August 2022 - Release-announce - lists.openstack.org

oslo.cache 3.1.0 (zed)
by no-reply＠openstack.org 24 Aug '22

24 Aug '22

We are delighted to announce the release of: oslo.cache 3.1.0: Cache storage for OpenStack projects. This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. 3.1.0 ^^^^^ New Features * Add the feature to support SASL for olso.cache to improve the security of authority. Changes in oslo.cache 3.0.0..3.1.0 ---------------------------------- d229d3e Support SASL protocol for memcached Diffstat (except docs and test files) ------------------------------------- oslo_cache/_bmemcache_pool.py | 62 ++++++++++++++++++++++ oslo_cache/_memcache_pool.py | 9 +++- oslo_cache/_opts.py | 10 ++++ oslo_cache/backends/memcache_pool.py | 33 +++++++----- oslo_cache/core.py | 3 +- .../functional/memcache_pool/test_cache_backend.py | 17 ++++++ .../enable-sasl-protocol-46d11530b87e7832.yaml | 5 ++ 8 files changed, 134 insertions(+), 16 deletions(-)

1 0

openstacksdk 0.101.0 (zed)
by no-reply＠openstack.org 24 Aug '22

24 Aug '22

We are happy to announce the release of: openstacksdk 0.101.0: An SDK for building applications to work with OpenStack This release is part of the zed release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 0.101.0 ^^^^^^^ New Features * Add support for groups to the block storage service. Changes in openstacksdk 0.99.0..0.101.0 --------------------------------------- 3ada2fb8 remove unicode prefix from code 7dd6aa22 resource: Merge unnecessary separation of logic 0ded7ac3 Enable add_ips_to_server() and _needs_floating_ip() for pristine server resources 3f81d000 Replace deprecated failUnlessEqual with assertEqual 91459d65 Restore functionality to attach multiple floating ips with add_ip_list() 1ce15c9a Allow to pass description parameter to cloud.create_server() b554e17d Reduce list_router_interfaces() to necessary API calls 71a8466f block storage: Add support for the Group resource 70a44339 compute: Add support for os-simple-tenant-usages API 5f79a114 Allow unknown attributes in project resources 0efe8cfc Disable deprecation warning for tenant_id 819ccc8b tests: Add pointers to docs on running tests 9e9fc987 block storage: Add support for group type specs 19c070a4 docs: Add missing docs for block storage v3 proxy APIs 20ffb8ef test: Remove duplicated tests ca0934c5 Add update capabilities to Snapshots 54e77e62 Add VPNaaS IpsecPolicy resource 4ce7a3fb Reorg existing vpnaas content e7d20392 proxy: Resolve a TODO bcf847bc Add VPNaaS Endpoint Group resource 41f45fb1 Add CRUD methods for Neutron router ndp proxy 299ab27b Add network address_group proxy doc and unit tests 9e87611a trivial: Run some files through black ffd3cb1a cloud: Remove a load of normalize helpers 9efb589e Fix Baremetal cloud layer 9eaab818 Make nodepool jobs non voting db84b755 Fix object upload for RAX 1cf2c60a Warn when no statsd library available 6d8be2b2 compute: Add support for instance actions 0876a248 compute: Correct some docstrings da0165b4 cloud: Update docstrings for compute functions a3b6dcdf cloud: Update docstrings for object store functions 6fd5f99d cloud: Update docstrings for identity functions 84b2ec36 cloud: Update docstrings for block storage functions 6bae83af cloud: Update docstrings for image functions a1372adc cloud: Update docstrings for accelerator functions 88b35ef5 cloud: Update docstrings for network functions 041a66a2 Remove unused normalization helpers 8d33f119 Fix python-dev reference in bindep f0883627 Do not log to stdout by default ba96fe85 Change title for "unreleased" renos 0474716c network RBAC policy: allow query for target tenant 46c6ed8a Rework caching Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 13 +- bindep.txt | 2 +- .../resources/network/v2/ipsec_site_connection.rst | 13 - .../resources/network/v2/vpn/endpoint_group.rst | 13 + .../user/resources/network/v2/vpn/ikepolicy.rst | 13 + .../network/v2/vpn/ipsec_site_connection.rst | 13 + .../user/resources/network/v2/vpn/ipsecpolicy.rst | 13 + .../user/resources/network/v2/vpn/service.rst | 13 + openstack/_log.py | 2 +- openstack/accelerator/v2/accelerator_request.py | 2 +- openstack/baremetal/v1/node.py | 10 +- .../baremetal_introspection/v1/introspection.py | 4 +- openstack/block_storage/v2/backup.py | 2 +- openstack/block_storage/v3/_proxy.py | 510 ++++++++++----- openstack/block_storage/v3/backup.py | 2 +- openstack/block_storage/v3/group.py | 89 +++ openstack/block_storage/v3/group_type.py | 88 ++- openstack/block_storage/v3/volume.py | 2 + openstack/cloud/_accelerator.py | 12 +- openstack/cloud/_baremetal.py | 55 +- openstack/cloud/_block_storage.py | 442 +++++++++---- openstack/cloud/_compute.py | 325 ++++++---- openstack/cloud/_floating_ip.py | 57 +- openstack/cloud/_identity.py | 597 ++++++++++------- openstack/cloud/_image.py | 105 +-- openstack/cloud/_network.py | 587 ++++++++++------- openstack/cloud/_network_common.py | 60 +- openstack/cloud/_normalize.py | 531 +-------------- openstack/cloud/_object_store.py | 196 +++--- openstack/cloud/_utils.py | 130 ---- openstack/cloud/openstackcloud.py | 38 +- openstack/compute/v2/_proxy.py | 122 +++- openstack/compute/v2/flavor.py | 10 +- openstack/compute/v2/hypervisor.py | 2 +- openstack/compute/v2/limits.py | 6 +- openstack/compute/v2/server_action.py | 88 +++ openstack/compute/v2/server_group.py | 110 +++- openstack/compute/v2/server_migration.py | 6 +- openstack/compute/v2/usage.py | 102 +++ openstack/config/cloud_region.py | 4 + openstack/dns/v2/zone_export.py | 2 +- openstack/dns/v2/zone_import.py | 2 +- openstack/identity/v3/project.py | 2 + openstack/key_manager/v1/secret.py | 8 +- openstack/load_balancer/v2/_proxy.py | 3 +- openstack/message/v2/claim.py | 6 +- openstack/message/v2/message.py | 5 +- openstack/message/v2/queue.py | 6 +- openstack/message/v2/subscription.py | 6 +- openstack/network/v2/_proxy.py | 717 +++++++++++++++------ openstack/network/v2/ndp_proxy.py | 56 ++ openstack/network/v2/rbac_policy.py | 2 +- openstack/network/v2/router.py | 2 + openstack/network/v2/vpn_endpoint_group.py | 42 ++ .../network/v2/{ikepolicy.py => vpn_ikepolicy.py} | 2 +- openstack/network/v2/vpn_ipsec_policy.py | 59 ++ ..._connection.py => vpn_ipsec_site_connection.py} | 210 +++--- openstack/network/v2/vpn_ipsecpolicy.py | 57 ++ openstack/network/v2/vpn_service.py | 4 +- openstack/object_store/v1/_proxy.py | 1 + openstack/object_store/v1/info.py | 8 +- openstack/object_store/v1/obj.py | 12 +- openstack/orchestration/v1/stack.py | 10 +- openstack/proxy.py | 356 ++++++---- openstack/resource.py | 532 +++++++++------ .../functional/block_storage/v3/test_group.py | 153 +++++ .../functional/block_storage/v3/test_group_type.py | 39 -- .../v2/{test_ikepolicy.py => test_vpnaas.py} | 10 +- .../unit/network/v2/test_vpn_endpoint_group.py | 59 ++ .../{test_ikepolicy.py => test_vpn_ikepolicy.py} | 8 +- ...ection.py => test_vpn_ipsec_site_connection.py} | 160 ++--- ...ge-group-type-group-specs-d07047167224ec83.yaml | 5 + .../add-block-storage-groups-bf5f1af714c9e505.yaml | 4 + .../notes/basic-api-cache-4ad8cf2754b004d1.yaml | 4 + releasenotes/source/conf.py | 18 +- releasenotes/source/unreleased.rst | 6 +- tox.ini | 3 +- 120 files changed, 5995 insertions(+), 3331 deletions(-)

