- Release-announce - lists.openstack.org

trove 13.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are ecstatic to announce the release of: trove 13.0.1: OpenStack DBaaS This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/trove Download the package from: https://tarballs.openstack.org/trove/ Please report issues through: https://bugs.launchpad.net/trove/+bugs For more details, please see below. Changes in trove 13.0.0..13.0.1 ------------------------------- 48e39a07 [docs]Fix wrong links in README a5a5c5e0 Handle case where no networks are selected at create 7e492708 Set limit to -1 when getting Nova instances d808241a [Image] Use sudo when removing image cache dir 83bf6ce1 Install pip3 for image build f31ac746 [Backup] Ignore 404 error when deleting swift objects 695a63e2 Do not operate floating IP for relication cluster c5d78f68 Fix building raw image 775abab5 Support image type for guest image building 8d9b938a Fix CI job a006dc41 Update TOX_CONSTRAINTS_FILE for stable/ussuri 06755d64 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 31 +++++++------- README.rst | 6 +-- devstack/settings | 2 +- integration/scripts/conf/test_begin.conf | 2 +- .../99-reliable-apt-key-importing.bash | 4 +- .../guest-agent/source-repository-guest-agent | 4 +- .../99-reliable-apt-key-importing.bash | 4 +- .../elements/ubuntu-guest/install.d/15-trove-dep | 21 ++++++---- .../ubuntu-guest/post-install.d/90-apt-get-update | 9 ---- .../ubuntu-guest/pre-install.d/04-baseline-tools | 2 +- .../ubuntu-mysql/pre-install.d/10-percona-apt-key | 6 +-- .../install.d/22-decrease-networking-timeout | 7 ++++ integration/scripts/functions_qemu | 8 ++-- integration/scripts/trovestack | 8 ++-- integration/scripts/trovestack.rc | 2 +- tox.ini | 2 +- trove/common/strategies/storage/swift.py | 9 +++- trove/extensions/mgmt/instances/models.py | 3 +- trove/instance/views.py | 2 +- trove/limits/views.py | 4 +- trove/taskmanager/manager.py | 13 +----- trove/taskmanager/models.py | 48 ++-------------------- 26 files changed, 88 insertions(+), 148 deletions(-)

1 0

octavia-dashboard 5.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are pumped to announce the release of: octavia-dashboard 5.0.1: Horizon panels for Octavia This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/octavia-dashboard Download the package from: https://pypi.org/project/octavia-dashboard Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia- dashboard For more details, please see below. Changes in octavia-dashboard 5.0.0..5.0.1 ----------------------------------------- d0b91fd Drop lower-constraints job b09a3d4 Disable Load Balancers panel when Octavia service is not deployed 7ab53ba Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- lower-constraints.txt | 147 --------------------- .../dashboards/project/load_balancer/panel.py | 2 +- .../locale/id/LC_MESSAGES/djangojs.po | 11 +- tox.ini | 6 - zuul.d/projects.yaml | 1 - 5 files changed, 10 insertions(+), 157 deletions(-)

1 0

designate 10.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We joyfully announce the release of: designate 10.0.1: DNS as a Service This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/designate Download the package from: https://tarballs.openstack.org/designate/ Please report issues through: https://bugs.launchpad.net/designate/+bugs For more details, please see below. Changes in designate 10.0.0..10.0.1 ----------------------------------- b967e9f7 Update zones masters using pool target masters. dc2426f7 Fix pdns4 devstack plugin 5a526c7a Drop lower-constraints test 06883ab7 pdns4 backend: check if zone exists before attempting delete 688987ab Fix lower-constraints test not constraining properly 9cf3b8ea fix database sync always get the wrong value a61a0c39 Update TOX_CONSTRAINTS_FILE for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - designate/backend/impl_bind9.py | 37 +++++ designate/backend/impl_pdns4.py | 21 ++- designate/manage/pool.py | 28 ++++ .../migrate_repo/versions/070_liberty.py | 4 +- devstack/designate_plugins/backend-pdns4 | 22 +-- lower-constraints.txt | 170 --------------------- tox.ini | 14 +- 12 files changed, 195 insertions(+), 210 deletions(-)

1 0

metalsmith 1.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are amped to announce the release of: metalsmith 1.0.1: Deployment and Scheduling tool for Bare Metal This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. Changes in metalsmith 1.0.0..1.0.1 ---------------------------------- 43bd9d4 Remove lower-constraints job 4ee24fd Add the setuptools workaround c658bce Use is instead of ambiguous pipe 3b32a3f CI: increase the swift loopback disk size for the CentOS job d46002f Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 81eae8d Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 +++- playbooks/integration/centos-image.yaml | 2 +- playbooks/integration/pre.yaml | 9 +++++++-- tox.ini | 8 ++++---- 5 files changed, 16 insertions(+), 8 deletions(-)

1 0

sahara-plugin-spark 3.0.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We eagerly announce the release of: sahara-plugin-spark 3.0.1: Spark Plugin for Sahara Project This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/sahara-plugin-spark Download the package from: https://tarballs.openstack.org/sahara-plugin-spark/ Please report issues through: https://storyboard.openstack.org/#!/project/1104 For more details, please see below. Changes in sahara-plugin-spark 3.0.0..3.0.1 ------------------------------------------- 46b812a Fix URL of Maven Central Repository beeef12 Update TOX_CONSTRAINTS_FILE for stable/ussuri 8018cf5 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../plugins/spark/resources/images/common/manipulate_s3 | 2 +- tox.ini | 8 ++++---- 3 files changed, 6 insertions(+), 5 deletions(-)

