February 2024 - Release-announce - lists.openstack.org

manila 14.2.0 (yoga)
by no-reply＠openstack.org 12 Feb '24

12 Feb '24

We jubilantly announce the release of: manila 14.2.0: Shared Storage for OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 14.2.0 ^^^^^^ Bug Fixes * Changed the error and status code that was raised when share types are not handled in shares api * Make snapshot names in CephFS drivers shorter to avoid limitation in Ceph clusters which truncates the subvolume name and makes the snapshots inaccesible. * NetApp driver bug #1982808 (https://bugs.launchpad.net/manila/+bug/1982808) Fixed issue preventing the storage system from proper clean up unused SnapMirror snapshots after a replica promote, significantly increasing the amount of space consumed in ONTAP volumes by snapshots. * Metadata APIs have been fixed to respond with HTTP 404 / Not Found when the requester does not have access to a resource that the metadata pertains to. * Share replicas in state *error_deleting* are now skipped during periodic updates. For more details, please refer to launchpad bug #2024556 (https://bugs.launchpad.net/manila/+bug/2024556) * Share server backend details set function adds db records without checking existing entries. This results in duplicate records for the combination of given share server id and key. Fixed it by updating records if already exist else creating new. See the launchpad bug 2024658 (https://bugs.launchpad.net/manila/+bug/2024658) for more details. * The "manage" API for snapshots now validates the format of "provider_location" and "share_id" fields and handles errors appropriately. These fields are expected to contain string values. * The "updated_at" field is correctly set on share and snapshot access rules when an update has been made on the database. * The CephFS driver uses a *RemoveExport* DBUS API call to the NFS/Ganesha service when a user deletes an access rule, or when deleting the share. If this call fails, the driver now provides a log of the failure, and continues cleaning up. Prior to this change, share deletion could fail if the service failed the DBUS command to drop the export. This would leave the share with an "error_deleting" status, needing administrator intervention. See bug #2035572 (https://launchpad.net/bugs/2035572) for more information. * bug #2025649 (https://bugs.launchpad.net/manila/+bug/2025649) Fixed share server API error message. Changes in manila 14.1.1..14.2.0 -------------------------------- 84111ad7c Change status and error handling for /shares API 202fa0b4a Fix policy check in metadata APIs f878e15bc [rbac] Pull up policy checks on share/snapshot APIs 67187c28f Shorten snapshots names in CephFS drivers 739301f4d Don't fail remove-export in NFS-Ganesha deee9ae1e adds share server uuid on migration cancel 4833319ca Fix error message from share server API dd0492623 Fix duplicate entries in share_server_backend_details 1b9d500f2 Set "updated_at" field on access rules f533bdb94 Validate provider_location while managing snapshot 65bcc2710 NetApp ONTAP: Fix SnapMirror snapshots not being cleaned up 4c921214f Add default to read_deleted in context's from_dict 4597939d9 skip periodic update on replicas in 'error_deleting' b73958504 [coordination] backend_url should be secret Diffstat (except docs and test files) ------------------------------------- manila/api/v1/share_servers.py | 5 +- manila/api/v1/share_snapshots.py | 3 + manila/api/v1/shares.py | 8 ++ manila/api/v2/metadata.py | 20 +++- manila/api/v2/share_snapshots.py | 3 + manila/api/v2/shares.py | 5 + manila/context.py | 2 +- manila/coordination.py | 1 + manila/db/sqlalchemy/api.py | 49 ++++++++-- manila/exception.py | 4 + manila/share/api.py | 13 +-- manila/share/drivers/cephfs/driver.py | 19 +++- manila/share/drivers/ganesha/manager.py | 3 + .../netapp/dataontap/cluster_mode/data_motion.py | 30 ++++++ .../netapp/dataontap/cluster_mode/lib_base.py | 9 ++ manila/share/manager.py | 1 + manila/share/share_types.py | 4 +- .../dataontap/cluster_mode/test_data_motion.py | 54 +++++++++++ .../netapp/dataontap/cluster_mode/test_lib_base.py | 42 +++++++++ ...nge-status-for-shares-api-5dbc4986d032c8e1.yaml | 5 + ...ten-snapshot-names-cephfs-a220e2b9f7ba5739.yaml | 6 ++ ...-snapshots-not-cleaned-up-63cc98cd468adbd1.yaml | 9 ++ ...30-fix-cross-project-rbac-328134c64c96c200.yaml | 6 ++ ...p-error-deleting-replicas-aa2ef4154d5e38f6.yaml | 6 ++ ...re-server-backend-details-adf45b417d45b437.yaml | 8 ++ ...vider-location-validation-b6d1e977f50643bb.yaml | 6 ++ ...t-updated_at-access-rules-a382a3e352f3ef7d.yaml | 5 + ...remove-export-nfs-ganesha-fd0f8eb1db800d31.yaml | 11 +++ ..._share_server_api_2025649-f818f594e97c59e6.yaml | 6 ++ 37 files changed, 473 insertions(+), 121 deletions(-)

