May 2025 - Release-announce - lists.openstack.org

osprofiler 4.3.0
by no-reply＠openstack.org 29 May '25

29 May '25

We are gleeful to announce the release of: osprofiler 4.3.0 The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler For more details, please see below. 4.3.0 ^^^^^ Upgrade Notes * Support for Python 3.8 has been removed. Now the minimum python version supported is 3.9 . Changes in osprofiler 4.2.0..4.3.0 ---------------------------------- 21d2e46 tox: Remove basepython 0827580 Run pyupgrade to clean up Python 2 syntaxes 8d782c7 Drop redundant if-else block e4ad680 pre-commit: Bump version 794c199 Drop remaining pin of elasticsearch 0f98472 Remove Python 3.8 support 6e2a303 Unpin for newer elasticsearch versions c1faa84 Replace deprecated constant_time_compare 4b4881e Bump hacking to latest 6aabde4 Update bandit to 1.7.x Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 33 +++++++++------------- .zuul.yaml | 5 ++-- osprofiler/_utils.py | 8 +++--- osprofiler/cmd/commands.py | 8 +++--- osprofiler/cmd/shell.py | 2 +- osprofiler/drivers/base.py | 10 +++---- osprofiler/drivers/elasticsearch_driver.py | 12 ++++---- osprofiler/drivers/jaeger.py | 6 ++-- osprofiler/drivers/loginsight.py | 17 +++++------ osprofiler/drivers/messaging.py | 6 ++-- osprofiler/drivers/mongodb.py | 4 +-- osprofiler/drivers/otlp.py | 6 ++-- osprofiler/drivers/redis_driver.py | 15 +++++----- osprofiler/drivers/sqlalchemy_driver.py | 4 +-- osprofiler/profiler.py | 16 ++++------- osprofiler/web.py | 2 +- .../notes/remove-py38-e2c2723282ebbf9f.yaml | 5 ++++ releasenotes/source/conf.py | 1 - setup.cfg | 6 ++-- test-requirements.txt | 10 +------ tools/patch_tox_venv.py | 2 +- tox.ini | 10 ++----- 38 files changed, 126 insertions(+), 144 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index bd85faa..0fc6787 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,3 +0,0 @@ -hacking>=3.1.0,<3.2.0 # Apache-2.0 -flake8-import-order==0.18.1 # LGPLv3 - @@ -10,3 +6,0 @@ docutils>=0.14 # OSI-Approved Open Source, Public Domain -# Bandit security code scanner -bandit>=1.6.0,<1.7.0 # Apache-2.0 - @@ -16 +10 @@ pymongo!=3.1,>=3.0.2 # Apache-2.0 -elasticsearch>=2.0.0,<3.0.0 # Apache-2.0 +elasticsearch>=2.0.0 # Apache-2.0 @@ -25,2 +18,0 @@ opentelemetry-sdk>=1.16.0 # Apache-2.0 - -pre-commit>=2.6.0 # MIT

1 0

horizon 25.4.0 (flamingo)
by no-reply＠openstack.org 28 May '25

28 May '25

We are gleeful to announce the release of: horizon 25.4.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. 25.4.0 ^^^^^^ Upgrade Notes ************* * The "Defaults" tab now renamed to "Default Quotas" for clarity and better reflection of containing information. * Deprecated RX/TX factor has been removed out of a flavor parameters. * Spelling of terms vCPU and pCPU - have been brought to a uniform writing style. Bug Fixes ********* * Fix an error, when an "Admin State" status is displayed as variable (true or false) instead of "UP/DOWN" [:bug:`2099694`] * Image Sharing - Visibility, fixed issues with displaying buttons when using languages with long phrases, buttons could wrap across multiple lines. * [:bug:`2102267`] Fixed issue when Provider Network Tab was not displayed with network details. * [:bug:`2103529`] tenant_id/project_id removed from API calls, so Network QoS rules now can be added from Dashboard. Changes in horizon 25.3.0..25.4.0 --------------------------------- 69016e676 Instead of a text, variables are sent to translation system 9115b4a2d Enable redirect URL check b08e0c193 fix spelling of "horizon" 2f96ab7b8 Remove installation guide for openSUSE/SLES be8311167 Fix small mistakes in release notes f30764b03 Add TOTP credential generation 24212b44f Add release note about "Defaults" Tab e0336ac80 Pass the value of STATIC_URL to the scss variable. 9dba4e90e Fixing basePath in Server Groups description d29cc08b7 Create QoS Policy - add description 44625b962 Add description for flavor parameters 588587676 Fix filter in '/keystone/svc-catalog' api 8575eb61d flavor ID need converted to lowercase on Create flavor form 7cc2e6de4 Remove unused MANIFEST.in 9445725a9 Making IP protocol field required 85dd18cc7 Add forgot release notes 65f242994 Fix the variable name for "Admin State" db01dc61a Update image create/edit form 502717ed8 Image Sharing - Visibility - fix for long phrases 41cc293b6 Add filter to User Credentials table c37560898 tox: Bump minimum version, remove legacy crud ddd68f09b docs: add note for instance delete c4ba0e87d docs: update information about Supported Browsers 2653cfb11 Add description for network types 6d0b348a8 Fix problem with activate/deactivate image e8f954107 pytest-based UI tests switch zuul job to voting 832148add docs: update System Requirements 24684c713 Fix phrase in Create Snapshot f0ed422eb network_topology: check policy for UI elements 49f04b8e5 docs: update url for Horizon description 7a5d25e7f pytest-based selenium tests add fix volume reserved issue 005cf7850 pytest-based UI tests add fix not interactable sidebar element 5190d6e55 Non-existent timezone fix 2e947367b docs: Define locale directory 1221d35a5 Fix internal server error if all volumes are in other projects 8f6bd6e42 Renaming Defaults tab ec1e096ef Removing rx/tx factor from flavors be43e6c50 VCPU, PCPU replaced to vCPU, pCPU 639999071 Define measurement units for RAM and disk eb51c5d2f Imported Translations from Zanata da38df12f Fix Bindings renderring for admin 1e5f3612a Add description for "Lock Password" 9cadc77a3 Update master for stable/2025.1 b7a0b978c Fix phrase in RBAC polices 0e931077e Removing tenant_id/project_id from API calls 081a20c98 Treat object display data as text, not html 6128c9668 RBAC Policies - fix to display title correctly e9cae2275 Enabling Provider Network Tab 37e425c34 Fix for Cancel button in Create Security Group form 96c404010 Scheduler Hints - add missing phrases ba839984e Fix for few small mistakes with QoS 86856d819 Fix display name for RBAC policies adc1e09ef Setting more accurate button naming for volume transfer operations 3cee2a1e3 Fixing port security checkbox for instance port fab4b49b1 reno: Update master for unmaintained/2023.1 275598ae9 Fix url for default volume type call to backend 67ae83b64 Add '<div class="form-group">' Diffstat (except docs and test files) ------------------------------------- .zuul.d/project.yaml | 4 +- MANIFEST.in | 17 - bindep.txt | 2 + .../locale/en_GB/LC_MESSAGES/doc-configuration.po | 19 +- .../locale/en_GB/LC_MESSAGES/doc-contributor.po | 11 +- .../locale/id/LC_MESSAGES/doc-configuration.po | 19 +- .../locale/id/LC_MESSAGES/doc-contributor.po | 11 +- horizon/forms/views.py | 2 +- horizon/locale/ru/LC_MESSAGES/django.po | 47 +- horizon/locale/ru/LC_MESSAGES/djangojs.po | 47 +- horizon/static/horizon/js/horizon.tables.js | 2 +- .../templates/horizon/common/_usage_summary.html | 2 +- horizon/utils/scss_filter.py | 6 + openstack_auth/locale/ru/LC_MESSAGES/django.po | 38 +- openstack_auth/views.py | 6 +- openstack_dashboard/api/keystone.py | 7 +- openstack_dashboard/api/neutron.py | 15 +- openstack_dashboard/api/nova.py | 6 +- openstack_dashboard/api/rest/keystone.py | 20 +- .../dashboards/admin/defaults/panel.py | 2 +- .../dashboards/admin/defaults/tables.py | 2 +- .../admin/defaults/templates/defaults/index.html | 2 +- .../dashboards/admin/defaults/views.py | 2 +- .../dashboards/admin/defaults/workflows.py | 2 +- .../dashboards/admin/flavors/tables.py | 3 +- .../dashboards/admin/flavors/workflows.py | 45 +- .../dashboards/admin/hypervisors/tables.py | 16 +- .../hypervisors/templates/hypervisors/index.html | 4 +- .../dashboards/admin/networks/forms.py | 24 +- .../dashboards/admin/networks/tables.py | 2 +- .../admin/overview/templates/overview/usage.csv | 2 +- .../dashboards/admin/overview/views.py | 2 +- .../dashboards/admin/rbac_policies/tables.py | 4 + .../templates/rbac_policies/_detail_overview.html | 2 +- .../dashboards/admin/rbac_policies/views.py | 4 +- .../dashboards/identity/credentials/forms.py | 22 +- .../dashboards/identity/credentials/tables.py | 11 +- .../credentials/templates/credentials/_create.html | 3 + .../dashboards/identity/credentials/views.py | 19 +- .../dashboards/identity/projects/workflows.py | 2 +- .../identity/users/credentials/tables.py | 1 + .../dashboards/identity/users/tabs.py | 9 +- .../identity/users/templates/users/_create.html | 2 + .../identity/users/templates/users/_update.html | 2 + .../templates/images/images/_detail_overview.html | 4 +- .../dashboards/project/instances/tabs.py | 10 +- .../templates/instances/_detail_overview.html | 4 +- .../templates/instances/_flavors_and_quotas.html | 4 +- .../templates/instances/_instance_flavor.html | 4 +- .../client_side/_balloon_container.html | 2 + .../dashboards/project/network_topology/views.py | 10 + .../dashboards/project/networks/forms.py | 6 +- .../dashboards/project/networks/ports/tables.py | 2 +- .../dashboards/project/networks/tables.py | 2 +- .../templates/networks/_detail_overview.html | 8 +- .../templates/networks/ports/_detail_overview.html | 16 +- .../dashboards/project/networks/workflows.py | 4 +- .../project/overview/templates/overview/usage.csv | 2 +- .../dashboards/project/overview/views.py | 2 +- .../dashboards/project/routers/tables.py | 6 +- .../dashboards/project/security_groups/forms.py | 9 +- .../dashboards/project/security_groups/views.py | 1 + .../launch-instance/flavor/flavor.controller.js | 8 +- .../launch-instance/keypair/create-keypair.html | 3 + .../launch-instance/keypair/import-keypair.html | 3 + .../scheduler-hints/scheduler-hints.controller.js | 4 +- .../launch-instance/source/source-details.html | 4 +- .../dashboards/project/volumes/tables.py | 10 +- .../dashboards/settings/credentials/tables.py | 1 + .../dashboards/settings/credentials/views.py | 4 +- .../dashboards/settings/user/forms.py | 12 +- .../locale/as/LC_MESSAGES/django.po | 19 +- .../locale/bn_IN/LC_MESSAGES/django.po | 19 +- .../locale/brx/LC_MESSAGES/django.po | 19 +- .../locale/cs/LC_MESSAGES/django.po | 22 +- .../locale/cs/LC_MESSAGES/djangojs.po | 26 +- .../locale/de/LC_MESSAGES/django.po | 45 +- .../locale/de/LC_MESSAGES/djangojs.po | 30 +- .../locale/en_AU/LC_MESSAGES/django.po | 22 +- .../locale/en_AU/LC_MESSAGES/djangojs.po | 26 +- .../locale/en_GB/LC_MESSAGES/django.po | 46 +- .../locale/en_GB/LC_MESSAGES/djangojs.po | 30 +- .../locale/eo/LC_MESSAGES/django.po | 40 +- .../locale/eo/LC_MESSAGES/djangojs.po | 32 +- .../locale/es/LC_MESSAGES/django.po | 46 +- .../locale/es/LC_MESSAGES/djangojs.po | 31 +- .../locale/fr/LC_MESSAGES/django.po | 42 +- .../locale/fr/LC_MESSAGES/djangojs.po | 32 +- .../locale/gu/LC_MESSAGES/django.po | 19 +- .../locale/hi/LC_MESSAGES/django.po | 13 +- .../locale/id/LC_MESSAGES/django.po | 46 +- .../locale/id/LC_MESSAGES/djangojs.po | 32 +- .../locale/it/LC_MESSAGES/django.po | 19 +- .../locale/it/LC_MESSAGES/djangojs.po | 11 +- .../locale/ja/LC_MESSAGES/django.po | 46 +- .../locale/ja/LC_MESSAGES/djangojs.po | 30 +- .../locale/ka_GE/LC_MESSAGES/django.po | 39 +- .../locale/ka_GE/LC_MESSAGES/djangojs.po | 21 +- .../locale/kn/LC_MESSAGES/django.po | 19 +- .../locale/ko_KR/LC_MESSAGES/django.po | 46 +- .../locale/ko_KR/LC_MESSAGES/djangojs.po | 30 +- .../locale/kok/LC_MESSAGES/django.po | 19 +- .../locale/ks/LC_MESSAGES/django.po | 19 +- .../locale/mai/LC_MESSAGES/django.po | 19 +- .../locale/mni/LC_MESSAGES/django.po | 19 +- .../locale/mr/LC_MESSAGES/django.po | 19 +- .../locale/ne/LC_MESSAGES/django.po | 19 +- .../locale/pa_IN/LC_MESSAGES/django.po | 19 +- .../locale/pl_PL/LC_MESSAGES/django.po | 19 +- .../locale/pt_BR/LC_MESSAGES/django.po | 22 +- .../locale/pt_BR/LC_MESSAGES/djangojs.po | 31 +- .../locale/ru/LC_MESSAGES/django.po | 890 ++++---- .../locale/ru/LC_MESSAGES/djangojs.po | 433 ++-- .../locale/ta/LC_MESSAGES/django.po | 19 +- .../locale/tr_TR/LC_MESSAGES/django.po | 22 +- .../locale/tr_TR/LC_MESSAGES/djangojs.po | 28 +- .../locale/ur/LC_MESSAGES/django.po | 19 +- .../locale/zh_Hans/LC_MESSAGES/django.po | 45 +- .../locale/zh_Hans/LC_MESSAGES/djangojs.po | 30 +- .../locale/zh_Hant/LC_MESSAGES/django.po | 42 +- .../locale/zh_Hant/LC_MESSAGES/djangojs.po | 30 +- .../static/app/core/flavors/flavors.module.js | 5 +- .../static/app/core/flavors/summary.html | 3 +- .../static/app/core/images/_images.scss | 9 + .../images/actions/deactivate-image.service.js | 14 +- .../images/actions/reactivate-image.service.js | 14 +- .../steps/create-image/create-image.help.html | 10 +- .../images/steps/create-image/create-image.html | 10 +- .../images/steps/edit-image/edit-image.help.html | 4 +- .../core/images/steps/edit-image/edit-image.html | 12 +- .../network_qos/actions/add-rule.action.service.js | 2 +- .../network_qos/actions/create.action.service.js | 7 +- .../network_qos/actions/create.description.html | 10 + .../actions/edit-rule.action.service.js | 8 +- .../actions/edit-rule.action.service.spec.js | 8 +- .../static/app/core/network_qos/qos.module.js | 1 - .../core/openstack-service-api/cinder.service.js | 2 +- .../openstack-service-api/cinder.service.spec.js | 2 +- .../core/openstack-service-api/neutron.service.js | 24 +- .../openstack-service-api/neutron.service.spec.js | 26 +- .../server_groups/actions/create.action.service.js | 8 +- .../static/dashboard/scss/_variables.scss | 5 +- .../static/js/horizon.networktopology.js | 2 + .../pages/admin/compute/flavorspage.py | 6 +- .../test/selenium/integration/conftest.py | 17 + .../test/selenium/integration/test_instances.py | 18 +- .../test/selenium/integration/test_volumes.py | 2 +- .../test/selenium/ui/test_browse.py | 8 +- .../test/selenium/ui/test_hypervisors.py | 24 +- openstack_dashboard/test/test_data/neutron_data.py | 12 +- openstack_dashboard/test/test_data/nova_data.py | 4 - openstack_dashboard/test/unit/api/test_neutron.py | 12 +- openstack_dashboard/test/unit/api/test_nova.py | 4 +- openstack_dashboard/usage/quotas.py | 2 +- openstack_dashboard/usage/tables.py | 8 +- openstack_dashboard/usage/views.py | 2 +- releasenotes/notes/admin-state-variable.yaml | 5 + releasenotes/notes/defaults-tab-rename.yaml | 4 + .../notes/fix-image-sharing-visibility.yaml | 5 + .../fixed--issue-with-provider-network-tab.yaml | 4 + .../notes/fixed-problems-with-network-qos.yaml | 4 + releasenotes/notes/remove-rxtx-factor.yaml | 4 + .../notes/vcpu-and-pcpu-writing-style.yaml | 4 + releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2025.1.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 8 +- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 280 +++ tox.ini | 14 +- 198 files changed, 4525 insertions(+), 2141 deletions(-)

1 0

taskflow 6.0.1 (flamingo)
by no-reply＠openstack.org 28 May '25

28 May '25

We joyfully announce the release of: taskflow 6.0.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/taskflow Download the package from: https://pypi.org/project/taskflow Please report issues through: https://bugs.launchpad.net/taskflow/+bugs For more details, please see below. Changes in taskflow 6.0.0..6.0.1 -------------------------------- c7aac5b7 Fix skipped database persistence tests d9f26c51 Fix duplicate table_name argument Diffstat (except docs and test files) ------------------------------------- .../alembic/versions/00af93df9d77_add_unique_into_all_indexes.py | 6 ------ 2 files changed, 4 insertions(+), 10 deletions(-)

1 0

telemetry-tempest-plugin 2.5.1 (flamingo)
by no-reply＠openstack.org 28 May '25

28 May '25

We are satisfied to announce the release of: telemetry-tempest-plugin 2.5.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/telemetry-tempest-plugin Download the package from: https://tarballs.openstack.org/telemetry-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/ceilometer/+bugs For more details, please see below. Changes in telemetry-tempest-plugin 2.5.0..2.5.1 ------------------------------------------------ ddfb79a Use PROMETHEUS_CUSTOM_SCRAPE_TARGETS to pass sg_core scrape endpoint ba28a22 Create network for integration scenarios 2792317 Remove Ubuntu Jammy job df84b20 Remove CentOS Stream 9 job from master f1c4552 tox: Fix broken releasenotes target 598a32d Remove jobs for retired branches 5dc5386 Add stable/2025.1 job 1955f59 Skip functional tests for .gitreview 6833c23 Use Prometheus plugin Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 110 +++++++-------------- .../scenario/test_telemetry_integration.py | 14 ++- .../test_telemetry_integration_prometheus.py | 15 ++- tox.ini | 1 + 5 files changed, 57 insertions(+), 87 deletions(-)

1 0

oslo.limit 2.7.0 (flamingo)
by no-reply＠openstack.org 28 May '25

28 May '25

We joyfully announce the release of: oslo.limit 2.7.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. 2.7.0 ^^^^^ Bug Fixes * Fix ignored keystoneauth adapter options such as valid_interfaces. Changes in oslo.limit 2.6.1..2.7.0 ---------------------------------- f351266 Fix ignored KSA adapter options df27f63 tox: Remove basepython 4a3c10b Added ability to select identity interface 7a432c4 Update master for stable/2025.1 2b5d9f7 Call Keystone API once to get (registered_)limits Diffstat (except docs and test files) ------------------------------------- oslo_limit/fixture.py | 50 ++++--- oslo_limit/limit.py | 95 ++++++++++--- ...nored-ksa-adapter-options-e120fac9a6fd35f7.yaml | 5 + releasenotes/source/2025.1.rst | 6 + releasenotes/source/index.rst | 1 + tox.ini | 2 - 7 files changed, 275 insertions(+), 41 deletions(-)

1 0

python-openstackclient 8.1.0 (flamingo)
by no-reply＠openstack.org 26 May '25

26 May '25

We are excited to announce the release of: python-openstackclient 8.1.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://bugs.launchpad.net/python-openstackclient/+bugs For more details, please see below. 8.1.0 ^^^^^ New Features ************ * Add filters to search for enabled and disabled users and projects. * Add support for the new "spice-direct" console type, as well as the exposing the ability for admins to lookup console connection information via the new "console connection show" command. * The "--network", "--port", and "--router" options of the "floating ip list" command can now be specified multiple times. Upgrade Notes ************* * The "openstack server set" command has been extended with a new parameter "--auto-approve" and the existing "--state" parameter has been modified to require confirmation before resetting the state. * Support for Python 3.9 has been dropped. * The following commands have been migrated to SDK: * "domain create" * "domain delete" * "domain list" * "domain set" * "domain show" * Migrate "group" commands from keystoneclient to SDK. Changes in python-openstackclient 8.0.0..8.1.0 ---------------------------------------------- 3909e933 evacuate: respect original SHUTOFF state in --wait completion 9bcb1c5c Fix missing 'options' field in 'user show' command a2be1b01 Identity: Migrate 'group' commands to SDK 444a1df7 tests: Simplify mocking in image tests 01c1b1e3 network: Allow multiple FIP filter opts 082aca89 volume: Migrate 'volume delete' to SDK 125133d0 volume: Temporarily ignore new volume columns 03aa172f volume: Split v2, v3 create, delete commands 267a29d5 volume: Migrate 'snapshot show', 'snapshot list' to SDK 3c6fa426 volume: Migrate 'snapshot set', 'snapshot unset' to SDK e0020aec volume: Migrate 'snapshot create' to SDK fc42f12e volume: Migrate 'snapshot delete' to SDK e1ff450e volume: Add v3-specific volume snapshot module a9b99849 tests: Use SDK mocks for SDK-based commands 8eb1a183 volume: Migrate 'backup set', 'backup unset' to SDK b933330d volume: Migrate 'service *' to SDK 1ee3ef33 volume: Add v3-specific volume service module 00f4cf9c volume: Migrate 'block storage log level *' to SDK a74850d2 Add a column to all_projects tag of server list cmd eea369e7 Fix incorrect warning with --password-prompt option 32762bcd compute: Fix key used for NIC fixed IP field e26b4479 identity: Add missing user argument 94d17b87 identity: Fix listing of applications credentials by user 7c7c0660 Bump Python version used for linters to 3.10 ce2a253d Drop support for Python 3.9 5d730f37 Add support for spice-direct console types. 6cb5d8cd Update README 22eecc54 Add labels to Dockerfile f4e97d97 Update the docker image to python3.12 e4d621d2 zuul: Remove osc-upload-image, osc-promote-image jobs 7d640031 tests: Stop returning FakeResource in compute tests abed52f1 tests: Remove sdk prefix 2c878ad2 tests: Remove dead code b0fe724c tests: Remove use of legacy resource helpers 25cd1178 Require confirmation to reset server state. d123be08 Fix 'openstack keypair list --project <project>' 11495e65 Don't warn about unsupported version with SDK-based commands c66abfc7 Workaround for failing tests on openstacksdk change c6862240 Add support for showing scheduler_hints in server details d96c81ff Refactor network fakes to sdk properties PART6 f870548c Refactor network fakes to sdk properties PART 5 80eaa33f volume: Make better use of argparse 181bb194 image: Migrate 'create image' volume calls to SDK 34831172 Add filters to search for enabled/disabled users and projects 4bdd51cb identity: Migrate 'domain' commands to SDK Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- .zuul.yaml | 68 +- Dockerfile | 11 +- README.rst | 198 +++-- .../cli/command-objects/console-connection.rst | 10 + openstackclient/compute/client.py | 5 + openstackclient/compute/v2/console.py | 7 + openstackclient/compute/v2/console_connection.py | 48 ++ openstackclient/compute/v2/keypair.py | 13 +- openstackclient/compute/v2/server.py | 85 +- openstackclient/compute/v2/server_event.py | 2 +- openstackclient/identity/common.py | 79 ++ .../identity/v3/application_credential.py | 4 +- openstackclient/identity/v3/domain.py | 105 ++- openstackclient/identity/v3/group.py | 181 +++-- openstackclient/identity/v3/project.py | 17 + openstackclient/identity/v3/user.py | 43 +- openstackclient/image/client.py | 5 + openstackclient/image/v2/image.py | 22 +- openstackclient/network/client.py | 6 - openstackclient/network/v2/floating_ip.py | 87 +- openstackclient/network/v2/network_qos_rule.py | 14 +- openstackclient/network/v2/router.py | 2 +- openstackclient/network/v2/security_group.py | 9 +- openstackclient/network/v2/security_group_rule.py | 2 +- openstackclient/shell.py | 2 +- .../unit/compute/v2/test_console_connection.py | 72 ++ .../identity/v3/test_application_credential.py | 72 +- .../unit/network/v2/test_floating_ip_network.py | 32 +- .../unit/network/v2/test_l3_conntrack_helper.py | 4 +- .../unit/network/v2/test_network_qos_policy.py | 35 +- .../unit/network/v2/test_network_qos_rule_type.py | 10 +- .../unit/network/v2/test_security_group_network.py | 52 +- .../network/v2/test_security_group_rule_compute.py | 4 +- .../network/v2/test_security_group_rule_network.py | 72 +- .../unit/volume/v3/test_block_storage_log_level.py | 132 ++- openstackclient/volume/v2/service.py | 79 +- openstackclient/volume/v2/volume.py | 100 ++- openstackclient/volume/v2/volume_backup.py | 12 +- openstackclient/volume/v2/volume_snapshot.py | 205 +++-- .../volume/v3/block_storage_log_level.py | 50 +- openstackclient/volume/v3/service.py | 119 ++- openstackclient/volume/v3/volume.py | 239 +++++- openstackclient/volume/v3/volume_backup.py | 43 +- openstackclient/volume/v3/volume_snapshot.py | 495 +++++++++++- pyproject.toml | 3 +- ...r-project-enabled-filters-9f2090cdcc97b667.yaml | 4 + ...lidate-console-auth-token-1eda2bd62060ccfa.yaml | 6 + .../confirm-reset-state-24497c8b24990aa7.yaml | 6 + .../notes/drop-python-39-fc95c2d17a862e3e.yaml | 4 + .../notes/fip-filter-opts-a847f8743fef467f.yaml | 5 + .../migrate-domain-to-sdk-da6ec38221e79a37.yaml | 10 + .../migrate-group-to-sdk-59beef31a7c40bbb.yaml | 4 + requirements.txt | 2 +- setup.cfg | 18 +- 90 files changed, 5569 insertions(+), 3573 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c31de42a..5e9b33d2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ iso8601>=0.1.11 # MIT -openstacksdk>=3.3.0 # Apache-2.0 +openstacksdk>=4.5.0 # Apache-2.0

