We are happy to announce the release of: openstack-heat 12.1.0: OpenStack Orchestration This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/openstack-heat Download the package from: https://tarballs.openstack.org/heat/ For more details, please see below. 12.1.0 ^^^^^^ New Features ************ * Added a new config option server_keystone_endpoint_type to specify the keystone authentication endpoint (public/internal/admin) to pass into cloud-init data. If left unset the original behavior should remain unchanged. This feature allows the deployer to unambiguously specify the keystone endpoint passed to user provisioned servers, and is particularly useful where the deployment network architecture requires the heat service to interact with the internal endpoint, but user provisioned servers only have access to the external network. For more information see http://lists.openstack.org/pipermail /openstack-discuss/2019-February/002925.html Bug Fixes ********* * Erroneously, availability_zone for host aggregate resource types was considered mandatory in heat templates. Behaviour has been adjusted to bring this in line with the CLI and GUI, in which it is optional. Changes in openstack-heat 12.0.0..12.1.0 ---------------------------------------- 8f1bcbaf8 Fix Tempest installtion on system wide for stable branch 1c6dee1f9 Ignore Not Found when deleting Keystone role assignment 7480a8f31 Handle OS::Mistral::Workflow resource replacement properly 73663f673 Update Fedora image ref and add UPPER_CONSTRAINTS_FILE c59a158da Docs: Fix link broken since Stein release 258c6ea79 Docs: use extrefs to link to other projects' docs 389936787 Correct BRANCH_OVERRIDE for stable/stein d9368ecb2 Correct availability_zone to be non-mandatory in heat e109d6d49 Fix the wrong time unit for OS::Octavia::HealthMonitor a0329a3b9 Use connect_retries when creating clients 302add5bb Add retries when loading keystone data and fetching endpoints 35ef93d03 Add dedicated auth endpoint config for servers 36dab46bd Add retry for sync_point_update_input_data 98bacfb9d Show an engine as down if service record is not updated twice 84fe2ec4f Don't resolve properties for OS::Heat::None resource 916fd0562 Add local bindep.txt and limit bandit version 7d49ff235 Add periodic job template cec8b079c Fix allowed address pair validation e5b6c90b4 Return None for attributes of sd with no actions bc6b4d9e7 Fix regression with SW deployments when region not configured 8023c090b Add entry_point for oslo policy scripts 43377ef7d Blacklist bandit 1.6.0 and cap Sphinx on Python2 8ab042a6a Retry on DB deadlock in event_create() 48c6be4f9 OpenDev Migration Patch Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- .zuul.yaml | 9 ++- bindep.txt | 41 +++++++++++ devstack/plugin.sh | 4 +- devstack/upgrade/resources.sh | 20 +++-- heat/common/config.py | 9 ++- heat/common/context.py | 13 ++++ heat/common/policy.py | 9 +++ heat/common/service_utils.py | 12 +-- heat/db/sqlalchemy/api.py | 4 + heat/engine/clients/client_plugin.py | 2 + heat/engine/clients/os/aodh.py | 2 + heat/engine/clients/os/barbican.py | 2 + heat/engine/clients/os/blazar.py | 2 + heat/engine/clients/os/cinder.py | 2 + heat/engine/clients/os/glance.py | 2 + heat/engine/clients/os/heat_plugin.py | 1 + .../clients/os/keystone/fake_keystoneclient.py | 3 + .../clients/os/keystone/heat_keystoneclient.py | 25 +++++++ heat/engine/clients/os/magnum.py | 2 + heat/engine/clients/os/manila.py | 2 + heat/engine/clients/os/neutron/__init__.py | 4 +- heat/engine/clients/os/nova.py | 1 + heat/engine/clients/os/sahara.py | 2 + heat/engine/clients/os/trove.py | 2 + heat/engine/constraint/common_constraints.py | 14 ++-- heat/engine/resource.py | 7 +- .../resources/openstack/heat/none_resource.py | 4 + .../openstack/heat/software_deployment.py | 21 +++--- .../openstack/keystone/role_assignments.py | 6 +- .../engine/resources/openstack/mistral/workflow.py | 15 ++++ .../resources/openstack/nova/host_aggregate.py | 1 - .../resources/openstack/octavia/health_monitor.py | 4 +- heat/engine/resources/server_base.py | 6 +- heat/engine/resources/signal_responder.py | 3 +- .../openstack/heat/test_software_deployment.py | 3 +- playbooks/devstack/functional/run.yaml | 23 +++--- playbooks/devstack/grenade/run.yaml | 12 +-- ...dpoint-config-for-servers-b20f7eb351f619d0.yaml | 16 ++++ ...-zone-to-be-non-mandatory-ee4c124b15449393.yaml | 8 ++ setup.cfg | 3 + test-requirements.txt | 2 +- tox.ini | 12 +++ 64 files changed, 495 insertions(+), 153 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 4500a40b8..678a0e443 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit<1.6.0,>=1.1.0 # Apache-2.0