October 2024 - Release-announce - lists.openstack.org

python-openstackclient 7.2.1 (epoxy)
by no-reply＠openstack.org 29 Oct '24

29 Oct '24

We are chuffed to announce the release of: python-openstackclient 7.2.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 7.2.1 ^^^^^ Bug Fixes * The "quota set" and "limits show" commands will now check for the "block-storage" and "block-store" service types along with "volume", "volumev2" and "volumev3". [Bug 2084580 (https://bugs.launchpad.net/python- openstackclient/+bug/2084580)] Changes in python-openstackclient 7.2.0..7.2.1 ---------------------------------------------- 7c6b47b4 clientmanager: Check for 'block-storage' service type Diffstat (except docs and test files) ------------------------------------- openstackclient/common/clientmanager.py | 7 ++++++- releasenotes/notes/bug-2084580-cb1e8c47501e730c.yaml | 8 ++++++++ 2 files changed, 14 insertions(+), 1 deletion(-)

1 0

kolla 19.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 28 Oct '24

28 Oct '24

Hello everyone, A new release candidate for kolla for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/kolla/src/branch/stable/dalmatian Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *dalmatian-rc-potential* to bring it to the kolla release crew's attention.

1 0

kolla-ansible 19.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 28 Oct '24

28 Oct '24

Hello everyone, A new release candidate for kolla-ansible for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/dalmatian Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *dalmatian-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

magnum-capi-helm 1.2.0
by no-reply＠openstack.org 24 Oct '24

24 Oct '24

We contentedly announce the release of: magnum-capi-helm 1.2.0 The source is available from: https://opendev.org/openstack/magnum-capi-helm Download the package from: https://pypi.org/project/magnum-capi-helm For more details, please see below. 1.2.0 ^^^^^ Upgrade Notes ************* * Default helm repository is updated to 'azimuth- cloud.github.io/capi- helm-charts'. Deprecation Notes ***************** * Helm repository 'stackhpc.github.io/capi-helm-charts' is deprecated. The last version supported on this repo is 0.9.0 Changes in magnum-capi-helm 1.1.0..1.2.0 ---------------------------------------- 70709a9 typo in release note fd6c6be Helm chart repo changes Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- devstack/contrib/new-devstack.sh | 12 ++++++------ magnum_capi_helm/conf.py | 4 ++-- magnum_capi_helm/helm.py | 2 +- releasenotes/notes/change-helm-repo-55869552914bb9ed.yaml | 7 +++++++ 8 files changed, 20 insertions(+), 15 deletions(-)

1 0

nova 27.5.1 (antelope)
by no-reply＠openstack.org 24 Oct '24

24 Oct '24

We eagerly announce the release of: nova 27.5.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 27.5.1 ^^^^^^ Bug Fixes * Fixes a regression for live migration on shared storage that was removing the backing disk and instance folder during the cleanup of a virtual machine post live migration. bug 2080436 for details. * Bug #2024258: Fixes an issue with performance degradation archiving databases with large numbers of foreign key related records. Previously, deleted rows were archived in batches of max_rows parents + their child rows in a single database transaction. It limited how high a value of max_rows could be specified by the user because of the size of the database transaction it could generate. Symptoms of the behavior were exceeding the maximum configured packet size of the database or timing out due to a deadlock. The behavior has been changed to archive batches of complete parent + child rows trees while limiting each batch when it has reached >= max_rows records. This allows the size of the database transaction to be controlled by the user and enables more rows to be archived per invocation of "nova-manage db archive_deleted_rows" when there are a large number of foreign key related records. (https://bugs.launchpad.net/nova/+bug/2024258) Changes in nova 27.5.0..27.5.1 ------------------------------ 1d788f1189 [doc]Fix the device_spec config doc about placement e8999f0264 Fix regression with live migration on shared storage cf08543ca1 hardware: Correct log 9367b93e92 Skip snapshot test when missing qemu-img 010acce606 libvirt: call get_capabilities() with all CPUs online 6c3d72f477 Fix PCI passthrough cleanup on reschedule 4ae8aa82d6 Functional test test_boot_reschedule_with_proper_pci_device_count fde9368dd7 Drop Fedora support 197b14d765 [CI] Replace deprecated regex 4c02c2d7b3 retry write_sys call on device busy 68b9934baa add functional repoducer for bug 2065927 c534be7e00 Disconnecting volume from the compute host fc54bc92b5 Separate OSError with ValueError a1fa92f0ab Added context manager for instance lock 75e4c86d90 database: Archive parent and child rows "trees" one at a time 8823da84e9 testing: Fix and robustify archive_deleted_rows test Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 58 ++--- .../instance-create-error.json | 4 +- nova/cmd/manage.py | 274 ++++++++++++--------- nova/compute/claims.py | 3 +- nova/compute/manager.py | 4 +- nova/conf/pci.py | 5 +- nova/db/main/api.py | 131 +++++++--- nova/exception.py | 8 + nova/filesystem.py | 55 ++++- nova/pci/manager.py | 4 +- .../functional/libvirt/test_pci_sriov_servers.py | 56 +++++ nova/virt/hardware.py | 4 +- nova/virt/libvirt/cpu/api.py | 6 +- nova/virt/libvirt/cpu/core.py | 12 +- nova/virt/libvirt/driver.py | 33 ++- .../notes/bug-2080436-568b03b5b5ba5760.yaml | 8 + ...e-performance-degradation-3fdabc43398149b1.yaml | 21 ++ 28 files changed, 832 insertions(+), 288 deletions(-)

1 0

sushy 5.3.0 (epoxy)
by no-reply＠openstack.org 24 Oct '24

24 Oct '24

We are amped to announce the release of: sushy 5.3.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://bugs.launchpad.net/sushy/+bugs For more details, please see below. 5.3.0 ^^^^^ New Features ************ * Adds *EthernetInterfaces* property support to the Redfish Manager instance. Bug Fixes ********* * PATCH 'HttpBootUri' against SettingsURI if present. If not, fall back to System URI. Changes in sushy 5.2.0..5.3.0 ----------------------------- d8cf598 bump pbr to match what pyproject.toml requests 04eca76 contributor: links to ironic dev docs, launchpad 11ff4bc Fix setting "HttpBootUri" attributes 8928f45 add pyproject.toml to support pip 23.1 0506d81 Update master for stable/2024.2 c582b64 fix spelling and make codespell pass 3abb6ca EthernetInterface without an Id d1f0faa add a link to the release notes in the README 9246f0a drop usage of pkg_resource for newer python compat 83679fa Fix versions in release notes d6aa0ac Adds Ethernet Interfaces for manager. Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 16 ++++++-- README.rst | 1 + pyproject.toml | 4 ++ .../HttpBootUri-to-settings-6fcbdeed2b4e84df.yaml | 6 +++ ...hernet-interfaces-manager-5529326417a38da9.yaml | 5 +++ releasenotes/notes/sessions.yml | 2 +- releasenotes/source/2024.1.rst | 6 +-- releasenotes/source/2024.2.rst | 6 +++ releasenotes/source/index.rst | 1 + requirements.txt | 3 +- setup.cfg | 4 +- setup.py | 2 +- sushy/main.py | 34 +++++++++------- sushy/resources/base.py | 13 ++++-- sushy/resources/manager/manager.py | 16 ++++++++ sushy/resources/system/ethernet_interface.py | 2 +- sushy/resources/system/system.py | 6 ++- .../json_samples/manager_ethernet_interfaces.json | 46 ++++++++++++++++++++++ .../manager_ethernet_interfaces_collection.json | 12 ++++++ .../unit/json_samples/settings-body-nokia.json | 3 +- zuul.d/project.yaml | 4 +- 23 files changed, 207 insertions(+), 34 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9f2e385..934d8bc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=6.0.0 # Apache-2.0 @@ -12,0 +13 @@ stevedore>=1.29.0 # Apache-2.0 +importlib_resources>=1.3; python_version<'3.9' # Apache-2.0