1 0

metalsmith 1.8.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are tickled pink to announce the release of: metalsmith 1.8.1: Deployment and Scheduling tool for Bare Metal This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. Changes in metalsmith 1.8.0..1.8.1 ---------------------------------- 47f5953 Stable-Only: CI: Force install an appropriate openstacsdk version 176f48e stable-only: Constrain the upper Ansible version cc388a4 test_provision: don't assert provision_node call order 392593d list_instances - cache allocations ea3a920 Get ports by 'binding:host_id' query filter b5f695f Use a network cache in Instance 0e839b0 Fixes for tox 4.0 f586ede Allow to use Ansible OpenStack Col. 1.x.x with openstacksdk >=0.99.0 008425a Update TOX_CONSTRAINTS_FILE for stable/zed 8e7fba3 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + metalsmith/_instance.py | 21 +++++++------ metalsmith/_provisioner.py | 25 ++++++++++++---- metalsmith/test/test_instance.py | 8 ++--- metalsmith/test/test_metalsmith_instances.py | 2 +- metalsmith/test/test_provisioner.py | 7 +++-- .../modules/metalsmith_instances.py | 9 ++++++ .../roles/metalsmith_deployment/defaults/main.yml | 2 +- playbooks/integration/initial-setup.yaml | 12 ++++++++ test-requirements.txt | 2 +- tox.ini | 34 +++++++++++++++++----- 11 files changed, 88 insertions(+), 35 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 933cf4f..22d3b31 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ stestr>=1.0.0 # Apache-2.0 -ansible>=2.8 +ansible>=2.8,<=2.9

