- Release-announce - lists.openstack.org

neutron-fwaas-dashboard 8.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for neutron-fwaas-dashboard for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/neutron-fwaas-dashboard/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/neutron-fwaas-dashboard/src/branch/stable/dal… Release notes for neutron-fwaas-dashboard can be found at: https://docs.openstack.org/releasenotes/neutron-fwaas-dashboard/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/neutron-fwaas-dashboard/+bugs and tag it *dalmatian-rc-potential* to bring it to the neutron-fwaas-dashboard release crew's attention.

1 0

kayobe 15.5.0 (bobcat)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We are psyched to announce the release of: kayobe 15.5.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 15.5.0 ^^^^^^ New Features ************ * Adds support for specifying "boot_firmware" and "machine" variables to seed and infra VMs. This can be used to launch VMs in UEFI boot mode with Q35 machine type. * Bumps stackhpc.libvirt-vm Ansible role to "v1.16.1". Bug Fixes ********* * "eos_config" does not support the "provider" parameter since Ansible 7. Users are required to update their configuration according to Arista EOS documentation (https://docs.openstack.org/kayobe/latest/configuration/reference /physical-network.html#arista-eos). * Fixes a bug where systemd-networkd was not permanently enabled when the unit was already in state "runtime-enabled". LP#2073100 Changes in kayobe 15.4.0..15.5.0 -------------------------------- c642a626 arista-switch: Fix eos_config call e0afd3a3 CI: Add openstack-tox-pep8 job, fix pep8 failures 4fa4445a seed-vm/infra-vms: Add support for EFI and q35 06c7c02c Bump stackhpc.systemd_networkd role to v1.0.6 abf7b293 Stop replacing dashes with underscores for Kolla interfaces Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/infra-vms | 6 ++++++ ansible/inventory/group_vars/all/seed-vm | 6 ++++++ ansible/inventory/group_vars/all/switches/arista | 22 ------------------- ansible/roles/arista-switch/tasks/main.yml | 4 +--- ansible/roles/infra-vms/tasks/deploy.yml | 2 ++ ansible/roles/infra-vms/tasks/destroy.yml | 1 + ansible/seed-vm-deprovision.yml | 15 ++++++++----- ansible/seed-vm-provision.yml | 3 ++- .../configuration/reference/physical-network.rst | 11 ++++------ etc/kayobe/infra-vms.yml | 6 ++++++ etc/kayobe/seed-vm.yml | 6 ++++++ kayobe/plugins/action/kolla_ansible_host_vars.py | 4 ---- .../plugins/action/test_kolla_ansible_host_vars.py | 20 ----------------- playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 7 ++++++ .../notes/bug-2058365-a9acdb3cdf2a29f9.yaml | 7 ++++++ ...systemd-networkd-enabling-10bf4e5f0903c311.yaml | 6 ++++++ ...-infra-vm-boot-fw-machine-096251c45653f98c.yaml | 8 +++++++ requirements.yml | 6 +++--- zuul.d/jobs.yaml | 25 ++++++++++++++++++++++ zuul.d/project.yaml | 3 +++ 21 files changed, 105 insertions(+), 69 deletions(-)

