December 2022 - Release-announce - lists.openstack.org

kolla-ansible 15.0.0.0rc1 (zed)
by no-reply＠openstack.org 09 Dec '22

09 Dec '22

Hello everyone, A new release candidate for kolla-ansible for the end of the Zed cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Zed release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/zed release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/zed Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *zed-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

kolla 15.0.0.0rc1 (zed)
by no-reply＠openstack.org 09 Dec '22

09 Dec '22

Hello everyone, A new release candidate for kolla for the end of the Zed cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Zed release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/zed release branch at: https://opendev.org/openstack/kolla/src/branch/stable/zed Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *zed-rc-potential* to bring it to the kolla release crew's attention.

1 0

tempest 33.0.0 (zed)
by no-reply＠openstack.org 08 Dec '22

08 Dec '22

We are amped to announce the release of: tempest 33.0.0: OpenStack Integration Testing This release is part of the zed release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 33.0.0 ^^^^^^ Prelude ******* This is an intermediate release during the 2023.1 development cycle to mark the end of support for EM Wallaby release in Tempest. After this release, Tempest will support below OpenStack Releases: * Zed * Yoga * Xena Current development of Tempest is for OpenStack 2023.1 development cycle. New Features ************ * The "server_external_events" tempest client for compute Server External Events API is implemented in this release. * Add a new config option *[image_feature_enabled]/manage_locations* which enables tests for the *show_multiple_locations=True* functionality in glance. In order for this to work you must also have a store capable of hosting images with an HTTP URI. Changes in tempest 32.0.0..33.0.0 --------------------------------- 633bd0d13 Pin stable/zed constraint in tox to release 33.0.0 5844fd9ae End support for stable/wallaby f4970a3f8 Fix Compute Live Migration tests with Ironic 25c441c76 Fix python classifier for py39 a673bd93c Cleanup tox.ini 78d2492f9 Set back to use Bionic for Ussuri, Train and Stein 7ab45a9be Add new tempest job enable the rbac scope checks and new defaults 81bd0e9e1 Add test for compute server external event API 24a3a3667 Migrate tempest jobs to Ubuntu Jammy (22.04) 2c6da1db3 Fix error KeyError: 'addresses' for two tests d2822ddc4 Add replace location test 9eaaa5ac3 Add tests for image location manipulation 5928eeb68 Fix server id reference in _rebuild_server_and_check() 0fe9663a2 Clarify the enforce_scope config option help message 5fbca522d [Doc] Fix python version in unit tests document 466f70608 Fix image import tests for read-only stores 1d94c7b70 Updated document for the correct stable branches support 76db176c7 Fix security vulnerabilities using Bandit 6714b65a2 Add a boot-snapshot-boot test 6caf3b357 All image clients must use image build timeout f1d0e395e Add Tempest gate job for stable/zed 4ff6f153b Add release notes page for version 32.0.0 ca5ddb4fe Update server details before getting fixed IP b39bbcc0b Switch to the master constraint in tox.ini 426bd3129 Remove transfer-encoding headers from test 3e1d5df6a Add tempest-multinode-full-py3 job in gate pipeline 9a9d5883c Add nova-multi-cell job in experimental pipeline Diffstat (except docs and test files) ------------------------------------- ...er-external-events-client-c86b269b0091077b.yaml | 5 + ...end-of-support-of-wallaby-455e4871ae4cb32e.yaml | 12 + .../image_multiple_locations-cda4453567953c1d.yaml | 8 + releasenotes/source/index.rst | 1 + releasenotes/source/v32.0.0.rst | 5 + requirements.txt | 1 + setup.cfg | 1 + .../compute/admin/test_server_external_events.py | 37 +++ tempest/api/compute/base.py | 2 + tempest/api/compute/images/test_images.py | 24 ++ tempest/api/compute/servers/test_server_actions.py | 2 +- tempest/api/image/v2/test_images.py | 285 ++++++++++++++++++++- tempest/api/object_storage/test_object_services.py | 2 - tempest/clients.py | 5 +- tempest/common/compute.py | 70 ++--- tempest/common/waiters.py | 28 +- tempest/config.py | 45 ++-- .../compute/v2_1/server_external_events.py | 55 ++++ tempest/lib/services/compute/__init__.py | 8 +- .../compute/server_external_events_client.py | 36 +++ .../lib/services/object_storage/account_client.py | 2 +- .../services/object_storage/container_client.py | 2 +- .../compute/test_server_external_events_client.py | 56 ++++ tox.ini | 4 +- zuul.d/integrated-gate.yaml | 52 ++-- zuul.d/project.yaml | 21 +- zuul.d/stable-jobs.yaml | 85 +++++- zuul.d/tempest-specific.yaml | 2 +- 31 files changed, 796 insertions(+), 102 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c4c7fcc78..a118856a3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -23,0 +24 @@ debtcollector>=1.2.0 # Apache-2.0 +defusedxml>=0.7.1 # PSFL

