February 2024 - Release-announce - lists.openstack.org

os-vif 3.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are stoked to announce the release of: os-vif 3.0.1: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/os-vif Download the package from: https://pypi.org/project/os-vif Please report issues through: https://bugs.launchpad.net/os-vif/+bugs For more details, please see below. Changes in os-vif 3.0.0..3.0.1 ------------------------------ 51b7f48 Move mtu update request into ovsdb transaction a602eca Update TOX_CONSTRAINTS_FILE for stable/zed 37fd20f Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 4 +- vif_plug_ovs/ovsdb/ovsdb_lib.py | 23 ++++++--- 5 files changed, 64 insertions(+), 26 deletions(-)

1 0

manila 15.4.0 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are thrilled to announce the release of: manila 15.4.0: Shared Storage for OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 15.4.0 ^^^^^^ New Features ************ * Add new config option 'service_network_host' for service instance with 'dhss'=True. This helps us to define network host for ports and able to seperate from manila host. Bug Fixes ********* * Changed the error and status code that was raised when share types are not handled in shares api * Make snapshot names in CephFS drivers shorter to avoid limitation in Ceph clusters which truncates the subvolume name and makes the snapshots inaccesible. * Metadata APIs have been fixed to respond with HTTP 404 / Not Found when the requester does not have access to a resource that the metadata pertains to. * The CephFS driver uses a *RemoveExport* DBUS API call to the NFS/Ganesha service when a user deletes an access rule, or when deleting the share. If this call fails, the driver now provides a log of the failure, and continues cleaning up. Prior to this change, share deletion could fail if the service failed the DBUS command to drop the export. This would leave the share with an "error_deleting" status, needing administrator intervention. See bug #2035572 (https://launchpad.net/bugs/2035572) for more information. Changes in manila 15.3.0..15.4.0 -------------------------------- c0fc23a39 Change status and error handling for /shares API 5034acd82 Add service_network_host option for port host 13dabf77b Don't fail remove-export in NFS-Ganesha 2dcbb2c76 Fix policy check in metadata APIs 45fe43928 [rbac] Pull up policy checks on share/snapshot APIs 569a30df0 Shorten snapshots names in CephFS drivers Diffstat (except docs and test files) ------------------------------------- manila/api/v1/share_snapshots.py | 3 + manila/api/v1/shares.py | 8 ++ manila/api/v2/metadata.py | 22 ++++- manila/api/v2/shares.py | 5 + manila/share/api.py | 10 +- manila/share/drivers/cephfs/driver.py | 19 +++- manila/share/drivers/ganesha/manager.py | 3 + manila/share/drivers/service_instance.py | 7 +- manila/share/share_types.py | 4 +- ...nge-status-for-shares-api-5dbc4986d032c8e1.yaml | 5 + ...ten-snapshot-names-cephfs-a220e2b9f7ba5739.yaml | 6 ++ ...30-fix-cross-project-rbac-328134c64c96c200.yaml | 6 ++ ...remove-export-nfs-ganesha-fd0f8eb1db800d31.yaml | 11 +++ .../new-config-option-dhss-4931db193fd76656.yaml | 6 ++ 21 files changed, 278 insertions(+), 114 deletions(-)

1 0

oslo.messaging 14.0.3 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are psyched to announce the release of: oslo.messaging 14.0.3: Oslo Messaging API This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 14.0.2..14.0.3 ---------------------------------------- ee0bf90b Add is_admin to safe fields list for notifications 4d15b7c4 Disable greenthreads for RabbitDriver "listen" connections Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_rabbit.py | 2 ++ oslo_messaging/_utils.py | 3 +++ oslo_messaging/notify/notifier.py | 4 ++++ 3 files changed, 9 insertions(+)

1 0

keystonemiddleware 10.1.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are jazzed to announce the release of: keystonemiddleware 10.1.1: Middleware for OpenStack Identity This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. Changes in keystonemiddleware 10.1.0..10.1.1 -------------------------------------------- b61d312 Add timeout for requests f602fa7 Remove cache invalidation when using expired token 46778cd Update TOX_CONSTRAINTS_FILE for stable/zed 0d3dd74 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + keystonemiddleware/auth_token/__init__.py | 6 ----- keystonemiddleware/ec2_token.py | 9 +++++--- keystonemiddleware/s3_token.py | 12 +++++++++- .../unit/auth_token/test_auth_token_middleware.py | 19 ---------------- tox.ini | 2 +- 7 files changed, 33 insertions(+), 42 deletions(-)

1 0

nova 26.2.2 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are overjoyed to announce the release of: nova 26.2.2: Cloud computing fabric controller This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. Changes in nova 26.2.1..26.2.2 ------------------------------ e41962f5fa Do not untrack resources of a server being unshelved 7422642dd6 Reproduce bug #2025480 in a functional test Diffstat (except docs and test files) ------------------------------------- nova/compute/manager.py | 6 +- nova/compute/resource_tracker.py | 7 +- nova/compute/stats.py | 3 +- nova/compute/vm_states.py | 11 ++- .../functional/regressions/test_bug_2025480.py | 86 ++++++++++++++++++++++ 6 files changed, 121 insertions(+), 8 deletions(-)

1 0

cloudkitty 17.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are stoked to announce the release of: cloudkitty 17.0.1: Rating as a Service component for OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/cloudkitty Download the package from: https://pypi.org/project/cloudkitty Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cloudkitty For more details, please see below. 17.0.1 ^^^^^^ Bug Fixes * Fix failure to process rating using the PyScripts rating module. * Fix retrieval of reprocessing tasks which was returning "Internal Server Error". Changes in cloudkitty 17.0.0..17.0.1 ------------------------------------ 56ec4f1 Fix random unit test failures d848043 Fix retrieval of reprocessing tasks 44a7db9 Fix PyScripts processing 12a84c5 [docs] Install cloudkitty requirements using constraints 64b92f3 Update TOX_CONSTRAINTS_FILE for stable/zed e146972 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + cloudkitty/api/v2/task/reprocess.py | 8 +- cloudkitty/dataframe.py | 4 +- cloudkitty/rating/pyscripts/__init__.py | 47 +++- .../notes/fix_py_scripts-fd9ab52c92263844.yaml | 4 + .../notes/reprocess-get-fix-f2bd1f2f9e2d640e.yaml | 5 + tox.ini | 5 +- 11 files changed, 356 insertions(+), 138 deletions(-)

1 0

ironic-python-agent-builder 5.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are pleased to announce the release of: ironic-python-agent-builder 5.0.1: Tools and scripts to build Ironic Python Agent This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent-builder Download the package from: https://tarballs.openstack.org/ironic-python-agent-builder/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent-builder For more details, please see below. 5.0.1 ^^^^^ Bug Fixes * Fixes excess files being housed in /var/tmp inside of a ramdisk image which may, in some cases, result in a much larger ramdisk than expected. Files and folders in /var/tmp within a ramdisk are now removed prior to the ramdisk being packaged as part of a DIB based image build. Changes in ironic-python-agent-builder 5.0.0..5.0.1 --------------------------------------------------- f560170 Drop TripleO job e2c1c82 Extend the DIB_CHECKSUM variable usage dbd6634 Add checksum generation support b097986 Add libaio engine for fio on Centos/Rhel9 cb5efad Remove /var/tmp/* from images daab68f Update TOX_CONSTRAINTS_FILE for stable/zed f6d15d0 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + dib/burn-in/package-installs.yaml | 5 +++++ dib/extra-hardware/package-installs.yaml | 5 +++++ .../post-install.d/99-remove-extra-packages | 4 ++++ dib/ironic-ramdisk-base/cleanup.d/99-ramdisk-create | 7 +++++++ dib/ironic-ramdisk-base/environment.d/10-checksum.bash | 1 + .../notes/clean-var-tmp-with-dib-builds-cd31a2cf70a7f935.yaml | 7 +++++++ tox.ini | 2 +- zuul.d/project.yaml | 2 -- 9 files changed, 31 insertions(+), 3 deletions(-)

