August 2025 - Release-announce - lists.openstack.org

futurist 3.2.1
by no-reply＠openstack.org 29 Aug '25

29 Aug '25

We are satisfied to announce the release of: futurist 3.2.1 The source is available from: https://opendev.org/openstack/futurist Download the package from: https://pypi.org/project/futurist For more details, please see below. 3.2.1 ^^^^^ Bug Fixes * "shutdown(wait=True)" abandoned queued work. This fix ensures it blocks until all submitted tasks (running and queued) finishes, consistent with Python's concurrent.futures.ThreadPoolExecutor Changes in futurist 3.2.0..3.2.1 -------------------------------- 388ec84 Fix `shutdown(wait=True)` to wait for queued tasks Diffstat (except docs and test files) ------------------------------------- futurist/_futures.py | 5 +++ futurist/_thread.py | 2 ++ ...own-wait-for-queued-tasks-81a6b584f69ac62f.yaml | 6 ++++ 4 files changed, 54 insertions(+)

1 0

python-venusclient 2.5.0 (flamingo)
by no-reply＠openstack.org 29 Aug '25

29 Aug '25

We are overjoyed to announce the release of: python-venusclient 2.5.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-venusclient Download the package from: https://pypi.org/project/python-venusclient Please report issues through: https://bugs.launchpad.net/openstack-venus/+bugs For more details, please see below. Changes in python-venusclient 2.1.0..2.5.0 ------------------------------------------ 9208ade Add delete-anomaly-rule in venusclient CLI 956a08e Combine 4 get-type-xxx to get-search-params in venusclient CLI 73f507b Add 'get-anomaly-rule' to venusclient 5a2b1f5 Add parameter desc of analyse-log of venusclient CLI 38abcf7 Add add_anomaly_rule to venusclient 594f204 modify search logs params in venusclient 8d6b6f6 Add set-custom-config subcommand to venusclient 1ca4f68 Document Format Modification 5e791c3 Update master for stable/2023.2 243f335 Adding get-instance-callchain subcommand to venusclient Diffstat (except docs and test files) ------------------------------------- HACKING.rst | 3 +- README.rst | 4 +- releasenotes/source/2023.2.rst | 6 +++ releasenotes/source/index.rst | 1 + venusclient/v1/analyse.py | 17 +++--- venusclient/v1/analyse_shell.py | 34 +++++++++++- venusclient/v1/anomaly.py | 35 ++++++++++++ venusclient/v1/anomaly_shell.py | 51 ++++++++++++++++++ venusclient/v1/config.py | 16 ++++++ venusclient/v1/config_shell.py | 15 ++++++ venusclient/v1/search.py | 89 ++++++++++++------------------- venusclient/v1/search_shell.py | 115 +++++++++++++++++++++++++++++++--------- 12 files changed, 291 insertions(+), 95 deletions(-)

1 0

python-cyborgclient 2.6.0 (flamingo)
by no-reply＠openstack.org 29 Aug '25

29 Aug '25

We contentedly announce the release of: python-cyborgclient 2.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-cyborgclient Download the package from: https://pypi.org/project/python-cyborgclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cyborg For more details, please see below. Changes in python-cyborgclient 2.3.0..2.6.0 ------------------------------------------- 218cc6d Update python classifier in setup.cfg Diffstat (except docs and test files) ------------------------------------- setup.cfg | 2 ++ 1 file changed, 2 insertions(+)

1 0

oslo.config 9.4.1 (caracal)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We exuberantly announce the release of: oslo.config 9.4.1 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. Changes in oslo.config 9.4.0..9.4.1 ----------------------------------- 144d02a Fix concurrent access crash in _all_opt_infos() 042ece5 Update TOX_CONSTRAINTS_FILE for stable/2024.1 5fcbf5d Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_config/cfg.py | 6 +++--- tox.ini | 4 ++-- 3 files changed, 6 insertions(+), 5 deletions(-)

1 0

neutron 24.2.1 (caracal)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are pumped to announce the release of: neutron 24.2.1 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 24.2.1 ^^^^^^ Bug Fixes ********* * When ML2/OVN backend is used, usage of the metadata port IP address as a virtual IP address is blocked. That means that setting such IP address as allowed_address_pair for other port is not allowed and API will return 400 error in such case. For more information, see bug 2116249 (https://bugs.launchpad.net/neutron/+bug/2116249) Other Notes *********** * Neutron uses a new algorithm to compare the differences between security group rules in Neutron and ACLs in OVN. Before comparison, the data is sorted according to the security group rule ID, then the two ordered arrays are compared. This increases efficiency when larger sets of rules need to be synchronized. Changes in neutron 24.2.0..24.2.1 --------------------------------- 4086ec1c97 Re Reduce number of routers created in test_gateway_chassis_rebalance feea7e9f75 OVS firewall: only remove security group when truly unused cc4b1d3461 [SGL] Use admin context to retrieve log objs 50a6ae4cf9 [ML2/OVN] Validate allowed address pairs and distributed ports d5ed882bbd [FT] Isolate randomly failing address scope tests a35f555d60 Remove non voting arm64 jobs from stable branches 24c492cf39 Limit trunk ACTIVE state hack to OVN 6634ef5110 Consider logging options when using OVNdbsync d363b51503 Improve ACL comparison efficiency e7713e8742 Allow empty gateway IP in subnets from subnet pools 7b0a44c02b [FT] Improve ``test_assert_pings_during_br_phys_setup_not_lost*`` tests 4128a867c1 Fix nova notification on port unplug bcc380b39e Add provider network resources filter for "network" 1814fbb4c8 [OVN] OVN agent retrieval filter matching improvement 790b51985a Allow to delete singleton instances 420b5dc22f [FT] Match the correct event in ``test_subport_delete`` Diffstat (except docs and test files) ------------------------------------- .../agent/linux/openvswitch_firewall/firewall.py | 2 +- neutron/common/ovn/acl.py | 5 +- neutron/common/ovn/constants.py | 7 +- neutron/common/utils.py | 19 ++- neutron/db/allowedaddresspairs_db.py | 16 +++ neutron/db/db_base_plugin_v2.py | 35 +++++ neutron/ipam/requests.py | 36 ++++- neutron/ipam/subnet_alloc.py | 18 ++- .../plugins/ml2/drivers/ovn/agent/neutron_agent.py | 23 +++- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 55 +++++++- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 152 +++++++++++++++++---- neutron/plugins/ml2/managers.py | 16 --- neutron/plugins/ml2/plugin.py | 9 +- neutron/services/logapi/common/sg_callback.py | 5 +- neutron/services/logapi/drivers/ovn/driver.py | 74 ++++++++++ neutron/services/trunk/drivers/ovn/trunk_driver.py | 48 +++++++ neutron/services/trunk/plugin.py | 10 +- .../mech_driver/ovsdb/extensions/test_placement.py | 11 +- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 106 +++++++++++++- .../functional/services/ovn_l3/test_plugin.py | 2 +- .../trunk/drivers/ovn/test_trunk_driver.py | 15 ++ .../linux/openvswitch_firewall/test_firewall.py | 43 ++++++ .../ml2/drivers/ovn/agent/test_neutron_agent.py | 129 +++++++++++++++-- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 55 +++++++- .../drivers/ovn/mech_driver/test_mech_driver.py | 50 ++++++- .../services/logapi/drivers/ovn/test_driver.py | 45 ++++++ .../trunk/drivers/ovn/test_trunk_driver.py | 69 ++++++++++ ...-virtual-ip-by-ovn-driver-0d46fed7652fea7a.yaml | 8 ++ ...acl-comparison-efficiency-9fc1027c37626419.yaml | 8 ++ tox.ini | 2 +- zuul.d/job-templates.yaml | 11 -- 39 files changed, 1125 insertions(+), 193 deletions(-)

1 0

python-tackerclient 2.4.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We joyfully announce the release of: python-tackerclient 2.4.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-tackerclient Download the package from: https://pypi.org/project/python-tackerclient Please report issues through: https://bugs.launchpad.net/python-tackerclient/+bugs For more details, please see below. Changes in python-tackerclient 2.3.0..2.4.0 ------------------------------------------- 00d6e14 Replace Legacy Callable Formatter Functions c2bdc92 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tackerclient/osc/v1/nfvo/vim.py | 7 ++++--- 3 files changed, 11 insertions(+), 3 deletions(-)

1 0

oslo.cache 3.7.1 (caracal)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are jazzed to announce the release of: oslo.cache 3.7.1 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. 3.7.1 ^^^^^ Bug Fixes * If tls_enabled=true memcache_pool has been switched to use bmemcached. Changes in oslo.cache 3.7.0..3.7.1 ---------------------------------- 5d7c471 Use BMemcacheClientPool if tls_enabled=true 5f0f768 Update TOX_CONSTRAINTS_FILE for stable/2024.1 6f5190c Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_cache/backends/memcache_pool.py | 8 +++++--- oslo_cache/core.py | 4 ++++ ...emcache-for-memcache-pool-if-tls-enabled-733d98c265a3a9a1.yaml | 4 ++++ tox.ini | 4 ++-- 5 files changed, 16 insertions(+), 5 deletions(-)

1 0

python-zaqarclient 4.1.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We eagerly announce the release of: python-zaqarclient 4.1.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-zaqarclient Download the package from: https://pypi.org/project/python-zaqarclient Please report issues through: https://bugs.launchpad.net/python-zaqarclient/+bugs For more details, please see below. Changes in python-zaqarclient 4.0.0..4.1.0 ------------------------------------------ f037482 Remove left overs of v1(.1) API support Diffstat (except docs and test files) ------------------------------------- zaqarclient/queues/v2/core.py | 2 +- zaqarclient/queues/v2/iterator.py | 2 +- zaqarclient/queues/v2/message.py | 4 ++-- zaqarclient/transport/__init__.py | 10 +++++----- zaqarclient/transport/request.py | 2 +- 13 files changed, 30 insertions(+), 30 deletions(-)

1 0

python-octaviaclient 3.12.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We joyfully announce the release of: python-octaviaclient 3.12.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- octaviaclient For more details, please see below. 3.12.0 ^^^^^^ Upgrade Notes ************* * Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported. Bug Fixes ********* * Fixed a bug when using the "--wait" flag with the "l7rule create" command, it displayed an error message even when the command succeeded. Changes in python-octaviaclient 3.11.1..3.12.0 ---------------------------------------------- 9044650 tox: Drop envdir 05f0aac Fixed --wait flag with l7rule create ddba32a Remove Python 3.9 support 7f769f4 Drop explicit dependency on python-subunit Diffstat (except docs and test files) ------------------------------------- octaviaclient/osc/v2/l7rule.py | 2 +- releasenotes/notes/fix-l7rule-create-wait-1f087c17a82eedeb.yaml | 5 +++++ releasenotes/notes/remove-py39-18d9fc827db08abc.yaml | 5 +++++ requirements.txt | 4 ---- setup.cfg | 3 +-- test-requirements.txt | 5 ----- tox.ini | 4 +--- 9 files changed, 15 insertions(+), 19 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3a1783f..d37de3f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,4 +4,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - diff --git a/test-requirements.txt b/test-requirements.txt index 5d38791..95b1eef 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -13 +8,0 @@ pylint>=2.5.3 # GPLv2 -python-subunit>=1.0.0 # Apache-2.0/BSD

1 0

swift 2.35.1 (epoxy)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are pumped to announce the release of: swift 2.35.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/swift Download the package from: https://tarballs.openstack.org/swift/ Please report issues through: https://bugs.launchpad.net/swift/+bugs For more details, please see below. 2.35.1 ^^^^^^ New Features * S3 API * Added support for aws-chunked transfers. Recent AWS clients recently began defaulting to this mode. See Amazon's documentation. * Added support for verifying additional checksums during upload. All algorithms currently supported by AWS are supported: "CRC64NVME", "CRC32", "CRC32C", "SHA1", and "SHA256". See Amazon's documentation. Note that some algorithms require the availability of additional libraries: ISA-L or anycrc. Changes in swift 2.35.0..2.35.1 ------------------------------- 9ae4dd332 CHANGELOG for 2.35.1 af7082564 checksums: Ignore broken pyeclib installs ca70c3a3f checksum.py: fail gracefully if pyeclib is broken 972baf30d CI: Fix py36/py37 jobs 5b9ccdc03 CI: run func tests during rolling upgrade job 8b406ffa6 s3api: Add support for crc64nvme checksum calculation 9539a85bf s3api: Validate additional checksums on upload 02d5833cd utils: Add CRCHasher and crc32c implementation 68ef96d44 Add support of Sigv4-streaming f0d17af87 s3request: refactor error handling while reading input 3fafacbba s3request: refactor to introduce SigChecker classes 095779bf4 Update TOX_CONSTRAINTS_FILE for stable/2025.1 31d6e6a83 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 15 +- CHANGELOG | 16 + .../notes/release-2.35.1-58d9d52dfe46ee4d.yaml | 16 + swift/common/middleware/s3api/exception.py | 78 + swift/common/middleware/s3api/s3api.py | 3 +- swift/common/middleware/s3api/s3request.py | 1066 ++++++++-- swift/common/middleware/s3api/s3response.py | 13 +- .../s3api/schema/complete_multipart_upload.rng | 25 + swift/common/utils/__init__.py | 16 +- swift/common/utils/checksum.py | 266 +++ test/functional/s3api/test_object.py | 40 +- test/s3api/test_input_errors.py | 2095 +++++++++++++++++++- test/s3api/test_mpu.py | 2 +- test/s3api/test_object_checksums.py | 600 ++++++ test/unit/__init__.py | 24 +- .../common/middleware/s3api/test_multi_upload.py | 10 + test/unit/common/middleware/s3api/test_s3api.py | 43 +- .../unit/common/middleware/s3api/test_s3request.py | 1355 ++++++++++++- test/unit/common/test_utils.py | 22 + test/unit/common/utils/test_checksum.py | 417 ++++ tools/playbooks/multinode_setup/run.yaml | 1 - tox.ini | 4 +- 24 files changed, 5890 insertions(+), 245 deletions(-)

1 0

python-cloudkittyclient 5.4.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are thrilled to announce the release of: python-cloudkittyclient 5.4.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-cloudkittyclient Download the package from: https://pypi.org/project/python-cloudkittyclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- cloudkittyclient For more details, please see below. Changes in python-cloudkittyclient 5.3.1..5.4.0 ----------------------------------------------- 4fec2c3 Remove Python 3 variables from devstack config 4058c7f Use releases.openstack.org instead of opendev.org 5573390 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 -- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 +- 4 files changed, 8 insertions(+), 3 deletions(-)

1 0

watcher 12.1.0 (caracal)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are tickled pink to announce the release of: watcher 12.1.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/watcher Download the package from: https://tarballs.openstack.org/watcher/ Please report issues through: https://bugs.launchpad.net/watcher/+bugs For more details, please see below. 12.1.0 ^^^^^^ Security Issues *************** * Watchers no longer forges requests on behalf of a tenant when swapping volumes. Prior to this release watcher had 2 implementations of moving a volume, it could use cinders volume migrate api or its own internal implementation that directly calls nova volume attachment update api. The former is safe and the recommend way to move volumes between cinder storage backend the internal implementation was insecure, fragile due to a lack of error handling and capable of deleting user data. Insecure: the internal volume migration operation created a new keystone user with a weak name and password and added it to the tenants project with the admin role. It then used that user to forge request on behalf of the tenant with admin right to swap the volume. if the applier was restarted during the execution of this operation it would never be cleaned up. Fragile: the error handling was minimal, the swap volume api is async so watcher has to poll for completion, there was no support to resume that if interrupted of the time out was exceeded. Data-loss: while the internal polling logic returned success or failure watcher did not check the result, once the function returned it unconditionally deleted the source volume. For larger volumes this could result in irretrievable data loss. Finally if a volume was swapped using the internal workflow it put the nova instance in an out of sync state. If the VM was live migrated after the swap volume completed successfully prior to a hard reboot then the migration would fail or succeed and break tenant isolation. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * All code related to creating keystone user and granting roles has been removed. The internal swap volume implementation has been removed and replaced by cinders volume migrate api. Note as part of this change Watcher will no longer attempt volume migrations or retypes if the instance is in the *Verify Resize* task state. This resolves several issues related to volume migration in the zone migration and Storage capacity balance strategies. While efforts have been made to maintain backward compatibility these changes are required to address a security weakness in watcher's prior approach. see: https://bugs.launchpad.net/nova/+bug/2112187 for more context. Changes in watcher 12.0.0..12.1.0 --------------------------------- 6264f17c Configure watcher tempest's microversion in devstack 4fca7d24 use cinder migrate for swap volume 64ba589f Further database refactoring accc7a2a Replace deprecated LegacyEngineFacade 70d92a75 Skip real-data tests in non-real-data jobs f5ef5557 Update TOX_CONSTRAINTS_FILE for stable/2024.1 c604e00b Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + devstack/lib/watcher | 13 ++ devstack/plugin.sh | 3 + .../notes/bug-2112187-763bae283e0b736d.yaml | 47 +++++ tox.ini | 2 +- watcher/applier/actions/volume_migration.py | 98 +++-------- watcher/common/context.py | 3 + watcher/common/keystone_helper.py | 34 ---- watcher/common/utils.py | 8 +- watcher/db/sqlalchemy/alembic/env.py | 4 +- watcher/db/sqlalchemy/api.py | 195 ++++++++++----------- watcher/db/sqlalchemy/migration.py | 6 +- watcher/db/sqlalchemy/models.py | 8 - watcher/decision_engine/audit/continuous.py | 2 +- .../strategy/strategies/zone_migration.py | 55 +++--- .../decision_engine/audit/test_audit_handlers.py | 14 +- .../strategy/strategies/test_zone_migration.py | 5 +- 20 files changed, 270 insertions(+), 322 deletions(-)

