- Release-announce - lists.openstack.org

cinder 20.3.0 (yoga)
by no-reply＠openstack.org 17 May '23

17 May '23

We joyfully announce the release of: cinder 20.3.0: OpenStack Block Storage This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 20.3.0 ^^^^^^ Known Issues ************ * For security reasons (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) manually deleting an attachment, manually doing the "os-terminate_connection", "os- detach" or "os-force_detach" actions will no longer be allowed in most cases unless the request is coming from another OpenStack service on behalf of a user. Upgrade Notes ************* * Nova must be configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html) **and** cinder must be configured to recognize at least one of the roles that the nova service user has been assigned in keystone. By default, cinder will recognize the "service" role, so if the nova service user is assigned a differently named role in your cloud, you must adjust your cinder configuration file ("service_token_roles" configuration option in the "keystone_authtoken" section). If nova and cinder are not configured correctly in this regard, detaching volumes will no longer work (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Critical Issues *************** * Detaching volumes will fail if Nova is not configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html), please read the upgrade section for more information. (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Security Issues *************** * As part of the fix for Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) cinder now rejects user attachment delete requests for attachments that are being used by nova instances to ensure that no leftover devices are produced on the compute nodes which could be used to access another project's volumes. Terminate connection, detach, and force detach volume actions (calls that are not usually made by users directly) are, in most cases, not allowed for users. Bug Fixes ********* * Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) Fixed issue where a user manually deleting an attachment, calling terminate connection, detach, or force detach, for a volume that is still used by a nova instance resulted in leftover devices on the compute node. These operations will now fail when it is believed to be a problem. Changes in cinder 20.2.0..20.3.0 -------------------------------- a66f4afa2 Reject unsafe delete attachment calls Diffstat (except docs and test files) ------------------------------------- api-ref/source/v3/attachments.inc | 15 ++ api-ref/source/v3/volumes-v3-volumes-actions.inc | 55 ++++++ cinder/compute/nova.py | 7 + cinder/exception.py | 7 + cinder/volume/api.py | 98 +++++++++++ .../configuration/block-storage/service-token.rst | 46 +++-- .../redirect-detach-nova-4b7b7902d7d182e0.yaml | 43 +++++ 15 files changed, 504 insertions(+), 23 deletions(-)

1 0

puppet-openstack_extras 19.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are stoked to announce the release of: puppet-openstack_extras 19.4.1: Puppet module for OpenStack Openstack_extras This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-openstack_extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ Please report issues through: https://bugs.launchpad.net/puppet-openstack-extras/+bugs For more details, please see below. Changes in puppet-openstack_extras 19.4.0..19.4.1 ------------------------------------------------- 8160f0b Prepare the final stable/xena release e1bc2c1 setuptools: Disable auto discovery ff5aacf Use stable/xena release by default f4d89b9 Update TOX_CONSTRAINTS_FILE for stable/xena 1561dd0 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/repo/debian/params.pp | 2 +- manifests/repo/redhat/params.pp | 2 +- metadata.json | 2 +- setup.py | 1 + spec/classes/openstack_extras_repo_debian_debian_spec.rb | 14 +++++++------- spec/classes/openstack_extras_repo_debian_ubuntu_spec.rb | 6 +++--- spec/classes/openstack_extras_repo_redhat_redhat_spec.rb | 8 ++++---- tox.ini | 2 +- 9 files changed, 20 insertions(+), 18 deletions(-)

