Newton Series Release Notes

3.0.0-12

Bug Fixes

  • The issue with adding already deployed components to environment via dropdown is fixed with applying changes for the new type format.

3.0.0

New Features

  • Added DISPLAY_MURANO_REPO_URL setting that is used as a user-visible link to apps.openstack.org or any other murano applications repository.

  • Added the capability to execute actions (delete, abandon or deploy) on multiple selected environments.

  • Murano dashboard now comes with the muranodashboard/local/local_settings.d/_50_murano.py file that contains murano-specific settings for horizon (for example, MURANO_API_URL).

Upgrade Notes

  • Previously all murano-specific horizon settings had to be kept in local_settings.py file of Horizon. You need to remove those settings from local_settings.py and copy muranodashboard/local/local_settings.d/_50_murano.py to openstack_dashboard/local/local_settings.d/ directory in horizon and keep all murano-related changes there.

Security Issues

  • cve-2016-4972 has been addressed. In ceveral places Murano used loaders inherited directly from yaml.Loader when parsing MuranoPL and UI files from packages. This is unsafe, because this loader is capable of creating custom python objects from specifically constructed yaml files. With this change all yaml loading operations are done using safe loaders instead.

Bug Fixes

  • Specifying a base class in the UI definition now also fetches all the packages with classes that inherit from that class, when glare is used. For example, if you specify the ‘io.example.Parent’ class, the dashboard fetches ‘io.example.Child1’ and ‘io.example.Child2’, and any other descendants of ‘io.example.Parent’ that are present.

  • Fixed the issue with sequential download of packages. Dashboard is now using ‘tables.LinkAction’ instead of ‘tables.Action’ for DownloadPackage table action.

  • Fixed the issue that prevented the murano dashboard from finding certain horizon filters, such as ‘parse_isotime’, ‘timesince_or_never’, and others.

  • Fixed the password check in dynamic UI forms. Previously, the dashboard did not validate the password fields with IDs not ending with ‘password’. Now, to determine whether to add default password validators to the field or not, the dashbord only checks the field type itself, instead of both field type and ending of the field ID.

  • The Environment components page now reloads after an empty environment deployment. This allows adding new components to the empty environment without having to reload the page manually.

  • Improved the performance of the Recent Activity panel on the Browse Catalog page.

  • Fixed the issue that reset all environment changes from the previous session (adding or removing components without deployment) after consequent login. Also, the Ready to deploy status now only displays if there are changes pending in the current session.

Other Notes

  • Murano Dashboard relies on Glance v1 API for image uploads. In case it is not available an error will be shown and all the image-related functionality will be unavailable.