We high-spiritedly announce the release of: octavia 4.1.4: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 4.1.4 ^^^^^ Security Issues *************** * If you are using the admin_or_owner-policy.yaml policy override file you should upgrade your API processes to include the unscoped token fix. The default policies are not affected by this issue. Bug Fixes ********* * Fixed an issue where members added to TLS-enabled pools would go to ERROR provisioning status. * Fixed an issue where some columns could not be used for sort keys in API list calls. * Fix operational status for disabled UDP listeners. The operating status of disabled UDP listeners is now OFFLINE instead of ONLINE, the behavior is now similary to the behavior of HTTP/HTTPS/TCP/... listeners. * Fixed an issue where listener "insert_headers" parameter was accepted for protocols that do not support header insertion. * Fix a potential AttributeError exception at init time in the housekeeping service when using python2 because of an issue with thread safety when calling strptime for the first time. * Fixed code that configured the CentOS/Red Hat amphora images to use the correct names for the network 'ifcfg' files for static routes and routing rules. It was using the wrong name for the routes file, and did not support IPv6 in either file. For more information, see https://storyboard.openstack.org/#!/story/2007051 * Fixed an issue where TLS-enabled pools would fail to provision. * Fixes an issue when using the admin_or_owner-policy.yaml policy override file and unscoped tokens. Changes in octavia 4.1.3..4.1.4 ------------------------------- 51f9c429 Remove unnecessary joinedload 1afe59e7 Fix pool delete race on load balancer cascade delete 119b01d9 Temporarily set octavia-v2-dsvm-py2-scenario non-voting 019f0155 Fix python2 AttributeError with strptime 4703077d Fix backend certificate file paths 39ae303c Fix AttributeError on TLS-enabled pool provisioning d061dca5 Ignore DELETED amphorae when performing certificate rotation ea507d29 Fix the amphora no-op driver 0a6011f7 Fixes API list handling of unscoped tokens 70163694 Fix operational status for disabled UDP listeners d4bb64e3 Add some details on enable_anti_affinity option e0916c77 Add missing log line for finishing amp operations 5fd3eb16 Update devstack plugin fdae4906 Set Grub timeout to 0 for fast boot times d85b18cb Fix API sort key for complex columns 6cf72ccb Increase the devstack secuirty group rules quota e818b427 Remove scenario bionic job from check 6b6f73dd Disable log offloading scenario tests e4031370 Fix accepting 'insert_headers' when unsupported fb1a594f Prioritize policy validation 22b1ff45 Fix the interface filenames for Red Hat amphora images Diffstat (except docs and test files) ------------------------------------- devstack/README.md | 2 +- devstack/plugin.sh | 11 +- devstack/settings | 2 +- diskimage-create/diskimage-create.sh | 3 + .../amphorae/backends/agent/api_server/osutils.py | 52 ++++-- .../amphorae/backends/utils/keepalivedlvs_query.py | 22 ++- octavia/amphorae/drivers/driver_base.py | 2 +- .../amphorae/drivers/haproxy/rest_api_driver.py | 22 +-- octavia/amphorae/drivers/noop_driver/driver.py | 8 +- octavia/api/common/pagination.py | 15 +- octavia/api/common/types.py | 8 + octavia/api/v2/controllers/base.py | 4 + octavia/api/v2/controllers/health_monitor.py | 16 +- octavia/api/v2/controllers/l7policy.py | 28 ++-- octavia/api/v2/controllers/l7rule.py | 31 ++-- octavia/api/v2/controllers/listener.py | 11 +- octavia/api/v2/controllers/member.py | 14 +- octavia/api/v2/controllers/pool.py | 33 ++-- octavia/common/base_taskflow.py | 3 + octavia/common/config.py | 3 +- octavia/common/constants.py | 6 + octavia/common/data_models.py | 9 +- octavia/common/jinja/lvs/templates/base.j2 | 4 + octavia/controller/worker/controller_worker.py | 7 +- octavia/db/repositories.py | 16 +- .../backends/agent/api_server/test_osutils.py | 175 ++++++++++++++++++++- .../backends/utils/test_keepalivedlvs_query.py | 31 ++++ .../drivers/haproxy/test_rest_api_driver_0_5.py | 40 ++--- .../drivers/haproxy/test_rest_api_driver_1_0.py | 25 +-- .../test_noop_amphoraloadbalancer_driver.py | 6 +- .../unit/common/jinja/lvs/test_lvs_jinja_cfg.py | 15 ++ ...d-member-tls-enabled-pool-cc77bfa320aaf659.yaml | 5 + .../notes/fix-api-sort-key-337f342d5cdce432.yaml | 5 + ...sable-udp-listener-status-3d34a5596e62da1c.yaml | 6 + ...header-insertion-mismatch-e3aeb5f5fee0348b.yaml | 5 + ...2-attributeerror-strptime-89a7350c55ac8818.yaml | 6 + ...ra-images-interface-files-5ba1be40c65940d9.yaml | 8 + ...enabled-pool-provisioning-e3adb987244a025a.yaml | 4 + .../get-all-unscoped-token-61da95856bc662e0.yaml | 10 ++ zuul.d/projects.yaml | 21 ++- 49 files changed, 1009 insertions(+), 164 deletions(-)