We are glad to announce the release of: openstack-heat 12.0.0: OpenStack Orchestration This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/heat Download the package from: https://tarballs.openstack.org/heat/ Please report issues through: https://storyboard.openstack.org/#!/project/989 For more details, please see below. 12.0.0 ^^^^^^ Prelude ******* Added new tool "heat-status upgrade check". New Features ************ * Add multiple OpenStack orchestration support - User can now use "OS::Heat::Stack" to create stack in another OpenStack cloud. Must provide properties "credential_secret_id" in "context". Remote stack resource will get authentication information from cloud credential to refresh context before calling stack create. * A new "OS::Blazar::Host" resource is added to manage compute hosts for the lease/reservation in OpenStack. * A new "OS::Blazar::Lease" resource is added to manage reservations for specific type/amount of cloud resources in OpenStack. * Add rbac_policy and subnetpool support for OS::Neutron::Quota resource. * Add UDP to supported protocols for Octavia. * A new "OS::Neutron::TaaS::TapService" resource is added to support a Tap Service in the Neutron Tap-as-a-service plugin. * A new "OS::Neutron::TaaS::TapFlow" resource is added to support a Tap Flow in the Neutron Tap-as-a-service plugin. * Add a new OS::Glance::WebImage resource supporting the web- download import of Glance v2. * New framework for "heat-status upgrade check" command is added. This framework allows adding various checks which can be run before a Heat upgrade to ensure if the upgrade can be performed safely. * New resource "OS::Neutron::L2GatewayConnection" to allow management of Neutron Layer2 Gateway Connection. This resource provides capability to connect a Neutron network to a Layer2 Gateway. The resource depends on the Neutron "l2-gateway" extension. * New resource "OS::Neutron::L2Gateway" to allow management of Neutron Layer2 Gateway. This resource provides life-cycle management of layer2 gateway instances. The resource depends on the Neutron "l2-gateway" extension. * Add tags support for ProviderNet resource * Add "ca_cert" and "insecure" properties for "OS::Heat::Stack" resource type. The "ca_cert" is the contents of a CA Certificate file that can be used to verify a remote cloud or region's server certificate. "insecure" is boolean option, CA cert will be use if we didn't setup insecure flag. Upgrade Notes ************* * The distribution name has been changed from "heat" to "openstack- heat" so that we can publish packages to pypi.org. This may have an effect on downstream package builds if they rely on asking setuptools to determine the package name. * New config "max_nova_api_microversion" to set the maximum nova API microversion for nova client plugin. If``max_nova_api_microversion`` is set, any nova features supported with microversion number above max_nova_api_microversion will not be available. * Operator can now use new CLI tool "heat-status upgrade check" to check if Heat deployment can be safely upgraded from N-1 to N release. Deprecation Notes ***************** * "personality" property of "OS::Nova::Server" is now deprecated, please use "user_data" or "metadata" instead. If that property really required, use config "max_nova_api_microversion" to set the maximum nova API microversion <2.57 for nova client plugin to support personality property. Bug Fixes ********* * We now allowed global admins to operate software deployment and software config resources from other projects. * Heat can now perform a stack update to roll back to a previous version of a resource after a previous attempt to create a replacement for it failed (provided that convergence is enabled). This allows the user to recover a stack where a resource has been inadvertantly replaced with a definition than can never succeed because it conflicts with the original. Previously this required automatic rollback to be enabled, or the user had to update the stack with a non-conflicting definition before rolling back to the original. Changes in openstack-heat 11.0.0.0rc1..12.0.0 --------------------------------------------- 8fa8cc35b Load existing resources using correct