1 0

cloudkitty 12.1.1 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are ecstatic to announce the release of: cloudkitty 12.1.1: Rating as a Service component for OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/cloudkitty Download the package from: https://pypi.org/project/cloudkitty Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cloudkitty For more details, please see below. Changes in cloudkitty 12.1.0..12.1.1 ------------------------------------ f585666 Fix default admin_or_owner policy expression 7bfd8ec Drop lower-constraints job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 - cloudkitty/common/policies/base.py | 4 +++- 3 files changed, 5 insertions(+), 7 deletions(-)

1 0

manila 10.1.0 (ussuri)
by no-reply＠openstack.org 26 Jul '21

26 Jul '21

We are pleased to announce the release of: manila 10.1.0: Shared Storage for OpenStack This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 10.1.0 ^^^^^^ Upgrade Notes ************* * Added a new config option *netapp_ssl_cert_path* for NetApp driver. This option enables the user to choose the directory with certificates of trusted CA or the CA bundle. If set to a directory, it must have been processed using the c_rehash utility supplied with OpenSSL. If not informed, it will use the Mozilla's carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates. Security Issues *************** * An RBAC policy check has been enforced against the GET /share- access-rules API to ensure that users are permitted to access the share that the access rule belongs to. See bug 1917417 (https://launchpad.net/bugs/1917417) for more details. Bug Fixes ********* * Fixed an issue on ONTAP NetApp driver that caused access rules not to be applied to a promoted replica using CIFS protocol. Please refer to the Launchpad bug #1896949 (https://bugs.launchpad.net/manila/+bug/1896949) for more details. * Fixed an issue on ONTAP NetApp driver that was forcing the location of CA certificates for SSL verification during HTTPS requests. It adds the *netapp_ssl_cert_path* configuration, enabling the user to choose the directory with certificates of trusted CA or the CA bundle. If set to a directory, it must have been processed using the c_rehash utility supplied with OpenSSL. If not informed, it will use the Mozilla's carefully curated collection of Root Certificates for validating the trustworthiness of SSL certificates. Please refer to the Launchpad bug #1900191 (https://bugs.launchpad.net/manila/+bug/1900191) for more details. * A bug with storage protocol filtering in the scheduler has been fixed. See bug (https://launchpad.net/bugs/1783736) for more details. * Fixed bug #1886232 (https://bugs.launchpad.net/manila/+bug/1886232) that causes an INFO message saying the python-manila package was not found. Now, the package name was updated to python3-manila. This fix solves only in the case that the user installed the manila using the default packages found in OS. * New user messages now alert users of possible remediations during access rule creation errors with CephFS shares. This includes hints to users to not use cephx client users that are prohibited by CephFS or the share driver. See CVE-2020-27781 (https://cve.mitre.org/cgi- bin/cvename.cgi?name=CVE-2020-27781) and bug #1904015 <https://launchpad.net/bugs/1904015>`_ for more details. * Fixed a bug that if extend a volume after shrink it under generic driver, it may have a wrong real size. Please see Launchpad bug #1909951 (https://bugs.launchpad.net/manila/+bug/1909951) for more details. * The scheduler stats resource APIs (/scheduler-stats/pools and /scheduler-stats/pools/detail) have been fixed to not return an arbitrary traceback in the error message body to the caller when access to the resource has been denied. * Fixed bug #1922075 (https://bugs.launchpad.net/manila/+bug/1922075) Fixed the problem that "gluster volume set nfs.rpc-auth-reject '*'" failed when the glusterfs driver created an instance from a snapshot. * Fixed NotFound error in share replica periodic tasks. It could happen that the parent share of the replica that was being worked on had already been deleted. * Corrected an error message for attempts to create snapshots from shares that do not support this operation. The message said that the share backend has no such support but that is not always true. The original share for the snapshot does not support snapshots because it was created with a share type without the "snapshot_support" extra-spec set, irrespective of whether the back end used can itself support snapshots or not. Changes in manila 10.0.2..10.1.0 -------------------------------- a853b0cc [ci][devstack] Install bridge-utils for Container driver ed316557 Fix CI issues and adjust test jobs c591c0da Update IRC references 6707ca7b Reuse _set_instances_share_data for replicas. 3b31aae9 [Native CephFS] Add messages for async ACL ops 94bb8fea Fix traceback in scheduler-stats API 4a75c699 Filter storage protocol in the scheduler 4fab48de Fix api error message for snapshot creation failure f40a428b [Glusterfs] Fix create share from snapshot failed ff97dc01 RBAC tightening for share access rule 6b9532ee [NetApp] Fix python-manila package version 282787fb Always use new_size when extend ac667519 [NetApp] Fix hard-coded CA cert path for SSL 460f4470 [NetApp] Fix access rules for CIFS promoted replica be76d7eb Move shares filtering to database layer Diffstat (except docs and test files) ------------------------------------- contrib/ci/post_test_hook.sh | 25 +-- devstack/plugin.sh | 7 + manila/api/v1/scheduler_stats.py | 8 +- manila/api/v1/share_snapshots.py | 4 +- manila/db/sqlalchemy/api.py | 188 +++++++++++++-------- manila/exception.py | 4 + manila/message/message_field.py | 75 ++++---- manila/scheduler/drivers/filter.py | 24 ++- manila/scheduler/filters/capabilities.py | 3 - manila/share/api.py | 29 ++-- manila/share/drivers/cephfs/driver.py | 66 ++++++-- manila/share/drivers/generic.py | 2 +- manila/share/drivers/glusterfs/layout_volume.py | 33 +++- .../share/drivers/netapp/dataontap/client/api.py | 11 +- .../drivers/netapp/dataontap/client/client_base.py | 1 + .../netapp/dataontap/cluster_mode/data_motion.py | 1 + .../netapp/dataontap/cluster_mode/lib_base.py | 6 +- manila/share/drivers/netapp/options.py | 10 +- manila/share/drivers/netapp/utils.py | 2 +- .../share/drivers/glusterfs/test_layout_volume.py | 13 +- .../share/drivers/netapp/dataontap/client/fakes.py | 1 + .../dataontap/cluster_mode/test_data_motion.py | 7 +- .../post.yaml | 15 -- .../run.yaml | 108 ------------ .../post.yaml | 15 -- .../run.yaml | 94 ----------- .../post.yaml | 15 -- .../run.yaml | 107 ------------ .../post.yaml | 15 -- .../run.yaml | 83 --------- .../manila-tempest-dsvm-glusterfs-native/run.yaml | 2 +- .../post.yaml | 15 -- .../run.yaml | 84 --------- .../manila-tempest-dsvm-glusterfs-nfs/run.yaml | 2 +- .../legacy/manila-tempest-dsvm-hdfs/post.yaml | 15 -- playbooks/legacy/manila-tempest-dsvm-hdfs/run.yaml | 74 -------- .../manila-tempest-dsvm-mysql-generic/run.yaml | 22 +-- .../run.yaml | 2 +- .../post.yaml | 15 -- .../run.yaml | 92 ---------- .../run.yaml | 2 +- .../legacy/manila-tempest-dsvm-scenario/run.yaml | 2 +- .../run.yaml | 2 +- .../run.yaml | 2 +- .../run.yaml | 2 +- .../run.yaml | 2 +- .../manila-tempest-minimal-dsvm-dummy/run.yaml | 2 +- .../manila-tempest-minimal-dsvm-lvm/run-ipv6.yaml | 2 +- .../manila-tempest-minimal-dsvm-lvm/run.yaml | 2 +- .../post.yaml | 15 -- .../run.yaml | 109 ------------ .../post.yaml | 28 --- .../run.yaml | 109 ------------ ...ss-rules-promoted-replica-70b32991cc90e1ca.yaml | 7 + ...-fix-ssl-cert-path-option-35354c9b7a9c37e6.yaml | 20 +++ ...he-capabilities-scheduler-d8391183335def9f.yaml | 5 + ...p-fix-python-package-name-0f3ec3f2deec8887.yaml | 8 + ...1-cephx-asynchronous-msgs-6a683076a1fb5a54.yaml | 9 + ...ix-extend-have-wrong-size-7938eaa6591bd2ad.yaml | 7 + ...eck-on-share-access-rules-efdddaf9e6f68fdf.yaml | 7 + ...-user-if-action-forbidden-0da51825756fd5fc.yaml | 7 + ...hare-from-snapshot-failed-053a583522a6fc0e.yaml | 6 + ...ound-replica-parent-share-d8e50659c02b941a.yaml | 5 + ...hot-support-api-error-msg-eaf5fd2b1df97d15.yaml | 10 ++ zuul.d/grenade-jobs.yaml | 1 + zuul.d/project.yaml | 124 -------------- 76 files changed, 751 insertions(+), 1373 deletions(-)