1 0

ironic 21.1.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are thrilled to announce the release of: ironic 21.1.1: OpenStack Bare Metal Provisioning This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 21.1.1 ^^^^^^ Upgrade Notes ************* * When Ironic operator uses irmc driver against Fujitsu server which runs iRMC version S6 2.00 or later, operator may need to set Redfish parameters in "driver_info" so this fix can operate properly or operator should enable IPMI over LAN through BMC settings, if possible. Bug Fixes ********* * Fixes Ironic integration with Cinder because of changes which resulted as part of the recent Security related fix in bug 2004555 (https://launchpad.net/bugs/2004555) The work in Ironic to track this fix was logged in bug 2019892 (https://bugs.launchpad.net/ironic/+bug/2019892) Ironic now sends a service token to Cinder, which allows for access restrictions added as part of the original CVE-2023-2088 fix to be appropriately bypassed. Ironic was not vulnerable, but the restrictions added as a result did impact Ironic's usage. This is because Ironic volume attachments are not on a shared "compute node", but instead mapped to the physical machines and Ironic handles the attachment life- cycle after initial attachment. * When aborting cleaning, the "last_error" field is no longer initially empty. It is now populated on the state transition to "clean failed". * When cleaning or deployment fails, the "last_error" field is no longer temporary set to "None" while the power off action is running. * Fixes "Invalid cross-device link" in some cases when using "file://" image URLs. * Fixes an issue where if selinux is enabled and enforcing, and the published image is a hardlink, the source selinux context is preserved, causing access denied when retrieving the image using hardlink URL. * Fixes bug of iRMC driver in parse_driver_info where, if FIPS is enabled, SNMP version is always required to be version 3 even though iRMC driver's xxx_interface doesn't use SNMP actually. * Fixes a firmware incompatibility issue with iRMC versions S6 2.00 and later now doesn't support IPMI over LAN by default. To deal with this problem, irmc driver first tries IPMI operation then, if IPMI operation fails, it tries Redfish API of Fujitsu server. The operator must set Redfish parameters in the "driver_info" if iRMC disable or doesn't support IPMI over LAN. * Fixes "'NoneType' object is not iterable" in conductor logs for "redfish" and "idrac-redfish" RAID clean and deploy steps. The message should no longer appear. For affected nodes re-create the node or delete "raid_configs" entry from "driver_internal_info" field. * Fixes an issue in the online upgrade logic where database models for Node Traits and BIOS Settings resulted in an error when performing the online data migration. This was because these tables were originally created as extensions of the Nodes database table, and the schema of the database was slightly different enough to result in an error if there was data to migrate in these tables upon upgrade, which would have occured if an early BIOS Setting adopter had data in the database prior to upgrading to the Yoga release of Ironic. The online upgrade parameter now subsitutes an alternate primary key name name when applicable. * Fixes an issue where an agent token could be inadvertently orphaned if a node is already in the target power state when we attempt to turn the node off. * Fixes scope classification check with the "self_owned_node" policy check where it was limited to check execution with only project scoped, so system scoped users who ticked the policy endpoint would basically get an incorrect error. * Fixes the bug where provisioning a Redfish managed node fails if the BMC doesn't support EthernetInterfaces attribute, even if MAC address information is provided manually. This is done by handling of MissingAttributeError sushy exception in get_mac_addresses() method. This fix is needed to successfully provision machines such as Cisco UCSB and UCSX. * Modify iRMC driver to use ironic.conf [deploy] default_boot_mode to determine default boot_mode. * No longer re-calculates checksums for images that are already raw. Previously, it would cause significant delays