June 2025 - Release-announce - lists.openstack.org

bifrost 18.0.1 (caracal)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We are pumped to announce the release of: bifrost 18.0.1 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://bugs.launchpad.net/bifrost/+bugs For more details, please see below. 18.0.1 ^^^^^^ Bug Fixes * Fixes an issue where "inspection_callback_url" was templated with leading whitespace. This caused the "ipa-inspection-callback-url" kernel command line argument to be incorrectly set, leading to Ironic Python Agent posting introspection data back to Ironic rather than Ironic Inspector when using the "enable_inspector" option. Changes in bifrost 18.0.0..18.0.1 --------------------------------- 02c65531 pip: Use SETUPTOOLS_USE_STDLIB if python < 3.12 c84cda2c Fix leading and trailing whitespace in inspection_callback_url 9d8b6892 [stable-only] CI: Remove SLURP upgrade job 36dd817b Fix missed occurrence of SETUPTOOLS_USE_DISTUTILS e4cd1cf3 CI: Add a non-voting SLURP upgrade job for Ubuntu Jammy b0ea89d9 Update TOX_CONSTRAINTS_FILE for stable/2024.1 49965857 Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + playbooks/roles/bifrost-ironic-install/tasks/create_tftpboot.yml | 6 +++--- playbooks/roles/bifrost-pip-install/tasks/main.yml | 8 +++----- .../fix-whitespace-in-inspection-callback-3f450db7ae2c91d5.yaml | 8 ++++++++ tox.ini | 6 +++--- zuul.d/bifrost-jobs.yaml | 4 ++-- 6 files changed, 20 insertions(+), 13 deletions(-)

1 0

ironic 24.1.5 (caracal)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We exuberantly announce the release of: ironic 24.1.5 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 24.1.5 ^^^^^^ Bug Fixes * In the redfish inspector, use condition to control whether the pxe_enabled field of a port is updated during inspection. [inspector]update_pxe_enabled is used to control this so it behaves like all other inspection interfaces. The default value for this configuration is True. * Fixes an issue with agent startup where the workflow from the first agent heartbeat interaction could fail due to a transient networking issue leaving the Agent and Ironic in a state where the node cannot be deployed and continues to record errors upon each additional heartbeat operation. Logic to check the state of the agent has been adjusted to ignore retry operations which were recorded by the agent. More information on this issue can be found in bug 2110698 (https://bugs.launchpad.net/ironic/+bug/2110698) Changes in ironic 24.1.4..24.1.5 -------------------------------- 9c00e5289 Control port updates with update_pxe_enabled flag a7ecec5ff Fix agent get_XXX_steps retries from being treated as not fresh agents Diffstat (except docs and test files) ------------------------------------- ironic/drivers/modules/agent_base.py | 15 ++++++--- ironic/drivers/modules/redfish/inspect.py | 3 +- .../unit/drivers/modules/redfish/test_inspect.py | 23 +++++++++++++ ...-enabled-field-inspection-206f67c6638a0bdb.yaml | 7 ++++ ...etries-with-agent-startup-aebfc36a775794c3.yaml | 11 +++++++ 6 files changed, 91 insertions(+), 6 deletions(-)

1 0

ironic-python-agent 9.11.2 (caracal)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We high-spiritedly announce the release of: ironic-python-agent 9.11.2 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent/+bugs For more details, please see below. 9.11.2 ^^^^^^ Bug Fixes * The use of md_device as the default volume name if the volume name of a RAID array hasn't been specified caused a 'Not POSIX compatible' error. This has been fixed by using just the last part of the md_device. Fixes https://bugs.launchpad.net/ironic-python- agent/+bug/2073406 * Prevent the UnboundLocalError in erase_devices_express, for example, on a disk failure. Changes in ironic-python-agent 9.11.1..9.11.2 --------------------------------------------- d11fa50c Fix the way qemu-img is called with prlimits eb8d9e0f Fix errors in the function erase_devices_express 84edb10e Fix RAID volume name 7e9dd7e9 Warn when the provided checksum algorithm does not match the detected b39d9d67 Remove non RE2 job config 349c9d39 Trivial: fix variable in formatting Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/extensions/standby.py | 19 +++++++++ ironic_python_agent/hardware.py | 1 + ironic_python_agent/ironic_api_client.py | 2 +- ironic_python_agent/qemu_img.py | 2 +- ironic_python_agent/raid_utils.py | 2 +- .../fix-raid-volume-name-ac9013e7b5cf3d46.yaml | 7 ++++ ..._in_erase_devices_express-f425c76b485a875f.yaml | 5 +++ zuul.d/ironic-python-agent-jobs.yaml | 1 - 12 files changed, 104 insertions(+), 30 deletions(-)

1 0

ironic-python-agent 9.14.1 (dalmatian)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We eagerly announce the release of: ironic-python-agent 9.14.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent/+bugs For more details, please see below. 9.14.1 ^^^^^^ Bug Fixes * The use of md_device as the default volume name if the volume name of a RAID array hasn't been specified caused a 'Not POSIX compatible' error. This has been fixed by using just the last part of the md_device. Fixes https://bugs.launchpad.net/ironic-python- agent/+bug/2073406 * Prevent the UnboundLocalError in erase_devices_express, for example, on a disk failure. Changes in ironic-python-agent 9.14.0..9.14.1 --------------------------------------------- 5e79632e Fix the way qemu-img is called with prlimits 512e928c Fix errors in the function erase_devices_express 0718ad73 Fix RAID volume name aa01777c Warn when the provided checksum algorithm does not match the detected e459ecc9 Trivial: fix variable in formatting 0c30b426 Update TOX_CONSTRAINTS_FILE for stable/2024.2 c8611331 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_python_agent/extensions/standby.py | 19 +++++++++ ironic_python_agent/hardware.py | 1 + ironic_python_agent/ironic_api_client.py | 2 +- ironic_python_agent/qemu_img.py | 2 +- ironic_python_agent/raid_utils.py | 2 +- .../fix-raid-volume-name-ac9013e7b5cf3d46.yaml | 7 ++++ ..._in_erase_devices_express-f425c76b485a875f.yaml | 5 +++ tox.ini | 10 ++--- 13 files changed, 110 insertions(+), 34 deletions(-)

1 0

ironic-python-agent 10.2.1 (epoxy)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We are ecstatic to announce the release of: ironic-python-agent 10.2.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent/+bugs For more details, please see below. 10.2.1 ^^^^^^ Bug Fixes * Fixes IPA collecting the effective MAC address of NICs instead of the pesistent MAC address. In case it fails to fetch the persistent address falls back to effective MAC address. See https://bugs.launchpad.net/ironic-python-agent/+bug/2103450 for details. Changes in ironic-python-agent 10.2.0..10.2.1 --------------------------------------------- 797c3f3e netutils: Use ethtool ioctl to get permanent mac address 0ee9ca45 Update TOX_CONSTRAINTS_FILE for stable/2025.1 914f6278 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_python_agent/netutils.py | 43 +++++++++++- .../notes/fix-mac-permaddr-0bc7d688eee4b814.yaml | 9 +++ tox.ini | 8 +-- 5 files changed, 123 insertions(+), 18 deletions(-)

1 0

bifrost 19.1.1 (dalmatian)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We are ecstatic to announce the release of: bifrost 19.1.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://bugs.launchpad.net/bifrost/+bugs For more details, please see below. 19.1.1 ^^^^^^ Bug Fixes * Fixes an issue with checksum verification when setting "upstream_deploy_image_distribution" to "rocky" or "cirros". Changes in bifrost 19.1.0..19.1.1 --------------------------------- 87899ea3 [stable-only] CI: Remove SLURP upgrade job 1a99a85c Fix checksum parsing for Cirros and Rocky Linux 330019b0 Update TOX_CONSTRAINTS_FILE for stable/2024.2 7f086f83 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../tasks/download_deployment_image.yml | 6 +++++- .../notes/fixes-checksum-parsing-82c04ff1bb575c51.yaml | 6 ++++++ tox.ini | 6 +++--- zuul.d/bifrost-jobs.yaml | 11 ----------- zuul.d/project.yaml | 2 -- 6 files changed, 15 insertions(+), 17 deletions(-)

1 0

tempest 44.0.0 (flamingo)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We are glad to announce the release of: tempest 44.0.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 44.0.0 ^^^^^^ Prelude ******* This is an intermediate release during the 2025.2 development cycle to mark the end of support for 2023.2 release in Tempest. After this release, Tempest will support below OpenStack Releases: * 2025.1 * 2024.2 * 2024.1 Current development of Tempest is for OpenStack 2025.2 development cycle. Upgrade Notes ************* * The default value for "[volume] disk_format", which specifies the disk format of the image in a copy a volume to image operation, is changed from "raw" to "[raw, qcow2]" for which the type of the config option also needed to change from "string" type to "list" type i.e. it accepts multiple values now. Changes in tempest 43.0.0..44.0.0 --------------------------------- 3d85f36ad Pin stable/2025.1 constraint in tox to release 44.0.0 aea1cf984 End support for stable/2023.2 8cbe3aaa2 Add test for instance boot after snapshot deletion b37f20b30 Switch centos 9-stream jobs to run with python 3.11 3f8248641 Add tempest-full-rocky job in periodic testing 268017fbf Workaround the olso master testing job d12904cde Stop running jammy jobs 211fbad79 Use volume_type config for create_test_server function 60364b39f Revert "Adds tests for resize server for swap" 91d33beac replace devstack-plugin-ceph-tempest-py3 94582b45d Use create_volume wrapper instead of volumes_client 473d74555 [2025.2]Update integrated template for grenade-skip-level-always job f4a8698b9 Add Tempest gate job for stable/2025.1 da8a25bfc Create releasenotes page for tempest 42.0.0/43.0.0 a6321ccd0 Switch to the master constraint in tox.ini a20f89d20 Adds tests for resize server for swap fbd90e963 Add qcow2 format to upload image test d12492d0f Add host filtering for test_aggregate_add_existent_host and test_aggregate_remove_host_as_user tests Diffstat (except docs and test files) ------------------------------------- ...hange-default-disk-format-0d5230cbb19e3d44.yaml | 8 ++ .../end-of-support-of-2023-2-3631d8d0f3507518.yaml | 12 +++ releasenotes/source/index.rst | 2 + releasenotes/source/v42.0.0.rst | 6 ++ releasenotes/source/v43.0.0.rst | 6 ++ .../api/compute/admin/test_aggregates_negative.py | 16 ++-- tempest/api/volume/test_volumes_actions.py | 54 ++++++++------ tempest/api/volume/test_volumes_get.py | 12 +-- tempest/common/compute.py | 3 + tempest/config.py | 6 +- tempest/scenario/test_volume_boot_pattern.py | 69 ++++++++++++++++++ zuul.d/integrated-gate.yaml | 85 ++++++++++++++-------- zuul.d/project.yaml | 38 +++------- zuul.d/stable-jobs.yaml | 28 +++---- zuul.d/tempest-specific.yaml | 7 ++ 16 files changed, 240 insertions(+), 113 deletions(-)

