- Release-announce - lists.openstack.org

oslo.utils 4.2.2 (victoria)
by no-reply＠openstack.org 29 Jun '20

29 Jun '20

We high-spiritedly announce the release of: oslo.utils 4.2.2: Oslo Utility library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 4.2.1..4.2.2 ---------------------------------- bc562f3 Fix uuidsentinel to follow getattr protocol Diffstat (except docs and test files) ------------------------------------- oslo_utils/fixture.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)

1 0

oslo.concurrency 4.2.0 (victoria)
by no-reply＠openstack.org 29 Jun '20

29 Jun '20

We are happy to announce the release of: oslo.concurrency 4.2.0: Oslo Concurrency library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.concurrency Download the package from: https://pypi.org/project/oslo.concurrency Please report issues through: https://bugs.launchpad.net/oslo.concurrency/+bugs For more details, please see below. 4.2.0 ^^^^^ New Features * Adds a new "timeout" argument to "processutils.execute". If set, the process will be aborted if it runs more than "timeout" seconds. Changes in oslo.concurrency 4.1.1..4.2.0 ---------------------------------------- 35e4df4 Add support for timeout to processutils.execute Diffstat (except docs and test files) ------------------------------------- oslo_concurrency/processutils.py | 16 ++++++++++++++-- releasenotes/notes/timeout-c3fb65acda04c1c7.yaml | 5 +++++ 3 files changed, 36 insertions(+), 5 deletions(-)

1 0

monasca-agent 3.0.1 (ussuri)
by no-reply＠openstack.org 29 Jun '20

29 Jun '20

We are psyched to announce the release of: monasca-agent 3.0.1: Monitoring agent for gathering metrics and sending them to the Monasca API. This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/monasca-agent Download the package from: https://tarballs.openstack.org/monasca-agent/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-agent 3.0.0..3.0.1 ------------------------------------- 7ff2c9c Fix parsing of StatsD metrics with Py3 4ba6738 Improve error handling in method that creates Monasca client 86a2721 Fix libvirt ping_checks documentation 062ac8e Add debug output for libvirt ping checks Diffstat (except docs and test files) ------------------------------------- monasca_agent/collector/checks_d/libvirt.py | 29 ++++++++++----- monasca_agent/forwarder/api/monasca_api.py | 29 ++++++++------- monasca_agent/statsd/udp.py | 1 + 5 files changed, 127 insertions(+), 39 deletions(-)

1 0

osprofiler 3.2.2 (victoria)
by no-reply＠openstack.org 29 Jun '20

29 Jun '20

We are amped to announce the release of: osprofiler 3.2.2: OpenStack Profiler Library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler Please report issues through: https://bugs.launchpad.net/osprofiler/+bugs For more details, please see below. Changes in osprofiler 3.2.1..3.2.2 ---------------------------------- 61a0ff8 Fix empty 'args' and 'kwargs' when using 'hide_args' with Jaeger Diffstat (except docs and test files) ------------------------------------- osprofiler/drivers/jaeger.py | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-)

1 0

castellan 3.2.0 (victoria)
by no-reply＠openstack.org 29 Jun '20

29 Jun '20

We are ecstatic to announce the release of: castellan 3.2.0: Generic Key Manager interface for OpenStack This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. 3.2.0 ^^^^^ Bug Fixes * In some situations, vault will not provide KV API version in the options structure. Vault documentation [1] doesn't cover cases when KV API version is not provided. A new configuration option, with default value equivalent to the latest KV API version available (kv_version=2) was added to allow precise configuration of the KV API being used. [1] https://learn.hashicorp.com/vault/secrets-management/sm- versioned-kv Changes in castellan 3.1.1..3.2.0 --------------------------------- 68c1eb5 Replaces _get_api_version with config option Diffstat (except docs and test files) ------------------------------------- castellan/key_manager/vault_key_manager.py | 30 +++++++--------------- ...ault-flaky-kv-api-version-b0cd9d62a39d2907.yaml | 10 ++++++++ 2 files changed, 19 insertions(+), 21 deletions(-)