1 0

watcher 14.1.0 (epoxy)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are gleeful to announce the release of: watcher 14.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/watcher Download the package from: https://tarballs.openstack.org/watcher/ Please report issues through: https://bugs.launchpad.net/watcher/+bugs For more details, please see below. 14.1.0 ^^^^^^ New Features ************ * A new module, "watcher.wsgi", has been added as a place to gather WSGI "application" objects. This is intended to ease deployment by providing a consistent location for these objects. For example, if using uWSGI then instead of: [uwsgi] wsgi-file = /bin/watcher-api-wsgi You can now use: [uwsgi] module = watcher.wsgi.api:application This also simplifies deployment with other WSGI servers that expect module paths such as gunicorn. Deprecation Notes ***************** * The watcher-api-wsgi console script is deprecated for removal in a future release. This artifact is generated using a setup-tools extension that is provide by PBR which is also deprecated. due to the changes in python packaging this custom extensions is planned to be removed form all OpenStack projects in a future PBR release in favor of module based wsgi applications entry points. Security Issues *************** * Watchers no longer forges requests on behalf of a tenant when swapping volumes. Prior to this release watcher had 2 implementations of moving a volume, it could use cinders volume migrate api or its own internal implementation that directly calls nova volume attachment update api. The former is safe and the recommend way to move volumes between cinder storage backend the internal implementation was insecure, fragile due to a lack of error handling and capable of deleting user data. Insecure: the internal volume migration operation created a new keystone user with a weak name and password and added it to the tenants project with the admin role. It then used that user to forge request on behalf of the tenant with admin right to swap the volume. if the applier was restarted during the execution of this operation it would never be cleaned up. Fragile: the error handling was minimal, the swap volume api is async so watcher has to poll for completion, there was no support to resume that if interrupted of the time out was exceeded. Data-loss: while the internal polling logic returned success or failure watcher did not check the result, once the function returned it unconditionally deleted the source volume. For larger volumes this could result in irretrievable data loss. Finally if a volume was swapped using the internal workflow it put the nova instance in an out of sync state. If the VM was live migrated after the swap volume completed successfully prior to a hard reboot then the migration would fail or succeed and break tenant isolation. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * When using prometheus datasource and more that one target has the same value for the "fqdn_label", the driver used the wrong instance label to query for host metrics. The "instance" label is no longer used in the queries but the "fqdn_label" which identifies all the metrics for a specific compute node. see Bug 2103451: https://bugs.launchpad.net/watcher/+bug/2103451 for more info. * Previously, when users attempted to create a new audit without providing a name and a goal or an audit template, the API returned error 500 and an incorrect error message was displayed. Now, Watcher displays a helpful message and returns HTTP error 400. For more info see: https://bugs.launchpad.net/watcher/+bug/2110947 * All code related to creating keystone user and granting roles has been removed. The internal swap volume implementation has been removed and replaced by cinders volume migrate api. Note as part of this change Watcher will no longer attempt volume migrations or retypes if the instance is in the *Verify Resize* task state. This resolves several issues related to volume migration in the zone migration and Storage capacity balance strategies. While efforts have been made to maintain backward compatibility these changes are required to address a security weakness in watcher's prior approach. see: https://bugs.launchpad.net/nova/+bug/2112187 for more context. * When running an audit with the *workload_stabilization* strategy with *instance_ram_usage* metric in a deployment with prometheus datasource, the host metric for the ram usage was wrongly reported with the incorrect unit which lead to incorrect standard deviation and action plans due to the application of the wrong scale factor in the algorithm. The host ram usage metric is now properly reported in KB when using a prometheus datasource and the strategy *workload_stabilization* calculates the standard deviation properly. For more details: https://launchpad.net/bugs/2113776 * Host maintenance strategy should migrate servers based on backup node if specified or rely on nova scheduler. It was enabling disabled hosts with watcher_disabled reason and migrating servers to those nodes. It can impact customer workload. Compute nodes were disabled for a reason. Host maintenance strategy is fixed now to support migrating servers only on backup node or rely on nova scheduler if no backup node is provided. * Previously, if an action failed in an action plan, the state of the action plan was reported as SUCCEEDED if the execution of the action has finished regardless of the outcome. Watcher will now reflect the actual state of all the actions in the plan after the execution has finished. If any action has status FAILED, it will set the state of the action plan as FAILED. This is the expected behavior according to Watcher documentation. For more info see: https://bugs.launchpad.net/watcher/+bug/2106407 * Bug #2110538 (https://bugs.launchpad.net/watcher/+bug/2110538) Corrected the HTTP error code returned when watcher users try to create audits with invalid parameters. The API now correctly returns a 400 Bad Request error. Changes in watcher 14.0.0..14.1.0 --------------------------------- ffec800f use cinder migrate for swap volume defd3953 Configure watcher tempest's microversion in devstack ba417b38 Fix audit creation with no name and no goal or audit_template 38622442 Set actionplan state to FAILED if any action has failed c7fde924 Add unit test to check action plan state when a nested action fails e5b5ff5d Return HTTP code 400 when creating an audit with wrong parameters fb85b27a Use KiB as unit for host_ram_usage when using prometheus datasource 53872f9a Aggregate by label when querying instance cpu usage in prometheus c0ebb8dd Drop code from Host maintenance strategy migrating instance to disabled hosts 1d7f1636 Added unit test to validate audit creation with no goal and no name c6ceaacf Add a unit test to check the error when creating an audit with wrong parameters f4bfb105 [host_maintenance] Pass des hostname in add_action solution 8a99d4c5 Add support for pyproject.toml and wsgi module paths ce9f0b4c Skip real-data tests in non-real-data jobs e385ece6 Aggregate by fqdn label instead instance in host cpu metrics c6505ad0 Query by fqdn_label instead of instance for host metrics 64f70b94 Drop sg_core prometheus related vars 68c9ce65 Update TOX_CONSTRAINTS_FILE for stable/2025.1 5fa09265 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 17 +-- devstack/lib/watcher | 96 ++++---------- devstack/plugin.sh | 3 + pyproject.toml | 3 + .../add-wsgi-module-support-597f479e31979270.yaml | 30 +++++ ...ries-with-multiple-target-0e65d20711d1abe2.yaml | 8 ++ releasenotes/notes/bug-2110947.yaml | 10 ++ .../notes/bug-2112187-763bae283e0b736d.yaml | 47 +++++++ .../notes/bug-2113776-4bd314fb46623fbc.yaml | 14 +++ ...trategy-on-disabled-hosts-24084a22d4c8f914.yaml | 10 ++ ...ion-plan-state-on-failure-69e498d902ada5c5.yaml | 13 ++ ...ror-400-on-bad-parameters-bb964e4f5cadc15c.yaml | 7 ++ setup.cfg | 2 +- tox.ini | 13 +- watcher/api/controllers/v1/audit.py | 19 +-- watcher/applier/action_plan/default.py | 22 +++- watcher/applier/actions/volume_migration.py | 98 ++++----------- watcher/common/keystone_helper.py | 34 ----- watcher/common/utils.py | 8 +- watcher/decision_engine/datasources/base.py | 2 +- watcher/decision_engine/datasources/prometheus.py | 135 ++++++++++---------- .../strategy/strategies/host_maintenance.py | 26 +--- .../strategy/strategies/zone_migration.py | 55 ++++---- .../action_plan/test_default_action_handler.py | 27 ++++ .../datasources/test_prometheus_helper.py | 140 +++++++++++++++------ .../strategy/strategies/test_host_maintenance.py | 13 +- .../strategies/test_workload_stabilization.py | 62 ++++++++- .../strategy/strategies/test_zone_migration.py | 5 +- watcher/wsgi/__init__.py | 0 watcher/wsgi/api.py | 18 +++ 34 files changed, 652 insertions(+), 422 deletions(-)

1 0

oslo.service 4.3.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We exuberantly announce the release of: oslo.service 4.3.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. 4.3.0 ^^^^^ Upgrade Notes * Internal backend modules have been renamed to **explicitly indicate that they are** private: * "oslo_service.backend.common" → "oslo_service.backend._common" * "oslo_service.backend.threading" → "oslo_service.backend._threading" * "oslo_service.backend.eventlet" → "oslo_service.backend._eventlet" These modules were never intended to be used directly. **This change makes it clearer** that they are internal to "oslo_service.backend". Projects should only interact with the backend system via the public interface provided in "oslo_service.backend.__init__"—**specifically through functions like** "get_component()", "get_backend()", and "init_backend()". **If your project was** directly importing any of these modules, please update the imports to use the public API instead. Changes in oslo.service 4.2.2..4.3.0 ------------------------------------ bfc7798 Fix signal lookup to only include singals. 89026fd Merge common files in one service file. caacdc8 Add comprehensive backend system documentation. Diffstat (except docs and test files) ------------------------------------- oslo_service/backend/__init__.py | 11 +- .../backend/{common => _common}/__init__.py | 0 .../backend/{common => _common}/constants.py | 0 oslo_service/backend/_common/service.py | 80 +++++++ .../backend/{eventlet => _eventlet}/__init__.py | 18 +- .../backend/{eventlet => _eventlet}/loopingcall.py | 0 .../backend/{eventlet => _eventlet}/service.py | 21 +- .../backend/{eventlet => _eventlet}/threadgroup.py | 2 +- .../backend/{threading => _threading}/__init__.py | 18 +- .../{threading => _threading}/loopingcall.py | 0 .../backend/{threading => _threading}/service.py | 12 +- .../{threading => _threading}/threadgroup.py | 2 +- oslo_service/backend/common/daemon_utils.py | 33 --- oslo_service/backend/common/signal_utils.py | 38 ---- oslo_service/backend/common/singleton.py | 26 --- oslo_service/backend/common/validation_utils.py | 23 -- ...end-submodules-to-private-63bfa674677c3854.yaml | 19 ++ 20 files changed, 383 insertions(+), 162 deletions(-)

1 0

watcher 13.1.0 (dalmatian)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are pumped to announce the release of: watcher 13.1.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/watcher Download the package from: https://tarballs.openstack.org/watcher/ Please report issues through: https://bugs.launchpad.net/watcher/+bugs For more details, please see below. 13.1.0 ^^^^^^ Security Issues *************** * Watchers no longer forges requests on behalf of a tenant when swapping volumes. Prior to this release watcher had 2 implementations of moving a volume, it could use cinders volume migrate api or its own internal implementation that directly calls nova volume attachment update api. The former is safe and the recommend way to move volumes between cinder storage backend the internal implementation was insecure, fragile due to a lack of error handling and capable of deleting user data. Insecure: the internal volume migration operation created a new keystone user with a weak name and password and added it to the tenants project with the admin role. It then used that user to forge request on behalf of the tenant with admin right to swap the volume. if the applier was restarted during the execution of this operation it would never be cleaned up. Fragile: the error handling was minimal, the swap volume api is async so watcher has to poll for completion, there was no support to resume that if interrupted of the time out was exceeded. Data-loss: while the internal polling logic returned success or failure watcher did not check the result, once the function returned it unconditionally deleted the source volume. For larger volumes this could result in irretrievable data loss. Finally if a volume was swapped using the internal workflow it put the nova instance in an out of sync state. If the VM was live migrated after the swap volume completed successfully prior to a hard reboot then the migration would fail or succeed and break tenant isolation. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * All code related to creating keystone user and granting roles has been removed. The internal swap volume implementation has been removed and replaced by cinders volume migrate api. Note as part of this change Watcher will no longer attempt volume migrations or retypes if the instance is in the *Verify Resize* task state. This resolves several issues related to volume migration in the zone migration and Storage capacity balance strategies. While efforts have been made to maintain backward compatibility these changes are required to address a security weakness in watcher's prior approach. see: https://bugs.launchpad.net/nova/+bug/2112187 for more context. Changes in watcher 13.0.0..13.1.0 --------------------------------- b5b1bc54 Configure watcher tempest's microversion in devstack c049a533 use cinder migrate for swap volume dbc06d15 Skip real-data tests in non-real-data jobs 54b3b584 Further database refactoring 8b0f1dbf Replace deprecated LegacyEngineFacade 238bb50f Run watcher-db-manage in grenade testing from venv db85f326 Update TOX_CONSTRAINTS_FILE for stable/2024.2 f6015fd6 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 + devstack/lib/watcher | 16 ++ devstack/plugin.sh | 3 + devstack/upgrade/upgrade.sh | 2 +- .../notes/bug-2112187-763bae283e0b736d.yaml | 47 +++++ tox.ini | 2 +- watcher/applier/actions/volume_migration.py | 98 +++-------- watcher/common/context.py | 3 + watcher/common/keystone_helper.py | 34 ---- watcher/common/utils.py | 8 +- watcher/db/sqlalchemy/alembic/env.py | 4 +- watcher/db/sqlalchemy/api.py | 195 ++++++++++----------- watcher/db/sqlalchemy/migration.py | 6 +- watcher/db/sqlalchemy/models.py | 8 - watcher/decision_engine/audit/continuous.py | 2 +- .../strategy/strategies/zone_migration.py | 55 +++--- .../decision_engine/audit/test_audit_handlers.py | 14 +- .../strategy/strategies/test_zone_migration.py | 5 +- 21 files changed, 274 insertions(+), 323 deletions(-)

1 0

python-glanceclient 4.10.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are glad to announce the release of: python-glanceclient 4.10.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-glanceclient Download the package from: https://pypi.org/project/python-glanceclient Please report issues through: https://bugs.launchpad.net/python-glanceclient/+bugs For more details, please see below. Changes in python-glanceclient 4.9.0..4.10.0 -------------------------------------------- d46a9bf Python 3.13: fix tests 90d15f6 Add support for passing image size to Glance API b78fdc3 Replace oslo_utils.encodeutils.exception_to_unicode Diffstat (except docs and test files) ------------------------------------- glanceclient/shell.py | 2 +- glanceclient/v2/images.py | 14 +- glanceclient/v2/metadefs.py | 18 +- glanceclient/v2/shell.py | 43 ++++- glanceclient/v2/tasks.py | 2 +- 9 files changed, 403 insertions(+), 40 deletions(-)

1 0

python-keystoneclient 5.7.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are happy to announce the release of: python-keystoneclient 5.7.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-keystoneclient Download the package from: https://pypi.org/project/python-keystoneclient Please report issues through: https://bugs.launchpad.net/python-keystoneclient/+bugs For more details, please see below. 5.7.0 ^^^^^ Upgrade Notes * Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported. Changes in python-keystoneclient 5.6.0..5.7.0 --------------------------------------------- be6c5069 Remove Python 3.9 support 18b5f422 Update master for stable/2025.1 851c8856 Update default envlist cf8ce5db reno: Update master for unmaintained/2023.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/notes/remove-py39-a294c2d7335b646e.yaml | 5 +++++ releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + setup.cfg | 3 +-- tox.ini | 2 +- 6 files changed, 15 insertions(+), 4 deletions(-)

1 0

python-aodhclient 3.9.1 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are excited to announce the release of: python-aodhclient 3.9.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-aodhclient Download the package from: https://pypi.org/project/python-aodhclient Please report issues through: https://bugs.launchpad.net/python-aodhclient/+bugs For more details, please see below. Changes in python-aodhclient 3.9.0..3.9.1 ----------------------------------------- 89f1235 Replace os-client-config 1db6158 Drop reference to ceilometerclient Diffstat (except docs and test files) ------------------------------------- test-requirements.txt | 2 +- 3 files changed, 6 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 213d060..662e7b7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +0,0 @@ -os-client-config>=1.28.0 # Apache-2.0 @@ -2,0 +2 @@ coverage>=3.6 # Apache-2.0 +openstacksdk>=0.10.0 # Apache-2.0

1 0

python-observabilityclient 1.2.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We are jazzed to announce the release of: python-observabilityclient 1.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-observabilityclient Download the package from: https://pypi.org/project/python-observabilityclient Please report issues through: https://bugs.launchpad.net/python-observabilityclient/+bugs For more details, please see below. Changes in python-observabilityclient 1.1.0..1.2.0 -------------------------------------------------- bcadbfe Fix PrometheusAPIClient set_client_cert Diffstat (except docs and test files) ------------------------------------- observabilityclient/prometheus_client.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-)

1 0

python-barbicanclient 7.2.0 (flamingo)
by no-reply＠openstack.org 28 Aug '25

28 Aug '25

We exuberantly announce the release of: python-barbicanclient 7.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-barbicanclient Download the package from: https://tarballs.openstack.org/python-barbicanclient/ Please report issues through: https://bugs.launchpad.net/python-barbicanclient/+bugs For more details, please see below. Changes in python-barbicanclient 7.1.0..7.2.0 --------------------------------------------- 5c53121 Cleanup py27 support Diffstat (except docs and test files) ------------------------------------- setup.py | 9 --------- 1 file changed, 9 deletions(-)

1 0

mistral 18.1.0 (caracal)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are tickled pink to announce the release of: mistral 18.1.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/mistral Download the package from: https://pypi.org/project/mistral Please report issues through: https://bugs.launchpad.net/mistral/+bugs For more details, please see below. 18.1.0 ^^^^^^ New Features * Added mutually exclusive config options "[action_providers]/allowlist" and "[action_providers]/denylist" that can be used to filter what action providers is loaded. * Added mutually exclusive config options "[legacy_action_provider]/allowlist" and "[legacy_action_provider]/denylist" that can be used to filter what actions is loaded by the legacy action provider. Changes in mistral 18.0.1..18.1.0 --------------------------------- 82c573e2 Support fnmatch glob for allow/deny lists 9a961a83 Add legacy action group to list_opts 985ed5db Add allowlist and denylist for action providers and actions 3c16d9d5 Update TOX_CONSTRAINTS_FILE for stable/2024.1 84354f15 Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + mistral/actions/legacy.py | 7 ++ mistral/config.py | 46 ++++++++++ mistral/engine/base.py | 6 +- mistral/services/actions.py | 9 ++ .../unit/actions/test_legacy_action_provider.py | 102 +++++++++++++++++++++ mistral/utils/__init__.py | 21 ----- mistral/utils/expr_utils.py | 37 ++++++++ mistral/utils/filter_utils.py | 26 ++++++ ...ctions-allowlist-denylist-57c033279e27772e.yaml | 10 ++ tox.ini | 6 +- 12 files changed, 334 insertions(+), 27 deletions(-)