1 0

magnum 17.0.2 (bobcat)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are gleeful to announce the release of: magnum 17.0.2: Container Management project for OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum 17.0.1..17.0.2 -------------------------------- 272fd686 Move the chmod function before the write and flush functions to prevent sensitive information leakage. Diffstat (except docs and test files) ------------------------------------- magnum/conductor/handlers/common/cert_manager.py | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-)

1 0

neutron-fwaas 17.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are tickled pink to announce the release of: neutron-fwaas 17.0.1: OpenStack Networking FWaaS This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron-fwaas Download the package from: https://tarballs.openstack.org/neutron-fwaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-fwaas 17.0.0..17.0.1 --------------------------------------- 9cd7d7048 Add CONTEXT_WRITER to _get_default_fwg_id 2a4f85e9c Add get_firewall_groups_count method 1fc233a50 Use upper-constraints in docs job 7545e6a26 Fix tox.ini with tox4 f4ce1441a Update TOX_CONSTRAINTS_FILE for stable/zed 5ef0ce7c6 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 1 + neutron_fwaas/services/firewall/fwaas_plugin_v2.py | 5 +++++ tox.ini | 23 +++++++++++++--------- 4 files changed, 21 insertions(+), 9 deletions(-)

1 0

magnum 16.0.2 (antelope)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We are overjoyed to announce the release of: magnum 16.0.2: Container Management project for OpenStack This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/magnum Download the package from: https://tarballs.openstack.org/magnum/ Please report issues through: https://bugs.launchpad.net/magnum/+bugs For more details, please see below. Changes in magnum 16.0.1..16.0.2 -------------------------------- 883b40b5 Move the chmod function before the write and flush functions to prevent sensitive information leakage. 36cf1c85 Missing load balancer health monitors fix Diffstat (except docs and test files) ------------------------------------- magnum/conductor/handlers/common/cert_manager.py | 7 +++---- magnum/drivers/common/templates/lb_api.yaml | 2 +- magnum/drivers/common/templates/lb_etcd.yaml | 2 +- 3 files changed, 5 insertions(+), 6 deletions(-)

1 0

keystoneauth 5.0.1 (zed)
by no-reply＠openstack.org 08 Feb '24

08 Feb '24

We high-spiritedly announce the release of: keystoneauth 5.0.1 This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/keystoneauth Download the package from: https://pypi.org/project/keystoneauth Please report issues through: https://bugs.launchpad.net/keystoneauth/+bugs For more details, please see below. Changes in keystoneauth 5.0.0..5.0.1 ------------------------------------ 61c3dc7 Make v3oidcpassword send client_id 1b262cd Update TOX_CONSTRAINTS_FILE for stable/zed 7053ec9 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + keystoneauth1/identity/v3/oidc.py | 3 ++- tox.ini | 6 +++--- 3 files changed, 6 insertions(+), 4 deletions(-)

1 0

ironic-inspector 12.0.0 (caracal)
by no-reply＠openstack.org 02 Feb '24

02 Feb '24

We enthusiastically announce the release of: ironic-inspector 12.0.0: Hardware introspection for OpenStack Bare Metal This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 12.0.0 ^^^^^^ Upgrade Notes ************* * The legacy Role Based Access Control policy used by ironic- inspector has been disabled by default. The end result of this is that the legacy "baremetal_admin" and "baremetal_observer" roles are no longer enabled by default. System scoped access can be utilized to connect to the "ironic-inspector" service, or alternatively a user with an "admin" or "service" role. The Ironic project does not anticipate any issues with this change, as the the "ironic-inspector" service is a service *for* the system itself. That being said, if the operator deployed configuration is reliant upon the deprecated roles, configuration changes will be required. This change is a result of the new policy which was introduced as part of Consistent and Secure RBAC community goal and the underlying "[oslo_policy] enforce_scope" and "[oslo_policy] enforce_new_defaults" settings being changed to "True". Operators wishing to revert to the old policy configuration may do so by setting the following values in "ironic-inspector.conf".: [oslo_policy] enforce_new_defaults=False enforce_scope=False Operators who revert the configuration are encouraged to make the necessary changes to their configuration, as the legacy RBAC policy will be removed at some point in the future. Please review 2024.1-Release Timeline. Failure to do so will may force operators to craft custom policy override configuration. (https://governance.openstack.org/tc/goals/selected/consistent-and- secure-rbac.html) (https://governance.openstack.org/tc/goals/selected/consistent-and- secure-rbac.html#id3) Bug Fixes ********* * In case the lldp raw data collected by the inspection process includes non utf-8 information, the parser fails breaking the inspection process. This patch works around that excluding the malformed data and adding an entry in the logs to provide information on the failed tlv. * Fixes the Role Based Access Control state and capabilities to align with OpenStack Community RBAC goals which includes support for a "service" role by default to enable inter-service communication to be configured without an "admin" username. In large part, these changes were missed as the Inspector service is considered an "admin-only" service. Also in alignment with overall community position changes, where the "admin" role is sufficient without an explicit "system" scope. To help ensure a high level of security, explicit testing was also added for the "manager" role, which is unavailable as that role is reserved for administrative functions inside of a tenant's project. Changes in ironic-inspector 11.8.0..12.0.0 ------------------------------------------ fff8008 Change policy to enforce only new policy c08ab06 [codespell] Adding CI target for Tox Codespell fd0d817 [codespell] Adding Tox Target for Codespell 98a226b [codespell] Fixing Spelling Mistakes 0fb5589 Update python classifier in setup.cfg 5523b11 Fix RBAC access for service/admin user access db76af9 Handle LLDP parse Unicode error bf59b80 Fix versions in release notes dc5da67 Suppress logs from stevedore 969cccb [coordination] backend_url should be secret Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 4 +- ironic_inspector/common/lldp_tlvs.py | 2 +- ironic_inspector/common/swift.py | 2 +- ironic_inspector/conf/coordination.py | 1 + ironic_inspector/conf/opts.py | 1 + ironic_inspector/db/api.py | 4 +- .../18440d0834af_introducing_the_aborting_state.py | 2 +- ironic_inspector/main.py | 2 +- ironic_inspector/node_cache.py | 10 +- ironic_inspector/plugins/lldp_basic.py | 11 +- ironic_inspector/plugins/local_link_connection.py | 2 +- ironic_inspector/policy.py | 40 ++- ironic_inspector/test/unit/test_acl.py | 359 ++++++++++++++++++++- ironic_inspector/test/unit/test_introspect.py | 2 +- .../notes/accelerators-2aa4f0cedf359810.yaml | 2 +- .../notes/extra-check-9cf0a7d89e534ccd.yaml | 2 +- .../notes/fix-lldp-decode-83f4ad3869b0c7a7.yaml | 9 + .../keystoneauth-plugins-aab6cbe1d0e884bf.yaml | 12 +- ...gacy-rbac-policy-disabled-6fc45ad1237f4d57.yaml | 35 ++ .../notes/policy-engine-c44828e3131e6c62.yaml | 2 +- ...-deny-unknown-host-option-b84b2aa1f7f49a17.yaml | 2 +- ...or-openstack-rbac-changes-7ca8533f76e504d5.yaml | 14 + ...qlalchemy-minimum-version-cd34a2e10d7946fd.yaml | 2 +- releasenotes/source/2023.1.rst | 6 +- releasenotes/source/2023.2.rst | 6 +- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 12 +- releasenotes/source/zed.rst | 6 +- setup.cfg | 7 + tox.ini | 8 + zuul.d/ironic-inspector-jobs.yaml | 9 + zuul.d/project.yaml | 2 + 31 files changed, 519 insertions(+), 59 deletions(-)

