- Release-announce - lists.openstack.org

[oslo] tooz 1.57.3 (pike)
by no-reply＠openstack.org 04 Jul '17

04 Jul '17

We are pumped to announce the release of: tooz 1.57.3: Coordination library for distributed systems. This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/tooz Download the package from: https://pypi.python.org/pypi/tooz Please report issues through launchpad: https://bugs.launchpad.net/python-tooz/ For more details, please see below. Changes in tooz 1.57.2..1.57.3 ------------------------------ 965fb4d etcd3: skip ProcessPool based test 90a56b0 pgsql: fix self._conn.close() being called without connection 361406e test: leverage existing helper method in test_partitioner 15f6de6 coordination: remove double serialization of capabilities a0590a7 tests: fix missing .get() on some group operations 13e23e3 Mutualize executor code in a mixin class cc09f3f coordination: fix reversed fiels for __repr__ for events 413527c Fix docstring for group and member id Diffstat (except docs and test files) ------------------------------------- tooz/coordination.py | 62 +++++++++++++++++++++++++++-------------- tooz/drivers/consul.py | 2 +- tooz/drivers/etcd.py | 2 +- tooz/drivers/etcd3.py | 2 +- tooz/drivers/etcd3gw.py | 2 +- tooz/drivers/file.py | 12 +++----- tooz/drivers/ipc.py | 11 ++------ tooz/drivers/memcached.py | 22 +++++++-------- tooz/drivers/mysql.py | 2 +- tooz/drivers/pgsql.py | 5 ++-- tooz/drivers/redis.py | 24 ++++++++-------- tooz/drivers/zookeeper.py | 2 +- tooz/partitioner.py | 22 +++------------ 15 files changed, 98 insertions(+), 98 deletions(-)

1 0

[nova] os_vif 1.6.0 (pike)
by no-reply＠openstack.org 03 Jul '17

03 Jul '17

We are delighted to announce the release of: os_vif 1.6.0: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/os-vif Download the package from: https://pypi.python.org/pypi/os_vif Please report issues through launchpad: https://bugs.launchpad.net/os-vif For more details, please see below. Changes in os_vif 1.5.0..1.6.0 ------------------------------ 2a09ede hardware offload support for openvswitch aa9e198 Use versionedobjects PCIAddress field db9ef89 Fix typo VIFVIFHostDeviceDevType to VIFHostDeviceDevType Diffstat (except docs and test files) ------------------------------------- os_vif/objects/fields.py | 30 ++----- os_vif/objects/vif.py | 6 +- vif_plug_ovs/exception.py | 9 ++ vif_plug_ovs/linux_net.py | 116 +++++++++++++++++++++++++- vif_plug_ovs/ovs.py | 31 ++++++- 12 files changed, 480 insertions(+), 73 deletions(-)

1 0

[keystone] python-keystoneclient 3.12.0 (pike)
by no-reply＠openstack.org 03 Jul '17

03 Jul '17

We are gleeful to announce the release of: python-keystoneclient 3.12.0: Client Library for OpenStack Identity This release is part of the pike release series. The source is available from: https://git.openstack.org/cgit/openstack/python-keystoneclient Download the package from: https://pypi.python.org/pypi/python-keystoneclient Please report issues through launchpad: https://bugs.launchpad.net/python-keystoneclient For more details, please see below. 3.12.0 ^^^^^^ Keystone Client now supports endpoint group filtering. New Features ************ * Support for handling the relationship between endpoint groups and projects has been added. It is now possible to list, associate, check and disassociate endpoint groups that have access to a project. Changes in python-keystoneclient 3.11.0..3.12.0 ----------------------------------------------- 937f4d6 Updated from global requirements ef49844 Add support for specifying role ids when creating trust 2ab7f6d Updated from global requirements cfcf9ef Remove pbr warnerrors in favor of sphinx check 2cc2f10 Add support for endpoint group filtering 46b9e42 Replace six.iteritems() with .items() Diffstat (except docs and test files) ------------------------------------- keystoneclient/base.py | 6 +- keystoneclient/contrib/ec2/utils.py | 2 +- keystoneclient/discover.py | 3 +- keystoneclient/exceptions.py | 2 +- keystoneclient/session.py | 4 +- keystoneclient/v2_0/tenants.py | 5 +- keystoneclient/v3/contrib/endpoint_filter.py | 77 ++++++++++- keystoneclient/v3/contrib/trusts.py | 13 +- .../notes/bug-1641674-4862454115265e76.yaml | 8 ++ requirements.txt | 6 +- setup.cfg | 2 +- test-requirements.txt | 2 +- 30 files changed, 384 insertions(+), 57 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 17d9498..8f6e64e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,2 +8,2 @@ debtcollector>=1.2.0 # Apache-2.0 -keystoneauth1>=2.20.0 # Apache-2.0 -oslo.config>=4.0.0 # Apache-2.0 +keystoneauth1>=2.21.0 # Apache-2.0 +oslo.config!=4.3.0,!=4.4.0,>=4.0.0 # Apache-2.0 @@ -14 +14 @@ positional>=1.1.1 # Apache-2.0 -requests!=2.12.2,!=2.13.0,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 0069d45..a358611 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -18 +18 @@ requests-mock>=1.1 # Apache-2.0 -sphinx!=1.6.1,>=1.5.1 # BSD +sphinx>=1.6.2 # BSD

