- Release-announce - lists.openstack.org

[neutron] neutron-fwaas 10.0.0 (ocata)
by no-reply＠openstack.org 22 Feb '17

22 Feb '17

We are jazzed to announce the release of: neutron-fwaas 10.0.0: OpenStack Networking FWaaS This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/neutron-fwaas/ For more details, please see below. Changes in neutron-fwaas 9.0.0.0rc1..10.0.0 ------------------------------------------- 0ee81f5 Revert "Netlink solution to improve FWaaS performance" e7be764 Pin to stable/ocata fb6915d Add functional test to run dsvm-functional 70ea2d4 Add functional test to run dsvm-functional a9511e9 Correct LOG message in fwaas_plugin_v2 8fcc4d2 Do not complain in firewall_deleted if the FW is already deleted 83ad04b Correct LOG message in fwaas_plugin_v2 80ee37a Update UPPER_CONSTRAINTS_FILE for stable/ocata 4052914 Update reno for stable/ocata 74921ae Update .gitreview for stable/ocata ff24916 Use addCleanup instead of tearDown d370a2e Switch to decorators.idempotent_id 4ba3f5c TrivialFix: Added link for modindex 0565b48 Optimize _make_firewall_group_dict_with_rules e7ebbeb Update policy.json for FWaaS v2 e62e53a Updated from global requirements 6d5afd1 Netlink solution to improve FWaaS performance 0f02e18 Fix validation in converting 'protocol' 8a86782 Fix tempest gate issue on FirewallNotFound exception 8a97921 Optimize _make_firewall_dict_with_rules db queries 8de85ab Updated from global requirements 0fe3b40 Fix 'ports' attribute for firewall_group 1903395 TrivialFix : Fix Port Error Message 89c9437 Fix AssertionError raised from _set_rules_for_policy 15b4f5b Use BRANCH constants from neutron_lib bdcaef8 Fix duplicated python version in classifier 16bc403 Track neutron-lib migration of agent extensions dd72452 Support neutron-lib hacking check H904 7ef9cb3 Updated from global requirements 4bdee1c [WIP]Remove no used attribute in FirewallPolicyRuleAssociation 2170ab3 Fix update fwr with ipv6 address 48289e8 Consistent update with router_info fe93fcd Fix a typo 7ae94e9 Remove httplib2 useless requirement 962ba14 Updated from global requirements 4e746b9 Enable coverage report in console output c07616f Check error message returned by the system 58417e5 Fix PENDING_UPDATE state when update exist no policy fw_group with ports 27b0fff Privsep configuration for neutron-fwaas 5f980e8 Updated from global requirements b7db6f7 Not allow to update icmp fw_rule with port e77740d Use neutron-lib and fwaas constants instead of neutron c6846c3 Updated from global requirements 18727e0 Tempest Scenario tests for FWaaS V2 f769759 Docs: fix Devstack config documentation rendering 4fe93bb Changed the home-page link 37709b3 Adding validation protocol parameters when updating firewall rules c3d3d6c Updated from global requirements bc36296 neutron-lib cleanup in neutron-fwaas fffd6bc Fix removing rule_association on updating a policy daf0c4a Add os-testr to test requirements 351774d Use ExtensionDescriptor from neutron-lib 9c859f9 Use DB field sizes instead of _MAX_LEN constants b51eeae Remove PLURALS 0f8b443 Show team and repo badges on README 8ab2725 Reenable FWaaS v2 tempest tests 8af9d55 Add a variant of gate hook script 642e09d Revert "Set NETWORK_API_EXTENSIONS in fwaas devstack plugin" 7880f27 FWaaS v2 Tempest API tests 8bf87a0 Set NETWORK_API_EXTENSIONS in fwaas devstack plugin cd59240 Use TimeoutException from tempest.lib f7c7d6b Updated from global requirements 2b548d8 Switch to using plugins directory in lieu of neutron manager 7931610 Updated from global requirements 4e615b1 Replaces uuid.uuid4 with uuidutils.generate_uuid() e4851b3 Add smoke tests to neutron-fwaas 2dbe899 Remove unused code e3a742a Add developer documentation to FWaaS cadd0e3 Updated from global requirements 7de8441 Fix fwaas_v2 driver internal error when restart l3 agent 4ae1c26 Remove last vestiges of oslo-incubator 7be3a8f Updated from global requirements ea2e87e Remove unnecessary neutron agent config reference 27f3bbc Remove import of neutron.extensions a3c8021 Updated from global requirements fa1db21 Add Python 3.5 classifier and venv aabd3a4 Catch the integrityError when update firewall group with non exist port 7fd0ea3 Updated from global requirements c93fbf7 Migrate references from neutron to neutron-lib 4ce07ca Fix UnboundLocalError during update firewall group. da5de3c Fix typo in comment 192476f Refactor of _convert_fwaas_to_iptables_rule and dependencies 54ffa6f Updated from global requirements b80de37 Deal with the '-m protocol' flag in iptables FwAAS v1 and v2 13168c0 Enable release notes translation 26a7f38 Fix periodic-neutron-fwaas-pyXX-with-neutron-lib-master jobs 78da7cf Updated from global requirements e9ab56b Updated from global requirements 32fbec3 Remove reference to third-party drivers in readme 469e2e3 Fix import path for l3_config 2edad4e Updated from global requirements a66f3a6 Add devstack plugin support for fwaas v2 9727aac Fix an argument for an exception message 2a4cffb gate_hook: Fix INSTALL_MYSQL_ONLY != True case 9caf4d0 Fix KeyError when fw rule associated with a policy is updated 5abde67 Updated from global requirements 7978a95 Check for _interfaces in updated_router 867a4f1 Add neutron-fwaas in-tree documentation 795afd7 Update reno for stable/newton f9e8daa Validation of router_ids insertion with column selection Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pylintrc | 7 +- README.rst | 12 +- devstack/README.rst | 39 ++- devstack/lib/l2_agent | 16 ++ devstack/lib/l3_agent | 16 ++ devstack/plugin.sh | 46 ++- devstack/settings | 3 +- etc/neutron/policy.d/neutron-fwaas.json | 54 +++- etc/neutron/rootwrap.d/fwaas-privsep.filters | 7 + neutron_fwaas/common/fwaas_constants.py | 2 + neutron_fwaas/db/firewall/firewall_db.py | 42 +-- neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 79 ++++-- .../liberty/contract/67c8e8d61d5_initial.py | 4 +- .../versions/liberty/expand/c40fbb377ad_initial.py | 4 +- neutron_fwaas/db/models/head.py | 4 +- neutron_fwaas/extensions/firewall.py | 44 ++- neutron_fwaas/extensions/firewall_v2.py | 59 ++-- .../extensions/firewallrouterinsertion.py | 2 +- .../agents/l3reference/firewall_l3_agent.py | 60 ++-- .../agents/l3reference/firewall_l3_agent_v2.py | 89 +++--- .../firewall/drivers/linux/iptables_fwaas.py | 75 +++-- .../firewall/drivers/linux/iptables_fwaas_v2.py | 76 +++-- neutron_fwaas/services/firewall/fwaas_plugin.py | 86 +++--- neutron_fwaas/services/firewall/fwaas_plugin_v2.py | 88 ++++-- .../unit/db/firewall/v2/test_firewall_db_v2.py | 147 ++++++++-- .../agents/l3reference/test_firewall_l3_agent.py | 23 +- .../l3reference/test_firewall_l3_agent_v2.py | 77 ++++- .../firewall/drivers/linux/test_iptables_fwaas.py | 9 +- .../drivers/linux/test_iptables_fwaas_v2.py | 9 +- .../unit/services/firewall/test_fwaas_plugin.py | 122 +++++--- .../unit/services/firewall/test_fwaas_plugin_v2.py | 228 +++++++++++++-- releasenotes/source/conf.py | 3 + releasenotes/source/index.rst | 4 +- releasenotes/source/newton.rst | 6 + releasenotes/source/ocata.rst | 6 + requirements.txt | 22 +- setup.cfg | 13 +- test-requirements.txt | 15 +- tools/check_unit_test_structure.sh | 3 +- tools/install_venv.py | 72 ----- tools/install_venv_common.py | 172 ------------ tools/ostestr_compat_shim.sh | 8 + tools/tox_install.sh | 2 +- tools/with_venv.sh | 19 -- tox.ini | 6 +- 71 files changed, 2265 insertions(+), 832 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3a3316c..fed35bd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=1.6 # Apache-2.0 +pbr>=1.8 # Apache-2.0 @@ -7,2 +7 @@ eventlet!=0.18.3,>=0.18.2 # MIT -httplib2>=0.7.5 # MIT -netaddr!=0.7.16,>=0.7.12 # BSD +netaddr!=0.7.16,>=0.7.13 # BSD @@ -10 +9 @@ SQLAlchemy<1.1.0,>=1.0.10 # MIT -alembic>=0.8.4 # MIT +alembic>=0.8.10 # MIT @@ -12,5 +11,5 @@ six>=1.9.0 # MIT -neutron-lib>=0.4.0 # Apache-2.0 -oslo.config>=3.14.0 # Apache-2.0 -oslo.db!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0 -oslo.log>=1.14.0 # Apache-2.0 -oslo.messaging>=5.2.0 # Apache-2.0 +neutron-lib>=1.1.0 # Apache-2.0 +oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 +oslo.db>=4.15.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 +oslo.messaging>=5.14.0 # Apache-2.0 @@ -19,2 +18,3 @@ oslo.service>=1.10.0 # Apache-2.0 -oslo.utils>=3.16.0 # Apache-2.0 - +oslo.utils>=3.18.0 # Apache-2.0 +oslo.privsep>=1.9.0 # Apache-2.0 +pyroute2>=0.4.12 # Apache-2.0 (+ dual licensed GPL2) diff --git a/test-requirements.txt b/test-requirements.txt index 595767d..fa213cd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking<0.11,>=0.10.0 -coverage>=3.6 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -10,3 +10,3 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -requests-mock>=1.0 # Apache-2.0 -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +requests-mock>=1.1 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0 @@ -13,0 +14 @@ oslo.concurrency>=3.8.0 # Apache-2.0 +os-testr>=0.8.0 # Apache-2.0 @@ -18 +19 @@ testscenarios>=0.4 # Apache-2.0/BSD -WebOb>=1.2.3 # MIT +WebOb>=1.6.0 # MIT @@ -21,2 +22,2 @@ oslotest>=1.10.0 # Apache-2.0 -reno>=1.8.0 # Apache2 -PyMySQL!=0.7.7,>=0.6.2 # MIT License +reno>=1.8.0 # Apache-2.0 +PyMySQL>=0.7.6 # MIT License

1 0

[neutron] neutron-dynamic-routing 10.0.0 (ocata)
by no-reply＠openstack.org 22 Feb '17

22 Feb '17

We are psyched to announce the release of: neutron-dynamic-routing 10.0.0: Neutron Dynamic Routing This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/neutron-dynamic-routing/ For more details, please see below. Changes in neutron-dynamic-routing 9.0.0.0rc1..10.0.0 ----------------------------------------------------- 9869b08 Fix broken doc links 353095f Switch to decorators.idempotent_id 6ef114c Renamed [BGP] config section to [bgp] 5aa7d9a tempest plugin: Don't use the same name as neutron f74bc50 Updated from global requirements e3f1f4d Use neutron-lib portbindings api-def d34f1f1 Updated from global requirements 3aa73ef Don't override min_l3_agents_per_router in tests b359c92 Enable gate_hook for tempest api test d92b1e7 Gracefully withdraw the floating IP bgp route dffe6f9 Removes unnecessary utf-8 encoding a04a440 Updated from global requirements 6468cb0 Replaces uuid.uuid4 with uuidutils.generate_uuid() 9dc8c1a Fix ipv6 transport failure caused by Ryu 4.9 and above 1da583f Updated from global requirements f972580 Allow to run multiple kind of tempest tests 0980985 Let the bgp_plugin to query floating IP bgp next_hop 130861b Use ExtensionDescriptor from neutron-lib e1bf619 Use DB field sizes instead of _MAX_LEN constants 59d082e Remove PLURALS 84aafd9 Show team and repo badges on README 4bf0a47 Switch to using neutron-lib's model_base 968820b Updated from global requirements 04538fc Switch to using plugins directory in lieu of neutron manager 635a4df Fix no attribute error for 'convert_to_boolean' e73b5d3 Updated from global requirements e8365ac Remove last vestiges of oslo-incubator 988648d fix the comments ec235b0 Add bits to run neutron-lib periodic test successfully 08bb306 Updated from global requirements 8388045 fix description, tenant to project 239577c fix the comments error 29882d2 Removing Alembic migration devref document 3ec9cad Updated from global requirements a683244 Replace 'MagicMock' with 'Mock' dc6c2c6 Changed the home-page link 0f799a3 Update module path of RPC classes f959395 Drop use of neutron's eventlet utility function e7e66e5 Updated from global requirements 663f559 Enable release notes translation 1ecb204 Updated from global requirements f41dcd3 pep8: switched to neutron-lib hacking checks ec4d026 Update reno for stable/newton b4c840d Stop using _create_or_update_agent 7514a4f Updated from global requirements Diffstat (except docs and test files) ------------------------------------- .pylintrc | 7 +- README.rst | 9 + devstack/lib/dr | 4 +- .../api/rpc/agentnotifiers/bgp_dr_rpc_agent_api.py | 4 +- .../api/rpc/handlers/bgp_speaker_rpc.py | 6 +- neutron_dynamic_routing/cmd/eventlet/__init__.py | 5 +- neutron_dynamic_routing/db/bgp_db.py | 71 ++++- neutron_dynamic_routing/db/migration/README | 2 +- .../db/migration/models/head.py | 2 +- neutron_dynamic_routing/extensions/bgp.py | 20 +- .../extensions/bgp_dragentscheduler.py | 14 +- .../services/bgp/agent/bgp_dragent.py | 11 +- .../services/bgp/agent/driver/ryu/driver.py | 14 +- .../services/bgp/agent/driver/utils.py | 13 + neutron_dynamic_routing/services/bgp/bgp_plugin.py | 16 +- .../services/bgp/common/opts.py | 2 +- .../api/test_bgp_speaker_extensions_negative.py | 121 -------- .../tempest/api/test_bgp_speaker_extensions.py | 326 +++++++++++++++++++++ .../api/test_bgp_speaker_extensions_negative.py | 122 ++++++++ .../unit/api/rpc/handlers/test_bgp_speaker_rpc.py | 9 +- .../unit/services/bgp/agent/test_bgp_dragent.py | 27 +- .../unit/services/bgp/driver/ryu/test_driver.py | 28 ++ releasenotes/source/conf.py | 4 +- releasenotes/source/index.rst | 1 + releasenotes/source/newton.rst | 6 + requirements.txt | 18 +- setup.cfg | 4 +- test-requirements.txt | 13 +- tools/install_venv.py | 72 ----- tools/install_venv_common.py | 172 ----------- tools/ostestr_compat_shim.sh | 8 + tools/with_venv.sh | 19 -- tox.ini | 5 +- 45 files changed, 958 insertions(+), 858 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 0fa81a5..7eaf4cb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=1.6 # Apache-2.0 +pbr>=1.8 # Apache-2.0 @@ -8 +8 @@ httplib2>=0.7.5 # MIT -netaddr!=0.7.16,>=0.7.12 # BSD +netaddr!=0.7.16,>=0.7.13 # BSD @@ -10 +10 @@ SQLAlchemy<1.1.0,>=1.0.10 # MIT -alembic>=0.8.4 # MIT +alembic>=0.8.10 # MIT @@ -12,5 +12,5 @@ six>=1.9.0 # MIT -neutron-lib>=0.4.0 # Apache-2.0 -oslo.config>=3.14.0 # Apache-2.0 -oslo.db>=4.10.0 # Apache-2.0 -oslo.log>=1.14.0 # Apache-2.0 -oslo.messaging>=5.2.0 # Apache-2.0 +neutron-lib>=1.1.0 # Apache-2.0 +oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 +oslo.db>=4.15.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 +oslo.messaging>=5.14.0 # Apache-2.0 @@ -19 +19 @@ oslo.service>=1.10.0 # Apache-2.0 -oslo.utils>=3.16.0 # Apache-2.0 +oslo.utils>=3.18.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 292eef3..eea2745 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking<0.12,>=0.11.0 # Apache-2.0 -coverage>=3.6 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -10,3 +10,3 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -requests-mock>=1.0 # Apache-2.0 -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +requests-mock>=1.1 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0 @@ -13,0 +14 @@ oslo.concurrency>=3.8.0 # Apache-2.0 +os-testr>=0.8.0 # Apache-2.0 @@ -18 +19 @@ testscenarios>=0.4 # Apache-2.0/BSD -WebOb>=1.2.3 # MIT +WebOb>=1.6.0 # MIT @@ -21 +22 @@ oslotest>=1.10.0 # Apache-2.0 -reno>=1.8.0 # Apache2 +reno>=1.8.0 # Apache-2.0

1 0

[freezer] freezer-web-ui 4.0.0 (ocata)
by no-reply＠openstack.org 22 Feb '17

22 Feb '17

We are pumped to announce the release of: freezer-web-ui 4.0.0: Freezer - Backup as a Service User Interface This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/freezer-web-ui/ For more details, please see below. Changes in freezer-web-ui 3.0.0..4.0.0 -------------------------------------- f2ca898 Remove link to modindex ac7908c Remove the redundant "required=True" 7fb16fa Use 'trimmed' for blocktrans in html page 7343bc4 Updated from global requirements 6de8df0 Add the missing name in confirm delete modal 3a3441f Fix some synctactic markup errors 4c7386d Optimize create backup action 4756f54 Add hyperlink for the "API registration" 99bd2a6 Imported Translations from Zanata 830f3c2 Removes unnecessary utf-8 coding f25a7c8 Restore nova from UI 4efa3a0 Fix saving edited session info successfully but shows original values. f86f5f4 Updated from global requirements b1bc327 Replaces uuid.uuid4 with uuidutils.generate_uuid() 7302172 Fix listing backups failed with using non-existing method. fbd1d3e Fix label text b81b540 Switch to python-freezerclient 62767d4 Show team and repo badges on README 40ebe1b Replace LOG.warn with LOG.warning 42eb07b Remove logging import unused ad88493 Replace directly import of logging with import oslo_log 3931b73 Don't include openstack/common in flake8 exclude list 6c40994 Use upper-constraints for tox envs c5599b9 Run normal tests instead of tempest tests in gate jobs 9092213 Install python-freezerclient while using devstack plugin da003a7 Added gate_hook.sh to devstack plugin f008c9d HTML-escape values written to output 624d1b1 Updated from global requirements da5f676 Remove redundant Freezer in README.rst Diffstat (except docs and test files) ------------------------------------- README.rst | 21 +- devstack/gate_hook.sh | 33 + devstack/lib/freezer-web-ui | 6 + devstack/plugin.sh | 1 + devstack/settings | 5 + disaster_recovery/actions/tables.py | 8 +- .../actions/templates/actions/_action.html | 4 +- .../actions/templates/actions/_advanced.html | 6 +- .../actions/templates/actions/_rules.html | 4 +- .../actions/templates/actions/_snapshot.html | 8 +- disaster_recovery/actions/views.py | 4 - disaster_recovery/actions/workflows/action.py | 41 +- disaster_recovery/api/api.py | 94 +-- disaster_recovery/backups/tables.py | 5 - disaster_recovery/backups/views.py | 4 - disaster_recovery/backups/workflows/restore.py | 9 +- disaster_recovery/clients/tables.py | 5 - disaster_recovery/clients/views.py | 4 - disaster_recovery/jobs/tables.py | 5 - disaster_recovery/jobs/templates/jobs/_info.html | 8 +- disaster_recovery/jobs/views.py | 5 - disaster_recovery/jobs/workflows/actions.py | 5 - disaster_recovery/jobs/workflows/create.py | 10 +- disaster_recovery/jobs/workflows/update_actions.py | 5 - disaster_recovery/jobs/workflows/update_job.py | 8 +- disaster_recovery/locale/de/LC_MESSAGES/django.po | 806 +++++++++++++++++++++ .../locale/en_GB/LC_MESSAGES/django.po | 7 +- .../locale/zh_CN/LC_MESSAGES/django.po | 7 +- disaster_recovery/sessions/tables.py | 6 - disaster_recovery/sessions/views.py | 5 - disaster_recovery/sessions/workflows/attach.py | 11 +- disaster_recovery/sessions/workflows/create.py | 7 +- .../static/freezer/js/freezer.actions.action.js | 18 +- .../static/freezer/js/freezer.jobs.sortable.js | 26 +- .../static/freezer/js/freezer.restore.js | 17 +- disaster_recovery/utils.py | 4 +- requirements.txt | 1 + test-requirements.txt | 12 +- tox.ini | 6 +- 41 files changed, 1025 insertions(+), 219 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 65c06ef..dcd2e9d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,0 +5 @@ Django<1.9,>=1.8 # BSD +python-freezerclient>=1.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 6a2db8d..72419a1 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking<0.12,>=0.11.0 # Apache-2.0 -coverage>=3.6 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -9,2 +9,2 @@ mox>=0.5.3 # Apache-2.0 -mox3>=0.7.0 # Apache-2.0 -oslo.config>=3.14.0 # Apache-2.0 +mox3!=0.19.0,>=0.7.0 # Apache-2.0 +oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 @@ -15,2 +15,2 @@ unittest2 # BSD -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0 @@ -26 +26 @@ django-compressor>=2.0 # MIT -django-openstack-auth>=2.4.0 # Apache-2.0 +django-openstack-auth>=3.1.0 # Apache-2.0

