May 2023 - Release-announce - lists.openstack.org

puppet-manila 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are happy to announce the release of: puppet-manila 19.5.0: Puppet module for OpenStack Manila This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Support for Dell EMC PowerMax backend has been added. Changes in puppet-manila 19.4.0..19.5.0 --------------------------------------- 58e5da7 Prepare the final stable/xena release 41f7141 setuptools: Disable auto discovery b600db0 Allow mulitple GlusterFS backends 2c9a4d3 Ubuntu: Use utf8mb3_general_ci collate in MySQL 909c435 Ubuntu: Use utf8mb3 charset in MySQL 55bb672 Fix the wrong section used to configure standalone network plugin 42ff041 Fix the wrong [quota] parameters 6360432 Add support for PowerMax driver 57b1c81 [Dell EMC drivers] Define defaults for emc_share_backend cd8720b [Dell EMC drivers] Accept arrays for ListOpt 40d365a Update TOX_CONSTRAINTS_FILE for stable/xena e02f139 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/backend/dellemc_isilon.pp | 7 +- manifests/backend/dellemc_powermax.pp | 116 +++++++++++++++++++++ manifests/backend/dellemc_unity.pp | 11 +- manifests/backend/dellemc_vmax.pp | 12 +-- manifests/backend/dellemc_vnx.pp | 10 +- manifests/backend/glusternative.pp | 11 +- manifests/backend/glusternfs.pp | 11 +- manifests/network/standalone.pp | 27 ++--- manifests/quota.pp | 22 ++-- metadata.json | 2 +- .../notes/dellemc_powermax-6ded05263d935f14.yaml | 4 + setup.py | 1 + spec/acceptance/basic_manila_spec.rb | 2 + spec/classes/manila_quota_spec.rb | 32 +++--- spec/defines/manila_backend_dellemc_isilon_spec.rb | 2 +- .../manila_backend_dellemc_powermax_spec.rb | 78 ++++++++++++++ spec/defines/manila_backend_dellemc_unity_spec.rb | 2 +- spec/defines/manila_backend_dellemc_vmax_spec.rb | 2 +- spec/defines/manila_backend_dellemc_vnx_spec.rb | 2 +- spec/defines/manila_backend_glusternative_spec.rb | 26 +++++ spec/defines/manila_backend_glusternfs_spec.rb | 26 +++++ spec/defines/manila_network_standalone_spec.rb | 58 +++++++---- tox.ini | 2 +- 24 files changed, 368 insertions(+), 99 deletions(-)

1 0

puppet-designate 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are tickled pink to announce the release of: puppet-designate 19.5.0: Puppet module for OpenStack Designate This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-designate Download the package from: https://tarballs.openstack.org/puppet-designate/ Please report issues through: https://bugs.launchpad.net/puppet-designate/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * Now the "designate::backend::bind9" class supports setting up bind9 backend using "/etc/designate/pools.yaml" properly. This feature can be enabled by the new "manage_pool" parameter. * Added the new "designate::wsgi::apache" class, you can now run the "designate-api" service under Apache with mod_wsgi. Deprecation Notes ***************** * The "designate::backend::bind9::rndc_host" parameter has been deprecated and has no effect now. Bug Fixes ********* * The "designate::backend::bind9" class no longer configures parameters in the "[backend:bind9]" section, as these parameters are no longer effective. Changes in puppet-designate 19.4.0..19.5.0 ------------------------------------------ 734e498 Prepare the final stable/xena release 062cc6c Fix ineffective max_header_line 4e416a8 setuptools: Disable auto discovery 5b83ac5 Enable policy settings in designate-api 2b80fed mdns: Accept array value for the listen parameter 93f0d9b Fix setup of bind9 backend 9a50eb5 Add Designate API WSGI support 4bb90f7 Update TOX_CONSTRAINTS_FILE for stable/xena 23b8261 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/api.pp | 36 ++++- manifests/backend/bind9.pp | 112 ++++++++++++--- manifests/mdns.pp | 2 +- manifests/params.pp | 40 +++--- manifests/wsgi/apache.pp | 160 +++++++++++++++++++++ metadata.json | 2 +- .../notes/bug-1961516-0634fabec06a4e94.yaml | 17 +++ .../notes/designate-api-wsgi-b7a408ecc00f3001.yaml | 5 + setup.py | 1 + spec/classes/designate_api_spec.rb | 43 +++++- spec/classes/designate_backend_bind9_spec.rb | 61 ++++---- spec/classes/designate_mdns_spec.rb | 27 ++-- spec/classes/designate_wsgi_apache_spec.rb | 115 +++++++++++++++ templates/bind9-pools.yaml.erb | 36 +++++ tox.ini | 2 +- 16 files changed, 572 insertions(+), 88 deletions(-)

1 0

puppet-placement 6.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are satisfied to announce the release of: puppet-placement 6.4.1: Puppet module for OpenStack placement This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-placement Download the package from: https://tarballs.openstack.org/puppet-placement/ Please report issues through: https://bugs.launchpad.net/puppet-placement/+bugs For more details, please see below. Changes in puppet-placement 6.4.0..6.4.1 ---------------------------------------- 8096fe4 Prepare the final stable/xena release 245a81a setuptools: Disable auto discovery bc3c0ce update file name for apache config on Debian 0edfd2e Skip dependency on keystone endpoint if endpoint is not configured 14ee3c8 Tag the httpd service only when it is used cf265e9 Remove TripleO job b1d4ba9 Update TOX_CONSTRAINTS_FILE for stable/xena df56d29 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ------------------- manifests/api.pp | 3 +-- manifests/keystone/auth.pp | 5 ++++- manifests/params.pp | 2 +- metadata.json | 2 +- setup.py | 1 + tox.ini | 2 +- 8 files changed, 10 insertions(+), 25 deletions(-)

