July 2023 - Release-announce - lists.openstack.org

python-tackerclient 1.10.1 (yoga)
by no-reply＠openstack.org 31 Jul '23

31 Jul '23

We are overjoyed to announce the release of: python-tackerclient 1.10.1: CLI and Client Library for OpenStack Tacker This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/python-tackerclient Download the package from: https://pypi.org/project/python-tackerclient Please report issues through: https://bugs.launchpad.net/python-tackerclient/+bugs For more details, please see below. Changes in python-tackerclient 1.10.0..1.10.1 --------------------------------------------- 1b5c1c7 Add vnflcm v2 APIs 0151fe1 Help message of heal cli modified f2d12b1 Fix in "vnflcm op list" CLI with exclude-fields 3eb3d5e Update TOX_CONSTRAINTS_FILE for stable/yoga e520f8e Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + setup.cfg | 7 ++++ .../samples/heal_vnf_instance_param_sample.json | 3 ++ tackerclient/osc/v1/vnflcm/vnflcm.py | 13 ++++++++ tackerclient/osc/v1/vnflcm/vnflcm_op_occs.py | 16 ++++++--- tox.ini | 4 +-- 8 files changed, 97 insertions(+), 10 deletions(-)

1 0

ec2-api 14.0.2 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We contentedly announce the release of: ec2-api 14.0.2: OpenStack Ec2api Service This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ec2-api Download the package from: https://pypi.org/project/ec2-api Please report issues through: https://bugs.launchpad.net/ec2-api/+bugs For more details, please see below. Changes in ec2-api 14.0.1..14.0.2 --------------------------------- a0ab299 Correct queue declaration in Zuul config 14c86d1 Remove TripleO job 834ff7b fix devstack params 0127f6f try to use neutron-vpnaas from plugin definition Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 10 +--------- devstack/create_config | 12 ++++++++++-- devstack/override-defaults | 2 -- 3 files changed, 11 insertions(+), 13 deletions(-)

1 0

designate 14.0.3 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We are happy to announce the release of: designate 14.0.3: DNS as a Service This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/designate Download the package from: https://tarballs.openstack.org/designate/ Please report issues through: https://bugs.launchpad.net/designate/+bugs For more details, please see below. 14.0.3 ^^^^^^ Bug Fixes * Fixed bug 2015762 which could cause managed records to occasionally fail to delete due to a race condition. (https://bugs.launchpad.net/designate/+bug/2015762) Changes in designate 14.0.2..14.0.3 ----------------------------------- b55b5de0 Remove designate-tox-dnspython-latest from stable 7cdbcf72 Fix TsigKeyring issues with dnspython 2.x f59448d9 Use ids when removing sink managed records 1df48dfe Use ids when removing ptr records f1981d05 [coordination] backend_url should be secret Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 - designate/central/service.py | 26 ++++-- designate/conf/coordination.py | 1 + designate/dnsutils.py | 3 +- designate/mdns/handler.py | 17 ++-- designate/notification_handler/base.py | 26 ++++-- ...lete-fails-intermittently-53168cf5cd830b59.yaml | 7 ++ 11 files changed, 254 insertions(+), 39 deletions(-)

1 0

manila 14.1.1 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We are overjoyed to announce the release of: manila 14.1.1: Shared Storage for OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 14.1.1 ^^^^^^ Bug Fixes * Fixed several Manila API error messages with their contents. For more details, please refer to launchpad bug #2007060 (https://bugs.launchpad.net/manila/+bug/2007060) Changes in manila 14.1.0..14.1.1 -------------------------------- 3ba4d992 Fix Manila API error message Diffstat (except docs and test files) ------------------------------------- manila/api/openstack/wsgi.py | 4 ++-- manila/api/v1/share_types_extra_specs.py | 4 ++-- manila/api/v1/shares.py | 8 ++++---- manila/api/v2/share_group_snapshots.py | 6 +++--- manila/api/v2/share_groups.py | 6 +++--- manila/api/v2/share_instance_export_locations.py | 2 +- manila/api/v2/share_replica_export_locations.py | 2 +- manila/api/v2/share_replicas.py | 14 +++++++------- manila/api/v2/share_types.py | 2 +- .../bug-2007060-fix-error-message-7a34357c0212d8f9.yaml | 6 ++++++ 10 files changed, 30 insertions(+), 24 deletions(-)

1 0

neutron 20.4.0 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We are stoked to announce the release of: neutron 20.4.0: OpenStack Networking This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 20.4.0 ^^^^^^ Known Issues ************ * When using ML2/OVN, during an upgrade procedure, the OVS system-id stored value can be changed. The ovn-controller service will create the "Chassis" and "Chassis_Private" registers based on this OVS system-id. If the ovn-controller process is not gracefully stopped, that could lead to the existence of duplicated "Chassis" and "Chassis_Private" registers in the OVN Southbound database. Bug Fixes ********* * A new OVN maintenance method "remove_duplicated_chassis_registers" is added. This method will periodically check the OVN Southbound "Chassis" and "Chassis_Private" tables looking for duplicated registers. The older ones (based on the "Chassis_Private.nb_cfg_timestamp" value) will be removed when more than one register has the same hostname, that should be unique. Other Notes *********** * The external_mac entry in the NAT table is used to distribute/centralize the traffic to the FIPs. When there is an external_mac set the traffic is distributed (DVR). When it is empty it is centralized through the gateway port (no DVR). Upon port status transition to down, the external_mac was removed regardless of DVR being enabled or not, leading to centralize the FIP traffic for DVR -- though it was for down ports that won't accept traffic anyway. Changes in neutron 20.3.1..20.4.0 --------------------------------- d55b30844f Fix ACL sync when default sg group is created 052c3899cb [OVN][L3] Optimize FIP update operation 6af9f70e0b Set result when lswitch port exist 61d9e5972d Ensure traffic is not centralized if DVR is enabled 4f043fb7ad Don't allow deletion of the router ports without IP addresses 78b7cf82dd Delete sg rule which remote is the deleted sg 3e6b2b77b2 [OVN] Expose chassis hosting information in LSP 226e29af1a Load FIP information during initialize not init 3785eac7a5 [OVN] Hash Ring: Set nodes as offline upon exit 73ba302faf [OVN] Improve Hash Ring logs 4764ed550a [qos] _validate_create_network_callback return in no network cd4f345f60 [OVN][Trunk] Add port binding info on subport when parent is bound 5ae479c7e3 Delete the "Chassis_Private" register when deleting an agent 3328be0994 Return 409 Conflict to tenant user deleting port attached to FIP ba16962d34 [OVN] Remove SB "Chassis"/"Chassis_Private" duplicated registers d541ee9731 Make DB migration creating indexes in RBACs conditional 70a7188209 [OVN][Migration] Enable settings backup subnet for NFS clients b6145ee13e Handle no more IP addresses available during a network sync Diffstat (except docs and test files) ------------------------------------- neutron/agent/l3/dvr_local_router.py | 3 + neutron/api/rpc/handlers/securitygroups_rpc.py | 7 +++ neutron/cmd/ovn/neutron_ovn_db_sync_util.py | 10 ++-- neutron/common/ovn/constants.py | 1 + neutron/common/ovn/exceptions.py | 7 ++- neutron/common/ovn/hash_ring_manager.py | 9 ++- neutron/db/l3_db.py | 33 +++++++---- .../expand/ba859d649675_add_indexes_to_rbacs.py | 26 ++++++++- neutron/db/ovn_hash_ring_db.py | 53 ++++++++++++++---- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 40 +++++++++---- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 1 + .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 57 +++++++++++++++++++ .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 65 ++++++++++++++++++---- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 37 ++++++++++-- neutron/services/ovn_l3/plugin.py | 2 +- neutron/services/qos/qos_plugin.py | 4 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 30 ++++++++-- .../test_ba859d649675_add_indexes_to_rbacs.py | 55 ++++++++++++++++++ .../ovn/mech_driver/ovsdb/test_maintenance.py | 58 +++++++++++++++++++ .../ovn/mech_driver/ovsdb/test_ovn_client.py | 18 ++++++ .../drivers/ovn/mech_driver/test_mech_driver.py | 22 +++++++- .../trunk/drivers/ovn/test_trunk_driver.py | 50 ++++++++++++----- .../api/rpc/handlers/test_securitygroups_rpc.py | 50 ++++++++++++++++- .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 2 +- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 24 ++++++++ .../drivers/ovn/mech_driver/test_mech_driver.py | 35 ++++++++---- .../trunk/drivers/ovn/test_trunk_driver.py | 2 + .../notes/dvr-external-mac-934409413e515eb2.yaml | 10 ++++ ...ve_duplicated_ovn_chassis-df12fb6233ea3d3e.yaml | 17 ++++++ .../tripleo_environment/ovn_migration.sh | 4 +- .../playbooks/roles/recovery-backup/tasks/main.yml | 1 + 38 files changed, 778 insertions(+), 108 deletions(-)

1 0

zun 9.1.0 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We contentedly announce the release of: zun 9.1.0: OpenStack Containers service This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/zun Download the package from: https://tarballs.openstack.org/zun/ Please report issues through: https://bugs.launchpad.net/zun/+bugs For more details, please see below. Changes in zun 9.0.0..9.1.0 --------------------------- ab9eb3b3 Specify a specific version of docker 4b24ccdc zuul: Declare queue at top level e0d0c28d Drop lower constraint job ae4812fc Update TOX_CONSTRAINTS_FILE for stable/yoga 97c37534 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 +- devstack/settings | 2 + lower-constraints.txt | 168 -------------------------------------------------- tox.ini | 11 +--- zun/cni/api.py | 3 +- 6 files changed, 8 insertions(+), 181 deletions(-)

1 0

kuryr-kubernetes 6.0.1 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We are stoked to announce the release of: kuryr-kubernetes 6.0.1: Kubernetes integration with OpenStack networking This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kuryr-kubernetes Download the package from: https://tarballs.openstack.org/kuryr-kubernetes/ Please report issues through: https://bugs.launchpad.net/kuryr-kubernetes/+bugs For more details, please see below. Changes in kuryr-kubernetes 6.0.0..6.0.1 ---------------------------------------- f51aa74 Enable listener reconciliation on Yoga d39cc2b Remove `history undo last` from Dockerfiles 3a24e3d Force kvm and host-passthrough for Amphora jobs 80f2c4c Update TOX_CONSTRAINTS_FILE for stable/yoga a7170b2 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.d/base.yaml | 2 ++ .zuul.d/tempest-jobs.yaml | 6 ++++++ cni.Dockerfile | 4 ++-- controller.Dockerfile | 4 ++-- devstack/lib/kuryr_kubernetes | 1 + tox.ini | 4 ++-- 7 files changed, 16 insertions(+), 6 deletions(-)

1 0

manila-ui 7.0.1 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We are stoked to announce the release of: manila-ui 7.0.1: Manila Management Dashboard This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/manila-ui Download the package from: https://tarballs.openstack.org/manila-ui/ Please report issues through: https://bugs.launchpad.net/manila-ui/+bugs For more details, please see below. 7.0.1 ^^^^^ Bug Fixes * Bug #1967312 (https://launchpad.net/bugs/1967312) that caused the shares dashboard to fail loading has now been fixed. * Bug #1968925 (https://launchpad.net/bugs/1968925) that was preventing creation of share replicas has been fixed. Changes in manila-ui 7.0.0..7.0.1 --------------------------------- 48e3c2b Drop lower-constraints.txt and its testing 45888a9 Fix share replica creation 9fe5dab Workaround SDK bug in listing shares 4f63397 Update TOX_CONSTRAINTS_FILE for stable/yoga d8c1e8c Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - lower-constraints.txt | 134 --------------------- manila_ui/api/manila.py | 7 +- ...-1967312-fix-shares-panel-8b5da4eee68ba6c4.yaml | 5 + ...8925-fix-replica-creation-190321bf9fefe179.yaml | 5 + requirements.txt | 4 + tox.ini | 10 +- 9 files changed, 26 insertions(+), 153 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 93b09e2..4e4f3e8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. +

1 0

ovn-octavia-provider 2.2.0 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We are excited to announce the release of: ovn-octavia-provider 2.2.0: OpenStack Octavia integration with OVN This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ovn-octavia-provider Download the package from: https://tarballs.openstack.org/ovn-octavia-provider/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 2.2.0 ^^^^^ Known Issues ************ * Load Balancer Health Check for Floating IPs are not populated with the protocol port. At this way, when a backend is detected on ERROR state requests to the Floating IP are still distribute to the ERROR'ed members. In order to fix the existing Load Balancer Health Checks it is required to recreate the entire Octavia Health Monitor, which will recreate the associated OVN Load Balancer Health Check(s). Bug Fixes ********* * [bug 1997418 (https://bugs.launchpad.net/neutron/+bug/1997418) Added the protocol port to the Load Balancer Health Check associated with the Floating IP, additional fields have been introduced to the external_ids to provide more accuracy information about the entities affected by any change over the Floating IP or LB VIP. Changes in ovn-octavia-provider 2.1.1..2.2.0 -------------------------------------------- 480bfc3 Fix port for Load Balancer Health Check for FIP 80eae2d Update pool upon HM deletion request 72cd160 Ensure DVR is restablished on member on cascade deletion Diffstat (except docs and test files) ------------------------------------- ovn_octavia_provider/common/constants.py | 2 + ovn_octavia_provider/driver.py | 13 ++ ovn_octavia_provider/helper.py | 174 +++++++++++---------- .../notes/lbhc-fix-fip-05820d5a9d94a919.yaml | 16 ++ 6 files changed, 200 insertions(+), 136 deletions(-)

1 0

heat-agents 4.0.1 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We are psyched to announce the release of: heat-agents 4.0.1: heat-agents This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/heat-agents Download the package from: https://tarballs.openstack.org/heat-agents/ Please report issues through: https://bugs.launchpad.net/heat-agents/+bugs For more details, please see below. Changes in heat-agents 4.0.0..4.0.1 ----------------------------------- d8c47ef Yoga-only: Add Python 3.9 to supported runtimes 27819fe Update TOX_CONSTRAINTS_FILE for stable/yoga c795b16 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + setup.cfg | 1 + tox.ini | 6 +++--- 3 files changed, 5 insertions(+), 3 deletions(-)

1 0

tacker 7.1.0 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We jubilantly announce the release of: tacker 7.1.0: OpenStack NFV Orchestration This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/tacker Download the package from: https://tarballs.openstack.org/tacker/ Please report issues through: https://bugs.launchpad.net/tacker/+bugs For more details, please see below. Changes in tacker 7.0.0..7.1.0 ------------------------------ 2625c003 Remove deprecated attributes from context 51ef6ca2 Fix usage of deprecated .best_match() 96ae85ee Drop lower-constraints.txt and its testing d06426d1 Suppress Warnings for SQL Alchemy IN operator Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - lower-constraints.txt | 157 ----------------------------------------- requirements.txt | 3 + tacker/api/v1/base.py | 9 ++- tacker/context.py | 3 +- tacker/objects/vnf_package.py | 25 +++---- tacker/policies/base.py | 2 +- tacker/wsgi.py | 6 +- tox.ini | 6 -- 11 files changed, 30 insertions(+), 185 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 80daa4d2..2a5a3bc8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,3 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix.

1 0

heat-dashboard 7.0.1 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We are jazzed to announce the release of: heat-dashboard 7.0.1: Heat Management Dashboard This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/heat-dashboard Download the package from: https://tarballs.openstack.org/heat-dashboard/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/heat- dashboard For more details, please see below. Changes in heat-dashboard 7.0.0..7.0.1 -------------------------------------- 36ae65e Drop lower-constraints.txt and its testing 111e6a1 Yoga-only: Fix wrong job teamplate used 39c14dc Set False to include_empty_option 4da3fa2 Fixed Unit test for Heat-dashboard 505f4fd Update TOX_CONSTRAINTS_FILE for stable/yoga bbb14f9 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 3 +- heat_dashboard/content/stacks/forms.py | 13 ++- heat_dashboard/test/helpers.py | 7 +- lower-constraints.txt | 146 ------------------------ requirements.txt | 8 +- tox.ini | 10 +- 8 files changed, 26 insertions(+), 167 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b737e47..0aa0c4a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. + @@ -10 +14 @@ -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=5.5.0 # Apache-2.0 @@ -15 +19 @@ python-heatclient>=1.10.0 # Apache-2.0 -horizon>=18.3.1 # Apache-2.0 +horizon>=22.0.0 # Apache-2.0

1 0

designate-dashboard 14.0.1 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We are satisfied to announce the release of: designate-dashboard 14.0.1: Designate Horizon UI bits This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/designate-dashboard Download the package from: https://tarballs.openstack.org/designate-dashboard/ Please report issues through: https://bugs.launchpad.net/designate-dashboard/+bugs For more details, please see below. Changes in designate-dashboard 14.0.0..14.0.1 --------------------------------------------- f2e7a13 Fix details pages reload behaviour aa3f958 Disable lower constraint job on stable/yoga 2a96e27 Fix issue with missing elements in the dashboard 8cd4637 Update TOX_CONSTRAINTS_FILE for stable/yoga 032c876 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - .../os-designate-floatingip.module.js | 2 +- .../actions/update.service.js | 1 - .../os-designate-recordset.module.js | 2 +- .../os-designate-zone/actions/update.service.js | 1 - .../os-designate-zone/os-designate-zone.module.js | 2 +- lower-constraints.txt | 131 --------------------- tox.ini | 8 +- 9 files changed, 5 insertions(+), 144 deletions(-)

1 0

trove-dashboard 18.0.1 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We exuberantly announce the release of: trove-dashboard 18.0.1: Trove Management Dashboard This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/trove-dashboard Download the package from: https://tarballs.openstack.org/trove-dashboard/ Please report issues through: https://bugs.launchpad.net/trove-dashboard/+bugs For more details, please see below. Changes in trove-dashboard 18.0.0..18.0.1 ----------------------------------------- 93a7fad Works around a failure to load openstack dashboard 35c12b7 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../databases/_launch_instances_network_help.html | 4 ++ .../templates/databases/_update_networks.html | 37 +++++++++++++++ .../content/databases/workflows/create_instance.py | 48 ++++++++++++++++++-- 6 files changed, 112 insertions(+), 40 deletions(-)

1 0

trove 17.0.1 (yoga)
by no-reply＠openstack.org 28 Jul '23

28 Jul '23

We high-spiritedly announce the release of: trove 17.0.1: OpenStack DBaaS This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/trove Download the package from: https://tarballs.openstack.org/trove/ Please report issues through: https://bugs.launchpad.net/trove/+bugs For more details, please see below. 17.0.1 ^^^^^^ Bug Fixes * check if the user input is legal, currently, trove may have a RCE vulnerability. more details see: Stroy 2010004 * Fix guest-agent failed to start postgres container due to execution of the "CREATE DATABASE" statement within the context manager of psycopg library. See the following for details Stroy 2010761 Changes in trove 17.0.0..17.0.1 ------------------------------- f07e85de Fix "create database" failed for postgress 25e67af5 [CI] Move queue setting to project level 08e960d1 Fix illegal shell characters b1bbc7d8 Change settings for stable/yoga e30d4c93 Update TOX_CONSTRAINTS_FILE for stable/yoga 5c621e83 Update TOX_CONSTRAINTS_FILE for stable/yoga 1a0fb8c8 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 6 +++--- devstack/settings | 2 +- .../elements/guest-agent/source-repository-guest-agent | 4 ++-- integration/scripts/trovestack | 2 +- integration/scripts/trovestack.rc | 2 +- .../notes/fix-illegal-value-be1acadc8c54c224.yaml | 6 ++++++ .../fix-postgress-create-database-75fbe03e3b4e296d.yaml | 8 ++++++++ tox.ini | 2 +- trove/backup/service.py | 3 +++ trove/common/cfg.py | 2 +- trove/common/exception.py | 4 ++++ trove/common/utils.py | 11 +++++++++++ trove/guestagent/api.py | 2 +- trove/guestagent/datastore/postgres/service.py | 7 +++++-- 16 files changed, 65 insertions(+), 13 deletions(-)

