September 2024 - Release-announce

neutron-vpnaas 25.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for neutron-vpnaas for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron-vpnaas/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/neutron-vpnaas/src/branch/stable/dalmatian Release notes for neutron-vpnaas can be found at: https://docs.openstack.org/releasenotes/neutron-vpnaas/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron/+bugs and tag it *dalmatian-rc-potential* to bring it to the neutron-vpnaas release crew's attention.

1 0

networking-bgpvpn 21.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for networking-bgpvpn for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/networking-bgpvpn/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/networking-bgpvpn/src/branch/stable/dalmatian Release notes for networking-bgpvpn can be found at: https://docs.openstack.org/releasenotes/networking-bgpvpn/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/bgpvpn/+bugs and tag it *dalmatian-rc-potential* to bring it to the networking-bgpvpn release crew's attention.

1 0

kolla 16.6.0 (antelope)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We are happy to announce the release of: kolla 16.6.0: Kolla OpenStack Deployment This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 16.6.0 ^^^^^^ Bug Fixes * Apache services like Keystone now started with correct unicode locale. Keystone under Apache on Ubuntu will fail with a UnicodeEncodeError when LDAP driver and DEBUG are enabled. LP#2076453 * Fixes an issue where kolla-toolbox will fail to build due to mismatched rabbitmq-server dependencies. LP#2066171 Changes in kolla 16.5.0..16.6.0 ------------------------------- 3a39a79ee keystone: Fix requests-kerberos installation 0d55fe0f7 CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs a7a602b9b Configure Apache services to use correct locale 343e0bc40 Build RabbitMQ 3.11, 3.12 and 3.13 in 2023.1 0f6b1a2c7 Move apt_prefs pins to respective images Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 3 --- .../kolla-toolbox/apt_preferences_rabbitmq.debian | 1 + .../kolla-toolbox/apt_preferences_rabbitmq.ubuntu | 1 + .../rabbitmq-3-12/apt_preferences_rabbitmq.debian | 7 ++++++ .../rabbitmq-3-12/apt_preferences_rabbitmq.ubuntu | 7 ++++++ .../rabbitmq-3-12/rabbitmq_packages_rpm.centos | 4 ++++ .../rabbitmq-3-12/rabbitmq_packages_rpm.rocky | 4 ++++ .../rabbitmq-3-13/apt_preferences_rabbitmq.debian | 7 ++++++ .../rabbitmq-3-13/apt_preferences_rabbitmq.ubuntu | 7 ++++++ .../rabbitmq-3-13/rabbitmq_packages_rpm.centos | 4 ++++ .../rabbitmq-3-13/rabbitmq_packages_rpm.rocky | 4 ++++ .../rabbitmq/apt_preferences_rabbitmq.debian | 7 ++++++ .../rabbitmq/apt_preferences_rabbitmq.ubuntu | 7 ++++++ .../rabbitmq/{ => rabbitmq}/healthcheck_rabbitmq | 0 .../rabbitmq/rabbitmq/rabbitmq_packages_rpm.centos | 4 ++++ .../rabbitmq/rabbitmq/rabbitmq_packages_rpm.rocky | 4 ++++ kolla/template/repos.yaml | 28 ++++++++++++++++++---- .../configure-apache-locale-d0150e5881f00e65.yaml | 7 ++++++ ...rences-into-kolla-toolbox-32d7209c4cf1f3c9.yaml | 6 +++++ 32 files changed, 146 insertions(+), 22 deletions(-)

