September 2024 - Release-announce

networking-sfc 19.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for networking-sfc for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/networking-sfc/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/networking-sfc/src/branch/stable/dalmatian Release notes for networking-sfc can be found at: https://docs.openstack.org/releasenotes/networking-sfc/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/networking-sfc/+bugs and tag it *dalmatian-rc-potential* to bring it to the networking-sfc release crew's attention.

1 0

tap-as-a-service 14.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for tap-as-a-service for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/tap-as-a-service/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/tap-as-a-service/src/branch/stable/dalmatian Release notes for tap-as-a-service can be found at: https://docs.openstack.org/releasenotes/tap-as-a-service/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/tap-as-a-service/+bugs and tag it *dalmatian-rc-potential* to bring it to the tap-as-a-service release crew's attention.

1 0

networking-bagpipe 21.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for networking-bagpipe for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/networking-bagpipe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/networking-bagpipe/src/branch/stable/dalmatian Release notes for networking-bagpipe can be found at: https://docs.openstack.org/releasenotes/networking-bagpipe/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/networking-bagpipe/+bugs and tag it *dalmatian-rc-potential* to bring it to the networking-bagpipe release crew's attention.

1 0

glance 29.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for glance for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/glance/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/glance/src/branch/stable/dalmatian Release notes for glance can be found at: https://docs.openstack.org/releasenotes/glance/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/glance/+bugs and tag it *dalmatian-rc-potential* to bring it to the glance release crew's attention.

1 0

kolla 18.2.0 (caracal)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We are glad to announce the release of: kolla 18.2.0: Kolla OpenStack Deployment This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 18.2.0 ^^^^^^ Bug Fixes * Apache services like Keystone now started with correct unicode locale. Keystone under Apache on Ubuntu will fail with a UnicodeEncodeError when LDAP driver and DEBUG are enabled. LP#2076453 * Fixed a bug preventing image builds when requirements are provided from git type source. LP#2074075 * Fixes an issue where kolla-toolbox will fail to build due to mismatched rabbitmq-server dependencies. LP#2066171 Changes in kolla 18.1.0..18.2.0 ------------------------------- 4df43abd7 Fix symlinking of openstack-base source 9c54f236b keystone: Fix requests-kerberos installation 08f6b89cc CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs 7bc03b99f Configure Apache services to use correct locale 6f755f9e7 Trivial fix letsencrypt base image 14081a825 Pass rabbitmq apt preferences into kolla-toolbox Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 3 --- .zuul.d/rocky.yaml | 3 --- .zuul.d/ubuntu.yaml | 3 --- .../notes/configure-apache-locale-d0150e5881f00e65.yaml | 7 +++++++ releasenotes/notes/fix-git-build-23c8fe6c4b0d92c4.yaml | 6 ++++++ ...s-rmq-preferences-into-kolla-toolbox-32d7209c4cf1f3c9.yaml | 6 ++++++ 13 files changed, 51 insertions(+), 18 deletions(-)

1 0

neutron-dynamic-routing 25.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for neutron-dynamic-routing for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron-dynamic-routing/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/neutron-dynamic-routing/src/branch/stable/dal… Release notes for neutron-dynamic-routing can be found at: https://docs.openstack.org/releasenotes/neutron-dynamic-routing/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron/+bugs and tag it *dalmatian-rc-potential* to bring it to the neutron-dynamic-routing release crew's attention.

1 0

kayobe 16.2.0 (caracal)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We are stoked to announce the release of: kayobe 16.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://bugs.launchpad.net/kayobe/+bugs For more details, please see below. 16.2.0 ^^^^^^ New Features ************ * Adds support for specifying "boot_firmware" and "machine" variables to seed and infra VMs. This can be used to launch VMs in UEFI boot mode with Q35 machine type. * Bumps stackhpc.libvirt-vm Ansible role to "v1.16.1". Bug Fixes ********* * "eos_config" does not support the "provider" parameter since Ansible 7. Users are required to update their configuration according to Arista EOS documentation (https://docs.openstack.org/kayobe/latest/configuration/reference /physical-network.html#arista-eos). * Fixes a bug where systemd-networkd was not permanently enabled when the unit was already in state "runtime-enabled". LP#2073100 Changes in kayobe 16.1.0..16.2.0 -------------------------------- d05484b5 arista-switch: Fix eos_config call dda83ae0 seed-vm/infra-vms: Add support for EFI and q35 022b2be9 CI: Add openstack-tox-pep8 job, fix pep8 failures c866ceb2 Stop replacing dashes with underscores for Kolla interfaces 688f3775 Bump stackhpc.linux collection to v1.2.3 Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/infra-vms | 6 ++++++ ansible/inventory/group_vars/all/seed-vm | 6 ++++++ ansible/inventory/group_vars/all/switches/arista | 22 ------------------- ansible/roles/arista-switch/tasks/main.yml | 4 +--- ansible/roles/infra-vms/tasks/deploy.yml | 2 ++ ansible/roles/infra-vms/tasks/destroy.yml | 1 + ansible/seed-vm-deprovision.yml | 15 ++++++++----- ansible/seed-vm-provision.yml | 3 ++- .../configuration/reference/physical-network.rst | 11 ++++------ etc/kayobe/infra-vms.yml | 6 ++++++ etc/kayobe/seed-vm.yml | 6 ++++++ kayobe/cli/commands.py | 23 ++++++++++++++------ kayobe/plugins/action/kolla_ansible_host_vars.py | 4 ---- .../plugins/action/test_kolla_ansible_host_vars.py | 20 ----------------- playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 7 ++++++ .../notes/bug-2058365-a9acdb3cdf2a29f9.yaml | 7 ++++++ ...systemd-networkd-enabling-10bf4e5f0903c311.yaml | 6 ++++++ ...-infra-vm-boot-fw-machine-096251c45653f98c.yaml | 8 +++++++ requirements.yml | 6 +++--- zuul.d/jobs.yaml | 25 ++++++++++++++++++++++ zuul.d/project.yaml | 3 +++ 22 files changed, 120 insertions(+), 73 deletions(-)

1 0

neutron-fwaas 21.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for neutron-fwaas for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron-fwaas/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/neutron-fwaas/src/branch/stable/dalmatian Release notes for neutron-fwaas can be found at: https://docs.openstack.org/releasenotes/neutron-fwaas/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron/+bugs and tag it *dalmatian-rc-potential* to bring it to the neutron-fwaas release crew's attention.