1 0

mistral 20.1.0 (epoxy)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are thrilled to announce the release of: mistral 20.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/mistral Download the package from: https://pypi.org/project/mistral Please report issues through: https://bugs.launchpad.net/mistral/+bugs For more details, please see below. 20.1.0 ^^^^^^ New Features * Added mutually exclusive config options "[action_providers]/allowlist" and "[action_providers]/denylist" that can be used to filter what action providers is loaded. * Added mutually exclusive config options "[legacy_action_provider]/allowlist" and "[legacy_action_provider]/denylist" that can be used to filter what actions is loaded by the legacy action provider. Changes in mistral 20.0.0..20.1.0 --------------------------------- 32e37047 Support fnmatch glob for allow/deny lists 953e5b9a Add legacy action group to list_opts 9e5d9c6b Add allowlist and denylist for action providers and actions 40c63aa8 Update TOX_CONSTRAINTS_FILE for stable/2025.1 dc0b20a5 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + mistral/actions/legacy.py | 7 ++ mistral/config.py | 46 ++++++++++ mistral/engine/base.py | 6 +- mistral/services/actions.py | 9 ++ .../unit/actions/test_legacy_action_provider.py | 102 +++++++++++++++++++++ mistral/utils/__init__.py | 22 +---- mistral/utils/expr_utils.py | 37 ++++++++ mistral/utils/filter_utils.py | 26 ++++++ ...ctions-allowlist-denylist-57c033279e27772e.yaml | 10 ++ tox.ini | 2 +- 12 files changed, 333 insertions(+), 25 deletions(-)

1 0

os-ken 3.1.1 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We exuberantly announce the release of: os-ken 3.1.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/os-ken Download the package from: https://pypi.org/project/os-ken Please report issues through: https://storyboard.openstack.org/#!/project/openstack/os-ken For more details, please see below. Changes in os-ken 3.1.0..3.1.1 ------------------------------ bf639392 Fixing the BGP loop prevention Diffstat (except docs and test files) ------------------------------------- os_ken/services/protocols/bgp/peer.py | 9 +- 2 files changed, 106 insertions(+), 4 deletions(-)

1 0

os-vif 4.2.1 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are thrilled to announce the release of: os-vif 4.2.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/os-vif Download the package from: https://pypi.org/project/os-vif Please report issues through: https://bugs.launchpad.net/os-vif/+bugs For more details, please see below. Changes in os-vif 4.2.0..4.2.1 ------------------------------ b33415b Zuul: do not use USE_PYTHON3 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - 1 file changed, 1 deletion(-)

1 0

neutron-lib 3.21.1 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are excited to announce the release of: neutron-lib 3.21.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 3.21.0..3.21.1 ------------------------------------- 791d4b24 Remove url tags from README 63979eb6 tox: Remove basepython and ineffective ignore_basepython_conflict 9b6a1aaf Add the hacking checks to the entry points Diffstat (except docs and test files) ------------------------------------- README.rst | 18 ++++-------------- setup.cfg | 10 ++++++++++ tox.ini | 2 -- 3 files changed, 14 insertions(+), 16 deletions(-)

1 0

oslo.upgradecheck 2.6.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are pumped to announce the release of: oslo.upgradecheck 2.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.upgradecheck Download the package from: https://pypi.org/project/oslo.upgradecheck Please report issues through: https://bugs.launchpad.net/oslo.upgradecheck/+bugs For more details, please see below. Changes in oslo.upgradecheck 2.5.0..2.6.0 ----------------------------------------- f7dcd0c add pyproject.toml to support pip 23.1 a9a8b2c Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 3 files changed, 10 insertions(+)

1 0

ovsdbapp 2.13.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are chuffed to announce the release of: ovsdbapp 2.13.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 2.12.0..2.13.0 ---------------------------------- d518d76 Unpin isort cf5b6d0 Drop explicit dependency on python-subunit d84c82e nb: add support for chains in logical router policies Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/idlutils.py | 26 ++++ ovsdbapp/constants.py | 6 +- ovsdbapp/schema/ovn_northbound/commands.py | 42 +++++-- ovsdbapp/schema/ovn_northbound/impl_idl.py | 14 ++- .../schema/ovn_northbound/test_impl_idl.py | 135 +++++++++++++++++++++ test-requirements.txt | 2 - 6 files changed, 209 insertions(+), 16 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 4b6c133..15f94b7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -2,2 +1,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -isort==4.3.21 # MIT -python-subunit>=1.0.0 # Apache-2.0/BSD

1 0

oslo.log 7.2.1 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are delighted to announce the release of: oslo.log 7.2.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.log Download the package from: https://pypi.org/project/oslo.log Please report issues through: https://bugs.launchpad.net/oslo.log/+bugs For more details, please see below. Changes in oslo.log 7.2.0..7.2.1 -------------------------------- dda3eb6 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- oslo_log/locale/en_GB/LC_MESSAGES/oslo_log.po | 8 ++------ releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po | 10 +++++----- 2 files changed, 7 insertions(+), 11 deletions(-)

1 0

oslo.context 6.1.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We high-spiritedly announce the release of: oslo.context 6.1.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.context Download the package from: https://pypi.org/project/oslo.context Please report issues through: https://bugs.launchpad.net/oslo.context/+bugs For more details, please see below. Changes in oslo.context 6.0.0..6.1.0 ------------------------------------ f23bc41 Add build-system to pyproject.toml Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 4 ++++ 1 file changed, 4 insertions(+)

1 0

stevedore 5.5.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We enthusiastically announce the release of: stevedore 5.5.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/stevedore Download the package from: https://pypi.org/project/stevedore Please report issues through: https://bugs.launchpad.net/stevedore/+bugs For more details, please see below. Changes in stevedore 5.4.1..5.5.0 --------------------------------- d279323 add pyproject.toml to support pip 23.1 3731204 tox: Remove basepython 16ee2fd Update master for stable/2025.1 7c2740e Remove explicit pbr dependency Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + requirements.txt | 2 -- setup.py | 1 - tox.ini | 2 -- 6 files changed, 10 insertions(+), 5 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d988712..bbdc307 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,2 +3,0 @@ - -pbr>=2.0.0 # Apache-2.0

1 0

oslo.cache 3.12.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are chuffed to announce the release of: oslo.cache 3.12.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. Changes in oslo.cache 3.11.0..3.12.0 ------------------------------------ 1683ddb Imported Translations from Zanata 0ab5e0a Drop unused script for etcd tests 4727fe4 add pyproject.toml to support pip 23.1 ed02757 Fix missing ':' in IPv6 example Diffstat (except docs and test files) ------------------------------------- oslo_cache/_opts.py | 2 +- oslo_cache/locale/en_GB/LC_MESSAGES/oslo_cache.po | 7 +---- oslo_cache/locale/ru/LC_MESSAGES/oslo_cache.po | 10 ++++---- pyproject.toml | 3 +++ tools/setup-etcd-env.sh | 31 ----------------------- 5 files changed, 10 insertions(+), 43 deletions(-)

1 0

glance_store 5.2.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We contentedly announce the release of: glance_store 5.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 5.2.0 ^^^^^ New Features ************ * Support setting "s3_store_large_object_size" to "0" to force multipart upload when "image_size" is unknown. Bug Fixes ********* * Bug #2043740 (https://bugs.launchpad.net/glance- store/+bug/2043740): "s3_store_large_object_size" can be set to "0" to force multipart upload when creating an image in the S3 backend from a Cinder volume. Changes in glance_store 5.1.0..5.2.0 ------------------------------------ e63e0e4 Support multipart upload when image_size == 0 Diffstat (except docs and test files) ------------------------------------- glance_store/_drivers/s3.py | 5 ++++- .../s3-store-large-object-size-zero-a24229ae6955b799.yaml | 10 ++++++++++ 2 files changed, 14 insertions(+), 1 deletion(-)

1 0

kuryr 3.3.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We eagerly announce the release of: kuryr 3.3.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/kuryr Download the package from: https://tarballs.openstack.org/kuryr/ Please report issues through: https://bugs.launchpad.net/kuryr/+bugs For more details, please see below. Changes in kuryr 3.2.0..3.3.0 ----------------------------- 78acf16 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 2 files changed, 7 insertions(+)

1 0

oslo.policy 4.6.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are happy to announce the release of: oslo.policy 4.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. Changes in oslo.policy 4.5.1..4.6.0 ----------------------------------- fc28a7b add pyproject.toml to support pip 23.1 0ab8cb7 tox: Remove basepython 4d59bcd Skip cross jobs for .gitreview update 54e746a Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 -- 5 files changed, 11 insertions(+), 2 deletions(-)

1 0

oslo.concurrency 7.2.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are excited to announce the release of: oslo.concurrency 7.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.concurrency Download the package from: https://pypi.org/project/oslo.concurrency Please report issues through: https://bugs.launchpad.net/oslo.concurrency/+bugs For more details, please see below. Changes in oslo.concurrency 7.1.0..7.2.0 ---------------------------------------- 08987d8 add pyproject.toml to support pip 23.1 71698aa Update master for stable/2025.1 47874c4 Use releases.openstack.org instead of opendev.org Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 +- 4 files changed, 11 insertions(+), 1 deletion(-)

1 0

os-brick 6.13.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We joyfully announce the release of: os-brick 6.13.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 6.13.0 ^^^^^^ Upgrade Notes ************* * With the fix for Bug #2114879 (https://bugs.launchpad.net/cinder/+bug/2114879) users do not need to create the */opt/emc/scaleio/openstack/connector.conf* file on the hosts using "os-brick". Meanwhile, this version of "os-brick" is compatible with Dell PowerFlex cinder driver using the legacy password-in-host-file strategy. * Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported. Security Issues *************** * Dell PowerFlex driver: This release contains a fix for Bug #2114879 (https://bugs.launchpad.net/cinder/+bug/2114879) It removes the limitation of use with bare metal hosts mentioned in OSSN-0086 (https://wiki.openstack.org/wiki/OSSN/OSSN-0086) Bug Fixes ********* * Dell PowerFlex driver Bug #2114879 (https://bugs.launchpad.net/cinder/+bug/2114879) This release contains an updated connector for use with Dell PowerFlex backend. "os-brick" no longer requires access to PowerFlex backend secrets, and all that is handled by the cinder driver now. * RBD connector bug #2121082 (https://bugs.launchpad.net/cinder/+bug/2121082) Pass all monitor hosts in a single parameter. Prior to this fix, only the last monitor was considered which could cause connection failures if that one monitor was inaccessible. Changes in os-brick 6.12.0..6.13.0 ---------------------------------- 84cd5c6 Add missing release note 649cf90 Dell PowerFlex: Improve secret handling 0595163 Drop redundant description of default values 0a5a387 iSCSI: Add debug log for WWN and multipath 577a88f Remove Python 3.9 support 6f03ec8 Allow extend_volume for local devices e0460de Remove usage of the "VIRTUAL_ENV" environment variable 5832f18 Use oslo.utils to strip scope from an IPv6 address 7a015ee Switch back to built-in md5 method cc73a66 Fix outdated notes in requirement files a8277b0 RBD: Pass all monitor hosts in a single parameter Diffstat (except docs and test files) ------------------------------------- os_brick/initiator/connectors/base_rbd.py | 3 +- os_brick/initiator/connectors/iscsi.py | 2 + os_brick/initiator/connectors/lightos.py | 5 +- os_brick/initiator/connectors/local.py | 5 +- os_brick/initiator/connectors/scaleio.py | 74 ++++++++++++++++------ os_brick/opts.py | 5 +- os_brick/privileged/__init__.py | 10 +-- os_brick/remotefs/remotefs.py | 5 +- ...x-improve-secret-handling-c468d66b58a9626d.yaml | 23 +++++++ .../notes/bug-2121082-ae51de14b3c243fe.yaml | 8 +++ .../notes/remove-py39-1df77515becc0d51.yaml | 5 ++ requirements.txt | 8 +-- setup.cfg | 3 +- test-requirements.txt | 4 -- 20 files changed, 161 insertions(+), 67 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9a636e9..338eaab 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,3 +1,3 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. @@ -14 +14 @@ oslo.service>=2.8.0 # Apache-2.0 -oslo.utils>=6.0.0 # Apache-2.0 +oslo.utils>=7.3.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index f906c69..97e09bd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. -

1 0

oslo.rootwrap 7.7.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We joyfully announce the release of: oslo.rootwrap 7.7.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.rootwrap Download the package from: https://pypi.org/project/oslo.rootwrap Please report issues through: https://bugs.launchpad.net/oslo.rootwrap/+bugs For more details, please see below. Changes in oslo.rootwrap 7.6.0..7.7.0 ------------------------------------- 0cb36cd add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

taskflow 6.0.2 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are amped to announce the release of: taskflow 6.0.2 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/taskflow Download the package from: https://pypi.org/project/taskflow Please report issues through: https://bugs.launchpad.net/taskflow/+bugs For more details, please see below. Changes in taskflow 6.0.1..6.0.2 -------------------------------- 1a744a78 Bump etcd to 3.5.x c8899090 Allow overriding etcd version in tests f80b1bfb fix(conductor): add stop and wait methods to base Diffstat (except docs and test files) ------------------------------------- setup-etcd-env.sh | 2 +- taskflow/conductors/backends/impl_executor.py | 26 ++++++++------------------ taskflow/conductors/base.py | 24 ++++++++++++++++++++++++ tox.ini | 2 ++ 4 files changed, 35 insertions(+), 19 deletions(-)

1 0

oslo.serialization 5.8.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are amped to announce the release of: oslo.serialization 5.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.serialization Download the package from: https://pypi.org/project/oslo.serialization Please report issues through: https://bugs.launchpad.net/oslo.serialization/+bugs For more details, please see below. Changes in oslo.serialization 5.7.0..5.8.0 ------------------------------------------ 8ed3fca add pyproject.toml to support pip 23.1 2bd106c Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 3 files changed, 10 insertions(+)

1 0

oslo.i18n 6.6.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are overjoyed to announce the release of: oslo.i18n 6.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.i18n Download the package from: https://pypi.org/project/oslo.i18n Please report issues through: https://bugs.launchpad.net/oslo.i18n/+bugs For more details, please see below. Changes in oslo.i18n 6.5.1..6.6.0 --------------------------------- 303fcac add pyproject.toml to support pip 23.1 5fed9a3 Remove test code to be used in Python 2.7 44e0cb0 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 4 files changed, 12 insertions(+), 8 deletions(-)

1 0

oslo.reports 3.6.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are chuffed to announce the release of: oslo.reports 3.6.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.reports Download the package from: https://pypi.org/project/oslo.reports Please report issues through: https://bugs.launchpad.net/oslo.reports/+bugs For more details, please see below. Changes in oslo.reports 3.5.1..3.6.0 ------------------------------------ b8904f1 add pyproject.toml to support pip 23.1 172df1f tox: Remove basepython 43a3a27 Update master for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ releasenotes/source/2025.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tox.ini | 2 -- 4 files changed, 10 insertions(+), 2 deletions(-)

1 0

oslo.versionedobjects 3.8.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are pumped to announce the release of: oslo.versionedobjects 3.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.versionedobjects Download the package from: https://pypi.org/project/oslo.versionedobjects Please report issues through: https://bugs.launchpad.net/oslo.versionedobjects/+bugs For more details, please see below. Changes in oslo.versionedobjects 3.7.0..3.8.0 --------------------------------------------- 5c2d02e add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

oslo.utils 9.1.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are stoked to announce the release of: oslo.utils 9.1.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 9.0.0..9.1.0 ---------------------------------- c9dd062 add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

oslo.metrics 0.13.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are delighted to announce the release of: oslo.metrics 0.13.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.metrics Download the package from: https://pypi.org/project/oslo.metrics Please report issues through: https://bugs.launchpad.net/oslo.metrics/+bugs For more details, please see below. Changes in oslo.metrics 0.12.0..0.13.0 -------------------------------------- 276d34d add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

oslo.privsep 3.8.0 (flamingo)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We enthusiastically announce the release of: oslo.privsep 3.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. Changes in oslo.privsep 3.7.0..3.8.0 ------------------------------------ c343be9 Restore compatibility with non-linux operating systems 699b3ca Imported Translations from Zanata d4b560f add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- oslo_privsep/capabilities.py | 16 ++++++++++++---- oslo_privsep/daemon.py | 9 ++++++--- oslo_privsep/locale/en_GB/LC_MESSAGES/oslo_privsep.po | 10 +++++----- pyproject.toml | 3 +++ 6 files changed, 47 insertions(+), 12 deletions(-)