1 0

cloudkitty 18.1.0 (antelope)
by no-reply＠openstack.org 24 Oct '24

24 Oct '24

We contentedly announce the release of: cloudkitty 18.1.0 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/cloudkitty Download the package from: https://pypi.org/project/cloudkitty Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cloudkitty For more details, please see below. 18.1.0 ^^^^^^ New Features ************ * OpenSearch has been added as an alternative v2 storage backend. It is a duplicate of the ElasticSearch backend, with the naming changed where appropriate. This change is in support of the deprecation of ElasticSearch as a backend. Bug Fixes ********* * Fix some API report requests that were returning HTTP 500 errors when using the "opensearch" storage backend. This fixes failures to load the Horizon "Rating" panel. * Fix retrieval of reprocessing tasks which was returning "Internal Server Error". Changes in cloudkitty 18.0.0..18.1.0 ------------------------------------ dd5bb9e Fix devstack runprocess for cloudkitty api af1019d Fix API report requests when using opensearch 1cac176 Add OpenSearch as a v2 storage backend 4592836 Update Monasca deprecation and removal details 8c44864 Fix retrieval of reprocessing tasks 08a22b5 Fix random unit test failures dd5c9fd Fix formatting in release note 073641f Update TOX_CONSTRAINTS_FILE for stable/2023.1 aabbc2e Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 13 + cloudkitty/api/v2/task/reprocess.py | 8 +- cloudkitty/common/config.py | 3 + cloudkitty/storage/v2/opensearch/__init__.py | 205 +++++++++ cloudkitty/storage/v2/opensearch/client.py | 413 ++++++++++++++++++ cloudkitty/storage/v2/opensearch/exceptions.py | 32 ++ devstack/plugin.sh | 83 +++- devstack/settings | 4 + ...rch-as-v2-storage-backend-ff4080d6d32d8a2a.yaml | 7 + .../notes/deprecate-monasca-5526b823b227c6ef.yaml | 6 +- .../fix-opensearch-report-344508dd4e3d0ccc.yaml | 6 + .../move-api-docs-to-api-ref-be71b864e557110e.yaml | 2 +- .../notes/reprocess-get-fix-f2bd1f2f9e2d640e.yaml | 5 + setup.cfg | 1 + tox.ini | 4 +- 21 files changed, 1391 insertions(+), 38 deletions(-)

1 0

openstacksdk 4.0.1 (dalmatian)
by no-reply＠openstack.org 23 Oct '24

23 Oct '24

We are pleased to announce the release of: openstacksdk 4.0.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 4.0.1 ^^^^^ New Features * The "migrate_server" compute proxy API and the "Server.migrate" API now accept a "host" parameter to migrate to a given host. Changes in openstacksdk 4.0.0..4.0.1 ------------------------------------ 2423ab4e Fix internal error when floating ip network is not found by name 55f9b299 compute: Add support for targeting host during migrate f7fad118 Fix volume summary passing non-existent all_projects b5a88e4d Update TOX_CONSTRAINTS_FILE for stable/2024.2 edd006d3 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + openstack/block_storage/v3/_proxy.py | 5 +++-- openstack/cloud/_network_common.py | 4 +++- openstack/compute/v2/_proxy.py | 5 +++-- openstack/compute/v2/server.py | 13 +++++++++++-- .../notes/support-migration-to-host-b2958b3b8c5ca1fb.yaml | 5 +++++ tox.ini | 8 ++++---- 7 files changed, 30 insertions(+), 11 deletions(-)

1 0

openstackdocstheme 3.4.0
by no-reply＠openstack.org 23 Oct '24

23 Oct '24

We are overjoyed to announce the release of: openstackdocstheme 3.4.0 The source is available from: https://opendev.org/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ For more details, please see below. Changes in openstackdocstheme 3.3.0..3.4.0 ------------------------------------------ 052ed8e Bump minimum Sphinx version f00d211 Resolve Sphinx 8.x warnings fe883a4 Make Sphinx a required dependency e7c48a5 setup: Update Python classifiers 2f49a66 pre-commit: Add ruff, ruff-format 9baeee4 pre-commit: Bump dependencies Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 31 ++++++--------- api-ref/source/conf.py | 17 ++++---- openstackdocstheme/ext.py | 79 +++++++++++++++++++++++--------------- openstackdocstheme/page_context.py | 48 ++++++++++++++++------- pyproject.toml | 6 +++ releasenotes/source/conf.py | 40 +++++++++++-------- requirements.txt | 5 +-- setup.cfg | 4 +- setup.py | 4 +- test-requirements.txt | 10 ----- tox.ini | 24 +++++++----- 13 files changed, 161 insertions(+), 127 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f2932ea..7effca4 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -6,0 +3 @@ dulwich>=0.15.0 # Apache-2.0 +sphinx>=6.0.0 # BSD

1 0

ironic 21.4.4 (antelope)
by no-reply＠openstack.org 21 Oct '24

21 Oct '24

We joyfully announce the release of: ironic 21.4.4 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 21.4.4 ^^^^^^ Security Issues *************** * An issue in Ironic has been resolved where image checksums would not be checked prior to the conversion of an image to a "raw" format image from another image format. With default settings, this normally would not take place, however the "image_download_source" option, which is available to be set at a "node" level for a single deployment, by default for that baremetal node in all cases, or via the "[agent]image_download_source" configuration option when set to "local". By default, this setting is "http". This was in concert with the "[DEFAULT]force_raw_images" when set to "True", which caused Ironic to download and convert the file. In a fully integrated context of Ironic's use in a larger OpenStack deployment, where images are coming from the Glance image service, the previous pattern was not problematic. The overall issue was introduced as a result of the capability to supply, cache, and convert a disk image provided as a URL by an authenticated user. Ironic will now validate the user supplied checksum prior to image conversion on the conductor. This can be disabled using the "[conductor]disable_file_checksum" configuration option. Bug Fixes ********* * Fixes a security issue where Ironic would fail to checksum disk image files it downloads when Ironic had been requested to download and convert the image to a raw image format. This required the "image_download_source" to be explicitly set to "local", which is not the default. This fix can be disabled by setting "[conductor]disable_file_checksum" to "True", however this option will be removed in new major Ironic releases. As a result of this, parity has been introduced to align Ironic to Ironic-Python-Agent's support for checksums used by "standalone" users of Ironic. This includes support for remote checksum files to be supplied by URL, in order to prevent breaking existing users which may have inadvertently been leveraging the prior code path. This support can be disabled by setting "[conductor]disable_support_for_checksum_files" to "True". Changes in ironic 21.4.3..21.4.4 -------------------------------- 792e2c009 Fix actual size calculation for storage fallback logic b7cc66502 Checksum files before raw conversion b96312458 Try limiting MTU to at least 1280 71682d401 Revert "ci: stable-only: explicitly pin centos build" Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 6 - devstack/settings | 11 +- ironic/common/checksum_utils.py | 250 +++++++++++++++++++++ ironic/common/exception.py | 22 ++ ironic/common/image_service.py | 35 +++ ironic/common/images.py | 9 +- ironic/conf/conductor.py | 22 ++ ironic/drivers/modules/deploy_utils.py | 70 +++--- ironic/drivers/modules/image_cache.py | 44 +++- .../unit/drivers/modules/test_deploy_utils.py | 191 ++++++++++++++-- ...hecksum-before-conversion-66d273b94fa2ba4d.yaml | 44 ++++ zuul.d/ironic-jobs.yaml | 1 + 17 files changed, 1062 insertions(+), 83 deletions(-)

1 0

ironic-lib 5.4.1 (antelope)
by no-reply＠openstack.org 21 Oct '24

21 Oct '24

We are psyched to announce the release of: ironic-lib 5.4.1 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ironic-lib Download the package from: https://pypi.org/project/ironic-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic-lib For more details, please see below. Changes in ironic-lib 5.4.0..5.4.1 ---------------------------------- e9cf477 Fix invalid UTF-8 characters in execute output 3a9cc01 Update TOX_CONSTRAINTS_FILE for stable/2023.1 8ef3bfb Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_lib/utils.py | 16 ++++++++++++++-- tox.ini | 4 ++-- 3 files changed, 17 insertions(+), 4 deletions(-)

1 0

ironic-python-agent 9.4.3 (antelope)
by no-reply＠openstack.org 21 Oct '24

21 Oct '24

We are thrilled to announce the release of: ironic-python-agent 9.4.3 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 9.4.3 ^^^^^ Bug Fixes * Fixes an issue where configuration drive volumes which are mounted by the operating system could remain mounted and cause a lock to be held, which may conflict with actions such as "rebuild". The agent now always makes sure the folder used by Glean and Cloud-init is not mounted. * Fixes bug 2066308, an issue where Ironic Python Agent would call evaluate_hardware_support multiple times on hardware manager plugins. Scanning for hardware and disks is time consuming, and caused timeouts on badly-performing nodes. Changes in ironic-python-agent 9.4.2..9.4.3 ------------------------------------------- 38ffd5b Call evaluate_hardware_support exactly once per hwm 693af13 Unmount config drives Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/hardware.py | 67 ++++++++++++-------- ironic_python_agent/utils.py | 28 +++++++++ ...-config-drive-is-umounted-a3985bbb45e89051.yaml | 8 +++ ...ate-hardware-support-once-9ec1ae327b4e03f2.yaml | 7 +++ 9 files changed, 208 insertions(+), 57 deletions(-)