1 0

oslo.vmware 4.0.1 (zed)
by no-reply＠openstack.org 24 Aug '22

24 Aug '22

We are overjoyed to announce the release of: oslo.vmware 4.0.1: Oslo VMware library This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.vmware Download the package from: https://pypi.org/project/oslo.vmware Please report issues through: https://bugs.launchpad.net/oslo.vmware/+bugs For more details, please see below. Changes in oslo.vmware 4.0.0..4.0.1 ----------------------------------- 968f8cc remove unicode literal from code 456db41 Imported Translations from Zanata 9be0de0 Imported Translations from Zanata 8af09e9 Fix formatting of release list Diffstat (except docs and test files) ------------------------------------- .../locale/en_GB/LC_MESSAGES/oslo_vmware.po | 9 +++++-- releasenotes/source/index.rst | 30 +++++++++++----------- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 14 ++++++++-- 4 files changed, 35 insertions(+), 20 deletions(-)

1 0

os-ken 2.5.0 (zed)
by no-reply＠openstack.org 24 Aug '22

24 Aug '22

We exuberantly announce the release of: os-ken 2.5.0: A component-based software defined networking framework for OpenStack. This release is part of the zed release series. The source is available from: https://opendev.org/openstack/os-ken Download the package from: https://pypi.org/project/os-ken Please report issues through: https://storyboard.openstack.org/#!/project/openstack/os-ken For more details, please see below. Changes in os-ken 2.4.0..2.5.0 ------------------------------ b5a72027 Use py3 as the default runtime for tox 6a7cb9c9 remove unicode prefix from code abb436de Remove "six" library 2495ebdf Remove "nose" library Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 - os_ken/lib/bfdlib.py | 4 +- os_ken/lib/mac.py | 12 +- os_ken/lib/mrtlib.py | 28 +- os_ken/lib/ofctl_utils.py | 3 +- os_ken/lib/ofp_pktinfilter.py | 9 +- os_ken/lib/ovs/vsctl.py | 4 +- os_ken/lib/packet/bfd.py | 10 +- os_ken/lib/packet/bgp.py | 101 +- os_ken/lib/packet/bmp.py | 27 +- os_ken/lib/packet/cfm.py | 11 +- os_ken/lib/packet/icmp.py | 5 +- os_ken/lib/packet/icmpv6.py | 30 +- os_ken/lib/packet/igmp.py | 9 +- os_ken/lib/packet/ipv6.py | 4 +- os_ken/lib/packet/mpls.py | 4 +- os_ken/lib/packet/ospf.py | 32 +- os_ken/lib/packet/packet.py | 8 +- os_ken/lib/packet/packet_base.py | 4 +- os_ken/lib/packet/packet_utils.py | 3 +- os_ken/lib/packet/sctp.py | 57 +- os_ken/lib/packet/stream_parser.py | 9 +- os_ken/lib/packet/tcp.py | 4 +- os_ken/lib/packet/vlan.py | 4 +- os_ken/lib/packet/vxlan.py | 4 +- os_ken/lib/packet/zebra.py | 44 +- os_ken/lib/rpc.py | 5 +- os_ken/lib/snortlib.py | 4 +- os_ken/lib/stringify.py | 28 +- os_ken/lib/type_desc.py | 12 +- os_ken/ofproto/nx_actions.py | 22 +- os_ken/ofproto/ofproto_parser.py | 12 +- os_ken/ofproto/ofproto_v1_0_parser.py | 15 +- os_ken/ofproto/ofproto_v1_2_parser.py | 18 +- os_ken/ofproto/ofproto_v1_3_parser.py | 30 +- os_ken/ofproto/ofproto_v1_4_parser.py | 20 +- os_ken/ofproto/ofproto_v1_5_parser.py | 24 +- os_ken/ofproto/oxx_fields.py | 9 +- os_ken/services/protocols/bgp/base.py | 4 +- os_ken/services/protocols/bgp/bmp.py | 2 +- os_ken/services/protocols/bgp/info_base/base.py | 13 +- os_ken/services/protocols/bgp/info_base/vpn.py | 7 +- os_ken/services/protocols/bgp/info_base/vrf.py | 10 +- os_ken/services/protocols/bgp/info_base/vrffs.py | 10 +- os_ken/services/protocols/bgp/operator/command.py | 4 +- .../commands/show/route_formatter_mixin.py | 4 +- .../protocols/bgp/operator/views/fields.py | 4 +- os_ken/services/protocols/bgp/peer.py | 7 +- os_ken/services/protocols/bgp/protocol.py | 20 +- os_ken/services/protocols/bgp/rtconf/base.py | 11 +- os_ken/services/protocols/bgp/utils/circlist.py | 4 +- os_ken/services/protocols/ovsdb/client.py | 5 +- os_ken/services/protocols/vrrp/router.py | 4 +- .../bgp/core_managers/test_table_manager.py | 293 ++- .../unit/services/protocols/bgp/test_bgpspeaker.py | 62 +- .../unit/services/protocols/bgp/utils/test_bgp.py | 21 +- .../protocols/bgp/utils/test_validation.py | 137 +- os_ken/topology/switches.py | 5 +- os_ken/utils.py | 6 +- releasenotes/source/conf.py | 16 +- requirements.txt | 2 +- test-requirements.txt | 2 +- tools/install_venv.py | 139 -- tools/pip-requires | 1 - tools/test-requires | 4 - tox.ini | 13 +- 131 files changed, 7204 insertions(+), 8544 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7c8857c8..ccaa2e4b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,0 +12 @@ msgpack>=1.0.0 # RPC library, BGP speaker(net_cntl) +ncclient>=0.6.13 # Apache-2.0 @@ -17 +17,0 @@ Routes>=2.3.1 # MIT -six>=1.10.0 diff --git a/test-requirements.txt b/test-requirements.txt index 6edf030c..f895baca 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +11,0 @@ testtools>=2.2.0 # MIT -nose>=1.3.7 # LGPL @@ -14,0 +14 @@ pylint==1.9.2 # GPLv2 +testscenarios>=0.4 # Apache-2.0/BSD