1 0

oslo.cache 3.11.0 (flamingo)
by no-reply＠openstack.org 22 May '25

22 May '25

We are excited to announce the release of: oslo.cache 3.11.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. 3.11.0 ^^^^^^ Bug Fixes * If tls_enabled=true memcache_pool has been switched to use bmemcached. Changes in oslo.cache 3.10.1..3.11.0 ------------------------------------ c3023db Use BMemcacheClientPool if tls_enabled=true 9432d72 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- oslo_cache/backends/memcache_pool.py | 8 +++++--- oslo_cache/core.py | 4 ++++ ...emcache-for-memcache-pool-if-tls-enabled-733d98c265a3a9a1.yaml | 4 ++++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 5 files changed, 20 insertions(+), 3 deletions(-)

1 0

oslo.service 4.2.0 (flamingo)
by no-reply＠openstack.org 22 May '25

22 May '25

We are pleased to announce the release of: oslo.service 4.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. 4.2.0 ^^^^^ New Features ************ * Added a new *threading* backend to *oslo.service*, using standard Python threads instead of *eventlet*. This includes a full implementation of: * *Service*, *Launcher*, *ServiceLauncher*, and *ProcessLauncher* using *cotyledon* * *LoopingCall* variants (*FixedIntervalLoopingCall*, *DynamicLoopingCall*, etc.) using *futurist.ThreadPoolExecutor* * A new *ThreadGroup* and *Thread* abstraction to mimic *eventlet*-like behavior * A native *SignalHandler* implementation using standard Python signals This backend provides a standard-thread-compatible alternative that avoids monkey-patching, making it suitable for environments where *eventlet* is problematic or undesirable. Additionally: * *ProcessLauncher* now supports a *no_fork=True* mode, allowing services to run in the main process without forking. This is useful when *fork()* is unsafe — for example, in threaded environments or with Python 3.12+ where the default multiprocessing start method has changed to *spawn*. * A new *register_backend_default_hook()* API has been added. It allows users to define a fallback backend type in case *init_backend()* was not called early enough. This is helpful in environments where import order or initialization timing cannot be guaranteed. Example: "`python from oslo_service import backend backend.register_backend_default_hook(lambda: backend.BackendType.THREADING) `" This hook will only be used if *init_backend()* has not already been called. Known Issues ************ * When using the *threading* backend with multiple workers (i.e. *ProcessLauncher* with *fork()*), **starting threads before the fork occurs can lead to corrupted state** due to how *os.fork()* behaves in multi-threaded processes. This is a known limitation in Python. See: https://gibizer.github.io/posts/Eventlet-Removal-The-First- Threading-Bug/#threads--osfork--confused-threadpools To avoid this issue, you can: * Ensure that no threads are started before *oslo.service* forks the workers. * Use *ProcessLauncher(no_fork=True)* to disable forking entirely. * Explicitly manage thread lifecycle — for example, stop all threads before forking, as currently done in Nova. Upgrade Notes ************* * While Python 3.14 defaults to "spawn" as the multiprocessing start method, *oslo.service* continues to rely on "fork" as the only supported method for creating worker processes. Many parts of OpenStack depend on objects that cannot be safely pickled (e.g. argparse parsers, thread locks, lambdas in config defaults), which makes "spawn" currently impractical. In the long term, process scaling should be handled externally (e.g. via Kubernetes or systemd), rather than by the service itself. Changes in oslo.service 4.1.1..4.2.0 ------------------------------------ 5de514f Add threading backend implementation using cotyledon and standard threads 531e0b5 Drop redundant injection of VIRTUAL_ENV d3f51fc Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- oslo_service/backend/__init__.py | 73 +++- oslo_service/backend/base.py | 45 ++- oslo_service/backend/common/__init__.py | 0 oslo_service/backend/common/constants.py | 16 + oslo_service/backend/common/daemon_utils.py | 33 ++ oslo_service/backend/common/signal_utils.py | 38 ++ oslo_service/backend/common/singleton.py | 26 ++ oslo_service/backend/common/validation_utils.py | 23 ++ oslo_service/backend/eventlet/__init__.py | 11 +- oslo_service/backend/eventlet/loopingcall.py | 73 ++-- oslo_service/backend/eventlet/service.py | 145 ++------ oslo_service/backend/eventlet/threadgroup.py | 15 +- oslo_service/backend/exceptions.py | 2 +- oslo_service/backend/threading/__init__.py | 60 +++ oslo_service/backend/threading/loopingcall.py | 403 +++++++++++++++++++++ oslo_service/backend/threading/service.py | 260 +++++++++++++ oslo_service/backend/threading/threadgroup.py | 233 ++++++++++++ .../add-threading-backend-9b0e601e5c1282e1.yaml | 64 ++++ releasenotes/source/2025.1.rst | 6 + releasenotes/source/index.rst | 1 + setup.cfg | 5 + setup.py | 4 +- test-requirements.txt | 2 + tox.ini | 13 +- 26 files changed, 1409 insertions(+), 209 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 2cff2d3..3617947 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6,0 +7,2 @@ coverage>=4.0 # Apache-2.0 +cotyledon>=2.0.0 +futurist>=3.1.1

1 0

osc-lib 4.0.2 (flamingo)
by no-reply＠openstack.org 22 May '25

22 May '25

We are jazzed to announce the release of: osc-lib 4.0.2 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/osc-lib Download the package from: https://pypi.org/project/osc-lib Please report issues through: https://bugs.launchpad.net/python-openstackclient/+bugs For more details, please see below. Changes in osc-lib 4.0.0..4.0.2 ------------------------------- 3ad4594 Temporarily revert dependency bumps 81151cd Use Python 3.8-style type hints d4d9f8a Temporarily undrop support for Python 3.8, 3.9 1bd2155 Correct getattr call 99084de Drop support for Python 3.8, 3.9 d7be791 Replace UPPER_CONSTRAINTS_FILE Diffstat (except docs and test files) ------------------------------------- osc_lib/api/api.py | 11 +++--- osc_lib/api/auth.py | 6 +-- osc_lib/api/utils.py | 2 +- osc_lib/cli/client_config.py | 28 +++++++------- osc_lib/cli/format_columns.py | 18 ++++----- osc_lib/cli/parseractions.py | 11 +++--- osc_lib/clientmanager.py | 4 +- osc_lib/command/command.py | 6 +-- osc_lib/command/timing.py | 2 +- osc_lib/logs.py | 5 +-- osc_lib/shell.py | 18 ++++----- osc_lib/utils/__init__.py | 89 +++++++++++++++++++++---------------------- osc_lib/utils/columns.py | 10 ++--- osc_lib/utils/tags.py | 11 +++--- pyproject.toml | 3 +- requirements.txt | 4 +- tox.ini | 6 +-- 17 files changed, 116 insertions(+), 118 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7249568..8c025ea 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,2 +1,2 @@ -cliff>=4.9.0 # Apache-2.0 -keystoneauth1>=5.10.0 # Apache-2.0 +cliff>=3.2.0 # Apache-2.0 +keystoneauth1>=3.14.0 # Apache-2.0

1 0

python-swiftclient 4.8.0 (flamingo)
by no-reply＠openstack.org 22 May '25

22 May '25

We eagerly announce the release of: python-swiftclient 4.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-swiftclient Download the package from: https://pypi.org/project/python-swiftclient Please report issues through: https://bugs.launchpad.net/python-swiftclient/+bugs For more details, please see below. 4.8.0 ^^^^^ New Features ************ * Now tested under Python 3.13. Bug Fixes ********* * Auth tokens are now truncated when running with "--debug". Added "-- debug-with-secrets" flag to enable previous, less-secure behavior. * Various other minor bug fixes and improvements. Other Notes *********** * Dropped support for Python 3.6. Changes in python-swiftclient 4.7.0..4.8.0 ------------------------------------------ 8486005 Authors/ChangeLog for 4.8.0 b2416ae CI: Fix up the testing matrix e3422e8 Drop support for py36 5ffc285 Remove tags from README 79e7c9f Test under py313 9e67409 Add --debug-with-secrets and truncate by default ed3244e Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 10 ++++------ AUTHORS | 1 + ChangeLog | 19 +++++++++++++++++++ README.rst | 9 --------- .../notes/4_8_0_release-41ba0852981191c3.yaml | 16 ++++++++++++++++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + setup.cfg | 4 ++-- swiftclient/shell.py | 18 +++++++++++++----- test/unit/test_shell.py | 21 ++++++++++++++++++++- tox.ini | 2 +- 11 files changed, 83 insertions(+), 24 deletions(-)

1 0

osc-lib 4.0.1 (flamingo)
by no-reply＠openstack.org 22 May '25

22 May '25

We are ecstatic to announce the release of: osc-lib 4.0.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/osc-lib Download the package from: https://pypi.org/project/osc-lib Please report issues through: https://bugs.launchpad.net/python-openstackclient/+bugs For more details, please see below. Changes in osc-lib 4.0.0..4.0.1 ------------------------------- 3ad4594 Temporarily revert dependency bumps 81151cd Use Python 3.8-style type hints d4d9f8a Temporarily undrop support for Python 3.8, 3.9 99084de Drop support for Python 3.8, 3.9 d7be791 Replace UPPER_CONSTRAINTS_FILE Diffstat (except docs and test files) ------------------------------------- osc_lib/api/api.py | 11 +++--- osc_lib/api/auth.py | 6 +-- osc_lib/api/utils.py | 2 +- osc_lib/cli/client_config.py | 28 +++++++------- osc_lib/cli/format_columns.py | 18 ++++----- osc_lib/cli/parseractions.py | 11 +++--- osc_lib/clientmanager.py | 4 +- osc_lib/command/command.py | 6 +-- osc_lib/command/timing.py | 2 +- osc_lib/logs.py | 5 +-- osc_lib/shell.py | 16 ++++---- osc_lib/utils/__init__.py | 89 +++++++++++++++++++++---------------------- osc_lib/utils/columns.py | 10 ++--- osc_lib/utils/tags.py | 11 +++--- pyproject.toml | 3 +- requirements.txt | 4 +- tox.ini | 6 +-- 17 files changed, 115 insertions(+), 117 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7249568..8c025ea 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,2 +1,2 @@ -cliff>=4.9.0 # Apache-2.0 -keystoneauth1>=5.10.0 # Apache-2.0 +cliff>=3.2.0 # Apache-2.0 +keystoneauth1>=3.14.0 # Apache-2.0

1 0

kayobe 18.0.0 (epoxy)
by no-reply＠openstack.org 21 May '25

21 May '25

We are glad to announce the release of: kayobe 18.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://bugs.launchpad.net/kayobe/+bugs For more details, please see below. Changes in kayobe 17.0.0.0rc1..18.0.0 ------------------------------------- 266ff1bf Remove outdated issue from Podman release note 2829bf89 CI: Test kayobe_control_host_become 81affd27 Use 'pip_upper_constraints_file' for openstacksdk installation 73d57e59 Fix authentication failures due to missing system scope 9172c778 Fix execution of kayobe overcloud deprovision 3efadf33 CI: Improve readabiity of ansible output 7fd3f6bd Support running without root privileges b4733da8 Add the ability to override the system's default repositories 2087a51c Fix ipa_kernel_options_default when ipa_collect_lldp is false 2393044b public-openrc: Add OS_CACERT even if admin-openrc lacks it c2ce2825 Rename docker group to container-engine 3c916b3e [release] Use OpenStack 2025.1 release 741511f8 [release] Sync with Kolla Ansible for 2025.1 0205896b Use pause module to prompt for deprovision c11c62be CI: Fix Bifrost log collection 28667735 Add support for `--list-tasks` against `kolla-ansible` 53ece53d CI: Make kayobe-seed-ubuntu-noble-podman voting c508b199 CI: Fix ipaddr invocation in network bootstrap fc232aed CI: Enable SLURP upgrade job for Ubuntu Noble c800db5c CI: Restore upgrade jobs b1eadcaf Revert "CI: Don't use new RabbitMQ features yet" 759db0da tox: Remove basepython aefec669 CI: Migrate RabbitMQ queues before upgrade 8ed9f703 Fix network configure on Rocky hosts d5016e83 Add releasenotes templates and update documentation 5333596a Add ovn-sb-db-relay Ansible group in overcloud ccdfeb76 CI: Don't use new RabbitMQ features yet 7d1061d0 Bump up Ansible supported versions to 11.x/12.x 9f615af7 Bump the mrlesmithjr.chrony role to v0.1.6 42e57b70 Improve release note of netplan fix 34909052 Fix netplan packages do not getting fully removed 62b307c4 Bump MichaelRigart.interfaces to v1.15.4 afafebbe Remove remaining mentions of Ubuntu Jammy 05896059 Bump version of stackhpc.linux collection 006abf6c Revert "CI: Make kayobe-overcloud-upgrade-slurp-rocky9 non-voting" 8131a4a0 CI: Make kayobe-seed-images-rocky9-podman experimental 80494bf7 Bump Michael.Rigart.Interfaces version to 1.15.3 f0bedd89 Remove graphlib-backport requirement e6a748a4 CI: Move CentOS Stream jobs to experimental queue 87d80151 CI: Use libpod/registry as container registry eb09ca93 CI: Make kayobe-overcloud-upgrade-slurp-rocky9 non-voting b7586c8e CI: create ansible.cfg for pre-upgrade deployment 8dd05487 Replace pause with chronyc waitsync in ntp sync fad3b7f1 CI: Add Rocky Linux SLURP upgrade jobs for 2025.1 8f84b596 Ensure hwclock is installed when required 988a8222 Add podman support 3133805e CI: Set previous_release for Epoxy 0b7d8015 Fix Depends-On e804a995 Add dynamic-login to default ipa elements a6ba61f4 Use kayobe_container only when service is enabled 70af189a CI: pin to ansible-compat<25.0.0 447635ac Bump version of MichaelRigart.interfaces 344008d8 Support IPA download with authenticated requests 51b54d54 Fix release note markup b4f63447 Fix release note link febe06c0 ironic-inspector: Add kolla_enable_ironic_inspector 0137015e infra-vm: efficiently handle `hostvars` during deploy and destroy f27755ae Fix overcloud deprovision hosts list in prompt d3c0ff56 CI: Switch to pytest-ansible 50ac65c5 Add nova-metadata group to kolla-ansible inventory 633eae08 Add missing space character to help message 3a926637 CI: Bump size of Swift device 67381c80 reno: Update master for unmaintained/2023.1 eacbe8a0 CI: use quay.io/podman/hello due too dockerhub rate limits 89849c1c Ensure ironic-python-agent matches ironic-lib f96182a2 Revert "[release] Use OpenStack 2024.2 release" 3961c2dd Update master for stable/2024.2 9c6b4477 Support forcing time synchronisation b56e90a8 CI: Generate Octavia certificates when required b10b166a Install setuptools before creating virtualenv Diffstat (except docs and test files) ------------------------------------- ansible/action_plugins/kayobe_container.py | 25 +++++ ansible/action_plugins/kayobe_container_image.py | 28 ++++++ .../action_plugins/kayobe_container_image_info.py | 17 ++++ ansible/action_plugins/kayobe_container_login.py | 24 +++++ ansible/action_plugins/kayobe_container_volume.py | 17 ++++ ansible/container-engine.yml | 37 ++++++++ ansible/container-image-build.yml | 7 +- ansible/docker.yml | 19 ---- ansible/infra-vm-host-configure.yml | 2 +- ansible/inventory/group_vars/all/apt | 2 + ansible/inventory/group_vars/all/compute | 32 ++++++- ansible/inventory/group_vars/all/container-engine | 76 +++++++++++++++ ansible/inventory/group_vars/all/controllers | 27 +++++- ansible/inventory/group_vars/all/docker | 39 -------- ansible/inventory/group_vars/all/globals | 9 +- ansible/inventory/group_vars/all/infra-vms | 27 +++++- ansible/inventory/group_vars/all/inspector | 2 +- ansible/inventory/group_vars/all/ipa | 9 +- ansible/inventory/group_vars/all/kolla | 14 ++- ansible/inventory/group_vars/all/openstack | 8 +- ansible/inventory/group_vars/all/overcloud-dib | 3 +- ansible/inventory/group_vars/all/pip | 2 +- ansible/inventory/group_vars/all/seed | 27 +++++- ansible/inventory/group_vars/all/time | 14 +++ ansible/kayobe-ansible-user.yml | 4 +- ansible/kayobe-target-venv.yml | 20 +++- ansible/kolla-ansible-user.yml | 10 +- ansible/kolla-ansible.yml | 1 + ansible/kolla-bifrost-hostvars.yml | 3 +- ansible/kolla-target-venv.yml | 10 ++ ansible/overcloud-bios-raid.yml | 6 +- ansible/overcloud-deprovision.yml | 37 +++++--- ansible/overcloud-etc-hosts-fixup.yml | 12 ++- ansible/overcloud-hardware-inspect.yml | 12 ++- ansible/overcloud-host-configure.yml | 2 +- ansible/overcloud-host-image-build.yml | 2 +- ansible/overcloud-introspection-data-save.yml | 3 +- ansible/overcloud-introspection-rules.yml | 4 +- ansible/overcloud-inventory-discover.yml | 3 +- ansible/overcloud-provision.yml | 15 ++- ansible/roles/apt/defaults/main.yml | 2 + ansible/roles/apt/tasks/repos.yml | 5 +- ansible/roles/apt/templates/kayobe.sources.j2 | 4 +- ansible/roles/bootstrap/tasks/main.yml | 49 ++++++++-- ansible/roles/bootstrap/vars/RedHat.yml | 4 +- ansible/roles/dell-switch-bmp/handlers/main.yml | 9 +- ansible/roles/docker-registry/defaults/main.yml | 6 +- ansible/roles/docker-registry/handlers/main.yml | 3 +- ansible/roles/docker-registry/tasks/deploy.yml | 3 +- ansible/roles/docker-registry/tasks/destroy.yml | 24 ++--- ansible/roles/docker-registry/tasks/pull.yml | 4 +- ansible/roles/docker-registry/tasks/stop.yml | 3 +- ansible/roles/image-download/defaults/main.yml | 20 ++++ ansible/roles/image-download/tasks/main.yml | 8 ++ ansible/roles/infra-vms/tasks/deploy.yml | 29 +++--- ansible/roles/infra-vms/tasks/destroy.yml | 10 +- ansible/roles/infra-vms/tasks/main.yml | 17 +++- ansible/roles/inspection-store/defaults/main.yml | 5 +- ansible/roles/inspection-store/handlers/main.yml | 6 +- ansible/roles/inspection-store/tasks/destroy.yml | 21 ++--- ansible/roles/inspection-store/tasks/pull.yml | 4 +- ansible/roles/inspection-store/tasks/start.yml | 6 +- ansible/roles/inspection-store/tasks/stop.yml | 3 +- ansible/roles/kolla-ansible/defaults/main.yml | 5 +- ansible/roles/kolla-ansible/tasks/config.yml | 2 +- ansible/roles/kolla-ansible/tasks/install.yml | 62 +++++++++---- .../templates/overcloud-components.j2 | 3 - .../kolla-ansible/templates/overcloud-services.j2 | 19 ++-- ansible/roles/kolla-ansible/vars/main.yml | 9 +- ansible/roles/kolla-build/tasks/main.yml | 5 +- ansible/roles/kolla-openstack/defaults/main.yml | 7 +- .../kolla-openstack/molecule/default/molecule.yml | 4 + .../molecule/enable-everything/molecule.yml | 4 + ansible/roles/kolla/tasks/install.yml | 3 + .../manage-containers/tasks/deploy-container.yml | 7 +- ansible/roles/manage-containers/tasks/deploy.yml | 10 +- .../manage-containers/tasks/destroy-container.yml | 2 +- ansible/roles/network-debian/tasks/main.yml | 2 + ansible/roles/ntp/defaults/main.yml | 5 +- ansible/roles/ntp/tasks/main.yml | 4 + ansible/roles/ntp/tasks/sync.yml | 26 ++++++ ansible/roles/opensm/defaults/main.yml | 2 +- ansible/roles/opensm/tasks/deploy.yml | 6 +- ansible/roles/opensm/tasks/destroy.yml | 23 ++--- ansible/roles/opensm/tasks/pull.yml | 4 +- ansible/roles/opensm/tasks/stop.yml | 3 +- .../public-openrc/templates/public-openrc.sh.j2 | 5 +- ansible/roles/swift-rings/tasks/main.yml | 3 +- ansible/seed-credentials.yml | 6 +- ansible/seed-host-configure.yml | 2 +- ansible/seed-ipa-build.yml | 3 +- ansible/seed-service-upgrade-prep.yml | 5 +- dev/functions | 47 +++++++++- dev/kayobe-control-host-become-sudo-checker | 22 +++++ dev/kolla-control-host-become-sudo-checker | 15 +++ dev/overcloud-test-bounce-interface.sh | 21 +++++ dev/ovs-vsctl | 7 +- dev/playbook-run.sh | 38 ++++++++ .../configuration/reference/docker-registry.rst | 8 +- .../reference/ironic-python-agent.rst | 69 ++++++++++---- etc/kayobe/apt.yml | 2 + etc/kayobe/compute.yml | 19 +++- etc/kayobe/container-engine.yml | 80 ++++++++++++++++ etc/kayobe/docker.yml | 43 --------- etc/kayobe/globals.yml | 5 + etc/kayobe/inventory/groups | 4 +- etc/kayobe/ipa.yml | 5 +- etc/kayobe/kolla.yml | 13 ++- etc/kayobe/openstack.yml | 4 +- etc/kayobe/time.yml | 14 +++ kayobe/ansible.py | 5 +- kayobe/kolla_ansible.py | 2 + molecule-requirements.txt | 4 +- playbooks/kayobe-base/overrides.yml.j2 | 3 + playbooks/kayobe-base/post.yml | 36 ++++++++ playbooks/kayobe-base/pre.yml | 59 ++++++++++++ playbooks/kayobe-infra-vm-base/overrides.yml.j2 | 3 + playbooks/kayobe-infra-vm-base/pre.yml | 7 +- playbooks/kayobe-overcloud-base/overrides.yml.j2 | 6 ++ playbooks/kayobe-overcloud-base/pre.yml | 7 +- .../overrides.yml.j2 | 3 + .../kayobe-overcloud-host-configure-base/pre.yml | 6 +- .../kayobe-overcloud-host-configure-base/run.yml | 10 ++ .../kayobe-overcloud-upgrade-base/overrides.yml.j2 | 3 + playbooks/kayobe-overcloud-upgrade-base/pre.yml | 7 +- playbooks/kayobe-overcloud-upgrade-base/run.yml | 18 +++- playbooks/kayobe-seed-base/overrides.yml.j2 | 8 ++ playbooks/kayobe-seed-base/pre.yml | 7 +- .../kayobe-seed-upgrade-base/overrides.yml.j2 | 5 + playbooks/kayobe-seed-upgrade-base/pre.yml | 7 +- playbooks/kayobe-seed-upgrade-base/run.yml | 7 +- playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 5 + playbooks/kayobe-seed-vm-base/pre.yml | 7 +- ...a-enable-ironic-inspector-5db384e4f94386c3.yaml | 10 ++ .../adds-support-for-podman-8ff158369905c077.yaml | 12 +++ .../ansible-chrony-v0.1.6-68c7616fb7582503.yaml | 4 + .../auth-fix-system-scope-20dadaf18cb43962.yaml | 7 ++ .../notes/bug-2110549-28e47a915331af95.yaml | 6 ++ .../notes/bump-ansible-11-12-0eaf6b997b716ba4.yaml | 6 ++ ...michael-rigart-interfaces-61def9d407e5de3e.yaml | 6 ++ ...lrigart.interfaces-1.15.4-900d2f560c4a19bb.yaml | 5 + ...pa-kernel-options-default-a036666288778fa6.yaml | 5 + ...lan-not-get-fully-removed-b3770cf475569a6c.yaml | 6 ++ ...-openstacksdk-u-c-default-ed0b85cdb9fd6042.yaml | 8 ++ ...ovision-prompt-host-lists-cfb701162c114c60.yaml | 6 ++ ...-rocky-network-templating-d16606de0ea28d2d.yaml | 7 ++ ...es-slave-interface-bounce-81d8dc8e5e474447.yaml | 6 ++ ...-vgpu-boot-race-condition-b51917e32f685221.yaml | 7 ++ .../image-download-auth-e9fd02b71e26dd52.yaml | 12 +++ ...fra-vm-action-performance-5d8a218b75574be2.yaml | 6 ++ .../notes/ipa-dynamic-login-b1574eb8e6638a61.yaml | 6 ++ .../notes/ntp-force-sync-d22bfbd63c7be026.yaml | 5 + ...-deprovision-pause-prompt-2d31b1716116c629.yaml | 6 ++ ...oud-extras-service-absent-2e8a01e1c31f038b.yaml | 7 ++ .../pin-ipa-requirements-f9566011b2400e6c.yaml | 6 ++ .../notes/support-list-tasks-d55a6a54a3c71fcc.yaml | 6 ++ ...hout-root-on-control-host-11e92dcc7477729c.yaml | 8 ++ .../ubuntu-sources-configure-c2aff9915db76d07.yaml | 11 +++ releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2024.2.rst | 6 ++ releasenotes/source/conf.py | 1 + releasenotes/source/index.rst | 1 + releasenotes/templates/feature.yml | 5 + releasenotes/templates/fix.yml | 7 ++ requirements.txt | 4 +- requirements.yml | 8 +- roles/kayobe-ci-prep/tasks/main.yml | 25 ++++- roles/kayobe-diagnostics/files/get_logs.sh | 60 +++++++----- roles/kayobe-diagnostics/tasks/pre.yml | 1 + roles/kayobe-galaxy-requirements/defaults/main.yml | 2 +- roles/kayobe-galaxy-requirements/tasks/main.yml | 7 +- roles/kayobe-network-bootstrap/tasks/main.yml | 2 +- tox.ini | 12 +-- zuul.d/jobs.yaml | 91 ++++++++++++++---- zuul.d/nodesets.yaml | 6 -- zuul.d/project.yaml | 28 ++++-- 189 files changed, 1917 insertions(+), 501 deletions(-) Requirements updates -------------------- diff --git a/molecule-requirements.txt b/molecule-requirements.txt index 794a7bf5..4fd0fcac 100644 --- a/molecule-requirements.txt +++ b/molecule-requirements.txt @@ -6 +6 @@ ansible-lint>=3.0.0,<6.0.0,!=4.3.0 # MIT -ansible-compat # MIT +ansible-compat<25.0.0 # MIT @@ -9,0 +10 @@ molecule-plugins[docker] # MIT +pytest-ansible # MIT @@ -11 +11,0 @@ pytest-metadata # MPL -pytest-molecule # MIT diff --git a/requirements.txt b/requirements.txt index 31a3fdaf..c4141c12 100644 --- a/requirements.txt +++ b/requirements.txt @@ -3 +3 @@ Jinja2>3 # BSD -ansible>=9,<11 # GPLv3 +ansible>=10,<12 # GPLv3 @@ -14,2 +13,0 @@ ansible-cached-lookup<=2.0.0 # MIT -# NOTE(wszusmki): Remove this when min python>=3.9 -graphlib-backport<2.0.0; python_version<"3.9" # PSF

