Zed Series Release Notes

10.0.0-5

Security Issues

• Fixes a bug where any user could update/delete a lease from any project, provided that they had the lease ID. When using the default policy configuration, there is no way for a regular user to see lease IDs of another project. However, operators that are running the Resource Availability Calendar may have overridden this policy, and so may be vulnerable without this fix. LP#2120655

Bug Fixes

• The Blazar service now supports using a custom CA certificate bundle with the [DEFAULT]/cafile option. This allows for deployment on OpenStack clouds that are using HTTPS endpoints with certificates signed by a custom CA. LP#2045281

10.0.0

New Features

• Add a usage enforcement filter delegating decisions to an external HTTP service. This new filter is called ExternalServiceFilter.

Upgrade Notes

• Python 3.6 & 3.7 support has been dropped. The minimum version of Python now supported is Python 3.8.