1 0

puppet-octavia 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We jubilantly announce the release of: puppet-octavia 19.5.0: Puppet module for OpenStack Octavia This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Added parameter "allow_ping_health_monitors" to the "octavia::api" class * The following parameters have been added to the "octavia::api" class. These parameters allows customizing the same parameters in the "[api_setting]" section. * "default_listener_ciphers" * "default_pool_ciphers" * "tls_cipher_prohibit_list" * "default_listener_tls_versions" * "default_pool_tls_versions" * "minimum_tls_version" * The "octavia::api::provider_drivers" parameter now supports array or hash value, and the given value is conveted to correctly formatted string when being put into octavia.conf. * Now the "octavia::provider::ovn" can manage the package required to use OVN Octavia provider. * The following parameters have been added to the "octavia::provider::ovn" class. * "ovsdb_connection_timeout" * "ovsdb_retry_max_interval" * "ovsdb_probe_interval" * Support for the "ovn_sb_*" parameters has been added to the "octavia::provider::ovn" class. * The new "octavia::task_flow" class has been added. This class manages parameters in the "task_flow" section, which are required to use the amphora v2 driver. * The "octavia::db::mysql" class and the "octavia::db::postgresql" class now support creating a separate database for taskflow persistence. * The "octavia::db::sync_persistence" class has been added. This class invokes the command to initialize the taskflow persistence database. Changes in puppet-octavia 19.4.0..19.5.0 ---------------------------------------- 6262ebb Prepare the final stable/xena release 8276514 setuptools: Disable auto discovery 0a7317a Do not show passphrase even if it is invalid 91031e6 ovn: Accept arrays for ovn_*_connection parameters 8da4abe Accept array or hash for enable_provider_drivers 861a235 ovn: Add support for ovn_sb_* parameters d64492c ovn: Add more tunables related to OVN DB connection dc7a544 Manage ovn-octavia-provider package fb1af93 Add allow_ping_health_monitors parameter to api 034d66f Add parameters to configure amphorav2 driver ae3ecdf api: Add support for TLS cipher/version parameters e036925 Fix inconsistent spec file name 3607dc0 Remove TripleO job 77ecc71 Update TOX_CONSTRAINTS_FILE for stable/xena 0c81a22 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 32 ------- manifests/api.pp | 53 ++++++++++- manifests/certificates.pp | 6 +- manifests/db/mysql.pp | 30 ++++-- manifests/db/postgresql.pp | 23 ++++- manifests/db/sync.pp | 2 +- manifests/db/sync_persistence.pp | 40 ++++++++ manifests/params.pp | 1 + manifests/provider/ovn.pp | 75 +++++++++++++-- manifests/task_flow.pp | 105 +++++++++++++++++++++ metadata.json | 2 +- ...llow_ping_health_monitors-3f00c296714b663b.yaml | 4 + .../notes/api-tls-params-48cefc42aee491ab.yaml | 13 +++ .../convert-provider_drivers-922ba756396e154c.yaml | 6 ++ .../ovn-provider-package-af40f696662e7052.yaml | 5 + .../notes/ovn-tunables-103622c80b71d03d.yaml | 9 ++ .../notes/ovnsb-params-e7bdca2b53465ed9.yaml | 5 + releasenotes/notes/task_flow-89c5a7003e705a9d.yaml | 14 +++ setup.py | 1 + spec/classes/octavia_api_spec.rb | 71 +++++++++++++- spec/classes/octavia_db_mysql_spec.rb | 25 +++++ spec/classes/octavia_db_postgresql_spec.rb | 23 +++++ spec/classes/octavia_db_sync_persistence_spec.rb | 68 +++++++++++++ spec/classes/octavia_db_sync_spec.rb | 13 +-- spec/classes/octavia_ovn_provider_spec.rb | 47 --------- spec/classes/octavia_provider_ovn_spec.rb | 90 ++++++++++++++++++ spec/classes/octavia_task_flow_spec.rb | 78 +++++++++++++++ tox.ini | 2 +- 29 files changed, 730 insertions(+), 114 deletions(-)

1 0

puppet-ceilometer 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are pleased to announce the release of: puppet-ceilometer 19.5.0: Puppet module for OpenStack Ceilometer This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-ceilometer Download the package from: https://tarballs.openstack.org/puppet-ceilometer/ Please report issues through: https://bugs.launchpad.net/puppet-ceilometer/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Add new parameter "tenant_name_discovery", whether to idenitfy user and project names from polled samples. This paramater is to be configured only when ceilometer central namespace is enabled. * Support for the "[compute] resource_update_interval" parameter and the "[compute] resource_cache_expiry" parameter has been added. * The "ceilometer::agent::polling" class now suppports the new "batch_size" parameter. * Support for the parameters used to poll metrics from the Radosgw service has been added. * The new "ceilometer::agent::polling::service_types" class, to manage parameters in the "[service_types]" section, has been added. Changes in puppet-ceilometer 19.4.0..19.5.0 ------------------------------------------- 842aaeb Add new parameter `tenant_name_discovery` e08fc27 Add support for [polling] batch_size 69460b9 compute: Add support for tunables parameters b32543f polling: Ensure unused parameters are cleared e388565 Prepare the final stable/xena release 2ff14b0 setuptools: Disable auto discovery 89cfedf Bugfix - Deprecated notification_workers is ignored f96e4c3 Add support for polling Radosgw metrics 882b6f5 Add support for the [service_types] parameters 5f2e4ef Update TOX_CONSTRAINTS_FILE for stable/xena aef7c7a Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/agent/notification.pp | 2 +- manifests/agent/polling.pp | 65 +++++++++++++--- manifests/agent/polling/rgw.pp | 32 ++++++++ manifests/agent/polling/service_types.pp | 50 ++++++++++++ metadata.json | 2 +- ...add_tenant_name_discovery-4671aec3daae9622.yaml | 7 ++ .../notes/compute-params-ecee48b43a1bdad2.yaml | 5 ++ .../notes/polling-batch_size-95f15dc9d96b96b4.yaml | 5 ++ .../notes/rgw-support-35ca7afb8e5ec322.yaml | 5 ++ .../notes/service_types-2a672cdceff9227f.yaml | 5 ++ setup.py | 1 + spec/classes/ceilometer_agent_polling_rgw_spec.rb | 41 ++++++++++ .../ceilometer_agent_polling_service_types_spec.rb | 50 ++++++++++++ spec/classes/ceilometer_agent_polling_spec.rb | 88 ++++++++++++++++++++-- tox.ini | 2 +- 16 files changed, 343 insertions(+), 18 deletions(-)