1 0

ironic 18.1.0 (xena)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We are overjoyed to announce the release of: ironic 18.1.0: OpenStack Bare Metal Provisioning This release is part of the xena release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 18.1.0 ^^^^^^ New Features ************ * The anaconda deploy interface now handles config drive. The config drive contents are written to the disk in the /var/lib/cloud/seed/config_drive directory by the driver via kickstart files %post section. cloud-init picks up the the config drive information and processes them. Because the config drive is extracted on to disk as plain text files, tools like glean do not work with this deploy interface. * The configuration option "[deploy]ramdisk_image_download_source" now supports a new value "swift". If set, and if "boot_iso" or "deploy_iso" is a Glance image, the image is exposed via a Swift temporary URL. For other types of images the new value works the same way as the existing "http" value. * The "ilo-virtual-media" deploy interface now supports "file:///" URLs for "boot_iso" and "deploy_iso". * The "ilo-virtual-media" deploy interface now supports the "[deploy]ramdisk_image_download_source" configuration option. * Adds "boot_mode" and "secure_boot" fields to node. These indicate the boot mode (bios/uefi) and secure boot state (True/False) detected in the most recent power sync or during transition to the "manageable" state. If underlying driver does not support detecting these, they shall be populated with null values. These fields are also available under a node's states endpoint: * "/v1/nodes/{node_ident}/states" * For the "ramdisk" deploy interface, the "ramdisk_image_download_source" option can now be provided in the node's "instance_info" in addition to the global configuration. * Provides new vendor passthru methods for Redfish to create, delete and get subscriptions for BMC events. Upgrade Notes ************* * The query pattern for the database when lists of nodes are retrieved has been changed to a more efficient pattern at scale, where a list of nodes is generated, and then additional queries are executed to composite this data together. This is from a model where the database client in the conductor was having to deduplicate the resulting data set which is overall less efficent. * The default UEFI iPXE bootloader, "[pxe]uefi_ipxe_bootfile_name" used by the "ipxe" boot interface, has been changed from "ipxe.efi" to "snponly.efi". This is because most deployments actually need to use "snponly.efi" as it contains support for the UEFI integrated network stack, where as "ipxe.efi" does not and only contained compiled in network drivers, for UEFI, there happen to be few as the UEFI standard requires networking to be handled by the UEFI firmware. * Since "ilo-virtual-media" deploy interface now respects the "[deploy]ramdisk_image_download_source" configuration options, its default caching behavior has changed. Now HTTP "boot_iso"/"deploy_iso" are cached locally and served from the conductor's HTTP server instead of passing them directly to the BMC. Glance images are also cached locally. To revert to the previous behavior, set the "[deploy]ramdisk_image_download_source" option to "swift". * The minimum requirement for the "oslo.db" library is now version 9.1.0 to address duplicate key error changes in MySQL 8.0.19. oslo.db version 9.1.0 fixes issue of idrac driver node inspection for inspect interface as idrac-redfish. Issue was introduced since MySQL 8.0.19 where duplicate key error information is extended to include the table name in the key. For more information, see story 2008901 (https://storyboard.openstack.org/#!/story/2008901) Deprecation Notes ***************** * The "driver_info" property "ilo_boot_iso" has been renamed to just "boot_iso". * The following "driver_info" parameters have been renamed with deprecation: * "ilo_deploy_kernel" -> "deploy_kernel" * "ilo_deploy_ramdisk" -> "deploy_ramdisk" * "ilo_deploy_iso" -> "deploy_iso" * "ilo_rescue_kernel" -> "rescue_kernel" * "ilo_rescue_ramdisk" -> "rescue_ramdisk" * "ilo_rescue_iso" -> "rescue_iso" * "ilo_bootloader" -> "bootloader" * The "driver_info" properties "irmc_deploy_iso" and "irmc_rescue_iso" have been renamed to just "deploy_iso" and "rescue_iso". * The "instance_info" property "irmc_boot_iso" has been renamed to just "boot_iso". * The "[pxe]ip_version" setting has been deprecated and is anticipated to be removed in the Y* release of OpenStack. This option effectively has had no operational impact since the Ussuri release of OpenStack where dual stack IPv4 and IPv6 support was added to Ironic. Critical Issues *************** * Fixes upgrade failure caused by the missing version of "BIOSSetting" database objects. Security Issues *************** * Fixes an issue with the "/v1/nodes/detail" endpoint where an authenticated user could explicitly ask for an "instance_uuid" lookup and the associated node would be returned to the user with sensitive fields redacted in the result payload if the user did not explicitly have "owner" or "lessee" permissions over the node. This is considered a low-impact low-risk issue as it requires the API consumer to already know the UUID value of the associated instance, and the returned information is mainly metadata in nature. More information can be found in Storyboard story 2008976 (https://storyboard.openstack.org/#!