1 0

kolla-ansible 17.5.0 (bobcat)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We are satisfied to announce the release of: kolla-ansible 17.5.0: Ansible Deployment of Kolla containers This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 17.5.0 ^^^^^^ New Features ************ * Modifies public API firewalld rules to be applied immediately to a running firewalld service. This requires firewalld to be running, but avoids reloading firewalld, which is disruptive due to the way in which firewalld builds its firewall chains. Bug Fixes ********* * Fixes an deploy opensearch with enable TLS on the internal VIP. * Fixes handling of openvswitch on "manila-share" nodes. LP#1993285 * Fixes behaviour of Change Password screen in Horizon until bug #2073639 is resolved. LP#2073159 * Fixes the Python requests library issue when using custom CA by adding the REQUESTS_CA environment variable to the kolla-toolbox container. See LP#1967132 * Fixes configuration of CloudKitty when internal TLS is enabled. LP#1998831 * Fixes the detection of the Nova Compute Ironic service when a custom *host* option is set in the service config file. See LP#2056571 * Removes the default */tmp/* mountpoint from the horizon container. This change is made to harden the container and prevent potential security issues. For more information, see the Bug Report: LP#2068126. * Fixes an issue where OVN northbound or southbound database deployment could fail when a new leader is elected. LP#2059124 Changes in kolla-ansible 17.4.0..17.5.0 --------------------------------------- 127db7678 Apply public firewalld rules immediately 5b076458a Add REQUESTS_CA_BUNDLE to kolla-toolbox container b0bb8bc56 hardening horizon: don't mount hosts /tmp 1517c547c Fix issue with Swift Recon middleware 2f1984f91 Fix post-config of OVS for manila-share servers 5eda8fd79 Work around OVN DB leader election race condition d5d3ae3a0 Restart OVS container after hw-offload change d2d846f6f Add /v3 suffix to OPENSTACK_KEYSTONE_URL cfa27ee1d fix flake8 error in database_shards.py 79532d598 Support custom Nova Compute Ironic host names d7ef05780 Support CloudKitty deployment with internal TLS 0594a284c Add ca_path for module uri in opensearch role Diffstat (except docs and test files) ------------------------------------- ansible/roles/cloudkitty/defaults/main.yml | 8 ++-- ansible/roles/cloudkitty/tasks/bootstrap.yml | 3 ++ ansible/roles/common/defaults/main.yml | 1 + ansible/roles/haproxy-config/tasks/main.yml | 7 ++-- ansible/roles/horizon/defaults/main.yml | 1 - ansible/roles/horizon/templates/local_settings.j2 | 3 +- ansible/roles/loadbalancer/handlers/main.yml | 6 --- .../nova-cell/tasks/wait_discover_computes.yml | 2 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 2 +- ansible/roles/opensearch/handlers/main.yml | 2 + ansible/roles/opensearch/tasks/post-config.yml | 4 ++ ansible/roles/openvswitch/tasks/post-config.yml | 4 ++ ansible/roles/ovn-db/defaults/main.yml | 2 + ansible/roles/ovn-db/tasks/bootstrap-db.yml | 10 +++++ ansible/roles/swift/tasks/start.yml | 2 + kolla_ansible/database_shards.py | 4 +- .../notes/add-opensearch-uri-68a657c55ce9c9f1.yaml | 4 ++ .../notes/bug-1993285-127fe764e461465a.yaml | 5 +++ .../notes/bug-2073159-c54c773c72c8fb11.yaml | 6 +++ .../notes/bug-923105-d451a78930973a82.yaml | 7 ++++ .../cloudkitty-internal-tls-c3e18be2a9f95c5d.yaml | 5 +++ .../firewalld-immediate-c2abf09977c455a9.yaml | 7 ++++ ...ompute-ironic-host-option-a7a3f6ae095f5201.yaml | 6 +++ .../harden_horizon_tmp_usage-0d690e49645b99a8.yaml | 6 +++ ...round-ovn-leader-election-f7f75e93e9300d96.yaml | 6 +++ 26 files changed, 136 insertions(+), 20 deletions(-)

1 0

neutron-vpnaas-dashboard 11.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for neutron-vpnaas-dashboard for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron-vpnaas-dashboard/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/neutron-vpnaas-dashboard/src/branch/stable/da… Release notes for neutron-vpnaas-dashboard can be found at: https://docs.openstack.org/releasenotes/neutron-vpnaas-dashboard/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron-vpnaas-dashboard/+bugs and tag it *dalmatian-rc-potential* to bring it to the neutron-vpnaas-dashboard release crew's attention.