1 0

openstack-ansible 29.1.0 (caracal)
by no-reply＠openstack.org 21 Oct '24

21 Oct '24

We are chuffed to announce the release of: openstack-ansible 29.1.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 29.1.0 ^^^^^^ New Features ************ * Add support for ceilometer consumption of magnum notifications. Notifications will be consumed automatically when magnum_ceilometer_enabled is True. * Added variable "openstack_apache_mpm_backend" which is used as a default value by service-specific variables to define used Apache MPM across the deployment. Defaults MPM "event" will be used if not overriden. * Added variables to better control SSH keypair generation for Octavia: * "octavia_ssh_key_manage" (True): Enables an Octavia role to generate and manage SSH keypair to be used for Amphoras. * "octavia_resources_deploy_host" (localhost): The host on which SSH key will be created. * "octavia_ssh_key_dir" (${HOME}/.ssh): Directory under which keypair will be created on the "octavia_resources_deploy_host" * "octavia_ssh_key_comment" (Generated-by-Nova): Comment for the keypair. * "octavia_ssh_key_format" (ssh): Format for the stored private key * "octavia_ssh_key_type" (rsa): Type of the SSH keypair generated * "octavia_ssh_key_size" (2048): Private key length. Known Issues ************ * Due to the underlying bug (https://bugs.launchpad.net/ansible- collections-openstack/+bug/2065680) in Ansible collections for OpenStack, "Default" domain name can be renamed to "default" under certain conditions. One known example is having "domain: default" defenition under "keystone_sp -> trusted_idp_list -> federated_identities" structure. Upgrade Notes ************* * Default for Neutron API has been switched from using uWSGI to old eventlet due to found compatability issues for the current OpenStack release. You can find more infromation in Neutron bug report (https://bugs.launchpad.net/neutron/+bug/2069581) You can preserve current behaviour by setting "neutron_use_uwsgi: True" * Please, make sure that in case of federation usage you define domain name instead of it's ID (ie. "Default" instead of "default") under "keystone_sp -> trusted_idp_list -> federated_identities" * In order to align used Apache MPM across the board, Horizon default MPM is switched from "worker" to "event". A variable "horizon_apache_mpm_backend" was introduced to define the MPM in use. Bug Fixes ********* * Used Apache MPMs are aligned across services and will not conflict with each other on *metal* deployments. Apache MPM *event* is being used by default. * In case of switching Neutron from uWSGI to old eventlet, *neutron- rpc-server* service will be disabled and stopped by the role. * An Octavia "amphora" provider was returned back to the list of supported providers to satisfy Magnum "octavia_provider" default label. * Skyline is not getting installed anymore by default as part of "os- infra_hosts", which might result in unwanted dashboard changes during OpenStack upgrade process. Other Notes *********** * Skyline was removed from being assigned to "os-infra_hosts". If you want to install Skyline as your dashboard, you need to define "skyline_dashboard_hosts" explicitly. Changes in openstack-ansible 29.0.2..29.1.0 ------------------------------------------- 262509e28 Update Neutron SHA after bugfix ee21c197d Bumps SHAs for 2024.1 b5357cab4 Add global release note for Apache MPM alignment 9bc7713ab Use node FQDN for nova-restore-compute-id cd04c006e Verify OS for containers installation def7127b3 Remove the get_md5 parameter from ansible stat tasks b6338e8f9 Do not install Skyline with os-infra_hosts 91fba44ee Remove extra slash character from horizon haproxy healthcheck url. Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 52 +++++++++++----------- inventory/env.d/skyline.yml | 1 - inventory/group_vars/all/source_git.yml | 4 +- inventory/group_vars/cinder_all/source_git.yml | 4 +- inventory/group_vars/glance_all/source_git.yml | 4 +- inventory/group_vars/gnocchi_all/source_git.yml | 4 +- inventory/group_vars/heat_all/source_git.yml | 4 +- .../group_vars/horizon_all/haproxy_service.yml | 2 +- inventory/group_vars/horizon_all/source_git.yml | 4 +- inventory/group_vars/ironic_all/source_git.yml | 4 +- inventory/group_vars/keystone_all/source_git.yml | 4 +- inventory/group_vars/manila_all/source_git.yml | 4 +- inventory/group_vars/masakari_all/source_git.yml | 4 +- inventory/group_vars/neutron_all/source_git.yml | 4 +- inventory/group_vars/nova_all/source_git.yml | 6 +-- inventory/group_vars/octavia_all/source_git.yml | 6 +-- playbooks/containers-lxc-create.yml | 21 +++++++++ .../add-magnum-integration-a7a21c4feae9cbeb.yaml | 6 +++ .../apache_mpm_alignment-a02d4ff084fa2b4f.yaml | 11 +++++ ...ble_neutron_uwsgi_default-1763a0cbc17f23c8.yaml | 13 ++++++ .../federated_domain_names-4e169b8b9a947940.yaml | 13 ++++++ .../notes/horizon_apache_mpm-2a34436635f1bef9.yaml | 8 ++++ ...tavia_ssh_keypair_options-a6f9cfeb51bdfefa.yaml | 16 +++++++ .../return_amphora_provider-05deae1d173dbb1f.yaml | 5 +++ .../skyline_not_infra_hosts-58190dad1c43ed9a.yaml | 11 +++++ .../upgrade-utilities/nova-restore-compute-id.yml | 3 +- zuul.d/playbooks/post.yml | 1 - 27 files changed, 161 insertions(+), 58 deletions(-)

1 0

openstack-ansible 27.6.0 (antelope)
by no-reply＠openstack.org 21 Oct '24

21 Oct '24

We are psyched to announce the release of: openstack-ansible 27.6.0 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 27.6.0 ^^^^^^ Upgrade Notes ************* * Default for Neutron API has been switched from using uWSGI to old eventlet due to found compatability issues for the current OpenStack release. You can find more infromation in Neutron bug report (https://bugs.launchpad.net/neutron/+bug/2069581) You can preserve current behaviour by setting "neutron_use_uwsgi: True" Bug Fixes ********* * In case of switching Neutron from uWSGI to old eventlet, *neutron- rpc-server* service will be disabled and stopped by the role. Changes in openstack-ansible 27.5.1..27.6.0 ------------------------------------------- 91f27e743 Update Neutron SHA after bugfix fac08c3a0 Bump SHAs for 2023.1 663c28c7d Ensure that the inventory tox job runs on an ubuntu-jammy node 69aec8539 Use node FQDN for nova-restore-compute-id 5f08c57e4 Ensure "parallel" package is installed for CI log collection 1352261e5 Remove the get_md5 parameter from ansible stat tasks Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 20 ++++++++++---------- inventory/group_vars/all/source_git.yml | 4 ++-- inventory/group_vars/barbican_all/source_git.yml | 4 ++-- inventory/group_vars/cinder_all/source_git.yml | 4 ++-- inventory/group_vars/glance_all/source_git.yml | 4 ++-- inventory/group_vars/heat_all/source_git.yml | 4 ++-- inventory/group_vars/horizon_all/source_git.yml | 4 ++-- inventory/group_vars/ironic_all/source_git.yml | 4 ++-- inventory/group_vars/keystone_all/source_git.yml | 4 ++-- inventory/group_vars/manila_all/source_git.yml | 4 ++-- inventory/group_vars/neutron_all/source_git.yml | 6 +++--- inventory/group_vars/nova_all/source_git.yml | 6 +++--- inventory/group_vars/octavia_all/source_git.yml | 6 +++--- inventory/group_vars/swift_all/source_git.yml | 4 ++-- ...sable_neutron_uwsgi_default-1763a0cbc17f23c8.yaml | 13 +++++++++++++ scripts/scripts-library.sh | 6 ++++-- .../upgrade-utilities/nova-restore-compute-id.yml | 3 ++- zuul.d/jobs.yaml | 1 + zuul.d/playbooks/post.yml | 1 - zuul.d/project-templates.yaml | 3 --- 20 files changed, 59 insertions(+), 46 deletions(-)

