- Release-announce - lists.openstack.org

kolla 11.3.0 (victoria)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We are thrilled to announce the release of: kolla 11.3.0: Kolla OpenStack Deployment This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 11.3.0 ^^^^^^ New Features ************ * Adds Cyrus SASL packages necessary for the DIGEST-MD5 and SCRAM- SHA-256 mechanisms. These can be used for libvirt SASL authentication. LP#1964013 * Quiet mode (enabled with "--quiet" argument) can be combined with " --logs-dir" option now. Console output will be quiet as expected while building output will be stored in separate log files. Critical Issues *************** * CentOS Linux 8 (non-Stream) support has been dropped, since repositories have been removed from CentOS mirrors - see announcement (https://www.centos.org/centos-linux-eol/) Security Issues *************** * Adds mitigation for Apache Log4j 2 Remote Code Execution (RCE) vulnerabilities CVE-2021-44228 and CVE-2021-45046 to Apache Storm. Bug Fixes ********* * Fixes an issue with Ironic deployments using UEFI and iPXE, where the default UEFI iPXE bootloader in Ironic was not available in the TFTP server. This affects all Kolla releases on CentOS, and Xena on Debian/Ubuntu. LP#1959203 * Installs "glusterfs-client" in Debian and Ubuntu "manila-share" images to support GlusterFS across supported distributions. LP#1964140 * Fixes an issue when older version of Python OpenvSwitch bindings package was used, than the running OpenvSwitch code. LP#1961874 * Fix AArch64 ubuntu ironic-python-agent images UEFI PXE booting failure. Also fix x86_64 lacking of GRUB efi files issue. LP#1879265 * Fixes disabling the use of the "curlrc" configuration file in "healthcheck_curl". LP#1967272 * Fixes an issue seen when using Jinja2 3.1.0. * Fixes an issue with missing Magnum Keystone auth default policy. LP#1957159 * Fixes set_configs.py configuring same permission for directories and files, causing directories lacking execute permission if not set for files. Changes in kolla 11.2.1..11.3.0 ------------------------------- a83002b3f enable logging to file for quiet mode 238c56f53 Fix disabling of curlrc in healthcheck_curl a7ff9f6c0 elasticsearch: install Java first on CentOS too ca4952780 libvirt: add Cyrus SASL packages for DIGEST-MD5 1ea5c73d6 Install glusterfs-client in Debuntu 61f1705bc Use python3-openvswitch from distro 9b1ff36ac Ensure set_configs sets execute bit on directories 674aede28 erlang: use packages from Erlang Solutions on AArch64 545fed783 collectd: pcie-errors is x86-64 only now 07a4e434d base: Drop usage of Ceph Nautilus from RDO 77d683caa ironic: Fix UEFI & iPXE bootloader filenames 07f519996 Drop CentOS Linux 8 image builds 02f5222b0 Use distro provided GRUB efi 56f494230 openstack-base: drop anyjson 891396f7b Mitigate two Log4j vulnerabilities in Apache Storm ca6951744 magnum: fix issue with keystone auth default policy Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 86 ---------------------- kolla/common/config.py | 12 +-- kolla/common/utils.py | 34 ++++++--- kolla/template/filters.py | 9 ++- kolla/template/methods.py | 8 +- kolla/template/repos.yaml | 2 +- .../notes/bug-1959203-1bb695e052248d78.yaml | 8 ++ .../notes/bug-1964140-57b433329bab067e.yaml | 6 ++ .../notes/centos-8-eol-4500333b5e01f448.yaml | 6 ++ .../notes/distro-python-ovs-df705d1e59f16cde.yaml | 6 ++ ...n-agent-pxe-booting-issue-95adaf9249207d5b.yaml | 6 ++ ...check-curl-disable-curlrc-0f85aad47379e2a5.yaml | 5 ++ .../jinja2-pass-context-3f3febcd944e3a51.yaml | 4 + .../notes/libvirt-sasl-07a8a1a25d2450c6.yaml | 6 ++ ...stone-auth-default-policy-e16f7bb558aa4b14.yaml | 5 ++ .../quiet-mode-with-logs-0abafc07923945ac.yaml | 6 ++ ...ectory-execute-permission-8ab919b7b17025d2.yaml | 5 ++ ...-vulnerability-mitigation-6746a8a0bb329485.yaml | 5 ++ 41 files changed, 253 insertions(+), 183 deletions(-)

