- Release-announce - lists.openstack.org

ironic-inspector 11.5.0 (bobcat)
by no-reply＠openstack.org 01 Jun '23

01 Jun '23

We are pumped to announce the release of: ironic-inspector 11.5.0: =============================================== Hardware introspection for OpenStack Bare Metal =============================================== Introduction ============ .. image:: https://governance.openstack.org/tc/badges/ironic- inspector.svg :target: https://governance.openstack.org/tc/reference/tags/index.html This is an auxiliary service for discovering hardware properties for a node managed by `Ironic`_. Hardware introspection or hardware properties discovery is a process of getting hardware parameters required for scheduling from a bare metal node, given its power management credentials (e.g. IPMI address, user name and password). * Free software: Apache license * Source: https://opendev.org/openstack/ironic-inspector/ * Bugs: https://storyboard.openstack.org/#!/project/944 * Downloads: https://tarballs.openstack.org/ironic-inspector/ * Documentation: https://docs.openstack.org/ironic-inspector/latest/ * Python client library and CLI tool: `python-ironic-inspector-client <https://pypi.org/project/python-ironic-inspector-client>`_ (`documentation <https://docs.openstack.org/python-ironic-inspector- client/latest/>`_). .. _Ironic: https://wiki.openstack.org/wiki/Ironic .. note:: **ironic-inspector** was called *ironic-discoverd* before version 2.0.0. Release Notes ============= For information on any current or prior version, see `the release notes`_. .. _the release notes: https://docs.openstack.org/releasenotes/ironic- inspector/ This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. Changes in ironic-inspector 11.4.0..11.5.0 ------------------------------------------ 62e42d3 Imported Translations from Zanata c3dd0f1 Upgrade to latest hacking - v6 437e743 tests: Replace assertItemsEqual with assertCountEqual 974ec5a Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- ironic_inspector/test/unit/db/test_api.py | 12 ++++++------ releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + .../source/locale/en_GB/LC_MESSAGES/releasenotes.po | 15 +++++++++------ tox.ini | 2 +- 5 files changed, 23 insertions(+), 13 deletions(-)

1 0

ceilometer 18.1.0 (yoga)
by no-reply＠openstack.org 01 Jun '23

01 Jun '23

We are happy to announce the release of: ceilometer 18.1.0: OpenStack Telemetry This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ceilometer Download the package from: https://tarballs.openstack.org/ceilometer/ Please report issues through: https://bugs.launchpad.net/ceilometer/+bugs For more details, please see below. 18.1.0 ^^^^^^ New Features * Identify user and projects names with the help of their UUIDs in the polled samples. If they are identified, set "project_name" and "user_name" fields in the sample to the corresponding values. Changes in ceilometer 18.0.0..18.1.0 ------------------------------------ 7d9e167d Properly handle 'resource_id' as None for Gnocchi publisher 741605e9 Fix Non-OpenStack dynamic pollster credentials handling c6f00257 Add user/project names to polled samples 3517acea Add vanity names to telemetry polling notifications dcae2040 Fix barbican credentials retrieval b583cbca NoUniqueMatch: ClientException on Gnocchi publisher 51b0c368 Fix swift pollsters that use get_account 1f65bce6 Add CentOS Stream 9 jobs 51db4983 Add centos9s jobs 4fd15dfe Remove queue declaration and fix lower-constraint job cb132b30 Fix OutgoingBytesDeltaPollster sample name cc22c4d6 Debug log libvirt metadata version fails bed18e58 Update TOX_CONSTRAINTS_FILE for stable/yoga 86c7237f Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 9 +++- ceilometer/cache_utils.py | 53 ++++++++++++++++++ ceilometer/compute/pollsters/net.py | 2 +- ceilometer/compute/virt/libvirt/utils.py | 4 +- ceilometer/objectstore/swift.py | 2 +- .../non_openstack_credentials_discovery.py | 2 +- ceilometer/polling/dynamic_pollster.py | 14 +++++ ceilometer/polling/manager.py | 63 +++++++++++++++++++++- ceilometer/publisher/gnocchi.py | 56 +++++++++++++++---- ceilometer/publisher/utils.py | 2 + ceilometer/sample.py | 5 +- ceilometer/telemetry/notifications.py | 2 + .../test_non_openstack_credentials_discovery.py | 10 ++-- ...add-tenant-name-discovery-668260bb4b2b0e8c.yaml | 6 +++ test-requirements.txt | 1 + tox.ini | 6 +-- 20 files changed, 257 insertions(+), 41 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index adb4c60f..1a41d9d3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -18,0 +19 @@ testresources>=2.0.1 # Apache-2.0 +cryptography<=36.0.2 # Apache-2.0

1 0

ceilometer 19.1.0 (zed)
by no-reply＠openstack.org 01 Jun '23

01 Jun '23

We eagerly announce the release of: ceilometer 19.1.0: OpenStack Telemetry This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ceilometer Download the package from: https://tarballs.openstack.org/ceilometer/ Please report issues through: https://bugs.launchpad.net/ceilometer/+bugs For more details, please see below. 19.1.0 ^^^^^^ New Features ************ * Identify user and projects names with the help of their UUIDs in the polled samples. If they are identified, set "project_name" and "user_name" fields in the sample to the corresponding values. Bug Fixes ********* * [bug 2007108 (https://bugs.launchpad.net/ceilometer/+bug/2007108) The retired metrics dependent on SNMP have been removed from the default "polling.yaml". Changes in ceilometer 19.0.0..19.1.0 ------------------------------------ 5968c822 Properly handle 'resource_id' as None for Gnocchi publisher 7c121c45 Add vanity names to telemetry polling notifications 17648c71 Fix barbican credentials retrieval a059600c NoUniqueMatch: ClientException on Gnocchi publisher 23308bfa Remove SNMP metrics from default polling 38b7659c Add TCP publisher 1da0e14b Add user/project names to polled samples 5d246c6c Fix OutgoingBytesDeltaPollster sample name 142cb0b6 Remove lingering queue declaration 3f28ae3d Update TOX_CONSTRAINTS_FILE for stable/zed 9ffd73a7 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - ceilometer/cache_utils.py | 53 +++++ ceilometer/compute/pollsters/net.py | 2 +- .../non_openstack_credentials_discovery.py | 2 +- ceilometer/polling/manager.py | 63 +++++- ceilometer/publisher/gnocchi.py | 56 +++++- ceilometer/publisher/tcp.py | 94 +++++++++ ceilometer/publisher/utils.py | 6 +- ceilometer/sample.py | 5 +- ceilometer/telemetry/notifications.py | 2 + .../test_non_openstack_credentials_discovery.py | 10 +- etc/ceilometer/polling.yaml | 18 -- ...add-tenant-name-discovery-668260bb4b2b0e8c.yaml | 6 + .../notes/bug-2007108-dba7163b245ad8fd.yaml | 6 + setup.cfg | 1 + tox.ini | 6 +- 20 files changed, 557 insertions(+), 56 deletions(-)

1 0

kayobe 14.0.0.0rc1 (antelope)
by no-reply＠openstack.org 31 May '23

31 May '23

Hello everyone, A new release candidate for kayobe for the end of the Antelope cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kayobe/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Antelope release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/antelope release branch at: https://opendev.org/openstack/kayobe/src/branch/stable/antelope Release notes for kayobe can be found at: https://docs.openstack.org/releasenotes/kayobe/ If you find an issue that could be considered release-critical, please file it at: https://storyboard.openstack.org/#!/project/openstack/kayobe and tag it *antelope-rc-potential* to bring it to the kayobe release crew's attention.

1 0

tooz 4.1.0
by no-reply＠openstack.org 30 May '23

30 May '23

We jubilantly announce the release of: tooz 4.1.0: Coordination library for distributed systems. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz For more details, please see below. Changes in tooz 4.0.0..4.1.0 ---------------------------- 67bc01a Revert "Moves supported python runtimes from version 3.8 to 3.10" Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 108 ++++++++++++++++++++++++++++++------------------------------- setup.cfg | 3 +- 2 files changed, 56 insertions(+), 55 deletions(-)

1 0

openstack-ansible 24.6.1 (xena)
by no-reply＠openstack.org 30 May '23

30 May '23

We are pumped to announce the release of: openstack-ansible 24.6.1: Ansible playbooks for deploying OpenStack This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 24.6.0..24.6.1 ------------------------------------------- e1522c279 Bump OpenStack-Ansible for Xena EM c1df9384c Add internal_lb_vip_address to no_proxy Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 18 ++-- .../defaults/repo_packages/openstack_services.yml | 102 ++++++++++----------- .../templates/user_variables.aio.yml.j2 | 2 +- 3 files changed, 61 insertions(+), 61 deletions(-)

1 0

glance_store 4.5.0 (bobcat)
by no-reply＠openstack.org 30 May '23

30 May '23

We are tickled pink to announce the release of: glance_store 4.5.0: OpenStack Image Service Store Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 4.5.0 ^^^^^ Bug Fixes * A recent change to the RBD driver introduced a potential threading lockup when using native threads, and also a (process-)blocking call to an external library when using greenthreads. That change has been reverted until a better fix can be made. Changes in glance_store 4.4.0..4.5.0 ------------------------------------ 99f4014 Revert "RBD: Wrap RBD calls in native threads" ce86bf3 Update 'extras' for cinder driver ec38975 Imported Translations from Zanata Diffstat (except docs and test files) ------------------------------------- glance_store/_drivers/rbd.py | 12 ++---- .../notes/fix-rbd-lockup-3aa2bb86f7d29e19.yaml | 7 +++ .../locale/en_GB/LC_MESSAGES/releasenotes.po | 14 +++--- setup.cfg | 2 +- 5 files changed, 19 insertions(+), 66 deletions(-)

1 0

kolla-ansible 16.0.0.0rc1 (antelope)
by no-reply＠openstack.org 26 May '23

26 May '23

Hello everyone, A new release candidate for kolla-ansible for the end of the Antelope cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla-ansible/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Antelope release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/antelope release branch at: https://opendev.org/openstack/kolla-ansible/src/branch/stable/antelope Release notes for kolla-ansible can be found at: https://docs.openstack.org/releasenotes/kolla-ansible/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla-ansible/+bugs and tag it *antelope-rc-potential* to bring it to the kolla-ansible release crew's attention.

1 0

kolla 16.0.0.0rc1 (antelope)
by no-reply＠openstack.org 26 May '23

26 May '23

Hello everyone, A new release candidate for kolla for the end of the Antelope cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/kolla/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Antelope release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/antelope release branch at: https://opendev.org/openstack/kolla/src/branch/stable/antelope Release notes for kolla can be found at: https://docs.openstack.org/releasenotes/kolla/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/kolla/+bugs and tag it *antelope-rc-potential* to bring it to the kolla release crew's attention.

1 0

rally 3.4.0
by no-reply＠openstack.org 26 May '23

26 May '23

We joyfully announce the release of: rally 3.4.0: Generic Testing Framework & Tool that unifies all types of testing. The source is available from: https://opendev.org/openstack/rally Download the package from: https://pypi.org/project/rally For more details, please see below. Changes in rally 3.3.0..3.4.0 ----------------------------- e8613ffeb Propose rally 3.4.0 release b08ea0e93 Update requirements and upper-constraints.txt 177ad8b5f Use official python docker images 1694ddc50 Keep CI up-to-date 7e5a99602 Re-enable tox cover zuul job 14d449b2f Pin SQLAlchemy to <2.0.0 03155a82e remove unicode literal from code 846a5fe4e Suppress deprecation warning from docutils 165c21ef9 Fix CI issues 2359cd4ea [ci] Update used nodesets 58b12c2e0 Call pip install tox differently 72859c8f6 [ci] force reinstall of pip 2a77c6307 Close stringio objects at sshutils 675ea00d3 Update doc to do not refer to old installation script 0f0f20dab Add rally-tox-py39 job ab23f27e8 Replace deprecated inspect.getargspec 3c4398734 Moving IRC network reference to OFTC Diffstat (except docs and test files) ------------------------------------- .zuul.d/docker-jobs.yaml | 4 +- .zuul.d/install-jobs.yaml | 16 +-- .zuul.d/python-jobs.yaml | 38 +++-- .zuul.d/zuul.yaml | 17 ++- CHANGELOG.rst | 34 ++++- DOCKER_README.md | 12 +- Dockerfile | 12 +- bindep.txt | 1 - .../quick_start/tutorial/step_0_installation.rst | 42 ------ ...g_up_env_and_running_benchmark_from_samples.rst | 2 +- ...step_9_verifying_cloud_via_tempest_verifier.rst | 2 +- etc/motd_for_docker | 2 +- rally/cli/cliutils.py | 6 +- rally/cli/commands/task.py | 2 +- ...9_08e1515a576c_fix_invalid_verification_logs.py | 5 +- ...018_02_bc908ac9a1fc_move_deployment_to_env_2.py | 3 +- ...02_dc0fe6de6786_update_old_deployment_config.py | 3 +- rally/common/db/sa_types.py | 10 +- rally/task/engine.py | 6 +- rally/task/hook.py | 2 +- rally/utils/sshutils.py | 32 +++-- requirements.txt | 8 +- setup.cfg | 2 + test-requirements.txt | 6 +- .../roles/docker-build-image/tasks/main.yaml | 2 +- .../playbooks/roles/rally-tox/defaults/main.yaml | 4 + .../rally-tox/files/find_python_for_tox_env.py | 85 ++++++++++++ .../playbooks/roles/rally-tox/tasks/install.yaml | 35 +++++ tox.ini | 45 ++++-- upper-constraints.txt | 143 ++++++++++--------- 46 files changed, 559 insertions(+), 504 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 8fc8ac54e..b74bae4af 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14,2 +14,2 @@ oslo.db # Apache Software License -oslo.log!=3.44.2,!=4.1.2,!=4.2.0 # Apache Software License -paramiko # LGPL +oslo.log!=3.44.2,!=4.1.2,!=4.2.0,!=5.0.1,!=5.0.2,!=5.1.0 # Apache Software License +paramiko!=2.9.0,!=2.9.1 # LGPL @@ -17 +17 @@ pbr!=2.1.0 # Apache Software License -PrettyTable # BSD (3 clause) +PrettyTable!=3.4.0 # BSD (3 clause) @@ -22 +22 @@ requests!=2.20.0,!=2.24.0 # Apache License, Version -SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8 # MIT +SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,<2.0.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index e9572d868..8245a381e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9 @@ pytest # MIT -pytest-cov>=2.2.1 # MIT +pytest-cov # MIT @@ -20,2 +20,2 @@ testresources # UNKNOWN -docutils # public domain, Python, 2-Clause BSD, GPL 3 (see COPYING.txt) -Pygments # BSD +docutils<0.18 # public domain, Python, 2-Clause BSD, GPL 3 (see COPYING.txt) +Pygments # BSD-2-Clause

1 0

openstackdocstheme 3.1.1
by no-reply＠openstack.org 23 May '23

23 May '23

We are psyched to announce the release of: openstackdocstheme 3.1.1: OpenStack Docs Theme The source is available from: https://opendev.org/openstack/openstackdocstheme Download the package from: https://tarballs.openstack.org/openstackdocstheme/ For more details, please see below. Changes in openstackdocstheme 3.1.0..3.1.1 ------------------------------------------ b301ee7 Remove 'type' attribute of <script> element 88b610f Remove invalid attributes 7a6d3e8 Remove errant character 65fb860 Remove nested 'li' 9bfd0a4 Replace ampersand with HTML characters Diffstat (except docs and test files) ------------------------------------- openstackdocstheme/theme/openstackdocs/footer.html | 6 +- openstackdocstheme/theme/openstackdocs/header.html | 34 +++++---- openstackdocstheme/theme/openstackdocs/layout.html | 2 +- .../theme/openstackdocs/script_footer.html | 20 +++--- .../theme/openstackdocs/script_search.html | 4 +- openstackdocstheme/theme/openstackdocs/search.html | 9 ++- .../theme/openstackdocs/sidebartoc_menu.html | 40 +++++------ .../openstackdocs/sidebartoc_menu_apiref.html | 80 +++++++++++----------- openstackdocstheme/theme/starlingxdocs/footer.html | 4 +- .../theme/starlingxdocs/sidebartoc_menu.html | 12 ++-- .../starlingxdocs/sidebartoc_menu_apiref.html | 20 +++--- 11 files changed, 114 insertions(+), 117 deletions(-)

