image.sh | 14 +- ironic_python_agent/utils.py | 23 +- ...all-failure-to-be-ignored-b99667b13afa9759.yaml | 21 + ...nd-efi-partition-to-fstab-e9f945a4dd19bd7a.yaml | 8 + .../notes/correct-uefi-regex-112211c2427cd4d9.yaml | 7 + .../de-duplicate-by-label-baa090c5b1bff992.yaml | 6 + ...boot-for-partition-images-755f570dc0982868.yaml | 7 + ...-partition-image-handling-b8487133a188fd32.yaml | 6 + .../notes/fix-rescan-device-7b00c6836b687ce8.yaml | 5 + .../fix-rescan-device-raid-29aa1558b036b496.yaml | 7 + .../fix_chronyd_time_sync-626a14b66ca37677.yaml | 6 + ...mit-qemu-img-malloc-arena-025ed84115481eae.yaml | 7 + .../lshw-no-memory-bank-size-05ea71987362986e.yaml | 9 + releasenotes/notes/no-mac-54616606ee6b844d.yaml | 5 + ...eck_read_only_base_device-5bc15ac2f034aca9.yaml | 7 + ...serve-efi-folder-contents-ea1e278b3093ec55.yaml | 7 + .../software-raid-raid-ESPs-25a2aa117b99620a.yaml | 7 + .../notes/streaming-uuid-fdf136a7745fbb3d.yaml | 5 + ...t-bootloader-csv-file-use-c815b520c600cd98.yaml | 22 + .../notes/udevadm-settle-9d3e5f1f20211857.yaml | 7 + .../notes/uefi-images-38c8536db189ffc1.yaml | 5 + .../notes/up-qemuimg-mem-1536183a02b3a235.yaml | 7 + tox.ini | 6 +- zuul.d/ironic-python-agent-jobs.yaml | 7 +- zuul.d/project.yaml | 20 +- 33 files changed, 2212 insertions(+), 453 deletions(-)

1 0

blazar 6.0.1 (victoria)
by no-reply＠openstack.org 26 Jan '22

26 Jan '22

We are gleeful to announce the release of: blazar 6.0.1: Reservation Service for OpenStack clouds This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/blazar Download the package from: https://tarballs.openstack.org/blazar/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 6.0.1 ^^^^^ Bug Fixes * Fixes database migrations with Alembic 1.5.0 or greater. For more details, see bug 1912502 (https://bugs.launchpad.net/blazar/+bug/1912502) Changes in blazar 6.0.0..6.0.1 ------------------------------ 6fc1d3c docs: Update Freenode to OFTC bfba274 Fix use of legacy Alembic API e0bd740 Remove lower-constraints job on stable branches 002024d Update TOX_CONSTRAINTS_FILE for stable/victoria 253d10a Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - .../versions/2bcfe76b0474_change_tenant_to_project.py | 4 ++-- releasenotes/notes/alembic-fix-alter-column-42a87657992d1e78.yaml | 5 +++++ tox.ini | 4 ++-- 6 files changed, 11 insertions(+), 6 deletions(-)

1 0