1 0

[horizon] horizon 11.0.0 (ocata)
by no-reply＠openstack.org 22 Feb '17

22 Feb '17

We high-spiritedly announce the release of: horizon 11.0.0: OpenStack Dashboard This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/horizon/ For more details, please see below. 11.0.0 ^^^^^^ The Flavor panel now may be configured to use either the legacy or Angular code. In an effort to establish Angular conventions, use the framework's toastService rather than the legacy horizon.alert(...) in client-side code. horizon.alert is still used by the django messaging framework, so horizon.messages.js still exists. New Features ************ * Added Keystone to Keystone (K2K) federation support in Horizon. If Keystone is configured with K2K and has service providers, the list of Keystone providers will appear in a dropdown. In local_settings.py you can optionally set the identity provider display name with "KEYSTONE_PROVIDER_IDP_NAME" or set the provider id that is used to compare with the other service providers "KEYSTONE_PROVIDER_IDP_ID". [blueprint k2k-horizon (https://blueprints.launchpad.net/horizon/+spec/k2k-horizon) * The hard-coded run_tests commands for extracting translatable strings and updating message catalogs have been ported to django management commands as extract_messages and update_catalog. These accept several parameters to make them easier to use with downstream customisations and string modifications, but the default behaviour is the same as before. * The Access & Security panel's tabs have been moved to their own panels for clearer navigation and better performance. API Access and Key Pairs now reside in the Compute panel group. Floating IPs and Security Groups are now in the Network panel group. * Download buttons for OpenStack RC files have been added to the user dropdown menu in the top right of Horizon. * Implements the "filter first" functionality for identity panels such as projects, users, groups and roles. The filter first functionality is described in <https://blueprints.launchpad.net/horizon/+spec /admin-views-filter- first>` * ANGULAR_FEATURES now allows for a key 'flavors_panel' to be specified as True or False indicating whether the Angular version of the panel is enabled. * Integration tests for Flavor features may also be toggled in openstack_dashboard/test/integration_tests/horizon.conf using the 'panel_type' feature in the 'flavors' setting, either set to 'legacy' or 'angular' to match the enabled panel type. * A new Profiler panel in the Developer dashboard is introduced. It integrates osprofiler library (http://docs.openstack.org/developer/osprofiler/) into horizon, thus implementing blueprint openstack-profiler-at-developer-dashboard (https://blueprints.launchpad.net/horizon/+spec/openstack-profiler- at-developer-dashboard). Initially profiler is disabled. To enable it the value "OPENSTACK_PROFILER['enabled']" has to be "True". This in turn can be achieved by copying files _9030_profiler_settings.py.example and _9030_profiler.py to opensta ck_dashboard/local/local_settings.d/_9030_profiler_settings.py and openstack_dashboard/local/enabled/_9030_profiler.py respectively. Also, by default it expects MongoDB cluster to be present on the same host where Keystone is located (say, in a Devstack VM). But it also can be configured with params with "OPENSTACK_PROFILER['notifier_connection_string]'" and "OPENSTACK_PROFILER['receiver_connection_string']" values. MongoDB should be installed manually (https://docs.mongodb.com/manual/tutorial/install-mongodb-on-ubuntu /#install-mongodb-community-edition) and allowed to receive requests on 0.0.0.0 interface. Upgrade Notes ************* * The "TEMPLATE_*" settings have been replaced with a "TEMPLATE" dict. This will likely cause issues when porting settings to this version of Horizon. The TEMPLATE_DEBUG setting has been removed and is tied to the DEBUG setting now. A detailed explanation of this dict can be found at https://docs.djangoproject.com/en/1.10/ref/settings/#templates * The "is_authenticated()" and "is_anonymous()" functions in Django OpenStack Auth's "User" class are properties when running under Django 1.10, and no longer take a margin parameter. * The logos in Horizon (previously logo-splash.png and logo.png) now load SVG files instead of PNG. The default logos have been updated to reflect the new OpenStack branding. * LBaaS v1 dashboard has been removed. LBaaS v1 feature was removed from neutron-lbaas in Newton, but LBaaS v1 dashboard in Horizon has been kept only for backward compatibility in Newton release so that operators can upgrade Horizon first. Note that the Dashboard support for LBaaS v2 is provided as a Horizon plugin via neutron-lbaas- dashboard project. * The developer enabled files have been moved from "openstack_dashboard/enabled" to "openstack_dashboard/contrib/developer/enabled". To enable them, copy into "openstack_dashboard/local/enabled" and set "DEBUG = True". * Any past use of the Django based Swift UI is no longer supported and the code is being removed. The new angularJS based version should be used instead. * The Angular Bootstrap upgrade contains a breaking change as the directives and services in this library were renamed. See https://github.com/angular-ui/bootstrap/wiki/Migration-guide-for- prefixes Deprecation Notes ***************** * The run_tests.sh script is now deprecated and all functionality has been provided by either tox or manage.py. run_tests will be removed in Queens (13.0). * The initScope method for action services has been deprecated, with the new method initAction added which does not get passed a scope. The allowed and perform method are now passed a scope for context in addition to the first item/items argument. The "scope" parameter to the WizardModalService modal() method has also been deprecated, and will be ignored in a future release of Horizon. * The function fix_auth_url_version() should be removed from openstack_auth library as soon as Horizon no longer needs it. The replacement function is fix_auth_url_version_prefix() which returns a fixed url and a boolean flag indicating if the url was actually fixed. Having a separate flag allows to emit more precise warning messages about inconsistencies in Keystone endpoint URL. * The telemetry code in Horizon has been deprecated and disabled for several releases now. The code has now been removed from the tree. * Removing formerly deprecated Swift UI code that was replaced with an improved Angular version in Mitaka. * All previous instances of horizon.alert(...) used by client-side have been replaced with horizon.toast. Alert messages via horizon.alert(...) should be avoided when writing new JavaScript code. horizon.toast.add('error', gettext(...)) should be used instead. Bug Fixes ********* * [bug 1618235] User can now delete all characters typed in input search without causing the selected facet to disappear when the last character is deleted. * [bug 1635505] Horizon now properly allows to use arrow keys inside of the input search, without triggering a new text search that refreshes the content of the table below. * There will no longer be any "WARNING" messages regarding the developer panels in logs. Other Notes *********** * Menu follows the search input position as the user adds more facets * XStatic-Angular updated from 1.4.10.1 to 1.5.8.0 * XStatic-Angular-Bootstrap updated from 0.11.0.0 to 2.2.0.0 * XStatic-Angular-Gettext updated from 2.1.0.2 to 2.3.8.0 * XStatic-Bootswatch updated from 3.3.6.0 to 3.3.7.0 * XStatic-D3 updated from 3.1.6.2 to 3.5.17.0 * XStatic-Font-Awesome updated from 4.5.0.0 to 4.7.0.0 * XStatic-JSEncrypt updated from 2.0.0.2 to 2.3.1.0 * XStatic-Roboto-Fontface updated from 0.4.3.2 to 0.5.0.0 Changes in horizon 10.0.0.0rc1..11.0.0 -------------------------------------- 30d0a31 Use domain_context not effective domain to display domains list 1227d3e Disentangle domain context from effective domain bef9bfe Imported Translations from Zanata be7e90f Update UPPER_CONSTRAINTS_FILE for stable/ocata e95a154 Imported Translations from Zanata 5be9103 Updated from global requirements 7f67040 Imported Translations from Zanata 4686c02 Fix wrong min/max media queries for sidebar 74c5505 Fix ignored timezone value from local_settings facf9d3 Remove deprecated calls to novaclient.v2.contrib a8eae31 Check if user.token attribute exists f5aefa0 Fix reporting of profiler traces with multiple toplevels 4305ddd Pass the project domain ID to novaclient 8566120 Fix Hypervisors page 1189fb7 Update .gitreview for stable/ocata 0409080 i18n: The same use of args with ugettext_lazy 002bdf0 Release notes for XStatic updates ce7dc70 Imported Translations from Zanata e269806 Move Security Groups into its own panel 99849ad Move Floating IPs from Access & Security to panel 4f654e3 Imported Translations from Zanata 6cc7d0b Fixes typo in syntax of DataTables row_actions 1064803 Improve API Access Credentials template 7c4e85f Imported Translations from Zanata aa444a6 Add OpenStack RC Download buttons to user menu 6b2b226 Make API Access a panel under compute 60db026 wrong indentations 1a58a1f Make Key Pairs tab a panel under Compute 98b20e4 Imported Translations from Zanata 5e5c64d Imported Translations from Zanata 675d369 Imported Translations from Zanata 2e66521 Dashboard panels intermittently disappear when they are in the 'default' group. f3dd5b9 Updated from global requirements 41ee8c0 Fix TypeError in api/neutron.py b98a3a7 Remove log level adjustment in heat test data 9397311 Update default OpenStack branding across Horizon 8f2ac59 Updated from global requirements f9c6b43 Imported Translations from Zanata 20db9d9 Try to use 2.40 microversion for simple-tenant-usages 107bd08 Simple tenant usage pagination 3e15b53 Imported Translations from Zanata 90a9af2 Autogenerate container name correctly for vol backup 2f5a258 Fix issues on create network and create port modals 73f8675 Support to delete instance from network topology view 600620a Configuring number of apache processes b7c00ea Imported Translations from Zanata 5379945 Updated from global requirements 33fcd95 Implement "filter first" for identity panels 69eb05a Keystone to Keystone Federation Drop Down eddef8f Snapshot not selected by default when launching it from images a194157 Fix Angular tabs eb60a2a [flavor update] Fixing a flavor comparation issue 7116453 delete unused import a21b51e Fix alignment issues for nav-tabs and ul on details panels d3d89c9 Fake deprecated nova client properties d2ec7d3 use safer method splitlines() to replace split('\n') f321f6c Imported Translations from Zanata e152d39 New Identity NG Panels missing stuff in settings.py/rst 196cd93 Imported Translations from Zanata 12f3285 Containers list styling fix e766877 Imported Translations from Zanata e1f37f0 Imported Translations from Zanata 8743440 Prevent a "link" click on container trash icon 158a4c1 Imported Translations from Zanata 49a5e68 Add missing scheduler_hints to _optional_create cc94b0f Adding identity domains table fab662a Imported Translations from Zanata d4083d1 Fix spec file variable/ improve code coverage 0402102 Reuse Overview tab for Admin Volume Snapshots fea9751 Imported Translations from Zanata 5cb3703 Add Angular keystone user details use registry fa09d90 DOC Remove duplicated words 560f23a Add default common template to python table views 001c2a1 Adding identity ng-roles panel a167c37 Hide heatclient spam 83e3ff8 Remove duplicated modal_header statements 4c81bc2 Make evacuate target_host not required c1c84b7 Imported Translations from Zanata ca69e6a Remove trailing backtick 5bce9a0 Fix single policy rule handling 8e03e51 Revert "Add policy rules to project panels" 74a3856 Imported Translations from Zanata 870c9b7 Remove unused import 4174420 Imported Translations from Zanata 0de98e5 fix wrong path in doc e2cf94e Enable profiling of angular pages (with async requests) 87d307d Add Zun UI to Horizon Plugin Registry 46c2ad6 Add col-sm-12 to network modal error 59741bd Add policy rules to project panels dbe5020 fix some pylint warnings d179139 Imported Translations from Zanata c9034ec Remove shared checkbox for non-admin users when doing network things. 0a8094d Improve novaclient initialisation 30c3816 Revert "Fix the flicker of the log on button name" 04065cf Action-list: Update for ui bootstrap changes 2951758 Move js files into openstack_dashboard folder. 9524bb1 Imported Translations from Zanata 7b29869 Fix syntax error with settings in doc f09a9ce Use the new fix_auth_url_version_prefix() call c8f0553 Imported Translations from Zanata 2e659a6 Columns typo fixed c89633c Update for ui bootstrap changes 85d74cb Remove redundant parentheses a137570 When the api call failed, approprate failing message will be show 578b63b Resize instance error fixed. 124bbb3 AngularJS based panels page title updated beb821e Revert "Turn off angular template cache preloading when DEBUG=True" d85a5b4 remove to_dict method of Network in neutron.py 203bf03 Cleanup CSS on NG Create Image Modal 9c60011 NG Flavor Panel add filter facets f6b0beb Text and checkbox should align in "Create Project" form f565b2c Imported Translations from Zanata 51fe944 Replace six.iteritems(iter) with iter.items() f0dc5c3 Removes unnecessary utf-8 encoding cd2a790 The minimum volume size should be pre-populated 7e150b2 Make the form _clean_rule_custom method full-fledged 733709a Imported Translations from Zanata 9647195 UX: Bullets in Launch Instance Wizard don't have left-padding f8851fb Use assertGreater(len(x), 0) instead of assertTrue(len(x) > 0) d219f60 Turn off angular template cache preloading when DEBUG=True 8f58f66 hzResourceProperty can handle 'priority' attribute 981ee96 [trivial]Add support keys for OPENSTACK_NEUTRON_NETWORK in doc 3f1e0fa Allow OVA upload for images 691ab23 Simplify uuid without dashed 09336a0 remove unused string in neutron create subnet workflow 1b153ca Allow router panel to not break sidebar 019e549 Remove additional response.render() for tabs 13b9b84 Imported Translations from Zanata 1dc71e0 Reduce code duplication 371f463 Show team and repo badges on README 40e7353 Updated from global requirements b764160 Imported Translations from Zanata 2fbf3fb Fix a script error which is occurred when choosing no file 97b7aa8 Updated from global requirements e2f6b7d Angular images deactivate status fix 3485c80 Updated from global requirements 9265cdc Updated from global requirements b01c028 Add Apache 2.0 license to source file 97945b5 Wrap api calls with tracing decorators 4ceeef5 Add the Profiler panel to the Developer dashboard 7929859 Images table name updated to id when name is None eab9ea1 Imported Translations from Zanata a187ea1 Update path of JS coverage reports 6f8504d Bug fixes Magic Search e1ef708 Missing info on MELLON_IDP for mod_auth_mellon 36d1d1a Refactor tox & update docs 6585659 Update settings docs with using ANGULAR_FEATURES for dev 9963867 Enable sorting by size in containers pane 255de3d Use os.path.relpath in place of string.replace ac45574 Imported Translations from Zanata c1873ea Update floating IP tables instance URL check 23c482b Strip whitespace added to flavor name in create and update flavor. 2c104cc Make default domain usage consistent a909ed2 Add constraints support to run_tests.sh fca1dab implements: make twice list iterations into one Closes-Bug: 1644817 f5685eb Specify POLICY_CHECK_FUNCTION as a string 706298e ceilometerclient removed from requirements.txt 68d9e37 Imported Translations from Zanata f2eaafc Fix mox trapped errors 9181305 Note how to use local.conf in stable branches c0e30b7 Updated from global requirements f9b3bc7 Remove use of scope from action service b433419 Imported Translations from Zanata f1ef808 Rename Size column on instances tables to Flavor 837587f Improve Horizon nav sidebar c46b501 Imported Translations from Zanata 624ac8d Updated from global requirements 89d0304 Add i18n support to Quota.humanizeNumbers 15484a5 Trivial fixes for Swift UI df68cfa Remove local/enabled from test settings 1db5dbf Imported Translations from Zanata 4fe36b9 Amend Roboto font paths 00958cd Add generic session/cookie value getters/setters 706b92d Imported Translations from Zanata 3c02553 Updated from global requirements 1ca1a4c Magic Search in Angular Users table 43e9df8 Rework hardcoded policy in admin dash 965809f Revert "Comment out material theme for gate to proceed" 8b44576 Change icons in launch instance ng transfer 44132fa Fix issues with new roboto-font path changes 1a3ab89 Disable router and fip quotas when router is disabled 84c238d Revert "In Images Overview, dates should be properly formatted" 58a94c6 Comment out material theme for gate to proceed b8cacab Remove broken telemetry policy check e980382 Fix npm tests 24179c7 Imported Translations from Zanata 20ea82b Removing deprecate ceilometer code 9f75312 Removing deprecated Swift UI code 8c7c333 Consolidated common angular view b15645d Imported Translations from Zanata 670ef48 Updated from global requirements bf5e2d4 Imported Translations from Zanata f7b271d Normalise the path to resolve ../.. 4070697 Remove Unneeded API Calls, Functions 8c58cec Imported Translations from Zanata 1ee056f Update Angular Users Table use registry 36ed065 Link to the user details from action log 316fedf Make sure new password can not the same with old one 6519ce4 Get security groups of an instance using novaclient 016724d Set the placeholder attribute in forms.py 3d042a2 Correct installation command to include upper-constraints 55bd890 Document exception handling dd98e10 Provide the bones of profiler: api and middleware 06cc156 Imported Translations from Zanata 30011bf Updated from global requirements 4cfd243 Strip leading or trailing spaces from Instance names during update and create 82511ea Renamed bootstrap theme preview page b5934b8 Remove unnecessary variable assignment 7966258 Replaces uuid.uuid4 with uuidutils.generate_uuid() 8c17f76 Imported Translations from Zanata faa55c1 Migrate Swift to use ResourceType 9841990 Create common code for horizon.instances.js and horizon.firewalls.js 93eccd5 Imported Translations from Zanata f8b5df9 Updated from global requirements 923e9b2 Imported Translations from Zanata 7ed2865 Updated from global requirements 55baf92 "Unable to retrieve Domain" incessant warning logs 18c90b4 Launch Instance: Creating new volume for image snapshot 6db8fd8 Add LOCALE_PATHS to settings b2ed775 Update Horizon's example local.conf 32eac39 Imported Translations from Zanata 5b998ed Imported Translations from Zanata c74d5d6 Imported Translations from Zanata 7014f2b Imported Translations from Zanata ae61289 Updated from global requirements a4af4e0 Add appropriate policy rules to admin images panel d7d59b8 Remove all_tenants flag in quota check b4e3ff1 Update customizing.rst with a how to use the NG registry 2ed2f32 Imported Translations from Zanata 5ff87d8 Updated from global requirements 85df9f4 Remove type field and type description for create volume from a snapshot d51e500 Imported Translations from Zanata 0a80626 Migrate Create Container to schema form 05a6b4a Updated from global requirements 71bb8ae Add upgrade notes for new REST_API_REQUIRED_SETTINGS 9f8a81a Default ethertype to IPv4 if Neutron's enable_ipv6 is false 18e96fc Imported Translations from Zanata 363001b Fix labels on subnet details panel ad728fa Render inaccessible ports as text versus links. 9caef64 Fix Port Security Enabled information 0b53bce Imported Translations from Zanata bba45a7 Fix typo 0446c92 Updated from global requirements 2f2222d Allow POLICY_CHECK_FUNCTION to be disabled 1cf2b29 Fix two closing tags on subnet details template 42e37f8 Imported Translations from Zanata 7e64a1c Drop LBaaS v1 dashboard 51410e5 Remove network name from create subnet error message 70d2059 Image listing by visibility fix 45ca5b2 Update the wording of date format on overview panel 69e18fc Server-side filtering Orchestration 780b1c4 Fixing typo in horizon widgets ea23856 Updated from global requirements d231186 Imported Translations from Zanata e483dd0 Project table has an extra Enabled column definition 276eaf3 OS_INTERFACE was errantly added to the V2 openrc d556a82 Clear cached selected items on swift objects table 735ef03 Fixing typo in release note f047962 Add the slaac ipv6 address mode without ra mode 14a9790 Imported Translations from Zanata 3a56958 Adds Policy Rules to Project Images panel e8e84c2 Flavors panel can switch to Angular 19e5f43 Minor updates to angularjs.rst 8130a79 Add Keystone Groups to REST API b2eb8de Imported Translations from Zanata 1d13a05 Remove hardcode of container_name in backups 6bde531 Minor release notes fix 5e4a31a Imported Translations from Zanata 822a44d Imported Translations from Zanata 8baf0b8 In Images Overview, dates should be properly formatted a2de341 Remove unnecessary translate mark 1f8022d Enable release notes translation 142cfab add ploop type to the list of image backends f0f7000 Fix logspam in django 1.9 and django 1.10 tests c30a1ea Fix for swift ui displaying infinite folders 8ce6e6c Update Glance sample policy file d9c9984 Drop the undesired executable bit from non-executable file f390c4a Add deprecation message to run_tests.sh d8c878f missing action_class in sample code 2bef59f Fix a typo in documentation e43fb80 Move browser support wiki page into the docs 4f96c01 Imported Translations from Zanata 5f81a7d Imported Translations from Zanata 0484faf Imported Translations from Zanata 447f631 Updated from global requirements be934e5 Make ResourceTypesTests skippable c669cf0 Imported Translations from Zanata 42ae3db Topology filter out non tenant ports 7d3073d Using /tmp for SECRET_KEY in tests 27a816c Imported Translations from Zanata 1b176db Updated from global requirements d2f7df4 Fix a typo 44afeac [Trivial]remove unnecessary commna f23b7d1 Fix tox cover to not fail 11e70e6 Updated from global requirements 244464b Behavioral fixes to Magic-Search 7f46e5d Enable volumes metadata update 92a265d Remove unused line from local_settings.py.example 17c984f Fixed serial console not appearing in horizon 9935d46 Imported Translations from Zanata 8887848 Fix unnecessary bullet point 53ae6d3 Fix Container details styles e01c54b i18n: Add Indonesian to the language list a6b2164 Imported Translations from Zanata b94f060 A following up patch for 'Added the pagination info at top of the table' ce3a0fb Fix the flicker of the log on button name 97d5435 doc: Update middleware API ref to include all middlewares 7d8d1fa Make "Detach Volume" in Instances page translatable 49c942d Add volume snapshot to boot source description cfa9ce4 Show tab label in Admin CreateSubnet/UpdateSubnet form f880f6c Turn on docs warning check in document generation 215ccba doc: Do not generate no source code reference 35d2bec Fix docstring warnings ee04fca Fix warnings in devref document b65b476 Added the pagination info at top of the table b6cdf34 Updated from global requirements 723e547 Fix Launch Instance without Cinder fbbe16f Move Developer enabled/ files to contrib b89c1ab Multiple integration test fixes 07185ec Fix the exapmle of how to use customization_module 3e590ea Hide shelve/unshelve actions of a locked instance for non-admin users 2425e6e Fix metadata removal b016b08 Fix the wrong usage of assertTrue 4abe3ef Fix typos in contributing.rst & policy.service.js 14ab4d1 Fixed inconsistent names set for BatchAction d99444b Display the right floating ip on LB disassociation 71301f8 test: Use appropriate test data in VolumeViewTests 2fec0a1 Fix the collection of integration tests artifacts 3488ab3 Fix compatibility issues with Django 1.10 3aeb73c Move past release notes under doc/ to releasenotes/ ff973d2 Imported Translations from Zanata 6436212 i18n: Avoid string concatenations to make translation life happier 5d64e2d Quota cleanup of dynamic methods 6609420 Fix getting the images list in Admin->Images 515dc27 Imported Translations from Zanata b68abc0 Edit unclosed div tag 4340fc2 Remove duplicated inappropriate 'translate' tag 90d7a3f Imported Translations from Zanata 32bb3d7 Update reno for stable/newton e42aaf6 Imported Translations from Zanata cf5650f Allow translator to control word order in delete confirm dialog 460a53f Server-side filtering for Instances (Project/Admin) 312731a Replace 'assertTrue(a in b)' with 'assertIn(a, b)' c2adfc7 py3:Remove six.iterXXX b2e99db Make flavor updating compatible with nova cli be6bcef Let Nova to pick availability zone if more than 1 65d9339 hide check box if need cb664ec Fixes traceback if group name attribute is missing 47c6bba Volume limits and floating ip graphic label consistency f2c0504 replace horizon.alert used by client-side with horizon.toast 89efd7f Fix jasmine test failures due to missing ngRoute, schema-form dep 212e8b8 Fix volume storage usage value 6b9dc6a Added policy checks for Project>Volumes Panel 0568f86 Add metadata in snapshot details page 5ea8482 Usage tables: Sort by disk properly 42ac50b Simplify chained comparison 577c169 Register keytone resource types 16b58d2 modified condition variable project_choices b1373e0 Reset flavors for other than "Boot from Image" source type. 9d732ab Remove repetition of "Attached to" in table 4b1cb06 take time zone into account d04fcc4 DataTable column level policy Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 +- .gitreview | 1 + README.rst | 2 + horizon/base.py | 17 +- horizon/browsers/views.py | 11 + horizon/exceptions.py | 2 +- horizon/forms/fields.py | 6 +- horizon/karma.conf.js | 19 +- horizon/locale/ca/LC_MESSAGES/django.po | 7 +- horizon/locale/cs/LC_MESSAGES/django.po | 46 +- horizon/locale/cs/LC_MESSAGES/djangojs.po | 189 +- horizon/locale/de/LC_MESSAGES/django.po | 43 +- horizon/locale/de/LC_MESSAGES/djangojs.po | 182 +- horizon/locale/en_AU/LC_MESSAGES/django.po | 60 +- horizon/locale/en_AU/LC_MESSAGES/djangojs.po | 195 +- horizon/locale/en_GB/LC_MESSAGES/django.po | 16 +- horizon/locale/en_GB/LC_MESSAGES/djangojs.po | 80 +- horizon/locale/es/LC_MESSAGES/django.po | 16 +- horizon/locale/es/LC_MESSAGES/djangojs.po | 100 +- horizon/locale/es_MX/LC_MESSAGES/django.po | 13 +- horizon/locale/fi_FI/LC_MESSAGES/django.po | 13 +- horizon/locale/fil/LC_MESSAGES/django.po | 7 +- horizon/locale/fr/LC_MESSAGES/django.po | 40 +- horizon/locale/fr/LC_MESSAGES/djangojs.po | 189 +- horizon/locale/hi/LC_MESSAGES/django.po | 13 +- horizon/locale/hi/LC_MESSAGES/djangojs.po | 182 - horizon/locale/hu/LC_MESSAGES/django.po | 7 +- horizon/locale/id/LC_MESSAGES/django.po | 34 +- horizon/locale/id/LC_MESSAGES/djangojs.po | 80 +- horizon/locale/it/LC_MESSAGES/django.po | 13 +- horizon/locale/it/LC_MESSAGES/djangojs.po | 77 +- horizon/locale/ja/LC_MESSAGES/django.po | 39 +- horizon/locale/ja/LC_MESSAGES/djangojs.po | 193 +- horizon/locale/ko_KR/LC_MESSAGES/django.po | 50 +- horizon/locale/ko_KR/LC_MESSAGES/djangojs.po | 92 +- horizon/locale/nl_NL/LC_MESSAGES/django.po | 7 +- horizon/locale/nl_NL/LC_MESSAGES/djangojs.po | 56 +- horizon/locale/pa_IN/LC_MESSAGES/django.po | 13 +- horizon/locale/pa_IN/LC_MESSAGES/djangojs.po | 56 +- horizon/locale/pl_PL/LC_MESSAGES/django.po | 104 +- horizon/locale/pl_PL/LC_MESSAGES/djangojs.po | 105 +- horizon/locale/pt/LC_MESSAGES/django.po | 13 +- horizon/locale/pt_BR/LC_MESSAGES/django.po | 81 +- horizon/locale/pt_BR/LC_MESSAGES/djangojs.po | 121 +- horizon/locale/ru/LC_MESSAGES/django.po | 45 +- horizon/locale/ru/LC_MESSAGES/djangojs.po | 123 +- horizon/locale/sl_SI/LC_MESSAGES/django.po | 7 +- horizon/locale/sr/LC_MESSAGES/django.po | 7 +- horizon/locale/sr/LC_MESSAGES/djangojs.po | 165 - horizon/locale/tr_TR/LC_MESSAGES/django.po | 83 +- horizon/locale/tr_TR/LC_MESSAGES/djangojs.po | 194 +- horizon/locale/zh_CN/LC_MESSAGES/django.po | 51 +- horizon/locale/zh_CN/LC_MESSAGES/djangojs.po | 87 +- horizon/locale/zh_TW/LC_MESSAGES/django.po | 79 +- horizon/locale/zh_TW/LC_MESSAGES/djangojs.po | 184 +- horizon/management/commands/startdash.py | 1 - horizon/middleware/base.py | 7 +- horizon/middleware/operation_log.py | 25 +- horizon/static/framework/conf/conf.js | 14 + .../conf/resource-type-registry.service.js | 13 +- .../conf/resource-type-registry.service.spec.js | 18 +- horizon/static/framework/framework.module.js | 14 + .../util/actions/action-result.service.js | 2 +- .../framework/util/bind-scope/bind-scope.spec.js | 14 + .../util/extensible/extensible.service.spec.js | 14 + .../static/framework/util/filters/filters.spec.js | 14 + horizon/static/framework/util/http/http.spec.js | 30 +- horizon/static/framework/util/util.module.js | 14 + .../framework/util/validators/validators.spec.js | 14 + .../framework/util/workflow/workflow.spec.js | 14 + .../widgets/action-list/actions.controller.js | 6 +- .../widgets/action-list/actions.directive.js | 68 +- .../widgets/action-list/actions.service.js | 2 +- .../widgets/action-list/split-button.html | 2 +- .../static/framework/widgets/details/details.html | 8 +- horizon/static/framework/widgets/form/decorator.js | 14 + .../framework/widgets/form/decorator.spec.js | 3 - .../widgets/form/modal-form.controller.js | 8 +- .../widgets/form/modal-form.controller.spec.js | 2 +- .../framework/widgets/form/modal-form.service.js | 6 +- .../widgets/form/modal-form.service.spec.js | 10 +- .../magic-search/magic-search.controller.js | 117 +- .../magic-search/magic-search.controller.spec.js | 123 +- .../widgets/magic-search/magic-search.html | 8 +- .../widgets/magic-search/magic-search.scss | 4 + .../modal-wait-spinner.directive.js | 14 + .../modal-wait-spinner.service.js | 20 +- .../modal-wait-spinner/modal-wait-spinner.spec.js | 14 +- .../widgets/modal/simple-modal.controller.js | 8 +- .../widgets/modal/simple-modal.service.js | 8 +- .../framework/widgets/modal/simple-modal.spec.js | 4 +- .../widgets/modal/wizard-modal.service.js | 20 +- .../widgets/modal/wizard-modal.service.spec.js | 2 +- .../framework/widgets/modal/wizard.controller.js | 18 +- .../widgets/modal/wizard.controller.spec.js | 10 +- .../property/hz-resource-property.controller.js | 7 + .../property/hz-resource-property.directive.js | 10 +- .../hz-resource-property.directive.spec.js | 65 + .../framework/widgets/table/hz-detail-row.html | 4 +- .../framework/widgets/table/hz-dynamic-table.html | 7 + .../widgets/table/hz-dynamic-table.spec.js | 10 +- .../widgets/table/hz-resource-table.controller.js | 2 +- .../transfer-table/transfer-table.controller.js | 4 +- .../transfer-table/transfer-table.example.html | 4 +- .../widgets/wizard/modal-container.controller.js | 8 +- .../framework/widgets/wizard/wizard.controller.js | 5 +- .../static/framework/widgets/wizard/wizard.spec.js | 2 +- .../horizon/js/angular/directives/serialConsole.js | 107 - horizon/static/horizon/js/horizon.communication.js | 14 + horizon/static/horizon/js/horizon.d3barchart.js | 14 + horizon/static/horizon/js/horizon.d3linechart.js | 17 +- horizon/static/horizon/js/horizon.d3piechart.js | 14 + horizon/static/horizon/js/horizon.datepickers.js | 14 + horizon/static/horizon/js/horizon.firewalls.js | 265 - .../horizon/js/horizon.flatnetworktopology.js | 619 -- horizon/static/horizon/js/horizon.forms.js | 37 +- horizon/static/horizon/js/horizon.formset_table.js | 14 + horizon/static/horizon/js/horizon.heattop.js | 14 + horizon/static/horizon/js/horizon.instances.js | 320 - horizon/static/horizon/js/horizon.js | 17 + horizon/static/horizon/js/horizon.lists.js | 144 + horizon/static/horizon/js/horizon.membership.js | 14 + horizon/static/horizon/js/horizon.messages.js | 14 + horizon/static/horizon/js/horizon.metering.js | 32 - horizon/static/horizon/js/horizon.modals.js | 22 +- .../static/horizon/js/horizon.networktopology.js | 1076 --- .../horizon/js/horizon.networktopologycommon.js | 149 - horizon/static/horizon/js/horizon.quota.js | 439 - horizon/static/horizon/js/horizon.selenium.js | 9 +- horizon/static/horizon/js/horizon.sidebar.js | 29 + horizon/static/horizon/js/horizon.tables.js | 20 +- .../horizon/js/horizon.tables_inline_edit.js | 22 +- horizon/static/horizon/js/horizon.tabs.js | 14 + horizon/static/horizon/js/horizon.templates.js | 14 + horizon/static/horizon/js/horizon.users.js | 14 + horizon/static/horizon/js/horizon.volumes.js | 72 - .../horizon/lib/jquery/jquery.bootstrap.wizard.js | 14 + horizon/tables/actions.py | 8 +- horizon/tables/base.py | 45 +- horizon/tables/views.py | 6 +- horizon/tabs/__init__.py | 1 + horizon/tabs/base.py | 4 + horizon/tabs/views.py | 10 - horizon/templates/auth/_splash.html | 2 +- horizon/templates/horizon/_sidebar.html | 28 +- .../templates/horizon/client_side/_confirm.html | 4 +- horizon/templates/horizon/common/_data_table.html | 18 +- .../horizon/common/_data_table_pagination.html | 17 + .../templates/horizon/common/_data_table_view.html | 3 + .../horizon/common/_detail_tab_group.html | 2 + horizon/templates/horizon/common/_form_errors.html | 4 +- .../common/_keystone_provider_selector.html | 20 + horizon/templates/horizon/common/_modal.html | 2 +- horizon/templates/horizon/common/_sidebar.html | 4 +- horizon/templates/horizon/common/_tab_group.html | 2 +- .../templates/horizon/common/_usage_summary.html | 2 +- .../common/_workflow_step_update_members.html | 4 +- horizon/templates/horizon/jasmine/jasmine.html | 3 - horizon/templatetags/breadcrumb_nav.py | 6 +- horizon/templatetags/horizon.py | 10 +- horizon/test/firefox_binary.py | 34 +- horizon/test/settings.py | 38 +- horizon/test/test_dashboards/cats/kittens/views.py | 12 + horizon/test/test_dashboards/cats/tigers/views.py | 12 + horizon/test/test_hacking.py | 60 +- horizon/utils/file_discovery.py | 2 +- horizon/utils/functions.py | 86 +- horizon/utils/memoized.py | 6 +- horizon/utils/settings.py | 28 + horizon/views.py | 17 +- horizon/workflows/base.py | 51 +- horizon/workflows/views.py | 2 +- openstack_dashboard/api/__init__.py | 4 - openstack_dashboard/api/base.py | 6 +- openstack_dashboard/api/ceilometer.py | 1345 --- openstack_dashboard/api/cinder.py | 99 +- openstack_dashboard/api/fwaas.py | 21 + openstack_dashboard/api/glance.py | 31 +- openstack_dashboard/api/heat.py | 39 +- openstack_dashboard/api/keystone.py | 99 +- openstack_dashboard/api/lbaas.py | 394 - openstack_dashboard/api/neutron.py | 107 +- openstack_dashboard/api/nova.py | 225 +- openstack_dashboard/api/rest/cinder.py | 96 + openstack_dashboard/api/rest/keystone.py | 18 + openstack_dashboard/api/rest/nova.py | 10 +- openstack_dashboard/api/rest/swift.py | 3 + openstack_dashboard/api/rest/utils.py | 11 +- openstack_dashboard/api/swift.py | 20 +- openstack_dashboard/api/vpn.py | 21 + openstack_dashboard/conf/ceilometer_policy.json | 6 - openstack_dashboard/conf/glance_policy.json | 31 +- openstack_dashboard/context_processors.py | 36 + openstack_dashboard/contrib/developer/dashboard.py | 4 +- .../contrib/developer/enabled/_9001_developer.py | 29 + .../contrib/developer/enabled/_9010_preview.py | 21 + .../developer/enabled/_9020_resource_browser.py | 20 + .../contrib/developer/enabled/_9030_profiler.py | 21 + .../contrib/developer/enabled/__init__.py | 0 .../contrib/developer/profiler/__init__.py | 0 .../contrib/developer/profiler/api.py | 132 + .../contrib/developer/profiler/middleware.py | 133 + .../contrib/developer/profiler/panel.py | 25 + .../profiler/templates/profiler/_mode_picker.html | 21 + .../profiler/templates/profiler/index.html | 49 + .../contrib/developer/profiler/urls.py | 24 + .../contrib/developer/profiler/views.py | 49 + .../contrib/developer/resource_browser/urls.py | 4 +- .../contrib/developer/resource_browser/views.py | 19 - .../static/dashboard/developer/developer.module.js | 7 +- .../static/dashboard/developer/developer.scss | 1 + .../developer/profiler/profiler.controller.js | 161 + .../developer/profiler/profiler.details.html | 17 + .../developer/profiler/profiler.directive.js | 87 + .../developer/profiler/profiler.module.js | 59 + .../dashboard/developer/profiler/profiler.scss | 5 + .../developer/profiler/profiler.trace-table.html | 20 + .../developer/profiler/profiler.tree-node.html | 28 + .../resource-browser-item.controller.js | 3 +- .../resource-browser/resource-browser.module.js | 7 +- .../theme-preview/theme-preview.directive.js | 6 +- .../developer/theme-preview/theme-preview.html | 4 +- .../contrib/developer/theme_preview/panel.py | 3 +- .../dashboards/admin/aggregates/panel.py | 1 + .../dashboards/admin/aggregates/tables.py | 4 +- openstack_dashboard/dashboards/admin/dashboard.py | 3 +- .../dashboards/admin/defaults/panel.py | 2 + .../dashboards/admin/defaults/workflows.py | 3 +- .../dashboards/admin/flavors/constants.py | 2 +- .../dashboards/admin/flavors/panel.py | 1 + .../admin/flavors/templates/flavors/index.html | 7 - .../dashboards/admin/flavors/urls.py | 26 +- .../dashboards/admin/flavors/views.py | 1 - .../dashboards/admin/flavors/workflows.py | 52 +- .../dashboards/admin/floating_ips/panel.py | 1 + .../dashboards/admin/floating_ips/tables.py | 4 +- .../floating_ips/templates/floating_ips/index.html | 7 - .../dashboards/admin/floating_ips/views.py | 6 +- .../dashboards/admin/hypervisors/compute/forms.py | 7 +- .../dashboards/admin/hypervisors/views.py | 3 +- .../dashboards/admin/images/panel.py | 2 + .../dashboards/admin/images/tables.py | 2 +- .../admin/images/templates/images/index.html | 7 - .../dashboards/admin/images/urls.py | 8 +- .../dashboards/admin/images/views.py | 6 - openstack_dashboard/dashboards/admin/info/panel.py | 4 + openstack_dashboard/dashboards/admin/info/tabs.py | 2 +- .../dashboards/admin/instances/panel.py | 3 +- .../dashboards/admin/instances/tables.py | 19 +- .../admin/instances/templates/instances/index.html | 7 - .../dashboards/admin/instances/views.py | 47 +- .../dashboards/admin/metadata_defs/constants.py | 2 +- .../dashboards/admin/metadata_defs/panel.py | 3 +- .../dashboards/admin/metadata_defs/tables.py | 2 +- .../dashboards/admin/metadata_defs/tabs.py | 2 +- .../templates/metadata_defs/index.html | 7 - .../dashboards/admin/metering/__init__.py | 0 .../dashboards/admin/metering/forms.py | 65 - .../dashboards/admin/metering/panel.py | 24 - .../dashboards/admin/metering/tables.py | 88 - .../dashboards/admin/metering/tabs.py | 118 - .../admin/metering/templates/metering/_daily.html | 32 - .../admin/metering/templates/metering/daily.html | 7 - .../admin/metering/templates/metering/index.html | 11 - .../admin/metering/templates/metering/stats.html | 175 - .../dashboards/admin/metering/urls.py | 22 - .../dashboards/admin/metering/views.py | 171 - .../dashboards/admin/networks/agents/views.py | 2 +- .../dashboards/admin/networks/forms.py | 9 +- .../dashboards/admin/networks/panel.py | 1 + .../dashboards/admin/networks/ports/forms.py | 4 +- .../dashboards/admin/networks/ports/views.py | 4 +- .../dashboards/admin/networks/subnets/workflows.py | 18 + .../admin/networks/templates/networks/index.html | 17 - .../dashboards/admin/networks/views.py | 3 +- .../dashboards/admin/ngflavors/panel.py | 1 + .../dashboards/admin/overview/panel.py | 3 +- .../dashboards/admin/routers/panel.py | 1 + .../dashboards/admin/routers/ports/tabs.py | 2 +- .../dashboards/admin/routers/tables.py | 3 +- .../admin/routers/templates/routers/index.html | 7 - .../dashboards/admin/routers/views.py | 2 +- .../admin/static/dashboard/admin/admin.module.js | 46 - .../static/dashboard/admin/admin.module.spec.js | 38 - .../admin/flavors/filters/has-extras.filter.js | 44 - .../flavors/filters/has-extras.filter.spec.js | 43 - .../dashboard/admin/flavors/flavors.module.js | 30 - .../dashboard/admin/flavors/flavors.module.spec.js | 24 - .../flavors/table/flavors-table.controller.js | 87 - .../flavors/table/flavors-table.controller.spec.js | 77 - .../admin/flavors/table/flavors-table.html | 63 - .../dashboards/admin/volumes/panel.py | 1 + .../dashboards/admin/volumes/snapshots/tables.py | 3 +- .../dashboards/admin/volumes/snapshots/tabs.py | 2 +- .../dashboards/admin/volumes/snapshots/views.py | 10 +- .../volumes/snapshots/_detail_overview.html | 37 - .../admin/volumes/volume_types/extras/views.py | 8 +- .../admin/volumes/volume_types/qos_specs/views.py | 6 +- .../admin/volumes/volume_types/tables.py | 20 +- .../dashboards/admin/volumes/volume_types/views.py | 10 +- .../dashboards/admin/volumes/volumes/tables.py | 3 +- .../dashboards/admin/volumes/volumes/views.py | 8 +- .../dashboards/identity/domains/urls.py | 24 +- .../dashboards/identity/domains/views.py | 20 +- .../dashboards/identity/groups/forms.py | 5 +- .../dashboards/identity/groups/tables.py | 2 +- .../dashboards/identity/groups/views.py | 23 +- .../identity/identity_providers/protocols/views.py | 1 - .../dashboards/identity/identity_providers/tabs.py | 2 +- .../templates/identity_providers/_register.html | 2 +- .../templates/identity_providers/index.html | 7 - .../identity/identity_providers/views.py | 3 - .../mappings/templates/mappings/index.html | 7 - .../dashboards/identity/mappings/views.py | 3 - .../dashboards/identity/ngusers/__init__.py | 0 .../dashboards/identity/ngusers/panel.py | 24 - .../identity/ngusers/templates/ngusers/index.html | 15 - .../dashboards/identity/ngusers/urls.py | 22 - .../dashboards/identity/ngusers/views.py | 19 - .../dashboards/identity/projects/tables.py | 15 +- .../dashboards/identity/projects/views.py | 22 +- .../dashboards/identity/projects/workflows.py | 10 +- .../identity/roles/templates/roles/index.html | 7 - .../dashboards/identity/roles/urls.py | 22 +- .../dashboards/identity/roles/views.py | 19 +- .../identity/domains/details/details.module.js | 54 + .../domains/details/details.module.spec.js | 36 + .../dashboard/identity/domains/details/drawer.html | 5 + .../domains/details/overview.controller.js | 48 + .../domains/details/overview.controller.spec.js | 50 + .../identity/domains/details/overview.html | 14 + .../dashboard/identity/domains/domains.module.js | 102 + .../identity/domains/domains.module.spec.js | 24 + .../dashboard/identity/domains/domains.service.js | 128 + .../identity/domains/domains.service.spec.js | 92 + .../static/dashboard/identity/domains/panel.html | 4 + .../static/dashboard/identity/identity.module.js | 4 +- .../dashboard/identity/identity.module.spec.js | 2 + .../static/dashboard/identity/roles/panel.html | 4 + .../dashboard/identity/roles/roles.module.js | 84 + .../dashboard/identity/roles/roles.module.spec.js | 40 + .../identity/users/details/details.module.js | 56 + .../dashboard/identity/users/details/drawer.html | 7 + .../identity/users/details/overview.controller.js | 46 + .../users/details/overview.controller.spec.js | 45 + .../dashboard/identity/users/details/overview.html | 16 + .../static/dashboard/identity/users/panel.html | 4 + .../identity/users/table/table.controller.js | 77 - .../identity/users/table/table.controller.spec.js | 94 - .../dashboard/identity/users/table/table.html | 116 - .../dashboard/identity/users/users.module.js | 119 +- .../dashboard/identity/users/users.module.spec.js | 28 +- .../dashboard/identity/users/users.service.js | 98 + .../dashboard/identity/users/users.service.spec.js | 109 + .../dashboards/identity/users/forms.py | 2 +- .../dashboards/identity/users/urls.py | 31 +- .../dashboards/identity/users/views.py | 23 +- .../project/access_and_security/__init__.py | 0 .../access_and_security/api_access/__init__.py | 0 .../access_and_security/api_access/forms.py | 68 - .../access_and_security/api_access/tables.py | 111 - .../project/access_and_security/api_access/urls.py | 33 - .../access_and_security/api_access/views.py | 189 - .../access_and_security/floating_ips/__init__.py | 0 .../access_and_security/floating_ips/forms.py | 55 - .../access_and_security/floating_ips/tables.py | 223 - .../access_and_security/floating_ips/urls.py | 28 - .../access_and_security/floating_ips/views.py | 80 - .../access_and_security/floating_ips/workflows.py | 174 - .../access_and_security/keypairs/__init__.py | 0 .../project/access_and_security/keypairs/forms.py | 84 - .../project/access_and_security/keypairs/tables.py | 108 - .../project/access_and_security/keypairs/urls.py | 36 - .../project/access_and_security/keypairs/views.py | 131 - .../project/access_and_security/panel.py | 23 - .../security_groups/__init__.py | 0 .../access_and_security/security_groups/forms.py | 423 - .../access_and_security/security_groups/tables.py | 286 - .../access_and_security/security_groups/urls.py | 36 - .../access_and_security/security_groups/views.py | 163 - .../dashboards/project/access_and_security/tabs.py | 150 - .../api_access/_credentials.html | 69 - .../api_access/_recreate_credentials.html | 6 - .../api_access/credentials.html | 7 - .../api_access/ec2rc.sh.template | 15 - .../api_access/openrc.sh.template | 43 - .../api_access/openrc_v2.sh.template | 43 - .../api_access/recreate_credentials.html | 7 - .../floating_ips/_allocate.html | 36 - .../access_and_security/floating_ips/allocate.html | 7 - .../templates/access_and_security/index.html | 11 - .../access_and_security/keypairs/_create.html | 8 - .../access_and_security/keypairs/_import.html | 13 - .../access_and_security/keypairs/create.html | 8 - .../access_and_security/keypairs/detail.html | 31 - .../access_and_security/keypairs/download.html | 19 - .../access_and_security/keypairs/import.html | 7 - .../security_groups/_add_rule.html | 10 - .../security_groups/_create.html | 7 - .../security_groups/_update.html | 7 - .../security_groups/add_rule.html | 8 - .../security_groups/create.html | 7 - .../security_groups/detail.html | 16 - .../security_groups/update.html | 7 - .../dashboards/project/access_and_security/urls.py | 40 - .../project/access_and_security/views.py | 35 - .../dashboards/project/api_access/__init__.py | 0 .../dashboards/project/api_access/forms.py | 68 + .../dashboards/project/api_access/panel.py | 21 + .../dashboards/project/api_access/tables.py | 110 + .../templates/api_access/_credentials.html | 63 + .../api_access/_recreate_credentials.html | 6 + .../templates/api_access/credentials.html | 5 + .../templates/api_access/ec2rc.sh.template | 15 + .../templates/api_access/openrc.sh.template | 43 + .../templates/api_access/openrc_v2.sh.template | 43 + .../templates/api_access/recreate_credentials.html | 5 + .../dashboards/project/api_access/urls.py | 31 + .../dashboards/project/api_access/views.py | 208 + .../dashboards/project/containers/browsers.py | 31 - .../dashboards/project/containers/forms.py | 244 - .../dashboards/project/containers/tables.py | 432 - .../templates/containers/_container_detail.html | 29 - .../templates/containers/_container_loader.html | 5 - .../templates/containers/_container_metadata.html | 12 - .../containers/templates/containers/_copy.html | 24 - .../containers/templates/containers/_create.html | 20 - .../containers/_create_pseudo_folder.html | 26 - .../templates/containers/_object_detail.html | 25 - .../containers/templates/containers/_update.html | 28 - .../containers/templates/containers/_upload.html | 29 - .../templates/containers/container_detail.html | 11 - .../containers/templates/containers/copy.html | 7 - .../containers/templates/containers/create.html | 7 - .../templates/containers/create_pseudo_folder.html | 7 - .../containers/templates/containers/index.html | 24 - .../templates/containers/object_detail.html | 11 - .../containers/templates/containers/update.html | 7 - .../containers/templates/containers/upload.html | 7 - .../dashboards/project/containers/urls.py | 60 +- .../dashboards/project/containers/utils.py | 14 + .../dashboards/project/containers/views.py | 319 +- .../templates/firewalls/_update_routers.html | 2 +- .../templates/firewalls/_update_rules.html | 2 +- .../dashboards/project/firewalls/views.py | 7 - .../dashboards/project/floating_ips/__init__.py | 0 .../dashboards/project/floating_ips/forms.py | 55 + .../dashboards/project/floating_ips/panel.py | 27 + .../dashboards/project/floating_ips/tables.py | 223 + .../templates/floating_ips/_allocate.html | 37 + .../templates/floating_ips/allocate.html | 6 + .../dashboards/project/floating_ips/urls.py | 27 + .../dashboards/project/floating_ips/views.py | 130 + .../dashboards/project/floating_ips/workflows.py | 174 + .../dashboards/project/images/images/forms.py | 9 +- .../dashboards/project/images/images/urls.py | 7 +- .../dashboards/project/images/images/views.py | 2 - .../dashboards/project/images/panel.py | 1 + .../dashboards/project/images/snapshots/views.py | 19 +- .../project/images/templates/images/index.html | 7 - .../dashboards/project/images/urls.py | 6 +- .../dashboards/project/images/utils.py | 7 +- .../dashboards/project/images/views.py | 6 - .../dashboards/project/instances/audit_tables.py | 9 +- .../dashboards/project/instances/console.py | 3 +- .../dashboards/project/instances/tables.py | 40 +- .../dashboards/project/instances/tabs.py | 2 +- .../templates/instances/_detail_console.html | 2 +- .../templates/instances/_detail_overview.html | 2 +- .../templates/instances/_instance_ips.html | 4 +- .../instances/templates/instances/index.html | 7 - .../templates/instances/serial_console.html | 4 +- .../dashboards/project/instances/views.py | 62 +- .../project/instances/workflows/create_instance.py | 15 +- .../project/instances/workflows/resize_instance.py | 8 +- .../dashboards/project/key_pairs/__init__.py | 0 .../dashboards/project/key_pairs/forms.py | 84 + .../dashboards/project/key_pairs/panel.py | 25 + .../dashboards/project/key_pairs/tables.py | 107 + .../key_pairs/templates/key_pairs/_create.html | 7 + .../key_pairs/templates/key_pairs/_import.html | 12 + .../key_pairs/templates/key_pairs/create.html | 8 + .../key_pairs/templates/key_pairs/detail.html | 31 + .../key_pairs/templates/key_pairs/download.html | 17 + .../key_pairs/templates/key_pairs/import.html | 7 + .../dashboards/project/key_pairs/urls.py | 34 + .../dashboards/project/key_pairs/views.py | 139 + .../dashboards/project/loadbalancers/__init__.py | 0 .../dashboards/project/loadbalancers/forms.py | 281 - .../dashboards/project/loadbalancers/panel.py | 50 - .../dashboards/project/loadbalancers/tables.py | 566 -- .../dashboards/project/loadbalancers/tabs.py | 151 - .../templates/loadbalancers/_create_pool_help.html | 27 - .../templates/loadbalancers/_create_vip_help.html | 16 - .../templates/loadbalancers/_member_details.html | 30 - .../templates/loadbalancers/_members_tab.html | 5 - .../templates/loadbalancers/_monitor_details.html | 51 - .../templates/loadbalancers/_monitors_tab.html | 5 - .../templates/loadbalancers/_pool_details.html | 74 - .../loadbalancers/_pool_table_subnet_cell.html | 8 - .../loadbalancers/_pool_table_vip_cell.html | 9 - .../templates/loadbalancers/_pools_tab.html | 5 - .../templates/loadbalancers/_updatemember.html | 7 - .../templates/loadbalancers/_updatemonitor.html | 7 - .../templates/loadbalancers/_updatepool.html | 7 - .../templates/loadbalancers/_updatevip.html | 7 - .../templates/loadbalancers/_vip_details.html | 67 - .../templates/loadbalancers/details_tabs.html | 11 - .../templates/loadbalancers/updatemember.html | 7 - .../templates/loadbalancers/updatemonitor.html | 7 - .../templates/loadbalancers/updatepool.html | 7 - .../templates/loadbalancers/updatevip.html | 7 - .../dashboards/project/loadbalancers/urls.py | 50 - .../dashboards/project/loadbalancers/utils.py | 31 - .../dashboards/project/loadbalancers/views.py | 421 - .../dashboards/project/loadbalancers/workflows.py | 745 -- .../client_side/_balloon_port.html | 7 +- .../dashboards/project/network_topology/views.py | 35 +- .../dashboards/project/networks/forms.py | 9 +- .../extensions/allowed_address_pairs/views.py | 3 +- .../dashboards/project/networks/ports/forms.py | 4 +- .../dashboards/project/networks/ports/tabs.py | 2 +- .../dashboards/project/networks/ports/views.py | 4 +- .../dashboards/project/networks/subnets/utils.py | 2 + .../dashboards/project/networks/subnets/views.py | 3 +- .../project/networks/subnets/workflows.py | 1 - .../dashboards/project/networks/tabs.py | 2 +- .../templates/networks/_detail_overview.html | 2 - .../project/networks/templates/networks/index.html | 7 - .../templates/networks/ports/_detail_overview.html | 2 +- .../networks/subnets/_detail_overview.html | 14 +- .../dashboards/project/networks/views.py | 2 - .../dashboards/project/networks/workflows.py | 24 +- .../dashboards/project/ngdetails/urls.py | 22 - .../dashboards/project/ngdetails/views.py | 19 - .../dashboards/project/ngvolumes/urls.py | 7 +- .../dashboards/project/ngvolumes/views.py | 19 - .../dashboards/project/routers/tables.py | 2 +- .../dashboards/project/routers/tabs.py | 2 +- .../project/routers/templates/routers/index.html | 7 - .../dashboards/project/routers/views.py | 3 - .../dashboards/project/security_groups/__init__.py | 0 .../dashboards/project/security_groups/forms.py | 432 + .../dashboards/project/security_groups/panel.py | 21 + .../dashboards/project/security_groups/tables.py | 285 + .../templates/security_groups/_add_rule.html | 10 + .../templates/security_groups/_create.html | 7 + .../templates/security_groups/_update.html | 7 + .../templates/security_groups/add_rule.html | 6 + .../templates/security_groups/create.html | 5 + .../templates/security_groups/detail.html | 13 + .../templates/security_groups/update.html | 5 + .../dashboards/project/security_groups/urls.py | 34 + .../dashboards/project/security_groups/views.py | 178 + .../dashboards/project/stacks/forms.py | 6 +- .../dashboards/project/stacks/mappings.py | 6 - .../project/stacks/resource_types/tables.py | 7 +- .../templates/stacks.resource_types/index.html | 7 - .../project/stacks/resource_types/views.py | 7 +- .../dashboards/project/stacks/tables.py | 10 +- .../project/stacks/template_versions/tables.py | 1 + .../project/stacks/templates/stacks/index.html | 7 - .../dashboards/project/stacks/views.py | 11 +- .../dashboard/project/containers/_containers.scss | 5 +- .../project/containers/containers-model.service.js | 4 +- .../containers/containers-model.service.spec.js | 2 +- .../project/containers/containers.controller.js | 100 +- .../containers/containers.controller.spec.js | 71 +- .../dashboard/project/containers/containers.html | 34 +- .../project/containers/containers.module.js | 48 +- .../project/containers/containers.module.spec.js | 9 +- .../create-container-modal.controller.js | 27 - .../create-container-modal.controller.spec.js | 40 - .../project/containers/create-container-modal.html | 73 - .../project/containers/create-container.help.html | 11 + .../project/containers/create-folder-modal.html | 2 +- .../project/containers/delete-objects-modal.html | 4 +- .../containers/delete-objects.controller.js | 8 +- .../containers/delete-objects.controller.spec.js | 16 +- .../project/containers/file-change-directive.js | 4 +- .../containers/file-change-directive.spec.js | 2 +- .../containers/objects-batch-actions.service.js | 74 +- .../objects-batch-actions.service.spec.js | 46 +- .../containers/objects-row-actions.service.js | 78 +- .../containers/objects-row-actions.service.spec.js | 36 +- .../project/containers/objects.controller.js | 40 +- .../dashboard/project/containers/objects.html | 4 +- .../workflow/launch-instance/details/details.html | 2 +- .../workflow/launch-instance/flavor/flavor.html | 4 +- .../keypair/create-keypair.controller.js | 14 +- .../keypair/create-keypair.controller.spec.js | 2 +- .../keypair/import-keypair.controller.js | 11 +- .../keypair/import-keypair.controller.spec.js | 2 +- .../launch-instance/keypair/keypair.controller.js | 14 +- .../keypair/keypair.controller.spec.js | 22 +- .../launch-instance-modal.service.js | 6 +- .../launch-instance-modal.service.spec.js | 4 +- .../launch-instance-model.service.js | 32 +- .../launch-instance-model.service.spec.js | 16 +- .../workflow/launch-instance/network/network.html | 4 +- .../launch-instance/networkports/ports.html | 4 +- .../security-groups/security-groups.html | 4 +- .../server-groups/server-groups.html | 4 +- .../launch-instance/source/source.controller.js | 35 +- .../source/source.controller.spec.js | 39 +- .../launch-instance/source/source.help.html | 4 +- .../workflow/launch-instance/source/source.html | 17 +- .../dashboards/project/volumes/backups/forms.py | 7 +- .../dashboards/project/volumes/backups/views.py | 6 +- .../project/volumes/cg_snapshots/views.py | 3 +- .../dashboards/project/volumes/cgroups/views.py | 19 +- .../dashboards/project/volumes/panel.py | 2 + .../dashboards/project/volumes/snapshots/tables.py | 21 +- .../dashboards/project/volumes/snapshots/views.py | 4 +- .../volumes/snapshots/_detail_overview.html | 15 +- .../templates/volumes/volumes/_extend_limits.html | 5 +- .../volumes/templates/volumes/volumes/_limits.html | 10 +- .../dashboards/project/volumes/volumes/forms.py | 25 +- .../dashboards/project/volumes/volumes/tables.py | 28 +- .../dashboards/project/volumes/volumes/views.py | 16 +- .../dashboards/project/vpn/views.py | 4 - .../dashboards/settings/password/forms.py | 4 + .../dashboards/settings/user/forms.py | 39 +- .../dashboards/settings/user/views.py | 10 +- .../enabled/_1060_project_access_panel.py | 10 - .../enabled/_1080_project_key_pairs_panel.py | 5 + .../enabled/_1090_project_api_access_panel.py | 6 + .../enabled/_1450_project_loadbalancers_panel.py | 10 - .../enabled/_1480_security_groups_panel.py | 6 + .../enabled/_1490_project_floating_ips_panel.py | 6 + .../enabled/_1920_project_containers_panel.py | 7 - openstack_dashboard/enabled/_2000_admin.py | 1 - .../enabled/_2030_admin_metering_panel.py | 9 - .../enabled/_2080_admin_flavors_panel.py | 15 + .../enabled/_2081_admin_flavors_panel.py | 31 - .../enabled/_3031_identity_users_panel.py | 30 - openstack_dashboard/enabled/_9001_developer.py | 36 - openstack_dashboard/enabled/_9010_preview.py | 21 - .../enabled/_9020_resource_browser.py | 20 - openstack_dashboard/karma.conf.js | 19 +- .../_9030_profiler_settings.py.example | 6 + .../local/local_settings.py.example | 31 +- .../locale/as/LC_MESSAGES/django.po | 1117 +-- .../locale/bn_IN/LC_MESSAGES/django.po | 1104 +-- .../locale/brx/LC_MESSAGES/django.po | 1120 +-- .../locale/cs/LC_MESSAGES/django.po | 1944 +--- .../locale/cs/LC_MESSAGES/djangojs.po | 476 +- .../locale/de/LC_MESSAGES/django.po | 2002 +--- .../locale/de/LC_MESSAGES/djangojs.po | 665 +- .../locale/en_AU/LC_MESSAGES/django.po | 2388 ++--- .../locale/en_AU/LC_MESSAGES/djangojs.po | 856 +- .../locale/en_GB/LC_MESSAGES/django.po | 1547 +-- .../locale/en_GB/LC_MESSAGES/djangojs.po | 81 +- .../locale/es/LC_MESSAGES/django.po | 1538 +-- .../locale/es/LC_MESSAGES/djangojs.po | 182 +- .../locale/fr/LC_MESSAGES/django.po | 2820 +++--- .../locale/fr/LC_MESSAGES/djangojs.po | 653 +- .../locale/gu/LC_MESSAGES/django.po | 1105 +-- .../locale/hi/LC_MESSAGES/django.po | 990 +- .../locale/id/LC_MESSAGES/django.po | 9798 ++++++++++++++++++++ .../locale/id/LC_MESSAGES/djangojs.po | 3043 ++++++ .../locale/it/LC_MESSAGES/django.po | 1523 +-- .../locale/it/LC_MESSAGES/djangojs.po | 53 +- .../locale/ja/LC_MESSAGES/django.po | 2293 ++--- .../locale/ja/LC_MESSAGES/djangojs.po | 715 +- .../locale/kn/LC_MESSAGES/django.po | 1158 +-- .../locale/ko_KR/LC_MESSAGES/django.po | 2504 ++--- .../locale/ko_KR/LC_MESSAGES/djangojs.po | 337 +- .../locale/kok/LC_MESSAGES/django.po | 1103 +-- .../locale/ks/LC_MESSAGES/django.po | 1111 +-- .../locale/mai/LC_MESSAGES/django.po | 1110 +-- .../locale/mni/LC_MESSAGES/django.po | 1111 +-- .../locale/mr/LC_MESSAGES/django.po | 1117 +-- .../locale/ne/LC_MESSAGES/django.po | 1104 +-- .../locale/nl_NL/LC_MESSAGES/django.po | 1000 +- .../locale/pa_IN/LC_MESSAGES/django.po | 1204 +-- .../locale/pl_PL/LC_MESSAGES/django.po | 1750 +--- .../locale/pl_PL/LC_MESSAGES/djangojs.po | 797 -- .../locale/pt_BR/LC_MESSAGES/django.po | 1685 +--- .../locale/pt_BR/LC_MESSAGES/djangojs.po | 217 +- .../locale/ru/LC_MESSAGES/django.po | 2351 ++--- .../locale/ru/LC_MESSAGES/djangojs.po | 719 +- .../locale/sr/LC_MESSAGES/django.po | 1048 +-- .../locale/ta/LC_MESSAGES/django.po | 1126 +-- .../locale/tr_TR/LC_MESSAGES/django.po | 1758 +--- .../locale/tr_TR/LC_MESSAGES/djangojs.po | 983 -- .../locale/ur/LC_MESSAGES/django.po | 1119 +-- .../locale/zh_CN/LC_MESSAGES/django.po | 2759 ++---- .../locale/zh_CN/LC_MESSAGES/djangojs.po | 1489 ++- .../locale/zh_TW/LC_MESSAGES/django.po | 1725 +--- .../locale/zh_TW/LC_MESSAGES/djangojs.po | 128 +- .../management/commands/apache_vhost.conf.template | 2 +- .../management/commands/extract_messages.py | 57 + .../management/commands/make_web_conf.py | 13 +- .../management/commands/update_catalog.py | 122 + openstack_dashboard/policy.py | 4 +- openstack_dashboard/settings.py | 89 +- openstack_dashboard/static/app/app.module.js | 4 + openstack_dashboard/static/app/core/core.module.js | 1 + .../static/app/core/flavors/flavors.module.js | 157 + .../static/app/core/flavors/flavors.service.js | 37 + .../app/core/flavors/flavors.service.spec.js | 41 + .../static/app/core/flavors/panel.html | 3 + .../static/app/core/flavors/summary.html | 19 + .../core/images/actions/create-volume.service.js | 30 +- .../images/actions/create-volume.service.spec.js | 37 +- .../images/actions/create.action.service.spec.js | 5 +- .../app/core/images/details/overview.controller.js | 3 +- .../images/details/overview.controller.spec.js | 30 +- .../static/app/core/images/images.module.js | 10 +- .../static/app/core/images/images.module.spec.js | 2 +- .../static/app/core/images/images.service.js | 1 + .../images/steps/create-image/create-image.html | 21 +- .../create-volume/create-volume.controller.js | 12 +- .../create-volume/create-volume.controller.spec.js | 69 +- .../core/images/steps/edit-image/edit-image.html | 12 +- .../update-metadata/update-metadata.help.html | 1 - .../steps/update-metadata/update-metadata.html | 1 - .../static/app/core/metadata/metadata.service.js | 20 +- .../app/core/metadata/metadata.service.spec.js | 26 + .../app/core/metadata/modal/modal.controller.js | 12 +- .../core/metadata/modal/modal.controller.spec.js | 2 +- .../static/app/core/metadata/modal/modal.html | 3 + .../app/core/metadata/modal/modal.service.js | 6 +- .../app/core/metadata/modal/modal.service.spec.js | 12 +- .../core/openstack-service-api/cinder.service.js | 65 +- .../openstack-service-api/cinder.service.spec.js | 57 + .../core/openstack-service-api/keystone.service.js | 10 +- .../openstack-service-api/keystone.service.spec.js | 6 + .../app/core/openstack-service-api/nova.service.js | 10 +- .../openstack-service-api/nova.service.spec.js | 11 +- .../core/openstack-service-api/policy.service.js | 2 +- .../core/openstack-service-api/settings.service.js | 4 +- .../openstack-service-api/settings.service.spec.js | 10 +- .../core/openstack-service-api/swift.service.js | 15 +- .../static/app/resources/resources.module.js | 14 +- .../static/dashboard/img/favicon.ico | Bin 1150 -> 10174 bytes .../static/dashboard/img/logo-splash.png | Bin 3187 -> 0 bytes .../static/dashboard/img/logo-splash.svg | 377 +- openstack_dashboard/static/dashboard/img/logo.png | Bin 2405 -> 0 bytes openstack_dashboard/static/dashboard/img/logo.svg | 355 +- .../static/dashboard/scss/_layout.scss | 14 +- .../static/dashboard/scss/components/_forms.scss | 7 + .../static/dashboard/scss/components/_login.scss | 6 +- .../static/dashboard/scss/components/_navbar.scss | 2 +- .../static/dashboard/scss/components/_sidebar.scss | 139 +- .../static/dashboard/scss/components/_tab.scss | 3 + .../static/dashboard/scss/horizon.scss | 1 + openstack_dashboard/static/js/.eslintrc | 34 + .../static/js/angular/directives/serialConsole.js | 107 + openstack_dashboard/static/js/horizon.firewalls.js | 28 + .../static/js/horizon.flatnetworktopology.js | 634 ++ openstack_dashboard/static/js/horizon.instances.js | 195 + openstack_dashboard/static/js/horizon.metering.js | 46 + .../static/js/horizon.networktopology.js | 1091 +++ .../static/js/horizon.networktopologycommon.js | 163 + openstack_dashboard/static/js/horizon.quota.js | 471 + openstack_dashboard/static/js/horizon.volumes.js | 95 + openstack_dashboard/templates/500.html | 2 +- openstack_dashboard/templates/angular.html | 2 +- openstack_dashboard/templates/base.html | 1 + openstack_dashboard/templates/header/_brand.html | 2 +- openstack_dashboard/templates/header/_header.html | 14 +- .../header/_keystone_provider_selection.html | 11 + .../templates/header/_user_menu.html | 12 + .../templates/horizon/_scripts.html | 29 +- .../templatetags/context_selection.py | 2 + openstack_dashboard/test/error_pages_urls.py | 12 + openstack_dashboard/test/helpers.py | 14 +- .../pages/admin/system/flavorspage.py | 11 + .../pages/project/compute/instancespage.py | 6 +- .../project/compute/volumes/volumesnapshotspage.py | 2 +- .../pages/project/network/routerspage.py | 2 +- openstack_dashboard/test/settings.py | 30 +- .../test/test_data/ceilometer_data.py | 331 - openstack_dashboard/test/test_data/exceptions.py | 4 - openstack_dashboard/test/test_data/glance_data.py | 5 +- openstack_dashboard/test/test_data/heat_data.py | 6 - .../test/test_data/keystone_data.py | 23 +- openstack_dashboard/test/test_data/neutron_data.py | 225 +- openstack_dashboard/test/test_data/nova_data.py | 15 +- openstack_dashboard/test/test_data/utils.py | 2 - .../static/plugin_panel/plugin_module.js | 16 +- .../themes/material/static/bootstrap/_styles.scss | 2 +- .../material/static/bootstrap/_variables.scss | 4 +- .../themes/material/static/horizon/_icons.scss | 2 + .../static/horizon/components/_sidebar.scss | 4 + .../themes/material/templates/header/_header.html | 3 + .../material/templates/horizon/_sidebar.html | 6 +- openstack_dashboard/usage/quotas.py | 45 +- openstack_dashboard/usage/tables.py | 3 +- openstack_dashboard/utils/identity.py | 28 + openstack_dashboard/utils/metering.py | 249 - openstack_dashboard/utils/settings.py | 7 +- openstack_dashboard/views.py | 18 +- openstack_dashboard/wsgi/django.wsgi | 2 +- package.json | 2 +- releasenotes/notes/bp-dj110-438f26c21f283c46.yaml | 10 + .../notes/bp-k2k-horizon-9577253d626337c1.yaml | 11 + .../notes/bp/enhance-tox-26f73a048b88df2f.yaml | 11 + ...anise-access-and-security-ea7780aa9e7b83e7.yaml | 8 + .../notes/bug-1585682-abd815f290e494d3.yaml | 7 +- .../notes/bug-1618235-59865fa0e5991e63.yaml | 8 + .../notes/bug-1635505-3807fd0151702a5f.yaml | 7 + .../notes/bug-1640049-1195315b5f591ab0.yaml | 10 + .../notes/bug/1637490-c29444e4eb458087.yaml | 5 + .../drop-LBaaS-v1-dashboard-d767b0bde5274af5.yaml | 9 + ...ter-first-identity-panels-139c4a5b7a696707.yaml | 5 + ...keystone-endpoint-message-03129e37a6377715.yaml | 9 + .../flavor-panel-switch-6b5cd5f0964f4ba3.yaml | 13 + releasenotes/notes/glance-v2-ba86ba34611f95ce.yaml | 3 + ...bal-class-name-convention-71ff68913c39b800.yaml | 4 +- .../launch-instance-defaults-c6ab65b7ab822162.yaml | 5 +- ...e-developer-enabled-files-b1ad2265cd79b11e.yaml | 9 + ...er-at-developer-dashboard-da1b1556e30aa858.yaml | 22 + .../provider-net-config-713f0672c8e49888.yaml | 2 +- ...remove-ceilometer-support-376d38802a3ef833.yaml | 5 + ...emove-deprecated-swift-ui-1165b60bab5771d6.yaml | 8 + ...tting-OVERVIEW_DAYS_RANGE-9b87e8b077952a32.yaml | 5 +- ...se-toast-instead-of-alert-ef2f7dec2bd1121a.yaml | 15 + .../notes/xstatic-updates-c3ff5e2b4750ae96.yaml | 14 + releasenotes/source/conf.py | 3 + releasenotes/source/essex.rst | 154 + releasenotes/source/folsom.rst | 159 + releasenotes/source/grizzly.rst | 274 + releasenotes/source/havana.rst | 254 + releasenotes/source/icehouse.rst | 192 + releasenotes/source/index.rst | 8 + releasenotes/source/juno.rst | 181 + releasenotes/source/kilo.rst | 90 + .../source/locale/id/LC_MESSAGES/releasenotes.po | 1614 ---- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 1166 --- releasenotes/source/newton.rst | 6 + requirements.txt | 55 +- test-requirements.txt | 14 +- test-shim.js | 14 + tools/gate/integration/post_test_hook.sh | 6 +- tools/install_venv.py | 4 +- tools/install_venv_common.py | 13 +- tools/pseudo.py | 4 + tox.ini | 147 +- 949 files changed, 45179 insertions(+), 74101 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2d5a929..7b2cce8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ -pbr>=1.6 # Apache-2.0 +pbr>=1.8 # Apache-2.0 @@ -17 +17 @@ django-compressor>=2.0 # MIT -django-openstack-auth>=2.4.0 # Apache-2.0 +django-openstack-auth>=3.1.0 # Apache-2.0 @@ -22 +22 @@ oslo.concurrency>=3.8.0 # Apache-2.0 -oslo.config>=3.14.0 # Apache-2.0 +oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 @@ -24 +24 @@ oslo.i18n>=2.1.0 # Apache-2.0 -oslo.policy>=1.9.0 # Apache-2.0 +oslo.policy>=1.17.0 # Apache-2.0 @@ -26 +26,3 @@ oslo.serialization>=1.10.0 # Apache-2.0 -oslo.utils>=3.16.0 # Apache-2.0 +oslo.utils>=3.18.0 # Apache-2.0 +osprofiler>=1.4.0 # Apache-2.0 +pymongo!=3.1,>=3.0.2 # Apache-2.0 @@ -28 +29,0 @@ pyScss!=1.3.5,>=1.3.4 # MIT License -python-ceilometerclient>=2.5.0 # Apache-2.0 @@ -30,3 +31,3 @@ python-cinderclient!=1.7.0,!=1.7.1,>=1.6.0 # Apache-2.0 -python-glanceclient!=2.4.0,>=2.3.0 # Apache-2.0 -python-heatclient>=1.4.0 # Apache-2.0 -python-keystoneclient!=2.1.0,>=2.0.0 # Apache-2.0 +python-glanceclient>=2.5.0 # Apache-2.0 +python-heatclient>=1.6.1 # Apache-2.0 +python-keystoneclient>=3.8.0 # Apache-2.0 @@ -34,2 +35,2 @@ python-neutronclient>=5.1.0 # Apache-2.0 -python-novaclient!=2.33.0,>=2.29.0 # Apache-2.0 -python-swiftclient>=2.2.0 # Apache-2.0 +python-novaclient!=7.0.0,>=6.0.0 # Apache-2.0 +python-swiftclient>=3.2.0 # Apache-2.0 @@ -37 +38 @@ pytz>=2013.6 # MIT -PyYAML>=3.1.0 # MIT +PyYAML>=3.10.0 # MIT @@ -40,2 +41,2 @@ XStatic>=1.0.0 # MIT License -XStatic-Angular>=1.3.7 # MIT License -XStatic-Angular-Bootstrap>=0.11.0.2 # MIT License +XStatic-Angular>=1.5.8.0 # MIT License +XStatic-Angular-Bootstrap>=2.2.0.0 # MIT License @@ -43 +44 @@ XStatic-Angular-FileUpload>=12.0.4.0 # MIT License -XStatic-Angular-Gettext>=2.1.0.2 # MIT License +XStatic-Angular-Gettext>=2.3.8.0 # MIT License @@ -47,3 +48,3 @@ XStatic-Bootstrap-Datepicker>=1.3.1.0 # Apache 2.0 License -XStatic-Bootstrap-SCSS>=3 # Apache 2.0 License -XStatic-bootswatch>=3.3.5.3 # MIT License -XStatic-D3>=3.1.6.2 # BSD License (3 clause) +XStatic-Bootstrap-SCSS>=3.3.7.1 # Apache 2.0 License +XStatic-bootswatch>=3.3.7.0 # MIT License +XStatic-D3>=3.5.17.0 # BSD License (3 clause) @@ -51,3 +52,3 @@ XStatic-Hogan>=2.0.0.2 # Apache 2.0 License -XStatic-Font-Awesome>=4.3.0 # SIL OFL 1.1 License, MIT License -XStatic-Jasmine>=2.1.2.0 # MIT License -XStatic-jQuery>=1.7.2 # MIT License +XStatic-Font-Awesome>=4.7.0 # SIL OFL 1.1 License, MIT License +XStatic-Jasmine>=2.4.1.1 # MIT License +XStatic-jQuery>=1.8.2.1 # MIT License @@ -57,2 +58,2 @@ XStatic-JQuery.TableSorter>=2.14.5.1 # MIT License -XStatic-jquery-ui>=1.10.1 # MIT License -XStatic-JSEncrypt>=2.0.0.2 # MIT License +XStatic-jquery-ui>=1.10.4.1 # MIT License +XStatic-JSEncrypt>=2.3.1.1 # MIT License @@ -61,3 +62,3 @@ XStatic-objectpath>=1.2.1.0 # MIT -XStatic-Rickshaw>=1.5.0 # BSD License (prior) -XStatic-roboto-fontface>=0.4.3.2 # Apache 2.0 License -XStatic-smart-table!=1.4.13.0,>=1.4.5.3 # MIT License +XStatic-Rickshaw>=1.5.0.0 # BSD License (prior) +XStatic-roboto-fontface>=0.5.0.0 # Apache 2.0 License +XStatic-smart-table>=1.4.13.2 # MIT License @@ -65 +66 @@ XStatic-Spin>=1.2.5.2 # MIT License -XStatic-term.js>=0.0.4 # MIT License +XStatic-term.js>=0.0.7.0 # MIT License diff --git a/test-requirements.txt b/test-requirements.txt index 2096135..79db03b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +12 @@ hacking<0.11,>=0.10.0 -coverage>=3.6 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -15,2 +15,2 @@ mock>=2.0 # BSD -mox3>=0.7.0 # Apache-2.0 -nodeenv>=0.9.4 # BSD License # BSD +mox3!=0.19.0,>=0.7.0 # Apache-2.0 +nodeenv>=0.9.4 # BSD @@ -22,3 +22,3 @@ openstack.nose-plugin>=0.7 # Apache-2.0 -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 -reno>=1.8.0 # Apache2 -requests>=2.10.0 # Apache-2.0 +oslosphinx>=4.7.0 # Apache-2.0 +reno>=1.8.0 # Apache-2.0 +requests!=2.12.2,>=2.10.0 # Apache-2.0 @@ -26 +26 @@ selenium>=2.50.1 # Apache-2.0 -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD

1 0

[manila] manila 4.0.0 (ocata)
by no-reply＠openstack.org 22 Feb '17

22 Feb '17

We are psyched to announce the release of: manila 4.0.0: Shared Storage for OpenStack This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/manila/ For more details, please see below. 4.0.0 ^^^^^ The share migration feature was improved to support migrating snapshots where possible and provide a more deterministic user experience. New Features ************ * Added detail API to show user and tenant specific usages through the quota-sets resource. * Improvements have been made to ensure read only rule semantics for shares and readable replicas. When invoked with administrative context, the share instance and share replica APIs will return "cast_rules_to_readonly" as an additional field in the detailed JSON response. * Added optional create_share_from_snapshot_support extra spec, which was previously implied by the overloaded snapshot_support extra spec. * Add "purge" sub command to the "manila-manage db" command for administrators to be able to purge soft-deleted rows. * Added share_type to filter results of scheduler-stats/pools API. * Added admin network support to Hitachi HNAS Driver * Added 'preserve_snapshots' parameter to share migration API. * New micro-states ('applying', 'denying'), appear in the 'state' field of access rules list API. These transitional states signify the state of an access rule while its application or denial is being processed asynchronously. * Access rules can be added regardless of the 'access_rules_status' of the share or any of its replicas. * Added manage/unmanage snapshot support to Hitachi HNAS Driver. * Added Mountable Snapshots support to HNAS driver. * Added Revert-to-snapshot functionality to Hitachi NAS driver. * Added manila manage/unmanage feature support for GPFS driver. The existing fileset should be an independent fileset and should not have any NFS export over the fileset path. With this prerequisite existing GPFS filesets can be brought under Manila management. * Add support for the tooz library. * Allow configuration of file/distributed locking for the share manager service. * Added share backend drivers for MapR-FS. * Driver assisted migration support has been added to the NetApp cDOT driver to efficiently and nondisruptively migrate shares within Vservers by ensuring data, snapshots and metadata. * The NetApp cDOT drivers now include the cluster node utilization metrics for each pool reported to the manila scheduler. These values are designed to be included in the filter & goodness functions used by the scheduler, so the cDOT drivers now also report those functions to the scheduler for each pool. * Added Manila share driver for QNAP ES series storage systems. * Added mountable snapshots feature to manila. Access can now be allowed and denied to snapshots of shares created with a share type that supports this feature. * Added mountable snapshots support to the LVM driver. * Added revert-to-snapshot feature for regular and replicated shares. * Added revert-to-snapshot support to the LVM driver. * Added support for share revert-to-snapshot to NetApp Data ONTAP drivers. * Dell EMC Unity driver deprecated the option *emc_nas_server_container*. The driver will choose storage processor automatically to load balance the nas servers. * Dell EMC Unity driver is enhanced to use different tenant in Unity for each vlan. Thus the nas server in different vlan could have isolated IP address space. * Dell EMC Unity driver is enhanced to select the appropriate port on the system to create interfaces based on the network MTU. * Support for VMAX in Manila. Known Issues ************ * 3parclient up to version 4.2.1 always returns only 1 VFS IP address. This may cause 3PAR driver boot up failure while validating VFS IP addresses against IP addresses configured in manila.conf. * Share groups replaced the experimental consistency groups feature in Ocata. The APIs for share groups have a default role-based- access- control policy set to "!". This means that these APIs are not enabled by default on upgrading to the Ocata release. Modify policy.json appropriately in your deployment to enable these APIs. You may set these policies to "rule:default" to allow access to all tenants and "rule:admin_api" to restrict the access only to tenants with those privileges. Upgrade Notes ************* * The snapshot_support extra spec is now optional and has no default value set when creating share types. * Added a new config option to Hitachi HNAS Driver to allow configuration of Admin Network support. * All share migration driver-assisted API parameters are now mandatory. * Improvements to the share migration API have been qualified with the driver assisted migration support that exists in the ZFSOnLinux driver. However, this driver does not currently support preserving snapshots on migration. * Snapshot restriction in share migration API has been changed to return error only when parameter force-host-assisted-migration is True. * Deprecated the "service_instance_network_helper_type" option for removal. This option is no longer used for anything since nova networking is no longer supported. * Policies relating to "consistency_group" and "cgsnapshot" APIs have been removed from manila. These policies can be removed from "policy.json". * If using existing share types with the HNAS back end, set the 'mount_snapshot_support' extra-spec to allow creating shares that support mountable snapshots. This modification will not affect existing shares of such types. * New options are necessary in manila.conf to specify the coordination back-end URL (for example, a Distributed Locking Manager (DLM) back- end or a file based lock location). The configuration determines the tooz driver invoked for the locking/coordination. * The EMCShareDriver is moved to the dell_emc directory. share_driver entry in manila.conf needs to be changed to manila.share.drivers.dell_emc.driver.EMCShareDriver. Vendor name is changed to "Dell EMC". * Removed nova net support from the service instance module since legacy nova networking was deprecated in Newton and is no longer supported in regular deployments in Ocata. * Removed support for "nova_net_id" in share_networks API and in the ShareNetwork DB model. Also removed the nova network plugins themselves and corresponding manila.conf options. * For Dell EMC Unity Manila driver, replaced emc_nas_pool_names with unity_share_data_pools, emc_nas_server_pool with unity_server_meta_pool, emc_interface_ports with unity_ethernet_ports, * For Dell EMC VNX Manila driver, replaced emc_nas_pool_names with vnx_share_data_pools, emc_interface_ports with vnx_ethernet_ports, emc_nas_server_container with vnx_server_container. Deprecation Notes ***************** * Deprecation of the manila v1 API was announced in the mitaka release. The versions response from the API has been fixed to state that this version has been deprecated. If you are using v1 API, consider switching to the v2 API to take advantage of newer features. v2 API has support for 'microversions'. Any endpoint on the v2 API can be requested with the HTTP header 'X-OpenStack- Manila-API-Version' and providing a value '2.x', where '2' is the major version and 'x' is the minor (or 'micro') version. To continue exploiting feature functionality that was part of the v1 API, you may use the v2 API with the microverison '2.0', which is behaviourally identical to the v1 API. * Support for the experimental share migration APIs has been dropped for API microversions prior to 2.30. * For Dell EMC Unity Manila driver, options emc_nas_pool_names, emc_nas_server_pool, emc_interface_ports, emc_nas_server_container are deprecated. * For Dell EMC VNX Manila driver, options emc_nas_pool_names, emc_interface_ports, emc_nas_server_container are deprecated. Critical Issues *************** * The "host" field is no longer returned in the JSON response of the /shares and /share-replicas APIs when these APIs are invoked with non-admin privileges. Applications that depend on this field must be updated as necessary. The value of this field is privileged information and the request context must specify administrator privileges when using these APIs for the "host" field to be present. The use of "host" as a filter key in the GET /shares API is controlled with the policy "list_by_host". This policy defaults to "rule:admin_api". Bug Fixes ********* * Fixed 3PAR driver boot up failure while validating share server IP address provided in manila.conf against IP address set on array. * Added check to validate that host assisted migration cannot be forced while specifying driver assisted migration options. * The share migration API can only be invoked when at least one parameter within (host, share-network, share-type) is expected to be changed. * Raises an exception in case the host_id is specified when creating a neutron port but the port_binding extension is not activated. * The NetApp cDOT driver now explicitly filters root aggregates from the pools reported to the manila scheduler if the driver is operating with cluster credentials. * Fixed a bug with the share manager losing access rule updates when multiple access rules are added to a given share simultaneously. * Instead of all existing access rules transitioning to 'error' state when some error occurs while applying or denying access rules to a given share, only the rules that were in transitional statuses ('applying', 'denying') during an update will transition to 'error' state. This change is expected to aid in identifying any 'bad' rules that require a resolution by the user. * Share action APIs dealing with allowing and denying access to shares now perform the policy check for authorization to invoke those APIs as a preliminary step. * As before, when a share is replicated (or being migrated), all replicas (or migration instances) of the share must be in a valid state in order to allow or deny access to the share (where such actions are otherwise allowed). The check enforcing this in the API is fixed. * Fixed share remaining with read/write access rules during a host- assisted share migration. * Added missing 'migration_completing' task state when requesting migration-complete for a driver-assisted share migration. * In the Generic driver, the backing volume size is greater than the share size when the share has been shrunk. So share extend logic in this driver was changed to only extend the backing volume if its size is less than the size of the new, extended share. * Added a check on driver startup for CEPHFS back ends to verify whether the back end is accessible. * Fix inheritance of access rules from parent share by ZFSonLinux child shares. It was inherited before, now it is not, as expected. Now, each share created from snapshot will not have inherited access rules. * Fixed shares created from snapshots on the LVM and Generic drivers to no longer share the same filesystem handle as the source shares. The cause was the same as described in Ubuntu launchpad bug https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1071733 * Changed NetApp cDOT driver when running with DHSS=True to maintain a 1-1 relation between IPSpaces and broadcast domains. * Fixed incorrect exportfs command used while extending and shrinking shares on Generic driver. * Fixed GPFS CES to allow adding a first access rule to a share. * Fixed GPFS CES to allow deleting a share with no access rules. * Fixed GPFS CES to allow deletion of a failed access rule when there are no successful access rules. * Fixed GPFS KNFS generation of NFS server allow/deny commands when there are multiple servers in gpfs_nfs_server_list so that the remote ssh login prefix used for one server is not carried over to the commands for following servers. * Fixed GPFS KNFS deny access so that it will not fail when the access can be verified to not exist. * Fixed the error that share metadata records are not soft-deleted when deleting a share. * Fixed failure when reverting a share to a snapshot using the LVM driver while access rules exist for that share. * Shares can no longer be migrated while being members of share groups. * Fixed default approach for creating share group snapshots that uses common share driver interface by making proper call of this method. Before, some drivers that were depending on some specific data from 'snapshot' object were failing not being able to get these data. * Snapshot access rules in error state no longer cause other rules to go into error state as well. * Fixed snapshot export locations being created for shares with property mount_snapshot_support=False. * Export locations pertaining to migration destinations are no longer shown until migration is complete. * Added 'consistent_snapshot_support' attribute to 'share_groups' DB model, to ease possible future backport of bugfixes for 'share groups' feature. * Fixed HNAS driver creating snapshots of NFS shares without first changing it to read-only. * Fixed error in driver-assisted share migration of mountable snapshots. * The Windows driver issues regarding share creation have been fixed. * Fixed HNAS driver version according to the new content added in the Ocata release. * Container driver. Fixed share and share server deletion concurrencies by adding shared external lock. * Fixed Hitachi HNAS driver not checking export on backend when managing a snapshot. * Fixed qos deletion failing in huawei driver when qos status is 'idle' by deactivating it first. * HNAS driver correctly handles rule updates to pre-existing access rules on a managed CIFS share. * Fixed HNAS driver error when managing snapshots caused by concurrency in backend. * Share replication workflows are coordinated by the share-manager service with the help of the tooz library instead of oslo_concurrency. This allows for deployers to configure Distributed Locking Management if multiple manila-share services are run across different nodes. * Shares under 3 GB cannot be created on the Dell EMC Unity back end. If users create shares smaller than 3 GB, they will be allocated a 3 GB file system on the Unity system. Other Notes *********** * Removed fake Consistency Group support from Generic driver. It was added only for testing purpose and now it is redundant. Changes in manila 3.0.0..4.0.0 ------------------------------ 6f6a31d Only return share host for admins using shares API 0aa0834 3PAR: Replace ConsistencyGroup c73b84a Update HNAS driver version history 5d5018d Update tempest pin to latest commit ref 3a94760 Fix Windows SMB helper 2587e73 Update UPPER_CONSTRAINTS_FILE for stable/ocata e3bf30b Update .gitreview for stable/ocata 1684b59 Add 'consistent_snapshot_support' attr to 'share_groups' DB model a7d8363 Pass access rules to driver on snapshot revert 64649b9 Fix default approach for share group snapshot creation 8ac4f0a Disable share groups APIs by default a05b5a3 Fix devstack manila nfs install for fedora 301abe6 Improve test coverage for share migration b66cfc5 Replaces yaml.load() with yaml.safe_load() 31494d4 Prepare for using standard python tests 6f8f22c Fix nonsense variable name ba3088c Fix wrong access-rule negative test 6197a91 Fix migration of mountable snapshots c6c022f Fix HNAS driver inconsistent exceptions c4b65df Fix HNAS driver always handling mountable snapshots e824e8b HNAS: Fix syntax to make shares read-only in snapshot create 26c803e Blocked migration of shares within share groups 4cb13a0 HNAS: Fix managed snapshots not being mounted 53b91e5 Fix multiple export locations during migration 4b6f1bf Fix snapshot export locations incorrectly handled f1a6b1c HNAS: avoid mismatch access level for managed shares 4f33033 Fix error'ed access rules being sent to driver 8cfb1e2 Fix setup of DHSS=False mode for generic driver 2295151 HNAS: Fix concurrency error when managing snapshots 31ea6a3 Enable host-assisted migration in ZFSOnLinux CI c5feb3b Decrease share migration periodic task interval cffc6e1 Add access-rules tests to improve the coverage 412af6c Remove unit test that is not relevant anymore ba5384f Fix creation of share group types using share type names 6ba7491 Mark 'v1' API deprecated in the versions response 0f96b43 Fix Generic driver DHSS=False setup 58757a1 Fix string formatting in access-deny API error message 436d9aa Make LVM export IP configurable 886155c Updated from global requirements a0d2641 Updated from global requirements 32708bd Revert "[Devstack] Workaround osclient breakage" 1f1932e Add mountable snapshots support to HNAS driver 72149b4 Improve share migration scenario test validation 0549f01 Mountable snapshots scenario tests 399d596 Fix MapRFS test__execute to not impact others 8d71932 Add mountable snapshots support 912360e Fix devstack plugin to not depend on private network 1b0042f VMAX manila plugin - Support for VMAX in Manila 794e9a7 NetApp: Support share revert to snapshot 1002642 [Tempest] Add functional tests for share groups feature d25f101 Manila Share Groups 3e37cd2 Rename consistency group modules to share groups 6274c20 [api-ref] Fix missing parameters in api-ref 2eefafe Removes unnecessary utf-8 coding 20e89b9 NetApp cDOT: Add Intra-Vserver migration support 9beb33c Updated from global requirements cf18294 Add QNAP Manila Driver 0970eb6 Add cast_rules_to_readonly to share instances 6f78295 Don't call update_access if there are no rules cf9a5ef Implement Revert-to-snapshot in HNAS Driver 53539c0 Share Migration Ocata Improvements 64a73b1 Refactor Access Rules APIs 02ab18c Tooz integration fa910aa Trivial fixes to snapshot revert patch 6df2483 [api-ref] Refactor share network documentation 7a7c182 Fix ``exportfs -u`` usage in generic driver. beed2f2 Add manila-manage db purge command c90515d [Unity driver] VLAN enhancement d4a379d Implement share revert to snapshot 0ec71e2 Fix metadata's soft-delete error when deleting shares 0a1a92c Fix license and E265 errors in doc/source/conf.py 627bcbe Updated from global requirements 88cd3a6 tests: remove useless variables in db_utils methods 6a37e01 Some share api test cleanup 1ccebf7 Update .gitignore 1c3e93c Fix column name error in migration script ba74746 Fix error message in Share Networks API b213a25 Remove NovaNetworkPlugin e7af46c [TrivialFix] Add negative test in quota detail 306c79f Add MapR-FS native driver 5dc5ecf Allow skipping manila tempest tests. 75e685d Properly deprecate service_instance_network_helper_type ed82d4d remove devref jenkins doc d08713c Support python 3.5 in tox 0139152 Unity/VNX Driver: Rename driver options be21713 Migration Data Check fixes a4c2cad Remove trailing backtick dd7717e Updated from global requirements 0f33dcf Remove nova net support from service_instance 4fc3524 [api-ref] Refactor share instance export locations API documentation cbda16b GPFS: Add update_access() c341e52 Report create_share_from_snapshot_support 6965a73 Allow share status reset to migration status fb4b0b8 Add support for manage/unmanage in GPFS driver 46584ee [api-ref] Refactor share actions API documentation a42c08e [api-ref] Refactor share export location API documentation 7275aaf Add the ability to check the tenant quota in detail 733fcfe Fix test variable injection in CI 5d64005 [TrivialFix] optimize get filesystem id in huawei driver 10b14bb [Devstack] Workaround osclient breakage 78844fd Updated from global requirements 9157b8a GPFS KNFS: Fix deny access to succeed when possible b76a2af GPFS KNFS: Do not reuse ssh prefix in loop 0d6db35 Add create_share_from_snapshot_support extra spec f775c81 Trivial fix LOG.exception issues 3ede2d1 [Grenade] Do not run tempest tests dfd92fc Fix typo in rootwrap.conf 40e073a use six.StringIO for compatibility with io.StringIO in python3 a9cf8ad Trivial fix translate issues fa32c37 NetApp: set proper broadcast domain for IPspace 687b6aa Add Apache 2.0 license to source file bf9adef [Dell EMC Unity] Support create share smaller than 3 GB a40c3a0 Updated from global requirements d85df8a [TrivialFix] Move share type filter tempest to test_scheduler_stats.py ad2ce70 [devref] copy samples/local.conf correctly 5e7323c GPFS CES: Fix bugs related to access rules not found d679ee5 Add DriverFilter and GoodnessWeigher documentation d560b1c Setting up a development env with devstack instructions c19dbbd Enable scenario tests for LVM and ZFSonLinux drivers 9f4be67 [Tempest] Add scenario test creating share from snapshot 4d36064 Decouple Manila UI from Manila Devstack plugin c162c45 [Generic driver] Fix generation of admin export location b66f04e Fix undefined attribute in scenario test class 6168f16 Fix Manila service image config for 3rd party CIs c517667 Change network allocation of Unity driver to 1 c93e812 [LVM,Generic drivers] Fix relationships between parent and child shares 00221d5 Replace six.iteritems() with .items() d5c1e7a Add "update_access" interface support for VNX. d5643c7 Add share_type filter support to pool_list aaa664b [TrivialFix] Fix doc typo error 0d3151c Updated from global requirements 122f40f [Tempest] Fix concurrency issue in scenario test e02e16e Add support for manage/unmanage snapshots in HNAS driver 656dc81 [ZFSonLinux] Stop inheriting options creating share from snapshot 583ce59 Updated from global requirements c549b20 [Devstack] Use openstack CLI instead of other clients 8c5ed29 [Devstack] Fix DHSS=False setup for Generic driver cb15c82 [Devstack] Run tempest update in proper time f552549 Fix wrong data type in database migration eabe827 LOG marker mismatch in the code 8407f72 [hacking] Ensure not to use LOG.warn 6a211b7 Fix devstack smb configuration outside ubuntu ec0cda2 Fix share writable in host-assisted migration 5cdb0bf Remove unused function in db api 6e906ba [api-ref] Refactor Manila scheduler stats API eeef132 TrivialFix: Remove Duplicate Keys 9716042 Show team and repo badges on README 3ee1da6 Fix wrong instructions in the install guide 1daade7 [Dummy driver] Add possibility to set delays for driver methods 3f2f3f9 [Devstack] Fix devstack plugin compatibility ce39a50 Add Admin network support to HNAS driver 77a0349 Fix extend operation of shrinked share in generic driver 7683f2a [Tempest] Make share size configurable in scenario tests d03b569 [Tempest] Port remote_client into Manila f2ffae1 hacking: Use uuidutils to generate UUID c66660c devref/driver_requirements: add cephfs protocol a82b9c2 Add Rally CI jobs with Manila scenarios f2f66c8 Fix spelling mistakes in cover.sh e2a4151 Updated from global requirements af79b9f Check ceph backend connection on driver setup d9be8fa Move EMC drivers to dell_emc folder 1ce2473 NetApp cDOT controller utilization metrics 34f5274 Replaces uuid.uuid4 with uuidutils.generate_uuid() ca22725 Remove unused link e01af35 [install] Make the rabbitmq configuration simpler 8d8371d Add testscenario to test-requirements 1eadb5a Fix share manage tempest test cleanup 1c5446e Updated from global requirements e77cf5b [Devstack] Create additional custom share types by default 899941c Remove fake CG support from Generic share driver f8b962b Correct the order of parameters in assertEqual() ed59f6b Use cors.set_defaults instead of cfg.set_defaults 3f6fb58 Fix missing 'migration_completing' task state 4c3d247 Replace 'assertEqual(None, ...)' with 'assertIsNone(...)' 3f2800e Compare the encoded tag more accurately for huawei driver 08285a7 Updated from global requirements 11b38f3 Add support of endpoint_type and region_name to clients manila uses b442ee3 Updated from global requirements 4475a5c [Tempest] Fix visibility of test_quotas.py module 90f6b6c Fix a typo cdb1422 Remove broken modindex link from devref 0b5125d Clarify language in release notes 68cb027 Updated from global requirements 38c1eae Remove warnings for dropped context arguments 04686f2 NetApp cDOT driver enhanced support logging 1370902 Add utility of boolean value parser a915b75 Fix concurrency issues in container driver b9b3b96 Updated from global requirements 6dccb17 Remove unused functions in utils 10429b2 Update .coveragerc after the removal of openstack directory 5be1e8f [Grenade] Update devstack and pre_test_hook 319f016 Fix a typo in parameters.yaml 65ccdc2 updated positional argument and output 2ddb2f6 Fix a typo in api_version_request.py a9c9584 Updated from global requirements eb2d964 NetApp cDOT driver should not report untenable pools b09faaf [api-ref] Refactor Manila snapshot API 8401c15 [Container] Fix deletion of veths dd3bfeb Updated from global requirements e83ec9b Enable release notes translation 5c3132e Updated from global requirements 4c6ce2f Avoid Forcing the Translation of Translatable Variables 4c0e763 Fix devstack for ubuntu-xenial 5041d4a Stop adding ServiceAvailable group option 326f7b1 cephfs_native: doc fixes a0163f4 Remove tempest.test usage from manila tests cc6428c Fix typo in test_gpfs.py f33ac18 Use assert(Not)In/Greater(Equal)/LessEqual/IsNotNone 28577f7 Updated from global requirements 63524af Use method is_ipv6_enabled from oslo.utils 1d10286 Files with no code must be left completely empty ac8b894 TrivialFix: Remove default=None when set defaul value in Config 82a4244 [TrivialFix] Correct file mode settings 9152425 [api-ref] Refactor Manila security service API ac89ea0 Remove redundant 'the' 7b0505b Adjust doc about threading 53198f0 Updated Hitachi NAS Platform Driver documentation 15a7538 Updated from global requirements e071dc0 Remove unused methods d14e906 Fix huawei driver username/password encoding bug 5e333fc Use fnmatch from oslo.utils 9bf3f2e Updated from global requirements 332cbf2 Fix check for nfsd presence 945aa18 [api-ref] Refactor Manila availability-zones API f20ab15 Fix huawei driver cannot delete qos while status is idle 49856dc Bring remote and local executors into accord f60a068 Add tempest tests for mtu and gateway fields e0080bf Make port_binding_extension mandatory if host_id is specified 02a0cb8 [api-ref] Refactor Manila quota set API 583aea4 [api-ref] Remove temporary block in conf.py a2ce6c0 Make nfs-kernel-server run on a clean host b6fa89b Modify use of assertTrue(A in B) be82d59 Updated from global requirements cef6ddd 3PAR driver fails to validate conf share server IPs bc4712e Manila install guide: Fix wrong instructions d82ac34 delete python bytecode including pyo before every test run d2f1d28 Update installation tutorial and api-ref instructions 3d39c90 Update reno for stable/newton 5e6eef7 [api-ref] Refactor limits and services API 0dc2fdc [api-ref] Refactor manila extension API 8eaf239 [api-ref] Refactor consistency group API d95a125 Update the home page Diffstat (except docs and test files) ------------------------------------- .coveragerc | 2 +- .gitignore | 2 +- .gitreview | 1 + HACKING.rst | 2 + README.rst | 9 + api-ref/source/availability-zones.inc | 8 +- api-ref/source/conf.py | 38 +- api-ref/source/consistency-groups.inc | 152 +- api-ref/source/extensions.inc | 12 +- api-ref/source/limits.inc | 2 +- api-ref/source/os-share-manage.inc | 2 +- api-ref/source/parameters.yaml | 2267 ++++++++------ api-ref/source/quota-sets.inc | 119 +- .../source/samples/quota-show-detail-response.json | 20 + .../share-actions-revert-to-snapshot-request.json | 5 + ...hare-network-add-security-service-response.json | 1 - .../samples/share-network-create-response.json | 1 - ...e-network-remove-security-service-response.json | 1 - .../samples/share-network-show-response.json | 1 - .../samples/share-network-update-response.json | 1 - .../share-networks-list-detailed-response.json | 3 - .../source/samples/versions-index-response.json | 2 +- api-ref/source/scheduler-stats.inc | 64 +- api-ref/source/security-services.inc | 162 +- api-ref/source/services.inc | 52 +- api-ref/source/share-actions.inc | 142 +- api-ref/source/share-export-locations.inc | 28 +- api-ref/source/share-instance-export-locations.inc | 30 +- api-ref/source/share-metadata.inc | 1 + api-ref/source/share-networks.inc | 110 +- api-ref/source/share-types.inc | 2 +- api-ref/source/shares.inc | 20 +- api-ref/source/snapshots.inc | 173 +- contrib/ci/common.sh | 25 +- contrib/ci/post_test_hook.sh | 131 +- contrib/ci/pre_test_hook.sh | 200 +- devstack/plugin.sh | 352 ++- devstack/settings | 23 +- devstack/upgrade/from-newton/upgrade-manila | 17 + devstack/upgrade/resources.sh | 18 +- devstack/upgrade/settings | 11 +- .../devref/development-environment-devstack.rst | 100 + .../devref/driver_filter_goodness_weigher.rst | 359 +++ .../share_back_ends_feature_support_mapping.rst | 227 +- etc/manila/policy.json | 56 +- etc/manila/rootwrap.conf | 2 +- etc/manila/rootwrap.d/share.filters | 16 + .../controller-node-common-configuration.rst | 23 +- .../common/dhss-false-mode-configuration.rst | 8 +- .../source/common/dhss-false-mode-intro.rst | 1 + .../dhss-false-mode-using-shared-file-systems.rst | 176 ++ .../source/common/dhss-true-mode-configuration.rst | 16 +- .../source/common/dhss-true-mode-intro.rst | 14 +- .../dhss-true-mode-using-shared-file-systems.rst | 269 ++ .../common/share-node-common-configuration.rst | 22 +- .../common/share-node-share-server-modes.rst | 40 +- .../get-started-with-shared-file-systems.rst | 25 +- install-guide/source/index.rst | 47 +- install-guide/source/install-share-node.rst | 10 +- install-guide/source/post-install.rst | 204 +- manila/api/common.py | 96 + manila/api/extensions.py | 6 +- manila/api/middleware/fault.py | 2 +- manila/api/openstack/api_version_request.py | 33 +- manila/api/openstack/rest_api_version_history.rst | 55 +- manila/api/openstack/wsgi.py | 6 +- manila/api/v1/router.py | 2 +- manila/api/v1/scheduler_stats.py | 32 +- manila/api/v1/share_networks.py | 353 --- manila/api/v1/share_types_extra_specs.py | 37 +- manila/api/v1/shares.py | 167 +- manila/api/v2/cgsnapshots.py | 234 -- manila/api/v2/consistency_groups.py | 254 -- manila/api/v2/quota_sets.py | 12 +- manila/api/v2/router.py | 149 +- manila/api/v2/share_export_locations.py | 3 +- manila/api/v2/share_group_snapshots.py | 209 ++ manila/api/v2/share_group_type_specs.py | 133 + manila/api/v2/share_group_types.py | 229 ++ manila/api/v2/share_groups.py | 271 ++ manila/api/v2/share_networks.py | 342 +++ manila/api/v2/share_snapshot_export_locations.py | 65 + .../v2/share_snapshot_instance_export_locations.py | 70 + manila/api/v2/share_snapshots.py | 112 +- manila/api/v2/share_types.py | 24 +- manila/api/v2/shares.py | 230 +- manila/api/versions.py | 2 +- manila/api/views/cgsnapshots.py | 95 - manila/api/views/consistency_groups.py | 77 - manila/api/views/share_accesses.py | 15 + manila/api/views/share_group_snapshots.py | 110 + manila/api/views/share_group_types.py | 39 + manila/api/views/share_groups.py | 80 + manila/api/views/share_instance.py | 7 + manila/api/views/share_networks.py | 7 +- manila/api/views/share_replicas.py | 13 +- .../api/views/share_snapshot_export_locations.py | 61 + manila/api/views/share_snapshots.py | 18 + manila/api/views/shares.py | 46 +- manila/api/views/types.py | 16 + manila/cmd/manage.py | 13 + manila/cmd/share.py | 3 +- manila/common/config.py | 48 +- manila/common/constants.py | 82 +- manila/compute/nova.py | 9 +- manila/consistency_group/__init__.py | 0 manila/consistency_group/api.py | 336 --- manila/context.py | 9 +- manila/coordination.py | 294 ++ manila/data/helper.py | 41 +- manila/data/utils.py | 5 +- manila/db/api.py | 439 ++- .../03da71c0e321_convert_cgs_to_share_groups.py | 224 ++ ...4747f_add_share_instance_access_rules_status.py | 15 +- ...8e632621e5a_change_volume_type_to_share_type.py | 5 +- ...17afa_add_create_share_from_snapshot_support.py | 149 + .../versions/5077ffcc5f1c_add_share_instances.py | 2 +- ...ade7_restore_share_instance_access_map_state.py | 99 + .../87ce15c59bbe_add_revert_to_snapshot_support.py | 66 + ...ation_for_share_group_snapshot_members_model.py | 41 + ...760840_remove_nova_net_id_column_from_share_.py | 36 + .../a77e2ad5012d_add_share_snapshot_access.py | 101 + ...t_snapshot_support_attr_to_share_group_model.py | 58 + .../e1949a93157a_add_share_group_types_table.py | 146 + ...dd_cast_rules_to_readonly_to_share_instances.py | 100 + manila/db/sqlalchemy/api.py | 1326 ++++++-- manila/db/sqlalchemy/models.py | 391 ++- manila/exception.py | 117 +- manila/hacking/checks.py | 34 + manila/network/linux/ovs_lib.py | 7 +- manila/network/neutron/api.py | 20 +- manila/network/neutron/neutron_network_plugin.py | 5 - manila/network/nova_network_plugin.py | 228 -- manila/network/standalone_network_plugin.py | 2 +- manila/opts.py | 18 +- manila/scheduler/drivers/base.py | 16 +- manila/scheduler/drivers/filter.py | 99 +- manila/scheduler/filters/capabilities.py | 42 +- manila/scheduler/filters/capacity.py | 2 +- manila/scheduler/filters/consistency_group.py | 54 - manila/scheduler/host_manager.py | 35 +- manila/scheduler/manager.py | 44 +- manila/scheduler/rpcapi.py | 36 +- manila/scheduler/scheduler_options.py | 11 +- manila/scheduler/utils.py | 51 +- manila/service.py | 21 +- manila/share/access.py | 633 +++- manila/share/api.py | 692 +++-- manila/share/driver.py | 631 +++- manila/share/drivers/__init__.py | 22 - manila/share/drivers/cephfs/cephfs_native.py | 30 +- manila/share/drivers/container/container_helper.py | 8 +- manila/share/drivers/container/driver.py | 35 +- manila/share/drivers/container/storage_helper.py | 21 +- manila/share/drivers/dell_emc/__init__.py | 0 manila/share/drivers/dell_emc/driver.py | 147 + manila/share/drivers/dell_emc/plugin_manager.py | 31 + manila/share/drivers/dell_emc/plugins/__init__.py | 0 manila/share/drivers/dell_emc/plugins/base.py | 90 + .../drivers/dell_emc/plugins/isilon/__init__.py | 0 .../drivers/dell_emc/plugins/isilon/isilon.py | 404 +++ .../drivers/dell_emc/plugins/isilon/isilon_api.py | 337 +++ .../drivers/dell_emc/plugins/unity/__init__.py | 0 .../share/drivers/dell_emc/plugins/unity/client.py | 343 +++ .../drivers/dell_emc/plugins/unity/connection.py | 676 +++++ .../share/drivers/dell_emc/plugins/unity/utils.py | 75 + .../drivers/dell_emc/plugins/vmax/__init__.py | 0 .../drivers/dell_emc/plugins/vmax/connection.py | 880 ++++++ .../drivers/dell_emc/plugins/vmax/connector.py | 167 + .../drivers/dell_emc/plugins/vmax/constants.py | 55 + .../dell_emc/plugins/vmax/object_manager.py | 2052 +++++++++++++ .../share/drivers/dell_emc/plugins/vmax/utils.py | 83 + .../dell_emc/plugins/vmax/xml_api_parser.py | 317 ++ .../share/drivers/dell_emc/plugins/vnx/__init__.py | 0 .../drivers/dell_emc/plugins/vnx/connection.py | 870 ++++++ .../drivers/dell_emc/plugins/vnx/connector.py | 166 + .../drivers/dell_emc/plugins/vnx/constants.py | 55 + .../drivers/dell_emc/plugins/vnx/object_manager.py | 2054 +++++++++++++ manila/share/drivers/dell_emc/plugins/vnx/utils.py | 83 + .../drivers/dell_emc/plugins/vnx/xml_api_parser.py | 317 ++ manila/share/drivers/emc/__init__.py | 0 manila/share/drivers/emc/driver.py | 157 - manila/share/drivers/emc/plugin_manager.py | 31 - manila/share/drivers/emc/plugins/__init__.py | 0 manila/share/drivers/emc/plugins/base.py | 86 - .../share/drivers/emc/plugins/isilon/__init__.py | 0 manila/share/drivers/emc/plugins/isilon/isilon.py | 404 --- .../share/drivers/emc/plugins/isilon/isilon_api.py | 337 --- manila/share/drivers/emc/plugins/unity/__init__.py | 0 manila/share/drivers/emc/plugins/unity/client.py | 274 -- .../share/drivers/emc/plugins/unity/connection.py | 633 ---- manila/share/drivers/emc/plugins/unity/utils.py | 34 - manila/share/drivers/emc/plugins/vnx/__init__.py | 0 manila/share/drivers/emc/plugins/vnx/connection.py | 797 ----- manila/share/drivers/emc/plugins/vnx/connector.py | 168 -- manila/share/drivers/emc/plugins/vnx/constants.py | 55 - .../drivers/emc/plugins/vnx/object_manager.py | 1978 ------------ manila/share/drivers/emc/plugins/vnx/utils.py | 83 - .../drivers/emc/plugins/vnx/xml_api_parser.py | 317 -- manila/share/drivers/generic.py | 311 +- manila/share/drivers/glusterfs/layout_directory.py | 10 +- manila/share/drivers/helpers.py | 164 +- manila/share/drivers/hitachi/hnas/driver.py | 741 ++++- manila/share/drivers/hitachi/hnas/ssh.py | 335 +- manila/share/drivers/hpe/hpe_3par_driver.py | 20 +- manila/share/drivers/hpe/hpe_3par_mediator.py | 43 +- manila/share/drivers/huawei/constants.py | 5 +- manila/share/drivers/huawei/huawei_nas.py | 1 + manila/share/drivers/huawei/v3/connection.py | 29 +- manila/share/drivers/huawei/v3/helper.py | 13 +- manila/share/drivers/huawei/v3/smartx.py | 2 +- manila/share/drivers/ibm/gpfs.py | 573 +++- manila/share/drivers/lvm.py | 129 +- manila/share/drivers/maprfs/__init__.py | 0 manila/share/drivers/maprfs/driver_util.py | 348 +++ manila/share/drivers/maprfs/maprfs_native.py | 438 +++ .../share/drivers/netapp/dataontap/client/api.py | 2 + .../drivers/netapp/dataontap/client/client_base.py | 4 +- .../netapp/dataontap/client/client_cmode.py | 326 +- .../netapp/dataontap/cluster_mode/data_motion.py | 12 +- .../netapp/dataontap/cluster_mode/drv_multi_svm.py | 69 +- .../dataontap/cluster_mode/drv_single_svm.py | 70 +- .../netapp/dataontap/cluster_mode/lib_base.py | 442 ++- .../netapp/dataontap/cluster_mode/lib_multi_svm.py | 10 +- .../dataontap/cluster_mode/lib_single_svm.py | 16 +- .../netapp/dataontap/cluster_mode/performance.py | 405 +++ .../netapp/dataontap/protocols/cifs_cmode.py | 6 +- .../netapp/dataontap/protocols/nfs_cmode.py | 6 +- manila/share/drivers/netapp/options.py | 12 +- manila/share/drivers/netapp/utils.py | 2 +- manila/share/drivers/qnap/__init__.py | 0 manila/share/drivers/qnap/api.py | 646 ++++ manila/share/drivers/qnap/qnap.py | 707 +++++ manila/share/drivers/service_instance.py | 101 +- manila/share/drivers/tegile/tegile.py | 1 + manila/share/drivers/windows/windows_smb_helper.py | 13 +- manila/share/drivers/zfsonlinux/driver.py | 28 +- manila/share/drivers/zfsonlinux/utils.py | 7 +- manila/share/manager.py | 1127 +++++-- manila/share/migration.py | 80 +- manila/share/rpcapi.py | 102 +- manila/share/share_types.py | 137 +- manila/share/snapshot_access.py | 169 ++ manila/share/utils.py | 18 + manila/share_group/__init__.py | 0 manila/share_group/api.py | 361 +++ manila/share_group/share_group_types.py | 174 ++ manila/test.py | 16 +- .../api/openstack/test_api_version_request.py | 11 +- .../api/v2/test_share_snapshot_export_locations.py | 116 + ...est_share_snapshot_instance_export_locations.py | 113 + .../migrations/alembic/migrations_data_checks.py | 1164 ++++++- .../share/drivers/cephfs/test_cephfs_native.py | 64 +- .../drivers/container/test_container_helper.py | 2 +- .../drivers/container/test_protocol_helper.py | 2 +- .../share/drivers/container/test_storage_helper.py | 25 + .../share/drivers/dell_emc/plugins/__init__.py | 0 .../drivers/dell_emc/plugins/isilon/__init__.py | 0 .../drivers/dell_emc/plugins/isilon/test_isilon.py | 766 +++++ .../dell_emc/plugins/isilon/test_isilon_api.py | 868 ++++++ .../drivers/dell_emc/plugins/unity/__init__.py | 20 + .../dell_emc/plugins/unity/fake_exceptions.py | 86 + .../dell_emc/plugins/unity/mocked_manila.yaml | 243 ++ .../dell_emc/plugins/unity/mocked_unity.yaml | 1084 +++++++ .../drivers/dell_emc/plugins/unity/res_mock.py | 352 +++ .../drivers/dell_emc/plugins/unity/test_client.py | 218 ++ .../dell_emc/plugins/unity/test_connection.py | 615 ++++ .../drivers/dell_emc/plugins/unity/test_utils.py | 113 + .../share/drivers/dell_emc/plugins/unity/utils.py | 35 + .../drivers/dell_emc/plugins/vmax/__init__.py | 0 .../share/drivers/dell_emc/plugins/vmax/fakes.py | 1563 ++++++++++ .../dell_emc/plugins/vmax/test_connection.py | 1636 ++++++++++ .../dell_emc/plugins/vmax/test_connector.py | 224 ++ .../dell_emc/plugins/vmax/test_object_manager.py | 3186 ++++++++++++++++++++ .../drivers/dell_emc/plugins/vmax/test_utils.py | 44 + .../share/drivers/dell_emc/plugins/vmax/utils.py | 167 + .../share/drivers/dell_emc/plugins/vnx/__init__.py | 0 .../share/drivers/dell_emc/plugins/vnx/fakes.py | 1563 ++++++++++ .../dell_emc/plugins/vnx/test_connection.py | 1605 ++++++++++ .../drivers/dell_emc/plugins/vnx/test_connector.py | 224 ++ .../dell_emc/plugins/vnx/test_object_manager.py | 3185 +++++++++++++++++++ .../drivers/dell_emc/plugins/vnx/test_utils.py | 44 + .../share/drivers/dell_emc/plugins/vnx/utils.py | 167 + .../share/drivers/emc/plugins/isilon/__init__.py | 0 .../drivers/emc/plugins/isilon/test_isilon.py | 763 ----- .../drivers/emc/plugins/isilon/test_isilon_api.py | 868 ------ .../share/drivers/emc/plugins/unity/__init__.py | 20 - .../drivers/emc/plugins/unity/fake_exceptions.py | 66 - .../drivers/emc/plugins/unity/mocked_manila.yaml | 235 -- .../drivers/emc/plugins/unity/mocked_unity.yaml | 974 ------ .../share/drivers/emc/plugins/unity/res_mock.py | 337 --- .../share/drivers/emc/plugins/unity/test_client.py | 168 -- .../drivers/emc/plugins/unity/test_connection.py | 617 ---- .../share/drivers/emc/plugins/unity/test_utils.py | 50 - .../share/drivers/emc/plugins/vnx/__init__.py | 0 .../drivers/emc/plugins/vnx/test_connection.py | 1453 --------- .../drivers/emc/plugins/vnx/test_connector.py | 224 -- .../drivers/emc/plugins/vnx/test_object_manager.py | 3087 ------------------- .../share/drivers/emc/plugins/vnx/test_utils.py | 44 - .../drivers/glusterfs/test_glusterfs_native.py | 4 + .../drivers/glusterfs/test_layout_directory.py | 4 +- .../share/drivers/hitachi/hnas/test_driver.py | 522 +++- .../share/drivers/hpe/test_hpe_3par_constants.py | 78 +- .../share/drivers/hpe/test_hpe_3par_driver.py | 30 +- .../share/drivers/hpe/test_hpe_3par_mediator.py | 23 +- .../share/drivers/netapp/dataontap/client/fakes.py | 286 +- .../netapp/dataontap/client/test_client_base.py | 5 +- .../netapp/dataontap/client/test_client_cmode.py | 373 ++- .../dataontap/cluster_mode/test_data_motion.py | 20 +- .../netapp/dataontap/cluster_mode/test_lib_base.py | 881 +++++- .../dataontap/cluster_mode/test_lib_multi_svm.py | 37 +- .../dataontap/cluster_mode/test_lib_single_svm.py | 39 +- .../dataontap/cluster_mode/test_performance.py | 808 +++++ .../drivers/windows/test_windows_smb_helper.py | 27 +- manila/utils.py | 199 +- manila/volume/cinder.py | 17 +- .../services/share/v2/json/shares_client.py | 617 +++- .../api/admin/test_consistency_group_actions.py | 151 - .../api/admin/test_consistency_groups_negative.py | 292 -- .../api/admin/test_export_locations_negative.py | 14 +- .../api/admin/test_share_group_types_negative.py | 137 + .../api/admin/test_share_snapshot_instances.py | 10 +- .../test_share_snapshot_instances_negative.py | 12 +- .../api/admin/test_share_types_extra_specs.py | 37 +- .../admin/test_share_types_extra_specs_negative.py | 102 +- .../api/admin/test_snapshot_export_locations.py | 140 + .../test_snapshot_export_locations_negative.py | 140 + .../api/admin/test_snapshot_manage_negative.py | 12 +- .../api/test_security_services_mapping_negative.py | 26 +- rally-jobs/rally-manila-no-ss.yaml | 92 + rally-jobs/rally-manila.yaml | 198 ++ ...fix-get_vfs-driver-bootup-db6b085eb6094f5f.yaml | 8 + ...check-tenant-quota-usages-7fs17djahy61nsd6.yaml | 4 + ...t-rules-to-readonly-field-62ead37b728db654.yaml | 7 + ...apshot_support-extra-spec-9b1c3ad6796dd07d.yaml | 7 + .../add-manage-db-purge-b32a24ee045d8d45.yaml | 4 + ...e-filter-to-pool-list-api-267614b4d93j12de.yaml | 3 + ...rsions-mark-v1-deprecated-3540d39279fbd60e.yaml | 11 + .../bp-admin-network-hnas-9b714736e521101e.yaml | 7 + ...ta-migration-improvements-c8c5675e266100da.yaml | 26 + ...25-port_binding_mandatory-2aaba0fa72b82676.yaml | 4 + ...ot-filter-root-aggregates-c30ac5064d530b86.yaml | 6 + ...nstance-access-rule-state-7c08a91373b21557.yaml | 24 + ...3-migration-rw-access-fix-7da3365c7b5b90a1.yaml | 5 + ...igration-completing-state-1e4926ed56eb268c.yaml | 6 + ...pport-from-generic-driver-16efce98f94b1b6b.yaml | 4 + ...d-share-in-generic-driver-5c7f82faefaf26ea.yaml | 7 + ...-ceph-connection-on-setup-c92bde41ced43326.yaml | 4 + ...y-zfsonlinux-child-shares-4f85908c8e9871ef.yaml | 5 + ...r-lvm-and-generic-drivers-94a1161a9e0b5a85.yaml | 6 + ...-netapp-broadcast-domains-411a626d38835177.yaml | 4 + ...-1649782-fixed-incorrect-exportfs-exportfs.yaml | 4 + ...-1650043-gpfs-access-bugs-8c10f26ff1f795f4.yaml | 6 + .../bug-1651578-gpfs-prepend-beb99f408cf20bb5.yaml | 6 + ...651587-deny-access-verify-563ef2f3f6b8c13b.yaml | 4 + ...x-share-metadata-error-when-deleting-share.yaml | 4 + ...ug-1658133-fix-lvm-revert-34a90e70c9aa7354.yaml | 4 + ...36-migration-share-groups-e66a1478634947ad.yaml | 5 + ...e-group-snapshot-creation-3e843155c395e861.yaml | 6 + ...-snapshot-access-in-error-bce279ee310060f5.yaml | 4 + ...tions-mount-not-supported-cdc2f5a3b57a9319.yaml | 5 + ...igration-export-locations-5670734670435015.yaml | 4 + ...-to-share-groups-DB-model-daa1d05129802796.yaml | 4 + ...71-hnas-snapshot-readonly-4e50183100ed2b19.yaml | 5 + ...snapshot-export-locations-169786dcec386402.yaml | 5 + .../notes/bug-1663300-554e9c78ca2ba992.yaml | 4 + ...65002-hnas-driver-version-f3a8f6bff3dbe054.yaml | 5 + ...r-hardening-against-races-30c9f517a6392b9d.yaml | 4 + ...nce-network-helper-option-82ff62a038f2bfa3.yaml | 5 + ...are-groups-api-by-default-0627b97ac2cda4cb.yaml | 13 + ...-mount-on-manage-snapshot-91e094c579ddf1a3.yaml | 4 + ...uawei-driver-qos-deletion-9ad62db3d7415980.yaml | 4 + ...level_managed_shares_hnas-c76a09beed365b46.yaml | 4 + ...fix_manage_snapshots_hnas-2c0e1a47b5e6ac33.yaml | 4 + ...unmanage-snapshot-support-0d939e1764c9ebb9.yaml | 3 + .../hnas-mountable-snapshots-4fbffa05656112c4.yaml | 9 + .../hnas-revert-to-snapshot-a2405cd6653b1e85.yaml | 9 + .../ibm-gpfs-manage-support-c110120c350728e3.yaml | 8 + .../introduce-tooz-library-5fed75b8caffcf42.yaml | 15 + .../maprfs-manila-drivers-1541296f26cf78fd.yaml | 3 + ...re-driver-to-dell-emc-dir-1ec34dee0544270d.yaml | 6 + ...ation-within-share-server-92cfa1bcf0c317fc.yaml | 5 + ...t_performance_utilization-aff1b498a159470e.yaml | 7 + .../notes/qnap-manila-driver-a30fe4011cb90801.yaml | 4 + ...-from-shares-and-replicas-a087f85bc4a4ba45.yaml | 10 + ...m-service-instance-module-dd7559803fa01d45.yaml | 5 + ...move-nova-network-support-f5bcb8b2fcd38581.yaml | 5 + .../share-mount-snapshots-b52bf3433d1e7afb.yaml | 7 + .../share-revert-to-snapshot-3d028fa00620651e.yaml | 4 + ...hot-in-netapp-cdot-driver-37f645ec3c14313c.yaml | 8 + ...-drvier-support-1gb-share-48f032dff8a6a789.yaml | 5 + .../unity-vnx-rename-options-1656168dd4bdba70.yaml | 16 + ...hancement-in-unity-driver-0f1d972f2f6d00d9.yaml | 10 + .../vmax-manila-support-7c655fc094c09367.yaml | 3 + releasenotes/source/conf.py | 4 +- releasenotes/source/index.rst | 1 + releasenotes/source/newton.rst | 6 + requirements.txt | 35 +- setup.cfg | 12 +- test-requirements.txt | 15 +- tools/cover.sh | 10 +- tools/lintstack.py | 5 +- tools/test-setup.sh | 57 + tox.ini | 11 +- 596 files changed, 73949 insertions(+), 33141 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a2939e1..5c3cb33 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ -pbr>=1.6 # Apache-2.0 +pbr>=1.8 # Apache-2.0 @@ -8 +8 @@ pbr>=1.6 # Apache-2.0 -alembic>=0.8.4 # MIT +alembic>=0.8.10 # MIT @@ -12,3 +12,3 @@ greenlet>=0.3.2 # MIT -lxml>=2.3 # BSD -netaddr!=0.7.16,>=0.7.12 # BSD -oslo.config>=3.14.0 # Apache-2.0 +lxml!=3.7.0,>=2.3 # BSD +netaddr!=0.7.16,>=0.7.13 # BSD +oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 @@ -16 +16 @@ oslo.context>=2.9.0 # Apache-2.0 -oslo.db!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0 +oslo.db>=4.15.0 # Apache-2.0 @@ -18,2 +18,2 @@ oslo.i18n>=2.1.0 # Apache-2.0 -oslo.log>=1.14.0 # Apache-2.0 -oslo.messaging>=5.2.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 +oslo.messaging>=5.14.0 # Apache-2.0 @@ -21 +21 @@ oslo.middleware>=3.0.0 # Apache-2.0 -oslo.policy>=1.9.0 # Apache-2.0 +oslo.policy>=1.17.0 # Apache-2.0 @@ -25 +25 @@ oslo.service>=1.10.0 # Apache-2.0 -oslo.utils>=3.16.0 # Apache-2.0 +oslo.utils>=3.18.0 # Apache-2.0 @@ -30 +30 @@ PasteDeploy>=1.5.0 # MIT -pyparsing>=2.0.1 # MIT +pyparsing>=2.1.0 # MIT @@ -32,3 +32,3 @@ python-neutronclient>=5.1.0 # Apache-2.0 -keystoneauth1>=2.10.0 # Apache-2.0 -keystonemiddleware!=4.1.0,!=4.5.0,>=4.0.0 # Apache-2.0 -requests>=2.10.0 # Apache-2.0 +keystoneauth1>=2.18.0 # Apache-2.0 +keystonemiddleware>=4.12.0 # Apache-2.0 +requests!=2.12.2,>=2.10.0 # Apache-2.0 @@ -40 +40,2 @@ SQLAlchemy<1.1.0,>=1.0.10 # MIT -stevedore>=1.16.0 # Apache-2.0 +stevedore>=1.17.1 # Apache-2.0 +tooz>=1.47.0 # Apache-2.0 @@ -42,2 +43,2 @@ python-cinderclient!=1.7.0,!=1.7.1,>=1.6.0 # Apache-2.0 -python-novaclient!=2.33.0,>=2.29.0 # Apache-2.0 -WebOb>=1.2.3 # MIT +python-novaclient!=7.0.0,>=6.0.0 # Apache-2.0 +WebOb>=1.6.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index bc17d0d..7a886cb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ bashate>=0.2 # Apache-2.0 -coverage>=3.6 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -15 +15 @@ oslotest>=1.10.0 # Apache-2.0 -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +oslosphinx>=4.7.0 # Apache-2.0 @@ -21 +21 @@ openstackdocstheme>=1.5.0 # Apache-2.0 -PyMySQL!=0.7.7,>=0.6.2 # MIT License +PyMySQL>=0.7.6 # MIT License @@ -25,2 +25,2 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -requests-mock>=1.0 # Apache-2.0 -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +requests-mock>=1.1 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD @@ -28 +28 @@ os-api-ref>=1.0.0 # Apache-2.0 -os-testr>=0.7.0 # Apache-2.0 +os-testr>=0.8.0 # Apache-2.0 @@ -30,0 +31 @@ testresources>=0.2.4 # Apache-2.0/BSD +testscenarios>=0.4 # Apache-2.0/BSD @@ -32 +33 @@ testtools>=1.4.0 # MIT -reno>=1.8.0 # Apache2 +reno>=1.8.0 # Apache-2.0