1 0

openstack-ansible 28.4.0 (bobcat)
by no-reply＠openstack.org 21 Oct '24

21 Oct '24

We are ecstatic to announce the release of: openstack-ansible 28.4.0 This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 28.4.0 ^^^^^^ Known Issues ************ * Due to the underlying bug (https://bugs.launchpad.net/ansible- collections-openstack/+bug/2065680) in Ansible collections for OpenStack, "Default" domain name can be renamed to "default" under certain conditions. One known example is having "domain: default" defenition under "keystone_sp -> trusted_idp_list -> federated_identities" structure. Upgrade Notes ************* * Default for Neutron API has been switched from using uWSGI to old eventlet due to found compatability issues for the current OpenStack release. You can find more infromation in Neutron bug report (https://bugs.launchpad.net/neutron/+bug/2069581) You can preserve current behaviour by setting "neutron_use_uwsgi: True" * Please, make sure that in case of federation usage you define domain name instead of it's ID (ie. "Default" instead of "default") under "keystone_sp -> trusted_idp_list -> federated_identities" Bug Fixes ********* * In case of switching Neutron from uWSGI to old eventlet, *neutron- rpc-server* service will be disabled and stopped by the role. Changes in openstack-ansible 28.3.1..28.4.0 ------------------------------------------- 5b5e0428b Update Neutron SHA after bugfix b899ce553 Bump SHAs for 2023.2 b2f74fb21 Ensure that the inventory tox job runs on an ubuntu-jammy node 2f0cc3e5e Use node FQDN for nova-restore-compute-id 4454d1a15 Ensure "parallel" package is installed for CI log collection df02868cf Remove the get_md5 parameter from ansible stat tasks Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 28 +++++++++++----------- inventory/group_vars/all/source_git.yml | 4 ++-- inventory/group_vars/cinder_all/source_git.yml | 4 ++-- inventory/group_vars/glance_all/source_git.yml | 4 ++-- inventory/group_vars/gnocchi_all/source_git.yml | 4 ++-- inventory/group_vars/heat_all/source_git.yml | 4 ++-- inventory/group_vars/horizon_all/source_git.yml | 4 ++-- inventory/group_vars/ironic_all/source_git.yml | 4 ++-- inventory/group_vars/keystone_all/source_git.yml | 4 ++-- inventory/group_vars/manila_all/source_git.yml | 4 ++-- inventory/group_vars/neutron_all/source_git.yml | 6 ++--- inventory/group_vars/nova_all/source_git.yml | 6 ++--- inventory/group_vars/octavia_all/source_git.yml | 6 ++--- ...ble_neutron_uwsgi_default-1763a0cbc17f23c8.yaml | 13 ++++++++++ .../federated_domain_names-4e169b8b9a947940.yaml | 13 ++++++++++ scripts/scripts-library.sh | 6 +++-- .../upgrade-utilities/nova-restore-compute-id.yml | 3 ++- zuul.d/jobs.yaml | 1 + zuul.d/playbooks/post.yml | 1 - 19 files changed, 74 insertions(+), 45 deletions(-)

1 0

python-openstackclient 7.2.0 (epoxy)
by no-reply＠openstack.org 18 Oct '24

18 Oct '24

We high-spiritedly announce the release of: python-openstackclient 7.2.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 7.2.0 ^^^^^ New Features ************ * Add "--status" option to "port list" command. [Bug 1672680 (https://bugs.launchpad.net/python-openstackclient/+bug/1672680) * The "server add security group" and "server remove security group" commands now accept multiple security groups. Upgrade Notes ************* * Support for Python 3.8 has been dropped. * The following commands have been migrated to SDK: * "access rule list" * "access rule delete" * "access rule show" Changes in python-openstackclient 7.1.0..7.2.0 ---------------------------------------------- c8326b55 Always resolve domain id 52d56b3f identity: in `service set` command, don't pass the enable option when it is None 58d1b06f evacuate SDK actually uses admin_pass param 033793aa identity: Don't pass unset options when creating user 9c223696 Add status filtering options to port list 415f6801 identity: Migrate 'access rule' commands to SDK bbe04238 tests: Add functional test for access rules 89322829 evacuate: Fix password parameter name for SDK b0936c5b Handle NotFoundException when listing floating IPs f98006ca pre-commit: Migrate pyupgrade to ruff fc6852cd pre-commit: Migrate bandit to ruff 2bf123f3 Removed the emit_duplicated_warning() funtion. ffa683ab compute: Fix --host in server list for new openstacksdk b0c08ae2 Update master for stable/2024.2 519fa7aa pre-commit: Migrate from black to ruff format 17e6545f trivial: Remove unnecessary trailing comma 2ba90581 pre-commit: Migrate from flake8 to ruff 869b07ed pre-commit: Bump versions 7a92bc4a Drop support for Python 3.8 f68000d7 tests: Remove aliasing from extensions test 0d89f014 Remove TestServer base class ece30e8f compute: Allow adding, removing multiple SGs Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 26 +-- .zuul.yaml | 8 +- examples/common.py | 6 +- examples/object_api.py | 2 +- examples/osc-lib.py | 4 +- openstackclient/api/api.py | 3 +- openstackclient/api/image_v2.py | 2 +- openstackclient/api/object_store_v1.py | 32 +-- openstackclient/common/clientmanager.py | 2 +- openstackclient/common/module.py | 4 +- openstackclient/common/quota.py | 8 +- openstackclient/compute/v2/flavor.py | 2 +- openstackclient/compute/v2/server.py | 185 ++++++++++----- openstackclient/compute/v2/server_backup.py | 2 +- openstackclient/compute/v2/server_image.py | 2 +- openstackclient/compute/v2/server_migration.py | 13 +- openstackclient/compute/v2/usage.py | 6 +- openstackclient/identity/common.py | 5 +- openstackclient/identity/v2_0/project.py | 2 +- openstackclient/identity/v2_0/role_assignment.py | 2 +- openstackclient/identity/v2_0/user.py | 4 +- openstackclient/identity/v3/access_rule.py | 40 ++-- openstackclient/identity/v3/identity_provider.py | 2 +- openstackclient/identity/v3/project.py | 2 +- openstackclient/identity/v3/role_assignment.py | 27 ++- openstackclient/identity/v3/service.py | 3 +- openstackclient/identity/v3/user.py | 50 +++-- openstackclient/image/v2/image.py | 26 +-- openstackclient/image/v2/metadef_objects.py | 10 +- openstackclient/network/common.py | 15 +- openstackclient/network/v2/floating_ip.py | 8 +- .../network/v2/floating_ip_port_forwarding.py | 4 +- openstackclient/network/v2/l3_conntrack_helper.py | 2 +- openstackclient/network/v2/ndp_proxy.py | 1 + openstackclient/network/v2/network_agent.py | 8 +- openstackclient/network/v2/network_qos_rule.py | 7 +- openstackclient/network/v2/network_trunk.py | 9 +- openstackclient/network/v2/port.py | 21 +- openstackclient/network/v2/router.py | 11 +- openstackclient/network/v2/subnet_pool.py | 4 +- openstackclient/shell.py | 5 +- .../functional/identity/v2/test_ec2_credentials.py | 4 +- .../functional/identity/v3/test_access_rule.py | 86 +++++++ .../identity/v3/test_application_credential.py | 62 ++--- .../identity/v3/test_registered_limit.py | 63 +++--- .../functional/identity/v3/test_role_assignment.py | 113 +++------- .../identity/v3/test_service_provider.py | 6 +- .../network/v2/test_default_security_group_rule.py | 11 +- .../network/v2/test_l3_conntrack_helper.py | 58 +++-- .../functional/network/v2/test_network_agent.py | 35 ++- .../functional/network/v2/test_network_flavor.py | 4 +- .../network/v2/test_network_ndp_proxy.py | 56 ++--- .../functional/network/v2/test_network_qos_rule.py | 111 ++++----- .../network/v2/test_network_qos_rule_type.py | 2 +- .../network/v2/test_network_segment_range.py | 4 +- .../functional/network/v2/test_network_trunk.py | 40 ++-- .../functional/volume/v2/test_volume_backup.py | 2 +- .../v2/test_metadef_resource_type_association.py | 8 +- .../network/v2/test_default_security_group_rule.py | 6 +- .../network/v2/test_floating_ip_port_forwarding.py | 8 +- .../unit/network/v2/test_local_ip_association.py | 4 +- openstackclient/volume/client.py | 2 +- openstackclient/volume/v1/volume.py | 4 +- openstackclient/volume/v1/volume_backup.py | 4 +- openstackclient/volume/v1/volume_snapshot.py | 4 +- openstackclient/volume/v2/volume.py | 4 +- openstackclient/volume/v2/volume_backup.py | 4 +- openstackclient/volume/v2/volume_snapshot.py | 4 +- openstackclient/volume/v2/volume_type.py | 8 +- openstackclient/volume/v3/service.py | 1 - openstackclient/volume/v3/volume.py | 6 +- openstackclient/volume/v3/volume_backup.py | 4 +- openstackclient/volume/v3/volume_group.py | 10 +- openstackclient/volume/v3/volume_type.py | 12 +- pyproject.toml | 12 + ...d-port-list-status-option-f51da0aed0528a5d.yaml | 5 + ...-multiple-security-groups-2c0b2d599124c9c9.yaml | 5 + .../notes/drop-python-38-9dcbd2b2b51f24f2.yaml | 4 + ...igrate-access-rule-to-sdk-923682b4c71fea8a.yaml | 8 + releasenotes/source/2024.2.rst | 6 + releasenotes/source/index.rst | 1 + setup.cfg | 3 +- tox.ini | 8 +- 138 files changed, 1478 insertions(+), 1721 deletions(-)