1 0

kayobe 9.4.0 (victoria)
by no-reply＠openstack.org 28 Apr '22

28 Apr '22

We are pleased to announce the release of: kayobe 9.4.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 9.4.0 ^^^^^ Upgrade Notes ************* * Kayobe now defaults to building CentOS Stream 8 IPA and root disk images, following the end of life of CentOS Linux 8. Bug Fixes ********* * In production environments, the provision network may be separated from the other networks, so in this case, if you want Bifrost's DHCP service provides the correct gateway for the clients the "inspection_gateway" should be used instead of the "gateway" attribute for the provision network. This also avoids configuring the multiple IP gateways on a single host which leads to unpredictable results. * Fixes IPA and root disk image builds, following the end of life of CentOS Linux 8. * Fixes an issue with idempotence of local Kolla Ansible configuration generation. * Fixes an issue with the seed's configdrive when the admin network is a VLAN. See story 2008089 for details. * Fixes Ansible inventory generation with some custom group mappings using the same group names for Kayobe and Kolla Ansible. See story 2009927 for details. * The set of commands starting with "kayobe overcloud database" now generate the kolla configuration necessary to login to the nodes running the database. * Fixes an issue with config drive generation for infrastructure and seed VMs when using untagged interfaces. The symptom of this issue is that kayobe cannot login to the instance. If you check the libvirt console log, you will see "KeyError: 'vlan_link'". See story 2009910 for details. * Fixes an issue with IPA image builds which used the "master" branch of "ironic-python-agent", even on stable releases of Kayobe, or when explicitly setting "ipa_build_source_version". * Fixes an issue where patch links could be erroneously created on hosts not in the overcloud group. See Story 2009911 for details. * Deployment image (IPA) build no longer uses master version of upper- constraints. Instead, it defaults to using the constraints for the OpenStack release associated with the version of Kayobe being used. See story 2009810 for details. Changes in kayobe 9.3.0..9.4.0 ------------------------------ 15937084 docs: Fix custom LVM example c5dc2d88 Fix variable name for stackhpc.os-networks upper constraints 19faf95e Restore forgotten linuxbridge-agent container a00892dc Fix Ansible inventory generation when reusing group names b3f6e79b CI: Avoid image downloads and builds in seed jobs f6cb821c Fix custom config idempotence 0356f7d5 Only create patch links on overcloud hosts c18fee72 Use naming convention to infer VLAN tagging 73d1a34a Build CentOS stream images 7cd08b03 CI: stop using zuul as kayobe_ansible_user in TLS jobs 7f8fd3dc Set correct gateway for the bifrost provision network c4b68fc7 Set requirements branch for IPA build 1264ac29 Revert "CI: temporary disable voting of some jobs" eb8a95e4 Use stream8 images with molecule aa10df3c CentOS Stream: update DNF repo file names abff9e6c CI: temporary disable voting of some jobs 3104fe97 ipa: Use openstack_branch instead of master 091d191b Fix seed VM configdrive when admin network is a VLAN bd3b16d2 Generate kolla config when running database commands Diffstat (except docs and test files) ------------------------------------- ansible/filter_plugins/networks.py | 8 ++ ansible/group_vars/all/bifrost | 2 +- ansible/group_vars/all/ipa | 15 ++-- ansible/group_vars/all/kolla | 2 +- ansible/kolla-bifrost.yml | 2 +- ansible/network.yml | 1 + ansible/provision-net.yml | 2 +- ansible/roles/dnf/tasks/local-mirror.yml | 13 +++- .../dnf/templates/CentOS-Stream-AppStream.repo.j2 | 17 +++++ .../dnf/templates/CentOS-Stream-BaseOS.repo.j2 | 17 +++++ .../dnf/templates/CentOS-Stream-Extras.repo.j2 | 17 +++++ .../kolla-ansible/templates/overcloud-top-level.j2 | 2 +- .../kolla-openstack/molecule/default/molecule.yml | 4 +- .../molecule/enable-everything/molecule.yml | 4 +- ansible/roles/kolla-openstack/tasks/config.yml | 1 - dev/functions | 11 +++ .../reference/ironic-python-agent.rst | 10 ++- etc/kayobe/ipa.yml | 5 +- kayobe/cli/commands.py | 8 ++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 2 +- playbooks/kayobe-overcloud-base/overrides.yml.j2 | 3 - .../kayobe-seed-base/bifrost-overrides.yml.j2 | 6 +- playbooks/kayobe-seed-base/overrides.yml.j2 | 12 --- .../bifrost-overrides.yml.j2 | 6 +- ...ifrost-inspection-gateway-316ab384430ef8df.yaml | 9 +++ .../build-centos8s-images-509f04d8d68cb357.yaml | 9 +++ .../notes/config-idemoptence-37846db82ecd9f43.yaml | 4 + .../notes/configdrive-vlans-4e8b6ed07b229233.yaml | 6 ++ ...lla-ansible-group-mapping-8fcd6cbb1e744e18.yaml | 6 ++ ...ckup-with-no-kolla-config-4f857915adabad41.yaml | 6 ++ .../fixes-keyerror-vlan-link-c177cf719e070df6.yaml | 8 ++ .../notes/ipa-branch-b29c377c531013a8.yaml | 6 ++ .../patch-links-on-overcloud-e24dbc858d3399cc.yaml | 6 ++ ...ents-branch-for-ipa-build-c3ca977ec21b58f4.yaml | 8 ++ requirements.yml | 2 +- zuul.d/jobs.yaml | 4 +- zuul.d/project.yaml | 2 - 40 files changed, 278 insertions(+), 61 deletions(-)