1 0

tooz 4.2.0
by no-reply＠openstack.org 26 Jul '23

26 Jul '23

We enthusiastically announce the release of: tooz 4.2.0: Coordination library for distributed systems. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz For more details, please see below. Changes in tooz 4.1.0..4.2.0 ---------------------------- bed303e Fix: Add timeout for mysql driver Diffstat (except docs and test files) ------------------------------------- tooz/drivers/mysql.py | 6 ++---- 2 files changed, 17 insertions(+), 5 deletions(-)

1 0

octavia 11.0.1 (zed)
by no-reply＠openstack.org 20 Jul '23

20 Jul '23

We contentedly announce the release of: octavia 11.0.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 11.0.1 ^^^^^^ Security Issues *************** * Filter out private information from the taskflow logs when ''INFO'' level messages are enabled and when jobboard is enabled. Logs might have included TLS certificates and private_key. By default, in Octavia only WARNING and above messages are enabled in taskflow and jobboard is disabled. Bug Fixes ********* * Added a filter to hide a bogus ComputeWaitTimeoutException exception when creating an amphora when jobboard is disabled. This exception is part of the flow when creating a load balancer or an amphora and should not be shown to the user. * The parameters of a taskflow Flow were logged in ''INFO'' level messages by taskflow, it included TLS-enabled listeners and pools parameters, such as certificates and private_key. * Fix an authentication error with Barbican when creating a TERMINATED_HTTPS listener with application credential tokens or trust IDs. * Fixed a potential race condition in the member batch update API call, the load balancers might not have been locked properly. * Fixed a "corrupted global server state file" error in Centos 9 Stream when reloading the state of the servers after restarting haproxy. It also fixed the recovering of the operational state of the servers in haproxy after its restart. * Fix a bug when full graph of load balancer is created without listeners if jobboard_enabled=False * Fixed a bug that prevented Octavia from creating listeners with the fully-populated load balancer API in SINGLE topology mode. * Fixed backwards compatibility issue with the feature that preserves HAProxy server states between reloads. HAProxy version 1.5 or below do not support this feature, so Octavia will not to activate it on amphorae with those versions. * Fixed a bug that didn't set all the active load balancer Health Monitors ONLINE in populated LB single-create calls. * Fix a bug that prevented the operating_status of a health-monitor to be set to ONLINE when ipv6 addresses were enclosed within square brackets in "controller_ip_port_list". * Fixed a potential error when plugging a member from a new network after deleting another member and unplugging its network. Octavia may have tried to plug the new network to a new interface but with an already existing name. This fix requires to update the Amphora image. * Fix an issue with PING health-monitors on Centos 8 Stream. Changes in Centos and systemd prevent an unprivileged user from sending ping requests from a network namespace. * Fixed a bug that didn't set the correct provisioning_status for unattached pools when creating a fully-populated load balancer. * Fixed an SELinux issues with TCP-based health-monitor on UDP pools, some specific monitoring ports were denied by SELinux. The Amphora image now enables the "keepalived_connect_any" SELinux boolean that allows connections to any ports. * When plugging a new member subnet, the amphora sends an IP advertisement of the newly allocated IP. It allows the servers on the same L2 network to flush the ARP entries of a previously allocated IP address. Changes in octavia 11.0.0..11.0.1 --------------------------------- 4d52ce9c Fix TCP HMs on UDP pools with SELinux 2e034c1e Fix hm operating status to ONLINE in single lb call 05b33434 Avoid interface name collisions in the amphora 396785da Fix pool creation with single LB create call ba0c244d Fix pep8 error 6a380e37 Send IP advertisements when plugging a new member subnet 332d7dee Fix octavia to accept [ipv6]:port b2437857 Fix ORM caching for with_for_update calls c87fbc07 Fix grenade job & pin pylint on stable/branches 4022aaf7 Filter out details from taskflow logs with v2+jobboard 0bc7d289 Filter ComputeWaitTimeoutException when jobboard is disabled 8cd697e8 Fix PING health-monitor with recent Centos releases 4e9203ad Fix listener creation with fully-populated API cfd87ccb Fix full graph loadbalancer creation if jobboard is disabled 572c0dac Add a newline when writing the server state file fb2e1d2e Handle feature compatibility of HAProxy server-state-file option 48fad7c2 Fix prometheus-proxy service name in Red Hat-based distros 960977cc Fix barbican client with application credentials/trusts b7fc5b10 Add *.orig to .gitignore 4f2a019d Update TOX_CONSTRAINTS_FILE for stable/zed d8ec4499 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .gitreview | 1 + .../12-enable-prometheus-proxy-systemd | 2 +- .../amphora-agent/source-repository-amphora-agent | 4 +- elements/amphora-agent/svc-map | 3 + .../post-install.d/50-selinux-policies | 3 + .../post-install.d/20-haproxy-tune-kernel | 8 +++ elements/octavia-lib/source-repository-octavia-lib | 2 +- octavia/amphorae/backends/agent/api_server/plug.py | 25 +++++-- octavia/amphorae/backends/agent/api_server/util.py | 21 ++++++ .../backends/health_daemon/health_sender.py | 2 + octavia/amphorae/backends/utils/haproxy_query.py | 2 +- octavia/certificates/common/auth/barbican_acl.py | 27 ++++---- octavia/common/base_taskflow.py | 44 ++++++++++++ octavia/common/constants.py | 1 + .../jinja/haproxy/combined_listeners/jinja_cfg.py | 4 +- .../haproxy/combined_listeners/templates/base.j2 | 2 + .../combined_listeners/templates/haproxy.cfg.j2 | 2 +- .../haproxy/combined_listeners/templates/macros.j2 | 4 +- .../controller/worker/v1/flows/listener_flows.py | 3 + .../worker/v1/flows/load_balancer_flows.py | 31 +++++---- .../controller/worker/v1/tasks/database_tasks.py | 44 +++++++++++- octavia/controller/worker/v2/controller_worker.py | 7 +- .../controller/worker/v2/flows/listener_flows.py | 3 + .../worker/v2/flows/load_balancer_flows.py | 32 +++++---- .../controller/worker/v2/tasks/database_tasks.py | 45 +++++++++++- octavia/db/repositories.py | 80 +++++++++++++++------- octavia/hacking/checks.py | 2 +- .../backend/agent/api_server/test_server.py | 19 +++-- .../agent/api_server/test_haproxy_compatibility.py | 2 - .../backends/agent/api_server/test_plug.py | 60 ++++++++++++++-- .../backends/agent/api_server/test_util.py | 35 ++++++++++ .../backends/health_daemon/test_health_sender.py | 18 +++++ .../amphorae/backends/utils/test_haproxy_query.py | 2 +- .../certificates/common/auth/test_barbican_acl.py | 3 +- .../haproxy/combined_listeners/test_jinja_cfg.py | 69 +++++++------------ .../sample_configs/sample_configs_combined.py | 5 +- .../worker/v1/flows/test_load_balancer_flows.py | 7 +- .../worker/v1/tasks/test_database_tasks.py | 63 +++++++++++++++-- .../worker/v2/flows/test_load_balancer_flows.py | 7 +- .../worker/v2/tasks/test_database_tasks.py | 56 ++++++++++++++- .../controller/worker/v2/test_controller_worker.py | 47 +++++++++++++ ...on-when-jobboard-disabled-6f1375463f5a71dc.yaml | 7 ++ ...mation-from-taskflow-logs-0d8697140423b4d5.yaml | 12 ++++ ...tial-tokens-with-barbican-3b7d13283206c124.yaml | 5 ++ ...ber-update-race-condition-09b82e2cc3121e03.yaml | 5 ++ ...-global-server-state-file-325ab7c62e21ff14.yaml | 7 ++ ...dbalancer-creation-if-jobboard-is-disabled.yaml | 5 ++ ...opulated-lb-with-listener-92a369ea8d57e8f5.yaml | 5 ++ ...y-about-server-state-file-df70e5ac859417e2.yaml | 7 ++ ...-online-in-single-lb-call-214a7ca22937a877.yaml | 5 ++ ...ress-enclosed-in-brackets-c1cfc4717465ba09.yaml | 6 ++ ...twork-interface-collision-939fd32587ea3344.yaml | 8 +++ ...-ping-hm-on-centos-stream-6624f19c8da86e22.yaml | 6 ++ ...tatus-on-lb-single-create-897070aee0a42da6.yaml | 5 ++ ...linux-tcp-hm-on-udp-pools-89c3b8db89e359ba.yaml | 7 ++ ...-subnet-ip-advertisements-af2264844079ef6b.yaml | 6 ++ test-requirements.txt | 2 +- tox.ini | 8 +-- zuul.d/jobs.yaml | 9 +-- 62 files changed, 811 insertions(+), 186 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 051ebbdf..9fc15cb1 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ oslotest>=3.2.0 # Apache-2.0 -pylint>=2.5.3 # GPLv2 +pylint>=2.5.3,<=2.15.10 # GPLv2

