Newton Series Release Notes¶
memcache_servers support in object-expirer and container-reconciler
Set the default log facility to LOCAL2 for all services.
Add ignore projects setting to filter:ceilometer in proxy server config.
puppet-swift will no longer raise an error if swift-ring-builder rebalance returns an exit code of 1. This is a warning but not an error in swift-ring-builder; errors use an exit code of 2 in swift-ring-builder.
Updated file permissions for CVE-2016-9590. Fixes configuration file permissions for the proxy server and storage servers. The permissions were getting incorrectly changed from 0640 to 0644 due to lack of the explict setting of mode on the concat resources.
A new ceilometermiddleware option “nonblocking_notify” has been added and can be used to send notifications in a separate background thread. This avoids blocking of Swift if RabbitMQ is not able to process new notifications. In this case notifications will be dropped after the local queue (defaults to 1000 entries) is exhausted. It requires the Newton release of ceilometermiddleware. This option is disabled by default and not changing the current behavior.
Fixed the incorrect inclusion of a requirement for the memcached class to be in the catalog for swift::proxy::cache due to a bad grep of the memcached server list. LP#1628967
Add missing copy and versioned_writes middlewares
Fix the middleware order in the proxy server pipeline according to upstream documentation
add new parameters to configure authtoken for swift, like username, password, project_name, auth_url, auth_plugin, project_domain_id, user_domain_id, include_service_catalog
Added parameters to configure the statsd integration for the account, container, object and proxy services. log_statsd_host, log_statsd_port, log_statsd_default_sample_rate, log_statsd_sample_rate_factor and log_statsd_metric_prefix can be configured if statsd_enabled is set to true for the swift::storage::services resource.
Allows configuring CORS settings.
admin_tenant_name in favor of project_name
admin_password in favor of password
admin_user in favor of username
identity_uri in favor of auth_url
The Swift Keystone middleware option is_admin has been deprecated in the Mitaka release and should be no longer used. It has no more effect and will be removed in a future version.
remove auth_host, auth_port, auth_protocol, auth_admin_prefix
The keystone auth class has been updated to provide a default service_name to allow a user to specify a custom auth_name that may not contain the name of the service.
Add hooks for external install & svc management.
puppet-swift supports Ubuntu 16.04 xenial
Add ability to configure container_sync middleware.
Add ability to manage swift container-sync-realms config for specifying the allowable clusters and their information.
This adds defined anchor points for external modules to hook into the software install, config and service dependency chain. This allows external modules to manage software installation (virtualenv, containers, etc) and service management (pacemaker) without needing rely on resources that may change or be renamed.
Update Ceilometer proxy to support Oslo Messaging.
Allow to manage Swift service with swiftinit service provider. This is an initial step towards using swift-init to manage multiple swift services out of different configuration files such as is needed to run a separate replication network.
swift-ring-builder 2.2.2+ output parsing support.
Add support to change meta entry for ring devices.
Release notes are no longer maintained by hand, we now use the reno tool to manage them.
Previous version of puppet-swift hard coded upstart for ubuntu, that restriction is removed for ubuntu now. xenial will use systemd by default. ‘swiftinit’ service provider now also supports xenial using systemd for service start at boot control.
Create ring builders under swift user instead of root.
Change defaults fro incoming/outgoing chmod for rsync. Defaults are now Du=rwx,g=rx,o=rx,Fu=rw,g=r,o=r.
Set mount_check to True by default.
Stop calling ::concat::setup, that is a deprecate class.
swift_hash_suffix is now deprecated and swift_hash_path_suffix with swift_hash_path_prefix should be used.
remove swift_hash_suffix deprecated in Mitaka and change tests to use swift_hash_path_suffix.