1 0

zaqar 19.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for zaqar for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/zaqar/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/zaqar/src/branch/stable/dalmatian Release notes for zaqar can be found at: https://docs.openstack.org/releasenotes/zaqar/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/zaqar/+bugs and tag it *dalmatian-rc-potential* to bring it to the zaqar release crew's attention.

1 0

ansible-role-lunasa-hsm 8.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for ansible-role-lunasa-hsm for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/ansible-role-lunasa-hsm/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/ansible-role-lunasa-hsm/src/branch/stable/dal… Release notes for ansible-role-lunasa-hsm can be found at: https://docs.openstack.org/releasenotes/ansible-role-lunasa-hsm/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/1180 and tag it *dalmatian-rc-potential* to bring it to the ansible-role-lunasa-hsm release crew's attention.

1 0

venus 5.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for venus for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/venus/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/venus/src/branch/stable/dalmatian Release notes for venus can be found at: https://docs.openstack.org/releasenotes/venus/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/openstack-venus/+bugs and tag it *dalmatian-rc-potential* to bring it to the venus release crew's attention.

1 0

ansible-role-atos-hsm 8.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for ansible-role-atos-hsm for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/ansible-role-atos-hsm/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/ansible-role-atos-hsm/src/branch/stable/dalma… Release notes for ansible-role-atos-hsm can be found at: https://docs.openstack.org/releasenotes/ansible-role-atos-hsm/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/1183 and tag it *dalmatian-rc-potential* to bring it to the ansible-role-atos-hsm release crew's attention.

1 0

barbican 19.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for barbican for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/barbican/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/barbican/src/branch/stable/dalmatian Release notes for barbican can be found at: https://docs.openstack.org/releasenotes/barbican/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/barbican/+bugs and tag it *dalmatian-rc-potential* to bring it to the barbican release crew's attention.

1 0

zaqar-ui 17.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for zaqar-ui for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/zaqar-ui/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/zaqar-ui/src/branch/stable/dalmatian Release notes for zaqar-ui can be found at: https://docs.openstack.org/releasenotes/zaqar-ui/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/zaqar-ui/+bugs and tag it *dalmatian-rc-potential* to bring it to the zaqar-ui release crew's attention.

1 0

octavia-dashboard 14.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for octavia-dashboard for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/octavia-dashboard/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/octavia-dashboard/src/branch/stable/dalmatian Release notes for octavia-dashboard can be found at: https://docs.openstack.org/releasenotes/octavia-dashboard/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/octavia-dashboard and tag it *dalmatian-rc-potential* to bring it to the octavia-dashboard release crew's attention.

1 0

python-openstackclient 7.1.0 (dalmatian)
by no-reply＠openstack.org 11 Sep '24

11 Sep '24

We enthusiastically announce the release of: python-openstackclient 7.1.0: OpenStack Command-line Client This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. Changes in python-openstackclient 7.0.0..7.1.0 ---------------------------------------------- 25780e80 identity: Use previous naming for 'service show' fields 0e731cd2 identity: Use previous naming for 'application credential show' fields 4a2fd82b compute: Make 'hypervisor show' a bit faster 04ebe085 compute: Add 'uuid' column to aggregate list b8459c57 compute: Only pass admin_password on rebuild if set 6693f555 quota: Allow 'quota set' to function without volume service 5238394e Bump requests minimal version aa88db94 Add callback on plugin load failure f885a474 Add Python 3.12 classifier 7eccd403 Show Created At column for volume backups Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 8 +- openstackclient/common/clientmanager.py | 52 ++++------ openstackclient/common/limits.py | 7 +- openstackclient/common/quota.py | 51 +++++----- openstackclient/compute/v2/aggregate.py | 52 +++++----- openstackclient/compute/v2/hypervisor.py | 8 +- openstackclient/compute/v2/server.py | 7 +- .../identity/v3/application_credential.py | 34 +++---- openstackclient/identity/v3/service.py | 10 +- ...me-backup-created-at-list-b49ec893ae1f6b0d.yaml | 4 + .../identity/v3/test_application_credential.py | 14 +-- .../identity/v3/test_registered_limit.py | 2 +- .../identity/v3/test_application_credential.py | 34 +++---- openstackclient/volume/v2/volume_backup.py | 2 + ...ggregate-list-uuid-column-808a0d051006a5ef.yaml | 5 + requirements.txt | 2 +- setup.cfg | 1 + 26 files changed, 289 insertions(+), 254 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3c494d98..c31de42a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15 +15 @@ python-cinderclient>=3.3.0 # Apache-2.0 -requests>=2.14.2 # Apache-2.0 +requests>=2.27.0 # Apache-2.0