in deploying raw images. * The per-node "external_http_url" setting in the driver info is now used for a boot ISO. Previously this setting was only used for a config floppy. * Fixes an issue where an agent token was being orphaned if a baremetal node timed out during cleaning operations, leading to issues where the node would not be able to establish a new token with Ironic upon future in some cases. We now always wipe the token in this case. Changes in ironic 21.1.0..21.1.1 -------------------------------- e38735cb9 Use per-node external_http_url for boot ISO ba97ec80e redfish_address - wrap_ipv6 address 1bd7ab875 [iRMC] Fix parse_driver_info bug enforcing SNMP v3 under FIPS mode 4fdf65ca5 Fix self_owned_node policy check 5e2d72cbf [ci] [stable-only] Cinder fixed; make BFV job vote 907f71742 [stable-only] [CI] BFV, RBAC jobs marked non-voting 07497e1b0 Fix Cinder Integration fallout from CVE-2023-2088 c45cf2017 Handle MissingAttributeError when using OOB inspections to fetch MACs ec6c37579 Always fall back from hard linking to copying files d6b970995 Add error logging on lookup failures in the API 2b0a5575c Fix online upgrades for Bios/Traits 4481031d7 Wipe Agent Token when cleaning timeout occcurs 3d32729fb Clean out agent token even if power is already off 3e3d4e1cb Do not recalculate checksum if disk_format is not changed a4a3b31d4 Do not move nodes to CLEAN FAILED with empty last_error e928980e7 [iRMC] Handle IPMI incompatibility in iRMC S6 2.x b91d174eb Move and fix reno config for releasenotes job 728301fc2 Fix selinux context of published image hardlink be92735d7 Fix "'NoneType' object is not iterable" in RAID 1ba3d29a0 Fixes for tox 4.0 49dade88c Fix unit tests for Python 3.11 f882fa0fa Align iRMC driver with Ironic's default boot_mode ff06b3d2a Fix the invalid glance client test 17fb4f706 Update TOX_CONSTRAINTS_FILE for stable/zed e45428d35 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/lib/ironic | 2 +- ironic/api/controllers/v1/ramdisk.py | 6 +- ironic/common/cinder.py | 71 +++++- ironic/common/glance_service/image_service.py | 3 +- ironic/common/image_service.py | 35 ++- ironic/common/keystone.py | 24 +- ironic/common/policy.py | 4 +- ironic/common/states.py | 3 + ironic/common/utils.py | 23 +- ironic/conductor/cleaning.py | 26 +- ironic/conductor/manager.py | 3 +- ironic/conductor/task_manager.py | 11 +- ironic/conductor/utils.py | 19 +- ironic/conf/glance.py | 1 + ironic/db/sqlalchemy/api.py | 33 ++- ironic/drivers/modules/deploy_utils.py | 37 ++- ironic/drivers/modules/image_utils.py | 13 +- ironic/drivers/modules/irmc/common.py | 14 ++ ironic/drivers/modules/irmc/inspect.py | 89 +++++-- ironic/drivers/modules/irmc/management.py | 251 ++++++++++++++++--- ironic/drivers/modules/irmc/power.py | 57 ++++- ironic/drivers/modules/redfish/management.py | 11 +- ironic/drivers/modules/redfish/raid.py | 8 +- ironic/drivers/modules/redfish/utils.py | 3 +- .../unit/drivers/modules/irmc/test_inspect.py | 132 ++++++++-- .../unit/drivers/modules/irmc/test_management.py | 267 +++++++++++++++++++-- .../drivers/modules/redfish/test_management.py | 10 + .../unit/drivers/modules/redfish/test_raid.py | 4 + .../unit/drivers/modules/redfish/test_utils.py | 8 + .../unit/drivers/modules/test_deploy_utils.py | 73 +++++- releasenotes/config.yaml | 5 + .../notes/cinder-2019892-6b5a9de5c5f05aa6.yaml | 16 ++ .../notes/cleaning-error-5c13c33c58404b97.yaml | 8 + .../notes/cross-link-1ffd1a4958f14fd7.yaml | 5 + ...ix-context-image-hardlink-16f452974abc7327.yaml | 7 + ...nforcing-snmpv3-with-fips-e45971d363925ec3.yaml | 6 + ...2.00-ipmi-incompatibility-118484a424df02b1.yaml | 15 ++ ...pe-object-is-not-iterable-0592926d890d6c11.yaml | 7 + ...-online-version-migration-db432a7b239647fa.yaml | 14 ++ .../fix-power-off-token-wipe-e7d605997f00d39d.yaml | 6 + ...ix-self-owned-node-policy-fc2dae357879dc33.yaml | 7 + ...g-ethernetinterfaces-attr-7e52f7259fe66762.yaml | 9 + ...-ironic-default-boot-mode-dde6f65ea084c9e6.yaml | 12 + .../notes/no-recalculate-653e524fd6160e72.yaml | 5 + ...ode-iso-external_http_url-c5e3fa9ae4960dd6.yaml | 5 + ...ken-upon-cleaning-timeout-c9add514fad1b02c.yaml | 7 + reno.yaml | 4 - tox.ini | 19 +- zuul.d/project.yaml | 11 +- 65 files changed, 1658 insertions(+), 369 deletions(-)