1 0

openstacksdk 1.2.0 (bobcat)
by no-reply＠openstack.org 22 May '23

22 May '23

We exuberantly announce the release of: openstacksdk 1.2.0: An SDK for building applications to work with OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 1.2.0 ^^^^^ New Features * Add Designate (DNS) support for zone shares. * Added support to create, list, get and delete share access rules with the shared file system service. * Added support to create, list, get, and delete share network subnets on the shared file system service. * Adds shelve_offload_server method to the compute proxy * Add support for Ironic Inspector Introspection Rules API. * Adds support for Node shards to baremetal service. * The "Resource.wait_for_status", "Resource.wait_for_delete", and related proxy wrappers now accept a "callback" argument that can be used to pass a callback function. When provided, the wait function will attempt to retrieve a "progress" value from the resource in question and pass it to the callback function each time it iterates. Changes in openstacksdk 1.1.0..1.2.0 ------------------------------------ a30f9562 Add 'callback' to 'wait_for_delete', 'wait_for_status' 1aa94250 Add find_share() for shared file system share resource 6d04b0c3 compute: Adds shelve-offload support 8357f004 ironic: Add support for Introspection Rules ec1a0355 nit: Correct name of variable 692b7f39 Added neutron fields to share network resource. aba2b417 Ignore black version bump c7010a2f Bump black to 23.3.0 c946294b pre-commit: Enable black 48ff44f0 Ignore blackify changes a36f5142 Blackify everything else 004c7352 Blackify openstack.cloud c2ff7336 Blackify openstack.clustering 073abda5 Blackify openstack.container_infrastructure_management 570b81f0 Blackify openstack.accelerator 33bed575 Blackify openstack.instance_ha 10018dbf Blackify openstack.dns 19ec9ba3 Blackify openstack.database 0e2b5d26 Blackify openstack.message 9d3d9862 Blackify openstack.workflow 874ea741 Blackify openstack.orchestration 409f648c Blackify openstack.placement 93d8f417 Blackify openstack.key_manager 3d2511f9 Blackify openstack.shared_file_system 82c2a534 Blackify openstack.load_balancer f8e42017 Blackify openstack.baremetal, openstack.baremetal_introspection 4589e293 Blackify openstack.object_store 34da09f3 Blackify openstack.block_storage 542ddaa1 Blackify openstack.identity f526b990 Blackify openstack.network bcf99f34 Blackify openstack.image 93256267 Use pre-commit for 'pep8' tox target, bump versions 6baf11f6 Prepare for hacking 6.x 69735d3b Blackify openstack.compute (tests) 395a7729 Blackify openstack.compute 22f89abf Add link to image sharing api docs 56e36607 Add share access rules to shared file system 0bc0d4b8 Add support for Ironic node shard attribute 9153d670 image: Don't envelope properties 7f87b6dd Add share network subnet resource to shared file system aab02350 Allow key overrides in create and fetch methods a7456043 Add Designate (DNS) zone share API 4e3f50c1 modify ovh and ovh-us vendor config Diffstat (except docs and test files) ------------------------------------- .git-blame-ignore-revs | 27 + .pre-commit-config.yaml | 16 +- .../resources/baremetal_introspection/index.rst | 1 + .../v1/introspection_rule.rst | 13 + .../user/resources/shared_file_system/index.rst | 2 + .../shared_file_system/v2/share_access_rule.rst | 13 + .../shared_file_system/v2/share_network_subnet.rst | 13 + examples/cloud/cleanup-servers.py | 10 +- examples/cloud/create-server-dict.py | 31 +- examples/cloud/create-server-name-or-id.py | 21 +- examples/cloud/debug-logging.py | 4 +- examples/cloud/find-an-image.py | 7 +- examples/cloud/http-debug-logging.py | 4 +- examples/cloud/munch-dict-object.py | 1 + examples/cloud/normalization.py | 4 +- examples/cloud/server-information.py | 8 +- examples/cloud/service-conditional-overrides.py | 1 + examples/cloud/service-conditionals.py | 1 + examples/cloud/strict-mode.py | 7 +- examples/cloud/upload-large-object.py | 7 +- examples/cloud/upload-object.py | 7 +- examples/cloud/user-agent.py | 4 +- examples/clustering/cluster.py | 9 +- examples/clustering/policy.py | 4 +- examples/clustering/profile.py | 6 +- examples/clustering/receiver.py | 13 +- examples/compute/create.py | 16 +- examples/connect.py | 24 +- examples/image/download.py | 1 - examples/image/import.py | 6 +- examples/key_manager/create.py | 12 +- examples/key_manager/list.py | 4 +- examples/network/create.py | 6 +- examples/network/delete.py | 3 +- examples/network/security_group_rules.py | 12 +- examples/shared_file_system/share_instances.py | 6 +- openstack/__main__.py | 14 +- openstack/_log.py | 11 +- openstack/_services_mixin.py | 116 +- openstack/accelerator/accelerator_service.py | 1 + openstack/accelerator/v2/_proxy.py | 21 +- openstack/accelerator/v2/accelerator_request.py | 30 +- openstack/accelerator/v2/deployable.py | 24 +- openstack/accelerator/v2/device_profile.py | 6 +- openstack/baremetal/configdrive.py | 77 +- openstack/baremetal/v1/_common.py | 8 +- openstack/baremetal/v1/_proxy.py | 244 +- openstack/baremetal/v1/allocation.py | 17 +- openstack/baremetal/v1/chassis.py | 1 - openstack/baremetal/v1/conductor.py | 1 - openstack/baremetal/v1/deploy_templates.py | 1 - openstack/baremetal/v1/driver.py | 39 +- openstack/baremetal/v1/node.py | 526 ++-- openstack/baremetal/v1/port.py | 5 +- openstack/baremetal/v1/port_group.py | 9 +- openstack/baremetal/v1/volume_connector.py | 4 +- openstack/baremetal/v1/volume_target.py | 4 +- openstack/baremetal_introspection/v1/_proxy.py | 90 +- .../baremetal_introspection/v1/introspection.py | 43 +- .../v1/introspection_rule.py | 44 + openstack/block_storage/_base_proxy.py | 23 +- openstack/block_storage/v2/_proxy.py | 75 +- openstack/block_storage/v2/backup.py | 76 +- openstack/block_storage/v2/quota_set.py | 1 - openstack/block_storage/v2/snapshot.py | 11 +- openstack/block_storage/v2/volume.py | 53 +- openstack/block_storage/v3/_proxy.py | 180 +- openstack/block_storage/v3/backup.py | 73 +- openstack/block_storage/v3/extension.py | 1 + openstack/block_storage/v3/group_snapshot.py | 8 +- openstack/block_storage/v3/group_type.py | 4 +- openstack/block_storage/v3/limits.py | 9 +- openstack/block_storage/v3/quota_set.py | 1 - openstack/block_storage/v3/resource_filter.py | 1 + openstack/block_storage/v3/snapshot.py | 21 +- openstack/block_storage/v3/type.py | 8 +- openstack/block_storage/v3/volume.py | 79 +- openstack/cloud/_accelerator.py | 4 +- openstack/cloud/_baremetal.py | 190 +- openstack/cloud/_block_storage.py | 85 +- openstack/cloud/_clustering.py | 4 +- openstack/cloud/_coe.py | 68 +- openstack/cloud/_compute.py | 490 ++-- openstack/cloud/_dns.py | 51 +- openstack/cloud/_floating_ip.py | 523 ++-- openstack/cloud/_identity.py | 279 +- openstack/cloud/_image.py | 79 +- openstack/cloud/_network.py | 748 +++-- openstack/cloud/_network_common.py | 139 +- openstack/cloud/_object_store.py | 105 +- openstack/cloud/_orchestration.py | 120 +- openstack/cloud/_security_group.py | 195 +- openstack/cloud/_utils.py | 89 +- openstack/cloud/cmd/inventory.py | 43 +- openstack/cloud/exc.py | 8 +- openstack/cloud/inventory.py | 33 +- openstack/cloud/meta.py | 113 +- openstack/cloud/openstackcloud.py | 148 +- openstack/clustering/v1/_async_resource.py | 5 +- openstack/clustering/v1/_proxy.py | 63 +- openstack/clustering/v1/action.py | 10 +- openstack/clustering/v1/cluster.py | 30 +- openstack/clustering/v1/cluster_policy.py | 3 +- openstack/clustering/v1/event.py | 10 +- openstack/clustering/v1/node.py | 22 +- openstack/clustering/v1/policy.py | 3 +- openstack/clustering/v1/profile.py | 3 +- openstack/clustering/v1/receiver.py | 10 +- openstack/common/metadata.py | 21 +- openstack/common/quota_set.py | 18 +- openstack/common/tag.py | 14 +- openstack/compute/compute_service.py | 2 +- openstack/compute/v2/_proxy.py | 284 +- openstack/compute/v2/aggregate.py | 6 +- openstack/compute/v2/flavor.py | 46 +- openstack/compute/v2/hypervisor.py | 9 +- openstack/compute/v2/image.py | 8 +- openstack/compute/v2/keypair.py | 3 +- openstack/compute/v2/limits.py | 47 +- openstack/compute/v2/quota_set.py | 6 +- openstack/compute/v2/server.py | 155 +- openstack/compute/v2/server_action.py | 1 - openstack/compute/v2/server_ip.py | 22 +- openstack/compute/v2/server_remote_console.py | 16 +- openstack/compute/v2/service.py | 25 +- openstack/compute/v2/usage.py | 4 +- openstack/config/__init__.py | 17 +- openstack/config/_util.py | 6 +- openstack/config/cloud_config.py | 1 - openstack/config/cloud_region.py | 351 ++- openstack/config/defaults.py | 3 +- openstack/config/loader.py | 354 ++- openstack/config/vendors/__init__.py | 8 +- openstack/config/vendors/citycloud.json | 2 +- openstack/config/vendors/ovh-us.json | 5 +- openstack/config/vendors/ovh.json | 31 +- openstack/connection.py | 86 +- .../v1/_proxy.py | 11 +- .../v1/cluster.py | 1 - .../v1/cluster_certificate.py | 1 - .../v1/cluster_template.py | 1 - .../v1/service.py | 1 - openstack/database/v1/_proxy.py | 58 +- openstack/database/v1/instance.py | 8 +- openstack/database/v1/user.py | 5 +- openstack/dns/v2/_base.py | 15 +- openstack/dns/v2/_proxy.py | 197 +- openstack/dns/v2/floating_ip.py | 1 + openstack/dns/v2/recordset.py | 12 +- openstack/dns/v2/zone.py | 26 +- openstack/dns/v2/zone_export.py | 18 +- openstack/dns/v2/zone_import.py | 18 +- openstack/dns/v2/zone_share.py | 45 + openstack/dns/v2/zone_transfer.py | 6 +- openstack/dns/version.py | 25 + openstack/exceptions.py | 57 +- openstack/fixture/connection.py | 10 +- openstack/format.py | 10 +- openstack/identity/v2/_proxy.py | 16 +- openstack/identity/v2/extension.py | 4 +- openstack/identity/v3/_proxy.py | 259 +- openstack/identity/v3/credential.py | 3 +- openstack/identity/v3/domain.py | 54 +- openstack/identity/v3/endpoint.py | 4 +- openstack/identity/v3/group.py | 24 +- openstack/identity/v3/limit.py | 3 +- openstack/identity/v3/project.py | 54 +- openstack/identity/v3/registered_limit.py | 3 +- openstack/identity/v3/role.py | 3 +- openstack/identity/v3/role_assignment.py | 17 +- openstack/identity/v3/system.py | 48 +- openstack/identity/v3/trust.py | 3 +- openstack/identity/version.py | 4 +- openstack/image/_download.py | 18 +- openstack/image/image_signer.py | 2 +- openstack/image/v1/image.py | 14 +- openstack/image/v2/_proxy.py | 13 +- openstack/image/v2/cache.py | 7 +- openstack/image/v2/image.py | 58 +- openstack/instance_ha/v1/_proxy.py | 18 +- openstack/instance_ha/v1/host.py | 9 +- openstack/instance_ha/v1/notification.py | 16 +- openstack/instance_ha/v1/segment.py | 8 +- openstack/key_manager/v1/_format.py | 1 - openstack/key_manager/v1/_proxy.py | 20 +- openstack/key_manager/v1/container.py | 4 +- openstack/key_manager/v1/order.py | 3 +- openstack/key_manager/v1/secret.py | 37 +- openstack/load_balancer/v2/_proxy.py | 253 +- openstack/load_balancer/v2/amphora.py | 30 +- openstack/load_balancer/v2/availability_zone.py | 9 +- openstack/load_balancer/v2/health_monitor.py | 20 +- openstack/load_balancer/v2/l7_policy.py | 14 +- openstack/load_balancer/v2/l7_rule.py | 17 +- openstack/load_balancer/v2/listener.py | 30 +- openstack/load_balancer/v2/load_balancer.py | 36 +- openstack/load_balancer/v2/member.py | 16 +- openstack/load_balancer/v2/pool.py | 20 +- openstack/load_balancer/v2/quota.py | 11 +- openstack/message/v2/_proxy.py | 61 +- openstack/message/v2/claim.py | 53 +- openstack/message/v2/message.py | 42 +- openstack/message/v2/queue.py | 45 +- openstack/message/v2/subscription.py | 45 +- openstack/network/v2/_base.py | 21 +- openstack/network/v2/_proxy.py | 1588 +++++++---- openstack/network/v2/address_group.py | 9 +- openstack/network/v2/address_scope.py | 4 +- openstack/network/v2/agent.py | 15 +- openstack/network/v2/availability_zone.py | 4 +- openstack/network/v2/bgp_speaker.py | 6 +- openstack/network/v2/firewall_group.py | 12 +- openstack/network/v2/firewall_policy.py | 7 +- openstack/network/v2/firewall_rule.py | 17 +- openstack/network/v2/flavor.py | 19 +- openstack/network/v2/floating_ip.py | 17 +- openstack/network/v2/health_monitor.py | 10 +- openstack/network/v2/listener.py | 12 +- openstack/network/v2/load_balancer.py | 12 +- openstack/network/v2/local_ip.py | 13 +- openstack/network/v2/local_ip_association.py | 6 +- openstack/network/v2/metering_label.py | 4 +- openstack/network/v2/metering_label_rule.py | 22 +- openstack/network/v2/ndp_proxy.py | 12 +- openstack/network/v2/network.py | 15 +- openstack/network/v2/network_ip_availability.py | 6 +- openstack/network/v2/network_segment_range.py | 13 +- openstack/network/v2/pool.py | 10 +- openstack/network/v2/pool_member.py | 6 +- openstack/network/v2/port.py | 39 +- openstack/network/v2/port_forwarding.py | 4 +- openstack/network/v2/qos_policy.py | 4 +- openstack/network/v2/qos_rule_type.py | 6 +- openstack/network/v2/quota.py | 10 +- openstack/network/v2/rbac_policy.py | 8 +- openstack/network/v2/router.py | 18 +- openstack/network/v2/security_group.py | 12 +- openstack/network/v2/security_group_rule.py | 23 +- openstack/network/v2/segment.py | 8 +- openstack/network/v2/service_profile.py | 4 +- openstack/network/v2/service_provider.py | 5 +- openstack/network/v2/subnet.py | 17 +- openstack/network/v2/subnet_pool.py | 8 +- openstack/network/v2/tap_flow.py | 6 +- openstack/network/v2/tap_service.py | 3 +- openstack/network/v2/trunk.py | 6 +- openstack/network/v2/vpn_endpoint_group.py | 7 +- openstack/network/v2/vpn_ike_policy.py | 11 +- openstack/network/v2/vpn_ipsec_policy.py | 9 +- openstack/network/v2/vpn_ipsec_site_connection.py | 23 +- openstack/network/v2/vpn_service.py | 12 +- openstack/object_store/v1/_base.py | 27 +- openstack/object_store/v1/_proxy.py | 386 ++- openstack/object_store/v1/account.py | 5 +- openstack/object_store/v1/container.py | 23 +- openstack/object_store/v1/info.py | 12 +- openstack/object_store/v1/obj.py | 65 +- openstack/orchestration/util/environment_format.py | 21 +- openstack/orchestration/util/event_utils.py | 31 +- openstack/orchestration/util/template_format.py | 11 +- openstack/orchestration/util/template_utils.py | 149 +- openstack/orchestration/util/utils.py | 8 +- openstack/orchestration/v1/_proxy.py | 159 +- openstack/orchestration/v1/resource.py | 5 +- openstack/orchestration/v1/software_config.py | 5 +- openstack/orchestration/v1/software_deployment.py | 6 +- openstack/orchestration/v1/stack.py | 73 +- openstack/orchestration/v1/stack_environment.py | 1 - openstack/orchestration/v1/stack_files.py | 1 - openstack/orchestration/v1/stack_template.py | 1 - openstack/orchestration/v1/template.py | 11 +- openstack/placement/placement_service.py | 1 + openstack/placement/v1/_proxy.py | 14 +- openstack/placement/v1/resource_provider.py | 7 +- openstack/proxy.py | 58 +- openstack/resource.py | 150 +- openstack/service_description.py | 69 +- .../shared_file_system_service.py | 1 + openstack/shared_file_system/v2/_proxy.py | 291 +- openstack/shared_file_system/v2/limit.py | 39 +- openstack/shared_file_system/v2/share.py | 26 +- .../shared_file_system/v2/share_access_rule.py | 84 + openstack/shared_file_system/v2/share_instance.py | 5 +- openstack/shared_file_system/v2/share_network.py | 25 +- .../shared_file_system/v2/share_network_subnet.py | 61 + openstack/shared_file_system/v2/share_snapshot.py | 7 +- openstack/shared_file_system/v2/storage_pool.py | 7 +- openstack/shared_file_system/v2/user_message.py | 4 +- .../baremetal/test_baremetal_allocation.py | 99 +- .../functional/baremetal/test_baremetal_chassis.py | 35 +- .../baremetal/test_baremetal_conductor.py | 1 - .../baremetal/test_baremetal_deploy_templates.py | 134 +- .../functional/baremetal/test_baremetal_driver.py | 29 +- .../functional/baremetal/test_baremetal_node.py | 192 +- .../functional/baremetal/test_baremetal_port.py | 67 +- .../baremetal/test_baremetal_port_group.py | 64 +- .../baremetal/test_baremetal_volume_connector.py | 129 +- .../baremetal/test_baremetal_volume_target.py | 127 +- .../functional/block_storage/v2/test_backup.py | 23 +- .../functional/block_storage/v2/test_snapshot.py | 24 +- .../functional/block_storage/v2/test_stats.py | 33 +- .../functional/block_storage/v2/test_volume.py | 12 +- .../block_storage/v3/test_availability_zone.py | 1 - .../functional/block_storage/v3/test_backup.py | 47 +- .../block_storage/v3/test_capabilities.py | 6 +- .../functional/block_storage/v3/test_extension.py | 1 - .../functional/block_storage/v3/test_limits.py | 1 - .../block_storage/v3/test_resource_filters.py | 1 - .../functional/block_storage/v3/test_snapshot.py | 24 +- .../functional/block_storage/v3/test_volume.py | 1 - .../functional/cloud/test_cluster_templates.py | 29 +- .../functional/cloud/test_floating_ip_pool.py | 3 +- .../cloud/test_qos_bandwidth_limit_rule.py | 38 +- .../functional/cloud/test_qos_dscp_marking_rule.py | 18 +- .../cloud/test_qos_minimum_bandwidth_rule.py | 18 +- .../identity/v3/test_application_credential.py | 19 +- .../functional/image/v2/test_metadef_namespace.py | 4 +- .../image/v2/test_metadef_resource_type.py | 24 +- .../functional/image/v2/test_metadef_schema.py | 1 - .../load_balancer/v2/test_load_balancer.py | 506 ++-- .../functional/network/v2/test_address_group.py | 7 +- .../functional/network/v2/test_address_scope.py | 7 +- .../network/v2/test_agent_add_remove_network.py | 7 +- .../network/v2/test_agent_add_remove_router.py | 7 +- .../network/v2/test_auto_allocated_topology.py | 14 +- .../network/v2/test_availability_zone.py | 1 - .../functional/network/v2/test_firewall_group.py | 1 - .../functional/network/v2/test_firewall_policy.py | 1 - .../functional/network/v2/test_firewall_rule.py | 1 - .../v2/test_firewall_rule_insert_remove_policy.py | 10 +- .../functional/network/v2/test_floating_ip.py | 8 +- .../network/v2/test_l3_conntrack_helper.py | 1 - .../network/v2/test_local_ip_association.py | 5 +- .../network/v2/test_network_ip_availability.py | 1 - .../network/v2/test_network_segment_range.py | 1 - .../functional/network/v2/test_port_forwarding.py | 1 - .../network/v2/test_qos_bandwidth_limit_rule.py | 3 +- .../network/v2/test_qos_dscp_marking_rule.py | 3 +- .../network/v2/test_qos_minimum_bandwidth_rule.py | 14 +- .../v2/test_qos_minimum_packet_rate_rule.py | 3 +- .../functional/network/v2/test_qos_rule_type.py | 7 +- .../functional/network/v2/test_rbac_policy.py | 1 - .../network/v2/test_router_add_remove_interface.py | 1 - .../functional/network/v2/test_security_group.py | 1 - .../network/v2/test_security_group_rule.py | 1 - .../functional/network/v2/test_service_profile.py | 17 +- .../network/v2/test_subnet_from_subnet_pool.py | 1 - .../functional/network/v2/test_subnet_pool.py | 1 - .../functional/object_store/v1/test_account.py | 1 - .../functional/object_store/v1/test_container.py | 19 +- .../functional/orchestration/v1/test_stack.py | 16 +- .../placement/v1/test_resource_provider.py | 7 +- .../shared_file_system/test_availability_zone.py | 1 - .../shared_file_system/test_export_locations.py | 17 +- .../functional/shared_file_system/test_limit.py | 31 +- .../functional/shared_file_system/test_share.py | 78 +- .../shared_file_system/test_share_access_rule.py | 79 + .../shared_file_system/test_share_instance.py | 43 +- .../shared_file_system/test_share_network.py | 48 +- .../test_share_network_subnet.py | 86 + .../shared_file_system/test_share_snapshot.py | 50 +- .../test_share_snapshot_instance.py | 16 +- .../shared_file_system/test_storage_pool.py | 10 +- .../shared_file_system/test_user_message.py | 19 +- .../accelerator/v2/test_accelerator_request.py | 13 +- .../unit/accelerator/v2/test_device_profile.py | 21 +- .../unit/baremetal/v1/test_deploy_templates.py | 38 +- .../unit/baremetal/v1/test_volume_connector.py | 9 +- .../v1/test_introspection_rule.py | 74 + .../unit/baremetal_introspection/v1/test_proxy.py | 109 +- .../block_storage/v3/test_availability_zone.py | 7 +- .../unit/block_storage/v3/test_capabilities.py | 46 +- .../unit/block_storage/v3/test_resource_filter.py | 28 +- .../unit/block_storage/v3/test_type_encryption.py | 1 - .../unit/cloud/test_coe_clusters_certificate.py | 80 +- .../unit/cloud/test_create_volume_snapshot.py | 158 +- .../unit/cloud/test_delete_volume_snapshot.py | 132 +- .../unit/cloud/test_qos_bandwidth_limit_rule.py | 728 +++-- .../unit/cloud/test_qos_minimum_bandwidth_rule.py | 533 ++-- .../unit/cloud/test_server_delete_metadata.py | 89 +- .../unit/clustering/v1/test_cluster_policy.py | 22 +- .../unit/compute/v2/test_availability_zone.py | 3 +- .../unit/compute/v2/test_server_diagnostics.py | 20 +- .../unit/compute/v2/test_server_remote_console.py | 22 +- .../unit/compute/v2/test_volume_attachment.py | 18 +- .../v1/test_cluster_certificate.py | 4 +- .../v1/test_cluster_template.py | 20 +- .../v1/test_proxy.py | 5 +- .../v1/test_service.py | 2 +- .../identity/v3/test_application_credential.py | 15 +- .../unit/identity/v3/test_federation_protocol.py | 7 +- .../unit/identity/v3/test_identity_provider.py | 4 +- .../unit/identity/v3/test_registered_limit.py | 8 +- .../v3/test_role_domain_group_assignment.py | 11 +- .../v3/test_role_domain_user_assignment.py | 11 +- .../v3/test_role_project_group_assignment.py | 13 +- .../v3/test_role_project_user_assignment.py | 11 +- .../v3/test_role_system_group_assignment.py | 13 +- .../v3/test_role_system_user_assignment.py | 13 +- .../unit/image/v2/test_metadef_resource_type.py | 5 +- .../v2/test_metadef_resource_type_association.py | 5 +- .../unit/load_balancer/test_availability_zone.py | 47 +- .../test_availability_zone_profile.py | 45 +- .../unit/load_balancer/test_flavor_profile.py | 21 +- .../unit/load_balancer/test_health_monitor.py | 59 +- .../network/v2/test_auto_allocated_topology.py | 1 - .../unit/network/v2/test_availability_zone.py | 1 - .../unit/network/v2/test_l3_conntrack_helper.py | 7 +- .../unit/network/v2/test_local_ip_association.py | 21 +- .../unit/network/v2/test_metering_label_rule.py | 13 +- .../network/v2/test_network_ip_availability.py | 35 +- .../unit/network/v2/test_network_segment_range.py | 11 +- .../network/v2/test_qos_bandwidth_limit_rule.py | 4 +- .../unit/network/v2/test_qos_dscp_marking_rule.py | 6 +- .../network/v2/test_qos_minimum_bandwidth_rule.py | 4 +- .../v2/test_qos_minimum_packet_rate_rule.py | 4 +- .../unit/network/v2/test_security_group_rule.py | 60 +- .../unit/network/v2/test_vpn_endpoint_group.py | 11 +- .../network/v2/test_vpn_ipsec_site_connection.py | 3 +- .../unit/orchestration/v1/test_software_config.py | 1 - .../orchestration/v1/test_software_deployment.py | 6 +- .../orchestration/v1/test_stack_environment.py | 26 +- .../unit/orchestration/v1/test_stack_files.py | 13 +- .../unit/orchestration/v1/test_stack_template.py | 47 +- .../unit/placement/v1/test_resource_provider.py | 7 +- .../v2/test_availability_zone.py | 1 - .../v2/test_share_access_rule.py | 53 + .../v2/test_share_export_locations.py | 15 +- .../shared_file_system/v2/test_share_instance.py | 56 +- .../shared_file_system/v2/test_share_network.py | 39 +- .../v2/test_share_network_subnet.py | 72 + .../shared_file_system/v2/test_share_snapshot.py | 35 +- .../v2/test_share_snapshot_instance.py | 9 +- .../shared_file_system/v2/test_storage_pool.py | 32 +- .../shared_file_system/v2/test_user_message.py | 32 +- openstack/utils.py | 93 +- openstack/workflow/v2/_proxy.py | 25 +- openstack/workflow/v2/cron_trigger.py | 28 +- openstack/workflow/v2/execution.py | 22 +- openstack/workflow/v2/workflow.py | 19 +- .../add-dns-zone-share-api-374e71cac504917f.yaml | 4 + ...cess-rules-to-shared-file-362bee34f7331186.yaml | 5 + ...ork-subnet-to-shared-file-b5de3ce6ca723209.yaml | 5 + .../notes/add-shelve_offload-427f6550fc55e622.yaml | 4 + ...trospection_rules_support-18b0488a76800122.yaml | 3 + .../notes/ironic-node-shard-35f2557c3dbfff1d.yaml | 4 + ...network_add_bgp_resources-c182dc2873d6db18.yaml | 2 +- ...tus_delete_callback_param-68d30161e23340bb.yaml | 8 + releasenotes/source/conf.py | 34 +- setup.py | 4 +- tools/keystone_version.py | 8 +- tools/nova_version.py | 23 +- tools/print-services.py | 13 +- tox.ini | 14 +- 818 files changed, 46776 insertions(+), 28747 deletions(-)