1 0

neutron-vpnaas 19.0.1 (xena)
by no-reply＠openstack.org 07 Dec '22

07 Dec '22

We eagerly announce the release of: neutron-vpnaas 19.0.1: OpenStack Networking VPN as a Service This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/neutron-vpnaas Download the package from: https://tarballs.openstack.org/neutron-vpnaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-vpnaas 19.0.0..19.0.1 ---------------------------------------- 5d0e71699 l3ha: fix status updates 3b3392d5b Fix failover with L3 HA fe83a9597 tests: fix functional tests 8b7da9f4f Update TOX_CONSTRAINTS_FILE for stable/xena 81975184b Update .gitreview for stable/xena fb15659df [stable/xena] Dropping lower-constraints testing Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - lower-constraints.txt | 135 --------------------- neutron_vpnaas/services/vpn/agent.py | 6 +- tox.ini | 10 +- 6 files changed, 13 insertions(+), 153 deletions(-)

1 0

neutron-vpnaas 20.0.1 (yoga)
by no-reply＠openstack.org 07 Dec '22

07 Dec '22

We are pleased to announce the release of: neutron-vpnaas 20.0.1: OpenStack Networking VPN as a Service This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/neutron-vpnaas Download the package from: https://tarballs.openstack.org/neutron-vpnaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-vpnaas 20.0.0..20.0.1 ---------------------------------------- 568e07c61 l3ha: fix status updates 2678c9fd2 Drop lower-constraints.txt and its testing 547093356 Fix failover with L3 HA 86fb6b97a tests: fix functional tests d73919979 Update TOX_CONSTRAINTS_FILE for stable/yoga 981733558 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - lower-constraints.txt | 135 --------------------- neutron_vpnaas/services/vpn/agent.py | 6 +- requirements.txt | 4 + tox.ini | 10 +- 7 files changed, 17 insertions(+), 154 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 712880f86..2f7e3ee2e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. +

