October 2022 - Release-announce - lists.openstack.org

kayobe 11.4.0 (xena)
by no-reply＠openstack.org 06 Oct '22

06 Oct '22

We are glad to announce the release of: kayobe 11.4.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 11.4.0 ^^^^^^ Bug Fixes * Fixes an issue with nclu-switch command ordering, when description was applied first to a non-existent (virtual) interface. See story 2010279 for details. Changes in kayobe 11.3.0..11.4.0 -------------------------------- 612fc25d nclu-switch: Fix order in template Diffstat (except docs and test files) ------------------------------------- ansible/roles/nclu-switch/templates/nclu-config.j2 | 6 +++--- releasenotes/notes/nclu-order-dc4cb33d633b73a2.yaml | 6 ++++++ 2 files changed, 9 insertions(+), 3 deletions(-)

1 0

kolla 12.7.0 (wallaby)
by no-reply＠openstack.org 06 Oct '22

06 Oct '22

We are delighted to announce the release of: kolla 12.7.0: Kolla OpenStack Deployment This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 12.7.0 ^^^^^^ Other Notes * Added '--retry 5' to curlrc to improve curl downloads during image builds. Changes in kolla 12.6.0..12.7.0 ------------------------------- a6ee3a291 curl: Add retries 1aa2ddcf4 [CI] Move queue setting to project level Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 3 +++ .zuul.d/centos.yaml | 1 - .zuul.d/ubuntu.yaml | 1 - releasenotes/notes/curl-retries-e1c5d6b5b25d7380.yaml | 4 ++++ 5 files changed, 8 insertions(+), 2 deletions(-)

1 0

kolla-ansible 12.8.0 (wallaby)
by no-reply＠openstack.org 06 Oct '22

06 Oct '22

We contentedly announce the release of: kolla-ansible 12.8.0: Ansible Deployment of Kolla containers This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 12.8.0 ^^^^^^ Bug Fixes * Fixes an issue with AlertManager external Web URL being unconfigurable. A new variable "prometheus_alertmanager_external_url" has been introduced that users can use to set web.external-url to public. * Under circumstances of extended disruption to the Fluentd- ElasticSearch central logging pipeline, it is possible to generate a sufficient buffer of unsent log data that takes longer than the default Fluentd request timeout (default 5 seconds) to transfer the buffer. The default request timeout value is raised to "60s", and made configurable using new parameter "fluentd_elasticsearch_request_timeout". LP#1983031 * Fixes Ironic API healthchecks when backend TLS encryption is enabled. LP#1990819 Changes in kolla-ansible 12.7.0..12.8.0 --------------------------------------- 7b567eb13 Fix AlertManager's external web url 93b0e89bd Fix Ironic API healthcheck with backend TLS 3e70d1829 [CI] Move queue setting to project level d04948ad6 [docs] Align IPA images urls bf85b5be3 Increase the Fluentd request timeout for ES 4e2586cf0 Don't assume /etc/hosts exists b78335fc3 [docs] Overview of Ironic, instead of scaring 30dfb395e [docs] Fix Ironic flavor creation command cd23504a7 [CI] Let Tenks manage its own venv Diffstat (except docs and test files) ------------------------------------- ansible/roles/baremetal/tasks/pre-install.yml | 2 ++ ansible/roles/common/defaults/main.yml | 1 + .../common/templates/conf/output/00-local.conf.j2 | 1 + .../common/templates/conf/output/01-es.conf.j2 | 1 + ansible/roles/ironic/defaults/main.yml | 2 +- ansible/roles/prometheus/defaults/main.yml | 2 ++ .../templates/prometheus-alertmanager.json.j2 | 2 +- ...dcoded-alertmanager-weburl-9413b9e82a8610ea.yaml | 6 ++++++ ...sticsearch-request-timeout-f110883dd4412f65.yaml | 10 ++++++++++ ...pi-backend-tls-healthcheck-481b69116b072913.yaml | 5 +++++ zuul.d/project.yaml | 2 +- 14 files changed, 49 insertions(+), 16 deletions(-)