1 0

kayobe 18.0.0.0rc1 (epoxy)
by no-reply＠openstack.org 20 May '25

20 May '25

Hello everyone, A new release candidate for kayobe for the end of the Epoxy cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kayobe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Epoxy release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/epoxy release branch at: https://opendev.org/openstack/kayobe/src/branch/stable/epoxy Release notes for kayobe can be found at: https://docs.openstack.org/releasenotes/kayobe/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kayobe/+bugs and tag it *epoxy-rc-potential* to bring it to the kayobe release crew's attention.

1 0

oslo.messaging 17.0.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are amped to announce the release of: oslo.messaging 17.0.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 17.0.0 ^^^^^^ Upgrade Notes ************* * The following options in "[oslo_messaging_rabbit]" secion have been removed. * "rabbit_quroum_max_memory_length" * "rabbit_quroum_max_memory_bytes" Bug Fixes ********* * Fixes delayed metrics processing in services using eventlet, caused by mixing a native thread with an eventlet-patched queue. See bug 2098714 for details. Changes in oslo.messaging 16.1.0..17.0.0 ---------------------------------------- fedf06d7 Fix RPC metric labels being reused incorrectly 4bf39b36 Remove quorum options with typo 3a0b6cb9 Update master for stable/2025.1 9d6f373b Drop workaround for old oslotest version with six e3ec37a3 Do not un-patch threading Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_rabbit.py | 2 - oslo_messaging/_metrics/__init__.py | 1 + oslo_messaging/_metrics/client.py | 82 +++++++++++----------- oslo_messaging/rpc/client.py | 26 ++----- .../notes/bug-2098714-d55094fa4fbb3178.yaml | 7 ++ ...old-quorum-opts-with-typo-5e013064fb6df062.yaml | 8 +++ releasenotes/source/2025.1.rst | 6 ++ releasenotes/source/index.rst | 1 + 10 files changed, 132 insertions(+), 70 deletions(-)

1 0

oslo.versionedobjects 3.7.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are thrilled to announce the release of: oslo.versionedobjects 3.7.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.versionedobjects Download the package from: https://pypi.org/project/oslo.versionedobjects Please report issues through: https://bugs.launchpad.net/oslo.versionedobjects/+bugs For more details, please see below. Changes in oslo.versionedobjects 3.6.0..3.7.0 --------------------------------------------- 6cdaaca tox: Remove basepython 697271c Update master for stable/2025.1 9710b9d Drop dependency on iso8601 Diffstat (except docs and test files) ------------------------------------- oslo_versionedobjects/fields.py | 3 +-- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + requirements.txt | 1 - tox.ini | 2 -- 7 files changed, 11 insertions(+), 11 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e9f11b6..370c7b6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +10,0 @@ oslo.utils>=7.4.0 # Apache-2.0 -iso8601>=0.1.11 # MIT

1 0

neutron-lib 3.19.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are delighted to announce the release of: neutron-lib 3.19.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 3.18.2..3.19.0 ------------------------------------- 3a160219 add pyproject.toml to support pip 23.1 950f0f3a Update master for stable/2025.1 2e959fd7 taas: Split direction enum Diffstat (except docs and test files) ------------------------------------- neutron_lib/api/definitions/taas.py | 9 +++++++-- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 4 files changed, 17 insertions(+), 2 deletions(-)

1 0

python-designateclient 6.3.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are amped to announce the release of: python-designateclient 6.3.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-designateclient Download the package from: https://pypi.org/project/python-designateclient Please report issues through: https://bugs.launchpad.net/python-designateclient/+bugs For more details, please see below. Changes in python-designateclient 6.2.0..6.3.0 ---------------------------------------------- 1505c27 Remove tags from README 490b0d6 Update master for stable/2025.1 e9d1628 Replace environments for old python versions 85033a0 Set email as positional argument on zone create e9f0efb Fix outdated tox minversion c5d7392 Activate the --long option for recordset list command db890ed Activate the --long option for zone list command b7305d4 Remove unused reno from test requirements Diffstat (except docs and test files) ------------------------------------- README.rst | 10 +--------- designateclient/v2/cli/recordsets.py | 10 ++++++++++ designateclient/v2/cli/zones.py | 12 +++++++++++- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + test-requirements.txt | 1 - tox.ini | 12 ++---------- 10 files changed, 70 insertions(+), 24 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 306fe9d..2fe7a04 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +8,0 @@ stestr>=2.0.0 # Apache-2.0 -reno>=3.1.0 # Apache-2.0

1 0

keystoneauth 5.11.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are jazzed to announce the release of: keystoneauth 5.11.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/keystoneauth Download the package from: https://pypi.org/project/keystoneauth Please report issues through: https://bugs.launchpad.net/keystoneauth/+bugs For more details, please see below. Changes in keystoneauth 5.10.0..5.11.0 -------------------------------------- 884578f Fix bug in OIDC Device Authorization 1b569ae typing: Correct type 4cc798d Use releases.openstack.org instead of opendev.org 1b29c81 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- keystoneauth1/adapter.py | 4 ++- keystoneauth1/identity/base.py | 2 +- keystoneauth1/identity/v3/oidc.py | 6 ++-- keystoneauth1/plugin.py | 4 +-- keystoneauth1/session.py | 2 +- releasenotes/source/2025.1.rst | 6 ++++ releasenotes/source/index.rst | 1 + tox.ini | 6 ++-- 9 files changed, 58 insertions(+), 10 deletions(-)

1 0

oslo.metrics 0.12.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We eagerly announce the release of: oslo.metrics 0.12.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.metrics Download the package from: https://pypi.org/project/oslo.metrics Please report issues through: https://bugs.launchpad.net/oslo.metrics/+bugs For more details, please see below. 0.12.0 ^^^^^^ New Features * Introduced a new configuration option "metrics_socket_perm" under the "oslo_metrics" group, allowing users to set custom permissions for the Unix domain socket file. Changes in oslo.metrics 0.11.0..0.12.0 -------------------------------------- 19b3c0a tox: Remove basepython 6e42b39 Update master for stable/2025.1 be7067d feat: add option to set chmod to socket Diffstat (except docs and test files) ------------------------------------- oslo_metrics/__main__.py | 4 +++- releasenotes/notes/socket-permission-4081813647fcc8ac.yaml | 6 ++++++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 -- 5 files changed, 16 insertions(+), 3 deletions(-)

1 0

oslo.utils 9.0.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are stoked to announce the release of: oslo.utils 9.0.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 9.0.0 ^^^^^ Upgrade Notes * The deprecated "oslo_utils.secretutils.constant_time_compare" function has been removed. Changes in oslo.utils 8.2.0..9.0.0 ---------------------------------- 666726d tox: Remove basepython 2f36253 Remove constant_time_prepare 67345b8 Fix undocumented functions in secretutils b754062 Update master for stable/2025.1 7765483 Fix typo in recent change Diffstat (except docs and test files) ------------------------------------- oslo_utils/eventletutils.py | 2 +- oslo_utils/secretutils.py | 7 ------- .../notes/remove-constant_time_compare-afac749af5c57620.yaml | 5 +++++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 -- 7 files changed, 14 insertions(+), 11 deletions(-)

1 0

oslo.rootwrap 7.6.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are delighted to announce the release of: oslo.rootwrap 7.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.rootwrap Download the package from: https://pypi.org/project/oslo.rootwrap Please report issues through: https://bugs.launchpad.net/oslo.rootwrap/+bugs For more details, please see below. Changes in oslo.rootwrap 7.5.1..7.6.0 ------------------------------------- 5c7972c Update master for stable/2025.1 1ef00c5 Drop workaround for Python 3.4 Diffstat (except docs and test files) ------------------------------------- oslo_rootwrap/wrapper.py | 8 +------- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 3 files changed, 8 insertions(+), 7 deletions(-)

1 0

oslo.privsep 3.7.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are excited to announce the release of: oslo.privsep 3.7.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. 3.7.0 ^^^^^ New Features * A new configuration option is added: "log_daemon_traceback". If enabled, the client logger will print any exception traceback occurred in the daemon. Changes in oslo.privsep 3.6.0..3.7.0 ------------------------------------ 79821f6 tox: Remove basepython 97aef7e Update master for stable/2025.1 cc5981a Add daemon traceback to client logger Diffstat (except docs and test files) ------------------------------------- oslo_privsep/daemon.py | 14 ++++++-- oslo_privsep/priv_context.py | 4 +++ .../log-daemon-traceback-45784705e65cf52c.yaml | 6 ++++ releasenotes/source/2025.1.rst | 6 ++++ releasenotes/source/index.rst | 1 + tox.ini | 7 ++-- 9 files changed, 74 insertions(+), 13 deletions(-)

1 0

taskflow 6.0.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are pleased to announce the release of: taskflow 6.0.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/taskflow Download the package from: https://pypi.org/project/taskflow Please report issues through: https://bugs.launchpad.net/taskflow/+bugs For more details, please see below. 6.0.0 ^^^^^ New Features ************ * Added "mask_inputs_keys" and "mask_outputs_keys" parameters to the constructors for "FailureFormatter" and "DynamicLoggingListener" that can be used to mask sensitive information from the "requires" and "provides" fields respectively when logging a atom. Upgrade Notes ************* * Process executor was removed. Changes in taskflow 5.12.0..6.0.0 --------------------------------- 5a5def4d add pyproject.toml to support pip 23.1 8391defe Add release note for mask keys a5b7323f Add mask keys parameters to failure logging 80e1aadc Run pyupgrade to clean up Python 2 syntaxes e3be5c3b redis: Omit ssl options when ssl is disabled eaf4bdce Skip functional tests for .gitreview update 1e8eac4d Remove process executor 44b2aadd Keep taskflow doc job on Ubuntu Jammy bd025444 Update master for stable/2025.1 c56d9671 Use oslo.utils implementation to parse sentinel address 72df15e6 Sets indexes for all tables in taskflow as unique Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 5 + .zuul.yaml | 1 + pyproject.toml | 3 + releasenotes/notes/mask-keys-74b9bb5c420d8091.yaml | 7 + .../remove-process_executor-f59d40a5dd287cd7.yaml | 4 + releasenotes/source/2025.1.rst | 6 + releasenotes/source/conf.py | 1 - releasenotes/source/index.rst | 1 + taskflow/atom.py | 8 +- taskflow/conductors/backends/__init__.py | 2 - taskflow/conductors/backends/impl_blocking.py | 4 +- taskflow/conductors/backends/impl_executor.py | 9 +- taskflow/conductors/backends/impl_nonblocking.py | 4 +- taskflow/conductors/base.py | 4 +- taskflow/deciders.py | 2 - taskflow/engines/__init__.py | 2 - taskflow/engines/action_engine/actions/base.py | 4 +- taskflow/engines/action_engine/actions/retry.py | 4 +- taskflow/engines/action_engine/actions/task.py | 4 +- taskflow/engines/action_engine/builder.py | 6 +- taskflow/engines/action_engine/compiler.py | 20 +- taskflow/engines/action_engine/completer.py | 12 +- taskflow/engines/action_engine/deciders.py | 4 +- taskflow/engines/action_engine/engine.py | 30 +- taskflow/engines/action_engine/executor.py | 6 +- taskflow/engines/action_engine/process_executor.py | 720 --------------------- taskflow/engines/action_engine/runtime.py | 4 +- taskflow/engines/action_engine/scheduler.py | 8 +- taskflow/engines/action_engine/scopes.py | 8 +- taskflow/engines/action_engine/selector.py | 4 +- taskflow/engines/action_engine/traversal.py | 2 - taskflow/engines/base.py | 4 +- taskflow/engines/helpers.py | 2 - taskflow/engines/worker_based/dispatcher.py | 6 +- taskflow/engines/worker_based/endpoint.py | 4 +- taskflow/engines/worker_based/engine.py | 5 +- taskflow/engines/worker_based/executor.py | 2 - taskflow/engines/worker_based/protocol.py | 4 +- taskflow/engines/worker_based/proxy.py | 6 +- taskflow/engines/worker_based/server.py | 8 +- taskflow/engines/worker_based/types.py | 13 +- taskflow/engines/worker_based/worker.py | 10 +- taskflow/examples/99_bottles.py | 2 - taskflow/examples/alphabet_soup.py | 2 - taskflow/examples/build_a_car.py | 4 +- taskflow/examples/buildsystem.py | 4 +- taskflow/examples/calculate_in_parallel.py | 4 +- taskflow/examples/calculate_linear.py | 8 +- taskflow/examples/create_parallel_volume.py | 7 +- taskflow/examples/delayed_return.py | 4 +- taskflow/examples/distance_calculator.py | 36 +- taskflow/examples/dump_memory_backend.py | 4 +- taskflow/examples/echo_listener.py | 2 - taskflow/examples/example_utils.py | 4 +- taskflow/examples/fake_billing.py | 20 +- taskflow/examples/graph_flow.py | 6 +- taskflow/examples/hello_world.py | 6 +- .../examples/jobboard_produce_consume_colors.py | 8 +- taskflow/examples/parallel_table_multiply.py | 4 +- taskflow/examples/persistence_example.py | 4 +- taskflow/examples/pseudo_scoping.py | 6 +- taskflow/examples/resume_from_backend.py | 4 +- taskflow/examples/resume_many_flows.py | 2 - taskflow/examples/resume_many_flows/my_flows.py | 2 - taskflow/examples/resume_many_flows/resume_all.py | 4 +- taskflow/examples/resume_many_flows/run_flow.py | 6 +- taskflow/examples/resume_vm_boot.py | 27 +- taskflow/examples/resume_volume_create.py | 8 +- taskflow/examples/retry_flow.py | 2 - taskflow/examples/reverting_linear.py | 4 +- taskflow/examples/run_by_iter.py | 2 - taskflow/examples/run_by_iter_enumerate.py | 4 +- taskflow/examples/share_engine_thread.py | 6 +- taskflow/examples/simple_linear.py | 2 - taskflow/examples/simple_linear_listening.py | 4 +- taskflow/examples/simple_linear_pass.py | 2 - taskflow/examples/simple_map_reduce.py | 2 - taskflow/examples/switch_graph_flow.py | 4 +- taskflow/examples/timing_listener.py | 4 +- taskflow/examples/tox_conductor.py | 8 +- taskflow/examples/wbe_event_sender.py | 2 - taskflow/examples/wbe_mandelbrot.py | 2 - taskflow/examples/wbe_simple_linear.py | 2 - taskflow/examples/wrapped_exception.py | 2 - taskflow/exceptions.py | 16 +- taskflow/flow.py | 4 +- taskflow/formatters.py | 30 +- taskflow/jobs/backends/__init__.py | 2 - taskflow/jobs/backends/impl_redis.py | 40 +- taskflow/jobs/backends/impl_zookeeper.py | 15 +- taskflow/jobs/base.py | 12 +- taskflow/listeners/base.py | 4 +- taskflow/listeners/capturing.py | 4 +- taskflow/listeners/claims.py | 4 +- taskflow/listeners/logging.py | 16 +- taskflow/listeners/printing.py | 4 +- taskflow/listeners/timing.py | 23 +- taskflow/logging.py | 2 - taskflow/patterns/graph_flow.py | 6 +- taskflow/patterns/linear_flow.py | 13 +- taskflow/patterns/unordered_flow.py | 13 +- taskflow/persistence/backends/__init__.py | 4 +- taskflow/persistence/backends/impl_dir.py | 9 +- taskflow/persistence/backends/impl_memory.py | 15 +- taskflow/persistence/backends/impl_sqlalchemy.py | 10 +- taskflow/persistence/backends/impl_zookeeper.py | 6 +- .../persistence/backends/sqlalchemy/alembic/env.py | 2 - .../00af93df9d77_add_unique_into_all_indexes.py | 80 +++ .../versions/14b227d79a87_add_intention_column.py | 2 - .../versions/1c783c0c2875_replace_exception_an.py | 2 - .../versions/1cea328f0f65_initial_logbook_deta.py | 2 - .../2ad4984f2864_switch_postgres_to_json_native.py | 2 - ...3f8e4_add_revert_results_and_revert_failure_.py | 2 - ...9dccdf2b6e_rename_taskdetails_to_atomdetails.py | 2 - .../versions/84d6e888850_add_task_detail_type.py | 2 - taskflow/persistence/backends/sqlalchemy/tables.py | 2 - taskflow/persistence/base.py | 6 +- taskflow/persistence/models.py | 43 +- taskflow/persistence/path_based.py | 4 +- taskflow/retry.py | 30 +- taskflow/states.py | 2 - taskflow/storage.py | 20 +- taskflow/task.py | 33 +- taskflow/test.py | 10 +- .../unit/action_engine/test_process_executor.py | 106 --- .../unit/persistence/test_memory_persistence.py | 6 +- taskflow/types/entity.py | 4 +- taskflow/types/failure.py | 9 +- taskflow/types/graph.py | 32 +- taskflow/types/latch.py | 4 +- taskflow/types/notifier.py | 15 +- taskflow/types/sets.py | 7 +- taskflow/types/timing.py | 4 +- taskflow/types/tree.py | 16 +- taskflow/utils/async_utils.py | 2 - taskflow/utils/banner.py | 17 +- taskflow/utils/eventlet_utils.py | 2 - taskflow/utils/iter_utils.py | 2 - taskflow/utils/kazoo_utils.py | 16 +- taskflow/utils/kombu_utils.py | 12 +- taskflow/utils/misc.py | 10 +- taskflow/utils/persistence_utils.py | 2 - taskflow/utils/redis_utils.py | 6 +- taskflow/utils/schema_utils.py | 2 - taskflow/utils/threading_utils.py | 4 +- taskflow/version.py | 4 +- tools/speed_test.py | 4 +- tools/state_graph.py | 4 +- tools/subunit_trace.py | 18 +- 207 files changed, 750 insertions(+), 2042 deletions(-)