1 0

neutron-lib 3.6.1 (bobcat)
by no-reply＠openstack.org 22 May '23

22 May '23

We eagerly announce the release of: neutron-lib 3.6.1: Neutron shared routines and utilities This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 3.6.0..3.6.1 ----------------------------------- c5ca1dd Context.elevated() method sets all required roles for context object Diffstat (except docs and test files) ------------------------------------- neutron_lib/context.py | 5 +++-- 2 files changed, 32 insertions(+), 2 deletions(-)

1 0

cinder 21.3.0 (zed)
by no-reply＠openstack.org 17 May '23

17 May '23

We are jazzed to announce the release of: cinder 21.3.0: OpenStack Block Storage This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 21.3.0 ^^^^^^ Known Issues ************ * For security reasons (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) manually deleting an attachment, manually doing the "os-terminate_connection" "os- detach" or "os-force_detach" actions will no longer be allowed unless the request is coming from another OpenStack service on behalf of a user. Upgrade Notes ************* * Nova must be configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html) **and** cinder must be configured to recognize at least one of the roles that the nova service user has been assigned in keystone. By default, cinder will recognize the "service" role, so if the nova service user is assigned a differently named role in your cloud, you must adjust your cinder configuration file ("service_token_roles" configuration option in the "keystone_authtoken" section). If nova and cinder are not configured correctly in this regard, detaching volumes will no longer work (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Critical Issues *************** * Detaching volumes will fail if Nova is not configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html), please read the upgrade section for more information. (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Security Issues *************** * As part of the fix for Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) cinder now rejects user attachment delete requests for attachments that are being used by nova instances to ensure that no leftover devices are produced on the compute nodes which could be used to access another project's volumes. Terminate connection, detach, and force detach volume actions are not allowed for users. Bug Fixes ********* * Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) Fixed issue where a user manually deleting an attachment, calling terminate connection, detach, or force detach, for a volume that is still used by a nova instance resulted in leftover devices on the compute node. These operations will now fail. Changes in cinder 21.2.0..21.3.0 -------------------------------- cb4682fb8 Reject unsafe delete attachment calls Diffstat (except docs and test files) ------------------------------------- api-ref/source/v3/attachments.inc | 15 ++ api-ref/source/v3/volumes-v3-volumes-actions.inc | 55 ++++++ cinder/compute/nova.py | 7 + cinder/exception.py | 7 + cinder/volume/api.py | 98 +++++++++++ .../configuration/block-storage/service-token.rst | 46 +++-- .../redirect-detach-nova-4b7b7902d7d182e0.yaml | 42 +++++ 15 files changed, 503 insertions(+), 23 deletions(-)

