We are psyched to announce the release of: blazar 15.1.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/blazar Download the package from: https://tarballs.openstack.org/blazar/ Please report issues through: https://bugs.launchpad.net/blazar/+bugs For more details, please see below. 15.1.0 ^^^^^^ New Features ************ * A new module, "blazar.wsgi", has been added as a place to gather WSGI "application" objects. This is intended to ease deployment by providing a consistent location for these objects. For example, if using uWSGI then instead of: [uwsgi] wsgi-file = /bin/blazar-api-wsgi You can now use: [uwsgi] module = blazar.wsgi.api:application This also simplifies deployment with other WSGI servers that expect module paths such as gunicorn. Upgrade Notes ************* * The WSGI script "blazar-api-wsgi" has been removed. Deployment tooling should instead reference the Python module path for the wsgi module in Blazar, "blazar.wsgi.api:application" if their chosen WSGI server supports this (gunicorn, uWSGI, etc.) or implement a .wsgi script themselves if not (mod_wsgi). Security Issues *************** * Fixes a bug where any user could update/delete a lease from any project, provided that they had the lease ID. When using the default policy configuration, there is no way for a regular user to see lease IDs of another project. However, operators that are running the Resource Availability Calendar may have overridden this policy, and so may be vulnerable without this fix. LP#2120655 Bug Fixes ********* * Fixes an issue where the amount of instances in an instance reservation could not be updated when the lease is active. LP#2138386 Changes in blazar 15.0.0..15.1.0 -------------------------------- 5c67ccd Fix updating amount in active instance leases adc8d63 Fix owner policy enforcement e2a95ee Fix lease date 870f1ea Add wsgi module to blazar f071f97 Update TOX_CONSTRAINTS_FILE for stable/2025.1 089c15e Update .gitreview for stable/2025.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + blazar/plugins/instances/instance_plugin.py | 3 +- blazar/policy.py | 19 ++++- blazar/wsgi/__init__.py | 0 blazar/wsgi/api.py | 24 +++++++ devstack/plugin.sh | 2 +- devstack/settings | 2 +- ...-owner-policy-enforcement-57a6d71c37ffec3d.yaml | 10 +++ ...-in-instance-reservations-52e6e3a413a0176f.yaml | 6 ++ .../remove-wsgi-scripts-1e2011c1d40df1c7.yaml | 29 ++++++++ tox.ini | 4 +- 13 files changed, 156 insertions(+), 47 deletions(-)