1 0

oslo.messaging 14.9.1 (dalmatian)
by no-reply＠openstack.org 18 Oct '24

18 Oct '24

We are overjoyed to announce the release of: oslo.messaging 14.9.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 14.9.0..14.9.1 ---------------------------------------- d3892f6b [rabbit] Ignore stream offset header when stream queue is not used 09f808f5 Fix queue_manager in a containerized environment 8b3c74c1 Update TOX_CONSTRAINTS_FILE for stable/2024.2 4df21dc9 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_messaging/_drivers/amqpdriver.py | 33 ++++++++++++++++++++++----------- oslo_messaging/_drivers/impl_rabbit.py | 14 +++++++------- tox.ini | 6 +++--- 4 files changed, 33 insertions(+), 21 deletions(-)

1 0

openstacksdk 4.1.0 (epoxy)
by no-reply＠openstack.org 18 Oct '24

18 Oct '24

We are chuffed to announce the release of: openstacksdk 4.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 4.1.0 ^^^^^ New Features ************ * Add "trusted" attribute to "port" resourse. Users can use this attribute to set port to be trusted what will be then populated into the "binding:profile" dictionary. * Add getting the status of one or all services in Designate (DNS) system. * Add support for *options* property for roles in identity. * For Barbican secrets with detected or provided content type other than "text/plain" SDK now returns the secret payload as raw bytes. For secrets with content type "text/plain", the payload is returned as string, decoded to UTF-8. This behavior is following python- barbicanclient, and allows to use SDK with Barbican secrets that have binary payloads (e.g. "application/octet-stream"). * Adds support for runbooks; an API feature that enables project members to self-serve maintenance tasks via predefined step lists in lieu of an arbitrary list of clean/service steps. * The "migrate_server" compute proxy API and the "Server.migrate" API now accept a "host" parameter to migrate to a given host. Upgrade Notes ************* * Support for Python 3.7 and 3.8 has been dropped. Python 3.7 support was untested and known to be broken for multiple releases, while Python 3.8 is going EOL in October 2024. * The payload of Barbican secrets with other than "text/plain" content type is now returned as raw bytes. For secrets with content type "text/plain", the payload is returned as string, decoded to UTF-8. Changes in openstacksdk 4.0.0..4.1.0 ------------------------------------ c2470a21 tox: Fix functional tests b753d4b8 cloud: Don't raise error on missing domain 7069879b Deprecate unnecessary options, aliases 7994f88a Add "trusted" attribute to "port" resource 52672a57 cloud: Stop reimplementing ignore_missing=False bd6ab754 cloud: Consistently set 'ignore_missing' arguments 6ae5d3be pre-commit: Bump versions 91dbb4c9 Identity: Support `options` property for roles a1badd28 Add getting the status of the services in designate system 64692512 tests: Add functional tests for block storage quotas b119c1be Fix internal error when floating ip network is not found by name ad03b4f6 tests: Migrate quota tests to use a new project e7f14b09 tests: Add helpers to create, delete temp projects 6910a4e1 compute: Add support for targeting host during migrate 8c8b3967 Followup to I0e5ac1288c0d0423fa3a7a4e63173675b78aae79 26922907 Return payload as text only for text/plain secrets 6a434023 Add timeline for removal of deprecated features cf4cec6e Do not create a class in runtime on a potentially hot path c07e9952 cloud: Deprecate passing dicts 4916542a cloud: Re-add support for passing objects b7e8e869 Fix volume summary passing non-existent all_projects ed96765a Update master for stable/2024.2 2ea501c0 stack event loops: handle get None result 034a68b5 pre-commit: Bump mypy e614f8ea Remove unexpected Resource.update overrides c96d57f7 Fix override of ShareAccessRule.delete 187e88a5 pre-commit: Migrate from black to ruff format f83b657f trivial: Remove unnecessary trailing comma da0667e2 pre-commit: Migrate from flake8 to ruff 904e361c pre-commit: Bump versions 604d29bc Add support for the runbooks feature ec1bb9ee config: Minimal validation of config files 6b068e13 Remove redundant code 7db657a8 mypy: Run under minimum Python version 48f96397 Drop support for Python 3.8 ef052e48 Fix parameter name clashing in resource lock query 60a11dad Cast all header values to string a56c3c91 Allow to override _max_microversion for Volume._action function 1f21b864 Add docs for common keystoneauth settings Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 20 +- .../user/resources/dns/v2/service_status.rst | 13 ++ openstack/_hacking/checks.py | 2 +- openstack/accelerator/v2/accelerator_request.py | 6 +- openstack/accelerator/v2/deployable.py | 2 +- openstack/accelerator/v2/device_profile.py | 16 +- openstack/baremetal/v1/_common.py | 4 + openstack/baremetal/v1/node.py | 53 ++++- openstack/baremetal/v1/runbooks.py | 54 +++++ openstack/block_storage/v3/_proxy.py | 5 +- openstack/block_storage/v3/group.py | 2 +- openstack/block_storage/v3/service.py | 5 +- openstack/block_storage/v3/volume.py | 12 +- openstack/cloud/_accelerator.py | 1 - openstack/cloud/_baremetal.py | 57 ++--- openstack/cloud/_block_storage.py | 130 +++++------ openstack/cloud/_coe.py | 15 +- openstack/cloud/_compute.py | 193 ++++++++-------- openstack/cloud/_dns.py | 17 +- openstack/cloud/_identity.py | 112 +++------ openstack/cloud/_image.py | 15 +- openstack/cloud/_network.py | 257 +++++++-------------- openstack/cloud/_network_common.py | 32 ++- openstack/cloud/_object_store.py | 13 +- openstack/cloud/_orchestration.py | 5 +- openstack/cloud/_shared_file_system.py | 1 - openstack/cloud/_utils.py | 7 +- openstack/cloud/exc.py | 2 +- openstack/cloud/openstackcloud.py | 2 + openstack/clustering/v1/_async_resource.py | 2 +- openstack/common/quota_set.py | 34 ++- openstack/common/tag.py | 2 +- openstack/compute/v2/_proxy.py | 13 +- openstack/compute/v2/limits.py | 16 +- openstack/compute/v2/server.py | 18 +- openstack/compute/v2/server_ip.py | 2 +- openstack/compute/v2/service.py | 8 +- openstack/config/__init__.py | 2 +- openstack/config/cloud_region.py | 16 +- openstack/config/loader.py | 52 ++++- openstack/connection.py | 2 +- openstack/database/v1/user.py | 8 +- openstack/dns/v2/_proxy.py | 22 ++ openstack/dns/v2/service_status.py | 51 ++++ openstack/dns/v2/zone_export.py | 2 +- openstack/dns/v2/zone_import.py | 2 +- openstack/identity/v3/limit.py | 8 +- openstack/identity/v3/project.py | 2 +- openstack/identity/v3/registered_limit.py | 8 +- openstack/identity/v3/role.py | 3 + openstack/image/_download.py | 5 +- openstack/image/v1/_proxy.py | 2 +- openstack/image/v2/_proxy.py | 2 +- openstack/image/v2/cache.py | 4 +- openstack/image/v2/image.py | 9 +- openstack/key_manager/v1/secret.py | 13 +- openstack/load_balancer/v2/_proxy.py | 2 +- openstack/load_balancer/v2/amphora.py | 20 +- openstack/load_balancer/v2/health_monitor.py | 2 +- openstack/load_balancer/v2/l7_policy.py | 2 +- openstack/load_balancer/v2/l7_rule.py | 2 +- openstack/load_balancer/v2/listener.py | 2 +- openstack/load_balancer/v2/load_balancer.py | 10 +- openstack/load_balancer/v2/member.py | 2 +- openstack/load_balancer/v2/pool.py | 2 +- openstack/load_balancer/v2/quota.py | 8 +- openstack/message/v2/claim.py | 29 ++- openstack/message/v2/message.py | 5 +- openstack/message/v2/queue.py | 7 +- openstack/message/v2/subscription.py | 7 +- openstack/network/v2/_base.py | 3 +- openstack/network/v2/floating_ip.py | 2 +- openstack/network/v2/network.py | 2 +- openstack/network/v2/port.py | 5 +- openstack/network/v2/qos_policy.py | 2 +- openstack/network/v2/quota.py | 8 +- openstack/network/v2/router.py | 2 +- openstack/network/v2/security_group.py | 2 +- openstack/network/v2/security_group_rule.py | 2 +- openstack/network/v2/subnet.py | 2 +- openstack/network/v2/subnet_pool.py | 2 +- openstack/network/v2/trunk.py | 2 +- openstack/object_store/v1/_base.py | 15 +- openstack/object_store/v1/_proxy.py | 2 + openstack/object_store/v1/container.py | 2 +- openstack/object_store/v1/info.py | 5 +- openstack/object_store/v1/obj.py | 14 +- openstack/orchestration/util/event_utils.py | 13 +- openstack/orchestration/v1/_proxy.py | 10 +- openstack/orchestration/v1/software_config.py | 4 +- openstack/orchestration/v1/software_deployment.py | 8 +- openstack/orchestration/v1/stack.py | 26 ++- openstack/orchestration/v1/stack_files.py | 4 +- openstack/proxy.py | 17 +- openstack/shared_file_system/v2/_proxy.py | 26 ++- .../shared_file_system/v2/share_access_rule.py | 25 +- .../shared_file_system/v2/share_network_subnet.py | 10 +- .../functional/block_storage/v3/test_quota_set.py | 53 +++++ .../functional/cloud/test_floating_ip_pool.py | 1 - .../functional/image/v2/test_metadef_property.py | 2 +- .../load_balancer/v2/test_load_balancer.py | 2 +- .../functional/network/v2/test_floating_ip.py | 2 +- .../functional/network/v2/test_port_forwarding.py | 2 +- .../shared_file_system/test_quota_class_set.py | 40 ++-- .../unit/network/v2/test_security_group_rule.py | 1 - .../shared_file_system/v2/test_share_network.py | 1 - openstack/utils.py | 47 ++-- openstack/warnings.py | 13 +- openstack/workflow/v2/cron_trigger.py | 10 +- openstack/workflow/v2/execution.py | 8 +- openstack/workflow/v2/workflow.py | 23 +- pyproject.toml | 6 + ...d-trusted-vif-to-the-port-e306789f92e181b2.yaml | 6 + .../add-dns-service-status-bf1e1cfd811e59a0.yaml | 4 + ...ity-role-options-property-5d99d3fd909f01eb.yaml | 4 + .../notes/drop-python-37-38-2a6336af44050fec.yaml | 6 + .../secret-payload-as-bytes-d04370d85c9efc4c.yaml | 16 ++ ...self-service-via-runbooks-66ca5f6fda681228.yaml | 6 + ...support-migration-to-host-b2958b3b8c5ca1fb.yaml | 5 + releasenotes/source/2024.2.rst | 6 + releasenotes/source/index.rst | 1 + setup.cfg | 4 +- tox.ini | 21 +- 170 files changed, 1629 insertions(+), 1073 deletions(-)