1 0

oslo.messaging 12.7.3 (wallaby)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We exuberantly announce the release of: oslo.messaging 12.7.3: Oslo Messaging API This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 12.7.3 ^^^^^^ Bug Fixes * As a fix for bug 1917645 (https://launchpad.net/bugs/1917645) the rabbit backend is changed to use the "[oslo_messaging_notifications]retry" parameter when driver tries to connect to the message bus during notification sending. Before this fix the rabbit backend retried the connection forever blocking the caller thread. Changes in oslo.messaging 12.7.2..12.7.3 ---------------------------------------- 5d6fd1a1 [rabbit] use retry parameters during notification sending d63173a3 Reproduce bug 1917645 Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/amqpdriver.py | 7 +- oslo_messaging/_drivers/common.py | 4 +- oslo_messaging/_drivers/impl_rabbit.py | 11 +++- oslo_messaging/_drivers/pool.py | 10 +-- oslo_messaging/notify/messaging.py | 23 +++++-- ...rameter-for-notifications-3f7c508ab4437579.yaml | 8 +++ 8 files changed, 122 insertions(+), 20 deletions(-)

1 0

oslo.utils 4.8.2 (wallaby)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are chuffed to announce the release of: oslo.utils 4.8.2: Oslo Utility library This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 4.8.2 ^^^^^ Security Issues * This patch ensures that we mask sensitive data when masking password, even if double quotes are used as password value. Changes in oslo.utils 4.8.1..4.8.2 ---------------------------------- a38b56a fix strutils password regex Diffstat (except docs and test files) ------------------------------------- oslo_utils/strutils.py | 2 ++ .../notes/mask-password-pattern-c8c880098743de3e.yaml | 5 +++++ 3 files changed, 18 insertions(+)

1 0

oslo.cache 2.11.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We high-spiritedly announce the release of: oslo.cache 2.11.0: Cache storage for OpenStack projects. This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. Changes in oslo.cache 2.10.1..2.11.0 ------------------------------------ 2d610d0 Remove unnecessary unicode prefixes 557d4a2 Fix description of memcache_servers 24f4000 Add Python3 zed unit tests f7f3c2b Update master for stable/yoga a036c46 Add Python 3 only classifier Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_cache/_opts.py | 17 +++++++++-------- releasenotes/source/conf.py | 16 ++++++++-------- releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 ++++++ setup.cfg | 1 + 8 files changed, 31 insertions(+), 22 deletions(-)