1 0

ironic-inspector 11.1.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are jazzed to announce the release of: ironic-inspector 11.1.1: Hardware introspection for OpenStack Bare Metal This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 11.1.1 ^^^^^^ Bug Fixes * Fixes an issue where inspection would fail if an IPv6 address wrapped in brackets is used for the redfish BMC address. See bug: 2036455 (https://bugs.launchpad.net/ironic/+bug/2036455) Changes in ironic-inspector 11.1.0..11.1.1 ------------------------------------------ 9ea9f61 Handle bracketed IPv6 redfish_address 76e277b [zed-only] Fix functional tests e1932cd Make reno ignore bugfix eol tags 6c3cbd1 [stable-only] Fixes for tox 4.0 compatability c2e4d64 Update TOX_CONSTRAINTS_FILE for stable/zed a2caaab Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_inspector/common/ironic.py | 4 ++++ ironic_inspector/test/functional.py | 5 +++++ ironic_inspector/test/unit/test_common_ironic.py | 8 ++++++++ releasenotes/config.yaml | 2 ++ releasenotes/notes/bug-2036455-bd3f6381b78c20db.yaml | 7 +++++++ tox.ini | 18 ++++++++++++------ 7 files changed, 39 insertions(+), 6 deletions(-)

1 0

octavia 10.1.1 (yoga)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are chuffed to announce the release of: octavia 10.1.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 10.1.1 ^^^^^^ Upgrade Notes ************* * A patch that fixes an issue making the VIP port unreachable because of missing IP rules requires an update of the Amphora image. Bug Fixes ********* * Fixed the ability to use the 'text/plain' mime type with the healthcheck endpoint. * Fixed an issue when deleting the last listener from a load balancer may trigger a failover. * Fixed an issue when using certificates with a blank subject or missing CN. * Fix amphora haproxy_count to return the number of haproxy processes that are running. * Fixed a bug in amphorav1, the subnet of a member that was being deleted was not immediately unplugged from the amphora, but only during the next update of the members. * Fixed an issue when adding or deleting a member, Octavia might have reconfigured the management port of the amphora by adding or removing additional subnets. Octavia no longer updates the management port during those tasks. * Fixed a bug with HTTP/HTTPS health-monitors on pools with ALPN protocols in the amphora-driver. The healthchecks sent by haproxy were flagged as bad requests by the backend servers. Updated haproxy configuration to use ALPN for the heathchecks too. * Fixed a bug that could have made the VIP port unreachable because of the removal of some IP rules in the Amphora. It could have been triggered only when sending a request from a subnet that is not the VIP subnet but that is plugged as a member subnet. * Fixed an issue with load balancers stuck in a "PENDING_*" state during database outages. Now when a task fails in Octavia, it retries to update the "provisioning_status" of the load balancer until the database is back (or it gives up after a really long timeout - around 2h45) * Fixed a bug in octavia-status which reported an incorrect status for the *amphorav2* driver when using the default *amphora* alias. * Modified default Keepalived LVS persistence granularity configuration value so it would be ipv6 compatible. * Fixed a race condition in the members batch update API call, the data passed to the Octavia worker service may have been incorrect when quickly sending successive API calls. Then the load balancer was stuck in PENDING_UPDATE provisioning_status. * Fixed a too long timeout when attempting to start the VRRP service in an unreachable amphora during a failover. A specific shorter timeout should be used during the failovers. * Fixed TLS-HELLO health-monitors in the amphora-driver. * Usage of "castellan_cert_manager" as cert_manager has been significantly improved. Now you can define configuration options for castellan in octavia.conf and they will be passed properly to castellan beckend. This allows to use allowed castellan backends as for certificate storage. * Reduce the duration of the failovers of ACTIVE_STANDBY load balancers. Many updates of an unreachable amphora may have been attempted during a failover, now if an amphora is not reachable at the first update, the other updates are skipped. * Reduce the duration of the failovers of ACTIVE_STANDBY load balancers when both amphorae are unreachable. * Fixed SQLAlchemy warnings about the relationship between the Tags object and the other Octavia resources. Other Notes *********** * Noop certificate manager was added. Now any Octavia certificate operations using noop drivers will be faster (as they won't be validated). Changes in octavia 10.1.0..10.1.1 --------------------------------- 1ceac5af Don't update the management port when calculating delta [v1] 53a38d62 Don't update the management port when calculating delta 0398dd6e Fix issue with certificates with no subject or CN fd5185f8 Stable-only: Cap hacking to < 6.1.0 714ef1c8 Fix TLS-HELLO healthmonitors in the amphora-driver 937bb928 Fix health-monitors with ALPN members 5b388dbf Add Noop Certificate Manager 5715f837 Fix text/plain mime type with healthcheck endpoint c8bd99e3 Fix amphorav1 member deletion bug e7359036 Fix create_server_group in compute noop 488adb29 Fix amphorae in ERROR during the failover 68cb6e38 Reduce duration of failovers with amphora in ERROR 9e5a6340 Fix timeout duration in