1 0

nova 29.3.0 (caracal)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are psyched to announce the release of: nova 29.3.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 29.3.0 ^^^^^^ Security Issues *************** * Nova has documented that the "update volume attachment" API PUT /servers/{server_id}/os-volume_attachments/{volume_id} should not be called directly for a very long time. "When updating volumeId, this API is typically meant to only be used as part of a larger orchestrated volume migration operation initiated in the block storage service via the os-retype or os- migrate_volume volume actions. Direct usage of this API to update volumeId is not recommended and may result in needing to hard reboot the server to update details within the guest such as block storage serial IDs. Furthermore, updating volumeId via this API is only implemented by certain compute drivers." As an admin only api, direct usage has always been limited to admins or service like "watcher". This longstanding recommendation is now enforced as a security hardening measure and restricted to only cinder. The prior warning alluded to the fact that directly using this api can result in a guest with a de-synced definition of the volume serial. Before this change it was possible for an admin to unknowingly put a VM in an inconsistent state such that a future live migration may fail or succeed and break tenant isolation. This could not happen when the api was called by cinder so Nova has restricted that api exclusively to that use-case. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * Bug #2095364: Fixed the List Server API and the List Server Detail API 500 Internal Server Error issue in v2.96 or later API microversion if one or more instance has no request spec object. One usecase was when cloud user tried to create instance which exceeded their quota, the request does not create instance request spec. Once the no request spec instance is created in cloud user project, the server list API and the list server details API return 500 Internal Server Error for the project until the cloud user deletes the no request spec object instance. After this fix, the v2.96 or later returns *null* at the *pinned_availability_zone* value if not specified. (https://launchpad.net/bugs/2095364) * "Nova" now strictly enforces that only "cinder" can call the "update volume attachment" aka "swap volume" api. This is part of addressing a security hardening gap identified as part of bug: https://bugs.launchpad.net/nova/+bug/2112187 Changes in nova 29.2.2..29.3.0 ------------------------------ 5a92bb594f restrict swap volume to cinder 64594ec320 Use dict object for request_specs_dict in the _list_view ea00e28452 Add ServersViewBuilderTestV296 unit test class Diffstat (except docs and test files) ------------------------------------- api-ref/source/os-volume-attachments.inc | 20 ++-- api-ref/source/parameters.yaml | 1 + nova/api/openstack/compute/views/servers.py | 25 +++-- nova/api/openstack/compute/volumes.py | 6 + .../functional/regressions/test_bug_1943431.py | 49 ++------- .../functional/regressions/test_bug_2112187.py | 67 ++++++++++++ .../unit/api/openstack/compute/test_servers.py | 121 +++++++++++++++++++++ .../unit/api/openstack/compute/test_volumes.py | 81 +++++++++----- .../notes/bug-2095364-ffbf67c0ae3f53b5.yaml | 15 +++ .../notes/bug-2112187-e1c1d40f090e421b.yaml | 36 ++++++ 13 files changed, 367 insertions(+), 98 deletions(-)

1 0

nova 30.1.0 (dalmatian)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We joyfully announce the release of: nova 30.1.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 30.1.0 ^^^^^^ Security Issues *************** * Nova has documented that the "update volume attachment" API PUT /servers/{server_id}/os-volume_attachments/{volume_id} should not be called directly for a very long time. "When updating volumeId, this API is typically meant to only be used as part of a larger orchestrated volume migration operation initiated in the block storage service via the os-retype or os- migrate_volume volume actions. Direct usage of this API to update volumeId is not recommended and may result in needing to hard reboot the server to update details within the guest such as block storage serial IDs. Furthermore, updating volumeId via this API is only implemented by certain compute drivers." As an admin only api, direct usage has always been limited to admins or service like "watcher". This longstanding recommendation is now enforced as a security hardening measure and restricted to only cinder. The prior warning alluded to the fact that directly using this api can result in a guest with a de-synced definition of the volume serial. Before this change it was possible for an admin to unknowingly put a VM in an inconsistent state such that a future live migration may fail or succeed and break tenant isolation. This could not happen when the api was called by cinder so Nova has restricted that api exclusively to that use-case. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * Fixes an issue seen when using bare metal (Ironic) instances where an instance could fail to delete. See Bug 2019977 for more details. (https://bugs.launchpad.net/nova/+bug/2019977) * During the Caracal cycle the libvirt driver was enhanced to support using device aliases to detach devices from a domain. I1dfe4ad3df81bc810835af9b09cfc6c06e9a5388 This introduced a regression for instance with vgpus. A prior bugfix https://bugs.launchpad.net/nova/+bug/1942345 addressed the symptom without correcting the underlying problem. A related bug for mdev devices was later reported. https://bugs.launchpad.net/nova/+bug/2074219 When this feature was added nova introduced a helper method to get device via the alias because the libvirt api does not provide one natively. That helper function assumed all devices would have an alias attribute. That assumption was not valid and had now been corrected. As a result detaching a volume from an instance with vgpus should now be possible and this class of bug should no longer happen. * Fixed an issue where the instance rebuild option failed for Ironic instances. The problem was caused by an incorrect parameter order in the "add_instance_info_to_node" function, which was introduced by commit *93b90d2b* <https://review.opendev.org/c/openstack/nova/+/923910>. For more details, see *bug 2092570* <https://bugs.launchpad.net/nova/+bug/2092570>. * Bug #2095364: Fixed the List Server API and the List Server Detail API 500 Internal Server Error issue in v2.96 or later API microversion if one or more instance has no request spec object. One usecase was when cloud user tried to create instance which exceeded their quota, the request does not create instance request spec. Once the no request spec instance is created in cloud user project, the server list API and the list server details API return 500 Internal Server Error for the project until the cloud user deletes the no request spec object instance. After this fix, the v2.96 or later returns *null* at the *pinned_availability_zone* value if not specified. (https://launchpad.net/bugs/2095364) * "Nova" now strictly enforces that only "cinder" can call the "update volume attachment" aka "swap volume" api. This is part of addressing a security hardening gap identified as part of bug: https://bugs.launchpad.net/nova/+bug/2112187 * Nova now allows to use a hyphen in the "[cinder]catalog_info" service-type field, so in particular the official "block-storage" type is now valid. Bug 2092194 (https://bugs.launchpad.net/nova/+bug/2092194) * Fix displaying the reason messages from the Ironic validate node operation that is called just before the instance is deployed on the bare metal node. The message from Ironic is now correctly logged. Fixes *bug 2100009 <https://bugs.launchpad.net/nova/+bug/2100009>_*. * When live migration fails during pre_live_migration on the destination, during rollback Cinder volumes will now be disconnected from the destination locally instead of remotely over RPC from the source. This should ensure that only connection_info for the destination will be used to disconnect volumes from the destination. See bug #1899835 (https://bugs.launchpad.net/nova/+bug/1899835) for more details. * With this change, operators can now resize the instance flavor swap to a smaller swap size, it can be expand and shrunk down to 0 using the same resize API. For more details see: bug 1552777 (https://bugs.launchpad.net/nova/+bug/1552777) * Bug #2091033: Fixed calls to libvirt "listDevices()" and "listAllDevices()" from potentially blocking all other greenthreads in "nova-compute". Under certain circumstances, it was possible for the "nova-compute" service to freeze with all other greenthreads blocked and unable to perform any other activities including logging. This issue has been fixed by wrapping the libvirt "listDevices()" and "listAllDevices()" calls with "eventlet.tpool.Proxy". (https://bugs.launchpad.net/nova/+bug/2091033) Changes in nova 30.0.0..30.1.0 ------------------------------ 6fcc9e2dd9 restrict swap volume to cinder 574c19ab8b Use dict object for request_specs_dict in the _list_view 706642bde3 Add ServersViewBuilderTestV296 unit test class 5b10871e21 Fix detaching devices by alias with mdevs 7e7652f433 Add repoducer test for bug 2074219 88e49dd65c [tool] Fix backport validator for non-SLURP 4cb106fc71 live migration: Avoid volume rollback mismatches e05052a3ff Amend functional reproducer for bug 1899835 89c9a9cab4 Libvirt: updates resource provider trait list 50e97805ae ironic: fix logging of validation errors 137097dc93 Allow hyphen in cinder catalog_info service-type 4a17d63535 Fix parameter order in add_instance_info_to_node a8de6737d2 Fix device type when booting from ISO image c4f4ae784f libvirt: Fix regression of listDevices() return type 173defb64c Reproducer for bug 2098892 c008126257 Update InstanceNUMACell version in more cases 7ff108b5fb Update InstanceNUMACell version after data migration 82b5bd6a7e Reproduce bug/2097359 1b28f649fe ironic: Fix ConflictException when deleting server 22981123dc libvirt: Wrap un-proxied listDevices() and listAllDevices() 3d3ada4bce Update Nova bdm with updated swap info 684586f3cb Revert "[libvirt] Live migration fails when config_drive_format=iso9660" 89c07d7353 Route shared storage RPC to evac dest at startup 19c7a6e392 Reproduce bug 2085975 in functional 2dce2e277b [doc]Add `socket` option to [pci]alias numa_policy 59d6cb3b49 Revert "Test live migration between hosts with differnet cpu_shared_sets" ea0f46f80d [doc]Fix the device_spec config doc about placement bef7768ee5 Update TOX_CONSTRAINTS_FILE for stable/2024.2 59a44217e6 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 23 -- api-ref/source/os-volume-attachments.inc | 20 +- api-ref/source/parameters.yaml | 1 + nova/api/openstack/compute/views/servers.py | 25 +- nova/api/openstack/compute/volumes.py | 6 + nova/compute/manager.py | 156 ++++++--- nova/conf/cinder.py | 2 +- nova/conf/pci.py | 7 +- nova/objects/instance_numa.py | 75 ++++- nova/test.py | 11 +- .../functional/regressions/test_bug_1899835.py | 125 +++++++- .../functional/regressions/test_bug_1943431.py | 49 +-- .../functional/regressions/test_bug_2062425.py | 22 +- .../functional/regressions/test_bug_2074219.py | 66 ++++ .../functional/regressions/test_bug_2085975.py | 131 ++++++++ .../functional/regressions/test_bug_2098892.py | 52 +++ .../functional/regressions/test_bug_2112187.py | 67 ++++ .../unit/api/openstack/compute/test_servers.py | 121 +++++++ .../unit/api/openstack/compute/test_volumes.py | 81 +++-- nova/virt/ironic/driver.py | 48 +-- nova/virt/libvirt/blockinfo.py | 32 +- nova/virt/libvirt/driver.py | 37 ++- nova/virt/libvirt/guest.py | 2 +- nova/virt/libvirt/host.py | 21 +- .../notes/bug-2019977-4afe7658394130b8.yaml | 7 + .../notes/bug-2074219-937d6404c1cbb04c.yaml | 17 + ...rameter-order-in-add_instance_info_to_node.yaml | 7 + .../notes/bug-2095364-ffbf67c0ae3f53b5.yaml | 15 + .../notes/bug-2112187-e1c1d40f090e421b.yaml | 36 +++ ...inder-catalog-info-hyphen-842f02febcfff041.yaml | 7 + ...nic-validate-node-message-6a8b1eedbddd06fd.yaml | 7 + ...e-live-migration-rollback-7de399d9b3979f79.yaml | 9 + .../notes/resize-swap-size-1e15e67c436f4b95.yaml | 10 + ...xied-libvirt-list-devices-7cd218c1a33535c9.yaml | 11 + tools/check-cherry-picks.sh | 7 +- tox.ini | 2 +- 52 files changed, 1790 insertions(+), 440 deletions(-)

1 0

nova 31.1.0 (epoxy)
by no-reply＠openstack.org 25 Aug '25

25 Aug '25

We are ecstatic to announce the release of: nova 31.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 31.1.0 ^^^^^^ Security Issues *************** * Nova has documented that the "update volume attachment" API PUT /servers/{server_id}/os-volume_attachments/{volume_id} should not be called directly for a very long time. "When updating volumeId, this API is typically meant to only be used as part of a larger orchestrated volume migration operation initiated in the block storage service via the os-retype or os- migrate_volume volume actions. Direct usage of this API to update volumeId is not recommended and may result in needing to hard reboot the server to update details within the guest such as block storage serial IDs. Furthermore, updating volumeId via this API is only implemented by certain compute drivers." As an admin only api, direct usage has always been limited to admins or service like "watcher". This longstanding recommendation is now enforced as a security hardening measure and restricted to only cinder. The prior warning alluded to the fact that directly using this api can result in a guest with a de-synced definition of the volume serial. Before this change it was possible for an admin to unknowingly put a VM in an inconsistent state such that a future live migration may fail or succeed and break tenant isolation. This could not happen when the api was called by cinder so Nova has restricted that api exclusively to that use-case. see: https://bugs.launchpad.net/nova/+bug/2112187 for details. Bug Fixes ********* * Fixed the issue bug 2098496 where nova assigned more PCI hostdevs to a VM than the flavor requested via the pci_passthrough:alias extra_spec. This only affected systems where both "[filter_scheduler]pci_in_placement" and "[pci]report_in_placement" were set to True. This only affected systems where the PCI alias requested type-VF devices and a single PF device on the compute node supported more than one VFs and "[pci]device_spec" configuration allowed nova to use multiple VFs from a single PF. * "Nova" now strictly enforces that only "cinder" can call the "update volume attachment" aka "swap volume" api. This is part of addressing a security hardening gap identified as part of bug: https://bugs.launchpad.net/nova/+bug/2112187 Changes in nova 31.0.1..31.1.0 ------------------------------ 76fe0294ff restrict swap volume to cinder 72cbe56a03 Ignore metadata tags in pci/stats _find_pool logic Diffstat (except docs and test files) ------------------------------------- api-ref/source/os-volume-attachments.inc | 20 ++-- nova/api/openstack/compute/volumes.py | 6 ++ nova/pci/stats.py | 47 +++++++++ .../functional/regressions/test_bug_1943431.py | 49 ++------- .../functional/regressions/test_bug_2098496.py | 64 ++---------- .../functional/regressions/test_bug_2112187.py | 67 ++++++++++++ .../unit/api/openstack/compute/test_volumes.py | 81 +++++++++------ ...i-hostdevs-than-requested-0139018213f1be96.yaml | 12 +++ .../notes/bug-2112187-e1c1d40f090e421b.yaml | 36 +++++++ 13 files changed, 394 insertions(+), 144 deletions(-)

1 0

governance 0.19.0
by no-reply＠openstack.org 22 Aug '25

22 Aug '25

We are tickled pink to announce the release of: governance 0.19.0 The source is available from: https://opendev.org/openstack/governance Download the package from: https://tarballs.openstack.org/governance/ For more details, please see below. Changes in governance 0.18.0..0.19.0 ------------------------------------ fd2c5832 Freezer - remove information about Disaster Recovery a9c79bf0 Add Extra ACs for governance repositories c3b92ba5 Define "affiliation" within the context of the TC 05524bea Add series names to runtimes doc 4947f4ed Retire networking-midonet 23dcf285 Fix project_stats_check script 981727b3 Make Eventlet removal deadlines more acceptable for operators 8ae1e276 Deprecate shade, os-client-config bb77d2e9 os-test-images never releases 4974083e Fix typo in tested runtimes for 2024.1 1df1f2f5 Remove mentions to CLA in licensing guide 3ab54b61 Add nova-contrib repository 686fc81f Fix outdated info on the tc-guide 40fb2ae8 [resolution] Replace CLA with DCO for all contributions 4a2644f0 Clarify actions when no elections are required dbdca7da [resolution] Relinquish "quantum" project on PyPI 19a94c49 fix prettytable deprecation warning 08b93a18 Updating Ghanshyam email/irc name ed0a9fff Fix gmaan's email address c8377a22 Add openstack/grian-ui 33b93b80 [resolution] Extend scope of VMT to cover all project teams 7beee792 Deprecate openstack-ansible-tests repo 2cf12be5 Retire openstack-helm-infra repo f46bfa92 Fix Dan Smith's email 02f510b4 Add aetos to telemetry project 41c38cb1 Fix nova PTL irc nick 5f7f98da Mark CI migration to Ubuntu Noble goal complete b940b224 Fix links to chair responsibilities in TC Guide 8c0688ff Add separate freezer-api deliverable 2729f9ad Add 2025.2 TC chair and vice-chair b6dca22c Appoint Hao Wang as PTL for OpenStack Zaqar 3e902282 Appoint Felipe Reyes as PTL for OpenStack Charms bc15bea5 Add suzhengwei as PTL for Masakari d2d1806d Add gouthamr's nomination for 2025.2 TC chair 772b572e Add TC chair nomination folder for 2025.2 2f6c4643 Appoint Mauricio Harley as PTL for Barbican 929a58dd Switch back Oslo to DPL model 7c887722 Add TC/PTL results from 2025.2 election da6c4631 Add Extra-ACs to the tech committee repos faf1c53d Deprecate ironic-lib 4364d4bd Switch Ironic to Distributed Leadership d7cbd2e0 Cleanup policy popup leads list Diffstat (except docs and test files) ------------------------------------- goals/completed/2025.1/index.rst | 9 + .../2025.1}/migrate-ci-jobs-to-ubuntu-noble.rst | 0 goals/selected/remove-eventlet.rst | 15 +- reference/charter.rst | 41 ++++- reference/legacy.yaml | 8 + reference/licensing.rst | 24 ++- reference/members.yaml | 28 +-- reference/popup-teams.rst | 5 +- reference/projects.yaml | 205 +++++++++++++-------- reference/runtimes/2023.1.rst | 6 +- reference/runtimes/2023.2.rst | 6 +- reference/runtimes/2024.1.rst | 8 +- reference/runtimes/2024.2.rst | 6 +- reference/runtimes/2025.1.rst | 6 +- reference/runtimes/2025.2.rst | 6 +- reference/tc-chair-candidates/2025.2/.placeholder | 0 .../2025.2/gouthampravi(a)gmail.com | 16 ++ reference/tc-chair-responsibilities.rst | 5 +- reference/tc-guide.rst | 31 ++-- reference/technical-committee-repos.yaml | 11 ++ ...0250317-extend-scope-VMT-cover-all-projects.rst | 67 +++++++ ...20250514-relinquish-quantum-project-on-pypi.rst | 36 ++++ ...lace-the-cla-with-dco-for-all-contributions.rst | 61 ++++++ tools/check_review_status.py | 2 +- tools/project_stats_check.py | 2 +- 25 files changed, 455 insertions(+), 149 deletions(-)

1 0

oslo.db 15.0.1 (caracal)
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We are excited to announce the release of: oslo.db 15.0.1 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 15.0.0..15.0.1 --------------------------------- 3a31478 exc_filters: Handle OperationalError for MariaDB/Galera 72604f8 Update TOX_CONSTRAINTS_FILE for stable/2024.1 abcd7eb Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_db/sqlalchemy/exc_filters.py | 2 ++ tox.ini | 4 ++-- 4 files changed, 11 insertions(+), 2 deletions(-)

1 0

oslo.log 5.5.2 (caracal)
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We are chuffed to announce the release of: oslo.log 5.5.2 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.log Download the package from: https://pypi.org/project/oslo.log Please report issues through: https://bugs.launchpad.net/oslo.log/+bugs For more details, please see below. Changes in oslo.log 5.5.1..5.5.2 -------------------------------- b30225a Use upper-constraints for all requirements when testing 11a9976 Apply eventlet workaround only once 1717f39 Fix broken reference to rate_limit_except_level Diffstat (except docs and test files) ------------------------------------- oslo_log/log.py | 9 +++++++-- tox.ini | 1 + 2 files changed, 8 insertions(+), 2 deletions(-)