1 0

sushy 5.0.1 (caracal)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We are pumped to announce the release of: sushy 5.0.1 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://bugs.launchpad.net/sushy/+bugs For more details, please see below. 5.0.1 ^^^^^ Bug Fixes * Adds a work-around for cases where "Accept-Encoding: identity" is not accepted. * Adds the ability to retry an attempt to determine a Manager for a System when ManagedBy attribute is missing but Managers attribute is present. This resolves issues with certain hardware models such as Huawei 1288H. * The "Name" field of a StorageControllers sub-field of a Storage resource is no longer mandatory. Changes in sushy 5.0.0..5.0.1 ----------------------------- 2805e27 When ManagedBy attribute is missing from System retry with Managers 285498f Name is not mandatory for Storage/StorageControllers ddd61c7 Handle NotAcceptable when Accept-Encoding: identity is not allowed e143e36 Update TOX_CONSTRAINTS_FILE for stable/2024.1 55c61a5 Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../notes/accept-encoding-4646ea43998f80bd.yaml | 5 + ...etry-on-missing-managedby-b2a5240eab8b4262.yaml | 6 + .../storage-controller-name-6924b71a97f78481.yaml | 5 + sushy/connector.py | 42 ++++-- sushy/exceptions.py | 6 + sushy/resources/system/storage/storage.py | 2 +- sushy/resources/system/system.py | 18 ++- .../system_managedby_missing_manager_present.json | 166 +++++++++++++++++++++ .../unit/resources/system/storage/test_storage.py | 1 - tox.ini | 12 +- 14 files changed, 336 insertions(+), 53 deletions(-)

1 0

ironic 26.1.3 (dalmatian)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We are tickled pink to announce the release of: ironic 26.1.3 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 26.1.3 ^^^^^^ Bug Fixes * In the redfish inspector, use condition to control whether the pxe_enabled field of a port is updated during inspection. [inspector]update_pxe_enabled is used to control this so it behaves like all other inspection interfaces. The default value for this configuration is True. * Fixes an issue with agent startup where the workflow from the first agent heartbeat interaction could fail due to a transient networking issue leaving the Agent and Ironic in a state where the node cannot be deployed and continues to record errors upon each additional heartbeat operation. Logic to check the state of the agent has been adjusted to ignore retry operations which were recorded by the agent. More information on this issue can be found in bug 2110698 (https://bugs.launchpad.net/ironic/+bug/2110698) Changes in ironic 26.1.2..26.1.3 -------------------------------- a13ed324b Control port updates with update_pxe_enabled flag ebb5b1f1a Fix agent get_XXX_steps retries from being treated as not fresh agents d1c117502 CI: Fix anaconda job post OSSA-2025-001 Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 3 ++ ironic/drivers/modules/agent_base.py | 15 ++++++--- ironic/drivers/modules/redfish/inspect.py | 3 +- .../unit/drivers/modules/redfish/test_inspect.py | 23 +++++++++++++ ...-enabled-field-inspection-206f67c6638a0bdb.yaml | 7 ++++ ...etries-with-agent-startup-aebfc36a775794c3.yaml | 11 +++++++ 7 files changed, 94 insertions(+), 6 deletions(-)

1 0

cinder 24.4.0 (caracal)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We joyfully announce the release of: cinder 24.4.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 24.4.0 ^^^^^^ Bug Fixes * Dell PowerMax Driver bug #2081742 (https://bugs.launchpad.net/cinder/+bug/2081742) The REST API calls for the masking view connection do not return the HostLUN ID immediately. To address this, an exception has been added to implement a retry mechanism. * Dell PowerMax Driver bug #2092259 (https://bugs.launchpad.net/cinder/+bug/2092259) Before a volume can be deleted, the driver issues a command to clean up active snapshots in the backend and then polls the backend to make sure the cleanup has occurred. This fix enhances the polling mechanism to give the backend more time to do the cleanup, thereby increasing the probability that the driver will be able to make a successful volume deletion request. * NFS driver bug #2074377 (https://bugs.launchpad.net/cinder/+bug/2074377) Fixed regression caused by change I65857288b797 (the mitigation for CVE-2024-32498) that was preventing the creation of a new volume from the second and subsequent snapshots of an existing volume. * RBD driver bug #2092534 (https://bugs.launchpad.net/cinder/+bug/2092534) Fixed uploading a volume to image when image has different format than volume. * Pure Storage driver bug #2100547 (https://bugs.launchpad.net/cinder/+bug/2100547) Fixed issue where volumes created as clones from a source image volume do get the defined QoS settings associated with the volume type used. * Pure Storage bug #2101859 (https://bugs.launchpad.net/cinder/+bug/2101859) Fixed issue where LACP bonds were not been correctly identified as NVMe targets. Changes in cinder 24.3.0..24.4.0 -------------------------------- 86f282dae Dell PowerMax: Enhanced the retry mechanism to verify the active snapshots. 6dbdf33fb Dell PowerMax: Added exception handling after the masking view REST call. 32a71114c NFS driver: Fix fail creating volume with multiple snapshots 7b571e5f5 [Pure Storage] Fix QoS setting for cloned volumes 7b90004f5 RBD: Fix upload volume with different format d4c631789 [Pure Storage] Fix issue with NVMe LACP ports not being identified 25d24836c Tests: Fix double mocking in test_rbd 10a37a90b Tests: Fix type error in volume encryption unit tests Diffstat (except docs and test files) ------------------------------------- cinder/image/image_utils.py | 64 +++++++++++++------ .../dell_emc/powermax/test_powermax_common.py | 31 +++++++++ .../dell_emc/powermax/test_powermax_rest.py | 15 +++-- cinder/volume/drivers/dell_emc/powermax/common.py | 2 +- cinder/volume/drivers/dell_emc/powermax/rest.py | 42 ++++++++---- cinder/volume/drivers/nfs.py | 8 ++- cinder/volume/drivers/pure.py | 8 ++- cinder/volume/drivers/rbd.py | 37 ++++++++++- cinder/volume/flows/manager/create_volume.py | 7 +- ...wermax-rest-api-hostlunid-ee22d0105c990ea0.yaml | 8 +++ ...ailed-fix-active-snapshot-ccc3f9b6251d2634.yaml | 12 ++++ ...fix-nfs-vol-from-snapshot-654a07d25a33bf7d.yaml | 8 +++ ...ix-rbd-upload-diff-format-38fc4ef24d7145ba.yaml | 7 ++ .../notes/pure_clone_qos_fix-a2a13311e94247db.yaml | 7 ++ .../pure_storage_nvme_lacp-ef1a2a911c7ecc75.yaml | 6 ++ 19 files changed, 362 insertions(+), 85 deletions(-)

1 0

cinder 25.2.0 (dalmatian)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We contentedly announce the release of: cinder 25.2.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 25.2.0 ^^^^^^ New Features ************ * Ceph driver: Add config option to keep only the last n snapshots per backup to save disk space on the source volume storage. Enabling this option can cause incremental backups to become full backups instead under special circumstances. Please take a look at the Ceph backup driver docs for more information. Bug Fixes ********* * Dell PowerMax Driver bug #2081742 (https://bugs.launchpad.net/cinder/+bug/2081742) The REST API calls for the masking view connection do not return the HostLUN ID immediately. To address this, an exception has been added to implement a retry mechanism. * Dell PowerMax Driver bug #2092259 (https://bugs.launchpad.net/cinder/+bug/2092259) Before a volume can be deleted, the driver issues a command to clean up active snapshots in the backend and then polls the backend to make sure the cleanup has occurred. This fix enhances the polling mechanism to give the backend more time to do the cleanup, thereby increasing the probability that the driver will be able to make a successful volume deletion request. * NFS driver bug #2074377 (https://bugs.launchpad.net/cinder/+bug/2074377) Fixed regression caused by change I65857288b797 (the mitigation for CVE-2024-32498) that was preventing the creation of a new volume from the second and subsequent snapshots of an existing volume. * RBD driver bug #2092534 (https://bugs.launchpad.net/cinder/+bug/2092534) Fixed uploading a volume to image when image has different format than volume. Changes in cinder 25.1.0..25.2.0 -------------------------------- 39883f2b7 NFS driver: Fix fail creating volume with multiple snapshots e9315330f Dell PowerMax: Enhanced the retry mechanism to verify the active snapshots. 4c66ccebf Dell PowerMax: Added exception handling after the masking view REST call. c579760dd RBD: Fix upload volume with different format 0b165a3f3 Dell PowerMax: Add PowerMax Laurel Release support 14912780b Ceph: Add option to keep only last n snapshots per backup Diffstat (except docs and test files) ------------------------------------- cinder/backup/drivers/ceph.py | 125 +++++++++++++++++++-- cinder/image/image_utils.py | 64 +++++++---- cinder/message/message_field.py | 3 + .../dell_emc/powermax/test_powermax_common.py | 31 +++++ .../dell_emc/powermax/test_powermax_rest.py | 15 +-- cinder/volume/drivers/dell_emc/powermax/common.py | 2 +- cinder/volume/drivers/dell_emc/powermax/rest.py | 42 ++++--- cinder/volume/drivers/nfs.py | 8 +- cinder/volume/drivers/rbd.py | 37 +++++- .../block-storage/backup/ceph-backup-driver.rst | 21 ++++ .../drivers/dell-emc-powermax-driver.rst | 6 + ...wermax-rest-api-hostlunid-ee22d0105c990ea0.yaml | 8 ++ ...ailed-fix-active-snapshot-ccc3f9b6251d2634.yaml | 12 ++ ...eep-only-last-n-snapshots-89dc532656f453f4.yaml | 8 ++ ...fix-nfs-vol-from-snapshot-654a07d25a33bf7d.yaml | 8 ++ ...ix-rbd-upload-diff-format-38fc4ef24d7145ba.yaml | 7 ++ 20 files changed, 513 insertions(+), 80 deletions(-)

1 0

cinder 26.1.0 (epoxy)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We are jazzed to announce the release of: cinder 26.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 26.1.0 ^^^^^^ Bug Fixes * Bug #2082587 (https://bugs.launchpad.net/cinder/+bug/2082587) Fixed backup restoration throwing TypeError on new volume. * NFS driver bug #2074377 (https://bugs.launchpad.net/cinder/+bug/2074377) Fixed regression caused by change I65857288b797 (the mitigation for CVE-2024-32498) that was preventing the creation of a new volume from the second and subsequent snapshots of an existing volume. Changes in cinder 26.0.0..26.1.0 -------------------------------- 8df631859 [docs] Extra spaces breaking rst->html rendering 1f9d111f8 Fix type passed to write function during backup restoration ca8290720 NFS driver: Fix fail creating volume with multiple snapshots 2889ee129 zuul: cinder-plugin-ceph-tempest: raise swap size Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - cinder/backup/chunkeddriver.py | 2 +- cinder/image/image_utils.py | 64 +++++++++++++------ cinder/volume/drivers/nfs.py | 8 ++- ...-fix-type-passed-during-backup-restoration.yaml | 5 ++ ...fix-nfs-vol-from-snapshot-654a07d25a33bf7d.yaml | 8 +++ 8 files changed, 158 insertions(+), 35 deletions(-)

