openstack
/
heat
Code Issues Proposed changes
heat/releasenotes/notes
History
Zane Bitter 6e16c051ba Fix entropy problems with OS::Random::String 
When generating a random string, once we had selected from the various
required pools, we continued by selecting a pool at random and then
selecting a character from that pool at random. This did not take into
account the differing sizes of the available pools, nor the fact that the
same character could appear in multiple pools, which resulted in a
non-uniform probability distribution of characters. Since users mostly make
use of this feature to generate default passwords for services they are
deploying, this would result in the generated passwords having slightly
less entropy than expected (and pathological cases were possible).

Rectify this by always selecting non-constrained characters from a single
combined pool, and by ensuring that each character appears only once in any
pool we're selecting from.

Since we also want to use this method to generate passwords for OpenStack
Users, the new implementation is in a separate module in heat.common rather
than mixed in with the resource's logic. Also, use a StringIO object to
collect the characters rather than repeatedly appending to a string.

Change-Id: Ia7b63e72c1e3c0649290caf4fea8a32f7f89560b
Closes-Bug: #1757300
Related-Bug: #1666129
Related-Bug: #1444429
 		2018-03-20 20:48:38 -04:00
..
.placeholder Add reno for release notes management 2015-12-01 15:04:39 +00:00
add-aodh-composite-alarm-f8eb4f879fe0916b.yaml Support composite alarm 2016-12-13 16:31:16 +08:00
add-cephfs-share-protocol-033e091e7c6c5166.yaml Add CEPHFS manila share protocol 2017-02-14 16:11:56 +01:00
add-contains-function-440aa7184a07758c.yaml Add releasenotes for 'contains' function supporting 2017-06-22 11:51:52 +00:00
add-hostname-hints-security_groups-to-container-d3b69ae4b6f71fc7.yaml Sync releasenote for Queens 2018-02-09 16:20:07 +00:00
add-list-concat-unique-function-5a87130d9c93cb08.yaml Support 'list_concat_unique' 2017-05-18 01:29:48 +00:00
add-list_concat-function-c28563ab8fb6362e.yaml Implement list_concat function 2017-04-20 19:08:25 +03:00
add-tags-for-neutron-router-43d72e78aa89fd07.yaml Support adding tags for router 2017-04-28 03:24:46 +00:00
add-template-dir-config-b96392a9e116a2d3.yaml Add `template_dir` to config 2016-05-27 13:55:55 +08:00
add-zun-client-plugin-dfc10ecd1a6e98be.yaml Implement Zun client plugin 2017-04-26 06:06:41 +00:00
add-zun-container-c31fa5316237b13d.yaml Add Container to Zun resources 2017-06-22 20:49:01 +00:00
api-outputs-6d09ebf5044f51c3.yaml Add release note for bp/api-call-output 2015-12-29 15:00:27 +03:00
barbican-container-77967add0832d51b.yaml Add reno for barbican container 2016-03-03 04:09:43 +00:00
bp-mistral-new-resource-type-workflow-execution-748bd37faa3e427b.yaml Implements custom resource type managed by Mistral workflows 2017-05-24 17:52:32 +02:00
bp-support-conditions-1a9f89748a08cd4f.yaml Add releasenote for conditions function 2016-09-14 10:47:45 +08:00
bp-support-host-aggregate-fbc4097f4e6332b8.yaml Add release note for bp/support-host-aggregate 2015-12-22 02:05:54 +00:00
bp-support-neutron-qos-3feb38eb2abdcc87.yaml Add release note for bp/support-neutron-qos 2015-12-22 01:04:15 +00:00
bp-support-rbac-policy-fd71f8f6cc97bfb6.yaml Add release notes for new added resource OS::Neutron::RBACPolicy 2016-01-29 18:21:52 +08:00
bp-support-trunk-port-733019c49a429826.yaml New resource: Neutron Trunk 2017-06-27 09:41:21 +02:00
bp-update-cinder-resources-e23e62762f167d29.yaml Add resource OS::Cinder::QoSAssociation 2016-09-19 12:30:23 +08:00
cancel_without_rollback-e5d978a60d9baf45.yaml Add REST api support for cancel without rollback 2017-11-08 17:08:43 +05:30
change-heat-keystone-user-name-limit-to-255-bd076132b98744be.yaml Change user name limit to 255 characters 2017-05-17 01:32:54 +08:00
cinder-backup-cb72e775681fb5a5.yaml Add reno note on volumes.backups_enabled option 2016-08-18 19:03:12 +03:00
cinder-qos-specs-resource-ca5a237ebc114729.yaml Add releasenotes for OS::Cinder::QoSSpecs 2016-09-09 01:35:26 +00:00