1 0

manila 16.2.0 (antelope)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We jubilantly announce the release of: manila 16.2.0: Shared Storage for OpenStack This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 16.2.0 ^^^^^^ New Features ************ * Add new config option 'service_network_host' for service instance with 'dhss'=True. This helps us to define network host for ports and able to seperate from manila host. Bug Fixes ********* * Changed the error and status code that was raised when share types are not handled in shares api * Make snapshot names in CephFS drivers shorter to avoid limitation in Ceph clusters which truncates the subvolume name and makes the snapshots inaccesible. * NetApp driver bug #1982808 (https://bugs.launchpad.net/manila/+bug/1982808) Fixed issue to add the retry logic to delete and release the snapmirror relationship. Delete the vserver pairing when there is no snapmirror relationship exist on source and destination cluster. * Metadata APIs have been fixed to respond with HTTP 404 / Not Found when the requester does not have access to a resource that the metadata pertains to. * The CephFS driver uses a *RemoveExport* DBUS API call to the NFS/Ganesha service when a user deletes an access rule, or when deleting the share. If this call fails, the driver now provides a log of the failure, and continues cleaning up. Prior to this change, share deletion could fail if the service failed the DBUS command to drop the export. This would leave the share with an "error_deleting" status, needing administrator intervention. See bug #2035572 (https://launchpad.net/bugs/2035572) for more information. Changes in manila 16.1.0..16.2.0 -------------------------------- 7918f1d4b Change status and error handling for /shares API eefc68c48 NetApp API failed. Reason - 18177:Relationship is in use by SnapMirror in local cluster 07c584cf7 Add service_network_host option for port host b76a035d7 Don't fail remove-export in NFS-Ganesha d5c2eb112 Fix policy check in metadata APIs 8edaa3254 [rbac] Pull up policy checks on share/snapshot APIs 3be5df4e1 Shorten snapshots names in CephFS drivers Diffstat (except docs and test files) ------------------------------------- manila/api/v1/share_snapshots.py | 3 + manila/api/v1/shares.py | 8 ++ manila/api/v2/metadata.py | 22 ++++- manila/api/v2/shares.py | 5 + manila/share/api.py | 10 +- manila/share/drivers/cephfs/driver.py | 19 +++- manila/share/drivers/ganesha/manager.py | 3 + .../netapp/dataontap/cluster_mode/lib_multi_svm.py | 28 ++++-- manila/share/drivers/service_instance.py | 7 +- manila/share/share_types.py | 4 +- .../dataontap/cluster_mode/test_lib_multi_svm.py | 17 +++- ...nge-status-for-shares-api-5dbc4986d032c8e1.yaml | 5 + ...ten-snapshot-names-cephfs-a220e2b9f7ba5739.yaml | 6 ++ ...ed-relationship-is-in-use-ecc9ede4d7f0f5b9.yaml | 8 ++ ...30-fix-cross-project-rbac-328134c64c96c200.yaml | 6 ++ ...remove-export-nfs-ganesha-fd0f8eb1db800d31.yaml | 11 +++ .../new-config-option-dhss-4931db193fd76656.yaml | 6 ++ 24 files changed, 320 insertions(+), 125 deletions(-)

1 0

ironic 20.1.3 (yoga)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are psyched to announce the release of: ironic 20.1.3: OpenStack Bare Metal Provisioning This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 20.1.3 ^^^^^^ Bug Fixes * Modify iRMC driver to use ironic.conf [deploy] default_boot_mode to determine default boot_mode. Changes in ironic 20.1.2..20.1.3 -------------------------------- dcf5af560 redfish_address - wrap_ipv6 address cecf9e229 Align iRMC driver with Ironic's default boot_mode Diffstat (except docs and test files) ------------------------------------- ironic/common/utils.py | 8 ++++++-- ironic/drivers/modules/irmc/management.py | 4 ++-- ironic/drivers/modules/redfish/utils.py | 3 ++- .../unit/drivers/modules/irmc/test_management.py | 20 ++++++++++---------- .../unit/drivers/modules/redfish/test_utils.py | 8 ++++++++ ...h-ironic-default-boot-mode-dde6f65ea084c9e6.yaml | 12 ++++++++++++ 8 files changed, 62 insertions(+), 20 deletions(-)

1 0

sushy 4.1.7 (yoga)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We high-spiritedly announce the release of: sushy 4.1.7: Sushy is a small Python library to communicate with Redfish based systems This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 4.1.7 ^^^^^ Bug Fixes * Correctly handles errors on a request that is re-tried after refreshing an authentication token. Changes in sushy 4.1.6..4.1.7 ----------------------------- fdbcb17 Handle exceptions after re-authentication Diffstat (except docs and test files) ------------------------------------- releasenotes/notes/re-raise-1fe9f912691e893e.yaml | 5 +++ sushy/connector.py | 24 +++++++------- 3 files changed, 58 insertions(+), 11 deletions(-)

1 0

ironic-python-agent 8.5.3 (yoga)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We eagerly announce the release of: ironic-python-agent 8.5.3: Ironic Python Agent Ramdisk This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 8.5.3 ^^^^^ Bug Fixes * Fixes, or at least lessens the case where a running Ironic agent can stack up numerous lookup requests against an Ironic deployment when a node is locked. In particular, this is beause the lookup also drives generation of the agent token, which requires the conductor to allocate a worker, and generate the token, and return the result to the API client. Ironic's retry logic will now wait up to "60" seconds, and if an HTTP Conflict (409) message is received, the agent will automatically pause lookup operations for thirty seconds as opposed continue to attempt lookups which could create more work for the Ironic deployment needlessly. Changes in ironic-python-agent 8.5.2..8.5.3 ------------------------------------------- 54e5fcc Handle the node being locked Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/ironic_api_client.py | 28 ++++++++++++++++++++-- ...d-node-conflict-is-locked-2ea21dd45abfe4f7.yaml | 13 ++++++++++ 3 files changed, 66 insertions(+), 2 deletions(-)

1 0

oslo.messaging 14.2.4 (antelope)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are jazzed to announce the release of: oslo.messaging 14.2.4: Oslo Messaging API This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.2.4 ^^^^^^ Bug Fixes * Auto-delete the failed quorum rabbit queues. When rabbit is failing for a specific quorum queue, delete the queue before trying to recreate it. This may happen if the queue is not recoverable on rabbit side. See https://www.rabbitmq.com/quorum- queues.html#availability for more info on this specific case. * Fixed typo in variable names "rabbit_quorum_max_memory_length" and "rabbit_quorum_max_memory_bytes". Please make changes in your config files to correspond correct variables. Changes in oslo.messaging 14.2.3..14.2.4 ---------------------------------------- 00f839d1 Fix typo in quorum-related variables for RabbitMQ dcad86be Auto-delete the failed quorum rabbit queues Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_rabbit.py | 44 ++++++++++++++++++---- ...uto-deleted-failed-quorum-ca6a3923c3ed999a.yaml | 9 +++++ .../notes/rabbit_quorum_typo-9c06a9fd8d767f53.yaml | 6 +++ 4 files changed, 53 insertions(+), 10 deletions(-)