1 0

openstacksdk 0.48.0 (victoria)
by no-reply＠openstack.org 29 Jun '20

29 Jun '20

We high-spiritedly announce the release of: openstacksdk 0.48.0: An SDK for building applications to work with OpenStack This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 0.48.0 ^^^^^^ New Features ************ * Add support for specifying stores when doing glance image uploads. * Added support for using the image import feature when creating an image. SDK will now fall back to using image import if there is an error during PUT. * The "id" field was added a query parameter for security_groups. A single security group id, or a list of security group ids can be passed. For example: conn.network.security_groups(id=['f959e85a-1a87-4b5c-ae56-dc917ceeb584', 'a55c0100-7ded-40af-9c61-1d1b9a9c2692']) * Adds support for the baremetal volume connector API. Upgrade Notes ************* * Python 3.5 is no longer supported. Changes in openstacksdk 0.47.0..0.48.0 -------------------------------------- c92e6c1c Remove enforcer a66639f8 Add support for multiple image stores 75ae5bf4 Upload image via interop import if needed 2aededaa Don't use random.SystemRandom in tests 3ee25df9 Drop python3.5 support b23928b6 Remove neutron-fwaas from the jobs' required project 0d691f78 baremetal: support for volume connectors API 8b5d4fe7 Add query parameter 'id' for security_groups 35dda579 Wait for the project cleanup to complete 6cab3a61 Fix deleting stacks by id when waiting for result Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 12 +- .../resources/baremetal/v1/volume_connector.rst | 13 ++ openstack/baremetal/v1/_proxy.py | 143 +++++++++++++ openstack/baremetal/v1/volume_connector.py | 56 +++++ openstack/cloud/openstackcloud.py | 7 + openstack/image/_base_proxy.py | 63 ++++-- openstack/image/v1/_proxy.py | 15 +- openstack/image/v2/_proxy.py | 127 +++++++++-- openstack/image/v2/image.py | 35 ++- openstack/network/v2/_proxy.py | 1 + openstack/network/v2/security_group.py | 4 +- openstack/orchestration/util/event_utils.py | 3 +- .../baremetal/test_baremetal_volume_connector.py | 161 ++++++++++++++ .../functional/network/v2/test_security_group.py | 4 + .../unit/baremetal/v1/test_volume_connector.py | 61 ++++++ openstack/utils.py | 3 + .../notes/dropped-python-3.5-b154887cce87947c.yaml | 4 + .../glance-image-stores-2baa66e6743a2f2d.yaml | 4 + .../image-import-support-97052cdbc8ce449b.yaml | 6 + ...-group-query-parameter-id-f6dda45b2c09dbaa.yaml | 9 + .../volume_connector-api-f001e6f5fc4d1688.yaml | 4 + setup.cfg | 3 +- tox.ini | 4 - 38 files changed, 1110 insertions(+), 222 deletions(-)

