We are amped to announce the release of: heat 24.1.1 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/heat Download the package from: https://tarballs.openstack.org/heat/ Please report issues through: https://storyboard.openstack.org/#!/project/989 For more details, please see below. 24.1.1 ^^^^^^ Bug Fixes * Fixed the broken "heat-manage update_params" command. * The Keystone v3 ec2token end point requires authenticated access. The Heat ec2token filter now requires Keystone auth settings to be able to verify EC2 credentials. For single cloud mode the ec2token filter will look in the "[ec2authtoken]" section of the heat configuration for keystone authentication settings. In multicloud mode keystone auth settings must be supplied in configuration file sections names "[ec2authtoken.<name>]" . The "[ec2authtoken] clouds" option should be also configured to define the list of names. Note that ec2token request will be sent without authentication if the legacy settings ("auth_uri" and "allowed_auth_uris") are still used. * The "disk_bus" property of "OS::Nova::Server" resource's "block_device_mapping_v2" now accepts 'sata' as a valid value. The SATA disk bus was added to Nova in the Queens release. See story 2011600 (https://storyboard.openstack.org/#!/story/2011600). * Enable the creation of an "OS::Neutron::VPNService" resource, and an "OS::Neutron::IPsecSiteConnection" resource that depends on it, within the same stack. Changes in heat 24.1.0..24.1.1 ------------------------------ 103183469 Preserve auto-populated binding:profile fields during update b8b85de4c Restore heat-manage update_params a13230861 stable/2025.1 only: Disable Jammy job 5e56c980e Add `sata` to OS::Nova::Server disk_bus constraint 7c43e53cf stable-only: Pin setuptools 8bb750117 Add back ParallelDeploymentsTest in upgrade test 3b2ebd307 stable/2025.1 only: Drop SLURP job 006357801 Use authentication with keystone ec2token api 48538e5a2 Consider the VPNService resource complete if its Neutron object is in PENDING_CREATE f09ee2ca7 Switch back pre-upgrade check to source branch 1fd4e26f6 Fix instance_group/autoscaling_group intermittent test failures 70f4be9cd Fix barbican client plugin 603e546f2 Fix stack update when reauthentication_auth_method=trusts Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 20 +- devstack/lib/heat | 1 + devstack/upgrade/resources.sh | 1 - heat/api/aws/ec2token.py | 228 ++++++-- heat/db/api.py | 186 ++++++- heat/engine/clients/os/barbican.py | 2 +- heat/engine/resources/openstack/neutron/port.py | 40 ++ .../resources/openstack/neutron/vpnservice.py | 12 +- heat/engine/resources/openstack/nova/server.py | 2 +- heat/engine/stack.py | 10 + .../api/aws/config/multi_cloud_auth_uris.conf | 10 + .../api/aws/config/multi_cloud_partial_v2.conf | 14 + .../openstack/neutron/test_neutron_vpnservice.py | 1 - .../functional/test_autoscaling.py | 51 +- .../functional/test_instance_group.py | 51 +- ...heat-manage-update_params-59829be29d62efba.yaml | 4 + ...c2token-api-authenticated-b77da7d1edbb086c.yaml | 17 + ...ng-v2-disk-bus-allow-sata-d22c1dfe4f2f9a83.yaml | 7 + ...vpnservice-pending-create-f261c5dfc290a734.yaml | 6 + test-requirements.txt | 2 +- tox.ini | 4 + 34 files changed, 1558 insertions(+), 330 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 262eaade7..f7b702277 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ hacking>=6.1.0,<6.2.0 # Apache-2.0 -bandit>=1.8.1 # Apache-2.0 +bandit>=1.8.1,<1.9.3 # Apache-2.0