Ussuri Series Release Notes¶
An open redirect has been fixed, that could redirect users to arbitrary addresses from certain views by specifying a “next” parameter in the URL. Now the redirect will only work if the target URL is in the same domain, and uses the same protocol.
Added support for Keystone locking user option. Locked user can’t change own password using the self-service password change API. By default, users are unlocked and can change their own passwords. In case of older Keystone not supporting this feature, all users treated as unlocked.
Adds options to gui to allow user to select which storage policy container will use and displays the container’s storage policy in the container information.
The legacy way to retrive neutron resource usages is deprecated. In future, horizon will require
quota_detailsneutron extension. In the legacy way, horizon list all related resources to count resource usage. It is not efficient and
quota_detailsneutron extension was added to address it. It was implemented in Pike release and the enough migration period has passed, so we deprecate the legacy way.
Introduced a new
DEFAULT_BOOT_SOURCEconfig option to allow operators to configure a default instance boot source.
Added support to retrieve supported disk formats from glance, so you can adjust disk_formats only inside glance-api.conf. You still can use IMAGE_BACKEND_SETTINGS to adjust format naming.
Django 1.11 support was dropped. Django 1.11 ends its extended support in April 2020 which is before Ussuri release. Considering this, horizon dropped Django 1.11 support and use Django 2.2 as default.
Python 2.7 support has been dropped. Last release of horizon to support python 2.7 is OpenStack Train. The minimum version of Python now supported by horizon is Python 3.6.
OPENSTACK_NOVA_EXTENSIONS_BLACKLISToption is deprecated. All of the nova API extensions have been mainlined several releases ago and there is no potential performance issue in the nova API. This option is used only to toggle features in horizon and there seems no performance issues controlled by the option in horizon. Considering this situation, this option is deprecated now.
Adds support for access rules for application credentials. Fine-grained restrictions can now be applied to application credentials by supplying a list of access rules upon creation. See the keystone documentation for more information.
The missing nova’s os-aggregates policy rules are added to the dashboard.
The missing nova’s os-flavors policy rules are added to the dashboard.
The default OPENSTACK_KEYSTONE_URL value has been changed to
"http://%s/identity/v3" % OPENSTACK_HOSTfrom
"http://%s:5000/v3" % OPENSTACK_HOST.
Glance API V1 support has been dropped in Ussuri release. Glance V1 API support was deprecated in Stein release.
OPENSTACK_NEUTRON_NETWORKis now enabled by default. Neutron provides the quotas API for long and most horizon deployments are expected to enable this, so the feature is enabled by default. If your deployment disables the neutron quotas support, make sure to set this value to
The default values of the settings listed in
local_settings.py.examplein past releases have been moved to
openstack_dashboard/defaults.py. By doing this, horizon can now provide the definitions of the default settings more explicitly. For the available settings, see
openstack_dashboard/defaults.pyand the horizon setting reference found at https://docs.openstack.org/horizon/latest/configuration/settings.html.
Note that Django related settings and HORIZON_CONFIG still exist in
local_settings.py.examplein this release and they will be revisited in upcoming releases.