1 0

puppet-vswitch 15.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We eagerly announce the release of: puppet-vswitch 15.4.1: Puppet module for OpenStack Vswitch This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-vswitch Download the package from: https://tarballs.openstack.org/puppet-vswitch/ Please report issues through: https://bugs.launchpad.net/puppet-vswitch/+bugs For more details, please see below. Changes in puppet-vswitch 15.4.0..15.4.1 ---------------------------------------- aea7e21 Prepare the final stable/xena release 7eb7c1c setuptools: Disable auto discovery d8d7339 vs_config: Fix broken idempotency with nil/empty value f5ee885 Do not use service resource to restart openvswitch service 654df9f Update TOX_CONSTRAINTS_FILE for stable/xena 32004ad Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lib/puppet/provider/vs_config/ovs.rb | 14 ++++++++++++-- lib/puppet/type/vs_config.rb | 15 +++++++++++++++ manifests/dpdk.pp | 14 +++++++++++--- manifests/ovs.pp | 14 +++++++++++--- metadata.json | 2 +- setup.py | 1 + spec/acceptance/basic_vswitch_spec.rb | 25 ++++++++++++++++++++++++- spec/classes/vswitch_dpdk_spec.rb | 2 +- spec/classes/vswitch_ovs_spec.rb | 2 +- tox.ini | 2 +- 11 files changed, 79 insertions(+), 13 deletions(-)

1 0

puppet-neutron 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are delighted to announce the release of: puppet-neutron 19.5.0: Puppet module for OpenStack Neutron This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-neutron Download the package from: https://tarballs.openstack.org/puppet-neutron/ Please report issues through: https://bugs.launchpad.net/puppet-neutron/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The new "sdn_token" parameter to authenticate sdn has been added to the "neutron::plugins::ml2::mellanox::mlnx_sdn_assist" class. * The new "neutron::server::notifications::nova::live_migration_events" parameter has been added. This parameter controls the "[nova] live_migation_events" parameter in "neutron.conf". * The "neutron::agents::ovn_metadata" class now supports the following two new parameters. * "ovsdb_probe_interval" parameter to configure "[ovn]ovsdb_probe_interval" in ovn metadata agent config file. * "ovsdb_retry_max_interval" parameter to configure "[ovn]ovsdb_retry_max_interval" in ovn metadata agent config file. * The "neutron::plugins::ml2::ovn" class now supports the following two new parameters. * "ovsdb_retry_max_interval" * "ovsdb_probe_interval" Bug Fixes ********* * The independent ovn plugin package("pythonN-networking-ovn") is no longer required. The package is no longer available since Ussuri, and all codes are now included in the base neutron package. * The "neutron-ovn-metadata-agent" package is now installed in Ubuntu and Debian. * Bug #1987460 (https://bugs.launchpad.net/puppet- neutron/+bug/1987460): Previously the "neutron::agents::ml2::mlnx" class causes duplicate resources when used with the "neutron::agents::dhcp" class or the "neutron::agents::l3" class. Now it is possible to workaround the error by implementing the following mitigation. * Include the "neutron::agents::ml2::mlnx" class AFTER the "neutron::agents::dhcp" class or the "neutron::agents::l3" * Set the "interface_driver" parameter and the "dhcp_broadcast_reply" parameter consistently. Changes in puppet-neutron 19.4.0..19.5.0 ---------------------------------------- 7008f718 Prepare the final stable/xena release 4a41c221 Fix wrong bridge name if bridge_mappings is commma-separated string 5948c710 setuptools: Disable auto discovery aecfaa35 ovn: Do not expect the separate plugin package 1f26bbfd mlnx: Allow workaround for duplicate resources 3677b7aa [ovn metadata] Add more tunable parameters 9d553d51 ml2+ovn: Add more tunable parameters for OVN DB connections b59fca5c ml2+ovs: Accept a string value for permitted_ethertypes 7864f0a8 NSX Plugin: nsx_api_password should be secret 7d106037 Fix the ignored unit test case for dhcp-agent configuration fc225e54 Add support for [nova] live_migation_events 4f2eda54 Change authentication method for Mellanox sdn controller 2c16d3b4 Remove TripleO job 2eeeeaf8 Update TOX_CONSTRAINTS_FILE for stable/xena d6cf20bf Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 25 ------- .../ovn_metadata_agent_config/ini_setting.rb | 2 +- lib/puppet/type/ovn_metadata_agent_config.rb | 2 +- manifests/agents/ml2/mlnx.pp | 14 +++- manifests/agents/ml2/ovs.pp | 10 +-- manifests/agents/ovn_metadata.pp | 15 +++- manifests/params.pp | 6 +- manifests/plugins/ml2/mellanox/mlnx_sdn_assist.pp | 10 ++- manifests/plugins/ml2/ovn.pp | 20 ++++-- manifests/plugins/nsx.pp | 2 +- manifests/server/notifications/nova.pp | 8 +++ metadata.json | 2 +- .../notes/add_token_auth-daa888e87da725da.yaml | 4 ++ .../notes/bug-1945973-65195b6dae2009e5.yaml | 10 +++ .../notes/bug-1987460-c5bfc6d98ccd3375.yaml | 14 ++++ .../live_migration_events-84fc814cb28a8a68.yaml | 6 ++ ...n-metadata-tunning-params-9232d7638488ae0d.yaml | 12 ++++ .../notes/ovn-tunables-0f917de23d4c1274.yaml | 8 +++ setup.py | 1 + spec/classes/neutron_agents_dhcp_spec.rb | 64 +++++++++--------- spec/classes/neutron_agents_ml2_ovs_spec.rb | 79 +++++++++++++++++----- spec/classes/neutron_agents_ovn_metadata_spec.rb | 43 ++++++------ .../neutron_plugins_ml2_mlnx_sdn_assist_spec.rb | 2 + spec/classes/neutron_plugins_ml2_ovn_spec.rb | 6 +- spec/classes/neutron_plugins_nsx_spec.rb | 4 +- .../neutron_server_notifications_nova_spec.rb | 3 + .../ovn_metadata_agent_config/ini_setting_spec.rb | 4 +- tox.ini | 2 +- 29 files changed, 248 insertions(+), 131 deletions(-)

