Pacemaker 2.0.5 - Final

Release info

• Changesets: 534
• Diff: 286 files changed, 23133 insertions(+), 14626 deletions(-)

Known regressions introduced in this release

• crm_resource crashes if given extraneous arguments (fixed in 2.1.5)
• stonith_admin --validate returns incorrect exit status (fixed in 2.1.5)
• crm_mon can leak memory when filtering by node (fixed in 2.1.1)
• The --version argument to crm_resource and crmadmin can exit with status 64 instead of 0 (fixed in 2.1.0)
• crm_node -R may not remove the node from the controller's cache (fixed in 2.1.7)

Features added since Pacemaker-2.0.4

• configuration: Add type="integer" to rule elements, allowing for specifying 64-bit integers and specifying double-precision floating point numbers when type="number"
• daemons: Recognize new OCF agent status codes 190 (degraded) and 191 (degraded master) to be treated as success but displayed as errors
• sbd-integration: support SBD_SYNC_RESOURCE_STARTUP environment variable to better synchronize Pacemaker start-up and shutdown with SBD
• scheduler: Add rule-based tests to op_defaults and rsc_defaults
• scheduler: Add on-fail=demote and no-quorum-policy=demote recovery policies for promoted resources
• tools: Add --resource= to filter crm_mon output for a resource
• tools: Add -P to crmadmin to show pacemakerd status
• tools: In cibsecret, read value to set from input (or stdin) if not specified

Fixes for regressions introduced in Pacemaker-2.0.4

• tools: Add the node name back to bundle instances in crm_mon
• tools: get stonith_admin --list-targets working again

Fixes for regressions introduced in Pacemaker-2.0.3

• tools: Fix adding HTTP headers to crm_mon in daemon mode

Fixes for regressions introduced in Pacemaker-2.0.1

• scheduler: require pre-/post-start notifications correctly

Changes since Pacemaker-2.0.4

• Prevent the bypassing of ACLs by direct IPC (CVE-2020-25654)
• build: Fix a build issue on Fedora s390x.
• build: Fix python2 vs. python3 packaging problems on openSUSE Tumbleweed
• build: Update pkgconfig files for CI testing
• controller: avoid recovery delay when shutdown locks expire
• controller: Log correct timeout for timed-out stonith monitor
• fencer: avoid infinite loop if device is removed during operation
• fencer: avoid possible use-of-NULL when parsing metadata
• libfencing: add port or plug parameter according to metadata on validate if no pcmk_host_argument specified
• libfencing: respect pcmk_host_argument=none on validate
• scheduler: disallow on-fail=stop for stop operations
• scheduler: don't schedule a dangling migration stop if one already occurred
• scheduler: don't select instance to be promoted on a guest that can't run
• scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set
• scheduler: Remove pe_print_expanded_xml print option.
• scheduler: Use pcmk_monitor_timeout as stonith start timeout
• tools: Add management status to crm_mon's group output.
• tools: Add "No active resources" to one case in crm_mon output.
• tools: Allow tags and alerts in cibadmin --scope
• tools: Avoid crm_node on Pacemaker Remote nodes failing when other executor actions are occurring
• tools: Avoid pending fence actions getting stuck in crm_mon display
• tools: "Connectivity is lost" may not be displayed even if the ping communication is lost
• tools: Display stop-all-resources in crm_mon's cluster options
• tools: don't use pssh -q option in cibsecret unless supported
• tools: Fix adding the http-equiv header to crm_mon in daemon mode
• tools: If a clone or group is disabled, display that in crm_mon as part of the resource's header
• tools: crm_node -l and -p now work from Pacemaker Remote nodes
• tools: Don't display crm_resource error messages twice
• tools: Print inactive resources by default with crm_mon xml output
• tools: properly detect local node name in cibsecret
• tools: Revert some crm_resource string-related checks on variables that aren't strings
• tools: Use bash in cibsecret
• xml: Mark new crm_mon attributes as optional in schema

Pacemaker 2.0.5 - Release Candidate 3

• Changes since Pacemaker-2.0.5-rc2
  • build: Fix python2 vs. python3 packaging problems on openSUSE Tumbleweed
  • build: Update pkgconfig files for CI testing
  • tools: Use bash in cibsecret