1 0

python-neutronclient 11.5.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are pumped to announce the release of: python-neutronclient 11.5.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. Changes in python-neutronclient 11.4.0..11.5.0 ---------------------------------------------- 690bb97 Update master for stable/2025.1 370bd21 Remove unnecessary direct dependency on iso8601 dc026cd vpnaas: add support for more ciphers (auth, encryption, pfs modes) Diffstat (except docs and test files) ------------------------------------- neutronclient/osc/v2/vpnaas/ikepolicy.py | 66 ++++++++++++++++++++++++++++-- neutronclient/osc/v2/vpnaas/ipsecpolicy.py | 66 ++++++++++++++++++++++++++++-- releasenotes/source/2025.1.rst | 6 +++ releasenotes/source/index.rst | 1 + requirements.txt | 1 - 5 files changed, 133 insertions(+), 7 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5f10ef9..4c6371c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +6,0 @@ debtcollector>=1.2.0 # Apache-2.0 -iso8601>=0.1.11 # MIT

1 0

cliff 4.10.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are happy to announce the release of: cliff 4.10.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/cliff Download the package from: https://pypi.org/project/cliff Please report issues through: https://bugs.launchpad.net/python-openstackclient/+bugs For more details, please see below. 4.10.0 ^^^^^^ Upgrade Notes * Support for Python 3.9 has been dropped. The minimum version of Python now supported in 3.10. Changes in cliff 4.9.1..4.10.0 ------------------------------ af17b57 Bump Python version used for linters to 3.10 adc5c6b Drop support for Python 3.9 Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 2 +- cliff/app.py | 33 +++++++++++----------- cliff/command.py | 19 ++++--------- cliff/commandmanager.py | 5 ++-- cliff/complete.py | 2 +- cliff/display.py | 6 ++-- cliff/formatters/table.py | 4 +-- cliff/help.py | 6 ++-- cliff/hooks.py | 5 ++-- cliff/interactive.py | 16 +++++------ cliff/sphinxext.py | 2 +- cliff/utils.py | 3 +- pyproject.toml | 3 +- .../notes/drop-python-39-bbeabc19b5143cd3.yaml | 5 ++++ requirements.txt | 1 - setup.cfg | 5 ++-- 17 files changed, 55 insertions(+), 65 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 557b95a..1399132 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2 +1,0 @@ autopage>=0.4.0 # Apache 2.0 -importlib_metadata>=4.4;python_version<"3.10" # Apache-2.0

1 0

oslo.config 9.8.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We high-spiritedly announce the release of: oslo.config 9.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. Changes in oslo.config 9.7.1..9.8.0 ----------------------------------- b18ff43 add pyproject.toml to support pip 23.1 bbb9ab1 Fix concurrent access crash in _all_opt_infos() cffba0e Update master for stable/2025.1 471d96f Use opt.name instead opt.dest for generate shell completion Diffstat (except docs and test files) ------------------------------------- oslo_config/cfg.py | 10 +++++----- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 4 files changed, 15 insertions(+), 5 deletions(-)

1 0

oslo.context 6.0.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We contentedly announce the release of: oslo.context 6.0.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.context Download the package from: https://pypi.org/project/oslo.context Please report issues through: https://bugs.launchpad.net/oslo.context/+bugs For more details, please see below. 6.0.0 ^^^^^ Upgrade Notes * The following arguments, first deprecated in 2.19.1 (Queens), have now been removed. * *user* (replaced by *user_id*) * *domain* (replaced by *domain_id*) * *user_domain* (replaced by *user_domain_id*) * *project_domain* (replaced by *project_domain_id*) If you are still using the legacy aliases, simply replace e.g. *user* with *user_id* in your calls and *RequestContext* subclasses. Changes in oslo.context 5.7.1..6.0.0 ------------------------------------ 7750bda pre-commit: Add ruff f2a5f99 Move mypy configuration to pyproject.toml 18e9ca0 Enable strict typing 99b81ac Remove support for deprecated settings 2ce0f8f Fix outdated argument in doc examples db20dde Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 32 +- oslo_context/context.py | 248 +++++------- pyproject.toml | 52 +++ .../remove-deprecated-args-044bc6bd79638988.yaml | 13 + releasenotes/source/2025.1.rst | 6 + releasenotes/source/conf.py | 34 +- releasenotes/source/index.rst | 1 + requirements.txt | 3 +- setup.cfg | 11 - setup.py | 3 +- tox.ini | 10 +- 16 files changed, 430 insertions(+), 438 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 704be07..3e42cfc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,2 +6 @@ pbr>=2.0.0 # Apache-2.0 - -debtcollector>=1.2.0 # Apache-2.0 +typing-extensions>=4.12.0 # PSF

1 0

castellan 5.3.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We eagerly announce the release of: castellan 5.3.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. Changes in castellan 5.2.1..5.3.0 --------------------------------- 4bb2b42 Drop redundant injection of VIRTUAL_ENV b670de7 Update master for stable/2025.1 0102671 Make log levels more adequate Diffstat (except docs and test files) ------------------------------------- castellan/_config_driver.py | 16 ++++++++-------- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 31 +++++++++++++------------------ 4 files changed, 28 insertions(+), 26 deletions(-)

1 0

keystonemiddleware 10.10.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are amped to announce the release of: keystonemiddleware 10.10.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 10.10.0 ^^^^^^^ Other Notes * python-memcached has been replaced by pymemcache to support TLS and MTLS. Changes in keystonemiddleware 10.9.0..10.10.0 --------------------------------------------- 21782d3 Apply upper constraints to build documentation 88846f8 Update master for stable/2025.1 4e7ec75 Switch from python-memcache to pymemcache 33a73df Imported Translations from Zanata c8b535f reno: Update master for unmaintained/2023.1 Diffstat (except docs and test files) ------------------------------------- keystonemiddleware/auth_token/__init__.py | 18 +++++++++++++++ keystonemiddleware/auth_token/_cache.py | 13 ++++++----- keystonemiddleware/auth_token/_opts.py | 26 ++++++++++++++++++++++ .../switch-to-pymemcache-fcdad3326f954ea1.yaml | 4 ++++ releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2025.1.rst | 6 +++++ releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 21 +++++++++++++++-- tox.ini | 8 +++++-- 11 files changed, 101 insertions(+), 12 deletions(-)

1 0

ovsdbapp 2.12.0 (flamingo)
by no-reply＠openstack.org 16 May '25

16 May '25

We are amped to announce the release of: ovsdbapp 2.12.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 2.11.0..2.12.0 ---------------------------------- 38d2e3c Replace UPPER_CONSTRAINTS_FILE 34ff105 Add Connection.force_reconnect 64f495b Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/connection.py | 9 ++++- .../functional/backend/ovs_idl/test_connection.py | 40 ++++++++++++++++++++++ releasenotes/source/2025.1.rst | 6 ++++ releasenotes/source/index.rst | 1 + tox.ini | 2 +- 5 files changed, 56 insertions(+), 2 deletions(-)

1 0

ceilometermiddleware 3.7.0 (flamingo)
by no-reply＠openstack.org 15 May '25

15 May '25

We are pumped to announce the release of: ceilometermiddleware 3.7.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/ceilometermiddleware Download the package from: https://pypi.org/project/ceilometermiddleware Please report issues through: https://bugs.launchpad.net/ceilometermiddleware/+bugs For more details, please see below. Changes in ceilometermiddleware 3.6.1..3.7.0 -------------------------------------------- b24b204 Update master for stable/2025.1 a54503e Fix handling of empty reseller_prefix e15f964 Add config file to generate separate middleware config file Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 +++ ceilometermiddleware/swift.py | 6 +++++- etc/swift/ceilometer-config-generator.conf | 4 ++++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 3 +++ 7 files changed, 34 insertions(+), 3 deletions(-)

1 0

python-aodhclient 3.8.0 (flamingo)
by no-reply＠openstack.org 15 May '25

15 May '25

We jubilantly announce the release of: python-aodhclient 3.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-aodhclient Download the package from: https://pypi.org/project/python-aodhclient Please report issues through: https://bugs.launchpad.net/python-aodhclient/+bugs For more details, please see below. 3.8.0 ^^^^^ New Features * Added a "alarm metrics" command to retrieve alarming metrics from the aodh /v2/metrics API endpoint. Changes in python-aodhclient 3.7.1..3.8.0 ----------------------------------------- 16fcf40 Add openstack alarm metrics command 59a6f2e Adjust endpoint url according to devstack plugin update e7e9545 Make capabilities API test more robust ee5dfb0 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 17 +++++- aodhclient/shell.py | 2 + aodhclient/v2/client.py | 2 + aodhclient/v2/metrics.py | 26 +++++++++ aodhclient/v2/metrics_cli.py | 45 +++++++++++++++ ...add-alarm-metrics-command-349e75fbf26171d5.yaml | 4 ++ releasenotes/source/2025.1.rst | 6 ++ releasenotes/source/index.rst | 1 + setup.cfg | 1 + tox.ini | 2 +- 14 files changed, 195 insertions(+), 6 deletions(-)

1 0

sushy 5.6.0 (flamingo)
by no-reply＠openstack.org 15 May '25

15 May '25

We are jazzed to announce the release of: sushy 5.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://bugs.launchpad.net/sushy/+bugs For more details, please see below. 5.6.0 ^^^^^ Prelude ******* sushy-oem-idrac has been merged into this package, removing the need to install it separately. Upgrade Notes ************* * You must uninstall sushy-oem-idrac as a separate package when upgrading. Changes in sushy 5.5.0..5.6.0 ----------------------------- 7c4c992 Update master for stable/2025.1 da09239 migrate sushy_oem_idrac to sushy 6e0f5fa explicit oem extn names and fix parallel tests Diffstat (except docs and test files) ------------------------------------- .../notes/sushy-oem-idrac-f4a1f2202b7955d7.yaml | 7 + releasenotes/source/2025.1.rst | 6 + releasenotes/source/index.rst | 1 + setup.cfg | 7 + sushy/oem/__init__.py | 0 sushy/oem/dell/__init__.py | 18 + sushy/oem/dell/asynchronous.py | 76 ++ sushy/oem/dell/constants.py | 20 + sushy/oem/dell/resources/__init__.py | 0 sushy/oem/dell/resources/attributes.py | 76 ++ sushy/oem/dell/resources/manager/__init__.py | 0 sushy/oem/dell/resources/manager/constants.py | 161 +++ .../dell/resources/manager/idrac_card_service.py | 109 ++ sushy/oem/dell/resources/manager/job_collection.py | 56 + sushy/oem/dell/resources/manager/job_service.py | 59 + .../dell/resources/manager/lifecycle_service.py | 79 ++ sushy/oem/dell/resources/manager/manager.py | 681 ++++++++++ sushy/oem/dell/resources/system/constants.py | 30 + sushy/oem/dell/resources/system/raid_service.py | 147 ++ .../oem/dell/resources/system/storage/constants.py | 28 + .../dell/resources/system/storage/controller.py | 56 + sushy/oem/dell/resources/system/system.py | 165 +++ sushy/oem/dell/resources/taskservice/constants.py | 245 ++++ sushy/oem/dell/resources/taskservice/task.py | 73 + sushy/oem/dell/utils.py | 40 + sushy/resources/oem/common.py | 12 +- .../dell/unit/json_samples/error_pending_job.json | 18 + .../dell/unit/json_samples/error_running_job.json | 18 + .../json_samples/export_configuration_idrac.json | 174 +++ .../export_configuration_nic_bios.json | 1435 ++++++++++++++++++++ .../dell/unit/json_samples/idrac_card_service.json | 17 + .../unit/json_samples/job_collection_expanded.json | 29 + .../oem/dell/unit/json_samples/job_service.json | 13 + .../dell/unit/json_samples/lifecycle_service.json | 13 + .../dell/unit/json_samples/manager_collection.json | 13 + .../oem/dell/unit/json_samples/raid_service.json | 213 +++ .../notes/fix-lc-wait-loop-cebbee222d3dc7c3.yaml | 6 + .../dell/unit/json_samples/storage_controller.json | 58 + .../oem/dell/unit/resources/manager/__init__.py | 0 .../resources/manager/test_idrac_card_service.py | 65 + .../unit/resources/manager/test_job_collection.py | 46 + .../unit/resources/manager/test_job_service.py | 50 + .../resources/manager/test_lifecycle_service.py | 103 ++ .../dell/unit/resources/manager/test_manager.py | 668 +++++++++ .../oem/dell/unit/resources/system/__init__.py | 0 .../dell/unit/resources/system/storage/__init__.py | 0 .../resources/system/storage/test_controller.py | 76 ++ .../unit/resources/system/test_raid_service.py | 209 +++ .../oem/dell/unit/resources/system/test_system.py | 123 ++ .../dell/unit/resources/taskservice/__init__.py | 0 .../dell/unit/resources/taskservice/test_task.py | 66 + 65 files changed, 6573 insertions(+), 15 deletions(-)

1 0

python-observabilityclient 0.5.0 (flamingo)
by no-reply＠openstack.org 15 May '25

15 May '25

We are amped to announce the release of: python-observabilityclient 0.5.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-observabilityclient Download the package from: https://pypi.org/project/python-observabilityclient Please report issues through: https://bugs.launchpad.net/python-observabilityclient/+bugs For more details, please see below. 0.5.0 ^^^^^ New Features ************ * Added a "root_path" configuration option with a PROMETHEUS_ROOT_PATH environment variable override, which allows to set a root path, which gets prepended to the URL path section for each Prometheus API call. So for example when Prometheus is hosted on localhost:80/prometheus, setting the root_path to "prometheus" will enable the observabilityclient to send requests to URLs like localhost:80/prometheus/api/v1/labels. Upgrade Notes ************* * The rbac module was refactored. The *Rbac* class was renamed to *PromQLRbac* and it was moved from *observabilityclient.v1.rbac* to *observabilityclient.rbac*. The *enrich_query* function was renamed to *modify_query* and the *append_rbac* function was renamed to *append_rbac_labels*. All "disable_rbac" logic was removed from the PromQLRbac. This functionality should be handled externaly from the class if needed. The PromQLRbac constructor now requires an instance of the PrometheusAPIClient instead of an instance of observabilityclient. It also requires an explicitly specified project id instead of trying to figure it out from a provided session object. Changes in python-observabilityclient 0.4.0..0.5.0 -------------------------------------------------- 9b63e62 Add root_path configuration option 72dcb9b Refactor obsC rbac module ccf4ace Enable providing keystone session for Prometheus d69cb08 Additional tests and a fix for rbac code 4957ec6 Fix rbac mocking in unit tests 2fc3646 Fix observabilityclient-dsvm-functional job d86f7f1 Bump hacking 49e2647 Check if the HOME env var is set, otherwise use a default cda9307 Update master for stable/2025.1 3365719 Ignore false-positive E231 error Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 14 +- observabilityclient/prometheus_client.py | 25 ++- observabilityclient/{v1 => }/rbac.py | 110 +++++------ observabilityclient/utils/metric_utils.py | 16 +- observabilityclient/v1/client.py | 9 +- observabilityclient/v1/python_api.py | 16 +- .../notes/add-root-path-192ac0e6ea99b84f.yaml | 9 + .../notes/refactor-rbac-967ed5edcc1ef2a4.yaml | 13 ++ releasenotes/source/2025.1.rst | 6 + releasenotes/source/index.rst | 1 + setup.cfg | 9 - tox.ini | 4 +- 16 files changed, 339 insertions(+), 199 deletions(-)

1 0

glance_store 4.10.0 (flamingo)
by no-reply＠openstack.org 15 May '25

15 May '25

We are thrilled to announce the release of: glance_store 4.10.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. Changes in glance_store 4.9.1..4.10.0 ------------------------------------- 8ac98dd Replace Eventlet with concurrent.futures 5aa31d5 Disable do_secure_hash for glance_store-src-ceph-tempest 02161be Update master for stable/2025.1 d9970a3 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 5 + glance_store/_drivers/s3.py | 130 +++++++++++---------- releasenotes/source/2025.1.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 11 +- 5 files changed, 85 insertions(+), 68 deletions(-)

1 0

python-octaviaclient 3.11.0 (flamingo)
by no-reply＠openstack.org 15 May '25

15 May '25

We are happy to announce the release of: python-octaviaclient 3.11.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- octaviaclient For more details, please see below. Changes in python-octaviaclient 3.10.0..3.11.0 ---------------------------------------------- 733f9be osc: Use FormattableColumn for formatter e96d153 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- octaviaclient/osc/v2/amphora.py | 6 +++--- octaviaclient/osc/v2/availabilityzone.py | 6 +++--- octaviaclient/osc/v2/flavor.py | 6 +++--- octaviaclient/osc/v2/health_monitor.py | 10 +++++----- octaviaclient/osc/v2/l7policy.py | 10 +++++----- octaviaclient/osc/v2/l7rule.py | 4 ++-- octaviaclient/osc/v2/listener.py | 26 +++++++++++++------------- octaviaclient/osc/v2/load_balancer.py | 16 ++++++++-------- octaviaclient/osc/v2/member.py | 4 ++-- octaviaclient/osc/v2/pool.py | 26 +++++++++++++------------- octaviaclient/osc/v2/quota.py | 2 +- octaviaclient/osc/v2/utils.py | 16 ++++++++++++++++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 14 files changed, 81 insertions(+), 58 deletions(-)

1 0

python-manilaclient 5.5.0 (flamingo)
by no-reply＠openstack.org 15 May '25

15 May '25

We are pumped to announce the release of: python-manilaclient 5.5.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 5.5.0 ^^^^^ Upgrade Notes * With microversion 2.89, share network subnet metadata updates will be passed to storage backend driver for processing driver specific things if supported. Changes in python-manilaclient 5.4.0..5.5.0 ------------------------------------------- ce60e48 [Doc] Address code block issue dc2afc0 Update master for stable/2025.1 599eec9 Update microversion to 2.89 Diffstat (except docs and test files) ------------------------------------- manilaclient/api_versions.py | 2 +- ...bnet-metadata-updates-to-backend-drivers-61135da17758d9f2.yaml | 6 ++++++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 5 files changed, 18 insertions(+), 5 deletions(-)

1 0

python-ironicclient 5.11.0 (flamingo)
by no-reply＠openstack.org 15 May '25

15 May '25

We are thrilled to announce the release of: python-ironicclient 5.11.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-ironicclient Download the package from: https://pypi.org/project/python-ironicclient Please report issues through: https://bugs.launchpad.net/python-ironicclient/+bugs For more details, please see below. Changes in python-ironicclient 5.10.0..5.11.0 --------------------------------------------- e786c8c Stop using deprecated format_* from osc_utils 960d055 Remove unnecessary +x mode 3c72487 A new 'description' field to the port object b969cc8 Fix bare metal info order in unit tests 55f78c0 Update master for stable/2025.1 b89ca6d Drop remaining use of iteritems Diffstat (except docs and test files) ------------------------------------- ironicclient/common/utils.py | 24 +++++++++ ironicclient/osc/v1/baremetal_chassis.py | 2 +- ironicclient/osc/v1/baremetal_conductor.py | 3 +- ironicclient/osc/v1/baremetal_node.py | 2 +- ironicclient/osc/v1/baremetal_port.py | 29 ++++++++++- ironicclient/osc/v1/baremetal_portgroup.py | 2 +- ironicclient/osc/v1/baremetal_volume_connector.py | 2 +- ironicclient/osc/v1/baremetal_volume_target.py | 2 +- .../osc/v1/test_baremetal_chassis_create.py | 2 +- ironicclient/v1/port.py | 3 +- releasenotes/source/2025.1.rst | 6 +++ releasenotes/source/index.rst | 1 + 17 files changed, 166 insertions(+), 50 deletions(-)

1 0

os-traits 3.5.0
by no-reply＠openstack.org 15 May '25

15 May '25

We are pumped to announce the release of: os-traits 3.5.0 The source is available from: https://opendev.org/openstack/os-traits Download the package from: https://pypi.org/project/os-traits For more details, please see below. Changes in os-traits 3.4.0..3.5.0 --------------------------------- 9d5b0e3 Replace UPPER_CONSTRAINTS_FILE 0643582 Add traits for sound and USB devices on instances. Diffstat (except docs and test files) ------------------------------------- os_traits/compute/sound.py | 27 +++++++++++++++++++++++++++ os_traits/compute/usb.py | 23 +++++++++++++++++++++++ tox.ini | 4 ++-- 3 files changed, 52 insertions(+), 2 deletions(-)

