- Release-announce - lists.openstack.org

openstacksdk 3.3.0 (dalmatian)
by no-reply＠openstack.org 16 Jul '24

16 Jul '24

We are tickled pink to announce the release of: openstacksdk 3.3.0: An SDK for building applications to work with OpenStack This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 3.3.0 ^^^^^ New Features * Adds support for querying a bare-metal node's firmware as per functionality introduced in API 1.86. Changes in openstacksdk 3.1.0..3.3.0 ------------------------------------ 9145dcec compute, volume: Improve 'update_quota_set' d40d6a2e compute: Correct base path for default, detailed quotas 7040c81d Use mypy syntax compatible with older pythons. 8cfb60ec Combine 3 auto_allocated_topology tests into one test 3ee18eb1 Run auto_allocated_topology functional tests in the own project c6281c5b baremetal: Adds list node firmware support d84ef4f9 tests: Rework warnings-related tests 4275dfc5 compute, block storage: Add support for quota class sets 0f311ff3 compute: Add additional server create parameters dbf5c975 compute: Add additional options to Server.rebuild 0bd02b3a compute: Add support for legacy 'onSharedStorage' param 6d98de4f compute: Add server tag proxy methods 67cd6668 compute: Add Server.clear_password action 916f9af6 compute, block storage: Minor fixes to limits 850c99cf [func test] Fix race between attachment delete and server delete 8091075e Remove retired project Senlin job 2b6b32fa baremetal: Decode 'config_drive' argument to 'set_provision_state' 00ed7a5e Identity: Add support for inherited_to for role_assignments 46af31f6 Add support for federation service providers ba975949 docs: Add missing identity v3 proxy API docs 30d5753b reno: Update master for unmaintained/zed fc539d10 pre-commit: Add pyupgrade hook 8b02b045 trivial: Prepare for pyupgrade pre-commit hook 93e2976c tox: Don't install package in pep8 113e4125 Fix AttributeError in delete_limit method a8adbadf cloud: Do not reference other cloud mixin's methods 763e09a4 cloud: Trivial fixes f90fd9a3 cloud: Remove use of OpenStackCloudCreateException 5de45a32 hacking: Add check for deprecated exception types 81d60c78 README: Add guide on raw HTTP layer e67a7b14 pre-commit: Bump versions 761d558e Allow filtering BGPVPNs 4b9a3e91 Extend project cleanup e409254e image: Pass correct stores argument f73335df Add quota class set to shared file system fab08bab Add Binero public cloud to vendor 1610e2da Fix multiple image_id query mappings 7131781a Remove mypy union line which breaks older pythons. 67c1fb82 Adding SDK support for ``glance md-namespace-objects-delete`` 111d72d5 Add Binero public cloud to vendor support 52b86348 volume: Allow passing a volume type object to retype_volume 644087b2 volume: Add ability to set, unset image metadata 52c5d745 volume: Allow setting volume statuses individually be669963 Add Tap Mirrors to SDK 8b84bf0e image: make sure the target for "clear_cache" is valid 16ddc1ca Fixed update_metadef_object e7bdb02f Allow project switching for Designate API 8567c858 Allow tags to be passed through to compute.create_server Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 11 +- README.rst | 113 +++++- .../user/resources/block_storage/v2/limits.rst | 6 +- .../user/resources/block_storage/v3/limits.rst | 8 +- .../user/resources/network/v2/tap_mirror.rst | 12 + .../user/resources/shared_file_system/index.rst | 1 + .../shared_file_system/v2/quota_class_set.rst | 13 + examples/connect.py | 2 +- openstack/{_hacking.py => _hacking/checks.py} | 24 +- openstack/accelerator/v2/accelerator_request.py | 8 +- openstack/accelerator/v2/device_profile.py | 8 +- openstack/baremetal/v1/_common.py | 3 + openstack/baremetal/v1/_proxy.py | 10 + openstack/baremetal/v1/driver.py | 2 +- openstack/baremetal/v1/node.py | 63 +++- .../baremetal_introspection/v1/introspection.py | 2 +- openstack/block_storage/_base_proxy.py | 2 +- openstack/block_storage/v2/_proxy.py | 121 +++++- openstack/block_storage/v2/limits.py | 6 +- openstack/block_storage/v2/quota_class_set.py | 39 ++ openstack/block_storage/v2/volume.py | 37 +- openstack/block_storage/v3/_proxy.py | 127 +++++-- openstack/block_storage/v3/limits.py | 14 +- openstack/block_storage/v3/quota_class_set.py | 39 ++ openstack/block_storage/v3/service.py | 2 +- openstack/block_storage/v3/type.py | 2 +- openstack/block_storage/v3/volume.py | 36 +- openstack/cloud/_baremetal.py | 6 +- openstack/cloud/_block_storage.py | 20 +- openstack/cloud/_compute.py | 135 ++++--- openstack/cloud/_dns.py | 4 +- openstack/cloud/_floating_ip.py | 141 ++++--- openstack/cloud/_identity.py | 61 +-- openstack/cloud/_image.py | 9 +- openstack/cloud/_network.py | 27 +- openstack/cloud/_network_common.py | 82 +++-- openstack/cloud/_object_store.py | 5 +- openstack/cloud/_security_group.py | 47 ++- openstack/cloud/_utils.py | 4 +- openstack/cloud/exc.py | 20 +- openstack/cloud/meta.py | 12 +- openstack/cloud/openstackcloud.py | 12 +- openstack/common/quota_set.py | 2 +- openstack/common/tag.py | 3 +- openstack/compute/v2/_proxy.py | 176 ++++++++- openstack/compute/v2/flavor.py | 2 +- openstack/compute/v2/keypair.py | 2 +- openstack/compute/v2/limits.py | 35 +- openstack/compute/v2/quota_class_set.py | 61 +++ openstack/compute/v2/quota_set.py | 1 + openstack/compute/v2/server.py | 104 ++++-- openstack/compute/v2/server_remote_console.py | 2 +- openstack/compute/v2/service.py | 4 +- openstack/config/cloud_config.py | 2 +- openstack/config/cloud_region.py | 6 +- openstack/config/defaults.py | 2 +- openstack/config/loader.py | 26 +- openstack/config/vendors/__init__.py | 4 +- openstack/config/vendors/binero.json | 13 + openstack/connection.py | 6 +- openstack/dns/v2/_base.py | 22 +- openstack/dns/v2/_proxy.py | 2 +- openstack/exceptions.py | 14 +- openstack/fixture/connection.py | 2 +- openstack/identity/v3/_proxy.py | 409 +++++++++++++-------- openstack/identity/v3/role_assignment.py | 3 +- openstack/identity/v3/service_provider.py | 48 +++ openstack/image/_download.py | 5 +- openstack/image/v1/_proxy.py | 10 +- openstack/image/v1/image.py | 2 +- openstack/image/v2/_proxy.py | 60 ++- openstack/image/v2/cache.py | 6 +- openstack/image/v2/image.py | 6 +- openstack/image/v2/metadef_namespace.py | 10 + openstack/load_balancer/v2/amphora.py | 10 +- openstack/load_balancer/v2/load_balancer.py | 4 +- openstack/load_balancer/v2/quota.py | 2 +- openstack/message/v2/claim.py | 2 +- openstack/network/v2/_base.py | 2 +- openstack/network/v2/_proxy.py | 106 ++++++ openstack/network/v2/bgpvpn.py | 13 + openstack/network/v2/quota.py | 4 +- openstack/network/v2/security_group_rule.py | 4 +- openstack/network/v2/tap_mirror.py | 54 +++ openstack/object_store/v1/_base.py | 2 +- openstack/object_store/v1/_proxy.py | 17 +- openstack/orchestration/util/event_utils.py | 6 +- openstack/orchestration/util/template_format.py | 4 +- openstack/orchestration/v1/_proxy.py | 2 +- openstack/orchestration/v1/software_config.py | 4 +- openstack/orchestration/v1/software_deployment.py | 8 +- openstack/orchestration/v1/stack.py | 24 +- openstack/proxy.py | 21 +- openstack/resource.py | 44 ++- openstack/shared_file_system/v2/_proxy.py | 37 +- openstack/shared_file_system/v2/quota_class_set.py | 57 +++ openstack/test/fakes.py | 4 +- .../baremetal/test_baremetal_allocation.py | 2 +- .../baremetal/test_baremetal_deploy_templates.py | 2 +- .../functional/baremetal/test_baremetal_node.py | 14 +- .../functional/baremetal/test_baremetal_port.py | 2 +- .../baremetal/test_baremetal_port_group.py | 2 +- .../baremetal/test_baremetal_volume_connector.py | 2 +- .../baremetal/test_baremetal_volume_target.py | 2 +- .../functional/block_storage/v2/test_backup.py | 4 +- .../functional/block_storage/v2/test_snapshot.py | 4 +- .../functional/block_storage/v2/test_stats.py | 2 +- .../functional/block_storage/v2/test_volume.py | 4 +- .../functional/block_storage/v3/test_backup.py | 4 +- .../functional/block_storage/v3/test_snapshot.py | 4 +- .../functional/cloud/test_cluster_templates.py | 2 +- .../functional/cloud/test_floating_ip_pool.py | 2 +- .../cloud/test_qos_bandwidth_limit_rule.py | 2 +- .../functional/cloud/test_qos_dscp_marking_rule.py | 2 +- .../cloud/test_qos_minimum_bandwidth_rule.py | 2 +- .../compute/v2/test_volume_attachment.py | 14 + .../identity/v3/test_application_credential.py | 2 +- .../load_balancer/v2/test_load_balancer.py | 4 +- .../functional/network/v2/test_address_group.py | 4 +- .../functional/network/v2/test_address_scope.py | 4 +- .../network/v2/test_agent_add_remove_network.py | 2 +- .../network/v2/test_agent_add_remove_router.py | 2 +- .../network/v2/test_auto_allocated_topology.py | 78 +++- .../network/v2/test_default_security_group_rule.py | 2 +- .../functional/network/v2/test_firewall_group.py | 4 +- .../functional/network/v2/test_firewall_policy.py | 4 +- .../functional/network/v2/test_firewall_rule.py | 4 +- .../v2/test_firewall_rule_insert_remove_policy.py | 4 +- .../functional/network/v2/test_floating_ip.py | 4 +- .../network/v2/test_l3_conntrack_helper.py | 4 +- .../network/v2/test_local_ip_association.py | 4 +- .../network/v2/test_network_ip_availability.py | 4 +- .../network/v2/test_network_segment_range.py | 4 +- .../functional/network/v2/test_port_forwarding.py | 4 +- .../network/v2/test_qos_bandwidth_limit_rule.py | 4 +- .../network/v2/test_qos_dscp_marking_rule.py | 4 +- .../network/v2/test_qos_minimum_bandwidth_rule.py | 4 +- .../v2/test_qos_minimum_packet_rate_rule.py | 4 +- .../functional/network/v2/test_qos_rule_type.py | 2 +- .../functional/network/v2/test_rbac_policy.py | 4 +- .../network/v2/test_router_add_remove_interface.py | 4 +- .../functional/network/v2/test_security_group.py | 4 +- .../network/v2/test_security_group_rule.py | 4 +- .../functional/network/v2/test_service_profile.py | 4 +- .../network/v2/test_subnet_from_subnet_pool.py | 4 +- .../functional/network/v2/test_subnet_pool.py | 4 +- .../functional/object_store/v1/test_account.py | 4 +- .../functional/object_store/v1/test_container.py | 2 +- .../functional/orchestration/v1/test_stack.py | 4 +- .../shared_file_system/test_quota_class_set.py | 43 +++ .../shared_file_system/test_resource_lock.py | 2 +- .../functional/shared_file_system/test_share.py | 4 +- .../shared_file_system/test_share_access_rule.py | 4 +- .../shared_file_system/test_share_group.py | 2 +- .../test_share_group_snapshot.py | 4 +- .../shared_file_system/test_share_instance.py | 2 +- .../shared_file_system/test_share_network.py | 4 +- .../shared_file_system/test_share_snapshot.py | 4 +- .../test_share_snapshot_instance.py | 2 +- .../unit/accelerator/v2/test_device_profile.py | 4 +- .../unit/baremetal_introspection/v1/test_proxy.py | 10 +- .../unit/cloud/test_coe_clusters_certificate.py | 2 +- .../unit/cloud/test_create_volume_snapshot.py | 2 +- .../unit/cloud/test_delete_volume_snapshot.py | 2 +- .../unit/cloud/test_server_delete_metadata.py | 2 +- .../unit/clustering/v1/test_cluster_policy.py | 2 +- .../unit/compute/v2/test_server_remote_console.py | 2 +- .../unit/identity/v3/test_service_provider.py | 62 ++++ .../unit/orchestration/v1/test_stack_event.py | 2 +- .../unit/orchestration/v1/test_stack_files.py | 8 +- .../shared_file_system/v2/test_quota_class_set.py | 99 +++++ .../shared_file_system/v2/test_share_instance.py | 2 +- openstack/warnings.py | 24 ++ openstack/workflow/v2/cron_trigger.py | 4 +- ...-resource-list-by-project-8b5479a045ef7373.yaml | 6 + ...-service-provider-support-8c97cbb157883626.yaml | 4 + ...mespace-object-delete-all-6cea62cb038012df.yaml | 5 + ...ode-firmware-list-support-fec2f96a3a578730.yaml | 5 + ...et-to-shared-file-systems-43da33e6a3ed65e3.yaml | 4 + ...add-server-clear-password-256e269223453bd7.yaml | 5 + ...-server-tag-proxy-methods-c791a36d8d4d85f6.yaml | 8 + ...me-image-metadata-support-c61bcb918fdff529.yaml | 4 + .../bgpvpn-list-filters-e76183a7008c0631.yaml | 7 + ...nherited-role-assignments-8fe9ac9509d99f4d.yaml | 11 + .../network-add-tap-mirror-46376bd98ee69c81.yaml | 5 + releasenotes/source/conf.py | 1 - releasenotes/source/zed.rst | 2 +- tools/keystone_version.py | 8 +- tools/print-services.py | 10 +- tox.ini | 9 +- zuul.d/functional-jobs.yaml | 28 +- zuul.d/project.yaml | 2 - 409 files changed, 4569 insertions(+), 1931 deletions(-)