1 0

[shade] requestsexceptions 1.3.0 (pike)
by no-reply＠openstack.org 03 Jul '17

03 Jul '17

We are jazzed to announce the release of: requestsexceptions 1.3.0: Import exceptions from potentially bundled packages in requests. This release is part of the pike release series. Download the package from: https://pypi.python.org/pypi/requestsexceptions For more details, please see below. Changes in requestsexceptions 1.2.0..1.3.0 ------------------------------------------ d7ac0ff Updated from global requirements babf4d2 Remove runtime depend on pbr 6fc1f5e Update tox for OpenStack Diffstat (except docs and test files) ------------------------------------- requirements.txt | 1 - setup.cfg | 3 +-- setup.py | 13 +++++++++++-- test-requirements.txt | 5 ++++- tox.ini | 8 ++------ 5 files changed, 18 insertions(+), 12 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b990d70..e069914 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1,4 @@ -flake8>=2.2.4,<=2.4.1 +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0

1 0

[documentation] openstackdocstheme 1.12.0
by no-reply＠openstack.org 03 Jul '17

03 Jul '17

We are overjoyed to announce the release of: openstackdocstheme 1.12.0: OpenStack Docs Theme The source is available from: https://git.openstack.org/cgit/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ Please report issues through launchpad: https://launchpad.net/openstack-doc-tools For more details, please see below. 1.12.0 ^^^^^^ Adds ability to show up to the last five versions of the documentation, based on the available git tags for the repository. Use the theme variable, "show_other_versions" to chose to display the available versions in a dropdown menu. New Features ************ * Initial integration of storyboard.openstack.org for report a bug, set "bug_project" to the number of the project to use it. * Adds the option to configure the display of a version selector dropdown menu for the most recent five git tags used as release indicators for the repository. By default, in "theme.conf", the "show_other_versions" value is set to False. In "conf.py", set the theme variable, "html_theme_options" to include the parameter, "show_other_versions" as "True". For example: html_theme_options = {'show_other_versions': True} * Publishes a version dropdown menu in the "Updated" date row, on both mobile and desktop views, where the version list is imported from git tags on the repository. Bug Fixes ********* * If "bug_project" is not set, the "Report a bug" links are not displayed at all. Changes in openstackdocstheme 1.11.0..1.12.0 -------------------------------------------- 1d54ae6 Increase admonition.important contrast 1b63fd1 Adds docs for release versions dropdown menu 1aa3997 Adds list of versions in the "Updated" bar a7c7029 Update docs d6e6f20 Change name of checkbuild testenv to buildpdf for clarity a713646 Require bug_project setting c7b579e Adding octavia api-ref 9a6159a Minimal support for storyboard fd53ed4 move documentation from readme to sphinx tree 9e7e574 Updated from global requirements 32f6542 Updates "Contents" to "Project home page" to better match existing 6c906c0 Working on integrating options from oslosphinx theme Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + README.rst | 62 +----- ...configure_access_and_security_for_instances.rst | 200 -------------------- ...configure_access_and_security_for_instances.rst | 200 ++++++++++++++++++++ .../demo/figures/dashboard_admin_project_tab.png | Bin 0 -> 72705 bytes .../demo/section_dashboard_access_and_security.rst | 180 ++++++++++++++++++ .../section_dashboard_access_and_security.rst | 180 ------------------ openstackdocstheme/__init__.py | 33 ++++ openstackdocstheme/theme/openstackdocs/layout.html | 20 +- .../theme/openstackdocs/script_footer.html | 8 +- .../theme/openstackdocs/sidebartoc.html | 2 +- .../openstackdocs/sidebartoc_menu_apiref.html | 1 + .../theme/openstackdocs/static/css/combined.css | 44 ++++- .../theme/openstackdocs/static/js/docs.js | 8 +- openstackdocstheme/theme/openstackdocs/theme.conf | 1 + .../theme/openstackdocs/titlerow.html | 2 + .../notes/bug_project-d26160cfe5324694.yaml | 4 + .../notes/storyboard-5f67da8941aec6ae.yaml | 4 + .../notes/version-dropdown-1aa39974f524dd75.yaml | 23 +++ test-requirements.txt | 2 +- tox.ini | 8 +- 37 files changed, 1314 insertions(+), 1104 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 508a411..db88cd8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -sphinx!=1.6.1,>=1.5.1 # BSD +sphinx>=1.6.2 # BSD