1 0

castellan 3.11.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We exuberantly announce the release of: castellan 3.11.0: Generic Key Manager interface for OpenStack This release is part of the zed release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. Changes in castellan 3.10.1..3.11.0 ----------------------------------- d2e8437 Remove redundant override of logging_context_format_string a160e5c Replace the deprecated argument tenant d03d696 Add Python3 zed unit tests 3e0fad7 Update master for stable/yoga b0c8638 Updating python testing classifier as per Yoga testing runtime Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- castellan/options.py | 8 +------- releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 ++++++ setup.cfg | 1 + 7 files changed, 14 insertions(+), 12 deletions(-)

1 0

oslo.db 11.3.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We jubilantly announce the release of: oslo.db 11.3.0: Oslo Database library This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 11.2.0..11.3.0 --------------------------------- 95e1dd6 Add Python3 zed unit tests ec2f9f1 Update master for stable/yoga 6ecce89 Don't call 'begin()' on existing transaction Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 ++++++ 5 files changed, 9 insertions(+), 8 deletions(-)

1 0

oslo.limit 1.6.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are glad to announce the release of: oslo.limit 1.6.0: Limit enforcement library to assist with quota calculation. This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.limit Download the package from: https://pypi.org/project/oslo.limit Please report issues through: https://bugs.launchpad.net/oslo.limit/+bugs For more details, please see below. 1.6.0 ^^^^^ Bug Fixes * *bug 1962406* <https://bugs.launchpad.net/oslo.limit/+bug/1962406>`_: Fixed the wrong format of options data, which was causing failure with "oslo- config-generator" command if the "oslo.limit" entry point is included. Changes in oslo.limit 1.5.0..1.6.0 ---------------------------------- c67c9cf Move Enforcer caching closer to limit retrieval 004809a Add Python3 zed unit tests a6e08b0 Update master for stable/yoga 9f7a66a Add documentation for config options ce5aa7d oslo-config-generator: Fix ValueError Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_limit/limit.py | 44 +++++++++++++--------- oslo_limit/opts.py | 6 +-- .../notes/bug-1962406-e239d60400c726c8.yaml | 7 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 +++ 10 files changed, 110 insertions(+), 25 deletions(-)

1 0

oslo.privsep 2.8.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are tickled pink to announce the release of: oslo.privsep 2.8.0: OpenStack library for privilege separation This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.privsep Download the package from: https://pypi.org/project/oslo.privsep Please report issues through: https://bugs.launchpad.net/oslo.privsep/+bugs For more details, please see below. Changes in oslo.privsep 2.7.0..2.8.0 ------------------------------------ fa16f4d Remove unnecessary unicode prefixes 394bd37 Add note explaining max_buffer_size value 46e1920 Fix formatting of release list 24b3a99 Add Python3 zed unit tests 4ff6561 Update master for stable/yoga c223dbc Bump max_buffer_size for Deserializer Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_privsep/comm.py | 12 +++++++++--- releasenotes/source/conf.py | 14 +++++++------- releasenotes/source/index.rst | 29 +++++++++++++++-------------- releasenotes/source/yoga.rst | 6 ++++++ 8 files changed, 49 insertions(+), 36 deletions(-)

1 0

oslo.utils 4.13.0 (zed)
by no-reply＠openstack.org 27 Apr '22

27 Apr '22

We are tickled pink to announce the release of: oslo.utils 4.13.0: Oslo Utility library This release is part of the zed release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. 4.13.0 ^^^^^^ Security Issues * This patch ensures that we mask sensitive data when masking password, even if double quotes are used as password value. Changes in oslo.utils 4.12.2..4.13.0 ------------------------------------ de4429f fix strutils password regex c03c07c Add Python3 zed unit tests 7855d96 Update master for stable/yoga Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- oslo_utils/strutils.py | 2 ++ .../notes/mask-password-pattern-c8c880098743de3e.yaml | 5 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/yoga.rst | 6 ++++++ 6 files changed, 26 insertions(+), 1 deletion(-)

1 0