start_vrrp_service during failovers 5a411a68 Retry to set loadbalancer prov status on failures 231398ca Fix race condition in members batch update API call 676499f2 Fix incorrect removal of IP rules in the amphora 5bf40c89 Drop lower-constraints.txt and its testing 61bb22bb Fix persistence_granularity default value 1f224a9f Fix octavia-status with amphorav2 fc9a8f10 Fix upgrade check not working 16578229 Fix typo in lvs-masquerade.sh d410c510 Fix job book deletion issue in taskflow 09fb2529 fix haproxy_count to display the number of running processes 4e15e812 Fix failover when the last listener is deleted 64b8846e Fix SQLAlchemy warning about conflict relationship with Tags 11119484 Rename Context to RequestContext 8fbe035c Pass config to castellan Diffstat (except docs and test files) ------------------------------------- .../static/usr/local/bin/lvs-masquerade.sh | 8 +- lower-constraints.txt | 178 --------------- .../backends/agent/api_server/amphora_info.py | 3 +- .../amphorae/backends/agent/api_server/osutils.py | 1 + .../backends/health_daemon/health_daemon.py | 12 +- octavia/amphorae/backends/utils/interface.py | 16 +- octavia/amphorae/backends/utils/interface_file.py | 9 +- octavia/amphorae/drivers/driver_base.py | 16 ++ .../amphorae/drivers/haproxy/rest_api_driver.py | 23 +- .../drivers/keepalived/vrrp_rest_driver.py | 3 +- octavia/amphorae/drivers/noop_driver/driver.py | 3 + octavia/api/common/hooks.py | 3 +- octavia/api/root_controller.py | 2 +- octavia/api/v2/controllers/member.py | 6 +- octavia/certificates/manager/castellan_mgr.py | 5 +- octavia/certificates/manager/noop.py | 106 +++++++++ octavia/cmd/status.py | 5 +- octavia/common/base_taskflow.py | 13 +- octavia/common/config.py | 11 + octavia/common/constants.py | 7 + octavia/common/context.py | 2 +- octavia/common/exceptions.py | 6 + .../haproxy/combined_listeners/templates/macros.j2 | 12 +- octavia/common/jinja/lvs/templates/macros.j2 | 4 +- octavia/common/tls_utils/cert_parser.py | 26 ++- octavia/compute/drivers/noop_driver/driver.py | 6 + octavia/controller/worker/task_utils.py | 34 ++- .../controller/worker/v1/flows/amphora_flows.py | 51 ++++- .../worker/v1/flows/load_balancer_flows.py | 20 +- .../worker/v1/tasks/amphora_driver_tasks.py | 129 +++++++++-- .../controller/worker/v1/tasks/lifecycle_tasks.py | 109 ++++++--- .../controller/worker/v1/tasks/network_tasks.py | 27 ++- .../controller/worker/v2/flows/amphora_flows.py | 51 ++++- .../worker/v2/flows/load_balancer_flows.py | 20 +- .../worker/v2/tasks/amphora_driver_tasks.py | 125 ++++++++-- .../controller/worker/v2/tasks/lifecycle_tasks.py | 136 +++++++---- .../controller/worker/v2/tasks/network_tasks.py | 23 +- octavia/db/models.py | 21 +- .../api/v2/test_availability_zone_profiles.py | 15 +- .../functional/api/v2/test_availability_zones.py | 15 +- .../functional/api/v2/test_flavor_profiles.py | 15 +- .../backends/agent/api_server/test_amphora_info.py | 7 +- .../backends/agent/api_server/test_osutils.py | 2 +- .../backends/health_daemon/test_health_daemon.py | 8 + .../unit/amphorae/backends/utils/test_interface.py | 81 +++++++ .../amphorae/backends/utils/test_interface_file.py | 2 + .../drivers/haproxy/test_rest_api_driver.py | 6 +- .../drivers/keepalived/test_vrrp_rest_driver.py | 17 ++ .../haproxy/combined_listeners/test_jinja_cfg.py | 33 ++- .../sample_configs/sample_configs_combined.py | 8 +- .../unit/controller/worker/test_task_utils.py | 58 ++++- .../worker/v1/flows/test_amphora_flows.py | 33 ++- .../worker/v1/flows/test_load_balancer_flows.py | 26 ++- .../worker/v1/tasks/test_amphora_driver_tasks.py | 240 +++++++++++++++++++- .../worker/v1/tasks/test_network_tasks.py | 30 +-- .../worker/v2/flows/test_amphora_flows.py | 33 ++- .../worker/v2/flows/test_load_balancer_flows.py | 15 +- .../worker/v2/tasks/test_amphora_driver_tasks.py | 251 +++++++++++++++++++-- .../worker/v2/tasks/test_network_tasks.py | 11 - ...heck-text-plain-mime-type-134485abb8bcea0c.yaml | 5 + ...r-delete-causing-failover-251efdb79af24c0a.yaml | 5 + ...andle-blank-cert-subjects-b660d403ce56b0b8.yaml | 4 + .../add-noop-cert-manager-7018d3933a0ce9c6.yaml | 4 + ...fix-amphora-haproxy-count-b1b1df43a7150926.yaml | 5 + ...x-amphorav1-subnet-member-9921d1ba387ff975.yaml | 6 + ...ad-management-port-update-3fa157f74ee8c7b2.yaml | 7 + ...thmonitor-with-alpn-pools-82249b2b9a025068.yaml | 7 + .../fix-ip-rules-in-amphora-b74b7b616752c13b.yaml | 11 + ...-in-PENDING-on-DB-failure-1ffea71a86cd4ea9.yaml | 7 + ...-octavia-status-amphorav2-038fe77a2189b99f.yaml | 5 + ...granularity-default-value-540093bbf6518ed8.yaml | 5 + ...ition-member-batch-update-1aed0e06004c5dad.yaml | 7 + ...eout-dict-when-start-vrrp-278d4837702bd247.yaml | 6 + ...-tls-hello-healthmonitors-a4b98a80f6de8394.yaml | 4 + .../octavia_castellan_config-995e65f129e3e983.yaml | 7 + .../reduce-duration-failover-636032433984d911.yaml | 7 + ...-standby-amphora-in-error-3c1d75bc7d9b169f.yaml | 5 + ...ags-relationship-warnings-a3c0175135f6cd84.yaml | 5 + requirements.txt | 4 + setup.cfg | 1 + test-requirements.txt | 2 +- tox.ini | 10 - zuul.d/projects.yaml | 1 - 102 files changed, 2305 insertions(+), 669 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e16be6f8..1e525595 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. + diff --git a/test-requirements.txt b/test-requirements.txt index 555d738c..93f0cd23 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=3.0 # Apache-2.0 +hacking<6.1.0 # Apache-2.0