1 0

oslo.utils 6.0.1 (zed)
by no-reply＠openstack.org 24 Aug '22

24 Aug '22

We are chuffed to announce the release of: oslo.utils 6.0.1: Oslo Utility library This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 6.0.0..6.0.1 ---------------------------------- 760deb9 Imported Translations from Zanata 6a5d497 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 199 ++++++++++++++++++++- 1 file changed, 197 insertions(+), 2 deletions(-)

1 0

swift 2.30.0 (zed)
by no-reply＠openstack.org 24 Aug '22

24 Aug '22

We eagerly announce the release of: swift 2.30.0: OpenStack Object Storage This release is part of the zed release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.30.0 ^^^^^^ New Features ************ * Sharding improvements * The "swift-manage-shard-ranges" tool has a new mode to repair gaps in the namespace. * Metrics are now emitted for whether databases used for cleaving were created or already existed, allowing a better understanding of the reason for handoffs in the cluster. * Misplaced-record stats are now also emitted to statsd. Previously, these were only available in logs. * Logging improvements * The message template for proxy logging may now include a "{domain}" field for the client-provided "Host" header. * Added a "log_rsync_transfers" option to the object-replicator. Set it to false to disable logging rsync "send" lines; during large rebalances, such logging can overwhelm log aggregation while providing little useful information. * The formpost digest algorithm is now configurable via the new "allowed_digests" option, and support is added for both SHA-256 and SHA-512. Supported formpost digests are exposed to clients in "/info". Additionally, formpost signatures can now be base64 encoded. * Added metrics to the formpost and tempurl middlewares to monitor digest usage in signatures. * Improved compatibility with certain FIPS-mode-enabled systems. * Added a "ring_ip" option for various object services. This may be used to find own devices in the ring in a containerized environment where the "bind_ip" may not appear in the ring at all. * Account and container replicators can now be configured with a "handoff_delete" option, similar to object replicators and reconstructors. See the sample config for more information. * Developers using Swift's memcache client may now opt in to having a "MemcacheConnectionError" be raised when no connection succeeded using a new "raise_on_error" keyword argument to "get"/"set". * Device names are now included in new database IDs. This provides more context when examining incoming/outgoing sync tables or sharding CleaveContexts. Deprecation Notes ***************** * SHA-1 signatures are now deprecated for the formpost and tempurl middlewares. At some point in the future, SHA-1 will no longer be enabled by default; eventually, support for it will be removed entirely. Security Issues *************** * Constant-time string comparisons are now used when checking S3 API signatures. * Fixed a socket leak when clients try to delete a non-SLO as though it were a Static Large Object. Bug Fixes ********* * Sharding improvements * Misplaced tombstone records are now properly cleaved. * Fixed a bug where the sharder could fail to find a device to use for cleaving. * Databases marked deleted are now processed by the sharder. * More information is now synced to the fresh database when sharding. Previously, a database could lose the fact that it had been marked as deleted. * Shard ranges with no rows to cleave could previously be left in the CREATED state after cleaving. Now, they are advanced to CLEAVED. * S3 API improvements * Fixed cross-policy object copies. Previously, copied data would always be written using the source container's policy. Now, the destination container's policy will be used, avoiding availability issues and unnecessary container-reconciler work. * More headers are now copied from multi-part upload markers to their completed objects, including "Content-Encoding". * When running with "s3_acl" disabled, "bucket-owner-full-control" and "bucket-owner-read" canned ACLs will be translated to the same Swift ACLs as "private". * The S3 ACL and Delete Multiple APIs are now less case-sensitive. * Improved the error message when deleting a bucket that's ever had versioning enabled and still has versions in it. * "LastModified" timestamps in listings are now rounded up to whole seconds, like they are in responses from AWS. * Proxy logging for Complete Multipart Upload requests is now more consistent when requests have been retried. * Logging improvements * Signal handling is more consistently logged at notice level. Previously, signal handling would sometimes be logged at info or error levels. * The object-replicator now logs successful rsync transfers at debug instead of info. * Transaction IDs are now only included in daemon log lines in a request/response context. * The tempurl middleware has been updated to return a 503 if storing a token in memcache fails. Third party authentication middlewares are encouraged to also use the new "raise_on_error" keyword argument when storing ephemeral tokens in memcache. * Database replication connections are now closed following an error or timeout. This prevents a traceback in some cases when the replicator tries to reuse the connection. * "ENOENT" and "ENODATA" errors are better handled in the object replicator and auditor. * Improved object update throughput by shifting some shard range filtering from Python to SQL. * Include "Vary: Origin" header when CORS responses vary by origin. * The staticweb middleware now allows empty listings at the root of a container. Previously, this would result in a 404 response. * Ring builder output tables better display weights over 1000. * Various other minor bug fixes and improvements. Other Notes *********** * Pickle support has been removed from Swift's memcache client. Support had been deprecated since Swift 1.7.0. Changes in swift 2.29.1..2.30.0 ------------------------------- f6196b0a2 AUTHORS/CHANGELOG for 2.30.0 6fd523947 Fix misuse of assertTrue 9abee0e78 Fix docker image building dd99514e6 remove unicode prefix from code 9aa740f4f Imported Translations from Zanata d24678dd5 s3api: Be more consistent about CompleteMultipartUpload logging 3a7b89506 Imported Translations from Zanata 3a71df133 Stop using unicode literals in docs conf.py 1c577fed1 ring-builder: Better format large weights 52a4fe37a Various doc formatting cleanups 7e5c78423 Update "Getting Started" requirements 91cfb0d6d Imported Translations from Zanata 517738ac9 sharder/replicator: emit stats for DBs created or existing c4e00eb89 Sharder: Fall back to local device in get_shard_broker 59508de0c CI: Add nslookup_target to FIPS jobs e6ee37274 slo: Reduce overhead for 'Not an SLO manifest' responses 38271142e sharder: process deleted DBs 21fab529c sharder: emit misplaced stats to statsd 2d063cd61 formpost: deprecate sha1 signatures bc3625142 py310: Fix formatdate() call bf4edefce DB Replicator: Add handoff_delete option a5c1444fa Drain and close response in StaticLargeObject.get_slo_segments 25b6bd9f2 tempurl: Continue allowing sha1 by default 45e13ff4c Sharding: Sync container_stat table with fresh db 57f7145f7 sharder: always set state to CLEAVED after cleaving d7c08d8ea Make the object replicator and auditor more robust to ENODATA ac8f5550a sharder: fix probe tests skipping conditions a55016e57 Imported Translations from Zanata 475cdba65 Emit metrics for tempurl & formpost digest usage 6af444926 s3api: Better handle 503s in get_container_info, too 1831658b3 proxy-logging: Allow to add domain in log messages b9f1f4d60 Ensure clean starting state in test 91317ec14 Imported Translations from Zanata 367583c9f s3api: Make grentee types case insensitive 7a996a5c3 Fix s3api cross policy copy ef31baf3f formpost: Add support for sha256/512 signatures 68e5a0b1c tests: Fix cross-test interaction 24648528a doc: Comment out language option de13220c6 more tests for canned acls 12bc79bf0 Add ring_ip option to object services 5d9f1f009 s3api tests: allow AWS credential file loading 888142960 object-replicator: Remove some dead code c33b3d860 s3api: Add best-effort support for more canned ACLs 27db5213d CI: Run s3api test suite 5112cf712 Add Jianjian to authors. 