1 0

osc-lib 4.2.0 (flamingo)
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We are pumped to announce the release of: osc-lib 4.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/osc-lib Download the package from: https://pypi.org/project/osc-lib Please report issues through: https://bugs.launchpad.net/python-openstackclient/+bugs For more details, please see below. Changes in osc-lib 4.1.0..4.2.0 ------------------------------- 33968f1 mypy: Enable strict mode 49bbd09 Remove duplicate Python version declarations 3f4e3b1 Migrate setup configuration to pyproject.toml Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 8 +++---- osc_lib/api/api.py | 10 ++++---- osc_lib/cli/client_config.py | 2 +- osc_lib/logs.py | 27 +++++++++++---------- pyproject.toml | 56 ++++++++++++++++++++++++++++++-------------- setup.cfg | 25 -------------------- 6 files changed, 65 insertions(+), 63 deletions(-)

1 0

pbr 7.0.1
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We are tickled pink to announce the release of: pbr 7.0.1 The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. Changes in pbr 7.0.0..7.0.1 --------------------------- a0d431c util: Deprecate description_file eb42fb3 util: Skip normalization of description if README opts present f198c2e util: Make handling of description_file clearer 181e489 util: Fix deprecation warnings Diffstat (except docs and test files) ------------------------------------- pbr/util.py | 95 +++++++++++++++++++++++++---------- 2 files changed, 201 insertions(+), 27 deletions(-)

1 0

keystonemiddleware 10.12.0 (flamingo)
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We are overjoyed to announce the release of: keystonemiddleware 10.12.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 10.12.0 ^^^^^^^ Upgrade Notes * Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported. Changes in keystonemiddleware 10.11.0..10.12.0 ---------------------------------------------- 40da827 Remove Python 3.9 support c7502b9 Revert "Switch from python-memcache to pymemcache" b32288c Revert "Strip inet(6) prefix" 3df36c5 add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- keystonemiddleware/auth_token/_cache.py | 23 +++++-------------- pyproject.toml | 3 +++ .../notes/remove-py39-ffac30d683a53099.yaml | 5 +++++ .../switch-to-pymemcache-fcdad3326f954ea1.yaml | 4 ---- setup.cfg | 3 +-- 6 files changed, 27 insertions(+), 37 deletions(-)

1 0

cliff 4.11.0 (flamingo)
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We high-spiritedly announce the release of: cliff 4.11.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/cliff Download the package from: https://pypi.org/project/cliff Please report issues through: https://bugs.launchpad.net/python-openstackclient/+bugs For more details, please see below. Changes in cliff 4.10.0..4.11.0 ------------------------------- 0008efa mypy: Enable strict mode 92aacf6 pre-commit: Bump versions 0428501 Migrate setup configuration to pyproject.toml Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 6 ++-- pyproject.toml | 88 ++++++++++++++++++++++++++++++++++++++++--------- setup.cfg | 56 ------------------------------- 3 files changed, 75 insertions(+), 75 deletions(-)

1 0

keystoneauth 5.12.0 (flamingo)
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We are thrilled to announce the release of: keystoneauth 5.12.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/keystoneauth Download the package from: https://pypi.org/project/keystoneauth Please report issues through: https://bugs.launchpad.net/keystoneauth/+bugs For more details, please see below. 5.12.0 ^^^^^^ Upgrade Notes ************* * Support for Python 3.9 has been dropped. The minimum version of Python now supported in 3.10. Bug Fixes ********* * OIDC Device Authorization Flow: allow acquiring either an OIDC id_token or an OAuth access_token as some IDPs provide both (RFC8628 does not specify if ID tokens may be acquired). * [bug 2105891 (https://bugs.launchpad.net/keystoneauth/+bug/2105891) This change prevents "client_id" from appearing more than once per request, fixing a previous 401 error with Okta. Credentials should either be in the auth header, POST body, or a "client_assertation" in the POST body. If the "client_secret" is set, it will be with "client_id" in the auth headers. If it is not, "client_id" will be added to the payload. Changes in keystoneauth 5.11.1..5.12.0 -------------------------------------- 18b42cc Add required fields for EntraID OidcDeviceAuth d24d025 Allow os-access-token-type for device auth 1986be2 Allow missing verification_uri_complete for OidcDeviceAuth ae1afe8 Migrate setup configuration to pyproject.toml 13ab55f Bump Python version used for linters to 3.10 5842dd5 Add .git-blame-ignore-revs file f2e4be0 Drop logic for requests<2.4.1 ec28703 Bump Python version used for linters to 3.9 1c1de17 Drop support for Python 3.9 dbf925a Remove client_id from OIDC payload Diffstat (except docs and test files) ------------------------------------- .git-blame-ignore-revs | 4 + keystoneauth1/_fair_semaphore.py | 9 +- keystoneauth1/_utils.py | 29 ++- keystoneauth1/access/access.py | 204 +++++++++----------- keystoneauth1/access/service_catalog.py | 100 +++++----- keystoneauth1/access/types.py | 2 +- keystoneauth1/adapter.py | 79 ++++---- keystoneauth1/discover.py | 214 +++++++++++---------- keystoneauth1/exceptions/base.py | 3 +- keystoneauth1/exceptions/discovery.py | 3 +- keystoneauth1/exceptions/http.py | 32 ++- keystoneauth1/extras/_saml2/_loading.py | 5 +- keystoneauth1/extras/_saml2/v3/adfs.py | 19 +- keystoneauth1/extras/_saml2/v3/base.py | 20 +- keystoneauth1/extras/_saml2/v3/saml2.py | 40 ++-- keystoneauth1/extras/kerberos/__init__.py | 46 ++--- keystoneauth1/extras/kerberos/_loading.py | 4 +- keystoneauth1/extras/oauth1/_loading.py | 3 +- keystoneauth1/extras/oauth1/v3.py | 20 +- keystoneauth1/http_basic.py | 10 +- keystoneauth1/identity/access.py | 3 +- keystoneauth1/identity/base.py | 86 ++++----- keystoneauth1/identity/generic/base.py | 45 +++-- keystoneauth1/identity/generic/password.py | 45 +++-- keystoneauth1/identity/generic/token.py | 31 ++- keystoneauth1/identity/v2.py | 38 ++-- .../identity/v3/application_credential.py | 56 +++--- keystoneauth1/identity/v3/base.py | 62 +++--- keystoneauth1/identity/v3/federation.py | 17 +- keystoneauth1/identity/v3/k2k.py | 17 +- keystoneauth1/identity/v3/multi_factor.py | 16 +- .../identity/v3/oauth2_client_credential.py | 22 +-- .../identity/v3/oauth2_mtls_client_credential.py | 19 +- keystoneauth1/identity/v3/oidc.py | 211 ++++++++++---------- keystoneauth1/identity/v3/password.py | 44 ++--- keystoneauth1/identity/v3/receipt.py | 4 +- keystoneauth1/identity/v3/token.py | 20 +- keystoneauth1/identity/v3/tokenless_auth.py | 18 +- keystoneauth1/identity/v3/totp.py | 44 ++--- keystoneauth1/loading/_plugins/admin_token.py | 3 +- keystoneauth1/loading/_plugins/http_basic.py | 3 +- keystoneauth1/loading/_plugins/identity/generic.py | 5 +- keystoneauth1/loading/_plugins/identity/v2.py | 5 +- keystoneauth1/loading/_plugins/identity/v3.py | 29 ++- keystoneauth1/loading/_plugins/noauth.py | 3 +- keystoneauth1/loading/adapter.py | 16 +- keystoneauth1/loading/base.py | 4 +- keystoneauth1/loading/cli.py | 4 +- keystoneauth1/loading/conf.py | 4 +- keystoneauth1/loading/opts.py | 14 +- keystoneauth1/loading/session.py | 28 ++- keystoneauth1/noauth.py | 2 +- keystoneauth1/plugin.py | 46 +++-- keystoneauth1/service_token.py | 16 +- keystoneauth1/session.py | 159 +++++++-------- keystoneauth1/token_endpoint.py | 10 +- pyproject.toml | 88 ++++++++- ...ss-token-type-device-auth-536c6d2b708e9b1f.yaml | 6 + .../notes/bug-2105891-92c33eb445d55c72.yaml | 10 + .../notes/drop-python-39-cb01f8d8ce6dc278.yaml | 5 + setup.cfg | 70 ------- 63 files changed, 1074 insertions(+), 1119 deletions(-)

1 0

python-openstackclient 8.2.0 (flamingo)
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We are excited to announce the release of: python-openstackclient 8.2.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://bugs.launchpad.net/python-openstackclient/+bugs For more details, please see below. 8.2.0 ^^^^^ New Features ************ * Add "--chunk-size" option to "image save" command to control the size of bytes to read at one time. * Adds operation which deletes all metadef object inside a namespace. * The "image property delete" command will now delete all properties in the provided namespace if no property is provided. * The "os_hash_algo" and "os_hash_value image" attributes are now shown in the "image list --long" output. * Add "--property" option to "volume list" command to filter volumes. * Add "--project" and --project-domain`` options to the following network commands: * "openstack security group rule list" [Bug 1648317 (https://bugs.launchpad.net/bugs/1648317) * Added "--device" and "--device-owner" parameter to the "port unset" command. Deprecation Notes ***************** * The "--id auto" alias for the "flavor create" command is deprecated for removal. Omit the option entirely to ensure the server creates the ID for you. Bug Fixes ********* * The 'volume service set' command could not work due to a bad API call. [Bug 2116969 (https://bugs.launchpad.net/bugs/2116969) Changes in python-openstackclient 8.1.0..8.2.0 ---------------------------------------------- a312e9cd Adopt sdk_fakes for compute.test_flavor 5feaa952 compute: Fix flavor create --id auto 2177f07d Adds CLI support for ``glance md-namespace-properties-delete`` a7369849 image: Add hashing-related fields 13fe8019 Support image save with chunk-size option 81db99b3 doc: Indicate md-namespace-import as WONTFIX a99ae364 tests: Avoid unnecessary mocks e8a7db58 tests: Simplify mocking in server tests 9f55b253 Adds CLI support for ``glance md-namespace-objects-delete`` e3714848 Remap custom named Image attributes when unsetting 46b25c7c network: Add '--project' to SG rule list command c7d465a2 volume: Migrate 'volume show' to SDK 5e5f12ba volume: Migrate 'volume migrate' to SDK 504cbd24 volume: Migrate 'volume create' to SDK 51ecb5f9 volume: fix volume service set call 1b2dfeac Add is_shared to security_groups 572eeb6d Add metadata as a filter condition when listing volumes b6af7883 Replace deprecated assertItemsEqual 4ea3deda Remove duplicate Python version declarations 1b4fe6fa Migrate setup configuration to pyproject.toml ea85c7aa Replace deprecated datetime.utcfromtimestamp edb17881 Remove leading empty line from server create with --wait 9ad18c49 Fix openstack image import --method web-download --uri 'invalid value' 2e301857 docs: Add note about scoping on tokens 5f602475 Security-groups: Temporarily ignore is_shared 2f03c3ea identity: Remove unnecessary helper 1c70e264 bug fix volume group show command. f1cd38aa identity: Normalise output of application credentials commands f1bd4178 Add device ID and device owner to port unset Diffstat (except docs and test files) ------------------------------------- openstackclient/api/compute_v2.py | 4 +- openstackclient/api/volume_v2.py | 60 ++ openstackclient/api/volume_v3.py | 60 ++ openstackclient/compute/v2/flavor.py | 15 +- openstackclient/compute/v2/server.py | 4 +- openstackclient/identity/common.py | 21 +- .../identity/v3/application_credential.py | 171 +++-- openstackclient/identity/v3/domain.py | 11 +- openstackclient/identity/v3/project.py | 45 +- openstackclient/identity/v3/role.py | 9 +- openstackclient/image/v1/image.py | 17 +- openstackclient/image/v2/cache.py | 16 +- openstackclient/image/v2/image.py | 49 +- openstackclient/image/v2/metadef_objects.py | 10 +- openstackclient/image/v2/metadef_properties.py | 11 +- openstackclient/network/v2/port.py | 16 + openstackclient/network/v2/security_group.py | 47 +- openstackclient/network/v2/security_group_rule.py | 17 + .../functional/identity/v3/test_access_rule.py | 2 +- .../identity/v3/test_application_credential.py | 14 +- .../identity/v3/test_application_credential.py | 88 ++- .../unit/network/v2/test_security_group_network.py | 6 + .../network/v2/test_security_group_rule_network.py | 49 ++ openstackclient/volume/v2/service.py | 2 +- openstackclient/volume/v2/volume.py | 130 ++-- openstackclient/volume/v3/service.py | 2 +- openstackclient/volume/v3/volume.py | 177 +++-- openstackclient/volume/v3/volume_group.py | 2 +- pyproject.toml | 721 ++++++++++++++++- ...-chunk-size-to-image-save-37871f9e62693264.yaml | 5 + ...f-namespace-object-delete-b6b2de24fc66e602.yaml | 4 + ...e-metadef-property-delete-1e1bb8410130d901.yaml | 5 + .../notes/add-image-options-dcbc4ead7822c495.yaml | 4 + ...lume-list-property-option-62008dc24762663b.yaml | 3 + .../notes/bug-1648317-2d12dabc357c4d52.yaml | 10 + .../notes/flavor-id-auto-e21157f97dc1d7f2.yaml | 6 + ...unset-device-id-and-owner-9fce242155c82992.yaml | 5 + .../volume-service-set-fix-345a8bc84267f743.yaml | 5 + requirements.txt | 4 +- setup.cfg | 819 -------------------- 61 files changed, 3044 insertions(+), 2197 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5e9b33d2..9a9c79a9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ cryptography>=2.7 # BSD/Apache-2.0 -cliff>=3.5.0 # Apache-2.0 +cliff>=4.8.0 # Apache-2.0 @@ -10 +10 @@ iso8601>=0.1.11 # MIT -openstacksdk>=4.5.0 # Apache-2.0 +openstacksdk>=4.6.0 # Apache-2.0

1 0

sushy 5.7.1 (flamingo)
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We eagerly announce the release of: sushy 5.7.1 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://bugs.launchpad.net/sushy/+bugs For more details, please see below. 5.7.1 ^^^^^ Bug Fixes * Adds correct handling of BMC responses containing an empty string eTag. This resolves issues where sending back an empty string eTag may trigger HTTP 412 Precondition Failed error on some BMCs. Changes in sushy 5.7.0..5.7.1 ----------------------------- 7f41d5c Improve handling of empty-string eTags. 278bc91 Optimize unit testing Diffstat (except docs and test files) ------------------------------------- ...ignore-empty-string-etags-ee44617d7b0f72ce.yaml | 6 +++ sushy/connector.py | 7 ++- 3 files changed, 66 insertions(+), 5 deletions(-)

1 0

oslo.limit 2.8.0 (flamingo)
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We are excited to announce the release of: oslo.limit 2.8.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. Changes in oslo.limit 2.7.0..2.8.0 ---------------------------------- 1f2e60c add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- pyproject.toml | 3 +++ 1 file changed, 3 insertions(+)

1 0

octavia-lib 3.10.0 (flamingo)
by no-reply＠openstack.org 21 Aug '25

21 Aug '25

We are excited to announce the release of: octavia-lib 3.10.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/octavia-lib Download the package from: https://pypi.org/project/octavia-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia-lib For more details, please see below. 3.10.0 ^^^^^^ Upgrade Notes * Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported. Changes in octavia-lib 3.9.0..3.10.0 ------------------------------------ 5b77739 Update supported python versions Diffstat (except docs and test files) ------------------------------------- releasenotes/notes/remove-py39-c25e3326fd1dfe86.yaml | 5 +++++ setup.cfg | 5 ++--- zuul.d/projects.yaml | 2 +- 3 files changed, 8 insertions(+), 4 deletions(-)

1 0

sushy-tools 2.1.0
by no-reply＠openstack.org 14 Aug '25

14 Aug '25

We are gleeful to announce the release of: sushy-tools 2.1.0 The source is available from: https://opendev.org/openstack/sushy-tools Download the package from: https://tarballs.openstack.org/sushy-tools/ For more details, please see below. 2.1.0 ^^^^^ New Features ************ * Adds PATCH support for the Redfish Manager resource's "DateTime" and "DateTimeLocalOffset" fields in the dynamic emulator. Implements "get_datetime" and "set_datetime" methods in the fake driver and adds test support for mocking datetime values. Disables cache reset to persist updates across requests. Bug Fixes ********* * The nova emulator driver makes fewer API calls when retrieving the server list. This significantly improves the API response times when using the emulator in a project with many instances and ports per instance. * The HTTP status code for NotSupportedError has been fixed. The generic "500 Internal Server Error" status code was previously used, it will now use the "501 Not Implemented" status code. Changes in sushy-tools 2.0.0..2.1.0 ----------------------------------- a72db20 Add SUSHY_EMULATOR_VIRTUAL_MEDIA_IP_FAMILY environment variable support 4d78503 Validate JSON content type before parsing manager PATCH requests 867c9dd Drop test logic for Python < 3.8 81352b1 Add PATCH support for Redfish DateTime fields in Manager resource 3629f02 Revert "Replace license classifier" 0141d2b Replace license classifier aece550 Status code 501 for Unsupported/Not implemented 65f6b2d nova-driver: speed up systems enumeration ca94ce9 os-vmedia: Ensure delay-eject is cleared on insert e3f9209 Pass image ID to _attempt_delete_image_local_file b24eafe os-vmedia: Add option to delay rebuild on eject f722cfd Add config option SUSHY_EMULATOR_STORAGE_POOL Diffstat (except docs and test files) ------------------------------------- ...dd-redfish-datatime-patch-dd2b43ef06bc957c.yaml | 9 ++ ...vadriver-reduce-api-calls-934eb2af95ea2419.yaml | 7 + ...upported-http-status-code-05af22dbecc517f7.yaml | 7 + sushy_tools/emulator/main.py | 117 ++++++++------ sushy_tools/emulator/resources/managers.py | 32 +++- .../emulator/resources/systems/libvirtdriver.py | 2 + .../emulator/resources/systems/novadriver.py | 60 +++++-- sushy_tools/emulator/resources/vmedia.py | 53 +++++++ sushy_tools/error.py | 4 +- .../emulator/resources/systems/test_libvirt.py | 83 +++------- .../unit/emulator/resources/systems/test_nova.py | 36 ++++- 15 files changed, 511 insertions(+), 138 deletions(-)

