[ClusterLabs] pcs 0.10.14 released

Tomas Jelinek tojeline at redhat.com
Fri Jun 24 10:38:02 EDT 2022


I am happy to announce the latest release of pcs, version 0.10.14.

Source code is available at:
https://github.com/ClusterLabs/pcs/archive/0.10.14.tar.gz
or
https://github.com/ClusterLabs/pcs/archive/0.10.14.zip

The most notable feature of this release is exporting resources
configuration in for of pcs commands which can be used to recreate the
same configuration.

Complete change log for this release:
## [0.10.14] - 2022-06-23

### Security
- CVE-2022-1049: Pcs daemon was allowing expired accounts, and accounts
   with expired passwords to login when using PAM auth. ([huntr#220307],
   [rhbz#2068456])
- Pcsd does not expose the server name in HTTP headers anymore
   ([rhbz#2058278])
- Set `Strict-Transport-Security: max-age=63072000` HTTP header for all
   responses ([rhbz#2097392])
- Set HTTP headers to prevent caching everything except static files
   ([rhbz#2097383])
- Set HTTP headers to prevent sending referrer ([rhbz#2097391])
- Set cookie option SameSite to Lax ([rhbz#2097393])

### Added
- Add support for fence_mpath to `pcs stonith update-scsi-devices`
   command ([rhbz#2023845])
- Support for cluster UUIDs. New clusters now get a UUID during setup.
   Existing clusters can get a UUID by running the new `pcs cluster
   config uuid generate` command ([rhbz#1950551])
- Add warning regarding move constraints to `pcs status`
   ([rhbz#1730232])
- Support for output formats `json` and `cmd` to `pcs resource config`
   and `pcs stonith config` commands ([rhbz#1874624], [rhbz#1909904])

### Fixed
- Agents not conforming to OCF standard are processed as if they
   conformed to OCF 1.0 - in the same way as before pcs-0.10.12
   ([rhbz#2050274])
- OCF 1.0 agents not conforming to the schema are processed anyway
   ([rhbz#2050274])
- Booth ticket name validation ([rhbz#1791661])
- Adding booth ticket doesn't report 'mode' as an unknown option anymore
   ([rhbz#1786964])
- Preventing fence-loop caused when stonith-watchdog-timeout is set with
   wrong value ([rhbz#1954099])
- Do not allow to create an order constraint for resources in one group
   as that may block Pacemaker ([ghpull#509])

### Deprecated
- Agents not complying with OCF 1.0 schema are processed,
   incompatibilities are listed as warnings. In pcs-0.11, they will be
   reported as errors and prevent pcs from working with such agents.
   ([rhbz#2050274])


Thanks / congratulations to everyone who contributed to this release,
including Alessandro Barbieri, Ivan Devat, lixin, Michal Pospisil,
Miroslav Lisik, Ondrej Mular, Tomas Jelinek and ysf.

Cheers,
Tomas


[ghpull#509]: https://github.com/ClusterLabs/pcs/pull/509
[rhbz#1730232]: https://bugzilla.redhat.com/show_bug.cgi?id=1730232
[rhbz#1786964]: https://bugzilla.redhat.com/show_bug.cgi?id=1786964
[rhbz#1791661]: https://bugzilla.redhat.com/show_bug.cgi?id=1791661
[rhbz#1874624]: https://bugzilla.redhat.com/show_bug.cgi?id=1874624
[rhbz#1909904]: https://bugzilla.redhat.com/show_bug.cgi?id=1909904
[rhbz#1950551]: https://bugzilla.redhat.com/show_bug.cgi?id=1950551
[rhbz#1954099]: https://bugzilla.redhat.com/show_bug.cgi?id=1954099
[rhbz#2023845]: https://bugzilla.redhat.com/show_bug.cgi?id=2023845
[rhbz#2050274]: https://bugzilla.redhat.com/show_bug.cgi?id=2050274
[rhbz#2058278]: https://bugzilla.redhat.com/show_bug.cgi?id=2058278
[rhbz#2068456]: https://bugzilla.redhat.com/show_bug.cgi?id=2068456
[rhbz#2097383]: https://bugzilla.redhat.com/show_bug.cgi?id=2097383
[rhbz#2097391]: https://bugzilla.redhat.com/show_bug.cgi?id=2097391
[rhbz#2097392]: https://bugzilla.redhat.com/show_bug.cgi?id=2097392
[rhbz#2097393]: https://bugzilla.redhat.com/show_bug.cgi?id=2097393
[huntr#220307]: 
https://huntr.dev/bounties/7aa921fc-a568-4fd8-96f4-7cd826246aa5/



More information about the Users mailing list