1 0

python-manilaclient 4.6.1 (bobcat)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We enthusiastically announce the release of: python-manilaclient 4.6.1: Client library for OpenStack Manila API. This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 4.6.1 ^^^^^ Bug Fixes * Fixed default share type lookup associated with the "openstack share create" command. The lookup now resolves default share types correctly even on environments where the default type isn't named "default". See launchpad bug #2030686 (https://launchpad.net/bugs/2030686) for more details. Changes in python-manilaclient 4.6.0..4.6.1 ------------------------------------------- ed34956 Fix default share type resolution in OSC 4080d49 Fix "test_share_access_show" osc functional test 9fc1a05 Fix decoder path and add transfer commands 273058c Update TOX_CONSTRAINTS_FILE for stable/2023.2 3fac3aa Update .gitreview for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manilaclient/osc/v2/data/manila.csv | 5 +++++ manilaclient/osc/v2/share.py | 4 ++-- manilaclient/shell.py | 5 +++-- manilaclient/v2/share_types.py | 6 +++--- .../bug-2030686-fix-default-share-lookup-cc7e592a0dc855e1.yaml | 8 ++++++++ tox.ini | 6 +++--- 9 files changed, 28 insertions(+), 11 deletions(-)

1 0

ironic 24.0.0 (caracal)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are happy to announce the release of: ironic 24.0.0: OpenStack Bare Metal Provisioning This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 24.0.0 ^^^^^^ New Features ************ * Adds the capability to define a "default_conductor_group" setting which allows operators to assign a default conductor group to new nodes created in Ironic if they do not otherwise have a "conductor_group" set upon creation. By default, this setting has no value. * Adds support for Redfish based HTTPBoot, which leveragings the DMTF Redfish "HttpBootUri" "ComputerSystem" resource in a BMC, to assert the URL for the next boot operation. This requires Sushy 4.7.0 as the minimum version. * Adds a new capability allowing to attach or detach generic iso images as virtual media devices after a node has been provisioned. * Previously the key for building temporary URLs from Swift was taken from the *x-account-meta-temp-url-key* header in the object store account. Now the header *x-account-meta-temp-url-key-2* is also checked, which allows password rotation to occur without breaking old URLs. This applies to the following temporary URL scenarios: * Temp URL image transfer from Glance (when *[glance]swift_temp_url_key* is not set) * Publishing an image with the Swift publisher (*[redfish]use_swift=True* or *[ilo]use_web_server_for_images=False*) * Storing the config drive in Swift (*[deploy]configdrive_use_object_store=True*) * Fetching Swift stored firmware update payloads. * Introducing basic authentication and configurable authentication strategy support for image and image checksum download processes. This feature introduces 3 new configuration variables that could be used to select the authentication strategy and provide credentials for authentication strategies. The 3 variables are structured in way that 1 of them "[deploy]image_server_auth_strategy" (string) provides the ability to select between authentication strategies by specifying the name of the authentication strategy. Currently the only supported authentication strategy is the "http- basic" which will make IPA use HTTP(S) basic authentication also known as the "RFC 7617" standard. The other 2 variables are "[deploy]image_server_password" and "[deploy]image_server_user" provide username and password credentials for image download processes. The "[deploy]image_server_password" and "[deploy]image_server_user" are not strategy specific and could be reused for any username + password based authentication strategy, but for the moment these 2 variables are only used for the "http- basic" strategy. "[deploy]image_server_auth_strategy" doesn't just enable the feature but enforces checks on the values of the 2 related credentials. When the "http-basic" strategy is enabled for image server download workflow the download logic will make sure to raise an exception in case any of the credentials are None or an empty string. Example of activating the "http-basic" strategy can be found in *HTTP(s) Authentication strategy for user image servers* section of the admin guide. Upgrade Notes ************* * The Ironic service API Role Based Access Control policy has been updated to disable the legacy RBAC policy by default. The effect of this is that deprecated legacy roles of "baremetal_admin" and "baremetal_observer" are no longer functional by default, and policy checks may prevent actions such as viewing nodes when access rights do not exist by default. This change is a result of the new policy which was introduced as part of Secure Role Based Access Control effort along with the Consistent and Secure RBAC community goal and the underlying "[oslo_policy] enforce_scope" and "[oslo_policy] enforce_new_defaults" settings being changed to "True". The Ironic project believes most operators will observe no direct impact from this change, unless they are specifically running legacy access configurations utilizing the legacy roles for access. Operators which are suddenly unable to list or deploy nodes may have a misconfiguration in credentials, or need to allow the user's project the ability to view and act upon the node through the node "owner" or "lessee" fields. By default, the Ironic API policy permits authenticated requests with a "system" scoped token to access all resources, and applies a finer grained access model across the API for project scoped users. Ironic users who have not already changed their "nova-compute" service settings for connecting to Ironic may also have issues scheduling Bare Metal nodes. Use of a "system" scoped user is available, by setting "[ironic] system_scope" to a value of "all" in your nova-compute service configuration, which can be done independently of other services, as long as the credentials supplied are also valid with Keystone for system scoped authentication. Heat users which encounter any issues after this upgrade, should check their user's roles. Heat's execution and model is entirely project scoped, which means users will need to have access granted through the "owner" or "lessee" field to work with a node. Operators wishing to revert to the old policy configuration may do so by setting the following values in "ironic.conf".: [oslo_policy] enforce_new_defaults=False enforce_scope=False Operators who revert the configuration are encourated to make the necessary changes to their configuration, as the legacy RBAC policy will be removed at some point in the future in alignment with 2024.1-Release Timeline. Failure to do so will may force operators to craft custom policy override configuration. (https://specs.openstack.org/openstack/ironic-specs/specs/17.0 /secure-rbac.html) (https://docs.openstack.org/ironic/latest/configuration/sample- policy.html) (https://governance.openstack.org/tc/goals/selected /consistent-and-secure-rbac.html) (https://governance.openstack.org/tc/goals/selected/consistent-and- secure-rbac.html#id3) * Removes the sphinxcontrib-seqdiag dependency as the Pillow upgrade to version 10.x (from OpenStack upper constraints) breaks its usage. seqdiag has not been maintained for the last 3 years, hence the upgrade causes it to break. In the ironic docs (source) rst files, adds references to svg files, and keeps the svg files in the doc/source/images/ directory, alongside their associated .diag files as backup. * The default value of the configuration option "[inspector]require_managed_boot" is now "True" for the newer "agent" inspect interface. The older "inspector" implementation