1 0

kayobe 14.7.0 (antelope)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We are tickled pink to announce the release of: kayobe 14.7.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 14.7.0 ^^^^^^ New Features ************ * Adds support for specifying "boot_firmware" and "machine" variables to seed and infra VMs. This can be used to launch VMs in UEFI boot mode with Q35 machine type. * Bumps stackhpc.libvirt-vm Ansible role to "v1.16.1". Bug Fixes ********* * "eos_config" does not support the "provider" parameter since Ansible 7. Users are required to update their configuration according to Arista EOS documentation (https://docs.openstack.org/kayobe/latest/configuration/reference /physical-network.html#arista-eos). * Fixes a bug where systemd-networkd was not permanently enabled when the unit was already in state "runtime-enabled". LP#2073100 Changes in kayobe 14.6.0..14.7.0 -------------------------------- afacd339 arista-switch: Fix eos_config call ace210f9 seed-vm/infra-vms: Add support for EFI and q35 07047917 Bump stackhpc.systemd_networkd role to v1.0.6 ff60f19a Stop replacing dashes with underscores for Kolla interfaces Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/infra-vms | 6 ++++++ ansible/inventory/group_vars/all/seed-vm | 6 ++++++ ansible/inventory/group_vars/all/switches/arista | 22 ------------------- ansible/roles/arista-switch/tasks/main.yml | 4 +--- ansible/roles/infra-vms/tasks/deploy.yml | 2 ++ ansible/roles/infra-vms/tasks/destroy.yml | 1 + ansible/seed-vm-deprovision.yml | 15 ++++++++----- ansible/seed-vm-provision.yml | 3 ++- .../configuration/reference/physical-network.rst | 11 ++++------ etc/kayobe/infra-vms.yml | 6 ++++++ etc/kayobe/seed-vm.yml | 6 ++++++ kayobe/plugins/action/kolla_ansible_host_vars.py | 4 ---- .../plugins/action/test_kolla_ansible_host_vars.py | 20 ----------------- playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 7 ++++++ .../notes/bug-2058365-a9acdb3cdf2a29f9.yaml | 7 ++++++ ...systemd-networkd-enabling-10bf4e5f0903c311.yaml | 6 ++++++ ...-infra-vm-boot-fw-machine-096251c45653f98c.yaml | 8 +++++++ requirements.yml | 6 +++--- zuul.d/jobs.yaml | 25 ++++++++++++++++++++++ zuul.d/project.yaml | 2 ++ 20 files changed, 102 insertions(+), 65 deletions(-)

