2023.1 Series Release Notes

2023.1-eom-3

Security Issues

• Fixes a bug where any user could update/delete a lease from any project, provided that they had the lease ID. When using the default policy configuration, there is no way for a regular user to see lease IDs of another project. However, operators that are running the Resource Availability Calendar may have overridden this policy, and so may be vulnerable without this fix. LP#2120655

2023.1-eom

Bug Fixes

• The Blazar service now supports using a custom CA certificate bundle with the [DEFAULT]/cafile option. This allows for deployment on OpenStack clouds that are using HTTPS endpoints with certificates signed by a custom CA. LP#2045281

11.0.0

New Features

• Adds optional randomness to physical host allocation. This is disabled by default and can be enabled with the configuration option [physical:host]/randomize_host_selection.