1 0

nova 25.2.0 (yoga)
by no-reply＠openstack.org 17 May '23

17 May '23

We enthusiastically announce the release of: nova 25.2.0: Cloud computing fabric controller This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 25.2.0 ^^^^^^ Upgrade Notes * Configuration of service user tokens is now **required** for all Nova services to ensure security of block-storage volume data. All Nova configuration files must configure the "[service_user]" section as described in the documentation. See https://bugs.launchpad.net/nova/+bug/2004555 for more details. (https://docs.openstack.org/nova/latest/admin/configuration /service-user-token.html) Changes in nova 25.1.1..25.2.0 ------------------------------ acb31f01b1 CI: fix backport validator for new branch naming 98c3e3707c Enable use of service user token with admin context 4d8efa2d19 Use force=True for os-brick disconnect during delete 6c1b862274 Remove deleted projects from flavor access list 286aadf289 Handle InstanceInvalidState exception 37129b4b44 Remove mentions of removed scheduler filters 5f086d437e Fix LM rollback w/o multi port bindings extension Diffstat (except docs and test files) ------------------------------------- .../admin/configuration/cross-cell-resize.rst | 2 +- .../admin/configuration/service-user-token.rst | 59 ++++++++++++++++++++ .../admin/migrate-instance-with-snapshot.rst | 2 +- nova/api/openstack/compute/flavor_access.py | 9 ++- nova/api/openstack/compute/remote_consoles.py | 3 + nova/api/openstack/identity.py | 22 +++++--- nova/cmd/status.py | 11 ++++ nova/conf/compute.py | 12 +--- nova/network/neutron.py | 8 ++- nova/service_auth.py | 6 +- .../functional/regressions/test_bug_1888395.py | 13 ++--- .../api/openstack/compute/test_flavor_access.py | 25 ++++++++- .../api/openstack/compute/test_remote_consoles.py | 12 ++++ .../unit/virt/libvirt/volume/test_fibrechannel.py | 20 +++++++ .../unit/virt/libvirt/volume/test_storpool.py | 16 +++++- .../unit/virt/libvirt/volume/test_vzstorage.py | 8 ++- nova/virt/hyperv/vmops.py | 2 +- nova/virt/hyperv/volumeops.py | 12 ++-- nova/virt/libvirt/driver.py | 18 +++--- nova/virt/libvirt/volume/fibrechannel.py | 7 ++- nova/virt/libvirt/volume/fs.py | 2 +- nova/virt/libvirt/volume/iscsi.py | 7 ++- nova/virt/libvirt/volume/lightos.py | 7 ++- nova/virt/libvirt/volume/nvme.py | 6 +- nova/virt/libvirt/volume/quobyte.py | 2 +- nova/virt/libvirt/volume/scaleio.py | 7 ++- nova/virt/libvirt/volume/smbfs.py | 2 +- nova/virt/libvirt/volume/storpool.py | 5 +- nova/virt/libvirt/volume/volume.py | 2 +- nova/virt/libvirt/volume/vzstorage.py | 5 +- nova/volume/cinder.py | 8 ++- .../notes/service-user-token-421d067c16257782.yaml | 11 ++++ tools/check-cherry-picks.sh | 2 +- 55 files changed, 560 insertions(+), 157 deletions(-)

1 0

puppet-mistral 19.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are pleased to announce the release of: puppet-mistral 19.4.1: Puppet module for OpenStack Mistral This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-mistral Download the package from: https://tarballs.openstack.org/puppet-mistral/ Please report issues through: https://bugs.launchpad.net/puppet-mistral/+bugs For more details, please see below. 19.4.1 ^^^^^^ Bug Fixes * Now the base "Puppet::Provider::Mistral" class loads service user credential using the proper keystoneauth parameters. Changes in puppet-mistral 19.4.0..19.4.1 ---------------------------------------- 23c7017 Prepare the final stable/xena release 987849d setuptools: Disable auto discovery 2a7b5ba Fix authtoken parameters to load service user credential 952145c Update TOX_CONSTRAINTS_FILE for stable/xena 746710c Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lib/puppet/provider/mistral.rb | 9 ++-- metadata.json | 2 +- .../notes/bug-1961601-1df5a15bead1daf3.yaml | 5 +++ setup.py | 1 + spec/unit/provider/mistral_spec.rb | 48 ++++++++++++++++++++++ tox.ini | 2 +- 7 files changed, 61 insertions(+), 7 deletions(-)

1 0

puppet-tempest 19.5.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are excited to announce the release of: puppet-tempest 19.5.1: Puppet module for OpenStack Tempest This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-tempest Download the package from: https://tarballs.openstack.org/puppet-tempest/ Please report issues through: https://bugs.launchpad.net/puppet-tempest/+bugs For more details, please see below. 19.5.1 ^^^^^^ Bug Fixes * The "tempest" class no longer installes a "python3-<service>-tests" package, unless the package provides tempest plugins. * Now the "python3-keystone-tests-tempest" package is installed instead of the "python3-keyston-tests" package in CentOS and RHEL. * Default value of the "tempest::tempest_repo_uri" parameter has been updated and now the OpenDev repository is used instead of Github. Changes in puppet-tempest 19.5.0..19.5.1 ---------------------------------------- ebe6917 Prepare the final stable/xena release da6ec76 setuptools: Disable auto discovery 0d7072e CentOS: Install tempest plugin packages only a21b29e Change git url for Tempest to opendev.org Diffstat (except docs and test files) ------------------------------------- manifests/init.pp | 4 ++-- manifests/params.pp | 10 ++++++---- metadata.json | 2 +- releasenotes/notes/bug-1969361-849e95dbcf6f8395.yaml | 9 +++++++++ releasenotes/notes/tempest-repo-opendev-76ee1bab934194fa.yaml | 5 +++++ setup.py | 1 + spec/classes/tempest_init_spec.rb | 2 +- 7 files changed, 25 insertions(+), 8 deletions(-)

1 0

puppet-swift 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are glad to announce the release of: puppet-swift 19.5.0: Puppet module for OpenStack Swift This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-swift Download the package from: https://tarballs.openstack.org/puppet-swift/ Please report issues through: https://bugs.launchpad.net/puppet-swift/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Now this module supports configurion options in */etc/swift /internal-client.conf`*. * The "swift::proxy::ceilometer" class now supports the following new parameters to manage options for Rabbit driver in oslo.messaging library. * "rabbit_ha_queues" * "heartbeat_timeout_threshold" * "heartbeat_rate" * "heartbeat_in_pthread" * "rabbit_qos_prefetch_count" * "amqp_durable_queues" * "kombu_reconnect_delay" * "kombu_failover_strategy" * "kombu_compression" Changes in puppet-swift 19.4.0..19.5.0 -------------------------------------- 65a08a5 Prepare the final stable/xena release e4a28d2 Ensure consistent IPv6 address format e7d8c64 setuptools: Disable auto discovery f2c839d Fix deprecation warning by validate_legacy ced957d Fix type validation warning for storage policy rings b5cb280 Support customizing internal-client.conf ff757c6 Support more [oslo_messaging_rabbit] parameters 331b926 Fix typo in swiftinit service type e7d5607 Fix missing argument of builder_file_path 5f5fac7 Remove TripleO job 635e94d Update TOX_CONSTRAINTS_FILE for stable/xena a72d035 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 18 --- lib/puppet/provider/service/swiftinit.rb | 2 +- .../swift_internal_client_config/ini_setting.rb | 10 ++ lib/puppet/provider/swift_ring_builder.rb | 6 +- lib/puppet/type/ring_account_device.rb | 15 ++- lib/puppet/type/ring_container_device.rb | 15 ++- lib/puppet/type/ring_object_device.rb | 19 ++- lib/puppet/type/swift_internal_client_config.rb | 53 ++++++++ manifests/config.pp | 8 ++ manifests/deps.pp | 4 + manifests/internal_client.pp | 95 +++++++++++++++ manifests/internal_client/cache.pp | 76 ++++++++++++ manifests/internal_client/catch_errors.pp | 25 ++++ manifests/internal_client/proxy_logging.pp | 15 +++ manifests/internal_client/symlink.pp | 42 +++++++ manifests/proxy/ceilometer.pp | 134 ++++++++++++++++----- manifests/ringbuilder/create.pp | 6 +- manifests/ringbuilder/rebalance.pp | 6 +- manifests/storage/node.pp | 6 +- metadata.json | 2 +- .../notes/internal-client-ce022fa93df88aaa.yaml | 5 + ...slo-messaging-rabbit-opts-e4da4a73d1f2c788.yaml | 15 +++ setup.py | 1 + spec/classes/swift_config_spec.rb | 11 ++ spec/classes/swift_internal_client_cache_spec.rb | 78 ++++++++++++ .../swift_internal_client_catch_errors_spec.rb | 19 +++ spec/classes/swift_internal_client_spec.rb | 73 +++++++++++ spec/classes/swift_internal_client_symlink_spec.rb | 33 +++++ spec/classes/swift_proxy_ceilometer_spec.rb | 20 ++- spec/defines/swift_ringbuilder_create_spec.rb | 14 ++- spec/defines/swift_ringbuilder_rebalance_spec.rb | 16 ++- .../ini_setting_spec.rb | 49 ++++++++ .../unit/type/swift_internal_client_config_spec.rb | 19 +++ tox.ini | 2 +- 35 files changed, 829 insertions(+), 84 deletions(-)

1 0

puppet-gnocchi 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are gleeful to announce the release of: puppet-gnocchi 19.5.0: Puppet module for OpenStack Gnocchi This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-gnocchi Download the package from: https://tarballs.openstack.org/puppet-gnocchi/ Please report issues through: https://bugs.launchpad.net/puppet-gnocchi/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Install python-boto3 automatically in order to satisfy s3 storage backend package dependencies. This can be disabled by setting the "gnocchi::storage::s3::manage_boto3" parameter. Changes in puppet-gnocchi 19.4.0..19.5.0 ---------------------------------------- fdc70e2 Prepare the final stable/xena release 0221ef2 setuptools: Disable auto discovery db97bc7 s3_access_key_id should be secret a51f532 Ensure required packages are installed for s3 support. 1cf22a1 Update TOX_CONSTRAINTS_FILE for stable/xena 21379e2 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/params.pp | 1 + manifests/storage/s3.pp | 21 ++++++++++- metadata.json | 2 +- .../fix-s3-and-install-boto3-49991c1b453c2168.yaml | 6 ++++ setup.py | 1 + spec/classes/gnocchi_storage_s3_spec.rb | 42 +++++++++++++++++++++- tox.ini | 2 +- 8 files changed, 72 insertions(+), 4 deletions(-)

1 0

puppet-keystone 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are jazzed to announce the release of: puppet-keystone 19.5.0: Puppet module for OpenStack Keystone This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * Added "description" parameter to "keystone_user" resource. * The "keystone::federation::ipenidc" class now supports the new "openidc_response_mode" parameter, to customize mod_auth_openidc response mode. Security Issues *************** * Content of fernet keys and credential keys are now hidden from output, when these files are updated. Changes in puppet-keystone 19.4.0..19.5.0 ----------------------------------------- 16883a6 Prepare the final stable/xena release ca43d64 OIDC: Make sure the dependent auth modules are loaded 9510fcd setuptools: Disable auto discovery f5d1daf Ensure key contents are hidden 114272f Make sure keystone package name is asserted 07c30e3 Add description support to keystone_user 801f94d keystone_user: Use un-scoped token to verify password ed8ab83 Ensure inet6: formatting for a comma-separated list string bcc37d7 Use systemctl to restart the keystone service 2b391b4 OIDC: Add support for setting OIDCResponseMode cd8172d Remove TripleO job d48547f Update TOX_CONSTRAINTS_FILE for stable/xena 73184be Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 --- lib/puppet/provider/keystone.rb | 11 +- lib/puppet/provider/keystone_user/openstack.rb | 25 ++-- lib/puppet/type/keystone_user.rb | 4 + manifests/federation/openidc.pp | 9 ++ manifests/init.pp | 4 +- manifests/resource/authtoken.pp | 7 +- metadata.json | 2 +- .../notes/bug-1979672-003a5939f3bd6f67.yaml | 5 + ...user-provider-description-18806553c4b2be3f.yaml | 4 + .../openidc_response_mode-f5a2ddf95bd4b752.yaml | 6 + setup.py | 1 + spec/acceptance/keystone_wsgi_apache_spec.rb | 11 +- spec/classes/keystone_federation_openidc_spec.rb | 15 +++ spec/classes/keystone_init_spec.rb | 15 ++- spec/defines/keystone_resource_authtoken_spec.rb | 39 +++++- spec/unit/provider/keystone_spec.rb | 2 +- spec/unit/provider/keystone_user/openstack_spec.rb | 131 +++++++++------------ templates/openidc.conf.erb | 3 + tox.ini | 2 +- 21 files changed, 185 insertions(+), 131 deletions(-)

1 0

puppet-nova 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are psyched to announce the release of: puppet-nova 19.5.0: Puppet module for OpenStack Nova This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Added "disable_compute_service_check_for_ffu" paramter to "nova::workarounds" to configure the configuration option with the same name. * Added "enable_qemu_monitor_announce_self" paramter to "nova::workarounds" to configure the configuration option with the same name. * The following parameter and class have been added, to support usage of the service token feature with the Barbican key manager. * The "nova::key_manager::barbican::send_service_user_token" parameter * The "nova::key_manager::barbican::service_user" class * Add "sysinfo_serial" parameter to control a Serial number entry generation method. Defaults to "$::os_service_default". * The "nova_flavor" resource now supports the "project_name" property. This property should be used instead of the "project" property when project name is used instead of project id. * New parameters "max_client_requests" and "admin_max_client_requests" allow to configure corresponding settings for libvirt. * Added parameter "wait_for_vif_plugged_event_during_hard_reboot" to "nova::workarounds" to configure the config option with the same name. Changes in puppet-nova 19.4.0..19.5.0 ------------------------------------- 9b412fde Prepare the final stable/xena release 9061e0c5 Wire-in max_client_requests for libvirt 74e9c951 setuptools: Disable auto discovery d0e7fb98 Expose [workaround]/disable_compute_service_check_for_ffu c4ed32df Add sysinfo_serial to control Serial number gen a66c8b4c Add wait_for_vif_plugged_event_during_hard_reboot bdf1413f nova_flavor: Add the new project_name property c6fbc193 Remove unused str2hash f887f207 Ensure auth_endpoint is cleared by reset f5be102f Fix missing update of property_hash 7238c13a Add enable_qemu_monitor_announce_self workaround b750dc10 nova_flavor: Strip '' from project id value b9398853 CentOS: Ensure /etc/sysconfig/libvirtd(-guests) exists a8b79dbb Fix error in 140chars lint check 2f409b6d Debian/Ubuntu: Use ceph-common instead of ceph 956c8e5a key_manager: Add service user options for Barbican key manager 38079353 Override default mkisofs_cmd in CentOS 9. 3fc355a1 Use service anchor to ensure API is up 119f4616 Add missing dependency about nova_api_paste_ini 542e1fbc Remove TripleO job b6996814 Update TOX_CONSTRAINTS_FILE for stable/xena 4688ca65 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ---- lib/puppet/provider/nova.rb | 11 +-- lib/puppet/provider/nova_aggregate/openstack.rb | 2 + lib/puppet/provider/nova_cell_v2/nova_manage.rb | 20 ++-- lib/puppet/provider/nova_flavor/openstack.rb | 86 +++++++++++++---- lib/puppet/provider/nova_service/openstack.rb | 8 +- lib/puppet/type/nova_flavor.rb | 26 ++++- manifests/api.pp | 2 +- manifests/compute.pp | 13 ++- manifests/compute/libvirt.pp | 6 ++ manifests/compute/libvirt/virtnodedevd.pp | 37 ++++--- manifests/compute/libvirt/virtproxyd.pp | 41 +++++--- manifests/compute/libvirt/virtqemud.pp | 37 ++++--- manifests/compute/libvirt/virtsecretd.pp | 37 ++++--- manifests/compute/libvirt_guests.pp | 9 ++ manifests/compute/rbd.pp | 2 +- manifests/config.pp | 4 +- manifests/cron/archive_deleted_rows.pp | 5 +- manifests/cron/purge_shadow_tables.pp | 5 +- manifests/deps.pp | 4 + manifests/key_manager/barbican.pp | 34 ++++--- manifests/key_manager/barbican/service_user.pp | 94 ++++++++++++++++++ manifests/migration/libvirt.pp | 9 ++ manifests/params.pp | 5 +- manifests/workarounds.pp | 37 ++++++- metadata.json | 2 +- ...ute_service_check_for_ffu-4c4cc458df3ca33b.yaml | 6 ++ ...emu_monitor_announce_self-9e307efdb0061fce.yaml | 6 ++ .../barbican_service_user-887eb51cb8e9efce.yaml | 8 ++ .../libvirt_sysinfo_serial-e1603d45446726c3.yaml | 5 + .../nova_flavor-project_name-fbab75b57ad9d4b3.yaml | 6 ++ ...bvirt_max_client_requests-1709c1d7a282264d.yaml | 5 + ..._event_during_hard_reboot-092dada6f6a1e632.yaml | 5 + setup.py | 1 + spec/acceptance/nova_wsgi_apache_spec.rb | 28 ++++-- spec/classes/nova_api_spec.rb | 4 +- spec/classes/nova_compute_libvirt_guests_spec.rb | 23 ++++- spec/classes/nova_compute_libvirt_spec.rb | 3 + .../nova_compute_libvirt_virtnodedevd_spec.rb | 18 ++-- .../nova_compute_libvirt_virtproxyd_spec.rb | 20 ++-- .../classes/nova_compute_libvirt_virtqemud_spec.rb | 18 ++-- .../nova_compute_libvirt_virtsecretd_spec.rb | 18 ++-- spec/classes/nova_compute_rbd_spec.rb | 5 +- .../nova_key_manager_barbican_service_user_spec.rb | 79 +++++++++++++++ spec/classes/nova_key_manager_barbican_spec.rb | 45 +++++---- spec/classes/nova_migration_libvirt_spec.rb | 15 +++ spec/classes/nova_workarounds_spec.rb | 17 +++- .../unit/provider/nova_aggregate/openstack_spec.rb | 3 +- spec/unit/provider/nova_flavor/openstack_spec.rb | 107 +++++++++++++++++++-- spec/unit/provider/nova_spec.rb | 27 ------ tox.ini | 2 +- 52 files changed, 780 insertions(+), 250 deletions(-)