1 0

manila 18.2.0 (caracal)
by no-reply＠openstack.org 17 Oct '24

17 Oct '24

We jubilantly announce the release of: manila 18.2.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 18.2.0 ^^^^^^ Bug Fixes * Fixed share export location update when subnet is added to a network containing shares. Please refer to the Launchpad bug #2017501 (https://bugs.launchpad.net/manila/+bug/2017501) for more details. * Launchpad bug 2023754 (https://bugs.launchpad.net/manila/+bug/2023754) has been fixed for "next links" broken for limited share replicas api. * The CephFS driver used to set the "preferred" export path incorrectly. It is now fixed to set it as part of export location metadata. See Launchpad bug 2053100 (https://launchpad.net/bugs/2053100) for more details. * Share manager drivers can now update export location metadata (such as the *preferred* attribute) during the *ensure_shares* routine. (Launchpad bug: 2053100 (https://launchpad.net/bugs/2053100)) * NetApp driver bug #2058027 (https://bugs.launchpad.net/manila/+bug/2058027) Fix the issue for NetApp driver for backup feature. Backup status update used to fail when administrator misconfigured backup settings configuration or SnapMirror relationship created during backup creation was not in healthy state. * NetApp driver bug #2058642 (https://bugs.launchpad.net/tempest/+bug/2058642) Fix the backup delete issue for NetApp driver when source and destination vserver are same. Added the logic in resource cleanup part to delete the vserver peering when source and destination vserver are not same. * NetApp driver bug #2059399 (https://bugs.launchpad.net/manila/+bug/2059399) Fix the backup restore issue for NetApp driver for REST client. Backup restore is failing across the ONTAP cluster for REST client. Added the logic to use to destination vserver client for REST client to restore the backup and modify the restore lib for cmode REST client accordingly. * PowerFlex Driver bug #2066840 (https://bugs.launchpad.net/manila/+bug/2066840) The default port value of 443 has been added for the PowerFlex NAS backend. * Share server deletion happens asynchronously and failure during this delete results in leakage of neutron ports. This is fixed in two steps, first by trying to delete ports before share server deletion. Second, after ports from Manila db entries are deleted, query is made to neutron to get ports which are allocated for share server and missing in db. And then try to delete those ports. For more details please check Launchpad bug 2067266 (https://bugs.launchpad.net/manila/+bug/2067266) * Share and snapshot in deferred deletion states will be hidden from non-admin user in show API along-with existing list API. For more details, please check Launchpad bug 2067456 (https://bugs.launchpad.net/manila/+bug/2067456) * When deferred deletion is enabled, Manila will attempt regular deletion. While quota is released, and these objects (shares, snapshots) are hidden from the user. Any error during deferred deletion will put resource in *error_deferred_deleting* state. After that, it will be handled in periodic task. Also, Manila will make sure snapshot instances are deleted before share instance delete. For more details, please check Launchpad bug 2068043 (https://bugs.launchpad.net/manila/+bug/2068043) * NetApp driver bug #2069125 (https://bugs.launchpad.net/manila/+bug/2069125) Fixed the issue for the NetApp ONTAP driver in the ZAPI workflow, where certain vserver accounts failed to add access rules for a share when the vserver network interface was not configured with kerberos. * NetApp ONTAP driver will now retry the sis operation (e.g. dedupe) if sis operation is currently active. This is needed because NetApp turns on efficiency (by default) on latest hardware which causes conflicting sis operation when Manila tries to turn it off. For more details, please check Launchpad bug #2071359 (https://bugs.launchpad.net/manila/+bug/2071359) * When using Neutron networks tagged as *external* (unmanaged provider networks) as share networks, Manila now creates ports with *admin_state_up=False* (disabled). This change addresses ARP failures that can occur when using OVN as the Neutron ML2 plugin. For more information, refer to bug 2074504 (https://bugs.launchpad.net/manila/+bug/2074504) * The periodic database queries made by the share manager service to process deferred deletion of shares has been fixed to consider the host in addition to the share's state. This both improves performance of the periodic task, as well as fixes incorrect behavior where incorrect shares are retrieved by the query. Changes in manila 18.1.0..18.2.0 -------------------------------- 4aeb4be69 Update share/snapshot instance deferred deletion 06da39f37 Fix "preferred" export locations in the CephFS driver 983189916 Fix share/snapshot show for deferred deletion 6095b13f2 Optimize deferred deletion share instance get query 8a2f3a9db Fix export location metadata updates by drivers 5b77e4756 Fix export locations update when subnet is added 55865c5a8 Create ports as disabled with external networks 98ecf758f Netapp: Retry Dedupe enable/disable if busy ad8e5a1d5 Bump pylint version and fix pylint issues f83bccc14 bug fix: error message fix 44df1ec42 Fixed bug 2069125: Manila driver error with ONTAP SVM-scoped user f0c33dec5 Dell PowerFlex: Set default value for port config 994ee01e4 Fix the backup restore issue for NetApp driver for REST client 78e89ee49 Fix backup delete issue when source and destination vserver are same c75642195 Fix backup creation errors with NetApp driver 19622387d Fix leak of ports on share server deletion ef55cafac Ensure password values are not logged b46096fcd Add job to test with SQLAlchemy 2.0 61dfe2ce9 Fix the link to get the next share replica Diffstat (except docs and test files) ------------------------------------- manila/api/common.py | 21 ++- manila/api/v2/share_types.py | 2 +- manila/api/views/share_replicas.py | 1 + manila/db/api.py | 7 +- manila/db/sqlalchemy/api.py | 34 +++- manila/exception.py | 4 + manila/network/__init__.py | 3 +- manila/network/neutron/neutron_network_plugin.py | 91 +++++++-- manila/network/standalone_network_plugin.py | 3 +- manila/policies/share_snapshot.py | 6 +- manila/policies/shares.py | 6 +- manila/scheduler/evaluator/evaluator.py | 2 +- manila/share/api.py | 61 ++++-- manila/share/driver.py | 7 +- manila/share/drivers/cephfs/driver.py | 13 +- manila/share/drivers/dell_emc/driver.py | 1 + .../dell_emc/plugins/powerflex/connection.py | 6 +- manila/share/drivers/hdfs/hdfs_native.py | 1 + manila/share/drivers/infortrend/driver.py | 2 - manila/share/drivers/macrosan/macrosan_nas.py | 1 - manila/share/drivers/maprfs/maprfs_native.py | 1 + .../share/drivers/netapp/dataontap/client/api.py | 1 + .../netapp/dataontap/client/client_cmode.py | 51 +++++- .../netapp/dataontap/client/client_cmode_rest.py | 26 +-- .../netapp/dataontap/cluster_mode/data_motion.py | 10 +- .../netapp/dataontap/cluster_mode/lib_base.py | 111 +++++++---- .../netapp/dataontap/cluster_mode/lib_multi_svm.py | 6 +- manila/share/drivers/netapp/options.py | 4 +- manila/share/drivers/tegile/tegile.py | 1 + manila/share/drivers/zfssa/zfssashare.py | 1 + manila/share/manager.py | 204 +++++++++++++-------- .../dell_emc/plugins/powerflex/test_connection.py | 2 +- .../share/drivers/netapp/dataontap/client/fakes.py | 11 +- .../netapp/dataontap/client/test_client_cmode.py | 42 +++++ .../dataontap/client/test_client_cmode_rest.py | 17 +- .../netapp/dataontap/cluster_mode/test_lib_base.py | 129 ++++++++++++- ...g-2017501-fix-share-export-location-update.yaml | 7 + ...754-fix-share-replica-url-367797a27a9c314d.yaml | 6 + ...ver-preferred-path-update-70147668e0f19c4d.yaml | 7 + ...th-preferred-attr-updates-32db001aacfc8563.yaml | 6 + ...-forever-for-wrong-config-a9e10419f33ecb97.yaml | 9 + ...-destination-same_vserver-7e165f9acfec123c.yaml | 8 + ...-restore-failing-for-rest-bc060fcf893ae0f6.yaml | 10 + ...ll-powerflex-default-port-fc50b82979e3b11b.yaml | 7 + ...-on-share-server-deletion-b6faf19725727988.yaml | 10 + ...how-for-deferred-deletion-37654e034eabccc6.yaml | 6 + ...-update-deferred-deletion-dc5ea4207e06bb64.yaml | 10 + ...scoped-user-when-add-rule-1ae120a96dd8f68a.yaml | 8 + ...peratin-if-already-active-4625605175f76d07.yaml | 8 + ...ports-on-neutron-ext-nets-af3ff56da9a928df.yaml | 9 + ...-get-share-instance-query-b6366b7c3b0a64db.yaml | 8 + tox.ini | 2 +- zuul.d/project.yaml | 18 ++ 58 files changed, 1115 insertions(+), 332 deletions(-)