1 0

kolla-ansible 13.5.0 (xena)
by no-reply＠openstack.org 06 Oct '22

06 Oct '22

We high-spiritedly announce the release of: kolla-ansible 13.5.0: Ansible Deployment of Kolla containers This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 13.5.0 ^^^^^^ Bug Fixes * Fixes an issue with AlertManager external Web URL being unconfigurable. A new variable "prometheus_alertmanager_external_url" has been introduced that users can use to set web.external-url to public. * Under circumstances of extended disruption to the Fluentd- ElasticSearch central logging pipeline, it is possible to generate a sufficient buffer of unsent log data that takes longer than the default Fluentd request timeout (default 5 seconds) to transfer the buffer. The default request timeout value is raised to "60s", and made configurable using new parameter "fluentd_elasticsearch_request_timeout". LP#1983031 * Fixes Ironic API healthchecks when backend TLS encryption is enabled. LP#1990819 * Fixes an issue with "ironic-neutron-agent" using the wrong option to configure the interface used to communicate with the Ironic API. LP#1990675 (https://bugs.launchpad.net/kolla-ansible/+bug/1990675) Changes in kolla-ansible 13.4.0..13.5.0 --------------------------------------- 685d4545d Fix interface option for ironic-neutron-agent ee4a88ea8 Fix Ironic API healthcheck with backend TLS 108de2058 [CI] Move queue setting to project level 2a52fad2d [docs] Align IPA images urls 0e1ae5c34 Increase the Fluentd request timeout for ES 2862205bc Don't assume /etc/hosts exists 6ff882c14 Fix AlertManager's external web url dd4249fe5 [docs] Overview of Ironic, instead of scaring 9c964bc66 [docs] Fix Ironic flavor creation command 488982ea9 [CI] Let Tenks manage its own venv Diffstat (except docs and test files) ------------------------------------- ansible/roles/baremetal/tasks/pre-install.yml | 2 ++ ansible/roles/common/defaults/main.yml | 1 + .../common/templates/conf/output/00-local.conf.j2 | 1 + .../common/templates/conf/output/01-es.conf.j2 | 1 + ansible/roles/ironic/defaults/main.yml | 2 +- .../neutron/templates/ironic_neutron_agent.ini.j2 | 2 +- ansible/roles/prometheus/defaults/main.yml | 2 ++ .../templates/prometheus-alertmanager.json.j2 | 2 +- ...dcoded-alertmanager-weburl-9413b9e82a8610ea.yaml | 6 ++++++ ...sticsearch-request-timeout-f110883dd4412f65.yaml | 10 ++++++++++ ...pi-backend-tls-healthcheck-481b69116b072913.yaml | 5 +++++ ...ic-neutron-agent-interface-75fd4fbb1d3eb843.yaml | 6 ++++++ zuul.d/project.yaml | 8 ++++---- 16 files changed, 59 insertions(+), 20 deletions(-)

1 0

kolla 14.6.0 (yoga)
by no-reply＠openstack.org 06 Oct '22

06 Oct '22

We eagerly announce the release of: kolla 14.6.0: Kolla OpenStack Deployment This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. Changes in kolla 14.5.0..14.6.0 ------------------------------- 49376fa85 [CI] Move queue setting to project level Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 3 +++ .zuul.d/centos.yaml | 1 - .zuul.d/debian.yaml | 1 - .zuul.d/ubuntu.yaml | 1 - 4 files changed, 3 insertions(+), 3 deletions(-)

1 0

kayobe 10.5.0 (wallaby)
by no-reply＠openstack.org 06 Oct '22

06 Oct '22

We are excited to announce the release of: kayobe 10.5.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 10.5.0 ^^^^^^ Bug Fixes * Fixes an issue with "systemd-networkd" configuration for VLAN interfaces when the interface is untagged. * Fixes an issue with nclu-switch command ordering, when description was applied first to a non-existent (virtual) interface. See story 2010279 for details. Changes in kayobe 10.4.0..10.5.0 -------------------------------- b30efa49 [CI] Move queue setting to project level 3f75de7c nclu-switch: Fix order in template 9999211e Ubuntu systemd-networkd: VLAN ifname heuristics Diffstat (except docs and test files) ------------------------------------- ansible/roles/nclu-switch/templates/nclu-config.j2 | 6 +-- kayobe/plugins/filter/networkd.py | 8 ++-- kayobe/plugins/filter/networks.py | 14 +++++++ .../fix-networkd-vlan-netdev-1668f8e0f9647ef8.yaml | 5 +++ .../notes/nclu-order-dc4cb33d633b73a2.yaml | 6 +++ zuul.d/project.yaml | 2 +- 7 files changed, 81 insertions(+), 7 deletions(-)