is not affected. Operators with deployments that support unmanaged inspection must set this value to "False" explicitly. * *python-swiftclient* is no longer a dependency, all OpenStack Swift operations are now down using *openstacksdk*. Configuration option *[swift]swift_max_retries* has been removed and any custom value will no longer have any effect on failed object- store operations. Deprecation Notes ***************** * The "deploy_kernel", "deploy_ramdisk", "rescue_kernel" and "rescue_ramdisk" configuration options, incorrectly deprecated in the 2023.2 release series, are no longer deprecated. * The "idrac" hardware type management interface steps "import_configuration" and "export_configuration" steps are deprecated, and will be removed once a formalized generic step templating mechanism has been created within Ironic. The Ironic community is open to reconsidering this decision should the overall bulk configuration reset/templating model become adopted by DMTF Redfish as a standardized cross-vendor feature. * The "ibmc" hardware type is deprecated due to a lack of upstream communication, driver maintenance, and a recognition that the Redfish hardware type likely works for the users at this point. This driver is expected to be removed during the "2024.2" development cycle. * The "xclarity" hardware type is deprecated due to a lack of upstream communication, driver maintenance, and a recognition that the Redfish hardware type is suitable for Lenovo hardware users moving forward. This driver is expected to be removed during the "2024.2" development cycle. * The "idrac-wsman" interfaces on the "idrac" hardware type are deprecated due to a lack of upstream communiation, and the decision of the driver's maintainer in the past to move in to the direction of using Redfish for driver interactions. These driver interfaces are expected to be removed during the "2024.2" development cycle. * Rootwrap support is deprecated since Ironic no longer runs any commands as root. Files "/etc/ironic/rootwrap.conf", "/etc/ironic/rootwrap.d" and the "ironic-rootwrap" command will be removed in a future release. Bug Fixes ********* * Firmware components are now also cached on the transition to the "manageable" state in addition to cleaning. This is consisent with how BIOS settings, vendor and boot mode are cached. * Fixes the behavior of "file:///" image URLs pointing at a symlink. Ironic no longer creates a hard link to the symlink, which could cause confusing FileNotFoundError to happen if the symlink is relative. * Nodes no longer get stuck in cleaning when the firmware components caching code raises an unexpected exception. * Prevents a database constraints error on caching firmware components when a supported component does not have the current version. * Fixes an issue when listing allocations as a project scoped user when the legacy RBAC policies have been disabled which forced an HTTP 406 error being erroneously raised. Users attempting to list allocations with a specific owner, different from their own, will now receive an HTTP 403 error. * In case the lldp raw data collected by the inspection process includes non utf-8 information, the parser fails breaking the inspection process. This patch works around that excluding the malformed data and adding an entry in the logs to provide information on the failed tlv. * Fixes an issue where a System Scoped user could not trigger a node into a "manageable" state with cleaning enabled, as the Neutron client would attempt to utilize their user's token to create the Neutron port for the cleaning operation, as designed. This is because with requests made in the "system" scope, there is no associated project and the request fails. Ironic now checks if the request has been made with a "system" scope, and if so it utilizes the internal credential configuration to communicate with Neutron. * When configured to listen on a unix socket, Ironic will now properly cleanup the unix socket on a clean service stop. * The "idrac" hardware type is now compatible with the "redfish" firmware interface. The link between them was missing initially. * Fixes the inspection lookup to consider all nodes with the same BMC hostname, as can happen with Redfish. In this case, the nodes are distinguished by MAC addresses. * Fixes getting details of a conductor if it uses a non-standard JSON RPC port or an IPv6 address as the name, e.g. "GET /v1/conductors/[2001:db8::1]:8090". Previously, it would result in a HTTP error 400. * Fixes "enable_netboot_fallback" to write out pxe config on adopt. * When configuring secure boot via Redfish, internal server errors are now retried for a longer period than by default, accounting for the SecureBoot resource unavailability during configuration on some hardware. * Fixes Raid creation issue in iLO6 and other BMC with latest schema by removing 'VolumeType', 'Encrypted' and changing placement of 'Drives' to inside 'Links'. * Fixes the payload format required to query physical storage drives using redfish, when configuring RAID using redfish. * Uses the volume_name provided in the target_raid_config field of a node to set the storage volume name when configuring RAID with the redfish driver (instead of discarding the volume_name given in target_raid_config) * Use the 'volume_name' field from the logical_disk in the target_raid_config field of a node, instead of just 'name' (which is incorrect as per the Ironic API expectation), to create the RAID volume using the Redfish driver Other Notes *********** * The classic "ilo" hardware types may be deprecated in the future for removal or major changes, however our last communication with the maintainers as of the "2024.1" Project Teams Gathering sessions indiated they were still working to determine their own forward path with a strong emphasis on the use of Redfish. Changes in ironic 23.1.0..24.0.0 -------------------------------- c6e055358 Remove dependency on pytz 4ac42cac1 More precise comment about when to disable v6 7705b0b2d Remove the sphinxcontrib-seqdiag dependency 32c9c7445 RedfishFirmwareInterface - Unit Tests & More logs 83001d62e typo: fix a typo in api configuration c7d490f84 Clean up removed services from devstack options 435932355 Disable legacy RBAC policy by default. 2e8db13e0 Flip require_managed_boot to True for the new agent inspection bf673c276 Account for nodes with the same BMC hostname in inspection lookup 7032a0d9a Stop using a specific mirror in infra 0b3ed093e Don't create a hardlink to a symlink when handling file:// URLs ccfefa477 Fix bug in devstack-guide: readd server create ebd8381db Corrected IP_ADDRESS to IP_VERSION 4398c11a5 Revert "Revert "RBAC: Fix allocation check"" to use Unauthorized 4b3163386 Revert "RBAC: Fix allocation check" fba57d595 Validate [deploy] image_server_auth_strategy 8dc1ecead [deploy] image_server_password should be secret d738df5aa Add df logs to metal3 integration job 84397f350 CI: Remove ironic-inspector-tempest-managed-non-standalone c901b15f6 RBAC: Fix allocation check c3074524d Fix system scoped manageable node network failure be09717be Drop rootwrap support 92eb54251 PXE configuration guide for unmanaged inspection 041a7d706 Redfish UefiHttp boot support 310603f3b Make bandit voting on check and gate a40e3fd5a docs: add distribution specific chain of trust warning around grub 4d3101940 Handle LLDP parse Unicode error b0b7ee425 Do not log lack of metrics support at WARNING lvl fe4844032 Update to latest pep8/code style versions c3296bba3 Fix typo in xclarity docs ce4d8a6bc [Docs] Adds changes to 'iLO' docs regarding Gen11 support 3489a0204 Fix versions in release notes 12cb5bc8b Remove unnecessary egg_info options 4cc167cc6 Test redfish with reduced sushy-tools feature set 607b8734e Cache firwmare components on the