May 2023 - Release-announce - lists.openstack.org

kayobe 14.0.0.0rc1 (antelope)
by no-reply＠openstack.org 31 May '23

31 May '23

Hello everyone, A new release candidate for kayobe for the end of the Antelope cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kayobe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Antelope release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/antelope release branch at: https://opendev.org/openstack/kayobe/src/branch/stable/antelope Release notes for kayobe can be found at: https://docs.openstack.org/releasenotes/kayobe/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/kayobe and tag it *antelope-rc-potential* to bring it to the kayobe release crew's attention.

1 0

tooz 4.1.0
by no-reply＠openstack.org 30 May '23

30 May '23

We jubilantly announce the release of: tooz 4.1.0: Coordination library for distributed systems. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz For more details, please see below. Changes in tooz 4.0.0..4.1.0 ---------------------------- 67bc01a Revert "Moves supported python runtimes from version 3.8 to 3.10" Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 108 ++++++++++++++++++++++++++++++------------------------------- setup.cfg | 3 +- 2 files changed, 56 insertions(+), 55 deletions(-)

1 0

openstack-ansible 24.6.1 (xena)
by no-reply＠openstack.org 30 May '23

30 May '23

We are pumped to announce the release of: openstack-ansible 24.6.1: Ansible playbooks for deploying OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 24.6.0..24.6.1 ------------------------------------------- e1522c279 Bump OpenStack-Ansible for Xena EM c1df9384c Add internal_lb_vip_address to no_proxy Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 18 ++-- .../defaults/repo_packages/openstack_services.yml | 102 ++++++++++----------- .../templates/user_variables.aio.yml.j2 | 2 +- 3 files changed, 61 insertions(+), 61 deletions(-)

1 0

glance_store 4.5.0 (bobcat)
by no-reply＠openstack.org 30 May '23

30 May '23

We are tickled pink to announce the release of: glance_store 4.5.0: OpenStack Image Service Store Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 4.5.0 ^^^^^ Bug Fixes * A recent change to the RBD driver introduced a potential threading lockup when using native threads, and also a (process-)blocking call to an external library when using greenthreads. That change has been reverted until a better fix can be made. Changes in glance_store 4.4.0..4.5.0 ------------------------------------ 99f4014 Revert "RBD: Wrap RBD calls in native threads" ce86bf3 Update 'extras' for cinder driver ec38975 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- glance_store/_drivers/rbd.py | 12 ++---- .../notes/fix-rbd-lockup-3aa2bb86f7d29e19.yaml | 7 +++ .../locale/en_GB/LC_MESSAGES/releasenotes.po | 14 +++--- setup.cfg | 2 +- 5 files changed, 19 insertions(+), 66 deletions(-)

1 0

kolla-ansible 16.0.0.0rc1 (antelope)
by no-reply＠openstack.org 26 May '23

26 May '23

Hello everyone, A new release candidate for kolla-ansible for the end of the Antelope cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Antelope release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/antelope release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/antelope Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *antelope-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

kolla 16.0.0.0rc1 (antelope)
by no-reply＠openstack.org 26 May '23

26 May '23

Hello everyone, A new release candidate for kolla for the end of the Antelope cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Antelope release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/antelope release branch at: https://opendev.org/openstack/kolla/src/branch/stable/antelope Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *antelope-rc-potential* to bring it to the kolla release crew's attention.

1 0

rally 3.4.0
by no-reply＠openstack.org 26 May '23

26 May '23

We joyfully announce the release of: rally 3.4.0: Generic Testing Framework & Tool that unifies all types of testing. The source is available from: https://opendev.org/openstack/rally Download the package from: https://pypi.org/project/rally For more details, please see below. Changes in rally 3.3.0..3.4.0 ----------------------------- e8613ffeb Propose rally 3.4.0 release b08ea0e93 Update requirements and upper-constraints.txt 177ad8b5f Use official python docker images 1694ddc50 Keep CI up-to-date 7e5a99602 Re-enable tox cover zuul job 14d449b2f Pin SQLAlchemy to <2.0.0 03155a82e remove unicode literal from code 846a5fe4e Suppress deprecation warning from docutils 165c21ef9 Fix CI issues 2359cd4ea [ci] Update used nodesets 58b12c2e0 Call pip install tox differently 72859c8f6 [ci] force reinstall of pip 2a77c6307 Close stringio objects at sshutils 675ea00d3 Update doc to do not refer to old installation script 0f0f20dab Add rally-tox-py39 job ab23f27e8 Replace deprecated inspect.getargspec 3c4398734 Moving IRC network reference to OFTC Diffstat (except docs and test files) ------------------------------------- .zuul.d/docker-jobs.yaml | 4 +- .zuul.d/install-jobs.yaml | 16 +-- .zuul.d/python-jobs.yaml | 38 +++-- .zuul.d/zuul.yaml | 17 ++- CHANGELOG.rst | 34 ++++- DOCKER_README.md | 12 +- Dockerfile | 12 +- bindep.txt | 1 - .../quick_start/tutorial/step_0_installation.rst | 42 ------ ...g_up_env_and_running_benchmark_from_samples.rst | 2 +- ...step_9_verifying_cloud_via_tempest_verifier.rst | 2 +- etc/motd_for_docker | 2 +- rally/cli/cliutils.py | 6 +- rally/cli/commands/task.py | 2 +- ...9_08e1515a576c_fix_invalid_verification_logs.py | 5 +- ...018_02_bc908ac9a1fc_move_deployment_to_env_2.py | 3 +- ...02_dc0fe6de6786_update_old_deployment_config.py | 3 +- rally/common/db/sa_types.py | 10 +- rally/task/engine.py | 6 +- rally/task/hook.py | 2 +- rally/utils/sshutils.py | 32 +++-- requirements.txt | 8 +- setup.cfg | 2 + test-requirements.txt | 6 +- .../roles/docker-build-image/tasks/main.yaml | 2 +- .../playbooks/roles/rally-tox/defaults/main.yaml | 4 + .../rally-tox/files/find_python_for_tox_env.py | 85 ++++++++++++ .../playbooks/roles/rally-tox/tasks/install.yaml | 35 +++++ tox.ini | 45 ++++-- upper-constraints.txt | 143 ++++++++++--------- 46 files changed, 559 insertions(+), 504 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8fc8ac54e..b74bae4af 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14,2 +14,2 @@ oslo.db # Apache Software License -oslo.log!=3.44.2,!=4.1.2,!=4.2.0 # Apache Software License -paramiko # LGPL +oslo.log!=3.44.2,!=4.1.2,!=4.2.0,!=5.0.1,!=5.0.2,!=5.1.0 # Apache Software License +paramiko!=2.9.0,!=2.9.1 # LGPL @@ -17 +17 @@ pbr!=2.1.0 # Apache Software License -PrettyTable # BSD (3 clause) +PrettyTable!=3.4.0 # BSD (3 clause) @@ -22 +22 @@ requests!=2.20.0,!=2.24.0 # Apache License, Version -SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8 # MIT +SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,<2.0.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index e9572d868..8245a381e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ pytest # MIT -pytest-cov>=2.2.1 # MIT +pytest-cov # MIT @@ -20,2 +20,2 @@ testresources # UNKNOWN -docutils # public domain, Python, 2-Clause BSD, GPL 3 (see COPYING.txt) -Pygments # BSD +docutils<0.18 # public domain, Python, 2-Clause BSD, GPL 3 (see COPYING.txt) +Pygments # BSD-2-Clause

1 0

openstackdocstheme 3.1.1
by no-reply＠openstack.org 23 May '23

23 May '23

We are psyched to announce the release of: openstackdocstheme 3.1.1: OpenStack Docs Theme The source is available from: https://opendev.org/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ For more details, please see below. Changes in openstackdocstheme 3.1.0..3.1.1 ------------------------------------------ b301ee7 Remove 'type' attribute of <script> element 88b610f Remove invalid attributes 7a6d3e8 Remove errant character 65fb860 Remove nested 'li' 9bfd0a4 Replace ampersand with HTML characters Diffstat (except docs and test files) ------------------------------------- openstackdocstheme/theme/openstackdocs/footer.html | 6 +- openstackdocstheme/theme/openstackdocs/header.html | 34 +++++---- openstackdocstheme/theme/openstackdocs/layout.html | 2 +- .../theme/openstackdocs/script_footer.html | 20 +++--- .../theme/openstackdocs/script_search.html | 4 +- openstackdocstheme/theme/openstackdocs/search.html | 9 ++- .../theme/openstackdocs/sidebartoc_menu.html | 40 +++++------ .../openstackdocs/sidebartoc_menu_apiref.html | 80 +++++++++++----------- openstackdocstheme/theme/starlingxdocs/footer.html | 4 +- .../theme/starlingxdocs/sidebartoc_menu.html | 12 ++-- .../starlingxdocs/sidebartoc_menu_apiref.html | 20 +++--- 11 files changed, 114 insertions(+), 117 deletions(-)

