- Release-announce - lists.openstack.org

tripleo-common 12.4.5 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are stoked to announce the release of: tripleo-common 12.4.5: A common library for TripleO workflows. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 12.4.4..12.4.5 ---------------------------------------- 833ef486 Fix config parsing in memcached healthcheck 9e22f65e Fix site-packages in horizon's extend_start.sh 83e63e44 Add an internal index to network_data 813a7382 Don't install dhcp-all-interfaces for redhat 8 onwards 8a3a3194 Add host_vars to define tasks executed before network configurations 314487b9 Fix neutron driver detection for containers params 654dc085 healthcheck_port: drop lsof in favor of awk/find Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 +- healthcheck/common.sh | 40 ++++++++++++++++------ healthcheck/memcached | 18 ++++++++-- image-yaml/overcloud-hardened-images-centos7.yaml | 1 + image-yaml/overcloud-hardened-images-python3.yaml | 1 - image-yaml/overcloud-hardened-images-rhel7.yaml | 2 ++ .../overcloud-hardened-images-uefi-centos7.yaml | 1 + .../overcloud-hardened-images-uefi-python3.yaml | 1 - .../overcloud-hardened-images-uefi-rhel7.yaml | 2 ++ image-yaml/overcloud-hardened-images-uefi.yaml | 1 - image-yaml/overcloud-hardened-images.yaml | 1 - image-yaml/overcloud-images-centos7.yaml | 1 + image-yaml/overcloud-images-ceph.yaml | 1 - image-yaml/overcloud-images-python3.yaml | 1 - image-yaml/overcloud-images-rhel7.yaml | 2 ++ image-yaml/overcloud-images.yaml | 1 - image-yaml/overcloud-realtime-compute-centos7.yaml | 1 + image-yaml/overcloud-realtime-compute-python3.yaml | 1 - image-yaml/overcloud-realtime-compute-rhel7.yaml | 2 ++ image-yaml/overcloud-realtime-compute.yaml | 1 - tripleo_common/image/kolla_builder.py | 12 ++++--- tripleo_common/templates/host_var_server.j2 | 6 ++++ .../utils/data/host_vars/overcloud-controller-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-0 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-1 | 2 ++ .../utils/data/host_vars/overcloud-novacompute-2 | 2 ++ tripleo_common/utils/config.py | 9 +++++ tripleo_common/utils/template.py | 4 +++ 28 files changed, 93 insertions(+), 28 deletions(-)

1 0

os-collect-config 11.0.4 (ussuri)
by no-reply＠openstack.org 14 Jun '21

14 Jun '21

We are ecstatic to announce the release of: os-collect-config 11.0.4: Collect and cache metadata, run hooks on changes. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ Please report issues through: https://bugs.launchpad.net/os-collect-config/+bugs For more details, please see below. Changes in os-collect-config 11.0.3..11.0.4 ------------------------------------------- 1bdb361 Update TOX_CONSTRAINTS_FILE for stable/ussuri 385ad80 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-)