/story/2008976) Bug Fixes ********* * Skips port creation during redfish inspect for devices reported without a MAC address. * Fixes potential cache coherency issues by caching the AgentClient per task, rather than globally. * Fixes an issue with the "/v1/nodes/detail" endpoint where requests for an explicit "instance_uuid" match would not follow the standard query handling path and thus not be filtered based on policy determined access level and node level "owner" or "lessee" fields appropriately. Additional information can be found in story 2008976 (https://storyboard.openstack.org/#!/story/2008976) * Slow database retrieval of nodes has been addressed at the lower layer by explicitly passing and handling only the requested fields. The result is excess discarded work is not performed, making the overall process more efficent. This is particullarly beneficial for OpenStack Nova's syncronization with Ironic. * Fixes configuring Redfish RAID using "interface_type" when error "failed to find matching physical disks for all logical disks" occurs. * The "ilo-virtual-media" deploy interface no longer requires the Image service backend to be Swift for Glance images in "boot_iso" and "deploy_iso". * Improves record retrieval performance for baremetal nodes by enabling ironic to not make redundant calls as part of generating API result sets for the baremetal nodes endpoint. * Fixes handling of single-value (non-key-value) parameters in the "[inspector]extra_kernel_params" configuration options. * Allows reboot to hard disk following iso ramdisk deploy. Re-uses the "force_persistent_boot_device" driver_info option which can be set to "Never" in order to set the virtual media to one time boot. * The "ramdisk" deploy interface no longer requires a fake "image_source" value to be provided when "boot_iso" is not used. * Removes unused local images after ejecting a virtual media device via the "eject_vmedia" vendor passthru call of the "redfish" vendor interface. * In Redfish RAID clean and deploy steps skip non-RAID storage controllers for RAID operations. In Redfish systems that do not implement "SupportedRAIDTypes" they are still processed and could result in unexpected errors. * Fixes an issue of powering off with the "idrac-wsman" management interface while the execution of a clear job queue cleaning step is proceeding. Prior to this fix, the clean step would fail when powering off a node. * Fixes issue arose during inspection of iDRAC node with inspect- interface as idrac-redfish. Earlier, inspection of node was getting failed with error "port already exists". This issue arose since MySQL 8.0.19 where duplicate key error information is extended to include the table name in the key. Previously, duplicate key error information included only the key value and key name. For more information, see story 2008901 (https://storyboard.openstack.org/#!/story/2008901) * Fixes overriding "agent_verify_ca" with "False" via "driver_info". Other Notes *********** * The default database query pattern has been changed which will result in additional database queries when compositing lists of "nodes" by separately querying "traits" and "tags". Previously this was a joined query which requires deduplication of the result set before building composite objects. * Deprecation warnings for the legacy RBAC policies are now suppressed, as the OpenStack community is coalescing around what appears will be a longer deprecation cycle and process than would typcially be undertaken due to the nature and impact of policy changes. The community as a whole is expecting to make RBAC policy work changes a community goal during the Y* release development cycle, which means the earliest legacy policy support may be removed is likely now the Z* development cycle. Changes in ironic 18.0.0..18.1.0 -------------------------------- a2417571b Update vendor_passthru subscriptions releasenote f095a9478 Prepare 18.1 and clean up release notes 4bc5142df Add vendor_passthru method for subscriptions b5872c903 Set glance limit for baremetal friendly images 2cd646834 Scoped RBAC Devstack Plugin support e488792cc Burn-in: Add documentation 58ca01c22 Add a section to redfish doc for BIOS registry fields 3199d289b Fix