Commit Graph

584 Commits

Author SHA1 Message Date
Zuul 8c375572de Merge "reno: Update master for unmaintained/xena" 2024-03-12 14:41:40 +00:00
Zuul 8ba9685498 Merge "reno: Update master for unmaintained/wallaby" 2024-03-12 14:41:39 +00:00
Zuul 7b0cce9988 Merge "reno: Update master for unmaintained/victoria" 2024-03-12 13:12:45 +00:00
OpenStack Release Bot 6ee125a018 Update master for stable/2024.1
Add file to the reno documentation build to show release notes for
stable/2024.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.1.

Sem-Ver: feature
Change-Id: Ib981fcfb22708b3873a762703f177a1c99898b49
2024-03-08 14:22:55 +00:00
OpenStack Release Bot 66b1281851 reno: Update master for unmaintained/xena
Update the xena release notes configuration to build from
unmaintained/xena.

Change-Id: I38f2a5550741b74a723d1af749dcab62b46d3520
2024-03-07 14:26:21 +00:00
OpenStack Release Bot ec8de0ecfd reno: Update master for unmaintained/wallaby
Update the wallaby release notes configuration to build from
unmaintained/wallaby.

Change-Id: I0d8e8d833c89e99aed82e3f0f10fe982177ec2c8
2024-03-07 14:22:02 +00:00
OpenStack Release Bot 3187cd60d0 reno: Update master for unmaintained/victoria
Update the victoria release notes configuration to build from
unmaintained/victoria.

Change-Id: I70390dd109ced7cdf07dd5ff14d45490c1b35c13
2024-03-07 14:16:40 +00:00
Zuul 531f39e63c Merge "healthcheck: Ignore proxied requests" 2024-02-20 11:56:54 +00:00
OpenStack Release Bot 35a46b382b reno: Update master for unmaintained/yoga
Update the yoga release notes configuration to build from
unmaintained/yoga.

Change-Id: I2b8e6268494bb26aaf86a35e054aeeecd7834a2f
2024-02-06 14:28:41 +00:00
Takashi Kajinami b880f0b121 Bump hacking
hacking 3.0.x is too old.

Change-Id: I32bf40a31e41284c5fcd0432572576e7debca6dd
2024-01-26 01:26:58 +09:00
Ghanshyam Mann 58b43501cf Update python classifier in setup.cfg
As per the current release tested runtime, we test
python version from 3.8 to 3.11 so updating the
same in python classifier in setup.cfg

Change-Id: I1dfb59aaccbc50deda08863007536c46f4445a44
2024-01-11 16:18:56 -08:00
Zuul fdd7e462e5 Merge "Remove deprecated SSLMiddleware" 2023-12-19 19:02:07 +00:00
Zuul 1629536472 Merge "Remove oslo namespace package (again)" 2023-12-14 11:54:48 +00:00
Takashi Kajinami 25f91a7b19 healthcheck: Ignore proxied requests
... so that operators can hide the healthcheck endpoint, which is
usually deployed without any auth mechanism, from users accessing
APIs through front-end load balancer or reverse proxy.

Note that this behavior is optional and can be enabled by
the new option.

Change-Id: Ib87da1b3d231dea44939686af544db101d68e179
2023-11-17 05:42:43 +00:00
Zuul 81bd9ac7bb Merge "healthcheck: Limit source IP range" 2023-11-16 18:10:03 +00:00
Takashi Kajinami 67b9c23f16 Remove deprecated SSLMiddleware
It was deprecated 8 years ago[1].

[1] 67ec676980

Change-Id: Icf5ea03ec56cdb3a42345f1be32a7a9926351a82
2023-11-14 22:55:15 +09:00
Takashi Kajinami 77b69a37ce Remove oslo namespace package (again)
The oslo namespace package was removed once[1] but was readded[2]
because of some problems at the time because nova required the old
namespace until liberty release.

Time has passed and now we should be ready to re-remove it.

[1] 18d7b08490
[2] ce6ca04280

Change-Id: If2163eb1229448dd4bf765978b6f4cc5cbdd0a25
2023-11-14 22:51:34 +09:00
OpenStack Proposal Bot 5ee9168a1d Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Ia4e3c5ded3c2e711d491a531127577b993e087ba
2023-09-21 05:31:45 +00:00
OpenStack Release Bot e122c1e80b Update master for stable/2023.2
Add file to the reno documentation build to show release notes for
stable/2023.2.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.2.

Sem-Ver: feature
Change-Id: Ibd04af962cf169e169b1c14af5317c118d65a5f0
2023-09-07 09:37:32 +00:00
Zuul 4ba32edec7 Merge "Use upper-constraint in doc generation" 2023-08-28 14:25:11 +00:00
Takashi Kajinami 207541f93c Use upper-constraint in doc generation
Currently doc jobs are broken because the latest sphinx 7.2.0 is not
compatible with the latest release of openstackdocstheme.

This updates the docs/releasenotes target to use the global upper
constraints to avoid that issue.