1 0

neutron-fwaas-dashboard 8.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for neutron-fwaas-dashboard for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron-fwaas-dashboard/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/neutron-fwaas-dashboard/src/branch/stable/dal… Release notes for neutron-fwaas-dashboard can be found at: https://docs.openstack.org/releasenotes/neutron-fwaas-dashboard/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron-fwaas-dashboard/+bugs and tag it *dalmatian-rc-potential* to bring it to the neutron-fwaas-dashboard release crew's attention.

1 0

kayobe 15.5.0 (bobcat)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We are psyched to announce the release of: kayobe 15.5.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Adds support for specifying "boot_firmware" and "machine" variables to seed and infra VMs. This can be used to launch VMs in UEFI boot mode with Q35 machine type. * Bumps stackhpc.libvirt-vm Ansible role to "v1.16.1". Bug Fixes ********* * "eos_config" does not support the "provider" parameter since Ansible 7. Users are required to update their configuration according to Arista EOS documentation (https://docs.openstack.org/kayobe/latest/configuration/reference /physical-network.html#arista-eos). * Fixes a bug where systemd-networkd was not permanently enabled when the unit was already in state "runtime-enabled". LP#2073100 Changes in kayobe 15.4.0..15.5.0 -------------------------------- c642a626 arista-switch: Fix eos_config call e0afd3a3 CI: Add openstack-tox-pep8 job, fix pep8 failures 4fa4445a seed-vm/infra-vms: Add support for EFI and q35 06c7c02c Bump stackhpc.systemd_networkd role to v1.0.6 abf7b293 Stop replacing dashes with underscores for Kolla interfaces Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/infra-vms | 6 ++++++ ansible/inventory/group_vars/all/seed-vm | 6 ++++++ ansible/inventory/group_vars/all/switches/arista | 22 ------------------- ansible/roles/arista-switch/tasks/main.yml | 4 +--- ansible/roles/infra-vms/tasks/deploy.yml | 2 ++ ansible/roles/infra-vms/tasks/destroy.yml | 1 + ansible/seed-vm-deprovision.yml | 15 ++++++++----- ansible/seed-vm-provision.yml | 3 ++- .../configuration/reference/physical-network.rst | 11 ++++------ etc/kayobe/infra-vms.yml | 6 ++++++ etc/kayobe/seed-vm.yml | 6 ++++++ kayobe/plugins/action/kolla_ansible_host_vars.py | 4 ---- .../plugins/action/test_kolla_ansible_host_vars.py | 20 ----------------- playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 7 ++++++ .../notes/bug-2058365-a9acdb3cdf2a29f9.yaml | 7 ++++++ ...systemd-networkd-enabling-10bf4e5f0903c311.yaml | 6 ++++++ ...-infra-vm-boot-fw-machine-096251c45653f98c.yaml | 8 +++++++ requirements.yml | 6 +++--- zuul.d/jobs.yaml | 25 ++++++++++++++++++++++ zuul.d/project.yaml | 3 +++ 21 files changed, 105 insertions(+), 69 deletions(-)