transition to "manageable" af8508f51 CI: use Swift for configdrive when available 9806258ed Revise ramdisk boot interface for clarity 2cdb09ba9 Revert "Move BFV job to non-voting" 6956b0619 Fixes Raid creation in iLO6 and other BMC with latest schema 6ffef5b16 Move BFV job to non-voting 23745d97f Fix two severe errors in the firmware caching code e67f71606 Fix GET for conductors with a port or IPv6 address 2373127c7 Documentation: tuning worker threads a98681f1d Fix volume_name issue in Redfish RAID 9c0996d1a First pass at the new in-band inspection docs bfaf64b46 Add volume name to Redfish RAID volumes 578c02813 Fix log message var reference a6e3a7f50 Handle internal server errors while configuring secure boot 31f0e17a1 fix nits related to image server bauth d6491b0c8 [trivial] remove note on non-voting snmp job 1ffdabed9 Change snmp job to not use a focal node 2db444bce Replace swiftclient usage with openstacksdk 25bb15aee Document wsgi_service fix from 16a806f 6e10ad9ad Add missing compatibility between idrac and redfish firmware 40edeed61 Improve logging in the dnsmasq DHCP provider facd862a3 Fix Redfish request collecting storage drives b44d16a15 Imported Translations from Zanata 5db871ead Deprecate configuration molds 203660a0b Fix *_by_arch documentation and un-deprecate the options without it 01507db18 Trivial: fix a typo in wsgi_service 090291221 Generic API for attaching/detaching virtual media 6ac130805 Multiple driver related deprecations ce300b3de CI: Remove deprecated devstack method 3ea4bb234 implement basic-auth support for user image download process eb65c0de9 Ensure enable_netboot_fallback writes out pxe config on adopt. 2e4811887 [trivial] add Python 3.11 mention in setup.cfg 9953b5a2e add default conductor group capability Diffstat (except docs and test files) ------------------------------------- .../baremetal-api-v1-attach-detach-vmedia.inc | 54 ++ api-ref/source/parameters.yaml | 20 +- .../source/samples/node-vmedia-attach-request.json | 4 + devstack/lib/ironic | 97 +-- devstack/upgrade/upgrade.sh | 2 +- .../images/agent-token-with-virtual-media.diag | 21 + .../images/agent-token-with-virtual-media.svg | 101 +++ .../glance-and-swift-for-partition-images.diag | 34 + .../glance-and-swift-for-partition-images.svg | 169 ++++ .../images/glance-and-swift-whole-disk-images.diag | 33 + .../images/glance-and-swift-whole-disk-images.svg | 162 ++++ etc/ironic/rootwrap.conf | 1 + etc/ironic/rootwrap.d/ironic-utils.filters | 6 +- ironic/api/controllers/v1/allocation.py | 13 +- ironic/api/controllers/v1/conductor.py | 8 +- ironic/api/controllers/v1/node.py | 111 ++- ironic/api/controllers/v1/utils.py | 5 + ironic/api/controllers/v1/versions.py | 4 +- ironic/common/args.py | 13 + ironic/common/boot_devices.py | 6 + ironic/common/exception.py | 6 + ironic/common/glance_service/image_service.py | 9 +- ironic/common/image_service.py | 80 +- ironic/common/images.py | 2 +- ironic/common/molds.py | 9 + ironic/common/neutron.py | 6 +- ironic/common/policy.py | 22 +- ironic/common/pxe_utils.py | 2 +- ironic/common/release_mappings.py | 4 +- ironic/common/swift.py | 151 ++-- ironic/common/utils.py | 39 +- ironic/common/wsgi_service.py | 2 +- ironic/conductor/cleaning.py | 5 +- ironic/conductor/manager.py | 122 ++- ironic/conductor/rpcapi.py | 55 +- ironic/conductor/utils.py | 56 +- ironic/conductor/verify.py | 8 +- ironic/conf/api.py | 2 +- ironic/conf/conductor.py | 20 +- ironic/conf/default.py | 9 +- ironic/conf/deploy.py | 24 + ironic/conf/inspector.py | 14 +- ironic/conf/swift.py | 13 +- ironic/dhcp/dnsmasq.py | 51 +- ironic/drivers/base.py | 26 + ironic/drivers/drac.py | 5 + ironic/drivers/modules/agent.py | 12 +- ironic/drivers/modules/deploy_utils.py | 8 - ironic/drivers/modules/drac/bios.py | 4 + ironic/drivers/modules/drac/management.py | 8 +- ironic/drivers/modules/drac/power.py | 4 + ironic/drivers/modules/drac/raid.py | 4 + ironic/drivers/modules/drac/vendor_passthru.py | 4 + ironic/drivers/modules/ibmc/management.py | 4 + ironic/drivers/modules/ibmc/power.py | 4 + ironic/drivers/modules/ibmc/raid.py | 4 + ironic/drivers/modules/ibmc/vendor.py | 4 + ironic/drivers/modules/inspect_utils.py | 60 +- ironic/drivers/modules/inspector/agent.py | 2 + .../drivers/modules/inspector/hooks/parse_lldp.py | 11 +- ironic/drivers/modules/inspector/interface.py | 11 +- ironic/drivers/modules/pxe_base.py | 3 +- ironic/drivers/modules/redfish/boot.py | 303 ++++++++ ironic/drivers/modules/redfish/firmware.py | 45 +- ironic/drivers/modules/redfish/firmware_utils.py | 15 +- ironic/drivers/modules/redfish/management.py | 34 +- ironic/drivers/modules/redfish/raid.py | 24 +- ironic/drivers/modules/redfish/utils.py | 11 + ironic/drivers/modules/redfish/vendor.py | 2 + ironic/drivers/modules/xclarity/management.py | 4 + ironic/drivers/modules/xclarity/power.py | 4 + ironic/drivers/redfish.py | 3 +- ironic/drivers/utils.py | 9 +- .../unit/api/controllers/v1/test_allocation.py | 11 + .../unit/api/controllers/v1/test_conductor.py | 13 + .../unit/drivers/modules/inspector/test_agent.py | 7 + .../unit/drivers/modules/redfish/test_boot.py | 850 +++++++++++++++++++++ .../unit/drivers/modules/redfish/test_firmware.py | 659 ++++++++++++++++ .../drivers/modules/redfish/test_firmware_utils.py | 16 +- .../drivers/modules/redfish/test_management.py | 60 +- .../unit/drivers/modules/redfish/test_raid.py | 68 +- .../unit/drivers/modules/test_inspect_utils.py | 49 +- playbooks/metal3-ci/post.yaml | 2 + ...d-default-conductor-group-a0355c5e9345a037.yaml | 7 + ...-redfish-httpboot-support-8d516158860c9d43.yaml | 7 + ...cache-firmware-components-485b3343ba1db5ee.yaml | 6 + ...hange-default-rbac-policy-f2f154043910f26a.yaml | 57 ++ .../notes/deploy-kernels-8998a9c301db483b.yaml | 6 + ...recate-idrac-config-molds-6ba6e557b11dd5ff.yaml | 10 + ...ulitple-driver-interfaces-e42e4fa1c960f596.yaml | 24 + .../notes/file-symlink-b65bd6b407bd1683.yaml | 6 + .../notes/firmware-fail-c6f6c70220373033.yaml | 8 + ...ocation-exception-on-list-c04e93fb9cace218.yaml | 8 + .../notes/fix-lldp-decode-00021e76db26b2a5.yaml | 9 + ...tem-scope-triggered-clean-22ada9b920c08365.yaml | 12 + .../fix-unix-socket-support-eaa0e350f4bfaf56.yaml | 3 + ...eric-virtual-media-attach-9625f8ac66093b76.yaml | 5 + .../notes/idrac-firmware-3839648d729d9c7c.yaml | 5 + .../notes/lookup-many-bmcs-b019f3599c8e8da7.yaml | 6 + releasenotes/notes/no-root-8127c35b4702d242.yaml | 6 + .../notes/port-in-conductor-a354a2665effca2e.yaml | 7 + .../notes/pxe-onadopt-7214eba4f5822e1a.yaml | 5 + .../notes/redfish-500-fea3a8f86c0aecc7.yaml | 6 + ...redfish-fix-raid-creation-f437066b1301c032.yaml | 6 + ...dfish-raid-get-drives-fix-18d46f3e7275b0ef.yaml | 5 + ...fish-raid-set-volume-name-76205f8bb7dd2bb8.yaml | 6 + ...fish-raid-volume-name-fix-187c1b3e9f89cff3.yaml | 7 + ...remove-seqdiag-dependency-bfe9daea763dc0a3.yaml | 9 + .../require-managed-boot-c33e8aa9cba1502c.yaml | 8 + .../notes/temp_url_key_rot-1e7cb004df8c788f.yaml | 25 + ...r-image-server-basic-auth-c2b605aade241901.yaml | 32 + releasenotes/source/2023.2.rst | 6 +- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 5 +- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 159 ---- requirements.txt | 5 +- setup.cfg | 8 +- tox.ini | 10 +- zuul.d/ironic-jobs.yaml | 46 +- zuul.d/metal3-jobs.yaml | 1 + zuul.d/project.yaml | 20 +- 170 files changed, 6228 insertions(+), 1308 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index aa0e212b3..f87070972 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18,2 +17,0 @@ ironic-lib>=5.5.0 # Apache-2.0 -python-swiftclient>=3.2.0 # Apache-2.0 -pytz>=2013.6 # MIT @@ -24,0 +23 @@ oslo.db>=9.1.0 # Apache-2.0 +# TODO(dtantsur): remove rootwrap when we no longer provide ironic-rootwrap CLI @@ -50 +49 @@ openstacksdk>=0.48.0 # Apache-2.0 -sushy>=4.3.0 +sushy>=4.7.0

