December 2022 - Release-announce - lists.openstack.org

manila 13.0.4 (xena)
by no-reply＠openstack.org 05 Dec '22

05 Dec '22

We enthusiastically announce the release of: manila 13.0.4: Shared Storage for OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 13.0.4 ^^^^^^ Security Issues *************** * The SSH utility module no longer logs usernames and passwords as debug information. Bug Fixes ********* * The GET /shares/{share_id} API now responds with HTTP 404 (Not Found) for inaccessible resources. See bug 1901210 (https://launchpad.net/bugs/1901210) for further information. * NetApp OnTap driver Bug #1915237 (https://bugs.launchpad.net/manila/+bug/1915237): Fixed encryption compatibility check on manila share migrate. * Adds a check when associating a security service to a share network, so that both resources must have the same project_id. If not, HTTP Bad Request is raised. * Fixed an issue that caused Manila to return all projects' share replicas even when the user was not an administrator. Now, when the user is not an administrator, only the replicas in the project perspective are going to be displayed. For more details, please refer to Launchpad Bug #1922243 (https://bugs.launchpad.net/manila/+bug/1922243) * The CephFS driver no longer fails to delete access rules that were never applied or were missing from the back end storage. See LP #1971530 (https://launchpad.net/bugs/1971530) for more details. * During share network create API, if either share network or share network subnet db creation fails, manila raises an exception. However quota is not rolled back and its usable only after quota reservations timed out (waiting conf.reservation_expire seconds). Fixed by introducing immediate quota rollback in case any db create api fails. * Goodness_function expects integer or float else raise parseException. This causes example such as "(share.share_proto == 'CIFS') ? 100 : 50" to fail during evaluation. Fix it by adding support of string evalution. * Deployers now can specify "[glance]endpoint_type" configuration option (defaults to "publicURL" for backward compatibility) so that Manila uses Glance endpoint other than the public one (see bug 1991396 (https://bugs.launchpad.net/manila/+bug/1991396)). Changes in manila 13.0.3..13.0.4 -------------------------------- d6a49cd5 Fix DriverFilter/GoodnessWeigher string evaluations 7dd5499a Allow setting endpoint_type for glance 2f335893 Fix manila plugin.sh set backend_availability_zone 5b8b7b19 [RBAC] Return 404 if share is inaccessible b7190fe3 Stop logging sensitive login information 85d61017 Add FIPS testing job 6cc760e0 Check project permissions for share replicas 65fe7929 Add validation to share network 63c37579 Force disk wipe when running lvcreate b06cc4b8 Define queues at project level 3e4d1292 Use defined project config of manila-tempest-plugin 27d79965 NetApp OnTap: Fix compatibility check for share migrate 696469e8 Rollback quota when share network create API fails. 8805f4f3 [Native CephFS] Don't fail to deny missing rules b02b96d8 Drop lower-constraints.txt and its testing 49f50c9f [CI] Install dependencies for docs target Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 9 +- lower-constraints.txt | 135 --------------------- manila/api/v2/share_networks.py | 6 +- manila/db/api.py | 4 +- manila/db/sqlalchemy/api.py | 16 ++- manila/image/glance.py | 4 + manila/scheduler/evaluator/evaluator.py | 9 +- manila/share/api.py | 5 +- manila/share/drivers/cephfs/driver.py | 11 +- manila/share/drivers/lvm.py | 6 +- .../netapp/dataontap/client/client_cmode.py | 10 +- .../netapp/dataontap/client/test_client_cmode.py | 23 +++- manila/utils.py | 6 +- ...if-share-access-forbidden-02ca9a9552ad3e15.yaml | 6 + ...-encrypt-check-on-migrate-1e39bd7f19651972.yaml | 6 + ...lidation-to-share-network-94571f35cb39c815.yaml | 5 + ...ject-only-replica-listing-f5f2b95ef14c3ded.yaml | 8 ++ ...cephfs-native-deny-access-facf37fa7053c30d.yaml | 6 + ...hare-network-create-fails-628312233bf0c179.yaml | 8 ++ ...filter-string-evaluations-3886a68d4d7fa3a1.yaml | 6 + ...logging-login-information-b726d05ee805df27.yaml | 5 + ...-add-glance-endpoint-type-151777f255e423a3.yaml | 7 ++ requirements.txt | 4 + tox.ini | 10 +- zuul.d/project.yaml | 14 +-- 33 files changed, 269 insertions(+), 201 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c37b4a76..09fbd316 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. +