1 0

puppet-glance 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We joyfully announce the release of: puppet-glance 19.5.0: Puppet module for OpenStack Glance This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The following parameter and class have been added, to support usage of the service token feature with the Barbican key manager. * The "glance::key_manager::barbican::send_service_user_token" parameter * The "glance::key_manager::barbican::service_user" class * The "glance::cache::cleaner" class and the "glance::cache::pruner" class now support the "maxdelay" parameter. This parameter would be useful in a multi-node deployment, to avoid launching the same cron command at the same time in multiple nodes. Upgrade Notes ************* * The "glance::api" class now supports a "lock_path" parameter that configures the oslo.concurrency lock_path with a platform specific default value. Distributions that are used to defining the lock_path with a distribution specific config file may need to override the default "glance::api::lock_path" value. Bug Fixes ********* * Bug #1980539 (https://bugs.launchpad.net/puppet- glance/+bug/1980539): Configure the oslo.concurrency lock_path, which is now required by cinder backends. * Bug #1947816 (https://bugs.launchpad.net/puppet- glance/+bug/1947816): Fix the default auth_version for swift backend so that Keystone v3 API is used by default instead of v2 API. Changes in puppet-glance 19.4.0..19.5.0 --------------------------------------- cbbeee8 Prepare the final stable/xena release af0063b Ensure [DEFAULT] show_multiple_locations is cleared 08ff250 setuptools: Disable auto discovery 1d37e54 Configure the oslo.concurrency lock_path 1913dd1 Add sleep in cache cron jobs 157e9ab Disallow sheepdog backend 1b6b91d key_manager: Add service user options for Barbican key manager f34790b Fix wrong class used in unit tests 628d731 Swift backend: Use Keystone v3 API by default 048e9b4 Swift backend: the key parameter should be secret 6db9bec Remove TripleO job 7a7070a Update TOX_CONSTRAINTS_FILE for stable/xena ec1ceea Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ----- manifests/api.pp | 18 ++++- manifests/backend/multistore/swift.pp | 6 +- manifests/backend/swift.pp | 4 +- manifests/cache/cleaner.pp | 19 ++++- manifests/cache/pruner.pp | 20 ++++- manifests/key_manager/barbican.pp | 34 ++++---- manifests/key_manager/barbican/service_user.pp | 94 ++++++++++++++++++++++ manifests/params.pp | 2 + metadata.json | 2 +- ...add-concurrency-lock_path-666f5836ec062c5a.yaml | 13 +++ .../barbican_service_user-606ee71dc0940e2a.yaml | 8 ++ .../notes/bug-1947816-75538e8fd13e59c6.yaml | 6 ++ .../cache-cron-maxdelay-bfd1585eaa15aeda.yaml | 7 ++ setup.py | 1 + spec/classes/glance_api_spec.rb | 28 ++++++- spec/classes/glance_backend_swift_spec.rb | 2 +- spec/classes/glance_cache_cleaner_spec.rb | 3 +- spec/classes/glance_cache_pruner_spec.rb | 3 +- ...lance_key_manager_barbican_service_user_spec.rb | 79 ++++++++++++++++++ spec/classes/glance_key_manager_barbican_spec.rb | 45 ++++++----- .../glance_backend_multistore_swift_spec.rb | 6 +- tox.ini | 2 +- 24 files changed, 343 insertions(+), 79 deletions(-)

1 0

heat-dashboard 6.0.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are glad to announce the release of: heat-dashboard 6.0.1: Heat Management Dashboard This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/heat-dashboard Download the package from: https://tarballs.openstack.org/heat-dashboard/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/heat- dashboard For more details, please see below. Changes in heat-dashboard 6.0.0..6.0.1 -------------------------------------- 4d1ce41 Drop lower-constraints.txt and its testing 81190f1 Set False to include_empty_option 4f2de89 Fix lower-constraints job 8d013f7 Update TOX_CONSTRAINTS_FILE for stable/xena b49e805 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 1 - heat_dashboard/content/stacks/forms.py | 13 +-- lower-constraints.txt | 149 --------------------------------- requirements.txt | 4 + test-requirements.txt | 1 - tox.ini | 10 +-- 7 files changed, 15 insertions(+), 165 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b737e47..4febe72 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. + diff --git a/test-requirements.txt b/test-requirements.txt index 075d90f..cc9df55 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +12,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -doc8>=0.6.0 # Apache-2.0

1 0

puppet-barbican 19.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We contentedly announce the release of: puppet-barbican 19.4.1: Puppet module for Barbican This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-barbican Download the package from: https://tarballs.openstack.org/puppet-barbican/ Please report issues through: https://bugs.launchpad.net/puppet-barbican/+bugs For more details, please see below. Changes in puppet-barbican 19.4.0..19.4.1 ----------------------------------------- c8ace6d Prepare the final stable/xena release 73b6ebb setuptools: Disable auto discovery b1debf7 Fix ineffective dependency 0ff4f90 Update TOX_CONSTRAINTS_FILE for stable/xena f85d141 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/wsgi/apache.pp | 2 +- metadata.json | 2 +- setup.py | 1 + tox.ini | 2 +- 5 files changed, 5 insertions(+), 3 deletions(-)

1 0

puppet-oslo 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are tickled pink to announce the release of: puppet-oslo 19.5.0: Puppet module for Oslo This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-oslo Download the package from: https://tarballs.openstack.org/puppet-oslo/ Please report issues through: https://bugs.launchpad.net/puppet-oslo/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Add socket keepalive options for the pymemcache (dogpile.cache) backend. * Now the "oslo::cache" defined resource type installs the pymemcache library when pymemcache backend is used. * Add options to configure pymemcache's HashClient retrying mechanisms (dogpile.cache) backend. * Add retrying options for pymemcache (dogpile.cache) backend. Changes in puppet-oslo 19.4.0..19.5.0 ------------------------------------- 8e59bdd Prepare the final stable/xena release 01a83c9 setuptools: Disable auto discovery a8d8629 cache: Ensure pymemcache library is installed e2af30e cache: Add inet6 prefix for only memcached backends edf1644 Add pymemcache's HashClient retrying options to oslo.cache 88197f3 Add retrying options to oslo.cache ba251d3 Add socket keepalive options for the pymemcache backend 423fd90 Remove TripleO job 3a69ae4 Update TOX_CONSTRAINTS_FILE for stable/xena 349d6d7 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ----- manifests/cache.pp | 91 +++++++++++++++++++- metadata.json | 2 +- .../add_keepalive_options-3802510b6d4461e1.yaml | 4 + .../notes/bug-1988205-973ce17f355cbfce.yaml | 5 ++ ...cache_hashclient_retrying-10a756708ad9894b.yaml | 5 ++ .../pymemcache_retrying-4fa326e3bc913a97.yaml | 4 + setup.py | 1 + spec/defines/oslo_cache_spec.rb | 97 ++++++++++++++++++++-- tox.ini | 2 +- 11 files changed, 198 insertions(+), 33 deletions(-)