1 0

openstack-ansible 29.0.1 (caracal)
by no-reply＠openstack.org 16 Jul '24

16 Jul '24

We jubilantly announce the release of: openstack-ansible 29.0.1: Ansible playbooks for deploying OpenStack This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 29.0.1 ^^^^^^ Deprecation Notes ***************** * The variable "keystone_external_ssl" was deprecated and is no longer used. You still can control if communication between HAProxy and Keystone should be covered with TLS through "keystone_backend_ssl" or "haproxy_ssl"/"haproxy_ssl_all_vips" for communication between clients and HAProxy on frontend. Security Issues *************** * Includes safe (non-vulnerable) versions of services regarding OSSA-2024-001 (https://security.openstack.org/ossa/OSSA-2024-001.html) Changes in openstack-ansible 29.0.0..29.0.1 ------------------------------------------- 7985e7a62 Bump SHAs for 2024.1 (Caracal) 7f767c717 [doc] Override pdf filename for the deploy guide Diffstat (except docs and test files) ------------------------------------- ansible-collection-requirements.yml | 2 +- ansible-role-requirements.yml | 30 +++++++++++----------- deploy-guide/source/conf.py | 2 ++ inventory/group_vars/all/source_git.yml | 4 +-- inventory/group_vars/cinder_all/source_git.yml | 4 +-- inventory/group_vars/glance_all/source_git.yml | 4 +-- inventory/group_vars/ironic_all/source_git.yml | 6 ++--- inventory/group_vars/keystone_all/source_git.yml | 4 +-- inventory/group_vars/magnum_all/source_git.yml | 4 +-- inventory/group_vars/manila_all/source_git.yml | 4 +-- inventory/group_vars/neutron_all/source_git.yml | 10 ++++---- inventory/group_vars/nova_all/source_git.yml | 6 ++--- inventory/group_vars/octavia_all/source_git.yml | 4 +-- inventory/group_vars/skyline_all/source_git.yml | 4 +-- inventory/group_vars/swift_all/source_git.yml | 4 +-- .../notes/OSSA-2024-001-c9ce721cf2229af7.yaml | 5 ++++ ...tone_external_ssl-removal-5d972299f98dcc32.yaml | 8 ++++++ 17 files changed, 60 insertions(+), 45 deletions(-)

1 0

openstack-ansible 27.5.0 (antelope)
by no-reply＠openstack.org 15 Jul '24

15 Jul '24

We are chuffed to announce the release of: openstack-ansible 27.5.0: Ansible playbooks for deploying OpenStack This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 27.5.0 ^^^^^^ New Features ************ * Added variable "cinder_manage_volume_types" that allows to skip volume type creation and management by os_cinder role. Upgrade Notes ************* * Support is added to enable all stable RabbitMQ feature flags by default. This happens automatically post upgrade, and avoids compatibility issues which could occur when installing a new version of RabbitMQ. * Stable RabbitMQ feature flags will be enabled automatically pre- upgrade in order to prevent failures during the upgrade process. Deprecation Notes ***************** * The variable "keystone_external_ssl" was deprecated and is no longer used. You still can control if communication between HAProxy and Keystone should be covered with TLS through "keystone_backend_ssl" or "haproxy_ssl"/"haproxy_ssl_all_vips" for communication between clients and HAProxy on frontend. Security Issues *************** * Includes safe (non-vulnerable) versions of services regarding OSSA-2024-001 (https://security.openstack.org/ossa/OSSA-2024-001.html) Bug Fixes ********* * Python wheels build no longer fails in case of issues with a repo host and should succeed as long as there at least one reachable repo host with matching Distro/Version/Architecture. Changes in openstack-ansible 27.4.3..27.5.0 ------------------------------------------- c8c6efc55 Bump SHAs for 2023.1 9e12af6c9 Enable RabbitMQ feature flags pre-upgrade dc258b2e5 Configure all directories to be safe for git clone in CI 8a5b45041 Remove retired projects from zuul required-projects Diffstat (except docs and test files) ------------------------------------- ansible-collection-requirements.yml | 2 +- ansible-role-requirements.yml | 44 +++++++++++----------- inventory/group_vars/all/source_git.yml | 4 +- inventory/group_vars/cinder_all/source_git.yml | 4 +- inventory/group_vars/cloudkitty_all/source_git.yml | 4 +- inventory/group_vars/glance_all/source_git.yml | 4 +- inventory/group_vars/heat_all/source_git.yml | 4 +- inventory/group_vars/horizon_all/source_git.yml | 4 +- inventory/group_vars/ironic_all/source_git.yml | 4 +- inventory/group_vars/keystone_all/source_git.yml | 4 +- inventory/group_vars/magnum_all/source_git.yml | 4 +- inventory/group_vars/manila_all/source_git.yml | 4 +- inventory/group_vars/neutron_all/source_git.yml | 8 ++-- inventory/group_vars/nova_all/source_git.yml | 6 +-- inventory/group_vars/octavia_all/source_git.yml | 6 +-- inventory/group_vars/swift_all/source_git.yml | 4 +- playbooks/rabbitmq-install.yml | 13 +++++++ .../notes/OSSA-2024-001-06e266d84c2b3d38.yaml | 5 +++ ...llow_to_skip_volume_types-8698ec60660a0510.yaml | 5 +++ .../notes/feature-flags-9faf32a3d49af4fc.yaml | 6 +++ ...tone_external_ssl-removal-5d972299f98dcc32.yaml | 8 ++++ .../rabbitmq-feature-flags-d1a0f3fd4e17cbf4.yaml | 5 +++ ...env_build_facts_gathering-9a85f72324d6e7e0.yaml | 6 +++ .../templates/user_variables.aio.yml.j2 | 5 +++ zuul.d/jobs.yaml | 15 -------- 25 files changed, 108 insertions(+), 70 deletions(-)