1 0

zun 10.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are delighted to announce the release of: zun 10.0.1: OpenStack Containers service This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/zun Download the package from: https://tarballs.openstack.org/zun/ Please report issues through: https://bugs.launchpad.net/zun/+bugs For more details, please see below. Changes in zun 10.0.0..10.0.1 ----------------------------- 13379fd9 Specify a specific version of docker d5f102d7 Fix circular import 5c2f205e Fix tox4 error 54c66fc3 Disable git owner check for zun c3ddf2ec Handle io_service_bytes_recursive is None 1656d8ff Install zun from stable branch Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - devstack/settings | 2 ++ tox.ini | 20 ++++++++++++++------ zun/cni/api.py | 3 ++- zun/common/context.py | 4 ++-- zun/container/docker/driver.py | 2 +- 8 files changed, 25 insertions(+), 13 deletions(-)

1 0

networking-generic-switch 7.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We enthusiastically announce the release of: networking-generic-switch 7.0.1: Generic Switch ML2 Neutron Driver This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/networking-generic-switch Download the package from: https://pypi.org/project/networking-generic-switch Please report issues through: https://storyboard.openstack.org/#!/project/openstack/networking- generic-switch For more details, please see below. 7.0.1 ^^^^^ Bug Fixes * Fixes a regression when binding 802.3ad port groups on netmiko devices other than cumulus. Changes in networking-generic-switch 7.0.0..7.0.1 ------------------------------------------------- 5ea181e Fix regression plugging 802.3ad port group 0f1c5dd Fixes for tox 4.0 cef630a Update TOX_CONSTRAINTS_FILE for stable/zed 248fafa Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../devices/netmiko_devices/__init__.py | 8 ++++++++ ...regression-binding-port-groups-af6978a199a381b1.yaml | 5 +++++ tox.ini | 17 ++++++++++++----- 5 files changed, 40 insertions(+), 5 deletions(-)

1 0

sushy 4.3.4 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are tickled pink to announce the release of: sushy 4.3.4: Sushy is a small Python library to communicate with Redfish based systems This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 4.3.4 ^^^^^ Bug Fixes * Fixes bug where sushy would not pass a read/connect timeout through to requests when making requests to a redfish service. This means that an ill-timed failure could cause python processes calling sushy to freeze indefinately. * Add retries on iDRAC error with code SYS518 and message "iDRAC is currently unable to display any information because data sources are unavailable." for all request types in addition to existing GET methods. This helps to fix a known intermittent issue when deleting set of volumes one after another and iDRAC is reloading after deleting each volume. * Fixes 'Unsupported parameter name @Redfish.OperationApplyTime' error on iDRAC firmware version 6.00.02.00 or newer when deleting volumes. * Correctly handles error code "Base.1.5.PropertyMissing" when dealing with hardware that requires "TransferProtocolType" for virtual media operations. * Correctly handles errors on a request that is re-tried after refreshing an authentication token. * An issue was encountered on some HPE iLO supported machines where the Baseboard Management Controller would respond with a HTTP 400 error and an error message indicating the requested operation was invalid for the then system state. For example, attempting to change the power state via the BMC shortly after previously changing the power state. We now attempt to retry within the permitted number of retries when this error is encountered. * Workaround for https://github.com/psf/requests/issues/3829 If the env "REQUESTS_CA_BUNDLE" is set the "requests.Session()" ignores the verify parameter. Therefore the verify parameter is moved directly into the function call of requests. Changes in sushy 4.3.3..4.3.4 ----------------------------- bb00d94 Handle exceptions after re-authentication 47e4e55 Remove version field from iLO error 8ff0d10 Requests must always have a read/connect timeout b7d2456 Retry on ilo state error 4ee0a97 workaround: requests verify handling if env is set e4108b3 Exclude all files starting with . from flake8 tests 3e16da9 Fix volume deletion on newer iDRACs e39c25f Retry on iDRAC SYS518 errors for all requests 5e2807a Handle proper code_status in unit test 69b014c Handle a different error code for missing TransferProtocolType Diffstat (except docs and test files) ------------------------------------- ...-read-and-connect-timeout-9f7dc3ed63c192c8.yaml | 5 + ...olume_operation-on_sys518-009f2b16e5c38a27.yaml | 8 ++ ...operational_time_property-f53f650d8612a847.yaml | 4 + .../notes/property-missing-7602c421ec177e9a.yaml | 6 + releasenotes/notes/re-raise-1fe9f912691e893e.yaml | 5 + ...retry-ilo-not-ready-error-0b4dce882282eaac.yaml | 10 ++ ...-requests-verify-handling-6879c273b651246f.yaml | 9 ++ sushy/connector.py | 80 ++++++++--- sushy/exceptions.py | 18 ++- sushy/resources/manager/virtual_media.py | 17 ++- sushy/resources/system/storage/volume.py | 18 ++- .../unit/resources/manager/test_virtual_media.py | 27 ++-- .../unit/resources/system/storage/test_volume.py | 79 +++++++++++ tox.ini | 2 +- 15 files changed, 378 insertions(+), 58 deletions(-)