iPXE docs: snponly is not always available 06124bae7 Update requirements e503048f0 Sanity check object version changes 3bad548ce Allow reboot to hard disk following iso ramdisk deploy. ae535bac2 Add ipxe ramdisk kernel append param test fdef42fee Update iDRAC virtual media boot known issue 46ff51487 Add `boot_mode` and `secure_boot` to node object and expose in api 7e5e65550 Add missing BIOSSettings version mapping for older releases 9e477d178 Fix typos in API sanitization change notes d3737b23b Bring boot_iso/deploy_iso handling in iLO closer to Redfish 6bbd03b17 Use selectinload for all list queries da27e370b Clean up images when ejecting an ISO with Redfish 9851b68ee Allow node_sanitize function to be provided overrides c830861ee Avoid double file removal in create_boot_iso 85212fead Add note regarding configuration drives to tuning docs 8cb605745 Support "swift" for ramdisk_image_download_source ad3ce797c Defer checking image size until instance info is built 34337f75f Fix oslo policy DeprecatedRule warnings 4ac8340fb Add support for configdrive in anaconda interface 24901e456 Add reno and reset legacy policy deprecation expectation bb0523f03 [doc] Bootloader reinstallations on Software RAID 4e5073390 [doc] Update section on ESP consistency c41ed8414 Fix Redfish RAID interface_type physical disk hint 67ff5ff2b Suppress policy deprecation and default change warnings 0cc6d8204 Skip port create if MAC is blank d8ccfabda Ramdisk: do not require image_source 1d6441cc3 Refactor deploy_utils.validate_image_properties c779be9f7 Redfish: Skip non-RAID controllers for RAID b2a249d18 Deprecate [pxe]ip_version parameter e3a4c7d77 Upgrade oslo.db version 741a4d8a8 Update the clear job id's constant 87e42afb9 API to pass fields to node object list 7b37e03b6 Set stage for objects to handle selected field lists. 644ba5d4b Only return the requested fields from the DB fcb6a1096 Cache AgentClient on Task, not globally 4d13da9cc Change UEFI ipxe bootloader default 4dc192015 Refactor: untie IloVendor from validate_image_properties ce5baa380 Fix handling driver_info[agent_verify_ca] == False d7a5b3469 Fix ramdisk boot option handling f8e2bc99d Allow ramdisk_image_download_source in instance_info for ramdisk deploy ebb314bf4 Nicer error message when a deploy step fails 5a8a77ec5 Don't run the inspector job on changes to inspector tests 4f2d1ca94 CI: change ilo_deploy_iso to deploy_iso be3c153d5 Fix node detail instance_uuid request handling fc27710fa Clean up vendor prefixes for iRMC boot 595345ffc Add documentation for anaconda deploy interface df228c5b9 Fix typos in inspection docs f91915d4c Remove redundant/legacy is_admin logic 2c3470353 Split a community page out of the contributor docs 50b84c9ae Document managed inspection fd7cde9b9 dhcp-less: mention how to provide network_data to instance 7507dec09 Use env to find python3 e84b6d102 Rename ilo_boot_iso -> boot_iso 349bf2d5b Clean up vendor prefixes for iLO boot 3824912f0 Handle non-key-value params in [inspector]extra_kernel_params f58cbf151 Fix ironic-status db index check 728edb6b7 Changes made to enrollment documentation 0a8ebdfc5 Update Redfish RAID disk_type unit test 4b29f2b95 Redfish: Get only RAID controller's physical disks 96aae720a Improve agent_client logging 2fabd3b7d Trivial: fix an outdated link 6a4e33eb0 Move provision states documentation to the user guide 39cd751a9 Refactor iDRAC OEM extension manager calls 57120615a Update CI jobs list and description in docs Diffstat (except docs and test files) ------------------------------------- .../source/baremetal-api-v1-node-management.inc | 7 +- api-ref/source/parameters.yaml | 31 +- .../source/samples/node-get-state-response.json | 2 + devstack/lib/ironic | 141 ++-- devstack/upgrade/upgrade.sh | 10 +- .../contributor/ironic-multitenant-networking.rst | 3 + driver-requirements.txt | 2 +- ironic/api/controllers/v1/collection.py | 13 +- ironic/api/controllers/v1/node.py | 379 +++++++---- ironic/api/controllers/v1/utils.py | 2 + ironic/api/controllers/v1/versions.py | 4 +- ironic/api/hooks.py | 3 - ironic/cmd/status.py | 31 +- ironic/common/context.py | 4 - ironic/common/glance_service/service_utils.py | 7 +- ironic/common/images.py | 11 +- ironic/common/kickstart_utils.py | 165 +++++ ironic/common/policy.py | 743 ++++++++++----------- ironic/common/pxe_utils.py | 9 +- ironic/common/raid.py | 10 + ironic/common/release_mappings.py | 36 +- ironic/common/utils.py | 16 + ironic/conductor/deployments.py | 6 +- ironic/conductor/manager.py | 4 + ironic/conductor/steps.py | 8 +- ironic/conductor/utils.py | 44 ++ ironic/conf/deploy.py | 5 +- ironic/conf/pxe.py | 8 +- ironic/db/api.py | 6 +- .../c1846a214450_add_boot_mode_and_secure_boot.py | 32 + ironic/db/sqlalchemy/api.py | 162 ++++- ironic/db/sqlalchemy/models.py | 3 + ironic/drivers/modules/agent.py | 