1 0

neutron-tempest-plugin 2.12.0 (flamingo)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We exuberantly announce the release of: neutron-tempest-plugin 2.12.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/neutron-tempest-plugin Download the package from: https://tarballs.openstack.org/neutron-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 2.12.0 ^^^^^^ Other Notes * The testing advanced image used in some jobs has been bumped from Ubuntu Focal 20.04 to Ubuntu Jammy 22.04. Changes in neutron-tempest-plugin 2.11.0..2.12.0 ------------------------------------------------ 32af0d5 Drop explicit dependency on python-subunit e5e80a7 [CI][2025.1] Skip failing test in ubuntu jammy ovn job a016f7a Add test job for address_group api backend Ml2/OVN 42ff621 Use only "ubuntu-22.04-minimal" advance image 20d0da0 Use infra mirrors for advanced image prepare 55b1e65 Increase the timeout for neutron-tempest-plugin-bgpvpn-bagpipe 33130ea Bump advance image to Ubuntu Jammy 22.04 20024c4 Cleanup not used job aliases f7b9597 Pin "designate-tempest-plugin" to yoga-last in Yoga branch 1f3f2b1 Pin "designate-tempest-plugin" to zed-last in Zed branch 06d902e Remove Bobcat 2023.2 jobs 6ebb27b Revert "Mark "neutron-tempest-plugin-designate-scenari" as non voting" ce5687b Mark "neutron-tempest-plugin-designate-scenari" as non voting f4fb68d Unset "router:external" in subnet tests e32b2e1 Add neutron-tempest-plugin-fwaas-ovn job c732e87 [FWaaS] Update icmp_reachability_test for OVN backend c30b23b Drop ubuntu jammy jobs for master(Flamingo) ec1c11a Revert "Mark test_subport_connectivity as unstable for now" 973995e Cleanup some of the zuul job definitions b6e254e Increase ``neutron-tempest-plugin-vpnaas*`` timeout 77eebcc Add zuul.d/2025_1_jobs.yaml to irrelevant-files 3382d9d Fix a neutron-tempest-plugin 2024.2 job definition 0ec2997 Add 2025.1 (Epoxy) stable jobs 6b4bf1e Disable n-d-r tempest scenario jobs for 2023.1 dff2282 Exclude VlanQinq tests in ovn ubuntu jammy job Diffstat (except docs and test files) ------------------------------------- neutron_tempest_plugin/api/test_subnets.py | 4 +- neutron_tempest_plugin/config.py | 4 + .../fwaas/scenario/test_fwaas_v2.py | 19 +- neutron_tempest_plugin/scenario/base.py | 2 +- .../scenario/test_security_groups.py | 17 +- neutron_tempest_plugin/scenario/test_trunk.py | 1 - ...e-image-ubuntu-jammy-2204-11b5ee414d665b66.yaml | 5 + test-requirements.txt | 1 - tools/customize_ubuntu_image | 12 + zuul.d/2023_1_jobs.yaml | 13 +- zuul.d/2024_1_jobs.yaml | 2 +- zuul.d/2024_2_jobs.yaml | 11 +- zuul.d/{2023_2_jobs.yaml => 2025_1_jobs.yaml} | 184 ++++------- zuul.d/master_jobs.yaml | 363 +++++++-------------- zuul.d/project.yaml | 62 ++-- zuul.d/victoria_jobs.yaml | 4 +- zuul.d/wallaby_jobs.yaml | 4 +- zuul.d/xena_jobs.yaml | 4 +- zuul.d/yoga_jobs.yaml | 13 +- zuul.d/zed_jobs.yaml | 17 +- 20 files changed, 323 insertions(+), 419 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ebde755..924f9ae 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +4,0 @@ flake8-import-order>=0.18.0,<0.19.0 # LGPLv3 -python-subunit>=1.0.0 # Apache-2.0/BSD

1 0

ironic-tempest-plugin 2.14.0 (flamingo)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We joyfully announce the release of: ironic-tempest-plugin 2.14.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/ironic-tempest-plugin Download the package from: https://tarballs.openstack.org/ironic-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. Changes in ironic-tempest-plugin 2.13.0..2.14.0 ----------------------------------------------- d4e23cd Adding better error messages to microversion tests 385c83f Remove stable/2023.2 job 9ea0e36 Remove available nodes configuration 18e5dae Adding basic microversion tests to CI 296d164 fix: fail fast on deploy failure in Anaconda jobs 171c943 CI: Increment jobs for 2025.1 release 8c52bae Remove legacy standalone jobs from test execution 75ad897 remove duplicated rbac jobs eb9816c Make sure fixed IPs are different for multitenancy tests 9f0671e Replaced all punctuation with an underscore in the node resource class. Diffstat (except docs and test files) ------------------------------------- ironic_tempest_plugin/common/waiters.py | 17 +- ironic_tempest_plugin/config.py | 3 - .../services/baremetal/v1/json/baremetal_client.py | 15 + .../api/admin/test_microversion_enforcement.py | 1437 +++++++++++++++++++- zuul.d/project.yaml | 24 +- zuul.d/stable-jobs.yaml | 38 +- 10 files changed, 1451 insertions(+), 107 deletions(-)

1 0

octavia-lib 3.9.0 (flamingo)
by no-reply＠openstack.org 21 Jun '25

21 Jun '25

We eagerly announce the release of: octavia-lib 3.9.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/octavia-lib Download the package from: https://pypi.org/project/octavia-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia-lib For more details, please see below. 3.9.0 ^^^^^ Bug Fixes * Adds a "Conflict" exception drivers can raise when a resource conflict occurs. This is part of a fix for error reporting when the requested VIP address is already in use on the subnet. Changes in octavia-lib 3.8.0..3.9.0 ----------------------------------- 28fd6d5 Add a "Conflict" exception 87d8e2e Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- octavia_lib/api/drivers/exceptions.py | 26 ++++++++++++++++++++++ .../Add-Conflict-exception-67bca85f9d660a36.yaml | 6 +++++ releasenotes/source/2025.1.rst | 6 +++++ releasenotes/source/index.rst | 1 + 5 files changed, 50 insertions(+)

1 0

oslo.service 4.2.1 (flamingo)
by no-reply＠openstack.org 17 Jun '25

17 Jun '25

We exuberantly announce the release of: oslo.service 4.2.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. 4.2.1 ^^^^^ Bug Fixes * The "threading" backend now accepts the "wait_interval" argument in "ProcessLauncher" for compatibility with services like Neutron. The parameter is still used in the "eventlet" backend to reduce CPU usage during child monitoring loops, but has no effect in "threading". A warning is logged if it is passed. In addition, multiple calls to "launch_service()" on the same "ProcessLauncher" instance are now supported, using a single "ServiceManager" internally. This makes the threading backend fully compatible with how the "eventlet" backend behaves. * Fixed a crash that occurred during service shutdown in the threading backend, caused by an incorrect call to the non-existent internal method "_terminate()" on "cotyledon.ServiceManager". The shutdown process now correctly uses the public "shutdown()" method, ensuring graceful and reliable termination of services. Changes in oslo.service 4.2.0..4.2.1 ------------------------------------ e196437 Fix crash during shutdown by using public shutdown() method 2bdf51f Accept wait_interval and support multiple launch_service() calls 0226960 Fix ServiceBase mapping when using threading backend 4aa4031 add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- oslo_service/backend/threading/__init__.py | 2 +- oslo_service/backend/threading/service.py | 28 ++++++--- pyproject.toml | 3 + ...t-wait-interval-threading-fc02f76056cbaed4.yaml | 12 ++++ ...eading-shutdown-cotyledon-3aff6ca0eb0125f5.yaml | 8 +++ 6 files changed, 114 insertions(+), 10 deletions(-)

1 0

neutron 26.0.1 (epoxy)
by no-reply＠openstack.org 13 Jun '25

13 Jun '25

We are tickled pink to announce the release of: neutron 26.0.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 26.0.1 ^^^^^^ Known Issues ************ * The ML2/OVN Placement initial configuration is executed now in the Neutron API process and removed from the maintenance worker; since the migration to WSGI, now the API and the maintenance worker are different processes. When an OVN "Chassis" creation event is received, the configuration is read, a "PlacementState" object created and sent to the Placement API. Bug Fixes ********* * The OVN QoS floating IP rule has precedence over the OVN QoS router rule. If both are present in the same router and port (the one assigned to the floating IP), the floating IP rule will now apply. For more information, see bug 2110018 (https://bugs.launchpad.net/neutron/+bug/2110018) Other Notes *********** * The ML2/OVN Placement extension now removes any existing resource provider deleted from the updated local node configuration. If the resource provider has allocations, Placement will return an exception and it will not be deleted. Changes in neutron 26.0.0..26.0.1 --------------------------------- 28e0818b81 Fix nova notification on port unplug bceb866190 Add provider network resources filter for "network" b958f4e0c3 [OVN] OVN agent retrieval filter matching improvement dcd0d3e4c6 [FT] Match the correct event in ``test_subport_delete`` f873d55efc Initialize the network segment ranges only in first WSGI worker 4815390cdc Delete the metadata agent file from the eventlet directory 00130dc806 Fix ovn_db_sync for user defined flavor routers aadae909d7 [OVN] Create a HA_Chassis_Group without raising an exception b689e57899 [OVN] Only update the MTU of the router GW LRPs 9936955168 [OVN] Change the OVN QoS rule priority for floating IPs de8c3bf5cf [Stable Only][CI][fips jobs] Use stable constraints for tempest 05a719a3fb Subnet filter by "router:external" needs to be changed to "external" b204a06560 Return a HTTP404 message when the Metadata instance is not present e46b66635e Create a common method to encode a HTTP response 511d101f59 Create random named resources in ``TestOvnSbSync`` 4dcb039493 [OVN] Isolate test_ovn_client* Functional Tests 1ad48e2c4d Revert "[DHCP] Reduce to one single thread the event processing" 686f634a83 [OVN][QoS] Update the Logical_Swith_Port options with the QoS values af1453d1e0 [UT] Delete the OVN AgentCache instance in the cleanup aa6057914a fullstack: use shorter agent_down_time and report_interval f9275e6342 If OVS Manager creation failes retry to set values 9e0bd0a364 [OVN][Placement] Placement init config with Chassis create event 2489d8009e Revert the network IDs filter in ``_gen_router_port_options`` eef9e87991 [OVN] Delete a resource provider removed from the agent config Diffstat (except docs and test files) ------------------------------------- neutron/agent/common/placement_report.py | 27 ++++- neutron/agent/dhcp/agent.py | 22 +++- neutron/agent/metadata/agent.py | 46 +++---- neutron/agent/metadata/proxy_base.py | 9 +- neutron/agent/ovn/metadata/server_socket.py | 46 +++---- neutron/agent/ovsdb/native/helpers.py | 2 +- neutron/cmd/eventlet/agents/metadata.py | 24 ---- neutron/common/metadata.py | 29 +++++ neutron/common/ovn/constants.py | 5 + neutron/common/ovn/utils.py | 10 +- neutron/common/utils.py | 7 ++ neutron/common/wsgi_utils.py | 3 + neutron/db/db_base_plugin_v2.py | 35 ++++++ neutron/db/external_net_db.py | 11 +- neutron/objects/subnet.py | 16 --- neutron/plugins/ml2/drivers/helpers.py | 10 +- .../plugins/ml2/drivers/ovn/agent/neutron_agent.py | 23 +++- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 2 +- .../ovn/mech_driver/ovsdb/extensions/placement.py | 60 ++++++--- .../ovn/mech_driver/ovsdb/extensions/qos.py | 26 +++- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 26 ++++ .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 36 +++--- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 5 +- neutron/plugins/ml2/drivers/type_tunnel.py | 44 ++++--- neutron/plugins/ml2/drivers/type_vlan.py | 47 ++++---- neutron/plugins/ml2/managers.py | 20 +-- neutron/plugins/ml2/plugin.py | 9 +- neutron/privileged/agent/ovsdb/native/helpers.py | 33 ++++- .../functional/agent/ovsdb/native/test_helpers.py | 26 ++++ .../mech_driver/ovsdb/extensions/test_placement.py | 31 +++++ .../ovn/mech_driver/ovsdb/test_maintenance.py | 27 +++++ .../ovn/mech_driver/ovsdb/test_ovn_client.py | 134 ++++++++++++++++++++- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 78 ++++++------ .../plugins/ml2/drivers/test_type_tunnel.py | 92 ++++++++++++++ .../trunk/drivers/ovn/test_trunk_driver.py | 21 ++-- .../unit/plugins/ml2/drivers/base_type_tunnel.py | 16 +-- .../ml2/drivers/ovn/agent/test_neutron_agent.py | 131 ++++++++++++++++++-- .../mech_driver/ovsdb/extensions/test_placement.py | 56 +++++++++ .../ovn/mech_driver/ovsdb/extensions/test_qos.py | 12 +- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 4 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 16 ++- .../unit/plugins/ml2/drivers/test_type_vlan.py | 8 +- ...-delete-resource-provider-72c09b7df7238984.yaml | 7 ++ ...ovn-placement-init-config-6198f572e1dadcba.yaml | 8 ++ ...ovn-qos-fip-rule-priority-16ad3908790dfa7d.yaml | 8 ++ tox.ini | 2 +- zuul.d/tempest-singlenode.yaml | 4 + 52 files changed, 1076 insertions(+), 320 deletions(-)