1 0

octavia 10.1.0 (yoga)
by no-reply＠openstack.org 19 Jul '23

19 Jul '23

We are satisfied to announce the release of: octavia 10.1.0: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 10.1.0 ^^^^^^ Known Issues ************ * When using a distribution with a recent SELinux release such as CentOS 8 Stream, PING health-monitor does not work as shell_exec_t calls are denied by SELinux. * Fixed configuration issue which allowed authenticated and authorized users to inject code into HAProxy configuration using API requests. Octavia API no longer accepts unencoded whitespace characters in url_path values in update requests for healthmonitors. Upgrade Notes ************* * The fix that updates the Netfilter Conntrack Sysfs variables requires rebuilding the amphora image in order to be effective. Security Issues *************** * Filter out private information from the taskflow logs when ''INFO'' level messages are enabled and when jobboard is enabled. Logs might have included TLS certificates and private_key. By default, in Octavia only WARNING and above messages are enabled in taskflow and jobboard is disabled. Bug Fixes ********* * In order to avoid hitting the Neutron API hard when batch update with creating many new members, we cache the subnet validation results in batch update members API call. We also change to validate new members only during batch update members since subnet ID is immutable. * Ensure that the provided rsyslog configuration file is used by rsyslog in the amphora by restarting the service when using the amphorav1 provider, it fixes the log offloading feature on distributions that start rsyslog before cloud-init. * The parameters of a taskflow Flow were logged in ''INFO'' level messages by taskflow, it included TLS-enabled listeners and pools parameters, such as certificates and private_key. * Fix an authentication error with Barbican when creating a TERMINATED_HTTPS listener with application credential tokens or trust IDs. * Fixed a potential race condition in the member batch update API call, the load balancers might not have been locked properly. * Fix an issue that may have occurred when running the amphorav2 with persistence, the ComputeActiveWait was incorrectly executed twice on different controllers. * Fixed a "corrupted global server state file" error in Centos 9 Stream when reloading the state of the servers after restarting haproxy. It also fixed the recovering of the operational state of the servers in haproxy after its restart. * Fix disabled UDP pools. Disabled UDP pools were marked as "OFFLINE" but the requests were still forwarded to the members of the pool. * Fix the shutdown of the driver-agent, the process might have been stuck while waiting for threads to finish. Systemd would have killed the process after a timeout, but some children processes might have leaked on the controllers. * Enable required SELinux booleans for CentOS or RHEL amphora image. * Fix a bug when full graph of load balancer is created without listeners if jobboard_enabled=False * Fixed a bug that prevented Octavia from creating listeners with the fully-populated load balancer API in SINGLE topology mode. * Fixed backwards compatibility issue with the feature that preserves HAProxy server states between reloads. HAProxy version 1.5 or below do not support this feature, so Octavia will not to activate it on amphorae with those versions. * Fix a bug that prevented the provisioning_state of a health- monitor to be set to ERROR when an error occurred while creating, updating or deleting a health-monitor. * Fixed a bug that didn't set all the active load balancer Health Monitors ONLINE in populated LB single-create calls. * Fix a bug that prevented the operating_status of a health-monitor to be set to ONLINE when ipv6 addresses were enclosed within square brackets in "controller_ip_port_list". * Fixes listener creation failure when protocol used is PROXY or PROXYV2 which are pool protocol and not listener protocol. * Fix update listener certs failed. The fix ensures that an existing certificate gets overwritten properly. * Fixed a potential error when plugging a member from a new network after deleting another member and unplugging its network. Octavia may have tried to plug the new network to a new interface but with an already existing name. This fix requires to update the Amphora image. * Netfilter Conntrack Sysfs variables net.netfilter.nf_conntrack_max and nf_conntrack_expect_max get set to sensible values on the amphora now. Previously, kernel default values were used which were much too low for the configured net.netfilter.nf_conntrack_buckets value. As a result packets could get dropped because the conntrack table got filled too quickly. Note that this affects only UDP and SCTP protocol listeners. Connection tracking is disabled for TCP- based connections on the amphora including HTTP(S). * Now the "[nova] service_name" parameter is effectively used to find the nova endpoint in keystone catalog. The parameter had no effect before it was fixed. * Fix an issue with PING health-monitors on Centos 8 Stream. Changes in Centos and systemd prevent an unprivileged user from sending ping requests from a network namespace. * Fix PING health-monitors with recent haproxy releases (>=2.2), haproxy now requires an additional "insecure-fork-wanted" option to authorize the Octavia PING healthcheck. * Fix a bug when adding a member on a subnet that belongs to a network with multiple subnets, an incorrect subnet may have been plugged in the amphora. * Fix a bug when deleting the last member plugged on a network, the port that was no longer used was not deleted. * Fixed a bug that didn't set the correct provisioning_status for unattached pools when creating a fully-populated load balancer. * Fix a bug when updating a load balancer with a QoS policy after a failover, Octavia attempted to update the VRRP ports of the deleted amphorae, moving the provisioning status of the load balancer to ERROR. * Fix a potential race condition when updating a resource in the amphorav2 worker. The worker was not waiting for the resource to be set to PENDING_UPDATE, so the resource may have been updated with old data from the database, resulting in a no-op update. * Fix the rescheduling of taskflow tasks that have been resumed after being interrupted. * Fixed issue with SELinux and the lvs-masquerade.sh script on the amphora. The script already runs with root permissions, so the use of sudo inside the script is unneeded. * Fixed an SELinux issues with TCP-based health-monitor on UDP pools, some specific monitoring ports were denied by SELinux. The Amphora image now enables the "keepalived_connect_any" SELinux boolean that allows connections to any ports. * Fix an issue when Octavia performs a failover of an ACTIVE-STANDBY load balancer that has both amphorae missing. Some tasks in the controller took too much time to timeout because the timeout value defined in "[haproxy_amphora].active_connection_max_retries" and "[haproxy_amphora].active_connection_rety_interval" was not used. * Fix a serialization issue when using TLSContainer with amphorav2 driver with persistence, a list of bytes type in the data model was not correctly converted to serializable data. * Fixed "Could not retrieve certificate" error when updating/deleting the client_ca_tls_container_ref field of a listener after a CA/CRL was deleted. * Fix a python3 error that prevented to use the "[controller_worker]/user_data_config_drive" option when building amphorae. * Fixed validations in L7 rule and session cookie APIs in order to prevent authenticated and authorized users to inject code into HAProxy configuration. CR and LF (\r and \n) are no longer allowed in L7 rule keys and values. The session persistence cookie names must follow the rules described in https://developer.mozilla.org/en- US/docs/Web/HTTP/Headers/Set-Cookie. * Fix load balancers stuck in PENDING_UPDATE issues for some API calls (POST /l7rule, PUT /pool) when a provider denied the call. * The Octavia API returned an unhelpful message when a constraint failed while creating an object in the DB. The error now contains the name and the value of the parameter that breaks the constraints. * When plugging a new member subnet, the amphora sends an IP advertisement of the newly allocated IP. It allows the servers on the same L2 network to flush the ARP entries of a previously allocated IP address. * Validate that the creation of L7 policies is compatible with the protocol of the listener in the Amphora driver. L7 policies are allowed for Terminated HTTPS or HTTP protocol listeners, but not for HTTPS, TCP or UDP protocols listeners. Other Notes *********** * The string representation of data base model objects has been improved. Calling str() on them will return a certain subset of fields and calling repr() on them will return all fields. This is helpful for debugging, but it may also change some of the log messages that Octavia emits. Changes in octavia 10.0.0..10.1.0 --------------------------------- da9dc123 Fix TCP HMs on UDP pools with SELinux b555ffc2 Fix hm operating status to ONLINE in single lb call 202d1dc4 Avoid interface name collisions in the amphora dabd33af Fix pool creation with single LB create call e0f7a145 Send IP advertisements when plugging a new member subnet 09e0beb6 Fix pep8 error dd29742d Prevent incorrect reschedule of resumed tasks with jobboard db22c0b9 Fix serialization of lists in data_models.to_dict e4cfb3e5 Remove incorrect info message ae3cc5b3 Enable taskflow retry feature when waiting for compute 0c8c5037 Fix octavia to accept [ipv6]:port df2a5275 Fix ORM caching for with_for_update calls cc276721 Fix ignored [nova] service_name 6ae3d23e Fix listener creation allowing pool protocol d3191eb9 Fix unclear error messages in the API 524ce505 Fix update listener certs doesn't work 3b3458b7 Fix template issue with user_data_config_drive 3380b292 Fix prometheus-proxy systemd service 4b588d4e Fix grenade job 23a7ca77 Pin pylint on stable/branches 46f774ad Filter out details from taskflow logs with v2+jobboard 2e5bc334 Fix PING health-monitor with recent Centos releases d4d8d597 Fix PING health-monitor with recent haproxy releases 66a62bc2 Fix listener creation with fully-populated API c662e42b Fix full graph loadbalancer creation if jobboard is disabled 3605689a Add a newline when writing the server state file 8aa5eaa8 Handle feature compatibility of HAProxy server-state-file option 74736870 Fix barbican client with application credentials/trusts 5efaf360 Fix prometheus-proxy service name in Red Hat-based distros 0d8a06bd Use python3.9 for tips jobs d4b0c4f5 Restart rsyslog from cloud-init in amphorav1 10042f76 Add *.orig to .gitignore 64947c5f Fix sporadic unit test failure 62e1d1fa Update zuul queue configuration 71c61b80 Fix plugging member subnets on existing networks e76efd82 Passphrase parameters should be secret d75613fa Reconfigure amphora network interfaces seamlessly 0598c4fb Ignore status update on deleted objects in driver-agent 384619ef Cache subnets validation for batch member update 3e6f180b Fix bug when rolling back prov and op status for some API calls 328ffc00 Fix PortNotFound exception when updating a LB after a failover d5565417 Catch exceptions on I/O in driver-agent 995fe216 Apply openstack-selinux policies in Centos amphorae ef76cbf7 Change FIPS jobs to centos-9-stream 1a1c5d42 Fix driver-agent cleanup 74f2baf5 Fix update/delete listener CA/CRL error c8dd836e Move system scoped secure-RBAC to separate file 5ca3849a Fix HealthMonitorToErrorOnRevertTask revert method 2cb52fe6 Improve string representation of DB models e6989982 Fix duplicate object error messages 9a25da98 Fix potential race conditions on update requests in the v2 worker 78603681 Set sensible nf_conntrack_max value in amphora 7c3f2a57 Exclude invalid TLS version ef4ef042 Correct format of release note a2371823 Fix compile_amphora_details when using UDP listeners e397a118 Fix disabled UDP pools 133ec476 Validate L7Rule value and cookie name 399c2f17 Fix new pylint issues 9afb3af6 Reject invalid whitespace in HM url_path value 0df7c6b7 Remove unneeded sudo in lvs-masquerade.sh 4248e98a Deny the creation of L7Policies for HTTPS/TCP/UDP listeners 7aaac224 Fix AttributeError in exception handler 0a062cd6 Save the HAProxy state outside of its systemd unit 1da04d12 Pass timeout_dict to _get_haproxy_versions a8a35e08 Update TOX_CONSTRAINTS_FILE for stable/yoga c2939bc6 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + .gitreview | 1 + .pylintrc | 5 - diskimage-create/diskimage-create.sh | 9 +- .../prometheus-proxy.service | 2 +- .../12-enable-prometheus-proxy-systemd | 2 +- .../amphora-agent/source-repository-amphora-agent | 4 +- .../static/usr/local/bin/lvs-masquerade.sh | 4 +- elements/amphora-agent/svc-map | 3 + elements/amphora-selinux/README.rst | 3 + elements/amphora-selinux/element-deps | 2 + elements/amphora-selinux/package-installs.json | 4 + elements/amphora-selinux/pkg-map | 12 + .../post-install.d/50-selinux-policies | 22 + .../post-install.d/20-haproxy-tune-kernel | 8 + elements/octavia-lib/source-repository-octavia-lib | 2 +- etc/policy/README.rst | 12 + etc/policy/keystone_default_roles-policy.yaml | 6 +- .../keystone_default_roles_scoped-policy.yaml | 37 + .../backends/agent/api_server/amphora_info.py | 8 +- .../backends/agent/api_server/loadbalancer.py | 14 +- .../amphorae/backends/agent/api_server/osutils.py | 26 +- octavia/amphorae/backends/agent/api_server/plug.py | 103 ++- .../amphorae/backends/agent/api_server/server.py | 3 +- .../api_server/templates/amphora-netns.systemd.j2 | 3 + .../agent/api_server/templates/systemd.conf.j2 | 1 - octavia/amphorae/backends/agent/api_server/util.py | 21 + .../backends/health_daemon/health_sender.py | 2 + octavia/amphorae/backends/utils/haproxy_query.py | 28 +- octavia/amphorae/backends/utils/interface.py | 231 +++++- octavia/amphorae/backends/utils/interface_file.py | 106 ++- octavia/amphorae/backends/utils/network_utils.py | 3 +- octavia/amphorae/drivers/driver_base.py | 9 +- .../amphorae/drivers/haproxy/rest_api_driver.py | 104 ++- .../drivers/keepalived/vrrp_rest_driver.py | 3 +- octavia/amphorae/drivers/noop_driver/driver.py | 11 +- octavia/api/drivers/amphora_driver/v1/driver.py | 13 + octavia/api/drivers/amphora_driver/v2/driver.py | 13 + .../api/drivers/driver_agent/driver_listener.py | 99 +-- octavia/api/drivers/driver_agent/driver_updater.py | 14 +- octavia/api/drivers/utils.py | 12 +- octavia/api/v2/controllers/health_monitor.py | 8 +- octavia/api/v2/controllers/l7policy.py | 8 +- octavia/api/v2/controllers/l7rule.py | 10 +- octavia/api/v2/controllers/listener.py | 14 +- octavia/api/v2/controllers/member.py | 48 +- octavia/api/v2/controllers/pool.py | 10 +- octavia/api/v2/types/l7rule.py | 13 +- octavia/api/v2/types/listener.py | 7 +- octavia/api/v2/types/pool.py | 14 +- octavia/certificates/common/auth/barbican_acl.py | 27 +- octavia/certificates/common/local.py | 6 +- octavia/common/base_taskflow.py | 97 ++- octavia/common/config.py | 8 +- octavia/common/constants.py | 16 +- octavia/common/data_models.py | 95 +-- .../jinja/haproxy/combined_listeners/jinja_cfg.py | 18 +- .../haproxy/combined_listeners/templates/base.j2 | 5 + .../combined_listeners/templates/haproxy.cfg.j2 | 2 +- .../haproxy/combined_listeners/templates/macros.j2 | 4 +- octavia/common/jinja/lvs/templates/macros.j2 | 6 +- octavia/common/validate.py | 1 + octavia/compute/drivers/nova_driver.py | 1 + octavia/controller/worker/v1/controller_worker.py | 3 + .../controller/worker/v1/flows/amphora_flows.py | 7 +- .../controller/worker/v1/flows/listener_flows.py | 3 + .../worker/v1/flows/load_balancer_flows.py | 33 +- octavia/controller/worker/v1/flows/member_flows.py | 31 +- .../worker/v1/tasks/amphora_driver_tasks.py | 14 +- .../controller/worker/v1/tasks/compute_tasks.py | 9 +- .../controller/worker/v1/tasks/database_tasks.py | 44 +- .../controller/worker/v1/tasks/lifecycle_tasks.py | 2 +- .../controller/worker/v1/tasks/network_tasks.py | 257 +++++-- octavia/controller/worker/v2/controller_worker.py | 94 ++- .../controller/worker/v2/flows/amphora_flows.py | 36 +- .../controller/worker/v2/flows/listener_flows.py | 3 + .../worker/v2/flows/load_balancer_flows.py | 34 +- octavia/controller/worker/v2/flows/member_flows.py | 31 +- .../worker/v2/tasks/amphora_driver_tasks.py | 16 +- .../controller/worker/v2/tasks/compute_tasks.py | 43 +- .../controller/worker/v2/tasks/database_tasks.py | 45 +- .../controller/worker/v2/tasks/lifecycle_tasks.py | 2 +- .../controller/worker/v2/tasks/network_tasks.py | 258 +++++-- octavia/db/base_models.py | 7 + octavia/db/models.py | 63 ++ octavia/db/repositories.py | 94 ++- octavia/hacking/checks.py | 2 +- octavia/network/base.py | 31 +- octavia/network/data_models.py | 5 +- .../drivers/neutron/allowed_address_pairs.py | 10 +- octavia/network/drivers/neutron/base.py | 32 + octavia/network/drivers/noop_driver/driver.py | 76 +- .../backend/agent/api_server/test_server.py | 74 +- .../api/drivers/driver_agent/test_driver_agent.py | 37 + .../backends/agent/api_server/test_amphora_info.py | 13 +- .../agent/api_server/test_haproxy_compatibility.py | 2 - .../backends/agent/api_server/test_loadbalancer.py | 5 +- .../backends/agent/api_server/test_osutils.py | 16 + .../backends/agent/api_server/test_plug.py | 200 ++++- .../backends/agent/api_server/test_util.py | 35 + .../backends/health_daemon/test_health_sender.py | 18 + .../amphorae/backends/utils/test_haproxy_query.py | 28 + .../unit/amphorae/backends/utils/test_interface.py | 282 ++++++- .../amphorae/backends/utils/test_interface_file.py | 160 +++- .../drivers/haproxy/test_rest_api_driver_0_5.py | 60 +- .../drivers/haproxy/test_rest_api_driver_1_0.py | 90 ++- .../amphorae/drivers/noop_driver/test_driver.py | 4 +- .../api/drivers/amphora_driver/v1/test_driver.py | 20 +- .../api/drivers/amphora_driver/v2/test_driver.py | 20 +- .../drivers/driver_agent/test_driver_listener.py | 173 ++++- .../certificates/common/auth/test_barbican_acl.py | 3 +- .../haproxy/combined_listeners/test_jinja_cfg.py | 186 ++++- .../sample_configs/sample_configs_combined.py | 26 +- .../common/sample_configs/sample_configs_split.py | 20 +- .../worker/v1/flows/test_amphora_flows.py | 8 +- .../worker/v1/flows/test_load_balancer_flows.py | 19 +- .../worker/v1/flows/test_member_flows.py | 25 +- .../worker/v1/tasks/test_amphora_driver_tasks.py | 18 +- .../worker/v1/tasks/test_compute_tasks.py | 44 +- .../worker/v1/tasks/test_database_tasks.py | 63 +- .../worker/v1/tasks/test_lifecycle_tasks.py | 2 +- .../worker/v1/tasks/test_network_tasks.py | 835 ++++++++++++++++++--- .../controller/worker/v1/test_controller_worker.py | 5 + .../worker/v2/flows/test_amphora_flows.py | 4 +- .../worker/v2/flows/test_load_balancer_flows.py | 19 +- .../worker/v2/flows/test_member_flows.py | 21 +- .../worker/v2/tasks/test_amphora_driver_tasks.py | 26 +- .../worker/v2/tasks/test_compute_tasks.py | 8 +- .../worker/v2/tasks/test_database_tasks.py | 56 +- .../worker/v2/tasks/test_lifecycle_tasks.py | 2 +- .../worker/v2/tasks/test_network_tasks.py | 803 ++++++++++++++++---- .../controller/worker/v2/test_controller_worker.py | 270 ++++++- .../drivers/neutron/test_allowed_address_pairs.py | 7 +- .../unit/network/drivers/neutron/test_base.py | 141 ++++ .../network/drivers/noop_driver/test_driver.py | 67 +- .../notes/catch_validation-27ffe48ca187c46f.yaml | 8 + ...syslog-reloaded-amphorav1-a4ec5127a459f3bf.yaml | 7 + ...mation-from-taskflow-logs-0d8697140423b4d5.yaml | 12 + ...tial-tokens-with-barbican-3b7d13283206c124.yaml | 5 + ...ber-update-race-condition-09b82e2cc3121e03.yaml | 5 + ...putewait-with-persistence-d10223bfb48a0ded.yaml | 6 + ...-global-server-state-file-325ab7c62e21ff14.yaml | 7 + .../fix-disabled-udp-pool-3e84558f996017d5.yaml | 5 + ...r-agent-graceful-shutdown-daff9ffaccb09a9e.yaml | 7 + ...nforced-selinux-on-centos-27842ca6afbb500c.yaml | 4 + ...dbalancer-creation-if-jobboard-is-disabled.yaml | 5 + ...opulated-lb-with-listener-92a369ea8d57e8f5.yaml | 5 + ...y-about-server-state-file-df70e5ac859417e2.yaml | 7 + ...itor-to-error-revert-task-feb38ba7641a4892.yaml | 6 + ...-online-in-single-lb-call-214a7ca22937a877.yaml | 5 + ...ress-enclosed-in-brackets-c1cfc4717465ba09.yaml | 6 + ...on-allowing-pool-protocol-b9e9ef147f6eeaf4.yaml | 5 + ...tener-update-certs-failed-315c66f4806e76c8.yaml | 5 + ...twork-interface-collision-939fd32587ea3344.yaml | 8 + ...onntrack-max-value-in-amp-0e16eb50b42e7b58.yaml | 15 + .../fix-nova-service_name-6bde4970047817f4.yaml | 6 + ...-ping-hm-on-centos-stream-6624f19c8da86e22.yaml | 6 + ...-ping-hm-with-haproxy-2.2-9b83777172fb8835.yaml | 6 + ...x-plugging-member-subnets-8560cd9403ff79a7.yaml | 8 + ...tatus-on-lb-single-create-897070aee0a42da6.yaml | 5 + ...-qos-apply-after-failover-561abbd153ab88ee.yaml | 6 + ...race-condiction-on-update-b5330c8fcf1800cd.yaml | 7 + ...chedule-of-jobboard-tasks-929c066dea9267fd.yaml | 5 + ...ue-with-lvs-masquerade.sh-ebbb89886148c70f.yaml | 6 + ...linux-tcp-hm-on-udp-pools-89c3b8db89e359ba.yaml | 7 + ...ut-dict-in-failover-tasks-537456e0fe1d7cb8.yaml | 9 + ...s-container-serialization-1cb83ad4c9eca3b8.yaml | 6 + ...-update-listener-ca-error-167464debc06cba2.yaml | 5 + ...ix-user_data_config_drive-b4ce8cc66fb21365.yaml | 6 + ...rules-and-session-cookies-cb88f3f1b90171f9.yaml | 9 + ...UPDATE-on-provider-errors-40a03adc8ef82a54.yaml | 5 + ...essage-failed-constraints-6ad10bd22cac523a.yaml | 6 + ...epresentation-of-db-model-1c4fe799186b4dea.yaml | 7 + ...-subnet-ip-advertisements-af2264844079ef6b.yaml | 6 + .../ping-healthcheck-selinux-e3b7d360c8503527.yaml | 6 + ...-protocols-for-l7policies-83d678171f13136a.yaml | 7 + ...rl_path-value-in-requests-3eb3adedcd696433.yaml | 7 + test-requirements.txt | 2 +- tox.ini | 8 +- zuul.d/jobs.yaml | 45 +- zuul.d/projects.yaml | 2 +- 197 files changed, 6080 insertions(+), 1231 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a4e7a9ba..555d738c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ oslotest>=3.2.0 # Apache-2.0 -pylint>=2.5.3 # GPLv2 +pylint>=2.5.3,<=2.15.10 # GPLv2

1 0

openstack-ansible 27.0.1 (antelope)
by no-reply＠openstack.org 19 Jul '23

19 Jul '23

We high-spiritedly announce the release of: openstack-ansible 27.0.1: Ansible playbooks for deploying OpenStack This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 27.0.0..27.0.1 ------------------------------------------- 400b89e92 Pin version of setuptools 9921c23ea Bump SHAs for stable/2023.1 a4a5925e5 Adjust default value for *_backend_ssl 49f0bd36e Add support for 'tls-transition' scenario 02d037920 Ensure management_address is used instead of ansible_host b107778f6 Add 2023.1 to the compatability matrix 7230336c0 [doc] Update upgrade guide to mention SLURP 2dffd36fa Remove other releases from 2023.1 index page Diffstat (except docs and test files) ------------------------------------- ansible-collection-requirements.yml | 2 +- ansible-role-requirements.yml | 34 ++-- deploy-guide/source/conf.py | 4 +- .../admin/upgrades/os-compatibility-matrix.html | 27 +++ global-requirement-pins.txt | 1 + inventory/group_vars/all/infra.yml | 6 +- inventory/group_vars/all/source_git.yml | 4 +- .../group_vars/blazar_all/haproxy_service.yml | 2 +- inventory/group_vars/cinder_all/source_git.yml | 4 +- inventory/group_vars/designate_all/source_git.yml | 4 +- inventory/group_vars/galera_all.yml | 4 +- inventory/group_vars/gnocchi_all/source_git.yml | 5 +- .../group_vars/horizon_all/haproxy_service.yml | 2 +- inventory/group_vars/horizon_all/source_git.yml | 6 +- inventory/group_vars/ironic_all/source_git.yml | 4 +- inventory/group_vars/magnum_all/source_git.yml | 4 +- inventory/group_vars/memcached.yml | 2 +- inventory/group_vars/neutron_all/source_git.yml | 6 +- inventory/group_vars/nova_all/source_git.yml | 4 +- inventory/group_vars/octavia_all/source_git.yml | 6 +- inventory/group_vars/swift_all/source_git.yml | 4 +- inventory/group_vars/trove_all/source_git.yml | 4 +- playbooks/common-tasks/unbound-clients.yml | 2 +- playbooks/healthcheck-infrastructure.yml | 18 +- .../galera-cluster-rolling-restart.yml | 2 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 3 + .../templates/user_variables_tls-transition.yml.j2 | 21 +++ 30 files changed, 145 insertions(+), 260 deletions(-)

1 0

XStatic-Angular-lrdragndrop 1.0.2.6
by no-reply＠openstack.org 19 Jul '23

19 Jul '23

We are pumped to announce the release of: XStatic-Angular-lrdragndrop 1.0.2.6: Angular-lrdragndrop 1.0.2 (XStatic packaging standard) The source is available from: https://opendev.org/openstack/XStatic-Angular-lrdragndrop Download the package from: https://pypi.org/project/XStatic-Angular-lrdragndrop For more details, please see below. Changes in XStatic-Angular-lrdragndrop 1.0.2.5..1.0.2.6 ------------------------------------------------------- c4790f2 Fix syntax error in isJqueryEventDataTransfer function Diffstat (except docs and test files) ------------------------------------- xstatic/pkg/angular_lrdragndrop/__init__.py | 2 +- xstatic/pkg/angular_lrdragndrop/data/lrdragndrop.js | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)

1 0

XStatic-Angular-lrdragndrop 1.0.2.5
by no-reply＠openstack.org 18 Jul '23

18 Jul '23

We are happy to announce the release of: XStatic-Angular-lrdragndrop 1.0.2.5: Angular-lrdragndrop 1.0.2 (XStatic packaging standard) The source is available from: https://opendev.org/openstack/XStatic-Angular-lrdragndrop Download the package from: https://pypi.org/project/XStatic-Angular-lrdragndrop For more details, please see below. Changes in XStatic-Angular-lrdragndrop 1.0.2.4..1.0.2.5 ------------------------------------------------------- fbbb6e2 Update event handling code for compatibility with jQuery 3.0 and above aec8e8b OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- xstatic/pkg/angular_lrdragndrop/__init__.py | 2 +- xstatic/pkg/angular_lrdragndrop/data/lrdragndrop.js | 16 +++++++++++++--- 3 files changed, 15 insertions(+), 5 deletions(-)