1 0

cinder 22.1.0 (antelope)
by no-reply＠openstack.org 17 May '23

17 May '23

We are ecstatic to announce the release of: cinder 22.1.0: OpenStack Block Storage This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 22.1.0 ^^^^^^ Known Issues ************ * For security reasons (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) manually deleting an attachment, manually doing the "os-terminate_connection", "os- detach" or "os-force_detach" actions will no longer be allowed in most cases unless the request is coming from another OpenStack service on behalf of a user. Upgrade Notes ************* * Nova must be configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html) **and** cinder must be configured to recognize at least one of the roles that the nova service user has been assigned in keystone. By default, cinder will recognize the "service" role, so if the nova service user is assigned a differently named role in your cloud, you must adjust your cinder configuration file ("service_token_roles" configuration option in the "keystone_authtoken" section). If nova and cinder are not configured correctly in this regard, detaching volumes will no longer work (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Critical Issues *************** * Detaching volumes will fail if Nova is not configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html), please read the upgrade section for more information. (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Security Issues *************** * As part of the fix for Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) cinder now rejects user attachment delete requests for attachments that are being used by nova instances to ensure that no leftover devices are produced on the compute nodes which could be used to access another project's volumes. Terminate connection, detach, and force detach volume actions (calls that are not usually made by users directly) are, in most cases, not allowed for users. Bug Fixes ********* * Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) Fixed issue where a user manually deleting an attachment, calling terminate connection, detach, or force detach, for a volume that is still used by a nova instance resulted in leftover devices on the compute node. These operations will now fail when it is believed to be a problem. Changes in cinder 22.0.0..22.1.0 -------------------------------- dd6010a9f Reject unsafe delete attachment calls 5975376ba [Pure Storage] Add check for new error message 63e6dfdb0 Update url of "Unity Replication White Paper" Diffstat (except docs and test files) ------------------------------------- api-ref/source/v3/attachments.inc | 15 ++ api-ref/source/v3/volumes-v3-volumes-actions.inc | 55 ++++++ cinder/compute/nova.py | 7 + cinder/exception.py | 7 + cinder/volume/api.py | 98 +++++++++++ cinder/volume/drivers/pure.py | 6 +- .../drivers/dell-emc-unity-driver.rst | 4 +- .../configuration/block-storage/service-token.rst | 46 +++-- .../redirect-detach-nova-4b7b7902d7d182e0.yaml | 43 +++++ 17 files changed, 510 insertions(+), 27 deletions(-)

1 0

python-heatclient 3.3.0 (bobcat)
by no-reply＠openstack.org 17 May '23

17 May '23

We are psyched to announce the release of: python-heatclient 3.3.0: OpenStack Orchestration API Client Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/python-heatclient Download the package from: https://pypi.org/project/python-heatclient Please report issues through: https://bugs.launchpad.net/python-heatclient/+bugs For more details, please see below. Changes in python-heatclient 3.2.0..3.3.0 ----------------------------------------- 668d85f Add Python 3.10 to supported runtime. e2c006b Update master for stable/2023.1 3edca52 Switch to 2023.1 Python3 unit tests and generic template name Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + setup.cfg | 1 + 4 files changed, 9 insertions(+), 1 deletion(-)

1 0

puppet-openstacklib 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We jubilantly announce the release of: puppet-openstacklib 19.5.0: Puppet module for OpenStack Openstacklib This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-openstacklib Download the package from: https://tarballs.openstack.org/puppet-openstacklib/ Please report issues through: https://bugs.launchpad.net/puppet-openstacklib/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * The new "openstacklib::clouds" resource type has been added, which manages the "clouds.yaml" file to store credentials for the "openstack" cli. * Now "Puppet::Provider::Openstack::CredentialsV3" supports loading credentials from the "clouds.yaml" file. * Now "Puppet::Provider::Openstack::CredentialsV3" supports system scope credential and domain scope credential in addition to project scope credential. Changes in puppet-openstacklib 19.4.0..19.5.0 --------------------------------------------- f8ead08 Prepare the final stable/xena release 0c69f9b setuptools: Disable auto discovery a034d8a Hide differences when updating clouds.yaml 369c516 Support clouds.yaml to manage keystone user credentials cb51302 Support system/domain scope credential 43696fd Ubuntu: Use utf8mb3 charset in MySQL 81ea071 Make regex matching policy key stricter 5cc3c2a policy: Quote single quotes in yaml format 86d250a Remove TripleO job 588d892 Update TOX_CONSTRAINTS_FILE for stable/xena f52a59e Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ----- lib/puppet/provider/openstack/auth.rb | 6 +- lib/puppet/provider/openstack/credentials.rb | 43 ++++++++++- manifests/clouds.pp | 76 +++++++++++++++++++ manifests/policy/base.pp | 10 ++- metadata.json | 2 +- .../notes/clouds-yaml-e8a87dfceba4619d.yaml | 10 +++ .../system-scope-credential-113608525e12a22d.yaml | 6 ++ setup.py | 1 + spec/acceptance/mysql_spec.rb | 8 +- spec/acceptance/openstacklib_policy_base_spec.rb | 14 ++++ spec/defines/openstacklib_clouds_spec.rb | 41 +++++++++++ spec/defines/openstacklib_policy_base_spec.rb | 30 +++++++- spec/unit/provider/openstack/credentials_spec.rb | 85 +++++++++++++++++++++- templates/clouds.yaml.erb | 38 ++++++++++ tox.ini | 2 +- 17 files changed, 359 insertions(+), 33 deletions(-)

1 0

puppet-horizon 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We jubilantly announce the release of: puppet-horizon 19.5.0: Puppet module for OpenStack Horizon This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-horizon Download the package from: https://tarballs.openstack.org/puppet-horizon/ Please report issues through: https://bugs.launchpad.net/puppet-horizon/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The new "horizon::wsgi::apache::ssl_extra_params" parameter has been added. This parameter affects only ssl vhost and overrides the "extra_params" parameter when set. Bug Fixes ********* * Bug #1956904 (https://bugs.launchpad.net/puppet- horizon/+bug/1956904): The hard-coded "REST_API_REQUIRED_SETTINGS" parameter was removed, to use the default value defined in Horizon itself. * Fix HORIZON_IMAGES_UPLOAD_MODE in template file because the value must be encapsulated with quotes or it will be treated as an expression by horizon. Changes in puppet-horizon 19.4.0..19.5.0 ---------------------------------------- 1300d52 Fix missing comma causing syntax error ebde4c8 Prepare the final stable/xena release fa8b48d Debian: Fix the wrong package name of manila-ui 6baf1f3 setuptools: Disable auto discovery 06cb301 Do not show diff of local_settings(.py) 54b7eb0 Add inet6 prefix only when MemcacheCache is used 68ad93e Accept array for cache_server_url f19fc00 Allow customizing apache::vhost parameters for SSL vhost f80cb0f Fix syntax error in individual dashboard settings a4b70ae Do not hard-code REST_API_REQUIRED_SETTINGS 847ef38 Make sure cache_server_ip is not empty 8b9d999 Handle string value for LAUNCH_INSTANCE_DEFAULTS d22f107 Fix missing HORIZON_IMAGES_UPLOAD_MODE 156ab82 Remove TripleO job 6bc229f Update TOX_CONSTRAINTS_FILE for stable/xena 4b4f914 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 21 ------ manifests/init.pp | 25 ++++++-- manifests/params.pp | 2 +- manifests/wsgi/apache.pp | 61 ++++++++++++------ metadata.json | 2 +- .../notes/bug-1956904-f4393eade5197c47.yaml | 6 ++ ..._quotes_for_images_upload-bcd649d0311afe32.yaml | 5 ++ .../wsgi-ssl_extra_params-f775a56966c5d475.yaml | 6 ++ setup.py | 1 + spec/classes/horizon_dashboards_manila_spec.rb | 2 +- spec/classes/horizon_init_spec.rb | 74 ++++++++++++++++++++-- spec/classes/horizon_wsgi_apache_spec.rb | 26 +++++++- templates/_1499_load_balancer_settings.py.erb | 8 +-- templates/_1699_orchestration_settings.py.erb | 2 +- templates/_90_manila_shares.py.erb | 2 +- templates/local_settings.py.erb | 32 ++++------ tox.ini | 2 +- 18 files changed, 192 insertions(+), 86 deletions(-)

1 0

nova 26.2.0 (zed)
by no-reply＠openstack.org 17 May '23

17 May '23

We contentedly announce the release of: nova 26.2.0: Cloud computing fabric controller This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 26.2.0 ^^^^^^ Upgrade Notes * Configuration of service user tokens is now **required** for all Nova services to ensure security of block-storage volume data. All Nova configuration files must configure the "[service_user]" section as described in the documentation. See https://bugs.launchpad.net/nova/+bug/2004555 for more details. (https://docs.openstack.org/nova/latest/admin/configuration /service-user-token.html) Changes in nova 26.1.1..26.2.0 ------------------------------ 91ee67019e Revert "Debug Nova APIs call failures" abd9a34a60 CI: fix backport validator for new branch naming 0d6dd6c67f Enable use of service user token with admin context 8b4b99149a Use force=True for os-brick disconnect during delete 2ea2b556da Remove deleted projects from flavor access list d71e9f6ec4 Ironic: retry when node not available Diffstat (except docs and test files) ------------------------------------- .../admin/configuration/cross-cell-resize.rst | 2 +- .../admin/configuration/service-user-token.rst | 59 ++++++++++++++++++++ .../admin/migrate-instance-with-snapshot.rst | 2 +- nova/api/openstack/compute/flavor_access.py | 9 ++- nova/api/openstack/identity.py | 22 +++++--- nova/api/openstack/wsgi.py | 6 -- nova/cmd/status.py | 11 ++++ nova/compute/manager.py | 3 +- nova/network/neutron.py | 8 ++- nova/service_auth.py | 6 +- .../api/openstack/compute/test_flavor_access.py | 25 ++++++++- .../unit/virt/libvirt/volume/test_fibrechannel.py | 20 +++++++ .../unit/virt/libvirt/volume/test_storpool.py | 16 +++++- .../unit/virt/libvirt/volume/test_vzstorage.py | 8 ++- nova/virt/hyperv/vmops.py | 2 +- nova/virt/hyperv/volumeops.py | 12 ++-- nova/virt/ironic/driver.py | 12 ++++ nova/virt/libvirt/driver.py | 7 ++- nova/virt/libvirt/volume/fibrechannel.py | 7 ++- nova/virt/libvirt/volume/fs.py | 2 +- nova/virt/libvirt/volume/iscsi.py | 7 ++- nova/virt/libvirt/volume/lightos.py | 7 ++- nova/virt/libvirt/volume/nvme.py | 6 +- nova/virt/libvirt/volume/quobyte.py | 2 +- nova/virt/libvirt/volume/scaleio.py | 7 ++- nova/virt/libvirt/volume/smbfs.py | 2 +- nova/virt/libvirt/volume/storpool.py | 5 +- nova/virt/libvirt/volume/volume.py | 2 +- nova/virt/libvirt/volume/vzstorage.py | 5 +- nova/volume/cinder.py | 8 ++- .../notes/service-user-token-421d067c16257782.yaml | 11 ++++ tools/check-cherry-picks.sh | 2 +- 54 files changed, 580 insertions(+), 143 deletions(-)

1 0

puppet-vitrage 9.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are tickled pink to announce the release of: puppet-vitrage 9.4.1: Puppet module for OpenStack Vitrage This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-vitrage Download the package from: https://tarballs.openstack.org/puppet-vitrage/ Please report issues through: https://bugs.launchpad.net/puppet-vitrage/+bugs For more details, please see below. Changes in puppet-vitrage 9.4.0..9.4.1 -------------------------------------- ba4eb41 Prepare the final stable/xena release 0710aa1 Debian/Ubuntu: Fix wrong wsgi script path c21bf8b setuptools: Disable auto discovery 1349260 Update TOX_CONSTRAINTS_FILE for stable/xena 0abeee1 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/params.pp | 2 +- metadata.json | 2 +- setup.py | 1 + spec/classes/vitrage_wsgi_apache_spec.rb | 2 +- tox.ini | 2 +- 6 files changed, 6 insertions(+), 4 deletions(-)

1 0

puppet-heat 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We contentedly announce the release of: puppet-heat 19.5.0: Puppet module for OpenStack Heat This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-heat Download the package from: https://tarballs.openstack.org/puppet-heat/ Please report issues through: https://bugs.launchpad.net/puppet-heat/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * The new "heat::executor_thread_pool_size" parameter has been added. Changes in puppet-heat 19.4.0..19.5.0 ------------------------------------- 30c1b53 Prepare the final stable/xena release 9bf5e69 Expose executor_thread_pool_size 5ec5a22 setuptools: Disable auto discovery bc69197 Fix missing dependency of heat_api_cfn_uwsgi_config 118f130 Remove TripleO job 3ed90d8 Update TOX_CONSTRAINTS_FILE for stable/xena d011015 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - manifests/deps.pp | 2 +- manifests/init.pp | 12 ++++++++--- metadata.json | 2 +- ...executor_thread_pool_size-97e638d8731b2d30.yaml | 4 ++++ setup.py | 1 + spec/classes/heat_init_spec.rb | 23 +++++++++++++--------- tox.ini | 2 +- 9 files changed, 32 insertions(+), 16 deletions(-)

1 0

puppet-manila 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are happy to announce the release of: puppet-manila 19.5.0: Puppet module for OpenStack Manila This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Support for Dell EMC PowerMax backend has been added. Changes in puppet-manila 19.4.0..19.5.0 --------------------------------------- 58e5da7 Prepare the final stable/xena release 41f7141 setuptools: Disable auto discovery b600db0 Allow mulitple GlusterFS backends 2c9a4d3 Ubuntu: Use utf8mb3_general_ci collate in MySQL 909c435 Ubuntu: Use utf8mb3 charset in MySQL 55bb672 Fix the wrong section used to configure standalone network plugin 42ff041 Fix the wrong [quota] parameters 6360432 Add support for PowerMax driver 57b1c81 [Dell EMC drivers] Define defaults for emc_share_backend cd8720b [Dell EMC drivers] Accept arrays for ListOpt 40d365a Update TOX_CONSTRAINTS_FILE for stable/xena e02f139 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/backend/dellemc_isilon.pp | 7 +- manifests/backend/dellemc_powermax.pp | 116 +++++++++++++++++++++ manifests/backend/dellemc_unity.pp | 11 +- manifests/backend/dellemc_vmax.pp | 12 +-- manifests/backend/dellemc_vnx.pp | 10 +- manifests/backend/glusternative.pp | 11 +- manifests/backend/glusternfs.pp | 11 +- manifests/network/standalone.pp | 27 ++--- manifests/quota.pp | 22 ++-- metadata.json | 2 +- .../notes/dellemc_powermax-6ded05263d935f14.yaml | 4 + setup.py | 1 + spec/acceptance/basic_manila_spec.rb | 2 + spec/classes/manila_quota_spec.rb | 32 +++--- spec/defines/manila_backend_dellemc_isilon_spec.rb | 2 +- .../manila_backend_dellemc_powermax_spec.rb | 78 ++++++++++++++ spec/defines/manila_backend_dellemc_unity_spec.rb | 2 +- spec/defines/manila_backend_dellemc_vmax_spec.rb | 2 +- spec/defines/manila_backend_dellemc_vnx_spec.rb | 2 +- spec/defines/manila_backend_glusternative_spec.rb | 26 +++++ spec/defines/manila_backend_glusternfs_spec.rb | 26 +++++ spec/defines/manila_network_standalone_spec.rb | 58 +++++++---- tox.ini | 2 +- 24 files changed, 368 insertions(+), 99 deletions(-)