1 0

octavia 5.0.2 (train)
by no-reply＠openstack.org 29 Jun '20

29 Jun '20

We joyfully announce the release of: octavia 5.0.2: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 5.0.2 ^^^^^ Upgrade Notes ************* * After this upgrade, users will no longer be able use network resources they cannot see or "show" on load balancers. Operators can revert this behavior by setting the "allow_invisible_reourece_usage" configuration file setting to "True". * Any amphorae running a py3 based image must be recycled or else they will eventually fail on certificate rotation. * An amphora image update is recommended to pick up a workaround to an HAProxy issue where it would fail to reload on configuration change should the local peer name start with "-x". Security Issues *************** * Previously, if a user knew or could guess the UUID for a network resource, they could use that UUID to create load balancer resources using that UUID. Now the user must have permission to see or "show" the resource before it can be used with a load balancer. This will be the new default, but operators can disable this behavior via the setting the configuration file setting "allow_invisible_resource_usage" to "True". This issue falls under the "Class C1" security issue as the user would require a valid UUID. Bug Fixes ********* * Fixed an issue when a loadbalancer is disabled, Octavia Health Manager keeps failovering the amphorae * Add listener and pool protocol validation. The pool and listener can't be combined arbitrarily. We need some constraints on the protocol side. * Resolved broken certificate upload on py3 based amphora images. On a housekeeping certificate rotation event, the amphora would clear out its server certificate and return a 500, putting the amphora in ERROR status and breaking further communication. See upgrade notes. * Fixed an issue where the the amphora image create tool would checkout the master amphora-agent code and master upper constraints. * Fixes an issue where load balancers with more than one TLS enabled listener, using client authentication and/or backend re-encryption, may load incorrect certificates for the listener. * Fix a bug that could interrupt resource creation when performing a graceful shutdown of the house keeping service and leave resources such as amphorae in a BOOTING status. * Fixed an issue where load balancers would go into ERROR when setting data not visible to providers (e.g. tags). * Workaround an HAProxy issue where it would fail to reload on configuration change should the local peer name start with "-x". * Delay between checks on UDP healthmonitors was using the incorrect config value "timeout", when it should have been "delay". Other Notes *********** * Amphorae that are booting for a specific loadbalancer will now be linked to that loadbalancer immediately upon creation. Previously this would not happen until near the end of the process, leaving a gap during booting during which is was difficult to understand which booting amphora belonged to which loadbalancer. This was especially problematic when attempting to troubleshoot loadbalancers that entered ERROR status due to boot issues. Changes in octavia 5.0.1..5.0.2 ------------------------------- 2a18b6cc Fix neutron subnet lookup ignoring endpoint_type 1a4ccf49 Fix netcat option in udp_check.sh for CentOS/RHEL cc2c3c48 Fix batch member create for v1 amphora driver ffeb030e Update the lb_id on an amp earlier if we know it e358637a Fixed a bug: replace 'startwith' with 'startswith' b35f77d3 Workaround peer name starting with hyphen 4a95b354 Do not install diskimage-builder from Git 09e863eb Fix getting user neutron client fb8ec7a3 Fix padding logic for UDP health daemon 43a3897d Fix py3 amphora-agent cert-rotation type bug 17d66e26 Correct delay between UDP healthchecks 734a87b4 Fix healthmanager not update amphora health when LB disable 7fa2f933 Disable catching-non-exception in pylint 1933ede0 Validate resource access when creating loadbalancer or member 26dc84f5 Stop "dnf makecache" in the amphora images 5bdecaaf Pick stale amphora randomly 535dc7c6 Fix load balancer update with provider filtered params cb55a8cf Remove the barbican "Grant access" from cookbook b989f941 Add a periodic image build job 0c1cb417 Fix uncaught DB exception when trying to get a spare amphora b0334859 Use stable upper-constraints.txt in Amphora builds 164aed0e Fix house keeping graceful shutdown a59e7235 Use LUKS1 for certfs-ramfs for all distributions 84c10796 Fix