Open Stack

We contentedly announce the release of:

designate 12.1.0: DNS as a Service

This release is part of the wallaby stable release series.

The source is available from:

    https://opendev.org/openstack/designate

Download the package from:

    https://tarballs.openstack.org/designate/

Please report issues through:

    https://bugs.launchpad.net/designate/+bugs

For more details, please see below.

12.1.0
^^^^^^

Bug Fixes

* Fixed an issue that caused the recordset_records quota to not be
  enforced.

* Fixes bug 1934252 which ignored invalid denylist patterns. The fix
  entailed checking the pattern string via regular expression compiler
  and testing for zero length.

  Previously you could create blacklist/denylist using string that
  cannot be used either as a regex or as a zone name, for example:
  patterns = ['', "'#(*&^%$%$#@$']"

  In addition, the server will return a 400 BadRequest response to an
  invalid pattern.

   (https://bugs.launchpad.net/designate/+bug/1934252)

* Fixed an issue where new BIND9 pool instances may fail on zone
  update.

* Fixed an issue where set-quotas will always return the default
  quotas if it was called with a non-project scoped token and the all-
  projects flag was not set.

* Fixes support for keystone default roles and scoped tokens.

* Allows for a minimum TTL value of zero to be used instead of 1. As
  stated in RFC
  https://datatracker.ietf.org/doc/html/rfc2181#section-8.

   (https://bugs.launchpad.net/designate/+bug/1926429)

* CAA records now allow the use of *+* prefixed subadresses like
  *security+caa at example.net* within mail urls. (https://www.rfc-
  editor.org/rfc/rfc5233.html#section-1)

  See bug 1958533 for more information.

   (https://bugs.launchpad.net/designate/+bug/1958533)

* Fixed a bug where deleting a zone transfer request may fail when
  using a system scoped token.

Changes in designate 12.0.1..12.1.0
-----------------------------------

f2557474 Fix misleading release note for RBAC changes.
abe17707 Update zuul queue configuration
eacd478e Clarifies the zone import error message
790f0963 Fix incorrect 404 error on floating IP create
8af89be2 Fix duplicate zone when creating ptr records
1dd3b9de Cleanup scheduler
29a8069e Fixed incorrect message when zone import failed due to quota
60682cce Fix dns.query.tcp/udp not always handling ipv6 properly
e6dbc1fb Simplify create zone import implementation
12510551 Stop running grenade on Wallaby
a2ff328c Checks for invalid denylist regex patterns
1eb5cb41 Improve wording for validation error messages
b51c9724 Modernize PTR implementation in Central
899cd6e7 Fix designate-manage pool update bugs
53cf9b96 Allow email subadresses to be used within mail url of CAA records
b6915f00 Fix zone update when adding new Bind9 target to pool.
0f041e37 Add proper quota error messages
8562a683 Fix delete zone transfer request with scoped token
3e753554 Minimum TTL value allowed is zero
7217ce4e Fix a typo in the tsigkey policy file
ea85d917 Fix set-quotas for non-project scoped tokens
72267c8f Validate worker actions before retrying poll
643f4cde Fixed incorrect quota exception message
2e55c3e2 Improve quota API validations
5d348de3 Fix tox docs env to have the correct dependencies
0323c424 Allow TXT record over 255 characters if split
bbde15f5 Fix support for scoped tokens and default roles
7ed90faa Fix recordset_records quota enforcement
9e2618a2 Add fips jobs
e1ee648f Replace md5 for fips
914b55a6 Remove lower-constraint job from stable/wallaby


Diffstat (except docs and test files)
-------------------------------------

.zuul.yaml                                         |   39 +-
designate/api/middleware.py                        |    6 +-
designate/api/v2/controllers/quotas.py             |   10 +
.../api/v2/controllers/zones/tasks/exports.py      |    9 +-
designate/backend/agent.py                         |   40 +-
designate/backend/impl_bind9.py                    |   31 +-
designate/central/service.py                       | 1273 +++++++++++++-------
designate/common/constants.py                      |   28 +
designate/common/policies/base.py                  |   70 +-
designate/common/policies/blacklist.py             |   56 +-
designate/common/policies/context.py               |   50 +-
designate/common/policies/diagnostics.py           |   51 +-
designate/common/policies/pool.py                  |   56 +-
designate/common/policies/quota.py                 |   34 +-
designate/common/policies/record.py                |   16 +-
designate/common/policies/recordset.py             |  106 +-
designate/common/policies/service_status.py        |   24 +-
designate/common/policies/tenant.py                |   24 +-
designate/common/policies/tld.py                   |   40 +-
designate/common/policies/tsigkey.py               |   45 +-
designate/common/policies/zone.py                  |  129 +-
designate/common/policies/zone_export.py           |   64 +-
designate/common/policies/zone_import.py           |   42 +-
designate/common/policies/zone_transfer_accept.py  |   48 +-
designate/common/policies/zone_transfer_request.py |   52 +-
designate/context.py                               |    5 +-
designate/dnsutils.py                              |  152 ++-
designate/exceptions.py                            |   13 +
designate/mdns/notify.py                           |   24 +-
.../adapters/api_v2/zone_transfer_request.py       |   12 +-
designate/objects/blacklist.py                     |    4 +-
designate/objects/fields.py                        |   53 +-
designate/objects/quota.py                         |    8 +-
designate/objects/rrdata_txt.py                    |   38 +-
designate/objects/zone.py                          |    2 +-
designate/policy.py                                |   15 +-
designate/quota/base.py                            |   19 +-
designate/quota/impl_storage.py                    |    2 +-
designate/scheduler/base.py                        |   52 +-
designate/scheduler/filters/attribute_filter.py    |   20 +-
designate/scheduler/filters/fallback_filter.py     |    9 +-
designate/scheduler/filters/random_filter.py       |   14 +-
designate/storage/impl_sqlalchemy/__init__.py      |   21 +-
designate/worker/README.md                         |    2 +-
designate/worker/tasks/base.py                     |   48 +
designate/worker/tasks/zone.py                     |   38 +-
designate/worker/utils.py                          |   82 --
lower-constraints.txt                              |    2 +-
playbooks/enable-fips.yaml                         |    3 +
...x-recordset-records-quota-76ed3095dd2afbbe.yaml |    4 +
...atterns-not-being-checked-ec1f1316ccc6cb1d.yaml |   16 +
...x-update-zone-create-zone-ada1fd81de479492.yaml |    4 +
...non-project-scoped-tokens-ffe3082db3dbb55b.yaml |    6 +
.../Support-scoped-tokens-6b7d6052a258cd11.yaml    |    4 +
...429-allow-ttl-min-of-zero-688f7c2cf095d89d.yaml |    8 +
...33-allow-caa-mail-subaddr-d02cdc46bbb118ad.yaml |   10 +
...sfer-request-scoped-token-fc9d3be407e1a50a.yaml |    5 +
requirements.txt                                   |    2 +-
tox.ini                                            |    1 +
81 files changed, 2773 insertions(+), 1454 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 26c39be3..6f622631 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -23 +23 @@ oslo.upgradecheck>=1.3.0
-oslo.utils>=4.5.0 # Apache-2.0
+oslo.utils>=4.7.0 # Apache-2.0