1a5e6d5c1 Update AUTHORS 19855db95 pytest: explicitly set system logger to DEBUG 238dc0353 CI: constrain py36 deps b45b45fa7 manage-shard-ranges: add gap repair option d0cf743b6 ceph-tests: Remove known-failure 019c955e1 sharder: ensure that misplaced tombstone rows are moved d2b0c04d3 Add missing services to sample rsyslog.conf 75c5dbc29 trivial: add comment re sharder misplaced found stat 2f607cd31 Round s3api listing LastModified to integer resolution 52254bb5c Add ceil method to utils.Timestamp 99a4b9c7e AbstractRateLimiter: add option to burst on start-up 5227cb702 Refactor rate-limiting helper into a class 185b11e2f container-server: plumb includes down into _get_shard_range_rows 0b1cc8b0c More tests for rebalance_missing_suppression_count 94226bdd3 Don't give clients made up tokens ab612dd26 tests: Save ourselves 20s of sleep 05b2e894a Log signal handling at notice 7298038ed Ignore py36 deprecation warnings 9bed525bf memcached: Give callers the option to accept errors 7e6917681 replicator: Log rsync file transfers less 043e0163e Clarify that rsync_io_timeout is also used for contimeout 0708edecd Drop arm64 probe test job 11b9761cd Rip out pickle support in our memcached client 118cf2ba8 tempurl: Deprecate sha1 signatures 0bf5474bf ceph tests: Register output/ceph-s3-summary.log as a job output bb220f6f4 Doc: Update links in associated projects 5a272421d Swauth is retired 179fc43eb s3api: Improve error message when bucket is not empty 6142ce88c s3api: Use constant-time string comparisons in check_signature 1cee51d52 doc: also add reverse option to pagination doc 5c3bf6d26 replicator: Tolerate ENOENT when calling listdir f6f474e42 db: Close ReplConnection sockets on errors/timeouts a5a98d7e3 tests: Fix swiftclient/requests log level adjustment d496d03b7 api-ref: Document `reverse` param d29cbc399 CI: Run ceph and rolling upgrade tests under py3 fce7ad5f1 Ring: Change py2 only tests to py3 f92be1bdd Obj Auditor: Quarantine ENODATA 1c4acf2d8 s3api: Copy more headers from MPU marker to final object fd2dd1156 s3api: Make the 'Quiet' key value case insensitive ffb173f8a CI: Run CORS tests under py3 f83bfe1df Update master for stable/yoga 471a559a4 Stop partial()ing hashlib.new 8155e69b6 sharder: fix and expand CleavingContext docstrings bab7f9322 cors: Include `Vary: Origin` when using the request's Origin d94ab813f diskfile: Quarantine hashdirs on ENODATA 08da83c19 DB: Encode the device to the DB id d13eeabdb Clear logger txn_id after making requests 57e41685b trivial: Replace assertRegexpMatches with assertRegex 1e410347f trivial: Replace assertRaisesRegexp with assertRaisesRegex 10767e482 staticweb: Allow empty listings at the root of a container Diffstat (except docs and test files) ------------------------------------- .mailmap | 2 + .zuul.yaml | 76 +- AUTHORS | 7 +- CHANGELOG | 137 ++++ Dockerfile | 4 +- Dockerfile-py3 | 4 +- api-ref/source/parameters.yaml | 8 + api-ref/source/storage-account-services.inc | 1 + api-ref/source/storage-container-services.inc | 1 + .../pseudo-hierarchical-folders-directories.rst | 112 +-- .../api/use_the_content-disposition_metadata.rst | 20 +- etc/account-server.conf-sample | 13 +- etc/container-server.conf-sample | 13 +- etc/memcache.conf-sample | 10 - etc/object-server.conf-sample | 15 +- etc/proxy-server.conf-sample | 12 - etc/swift-rsyslog.conf-sample | 5 + py2-constraints.txt | 1 + py36-constraints.txt | 88 +++ .../notes/2_30_0_release-642778c3010848db.yaml | 167 +++++ releasenotes/source/conf.py | 6 +- releasenotes/source/index.rst | 2 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 598 +++++++++++++++- releasenotes/source/yoga.rst | 6 + swift/__init__.py | 4 + swift/account/backend.py | 3 +- swift/cli/manage_shard_ranges.py | 122 +++- swift/cli/ringbuilder.py | 8 +- swift/common/daemon.py | 2 +- swift/common/db.py | 6 +- swift/common/db_auditor.py | 7 +- swift/common/db_replicator.py | 35 +- swift/common/digest.py | 151 ++++ swift/common/internal_client.py | 5 +- swift/common/memcached.py | 55 +- swift/common/middleware/crypto/decrypter.py | 2 +- swift/common/middleware/crypto/keymaster.py | 8 +- swift/common/middleware/formpost.py | 45 +- swift/common/middleware/memcache.py | 15 - swift/common/middleware/proxy_logging.py | 8 + swift/common/middleware/s3api/acl_utils.py | 7 +- .../common/middleware/s3api/controllers/bucket.py | 12 +- .../middleware/s3api/controllers/multi_delete.py | 5 +- .../middleware/s3api/controllers/multi_upload.py | 13 +- swift/common/middleware/s3api/s3request.py | 13 +- swift/common/middleware/s3api/s3response.py | 6 + swift/common/middleware/s3api/schema/delete.rng | 2 +- swift/common/middleware/s3api/subresource.py | 11 +- swift/common/middleware/s3api/utils.py | 13 +- swift/common/middleware/slo.py | 14 +- swift/common/middleware/staticweb.py | 2 +- swift/common/middleware/tempauth.py | 42 +- swift/common/middleware/tempurl.py | 122 ++-- swift/common/ring/builder.py | 2 +- swift/common/storage_policy.py | 4 +- swift/common/utils.py | 246 ++++--- swift/common/wsgi.py | 9 +- swift/container/backend.py | 86 ++- swift/container/replicator.py | 47 +- swift/container/server.py | 5 +- swift/container/sharder.py | 510 +++++++------ swift/container/sync.py | 44 +- swift/container/updater.py | 8 +- swift/locale/de/LC_MESSAGES/swift.po | 764 +------------------- swift/locale/en_GB/LC_MESSAGES/swift.po | 796 +-------------------- swift/locale/es/LC_MESSAGES/swift.po | 682 +----------------- swift/locale/fr/LC_MESSAGES/swift.po | 589 +-------------- swift/locale/it/LC_MESSAGES/swift.po | 575 +-------------- swift/locale/ja/LC_MESSAGES/swift.po | 565 +-------------- swift/locale/ko_KR/LC_MESSAGES/swift.po | 558 +-------------- swift/locale/pt_BR/LC_MESSAGES/swift.po | 566 +-------------- swift/locale/ru/LC_MESSAGES/swift.po | 576 +-------------- swift/locale/tr_TR/LC_MESSAGES/swift.po | 533 +------------- swift/locale/zh_CN/LC_MESSAGES/swift.po | 535 +------------- swift/locale/zh_TW/LC_MESSAGES/swift.po | 539 +------------- swift/obj/auditor.py | 16 +- swift/obj/diskfile.py | 76 +- swift/obj/reconstructor.py | 4 +- swift/obj/replicator.py | 38 +- swift/obj/server.py | 5 +- swift/obj/ssync_receiver.py | 68 +- swift/obj/updater.py | 60 +- swift/proxy/controllers/base.py | 15 +- swift/proxy/controllers/container.py | 17 +- swift/proxy/controllers/info.py | 3 +- swift/proxy/controllers/obj.py | 6 +- test/__init__.py | 9 + test/debug_logger.py | 13 + test/functional/s3api/test_multi_upload.py | 87 +-- test/functional/s3api/test_object.py | 45 +- test/functional/s3api/test_presigned.py | 4 +- test/functional/test_object_versioning.py | 4 +- test/functional/test_symlink.py | 4 +- test/functional/test_tempurl.py | 37 +- test/probe/test_sharder.py | 498 ++++++++++++- test/s3api/__init__.py | 28 +- test/unit/__init__.py | 19 +- test/unit/account/test_backend.py | 37 +- test/unit/cli/test_ipv6_output.stub | 10 +- test/unit/cli/test_manage_shard_ranges.py | 392 +++++++++- test/unit/cli/test_ringbuilder.py | 2 +- .../common/middleware/crypto/test_keymaster.py | 2 +- test/unit/common/middleware/helpers.py | 16 +- .../unit/common/middleware/s3api/test_acl_utils.py | 51 +- test/unit/common/middleware/s3api/test_bucket.py | 83 ++- .../common/middleware/s3api/test_multi_delete.py | 40 +- .../common/middleware/s3api/test_multi_upload.py | 287 +++++--- test/unit/common/middleware/s3api/test_obj.py | 105 +-- test/unit/common/middleware/s3api/test_s3_acl.py | 11 + test/unit/common/middleware/s3api/test_s3api.py | 6 - .../unit/common/middleware/s3api/test_s3request.py | 16 +- test/unit/common/middleware/s3api/test_utils.py | 57 +- test/unit/common/middleware/test_formpost.py | 227 +++++- test/unit/common/middleware/test_memcache.py | 68 +- test/unit/common/middleware/test_proxy_logging.py | 6 +- test/unit/common/middleware/test_slo.py | 59 +- test/unit/common/middleware/test_staticweb.py | 20 + test/unit/common/middleware/test_tempauth.py | 9 + test/unit/common/middleware/test_tempurl.py | 167 +++-- test/unit/common/ring/test_builder.py | 26 +- test/unit/common/ring/test_ring.py | 135 ++-- test/unit/common/ring/test_utils.py | 21 +- test/unit/common/test_daemon.py | 12 +- test/unit/common/test_db_replicator.py | 71 +- test/unit/common/test_digest.py | 191 +++++ test/unit/common/test_internal_client.py | 35 +- test/unit/common/test_memcached.py | 92 ++- test/unit/common/test_utils.py | 176 ++++- test/unit/common/test_wsgi.py | 29 + test/unit/container/test_backend.py | 254 ++++++- test/unit/container/test_replicator.py | 78 ++ test/unit/container/test_sharder.py | 489 +++++++++++-- test/unit/obj/test_diskfile.py | 136 ++++ test/unit/obj/test_reconstructor.py | 54 +- test/unit/obj/test_replicator.py | 223 ++++++ test/unit/obj/test_ssync_receiver.py | 2 +- test/unit/obj/test_updater.py | 51 +- test/unit/proxy/controllers/test_container.py | 43 +- test/unit/proxy/controllers/test_info.py | 22 +- test/unit/proxy/controllers/test_obj.py | 25 + test/unit/proxy/test_server.py | 23 + tools/playbooks/common/restart_swift.yaml | 24 + tools/playbooks/cors/run.yaml | 2 +- tools/playbooks/multinode_setup/make_rings.yaml | 2 +- tools/playbooks/multinode_setup/pre.yaml | 1 - tools/playbooks/multinode_setup/run.yaml | 5 +- tox.ini | 19 + 182 files changed, 7341 insertions(+), 9491 deletions(-)