1 0

networking-baremetal 6.6.0 (flamingo)
by no-reply＠openstack.org 13 Jun '25

13 Jun '25

We jubilantly announce the release of: networking-baremetal 6.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/networking-baremetal Download the package from: https://pypi.org/project/networking-baremetal Please report issues through: https://bugs.launchpad.net/networking-baremetal/+bugs For more details, please see below. 6.6.0 ^^^^^ Other Notes * Add support for using pre-commit to run checks more easily for contributors. Changes in networking-baremetal 6.5.0..6.6.0 -------------------------------------------- 4fab2a6 Remove explicit use of eventlet 4a33028 Use new syntax for neutron enablement 4e46b5a Drop redundant allowlist_externals 9ca3503 Fix failing genconfig target b66252c add pre-commit and adjust tox to utilize it b610783 fix sphinx-lint issues a95db99 fix awkward logic that the linter didn't like 64490b6 fix spelling mistakes 25928fc Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 ++ .pre-commit-config.yaml | 61 ++++++++++++++++++++++ .../configuration/ironic-neutron-agent/index.rst | 2 +- .../ironic-neutron-agent/sample-config.rst | 2 +- .../ml2/device_drivers/common_config.rst | 8 +-- .../ml2/device_drivers/netconf-openconfig.rst | 2 +- .../contributor/quickstart-netconf-openconfig.rst | 4 +- networking_baremetal/agent/ironic_neutron_agent.py | 7 +-- pyproject.toml | 30 +++++++++++ .../notes/pre-commit-a3de910e07fde16e.yaml | 4 ++ releasenotes/source/2025.1.rst | 6 +++ releasenotes/source/index.rst | 1 + requirements.txt | 15 +++--- setup.cfg | 1 + test-requirements.txt | 1 - tox.ini | 36 ++++--------- zuul.d/networking-baremetal-jobs.yaml | 20 +++---- zuul.d/project.yaml | 2 - 21 files changed, 145 insertions(+), 66 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d344cb8..f31da62 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,6 +6,6 @@ neutron-lib>=1.28.0 # Apache-2.0 -oslo.config>=5.2.0 # Apache-2.0 -oslo.i18n>=3.15.3 # Apache-2.0 -oslo.log>=3.36.0 # Apache-2.0 -oslo.utils>=3.40.2 # Apache-2.0 -oslo.messaging>=5.29.0 # Apache-2.0 -oslo.service>=1.40.2 # Apache-2.0 +oslo.config>=9.7.1 # Apache-2.0 +oslo.i18n>=6.5.1 # Apache-2.0 +oslo.log>=7.1.0 # Apache-2.0 +oslo.utils>=8.2.0 # Apache-2.0 +oslo.messaging>=16.1.0 # Apache-2.0 +oslo.service[threading]>=4.2.0 # Apache-2.0 @@ -14 +14 @@ openstacksdk>=0.31.2 # Apache-2.0 -tooz>=2.5.1 # Apache-2.0 +tooz>=6.3.0 # Apache-2.0 @@ -18 +17,0 @@ keystoneauth1>=3.14.0 # Apache-2.0 - diff --git a/test-requirements.txt b/test-requirements.txt index 95fbab7..114c44b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +6,0 @@ testscenarios>=0.4 # Apache-2.0/BSD -ncclient>=0.6.9 # Apache-2.0

1 0

ironic-python-agent-builder 6.1.0 (flamingo)
by no-reply＠openstack.org 13 Jun '25

13 Jun '25

We joyfully announce the release of: ironic-python-agent-builder 6.1.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/ironic-python-agent-builder Download the package from: https://tarballs.openstack.org/ironic-python-agent-builder/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent-builder/+bugs For more details, please see below. 6.1.0 ^^^^^ Other Notes * Due to the deprecation of Python 3.9 support in OpenStack and the evolution of python dependencies, CI test jobs for TinyIPA have been removed. Overall code to build the test images should expect to be removed from Ironic projects and tools as time progresses. Changes in ironic-python-agent-builder 6.0.0..6.1.0 --------------------------------------------------- daf8da3 Build CS9 DIB IPA ramdisk with python 3.12 016b28f Update pip version in dib source install 800ebcd Remove tinyipa CI testing 8b246c2 Don't install biosdevname in arm64/aarch64 arches a996402 Convert README.md to README.rst 9b22773 Create Podman DIB Element for container-based cleaning 334fd79 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- dib/element/ironic-python-agent-podman/README.rst | 191 +++++++++++++++++++++ .../ironic-python-agent-podman/element-deps | 2 + .../environment.d/10-setup.bash | 21 +++ .../package-installs.yaml | 2 + .../pre-finalise.d/10-ipa-podman-config | 10 ++ .../pre-finalise.d/20-ipa-config | 17 ++ .../pre-finalise.d/30-ipa-steps | 10 ++ dib/extra-hardware/package-installs.yaml | 2 +- .../60-ironic-python-agent-ramdisk-install | 13 +- dib/ironic-python-agent-ramdisk/pkg-map | 12 +- .../tinyipa-ci-testing-ends-8748513e6512cf8f.yaml | 7 + releasenotes/source/2025.1.rst | 6 + releasenotes/source/index.rst | 1 + zuul.d/ironic-python-agent-builder-jobs.yaml | 12 -- zuul.d/project.yaml | 6 - 15 files changed, 284 insertions(+), 28 deletions(-)

1 0

ironic-python-agent 11.0.0 (flamingo)
by no-reply＠openstack.org 13 Jun '25

13 Jun '25

We are psyched to announce the release of: ironic-python-agent 11.0.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent/+bugs For more details, please see below. 11.0.0 ^^^^^^ Security Issues *************** * The "agent_token_required" configuration option has been removed. This was a knob to help ease the upgrade process by enabling operators to express if their environment was requiring an agent token. This was key to help navigate possible upgrade cases, however that was for the migration *to* the Victoria release, and such an upgrade is outside of the version support matrix of Ironic. Bug Fixes ********* * Eventlet support in OpenStack is deprecated, and the oslo libraries used by Ironic Python Agent is deprecating support for eventlet in 2026.2. This change removes the use of eventlet directly and ensures none of our libraries are using eventlet-based code. * Fixes IPA collecting the effective MAC address of NICs instead of the pesistent MAC address. In case it fails to fetch the persistent address falls back to effective MAC address. See https://bugs.launchpad.net/ironic-python-agent/+bug/2103450 for details. Changes in ironic-python-agent 10.2.0..11.0.0 --------------------------------------------- 883e3cf0 Remove unused tinyipa CI job 2e35dfc7 Remove TinyIPA jobs 48422a53 netutils: Use ethtool ioctl to get permanent mac address c03021fe Remove eventlet from Ironic Python Agent 9b03ca7d Remove unnecessary +x mode f359c81c trivial: Fix missing extra space in logging a709e6fb Base standalone job on redfish standalone 7e6bc5cb Implement manual cleaning for ContainerHardwareManager c3e9266f Ironic Config Intergration for IPA 7efe3dfc Fix test_timeout on Python3.13 228033e9 Run UT of metricis_lib 5d3192e9 Remove eventlet greendns patching a3a2b835 Add ContainerHardwareManager aa65b8c1 Missing 'interface' in Clean Step ac85195b Update master for stable/2025.1 94fde4b3 Remove agent_token_required upgrade knob Diffstat (except docs and test files) ------------------------------------- examples/business-logic/example_business_logic.py | 1 + examples/vendor-device/example_device.py | 1 + ironic_python_agent/__init__.py | 19 -- ironic_python_agent/agent.py | 27 +- ironic_python_agent/api/app.py | 52 ++-- ironic_python_agent/config.py | 38 ++- ironic_python_agent/errors.py | 9 + ironic_python_agent/hardware.py | 7 + ironic_python_agent/hardware_managers/container.py | 152 ++++++++++++ ironic_python_agent/netutils.py | 43 +++- .../unit/hardware_managers/nvidia/__init__.py | 0 ironic_python_agent/utils.py | 2 +- .../notes/eventlet-removal-1bd8c6c2d5f8a765.yaml | 6 + .../notes/fix-mac-permaddr-0bc7d688eee4b814.yaml | 9 + ...move-agent-token-required-808e99b83b4456a1.yaml | 9 + releasenotes/source/2025.1.rst | 6 + releasenotes/source/index.rst | 1 + requirements.txt | 12 +- setup.cfg | 1 + zuul.d/ironic-python-agent-jobs.yaml | 11 +- zuul.d/project.yaml | 3 - 29 files changed, 623 insertions(+), 268 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a639a50d..81e2ee54 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,6 +2,5 @@ pbr>=6.0.0 # Apache-2.0 -eventlet>=0.18.2 # MIT -oslo.config>=5.2.0 # Apache-2.0 -oslo.concurrency>=3.26.0 # Apache-2.0 -oslo.log>=4.6.1 # Apache-2.0 -oslo.service>=1.24.0 # Apache-2.0 -oslo.utils>=8.0.0 # Apache-2.0 +oslo.config>=9.7.1 # Apache-2.0 +oslo.concurrency>=7.1.0 # Apache-2.0 +oslo.log>=7.1.0 # Apache-2.0 +oslo.service>=4.1.1 # Apache-2.0 +oslo.utils>=8.2.0 # Apache-2.0 @@ -17,0 +17 @@ zeroconf>=0.24.0 # LGPL +cheroot>=10.0.1 # BSD