Pacemaker 1.1.24 - Release Candidate 1

• Changes since Pacemaker-1.1.23
  • Prevent the bypassing of ACLs by direct IPC (CVE-2020-25654)
  • PE: don't select instance to be promoted on a guest that can't run
  • PE: don't schedule a dangling migration stop if one already occurred

Pacemaker 2.0.5 - Release Candidate 2

• Changes since Pacemaker-2.0.5-rc1
  • Prevent the bypassing of ACLs by direct IPC (CVE-2020-25654)
  • scheduler: fix build when DEFAULT_CONCURRENT_FENCING_TRUE is set
  • scheduler: Remove pe_print_expanded_xml print option.
  • tools: Revert some crm_resource string-related checks on variables
    that aren't strings.
  • xml: Mark new crm_mon attributes as optional in schema

Pacemaker 2.0.5 - Release Candidate 1

• Features added since Pacemaker-2.0.4

  • configuration: Add type="integer" to rule elements, allowing for
    specifying 64-bit integers and specifying
    double-precision floating point numbers when
    type="number".
  • daemons: Recognize new OCF agent status codes 190 (degraded) and 191
    (degraded master) to be treated as success but displayed as
    errors.
  • sbd-integration: support SBD_SYNC_RESOURCE_STARTUP environment
    variable to better synchronize Pacemaker start-up
    and shutdown with SBD
  • scheduler: Add rule-based tests to op_defaults and rsc_defaults.
  • scheduler: Add on-fail=demote and no-quorum-policy=demote recovery
    policies for promoted resources.
  • tools: Add --resource= to filter crm_mon output for a resource.
  • tools: Add -P to crmadmin to show pacemakerd status.
  • tools: In cibsecret, read value to set from input (or stdin) if not specified.

• Fixes for regressions introduced in Pacemaker-2.0.4

  • tools: Add the node name back to bundle instances in crm_mon.
  • tools: get stonith_admin --list-targets working again

• Fixes for regressions introduced in Pacemaker-2.0.3

  • tools: Fix adding HTTP headers to crm_mon in daemon mode.

• Fixes for regressions introduced in Pacemaker-2.0.1

  • scheduler: require pre-/post-start notifications correctly.

• Changes since Pacemaker-2.0.4

  • build: Fix a build issue on Fedora s390x.
  • controller: avoid recovery delay when shutdown locks expire
  • controller: Log correct timeout for timed-out stonith monitor
  • fencer: avoid infinite loop if device is removed during operation
  • fencer: avoid possible use-of-NULL when parsing metadata
  • libfencing: add port or plug parameter according to metadata on
    validate if no pcmk_host_argument specified
  • libfencing: respect pcmk_host_argument=none on validate
  • scheduler: disallow on-fail=stop for stop operations
  • scheduler: don't schedule a dangling migration stop if one already occurred
  • scheduler: don't select instance to be promoted on a guest that can't run
  • scheduler: Use pcmk_monitor_timeout as stonith start timeout
  • tools: Add management status to crm_mon's group output.
  • tools: Add "No active resources" to one case in crm_mon output.
  • tools: Allow tags and alerts in cibadmin --scope
  • tools: Avoid crm_node on Pacemaker Remote nodes failing when other
    executor actions are occurring.
  • tools: Avoid pending fence actions getting stuck in crm_mon display
  • tools: Display stop-all-resources in crm_mon's cluster options.
  • tools: don't use pssh -q option in cibsecret unless supported
  • tools: Fix adding the http-equiv header to crm_mon in daemon mode.
  • tools: If a clone or group is disabled, display that in crm_mon as part
    of the resource's header.
  • tools: crm_node -l and -p now work from Pacemaker Remote nodes
  • tools: Don't display crm_resource error messages twice.
  • tools: Print inactive resources by default with crm_mon xml output.
  • tools: properly detect local node name in cibsecret

Pacemaker 1.1.23 - Final

Release info

• Mon Jun 22 2020 Ken Gaillot kgaillot@redhat.com Pacemaker-1.1.23
• Changesets: 115
• Diff: 79 files changed, 2818 insertions(+), 1293 deletions(-)

Known regressions introduced in this release

• None

Features added since Pacemaker-1.1.22

• fencing: improve parameter handling for RHCS-style fence agents
  - add port or plug parameter according to metadata
  - plug parameter shown as non-required in the metadata
• tools: add stonith_admin --delay option (default = 0) to support enforced fencing delay