1 0

[keystone] keystone 11.0.0 (ocata)
by no-reply＠openstack.org 22 Feb '17

22 Feb '17

We jubilantly announce the release of: keystone 11.0.0: OpenStack Identity This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/keystone/ For more details, please see below. 11.0.0 ^^^^^^ * The default token provider is now Fernet. * The PKI and PKIz token format has been removed. See "Other Notes" for more details. * Support for writing to LDAP has been removed. See "Other Notes" for more details. New Features ************ * [blueprint allow-expired (https://blueprints.launchpad.net/keystone/+spec/allow-expired) An *allow_expired* flag is added to the token validation call ("GET/HEAD /v3/auth/tokens") that allows fetching a token that has expired. This allows for validating tokens in long running operations. * [blueprint password-expires-validation (https://blueprints.launchpad.net/keystone/+spec/password-expires- validation)] Token responses will now have a "password_expires_at" field in the "user" object, this can be expressed briefly as: {"token": {"user": {"password_expires_at": null}}} If PCI support is enabled, via the "[security_compliance]" configuration options, then the "password_expires_at" field will be populated with a timestamp. Otherwise, it will default to "null", indicating the password does not expire. * [blueprint pci-dss-notifications (https://blueprints.launchpad.net/keystone/+spec/pci-dss- notifications)] CADF notifications now extend to PCI-DSS events. A "reason" object is added to the notification. A "reason" object has both a "reasonType" (a short description of the reason) and "reasonCode" (the HTTP return code). The following events will be impacted: * If a user does not change their passwords at least once every X days. See "[security_compliance] password_expires_days". * If a user is locked out after many failed authentication attempts. See "[security_compliance] lockout_failure_attempts". * If a user submits a new password that was recently used. See "[security_compliance] unique_last_password_count". * If a password does not meet the specified criteria. See "[security_compliance] password_regex". * If a user attempts to change their password too often. See "[security_compliance] minimum_password_age". For additional details see: event notifications (Seehttps://docs.op enstack.org/developer/keystone/event_notifications.html) * [blueprint pci-dss-password-requirements-api (https://blueprints.launchpad.net/keystone/+spec/pci-dss-password- requirements-api)] Added a new API ("/v3/domains/{domain_id}/config/security_compliance") to retrieve regular expression requirements for passwords. Specifically, "[security_compliance] password_regex" and "[security_compliance] password_regex_description" will be returned. Note that these options are only meaningful if PCI support is enabled, via various "[security_compliance]" configuration options. * [blueprint pci-dss-query-password-expired-users (https://blueprints.launchpad.net/keystone/+spec/pci-dss-query- password-expired-users)] Added a "password_expires_at" query to "/v3/users" and "/v3/groups/{group_id}/users". The "password_expires_at" query is comprised of two parts, an "operator" (valid choices listed below) and a "timestamp" (of form "YYYY-MM- DDTHH:mm:ssZ"). The APIs will filter the list of users based on the "operator" and "timestamp" given. * lt - password expires before the timestamp * lte - password expires at or before timestamp * gt - password expires after the timestamp * gte - password expires at or after the timestamp * eq - password expires at the timestamp * neq - password expires not at the timestamp * [blueprint per-user-auth-plugin-reqs (https://blueprints.launchpad.net/keystone/+spec/per-user-auth- plugin-reqs)] Per-user Multi-Factor-Auth rules (MFA Rules) have been implemented. These rules define which auth methods can be used (e.g. Password, TOTP) and provides the ability to require multiple auth forms to successfully get a token. The MFA rules are set via the user create and update API ("POST/PATCH /v3/users") call; the options allow an admin to force a user to use specific forms of authentication or combinations of forms of authentication to get a token. The rules are specified as follows: user["options"]["multi_factor_auth_rules"] = [["password", "totp"], ["password", "custom-auth-method"]] The rules are specified as a list of lists. The elements of the sub- lists must be strings and are intended to mirror the required authentication method names (e.g. "password", "totp", etc) as defined in the "keystone.conf" file in the "[auth] methods" option. Each list of methods specifies a rule. If the auth methods provided by a user match (or exceed) the auth methods in the list, that rule is used. The first rule found (rules will not be processed in a specific order) that matches will be used. If a user has the ruleset defined as "[["password", "totp"]]" the user must provide both password and totp auth methods (and both methods must succeed) to receive a token. However, if a user has a ruleset defined as "[["password"], ["password", "totp"]]" the user may use the "password" method on it's own but would be required to use both "password" and "totp" if "totp" is specified at all. Any auth methods that are not defined in "keystone.conf" in the "[auth] methods" option are ignored when the rules are processed. Empty rules are not allowed. If a rule is empty due to no-valid auth methods existing within it, the rule is discarded at authentication time. If there are no rules or no valid rules for the user, authentication occurs in the default manner: any single configured auth method is sufficient to receive a token. In the case a user should be exempt from MFA Rules, regardless if they are set, the User-Option "multi_factor_auth_enabled" may be set to "False" for that user via the user create and update API ("POST/PATCH /v3/users") call. If this option is set to "False" the MFA rules will be ignored for the user. Any other value except "False" will result in the MFA Rules being processed; the option can only be a boolean ("True" or "False") or "None" (which will result in the default behavior (same as "True") but the option will no longer be shown in the "user["options"]" dictionary. To mark a user exempt from the MFA Rules: user["options"]["multi_factor_auth_enabled"] = False The "token" auth method typically should not be specified in any MFA Rules. The "token" auth method will include all previous auth methods for the original auth request and will match the appropriate ruleset. This is intentional, as the "token" method is used for rescoping/changing active projects. SECURITY INFO: The MFA rules are only processed when authentication happens through the V3 authentication APIs. If V2 Auth is enabled it is possible to circumvent the MFA rules if the user can authenticate via V2 Auth API. It is recommended to disable V2 authentication for full enforcement of the MFA rules. * [blueprint manage-migration (https://blueprints.launchpad.net/keystone/+spec/manage-migration) The federated identity mapping engine now supports the ability to automatically provision "projects" for "federated users". A role assignment will automatically be created for the user on the specificed proejct. If the project specified within the mapping does not exist, it will be automatically created in the "domain" associated with the "identity provider". This behavior can be triggered using a specific syntax within the "local" rules section of a mapping. For more information see: mapping combinations (https ://docs.openstack.org/developer/keystone/federation/federated_ident ity.html#mapping-combinations) * [blueprint support-federated-attr (https://blueprints.launchpad.net/keystone/+spec/support-federated- attr)] Added new filters to the *list user* API ("GET /v3/users") to support querying federted identity atttributes: "idp_id", "protocol_id", and "unique_id". * [bug 1638603 (https://bugs.launchpad.net/keystone/+bug/1638603) Add support for nested groups in Active Directory. A new boolean option "[ldap] group_ad_nesting" has been added, it defaults to "False". Enable the option is using Active Directory with nested groups. This option will impact the "list_users_in_group", "list_groups_for_user", and "check_user_in_group" operations. * [bug 1641645 (https://bugs.launchpad.net/keystone/+bug/1641645) RBAC protection was removed from the *Self-service change user password* API ("/v3/user/$user_id/password"), meaning, a user can now change their password without a token specified in the "X-Auth- Token" header. This change will allow a user, with an expired password, to update their password without the need of an administrator. * [bug 1641654 (https://bugs.launchpad.net/keystone/+bug/1641654) The "healthcheck" middleware from *oslo.middleware* has been added to the keystone application pipelines by default. This middleware provides a common method to check the health of keystone. Refer to the example paste provided in "keystone-paste.ini" to see how to include the "healthcheck" middleware. * [bug 1641816 (https://bugs.launchpad.net/keystone/+bug/1641816) The "[token] cache_on_issue" option is now enabled by default. This option has no effect unless global caching and token caching are enabled. * [bug 1642348 (https://bugs.launchpad.net/keystone/+bug/1642348) Added new option "[security_compliance] lockout_ignored_user_ids" to allow deployers to specify users that are exempt from PCI lockout rules. * [Bug 1645487 (https://bugs.launchpad.net/keystone/+bug/1645487) Added a new PCI-DSS feature that will require users to immediately change their password upon first use for new users and after an administrative password reset. The new feature can be enabled by setting [security_compliance] "change_password_upon_first_use" to "True". Upgrade Notes ************* * [blueprint allow-expired (https://blueprints.launchpad.net/keystone/+spec/allow-expired) To allow long running operations to complete services must be able to fetch expired tokens via the "allow_expired" flag. The length of time a token is retrievable for beyond its traditional expiry is managed by the "[token] allow_expired_window" option and so the data must be retrievable for this about of time. When using fernet tokens this means that the key rotation period must exceed this time so that older tokens are still decrytable. Ensure that you do not rotate fernet keys faster than "[token] expiration" + "[token] allow_expired_window" seconds. * [bug 1547684 (https://bugs.launchpad.net/keystone/+bug/1547684) A minor change to the "policy.v3cloudsample.json" sample file was performed so the sample file loads correctly. The "cloud_admin" rule has changed from: "role:admin and (token.is_admin_project:True or domain_id:admin_domain_id)" To the properly written: "role:admin and (is_admin_project:True or domain_id:admin_domain_id)" Adjust configuration tools as necessary, see the "fixes" section for more details on this change. * [bug 1561054 (https://bugs.launchpad.net/keystone/+bug/1561054) The default token provider has switched from UUID to Fernet. Please note that Fernet requires a key repository to be in place prior to running Ocata, this can be done running "keystone-manage fernet_setup". Additionally, for multi-node deployments, it is imperative that a key distribution process be in use before upgrading. Once a key repository has been created it should be distributed to all keystone nodes in the deployment. This ensures that each keystone node will be able to validate tokens issued across the deployment. If you do not wish to switch token formats, you will need to explicitly set the token provider for each node in the deployment by setting "[token] provider" to "uuid" in "keystone.conf". Documentation can be found at fernet-tokens (https://docs.openstack.org/developer/keystone/configuration.html #encryption-keys-for-fernet-tokens). * [bug 1641654 (https://bugs.launchpad.net/keystone/+bug/1641654) The "healthcheck" middleware from *oslo.middleware* has been added to the keystone application pipelines by default. The following section has been added to "keystone-paste.ini": [filter:healthcheck] use = egg:oslo.middleware#healthcheck It is recommended to have the "healthcheck" middleware first in the pipeline: pipeline = healthcheck cors sizelimit http_proxy_to_wsgi osprofiler ... * [bug 1641660 (https://bugs.launchpad.net/keystone/+bug/1641660) The default value for "[DEFAULT] notification_format" has been changed from "basic" to "cadf". The CADF notifications have more information about the user that initiated the request. * [bug 1641660 (https://bugs.launchpad.net/keystone/+bug/1641660) The default value for "[DEFAULT] notification_opt_out" has been changed to include: "identity.authenticate.success", "identity.authenticate.pending" and "identity.authenticate.failed". If a deployment relies on these notifications, then override the default setting. * [bug 1642687 (https://bugs.launchpad.net/keystone/+bug/1642687) Upon a successful upgrade, all existing "identity providers" will now be associated with a automatically created domain. Each "identity provider" that existed prior to the *Ocata* release will now have a "domain_id" field. The new domain will have an "id" (random UUID), a "name" (that will match the "identity provider" ID , and be "enabled" by default. * [Related to Bug 1649446 (https://bugs.launchpad.net/keystone/+bug/1649446) The "identity:list_revoke_events" rule has been changed in both sample policy files, "policy.json" and "policy.v3cloudsample.json". From: "identity:list_revoke_events": "" To: "identity:list_revoke_events": "rule:service_or_admin" Deprecation Notes ***************** * [bug 1659995 (https://bugs.launchpad.net/keystone/+bug/1659995) The config option "[security_compliance] ignore_password_expires_user_ids" has been deprecated in favor of using the option value set, available via the user create and update API call * [blueprint deprecated-as-of-ocata (https://blueprints.launchpad.net/keystone/+spec/deprecated-as-of- ocata)] The catalog backend "endpoint_filter.sql" has been deprecated in the *Ocata* release, it has been consolidated with the "sql" backend. It is recommended to replace the "endpoint_filter.sql" catalog backend with the "sql" backend. The "endpoint_filter.sql" backend will be removed in the *Pike* release. * [blueprint deprecated-as-of-ocata (https://blueprints.launchpad.net/keystone/+spec/deprecated-as-of- ocata)] Various KVS backends and config options have been deprecated and will be removed in the *Pike* release. This includes: * "keystone.common.kvs.backends.inmemdb.MemoryBackend" * "keystone.common.kvs.backends.memcached.MemcachedBackend" * "keystone.token.persistence.backends.kvs.Token" * all config options under "[kvs]" in *keystone.conf* * the config option "[memcached] servers" in *keystone.conf* Critical Issues *************** * [bug 1561054 (https://bugs.launchpad.net/keystone/+bug/1561054) If upgrading to Fernet tokens, you must have a key repository and key distribution mechanism in place, otherwise token validation may not work. Please see the upgrade section for more details. Security Issues *************** * [bug 1650676 (https://bugs.launchpad.net/keystone/+bug/1656076) Authentication plugins now required "AuthContext" objects to be used. This has added security features to ensure information such as the "user_id" does not change between authentication methods being processed by the server. The "keystone.controllers.Auth.authenticate" method now requires the argument "auth_context" to be an actual "AuthContext" object. Bug Fixes ********* * [bug 1524030 (https://bugs.launchpad.net/keystone/+bug/1524030) During token validation we have reduced the number of revocation events returned, only returning a subset of events relevant to the token. Thus, improving overall token validation performance. * [bug 1651989 (https://bugs.launchpad.net/keystone/+bug/1651989) Due to "bug 1547684", when using the "policy.v3cloudsample.json" sample file, a domain admin token was being treated as a cloud admin. Since the "is_admin_project" functionality only supports project-scoped tokens, we automatically set any domain scoped token to have the property "is_admin_project" to "False". [bug 1547684 (https://bugs.launchpad.net/keystone/+bug/1547684) A typo in the "policy.v3cloudsample.json" sample file was causing *oslo.policy* to not load the file. See the "upgrades" section for more details. * [bug 1571878 (https://bugs.launchpad.net/keystone/+bug/1571878) A valid "mapping_id" is now required when creating or updating a federation protocol. If the "mapping_id" does not exist, a "400 - Bad Request" will be returned. * [bug 1616424 (https://bugs.launchpad.net/keystone/+bug/1616424) Provide better exception messages when creating OAuth request tokens and OAuth access tokens via the "/v3/OS-OAUTH1/request_token" and "/v3/OS-OAUTH1/access_token" APIs, respectively. * [bug 1622310 (https://bugs.launchpad.net/keystone/+bug/1622310) Trusts will now be invalidated if: the project to which the trust is scoped, or the user (trustor or trustee) for which the delegation is assigned, has been deleted. * [bug 1636950 (https://bugs.launchpad.net/keystone/+bug/1636950) New option "[ldap] connection_timeout" allows a deployer to set a "OPT_NETWORK_TIMEOUT" value to use with the LDAP server. This allows the LDAP server to return a "SERVER_DOWN" exception, if the LDAP URL is incorrect if there is a connection failure. By default, the value for "[ldap] connection_timeout" is -1, meaning it is disabled. Set a postive value (in seconds) to enable the option. * [bug 1642457 (https://bugs.launchpad.net/keystone/+bug/1642457) Handle disk write and IO failures when rotating keys for Fernet tokens. Rather than creating empty keys, properly catch and log errors when unable to write to disk. * [bug 1642687 (https://bugs.launchpad.net/keystone/+bug/1642687) When registering an "identity provider" via the OS-FEDERATION API, it is now recommended to include a "domain_id" to associate with the "identity provider" in the request. Federated users that authenticate with the "identity provider" will now be associated with the "domain_id" specified. If no "domain_id" is specified, then a domain will be automatically created. * [bug 1642687 (https://bugs.launchpad.net/keystone/+bug/1642687) Users that authenticate with an "identity provider" will now have a "domain_id" attribute, that is associated with the "identity provider". * [bug 1642692 (https://bugs.launchpad.net/keystone/+bug/1642692) When a *federation protocol* is deleted, all users that authenticated with the *federation protocol* will also be deleted. * [bug 1649138 (https://bugs.launchpad.net/keystone/+bug/1649138) When using LDAP as an identity backend, the initial bind will now occur upon creation of a connection object, i.e. early on when performing LDAP queries, no matter whether the bind is authenticated or anonymous, so that any connection errors can be handled correctly and early. * [Bug 1649446 (https://bugs.launchpad.net/keystone/+bug/1651989) The default policy for listing revocation events has changed. Previously, any authenticated user could list revocation events; it is now, by default, an admin or service user only function. This can be changed by modifying the policy file being used by keystone. * [bug 1656076 (https://bugs.launchpad.net/keystone/+bug/1656076) The various plugins under "keystone.controllers.Auth.authenticate" now require "AuthContext" objects to be returned. * [bug 1659995 (https://bugs.launchpad.net/keystone/+bug/1659995) New options have been made available via the user create and update API ("POST/PATCH /v3/users") call, the options will allow an admin to mark users as exempt from certain PCI requirements via an API. Set the following user attributes to "True" or "False" in an API request. To mark a user as exempt from the PCI password lockout policy: user['options']['ignore_lockout_failure_attempts'] To mark a user as exempt from the PCI password expiry policy: user['options']['ignore_password_expiry'] To mark a user as exempt from the PCI reset policy: user['options']['ignore_change_password_upon_first_use'] Other Notes *********** * [bug 1017606 (https://bugs.launchpad.net/keystone/+bug/1017606) The signature on the "get_catalog" and "get_v3_catalog" methods of "keystone.catalog.backends.base.CatalogDriverBase" have been updated. Third-party extensions that extend the abstract class ("CatalogDriverBase") should be updated according to the new parameter names. The method signatures have changed from: get_catalog(self, user_id, tenant_id) get_v3_catalog(self, user_id, tenant_id) to: get_catalog(self, user_id, project_id) get_v3_catalog(self, user_id, project_id) * [bug 1524030 (https://bugs.launchpad.net/keystone/+bug/1524030) The signature on the "list_events" method of "keystone.revoke.backends.base.RevokeDriverBase" has been updated. Third-party extensions that extend the abstract class ("RevokeDriverBase") should update their code according to the new parameter names. The method signature has changed from: list_events(self, last_fetch=None) to: list_events(self, last_fetch=None, token=None) * [bug 1563101 (https://bugs.launchpad.net/keystone/+bug/1563101) The token provider driver interface has moved from "keystone.token.provider.Provider" to "keystone.token.providers.base.Provider". If implementing a custom token provider, subclass from the new location. * [bug 1582585 (https://bugs.launchpad.net/keystone/+bug/1582585) A new method "get_domain_mapping_list" was added to "keystone.identity.mapping_backends.base.MappingDriverBase". Third- party extensions that extend the abstract class ("MappingDriverBase") should implement this new method. The method has the following signature: get_domain_mapping_list(self, domain_id) and will return a list of mappings for a given domain ID. * [bug 1611102 (https://bugs.launchpad.net/keystone/+bug/1611102) The methods "list_endpoints_for_policy()" and "get_policy_for_endpoint()" have been removed from the "keystone.endpoint_policy.backends.base.EndpointPolicyDriverBase" abstract class, they were unused. * [bug 1622310 (https://bugs.launchpad.net/keystone/+bug/1622310) A new method "delete_trusts_for_project" has been added to "keystone.trust.backends.base.TrustDriverBase". Third-party extensions that extend the abstract class ("TrustDriverBase") should be updated according to the new parameter names. The signature for the new method is: delete_trusts_for_project(self, project_id) * [bug 1642687 (https://bugs.launchpad.net/keystone/+bug/1642687) The signature on the "create_federated_user" method of "keystone.identity.shadow_backends.base.ShadowUsersDriverBase" has been updated. Third-party extensions that extend the abstract class ("ShadowUsersDriverBase") should be updated according to the new parameter names. The method signature has changed from: create_federated_user(self, federated_dict) to: create_federated_user(self, domain_id, federated_dict) * [bug 1659730 (https://bugs.launchpad.net/keystone/+bug/1659730) The signature on the "authenticate" method of "keystone.auth.plugins.base.AuthMethodHandler" has been updated. Third-party extensions that extend the abstract class ("AuthMethodHandler") should update their code according to the new parameter names. The method signature has changed from: authenticate(self, context, auth_payload, auth_context) to: authenticate(self, request, auth_payload, auth_context) * PKI and PKIz token formats have been removed in favor of Fernet tokens. * Write support for the LDAP has been removed in favor of read-only support. The following operations are no longer supported for LDAP: * "create user" * "create group" * "delete user" * "delete group" * "update user" * "update group" * "add user to group" * "remove user from group" * Routes and SQL backends for the contrib extensions have been removed, they have been incorporated into keystone and are no longer optional. This affects: * "keystone/contrib/admin_crud" * "keystone/contrib/endpoint_filter" * "keystone/contrib/federation" * "keystone/contrib/oauth1" * "keystone/contrib/revoke" * "keystone/contrib/simple_cert" * "keystone/contrib/user_crud" * Keystone cache backends have been removed in favor of their *oslo.cache* counter-part. This affects: * "keystone/common/cache/backends/mongo" * "keystone/common/cache/backends/memcache_pool" * "keystone/common/cache/backends/noop" * Several token validation methods from the abstract class "keystone.token.providers.base.Provider" were removed (see below) in favor of a single method to validate tokens ("validate_token"), that has the signature "validate_token(self, token_ref)". If using a custom token provider, update the custom provider accordingly. * "validate_v2_token" * "validate_v3_token" * "validate_non_persistent_token" * Several token issuance methods from the abstract class "keystone.token.providers.base.Provider" were removed (see below) in favor of a single method to issue tokens ("issue_token"). If using a custom token provider, updated the custom provider accordingly. * "issue_v2_token" * "issue_v3_token" * The "[DEFAULT] domain_id_immutable" configuration option has been removed in favor of strictly immutable domain IDs. * The "[endpoint_policy] enabled" configuration option has been removed in favor of always enabling the endpoint policy extension. * The auth plugin "keystone.auth.plugins.saml2.Saml2" has been removed in favor of the auth plugin "keystone.auth.plugins.mapped.Mapped". * The "memcache" and "memcache_pool" token persistence backends have been removed in favor of using Fernet tokens (which require no persistence). * The "httpd/keystone.py" file has been removed in favor of the "keystone-wsgi-admin" and "keystone-wsgi-public" scripts. * The "keystone/service.py" file has been removed, the logic has been moved to the "keystone/version/service.py". * The check for admin token from "build_auth_context" middleware has been removed. If your deployment requires the use of *admin token*, update "keystone-paste.ini" so that "admin_token_auth" is before "build_auth_context" in the paste pipelines, otherwise remove the "admin_token_auth" middleware from "keystone-paste.ini" entirely. * The "[assignment] driver" now defaults to "sql". Logic to determine the default assignment driver if one wasn't supplied through configuration has been removed. Keystone only supports one assignment driver and it shouldn't be changed unless you're deploying a custom assignment driver. * The "[resource] driver" now defaults to "sql". Logic to determine the default resource driver if one wasn't supplied through configuration has been removed. Keystone only supports one resource driver and it shouldn't be changed unless you're deploying a custom resource driver. * The "[os_inherit] enabled" config option has been removed, the *OS- INHERIT* extension is now always enabled. * The "[DEFAULT] domain_id_immutable" option has been removed. This removes the ability to change the "domain_id" attribute of users, groups, and projects. The behavior was introduced to allow deployers to migrate entities from one domain to another by updating the "domain_id" attribute of an entity. This functionality was deprecated in the Mitaka release is now removed. Changes in keystone 10.0.0.0rc1..11.0.0 --------------------------------------- 9aa0f31 Modify the spelling mistakes 6603d40 Prepare for using standard python tests 63ab7b8 update keystone.conf.sample for ocata-rc a64b474 Add MFA Rules Release Note 5c861c0 Remove de-dupe for MFA Rule parsing. 1328d49 Add comment to clarify resource-options jsonschema 29951be Cleanup TODO, AuthContext and AuthInfo to auth.core 1451659 Cleanup TODO about auth.controller code moved to core 1130557 Add validation that token method isn't needed in MFARules a4c226f Add validation for mfa rule validator (storage) b17c3a5 Process and validate auth methods against MFA rules feac9e7 No need to enable infer_roles setting 8354fb3 Fix bad error message from FernetUtils 30d9095 Use https for docs.openstack.org references bc787f0 Update PCI documenation 2e7c7c9 Auth Plugins pass data back via AuthHandlerResponse 5dd81b9 Auth Method Handlers now return a response object always ab9237f Add MFA Rules and Enabled User options 28945a1 cleanup release notes from PCI options 9844fa1 Create user option `ignore_lockout_failure_attempts` 47cd729 Implement better validation for resource options 930728a Deprecate [security_compliance]\password_expires_ignore_user_ids dce8a2c Fixes deprecations caused by latest oslo.context 0b3e59e PCI-DSS Force users to change password upon first use 5e2cc88 clean up release notes for ocata d6a05f5 Reuse already existing groups from upstream tempest config c2fdd3b add additional deprecation warnings for KVS options 2bb1720 Address follow-up comments from previous patchset 85e8a7b Cleanup for resource-specific options 2a79614 Adds tests showing how mapping locals are handled 9f4fbd8 Add 'options' as an explicit user schema validation 1896d1b Code-Defined Resource-specific Options c19f243 Set the domain for federated users 6e0faa9 Refactor shadow users tests 2bd88d3 Add domain_id to the user table 6f10795 Do not call `to_dict` outside of a session context 821a4ff Remove code supporting moving resources between domains 91c2dbd Change unit test class to a less generic name 2518ca8 Remove dogpile.core dependencies 3f38162 Verbose breakup of method into seperate methods 3d06b69 Fixed unraised exception in _disallow_write for LDAP 28c70f4 Add password expiration queries for PCI-DSS 35deec2 Add missing parentheses 19c6530 Add queries for federated attributes in list_users e9a6a84 update entry points related to paste middleware a7b393b Remove LDAP write support 50e4ed9 Remove releated role_tree_dn test a551b94 Add warning about using `external` with federation 3ae73b6 Allow user to change own expired password 73939d9 Fix warnings generated by os-api-ref 1.2.0 5e89f1b Improvements to external auth documentation page 5b7b146 Test cross domain authentication via implied roles e988490 Updates to project mapping documentation ca51177 Add documentation for auto-provisioning 9e830db Implement federated auto-provisioning d08894d Fix typo in main docs page 9785f6a switch @hybrid_property to @property 9e1e2c2 Catch potential SyntaxError in federation mapping 7f2b7e5 Fix typo in shibboleth federation docs 3039e6c Handling of 'region' parameter as None ee2747b Corrected punctuation on multiple exceptions 0d2f249 Exclude 'keystone_tempest_plugin' in doc build 0f3f08c Force use of AuthContext object in .authentcate() 45f7ff3 Cascade delete federated_user fk 7e69eef update sample config for ocata release ee3eb00 Drop type in filters 03ceac6 Add DB operations tracing 066bf83 fix broken links 9602807 Changed 'Driver' reference to 'TokenDriverBase' f2d0f8c Fix keystone-manage mapping_engine tester f8ee249 Add anonymous bind to get_connection method 2d239cf Set connection timeout for LDAP configuration 872939d Invalid parameter name on interface dd71d11 Bump API version and date d4a890a listing revoke events should be admin only 1c94ae7 Adds projects mapping to the mapping engine d42bb2d Updated docstring for test_sql_upgrade.py b63cc5f Use public interfaces of pep8 for hacking d4129c2 [api-ref] Clean up OS-EP-FILTER association docs b4c97d3 Remove comment from previous migration 6e71105 [api-ref] Clean up OS-EP-FILTER documentation ebbc06e Fixed not in toctree warnings when building docs 83b2109 Remove stevedore warning when building docs 74af136 Update docs to require domain_id when registering Identity Providers e439476 Retry on deadlock Transactions in backend 62ae2e4 Fix region_id responses and requests to be consistent 3838cff Remove endpoint_id parameter from EP-FILTER docs 131c8c1 [api] fix ep filter example 8c190a1 Require domain_id when registering Identity Providers 41d70a6 Fix minor typo a2a06d0 Remove references to Python 3.4 54dc086 Improve assertion in test efb5875 Use assertGreater(len(x), y) instead of assertTrue(len(x) > y) 42d19a0 Correct invalid rst in api docs 318a333 Fixed 7 tests running twice in v3 identity b4012e8 Fix issues with keystone-dsvm-py35-functional-v3-only on py35 f19f131 Fix the usage of tempest.client.Manager class ec4d055 Correct timestamp format in token responses ddff3bd Remove unused exceptions from CADF notifications 46749a9 Minor improvement in test_user_id_persistence 663865d Remove CONF.domain_id_immutable 48864fd Fix test function name with two underscores to have only one 62fa3cd Updated from global requirements 11545b5 Fix import ordering in tempest plugins 76139d1 [api] Inconsistency between v3 API and keystone token timestamps 647b83d Federated authentication via ECP functional tests 937a1a3 Removes unnecessary utf-8 encoding 5b7c9a6 Handle disk write failure when doing Fernet key rotation ef48072 Fix cloud_admin rule and ensure only project tokens can be cloud admin 1dbbec0 Updated from global requirements 2674918 Remove duplicate role assignment in federated setup 0145084 Remove unused variables from federation tests a5d8069 Remove unused variables from unit test method eff8381 Add reason to CADF notifications in docs dbb05ae [doc] point release note docs to project team guide 1a00498 [api] set `is_admin_project` on tokens for admin project 91167ad Settings for test cases 7fe14c8 Add reason to notifications for PCI-DSS c5eb31f Fix typo in doc e1e3f2f fix one typo. 15c1e7a Updated from global requirements 944b3b0 Wrap invalidation region to context-local cache eac57b8 move common sql test helpers to base class 2dfd163 Use assertGreater(len(x), y) instead of assertTrue(len(x) > y) 52f6fe1 replace assertTrue with assertIs. bb89d92 Replace logging with oslo_log. 3845e36 expose v3policy failure with is_admin_token a54ab53 Add doctor checks for ldap symptoms 1000501 Implement password requirements API ed7d2f0 Fix a typo in comment 1417939 Add unit tests for doctor token_fernet symptoms e77a249 Remove impossible case from _option_dict method 48573a7 Make _option_dict() a method for domain_config_api c68dc42 Add unit tests for doctor tokens symptoms 4624f47 Add checks for doctor credential symptoms e3f55e7 Make user to nonlocal_user a 1:1 relationship 34f1201 Add id to conflict error if caused by duplicate id 76b1110 Refactors _get_names_from_role_assignments ccf5dc7 Do not manually remove /etc/shibboleth folder b0f9237 API Documentation for user password expires 3204796 Revert "API Documentation for user password expires" 1eb38e4 API Documentation for user password expires b36e1c4 Clean up keystone doc landing page e4ecc04 Add doctor tests on security_compliance and rename 48841fd Fix typo in api-ref doc fd54718 Move V2TokenDataHelper to the v2.0 controller 8307f2c Remove exception from v2 validation path 90f2f96 Make bootstrap idempotent when it needs to be aa97a9c Add unit tests for doctor's database symptoms f5b6912 Print name with duplicate error on user creation 2dae412 Expose idempotency issue with bootstrap 6b16e2c Print domain name in mapping_populate error message f12f83b Correct missspellings of secret 4de9d6b Trivial indentation corrections in mappings doc 359b10c Add doctor check for debug mode enabled b9c8963 Fixed multiple warnings in tox -edocs b9890f8 Get assignments with names honors inheritance flag f84b40a Updated from global requirements aa531a0 Add test to expose bug 1625230 fd13637 Invalidate token cache after token delete 26d40dc Revert "Rename doctor symptom in security_compliance" 812982a Domain included for role in list_role_assignment 28fd030 api-ref update for roles assignments with names ac4f22c Rename doctor symptom in security_compliance 5fe929d Corrects sample-data incorrect credential call 8002025 Correct minor issues in test schema cb7bfce Add unit tests for doctor federation file 3e5ead0 Remove CONF.os_inherit.enabled bb8be1e Add unit tests for doctor's caching symptoms 65d2330 Updated from global requirements f3d58a5 Updated from global requirements 8aa7b73 More info in schema validation error 24dd022 Minor fix in role_assignments api-ref 74942e4 Include mapped in the default auth methods d16ec35 Validate token issue input 9e54c62 Removes unused exceptions 7310375 Removes unused method from assignment core 54b57e2 Removes unused default_assignment_driver method 4f12020 Removed unused EXTENSION_TO_ADD test declarations 71cde67 Use sha512.hash() instead of .encrypt() df721d0 Don't invalidate all user tokens of roleless group bd37276 Upload service provider metadata to testshib 54d2ecc Updated from global requirements e120ac3 SAML federation docs refer to old WSGIScriptAlias 7765130 cache_on_issue default to true 7e9039b Make try/except work for passlib 1.6 and 1.7 2223374 Document token header in federation auth response 364462e Refactor Keystone admin-tokens and admin-users v2 1df211a ignore deprecation warning for .encrypt() d9a6ead Send the identity.deleted.role_assignment after the deletion fcebc2f Allow fetching an expired token d51246c Show team and repo badges on README 05f2317 Remove eventlet-related call to sleep a0104c7 Add a comment about not using assertTrue 41bb06a clean up developer docs 03319d1 Improvements in error messages cfcf395 Remove trailing "d" from -days param of OpenSSL command eeaa4d7 Swap the notification formats in the docs 1e6f780 Normalizes use of ForbiddenAction in trusts 165e5a9 Enable CADF notification format by default 852a518 Remove unused statements in matches 49ec1d2 Fix doc example deeb8df Remove extension and auth_token middleware docs 4c5b15e Move docs from key_terms to architecture 0a9051b move content from configuringservices to configuration 2edc392 Update configuration.rst documentation 5ae4ca1 Verbose 401/403 debug responses a93d03e Fix the misspelling in `keystone/tests/unit/test_cli.py` 5a930e7 refactor notification test to work with either format ef30103 Clarify the v2.0 validation path adb4513 Remove metadata from token provider 4f1af94 Lockout ignore user list 98b3109 Add developer docs for keystone-manage doctor f4a30aa [api] add changelog from 3.0 -> 3.7 fbafc06 Devstack plugin to federate with testshib.org 34b0cf2 Remove entry_points to non-existent drivers 0bbc94e Fix typo in doc 5d93b99 remove release note about LDAP write removal d3e955f Change "Change User Password" request example 3f92a97 Fixes remaining nits in endpoint_policy tests 2d540f5 Remove reference to future removal of saml fea1936 Limits config fixture usage to where it's needed 3d513da Updated from global requirements eff2b3b Remove format_token method c0c23fd Remove issue_v3_token in favor of issue_token dd1e705 Remove issue_v2_token 4c095cc refactor the token controller e361a3a Use issue_v3_token instead of issue_v2_token a74be79 Updates to the architecture doc e8e56dc Support nested groups in Active Directory eeac2cb Add healthcheck middleware to pipelines 6ed37d2 Request cache should not update context 32affef Change cfg.set_defaults into cors.set_defaults 470d92f Updated from global requirements 6589dbd Updated from global requirements 52f58eb Doc warning for keystone db migration 08e9ba9 Wording error in upgrading documentation e28dddd Updated from global requirements 52c2a81 fix credentials backend tests 18bb515 Allow running expand & migrate at the same time c5bcc34 Add test cases for passing "None" as a hint 2d56415 Fix test_revoke to run all tests after pki removal 1b79994 Updated from global requirements 57cc1e3 Switch fernet to be the default token provider. 