- Release-announce - lists.openstack.org

ironic-inspector 11.7.0 (bobcat)
by no-reply＠openstack.org 21 Sep '23

21 Sep '23

We are jazzed to announce the release of: ironic-inspector 11.7.0: Hardware introspection for OpenStack Bare Metal This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. Changes in ironic-inspector 11.6.0..11.7.0 ------------------------------------------ a696dbe CI: re-add genade job to normal CI queues 31e07e4 Fix bindep for debian bookworm for py3.11 be3d377 Update the project status and move broken jobs to experimental 278ba52 Handle bracketed IPv6 redfish_address 4a6bdaa docs: fix typo 13a0d93 tox: Remove basepython c2cb0f2 Support LLDP data coming in the new field Diffstat (except docs and test files) ------------------------------------- bindep.txt | 6 +- ironic_inspector/common/ironic.py | 4 + ironic_inspector/plugins/lldp_basic.py | 3 +- ironic_inspector/plugins/local_link_connection.py | 3 +- ironic_inspector/test/unit/test_common_ironic.py | 8 ++ .../test/unit/test_plugins_lldp_basic.py | 111 +++++++++++++++++++-- .../notes/bug-2036455-bd3f6381b78c20db.yaml | 7 ++ .../notes/project-status-4ce6dc06e8b8a0d1.yaml | 8 ++ tox.ini | 2 - zuul.d/ironic-inspector-jobs.yaml | 9 +- zuul.d/project.yaml | 9 +- 12 files changed, 147 insertions(+), 25 deletions(-)

1 0

cloudkitty-tempest-plugin 2.8.0 (bobcat)
by no-reply＠openstack.org 21 Sep '23

21 Sep '23

We are thrilled to announce the release of: cloudkitty-tempest-plugin 2.8.0: Tempest plugin for CloudKitty This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/cloudkitty-tempest-plugin Download the package from: https://tarballs.openstack.org/cloudkitty-tempest-plugin/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cloudkitty- tempest-plugin For more details, please see below. Changes in cloudkitty-tempest-plugin xena-last..2.8.0 ----------------------------------------------------- a93eff4 Add stable/2023.1 jobs on master gate 66586bb Cleanup py27 support Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 +++++++ setup.py | 9 --------- 2 files changed, 7 insertions(+), 9 deletions(-)

1 0

glance-tempest-plugin 0.7.0 (bobcat)
by no-reply＠openstack.org 21 Sep '23

21 Sep '23

We are excited to announce the release of: glance-tempest-plugin 0.7.0: Tempest plugin tests for Glance. This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/glance-tempest-plugin Download the package from: https://tarballs.openstack.org/glance-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. Changes in glance-tempest-plugin 0.6.0..0.7.0 --------------------------------------------- d6f7287 glance-tempest-plugin branchless: add stable branch testing a7f1754 Assert on system scope permission based on supported flag Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 45 ++- glance_tempest_plugin/config.py | 21 ++ glance_tempest_plugin/plugin.py | 12 +- 4 files changed, 253 insertions(+), 162 deletions(-)

1 0

vitrage-tempest-plugin 6.2.0 (bobcat)
by no-reply＠openstack.org 21 Sep '23

21 Sep '23

We are amped to announce the release of: vitrage-tempest-plugin 6.2.0: Tempest plugin for Vitrage project This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/vitrage-tempest-plugin Download the package from: https://tarballs.openstack.org/vitrage-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/vitrage/+bugs For more details, please see below. Changes in vitrage-tempest-plugin wallaby-last..6.2.0 ----------------------------------------------------- 816b235 Add stable/zed jobs on master gate Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 14 ++++++++++++++ 1 file changed, 14 insertions(+)

1 0

ironic 20.1.2 (yoga)
by no-reply＠openstack.org 21 Sep '23

21 Sep '23

We enthusiastically announce the release of: ironic 20.1.2: OpenStack Bare Metal Provisioning This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 20.1.2 ^^^^^^ Upgrade Notes ************* * Adds "sha256", "sha384" and "sha512" as supported SNMPv3 authentication protocols to iRMC driver. Bug Fixes ********* * Fixes Ironic integration with Cinder because of changes which resulted as part of the recent Security related fix in bug 2004555 (https://launchpad.net/bugs/2004555) The work in Ironic to track this fix was logged in bug 2019892 (https://bugs.launchpad.net/ironic/+bug/2019892) Ironic now sends a service token to Cinder, which allows for access restrictions added as part of the original CVE-2023-2088 fix to be appropriately bypassed. Ironic was not vulnerable, but the restrictions added as a result did impact Ironic's usage. This is because Ironic volume attachments are not on a shared "compute node", but instead mapped to the physical machines and Ironic handles the attachment life- cycle after initial attachment. * When aborting cleaning, the "last_error" field is no longer initially empty. It is now populated on the state transition to "clean failed". * When cleaning or deployment fails, the "last_error" field is no longer temporary set to "None" while the power off action is running. * Fixes an issue where if selinux is enabled and enforcing, and the published image is a hardlink, the source selinux context is preserved, causing access denied when retrieving the image using hardlink URL. * Fixes bug of iRMC driver in parse_driver_info where, if FIPS is enabled, SNMP version is always required to be version 3 even though iRMC driver's xxx_interface doesn't use SNMP actually. * Fixes "'NoneType' object is not iterable" in conductor logs for "redfish" and "idrac-redfish" RAID clean and deploy steps. The message should no longer appear. For affected nodes re-create the node or delete "raid_configs" entry from "driver_internal_info" field. * Fixes an issue in the online upgrade logic where database models for Node Traits and BIOS Settings resulted in an error when performing the online data migration. This was because these tables were originally created as extensions of the Nodes database table, and the schema of the database was slightly different enough to result in an error if there was data to migrate in these tables upon upgrade, which would have occured if an early BIOS Setting adopter had data in the database prior to upgrading to the Yoga release of Ironic. The online upgrade parameter now subsitutes an alternate primary key name name when applicable. * Fixes SNMPv3 message authentication and encryption functionality of iRMC driver. The SNMPv3 authentication between iRMC driver and iRMC was only by the security name with no passwords and encryption. To increase security, the following parameters are now added to the node's "driver_info", and can be used for authentication: * "irmc_snmp_user" * "irmc_snmp_auth_password" * "irmc_snmp_priv_password" * "irmc_snmp_auth_proto" (Optional, defaults to "sha") * "irmc_snmp_priv_proto" (Optional, defaults to "aes") "irmc_snmp_user" replaces "irmc_snmp_security". "irmc_snmp_security" will be ignored if "irmc_snmp_user" is set. "irmc_snmp_auth_proto" and "irmc_snmp_priv_proto" can also be set through the following options in the "[irmc]" section of "/etc/ironic/ironic.conf": * "snmp_auth_proto" * "snmp_priv_proto" * Fixes a race condition in PXE initialization where logic to retry what we suspect as potentially failed PXE boot operations was not consulting if an "agent token" had been established, which is the very first step in agent initialization. * Fixes an issue where an agent token was being orphaned if a baremetal node timed out during cleaning operations, leading to issues where the node would not be able to establish a new token with Ironic upon future in some cases. We now always wipe the token in this case. Other Notes *********** * Updates the minimum version of "python-scciclient" library to "0.12.2". Changes in ironic 20.1.1..20.1.2 -------------------------------- 72d124856 [iRMC] Fix parse_driver_info bug enforcing SNMP v3 under FIPS mode 4ec0ee677 [ci] [stable-only] Cinder fixed; make BFV job vote d1ad9e8d0 [stable-only] [CI] BFV, RBAC jobs marked non-voting 94358e471 Fix Cinder Integration fallout from CVE-2023-2088 ad227de24 Fix online upgrades for Bios/Traits 59cdb9aeb Wipe Agent Token when cleaning timeout occcurs 92c187a32 Do not move nodes to CLEAN FAILED with empty last_error e5267b58e Move and fix reno config for releasenotes job 31a0b0c1d Fix selinux context of published image hardlink 959fc9163 Fix "'NoneType' object is not iterable" in RAID 26573bed3 Prevent pxe retry when agent token exists 177e93de9 Fixes for tox 4.0 1f4fabf88 Add support auth protocols for iRMC c274231bf Add SNMPv3 authentication functionality Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 2 +- ironic/common/cinder.py | 71 +++++- ironic/common/keystone.py | 24 +- ironic/common/states.py | 3 + ironic/common/utils.py | 12 + ironic/conductor/cleaning.py | 26 +- ironic/conductor/manager.py | 3 +- ironic/conductor/task_manager.py | 11 +- ironic/conductor/utils.py | 12 +- ironic/conf/irmc.py | 28 ++- ironic/db/sqlalchemy/api.py | 33 ++- ironic/drivers/modules/image_utils.py | 10 + ironic/drivers/modules/irmc/common.py | 249 +++++++++++++++--- ironic/drivers/modules/irmc/inspect.py | 24 +- ironic/drivers/modules/irmc/power.py | 22 +- ironic/drivers/modules/pxe_base.py | 6 + ironic/drivers/modules/redfish/raid.py | 8 +- .../unit/drivers/modules/redfish/test_raid.py | 4 + releasenotes/config.yaml | 5 + .../notes/cinder-2019892-6b5a9de5c5f05aa6.yaml | 16 ++ .../notes/cleaning-error-5c13c33c58404b97.yaml | 8 + ...ix-context-image-hardlink-16f452974abc7327.yaml | 7 + ...nforcing-snmpv3-with-fips-e45971d363925ec3.yaml | 6 + ...pe-object-is-not-iterable-0592926d890d6c11.yaml | 7 + ...-online-version-migration-db432a7b239647fa.yaml | 14 ++ ...c-add-snmp-auth-protocols-3ff7597cea7ef9dd.yaml | 5 + .../irmc-add-snmpv3-security-fca05bfc30f50d1a.yaml | 28 +++ ...e-retry-when-token-exists-a4f38f7da56c1397.yaml | 7 + ...ken-upon-cleaning-timeout-c9add514fad1b02c.yaml | 7 + reno.yaml | 4 - tox.ini | 9 +- zuul.d/project.yaml | 11 +- 43 files changed, 1052 insertions(+), 151 deletions(-)