1 0

openstacksdk 1.2.0 (bobcat)
by no-reply＠openstack.org 22 May '23

22 May '23

We exuberantly announce the release of: openstacksdk 1.2.0: An SDK for building applications to work with OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 1.2.0 ^^^^^ New Features * Add Designate (DNS) support for zone shares. * Added support to create, list, get and delete share access rules with the shared file system service. * Added support to create, list, get, and delete share network subnets on the shared file system service. * Adds shelve_offload_server method to the compute proxy * Add support for Ironic Inspector Introspection Rules API. * Adds support for Node shards to baremetal service. * The "Resource.wait_for_status", "Resource.wait_for_delete", and related proxy wrappers now accept a "callback" argument that can be used to pass a callback function. When provided, the wait function will attempt to retrieve a "progress" value from the resource in question and pass it to the callback function each time it iterates. Changes in openstacksdk 1.1.0..1.2.0 ------------------------------------ a30f9562 Add 'callback' to 'wait_for_delete', 'wait_for_status' 1aa94250 Add find_share() for shared file system share resource 6d04b0c3 compute: Adds shelve-offload support 8357f004 ironic: Add support for Introspection Rules ec1a0355 nit: Correct name of variable 692b7f39 Added neutron fields to share network resource. aba2b417 Ignore black version bump c7010a2f Bump black to 23.3.0 c946294b pre-commit: Enable black 48ff44f0 Ignore blackify changes a36f5142 Blackify everything else 004c7352 Blackify openstack.cloud c2ff7336 Blackify openstack.clustering 073abda5 Blackify openstack.container_infrastructure_management 570b81f0 Blackify openstack.accelerator 33bed575 Blackify openstack.instance_ha 10018dbf Blackify openstack.dns 19ec9ba3 Blackify openstack.database 0e2b5d26 Blackify openstack.message 9d3d9862 Blackify openstack.workflow 874ea741 Blackify openstack.orchestration 409f648c Blackify openstack.placement 93d8f417 Blackify openstack.key_manager 3d2511f9 Blackify openstack.shared_file_system 82c2a534 Blackify openstack.load_balancer f8e42017 Blackify openstack.baremetal, openstack.baremetal_introspection 4589e293 Blackify openstack.object_store 34da09f3 Blackify openstack.block_storage 542ddaa1 Blackify openstack.identity f526b990 Blackify openstack.network bcf99f34 Blackify openstack.image 93256267 Use pre-commit for 'pep8' tox target, bump versions 6baf11f6 Prepare for hacking 6.x 69735d3b Blackify openstack.compute (tests) 395a7729 Blackify openstack.compute 22f89abf Add link to image sharing api docs 56e36607 Add share access rules to shared file system 0bc0d4b8 Add support for Ironic node shard attribute 9153d670 image: Don't envelope properties 7f87b6dd Add share network subnet resource to shared file system aab02350 Allow key overrides in create and fetch methods a7456043 Add Designate (DNS) zone share API 4e3f50c1 modify ovh and ovh-us vendor config Diffstat (except docs and test files) ------------------------------------- .git-blame-ignore-revs | 27 + .pre-commit-config.yaml | 16 +- .../resources/baremetal_introspection/index.rst | 1 + .../v1/introspection_rule.rst | 13 + .../user/resources/shared_file_system/index.rst | 2 + .../shared_file_system/v2/share_access_rule.rst | 13 + .../shared_file_system/v2/share_network_subnet.rst | 13 + examples/cloud/cleanup-servers.py | 10 +- examples/cloud/create-server-dict.py | 31 +- examples/cloud/create-server-name-or-id.py | 21 +- examples/cloud/debug-logging.py | 4 +- examples/cloud/find-an-image.py | 7 +- examples/cloud/http-debug-logging.py | 4 +- examples/cloud/munch-dict-object.py | 1 + examples/cloud/normalization.py | 4 +- examples/cloud/server-information.py | 8 +- examples/cloud/service-conditional-overrides.py | 1 + examples/cloud/service-conditionals.py | 1 + examples/cloud/strict-mode.py | 7 +- examples/cloud/upload-large-object.py | 7 +- examples/cloud/upload-object.py | 7 +- examples/cloud/user-agent.py | 4 +- examples/clustering/cluster.py | 9 +- examples/clustering/policy.py | 4 +- examples/clustering/profile.py | 6 +- examples/clustering/receiver.py | 13 +- examples/compute/create.py | 16 +- examples/connect.py | 24 +- examples/image/download.py | 1 - examples/image/import.py | 6 +- examples/key_manager/create.py | 12 +- examples/key_manager/list.py | 4 +- examples/network/create.py | 6 +- examples/network/delete.py | 3 +- examples/network/security_group_rules.py | 12 +- examples/shared_file_system/share_instances.py | 6 +- openstack/__main__.py | 14 +- openstack/_log.py | 11 +- openstack/_services_mixin.py | 116 +- openstack/accelerator/accelerator_service.py | 1 + openstack/accelerator/v2/_proxy.py | 21 +- openstack/accelerator/v2/accelerator_request.py | 30 +- openstack/accelerator/v2/deployable.py | 24 +- openstack/accelerator/v2/device_profile.py | 6 +- openstack/baremetal/configdrive.py | 77 +- openstack/baremetal/v1/_common.py | 8 +- openstack/baremetal/v1/_proxy.py | 244 +- openstack/baremetal/v1/allocation.py | 17 +- openstack/baremetal/v1/chassis.py | 1 - openstack/baremetal/v1/conductor.py | 1 - openstack/baremetal/v1/deploy_templates.py | 1 - openstack/baremetal/v1/driver.py | 39 +- openstack/baremetal/v1/node.py | 526 ++-- openstack/baremetal/v1/port.py | 5 +- openstack/baremetal/v1/port_group.py | 9 +- openstack/baremetal/v1/volume_connector.py | 4 +- openstack/baremetal/v1/volume_target.py | 4 +- openstack/baremetal_introspection/v1/_proxy.py | 90 +- .../baremetal_introspection/v1/introspection.py | 43 +- .../v1/introspection_rule.py | 44 + openstack/block_storage/_base_proxy.py | 23 +- openstack/block_storage/v2/_proxy.py | 75 +- openstack/block_storage/v2/backup.py | 76 +- openstack/block_storage/v2/quota_set.py | 1 - openstack/block_storage/v2/snapshot.py | 11 +- openstack/block_storage/v2/volume.py | 53 +- openstack/block_storage/v3/_proxy.py | 180 +- openstack/block_storage/v3/backup.py | 73 +- openstack/block_storage/v3/extension.py | 1 + openstack/block_storage/v3/group_snapshot.py | 8 +- openstack/block_storage/v3/group_type.py | 4 +- openstack/block_storage/v3/limits.py | 9 +- openstack/block_storage/v3/quota_set.py | 1 - openstack/block_storage/v3/resource_filter.py | 1 + openstack/block_storage/v3/snapshot.py | 21 +- openstack/block_storage/v3/type.py | 8 +- openstack/block_storage/v3/volume.py | 79 +- openstack/cloud/_accelerator.py | 4 +- openstack/cloud/_baremetal.py | 190 +- openstack/cloud/_block_storage.py | 85 +- openstack/cloud/_clustering.py | 4 +- openstack/cloud/_coe.py | 68 +- openstack/cloud/_compute.py | 490 ++-- openstack/cloud/_dns.py | 51 +- openstack/cloud/_floating_ip.py | 523 ++-- openstack/cloud/_identity.py | 279 +- openstack/cloud/_image.py | 79 +- openstack/cloud/_network.py | 748 +++-- openstack/cloud/_network_common.py | 139 +- openstack/cloud/_object_store.py | 105 +- openstack/cloud/_orchestration.py | 120 +- openstack/cloud/_security_group.py | 195 +- openstack/cloud/_utils.py | 89 +- openstack/cloud/cmd/inventory.py | 43 +- openstack/cloud/exc.py | 8 +- openstack/cloud/inventory.py | 33 +- openstack/cloud/meta.py | 113 +- openstack/cloud/openstackcloud.py | 148 +- openstack/clustering/v1/_async_resource.py | 5 +- openstack/clustering/v1/_proxy.py | 63 +- openstack/clustering/v1/action.py | 10 +- openstack/clustering/v1/cluster.py | 30 +- openstack/clustering/v1/cluster_policy.py | 3 +- openstack/clustering/v1/event.py | 10 +- openstack/clustering/v1/node.py | 22 +- openstack/clustering/v1/policy.py | 3 +- openstack/clustering/v1/profile.py | 3 +- openstack/clustering/v1/receiver.py | 10 +- openstack/common/metadata.py | 21 +- openstack/common/quota_set.py | 18 +- openstack/common/tag.py | 14 +- openstack/compute/compute_service.py | 2 +- openstack/compute/v2/_proxy.py | 284 +- openstack/compute/v2/aggregate.py | 6 +- openstack/compute/v2/flavor.py | 46 +- openstack/compute/v2/hypervisor.py | 9 +- openstack/compute/v2/image.py | 8 +- openstack/compute/v2/keypair.py | 3 +- openstack/compute/v2/limits.py | 47 +- openstack/compute/v2/quota_set.py | 6 +- openstack/compute/v2/server.py | 155 +- openstack/compute/v2/server_action.py | 1 - openstack/compute/v2/server_ip.py | 22 +- openstack/compute/v2/server_remote_console.py | 16 +- openstack/compute/v2/service.py | 25 +- openstack/compute/v2/usage.py | 4 +- openstack/config/__init__.py | 17 +- openstack/config/_util.py | 6 +- openstack/config/cloud_config.py | 1 - openstack/config/cloud_region.py | 351 ++- openstack/config/defaults.py | 3 +- openstack/config/loader.py | 354 ++- openstack/config/vendors/__init__.py | 8 +- openstack/config/vendors/citycloud.json | 2 +- openstack/config/vendors/ovh-us.json | 5 +- openstack/config/vendors/ovh.json | 31 +- openstack/connection.py | 86 +- .../v1/_proxy.py | 11 +- .../v1/cluster.py | 1 - .../v1/cluster_certificate.py | 1 - .../v1/cluster_template.py | 1 - .../v1/service.py | 1 - openstack/database/v1/_proxy.py | 58 +- openstack/database/v1/instance.py | 8 +- openstack/database/v1/user.py | 5 +- openstack/dns/v2/_base.py | 15 +- openstack/dns/v2/_proxy.py | 197 +- openstack/dns/v2/floating_ip.py | 1 + openstack/dns/v2/recordset.py | 12 +- openstack/dns/v2/zone.py | 26 +- openstack/dns/v2/zone_export.py | 18 +- openstack/dns/v2/zone_import.py | 18 +- openstack/dns/v2/zone_share.py | 45 + openstack/dns/v2/zone_transfer.py | 6 +- openstack/dns/version.py | 25 + openstack/exceptions.py | 57 +- openstack/fixture/connection.py | 10 +- openstack/format.py | 10 +- openstack/identity/v2/_proxy.py | 16 +- openstack/identity/v2/extension.py | 4 +- openstack/identity/v3/_proxy.py | 259 +- openstack/identity/v3/credential.py | 3 +- openstack/identity/v3/domain.py | 54 +- openstack/identity/v3/endpoint.py | 4 +- openstack/identity/v3/group.py | 24 +- openstack/identity/v3/limit.py | 3 +- openstack/identity/v3/project.py | 54 +- openstack/identity/v3/registered_limit.py | 3 +- openstack/identity/v3/role.py | 3 +- openstack/identity/v3/role_assignment.py | 17 +- openstack/identity/v3/system.py | 48 +- openstack/identity/v3/trust.py | 3 +- openstack/identity/version.py | 4 +- openstack/image/_download.py | 18 +- openstack/image/image_signer.py | 2 +- openstack/image/v1/image.py | 14 +- openstack/image/v2/_proxy.py | 13 +- openstack/image/v2/cache.py | 7 +- openstack/image/v2/image.py | 58 +- openstack/instance_ha/v1/_proxy.py | 18 +- openstack/instance_ha/v1/host.py | 9 +- openstack/instance_ha/v1/notification.py | 16 +- openstack/instance_ha/v1/segment.py | 8 +- openstack/key_manager/v1/_format.py | 1 - openstack/key_manager/v1/_proxy.py | 20 +- openstack/key_manager/v1/container.py | 4 +- openstack/key_manager/v1/order.py | 3 +- openstack/key_manager/v1/secret.py | 37 +- openstack/load_balancer/v2/_proxy.py | 253 +- openstack/load_balancer/v2/amphora.py | 30 +- openstack/load_balancer/v2/availability_zone.py | 9 +- openstack/load_balancer/v2/health_monitor.py | 20 +- openstack/load_balancer/v2/l7_policy.py | 14 +- openstack/load_balancer/v2/l7_rule.py | 17 +- openstack/load_balancer/v2/listener.py | 30 +- openstack/load_balancer/v2/load_balancer.py | 36 +- openstack/load_balancer/v2/member.py | 16 +- openstack/load_balancer/v2/pool.py | 20 +- openstack/load_balancer/v2/quota.py | 11 +- openstack/message/v2/_proxy.py | 61 +- openstack/message/v2/claim.py | 53 +- openstack/message/v2/message.py | 42 +- openstack/message/v2/queue.py | 45 +- openstack/message/v2/subscription.py | 45 +- openstack/network/v2/_base.py | 21 +- openstack/network/v2/_proxy.py | 1588 +++++++---- openstack/network/v2/address_group.py | 9 +- openstack/network/v2/address_scope.py | 4 +- openstack/network/v2/agent.py | 15 +- openstack/network/v2/availability_zone.py | 4 +- openstack/network/v2/bgp_speaker.py | 6 +- openstack/network/v2/firewall_group.py | 12 +- openstack/network/v2/firewall_policy.py | 7 +- openstack/network/v2/firewall_rule.py | 17 +- openstack/network/v2/flavor.py | 19 +- openstack/network/v2/floating_ip.py | 17 +- openstack/network/v2/health_monitor.py | 10 +- openstack/network/v2/listener.py | 12 +- openstack/network/v2/load_balancer.py | 12 +- openstack/network/v2/local_ip.py | 13 +- openstack/network/v2/local_ip_association.py | 6 +- openstack/network/v2/metering_label.py | 4 +- openstack/network/v2/metering_label_rule.py | 22 +- openstack/network/v2/ndp_proxy.py | 12 +- openstack/network/v2/network.py | 15 +- openstack/network/v2/network_ip_availability.py | 6 +- openstack/network/v2/network_segment_range.py | 13 +- openstack/network/v2/pool.py | 10 +- openstack/network/v2/pool_member.py | 6 +- openstack/network/v2/port.py | 39 +- openstack/network/v2/port_forwarding.py | 4 +- openstack/network/v2/qos_policy.py | 4 +- openstack/network/v2/qos_rule_type.py | 6 +- openstack/network/v2/quota.py | 10 +- openstack/network/v2/rbac_policy.py | 8 +- openstack/network/v2/router.py | 18 +- openstack/network/v2/security_group.py | 12 +- openstack/network/v2/security_group_rule.py | 23 +- openstack/network/v2/segment.py | 8 +- openstack/network/v2/service_profile.py | 4 +- openstack/network/v2/service_provider.py | 5 +- openstack/network/v2/subnet.py | 17 +- openstack/network/v2/subnet_pool.py | 8 +- openstack/network/v2/tap_flow.py | 6 +- openstack/network/v2/tap_service.py | 3 +- openstack/network/v2/trunk.py | 6 +- openstack/network/v2/vpn_endpoint_group.py | 7 +- openstack/network/v2/vpn_ike_policy.py | 11 +- openstack/network/v2/vpn_ipsec_policy.py | 9 +- openstack/network/v2/vpn_ipsec_site_connection.py | 23 +- openstack/network/v2/vpn_service.py | 12 +- openstack/object_store/v1/_base.py | 27 +- openstack/object_store/v1/_proxy.py | 386 ++- openstack/object_store/v1/account.py | 5 +- openstack/object_store/v1/container.py | 23 +- openstack/object_store/v1/info.py | 12 +- openstack/object_store/v1/obj.py | 65 +- openstack/orchestration/util/environment_format.py | 21 +- openstack/orchestration/util/event_utils.py | 31 +- openstack/orchestration/util/template_format.py | 11 +- openstack/orchestration/util/template_utils.py | 149 +- openstack/orchestration/util/utils.py | 8 +- openstack/orchestration/v1/_proxy.py | 159 +- openstack/orchestration/v1/resource.py | 5 +- openstack/orchestration/v1/software_config.py | 5 +- openstack/orchestration/v1/software_deployment.py | 6 +- openstack/orchestration/v1/stack.py | 73 +- openstack/orchestration/v1/stack_environment.py | 1 - openstack/orchestration/v1/stack_files.py | 1 - openstack/orchestration/v1/stack_template.py | 1 - openstack/orchestration/v1/template.py | 11 +- openstack/placement/placement_service.py | 1 + openstack/placement/v1/_proxy.py | 14 +- openstack/placement/v1/resource_provider.py | 7 +- openstack/proxy.py | 58 +- openstack/resource.py | 150 +- openstack/service_description.py | 69 +- .../shared_file_system_service.py | 1 + openstack/shared_file_system/v2/_proxy.py | 291 +- openstack/shared_file_system/v2/limit.py | 39 +- openstack/shared_file_system/v2/share.py | 26 +- .../shared_file_system/v2/share_access_rule.py | 84 + openstack/shared_file_system/v2/share_instance.py | 5 +- openstack/shared_file_system/v2/share_network.py | 25 +- .../shared_file_system/v2/share_network_subnet.py | 61 + openstack/shared_file_system/v2/share_snapshot.py | 7 +- openstack/shared_file_system/v2/storage_pool.py | 7 +- openstack/shared_file_system/v2/user_message.py | 4 +- .../baremetal/test_baremetal_allocation.py | 99 +- .../functional/baremetal/test_baremetal_chassis.py | 35 +- .../baremetal/test_baremetal_conductor.py | 1 - .../baremetal/test_baremetal_deploy_templates.py | 134 +- .../functional/baremetal/test_baremetal_driver.py | 29 +- .../functional/baremetal/test_baremetal_node.py | 192 +- .../functional/baremetal/test_baremetal_port.py | 67 +- .../baremetal/test_baremetal_port_group.py | 64 +- .../baremetal/test_baremetal_volume_connector.py | 129 +- .../baremetal/test_baremetal_volume_target.py | 127 +- .../functional/block_storage/v2/test_backup.py | 23 +- .../functional/block_storage/v2/test_snapshot.py | 24 +- .../functional/block_storage/v2/test_stats.py | 33 +- .../functional/block_storage/v2/test_volume.py | 12 +- .../block_storage/v3/test_availability_zone.py | 1 - .../functional/block_storage/v3/test_backup.py | 47 +- .../block_storage/v3/test_capabilities.py | 6 +- .../functional/block_storage/v3/test_extension.py | 1 - .../functional/block_storage/v3/test_limits.py | 1 - .../block_storage/v3/test_resource_filters.py | 1 - .../functional/block_storage/v3/test_snapshot.py | 24 +- .../functional/block_storage/v3/test_volume.py | 1 - .../functional/cloud/test_cluster_templates.py | 29 +- .../functional/cloud/test_floating_ip_pool.py | 3 +- .../cloud/test_qos_bandwidth_limit_rule.py | 38 +- .../functional/cloud/test_qos_dscp_marking_rule.py | 18 +- .../cloud/test_qos_minimum_bandwidth_rule.py | 18 +- .../identity/v3/test_application_credential.py | 19 +- .../functional/image/v2/test_metadef_namespace.py | 4 +- .../image/v2/test_metadef_resource_type.py | 24 +- .../functional/image/v2/test_metadef_schema.py | 1 - .../load_balancer/v2/test_load_balancer.py | 506 ++-- .../functional/network/v2/test_address_group.py | 7 +- .../functional/network/v2/test_address_scope.py | 7 +- .../network/v2/test_agent_add_remove_network.py | 7 +- .../network/v2/test_agent_add_remove_router.py | 7 +- .../network/v2/test_auto_allocated_topology.py | 14 +- .../network/v2/test_availability_zone.py | 1 - .../functional/network/v2/test_firewall_group.py | 1 - .../functional/network/v2/test_firewall_policy.py | 1 - .../functional/network/v2/test_firewall_rule.py | 1 - .../v2/test_firewall_rule_insert_remove_policy.py | 10 +- .../functional/network/v2/test_floating_ip.py | 8 +- .../network/v2/test_l3_conntrack_helper.py | 1 - .../network/v2/test_local_ip_association.py | 5 +- .../network/v2/test_network_ip_availability.py | 1 - .../network/v2/test_network_segment_range.py | 1 - .../functional/network/v2/test_port_forwarding.py | 1 - .../network/v2/test_qos_bandwidth_limit_rule.py | 3 +- .../network/v2/test_qos_dscp_marking_rule.py | 3 +- .../network/v2/test_qos_minimum_bandwidth_rule.py | 14 +- .../v2/test_qos_minimum_packet_rate_rule.py | 3 +- .../functional/network/v2/test_qos_rule_type.py | 7 +- .../functional/network/v2/test_rbac_policy.py | 1 - .../network/v2/test_router_add_remove_interface.py | 1 - .../functional/network/v2/test_security_group.py | 1 - .../network/v2/test_security_group_rule.py | 1 - .../functional/network/v2/test_service_profile.py | 17 +- .../network/v2/test_subnet_from_subnet_pool.py | 1 - .../functional/network/v2/test_subnet_pool.py | 1 - .../functional/object_store/v1/test_account.py | 1 - .../functional/object_store/v1/test_container.py | 19 +- .../functional/orchestration/v1/test_stack.py | 16 +- .../placement/v1/test_resource_provider.py | 7 +- .../shared_file_system/test_availability_zone.py | 1 - .../shared_file_system/test_export_locations.py | 17 +- .../functional/shared_file_system/test_limit.py | 31 +- .../functional/shared_file_system/test_share.py | 78 +- .../shared_file_system/test_share_access_rule.py | 79 + .../shared_file_system/test_share_instance.py | 43 +- .../shared_file_system/test_share_network.py | 48 +- .../test_share_network_subnet.py | 86 + .../shared_file_system/test_share_snapshot.py | 50 +- .../test_share_snapshot_instance.py | 16 +- .../shared_file_system/test_storage_pool.py | 10 +- .../shared_file_system/test_user_message.py | 19 +- .../accelerator/v2/test_accelerator_request.py | 13 +- .../unit/accelerator/v2/test_device_profile.py | 21 +- .../unit/baremetal/v1/test_deploy_templates.py | 38 +- .../unit/baremetal/v1/test_volume_connector.py | 9 +- .../v1/test_introspection_rule.py | 74 + .../unit/baremetal_introspection/v1/test_proxy.py | 109 +- .../block_storage/v3/test_availability_zone.py | 7 +- .../unit/block_storage/v3/test_capabilities.py | 46 +- .../unit/block_storage/v3/test_resource_filter.py | 28 +- .../unit/block_storage/v3/test_type_encryption.py | 1 - .../unit/cloud/test_coe_clusters_certificate.py | 80 +- .../unit/cloud/test_create_volume_snapshot.py | 158 +- .../unit/cloud/test_delete_volume_snapshot.py | 132 +- .../unit/cloud/test_qos_bandwidth_limit_rule.py | 728 +++-- .../unit/cloud/test_qos_minimum_bandwidth_rule.py | 533 ++-- .../unit/cloud/test_server_delete_metadata.py | 89 +- .../unit/clustering/v1/test_cluster_policy.py | 22 +- .../unit/compute/v2/test_availability_zone.py | 3 +- .../unit/compute/v2/test_server_diagnostics.py | 20 +- .../unit/compute/v2/test_server_remote_console.py | 22 +- .../unit/compute/v2/test_volume_attachment.py | 18 +- .../v1/test_cluster_certificate.py | 4 +- .../v1/test_cluster_template.py | 20 +- .../v1/test_proxy.py | 5 +- .../v1/test_service.py | 2 +- .../identity/v3/test_application_credential.py | 15 +- .../unit/identity/v3/test_federation_protocol.py | 7 +- .../unit/identity/v3/test_identity_provider.py | 4 +- .../unit/identity/v3/test_registered_limit.py | 8 +- .../v3/test_role_domain_group_assignment.py | 11 +- .../v3/test_role_domain_user_assignment.py | 11 +- .../v3/test_role_project_group_assignment.py | 13 +- .../v3/test_role_project_user_assignment.py | 11 +- .../v3/test_role_system_group_assignment.py | 13 +- .../v3/test_role_system_user_assignment.py | 13 +- .../unit/image/v2/test_metadef_resource_type.py | 5 +- .../v2/test_metadef_resource_type_association.py | 5 +- .../unit/load_balancer/test_availability_zone.py | 47 +- .../test_availability_zone_profile.py | 45 +- .../unit/load_balancer/test_flavor_profile.py | 21 +- .../unit/load_balancer/test_health_monitor.py | 59 +- .../network/v2/test_auto_allocated_topology.py | 1 - .../unit/network/v2/test_availability_zone.py | 1 - .../unit/network/v2/test_l3_conntrack_helper.py | 7 +- .../unit/network/v2/test_local_ip_association.py | 21 +- .../unit/network/v2/test_metering_label_rule.py | 13 +- .../network/v2/test_network_ip_availability.py | 35 +- .../unit/network/v2/test_network_segment_range.py | 11 +- .../network/v2/test_qos_bandwidth_limit_rule.py | 4 +- .../unit/network/v2/test_qos_dscp_marking_rule.py | 6 +- .../network/v2/test_qos_minimum_bandwidth_rule.py | 4 +- .../v2/test_qos_minimum_packet_rate_rule.py | 4 +- .../unit/network/v2/test_security_group_rule.py | 60 +- .../unit/network/v2/test_vpn_endpoint_group.py | 11 +- .../network/v2/test_vpn_ipsec_site_connection.py | 3 +- .../unit/orchestration/v1/test_software_config.py | 1 - .../orchestration/v1/test_software_deployment.py | 6 +- .../orchestration/v1/test_stack_environment.py | 26 +- .../unit/orchestration/v1/test_stack_files.py | 13 +- .../unit/orchestration/v1/test_stack_template.py | 47 +- .../unit/placement/v1/test_resource_provider.py | 7 +- .../v2/test_availability_zone.py | 1 - .../v2/test_share_access_rule.py | 53 + .../v2/test_share_export_locations.py | 15 +- .../shared_file_system/v2/test_share_instance.py | 56 +- .../shared_file_system/v2/test_share_network.py | 39 +- .../v2/test_share_network_subnet.py | 72 + .../shared_file_system/v2/test_share_snapshot.py | 35 +- .../v2/test_share_snapshot_instance.py | 9 +- .../shared_file_system/v2/test_storage_pool.py | 32 +- .../shared_file_system/v2/test_user_message.py | 32 +- openstack/utils.py | 93 +- openstack/workflow/v2/_proxy.py | 25 +- openstack/workflow/v2/cron_trigger.py | 28 +- openstack/workflow/v2/execution.py | 22 +- openstack/workflow/v2/workflow.py | 19 +- .../add-dns-zone-share-api-374e71cac504917f.yaml | 4 + ...cess-rules-to-shared-file-362bee34f7331186.yaml | 5 + ...ork-subnet-to-shared-file-b5de3ce6ca723209.yaml | 5 + .../notes/add-shelve_offload-427f6550fc55e622.yaml | 4 + ...trospection_rules_support-18b0488a76800122.yaml | 3 + .../notes/ironic-node-shard-35f2557c3dbfff1d.yaml | 4 + ...network_add_bgp_resources-c182dc2873d6db18.yaml | 2 +- ...tus_delete_callback_param-68d30161e23340bb.yaml | 8 + releasenotes/source/conf.py | 34 +- setup.py | 4 +- tools/keystone_version.py | 8 +- tools/nova_version.py | 23 +- tools/print-services.py | 13 +- tox.ini | 14 +- 818 files changed, 46776 insertions(+), 28747 deletions(-)

1 0

neutron-lib 3.6.1 (bobcat)
by no-reply＠openstack.org 22 May '23

22 May '23

We eagerly announce the release of: neutron-lib 3.6.1: Neutron shared routines and utilities This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 3.6.0..3.6.1 ----------------------------------- c5ca1dd Context.elevated() method sets all required roles for context object Diffstat (except docs and test files) ------------------------------------- neutron_lib/context.py | 5 +++-- 2 files changed, 32 insertions(+), 2 deletions(-)

1 0

cinder 21.3.0 (zed)
by no-reply＠openstack.org 17 May '23

17 May '23

We are jazzed to announce the release of: cinder 21.3.0: OpenStack Block Storage This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 21.3.0 ^^^^^^ Known Issues ************ * For security reasons (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) manually deleting an attachment, manually doing the "os-terminate_connection" "os- detach" or "os-force_detach" actions will no longer be allowed unless the request is coming from another OpenStack service on behalf of a user. Upgrade Notes ************* * Nova must be configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html) **and** cinder must be configured to recognize at least one of the roles that the nova service user has been assigned in keystone. By default, cinder will recognize the "service" role, so if the nova service user is assigned a differently named role in your cloud, you must adjust your cinder configuration file ("service_token_roles" configuration option in the "keystone_authtoken" section). If nova and cinder are not configured correctly in this regard, detaching volumes will no longer work (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Critical Issues *************** * Detaching volumes will fail if Nova is not configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html), please read the upgrade section for more information. (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Security Issues *************** * As part of the fix for Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) cinder now rejects user attachment delete requests for attachments that are being used by nova instances to ensure that no leftover devices are produced on the compute nodes which could be used to access another project's volumes. Terminate connection, detach, and force detach volume actions are not allowed for users. Bug Fixes ********* * Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) Fixed issue where a user manually deleting an attachment, calling terminate connection, detach, or force detach, for a volume that is still used by a nova instance resulted in leftover devices on the compute node. These operations will now fail. Changes in cinder 21.2.0..21.3.0 -------------------------------- cb4682fb8 Reject unsafe delete attachment calls Diffstat (except docs and test files) ------------------------------------- api-ref/source/v3/attachments.inc | 15 ++ api-ref/source/v3/volumes-v3-volumes-actions.inc | 55 ++++++ cinder/compute/nova.py | 7 + cinder/exception.py | 7 + cinder/volume/api.py | 98 +++++++++++ .../configuration/block-storage/service-token.rst | 46 +++-- .../redirect-detach-nova-4b7b7902d7d182e0.yaml | 42 +++++ 15 files changed, 503 insertions(+), 23 deletions(-)

1 0

nova 25.2.0 (yoga)
by no-reply＠openstack.org 17 May '23

17 May '23

We enthusiastically announce the release of: nova 25.2.0: Cloud computing fabric controller This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 25.2.0 ^^^^^^ Upgrade Notes * Configuration of service user tokens is now **required** for all Nova services to ensure security of block-storage volume data. All Nova configuration files must configure the "[service_user]" section as described in the documentation. See https://bugs.launchpad.net/nova/+bug/2004555 for more details. (https://docs.openstack.org/nova/latest/admin/configuration /service-user-token.html) Changes in nova 25.1.1..25.2.0 ------------------------------ acb31f01b1 CI: fix backport validator for new branch naming 98c3e3707c Enable use of service user token with admin context 4d8efa2d19 Use force=True for os-brick disconnect during delete 6c1b862274 Remove deleted projects from flavor access list 286aadf289 Handle InstanceInvalidState exception 37129b4b44 Remove mentions of removed scheduler filters 5f086d437e Fix LM rollback w/o multi port bindings extension Diffstat (except docs and test files) ------------------------------------- .../admin/configuration/cross-cell-resize.rst | 2 +- .../admin/configuration/service-user-token.rst | 59 ++++++++++++++++++++ .../admin/migrate-instance-with-snapshot.rst | 2 +- nova/api/openstack/compute/flavor_access.py | 9 ++- nova/api/openstack/compute/remote_consoles.py | 3 + nova/api/openstack/identity.py | 22 +++++--- nova/cmd/status.py | 11 ++++ nova/conf/compute.py | 12 +--- nova/network/neutron.py | 8 ++- nova/service_auth.py | 6 +- .../functional/regressions/test_bug_1888395.py | 13 ++--- .../api/openstack/compute/test_flavor_access.py | 25 ++++++++- .../api/openstack/compute/test_remote_consoles.py | 12 ++++ .../unit/virt/libvirt/volume/test_fibrechannel.py | 20 +++++++ .../unit/virt/libvirt/volume/test_storpool.py | 16 +++++- .../unit/virt/libvirt/volume/test_vzstorage.py | 8 ++- nova/virt/hyperv/vmops.py | 2 +- nova/virt/hyperv/volumeops.py | 12 ++-- nova/virt/libvirt/driver.py | 18 +++--- nova/virt/libvirt/volume/fibrechannel.py | 7 ++- nova/virt/libvirt/volume/fs.py | 2 +- nova/virt/libvirt/volume/iscsi.py | 7 ++- nova/virt/libvirt/volume/lightos.py | 7 ++- nova/virt/libvirt/volume/nvme.py | 6 +- nova/virt/libvirt/volume/quobyte.py | 2 +- nova/virt/libvirt/volume/scaleio.py | 7 ++- nova/virt/libvirt/volume/smbfs.py | 2 +- nova/virt/libvirt/volume/storpool.py | 5 +- nova/virt/libvirt/volume/volume.py | 2 +- nova/virt/libvirt/volume/vzstorage.py | 5 +- nova/volume/cinder.py | 8 ++- .../notes/service-user-token-421d067c16257782.yaml | 11 ++++ tools/check-cherry-picks.sh | 2 +- 55 files changed, 560 insertions(+), 157 deletions(-)

1 0

puppet-mistral 19.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are pleased to announce the release of: puppet-mistral 19.4.1: Puppet module for OpenStack Mistral This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-mistral Download the package from: https://tarballs.openstack.org/puppet-mistral/ Please report issues through: https://bugs.launchpad.net/puppet-mistral/+bugs For more details, please see below. 19.4.1 ^^^^^^ Bug Fixes * Now the base "Puppet::Provider::Mistral" class loads service user credential using the proper keystoneauth parameters. Changes in puppet-mistral 19.4.0..19.4.1 ---------------------------------------- 23c7017 Prepare the final stable/xena release 987849d setuptools: Disable auto discovery 2a7b5ba Fix authtoken parameters to load service user credential 952145c Update TOX_CONSTRAINTS_FILE for stable/xena 746710c Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lib/puppet/provider/mistral.rb | 9 ++-- metadata.json | 2 +- .../notes/bug-1961601-1df5a15bead1daf3.yaml | 5 +++ setup.py | 1 + spec/unit/provider/mistral_spec.rb | 48 ++++++++++++++++++++++ tox.ini | 2 +- 7 files changed, 61 insertions(+), 7 deletions(-)

1 0

puppet-tempest 19.5.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are excited to announce the release of: puppet-tempest 19.5.1: Puppet module for OpenStack Tempest This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-tempest Download the package from: https://tarballs.openstack.org/puppet-tempest/ Please report issues through: https://bugs.launchpad.net/puppet-tempest/+bugs For more details, please see below. 19.5.1 ^^^^^^ Bug Fixes * The "tempest" class no longer installes a "python3-<service>-tests" package, unless the package provides tempest plugins. * Now the "python3-keystone-tests-tempest" package is installed instead of the "python3-keyston-tests" package in CentOS and RHEL. * Default value of the "tempest::tempest_repo_uri" parameter has been updated and now the OpenDev repository is used instead of Github. Changes in puppet-tempest 19.5.0..19.5.1 ---------------------------------------- ebe6917 Prepare the final stable/xena release da6ec76 setuptools: Disable auto discovery 0d7072e CentOS: Install tempest plugin packages only a21b29e Change git url for Tempest to opendev.org Diffstat (except docs and test files) ------------------------------------- manifests/init.pp | 4 ++-- manifests/params.pp | 10 ++++++---- metadata.json | 2 +- releasenotes/notes/bug-1969361-849e95dbcf6f8395.yaml | 9 +++++++++ releasenotes/notes/tempest-repo-opendev-76ee1bab934194fa.yaml | 5 +++++ setup.py | 1 + spec/classes/tempest_init_spec.rb | 2 +- 7 files changed, 25 insertions(+), 8 deletions(-)