Changes since Pacemaker-1.1.22

• crmd: properly detect node info requests from remote nodes (regression introduced in 1.1.19)
• crmd: remove node as voter only if lost (regression introduced in 1.1.20)
• crmd: clear leaving node's transient attributes even if there is no DC
• crmd: don't ack same request twice
• crmd: avoid delay when recovering resources after shutdown-lock expiration (BZ#5424)
• fencing: remove dangling 'pending' for completed DC fencing (BZ#5401)
• fencing: avoid possible use-of-NULL when parsing metadata
• fencing: "action" now shown as not required in agent metadata
• libcrmcommon: fix parsing ISO 8601 offsets with a plus sign
• libcrmcluster: use proper type for corosync id when updating node state
• pengine: don't incorporate dependencies' colocations multiple times
• pengine: ensure attenuated scores still have some effect
• pengine: ignore colocation constraints with 0 score
• pengine: make sure cluster-wide maintenance-mode=true overrides per-resource settings

Pacemaker 2.0.4 Final

Regressions introduced in this release

• crm_error prints spurious output when given a negative return code argument (fixed in 2.1.5)
• crm_mon --hide-headers and related options stopped working (fixed in 2.1.2)
• The executor can crash after TLS errors (fixed in 2.1.1)
• crm_mon can leak memory when filtering by resource (fixed in 2.1.1)
• The --version argument to crm_rule, crm_error, crm_diff, and crm_node incorrectly exits with status 64 instead of 0 (fixed in 2.1.1)
• The --version argument to crm_simulate incorrectly exits with status 64 instead of 0 (fixed in 2.1.0)
• crm_mon incorrectly omits the node name for bundle instances (fixed in 2.0.5)
• The stonith_admin --list-targets option stopped working (fixed in 2.0.5)

Features added since Pacemaker-2.0.3

• build: Add support for glib-based unit tests.
• controller: add new feature 'shutdown-locks' to optionally allow a gracefully shutdown node to have the resources locked to it for a configurable time, so that it can be restarted with exactly the same resources running as before
• controller/fencing/scheduler: add new feature 'priority-fencing-delay' to optionally derive the priority of a node from the resource-priorities of the resources it is running. In a fencing-race the node with the highest priority has a certain advantage over the others as fencing requests for that node are executed with an additional delay. controlled via cluster option priority-fencing-delay (default = 0)
• stonith_admin: add --delay option (default = 0) to support enforced fencing delay
• tools: Add --include= and --exclude= to crm_mon
• tools: Add --node= to filter crm_mon output for a node (or tag)
• tools: Allow more fine grained filtering of fence-history in crm_mon
• tools: Allow crm_rule to check some date_specs

Fixes for regressions introduced in Pacemaker-2.0.0

• tools: ensure that getting the local node name using crm_node always works from Pacemaker Remote node command line

Changes since Pacemaker-2.0.3

• build: improve checking headers for C++ fitness
• build: restore build on latest OpenSUSE
• fencing: Report an error getting history in output instead of empty history
• fencing: Improve parameter handling for RHCS-style fence-agents
  - make parameter action shown as not required
  - add port or plug parameter according to metadata
  - plug parameter shown as non-required in the metadata
• controller: clear leaving node's transient attributes even if there is no DC
• controller: don't ack same request twice
• iso8601: Fix crm_time_parse_offset() to parse offset with plus sign.
• libcrmcommon, libpe: validate interval specs correctly
• libcrmcommon: Add pcmk_str_is_infinity, pcmk_str_is_minus_infinity and pcmk__unregister_formats.
• libcrmcommon: Extend what pcmk__split_range can do
• libfencing: Export formatted output functions
• libpe_status: Add node list arg to output messages preventing weird behavior + potential segfaults
• libpe_status: Update the maint mode message for HTML output
• fencing, tools: Fix arguments to stonith-event
• scheduler: don't incorporate dependencies' colocations multiple times
• scheduler: ensure attenuated scores still have some effect
• scheduler: ignore colocation constraints with 0 score
• scheduler: make sure cluster-wide maintenance-mode=true overrides per-resource settings
• scheduler: properly detect whether guest node is fenceable
• scheduler: do not differentiate case where all the nodes have equal priority
• tests: Add tests for pe_cron_range_satisfied
• tests: Add tests for the current behavior of pcmk__split_range
• tools, lib: Use standard pacemaker return codes in crm_rule
• tools: Correct stonith-event arguments in crm_mon
• tools: Fix man pages for crm_mon & crm_diff
• tools: Make crm_mon --interval understand more formats
• tools: Fix --html-title= in crm_mon.
• tools: Print errors to stderr for crm_mon's legacy xml.
• tools: use return codes consistently in stonith_admin
• tools: Use glib for cmdline handling in crm_diff, crm_simulate & crm_error
• xml: Add a new version of the tags schema.
• based: populate cib_nodes when 'cibadmin -R -scope=configuration'
• cibsecret: don't use pssh -q option unless supported
• fencing: avoid infinite loop if device is removed during operation
• fencing: avoid possible use-of-NULL when parsing metadata
• fencing: Remove dangling 'pending' for completed DC fencing. (CLBZ#5401)