17 +- ironic/drivers/modules/agent_base.py | 31 +- ironic/drivers/modules/agent_client.py | 40 +- ironic/drivers/modules/ansible/deploy.py | 6 +- ironic/drivers/modules/boot_mode_utils.py | 3 + ironic/drivers/modules/deploy_utils.py | 97 ++- ironic/drivers/modules/drac/boot.py | 67 +- ironic/drivers/modules/drac/inspect.py | 46 +- ironic/drivers/modules/drac/management.py | 187 +----- ironic/drivers/modules/drac/raid.py | 43 +- ironic/drivers/modules/drac/utils.py | 121 ++++ ironic/drivers/modules/ilo/boot.py | 261 +++----- ironic/drivers/modules/ilo/power.py | 15 +- ironic/drivers/modules/ilo/vendor.py | 7 +- ironic/drivers/modules/image_utils.py | 43 +- ironic/drivers/modules/inspector.py | 6 +- ironic/drivers/modules/irmc/boot.py | 72 +- ironic/drivers/modules/pxe.py | 13 - ironic/drivers/modules/pxe_base.py | 13 +- ironic/drivers/modules/redfish/boot.py | 34 +- ironic/drivers/modules/redfish/raid.py | 38 +- ironic/drivers/modules/redfish/utils.py | 38 +- ironic/drivers/modules/redfish/vendor.py | 192 ++++++ ironic/drivers/utils.py | 22 +- ironic/objects/base.py | 6 +- ironic/objects/node.py | 67 +- .../unit/drivers/modules/drac/test_inspect.py | 27 - .../unit/drivers/modules/drac/test_management.py | 128 +--- .../unit/drivers/modules/redfish/test_boot.py | 71 +- .../unit/drivers/modules/redfish/test_inspect.py | 15 + .../unit/drivers/modules/redfish/test_raid.py | 213 +++++- .../unit/drivers/modules/redfish/test_utils.py | 203 ++++-- .../unit/drivers/modules/redfish/test_vendor.py | 257 +++++-- .../unit/drivers/modules/test_agent_client.py | 22 + .../unit/drivers/modules/test_deploy_utils.py | 134 ++-- .../unit/drivers/third_party_driver_mock_specs.py | 3 + .../notes/bios-version-dfd5c95805c295c5.yaml | 5 + releasenotes/notes/blank-mac-f8e0b37e0bd6d719.yaml | 5 + ...ache-agentclient-per-task-ec2231684e6876d9.yaml | 5 + ...ss-pattern-for-node-lists-a333dd9c5afa737d.yaml | 16 + .../change-ipxe-default-file-a9ed5e17fc3d022e.yaml | 10 + ...upport-in-anaconda-deploy-f2aad59b4ff809ec.yaml | 9 + ...ed-instance-info-behavior-1375914a30621eca.yaml | 20 + ...-field-overhead-reduction-40be1821e38b468c.yaml | 9 + .../notes/deploy-iso-swift-355ad6eba6c511b4.yaml | 8 + ...dfish-raid-interface-type-4b3566b637cc2301.yaml | 5 + .../notes/ilo-boot-iso-696b57f44f29852d.yaml | 5 + .../notes/ilo-deploy-iso-0c88edb5daff8a4e.yaml | 22 + .../notes/ilo-prefix-d5a65ac637f82f65.yaml | 13 + ...ode-retrieval-performance-cf5a02eb629bf32c.yaml | 6 + .../inspector-kernel-params-6db82c633d7361e2.yaml | 5 + .../notes/irmc-boot-iso-0e93f97acfa59778.yaml | 8 + .../notes/node-boot-mode-0662effa2a2644dc.yaml | 10 + .../notes/not-presistent-9c552f4209a84820.yaml | 7 + ...isk-image-download-source-7a071aba7890ba95.yaml | 6 + .../notes/ramdisk-validate-acbc4acdb71d10c2.yaml | 5 + .../notes/redfish-eject-iso-9875388ae09bc8f6.yaml | 6 + .../remove_pxe_ip_version-7a71f821ded28360.yaml | 7 + ...-rbac-deprecation-for-now-779898e720a7bf4e.yaml | 10 + .../skip-nonraid-controllers-f4a79e2c9e8080ce.yaml | 7 + ...clear-job-id-constant-fix-c69cf96c55364bb3.yaml | 7 + ...redfish_inspection_bugfix-b5edd35c337f80fc.yaml | 23 + ...dor-passthru-subscription-5d28a2420e2af111.yaml | 5 + .../notes/verify-bool-ab3607429e005bed.yaml | 4 + requirements.txt | 15 +- test-requirements.txt | 6 +- tools/check-releasenotes.py | 2 +- zuul.d/ironic-jobs.yaml | 42 ++ zuul.d/project.yaml | 4 + 160 files changed, 5685 insertions(+), 2844 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index e379bb99a..8b2af33a2 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -14 +14 @@ python-xclarityclient>=0.1.6 -sushy>=3.8.0 +sushy>=3.10.0 diff --git a/requirements.txt b/requirements.txt index ca59703cc..9c4e1dc47 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=3.1.1 # Apache-2.0 @@ -19,2 +19,2 @@ oslo.config>=6.8.0 # Apache-2.0 -oslo.context>=2.19.2 # Apache-2.0 -oslo.db>=6.0.0 # Apache-2.0 +oslo.context>=2.22.0 # Apache-2.0 +oslo.db>=9.1.0 # Apache-2.0 @@ -24,2 +24,2 @@ oslo.middleware>=3.31.0 # Apache-2.0 -oslo.policy>=3.6.2 # Apache-2.0 -oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 +oslo.policy>=3.7.0 # Apache-2.0 +oslo.serialization>=2.25.0 # Apache-2.0 @@ -32,2 +32,3 @@ pecan!=1.0.2,!=1.0.3,!=1.0.4,!=1.2,>=1.0.0 # BSD -requests>=2.14.2 # Apache-2.0 -rfc3986>=0.3.1 # Apache-2.0 +pycdlib>=1.11.0 # LGPLv2 +requests>=2.18.0 # Apache-2.0 +rfc3986>=1.2.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 72cd8e6b9..bd29d9394 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ coverage!=4.4,>=4.0 # Apache-2.0 -ddt>=1.0.1 # MIT +ddt>=1.2.1 # MIT @@ -12 +12 @@ oslotest>=3.2.0 # Apache-2.0 -stestr>=1.0.0 # Apache-2.0 +stestr>=2.0.0 # Apache-2.0 @@ -17 +17 @@ pysnmp>=4.4.12 -bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0 \ No newline at end of file +bandit!=1.6.0,>=1.1.0,<2.0.0 # Apache-2.0