1 0

kolla-ansible 15.2.0 (zed)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We enthusiastically announce the release of: kolla-ansible 15.2.0: Ansible Deployment of Kolla containers This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 15.2.0 ^^^^^^ New Features ************ * Since CVE-2022-29404 is fixed the default value for the LimitRequestBody directive in the Apache HTTP Server has been changed from 0 (unlimited) to 1073741824 (1 GiB). This limits the size of images (for example) uploaded in Horizon. Now this limit can be configured via "horizon_httpd_limitrequestbody". LP#2012588 * etcd is now exposed internally via HAProxy on "etcd_client_port". * Added two new flags to alter behaviour in RabbitMQ: * *rabbitmq_message_ttl_ms*, which lets you set a TTL on messages. * *rabbitmq_queue_expiry_ms*, which lets you set an expiry time on queues. See https://www.rabbitmq.com/ttl.html for more information on both. * The config option *rabbitmq_ha_replica_count* is added, to allow for changing the replication factor of mirrored queues in RabbitMQ. While the flag is unset, the queues are mirrored across all nodes using "ha-mode":"all". Note that this only has an effect if the flag ` om_enable_rabbitmq_high_availability` is set to *True*, as otherwise queues are not mirrored. * The config option *rabbitmq_ha_promote_on_shutdown* has been added, which allows changing the RabbitMQ definition *ha-promote-on- shutdown*. By default *ha-promote-on-shutdown* is "when-synced". We recommend changing this to be "always". This basically means we don't mind losing some messages, instead we give priority to rabbitmq availability. This is most relevant when restarting rabbitmq, such as when upgrading. Note that setting the value of this flag, even to the default value of "when-synced", will cause RabbitMQ to be restarted on the next deploy. For more details please see: https://www.rabbitmq.com/ha.html#cluster-shutdown * Services using etcd3gw via tooz now use etcd via haproxy. This removes a single point of failure, where we hardcoded the first etcd host for backend_url. Upgrade Notes ************* * Default tags of "neutron_tls_proxy" and "glance_tls_proxy" have been changed to "haproxy_tag", as both services are using "haproxy" container image. Any custom tag overrides for those services should be altered before upgrade. Security Issues *************** * The kolla-genpwd, kolla-mergepwd, kolla-readpwd and kolla-writepwd commands now creates or updates passwords.yml with correct permissions. Also they display warning message about incorrect permissions. Bug Fixes ********* * The precheck for RabbitMQ failed incorrectly when "kolla_externally_managed_cert" was set to "true". LP#1999081 * Fixes removal of Elasicsearch and Kibana loadbalancer configs during migration to Opensearch, when those services are running on a dedicated monitoring node. * Fixes create sasl account before config file is ready. LP#2015589 * Set correct permissions for opensearch-dashboard data location *LP#2020152 https://bugs.launchpad.net/kolla-ansible/+bug/2020152* * The flags "--db-nb-pid" and "--db-sb-pid" have been corected to be " --db-nb-pidfile" and "--db-sb-pidfile" respectively. See here for reference: https://github.com/ovn- org/ovn/blob/6c6a7ad1c64a21923dc9b5bea7069fd88bcdd6a8/utilities/ovn- ctl#L1045 LP#2018436 * Configuration of service user tokens for all Nova and Cinder services is now done automatically, to ensure security of block- storage volume data. See LP#[2004555] for more details. * Fixes deployment when using Ansible check mode. LP#2002661 * Fixes the incorrect endpoint URLs and service type information for the Cyborg service in the Keystone. LP#2020080 * Set the etcd internal hostname and cacert for tls internal enabled deployments. This allows services to work with etcd when coordination is enabled for TLS interal deployments. Without this fix, the coordination backend fails to connect to etcd and the service itself crashes. * Fixes opensearch migration process. Including case when elasticsearch is located in regular folder instead of docker volume. Furthermore it now has checks if there is data to migrate. * When upgrading or deploying RabbitMQ, the policy *ha-all* is cleared if *om_enable_rabbitmq_high_availability* is set to *false*. Changes in kolla-ansible 15.1.0..15.2.0 --------------------------------------- 073a2f7d1 opensearch-dashboard: fix permissions fc861e74a Fix Bifrost: remove an extra curly bracket 99511eede Fix the Cyborg service 635330912 Fix passwords.yml permissions fc61357af docs: Fix note block 88f80d07f docs: Remove redundant section about vagrant-vbguest aa99d2c9a Correct [pci] syntax in Nova SRIOV documentation 5ed259ec0 Fix the fluentd regexp to collect the logs a662bd896 opensearch: alter path after using rpm/deb packaging 275b9f681 Fix Bash variable expansion issues in openrc file efe6650d0 always add service_user section to nova.conf 36f35d1b2 Correct ovn-ctl --db-nb-pidfile usage in templates 1ed6464c9 Designate: provide certificates file to use for neutron client requests 5f01fa1d5 Fix faulty precheck for RabbitMQ 423a42c65 Add precheck to fail if RabbitMQ HA needs configuring 602876011 Update notes about CentOS support 4c63d0edf cli: fix find globals.d 3dfca54df Remove RabbitMQ ha-all policy when not required 228ff5744 Fix create sasl account before config file is ready c78f8569b Fix maximum width of the DIB Multiline-YAML f764be111 opensearch: default dashboards tag to opensearch_tag 89d9a0c43 Fix merge action plugins verbose output b892a569f Add note about removing leading tabs in ceph.conf files fdf471697 Add flags for RabbitMQ message TTL & queue expiry 84e783f19 Fix deploy/genconfig in check mode a73e41168 Fix elasticsearch to opensearch migration 328737a0e Fix removal of Elasicsearch and Kibana loadbalancer configs baa2076fc nova: Fix live migration on RHEL9 derivatives dceb3a5a5 Add LimitRequestBody configuration for Horizon 743d1af89 Add flag to change RabbitMQ ha-mode definition 300f58471 RabbitMQ: Support setting ha-promote-on-shutdown 033da7aa3 Pin zun jobs to Docker 20 6cea19e30 cloudkitty: set cafile for fetcher_keystone 347b27cf7 ironic: fix dev mode for inspector 887ed175a Set the etcd internal hostname and cacert for tls internal enabled deployments c0a6271e7 hacluster: Use nodename to align with nova service names cef0e0060 Default neutron_tls_proxy and glance_tls_proxy to haproxy_tag 9e87a24f9 Use loadbalancer to connect to etcd fd4b9051b CI: Pin ansible-lint to <6.13.0 f2da37f13 Put etcd behind HTTP loadbalancer 829e83ca7 docs: fix information about libvirt SASL auth 39e178990 CI: Avoid running tgtd if BASE_DISTRO is rocky Diffstat (except docs and test files) ------------------------------------- ansible/action_plugins/merge_configs.py | 10 ++- ansible/action_plugins/merge_yaml.py | 27 ++++++-- ansible/group_vars/all.yml | 1 + ansible/roles/bifrost/tasks/config.yml | 1 + ansible/roles/bifrost/tasks/deploy-servers.yml | 2 +- ansible/roles/cinder/templates/cinder.conf.j2 | 8 ++- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 1 + ansible/roles/common/templates/admin-openrc.sh.j2 | 30 ++++----- .../common/templates/conf/input/00-global.conf.j2 | 4 +- ansible/roles/cyborg/defaults/main.yml | 8 +-- ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 +- .../roles/designate/templates/designate.conf.j2 | 1 + ansible/roles/etcd/defaults/main.yml | 8 ++- ansible/roles/etcd/tasks/loadbalancer.yml | 7 ++ ansible/roles/glance/defaults/main.yml | 3 +- .../roles/hacluster/tasks/bootstrap_service.yml | 8 +-- .../hacluster/templates/hacluster_corosync.conf.j2 | 2 +- ansible/roles/horizon/templates/horizon.conf.j2 | 3 + ansible/roles/ironic/defaults/main.yml | 4 +- ansible/roles/ironic/tasks/clone.yml | 3 +- .../ironic/templates/ironic-inspector.conf.j2 | 3 +- ansible/roles/keystone/tasks/config.yml | 1 + ansible/roles/mariadb/tasks/lookup_cluster.yml | 1 + ansible/roles/neutron/defaults/main.yml | 3 +- ansible/roles/nova-cell/handlers/main.yml | 14 +++- .../roles/nova-cell/tasks/get_cell_settings.yml | 1 + .../nova-cell/tasks/wait_discover_computes.yml | 1 + ansible/roles/nova-cell/templates/nova.conf.j2 | 13 ++++ ansible/roles/nova-cell/templates/sshd_config.j2 | 3 + ansible/roles/nova/templates/nova.conf.j2 | 13 ++++ .../roles/octavia/templates/octavia-openrc.sh.j2 | 16 ++--- ansible/roles/opensearch/defaults/main.yml | 2 +- ansible/roles/opensearch/tasks/upgrade.yml | 77 +++++++++++++++++++--- .../templates/opensearch-dashboards.json.j2 | 19 ++++-- .../roles/opensearch/templates/opensearch.json.j2 | 2 +- .../templates/opensearch_dashboards.yml.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- ansible/roles/rabbitmq/defaults/main.yml | 15 +++++ ansible/roles/rabbitmq/tasks/deploy.yml | 4 ++ ansible/roles/rabbitmq/tasks/precheck.yml | 28 ++++++++ .../roles/rabbitmq/tasks/remove-ha-all-policy.yml | 29 ++++++++ ansible/roles/rabbitmq/tasks/upgrade.yml | 4 ++ .../roles/rabbitmq/templates/definitions.json.j2 | 4 +- ansible/site.yml | 5 ++ .../reference/storage/external-ceph-guide.rst | 8 +++ kolla_ansible/cmd/genpwd.py | 19 +++++- kolla_ansible/cmd/mergepwd.py | 24 ++++++- kolla_ansible/cmd/readpwd.py | 19 +++++- kolla_ansible/cmd/writepwd.py | 10 +++ lint-requirements.txt | 2 +- ...-horizon-limitrequestbody-4f79433fa2cf1f6d.yaml | 9 +++ .../notes/bug-1999081-769f1012263a48fd.yaml | 6 ++ .../notes/bug-2006764-0b647c45b9258542.yaml | 6 ++ .../notes/bug-2015589-94427c14cd857c98.yaml | 5 ++ .../notes/bug-2020152-165c87048d92dedb.yaml | 5 ++ ...-ctl-pid-flag-in-template-d915fe4b71548da0.yaml | 8 +++ .../notes/cve-2023-2088-51e7e050be2139bf.yaml | 9 +++ .../etcd-tcp-loadbalancer-08d9332ee3be9a8b.yaml | 4 ++ .../notes/fix-check-mode-1f37ab5507c98954.yaml | 5 ++ .../notes/fix-cyborg-service-5bc5bf8748daf504.yaml | 6 ++ ...-etcd-coordination-config-b1c9f900ef13be13.yaml | 8 +++ .../fix-opensearch-migration-1d0ff64400a9a073.yaml | 6 ++ ...passwords-yml-permissions-ca73638b71aeadf4.yaml | 7 ++ ...sage-ttl-and-queue-expiry-c163a370708f5b20.yaml | 7 ++ ...change-replication-factor-321c2f9e08e7d179.yaml | 9 +++ ...mq-ha-promote-on-shutdown-9099c6643f2d0cce.yaml | 13 ++++ ...-policy-when-not-required-81dcf64542c4805f.yaml | 5 ++ ...s-proxies-use-haproxy-tag-aa030b5e5df6fbf0.yaml | 8 +++ ...r-for-etcdgw-coordination-6704a8b1389bbabe.yaml | 6 ++ tools/kolla-ansible | 2 +- tools/validate-all-file.py | 4 ++ zuul.d/base.yaml | 2 + zuul.d/jobs.yaml | 9 +++ zuul.d/project.yaml | 1 + 86 files changed, 603 insertions(+), 110 deletions(-) Requirements updates -------------------- diff --git a/lint-requirements.txt b/lint-requirements.txt index 1b0057f49..0f255aa34 100644 --- a/lint-requirements.txt +++ b/lint-requirements.txt @@ -2 +2 @@ ansible>=4,<6 # GPLv3 -ansible-lint>=6.0.0,<7.0.0 # MIT +ansible-lint>=6.0.0,<6.13.0 # MIT

1 0

kayobe 13.2.0 (zed)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We are thrilled to announce the release of: kayobe 13.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 13.2.0 ^^^^^^ New Features ************ * Adds support for custom Multipathd configuration. * Since Kolla containers can built with user provided "repos.yaml" Kayobe can override the file with their own content. The override files can be "${KAYOBE_CONFIG_PATH}/kolla/repos.yaml" (default Kolla filename) or "${KAYOBE_CONFIG_PATH}/kolla/repos.yml". Multiple Environments supported. Upgrade Notes ************* * Modifies the default value of "kolla_ansible_venv_python" to "/usr/bin/python3". Using operating system python to create kolla- ansible venv fixes corner cases when using older venvs created with "virtualenv" command. Bug Fixes ********* * Fixes download of roles from Ansible Galaxy following the renaming of the "mrlesmithjr.manage_lvm" role. LP#2023502 * Fixes an issue where generation of "passwords.yml" for Kolla Ansible could fail if the directory containing the file does not exist. This is typical in a multiple environment setup, when creating a new environment. See story 2010293 (https://storyboard.openstack.org/#!/story/2010293) for details. * Fixes an issue with systemd-networkd configuration on Ubuntu with multiple VLAN interfaces. See story 2009013 for details. * Fixes repositories files names in Rocky Linux 9. Distributions moved to lowercase names with RHEL 9 release. * Fixes various issues when applying network configuration on Rocky 9 hosts. See bugs: 2016970 (https://bugs.launchpad.net/kayobe/+bug/2016970) and 2016971 (https://bugs.launchpad.net/kayobe/+bug/2016971) * Installs "ncclient" dependency for Juniper switch configuration when using Ansible check mode. Changes in kayobe 13.1.0..13.2.0 -------------------------------- 6accbcf6 Correct name for role mrlesmithjr.manage_lvm a9de7481 Install ncclient even in check mode 46b19742 Allow to use own repos.y[a]ml file to build containers dfa09e28 Update gitignore for .vscode/ configuration files 586d2355 Show an error when *_bridge_ports is not a list a38ff957 CI: Unbreak stable/zed with two cherry-picks 2836db5a Revert back to MichaelRigart.interfaces f36bd35d Adds support for custom Multipathd configuration. c2e80b2c Fix an issue when 'acl' package can be forgotten 59d7cdfc Fix maximum width of the DIB Multiline-YAML 4fb98861 Fix merge action plugins verbose output 6b6dede9 Fix passwords.yml generation when parent directory doesn't exist dc142067 Fix kayobe_config_path description in globals.yml 5283382e CI: Add custom routing table output to logs. 317b6120 Move to Launchpad for project management 00e17020 Fix opensearch container builds b31fac7d Fixes repositories files name in Rocky Linux 9 c9b115ac CI: get repo directories from nodes for troubleshooting 7c4307c9 use OS python to create kolla-ansible venv c53d0956 CI: Disable disk image build in seed-upgrade jobs ee33d3a4 CI: Don't run Heat and Horizon in overcloud jobs 9c4e3163 Ubuntu: Fix networkd config for multiple VLANs without MTU Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + CONTRIBUTING.rst | 4 +-- README.rst | 2 +- ansible/inventory/group_vars/all/compute | 8 ++--- ansible/inventory/group_vars/all/controllers | 8 ++--- ansible/inventory/group_vars/all/infra-vms | 8 ++--- ansible/inventory/group_vars/all/kolla | 4 +-- ansible/inventory/group_vars/all/monitoring | 6 ++-- ansible/inventory/group_vars/all/seed | 8 ++--- ansible/inventory/group_vars/all/seed-hypervisor | 4 +-- ansible/inventory/group_vars/all/storage | 8 ++--- ansible/kolla-openstack.yml | 2 ++ ansible/lvm.yml | 2 +- ansible/roles/dev-tools/defaults/main.yml | 14 +++++--- ansible/roles/dnf/tasks/local-mirror.yml | 16 +++++++-- .../dnf/templates/CentOS-Stream-BaseOS.repo.j2 | 17 ---------- ansible/roles/dnf/templates/Rocky-BaseOS.repo.j2 | 16 --------- ...Stream-Extras.repo.j2 => centos-extras.repo.j2} | 0 ...tOS-Stream-AppStream.repo.j2 => centos.repo.j2} | 10 +++++- .../{Rocky-Extras.repo.j2 => rocky-extras.repo.j2} | 2 +- .../{Rocky-AppStream.repo.j2 => rocky.repo.j2} | 9 ++++- ansible/roles/junos-switch/tasks/main.yml | 1 + ansible/roles/kolla-ansible/defaults/main.yml | 2 +- .../roles/kolla-ansible/library/kolla_passwords.py | 3 ++ ansible/roles/kolla-bifrost/tasks/main.yml | 1 + .../templates/kolla/config/bifrost/dib.yml | 2 +- ansible/roles/kolla-build/defaults/main.yml | 2 +- ansible/roles/kolla-build/tasks/main.yml | 33 +++++++++++++++++-- .../kolla-build/templates/kolla/kolla-build.conf | 4 +++ ansible/roles/kolla-openstack/defaults/main.yml | 9 +++++ .../molecule/enable-everything/molecule.yml | 4 +++ ansible/roles/kolla-openstack/tasks/config.yml | 1 + .../kolla-openstack/templates/multipath.conf.j2 | 9 +++++ .../configuration/reference/kolla-ansible.rst | 1 + etc/kayobe/compute.yml | 8 ++--- etc/kayobe/controllers.yml | 8 ++--- etc/kayobe/globals.yml | 3 +- etc/kayobe/infra-vms.yml | 8 ++--- etc/kayobe/monitoring.yml | 6 ++-- etc/kayobe/seed-hypervisor.yml | 4 +-- etc/kayobe/seed.yml | 8 ++--- etc/kayobe/storage.yml | 8 ++--- kayobe/plugins/action/merge_configs.py | 10 ++++-- kayobe/plugins/action/merge_yaml.py | 20 ++++++++++-- kayobe/plugins/filter/networkd.py | 3 +- kayobe/plugins/filter/networks.py | 6 +++- playbooks/kayobe-overcloud-base/overrides.yml.j2 | 10 +++--- playbooks/kayobe-overcloud-base/run.yml | 2 ++ playbooks/kayobe-overcloud-upgrade-base/run.yml | 16 +++------ .../kayobe-seed-upgrade-base/overrides.yml.j2 | 4 +++ playbooks/kayobe-seed-upgrade-base/pre.yml | 3 +- playbooks/kayobe-seed-upgrade-base/run.yml | 2 +- ...d-extended-multipath-conf-a6b874fb0f43fed5.yaml | 3 ++ ...lesmithjr-manage_lvm-role-c34e217446c19a57.yaml | 6 ++++ .../fix-kolla-passwords-f1b5d051c494b4d8.yaml | 8 +++++ .../notes/fix-networkd-vlans-8d5d85da4d2e50ae.yaml | 6 ++++ ...ix-uppercase-repo-file-r9-3ed29c34d2c945c7.yaml | 5 +++ ...work-configuration-issues-69a47b921dc40581.yaml | 6 ++++ ...la-ansible-venv-os-python-519be05aa4b07e80.yaml | 6 ++++ ...client-install-check-mode-0cfc7e846f3a978a.yaml | 5 +++ .../user-provided-repos-yaml-07e1f872225059a6.yaml | 7 ++++ releasenotes/source/conf.py | 1 - requirements.yml | 8 ++--- roles/kayobe-diagnostics/files/get_logs.sh | 16 ++++++++- roles/kayobe-diagnostics/tasks/pre.yml | 1 + zuul.d/project.yaml | 16 ++++++--- 74 files changed, 393 insertions(+), 154 deletions(-)