Pacemaker 2.0.4 - Release Candidate 3

• Fixes for regressions / new buggy features introduced in Pacemaker-2.0.4-rc1

  • libpe_status: Modify filtering of inactive resources.

• Changes since Pacemaker-2.0.4-rc2

  • based: use crm_exit to free qb-logging on daemon exit.
  • cts: handle last-run= and last-rc-change= as full date strings.

Pacemaker 1.1.23 - Release Candidate 1

• Features added since Pacemaker-1.1.22

  • fencing: improve parameter handling for RHCS-style fence agents
    - add port or plug parameter according to metadata
    - plug parameter shown as non-required in the metadata
  • tools: add stonith_admin --delay option (default = 0) to support enforced fencing delay

• Changes since Pacemaker-1.1.22

  • crmd: properly detect node info requests from remote nodes (regression introduced in 1.1.19)
  • crmd: remove node as voter only if lost (regression introduced in 1.1.20)
  • crmd: clear leaving node's transient attributes even if there is no DC
  • crmd: don't ack same request twice
  • crmd: avoid delay when recovering resources after shutdown-lock expiration (BZ#5424)
  • fencing: remove dangling 'pending' for completed DC fencing (BZ#5401)
  • fencing: avoid possible use-of-NULL when parsing metadata
  • fencing: "action" now shown as not required in agent metadata
  • libcrmcommon: fix parsing ISO 8601 offsets with a plus sign
  • libcrmcluster: use proper type for corosync id when updating node state
  • pengine: don't incorporate dependencies' colocations multiple times
  • pengine: ensure attenuated scores still have some effect
  • pengine: ignore colocation constraints with 0 score
  • pengine: make sure cluster-wide maintenance-mode=true overrides per-resource settings

The priority-fencing-delay feature from the Pacemaker 2.0.4 release can be enabled for this release by building with -DENABLE_PRIORITY_FENCING_DELAY in CFLAGS, but be aware that unexpected behavior may result in mixed-version clusters or after an upgrade to a 2.0 version earlier than 2.0.4.

Pacemaker 2.0.4 - Release Candidate 2

• Fixes for regressions introduced in Pacemaker-2.0.0

  • controller: properly detect remote node info requests

• Fixes for regressions / new buggy features introduced in Pacemaker-2.0.4-rc1

  • libpe_status: Apply node filtering to clone resource lists.
  • libpe_status: Don't filter in pe__bundle_replica_output_text.
  • libpe_status: Don't output unnecessary resource headers.
  • libpe_status: Handle filtering of inactive resources.
  • tools: get stonith_admin --list-targets working again
  • tools: Print inactive resources by default with crm_mon xml output.

• Changes since Pacemaker-2.0.4-rc1

  • fencer: avoid infinite loop if device is removed during operation
  • fencer: avoid possible use-of-NULL when parsing metadata
  • libfencing, fencer: Improve parameter handling for RHCS-style fence-agents
    - add port or plug parameter according to metadata
    - plug parameter shown as non-required in the metadata
  • controld: Avoid delay when recovering resources after shutdown-lock
    expiration. (CLBZ#5424)
  • fencing: Remove dangling 'pending' for completed DC fencing. (CLBZ#5401)