1 0

tripleo-image-elements 12.2.2 (victoria)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We are satisfied to announce the release of: tripleo-image-elements 12.2.2: Disk image builder elements for deploying OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-image-elements Download the package from: https://tarballs.openstack.org/tripleo-image-elements/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. Changes in tripleo-image-elements 12.2.1..12.2.2 ------------------------------------------------ 6fd9757b Clean up ifcfg-eth0 Diffstat (except docs and test files) ------------------------------------- elements/interface-names/install.d/71-clean-stale-interface | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)

1 0

tripleo-heat-templates 13.4.0 (victoria)
by no-reply＠openstack.org 22 Jul '21

22 Jul '21

We contentedly announce the release of: tripleo-heat-templates 13.4.0: Heat templates for deploying OpenStack with OpenStack. This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/tripleo-heat-templates Download the package from: https://tarballs.openstack.org/tripleo-heat-templates/ Please report issues through: https://bugs.launchpad.net/tripleo/+bugs For more details, please see below. 13.4.0 ^^^^^^ New Features ************ * The following parameters add support for mounting Cinder's image conversion directory on an external NFS share. * CinderImageConversionNfsShare * CinderImageConversionNfsOptions * The new "MemcacheUseAdvancedPool" parameter is added which enables usage of advanced poll for memcached connections in keystone middleware. This parameter is set to "true" by default to avoind bursting connections in some services like neutron. * Add support for OVS DPDK pmd auto balance parameters. This feature adds 3 new role specific THT parameters to set pmd-auto-lb-load- threshold, pmd-auto-lb-improvement-threshold, and pmd-auto-lb-rebal- interval in OVS through OvsPmdLoadThreshold, OvsPmdImprovementThreshold and OvsPmdRebalInterval respectively. * Introduce new parameter to configure OVS PMD Auto Load Balance for OVS DPDK Bug Fixes ********* * InternalTLSNbdCAFile, InternalTLSVncCAFile and InternalTLSQemuCAFile do not point to the default IPA ca.crt file and instead are requested to be loaded to component specific CA files (even if they are the same). This can lead to a race where the CA cert is not being written by certmonger in time. Ib868465c20d97c62cbcb214bfc62d949bd6efc62 already changed the default to use the IPA system cacert file '/etc/ipa/ca.crt' per default starting with the wallaby release using the ansible role. This change backports to also use the IPA system cacert file '/etc/ipa/ca.crt' to previous release when managing the certs via puppet-tripleo. * Bug #1915800 (https://bugs.launchpad.net/cinder/+bug/1915800) Add support for ports filtering in XtremIO driver. Other Notes *********** * These parameters can now be set per-role - DnfStreams, UpgradeInitCommand, UpgradeLeappCommandOptions, UpgradeLeappDevelSkip, UpgradeLeappToRemove, UpgradeLeappToInstall Changes in tripleo-heat-templates 13.3.0..13.4.0 ------------------------------------------------ f99fab967 Make default of NeutronDefaultAvailabilityZones empty array 46ad1e676 Neutron: Use the pids subsystem to look up container id 59599a86d Enable keystone_authtoken/memcach_use_advanced_pool for Sahara 0b5b09c12 Support cinder image conversion on an NFS share 643c3d25d Add THT Jinja2 data sources as stack output 9df8a1ce0 Enable DPDK OVS PMD Auto Load Balance d18c6e928 Remove NovaVncProxyNetwork from ServiceNetMap 89fde273e Add support for keystone_authtoken/memcache_use_advanced_pool c746dfa0b support for OVS DPDK pmd auto balance parameters. 52f26b6fb Do not run Swift rsync container in single replica mode c748d92c7 Always run network config for undercloud 3a919de4e Fix NetworkDeploymentActionValue format 02b7e3d67 Limit collectds memory usage f58effc74 Revert "Always run network config for undercloud" 470496171 Add option for enabling rsyslog reopenOnTruncate c2c2111ef Always run network config for undercloud 0ed341f44 Remove heat::heat_keystone_clients_url definition 8caac4190 Make UpgradeLeappDevelSkip per-role 7f19b9635 Added the posibility of skipping the NFS ping test on the rear installation f808dac56 HA minor update: fix bad pcs invocation 6c5011056 Fix broken restart of ovndb_server during minor update bb1a85575 Bump ovs and ovn versions to 2.15 for FFWD. d54d63285 [victoria/ussuri/train] Change nbd, vnc and qemu default cacert file