1 0

puppet-ovn 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are tickled pink to announce the release of: puppet-ovn 19.5.0: Puppet module for OVN This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-ovn Download the package from: https://tarballs.openstack.org/puppet-ovn/ Please report issues through: https://bugs.launchpad.net/puppet-ovn/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * The new "ovn::controller::encap_tos" parameter has been added. This parameter controls the "ovn-encap-tos" external id. * The new "ovn::controller::ovn_ofctrl_wait_before_clear" parameter has been added to resolve an issue with dataplane downtime during upgrades that involve OVN schema changes. It will delay delting and re-adding openflow rules by the configured time in ms to give ovn- controller time to handle db connection / reconnection that can happen in this case. The default of 8000ms is based on upstream OVN testing with 200k openflow rules. Since it involved a change in behavior, the upstream OVN value defaults to unset. Changes in puppet-ovn 19.4.0..19.5.0 ------------------------------------ 6f1cd86 [Stable Only] Handle string value for ovn_bridge_mappings 8d9d11b Prepare the final stable/xena release 3cb1265 Add support for ovn-ofctrl-wait-before-clear f9d48b0 setuptools: Disable auto discovery d8a40a0 Add support for external_ids:ovn-encap-tos 4b5b106 Update TOX_CONSTRAINTS_FILE for stable/xena d3e2655 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/controller.pp | 29 ++++++++++++++++++++-- metadata.json | 2 +- .../notes/ovn-encap-tos-bd7bd9b3e3d19cc3.yaml | 5 ++++ ..._ofctrl_wait_before_clear-c40493ce231ec38c.yaml | 11 ++++++++ setup.py | 1 + spec/classes/ovn_controller_spec.rb | 8 ++++++ tox.ini | 2 +- 8 files changed, 55 insertions(+), 4 deletions(-)

1 0

puppet-cinder 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We exuberantly announce the release of: puppet-cinder 19.5.0: Puppet module for OpenStack Cinder This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-cinder Download the package from: https://tarballs.openstack.org/puppet-cinder/ Please report issues through: https://bugs.launchpad.net/puppet-cinder/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The following parameter and class have been added, to support usage of the service token feature with the Barbican key manager. * The "cinder::key_manager::barbican::send_service_user_token" parameter * The "cinder::key_manager::barbican::service_user" class * Add new parameter "cinder::backend::pure::pure_eradicate_on_delete" which allows setting of the pure_eradicate_on_delete option on the managed cinder backend for PureStorage. * Add new parameter "cinder::backend::pure::pure_iscsi_cidr" which allows setting of the pure_iscsi_cidr option on the managed cinder backend for PureStorage. Bug Fixes ********* * Bug #1986518 (https://bugs.launchpad.net/puppet- cinder/+bug/1986518): The "cinder::backend::iscsi" defined resource type now modifies the "/etc/tgt/targets.conf" file in Ubuntu and Debian, so that cinder can set up iscsi targets correctly. Changes in puppet-cinder 19.4.0..19.5.0 --------------------------------------- 8de7750 Prepare the final stable/xena release ddf2a6f setuptools: Disable auto discovery 605430e lvm: Modify targets.conf in Ubuntu/Debian 9043186 lvm: Fix duplicate declaration with CentOS + tgtadm 56aa4e9 key_manager: Add service user options for Barbican key manager e8ecf15 [Pure Storage] Add new params for FlashArray Cinder backend 3241ff1 Use service anchor to ensure API is up eb2c462 Remove TripleO job 3e0a053 Update TOX_CONSTRAINTS_FILE for stable/xena 6ffcbf4 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 22 ----- manifests/api.pp | 2 +- manifests/backend/iscsi.pp | 66 +++++++-------- manifests/backend/pure.pp | 16 ++++ manifests/key_manager/barbican.pp | 34 ++++---- manifests/key_manager/barbican/service_user.pp | 94 ++++++++++++++++++++++ metadata.json | 2 +- .../barbican_service_user-7c554403b68cbcaa.yaml | 8 ++ .../notes/bug-1986518-2ed0ab4ef3248cd8.yaml | 7 ++ ...urestorage_updated_params-b0f474d9ab08c37e.yaml | 10 +++ setup.py | 1 + spec/classes/cinder_api_spec.rb | 2 +- ...inder_key_manager_barbican_service_user_spec.rb | 79 ++++++++++++++++++ spec/classes/cinder_key_manager_barbican_spec.rb | 45 ++++++----- spec/defines/cinder_backend_iscsi_spec.rb | 19 ++--- spec/defines/cinder_backend_pure_spec.rb | 6 ++ tox.ini | 2 +- 18 files changed, 306 insertions(+), 110 deletions(-)

1 0

cinder 20.3.0 (yoga)
by no-reply＠openstack.org 17 May '23

17 May '23

We joyfully announce the release of: cinder 20.3.0: OpenStack Block Storage This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 20.3.0 ^^^^^^ Known Issues ************ * For security reasons (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) manually deleting an attachment, manually doing the "os-terminate_connection", "os- detach" or "os-force_detach" actions will no longer be allowed in most cases unless the request is coming from another OpenStack service on behalf of a user. Upgrade Notes ************* * Nova must be configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html) **and** cinder must be configured to recognize at least one of the roles that the nova service user has been assigned in keystone. By default, cinder will recognize the "service" role, so if the nova service user is assigned a differently named role in your cloud, you must adjust your cinder configuration file ("service_token_roles" configuration option in the "keystone_authtoken" section). If nova and cinder are not configured correctly in this regard, detaching volumes will no longer work (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Critical Issues *************** * Detaching volumes will fail if Nova is not configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html), please read the upgrade section for more information. (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Security Issues *************** * As part of the fix for Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) cinder now rejects user attachment delete requests for attachments that are being used by nova instances to ensure that no leftover devices are produced on the compute nodes which could be used to access another project's volumes. Terminate connection, detach, and force detach volume actions (calls that are not usually made by users directly) are, in most cases, not allowed for users. Bug Fixes ********* * Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) Fixed issue where a user manually deleting an attachment, calling terminate connection, detach, or force detach, for a volume that is still used by a nova instance resulted in leftover devices on the compute node. These operations will now fail when it is believed to be a problem. Changes in cinder 20.2.0..20.3.0 -------------------------------- a66f4afa2 Reject unsafe delete attachment calls Diffstat (except docs and test files) ------------------------------------- api-ref/source/v3/attachments.inc | 15 ++ api-ref/source/v3/volumes-v3-volumes-actions.inc | 55 ++++++ cinder/compute/nova.py | 7 + cinder/exception.py | 7 + cinder/volume/api.py | 98 +++++++++++ .../configuration/block-storage/service-token.rst | 46 +++-- .../redirect-detach-nova-4b7b7902d7d182e0.yaml | 43 +++++ 15 files changed, 504 insertions(+), 23 deletions(-)

1 0

puppet-openstack_extras 19.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are stoked to announce the release of: puppet-openstack_extras 19.4.1: Puppet module for OpenStack Openstack_extras This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-openstack_extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ Please report issues through: https://bugs.launchpad.net/puppet-openstack-extras/+bugs For more details, please see below. Changes in puppet-openstack_extras 19.4.0..19.4.1 ------------------------------------------------- 8160f0b Prepare the final stable/xena release e1bc2c1 setuptools: Disable auto discovery ff5aacf Use stable/xena release by default f4d89b9 Update TOX_CONSTRAINTS_FILE for stable/xena 1561dd0 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/repo/debian/params.pp | 2 +- manifests/repo/redhat/params.pp | 2 +- metadata.json | 2 +- setup.py | 1 + spec/classes/openstack_extras_repo_debian_debian_spec.rb | 14 +++++++------- spec/classes/openstack_extras_repo_debian_ubuntu_spec.rb | 6 +++--- spec/classes/openstack_extras_repo_redhat_redhat_spec.rb | 8 ++++---- tox.ini | 2 +- 9 files changed, 20 insertions(+), 18 deletions(-)

