The document summarizes the key updates and new features in the OpenStack Queens release, including improvements to Cinder for attaching volumes to multiple VMs and creating volumes from backups; Swift checksum support and symlink objects; Glance image import capabilities; Horizon dashboard updates; Keystone application credentials and system scope assignments; Nova support for vGPUs and rescheduling; Neutron ML2 and OVN support and firewall-as-a-service; Designate removal of legacy APIs; Ironic node traits and Ansible deployment; and Congress Mistral integration and configuration validation.

1. What’s New in OpenStack Queens Release
Bengaluru 31st Mar 2018
OpenStack Meetup @ Bengaluru, India 2018

2. Swami Reddy M R
Jio
Quick Intro:

3. Agenda
 Cinder
 Swift
 Glance
 Horizon
 Keystone
 Nova
 Neutron
 Designate
 Ironic
 Congress

4. Cinder - OpenStack Block Storage Service
• Attaching a single volume to multiple VMs.
• Ability to report backend state in service list.
• Create a volume from a backup.
• Standardized over-provisioning calculations.

5. Swift - OpenStack Object Storage
• Checksum to object extended attributes.
• Symlink objects support.
• The object expiry functionality was greatly improved.
• The tempurl digest algorithm
- Configurable, and Swift added support for both SHA-256 and SHA-512.
- Exposed to clients in /info.
- Signatures can now be base64 encoded.

6. Glance - OpenStack Image Service
• Introduced the Image API v2.6, including interoperable image import
• New import-method, ‘web-download’
• Import plugin scaffolding and a new import plugin that injects image metadata upon
import
• Updated the glance-manage and glance-scrubber tools

7. Horizon - OpenStack Dashboard
• Migrated the Roles and Key Pairs panels to be AngularJS panels
• Use server side filtering across the UI
• Support for MKS consoles, Neutron Trunks, and loading multiple policy files
• Updated all project related documentation
• Moved Heat dashboard into a separate Horizon plugin and merged Django OpenStack
Auth into Horizon

8. Keystone - OpenStack Identity Service
• Now offers a better story for applications interacting with OpenStack APIs with the use
of application credentials.
• A new assignment type has been added to allow for more secure RBAC called system
scope.
• Introduced an experimental unified limits API to help improve quota enforcement.

9. Nova - OpenStack Compute Service
• Support for vGPUs. Experimental feature – admins only.
• Rescheduling during a server create/resize operation.
• The libvirt compute driver supports volume multi-attach - API microversion 2.60
• Traits-based scheduling is now available for the ironic compute driver.

10. Neutron - OpenStack Networking Service
• ML2
• Works with the vxlan type driver
• Support Quality of Service rate limits for floating IPs.
• This release introduces a new API extensions:
• ‘bgpvpn-routes-control’
• ‘bgpvpn-vni’
• OVN
• DNS support.
• Distributed Floating IP support.
• L3 HA support for gateway routers.
• FWaaS V2.0
• L2 VM ports and l3 router ports.
• Co-exists with Neutron security groups.
• API supports filtering port with IP address substring.

11. Designate -OpenStack DNS as a Service
• Removed legacy V1 API interface
• Policy files are now just overrides to default rules
• Accessible upgrades - DNS Queries will keep resolving during update

12. Ironic - OpenStack Bare Metal Provisioning
• Introduced API to get/set and unset traits on nodes.
• Introduced new ansible deploy interface.
• Finished implementation of rescue mode. Users can repair instances, troubleshoot
misconfigured nodes, lost SSH keys, etc.
• Support for routed networks when using flat networking.
• Deprecated classic drivers in favor of hardware types.

13. Congress - OpenStack Policy as a Service
• Mistral Integration: Congress can now trigger workflows according to operator-defined
policy.
• Config Validation: To help operators catch improper, insecure, or incompatible
configurations across the Stack, the new configuration validation facility enables Congress
to monitor service configurations according to policy.
• Tag-based Security: To help operators secure and manage self-service infrastructure,
Congress now supports enforcement of application-based network security policies based
on tags and other semantic information.
• Bug Fixes.

14. Thank You
Email - swamireddy@gmail.com
IRC - swamireddy
Reference: https://releases.openstack.org/queens/highlights.html

15. Any questions?