1 0

glance_store 5.1.0 (flamingo)
by no-reply＠openstack.org 14 Aug '25

14 Aug '25

We are psyched to announce the release of: glance_store 5.1.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. Changes in glance_store 5.0.0..5.1.0 ------------------------------------ 97cbdf3 Replace oslo_utils.encodeutils.exception_to_unicode fb6d454 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- glance_store/_drivers/filesystem.py | 10 +++------- glance_store/_drivers/http.py | 6 +----- glance_store/_drivers/s3.py | 10 +++------- glance_store/_drivers/swift/buffered.py | 6 ++---- glance_store/_drivers/swift/connection_manager.py | 5 +---- glance_store/_drivers/swift/store.py | 14 +++++--------- glance_store/backend.py | 7 +++---- glance_store/driver.py | 6 ++---- glance_store/multi_backend.py | 7 +++---- .../source/locale/en_GB/LC_MESSAGES/releasenotes.po | 16 +++++----------- 11 files changed, 34 insertions(+), 73 deletions(-)

1 0

ironic-inspector 12.1.1 (caracal)
by no-reply＠openstack.org 14 Aug '25

14 Aug '25

We exuberantly announce the release of: ironic-inspector 12.1.1 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://bugs.launchpad.net/ironic-inspector/+bugs For more details, please see below. 12.1.1 ^^^^^^ Bug Fixes * Fixes memory leak with openstacksdk 2.0 and newer. This version requires connections to be explicitly closed, otherwise they stay in memory forever. Changes in ironic-inspector 12.1.0..12.1.1 ------------------------------------------ 714f1cc Cache openstacksdk Connections to avoid leaking memory 5f72b87 Update TOX_CONSTRAINTS_FILE for stable/2024.1 7f9db25 Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_inspector/common/ironic.py | 32 ++++++++++++++++------ ironic_inspector/test/unit/test_common_ironic.py | 8 ++++-- .../notes/sdk-2-leak-500f3669afb6713e.yaml | 5 ++++ tox.ini | 12 ++++---- 5 files changed, 42 insertions(+), 16 deletions(-)

1 0

openstacksdk 4.7.0 (flamingo)
by no-reply＠openstack.org 14 Aug '25

14 Aug '25

We are psyched to announce the release of: openstacksdk 4.7.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://bugs.launchpad.net/openstacksdk/+bugs For more details, please see below. 4.7.0 ^^^^^ New Features * A new parameter, "max_items", is added to the "Resource.list" method. This allows users to specify the maximum number of resources that should be returned to the user, as opposed to the maximum number of items that should be requested from the server in a single request. The latter is already handled by the "limit" parameter * The "create_image" method now takes new parameters ("import_method", "uri", "remote_region", "remote_image_id" and "remote_service_interface") to support all import methods from Glance. * Adds operation which retrieves tasks associated to a particular image. * Adds support for inspection rules; an API feature to create a resource containing conditions that evaluate against inspection data and actions that run on a node when conditions are met during inspection. Changes in openstacksdk 4.6.0..4.7.0 ------------------------------------ 53e19fe0a Add id to query_mapping for Networking 2d8ff6603 Add SDK support for ``glance image-tasks`` 61323654e tests: Use binary mode to open files 1649ed0cd Replace CLA with DCO d8ae2e182 tests: Cleanup volume attachment tests e4e979158 tests: Streamline services functional test c0913ce33 tests: Streamline servers functional test 3a78cecb4 tests: Streamline (compute) images test 135d3db34 tests: Streamline hypervisor test f2788fd0c tests: Streamline flavor test b14c73d35 Remove commented out sections b2ada579c create_image: support other import methods d649aada8 resource: add max_items parameter to resource cb04f4a70 Fix hostname attribute withing request body c2465fee2 Increase swap allocation for devstack-networking 4b0b78e19 Allow filtering of volumes by properties 3a774c1c5 Fix Volume.set_image_metadata 82bc00507 Remove loop variable 65a97e1a7 Fix create_volume_snapshot() description. 83fc95d25 Remove duplicate Python version declarations 2eb367c6e Migrate setup configuration to pyproject.toml da4961cab zuul: Make openstacksdk-functional-devstack-masakari voting 198cb9e02 zuul: Make openstacksdk-functional-devstack-ironic voting 07f52229b Clean small nit comment 4f9946ffe Bump python version from 3.9 to 3.13 in testing docs ad9896c12 Add support for inspection rules 4b74d73ae Add backup export command 6b6d5b293 docs: Fix typo 5a909ee17 typing: Annotate openstack.config.openstackcloud 7c1e42b41 config: Handle interface list in CloudRegion.get_all_version_data 36a7ccb6f typing: Annotate openstack.config.cloud_config 550c15c83 typing: Annotate openstack.config.loader 5a2b3bd81 typing: Annotate openstack.config.vendors 9afc09407 typing: Annotate openstack.config.cloud_region de9129e76 Update .git-blame-ignore-revs b82a434d3 Follow-up: Add support for runbooks Diffstat (except docs and test files) ------------------------------------- .git-blame-ignore-revs | 4 + .pre-commit-config.yaml | 3 +- CONTRIBUTING.rst | 16 +- .../resources/baremetal/v1/inspection_rules.rst | 13 + .../user/resources/baremetal/v1/runbooks.rst | 13 + .../user/resources/block_storage/v2/transfer.rst | 6 +- openstack/baremetal/v1/_proxy.py | 206 ++++++++++ openstack/baremetal/v1/inspection_rules.py | 57 +++ openstack/block_storage/v2/_proxy.py | 12 + openstack/block_storage/v2/backup.py | 11 + openstack/block_storage/v2/volume.py | 2 +- openstack/block_storage/v3/_proxy.py | 12 + openstack/block_storage/v3/backup.py | 11 + openstack/block_storage/v3/volume.py | 3 +- openstack/cloud/_block_storage.py | 17 +- openstack/cloud/openstackcloud.py | 93 +++-- openstack/compute/v2/server.py | 5 + openstack/config/__init__.py | 10 +- openstack/config/_util.py | 20 +- openstack/config/cloud_config.py | 76 +++- openstack/config/cloud_region.py | 420 +++++++++++++-------- openstack/config/defaults.py | 17 +- openstack/config/loader.py | 216 ++++++++--- openstack/config/vendors/__init__.py | 9 +- openstack/connection.py | 2 +- openstack/dns/v2/_base.py | 1 + openstack/image/v2/_proxy.py | 87 ++++- openstack/image/v2/image_tasks.py | 57 +++ openstack/network/v2/floating_ip.py | 1 + openstack/network/v2/network.py | 1 + openstack/network/v2/qos_policy.py | 1 + openstack/network/v2/router.py | 1 + openstack/network/v2/subnet.py | 1 + openstack/proxy.py | 1 + openstack/resource.py | 21 +- .../functional/baremetal/test_baremetal_chassis.py | 28 +- .../baremetal/test_baremetal_conductor.py | 4 +- .../baremetal/test_baremetal_deploy_templates.py | 59 +-- .../functional/baremetal/test_baremetal_driver.py | 10 +- .../baremetal/test_baremetal_inspection_rules.py | 207 ++++++++++ .../functional/baremetal/test_baremetal_node.py | 14 +- .../baremetal/test_baremetal_runbooks.py | 210 +++++++++++ .../compute/v2/test_volume_attachment.py | 78 ++-- .../unit/baremetal/v1/test_inspection_rules.py | 90 +++++ pyproject.toml | 47 ++- .../add_max_item_parameter-3ab3c2e1cd2312c5.yaml | 8 + ...upport-all-import-methods-48e4e382b7091dd3.yaml | 6 + .../notes/get-image-tasks-c66a05c2c67976db.yaml | 5 + .../notes/inspection-rules-86b1c59def73f757.yaml | 6 + requirements.txt | 2 +- setup.cfg | 28 -- tools/nova_version.py | 2 + zuul.d/functional-jobs.yaml | 4 +- zuul.d/project.yaml | 9 +- 81 files changed, 2513 insertions(+), 735 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b2a10c619..5a531f3f9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +8 @@ keystoneauth1>=5.10.0 # Apache-2.0 -os-service-types>=1.7.0 # Apache-2.0 +os-service-types>=1.8.0 # Apache-2.0

1 0

nova 31.0.1 (epoxy)
by no-reply＠openstack.org 14 Aug '25

14 Aug '25

We exuberantly announce the release of: nova 31.0.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 31.0.1 ^^^^^^ Bug Fixes * Bug #2095364: Fixed the List Server API and the List Server Detail API 500 Internal Server Error issue in v2.96 or later API microversion if one or more instance has no request spec object. One usecase was when cloud user tried to create instance which exceeded their quota, the request does not create instance request spec. Once the no request spec instance is created in cloud user project, the server list API and the list server details API return 500 Internal Server Error for the project until the cloud user deletes the no request spec object instance. After this fix, the v2.96 or later returns *null* at the *pinned_availability_zone* value if not specified. (https://launchpad.net/bugs/2095364) * Fix displaying the reason messages from the Ironic validate node operation that is called just before the instance is deployed on the bare metal node. The message from Ironic is now correctly logged. Fixes *bug 2100009 <https://bugs.launchpad.net/nova/+bug/2100009>_*. * The nova (metadata)api wsgi application will now detect fatal errors (configuration, et al) on startup and lock into a permanent error state until fixed and restarted. This solves a problem with some wsgi runtimes ignoring initialization errors and continuing to send requests to the half-initialized service. See https://bugs.launchpad.net/nova/+bug/2103811 for more details. * When live migration fails during pre_live_migration on the destination, during rollback Cinder volumes will now be disconnected from the destination locally instead of remotely over RPC from the source. This should ensure that only connection_info for the destination will be used to disconnect volumes from the destination. See bug #1899835 (https://bugs.launchpad.net/nova/+bug/1899835) for more details. Changes in nova 31.0.0..31.0.1 ------------------------------ c2d79bc4d7 FUP Update pci-passthrough and virtual-gpu documentation bdf62d0653 Fix neutron client dict grabbing 8b0ae7243f [tool] Fix backport validator for non-SLURP b07d6c1d4f live migration: Avoid volume rollback mismatches 8ad247b312 Amend functional reproducer for bug 1899835 70630fe5ab FUP Remove unnecessary PCI check 957d97ea30 Use dict object for request_specs_dict in the _list_view 3242cde342 ironic: fix logging of validation errors 7f1b13ea40 wrap wsgi_app.init_application with latch_error_on_raise 91f6f7e30e Reproduce bug/2098496 6422ebea0b Update TOX_CONSTRAINTS_FILE for stable/2025.1 8010bdca09 Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + api-ref/source/parameters.yaml | 1 + nova/api/openstack/compute/views/servers.py | 23 +- nova/api/openstack/wsgi_app.py | 2 + nova/compute/claims.py | 26 -- nova/compute/manager.py | 101 +++--- nova/network/neutron.py | 18 +- nova/test.py | 1 + .../functional/regressions/test_bug_1899835.py | 125 +++++++- .../functional/regressions/test_bug_2098496.py | 181 +++++++++++ .../unit/api/openstack/compute/test_servers.py | 70 ++++- nova/utils.py | 39 +++ nova/virt/ironic/driver.py | 12 +- .../notes/bug-2095364-ffbf67c0ae3f53b5.yaml | 15 + ...nic-validate-node-message-6a8b1eedbddd06fd.yaml | 7 + .../latch-error-on-raise-cf2da71a12b5f55f.yaml | 9 + ...e-live-migration-rollback-7de399d9b3979f79.yaml | 9 + tools/check-cherry-picks.sh | 7 +- tox.ini | 2 +- 27 files changed, 952 insertions(+), 243 deletions(-)

1 0

nova 29.2.2 (caracal)
by no-reply＠openstack.org 14 Aug '25

14 Aug '25

We are pleased to announce the release of: nova 29.2.2 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 29.2.2 ^^^^^^ Bug Fixes * During the Caracal cycle the libvirt driver was enhanced to support using device aliases to detach devices from a domain. I1dfe4ad3df81bc810835af9b09cfc6c06e9a5388 This introduced a regression for instance with vgpus. A prior bugfix https://bugs.launchpad.net/nova/+bug/1942345 addressed the symptom without correcting the underlying problem. A related bug for mdev devices was later reported. https://bugs.launchpad.net/nova/+bug/2074219 When this feature was added nova introduced a helper method to get device via the alias because the libvirt api does not provide one natively. That helper function assumed all devices would have an alias attribute. That assumption was not valid and had now been corrected. As a result detaching a volume from an instance with vgpus should now be possible and this class of bug should no longer happen. * When live migration fails during pre_live_migration on the destination, during rollback Cinder volumes will now be disconnected from the destination locally instead of remotely over RPC from the source. This should ensure that only connection_info for the destination will be used to disconnect volumes from the destination. See bug #1899835 (https://bugs.launchpad.net/nova/+bug/1899835) for more details. Changes in nova 29.2.1..29.2.2 ------------------------------ ad1bd175ae Fix detaching devices by alias with mdevs 4d01fb17e6 Add repoducer test for bug 2074219 db438e55e6 [tool] Fix backport validator for non-SLURP 0b738435c9 live migration: Avoid volume rollback mismatches d655d98350 Amend functional reproducer for bug 1899835 Diffstat (except docs and test files) ------------------------------------- nova/compute/manager.py | 101 +++--- .../functional/regressions/test_bug_1899835.py | 125 +++++++- .../functional/regressions/test_bug_2074219.py | 66 ++++ nova/virt/libvirt/guest.py | 2 +- .../notes/bug-2074219-937d6404c1cbb04c.yaml | 17 + ...e-live-migration-rollback-7de399d9b3979f79.yaml | 9 + tools/check-cherry-picks.sh | 7 +- 10 files changed, 510 insertions(+), 175 deletions(-)

1 0

trove 21.1.0 (caracal)
by no-reply＠openstack.org 13 Aug '25

13 Aug '25

We joyfully announce the release of: trove 21.1.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/trove Download the package from: https://tarballs.openstack.org/trove/ Please report issues through: https://bugs.launchpad.net/trove/+bugs For more details, please see below. 21.1.0 ^^^^^^ New Features * Enable *network_isolation* by Default. This option has no impact on existing Trove instances. For more information, Please refer to the document network_isolation. Changes in trove 21.0.1..21.1.0 ------------------------------- 25b7d92a [CI]: run perodical jobs on master branch only 69d7203a Fix MariaDB target dir for backup syntax b7363a27 Enable network_isolation by default 87d60a1b Change settings for stable/2024.1 d2877ee3 fix error when build mariadb backup docker image 452a9c27 Fix error can't detach the configuration group binding 89f5bc36 Get rid of nose and Proboscis Diffstat (except docs and test files) ------------------------------------- backup/drivers/mariabackup.py | 2 +- backup/install.sh | 2 +- devstack/settings | 6 +- generate_examples.py | 42 - integration/README.md | 230 --- .../guest-agent/source-repository-guest-agent | 4 +- integration/scripts/trovestack | 2 +- integration/scripts/trovestack.rc | 6 +- .../enable-network-isolation-67fc4de3356aa682.yaml | 7 + test-requirements.txt | 8 - tox.ini | 3 +- trove/common/cfg.py | 4 +- trove/guestagent/api.py | 1 + trove/instance/service.py | 14 +- .../scenario/groups/database_actions_group.py | 179 --- .../scenario/groups/instance_actions_group.py | 126 -- .../scenario/groups/instance_error_create_group.py | 105 -- .../scenario/groups/instance_force_delete_group.py | 64 - .../scenario/groups/instance_upgrade_group.py | 120 -- .../scenario/runners/configuration_runners.py | 580 ------- .../scenario/runners/database_actions_runners.py | 228 --- .../scenario/runners/instance_actions_runners.py | 115 -- .../scenario/runners/instance_create_runners.py | 339 ----- .../scenario/runners/instance_delete_runners.py | 49 - .../runners/instance_error_create_runners.py | 129 -- .../runners/instance_force_delete_runners.py | 59 - .../scenario/runners/instance_upgrade_runners.py | 68 - .../runners/negative_cluster_actions_runners.py | 101 -- zuul.d/jobs.yaml | 8 +- zuul.d/projects.yaml | 6 +- 115 files changed, 66 insertions(+), 24240 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index e88a34ea..bf696a25 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8,3 +7,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -nose>=1.3.7 # LGPL -nosexcover>=1.0.10 # BSD -openstack.nose-plugin>=0.7 # Apache-2.0 @@ -13 +9,0 @@ wsgi-intercept>=1.4.1 # MIT License -proboscis>=1.2.5.3 # Apache-2.0 @@ -16,4 +11,0 @@ testtools>=2.2.0 # MIT -pymongo!=3.1,>=3.0.2 # Apache-2.0 -redis>=2.10.0 # MIT -cassandra-driver!=3.6.0,>=2.1.4 # Apache-2.0 -couchdb>=0.8 # Apache-2.0

