Notas de Versão da Série Havana¶
Visão Geral da Versão¶
The Havana release cycle brings support for three new projects, plus significant new features for several existing projects. On top of that, many aspects of user experience have been improved for both end users and administrators. The community continues to grow and expand. The Havana release is solidly the best release of the OpenStack Dashboard project yet!
Destaques¶
Novos Recursos¶
Heat¶
The OpenStack Orchestration project (Heat) debuted in Havana, and Horizon delivers full support for managing your Heat stacks. Highlights include support for dynamic form generation from supported Heat template formats, stack topology visualizations, and full stack resource inspection.
Ceilometer¶
Also debuting in Havana is the OpenStack Metering project (Ceilometer). Initial support for Ceilometer is included in Horizon so that it is possible for an administrator to query the usage of the cloud through the OpenStack Dashboard and better understand how the system is functioning and being utilized.
Domínios, Grupos, e Mais: Suporte da API v3 do Keystone¶
With the OpenStack Identity Service (Keystone) v3 API fully fledged in the Havana release, Horizon has added full support for all the new features such as Domains and Groups, Role management and assignment to Domains and Groups, Domain-based authentication, and Domain context switching.
Bancos de Dados Trove¶
The OpenStack Database as a Service project (Trove) graduated from incubation in the Havana cycle, and thanks to their industriousness they delivered a set of panels for the OpenStack dashboard to allow for provisioning and managing your Trove databases and backups. Disclaimer: Given that Trove’s first official release as an integrated project will not be until Icehouse this feature should still be considered experimental and may be subject to change.
Recursos Nova¶
O número de recursos do Openstack Compute (Nova) que são suportados no Horizon continua crescendo. Novos recursos na versão Havana incluem:
Cotas padrões editáveis.
A capacidade de um administrador para zerar a senha de um servidor/instância.
Suporte de zona de disponibilidade.
Melhor suporte regional.
Redimensionamento de instância.
Melhor suporte de inicialização pelo volume.
Suporte a sabor por projeto.
All of these provide a richer set of options for controlling where, when and how instances are launched, and improving how they’re managed once they’re up and running.
Recursos do Neutron¶
Um número de importante recursos na rede Openstack (Neutron) são mostrados na versão Havana, mais notavelmente.
VPN como um Serviço.
Firewall como um Serviço.
Visualizações editáveis e interativas de topologia de rede.
Grupo de segurança completo e paridade de cota entre Neutron e rede Nova.
Esses recursos permitem grande flexibilidade ao construir redes definidas por software para sua nuvem utilizando o Neutron.
Melhorias na Experiência do Usuário¶
Autoatendimento para mudança de senha.¶
Alterações habilitadas na API do Keystone, agora os usuários podem alterar suas próprias senhas sem a necessidade de envolver um administrador. Isso é mais seguro e proporciona menos burocracia a todos.
Melhor arquitetura de informações de administração.¶
Several sections of the Admin dashboard have been rearranged to more logically group information together. Additionally, new sources of information have been added to allow Admins to better understand the state of the hosts in the cloud and their relationship to host aggregates, availability zones, etc.
Mensagens melhoradas para usuários em Logout.¶
Several new indicators have been added to inform users why they’ve been logged out when they land on the login screen unexpectedly. These indicators make it clear whether the user’s session has expired, they timed out due to inactivity, or they are not authorized for the section of the dashboard they attempted to access.
Modelos de regra para grupos de segurança¶
Since there are many very common security group rules which users tediously
re-add each time (rules for SSH and ping, for example) the Horizon team has
added pre-configured templates for common rules which a user can select and
add to their security group with two clicks. These rules are configurable
via the SECURITY_GROUP_RULES setting.
Comunidade¶
Time de tradução¶
The OpenStack Translations team came fully into its own during the Havana cycle and the quality of the translations in Horizon are the best yet by far. Congratulations to that team for their success in building the community that started primarily within the OpenStack Dashboard project.