1 0

manila 17.2.0 (bobcat)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are gleeful to announce the release of: manila 17.2.0: Shared Storage for OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 17.2.0 ^^^^^^ New Features ************ * Add new config option 'service_network_host' for service instance with 'dhss'=True. This helps us to define network host for ports and able to seperate from manila host. Bug Fixes ********* * Changed the error and status code that was raised when share types are not handled in shares api * NetApp driver bug #1982808 (https://bugs.launchpad.net/manila/+bug/1982808) Fixed issue to add the retry logic to delete and release the snapmirror relationship. Delete the vserver pairing when there is no snapmirror relationship exist on source and destination cluster. * The CephFS driver uses a *RemoveExport* DBUS API call to the NFS/Ganesha service when a user deletes an access rule, or when deleting the share. If this call fails, the driver now provides a log of the failure, and continues cleaning up. Prior to this change, share deletion could fail if the service failed the DBUS command to drop the export. This would leave the share with an "error_deleting" status, needing administrator intervention. See bug #2035572 (https://launchpad.net/bugs/2035572) for more information. * bug 2038607 (https://bugs.launchpad.net/manila/+bug/2038607) Fixed parse of the protocol_access_mapping option and the backup_protocol_access_mapping option. This change requires that the values used for these options should be formatted like *key0=[value00, value01],key1=[value10]*. Changes in manila 17.1.0..17.2.0 -------------------------------- d6eed0ea0 Don't fail remove-export in NFS-Ganesha f8b42a41e Fix typo in the release note for bug 2038607 2aa760011 Change status and error handling for /shares API 455881d02 Add service_network_host option for port host cc91e0170 Fix parsing of protocol access mapping options 7f877845a NetApp API failed. Reason - 18177:Relationship is in use by SnapMirror in local cluster Diffstat (except docs and test files) ------------------------------------- manila/api/v1/shares.py | 2 + manila/data/manager.py | 4 +- manila/share/driver.py | 4 +- manila/share/drivers/ganesha/manager.py | 3 ++ .../netapp/dataontap/cluster_mode/lib_multi_svm.py | 28 +++++++++++--- manila/share/drivers/service_instance.py | 7 +++- manila/share/share_types.py | 4 +- .../dataontap/cluster_mode/test_lib_multi_svm.py | 17 ++++++--- ...nge-status-for-shares-api-5dbc4986d032c8e1.yaml | 5 +++ ...ed-relationship-is-in-use-ecc9ede4d7f0f5b9.yaml | 8 ++++ ...remove-export-nfs-ganesha-fd0f8eb1db800d31.yaml | 11 ++++++ ...tocol-access-mapping-opts-e7d61db3e2a84be7.yaml | 8 ++++ .../new-config-option-dhss-4931db193fd76656.yaml | 6 +++ 16 files changed, 153 insertions(+), 26 deletions(-)

1 0

python-manilaclient 4.4.1 (antelope)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are glad to announce the release of: python-manilaclient 4.4.1: Client library for OpenStack Manila API. This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 4.4.1 ^^^^^ Bug Fixes * Fixed default share type lookup associated with the "openstack share create" command. The lookup now resolves default share types correctly even on environments where the default type isn't named "default". See launchpad bug #2030686 (https://launchpad.net/bugs/2030686) for more details. Changes in python-manilaclient 4.4.0..4.4.1 ------------------------------------------- 3abf89d Enable the option to return the response body 6261a1b Fix "test_share_access_show" osc functional test ffaffe4 Fix default share type resolution in OSC 65826d2 [CI] switch to using osc for bootstrap Diffstat (except docs and test files) ------------------------------------- manilaclient/base.py | 9 +++++-- manilaclient/osc/v2/share.py | 4 +-- .../functional/osc/test_share_access_rules.py | 2 +- manilaclient/v2/share_types.py | 6 ++--- manilaclient/v2/shares.py | 29 +++++++++++++--------- ...-fix-default-share-lookup-cc7e592a0dc855e1.yaml | 8 ++++++ roles/populate-manilaclient-config/tasks/main.yaml | 2 +- 9 files changed, 44 insertions(+), 24 deletions(-)

1 0

python-openstackclient 6.5.0 (caracal)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are pleased to announce the release of: python-openstackclient 6.5.0: OpenStack Command-line Client This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. 6.5.0 ^^^^^ New Features * Add "image member get" command which accepts an image_id and member_id and displays the detail of the particular meber associated to the image. * Add the port hardware offload attribute to the "port create" command. Once defined, the value cannot be modified. * The "server create" command now accepts a new option, "--server- group", which is a shortcut for configuring the "group" scheduler hint. Changes in python-openstackclient 6.4.0..6.5.0 ---------------------------------------------- 49ad5282 doc: magnumclient provides a OSC plugin 8a63b510 image: Trivial fixes 2ed10e9a Introduce `schema_version` in the federated attribute mapping API 0725bb47 Add "hardware_offload_type" attribute to "port" 03044eaf doc: Add manilaclient as a OSC plugin f2387601 Revert "Temporarily drop aodhclient from doc build" d4acd4b6 doc: Drop tripleoclient 82c34743 doc: Remove RSD subcommand 810f6919 doc: Remove Searchlight subcommands 1517f4af Explicitly specify namespace fields for output 37b42014 Update python classifier in setup.cfg cc2a0bab Correct error message for "create server --wait" e7bc3d9b Fix --use-prefix-delegation subnet create argument 93b2e66d Adding CLI command for ``glance member-get`` be3d438e trivial: Place positional opts last 1b6b639c network: Clarify purpose of default sg rules ea254061 Doc: Fix volume snapshot commands f3207bdf Fix availability zone list command ce0765fa Fix clearing of dns_domain and description on a network by setting to empty strings 71839eb5 [codespell] fix typos in doc,tests and help messages e9d3a7bb test: Ignore 'OS_' environment variables c08d6e03 parseactions: Use ArgumentError, not ArgumentTypeError 3057997c Remove unnecessary file 432698fe Use CommandError, not SystemExit, to exit 885f5912 compute: Address bug in shelve offload logic 900fad53 tests: Remove unused flag 89a8f729 tests: Enable logging fixture d0d4077e tests: Remove prints 7708106c compute: Add 'server create --server-group' option f43e2ed2 compute: Fix formatting of 'server show' Diffstat (except docs and test files) ------------------------------------- openstackclient/common/availability_zone.py | 8 +- openstackclient/compute/v2/server.py | 272 +++++++++++++-------- openstackclient/identity/v3/mapping.py | 28 ++- openstackclient/identity/v3/policy.py | 4 +- openstackclient/image/v2/image.py | 37 +++ openstackclient/image/v2/metadef_namespaces.py | 46 ++-- openstackclient/image/v2/metadef_objects.py | 56 ++--- openstackclient/image/v2/metadef_properties.py | 98 +++++--- .../network/v2/default_security_group_rule.py | 27 +- openstackclient/network/v2/local_ip_association.py | 2 +- openstackclient/network/v2/ndp_proxy.py | 10 +- openstackclient/network/v2/network.py | 4 +- openstackclient/network/v2/port.py | 30 ++- openstackclient/network/v2/subnet.py | 1 + openstackclient/volume/v2/volume_type.py | 6 +- .../add-image-member-get-25e913ef2b861bf3.yaml | 6 + ...ort-hardware-offload-type-011c98ab748357d7.yaml | 5 + ...erver-create-server-group-a5b630f2a64de28d.yaml | 5 + setup.cfg | 17 +- 48 files changed, 871 insertions(+), 644 deletions(-)