1 0

puppet-vswitch 15.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We eagerly announce the release of: puppet-vswitch 15.4.1: Puppet module for OpenStack Vswitch This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-vswitch Download the package from: https://tarballs.openstack.org/puppet-vswitch/ Please report issues through: https://bugs.launchpad.net/puppet-vswitch/+bugs For more details, please see below. Changes in puppet-vswitch 15.4.0..15.4.1 ---------------------------------------- aea7e21 Prepare the final stable/xena release 7eb7c1c setuptools: Disable auto discovery d8d7339 vs_config: Fix broken idempotency with nil/empty value f5ee885 Do not use service resource to restart openvswitch service 654df9f Update TOX_CONSTRAINTS_FILE for stable/xena 32004ad Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lib/puppet/provider/vs_config/ovs.rb | 14 ++++++++++++-- lib/puppet/type/vs_config.rb | 15 +++++++++++++++ manifests/dpdk.pp | 14 +++++++++++--- manifests/ovs.pp | 14 +++++++++++--- metadata.json | 2 +- setup.py | 1 + spec/acceptance/basic_vswitch_spec.rb | 25 ++++++++++++++++++++++++- spec/classes/vswitch_dpdk_spec.rb | 2 +- spec/classes/vswitch_ovs_spec.rb | 2 +- tox.ini | 2 +- 11 files changed, 79 insertions(+), 13 deletions(-)

1 0

puppet-neutron 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are delighted to announce the release of: puppet-neutron 19.5.0: Puppet module for OpenStack Neutron This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-neutron Download the package from: https://tarballs.openstack.org/puppet-neutron/ Please report issues through: https://bugs.launchpad.net/puppet-neutron/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The new "sdn_token" parameter to authenticate sdn has been added to the "neutron::plugins::ml2::mellanox::mlnx_sdn_assist" class. * The new "neutron::server::notifications::nova::live_migration_events" parameter has been added. This parameter controls the "[nova] live_migation_events" parameter in "neutron.conf". * The "neutron::agents::ovn_metadata" class now supports the following two new parameters. * "ovsdb_probe_interval" parameter to configure "[ovn]ovsdb_probe_interval" in ovn metadata agent config file. * "ovsdb_retry_max_interval" parameter to configure "[ovn]ovsdb_retry_max_interval" in ovn metadata agent config file. * The "neutron::plugins::ml2::ovn" class now supports the following two new parameters. * "ovsdb_retry_max_interval" * "ovsdb_probe_interval" Bug Fixes ********* * The independent ovn plugin package("pythonN-networking-ovn") is no longer required. The package is no longer available since Ussuri, and all codes are now included in the base neutron package. * The "neutron-ovn-metadata-agent" package is now installed in Ubuntu and Debian. * Bug #1987460 (https://bugs.launchpad.net/puppet- neutron/+bug/1987460): Previously the "neutron::agents::ml2::mlnx" class causes duplicate resources when used with the "neutron::agents::dhcp" class or the "neutron::agents::l3" class. Now it is possible to workaround the error by implementing the following mitigation. * Include the "neutron::agents::ml2::mlnx" class AFTER the "neutron::agents::dhcp" class or the "neutron::agents::l3" * Set the "interface_driver" parameter and the "dhcp_broadcast_reply" parameter consistently. Changes in puppet-neutron 19.4.0..19.5.0 ---------------------------------------- 7008f718 Prepare the final stable/xena release 4a41c221 Fix wrong bridge name if bridge_mappings is commma-separated string 5948c710 setuptools: Disable auto discovery aecfaa35 ovn: Do not expect the separate plugin package 1f26bbfd mlnx: Allow workaround for duplicate resources 3677b7aa [ovn metadata] Add more tunable parameters 9d553d51 ml2+ovn: Add more tunable parameters for OVN DB connections b59fca5c ml2+ovs: Accept a string value for permitted_ethertypes 7864f0a8 NSX Plugin: nsx_api_password should be secret 7d106037 Fix the ignored unit test case for dhcp-agent configuration fc225e54 Add support for [nova] live_migation_events 4f2eda54 Change authentication method for Mellanox sdn controller 2c16d3b4 Remove TripleO job 2eeeeaf8 Update TOX_CONSTRAINTS_FILE for stable/xena d6cf20bf Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 25 ------- .../ovn_metadata_agent_config/ini_setting.rb | 2 +- lib/puppet/type/ovn_metadata_agent_config.rb | 2 +- manifests/agents/ml2/mlnx.pp | 14 +++- manifests/agents/ml2/ovs.pp | 10 +-- manifests/agents/ovn_metadata.pp | 15 +++- manifests/params.pp | 6 +- manifests/plugins/ml2/mellanox/mlnx_sdn_assist.pp | 10 ++- manifests/plugins/ml2/ovn.pp | 20 ++++-- manifests/plugins/nsx.pp | 2 +- manifests/server/notifications/nova.pp | 8 +++ metadata.json | 2 +- .../notes/add_token_auth-daa888e87da725da.yaml | 4 ++ .../notes/bug-1945973-65195b6dae2009e5.yaml | 10 +++ .../notes/bug-1987460-c5bfc6d98ccd3375.yaml | 14 ++++ .../live_migration_events-84fc814cb28a8a68.yaml | 6 ++ ...n-metadata-tunning-params-9232d7638488ae0d.yaml | 12 ++++ .../notes/ovn-tunables-0f917de23d4c1274.yaml | 8 +++ setup.py | 1 + spec/classes/neutron_agents_dhcp_spec.rb | 64 +++++++++--------- spec/classes/neutron_agents_ml2_ovs_spec.rb | 79 +++++++++++++++++----- spec/classes/neutron_agents_ovn_metadata_spec.rb | 43 ++++++------ .../neutron_plugins_ml2_mlnx_sdn_assist_spec.rb | 2 + spec/classes/neutron_plugins_ml2_ovn_spec.rb | 6 +- spec/classes/neutron_plugins_nsx_spec.rb | 4 +- .../neutron_server_notifications_nova_spec.rb | 3 + .../ovn_metadata_agent_config/ini_setting_spec.rb | 4 +- tox.ini | 2 +- 29 files changed, 248 insertions(+), 131 deletions(-)