1 0

manila 13.0.4 (xena)
by no-reply＠openstack.org 05 Dec '22

05 Dec '22

We enthusiastically announce the release of: manila 13.0.4: Shared Storage for OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 13.0.4 ^^^^^^ Security Issues *************** * The SSH utility module no longer logs usernames and passwords as debug information. Bug Fixes ********* * The GET /shares/{share_id} API now responds with HTTP 404 (Not Found) for inaccessible resources. See bug 1901210 (https://launchpad.net/bugs/1901210) for further information. * NetApp OnTap driver Bug #1915237 (https://bugs.launchpad.net/manila/+bug/1915237) Fixed encryption compatibility check on manila share migrate. * Adds a check when associating a security service to a share network, so that both resources must have the same project_id. If not, HTTP Bad Request is raised. * Fixed an issue that caused Manila to return all projects' share replicas even when the user was not an administrator. Now, when the user is not an administrator, only the replicas in the project perspective are going to be displayed. For more details, please refer to Launchpad Bug #1922243 (https://bugs.launchpad.net/manila/+bug/1922243) * The CephFS driver no longer fails to delete access rules that were never applied or were missing from the back end storage. See LP #1971530 (https://launchpad.net/bugs/1971530) for more details. * During share network create API, if either share network or share network subnet db creation fails, manila raises an exception. However quota is not rolled back and its usable only after quota reservations timed out (waiting conf.reservation_expire seconds). Fixed by introducing immediate quota rollback in case any db create api fails. * Goodness_function expects integer or float else raise parseException. This causes example such as "(share.share_proto == 'CIFS') ? 100 : 50" to fail during evaluation. Fix it by adding support of string evalution. * Deployers now can specify "[glance]endpoint_type" configuration option (defaults to "publicURL" for backward compatibility) so that Manila uses Glance endpoint other than the public one (see bug 1991396 (https://bugs.launchpad.net/manila/+bug/1991396)) Changes in manila 13.0.3..13.0.4 -------------------------------- d6a49cd5 Fix DriverFilter/GoodnessWeigher string evaluations 7dd5499a Allow setting endpoint_type for glance 2f335893 Fix manila plugin.sh set backend_availability_zone 5b8b7b19 [RBAC] Return 404 if share is inaccessible b7190fe3 Stop logging sensitive login information 85d61017 Add FIPS testing job 6cc760e0 Check project permissions for share replicas 65fe7929 Add validation to share network 63c37579 Force disk wipe when running lvcreate b06cc4b8 Define queues at project level 3e4d1292 Use defined project config of manila-tempest-plugin 27d79965 NetApp OnTap: Fix compatibility check for share migrate 696469e8 Rollback quota when share network create API fails. 8805f4f3 [Native CephFS] Don't fail to deny missing rules b02b96d8 Drop lower-constraints.txt and its testing 49f50c9f [CI] Install dependencies for docs target Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 9 +- lower-constraints.txt | 135 --------------------- manila/api/v2/share_networks.py | 6 +- manila/db/api.py | 4 +- manila/db/sqlalchemy/api.py | 16 ++- manila/image/glance.py | 4 + manila/scheduler/evaluator/evaluator.py | 9 +- manila/share/api.py | 5 +- manila/share/drivers/cephfs/driver.py | 11 +- manila/share/drivers/lvm.py | 6 +- .../netapp/dataontap/client/client_cmode.py | 10 +- .../netapp/dataontap/client/test_client_cmode.py | 23 +++- manila/utils.py | 6 +- ...if-share-access-forbidden-02ca9a9552ad3e15.yaml | 6 + ...-encrypt-check-on-migrate-1e39bd7f19651972.yaml | 6 + ...lidation-to-share-network-94571f35cb39c815.yaml | 5 + ...ject-only-replica-listing-f5f2b95ef14c3ded.yaml | 8 ++ ...cephfs-native-deny-access-facf37fa7053c30d.yaml | 6 + ...hare-network-create-fails-628312233bf0c179.yaml | 8 ++ ...filter-string-evaluations-3886a68d4d7fa3a1.yaml | 6 + ...logging-login-information-b726d05ee805df27.yaml | 5 + ...-add-glance-endpoint-type-151777f255e423a3.yaml | 7 ++ requirements.txt | 4 + tox.ini | 10 +- zuul.d/project.yaml | 14 +-- 33 files changed, 269 insertions(+), 201 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c37b4a76..09fbd316 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. +