1 0

openstack-ansible 28.3.0 (bobcat)
by no-reply＠openstack.org 15 Jul '24

15 Jul '24

We are excited to announce the release of: openstack-ansible 28.3.0: Ansible playbooks for deploying OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 28.3.0 ^^^^^^ New Features ************ * Added variable "cinder_manage_volume_types" that allows to skip volume type creation and management by os_cinder role. Upgrade Notes ************* * Support is added to enable all stable RabbitMQ feature flags by default. This happens automatically post upgrade, and avoids compatibility issues which could occur when installing a new version of RabbitMQ. * Stable RabbitMQ feature flags will be enabled automatically pre- upgrade in order to prevent failures during the upgrade process. Deprecation Notes ***************** * The variable "keystone_external_ssl" was deprecated and is no longer used. You still can control if communication between HAProxy and Keystone should be covered with TLS through "keystone_backend_ssl" or "haproxy_ssl"/"haproxy_ssl_all_vips" for communication between clients and HAProxy on frontend. Security Issues *************** * Includes safe (non-vulnerable) versions of services regarding OSSA-2024-001 (https://security.openstack.org/ossa/OSSA-2024-001.html) Changes in openstack-ansible 28.2.1..28.3.0 ------------------------------------------- ca8aa766c Bump SHAs for 2023.2 (Bobcat) 18d742dd2 Update RabbitMQ SHA 4894e423d Configure all directories to be safe for git clone in CI 11bcd452b Enable RabbitMQ feature flags pre-upgrade 3fec9b695 Remove retired projects from zuul required-projects Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 44 +++++++++++----------- inventory/group_vars/all/source_git.yml | 4 +- inventory/group_vars/cinder_all/source_git.yml | 4 +- inventory/group_vars/cloudkitty_all/source_git.yml | 4 +- inventory/group_vars/glance_all/source_git.yml | 4 +- inventory/group_vars/heat_all/source_git.yml | 4 +- inventory/group_vars/ironic_all/source_git.yml | 4 +- inventory/group_vars/keystone_all/source_git.yml | 4 +- inventory/group_vars/magnum_all/source_git.yml | 4 +- inventory/group_vars/manila_all/source_git.yml | 4 +- inventory/group_vars/neutron_all/source_git.yml | 8 ++-- inventory/group_vars/nova_all/source_git.yml | 6 +-- inventory/group_vars/octavia_all/source_git.yml | 6 +-- inventory/group_vars/swift_all/source_git.yml | 4 +- playbooks/rabbitmq-install.yml | 13 +++++++ .../notes/OSSA-2024-001-252e923d988dad84.yaml | 5 +++ ...llow_to_skip_volume_types-8698ec60660a0510.yaml | 5 +++ .../notes/feature-flags-9faf32a3d49af4fc.yaml | 6 +++ ...tone_external_ssl-removal-5d972299f98dcc32.yaml | 8 ++++ .../rabbitmq-feature-flags-d1a0f3fd4e17cbf4.yaml | 5 +++ .../templates/user_variables.aio.yml.j2 | 5 +++ zuul.d/jobs.yaml | 15 -------- 22 files changed, 99 insertions(+), 67 deletions(-)