1 0

kolla-ansible 16.7.0 (antelope)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We exuberantly announce the release of: kolla-ansible 16.7.0: Ansible Deployment of Kolla containers This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 16.7.0 ^^^^^^ New Features ************ * Modifies public API firewalld rules to be applied immediately to a running firewalld service. This requires firewalld to be running, but avoids reloading firewalld, which is disruptive due to the way in which firewalld builds its firewall chains. * Added a command to upgrade to a target version of RabbitMQ. This is required before a SLURP upgrade. See the docs for more details: https://docs.openstack.org/kolla-ansible/latest/reference/message- queues/rabbitmq.html#slurp Bug Fixes ********* * Fixes an deploy opensearch with enable TLS on the internal VIP. * Fixes handling of openvswitch on "manila-share" nodes. LP#1993285 * Fixes behaviour of Change Password screen in Horizon until bug #2073639 is resolved. LP#2073159 * Fixes the Python requests library issue when using custom CA by adding the REQUESTS_CA environment variable to the kolla-toolbox container. See LP#1967132 * Fixes configuration of CloudKitty when internal TLS is enabled. LP#1998831 * Fixes the dimensions comparison when we set values like *1g* in the container dimensions configuration, making the docker container getting restarted even with no changes, as we are comparing *1g* with *1073741824*, which is displayed in the docker inspect while *1g* is in the configuration. * Fixes the detection of the Nova Compute Ironic service when a custom *host* option is set in the service config file. See LP#2056571 * Removes the default */tmp/* mountpoint from the horizon container. This change is made to harden the container and prevent potential security issues. For more information, see the Bug Report: LP#2068126. * Fixes an issue where OVN northbound or southbound database deployment could fail when a new leader is elected. LP#2059124 Changes in kolla-ansible 16.6.0..16.7.0 --------------------------------------- 13918ee58 Apply public firewalld rules immediately 36ca3b0d1 Add REQUESTS_CA_BUNDLE to kolla-toolbox container 4b6508724 hardening horizon: don't mount hosts /tmp dfd4eef81 Add command to upgrade to a target version of RMQ 14a21976a Fix issue with Swift Recon middleware 6d94a5017 Fix post-config of OVS for manila-share servers eced788ab Work around OVN DB leader election race condition 558f6c298 Restart OVS container after hw-offload change e8aa5d212 Add /v3 suffix to OPENSTACK_KEYSTONE_URL 97bcdedda fix flake8 error in database_shards.py c2693987a Support custom Nova Compute Ironic host names b40fabc6e Support CloudKitty deployment with internal TLS 58683d056 Fix the docker container dimensions comparison for short notation 73415f862 Add ca_path for module uri in opensearch role Diffstat (except docs and test files) ------------------------------------- ansible/module_utils/kolla_container_worker.py | 79 ++++++++++++++++++++-- ansible/rabbitmq-upgrade.yml | 21 ++++++ ansible/roles/cloudkitty/defaults/main.yml | 8 +-- ansible/roles/cloudkitty/tasks/bootstrap.yml | 3 + ansible/roles/common/defaults/main.yml | 1 + ansible/roles/haproxy-config/tasks/main.yml | 7 +- ansible/roles/horizon/defaults/main.yml | 1 - ansible/roles/horizon/templates/local_settings.j2 | 3 +- ansible/roles/loadbalancer/handlers/main.yml | 6 -- .../nova-cell/tasks/wait_discover_computes.yml | 2 +- ansible/roles/nova-cell/templates/nova.conf.j2 | 2 +- ansible/roles/opensearch/handlers/main.yml | 2 + ansible/roles/opensearch/tasks/post-config.yml | 4 ++ ansible/roles/openvswitch/tasks/post-config.yml | 4 ++ ansible/roles/ovn-db/defaults/main.yml | 2 + ansible/roles/ovn-db/tasks/bootstrap-db.yml | 10 +++ ansible/roles/rabbitmq/defaults/main.yml | 2 + ansible/roles/swift/tasks/start.yml | 2 + kolla_ansible/database_shards.py | 4 +- .../notes/add-opensearch-uri-68a657c55ce9c9f1.yaml | 4 ++ .../notes/bug-1993285-127fe764e461465a.yaml | 5 ++ .../notes/bug-2073159-c54c773c72c8fb11.yaml | 6 ++ .../notes/bug-923105-d451a78930973a82.yaml | 7 ++ .../cloudkitty-internal-tls-c3e18be2a9f95c5d.yaml | 5 ++ .../firewalld-immediate-c2abf09977c455a9.yaml | 7 ++ ...ges-when-using-dimensions-ad94b657b6c29cfc.yaml | 10 +++ ...ompute-ironic-host-option-a7a3f6ae095f5201.yaml | 6 ++ .../harden_horizon_tmp_usage-0d690e49645b99a8.yaml | 6 ++ ...mq-target-upgrade-command-d5f9d9fc27fa28f8.yaml | 6 ++ ...round-ovn-leader-election-f7f75e93e9300d96.yaml | 6 ++ tools/kolla-ansible | 8 +++ 34 files changed, 372 insertions(+), 25 deletions(-)

1 0

barbican 16.0.1 (antelope)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We are chuffed to announce the release of: barbican 16.0.1: OpenStack Secure Key Management This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/barbican Download the package from: https://tarballs.openstack.org/barbican/ Please report issues through: https://bugs.launchpad.net/barbican/+bugs For more details, please see below. 16.0.1 ^^^^^^ Security Issues * System scope has been removed from the RBAC policies as specified in the Consistent and Secure Default RBAC community goal. See: https://governance.openstack.org/tc/goals/selected/consistent-and- secure-rbac.html APIs that required system scoped tokens can now be accessed by using a project scoped token with the "admin" role. Changes in barbican 16.0.0..16.0.1 ---------------------------------- 9c8fb8c3 Update secret:delete policy to allow admin to delete secret 2f3df026 Remove System scope from policy b38b2139 Fix functional tests e2bd3b95 Stable-only: Remove TripleO job b5c2f838 Update TOX_CONSTRAINTS_FILE for stable/2023.1 441f7d47 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 10 ++------ barbican/common/policies/base.py | 7 ------ barbican/common/policies/consumers.py | 28 +++++++++++----------- barbican/common/policies/quotas.py | 12 +++++----- barbican/common/policies/secrets.py | 6 +++-- barbican/common/policies/secretstores.py | 8 +++---- barbican/common/policies/transportkeys.py | 12 +++++----- ...-system-scope-from-policy-f2f68c42c0742812.yaml | 8 +++++++ tox.ini | 12 ++++++---- 10 files changed, 53 insertions(+), 51 deletions(-)