1 0

kayobe 12.8.0 (yoga)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We are overjoyed to announce the release of: kayobe 12.8.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 12.8.0 ^^^^^^ New Features ************ * Adds support for custom Multipathd configuration. * Adds support for Rocky Linux 9 as a host Operating System and base container image. * Adds support for configuring arbitrarily named VLAN interfaces using "systemd-networkd". See story 2010266 for details. * Since Kolla containers can built with user provided "repos.yaml" Kayobe can override the file with their own content. The override files can be "${KAYOBE_CONFIG_PATH}/kolla/repos.yaml" (default Kolla filename) or "${KAYOBE_CONFIG_PATH}/kolla/repos.yml". Multiple Environments supported. Upgrade Notes ************* * OpenSearch support has been added. * Modifies the default value of "kolla_ansible_venv_python" to "/usr/bin/python3". Using operating system python to create kolla- ansible venv fixes corner cases when using older venvs created with "virtualenv" command. Bug Fixes ********* * Fixes download of roles from Ansible Galaxy following the renaming of the "mrlesmithjr.manage_lvm" role. LP#2023502 * Fixes an issue where generation of "passwords.yml" for Kolla Ansible could fail if the directory containing the file does not exist. This is typical in a multiple environment setup, when creating a new environment. See story 2010293 (https://storyboard.openstack.org/#!/story/2010293) for details. * Fixes an issue with systemd-networkd configuration on Ubuntu with multiple VLAN interfaces. See story 2009013 for details. * Fixes repositories files names in Rocky Linux 9. Distributions moved to lowercase names with RHEL 9 release. * Fixes various issues when applying network configuration on Rocky 9 hosts. See bugs: 2016970 (https://bugs.launchpad.net/kayobe/+bug/2016970) and 2016971 (https://bugs.launchpad.net/kayobe/+bug/2016971) * Installs "ncclient" dependency for Juniper switch configuration when using Ansible check mode. Changes in kayobe 12.7.0..12.8.0 -------------------------------- c4fa262a Correct name for role mrlesmithjr.manage_lvm 8f3496cb Install ncclient even in check mode 8e26267e Allow to use own repos.y[a]ml file to build containers 64d2d6f2 Update gitignore for .vscode/ configuration files 74911c52 Show an error when *_bridge_ports is not a list eaa41315 CI: Unbreak stable/yoga with two cherry-picks fba1f964 Revert back to MichaelRigart.interfaces a7a65d36 Adds support for custom Multipathd configuration. 81e8f162 Fix an issue when 'acl' package can be forgotten b394ff39 Fix maximum width of the DIB Multiline-YAML c851c6ba Bump mrlesmithjr.lvm to skip swap resizes c0dbca2f Fix merge action plugins verbose output bbcd462d Fix passwords.yml generation when parent directory doesn't exist eb30965c Fix kayobe_config_path description in globals.yml 20d8f6c3 CI: Add custom routing table output to logs. a3ff32b7 Move to Launchpad for project management 97fb31b9 Fix inventory template for prometheus-msteams d0482b65 Support OpenSearch configuration a106e60c Rename Rocky Linux 8 templates to avoid conflicts b951fbc6 Run handlers before configuring veth interfaces only on Rocky Linux 9 883c3ca1 Run handlers before configuring veth interfaces c5be8736 Fixes repositories files name in Rocky Linux 9 5864191f CI: get repo directories from nodes for troubleshooting 5a92bd77 use OS python to create kolla-ansible venv 7ffbd4e3 CI: Disable disk image build in seed-upgrade jobs a292e4bf Add Rocky Linux 9 support 524bc87b CI: Jammy followup - move os_release 8c2dec12 Support configuring VLANs with systemd-networkd syntax 834cf25f CI: Don't run Heat and Horizon in overcloud jobs 3c0b5d31 Ubuntu: Fix networkd config for multiple VLANs without MTU Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + CONTRIBUTING.rst | 4 +- README.rst | 2 +- ansible/group_vars/all/bifrost | 4 +- ansible/group_vars/all/compute | 8 +- ansible/group_vars/all/controllers | 8 +- ansible/group_vars/all/dnf | 8 +- ansible/group_vars/all/infra-vms | 22 ++-- ansible/group_vars/all/kolla | 16 ++- ansible/group_vars/all/monitoring | 6 +- ansible/group_vars/all/overcloud-dib | 3 +- ansible/group_vars/all/seed | 8 +- ansible/group_vars/all/seed-hypervisor | 4 +- ansible/group_vars/all/seed-vm | 14 ++- ansible/group_vars/all/storage | 8 +- ansible/kayobe-target-venv.yml | 11 +- ansible/kolla-openstack.yml | 2 + ansible/kolla-target-venv.yml | 11 +- ansible/lvm.yml | 2 +- ansible/roles/dev-tools/defaults/main.yml | 14 ++- ansible/roles/dnf/defaults/main.yml | 14 ++- ansible/roles/dnf/tasks/local-mirror.yml | 55 +++++++--- ...-AppStream.repo.j2 => Rocky8-AppStream.repo.j2} | 0 ...{Rocky-BaseOS.repo.j2 => Rocky8-BaseOS.repo.j2} | 0 ...{Rocky-Extras.repo.j2 => Rocky8-Extras.repo.j2} | 0 ansible/roles/dnf/templates/centos-extras.repo.j2 | 17 +++ ansible/roles/dnf/templates/centos.repo.j2 | 25 +++++ ansible/roles/dnf/templates/rocky-extras.repo.j2 | 16 +++ ansible/roles/dnf/templates/rocky.repo.j2 | 23 ++++ ansible/roles/junos-switch/tasks/main.yml | 1 + ansible/roles/kolla-ansible/defaults/main.yml | 2 +- .../roles/kolla-ansible/library/kolla_passwords.py | 3 + ansible/roles/kolla-ansible/tasks/install.yml | 2 +- .../kolla-ansible/templates/overcloud-services.j2 | 13 ++- ansible/roles/kolla-ansible/vars/Debian.yml | 2 +- ansible/roles/kolla-ansible/vars/main.yml | 3 + ansible/roles/kolla-bifrost/tasks/main.yml | 1 + .../templates/kolla/config/bifrost/dib.yml | 2 +- ansible/roles/kolla-build/defaults/main.yml | 2 +- ansible/roles/kolla-build/tasks/main.yml | 33 +++++- .../kolla-build/templates/kolla/kolla-build.conf | 4 + ansible/roles/kolla-openstack/defaults/main.yml | 15 +++ .../molecule/enable-everything/molecule.yml | 5 + ansible/roles/kolla-openstack/tasks/config.yml | 1 + .../kolla-openstack/templates/multipath.conf.j2 | 9 ++ ansible/roles/kolla-openstack/vars/main.yml | 5 + ansible/roles/kolla/tasks/install.yml | 2 +- ansible/roles/kolla/vars/Debian.yml | 1 + .../roles/network-redhat/tasks/include_flush.yml | 3 + ansible/roles/network-redhat/tasks/main.yml | 12 +++ ansible/roles/veth/tasks/RedHat.yml | 45 +------- ansible/roles/veth/tasks/network-manager.yml | 45 ++++++++ ansible/roles/veth/tasks/network-scripts.yml | 43 ++++++++ ansible/roles/veth/templates/peer-nmconnection.j2 | 21 ++++ ansible/roles/veth/templates/veth-nmconnection.j2 | 16 +++ dev/functions | 44 +++++++- .../reference/ironic-python-agent.rst | 4 +- .../configuration/reference/kolla-ansible.rst | 2 + .../configuration/reference/os-distribution.rst | 4 +- etc/kayobe/compute.yml | 8 +- etc/kayobe/controllers.yml | 8 +- etc/kayobe/globals.yml | 5 +- etc/kayobe/infra-vms.yml | 14 +-- etc/kayobe/kolla.yml | 8 +- etc/kayobe/monitoring.yml | 6 +- etc/kayobe/seed-hypervisor.yml | 4 +- etc/kayobe/seed-vm.yml | 8 +- etc/kayobe/seed.yml | 8 +- etc/kayobe/storage.yml | 8 +- kayobe/plugins/action/kolla_ansible_host_vars.py | 6 +- kayobe/plugins/action/merge_configs.py | 10 +- kayobe/plugins/action/merge_yaml.py | 20 +++- kayobe/plugins/filter/networkd.py | 6 +- kayobe/plugins/filter/networks.py | 44 ++++++-- .../plugins/action/test_kolla_ansible_host_vars.py | 6 ++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 4 - playbooks/kayobe-overcloud-base/overrides.yml.j2 | 23 +++- playbooks/kayobe-overcloud-base/run.yml | 2 + .../overrides.yml.j2 | 22 +++- .../kayobe-overcloud-host-configure-base/pre.yml | 3 +- playbooks/kayobe-overcloud-upgrade-base/run.yml | 16 +-- playbooks/kayobe-seed-base/overrides.yml.j2 | 15 +++ .../kayobe-seed-upgrade-base/overrides.yml.j2 | 4 + playbooks/kayobe-seed-upgrade-base/pre.yml | 3 +- playbooks/kayobe-seed-upgrade-base/run.yml | 2 +- ...d-extended-multipath-conf-a6b874fb0f43fed5.yaml | 3 + .../notes/add-opensearch-6bf0cd4250d5253e.yaml | 4 + ...lesmithjr-manage_lvm-role-c34e217446c19a57.yaml | 6 ++ .../fix-kolla-passwords-f1b5d051c494b4d8.yaml | 8 ++ .../notes/fix-networkd-vlans-8d5d85da4d2e50ae.yaml | 6 ++ ...ix-uppercase-repo-file-r9-3ed29c34d2c945c7.yaml | 5 + ...work-configuration-issues-69a47b921dc40581.yaml | 6 ++ ...la-ansible-venv-os-python-519be05aa4b07e80.yaml | 6 ++ ...client-install-check-mode-0cfc7e846f3a978a.yaml | 5 + .../notes/rocky-linux-9-adccc4bb77fda197.yaml | 5 + .../systemd-networkd-vlans-5022f0d1b8214329.yaml | 6 ++ .../user-provided-repos-yaml-07e1f872225059a6.yaml | 7 ++ releasenotes/source/conf.py | 1 - requirements.yml | 14 +-- roles/kayobe-ci-prep/tasks/main.yml | 4 +- roles/kayobe-diagnostics/files/get_logs.sh | 26 ++++- roles/kayobe-diagnostics/tasks/pre.yml | 1 + zuul.d/jobs.yaml | 78 ++++++++++++++ zuul.d/nodesets.yaml | 11 ++ zuul.d/project.yaml | 31 ++++-- 122 files changed, 1144 insertions(+), 295 deletions(-)

1 0

kolla-ansible 14.9.0 (yoga)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We eagerly announce the release of: kolla-ansible 14.9.0: Ansible Deployment of Kolla containers This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 14.9.0 ^^^^^^ New Features ************ * Since CVE-2022-29404 is fixed the default value for the LimitRequestBody directive in the Apache HTTP Server has been changed from 0 (unlimited) to 1073741824 (1 GiB). This limits the size of images (for example) uploaded in Horizon. Now this limit can be configured via "horizon_httpd_limitrequestbody". LP#2012588 * Adds support for deploying OpenSearch and OpenSearch dashboards. These services directly replace ElasticSearch and Kibana which are now end-of-life. Support for sending logs to a remote ElasticSearch (or OpenSearch) cluster is maintained. * Adds support for migrating from Elasticsearch to OpenSearch by running "kolla-ansible opensearch-migration" command. * etcd is now exposed internally via HAProxy on "etcd_client_port". * Added two new flags to alter behaviour in RabbitMQ: * *rabbitmq_message_ttl_ms*, which lets you set a TTL on messages. * *rabbitmq_queue_expiry_ms*, which lets you set an expiry time on queues. See https://www.rabbitmq.com/ttl.html for more information on both. * The config option *rabbitmq_ha_replica_count* is added, to allow for changing the replication factor of mirrored queues in RabbitMQ. While the flag is unset, the queues are mirrored across all nodes using "ha-mode":"all". Note that this only has an effect if the flag ` om_enable_rabbitmq_high_availability` is set to *True*, as otherwise queues are not mirrored. * The config option *rabbitmq_ha_promote_on_shutdown* has been added, which allows changing the RabbitMQ definition *ha-promote-on- shutdown*. By default *ha-promote-on-shutdown* is "when-synced". We recommend changing this to be "always". This basically means we don't mind losing some messages, instead we give priority to rabbitmq availability. This is most relevant when restarting rabbitmq, such as when upgrading. Note that setting the value of this flag, even to the default value of "when-synced", will cause RabbitMQ to be restarted on the next deploy. For more details please see: https://www.rabbitmq.com/ha.html#cluster-shutdown * Services using etcd3gw via tooz now use etcd via haproxy. This removes a single point of failure, where we hardcoded the first etcd host for backend_url. Upgrade Notes ************* * Default tags of "neutron_tls_proxy" and "glance_tls_proxy" have been changed to "haproxy_tag", as both services are using "haproxy" container image. Any custom tag overrides for those services should be altered before upgrade. Security Issues *************** * The kolla-genpwd, kolla-mergepwd, kolla-readpwd and kolla-writepwd commands now creates or updates passwords.yml with correct permissions. Also they display warning message about incorrect permissions. Bug Fixes ********* * The precheck for RabbitMQ failed incorrectly when "kolla_externally_managed_cert" was set to "true". LP#1999081 * Fixes create sasl account before config file is ready. LP#2015589 * The flags "--db-nb-pid" and "--db-sb-pid" have been corected to be " --db-nb-pidfile" and "--db-sb-pidfile" respectively. See here for reference: https://github.com/ovn- org/ovn/blob/6c6a7ad1c64a21923dc9b5bea7069fd88bcdd6a8/utilities/ovn- ctl#L1045 LP#2018436 * Configuration of service user tokens for all Nova and Cinder services is now done automatically, to ensure security of block- storage volume data. See LP#[2004555] for more details. * Adds configuration necessary for application credential access rules to properly function. LP#1965111 * Fixes deployment when using Ansible check mode. LP#2002661 * Fixes the incorrect endpoint URLs and service type information for the Cyborg service in the Keystone. LP#2020080 * Set the etcd internal hostname and cacert for tls internal enabled deployments. This allows services to work with etcd when coordination is enabled for TLS interal deployments. Without this fix, the coordination backend fails to connect to etcd and the service itself crashes. * fix missing [taskflow] section in masakari.conf.j2 LP#1966536 * Fixes opensearch migration process. Including case when elasticsearch is located in regular folder instead of docker volume. Furthermore it now has checks if there is data to migrate. * When upgrading or deploying RabbitMQ, the policy *ha-all* is cleared if *om_enable_rabbitmq_high_availability* is set to *false*. Changes in kolla-ansible 14.8.0..14.9.0 --------------------------------------- e885a17d3 Add keystone_authtoken.service_type 09a8f69ce Fix the Cyborg service 64c77ef01 Fix passwords.yml permissions f72ff9bc6 docs: Remove redundant section about vagrant-vbguest 7e13d5756 Fix Bash variable expansion issues in openrc file cb105dc29 always add service_user section to nova.conf 10a6388d0 Correct ovn-ctl --db-nb-pidfile usage in templates ed0d288c1 Designate: provide certificates file to use for neutron client requests ca25ca18e Fix faulty precheck for RabbitMQ ff1bd03ff Add precheck to fail if RabbitMQ HA needs configuring 3e14223d9 cli: fix find globals.d 458dcbfdb Remove RabbitMQ ha-all policy when not required e8f608d36 Fix create sasl account before config file is ready 486367ec6 Fix maximum width of the DIB Multiline-YAML 0b9e5cc88 opensearch: default dashboards tag to opensearch_tag c8f11df80 Fix merge action plugins verbose output 3930e70ae Add note about removing leading tabs in ceph.conf files 8affe4ed3 Add flags for RabbitMQ message TTL & queue expiry 7aae29b4d Fix deploy/genconfig in check mode 7d78a6cc3 Fix elasticsearch to opensearch migration b74d331aa nova: Fix live migration on RHEL9 derivatives 17fb40506 Add LimitRequestBody configuration for Horizon eca595c18 Add flag to change RabbitMQ ha-mode definition f01896ffd RabbitMQ: Support setting ha-promote-on-shutdown 6fab166fd Pin zun jobs to Docker 20 9b2a23824 Add OpenSearch ca0233589 CI: Drop monasca job 3d7eb1e20 ironic: fix dev mode for inspector f7364d96c Use haproxy-config instead of loadbalancer-config 9479ba016 Set the etcd internal hostname and cacert for tls internal enabled deployments b47c013cf hacluster: Use nodename to align with nova service names e21caa492 rocky: add to distro_python_version_map and update CI jobs ae8031154 CI: Always build images for centos jobs 928ef9cc5 Add [taskflow] section for masakari.conf.j2 d25e160cf Default neutron_tls_proxy and glance_tls_proxy to haproxy_tag edd0d07e3 Use loadbalancer to connect to etcd 5388aaced Add CentOS Stream 9 / Rocky Linux 9 host support 6373d5419 Fix docker version precheck (bad backport) fb0271e39 Put etcd behind HTTP loadbalancer 29926808a docs: fix information about libvirt SASL auth 87899a2f1 rocky - add to multiple if base_distro statements Diffstat (except docs and test files) ------------------------------------- README.rst | 4 +- ansible/action_plugins/merge_configs.py | 10 +- ansible/action_plugins/merge_yaml.py | 27 ++- ansible/group_vars/all.yml | 47 +++- ansible/inventory/all-in-one | 8 + ansible/inventory/multinode | 8 + ansible/opensearch-migration.yml | 168 ++++++++++++++ ansible/roles/aodh/templates/aodh.conf.j2 | 1 + ansible/roles/barbican/templates/barbican.conf.j2 | 1 + ansible/roles/bifrost/tasks/config.yml | 1 + ansible/roles/blazar/templates/blazar.conf.j2 | 1 + ansible/roles/cinder/templates/cinder-wsgi.conf.j2 | 2 +- ansible/roles/cinder/templates/cinder.conf.j2 | 9 +- ansible/roles/cloudkitty/defaults/main.yml | 2 +- .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 1 + ansible/roles/common/defaults/main.yml | 9 + ansible/roles/common/tasks/config.yml | 6 + ansible/roles/common/templates/admin-openrc.sh.j2 | 30 +-- .../common/templates/conf/output/00-local.conf.j2 | 31 +++ .../common/templates/conf/output/01-es.conf.j2 | 2 +- .../templates/conf/output/03-opensearch.conf.j2 | 33 +++ .../templates/cron-logrotate-opensearch.conf.j2 | 3 + ansible/roles/cyborg/defaults/main.yml | 8 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 1 + .../roles/designate/templates/designate.conf.j2 | 2 + ansible/roles/destroy/tasks/cleanup_host.yml | 1 + ansible/roles/etcd/defaults/main.yml | 8 +- ansible/roles/etcd/tasks/loadbalancer.yml | 7 + ansible/roles/freezer/defaults/main.yml | 4 +- ansible/roles/freezer/templates/freezer.conf.j2 | 1 + ansible/roles/glance/defaults/main.yml | 3 +- ansible/roles/glance/templates/glance-api.conf.j2 | 1 + ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 1 + ansible/roles/grafana/defaults/main.yml | 12 + .../roles/hacluster/tasks/bootstrap_service.yml | 8 +- .../hacluster/templates/hacluster_corosync.conf.j2 | 2 +- ansible/roles/heat/templates/heat.conf.j2 | 1 + .../roles/heat/templates/wsgi-heat-api-cfn.conf.j2 | 2 +- ansible/roles/heat/templates/wsgi-heat-api.conf.j2 | 2 +- ansible/roles/horizon/templates/horizon.conf.j2 | 5 +- ansible/roles/ironic/defaults/main.yml | 4 +- ansible/roles/ironic/tasks/clone.yml | 3 +- .../roles/ironic/templates/ironic-api-wsgi.conf.j2 | 2 +- .../ironic/templates/ironic-inspector.conf.j2 | 1 + ansible/roles/ironic/templates/ironic-tftp.json.j2 | 11 +- ansible/roles/ironic/templates/ironic.conf.j2 | 1 + ansible/roles/keystone/tasks/config.yml | 1 + .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 +- ansible/roles/loadbalancer/tasks/precheck.yml | 26 +++ ansible/roles/magnum/templates/magnum.conf.j2 | 1 + ansible/roles/manila/templates/manila.conf.j2 | 1 + ansible/roles/mariadb/tasks/lookup_cluster.yml | 1 + ansible/roles/masakari/templates/masakari.conf.j2 | 4 + ansible/roles/mistral/templates/mistral.conf.j2 | 1 + .../monasca/templates/monasca-api/api.conf.j2 | 1 + ansible/roles/murano/templates/murano.conf.j2 | 1 + ansible/roles/neutron/defaults/main.yml | 3 +- ansible/roles/neutron/templates/neutron.conf.j2 | 1 + ansible/roles/nova-cell/handlers/main.yml | 14 +- .../roles/nova-cell/tasks/get_cell_settings.yml | 1 + .../nova-cell/tasks/wait_discover_computes.yml | 1 + ansible/roles/nova-cell/templates/nova.conf.j2 | 13 ++ ansible/roles/nova-cell/templates/sshd_config.j2 | 3 + ansible/roles/nova/templates/nova-api-wsgi.conf.j2 | 2 +- ansible/roles/nova/templates/nova.conf.j2 | 14 ++ .../roles/octavia/templates/octavia-openrc.sh.j2 | 16 +- .../roles/octavia/templates/octavia-wsgi.conf.j2 | 2 +- ansible/roles/octavia/templates/octavia.conf.j2 | 1 + ansible/roles/opensearch/defaults/main.yml | 132 +++++++++++ ansible/roles/opensearch/handlers/main.yml | 33 +++ .../roles/opensearch/tasks/check-containers.yml | 18 ++ ansible/roles/opensearch/tasks/check.yml | 1 + ansible/roles/opensearch/tasks/config-host.yml | 17 ++ ansible/roles/opensearch/tasks/config.yml | 63 +++++ ansible/roles/opensearch/tasks/config_validate.yml | 1 + ansible/roles/opensearch/tasks/copy-certs.yml | 6 + .../roles/opensearch/tasks/deploy-containers.yml | 2 + ansible/roles/opensearch/tasks/deploy.yml | 12 + ansible/roles/opensearch/tasks/loadbalancer.yml | 7 + ansible/roles/opensearch/tasks/main.yml | 2 + ansible/roles/opensearch/tasks/precheck.yml | 25 ++ ansible/roles/opensearch/tasks/pull.yml | 3 + ansible/roles/opensearch/tasks/reconfigure.yml | 2 + ansible/roles/opensearch/tasks/register.yml | 7 + ansible/roles/opensearch/tasks/stop.yml | 6 + ansible/roles/opensearch/tasks/upgrade.yml | 48 ++++ .../templates/opensearch-dashboards.json.j2 | 23 ++ .../roles/opensearch/templates/opensearch.json.j2 | 23 ++ .../roles/opensearch/templates/opensearch.yml.j2 | 21 ++ .../templates/opensearch_dashboards.yml.j2 | 12 + ansible/roles/opensearch/vars/main.yml | 2 + ansible/roles/openvswitch/defaults/main.yml | 2 +- ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- .../placement/templates/placement-api-wsgi.conf.j2 | 2 +- .../roles/placement/templates/placement.conf.j2 | 1 + ansible/roles/prechecks/tasks/package_checks.yml | 1 + ansible/roles/prechecks/vars/main.yml | 3 + .../prometheus-elasticsearch-exporter.json.j2 | 2 +- ansible/roles/rabbitmq/defaults/main.yml | 15 ++ ansible/roles/rabbitmq/tasks/deploy.yml | 4 + ansible/roles/rabbitmq/tasks/precheck.yml | 28 +++ .../roles/rabbitmq/tasks/remove-ha-all-policy.yml | 28 +++ ansible/roles/rabbitmq/tasks/upgrade.yml | 23 +- .../roles/rabbitmq/templates/definitions.json.j2 | 4 +- ansible/roles/sahara/templates/sahara.conf.j2 | 1 + ansible/roles/senlin/templates/senlin.conf.j2 | 1 + ansible/roles/solum/templates/solum.conf.j2 | 1 + ansible/roles/tacker/templates/tacker.conf.j2 | 1 + ansible/roles/telegraf/defaults/main.yml | 1 + ansible/roles/telegraf/templates/telegraf.conf.j2 | 5 + ansible/roles/trove/templates/trove.conf.j2 | 1 + ansible/roles/vitrage/templates/vitrage.conf.j2 | 1 + ansible/roles/watcher/templates/watcher.conf.j2 | 1 + ansible/roles/zun/templates/zun.conf.j2 | 1 + ansible/site.yml | 23 ++ ...rst => central-logging-guide-elasticsearch.rst} | 10 +- .../central-logging-guide-opensearch.rst | 258 +++++++++++++++++++++ .../reference/logging-and-monitoring/index.rst | 3 +- .../logging-and-monitoring/monasca-guide.rst | 4 + .../reference/storage/external-ceph-guide.rst | 8 + etc/kolla/globals.yml | 3 + etc/kolla/passwords.yml | 5 + kolla_ansible/cmd/genpwd.py | 19 +- kolla_ansible/cmd/mergepwd.py | 24 +- kolla_ansible/cmd/readpwd.py | 19 +- kolla_ansible/cmd/writepwd.py | 10 + ...-horizon-limitrequestbody-4f79433fa2cf1f6d.yaml | 9 + .../notes/add-opensearch-53ef174195acce45.yaml | 10 + .../notes/bug-1999081-769f1012263a48fd.yaml | 6 + .../notes/bug-2015589-94427c14cd857c98.yaml | 5 + ...-ctl-pid-flag-in-template-d915fe4b71548da0.yaml | 8 + .../notes/cve-2023-2088-51e7e050be2139bf.yaml | 9 + .../etcd-tcp-loadbalancer-08d9332ee3be9a8b.yaml | 4 + ...fix-app-cred-access-rules-14b5dcfcd5a5669a.yaml | 6 + .../notes/fix-check-mode-1f37ab5507c98954.yaml | 5 + .../notes/fix-cyborg-service-5bc5bf8748daf504.yaml | 6 + ...-etcd-coordination-config-b1c9f900ef13be13.yaml | 8 + ...-missing-taskflow-section-31b6654e29bec35d.yaml | 5 + .../fix-opensearch-migration-114061f943f60b71.yaml | 6 + ...passwords-yml-permissions-ca73638b71aeadf4.yaml | 7 + ...sage-ttl-and-queue-expiry-c163a370708f5b20.yaml | 7 + ...change-replication-factor-321c2f9e08e7d179.yaml | 9 + ...mq-ha-promote-on-shutdown-9099c6643f2d0cce.yaml | 13 ++ ...-policy-when-not-required-81dcf64542c4805f.yaml | 5 + ...s-proxies-use-haproxy-tag-aa030b5e5df6fbf0.yaml | 8 + ...r-for-etcdgw-coordination-6704a8b1389bbabe.yaml | 6 + roles/cephadm/defaults/main.yml | 1 + roles/cephadm/tasks/pkg_debian.yml | 1 + roles/cephadm/tasks/pkg_redhat.yml | 7 + tools/cleanup-host | 5 + tools/kolla-ansible | 8 +- tools/validate-all-file.py | 4 + zuul.d/base.yaml | 14 +- zuul.d/jobs.yaml | 212 ++++++++++++++++- zuul.d/nodesets.yaml | 52 +++-- zuul.d/project.yaml | 25 +- 170 files changed, 2262 insertions(+), 157 deletions(-)