1 0

puppet-swift 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are glad to announce the release of: puppet-swift 19.5.0: Puppet module for OpenStack Swift This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-swift Download the package from: https://tarballs.openstack.org/puppet-swift/ Please report issues through: https://bugs.launchpad.net/puppet-swift/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Now this module supports configurion options in */etc/swift /internal-client.conf`*. * The "swift::proxy::ceilometer" class now supports the following new parameters to manage options for Rabbit driver in oslo.messaging library. * "rabbit_ha_queues" * "heartbeat_timeout_threshold" * "heartbeat_rate" * "heartbeat_in_pthread" * "rabbit_qos_prefetch_count" * "amqp_durable_queues" * "kombu_reconnect_delay" * "kombu_failover_strategy" * "kombu_compression" Changes in puppet-swift 19.4.0..19.5.0 -------------------------------------- 65a08a5 Prepare the final stable/xena release e4a28d2 Ensure consistent IPv6 address format e7d8c64 setuptools: Disable auto discovery f2c839d Fix deprecation warning by validate_legacy ced957d Fix type validation warning for storage policy rings b5cb280 Support customizing internal-client.conf ff757c6 Support more [oslo_messaging_rabbit] parameters 331b926 Fix typo in swiftinit service type e7d5607 Fix missing argument of builder_file_path 5f5fac7 Remove TripleO job 635e94d Update TOX_CONSTRAINTS_FILE for stable/xena a72d035 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 18 --- lib/puppet/provider/service/swiftinit.rb | 2 +- .../swift_internal_client_config/ini_setting.rb | 10 ++ lib/puppet/provider/swift_ring_builder.rb | 6 +- lib/puppet/type/ring_account_device.rb | 15 ++- lib/puppet/type/ring_container_device.rb | 15 ++- lib/puppet/type/ring_object_device.rb | 19 ++- lib/puppet/type/swift_internal_client_config.rb | 53 ++++++++ manifests/config.pp | 8 ++ manifests/deps.pp | 4 + manifests/internal_client.pp | 95 +++++++++++++++ manifests/internal_client/cache.pp | 76 ++++++++++++ manifests/internal_client/catch_errors.pp | 25 ++++ manifests/internal_client/proxy_logging.pp | 15 +++ manifests/internal_client/symlink.pp | 42 +++++++ manifests/proxy/ceilometer.pp | 134 ++++++++++++++++----- manifests/ringbuilder/create.pp | 6 +- manifests/ringbuilder/rebalance.pp | 6 +- manifests/storage/node.pp | 6 +- metadata.json | 2 +- .../notes/internal-client-ce022fa93df88aaa.yaml | 5 + ...slo-messaging-rabbit-opts-e4da4a73d1f2c788.yaml | 15 +++ setup.py | 1 + spec/classes/swift_config_spec.rb | 11 ++ spec/classes/swift_internal_client_cache_spec.rb | 78 ++++++++++++ .../swift_internal_client_catch_errors_spec.rb | 19 +++ spec/classes/swift_internal_client_spec.rb | 73 +++++++++++ spec/classes/swift_internal_client_symlink_spec.rb | 33 +++++ spec/classes/swift_proxy_ceilometer_spec.rb | 20 ++- spec/defines/swift_ringbuilder_create_spec.rb | 14 ++- spec/defines/swift_ringbuilder_rebalance_spec.rb | 16 ++- .../ini_setting_spec.rb | 49 ++++++++ .../unit/type/swift_internal_client_config_spec.rb | 19 +++ tox.ini | 2 +- 35 files changed, 829 insertions(+), 84 deletions(-)

1 0

puppet-gnocchi 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are gleeful to announce the release of: puppet-gnocchi 19.5.0: Puppet module for OpenStack Gnocchi This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-gnocchi Download the package from: https://tarballs.openstack.org/puppet-gnocchi/ Please report issues through: https://bugs.launchpad.net/puppet-gnocchi/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Install python-boto3 automatically in order to satisfy s3 storage backend package dependencies. This can be disabled by setting the "gnocchi::storage::s3::manage_boto3" parameter. Changes in puppet-gnocchi 19.4.0..19.5.0 ---------------------------------------- fdc70e2 Prepare the final stable/xena release 0221ef2 setuptools: Disable auto discovery db97bc7 s3_access_key_id should be secret a51f532 Ensure required packages are installed for s3 support. 1cf22a1 Update TOX_CONSTRAINTS_FILE for stable/xena 21379e2 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/params.pp | 1 + manifests/storage/s3.pp | 21 ++++++++++- metadata.json | 2 +- .../fix-s3-and-install-boto3-49991c1b453c2168.yaml | 6 ++++ setup.py | 1 + spec/classes/gnocchi_storage_s3_spec.rb | 42 +++++++++++++++++++++- tox.ini | 2 +- 8 files changed, 72 insertions(+), 4 deletions(-)

1 0

puppet-keystone 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are jazzed to announce the release of: puppet-keystone 19.5.0: Puppet module for OpenStack Keystone This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * Added "description" parameter to "keystone_user" resource. * The "keystone::federation::ipenidc" class now supports the new "openidc_response_mode" parameter, to customize mod_auth_openidc response mode. Security Issues *************** * Content of fernet keys and credential keys are now hidden from output, when these files are updated. Changes in puppet-keystone 19.4.0..19.5.0 ----------------------------------------- 16883a6 Prepare the final stable/xena release ca43d64 OIDC: Make sure the dependent auth modules are loaded 9510fcd setuptools: Disable auto discovery f5d1daf Ensure key contents are hidden 114272f Make sure keystone package name is asserted 07c30e3 Add description support to keystone_user 801f94d keystone_user: Use un-scoped token to verify password ed8ab83 Ensure inet6: formatting for a comma-separated list string bcc37d7 Use systemctl to restart the keystone service 2b391b4 OIDC: Add support for setting OIDCResponseMode cd8172d Remove TripleO job d48547f Update TOX_CONSTRAINTS_FILE for stable/xena 73184be Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 --- lib/puppet/provider/keystone.rb | 11 +- lib/puppet/provider/keystone_user/openstack.rb | 25 ++-- lib/puppet/type/keystone_user.rb | 4 + manifests/federation/openidc.pp | 9 ++ manifests/init.pp | 4 +- manifests/resource/authtoken.pp | 7 +- metadata.json | 2 +- .../notes/bug-1979672-003a5939f3bd6f67.yaml | 5 + ...user-provider-description-18806553c4b2be3f.yaml | 4 + .../openidc_response_mode-f5a2ddf95bd4b752.yaml | 6 + setup.py | 1 + spec/acceptance/keystone_wsgi_apache_spec.rb | 11 +- spec/classes/keystone_federation_openidc_spec.rb | 15 +++ spec/classes/keystone_init_spec.rb | 15 ++- spec/defines/keystone_resource_authtoken_spec.rb | 39 +++++- spec/unit/provider/keystone_spec.rb | 2 +- spec/unit/provider/keystone_user/openstack_spec.rb | 131 +++++++++------------ templates/openidc.conf.erb | 3 + tox.ini | 2 +- 21 files changed, 185 insertions(+), 131 deletions(-)

1 0

puppet-nova 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are psyched to announce the release of: puppet-nova 19.5.0: Puppet module for OpenStack Nova This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Added "disable_compute_service_check_for_ffu" paramter to "nova::workarounds" to configure the configuration option with the same name. * Added "enable_qemu_monitor_announce_self" paramter to "nova::workarounds" to configure the configuration option with the same name. * The following parameter and class have been added, to support usage of the service token feature with the Barbican key manager. * The "nova::key_manager::barbican::send_service_user_token" parameter * The "nova::key_manager::barbican::service_user" class * Add "sysinfo_serial" parameter to control a Serial number entry generation method. Defaults to "$::os_service_default". * The "nova_flavor" resource now supports the "project_name" property. This property should be used instead of the "project" property when project name is used instead of project id. * New parameters "max_client_requests" and "admin_max_client_requests" allow to configure corresponding settings for libvirt. * Added parameter "wait_for_vif_plugged_event_during_hard_reboot" to "nova::workarounds" to configure the config option with the same name. Changes in puppet-nova 19.4.0..19.5.0 ------------------------------------- 9b412fde Prepare the final stable/xena release 9061e0c5 Wire-in max_client_requests for libvirt 74e9c951 setuptools: Disable auto discovery d0e7fb98 Expose [workaround]/disable_compute_service_check_for_ffu c4ed32df Add sysinfo_serial to control Serial number gen a66c8b4c Add wait_for_vif_plugged_event_during_hard_reboot bdf1413f nova_flavor: Add the new project_name property c6fbc193 Remove unused str2hash f887f207 Ensure auth_endpoint is cleared by reset f5be102f Fix missing update of property_hash 7238c13a Add enable_qemu_monitor_announce_self workaround b750dc10 nova_flavor: Strip '' from project id value b9398853 CentOS: Ensure /etc/sysconfig/libvirtd(-guests) exists a8b79dbb Fix error in 140chars lint check 2f409b6d Debian/Ubuntu: Use ceph-common instead of ceph 956c8e5a key_manager: Add service user options for Barbican key manager 38079353 Override default mkisofs_cmd in CentOS 9. 3fc355a1 Use service anchor to ensure API is up 119f4616 Add missing dependency about nova_api_paste_ini 542e1fbc Remove TripleO job b6996814 Update TOX_CONSTRAINTS_FILE for stable/xena 4688ca65 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ---- lib/puppet/provider/nova.rb | 11 +-- lib/puppet/provider/nova_aggregate/openstack.rb | 2 + lib/puppet/provider/nova_cell_v2/nova_manage.rb | 20 ++-- lib/puppet/provider/nova_flavor/openstack.rb | 86 +++++++++++++---- lib/puppet/provider/nova_service/openstack.rb | 8 +- lib/puppet/type/nova_flavor.rb | 26 ++++- manifests/api.pp | 2 +- manifests/compute.pp | 13 ++- manifests/compute/libvirt.pp | 6 ++ manifests/compute/libvirt/virtnodedevd.pp | 37 ++++--- manifests/compute/libvirt/virtproxyd.pp | 41 +++++--- manifests/compute/libvirt/virtqemud.pp | 37 ++++--- manifests/compute/libvirt/virtsecretd.pp | 37 ++++--- manifests/compute/libvirt_guests.pp | 9 ++ manifests/compute/rbd.pp | 2 +- manifests/config.pp | 4 +- manifests/cron/archive_deleted_rows.pp | 5 +- manifests/cron/purge_shadow_tables.pp | 5 +- manifests/deps.pp | 4 + manifests/key_manager/barbican.pp | 34 ++++--- manifests/key_manager/barbican/service_user.pp | 94 ++++++++++++++++++ manifests/migration/libvirt.pp | 9 ++ manifests/params.pp | 5 +- manifests/workarounds.pp | 37 ++++++- metadata.json | 2 +- ...ute_service_check_for_ffu-4c4cc458df3ca33b.yaml | 6 ++ ...emu_monitor_announce_self-9e307efdb0061fce.yaml | 6 ++ .../barbican_service_user-887eb51cb8e9efce.yaml | 8 ++ .../libvirt_sysinfo_serial-e1603d45446726c3.yaml | 5 + .../nova_flavor-project_name-fbab75b57ad9d4b3.yaml | 6 ++ ...bvirt_max_client_requests-1709c1d7a282264d.yaml | 5 + ..._event_during_hard_reboot-092dada6f6a1e632.yaml | 5 + setup.py | 1 + spec/acceptance/nova_wsgi_apache_spec.rb | 28 ++++-- spec/classes/nova_api_spec.rb | 4 +- spec/classes/nova_compute_libvirt_guests_spec.rb | 23 ++++- spec/classes/nova_compute_libvirt_spec.rb | 3 + .../nova_compute_libvirt_virtnodedevd_spec.rb | 18 ++-- .../nova_compute_libvirt_virtproxyd_spec.rb | 20 ++-- .../classes/nova_compute_libvirt_virtqemud_spec.rb | 18 ++-- .../nova_compute_libvirt_virtsecretd_spec.rb | 18 ++-- spec/classes/nova_compute_rbd_spec.rb | 5 +- .../nova_key_manager_barbican_service_user_spec.rb | 79 +++++++++++++++ spec/classes/nova_key_manager_barbican_spec.rb | 45 +++++---- spec/classes/nova_migration_libvirt_spec.rb | 15 +++ spec/classes/nova_workarounds_spec.rb | 17 +++- .../unit/provider/nova_aggregate/openstack_spec.rb | 3 +- spec/unit/provider/nova_flavor/openstack_spec.rb | 107 +++++++++++++++++++-- spec/unit/provider/nova_spec.rb | 27 ------ tox.ini | 2 +- 52 files changed, 780 insertions(+), 250 deletions(-)

1 0

cinder 22.1.0 (antelope)
by no-reply＠openstack.org 17 May '23

17 May '23

We are ecstatic to announce the release of: cinder 22.1.0: OpenStack Block Storage This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 22.1.0 ^^^^^^ Known Issues ************ * For security reasons (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) manually deleting an attachment, manually doing the "os-terminate_connection", "os- detach" or "os-force_detach" actions will no longer be allowed in most cases unless the request is coming from another OpenStack service on behalf of a user. Upgrade Notes ************* * Nova must be configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html) **and** cinder must be configured to recognize at least one of the roles that the nova service user has been assigned in keystone. By default, cinder will recognize the "service" role, so if the nova service user is assigned a differently named role in your cloud, you must adjust your cinder configuration file ("service_token_roles" configuration option in the "keystone_authtoken" section). If nova and cinder are not configured correctly in this regard, detaching volumes will no longer work (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Critical Issues *************** * Detaching volumes will fail if Nova is not configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html), please read the upgrade section for more information. (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Security Issues *************** * As part of the fix for Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) cinder now rejects user attachment delete requests for attachments that are being used by nova instances to ensure that no leftover devices are produced on the compute nodes which could be used to access another project's volumes. Terminate connection, detach, and force detach volume actions (calls that are not usually made by users directly) are, in most cases, not allowed for users. Bug Fixes ********* * Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) Fixed issue where a user manually deleting an attachment, calling terminate connection, detach, or force detach, for a volume that is still used by a nova instance resulted in leftover devices on the compute node. These operations will now fail when it is believed to be a problem. Changes in cinder 22.0.0..22.1.0 -------------------------------- dd6010a9f Reject unsafe delete attachment calls 5975376ba [Pure Storage] Add check for new error message 63e6dfdb0 Update url of "Unity Replication White Paper" Diffstat (except docs and test files) ------------------------------------- api-ref/source/v3/attachments.inc | 15 ++ api-ref/source/v3/volumes-v3-volumes-actions.inc | 55 ++++++ cinder/compute/nova.py | 7 + cinder/exception.py | 7 + cinder/volume/api.py | 98 +++++++++++ cinder/volume/drivers/pure.py | 6 +- .../drivers/dell-emc-unity-driver.rst | 4 +- .../configuration/block-storage/service-token.rst | 46 +++-- .../redirect-detach-nova-4b7b7902d7d182e0.yaml | 43 +++++ 17 files changed, 510 insertions(+), 27 deletions(-)

1 0

python-heatclient 3.3.0 (bobcat)
by no-reply＠openstack.org 17 May '23

17 May '23

We are psyched to announce the release of: python-heatclient 3.3.0: OpenStack Orchestration API Client Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-heatclient Download the package from: https://pypi.org/project/python-heatclient Please report issues through: https://bugs.launchpad.net/python-heatclient/+bugs For more details, please see below. Changes in python-heatclient 3.2.0..3.3.0 ----------------------------------------- 668d85f Add Python 3.10 to supported runtime. e2c006b Update master for stable/2023.1 3edca52 Switch to 2023.1 Python3 unit tests and generic template name Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + setup.cfg | 1 + 4 files changed, 9 insertions(+), 1 deletion(-)

1 0

puppet-openstacklib 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We jubilantly announce the release of: puppet-openstacklib 19.5.0: Puppet module for OpenStack Openstacklib This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-openstacklib Download the package from: https://tarballs.openstack.org/puppet-openstacklib/ Please report issues through: https://bugs.launchpad.net/puppet-openstacklib/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * The new "openstacklib::clouds" resource type has been added, which manages the "clouds.yaml" file to store credentials for the "openstack" cli. * Now "Puppet::Provider::Openstack::CredentialsV3" supports loading credentials from the "clouds.yaml" file. * Now "Puppet::Provider::Openstack::CredentialsV3" supports system scope credential and domain scope credential in addition to project scope credential. Changes in puppet-openstacklib 19.4.0..19.5.0 --------------------------------------------- f8ead08 Prepare the final stable/xena release 0c69f9b setuptools: Disable auto discovery a034d8a Hide differences when updating clouds.yaml 369c516 Support clouds.yaml to manage keystone user credentials cb51302 Support system/domain scope credential 43696fd Ubuntu: Use utf8mb3 charset in MySQL 81ea071 Make regex matching policy key stricter 5cc3c2a policy: Quote single quotes in yaml format 86d250a Remove TripleO job 588d892 Update TOX_CONSTRAINTS_FILE for stable/xena f52a59e Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ----- lib/puppet/provider/openstack/auth.rb | 6 +- lib/puppet/provider/openstack/credentials.rb | 43 ++++++++++- manifests/clouds.pp | 76 +++++++++++++++++++ manifests/policy/base.pp | 10 ++- metadata.json | 2 +- .../notes/clouds-yaml-e8a87dfceba4619d.yaml | 10 +++ .../system-scope-credential-113608525e12a22d.yaml | 6 ++ setup.py | 1 + spec/acceptance/mysql_spec.rb | 8 +- spec/acceptance/openstacklib_policy_base_spec.rb | 14 ++++ spec/defines/openstacklib_clouds_spec.rb | 41 +++++++++++ spec/defines/openstacklib_policy_base_spec.rb | 30 +++++++- spec/unit/provider/openstack/credentials_spec.rb | 85 +++++++++++++++++++++- templates/clouds.yaml.erb | 38 ++++++++++ tox.ini | 2 +- 17 files changed, 359 insertions(+), 33 deletions(-)

1 0

puppet-horizon 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We jubilantly announce the release of: puppet-horizon 19.5.0: Puppet module for OpenStack Horizon This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-horizon Download the package from: https://tarballs.openstack.org/puppet-horizon/ Please report issues through: https://bugs.launchpad.net/puppet-horizon/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The new "horizon::wsgi::apache::ssl_extra_params" parameter has been added. This parameter affects only ssl vhost and overrides the "extra_params" parameter when set. Bug Fixes ********* * Bug #1956904 (https://bugs.launchpad.net/puppet- horizon/+bug/1956904): The hard-coded "REST_API_REQUIRED_SETTINGS" parameter was removed, to use the default value defined in Horizon itself. * Fix HORIZON_IMAGES_UPLOAD_MODE in template file because the value must be encapsulated with quotes or it will be treated as an expression by horizon. Changes in puppet-horizon 19.4.0..19.5.0 ---------------------------------------- 1300d52 Fix missing comma causing syntax error ebde4c8 Prepare the final stable/xena release fa8b48d Debian: Fix the wrong package name of manila-ui 6baf1f3 setuptools: Disable auto discovery 06cb301 Do not show diff of local_settings(.py) 54b7eb0 Add inet6 prefix only when MemcacheCache is used 68ad93e Accept array for cache_server_url f19fc00 Allow customizing apache::vhost parameters for SSL vhost f80cb0f Fix syntax error in individual dashboard settings a4b70ae Do not hard-code REST_API_REQUIRED_SETTINGS 847ef38 Make sure cache_server_ip is not empty 8b9d999 Handle string value for LAUNCH_INSTANCE_DEFAULTS d22f107 Fix missing HORIZON_IMAGES_UPLOAD_MODE 156ab82 Remove TripleO job 6bc229f Update TOX_CONSTRAINTS_FILE for stable/xena 4b4f914 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 21 ------ manifests/init.pp | 25 ++++++-- manifests/params.pp | 2 +- manifests/wsgi/apache.pp | 61 ++++++++++++------ metadata.json | 2 +- .../notes/bug-1956904-f4393eade5197c47.yaml | 6 ++ ..._quotes_for_images_upload-bcd649d0311afe32.yaml | 5 ++ .../wsgi-ssl_extra_params-f775a56966c5d475.yaml | 6 ++ setup.py | 1 + spec/classes/horizon_dashboards_manila_spec.rb | 2 +- spec/classes/horizon_init_spec.rb | 74 ++++++++++++++++++++-- spec/classes/horizon_wsgi_apache_spec.rb | 26 +++++++- templates/_1499_load_balancer_settings.py.erb | 8 +-- templates/_1699_orchestration_settings.py.erb | 2 +- templates/_90_manila_shares.py.erb | 2 +- templates/local_settings.py.erb | 32 ++++------ tox.ini | 2 +- 18 files changed, 192 insertions(+), 86 deletions(-)

1 0

nova 26.2.0 (zed)
by no-reply＠openstack.org 17 May '23

17 May '23

We contentedly announce the release of: nova 26.2.0: Cloud computing fabric controller This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 26.2.0 ^^^^^^ Upgrade Notes * Configuration of service user tokens is now **required** for all Nova services to ensure security of block-storage volume data. All Nova configuration files must configure the "[service_user]" section as described in the documentation. See https://bugs.launchpad.net/nova/+bug/2004555 for more details. (https://docs.openstack.org/nova/latest/admin/configuration /service-user-token.html) Changes in nova 26.1.1..26.2.0 ------------------------------ 91ee67019e Revert "Debug Nova APIs call failures" abd9a34a60 CI: fix backport validator for new branch naming 0d6dd6c67f Enable use of service user token with admin context 8b4b99149a Use force=True for os-brick disconnect during delete 2ea2b556da Remove deleted projects from flavor access list d71e9f6ec4 Ironic: retry when node not available Diffstat (except docs and test files) ------------------------------------- .../admin/configuration/cross-cell-resize.rst | 2 +- .../admin/configuration/service-user-token.rst | 59 ++++++++++++++++++++ .../admin/migrate-instance-with-snapshot.rst | 2 +- nova/api/openstack/compute/flavor_access.py | 9 ++- nova/api/openstack/identity.py | 22 +++++--- nova/api/openstack/wsgi.py | 6 -- nova/cmd/status.py | 11 ++++ nova/compute/manager.py | 3 +- nova/network/neutron.py | 8 ++- nova/service_auth.py | 6 +- .../api/openstack/compute/test_flavor_access.py | 25 ++++++++- .../unit/virt/libvirt/volume/test_fibrechannel.py | 20 +++++++ .../unit/virt/libvirt/volume/test_storpool.py | 16 +++++- .../unit/virt/libvirt/volume/test_vzstorage.py | 8 ++- nova/virt/hyperv/vmops.py | 2 +- nova/virt/hyperv/volumeops.py | 12 ++-- nova/virt/ironic/driver.py | 12 ++++ nova/virt/libvirt/driver.py | 7 ++- nova/virt/libvirt/volume/fibrechannel.py | 7 ++- nova/virt/libvirt/volume/fs.py | 2 +- nova/virt/libvirt/volume/iscsi.py | 7 ++- nova/virt/libvirt/volume/lightos.py | 7 ++- nova/virt/libvirt/volume/nvme.py | 6 +- nova/virt/libvirt/volume/quobyte.py | 2 +- nova/virt/libvirt/volume/scaleio.py | 7 ++- nova/virt/libvirt/volume/smbfs.py | 2 +- nova/virt/libvirt/volume/storpool.py | 5 +- nova/virt/libvirt/volume/volume.py | 2 +- nova/virt/libvirt/volume/vzstorage.py | 5 +- nova/volume/cinder.py | 8 ++- .../notes/service-user-token-421d067c16257782.yaml | 11 ++++ tools/check-cherry-picks.sh | 2 +- 54 files changed, 580 insertions(+), 143 deletions(-)