1 0

kolla-ansible 20.0.0 (epoxy)
by no-reply＠openstack.org 14 May '25

14 May '25

We are tickled pink to announce the release of: kolla-ansible 20.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. Changes in kolla-ansible 19.0.0.0rc1..20.0.0 -------------------------------------------- 193830ef0 cinder: check for coordination backend when HA da15011f6 Add key type for letsencrypt certificate 8945590f8 doc: remove keystone admin port cleanup 9a52b8d5f Fix duplicate names in Prometheus volumes 6baecfa2f Run ML2/OVS agents processes in separate containers 44aa76cf2 Docs: update RabbitMQ HA instructions 64cd8e007 Remove notifiers from loadbalancer config 7d1f8d1d4 Cinder: move to block-storage in service catalog aed182726 Add Pure Storage FlashBlade as Manila backend 71e60fdd7 fixed jinja2 template variable parsing fe19e7a51 Upgrade Prometheus to v3 a8addf90d Manage mysqld db user only from db related hosts da12a4be7 Fix Nova and Cinder external ceph enabled check 8fa110bb8 Upgrade RabbitMQ docs for the Epoxy release 50bbcb09d Don't allow quorum queues to be disabled 6149799a6 [CI] Use ss instead of netstat c08bd597c Correctly append --ask-vault-password as a single argument 8f0a4f672 Remove om_enable_rabbitmq_high_availability ddd6d5ab6 Document dev mode with custom repository 4614aad4c rabbitmq: Add support for using stream queues for fanout 94b91727a Improve Ironic pin_release_version configuration 865c33087 Remove service role from ironic-inspector user c803413c5 Move kolla_toolbox to high level client f1fa914a8 Bump ansible-core versions to 2.17 and 2.18 5db605ca3 Correct lock path for ironic-inspector 4f9bb2b5a Adding new placement error to expected critical msgs 664a79f42 Disable firewalld in Bifrost container 3c3a18aa5 Rabbitmq: enable quorum for transient queues bff6ee9d7 Assign labels to kolla volumes 44c2fbf62 Fix octavia.conf generation after jobboard fix 85d04aae8 Drop support for Ubuntu Jammy (22.04) 604361451 Fix config.json templates for Prometheus exporters c04611efd CI: bump amphora image to jammy 415adb019 Process Epoxy removals from TODO 062df4005 Deprecate bifrost and deploy-bifrost/deploy-servers subcommands c8645ea52 CI: Fix ipv6 scenario triggered from Kolla 6ebdbb979 setup.cfg: Replace dashes with underscores 8421d1047 Allow ignoring missing containers in service-stop 4e0c0aa76 Add oslo.messaging Queue Manager 1d7e58025 Remove notifiers from uwsgi service role adb1a9b91 Remove Swift role 37b97d46a mariadb: Use mysql_query instead of command f9790cf0b CI: Wait until containers exit health starting state 8670c3f9d ovn: Add support for OVN SB Relay 0a12ec97c Document Ubuntu Noble (24.04) as supported b588e7f58 Replace meeting time by link to the meetings page f726cfd99 Add container engine migration scenario 12aa03929 Add action for getting container names list 32cdbd23d Merge of container_facts modules 1ed6cbaa5 CI: Remove usage of Ubuntu workarounds c2d4e1285 zuul: Bump base job timeout to 2.5h c05773e1e Add nova-metadata to nova_services_require_policy_json 8f2781f25 CI: Fix documentation jobs ce9cba2cb Fix Redis Sentinel authentication for octavia's jobboard HA 94765ab46 Fix boolean representation in all configurations 9fabfd67e neutron-metadata-agent: Disable healthcheck 3dae9aa49 Fix variable name in globals.yml for enabling the memcached_exporter 4b05fa8a5 add lightbits driver support 9ed16a387 Fix typo in prechecks command 0f1b4a89f Remove oslo_concurrency from keystone.conf 99925de1b Remove deprecated secure_proxy_ssl_header option d277323b3 prometheus: Support overriding address of scrape targets 8d1b593ad Fix for external-frontend-map file not being copied eb3b79460 docs: Correct typo in variable name c8d813c09 CI: Remove unnecessary ansible values (after migration to ansible-core) f566e8f0a Remove not needed service role assignment during upgrades. 62c07e73d Fix regex for blackbox exporter targets 2e99f8553 Fix kolla_container_facts performance fc4e6cb1d ironic: change enable_ironic_neutron_agent default to no 19af5826f Move actions to kolla_container_facts 94b4adae2 Support reducing scope of delegated fact gathering 55fd5a024 Fix ironic's metrics when prometheus exporter enabled 2523ab437 Ensure consistent lock_path across all services 725d15173 Fix IPv6 addresses for prometheus exporters 7b5ff686e Fix usage of multiple OVN availability zones da2ee0ad0 [Pure Storage] Update Pure reference page in documentation e39e46a86 cinder: Allow configuring backend_name for Ceph backends 445e62958 Fix Grafana datasource update 57f526907 Revert "keystone: handle OIDC metadata & attribute mappings as template" 2f45726da cinder: Add support for using uWSGI a944fad52 Set lock_path for openstack services 454dc2a95 placement: Add support for using uWSGI fa6535890 Reintroduce kolla-ansible check 6eb6fee6e fluentd: Add placement to list of supported services 2c09d0c89 Revert "CI: Switch to stable/2024.2 tinyipa due to failures" 99b680019 CI: IPV6 - Enable Prometheus in IPV6 scenario 330e68d24 swift: Deprecate for removal in 2025.2 b59fe6cc4 Fix Grafana role support for Ansible check mode d24c42af9 CI: zun - use alpine from quay.io 72ffcfb68 Fix Magnum role support for Ansible check mode 33fa9c185 Fix Opensearch role support for Ansible check mode 54cf86acb CI: Bump mariadb_monitor_connect_timeout to 60000 af255c754 CI: Add mariadb jobs trigger on proxysql changes 6460e9708 Remove deleted nova option [api] use_forwarded_for e6b6e8858 docs: fix link to Cinder HA page 15b5606a0 docs: define OPENSTACK_RELEASE 2b45633d9 Fix reference to generating a private CA d99b080c9 CI: Fix ironic scenario image builds 904fae2a9 ironic: Change Prometheus metrics dir 3a8bfc0ac Support mounting host's /dev/shm into container 63801d1a3 nova: Add support for using uWSGI 638fb6546 fluentd: Add uwsgi config 2f9f09780 uwsgi: Add logfile-chown and logfile-chmod options 4834276f0 proxysql: Revert to upstream defaults for most settings a2273026d Define retry_tag for unprocessed Fluentd logs 891568d6d CI: Add unreadable files to check-logs.sh 9ecdf2f0a Use public keystone URL for www_authenticate_uri 884eacc70 Prometheus: Fix target when TLS for rabbitmq is disabled 795fbb104 CI: Bump mariadb_monitor_galera_healthcheck_timeout to 30 seconds 31c7317ab CI: Use Zuul cache/mirror for docker 5015e9e19 CI: Remove OpenSearch connectivity check in fluentd logs 4400e5fb9 Fix l7 haproxy check for opensearch-dashboards and prometheus-server 2e43cc231 CI: Fix fluentd log check 5a3fb2b4d fluentd: rework openstack logs match ee3dfcf87 Docs update - install missing dbus-1 on Noble 70279972b HAProxy: Switch to L7 Healthchecks 638e1e306 Retry Ansible Galaxy calls ed6dbf32d CI: Mark slurp jobs as non voting for now 198da94fe Docs update - kolla-ansible cli parameters a1d817d99 Add service-uwsgi-config role e877ec3d2 ironic: Make ironic-inspector optional 5c975611f nova: Split out metadata to a separate container cd2a09029 Revert "CI: Disable SLURP jobs for D cycle" 756b23bd4 CI: Switch previous_release to 2024.2 and slurp to 2024.1 31ab71ac4 CI: Increase mariadb_monitor_read_only_interval and RMQ timeouts 1fbb299db proxysql: Add mariadb_monitor_read_only_interval a349ca19a Add Let's Encrypt EAB support e00bb43ba common: support custom cron-logrotate-global.conf db1942595 Remove problematic comments from fluentd.conf 1916b3c2a Generate system scoped public-openrc 81a5a7cf4 Remove tacker demos from contrib and their usage in nfv CI 99e61073f magnum: Add k8s_cluster_api_rockylinux to CAPI drivers list 3d8d34d48 CI: Switch to stable/2024.2 tinyipa due to failures cf4ee97e0 [CI] Use letsencrypt/pebble from quay.io 4e2af1872 [CI] Fix Ansible 2.16.14 breakage (cephadm jobs) 0298699a4 [CI] Fix testing inventory template due Ansible 2.16.14 breakage ccf1710b1 Replace ipaddr with ansible.utils.ipaddr cb69a3e60 Support deleting services and endpoints 7223bb75c keystone: handle OIDC metadata & attribute mappings as template 0bd1313f5 docs: minor fixes to external Ceph guide 61045807e CI: skip Cinder HA precheck for zun scenario 624056be0 Fix proxysql-config's TLS DB configuration fc0e0fb82 Fix unintentional trigger of ansible handlers 345ecbf55 Refactor services' check-containers and optimise 53376aed8 Performance: Don't notify handlers during config 006ff0718 Don't notify handlers during copy-cert a675b34dd CI: Use debian/ubuntu mirrored images on build 03fc14e44 reno: Update master for unmaintained/2023.1 d2d5069d8 Add venus-dashboard into horizon 12a287a6b CI: Add group_vars/all.yml trigger for all scenarios 752592f1b systemd: Add kolla.target e4d7c6d69 Support removing user role assignments 065bc8028 mariadb: switch to use mariadb flavored commands 6a2369f38 Add size limits to Fluentd buffers 3f55994bb Fix TLS settings when letsencrypt turned on f30dd3e52 Fix external ceph cinder keyring b5d594d35 update openstack_previous_release_name var to 2024.1 20cc842f4 Avoid double quotes in HAProxy configuration 0d859959b Quickstart guide - remove Ansible dependency 66534e9dc Enhance Ceph Integration for Multiple Clusters 6faae441b Use more descriptive libvirt secret names corresponding to reality 1cec85d68 CI: Use libpod/registry for registry 4f62dd466 cli: Add check=True to catch Ansible failures 3564f9dea Updates docs to fix incorrect container example e0c095fd7 Give ironic-inspector system scope ``all`` 2f124f8e9 Update user role assignments 51fb7f92b Fix internal endpoint for the heat-cfn service 2adc14887 set haproxy for cyborg module cd8ecfc8f Fix Octavia cert generation 04873199e CI: Add pre/run.yml to files in all base jobs 2339561eb Add removal of --key parameter to CLI rewrite note a1eec2498 Fix destroy command with new python CLI fa54e69eb Fix: add common options to RabbitMQ version check d808d7163 Fix cinder etcd3gw backend_url c1e566016 Remove contrib/bash-completion and demos 1c7d17d1e Fix detection of editable installation ee9cbb7f6 Add Python 3.12 classifier f15c0d3d4 Fix typo in kolla-ansible metavar bc45e4565 Update master for stable/2024.2 2d52f7e33 Add an option to set OIDCXForwardedHeaders f5ad7829c Prevent accidental downgrades of RabbitMQ ec10a63db manila: add missing become to "Copying over existing policy file" task 050d0ea06 Use new module names from openstack.cloud ca9720e14 Add precheck for Horizon config file renames in Caracal 5a13877ae loadbalancer: fail on failed "Wait for backup * to start" handlers bb444acb4 ironic: fix tftp server address in the dnsmasq configuration 6051edba4 Skyline: use an external object store (Swift) in the dashboard 7de3f788f CI: Add post-upgrade description to post-upgrade tasks 36b8bfd2f CI: add a message for fluentd string match function 232aeaaa5 ironic: add enable_ironic_dnsmasq parameter Diffstat (except docs and test files) ------------------------------------- README.rst | 1 - ansible/gather-facts.yml | 2 +- ansible/group_vars/all.yml | 101 ++--- ansible/inventory/all-in-one | 22 +- ansible/inventory/multinode | 22 +- ansible/library/kolla_container.py | 8 +- ansible/library/kolla_container_facts.py | 197 ++++++--- ansible/library/kolla_container_volume_facts.py | 108 ----- ansible/library/kolla_toolbox.py | 348 +++++++-------- ansible/migrate-container-engine.yml | 21 + ansible/module_utils/kolla_container_worker.py | 24 -- ansible/module_utils/kolla_docker_worker.py | 19 +- ansible/module_utils/kolla_podman_worker.py | 28 +- ansible/module_utils/kolla_systemd_worker.py | 1 + ansible/post-deploy.yml | 9 + ansible/roles/aodh/defaults/main.yml | 8 + ansible/roles/aodh/handlers/main.yml | 8 - ansible/roles/aodh/tasks/check-containers.yml | 15 +- ansible/roles/aodh/tasks/check.yml | 3 + ansible/roles/aodh/tasks/config.yml | 8 - ansible/roles/aodh/tasks/precheck.yml | 2 +- ansible/roles/aodh/templates/aodh-api.json.j2 | 6 + .../roles/aodh/templates/aodh-evaluator.json.j2 | 6 + ansible/roles/aodh/templates/aodh-listener.json.j2 | 6 + ansible/roles/aodh/templates/aodh-notifier.json.j2 | 6 + ansible/roles/aodh/templates/aodh.conf.j2 | 19 +- ansible/roles/barbican/defaults/main.yml | 9 + ansible/roles/barbican/handlers/main.yml | 6 - ansible/roles/barbican/tasks/check-containers.yml | 15 +- ansible/roles/barbican/tasks/check.yml | 4 + ansible/roles/barbican/tasks/config.yml | 12 +- ansible/roles/barbican/tasks/precheck.yml | 2 +- .../roles/barbican/templates/barbican-api.json.j2 | 6 + .../templates/barbican-keystone-listener.json.j2 | 6 + .../barbican/templates/barbican-worker.json.j2 | 7 + ansible/roles/barbican/templates/barbican.conf.j2 | 20 +- ansible/roles/bifrost/tasks/bootstrap.yml | 2 +- ansible/roles/bifrost/tasks/reconfigure.yml | 28 +- ansible/roles/bifrost/tasks/stop.yml | 2 +- ansible/roles/bifrost/templates/bifrost.yml.j2 | 3 + ansible/roles/blazar/defaults/main.yml | 12 + ansible/roles/blazar/handlers/main.yml | 4 - ansible/roles/blazar/tasks/check-containers.yml | 15 +- ansible/roles/blazar/tasks/check.yml | 3 + ansible/roles/blazar/tasks/config.yml | 6 - ansible/roles/blazar/tasks/precheck.yml | 2 +- ansible/roles/blazar/templates/blazar-api.json.j2 | 6 + .../roles/blazar/templates/blazar-manager.json.j2 | 6 + ansible/roles/blazar/templates/blazar.conf.j2 | 16 +- ansible/roles/ceilometer/defaults/main.yml | 4 + ansible/roles/ceilometer/handlers/main.yml | 8 - .../roles/ceilometer/tasks/check-containers.yml | 16 +- ansible/roles/ceilometer/tasks/check.yml | 3 + ansible/roles/ceilometer/tasks/config.yml | 26 -- ansible/roles/ceilometer/tasks/register.yml | 16 - .../templates/ceilometer-central.json.j2 | 8 +- .../templates/ceilometer-compute.json.j2 | 6 + .../ceilometer/templates/ceilometer-ipmi.json.j2 | 6 + .../templates/ceilometer-notification.json.j2 | 6 + .../roles/ceilometer/templates/ceilometer.conf.j2 | 14 +- ansible/roles/certificates/tasks/generate.yml | 71 ++- ansible/roles/certificates/tasks/main.yml | 2 +- ansible/roles/cinder/defaults/main.yml | 44 +- ansible/roles/cinder/handlers/main.yml | 8 - ansible/roles/cinder/tasks/check-containers.yml | 18 +- ansible/roles/cinder/tasks/check.yml | 4 + ansible/roles/cinder/tasks/config.yml | 36 +- ansible/roles/cinder/tasks/external_ceph.yml | 20 +- ansible/roles/cinder/tasks/precheck.yml | 23 +- ansible/roles/cinder/tasks/upgrade.yml | 7 - ansible/roles/cinder/templates/cinder-api.json.j2 | 21 +- .../roles/cinder/templates/cinder-backup.json.j2 | 6 + .../cinder/templates/cinder-scheduler.json.j2 | 6 + .../roles/cinder/templates/cinder-volume.json.j2 | 6 + ansible/roles/cinder/templates/cinder.conf.j2 | 71 +-- ansible/roles/cloudkitty/defaults/main.yml | 6 + ansible/roles/cloudkitty/handlers/main.yml | 4 - .../roles/cloudkitty/tasks/check-containers.yml | 15 +- ansible/roles/cloudkitty/tasks/check.yml | 3 + ansible/roles/cloudkitty/tasks/config.yml | 10 - ansible/roles/cloudkitty/tasks/precheck.yml | 2 +- .../cloudkitty/templates/cloudkitty-api.json.j2 | 6 + .../templates/cloudkitty-processor.json.j2 | 6 + .../roles/cloudkitty/templates/cloudkitty.conf.j2 | 16 +- ansible/roles/collectd/handlers/main.yml | 2 - ansible/roles/collectd/tasks/check-containers.yml | 15 +- ansible/roles/collectd/tasks/check.yml | 3 + ansible/roles/collectd/tasks/config.yml | 4 - ansible/roles/common/defaults/main.yml | 22 +- ansible/roles/common/handlers/main.yml | 6 - ansible/roles/common/tasks/check-containers.yml | 16 +- ansible/roles/common/tasks/check.yml | 3 + ansible/roles/common/tasks/config.yml | 23 +- .../common/templates/conf/input/00-global.conf.j2 | 5 +- .../templates/conf/input/08-prometheus.conf.j2 | 2 +- .../common/templates/conf/input/13-uwsgi.conf.j2 | 18 + .../common/templates/conf/output/00-local.conf.j2 | 6 + .../common/templates/conf/output/01-es.conf.j2 | 13 +- .../templates/conf/output/03-opensearch.conf.j2 | 13 +- ansible/roles/common/templates/cron.json.j2 | 8 +- ansible/roles/common/templates/fluentd.conf.j2 | 4 - ansible/roles/common/templates/fluentd.json.j2 | 8 +- .../roles/common/templates/kolla-toolbox.json.j2 | 6 + ansible/roles/common/templates/kolla.target.j2 | 5 + .../common/templates/public-openrc-system.sh.j2 | 15 + .../container-engine-migration/defaults/main.yml | 19 + .../container-engine-migration/files/ce-cleanup.sh | 55 +++ .../tasks/check-migration.yml | 15 + .../tasks/install-target-engine.yml | 8 + .../container-engine-migration/tasks/main.yml | 8 + .../tasks/migrate-volumes.yml | 69 +++ .../tasks/ovs-cleanup.yml | 14 + .../tasks/uninstall-current-engine.yml | 20 + ansible/roles/cyborg/defaults/main.yml | 17 + ansible/roles/cyborg/handlers/main.yml | 6 - ansible/roles/cyborg/tasks/check-containers.yml | 16 +- ansible/roles/cyborg/tasks/check.yml | 3 + ansible/roles/cyborg/tasks/config.yml | 8 - ansible/roles/cyborg/tasks/precheck.yml | 2 +- .../roles/cyborg/templates/cyborg-agent.json.j2 | 6 + ansible/roles/cyborg/templates/cyborg-api.json.j2 | 6 + .../cyborg/templates/cyborg-conductor.json.j2 | 6 + ansible/roles/cyborg/templates/cyborg.conf.j2 | 14 +- ansible/roles/designate/defaults/main.yml | 11 + ansible/roles/designate/handlers/main.yml | 14 - ansible/roles/designate/tasks/backend_external.yml | 4 - ansible/roles/designate/tasks/check-containers.yml | 15 +- ansible/roles/designate/tasks/check.yml | 3 + ansible/roles/designate/tasks/config.yml | 14 - ansible/roles/designate/tasks/precheck.yml | 8 +- .../designate/templates/designate-api.json.j2 | 6 + .../templates/designate-backend-bind9.json.j2 | 8 +- .../designate/templates/designate-central.json.j2 | 6 + .../designate/templates/designate-mdns.json.j2 | 6 + .../designate/templates/designate-producer.json.j2 | 6 + .../designate/templates/designate-sink.json.j2 | 6 + .../designate/templates/designate-worker.json.j2 | 8 +- .../roles/designate/templates/designate.conf.j2 | 19 +- ansible/roles/destroy/tasks/cleanup_host.yml | 3 +- ansible/roles/etcd/defaults/main.yml | 5 + ansible/roles/etcd/handlers/main.yml | 4 - ansible/roles/etcd/tasks/check-containers.yml | 15 +- ansible/roles/etcd/tasks/check.yml | 3 + ansible/roles/etcd/tasks/config.yml | 4 +- ansible/roles/etcd/tasks/copy-certs.yml | 52 +-- ansible/roles/etcd/tasks/precheck.yml | 4 +- ansible/roles/etcd/templates/etcd.json.j2 | 6 + ansible/roles/glance/defaults/main.yml | 20 +- ansible/roles/glance/handlers/main.yml | 4 - ansible/roles/glance/tasks/check-containers.yml | 17 +- ansible/roles/glance/tasks/check.yml | 4 + ansible/roles/glance/tasks/config.yml | 34 +- ansible/roles/glance/tasks/external_ceph.yml | 10 +- ansible/roles/glance/tasks/precheck.yml | 2 +- ansible/roles/glance/templates/glance-api.conf.j2 | 33 +- ansible/roles/glance/templates/glance-api.json.j2 | 12 +- .../roles/glance/templates/glance-cache.conf.j2 | 3 + .../roles/glance/templates/glance-swift.conf.j2 | 8 - .../glance/templates/glance-tls-proxy.json.j2 | 8 +- ansible/roles/gnocchi/defaults/main.yml | 13 +- ansible/roles/gnocchi/handlers/main.yml | 6 - ansible/roles/gnocchi/tasks/check-containers.yml | 15 +- ansible/roles/gnocchi/tasks/check.yml | 3 + ansible/roles/gnocchi/tasks/config.yml | 8 - ansible/roles/gnocchi/tasks/external_ceph.yml | 14 +- ansible/roles/gnocchi/tasks/precheck.yml | 2 +- .../roles/gnocchi/templates/gnocchi-api.json.j2 | 7 +- .../gnocchi/templates/gnocchi-metricd.json.j2 | 6 + .../roles/gnocchi/templates/gnocchi-statsd.json.j2 | 6 + ansible/roles/gnocchi/templates/gnocchi.conf.j2 | 22 +- ansible/roles/grafana/defaults/main.yml | 4 + ansible/roles/grafana/handlers/main.yml | 3 - ansible/roles/grafana/tasks/check-containers.yml | 14 +- ansible/roles/grafana/tasks/check.yml | 3 + ansible/roles/grafana/tasks/config.yml | 16 +- ansible/roles/grafana/tasks/post_config.yml | 1 + ansible/roles/grafana/tasks/precheck.yml | 2 +- ansible/roles/grafana/templates/grafana.json.j2 | 8 +- ansible/roles/grafana/templates/prometheus.yaml.j2 | 1 - ansible/roles/hacluster/handlers/main.yml | 6 - ansible/roles/hacluster/tasks/check-containers.yml | 26 +- ansible/roles/hacluster/tasks/check.yml | 3 + ansible/roles/hacluster/tasks/config.yml | 10 - ansible/roles/hacluster/tasks/precheck.yml | 2 +- ansible/roles/haproxy-config/tasks/main.yml | 4 - ansible/roles/heat/defaults/main.yml | 15 +- ansible/roles/heat/handlers/main.yml | 6 - ansible/roles/heat/tasks/check-containers.yml | 15 +- ansible/roles/heat/tasks/check.yml | 3 + ansible/roles/heat/tasks/config.yml | 12 +- ansible/roles/heat/tasks/precheck.yml | 4 +- ansible/roles/heat/templates/heat-api-cfn.json.j2 | 8 +- ansible/roles/heat/templates/heat-api.json.j2 | 8 +- ansible/roles/heat/templates/heat-engine.json.j2 | 6 + ansible/roles/heat/templates/heat.conf.j2 | 21 +- ansible/roles/horizon/defaults/main.yml | 8 + ansible/roles/horizon/handlers/main.yml | 2 - ansible/roles/horizon/tasks/check-containers.yml | 16 +- ansible/roles/horizon/tasks/check.yml | 3 + ansible/roles/horizon/tasks/config.yml | 14 +- ansible/roles/horizon/tasks/precheck.yml | 2 +- .../horizon/templates/_9998-kolla-settings.py.j2 | 6 - ansible/roles/horizon/templates/horizon.json.j2 | 7 + ansible/roles/influxdb/handlers/main.yml | 2 - ansible/roles/influxdb/tasks/check-containers.yml | 14 +- ansible/roles/influxdb/tasks/check.yml | 3 + ansible/roles/influxdb/tasks/config.yml | 4 - ansible/roles/influxdb/tasks/precheck.yml | 2 +- ansible/roles/ironic/defaults/main.yml | 31 +- ansible/roles/ironic/handlers/main.yml | 14 - ansible/roles/ironic/tasks/bootstrap_service.yml | 4 +- ansible/roles/ironic/tasks/check-containers.yml | 18 +- ansible/roles/ironic/tasks/check.yml | 3 + ansible/roles/ironic/tasks/config.yml | 35 +- ansible/roles/ironic/tasks/precheck.yml | 13 +- ansible/roles/ironic/tasks/rolling_upgrade.yml | 8 +- ansible/roles/ironic/tasks/upgrade.yml | 7 - .../ironic/templates/ironic-conductor.json.j2 | 6 + .../roles/ironic/templates/ironic-dnsmasq.conf.j2 | 4 +- .../roles/ironic/templates/ironic-dnsmasq.json.j2 | 8 +- ansible/roles/ironic/templates/ironic-http.json.j2 | 8 +- .../ironic/templates/ironic-inspector.conf.j2 | 17 +- .../ironic/templates/ironic-inspector.json.j2 | 5 + .../templates/ironic-prometheus-exporter.json.j2 | 8 +- ansible/roles/ironic/templates/ironic.conf.j2 | 40 +- ansible/roles/iscsi/handlers/main.yml | 4 - ansible/roles/iscsi/tasks/check-containers.yml | 16 +- ansible/roles/iscsi/tasks/check.yml | 3 + ansible/roles/iscsi/tasks/config.yml | 2 - ansible/roles/iscsi/tasks/precheck.yml | 2 +- ansible/roles/keystone/defaults/main.yml | 16 +- ansible/roles/keystone/handlers/main.yml | 6 - ansible/roles/keystone/tasks/bootstrap_service.yml | 8 +- ansible/roles/keystone/tasks/check-containers.yml | 15 +- ansible/roles/keystone/tasks/check.yml | 4 + ansible/roles/keystone/tasks/config.yml | 20 +- ansible/roles/keystone/tasks/precheck.yml | 4 +- ansible/roles/keystone/tasks/register.yml | 2 +- .../keystone/templates/keystone-fernet.json.j2 | 6 + .../roles/keystone/templates/keystone-ssh.json.j2 | 8 +- ansible/roles/keystone/templates/keystone.conf.j2 | 20 +- ansible/roles/keystone/templates/keystone.json.j2 | 9 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 1 + ansible/roles/kuryr/handlers/main.yml | 2 - ansible/roles/kuryr/tasks/check-containers.yml | 17 +- ansible/roles/kuryr/tasks/check.yml | 3 + ansible/roles/kuryr/tasks/config.yml | 8 - ansible/roles/kuryr/tasks/precheck.yml | 2 +- ansible/roles/kuryr/templates/kuryr.conf.j2 | 3 + ansible/roles/kuryr/templates/kuryr.json.j2 | 6 + ansible/roles/letsencrypt/defaults/main.yml | 6 +- ansible/roles/letsencrypt/handlers/main.yml | 4 - .../roles/letsencrypt/tasks/check-containers.yml | 16 +- ansible/roles/letsencrypt/tasks/check.yml | 4 + ansible/roles/letsencrypt/tasks/config.yml | 6 - ansible/roles/letsencrypt/tasks/precheck.yml | 13 +- ansible/roles/letsencrypt/templates/crontab.j2 | 10 +- .../templates/letsencrypt-lego-run.sh.j2 | 10 +- .../letsencrypt/templates/letsencrypt-lego.json.j2 | 8 +- .../templates/letsencrypt-webserver.json.j2 | 8 +- ansible/roles/loadbalancer/defaults/main.yml | 33 ++ ansible/roles/loadbalancer/handlers/main.yml | 2 + .../roles/loadbalancer/tasks/check-containers.yml | 16 +- ansible/roles/loadbalancer/tasks/check.yml | 3 + ansible/roles/loadbalancer/tasks/config.yml | 62 +-- ansible/roles/loadbalancer/tasks/copy-certs.yml | 66 ++- ansible/roles/loadbalancer/tasks/precheck.yml | 95 ++-- .../templates/haproxy-ssh/haproxy-ssh.json.j2 | 8 +- .../loadbalancer/templates/haproxy/haproxy.json.j2 | 15 +- .../templates/keepalived/keepalived.json.j2 | 8 +- .../templates/proxysql/proxysql.json.j2 | 8 +- .../templates/proxysql/proxysql.yaml.j2 | 51 ++- ansible/roles/magnum/defaults/main.yml | 6 + ansible/roles/magnum/handlers/main.yml | 4 - ansible/roles/magnum/tasks/check-containers.yml | 16 +- ansible/roles/magnum/tasks/check.yml | 3 + ansible/roles/magnum/tasks/config.yml | 8 - ansible/roles/magnum/tasks/precheck.yml | 2 +- ansible/roles/magnum/tasks/register.yml | 7 +- ansible/roles/magnum/templates/magnum-api.json.j2 | 6 + .../magnum/templates/magnum-conductor.json.j2 | 6 + ansible/roles/magnum/templates/magnum.conf.j2 | 15 +- ansible/roles/manila/defaults/main.yml | 17 +- ansible/roles/manila/handlers/main.yml | 8 - ansible/roles/manila/tasks/check-containers.yml | 16 +- ansible/roles/manila/tasks/check.yml | 3 + ansible/roles/manila/tasks/config.yml | 9 +- ansible/roles/manila/tasks/external_ceph.yml | 8 +- ansible/roles/manila/tasks/precheck.yml | 2 +- ansible/roles/manila/templates/manila-api.json.j2 | 6 + ansible/roles/manila/templates/manila-data.json.j2 | 6 + .../manila/templates/manila-scheduler.json.j2 | 6 + .../roles/manila/templates/manila-share.conf.j2 | 25 +- .../roles/manila/templates/manila-share.json.j2 | 6 + ansible/roles/manila/templates/manila.conf.j2 | 13 +- ansible/roles/mariadb/handlers/main.yml | 24 +- ansible/roles/mariadb/tasks/backup.yml | 2 +- ansible/roles/mariadb/tasks/check-containers.yml | 16 +- ansible/roles/mariadb/tasks/check.yml | 22 +- ansible/roles/mariadb/tasks/config.yml | 4 - ansible/roles/mariadb/tasks/deploy.yml | 5 + ansible/roles/mariadb/tasks/lookup_cluster.yml | 23 +- ansible/roles/mariadb/tasks/precheck.yml | 8 +- ansible/roles/mariadb/tasks/recover_cluster.yml | 21 +- ansible/roles/mariadb/tasks/restart_services.yml | 20 +- ansible/roles/mariadb/templates/mariadb.json.j2 | 2 +- ansible/roles/masakari/defaults/main.yml | 8 + ansible/roles/masakari/handlers/main.yml | 8 - ansible/roles/masakari/tasks/check-containers.yml | 16 +- ansible/roles/masakari/tasks/check.yml | 3 + ansible/roles/masakari/tasks/config.yml | 14 - ansible/roles/masakari/tasks/precheck.yml | 2 +- .../roles/masakari/templates/masakari-api.json.j2 | 6 + .../masakari/templates/masakari-engine.json.j2 | 6 + .../templates/masakari-hostmonitor.json.j2 | 8 +- .../templates/masakari-instancemonitor.json.j2 | 6 + .../masakari/templates/masakari-monitors.conf.j2 | 7 +- ansible/roles/masakari/templates/masakari.conf.j2 | 21 +- ansible/roles/memcached/handlers/main.yml | 2 - ansible/roles/memcached/tasks/check-containers.yml | 16 +- ansible/roles/memcached/tasks/check.yml | 3 + ansible/roles/memcached/tasks/config.yml | 1 - ansible/roles/memcached/tasks/precheck.yml | 2 +- ansible/roles/mistral/defaults/main.yml | 8 + ansible/roles/mistral/handlers/main.yml | 8 - ansible/roles/mistral/tasks/check-containers.yml | 15 +- ansible/roles/mistral/tasks/check.yml | 3 + ansible/roles/mistral/tasks/config.yml | 8 - ansible/roles/mistral/tasks/precheck.yml | 2 +- .../roles/mistral/templates/mistral-api.json.j2 | 6 + .../roles/mistral/templates/mistral-engine.json.j2 | 6 + .../mistral/templates/mistral-event-engine.json.j2 | 6 + .../mistral/templates/mistral-executor.json.j2 | 6 + ansible/roles/mistral/templates/mistral.conf.j2 | 18 +- ansible/roles/multipathd/handlers/main.yml | 2 - .../roles/multipathd/tasks/check-containers.yml | 15 +- ansible/roles/multipathd/tasks/check.yml | 3 + ansible/roles/multipathd/tasks/config.yml | 4 - ansible/roles/neutron/defaults/main.yml | 47 +- ansible/roles/neutron/handlers/main.yml | 46 +- ansible/roles/neutron/tasks/check-containers.yml | 17 +- ansible/roles/neutron/tasks/check.yml | 3 + ansible/roles/neutron/tasks/config.yml | 52 +-- .../neutron/tasks/neutron_plugin_agent_check.yml | 11 +- ansible/roles/neutron/tasks/precheck.yml | 2 +- ansible/roles/neutron/tasks/upgrade.yml | 7 - ansible/roles/neutron/templates/dhcp_agent.ini.j2 | 6 +- .../roles/neutron/templates/fwaas_driver.ini.j2 | 2 +- .../neutron/templates/ironic-neutron-agent.json.j2 | 8 +- ansible/roles/neutron/templates/ml2_conf.ini.j2 | 6 +- .../neutron/templates/neutron-bgp-dragent.json.j2 | 6 + .../neutron/templates/neutron-dhcp-agent.json.j2 | 6 + .../neutron/templates/neutron-eswitchd.json.j2 | 8 +- .../templates/neutron-infoblox-ipam-agent.json.j2 | 8 +- .../neutron/templates/neutron-l3-agent.json.j2 | 6 + .../templates/neutron-linuxbridge-agent.json.j2 | 8 +- .../templates/neutron-metadata-agent.json.j2 | 6 + .../templates/neutron-metering-agent.json.j2 | 6 + .../neutron/templates/neutron-mlnx-agent.json.j2 | 8 +- .../neutron-openvswitch-agent-xenapi.json.j2 | 6 + .../templates/neutron-openvswitch-agent.json.j2 | 8 +- .../neutron/templates/neutron-ovn-agent.json.j2 | 6 + .../templates/neutron-ovn-metadata-agent.json.j2 | 6 + .../roles/neutron/templates/neutron-server.json.j2 | 8 +- .../neutron/templates/neutron-sriov-agent.json.j2 | 6 + .../neutron/templates/neutron-tls-proxy.json.j2 | 8 +- ansible/roles/neutron/templates/neutron.conf.j2 | 25 +- .../roles/neutron/templates/neutron_taas.conf.j2 | 2 +- .../neutron/templates/openvswitch_agent.ini.j2 | 2 +- ansible/roles/nova-cell/defaults/main.yml | 18 +- ansible/roles/nova-cell/handlers/main.yml | 14 - ansible/roles/nova-cell/tasks/check-containers.yml | 20 +- ansible/roles/nova-cell/tasks/check.yml | 3 + .../roles/nova-cell/tasks/config-libvirt-tls.yml | 2 - ansible/roles/nova-cell/tasks/config.yml | 22 - ansible/roles/nova-cell/tasks/deploy.yml | 2 - .../roles/nova-cell/tasks/discover_computes.yml | 2 +- ansible/roles/nova-cell/tasks/external_ceph.yml | 36 +- ansible/roles/nova-cell/tasks/libvirt-cleanup.yml | 2 +- ansible/roles/nova-cell/tasks/post-config.yml | 8 - ansible/roles/nova-cell/tasks/precheck.yml | 16 +- ansible/roles/nova-cell/tasks/rolling_upgrade.yml | 2 - .../templates/nova-compute-ironic.json.j2 | 6 + .../roles/nova-cell/templates/nova-compute.json.j2 | 14 +- .../nova-cell/templates/nova-conductor.json.j2 | 8 +- .../roles/nova-cell/templates/nova-libvirt.json.j2 | 10 +- .../nova-cell/templates/nova-novncproxy.json.j2 | 8 +- .../nova-cell/templates/nova-serialproxy.json.j2 | 8 +- .../templates/nova-spicehtml5proxy.json.j2 | 8 +- ansible/roles/nova-cell/templates/nova-ssh.json.j2 | 8 +- .../templates/nova.conf.d/libvirt.conf.j2 | 10 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 17 +- ansible/roles/nova-cell/templates/secret.xml.j2 | 1 + ansible/roles/nova/defaults/main.yml | 50 +++ ansible/roles/nova/handlers/main.yml | 20 +- ansible/roles/nova/tasks/check-containers.yml | 19 +- ansible/roles/nova/tasks/check.yml | 3 + ansible/roles/nova/tasks/config.yml | 49 ++- ansible/roles/nova/tasks/precheck.yml | 4 +- ansible/roles/nova/tasks/upgrade.yml | 7 - ansible/roles/nova/templates/nova-api-wsgi.conf.j2 | 22 +- ansible/roles/nova/templates/nova-api.json.j2 | 19 +- .../nova/templates/nova-metadata-wsgi.conf.j2 | 51 +++ ansible/roles/nova/templates/nova-metadata.json.j2 | 57 +++ .../roles/nova/templates/nova-scheduler.json.j2 | 8 +- .../nova/templates/nova-super-conductor.json.j2 | 8 +- ansible/roles/nova/templates/nova.conf.j2 | 33 +- ansible/roles/octavia/defaults/main.yml | 7 + ansible/roles/octavia/handlers/main.yml | 10 - ansible/roles/octavia/tasks/check-containers.yml | 15 +- ansible/roles/octavia/tasks/check.yml | 3 + ansible/roles/octavia/tasks/config.yml | 16 +- ansible/roles/octavia/tasks/get_resources_info.yml | 8 +- ansible/roles/octavia/tasks/hm-interface.yml | 2 +- ansible/roles/octavia/tasks/precheck.yml | 4 +- ansible/roles/octavia/tasks/prepare.yml | 14 +- ansible/roles/octavia/tasks/register.yml | 2 +- .../roles/octavia/templates/octavia-api.json.j2 | 10 +- .../octavia/templates/octavia-driver-agent.json.j2 | 6 + .../templates/octavia-health-manager.json.j2 | 6 + .../octavia/templates/octavia-housekeeping.json.j2 | 6 + .../roles/octavia/templates/octavia-worker.json.j2 | 6 + ansible/roles/octavia/templates/octavia.conf.j2 | 32 +- ansible/roles/opensearch/defaults/main.yml | 6 + ansible/roles/opensearch/handlers/main.yml | 4 - .../roles/opensearch/tasks/check-containers.yml | 16 +- ansible/roles/opensearch/tasks/check.yml | 3 + ansible/roles/opensearch/tasks/config.yml | 6 - ansible/roles/opensearch/tasks/post-config.yml | 9 +- ansible/roles/opensearch/tasks/precheck.yml | 2 +- .../templates/opensearch-dashboards.json.j2 | 8 +- .../roles/opensearch/templates/opensearch.json.j2 | 8 +- ansible/roles/openvswitch/handlers/main.yml | 4 - .../roles/openvswitch/tasks/check-containers.yml | 16 +- ansible/roles/openvswitch/tasks/check.yml | 3 + ansible/roles/openvswitch/tasks/config.yml | 2 - ansible/roles/openvswitch/tasks/precheck.yml | 2 +- ansible/roles/ovn-controller/handlers/main.yml | 2 - .../ovn-controller/tasks/check-containers.yml | 14 +- ansible/roles/ovn-controller/tasks/check.yml | 4 + ansible/roles/ovn-controller/tasks/config.yml | 2 - ansible/roles/ovn-controller/tasks/setup-ovs.yml | 9 +- ansible/roles/ovn-db/defaults/main.yml | 40 ++ ansible/roles/ovn-db/handlers/main.yml | 20 +- ansible/roles/ovn-db/tasks/bootstrap-db.yml | 17 + ansible/roles/ovn-db/tasks/check-containers.yml | 14 +- ansible/roles/ovn-db/tasks/check.yml | 4 + ansible/roles/ovn-db/tasks/config-relay.yml | 35 ++ ansible/roles/ovn-db/tasks/config.yml | 9 +- ansible/roles/ovn-db/tasks/lookup_cluster.yml | 7 +- ansible/roles/ovn-db/tasks/precheck.yml | 4 +- ansible/roles/ovn-db/templates/ovn-northd.json.j2 | 2 +- .../roles/ovn-db/templates/ovn-sb-db-relay.json.j2 | 18 + ansible/roles/ovn-db/templates/ovsdb-relay.json.j2 | 20 + ansible/roles/ovs-dpdk/defaults/main.yml | 2 +- ansible/roles/ovs-dpdk/handlers/main.yml | 4 - ansible/roles/ovs-dpdk/tasks/check-containers.yml | 15 +- ansible/roles/ovs-dpdk/tasks/check.yml | 3 + ansible/roles/ovs-dpdk/tasks/config.yml | 2 - ansible/roles/placement/defaults/main.yml | 12 + ansible/roles/placement/handlers/main.yml | 2 - ansible/roles/placement/tasks/check-containers.yml | 19 +- ansible/roles/placement/tasks/check.yml | 3 + ansible/roles/placement/tasks/config.yml | 33 +- ansible/roles/placement/tasks/precheck.yml | 2 +- .../placement/templates/placement-api-wsgi.conf.j2 | 2 +- .../placement/templates/placement-api.json.j2 | 19 +- .../roles/placement/templates/placement.conf.j2 | 8 +- ansible/roles/prechecks/tasks/service_checks.yml | 7 - ansible/roles/prechecks/vars/main.yml | 5 +- ansible/roles/prometheus/defaults/main.yml | 29 +- ansible/roles/prometheus/handlers/main.yml | 20 - ansible/roles/prometheus/tasks/bootstrap.yml | 1 + .../roles/prometheus/tasks/check-containers.yml | 16 +- ansible/roles/prometheus/tasks/check.yml | 3 + ansible/roles/prometheus/tasks/config.yml | 20 - ansible/roles/prometheus/tasks/precheck.yml | 20 +- ansible/roles/prometheus/tasks/upgrade.yml | 38 ++ .../templates/prometheus-alertmanager.json.j2 | 8 +- .../templates/prometheus-blackbox-exporter.json.j2 | 8 +- .../templates/prometheus-cadvisor.json.j2 | 11 +- .../prometheus-elasticsearch-exporter.json.j2 | 11 +- .../templates/prometheus-libvirt-exporter.json.j2 | 12 +- .../prometheus-memcached-exporter.json.j2 | 11 +- .../templates/prometheus-mysqld-exporter.json.j2 | 8 +- .../templates/prometheus-node-exporter.json.j2 | 11 +- .../prometheus-openstack-exporter.json.j2 | 8 +- .../prometheus/templates/prometheus-server.json.j2 | 13 +- .../roles/prometheus/templates/prometheus.yml.j2 | 37 +- ansible/roles/proxysql-config/defaults/main.yml | 1 - ansible/roles/proxysql-config/tasks/main.yml | 4 - .../roles/proxysql-config/templates/users.yaml.j2 | 3 - ansible/roles/rabbitmq/defaults/main.yml | 6 + ansible/roles/rabbitmq/handlers/main.yml | 2 - ansible/roles/rabbitmq/tasks/check-containers.yml | 16 +- ansible/roles/rabbitmq/tasks/check.yml | 3 + ansible/roles/rabbitmq/tasks/config.yml | 17 +- ansible/roles/rabbitmq/tasks/copy-certs.yml | 54 +-- ansible/roles/rabbitmq/tasks/deploy.yml | 4 +- ansible/roles/rabbitmq/tasks/precheck.yml | 69 +-- .../roles/rabbitmq/tasks/remove-ha-all-policy.yml | 2 +- ansible/roles/rabbitmq/tasks/restart_services.yml | 2 +- ansible/roles/rabbitmq/tasks/upgrade.yml | 2 - ansible/roles/rabbitmq/tasks/version-check.yml | 123 +++--- .../roles/rabbitmq/templates/definitions.json.j2 | 6 - ansible/roles/rabbitmq/templates/rabbitmq.json.j2 | 6 + ansible/roles/redis/handlers/main.yml | 4 - ansible/roles/redis/tasks/check-containers.yml | 16 +- ansible/roles/redis/tasks/check.yml | 4 + ansible/roles/redis/tasks/config.yml | 4 - ansible/roles/redis/tasks/precheck.yml | 2 +- ansible/roles/service-cert-copy/defaults/main.yml | 1 + ansible/roles/service-cert-copy/tasks/main.yml | 10 +- .../service-check-containers/tasks/iterated.yml | 36 ++ .../roles/service-check-containers/tasks/main.yml | 50 +++ ansible/roles/service-check/defaults/main.yml | 3 + ansible/roles/service-check/tasks/main.yml | 40 ++ ansible/roles/service-check/vars/main.yml | 11 + .../service-config-validate/tasks/validate.yml | 4 +- ansible/roles/service-ks-register/tasks/main.yml | 32 +- ansible/roles/service-stop/tasks/main.yml | 1 + .../roles/service-uwsgi-config/defaults/main.yml | 8 + ansible/roles/service-uwsgi-config/tasks/main.yml | 7 + .../service-uwsgi-config/templates/uwsgi.ini.j2 | 34 ++ ansible/roles/skyline/defaults/main.yml | 16 + ansible/roles/skyline/handlers/main.yml | 4 - ansible/roles/skyline/tasks/check-containers.yml | 15 +- ansible/roles/skyline/tasks/check.yml | 3 + ansible/roles/skyline/tasks/config.yml | 12 +- ansible/roles/skyline/tasks/precheck.yml | 4 +- ansible/roles/skyline/templates/nginx.conf.j2 | 12 +- .../skyline/templates/skyline-apiserver.json.j2 | 6 + .../skyline/templates/skyline-console.json.j2 | 6 + ansible/roles/skyline/templates/skyline.yaml.j2 | 4 +- ansible/roles/swift/defaults/main.yml | 106 ----- ansible/roles/swift/handlers/main.yml | 4 - ansible/roles/swift/tasks/check.yml | 1 - ansible/roles/swift/tasks/config.yml | 230 ---------- ansible/roles/swift/tasks/config_validate.yml | 1 - ansible/roles/swift/tasks/copy-certs.yml | 6 - ansible/roles/swift/tasks/deploy-containers.yml | 2 - ansible/roles/swift/tasks/deploy.yml | 10 - ansible/roles/swift/tasks/legacy_upgrade.yml | 35 -- ansible/roles/swift/tasks/loadbalancer.yml | 7 - ansible/roles/swift/tasks/main.yml | 2 - ansible/roles/swift/tasks/precheck.yml | 132 ------ ansible/roles/swift/tasks/pull.yml | 74 ---- ansible/roles/swift/tasks/reconfigure.yml | 105 ----- ansible/roles/swift/tasks/register.yml | 20 - ansible/roles/swift/tasks/rolling_upgrade.yml | 68 --- ansible/roles/swift/tasks/start.yml | 317 -------------- ansible/roles/swift/tasks/stop.yml | 151 ------- ansible/roles/swift/tasks/upgrade.yml | 6 - ansible/roles/swift/templates/account.conf.j2 | 40 -- ansible/roles/swift/templates/container.conf.j2 | 41 -- ansible/roles/swift/templates/object.conf.j2 | 52 --- ansible/roles/swift/templates/proxy-server.conf.j2 | 103 ----- ansible/roles/swift/templates/rsyncd.conf.j2 | 28 -- .../swift/templates/swift-account-auditor.json.j2 | 30 -- .../swift/templates/swift-account-reaper.json.j2 | 30 -- .../swift-account-replication-server.json.j2 | 30 -- .../templates/swift-account-replicator.json.j2 | 30 -- .../swift/templates/swift-account-server.json.j2 | 30 -- .../templates/swift-container-auditor.json.j2 | 30 -- .../swift-container-replication-server.json.j2 | 30 -- .../templates/swift-container-replicator.json.j2 | 30 -- .../swift/templates/swift-container-server.json.j2 | 30 -- .../templates/swift-container-updater.json.j2 | 36 -- .../swift/templates/swift-object-auditor.json.j2 | 44 -- .../swift/templates/swift-object-expirer.json.j2 | 50 --- .../swift-object-replication-server.json.j2 | 44 -- .../templates/swift-object-replicator.json.j2 | 44 -- .../swift/templates/swift-object-server.json.j2 | 44 -- .../swift/templates/swift-object-updater.json.j2 | 44 -- .../swift/templates/swift-proxy-server.json.j2 | 50 --- ansible/roles/swift/templates/swift-rsyncd.json.j2 | 11 - ansible/roles/swift/templates/swift.conf.j2 | 3 - ansible/roles/swift/vars/main.yml | 2 - ansible/roles/tacker/defaults/main.yml | 2 + ansible/roles/tacker/handlers/main.yml | 4 - ansible/roles/tacker/tasks/check-containers.yml | 15 +- ansible/roles/tacker/tasks/check.yml | 3 + ansible/roles/tacker/tasks/config.yml | 6 - ansible/roles/tacker/tasks/precheck.yml | 2 +- .../tacker/templates/tacker-conductor.json.j2 | 6 + .../roles/tacker/templates/tacker-server.json.j2 | 6 + ansible/roles/tacker/templates/tacker.conf.j2 | 16 +- ansible/roles/telegraf/handlers/main.yml | 2 - ansible/roles/telegraf/tasks/check-containers.yml | 15 +- ansible/roles/telegraf/tasks/check.yml | 3 + ansible/roles/telegraf/tasks/config.yml | 6 - ansible/roles/telegraf/templates/telegraf.json.j2 | 8 +- ansible/roles/trove/defaults/main.yml | 9 + ansible/roles/trove/handlers/main.yml | 6 - ansible/roles/trove/tasks/check-containers.yml | 15 +- ansible/roles/trove/tasks/check.yml | 3 + ansible/roles/trove/tasks/config.yml | 12 +- ansible/roles/trove/tasks/precheck.yml | 2 +- ansible/roles/trove/templates/trove-api.json.j2 | 8 +- .../roles/trove/templates/trove-conductor.json.j2 | 8 +- .../roles/trove/templates/trove-guestagent.conf.j2 | 14 +- .../trove/templates/trove-taskmanager.json.j2 | 6 + ansible/roles/trove/templates/trove.conf.j2 | 15 +- ansible/roles/venus/defaults/main.yml | 6 + ansible/roles/venus/handlers/main.yml | 4 - ansible/roles/venus/tasks/check-containers.yml | 15 +- ansible/roles/venus/tasks/check.yml | 3 + ansible/roles/venus/tasks/config.yml | 6 - ansible/roles/venus/tasks/precheck.yml | 2 +- ansible/roles/venus/templates/venus-api.json.j2 | 8 +- .../roles/venus/templates/venus-manager.json.j2 | 8 +- ansible/roles/venus/templates/venus.conf.j2 | 3 + ansible/roles/watcher/defaults/main.yml | 7 + ansible/roles/watcher/handlers/main.yml | 6 - ansible/roles/watcher/tasks/check-containers.yml | 15 +- ansible/roles/watcher/tasks/check.yml | 3 + ansible/roles/watcher/tasks/config.yml | 6 - ansible/roles/watcher/tasks/precheck.yml | 2 +- .../roles/watcher/templates/watcher-api.json.j2 | 6 + .../watcher/templates/watcher-applier.json.j2 | 6 + .../roles/watcher/templates/watcher-engine.json.j2 | 6 + ansible/roles/watcher/templates/watcher.conf.j2 | 13 +- ansible/roles/zun/defaults/main.yml | 9 +- ansible/roles/zun/handlers/main.yml | 21 +- ansible/roles/zun/tasks/check-containers.yml | 19 +- ansible/roles/zun/tasks/check.yml | 3 + ansible/roles/zun/tasks/config.yml | 8 - ansible/roles/zun/tasks/external_ceph.yml | 8 +- ansible/roles/zun/tasks/precheck.yml | 6 +- ansible/roles/zun/templates/zun-api.json.j2 | 6 + ansible/roles/zun/templates/zun-cni-daemon.json.j2 | 8 +- ansible/roles/zun/templates/zun-compute.json.j2 | 14 +- ansible/roles/zun/templates/zun-wsproxy.json.j2 | 6 + ansible/roles/zun/templates/zun.conf.j2 | 20 +- ansible/site.yml | 29 +- bindep.txt | 9 + contrib/bash-completion/kolla-ansible | 21 - contrib/demos/heat/README.rst | 15 - contrib/demos/heat/launch | 18 - contrib/demos/heat/steak-rg.yaml | 44 -- contrib/demos/heat/steak.yaml | 55 --- contrib/demos/magnum/redis | 5 - contrib/demos/magnum/redis-kube/README.rst | 197 --------- .../demos/magnum/redis-kube/redis-controller.yaml | 28 -- contrib/demos/magnum/redis-kube/redis-master.yaml | 34 -- contrib/demos/magnum/redis-kube/redis-proxy.yaml | 15 - .../redis-kube/redis-sentinel-controller.yaml | 24 -- .../magnum/redis-kube/redis-sentinel-service.yaml | 14 - contrib/demos/magnum/start | 34 -- contrib/demos/magnum/stop | 9 - contrib/demos/tacker/README.rst | 20 - contrib/demos/tacker/cleanup-tacker | 20 - contrib/demos/tacker/deploy-tacker-demo | 73 ---- contrib/demos/tacker/deploy-tacker-demo-sfc | 83 ---- .../kolla-for-openstack-development.rst | 8 + .../logging-and-monitoring/prometheus-guide.rst | 13 + .../reference/shared-services/glance-guide.rst | 15 - .../reference/shared-services/skyline-guide.rst | 15 + .../reference/storage/cinder-guide-lightbits.rst | 33 ++ .../reference/storage/external-ceph-guide.rst | 201 +++++---- etc/kolla/globals.yml | 81 ++-- etc/kolla/passwords.yml | 5 +- kolla_ansible/ansible.py | 4 +- kolla_ansible/cli/commands.py | 38 +- kolla_ansible/kolla_address.py | 25 +- kolla_ansible/utils.py | 46 +- lint-requirements.txt | 2 +- ...-forwarded-headers-option-d153c6292cf20b26.yaml | 8 + ...d-letsencrypt-eab-support-7951e7a572718ce9.yaml | 4 + ...its-cinder-plugin-support-f5445f2dbb1a56ed.yaml | 4 + .../notes/add-queue-manager-3ce79655ac37c345.yaml | 9 + .../add-venus-dashboard-a8efe1a93dca9f0e.yaml | 4 + .../ansible-core-bump-2-18-a131f759cf2f23c7.yaml | 6 + ...n-labels-to-kolla-volumes-4c733756a7c746d2.yaml | 9 + .../notes/bug-1863510-e39da141cdd07c41.yaml | 8 + .../notes/bug-1891469-4f8a45c29bde55e5.yaml | 13 + .../notes/bug-2044370-2285fc3952981cae.yaml | 7 + .../notes/bug-2076331-f4ef64ad0a12aa85.yaml | 21 + .../notes/bug-2086466-dc13b40f8da39542.yaml | 5 + .../notes/bug-2093335-88ecb9b12a003b20.yaml | 6 + .../notes/bug-2095607-f4d9d5aebebddfc8.yaml | 7 + .../notes/bug-2097292-1a41e87d33e7c6a8.yaml | 6 + .../notes/bug-2100927-5926d812ffa98ac4.yaml | 6 + .../bugfix-fluentd-retry-tag-383dd788a42fddd6.yaml | 7 + .../cinder-ceph-backend-name-0984e44da7905a81.yaml | 6 + ...torage-in-service-catalog-7063d6b7d1039e36.yaml | 8 + .../notes/config-handlers-fba9b642c84fc2d7.yaml | 28 ++ .../notes/copy-certs-02ff11e9041800eb.yaml | 14 + ...tom-cron-logrotate-global-5cb26fda7d1ba85b.yaml | 4 + .../delegate-facts-hosts-a3c8bd588c805ffa.yaml | 6 + .../notes/deprecate-bifrost-2819678ca6456ab1.yaml | 7 + .../deprecate-inspector-86fb3aa691099267.yaml | 10 + .../notes/deprecate-swift-7a30a80aa16c3e48.yaml | 5 + .../enable_ironic_dnsmasq-4288e3e2b5819f2d.yaml | 6 + ...e_quorum_queues_transient-020b373831acda36.yaml | 8 + ...iple-clusters-integration-d29815a12c223152.yaml | 17 + .../external-ceph-cinder_key-1a4c38fff3e2ab3c.yaml | 10 + .../notes/fix-blackbox-regex-b16f3f86563de6db.yaml | 7 + ...x-cinder-etcd-backend-url-3ca1fa04293c16b5.yaml | 6 + ...haproxy-missing-variables-2f00c677a7003005.yaml | 6 + ...ova-backend-rbd-group-var-3c057daa084c0612.yaml | 7 + ...opying-ca-into-containers-8b0429bdbd979e3c.yaml | 7 + ...rable-restarts-of-fluentd-95a3bad7de82fd56.yaml | 6 + .../notes/fluentd-buffers-86acb335b1cf3126.yaml | 9 + ...tor-user-system-scope-all-5fe5cb7f9a03ee7b.yaml | 12 + ...rafana_update_datasources-706e3cdc964c5272.yaml | 6 + ...aproxy_healthchecks_to_l7-b05e8c7b177d1544.yaml | 7 + .../haproxy_template_fix-ea89b4cf1110602f.yaml | 9 + ...rnal-endpoint-bug-2087537-0f5fb5d997e5a92b.yaml | 5 + ...ronic-pin-release-version-8f9e2b3c4d5a6b7c.yaml | 11 + .../install-deps-retries-fbe2a3abb41abb6d.yaml | 5 + ...tron_agent_change_default-aa914434b7c119f7.yaml | 7 + ...sible-stop-ignore-missing-be57276213f0a7cd.yaml | 5 + .../move-container-facts-1507cec39b2bdbe0.yaml | 10 + .../nova-metadata-split-d1c9ff2010390352.yaml | 5 + ...-remove-use-forwarded-for-69f98132b0f164c1.yaml | 5 + .../notes/ovn-sb-relay-809c170090887f68.yaml | 15 + ...prometheus-target-address-4d2d5624ee6ae5a0.yaml | 6 + .../promethus-exporters-ipv6-c87b57cd21cb6bfe.yaml | 8 + ...vert-to-upstream-defaults-235abb7fb10bfcfd.yaml | 53 +++ .../public-openrc-system-e52c9f5440b6f594.yaml | 7 + .../pure-manila-flashblade-34668c3cd91ee3f0.yaml | 5 + .../notes/python-cli-3e568065b8706e73.yaml | 22 +- .../rabbitmq-catch-downgrade-1005c7475a97bf19.yaml | 5 + ...-fanout-stream-queue-type-5b73723aa5e9b231.yaml | 10 + ...-check-add-common-options-05edc24b779a3630.yaml | 6 + .../refactor-container-check-27624449c47f5e6e.yaml | 23 + .../notes/reintroduce-check-2a385b77e044c507.yaml | 9 + ...ic-inspector-service-role-765027c3d91016d1.yaml | 7 + ...abbitmq_high_availability-0e9ecae0240c516c.yaml | 7 + .../notes/remove-swift-5ebd7b5c4a2cb5b7.yaml | 4 + ...buntu-jammy-22-04-support-46d5d441a3cbc93d.yaml | 4 + .../service-uwsgi-config-cf82829aa6457a92.yaml | 4 + .../skyline-external-swift-d9e38f696a22c117.yaml | 9 + ...ng-services-and-endpoints-78341a638b939d68.yaml | 5 + ...ing-user-role-assignments-97f5463a8a653158.yaml | 5 + ...ate-user-role-assignments-c8e487445a6cadef.yaml | 4 + .../upgrade-prometheus-to-v3-bdf73866e7a93194.yaml | 13 + ...blic-www-authenticate-uri-1144df4d205f8ebd.yaml | 8 + releasenotes/notes/uwsgi-aef85ccbc76dab3e.yaml | 17 + releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2024.2.rst | 6 + releasenotes/source/index.rst | 1 + requirements-core.yml | 8 +- requirements.txt | 2 +- roles/multi-node-managed-addressing/tasks/main.yml | 2 +- roles/openstack-clients/defaults/main.yml | 4 - setup.cfg | 6 +- tools/cleanup-host | 6 - tools/validate-all-file.py | 5 +- tox.ini | 7 +- zuul.d/base.yaml | 159 +++---- zuul.d/jobs.yaml | 109 +++-- zuul.d/project.yaml | 22 +- 807 files changed, 7076 insertions(+), 7494 deletions(-) Requirements updates -------------------- diff --git a/lint-requirements.txt b/lint-requirements.txt index 1dd34e7f8..64500804f 100644 --- a/lint-requirements.txt +++ b/lint-requirements.txt @@ -1 +1 @@ -ansible>=8,<10 # GPLv3 +ansible>=10,<12 # GPLv3 diff --git a/requirements.txt b/requirements.txt index 797296f42..568d7f9b6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ Jinja2>=3 # BSD License (3 clause) -ansible-core>=2.16,<2.18 # GPLv3 +ansible-core>=2.17,<2.19 # GPLv3