1 0

tempest 40.0.0 (dalmatian)
by no-reply＠openstack.org 09 Sep '24

09 Sep '24

We are happy to announce the release of: tempest 40.0.0: OpenStack Integration Testing This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 40.0.0 ^^^^^^ Prelude ******* This is an intermediate release during the 2024.2 Dalmatian development cycle to make new functionality available to plugins and other consumers. New Features ************ * Added a new config option in the *image* section, *http_qcow2_image*, which will use *qcow2* format image to download from the external source specified and use it for image conversion in glance tests. By default it will download *http://download .cirros-cloud.net/0.6.2/cirros-0.6.2-x86_64-disk.img* * Add new config option 'enable_volume_image_dep_tests' in section [volume-feature-enabled] which should be used in image<->volume<->snapshot dependency tests. * Adds API calls for traits in ResourceProvidersClient. * Adds API calls for traits in PlacementClient. * Add a new config option *[compute]/target_hosts_to_avoid* which will filter out any hypervisor candidates with a hostname that matches the provided pattern when determining target hosts for migration. Upgrade Notes ************* * The "attr" decorator is no longer available in the "tempest.test" module. Use the "tempest.lib.decorators" module instead. * Default value of the "[service_available] neutron" option has been updated from "False" to "True". * All tests which require network features are now skipped when the "[service_available] neutron" option is set to "False" * Changed the default value of 'http_image' config option in the 'image' group to 'http://download.cirros- cloud.net/0.6.2/cirros-0.6.2-x86_64-uec.tar.gz' from 'http://download.cirros- cloud.net/0.3.1/cirros-0.3.1-x86_64-uec.tar.gz' as former image is very old and we should always use latest one. * Tests for identity v2 API have been removed. Deprecation Notes ***************** * The following options have been formally deprecated. These options were used to test identity v2 API which was removed during Queens cycle. The tests for identity v2 API were removed from tempest and these options have no effect. * "[identity] uri" * "[identity] v2_admin_endpoint_type" * "[identity] v2_public_endpoint_type" * "[identity-feature-enabled] api_v2_admin" * The following options have been deprecated because only identity v3 API is used. * "[identity] auth_version" * "[identity-feature-enabled] api_v3" Changes in tempest zed-last..40.0.0 ----------------------------------- b7ab42af3 Use stable constraint in tox to release Tempest new tag 3ba975fce Add release notes for 2024.2 cycle intermediate release df14157e3 Fix misuse of assertIsNone 3d41c31a0 Skip the glance vmdk-footer test for now f6bb9d1e4 Support proper image import ISO format testing 32da46943 Allow nova vmdk-footer test to pass 9d8d631bd Add configurable hostname pattern to filter hosts e248a157c Skip iso image import testing for now eccd82f31 Add compute image format test e8efa4f94 Test image formats with import 97ef28694 Test image formats 0795166ad Fix cleanup of keypairs for --prefix option 7a39bc155 Add early failure detection in devstack-tempest-ipv6 a4a48b2f2 Add early failure detection for tempest base job b73ead02d Switch the default disk and container formats to bare/qcow2 953940288 Add wait for location import task e27a9d622 Add test to verify hostname allows FQDN c0c90279c Drop identity v2 api tests 69f622b10 Fix unit tests cleanup for --resource-list option 9eea03cd5 Update http_image config option to use latest image cfdbbb0ac Reno for http_qcow2_image config option 9aa4144e3 Introduce new config parameter to download qcow2 image e1451f4ae Provid raw disk-format to images which uses raw data f207d29e3 extend tempest-integrated-compute and tempest-full-py3 ea914a22e Test image <-> volume <-> server dependency 277971263 Allow visibility of external subnet as shared ones 6587e780d Adds placement resource provider traits API calls 3c3985c2e Adds placement trait api calls 6618aa253 Modify mounting paths 4bd81f8b1 Fix enable-volume-image-dep-tests config option 1be8cabb4 Add image dependencies test for image <-> instance snapshot 4f9d73592 Use 'tempest run --slowest' in integrated-compute (again) 8280f4348 Create independent mount path for each device 89a6811cd Bump http_timeout in devstack-tempest cbd089780 Add releasenote page for v39.0.0 f696d83c4 Log request-id in test_delete_server_while_in_verify_resize_state test a4f57d3db Use service_available option to detect Neutron fb1163865 Validate [validation] ssh_key_type at config layer c87c6a154 Fix missing space in parameter description 2f9eb20ad Switch back the tox constraint to master 033f78a4b Remove deprecated alias of test decorators (2/2) Diffstat (except docs and test files) ------------------------------------- ...24.2-intermediate-release-2a9f305375fcb462.yaml | 5 + ...qcow2_image-config-option-a9dca410897c3044.yaml | 8 + ...provider-traits-api-calls-9f4b0455afec9afb.yaml | 4 + ...lacement-traits-api-calls-087061f5455f0b12.yaml | 4 + .../add-target-host-filter-94803e93b701d052.yaml | 6 + ...anup-attr-decorator-alias-78ce21eb20d87e01.yaml | 5 + ...enable-neutron-by-default-57b87a20acc1ac47.yaml | 9 + ...mage-default-value-change-476622e984e16ab5.yaml | 7 + releasenotes/source/index.rst | 1 + releasenotes/source/v39.0.0.rst | 6 + requirements.txt | 1 + tempest/api/compute/admin/test_hosts.py | 5 +- tempest/api/compute/base.py | 33 ++- tempest/api/compute/servers/test_create_server.py | 75 ++++++ tempest/api/compute/servers/test_delete_server.py | 13 +- tempest/api/compute/servers/test_device_tagging.py | 32 --- tempest/api/compute/servers/test_server_actions.py | 12 + tempest/api/identity/admin/v2/__init__.py | 0 tempest/api/identity/admin/v2/test_endpoints.py | 97 ------- tempest/api/identity/admin/v2/test_roles.py | 121 --------- .../api/identity/admin/v2/test_roles_negative.py | 296 --------------------- tempest/api/identity/admin/v2/test_services.py | 115 -------- .../api/identity/admin/v2/test_tenant_negative.py | 164 ------------ tempest/api/identity/admin/v2/test_tenants.py | 157 ----------- tempest/api/identity/admin/v2/test_tokens.py | 143 ---------- .../api/identity/admin/v2/test_tokens_negative.py | 43 --- tempest/api/identity/admin/v2/test_users.py | 204 -------------- .../api/identity/admin/v2/test_users_negative.py | 286 -------------------- tempest/api/identity/base.py | 79 ------ tempest/api/identity/v2/__init__.py | 0 tempest/api/identity/v2/test_api_discovery.py | 60 ----- tempest/api/identity/v2/test_ec2_credentials.py | 113 -------- tempest/api/identity/v2/test_extension.py | 32 --- tempest/api/identity/v2/test_tenants.py | 52 ---- tempest/api/identity/v2/test_tokens.py | 50 ---- tempest/api/identity/v2/test_users.py | 112 -------- tempest/api/image/base.py | 11 +- tempest/api/image/v2/test_images.py | 4 +- tempest/api/image/v2/test_images_dependency.py | 135 ++++++++++ tempest/api/image/v2/test_images_formats.py | 200 ++++++++++++++ tempest/api/network/test_networks.py | 19 +- tempest/clients.py | 34 --- tempest/cmd/cleanup_service.py | 36 +-- tempest/common/utils/__init__.py | 7 +- tempest/common/utils/linux/remote_client.py | 3 + tempest/common/waiters.py | 13 +- tempest/config.py | 81 ++++-- tempest/lib/common/rest_client.py | 6 +- tempest/lib/services/placement/placement_client.py | 36 +++ .../placement/resource_providers_client.py | 26 ++ tempest/scenario/manager.py | 12 +- .../scenario/test_instances_with_cinder_volumes.py | 25 +- tempest/scenario/test_server_multinode.py | 2 +- tempest/test.py | 6 - .../services/placement/test_placement_client.py | 74 ++++++ .../placement/test_resource_providers_client.py | 37 +++ tox.ini | 2 +- zuul.d/base.yaml | 10 + zuul.d/integrated-gate.yaml | 13 + zuul.d/project.yaml | 6 +- 64 files changed, 978 insertions(+), 2368 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6e6604615..b0df18b29 100644 --- a/requirements.txt +++ b/requirements.txt @@ -25,0 +26 @@ fasteners>=0.16.0 # Apache-2.0 +testscenarios>=0.5.0