1 0

kolla 15.2.0 (zed)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We are happy to announce the release of: kolla 15.2.0: Kolla OpenStack Deployment This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. Changes in kolla 15.1.0..15.2.0 ------------------------------- c9a7f57ad rabbitmq: Fix repo for ubuntu aarch64 13aaca13e Use erlang-25 from copr on aarch64 530490a71 opensearch: drop unnecessary workarounds 0e83e2a73 rabbitmq: use erlang-25 ppa on Debian/Ubuntu 3dcfde5cc Fix cinder-volume: add missing nvme-cli rpm package 85c764a65 Disable build of Gnocchi containers 7ae289a5e Fix cinder-volume: Add forgotten lsscsi rpm package 3aecfa93a Fix Venus containers built from correct branch 1314b297f Fix rabbitmq image build fe9d33c64 mariadb-clustercheck: ensure /var/log/kolla/mariadb exists d793de2a4 opensearch-dashboards: Fix permissions aab455c5e opensearch: move to yum/apt repos 140032d6e toolbox: pin ansible.posix to <1.5.4 003fff5dc https: remove dhparams.pem before running gencerts e0c028dfa Glance-api fails due to absent multipath tools 2ed918268 ovsdpdk: add libdpdk-dev 096963aeb nova-libvirt: Fix for missing libvirt-daemon-driver-nodedev package b2296aa5c keystone: Fix for missing libldap-common package for debian 328c0c840 Fix test malicious tarball fail 2cb59e45a Replace invisible unicode chars 395e9e565 neutron-mlnx-agent: pin pyzmq at 21.* 885b27a67 Cinder backup fails due to absent multipath tools 2459c93ee base: make curl retry on all errors a8d0098bd neutron: Add iproute-tc dac11090b Test for unsafe files in tarfile.extractall 22518ed6c CI: Retry docker push on publish jobs 278167179 CI: Configure additional disk when available 47431082f bifrost: mark unbuidable for Ubuntu 23ea06f2e Pin setuptools=67.2.* Diffstat (except docs and test files) ------------------------------------- .zuul.d/debian.yaml | 4 +- .../mariadb/mariadb-clustercheck/extend_start.sh | 11 ++ .../opensearch/opensearch-dashboards/Dockerfile.j2 | 24 +---- .../opensearch-dashboards/extend_start.sh | 8 +- kolla/common/sources.py | 4 +- kolla/common/users.py | 4 + kolla/image/tasks.py | 11 +- kolla/image/unbuildable.py | 20 ++-- kolla/template/repos.yaml | 96 ++++++++++++----- specs/logging-with-heka.rst | 2 +- 32 files changed, 375 insertions(+), 95 deletions(-)

1 0

kayobe 14.1.0 (antelope)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We contentedly announce the release of: kayobe 14.1.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 14.1.0 ^^^^^^ Bug Fixes * Fixes download of roles from Ansible Galaxy following the renaming of the "mrlesmithjr.manage_lvm" role. LP#2023502 * Installs "ncclient" dependency for Juniper switch configuration when using Ansible check mode. Changes in kayobe 14.0.0..14.1.0 -------------------------------- f525c6a5 Correct name for role mrlesmithjr.manage_lvm 48cd0eb6 CI: Fix kayobe-seed-images-* jobs b460a50b Install ncclient even in check mode b84051b7 Update gitignore for .vscode/ configuration files Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + ansible/inventory/group_vars/all/compute | 8 ++++---- ansible/inventory/group_vars/all/controllers | 8 ++++---- ansible/inventory/group_vars/all/infra-vms | 8 ++++---- ansible/inventory/group_vars/all/monitoring | 6 +++--- ansible/inventory/group_vars/all/seed | 8 ++++---- ansible/inventory/group_vars/all/seed-hypervisor | 4 ++-- ansible/inventory/group_vars/all/storage | 8 ++++---- ansible/lvm.yml | 2 +- ansible/roles/junos-switch/tasks/main.yml | 1 + ansible/roles/kolla-build/defaults/main.yml | 2 +- ansible/roles/kolla-build/tasks/main.yml | 15 ++++++++------- etc/kayobe/compute.yml | 8 ++++---- etc/kayobe/controllers.yml | 8 ++++---- etc/kayobe/infra-vms.yml | 8 ++++---- etc/kayobe/monitoring.yml | 6 +++--- etc/kayobe/seed-hypervisor.yml | 4 ++-- etc/kayobe/seed.yml | 8 ++++---- etc/kayobe/storage.yml | 8 ++++---- ...e-of-mrlesmithjr-manage_lvm-role-c34e217446c19a57.yaml | 6 ++++++ .../ncclient-install-check-mode-0cfc7e846f3a978a.yaml | 5 +++++ requirements.yml | 2 +- roles/kayobe-diagnostics/files/get_logs.sh | 6 +++++- roles/kayobe-diagnostics/tasks/pre.yml | 1 + 26 files changed, 84 insertions(+), 65 deletions(-)

1 0

kolla 14.10.0 (yoga)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We enthusiastically announce the release of: kolla 14.10.0: Kolla OpenStack Deployment This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 14.10.0 ^^^^^^^ New Features * CentOS Stream 9 is now buildable in addition to CentOS Stream 8. * Adds OpenSearch and OpenSearch Dashboards images. * Adds Rocky Linux 9 support. Changes in kolla 14.9.0..14.10.0 -------------------------------- 482ebb999 Update support matrix 75f918628 Fix cinder-volume: add missing nvme-cli rpm package 44e04967a Disable build of Gnocchi containers f35699e33 Fix cinder-volume: Add forgotten lsscsi rpm package 59a5de343 fluentd: pin td-agent to 4.4.2 2a302e5b6 mariadb-clustercheck: ensure /var/log/kolla/mariadb exists 9c0a62a95 CI: Fix centos9 builds and drop unnecessary zuul vars 64ab2e983 fluentd: pin fluent-plugin-elasticsearch to <5.3.0 5a600b779 toolbox: pin ansible.posix to <1.5.4 a28b7d7a0 Support qemu block rbd in nova-compute (source) e590ec353 https: remove dhparams.pem before running gencerts 8e8ef4c38 fluentd: cap elasticsearch again 6a8e8a7fe neutron: Add iproute-tc d511369be Glance-api fails due to absent multipath tools cb22a428a nova-libvirt: Fix for missing libvirt-daemon-driver-nodedev package 08071f47d Fix test malicious tarball fail faf6ac9b7 CI: Fix rocky no infra wheels job 95e2a5e82 Support qemu block rbd in nova-compute 59dd65a99 Replace invisible unicode chars 169178c87 Cinder backup fails due to absent multipath tools d9f1a5af3 base: make curl retry on all errors 9516d00f3 Test for unsafe files in tarfile.extractall 3faff93e8 Mark Monasca and deps as unbuildable on Rocky9 c7164c8f7 Fix ironic-pxe EFI path for rocky 14589d415 CI: publish rocky images and mark c9s non voting d40f67f04 CI: Retry docker push on publish jobs 7a9ff37d0 Add RockyLinux 9 support e29437d21 CI: Configure additional disk when available 82ee1e631 Add support for CentOS Stream 9 9050b6725 Add Opensearch image(s) Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 24 ++++ .zuul.d/centos.yaml | 30 +++++ .zuul.d/rocky.yaml | 68 ++++++++++ .../mariadb/mariadb-clustercheck/extend_start.sh | 11 ++ .../opensearch/opensearch-dashboards/Dockerfile.j2 | 37 ++++++ .../opensearch-dashboards/extend_start.sh | 17 +++ .../prometheus-libvirt-exporter/Dockerfile.j2 | 2 + kolla/common/config.py | 11 +- kolla/image/build.py | 73 ++++++++++- kolla/template/methods.py | 6 + kolla/template/repos.yaml | 70 ++++++++++ .../notes/centos-stream-9-ec4591d83c22b509.yaml | 4 + .../notes/opensearch-f3a7b8bfc86a16f6.yaml | 4 + .../notes/rockylinux9-1f004ab9b3b2e096.yaml | 4 + specs/logging-with-heka.rst | 2 +- 56 files changed, 1038 insertions(+), 240 deletions(-)

1 0

metalsmith 2.0.0 (bobcat)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We are overjoyed to announce the release of: metalsmith 2.0.0: Deployment and Scheduling tool for Bare Metal This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. 2.0.0 ^^^^^ Upgrade Notes * During the *bobcat* development cycle, the Ironic community updated the MD5 checksum logic in the "ironic-python-agent" to be explicitly disabled, and added support for the checksums to be conveyed as a SHA256 or SHA512 checksum. With this upgrade, we have updated our references and playbooks. Changes in metalsmith 1.10.0..2.0.0 ----------------------------------- 1a8ec3d Reduce retry timeout for Metalsmith CI ba7d45a Update MD5 checksum references 255fdc7 Update to hacking v6 0e8dd58 Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + metalsmith/_cmd.py | 2 +- metalsmith/sources.py | 16 ++++++++-------- .../ansible_plugins/modules/metalsmith_instances.py | 2 +- .../roles/metalsmith_deployment/README.rst | 6 +++--- playbooks/integration/cirros-image.yaml | 8 ++++---- ...update-references-for-checksums-44206e710b0506fe.yaml | 8 ++++++++ releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 +- 10 files changed, 34 insertions(+), 18 deletions(-)

1 0

kolla-ansible 16.1.0 (antelope)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We contentedly announce the release of: kolla-ansible 16.1.0: Ansible Deployment of Kolla containers This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 16.1.0 ^^^^^^ Upgrade Notes ************* * Removes the restriction on the maximum supported version of 2.14.2 for "ansible-core". Any 2.14 series release is now supported. Security Issues *************** * The kolla-genpwd, kolla-mergepwd, kolla-readpwd and kolla-writepwd commands now creates or updates passwords.yml with correct permissions. Also they display warning message about incorrect permissions. Bug Fixes ********* * Set correct permissions for opensearch-dashboard data location *LP#2020152 https://bugs.launchpad.net/kolla-ansible/+bug/2020152* * Fixes the incorrect endpoint URLs and service type information for the Cyborg service in the Keystone. LP#2020080 Other Notes *********** * Refactors the MariaDB and RabbitMQ restart procedures to be compatible with Ansible 2.14.3+. See Ansible issue 80848 for details. Changes in kolla-ansible 16.0.0..16.1.0 --------------------------------------- f7790a9a5 Refactor MariaDB and RabbitMQ restart procedure a3bbf3399 opensearch-dashboard: fix permissions 0a50e9bf3 Fix log collection b92bdb7d1 Fix Bifrost: remove an extra curly bracket a12deeb36 Fix the Cyborg service 1740c7f27 Fix passwords.yml permissions c5b6ddc51 docs: Correct indentation in quickstart (again) d31c0ac32 docs: Correct indentation in quickstart 28ba27ebf docs: Remove redundant section about vagrant-vbguest fdca13e06 Correct [pci] syntax in Nova SRIOV documentation Diffstat (except docs and test files) ------------------------------------- ansible/mariadb.yml | 72 +++++++++++++ ansible/rabbitmq.yml | 115 +++++++++++++++++++++ ansible/roles/bifrost/tasks/deploy-servers.yml | 2 +- ansible/roles/cyborg/defaults/main.yml | 8 +- ansible/roles/cyborg/templates/cyborg.conf.j2 | 2 +- ansible/roles/mariadb/handlers/main.yml | 27 ++--- ansible/roles/mariadb/tasks/deploy.yml | 7 -- ansible/roles/mariadb/tasks/post-deploy.yml | 4 + ansible/roles/mariadb/tasks/post-upgrade.yml | 24 +++++ ansible/roles/mariadb/tasks/upgrade.yml | 24 ----- .../templates/opensearch-dashboards.json.j2 | 5 + ansible/roles/prechecks/vars/main.yml | 2 +- ansible/roles/rabbitmq/handlers/main.yml | 26 +---- ansible/roles/rabbitmq/tasks/deploy.yml | 5 - ansible/roles/rabbitmq/tasks/post-deploy.yml | 2 + ansible/roles/rabbitmq/tasks/upgrade.yml | 3 - ansible/site.yml | 50 +-------- kolla_ansible/cmd/genpwd.py | 19 +++- kolla_ansible/cmd/mergepwd.py | 24 ++++- kolla_ansible/cmd/readpwd.py | 19 +++- kolla_ansible/cmd/writepwd.py | 10 ++ .../notes/bug-2020152-165c87048d92dedb.yaml | 5 + .../notes/fix-cyborg-service-5bc5bf8748daf504.yaml | 6 ++ ...passwords-yml-permissions-ca73638b71aeadf4.yaml | 7 ++ .../mariadb-restart-refactor-529502bf5d12b0f4.yaml | 10 ++ 32 files changed, 365 insertions(+), 162 deletions(-)