1 0

pbr 7.0.0
by no-reply＠openstack.org 13 Aug '25

13 Aug '25

We are pumped to announce the release of: pbr 7.0.0 The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. 7.0.0 ^^^^^ Upgrade Notes ************* * Support for the "[global] compilers" option has been removed. This was an undocumented feature that did not appear to have any use. * The deprecated support for "setup.py test" has been removed. This feature has been deprecated since version 4.0. The two test tools supported, "nose" and "testr", are no longer maintained, and the general concept of distutils commands is itself deprecated. Users should switch to running the test runners directly and ideally migrate to an alternative, supported test runner like "stestr" or "pytest". Deprecation Notes ***************** * A number of pbr-specific *setup.cfg* sections and options have been deprecated in order in favour of setuptools native *setup.cfg* sections and options or their *pyproject.toml* equivalents: * The *[entry_points]* section has been deprecated in favour of the *[options.entry_points]* section (if using *setup.cfg*) or the *[project.scripts]* and/or *[project.entry-points.{name}]* sections (if using *pyproject.toml*) * The *[files] packages_root* option has been deprecated in favour of the *[options] package_dir* option (if using *setup.cfg*) or the *[tools.setuptools] package_dir* option (if using *pyproject.toml*) * The *[files] packages* option has been deprecated in favour of the *[options] packages* option (if using *setup.cfg*) or the *[tools.setuptools] packages* option (if using *pyproject.toml*) * The *[files] package_data* option has been deprecated in favour of the *[options.package_data]* option (if using *setup.cfg*) or the *[tool.setuptools.package-data]* option (if using *pyproject.toml*) * The *[files] namespace_packages* option has been deprecated in favour of the *[options] namespace_packages* option (if using *setup.cfg*). Alternatively, migrate to PEP 420-style namespace packages * The *[files] data_files* option has been deprecated, and support for non-package data files in general is deprecated in setuptools and their use is discouraged. For package data files, use *[options] package_data* (if using *setup.cfg*) or *[tools.setuptools] package_data* (if using *pyproject.toml*) instead. If non-package data files are necessary, use *[options] data_files* (if using *setup.cfg*) or *[tools.setuptools] data- files* (if using *pyproject.toml*) instead. * The *[files] scripts* option has been deprecated. There is no direct replacement. Instead, migrate to using the *console_scripts* entrypoint and use the *[options.entry_points]* option (if using *setup.cfg*) or the *[project.scripts]* option (if using *pyproject.toml*). * The *[files] modules* option has been deprecated in favour of the *[options] py_modules* option (if using *setup.cfg*) or the *[tools.setuptools] py-modules* option (if using *pyproject.toml*) * The *[metadata] home_page* option has been deprecated in favour of the *[metadata] url* option (if using *setup.cfg*) or the *[project.urls]* option (if using *pyproject.toml*) * The *[metadata] summary* option has been deprecated in favour of the *[metadata] description* option (if using *setup.cfg*) or the *[project] description* option (if using *pyproject.toml*) * The *[metadata] classifier* option has been deprecated in favour of the *[metadata] classifiers* option (if using *setup.cfg*) or the *[project] classifiers* option (if using *pyproject.toml*) * The *[metadata] platform* option has been deprecated in favour of the *[metadata] platforms* option (if using *setup.cfg*) or the *[tool.setuptools] platforms* (if using *pyproject.toml*) * The *[metadata] requires_dist* option has been deprecated in favour of the *[options] install_requires* option (if using *setup.cfg*) or the *[project] dependencies* option (if using *pyproject.toml*) * The *[metadata] setup_requires_dist* option has been deprecated in favour of the *[options] setup_requires* option (if using *setup.cfg*) or the *[build-system] requires* option (if using *pyproject.toml*) * The *[metadata] python_requires* option has been deprecated in favour of the *[options] python_requires* option (if using *setup.cfg*) or the *[project] requires-python* option (if using *pyproject.toml*) * The *[metadata] requires_python* option has been deprecated in favour of the *[options] python_requires* option (if using *setup.cfg*) or the *[project] requires-python* option (if using *pyproject.toml*) * The *[metadata] provides_dist* option has been deprecated as it is obsolete and is no longer used by pip * The *[metadata] provides_extra* option has been deprecated as it is obsolete and is no longer used by pip * The *[metadata] obsoletes_dist* option has been deprecated as it is obsolete and is no longer used by pip * The *[backwards_compat] zip_safe* option has been deprecated as it is was only relevant in the context of eggs and is therefore obsolete * The *[backwards_compat] dependency_links* option has been deprecated as it is obsolete and is no longer used by pip * The *[backwards_compat] tests_require* option has been deprecated as it is obsolete and is no longer used by pip * The *[backwards_compat] include_package_data* option has been deprecated in favour of the *[options] include_package_data* option (is using *setup.cfg*) or the *[tools.setuptools] include- package-data* option (if using *pyproject.toml*) Changes in pbr 6.1.1..7.0.0 --------------------------- 63c8efa Remove duplicate line in test_generates_c_extensions 2e8db96 Update setup.cfg usage docs to explain pbr vs setuptools better 3261691 Silence Python warnings 4a17dcb Do not use the onerror parameter in shutil.rmtree() 3bbb792 docs: Remove deprecated options 1ed80ed tox: Stop calling 'setup.py' e177eae Deprecate 'tests_require' option 8f1a6ec Deprecate various '[backwards_compat]' options 145fead Deprecate various '[metadata]' options 370e380 Deprecate '[files]' section 9e7b9cc Deprecate '[entry_points]' section 8d5f4eb docs: Update usage guide and README 6dc031c Move functional tests to their own directory 589076b Move distutils commands to _compat 69fbbbb Use sysconfig for sitedir path in test_wsgi in py3 6dcc15a Remove support for custom compilers 109bb7e Move fixtures to their own module c44dc05 Remove 'test' distutils command override a690610 Cleanup removal of 'build_sphinx' command doc e7f140f Use packaging where possible 0256e75 Use importlib.metadata where possible b92acd3 Tweak loading distribution version 4f8e23d Centralise Python 2/3 compat code 248450d Add __future__ imports 174b397 Resolve post-black issues 28988fd Add black 0c1fb38 docs: Remove use of sphinxcontrib-apidoc c74b961 Don't pin setuptools for all tests 9956df0 pre-commit: Bump versions 3f9c3d4 tests: Skip tests that break on newer setuptools 141d0ea Add openstack-tox-py313 job 90de90c tests: Set GNUPGHOME in tests c1fa2cf tests: Add hint if running integration tests locally e93bedd Modernize tests to use EXT_SUFFIX, fix PyPy 64cad81 Run python release package build job in check and gate Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 27 +- .zuul.yaml | 6 + README.rst | 21 +- pbr/_compat/__init__.py | 0 .../commands.py => _compat/command_hooks.py} | 35 +- pbr/_compat/commands.py | 442 +++++++++++ pbr/_compat/five.py | 65 ++ pbr/_compat/metadata.py | 163 ++++ pbr/_compat/packaging.py | 111 +++ pbr/build.py | 5 + pbr/cmd/main.py | 75 +- pbr/core.py | 23 +- pbr/extra_files.py | 6 +- pbr/find_package.py | 8 +- pbr/git.py | 77 +- pbr/hooks/__init__.py | 5 +- pbr/hooks/backwards.py | 15 +- pbr/hooks/base.py | 7 +- pbr/hooks/files.py | 17 +- pbr/hooks/metadata.py | 10 +- pbr/options.py | 10 +- pbr/packaging.py | 599 ++------------ pbr/pbr_json.py | 5 +- pbr/sphinxext.py | 22 +- pbr/testr_command.py | 167 ---- .../test_console_scripts.py} | 95 +-- .../test_wsgi_scripts.py} | 72 +- pbr/util.py | 328 +++++--- pbr/version.py | 195 +++-- pyproject.toml | 4 + .../build_sphinx_removal-de990a5c14a9e64d.yaml | 2 +- .../global-compilers-removal-62b131e40de087ef.yaml | 5 + .../setuptools-alignment-b5b1309f47e9cf98.yaml | 99 +++ .../test-command-removal-153fc9ecdd6834ef.yaml | 10 + releasenotes/source/conf.py | 6 - setup.cfg | 8 +- setup.py | 3 +- test-requirements.txt | 7 - tools/integration.sh | 46 +- tox.ini | 22 +- 72 files changed, 3897 insertions(+), 2570 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 7d92462..5bab77d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,4 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -7 +2,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -hacking>=1.1.0,<4.0.0;python_version>='3.6' # Apache-2.0 @@ -21,2 +15,0 @@ testrepository>=0.0.18 # Apache-2.0/BSD - -pre-commit>=2.6.0;python_version>='3.6' # MIT

1 0

openstack-ansible 31.0.1 (epoxy)
by no-reply＠openstack.org 08 Aug '25

08 Aug '25

We contentedly announce the release of: openstack-ansible 31.0.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 31.0.1 ^^^^^^ Upgrade Notes ************* * When using standalone RabbitMQ cluster for Trove deployment, make sure to use "trove_guest_rpc_host_group" as a pointer to host group, rather then a pointer to a specific host. You can use variable "trove_guest_oslomsg_rpc_setup_host" to define a specific host which should be responsible for provisionment of RabbitMQ vhost and users instead. Bug Fixes ********* * Fix Skyline installation problem after httpx 1.0 release due to not using OpenStack upper-constraints for installation. * Variable "trove_guest_rpc_host_group" is now used as intended and represents a host group. It is no longer directly used as "delegated host" when configuring a standalone RabbitMQ cluster for Trove. Changes in openstack-ansible 31.0.0..31.0.1 ------------------------------------------- c336f990a Bump SHAs for 2025.1 6fb03123d docs: update information about Epoxy release Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 34 +++++++++++----------- inventory/group_vars/all/source_git.yml | 4 +-- inventory/group_vars/barbican_all/source_git.yml | 4 +-- inventory/group_vars/cinder_all/source_git.yml | 4 +-- inventory/group_vars/heat_all/source_git.yml | 4 +-- inventory/group_vars/horizon_all/source_git.yml | 16 +++++----- inventory/group_vars/ironic_all/source_git.yml | 4 +-- inventory/group_vars/manila_all/source_git.yml | 4 +-- inventory/group_vars/neutron_all/source_git.yml | 6 ++-- inventory/group_vars/nova_all/source_git.yml | 4 +-- inventory/group_vars/octavia_all/source_git.yml | 4 +-- inventory/group_vars/zun_all/source_git.yml | 4 +-- .../notes/skyline_u_c_usage-6167d7c50e6777f5.yaml | 5 ++++ ...rabbitmq_guest_setup_host-b1237ed5efe32431.yaml | 14 +++++++++ 15 files changed, 70 insertions(+), 48 deletions(-)

1 0

python-observabilityclient 1.1.0 (flamingo)
by no-reply＠openstack.org 08 Aug '25

08 Aug '25

We are happy to announce the release of: python-observabilityclient 1.1.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/python-observabilityclient Download the package from: https://pypi.org/project/python-observabilityclient Please report issues through: https://bugs.launchpad.net/python-observabilityclient/+bugs For more details, please see below. 1.1.0 ^^^^^ New Features ************ * The rbac.PromQLRbac.modify_query method now optionally allows for providing a list of metric names thanks to a new parameter. When the new parameter isn't used, the old behavior with sending a Prometheus API request to retrieve the metric names is used. When the metric names are provided, no Prometheus API request is done, which greatly increases performance when using the modify_query repeatedly, for example in loops. * Allow for specifying project label name when creating an instance of PromQLRbac. The change is backwards compatible, the same label name 'project' is still being used as a default. Upgrade Notes ************* * Aetos endpoint information discovered from keystone can no longer be overridden by a config file or by environment variables. From now on, Aetos access must be fully discoverable from Keystone endpoints only. * Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported. Security Issues *************** * Modified the observabilityclient to send keystone token with each request only when communicating with Aetos, instead of sending it everytime, which could pose a security risk. This also restricts configuration options for connecting to Aetos to keystone endpoints only. Configuration for Prometheus is unchanged and can still be done through keystone endpoint, through a configuration file or through environment variables. Bug Fixes ********* * Fixed broken handling of IPv6 address host, caused by missing host escape. Other Notes *********** * Service type used to automatically discover Aetos endpoint from keystone was changed from 'prometheus' to 'metric-storage'. The service name is no longer required to be 'aetos'. Changes in python-observabilityclient 1.0.0..1.1.0 -------------------------------------------------- 2f31846 Split get_prometheus_client to multiple functions f1dd649 Rename Aetos's service type to metric-storage fabd89f Allow for providing metric names to modify_query 11489f0 Allow for specifying rbac label name 0da3bbb Fix inconsistent indentation d4e8a75 Send keystone tokens to Aetos only 4db9450 Replace os-client-config bb3ee56 Remove Python 3.9 support 2937871 Fix IPv6 host IP escaping 7058b9a Zuul: do not use USE_PYTHON3 21a5f3e Add a testcase for specifying project label a1413f5 Change URLs to point to the correct repository 553bb19 Update default envlist Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - README.md | 2 +- observabilityclient/rbac.py | 39 +++++++-- observabilityclient/utils/metric_utils.py | 98 ++++++++++++++-------- observabilityclient/v1/client.py | 2 +- ...etric-names-list-for-rbac-e46a4fd0df3fad73.yaml | 10 +++ ...pecifying-rbac-label-name-f99084757cde5f19.yaml | 6 ++ ...change-aetos-service-type-37a53a86f4975803.yaml | 6 ++ ...tone-discovered-endpoints-0b36ad382f029fa0.yaml | 7 ++ .../notes/fix-ipv6-escaping-faef776565954baa.yaml | 4 + .../notes/remove-py39-a3f911847e0075b6.yaml | 5 ++ ...-communicating-with-aetos-21299ccc710f6473.yaml | 9 ++ setup.cfg | 5 +- test-requirements.txt | 2 +- tox.ini | 2 +- 18 files changed, 268 insertions(+), 70 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index dac65be..ddf5e78 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -2 +2 @@ python-openstackclient>=6.3.0 # Apache-2.0 -os-client-config>=1.28.0 # Apache-2.0 +openstacksdk>=0.10.0 # Apache-2.0

1 0

oslo.db 17.4.0 (flamingo)
by no-reply＠openstack.org 07 Aug '25

07 Aug '25

We enthusiastically announce the release of: oslo.db 17.4.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. 17.4.0 ^^^^^^ New Features ************ * Added support for detecting and handling MariaDB error 1020 "Record has changed since last read" which occurs under REPEATABLE- READ isolation level when MariaDB detects that a row has changed since it was last read in the current transaction. This error is now wrapped in a new "DBConsistencyError" exception class that inherits from "DBDeadlock", ensuring that existing retry decorators and error handling code will automatically handle this transient concurrency condition. Bug Fixes ********* * Fixed handling of MariaDB error 1020 that was previously not properly categorized by oslo.db's exception filtering system. This error, which can occur in OpenStack services like Nova and Keystone when using MariaDB with REPEATABLE-READ isolation level, is now properly wrapped in a "DBConsistencyError" exception (a subclass of "DBDeadlock") instead of being passed through as a generic "OperationalError". This ensures that existing retry mechanisms that handle deadlock-like conditions will automatically work with this MariaDB-specific consistency error. For more details, see bug 2116186 (https://bugs.launchpad.net/nova/+bug/2116186) Changes in oslo.db 17.3.0..17.4.0 --------------------------------- aa3c8d8 Uniformize exceptions by removing useless constructors a068372 Add MariaDB error 1020 handling as DBConsistencyError subclass of DBDeadlock Diffstat (except docs and test files) ------------------------------------- oslo_db/exception.py | 28 +++++++++------ oslo_db/sqlalchemy/exc_filters.py | 19 ++++++++++ ...riadb-transactional-error-d84c95cdb4d3b27f.yaml | 23 ++++++++++++ 4 files changed, 102 insertions(+), 10 deletions(-)