1 0

ironic 21.0.0 (zed)
by no-reply＠openstack.org 18 Aug '22

18 Aug '22

We are ecstatic to announce the release of: ironic 21.0.0: OpenStack Bare Metal Provisioning This release is part of the zed release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 21.0.0 ^^^^^^ New Features ************ * Adds a new feature to permit Ironic to automatically provide an instance requestor's project, "lessee" rights to the Bare Metal machine under the Role Based Access Control model implemented in Ironic. It does this by saving the project ID of the requestor to the Node "lessee" field automatically, and removing the rights when undeploying the machine. This feature, is normally disabled, but can be enabled using the "[conductor]automatic_lessee" configuration option. This option will not work in a mixed-version upgrade with older API services. * Adds a default "project" scoped "manager" role to the RBAC model. In the ironic model, access is generally explicitly delegated, and such the "manager" role is presently equivelent to project scoped "admin" role, however future delineation may occur as the new features and capabilities are added. * When an allocation is being processed, the randomized candidate list is now modified so that a node with a matching name to the allocation is moved to the beginning of the list. This greatly increases the chance of node name and allocation name matching in environments where the naming schemes align. * Adds driver_info/irmc_verify_ca option to specify certification file. Default value of driver_info/irmc_verify_ca is True. * Adds SNMPv3 message authentication and encryption features to iRMC driver. To enable these features, the following parameters should be used in the node's "driver_info": * "irmc_snmp_user" * "irmc_snmp_auth_password" * "irmc_snmp_priv_password" * "irmc_snmp_auth_proto" (Optional, defaults to "sha") * "irmc_snmp_priv_proto" (Optional, defaults to "aes") "irmc_snmp_auth_proto" and "irmc_snmp_priv_proto" can also be set through the following options in the "[irmc]" section of "/etc/ironic/ironic.conf": * "snmp_auth_proto" * "snmp_priv_proto" * Nodes using virtual media can now specify their own external URL. This setting can be leveraged via the "driver_info\external_http_url" node setting. When used, this setting overrides the "[deploy]http_url" and "[deploy]external_http_url" settings in the configuration file. * The "ramdisk" deploy interface is now enabled by default. When the default "direct" deploy is also enabled, the "ramdisk" deploy must be explicitly requested on the node level. Known Issues ************ * When using "jsonschema" 4.0.0 or newer, make sure to include a proper "$schema" field in your custom network data or RAID schemas. Upgrade Notes ************* * The deprecated support for instance network booting (not to be confused with the "ramdisk" deploy, iSCSI boot or Anaconda deploy) has been removed. The "boot_option" capability is no longer supported. * Support for trusted boot has been removed. This feature requires instance network booting, which is also removed this cycle. Deprecation Notes ***************** * Support for the syslinux (https://wiki.syslinux.org/wiki/index.php? title=Syslinux_6_Changelog#Changes_in_6.04) and the often separately package isolinux (https://wiki.syslinux.org/wiki/index.php?title=ISOLINUX) and pxelinux (https://wiki.syslinux.org/wiki/index.php?title=PXELINUX) Legacy BIOS boot loaders, is deprecated and will be removed the future. This is for two reasons. The first is because it is a BIOS mode bootloader, and the shift to UEFI booting has reduced the need for these packages. The second reason is a lack of maintenance, which is ultimately the same reason Linux distributions are discussing dropping support and packaging. Syslinux has not been updated since 2019 (https://repo.or.cz/syslinux.git/shortlog) Incidently, the file format it utilizes *is* supported by Power hardware, and that may result in the configuration template remaining in Ironic for the forseeable future. * Support for use of pxelinux (https://wiki.syslinux.org/wiki/index.php?title=PXELINUX) is deprecated due to the deprecation of support for Syslinux. * Support for virtual media booting with x86 Hardware in Legacy BIOS mode is deprecated due to the dependency upon isolinux (https://wiki.syslinux.org/wiki/index.php?title=ISOLINUX) for use of Legacy BIOS boot mode. "isolinux" is from the "syslinux" package and source tree. * Deprecation of "pxelinux", as a result of the deprecation of "syslinux", does ultimately mean the default for the "pxe" boot_interface to carry defaults for the use of grub based network booting, specifically for operators who are unable to use iPXE. * Deprecates the "irmc_snmp_security" field in "driver_info" for iRMC driver, it will be removed in the future. Please use "irmc_snmp_user" field instead. Security Issues *************** * Modifies the "irmc" hardware type to include a capability to control enforcement of HTTPS certificate verification. By default this is enforced. python-scciclient >= 0.12.0 is required. Bug Fixes ********* * Fixes an issue where "root_gb" became a required field when using the "anaconda" deployment interface, with a recent bug fix as the code path largely expected all deployment operations to utilize images, which is not the case. The case handling for non-image based deployments is now explicitly in internal parameter validation code. * Fixes handling of "image_source" parameters where internal validations would not gracefully handle received redirects and treat it as a failure. We now no longer explicitly fail when a redirect is received. * Fixes an issue where an "image_source" could not be set to a mirror URL to facilitate deployments using a mirror with the "anaconda" deployment interface. Ironic still presently has an explicit requirement on a "stage2" parameter to be explicitly defined. * Fixes rebooting into the agent after changing BIOS settings in fast- track mode with the "redfish-virtual-media" boot interface. Previously, the ISO would not be configured. * Fixes "OSError: [Errno 36] File name too long" when building a