1 0

kolla 13.6.0 (xena)
by no-reply＠openstack.org 06 Oct '22

06 Oct '22

We are satisfied to announce the release of: kolla 13.6.0: Kolla OpenStack Deployment This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 13.6.0 ^^^^^^ Other Notes * Added '--retry 5' to curlrc to improve curl downloads during image builds. Changes in kolla 13.5.0..13.6.0 ------------------------------- 42700cf5a curl: Add retries 44aba54a4 [CI] Move queue setting to project level Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 3 +++ .zuul.d/centos.yaml | 5 ++--- .zuul.d/ubuntu.yaml | 1 - releasenotes/notes/curl-retries-e1c5d6b5b25d7380.yaml | 4 ++++ 5 files changed, 10 insertions(+), 4 deletions(-)

1 0

kolla-ansible 14.5.0 (yoga)
by no-reply＠openstack.org 06 Oct '22

06 Oct '22

We are overjoyed to announce the release of: kolla-ansible 14.5.0: Ansible Deployment of Kolla containers This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 14.5.0 ^^^^^^ New Features ************ * Adds support for deploying "prometheus-msteams", which can be used to forward Prometheus Alertmanager notifications to Microsoft Teams. It is enabled by setting "enable_prometheus_msteams" to "true". Bug Fixes ********* * Fixes an issue with AlertManager external Web URL being unconfigurable. A new variable "prometheus_alertmanager_external_url" has been introduced that users can use to set web.external-url to public. * Under circumstances of extended disruption to the Fluentd- ElasticSearch central logging pipeline, it is possible to generate a sufficient buffer of unsent log data that takes longer than the default Fluentd request timeout (default 5 seconds) to transfer the buffer. The default request timeout value is raised to "60s", and made configurable using new parameter "fluentd_elasticsearch_request_timeout". LP#1983031 Changes in kolla-ansible 14.4.0..14.5.0 --------------------------------------- 4ee8667f1 [CI] Move queue setting to project level f4e6dcc3b Fix prometheus-msteams image name b3d31abdf [docs] Align IPA images urls a22057028 [CI] Run Kolla Ansible from its own venv 0c746f1cb Increase the Fluentd request timeout for ES 5c5caf7a8 Fix AlertManager's external web url e42f36570 [docs] Overview of Ironic, instead of scaring e5c5e312c [docs] Fix Ironic flavor creation command 1a47c6521 [CI] Let Tenks manage its own venv 040230923 Add prometheus-msteams to get container facts loop f335027a1 Add support for deploying prometheus-msteams Diffstat (except docs and test files) ------------------------------------- ansible/group_vars/all.yml | 5 ++ ansible/inventory/all-in-one | 3 + ansible/inventory/multinode | 3 + ansible/roles/common/defaults/main.yml | 1 + .../common/templates/conf/output/00-local.conf.j2 | 1 + .../common/templates/conf/output/01-es.conf.j2 | 1 + ansible/roles/prometheus/defaults/main.yml | 23 ++++++ ansible/roles/prometheus/handlers/main.yml | 16 ++++ ansible/roles/prometheus/tasks/config.yml | 34 ++++++++ ansible/roles/prometheus/tasks/precheck.yml | 15 ++++ .../templates/prometheus-alertmanager.json.j2 | 2 +- .../templates/prometheus-alertmanager.yml.j2 | 10 +++ .../templates/prometheus-msteams.json.j2 | 24 ++++++ .../prometheus/templates/prometheus-msteams.tmpl | 50 +++++++++++ .../prometheus/templates/prometheus-msteams.yml.j2 | 2 + etc/kolla/globals.yml | 1 + ...coded-alertmanager-weburl-9413b9e82a8610ea.yaml | 6 ++ ...ticsearch-request-timeout-f110883dd4412f65.yaml | 10 +++ .../notes/prometheus-msteams-361a2b76300e7921.yaml | 6 ++ zuul.d/project.yaml | 2 +- 32 files changed, 312 insertions(+), 42 deletions(-)