1 0

keystonemiddleware 10.3.0 (bobcat)
by no-reply＠openstack.org 17 May '23

17 May '23

We are stoked to announce the release of: keystonemiddleware 10.3.0: Middleware for OpenStack Identity This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 10.3.0 ^^^^^^ New Features * [blueprint support-oauth2-mtls (https://blueprints.launchpad.net/keystone/+spec/support- oauth2-mtls)] The oauth2_mtls_token filter has been added for accepting or denying incoming requests containing OAuth 2.0 certificate-bound access tokens that are obtained from keystone identity server by users through their OAuth 2.0 credentials and Mutual-TLS certificates. Changes in keystonemiddleware 10.2.0..10.3.0 -------------------------------------------- 92cdf8a Add timeout for requests a59020f OAuth 2.0 Mutual-TLS Support 1c820f0 Add missing doc requirements Diffstat (except docs and test files) ------------------------------------- keystonemiddleware/ec2_token.py | 9 +- keystonemiddleware/oauth2_mtls_token.py | 156 +++++++++ keystonemiddleware/s3_token.py | 12 +- .../unit/test_oauth2_mtls_token_middleware.py | 373 +++++++++++++++++++++ .../bp-support-oauth2-mtls-2d2686c9d5b1fe1f.yaml | 8 + setup.cfg | 1 + 8 files changed, 668 insertions(+), 4 deletions(-)

1 0

glance_store 4.1.1 (zed)
by no-reply＠openstack.org 17 May '23

17 May '23

We are excited to announce the release of: glance_store 4.1.1: OpenStack Image Service Store Library This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 4.1.1 ^^^^^ Security Issues * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Changes in glance_store 4.1.0..4.1.1 ------------------------------------ e9d2509 Add force to os-brick disconnect 3d3467d Fix tox4 error 8034cdc Update TOX_CONSTRAINTS_FILE for stable/zed c05c7e5 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder.py | 5 ++++- glance_store/common/attachment_state_manager.py | 3 ++- releasenotes/notes/bug-2004555-4fd67fce86c07461.yaml | 11 +++++++++++ tox.ini | 7 +++---- 7 files changed, 24 insertions(+), 9 deletions(-)

1 0

nova 27.1.0 (antelope)
by no-reply＠openstack.org 17 May '23

17 May '23

We are overjoyed to announce the release of: nova 27.1.0: Cloud computing fabric controller This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 27.1.0 ^^^^^^ Upgrade Notes * Configuration of service user tokens is now **required** for all Nova services to ensure security of block-storage volume data. All Nova configuration files must configure the "[service_user]" section as described in the documentation. See https://bugs.launchpad.net/nova/+bug/2004555 for more details. (https://docs.openstack.org/nova/latest/admin/configuration /service-user-token.html) Changes in nova 27.0.0..27.1.0 ------------------------------ 09f85a8a92 CI: fix backport validator for new branch naming 6eab57952e Bump nova-ceph-multstore timeout a02f966873 Revert "Debug Nova APIs call failures" eb3fe4ddc6 Have host look for CPU controller of cgroupsv2 location. 1f781423ee Enable use of service user token with admin context efb01985db Use force=True for os-brick disconnect during delete fa2ba3ab2c Handle zero pinned CPU in a cell with mixed policy 2cf835be82 Reproduce asym NUMA mixed CPU policy bug acb511652c Save cell socket correctly when updating host NUMA topology 29e3f2f2ab Reproduce bug 1995153 47b6850bb1 [stable-only] Update TOX_CONSTRAINTS_FILE for stable/2023.1 d081938e22 [stable-only] Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 3 +- .../admin/configuration/cross-cell-resize.rst | 2 +- .../admin/configuration/service-user-token.rst | 59 +++++++++++ .../admin/migrate-instance-with-snapshot.rst | 2 +- nova/api/openstack/wsgi.py | 6 -- nova/cmd/status.py | 11 ++ nova/network/neutron.py | 8 +- nova/service_auth.py | 6 +- .../functional/regressions/test_bug_1595962.py | 1 + .../functional/regressions/test_bug_1995153.py | 107 ++++++++++++++++++++ .../unit/virt/libvirt/volume/test_fibrechannel.py | 20 ++++ .../unit/virt/libvirt/volume/test_storpool.py | 16 ++- .../unit/virt/libvirt/volume/test_vzstorage.py | 8 +- nova/virt/hardware.py | 11 +- nova/virt/hyperv/vmops.py | 2 +- nova/virt/hyperv/volumeops.py | 12 +-- nova/virt/libvirt/driver.py | 7 +- nova/virt/libvirt/host.py | 31 +++++- nova/virt/libvirt/volume/fibrechannel.py | 7 +- nova/virt/libvirt/volume/fs.py | 2 +- nova/virt/libvirt/volume/iscsi.py | 7 +- nova/virt/libvirt/volume/lightos.py | 7 +- nova/virt/libvirt/volume/nvme.py | 6 +- nova/virt/libvirt/volume/quobyte.py | 2 +- nova/virt/libvirt/volume/scaleio.py | 7 +- nova/virt/libvirt/volume/smbfs.py | 2 +- nova/virt/libvirt/volume/storpool.py | 5 +- nova/virt/libvirt/volume/volume.py | 2 +- nova/virt/libvirt/volume/vzstorage.py | 5 +- nova/volume/cinder.py | 8 +- .../notes/service-user-token-421d067c16257782.yaml | 11 ++ tools/check-cherry-picks.sh | 2 +- tox.ini | 4 +- 65 files changed, 859 insertions(+), 187 deletions(-)