1 0

tripleo-heat-templates 14.1.2 (wallaby)
by no-reply＠openstack.org 11 Jun '21

11 Jun '21

We eagerly announce the release of: tripleo-heat-templates 14.1.2: Heat templates for deploying OpenStack with OpenStack. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 14.1.2 ^^^^^^ New Features * The parameters CephHciOsdCount and CephHciOsdType were added in order to support the derive parameters feature for hyperconverged deployments when using cephadm. Changes in tripleo-heat-templates 14.1.1..14.1.2 ------------------------------------------------ 3ed600963 Pass custom CephConfigPath parameter to ceph-nfs role b2a8641a5 set ganesha idmap.conf file path and overrides 74e3884b4 Fix cinder's cephx keyring file permissions aaf57f21d Allow customizing podman's [engine]/events_logger ef96bfd19 Include the standalone ganesha tasks when ceph is external 0efd6f067 Disable tunnelled migration f006d0156 Added the posibility of skipping the NFS ping test on the rear installation 218f5f31a Add environment for external network VIP e15bfa6d8 Add OVNCMSOptions to Controller and Networker roles 3030fce6f Remove Ceph cluster replica and PG num from low-memory-usage.yaml 0b26b18e0 Skip cephadm playbook when there is no mon or nfs group 42f59769f Expose the monitoring_stack network to cephadm 1f7de63e5 Use collection FQCN for podman modules 0592cb32b Fix network_cidrs when ManageNetworks: false 8775a8bbe Move ceph_admin_extra_vars logic to tripleo-ansible d6c2740a8 Make clustercheck service accessible over socat acd41a608 Add neutron port tag hint for role name e86165354 Introduce CephHciOsdCount and CephHciOsdType 326452e58 Re-add NovaVncProxyNetwork to service_net_map.j2.yaml 36c16a189 Don't add external tasks for roles with zero count f17db7153 Add openstack-tox-tht to the gate bc232904a Fix RoleParameters in tuned-baremetal-ansible.yaml d172a7b58 Update .gitreview for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ci/environments/scenario001-standalone.yaml | 1 + common/deploy-steps.j2 | 25 ++++++++--- deployed-server/deployed-neutron-port.yaml | 5 +++ .../backup-and-restore/rear-baremetal-ansible.yaml | 7 +++ deployment/ceph-ansible/ceph-nfs.yaml | 9 ++++ deployment/cephadm/ceph-base.yaml | 24 ++++------- deployment/cephadm/ceph-client.yaml | 12 ++++++ deployment/cephadm/ceph-grafana.yaml | 5 +++ deployment/cephadm/ceph-nfs.yaml | 13 ++++++ deployment/cephadm/ceph-osd.yaml | 32 ++++++++++++++ deployment/cinder/cinder-api-container-puppet.yaml | 2 +- .../cinder/cinder-common-container-puppet.yaml | 50 +++++++++++++--------- deployment/database/mysql-container-puppet.yaml | 2 +- deployment/keystone/keystone-container-puppet.yaml | 2 +- deployment/nova/nova-api-container-puppet.yaml | 2 +- deployment/nova/nova-compute-container-puppet.yaml | 30 ++----------- .../nova/nova-conductor-container-puppet.yaml | 2 +- deployment/nova/nova-libvirt-container-puppet.yaml | 2 +- .../nova/nova-metadata-container-puppet.yaml | 2 +- .../nova-migration-target-container-puppet.yaml | 2 +- .../nova/nova-scheduler-container-puppet.yaml | 2 +- .../nova/nova-vnc-proxy-container-puppet.yaml | 2 +- .../pacemaker/clustercheck-container-puppet.yaml | 19 +++++++- deployment/podman/podman-baremetal-ansible.yaml | 11 ++++- deployment/tuned/tuned-baremetal-ansible.yaml | 19 +++++++- environments/external-network-vip.yaml | 5 +++ environments/low-memory-usage.yaml | 4 -- environments/manila-cephfsganesha-config.yaml | 4 ++ network/network.j2 | 24 +++-------- network/ports/deployed_port.j2 | 5 +++ network/ports/noop.yaml | 5 +++ network/ports/port.j2 | 9 ++++ network/ports/port_from_pool.j2 | 5 +++ network/service_net_map.j2.yaml | 1 + puppet/role.role.j2.yaml | 1 + .../ceph-hci-osd-count-type-241614543ef7cc58.yaml | 6 +++ roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 2 + roles/ControllerSriov.yaml | 2 + roles/ControllerStorageDashboard.yaml | 2 + roles/ControllerStorageNfs.yaml | 2 + roles/Networker.yaml | 2 + roles/NetworkerSriov.yaml | 2 + roles_data.yaml | 2 + zuul.d/layout.yaml | 1 + 49 files changed, 270 insertions(+), 105 deletions(-)

1 0

puppet-ovn 17.5.0 (victoria)
by no-reply＠openstack.org 11 Jun '21

11 Jun '21

We are jazzed to announce the release of: puppet-ovn 17.5.0: Puppet module for OVN This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/puppet-ovn Download the package from: https://tarballs.openstack.org/puppet-ovn/ Please report issues through: https://bugs.launchpad.net/puppet-ovn/+bugs For more details, please see below. Changes in puppet-ovn 17.4.0..17.5.0 ------------------------------------ 406ecb3 Prepare a new release for victoria 490f7e5 Set external_ids:ovn-chassis-mac-mappings 854e7a6 Update TOX_CONSTRAINTS_FILE for stable/victoria d54e95e Update .gitreview for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/controller.pp | 31 +++++++++++++++++++++- metadata.json | 2 +- .../ovn_chassis_mac_map-8ea1fa442ca20522.yaml | 6 +++++ spec/classes/ovn_controller_spec.rb | 21 +++++++++++++++ tox.ini | 2 +- 6 files changed, 60 insertions(+), 3 deletions(-)