1 0

openstack-ansible 26.5.3 (zed)
by no-reply＠openstack.org 15 Jul '24

15 Jul '24

We are stoked to announce the release of: openstack-ansible 26.5.3: Ansible playbooks for deploying OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 26.5.2..26.5.3 ------------------------------------------- 6d4d953d6 Switch u-c to SHA eadd8d466 Transition Zed to Unmaintained 7c6e5ef7f Remove retired projects from zuul required-projects Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 118 ++++++------ .../defaults/repo_packages/openstack_services.yml | 210 ++++++++++----------- tox.ini | 2 +- zuul.d/jobs.yaml | 9 - 5 files changed, 166 insertions(+), 175 deletions(-)

1 0

cinder 22.2.0 (antelope)
by no-reply＠openstack.org 10 Jul '24

10 Jul '24

We are psyched to announce the release of: cinder 22.2.0: OpenStack Block Storage This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 22.2.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected with an "ImageUnacceptable" error because such images could be used in an exploit to expose host information. Given that qcow2 external data files were never supported by Cinder, this change should have no impact on users. See Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) for details. Bug Fixes ********* * Ceph backup driver Bug #1895035 (https://bugs.launchpad.net/cinder/+bug/1895035) Fixed restore full backups to non RBD volumes. * Bug #1912624 (https://bugs.launchpad.net/cinder/+bug/1912624) Corrected regression introduced by the refactoring of the backup service in the ussuri release, which prevented the creation of a volume backup in a different availability zone. * Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image is now rejected with an "ImageUnacceptable" error if it is used to create a volume. Given that qcow2 external data files were never supported by Cinder, the only use for such an image previously was to attempt to steal host information, and hence this change should have no impact on users. * Dell PowerMax driver bug #2051828 (https://bugs.launchpad.net/cinder/+bug/2051828) The driver only recognized 10.0 as being Unisphere 10 and would try to use 9.2 for Unisphere 10.x (where x > 0), but now it correctly recognizes 10.x as being Unisphere 10. * HPE 3PAR driver Bug #1994521 (https://bugs.launchpad.net/cinder/+bug/1994521) Fixed: While performing a delete snapshot (s1) operation, the volumes (v2) dependent on the snapshot (s1) are converted to base volumes. This operation fails if these dependent volumes (v2) have their own dependent snapshots (s2). The errors during the failure were vague and not helpful. With this release, we added conditions to fail this operation early and also added useful error message. * HPE 3PAR driver Bug #2015034 (https://bugs.launchpad.net/cinder/+bug/2015034) Added handling for VLAN iscsi IPs in the 3PAR iSCSI driver. Changes in cinder 22.1.2..22.2.0 -------------------------------- 5f5e86e35 CVE-2024-32498: Check for external qcow2 data file 1d7a0f5d8 Recognize Dell PowerMax Unisphere 10.x (x>0) b30ed079f HPE 3PAR: use vlan iscsi ips 0cca8c2aa [stable-only] Set volume_image_dep_tests flag c9330c6b6 Ceph: Fix restore backups to diff backend 22e6866f6 Fix 'cinder-backup' service when Swift with TLS enabled af040f925 3PAR: Error out if vol cannot be converted to base 8f9632461 Stable-only: Remove skip-level upgrade job 4ab3cbd70 Do not ignore availability_zone in backup creation Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 +- cinder/backup/api.py | 3 +- cinder/backup/drivers/ceph.py | 65 +- cinder/backup/drivers/swift.py | 3 +- cinder/image/format_inspector.py | 938 +++++++++++++++++++++ cinder/image/image_utils.py | 86 +- cinder/privsep/format_inspector.py | 38 + cinder/scheduler/driver.py | 2 +- cinder/scheduler/filter_scheduler.py | 11 +- cinder/scheduler/host_manager.py | 18 +- cinder/scheduler/manager.py | 5 +- .../dell_emc/powermax/test_powermax_rest.py | 21 + cinder/volume/drivers/dell_emc/powermax/rest.py | 61 +- cinder/volume/drivers/hpe/hpe_3par_common.py | 27 +- cinder/volume/drivers/hpe/hpe_3par_iscsi.py | 111 ++- cinder/volume/drivers/nfs.py | 10 + cinder/volume/drivers/remotefs.py | 3 +- .../drivers/dell-emc-powermax-driver.rst | 56 +- .../bug-1895035-rbd-restore-0cd94ccd467ae1e3.yaml | 6 + ...2624-bakup-a-z-regression-452f4bc9dfd41871.yaml | 7 + ...9-disallow-qcow2-datafile-abc4e6d8be766710.yaml | 19 + ...l-powermax-unisphere-v101-7195af74d1c7671c.yaml | 8 + ...t-to-base-vol-delete-snap-a460a4b1c419804a.yaml | 11 + ...e-3par-use-vlan-iscsi-ips-f75787b0d281030b.yaml | 5 + 34 files changed, 2591 insertions(+), 159 deletions(-)