1 0

ironic 30.0.0 (flamingo)
by no-reply＠openstack.org 13 Jun '25

13 Jun '25

We are stoked to announce the release of: ironic 30.0.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 30.0.0 ^^^^^^ New Features ************ * Adds NVIDIA A10/A40/L40S/L20 to known accelerators that can be reported when present in bare metals. * It is now possible to filter by conductor groups when listing ports and portgroups. For example, the following request returns only the ports for nodes in conductor groups "bear" and "metal": GET /v1/ports?conductor_groups=bear,metal * If *allow_image_access_via_auth_token* is set to *True*, Ironic allows access to Glance images if an auth_token is present in the request context. * Add a new configuration group [agent_containers] that allows users to dynamically configure container-based cleaning via Ironic conductor. * Adds a new configuration option "bootloader_by_arch", a dictionary value that maps architecture names to a Glance ID, http:// or file:// URL of an EFI system partition image containing EFI boot loader, to support architecture-specific images for virtual media boot in mixed-architecture clouds. * Adds a new boolean configuration option "[neutron]fail_on_port_binding_failure" and corresponding node "driver_info" setting "fail_on_binding_failure" to control whether deployment should fail or continue if Neutron port binding fails. With a default of "true", if your network is not configured properly, this will likely cause deployment failures. To maintain the previous behavior, explicitly set this option to False in your configuration. * A new "description" field has been added to the Port object. This field allows operators to provide human-readable descriptions to easily identify physical ports on bare metal hosts. * The "ipmitool-socat" console interface is now available for users of the "redfish" hardware type. This was done as an enablement action for operators to be able to leverage IPMI based Serial-over- Lan connections. This option requires the IPMI parameters to be configured on the baremetal node in addition to the "redfish" hardware type. * Adds a new option "[json_rpc]client_use_ssl". It can be set to True in situations where server-side TLS is handled by a reverse proxy, and thus "[json_rpc]use_ssl" is set to False. * Add support for a node in "service wait" state can be unprovisioned via the "delete" provision action. * The Ironic conductor can now access images that are shared with its project, in addition to those it owns. To use the feature, ensure the images are shared with the project associated with the conductor's credentials. Upgrade Notes ************* * CONF.allow_image_access_via_auth_token is set to *True* in this Ironic release. OpenStack integrated operators should ensure images for Ironic use are using image visibility "public" or "community" for the most reliable results. Deprecation Notes ***************** * While never supported outside of the Ironic project's CI testing, use of the TinyIPA ramdisk image is in the process of being discontinued. Any users who chose to utilize TinyIPA for any reasons should leverage ironic-python-agent-builder images. Security Issues *************** * Fixes OSSA-2025-001, where Ironic did not properly filter file:// paths when used as image sources. This would permit any file accessible by the conductor to be used as an image to attempt deployment. Ironic now unconditionally forbids paths that provide access to system configuration (/dev, /sys, /proc, /boot, /run, and /etc). Adds "CONF.conductor.file_url_allowed_paths", an allowlist configuration defaulting to "/var/lib/ironic", "/shared/html", "/opt/cache/files", "/vagrant", and "/templates", permits operators to further restrict where the conductor will fetch images for when provided a file:// URL. This default value was chosen based on known usage by projects downstream of Ironic, including Metal3, Bifrost, and OpenShift. These defaults may change to be more restrictive at a later date. Operators using file:// URLs are encouraged to explicitly set this value even if the current default is sufficient. Operators wishing to fully disable the ability to deploy with a file:// URL should set this configuration to "" (empty). This issue only poses a significant security risk when Ironic's automated cleaning process is disabled and the service is configured in such a way that permits direct deployment by an untrusted API user, such as standalone Ironic installations or environments granting ownership of nodes to projects. Bug Fixes ********* * In the redfish inspector, use condition to control whether the pxe_enabled field of a port is updated during inspection. [inspector]update_pxe_enabled is used to control this so it behaves like all other inspection interfaces. The default value for this configuration is True. * Fixes loop functionality to align more closely with the spec where, with *loop* present, *args* reference loop items using '{item}' placeholder to support direct array iteration; plus, separately handle list and dict loop item types. * Fixes an issue with the "neutron" "network_interface" driver where validate calls by "member" scoped API users, triggered through a port update or explicit node interface validation action would fail due to the user being unable to resolve provisioning or cleaning networks because the networks are in a different project. * Fixes interface binding logic as it relates to Neutron VIF attachments, such that an initial neutron port update occurs to ensure Neutron performs any necessary address assignments, which will now result in the port entering an "ACTIVE" state. The state may change later on as the port is updated as part of any workflow actions with supplied port configuration information to allow ML2 plugins to finalize any port binding actions, when appropriate. The base bug which identified this issue is bug 2106073 (https://bugs.launchpad.net/nova/+bug/2106073) which will require additional work to completely fix. Related, this logic *also* detaches any previously bound VIF which might have been supplied to Ironic. To have done so in advance of attachment is erroneous, yet understandable behavior. * Fixes an issue with agent startup where the workflow from the first agent heartbeat interaction could fail due to a transient networking issue leaving the Agent and Ironic in a state where the node cannot be deployed and continues to record errors upon each additional heartbeat operation. Logic to check the state of the agent has been adjusted to ignore retry operations which were recorded by the agent. More information on this issue can be found in bug 2110698 (https://bugs.launchpad.net/ironic/+bug/2110698) * Fixes an issue where a Nova, or other consumer attempting to send network data to Ironic can send grossly invalid network metadata which needs to be replaced. Ironic now identifies the condition, and regenerates the network metadata utilizing the attached VIF records. This results in some minor data differences, such as Nova's internal VIF tap naming which is redundant, and MTUs to be included in the Network data when they might not have been included previously. More information about this bug can be found in bug 2106073 (https://bugs.launchpad.net/ironic/+bug/2106073) This logic does *not* attempt to patch or modify configuration drive URLs which are supplied by tools like Bifrost, which is unaffected by this issue. This fix can be disabled by setting "[conductor]disable_configdrive_check" to "True". * Updates the patch validation logic to support special characters ("~" and "/") in field keys, provided they align with the escaping rules defined in RFC 6901 (JSON Pointer) as required for the *path* field specified in RFC 6902 (JSON Patch). * Fixes an error that node does not move to failed state when removing vif failed due to unexpected errors during tear down. Other Notes *********** * Ironic is in the process of removing testing and use of TinyIPA, which was originally developed as a lightweight low memory IPA image to simplify upstream testing and had no use outside of that context. Due to the OpenStack move away from Python3.9, TinyIPA cannot continue to be maintained, and as such all testing and use of images will be discontinued by the Ironic community. Changes in ironic 29.0.0..30.0.0 -------------------------------- ea8b3fcc3 Patch configdrive metadata 6d1195481 Add a new configuration option, ``bootloader_by_arch`` b476c1bc2 re-framing this as an explicit bugfix to backport 8f7d5d817 ci: remove the partition image upload 72c208f76 ci: Expand the multinode job -- remove tinyipa usage d33c981dc CI: remove legacy devstack baremetal admin and observer role usage b7efcda9e Update devstack-guide to use neutron- not q- 5a9efa070 Control port updates with update_pxe_enabled flag 9406b4465 Replace license classifier 65f1396d1 Add port/portgroup list conductor groups filter 95294caa6 [ci] Restore ovn-ipv6 job to voting 1cc44809a Remove warning filter for old oslo.db 8b3e8c87d Drop duplicate logic b744e2ed0 [CI] metal3 job back to voting 241d296b5 [CI] Fix libvirt network names in metal3 job logs collection 9211ab629 Replace eventlet usage in `pxe_filter` 9a0de989a Replace `eventlet.spawn_n` in Inspector Interface c7ccec9d8 Revert "Fix redfish driver URL parsing" 56d43ff56 ci: Remove code which has been long-dead 94af5f161 CI: Remove the multinode grenade job 6c0b015a0 CI: Reconfigure jobs to minimize tinyipa usage d3ff85fb8 doc: Make port binding failure configurably fatal e1835827e [CI] metal3 non voting for investigation 7358559e1 Inspection throws exception on CPU-less systems a43d615e1 trivial: add missing exception to agent code path docstrings 85456f788 Fix unhandled exception during node tear down 034312e6e CI: cleanup outdated rbac scope enforce jobs c52b1a874 Set an explicit neutron endpoint for grenade 5730b0405 api: Add schema for node firmware API 91c04035e api: Ensure parameter transform happens early 91b28bc43 Fix agent get_XXX_steps retries from being treated as not fresh agents 5731f4faf remove explicit eventlet usage around time.sleep d7b5c6eb4 doc: A possible improvement around multi-arch config options 5f7c7dcd0 Fix redfish driver URL parsing 80f97ae27 Auto-detect the RPC executor instead of hardcoding eventlet 5146e0a0f provide host_id to neutron early on 42be33b52 CI: Fix anaconda job post OSSA-2025-001 8363404ef Make metal3 job voting again 5fddef982 OSSA-2025-001: Disallow unsafe image file:// paths 58062d55d Revert "Add an index on ports.node_id" cd23ae477 Trivial: Fix gap in microversion sequence 3be31c13d Remove tags from README 538ac164e Make metal3 job non-voting temporarily e37c58220 Allow to unprovision instance from service wait states a5750a432 Add an index on ports.node_id cd5d0f8be docs: update openstackdocstheme version to 3.5.0 f597e9e4e Trivial: Fix spelling issue in configuration desc 39fc3d9fe Update some docs a39f11cec Add shared image support 915e50cee CI: Coverage for neutron with automated cleaning 876a9d402 Make port binding failure (configurably) fatal 5fccd55c9 Allow special characters in patch field keys a463ee864 Add several NV GPU types 52e090b60 Release notes title to "unreleased" for in-progress 854f059b8 Improve is_image_available 9cfb693be Fix ISO+GPT image handling 80ffd07df ci: restrict multinode job to multinode tests cbde488bc Update documentation to retain relevant terms b7cc916dd Remove compatibility for oslo.versionedobjects < 0.10.0 5b372dd9e A new 'description' field to the port object 4a02db984 Add image build method for verified OS. 3e0f6ed24 Rename ironic cmd module 55364fcb0 [devstack] Allow deploy environment with portgroups d2bd781a2 redfish: permit ipmitool-socat console for redfish usage 47e87d649 devstack: network simulator support for sonic d2fb4cbc4 Fix passing vtep fields to neutron 34bc26b55 api: Correct types for validation decorators b43d74a8f Do not silence the actual error in prepare_instance_boot ee7e1ac43 Ironic Container Config for IPA Integration 399a6c12d doc: Migrate Inspection Rules 282dd1eba Trivial: Fix Doc8 D000 errors by adjusting title 99ebf632c Fix mismatch in expected loop functionality b939c24fa docs: Clarify physical_network should be a name 3a705a59d Allow configuring RPC client TLS separately from server 86334496b De-duplicate two WSGIService's 95b999413 Fix confusing logs on tenant network configuration e7f677fdd Imported Translations from Zanata 5f911ad68 Follow up to unprovision service failed e2fa72652 network simulator support for Cisco Nexus 9k 803a96913 docs: detail network switch simulator support 7ef39b8cc Add network simulator support for force10 OS 10 fe35cb238 network testing: hooking in an external network simulator 92f30dc5a Create Support Resources Page fbb5d5a41 metal3: Use zuul user for logs, fix remote node ip, reduce timeout 3e453a376 Update master for stable/2025.1 1f5755ec1 Only try and do deep network config validate if admin 55c0a060c [Trivial] Fix typo of exception error message b31a109db devstack bindep - [platform:rpm] 2c472dfa8 Fix default IRONIC_DEFAULT_TRAITS setting e443ddcb9 Update DRAC RAID module import logic dc0dd2399 Enable atop on jobs 5c285047a ci: set a longer nova tempest build interval 861034679 Don't log PXE when your not doing PXE. f1cad5260 refactor: split glance handling into it's own method Diffstat (except docs and test files) ------------------------------------- README.rst | 4 - api-ref/source/baremetal-api-v1-get-vmedia.inc | 6 +- .../source/baremetal-api-v1-inspection-rules.inc | 260 +++++++ .../source/baremetal-api-v1-node-management.inc | 8 +- api-ref/source/baremetal-api-v1-nodes-ports.inc | 2 +- api-ref/source/baremetal-api-v1-ports.inc | 24 +- api-ref/source/index.rst | 1 + api-ref/source/parameters.yaml | 135 ++++ .../samples/inspection-rule-create-request.json | 34 + .../samples/inspection-rule-create-response.json | 21 + .../samples/inspection-rule-detail-response.json | 43 ++ .../samples/inspection-rule-list-response.json | 55 ++ .../samples/inspection-rule-show-response.json | 39 + .../samples/inspection-rule-update-request.json | 28 + .../samples/inspection-rule-update-response.json | 43 ++ api-ref/source/samples/port-create-request.json | 1 + api-ref/source/samples/port-create-response.json | 1 + .../source/samples/port-list-detail-response.json | 1 + api-ref/source/samples/port-update-response.json | 1 + devstack/files/bindep.txt | 4 + devstack/lib/ironic | 852 ++++++++++++++++++--- devstack/settings | 2 +- devstack/tools/ironic/scripts/configure-vm.py | 3 + devstack/tools/ironic/scripts/create-node.sh | 41 +- devstack/tools/ironic/templates/vm.xml | 8 + .../contributor/ironic-multitenant-networking.rst | 44 ++ ironic/api/controllers/v1/firmware.py | 16 +- ironic/api/controllers/v1/port.py | 68 +- ironic/api/controllers/v1/portgroup.py | 45 +- ironic/api/controllers/v1/ramdisk.py | 9 + ironic/api/controllers/v1/utils.py | 24 +- ironic/api/controllers/v1/versions.py | 9 +- ironic/api/schemas/v1/firmware.py | 69 ++ ironic/api/validation/__init__.py | 56 +- ironic/{cmd => command}/__init__.py | 0 ironic/{cmd => command}/api.py | 0 ironic/{cmd => command}/conductor.py | 0 ironic/{cmd => command}/dbsync.py | 0 ironic/{cmd => command}/novncproxy.py | 0 ironic/{cmd => command}/pxe_filter.py | 0 ironic/{cmd => command}/singleprocess.py | 2 +- ironic/{cmd => command}/status.py | 2 +- ironic/common/args.py | 17 +- ironic/common/console_factory.py | 2 - ironic/common/dhcp_factory.py | 2 - ironic/common/exception.py | 8 +- ironic/common/glance_service/service_utils.py | 75 +- ironic/common/image_service.py | 34 +- ironic/common/images.py | 35 +- ironic/common/inspection_rules/actions.py | 25 +- ironic/common/inspection_rules/base.py | 87 ++- ironic/common/inspection_rules/engine.py | 4 +- ironic/common/inspection_rules/operators.py | 66 +- ironic/common/json_rpc/client.py | 2 +- ironic/common/json_rpc/server.py | 4 +- ironic/common/json_rpc/wsgi.py | 77 -- ironic/common/neutron.py | 153 +++- ironic/common/release_mappings.py | 6 +- ironic/common/rpc.py | 1 - ironic/common/states.py | 5 +- ironic/common/wsgi_service.py | 69 +- ironic/conductor/base_manager.py | 4 +- ironic/conductor/configdrive_utils.py | 452 +++++++++++ ironic/conductor/deployments.py | 7 + ironic/conductor/manager.py | 27 +- ironic/conductor/periodics.py | 4 +- ironic/conductor/utils.py | 2 + ironic/conf/__init__.py | 2 + ironic/conf/agent_containers.py | 58 ++ ironic/conf/conductor.py | 40 +- ironic/conf/default.py | 6 + ironic/conf/json_rpc.py | 6 + ironic/conf/neutron.py | 4 + ironic/conf/types.py | 55 ++ ironic/db/api.py | 20 +- .../versions/1c14278d6e33_port_description.py | 31 + ironic/db/sqlalchemy/api.py | 48 +- ironic/db/sqlalchemy/models.py | 1 + ironic/drivers/base.py | 6 + ironic/drivers/modules/agent.py | 4 +- ironic/drivers/modules/agent_base.py | 16 +- ironic/drivers/modules/agent_client.py | 4 + ironic/drivers/modules/deploy_utils.py | 97 +-- ironic/drivers/modules/drac/raid.py | 5 +- ironic/drivers/modules/image_utils.py | 5 + .../inspector/hooks/known_accelerators.yaml | 18 +- ironic/drivers/modules/inspector/interface.py | 8 +- ironic/drivers/modules/network/common.py | 94 ++- ironic/drivers/modules/network/flat.py | 4 + ironic/drivers/modules/network/neutron.py | 11 +- ironic/drivers/modules/network/noop.py | 2 + ironic/drivers/modules/redfish/boot.py | 3 + ironic/drivers/modules/redfish/inspect.py | 8 +- ironic/drivers/redfish.py | 5 +- ironic/drivers/utils.py | 25 +- ironic/objects/indirection.py | 9 - ironic/objects/port.py | 118 +-- ironic/objects/portgroup.py | 19 +- ironic/pxe_filter/service.py | 24 +- .../unit/api/controllers/v1/test_portgroup.py | 43 ++ .../unit/drivers/modules/network/test_common.py | 67 +- .../unit/drivers/modules/network/test_flat.py | 1 + .../unit/drivers/modules/network/test_neutron.py | 37 +- .../unit/drivers/modules/network/test_noop.py | 1 + .../unit/drivers/modules/redfish/test_bios.py | 4 - .../unit/drivers/modules/redfish/test_boot.py | 6 - .../unit/drivers/modules/redfish/test_firmware.py | 2 - .../unit/drivers/modules/redfish/test_inspect.py | 36 + .../unit/drivers/modules/redfish/test_raid.py | 2 - playbooks/ci-workarounds/pre.yaml | 1 + playbooks/metal3-ci/post.yaml | 31 +- .../notes/add-nv-gpus-7fd4b9cacb029596.yaml | 5 + ...up-conductor-group-filter-2fe67c18f5a99265.yaml | 9 + ...age_access_via_auth_token-1b5869f1c0999bea.yaml | 14 + .../agent-containers-config-4388e266d5f0192e.yaml | 7 + ...ootloader-by-arch-support-b69eae5b30bc211f.yaml | 8 + ...y-on-port-binding-failure-e4c9749a84bd947f.yaml | 10 + ...-enabled-field-inspection-206f67c6638a0bdb.yaml | 7 + ...ality-in-inspection-rules-9bf61e8355297804.yaml | 7 + ...access-around-port-update-86118701989d8a61.yaml | 8 + .../notes/initial-port-bind-5a1ffb083f6631d4.yaml | 16 + ...sallow-unsafe-image-paths-670fdcfe3e4647d4.yaml | 26 + ...etries-with-agent-startup-aebfc36a775794c3.yaml | 11 + .../notes/port-description-4b68b22cac2e35a5.yaml | 6 + ...permit-ipmi-socat-console-9ede51ab0bc9f17d.yaml | 8 + .../remove-tinyipa-testing-c85bdb7e4d130e59.yaml | 15 + ...ace-metadata-when-invalid-c10a8c5add9151c8.yaml | 15 + .../notes/rpc-client-ssl-63b0d8ccaf88dae5.yaml | 6 + .../service-wait-unprovision-dacfa468824335b7.yaml | 5 + .../support-shared-images-8279f7ecd66b7218.yaml | 8 + ...characters-in-patch-field-e077fb994661362c.yaml | 7 + ...dled-remove-vif-exception-89fd332d0c1feea7.yaml | 5 + releasenotes/source/2025.1.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 11 +- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 159 ++++ releasenotes/source/unreleased.rst | 1 + setup.cfg | 16 +- zuul.d/ironic-jobs.yaml | 416 +++++----- zuul.d/metal3-jobs.yaml | 2 +- zuul.d/project.yaml | 2 +- 197 files changed, 6617 insertions(+), 1412 deletions(-)