1 0

oslo.limit 1.4.0 (xena)
by no-reply＠openstack.org 10 Jun '21

10 Jun '21

We are chuffed to announce the release of: oslo.limit 1.4.0: Limit enforcement library to assist with quota calculation. This release is part of the xena release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. Changes in oslo.limit 1.3.0..1.4.0 ---------------------------------- caa75c1 Add a test fixture 1175b0f Add Enforcer.calculate_usage() efc26ae Upgrade the pre-commit-hooks version 52a7eaa Add Python3 xena unit tests 9ebe3c6 Update master for stable/wallaby 7f16772 Fix requirements issues fc270af Use TOX_CONSTRAINTS_FILE 6115a3e remove unicode from code e4583b6 add py38 matedata Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 10 +++-- .zuul.yaml | 3 +- lower-constraints.txt | 8 ---- oslo_limit/fixture.py | 75 ++++++++++++++++++++++++++++++++ oslo_limit/limit.py | 64 ++++++++++++++++++++++++++-- releasenotes/source/conf.py | 16 +++---- releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 +++ setup.cfg | 1 + test-requirements.txt | 1 + tox.ini | 8 +--- 18 files changed, 365 insertions(+), 33 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index ecb5e3a..b9fffd4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,0 +5 @@ +fixtures>=3.0.0 # Apache-2.0/BSD

1 0

osprofiler 3.4.1
by no-reply＠openstack.org 09 Jun '21

09 Jun '21

We are pleased to announce the release of: osprofiler 3.4.1: OpenStack Profiler Library The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler For more details, please see below. Changes in osprofiler 3.4.0..3.4.1 ---------------------------------- 951efdc Uncap PrettyTable d153b99 Move flake8 as a pre-commit local target. bcca5bd Dropping lower constraints testing 42d5819 Use py3 as the default runtime for tox 2794b98 Adding pre-commit 22d6bff ignore reno generated artifacts d0d65fd Add Python3 wallaby unit tests ba16314 Update master for stable/victoria Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + .pre-commit-config.yaml | 39 +++++++ .zuul.yaml | 3 +- releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 6 + requirements.txt | 2 +- test-requirements.txt | 2 + tools/lint.py | 4 +- tools/patch_tox_venv.py | 3 +- tox.ini | 5 +- 12 files changed, 96 insertions(+), 168 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 7719bc4..de2d919 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ oslo.utils>=3.33.0 # Apache-2.0 -PrettyTable<0.8,>=0.7.2 # BSD +PrettyTable>=0.7.2 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index a227fe4..a2ca153 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -27,0 +28,2 @@ jaeger-client>=3.8.0 # Apache-2.0 + +pre-commit>=2.6.0 # MIT

1 0

python-neutronclient 7.5.0 (xena)
by no-reply＠openstack.org 09 Jun '21

09 Jun '21

We are thrilled to announce the release of: python-neutronclient 7.5.0: CLI and Client Library for OpenStack Networking This release is part of the xena release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. 7.5.0 ^^^^^ Deprecation Notes * "neutron" CLI will be removed in 'Z' release. While it has been marked as deprecated for removal for long, all features in "neutron" CLI have been supported in "openstack" CLI (OpenStackClient) as of Xena release and the neutron team plans to remove it in 'Z' release. Consider using "openstack" CLI and Mapping Guide in the OSC documentation would help you. Changes in python-neutronclient 7.4.0..7.5.0 -------------------------------------------- ae39756 Add a release note on deprecation for removal of neutron CLI 76dd26f Set when deprecated neutron client CLI will be removed 439e290 Skip metering functional tests when metering extension is not enabled Diffstat (except docs and test files) ------------------------------------- neutronclient/shell.py | 2 +- .../notes/neutron-cli-deprecation-398823c87270a296.yaml | 10 ++++++++++ 4 files changed, 18 insertions(+), 4 deletions(-)