1 0

puppet-designate 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are tickled pink to announce the release of: puppet-designate 19.5.0: Puppet module for OpenStack Designate This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-designate Download the package from: https://tarballs.openstack.org/puppet-designate/ Please report issues through: https://bugs.launchpad.net/puppet-designate/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * Now the "designate::backend::bind9" class supports setting up bind9 backend using "/etc/designate/pools.yaml" properly. This feature can be enabled by the new "manage_pool" parameter. * Added the new "designate::wsgi::apache" class, you can now run the "designate-api" service under Apache with mod_wsgi. Deprecation Notes ***************** * The "designate::backend::bind9::rndc_host" parameter has been deprecated and has no effect now. Bug Fixes ********* * The "designate::backend::bind9" class no longer configures parameters in the "[backend:bind9]" section, as these parameters are no longer effective. Changes in puppet-designate 19.4.0..19.5.0 ------------------------------------------ 734e498 Prepare the final stable/xena release 062cc6c Fix ineffective max_header_line 4e416a8 setuptools: Disable auto discovery 5b83ac5 Enable policy settings in designate-api 2b80fed mdns: Accept array value for the listen parameter 93f0d9b Fix setup of bind9 backend 9a50eb5 Add Designate API WSGI support 4bb90f7 Update TOX_CONSTRAINTS_FILE for stable/xena 23b8261 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/api.pp | 36 ++++- manifests/backend/bind9.pp | 112 ++++++++++++--- manifests/mdns.pp | 2 +- manifests/params.pp | 40 +++--- manifests/wsgi/apache.pp | 160 +++++++++++++++++++++ metadata.json | 2 +- .../notes/bug-1961516-0634fabec06a4e94.yaml | 17 +++ .../notes/designate-api-wsgi-b7a408ecc00f3001.yaml | 5 + setup.py | 1 + spec/classes/designate_api_spec.rb | 43 +++++- spec/classes/designate_backend_bind9_spec.rb | 61 ++++---- spec/classes/designate_mdns_spec.rb | 27 ++-- spec/classes/designate_wsgi_apache_spec.rb | 115 +++++++++++++++ templates/bind9-pools.yaml.erb | 36 +++++ tox.ini | 2 +- 16 files changed, 572 insertions(+), 88 deletions(-)

1 0

puppet-placement 6.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are satisfied to announce the release of: puppet-placement 6.4.1: Puppet module for OpenStack placement This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-placement Download the package from: https://tarballs.openstack.org/puppet-placement/ Please report issues through: https://bugs.launchpad.net/puppet-placement/+bugs For more details, please see below. Changes in puppet-placement 6.4.0..6.4.1 ---------------------------------------- 8096fe4 Prepare the final stable/xena release 245a81a setuptools: Disable auto discovery bc3c0ce update file name for apache config on Debian 0edfd2e Skip dependency on keystone endpoint if endpoint is not configured 14ee3c8 Tag the httpd service only when it is used cf265e9 Remove TripleO job b1d4ba9 Update TOX_CONSTRAINTS_FILE for stable/xena df56d29 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ------------------- manifests/api.pp | 3 +-- manifests/keystone/auth.pp | 5 ++++- manifests/params.pp | 2 +- metadata.json | 2 +- setup.py | 1 + tox.ini | 2 +- 8 files changed, 10 insertions(+), 25 deletions(-)

1 0

puppet-octavia 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We jubilantly announce the release of: puppet-octavia 19.5.0: Puppet module for OpenStack Octavia This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Added parameter "allow_ping_health_monitors" to the "octavia::api" class * The following parameters have been added to the "octavia::api" class. These parameters allows customizing the same parameters in the "[api_setting]" section. * "default_listener_ciphers" * "default_pool_ciphers" * "tls_cipher_prohibit_list" * "default_listener_tls_versions" * "default_pool_tls_versions" * "minimum_tls_version" * The "octavia::api::provider_drivers" parameter now supports array or hash value, and the given value is conveted to correctly formatted string when being put into octavia.conf. * Now the "octavia::provider::ovn" can manage the package required to use OVN Octavia provider. * The following parameters have been added to the "octavia::provider::ovn" class. * "ovsdb_connection_timeout" * "ovsdb_retry_max_interval" * "ovsdb_probe_interval" * Support for the "ovn_sb_*" parameters has been added to the "octavia::provider::ovn" class. * The new "octavia::task_flow" class has been added. This class manages parameters in the "task_flow" section, which are required to use the amphora v2 driver. * The "octavia::db::mysql" class and the "octavia::db::postgresql" class now support creating a separate database for taskflow persistence. * The "octavia::db::sync_persistence" class has been added. This class invokes the command to initialize the taskflow persistence database. Changes in puppet-octavia 19.4.0..19.5.0 ---------------------------------------- 6262ebb Prepare the final stable/xena release 8276514 setuptools: Disable auto discovery 0a7317a Do not show passphrase even if it is invalid 91031e6 ovn: Accept arrays for ovn_*_connection parameters 8da4abe Accept array or hash for enable_provider_drivers 861a235 ovn: Add support for ovn_sb_* parameters d64492c ovn: Add more tunables related to OVN DB connection dc7a544 Manage ovn-octavia-provider package fb1af93 Add allow_ping_health_monitors parameter to api 034d66f Add parameters to configure amphorav2 driver ae3ecdf api: Add support for TLS cipher/version parameters e036925 Fix inconsistent spec file name 3607dc0 Remove TripleO job 77ecc71 Update TOX_CONSTRAINTS_FILE for stable/xena 0c81a22 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 32 ------- manifests/api.pp | 53 ++++++++++- manifests/certificates.pp | 6 +- manifests/db/mysql.pp | 30 ++++-- manifests/db/postgresql.pp | 23 ++++- manifests/db/sync.pp | 2 +- manifests/db/sync_persistence.pp | 40 ++++++++ manifests/params.pp | 1 + manifests/provider/ovn.pp | 75 +++++++++++++-- manifests/task_flow.pp | 105 +++++++++++++++++++++ metadata.json | 2 +- ...llow_ping_health_monitors-3f00c296714b663b.yaml | 4 + .../notes/api-tls-params-48cefc42aee491ab.yaml | 13 +++ .../convert-provider_drivers-922ba756396e154c.yaml | 6 ++ .../ovn-provider-package-af40f696662e7052.yaml | 5 + .../notes/ovn-tunables-103622c80b71d03d.yaml | 9 ++ .../notes/ovnsb-params-e7bdca2b53465ed9.yaml | 5 + releasenotes/notes/task_flow-89c5a7003e705a9d.yaml | 14 +++ setup.py | 1 + spec/classes/octavia_api_spec.rb | 71 +++++++++++++- spec/classes/octavia_db_mysql_spec.rb | 25 +++++ spec/classes/octavia_db_postgresql_spec.rb | 23 +++++ spec/classes/octavia_db_sync_persistence_spec.rb | 68 +++++++++++++ spec/classes/octavia_db_sync_spec.rb | 13 +-- spec/classes/octavia_ovn_provider_spec.rb | 47 --------- spec/classes/octavia_provider_ovn_spec.rb | 90 ++++++++++++++++++ spec/classes/octavia_task_flow_spec.rb | 78 +++++++++++++++ tox.ini | 2 +- 29 files changed, 730 insertions(+), 114 deletions(-)

1 0

puppet-ceilometer 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are pleased to announce the release of: puppet-ceilometer 19.5.0: Puppet module for OpenStack Ceilometer This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-ceilometer Download the package from: https://tarballs.openstack.org/puppet-ceilometer/ Please report issues through: https://bugs.launchpad.net/puppet-ceilometer/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Add new parameter "tenant_name_discovery", whether to idenitfy user and project names from polled samples. This paramater is to be configured only when ceilometer central namespace is enabled. * Support for the "[compute] resource_update_interval" parameter and the "[compute] resource_cache_expiry" parameter has been added. * The "ceilometer::agent::polling" class now suppports the new "batch_size" parameter. * Support for the parameters used to poll metrics from the Radosgw service has been added. * The new "ceilometer::agent::polling::service_types" class, to manage parameters in the "[service_types]" section, has been added. Changes in puppet-ceilometer 19.4.0..19.5.0 ------------------------------------------- 842aaeb Add new parameter `tenant_name_discovery` e08fc27 Add support for [polling] batch_size 69460b9 compute: Add support for tunables parameters b32543f polling: Ensure unused parameters are cleared e388565 Prepare the final stable/xena release 2ff14b0 setuptools: Disable auto discovery 89cfedf Bugfix - Deprecated notification_workers is ignored f96e4c3 Add support for polling Radosgw metrics 882b6f5 Add support for the [service_types] parameters 5f2e4ef Update TOX_CONSTRAINTS_FILE for stable/xena aef7c7a Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/agent/notification.pp | 2 +- manifests/agent/polling.pp | 65 +++++++++++++--- manifests/agent/polling/rgw.pp | 32 ++++++++ manifests/agent/polling/service_types.pp | 50 ++++++++++++ metadata.json | 2 +- ...add_tenant_name_discovery-4671aec3daae9622.yaml | 7 ++ .../notes/compute-params-ecee48b43a1bdad2.yaml | 5 ++ .../notes/polling-batch_size-95f15dc9d96b96b4.yaml | 5 ++ .../notes/rgw-support-35ca7afb8e5ec322.yaml | 5 ++ .../notes/service_types-2a672cdceff9227f.yaml | 5 ++ setup.py | 1 + spec/classes/ceilometer_agent_polling_rgw_spec.rb | 41 ++++++++++ .../ceilometer_agent_polling_service_types_spec.rb | 50 ++++++++++++ spec/classes/ceilometer_agent_polling_spec.rb | 88 ++++++++++++++++++++-- tox.ini | 2 +- 16 files changed, 343 insertions(+), 18 deletions(-)

1 0

puppet-glance 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We joyfully announce the release of: puppet-glance 19.5.0: Puppet module for OpenStack Glance This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The following parameter and class have been added, to support usage of the service token feature with the Barbican key manager. * The "glance::key_manager::barbican::send_service_user_token" parameter * The "glance::key_manager::barbican::service_user" class * The "glance::cache::cleaner" class and the "glance::cache::pruner" class now support the "maxdelay" parameter. This parameter would be useful in a multi-node deployment, to avoid launching the same cron command at the same time in multiple nodes. Upgrade Notes ************* * The "glance::api" class now supports a "lock_path" parameter that configures the oslo.concurrency lock_path with a platform specific default value. Distributions that are used to defining the lock_path with a distribution specific config file may need to override the default "glance::api::lock_path" value. Bug Fixes ********* * Bug #1980539 (https://bugs.launchpad.net/puppet- glance/+bug/1980539): Configure the oslo.concurrency lock_path, which is now required by cinder backends. * Bug #1947816 (https://bugs.launchpad.net/puppet- glance/+bug/1947816): Fix the default auth_version for swift backend so that Keystone v3 API is used by default instead of v2 API. Changes in puppet-glance 19.4.0..19.5.0 --------------------------------------- cbbeee8 Prepare the final stable/xena release af0063b Ensure [DEFAULT] show_multiple_locations is cleared 08ff250 setuptools: Disable auto discovery 1d37e54 Configure the oslo.concurrency lock_path 1913dd1 Add sleep in cache cron jobs 157e9ab Disallow sheepdog backend 1b6b91d key_manager: Add service user options for Barbican key manager f34790b Fix wrong class used in unit tests 628d731 Swift backend: Use Keystone v3 API by default 048e9b4 Swift backend: the key parameter should be secret 6db9bec Remove TripleO job 7a7070a Update TOX_CONSTRAINTS_FILE for stable/xena ec1ceea Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ----- manifests/api.pp | 18 ++++- manifests/backend/multistore/swift.pp | 6 +- manifests/backend/swift.pp | 4 +- manifests/cache/cleaner.pp | 19 ++++- manifests/cache/pruner.pp | 20 ++++- manifests/key_manager/barbican.pp | 34 ++++---- manifests/key_manager/barbican/service_user.pp | 94 ++++++++++++++++++++++ manifests/params.pp | 2 + metadata.json | 2 +- ...add-concurrency-lock_path-666f5836ec062c5a.yaml | 13 +++ .../barbican_service_user-606ee71dc0940e2a.yaml | 8 ++ .../notes/bug-1947816-75538e8fd13e59c6.yaml | 6 ++ .../cache-cron-maxdelay-bfd1585eaa15aeda.yaml | 7 ++ setup.py | 1 + spec/classes/glance_api_spec.rb | 28 ++++++- spec/classes/glance_backend_swift_spec.rb | 2 +- spec/classes/glance_cache_cleaner_spec.rb | 3 +- spec/classes/glance_cache_pruner_spec.rb | 3 +- ...lance_key_manager_barbican_service_user_spec.rb | 79 ++++++++++++++++++ spec/classes/glance_key_manager_barbican_spec.rb | 45 ++++++----- .../glance_backend_multistore_swift_spec.rb | 6 +- tox.ini | 2 +- 24 files changed, 343 insertions(+), 79 deletions(-)

1 0

heat-dashboard 6.0.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are glad to announce the release of: heat-dashboard 6.0.1: Heat Management Dashboard This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/heat-dashboard Download the package from: https://tarballs.openstack.org/heat-dashboard/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/heat- dashboard For more details, please see below. Changes in heat-dashboard 6.0.0..6.0.1 -------------------------------------- 4d1ce41 Drop lower-constraints.txt and its testing 81190f1 Set False to include_empty_option 4f2de89 Fix lower-constraints job 8d013f7 Update TOX_CONSTRAINTS_FILE for stable/xena b49e805 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 1 - heat_dashboard/content/stacks/forms.py | 13 +-- lower-constraints.txt | 149 --------------------------------- requirements.txt | 4 + test-requirements.txt | 1 - tox.ini | 10 +-- 7 files changed, 15 insertions(+), 165 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b737e47..4febe72 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,4 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. + diff --git a/test-requirements.txt b/test-requirements.txt index 075d90f..cc9df55 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +12,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -doc8>=0.6.0 # Apache-2.0

1 0

puppet-barbican 19.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We contentedly announce the release of: puppet-barbican 19.4.1: Puppet module for Barbican This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-barbican Download the package from: https://tarballs.openstack.org/puppet-barbican/ Please report issues through: https://bugs.launchpad.net/puppet-barbican/+bugs For more details, please see below. Changes in puppet-barbican 19.4.0..19.4.1 ----------------------------------------- c8ace6d Prepare the final stable/xena release 73b6ebb setuptools: Disable auto discovery b1debf7 Fix ineffective dependency 0ff4f90 Update TOX_CONSTRAINTS_FILE for stable/xena f85d141 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/wsgi/apache.pp | 2 +- metadata.json | 2 +- setup.py | 1 + tox.ini | 2 +- 5 files changed, 5 insertions(+), 3 deletions(-)

1 0

puppet-oslo 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are tickled pink to announce the release of: puppet-oslo 19.5.0: Puppet module for Oslo This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-oslo Download the package from: https://tarballs.openstack.org/puppet-oslo/ Please report issues through: https://bugs.launchpad.net/puppet-oslo/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * Add socket keepalive options for the pymemcache (dogpile.cache) backend. * Now the "oslo::cache" defined resource type installs the pymemcache library when pymemcache backend is used. * Add options to configure pymemcache's HashClient retrying mechanisms (dogpile.cache) backend. * Add retrying options for pymemcache (dogpile.cache) backend. Changes in puppet-oslo 19.4.0..19.5.0 ------------------------------------- 8e59bdd Prepare the final stable/xena release 01a83c9 setuptools: Disable auto discovery a8d8629 cache: Ensure pymemcache library is installed e2af30e cache: Add inet6 prefix for only memcached backends edf1644 Add pymemcache's HashClient retrying options to oslo.cache 88197f3 Add retrying options to oslo.cache ba251d3 Add socket keepalive options for the pymemcache backend 423fd90 Remove TripleO job 3a69ae4 Update TOX_CONSTRAINTS_FILE for stable/xena 349d6d7 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ----- manifests/cache.pp | 91 +++++++++++++++++++- metadata.json | 2 +- .../add_keepalive_options-3802510b6d4461e1.yaml | 4 + .../notes/bug-1988205-973ce17f355cbfce.yaml | 5 ++ ...cache_hashclient_retrying-10a756708ad9894b.yaml | 5 ++ .../pymemcache_retrying-4fa326e3bc913a97.yaml | 4 + setup.py | 1 + spec/defines/oslo_cache_spec.rb | 97 ++++++++++++++++++++-- tox.ini | 2 +- 11 files changed, 198 insertions(+), 33 deletions(-)

