Rocky Series Release Notes

14.1.0-9

보안 이슈

  • An open redirect has been fixed, that could redirect users to arbitrary addresses from certain views by specifying a “next” parameter in the URL. Now the redirect will only work if the target URL is in the same domain, and uses the same protocol.

14.1.0

업그레이드 노트

  • publicize_image policy now has the same name both for image create and edit features and corresponds to the same one in Glance. If you changed the policy name manually to get feature working you have to rollback your changes before Horizon update.

버그 수정

  • [bug:1859041] image:publicize_image policy is renamed to publicize_image to be the same as Glance has.

14.0.4

버그 수정

  • [bug:1840465] Fixed a bug where listing security groups did not work if one or more security groups had no rules in them.

14.0.2

버그 수정

  • Fixed a bug where non-admin users would be shown the “Change Password” button for users listed under the Identity panel.

  • [bug:1544703] Add a new optional WEBSSO_KEYSTONE_URL property to facilitate WEBSSO deployments where network segmentation is used per security requirement. In this case, the controllers are not reachable from public network. Therefore, user’s browser will not be able to access OPENSTACK_KEYSTONE_URL if it is set to the internal endpoint.

14.0.0

새로운 기능

  • 서버 그룹과 서버 그룹 멤버 할당량 관리가 추가되었습니다. 사용자는 자신의 프로젝트 정보를 생성하거나 수정할 때 값을 지정할 수 있고, 자신의 기본 할당량을 관리자->시스템->기본값 페이지에서 변경할 수 있습니다.

  • DEFAULT_SERVICE_REGIONS는 이제 ‘*’를 대체 서비스 영역으로 사용하는 키 또는 다른 키가 설정되지 않은 경우 기본 영역으로 사용할 수 있습니다.

  • [blueprint ng-server-groups] This blueprint add angular server groups panel below the Project->Compute panel group. The panel turns on if Nova API extension ‘ServerGroups’ is available. It displays information about server groups. The details page for each server group also shows information about instances of that server group. Supported actions: create, delete.

  • [blueprint ng-users] AngularJS-based Users panel is added. The features in the legacy panel are almost implemented. The Users panel now may be configured to use either the legacy or AngularJS-based codes. The ANGULAR_FEATURES setting now allows for a users_panel. If set to True, then the AngularJS-Based Users panel will be used, while the Django version will be used if set to False. Default value for users_panel is False, due to lack of extensional buttons, i.e. for showing password and adding project, see also [bug/1733271].

  • 유동 IP는 서버로부터 해제되었을 때 릴리즈 될 수 있습니다. “유동 IP 연결 해제” 양식에서 “유동 IP 해제” 체크박스의 사용이 가능합니다.

  • [bug:1755339] (for horizon plugin developers) A new plugin option ADD_XSTATIC_MODULES is now available and horizon plugins can add extra xstatic modules via the horizon plugin “enabled” file. For more detail, see ADD_XSTATIC_MODULES description in Pluggable Panels and Groups in horizon documentation.

  • Security groups now can be specified when creating a port. When the port security is enabled, the security groups tab will be displayed in create port workflow.

  • 인스턴스 상세 페이지에 “인터페이스” 탭이 추가되었습니다. 이 새로운 탭은 인스턴스에 연결되어 있는 포트 목록을 보여줍니다. 이제 사용자는 손쉽게 인스턴스의 포트 리스트에 접근할 수 있고 포트 단위의 보안그룹을 편집할 수 있습니다. 추가적으로, “포트 보안 그룹 편집” 메뉴는 인스턴스 테이블의 동작으로서 추가되었습니다.

  • Support has been added to set and display DNS attributes for Floating IPs (DNS Name and DNS Domain). These attributes are only available if Neutron has the dns-integration extension enabled.

  • [blueprint:cinder-generic-volume-groups] Cinder generic groups is now supported. Consistency groups views will be disabled if the generic group support is available. User is able to create generic groups and snapshots now.

    Note that operators need to create at least one group type so that users can use the generic group feature. Otherwise, it might be better to disable the group and group snapshot panels by the horizon plugin enabled files.

  • [bug:1690433] “Get me a network” feature provided by nova and neutron is now exposed in the launch server form. This feature will sets up a neutron network topology for a project if there is no network in the project. It simplifies the workflow when launching a server. In the horizon support, when there is no network which can be used for a server, a dummy network named ‘auto_allocated_network’ is shown in the network choices. The feature is disabled by default because it requires preparations in your neutron deployment. To enable it, set enable_auto_allocated_network in OPENSTACK_NEUTRON_NETWORK to True.

  • [bug:1746754] (for horizon plugin developers) Django tab is now pluggable and horizon plugins can add extra tab(s) to an existing tab provided by horizon or other horizon plugins. Extra tabs can be added via the horizon plugin “enabled” file. For more detail, see EXTRA_TABS description in Pluggable Panels and Groups of the horizon documentation.

  • Quota information panel and forms are now tabbified per back-end service.