environment 5528c47fa Add Code name for Stein 12.0.0 in document 6f87e169f Replace openstack.org git:// URLs with https:// 3fa1cbd9f Fix SoftwareDeployment on DELETE action be382ccdd Update UPPER_CONSTRAINTS_FILE for stable/stein 065ffdb9a Update .gitreview for stable/stein 97f2636dc Use keystone session with heatclient in integration tests c737ed82f Migrate to bionic test image 3ad7ab288 Override ssl options for heatclient in RemoteStack 699033163 Support remote stack with another OpenStack provider 6c35f2836 Add tools for parse credential from Secret payload 680d7a0ec Deprecate `personality` for `OS::Nova::Server` 4ee754f35 Add tools to get keystone auth plugin ef8d50856 Remove VolumeBackupRestoreIntegrationTest from skip list 194160209 Migrate tests from Xenial to Bionic 0731857d0 Support Neutron L2Gateway resource 7e53efc1a Support Neutron L2GatewayConnection resource 2b580f425 Allow users to disable the tests run by Grenade 8c46dacd6 Add a Blazar Host resource 809ac9743 Add a Blazar Lease resource 1cd8ce37c Don't translate event reason when adding hook event 84c908ca9 Add disk size to the flavors 267060ff5 Fix indentation in HOT specification dd4337cca Fix indentation in docs f47748d4b Translate tenant_id to project_id in Octavia loadbalancer resource b9af0cf53 Heat support for Tap-as-a-Service resources 262c432e9 Rename the client routines for sfc to more generic name 8c79ae0ae Fix Designate Zone lookup by name 97df8bb6c Improve best existing resource selection e34da8929 Allow update of previously-replaced resources fb6805a90 Imported Translations from Zanata 5a43e0520 Add release note for 1649759 14fae9e7d Allow global admins to operate sc resources from other projects 6fd6fefc4 Allow global admins to operate sd resources from other projects dc38fb51b Support glance web-download 7dd4131cc Replace tripleo-scenario002-multinode with scenario002-standalone a2f74772e Add heat-agents as required project e3d54b74f Catch socket.timeout for connectivity error when streaming b5d25c725 Remove duplicate tempest.conf setup for grenade 8cbc8ccf6 Bump minimal_image_ref 8ea5c9e5e Incorrect project name in installation instructions for CentOS 8260579b2 Streamline conversion of resources to convergence 35d5ec231 Imported Translations from Zanata dbd09e8d6 Implement preview for ResourceGroup a1aa1eec1 Change openstack-dev to openstack-discuss 0a7f17482 Add rbac_policy/subnetpool support for OS::Neutron::Quota resource 66442554d Pass role ids to trust if possible 8258f3f12 Add tags support for ProviderNet resource 614ba0a98 Revert "Use OutputDefinition to generate attributes schema" 50260212e Fall back to www_authenthicate_uri b5333aea9 Use fedora 29 image from nodepool mirror 98723966c Set Tempest's service_availability setting for Heat 55e5a4403 Remove tripleo newton and ocata jobs 03154ba71 Return execution state_info in ExternalResource 31bfba049 Add missing ws seperator between words 849420429 Add heat-status to man page output f956a0fb6 Add Release Notes in README d83cf6ad7 convert py35 jobs to py3 5889aee9d Imported Translations from Zanata 8ae5f8657 change the dist name to 'openstack-heat' 0b9c9dbce Revert "Add openstack/placement as a required project for heat-grenade*" ba4e54589 Add heat-status upgrade check command framework 85eff5fc3 Use OutputDefinition to generate attributes schema bb3ddcf57 Ensure Functions can be created without stack definition 63bff7408 Revert "Change "services" to "service"" b90278b50 Change "services" to "service" 43583b4a3 Delete db resources not in template 31584326d Don't depend on string interning fcf3685d4 Increment versioning with pbr instruction d60514f86 Don't quote {posargs} in tox.ini 644752027 Unit tests: Avoid deprecation warning for getargspec() e3cb8e05a Don't use 'user' and 'tenant' args in context a7dce8178 Imported Translations from Zanata b4038c44b Don't assert that we haven't signalled the calling thread bad27d388 Set a concurrency limit on ResourceChain ff83aaeeb Consider volume in 'reserved' status as detachment in progress 82e30159b Set the octavia noop drivers correctly 4e8a3ca6b Add openstack/placement as a required project for heat-grenade* 7b34d88e1 adding a note that specifically states the user cannot rename a stack 3b59f9ad9 Check for server in attachements when checking for detach complete d7daa3438 Fail to release a stack_lock in the database is a fatal action. 