1 0

puppet-swift 20.4.0 (yoga)
by no-reply＠openstack.org 06 Oct '22

06 Oct '22

We are excited to announce the release of: puppet-swift 20.4.0: Puppet module for OpenStack Swift This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-swift Download the package from: https://tarballs.openstack.org/puppet-swift/ Please report issues through: https://bugs.launchpad.net/puppet-swift/+bugs For more details, please see below. 20.4.0 ^^^^^^ New Features ************ * Now this module supports configurion options in */etc/swift /internal-client.conf`*. * The "swift::proxy::ceilometer" class now supports the following new parameters to manage options for Rabbit driver in oslo.messaging library. * "rabbit_ha_queues" * "heartbeat_timeout_threshold" * "heartbeat_rate" * "heartbeat_in_pthread" * "rabbit_qos_prefetch_count" * "amqp_durable_queues" * "kombu_reconnect_delay" * "kombu_failover_strategy" * "kombu_compression" Bug Fixes ********* * Now the "swift::ringbuilder::create" defined type generates a ring builder file by root user, instead of swift user, by default. Set the user parameter if a different should be used. Changes in puppet-swift 20.3.0..20.4.0 -------------------------------------- 39fdf27 Prepare new version 20.4.0 afa7e2b Fix deprecation warning by validate_legacy 2d1b0a7 Fix type validation warning for storage policy rings ab3cf92 Support customizing internal-client.conf 6e834c3 Support more [oslo_messaging_rabbit] parameters 0abf25d Use the root user to generate ring builder files 9cc8b8d Fix typo in parameter name 4470445 Fix typo in swiftinit service type cfcdae3 Remove TripleO job 274106c Update TOX_CONSTRAINTS_FILE for stable/yoga 18a05e5 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 --- lib/puppet/provider/service/swiftinit.rb | 2 +- .../swift_internal_client_config/ini_setting.rb | 10 ++ lib/puppet/type/swift_internal_client_config.rb | 53 ++++++++ manifests/config.pp | 8 ++ manifests/deps.pp | 4 + manifests/internal_client.pp | 95 ++++++++++++++ manifests/internal_client/cache.pp | 76 ++++++++++++ manifests/internal_client/catch_errors.pp | 25 ++++ manifests/internal_client/proxy_logging.pp | 15 +++ manifests/internal_client/symlink.pp | 42 +++++++ manifests/params.pp | 10 +- manifests/proxy/ceilometer.pp | 136 ++++++++++++++++----- manifests/proxy/cname_lookup.pp | 2 +- manifests/ringbuilder/create.pp | 16 +-- manifests/ringbuilder/rebalance.pp | 6 +- manifests/storage/node.pp | 6 +- metadata.json | 2 +- .../notes/bug-1980613-b2e589f74602f11f.yaml | 6 + .../notes/internal-client-ce022fa93df88aaa.yaml | 5 + ...slo-messaging-rabbit-opts-e4da4a73d1f2c788.yaml | 15 +++ spec/classes/swift_config_spec.rb | 11 ++ spec/classes/swift_internal_client_cache_spec.rb | 78 ++++++++++++ .../swift_internal_client_catch_errors_spec.rb | 19 +++ spec/classes/swift_internal_client_spec.rb | 73 +++++++++++ spec/classes/swift_internal_client_symlink_spec.rb | 33 +++++ spec/classes/swift_proxy_ceilometer_spec.rb | 20 ++- spec/defines/swift_ringbuilder_create_spec.rb | 18 +-- spec/defines/swift_ringbuilder_rebalance_spec.rb | 16 ++- .../ini_setting_spec.rb | 49 ++++++++ .../unit/type/swift_internal_client_config_spec.rb | 19 +++ tox.ini | 2 +- 33 files changed, 803 insertions(+), 89 deletions(-)