    • 관리자 -> 기본값 -> 기본 할당량 테이블

    • 관리자 -> 기본값 -> 기본 양식 업데이트

    • Identity -> Projects -> Modify Quotas form

  • [blueprint:horizon-plugin-tab-for-info-and-quotas] (for horizon plugin developers) Django workflow step is now pluggable and horizon plugins can add extra step(s) to an existing workflow provided by horizon or other horizon plugins. Extra steps can be added via the horizon plugin “enabled” file. For more detail, see EXTRA_TABS description in Pluggable Panels and Groups of the horizon documentation.

  • [bug:1742332] Description for security group rule is supported.

  • Swift 오브젝트 복사가 행 작업의 하나로서 추가되었습니다. 대상 컨테이너는 미리 준비되어야 합니다. 기존 오브젝트에 덮어씌우기를 방지하기 위해, 지정된 대상 오브젝트가 존재할 경우 복사할 수 없습니다.

알려진 이슈

  • [bug/1733271] Users panel has Angularized, but buttons showing passwords is not implemented, i.e. for Password, Confirm Password and Admin password. Also, button adding project for selection of Primary Project is not implemented.

업그레이드 노트

  • [bug:1772345] DEFAULT_SERVICE_REGIONS no longer overrides the cookie value from services_region. This fixes the UX where a user controlled value keeps being overridden by a setting and changes DEFAULT_SERVICE_REGIONS to act as a default (as the name implies) per endpoint if the cookie is not set rather than an override. The cookie will still be overridden when it is for a region not present in the user’s current catalog, so this will still handle the original multi-keystone case that requried the introduction of DEFAULT_SERVICE_REGIONS.

  • simple_ip_management setting in HORIZON_CONFIG was dropped. This actually has no meaning after nova-network support was dropped in Pike. If you use this setting to hide Disassociate Floating IP button in the instance table, use the policy file instead.

  • Add OPENSTACK_KEYSTONE_BACKEND manually into REST_API_REQUIRED_SETTINGS on local_settings.py, if your deployment uses Angularized identity panels and needs to enable can_edit_* settings in OPENSTACK_KEYSTONE_BACKEND.

  • The deprecated feature of “Edit Flavor” was deleted Historically, Horizon has provided the ability to edit Flavors by deleting and creating a new one with the same information. This is not supported in the Nova API and causes unexpected issues and breakages.

  • Django 2.0 지원은 실험적으로 추가되었습니다. Django 1.10 또는 이전 버전에 대한 지원이 중단되었습니다. Django 1.11 (LTS)은 여전히 지원되는 Django의 주요 버전입니다.

  • The following deprecated settings have been dropped.

    • HORIZON_IMAGES_ALLOW_UPLOAD (deprecated in Newton): Use HORIZON_IMAGES_UPLOAD_MODE instead.

    • CUSTOM_THEME_PATH and DEFAULT_THEME_PATH (both deprecated in Mitaka): Use AVAILABLE_THEMES instead.

    • OPENSTACK_TOKEN_HASH_ENABLED (deprecated in Mitaka): PKI tokens currently work with hashing (before Ocata) and Keystone already dropped PKI token support in Ocata.

    • TOKEN_DELETION_DISABLED (deprecated in Ocata): It was not marked as deprecated in the horizon documentation, but this had no effect since Ocata release.

  • The “Quotas” tab in the “Create Project” form was split out into a new separate form “Modify Quotas”. Quotas for a new project need to be configured from “Modify Quotas” action after creating a new project.

  • Remove deprecated Cinder API V1 support. Cinder V1 API was deprecated for a while and removed in Queens release. If you need to enable Cinder support you should update the OPENSTACK_API_VERSIONS configuration option to use Cinder V2 or V3 API.

사용하지 않는 기능

  • [bug:1763204] Use of this ‘djano.wsgi’ file has been deprecated since the Rocky release in favor of ‘wsgi.py’ in the ‘openstack_dashboard’ module. This file is a legacy naming from before Django 1.4 and an importable ‘wsgi.py’ is now the default. This file will be removed in the T release cycle.

버그 수정

  • 로그인시 /identity 탭 admin 사용자로 리디렉션하지 마십시오. 이제`user_home` 설정 옵션은 모든 사용자에게 동일한 방식으로 작동합니다. [bug / 1778006]

  • [bug:1746706] Fixed a bug the navigation menu and breadcrumb list are not reproduced properly when reloading or opening Angular-based detail page directly.

  • [bug:1779268] Supported can_edit_* settings in Angularized identity panels. To enable this settings in Angularized identity panels, add OPENSTACK_KEYSTONE_BACKEND into REST_API_REQUIRED_SETTINGS on local_settings.py. For more detail, see REST_API_REQUIRED_SETTINGS in horizon settings documentation.

  • Angularized 패널 [: bug :1779879]에서 이미지 설명 필드가 변경 될 때 오류를 수정하세요.

기타 기능

  • 더 이상 사용되지 않는 함수 fix_auth_url_version이 openstack_auth 라이브러리에서 제거되었습니다. 대신에 fix_auth_url_version_prefix 함수를 사용해야합니다.

  • UpdateAction is deprecated in Newton and removed now. You should not use inline edit functionality in your plugins anymore.