1 0

puppet-vitrage 9.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are tickled pink to announce the release of: puppet-vitrage 9.4.1: Puppet module for OpenStack Vitrage This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-vitrage Download the package from: https://tarballs.openstack.org/puppet-vitrage/ Please report issues through: https://bugs.launchpad.net/puppet-vitrage/+bugs For more details, please see below. Changes in puppet-vitrage 9.4.0..9.4.1 -------------------------------------- ba4eb41 Prepare the final stable/xena release 0710aa1 Debian/Ubuntu: Fix wrong wsgi script path c21bf8b setuptools: Disable auto discovery 1349260 Update TOX_CONSTRAINTS_FILE for stable/xena 0abeee1 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/params.pp | 2 +- metadata.json | 2 +- setup.py | 1 + spec/classes/vitrage_wsgi_apache_spec.rb | 2 +- tox.ini | 2 +- 6 files changed, 6 insertions(+), 4 deletions(-)

1 0

puppet-heat 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We contentedly announce the release of: puppet-heat 19.5.0: Puppet module for OpenStack Heat This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-heat Download the package from: https://tarballs.openstack.org/puppet-heat/ Please report issues through: https://bugs.launchpad.net/puppet-heat/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * The new "heat::executor_thread_pool_size" parameter has been added. Changes in puppet-heat 19.4.0..19.5.0 ------------------------------------- 30c1b53 Prepare the final stable/xena release 9bf5e69 Expose executor_thread_pool_size 5ec5a22 setuptools: Disable auto discovery bc69197 Fix missing dependency of heat_api_cfn_uwsgi_config 118f130 Remove TripleO job 3ed90d8 Update TOX_CONSTRAINTS_FILE for stable/xena d011015 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - manifests/deps.pp | 2 +- manifests/init.pp | 12 ++++++++--- metadata.json | 2 +- ...executor_thread_pool_size-97e638d8731b2d30.yaml | 4 ++++ setup.py | 1 + spec/classes/heat_init_spec.rb | 23 +++++++++++++--------- tox.ini | 2 +- 9 files changed, 32 insertions(+), 16 deletions(-)

1 0

puppet-manila 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are happy to announce the release of: puppet-manila 19.5.0: Puppet module for OpenStack Manila This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Support for Dell EMC PowerMax backend has been added. Changes in puppet-manila 19.4.0..19.5.0 --------------------------------------- 58e5da7 Prepare the final stable/xena release 41f7141 setuptools: Disable auto discovery b600db0 Allow mulitple GlusterFS backends 2c9a4d3 Ubuntu: Use utf8mb3_general_ci collate in MySQL 909c435 Ubuntu: Use utf8mb3 charset in MySQL 55bb672 Fix the wrong section used to configure standalone network plugin 42ff041 Fix the wrong [quota] parameters 6360432 Add support for PowerMax driver 57b1c81 [Dell EMC drivers] Define defaults for emc_share_backend cd8720b [Dell EMC drivers] Accept arrays for ListOpt 40d365a Update TOX_CONSTRAINTS_FILE for stable/xena e02f139 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/backend/dellemc_isilon.pp | 7 +- manifests/backend/dellemc_powermax.pp | 116 +++++++++++++++++++++ manifests/backend/dellemc_unity.pp | 11 +- manifests/backend/dellemc_vmax.pp | 12 +-- manifests/backend/dellemc_vnx.pp | 10 +- manifests/backend/glusternative.pp | 11 +- manifests/backend/glusternfs.pp | 11 +- manifests/network/standalone.pp | 27 ++--- manifests/quota.pp | 22 ++-- metadata.json | 2 +- .../notes/dellemc_powermax-6ded05263d935f14.yaml | 4 + setup.py | 1 + spec/acceptance/basic_manila_spec.rb | 2 + spec/classes/manila_quota_spec.rb | 32 +++--- spec/defines/manila_backend_dellemc_isilon_spec.rb | 2 +- .../manila_backend_dellemc_powermax_spec.rb | 78 ++++++++++++++ spec/defines/manila_backend_dellemc_unity_spec.rb | 2 +- spec/defines/manila_backend_dellemc_vmax_spec.rb | 2 +- spec/defines/manila_backend_dellemc_vnx_spec.rb | 2 +- spec/defines/manila_backend_glusternative_spec.rb | 26 +++++ spec/defines/manila_backend_glusternfs_spec.rb | 26 +++++ spec/defines/manila_network_standalone_spec.rb | 58 +++++++---- tox.ini | 2 +- 24 files changed, 368 insertions(+), 99 deletions(-)

1 0

puppet-designate 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are tickled pink to announce the release of: puppet-designate 19.5.0: Puppet module for OpenStack Designate This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-designate Download the package from: https://tarballs.openstack.org/puppet-designate/ Please report issues through: https://bugs.launchpad.net/puppet-designate/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * Now the "designate::backend::bind9" class supports setting up bind9 backend using "/etc/designate/pools.yaml" properly. This feature can be enabled by the new "manage_pool" parameter. * Added the new "designate::wsgi::apache" class, you can now run the "designate-api" service under Apache with mod_wsgi. Deprecation Notes ***************** * The "designate::backend::bind9::rndc_host" parameter has been deprecated and has no effect now. Bug Fixes ********* * The "designate::backend::bind9" class no longer configures parameters in the "[backend:bind9]" section, as these parameters are no longer effective. Changes in puppet-designate 19.4.0..19.5.0 ------------------------------------------ 734e498 Prepare the final stable/xena release 062cc6c Fix ineffective max_header_line 4e416a8 setuptools: Disable auto discovery 5b83ac5 Enable policy settings in designate-api 2b80fed mdns: Accept array value for the listen parameter 93f0d9b Fix setup of bind9 backend 9a50eb5 Add Designate API WSGI support 4bb90f7 Update TOX_CONSTRAINTS_FILE for stable/xena 23b8261 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/api.pp | 36 ++++- manifests/backend/bind9.pp | 112 ++++++++++++--- manifests/mdns.pp | 2 +- manifests/params.pp | 40 +++--- manifests/wsgi/apache.pp | 160 +++++++++++++++++++++ metadata.json | 2 +- .../notes/bug-1961516-0634fabec06a4e94.yaml | 17 +++ .../notes/designate-api-wsgi-b7a408ecc00f3001.yaml | 5 + setup.py | 1 + spec/classes/designate_api_spec.rb | 43 +++++- spec/classes/designate_backend_bind9_spec.rb | 61 ++++---- spec/classes/designate_mdns_spec.rb | 27 ++-- spec/classes/designate_wsgi_apache_spec.rb | 115 +++++++++++++++ templates/bind9-pools.yaml.erb | 36 +++++ tox.ini | 2 +- 16 files changed, 572 insertions(+), 88 deletions(-)

1 0

puppet-placement 6.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are satisfied to announce the release of: puppet-placement 6.4.1: Puppet module for OpenStack placement This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-placement Download the package from: https://tarballs.openstack.org/puppet-placement/ Please report issues through: https://bugs.launchpad.net/puppet-placement/+bugs For more details, please see below. Changes in puppet-placement 6.4.0..6.4.1 ---------------------------------------- 8096fe4 Prepare the final stable/xena release 245a81a setuptools: Disable auto discovery bc3c0ce update file name for apache config on Debian 0edfd2e Skip dependency on keystone endpoint if endpoint is not configured 14ee3c8 Tag the httpd service only when it is used cf265e9 Remove TripleO job b1d4ba9 Update TOX_CONSTRAINTS_FILE for stable/xena df56d29 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ------------------- manifests/api.pp | 3 +-- manifests/keystone/auth.pp | 5 ++++- manifests/params.pp | 2 +- metadata.json | 2 +- setup.py | 1 + tox.ini | 2 +- 8 files changed, 10 insertions(+), 25 deletions(-)

1 0

puppet-octavia 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We jubilantly announce the release of: puppet-octavia 19.5.0: Puppet module for OpenStack Octavia This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Added parameter "allow_ping_health_monitors" to the "octavia::api" class * The following parameters have been added to the "octavia::api" class. These parameters allows customizing the same parameters in the "[api_setting]" section. * "default_listener_ciphers" * "default_pool_ciphers" * "tls_cipher_prohibit_list" * "default_listener_tls_versions" * "default_pool_tls_versions" * "minimum_tls_version" * The "octavia::api::provider_drivers" parameter now supports array or hash value, and the given value is conveted to correctly formatted string when being put into octavia.conf. * Now the "octavia::provider::ovn" can manage the package required to use OVN Octavia provider. * The following parameters have been added to the "octavia::provider::ovn" class. * "ovsdb_connection_timeout" * "ovsdb_retry_max_interval" * "ovsdb_probe_interval" * Support for the "ovn_sb_*" parameters has been added to the "octavia::provider::ovn" class. * The new "octavia::task_flow" class has been added. This class manages parameters in the "task_flow" section, which are required to use the amphora v2 driver. * The "octavia::db::mysql" class and the "octavia::db::postgresql" class now support creating a separate database for taskflow persistence. * The "octavia::db::sync_persistence" class has been added. This class invokes the command to initialize the taskflow persistence database. Changes in puppet-octavia 19.4.0..19.5.0 ---------------------------------------- 6262ebb Prepare the final stable/xena release 8276514 setuptools: Disable auto discovery 0a7317a Do not show passphrase even if it is invalid 91031e6 ovn: Accept arrays for ovn_*_connection parameters 8da4abe Accept array or hash for enable_provider_drivers 861a235 ovn: Add support for ovn_sb_* parameters d64492c ovn: Add more tunables related to OVN DB connection dc7a544 Manage ovn-octavia-provider package fb1af93 Add allow_ping_health_monitors parameter to api 034d66f Add parameters to configure amphorav2 driver ae3ecdf api: Add support for TLS cipher/version parameters e036925 Fix inconsistent spec file name 3607dc0 Remove TripleO job 77ecc71 Update TOX_CONSTRAINTS_FILE for stable/xena 0c81a22 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 32 ------- manifests/api.pp | 53 ++++++++++- manifests/certificates.pp | 6 +- manifests/db/mysql.pp | 30 ++++-- manifests/db/postgresql.pp | 23 ++++- manifests/db/sync.pp | 2 +- manifests/db/sync_persistence.pp | 40 ++++++++ manifests/params.pp | 1 + manifests/provider/ovn.pp | 75 +++++++++++++-- manifests/task_flow.pp | 105 +++++++++++++++++++++ metadata.json | 2 +- ...llow_ping_health_monitors-3f00c296714b663b.yaml | 4 + .../notes/api-tls-params-48cefc42aee491ab.yaml | 13 +++ .../convert-provider_drivers-922ba756396e154c.yaml | 6 ++ .../ovn-provider-package-af40f696662e7052.yaml | 5 + .../notes/ovn-tunables-103622c80b71d03d.yaml | 9 ++ .../notes/ovnsb-params-e7bdca2b53465ed9.yaml | 5 + releasenotes/notes/task_flow-89c5a7003e705a9d.yaml | 14 +++ setup.py | 1 + spec/classes/octavia_api_spec.rb | 71 +++++++++++++- spec/classes/octavia_db_mysql_spec.rb | 25 +++++ spec/classes/octavia_db_postgresql_spec.rb | 23 +++++ spec/classes/octavia_db_sync_persistence_spec.rb | 68 +++++++++++++ spec/classes/octavia_db_sync_spec.rb | 13 +-- spec/classes/octavia_ovn_provider_spec.rb | 47 --------- spec/classes/octavia_provider_ovn_spec.rb | 90 ++++++++++++++++++ spec/classes/octavia_task_flow_spec.rb | 78 +++++++++++++++ tox.ini | 2 +- 29 files changed, 730 insertions(+), 114 deletions(-)

1 0

puppet-ceilometer 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are pleased to announce the release of: puppet-ceilometer 19.5.0: Puppet module for OpenStack Ceilometer This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-ceilometer Download the package from: https://tarballs.openstack.org/puppet-ceilometer/ Please report issues through: https://bugs.launchpad.net/puppet-ceilometer/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Add new parameter "tenant_name_discovery", whether to idenitfy user and project names from polled samples. This paramater is to be configured only when ceilometer central namespace is enabled. * Support for the "[compute] resource_update_interval" parameter and the "[compute] resource_cache_expiry" parameter has been added. * The "ceilometer::agent::polling" class now suppports the new "batch_size" parameter. * Support for the parameters used to poll metrics from the Radosgw service has been added. * The new "ceilometer::agent::polling::service_types" class, to manage parameters in the "[service_types]" section, has been added. Changes in puppet-ceilometer 19.4.0..19.5.0 ------------------------------------------- 842aaeb Add new parameter `tenant_name_discovery` e08fc27 Add support for [polling] batch_size 69460b9 compute: Add support for tunables parameters b32543f polling: Ensure unused parameters are cleared e388565 Prepare the final stable/xena release 2ff14b0 setuptools: Disable auto discovery 89cfedf Bugfix - Deprecated notification_workers is ignored f96e4c3 Add support for polling Radosgw metrics 882b6f5 Add support for the [service_types] parameters 5f2e4ef Update TOX_CONSTRAINTS_FILE for stable/xena aef7c7a Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/agent/notification.pp | 2 +- manifests/agent/polling.pp | 65 +++++++++++++--- manifests/agent/polling/rgw.pp | 32 ++++++++ manifests/agent/polling/service_types.pp | 50 ++++++++++++ metadata.json | 2 +- ...add_tenant_name_discovery-4671aec3daae9622.yaml | 7 ++ .../notes/compute-params-ecee48b43a1bdad2.yaml | 5 ++ .../notes/polling-batch_size-95f15dc9d96b96b4.yaml | 5 ++ .../notes/rgw-support-35ca7afb8e5ec322.yaml | 5 ++ .../notes/service_types-2a672cdceff9227f.yaml | 5 ++ setup.py | 1 + spec/classes/ceilometer_agent_polling_rgw_spec.rb | 41 ++++++++++ .../ceilometer_agent_polling_service_types_spec.rb | 50 ++++++++++++ spec/classes/ceilometer_agent_polling_spec.rb | 88 ++++++++++++++++++++-- tox.ini | 2 +- 16 files changed, 343 insertions(+), 18 deletions(-)

1 0

puppet-glance 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We joyfully announce the release of: puppet-glance 19.5.0: Puppet module for OpenStack Glance This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The following parameter and class have been added, to support usage of the service token feature with the Barbican key manager. * The "glance::key_manager::barbican::send_service_user_token" parameter * The "glance::key_manager::barbican::service_user" class * The "glance::cache::cleaner" class and the "glance::cache::pruner" class now support the "maxdelay" parameter. This parameter would be useful in a multi-node deployment, to avoid launching the same cron command at the same time in multiple nodes. Upgrade Notes ************* * The "glance::api" class now supports a "lock_path" parameter that configures the oslo.concurrency lock_path with a platform specific default value. Distributions that are used to defining the lock_path with a distribution specific config file may need to override the default "glance::api::lock_path" value. Bug Fixes ********* * Bug #1980539 (https://bugs.launchpad.net/puppet- glance/+bug/1980539): Configure the oslo.concurrency lock_path, which is now required by cinder backends. * Bug #1947816 (https://bugs.launchpad.net/puppet- glance/+bug/1947816): Fix the default auth_version for swift backend so that Keystone v3 API is used by default instead of v2 API. Changes in puppet-glance 19.4.0..19.5.0 --------------------------------------- cbbeee8 Prepare the final stable/xena release af0063b Ensure [DEFAULT] show_multiple_locations is cleared 08ff250 setuptools: Disable auto discovery 1d37e54 Configure the oslo.concurrency lock_path 1913dd1 Add sleep in cache cron jobs 157e9ab Disallow sheepdog backend 1b6b91d key_manager: Add service user options for Barbican key manager f34790b Fix wrong class used in unit tests 628d731 Swift backend: Use Keystone v3 API by default 048e9b4 Swift backend: the key parameter should be secret 6db9bec Remove TripleO job 7a7070a Update TOX_CONSTRAINTS_FILE for stable/xena ec1ceea Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ----- manifests/api.pp | 18 ++++- manifests/backend/multistore/swift.pp | 6 +- manifests/backend/swift.pp | 4 +- manifests/cache/cleaner.pp | 19 ++++- manifests/cache/pruner.pp | 20 ++++- manifests/key_manager/barbican.pp | 34 ++++---- manifests/key_manager/barbican/service_user.pp | 94 ++++++++++++++++++++++ manifests/params.pp | 2 + metadata.json | 2 +- ...add-concurrency-lock_path-666f5836ec062c5a.yaml | 13 +++ .../barbican_service_user-606ee71dc0940e2a.yaml | 8 ++ .../notes/bug-1947816-75538e8fd13e59c6.yaml | 6 ++ .../cache-cron-maxdelay-bfd1585eaa15aeda.yaml | 7 ++ setup.py | 1 + spec/classes/glance_api_spec.rb | 28 ++++++- spec/classes/glance_backend_swift_spec.rb | 2 +- spec/classes/glance_cache_cleaner_spec.rb | 3 +- spec/classes/glance_cache_pruner_spec.rb | 3 +- ...lance_key_manager_barbican_service_user_spec.rb | 79 ++++++++++++++++++ spec/classes/glance_key_manager_barbican_spec.rb | 45 ++++++----- .../glance_backend_multistore_swift_spec.rb | 6 +- tox.ini | 2 +- 24 files changed, 343 insertions(+), 79 deletions(-)

1 0

heat-dashboard 6.0.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are glad to announce the release of: heat-dashboard 6.0.1: Heat Management Dashboard This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/heat-dashboard Download the package from: https://tarballs.openstack.org/heat-dashboard/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/heat- dashboard For more details, please see below. Changes in heat-dashboard 6.0.0..6.0.1 -------------------------------------- 4d1ce41 Drop lower-constraints.txt and its testing 81190f1 Set False to include_empty_option 4f2de89 Fix lower-constraints job 8d013f7 Update TOX_CONSTRAINTS_FILE for stable/xena b49e805 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 1 - heat_dashboard/content/stacks/forms.py | 13 +-- lower-constraints.txt | 149 --------------------------------- requirements.txt | 4 + test-requirements.txt | 1 - tox.ini | 10 +-- 7 files changed, 15 insertions(+), 165 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b737e47..4febe72 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. + diff --git a/test-requirements.txt b/test-requirements.txt index 075d90f..cc9df55 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +12,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -doc8>=0.6.0 # Apache-2.0

1 0

puppet-barbican 19.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We contentedly announce the release of: puppet-barbican 19.4.1: Puppet module for Barbican This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-barbican Download the package from: https://tarballs.openstack.org/puppet-barbican/ Please report issues through: https://bugs.launchpad.net/puppet-barbican/+bugs For more details, please see below. Changes in puppet-barbican 19.4.0..19.4.1 ----------------------------------------- c8ace6d Prepare the final stable/xena release 73b6ebb setuptools: Disable auto discovery b1debf7 Fix ineffective dependency 0ff4f90 Update TOX_CONSTRAINTS_FILE for stable/xena f85d141 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/wsgi/apache.pp | 2 +- metadata.json | 2 +- setup.py | 1 + tox.ini | 2 +- 5 files changed, 5 insertions(+), 3 deletions(-)

1 0

puppet-oslo 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are tickled pink to announce the release of: puppet-oslo 19.5.0: Puppet module for Oslo This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-oslo Download the package from: https://tarballs.openstack.org/puppet-oslo/ Please report issues through: https://bugs.launchpad.net/puppet-oslo/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Add socket keepalive options for the pymemcache (dogpile.cache) backend. * Now the "oslo::cache" defined resource type installs the pymemcache library when pymemcache backend is used. * Add options to configure pymemcache's HashClient retrying mechanisms (dogpile.cache) backend. * Add retrying options for pymemcache (dogpile.cache) backend. Changes in puppet-oslo 19.4.0..19.5.0 ------------------------------------- 8e59bdd Prepare the final stable/xena release 01a83c9 setuptools: Disable auto discovery a8d8629 cache: Ensure pymemcache library is installed e2af30e cache: Add inet6 prefix for only memcached backends edf1644 Add pymemcache's HashClient retrying options to oslo.cache 88197f3 Add retrying options to oslo.cache ba251d3 Add socket keepalive options for the pymemcache backend 423fd90 Remove TripleO job 3a69ae4 Update TOX_CONSTRAINTS_FILE for stable/xena 349d6d7 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ----- manifests/cache.pp | 91 +++++++++++++++++++- metadata.json | 2 +- .../add_keepalive_options-3802510b6d4461e1.yaml | 4 + .../notes/bug-1988205-973ce17f355cbfce.yaml | 5 ++ ...cache_hashclient_retrying-10a756708ad9894b.yaml | 5 ++ .../pymemcache_retrying-4fa326e3bc913a97.yaml | 4 + setup.py | 1 + spec/defines/oslo_cache_spec.rb | 97 ++++++++++++++++++++-- tox.ini | 2 +- 11 files changed, 198 insertions(+), 33 deletions(-)

1 0

puppet-ovn 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are tickled pink to announce the release of: puppet-ovn 19.5.0: Puppet module for OVN This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-ovn Download the package from: https://tarballs.openstack.org/puppet-ovn/ Please report issues through: https://bugs.launchpad.net/puppet-ovn/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * The new "ovn::controller::encap_tos" parameter has been added. This parameter controls the "ovn-encap-tos" external id. * The new "ovn::controller::ovn_ofctrl_wait_before_clear" parameter has been added to resolve an issue with dataplane downtime during upgrades that involve OVN schema changes. It will delay delting and re-adding openflow rules by the configured time in ms to give ovn- controller time to handle db connection / reconnection that can happen in this case. The default of 8000ms is based on upstream OVN testing with 200k openflow rules. Since it involved a change in behavior, the upstream OVN value defaults to unset. Changes in puppet-ovn 19.4.0..19.5.0 ------------------------------------ 6f1cd86 [Stable Only] Handle string value for ovn_bridge_mappings 8d9d11b Prepare the final stable/xena release 3cb1265 Add support for ovn-ofctrl-wait-before-clear f9d48b0 setuptools: Disable auto discovery d8a40a0 Add support for external_ids:ovn-encap-tos 4b5b106 Update TOX_CONSTRAINTS_FILE for stable/xena d3e2655 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/controller.pp | 29 ++++++++++++++++++++-- metadata.json | 2 +- .../notes/ovn-encap-tos-bd7bd9b3e3d19cc3.yaml | 5 ++++ ..._ofctrl_wait_before_clear-c40493ce231ec38c.yaml | 11 ++++++++ setup.py | 1 + spec/classes/ovn_controller_spec.rb | 8 ++++++ tox.ini | 2 +- 8 files changed, 55 insertions(+), 4 deletions(-)