1 0

barbican 13.0.1 (xena)
by no-reply＠openstack.org 06 Oct '22

06 Oct '22

We are tickled pink to announce the release of: barbican 13.0.1: OpenStack Secure Key Management This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. 13.0.1 ^^^^^^ Security Issues *************** * Part of the fix for Story 2009664 required renaming the policy for Container Consumers from "consumers:get" to "container_consumers:get", "consumers:post" to "container_consumers:post", and "consumers:delete" to "container_consumers:delete". If you are using custom policies to override the default policies you will need to update them to use the new names. * Fixed Story #2009791: Users with the "creator" role on a project can now delete secrets owned by the project even if the user is different than the user that originally created the secret. Previous to this fix a user with the "creator" role was only allowed to delete a secret owned by the project if they were also the same user that originally created, which was inconsistent with the way that deletes are handled by other OpenStack projects that integrate with Barbican. This change does not affect private secrets (i.e. secrets with the "project-access" flag set to "false"). Bug Fixes ********* * Fixed Story #2009247 - Fixed the response for POST /v1/secrets /{secret-id}/metadata so it matches the documented behavior. * Fixed Story 2009664 - Fixed the Consumer controller to be able to use the associated Container's ownership information in policy checks. * Fixed Story #2009672 - Fixed validator for Container Consumers to prevent 500 errors. Changes in barbican 13.0.0..13.0.1 ---------------------------------- 3670a0a8 Fix Story 2010258 (CVE-2022-3100) 4cc1070d Fix Barbican gate 74bab1d4 Fix remaining Secure RBAC policies 1ebdd8f5 Fix Secure RBAC policies for Containers API 3b1c6b3d Fix Secure RBAC policies for Consumers 8c44a2f9 Fix Secure RBAC policies for secret_metadata 4271726f Fix Secure RBAC policies for Orders de65fecd Fix Secure RBAC policies for Secret ACLs 34f1adc0 Fix Secure RBAC policies for Secrets 6328e38a Set versioned jobs to set microversion correctly bb277947 Allow users with "creator" role to edit ACLs 0cc62e4e Xena-only: Remove TripleO job 811a846a Allow secret delete by users with "creator" role 6a5ab85f Fix container consumers rbac policy 382b5086 Fix policy for Orders 059b4a08 Fix consumer name length validator bbb87ea8 Fix policy for adding a secret to a container b1e5386f Fix secret metadata access rules (pt 2) 750a79b4 Fix secret metadata access rules 61aa13e9 Fix POST /v1/secret/{secret-id}/metadata response 698aa1b6 Temporarily disable RBAC tests 1b6cf81c Ignore network errors during C_Finalize 1370c484 Run TripleO jobs on CentOS8 instead of CentOS7 65294a87 Update TOX_CONSTRAINTS_FILE for stable/xena b9e0b725 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 29 +-- api-guide/source/acls.rst | 3 +- barbican/api/controllers/__init__.py | 27 ++- barbican/api/controllers/acls.py | 2 + barbican/api/controllers/consumers.py | 73 ++++---- barbican/api/controllers/containers.py | 17 +- barbican/api/controllers/orders.py | 9 +- barbican/api/controllers/quotas.py | 3 + barbican/api/controllers/secretmeta.py | 7 +- barbican/api/controllers/secrets.py | 10 +- barbican/api/controllers/secretstores.py | 3 + barbican/api/controllers/transportkeys.py | 2 + barbican/common/exception.py | 4 + barbican/common/policies/acls.py | 131 +++++++++---- barbican/common/policies/base.py | 127 +++++++++---- barbican/common/policies/consumers.py | 207 ++++++++++++++++----- barbican/common/policies/containers.py | 119 +++++++++--- barbican/common/policies/orders.py | 63 ++++++- barbican/common/policies/quotas.py | 50 +++-- barbican/common/policies/secretmeta.py | 77 +++++++- barbican/common/policies/secrets.py | 114 ++++++++---- barbican/common/policies/secretstores.py | 70 +++++-- barbican/common/policies/transportkeys.py | 50 ++++- barbican/common/validators.py | 4 +- barbican/plugin/crypto/pkcs11.py | 13 +- .../api/v1/functional/test_secrets_rbac.py | 2 +- .../notes/fix-story-2009247-18faf4f2b570dfc0.yaml | 6 + .../notes/fix-story-2009664-042ef282c0dd6b6a.yaml | 13 ++ .../notes/fix-story-2009672-d64ef6c10444f517.yaml | 5 + ...9791-allow-creator-delete-06dd3eb670d0e624.yaml | 11 ++ tox.ini | 8 +- 38 files changed, 1089 insertions(+), 390 deletions(-)

1 0