Newton Series Release Notes

0.11.1

Bug Fixes

  • It was possible to import the same murano package from the CLI into the same project multiple times if glare was used and the package was imported as a private one. The issue is now fixed.

0.10.0

New Features

  • Support for class/method JSON-schema API was added

  • New murano CLI command murano class-schema [--package-name PACKAGE_NAME] [--class-version PACKAGE_VERSION] <CLASS> [<METHOD> [<METHOD> ...]]

  • New OSC command openstack class-schema [--package-name PACKAGE_NAME] [--class-version PACKAGE_VERSION] <CLASS> [<METHOD> [<METHOD> ...]]

  • Support for static actions API was added - New Murano CLI command murano static-action-call [--arguments [<KEY=VALUE> [<KEY=VALUE> ...]]] [--package-name <PACKAGE>] [--class-version CLASS_VERSION] <CLASS> <METHOD> - New OSC command openstack static-action call [--arguments [<KEY=VALUE> [<KEY=VALUE> ...]]] [--package-name <PACKAGE>] [--class-version CLASS_VERSION] <CLASS> <METHOD>

Upgrade Notes

  • environment-action-call command now accepts action argument values of any type in JSON format, for example environment-action-call $ENV_ID –action-id $ACT_ID –arguments foo=bar listArg=’[“item1”, “item2”, “item3”]’ nullArg=null stringArg=‘“null”’ intArg=5

Bug Fixes

  • Fixed a bug when a package containing multi-class yamls could not be added to glare-based catalog.

  • Add an ability to use arguments –resources-dir and –template for the command package-create simultaneously. It allows to create HOT-packages with Resources folder.

0.9.0

New Features

  • New OSC command environment list [--all-tenants]

  • New OSC command environment show <id or name> [--session-id <session id>] [--only-apps]

  • New OSC command environment rename <id> <name>

  • New OSC command environment session create <id>

  • New OSC command category list

  • New OSC command category show <id>

  • New OSC command category create <name>

  • New OSC command category delete <id> [<id> ...]

  • New OSC command environment create [--join-net-id <NET_ID>] [--join-subnet-id <SUBNET_ID>] [--region <REGION_NAME>] <ENVIRONMENT_NAME>

  • New OSC command environment delete [--abandon] <NAME or ID> [<NAME or ID> ...]

  • Added ‘–dep-exists-action’ option to murano command-line interface. It allows to apply different default actions for existing main package and existing dependencies. In case of specifying just ‘–exists-action’, action for dependencies equals to that like it was previously.

  • Since glare has been moved to a separate service muranoclient CLI now distinguishes between –glance-url and –glare-url. If –glare-url is not supplied muranoclient requests an endpoint of type ‘artifact’ from keystone.

  • OSC plugin now honores --murano-url and MURANO_URL, to allow using custom murano endpoint

Security Issues

  • cve-2016-4972 has been addressed. In ceveral places Murano used loaders inherited directly from yaml.Loader when parsing MuranoPL and UI files from packages. This is unsafe, because this loader is capable of creating custom python objects from specifically constructed yaml files. With this change all yaml loading operations are done using safe loaders instead.

Bug Fixes

  • Importing a package into glare, now fills ‘inherited’ field with full inheritance info (previously it only contained immediate parent classes).

  • Added fallback from token to username/password if both are provided and token expires or is invalid.

  • Fixed order of packages import - main package can not be imported before all its dependencies are imported. Cyclic requirements are imported in random order.

  • cli now makes use of type of the endpoint (defined either as a –os-endpoint-type command line parameter or OS_ENDPOINT_TYPE environment variable). This type defines which interface will be used when connecting to murano, glance and glare APIs.

  • It is now possible to import packages with ‘!yaql’ tag, when glare is used as backend. Before this fix, importing such package caused a parsing error.