1 0

tripleo-common 15.2.1 (wallaby)
by no-reply＠openstack.org 08 Jun '21

08 Jun '21

We are psyched to announce the release of: tripleo-common 15.2.1: A common library for TripleO workflows. This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/tripleo-common Download the package from: https://tarballs.openstack.org/tripleo-common/ Please report issues through: https://bugs.launchpad.net/tripleo-common/+bugs For more details, please see below. Changes in tripleo-common 15.2.0..15.2.1 ---------------------------------------- acead380 Remove xinetd from the mariadb container 10ea6944 Fix config parsing in memcached healthcheck 41976688 Make the clustercheck healthcheck work with socat 5c5b08b4 Ignore OVN Bridge MAC net for inventory generation 983377ba Disable neutron inventory src if no ctlplane ports e25e523d Ignore non host ports by tag filtering b81b1ea1 Fix site-packages in horizon's extend_start.sh 99ec07c5 Strip final dot of the fqdn hostname and dnsname 0a7cfe39 Skip port if it's on the OVN MAC Net Diffstat (except docs and test files) ------------------------------------- container-images/kolla/horizon/extend_start.sh | 3 +- container-images/tcib/base/mariadb/mariadb.yaml | 2 +- healthcheck/mariadb | 19 ++++++++--- healthcheck/memcached | 18 ++++++++-- tripleo_common/constants.py | 4 +++ tripleo_common/inventory.py | 39 ++++++++++++++++++++++ 8 files changed, 100 insertions(+), 31 deletions(-)

1 0

python-tripleoclient 16.2.1 (wallaby)
by no-reply＠openstack.org 08 Jun '21

08 Jun '21

We are glad to announce the release of: python-tripleoclient 16.2.1: TripleO client This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/python-tripleoclient Download the package from: https://tarballs.openstack.org/python-tripleoclient/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in python-tripleoclient 16.2.0..16.2.1 ---------------------------------------------- 2663a5f2 BnR Typo missing some spaces between words on the command help 0886ecd1 Use Validations libs Client for main validation entry point 234a41b7 Ephemeral Heat: Add a --refresh option to external update run 4ed3d8b4 Ephemeral Heat unit tests b90a7196 Don't run containers in interactive mode fea5819c BnR added error msg in case there is no inventory 2006c0ff Auto OVN bridge mac mappings for standalone 516b39d6 Wait for Heat message queues Diffstat (except docs and test files) ------------------------------------- requirements.txt | 2 +- templates/ephemeral-heat/heat.conf.j2 | 1 + test-requirements.txt | 1 + tripleoclient/exceptions.py | 4 + tripleoclient/heat_launcher.py | 233 +++++--- .../test_overcloud_external_update.py | 36 ++ tripleoclient/utils.py | 5 +- tripleoclient/v1/overcloud_backup.py | 12 +- tripleoclient/v1/overcloud_deploy.py | 2 +- tripleoclient/v1/overcloud_external_update.py | 94 ++-- tripleoclient/v1/tripleo_deploy.py | 15 + tripleoclient/v1/tripleo_launch_heat.py | 15 +- tripleoclient/v1/tripleo_validator.py | 508 ++--------------- tripleoclient/v1/undercloud_backup.py | 20 +- tripleoclient/workflows/deployment.py | 14 +- 20 files changed, 1193 insertions(+), 635 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4cb0a298..9c80b5a5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -19 +19 @@ ansible-runner>=1.4.5 # Apache 2.0 -validations-libs>=1.0.0 +validations-libs>=1.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 0506d342..ecce57ad 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12 @@ testscenarios>=0.4 # Apache-2.0/BSD +validations-libs>=1.0.4 # Apache-2.0 \ No newline at end of file