Change-Id: I8aeae9a380c4560c52bc13abd1745d69845071a0
2023-08-21 09:41:36 +09:00
OpenStack Proposal Bot 4153ffef53 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: Ic894b6117cdb9d16ee10073d47c469ef7594cf23
2023-06-28 04:09:45 +00:00
Zuul 17531fe654 Merge "Bump bandit and make oslo.middleware compatible with latest rules" 2023-06-27 13:44:33 +00:00
Jake Yip ad9c2042cf fix spelling
Change-Id: I5d42c30498b3e38d9ff979aea02232a13c5aa261
2023-06-16 17:26:33 +10:00
Ghanshyam 2eb512cc3b Revert "Moves supported python runtimes from version 3.8 to 3.10"
This reverts commit 089fa3659e.

Keeping Python 3.10 in setup.cfg classifier and zuul.yaml changes.

Reason for revert:

Needed-By: https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/882175

TC has been discussing about re-adding the python 3.8
testing in current master 2023.2 release testing.

- https://meetings.opendev.org/meetings/tc/2023/tc.2023-04-25-18.00.log.html#l-191
- https://lists.openstack.org/pipermail/openstack-discuss/2023-April/033469.html

While governance changes are under review, TC agreed to add py3.8 testing
so that we do not see more project/lib dropping python 3.8 and make them
uninstalable on python 3.8

- https://meetings.opendev.org/meetings/tc/2023/tc.2023-05-02-18.00.log.html#l-17
- https://review.opendev.org/c/openstack/governance/+/882165

Also adding py3.8 testing back in job https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/882175

Change-Id: I3a9f8ee9ac1fabbc83680051d5930e956ba113f8
2023-05-05 18:57:05 +00:00
Hervé Beraud 089fa3659e Moves supported python runtimes from version 3.8 to 3.10
Within 2023.2 python version 3.9 and 3.10 are the
supported python runtimes [1].
[1] https: //review.opendev.org/c/openstack/governance/+/872232

Change-Id: I45f418ea67bd24a91ec0ca1989b7c54b234a2242
2023-04-10 12:59:22 +09:00
Hervé Beraud 170e35a5b9 Bump bandit and make oslo.middleware compatible with latest rules
Apply a timeout to requests calls to avoid uncontrolled
resource consumption (CWE-400) [1].

However we should notice bandit didn't warned here.
It didn't detected the request without the configured timeout.

[1] https://cwe.mitre.org/data/definitions/400.html

Change-Id: I6a4701592e0b245b798fbe916f78a5e8114e92ef
2023-04-10 02:01:34 +00:00
OpenStack Release Bot 05be604d8b Update master for stable/2023.1
Add file to the reno documentation build to show release notes for
stable/2023.1.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.1.

Sem-Ver: feature
Change-Id: Ia920d3d542e54d26557c7ae6f4d503fdd365d787
2023-02-24 15:20:58 +00:00
Hervé Beraud 7725ac941f Fix issues related to tox4
Change-Id: I303f753e47eade9d5de9dad0b3d9cc303f6a0540
2023-02-17 16:31:41 +01:00
OpenStack Release Bot c9bd063ebc Add Python3 antelope unit tests
This is an automatically generated patch to ensure unit testing
is in place for all the of the tested runtimes for antelope.

See also the PTI in governance [1].

[1]: https://governance.openstack.org/tc/reference/project-testing-interface.html

Change-Id: I57d4d50a8bcd2a9a0a9af4fe37a184aa1085b75c
2022-09-09 09:17:31 +00:00
OpenStack Release Bot 1901b622c3 Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.

Sem-Ver: feature
Change-Id: I13554b310a209c3d86ba531c7b4ec32188a19968
2022-09-09 09:17:29 +00:00
Hervé Beraud 51e1882de1 Drop python3.6/3.7 support in testing runtime
In Zed cycle testing runtime, we are targetting to drop the
python 3.6/3.7 support, project started adding python 3.8 as minimum,

example nova:
- 56b5aed08c/setup.cfg (L13)

Change-Id: Ia82c3c5e8d16fa9d111430a57588e49ab512775a
2022-05-05 16:08:14 +02:00
Pierre Riteau 7e0c046e03 Fix formatting of release list
Change-Id: Ia5e029dbbc2416e212da611f9c7a28db7d76a6cd
2022-03-22 12:28:45 +00:00
OpenStack Release Bot 2fa3e52449 Add Python3 zed unit tests
This is an automatically generated patch to ensure unit testing
is in place for all the of the tested runtimes for zed.

See also the PTI in governance [1].

[1]: https://governance.openstack.org/tc/reference/project-testing-interface.html

Change-Id: Ic937ee0baf0a1d2c6cb7a8a42ce0eec0191a1661
2022-03-04 17:18:53 +00:00
OpenStack Release Bot 725aeaa776 Update master for stable/yoga
Add file to the reno documentation build to show release notes for
stable/yoga.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/yoga.

