Open Stack

We enthusiastically announce the release of:

manila 13.0.4: Shared Storage for OpenStack

This release is part of the xena stable release series.

The source is available from:

    https://opendev.org/openstack/manila

Download the package from:

    https://tarballs.openstack.org/manila/

Please report issues through:

    https://bugs.launchpad.net/manila/+bugs

For more details, please see below.

13.0.4
^^^^^^


Security Issues
***************

* The SSH utility module no longer logs usernames and passwords as
  debug information.


Bug Fixes
*********

* The GET /shares/{share_id} API now responds with HTTP 404 (Not
  Found) for inaccessible resources. See bug 1901210
  (https://launchpad.net/bugs/1901210) for further information.

* NetApp OnTap driver Bug #1915237
  (https://bugs.launchpad.net/manila/+bug/1915237): Fixed encryption
  compatibility check on manila share migrate.

* Adds a check when associating a security service to a share
  network, so that both resources must have the same project_id. If
  not, HTTP Bad Request is raised.

* Fixed an issue that caused Manila to return all projects' share
  replicas even when the user was not an administrator. Now, when the
  user is not an administrator, only the replicas in the project
  perspective are going to be displayed. For more details, please
  refer to Launchpad Bug #1922243
  (https://bugs.launchpad.net/manila/+bug/1922243)

* The CephFS driver no longer fails to delete access rules that were
  never applied or were missing from the back end storage. See LP
  #1971530 (https://launchpad.net/bugs/1971530) for more details.

* During share network create API, if either share network or share
  network subnet db creation fails, manila raises an exception.
  However quota is not rolled back and its usable only after quota
  reservations timed out (waiting conf.reservation_expire seconds).
  Fixed by introducing immediate quota rollback in case any db create
  api fails.

* Goodness_function expects integer or float else raise
  parseException. This causes example such as "(share.share_proto ==
  'CIFS') ? 100 : 50" to fail during evaluation. Fix it by adding
  support of string evalution.

* Deployers now can specify "[glance]endpoint_type" configuration
  option (defaults to "publicURL" for backward compatibility) so that
  Manila uses Glance endpoint other than the public one (see bug
  1991396 (https://bugs.launchpad.net/manila/+bug/1991396)).

Changes in manila 13.0.3..13.0.4
--------------------------------

d6a49cd5 Fix DriverFilter/GoodnessWeigher string evaluations
7dd5499a Allow setting endpoint_type for glance
2f335893 Fix manila plugin.sh set backend_availability_zone
5b8b7b19 [RBAC] Return 404 if share is inaccessible
b7190fe3 Stop logging sensitive login information
85d61017 Add FIPS testing job
6cc760e0 Check project permissions for share replicas
65fe7929 Add validation to share network
63c37579 Force disk wipe when running lvcreate
b06cc4b8 Define queues at project level
3e4d1292 Use defined project config of manila-tempest-plugin
27d79965 NetApp OnTap: Fix compatibility check for share migrate
696469e8 Rollback quota when share network create API fails.
8805f4f3 [Native CephFS] Don't fail to deny missing rules
b02b96d8 Drop lower-constraints.txt and its testing
49f50c9f [CI] Install dependencies for docs target


Diffstat (except docs and test files)
-------------------------------------

devstack/plugin.sh                                 |   9 +-
lower-constraints.txt                              | 135 ---------------------
manila/api/v2/share_networks.py                    |   6 +-
manila/db/api.py                                   |   4 +-
manila/db/sqlalchemy/api.py                        |  16 ++-
manila/image/glance.py                             |   4 +
manila/scheduler/evaluator/evaluator.py            |   9 +-
manila/share/api.py                                |   5 +-
manila/share/drivers/cephfs/driver.py              |  11 +-
manila/share/drivers/lvm.py                        |   6 +-
.../netapp/dataontap/client/client_cmode.py        |  10 +-
.../netapp/dataontap/client/test_client_cmode.py   |  23 +++-
manila/utils.py                                    |   6 +-
...if-share-access-forbidden-02ca9a9552ad3e15.yaml |   6 +
...-encrypt-check-on-migrate-1e39bd7f19651972.yaml |   6 +
...lidation-to-share-network-94571f35cb39c815.yaml |   5 +
...ject-only-replica-listing-f5f2b95ef14c3ded.yaml |   8 ++
...cephfs-native-deny-access-facf37fa7053c30d.yaml |   6 +
...hare-network-create-fails-628312233bf0c179.yaml |   8 ++
...filter-string-evaluations-3886a68d4d7fa3a1.yaml |   6 +
...logging-login-information-b726d05ee805df27.yaml |   5 +
...-add-glance-endpoint-type-151777f255e423a3.yaml |   7 ++
requirements.txt                                   |   4 +
tox.ini                                            |  10 +-
zuul.d/project.yaml                                |  14 +--
33 files changed, 269 insertions(+), 201 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index c37b4a76..09fbd316 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -0,0 +1,4 @@
+# Requirements lower bounds listed here are our best effort to keep them up to
+# date but we do not test them so no guarantee of having them all correct. If
+# you find any incorrect lower bounds, let us know or propose a fix.
+