1 0

kolla 16.1.0 (antelope)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We are tickled pink to announce the release of: kolla 16.1.0: Kolla OpenStack Deployment This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. Changes in kolla 16.0.0..16.1.0 ------------------------------- 91a4079d8 Use erlang-25 from copr on aarch64 f43a0ed4e opensearch: drop unnecessary workarounds 44a81974e Revert "rabbitmq: pin to 3.11.16" 5a67a0162 Fix cinder-volume: add missing nvme-cli rpm package a2c6b01e9 rabbitmq: use erlang-25 ppa on Debian/Ubuntu f4600a149 opensearch-dashboards: Fix permissions 9efdc98d9 Disable build of Gnocchi containers e95ce09cf Fix cinder-volume: Add forgotten lsscsi rpm package 30802ae09 Fix Venus containers built from correct branch 8dc32be6f Fix rabbitmq image build 2ca7ec161 mariadb-clustercheck: ensure /var/log/kolla/mariadb exists Diffstat (except docs and test files) ------------------------------------- .zuul.d/debian.yaml | 4 +++- kolla/common/sources.py | 4 +--- kolla/common/users.py | 4 ++++ kolla/image/unbuildable.py | 17 ++++++++++++----- kolla/template/repos.yaml | 8 ++++---- 16 files changed, 55 insertions(+), 54 deletions(-)

1 0

osprofiler 4.1.0
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We contentedly announce the release of: osprofiler 4.1.0: OpenStack Profiler Library The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler For more details, please see below. 4.1.0 ^^^^^ New Features * New profiler for python requests. Currently only OTLP driver is supporting it, see *profiler/trace_requests*'s option. Changes in osprofiler 4.0.0..4.1.0 ---------------------------------- 3c5fead profiler: add python requests profile Diffstat (except docs and test files) ------------------------------------- osprofiler/drivers/otlp.py | 19 +++++- osprofiler/initializer.py | 3 + osprofiler/opts.py | 17 +++++ osprofiler/requests.py | 73 ++++++++++++++++++++++ .../add-requests-profiling-761e09f243d36966.yaml | 5 ++ 6 files changed, 120 insertions(+), 2 deletions(-)

1 0

designate 16.0.1 (antelope)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We are overjoyed to announce the release of: designate 16.0.1: DNS as a Service This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/designate Download the package from: https://tarballs.openstack.org/designate/ Please report issues through: https://bugs.launchpad.net/designate/+bugs For more details, please see below. 16.0.1 ^^^^^^ Bug Fixes * Fixed an issue where zones shared with other projects may not be visible when a zone list or zone show request is made by the other projects. * Fixed a bug that allowed users to create a zone share for the zone owner. * Fixed issues with list zones and recordsets when a zone is shared with more than one project. * Fixed bug 2015762 which could cause managed records to occasionally fail to delete due to a race condition. (https://bugs.launchpad.net/designate/+bug/2015762) Changes in designate 16.0.0..16.0.1 ----------------------------------- efeff8e8 Fix list zones if shared with multiple projects bc87a7da Fix TsigKeyring issues with dnspython 2.x e742851d Re-enable test jobs 904d8d66 Fix create zone export RBAC 72de55df Fix zone list/show for shared zones 9c0df1a8 Fix shared zones missing project ID error 0721ced8 Use ids when removing sink managed records 1c7344d7 Use ids when removing ptr records 4c08082b Fix sharing a zone with the zone owner bda31ec6 [coordination] backend_url should be secret 766cfd8d Removed unsupported test B309 from bandit aae28eb7 Update TOX_CONSTRAINTS_FILE for stable/2023.1 b98d4a26 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 6 +- designate/central/service.py | 36 ++++++--- designate/conf/coordination.py | 1 + designate/dnsutils.py | 3 +- designate/mdns/handler.py | 17 +++-- designate/notification_handler/base.py | 26 ++++--- designate/sqlalchemy/base.py | 36 ++++++--- designate/storage/impl_sqlalchemy/__init__.py | 22 ++++-- ...ist-and-show-shared-zones-8a42a6b5f4910fc7.yaml | 5 ++ ...hare-zone-with-zone-owner-31a20c57a65c0cc4.yaml | 4 + ...one-shared-more-than-once-288b57cafeba82df.yaml | 5 ++ ...lete-fails-intermittently-53168cf5cd830b59.yaml | 7 ++ tox.ini | 10 +-- 21 files changed, 361 insertions(+), 60 deletions(-)

1 0

python-manilaclient 4.5.0 (bobcat)
by no-reply＠openstack.org 13 Jul '23

13 Jul '23

We jubilantly announce the release of: python-manilaclient 4.5.0: Client library for OpenStack Manila API. This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 4.5.0 ^^^^^ New Features ************ * Users are now able to set a default active directory site while creating security services by specifying 'default_ad_site'. Refer Launchpad bug #1988146 (https://bugs.launchpad.net/python- manilaclient/+bug/1988146) * Adds support to create share network subnet with properties and update the subnet properties with set and unset command (only with the OpenStackClient). * Support transferring shares between projects starting from API version "2.77". Bug Fixes ********* * The OpenStackClient plugin will now use most suitable version for openstack commmands client generation if user supplied version is above max version supported by server. For more details, please refer Launchpad bug #1960490 (https://bugs.launchpad.net/python- manilaclient/+bug/1960490) * Fixed the use of the "--availability-zone" option with the "openstack share network create" command. Changes in python-manilaclient 4.3.0..4.5.0 ------------------------------------------- e3f01e5 Metadata for Share Network Subnets 95763cd Use suitable api version for OSC. 1e37914 Fix share network create command with the AZ option 6e9433c Add defaultadsite to security service 7a5d39b Update master for stable/2023.1 d54326f Update micversion to 2.77,support share transfer between project. Diffstat (except docs and test files) ------------------------------------- manilaclient/api_versions.py | 2 +- manilaclient/base.py | 3 + manilaclient/common/constants.py | 12 + manilaclient/osc/plugin.py | 48 ++-- manilaclient/osc/v2/security_services.py | 84 +++++- manilaclient/osc/v2/share_network_subnets.py | 145 ++++++++++- manilaclient/osc/v2/share_networks.py | 15 +- manilaclient/osc/v2/share_transfers.py | 272 +++++++++++++++++++ .../unit/osc/v2/test_share_network_subnets.py | 187 ++++++++++++- manilaclient/v2/client.py | 2 + manilaclient/v2/security_services.py | 77 ++++++ manilaclient/v2/share_network_subnets.py | 47 +++- manilaclient/v2/share_transfers.py | 121 +++++++++ manilaclient/v2/shell.py | 261 +++++++++++++++++++ ...dsite-to-security-service-33fd0a5d1b865b11.yaml | 6 + .../add-subnet-metadata-82426986431b0179.yaml | 5 + ...-transfer-between-project-faefead551380eca.yaml | 3 + ...-suitable-version-for-osc-b375a32273b56522.yaml | 7 + ...re-network-create-command-879dc3deca131ef9.yaml | 4 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 1 + setup.cfg | 7 + 35 files changed, 2135 insertions(+), 60 deletions(-)

1 0

horizon 23.2.0 (bobcat)
by no-reply＠openstack.org 11 Jul '23

11 Jul '23

We are excited to announce the release of: horizon 23.2.0: OpenStack Dashboard This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. Changes in horizon 23.1.0..23.2.0 --------------------------------- 480aba942 Bump XStatic-JQuery to make it work with jquery-migrate ea53235c8 Imported Translations from Zanata db6577722 Imported Translations from Zanata 3c5006efb Rename x/xstatic-angular-fileupload->openstack/xstatic-angular-fileupload 339e7604a Fix deprecated use of 'jQuery.fn.change()' shorthand event for volume a13e01bc4 Bump XStatic package version to latest i.e. 1.0.3 c770785dc Fix qos and trunks tables eafd2f41b Fix deprecated use of 'jQuery.fn.focus()' shorthand event 11659c326 Fix deprecated use of 'jQuery.fn.submit()' shorthand event ba47352a7 Fix deprecated use of 'jQuery.fn.change()' shorthand event 24047b505 Fix "jQuery.fn.click() event shorthand is deprecated" warning 852d5dc79 Imported Translations from Zanata 691801550 Fix deprecated use of 'jQuery.fn.change()' shorthand event 0d6d2f129 Fix "jQuery.fn.submit() event shorthand is deprecated" warning 283b38e4f Remove Description from Edit Image Metadata 2964a50fd Stability improvement of Instance tests d787bd947 Fix deprecated use of 'jQuery.fn.blur()' shorthand event 2d6cdae14 Fix deprecation warning for .removeAttr() c397560d0 Fix "jQuery.fn.mousedown() event shorthand is deprecated" warning e4a13dbcd Disable form auto-complete on login form f51d5e513 Fix deprecation warning for jQuery.fn.keyup() event shorthand 4053aa49e Fix deprecation warning for jQuery.fn.keydown() event shorthand 6b0aa2017 Update jQuery click event to remove deprecation warning 6d34551c1 Fix deprecated use of 'jQuery.fn.mouseenter()' shorthand event cf158a213 Fix "jQuery.fn.submit() event shorthand is deprecated" warning de61e2a04 Fix Deprecated: jQuery.parseJSON() warning by updating to JSON.parse() 43a792ec9 Update deprecated jQuery functions 4a8930323 Clean up the syntax of html attributes to always use double quotes ed947b453 Unskipping test_floatingip_associate_disassociate test case a327842a2 fix(swift): allow object creation c88583e33 Change of the procedure how the popup messages are checked bba7feba4 Imported Translations from Zanata 097789391 Update master for stable/2023.1 a10d7895e Sync default policy rules a01dc7413 Remove usage of openstack/xstatic-font-awesome Diffstat (except docs and test files) ------------------------------------- .zuul.d/project.yaml | 6 +- .zuul.d/xstatic-master.yaml | 3 +- .../tech-debt/image-file-on-change.directive.js | 2 +- .../framework/widgets/headers/hz-page-header.html | 4 +- .../metadata/tree/metadata-tree-item.controller.js | 6 + .../widgets/metadata/tree/metadata-tree.html | 2 +- .../widgets/property/hz-resource-property.html | 2 +- .../widgets/table/hz-select-all.directive.js | 2 +- .../framework/widgets/table/hz-select.directive.js | 2 +- horizon/static/horizon/js/horizon.d3linechart.js | 2 +- horizon/static/horizon/js/horizon.forms.js | 22 +- horizon/static/horizon/js/horizon.hacks.js | 2 +- horizon/static/horizon/js/horizon.lists.js | 2 +- horizon/static/horizon/js/horizon.membership.js | 10 +- horizon/static/horizon/js/horizon.messages.js | 4 +- horizon/static/horizon/js/horizon.modals.js | 16 +- horizon/static/horizon/js/horizon.tables.js | 6 +- horizon/static/horizon/js/horizon.users.js | 4 +- .../horizon/lib/jquery/jquery.bootstrap.wizard.js | 2 +- horizon/templates/auth/_login_form.html | 4 +- horizon/templates/horizon/_nav_list.html | 2 +- horizon/templates/horizon/_subnav_list.html | 2 +- horizon/templates/horizon/client_side/_modal.html | 12 +- horizon/templates/horizon/common/_data_table.html | 2 +- .../horizon/common/_data_table_row_action_row.html | 2 +- horizon/templates/horizon/common/_datepicker.html | 2 +- .../templates/horizon/common/_detail_header.html | 4 +- .../horizon/common/_domain_page_header.html | 2 +- horizon/templates/horizon/common/_form_field.html | 4 +- horizon/templates/horizon/common/_page_header.html | 4 +- horizon/templates/horizon/common/_sidebar.html | 2 +- horizon/templates/horizon/common/_tab_group.html | 2 +- horizon/templates/horizon/jasmine/jasmine.html | 4 +- .../templates/horizon/jasmine/jasmine_legacy.html | 24 +- horizon/test/templates/base.html | 16 +- horizon/test/unit/tables/test_tables.py | 4 +- .../test/unit/templatetags/test_templatetags.py | 6 +- openstack_dashboard/conf/cinder_policy.yaml | 176 ++++++- .../conf/default_policies/neutron.yaml | 204 ++++---- .../conf/default_policies/nova.yaml | 4 +- openstack_dashboard/conf/neutron_policy.yaml | 558 +++++++++++---------- openstack_dashboard/conf/nova_policy.yaml | 8 +- .../theme-preview/theme-preview.directive.js | 4 +- .../developer/theme-preview/theme-preview.html | 2 +- .../templates/instances/_detail_console.html | 2 +- .../templates/instances/_instance_flavor.html | 4 +- .../templates/network_topology/_graph_view.html | 2 +- .../templates/network_topology/_post_massage.html | 2 +- .../templates/network_topology/_svg_element.html | 4 +- .../templates/network_topology/iframe.html | 4 +- .../workflow/launch-instance/keypair/keypair.html | 2 +- .../workflow/launch-instance/source/source.html | 2 +- .../locale/as/LC_MESSAGES/django.po | 5 +- .../locale/bn_IN/LC_MESSAGES/django.po | 5 +- .../locale/brx/LC_MESSAGES/django.po | 5 +- .../locale/cs/LC_MESSAGES/django.po | 5 +- .../locale/de/LC_MESSAGES/django.po | 9 +- .../locale/en_AU/LC_MESSAGES/django.po | 5 +- .../locale/en_GB/LC_MESSAGES/django.po | 136 ++++- .../locale/eo/LC_MESSAGES/django.po | 6 +- .../locale/es/LC_MESSAGES/django.po | 9 +- .../locale/fr/LC_MESSAGES/django.po | 9 +- .../locale/gu/LC_MESSAGES/django.po | 5 +- .../locale/hi/LC_MESSAGES/django.po | 5 +- .../locale/id/LC_MESSAGES/django.po | 9 +- .../locale/it/LC_MESSAGES/django.po | 5 +- .../locale/ja/LC_MESSAGES/django.po | 9 +- .../locale/kn/LC_MESSAGES/django.po | 5 +- .../locale/ko_KR/LC_MESSAGES/django.po | 9 +- .../locale/kok/LC_MESSAGES/django.po | 5 +- .../locale/ks/LC_MESSAGES/django.po | 5 +- .../locale/mai/LC_MESSAGES/django.po | 5 +- .../locale/mni/LC_MESSAGES/django.po | 5 +- .../locale/mr/LC_MESSAGES/django.po | 5 +- .../locale/ne/LC_MESSAGES/django.po | 5 +- .../locale/pa_IN/LC_MESSAGES/django.po | 5 +- .../locale/pl_PL/LC_MESSAGES/django.po | 5 +- .../locale/pt_BR/LC_MESSAGES/django.po | 9 +- .../locale/ru/LC_MESSAGES/django.po | 10 +- .../locale/ta/LC_MESSAGES/django.po | 5 +- .../locale/tr_TR/LC_MESSAGES/django.po | 5 +- .../locale/ur/LC_MESSAGES/django.po | 5 +- .../locale/zh_Hans/LC_MESSAGES/django.po | 9 +- .../locale/zh_Hant/LC_MESSAGES/django.po | 5 +- .../core/openstack-service-api/neutron.service.js | 4 + .../core/openstack-service-api/swift.service.js | 3 +- .../openstack-service-api/swift.service.spec.js | 1 - .../static/js/angular/directives/serialConsole.js | 2 +- .../static/js/horizon.flatnetworktopology.js | 16 +- openstack_dashboard/static/js/horizon.instances.js | 4 +- openstack_dashboard/static/js/horizon.metering.js | 2 +- .../static/js/horizon.networktopology.js | 16 +- .../static/js/horizon.networktopologycommon.js | 2 +- openstack_dashboard/static/js/horizon.volumes.js | 2 +- openstack_dashboard/templates/500.html | 2 +- openstack_dashboard/templates/_stylesheets.html | 4 +- .../templates/angular/angular_templates.html | 2 +- openstack_dashboard/templates/base.html | 14 +- .../context_selection/_anti_clickjack.html | 2 +- openstack_dashboard/templates/horizon/_conf.html | 6 +- .../templates/horizon/_scripts.html | 64 +-- openstack_dashboard/templates/serial_console.html | 10 +- .../pages/project/compute/imagespage.py | 2 + .../pages/project/compute/instancespage.py | 17 +- .../themes/example/templates/base.html | 4 +- .../themes/material/templates/header/_header.html | 2 +- releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 31 +- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 280 +++++++++++ requirements.txt | 6 +- 136 files changed, 1629 insertions(+), 1124 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 758643d20..cdb83185b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -48 +48 @@ semantic-version>=2.3.1 # BSD -XStatic>=1.0.0 # MIT License +XStatic>=1.0.3 # MIT License @@ -62,2 +62,2 @@ XStatic-Jasmine>=2.4.1.1 # MIT License -XStatic-jQuery>=1.12.4.1,<2 # MIT License -XStatic-JQuery-Migrate>=1.2.1.1 # MIT License +XStatic-jQuery>=1.12.4.1,<3.6 # MIT License +XStatic-JQuery-Migrate>=3 # MIT License

1 0

os-vif 3.2.0 (bobcat)
by no-reply＠openstack.org 07 Jul '23

07 Jul '23

We are excited to announce the release of: os-vif 3.2.0: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/os-vif Download the package from: https://pypi.org/project/os-vif Please report issues through: https://bugs.launchpad.net/os-vif/+bugs For more details, please see below. 3.2.0 ^^^^^ Upgrade Notes ************* * A new config option has been added to the OpenvSwitch plugin "[os_vif_ovs]default_qos_type". This option controls the Default tc qdisc applied to a kernel interface attached to OpenvSwitch on Linux hosts. As of this release, the default tc qdisc is "linux-noop" other supported values are "linux-htb", "linux-hfsc", "linux-sfq", "linux-codel" and "linux-fq_codel". before this release the default qdisc was undefined. older kernels did not apply /proc/sys/net/core/default_qdisc to tap devices. newer kernels such as the one found in rhel 9 do. This can significantly impact performance. See bug https://bugs.launchpad.net/os-vif/+bug/2017868 for more details. The default "linux-noop" should perform well for all use-cases so no explicit action is required on upgrade however it should be noted that the default_qos_type is only set when a port is first created. As such this fix will not take effect until the next time the vm interface is recreated. If you change this value for an existing port it will only take effect after a hard reboot of the VM or a move operation. Bug Fixes ********* * A significant performance regression was observed on a subset of Linux kernels and sysctl configurations resulting in a reduction of throughput to between 10% of the prior performance for small packets and 50% for large packets. This has now been resolved by setting a default qos_type on ovs interfaces when they are first created. To mimic libvirt's undocumented behavior the "linux-noop" type is set on the ovs port when it is first created. This will be overridden by neutron if a qos policy is defined for a port and is simply the initial value to use when first adding a port to OpenvSwitch. The default QoS type applied can be controlled by the "[os_vif_ovs]default_qos_type" config operation. See bug https://bugs.launchpad.net/os-vif/+bug/2017868 for more details. Changes in os-vif 3.1.1..3.2.0 ------------------------------ 79be30f remove focal based jobs c0d101a set default qos policy 6795bf6 Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 12 -- .../internal/command/ip/test_impl_pyroute2.py | 7 + ...efault-qos-policy-for-ovs-26f8806046a59c82.yaml | 33 ++++ releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 1 + vif_plug_ovs/ovs.py | 68 +++++++- vif_plug_ovs/ovsdb/impl_idl.py | 3 +- vif_plug_ovs/ovsdb/ovsdb_lib.py | 53 +++++- 12 files changed, 449 insertions(+), 40 deletions(-)