Grupo de experiência de usuário¶
A fledgling OpenStack User Experience Group formed during the Havana cycle with the mission of improving UX throughout OpenStack. They have quickly made themselves indispensable to the process of designing and improving features in the OpenStack Dashboard. Expect significant future improvement in User Experience now that there are dedicated people actively collaborating in the open to raise the bar.
Nos bastidores¶
Menos compilação menos complicação: não há mais NodeJS¶
Due to outcry from various parties, and made possible by improvements in the
Python community’s support for LESS, Horizon has removed all traces of NodeJS
from the project. We now use the lesscpy module to compile our LESS into
the final stylesheets. This should not affect most users in any way, but it
should make life easier for downstream distributions and the like.
Controle de Acesso Baseados em Funções¶
Horizon has begun the transition to using the other OpenStack projects’
policy.json files to enforce access controls in the dashboard if the files
are provided. This means access controls are more configurable and can be kept
in sync between the originating project and Horizon. Currently this is only
supported for Keystone and parts of Nova’s policy files. Full support will
come in the next release. You will need to set the POLICY_FILES_PATH and
POLICY_FILES settings in order to enable this feature.
Outras melhorias e correções¶
Contêiner Swift e metadados de objeto agora são suportados.
Novas visualizações para utilização e quotas.
The Cisco N1K Router plugin’s additional features are available through a special additional dashboard when enabled and supported in Neutron.
Support for self-signed or other specified SSL certificate checking.
Tipos de imagens do Glance agora são configuráveis.
Sorting has been improved in many places through the dashboard.
Otimização da eficiência das chamadas de API.
Os campos obrigatórios nos formulários agora são melhor indicados.
Session timeout can now be enabled to log out the user after a period of inactivity as a security feature.
Significant PEP8 and code quality compliance improvements.
Hundreds of bugfixes and minor user experience improvements.
Upgrade Information¶
Hosts permitidos¶
Para implementações de produção do Horizon você deve adicionar o ALLOWED_HOSTS definindo para o seu arquivo``local_settings.py``. Essa configuração foi adicionada no Django 1.5 e é um importante recurso de segurança. Para mais informação sobre isso, por favor consulte o arquivo local_settings.py.example o a documentação do Django.
Habilitando recursos do Keystone e Neutron.¶
Se você possui configurações existentes para o OPENSTACK_KEYSTONE_BACKEND ou OPENSTACK_NEUTRON_NETWORK, você vai querer consultar o arquivo local_settings.example.py para informação sobre as novas opções que foram adicionadas. As configurações existentes continuarão funcionando, mas podem não possuir as chaves corretas para habilitar alguns dos novos recursos no Havana.
Problemas Conhecidos e Limitações¶
Criação de sessão e conferência de Saúde.¶
If you use a health monitoring service that pings the home page combined with a database-backed session backend you may experience excessive session creation. This issue is slated to be fixed soon, but in the interim the recommended solution is to write a periodic job that deletes expired sessions from your session store on a regular basis.
Exclusão de um grande número de recursos simultaneamente¶
Using the “select all” checkbox to delete large numbers of resources at once can cause network timeouts (depending on configuration). This is due to the underlying APIs not supporting bulk-deletion natively, and consequently Horizon has to send requests to delete each resource individually behind the scenes.
Os nomes do Grupo de Segurança estão conflitando com o Neutron.¶
Whereas Nova Network uses only the name of a security group when specifying security groups at instance launch time, Neutron can accept either a name or a UUID. In order to support both, Horizon passes in the name of the selected security groups. However, due to some data-isolation issues in Neutron there is an issue that can arise if an admin user tries to specify a security group with the same name as another security group in a different project which they also have access to. Neutron will find multiple matches for the security group name and will fail to launch the instance. The current workaround is to treat security group names as unique for admin users.
Compatibilidade Retroativa¶
The Havana Horizon release should be fully compatible with both Havana and Grizzly versions of the rest of the OpenStack integrated projects (Nova, Swift, etc.). New features in other OpenStack projects which did not exist in Grizzly will obviously only work in Horizon if the rest of the stack supports them as well.
Overall, great effort has been made to maintain compatibility for third-party developers who have built on Horizon so far.
