Open Stack

We are stoked to announce the release of:

manila 14.0.1: Shared Storage for OpenStack

This release is part of the yoga stable release series.

The source is available from:

    https://opendev.org/openstack/manila

Download the package from:

    https://tarballs.openstack.org/manila/

Please report issues through:

    https://bugs.launchpad.net/manila/+bugs

For more details, please see below.

14.0.1
^^^^^^


Security Issues
***************

* The SSH utility module no longer logs usernames and passwords as
  debug information.


Bug Fixes
*********

* The GET /shares/{share_id} API now responds with HTTP 404 (Not
  Found) for inaccessible resources. See bug 1901210
  (https://launchpad.net/bugs/1901210) for further information.

* Adds a check when associating a security service to a share
  network, so that both resources must have the same project_id. If
  not, HTTP Bad Request is raised.

* Fixed an issue that caused Manila to return all projects' share
  replicas even when the user was not an administrator. Now, when the
  user is not an administrator, only the replicas in the project
  perspective are going to be displayed. For more details, please
  refer to Launchpad Bug #1922243
  (https://bugs.launchpad.net/manila/+bug/1922243)

* Fix the bug of TypeError with JsonFilter. If the scheduler_hints
  value is None, the TypeError exception may occur when creating share
  with JsonFilter. The TypeError exception is added to solve this
  problem.

* Bug #1964696 (https://bugs.launchpad.net/manila/+bug/1964696): Fix
  calling the GaneshaNASHelper *update_access* method from the gluster
  GaneshaNFSHelper with the wrong signature.

* Fixes regression for show_metadata and the response dictionary.
  The correct response is: {meta: {'key': 'value}}.

* The CephFS driver no longer fails to delete access rules that were
  never applied or were missing from the back end storage. See LP
  #1971530 (https://launchpad.net/bugs/1971530) for more details.

* During share network create API, if either share network or share
  network subnet db creation fails, manila raises an exception.
  However quota is not rolled back and its usable only after quota
  reservations timed out (waiting conf.reservation_expire seconds).
  Fixed by introducing immediate quota rollback in case any db create
  api fails.

* Goodness_function expects integer or float else raise
  parseException. This causes example such as "(share.share_proto ==
  'CIFS') ? 100 : 50" to fail during evaluation. Fix it by adding
  support of string evalution.

* Drivers using DHSS True mode has the server creation phase. This
  phase tries to reuse one of available share servers, however, the
  Manila code is considering all share servers states as available,
  rather than considering only the active or creating ones. Now, only
  the correct share servers are passed to drivers as available to be
  reused.

* Bug #1983125 (https://bugs.launchpad.net/manila/+bug/1983125):
  Fixed the remaining reference to a deprecated quota option in code,
  which was causing a warning message.

* Infinidat Driver bug #1986653
  (https://bugs.launchpad.net/manila/+bug/1986653): Fixed Infinidat
  driver to use TLS/SSL communication between the Manila share service
  and the storage backend. Admin can set *True* or *False* for the
  *infinidat_use_ssl* and *infinidat_suppress_ssl_warnings* options in
  the driver section of manila.conf to enable or disable these
  features.

* Deployers now can specify "[glance]endpoint_type" configuration
  option (defaults to "publicURL" for backward compatibility) so that
  Manila uses Glance endpoint other than the public one (see bug
  1991396 (https://bugs.launchpad.net/manila/+bug/1991396)).

* Bug 1991776 (https://launchpad.net/bugs/1991776) was fixed within
  the CephFS driver. The driver no longer emits repeated warnings
  concerning supported IP versions when using the NFS protocol.

* Fix creating from snapshot operation with server limits. If the
  new share and parent are in the same host, the share server must be
  resued, so the limits must be ignored. For more details, please
  refer to launchpad bug #1918845
  (https://bugs.launchpad.net/manila/+bug/1918845)

* Some neutron integrations might not have the network type, so the
  neutron network plugin is fixed by taking that scenario in
  consideration. Launchpad bug  #1987315
  (https://bugs.launchpad.ne/manila/+bug/1987315) for more details.