1 0

manila 19.0.1 (dalmatian)
by no-reply＠openstack.org 17 Oct '24

17 Oct '24

We are overjoyed to announce the release of: manila 19.0.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 19.0.1 ^^^^^^ Bug Fixes * When deferred deletion is enabled, Manila will attempt regular deletion. While quota is released, and these objects (shares, snapshots) are hidden from the user. Any error during deferred deletion will put resource in *error_deferred_deleting* state. After that, it will be handled in periodic task. Also, Manila will make sure snapshot instances are deleted before share instance delete. For more details, please check Launchpad bug 2068043 (https://bugs.launchpad.net/manila/+bug/2068043) Changes in manila 19.0.0..19.0.1 -------------------------------- ca727d4f4 Python 3.13: do not use removed module "pipes" bf3a83b46 Add CephFS Manage/unmanage documentation fdfa6d672 [doc] Driver updatable metadata c78042bf9 Update share/snapshot instance deferred deletion Diffstat (except docs and test files) ------------------------------------- .../share_back_ends_feature_support_mapping.rst | 2 +- .../admin/shared-file-systems-crud-share.rst | 4 + .../shared-file-systems/drivers/cephfs_driver.rst | 24 +++ manila/db/api.py | 7 +- manila/db/sqlalchemy/api.py | 22 ++- manila/share/api.py | 18 +- .../drivers/dell_emc/common/enas/connector.py | 4 +- manila/share/drivers/ganesha/manager.py | 6 +- manila/share/drivers/ganesha/utils.py | 4 +- manila/share/drivers/hdfs/hdfs_native.py | 4 +- manila/share/drivers/maprfs/driver_util.py | 6 +- manila/share/manager.py | 192 ++++++++++++--------- ...-update-deferred-deletion-dc5ea4207e06bb64.yaml | 10 ++ 16 files changed, 230 insertions(+), 175 deletions(-)

1 0

neutron-lib 3.16.0 (epoxy)
by no-reply＠openstack.org 10 Oct '24

10 Oct '24

We enthusiastically announce the release of: neutron-lib 3.16.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 3.16.0 ^^^^^^ New Features ************ * Add the API extension "uplink-status-propagation-updatable" to make the port field "propagate_uplink_status" updatable. Now it is possible to send a port PUT request to update the value defined during the creation. This change will have an effect in the ML2/SR- IOV agent that will need to update the VF status accordingly. * Add API extension "quota-check-limit-default". This is a shim extension that indicates if Neutron quota engine checks the resource usage before updating any quota limit. That makes the extension "quota-check-limit" to be the default Neutron quota engine behaviour and aligns it with other projects. To enforce a quota limit without checking the resource usage, now it is needed to pass the CLI parameter "--force". * The "port-trusted-vif" extension adds "trusted" attribute to the port resource. This new attribute allows to set through the API "SR- IOV" port to be "trusted". This was previosly only possible through the "binding:profile" attribute of the port resource but that was invalid and now is not possible. Value of that new field will be populated in the port's "binding:profile". Deprecation Notes ***************** * The "neutron_lib.rpc:get_notifier" default value for "service" argument ("None") is deprecated. The argument will be required in a future release. Changes in neutron-lib 3.15.0..3.16.0 ------------------------------------- 9840db1 Do not define the executor of the RPC server 939839c Skip pylint recommendation "too-many-positional-arguments" eb7f589 Add new API extension ``uplink-status-propagation-updatable`` 8650442 Add port trusted vif extension 4e19f96 Fix 'flavor' misspelling in VPN flavors 3d4e0fa Add API extension ``quota-check-limit-default`` 1b77956 Update master for stable/2024.2 3d37cbf Deprecate get_notifier(service=None) Diffstat (except docs and test files) ------------------------------------- .pylintrc | 1 + api-ref/source/v2/parameters.yaml | 30 ++++++++++++- api-ref/source/v2/ports.inc | 15 +++++++ api-ref/source/v2/quotas.inc | 1 + .../port-add-allowed-address-pairs-response.json | 3 +- .../v2/samples/ports/port-bind-create-request.json | 3 +- .../samples/ports/port-bind-create-response.json | 3 +- .../v2/samples/ports/port-bind-show-response.json | 3 +- .../samples/ports/port-bind-update-response.json | 3 +- .../v2/samples/ports/port-create-request.json | 3 +- .../v2/samples/ports/port-create-response.json | 3 +- ...port-remove-allowed-address-pairs-response.json | 3 +- .../v2/samples/ports/port-update-request.json | 3 +- .../v2/samples/ports/port-update-response.json | 5 ++- .../v2/samples/ports/ports-bind-list-response.json | 6 ++- .../samples/ports/ports-bulk-create-response.json | 6 ++- .../v2/samples/quotas/quotas-update-request.json | 3 +- neutron_lib/api/definitions/__init__.py | 6 +++ neutron_lib/api/definitions/base.py | 3 ++ neutron_lib/api/definitions/port_trusted_vif.py | 50 ++++++++++++++++++++++ .../api/definitions/quota_check_limit_default.py | 29 +++++++++++++ .../uplink_status_propagation_updatable.py | 40 +++++++++++++++++ neutron_lib/api/definitions/vpn_flavors.py | 2 +- neutron_lib/rpc.py | 9 +++- .../unit/api/definitions/test_port_trusted_vif.py | 22 ++++++++++ .../definitions/test_uplink_status_propagation.py | 1 + .../test_uplink_status_propagation_updatable.py | 23 ++++++++++ ...tus-propagation-updatable-92b1c85ea402ac99.yaml | 8 ++++ ...mit-default-api-extension-fa93ab98db487390.yaml | 9 ++++ ...get-notifier-service-None-4761251d1beacfd9.yaml | 6 +++ .../notes/port-trusted-vif-1fefb9500d37e132.yaml | 9 ++++ releasenotes/source/2024.2.rst | 6 +++ releasenotes/source/index.rst | 1 + 34 files changed, 298 insertions(+), 22 deletions(-)

1 0

python-openstackclient 7.1.3 (dalmatian)
by no-reply＠openstack.org 08 Oct '24

08 Oct '24

We eagerly announce the release of: python-openstackclient 7.1.3 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. Changes in python-openstackclient 7.1.2..7.1.3 ---------------------------------------------- 773b8693 compute: Fix --host in server list for new openstacksdk 834bd93b Always resolve domain id 25bc3bbc identity: in `service set` command, don't pass the enable option when it is None 54b4f458 identity: Don't pass unset options when creating user Diffstat (except docs and test files) ------------------------------------- openstackclient/compute/v2/server.py | 2 +- openstackclient/identity/common.py | 3 + openstackclient/identity/v3/role_assignment.py | 27 ++++++- openstackclient/identity/v3/service.py | 3 +- openstackclient/identity/v3/user.py | 50 ++++++++---- 8 files changed, 70 insertions(+), 114 deletions(-)