1 0

puppet-ironic 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are jazzed to announce the release of: puppet-ironic 19.5.0: Puppet module for OpenStack Ironic This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-ironic Download the package from: https://tarballs.openstack.org/puppet-ironic/ Please report issues through: https://bugs.launchpad.net/puppet-ironic/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The "ironic::conductor" class now supports the following two new parameters. * "heartbeat_interval" * "heartbeat_timeout" * The new "ironic::disk_utils" class has been added. * The new "ironic::pxe::tftp_use_xinetd" parameter has been added. When this parameter is set to "false", the ironic-dnsmasq-tftp- server service, which actually manages a dnsmasq process, is used instead of xinetd, to implement TFTP server. Note that the dnsmasq service is currently available only in RDO. * The pxe parameter *uefi_pxe_bootfile_name* is now managed by puppet, keeping the ironic default of *bootx64.efi*. The shim EFI binary is copied to the TFTP root directory, to a file named the value of *uefi_pxe_bootfile_name*. The grub EFI binary is copied to the TFTP root directory to a file named *grubx64.efi*. With these changes, using the pxe boot driver with UEFI boot will result in a grub network boot which is Secure Boot capable. Bug Fixes ********* * Now the "ironic::pxe" class properly installs the pxelinux.0 file using the separate "pxelinux" package in Debian and Ubuntu. The new "pxelinux_file_path" parameter can be used to determine the source path to locate the file. When this parameter is set to false then the class does not manage the file. * The wrong source directory to copy syslinux files in Debiand or Ubuntu has been fixed. * Fixed an issue where dnsmasq DHCP configuration for ironic- inspector would point to the wrong UEFI iPXE bootfile. See bug: 1952652 (https://bugs.launchpad.net/puppet-ironic/+bug/1952652) * Now the "tftpd-hap" package is installed insted of the "tftpd" package in Debian and Ubuntu. Changes in puppet-ironic 19.4.0..19.5.0 --------------------------------------- 1af3df3 Prepare the final stable/xena release 61f8ec1 Fix efi file paths in RHEL 596cd4c Copy shim and grub efi binaries to tftp root 181cb07 inspector: Fix wrong group of policy file 0d8437c setuptools: Disable auto discovery 8718318 Debian/Ubuntu: Fix installation of pxelinux.0 and syslinux files b12fcfe Debian/Ubuntu: The staging driver package is not available 6048343 Debian/Ubuntu: Do not use the ironic-inspector-dnsmasq service 1fcfe39 conductor: Support tuning of heartbeats 6aa42e8 Add support for [disk_utils] parameters fdf29c6 Debian/Ubuntu: Use tftpd-hpa instead of tftpd d30bb0e Refactor unit tests of ironic::pxe 3e6254b CentOS 9: Fix unit tests for ironic::pxe 7e1f420 Add support for MultiStrOpt (inspector) e9a5508 pxe: Create tftp_root directory before starting dnsmasq a51fce3 Support use of dnsmasq as tftp service d0bbd07 Fix invalid dependencies 2688458 Fix name of iPXE efi bootrom 7b15d40 Remove TripleO job a83a3dc Update TOX_CONSTRAINTS_FILE for stable/xena 5eeb1b1 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - .../{ini_setting.rb => openstackconfig.rb} | 4 +- lib/puppet/type/ironic_inspector_config.rb | 12 +- manifests/conductor.pp | 13 + manifests/disk_utils.pp | 61 +++++ manifests/drivers/pxe.pp | 19 +- manifests/drivers/staging.pp | 13 +- manifests/inspector.pp | 36 ++- manifests/inspector/policy.pp | 2 +- manifests/keystone/auth.pp | 4 +- manifests/params.pp | 48 +++- manifests/pxe.pp | 179 ++++++++++--- manifests/pxe/common.pp | 18 +- metadata.json | 2 +- .../conductor-heartbeat-d92790f3e6a59c4b.yaml | 8 + .../debian-syslinux-files-c36f21ae936c0594.yaml | 12 + .../notes/disk_utils-ff85c8b00595d8b8.yaml | 4 + ...q-uefi-ipxe-boot-filename-83fefc1e48ea7f4f.yaml | 8 + .../notes/tftp_use_xinetd-710c4eb59d3b0501.yaml | 8 + .../uefi_pxe_bootfile_name-eb2244dc9b9fd954.yaml | 12 + .../use-tftpd-hpa-in-debian-07f5429e791ab883.yaml | 5 + setup.py | 1 + spec/classes/ironic_conductor_spec.rb | 6 + spec/classes/ironic_disk_utils_spec.rb | 60 +++++ spec/classes/ironic_drivers_pxe_spec.rb | 9 +- spec/classes/ironic_drivers_staging_spec.rb | 9 +- spec/classes/ironic_inspector_policy_spec.rb | 4 +- spec/classes/ironic_inspector_spec.rb | 18 +- spec/classes/ironic_pxe_spec.rb | 287 ++++++++++++++++++--- ...ini_setting_spec.rb => openstackconfig_spec.rb} | 18 +- spec/unit/type/ironic_inspector_config_spec.rb | 45 ++++ templates/dnsmasq_tftp_server.erb | 8 + templates/inspector_dnsmasq_http.erb | 4 +- tox.ini | 2 +- 35 files changed, 800 insertions(+), 141 deletions(-)

1 0

glance_store 4.3.1 (antelope)
by no-reply＠openstack.org 17 May '23

17 May '23

We are psyched to announce the release of: glance_store 4.3.1: OpenStack Image Service Store Library This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 4.3.1 ^^^^^ Security Issues * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Changes in glance_store 4.3.0..4.3.1 ------------------------------------ a7eed02 Add force to os-brick disconnect 54d9449 Run cinder driver unit tests ddc4696 Update TOX_CONSTRAINTS_FILE for stable/2023.1 8d56f71 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder/base.py | 3 ++- releasenotes/notes/bug-2004555-4fd67fce86c07461.yaml | 11 +++++++++++ test-requirements.txt | 1 + tox.ini | 6 +++--- 8 files changed, 20 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b623f81..2eaa226 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,0 +14 @@ coverage!=4.4,>=4.0 # Apache-2.0 +ddt>=1.4.4 # MIT

1 0

glance_store 3.0.1 (yoga)
by no-reply＠openstack.org 17 May '23

17 May '23

We are gleeful to announce the release of: glance_store 3.0.1: OpenStack Image Service Store Library This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 3.0.1 ^^^^^ Security Issues *************** * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Bug Fixes ********* * Now the "project_domain_name" parameter and the "user_domain_name" parameter are properly used by swift backends. Previously these two parameters were ignored and the "*_domain_id" parameters should be set to use a keystone domain different from the default one. * Bug #1970698 (https://bugs.launchpad.net/glance- store/+bug/1970698): Cinder: Fixed exception logging when the image create operation fails due to failing to attach volume to glance host. * Bug #1969373 (https://bugs.launchpad.net/glance- store/+bug/1969373): Cinder Driver: Correct the retry interval from fixed 1 second to exponential backoff for attaching a volume during image create/save operation. Changes in glance_store 3.0.0..3.0.1 ------------------------------------ 2830182 Add force to os-brick disconnect bc9375e Fix tox4 error 4e5b90a Swift: Honor *_domain_name parameters 69fd0dc Cinder: Correct exception logging during attach c6716cb Correct retry interval during attach volume 88bd7fc Update TOX_CONSTRAINTS_FILE for stable/yoga 74fee65 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder.py | 5 +- glance_store/_drivers/swift/utils.py | 33 +++++----- glance_store/common/attachment_state_manager.py | 7 ++- glance_store/common/cinder_utils.py | 4 +- .../unit/common/test_attachment_state_manager.py | 13 +++- .../notes/bug-1620999-8b76a0ad14826197.yaml | 7 +++ .../notes/bug-2004555-4fd67fce86c07461.yaml | 11 ++++ ...ion-logging-during-attach-9546e24189db83c4.yaml | 6 ++ .../fix-interval-in-retries-471155ff34d9f0e9.yaml | 7 +++ tox.ini | 7 +-- 17 files changed, 247 insertions(+), 41 deletions(-)