1 0

manila 14.0.1 (yoga)
by no-reply＠openstack.org 05 Dec '22

05 Dec '22

We are stoked to announce the release of: manila 14.0.1: Shared Storage for OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 14.0.1 ^^^^^^ Security Issues *************** * The SSH utility module no longer logs usernames and passwords as debug information. Bug Fixes ********* * The GET /shares/{share_id} API now responds with HTTP 404 (Not Found) for inaccessible resources. See bug 1901210 (https://launchpad.net/bugs/1901210) for further information. * Adds a check when associating a security service to a share network, so that both resources must have the same project_id. If not, HTTP Bad Request is raised. * Fixed an issue that caused Manila to return all projects' share replicas even when the user was not an administrator. Now, when the user is not an administrator, only the replicas in the project perspective are going to be displayed. For more details, please refer to Launchpad Bug #1922243 (https://bugs.launchpad.net/manila/+bug/1922243) * Fix the bug of TypeError with JsonFilter. If the scheduler_hints value is None, the TypeError exception may occur when creating share with JsonFilter. The TypeError exception is added to solve this problem. * Bug #1964696 (https://bugs.launchpad.net/manila/+bug/1964696): Fix calling the GaneshaNASHelper *update_access* method from the gluster GaneshaNFSHelper with the wrong signature. * Fixes regression for show_metadata and the response dictionary. The correct response is: {meta: {'key': 'value}}. * The CephFS driver no longer fails to delete access rules that were never applied or were missing from the back end storage. See LP #1971530 (https://launchpad.net/bugs/1971530) for more details. * During share network create API, if either share network or share network subnet db creation fails, manila raises an exception. However quota is not rolled back and its usable only after quota reservations timed out (waiting conf.reservation_expire seconds). Fixed by introducing immediate quota rollback in case any db create api fails. * Goodness_function expects integer or float else raise parseException. This causes example such as "(share.share_proto == 'CIFS') ? 100 : 50" to fail during evaluation. Fix it by adding support of string evalution. * Drivers using DHSS True mode has the server creation phase. This phase tries to reuse one of available share servers, however, the Manila code is considering all share servers states as available, rather than considering only the active or creating ones. Now, only the correct share servers are passed to drivers as available to be reused. * Bug #1983125 (https://bugs.launchpad.net/manila/+bug/1983125): Fixed the remaining reference to a deprecated quota option in code, which was causing a warning message. * Infinidat Driver bug #1986653 (https://bugs.launchpad.net/manila/+bug/1986653): Fixed Infinidat driver to use TLS/SSL communication between the Manila share service and the storage backend. Admin can set *True* or *False* for the *infinidat_use_ssl* and *infinidat_suppress_ssl_warnings* options in the driver section of manila.conf to enable or disable these features. * Deployers now can specify "[glance]endpoint_type" configuration option (defaults to "publicURL" for backward compatibility) so that Manila uses Glance endpoint other than the public one (see bug 1991396 (https://bugs.launchpad.net/manila/+bug/1991396)). * Bug 1991776 (https://launchpad.net/bugs/1991776) was fixed within the CephFS driver. The driver no longer emits repeated warnings concerning supported IP versions when using the NFS protocol. * Fix creating from snapshot operation with server limits. If the new share and parent are in the same host, the share server must be resued, so the limits must be ignored. For more details, please refer to launchpad bug #1918845 (https://bugs.launchpad.net/manila/+bug/1918845) * Some neutron integrations might not have the network type, so the neutron network plugin is fixed by taking that scenario in consideration. Launchpad bug #1987315 (https://bugs.launchpad.ne/manila/+bug/1987315) for more details. Changes in manila 14.0.0..14.0.1 -------------------------------- fc566dd9 [Infinidat] add support for TLS/SSL communication 74928a3a Fix misuse of assertTrue ba1fa652 Fix Create From Snapshot with Server Limits f2111d54 Set configured_ip_versions fact in cephfs driver 9c5adb0b Fix neutron plugin get network_type 0994740a Allow setting endpoint_type for glance dfb4e7ee [RBAC] Return 404 if share is inaccessible 1c021168 Fix DriverFilter/GoodnessWeigher string evaluations 60fd8ab6 Fix available share servers to be reused e4c8c723 Fix reference to deprecated quota_driver option 48f4bf6a Stop logging sensitive login information 9b89673e Add FIPS testing job a7a053c5 Define queues at project level 123db367 Use defined project config of manila-tempest-plugin 96fd391a Fix manila plugin.sh set backend_availability_zone 2bb2de55 Update image URL and image name 4179dfa4 Rollback quota when share network create API fails. a607ed8e [Native CephFS] Don't fail to deny missing rules 886c2258 Check project permissions for share replicas 3b9477c4 Drop lower-constraints.txt and its testing 6b644fa8 [CI] Install dependencies for docs target 45b55e85 Fix the bug of TypeError with JsonFilter c37a44df Fix GaneshaNASHelper update_access signature 95099bdf Add validation to share network 8817389a Shares Metadata follow-up patch 22fcb45a fix typo in reno of bug-1946990 f449ebbf Fix Dummy driver fails to get subnet_allocations df8d0ed3 Update TOX_CONSTRAINTS_FILE for stable/yoga 9fed4ce3 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/plugin.sh | 9 +- devstack/settings | 4 +- ...shared-file-systems-share-server-management.rst | 6 + lower-constraints.txt | 135 --------------------- manila/api/v2/metadata.py | 2 +- manila/api/v2/share_networks.py | 6 +- manila/db/api.py | 13 +- manila/db/sqlalchemy/api.py | 64 +++++++--- manila/image/glance.py | 4 + manila/network/neutron/neutron_network_plugin.py | 6 +- manila/quota.py | 2 +- manila/scheduler/evaluator/evaluator.py | 9 +- manila/scheduler/filters/json.py | 4 +- manila/share/api.py | 15 +-- manila/share/drivers/cephfs/driver.py | 13 +- manila/share/drivers/glusterfs/__init__.py | 10 ++ manila/share/drivers/infinidat/infinibox.py | 37 ++++-- manila/share/manager.py | 11 +- .../share/drivers/infinidat/test_infinidat.py | 30 ++++- .../netapp/dataontap/cluster_mode/test_lib_base.py | 5 +- manila/utils.py | 6 +- ...if-share-access-forbidden-02ca9a9552ad3e15.yaml | 6 + ...lidation-to-share-network-94571f35cb39c815.yaml | 5 + ...ject-only-replica-listing-f5f2b95ef14c3ded.yaml | 8 ++ ...-fix-ignored-neutron-opts-c438a089de9e2066.yaml | 2 +- ...2-fix-type-error-jsonfilter-fc7f87c288cc69.yaml | 5 + ...haNFSHelper-update_access-6124a79e34e63030.yaml | 7 ++ ...69-fix-share-metadata-api-c31aca75bac66501.yaml | 7 ++ ...cephfs-native-deny-access-facf37fa7053c30d.yaml | 6 + ...hare-network-create-fails-628312233bf0c179.yaml | 8 ++ ...filter-string-evaluations-3886a68d4d7fa3a1.yaml | 6 + ...logging-login-information-b726d05ee805df27.yaml | 5 + ...ix-find-available-servers-2dec3a4f3f0ef7e4.yaml | 8 ++ .../notes/bug-1983125-cb9118c3fa26a6f2.yaml | 6 + ...infinidat-add-ssl-options-ee91f152bbd28080.yaml | 9 ++ ...-add-glance-endpoint-type-151777f255e423a3.yaml | 7 ++ ...fs-configured-ip-versions-fd87976fdb848e8c.yaml | 6 + ...rom-snapshot-server-limit-7b575c7cbf081efc.yaml | 7 ++ ...n-plugin-invalid-key-dict-68c3d6bcbf2f19f0.yaml | 7 ++ requirements.txt | 4 + tox.ini | 18 ++- zuul.d/project.yaml | 14 +-- 55 files changed, 552 insertions(+), 289 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 55dab219..dac7e8bd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. +