1 0

kayobe 14.7.0 (antelope)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We are tickled pink to announce the release of: kayobe 14.7.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 14.7.0 ^^^^^^ New Features ************ * Adds support for specifying "boot_firmware" and "machine" variables to seed and infra VMs. This can be used to launch VMs in UEFI boot mode with Q35 machine type. * Bumps stackhpc.libvirt-vm Ansible role to "v1.16.1". Bug Fixes ********* * "eos_config" does not support the "provider" parameter since Ansible 7. Users are required to update their configuration according to Arista EOS documentation (https://docs.openstack.org/kayobe/latest/configuration/reference /physical-network.html#arista-eos). * Fixes a bug where systemd-networkd was not permanently enabled when the unit was already in state "runtime-enabled". LP#2073100 Changes in kayobe 14.6.0..14.7.0 -------------------------------- afacd339 arista-switch: Fix eos_config call ace210f9 seed-vm/infra-vms: Add support for EFI and q35 07047917 Bump stackhpc.systemd_networkd role to v1.0.6 ff60f19a Stop replacing dashes with underscores for Kolla interfaces Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/infra-vms | 6 ++++++ ansible/inventory/group_vars/all/seed-vm | 6 ++++++ ansible/inventory/group_vars/all/switches/arista | 22 ------------------- ansible/roles/arista-switch/tasks/main.yml | 4 +--- ansible/roles/infra-vms/tasks/deploy.yml | 2 ++ ansible/roles/infra-vms/tasks/destroy.yml | 1 + ansible/seed-vm-deprovision.yml | 15 ++++++++----- ansible/seed-vm-provision.yml | 3 ++- .../configuration/reference/physical-network.rst | 11 ++++------ etc/kayobe/infra-vms.yml | 6 ++++++ etc/kayobe/seed-vm.yml | 6 ++++++ kayobe/plugins/action/kolla_ansible_host_vars.py | 4 ---- .../plugins/action/test_kolla_ansible_host_vars.py | 20 ----------------- playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 7 ++++++ .../notes/bug-2058365-a9acdb3cdf2a29f9.yaml | 7 ++++++ ...systemd-networkd-enabling-10bf4e5f0903c311.yaml | 6 ++++++ ...-infra-vm-boot-fw-machine-096251c45653f98c.yaml | 8 +++++++ requirements.yml | 6 +++--- zuul.d/jobs.yaml | 25 ++++++++++++++++++++++ zuul.d/project.yaml | 2 ++ 20 files changed, 102 insertions(+), 65 deletions(-)