1 0

keystoneauth1 5.2.0 (bobcat)
by no-reply＠openstack.org 17 May '23

17 May '23

We are satisfied to announce the release of: keystoneauth1 5.2.0: Authentication Library for OpenStack Identity This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/keystoneauth1 Download the package from: https://pypi.org/project/keystoneauth1 For more details, please see below. 5.2.0 ^^^^^ New Features ************ * [blueprint support-oauth2-mtls (https://blueprints.launchpad.net/keystone/+spec/support- oauth2-mtls)] Added a new OAuth2mTlsClientCredential plugin, accessible via the 'v3oauth2mtlsclientcredential' entry point, making possible to authenticate using an OAuth 2.0 Mutual-TLS client credentials. Keystoneauth can now be used to access the OpenStack APIs that use the keystone middleware to support OAuth2.0 mutual-TLS client authentication through the keystone identity server. Bug Fixes ********* * [bug 1998366 (https://bugs.launchpad.net/keystoneauth/+bug/1998366) Federated auth plugins now can work with unversioned auth url (e.g. "http://keystone"). Changes in keystoneauth1 5.1.2..5.2.0 ------------------------------------- 2e40bbf Update master for stable/2023.1 44e5b2d New auth plugin v3oidcdeviceauthz ca28df8 OAuth 2.0 Mutual-TLS Support 192a27a Remove six bef3dfb setup.cfg: Restore python_requires after a typo 737790f Allow federation to work with unversioned auth_url 19db34e Switch to 2023.1 Python3 unit tests and generic template name aaca2b3 Update master for stable/zed be2223c Replace abc.abstractproperty with property and abc.abstractmethod Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- keystoneauth1/_fair_semaphore.py | 4 +- keystoneauth1/_utils.py | 5 +- keystoneauth1/access/access.py | 8 + keystoneauth1/access/service_catalog.py | 5 +- keystoneauth1/discover.py | 7 +- keystoneauth1/exceptions/oidc.py | 9 + keystoneauth1/extras/_saml2/v3/adfs.py | 3 +- keystoneauth1/fixture/serializer.py | 5 +- keystoneauth1/fixture/v3.py | 18 +- keystoneauth1/identity/__init__.py | 10 +- keystoneauth1/identity/base.py | 9 +- keystoneauth1/identity/generic/base.py | 9 +- keystoneauth1/identity/v2.py | 5 +- keystoneauth1/identity/v3/__init__.py | 6 +- keystoneauth1/identity/v3/base.py | 11 +- keystoneauth1/identity/v3/federation.py | 10 +- keystoneauth1/identity/v3/k2k.py | 4 +- .../identity/v3/oauth2_mtls_client_credential.py | 125 +++++++++++ keystoneauth1/identity/v3/oidc.py | 148 ++++++++++++- keystoneauth1/identity/v3/tokenless_auth.py | 5 +- keystoneauth1/loading/_plugins/identity/v3.py | 54 +++++ keystoneauth1/loading/base.py | 4 +- keystoneauth1/session.py | 28 +-- .../unit/identity/test_identity_v3_federation.py | 18 +- .../bp-support-oauth2-mtls-177cda05265ae65c.yaml | 10 + .../notes/bug-1998366-27cd486b46fb56b0.yaml | 6 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 2 + releasenotes/source/zed.rst | 6 + requirements.txt | 5 - setup.cfg | 4 +- 44 files changed, 829 insertions(+), 137 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4f06ae0..30d3d7f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,4 +4,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -21 +16,0 @@ requests>=2.14.2 # Apache-2.0 -six>=1.10.0 # MIT

1 0

python-adjutantclient 1.0.0 (bobcat)
by no-reply＠openstack.org 17 May '23

17 May '23

We are excited to announce the release of: python-adjutantclient 1.0.0: Adjutant API Client Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-adjutantclient Download the package from: https://pypi.org/project/python-adjutantclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- adjutantclient For more details, please see below. Changes in python-adjutantclient 0.12.0..1.0.0 ---------------------------------------------- db795e2 Fix listing and removing roles from users. c50e3fe Fix typo in help text 5a92d90 Bugfix: Six removal introduced regression in v1/users b4ef3e6 Add check-requirements to Zuul tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + adjutantclient/common/base.py | 6 ++++-- adjutantclient/osc/v1/users.py | 8 +++----- adjutantclient/v1/roles.py | 3 ++- adjutantclient/v1/users.py | 2 +- requirements.txt | 4 ++-- test-requirements.txt | 1 - 7 files changed, 13 insertions(+), 12 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 75e7f0e..586e25e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ iso8601>=0.1.11 # MIT -osc-lib>=1.5.1 # Apache-2.0 +osc-lib>=1.8.0 # Apache-2.0 @@ -16 +16 @@ PyYAML>=3.10.0 # MIT -requests!=2.12.2,!=2.13.0,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index fe3f111..5078794 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +6,0 @@ ddt>=1.0.1 # MIT -discover # BSD

1 0

oslo.messaging 14.3.0 (bobcat)
by no-reply＠openstack.org 15 May '23

15 May '23

We exuberantly announce the release of: oslo.messaging 14.3.0: Oslo Messaging API This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.3.0 ^^^^^^ Bug Fixes * Fixed typo in variable names "rabbit_quorum_max_memory_length" and "rabbit_quorum_max_memory_bytes". Please make changes in your config files to correspond correct variables. Changes in oslo.messaging 14.2.0..14.3.0 ---------------------------------------- fd2381c7 Disable greenthreads for RabbitDriver "listen" connections 9b1e2dc4 Update master for stable/2023.1 115cfb5b Fix typo in quorum-related variables for RabbitMQ Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_rabbit.py | 12 ++++++++---- oslo_messaging/_utils.py | 3 +++ releasenotes/notes/rabbit_quorum_typo-9c06a9fd8d767f53.yaml | 6 ++++++ releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 6 files changed, 26 insertions(+), 6 deletions(-)

1 0

oslo.policy 4.2.0 (bobcat)
by no-reply＠openstack.org 15 May '23

15 May '23

We jubilantly announce the release of: oslo.policy 4.2.0: Oslo Policy library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. Changes in oslo.policy 4.1.1..4.2.0 ----------------------------------- 93129eb Revert "Moves supported python runtimes from version 3.8 to 3.10" 67a3d3b Moves supported python runtimes from version 3.8 to 3.10 d80573c Fix deprecated rule logic if the rule was deleted in policy directory. e7b9dd1 Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 20 ++++++++++---------- oslo_policy/policy.py | 1 + releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + setup.cfg | 1 + 5 files changed, 19 insertions(+), 10 deletions(-)

1 0