1 0

puppet-cinder 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We exuberantly announce the release of: puppet-cinder 19.5.0: Puppet module for OpenStack Cinder This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-cinder Download the package from: https://tarballs.openstack.org/puppet-cinder/ Please report issues through: https://bugs.launchpad.net/puppet-cinder/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The following parameter and class have been added, to support usage of the service token feature with the Barbican key manager. * The "cinder::key_manager::barbican::send_service_user_token" parameter * The "cinder::key_manager::barbican::service_user" class * Add new parameter "cinder::backend::pure::pure_eradicate_on_delete" which allows setting of the pure_eradicate_on_delete option on the managed cinder backend for PureStorage. * Add new parameter "cinder::backend::pure::pure_iscsi_cidr" which allows setting of the pure_iscsi_cidr option on the managed cinder backend for PureStorage. Bug Fixes ********* * Bug #1986518 (https://bugs.launchpad.net/puppet- cinder/+bug/1986518): The "cinder::backend::iscsi" defined resource type now modifies the "/etc/tgt/targets.conf" file in Ubuntu and Debian, so that cinder can set up iscsi targets correctly. Changes in puppet-cinder 19.4.0..19.5.0 --------------------------------------- 8de7750 Prepare the final stable/xena release ddf2a6f setuptools: Disable auto discovery 605430e lvm: Modify targets.conf in Ubuntu/Debian 9043186 lvm: Fix duplicate declaration with CentOS + tgtadm 56aa4e9 key_manager: Add service user options for Barbican key manager e8ecf15 [Pure Storage] Add new params for FlashArray Cinder backend 3241ff1 Use service anchor to ensure API is up eb2c462 Remove TripleO job 3e0a053 Update TOX_CONSTRAINTS_FILE for stable/xena 6ffcbf4 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 22 ----- manifests/api.pp | 2 +- manifests/backend/iscsi.pp | 66 +++++++-------- manifests/backend/pure.pp | 16 ++++ manifests/key_manager/barbican.pp | 34 ++++---- manifests/key_manager/barbican/service_user.pp | 94 ++++++++++++++++++++++ metadata.json | 2 +- .../barbican_service_user-7c554403b68cbcaa.yaml | 8 ++ .../notes/bug-1986518-2ed0ab4ef3248cd8.yaml | 7 ++ ...urestorage_updated_params-b0f474d9ab08c37e.yaml | 10 +++ setup.py | 1 + spec/classes/cinder_api_spec.rb | 2 +- ...inder_key_manager_barbican_service_user_spec.rb | 79 ++++++++++++++++++ spec/classes/cinder_key_manager_barbican_spec.rb | 45 ++++++----- spec/defines/cinder_backend_iscsi_spec.rb | 19 ++--- spec/defines/cinder_backend_pure_spec.rb | 6 ++ tox.ini | 2 +- 18 files changed, 306 insertions(+), 110 deletions(-)

1 0

cinder 20.3.0 (yoga)
by no-reply＠openstack.org 17 May '23

17 May '23

We joyfully announce the release of: cinder 20.3.0: OpenStack Block Storage This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 20.3.0 ^^^^^^ Known Issues ************ * For security reasons (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) manually deleting an attachment, manually doing the "os-terminate_connection", "os- detach" or "os-force_detach" actions will no longer be allowed in most cases unless the request is coming from another OpenStack service on behalf of a user. Upgrade Notes ************* * Nova must be configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html) **and** cinder must be configured to recognize at least one of the roles that the nova service user has been assigned in keystone. By default, cinder will recognize the "service" role, so if the nova service user is assigned a differently named role in your cloud, you must adjust your cinder configuration file ("service_token_roles" configuration option in the "keystone_authtoken" section). If nova and cinder are not configured correctly in this regard, detaching volumes will no longer work (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Critical Issues *************** * Detaching volumes will fail if Nova is not configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html), please read the upgrade section for more information. (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Security Issues *************** * As part of the fix for Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) cinder now rejects user attachment delete requests for attachments that are being used by nova instances to ensure that no leftover devices are produced on the compute nodes which could be used to access another project's volumes. Terminate connection, detach, and force detach volume actions (calls that are not usually made by users directly) are, in most cases, not allowed for users. Bug Fixes ********* * Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) Fixed issue where a user manually deleting an attachment, calling terminate connection, detach, or force detach, for a volume that is still used by a nova instance resulted in leftover devices on the compute node. These operations will now fail when it is believed to be a problem. Changes in cinder 20.2.0..20.3.0 -------------------------------- a66f4afa2 Reject unsafe delete attachment calls Diffstat (except docs and test files) ------------------------------------- api-ref/source/v3/attachments.inc | 15 ++ api-ref/source/v3/volumes-v3-volumes-actions.inc | 55 ++++++ cinder/compute/nova.py | 7 + cinder/exception.py | 7 + cinder/volume/api.py | 98 +++++++++++ .../configuration/block-storage/service-token.rst | 46 +++-- .../redirect-detach-nova-4b7b7902d7d182e0.yaml | 43 +++++ 15 files changed, 504 insertions(+), 23 deletions(-)

1 0

puppet-openstack_extras 19.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are stoked to announce the release of: puppet-openstack_extras 19.4.1: Puppet module for OpenStack Openstack_extras This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-openstack_extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ Please report issues through: https://bugs.launchpad.net/puppet-openstack-extras/+bugs For more details, please see below. Changes in puppet-openstack_extras 19.4.0..19.4.1 ------------------------------------------------- 8160f0b Prepare the final stable/xena release e1bc2c1 setuptools: Disable auto discovery ff5aacf Use stable/xena release by default f4d89b9 Update TOX_CONSTRAINTS_FILE for stable/xena 1561dd0 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/repo/debian/params.pp | 2 +- manifests/repo/redhat/params.pp | 2 +- metadata.json | 2 +- setup.py | 1 + spec/classes/openstack_extras_repo_debian_debian_spec.rb | 14 +++++++------- spec/classes/openstack_extras_repo_debian_ubuntu_spec.rb | 6 +++--- spec/classes/openstack_extras_repo_redhat_redhat_spec.rb | 8 ++++---- tox.ini | 2 +- 9 files changed, 20 insertions(+), 18 deletions(-)

1 0

puppet-vswitch 15.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We eagerly announce the release of: puppet-vswitch 15.4.1: Puppet module for OpenStack Vswitch This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-vswitch Download the package from: https://tarballs.openstack.org/puppet-vswitch/ Please report issues through: https://bugs.launchpad.net/puppet-vswitch/+bugs For more details, please see below. Changes in puppet-vswitch 15.4.0..15.4.1 ---------------------------------------- aea7e21 Prepare the final stable/xena release 7eb7c1c setuptools: Disable auto discovery d8d7339 vs_config: Fix broken idempotency with nil/empty value f5ee885 Do not use service resource to restart openvswitch service 654df9f Update TOX_CONSTRAINTS_FILE for stable/xena 32004ad Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lib/puppet/provider/vs_config/ovs.rb | 14 ++++++++++++-- lib/puppet/type/vs_config.rb | 15 +++++++++++++++ manifests/dpdk.pp | 14 +++++++++++--- manifests/ovs.pp | 14 +++++++++++--- metadata.json | 2 +- setup.py | 1 + spec/acceptance/basic_vswitch_spec.rb | 25 ++++++++++++++++++++++++- spec/classes/vswitch_dpdk_spec.rb | 2 +- spec/classes/vswitch_ovs_spec.rb | 2 +- tox.ini | 2 +- 11 files changed, 79 insertions(+), 13 deletions(-)

1 0

puppet-neutron 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are delighted to announce the release of: puppet-neutron 19.5.0: Puppet module for OpenStack Neutron This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-neutron Download the package from: https://tarballs.openstack.org/puppet-neutron/ Please report issues through: https://bugs.launchpad.net/puppet-neutron/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The new "sdn_token" parameter to authenticate sdn has been added to the "neutron::plugins::ml2::mellanox::mlnx_sdn_assist" class. * The new "neutron::server::notifications::nova::live_migration_events" parameter has been added. This parameter controls the "[nova] live_migation_events" parameter in "neutron.conf". * The "neutron::agents::ovn_metadata" class now supports the following two new parameters. * "ovsdb_probe_interval" parameter to configure "[ovn]ovsdb_probe_interval" in ovn metadata agent config file. * "ovsdb_retry_max_interval" parameter to configure "[ovn]ovsdb_retry_max_interval" in ovn metadata agent config file. * The "neutron::plugins::ml2::ovn" class now supports the following two new parameters. * "ovsdb_retry_max_interval" * "ovsdb_probe_interval" Bug Fixes ********* * The independent ovn plugin package("pythonN-networking-ovn") is no longer required. The package is no longer available since Ussuri, and all codes are now included in the base neutron package. * The "neutron-ovn-metadata-agent" package is now installed in Ubuntu and Debian. * Bug #1987460 (https://bugs.launchpad.net/puppet- neutron/+bug/1987460): Previously the "neutron::agents::ml2::mlnx" class causes duplicate resources when used with the "neutron::agents::dhcp" class or the "neutron::agents::l3" class. Now it is possible to workaround the error by implementing the following mitigation. * Include the "neutron::agents::ml2::mlnx" class AFTER the "neutron::agents::dhcp" class or the "neutron::agents::l3" * Set the "interface_driver" parameter and the "dhcp_broadcast_reply" parameter consistently. Changes in puppet-neutron 19.4.0..19.5.0 ---------------------------------------- 7008f718 Prepare the final stable/xena release 4a41c221 Fix wrong bridge name if bridge_mappings is commma-separated string 5948c710 setuptools: Disable auto discovery aecfaa35 ovn: Do not expect the separate plugin package 1f26bbfd mlnx: Allow workaround for duplicate resources 3677b7aa [ovn metadata] Add more tunable parameters 9d553d51 ml2+ovn: Add more tunable parameters for OVN DB connections b59fca5c ml2+ovs: Accept a string value for permitted_ethertypes 7864f0a8 NSX Plugin: nsx_api_password should be secret 7d106037 Fix the ignored unit test case for dhcp-agent configuration fc225e54 Add support for [nova] live_migation_events 4f2eda54 Change authentication method for Mellanox sdn controller 2c16d3b4 Remove TripleO job 2eeeeaf8 Update TOX_CONSTRAINTS_FILE for stable/xena d6cf20bf Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 25 ------- .../ovn_metadata_agent_config/ini_setting.rb | 2 +- lib/puppet/type/ovn_metadata_agent_config.rb | 2 +- manifests/agents/ml2/mlnx.pp | 14 +++- manifests/agents/ml2/ovs.pp | 10 +-- manifests/agents/ovn_metadata.pp | 15 +++- manifests/params.pp | 6 +- manifests/plugins/ml2/mellanox/mlnx_sdn_assist.pp | 10 ++- manifests/plugins/ml2/ovn.pp | 20 ++++-- manifests/plugins/nsx.pp | 2 +- manifests/server/notifications/nova.pp | 8 +++ metadata.json | 2 +- .../notes/add_token_auth-daa888e87da725da.yaml | 4 ++ .../notes/bug-1945973-65195b6dae2009e5.yaml | 10 +++ .../notes/bug-1987460-c5bfc6d98ccd3375.yaml | 14 ++++ .../live_migration_events-84fc814cb28a8a68.yaml | 6 ++ ...n-metadata-tunning-params-9232d7638488ae0d.yaml | 12 ++++ .../notes/ovn-tunables-0f917de23d4c1274.yaml | 8 +++ setup.py | 1 + spec/classes/neutron_agents_dhcp_spec.rb | 64 +++++++++--------- spec/classes/neutron_agents_ml2_ovs_spec.rb | 79 +++++++++++++++++----- spec/classes/neutron_agents_ovn_metadata_spec.rb | 43 ++++++------ .../neutron_plugins_ml2_mlnx_sdn_assist_spec.rb | 2 + spec/classes/neutron_plugins_ml2_ovn_spec.rb | 6 +- spec/classes/neutron_plugins_nsx_spec.rb | 4 +- .../neutron_server_notifications_nova_spec.rb | 3 + .../ovn_metadata_agent_config/ini_setting_spec.rb | 4 +- tox.ini | 2 +- 29 files changed, 248 insertions(+), 131 deletions(-)

1 0

keystonemiddleware 10.3.0 (bobcat)
by no-reply＠openstack.org 17 May '23

17 May '23

We are stoked to announce the release of: keystonemiddleware 10.3.0: Middleware for OpenStack Identity This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 10.3.0 ^^^^^^ New Features * [blueprint support-oauth2-mtls (https://blueprints.launchpad.net/keystone/+spec/support- oauth2-mtls)] The oauth2_mtls_token filter has been added for accepting or denying incoming requests containing OAuth 2.0 certificate-bound access tokens that are obtained from keystone identity server by users through their OAuth 2.0 credentials and Mutual-TLS certificates. Changes in keystonemiddleware 10.2.0..10.3.0 -------------------------------------------- 92cdf8a Add timeout for requests a59020f OAuth 2.0 Mutual-TLS Support 1c820f0 Add missing doc requirements Diffstat (except docs and test files) ------------------------------------- keystonemiddleware/ec2_token.py | 9 +- keystonemiddleware/oauth2_mtls_token.py | 156 +++++++++ keystonemiddleware/s3_token.py | 12 +- .../unit/test_oauth2_mtls_token_middleware.py | 373 +++++++++++++++++++++ .../bp-support-oauth2-mtls-2d2686c9d5b1fe1f.yaml | 8 + setup.cfg | 1 + 8 files changed, 668 insertions(+), 4 deletions(-)

1 0

glance_store 4.1.1 (zed)
by no-reply＠openstack.org 17 May '23

17 May '23

We are excited to announce the release of: glance_store 4.1.1: OpenStack Image Service Store Library This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 4.1.1 ^^^^^ Security Issues * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Changes in glance_store 4.1.0..4.1.1 ------------------------------------ e9d2509 Add force to os-brick disconnect 3d3467d Fix tox4 error 8034cdc Update TOX_CONSTRAINTS_FILE for stable/zed c05c7e5 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder.py | 5 ++++- glance_store/common/attachment_state_manager.py | 3 ++- releasenotes/notes/bug-2004555-4fd67fce86c07461.yaml | 11 +++++++++++ tox.ini | 7 +++---- 7 files changed, 24 insertions(+), 9 deletions(-)

1 0

nova 27.1.0 (antelope)
by no-reply＠openstack.org 17 May '23

17 May '23

We are overjoyed to announce the release of: nova 27.1.0: Cloud computing fabric controller This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 27.1.0 ^^^^^^ Upgrade Notes * Configuration of service user tokens is now **required** for all Nova services to ensure security of block-storage volume data. All Nova configuration files must configure the "[service_user]" section as described in the documentation. See https://bugs.launchpad.net/nova/+bug/2004555 for more details. (https://docs.openstack.org/nova/latest/admin/configuration /service-user-token.html) Changes in nova 27.0.0..27.1.0 ------------------------------ 09f85a8a92 CI: fix backport validator for new branch naming 6eab57952e Bump nova-ceph-multstore timeout a02f966873 Revert "Debug Nova APIs call failures" eb3fe4ddc6 Have host look for CPU controller of cgroupsv2 location. 1f781423ee Enable use of service user token with admin context efb01985db Use force=True for os-brick disconnect during delete fa2ba3ab2c Handle zero pinned CPU in a cell with mixed policy 2cf835be82 Reproduce asym NUMA mixed CPU policy bug acb511652c Save cell socket correctly when updating host NUMA topology 29e3f2f2ab Reproduce bug 1995153 47b6850bb1 [stable-only] Update TOX_CONSTRAINTS_FILE for stable/2023.1 d081938e22 [stable-only] Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 3 +- .../admin/configuration/cross-cell-resize.rst | 2 +- .../admin/configuration/service-user-token.rst | 59 +++++++++++ .../admin/migrate-instance-with-snapshot.rst | 2 +- nova/api/openstack/wsgi.py | 6 -- nova/cmd/status.py | 11 ++ nova/network/neutron.py | 8 +- nova/service_auth.py | 6 +- .../functional/regressions/test_bug_1595962.py | 1 + .../functional/regressions/test_bug_1995153.py | 107 ++++++++++++++++++++ .../unit/virt/libvirt/volume/test_fibrechannel.py | 20 ++++ .../unit/virt/libvirt/volume/test_storpool.py | 16 ++- .../unit/virt/libvirt/volume/test_vzstorage.py | 8 +- nova/virt/hardware.py | 11 +- nova/virt/hyperv/vmops.py | 2 +- nova/virt/hyperv/volumeops.py | 12 +-- nova/virt/libvirt/driver.py | 7 +- nova/virt/libvirt/host.py | 31 +++++- nova/virt/libvirt/volume/fibrechannel.py | 7 +- nova/virt/libvirt/volume/fs.py | 2 +- nova/virt/libvirt/volume/iscsi.py | 7 +- nova/virt/libvirt/volume/lightos.py | 7 +- nova/virt/libvirt/volume/nvme.py | 6 +- nova/virt/libvirt/volume/quobyte.py | 2 +- nova/virt/libvirt/volume/scaleio.py | 7 +- nova/virt/libvirt/volume/smbfs.py | 2 +- nova/virt/libvirt/volume/storpool.py | 5 +- nova/virt/libvirt/volume/volume.py | 2 +- nova/virt/libvirt/volume/vzstorage.py | 5 +- nova/volume/cinder.py | 8 +- .../notes/service-user-token-421d067c16257782.yaml | 11 ++ tools/check-cherry-picks.sh | 2 +- tox.ini | 4 +- 65 files changed, 859 insertions(+), 187 deletions(-)

1 0

puppet-ironic 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are jazzed to announce the release of: puppet-ironic 19.5.0: Puppet module for OpenStack Ironic This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-ironic Download the package from: https://tarballs.openstack.org/puppet-ironic/ Please report issues through: https://bugs.launchpad.net/puppet-ironic/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The "ironic::conductor" class now supports the following two new parameters. * "heartbeat_interval" * "heartbeat_timeout" * The new "ironic::disk_utils" class has been added. * The new "ironic::pxe::tftp_use_xinetd" parameter has been added. When this parameter is set to "false", the ironic-dnsmasq-tftp- server service, which actually manages a dnsmasq process, is used instead of xinetd, to implement TFTP server. Note that the dnsmasq service is currently available only in RDO. * The pxe parameter *uefi_pxe_bootfile_name* is now managed by puppet, keeping the ironic default of *bootx64.efi*. The shim EFI binary is copied to the TFTP root directory, to a file named the value of *uefi_pxe_bootfile_name*. The grub EFI binary is copied to the TFTP root directory to a file named *grubx64.efi*. With these changes, using the pxe boot driver with UEFI boot will result in a grub network boot which is Secure Boot capable. Bug Fixes ********* * Now the "ironic::pxe" class properly installs the pxelinux.0 file using the separate "pxelinux" package in Debian and Ubuntu. The new "pxelinux_file_path" parameter can be used to determine the source path to locate the file. When this parameter is set to false then the class does not manage the file. * The wrong source directory to copy syslinux files in Debiand or Ubuntu has been fixed. * Fixed an issue where dnsmasq DHCP configuration for ironic- inspector would point to the wrong UEFI iPXE bootfile. See bug: 1952652 (https://bugs.launchpad.net/puppet-ironic/+bug/1952652) * Now the "tftpd-hap" package is installed insted of the "tftpd" package in Debian and Ubuntu. Changes in puppet-ironic 19.4.0..19.5.0 --------------------------------------- 1af3df3 Prepare the final stable/xena release 61f8ec1 Fix efi file paths in RHEL 596cd4c Copy shim and grub efi binaries to tftp root 181cb07 inspector: Fix wrong group of policy file 0d8437c setuptools: Disable auto discovery 8718318 Debian/Ubuntu: Fix installation of pxelinux.0 and syslinux files b12fcfe Debian/Ubuntu: The staging driver package is not available 6048343 Debian/Ubuntu: Do not use the ironic-inspector-dnsmasq service 1fcfe39 conductor: Support tuning of heartbeats 6aa42e8 Add support for [disk_utils] parameters fdf29c6 Debian/Ubuntu: Use tftpd-hpa instead of tftpd d30bb0e Refactor unit tests of ironic::pxe 3e6254b CentOS 9: Fix unit tests for ironic::pxe 7e1f420 Add support for MultiStrOpt (inspector) e9a5508 pxe: Create tftp_root directory before starting dnsmasq a51fce3 Support use of dnsmasq as tftp service d0bbd07 Fix invalid dependencies 2688458 Fix name of iPXE efi bootrom 7b15d40 Remove TripleO job a83a3dc Update TOX_CONSTRAINTS_FILE for stable/xena 5eeb1b1 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - .../{ini_setting.rb => openstackconfig.rb} | 4 +- lib/puppet/type/ironic_inspector_config.rb | 12 +- manifests/conductor.pp | 13 + manifests/disk_utils.pp | 61 +++++ manifests/drivers/pxe.pp | 19 +- manifests/drivers/staging.pp | 13 +- manifests/inspector.pp | 36 ++- manifests/inspector/policy.pp | 2 +- manifests/keystone/auth.pp | 4 +- manifests/params.pp | 48 +++- manifests/pxe.pp | 179 ++++++++++--- manifests/pxe/common.pp | 18 +- metadata.json | 2 +- .../conductor-heartbeat-d92790f3e6a59c4b.yaml | 8 + .../debian-syslinux-files-c36f21ae936c0594.yaml | 12 + .../notes/disk_utils-ff85c8b00595d8b8.yaml | 4 + ...q-uefi-ipxe-boot-filename-83fefc1e48ea7f4f.yaml | 8 + .../notes/tftp_use_xinetd-710c4eb59d3b0501.yaml | 8 + .../uefi_pxe_bootfile_name-eb2244dc9b9fd954.yaml | 12 + .../use-tftpd-hpa-in-debian-07f5429e791ab883.yaml | 5 + setup.py | 1 + spec/classes/ironic_conductor_spec.rb | 6 + spec/classes/ironic_disk_utils_spec.rb | 60 +++++ spec/classes/ironic_drivers_pxe_spec.rb | 9 +- spec/classes/ironic_drivers_staging_spec.rb | 9 +- spec/classes/ironic_inspector_policy_spec.rb | 4 +- spec/classes/ironic_inspector_spec.rb | 18 +- spec/classes/ironic_pxe_spec.rb | 287 ++++++++++++++++++--- ...ini_setting_spec.rb => openstackconfig_spec.rb} | 18 +- spec/unit/type/ironic_inspector_config_spec.rb | 45 ++++ templates/dnsmasq_tftp_server.erb | 8 + templates/inspector_dnsmasq_http.erb | 4 +- tox.ini | 2 +- 35 files changed, 800 insertions(+), 141 deletions(-)