1 0

[cinder] os-brick 1.14.0 (pike)
by no-reply＠openstack.org 29 Jun '17

29 Jun '17

We jubilantly announce the release of: os-brick 1.14.0: OpenStack Cinder brick library for managing local volume attaches This release is part of the pike release series. The source is available from: http://git.openstack.org/cgit/openstack/os-brick Download the package from: https://pypi.python.org/pypi/os-brick Please report issues through launchpad: http://bugs.launchpad.net/os-brick For more details, please see below. 1.14.0 ^^^^^^ New Features ************ * Support for setting the scan mode on the Open-iSCSI initiator. If installed iscsiadm supports this feature OS-Brick will set all it's new sessions to manual scan. * New parameters on *disconnect_volume* named *force* and *ignore_errors* can be used to let OS-Brick know that data loss is secondary to leaving a clean system with no leftover devices. If *force* is not set, or set to False, preventing data loss will take priority. Currently only iSCSI implements these new parameters. Deprecation Notes ***************** * The direct use of the encryption provider classes such as os_brick.encryptors.luks.LuksEncryptor continues to be deprecated and will now be blocked in the Queens release of os-brick. The use of out of tree encryption provider classes also continues to be deprecated and will also be blocked in the Queens release of os- brick. Bug Fixes ********* * On systems with scan mode support on open-iSCSI we'll no longer see unwanted devices polluting our system due to the automatic initiator scan or to AEN/AER messages from the backend. * iSCSI connect mechanism refactoring to be faster, more robust, more reliable. * iSCSI disconnect refactoring improves reliability, speed, and thoroughness on leaving a cleaner system after disconnection. Changes in os-brick 1.13.1..1.14.0 ---------------------------------- 32ab0d1 iSCSI multipath: improve logging on connect 1905398 Fix iSCSI cleanup issue when using discovery 455acbb Updated from global requirements f67d46c Add open-iscsi manual scan support 56c8665 Refactor iSCSI connect cf9eeb1 Fix slow test_connect_volume_device_not_valid test b838383 Add libssl to bindep 400ca5d Refactor iSCSI disconnect 7fb2877 Updated from global requirements 1ceeaba Force LUN_ID to an int b66b29b Fix supported connectors for Power platform 22f7500 Removed invalid comments in tox.ini [flake8] a14653b Stop ignoring H904 hacking rule in tox d9ac24d Stop ignoring H405 hacking rule in tox 211bda0 Stop ignoring E265 pycodestyle rule in tox 0039044 Change code to be more Pythonic a760c54 Prevent rbd map again if it's already mapped 6f03dd1 Check host device alive before multipath id discovery 0ff2c00 encryptors: Delay removal of legacy provider names Diffstat (except docs and test files) ------------------------------------- bindep.txt | 3 + os_brick/encryptors/__init__.py | 6 +- os_brick/encryptors/base.py | 2 + os_brick/encryptors/cryptsetup.py | 7 +- os_brick/encryptors/luks.py | 6 +- os_brick/exception.py | 71 +- os_brick/executor.py | 22 + os_brick/initiator/__init__.py | 1 - os_brick/initiator/connector.py | 13 +- os_brick/initiator/connectors/aoe.py | 3 +- os_brick/initiator/connectors/disco.py | 3 +- os_brick/initiator/connectors/drbd.py | 3 +- os_brick/initiator/connectors/fake.py | 3 +- os_brick/initiator/connectors/fibre_channel.py | 5 +- os_brick/initiator/connectors/hgst.py | 3 +- os_brick/initiator/connectors/huawei.py | 3 +- os_brick/initiator/connectors/iscsi.py | 1023 ++++++------ os_brick/initiator/connectors/local.py | 3 +- os_brick/initiator/connectors/rbd.py | 23 +- os_brick/initiator/connectors/remotefs.py | 3 +- os_brick/initiator/connectors/scaleio.py | 3 +- os_brick/initiator/connectors/sheepdog.py | 3 +- os_brick/initiator/connectors/vmware.py | 3 +- os_brick/initiator/connectors/vrtshyperscale.py | 3 +- os_brick/initiator/initiator_connector.py | 9 +- os_brick/initiator/linuxscsi.py | 284 +++- os_brick/initiator/windows/fibre_channel.py | 3 +- os_brick/initiator/windows/iscsi.py | 7 +- os_brick/initiator/windows/smbfs.py | 3 +- os_brick/privileged/rootwrap.py | 144 +- os_brick/remotefs/remotefs.py | 5 +- .../initiator/connectors/test_fibre_channel.py | 55 +- ...provider-name-deprecation-c0d07be3f0d92afd.yaml | 8 + ...iscsi_manual_scan_support-d64a1c3c8e1986b4.yaml | 11 + .../refactor_iscsi_connect-dfbb24305a954783.yaml | 5 + ...refactor_iscsi_disconnect-557f4173bc1ae4ed.yaml | 12 + requirements.txt | 6 +- test-requirements.txt | 2 +- tools/lintstack.py | 4 +- tox.ini | 19 +- 48 files changed, 2670 insertions(+), 1396 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 58a4d29..95ae4c2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7 +7 @@ Babel!=2.4.0,>=2.3.4 # BSD -eventlet!=0.18.3,<0.21.0,>=0.18.2 # MIT +eventlet!=0.18.3,!=0.20.1,<0.21.0,>=0.18.2 # MIT @@ -11 +11 @@ oslo.serialization>=1.10.0 # Apache-2.0 -oslo.i18n>=2.1.0 # Apache-2.0 +oslo.i18n!=3.15.2,>=2.1.0 # Apache-2.0 @@ -15 +15 @@ oslo.utils>=3.20.0 # Apache-2.0 -requests!=2.12.2,!=2.13.0,>=2.10.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index eef55e9..2cedacd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0