1 0

cinder 23.2.0 (bobcat)
by no-reply＠openstack.org 10 Jul '24

10 Jul '24

We are pleased to announce the release of: cinder 23.2.0: OpenStack Block Storage This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 23.2.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected with an "ImageUnacceptable" error because such images could be used in an exploit to expose host information. Given that qcow2 external data files were never supported by Cinder, this change should have no impact on users. See Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) for details. Bug Fixes ********* * Bug #2008017 (https://bugs.launchpad.net/cinder/+bug/2012246) Hide value of the *[coordination] backend_url* option from logs because it can contain credential. * Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image is now rejected with an "ImageUnacceptable" error if it is used to create a volume. Given that qcow2 external data files were never supported by Cinder, the only use for such an image previously was to attempt to steal host information, and hence this change should have no impact on users. * Dell PowerMax driver bug #2051828 (https://bugs.launchpad.net/cinder/+bug/2051828) The driver only recognized 10.0 as being Unisphere 10 and would try to use 9.2 for Unisphere 10.x (where x > 0), but now it correctly recognizes 10.x as being Unisphere 10. * Bug #1988942 (https://bugs.launchpad.net/cinder/+bug/1988942) Increased size of volume image metadata values accepted by the Block Storage API. Volume image metadata values were limited to 255 characters but Glance allows up to 65535 bytes. This change does not affect the database tables which already allow up to 65535 bytes for image metadata values. Changes in cinder 23.1.0..23.2.0 -------------------------------- 9e667b02b CVE-2024-32498: Check for external qcow2 data file 1ec51a0af [stable-only] Set volume_image_dep_tests flag 9c504a019 [coordination] backend_url should be secret 245274505 RBD: Use "RBD" capitalization in user-facing text 68acf0b81 Recognize Dell PowerMax Unisphere 10.x (x>0) 1e5260264 Fix 'cinder-backup' service when Swift with TLS enabled 6fcdf82f6 Tests: Quiet Fungible invalid UUID warnings c0d9e2a2c Tests: Make NEC tests faster 9267b2f46 [stable-only] fix relnote markup 2fb2ff99b Increase size of volume image metadata values 5d24ae271 Ceph: Fix restoring old backups to a different backend Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 5 + cinder/api/schemas/volume_image_metadata.py | 2 +- cinder/api/validation/parameter_types.py | 9 + cinder/api/validation/validators.py | 8 + cinder/backup/drivers/ceph.py | 44 +- cinder/backup/drivers/swift.py | 3 +- cinder/coordination.py | 1 + cinder/image/format_inspector.py | 938 +++++++++++++++++++++ cinder/image/image_utils.py | 86 +- cinder/privsep/format_inspector.py | 38 + .../unit/api/contrib/test_volume_image_metadata.py | 65 +- .../dell_emc/powermax/test_powermax_rest.py | 21 + .../unit/volume/drivers/fungible/test_driver.py | 2 +- .../drivers/nec/v/test_internal_nec_rest_fc.py | 5 +- cinder/volume/drivers/dell_emc/powermax/rest.py | 61 +- cinder/volume/drivers/nfs.py | 10 + cinder/volume/drivers/rbd.py | 34 +- cinder/volume/drivers/remotefs.py | 3 +- .../drivers/dell-emc-powermax-driver.rst | 6 + .../notes/bug-2012246-292d7d93260a1fe5.yaml | 6 + ...9-disallow-qcow2-datafile-abc4e6d8be766710.yaml | 19 + ...l-powermax-unisphere-v101-7195af74d1c7671c.yaml | 8 + ...ge-metadata-size-increase-323812970dc0e513.yaml | 8 + ...pure-storage-fix-failover-fe6260a112409742.yaml | 4 +- 31 files changed, 2269 insertions(+), 119 deletions(-)