multi-listener LB client auth/re-encryption db26a3c9 Revert "Fix gate issue with DIB" df5db0b0 Fix multi-listener LB with missing certificate 87704d42 Add listener and pool protocol validation 85f7abbb Cap hacking version to <2 343e3d8f Fix update API when barbican secret is missing b91a6545 Accept oslopolicy-policy-generator path arguments Diffstat (except docs and test files) ------------------------------------- .pylintrc | 1 + api-ref/source/parameters.yaml | 15 +- api-ref/source/v2/general.inc | 52 +++++++ devstack/plugin.sh | 8 +- devstack/settings | 3 - diskimage-create/diskimage-create.sh | 5 + .../amphora-agent/source-repository-amphora-agent | 4 +- .../certs-ramfs/static/usr/local/bin/certfs-ramfs | 17 +-- elements/disable-makecache/README.rst | 6 + .../post-install.d/80-disable-makecache | 18 +++ elements/disable-makecache/svc-map | 2 + .../pre-install.d/05-rm-pydistutils | 5 - etc/octavia.conf | 10 ++ .../agent/api_server/certificate_update.py | 2 +- .../amphorae/backends/utils/keepalivedlvs_query.py | 2 +- octavia/amphorae/backends/utils/udp_check.sh | 14 +- .../amphorae/drivers/haproxy/rest_api_driver.py | 98 ++++++++----- octavia/api/v2/controllers/base.py | 12 ++ octavia/api/v2/controllers/l7policy.py | 26 ++-- octavia/api/v2/controllers/listener.py | 13 +- octavia/api/v2/controllers/load_balancer.py | 28 ++-- octavia/api/v2/controllers/member.py | 8 +- octavia/api/v2/controllers/pool.py | 3 +- octavia/cmd/house_keeping.py | 23 ++-- octavia/common/clients.py | 29 +++- octavia/common/config.py | 6 + octavia/common/constants.py | 8 ++ .../jinja/haproxy/combined_listeners/jinja_cfg.py | 77 +++++------ octavia/common/jinja/lvs/templates/macros.j2 | 12 +- octavia/common/policy.py | 13 +- octavia/common/utils.py | 5 +- octavia/common/validate.py | 13 +- .../healthmanager/health_drivers/update_db.py | 17 ++- octavia/controller/worker/v1/controller_worker.py | 15 +- .../controller/worker/v1/flows/amphora_flows.py | 1 + .../controller/worker/v1/tasks/database_tasks.py | 50 ++----- .../controller/worker/v1/tasks/network_tasks.py | 2 +- .../controller/worker/v2/flows/amphora_flows.py | 1 + .../controller/worker/v2/tasks/database_tasks.py | 35 +---- .../controller/worker/v2/tasks/network_tasks.py | 2 +- octavia/db/repositories.py | 14 +- octavia/network/base.py | 9 +- octavia/network/drivers/neutron/base.py | 21 +-- octavia/network/drivers/noop_driver/driver.py | 6 +- .../drivers/haproxy/test_rest_api_driver_0_5.py | 30 ++-- .../drivers/haproxy/test_rest_api_driver_1_0.py | 31 +++-- .../haproxy/combined_listeners/test_jinja_cfg.py | 32 +++-- .../unit/common/jinja/lvs/test_lvs_jinja_cfg.py | 40 ++---- .../sample_configs/sample_configs_combined.py | 8 +- .../healthmanager/health_drivers/test_update_db.py | 22 ++- .../worker/v1/tasks/test_database_tasks.py | 45 +----- .../worker/v1/tasks/test_network_tasks.py | 16 +++ .../controller/worker/v1/test_controller_worker.py | 4 +- .../worker/v2/flows/test_amphora_flows.py | 24 +++- .../worker/v2/tasks/test_database_tasks.py | 46 +------ .../worker/v2/tasks/test_network_tasks.py | 16 +++ .../unit/network/drivers/neutron/test_base.py | 67 +++++++++ ...a-health-when-LB-disabled-46a4fb295c6d0850.yaml | 6 + .../add-protocol-validation-0f9129a045e372ce.yaml | 5 + .../allow-invisible-subnets-e30b0b5fbd216294.yaml | 16 +++ ...nt-py3-cert-upload-binary-74e0ab35c5a85c68.yaml | 11 ++ ...ora-agent-branch-checkout-e2eeb19c6aa09535.yaml | 5 + ...lient-auth-single-process-749af7791454ff03.yaml | 6 + ...ix-house-keeping-shutdown-17b04417a2c4849f.yaml | 6 + ...ix-lb-update-with-no-data-abefe7860b8fb4c7.yaml | 5 + ...ix-peer-name-prefix-hypen-e74a87e9a01b4f4c.yaml | 10 ++ ...a-to-loadbalancer-earlier-ab3dddec48b8da96.yaml | 9 ++ ...-based-on-correct-setting-6a60856de2927ccd.yaml | 5 + requirements.txt | 3 +- test-requirements.txt | 4 +- zuul.d/jobs.yaml | 14 ++ zuul.d/projects.yaml | 1 + 82 files changed, 1212 insertions(+), 482 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 239b8f99..c0f90407 100644 --- a/requirements.txt +++ b/requirements.txt @@ -60 +60,2 @@ pyroute2>=0.4.21;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) -gunicorn>=19.9.0 # MIT +gunicorn>=19.9.0,<20.0.0;python_version<'3.0' # MIT +gunicorn>=19.9.0;python_version>='3.0' # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 8e8b4466..18e1edeb 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=1.1.0 # Apache-2.0 +hacking>=1.1.0,<2 # Apache-2.0 @@ -23 +23 @@ sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD

1 0

ovn-octavia-provider 0.1.1 (ussuri)
by no-reply＠openstack.org 29 Jun '20

29 Jun '20

We exuberantly announce the release of: ovn-octavia-provider 0.1.1: OpenStack Octavia integration with OVN This release is part of the ussuri stable release series. The source is available from: https://opendev.org/openstack/ovn-octavia-provider Download the package from: https://tarballs.openstack.org/ovn-octavia-provider/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in ovn-octavia-provider 0.1.0..0.1.1 -------------------------------------------- 2448c49 Do not send status update in case of IpAddressAlreadyAllocated d87b784 Update the devstack local.conf sample file fdc7776 Add support for OVN LB selection fields 7401642 Fix E741 pep8 errors 8abe519 Spawn long-running processes in the driver agent 5ea36c3 Update sample local.conf files to point stable/ussuri 618ae90 Make ovn-octavia-provider-v2-dsvm-scenario voting faea190 Improve test coverage 80c5c6c Update TOX/UPPER_CONSTRAINTS_FILE for stable/ussuri 757bfb2 Update .gitreview for stable/ussuri Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/local.conf.sample | 62 +++++- devstack/plugin.sh | 1 + devstack/settings | 3 +- ovn_octavia_provider/agent.py | 40 ++++ ovn_octavia_provider/common/config.py | 3 + ovn_octavia_provider/common/constants.py | 11 + ovn_octavia_provider/driver.py | 135 ++++++------ setup.cfg | 4 +- tox.ini | 6 +- zuul.d/base.yaml | 3 + zuul.d/project.yaml | 4 +- 15 files changed, 596 insertions(+), 189 deletions(-)

1 0

oslo.service 2.3.1 (victoria)
by no-reply＠openstack.org 29 Jun '20

29 Jun '20

We are tickled pink to announce the release of: oslo.service 2.3.1: oslo.service library This release is part of the victoria release series. The source is available from: https://opendev.org/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through: https://bugs.launchpad.net/oslo.service/+bugs For more details, please see below. Changes in oslo.service 2.3.0..2.3.1 ------------------------------------ caf66be Fix wsgi SSL tests for wsgi module under python 3 fb1ed40 Reactivate wsgi test related to socket option under python 3 b9f8224 Align tests with monkey patch original current_thread _active Diffstat (except docs and test files) ------------------------------------- 3 files changed, 37 insertions(+), 14 deletions(-)

1 0

oslo.cache 1.33.4 (stein)
by no-reply＠openstack.org 25 Jun '20

25 Jun '20

We jubilantly announce the release of: oslo.cache 1.33.4: Cache storage for OpenStack projects. This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. Changes in oslo.cache 1.33.3..1.33.4 ------------------------------------ 157ed3f Avoid tox_install.sh for constraints support 8490915 Fix lower-constraints 03f1840 Cap Bandit below 1.6.0 and update Sphinx requirement b933dbb Replace git.openstack.org URLs with opendev.org URLs. 35c925b Use upper constraints from opendev.org Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- lower-constraints.txt | 2 +- requirements.txt | 2 +- test-requirements.txt | 5 +++- tools/tox_install.sh | 35 -------------------------- tox.ini | 50 ++++++++++++++++++-------------------- 12 files changed, 48 insertions(+), 84 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 15c99b9..7a0d951 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ dogpile.cache>=0.6.2 # BSD -six>=1.10.0 # MIT +six>=1.11.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 0fc8517..0bf6854 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ pifpaf>=0.10.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<1.6.0 # Apache-2.0 @@ -10,0 +11,3 @@ stestr>=2.0.0 # Apache-2.0 +python-memcached>=1.56 # PSF +pymongo!=3.1,>=3.0.2 # Apache-2.0 +etcd3gw>=0.2.0 # Apache-2.0

1 0