1 0

glance_store 4.3.1 (antelope)
by no-reply＠openstack.org 17 May '23

17 May '23

We are psyched to announce the release of: glance_store 4.3.1: OpenStack Image Service Store Library This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 4.3.1 ^^^^^ Security Issues * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Changes in glance_store 4.3.0..4.3.1 ------------------------------------ a7eed02 Add force to os-brick disconnect 54d9449 Run cinder driver unit tests ddc4696 Update TOX_CONSTRAINTS_FILE for stable/2023.1 8d56f71 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder/base.py | 3 ++- releasenotes/notes/bug-2004555-4fd67fce86c07461.yaml | 11 +++++++++++ test-requirements.txt | 1 + tox.ini | 6 +++--- 8 files changed, 20 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b623f81..2eaa226 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,0 +14 @@ coverage!=4.4,>=4.0 # Apache-2.0 +ddt>=1.4.4 # MIT

1 0

glance_store 3.0.1 (yoga)
by no-reply＠openstack.org 17 May '23

17 May '23

We are gleeful to announce the release of: glance_store 3.0.1: OpenStack Image Service Store Library This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 3.0.1 ^^^^^ Security Issues *************** * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Bug Fixes ********* * Now the "project_domain_name" parameter and the "user_domain_name" parameter are properly used by swift backends. Previously these two parameters were ignored and the "*_domain_id" parameters should be set to use a keystone domain different from the default one. * Bug #1970698 (https://bugs.launchpad.net/glance- store/+bug/1970698): Cinder: Fixed exception logging when the image create operation fails due to failing to attach volume to glance host. * Bug #1969373 (https://bugs.launchpad.net/glance- store/+bug/1969373): Cinder Driver: Correct the retry interval from fixed 1 second to exponential backoff for attaching a volume during image create/save operation. Changes in glance_store 3.0.0..3.0.1 ------------------------------------ 2830182 Add force to os-brick disconnect bc9375e Fix tox4 error 4e5b90a Swift: Honor *_domain_name parameters 69fd0dc Cinder: Correct exception logging during attach c6716cb Correct retry interval during attach volume 88bd7fc Update TOX_CONSTRAINTS_FILE for stable/yoga 74fee65 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder.py | 5 +- glance_store/_drivers/swift/utils.py | 33 +++++----- glance_store/common/attachment_state_manager.py | 7 ++- glance_store/common/cinder_utils.py | 4 +- .../unit/common/test_attachment_state_manager.py | 13 +++- .../notes/bug-1620999-8b76a0ad14826197.yaml | 7 +++ .../notes/bug-2004555-4fd67fce86c07461.yaml | 11 ++++ ...ion-logging-during-attach-9546e24189db83c4.yaml | 6 ++ .../fix-interval-in-retries-471155ff34d9f0e9.yaml | 7 +++ tox.ini | 7 +-- 17 files changed, 247 insertions(+), 41 deletions(-)

1 0

keystoneauth1 5.2.0 (bobcat)
by no-reply＠openstack.org 17 May '23

17 May '23

We are satisfied to announce the release of: keystoneauth1 5.2.0: Authentication Library for OpenStack Identity This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/keystoneauth1 Download the package from: https://pypi.org/project/keystoneauth1 For more details, please see below. 5.2.0 ^^^^^ New Features ************ * [blueprint support-oauth2-mtls (https://blueprints.launchpad.net/keystone/+spec/support- oauth2-mtls)] Added a new OAuth2mTlsClientCredential plugin, accessible via the 'v3oauth2mtlsclientcredential' entry point, making possible to authenticate using an OAuth 2.0 Mutual-TLS client credentials. Keystoneauth can now be used to access the OpenStack APIs that use the keystone middleware to support OAuth2.0 mutual-TLS client authentication through the keystone identity server. Bug Fixes ********* * [bug 1998366 (https://bugs.launchpad.net/keystoneauth/+bug/1998366) Federated auth plugins now can work with unversioned auth url (e.g. "http://keystone"). Changes in keystoneauth1 5.1.2..5.2.0 ------------------------------------- 2e40bbf Update master for stable/2023.1 44e5b2d New auth plugin v3oidcdeviceauthz ca28df8 OAuth 2.0 Mutual-TLS Support 192a27a Remove six bef3dfb setup.cfg: Restore python_requires after a typo 737790f Allow federation to work with unversioned auth_url 19db34e Switch to 2023.1 Python3 unit tests and generic template name aaca2b3 Update master for stable/zed be2223c Replace abc.abstractproperty with property and abc.abstractmethod Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- keystoneauth1/_fair_semaphore.py | 4 +- keystoneauth1/_utils.py | 5 +- keystoneauth1/access/access.py | 8 + keystoneauth1/access/service_catalog.py | 5 +- keystoneauth1/discover.py | 7 +- keystoneauth1/exceptions/oidc.py | 9 + keystoneauth1/extras/_saml2/v3/adfs.py | 3 +- keystoneauth1/fixture/serializer.py | 5 +- keystoneauth1/fixture/v3.py | 18 +- keystoneauth1/identity/__init__.py | 10 +- keystoneauth1/identity/base.py | 9 +- keystoneauth1/identity/generic/base.py | 9 +- keystoneauth1/identity/v2.py | 5 +- keystoneauth1/identity/v3/__init__.py | 6 +- keystoneauth1/identity/v3/base.py | 11 +- keystoneauth1/identity/v3/federation.py | 10 +- keystoneauth1/identity/v3/k2k.py | 4 +- .../identity/v3/oauth2_mtls_client_credential.py | 125 +++++++++++ keystoneauth1/identity/v3/oidc.py | 148 ++++++++++++- keystoneauth1/identity/v3/tokenless_auth.py | 5 +- keystoneauth1/loading/_plugins/identity/v3.py | 54 +++++ keystoneauth1/loading/base.py | 4 +- keystoneauth1/session.py | 28 +-- .../unit/identity/test_identity_v3_federation.py | 18 +- .../bp-support-oauth2-mtls-177cda05265ae65c.yaml | 10 + .../notes/bug-1998366-27cd486b46fb56b0.yaml | 6 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 2 + releasenotes/source/zed.rst | 6 + requirements.txt | 5 - setup.cfg | 4 +- 44 files changed, 829 insertions(+), 137 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4f06ae0..30d3d7f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,4 +4,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -21 +16,0 @@ requests>=2.14.2 # Apache-2.0 -six>=1.10.0 # MIT

1 0

python-adjutantclient 1.0.0 (bobcat)
by no-reply＠openstack.org 17 May '23

17 May '23

We are excited to announce the release of: python-adjutantclient 1.0.0: Adjutant API Client Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-adjutantclient Download the package from: https://pypi.org/project/python-adjutantclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- adjutantclient For more details, please see below. Changes in python-adjutantclient 0.12.0..1.0.0 ---------------------------------------------- db795e2 Fix listing and removing roles from users. c50e3fe Fix typo in help text 5a92d90 Bugfix: Six removal introduced regression in v1/users b4ef3e6 Add check-requirements to Zuul tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + adjutantclient/common/base.py | 6 ++++-- adjutantclient/osc/v1/users.py | 8 +++----- adjutantclient/v1/roles.py | 3 ++- adjutantclient/v1/users.py | 2 +- requirements.txt | 4 ++-- test-requirements.txt | 1 - 7 files changed, 13 insertions(+), 12 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 75e7f0e..586e25e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ iso8601>=0.1.11 # MIT -osc-lib>=1.5.1 # Apache-2.0 +osc-lib>=1.8.0 # Apache-2.0 @@ -16 +16 @@ PyYAML>=3.10.0 # MIT -requests!=2.12.2,!=2.13.0,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index fe3f111..5078794 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +6,0 @@ ddt>=1.0.1 # MIT -discover # BSD

1 0

oslo.messaging 14.3.0 (bobcat)
by no-reply＠openstack.org 15 May '23

15 May '23

We exuberantly announce the release of: oslo.messaging 14.3.0: Oslo Messaging API This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.3.0 ^^^^^^ Bug Fixes * Fixed typo in variable names "rabbit_quorum_max_memory_length" and "rabbit_quorum_max_memory_bytes". Please make changes in your config files to correspond correct variables. Changes in oslo.messaging 14.2.0..14.3.0 ---------------------------------------- fd2381c7 Disable greenthreads for RabbitDriver "listen" connections 9b1e2dc4 Update master for stable/2023.1 115cfb5b Fix typo in quorum-related variables for RabbitMQ Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_rabbit.py | 12 ++++++++---- oslo_messaging/_utils.py | 3 +++ releasenotes/notes/rabbit_quorum_typo-9c06a9fd8d767f53.yaml | 6 ++++++ releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 6 files changed, 26 insertions(+), 6 deletions(-)

1 0

oslo.policy 4.2.0 (bobcat)
by no-reply＠openstack.org 15 May '23

15 May '23

We jubilantly announce the release of: oslo.policy 4.2.0: Oslo Policy library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. Changes in oslo.policy 4.1.1..4.2.0 ----------------------------------- 93129eb Revert "Moves supported python runtimes from version 3.8 to 3.10" 67a3d3b Moves supported python runtimes from version 3.8 to 3.10 d80573c Fix deprecated rule logic if the rule was deleted in policy directory. e7b9dd1 Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 20 ++++++++++---------- oslo_policy/policy.py | 1 + releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + setup.cfg | 1 + 5 files changed, 19 insertions(+), 10 deletions(-)

1 0

castellan 4.2.0 (bobcat)
by no-reply＠openstack.org 15 May '23

15 May '23

We are delighted to announce the release of: castellan 4.2.0: Generic Key Manager interface for OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. 4.2.0 ^^^^^ New Features * The Barbican API has been extended to allow secrets to have one or more consumers. This extension has been documented here: https://d ocs.openstack.org/barbican/latest/api/reference/secret_consumers.ht ml This functionality has now been exposed in the castellan client. Users may add, remove or delete consumers by calling new mechods on the SecretManager. Note that this functionality is only available for the Barbican backend. Changes in castellan 4.1.0..4.2.0 --------------------------------- e84db18 Revert "Moves supported python runtimes from version 3.8 to 3.10" 46cb956 Moves supported python runtimes from version 3.8 to 3.10 cecdde7 Update master for stable/2023.1 365618a Add secret consumers documentation and release note 7de4f89 Add force parameter functional tests e65ac5e Add secret consumers functional tests 96027e9 Implement force parameter bc6d87b Add secret consumers 370986e Add support for specifying Vault KV path Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 6 +- castellan/key_manager/barbican_key_manager.py | 76 +++++- castellan/key_manager/key_manager.py | 40 ++- .../key_manager/not_implemented_key_manager.py | 8 +- castellan/key_manager/vault_key_manager.py | 26 +- castellan/options.py | 6 +- .../key_manager/test_barbican_key_manager.py | 287 +++++++++++++++++++++ .../unit/key_manager/test_barbican_key_manager.py | 273 +++++++++++++++++++- .../notes/secret-consumers-0253330a65b6638b.yaml | 10 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 1 + requirements.txt | 2 +- setup.cfg | 1 + 15 files changed, 773 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7a460bc..5dcca67 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ cryptography>=2.7 # BSD/Apache-2.0 -python-barbicanclient>=4.5.2 # Apache-2.0 +python-barbicanclient>=5.5.0 # Apache-2.0

1 0

oslo.cache 3.4.0 (bobcat)
by no-reply＠openstack.org 15 May '23

15 May '23

We are pumped to announce the release of: oslo.cache 3.4.0: Cache storage for OpenStack projects. This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. 3.4.0 ^^^^^ Bug Fixes * [bug 1991250 (https://bugs.launchpad.net/oslo.cache/+bug/1991250) The python-binary-memcached package is only required if sasl_enabled=True. When sasl_enabled=False (default), the memcache_pool backend can be used without the python-binary- memcached package installed. Changes in oslo.cache 3.3.1..3.4.0 ---------------------------------- a720016 Revert "Moves supported python runtimes from version 3.8 to 3.10" 4daef29 Moves supported python runtimes from version 3.8 to 3.10 0e9cd99 Update master for stable/2023.1 edd10f7 Allow bmemcached to be optional for memcache_pool 9c2d978 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_cache/backends/memcache_pool.py | 10 +++++++++- releasenotes/notes/bug-1991250-23bc3463273e5a91.yaml | 7 +++++++ releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + .../source/locale/en_GB/LC_MESSAGES/releasenotes.po | 13 +++++-------- setup.cfg | 1 + 7 files changed, 30 insertions(+), 10 deletions(-)

1 0

taskflow 5.2.0 (bobcat)
by no-reply＠openstack.org 15 May '23

15 May '23

We are pleased to announce the release of: taskflow 5.2.0: Taskflow structured state management library. This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/taskflow Download the package from: https://pypi.org/project/taskflow Please report issues through: https://bugs.launchpad.net/taskflow/+bugs For more details, please see below. 5.2.0 ^^^^^ Upgrade Notes ************* * The minimum redis-py version required is now >= 3.0.0 Bug Fixes ********* * Fixed an issue when the configuration options of the zookeeper jobboard backend were passed as strings, the string ''"False"'' was wrongly interpreted as ''True''. Now the string ''"False"'' is interpreted as the ''False'' boolean. Changes in taskflow 5.1.0..5.2.0 -------------------------------- 352cdb36 Revert "Moves supported python runtimes from version 3.8 to 3.10" 8535f841 Moves supported python runtimes from version 3.8 to 3.10 a2078f4e Fix doc building with Sphinx 6.0 77bc3cb7 Prepare taskflow for sqlalchemy2 dd73b125 Update master for stable/2023.1 086b3e43 Fix parsing of zookeeper jobboard backend options 4ff2d001 Change StrictRedis usage to Redis 56413aa3 Replace abc.abstractproperty with property and abc.abstractmethod Diffstat (except docs and test files) ------------------------------------- ...-zookeeper-option-parsing-f9d37fbc39af47f4.yaml | 7 +++ .../remove-strict-redis-f2a5a924b314de41.yaml | 4 ++ releasenotes/source/2023.1.rst | 6 ++ releasenotes/source/index.rst | 1 + setup.cfg | 1 + taskflow/engines/base.py | 6 +- taskflow/flow.py | 3 +- taskflow/jobs/backends/impl_zookeeper.py | 4 +- taskflow/jobs/base.py | 18 ++++-- taskflow/persistence/backends/impl_sqlalchemy.py | 34 ++++++----- taskflow/persistence/backends/impl_zookeeper.py | 4 +- taskflow/persistence/base.py | 3 +- taskflow/utils/kazoo_utils.py | 29 +++++++--- taskflow/utils/redis_utils.py | 8 +-- 18 files changed, 205 insertions(+), 40 deletions(-)

1 0

stevedore 5.1.0 (bobcat)
by no-reply＠openstack.org 15 May '23

15 May '23

We are delighted to announce the release of: stevedore 5.1.0: Manage dynamic plugins for Python applications This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/stevedore Download the package from: https://pypi.org/project/stevedore Please report issues through: https://bugs.launchpad.net/stevedore/+bugs For more details, please see below. Changes in stevedore 5.0.0..5.1.0 --------------------------------- cc8f04e Revert "Moves supported python runtimes from version 3.8 to 3.10" da129b1 Moves supported python runtimes from version 3.8 to 3.10 43a79dd Update master for stable/2023.1 462be04 Catch NotADirectoryError error Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + setup.cfg | 1 + stevedore/_cache.py | 2 +- 5 files changed, 10 insertions(+), 2 deletions(-)

1 0

glance_store 4.4.0 (bobcat)
by no-reply＠openstack.org 12 May '23

12 May '23

We are thrilled to announce the release of: glance_store 4.4.0: OpenStack Image Service Store Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 4.4.0 ^^^^^ Security Issues * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Changes in glance_store 4.3.0..4.4.0 ------------------------------------ 1d8033e Add force to os-brick disconnect 6741951 Run cinder driver unit tests 27ab8a6 RBD: Wrap RBD calls in native threads e8e9d8d Update master for stable/2023.1 7dc94f7 Do not always import boto3 ea5bab9 rbd: Disable rbd stores if libraries are not available 572e73e cinder: Disable cinder stores if cinderclient is not installed 2c3442a move attachment_update to try block 0c594df Fix misuse of assertTrue 64e2597 Imported Translations from Zanata 6b49171 Replace deprecated UPPER_CONSTRAINTS_FILE variable Diffstat (except docs and test files) ------------------------------------- glance_store/_drivers/cinder/base.py | 3 +- glance_store/_drivers/cinder/store.py | 36 ++++++++++------ glance_store/_drivers/rbd.py | 19 ++++++-- glance_store/_drivers/s3.py | 21 +++++++-- .../notes/bug-2004555-4fd67fce86c07461.yaml | 11 +++++ releasenotes/source/2023.1.rst | 6 +++ releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 32 ++++++++++++-- test-requirements.txt | 1 + tox.ini | 6 +-- 16 files changed, 195 insertions(+), 58 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b623f81..2eaa226 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,0 +14 @@ coverage!=4.4,>=4.0 # Apache-2.0 +ddt>=1.4.4 # MIT

1 0

os-brick 6.3.0 (bobcat)
by no-reply＠openstack.org 12 May '23

12 May '23

We joyfully announce the release of: os-brick 6.3.0: OpenStack Cinder brick library for managing local volume attaches This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 6.3.0 ^^^^^ New Features * FC connector: Added support to "force" and "ignore_errors" parameters on "disconnect_volume" method. Changes in os-brick 6.2.0..6.3.0 -------------------------------- 1b739ed Revert "Fix iSCSI disconnect_volume when flush fails" 570df49 Support force disconnect for FC 8070ac3 Fix iSCSI disconnect_volume when flush fails e04d0de Bump mypy to 1.1.1 9496bb2 LVM: Fix supports_full_pool_create e15edf6 Add Python 3.10 to setup.cfg metadata f184c8a Set packages in setup.cfg a0bc09b Update master for stable/2023.1 653c4c5 Update hacking to 5.0 05052a1 LVM: Fix bare raise on LVM command error Diffstat (except docs and test files) ------------------------------------- os_brick/initiator/connectors/fibre_channel.py | 36 ++++-- .../initiator/connectors/fibre_channel_s390x.py | 11 +- os_brick/initiator/linuxscsi.py | 18 +++ os_brick/local_dev/lvm.py | 4 +- .../initiator/connectors/test_fibre_channel.py | 129 ++++++++++++++++++++- .../connectors/test_fibre_channel_s390x.py | 25 +++- .../fc-force-disconnect-1a33cf46c233dd04.yaml | 5 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 1 + setup.cfg | 4 + test-requirements.txt | 6 +- 12 files changed, 283 insertions(+), 20 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 6593bf4..2019300 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=4.1.0,<4.2.0 # Apache-2.0 +hacking>=5.0.0,<5.1.0 # Apache-2.0 @@ -16 +16 @@ castellan>=3.10.0 # Apache-2.0 -pycodestyle==2.6.0 # MIT +pycodestyle==2.8.0 # MIT @@ -20 +20 @@ bandit>=1.7.0,<1.8.0 # Apache-2.0 -mypy>=0.982 # MIT +mypy>=1.1.1 # MIT

1 0

os-brick 6.2.2 (antelope)
by no-reply＠openstack.org 11 May '23

11 May '23

We are stoked to announce the release of: os-brick 6.2.2: OpenStack Cinder brick library for managing local volume attaches This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 6.2.2 ^^^^^ New Features * FC connector: Added support to "force" and "ignore_errors" parameters on "disconnect_volume" method. Changes in os-brick 6.2.1..6.2.2 -------------------------------- ffb76e1 Support force disconnect for FC Diffstat (except docs and test files) ------------------------------------- os_brick/initiator/connectors/fibre_channel.py | 36 ++++-- .../initiator/connectors/fibre_channel_s390x.py | 11 +- os_brick/initiator/linuxscsi.py | 18 +++ .../initiator/connectors/test_fibre_channel.py | 129 ++++++++++++++++++++- .../connectors/test_fibre_channel_s390x.py | 25 +++- .../fc-force-disconnect-1a33cf46c233dd04.yaml | 5 + 7 files changed, 267 insertions(+), 15 deletions(-)

1 0

os-brick 5.2.3 (yoga)
by no-reply＠openstack.org 11 May '23

11 May '23

We are psyched to announce the release of: os-brick 5.2.3: OpenStack Cinder brick library for managing local volume attaches This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 5.2.3 ^^^^^ New Features * FC connector: Added support to "force" and "ignore_errors" parameters on "disconnect_volume" method. Changes in os-brick 5.2.2..5.2.3 -------------------------------- 111b393 Support force disconnect for FC cc704e9 [stable-only] Pin tox <4 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 + os_brick/initiator/connectors/fibre_channel.py | 35 ++++-- .../initiator/connectors/fibre_channel_s390x.py | 11 +- os_brick/initiator/linuxscsi.py | 18 +++ .../initiator/connectors/test_fibre_channel.py | 129 ++++++++++++++++++++- .../connectors/test_fibre_channel_s390x.py | 25 +++- .../fc-force-disconnect-1a33cf46c233dd04.yaml | 5 + tox.ini | 1 + 9 files changed, 269 insertions(+), 15 deletions(-)

1 0

os-brick 6.1.1 (zed)
by no-reply＠openstack.org 11 May '23

11 May '23

We enthusiastically announce the release of: os-brick 6.1.1: OpenStack Cinder brick library for managing local volume attaches This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 6.1.1 ^^^^^ New Features * FC connector: Added support to "force" and "ignore_errors" parameters on "disconnect_volume" method. Changes in os-brick 6.1.0..6.1.1 -------------------------------- e00d3ca Support force disconnect for FC a7dfaf4 [stable-only] Pin tox <4 ef4982c Update TOX_CONSTRAINTS_FILE for stable/zed cf9a747 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 2 + os_brick/initiator/connectors/fibre_channel.py | 36 ++++-- .../initiator/connectors/fibre_channel_s390x.py | 11 +- os_brick/initiator/linuxscsi.py | 18 +++ .../initiator/connectors/test_fibre_channel.py | 129 ++++++++++++++++++++- .../connectors/test_fibre_channel_s390x.py | 25 +++- .../fc-force-disconnect-1a33cf46c233dd04.yaml | 5 + tox.ini | 7 +- 10 files changed, 274 insertions(+), 18 deletions(-)

