March 2019 - Zuul-announce - lists.opendev.org

Zuul 3.7.1 released
by corvus＠inaugust.com 26 Mar '19

26 Mar '19

The Zuul team is pleased to announce the release of Zuul 3.7.1. Download it from PyPI: https://pypi.org/project/zuul The release notes, included below, are also available in the documentation with hyperlink references: https://zuul-ci.org/docs/zuul/releasenotes.html#relnotes-3-7-1 Bug Fixes ========= * When using Ansible 2.7 the uri module crashed with a module failure. * The scheduler.default_ansible_version has been ignored.

1 0

Zuul 3.7.0 released
by corvus＠inaugust.com 21 Mar '19

21 Mar '19

The Zuul team is pleased to announce the release of Zuul 3.7.0. Download it from PyPI: https://pypi.org/project/zuul The release notes, included below, are also available in the documentation with hyperlink references: https://zuul-ci.org/docs/zuul/releasenotes.html#relnotes-3-7-0 Upgrade Notes ============= * The default ansible version is now 2.7. In case this breaks any jobs this can be overridden in job.ansible-version, tenant.default-ansible-version or scheduler.default_ansible_version * In order to support several ansible versions installed simultaneously Zuul now handles them itself in virtual environments. By default Zuul installs the needed ansible versions on startup so there is no further user action required. However it is recommended to pre-install the ansible environments during installation by invoking zuul-manage-ansible. * The user value in the [fingergw] configuration section previously defaulted to zuul, but now is unset by default, which will cause fingergw not to drop privileges. It is recommended that this value be explicitly set to an unprivileged user. * The hosts value in the [zookeeper] configuration section previously defaulted to localhost:2181, but now is unset by default. This value is required and must be explicitly set (and the documentation has always indicated this). New Features ============ * Jobs may now specify which ansible version is used to run them. The ansible version to use can now be specified by job.ansible-version. * Zuul now supports ansible 2.6 for running jobs. * Zuul now supports ansible 2.7 for running jobs. * The ansible_python_interpreter variable is now whitelisted for the add_host task.

1 0

Zuul not blocking local execution of raw Ansible module
by Tobias.Henkel＠bmw.de 12 Mar '19

12 Mar '19

Dear zuul operators, I discovered that we don't check the raw Ansible module for delegation to localhost. We do not believe this would have given jobs access to the executor host as every job is sandboxed within a bubblewrap container with minimal access to the filesystem and other resources. Further information can be found in StoryBoard: https://storyboard.openstack.org/#!/story/2005037 This is fixed by https://review.openstack.org/642518 which has been included in Zuul version 3.6.1. It is strongly advised to update to 3.6.1 or latest master and restart any running zuul-executor processes. Sorry for any inconveniences Kind regards Tobias

1 0

Nodepool 3.5.0 released
by corvus＠inaugust.com 09 Mar '19

09 Mar '19

The Zuul team is pleased to announce the release of Nodepool 3.5.0. Download it from PyPI: https://pypi.org/project/nodepool The release notes, included below, are also available in the documentation with hyperlink references: https://zuul-ci.org/docs/nodepool/releasenotes.html#relnotes-3-5-0 New Features ============ * The new Amazon Web Services (AWS) EC2 Driver allows launching EC2 instances as nodes. * A new option (build-timeout) has been added to the builder diskimage configuration to control how long the builder should wait for image builds before giving up. The default is 8 hours. * A new driver is available to support Openshift cluster as a resources provider to enable project and pod request. Known Issues ============ * The AWS driver does not support quota management at this time. * The AWS driver does not support custom image building.

1 0

Zuul 3.6.0 released
by corvus＠inaugust.com 09 Mar '19

09 Mar '19

The Zuul team is pleased to announce the release of Zuul 3.6.0. Download it from PyPI: https://pypi.org/project/zuul The release notes, included below, are also available in the documentation with hyperlink references: https://zuul-ci.org/docs/zuul/releasenotes.html#relnotes-3-6-0 Upgrade Notes ============= * Service Workers are now disabled by default in the Javascript dashboard. Deployers who wish to enable them need to set REACT_APP_ENABLE_SERVICE_WORKER * Zuul recently added the job variable zuul.message. This can contain jinja tags which can cause problems accessing the zuul variable in the job. Because of this the message is now base64 encoded and any job evaluating this variable needs to be changed from {{ zuul.message }} to {{ zuul.message | b64decode }}. New Features ============ * Artifacts may now include a metadata field for storing arbitrary metadata about the artifacts in the SQL database. * The job.run attribute now supports a single or list of playbooks. * Support for expressing artifact or other resource dependencies between jobs running on different changes with a dependency relationship (e.g., a container image built in one project and consumed in a second project) has been added via the job.provides and job.requires job attributes. * The job.dependencies attribute may now be used to express “soft” dependencies – that is, to indicate a job should run after another completes, but only if it runs at all. For example, a deployment job which should always run, but depends on a build job which only runs if the source code is changed.

1 0