1 0

kolla 20.0.0 (epoxy)
by no-reply＠openstack.org 14 May '25

14 May '25

We joyfully announce the release of: kolla 20.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. Changes in kolla 19.0.0.0rc1..20.0.0 ------------------------------------ a01e339ed CI: Set upgrade jobs back to voting 535b2f270 mariadb: pin to 10.11.11 06ac69bd8 CI: Fix pip mirror multiline a101add56 neutron: Add agents wrappers in the neutron-base image e33902c30 bifrost: fix creation of python3 lib symlink d85bc282b Enabling support for Thales Luna user id and group id. f1248fe58 Allow specification of a key type ac79bc9b6 Upgrade Prometheus to v3 3eb606a36 opensearch: remove example certs and securityadmin_demo.sh bd42e9d43 Update prometheus alertmanager to newest available version 74843405d rabbitmq: Bump to 4.0 80d931982 Fix preparation of /tftpboot for ironic-pxe c8fdb5550 bifrost: bump Ansible version to 11 16b3223d8 Add support for aarch64 ipxe to ironic-pxe image 6da05fc6d neutron: Add docker clients for ML2/OVS improvement 0733a13d7 Switch to 2025.1 sources a09ba2027 Deprecate bifrost 057e7ad60 CI: Sort alphabetically zuul templates 47a6ad020 Opensearch and opensearch-dashboard image size reduction dc0fbd20a CI: Switch aarch64 builds to native platform 9c6f6ae2d tests: Add cross-arch test for etcd 915189d10 fix sources.py based cross-arch builds f2fba3842 Remove swift container images 7a0c639da nova/aarch64: Fix qemu-efi build failures e1fff6252 kolla-toolbox: Bump ansible-core to 2.18 5025ab688 Ironic: Add ESP image for UEFI virtual media c6700a404 debian: Use Dalmatian extrepo release 4c9113f96 CI: Add qemu-user-static back 64f171ccf [release] Use RDO's Epoxy packages 09f706bc2 Added libvirt dependency to nova-libvirt debian based containers d2837d853 Add mtools package to ironic-conductor image 9efdcc01c [release] Use UCA Epoxy 498b793c8 CI: Add rocky support to process_build_logs.py af632db5d CI: Use ansible-lint for CI roles and playbooks 405f95019 Remove Git remote origin after cloning sources cfa266a3a Allow to use configure_user macro for external templates 96d6a9427 CI: Move pre tasks into roles ed7c8399c Fix permissions for ironic metrics 13d6a664f Install pycadf from pypi package 4cab35b1a Change Bifrost Python upper-constraints source ff55c2925 Bump pycadf version to 4.0.1 0f5c679dc Prometheus update all exporters to the latest versions 21b6d87bc swift: Deprecate for removal in 2025.2 f82b9e3b1 Add ovn-sb-db-relay image with newer ovn-ctl d3bb06d5c Fix genconfig a9c94abf5 openvswitch: Fix logs dir permission ac2bbcc9f ironic: Fix dnsmasq.log permissions 4a7af468b Adds missing nvme package in cinder-backup 0f5e39954 neutron-dhcp-agent: change dnsmasq.log rights 969cbc736 cinder: Fix log dir permission 36ef420f8 [letsencrypt] Rename script for updating certificates 7c9b560f8 Update Let's Encrypt lego version 3575d7d8b Remove deprecated AngularJS plugins from Grafana 592f341dd magnum: Add helm binary for magnum-cluster-api 6698a072d Fix EAB support in letsencrypt 7ae781561 Remove setuptools pin f33c1ef17 Revert "CI: Pin requests to <2.32 for publish jobs" 795e34785 Revert "[release] Use Dalmatian sources by default" 2d8e98ec7 Time mismatch in /etc/localtime and /etc/timezone a6a15966a CI: Stop using LABEL for ephemeral0 4adc9a103 Add Let's Encrypt EAB support 45ddb7194 Add Python 3.12 classifier d22245c71 Change copy-cacerts behaviour 08a97807b Revert "CentOS/Rocky: use CentOS Cloud SIG repo instead of Delorean (Dalmatian)" 23519e6d8 CI: Use debian/ubuntu images from quay mirror 1df09532d Move uwsgi installation to openstack-base 11f65c6c1 Add mechanism for patching files in containers d930fca08 CI: Add reno linting ba9078816 Update release-management doc with openstack-manuals step 36c12676f Fix handling configs in base image 8eaf4149b Enhance logging format for better readability ee7fe59f7 Update master for stable/2024.2 d389964ce Add libnetfilter-log to l3 agent container Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 12 + .yamllint | 10 - .zuul.d/base.yaml | 2 + .zuul.d/centos.yaml | 2 +- .zuul.d/debian.yaml | 3 +- .zuul.d/project.yaml | 10 +- .zuul.d/rocky.yaml | 2 +- .zuul.d/tox.yaml | 12 + .zuul.d/ubuntu.yaml | 2 +- README.rst | 1 - .../barbican-keystone-listener/Dockerfile.j2 | 2 + .../ceilometer-notification/Dockerfile.j2 | 2 + .../cloudkitty/cloudkitty-processor/Dockerfile.j2 | 2 + .../designate-backend-bind9/Dockerfile.j2 | 2 + .../hacluster-pacemaker-remote/Dockerfile.j2 | 2 + ...haproxy-cert.sh => update-loadbalancer-cert.sh} | 0 .../ironic-prometheus-exporter/Dockerfile.j2 | 2 + .../letsencrypt-lego/letsencrypt-certificates.sh | 42 +- .../sync-and-update-certificate.sh | 4 +- .../letsencrypt-webserver/Dockerfile.j2 | 2 + .../ironic-neutron-agent/Dockerfile.j2 | 2 + .../neutron-base/neutron-keepalived-state-change | 40 ++ .../neutron-infoblox-ipam-agent/Dockerfile.j2 | 2 + .../neutron-linuxbridge-agent/Dockerfile.j2 | 2 + .../neutron/neutron-metadata-agent/Dockerfile.j2 | 2 + .../neutron/neutron-metering-agent/Dockerfile.j2 | 2 + .../neutron-openvswitch-agent/Dockerfile.j2 | 2 + .../octavia/octavia-health-manager/Dockerfile.j2 | 2 + .../opensearch/opensearch-dashboards/Dockerfile.j2 | 7 +- .../openvswitch/openvswitch-base/extend_start.sh | 2 + .../openvswitch-db-server/Dockerfile.j2 | 4 + .../openvswitch-db-server/extend_start.sh | 5 + .../openvswitch/openvswitch-vswitchd/Dockerfile.j2 | 4 + .../openvswitch-vswitchd/extend_start.sh | 5 + .../prometheus-alertmanager/Dockerfile.j2 | 4 + .../prometheus-blackbox-exporter/Dockerfile.j2 | 2 + .../prometheus/prometheus-cadvisor/Dockerfile.j2 | 1 + .../Dockerfile.j2 | 4 + .../prometheus-libvirt-exporter/Dockerfile.j2 | 2 + .../prometheus-memcached-exporter/Dockerfile.j2 | 4 + .../prometheus-mysqld-exporter/Dockerfile.j2 | 4 + .../prometheus-node-exporter/Dockerfile.j2 | 4 + .../prometheus-openstack-exporter/Dockerfile.j2 | 4 + .../prometheus-ovn-exporter/Dockerfile.j2 | 4 + .../Dockerfile.j2 | 12 +- kolla/common/config.py | 35 +- kolla/common/sources.py | 78 ++-- kolla/common/users.py | 6 +- kolla/image/build.py | 1 + kolla/image/kolla_worker.py | 46 ++- kolla/image/tasks.py | 1 + kolla/template/methods.py | 6 + kolla/template/repos.yaml | 32 +- .../notes/aarch64-ipxe-51888a5972528d77.yaml | 9 + .../notes/add-designate-c789e47f8ced394d.yaml | 3 +- ...ronic-prometheus-exporter-c793478ee5938bee.yaml | 4 +- ...d-letsencrypt-eab-support-0ec1a60f1602662e.yaml | 4 + .../add-monasca-grafana-app-ea24f8ca43fa9c7d.yaml | 3 +- .../add-networking-ansible-b27128f544f300e6.yaml | 7 +- ...e-dumb-init-config-option-26b47f6d97d7585c.yaml | 5 +- .../notes/ansible-core-2.18-582103463aba6e8a.yaml | 4 + .../notes/bifrost-ansible-11-d14b635f9f766675.yaml | 4 + ...macro-to-custom-templates-61c143326a35c7ed.yaml | 9 + .../notes/bug-1814552-a037354969dcf7e5.yaml | 4 +- .../notes/bug-1859047-d41762357da8ae0b.yaml | 4 +- .../notes/bug-1946801-5f3af3c44e567fcf.yaml | 4 +- .../notes/bug-2060855-77516da722d04761.yaml | 6 + .../notes/bug-2062572-c55c71e1045a863f.yaml | 5 +- .../notes/bug-2091161-a99c5c243c2514ac.yaml | 6 + .../notes/bug-2098904-4c5670049a7e1a66.yaml | 5 + ...-upper-constraints-source-e93cb72e88823d56.yaml | 14 + .../notes/debian-dalmatian-65fed830f10946e2.yaml | 5 + .../notes/deprecate-bifrost-dd93b6d8eb04cac6.yaml | 6 + .../deprecate-kubernetes-dbabf9f86c15a0ee.yaml | 4 +- .../deprecate-opendaylight-58b3e9dbdc359688.yaml | 4 +- .../notes/deprecate-swift-fe9f5586f698ba03.yaml | 4 + .../drop-pyhton-3-6-and-3-7-6cc88979aad423e8.yaml | 4 +- .../el-aarch64-ipxe-snponly-e7fc23bdc7edfe3d.yaml | 6 + .../notes/fix-fwaas-l3-log-aed85e0782dece8d.yaml | 10 + ...ana-opensearch-datasource-96dc8061d9721af3.yaml | 4 +- ...loyment-permissions-issue-dfc2d8c92d2eaf57.yaml | 10 + ...nc_rpm_swift_base_missing-9d106d94b52d0bad.yaml | 3 +- .../generic-customisation-b2d431caa2fc5c10.yaml | 4 +- ...na-remove-angular-plugins-4c9ea2087c5c2bf2.yaml | 5 + .../notes/ironic-esp-image-886b5fb5b01e7b56.yaml | 6 + .../notes/ironic-mtools-2938ccfe951f5dc5.yaml | 4 + .../notes/ironic_syslinux-70eac225d227dc2e.yaml | 3 +- ...kolla-container-logformat-259885637cbeb0e6.yaml | 11 + .../octavia-driver-agent-83ee17b82c577e95.yaml | 4 +- .../patch-docker-images-69764f0b1df5c9ed.yaml | 6 + .../prometheus-containers-1599a6417cc6a264.yaml | 6 +- .../notes/rabbitmq-4-0-ee1a5f2ef212f6a6.yaml | 4 + .../notes/rdo-dalmatian-bab7a517c219cb23.yaml | 5 - .../remove-fwaas-deployment-8381b454528bdae9.yaml | 4 +- .../remove-glance-registry-4a5c3d54440f7c28.yaml | 3 +- ...move-neutron-vpnaas-agent-216810affb495ad0.yaml | 13 +- ...ometheus-haproxy-exporter-22d5af88af7e4a9d.yaml | 8 +- .../notes/remove-zaqar-image-de36960a88f132c8.yaml | 3 +- .../notes/summary-json-file-96441e67076fc480.yaml | 4 +- ...pport-image-cross-compile-3b1dc348d742e96d.yaml | 4 +- ...pdate-letsencrypt-version-36a0cd7d2997c6c7.yaml | 6 + ...pdate-prometheus-services-dd195876e162251c.yaml | 17 + .../notes/upgrade-pip-44352805d60bbf7f.yaml | 4 +- .../upgrade-prometheus-to-v3-d305280498e0fcaf.yaml | 11 + .../uwsgi-openstack-base-ac583652d29ea0e4.yaml | 5 + .../notes/vitrage-containers-3bfb360357aa628b.yaml | 8 +- releasenotes/source/2024.2.rst | 6 + releasenotes/source/index.rst | 1 + roles/configure-ephemeral/meta/main.yml | 4 + roles/configure-ephemeral/tasks/main.yml | 17 +- roles/kolla-build-config/defaults/main.yml | 1 - roles/kolla-build-config/tasks/main.yml | 5 +- roles/kolla-build-deps/tasks/main.yml | 70 ++++ roles/kolla-build/tasks/main.yml | 5 + setup.cfg | 1 + test-requirements.txt | 1 + test-requirements.yml | 5 + tox.ini | 9 +- 340 files changed, 2653 insertions(+), 1017 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ad35b8796..e9fa093f7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -0,0 +1 @@ +ansible-lint<25 # MIT