1 0

os-traits 3.0.0
by no-reply＠openstack.org 11 May '23

11 May '23

We are excited to announce the release of: os-traits 3.0.0: A library containing standardized trait strings The source is available from: https://opendev.org/openstack/os-traits Download the package from: https://pypi.org/project/os-traits For more details, please see below. Changes in os-traits 2.10.0..3.0.0 ---------------------------------- cff125c Comment to the trait was added 3b0a2ea Add 'COMPUTE_NET_VIRTIO_PACKED' a6ffbcd Update python testing as per zed cycle testing runtime Diffstat (except docs and test files) ------------------------------------- os_traits/compute/net.py | 3 ++- setup.cfg | 4 +--- 2 files changed, 3 insertions(+), 4 deletions(-)

1 0

sushy 4.5.0 (bobcat)
by no-reply＠openstack.org 11 May '23

11 May '23

We are chuffed to announce the release of: sushy 4.5.0: Sushy is a small Python library to communicate with Redfish based systems This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 4.5.0 ^^^^^ Bug Fixes * Add TransferMethod for any general error that mentions it. * Add TransferProtocolType for any general error that mentions it * In some cases registries might not be available because the our check for the registry language did not account for a possible country suffix. The logic was improved to take it into account. * An issue was encountered on some HPE iLO supported machines where the Baseboard Management Controller would respond with a HTTP 400 error and an error message indicating the requested operation was invalid for the then system state. For example, attempting to change the power state via the BMC shortly after previously changing the power state. We now attempt to retry within the permitted number of retries when this error is encountered. Changes in sushy 4.4.2..4.5.0 ----------------------------- eee778a Retry on ilo state error a1eef45 Update pep8 dep hacking to latest: v6 c416bf1 Handle TransferMethod in vmedia insertion 2506b87 Add TransferProtocolType for any general error that mentions it a59cf6c Exclude all files starting with . from flake8 tests 4a40143 Update master for stable/2023.1 fbf44e9 Handle non-default language for registries Diffstat (except docs and test files) ------------------------------------- .../handle_transfer_method-a51d5a17e381ebee.yaml | 4 + ...more-transferprotocoltype-739ce8bdedbcb51c.yaml | 4 + ...fault-language-registries-f73bdecc98ba2cc8.yaml | 7 + ...retry-ilo-not-ready-error-0b4dce882282eaac.yaml | 10 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 1 + sushy/connector.py | 37 +- sushy/resources/base.py | 7 +- sushy/resources/manager/virtual_media.py | 27 +- sushy/resources/registry/message_registry_file.py | 8 +- .../bios_attribute_registry_file_zthardware.json | 19 + .../bios_attribute_registry_zthardware.json | 75 ++++ .../transfer_method_required_error.json | 16 + .../transfer_proto_required_error2.json | 16 + .../unit/resources/manager/test_virtual_media.py | 22 +- .../resources/registry/test_attribute_registry.py | 38 ++ tox.ini | 4 +- 20 files changed, 811 insertions(+), 13 deletions(-)

1 0

designate-tempest-plugin 0.18.0 (bobcat)
by no-reply＠openstack.org 11 May '23

11 May '23

We joyfully announce the release of: designate-tempest-plugin 0.18.0: OpenStack DNS As A Service (Designate) Functional Tests This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/designate-tempest-plugin Download the package from: https://tarballs.openstack.org/designate-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/designate/+bugs For more details, please see below. Changes in designate-tempest-plugin 0.17.0..0.18.0 -------------------------------------------------- 64a70ab Fix shared zones tests for scoped tokens fdbe35c Extending "Shared Zones" test coverage f4935ea Accommodate stable branches with scoped tokens 1f63edc Re-enable the tempest tests and add Antelope 288cdcf Update designate-tempest-plugin "direction change" 5eb6221 Update the README file to use tox -e all Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 + README.rst | 16 +- .../services/dns/v2/json/shared_zones_client.py | 17 +- .../services/dns/v2/json/zones_client.py | 20 +- 18 files changed, 898 insertions(+), 93 deletions(-)

1 0

python-adjutantclient 0.12.1 (antelope)
by no-reply＠openstack.org 11 May '23

11 May '23

We are jazzed to announce the release of: python-adjutantclient 0.12.1: Adjutant API Client Library This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/python-adjutantclient Download the package from: https://pypi.org/project/python-adjutantclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- adjutantclient For more details, please see below. Changes in python-adjutantclient 0.12.0..0.12.1 ----------------------------------------------- 6ac4de4 Fix listing and removing roles from users. 331caba Bugfix: Six removal introduced regression in v1/users d6951ad Fix typo in help text 2cba0db Update TOX_CONSTRAINTS_FILE for stable/2023.1 4af5091 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- adjutantclient/common/base.py | 6 ++++-- adjutantclient/osc/v1/users.py | 8 +++----- adjutantclient/v1/roles.py | 3 ++- adjutantclient/v1/users.py | 2 +- tox.ini | 2 +- 6 files changed, 12 insertions(+), 11 deletions(-)

1 0

ironic-lib 5.5.0 (bobcat)
by no-reply＠openstack.org 11 May '23

11 May '23

We are delighted to announce the release of: ironic-lib 5.5.0: Ironic common library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-lib For more details, please see below. 5.5.0 ^^^^^ New Features ************ * Adds the capability for the "json_rpc" client to identify and utilize a specific port from the supplied "topic" field as opposed to the default configured port. Bug Fixes ********* * Fixes a bug when erasing a partition table: the corresponding I/O needs to be synchronous in order to avoid masking failed write requests to broken devices. Changes in ironic-lib 5.4.0..5.5.0 ---------------------------------- 853bedc Upgrade to latest hacking - v6 0a62259 Add jsonrpc client port capability 7a00c0d Exclude all files starting with . from flake8 tests ec6ba65 Use direct writes when erasing the GPT Diffstat (except docs and test files) ------------------------------------- ironic_lib/disk_utils.py | 7 ++++--- ironic_lib/json_rpc/client.py | 23 ++++++++++++++++++---- .../add-port-to-rpc-client-2f2f0cd60547843f.yaml | 6 ++++++ .../fix-dd-async-gpt-erasure-bbc6b084b0344d30.yaml | 6 ++++++ tox.ini | 4 ++-- 7 files changed, 67 insertions(+), 21 deletions(-)

1 0

python-ironicclient 5.2.0 (bobcat)
by no-reply＠openstack.org 11 May '23

11 May '23

We are psyched to announce the release of: python-ironicclient 5.2.0: OpenStack Bare Metal Provisioning API Client Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-ironicclient Download the package from: https://pypi.org/project/python-ironicclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- ironicclient For more details, please see below. 5.2.0 ^^^^^ New Features * The "--config-drive" argument to the "node deploy" CLI command, as well as the underlying "configdrive" argument to the "set_provision_state" call now accept a JSON file with a dictionary. * Most of the node action commands now support providing several nodes. The nodes are processed sequentially, the process is stopped on first failure. * The "wait_for_provision_state" Python call now supports several nodes. Changes in python-ironicclient 5.1.0..5.2.0 ------------------------------------------- c2f1573 Update dependencies for pep8: to hacking v6 e914086 Accept configdrive as a JSON file 138d797 Update master for stable/2023.1 0fd4c65 Allow several nodes for most node actions Diffstat (except docs and test files) ------------------------------------- ironicclient/common/utils.py | 23 ++ ironicclient/osc/v1/baremetal_node.py | 178 +++++----- ironicclient/v1/node.py | 122 ++++--- .../notes/configdrive-json-b9d173dde111cf22.yaml | 6 + .../notes/multinode-actions-9f682ad5172f032f.yaml | 8 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 1 + tox.ini | 4 +- 11 files changed, 539 insertions(+), 273 deletions(-)

1 0

python-neutronclient 10.0.0 (bobcat)
by no-reply＠openstack.org 11 May '23

11 May '23

We enthusiastically announce the release of: python-neutronclient 10.0.0: CLI and Client Library for OpenStack Networking This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. 10.0.0 ^^^^^^ Prelude ******* This new version of "python-neutronclient" does not include the command line interface code. The "neutron" script is no longer supported. This project only contains the OpenStack Client bindings that are currently being moved to OpenStack SDK <https://bugs.launchpad.net/neutron/+bug/1999774>_. Deprecation Notes ***************** * This project no longer provides CLI support. All code has been removed. Please use openstack CLI instead. See openstack CLI command list (https://docs.openstack.org/python-openstackclient/latest/cli /command-list.html). Changes in python-neutronclient 9.0.0..10.0.0 --------------------------------------------- 52653c9 Remove the CLI code from the Neutron client. 0b271d3 OSC: Remove BGP calls to neutronclient 3071dfb Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 52 - README.rst | 3 +- .../contributor/client_command_extensions.rst | 97 -- neutron_test.sh | 165 --- neutronclient/osc/utils.py | 10 + .../osc/v2/dynamic_routing/bgp_dragent.py | 89 +- neutronclient/osc/v2/dynamic_routing/bgp_peer.py | 38 +- .../osc/v2/dynamic_routing/bgp_speaker.py | 92 +- neutronclient/shell.py | 654 ----------- .../adv-svcs/test_readonly_neutron_fwaas.py | 42 - .../adv-svcs/test_readonly_neutron_vpn.py | 57 - .../osc/v2/dynamic_routing/test_bgp_dragent.py | 30 +- .../unit/osc/v2/dynamic_routing/test_bgp_peer.py | 35 +- .../osc/v2/dynamic_routing/test_bgp_speaker.py | 30 +- .../unit/qos/test_cli20_bandwidth_limit_rule.py | 137 --- .../unit/qos/test_cli20_minimum_bandwidth_rule.py | 143 --- .../unit/test_cli20_network_ip_availability.py | 54 - .../unit/vpn/test_cli20_ipsec_site_connection.py | 342 ------ .../notes/remove-cli-code-53969e9aa927e530.yaml | 12 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 1 + requirements.txt | 1 + setup.cfg | 287 ----- tools/neutron.bash_completion | 27 - tox.ini | 5 - 105 files changed, 221 insertions(+), 15518 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b85e6b6..2e9e22d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,0 +13 @@ netaddr>=0.7.18 # BSD +openstacksdk>=1.0.0 # Apache-2.0

1 0

neutron-lib 3.6.0 (bobcat)
by no-reply＠openstack.org 11 May '23

11 May '23

We eagerly announce the release of: neutron-lib 3.6.0: Neutron shared routines and utilities This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 3.6.0 ^^^^^ New Features * Add API extensions to advertise the support of standard attributes with FWaaS v2 resources: "standard-attr-fwaas-v2". * A OVS port type "OVS_DPDK") has been added. OVS_DPDK_PORT_TYPES was extended with new OVS port type. * A definition for API extension: "external-gateway-multihoming". Allows multiple gateway ports to be configured per router for the L3 service plugins implementing this functionality. * A definition for API extension: "enable-default-route-ecmp". Allows ECMP to be enabled or disabled for default routes inferred from subnets of router's gateway ports. * A definition for API extension: "enable-default-route-bfd". Allows BFD to be enabled or disabled for default routes inferred from subnets of router's gateway ports. * New API definition: "network-ha". This boolean field can be used only during the network creation. If enabled, the Neutron server will create a "ha_router_networks" register, that binds the project with the network and represents the only high availability network that can be created per project. Changes in neutron-lib 3.5.0..3.6.0 ----------------------------------- d5884bb New ``network-ha`` API definition 010c790 Remove an unused exception ba77e76 DPDK datapath type added 2108620 Add a shim extension standard-attr-fwaas-v2 e8f1e02 port-hint-ovs-tx-steering: Add missing api-ref response sample 72cd6f3 Drop "__autocommit=False" from context manager 8728076 New api-def: allowedaddresspairs-atomic e52a937 ext-gw-multihoming: api-def and api-ref 724d1d1 doc: Remove fwaas v2 deprecation message a7b950c FUP Suppress IPv6 metadata DAD failure and delete address Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/fwaas-v2.inc | 9 - api-ref/source/v2/networks.inc | 8 + api-ref/source/v2/parameters.yaml | 33 ++- api-ref/source/v2/ports.inc | 162 ++++++++++++ api-ref/source/v2/routers.inc | 278 +++++++++++++++++++++ .../port-add-allowed-address-pairs-request.json | 10 + .../port-add-allowed-address-pairs-response.json | 51 ++++ .../samples/ports/port-bind-create-response.json | 1 + .../port-remove-allowed-address-pairs-request.json | 10 + ...port-remove-allowed-address-pairs-response.json | 46 ++++ .../router-add-external-gateways-request.json | 16 ++ .../router-add-external-gateways-response.json | 73 ++++++ .../router-remove-external-gateways-request.json | 9 + .../router-remove-external-gateways-response.json | 63 +++++ .../router-update-external-gateways-request.json | 10 + .../router-update-external-gateways-response.json | 75 ++++++ neutron_lib/api/definitions/__init__.py | 12 + .../api/definitions/allowedaddresspairs_atomic.py | 38 +++ neutron_lib/api/definitions/base.py | 6 + .../api/definitions/firewall_v2_stdattrs.py | 33 +++ .../api/definitions/l3_enable_default_route_bfd.py | 48 ++++ .../definitions/l3_enable_default_route_ecmp.py | 47 ++++ .../api/definitions/l3_ext_gw_multihoming.py | 49 ++++ neutron_lib/api/definitions/network_ha.py | 43 ++++ neutron_lib/api/definitions/qos_gateway_ip.py | 19 +- neutron_lib/api/validators/__init__.py | 42 +++- neutron_lib/constants.py | 4 +- neutron_lib/db/api.py | 5 +- neutron_lib/db/model_base.py | 8 + neutron_lib/exceptions/l3_ext_gw_multihoming.py | 29 +++ neutron_lib/plugins/ml2/ovs_constants.py | 6 +- .../definitions/test_allowedaddresspairs_atomic.py | 20 ++ .../api/definitions/test_firewall_v2_stdattrs.py | 20 ++ .../test_l3_enable_default_route_bfd.py | 24 ++ .../test_l3_enable_default_route_ecmp.py | 24 ++ .../unit/api/definitions/test_l3_multi_ext_gw.py | 21 ++ ...ion-standard-attr-fwaasv2-7e9250015afbe112.yaml | 5 + .../add-ovs-port-type-dpdk-b00f5bda3161773f.yaml | 6 + ...owedaddresspairs-atomic-apidef-6f9d6865854vwfrs | 6 + .../l3-ext-gw-multihoming-1a7b556c541923cf.yaml | 14 ++ .../notes/network-ha-e6e0c3202b084762.yaml | 8 + requirements.txt | 2 +- 42 files changed, 1355 insertions(+), 38 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bfe83f8..de70967 100644 --- a/requirements.txt +++ b/requirements.txt @@ -20 +20 @@ oslo.context>=2.22.0 # Apache-2.0 -oslo.db>=4.44.0 # Apache-2.0 +oslo.db>=12.1.0 # Apache-2.0

1 0

openstack-heat 18.0.1 (yoga)
by no-reply＠openstack.org 09 May '23

09 May '23

We are jazzed to announce the release of: openstack-heat 18.0.1: OpenStack Orchestration This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/openstack-heat Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. 18.0.1 ^^^^^^ Bug Fixes * Honor "hidden" parameter in get stack environment API. Now values passed to hidden parameters are replaced by '******', similarly to the other APIs such as show stack details API. Changes in openstack-heat 18.0.0..18.0.1 ---------------------------------------- 41a6b9136 Added a unit test for get_environment_hidden_param c50d720aa Honor 'hidden' parameter in 'stack environment show' command 487fadf5c stable-only: Pin bandit to 1.7.4 8eaaf6fca Decode UTF-8 body data in SwiftSignal 391684581 Fix setting the tempest virtual env constraints env var 83a983678 Ignore resource_data decryption errors c3a8e3d64 Allow deleting user_creds when can't be decrypted f4904ff7a zuul: Declare queue at top level 54beb1df9 Followup to I7736373d03c23884158e4a1d41defafb4e2b8a4c f9f5d2cc3 Don't always replace FAILED ServerGroup resources 08a0a218e Use openstack commands in upgrade plugin 154691d21 Fix parameter merging with merge strategies 976bcf9ef Use constraints when creating venv for grenade ecca0fcbe Fix AttributeError in Python 3.8 80ce36214 Drop lower-constraints.txt and its testing 03e4f9af6 Make grenade job voting again d997d70ca Log parameters merged f05079805 Use previous parameter merge strategy b95e6025f Use constraints when creating tempest venv eefb92161 Use f36 instead of f33 for testing c2b8f3c71 Remove TripleO job abea5a452 Update TOX_CONSTRAINTS_FILE for stable/yoga 753ff9557 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 10 +- devstack/lib/heat | 6 +- devstack/upgrade/resources.sh | 40 ++++- heat/common/environment_util.py | 36 +++-- heat/common/pluginutils.py | 20 ++- heat/db/sqlalchemy/api.py | 11 +- .../engine/resources/openstack/heat/swiftsignal.py | 2 + .../resources/openstack/neutron/extrarouteset.py | 2 +- .../resources/openstack/nova/server_group.py | 10 ++ heat/engine/service.py | 12 +- heat/engine/stack.py | 6 +- lower-constraints.txt | 161 --------------------- ...ter-in-stack-env-show-cmd-062065545dfef82a.yaml | 6 + requirements.txt | 4 + test-requirements.txt | 2 +- tox.ini | 15 +- 27 files changed, 368 insertions(+), 285 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f263179a1..a6a85292a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. + diff --git a/test-requirements.txt b/test-requirements.txt index bd3032139..62872ccaa 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ pyflakes>=2.1.1 -bandit!=1.6.0,>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0,<1.7.5 # Apache-2.0

1 0

openstack-heat 19.0.1 (zed)
by no-reply＠openstack.org 09 May '23

09 May '23

We are tickled pink to announce the release of: openstack-heat 19.0.1: OpenStack Orchestration This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-heat Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. 19.0.1 ^^^^^^ Bug Fixes * Honor "hidden" parameter in get stack environment API. Now values passed to hidden parameters are replaced by '******', similarly to the other APIs such as show stack details API. Changes in openstack-heat 19.0.0..19.0.1 ---------------------------------------- 89b57e5e2 Added a unit test for get_environment_hidden_param 436ecad65 Honor 'hidden' parameter in 'stack environment show' command 66bba4ad2 stable-only: Pin bandit to 1.7.4 b29266398 Fix setting the tempest virtual env constraints env var 6343b64e7 Decode UTF-8 body data in SwiftSignal af617facc Ignore resource_data decryption errors Diffstat (except docs and test files) ------------------------------------- devstack/upgrade/resources.sh | 32 +++++- heat/db/sqlalchemy/api.py | 11 +- .../engine/resources/openstack/heat/swiftsignal.py | 2 + heat/engine/service.py | 12 ++- ...ter-in-stack-env-show-cmd-062065545dfef82a.yaml | 6 ++ test-requirements.txt | 2 +- 10 files changed, 175 insertions(+), 63 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index bd3032139..62872ccaa 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ pyflakes>=2.1.1 -bandit!=1.6.0,>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0,<1.7.5 # Apache-2.0

1 0

openstack-heat 17.0.2 (xena)
by no-reply＠openstack.org 09 May '23

09 May '23

We are ecstatic to announce the release of: openstack-heat 17.0.2: OpenStack Orchestration This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/openstack-heat Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. 17.0.2 ^^^^^^ Bug Fixes * Honor "hidden" parameter in get stack environment API. Now values passed to hidden parameters are replaced by '******', similarly to the other APIs such as show stack details API. Changes in openstack-heat 17.0.1..17.0.2 ---------------------------------------- 1360cfdfa Fix setting the tempest virtual env constraints env var 31778416b Added a unit test for get_environment_hidden_param 1a49525c5 Honor 'hidden' parameter in 'stack environment show' command b135a9957 Ignore resource_data decryption errors c37ec5180 Allow deleting user_creds when can't be decrypted 782da94b3 zuul: Declare queue at top level ead7cd61b Don't always replace FAILED ServerGroup resources 65fb6c7da Use openstack commands in upgrade plugin b8d09f347 Fix parameter merging with merge strategies 75815c4ac Use constraints when creating venv for grenade b8e27f7c4 Fix AttributeError in Python 3.8 d1c0f6289 Drop lower-constraints.txt and its testing e3ec8946b Make grenade job voting again 92db02a56 Use constraints when creating tempest venv f56ca9632 Log parameters merged 66dd43c65 Use previous parameter merge strategy b32163d9e Use f36 instead of f33 for testing e6a8e66c7 Remove TripleO job 5ea5276a3 Fix None comparision when sorting by `updated_at` Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 11 +- devstack/lib/heat | 6 +- devstack/upgrade/resources.sh | 40 ++++- heat/common/environment_util.py | 36 +++-- heat/common/pluginutils.py | 20 ++- heat/db/sqlalchemy/api.py | 11 +- .../resources/openstack/nova/server_group.py | 10 ++ heat/engine/service.py | 12 +- heat/engine/stack.py | 11 +- lower-constraints.txt | 163 --------------------- ...ter-in-stack-env-show-cmd-062065545dfef82a.yaml | 6 + requirements.txt | 4 + test-requirements.txt | 2 +- tox.ini | 7 - 24 files changed, 330 insertions(+), 234 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2f54c37aa..29ca4b36a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. + diff --git a/test-requirements.txt b/test-requirements.txt index bd3032139..62872ccaa 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ pyflakes>=2.1.1 -bandit!=1.6.0,>=1.1.0 # Apache-2.0 +bandit!=1.6.0,>=1.1.0,<1.7.5 # Apache-2.0

1 0

cliff 4.3.0 (bobcat)
by no-reply＠openstack.org 09 May '23

09 May '23

We are ecstatic to announce the release of: cliff 4.3.0: Command Line Interface Formulation Framework This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/cliff Download the package from: https://pypi.org/project/cliff Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cliff For more details, please see below. Changes in cliff 4.2.0..4.3.0 ----------------------------- 72e81d7 Removing helper functions providing Python < 3.3 compatibility Diffstat (except docs and test files) ------------------------------------- cliff/formatters/table.py | 14 ++++++---- cliff/utils.py | 67 ++++++----------------------------------------- 3 files changed, 20 insertions(+), 68 deletions(-)

1 0

osc-lib 2.8.0 (bobcat)
by no-reply＠openstack.org 09 May '23

09 May '23

We are satisfied to announce the release of: osc-lib 2.8.0: OpenStackClient Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/osc-lib Download the package from: https://pypi.org/project/osc-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/osc-lib For more details, please see below. 2.8.0 ^^^^^ New Features * A new column formatter, "SizeFormatter", is available. This can be used to format file sizes in human readable format. Changes in osc-lib 2.7.0..2.8.0 ------------------------------- db9cdc9 setup.cfg: Replace dash-separated config 6152b68 Add 'SizeColumn' formatter d0d30b3 Update master for stable/2023.1 12900da tox 4 compatibility 1deaaec formatters: Cast *all* columns before outputting Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - osc_lib/cli/format_columns.py | 13 ++++ .../notes/add-size-column-5424c40af74688df.yaml | 5 ++ releasenotes/source/2023.1.rst | 6 ++ releasenotes/source/index.rst | 1 + setup.cfg | 18 +++-- tox.ini | 34 ++++---- 8 files changed, 117 insertions(+), 52 deletions(-)