1 0

kolla-ansible 16.7.0 (antelope)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We exuberantly announce the release of: kolla-ansible 16.7.0: Ansible Deployment of Kolla containers This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 16.7.0 ^^^^^^ New Features ************ * Modifies public API firewalld rules to be applied immediately to a running firewalld service. This requires firewalld to be running, but avoids reloading firewalld, which is disruptive due to the way in which firewalld builds its firewall chains. * Added a command to upgrade to a target version of RabbitMQ. This is required before a SLURP upgrade. See the docs for more details: https://docs.openstack.org/kolla-ansible/latest/reference/message- queues/rabbitmq.html#slurp Bug Fixes ********* * Fixes an deploy opensearch with enable TLS on the internal VIP. * Fixes handling of openvswitch on "manila-share" nodes. LP#1993285 * Fixes behaviour of Change Password screen in Horizon until bug #2073639 is resolved. LP#2073159 * Fixes the Python requests library issue when using custom CA by adding the REQUESTS_CA environment variable to the kolla-toolbox container. See LP#1967132 * Fixes configuration of CloudKitty when internal TLS is enabled. LP#1998831 * Fixes the dimensions comparison when we set values like *1g* in the container dimensions configuration, making the docker container getting restarted even with no changes, as we are comparing *1g* with *1073741824*, which is displayed in the docker inspect while *1g* is in the configuration. * Fixes the detection of the Nova Compute Ironic service when a custom *host* option is set in the service config file. See LP#2056571 * Removes the default */tmp/* mountpoint from the horizon container. This change is made to harden the container and prevent potential security issues. For more information, see the Bug Report: LP#2068126. * Fixes an issue where OVN northbound or southbound database deployment could fail when a new leader is elected. LP#2059124 Changes in kolla-ansible 16.6.0..16.7.0 --------------------------------------- 13918ee58 Apply public firewalld rules immediately 36ca3b0d1 Add REQUESTS_CA_BUNDLE to kolla-toolbox container 4b6508724 hardening horizon: don't mount hosts /tmp dfd4eef81 Add command to upgrade to a target version of RMQ 14a21976a Fix issue with Swift Recon middleware 6d94a5017 Fix post-config of OVS for manila-share servers eced788ab Work around OVN DB leader election race condition 558f6c298 Restart OVS container after hw-offload change e8aa5d212 Add /v3 suffix to OPENSTACK_KEYSTONE_URL 97bcdedda fix flake8 error in database_shards.py c2693987a Support custom Nova Compute Ironic host names b40fabc6e Support CloudKitty deployment with internal TLS 58683d056 Fix the docker container dimensions comparison for short notation 73415f862 Add ca_path for module uri in opensearch role Diffstat (except docs and test files) ------------------------------------- ansible/module_utils/kolla_container_worker.py | 79 ++++++++++++++++++++-- ansible/rabbitmq-upgrade.yml | 21 ++++++ ansible/roles/cloudkitty/defaults/main.yml | 8 +-- ansible/roles/cloudkitty/tasks/bootstrap.yml | 3 + ansible/roles/common/defaults/main.yml | 1 + ansible/roles/haproxy-config/tasks/main.yml | 7 +- ansible/roles/horizon/defaults/main.yml | 1 - ansible/roles/horizon/templates/local_settings.j2 | 3 +- ansible/roles/loadbalancer/handlers/main.yml | 6 -- .../nova-cell/tasks/wait_discover_computes.yml | 2 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 2 +- ansible/roles/opensearch/handlers/main.yml | 2 + ansible/roles/opensearch/tasks/post-config.yml | 4 ++ ansible/roles/openvswitch/tasks/post-config.yml | 4 ++ ansible/roles/ovn-db/defaults/main.yml | 2 + ansible/roles/ovn-db/tasks/bootstrap-db.yml | 10 +++ ansible/roles/rabbitmq/defaults/main.yml | 2 + ansible/roles/swift/tasks/start.yml | 2 + kolla_ansible/database_shards.py | 4 +- .../notes/add-opensearch-uri-68a657c55ce9c9f1.yaml | 4 ++ .../notes/bug-1993285-127fe764e461465a.yaml | 5 ++ .../notes/bug-2073159-c54c773c72c8fb11.yaml | 6 ++ .../notes/bug-923105-d451a78930973a82.yaml | 7 ++ .../cloudkitty-internal-tls-c3e18be2a9f95c5d.yaml | 5 ++ .../firewalld-immediate-c2abf09977c455a9.yaml | 7 ++ ...ges-when-using-dimensions-ad94b657b6c29cfc.yaml | 10 +++ ...ompute-ironic-host-option-a7a3f6ae095f5201.yaml | 6 ++ .../harden_horizon_tmp_usage-0d690e49645b99a8.yaml | 6 ++ ...mq-target-upgrade-command-d5f9d9fc27fa28f8.yaml | 6 ++ ...round-ovn-leader-election-f7f75e93e9300d96.yaml | 6 ++ tools/kolla-ansible | 8 +++ 34 files changed, 372 insertions(+), 25 deletions(-)

1 0

barbican 16.0.1 (antelope)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We are chuffed to announce the release of: barbican 16.0.1: OpenStack Secure Key Management This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. 16.0.1 ^^^^^^ Security Issues * System scope has been removed from the RBAC policies as specified in the Consistent and Secure Default RBAC community goal. See: https://governance.openstack.org/tc/goals/selected/consistent-and- secure-rbac.html APIs that required system scoped tokens can now be accessed by using a project scoped token with the "admin" role. Changes in barbican 16.0.0..16.0.1 ---------------------------------- 9c8fb8c3 Update secret:delete policy to allow admin to delete secret 2f3df026 Remove System scope from policy b38b2139 Fix functional tests e2bd3b95 Stable-only: Remove TripleO job b5c2f838 Update TOX_CONSTRAINTS_FILE for stable/2023.1 441f7d47 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 10 ++------ barbican/common/policies/base.py | 7 ------ barbican/common/policies/consumers.py | 28 +++++++++++----------- barbican/common/policies/quotas.py | 12 +++++----- barbican/common/policies/secrets.py | 6 +++-- barbican/common/policies/secretstores.py | 8 +++---- barbican/common/policies/transportkeys.py | 12 +++++----- ...-system-scope-from-policy-f2f68c42c0742812.yaml | 8 +++++++ tox.ini | 12 ++++++---- 10 files changed, 53 insertions(+), 51 deletions(-)

1 0