1 0

keystonemiddleware 10.3.0 (bobcat)
by no-reply＠openstack.org 17 May '23

17 May '23

We are stoked to announce the release of: keystonemiddleware 10.3.0: Middleware for OpenStack Identity This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 10.3.0 ^^^^^^ New Features * [blueprint support-oauth2-mtls (https://blueprints.launchpad.net/keystone/+spec/support- oauth2-mtls)] The oauth2_mtls_token filter has been added for accepting or denying incoming requests containing OAuth 2.0 certificate-bound access tokens that are obtained from keystone identity server by users through their OAuth 2.0 credentials and Mutual-TLS certificates. Changes in keystonemiddleware 10.2.0..10.3.0 -------------------------------------------- 92cdf8a Add timeout for requests a59020f OAuth 2.0 Mutual-TLS Support 1c820f0 Add missing doc requirements Diffstat (except docs and test files) ------------------------------------- keystonemiddleware/ec2_token.py | 9 +- keystonemiddleware/oauth2_mtls_token.py | 156 +++++++++ keystonemiddleware/s3_token.py | 12 +- .../unit/test_oauth2_mtls_token_middleware.py | 373 +++++++++++++++++++++ .../bp-support-oauth2-mtls-2d2686c9d5b1fe1f.yaml | 8 + setup.cfg | 1 + 8 files changed, 668 insertions(+), 4 deletions(-)

1 0

glance_store 4.1.1 (zed)
by no-reply＠openstack.org 17 May '23

17 May '23

We are excited to announce the release of: glance_store 4.1.1: OpenStack Image Service Store Library This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 4.1.1 ^^^^^ Security Issues * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Changes in glance_store 4.1.0..4.1.1 ------------------------------------ e9d2509 Add force to os-brick disconnect 3d3467d Fix tox4 error 8034cdc Update TOX_CONSTRAINTS_FILE for stable/zed c05c7e5 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder.py | 5 ++++- glance_store/common/attachment_state_manager.py | 3 ++- releasenotes/notes/bug-2004555-4fd67fce86c07461.yaml | 11 +++++++++++ tox.ini | 7 +++---- 7 files changed, 24 insertions(+), 9 deletions(-)

