We are excited to announce the release of: ironic-inspector 9.0.0: Hardware introspection for OpenStack Bare Metal This release is part of the train release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 9.0.0 ^^^^^ New Features ************ * A new option "enable_mdns" allows to enable publishing the baremetal introspection API endpoint via mDNS as specified in the API SIG guideline (http://specs.openstack.org/openstack/api- sig/guidelines /dns-sd.html). * Adds support to reapply with provided unprocessed introspection data. The introspection data is supplied in the body of POST request to "/v1/introspection/<node_id>/data/unprocessed". The introspection data will also be saved to storage backend. Upgrade Notes ************* * The deprecated SSL configuration options "[DEFAULT]ssl_cert_path" and "[DEFAULT]ssl_key_path" were removed, please use configuration options from "[ssl]" section. * The deprecated configuration option "[processing]store_data_location" was removed. Security Issues *************** * Fixes insufficient input filtering when looking up a node by information from the introspection data. It could potentially allow SQL injections via the "/v1/continue" API endpoint. See story 2005678 (https://storyboard.openstack.org/#!/story/2005678) for details. Bug Fixes ********* * Fixes an issue when extra_hardware plugin failed to save extra hardware information to Swift, the collected information is not processed and consumed. * Fixes an issue while mapping port InfiniBand MAC address to EthernetOverInfiniBand MAC. Prior to this fix, it will fail to map and raise an exception. Changes in ironic-inspector 8.2.0..9.0.0 ---------------------------------------- cebeb82 Convert Swift connection errors into more obvious ones 3c21947 Update sphinx and uncap jsonschema 258d738 Expose baremetal-introspection endpoint via mdns fc8a326 devstack: check if swift is enabled when deciding on the data backend 9d10790 Eliminate SQL injection vulnerability in node_cache dc7e4d2 pxe_filter: fix get blacklist error 09938a3 Improve error handling of extra_hardware b8d1bda Add storing introspection data in database option 72bd8ce OpenDev Migration Patch 541dec6 Fix validate_interfaces processing hook format 29d8515 Support reapply with supplied introspection data 6e7b62a Remove deprecated ssl options 0e11af2 Remove deprecated store_data_location 7222802 Replace openstack.org git:// URLs with https:// 172356d Add versions to release notes series d1b1e5b Update master for stable/stein 688c6eb Follow up to api-ref revision Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- api-ref/source/index.rst | 1 + ...trospection-api-v1-introspection-management.inc | 104 ++++++++++++++ .../source/introspection-api-v1-introspection.inc | 149 ++++----------------- api-ref/source/introspection-api-v1-rules.inc | 3 +- devstack/example.local.conf | 6 +- devstack/plugin.sh | 11 +- ironic_inspector/common/keystone.py | 5 + ironic_inspector/common/rpc.py | 4 +- ironic_inspector/common/service_utils.py | 6 - ironic_inspector/common/swift.py | 21 ++- ironic_inspector/conductor/manager.py | 40 ++++-- ironic_inspector/conf/__init__.py | 2 + ironic_inspector/conf/default.py | 15 +-- ironic_inspector/conf/opts.py | 1 + ironic_inspector/conf/processing.py | 7 - ironic_inspector/conf/service_catalog.py | 22 +++ ironic_inspector/main.py | 19 ++- ironic_inspector/node_cache.py | 15 +-- ironic_inspector/plugins/extra_hardware.py | 13 +- ironic_inspector/plugins/introspection_data.py | 10 -- ironic_inspector/process.py | 29 +++- ironic_inspector/pxe_filter/iptables.py | 4 +- ironic_inspector/test/functional.py | 8 ++ ironic_inspector/test/unit/test_iptables.py | 18 ++- ironic_inspector/test/unit/test_main.py | 24 +++- ironic_inspector/test/unit/test_manager.py | 50 ++++++- ironic_inspector/test/unit/test_node_cache.py | 5 + .../test/unit/test_plugins_extra_hardware.py | 37 +++++ .../test/unit/test_plugins_introspection_data.py | 19 --- ironic_inspector/test/unit/test_process.py | 28 ++-- ironic_inspector/test/unit/test_swift.py | 20 ++- ironic_inspector/test/unit/test_wsgi_service.py | 27 ---- lower-constraints.txt | 2 +- .../legacy/ironic-inspector-grenade-dsvm/run.yaml | 18 +-- ...find-node-input-filtering-e8ea529252e80739.yaml | 7 + ...ix-extra-hardware-process-c0635a972de37b0a.yaml | 6 + ...-pxe-filter-get-blacklist-2dde59d51c1d010f.yaml | 6 + releasenotes/notes/mdns-a5f4034257139e31.yaml | 6 + .../post-introspection-data-9cdd39a3de446e92.yaml | 7 + ...remove-deprecated-ssl-opt-f6e6bd841f2c1061.yaml | 5 + ...emove-store-data-location-e68462ff6ba257e0.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 +- releasenotes/source/stein.rst | 6 + requirements.txt | 4 +- test-requirements.txt | 3 +- tools/config-generator.conf | 3 +- zuul.d/ironic-inspector-jobs.yaml | 3 +- zuul.d/legacy-ironic-inspector-jobs.yaml | 4 +- 52 files changed, 511 insertions(+), 310 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c0f4edc..d750d33 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11 @@ futurist>=1.2.0 # Apache-2.0 -ironic-lib>=2.5.0 # Apache-2.0 +ironic-lib>=2.17.0 # Apache-2.0 @@ -13 +13 @@ jsonpath-rw<2.0,>=1.2.0 # Apache-2.0 -jsonschema<3.0.0,>=2.6.0 # MIT +jsonschema>=2.6.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 204e4ce..2507ea4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9 +9,2 @@ mock>=2.0.0 # BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD