ironic-inspector 11.7.1 (bobcat)
We exuberantly announce the release of: ironic-inspector 11.7.1 This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 11.7.1 ^^^^^^ Bug Fixes * In case the lldp raw data collected by the inspection process includes non utf-8 information, the parser fails breaking the inspection process. This patch works around that excluding the malformed data and adding an entry in the logs to provide information on the failed tlv. * Fixes the Role Based Access Control state and capabilities to align with OpenStack Community RBAC goals which includes support for a "service" role by default to enable inter-service communication to be configured without an "admin" username. In large part, these changes were missed as the Inspector service is considered an "admin-only" service. Also in alignment with overall community position changes, where the "admin" role is sufficent without an explicit "system" scope. To help ensure a high level of security, explicit testing was also added for the "manager" role, which is unavailable as that role is reserved for administrative functions inside of a tenant's project. Changes in ironic-inspector 11.7.0..11.7.1 ------------------------------------------ 8a86f23 Fix RBAC access for service/admin user access 38101c7 Handle LLDP parse Unicode error 2bca56d Update TOX_CONSTRAINTS_FILE for stable/2023.2 59ae8d5 Update .gitreview for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_inspector/plugins/lldp_basic.py | 11 +- ironic_inspector/policy.py | 34 +- ironic_inspector/test/unit/test_acl.py | 359 ++++++++++++++++++++- .../notes/fix-lldp-decode-83f4ad3869b0c7a7.yaml | 9 + ...or-openstack-rbac-changes-7ca8533f76e504d5.yaml | 14 + tox.ini | 10 +- 7 files changed, 417 insertions(+), 21 deletions(-)
participants (1)
-
no-reply@openstack.org