1 0

[winstackers] os-win 1.4.2 (ocata)
by no-reply＠openstack.org 29 Jun '17

29 Jun '17

We are ecstatic to announce the release of: os-win 1.4.2: Windows / Hyper-V library for OpenStack projects. This release is part of the ocata stable release series. The source is available from: http://git.openstack.org/cgit/openstack/os-win Download the package from: https://pypi.python.org/pypi/os-win Please report issues through launchpad: http://bugs.launchpad.net/os-win For more details, please see below. Changes in os-win 1.4.1..1.4.2 ------------------------------ 938a99a Fixes cached old WMI service objects issue eaef62b raises exceptions.NotFound instead of x_wmi: Not Found 9ee105f Updated from global requirements 75a9605 Add cluster vm owner change listener dea4a09 networkutils: specializes the exception raised by _get_vnic_settings e5507fb Fix share local address check 8277c74 Change intermediary vm state handling 56ebb09 Synchronize iscsi_target_utils 1c52396 Uses _compat_conn where WMI objects need to be updated or added 22087fb py35: fixes exception.message reference issues dfdde47 networkutils: fixes update_cache c202f8e Updated from global requirements 2bec773 Ignores "Not found" jobs when stopping jobs Diffstat (except docs and test files) ------------------------------------- os_win/_utils.py | 32 ++++++++++++ os_win/constants.py | 2 + os_win/exceptions.py | 9 +++- .../unit/utils/compute/test_livemigrationutils.py | 14 ++++- .../unit/utils/compute/test_migrationutils.py | 2 +- os_win/utils/baseutils.py | 61 ++++++++++++++++++++-- os_win/utils/compute/clusterutils.py | 31 +++++++++-- os_win/utils/compute/livemigrationutils.py | 5 +- os_win/utils/compute/migrationutils.py | 4 +- os_win/utils/compute/vmutils.py | 6 +-- os_win/utils/jobutils.py | 29 ++++++---- os_win/utils/network/networkutils.py | 12 ++--- os_win/utils/storage/smbutils.py | 2 + os_win/utils/storage/target/iscsi_target_utils.py | 2 + os_win/utils/win32utils.py | 9 +--- 24 files changed, 337 insertions(+), 68 deletions(-)