1 0

nova 27.1.0 (antelope)
by no-reply＠openstack.org 17 May '23

17 May '23

We are overjoyed to announce the release of: nova 27.1.0: Cloud computing fabric controller This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 27.1.0 ^^^^^^ Upgrade Notes * Configuration of service user tokens is now **required** for all Nova services to ensure security of block-storage volume data. All Nova configuration files must configure the "[service_user]" section as described in the documentation. See https://bugs.launchpad.net/nova/+bug/2004555 for more details. (https://docs.openstack.org/nova/latest/admin/configuration /service-user-token.html) Changes in nova 27.0.0..27.1.0 ------------------------------ 09f85a8a92 CI: fix backport validator for new branch naming 6eab57952e Bump nova-ceph-multstore timeout a02f966873 Revert "Debug Nova APIs call failures" eb3fe4ddc6 Have host look for CPU controller of cgroupsv2 location. 1f781423ee Enable use of service user token with admin context efb01985db Use force=True for os-brick disconnect during delete fa2ba3ab2c Handle zero pinned CPU in a cell with mixed policy 2cf835be82 Reproduce asym NUMA mixed CPU policy bug acb511652c Save cell socket correctly when updating host NUMA topology 29e3f2f2ab Reproduce bug 1995153 47b6850bb1 [stable-only] Update TOX_CONSTRAINTS_FILE for stable/2023.1 d081938e22 [stable-only] Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 3 +- .../admin/configuration/cross-cell-resize.rst | 2 +- .../admin/configuration/service-user-token.rst | 59 +++++++++++ .../admin/migrate-instance-with-snapshot.rst | 2 +- nova/api/openstack/wsgi.py | 6 -- nova/cmd/status.py | 11 ++ nova/network/neutron.py | 8 +- nova/service_auth.py | 6 +- .../functional/regressions/test_bug_1595962.py | 1 + .../functional/regressions/test_bug_1995153.py | 107 ++++++++++++++++++++ .../unit/virt/libvirt/volume/test_fibrechannel.py | 20 ++++ .../unit/virt/libvirt/volume/test_storpool.py | 16 ++- .../unit/virt/libvirt/volume/test_vzstorage.py | 8 +- nova/virt/hardware.py | 11 +- nova/virt/hyperv/vmops.py | 2 +- nova/virt/hyperv/volumeops.py | 12 +-- nova/virt/libvirt/driver.py | 7 +- nova/virt/libvirt/host.py | 31 +++++- nova/virt/libvirt/volume/fibrechannel.py | 7 +- nova/virt/libvirt/volume/fs.py | 2 +- nova/virt/libvirt/volume/iscsi.py | 7 +- nova/virt/libvirt/volume/lightos.py | 7 +- nova/virt/libvirt/volume/nvme.py | 6 +- nova/virt/libvirt/volume/quobyte.py | 2 +- nova/virt/libvirt/volume/scaleio.py | 7 +- nova/virt/libvirt/volume/smbfs.py | 2 +- nova/virt/libvirt/volume/storpool.py | 5 +- nova/virt/libvirt/volume/volume.py | 2 +- nova/virt/libvirt/volume/vzstorage.py | 5 +- nova/volume/cinder.py | 8 +- .../notes/service-user-token-421d067c16257782.yaml | 11 ++ tools/check-cherry-picks.sh | 2 +- tox.ini | 4 +- 65 files changed, 859 insertions(+), 187 deletions(-)