1 0

puppet-ovn 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are tickled pink to announce the release of: puppet-ovn 19.5.0: Puppet module for OVN This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-ovn Download the package from: https://tarballs.openstack.org/puppet-ovn/ Please report issues through: https://bugs.launchpad.net/puppet-ovn/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features * The new "ovn::controller::encap_tos" parameter has been added. This parameter controls the "ovn-encap-tos" external id. * The new "ovn::controller::ovn_ofctrl_wait_before_clear" parameter has been added to resolve an issue with dataplane downtime during upgrades that involve OVN schema changes. It will delay delting and re-adding openflow rules by the configured time in ms to give ovn- controller time to handle db connection / reconnection that can happen in this case. The default of 8000ms is based on upstream OVN testing with 200k openflow rules. Since it involved a change in behavior, the upstream OVN value defaults to unset. Changes in puppet-ovn 19.4.0..19.5.0 ------------------------------------ 6f1cd86 [Stable Only] Handle string value for ovn_bridge_mappings 8d9d11b Prepare the final stable/xena release 3cb1265 Add support for ovn-ofctrl-wait-before-clear f9d48b0 setuptools: Disable auto discovery d8a40a0 Add support for external_ids:ovn-encap-tos 4b5b106 Update TOX_CONSTRAINTS_FILE for stable/xena d3e2655 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/controller.pp | 29 ++++++++++++++++++++-- metadata.json | 2 +- .../notes/ovn-encap-tos-bd7bd9b3e3d19cc3.yaml | 5 ++++ ..._ofctrl_wait_before_clear-c40493ce231ec38c.yaml | 11 ++++++++ setup.py | 1 + spec/classes/ovn_controller_spec.rb | 8 ++++++ tox.ini | 2 +- 8 files changed, 55 insertions(+), 4 deletions(-)

1 0

puppet-cinder 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We exuberantly announce the release of: puppet-cinder 19.5.0: Puppet module for OpenStack Cinder This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-cinder Download the package from: https://tarballs.openstack.org/puppet-cinder/ Please report issues through: https://bugs.launchpad.net/puppet-cinder/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The following parameter and class have been added, to support usage of the service token feature with the Barbican key manager. * The "cinder::key_manager::barbican::send_service_user_token" parameter * The "cinder::key_manager::barbican::service_user" class * Add new parameter "cinder::backend::pure::pure_eradicate_on_delete" which allows setting of the pure_eradicate_on_delete option on the managed cinder backend for PureStorage. * Add new parameter "cinder::backend::pure::pure_iscsi_cidr" which allows setting of the pure_iscsi_cidr option on the managed cinder backend for PureStorage. Bug Fixes ********* * Bug #1986518 (https://bugs.launchpad.net/puppet- cinder/+bug/1986518): The "cinder::backend::iscsi" defined resource type now modifies the "/etc/tgt/targets.conf" file in Ubuntu and Debian, so that cinder can set up iscsi targets correctly. Changes in puppet-cinder 19.4.0..19.5.0 --------------------------------------- 8de7750 Prepare the final stable/xena release ddf2a6f setuptools: Disable auto discovery 605430e lvm: Modify targets.conf in Ubuntu/Debian 9043186 lvm: Fix duplicate declaration with CentOS + tgtadm 56aa4e9 key_manager: Add service user options for Barbican key manager e8ecf15 [Pure Storage] Add new params for FlashArray Cinder backend 3241ff1 Use service anchor to ensure API is up eb2c462 Remove TripleO job 3e0a053 Update TOX_CONSTRAINTS_FILE for stable/xena 6ffcbf4 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 22 ----- manifests/api.pp | 2 +- manifests/backend/iscsi.pp | 66 +++++++-------- manifests/backend/pure.pp | 16 ++++ manifests/key_manager/barbican.pp | 34 ++++---- manifests/key_manager/barbican/service_user.pp | 94 ++++++++++++++++++++++ metadata.json | 2 +- .../barbican_service_user-7c554403b68cbcaa.yaml | 8 ++ .../notes/bug-1986518-2ed0ab4ef3248cd8.yaml | 7 ++ ...urestorage_updated_params-b0f474d9ab08c37e.yaml | 10 +++ setup.py | 1 + spec/classes/cinder_api_spec.rb | 2 +- ...inder_key_manager_barbican_service_user_spec.rb | 79 ++++++++++++++++++ spec/classes/cinder_key_manager_barbican_spec.rb | 45 ++++++----- spec/defines/cinder_backend_iscsi_spec.rb | 19 ++--- spec/defines/cinder_backend_pure_spec.rb | 6 ++ tox.ini | 2 +- 18 files changed, 306 insertions(+), 110 deletions(-)

1 0

cinder 20.3.0 (yoga)
by no-reply＠openstack.org 17 May '23

17 May '23

We joyfully announce the release of: cinder 20.3.0: OpenStack Block Storage This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 20.3.0 ^^^^^^ Known Issues ************ * For security reasons (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) manually deleting an attachment, manually doing the "os-terminate_connection", "os- detach" or "os-force_detach" actions will no longer be allowed in most cases unless the request is coming from another OpenStack service on behalf of a user. Upgrade Notes ************* * Nova must be configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html) **and** cinder must be configured to recognize at least one of the roles that the nova service user has been assigned in keystone. By default, cinder will recognize the "service" role, so if the nova service user is assigned a differently named role in your cloud, you must adjust your cinder configuration file ("service_token_roles" configuration option in the "keystone_authtoken" section). If nova and cinder are not configured correctly in this regard, detaching volumes will no longer work (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Critical Issues *************** * Detaching volumes will fail if Nova is not configured to send service tokens (https://docs.openstack.org/cinder/latest/configuration/block- storage/service-token.html), please read the upgrade section for more information. (Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555)) Security Issues *************** * As part of the fix for Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) cinder now rejects user attachment delete requests for attachments that are being used by nova instances to ensure that no leftover devices are produced on the compute nodes which could be used to access another project's volumes. Terminate connection, detach, and force detach volume actions (calls that are not usually made by users directly) are, in most cases, not allowed for users. Bug Fixes ********* * Bug #2004555 (https://bugs.launchpad.net/cinder/+bug/2004555) Fixed issue where a user manually deleting an attachment, calling terminate connection, detach, or force detach, for a volume that is still used by a nova instance resulted in leftover devices on the compute node. These operations will now fail when it is believed to be a problem. Changes in cinder 20.2.0..20.3.0 -------------------------------- a66f4afa2 Reject unsafe delete attachment calls Diffstat (except docs and test files) ------------------------------------- api-ref/source/v3/attachments.inc | 15 ++ api-ref/source/v3/volumes-v3-volumes-actions.inc | 55 ++++++ cinder/compute/nova.py | 7 + cinder/exception.py | 7 + cinder/volume/api.py | 98 +++++++++++ .../configuration/block-storage/service-token.rst | 46 +++-- .../redirect-detach-nova-4b7b7902d7d182e0.yaml | 43 +++++ 15 files changed, 504 insertions(+), 23 deletions(-)

1 0

puppet-openstack_extras 19.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are stoked to announce the release of: puppet-openstack_extras 19.4.1: Puppet module for OpenStack Openstack_extras This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-openstack_extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ Please report issues through: https://bugs.launchpad.net/puppet-openstack-extras/+bugs For more details, please see below. Changes in puppet-openstack_extras 19.4.0..19.4.1 ------------------------------------------------- 8160f0b Prepare the final stable/xena release e1bc2c1 setuptools: Disable auto discovery ff5aacf Use stable/xena release by default f4d89b9 Update TOX_CONSTRAINTS_FILE for stable/xena 1561dd0 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/repo/debian/params.pp | 2 +- manifests/repo/redhat/params.pp | 2 +- metadata.json | 2 +- setup.py | 1 + spec/classes/openstack_extras_repo_debian_debian_spec.rb | 14 +++++++------- spec/classes/openstack_extras_repo_debian_ubuntu_spec.rb | 6 +++--- spec/classes/openstack_extras_repo_redhat_redhat_spec.rb | 8 ++++---- tox.ini | 2 +- 9 files changed, 20 insertions(+), 18 deletions(-)

1 0

puppet-vswitch 15.4.1 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We eagerly announce the release of: puppet-vswitch 15.4.1: Puppet module for OpenStack Vswitch This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-vswitch Download the package from: https://tarballs.openstack.org/puppet-vswitch/ Please report issues through: https://bugs.launchpad.net/puppet-vswitch/+bugs For more details, please see below. Changes in puppet-vswitch 15.4.0..15.4.1 ---------------------------------------- aea7e21 Prepare the final stable/xena release 7eb7c1c setuptools: Disable auto discovery d8d7339 vs_config: Fix broken idempotency with nil/empty value f5ee885 Do not use service resource to restart openvswitch service 654df9f Update TOX_CONSTRAINTS_FILE for stable/xena 32004ad Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + lib/puppet/provider/vs_config/ovs.rb | 14 ++++++++++++-- lib/puppet/type/vs_config.rb | 15 +++++++++++++++ manifests/dpdk.pp | 14 +++++++++++--- manifests/ovs.pp | 14 +++++++++++--- metadata.json | 2 +- setup.py | 1 + spec/acceptance/basic_vswitch_spec.rb | 25 ++++++++++++++++++++++++- spec/classes/vswitch_dpdk_spec.rb | 2 +- spec/classes/vswitch_ovs_spec.rb | 2 +- tox.ini | 2 +- 11 files changed, 79 insertions(+), 13 deletions(-)

1 0

puppet-neutron 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are delighted to announce the release of: puppet-neutron 19.5.0: Puppet module for OpenStack Neutron This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-neutron Download the package from: https://tarballs.openstack.org/puppet-neutron/ Please report issues through: https://bugs.launchpad.net/puppet-neutron/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The new "sdn_token" parameter to authenticate sdn has been added to the "neutron::plugins::ml2::mellanox::mlnx_sdn_assist" class. * The new "neutron::server::notifications::nova::live_migration_events" parameter has been added. This parameter controls the "[nova] live_migation_events" parameter in "neutron.conf". * The "neutron::agents::ovn_metadata" class now supports the following two new parameters. * "ovsdb_probe_interval" parameter to configure "[ovn]ovsdb_probe_interval" in ovn metadata agent config file. * "ovsdb_retry_max_interval" parameter to configure "[ovn]ovsdb_retry_max_interval" in ovn metadata agent config file. * The "neutron::plugins::ml2::ovn" class now supports the following two new parameters. * "ovsdb_retry_max_interval" * "ovsdb_probe_interval" Bug Fixes ********* * The independent ovn plugin package("pythonN-networking-ovn") is no longer required. The package is no longer available since Ussuri, and all codes are now included in the base neutron package. * The "neutron-ovn-metadata-agent" package is now installed in Ubuntu and Debian. * Bug #1987460 (https://bugs.launchpad.net/puppet- neutron/+bug/1987460): Previously the "neutron::agents::ml2::mlnx" class causes duplicate resources when used with the "neutron::agents::dhcp" class or the "neutron::agents::l3" class. Now it is possible to workaround the error by implementing the following mitigation. * Include the "neutron::agents::ml2::mlnx" class AFTER the "neutron::agents::dhcp" class or the "neutron::agents::l3" * Set the "interface_driver" parameter and the "dhcp_broadcast_reply" parameter consistently. Changes in puppet-neutron 19.4.0..19.5.0 ---------------------------------------- 7008f718 Prepare the final stable/xena release 4a41c221 Fix wrong bridge name if bridge_mappings is commma-separated string 5948c710 setuptools: Disable auto discovery aecfaa35 ovn: Do not expect the separate plugin package 1f26bbfd mlnx: Allow workaround for duplicate resources 3677b7aa [ovn metadata] Add more tunable parameters 9d553d51 ml2+ovn: Add more tunable parameters for OVN DB connections b59fca5c ml2+ovs: Accept a string value for permitted_ethertypes 7864f0a8 NSX Plugin: nsx_api_password should be secret 7d106037 Fix the ignored unit test case for dhcp-agent configuration fc225e54 Add support for [nova] live_migation_events 4f2eda54 Change authentication method for Mellanox sdn controller 2c16d3b4 Remove TripleO job 2eeeeaf8 Update TOX_CONSTRAINTS_FILE for stable/xena d6cf20bf Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 25 ------- .../ovn_metadata_agent_config/ini_setting.rb | 2 +- lib/puppet/type/ovn_metadata_agent_config.rb | 2 +- manifests/agents/ml2/mlnx.pp | 14 +++- manifests/agents/ml2/ovs.pp | 10 +-- manifests/agents/ovn_metadata.pp | 15 +++- manifests/params.pp | 6 +- manifests/plugins/ml2/mellanox/mlnx_sdn_assist.pp | 10 ++- manifests/plugins/ml2/ovn.pp | 20 ++++-- manifests/plugins/nsx.pp | 2 +- manifests/server/notifications/nova.pp | 8 +++ metadata.json | 2 +- .../notes/add_token_auth-daa888e87da725da.yaml | 4 ++ .../notes/bug-1945973-65195b6dae2009e5.yaml | 10 +++ .../notes/bug-1987460-c5bfc6d98ccd3375.yaml | 14 ++++ .../live_migration_events-84fc814cb28a8a68.yaml | 6 ++ ...n-metadata-tunning-params-9232d7638488ae0d.yaml | 12 ++++ .../notes/ovn-tunables-0f917de23d4c1274.yaml | 8 +++ setup.py | 1 + spec/classes/neutron_agents_dhcp_spec.rb | 64 +++++++++--------- spec/classes/neutron_agents_ml2_ovs_spec.rb | 79 +++++++++++++++++----- spec/classes/neutron_agents_ovn_metadata_spec.rb | 43 ++++++------ .../neutron_plugins_ml2_mlnx_sdn_assist_spec.rb | 2 + spec/classes/neutron_plugins_ml2_ovn_spec.rb | 6 +- spec/classes/neutron_plugins_nsx_spec.rb | 4 +- .../neutron_server_notifications_nova_spec.rb | 3 + .../ovn_metadata_agent_config/ini_setting_spec.rb | 4 +- tox.ini | 2 +- 29 files changed, 248 insertions(+), 131 deletions(-)

1 0

keystonemiddleware 10.3.0 (bobcat)
by no-reply＠openstack.org 17 May '23

17 May '23

We are stoked to announce the release of: keystonemiddleware 10.3.0: Middleware for OpenStack Identity This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 10.3.0 ^^^^^^ New Features * [blueprint support-oauth2-mtls (https://blueprints.launchpad.net/keystone/+spec/support- oauth2-mtls)] The oauth2_mtls_token filter has been added for accepting or denying incoming requests containing OAuth 2.0 certificate-bound access tokens that are obtained from keystone identity server by users through their OAuth 2.0 credentials and Mutual-TLS certificates. Changes in keystonemiddleware 10.2.0..10.3.0 -------------------------------------------- 92cdf8a Add timeout for requests a59020f OAuth 2.0 Mutual-TLS Support 1c820f0 Add missing doc requirements Diffstat (except docs and test files) ------------------------------------- keystonemiddleware/ec2_token.py | 9 +- keystonemiddleware/oauth2_mtls_token.py | 156 +++++++++ keystonemiddleware/s3_token.py | 12 +- .../unit/test_oauth2_mtls_token_middleware.py | 373 +++++++++++++++++++++ .../bp-support-oauth2-mtls-2d2686c9d5b1fe1f.yaml | 8 + setup.cfg | 1 + 8 files changed, 668 insertions(+), 4 deletions(-)