8a66ef6 Remove support for PKI and PKIz tokens 1a1c625 Doc the difference between memcache and cache cda7688 Doctor ldap check fix for config files e498979 Additional logging when authenticating 2e70ecd Document OS-SIMPLE-CERT Routes c70baa0 Document v2 Revoked Token Route 095ed91 Add api-ref /auth/tokens/OS-PKI/revoked (v3) 731a766 Fix broken links in the docs 75e8cd1 Add structure for Devstack plugin a4fdb40 Add bindep environment to tox e49a95f Pass a request to controllers instead of a context 357bb56 Create default role as a part of bootstrap 093d14f Updated from global requirements 339d6a6 Don't deprecate the LDAP property which is still needed 707b023 Clarifying on the remove of `build_auth_context` middleware 2870deb log.error use _ of i18n fd6445e Doctor check for LDAP domain specific configs b8435cc Updated from global requirements 53f104f Updated from global requirements de8fbcf Validate mapping exists when creating/updating a protocol f516777 Remove new_id() in test_revoke 1c38db6 Adds warning when no domain configs were uploaded e5add63 Add release note for fernet tokens d45d82f Tweak api-ref doc for v3 roles bc756d5 Tweak api-ref doc for v3 roles status codes 43b55f1 Reorder APIs in api-ref for v3 groups c7c0b99 [api-ref] Remove the duplicated sample bef1444 Follow-on of memcache token persistence removal 1939159 changed domain id to name in JSON request e3962e5 More configuration doc edits 980554a Remove backend dependencies from token provider 696a10c Updated from global requirements 382279f [api-ref] Fix couple of issues on OS-INHERIT API 35b9f08 Code cleanup 4f92ac0 Replace tenant with project for keystone catalog e7e577c Imported Translations from Zanata 38f79a8 Update, correct, and enhance federation docs f0319c7 Invalidate trust when the related project is deleted 8b68bbd Remove unused arg(project and initiator) 25d0535 Drop MANIFEST.in - it's not needed by pbr f77db0a Ignore unknown arguments to fetch_token 02452d0 Return password_expires_at during auth d49f2b1 Move the token abstract base class out of core ca73d29 Add is_admin_project to policy dict 94f1074 Fix a typo in token_formatters.py 9e84371 Improve check_token validation performance 477189d Add revocation event indexes 130a72d Add docs for PCI-DSS 52642cc Invalidate trust when the trustor or trustee is deleted 27d2176 Updated from global requirements 1974f2d [api] add a note about project name restrictions 71134fb One validate method to rule them all... f84dd99 Simplify the KeystoneToken model 52bde3c Remove validate_v2_token() method abe6157 [api] remove `user_id` and `project_id` from policy 38f2305 Remove the decorator where it's not applied 8789949 Optimize remove unused variable c3c4112 Remove those redundant variable declaration 9fa78cb [doc] Correct mapping JSON example ade01da Remove no use variable (domain_id) ab02ec0 Remove redundant variable declaration fd3e627 Deprecate `endpoint_filter.sql` backend ba96448 remove deprecated `[endpoint_policy] enable` option 86229b3 Pass initiator to Manager as a kwarg 3e0242c create release notes for removed functionality 76d588b Remove driver version specifiers from tests a82d799 Enable release notes translation 1181399 Remove driver version from identity backend test names bbcc1ef Remove driver version from docs 12d8591 Updated from global requirements 4888a11 Default the assignment backend to SQL 3b17b27 remove legacy driver tox target 9aec18b Use validate_v3_token instead of validate_token d3054b5 Ensure all v2.0 tokens are validated the same way 6f6543b Make sure all v3 tokens are validated the same way 7c00add re-add valid comment about None domain ID d7b836e Default the resource backend to SQL 4fd55f2 Make returning is_domain conditional 9117e45 Move audit initiator creation to request cb43ea8 Don't validate token expiry in the persistence backend 29fbffa Add tests for validating expired tokens 5046ba0 Fix a typo in _init_.py 432fa4a Remove password history validation from admin password resets ac04a51 Updating the document regarding LDAP options cd23e77 Updated from global requirements 38f9a82 Remove the unused sdx doc files 635d4a4 Updated from global requirements ec7cec0 Remove the no use arg (auth=None) bb1e6d0 Fix typo in docstring a20d66c Tweak api-ref for v3 groups status codes 86483a7 Updated from global requirements 28e6144 Add Apache 2.0 license to source file e828d59 Fix a typo in core.py and bp-domain-config-default-82e42d946ee7cb43.yaml 4be9164 Validate password history for self-service password changes 7f3296d Make test_v3_auth exercise the whole API 810e156 Remove stable driver interfaces a0ee0bb Updated from global requirements ae0d189 Remove the check for admin token in build_auth_context middleware abab343 Reorder APIs in api-ref doc for v3 users ca4b452 Fix a docstring typo in test_v3_resource.py ee32611 Using assertIsNone(...) instead of assertIs(None, ...) a615a85 Updated from global requirements 4a079a4 remove deprecated items from contrib d3ece04 Update man page for Ocata release version and date 09131e1 Using assertIsNone() instead of assertIs(None) 7b66744 Remove default=None when set value in config 7d56cb7 Undeprecate options used for signing a0fb216 Remove unused path in the v2 token controller 7f3f596 Fix the belongsTo query parameter ba984db Fix 'API Specification for Endpoint Filtering' broken link e88097f Add domain check in domain-specific role implication f0172f8 Override credential key repository for null key tests 36be7e5 Remove useless method override 564c495 remove memcache token persistence backends 9f9b728 remove keystone/service.py d1ed08d remove saml2 auth plugin 2388cef remove httpd/keystone.py 1371fb4 remove cache backends 5035ea1 Revert "Allow compatibility with keystonemiddleware 4.0.0" 3c7e140 Consolidate the common code into one method 54e41a3 Handle the exception from creating request token properly 9488ec5 Fix formatting strings in LOG.debug 3adb158 Fix formatting strings in LOG.warning be5385c Handle the exception from creating access token properly 0c14179 Updated from global requirements 3d00a20 Tweak status code in api-ref doc for v3 users 5fc08a7 Fix prameters names in Keystone API v2-ext f1da1c0 Refactor Keystone admin-tenant API v2 32352f4 Refactor Keystone admin-endpoint API 4d08a1c Fix for unindent warning in doc build 3a84987 add placeholder migrations for newton 0c82abc Remove default=None for config options 0818d42 Ensure the sqla-migrate scripts cache is cleared d312859 Move test_sql_upgrade.MigrationRepository into keystone.common 5c6d1f3 Rename sql.migration_helpers to sql.upgrades 47d4d08 Give domain admin rights to domain specific implied roles 981b46c Update reno for stable/newton 2d79b03 Refactor find_migrate_repo(): require caller to specify repo 32328de Fixes password created_at errors due to the server_default e226948 Move the responsibility for stdout to the CLI module 50430f5 Use a read-only DB session to retrieve schema version 1249360 Move rolling upgrade repo names into constants 8ec5930 Removal of imports within functions dfa6e3f Trivial fixes in the ldap common functions b52e0de Test that rolling upgrade repos are in lockstep be80981 Adds tests for verify_length_and_trunc_password() 97585c1 EndpointPolicy driver doesn't inherit interface f534f36 Faster id mapping lookup c4784d7 Create unit tests for endpoint policy drivers c6ed3cd Use URIOpt for endpoint URL options Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 4 +- HACKING.rst | 2 +- MANIFEST.in | 21 - README.rst | 17 +- api-ref/source/conf.py | 2 +- api-ref/source/v2-admin/admin-certificates.inc | 41 + api-ref/source/v2-admin/admin-endpoints.inc | 34 +- .../v2-admin/admin-endpoints_parameters.yaml | 71 -- api-ref/source/v2-admin/admin-tenants.inc | 81 +- api-ref/source/v2-admin/admin-tokens.inc | 48 +- api-ref/source/v2-admin/admin-users.inc | 84 +- api-ref/source/v2-admin/index.rst | 1 + api-ref/source/v2-admin/parameters.yaml | 305 +++-- .../admin/show-ca-certificate-v2-response.txt | 19 + .../admin/show-signing-certificate-v2-response.txt | 19 + api-ref/source/v2-ext/ksadm-admin.inc | 142 +-- api-ref/source/v2-ext/kscrud.inc | 6 +- api-ref/source/v2-ext/ksec2-admin.inc | 42 +- api-ref/source/v2-ext/parameters.yaml | 155 +-- api-ref/source/v2/index.rst | 3 +- api-ref/source/v2/overview.inc | 16 +- api-ref/source/v2/parameters.yaml | 21 +- api-ref/source/v2/revocations.inc | 32 + .../v2/samples/admin/extension-show-response.json | 2 +- .../v2/samples/admin/extensions-list-response.json | 16 +- .../v2/samples/admin/revoked-tokens-response.json | 3 + .../v2/samples/admin/version-show-response.json | 2 +- .../v2/samples/admin/versions-list-response.json | 2 +- api-ref/source/v3-ext/ep-filter.inc | 306 ++--- api-ref/source/v3-ext/federation.inc | 7 + .../v3-ext/federation/assertion/assertion.inc | 6 +- api-ref/source/v3-ext/federation/auth/auth.inc | 6 +- .../source/v3-ext/federation/auth/parameters.yaml | 9 + .../v3-ext/federation/identity-provider/idp.inc | 36 +- .../federation/identity-provider/parameters.yaml | 9 + .../identity-provider/samples/get-response.json | 1 + .../identity-provider/samples/list-response.json | 2 + .../samples/register-request.json | 1 + .../samples/register-response.json | 1 + .../identity-provider/samples/update-response.json | 1 + .../source/v3-ext/federation/mapping/mapping.inc | 10 +- .../projects-domains/projects-domains.inc | 4 +- .../v3-ext/federation/service-provider/sp.inc | 10 +- api-ref/source/v3-ext/index.rst | 2 + api-ref/source/v3-ext/oauth.inc | 28 +- api-ref/source/v3-ext/parameters.yaml | 2 +- api-ref/source/v3-ext/revoke.inc | 2 +- .../create-endpoint-group-request.json | 2 +- .../OS-EP-FILTER/get-projects-response.json | 29 - .../list-associations-by-endpoint-response.json | 29 + .../list-associations-by-project-response.json | 29 + .../OS-EP-FILTER/list-endpoints-response.json | 29 - .../update-endpoint-group-request.json | 7 + .../update-endpoint-group-response.json | 14 + .../show-ca-certificate-response.txt | 19 + .../show-signing-certificate-response.txt | 19 + api-ref/source/v3-ext/simple-cert.inc | 42 + api-ref/source/v3-ext/trust.inc | 18 +- api-ref/source/v3/authenticate-v3.inc | 33 +- api-ref/source/v3/credentials.inc | 10 +- api-ref/source/v3/domains-config-v3.inc | 28 +- api-ref/source/v3/domains.inc | 10 +- api-ref/source/v3/groups.inc | 354 +++--- api-ref/source/v3/index.rst | 124 +- api-ref/source/v3/inherit.inc | 92 +- api-ref/source/v3/os-pki.inc | 32 + api-ref/source/v3/parameters.yaml | 79 +- api-ref/source/v3/policies.inc | 22 +- api-ref/source/v3/projects.inc | 21 +- api-ref/source/v3/regions-v3.inc | 10 +- api-ref/source/v3/roles.inc | 961 ++++++++++------ .../auth-password-explicit-unscoped-response.json | 3 +- .../auth-password-project-scoped-response.json | 3 +- ...auth-password-unscoped-request-with-domain.json | 2 +- .../admin/auth-password-unscoped-response.json | 3 +- .../auth-password-user-name-unscoped-request.json | 18 - .../samples/admin/auth-token-scoped-response.json | 3 +- .../admin/auth-token-unscoped-response.json | 3 +- .../samples/admin/credential-update-request.json | 2 +- .../samples/admin/credential-update-response.json | 2 +- .../v3/samples/admin/get-pki-revoked-response.json | 3 + .../samples/admin/group-roles-list-response.json | 23 - .../samples/admin/identity-versions-response.json | 2 +- .../v3/samples/admin/policies-list-response.json | 8 +- .../v3/samples/admin/policy-create-request.json | 4 +- .../v3/samples/admin/policy-create-response.json | 2 - .../v3/samples/admin/policy-show-response.json | 4 +- .../v3/samples/admin/policy-update-request.json | 4 +- .../v3/samples/admin/policy-update-response.json | 4 +- ...ents-effective-list-include-names-response.json | 10 +- .../admin/user-password-update-request.json | 2 +- .../v3/samples/admin/user-roles-list-response.json | 23 - api-ref/source/v3/service-catalog.inc | 20 +- api-ref/source/v3/status.yaml | 4 + api-ref/source/v3/users.inc | 348 +++--- config-generator/keystone.conf | 1 - devstack/files/federation/shib_apache_alias.txt | 1 + devstack/files/federation/shib_apache_handler.txt | 16 + devstack/files/federation/shibboleth2.xml | 77 ++ devstack/lib/federation.sh | 127 +++ devstack/plugin.sh | 64 ++ etc/keystone-paste.ini | 13 +- etc/keystone.conf.sample | 813 ++++++++------ etc/policy.json | 3 +- etc/policy.v3cloudsample.json | 17 +- examples/pki/cms/auth_token_revoked.json | 85 -- examples/pki/cms/auth_token_revoked.pem | 44 - examples/pki/cms/auth_token_scoped.json | 85 -- examples/pki/cms/auth_token_scoped.pem | 44 - examples/pki/cms/auth_token_unscoped.json | 23 - examples/pki/cms/auth_token_unscoped.pem | 19 - examples/pki/cms/revocation_list.json | 8 - examples/pki/cms/revocation_list.pem | 15 - examples/pki/gen_pki.sh | 233 ---- httpd/keystone.py | 41 - keystone/assignment/V8_backends/__init__.py | 0 keystone/assignment/V8_backends/sql.py | 452 -------- keystone/assignment/V8_role_backends/__init__.py | 0 keystone/assignment/V8_role_backends/sql.py | 80 -- keystone/assignment/backends/base.py | 251 ----- keystone/assignment/backends/sql.py | 5 +- keystone/assignment/controllers.py | 103 +- keystone/assignment/core.py | 207 +--- keystone/assignment/role_backends/base.py | 134 --- keystone/assignment/role_backends/sql.py | 2 +- keystone/assignment/routers.py | 157 ++- keystone/auth/__init__.py | 4 + keystone/auth/controllers.py | 485 ++------ keystone/auth/core.py | 478 +++++++- keystone/auth/plugins/base.py | 39 +- keystone/auth/plugins/core.py | 2 - keystone/auth/plugins/external.py | 14 +- keystone/auth/plugins/mapped.py | 195 +++- keystone/auth/plugins/oauth1.py | 12 +- keystone/auth/plugins/password.py | 8 +- keystone/auth/plugins/saml2.py | 35 - keystone/auth/plugins/token.py | 51 +- keystone/auth/plugins/totp.py | 8 +- keystone/auth/schema.py | 83 ++ keystone/catalog/backends/base.py | 14 +- keystone/catalog/backends/sql.py | 95 +- keystone/catalog/backends/templated.py | 16 +- keystone/catalog/controllers.py | 88 +- keystone/catalog/core.py | 23 +- keystone/cmd/cli.py | 226 ++-- keystone/cmd/doctor/__init__.py | 2 + keystone/cmd/doctor/caching.py | 2 +- keystone/cmd/doctor/credential.py | 6 +- keystone/cmd/doctor/database.py | 3 +- keystone/cmd/doctor/debug.py | 28 + keystone/cmd/doctor/ldap.py | 95 ++ keystone/cmd/doctor/security_compliance.py | 2 +- keystone/cmd/doctor/tokens.py | 6 - keystone/cmd/doctor/tokens_fernet.py | 6 +- keystone/cmd/manage.py | 5 +- keystone/common/authorization.py | 3 +- keystone/common/cache/_context_cache.py | 10 +- keystone/common/cache/backends/__init__.py | 0 keystone/common/cache/backends/memcache_pool.py | 28 - keystone/common/cache/backends/mongo.py | 25 - keystone/common/cache/backends/noop.py | 56 - keystone/common/cache/core.py | 4 + keystone/common/context.py | 12 +- keystone/common/controller.py | 46 +- keystone/common/driver_hints.py | 9 +- keystone/common/fernet_utils.py | 71 +- keystone/common/json_home.py | 10 +- keystone/common/kvs/backends/inmemdb.py | 5 + keystone/common/kvs/backends/memcached.py | 5 + keystone/common/kvs/core.py | 2 +- keystone/common/manager.py | 32 - keystone/common/openssl.py | 2 +- keystone/common/request.py | 48 +- keystone/common/resource_options.py | 228 ++++ keystone/common/sql/contract_repo/manage.py | 13 + ...move_unencrypted_blob_column_from_credential.py | 4 +- .../versions/004_reset_password_created_at.py | 37 + .../sql/contract_repo/versions/005_placeholder.py | 18 + .../sql/contract_repo/versions/006_placeholder.py | 18 + .../sql/contract_repo/versions/007_placeholder.py | 18 + .../sql/contract_repo/versions/008_placeholder.py | 18 + .../sql/contract_repo/versions/009_placeholder.py | 18 + .../010_contract_add_revocation_event_index.py | 15 + ...11_contract_user_id_unique_for_nonlocal_user.py | 23 + .../versions/012_contract_add_domain_id_to_idp.py | 38 + ...3_protocol_cascade_delete_for_federated_user.py | 31 + .../014_contract_add_domain_id_to_user_table.py | 95 ++ .../015_contract_update_federated_user_domain.py | 34 + .../versions/016_contract_add_user_options.py | 16 + keystone/common/sql/core.py | 46 +- keystone/common/sql/data_migration_repo/manage.py | 13 + .../002_password_created_at_not_nullable.py | 3 - .../versions/004_reset_password_created_at.py | 15 + .../versions/005_placeholder.py | 18 + .../versions/006_placeholder.py | 18 + .../versions/007_placeholder.py | 18 + .../versions/008_placeholder.py | 18 + .../versions/009_placeholder.py | 18 + .../010_migrate_add_revocation_event_index.py | 15 + .../011_expand_user_id_unique_for_nonlocal_user.py | 15 + .../versions/012_migrate_add_domain_id_to_idp.py | 55 + ...3_protocol_cascade_delete_for_federated_user.py | 15 + .../014_migrate_add_domain_id_to_user_table.py | 45 + .../015_migrate_update_federated_user_domain.py | 36 + .../versions/016_migrate_add_user_options.py | 16 + keystone/common/sql/expand_repo/manage.py | 13 + ...dd_key_hash_and_encrypted_blob_to_credential.py | 4 +- .../versions/004_reset_password_created_at.py | 15 + .../sql/expand_repo/versions/005_placeholder.py | 18 + .../sql/expand_repo/versions/006_placeholder.py | 18 + .../sql/expand_repo/versions/007_placeholder.py | 18 + .../sql/expand_repo/versions/008_placeholder.py | 18 + .../sql/expand_repo/versions/009_placeholder.py | 18 + .../010_expand_add_revocation_event_index.py | 31 + .../011_expand_user_id_unique_for_nonlocal_user.py | 15 + .../versions/012_expand_add_domain_id_to_idp.py | 73 ++ ...3_protocol_cascade_delete_for_federated_user.py | 15 + .../014_expand_add_domain_id_to_user_table.py | 165 +++ .../015_expand_update_federated_user_domain.py | 69 ++ .../versions/016_expand_add_user_options.py | 34 + keystone/common/sql/migrate_repo/manage.py | 13 + .../versions/081_add_endpoint_policy_table.py | 4 +- .../versions/082_add_federation_tables.py | 4 +- .../migrate_repo/versions/083_add_oauth1_tables.py | 4 +- .../migrate_repo/versions/084_add_revoke_tables.py | 4 +- .../versions/085_add_endpoint_filtering_table.py | 4 +- .../versions/093_migrate_domains_to_projects.py | 6 +- keystone/common/sql/migration_helpers.py | 254 ----- keystone/common/sql/upgrades.py | 293 +++++ keystone/common/tokenless_auth.py | 4 +- keystone/common/utils.py | 32 +- keystone/common/validation/validators.py | 8 +- keystone/common/wsgi.py | 15 +- keystone/conf/__init__.py | 44 +- keystone/conf/assignment.py | 8 +- keystone/conf/auth.py | 15 +- keystone/conf/constants.py | 9 +- keystone/conf/default.py | 59 +- keystone/conf/endpoint_policy.py | 17 - keystone/conf/kvs.py | 19 + keystone/conf/ldap.py | 151 +-- keystone/conf/memcache.py | 27 +- keystone/conf/os_inherit.py | 49 - keystone/conf/resource.py | 6 +- keystone/conf/security_compliance.py | 30 +- keystone/conf/signing.py | 62 +- keystone/conf/token.py | 60 +- keystone/contrib/admin_crud/__init__.py | 15 - keystone/contrib/admin_crud/core.py | 32 - keystone/contrib/ec2/controllers.py | 28 +- keystone/contrib/ec2/core.py | 4 +- .../endpoint_filter/backends/catalog_sql.py | 62 +- keystone/contrib/endpoint_filter/backends/sql.py | 30 - keystone/contrib/endpoint_filter/routers.py | 33 - keystone/contrib/federation/__init__.py | 0 keystone/contrib/federation/backends/__init__.py | 0 keystone/contrib/federation/backends/sql.py | 29 - keystone/contrib/federation/routers.py | 31 - keystone/contrib/oauth1/__init__.py | 0 keystone/contrib/oauth1/backends/__init__.py | 0 keystone/contrib/oauth1/backends/sql.py | 30 - keystone/contrib/oauth1/routers.py | 33 - keystone/contrib/revoke/__init__.py | 0 keystone/contrib/revoke/backends/__init__.py | 0 keystone/contrib/revoke/backends/sql.py | 28 - keystone/contrib/revoke/routers.py | 31 - keystone/contrib/s3/core.py | 4 +- keystone/contrib/simple_cert/__init__.py | 13 - keystone/contrib/simple_cert/routers.py | 33 - keystone/contrib/user_crud/__init__.py | 15 - keystone/contrib/user_crud/core.py | 32 - keystone/credential/backends/base.py | 2 +- keystone/credential/backends/sql.py | 2 +- keystone/credential/core.py | 15 - keystone/credential/providers/fernet/core.py | 5 +- keystone/endpoint_policy/backends/base.py | 31 +- keystone/endpoint_policy/backends/sql.py | 3 +- keystone/endpoint_policy/core.py | 15 - keystone/exception.py | 176 +-- keystone/federation/V8_backends/__init__.py | 0 keystone/federation/V8_backends/sql.py | 389 ------- keystone/federation/backends/base.py | 162 +-- keystone/federation/backends/sql.py | 5 +- keystone/federation/controllers.py | 6 +- keystone/federation/core.py | 87 +- keystone/federation/schema.py | 19 +- keystone/federation/utils.py | 37 +- keystone/i18n.py | 2 +- keystone/identity/backends/base.py | 30 +- keystone/identity/backends/ldap/common.py | 210 ++-- keystone/identity/backends/ldap/core.py | 238 ++-- keystone/identity/backends/resource_options.py | 121 ++ keystone/identity/backends/sql.py | 70 +- keystone/identity/backends/sql_model.py | 160 ++- keystone/identity/controllers.py | 88 +- keystone/identity/core.py | 253 +++-- keystone/identity/mapping_backends/base.py | 11 +- keystone/identity/mapping_backends/sql.py | 6 +- keystone/identity/schema.py | 12 +- keystone/identity/shadow_backends/base.py | 30 +- keystone/identity/shadow_backends/sql.py | 52 +- keystone/locale/de/LC_MESSAGES/keystone.po | 180 +-- keystone/locale/es/LC_MESSAGES/keystone.po | 176 +-- keystone/locale/fr/LC_MESSAGES/keystone.po | 178 +-- keystone/locale/it/LC_MESSAGES/keystone.po | 172 +-- keystone/locale/ja/LC_MESSAGES/keystone.po | 173 +-- .../locale/ko_KR/LC_MESSAGES/keystone-log-error.po | 22 +- .../locale/ko_KR/LC_MESSAGES/keystone-log-info.po | 25 +- .../ko_KR/LC_MESSAGES/keystone-log-warning.po | 48 +- keystone/locale/ko_KR/LC_MESSAGES/keystone.po | 160 +-- keystone/locale/pt_BR/LC_MESSAGES/keystone.po | 174 +-- keystone/locale/ru/LC_MESSAGES/keystone.po | 166 +-- .../locale/tr_TR/LC_MESSAGES/keystone-log-error.po | 18 +- .../tr_TR/LC_MESSAGES/keystone-log-warning.po | 25 +- keystone/locale/tr_TR/LC_MESSAGES/keystone.po | 52 +- .../locale/zh_CN/LC_MESSAGES/keystone-log-error.po | 12 +- keystone/locale/zh_CN/LC_MESSAGES/keystone.po | 195 +--- keystone/locale/zh_TW/LC_MESSAGES/keystone.po | 155 +-- keystone/middleware/auth.py | 33 +- keystone/models/revoke_model.py | 18 - keystone/models/token_model.py | 192 ++-- keystone/notifications.py | 77 +- keystone/oauth1/backends/base.py | 2 +- keystone/oauth1/backends/sql.py | 6 +- keystone/oauth1/controllers.py | 100 +- keystone/oauth1/core.py | 41 +- keystone/oauth1/validator.py | 6 +- keystone/policy/backends/base.py | 2 +- keystone/policy/backends/rules.py | 5 +- keystone/policy/controllers.py | 16 +- keystone/policy/core.py | 15 - keystone/resource/V8_backends/__init__.py | 0 keystone/resource/V8_backends/sql.py | 260 ----- keystone/resource/backends/base.py | 371 +----- keystone/resource/backends/sql.py | 2 +- keystone/resource/config_backends/base.py | 2 +- keystone/resource/config_backends/sql.py | 2 +- keystone/resource/controllers.py | 71 +- keystone/resource/core.py | 193 ++-- keystone/resource/routers.py | 4 +- keystone/revoke/backends/base.py | 7 +- keystone/revoke/backends/sql.py | 46 +- keystone/revoke/controllers.py | 6 + keystone/revoke/core.py | 26 +- keystone/server/backends.py | 2 +- keystone/service.py | 61 - .../legacy_drivers/assignment/V8/__init__.py | 0 .../backend/legacy_drivers/assignment/V8/sql.py | 39 - .../backend/legacy_drivers/assignment/__init__.py | 0 .../legacy_drivers/federation/V8/__init__.py | 0 .../backend/legacy_drivers/federation/V8/api_v3.py | 108 -- .../backend/legacy_drivers/federation/__init__.py | 0 .../backend/legacy_drivers/resource/V8/__init__.py | 0 .../unit/backend/legacy_drivers/resource/V8/sql.py | 71 -- .../backend/legacy_drivers/resource/__init__.py | 0 .../backend/legacy_drivers/role/V8/__init__.py | 0 .../unit/backend/legacy_drivers/role/V8/sql.py | 30 - .../unit/backend/legacy_drivers/role/__init__.py | 0 .../unit/common/test_resource_options_common.py | 77 ++ .../unit/config_files/backend_pool_liveldap.conf | 3 +- .../unit/config_files/backend_tls_liveldap.conf | 1 - .../unit/endpoint_policy/backends/__init__.py | 0 .../unit/endpoint_policy/backends/test_base.py | 150 +++ .../unit/endpoint_policy/backends/test_sql.py | 43 + .../unit/identity/backends/test_ldap_common.py | 132 +-- .../unit/identity/shadow_users/test_backend.py | 150 +++ .../test_associate_project_endpoint_extension.py | 41 +- keystone/token/_simple_cert.py | 4 +- keystone/token/controllers.py | 742 +++++++----- keystone/token/persistence/__init__.py | 2 +- keystone/token/persistence/backends/kvs.py | 23 +- keystone/token/persistence/backends/memcache.py | 39 - .../token/persistence/backends/memcache_pool.py | 34 - keystone/token/persistence/backends/sql.py | 17 +- keystone/token/persistence/core.py | 47 +- keystone/token/provider.py | 394 +------ keystone/token/providers/base.py | 99 ++ keystone/token/providers/common.py | 557 +++------ keystone/token/providers/fernet/core.py | 10 +- .../token/providers/fernet/token_formatters.py | 62 +- keystone/token/providers/pki.py | 67 -- keystone/token/providers/pkiz.py | 65 -- keystone/token/utils.py | 31 - keystone/trust/backends/base.py | 11 +- keystone/trust/backends/sql.py | 20 +- keystone/trust/controllers.py | 42 +- keystone/trust/core.py | 28 +- keystone/v2_crud/admin_crud.py | 4 +- keystone/v2_crud/user_crud.py | 59 +- keystone/version/__init__.py | 2 +- keystone/version/controllers.py | 6 +- keystone/version/service.py | 4 +- keystone_tempest_plugin/clients.py | 8 +- keystone_tempest_plugin/config.py | 46 +- keystone_tempest_plugin/plugin.py | 12 +- .../services/identity/clients.py | 7 +- .../services/identity/v3/auth_client.py | 40 + .../identity/v3/identity_providers_client.py | 9 +- .../services/identity/v3/saml2_client.py | 92 ++ .../api/identity/v3/test_identity_providers.py | 22 +- .../api/identity/v3/test_service_providers.py | 2 +- .../scenario/test_federated_authentication.py | 176 +++ .../notes/bp-allow-expired-f5d845b9601bc1ef.yaml | 18 + .../bp-domain-config-default-82e42d946ee7cb43.yaml | 2 +- ...ssword-expires-validation-4b32fe7032595932.yaml | 13 + .../bp-pci-dss-notifications-808a205a637bac25.yaml | 22 + ...password-requirements-api-87bc724b2aa554f7.yaml | 9 + ...ry-password-expired-users-a7c96a3843bb9abc.yaml | 15 + ...per-user-auth-plugin-reqs-feb95fd907be4b40.yaml | 64 ++ .../notes/bp-shadow-mapping-06fc7c71a401d707.yaml | 12 + ...bp-support-federated-attr-94084d4073f50280.yaml | 7 + .../notes/bug-1017606-98313bb4c1edf250.yaml | 19 + .../notes/bug-1524030-ccff6b0ec9d1cbf2.yaml | 23 + .../notes/bug-1547684-911aed68a0d3df17.yaml | 29 + .../notes/bug-1561054-dbe88b552a936a05.yaml | 23 + .../notes/bug-1563101-134df5b99ea48f00.yaml | 7 + .../notes/bug-1571878-1bcaea5337905af0.yaml | 7 + .../notes/bug-1582585-a368ac5a252ec84f.yaml | 15 + .../notes/bug-1611102-e1348cbec9b1110a.yaml | 8 + .../notes/bug-1616424-c46ba773f7ac40ae.yaml | 7 + .../notes/bug-1622310-c501cf77437fdfa6.yaml | 18 + .../notes/bug-1636950-8fa1a47fce440977.yaml | 10 + releasenotes/notes/bug-1638603-354ee4167e6e.yaml | 9 + .../notes/bug-1641645-516709f9da3de26f.yaml | 9 + .../notes/bug-1641654-8630ce7bcde43a7e.yaml | 21 + .../notes/bug-1641660-f938267e1ec54071.yaml | 13 + .../notes/bug-1641816-8b39f3f73359c778.yaml | 6 + .../notes/bug-1642348-83d4c86ad3984d75.yaml | 6 + .../notes/bug-1642457-4533f9810a8cd927.yaml | 7 + .../notes/bug-1642687-5497fb56fe86806d.yaml | 18 + .../notes/bug-1642687-c7ab1c9be152db20.yaml | 23 + .../notes/bug-1642692-d669c8fcf9e171d9.yaml | 6 + .../notes/bug-1645487-ca22c216ec26cc9b.yaml | 8 + .../notes/bug-1649138-c53974f6bb0eab14.yaml | 9 + .../notes/bug-1649446-efff94143823755d.yaml | 19 + .../notes/bug-1656076-c4422270f73b43b.yaml | 15 + .../notes/bug-1659730-17834ba2dde668ae.yaml | 18 + .../notes/bug-1659995-f3e716de743b7291.yaml | 26 + .../deprecated-as-of-ocata-a5b2f1e3e39f818e.yaml | 19 + .../integrate-osprofiler-ad0e16a542b12899.yaml | 2 +- .../notes/oslo.cache-a9ce47bfa8809efa.yaml | 2 +- .../removed-as-of-ocata-436bb4b839e74494.yaml | 103 ++ releasenotes/notes/totp-40d93231714c6a20.yaml | 2 +- releasenotes/source/conf.py | 3 + releasenotes/source/index.rst | 1 + releasenotes/source/newton.rst | 6 + requirements.txt | 24 +- setup.cfg | 36 +- test-requirements.txt | 18 +- tools/sample_data.sh | 8 +- tools/test-setup.sh | 57 + tox.ini | 34 +- 583 files changed, 23346 insertions(+), 18774 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fd007ac..1ae6ccf 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9,2 +9,2 @@ Babel>=2.3.4 # BSD -pbr>=1.6 # Apache-2.0 -WebOb>=1.2.3 # MIT +pbr>=1.8 # Apache-2.0 +WebOb>=1.6.0 # MIT @@ -19,4 +19,4 @@ sqlalchemy-migrate>=0.9.6 # Apache-2.0 -stevedore>=1.16.0 # Apache-2.0 -passlib>=1.6 # BSD -python-keystoneclient!=2.1.0,>=2.0.0 # Apache-2.0 -keystonemiddleware!=4.1.0,!=4.5.0,>=4.0.0 # Apache-2.0 +stevedore>=1.17.1 # Apache-2.0 +passlib>=1.7.0 # BSD +python-keystoneclient>=3.8.0 # Apache-2.0 +keystonemiddleware>=4.12.0 # Apache-2.0 @@ -25 +25 @@ oslo.concurrency>=3.8.0 # Apache-2.0 -oslo.config>=3.14.0 # Apache-2.0 +oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 @@ -27,2 +27,2 @@ oslo.context>=2.9.0 # Apache-2.0 -oslo.messaging>=5.2.0 # Apache-2.0 -oslo.db!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0 +oslo.messaging>=5.14.0 # Apache-2.0 +oslo.db>=4.15.0 # Apache-2.0 @@ -30 +30 @@ oslo.i18n>=2.1.0 # Apache-2.0 -oslo.log>=1.14.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 @@ -32 +32 @@ oslo.middleware>=3.0.0 # Apache-2.0 -oslo.policy>=1.9.0 # Apache-2.0 +oslo.policy>=1.17.0 # Apache-2.0 @@ -34 +34 @@ oslo.serialization>=1.10.0 # Apache-2.0 -oslo.utils>=3.16.0 # Apache-2.0 +oslo.utils>=3.18.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 41e60a7..444a2b0 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,2 +9,2 @@ bashate>=0.2 # Apache-2.0 -os-testr>=0.7.0 # Apache-2.0 -freezegun # Apache-2.0 +os-testr>=0.8.0 # Apache-2.0 +freezegun>=0.3.6 # Apache-2.0 @@ -13 +13 @@ freezegun # Apache-2.0 -oslo.db[fixtures,mysql,postgresql]!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0 +oslo.db[fixtures,mysql,postgresql]>=4.15.0 # Apache-2.0 @@ -16 +16 @@ oslo.db[fixtures,mysql,postgresql]!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0 -coverage>=3.6 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -20 +20 @@ fixtures>=3.0.0 # Apache-2.0/BSD -lxml>=2.3 # BSD +lxml!=3.7.0,>=2.3 # BSD @@ -25 +25 @@ oslotest>=1.10.0 # Apache-2.0 -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD @@ -35,2 +35,2 @@ testtools>=1.4.0 # MIT -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 -reno>=1.8.0 # Apache2 +oslosphinx>=4.7.0 # Apache-2.0 +reno>=1.8.0 # Apache-2.0 @@ -41 +41 @@ tempest>=12.1.0 # Apache-2.0 -requests>=2.10.0 # Apache-2.0 +requests!=2.12.2,>=2.10.0 # Apache-2.0