Changes in manila 14.0.0..14.0.1
--------------------------------

fc566dd9 [Infinidat] add support for TLS/SSL communication
74928a3a Fix misuse of assertTrue
ba1fa652 Fix Create From Snapshot with Server Limits
f2111d54 Set configured_ip_versions fact in cephfs driver
9c5adb0b Fix neutron plugin get network_type
0994740a Allow setting endpoint_type for glance
dfb4e7ee [RBAC] Return 404 if share is inaccessible
1c021168 Fix DriverFilter/GoodnessWeigher string evaluations
60fd8ab6 Fix available share servers to be reused
e4c8c723 Fix reference to deprecated quota_driver option
48f4bf6a Stop logging sensitive login information
9b89673e Add FIPS testing job
a7a053c5 Define queues at project level
123db367 Use defined project config of manila-tempest-plugin
96fd391a Fix manila plugin.sh set backend_availability_zone
2bb2de55 Update image URL and image name
4179dfa4 Rollback quota when share network create API fails.
a607ed8e [Native CephFS] Don't fail to deny missing rules
886c2258 Check project permissions for share replicas
3b9477c4 Drop lower-constraints.txt and its testing
6b644fa8 [CI] Install dependencies for docs target
45b55e85 Fix the bug of TypeError with JsonFilter
c37a44df Fix GaneshaNASHelper update_access signature
95099bdf Add validation to share network
8817389a Shares Metadata follow-up patch
22fcb45a fix typo in reno of bug-1946990
f449ebbf Fix Dummy driver fails to get subnet_allocations
df8d0ed3 Update TOX_CONSTRAINTS_FILE for stable/yoga
9fed4ce3 Update .gitreview for stable/yoga


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |   1 +
devstack/plugin.sh                                 |   9 +-
devstack/settings                                  |   4 +-
...shared-file-systems-share-server-management.rst |   6 +
lower-constraints.txt                              | 135 ---------------------
manila/api/v2/metadata.py                          |   2 +-
manila/api/v2/share_networks.py                    |   6 +-
manila/db/api.py                                   |  13 +-
manila/db/sqlalchemy/api.py                        |  64 +++++++---
manila/image/glance.py                             |   4 +
manila/network/neutron/neutron_network_plugin.py   |   6 +-
manila/quota.py                                    |   2 +-
manila/scheduler/evaluator/evaluator.py            |   9 +-
manila/scheduler/filters/json.py                   |   4 +-
manila/share/api.py                                |  15 +--
manila/share/drivers/cephfs/driver.py              |  13 +-
manila/share/drivers/glusterfs/__init__.py         |  10 ++
manila/share/drivers/infinidat/infinibox.py        |  37 ++++--
manila/share/manager.py                            |  11 +-
.../share/drivers/infinidat/test_infinidat.py      |  30 ++++-
.../netapp/dataontap/cluster_mode/test_lib_base.py |   5 +-
manila/utils.py                                    |   6 +-
...if-share-access-forbidden-02ca9a9552ad3e15.yaml |   6 +
...lidation-to-share-network-94571f35cb39c815.yaml |   5 +
...ject-only-replica-listing-f5f2b95ef14c3ded.yaml |   8 ++
...-fix-ignored-neutron-opts-c438a089de9e2066.yaml |   2 +-
...2-fix-type-error-jsonfilter-fc7f87c288cc69.yaml |   5 +
...haNFSHelper-update_access-6124a79e34e63030.yaml |   7 ++
...69-fix-share-metadata-api-c31aca75bac66501.yaml |   7 ++
...cephfs-native-deny-access-facf37fa7053c30d.yaml |   6 +
...hare-network-create-fails-628312233bf0c179.yaml |   8 ++
...filter-string-evaluations-3886a68d4d7fa3a1.yaml |   6 +
...logging-login-information-b726d05ee805df27.yaml |   5 +
...ix-find-available-servers-2dec3a4f3f0ef7e4.yaml |   8 ++
.../notes/bug-1983125-cb9118c3fa26a6f2.yaml        |   6 +
...infinidat-add-ssl-options-ee91f152bbd28080.yaml |   9 ++
...-add-glance-endpoint-type-151777f255e423a3.yaml |   7 ++
...fs-configured-ip-versions-fd87976fdb848e8c.yaml |   6 +
...rom-snapshot-server-limit-7b575c7cbf081efc.yaml |   7 ++
...n-plugin-invalid-key-dict-68c3d6bcbf2f19f0.yaml |   7 ++
requirements.txt                                   |   4 +
tox.ini                                            |  18 ++-
zuul.d/project.yaml                                |  14 +--
55 files changed, 552 insertions(+), 289 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 55dab219..dac7e8bd 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -0,0 +1,4 @@
+# Requirements lower bounds listed here are our best effort to keep them up to
+# date but we do not test them so no guarantee of having them all correct. If
+# you find any incorrect lower bounds, let us know or propose a fix.
+