1 0

cinder 24.1.0 (caracal)
by no-reply＠openstack.org 10 Jul '24

10 Jul '24

We exuberantly announce the release of: cinder 24.1.0: OpenStack Block Storage This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 24.1.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected with an "ImageUnacceptable" error because such images could be used in an exploit to expose host information. Given that qcow2 external data files were never supported by Cinder, this change should have no impact on users. See Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) for details. Bug Fixes ********* * Dell PowerMax driver bug #2034937 (https://bugs.launchpad.net/cinder/+bug/2034937) Fixed This change is to update the live migration ability in environments using PowerMax. In previous 2023.1 version, the live migration fails without a pool name. This update add the ability of live migration without a pool name. * Bug #2058596 (https://bugs.launchpad.net/cinder/+bug/2058596) Fixed broken "backup_swift_service_auth=True" which made swift backup driver consistently fail during object data access. * Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image is now rejected with an "ImageUnacceptable" error if it is used to create a volume. Given that qcow2 external data files were never supported by Cinder, the only use for such an image previously was to attempt to steal host information, and hence this change should have no impact on users. * Bug #2031897 (https://bugs.launchpad.net/cinder/+bug/2031897) Fixed issues for volume backups with the Ceph driver where failures of the first process ("rbd export-diff") were not caught. Instead, only the return code of the second process ("rbd import-diff") was recognized. This change also preserves the stderr that was lost previously in order to ease debugging. Changes in cinder 24.0.0..24.1.0 -------------------------------- db98dc207 CVE-2024-32498: Check for external qcow2 data file 966bc53c8 Fix broken backup_swift_service_auth=True 52f885b77 Ceph: Catch more failure conditions on volume backup 1aa541d02 PowerMax: Allow live migration without pool name Diffstat (except docs and test files) ------------------------------------- cinder/backup/drivers/ceph.py | 58 +- cinder/backup/drivers/swift.py | 3 +- cinder/image/format_inspector.py | 938 +++++++++++++++++++++ cinder/image/image_utils.py | 86 +- cinder/privsep/format_inspector.py | 38 + cinder/service_auth.py | 11 + .../drivers/dell_emc/powermax/powermax_data.py | 7 + .../dell_emc/powermax/test_powermax_masking.py | 17 + cinder/volume/drivers/dell_emc/powermax/masking.py | 10 +- cinder/volume/drivers/nfs.py | 10 + cinder/volume/drivers/remotefs.py | 3 +- ...ation-without-a-pool-name-7690fcd67b5f690c.yaml | 10 + .../notes/bug-2058596-3c676e7fdc642b3d.yaml | 6 + ...9-disallow-qcow2-datafile-abc4e6d8be766710.yaml | 19 + ...h-more-failure-conditions-d2ec640f5ff8051c.yaml | 10 + 23 files changed, 2123 insertions(+), 93 deletions(-)

1 0

nova 27.4.0 (antelope)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We are jazzed to announce the release of: nova 27.4.0: Cloud computing fabric controller This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 27.4.0 ^^^^^^ Bug Fixes * Ironic virt driver now uses the node cache and respects partition keys, such as conductor group, for list_instances and list_instance_uuids calls. This fix will improve performance of the periodic queries which use these driver methods and reduce API and DB load on the backing Ironic service. Changes in nova 27.3.0..27.4.0 ------------------------------ f732f84768 Fix vmdk_allowed_types checking 9e10ac2549 Additional qemu safety checking on base images 67e5376dd6 Check images with format_inspector for safety af4d819c60 Reject qcow files with data-file attributes 42d3725b51 Fix disk_formats in ceph job tempest config 3226318b53 [ironic] Partition & use cache for list_instance* b128957591 Fix nova-manage image_property show unexpected keyword 43273631d8 Improve logging at '_numa_cells_support_network_metadata' Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 + nova/cmd/manage.py | 8 +- nova/conf/workarounds.py | 10 + nova/image/format_inspector.py | 939 +++++++++++++++++++++ nova/virt/hardware.py | 27 +- nova/virt/images.py | 56 +- nova/virt/ironic/driver.py | 33 +- nova/virt/libvirt/imagebackend.py | 15 + nova/virt/libvirt/utils.py | 30 + ...nce-respect-partition-key-339ff653eaa00753.yaml | 5 + 15 files changed, 1446 insertions(+), 73 deletions(-)

1 0

nova 28.2.0 (bobcat)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We contentedly announce the release of: nova 28.2.0: Cloud computing fabric controller This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 28.2.0 ^^^^^^ Bug Fixes * Ironic virt driver now uses the node cache and respects partition keys, such as conductor group, for list_instances and list_instance_uuids calls. This fix will improve performance of the periodic queries which use these driver methods and reduce API and DB load on the backing Ironic service. Changes in nova 28.1.0..28.2.0 ------------------------------ 70a435fd51 Fix vmdk_allowed_types checking 0269234dc4 Additional qemu safety checking on base images 0acf5ee7b5 Check images with format_inspector for safety 736328f78f Reject qcow files with data-file attributes 625a10f7d0 Fix disk_formats in ceph job tempest config 555d7d0ad0 [ironic] Partition & use cache for list_instance* 0d970bfa5a Improve logging at '_numa_cells_support_network_metadata' 611bd95aab Adding server actions tests to grenade-multinode Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 +- nova/conf/workarounds.py | 10 + nova/image/format_inspector.py | 939 +++++++++++++++++++++ nova/virt/hardware.py | 27 +- nova/virt/images.py | 56 +- nova/virt/ironic/driver.py | 33 +- nova/virt/libvirt/imagebackend.py | 15 + nova/virt/libvirt/utils.py | 30 + ...nce-respect-partition-key-339ff653eaa00753.yaml | 5 + 14 files changed, 1443 insertions(+), 70 deletions(-)

1 0