1 0

ironic-python-agent 9.1.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We exuberantly announce the release of: ironic-python-agent 9.1.1: Ironic Python Agent Ramdisk This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 9.1.1 ^^^^^ Bug Fixes * Fixes a failure case where a deployed instance may be unable to access the configuration drive post-deployment. This can occur when block devices only support 4KB IO interactions. When 4KB block IO sizes are in use, the ISO9660 filesystem driver in Linux cannot be used as it is modeled around a 2KB block. We now attempt to verify, and rebuild the configuration drive on a FAT filesystem when we cannot mount the supplied configuration drive. Operators can force the agent to write configuration drives using the FAT filesystem using the "[DEFAULT]config_drive_rebuild" option. * Fixes UEFI NVRAM record handling with efibootmgr so we can accept and handle UTF-16 encoded data which is to be expected in UEFI NVRAM as the records are UTF-16 encoded. * Fixes handling of UEFI NVRAM records to allow for unexpected characters in the response, so it is non-fatal to Ironic. * Fixes an issue with rebuilding instances on Software RAID with RAIDed ESP partitions. * Fixes, or at least lessens the case where a running Ironic agent can stack up numerous lookup requests against an Ironic deployment when a node is locked. In particular, this is beause the lookup also drives generation of the agent token, which requires the conductor to allocate a worker, and generate the token, and return the result to the API client. Ironic's retry logic will now wait up to "60" seconds, and if an HTTP Conflict (409) message is received, the agent will automatically pause lookup operations for thirty seconds as opposed continue to attempt lookups which could create more work for the Ironic deployment needlessly. Changes in ironic-python-agent 9.1.0..9.1.1 ------------------------------------------- 256dfe4 Conditional creation of RAIDed ESP for UEFI Software RAID 5a78bf2 preserve/handle config drives on 4k block devices 06214d7 Handle the node being locked 09c3c41 Fix UTF-16 result handling for efibootmgr fa7e33b Make reno ignore bugfix eol tags 72dd569 Fixes for tox 4.0 ae2fe94 Update TOX_CONSTRAINTS_FILE for stable/zed 75e15dc Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_python_agent/config.py | 5 + ironic_python_agent/efi_utils.py | 15 +- ironic_python_agent/ironic_api_client.py | 27 ++- ironic_python_agent/partition_utils.py | 98 ++++++++- ironic_python_agent/raid_utils.py | 112 ++++++---- releasenotes/config.yaml | 2 + ...-block-size-config-drives-4470828dd06d2600.yaml | 12 ++ ...ootmgr-character-encoding-19e531ba694824c1.yaml | 9 + .../rebuild_on_esp_raid-33f359bdf5ccaa09.yaml | 5 + ...d-node-conflict-is-locked-2ea21dd45abfe4f7.yaml | 13 ++ tox.ini | 23 ++- 18 files changed, 637 insertions(+), 127 deletions(-)

1 0

python-openstackclient 6.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We exuberantly announce the release of: python-openstackclient 6.0.1: OpenStack Command-line Client This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 6.0.1 ^^^^^ New Features ************ * The "server rebuild" commands now accept two optional "--reimage- boot-volume" and "--no-reimage-boot-volume``option. Passing these parameter will allow/disallow a user to rebuild a volume backed server. This is available from Compute microversion ``2.93" and onwards. Bug Fixes ********* * Fixed a bug in "access rule" subcommands where the client logic incorrectly assumed that access rules have a "name" property which resulted in unpredictable behaviors. e.g. "access rule delete {non- existent-id}" now results in a not-found error instead of sometimes deleting an unrelated rule. Changes in python-openstackclient 6.0.0..6.0.1 ---------------------------------------------- 0c07b165 [stable-only] CI: Drop all tips jobs 48148e7a Fix "access rule" commands to only use ID fc80188e Fix pep issue in the network service provider 7d702baf compute: Add support for microversion 2.93 0118d57c compute: Require image when rebuilding a volume-backed server d28c2584 Update TOX_CONSTRAINTS_FILE for stable/zed 2b19e97e Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 84 --------------- openstackclient/compute/v2/server.py | 71 ++++++++++++- openstackclient/identity/common.py | 12 +++ openstackclient/identity/v3/access_rule.py | 14 +-- .../network/v2/network_service_provider.py | 26 +++-- ...-reimage-param-to-rebuild-606dd331677b5954.yaml | 8 ++ .../notes/fix-story-2010775-953dbdf03b2b6746.yaml | 8 ++ tox.ini | 8 +- 11 files changed, 252 insertions(+), 118 deletions(-)

1 0