1 0

puppet-ironic 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are jazzed to announce the release of: puppet-ironic 19.5.0: Puppet module for OpenStack Ironic This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-ironic Download the package from: https://tarballs.openstack.org/puppet-ironic/ Please report issues through: https://bugs.launchpad.net/puppet-ironic/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The "ironic::conductor" class now supports the following two new parameters. * "heartbeat_interval" * "heartbeat_timeout" * The new "ironic::disk_utils" class has been added. * The new "ironic::pxe::tftp_use_xinetd" parameter has been added. When this parameter is set to "false", the ironic-dnsmasq-tftp- server service, which actually manages a dnsmasq process, is used instead of xinetd, to implement TFTP server. Note that the dnsmasq service is currently available only in RDO. * The pxe parameter *uefi_pxe_bootfile_name* is now managed by puppet, keeping the ironic default of *bootx64.efi*. The shim EFI binary is copied to the TFTP root directory, to a file named the value of *uefi_pxe_bootfile_name*. The grub EFI binary is copied to the TFTP root directory to a file named *grubx64.efi*. With these changes, using the pxe boot driver with UEFI boot will result in a grub network boot which is Secure Boot capable. Bug Fixes ********* * Now the "ironic::pxe" class properly installs the pxelinux.0 file using the separate "pxelinux" package in Debian and Ubuntu. The new "pxelinux_file_path" parameter can be used to determine the source path to locate the file. When this parameter is set to false then the class does not manage the file. * The wrong source directory to copy syslinux files in Debiand or Ubuntu has been fixed. * Fixed an issue where dnsmasq DHCP configuration for ironic- inspector would point to the wrong UEFI iPXE bootfile. See bug: 1952652 (https://bugs.launchpad.net/puppet-ironic/+bug/1952652) * Now the "tftpd-hap" package is installed insted of the "tftpd" package in Debian and Ubuntu. Changes in puppet-ironic 19.4.0..19.5.0 --------------------------------------- 1af3df3 Prepare the final stable/xena release 61f8ec1 Fix efi file paths in RHEL 596cd4c Copy shim and grub efi binaries to tftp root 181cb07 inspector: Fix wrong group of policy file 0d8437c setuptools: Disable auto discovery 8718318 Debian/Ubuntu: Fix installation of pxelinux.0 and syslinux files b12fcfe Debian/Ubuntu: The staging driver package is not available 6048343 Debian/Ubuntu: Do not use the ironic-inspector-dnsmasq service 1fcfe39 conductor: Support tuning of heartbeats 6aa42e8 Add support for [disk_utils] parameters fdf29c6 Debian/Ubuntu: Use tftpd-hpa instead of tftpd d30bb0e Refactor unit tests of ironic::pxe 3e6254b CentOS 9: Fix unit tests for ironic::pxe 7e1f420 Add support for MultiStrOpt (inspector) e9a5508 pxe: Create tftp_root directory before starting dnsmasq a51fce3 Support use of dnsmasq as tftp service d0bbd07 Fix invalid dependencies 2688458 Fix name of iPXE efi bootrom 7b15d40 Remove TripleO job a83a3dc Update TOX_CONSTRAINTS_FILE for stable/xena 5eeb1b1 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - .../{ini_setting.rb => openstackconfig.rb} | 4 +- lib/puppet/type/ironic_inspector_config.rb | 12 +- manifests/conductor.pp | 13 + manifests/disk_utils.pp | 61 +++++ manifests/drivers/pxe.pp | 19 +- manifests/drivers/staging.pp | 13 +- manifests/inspector.pp | 36 ++- manifests/inspector/policy.pp | 2 +- manifests/keystone/auth.pp | 4 +- manifests/params.pp | 48 +++- manifests/pxe.pp | 179 ++++++++++--- manifests/pxe/common.pp | 18 +- metadata.json | 2 +- .../conductor-heartbeat-d92790f3e6a59c4b.yaml | 8 + .../debian-syslinux-files-c36f21ae936c0594.yaml | 12 + .../notes/disk_utils-ff85c8b00595d8b8.yaml | 4 + ...q-uefi-ipxe-boot-filename-83fefc1e48ea7f4f.yaml | 8 + .../notes/tftp_use_xinetd-710c4eb59d3b0501.yaml | 8 + .../uefi_pxe_bootfile_name-eb2244dc9b9fd954.yaml | 12 + .../use-tftpd-hpa-in-debian-07f5429e791ab883.yaml | 5 + setup.py | 1 + spec/classes/ironic_conductor_spec.rb | 6 + spec/classes/ironic_disk_utils_spec.rb | 60 +++++ spec/classes/ironic_drivers_pxe_spec.rb | 9 +- spec/classes/ironic_drivers_staging_spec.rb | 9 +- spec/classes/ironic_inspector_policy_spec.rb | 4 +- spec/classes/ironic_inspector_spec.rb | 18 +- spec/classes/ironic_pxe_spec.rb | 287 ++++++++++++++++++--- ...ini_setting_spec.rb => openstackconfig_spec.rb} | 18 +- spec/unit/type/ironic_inspector_config_spec.rb | 45 ++++ templates/dnsmasq_tftp_server.erb | 8 + templates/inspector_dnsmasq_http.erb | 4 +- tox.ini | 2 +- 35 files changed, 800 insertions(+), 141 deletions(-)