1 0

openstack-ansible 31.0.0 (epoxy)
by no-reply＠openstack.org 12 Jun '25

12 Jun '25

We are glad to announce the release of: openstack-ansible 31.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 31.0.0 ^^^^^^ New Features ************ * Added support for defining custom error files using haproxy_errorfiles. These files can be distributed alongside haproxy_static_files_extra. * Added variables "lxc_centos_repo_keys" and "lxc_centos_repos", which allows to supply a list of repositories, which will be added to lxc_host. By default, role keeps installing EPEL repository with it's GPG key. Known Issues ************ * It was discovered that LXC 5.0.3 in Ubuntu 24.04 (Noble Numbat) contains packaging issue resulting in apparmor profiling conflicts. A temporary workaround has been applied in "lxc_hosts" role to apply a hotfix to the profile. However, it will be wiped with the next update of "liblxc-common" package. Please, check the bug #2110635 (https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/2110635) for more details on the issue. Upgrade Notes ************* * EL does not need to carry thm COPR repo to install LXC as LXC is now provided by EPEL. We remove repository during upgrade and clean dnf metadata. * Docker mode for zun-compute has been switched to "local" mode. This means, that supporting etcd cluster is no longer required for Zun to operate. If you want preserve old behavior, you will need to pin Docker and Containerd versions back along with adding "zun_docker_kv_storage: etcd" to "user_variables.yml" * For deployments with Zun, underlying software versions were upgraded to: * Docker 20.10.24 -> 27.5.1 * Containerd 1.6.20 -> 1.7.27 * Kata 3.1.0 -> 3.16.0 Deprecation Notes ***************** * Variables "zun_docker_kv_storage" and "zun_docker_kv_group" were deprecated and will be removed in the next release. * The "horizon_default_role_name" (default *member*) Keystone role existence is no longer ensured by the Horizon role. It is expected that the role defined by "horizon_default_role_name" already exists in Keystone and was bootstrapped via "keystone-bootstrap" command during "os_keystone" execution. You can leverage "opestack.osa.openstack_resources" playbook to create extra roles if you need/want to use non-default value for the "horizon_default_role_name" variable Bug Fixes ********* * "os_neutron" role was ignoring actual exit code of "aa-disable" command, when it was exiting abnormally. It could result in unobvious failures later in neutron agents. This was fixed and the role will fail if "aa-disable" fails to disable required apparmor profiles instead of suppressing the issue. * With change of policy regarding stored versions of MariaDB in "mirror.mariadb.org", currently pinned MariaDB versions were removed from the repo. With a switch to "archive.mariadb.org", this should resolve failing installation for MariaDB. Other Notes *********** * Mirror for MariaDB has been switched to "archive.mariadb.org" Changes in openstack-ansible 30.0.0.0rc1..31.0.0 ------------------------------------------------ 670a8c086 Bump SHAs for 2025.1 (Epoxy) RC2 5e335dc56 [doc] Update doc for the stable branch 6fa992ba7 Ensure Python is installed on EL10 650cd7c15 Remove LIBSYSTEMD_VERSION override for AIO 34a370b3b Add AIO bootstrap support for EL10 72c42fffc Add CentOS Stream 10 to molecule tests 4811f10db Do not require full git & autoconf on EL c99b3c455 Update TOX_CONSTRAINTS_FILE for stable/2025.1 3e57a2f64 Update .gitreview for stable/2025.1 02435a780 Bump SHAs to 2025.1 for RC1 64cfac58e Imported Translations from Zanata 3a230f902 docs: remove duplicated text 8c979ebfe docs: update troubleshooting page 0f74bf37a docs: update environment scaling page dc1248f7a Imported Translations from Zanata aaf2a1976 docs: fix broken links on Galera Cluster page 808e1c159 docs: fix small mistake with : 4700a1139 docs: fix for small mistake in text (with Open vSwitch) 1da8679bb docs: fix for small mistake in text (with OpenStack) db155c149 docs: fix for problem with duplicating the language switch def87c08a docs: replace broken url to "Getting Started with MariaDB Galera Cluster" 274b4b45f docs: remove Xen info 08799eca2 Ensure /etc permissions in CI 192501dfa doc: haproxy_base_service_overrides 3a0adddc5 docs: fix for issues when switching between pages using localization de7231c17 docs: update Project scope - remove duplicate phrase 6a6c40b19 docs: fix for mistakes with Ansible, OpenStack-Ansible and RabbitMQ 62e48c7b7 Imported Translations from Zanata 0e3f7eb17 docs: remove old note about bug for Ansible 4fb6ecf0b Fix links to Ansible documentation a3adf75fa docs: add information about project a43889b19 docs: fix for issues when switching between pages using localization 3b9948a1e Fix SHA test scenario 79580fc24 Imported Translations from Zanata 3ee85ff15 Bump ansible-core to 2.17.11 6e7312197 docs: fix for Keepalived and HAProxy in operations 83b3c38ea docs: fix for issues when switching between pages using localization 998404900 docs: added details about Manila 53ae03fa9 Imported Translations from Zanata 1b9809182 docs: remove unused page (about monitoring) 7c64fb888 docs: fix for small mistake with title 4be6b9891 docs: Compatibility Matrix - fix mistakes with layout d1d372457 docs: fix incorrect link to Ansible doc 4a936c2de docs: remove Linux Bridge c83bcb4a1 docs: update information about OSA 66df56fb5 docs: updated information in additional resources 387ebe666 Imported Translations from Zanata 732b42a85 docs: minor fixes with OpenStack-Ansible naming 4cf240421 docs: minor fix for configuring inventory d7f1562ea docs: update Introduction 553aeb2e7 docs: fix for incorrect Contributors guide url e69c616d7 Fix urls in README 20f721724 docs: move page with resources and about OSA in reference a98d68aad docs: fix for Certbot 3bcda4b64 docs: fix for Keepalived and full spelling VIP 6bdef3b85 docs: fix problems with text formatting and few small mistakes bc697263f Imported Translations from Zanata 9ec61ecec docs: minor fixes with OpenStack-Ansible df0c62630 docs: fix for Geneve and remove Linux Bridge 881e5b1dd docs: remove Linux Bridge d078d4c9c Imported Translations from Zanata 0bfe28470 Remove tags from README 3590e1ef6 Add CI jobs for Ceph on Ubuntu 24.04 58e15cdfe tox: Bump minimum version and remove basepython f0b296b2f Imported Translations from Zanata 57346fb3b docs: minor fixes with RabbitMQ and HAProxy 46855690c Imported Translations from Zanata b245d5d17 docs: small fix with writing VXLAN 5b077a948 Imported Translations from Zanata 3e96c062f docs: fix order of steps 780b4f7d3 docs: fix for problem with duplicating the language switch 3c7c9e6d1 docs: fix broken urls in Telemetry with Gnocchi, Ceph and Redis example 817a23c63 Move sync framework to integrated repo 9d65e168a docs: small fix for table 349cb75c3 docs: fix problems with contributors documentation 10e3cfbaf Imported Translations from Zanata d48e3406f docs: use https instead of http 8c31b0963 docs: minor fixes with Geneve and HAProxy 5cc1b1671 Fix role and collection dependency dd5ad305a [doc] Add multi-AZ deployment configuration sample e88e6a501 Imported Translations from Zanata 80da974c2 Maximize amount of ANSIBLE_FORKS for CI 96b0b4a7b Use FQCN for modules and fix YAML issues 756618d25 Optimize generation of required roles/collections 00220d1d8 docs: fix for small error bc517cfcc Move zuul preparation for role/collection bootstrap ce7b2102c docs: minor fixes with OpenStack-Ansible naming 29d2291e5 Update roles for 31.0.0.0b1 release 355faf7da docs: small mistake in Deployment hosts a51a5c73f docs: little fix for Zed release 9bdfd9981 [doc] Update 2023.1 maintenance state cd69d9db6 Define parameters to decompress magnum image before upload 3abf0eceb Freeze roles for 31.0.0.0b1 release 6752fbdd5 Remove lxb driver support c25265379 Stop skipping FQCN ansible-lint rule acbed8fcc Stop skipping yaml-related rules 20b86205b [doc] Update docs on how to use inventory scripts cd6123e2d Symlink console_scripts to /usr/local/bin/ f01fb5662 Install inventory-manage as a console_script 7319bc994 Move argument parsing for dynamic_inventory to generate 173442c99 Stop reffering to tests repo for ansible requirements c592412d1 Switch OpenStack-Ansible to track 2025.1 923799c67 Move remaining playbooks to collection ce4f47e18 Use first utility host as default host for openstack_resources dd418a06e Prevent inventory-manger failing with arbitrary groups 29ce380dd Bump SHAs for master ecd29b628 Ensure that cinderv3 service type is preserved on upgrade 443e946c6 [doc] Reffer to mariadb instead of mysql as client 963b822c4 docs: adjust rabbitmq quorum queue guidance for 2024.2 onwards 1c4075a3b reno: Update master for unmaintained/2023.1 772da0bf3 Pretty-print Ansible log messages as YAML 0546d19d3 Add jmespath to test-requirements e677320f9 Install setuptools for molecule venv caf2442fd Add additional commented RabbitMQ policy to manage segment sizes 82dbf8845 Return upgrade jobs back to voting 618614e63 Ensure repo_server proper username 287e3edce Add httpd role to a-r-r de3a26059 Add noble to molecule testing cf61c8032 Molecule to respect depends-on for test-requirements update 6ae85fc12 Pin ansible-compat up to 25.0.0 1590e39e1 Fix inventory adjustment for legacy container naming 734940d6c Update prod example to reflect OVN setup 1fd3d0f1c Bump SHAs for master 9a93ef431 Add RockyLinux to molecule testing 588d6e295 Add release note for retirement of qdrouterd and amqp1 messaging 0cf44e57a [doc] Document pretty endpoint namings 810bbec59 Add noop molecule job to the integrated repo 40866d036 Add centralized defenition for molecule jobs fcef934d3 Update test-requirements 9461f0822 Bump collection versions used 53aeec4bb Adjust upgrade jobs to test supported paths ad4e95f8d Remove deployment of qdrouterd 426c49da6 Start 2025.1 (Epoxy) development 2f69fac67 Add logs created when clusterapi create fails e320a1875 Update master for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 - .gitreview | 2 +- CONTRIBUTING.rst | 2 +- README.rst | 18 +- ansible-collection-requirements.yml | 14 +- ansible-role-requirements.yml | 336 +- deploy-guide/source/app-resources.rst | 24 - deploy-guide/source/app.rst | 9 - deploy-guide/source/conf.py | 9 +- deploy-guide/source/index.rst | 3 - deploy-guide/source/next-steps.rst | 13 +- deploy-guide/source/overview.rst | 5 +- .../admin/maintenance-tasks/ansible-modules.rst | 18 +- .../admin/maintenance-tasks/rabbitmq-maintain.rst | 26 +- .../admin/openstack-operations/cli-operations.rst | 2 +- .../admin/openstack-operations/managing-images.rst | 4 +- .../openstack-operations/managing-instances.rst | 4 - .../openstack-operations/managing-networks.rst | 2 +- .../admin/openstack-operations/network-service.rst | 2 +- .../admin/openstack-operations/verify-deploy.rst | 7 +- .../admin/upgrades/compatibility-matrix-legacy.rst | 2 - .../admin/upgrades/distribution-upgrades.rst | 48 +- .../upgrades/os-compatibility-matrix-legacy.html | 297 +- .../admin/upgrades/os-compatibility-matrix.html | 114 +- .../{contributor => contributors}/code-rules.rst | 0 .../{contributor => contributors}/contribute.rst | 0 .../{contributor => contributors}/contributing.rst | 21 +- .../core-reviewers.rst | 0 .../distributions.rst | 0 .../periodic-work.rst | 0 .../project-onboarding.rst | 31 +- .../role-maturity-matrix.html | 0 .../{contributor => contributors}/testing.rst | 2 +- .../locale/de/LC_MESSAGES/doc-contributor.po | 96 +- .../locale/en_GB/LC_MESSAGES/doc-contributor.po | 131 +- .../locale/id/LC_MESSAGES/doc-contributor.po | 118 +- .../source/reference/aboutosa.rst | 27 +- .../architecture/container-networking.rst | 40 +- .../reference/architecture/metal-networking.rst | 40 +- .../reference/configuration/extending-osa.rst | 20 +- .../reference/configuration/using-overrides.rst | 10 +- .../figures/networking-linuxbridge-cn.drawio.png | Bin 90260 -> 0 bytes .../figures/networking-linuxbridge-nn.drawio.png | Bin 120277 -> 0 bytes .../reference/inventory/configure-inventory.rst | 16 +- .../reference/inventory/generate-inventory.rst | 4 +- .../user/figures/az-balancing-diagram.drawio.png | Bin 0 -> 214396 bytes .../user/figures/az-layout-general.drawio.png | Bin 0 -> 83701 bytes etc/openstack_deploy/conf.d/qdrouterd.yml.aio | 3 - etc/openstack_deploy/env.d/aio_metal.yml.example | 3 - etc/openstack_deploy/env.d/az.yml.example | 36 + etc/openstack_deploy/env.d/ceph.yml.az.example | 172 + .../env.d/haproxy.yml.container.example | 14 + .../haproxy/first_backend.yml.az.example | 55 + .../group_vars/haproxy/keepalived.yml.az.example | 93 + .../group_vars/haproxy/lxc_network.yml.example | 8 + etc/openstack_deploy/openstack_user_config.yml.aio | 10 +- .../openstack_user_config.yml.aio.j2 | 32 - .../openstack_user_config.yml.az.example | 286 ++ .../openstack_user_config.yml.example | 6 +- .../openstack_user_config.yml.multibond.example | 6 +- .../openstack_user_config.yml.pod.example | 12 +- .../openstack_user_config.yml.prod-ceph.example | 6 +- .../openstack_user_config.yml.prod.example | 22 +- .../openstack_user_config.yml.singlebond.example | 6 +- .../openstack_user_config.yml.test.example | 6 +- etc/openstack_deploy/user_networks.yml.az.example | 208 + etc/openstack_deploy/user_variables.yml.az.example | 118 + inventory/dynamic_inventory.py | 52 +- inventory/env.d/neutron.yml | 4 - inventory/env.d/nova.yml | 1 - inventory/env.d/zun.yml | 1 - inventory/group_vars/adjutant_all/source_git.yml | 6 +- inventory/group_vars/all/all.yml | 7 +- inventory/group_vars/all/ceph.yml | 12 +- inventory/group_vars/all/infra.yml | 28 +- inventory/group_vars/all/oslo-messaging.yml | 10 +- inventory/group_vars/all/source_git.yml | 6 +- inventory/group_vars/aodh_all/source_git.yml | 6 +- inventory/group_vars/barbican_all/source_git.yml | 6 +- inventory/group_vars/blazar_all/source_git.yml | 10 +- inventory/group_vars/ceilometer_all/source_git.yml | 6 +- inventory/group_vars/cinder_all/source_git.yml | 6 +- inventory/group_vars/cloudkitty_all/source_git.yml | 6 +- inventory/group_vars/designate_all/source_git.yml | 6 +- inventory/group_vars/glance_all/source_git.yml | 6 +- inventory/group_vars/gnocchi_all/source_git.yml | 4 +- inventory/group_vars/heat_all/source_git.yml | 6 +- inventory/group_vars/horizon_all/source_git.yml | 50 +- inventory/group_vars/ironic_all/source_git.yml | 10 +- inventory/group_vars/keystone_all/source_git.yml | 6 +- inventory/group_vars/magnum_all/source_git.yml | 6 +- inventory/group_vars/manila_all/source_git.yml | 6 +- inventory/group_vars/masakari_all/source_git.yml | 10 +- inventory/group_vars/mistral_all/source_git.yml | 10 +- .../group_vars/murano_all/haproxy_service.yml | 32 - inventory/group_vars/neutron_all/source_git.yml | 40 +- inventory/group_vars/nova_all/source_git.yml | 12 +- inventory/group_vars/octavia_all/source_git.yml | 10 +- inventory/group_vars/placement_all/source_git.yml | 6 +- .../group_vars/sahara_all/haproxy_service.yml | 32 - .../group_vars/senlin_all/haproxy_service.yml | 31 - inventory/group_vars/skyline_all/source_git.yml | 8 +- inventory/group_vars/swift_all/source_git.yml | 6 +- inventory/group_vars/tacker_all/source_git.yml | 6 +- inventory/group_vars/trove_all/source_git.yml | 6 +- inventory/group_vars/utility_all/source_git.yml | 40 +- inventory/group_vars/zun_all/source_git.yml | 14 +- inventory/inventory.ini | 4 - molecule/default/converge.yml | 8 + molecule/default/molecule.yml | 28 + osa_toolkit/generate.py | 79 +- osa_toolkit/manage.py | 8 +- playbooks/defaults/healthchecks-vars.yml | 107 - playbooks/hook-dummy.yml | 3 - playbooks/infra-journal-remote.yml | 17 +- playbooks/listening-port-report.yml | 27 +- playbooks/openstack-resources.yml | 25 +- playbooks/qdrouterd-install.yml | 57 - playbooks/setup-everything.yml | 10 +- .../aa_disable_respect_code-f15967693989df79.yaml | 8 + .../notes/archive_mariadb-2c04a473b25a3bbb.yaml | 11 + ...lometer_polling_overrides-015156f1b67a8d75.yaml | 16 + .../notes/centos_copr-dca96bcade8cfb75.yaml | 6 + ...e_versioned_service_types-75bad8363b5cbff7.yaml | 41 + .../notes/docker_local_mode-a894d151f31f5f6e.yaml | 18 + ...haproxy_custom_errorfiles-500674edcaa6cbb6.yaml | 5 + .../haproxy_sysctl_location-e18310fd96597a6f.yaml | 6 + ..._default_role_name_create-48fb556caa075665.yaml | 12 + .../notes/httpd_common_role-a955fdfe516386ea.yaml | 11 + .../notes/httpd_role_switch-afe7209ffa0a402d.yaml | 6 + .../notes/httpd_role_switch-e43a18b6e82ba61c.yaml | 25 + ..._static_routes_defenition-0625db80bcf2e2ed.yaml | 15 + .../notes/lxb_removed-543fdff51aad6817.yaml | 20 + .../notes/lxc_apparmor_issue-e25bbc97e7f2ba62.yaml | 10 + .../lxc_centos_repo_list-34276eedd0a06560.yaml | 6 + .../network_overrides_only-f54364a799bb20a1.yaml | 9 + .../neutron_uwsgi_re_disable-45f28da6a4e29e54.yaml | 17 + .../osa_scripts_installed-7dedb7288427ef31.yaml | 5 + .../notes/retire-qdrouterd-02a0af00ee9e8b4f.yaml | 18 + .../routing_policy_rules-188c8ff5e8c5450f.yaml | 9 + .../skyline_backend_ssl-cd1db8c8fbf140f0.yaml | 6 + ...ntu_noble_ceph_limitation-dd31bcb4446ee873.yaml | 9 + releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2024.2.rst | 6 + releasenotes/source/conf.py | 6 +- releasenotes/source/index.rst | 1 + .../source/locale/de/LC_MESSAGES/releasenotes.po | 48 - .../locale/en_GB/LC_MESSAGES/releasenotes.po | 1013 ----- scripts/bootstrap-ansible.sh | 10 +- scripts/gate-check-commit.sh | 9 +- scripts/get-ansible-collection-requirements.yml | 106 +- scripts/get-ansible-role-requirements.yml | 99 +- scripts/log-collect.sh | 1 + scripts/openstack-ansible.rc | 2 + scripts/run-upgrade.sh | 4 +- .../upgrade-utilities/deploy-config-changes.yml | 10 + setup.cfg | 3 +- sync/doc/requirements.txt | 16 + sync/gen-projects-list.sh | 78 + test-requirements.txt | 18 +- .../bootstrap-host/tasks/check-requirements.yml | 47 +- .../tasks/detect_data_disk_device.yml | 4 +- .../bootstrap-host/tasks/gather_nodepool_vars.yml | 9 +- .../bootstrap-host/tasks/install_packages.yml | 5 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 40 +- .../bootstrap-host/tasks/prepare_data_disk.yml | 36 +- .../bootstrap-host/tasks/prepare_git_useragent.yml | 4 +- .../bootstrap-host/tasks/prepare_hostname.yml | 7 +- .../tasks/prepare_loopback_btrfs.yml | 6 +- .../tasks/prepare_loopback_cinder.yml | 18 +- .../tasks/prepare_loopback_manila.yml | 14 +- .../bootstrap-host/tasks/prepare_loopback_nova.yml | 6 +- .../bootstrap-host/tasks/prepare_loopback_swap.yml | 8 +- .../tasks/prepare_loopback_swift.yml | 6 +- .../bootstrap-host/tasks/prepare_loopback_zfs.yml | 8 +- .../bootstrap-host/tasks/prepare_networking.yml | 28 +- .../bootstrap-host/tasks/prepare_ssh_keys.yml | 26 +- .../roles/bootstrap-host/tasks/prepare_step_ca.yml | 55 +- .../templates/user_variables.aio.yml.j2 | 5 - .../templates/user_variables_magnum.yml.j2 | 4 +- tox.ini | 34 +- zuul.d/jobs.yaml | 101 +- .../env.d/qdrouterd.yml => zuul.d/nodesets.yaml | 28 +- zuul.d/playbooks/post.yml | 18 +- zuul.d/playbooks/pre-gate-cleanup.yml | 24 +- zuul.d/playbooks/pre-gate-scenario.yml | 18 +- zuul.d/playbooks/pre-osa-aio.yml | 19 +- zuul.d/playbooks/pre-osa-requirements.yml | 133 + zuul.d/playbooks/run.yml | 12 +- zuul.d/project-templates.yaml | 37 +- zuul.d/project.yaml | 1 + 265 files changed, 16994 insertions(+), 7467 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 88615ad25..6ab2ac637 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ -hacking>=3.2.0,<4.0 # Apache-2.0 +hacking>=3.2.0,<=7.0.0 # Apache-2.0 @@ -10,5 +10,2 @@ virtualenv>=14.0.6 # MIT -# TODO(noonedeadpunk) Upgrade linters versions and drop pycodestyle -# once we stop doing linters check for the integrated repo with -# openstack-ansible-tests/test-ansible-lint.sh -flake8==3.8.3 # MIT -ansible-lint==6.19.0 # MIT +flake8 # MIT +ansible-lint==24.12.2 # MIT @@ -16,0 +14,9 @@ Jinja2>=2.10 # BSD + +# Requirements for molecule jobs +ansible-core==2.17.11 # GPL-3.0 +ansible-compat<25.0.0 # MIT +docker>=7.0.0 # Apache-2.0 +jmespath>=1.0.0 # MIT +molecule==24.12.0 # MIT +molecule-plugins[docker]==23.6.0 # MIT +setuptools>75.0.0 # MIT

