We jubilantly announce the release of: openstack-congress 9.0.0: Congress: The open policy framework for the cloud. This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/congress Download the package from: https://tarballs.openstack.org/congress/ Please report issues through: https://bugs.launchpad.net/congress/+bugs For more details, please see below. Changes in openstack-congress 8.0.0..9.0.0 ------------------------------------------ 72a1b2bc minor doc typo fixes 95ef399c Lower psycopg2 dependency to >=2.5.1 1fcdf9f0 fix incorrect sql compose for index create 54839245 Replace openstack.org git:// URLs with https:// 99108193 Update UPPER_CONSTRAINTS_FILE for stable/stein 97679e57 Update .gitreview for stable/stein 78a70b64 [doc only] Doc changes related to json ingester aa9a7679 Devstack plugin set privileges to json ingester DB ea1fb9c3 Replace fixed endpoint config by dynamic in devstack plugin a1dfbdec Fix redundant index, unindexable, wrong isolation in JSON ingester 5fdfc7b4 Add python 3.6 to setup.cfg, in line with Stein target c15f2dd0 Completes upgrade check for monasca webhook data source 794e5f37 Use YAML safe_load 4752a6fd Use YAML safe_load_all 18e3060a Return 503 rather than 500 error when _ds_manager unreachable 9abf9993 Fix inconsistent OptionJsonEncoder behavior on unknown type bd3a30ae More sample configs for JSON ingester 8788b5b3 Add cinder config to sample JSON ingester configs 7676be3c Allow port in JSON ingester config eb8520d6 Support making unauthenticated APIs requests by JSON ingester 55ce6f19 Add created_at field for nova servers table 86a778ca Add API header config to JSON ingester 5da6e463 JSON ingester deployment enhancements 52e5c234 JSON ingester API execution feature 69848285 temp disable config validator congress agent in CI fd495c6e Add tacker datasource driver 3a704427 JSON ingester experimental feature flag 2c5e4e3c add python 3.7 unit test job 6f01dfaf Generic webhook processer for JsonIngester 3b5b6b92 move config init from congress_servers.py to bin/congress-server 6419ef18 Mock rather than modify DataSourceDriver.TRANSLATORS in unit tests 3ce621e7 PollingJsonIngester differential update to DB 02f45c00 Enable monasca in py2 tempest CI job 608703a6 Enable z3 on ubuntu bionic tempest tests ab19f66f migrate legacy dsvm jobs to non-legacy 28b804a4 basic polling JSON ingester 21f075fa Fix congre command excute error when using python3.6 d0baa359 Add release note for webhook pub-sub bugfix 5b9ae410 Avoid coreference between current state and _last_published_data 8382a879 Add tacker driver to doc 52148542 Add release note to warn about schema change in monasca webhook 12974b28 Improve documentation of policy create API 3153c06a Add required checks in all cases of policy create API e9cccb4f Add note clarifying a confusing method call e657d29f Update mailinglist from dev to discuss 6611df0e Set Tempest's service_available setting for congress 7767c271 Add servers.addresses table in nova driver 4b2b6faf builtins for z3 theories 1b618295 Fix policy document c22f2ba9 Update min tox version to 2.0 75df78f5 [Trivial Fix] modify spelling error of "resource" acb7c5be Add python 3.6 for test in tox bb7f35f1 Remove some less necessary check jobs 521ccd16 Add wiki Source Bugs and Blueprints notes link to README.rst e7c13b8a Add framework for congress-status upgrade check bd21ca56 Increment versioning with pbr instruction 993f9b30 workaround: add ending '/' to oslo-messaging transport url f1ae842a ignore files created by sphinx-build f37000aa ignore keys directory created by test suite 874ff382 change the dist name to 'openstack-congress' b839ab56 simplify README.rst 7fcdd597 Switch to stestr 9388e37b Expose a get_enforcer method for oslo.policy scripts fcc3e17f Use templates for cover and lower-constraints f538fee6 Normalizing monasca webhook driver tables dae3b410 enable xtrace in devstack plugin 291a3e79 add rocky feature flags for tempest testing 84a49980 add python 3.6 unit test job 48014fbb remove Babel unused requirement aa9c4418 add instruction to install rabbitmq-server cf2e2c95 switch documentation job to new PTI 81941e16 import zuul job settings from project-config 014361c8 Update reno for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitignore | 8 +- .gitreview | 1 + .stestr.conf | 3 + .testr.conf | 7 - .zuul.yaml | 261 +++++++----- README.rst | 86 +--- bin/congress-server | 4 +- congress/__init__.py | 2 +- congress/api/base.py | 1 + congress/api/datasource_model.py | 11 + congress/api/policy_model.py | 16 +- congress/api/router.py | 12 + congress/api/webhook_model.py | 15 +- congress/api/webservice.py | 2 +- congress/cfg_validator/agent/agent.py | 2 +- congress/cfg_validator/agent/generator.py | 4 +- congress/cfg_validator/parsing.py | 24 +- congress/cmd/__init__.py | 0 congress/cmd/status.py | 67 +++ congress/common/config.py | 20 + congress/common/policy.py | 6 + congress/datasources/datasource_driver.py | 4 +- congress/datasources/datasource_utils.py | 11 +- congress/datasources/json_ingester/__init__.py | 0 congress/datasources/json_ingester/exec_api.py | 178 ++++++++ .../datasources/json_ingester/json_ingester.py | 465 +++++++++++++++++++++ congress/datasources/json_ingester/sql.py | 36 ++ congress/datasources/monasca_driver.py | 85 ++-- congress/datasources/nova_driver.py | 52 +++ congress/datasources/tacker_driver.py | 130 ++++++ congress/dse2/data_service.py | 25 +- congress/dse2/dse_node.py | 6 +- congress/exception.py | 4 + congress/harness.py | 35 ++ congress/library_service/library_service.py | 2 +- congress/server/congress_server.py | 13 +- .../datasources/json_ingester/test_exec_api.py | 191 +++++++++ .../json_ingester/test_json_ingester.py | 241 +++++++++++ congress/utils.py | 102 +++++ congress/version.py | 2 +- congress/z3/typechecker.py | 93 ++++- congress/z3/z3builtins.py | 53 +++ congress/z3/z3theory.py | 64 +-- congress/z3/z3types.py | 2 +- devstack/plugin.sh | 118 +++++- devstack/settings | 16 +- .../jgress_sample_policies/forever_password.sql | 13 + .../jgress_sample_policies/unencrypted_volume.sql | 10 + etc/config_reusables.yaml | 9 + etc/sample_json_ingesters/cinderv3.yaml | 21 + etc/sample_json_ingesters/cve.yaml | 11 + etc/sample_json_ingesters/glance.yaml | 16 + etc/sample_json_ingesters/heat.yaml | 36 ++ etc/sample_json_ingesters/keystone.yaml | 51 +++ etc/sample_json_ingesters/magnum.yaml | 36 ++ etc/sample_json_ingesters/masakari.yaml | 16 + etc/sample_json_ingesters/mistral.yaml | 54 +++ etc/sample_json_ingesters/monasca.yaml | 6 + etc/sample_json_ingesters/neutron-fwaas.yaml | 21 + etc/sample_json_ingesters/neutron.yaml | 46 ++ etc/sample_json_ingesters/nova.yaml | 38 ++ etc/sample_json_ingesters/tacker.yaml | 16 + etc/sample_json_ingesters/zun.yaml | 23 + lower-constraints.txt | 8 +- .../legacy/congress-devstack-api-base/post.yaml | 80 ---- .../legacy/congress-devstack-api-base/run.yaml | 104 ----- .../congress-devstack-py35-api-mysql/post.yaml | 80 ---- .../congress-devstack-py35-api-mysql/run.yaml | 88 ---- .../legacy/congress-pe-replicated-base/post.yaml | 80 ---- .../legacy/congress-pe-replicated-base/run.yaml | 89 ---- releasenotes/notes/jgress-0df6bb2a661b5870.yaml | 9 + .../monasca-webhook-schema-480fe72024067725.yaml | 7 + .../nova-server-created-0c4b326e9ef486b8.yaml | 7 + ...a-servers-addresses-table-c1b7c4afa4c29c28.yaml | 8 + .../tacker-datasource-driver-43054caac433c800.yaml | 7 + .../notes/upgrade-checkers-178e98db21109e4f.yaml | 12 + .../notes/webhook-publish-2127b66893a33ea2.yaml | 5 + .../notes/z3-builtins-461251858ea2bf88.yaml | 8 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + requirements.txt | 8 +- scripts/jgress/setup_permissions.sql | 13 + scripts/ocf/congress-datasource | 2 +- setup.cfg | 10 +- test-requirements.txt | 2 +- tox.ini | 21 +- 120 files changed, 3971 insertions(+), 1000 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c1005ab8..c3313e1f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +4,0 @@ -Babel!=2.4.0,>=2.3.4 # BSD @@ -14,0 +14 @@ aodhclient>=0.9.0 # Apache-2.0 +python-tackerclient>=0.8.0 # Apache-2.0 @@ -27,0 +28,2 @@ netaddr>=0.7.18 # BSD +jsonpath-rw<2.0,>=1.2.0 # Apache-2.0 +psycopg2>=2.5.1 # LGPL/ZPL @@ -29,0 +32 @@ python-glanceclient>=2.8.0 # Apache-2.0 +requests>=2.14.2,!=2.20.0 # Apache-2.0 @@ -40,0 +44 @@ oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 +oslo.upgradecheck>=0.1.0 # Apache-2.0 @@ -46 +50 @@ WebOb>=1.7.1 # MIT -PyYAML>=3.10.0 # MIT \ No newline at end of file +PyYAML>=3.10.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index e51aabe8..5fc0b0e3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +13 @@ python-subunit>=1.0.0 # Apache-2.0/BSD -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.0.0 # Apache-2.0