1 0

keystone 16.0.2 (train)
by no-reply＠openstack.org 07 Jun '21

07 Jun '21

We contentedly announce the release of: keystone 16.0.2: OpenStack Identity This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/keystone/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. 16.0.2 ^^^^^^ Security Issues *************** * [bug 1901207 (https://bugs.launchpad.net/keystone/+bug/1901207) Policy enforcement for application credentials has been updated to protect against invalid ownership checks resulting in unauthorized users being able to get and delete application credentials for other users. Bug Fixes ********* * [bug 1688137 (https://bugs.launchpad.net/keystone/+bug/1688137) Fixed the AccountLocked exception being shown to the end user since it provides some information that could be exploited by a malicious user. The end user will now see Unauthorized instead of AccountLocked, preventing user info oracle exploitation. * [bug 1878938 (https://bugs.launchpad.net/keystone/+bug/1878938) Previously when a user used to have system role assignment and tries to delete the same role, the system role assignments still existed in system_assignment table. This causes keystone to return *HTTP 404 Not Found* errors when listing role assignments with names (e.g., *--names* or *?include_names*). If you are affected by this bug, you must remove stale role assignments manually. The following is an example SQL statement you can use to fix the issue, but you should verify it's applicability to your deployment's SQL implementation and version. SQL: * delete from system_assignment where role_id not in (select id from role); * [bug 1885753 (https://bugs.launchpad.net/keystone/+bug/1885753) Keystone's SQL identity backend now retries update user requests to safely handle stale data when two clients update a user at the same time. * [bug 1889936 (https://bugs.launchpad.net/keystone/+bug/1889936) Properly decode octet strings, or byte arrays, returned from LDAP. * [bug 1896125 (https://bugs.launchpad.net/keystone/+bug/1896125) Introduced more robust connection handling for asynchronous LDAP requests to address memory leaks fetching data from LDAP backends with low page sizes. * [bug 1901654 (https://bugs.launchpad.net/keystone/+bug/1901654) Previously, generate_public_ID() in sha256.py assumed the passed arguments is str data type. However, python-ldap 3.0 or later returns bytes data type for attribute values except fields of distinguished names, relative distinguished names, attribute names, queries. If keystone running on Python3 is integrated with LDAP and the LDAP server has local_id variable in its attribute, user login operations will fail due to the assumption and modifiation of python-ldap. By this fix, generate_public_ID() properly handles bytes data type in the parameter. Changes in keystone 16.0.1..16.0.2 ---------------------------------- 1b573ae7d Hide AccountLocked exception from end users 328cf33aa Retry update_user when sqlalchemy raises StaleDataErrors f10ff1c9a Support bytes type in generate_public_ID() 9c879d46b Use app cred user ID in policy enforcement b49a465ed Drop lower-constraints job 9beb3a580 Properly handle octet (byte) strings when converting LDAP responses 105f95795 Implement more robust connection handling for asynchronous LDAP calls e8b477847 Delete system role assignments from system_assignment table 28d2dd19e Make opensuse jobs nonvoting fb7d54543 Fix lower-constraint for PyMySQL 13f965e1f fix link in release note of bug/1794527 247227f3f Change time faking for totp test 7eeb144b7 Stop explicitly requiring pycodestyle 184bb8289 Revert "Temporarily disable k2k tests on train and stein" 93f548a72 Refactor some ldap code to implement TODOs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - keystone/api/users.py | 47 +++++- keystone/assignment/backends/sql.py | 5 + keystone/identity/backends/ldap/common.py | 161 +++++++++++++-------- keystone/identity/backends/sql.py | 8 + keystone/identity/id_generators/sha256.py | 10 +- keystone/notifications.py | 2 + .../protection/v3/test_application_credential.py | 66 +++++++++ .../unit/identity/backends/test_ldap_common.py | 14 ++ lower-constraints.txt | 8 +- .../notes/bug-1688137-e4203c9a728690a7.yaml | 8 + .../notes/bug-1794527-866b1caff67977f3.yaml | 2 +- .../notes/bug-1878938-70ee2af6fdf66004.yaml | 16 ++ .../notes/bug-1885753-51df25f3ff1d9ae8.yaml | 6 + .../notes/bug-1889936-78d6853b5212b8f1.yaml | 5 + .../notes/bug-1896125-b17a4d12730fe493.yaml | 7 + .../notes/bug-1901207-13762f85b8a04481.yaml | 7 + .../notes/bug-1901654-69b9f35d11cd0c75.yaml | 10 ++ setup.cfg | 3 +- test-requirements.txt | 1 - 27 files changed, 397 insertions(+), 85 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a86a1fa44..6cdc34d31 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +6,0 @@ pep257==0.7.0 # MIT License -pycodestyle>=2.0.0 # MIT License

1 0