1 0

ec2api-tempest-plugin 1.7.0 (bobcat)
by no-reply＠openstack.org 21 Sep '23

21 Sep '23

We are ecstatic to announce the release of: ec2api-tempest-plugin 1.7.0: Tempest plugin for ec2-api This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/ec2api-tempest-plugin Download the package from: https://tarballs.openstack.org/ec2api-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/ec2-api/+bugs For more details, please see below. Changes in ec2api-tempest-plugin xena-last..1.7.0 ------------------------------------------------- 1036f53 Add stable/2023.1 jobs on master gate Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 +++++++ 1 file changed, 7 insertions(+)

1 0

designate 15.0.1 (zed)
by no-reply＠openstack.org 21 Sep '23

21 Sep '23

We are amped to announce the release of: designate 15.0.1: DNS as a Service This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/designate Download the package from: https://tarballs.openstack.org/designate/ Please report issues through: https://bugs.launchpad.net/designate/+bugs For more details, please see below. 15.0.1 ^^^^^^ Bug Fixes * Fixed bug 2015762 which could cause managed records to occasionally fail to delete due to a race condition. (https://bugs.launchpad.net/designate/+bug/2015762) Changes in designate 15.0.0..15.0.1 ----------------------------------- 2537aedf Remove designate-tox-dnspython-latest from stable a99367cf Fix TsigKeyring issues with dnspython 2.x 6e7b7e89 [CI] Reduce workers and disable cinder to save on memory b518dacc Use ids when removing sink managed records eb67571d Use ids when removing ptr records be775801 [coordination] backend_url should be secret 24ac8d7d Removed unsupported test B309 from bandit 376d5912 Fix dns.resolver import for mdns 96d788c6 CI: Move queue configuration into project-template Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 9 ++- designate/central/service.py | 26 ++++--- designate/conf/coordination.py | 1 + designate/dnsutils.py | 3 +- designate/mdns/handler.py | 21 +++-- designate/notification_handler/base.py | 26 ++++--- ...lete-fails-intermittently-53168cf5cd830b59.yaml | 7 ++ tox.ini | 2 +- 12 files changed, 238 insertions(+), 43 deletions(-)

1 0

blazar-tempest-plugin 0.11.0 (bobcat)
by no-reply＠openstack.org 21 Sep '23

21 Sep '23

We are ecstatic to announce the release of: blazar-tempest-plugin 0.11.0: Tempest plugin for Blazar Project This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/blazar-tempest-plugin Download the package from: https://tarballs.openstack.org/blazar-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. Changes in blazar-tempest-plugin xena-last..0.11.0 -------------------------------------------------- 9dd53ae Cleanup py27 support 2758d56 Add stable/2023.1 jobs on master gate Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 +++++++ setup.py | 10 +--------- 2 files changed, 8 insertions(+), 9 deletions(-)

1 0

trove-tempest-plugin 2.2.0 (bobcat)
by no-reply＠openstack.org 21 Sep '23

21 Sep '23

We joyfully announce the release of: trove-tempest-plugin 2.2.0: Tempest plugin for Trove project This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/trove-tempest-plugin Download the package from: https://tarballs.openstack.org/trove-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/trove/+bugs For more details, please see below. Changes in trove-tempest-plugin xena-last..2.2.0 ------------------------------------------------ d63e17a Replace deprecated terms 9122baa Add expect_op_status for wait_for_instance_status function. 826cd69 Add python 3.10 to setup.cfg metadata 089f238 remove trove-tempest-ipv6-only to experimental pipline 35906b2 enable trove backup tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 14 ++++++++----- setup.cfg | 2 ++ tempest_blacklist.txt | 5 ----- tempest_exclude_list.txt | 3 +++ 9 files changed, 60 insertions(+), 26 deletions(-)

1 0

zaqar-tempest-plugin 1.7.0 (bobcat)
by no-reply＠openstack.org 21 Sep '23

21 Sep '23

We enthusiastically announce the release of: zaqar-tempest-plugin 1.7.0: Tempest plugin zaqar_tempest_plugin This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/zaqar-tempest-plugin Download the package from: https://tarballs.openstack.org/zaqar-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/zaqar/+bugs For more details, please see below. Changes in zaqar-tempest-plugin 1.3.0..1.7.0 -------------------------------------------- 3813c99 Migrate from testr to stestr Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 +- .stestr.conf | 3 +++ .testr.conf | 7 ------- test-requirements.txt | 2 +- tox.ini | 18 ++++++++++++++---- 5 files changed, 19 insertions(+), 13 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 93fc72c..d14547f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10 +10 @@ oslotest>=1.10.0 # Apache-2.0 -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.0.0 # Apache-2.0

1 0