1 0

manila 14.0.1 (yoga)
by no-reply＠openstack.org 05 Dec '22

05 Dec '22

We are stoked to announce the release of: manila 14.0.1: Shared Storage for OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 14.0.1 ^^^^^^ Security Issues *************** * The SSH utility module no longer logs usernames and passwords as debug information. Bug Fixes ********* * The GET /shares/{share_id} API now responds with HTTP 404 (Not Found) for inaccessible resources. See bug 1901210 (https://launchpad.net/bugs/1901210) for further information. * Adds a check when associating a security service to a share network, so that both resources must have the same project_id. If not, HTTP Bad Request is raised. * Fixed an issue that caused Manila to return all projects' share replicas even when the user was not an administrator. Now, when the user is not an administrator, only the replicas in the project perspective are going to be displayed. For more details, please refer to Launchpad Bug #1922243 (https://bugs.launchpad.net/manila/+bug/1922243) * Fix the bug of TypeError with JsonFilter. If the scheduler_hints value is None, the TypeError exception may occur when creating share with JsonFilter. The TypeError exception is added to solve this problem. * Bug #1964696 (https://bugs.launchpad.net/manila/+bug/1964696) Fix calling the GaneshaNASHelper *update_access* method from the gluster GaneshaNFSHelper with the wrong signature. * Fixes regression for show_metadata and the response dictionary. The correct response is: {meta: {'key': 'value}}. * The CephFS driver no longer fails to delete access rules that were never applied or were missing from the back end storage. See LP #1971530 (https://launchpad.net/bugs/1971530) for more details. * During share network create API, if either share network or share network subnet db creation fails, manila raises an exception. However quota is not rolled back and its usable only after quota reservations timed out (waiting conf.reservation_expire seconds). Fixed by introducing immediate quota rollback in case any db create api fails. * Goodness_function expects integer or float else raise parseException. This causes example such as "(share.share_proto == 'CIFS') ? 100 : 50" to fail during evaluation. Fix it by adding support of string evalution. * Drivers using DHSS True mode has the server creation phase. This phase tries to reuse one of available share servers, however, the Manila code is considering all share servers states as available, rather than considering only the active or creating ones. Now, only the correct share servers are passed to drivers as available to be reused. * Bug #1983125 (https://bugs.launchpad.net/manila/+bug/1983125) Fixed the remaining reference to a deprecated quota option in code, which was causing a warning message. * Infinidat Driver bug #1986653 (https://bugs.launchpad.net/manila/+bug/1986653) Fixed Infinidat driver to use TLS/SSL communication between the Manila share service and the storage backend. Admin can set *True* or *False* for the *infinidat_use_ssl* and *infinidat_suppress_ssl_warnings* options in the driver section of manila.conf to enable or disable these features. * Deployers now can specify "[glance]endpoint_type" configuration option (defaults to "publicURL" for backward compatibility) so that Manila uses Glance endpoint other than the public one (see bug 1991396 (https://bugs.launchpad.net/manila/+bug/1991396)) * Bug 1991776 (https://launchpad.net/bugs/1991776) was fixed within the CephFS driver. The driver no longer emits repeated warnings concerning supported IP versions when using the NFS protocol. * Fix creating from snapshot operation with server limits. If the new share and parent are in the same host, the share server must be resued, so the limits must be ignored. For more details, please refer to launchpad bug #1918845 (https://bugs.launchpad.net/manila/+bug/1918845) * Some neutron integrations might not have the network type, so the neutron network plugin is fixed by taking that scenario in consideration. Launchpad bug #1987315 (https://bugs.launchpad.ne/manila/+bug/1987315) for more details. Changes in manila 14.0.0..14.0.1 -------------------------------- fc566dd9 [Infinidat] add support for TLS/SSL communication 74928a3a Fix misuse of assertTrue ba1fa652 Fix Create From Snapshot with Server Limits f2111d54 Set configured_ip_versions fact in cephfs driver 9c5adb0b Fix neutron plugin get network_type 0994740a Allow setting endpoint_type for glance dfb4e7ee [RBAC] Return 404 if share is inaccessible 1c021168 Fix DriverFilter/GoodnessWeigher string evaluations 60fd8ab6 Fix available share servers to be reused e4c8c723 Fix reference to deprecated quota_driver option 48f4bf6a Stop logging sensitive login information 9b89673e Add FIPS testing job a7a053c5 Define queues at project level 123db367 Use defined project config of manila-tempest-plugin 96fd391a Fix manila plugin.sh set backend_availability_zone 2bb2de55 Update image URL and image name 4179dfa4 Rollback quota when share network create API fails. a607ed8e [Native CephFS] Don't fail to deny missing rules 886c2258 Check project permissions for share replicas 3b9477c4 Drop lower-constraints.txt and its testing 6b644fa8 [CI] Install dependencies for docs target 45b55e85 Fix the bug of TypeError with JsonFilter c37a44df Fix GaneshaNASHelper update_access signature 95099bdf Add validation to share network 8817389a Shares Metadata follow-up patch 22fcb45a fix typo in reno of bug-1946990 f449ebbf Fix Dummy driver fails to get subnet_allocations df8d0ed3 Update TOX_CONSTRAINTS_FILE for stable/yoga 9fed4ce3 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/plugin.sh | 9 +- devstack/settings | 4 +- ...shared-file-systems-share-server-management.rst | 6 + lower-constraints.txt | 135 --------------------- manila/api/v2/metadata.py | 2 +- manila/api/v2/share_networks.py | 6 +- manila/db/api.py | 13 +- manila/db/sqlalchemy/api.py | 64 +++++++--- manila/image/glance.py | 4 + manila/network/neutron/neutron_network_plugin.py | 6 +- manila/quota.py | 2 +- manila/scheduler/evaluator/evaluator.py | 9 +- manila/scheduler/filters/json.py | 4 +- manila/share/api.py | 15 +-- manila/share/drivers/cephfs/driver.py | 13 +- manila/share/drivers/glusterfs/__init__.py | 10 ++ manila/share/drivers/infinidat/infinibox.py | 37 ++++-- manila/share/manager.py | 11 +- .../share/drivers/infinidat/test_infinidat.py | 30 ++++- .../netapp/dataontap/cluster_mode/test_lib_base.py | 5 +- manila/utils.py | 6 +- ...if-share-access-forbidden-02ca9a9552ad3e15.yaml | 6 + ...lidation-to-share-network-94571f35cb39c815.yaml | 5 + ...ject-only-replica-listing-f5f2b95ef14c3ded.yaml | 8 ++ ...-fix-ignored-neutron-opts-c438a089de9e2066.yaml | 2 +- ...2-fix-type-error-jsonfilter-fc7f87c288cc69.yaml | 5 + ...haNFSHelper-update_access-6124a79e34e63030.yaml | 7 ++ ...69-fix-share-metadata-api-c31aca75bac66501.yaml | 7 ++ ...cephfs-native-deny-access-facf37fa7053c30d.yaml | 6 + ...hare-network-create-fails-628312233bf0c179.yaml | 8 ++ ...filter-string-evaluations-3886a68d4d7fa3a1.yaml | 6 + ...logging-login-information-b726d05ee805df27.yaml | 5 + ...ix-find-available-servers-2dec3a4f3f0ef7e4.yaml | 8 ++ .../notes/bug-1983125-cb9118c3fa26a6f2.yaml | 6 + ...infinidat-add-ssl-options-ee91f152bbd28080.yaml | 9 ++ ...-add-glance-endpoint-type-151777f255e423a3.yaml | 7 ++ ...fs-configured-ip-versions-fd87976fdb848e8c.yaml | 6 + ...rom-snapshot-server-limit-7b575c7cbf081efc.yaml | 7 ++ ...n-plugin-invalid-key-dict-68c3d6bcbf2f19f0.yaml | 7 ++ requirements.txt | 4 + tox.ini | 18 ++- zuul.d/project.yaml | 14 +-- 55 files changed, 552 insertions(+), 289 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 55dab219..dac7e8bd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. +