1 0

glance_store 4.1.1 (zed)
by no-reply＠openstack.org 17 May '23

17 May '23

We are excited to announce the release of: glance_store 4.1.1: OpenStack Image Service Store Library This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 4.1.1 ^^^^^ Security Issues * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Changes in glance_store 4.1.0..4.1.1 ------------------------------------ e9d2509 Add force to os-brick disconnect 3d3467d Fix tox4 error 8034cdc Update TOX_CONSTRAINTS_FILE for stable/zed c05c7e5 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder.py | 5 ++++- glance_store/common/attachment_state_manager.py | 3 ++- releasenotes/notes/bug-2004555-4fd67fce86c07461.yaml | 11 +++++++++++ tox.ini | 7 +++---- 7 files changed, 24 insertions(+), 9 deletions(-)

1 0

nova 27.1.0 (antelope)
by no-reply＠openstack.org 17 May '23

17 May '23

We are overjoyed to announce the release of: nova 27.1.0: Cloud computing fabric controller This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 27.1.0 ^^^^^^ Upgrade Notes * Configuration of service user tokens is now **required** for all Nova services to ensure security of block-storage volume data. All Nova configuration files must configure the "[service_user]" section as described in the documentation. See https://bugs.launchpad.net/nova/+bug/2004555 for more details. (https://docs.openstack.org/nova/latest/admin/configuration /service-user-token.html) Changes in nova 27.0.0..27.1.0 ------------------------------ 09f85a8a92 CI: fix backport validator for new branch naming 6eab57952e Bump nova-ceph-multstore timeout a02f966873 Revert "Debug Nova APIs call failures" eb3fe4ddc6 Have host look for CPU controller of cgroupsv2 location. 1f781423ee Enable use of service user token with admin context efb01985db Use force=True for os-brick disconnect during delete fa2ba3ab2c Handle zero pinned CPU in a cell with mixed policy 2cf835be82 Reproduce asym NUMA mixed CPU policy bug acb511652c Save cell socket correctly when updating host NUMA topology 29e3f2f2ab Reproduce bug 1995153 47b6850bb1 [stable-only] Update TOX_CONSTRAINTS_FILE for stable/2023.1 d081938e22 [stable-only] Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 3 +- .../admin/configuration/cross-cell-resize.rst | 2 +- .../admin/configuration/service-user-token.rst | 59 +++++++++++ .../admin/migrate-instance-with-snapshot.rst | 2 +- nova/api/openstack/wsgi.py | 6 -- nova/cmd/status.py | 11 ++ nova/network/neutron.py | 8 +- nova/service_auth.py | 6 +- .../functional/regressions/test_bug_1595962.py | 1 + .../functional/regressions/test_bug_1995153.py | 107 ++++++++++++++++++++ .../unit/virt/libvirt/volume/test_fibrechannel.py | 20 ++++ .../unit/virt/libvirt/volume/test_storpool.py | 16 ++- .../unit/virt/libvirt/volume/test_vzstorage.py | 8 +- nova/virt/hardware.py | 11 +- nova/virt/hyperv/vmops.py | 2 +- nova/virt/hyperv/volumeops.py | 12 +-- nova/virt/libvirt/driver.py | 7 +- nova/virt/libvirt/host.py | 31 +++++- nova/virt/libvirt/volume/fibrechannel.py | 7 +- nova/virt/libvirt/volume/fs.py | 2 +- nova/virt/libvirt/volume/iscsi.py | 7 +- nova/virt/libvirt/volume/lightos.py | 7 +- nova/virt/libvirt/volume/nvme.py | 6 +- nova/virt/libvirt/volume/quobyte.py | 2 +- nova/virt/libvirt/volume/scaleio.py | 7 +- nova/virt/libvirt/volume/smbfs.py | 2 +- nova/virt/libvirt/volume/storpool.py | 5 +- nova/virt/libvirt/volume/volume.py | 2 +- nova/virt/libvirt/volume/vzstorage.py | 5 +- nova/volume/cinder.py | 8 +- .../notes/service-user-token-421d067c16257782.yaml | 11 ++ tools/check-cherry-picks.sh | 2 +- tox.ini | 4 +- 65 files changed, 859 insertions(+), 187 deletions(-)

1 0

puppet-ironic 19.5.0 (xena)
by no-reply＠openstack.org 17 May '23

17 May '23

We are jazzed to announce the release of: puppet-ironic 19.5.0: Puppet module for OpenStack Ironic This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/puppet-ironic Download the package from: https://tarballs.openstack.org/puppet-ironic/ Please report issues through: https://bugs.launchpad.net/puppet-ironic/+bugs For more details, please see below. 19.5.0 ^^^^^^ New Features ************ * The "ironic::conductor" class now supports the following two new parameters. * "heartbeat_interval" * "heartbeat_timeout" * The new "ironic::disk_utils" class has been added. * The new "ironic::pxe::tftp_use_xinetd" parameter has been added. When this parameter is set to "false", the ironic-dnsmasq-tftp- server service, which actually manages a dnsmasq process, is used instead of xinetd, to implement TFTP server. Note that the dnsmasq service is currently available only in RDO. * The pxe parameter *uefi_pxe_bootfile_name* is now managed by puppet, keeping the ironic default of *bootx64.efi*. The shim EFI binary is copied to the TFTP root directory, to a file named the value of *uefi_pxe_bootfile_name*. The grub EFI binary is copied to the TFTP root directory to a file named *grubx64.efi*. With these changes, using the pxe boot driver with UEFI boot will result in a grub network boot which is Secure Boot capable. Bug Fixes ********* * Now the "ironic::pxe" class properly installs the pxelinux.0 file using the separate "pxelinux" package in Debian and Ubuntu. The new "pxelinux_file_path" parameter can be used to determine the source path to locate the file. When this parameter is set to false then the class does not manage the file. * The wrong source directory to copy syslinux files in Debiand or Ubuntu has been fixed. * Fixed an issue where dnsmasq DHCP configuration for ironic- inspector would point to the wrong UEFI iPXE bootfile. See bug: 1952652 (https://bugs.launchpad.net/puppet-ironic/+bug/1952652) * Now the "tftpd-hap" package is installed insted of the "tftpd" package in Debian and Ubuntu. Changes in puppet-ironic 19.4.0..19.5.0 --------------------------------------- 1af3df3 Prepare the final stable/xena release 61f8ec1 Fix efi file paths in RHEL 596cd4c Copy shim and grub efi binaries to tftp root 181cb07 inspector: Fix wrong group of policy file 0d8437c setuptools: Disable auto discovery 8718318 Debian/Ubuntu: Fix installation of pxelinux.0 and syslinux files b12fcfe Debian/Ubuntu: The staging driver package is not available 6048343 Debian/Ubuntu: Do not use the ironic-inspector-dnsmasq service 1fcfe39 conductor: Support tuning of heartbeats 6aa42e8 Add support for [disk_utils] parameters fdf29c6 Debian/Ubuntu: Use tftpd-hpa instead of tftpd d30bb0e Refactor unit tests of ironic::pxe 3e6254b CentOS 9: Fix unit tests for ironic::pxe 7e1f420 Add support for MultiStrOpt (inspector) e9a5508 pxe: Create tftp_root directory before starting dnsmasq a51fce3 Support use of dnsmasq as tftp service d0bbd07 Fix invalid dependencies 2688458 Fix name of iPXE efi bootrom 7b15d40 Remove TripleO job a83a3dc Update TOX_CONSTRAINTS_FILE for stable/xena 5eeb1b1 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - .../{ini_setting.rb => openstackconfig.rb} | 4 +- lib/puppet/type/ironic_inspector_config.rb | 12 +- manifests/conductor.pp | 13 + manifests/disk_utils.pp | 61 +++++ manifests/drivers/pxe.pp | 19 +- manifests/drivers/staging.pp | 13 +- manifests/inspector.pp | 36 ++- manifests/inspector/policy.pp | 2 +- manifests/keystone/auth.pp | 4 +- manifests/params.pp | 48 +++- manifests/pxe.pp | 179 ++++++++++--- manifests/pxe/common.pp | 18 +- metadata.json | 2 +- .../conductor-heartbeat-d92790f3e6a59c4b.yaml | 8 + .../debian-syslinux-files-c36f21ae936c0594.yaml | 12 + .../notes/disk_utils-ff85c8b00595d8b8.yaml | 4 + ...q-uefi-ipxe-boot-filename-83fefc1e48ea7f4f.yaml | 8 + .../notes/tftp_use_xinetd-710c4eb59d3b0501.yaml | 8 + .../uefi_pxe_bootfile_name-eb2244dc9b9fd954.yaml | 12 + .../use-tftpd-hpa-in-debian-07f5429e791ab883.yaml | 5 + setup.py | 1 + spec/classes/ironic_conductor_spec.rb | 6 + spec/classes/ironic_disk_utils_spec.rb | 60 +++++ spec/classes/ironic_drivers_pxe_spec.rb | 9 +- spec/classes/ironic_drivers_staging_spec.rb | 9 +- spec/classes/ironic_inspector_policy_spec.rb | 4 +- spec/classes/ironic_inspector_spec.rb | 18 +- spec/classes/ironic_pxe_spec.rb | 287 ++++++++++++++++++--- ...ini_setting_spec.rb => openstackconfig_spec.rb} | 18 +- spec/unit/type/ironic_inspector_config_spec.rb | 45 ++++ templates/dnsmasq_tftp_server.erb | 8 + templates/inspector_dnsmasq_http.erb | 4 +- tox.ini | 2 +- 35 files changed, 800 insertions(+), 141 deletions(-)

1 0

glance_store 4.3.1 (antelope)
by no-reply＠openstack.org 17 May '23

17 May '23

We are psyched to announce the release of: glance_store 4.3.1: OpenStack Image Service Store Library This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 4.3.1 ^^^^^ Security Issues * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Changes in glance_store 4.3.0..4.3.1 ------------------------------------ a7eed02 Add force to os-brick disconnect 54d9449 Run cinder driver unit tests ddc4696 Update TOX_CONSTRAINTS_FILE for stable/2023.1 8d56f71 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder/base.py | 3 ++- releasenotes/notes/bug-2004555-4fd67fce86c07461.yaml | 11 +++++++++++ test-requirements.txt | 1 + tox.ini | 6 +++--- 8 files changed, 20 insertions(+), 6 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index b623f81..2eaa226 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,0 +14 @@ coverage!=4.4,>=4.0 # Apache-2.0 +ddt>=1.4.4 # MIT

1 0

glance_store 3.0.1 (yoga)
by no-reply＠openstack.org 17 May '23

17 May '23

We are gleeful to announce the release of: glance_store 3.0.1: OpenStack Image Service Store Library This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/glance_store Download the package from: https://pypi.org/project/glance_store For more details, please see below. 3.0.1 ^^^^^ Security Issues *************** * Cinder glance_store driver: in order to avoid a situation where a leftover device could be mapped to a different volume than the one intended, the cinder glance_store driver now instructs the os-brick library to force detach volumes, which ensures that devices are removed from the host. See Bug #2004555 (https://bugs.launchpad.net/glance- store/+bug/2004555) for more information about this issue. Bug Fixes ********* * Now the "project_domain_name" parameter and the "user_domain_name" parameter are properly used by swift backends. Previously these two parameters were ignored and the "*_domain_id" parameters should be set to use a keystone domain different from the default one. * Bug #1970698 (https://bugs.launchpad.net/glance- store/+bug/1970698): Cinder: Fixed exception logging when the image create operation fails due to failing to attach volume to glance host. * Bug #1969373 (https://bugs.launchpad.net/glance- store/+bug/1969373): Cinder Driver: Correct the retry interval from fixed 1 second to exponential backoff for attaching a volume during image create/save operation. Changes in glance_store 3.0.0..3.0.1 ------------------------------------ 2830182 Add force to os-brick disconnect bc9375e Fix tox4 error 4e5b90a Swift: Honor *_domain_name parameters 69fd0dc Cinder: Correct exception logging during attach c6716cb Correct retry interval during attach volume 88bd7fc Update TOX_CONSTRAINTS_FILE for stable/yoga 74fee65 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + glance_store/_drivers/cinder.py | 5 +- glance_store/_drivers/swift/utils.py | 33 +++++----- glance_store/common/attachment_state_manager.py | 7 ++- glance_store/common/cinder_utils.py | 4 +- .../unit/common/test_attachment_state_manager.py | 13 +++- .../notes/bug-1620999-8b76a0ad14826197.yaml | 7 +++ .../notes/bug-2004555-4fd67fce86c07461.yaml | 11 ++++ ...ion-logging-during-attach-9546e24189db83c4.yaml | 6 ++ .../fix-interval-in-retries-471155ff34d9f0e9.yaml | 7 +++ tox.ini | 7 +-- 17 files changed, 247 insertions(+), 41 deletions(-)

1 0

keystoneauth1 5.2.0 (bobcat)
by no-reply＠openstack.org 17 May '23

17 May '23

We are satisfied to announce the release of: keystoneauth1 5.2.0: Authentication Library for OpenStack Identity This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/keystoneauth1 Download the package from: https://pypi.org/project/keystoneauth1 For more details, please see below. 5.2.0 ^^^^^ New Features ************ * [blueprint support-oauth2-mtls (https://blueprints.launchpad.net/keystone/+spec/support- oauth2-mtls)] Added a new OAuth2mTlsClientCredential plugin, accessible via the 'v3oauth2mtlsclientcredential' entry point, making possible to authenticate using an OAuth 2.0 Mutual-TLS client credentials. Keystoneauth can now be used to access the OpenStack APIs that use the keystone middleware to support OAuth2.0 mutual-TLS client authentication through the keystone identity server. Bug Fixes ********* * [bug 1998366 (https://bugs.launchpad.net/keystoneauth/+bug/1998366) Federated auth plugins now can work with unversioned auth url (e.g. "http://keystone"). Changes in keystoneauth1 5.1.2..5.2.0 ------------------------------------- 2e40bbf Update master for stable/2023.1 44e5b2d New auth plugin v3oidcdeviceauthz ca28df8 OAuth 2.0 Mutual-TLS Support 192a27a Remove six bef3dfb setup.cfg: Restore python_requires after a typo 737790f Allow federation to work with unversioned auth_url 19db34e Switch to 2023.1 Python3 unit tests and generic template name aaca2b3 Update master for stable/zed be2223c Replace abc.abstractproperty with property and abc.abstractmethod Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- keystoneauth1/_fair_semaphore.py | 4 +- keystoneauth1/_utils.py | 5 +- keystoneauth1/access/access.py | 8 + keystoneauth1/access/service_catalog.py | 5 +- keystoneauth1/discover.py | 7 +- keystoneauth1/exceptions/oidc.py | 9 + keystoneauth1/extras/_saml2/v3/adfs.py | 3 +- keystoneauth1/fixture/serializer.py | 5 +- keystoneauth1/fixture/v3.py | 18 +- keystoneauth1/identity/__init__.py | 10 +- keystoneauth1/identity/base.py | 9 +- keystoneauth1/identity/generic/base.py | 9 +- keystoneauth1/identity/v2.py | 5 +- keystoneauth1/identity/v3/__init__.py | 6 +- keystoneauth1/identity/v3/base.py | 11 +- keystoneauth1/identity/v3/federation.py | 10 +- keystoneauth1/identity/v3/k2k.py | 4 +- .../identity/v3/oauth2_mtls_client_credential.py | 125 +++++++++++ keystoneauth1/identity/v3/oidc.py | 148 ++++++++++++- keystoneauth1/identity/v3/tokenless_auth.py | 5 +- keystoneauth1/loading/_plugins/identity/v3.py | 54 +++++ keystoneauth1/loading/base.py | 4 +- keystoneauth1/session.py | 28 +-- .../unit/identity/test_identity_v3_federation.py | 18 +- .../bp-support-oauth2-mtls-177cda05265ae65c.yaml | 10 + .../notes/bug-1998366-27cd486b46fb56b0.yaml | 6 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 2 + releasenotes/source/zed.rst | 6 + requirements.txt | 5 - setup.cfg | 4 +- 44 files changed, 829 insertions(+), 137 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4f06ae0..30d3d7f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,4 +4,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -21 +16,0 @@ requests>=2.14.2 # Apache-2.0 -six>=1.10.0 # MIT

1 0