1 0

glance_store 4.3.1 (antelope)
by no-reply＠openstack.org 17 May '23

17 May '23

We are psyched to announce the release of: glance_store 4.3.1: OpenStack Image Service Store Library This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 4.3.1 ^^^^^ Security Issues * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Changes in glance_store 4.3.0..4.3.1 ------------------------------------ a7eed02 Add force to os-brick disconnect 54d9449 Run cinder driver unit tests ddc4696 Update TOX_CONSTRAINTS_FILE for stable/2023.1 8d56f71 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder/base.py | 3 ++- releasenotes/notes/bug-2004555-4fd67fce86c07461.yaml | 11 +++++++++++ test-requirements.txt | 1 + tox.ini | 6 +++--- 8 files changed, 20 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b623f81..2eaa226 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,0 +14 @@ coverage!=4.4,>=4.0 # Apache-2.0 +ddt>=1.4.4 # MIT

1 0

glance_store 3.0.1 (yoga)
by no-reply＠openstack.org 17 May '23

17 May '23

We are gleeful to announce the release of: glance_store 3.0.1: OpenStack Image Service Store Library This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 3.0.1 ^^^^^ Security Issues *************** * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Bug Fixes ********* * Now the "project_domain_name" parameter and the "user_domain_name" parameter are properly used by swift backends. Previously these two parameters were ignored and the "*_domain_id" parameters should be set to use a keystone domain different from the default one. * Bug #1970698 (https://bugs.launchpad.net/glance- store/+bug/1970698): Cinder: Fixed exception logging when the image create operation fails due to failing to attach volume to glance host. * Bug #1969373 (https://bugs.launchpad.net/glance- store/+bug/1969373): Cinder Driver: Correct the retry interval from fixed 1 second to exponential backoff for attaching a volume during image create/save operation. Changes in glance_store 3.0.0..3.0.1 ------------------------------------ 2830182 Add force to os-brick disconnect bc9375e Fix tox4 error 4e5b90a Swift: Honor *_domain_name parameters 69fd0dc Cinder: Correct exception logging during attach c6716cb Correct retry interval during attach volume 88bd7fc Update TOX_CONSTRAINTS_FILE for stable/yoga 74fee65 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder.py | 5 +- glance_store/_drivers/swift/utils.py | 33 +++++----- glance_store/common/attachment_state_manager.py | 7 ++- glance_store/common/cinder_utils.py | 4 +- .../unit/common/test_attachment_state_manager.py | 13 +++- .../notes/bug-1620999-8b76a0ad14826197.yaml | 7 +++ .../notes/bug-2004555-4fd67fce86c07461.yaml | 11 ++++ ...ion-logging-during-attach-9546e24189db83c4.yaml | 6 ++ .../fix-interval-in-retries-471155ff34d9f0e9.yaml | 7 +++ tox.ini | 7 +-- 17 files changed, 247 insertions(+), 41 deletions(-)

1 0