1 0

magnum 16.0.3 (antelope)
by no-reply＠openstack.org 04 Oct '24

04 Oct '24

We are pumped to announce the release of: magnum 16.0.3 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum 16.0.2..16.0.3 -------------------------------- 77293ee6 Fix oslo policy file genrator tool for Magnum 6d05cd31 Update chart.metadata.version to reflect breaking change in helm v3.5.2 Diffstat (except docs and test files) ------------------------------------- magnum/common/policy.py | 8 ++++++++ .../common/templates/kubernetes/fragments/install-helm-modules.sh | 4 ++-- setup.cfg | 3 +++ 3 files changed, 13 insertions(+), 2 deletions(-)

1 0

puppet-manila 25.0.0 (dalmatian)
by no-reply＠openstack.org 04 Oct '24

04 Oct '24

We are satisfied to announce the release of: puppet-manila 25.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. Changes in puppet-manila 24.0.0..25.0.0 --------------------------------------- d755e3b Prepare 2024.2 release 502d928 Expose parameter to customize [oslo_messaging_notifications] retry f5deaab Add support for [oslo_messaging_rabbit] enable_cancel_on_failover c1e2114 Expose tunable options for RabbitMQ heartbeat c6f8c7f logging: Deprecate watch_log_file f2c7a86 Deprecate management of manila v2 user d16d8f9 Do not create manila_v2 keystone user by default 2dc0ec3 Add validations for keystone resource parameters afe457b Expose rabbit_qos_prefetch_count c551637 Fix inconsistent default notification driver e781e6f Add parameter to customize [DEFAULT] service_down_time a67f0cc Add support for the cephfs_nfs_cluster_id parameter aaf348d Add support for [healthcheck] enable_by_file_paths 111654b reno: Update master for unmaintained/zed 49380fa Remove support for amqp1 messaging driver b16813c client: Install openstackclient 1c8b563 Replace deprecated keystone::client c1ac7d2 Update master for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- manifests/api.pp | 2 +- manifests/backend/cephfs.pp | 7 + manifests/client.pp | 2 + manifests/healthcheck.pp | 7 + manifests/init.pp | 216 ++++++++------------- manifests/keystone/auth.pp | 106 +++++----- manifests/logging.pp | 13 +- metadata.json | 10 +- .../notes/bug-2079986-6ec7172fb10d836b.yaml | 7 + .../cephfs_nfs_cluster_id-cab5f8d5044e6b06.yaml | 4 + .../deprecate-share-v2-user-82b59ca6db8741d3.yaml | 12 ++ .../deprecate-watch_log_file-1e4d226501fc897e.yaml | 4 + .../notes/disable-user-v2-31ceee5fee7653fa.yaml | 9 + ...enable_cancel_on_failover-69ec2ef2834a1c0f.yaml | 5 + .../hc-enable_by_file_paths-3705d815bd91d96e.yaml | 5 + .../notes/notification-retry-aa74daf49f95fd93.yaml | 4 + .../rabbit-heartbeat-opts-8fb5943ea07e45a1.yaml | 7 + ...rabbit_qos_prefetch_count-68848b61eb02a854.yaml | 4 + .../notes/remove-amqp1-e78bcf1db5a31c8b.yaml | 4 + .../notes/service_down_time-219e922d258570fc.yaml | 4 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 2 +- spec/classes/manila_client_spec.rb | 2 + spec/classes/manila_healthcheck_spec.rb | 3 + spec/classes/manila_init_spec.rb | 42 ++-- spec/classes/manila_keystone_auth_spec.rb | 12 +- spec/classes/manila_logging_spec.rb | 1 - spec/defines/manila_backend_cephfs_spec.rb | 3 + 29 files changed, 278 insertions(+), 226 deletions(-)

1 0

puppet-keystone 25.0.0 (dalmatian)
by no-reply＠openstack.org 04 Oct '24

04 Oct '24

We are excited to announce the release of: puppet-keystone 25.0.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. Changes in puppet-keystone 24.0.0..25.0.0 ----------------------------------------- 549efed Prepare 2024.2 release 492daa7 Fix message format for openstackclient >= 7.0.0 ffd5d46 Handle new message format for openstackclient >= 7.0.0 362a7ad Expose parameter to customize [oslo_messaging_notifications] retry 16290d4 Add support for [oslo_messaging_rabbit] enable_cancel_on_failover 2de451e logging: Deprecate watch_log_file 263c88b Add parameter to customize service description 248a7ab Support tunable options for caching 24eec26 keystone_user: Remove redundant domain parameter input check c8ad202 Drop workaround for unit tests fde2fff Expose rabbit_qos_prefetch_count 441fc30 Add support for [DEFAULT] list_limit fdf2a2b Fix default OIDCRedirectURI hiding keystone federation auth endpoint c3c7c39 Add database_slave_connection to keystone::db class 18ed4c0 Add support for [healthcheck] enable_by_file_paths 81d2a80 feat: add param for additional OIDC locations 0278406 openidc: Use parameter data type to validate inputs e4acfc9 feat: add openidc_metadata_dir to federation::oidc 7558e5b Fix invalid string concatenation 68e0919 feat: add a param for arbitrary federation OIDCRedirectURI 3e2e130 Add manage_package parameter ce0b193 reno: Update master for unmaintained/zed a337525 Add manage_resources param to keystone::bootstrap d1b26af Remove deprecated amqp1 messaging driver support c5b4bcb Fix missing unit test coverage about [fernet_tokens] key_repository 2f611f4 Drop redundant default of revoke_by_id 3765d2a Fix outdated defaults described in parameter description 4063447 Update master for stable/2024.1 ac752a4 Support max_password_length config option Diffstat (except docs and test files) ------------------------------------- lib/puppet/provider/keystone.rb | 12 +- lib/puppet/provider/keystone_tenant/openstack.rb | 6 +- lib/puppet/provider/keystone_user/openstack.rb | 10 +- lib/puppet/type/keystone_domain.rb | 4 - lib/puppet/type/keystone_endpoint.rb | 3 - lib/puppet/type/keystone_identity_provider.rb | 4 - lib/puppet/type/keystone_implied_role.rb | 4 - lib/puppet/type/keystone_role.rb | 4 - lib/puppet/type/keystone_service.rb | 3 - lib/puppet/type/keystone_tenant.rb | 3 - lib/puppet/type/keystone_user.rb | 4 - lib/puppet/type/keystone_user_role.rb | 4 - manifests/bootstrap.pp | 15 ++- manifests/cache.pp | 48 ++++++-- manifests/db.pp | 6 + manifests/federation/openidc.pp | 122 ++++++++++++--------- manifests/healthcheck.pp | 7 ++ manifests/init.pp | 60 ++++++++-- manifests/logging.pp | 7 +- manifests/messaging/amqp.pp | 60 ---------- metadata.json | 6 +- ...ax_password_length-option-658378eee937e891.yaml | 5 + ...additional-locations-oidc-a4a2dc4d656e3f58.yaml | 5 + ...ootstrap-manage_resources-dbf6cd7fcdd192a5.yaml | 10 ++ .../notes/cache-tunables-28ddc4da18fb0ca3.yaml | 11 ++ .../deprecate-watch_log_file-7234190eda04ee81.yaml | 4 + ...enable_cancel_on_failover-3e53d709b111650b.yaml | 5 + ...eration-oidc-metadata-dir-f73a78ac9bbb31b5.yaml | 5 + .../hc-enable_by_file_paths-99e9b04853dbdb6a.yaml | 5 + .../keystone-db-slave-conn-4592ab5542773cb6.yaml | 4 + .../keystone-manage-package-6770a8a31ead11a4.yaml | 4 + .../notes/list-limit-1ec78d0c9f5ad449.yaml | 4 + .../notes/notification-retry-6343508320ebe279.yaml | 4 + .../openidc_redirect_uri-a6f9a2adf87ec5e3.yaml | 5 + ...rabbit_qos_prefetch_count-6b1bb721ac4f458e.yaml | 4 + .../notes/remove-amqp1-d68813864c39ddbb.yaml | 4 + .../service_description-e23a5f97e6862952.yaml | 5 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 2 +- spec/classes/keystone_bootstrap_spec.rb | 47 ++++++-- spec/classes/keystone_cache_spec.rb | 15 +++ spec/classes/keystone_db_spec.rb | 3 + spec/classes/keystone_federation_openidc_spec.rb | 60 +++++++++- spec/classes/keystone_healthcheck_spec.rb | 3 + spec/classes/keystone_init_spec.rb | 109 ++++++++++++------ spec/classes/keystone_messaging_amqp_spec.rb | 64 ----------- spec/unit/provider/keystone_spec.rb | 11 +- templates/openidc.conf.erb | 33 +++++- 49 files changed, 533 insertions(+), 297 deletions(-)

1 0