1 0

networking-sfc 19.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for networking-sfc for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/networking-sfc/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/networking-sfc/src/branch/stable/dalmatian Release notes for networking-sfc can be found at: https://docs.openstack.org/releasenotes/networking-sfc/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/networking-sfc/+bugs and tag it *dalmatian-rc-potential* to bring it to the networking-sfc release crew's attention.

1 0

tap-as-a-service 14.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for tap-as-a-service for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/tap-as-a-service/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/tap-as-a-service/src/branch/stable/dalmatian Release notes for tap-as-a-service can be found at: https://docs.openstack.org/releasenotes/tap-as-a-service/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/tap-as-a-service/+bugs and tag it *dalmatian-rc-potential* to bring it to the tap-as-a-service release crew's attention.

1 0

networking-bagpipe 21.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for networking-bagpipe for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/networking-bagpipe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/networking-bagpipe/src/branch/stable/dalmatian Release notes for networking-bagpipe can be found at: https://docs.openstack.org/releasenotes/networking-bagpipe/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/networking-bagpipe/+bugs and tag it *dalmatian-rc-potential* to bring it to the networking-bagpipe release crew's attention.

1 0

glance 29.0.0.0rc1 (dalmatian)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

Hello everyone, A new release candidate for glance for the end of the Dalmatian cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/glance/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Dalmatian release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/dalmatian release branch at: https://opendev.org/openstack/glance/src/branch/stable/dalmatian Release notes for glance can be found at: https://docs.openstack.org/releasenotes/glance/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/glance/+bugs and tag it *dalmatian-rc-potential* to bring it to the glance release crew's attention.

1 0

kolla 18.2.0 (caracal)
by no-reply＠openstack.org 12 Sep '24

12 Sep '24

We are glad to announce the release of: kolla 18.2.0: Kolla OpenStack Deployment This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 18.2.0 ^^^^^^ Bug Fixes * Apache services like Keystone now started with correct unicode locale. Keystone under Apache on Ubuntu will fail with a UnicodeEncodeError when LDAP driver and DEBUG are enabled. LP#2076453 * Fixed a bug preventing image builds when requirements are provided from git type source. LP#2074075 * Fixes an issue where kolla-toolbox will fail to build due to mismatched rabbitmq-server dependencies. LP#2066171 Changes in kolla 18.1.0..18.2.0 ------------------------------- 4df43abd7 Fix symlinking of openstack-base source 9c54f236b keystone: Fix requests-kerberos installation 08f6b89cc CI: Disable CentOS/Rocky/Ubuntu aarch64 jobs 7bc03b99f Configure Apache services to use correct locale 6f755f9e7 Trivial fix letsencrypt base image 14081a825 Pass rabbitmq apt preferences into kolla-toolbox Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 3 --- .zuul.d/rocky.yaml | 3 --- .zuul.d/ubuntu.yaml | 3 --- .../notes/configure-apache-locale-d0150e5881f00e65.yaml | 7 +++++++ releasenotes/notes/fix-git-build-23c8fe6c4b0d92c4.yaml | 6 ++++++ ...s-rmq-preferences-into-kolla-toolbox-32d7209c4cf1f3c9.yaml | 6 ++++++ 13 files changed, 51 insertions(+), 18 deletions(-)

1 0