1 0

[winstackers] os-win 1.2.2 (newton)
by no-reply＠openstack.org 29 Jun '17

29 Jun '17

We are chuffed to announce the release of: os-win 1.2.2: Windows / Hyper-V library for OpenStack projects. This release is part of the newton stable release series. The source is available from: http://git.openstack.org/cgit/openstack/os-win Download the package from: https://pypi.python.org/pypi/os-win Please report issues through launchpad: http://bugs.launchpad.net/os-win For more details, please see below. Changes in os-win 1.2.1..1.2.2 ------------------------------ 4eb64bc networkutils: specializes the exception raised by _get_vnic_settings 503abb5 Uses _compat_conn where WMI objects need to be updated or added 0a0f27e py35: fixes exception.message reference issues 9c32b14 pathutils: Adds retry decorator to rmdir 69301bb Fix share local address check 7e8aca1 Change intermediary vm state handling 3ad8334 networkutils: fixes update_cache 0f0572f Ignores "Not found" jobs when stopping jobs a22eadb FibreChannel: ignore unsupported HBA adapters 04ceaa3 Avoid opening parents when fetching VHD info bf86a8d Fix iscsi volumes not being attached Diffstat (except docs and test files) ------------------------------------- os_win/exceptions.py | 19 ++++++++--- .../utils/storage/initiator/test_iscsi_utils.py | 8 ++--- os_win/utils/baseutils.py | 3 ++ os_win/utils/compute/livemigrationutils.py | 5 +-- os_win/utils/compute/migrationutils.py | 4 +-- os_win/utils/compute/vmutils.py | 3 +- os_win/utils/jobutils.py | 26 +++++++++------ os_win/utils/network/networkutils.py | 9 +++--- os_win/utils/pathutils.py | 11 ++++++- os_win/utils/storage/initiator/fc_utils.py | 11 ++++++- os_win/utils/storage/initiator/iscsi_utils.py | 5 +-- os_win/utils/storage/smbutils.py | 2 ++ os_win/utils/storage/virtdisk/vhdutils.py | 6 +++- 23 files changed, 194 insertions(+), 46 deletions(-)

1 0

[tacker] tacker-horizon 0.9.0 (pike)
by no-reply＠openstack.org 29 Jun '17

29 Jun '17

We exuberantly announce the release of: tacker-horizon 0.9.0: Tacker extension for Horizon This release is part of the pike release series. Download the package from: https://tarballs.openstack.org/tacker-horizon/ For more details, please see below. Changes in tacker-horizon 0.7.0..0.9.0 -------------------------------------- 9ccbaba Updated from global requirements dbdee9c Updated from global requirements cfbb7e0 Updated from global requirements 59341a3 Change show_vnfd to show_nsd to fix the NSD detail error a0e464a Updated from global requirements e000118 Updated from global requirements 915d113 Switch to oslo_log 29cfc1a Updated from global requirements bfecb89 sync test-requirements with global requirements 01d1015 Updated from global requirements 0f929f7 Add python-tackerclient in requirements.txt 631c6b6 move api call to outside the for loop b4f2b49 tacker-horizon doesn't show detailed VNF info Diffstat (except docs and test files) ------------------------------------- requirements.txt | 4 +- setup.py | 2 +- tacker_horizon/openstack_dashboard/api/tacker.py | 5 +- .../dashboards/nfv/nsmanager/forms.py | 3 +- .../dashboards/nfv/nsmanager/tabs.py | 4 -- .../dashboards/nfv/nsmanager/views.py | 3 +- .../dashboards/nfv/vim/forms.py | 4 -- .../dashboards/nfv/vnffgmanager/forms.py | 6 +- .../dashboards/nfv/vnffgmanager/views.py | 2 +- .../dashboards/nfv/vnfmanager/forms.py | 2 +- .../dashboards/nfv/vnfmanager/tabs.py | 4 -- .../templates/vnfmanager/vdu_details.html | 75 +++++++++++++++------- .../dashboards/nfv/vnfmanager/views.py | 2 +- test-requirements.txt | 8 +-- 14 files changed, 70 insertions(+), 54 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 938cfd0..918df08 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10,3 @@ -pbr>=1.8 # Apache-2.0 +oslo.log>=3.22.0 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 +python-tackerclient>=0.8.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index bc9b12f..45919dd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ -hacking<0.11,>=0.10.0 +hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 @@ -12 +12 @@ hacking<0.11,>=0.10.0 -coverage>=4.0 # Apache-2.0 +coverage!=4.4,>=4.0 # Apache-2.0 @@ -23 +23 @@ oslosphinx>=4.7.0 # Apache-2.0 -reno>=1.8.0 # Apache-2.0 +reno!=2.3.1,>=1.8.0 # Apache-2.0 @@ -25 +25 @@ selenium>=2.50.1 # Apache-2.0 -sphinx>=1.5.1 # BSD +sphinx!=1.6.1,>=1.5.1 # BSD