1 0

python-zaqarclient 2.8.0 (dalmatian)
by no-reply＠openstack.org 06 Sep '24

06 Sep '24

We are thrilled to announce the release of: python-zaqarclient 2.8.0: Client Library for OpenStack Zaqar Messaging API This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-zaqarclient Download the package from: https://pypi.org/project/python-zaqarclient Please report issues through: https://bugs.launchpad.net/python-zaqarclient/+bugs For more details, please see below. Changes in python-zaqarclient 2.7.0..2.8.0 ------------------------------------------ c0522e2 Fix the CI gate failure b4a6ebe Update master for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 3 files changed, 15 insertions(+), 3 deletions(-)

1 0

octavia 12.0.1 (antelope)
by no-reply＠openstack.org 06 Sep '24

06 Sep '24

We exuberantly announce the release of: octavia 12.0.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 12.0.1 ^^^^^^ Upgrade Notes ************* * A patch that fixes an issue making the VIP port unreachable because of missing IP rules requires an update of the Amphora image. Bug Fixes ********* * Fixed error on update UDP Health Monitor with empty "delay" parameter * Fix the issue, when "limit" parameter in request less or equal 0. Now it returns resources according pagination_max_limit as expected, instead of error. * Fixed an issue when deleting the last listener from a load balancer may trigger a failover. * Fixed an issue when using certificates with a blank subject or missing CN. * The validation for the allowed_cidr parameter only took into account the IP version of the primary VIP. CIDRs which only matched the version of an additonal VIP were rejected. This if fixed and CIDRs are now matched against the IP version of all VIPs. * Fixed a bug in amphorav1, the subnet of a member that was being deleted was not immediately unplugged from the amphora, but only during the next update of the members. * Fixed an issue when adding or deleting a member, Octavia might have reconfigured the management port of the amphora by adding or removing additional subnets. Octavia no longer updates the management port during those tasks. * Fixed a potential race condition in the member batch update API call, the load balancers might not have been locked properly. * Fixed a bug in the amphora-agent, an exception was triggered when a LB with both IPv4 and IPv6 VIPs and with a UDP pool had only IPv4 members or only IPv6 members. * Fixed a potential issue when deleting a load balancer with an amphora that was not fully created, the deletion may have failed when deallocating the VIP port, leaving the load balancer in ERROR state. * Added a validation step in the batch member API request that checks if a member is included multiple times in the list of updated members, this additional check prevents the load balancer from being stuck in PENDING_UPDATE. Duplicate members in the batch member flow triggered an exception in Taskflow. The API now returns 400 (ValidationException) if a member is already present in the body of the request. * Fixed a bug when creating a load balancer and a listener with "allowed_cidrs" with the fully-populated load balancer API, the call was rejected because Octavia could not validate that the IP addresses of the "allowed_cidrs" have the same family as the VIP address. * Fixed the global number of concurrent connections in haproxy when disabling listeners. The connection-limit of disabled listeners was used to compute this value, disabled listeners are now skipped. * Bug fix: The response body of the LB API, when creating a new load balancer, now correctly includes information about the health monitor. Previously, this information was consistently null, despite configuring a health monitor. * Fixed a bug that didn't set all the active load balancer Health Monitors ONLINE in populated LB single-create calls. * Fixed a bug with HTTP/HTTPS health-monitors on pools with ALPN protocols in the amphora-driver. The healthchecks sent by haproxy were flagged as bad requests by the backend servers. Updated haproxy configuration to use ALPN for the heathchecks too. * Fixed a bug that could have made the VIP port unreachable because of the removal of some IP rules in the Amphora. It could have been triggered only when sending a request from a subnet that is not the VIP subnet but that is plugged as a member subnet. * Fix a bug that prevented the operating_status of a health-monitor to be set to ONLINE when ipv6 addresses were enclosed within square brackets in "controller_ip_port_list". * Fixed the issue with session persistence based on source IP not working for IPv6 load balancers. Session persistence now functions properly for IPv4, IPv6 and dual-stack load balancers. * Fixed an issue with load balancers stuck in a "PENDING_*" state during database outages. Now when a task fails in Octavia, it retries to update the "provisioning_status" of the load balancer until the database is back (or it gives up after a really long timeout - around 2h45) * Fixed an issue when using UDP listeners in dual-stack (IPv4 and IPv6) load balancers, some masquerade rules needed by UDP were not correctly set on the member interfaces. * Fixed a potential error when plugging a member from a new network after deleting another member and unplugging its network. Octavia may have tried to plug the new network to a new interface but with an already existing name. This fix requires to update the Amphora image. * Fixed a bug in octavia-status which reported an incorrect status for the *amphorav2* driver when using the default *amphora* alias. * Fixed