c595a9a83 Update rhsm repo examples for RHEL8 deployments bc39ac89d Fix cinder's cephx keyring file permissions 823ec8223 set ganesha idmap.conf file path and overrides 67ae1b953 Fix typo in ceilometer-write-qdr environment file 496accc44 Allow customizing podman's [engine]/events_logger 8c796f4f1 Add OVNCMSOptions to Controller and Networker roles 069005186 Disable tunnelled migration 51a9a0781 Unify cinder's volume and backup kolla_config settings 27ae88324 Add environment for external network VIP a68d3f96b Create post-deploy.conf on update/upgrade for octavia 9e8061ae7 Fix NovaDefaultFloatingPool parameter a31e100ca Add ports filtering support to XtremIO Cinder driver Diffstat (except docs and test files) ------------------------------------- ci/environments/scenario001-standalone.yaml | 1 + .../pacemaker_restart_bundle.sh | 2 +- deployed-server/deployed-server.yaml | 2 + deployment/aodh/aodh-base.yaml | 6 + .../backup-and-restore/rear-baremetal-ansible.yaml | 7 + .../barbican/barbican-api-container-puppet.yaml | 6 + deployment/ceph-ansible/ceph-nfs.yaml | 9 ++ deployment/cinder/cinder-api-container-puppet.yaml | 6 + ...inder-backend-dellemc-xtremio-iscsi-puppet.yaml | 8 ++ .../cinder-backend-dellemc-xtremio-puppet.yaml | 7 + .../cinder/cinder-backup-container-puppet.yaml | 51 +------ .../cinder/cinder-backup-pacemaker-puppet.yaml | 31 +---- .../cinder/cinder-common-container-puppet.yaml | 154 ++++++++++++++++++++- .../cinder/cinder-volume-container-puppet.yaml | 39 +----- .../cinder/cinder-volume-pacemaker-puppet.yaml | 23 +-- deployment/deprecated/mistral/mistral-base.yaml | 6 + .../novajoin/novajoin-container-puppet.yaml | 6 + deployment/deprecated/sahara/sahara-base.yaml | 6 + .../designate/designate-api-container-puppet.yaml | 6 + deployment/glance/glance-api-container-puppet.yaml | 6 + .../gnocchi/gnocchi-api-container-puppet.yaml | 6 + deployment/heat/heat-base-puppet.yaml | 7 +- deployment/ironic/ironic-api-container-puppet.yaml | 6 + deployment/logging/rsyslog-container-puppet.yaml | 10 +- deployment/manila/manila-api-container-puppet.yaml | 6 + deployment/metrics/collectd-container-puppet.yaml | 1 + deployment/neutron/kill-script | 2 +- .../neutron/neutron-api-container-puppet.yaml | 10 +- deployment/nova/nova-api-container-puppet.yaml | 8 +- deployment/nova/nova-compute-container-puppet.yaml | 28 +--- deployment/nova/nova-libvirt-container-puppet.yaml | 14 +- .../nova/nova-metadata-container-puppet.yaml | 6 + .../nova/nova-vnc-proxy-container-puppet.yaml | 6 +- .../octavia/octavia-api-container-puppet.yaml | 109 ++++++++------- deployment/octavia/octavia-base.yaml | 17 +++ .../octavia-health-manager-container-puppet.yaml | 3 +- .../octavia-housekeeping-container-puppet.yaml | 3 +- .../octavia/octavia-worker-container-puppet.yaml | 3 +- .../openvswitch-dpdk-baremetal-ansible.yaml | 56 ++++++++ deployment/ovn/ovn-dbs-pacemaker-puppet.yaml | 2 +- .../placement/placement-api-container-puppet.yaml | 6 + deployment/podman/podman-baremetal-ansible.yaml | 9 ++ .../swift/swift-storage-container-puppet.yaml | 42 +++--- .../tripleo-packages-baremetal-puppet.yaml | 16 ++- deployment/undercloud/undercloud-upgrade.yaml | 2 + deployment/zaqar/zaqar-container-puppet.yaml | 6 + environments/cinder-dellemc-xtremio-config.yaml | 1 + .../cinder-dellemc-xtremio-iscsi-config.yaml | 1 + environments/external-network-vip.yaml | 5 + environments/lifecycle/upgrade-prepare.yaml | 2 +- environments/manila-cephfsganesha-config.yaml | 4 + environments/metrics/ceilometer-write-qdr.yaml | 2 +- environments/rhsm.yaml | 35 +++-- environments/undercloud.yaml | 1 + network/service_net_map.j2.yaml | 7 +- overcloud.j2.yaml | 13 +- puppet/role.role.j2.yaml | 2 + ...cinder-nfs-conversion-dir-ba9b8dce515808ce.yaml | 8 ++ ...emcache_use_advanced_pool-41ca18221e60c05a.yaml | 7 + ...a_libvirt_default_ca_cert-d1a7acaa5cbc9293.yaml | 13 ++ .../ovs-dpdk-pmd-params-55df11e67acb6736.yaml | 7 + .../notes/ovs_dpdk_pmd-74f4cfa0ef280cc0.yaml | 5 + .../upgradeleapp-per-role-ad2e84e317ec1291.yaml | 6 + .../xtremio-add-ports-option-8991f7c8acc1aadb.yaml | 5 + roles/Controller.yaml | 2 + roles/ControllerAllNovaStandalone.yaml | 2 + roles/ControllerNoCeph.yaml | 2 + roles/ControllerNovaStandalone.yaml | 2 + roles/ControllerOpenstack.yaml | 2 + roles/ControllerSriov.yaml | 2 + roles/ControllerStorageDashboard.yaml | 2 + roles/ControllerStorageNfs.yaml | 2 + roles/Networker.yaml | 2 + roles/NetworkerSriov.yaml | 2 + roles_data.yaml | 2 + 75 files changed, 639 insertions(+), 273 deletions(-)

1 0