1 0

[tripleo] puppet-tripleo 6.5.0 (ocata)
by no-reply＠openstack.org 28 Jun '17

28 Jun '17

We are jazzed to announce the release of: puppet-tripleo 6.5.0: Puppet module for OpenStack TripleO This release is part of the ocata stable release series. Download the package from: https://tarballs.openstack.org/puppet-tripleo/ For more details, please see below. 6.5.0 ^^^^^ New Features * Restrict nova migration ssh tunnel * The ssh authorized_keys file is only writeable by root. * Creates a new user for migration instead of using root/nova. * Disables SSH forwarding for this user. * Restricts the networks that this user can connect from. * Uses an ssh wrapper command to whitelist the commands that this user can run over ssh. Adds new parameter "tripleo::profile::base::nova::migration_ssh_localaddrs" to specify which incoming IPs are allow for SSH tunnel connections. Changes in puppet-tripleo 6.4.0..6.5.0 -------------------------------------- c6de6cf Release 6.5.0 (ocata) bcdea36 Move gnocchi upgrade and api to step 4 8779d1a Cover gnocchi api step 4 and 5 ff58a86 Dell SC: Add secondary DSM support 265cb21 Add support for autofencing to Pacemaker Remote. 7ea37ea Add conditional for setting authlogin_nsswitch_use_ldap selboolean fd20b30 Restrict nova migration ssh tunnel e4a2936 make release note a list of strings be62099 Dell SC: Add exclude_domain_ip option d46db3b Add support for Cinder "NAS secure" driver params 220fa8d Update gitignore not to exclude fixture hieradata 72392a3 Use verify_on_create when creating pacemaker remote resources 7e1e609 IPv6 VIP addresses need to be /128 Diffstat (except docs and test files) ------------------------------------- .gitignore | 3 +- manifests/pacemaker/haproxy_with_vip.pp | 20 ++- manifests/profile/base/cinder/volume/dellsc.pp | 23 +-- manifests/profile/base/cinder/volume/netapp.pp | 2 + manifests/profile/base/cinder/volume/nfs.pp | 33 +++- manifests/profile/base/gnocchi/api.pp | 36 +++-- manifests/profile/base/keystone.pp | 6 + manifests/profile/base/nova.pp | 134 ++++++++++------ manifests/profile/base/pacemaker.pp | 1 + manifests/profile/base/pacemaker_remote.pp | 27 ++++ metadata.json | 2 +- ...e-dhcp-agents-per-network-3089c5e7b15f8b7b.yaml | 5 +- .../cold_migration_security-1543136408c76459.yaml | 10 ++ releasenotes/source/conf.py | 4 +- .../tripleo_profile_base_gnocchi_api_spec.rb | 101 +++++++----- spec/classes/tripleo_profile_base_nova_spec.rb | 169 +++++++++++++++++++-- spec/fixtures/hieradata/default.yaml | 3 + 17 files changed, 449 insertions(+), 130 deletions(-)

1 0