a bug that didn't set the correct provisioning_status for unattached pools when creating a fully-populated load balancer. * Fixed a race condition in the members batch update API call, the data passed to the Octavia worker service may have been incorrect when quickly sending successive API calls. Then the load balancer was stuck in PENDING_UPDATE provisioning_status. * Fixed an SELinux issues with TCP-based health-monitor on UDP pools, some specific monitoring ports were denied by SELinux. The Amphora image now enables the "keepalived_connect_any" SELinux boolean that allows connections to any ports. * Fixed a too long timeout when attempting to start the VRRP service in an unreachable amphora during a failover. A specific shorter timeout should be used during the failovers. * Fixed TLS-HELLO health-monitors in the amphora-driver. * Fixed a bug with the status of the members of UDP pools in load balancer with IPv4 and IPv6 VIPs. Some members may have been incorrectly reported as DOWN by the Amphora. * Fixed the format of log messages related to quota decrement errors. They displayed unhelpful information, they now report the correct resource type for which the error occurs. * Fix the issue where nf_conntrack* opts values are lost after rebooting the Amphora VM. more details Story 2010795 * When plugging a new member subnet, the amphora sends an IP advertisement of the newly allocated IP. It allows the servers on the same L2 network to flush the ARP entries of a previously allocated IP address. * Reduce the duration of the failovers of ACTIVE_STANDBY load balancers. Many updates of an unreachable amphora may have been attempted during a failover, now if an amphora is not reachable at the first update, the other updates are skipped. * Reduce the duration of the failovers of ACTIVE_STANDBY load balancers when both amphorae are unreachable. Other Notes *********** * Noop certificate manager was added. Now any Octavia certificate operations using noop drivers will be faster (as they won't be validated). Changes in octavia 12.0.0..12.0.1 --------------------------------- f7abb00f Add check for duplicate members in batch update 540e3d34 Fix example policy file system-reader role 3cf3288c Remove grenade jobs [stable/2023.1] ab60d73b Removing tips jobs on stable/2023.1 cb79e7d7 Remove publish-openstack-octavia-amphora-image jobs 0ad935c7 When we failed to load pkcs12 cert print warning f12ddce8 Fix health monitor information retrieval in API response 5704cd97 Fix incorrect masquerade rules in multivip LBs 762b6875 Fix error when deleting LB with broken amp 5d207b15 Fix UDP pool's member status in LB with additional VIPs 19d9b66f Fix error in agent-agent with empty UDP pools in IPv4+IPv6 LBs c863723b Fix IPv6 session persistence failed bd9d474b Fix haproxy global maxconn with disabled listeners f65068f4 Fix quota error messages d943336c Fix fully-populated API with allowed_cidrs cfcc630d Fix negative or 0 limit parameter in pagination 1c7ceff9 Handle empty delay on update healthmonitor 6246cecd Fix the issue of losing nf_conntrace* values after a reboot. d6f32b19 Pin pylint (<=3.0.4) b3cd58c3 Don't update the management port when calculating delta [v1] be0c75c0 Don't update the management port when calculating delta 20a7a26c Fix issue with certificates with no subject or CN 7d9f2914 Stable-only: Cap hacking to < 6.1.0 353cafd8 Fix TLS-HELLO healthmonitors in the amphora-driver 121e0533 Fix health-monitors with ALPN members ec36152a Add Noop Certificate Manager 10cfd8c7 Fix amphorae in ERROR during the failover 97b1b838 Reduce duration of failovers with amphora in ERROR 57833dbd Retry to set loadbalancer prov status on failures 5c98d901 Fix timeout duration in start_vrrp_service during failovers 64d9bdb9 Fix race condition in members batch update API call 80c35d25 Fix incorrect removal of IP rules in the amphora e6e9f285 Fix octavia-status with amphorav2 81a39625 Fix upgrade check not working 7a2c472e Fix create_server_group in compute noop 8b196bb3 Fix amphorav1 member deletion bug c0ceebeb Fix TCP HMs on UDP pools with SELinux f19352ef Fix hm operating status to ONLINE in single lb call 1b17529b Avoid interface name collisions in the amphora 920dbfa5 Splitting scenario jobs in 2 abeaa550 Fix octavia-amphora-image-build periodic job 1f2aaaa7 Fix pool creation with single LB create call c940f7a0 Fix pep8 error f03a2df9 Send IP advertisements when plugging a new member subnet 5783c676 allowed_cidr validation for additional_vips e7f4b1b4 Fix failover when the last listener is deleted 487938f2 Add octavia-grenade-slurp CI job 11064a25 Fix ORM caching for with_for_update calls 4bbe88ee Fix octavia to accept [ipv6]:port 78dfb08f Purge some dev tools from the amphora image Diffstat (except docs and test files) ------------------------------------- elements/amphora-agent/package-installs.yaml | 25 ++ .../post-install.d/50-selinux-policies | 3 + etc/policy/keystone_default_roles-policy.yaml | 2 +- .../amphorae/backends/agent/api_server/osutils.py | 1 + octavia/amphorae/backends/agent/api_server/plug.py | 26 ++- .../api_server/templates/amphora-netns.systemd.j2 | 4 +- octavia/amphorae/backends/agent/api_server/util.py | 21 ++ .../backends/health_daemon/health_daemon.py | 12 +- .../backends/health_daemon/health_sender.py | 2 + octavia/amphorae/backends/utils/interface.py | 25 +- octavia/amphorae/backends/utils/interface_file.py | 9 +- .../amphorae/backends/utils/keepalivedlvs_query.py | 17 +- octavia/amphorae/drivers/driver_base.py | 16 ++ .../amphorae/drivers/haproxy/rest_api_driver.py | 21 +- .../drivers/keepalived/vrrp_rest_driver.py | 3 +- octavia/amphorae/drivers/noop_driver/driver.py | 3 + octavia/api/common/pagination.py | 2 +- octavia/api/v2/controllers/health_monitor.py | 4 +- octavia/api/v2/controllers/listener.py | 33 ++- octavia/api/v2/controllers/load_balancer.py | 7 + octavia/api/v2/controllers/member.py | 20 +- octavia/api/v2/types/pool.py | 2 +- octavia/certificates/manager/barbican.py | 5 +- octavia/certificates/manager/noop.py | 106 +++++++++ octavia/cmd/status.py | 5 +- octavia/common/config.py | 13 +- octavia/common/constants.py | 7 + octavia/common/exceptions.py | 6 + .../jinja/haproxy/combined_listeners/jinja_cfg.py | 2 + .../haproxy/combined_listeners/templates/macros.j2 | 16 +- octavia/common/tls_utils/cert_parser.py | 26 ++- octavia/compute/drivers/noop_driver/driver.py | 6 + octavia/controller/worker/task_utils.py | 34 ++- .../controller/worker/v1/flows/amphora_flows.py | 51 ++++- .../controller/worker/v1/flows/listener_flows.py | 3 + .../worker/v1/flows/load_balancer_flows.py | 42 ++-- .../worker/v1/tasks/amphora_driver_tasks.py | 129 +++++++++-- .../controller/worker/v1/tasks/database_tasks.py | 44 +++- .../controller/worker/v1/tasks/lifecycle_tasks.py | 109 ++++++--- .../controller/worker/v1/tasks/network_tasks.py | 27 ++- .../controller/worker/v2/flows/amphora_flows.py | 51 ++++- .../controller/worker/v2/flows/listener_flows.py | 3 + .../worker/v2/flows/load_balancer_flows.py | 43 ++-- .../worker/v2/tasks/amphora_driver_tasks.py | 125 ++++++++-- .../controller/worker/v2/tasks/database_tasks.py | 45 +++- .../controller/worker/v2/tasks/lifecycle_tasks.py | 136 +++++++---- .../controller/worker/v2/tasks/network_tasks.py | 23 +- octavia/db/repositories.py | 96 +++++--- octavia/hacking/checks.py | 2 +- .../drivers/neutron/allowed_address_pairs.py | 32 ++- .../backend/agent/api_server/test_server.py | 19 +- .../backends/agent/api_server/test_osutils.py | 2 +- .../backends/agent/api_server/test_plug.py | 60 ++++- .../backends/agent/api_server/test_util.py | 35 +++ .../backends/health_daemon/test_health_daemon.py | 8 + .../backends/health_daemon/test_health_sender.py | 18 ++ .../unit/amphorae/backends/utils/test_interface.py | 85 ++++++- .../amphorae/backends/utils/test_interface_file.py | 2 + .../backends/utils/test_keepalivedlvs_query.py | 134 ++++++++++- .../drivers/haproxy/test_rest_api_driver.py | 6 +- .../drivers/keepalived/test_vrrp_rest_driver.py | 17 ++ .../haproxy/combined_listeners/test_jinja_cfg.py | 57 +++-- .../unit/controller/worker/test_task_utils.py | 58 ++++- .../worker/v1/flows/test_amphora_flows.py | 33 ++- .../worker/v1/flows/test_load_balancer_flows.py | 27 ++- .../worker/v1/tasks/test_amphora_driver_tasks.py | 240 +++++++++++++++++++- .../worker/v1/tasks/test_database_tasks.py | 71 +++++- .../worker/v1/tasks/test_network_tasks.py | 30 +-- .../worker/v2/flows/test_amphora_flows.py | 33 ++- .../worker/v2/flows/test_load_balancer_flows.py | 16 +- .../worker/v2/tasks/test_amphora_driver_tasks.py | 251 +++++++++++++++++++-- .../worker/v2/tasks/test_database_tasks.py | 58 ++++- .../worker/v2/tasks/test_network_tasks.py | 11 - .../drivers/neutron/test_allowed_address_pairs.py | 57 ++++- ...itor-update-without-delay-c56240e59e15483f.yaml | 4 + ...nation-less-or-equal-zero-93a33f1318ea34e5.yaml | 6 + ...r-delete-causing-failover-251efdb79af24c0a.yaml | 5 + ...andle-blank-cert-subjects-b660d403ce56b0b8.yaml | 4 + .../add-noop-cert-manager-7018d3933a0ce9c6.yaml | 4 + ...ation-for-additional_vips-175c32824cc7ee95.yaml | 7 + ...x-amphorav1-subnet-member-9921d1ba387ff975.yaml | 6 + ...ad-management-port-update-3fa157f74ee8c7b2.yaml | 7 + ...ber-update-race-condition-09b82e2cc3121e03.yaml | 5 + ...t-udp-pools-dual-stack-lb-b298ded551ac97e1.yaml | 6 + ...on-delete-with-broken-amp-10d7f4e85754d7ee.yaml | 6 + ...e-members-in-batch-update-610ffbbf949927d0.yaml | 10 + ...ulated-with-allowed-cidrs-ad04ccf02bf9cbbc.yaml | 7 + ...n-with-disabled-listeners-fa89f762a94b8fe9.yaml | 6 + ...retrieval-in-api-response-d3b2e02a3a966f60.yaml | 7 + ...-online-in-single-lb-call-214a7ca22937a877.yaml | 5 + ...thmonitor-with-alpn-pools-82249b2b9a025068.yaml | 7 + .../fix-ip-rules-in-amphora-b74b7b616752c13b.yaml | 11 + ...ress-enclosed-in-brackets-c1cfc4717465ba09.yaml | 6 + ...ssion-persistence-failure-d649656a44fc3bbb.yaml | 6 + ...-in-PENDING-on-DB-failure-1ffea71a86cd4ea9.yaml | 7 + ...de-rules-in-dualstack-lbs-94f97606c5804b36.yaml | 6 + ...twork-interface-collision-939fd32587ea3344.yaml | 8 + ...-octavia-status-amphorav2-038fe77a2189b99f.yaml | 5 + ...tatus-on-lb-single-create-897070aee0a42da6.yaml | 5 + ...ition-member-batch-update-1aed0e06004c5dad.yaml | 7 + ...linux-tcp-hm-on-udp-pools-89c3b8db89e359ba.yaml | 7 + ...eout-dict-when-start-vrrp-278d4837702bd247.yaml | 6 + ...-tls-hello-healthmonitors-a4b98a80f6de8394.yaml | 4 + ...atus-with-additional-vips-7511690a0c112b44.yaml | 6 + ...ixed-quota-error-messages-fe3ae81a43f93a17.yaml | 6 + ...-ipvs-before-setting-opts-c5b2f0871bc38c27.yaml | 5 + ...-subnet-ip-advertisements-af2264844079ef6b.yaml | 6 + .../reduce-duration-failover-636032433984d911.yaml | 7 + ...-standby-amphora-in-error-3c1d75bc7d9b169f.yaml | 5 + setup.cfg | 1 + test-requirements.txt | 4 +- zuul.d/jobs.yaml | 117 ++++++---- zuul.d/projects.yaml | 26 +-- 124 files changed, 3087 insertions(+), 547 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 051ebbdf..c1936926 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=3.0 # Apache-2.0 +hacking<6.1.0 # Apache-2.0 @@ -11 +11 @@ oslotest>=3.2.0 # Apache-2.0 -pylint>=2.5.3 # GPLv2 +pylint>=2.5.3,<=3.0.4 # GPLv2