5a48912cb Fix heat multi-region support with shared keystone 6f422b48d Imported Translations from Zanata 866864f7e Use no-op drivers for Octavia in gate fafdd06bf middleware: return HTTPBadRequest when path is invalid 3a7b03068 Imported Translations from Zanata 377b645b6 Imported Translations from Zanata 388270577 Use openstack-tox-cover template ed40c0546 Use oslo_messaging for JsonPayloadSerializer b659a7abf aodh/gnocchi: remove constraints on aggregation methods 2776ffc1d Fix .zuul.yaml 32e9e83b3 remove master-only job templates from zuul config 8bb1cef48 Add functional test for legacy in-place update 75c912181 Update resource definitions after legacy in-place update fc8eb842b Trivial: Update pypi url to new url 83ae15692 Ignore spurious nested stack locks in convergence 00f3e467f Fix bug to doc: rally_on_gates a3e316edd Imported Translations from Zanata 799119954 Support py36 for test in tox 92850bc5d add python 3.6 unit test job 8d2a7b8eb switch documentation job to new PTI 693577797 import zuul job settings from project-config ac75457cc Rename mox_resource_id to mock_resource_id 92101b18e Ignore conditions when reparsing ResourceDefinition 22b14ff97 Do not perform the tenant stack limit check for admin user 077692023 Add UDP to supported protocols for Octavia d96b564fd Imported Translations from Zanata 38fad07c0 Unit tests: Fix mock errors with too few side effects 2704cbbe8 Update reno for stable/rocky bcd430cf4 Fix errors with issubclass() in Python 3.7 9c421a672 Remove unnecessary shebangs from service scripts 087210aff Revert octavia pool member delete fix 7b82f67fb zun: remove the handling of not acceptable error b384c179a Fix some typos in docstrings. 5aef2518e Try deleting stack if not soft deleted yet 17a040dab Fix missing space in help text for caching option. 507bceabb Ignore exceptions getting FloatingIP dependencies 755762f1d Increase limit for RandomString test_overlapping_classes 426aa3498 Clarify resource deprecation process Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 30 +- README.rst | 1 + devstack/lib/heat | 9 + devstack/plugin.sh | 4 + devstack/upgrade/from-rocky/upgrade-heat | 55 +++ devstack/upgrade/resources.sh | 23 +- devstack/upgrade/settings | 3 + heat/api/middleware/version_negotiation.py | 7 + heat/cmd/all.py | 1 - heat/cmd/api.py | 1 - heat/cmd/api_cfn.py | 1 - heat/cmd/engine.py | 1 - heat/cmd/status.py | 54 +++ heat/common/auth_plugin.py | 64 ++++ heat/common/cache.py | 2 +- heat/common/config.py | 5 + heat/common/context.py | 19 +- heat/common/endpoint_utils.py | 2 +- heat/common/exception.py | 9 +- heat/common/messaging.py | 16 +- heat/common/urlfetch.py | 4 +- heat/db/sqlalchemy/api.py | 16 +- heat/engine/check_resource.py | 8 - heat/engine/clients/os/barbican.py | 7 + heat/engine/clients/os/blazar.py | 20 +- heat/engine/clients/os/cinder.py | 9 +- heat/engine/clients/os/designate.py | 8 +- .../clients/os/keystone/heat_keystoneclient.py | 29 +- heat/engine/clients/os/neutron/__init__.py | 29 +- heat/engine/clients/os/neutron/taas_constraints.py | 32 ++ heat/engine/clients/os/nova.py | 2 +- heat/engine/clients/os/zun.py | 13 +- heat/engine/hot/functions.py | 15 +- heat/engine/notification/__init__.py | 2 +- heat/engine/resource.py | 18 +- .../resources/openstack/aodh/gnocchi/alarm.py | 6 - heat/engine/resources/openstack/blazar/__init__.py | 0 heat/engine/resources/openstack/blazar/host.py | 167 +++++++++ heat/engine/resources/openstack/blazar/lease.py | 309 +++++++++++++++++ heat/engine/resources/openstack/cinder/volume.py | 9 +- heat/engine/resources/openstack/glance/image.py | 224 +++++++++++- .../resources/openstack/heat/remote_stack.py | 224 ++++++++++-- .../resources/openstack/heat/resource_chain.py | 8 + .../resources/openstack/heat/resource_group.py | 12 + .../openstack/heat/software_deployment.py | 4 +- .../openstack/mistral/external_resource.py | 2 +- .../resources/openstack/neutron/floatingip.py | 14 +- .../resources/openstack/neutron/l2_gateway.py | 158 +++++++++ .../openstack/neutron/l2_gateway_connection.py | 84 +++++ .../resources/openstack/neutron/lbaas/l7rule.py | 2 +- .../resources/openstack/neutron/provider_net.py | 18 +- heat/engine/resources/openstack/neutron/quota.py | 22 +- .../openstack/neutron/sfc/flow_classifier.py | 8 +- .../resources/openstack/neutron/sfc/port_chain.py | 8 +- .../resources/openstack/neutron/sfc/port_pair.py | 8 +- .../openstack/neutron/sfc/port_pair_group.py | 8 +- .../resources/openstack/neutron/taas/__init__.py | 0 .../resources/openstack/neutron/taas/tap_flow.py | 173 ++++++++++ .../openstack/neutron/taas/tap_service.py | 137 ++++++++ heat/engine/resources/openstack/nova/server.py | 11 + .../resources/openstack/octavia/health_monitor.py | 3 +- .../engine/resources/openstack/octavia/listener.py | 4 +- .../resources/openstack/octavia/loadbalancer.py | 2 + heat/engine/resources/openstack/octavia/pool.py | 4 +- .../resources/openstack/octavia/pool_member.py | 23 +- heat/engine/resources/stack_resource.py | 12 +- heat/engine/resources/volume_base.py | 2 +- heat/engine/rsrc_defn.py | 6 +- heat/engine/service.py | 40 ++- heat/engine/stack.py | 99 +++--- heat/engine/template.py | 3 +- heat/engine/update.py | 2 + heat/httpd/heat_api.py | 1 - heat/httpd/heat_api_cfn.py | 1 - heat/locale/de/LC_MESSAGES/heat.po | 70 +--- heat/locale/es/LC_MESSAGES/heat.po | 32 +- heat/locale/fr/LC_MESSAGES/heat.po | 32 +- heat/locale/it/LC_MESSAGES/heat.po | 32 +- heat/locale/ja/LC_MESSAGES/heat.po | 31 +- heat/locale/ko_KR/LC_MESSAGES/heat.po | 28 +- heat/locale/pt_BR/LC_MESSAGES/heat.po | 30 +- heat/locale/ru/LC_MESSAGES/heat.po | 31 +- heat/locale/zh_CN/LC_MESSAGES/heat.po | 26 +- heat/locale/zh_TW/LC_MESSAGES/heat.po | 26 +- heat/objects/resource.py | 6 + heat/objects/service.py | 8 + heat/policies/resource_types.py | 3 + .../test_version_negotiation_middleware.py | 9 + .../convergence/framework/message_processor.py | 8 +- .../openstack/neutron/test_neutron_l2_gateway.py | 312 +++++++++++++++++ .../neutron/test_neutron_l2_gateway_connection.py | 87 +++++ .../openstack/neutron/test_neutron_loadbalancer.py | 1 + .../openstack/neutron/test_neutron_provider_net.py | 24 +- .../neutron/test_sfc/test_flow_classifier.py | 12 +- .../openstack/neutron/test_sfc/test_port_chain.py | 12 +- .../openstack/neutron/test_sfc/test_port_pair.py | 12 +- .../neutron/test_sfc/test_port_pair_group.py | 16 +- .../openstack/neutron/test_taas/test_tap_flow.py | 180 ++++++++++ .../neutron/test_taas/test_tap_service.py | 152 +++++++++ heat/version.py | 2 +- .../functional/test_create_update.py | 128 ++++++- lower-constraints.txt | 3 +- playbooks/devstack/functional/run.yaml | 23 +- playbooks/devstack/grenade/run.yaml | 4 +- playbooks/get_amphora_tarball.yaml | 6 - ...i-OpenStack-Cloud-Support-b1ae023811d88854.yaml | 8 + .../add-blazar-host-resource-392ce00635ac27ed.yaml | 5 + ...add-blazar-lease-resource-724caa6572e44182.yaml | 5 + ...rbacpolicy-quota-resource-945a74b57e2198a3.yaml | 3 + .../add-udp-support-octavia-593dca738ab2ef57.yaml | 3 + ...urces_from_other_projects-711a6b61a0aaaf63.yaml | 4 + .../bp-tap-as-a-service-da00206c6a3d4ffc.yaml | 8 + .../notes/change-dist-name-288024b5d6668c01.yaml | 7 + ...cate_personality_property-6bcda7c7c0e07151.yaml | 14 + .../glance-web-download-c9d1fd2a6a2cb044.yaml | 5 + ...s-upgrade-check-framework-ccbd67cee3994b88.yaml | 13 + ...llback-failed-replacement-08ebb9271617fe9d.yaml | 11 + ...n-l2gw-connection-support-56fc2db6e448100a.yaml | 6 + .../neutron-l2gw-support-9fbb690bb5648f76.yaml | 6 + .../providernet_tags_support-e8cc20a4ab76ab8e.yaml | 3 + ...tack_override_ssl_options-69c82b351920af57.yaml | 8 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 302 +++++++++++++++- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 18 +- .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 13 +- releasenotes/source/rocky.rst | 6 + requirements.txt | 3 +- setup.cfg | 7 +- tox.ini | 10 +- 182 files changed, 5056 insertions(+), 1009 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5be9c7903..ca1a089eb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -29 +29,2 @@ oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 -oslo.utils>=3.33.0 # Apache-2.0 +oslo.upgradecheck>=0.1.0 # Apache-2.0 +oslo.utils>=3.37.0 # Apache-2.0