1 0

keystoneauth 5.11.1 (flamingo)
by no-reply＠openstack.org 12 Jun '25

12 Jun '25

We are pleased to announce the release of: keystoneauth 5.11.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/keystoneauth Download the package from: https://pypi.org/project/keystoneauth Please report issues through: https://bugs.launchpad.net/keystoneauth/+bugs For more details, please see below. Changes in keystoneauth 5.11.0..5.11.1 -------------------------------------- 8f34f41 typing: Correct type (redux) 54ae5cf pre-commit: Bump versions d104419 Add missing space in log statement Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 4 ++-- keystoneauth1/adapter.py | 2 +- keystoneauth1/session.py | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-)

1 0

python-octaviaclient 3.11.1 (flamingo)
by no-reply＠openstack.org 12 Jun '25

12 Jun '25

We are thrilled to announce the release of: python-octaviaclient 3.11.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- octaviaclient For more details, please see below. Changes in python-octaviaclient 3.11.0..3.11.1 ---------------------------------------------- fc05064 Fix displaying list columns with null values 853cf89 Replace UPPER_CONSTRAINTS_FILE Diffstat (except docs and test files) ------------------------------------- octaviaclient/osc/v2/utils.py | 8 ++++++-- tox.ini | 6 +++--- 2 files changed, 9 insertions(+), 5 deletions(-)

1 0

python-observabilityclient 1.0.0 (flamingo)
by no-reply＠openstack.org 05 Jun '25

05 Jun '25

We jubilantly announce the release of: python-observabilityclient 1.0.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-observabilityclient Download the package from: https://pypi.org/project/python-observabilityclient Please report issues through: https://bugs.launchpad.net/python-observabilityclient/+bugs For more details, please see below. Changes in python-observabilityclient 0.5.0..1.0.0 -------------------------------------------------- e81c54e Retrieve prometheus information from keystone 4e547f6 Exclude test code from coverage report 5007047 Deprecate disable-rbac option 34781c5 Use PROMETHEUS_CUSTOM_SCRAPE_TARGETS to pass sg_core scrape endpoint Diffstat (except docs and test files) ------------------------------------- .coveragerc | 7 ++ .zuul.yaml | 4 +- observabilityclient/utils/metric_utils.py | 30 +++++- observabilityclient/v1/base.py | 23 +++- observabilityclient/v1/client.py | 6 +- observabilityclient/v1/python_api.py | 6 +- 11 files changed, 175 insertions(+), 122 deletions(-)

1 0