1 0

octavia-dashboard 11.0.1 (antelope)
by no-reply＠openstack.org 06 Sep '24

06 Sep '24

We enthusiastically announce the release of: octavia-dashboard 11.0.1: Horizon panels for Octavia This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/octavia-dashboard Download the package from: https://pypi.org/project/octavia-dashboard Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia- dashboard For more details, please see below. 11.0.1 ^^^^^^ Bug Fixes * Fixed a bug when displaying the member list, some fields were not displayed correctly and new members could not be added. This bug affected only Google Chrome 114 and above. * Barbicanclient caused an error when getting secrets. By replacing the code by OpenstackSDK this issue was fixed and the barbicanclient dependency could be dropped from the Octavia Dashboard. Changes in octavia-dashboard 11.0.0..11.0.1 ------------------------------------------- 6f990e0 Fix popover attributes in member add dialog fa8fbcf Fix error related to barbicanclient d1a6dd8 Update TOX_CONSTRAINTS_FILE for stable/2023.1 ce03362 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + octavia_dashboard/api/rest/barbican.py | 45 ++----- octavia_dashboard/api/rest/lbaasv2.py | 139 ++++++++------------- octavia_dashboard/sdk_connection.py | 50 ++++++++ .../project/lbaasv2/workflow/members/members.html | 10 +- .../fix-chrome-member-dialog-154981a7794d5fb4.yaml | 6 + .../remove-barbicanclient-6b48fcc36afafb62.yaml | 6 + requirements.txt | 1 - tox.ini | 4 +- 9 files changed, 128 insertions(+), 134 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4a9357b..8eaaa5c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +12,0 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -python-barbicanclient>=4.5.2 # Apache-2.0

1 0

octavia-lib 3.2.1 (antelope)
by no-reply＠openstack.org 06 Sep '24

06 Sep '24

We are stoked to announce the release of: octavia-lib 3.2.1: A library to support Octavia provider drivers. This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/octavia-lib Download the package from: https://pypi.org/project/octavia-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia-lib For more details, please see below. 3.2.1 ^^^^^ Bug Fixes * Fixed a possible receive timeout if the driver agent didn't respond inside five seconds. For example if you have a very slow database. Changes in octavia-lib 3.2.0..3.2.1 ----------------------------------- 5ec74a4 Fix a possible receive timeout 82fe10f Update TOX_CONSTRAINTS_FILE for stable/2023.1 66efdbc Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + octavia_lib/api/drivers/driver_lib.py | 16 ++++++++++++---- ...ble-receive-timeout-error-f6d2454c48eb10cf.yaml | 5 +++++ tox.ini | 4 ++-- 5 files changed, 41 insertions(+), 7 deletions(-)