1 0

tempest 34.2.0 (bobcat)
by no-reply＠openstack.org 06 May '23

06 May '23

We are satisfied to announce the release of: tempest 34.2.0: OpenStack Integration Testing This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 34.2.0 ^^^^^^ Prelude ******* This is an intermediate release during the 2023.2 development cycle to make scenario tests server SSHABLE functionality available to plugins and other consumers. Upgrade Notes ************* * Update default value of config option "CONF.identity.v3_entrypoint_type" from adminURL to public. This was deprecated in Q release, and was missed. The default entrypoint used by tempest should be the public one. Changes in tempest 34.1.0..34.2.0 --------------------------------- 8d1521977 Use stable constraint in tox to release Tempest new tag 79fe137cf Add release notes for 2023.2 cycle intermediate release. 657446929 Allow passing validation_resources in scenario 8f9c77b36 Fail create if validation flags do not agree 49c2b3ba8 Allow wait_until=SSHABLE in scenario manager ed1797c12 Actually make volume extend tests validate 04d352458 Wait until SSHABLE in volumes_extend test 05c805f7f Update v3_endpoint_type to use public e64f4c2b0 Simplify definition of fips jobs b15ff9b0f Add project reader to account-generator a3e09f700 Add RBAC new defaults and scope job for stable/zed 80851ad90 rm hardcoded cidr in test_create_server_multi_nic bbb2e0441 Update integrated gates template for grenade skip level job 7fdc60407 Create releasenotes page for tempest 34.0.0 91e2be9eb Switch to the master constraint in tox.ini 9eab9073d Add Tempest gate job for stable/2023.1 eb85cec8b Inherit tempest-extra-tests job from tempest-full-py3 572ac5425 Update "test_list_migrations_in_flavor_resize_situation" to indicate the failing request on timeout. Diffstat (except docs and test files) ------------------------------------- playbooks/enable-fips.yaml | 4 -- ...23.2-intermediate-release-8725d48b96854dce.yaml | 5 ++ .../update-v3-entrypoint-29d56c902439cc03.yaml | 6 +++ releasenotes/source/index.rst | 1 + releasenotes/source/v34.0.0.rst | 6 +++ tempest/api/compute/base.py | 8 +-- .../servers/test_create_server_multi_nic.py | 48 ++++++++++++----- tempest/api/volume/base.py | 10 ++++ tempest/api/volume/test_volumes_extend.py | 2 +- tempest/cmd/account_generator.py | 9 +++- tempest/common/compute.py | 5 ++ tempest/config.py | 6 +-- tempest/scenario/manager.py | 61 ++++++++++++++++++++-- tempest/scenario/test_encrypted_cinder_volumes.py | 4 +- tempest/scenario/test_server_basic_ops.py | 3 +- tempest/scenario/test_volume_boot_pattern.py | 4 +- tempest/test.py | 2 +- zuul.d/integrated-gate.yaml | 26 +++++++-- zuul.d/project.yaml | 12 ++++- zuul.d/stable-jobs.yaml | 24 +++++++++ 22 files changed, 229 insertions(+), 61 deletions(-)

1 0

cinderlib 5.1.0 (antelope)
by no-reply＠openstack.org 04 May '23

04 May '23

We jubilantly announce the release of: cinderlib 5.1.0: Direct usage of Cinder Block Storage drivers without the services This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/cinderlib Download the package from: https://tarballs.openstack.org/cinderlib/ Please report issues through: https://bugs.launchpad.net/cinderlib/+bugs For more details, please see below. Changes in cinderlib 5.0.0..5.1.0 --------------------------------- 18c81f0 Continue 2023.1 (Antelope) development d3c4852 Don't use deprecated config opt name in unit test a123ff5 Fix DBMS storage plugin 436bc6d Fix tox.ini 642fbea Remove unnecessary #egg= URL fragment 0c0879a Open cinderlib for 2023.1 (Antelope) development 09dc1f7 Update master for stable/zed af3a22e remove unicode prefix from code Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 62 ++++++++------ cinderlib/persistence/dbms.py | 41 +++++++++- releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 6 ++ requirements.txt | 8 +- setup.cfg | 1 + tox.ini | 49 ++++++----- 14 files changed, 141 insertions(+), 181 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 1467d1a..e4fb968 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,4 @@ -# restrict cinder to the zed release only -cinder>=21.0.0.0,<22.0.0 # Apache-2.0 -# brick upper bound is controlled by zed/upper-constraints -os-brick>=6.1.0 # Apache-2.0 +# restrict cinder to the 2023.1 series only +cinder>=22.0.0,<23.0.0 # Apache-2.0 +# brick upper bound is controlled by upper-constraints +os-brick>=6.2.0 # Apache-2.0

1 0

openstack-ansible 24.6.0 (xena)
by no-reply＠openstack.org 04 May '23

04 May '23

We contentedly announce the release of: openstack-ansible 24.6.0: Ansible playbooks for deploying OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 24.6.0 ^^^^^^ Other Notes * Erlang will is updated to version 25.0.4, RabbitMQ will be upgraded to version 3.9.28. This will also harmonize RabbitMQ/Erlang versioning for Debian Bullseye. Changes in openstack-ansible 24.5.1..24.6.0 ------------------------------------------- dbdf75d73 Switch spice-html5 source to freedesktop gitlab eb7f45fcd Gather generic masakari facts 27afe79f3 Bump OpenStack-Ansible Xena 547ec8745 Drop `echo` from add-compute.sh script 61796e34b Bump OpenStack-Ansible Xena 5a6baaca3 Fix comment typo in nova install playbook d57536790 Backport openstack_testing from Yoga Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 38 ++++---- playbooks/defaults/repo_packages/gnocchi.yml | 4 +- playbooks/defaults/repo_packages/nova_consoles.yml | 6 +- .../defaults/repo_packages/openstack_services.yml | 36 ++++---- .../defaults/repo_packages/openstack_testing.yml | 100 +++++++++++++++++++++ playbooks/os-masakari-install.yml | 6 ++ playbooks/os-nova-install.yml | 4 +- playbooks/os-tempest-install.yml | 1 + releasenotes/notes/erlang_25-e793db97d730452f.yaml | 7 ++ scripts/add-compute.sh | 2 +- zuul.d/project-templates.yaml | 17 ++-- 11 files changed, 166 insertions(+), 55 deletions(-)

1 0

cinder 20.2.0 (yoga)
by no-reply＠openstack.org 02 May '23

02 May '23

We eagerly announce the release of: cinder 20.2.0: OpenStack Block Storage This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 20.2.0 ^^^^^^ New Features ************ * Dell EMC PowerStore driver: Report trimming/discard support to Nova and Cinder. * Dell EMC PowerMax driver: Report trimming/discard support to Nova and Cinder. * Dell EMC PowerFlex driver: Report trimming/discard support to Nova and Cinder on thin volumes that don't have snapshots. Not doing trim on volumes with snapshots is the vendor's recommendation, but can be overriden with the "report_discard_supported" configuration option. Upgrade Notes ************* * We introduced a new config parameter, "reserved_image_namespaces", that allows operators to set the image properties to filter out from volume image metadata by namespace when uploading a volume to Glance. These properties, if not filtered out, cause failures when uploading images back to Glance. The error will happen on Glance side when the reserved namespaces are used. This option is also useful when an operator wants to use the Glance property protections feature to make some image properties read-only. Bug Fixes ********* * Bug #1910767 (https://bugs.launchpad.net/cinder/+bug/1910767) Fixed the calculation of the allocated capacity for the volume manager. The fix takes into account all volumes that have a host setting, not just volumes with a status of 'in-use' or 'available'. * Bug #1945500 (https://bugs.launchpad.net/cinder/+bug/1945500) Fixed an error when uploading to Glance a previously downloaded glance image when glance multistore is enabled. Glance reserves image properties in the namespace 'os_glance' for its own use and will not allow images to be created with these properties. Additionally, there are image properties, such as those associated with image signature verification, that are stored in a volume's image metadata, which should not be added to a new image when a volume is being uploaded as an image. Thus Cinder will no longer include any volume image metadata in the namespaces "os_glance" and "img_signature" when it creates an image in Glance. Furthermore, because the Glance property protections feature allows an operator to configure specific image properties as read-only, this fix adds a configuration option, "reserved_image_namespaces", that allows an operator to exclude additional image properties by namespace (the "os_glance" and "img_signature" namespaces are *always* excluded). * Bug #2008259 (https://bugs.launchpad.net/cinder/+bug/2008259) Fixed the volume create functionality where non-admin users were able to create multiattach volumes by providing the *multiattach* parameter in the request body. Now we can only create multiattach volumes using a multiattach volume type, which is also the recommended way. Other Notes *********** * Removed the ability to create multiattach volumes by specifying *multiattach* parameter in the request body of a volume create operation. This functionality is unsafe, can lead to data loss, and has been deprecated since the Queens release. The recommended method for creating a multiattach volume is to use a volume type that supports multiattach. By default, volume types can only be created by the operator. Users who have a need for multiattach volumes should contact their operator if a suitable volume type is not available. Changes in cinder 20.1.0..20.2.0 -------------------------------- d4535c774 Remove multiatttach request parameter f2faf7d70 Filter reserved image properties 8c4d7bf01 [stable-only] Pin tox <4 aa920e2fd Bugfix: Account for consumed space better 8c3822c92 DEMC: Add support for trim/discard Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 + api-ref/source/v2/parameters.yaml | 9 --- api-ref/source/v2/volumes-v2-volumes.inc | 1 - api-ref/source/v3/parameters.yaml | 9 --- api-ref/source/v3/volumes-v3-volumes.inc | 1 - cinder/api/schemas/volumes.py | 6 ++ cinder/api/v2/volumes.py | 9 --- cinder/api/v3/volumes.py | 16 +++--- cinder/image/image_utils.py | 46 +++++++++++++++ cinder/scheduler/filter_scheduler.py | 13 ----- .../drivers/dell_emc/powermax/test_powermax_fc.py | 1 + .../dell_emc/powermax/test_powermax_iscsi.py | 2 + cinder/volume/api.py | 6 +- cinder/volume/drivers/dell_emc/powerflex/driver.py | 14 ++++- cinder/volume/drivers/dell_emc/powermax/common.py | 1 + cinder/volume/drivers/dell_emc/powermax/fc.py | 4 +- cinder/volume/drivers/dell_emc/powermax/iscsi.py | 4 +- .../volume/drivers/dell_emc/powerstore/adapter.py | 2 + .../volume/drivers/dell_emc/powerstore/driver.py | 3 +- cinder/volume/flows/api/create_volume.py | 12 +--- cinder/volume/manager.py | 4 +- .../notes/bug-1910767-00f20702f5fc96db.yaml | 7 +++ releasenotes/notes/demc-trim-bb2165f74a5703a6.yaml | 13 +++++ ...reserved-image-properties-9519ddc080e7ed1a.yaml | 28 +++++++++ ...multiattach-request-param-4444e02533f919da.yaml | 20 +++++++ tox.ini | 4 +- 30 files changed, 256 insertions(+), 129 deletions(-)

1 0

os-brick 6.2.1 (antelope)
by no-reply＠openstack.org 02 May '23

02 May '23

We are chuffed to announce the release of: os-brick 6.2.1: OpenStack Cinder brick library for managing local volume attaches This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. Changes in os-brick 6.2.0..6.2.1 -------------------------------- 9bcd759 Add Python 3.10 to setup.cfg metadata 9d982f3 Update TOX_CONSTRAINTS_FILE for stable/2023.1 b603087 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + setup.cfg | 1 + tox.ini | 6 +++--- 3 files changed, 5 insertions(+), 3 deletions(-)

1 0

python-cinderclient 9.1.1 (zed)
by no-reply＠openstack.org 02 May '23

02 May '23

We are ecstatic to announce the release of: python-cinderclient 9.1.1: OpenStack Block Storage API Client Library This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/python-cinderclient Download the package from: https://pypi.org/project/python-cinderclient Please report issues through: https://bugs.launchpad.net/python-cinderclient/+bugs For more details, please see below. 9.1.1 ^^^^^ Bug Fixes * Bug #1995883 (https://bugs.launchpad.net/python- cinderclient/+bug/1995883): Fixed bad format request body generated for the snapshot-create action when the client supports mv 3.66 or greater but the Block Storage API being contacted supports < 3.66. Changes in python-cinderclient 9.1.0..9.1.1 ------------------------------------------- 22a3169 [stable-only] Pin tox <4 bc30723 Handle downgraded client for snapshot-create 3516b91 Update TOX_CONSTRAINTS_FILE for stable/zed c98839f Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 2 + cinderclient/v3/shell.py | 2 + cinderclient/v3/volume_snapshots.py | 14 ++++ ...g-1995883-force-flag-none-3a7bb87f655bcf42.yaml | 8 +++ tox.ini | 9 +-- 7 files changed, 108 insertions(+), 4 deletions(-)

1 0

cinder 21.2.0 (zed)
by no-reply＠openstack.org 02 May '23

02 May '23

We exuberantly announce the release of: cinder 21.2.0: OpenStack Block Storage This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 21.2.0 ^^^^^^ New Features ************ * RBD driver: Sets the Ceph cluster FSID as the default value for the "rbd_secret_uuid" configuration option. Upgrade Notes ************* * We introduced a new config parameter, "reserved_image_namespaces", that allows operators to set the image properties to filter out from volume image metadata by namespace when uploading a volume to Glance. These properties, if not filtered out, cause failures when uploading images back to Glance. The error will happen on Glance side when the reserved namespaces are used. This option is also useful when an operator wants to use the Glance property protections feature to make some image properties read-only. Bug Fixes ********* * PowerStore driver bug #1962824 (https://bugs.launchpad.net/cinder/+bug/1962824) Fixed Cinder volume caching mechanism for the driver. Now the driver correctly raises "exception.SnapshotLimitReached" when maximum snapshots are created for a given volume and the volume cache is invalidated to allow a new row of fast volume clones. * Bug #2008017 (https://bugs.launchpad.net/cinder/+bug/2008017) Fixed NetApp NFS driver to never spawn a native thread avoid thread starvation and other related issues. * Bug #1945500 (https://bugs.launchpad.net/cinder/+bug/1945500) Fixed an error when uploading to Glance a previously downloaded glance image when glance multistore is enabled. Glance reserves image properties in the namespace 'os_glance' for its own use and will not allow images to be created with these properties. Additionally, there are image properties, such as those associated with image signature verification, that are stored in a volume's image metadata, which should not be added to a new image when a volume is being uploaded as an image. Thus Cinder will no longer include any volume image metadata in the namespaces "os_glance" and "img_signature" when it creates an image in Glance. Furthermore, because the Glance property protections feature allows an operator to configure specific image properties as read-only, this fix adds a configuration option, "reserved_image_namespaces", that allows an operator to exclude additional image properties by namespace (the "os_glance" and "img_signature" namespaces are *always* excluded). * Pure Storage FlashArray driver bug #1969784 (https://bugs.launchpad.net/cinder/+bug/1969784) Fixed array failover incorrectly handles loss of an array due to network issue * RBD driver bug #1960206 (https://bugs.launchpad.net/cinder/+bug/1960206) Fixed "total_capacity" reported by the driver to the scheduler on Ceph clusters that have renamed the "bytes_used" field to "stored". (e.g., Nautilus (https://docs.ceph.com/en/nautilus/releases/nautilus /#upgrade-compatibility-notes)). * Bug #2008259 (https://bugs.launchpad.net/cinder/+bug/2008259) Fixed the volume create functionality where non-admin users were able to create multiattach volumes by providing the *multiattach* parameter in the request body. Now we can only create multiattach volumes using a multiattach volume type, which is also the recommended way. Other Notes *********** * Removed the ability to create multiattach volumes by specifying *multiattach* parameter in the request body of a volume create operation. This functionality is unsafe, can lead to data loss, and has been deprecated since the Queens release. The recommended method for creating a multiattach volume is to use a volume type that supports multiattach. By default, volume types can only be created by the operator. Users who have a need for multiattach volumes should contact their operator if a suitable volume type is not available. Changes in cinder 21.1.0..21.2.0 -------------------------------- a8a4cdcb2 Remove multiatttach request parameter 3dde6b7d9 Fix NetApp NFS driver to never spawn a native thread again 30b70ac5a RBD: Default rbd_secret_uuid to the cluster FSID 97926fb88 RBD: Fix total_capacity 04f063470 Dell PowerStore: Volume caching exception support 826b40281 Filter reserved image properties 9d12d263e [Pure Storage] Fix issue with loss of replicated array 426f6337b [stable-only] Pin tox <4 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 + api-ref/source/v2/parameters.yaml | 9 -- api-ref/source/v2/volumes-v2-volumes.inc | 1 - api-ref/source/v3/parameters.yaml | 9 -- api-ref/source/v3/volumes-v3-volumes.inc | 1 - cinder/api/schemas/volumes.py | 6 + cinder/api/v2/volumes.py | 9 -- cinder/api/v3/volumes.py | 16 +-- cinder/image/image_utils.py | 46 +++++++ cinder/scheduler/filter_scheduler.py | 13 -- .../powerstore/test_volume_create_from_source.py | 24 ++++ .../drivers/netapp/dataontap/test_nfs_base.py | 42 ++---- .../drivers/netapp/dataontap/test_nfs_cmode.py | 2 - cinder/volume/api.py | 6 +- .../volume/drivers/dell_emc/powerstore/client.py | 6 + cinder/volume/drivers/netapp/dataontap/nfs_base.py | 71 +++++------ .../volume/drivers/netapp/dataontap/nfs_cmode.py | 1 - cinder/volume/drivers/netapp/options.py | 5 + cinder/volume/drivers/pure.py | 141 +++++++++++++-------- cinder/volume/drivers/rbd.py | 21 ++- cinder/volume/flows/api/create_volume.py | 12 +- .../notes/bug-1962824-ff0cac0d35021f84.yaml | 9 ++ ...netapp-fix-native-threads-04d8f58f4c29b03d.yaml | 6 + ...reserved-image-properties-9519ddc080e7ed1a.yaml | 28 ++++ ...e-validate-replica-arrays-a76630cab9435770.yaml | 6 + .../rbd-rbd_secret_uuid-fsid-95daee128f59c8e4.yaml | 5 + .../notes/rbd-total_capacity-60f10b45e3a8c8ea.yaml | 8 ++ ...multiattach-request-param-4444e02533f919da.yaml | 20 +++ tox.ini | 4 +- 35 files changed, 557 insertions(+), 266 deletions(-)

1 0

magnum 13.1.1 (xena)
by no-reply＠openstack.org 02 May '23

02 May '23

We high-spiritedly announce the release of: magnum 13.1.1: Container Management project for OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum 13.1.0..13.1.1 -------------------------------- 5d071532 Fix pods stuck terminating. 974d8bad Remove stdout argument from coredns log 8fd45eb9 Support tox4 Diffstat (except docs and test files) ------------------------------------- .../templates/kubernetes/fragments/configure-kubernetes-master.sh | 2 +- .../templates/kubernetes/fragments/configure-kubernetes-minion.sh | 2 +- .../common/templates/kubernetes/fragments/core-dns-service.sh | 2 +- .../drivers/k8s_coreos_v1/templates/fragments/enable-coredns.yaml | 2 +- tox.ini | 8 +++++--- 5 files changed, 9 insertions(+), 7 deletions(-)

1 0

ironic 18.3.0 (xena)
by no-reply＠openstack.org 02 May '23

02 May '23

We are excited to announce the release of: ironic 18.3.0: OpenStack Bare Metal Provisioning This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 18.3.0 ^^^^^^ Upgrade Notes ************* * Adds "sha256", "sha384" and "sha512" as supported SNMPv3 authentication protocols to iRMC driver. Bug Fixes ********* * Fixes an issue where if selinux is enabled and enforcing, and the published image is a hardlink, the source selinux context is preserved, causing access denied when retrieving the image using hardlink URL. * Fixes SNMPv3 message authentication and encryption functionality of iRMC driver. The SNMPv3 authentication between iRMC driver and iRMC was only by the security name with no passwords and encryption. To increase security, the following parameters are now added to the node's "driver_info", and can be used for authentication: * "irmc_snmp_user" * "irmc_snmp_auth_password" * "irmc_snmp_priv_password" * "irmc_snmp_auth_proto" (Optional, defaults to "sha") * "irmc_snmp_priv_proto" (Optional, defaults to "aes") "irmc_snmp_user" replaces "irmc_snmp_security". "irmc_snmp_security" will be ignored if "irmc_snmp_user" is set. "irmc_snmp_auth_proto" and "irmc_snmp_priv_proto" can also be set through the following options in the "[irmc]" section of "/etc/ironic/ironic.conf": * "snmp_auth_proto" * "snmp_priv_proto" * Fixes a race condition in PXE initialization where logic to retry what we suspect as potentially failed PXE boot operations was not consulting if an "agent token" had been established, which is the very first step in agent initialization. Other Notes *********** * Updates the minimum version of "python-scciclient" library to "0.11.3". Changes in ironic 18.2.2..18.3.0 -------------------------------- 68efd7970 Move and fix reno config for releasenotes job 6210cae14 Fix selinux context of published image hardlink 8e6a337f2 Prevent pxe retry when agent token exists 793b98132 Fixes for tox 4.0 6aaf4e69e Add support auth protocols for iRMC ef0e33edf Add SNMPv3 authentication functionality Diffstat (except docs and test files) ------------------------------------- ironic/common/utils.py | 12 ++ ironic/conf/irmc.py | 28 ++- ironic/drivers/modules/image_utils.py | 10 + ironic/drivers/modules/irmc/common.py | 235 ++++++++++++++++---- ironic/drivers/modules/irmc/inspect.py | 24 ++- ironic/drivers/modules/irmc/power.py | 22 +- ironic/drivers/modules/pxe_base.py | 6 + releasenotes/config.yaml | 5 + ...ix-context-image-hardlink-16f452974abc7327.yaml | 7 + ...c-add-snmp-auth-protocols-3ff7597cea7ef9dd.yaml | 5 + .../irmc-add-snmpv3-security-fca05bfc30f50d1a.yaml | 28 +++ ...e-retry-when-token-exists-a4f38f7da56c1397.yaml | 7 + reno.yaml | 4 - tox.ini | 9 +- 20 files changed, 667 insertions(+), 77 deletions(-)

1 0