1 0

barbican 15.0.1 (zed)
by no-reply＠openstack.org 01 Dec '22

01 Dec '22

We are jazzed to announce the release of: barbican 15.0.1: OpenStack Secure Key Management This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. Changes in barbican 15.0.0..15.0.1 ---------------------------------- 5f4f7ce1 Fix unit test error after cryptography update ac7ba5e2 Fix typo in check_str for system_admin policy rule Diffstat (except docs and test files) ------------------------------------- barbican/common/policies/base.py | 2 +- 2 files changed, 17 insertions(+), 9 deletions(-)

1 0

barbican 13.0.2 (xena)
by no-reply＠openstack.org 01 Dec '22

01 Dec '22

We are thrilled to announce the release of: barbican 13.0.2: OpenStack Secure Key Management This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. Changes in barbican 13.0.1..13.0.2 ---------------------------------- e32e2e42 Fix typo in check_str for system_admin policy rule Diffstat (except docs and test files) ------------------------------------- barbican/common/policies/base.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0

barbican 14.0.2 (yoga)
by no-reply＠openstack.org 01 Dec '22

01 Dec '22

We are satisfied to announce the release of: barbican 14.0.2: OpenStack Secure Key Management This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. Changes in barbican 14.0.1..14.0.2 ---------------------------------- f5147deb Fix typo in check_str for system_admin policy rule Diffstat (except docs and test files) ------------------------------------- barbican/common/policies/base.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

1 0