virtual media ISO from a long kernel, ramdisk or ESP URL. * Fixes an issue in the "anaconda" deployment interface where PXE argument processing and preparation was erroneously directly connecting to Glance, potentially leading to an exception in the standalone use case. * Fixes "redfish" and "idrac-redfish" RAID "create_configuration", "apply_configuration", "delete_configuration" clean and deploy steps to update node's "raid_config" field at the end of the steps. * Fixes "redfish-virtual-media" "boot" interface to allow it with iDRAC firmware from 6.00.00.00 (released June 2022) as it has virtual media boot issue fixed that prevented iDRAC firmware to work with "redfish-virtual-media" before. Consider upgrading iDRAC firmware if not done already, otherwise will still get an error when trying to use "redfish-virtual-media" with iDRAC. * Fixes compatibility with "jsonschema" package version 4.0.0 or newer by providing a proper schema version (Draft-07 currently). * Fixes a race condition in PXE initialization where the logic to retry what we suspect as potentially failed PXE boot operations was not consulting if an "agent token" had been established, which is the very first step in agent initialization. * When the "ramdisk" deploy interface is used and automated cleaning is disabled, the "pxe", "ipxe" and "redfish-virtual-media" boot interfaces no longer require a deploy kernel/ramdisk to be provided. * Anaconda supports the ability to explicitly pass a URL instead of a "stage2" ramdisk parameter. This has resulted in confusion in use of the "anaconda" deployment interface, as a "stage2" ramdisk is typically not used, but made sense with Glance images in a fully integrated OpenStack deployment. Now a URL to a path can be supplied to the "anaconda" deployment interface to simplify the interaction and use, and a redundant "stage2" parameter is no longer required. * Resolved clear_job_queue and reset_idrac verify step failures which occur when the functionality is not supported by the iDRAC. When this condition is detected, the code in the step handles the exception and logs a warning and completes successfully in case of verification steps but fails in case of cleaning steps. * Fixes an issue where an API user, when requesting a node list or single node object, could get an error indicating that the request was bad as the chassis was not found. This can occur when in-flight delete operations are in progress on another thread. Instead of surfacing a request breaking error, the API now suppresses the error and just treats it as if there is no Chassis. * Fixes "enable_netboot_fallback" to cause iPXE config to exit 0 when "sanboot --no-describe" fails. Allowing the firmware to move onto the next device in the boot order. Other Notes *********** * Adds documentation of standalone deployment use case with the "anaconda" deployment interface. * Updates the minimum version of "python-scciclient" library to "0.12.1". * Known issue when using iDRAC with Swift to stage firmware update files in Management interface "firmware_update" clean step of "redfish" or "idrac" hardware type has been fixed in iDRAC firmware 6.00.00.00. Upgrade when possible or use HTTP service to stage firmware files for iDRAC. Changes in ironic 20.2.0..21.0.0 -------------------------------- 2a66fd68a Ironic Release 21.0 faa7b37f2 Fix releasenotes before release 21.0 89f421b16 Do not reboot into nowhere after BIOS settings with fast-track bd8e48239 anaconda: ks liveimg = instance_info/image_info 05c16f10d Document driver_info external_http_url c197a2d8b Override external_http_url at node level e48c62187 Log successful clean up in image cache 3b28d0984 Modify test code to avoid CONF modification affection 64d7a7f30 Fix iRMC driver to use certification file in HTTPS 3a621e398 Update raid_type handling for Redfish raid_config 35bc014ed Change molds option to appropriate class 7b47e09a3 Fix pxe image lookups f6d2b2ed9 Modify do_node_verify to avoid state machine stuck f0a177876 Finally remove support for netboot and the boot_option capability fb253a670 Suppress Chassis Not Found on API Operation fb73bdf10 Exit ipxe script if enable_netboot_fallback failed 41484988e Stop documenting netboot and the boot_option capability f8135b22f Enable the ramdisk deploy by default c870b5525 Imported Translations from Zanata 0335ad16c Imported Translations from Zanata 56d3c5a03 Clarify disk_label with a warning 9f66a95aa Fix adoption unit test image check f7471f07c CI: Only setup fake v6 interface if needed 8c95131d8 CI: Save routing table information for troubleshooting 0311ea7c9 project scoped manager support 33bb2c248 Do not require stage2 for anaconda with standalone dbcce25d3 Remove support for trusted boot d90e59057 Remove workaround for Python < 3.7.4 79f82c026 [iRMC] Add SNMPv3 authentication functionality 55b9579f1 Fix compatibility with jsonschema>=4.0.0 c8be82c52 Deprecate syslinux 737ff34e7 Fix markup typo in Redfish driver docs 70812aa6e Update known issue for iDRAC Swift firmware update e78f123ff Make anaconda non-image deploys sane f0935c182 Add audit middleware options to ironic.conf e09919cab Move logging out of skip_automated_cleaning 0f1627388 Trivial: log which state the node is in 1dda97c78 Prevent clear_job_queue and reset_idrac failures on older iDRACs af838cca7 CI: Pull in diskimage-builder until new release is cut 73040c88d Fix redfish-virtual-media for newer iDRACs 19daab6ba Docs: specify what to do with the created images 8b99fcb0e CI: Default to TinyIPA when nested virt is not possible e0c758bb9 CI: Add iweb to the use tinyipa on list d75424b5e Prevent pxe retry when agent token exists 65583e641 No deploy_kernel/ramdisk with the ramdisk deploy and no cleaning 089b0c8e6 Use bifrost on centos9 integration job 2b55444f3 Allocation candidates prefer matching name 39a7f5800 Docs: replace nova cli calls with openstack 94f9745f0 [Minor] Fix misspellings of "insufficient" cf7a2b458 Drop python2 from bindep.txt 0406fa753 Remove unicode literal from code 5bbcabbab Remove netboot jobs from the gate 832dc8bf9 Switch to q35 machine type for test nodes 59d4cc666 Update bugfix section 81f583f69 