1 0

keystonemiddleware 10.4.0 (bobcat)
by no-reply＠openstack.org 07 Jul '23

07 Jul '23

We are amped to announce the release of: keystonemiddleware 10.4.0: Middleware for OpenStack Identity This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. Changes in keystonemiddleware 10.3.0..10.4.0 -------------------------------------------- 22408f8 Remove six 0f48ff3 Bump hacking to 6.0.x 3f12bc6 tox: Trivial formatting changes 626df3a Make tox.ini tox 4.0.0 compatible/fix gate 06bbdc8 Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- keystonemiddleware/audit/_api.py | 19 ++---- keystonemiddleware/auth_token/_cache.py | 13 ++-- keystonemiddleware/auth_token/_identity.py | 3 +- keystonemiddleware/auth_token/_memcache_crypt.py | 11 ++-- keystonemiddleware/ec2_token.py | 11 ++-- keystonemiddleware/s3_token.py | 6 +- .../unit/auth_token/test_auth_token_middleware.py | 25 ++++---- .../unit/test_oauth2_mtls_token_middleware.py | 5 +- releasenotes/source/2023.1.rst | 6 ++ releasenotes/source/index.rst | 1 + requirements.txt | 5 -- test-requirements.txt | 10 +-- tox.ini | 74 +++++++++++----------- 22 files changed, 123 insertions(+), 152 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c1398f9..e8b640d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,4 +4,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -21 +16,0 @@ requests>=2.14.2 # Apache-2.0 -six>=1.10.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index b539b01..f56db0f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,8 +1,2 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - -hacking>=3.0,<4.0.0 # Apache-2.0 -flake8-docstrings==1.6.0 # MIT -pep8==1.7.1 # MIT - +hacking~=6.0.1 # Apache-2.0 +flake8-docstrings~=1.7.0 # MIT

1 0

python-glanceclient 4.4.0 (bobcat)
by no-reply＠openstack.org 07 Jul '23

07 Jul '23

We jubilantly announce the release of: python-glanceclient 4.4.0: OpenStack Image API Client Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-glanceclient Download the package from: https://pypi.org/project/python-glanceclient Please report issues through: https://bugs.launchpad.net/python-glanceclient/+bugs For more details, please see below. 4.4.0 ^^^^^ Bug Fixes * Bug 2012442: import image with glance-download return 400 * Bug 1934626: glanceclient has no support to add type while creating md-property for namespace (https://code.launchpad.net/bugs/2012442) (https://code.launchpad.net/bugs/1934626) Changes in python-glanceclient 4.3.0..4.4.0 ------------------------------------------- 62e6fc8 Release notes for 4.4.0 7c2ab83 Docs generation: mock the six module for autodoc 7d78cc4 Bump the CHUNKSIZE to use CPU more efficiently 1ea41f0 do_image_import: always pass remote_* to gc.images.image_import 320ea4b Tox4: remove skipsdist e2190c4 do_image_import: fix argument retrieval 23fe745 Update master for stable/2023.1 393e84d md-property-create: add a mandatory "--type" option Diffstat (except docs and test files) ------------------------------------- glanceclient/common/http.py | 2 +- glanceclient/v2/shell.py | 22 ++++++++++++++-------- .../notes/4.4.0_Release-a3c89184f345e5a2.yaml | 9 +++++++++ releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 1 - 8 files changed, 46 insertions(+), 16 deletions(-)

1 0

oslo.messaging 14.0.1 (zed)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We are stoked to announce the release of: oslo.messaging 14.0.1: Oslo Messaging API This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.0.1 ^^^^^^ Upgrade Notes ************* * If kombu_reconnect_delay is specified in the [oslo_messaging_rabbit] section, ensure that it is less than 5.0, the value of ACK_REQUEUE_EVERY_SECONDS_MAX Bug Fixes ********* * Increased ACK_REQUEUE_EVERY_SECONDS_MAX to resolve issues with rabbitmq HA failover. Changes in oslo.messaging 14.0.0..14.0.1 ---------------------------------------- fa3195a3 Increase ACK_REQUEUE_EVERY_SECONDS_MAX to exceed default kombu_reconnect_delay d814af05 Update TOX_CONSTRAINTS_FILE for stable/zed bb789e9a Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_messaging/_drivers/amqpdriver.py | 2 +- oslo_messaging/_drivers/impl_rabbit.py | 6 ++++-- releasenotes/notes/bug-1993149-e8b231791b65e938.yaml | 9 +++++++++ tox.ini | 2 +- 6 files changed, 17 insertions(+), 5 deletions(-)

1 0

oslo.messaging 12.13.1 (yoga)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We joyfully announce the release of: oslo.messaging 12.13.1: Oslo Messaging API This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 12.13.1 ^^^^^^^ Upgrade Notes ************* * If kombu_reconnect_delay is specified in the [oslo_messaging_rabbit] section, ensure that it is less than 5.0, the value of ACK_REQUEUE_EVERY_SECONDS_MAX Bug Fixes ********* * Increased ACK_REQUEUE_EVERY_SECONDS_MAX to resolve issues with rabbitmq HA failover. Changes in oslo.messaging 12.13.0..12.13.1 ------------------------------------------ f20a905e Increase ACK_REQUEUE_EVERY_SECONDS_MAX to exceed default kombu_reconnect_delay a1b36e78 tests: Fix test failures with kombu >= 5.2.4 02f21fd3 Update TOX_CONSTRAINTS_FILE for stable/yoga 93994eee Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_messaging/_drivers/amqpdriver.py | 2 +- oslo_messaging/_drivers/impl_rabbit.py | 6 +++-- .../notes/bug-1993149-e8b231791b65e938.yaml | 9 ++++++++ tox.ini | 2 +- 7 files changed, 38 insertions(+), 11 deletions(-)

1 0

neutron 21.1.2 (zed)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We are gleeful to announce the release of: neutron 21.1.2: OpenStack Networking This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron 21.1.1..21.1.2 --------------------------------- bba43f1e09 [OVN][Trunk] Add port binding info on subport when parent is bound f1559037f7 [S-RBAC] Fix policies for CUD subnets APIs 5bd7cec099 Delete the "Chassis_Private" register when deleting an agent b5329788e0 Return 409 Conflict to tenant user deleting port attached to FIP d8643fafc7 Make DB migration creating indexes in RBACs conditional ba1b4bb08e [OVN][Migration] Enable settings backup subnet for NFS clients e8a00b9c52 Handle no more IP addresses available during a network sync Diffstat (except docs and test files) ------------------------------------- neutron/conf/policies/subnet.py | 13 +++-- neutron/db/l3_db.py | 24 +++++++++- .../expand/ba859d649675_add_indexes_to_rbacs.py | 26 +++++++++- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 9 ++++ .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 4 ++ neutron/services/trunk/drivers/ovn/trunk_driver.py | 30 ++++++++++-- .../test_ba859d649675_add_indexes_to_rbacs.py | 55 ++++++++++++++++++++++ .../drivers/ovn/mech_driver/test_mech_driver.py | 22 +++++++-- .../trunk/drivers/ovn/test_trunk_driver.py | 50 ++++++++++++++------ .../trunk/drivers/ovn/test_trunk_driver.py | 2 + .../tripleo_environment/ovn_migration.sh | 4 +- .../playbooks/roles/recovery-backup/tasks/main.yml | 1 + 16 files changed, 288 insertions(+), 33 deletions(-)

1 0

neutron 22.0.2 (antelope)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We are psyched to announce the release of: neutron 22.0.2: OpenStack Networking This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron 22.0.1..22.0.2 --------------------------------- 669fcca447 Raise the timeout of "neutron-ovn-rally-task" to 9000 5358eb0389 [OVN][Trunk] Add port binding info on subport when parent is bound 501745b245 dhcp/agent: fix 'get_metadata_bind_interface' driver call 7c90e90d22 [S-RBAC] Fix policies for CUD subnets APIs ddb08cd5a3 Delete the "Chassis_Private" register when deleting an agent a5c208ceca Return 409 Conflict to tenant user deleting port attached to FIP c063ad1106 Make DB migration creating indexes in RBACs conditional 01b5992686 [OVN][Migration] Enable settings backup subnet for NFS clients 9684f471ba Handle no more IP addresses available during a network sync Diffstat (except docs and test files) ------------------------------------- neutron/agent/dhcp/agent.py | 4 ++ neutron/conf/policies/subnet.py | 13 +++-- neutron/db/l3_db.py | 24 +++++++++- .../expand/ba859d649675_add_indexes_to_rbacs.py | 26 +++++++++- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 9 ++++ .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 4 ++ neutron/services/trunk/drivers/ovn/trunk_driver.py | 30 ++++++++++-- .../test_ba859d649675_add_indexes_to_rbacs.py | 55 ++++++++++++++++++++++ .../drivers/ovn/mech_driver/test_mech_driver.py | 22 +++++++-- .../trunk/drivers/ovn/test_trunk_driver.py | 50 ++++++++++++++------ .../trunk/drivers/ovn/test_trunk_driver.py | 2 + .../tripleo_environment/ovn_migration.sh | 4 +- .../playbooks/roles/recovery-backup/tasks/main.yml | 1 + zuul.d/rally.yaml | 2 +- 19 files changed, 304 insertions(+), 34 deletions(-)

1 0

tosca-parser 2.9.0 (bobcat)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We contentedly announce the release of: tosca-parser 2.9.0: Parser for TOSCA Simple Profile in YAML. This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/tosca-parser Download the package from: https://pypi.org/project/tosca-parser Please report issues through: https://bugs.launchpad.net/tosca-parser/+bugs For more details, please see below. Changes in tosca-parser 2.8.0..2.9.0 ------------------------------------ 16932ad Support importing def from local instead of url c34dd4b Interface outputs dcff68f Fix passenv for tox4 Diffstat (except docs and test files) ------------------------------------- toscaparser/elements/interfaces.py | 6 +++++- toscaparser/imports.py | 12 +++++++++-- toscaparser/tosca_template.py | 7 +++++-- tox.ini | 9 +++++++-- 6 files changed, 79 insertions(+), 7 deletions(-)

1 0

python-ironicclient 5.3.0 (bobcat)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We are happy to announce the release of: python-ironicclient 5.3.0: OpenStack Bare Metal Provisioning API Client Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-ironicclient Download the package from: https://pypi.org/project/python-ironicclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- ironicclient For more details, please see below. 5.3.0 ^^^^^ New Features * Adds support for API version "1.81", allowing users to retrieve a node's hardware inventory using the "baremetal node inventory [--file <filename>] save <node>" command. * Adds a "get_inventory" method to the python client library. This method allows operators to query recorded node inventory from an ironic API. * Add support for Node shard field. * Add support for listing nodes by one or more shards. * Add support for filtering nodes by if they are sharded. Changes in python-ironicclient 5.2.0..5.3.0 ------------------------------------------- 0e9a476 Node sharding support 0b6b282 Add support for node inventory bea37aa Fix minor spelling errors and incorrect help text Diffstat (except docs and test files) ------------------------------------- ironicclient/common/http.py | 2 +- ironicclient/osc/v1/baremetal_node.py | 85 ++++++++++-- ironicclient/v1/node.py | 36 ++++- .../notes/add-node-inventory-74e856c019cfa7e2.yaml | 7 + .../notes/node-shard-support-774ebfe6719fc7c2.yaml | 4 + setup.cfg | 1 + 9 files changed, 341 insertions(+), 16 deletions(-)

1 0

oslo.utils 6.2.0 (bobcat)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We are jazzed to announce the release of: oslo.utils 6.2.0: Oslo Utility library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 6.2.0 ^^^^^ New Features ************ * New method "netutils.get_my_ipv6()" returns the IPv6 address of the local machine. Other Notes *********** * Implement zoneinfo to allow us to remove pytz's dependency for Python 3.9 and 3.10. Changes in oslo.utils 6.1.0..6.2.0 ---------------------------------- 77c90bd Replace deprecated assertAlmostEquals method c08e46d strutils: update string_to_bytes 650b31f Add netutils.get_my_ipv6() 7281cb9 Bump bandit 2c8668c Fix compatibility with Python 3.8 541ba30 Revert "Moves supported python runtimes from version 3.8 to 3.10" 8c63440 Moves supported python runtimes from version 3.8 to 3.10 4cc5693 Update units for current SI prefixes 7d9fda6 Implement zoneinfo support to drop dependency to pytz 26a920e Use the new openstack-python3-jobs template 067a0db Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_utils/netutils.py | 46 ++++++++++++++++++++++ oslo_utils/strutils.py | 33 ++++++++++++---- oslo_utils/timeutils.py | 18 +++++++-- oslo_utils/units.py | 8 ++++ ...t-zoneinfo-to-remove-pytz-fba6f70db09ecdb8.yaml | 5 +++ .../netutils-get_my_ipv6-c9f124374655326b.yaml | 5 +++ releasenotes/source/2023.1.rst | 6 +++ releasenotes/source/index.rst | 1 + requirements.txt | 1 + setup.cfg | 1 + test-requirements.txt | 2 +- 15 files changed, 159 insertions(+), 28 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 37374ac..cc0b9a1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13,0 +14 @@ packaging>=20.4 # BSD +tzdata>=2022.4 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index f225ea4..6a28448 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -24 +24 @@ oslo.config>=5.2.0 # Apache-2.0 -bandit>=1.6.0,<1.7.0 # Apache-2.0 +bandit>=1.7.0,<1.8.0 # Apache-2.0

1 0

python-neutronclient 11.0.0 (bobcat)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We are thrilled to announce the release of: python-neutronclient 11.0.0: CLI and Client Library for OpenStack Networking This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. 11.0.0 ^^^^^^ Upgrade Notes * The "openstack bgp speaker show dragents" CLI is removed. It was deprecated in the 7.1.0 release (Ussuri). Use "openstack bgp dragent list --bgp-speaker <bgp-speaker>" CLI instead. Changes in python-neutronclient 10.0.0..11.0.0 ---------------------------------------------- 4ed299a BGPVPN: make resource_association method calls logic simpler d4124ae OSC: Remove BGPVPN calls to neutronclient 79c7de4 Remove 'bgp speaker show dragents' Diffstat (except docs and test files) ------------------------------------- .../osc/v2/dynamic_routing/bgp_dragent.py | 49 ----- neutronclient/osc/v2/networking_bgpvpn/bgpvpn.py | 42 ++-- .../osc/v2/networking_bgpvpn/port_association.py | 13 +- .../v2/networking_bgpvpn/resource_association.py | 115 ++++++----- .../osc/v2/networking_bgpvpn/router_association.py | 5 +- .../osc/v2/dynamic_routing/test_bgp_dragent.py | 41 ---- .../unit/osc/v2/networking_bgpvpn/test_bgpvpn.py | 160 ++++++++-------- .../networking_bgpvpn/test_resource_association.py | 131 +++++++------ .../networking_bgpvpn/test_router_association.py | 103 +++++----- ...bgp-speaker-show-dragents-0a0db4b72b2feffc.yaml | 6 + requirements.txt | 2 +- setup.cfg | 1 - 14 files changed, 426 insertions(+), 457 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2e9e22d..3ed2768 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ netaddr>=0.7.18 # BSD -openstacksdk>=1.0.0 # Apache-2.0 +openstacksdk>=1.0.2 # Apache-2.0

1 0

ovsdbapp 2.4.0 (bobcat)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We are psyched to announce the release of: ovsdbapp 2.4.0: A library for creating OVSDB applications This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 2.3.0..2.4.0 -------------------------------- 2672869 Ensure LrpAddCommand may_exits works without peers cc1ddf6 Add support for ecmp routes Diffstat (except docs and test files) ------------------------------------- ovsdbapp/schema/ovn_northbound/api.py | 6 +++++- ovsdbapp/schema/ovn_northbound/commands.py | 7 +++++-- ovsdbapp/schema/ovn_northbound/impl_idl.py | 4 ++-- .../functional/schema/ovn_northbound/test_impl_idl.py | 14 ++++++++++---- 4 files changed, 22 insertions(+), 9 deletions(-)

1 0

python-troveclient 8.2.0 (bobcat)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We joyfully announce the release of: python-troveclient 8.2.0: Client library for OpenStack DBaaS API This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-troveclient Download the package from: https://pypi.org/project/python-troveclient Please report issues through: https://bugs.launchpad.net/python-troveclient/+bugs For more details, please see below. Changes in python-troveclient 8.1.0..8.2.0 ------------------------------------------ b739fe4 Add python 3.10 to setup.cfg metadata 81597a0 Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + setup.cfg | 1 + 3 files changed, 8 insertions(+)

1 0

octavia-lib 3.3.0 (bobcat)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We are gleeful to announce the release of: octavia-lib 3.3.0: A library to support Octavia provider drivers. This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/octavia-lib Download the package from: https://pypi.org/project/octavia-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia-lib For more details, please see below. 3.3.0 ^^^^^ New Features * Added support for HTTP Strict Transport Security (HSTS). Changes in octavia-lib 3.2.0..3.3.0 ----------------------------------- bad1900 Add support for HTTP Strict Transport Security 5320026 Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- octavia_lib/api/drivers/data_models.py | 8 +++++++- octavia_lib/common/constants.py | 3 +++ .../notes/Added-HSTS-support-7d1fbfc35ee5dc29.yaml | 4 ++++ releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 6 files changed, 33 insertions(+), 4 deletions(-)

1 0

python-cyborgclient 2.2.0 (bobcat)
by no-reply＠openstack.org 06 Jul '23

06 Jul '23

We eagerly announce the release of: python-cyborgclient 2.2.0: Python client for cyborg API This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-cyborgclient Download the package from: https://pypi.org/project/python-cyborgclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cyborg For more details, please see below. Changes in python-cyborgclient 2.1.0..2.2.0 ------------------------------------------- edc6c07 add negative unit test for delete attribute f99ad12 add negative unit test for delete device profile 363fb32 add negative unit test for show device 911defa add negative unit test for show deployable da3c68d Follow pep8 e31150d Add ut for show not exist device_profile client api da3392d Add ut for show not exist attribute client api a4a603f add ut for get deployable client api a81a401 add ut for get device client api 373f3db Add ut for delete attribute client api 354a1dc add unittest for delete accelerator request client api ec3c9c4 add unittest for delete device profile client api 50cf9bf improve doc format 6dff59c Add ut for get attribute client api a3d4c01 Add ut for create attribute client api bf9579e Add ut for list attribute client api 0e349b7 Add client API for accelerator attribute show 0f940fe Add client API for accelerator attribute delete b841f54 Add client API for accelerator attribute create 91cf9d7 Add Attribute api client Diffstat (except docs and test files) ------------------------------------- cyborgclient/osc/v2/attribute.py | 184 +++++++++++++++++ cyborgclient/osc/v2/device_profile.py | 2 + cyborgclient/shell.py | 13 +- releasenotes/source/index.rst | 6 +- releasenotes/source/rocky.rst | 6 +- releasenotes/source/stein.rst | 6 +- releasenotes/source/train.rst | 6 +- releasenotes/source/unreleased.rst | 6 +- setup.cfg | 4 + 15 files changed, 612 insertions(+), 22 deletions(-)

1 0