1 0

barbican 15.0.1 (zed)
by no-reply＠openstack.org 01 Dec '22

01 Dec '22

We are jazzed to announce the release of: barbican 15.0.1: OpenStack Secure Key Management This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. Changes in barbican 15.0.0..15.0.1 ---------------------------------- 5f4f7ce1 Fix unit test error after cryptography update ac7ba5e2 Fix typo in check_str for system_admin policy rule Diffstat (except docs and test files) ------------------------------------- barbican/common/policies/base.py | 2 +- 2 files changed, 17 insertions(+), 9 deletions(-)

1 0

barbican 13.0.2 (xena)
by no-reply＠openstack.org 01 Dec '22

01 Dec '22

We are thrilled to announce the release of: barbican 13.0.2: OpenStack Secure Key Management This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. Changes in barbican 13.0.1..13.0.2 ---------------------------------- e32e2e42 Fix typo in check_str for system_admin policy rule Diffstat (except docs and test files) ------------------------------------- barbican/common/policies/base.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

barbican 14.0.2 (yoga)
by no-reply＠openstack.org 01 Dec '22

01 Dec '22

We are satisfied to announce the release of: barbican 14.0.2: OpenStack Secure Key Management This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. Changes in barbican 14.0.1..14.0.2 ---------------------------------- f5147deb Fix typo in check_str for system_admin policy rule Diffstat (except docs and test files) ------------------------------------- barbican/common/policies/base.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0