devstack: use CentOS 9 for DIB IPA builds c3f397149 Auto-populate lessee for deployments 29364b7fb Fix Redfish RAID to update raid_config 63e53797a CI: Removing ironic job queue 2d885126e Don't use URLs as part of temporary file names (part 2) f1257c79c Swap the metalsmith UEFI job for a legacy one d2a2447e8 The Python 3.6 and Python 3.7Support has been dropped since zed b77a5d67d Fix names of two jobs Diffstat (except docs and test files) ------------------------------------- api-ref/source/baremetal-api-v1-allocation.inc | 6 +- api-ref/source/conf.py | 10 +- bindep.txt | 5 +- devstack/lib/ironic | 42 +- devstack/tools/ironic/templates/vm.xml | 17 +- .../include/local-boot-partition-images.inc | 56 -- driver-requirements.txt | 2 +- ironic/api/controllers/v1/network-data-schema.json | 2 +- ironic/api/controllers/v1/node.py | 13 +- ironic/api/controllers/v1/versions.py | 4 +- ironic/api/hooks.py | 8 +- ironic/common/context.py | 38 +- ironic/common/exception.py | 20 +- ironic/common/image_service.py | 41 ++ ironic/common/images.py | 87 ++- ironic/common/policy.py | 35 +- ironic/common/pxe_utils.py | 118 ++-- ironic/common/release_mappings.py | 22 +- ironic/common/utils.py | 24 +- ironic/conductor/allocations.py | 9 + ironic/conductor/cleaning.py | 6 +- ironic/conductor/deployments.py | 20 + ironic/conductor/manager.py | 11 +- ironic/conductor/rpcapi.py | 1 - ironic/conductor/utils.py | 43 +- ironic/conductor/verify.py | 2 +- ironic/conf/conductor.py | 10 + ironic/conf/default.py | 2 +- ironic/conf/deploy.py | 12 - ironic/conf/irmc.py | 14 +- ironic/conf/molds.py | 4 +- ironic/drivers/modules/agent.py | 36 +- ironic/drivers/modules/agent_base.py | 12 +- ironic/drivers/modules/agent_config.template | 13 - ironic/drivers/modules/ansible/deploy.py | 6 - ironic/drivers/modules/boot.ipxe | 6 + ironic/drivers/modules/boot_mode_utils.py | 28 +- ironic/drivers/modules/deploy_utils.py | 126 ++-- ironic/drivers/modules/drac/boot.py | 2 +- ironic/drivers/modules/drac/management.py | 42 +- ironic/drivers/modules/ilo/boot.py | 27 +- ironic/drivers/modules/ilo/power.py | 5 +- ironic/drivers/modules/image_cache.py | 11 + ironic/drivers/modules/image_utils.py | 13 +- ironic/drivers/modules/ipxe_config.template | 10 +- ironic/drivers/modules/irmc/boot.py | 5 +- ironic/drivers/modules/irmc/common.py | 239 +++++++- ironic/drivers/modules/irmc/inspect.py | 21 +- ironic/drivers/modules/irmc/power.py | 15 +- ironic/drivers/modules/ks.cfg.template | 3 + ironic/drivers/modules/network/neutron.py | 11 - ironic/drivers/modules/pxe_base.py | 67 +-- ironic/drivers/modules/pxe_config.template | 10 - ironic/drivers/modules/pxe_grub_config.template | 5 - ironic/drivers/modules/redfish/bios.py | 24 +- ironic/drivers/modules/redfish/boot.py | 38 +- ironic/drivers/modules/redfish/raid.py | 39 ++ .../api/controllers/v1/test_deploy_template.py | 2 +- .../ipxe_config_boot_from_anaconda.template | 41 ++ .../drivers/ipxe_config_boot_from_iso.template | 8 +- .../drivers/ipxe_config_boot_from_ramdisk.template | 8 +- ...e_config_boot_from_volume_extra_volume.template | 8 +- ...ipxe_config_boot_from_volume_multipath.template | 8 +- ...nfig_boot_from_volume_no_extra_volumes.template | 8 +- .../unit/drivers/ipxe_config_timeout.template | 8 +- .../unit/drivers/modules/ansible/test_deploy.py | 18 - .../unit/drivers/modules/drac/test_management.py | 90 +++ .../unit/drivers/modules/irmc/test_inspect.py | 55 +- .../unit/drivers/modules/network/test_neutron.py | 60 -- .../unit/drivers/modules/redfish/test_bios.py | 32 +- .../unit/drivers/modules/redfish/test_boot.py | 55 +- .../drivers/modules/redfish/test_firmware_utils.py | 26 +- .../drivers/modules/redfish/test_management.py | 10 +- .../unit/drivers/modules/redfish/test_raid.py | 146 ++++- .../unit/drivers/modules/storage/test_cinder.py | 2 +- .../unit/drivers/modules/test_boot_mode_utils.py | 13 - .../unit/drivers/modules/test_deploy_utils.py | 434 ++++---------- playbooks/ci-workarounds/get_extra_logging.yaml | 8 + .../add-automatic-lessee-88f8ecab7c76b65f.yaml | 11 + ...rbac-project-manager-role-7ffc52f78ff93432.yaml | 8 + .../allocation-node-name-46b473ec82662f7f.yaml | 7 + ...ased-deploy-option-sanity-b98fa138747c16d2.yaml | 21 + ...eprecate-syslinux-support-98d327c67607fc8e.yaml | 26 + .../notes/fast-track-bios-fa9ae685c151dd24.yaml | 6 + .../notes/file-name-too-long-72265bb3fec704f8.yaml | 5 + ...xe-glance-lookup-anaconda-86fe616c6286ec08.yaml | 6 + .../fix-redfish-raid-config-9e868c3e069475a1.yaml | 6 + ...fix-redfish-vm-boot-idrac-37ec734e6643cbac.yaml | 9 + ...certification-file-option-34e7a0062c768e58.yaml | 10 + .../irmc-add-snmpv3-security-fca05bfc30f50d1a.yaml | 30 + .../notes/jsonschema-966f55fc79b916fc.yaml | 9 + ...drac-firmware-swift-fixed-f9d30e60a53d96c4.yaml | 8 + .../notes/no-netboot-d08f46c12edabd35.yaml | 6 + .../notes/no-trustedboot-01322dbaf33f8df8.yaml | 5 + ...xternal_http_url-per-node-f5423b00b373e528.yaml | 8 + ...e-retry-when-token-exists-a4f38f7da56c1397.yaml | 7 + .../notes/ramdisk-deploy-384a38c3c96059dd.yaml | 6 + .../redfish-ramdisk-no-agent-490b5edb0b2387e5.yaml | 6 + ...y-standalone-anaconda-use-7160d0d3401e468e.yaml | 11 + ...rac-reset-if-attr-missing-b2a2b609c906c6c4.yaml | 8 + ...s_chassis_not_found_error-99ee4b902d504ec7.yaml | 9 + .../notes/version-foo-2eb39b768112547f.yaml | 6 + releasenotes/source/conf.py | 16 +- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 276 ++++++++- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 159 ----- requirements.txt | 2 +- setup.cfg | 4 +- tools/config/ironic-config-generator.conf | 1 + zuul.d/ironic-jobs.yaml | 43 +- zuul.d/project.yaml | 19 +- 171 files changed, 4070 insertions(+), 3006 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index da312468e..5333dbd4f 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -9 +9 @@ pysnmp>=4.3.0,<5.0.0 -python-scciclient>=0.8.0 +python-scciclient>=0.12.2 diff --git a/requirements.txt b/requirements.txt index 2ac3e8348..24c09f50c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -41 +41 @@ Jinja2>=3.0.0 # BSD License (3 clause) -keystonemiddleware>=4.17.0 # Apache-2.0 +keystonemiddleware>=9.5.0 # Apache-2.0