1 0

ironic 31.0.0 (flamingo)
by no-reply＠openstack.org 06 Aug '25

06 Aug '25

We are pumped to announce the release of: ironic 31.0.0 This release is part of the flamingo release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 31.0.0 ^^^^^^ New Features ************ * Added a new 'api-call' action plugin for Ironic inspection rules. This action allows triggering an HTTP GET request to a given URL when a rule matches successfully during node inspection. It is useful for integrating with external systems such as webhooks, alerting, or automation tools. The following options are supported: * url (required): The HTTP endpoint to call * timeout (optional, default: 5): Timeout in seconds * retries (optional, default: 3): Number of retries on failure * backoff_factor (optional, default: 0.3): Delay factor for retry attempts * headers, proxies (optional): Additional request configuration Retry applies to status codes 429, 500, 502, 503, and 504. Example rule: [ { "description": "Trigger webhook after node inspection", "actions": [ { "action": "api-call", "url": "http://example.com/hook", "timeout": 10, "retries": 5, "backoff_factor": 1 } ] } ] * Adds two new capabilities to the Redfish managemnet interface for managing the BMC clock. 1. A manual cleaning step "set_bmc_clock" that allows operators to set the BMC's hardware clock to a specific datetime (in ISO8601 format), optionally including a datetimelocaloffset. 2. An automated verify step "verify_bmc_clock" that compares the BMC's Redfish datetime to the system UTC time, and automatically updates the BMC clock if needed. Verification fails if the difference exceeds 1 second after the update. These steps helps ensure BMC clock synchronization in baremetal environments where incorrect or drifting BMC clocks may lead to TLS certificate validation failures. * Allows users to specify the verify_ca path for the corresponding driver through the "verify_ca" option under the "[<driver>]" section in the configuration. When "[driver_info]/<driver>_verify_ca" is specified as None or True, it will be replaced by the value of the "verify_ca" option. NOTE: For the "idrac" driver, it uses the same options as the "redfish" driver. * A new configuration option, "[api] response_validation", has been added. This allows operators to configure the behavior of "ironic- api" when a response fails schema validation * Ironic operators can now assign specific steps to run during automated cleaning instead of relying on the driver-based implicit steps typically used for automated cleaning. To generally opt-in to this behavior, first set "[conductor]/automated_cleaning_step_source" to either 'hybrid' or 'runbook'. A setting of 'autogenerated' (default), preserves existing behavior. Setting 'runbook' causes Ironic to attempt to find and use a configured runbook for automated cleaning, and fails cleaning if one is not found. The 'hybrid' setting causes Ironic to attempt to find and use a configured runbook for automated cleaning. If one is not found, we fallback to the default autogenerated cleaning. Configuration for cleaning runbooks is tiered to allow maximum flexibility; Ironic will try to find a cleaning runbook in the following places. Values representing the runbook name or the runbook UUID are accepted; and the most specific value found is used. First, "node.driver_info['cleaning_runbook']" is a node specific override, disabled by default. To enable it, set "[conductor]automated_cleaning_runbook_from_node" to True. Next, "[conductor]automated_cleaning_runbook_by_resource_class" allows you to map resource classes to the expected runbook for them to use in automated cleaning. The global default, and final fallback, is "[conductor]automated_cleaning_runbook". As with normal runbook usage, the runbook name must match an active trait in node.traits. This behavior can be changed by setting "[conductor]automated_cleaning_runbook_validate_traits" to False. A cleaning attempt that resolves to an incompatible runbook will cause an error and leave the node uncleaned in a clean fail state. * Added a new configuration option "[conductor]error_on_ramdisk_config_inconsistency" to control how Ironic handles inconsistent kernel and ramdisk configurations. When "error_on_ramdisk_config_inconsistency" is set to "True", Ironic will raise a "MissingParameterValue" exception when it encounters inconsistent kernel/ramdisk configurations, such as: * A node's "driver_info" containing only "deploy_kernel" but missing "deploy_ramdisk" (or vice versa) * The "[conductor]deploy_kernel_by_arch" configuration having entries for architectures that are missing from "[conductor]deploy_ramdisk_by_arch" (or vice versa) * Similar inconsistencies with rescue kernel/ramdisk configurations When set to "False" (the default), Ironic will log warning messages about these inconsistencies but continue operation by falling back to global configuration values when possible. In a future Ironic release, the default of this value will be changed to True to enforce strict validation. * Adds support for updating firmware of certain NIC interfaces to the "redfish" firmware interface. * Start and end of dynamic step-based flows (automated cleaning, manual cleaning, servicing, and deploy steps) are now logged to Node History if "[conductor]record_step_flows_in_history" is enabled (default: "True"). This makes it easier to trace what steps were attempted when troubleshooting deployment failures. A second knob which is disabled by default, "[conductor]log_step_flows_to_syslog", allows emitting the same flow events, but to the service log. * The REST API and JSON-RPC listeners now honour new options in their own config sections: * "[api]cert_file" / "[api]key_file" * "[json_rpc]cert_file" / "[json_rpc]key_file" This lets operators present different certificates for each endpoint without touching the global "[ssl]" block as that is now deprecated, to be removed in **2026.1**. Deployments that still rely on the global "[ssl]" section are advised to move the certificate settings to the per-service options. Upgrade Notes ************* * The configuration option *[DEFAULT]/graceful_shutdown_timeout* from *oslo.service* has been replaced by configuration option *[conductor]/graceful_shutdown_timeout*. The default value (*60* seconds) has not changed, operators using a custom value for should update their configuration files to use the new option. * The new "[conductor]error_on_ramdisk_config_inconsistency" configuration option defaults to "False" to maintain backward compatibility. Existing deployments with inconsistent kernel/ramdisk configurations will continue to work as before, with warning messages logged to help identify potential configuration issues. Operators who want strict validation of kernel/ramdisk configurations can set this option to "True", but should first review their configurations to ensure consistency across all node "driver_info" entries and architecture-specific configuration options. Ironic expects to enable strict validation of these values in a future release. * All-in-one Ironic processes that use "rpc_transport=none" are switched to using JSON RPC over localhost on upgrade. This is because the current model is not compatible with the post-eventlet architecture. Make sure that local traffic is possible on port 8089. If not, you may change the port by modifying the "[json_rpc]port" option. * Rootwrap support has been removed. Due to this removal, the following files and directories are no longer used, and should be removed. * "/etc/ironic/rootwrap.conf" file * "/etc/ironic/rootwrap.d" directory * "ironic-rootwrap" command Deprecation Notes ***************** * The configuration option *[DEFAULT]/graceful_shutdown_timeout* from *oslo.service* has been deprecated, replaced by *[conductor]/graceful_shutdown_timeout*. This change was triggered by the need to remove usage of eventlet. * The SNMP hardware type and associated interfaces have been deprecated for removal in a future Ironic release. It currently depends on an outdated, unsupported library and unless it is migrated off that library by the end of the 2026.1 cycle it will be removed. Operators utilizing this driver will need to find an alternate way to manage their machines. Alternatively, the Ironic community welcomes contributions to keep this driver alive. Security Issues *************** * Update jinja2 to 3.1.6 in requirements to address CVE-2023-34064. Single location in code updated to work with new jinja2 version. * This change permits declarative cleaning via use of runbooks. Please note there is no validation that a runbook performs typical, expected cleaning actions such as a disk wipe. Operators should be careful to ensure they are using sufficient steps to securely wipe the system. Additionally, operators of multitenant Ironic clusters should be careful before setting "[conductor]automated_cleaning_runbook_from_node" to True, as it may permit a node owner to render cleaning ineffective. This is not a concern in deployments utilizing node.lessee via automated_lessee. Bug Fixes ********* * Include Ethernet interface name(identity attribute) in inventory for inspection hooks To succeed Redfish inspection flow ensure that the Ethernet interface name is present in the inventory data. This is required for inspection hooks such as *validate-interfaces* to function correctly. * [Bug 2092398 (https://bugs.launchpad.net/ironic/+bug/2092398) Fixes an issue with node servicing/cleaning that caused the node to enter into *service failed* or *clean failed* state after doing a bmc firmware update, due to the BMC being unresponsive to requests during the update. Now when doing a BMC update, we wait some time before proceeding with the reboot to finish the update. The time is configurable and can be changed via the config option "[redfish]firmware_update_wait_unresponsive_bmc" (default, 300 seconds) or by setting "firmware_update_unresponsive_bmc_wait" in the "driver-info". * Fixes the redfish sensor data output, before any enum value would be treated as an object, now we consider their value as string. * Fixes an issue where a "null" or missing MTU value for network_data.json payloads in configuration drives forces a regeneration of the configuration drive. This behavior is enabled by default, and can be disabled by using the "[conductor]disable_metadata_mtu_check" configuration option by setting the option value to "True". For more information, see bug 2110322 (https://bugs.launchpad.net/ironic/+bug/2110322) * Fixes schema validation by raising formatting and schema errors early during inspection rule creation, updates and execution. * Adds support for standard comparison operators (*le*, *ge*, *ne*) to extend inspection rules capabilities for common logical conditions. * The Ironic REST API and JSON-RPC endpoints are now served by "cheroot.wsgi.Server" instead of the deprecated "oslo_service.wsgi" / eventlet stack. Behaviour and CLI commands are unchanged. * Removes initial, unconditional reboot into ramdisk during servicing when not required by specified service steps. This reduces the total number of reboots needed when performing servicing, speeding up the process. Changes in ironic 30.0.0..31.0.0 -------------------------------- 3106588d6 [docs] Update manual clean and verify steps 94948bb19 Add manual clean and automated verify steps to set BMC clock via Redfish Manager 65eb4ba37 Drop redundant geattr 38b15996c Fix inspection rules validation 0125c26ab Log executed steps during cleaning/servicing/deploy 3e39f8aae ci: mark failing jobs non-voting pending fixes/removal 1b2c01185 Skip initial reboot to IPA when updating firmware out-of-band 635849989 doc: Use dnsmasq to run tftp server 9d251bfa2 Drop remaining reference to openSUSE 153d425a5 [docs] Add NIC Firmware Update to Firmware Interface Docs a4e7939b6 Clear `last_error` on power match/sync 383146475 Switch from local RPC to automated JSON RPC on localhost 489af188c Remove rootwrap 790f43337 Add interface name to inventory for inspection hooks 1b3e56699 Imported Translations from Zanata 4b17246f6 Remove focus from ironic-inspector in the documentation 5b4bce7c8 update Jinja2 to address CVE-2024-2383 03fd6f992 ci: stabilize ironic-standalone-redfish 259cc2331 Update firmware schema to require 'created_at' and 'updated_at' fields bb0f6fe12 Stop short-cutting to local manager with all-in-one processes 0624d1987 Redfish Firmware Interface - NIC Support 276937a57 Cleanup tests for eventlet migration abddd546f Fix names of steps in comments as per function 2411779ee Handle unresponsive BMC during Firmware Updates 65909e25a feat: add verify ca conf support for drivers 13df83eef Fix Sensor Data values a2b18ca21 trivial: follow-up on I07172e48207e09c0858298e34eea038c776d3c74 0e0e73424 trivial: note ipmitool code which can be removed with eventlet 2be79d809 fix: handle unexpected 'loop' in actions field 205893fc4 Change the novncproxy service code to handle eventlet-lessness c0a83a46a Stop using oslo.service graceful_shutdown_timeout a986fbdcb Add `api-call` action for ironic inspection rule 5c4c32442 Add specific "use 24.04" note to devstack-guide 4aba6bcfc Revert "Replace license classifier" ccbc47270 Increase memory allocation for ironic-base a78697462 Make _by_arch ramdisk uses & validation consistent c33f12329 Consider missing MTU invalid metadata d4725c90a Eventlet: Migrate API & JSON-RPC to cheroot d4cf0e76a Report provisioned state where appropiate when raising InvalidState* Exceptions f2302d34e Added a FAQ on CI debugging, starts with network 965b2a53e PTG: Move CI job descriptions into yaml b551ec5e1 [docs] Automated cleaning by runbook febb6e24a Automated cleaning by runbook 046169527 Add missing space to log statement b37ae4388 follow-up: post-review feedback fixes for network data fixes bf9647502 fix: 'built_in' KeyError on invalid priority. 5b0134ea9 conf: Add '[api] response_validation' option a2cbb3484 Advanced vmedia deployment test ops 6abe65110 Fix minor devstack issues 00f0a0316 Remove installation guide for openSUSE/SLES dc6cd79a9 Mark SNMP driver unsupported for removal Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 96 ++- .../include/configure-ironic-api-mod_wsgi.inc | 22 +- .../install/include/configure-ironic-api.inc | 2 +- .../install/include/configure-ironic-conductor.inc | 2 +- .../include/configure-ironic-novncproxy.inc | 2 +- .../include/configure-ironic-singleprocess.inc | 8 +- etc/ironic/rootwrap.conf | 28 - etc/ironic/rootwrap.d/ironic-utils.filters | 3 - ironic/api/controllers/v1/inspection_rule.py | 20 +- ironic/api/schemas/v1/firmware.py | 6 +- ironic/api/validation/__init__.py | 32 +- ironic/command/conductor.py | 44 ++ ironic/command/singleprocess.py | 3 + ironic/common/auth_basic.py | 7 + ironic/common/automated_clean_methods.py | 28 + ironic/common/inspection_rules/actions.py | 51 ++ ironic/common/inspection_rules/operators.py | 18 +- ironic/common/inspection_rules/validation.py | 13 +- ironic/common/json_rpc/client.py | 10 +- ironic/common/neutron.py | 7 +- ironic/common/pxe_utils.py | 17 +- ironic/common/rpc_service.py | 8 +- ironic/common/tls_utils.py | 93 +++ ironic/common/wsgi_service.py | 102 ++- ironic/conductor/base_manager.py | 16 +- ironic/conductor/cleaning.py | 43 +- ironic/conductor/configdrive_utils.py | 110 ++-- ironic/conductor/deployments.py | 24 + ironic/conductor/local_rpc.py | 114 ++++ ironic/conductor/manager.py | 152 ++++- ironic/conductor/rpc_service.py | 2 +- ironic/conductor/rpcapi.py | 65 +- ironic/conductor/servicing.py | 78 ++- ironic/conductor/steps.py | 54 +- ironic/conductor/utils.py | 61 +- ironic/conf/__init__.py | 2 + ironic/conf/api.py | 41 ++ ironic/conf/conductor.py | 115 +++- ironic/conf/irmc.py | 3 + ironic/conf/json_rpc.py | 7 +- ironic/conf/local_rpc.py | 39 ++ ironic/conf/opts.py | 1 + ironic/conf/redfish.py | 19 + ironic/console/websocketproxy.py | 18 +- ironic/drivers/base.py | 10 +- ironic/drivers/modules/agent_base.py | 5 +- ironic/drivers/modules/deploy_utils.py | 12 +- ironic/drivers/modules/ipmitool.py | 1 + ironic/drivers/modules/irmc/common.py | 3 +- ironic/drivers/modules/network/noop.py | 2 - ironic/drivers/modules/redfish/firmware.py | 60 +- ironic/drivers/modules/redfish/firmware_utils.py | 5 +- ironic/drivers/modules/redfish/inspect.py | 8 +- ironic/drivers/modules/redfish/management.py | 106 +++- ironic/drivers/modules/redfish/utils.py | 42 +- ironic/drivers/snmp.py | 6 + ironic/drivers/utils.py | 125 +++- .../api/controllers/v1/test_inspection_rule.py | 8 + .../drivers/modules/inspector/test_interface.py | 4 - .../unit/drivers/modules/redfish/test_boot.py | 125 ++-- .../unit/drivers/modules/redfish/test_firmware.py | 162 ++++- .../drivers/modules/redfish/test_firmware_utils.py | 72 +++ .../unit/drivers/modules/redfish/test_inspect.py | 106 +++- .../drivers/modules/redfish/test_management.py | 699 +++++++++++++++------ .../unit/drivers/modules/redfish/test_utils.py | 10 + ...pi-call-inspection-action-985aee4347ed9217.yaml | 36 ++ ...c-clock-clean-verify-step-6b70b04a618bf6e1.yaml | 17 + ...ify-ca-opt-for-driver-cfg-72284de9b2acd1ab.yaml | 8 + ...face-name-to-inspect-data-602cbf2a2e052ccd.yaml | 8 + .../address-CVE-2023-34064-f78745eab4f3d466.yaml | 5 + .../notes/api-validation-eface4a013c58a70.yaml | 6 + ...mated-cleaning-by-runbook-b5b4b1f0f51040b0.yaml | 43 ++ .../notes/bug-2092398-45f65c06a84d396a.yaml | 13 + .../notes/bug-2113877-fdb0c3a6ed8ee363.yaml | 5 + ...graceful-shutdown-timeout-db26a9194cf27bc2.yaml | 16 + ...consider-null-mtu-invalid-7fb35b7e85c8fc74.yaml | 10 + ...onsistent-ramdisk-configs-6a37ef69bf73cd2e.yaml | 38 ++ ...rface-support-nic-updates-429f3c6f62f9a0d4.yaml | 5 + ...n-rules-schema-validation-5cac6058d12ce030.yaml | 9 + releasenotes/notes/localrpc-403d72535e3e0048.yaml | 9 + ...-dynamic-step-based-flows-f0ef2f066f5d8127.yaml | 12 + ...-json-rpc-out-of-eventlet-4ef744d7601111d6.yaml | 21 + .../notes/remove-rootwrap-575dd46a25bbfc37.yaml | 9 + ...ace-metadata-when-invalid-c10a8c5add9151c8.yaml | 2 +- ...itial-reboot-into-ramdisk-c1840524832435c2.yaml | 7 + .../snmp-driver-deprecation-ac612cb6c9412e1e.yaml | 10 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 33 +- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 159 ----- requirements.txt | 8 +- setup.cfg | 7 +- zuul.d/ironic-jobs.yaml | 238 ++++++- zuul.d/project.yaml | 20 +- 133 files changed, 4541 insertions(+), 1386 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index ecfb0cbe4..028e209a9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -17,2 +16,0 @@ oslo.db>=9.1.0 # Apache-2.0 -# TODO(dtantsur): remove rootwrap when we no longer provide ironic-rootwrap CLI -oslo.rootwrap>=5.8.0 # Apache-2.0 @@ -33 +31 @@ jsonpatch>=1.16 # BSD -Jinja2>=3.0.0 # BSD License (3 clause) +Jinja2>=3.1.6 # BSD License (3 clause) @@ -43 +41 @@ openstacksdk>=0.99.0 # Apache-2.0 -sushy>=4.8.0 +sushy>=5.7.0 @@ -51,0 +50,2 @@ PyYAML>=6.0.2 # MIT +cheroot>=10.0.1 # BSD +cryptography>=2.3 # BSD/Apache-2.0

1 0

futurist 3.2.0
by no-reply＠openstack.org 06 Aug '25

06 Aug '25

We are jazzed to announce the release of: futurist 3.2.0 The source is available from: https://opendev.org/openstack/futurist Download the package from: https://pypi.org/project/futurist For more details, please see below. 3.2.0 ^^^^^ New Features * Adds a new "DynamicThreadPoolExecutor" that can resize (grow or shrink) its pool based on demand. As new work is scheduled on the executor, it will try to keep the proportion of busy threads within the provided range (between 40% and 80% by default). The motivation is to provide a scalable alternative to "GreenThreadPoolExecutor". Changes in futurist 3.1.1..3.2.0 -------------------------------- 9ea9a00 Use consistent validation error message for worker args 53b25c7 Remove sleeps from DynamicThreadPoolExecutor tests 679355a Add DynamicThreadPoolExecutor that resizes itself 367ecab Fix ThreadWorker.stop to stop only this worker 44ca7f1 Provide insights into the state of ThreadPoolExecutor 20ea4ca Trivial: avoid noqa in __init__.py 31f9614 add pyproject.toml to support pip 23.1 f0e4764 Drop explicit dependency on python-subunit bcbb4f3 tox: Remove basepython Diffstat (except docs and test files) ------------------------------------- futurist/__init__.py | 36 +++- futurist/_futures.py | 224 ++++++++++++++++++++- futurist/_thread.py | 33 ++- pyproject.toml | 3 + .../notes/dynamic-pool-ae8811eecd5f9009.yaml | 10 + test-requirements.txt | 1 - tox.ini | 2 - 9 files changed, 406 insertions(+), 40 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 1958ed2..3b08d5c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -5 +4,0 @@ coverage>=4.0 # Apache-2.0 -python-subunit>=1.0.0 # Apache-2.0/BSD

1 0