1 0

ironic 26.1.2 (dalmatian)
by no-reply＠openstack.org 13 May '25

13 May '25

We are psyched to announce the release of: ironic 26.1.2 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 26.1.2 ^^^^^^ Security Issues *************** * Fixes OSSA-2025-001, where Ironic did not properly filter file:// paths when used as image sources. This would permit any file accessible by the conductor to be used as an image to attempt deployment. Adds "CONF.conductor.file_url_allowed_paths", an allowlist configuration defaulting to "/var/lib/ironic", "/shared/html", "/opt/cache/files", "/vagrant", and "/templates", permits operators to further restrict where the conductor will fetch images for when provided a file:// URL. This default value was chosen based on known usage by projects downstream of Ironic, including Metal3, Bifrost, and OpenShift. These defaults may change to be more restrictive at a later date. Operators using file:// URLs are encouraged to explicitly set this value even if the current default is sufficient. Operators wishing to fully disable the ability to deploy with a file:// URL should set this configuration to "" (empty). Operators wishing to restore the original insecure behavior should set "CONF.conductor.file_url_allowed_paths" to "/". Take note that in the 2025.2 release and later, "/dev", "/sys", "/proc", "/run", and "/etc" will be unconditionally blocked as a security measure. This issue only poses a significant security risk when Ironic's automated cleaning process is disabled and the service is configured in such a way that permits direct deployment by an untrusted API user, such as standalone Ironic installations or environments granting ownership of nodes to projects. Bug Fixes ********* * The set of strings used to detect cipher suite version related errors in the "ipmitool" command was expanded. If the string "Error in open session response message : invalid role" is contained in the output of a failed "ipmitool" command execution, such error will be now considered as related to inappropriate ciphers too, and will be retried with another cipher suite version if Ironic is configured to do so. See bug 2085137 (https://launchpad.net/bugs/2085137) for more details. * When changing from glanceclient to OpenStack SDK to communicate with Glance, a bug was introduced reading image properties causing the Anaconda deploy interface to be unable to use Glance images. Other deploy interfaces continued to function but could have resulted in some properties not taking affect. See bug 2099275 (https://bugs.launchpad.net/ironic/+bug/2099953) for more details. * Fixes step validation where some of the reserved step names, "hold", and "wait", were not being properly handled by the step validation code. * Fixes an issue where operators executing complex arrangement of steps which include out-of-band and in-band steps, for example a hardware RAID "create_configuration" step followed by in-band steps inside of the agent, would effectively get the agent stuck in a "wait" state in the Cleaning, Servicing, or Deploying workflows. This was related to the way out-of-band steps are executed and monitored. Ironic, before starting to execute a new step, now cleans the polling lockout flag for the respective workflow being executed to prevent the agent from getting stuck. For more information, please see bug 2096938 (https://bugs.launchpad.net/ironic/+bug/2096938) * Fixes newly added policy rules, "baremetal:node:set_provision_state:clean_steps" and "baremetal:node:set_provision_state:service_steps``which impacted ``project scoped" users utilizing the "2024.2" release of Ironic where they were attempting to invoke "service" or "clean" provision state commands. This was due to a misunderstanding of the correct policy checker to invoke, and additional testing has been added around these functions to ensure they work as expected moving forward. * Some vendors insist that floppy images must be 1440 KiB in size and that the file name ends with ".img". Make it so. * Includes the agent token parameter in get command status requests as the endpoint now requires authentication. * The configuration option "[inspector]power_off" is now actually ignored for nodes with fast track enabled, as documented in its help. * Fixes the built-in in-band inspection implementation to power off the node after aborting inspection on user's request, unless the node is in the fast track mode or "[inspector]power_off" is set to "False". * The fix for CVE-2024-47211 results in image checksum being required in all cases. However there is no checksum requirement for file:// based images. When checksum is missing for file:// based image_source it is now calculated on-the-fly. * Fixes an error within the redfish session cache when no "redfish_password" is specified bug 2097019 (https://bugs.launchpad.net/ironic/+bug/2097019) * Update the node cache after a successful servicing and cleaning. This ensures the node information is correctly updated in the database. Changes in ironic 26.1.1..26.1.2 -------------------------------- e18bbe3af OSSA-2025-001: Disallow unsafe image file:// paths 6b8e25234 [stable-only] Fix errors building docs 651d77537 fix glance metadata layout bc565cf54 Make floppy images more floppy 5aa51d698 Pass agent token to get command results 3fec72442 Expand detected strings in check_cipher_suite_errors 0911ecae4 Fix agent from being locked out with complex steps 60248a0b8 Fix redfish session cache on missing password 3c27ebcc1 Fix hold/wait step logic in step validation 187337bc4 stable-only: Drop ironic-tox-codespell job d1872d7fc Calculate missing checksum for file:// based images 684dd6107 Update Node Cache after Successful Clean/Service 38d94ca3a Use specific fix-commit from dnsmasq 1ed8b772b Fix policy checks added with runbooks 94a72b7a7 [stable-only] [ci] Remove metal3 job 2a29676ea Actually ignore [inspector]power_off with fast track 577971afd add qemu-img to necessary dependency list f5ba0c8ae Gracefully handle bad request exception e3437d7c9 Fix actual size calculation for storage fallback logic Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 18 +- ironic/api/controllers/v1/node.py | 31 ++- ironic/api/controllers/v1/portgroup.py | 2 + ironic/common/async_steps.py | 6 +- ironic/common/checksum_utils.py | 15 +- ironic/common/glance_service/service_utils.py | 18 +- ironic/common/image_service.py | 22 ++- ironic/common/images.py | 2 +- ironic/conductor/cleaning.py | 6 + ironic/conductor/deployments.py | 4 + ironic/conductor/manager.py | 9 +- ironic/conductor/servicing.py | 7 + ironic/conductor/steps.py | 3 +- ironic/conf/conductor.py | 15 ++ ironic/conf/types.py | 55 ++++++ ironic/drivers/modules/agent_client.py | 6 + ironic/drivers/modules/image_utils.py | 8 +- ironic/drivers/modules/inspector/agent.py | 23 +-- ironic/drivers/modules/inspector/interface.py | 39 ++-- ironic/drivers/modules/ipmitool.py | 8 +- ironic/drivers/modules/redfish/utils.py | 6 +- .../unit/drivers/modules/inspector/test_agent.py | 52 ++++- .../drivers/modules/inspector/test_interface.py | 210 ++++++++++----------- .../unit/drivers/modules/test_agent_client.py | 6 +- .../unit/drivers/modules/test_deploy_utils.py | 12 ++ ...ion-ipmitools-cipher-fail-1503b4e319e77ed8.yaml | 11 ++ ...ce-image-properties-check-2a11337c9e517a5c.yaml | 10 + ...x-hold-wait-service-steps-37dc91fd7393b180.yaml | 5 + ...polling-lockout-for-steps-b9645f0cae18da1e.yaml | 13 ++ ...provision-state-subpolicy-13ae3ef7497d20c1.yaml | 12 ++ .../floppy-image-quirks-32e14d32a37b0742.yaml | 5 + ...ent-token-to-get-requests-982bacce85d95ce8.yaml | 5 + .../notes/inspect-off-099e3c73edaf6082.yaml | 9 + .../missing_file_checksum-4931c98031951486.yaml | 7 + ...sallow-unsafe-image-paths-670fdcfe3e4647d4.yaml | 29 +++ ...sh-allow-missing-password-ce4fb161d35a6850.yaml | 6 + ...essful-servicing-cleaning-7433c493e31742b0.yaml | 6 + tools/config/ironic-config-generator.conf | 1 - tox.ini | 2 +- zuul.d/ironic-jobs.yaml | 7 - zuul.d/project.yaml | 10 - 59 files changed, 823 insertions(+), 269 deletions(-)

1 0

ironic 24.1.4 (caracal)
by no-reply＠openstack.org 13 May '25

13 May '25

We are psyched to announce the release of: ironic 24.1.4 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 24.1.4 ^^^^^^ Security Issues *************** * Fixes OSSA-2025-001, where Ironic did not properly filter file:// paths when used as image sources. This would permit any file accessible by the conductor to be used as an image to attempt deployment. Adds "CONF.conductor.file_url_allowed_paths", an allowlist configuration defaulting to "/var/lib/ironic", "/shared/html", "/opt/cache/files", "/vagrant", and "/templates", permits operators to further restrict where the conductor will fetch images for when provided a file:// URL. This default value was chosen based on known usage by projects downstream of Ironic, including Metal3, Bifrost, and OpenShift. These defaults may change to be more restrictive at a later date. Operators using file:// URLs are encouraged to explicitly set this value even if the current default is sufficient. Operators wishing to fully disable the ability to deploy with a file:// URL should set this configuration to "" (empty). Operators wishing to restore the original insecure behavior should set "CONF.conductor.file_url_allowed_paths" to "/". Take note that in the 2025.2 release and later, "/dev", "/sys", "/proc", "/run", and "/etc" will be unconditionally blocked as a security measure. This issue only poses a significant security risk when Ironic's automated cleaning process is disabled and the service is configured in such a way that permits direct deployment by an untrusted API user, such as standalone Ironic installations or environments granting ownership of nodes to projects. Bug Fixes ********* * The set of strings used to detect cipher suite version related errors in the "ipmitool" command was expanded. If the string "Error in open session response message : invalid role" is contained in the output of a failed "ipmitool" command execution, such error will be now considered as related to inappropriate ciphers too, and will be retried with another cipher suite version if Ironic is configured to do so. See bug 2085137 (https://launchpad.net/bugs/2085137) for more details. * Fixes an issue where operators executing complex arrangement of steps which include out-of-band and in-band steps, for example a hardware RAID "create_configuration" step followed by in-band steps inside of the agent, would effectively get the agent stuck in a "wait" state in the Cleaning, Servicing, or Deploying workflows. This was related to the way out-of-band steps are executed and monitored. Ironic, before starting to execute a new step, now cleans the polling lockout flag for the respective workflow being executed to prevent the agent from getting stuck. For more information, please see bug 2096938 (https://bugs.launchpad.net/ironic/+bug/2096938) * Some vendors insist that floppy images must be 1440 KiB in size and that the file name ends with ".img". Make it so. * Includes the agent token parameter in get command status requests as the endpoint now requires authentication. * The fix for CVE-2024-47211 results in image checksum being required in all cases. However there is no checksum requirement for file:// based images. When checksum is missing for file:// based image_source it is now calculated on-the-fly. * Fixes an error within the redfish session cache when no "redfish_password" is specified bug 2097019 (https://bugs.launchpad.net/ironic/+bug/2097019) Changes in ironic 24.1.3..24.1.4 -------------------------------- cc8d7c08c OSSA-2025-001: Disallow unsafe image file:// paths 287ac76cb [stable-only] Fix errors building docs 1e9877f4a Make floppy images more floppy 1f02a1d88 ci: automatically set the branch for IPA to match TARGET_BRANCH 4aa8310ef Pass agent token to get command results 6cbbad1ef Expand detected strings in check_cipher_suite_errors fea9a4f07 Fix agent from being locked out with complex steps 34bb2b1d4 stable-only: Drop ironic-tox-codespell job 9b97ec3bb Fix redfish session cache on missing password 4836513ee Calculate missing checksum for file:// based images cdae95e46 Fix actual size calculation for storage fallback logic Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 2 +- ironic/common/async_steps.py | 6 ++- ironic/common/checksum_utils.py | 15 +++++- ironic/common/image_service.py | 22 +++++++- ironic/common/images.py | 2 +- ironic/conductor/cleaning.py | 5 ++ ironic/conductor/deployments.py | 4 ++ ironic/conductor/servicing.py | 4 ++ ironic/conf/conductor.py | 16 ++++++ ironic/conf/types.py | 55 +++++++++++++++++++ ironic/drivers/modules/agent_client.py | 6 +++ ironic/drivers/modules/image_utils.py | 8 +-- ironic/drivers/modules/ipmitool.py | 8 +-- ironic/drivers/modules/redfish/utils.py | 6 ++- .../unit/drivers/modules/test_agent_client.py | 6 +-- .../unit/drivers/modules/test_deploy_utils.py | 12 +++++ ...ion-ipmitools-cipher-fail-1503b4e319e77ed8.yaml | 11 ++++ ...polling-lockout-for-steps-b9645f0cae18da1e.yaml | 13 +++++ .../floppy-image-quirks-32e14d32a37b0742.yaml | 5 ++ ...ent-token-to-get-requests-982bacce85d95ce8.yaml | 5 ++ .../missing_file_checksum-4931c98031951486.yaml | 7 +++ ...sallow-unsafe-image-paths-670fdcfe3e4647d4.yaml | 29 ++++++++++ ...sh-allow-missing-password-ce4fb161d35a6850.yaml | 6 +++ tools/config/ironic-config-generator.conf | 1 - tox.ini | 2 +- zuul.d/ironic-jobs.yaml | 7 --- 37 files changed, 432 insertions(+), 50 deletions(-)

1 0

kolla 20.0.0.0rc1 (epoxy)
by no-reply＠openstack.org 09 May '25

09 May '25

Hello everyone, A new release candidate for kolla for the end of the Epoxy cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Epoxy release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/epoxy release branch at: https://opendev.org/openstack/kolla/src/branch/stable/epoxy Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *epoxy-rc-potential* to bring it to the kolla release crew's attention.

1 0

kolla-ansible 20.0.0.0rc1 (epoxy)
by no-reply＠openstack.org 09 May '25

09 May '25

Hello everyone, A new release candidate for kolla-ansible for the end of the Epoxy cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Epoxy release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/epoxy release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/epoxy Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *epoxy-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

magnum-capi-helm 1.2.1
by no-reply＠openstack.org 09 May '25

09 May '25

We enthusiastically announce the release of: magnum-capi-helm 1.2.1 The source is available from: https://opendev.org/openstack/magnum-capi-helm Download the package from: https://pypi.org/project/magnum-capi-helm For more details, please see below. 1.2.1 ^^^^^ Bug Fixes * Fixed an issue where non-default node groups could not be individually deleted. The node groups would get stuck in the DELETE_IN_PROGRESS state and the underlying VMs would keep running. Node groups were only cleaned up when the entire cluster was deleted. Changes in magnum-capi-helm 1.2.0..1.2.1 ---------------------------------------- 3159a01 Improve node group deletion unit test 01548de Fix deletion of non-default node groups 8e82859 CI: Add linting to releasenotes eaccbd2 CI: Stop running py38, add py312 8a6c56d Intro docs for Magnum-CAPI-helm Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 18 +-- magnum_capi_helm/driver.py | 5 +- .../fix-nodegroup-delete-c83210c6029041d2.yaml | 8 ++ test-requirements.txt | 2 +- tox.ini | 13 ++ 10 files changed, 246 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index e9dc685..445e8c7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +5 @@ -hacking>=3.0,<3.1 # Apache-2.0 +hacking>=7.0.0,<7.1.0 # Apache-2.0

1 0

python-zaqarclient 3.0.1 (epoxy)
by no-reply＠openstack.org 09 May '25

09 May '25

We enthusiastically announce the release of: python-zaqarclient 3.0.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/python-zaqarclient Download the package from: https://pypi.org/project/python-zaqarclient Please report issues through: https://bugs.launchpad.net/python-zaqarclient/+bugs For more details, please see below. Changes in python-zaqarclient 3.0.0..3.0.1 ------------------------------------------ 0233b3b Remove remaining deprecated commands ce24421 Update TOX_CONSTRAINTS_FILE for stable/2025.1 c87fe99 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + setup.cfg | 3 --- tox.ini | 2 +- 3 files changed, 2 insertions(+), 4 deletions(-)

1 0

octavia 15.0.1 (dalmatian)
by no-reply＠openstack.org 09 May '25

09 May '25

We are glad to announce the release of: octavia 15.0.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 15.0.1 ^^^^^^ Bug Fixes * Remove record in amphora_health table on revert. It's necessary, because record in amphora table for corresponding amphora also deleted. It allows to avoid false positive react of failover threshold due to orphan records in amphora_health table. * Ignore serialization loadbalancer class in GetAmphoraNetworkConfigs tasks. It allows to avoid storing full graph in jobboard details. It fixes cases with enabled jobboard for huge LBs with ~2000+ resources in graph. * Fixed potential AttributeError during listener update when security group rule had no protocol defined (ie. it was null). * Fixed an issue with SINGLE topology load balancer with UDP listeners, the Amphora now sends a Gratuitous ARP packet when a UDP pool is added, it makes the VIP address more quickly reachable after a failover or when reusing a previously allocated IP address. * Fix verification of certificates signed by a private CA when using Neutron endpoints. * Fix error on revert PlugVIPAmphora task, when db_lb is not defined and get_subnet raises NotFound error. It could happen when Amphora creation failed by timeout and before it VIP network was removed. As result revert failed with exception. Changes in octavia 15.0.0..15.0.1 --------------------------------- 8e02055af Ignore load_balancer graph in task results to avoid break write data in jobboard DB 3439d458d Fix amphora image builds to use DIB bindep 82d00251b Update stable/2024.2 to use 2024.2 tests f88404541 Fix missing GARP with UDP listeners on SINGLE LB b9196fd64 Fix verification of certificates signed by a private CA 71b964dcf Remove amphora_health record on revert CreateAmphoraInDB c60d7fbea Handle undefined protocol field in security group rules correctly 57ccd896e Do not fail on revert PlugVIPAmphora due undefined db_lb df8524849 Pin pylint on 2024.2 20d97469e Update TOX_CONSTRAINTS_FILE for stable/2024.2 e55d53480 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../amphora-agent/source-repository-amphora-agent | 4 +- elements/octavia-lib/source-repository-octavia-lib | 2 +- .../backends/agent/api_server/keepalivedlvs.py | 9 +++ octavia/amphorae/backends/agent/api_server/util.py | 37 ++++++++- octavia/common/clients.py | 8 +- .../controller/worker/v2/tasks/database_tasks.py | 16 ++-- .../controller/worker/v2/tasks/network_tasks.py | 36 ++++++--- .../drivers/neutron/allowed_address_pairs.py | 5 +- .../backends/agent/api_server/test_util.py | 90 +++++++++++++++++++++- .../worker/v2/tasks/test_database_tasks.py | 34 ++++++-- .../worker/v2/tasks/test_network_tasks.py | 65 ++++++++++++++++ .../drivers/neutron/test_allowed_address_pairs.py | 3 +- playbooks/image-build/run.yaml | 52 ++----------- ...lth_row_on_amphora_revert-082f94459ecacaa2.yaml | 7 ++ ...t-amphora-network-configs-347a0a4340ee222b.yaml | 6 ++ ...up-rule-has-protocol-none-9b7217c5477d01b6.yaml | 5 ++ ...ix-garp-for-udp-listeners-6bf2ec8d491d1e1b.yaml | 7 ++ ...te-ca-signed-certificates-b9386a0d92627b03.yaml | 5 ++ ..._db_lb_on_plug_vip_revert-5c24af124498b246.yaml | 7 ++ test-requirements.txt | 2 +- tox.ini | 8 +- zuul.d/jobs.yaml | 89 +++++++++++++++++++-- zuul.d/projects.yaml | 36 ++++----- 24 files changed, 426 insertions(+), 108 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index fa31c123f..6f9f2cb36 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ oslotest>=3.2.0 # Apache-2.0 -pylint>=2.5.3 # GPLv2 +pylint>=2.5.3,<3.2.0 # GPLv2

1 0

ironic 29.0.2 (epoxy)
by no-reply＠openstack.org 09 May '25

09 May '25

We are jazzed to announce the release of: ironic 29.0.2 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 29.0.2 ^^^^^^ Security Issues * Fixes OSSA-2025-001, where Ironic did not properly filter file:// paths when used as image sources. This would permit any file accessible by the conductor to be used as an image to attempt deployment. Adds "CONF.conductor.file_url_allowed_paths", an allowlist configuration defaulting to "/var/lib/ironic", "/shared/html", "/opt/cache/files", "/vagrant", and "/templates", permits operators to further restrict where the conductor will fetch images for when provided a file:// URL. This default value was chosen based on known usage by projects downstream of Ironic, including Metal3, Bifrost, and OpenShift. These defaults may change to be more restrictive at a later date. Operators using file:// URLs are encouraged to explicitly set this value even if the current default is sufficient. Operators wishing to fully disable the ability to deploy with a file:// URL should set this configuration to "" (empty). Operators wishing to restore the original insecure behavior should set "CONF.conductor.file_url_allowed_paths" to "/". Take note that in the 2025.2 release and later, "/dev", "/sys", "/proc", "/run", and "/etc" will be unconditionally blocked as a security measure. This issue only poses a significant security risk when Ironic's automated cleaning process is disabled and the service is configured in such a way that permits direct deployment by an untrusted API user, such as standalone Ironic installations or environments granting ownership of nodes to projects. Changes in ironic 29.0.1..29.0.2 -------------------------------- 0506aae0c OSSA-2025-001: Disallow unsafe image file:// paths Diffstat (except docs and test files) ------------------------------------- ironic/common/image_service.py | 22 +++++++- ironic/conf/conductor.py | 15 ++++++ ironic/conf/types.py | 55 +++++++++++++++++++ ...sallow-unsafe-image-paths-670fdcfe3e4647d4.yaml | 29 ++++++++++ 8 files changed, 269 insertions(+), 10 deletions(-)

1 0

oslo.middleware 6.5.0 (flamingo)
by no-reply＠openstack.org 08 May '25

08 May '25

We are excited to announce the release of: oslo.middleware 6.5.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.middleware Download the package from: https://pypi.org/project/oslo.middleware Please report issues through: https://bugs.launchpad.net/oslo.middleware/+bugs For more details, please see below. Changes in oslo.middleware 6.4.0..6.5.0 --------------------------------------- 26dfbfd typing: Fix issue with HealthCheck.app_factory af16970 Drop redundant injection of VIRTUAL_ENV Diffstat (except docs and test files) ------------------------------------- oslo_middleware/healthcheck/__init__.py | 15 +++++---------- requirements.txt | 9 +++++---- tox.ini | 6 ++---- 3 files changed, 12 insertions(+), 18 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 96e761d..f15a2ef 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5,2 @@ -pbr>=2.0.0 # Apache-2.0 +bcrypt>=3.1.3 # Apache-2.0 +debtcollector>=1.2.0 # Apache-2.0 @@ -10,0 +12,2 @@ oslo.utils>=3.33.0 # Apache-2.0 +pbr>=2.0.0 # Apache-2.0 +statsd>=3.2.1 # MIT @@ -11,0 +15 @@ stevedore>=1.20.0 # Apache-2.0 +typing-extensions>=4.11.0 # PSF-2.0 @@ -13,3 +16,0 @@ WebOb>=1.8.0 # MIT -debtcollector>=1.2.0 # Apache-2.0 -statsd>=3.2.1 # MIT -bcrypt>=3.1.3 # Apache-2.0

1 0