1 0

[freezer] freezer-dr 4.0.0 (ocata)
by no-reply＠openstack.org 22 Feb '17

22 Feb '17

We eagerly announce the release of: freezer-dr 4.0.0: OpenStack Disaster Recovery This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/freezer-dr/ For more details, please see below. Changes in freezer-dr 3.0.0.0rc1..4.0.0 --------------------------------------- dc7820e Added pbr version in setup.py as it's required 2da1af2 Remove link to modindex 9cac795 Add LICENSE file b4fc9a6 Allow Monasca driver to process enabled nodes only fe782ef Add gencofig tox target a8b664d Change according to preferred word choice f857de7 Show team and repo badges on README 5af54e4 Added python-monascaclient and Added more doc for Monasca driver 61558d2 Notify if metrics are not defined or not added for hosts 7ca4980 Implemented Monasca Monitoring Driver b9bb720 Refactor the base monitoring driver 783577f Added py35 environement configuration to tox.ini 91b034d Updating freezer-dr osclient abeda56 Docstrings should not start with a space df05da6 Updating requirements Diffstat (except docs and test files) ------------------------------------- LICENSE | 201 ++++++++++++ README.rst | 13 +- etc/freezer-dr.conf.sample | 141 +++++---- etc/templates/error.jinja | 7 +- etc/templates/success.jinja | 7 +- etc/templates/user_error.jinja | 7 +- etc/templates/user_success.jinja | 7 +- freezer_dr/common/config.py | 40 +-- freezer_dr/common/osclient.py | 88 +++--- freezer_dr/evacuators/common/manager.py | 13 +- freezer_dr/evacuators/drivers/dummy/dummy.py | 2 +- freezer_dr/main.py | 5 +- freezer_dr/monitors/common/driver.py | 27 +- freezer_dr/monitors/common/manager.py | 11 +- freezer_dr/monitors/drivers/default/driver.py | 45 ++- freezer_dr/monitors/drivers/dummy/driver.py | 24 +- freezer_dr/monitors/drivers/monasca/__init__.py | 0 freezer_dr/monitors/drivers/monasca/driver.py | 344 +++++++++++++++++++++ freezer_dr/notifiers/common/driver.py | 22 +- freezer_dr/notifiers/common/manager.py | 5 +- .../notifiers/drivers/default/default_email.py | 16 +- requirements.txt | 24 +- setup.py | 2 +- tox.ini | 19 +- 25 files changed, 871 insertions(+), 202 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 769de38..a866e24 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,12 +1,12 @@ -pbr>=0.6,!=0.7,<1.0 -python-keystoneclient>=1.2.0,<1.4.0 -python-neutronclient>=2.4.0,<2.5.0 -python-novaclient>=2.22.0,<2.24.0 -PyYAML>=3.1.0 -oslo.config>=1.9.3,<1.10.0 # Apache-2.0 -oslo.i18n>=1.5.0,<1.6.0 # Apache-2.0 -oslo.utils>=1.4.0,!=1.4.1,<1.5.0 -oslo.log>=1.0.0,<1.1.0 # Apache-2.0 -libvirt-python>=1.2.5 -Jinja2>=2.6 - +pbr>=1.8 # Apache-2.0 +python-keystoneclient>=3.8.0 # Apache-2.0 +python-monascaclient>=1.1.0 # Apache-2.0 +python-neutronclient>=5.1.0 # Apache-2.0 +python-novaclient>=6.0.0,!=7.0.0 # Apache-2.0 +PyYAML>=3.10.0 # MIT +oslo.config>=3.14.0,!=3.18.0 # Apache-2.0 +oslo.i18n>=2.1.0 # Apache-2.0 +oslo.utils>=3.18.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 +libvirt-python>=1.2.5 # LGPLv2+ +Jinja2>=2.8,!=2.9.0,!=2.9.1,!=2.9.2,!=2.9.3,!=2.9.4 # BSD License (3 clause) \ No newline at end of file

1 0

[designate] designate 4.0.0 (ocata)
by no-reply＠openstack.org 22 Feb '17

22 Feb '17

We are thrilled to announce the release of: designate 4.0.0: DNS as a Service This release is part of the ocata release series. The source is available from: http://git.openstack.org/cgit/openstack/designate Download the package from: https://tarballs.openstack.org/designate/ Please report issues through launchpad: http://bugs.launchpad.net/designate For more details, please see below. 4.0.0 ^^^^^ New Features * Operators now have a choice in the type of notification payload content that Designate can emit via oslo.messaging's Notifier. The default plugin is configured to emit the same information that the notifications previous to this patch emitted. So there is no functional change. Operators can write their own notification plugins that exist in designate/notifications.py. An "audit" plugin is included. This plugin emits object changes, if they exist, along with zone ids, zone/recordset names. A plugin can define multiple payloads from a single notification to be emitted at once, if desirable. The selection of a plugin is defined by python entrypoints (for driver availability) and the new "notification_plugin" option in the "DEFAULT" config section. Changes in designate 3.0.0.0rc1..4.0.0 -------------------------------------- bf03da7 Add warning message to akamai driver a7dda9c Do not send DNS queries against hostnames c135dc7 Validate NS records on a pool during an update 438e39e Allow for zones / pools with no attributes f6ba5c2 Use exit code 1 for failed designate-manage pool commands 1c7acc2 Switch to decorators.idempotent_id dc34ed4 Fix noop metrics timed decorator 9a466ed Updated from global requirements 93c0161 Make notifications pluggable 184544e Use the oslo_utils address parser 03069bf Make exception catching more python3-ish 38f4455 Updated from global requirements 423e539 Use designate.utils.generate_uuid instead of str(uuid.uuid4) 28554cb change from domain to zone at configfile 1ea6f5e DOC Remove a couple of repeated words 1a5ebf6 Fix a typo in designate/worker/tasks/zone.py 1791233 Updated from global requirements 150e4d0 [api-ref] fix create zone export endpoint 5f973e8 Fix typo in upgrade doc 1598b5e The usage of LOG mismatch in the code e97e377 [backend:akamai] fix retrieval of tsig_key_name 26a7ad4 Remove lowercase constarint for pgsql b136cdb Use modules for import not objects 4c3f8ff Updated from global requirements f5a9fbe Add pGSQL support for pdns4 driver in devstack 13ee3fb Fix grenade to use the driver specified in the gate ad1f14c Update Devstack plugin dfa050f Set import exceptions in tox.ini configuration d250375 Show team and repo badges on README 9aedcde Add v6 support in _get_ip_data 2023781 Fix a typo in parameters.yaml 3a8452c Fix DB migration with postgresql 5d11a04 Updated from global requirements c723984 Updated from global requirements 7f771be Updated from global requirements 22460a9 Fix noop client getters e183541 [api-ref] add optional zone create parameter 'masters' 9e05e45 Remove tests ported to tempest plugin ad47c16 Fix typo d999c21 Switch stats client import to use oslo_utils 04374fc cors: update default configuration in config 4a8b70f Updated from global requirements 907cb4a Follow up - removing old dirs + config 583e824 Remove the method _dispatch in rpc 74f4cc8 Don't include openstack/common in flake8 exclude list 417efcc Add noop metrics client f54d1d8 Remove Oslo Incubator Code 67bdd1e Updated from global requirements f037de3 fix link to docs.openstack.org in release notes for mitaka 89033f0 [Trivial] Fix some typos in designate. e5f6ef7 Fix unit tests for oslo.config 3.18.0 4e269b5 Fix for allowing user to create zone other than ending with TLD bd18376 Update .coveragerc after the removal of respective directory f12da24 Fix Mitaka Upgrade Doc 899812d Changed the home-page link 618982a Use ConfigParser instead of SafeConfigParser 57c418d Updated from global requirements e0c52db Fix a typo 7dd4778 Updated from global requirements 24efb6b Enable release notes translation 857b3ed Updated from global requirements d20706a Remove vim header from source files e47a5db Fix typo a-an, than-then, wrong character case 366807f Fix typos in models.py & bind9.filters 177b391 Updated from global requirements 7ac7eb4 Infoblox: Reverse lookup zone creation fails 97359e2 Fix for the exception on creating secondary zone f16d567 Add API description for deleting zone export record to api-ref ac75d77 TrivialFix: Remove default=None when set value in Config e5cb256 Using sys.exit(main()) instead of main() 9e117a1 Trivial: Remove vim header from source files 8c486c9 Remove Routes from requirements 05d79a3 api-ref v2 recordset: document X-Designate-Edit-Managed-Records header a85b06f Updated from global requirements 9690aa7 Fix typos in zone.py & pools.rst & scheduler.rst 38e2416 Update reno for stable/newton 749b814 Some typos need to be fixed 9648a3d Updating the sample handler to be compatible with mitaka/newton b9febe6 Updated from global requirements 2f06187 Add Monasca-statsd metric generation 81aeea7 Partitioner - Rety on failure to get members Diffstat (except docs and test files) ------------------------------------- .coveragerc | 2 +- README.rst | 9 + api-ref/source/dns-api-v2-recordset.inc | 3 + api-ref/source/dns-api-v2-zone-export.inc | 35 +- api-ref/source/dns-api-v2-zone.inc | 1 + api-ref/source/parameters.yaml | 6 +- contrib/archive/backends/impl_ipa/auth.py | 4 +- contrib/consume.py | 39 ++ .../notification_handler/sample.py | 54 +-- contrib/designate-ext-samplehandler/setup.cfg | 6 +- contrib/ipaextractor.py | 5 +- contrib/records_mass_create.py | 5 +- contrib/zoneextractor.py | 2 +- designate/api/middleware.py | 5 + designate/api/v2/controllers/floatingips.py | 2 +- designate/backend/__init__.py | 4 +- designate/backend/agent.py | 3 +- designate/backend/agent_backend/__init__.py | 4 +- designate/backend/agent_backend/impl_gdnsd.py | 4 +- designate/backend/impl_akamai.py | 9 +- designate/backend/impl_infoblox/connector.py | 2 - .../backend/impl_infoblox/object_manipulator.py | 8 +- .../backend/impl_powerdns/migrate_repo/manage.py | 1 - .../versions/001_add_initial_schema.py | 2 - designate/central/service.py | 35 +- designate/common/config.py | 35 +- designate/common/memorycache.py | 97 ++++ designate/context.py | 16 +- designate/coordination.py | 19 +- designate/dnsutils.py | 2 +- designate/manage/pool.py | 27 +- designate/mdns/notify.py | 11 +- designate/mdns/xfr.py | 5 +- designate/metrics.py | 115 +++++ designate/metrics_client/__init__.py | 0 designate/metrics_client/noop.py | 92 ++++ designate/network_api/__init__.py | 4 +- designate/network_api/fake.py | 9 +- designate/network_api/neutron.py | 8 +- designate/notification_handler/__init__.py | 4 +- designate/notification_handler/base.py | 8 +- designate/notification_handler/neutron.py | 11 +- designate/notification_handler/nova.py | 7 +- designate/notifications.py | 182 +++++++- designate/objects/adapters/base.py | 3 +- designate/openstack/__init__.py | 0 designate/openstack/common/__init__.py | 0 designate/openstack/common/memorycache.py | 97 ---- designate/pool_manager/cache/__init__.py | 4 +- .../pool_manager/cache/impl_memcache/__init__.py | 2 +- .../cache/impl_sqlalchemy/migrate_repo/manage.py | 1 - designate/quota/__init__.py | 4 +- designate/quota/impl_noop.py | 4 +- designate/quota/impl_storage.py | 4 +- designate/rpc.py | 30 +- designate/scheduler/filters/attribute_filter.py | 12 +- designate/service.py | 19 +- designate/sqlalchemy/base.py | 3 +- designate/storage/__init__.py | 4 +- .../storage/impl_sqlalchemy/migrate_repo/manage.py | 1 - .../storage/impl_sqlalchemy/migrate_repo/utils.py | 2 - .../migrate_repo/versions/070_liberty.py | 17 +- .../migrate_repo/versions/086_new_pools_tables.py | 13 +- .../migrate_repo/versions/097_add_services.py | 7 +- designate/storage/impl_sqlalchemy/tables.py | 13 +- .../unit/test_agent/test_backends/test_djbdns.py | 2 +- .../unit/test_agent/test_backends/test_msdns.py | 2 +- designate/worker/tasks/zone.py | 4 +- devstack/designate_plugins/backend-pdns4 | 20 +- .../designate_plugins/backend-pdns4-pgsql-db.sql | 91 ++++ devstack/networking_test.py | 3 +- devstack/plugin.sh | 18 +- devstack/statsd_mock_server.py | 61 +++ devstack/upgrade/settings | 3 - etc/designate/designate.conf.sample | 39 +- etc/designate/pools.yaml.sample | 2 +- etc/designate/rootwrap.d/bind9.filters | 2 +- .../api/v2/test_zone_ownership_transfers.py | 132 ------ openstack-common.conf | 10 - .../pluggable-notifications-bd049b755a2ace9c.yaml | 21 + .../notes/pool_scheduler-32e34dda9484ef9a.yaml | 2 +- releasenotes/source/conf.py | 3 + releasenotes/source/index.rst | 1 + releasenotes/source/newton.rst | 6 + requirements.txt | 42 +- setup.cfg | 9 +- test-requirements.txt | 12 +- tools/pretty_flake8.py | 2 +- tox.ini | 3 +- 120 files changed, 1831 insertions(+), 732 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d4eb861..c0111a3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ greenlet>=0.3.2 # MIT -Jinja2>=2.8 # BSD License (3 clause) +Jinja2!=2.9.0,!=2.9.1,!=2.9.2,!=2.9.3,!=2.9.4,>=2.8 # BSD License (3 clause) @@ -11,4 +11,4 @@ jsonschema!=2.5.0,<3.0.0,>=2.0.0 # MIT -keystoneauth1>=2.10.0 # Apache-2.0 -keystonemiddleware!=4.1.0,!=4.5.0,>=4.0.0 # Apache-2.0 -netaddr!=0.7.16,>=0.7.12 # BSD -oslo.config>=3.14.0 # Apache-2.0 +keystoneauth1>=2.18.0 # Apache-2.0 +keystonemiddleware>=4.12.0 # Apache-2.0 +netaddr!=0.7.16,>=0.7.13 # BSD +oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 @@ -16 +16 @@ oslo.concurrency>=3.8.0 # Apache-2.0 -oslo.messaging>=5.2.0 # Apache-2.0 +oslo.messaging>=5.14.0 # Apache-2.0 @@ -18 +18 @@ oslo.middleware>=3.0.0 # Apache-2.0 -oslo.log>=1.14.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 @@ -23 +23 @@ oslo.service>=1.10.0 # Apache-2.0 -oslo.utils>=3.16.0 # Apache-2.0 +oslo.utils>=3.18.0 # Apache-2.0 @@ -26,2 +26,2 @@ PasteDeploy>=1.5.0 # MIT -pbr>=1.6 # Apache-2.0 -pecan!=1.0.2,!=1.0.3,!=1.0.4,>=1.0.0 # BSD +pbr>=1.8 # Apache-2.0 +pecan!=1.0.2,!=1.0.3,!=1.0.4,!=1.2,>=1.0.0 # BSD @@ -30,3 +30,2 @@ python-neutronclient>=5.1.0 # Apache-2.0 -Routes!=2.0,!=2.1,!=2.3.0,>=1.12.3;python_version=='2.7' # MIT -Routes!=2.0,!=2.3.0,>=1.12.3;python_version!='2.7' # MIT -requests>=2.10.0 # Apache-2.0 +requests!=2.12.2,>=2.10.0 # Apache-2.0 +retrying!=1.3.0,>=1.2.3 # Apache-2.0 @@ -36 +35 @@ sqlalchemy-migrate>=0.9.6 # Apache-2.0 -stevedore>=1.16.0 # Apache-2.0 +stevedore>=1.17.1 # Apache-2.0 @@ -39,4 +38,4 @@ setuptools!=24.0.0,>=16.0 # PSF/ZPL -WebOb>=1.2.3 # MIT -dnspython>=1.14.0 # http://www.dnspython.org/LICENSE -dnspython3>=1.12.0;python_version>='3.0' # http://www.dnspython.org/LICENSE -oslo.db>=4.10.0 # Apache-2.0 +WebOb>=1.6.0 # MIT +dnspython>=1.14.0;python_version=='2.7' # http://www.dnspython.org/LICENSE +dnspython3!=1.13.0,!=1.14.0,>=1.12.0;python_version>='3.0' # http://www.dnspython.org/LICENSE +oslo.db>=4.15.0 # Apache-2.0 @@ -45 +44 @@ oslo.context>=2.9.0 # Apache-2.0 -oslo.policy>=1.9.0 # Apache-2.0 +oslo.policy>=1.17.0 # Apache-2.0 @@ -48 +47 @@ python-memcached>=1.56 # PSF -tooz>=1.28.0 # Apache-2.0 +tooz>=1.47.0 # Apache-2.0 @@ -50 +49,2 @@ debtcollector>=1.2.0 # Apache-2.0 -os-win>=0.2.3 # Apache-2.0 +os-win>=1.4.0 # Apache-2.0 +monasca-statsd>=1.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 2ba1249..e92cc24 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ hacking<0.10,>=0.9.2 -coverage>=3.6 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -11 +11 @@ oslotest>=1.10.0 # Apache-2.0 -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +oslosphinx>=4.7.0 # Apache-2.0 @@ -13,2 +13,2 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -requests-mock>=1.0 # Apache-2.0 -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD +requests-mock>=1.1 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD @@ -21 +21 @@ tempest>=12.1.0 # Apache-2.0 -reno>=1.8.0 # Apache2 +reno>=1.8.0 # Apache-2.0 @@ -24 +24 @@ bandit>=1.1.0 # Apache-2.0 -os-api-ref>=0.4.0 # Apache-2.0 +os-api-ref>=1.0.0 # Apache-2.0