Sem-Ver: feature
Change-Id: Ib011e6b4377fdfbd1e74fcd28ef3d57298dd4463
2022-03-04 17:18:52 +00:00
dengzhaosen 2f72b30cba Update python testing classifier
Yoga testing runtime[1] has been updated to add py39
testing as voting. Unit tests update are handled by the
job template change in openstack-zuul-job

- https://review.opendev.org/c/openstack/openstack-zuul-jobs/+/820286

this commit updates the classifier in setup.cfg file.

[1] https://governance.openstack.org/tc/reference/runtimes/yoga.html

Change-Id: I073da11fd075685aa57f95b8eead893dee79143c
2021-12-21 17:09:13 +08:00
Zuul b75a7184d9 Merge "Add paste.filter_factory entrypoint for basic auth middleware" 2021-10-26 16:20:36 +00:00
Zuul 02d9a22267 Merge "Add oslo.config.opts entrypoint for basic auth middleware" 2021-10-25 14:26:25 +00:00
Takashi Kajinami 8e47bfc77c Add paste.filter_factory entrypoint for basic auth middleware
... so that the middleware can be loaded using the python egg instead
of the direct path.

Closes-Bug: #1940738
Change-Id: I57408766c120d2c9784f3886457e91ee7d30de1b
2021-10-25 22:06:32 +09:00
OpenStack Release Bot c2e6b895a6 Add Python3 yoga unit tests
This is an automatically generated patch to ensure unit testing
is in place for all the of the tested runtimes for yoga.

See also the PTI in governance [1].

[1]: https://governance.openstack.org/tc/reference/project-testing-interface.html

Change-Id: I05945c971c59dce71a733de6e58c416a278c615c
2021-09-10 14:35:50 +00:00
OpenStack Release Bot f8749d2842 Update master for stable/xena
Add file to the reno documentation build to show release notes for
stable/xena.

Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/xena.

Sem-Ver: feature
Change-Id: I3b7528dd3718acb5a9dbee8e65316c562e437844
2021-09-10 14:35:49 +00:00
Takashi Kajinami b413298763 Add oslo.config.opts entrypoint for basic auth middleware
... so that its options can be rendered by oslo-config-generator by
adding the entry point.
This change also updates the base oslo.middleware entry point to
include options of the middleware because the base entry point is
supposed to include all options in the oslo.middleware library.

Closes-Bug: #1940747
Change-Id: Ic9d79d9c46fc1dc78aa4d089e36219b2a34f4099
2021-08-22 01:58:07 +09:00
Takashi Kajinami 9ce08a6f0f healthcheck: Limit source IP range
This change introduces the new [healthcheck] allowed_source_ranges
option, to restrict access to healthcheck endpoint within specific
network ranges. This parameter is useful to avoid access from external
network, because healthcheck endpoint has no authentication usually.

Change-Id: I2b88704c260edd1a4c49cfde9de4cee4b90be862
2021-08-11 13:33:18 +00:00
ramishra da7987ca92 Add new basic auth middleware
This adds a middleware that can be used as an alternative to noauth in
standalone environments.

This middleware uses a password file which supports the Apache htpasswd
syntax. This file is read for every request, so no service restart is
required when changes are made.

The only password digest supported is bcrypt, and the ``bcrypt``
python library is used for password checks since it supports ``$2y$``
prefixed bcrypt passwords as generated by the Apache htpasswd utility.

Adapted from I874783b8ece0eedf27a94dfed5163d0c82f8b9de.

Change-Id: I3d80d86afd063af9fa2f411885dbd0dc65a7bbc7
2021-08-03 16:30:42 +05:30
Zuul 43ab17010a Merge "setup.cfg: Replace dashes with underscores" 2021-05-26 18:42:42 +00:00
wu.shiming 2c415ff32a Upgrade the pre-commit-hooks version
[1] 9136088a24

Change-Id: If753ad2d234798bb94d184b4390de6cc16c2e051
2021-05-18 11:15:54 +08:00
YuehuiLei 2ec633ccdf setup.cfg: Replace dashes with underscores
Setuptools v54.1.0 introduces a warning that the use of dash-separated
options in 'setup.cfg' will not be supported in a future version [1].
Get ahead of the issue by replacing the dashes with underscores. Without
this, we see 'UserWarning' messages like the following on new enough
versions of setuptools:

  UserWarning: Usage of dash-separated 'description-file' will not be
  supported in future versions. Please use the underscore name
  'description_file' instead

[1] https://github.com/pypa/setuptools/commit/a2e9ae4cb

Change-Id: Ic9487a052e549a91fcf09b94e5fae525548f8d68
2021-05-05 10:05:47 +08:00
Zuul b91fbcdf7e Merge "Warning about /healthcheck" 2021-04-21 18:29:51 +00:00
Thomas Goirand b1ce931100 Warning about /healthcheck
Add a warning in the doc to explain '/healthcheck' doesn't provide
any sort of check if the API actually works.

Change-Id: Ib4a065f31140f885d3de53e2423e7b4a6635f345
2021-04-21 15:33:12 +00:00
Zuul a2e7f5496e Merge "Use py3 as the default runtime for tox" 2021-04-16 14:26:43 +00:00