[ClusterLabs] pcs 0.10.0.alpha.1 available
Tomas Jelinek
tojeline at redhat.com
Tue Jul 17 10:34:01 EDT 2018
I am happy to announce the first alpha of pcs-0.10: pcs-0.10.0.alpha.1.
Source code is available at:
https://github.com/ClusterLabs/pcs/archive/0.10.0.alpha.1.tar.gz
or
https://github.com/ClusterLabs/pcs/archive/0.10.0.alpha.1.zip
Pcs-0.10 is the new main pcs branch supporting Corosync 3.x and
Pacemaker 2.x clusters while dropping support for older Corosync and
Pacemaker versions. Pcs-0.9, being in maintenance mode, continues to
support Corosync 1.x/2.x and Pacemaker 1.x clusters.
Main changes in this alpha:
* Added support for Corosync 3.x and Kronosnet
* Node names are now fully supported
* Python 3.6+ and Ruby 2.2+ is now required
Complete change log for pcs-0.10.alpha against 0.9.163:
### Removed
- Pcs-0.10 removes support for CMAN, Corosync 1.x, Corosync 2.x and
Pacemaker 1.x based clusters. For managing those clusters use
pcs-0.9.x.
- Pcs-0.10 requires Python 3.6 and Ruby 2.2, support for older Python
and Ruby versions has been removed.
- `pcs resource failcount reset` command has been removed as `pcs
resource cleanup` is doing exactly the same job. ([rhbz#1427273])
- `pcs cluster node delete`, a deprecated alias to `pcs cluster node
remove`, has been removed
### Added
- Validation for an unaccessible resource inside a bundle
([rhbz#1462248])
- Options to filter failures by an operation and its interval in `pcs
resource cleanup` and `pcs resource failcount show` commands
([rhbz#1427273])
### Fixed
- `pcs cib-push diff-against=` does not consider an empty diff as an
error ([ghpull#166])
- `pcs resource update` does not create an empty meta\_attributes
element any more ([rhbz#1568353])
- `pcs resource debug-*` commands provide debug messages even with
pacemaker-1.1.18 and newer ([rhbz#1574898])
- Improve `pcs quorum device add` usage and man page ([rhbz#1476862])
- Removing resources using web UI when the operation takes longer than
expected ([rhbz#1579911])
- Removing a cluster node no longer leaves the node in the CIB and
therefore cluster status even if the removal is run on the node which
is being removed ([rhbz#1595829])
### Changed
- Authentication has been overhauled ([rhbz#1549535]):
- The `pcs cluster auth` command only authenticates nodes in a local
cluster and does not accept a node list.
- The new command for authentication is `pcs host auth`. It allows to
specify host names, addresses and pcsd ports.
- Previously, running `pcs cluster auth A B C` caused A, B and C to be
all authenticated against each other. Now, `pcs host auth A B C`
makes the local host authenticated against A, B and C. This allows
better control of what is authenticated against what.
- The `pcs pcsd clear-auth` command has been replaced by `pcs pcsd
deauth` and `pcs host deauth` commands. The new commands allows to
deauthenticate a single host / token as well as all hosts / tokens.
- These changes are not backward compatible. You should use the `pcs
host auth` command to re-authenticate your hosts.
- The `pcs cluster setup` command has been overhauled ([rhbz#1158816],
[rhbz#1183103]):
- It works with Corosync 3.x only and supports knet as well as
udp/udpu.
- Node names are now supported.
- The number of Corosync options configurable by the command has been
significantly increased.
- The syntax of the command has been completely changed to accommodate
the changes and new features.
- The `pcs cluster node add` command has been overhauled
([rhbz#1158816], [rhbz#1183103])
- It works with Corosync 3.x only and supports knet as well as
udp/udpu.
- Node names are now supported.
- The syntax of the command has been changed to accommodate new
features and to be consistent with other pcs commands.
- The `pcs cluster node remove` has been overhauled ([rhbz#1158816],
[rhbz#1595829]):
- It works with Corosync 3.x only and supports knet as well as
udp/udpu.
- It is now possible to remove more than one node at once.
- Removing a cluster node no longer leaves the node in the CIB and
therefore cluster status even if the removal is run on the node
which is being removed
- Node names are fully supported now and are no longer coupled with node
addresses. It is possible to set up a cluster where Corosync
communicates over different addresses than pcs/pcsd. ([rhbz#1158816],
[rhbz#1183103])
- Commands related to resource failures have been overhauled to support
changes in pacemaker. Failures are now tracked per resource operations
on top of resources and nodes. ([rhbz#1427273], [rhbz#1588667])
- `--watchdog` and `--device` options of `pcs stonith sbd enable` and
`pcs stonith sbd device setup` commands have been replaced with
`watchdog` and `device` options respectively
### Security
- CVE-2018-1086: Debug parameter removal bypass, allowing information
disclosure ([rhbz#1557366])
- CVE-2018-1079: Privilege escalation via authorized user malicious REST
call ([rhbz#1550243])
Thanks / congratulations to everyone who contributed to this milestone,
including Bruno Travouillon, Ivan Devat, Ondrej Mular and Tomas Jelinek.
Cheers,
Tomas
[ghpull#166]: https://github.com/ClusterLabs/pcs/pull/166
[rhbz#1158816]: https://bugzilla.redhat.com/show_bug.cgi?id=1158816
[rhbz#1183103]: https://bugzilla.redhat.com/show_bug.cgi?id=1183103
[rhbz#1427273]: https://bugzilla.redhat.com/show_bug.cgi?id=1427273
[rhbz#1462248]: https://bugzilla.redhat.com/show_bug.cgi?id=1462248
[rhbz#1476862]: https://bugzilla.redhat.com/show_bug.cgi?id=1476862
[rhbz#1549535]: https://bugzilla.redhat.com/show_bug.cgi?id=1549535
[rhbz#1550243]: https://bugzilla.redhat.com/show_bug.cgi?id=1550243
[rhbz#1557366]: https://bugzilla.redhat.com/show_bug.cgi?id=1557366
[rhbz#1568353]: https://bugzilla.redhat.com/show_bug.cgi?id=1568353
[rhbz#1574898]: https://bugzilla.redhat.com/show_bug.cgi?id=1574898
[rhbz#1579911]: https://bugzilla.redhat.com/show_bug.cgi?id=1579911
[rhbz#1588667]: https://bugzilla.redhat.com/show_bug.cgi?id=1588667
[rhbz#1595829]: https://bugzilla.redhat.com/show_bug.cgi?id=1595829
More information about the Users
mailing list