1 0

[glance] glance 14.0.0 (ocata)
by no-reply＠openstack.org 22 Feb '17

22 Feb '17

We exuberantly announce the release of: glance 14.0.0: OpenStack Image Service This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/glance/ For more details, please see below. 14.0.0 ^^^^^^ * Add "ploop" to the list of supported disk formats. * **Experimental** zero-downtime database upgrade using an expand- migrate-contract series of operations is available. * The *minor* version of the Images API v2 is bumped to **2.5**. * The *Community Images* feature has been introduced in the Images API v2. This enables a user to make an image available for consumption by all other users. In association with this change, the 'visibility' values for an image have been expanded to include 'community' and 'shared'. Location updates for images are now restricted to images in "active" or "queued" status. Please refer to the "Bug Fixes" section for more information. New Features ************ * The identifier "ploop" has been added to the list of supported disk formats in Glance. The respective configuration option has been updated and the default list shows "ploop" as a supported format. * Image 'visibility' changes. * Prior to Ocata, an image with 'private' visibility could become shared by adding members to it, though its visibility remained 'private'. In order to make the visibility of images more clear, in Ocata the following changes are introduced: * A new value for visibility, 'shared', is introduced. Images that have or can accept members will no longer be displayed as having 'private' visibility, reducing confusion among end users. * An image must have 'shared' visibility in order to accept members. This provides a safeguard from 'private' images being shared inadvertently. * In order to preserve backward compatibilty with the current sharing workflow, the default visibility of an image in Ocata is 'shared'. Consistent with pre-Ocata behavior, this will allow the image to accept member operations without first updating the visibility of the image. (Keep in mind that an image with visibility 'shared' but having no members is not actually accessible to anyone other than the image owner, so this is not in itself a security problem.) * Image visibility may be specified at the time of image creation. * As mentioned above, the default visibility of an image is 'shared'. If a user wants an image to be private and not accept any members, a visibility of 'private' can be explicitly assigned at the time of creation. * Such an image will require its visibility to be updated to 'shared' before it will accept members. * Image visibility is changed using the image update (PATCH) call. * Note: This is not a change. It's simply mentioned for completeness. * A new value for the Image 'visibility' field, 'community', is introduced. * An image with 'community' visibility is available for consumption by any user. * In order to prevent users spamming other users' image-list response, community images are not included in the image-list response unless specifically requested by a user. * For example, "GET v2/images?visibility=community" * As is standard behavior for the image-list call, other filters may be applied to the request. For example, to see the community images supplied by user "931efe8a- 0ad7-4610-9116-c199f8807cda", the following call would be made: "GET v2/images?visibility=community&owner=931efe8a- 0ad7-4610-9116-c199f8807cda" Upgrade Notes ************* * The "disk_format" config option enables "ploop" as supported by default. * The database migration engine used by Glance for database upgrades has been changed from *SQLAlchemy Migrate* to *Alembic* in this release. * This has necessitated a change in the location and naming convention for migration scripts. Developers, operators, and DevOps are strongly encouraged to read through the Database Management section of the Glance documentation for details of the changes introduced in the Ocata release. Here's a brief summary of the changes: * All the "glance manage db" commands are changed appropriately to use Alembic to perform operations such as "version", "upgrade", "sync" and "version_control". Hence, the "old-style" migration scripts will no longer work with the Ocata glance manage db commands. * Database versions are no longer numerical. Instead, they are the *revision ID* of the last migration applied on the database. * For example, the Liberty migration, which was version "42" under the old system, will now appear as "liberty". The Mitaka migrations "43" and "44" appear as "mitaka01" and "mitaka02", respectively. * The change in migration engine has been undertaken in order to enable zero-downtime database upgrades, which are part of the effort to implement rolling upgrades for Glance (scheduled for the Pike release). * A preview of zero-downtime database upgrades is available in this release, but it is **experimental** and **not supported for production systems**. Please consult the Database Management section of the Glance documentation for details. (http://docs.openstack.org/developer/glance/db.html) * The **CURRENT** version of the version 2 Images API supplied by Glance is now **2.5**. Changes include: * The 'visibility' enumeration has been increased from two values ("public", "private") to four values ("public", "private", "shared", and "community"). * Formerly, it was possible to add members to an image whose visibility was "private", thereby creating a "shared" image. In this release, an image must have a visibility of "shared" in order to accept member operations. Attempting to add a member to an image with a visibility of "private" will result in a 4xx response containing an informative message. (https://developer.openstack.org/api-ref/image/v2/?expanded =create-image-member-detail#create-image-member) * Some backend store names were inconsistent between glance and glance_store. This meant that operators of the VMware datastore or file system store were required to use store names in "glance- api.conf" that did not correspond to any valid identifier in glance_store. As this situation encouraged misconfiguration and operator unhappiness, we have made the store names consistent in the Newton release. What this means for you: * This change applies only to operators who are using multiple image locations * This change applies only to operators using the VMware datastore or filesystem stores * This change applies only to the "store_type_preference" option * *VMware datastore operators*: The old name, now **DEPRECATED**, was "vmware_datastore". The **new** name, used in both glance and glance_store, is "vmware" * *File system store operators*: the old name, now **DEPRECATED**, was "filesystem". The **new** name, used in both glance and glance_store, is "file" * This change is backward compatible, that is, the old names will be recognized by the code during the deprecation period. Support for the deprecated names will be removed in the **Pike** release * We strongly encourage operators to modify their "glance- api.conf" files immediately to use the **new** names * A new value for the Image 'visibility' field, 'community', is introduced. * The ability to update an image to have 'community' visibility is governed by a policy target named 'communitize_image'. The default is empty, that is, any user may communitize an image. * Visibility migration of current images * Prior to Ocata, the Glance database did not have a 'visibility' column, but instead used a boolean 'is_public' column, which was translated into 'public' or 'private' visibility in the Images API v2 image response. As part of the upgrade to Ocata, a 'visibility' column is introduced into the images table. It will be populated as follows * All images currently with 'public' visibility (that is, images for which 'is_public' is True in the database) will have their visibility set to 'public'. * Images currently with 'private' visibility (that is, images for which 'is_public' is False in the database) **and** that have image members, will have their visibility set to 'shared'. * Those images currently with 'private' visibility (that is, images for which 'is_public' is False in the database) and that have **no** image members, will have their visibility set to 'private'. * Note that such images will have to have their visibility updated to 'shared' before they will accept members. * Impact of the Ocata visibility changes on end users of the Images API v2 * We have tried to minimize the impact upon end users, but want to point out some issues to be aware of. * The migration of image visibility assigns sensible values to images, namely, 'private' to images that end users have *not* assigned members, and 'shared' to those images that have members at the time of the upgrade. Previously, if an end user wanted to share a private image, a member could be added directly. After the upgrade, the image will have to have its visibility changed to 'shared' before a member can be assigned. * The default value of 'shared' may seem weird, but it preserves the pre-upgrade workflow of: (1) create an image with default visibility, (2) add members to that image. Further, an image with a visibility of 'shared' that has no members is not accessible to other users, so it is functionally a private image. * The image-create operation allows a visibility to be set at the time of image creation. This option was probably not used much given that previously there were only two visibility values available, one of which ('public') is by default unassignable by end users. Operators may wish to update their documentation or tooling to specify a visibility value when end users create images. To summarize: * 'public' - reserved by default for images supplied by the operator for the use of all users * 'private' - the image is accessible only to its owner * 'community' - the image is available for consumption by all users * 'shared' - the image is completely accessible to the owner and available for consumption by any image members * Impact of the Ocata visibility changes on the Images API v1 * The DEPRECATED Images API v1 does not have a concept of "visibility", and in a "pure" v1 deployment, you would not notice that anything had changed. Since, however, we hope that there aren't many of those around anymore, here's what you can expect to see if you use the Images API v1 in a "mixed" deployment. * In the v1 API, images have an "is_public" field (but no "visibility" field). Images for which "is_public" is True are the equivalent of images with 'public' visibility in the v2 API. Images for which "is_public" is false are the equivalent of v2 'shared' images if they have members, or the equivalent of v2 'private' images if they have no members. * An image that has 'community' visibility in the v2 API will have "is_public" == False in the v1 API. It will behave like a private image, that is, only the owner (or an admin) will have access to the image, and only the owner (or an admin) will see the image in the image-list response. * Since the default value for 'visibility' upon image creation is 'shared', an image freshly created using the v1 API can have members added to it, just as it did pre-Ocata. * If an image has a visiblity of 'private' when viewed in the v2 API, then that image will not accept members in the v1 API. If a user wants to share such an image, the user can: * Use the v2 API to change the visibility of the image to 'shared'. Then it will accept members in either the v1 or v2 API. * Use the v1 API to update the image so that "is_public" is False. This will reset the image's visibility to 'shared', and it will now accept member operations. * Note that in either case, when dealing with an image that has 'private' visibility in the v2 API, there is a safeguard against a user unintentionally adding a member to an image and exposing data. The safeguard is that you must perform an additional image update operation in either the v1 or v2 API before you can expose it to other users. * A recent change to oslo.log (>= 3.17.0) set the default value of "[DEFAULT]/use_stderr" to "False" in order to prevent duplication of logs (as reported in bug #1588051). Since this would change the current behaviour of certain glance commands (e.g., glance- replicator, glance-cache-manage, etc.), we chose to override the default value of "use_stderr" to "True" in those commands. We also chose not to override that value in any Glance service (e.g., glance-api, glance-registry) so that duplicate logs are not created by those services. Operators that have a usecase that relies on logs being reported on standard error may set "[DEFAULT]/use_stderr = True" in the appropriate service's configuration file upon deployment. * The metadata definition for "hypervisor_type" in the "OS::Compute::Hypervisor" namespace has been extended to include the Virtuozzo hypervisor, designated as "vz". You may upgrade the definition using: "glance-manage db load_metadefs [--path <path>] [--merge] [--prefer_new]" Security Issues *************** * All "qemu-img info" calls are now run under resource limitations that limit the CPU time and address space usage of the process running the command to 2 seconds and 1 GB respectively. This addresses the bug https://bugs.launchpad.net/glance/+bug/1449062 Current usage of "qemu-img" is limited to Glance tasks, which by default (since the Mitaka release) are only available to admin users. We continue to recommend that tasks only be exposed to trusted users Bug Fixes ********* * Image location updates to an image which is not in "active" or "queued" status can introduce race conditions and security issues and hence a bad experience for users and operators. As a result, we have restricted image location updates in this release. Users will now observe the following: * HTTP Response Code 409 (Conflict) will be returned in response to an attempt to remove an image location when the image status is not "active" * HTTP Response Code 409 (Conflict) will be returned in response to an attempt to replace an image location when the image status is not "active" or "queued" Other Notes *********** * The deprecation path for the configuration option "show_multiple_locations" has been changed because the mitigation instructions for OSSN-0065 refer to this option. It is now subject to removal on or after the **Pike** release. The help text for this option has been updated accordingly. (https://wiki.openstack.org/wiki/OSSN/OSSN-0065) Changes in glance 13.0.0.0rc1..14.0.0 ------------------------------------- f7adc0f Refresh config files for Ocata RC-1 fb851b9 Alembic migrations/rolling upgrades release note 9859df2 Add expand/migrate/contract migrations for CI 0f0354a Add expand/migrate/contract commands to glance-manage CLI 95c7c1b Refactor tests to use Alembic to run migrations 21d4310 Port Glance Migrations to Alembic 58bf19d Correct 2.5 minor version bump release note 76aeab3 Update api-ref for image visibility changes fb2cedc refactor glare plugin loader tests to not mock private methods of stevedore 689dfae Refine migration query added with CI change b55dd07 Hack to support old and new stevedore d64f6bc do not mock private methods of objects from libraries bd5a23d Update deprecated show_multiple_locations helptext f905ff0 Add release note for image visibility changes 36a1b7c Update api-ref for partial download requests. 902880d Updated from global requirements 3a96347 Eliminate reference to metadefs 'namespace_id' d64fe8b Updated from global requirements 811941a Add image update tests for is_public 18acc70 Fix regression introduced by Community Images c802876 Bump minor API version 265659e Implement and Enable Community Images 61e9858 Update to "disallowed minor code changes" ed634d4 Updated from global requirements 06c4313 Adjust test suite for new psutil versions fb4ee4a Update dev docs to include 'vhdx' disk format 03567be Remove obsolete swift links ebd6f07 Updated from global requirements ab7152e Add ploop to supported disk_formats b4bd648 Updated from global requirements 0cf83ca Fix some typos in api-ref c3baf74 Update sample config files for Ocata-3 88c038b Enable python3.5 testing. 44b0f84 Update tox configuration file to reduce duplication cac2fc6 Expand hypervisor_type meta data with Virtuozzo hypervisor a6740ac Remove v3 stub controller dcd6e3e Updated from global requirements 18053e2 Skipping tests for location 'add', 'replace' on 'queued' images 182be5f Editing release note for location update patch 0eb2938 Change cfg.set_defaults into cors.set_defaults 4ac8adb Restrict location updates to active, queued images d4f07cc Allow purging of records less than 1 day old. e976b14 Updated from global requirements fc644c7 Updated from global requirements 4267d2c Updated from global requirements ddb2b87 Python3: fix glance.tests.functional.v2.test_images 37a6f30 Python 3: fix glance.tests.functional.v1.test_misc 1d5dd06 Python3: fix glance.tests.functional.test_scrubber 5521b6d Python3: fix logs/glance.tests.functional.test_healthcheck_middleware eab64fe Python3: Fix glance.tests.functional.test_glance_replicator 401f544 Python3: Fix glance.tests.functional.test_bin_glance_cache_manage 6540f93 Python 3: fix glance.tests.functional.db.test_sqlalchemy c366881 Python3: fix test_client_redirects.py dfe21bd Add working functional tests to tox.ini 5fc8057 Add alt text for badges 87090e9 Correct releasenote "Prepare for oslo.log 3.17.0" b2cd077 Prepare for oslo.log 3.17.0 6bed29f Show team and repo badges on README 400230c Handling HTTP range requests in Glance ca8c2bf Remove uneccessary "in" from CONTRIBUTING.rst 51447d0 Updated from global requirements 8be3e10 IPv6 fix in Glance for malformed URLs. cde9f18 Updated from global requirements e170225 Update api-ref with 409 response to image update. 9968b09 Added overwrite warning for db_export_metadefs. 408672c Allow specifying OS_TEST_PATH (to reduce tests ran) 616060d Do not use service catalog for cache client 621dfce Added unit tests for disabled notifications in Notifier f72d955 Updated from global requirements ec6c9da Updated from global requirements 412d82c ping_server: Always close the socket 2b60ac7 Remove mox3 in test-requirement.txt ce3e7b3 Correct url in doc source 3245dc3 Updated from global requirements e40d3ff Add DeprecationWarning in test environments a982fa2 Updated from global requirements 656e588 Update .coveragerc after the removal of openstack directory 1dbb2c3 Updated from global requirements d2eb38d Drop unused import cfg e4953f4 Imported Translations from Zanata 857cb49 Image signature documentation modify barbican auth_endpoint fca18a3 Add libvirt image metadef for hw_pointer_model d3e8207 Add more resource url in readme.rst a15ab75 Updated from global requirements 33b5cfb Cleanup newton release Notes 7a89cf7 Imported Translations from Zanata 5b9482a Fix Domain Model code example. 5033e41 Imported Translations from Zanata 61a62c6 Remove redundant word. a01a03e Enable release notes translation 28c415d Updated from global requirements 8a8e5bf Extracted HTTP response codes to constants in tests 8a63622 Extracted HTTP response codes to constants 3db4e56 Updated from global requirements 4f64751 Fix typo: remove redundant 'the' 0a9bbd3 dev-docs: mark v1 as deprecated be85586 Updated from global requirements 98147bc Updated from global requirements e6b34fc Correct releasenote for Ib900bbc05cb9ccd90c6f56ccb4bf2006e30cdc80 be2c5e7 Updated from global requirements ce6cb2d [api-ref] configure LogABug feature cb40837 Update CONTRIBUTING.rst 69a9b65 Adding constraints around qemu-img calls 1c6bd03 Correct the order of parameters in assertEqual() dfa0682 Fixing inconsistency in Glance store names. af70dc6 change the example URLs in api-ref for Glance b9237e3 Updated from global requirements cd65bfd api-ref: deprecate images v1 api 51e5321 Remove unused oslo.service requirement 3a1f861 Update api-ref to add newly supported 'vhdx' disk format option. 1bbddb7 Fix incorrect call for _gen_uuid eb7507a Update description of image_destroy method. 7e3f19e Update reno for stable/newton 5ac85fd api-ref: add versions history 83d1337 Correctly point to Task Statuses from Tasks doc. acb3ce0 TrivialFix: Remove unused variable edd5bf9 Dev-docs: command in code block for refresh config b6dd4f9 [api-ref] Remove temporary block a75ddd4 Add note to docs on release notes prelude section 5d6fb62 Fixed indentation d58cffe Remove self.__dict__ for formatting strings ff83038 Fix using filter() to meet python2,3 48f8dd3 Use upper constraints for all jobs in tox.ini 60d3146 Fix five typos on doc Diffstat (except docs and test files) ------------------------------------- .coveragerc | 2 +- .testr.conf | 2 +- CONTRIBUTING.rst | 8 +- README.rst | 72 +- api-ref/source/conf.py | 44 +- api-ref/source/v1/images-images-v1.inc | 4 +- api-ref/source/v1/images-sharing-v1.inc | 2 +- api-ref/source/v1/index.rst | 6 +- api-ref/source/v2/images-data.inc | 18 +- api-ref/source/v2/images-images-v2.inc | 74 +- .../source/v2/images-parameters-descriptions.inc | 17 + api-ref/source/v2/images-parameters.yaml | 29 +- api-ref/source/v2/images-sharing-v2.inc | 31 +- api-ref/source/v2/index.rst | 1 + .../source/v2/metadefs-namespaces-properties.inc | 4 +- api-ref/source/v2/metadefs-namespaces.inc | 2 +- .../samples/metadef-namespace-update-response.json | 2 +- .../v2/samples/schemas-image-show-response.json | 4 +- .../v2/samples/schemas-images-list-response.json | 4 +- api-ref/source/v2/samples/task-create-request.json | 2 +- .../source/v2/samples/task-create-response.json | 2 +- .../v2/samples/task-show-failure-response.json | 2 +- api-ref/source/versions/index.rst | 43 + .../versions/samples/image-versions-response.json | 26 +- etc/glance-api.conf | 418 ++++- etc/glance-cache.conf | 56 +- etc/glance-glare.conf | 136 +- etc/glance-manage.conf | 14 +- etc/glance-registry.conf | 371 ++++- etc/glance-scrubber.conf | 56 +- etc/metadefs/compute-hypervisor.json | 3 +- etc/metadefs/compute-libvirt-image.json | 6 + etc/policy.json | 1 + glance/api/authorization.py | 17 +- glance/api/middleware/cache.py | 3 +- glance/api/middleware/version_negotiation.py | 1 + glance/api/policy.py | 15 +- glance/api/v2/image_actions.py | 5 +- glance/api/v2/image_data.py | 19 +- glance/api/v2/image_members.py | 7 +- glance/api/v2/image_tags.py | 5 +- glance/api/v2/images.py | 21 +- glance/api/v2/metadef_namespaces.py | 11 +- glance/api/v2/metadef_objects.py | 7 +- glance/api/v2/metadef_properties.py | 7 +- glance/api/v2/metadef_resource_types.py | 5 +- glance/api/v2/metadef_tags.py | 12 +- glance/api/v2/tasks.py | 3 +- glance/api/v3/__init__.py | 0 glance/api/v3/router.py | 77 - glance/api/versions.py | 3 +- glance/async/flows/base_import.py | 2 + glance/async/flows/convert.py | 15 +- glance/async/flows/introspect.py | 1 + glance/async/utils.py | 10 + glance/cmd/cache_cleaner.py | 1 + glance/cmd/cache_prefetcher.py | 1 + glance/cmd/cache_pruner.py | 1 + glance/cmd/manage.py | 181 ++- glance/cmd/replicator.py | 29 +- glance/cmd/scrubber.py | 1 + glance/common/auth.py | 21 +- glance/common/client.py | 6 +- glance/common/config.py | 59 +- glance/common/exception.py | 6 + glance/common/glare/loader.py | 4 +- glance/common/location_strategy/store_type.py | 45 +- glance/common/rpc.py | 2 +- glance/common/wsgi.py | 9 +- glance/db/__init__.py | 5 +- glance/db/migration.py | 20 +- glance/db/registry/api.py | 42 +- glance/db/simple/api.py | 86 +- glance/db/sqlalchemy/alembic_migrations/README | 1 + .../db/sqlalchemy/alembic_migrations/__init__.py | 108 ++ .../alembic_migrations/add_artifacts_tables.py | 224 +++ .../alembic_migrations/add_images_tables.py | 201 +++ .../alembic_migrations/add_metadefs_tables.py | 171 +++ .../alembic_migrations/add_tasks_tables.py | 66 + .../db/sqlalchemy/alembic_migrations/alembic.ini | 69 + .../alembic_migrations/data_migrations/__init__.py | 70 + .../ocata_migrate01_community_images.py | 103 ++ glance/db/sqlalchemy/alembic_migrations/env.py | 92 ++ .../db/sqlalchemy/alembic_migrations/migrate.cfg | 20 + .../sqlalchemy/alembic_migrations/script.py.mako | 20 + .../alembic_migrations/versions/__init__.py | 0 .../alembic_migrations/versions/liberty_initial.py | 40 + .../mitaka01_add_image_created_updated_idx.py | 47 + .../mitaka02_update_metadef_os_nova_server.py | 42 + .../ocata01_add_visibility_remove_is_public.py | 72 + .../ocata01_add_visibility_remove_is_public.sql | 162 ++ .../versions/ocata_contract01_drop_is_public.py | 67 + .../versions/ocata_expand01_add_visibility.py | 151 ++ glance/db/sqlalchemy/api.py | 107 +- glance/db/sqlalchemy/glare.py | 7 +- glance/db/sqlalchemy/metadata.py | 2 + glance/db/sqlalchemy/metadef_api/namespace.py | 2 +- .../migrate_repo/versions/045_add_visibility.py | 51 + .../migrate_repo/versions/045_sqlite_upgrade.sql | 162 ++ glance/db/sqlalchemy/models.py | 7 +- glance/db/utils.py | 40 + glance/domain/__init__.py | 10 +- glance/image_cache/client.py | 3 +- glance/locale/de/LC_MESSAGES/glance.po | 617 +------- glance/locale/en_GB/LC_MESSAGES/glance-log-info.po | 12 +- glance/locale/es/LC_MESSAGES/glance-log-error.po | 8 +- glance/locale/es/LC_MESSAGES/glance-log-info.po | 12 +- glance/locale/es/LC_MESSAGES/glance-log-warning.po | 8 +- glance/locale/es/LC_MESSAGES/glance.po | 605 +------- glance/locale/fr/LC_MESSAGES/glance.po | 610 +------- glance/locale/it/LC_MESSAGES/glance.po | 611 +------- glance/locale/ja/LC_MESSAGES/glance.po | 563 +------ .../locale/ko_KR/LC_MESSAGES/glance-log-error.po | 16 +- glance/locale/ko_KR/LC_MESSAGES/glance-log-info.po | 12 +- .../locale/ko_KR/LC_MESSAGES/glance-log-warning.po | 8 +- glance/locale/ko_KR/LC_MESSAGES/glance.po | 535 +------ glance/locale/pt_BR/LC_MESSAGES/glance-log-info.po | 12 +- .../locale/pt_BR/LC_MESSAGES/glance-log-warning.po | 8 +- glance/locale/pt_BR/LC_MESSAGES/glance.po | 605 +------- glance/locale/ru/LC_MESSAGES/glance.po | 581 +------ .../locale/tr_TR/LC_MESSAGES/glance-log-error.po | 8 +- glance/locale/tr_TR/LC_MESSAGES/glance-log-info.po | 12 +- .../locale/tr_TR/LC_MESSAGES/glance-log-warning.po | 8 +- glance/locale/tr_TR/LC_MESSAGES/glance.po | 462 +----- .../locale/zh_CN/LC_MESSAGES/glance-log-error.po | 292 ++++ .../locale/zh_CN/LC_MESSAGES/glance-log-warning.po | 312 ++++ glance/locale/zh_CN/LC_MESSAGES/glance.po | 553 +------ glance/locale/zh_TW/LC_MESSAGES/glance.po | 502 +----- glance/location.py | 9 +- glance/notifier.py | 1 + glance/registry/api/v1/images.py | 10 +- glance/registry/api/v1/members.py | 8 +- .../functional/db/migrations/test_mitaka01.py | 48 + .../functional/db/migrations/test_mitaka02.py | 65 + .../db/migrations/test_ocata_contract01.py | 64 + .../db/migrations/test_ocata_expand01.py | 174 +++ .../db/migrations/test_ocata_migrate01.py | 147 ++ .../functional/test_bin_glance_cache_manage.py | 42 +- .../functional/test_healthcheck_middleware.py | 9 +- .../functional/v2/test_metadef_resourcetypes.py | 5 +- .../integration/legacy_functional/test_v1_api.py | 253 +-- .../v2/test_property_quota_violations.py | 18 +- .../notes/add-ploop-format-fdd583849504ab15.yaml | 11 + ...processlimits-to-qemu-img-c215f5d90f741d8a.yaml | 12 + .../notes/alembic-migrations-902b31edae7a5d7d.yaml | 38 + .../api-minor-version-bump-bbd69dc457fc731c.yaml | 20 + .../consistent-store-names-57374b9505d530d0.yaml | 32 + .../image-visibility-changes-fa5aa18dc67244c4.yaml | 175 +++ ...lo-log-use-stderr-changes-07f5daf3e6abdcd6.yaml | 14 + ...restrict_location_updates-05454bb765a8c92c.yaml | 22 + ...ltiple_locations-helptext-7fa692642b6b6d52.yaml | 11 + .../virtuozzo-hypervisor-fada477b64ae829d.yaml | 9 + releasenotes/source/conf.py | 5 +- releasenotes/source/index.rst | 1 + releasenotes/source/newton.rst | 7 + requirements.txt | 31 +- test-requirements.txt | 19 +- tox.ini | 98 +- 246 files changed, 8963 insertions(+), 10350 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index fb6b1a2..16369c2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=1.6 # Apache-2.0 +pbr>=1.8 # Apache-2.0 @@ -13 +13 @@ Routes!=2.0,!=2.3.0,>=1.12.3;python_version!='2.7' # MIT -WebOb>=1.2.3 # MIT +WebOb>=1.6.0 # MIT @@ -14,0 +15,2 @@ sqlalchemy-migrate>=0.9.6 # Apache-2.0 +sqlparse>=0.2.2 # BSD +alembic>=0.8.10 # MIT @@ -17 +19 @@ pycrypto>=2.6 # Public Domain -oslo.config>=3.14.0 # Apache-2.0 +oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 @@ -20,3 +22,2 @@ oslo.context>=2.9.0 # Apache-2.0 -oslo.service>=1.10.0 # Apache-2.0 -oslo.utils>=3.16.0 # Apache-2.0 -stevedore>=1.16.0 # Apache-2.0 +oslo.utils>=3.18.0 # Apache-2.0 +stevedore>=1.17.1 # Apache-2.0 @@ -24,3 +25,3 @@ futurist!=0.15.0,>=0.11.0 # Apache-2.0 -taskflow>=1.26.0 # Apache-2.0 -keystoneauth1>=2.10.0 # Apache-2.0 -keystonemiddleware!=4.1.0,!=4.5.0,>=4.0.0 # Apache-2.0 +taskflow>=2.7.0 # Apache-2.0 +keystoneauth1>=2.18.0 # Apache-2.0 +keystonemiddleware>=4.12.0 # Apache-2.0 @@ -28 +29 @@ WSME>=0.8 # MIT -PrettyTable<0.8,>=0.7 # BSD +PrettyTable<0.8,>=0.7.1 # BSD @@ -34 +35 @@ jsonschema!=2.5.0,<3.0.0,>=2.0.0 # MIT -python-keystoneclient!=2.1.0,>=2.0.0 # Apache-2.0 +python-keystoneclient>=3.8.0 # Apache-2.0 @@ -39 +40 @@ six>=1.9.0 # MIT -oslo.db!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0 +oslo.db>=4.15.0 # Apache-2.0 @@ -41,2 +42,2 @@ oslo.i18n>=2.1.0 # Apache-2.0 -oslo.log>=1.14.0 # Apache-2.0 -oslo.messaging>=5.2.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 +oslo.messaging>=5.14.0 # Apache-2.0 @@ -44 +45 @@ oslo.middleware>=3.0.0 # Apache-2.0 -oslo.policy>=1.9.0 # Apache-2.0 +oslo.policy>=1.17.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 15deb57..6898a43 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +13 @@ bandit>=1.1.0 # Apache-2.0 -coverage>=3.6 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -15 +14,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mox3>=0.7.0 # Apache-2.0 @@ -17,2 +16,2 @@ mock>=2.0 # BSD -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -requests>=2.10.0 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +requests!=2.12.2,>=2.10.0 # Apache-2.0 @@ -23 +22 @@ testtools>=1.4.0 # MIT -psutil<2.0.0,>=1.1.1 # BSD +psutil>=3.0.1 # BSD @@ -25 +24 @@ oslotest>=1.10.0 # Apache-2.0 -os-testr>=0.7.0 # Apache-2.0 +os-testr>=0.8.0 # Apache-2.0 @@ -28 +27 @@ os-testr>=0.7.0 # Apache-2.0 -PyMySQL!=0.7.7,>=0.6.2 # MIT License +PyMySQL>=0.7.6 # MIT License @@ -33 +32 @@ xattr>=0.4 # MIT -python-swiftclient>=2.2.0 # Apache-2.0 +python-swiftclient>=3.2.0 # Apache-2.0 @@ -37,2 +36,2 @@ os-api-ref>=1.0.0 # Apache-2.0 -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 -reno>=1.8.0 # Apache2 +oslosphinx>=4.7.0 # Apache-2.0 +reno>=1.8.0 # Apache-2.0

1 0

[freezer] freezer 4.0.0 (ocata)
by no-reply＠openstack.org 22 Feb '17

22 Feb '17

We eagerly announce the release of: freezer 4.0.0: The OpenStack Backup Restore and Disaster Recovery as a Service Platform This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/freezer/ For more details, please see below. Changes in freezer 3.0.0.0rc1..4.0.0 ------------------------------------ 6ca0811 Add ability to restore nova instance 0964bc7 Updated from global requirements 0df317c Block based incremental support - rsync a8538ff Fix scheduler_cron have a error get cron args use dict e8173f1 Enable release notes translation 2027b91 Updated from global requirements 57ecd50 Add .project and .pydevproject to .gitignore 7341328 Add backup_name to cindernative backup 638efd2 Remove default=None for config options 29f1264 Backup/restore cinder/nova to ssh 42605c0 fix a typo in FAQ.rst 888eb6b Replace --unlink-first with --overwrite eee345b Backup nova/cinder to local c66dd8f Change --mode description 95dbe59 Updated from global requirements b08c785 Implemet PIPESTATUS env var to handle error correctly. 35adab8 Restore by glance fail to remove temporary image 8101e2a Remove unused code from freezer-scheduler 16e68e3 Select the most recent backup previous to the date ef9397d Fix restore nova nova_network validation 16b6437 Fix print warning when scheduler starts 11f2485 Print the backup name to log file 7b67f01 Compare the two time using different format 2a871b0 Fix upload Engine metafile to swift. a897e53 Show team and repo badges on README da29fee Add pep8 check to freezer tests 8000e53 Import only modules rather than objects eb8d377 Replace LOG.warn with LOG.warning d98de1a Switch to python-freezerclient 3e60f8f Updated from global requirements 59862f3 Added py35 environment configuration to tox.ini 191c272 Typo fixing b5cb5ee Append newline after printing the action result e254dfa Change "Openstack" to "OpenStack" 7498a69 Fix manifest upload with ceph backend 6145de0 Change import order 5649b2c Updated from global requirements 7cf0799 failed to backup data to ssh storage 3390b9c freezer README.rst error about MySQL config file 2cd6ee0 Updated from global requirements 16ff90c Use LOG.error to record log when initializing LOG 61ee6a3 Clean imports in code afca2bd Fix removing temp file 12148b8 Updated from global requirements 8c08499 Added release notes for freezer-agent fd87a6a Refactoring devstack plugin and tests 982c7ef Refactoring Freezer Engines 0b1a62c [TrivialFix] Fix freezer typo of README.rst dcc76e0 fix job_schedule result and start/end timestamps d2334a6 Updated from global requirements 96e856a Create directory JOBS_DIR using the devstack script 7ae39c0 Updated from global requirements e4011c0 Fix job_schedule trigger cron e645c4c Fixing lvm snapshot mountpoint ab47e90 Support upper-constraints in tox.ini 65e38ed Updated from global requirements 73f6305 Report Backup/Restore/Admin job was successful or not. 1507df8 Added sync and nosync opts for making the sync subprocess optional 73f09ad Stop adding ServiceAvailable group option 7cb4765 TrivialFix: Remove cfg import unused 7a27163 Fixing max_retries 4941bda Fix docstrings in index.rst & README.rst c385a79 Remove deprecated code ee1b6a4 failed to stop freezer-scheduler 2071da2 Using assertEqual instead of assertEquals 95278ac Improve abort mechanism to support same functionality as stable/mitaka a884077 log info was written to pid file 7a3a2cc Use ConfigParser instead of SafeConfigParser in Python 3 09c35e1 Updated from global requirements 9e22f05 Correct syntax errors 689de3e incorrect use CONF.set_override f7d436e Correct freezer reraising of exception Diffstat (except docs and test files) ------------------------------------- .gitignore | 5 + FAQ.rst | 35 +- INSTALL.rst | 2 +- README.rst | 44 +- devstack/lib/freezer | 2 + devstack/settings | 1 + freezer/apiclient/__init__.py | 0 freezer/apiclient/actions.py | 80 -- freezer/apiclient/backups.py | 89 -- freezer/apiclient/client.py | 275 ------ freezer/apiclient/exceptions.py | 70 -- freezer/apiclient/jobs.py | 150 ---- freezer/apiclient/registration.py | 83 -- freezer/apiclient/sessions.py | 163 ---- freezer/common/config.py | 89 +- freezer/engine/engine.py | 43 +- freezer/engine/exceptions.py | 19 - freezer/engine/manager.py | 77 ++ freezer/engine/rsync/__init__.py | 0 freezer/engine/rsync/pyrsync.py | 159 ++++ freezer/engine/rsync/rsync.py | 942 +++++++++++++++++++++ freezer/engine/tar/tar.py | 169 ++++ freezer/engine/tar/tar_builders.py | 10 +- freezer/engine/tar/tar_engine.py | 168 ---- freezer/exceptions/__init__.py | 0 freezer/exceptions/engine.py | 31 + freezer/job.py | 41 +- freezer/main.py | 49 +- freezer/mode/mysql.py | 2 +- freezer/mode/sqlserver.py | 2 +- freezer/openstack/backup.py | 12 +- freezer/openstack/osclients.py | 48 +- freezer/openstack/restore.py | 145 +++- freezer/scheduler/arguments.py | 139 ++- freezer/scheduler/daemon.py | 16 +- freezer/scheduler/freezer_scheduler.py | 93 +- freezer/scheduler/scheduler_job.py | 66 +- freezer/scheduler/shell.py | 286 ------- freezer/scheduler/utils.py | 24 +- freezer/scheduler/win_service.py | 4 +- freezer/snapshot/lvm.py | 5 +- freezer/storage/base.py | 13 +- freezer/storage/fslike.py | 28 + freezer/storage/local.py | 2 + freezer/storage/multiple.py | 9 +- freezer/storage/physical.py | 3 +- freezer/storage/ssh.py | 39 +- freezer/storage/swift.py | 22 +- .../unit/apiclient/test_apiclient_exceptions.py | 25 - .../unit/apiclient/test_apiclient_registration.py | 111 --- .../unit/apiclient/test_apiclient_sessions.py | 223 ----- freezer/utils/checksum.py | 8 +- freezer/utils/compress.py | 110 +++ freezer/utils/config.py | 49 +- freezer/utils/crypt.py | 92 ++ freezer/utils/streaming.py | 6 +- freezer/utils/utils.py | 24 +- releasenotes/source/_static/.placeholder | 0 releasenotes/source/_templates/.placeholder | 0 releasenotes/source/conf.py | 265 ++++++ releasenotes/source/index.rst | 17 + releasenotes/source/mitaka.rst | 6 + releasenotes/source/newton.rst | 6 + releasenotes/source/unreleased.rst | 5 + requirements.txt | 25 +- setup.cfg | 1 - specs/python-freezerclient.rst | 2 +- specs/tenant_based_backups.rst | 2 +- test-requirements.txt | 7 +- tox.ini | 19 +- 111 files changed, 4086 insertions(+), 4022 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 116c7da..8fb8342 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,2 +6,2 @@ setuptools!=24.0.0,>=16.0 # PSF/ZPL -pbr>=1.6 # Apache-2.0 -python-swiftclient>=2.2.0 # Apache-2.0 +pbr>=1.8 # Apache-2.0 +python-swiftclient>=3.2.0 # Apache-2.0 @@ -9,4 +9,5 @@ python-cinderclient!=1.7.0,!=1.7.1,>=1.6.0 # Apache-2.0 -python-glanceclient!=2.4.0,>=2.3.0 # Apache-2.0 -python-novaclient!=2.33.0,>=2.29.0 # Apache-2.0 -python-openstackclient>=2.1.0 # Apache-2.0 -oslo.utils>=3.16.0 # Apache-2.0 +python-glanceclient>=2.5.0 # Apache-2.0 +python-novaclient!=7.0.0,>=6.0.0 # Apache-2.0 +python-openstackclient>=3.3.0 # Apache-2.0 +python-freezerclient>=1.0.0 # Apache-2.0 +oslo.utils>=3.18.0 # Apache-2.0 @@ -14,3 +15,3 @@ oslo.i18n>=2.1.0 # Apache-2.0 -oslo.log>=1.14.0 # Apache-2.0 -oslo.config>=3.14.0 # Apache-2.0 -keystoneauth1>=2.10.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 +oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 +keystoneauth1>=2.18.0 # Apache-2.0 @@ -18 +19,2 @@ keystoneauth1>=2.10.0 # Apache-2.0 -PyMySQL!=0.7.7,>=0.6.2 # MIT License +pycrypto>=2.6 # Public Domain +PyMySQL>=0.7.6 # MIT License @@ -26 +28,2 @@ apscheduler # MIT License -psutil<2.0.0,>=1.1.1 # BSD +psutil>=3.0.1 # BSD + diff --git a/test-requirements.txt b/test-requirements.txt index d2ff1cf..b2b5691 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking<0.11,>=0.10.2 -coverage>=3.6 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -10,2 +10,2 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0 @@ -13,0 +14 @@ testtools>=1.4.0 # MIT +reno>=1.8.0 # Apache-2.0

1 0