Current Series Release Notes

23.0.0-19

New Features

  • The VAST Manila driver enhances multitenancy via share types using namespaced extra specs. Administrators can specify different VIP pools per share type using the vast:vippool_name extra spec, enabling network isolation between different tenants or projects. This allows multiple share types to use different VIP pools while sharing the same Manila backend. The configuration parameter vast_vippool_name in manila.conf now serves as a default fallback and is no longer strictly required when VIP pools are specified via share type extra specs.

Upgrade Notes

  • The deprecated [DEFAULT] use_forwarded_for`` option has been removed.

Security Issues

  • Any user was able to manipulate the access rules, create backups or replicas, soft delete or restore public shares they did not own, and read or manipulate the export location metadata of shares they did not own. These operations now enforce ownership, and export location metadata is scoped to the share in the request URL. For details, see Launchpad bug #2161412 and Launchpad bug #2168962.

Bug Fixes

  • Share drivers that import manila.ssh_utils without using SSH, such as CephFS, LVM and ZFSonLinux, no longer fail to load when paramiko cannot be imported. A missing paramiko is now reported only when an SSH connection pool is created.