1 0

keystone 23.0.2 (antelope)
by no-reply＠openstack.org 06 Sep '24

06 Sep '24

We exuberantly announce the release of: keystone 23.0.2: OpenStack Identity This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/keystone/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. 23.0.2 ^^^^^^ New Features * A new option 'randomize_urls' can be used to randomize the order in which keystone connects to the LDAP servers in [ldap] 'url' list. It is false by default. Changes in keystone 23.0.1..23.0.2 ---------------------------------- c725173cf Remove reference to devstack-gate c81bc1b29 Add domain scoping to list_domains b6c20d912 Allow domain admin to view roles 17da229f0 Allow domain users to manage credentials b449d86ee Allow admin to access tokens and credentials 9b2f7aa4b Add ability to create users and projects from keystone-manage 9ec8e7cca Fix old arm64 job template ee9a96672 Remove unused old job templates and experimental jobs 828519f46 Normalize policy checks for domain-scoped tokens 1c2d51788 Allow users with "admin" role to get projects f7892ce2c Fix policies for groups 658fd7d58 Consistent and Secure RBAC (Phase 1) ea8c8aa98 Don't forget to check if authorization fails a9d5e7eea Add an option to randomize LDAP urls list c1247a6a3 docs: Clarify lack of LDAP assignment back end Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 88 ++---------- keystone/api/domains.py | 15 +- keystone/api/role_assignments.py | 21 ++- keystone/cmd/cli.py | 72 +++++++++- keystone/cmd/idutils.py | 151 +++++++++++++++++++++ keystone/common/policies/application_credential.py | 6 +- keystone/common/policies/base.py | 13 +- keystone/common/policies/consumer.py | 20 +-- keystone/common/policies/credential.py | 20 +-- keystone/common/policies/domain.py | 25 ++-- keystone/common/policies/domain_config.py | 28 ++-- keystone/common/policies/ec2_credential.py | 8 +- keystone/common/policies/endpoint.py | 20 +-- keystone/common/policies/endpoint_group.py | 44 +++--- keystone/common/policies/grant.py | 63 +++++---- keystone/common/policies/group.py | 55 ++++---- keystone/common/policies/identity_provider.py | 20 +-- keystone/common/policies/implied_role.py | 24 ++-- keystone/common/policies/limit.py | 17 +-- keystone/common/policies/mapping.py | 26 ++-- keystone/common/policies/policy.py | 20 +-- keystone/common/policies/policy_association.py | 44 +++--- keystone/common/policies/project.py | 49 ++++--- keystone/common/policies/project_endpoint.py | 24 ++-- keystone/common/policies/protocol.py | 23 ++-- keystone/common/policies/region.py | 12 +- keystone/common/policies/registered_limit.py | 12 +- keystone/common/policies/revoke_event.py | 6 +- keystone/common/policies/role.py | 50 +++---- keystone/common/policies/role_assignment.py | 11 +- keystone/common/policies/service.py | 20 +-- keystone/common/policies/service_provider.py | 26 ++-- keystone/common/policies/token.py | 16 ++- keystone/common/policies/trust.py | 27 ++-- keystone/common/policies/user.py | 30 ++-- keystone/conf/ldap.py | 13 ++ keystone/identity/backends/ldap/common.py | 8 +- .../request_processing/middleware/auth_context.py | 4 +- .../unit/identity/backends/test_ldap_common.py | 27 ++++ .../notes/randomize_urls-c0c19f48b2bfa299.yaml | 6 + 47 files changed, 912 insertions(+), 502 deletions(-)

1 0

keystoneauth 5.1.3 (antelope)
by no-reply＠openstack.org 06 Sep '24

06 Sep '24

We high-spiritedly announce the release of: keystoneauth 5.1.3 This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/keystoneauth Download the package from: https://pypi.org/project/keystoneauth Please report issues through: https://bugs.launchpad.net/keystoneauth/+bugs For more details, please see below. Changes in keystoneauth 5.1.2..5.1.3 ------------------------------------ e96c503 Make v3oidcpassword send client_id 97c2d0b Update TOX_CONSTRAINTS_FILE for stable/2023.1 8aea357 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + keystoneauth1/identity/v3/oidc.py | 3 ++- tox.ini | 6 +++--- 3 files changed, 6 insertions(+), 4 deletions(-)

1 0

python-watcherclient 4.5.0 (dalmatian)
by no-reply＠openstack.org 06 Sep '24

06 Sep '24

We eagerly announce the release of: python-watcherclient 4.5.0: Python client library for Watcher API This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-watcherclient Download the package from: https://pypi.org/project/python-watcherclient Please report issues through: https://bugs.launchpad.net/watcher/+bugs For more details, please see below. Changes in python-watcherclient 4.3.0..4.5.0 -------------------------------------------- 9aace80 Update python classifier in setup.cfg 63d305c Remove untested lower-constraints.txt Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 82 --------------------------------------------------- setup.cfg | 2 ++ 2 files changed, 2 insertions(+), 82 deletions(-)

1 0

python-adjutantclient 1.2.0 (dalmatian)
by no-reply＠openstack.org 06 Sep '24

06 Sep '24

We exuberantly announce the release of: python-adjutantclient 1.2.0: Adjutant API Client Library This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-adjutantclient Download the package from: https://pypi.org/project/python-adjutantclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- adjutantclient For more details, please see below. Changes in python-adjutantclient 1.0.0..1.2.0 --------------------------------------------- fe0003b Update python classifier in setup.cfg Diffstat (except docs and test files) ------------------------------------- setup.cfg | 2 ++ 1 file changed, 2 insertions(+)

1 0