1 0

ironic-python-agent 9.9.0 (caracal)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are amped to announce the release of: ironic-python-agent 9.9.0: Ironic Python Agent Ramdisk This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 9.9.0 ^^^^^ New Features ************ * Add support for collecting the cpu socket number. * Supports several comma-separated URLs for "ipa-api-url" and "ipa- inspection-callback-url". The URLs are probed in the provided order until one does not return a connection error. The primary use case it to support deploying nodes with only one IP stack from an Ironic installation that has both stacks. Bug Fixes ********* * Fixes missing "Content-Type" header when sending inspection data back to ironic-inspector or ironic. While ironic-inspector tolerates the missing header, it may cause issues with the new inspection implementation. * Fixes referencing to raid_device variable before assignment, is replaced by blk variable. * Adds random jitter to retried heartbeats after Ironic returns an error. Previously, heartbeats would be retried after 5 seconds, potentially causing a thundering herd problem if many nodes fail to heartbeat at the same time. * Inspection is now retried on HTTP 409 (conflict), which can be returned by the new implementation in Ironic. * Fixes the post data to inspector to retry in 50X errors. Changes in ironic-python-agent 9.8.0..9.9.0 ------------------------------------------- 0010f5c Also retry inspection on HTTP CONFLICT 0ef3397 [codespell] Adding git-blame-ignore-revs to clear codespell changes 9cafe76 Add support for reporting CPU socket number b928b66 [Codespell] Adding tox target to CI (Non-Voting) dcf12d1 Update python classifier in setup.cfg 0d4ae97 Support several API and Inspector URLs 2bb7452 Add missing headers to the inspection callback dcaed43 Update to latest pep8/code style versions 4a1acae Add tox target and configuration for codespell 36e5993 [codespell] Fix spelling issues in IPA 921cf26 Remove deprecated pbr options d342315 Remove unnecessary egg_info options 03b6b0a Fix inspector retries to not take a long time 91b7ae9 Reformat and update the section on injecting root credentials 2ab8364 Add a jitter to heartbeat retries 801da9e Retry in ProxyError during post inspector data c57deb7 Revert "Fix vmedia network config drive handling" f803308 Fix referencing to the raid_device var which is not set 352df0b Parse efibootmgr type and details c23c913 docs: improve rootpwd password generation command 33f01fa Fix vmedia network config drive handling Diffstat (except docs and test files) ------------------------------------- .git-blame-ignore-revs | 1 + examples/vendor-device/example_device.py | 4 +- ironic_python_agent/agent.py | 153 +++++++++++----- ironic_python_agent/cmd/agent.py | 15 +- ironic_python_agent/config.py | 13 +- ironic_python_agent/efi_utils.py | 13 +- ironic_python_agent/errors.py | 2 +- ironic_python_agent/extensions/image.py | 17 +- ironic_python_agent/extensions/standby.py | 14 +- ironic_python_agent/hardware.py | 34 ++-- ironic_python_agent/inspect.py | 2 +- ironic_python_agent/inspector.py | 42 ++++- ironic_python_agent/ironic_api_client.py | 68 ++++--- ironic_python_agent/partition_utils.py | 2 +- ironic_python_agent/raid_utils.py | 2 +- ironic_python_agent/utils.py | 10 +- ...ata-check-to-secure-erase-caebba4f25821575.yaml | 2 +- ...all-failure-to-be-ignored-b99667b13afa9759.yaml | 4 +- ...artbeat-connection-errors-2af152bf2d7928e2.yaml | 2 +- .../collect-cpu-sockets-0dbc09a1ebccfe77.yaml | 4 + .../notes/content-type-f4d5ab15adf37252.yaml | 6 + .../notes/deprecate-coreos-8b01bcf796c0dc54.yaml | 2 +- .../notes/fallback-to-findfs-59abde55221e1e84.yaml | 2 +- .../fix-raid_device-not-set-8b03688ce83ce22e.yaml | 5 + .../notes/heartbeat-jitter-620bbcba591d2894.yaml | 7 + .../notes/inspection-409-69d5bd6c2a49d2ec.yaml | 5 + .../inspector-retry-502-2b286e2ccc64c195.yaml | 4 + .../notes/multipath-handling-00a5b412d2cf2e4e.yaml | 2 +- .../notes/several-urls-9c3b8c14338b06ba.yaml | 8 + ...d-node-conflict-is-locked-2ea21dd45abfe4f7.yaml | 2 +- setup.cfg | 16 +- tox.ini | 17 +- zuul.d/ironic-python-agent-jobs.yaml | 7 + zuul.d/project.yaml | 2 + 50 files changed, 637 insertions(+), 294 deletions(-)

1 0

ironic-tempest-plugin 2.8.0 (caracal)
by no-reply＠openstack.org 01 Feb '24

01 Feb '24

We are ecstatic to announce the release of: ironic-tempest-plugin 2.8.0: Tempest plugin for ironic and ironic- inspector This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-tempest-plugin Download the package from: https://tarballs.openstack.org/ironic-tempest-plugin/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic For more details, please see below. Changes in ironic-tempest-plugin xena-last..2.8.0 ------------------------------------------------- 638dcb7 Ensure scope logic is enforced 95b901c Add negative tests for VIF attach/detach operations d8e25ec Add snmp variant of ramdisk iso boot test 793608a Add test for dhcp-less vmedia based deployment caae7cc CI: Update job config for 2023.2 being a stable branch 1e52960 Cleanup py27 support Diffstat (except docs and test files) ------------------------------------- ironic_tempest_plugin/config.py | 23 ++- .../ironic_standalone/test_advanced_ops.py | 149 +++++++++++++++++ .../scenario/ironic_standalone/test_ramdisk_iso.py | 28 +++- setup.py | 9 -- zuul.d/project.yaml | 47 +++--- zuul.d/stable-jobs.yaml | 45 ++++++ 8 files changed, 557 insertions(+), 53 deletions(-)

1 0