1 0

ovsdbapp 2.1.0 (zed)
by no-reply＠openstack.org 18 Aug '22

18 Aug '22

We are ecstatic to announce the release of: ovsdbapp 2.1.0: A library for creating OVSDB applications This release is part of the zed release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. 2.1.0 ^^^^^ New Features * Added support for the "hardware_vtep" schema. The "HwVtepApiIdlImpl" class provides interaction with "hw_vtep.db", adds support to add, delete and list registers rows of "Physical_Switch", "Physical_Port" and "Logical_Switch" tables. Also added support for listing and clearing the remote and local multicast and unicast MAC bindings. * Added functions and commands to add, delete, list and update records of 'Load_Balancer_Health_Check' table. Also added a method to get one load balancer by name or uuid and methods to modify 'ip_port_mappings' column in the load balancer. * Added functions and commands to modify the 'lrp.networks' column. Changes in ovsdbapp 2.0.0..2.1.0 -------------------------------- f3c5da5 nb: add support for lb health checks API e1cbe84 nb: add methods to modify the lrp.networks e9c6c6c Provide base classes for {Get,Set}Options commands 06d25c2 vtep: add support for 'hardware_vtep' schema Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/command.py | 25 ++ ovsdbapp/schema/hardware_vtep/__init__.py | 0 ovsdbapp/schema/hardware_vtep/api.py | 222 ++++++++++++ ovsdbapp/schema/hardware_vtep/commands.py | 296 ++++++++++++++++ ovsdbapp/schema/hardware_vtep/impl_idl.py | 86 +++++ ovsdbapp/schema/ovn_northbound/api.py | 109 ++++++ ovsdbapp/schema/ovn_northbound/commands.py | 183 +++++++--- ovsdbapp/schema/ovn_northbound/impl_idl.py | 28 ++ .../functional/schema/hardware_vtep/__init__.py | 0 .../functional/schema/hardware_vtep/fixtures.py | 28 ++ .../schema/hardware_vtep/test_impl_idl.py | 387 +++++++++++++++++++++ .../schema/ovn_northbound/test_impl_idl.py | 149 ++++++++ ovsdbapp/venv.py | 40 ++- .../ovn-support-hw-vtep-ca8b3ee7a74df3fd.yaml | 7 + .../notes/provide-lb-hc-api-8ff13ccaf75f1eee.yaml | 6 + ...de-lrp-networks-modifying-1af13589064c12c6.yaml | 4 + tox.ini | 1 + 17 files changed, 1530 insertions(+), 41 deletions(-)

1 0

python-blazarclient 3.3.2 (xena)
by no-reply＠openstack.org 18 Aug '22

18 Aug '22

We jubilantly announce the release of: python-blazarclient 3.3.2: Client for OpenStack Reservation Service This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/python-blazarclient Download the package from: https://pypi.org/project/python-blazarclient Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. Changes in python-blazarclient 3.3.1..3.3.2 ------------------------------------------- e653050 Remove Babel from requirements acfe48a Update TOX_CONSTRAINTS_FILE for stable/xena 1333e4d Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + requirements.txt | 1 - tox.ini | 6 +++--- 3 files changed, 4 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a091625..94507d6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +6,0 @@ PrettyTable>=0.7.1 # BSD -Babel!=2.4.0,>=2.3.4 # BSD

1 0

keystone 19.0.1 (wallaby)
by no-reply＠openstack.org 18 Aug '22

18 Aug '22

We exuberantly announce the release of: keystone 19.0.1: OpenStack Identity This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/keystone/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. 19.0.1 ^^^^^^ Upgrade Notes ************* * [bug 1929066 (https://bugs.launchpad.net/keystone/+bug/1929066) Increase the length of the *local_id* column in the *id_mapping* table to accommodate LDAP group names that result in names greater than 64 characters. Bug Fixes ********* * [bug 1688137 (https://bugs.launchpad.net/keystone/+bug/1688137) Fixed the AccountLocked exception being shown to the end user since it provides some information that could be exploited by a malicious user. The end user will now see Unauthorized instead of AccountLocked, preventing user info oracle exploitation. Changes in keystone 19.0.0..19.0.1 ---------------------------------- 373a5ecdb Wallaby-only: Fix wrong python job template used ce46e4789 Remove the note of training-labs b0c528cec Fix issue with LDAP backend returning bytes instead of string a5925541c Add FIPS check job 14d2f5944 Fix typos in application credential policies a57ae85c9 Fix typos in ec2 credential policies bdd8f82f6 Fix typo in identity provider policies 2700adaad Update local_id limit to 255 characters f510c806d Hide AccountLocked exception from end users ecfbf7c8b Update TOX_CONSTRAINTS_FILE for stable/wallaby f5dff739f Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 13 +++++++++++- keystone/common/policies/application_credential.py | 4 ++-- keystone/common/policies/ec2_credential.py | 12 +++++------ keystone/common/policies/identity_provider.py | 8 ++++---- .../versions/079_contract_update_local_id_limit.py | 18 ++++++++++++++++ .../versions/079_migrate_update_local_id_limit.py | 18 ++++++++++++++++ .../versions/079_expand_update_local_id_limit.py | 24 ++++++++++++++++++++++ keystone/identity/backends/ldap/common.py | 19 +++++++++++++++-- keystone/identity/mapping_backends/sql.py | 2 +- keystone/notifications.py | 2 ++ playbooks/enable-fips.yaml | 4 ++++ .../notes/bug-1688137-e4203c9a728690a7.yaml | 8 ++++++++ .../notes/bug-1929066-6e741c9182620a37.yaml | 7 +++++++ tox.ini | 6 +++--- 24 files changed, 185 insertions(+), 51 deletions(-)

1 0