cinder-quota-resource-f13211c04020cd0c.yaml Add OS::Cinder::Quota resource 2016-08-17 03:26:56 -04:00
configurable-server-name-limit-947d9152fe9b43ee.yaml Allow the server name limit to be configurable 2016-05-11 17:03:42 -07:00
converge-flag-for-stack-update-e0e92a7fe232f10f.yaml Add converge flag in stack update for observing on reality 2017-08-07 05:39:29 +00:00
deployment-swift-data-server-property-51fd4f9d1671fc90.yaml deployment_swift_data property for server resources 2017-06-07 09:33:13 +00:00
deprecate-nova-floatingip-resources-d5c9447a199be402.yaml Fix python-novaclient 8.0.0 related issues 2017-05-16 16:12:04 +02:00
deprecate-threshold-alarm-5738f5ab8aebfd20.yaml Deprecate OS::Aodh::Alarm 2017-11-14 03:44:09 +00:00
designate-v2-support-0f889e9ad13d4aa2.yaml Release notes for designate v2 support 2017-01-16 03:54:43 +00:00
dns-resolution-5afc1c57dfd05aff.yaml Add reno note for DNS functionality 2016-07-26 10:34:59 +05:30
doc-migrate-10c968c819848240.yaml Add release notes for heat 2017-08-17 10:08:39 +00:00
drop-watch-rule-watch-data-tables-9ecb8da574611236.yaml Remove db api and tables for CloudWatch 2018-01-28 09:35:07 +05:30
environment-merging-d623362fac1279f7.yaml Add doc and reno note for environment merging 2016-08-29 20:20:07 +05:30
environment_validate_template-fee21a03bb628446.yaml Return Environment from validate_template 2017-11-14 17:35:52 +00:00
event-list-nested-depth-80081a2a8eefee1a.yaml Release note, api-ref for event list nested_depth 2016-08-04 12:18:31 +12:00
event-transport-302d1db6c5a5daa9.yaml Add release notes for event-transport 2016-01-13 14:17:38 +01:00
external-resources-965d01d690d32bd2.yaml Add support for a resource level external_id 2016-08-12 15:59:14 +08:00
fix-attachments-type-c5b6fb5b4c2bcbfe.yaml Deprecate 'attachments' in favor of 'attachments_list' 2017-04-12 10:41:28 +01:00
force-delete-nova-instance-6ed5d7fbd5b6f5fe.yaml ForceDelete Instance 2017-11-24 09:16:51 +08:00
get-server-webmks-console-url-f7066a9e14429084.yaml Support to get webmks console url for server 2017-03-31 02:48:17 +00:00
give-me-a-network-67e23600945346cd.yaml Adds releasenote for 'support-auto-none-special-network' 2017-05-18 01:41:44 +00:00
glance-image-tag-6fa123ca30be01aa.yaml Glance image tag support release notes 2016-05-20 11:23:32 +05:30
hidden-designate-domain-record-res-d445ca7f1251b63d.yaml Hidden OS::Designate::Record and OS::Designate::Domain 2017-10-18 01:27:34 +00:00
hidden-heat-harestarter-resource-a123479c317886a3.yaml Remove OS::Heat::HARestarter 2018-01-29 08:59:00 +00:00
immutable-parameters-a13dc9bec7d6fa0f.yaml Add release notes for Immutable Parameters feature 2016-02-26 08:00:46 -06:00
keystone-domain-support-e06e2c65c5925ae5.yaml Release notes for OS::Keystone::Domain 2017-01-05 23:24:34 +05:30
keystone-project-allow-get-attribute-b382fe97694e3987.yaml Add attributes schema for OS::Keystone::Project 2017-09-25 10:18:26 +08:00
keystone-region-ce3b435c73c81ce4.yaml Release notes for Keystone Region resource plugin 2016-02-05 14:59:56 +05:30
know-limit-releasenote-4d21fc4d91d136d9.yaml Add release notes for heat 2017-08-17 10:08:39 +00:00
legacy-stack-user-id-cebbad8b0f2ed490.yaml Remove unconditional return of user_id 2016-01-13 11:58:24 -06:00
magnum-resource-update-0f617eec45ef8ef7.yaml Add releasenotes for Magnum resource replacement 2017-05-17 13:05:52 +08:00
make_url-function-d76737adb1e54801.yaml Add a make_url intrinsic function 2017-03-14 15:34:31 -04:00
map-replace-function-26bf247c620f64bf.yaml Add reno for map_replace and fix docs nit 2016-07-20 08:46:36 +01:00
mark-combination-alarm-as-placeholder-resource-e243e9692cab52e0.yaml Mark combination alarm as None resource 2017-06-26 18:38:11 +08:00
mark-unhealthy-phys-id-e90fd669d86963d1.yaml Allow mark-unhealthy by physical resource ID 2016-12-05 14:58:20 -05:00
monasca-period-f150cdb134f1e036.yaml Add period property to Monasca Notification resource 2016-06-17 12:33:29 +05:30
monasca-supported-71c5373282c3b338.yaml Mark monasca resources supported in release notes 2016-05-20 11:45:11 +05:30
neutron-address-scope-ce234763e22c7449.yaml Support neutron address scope 2016-01-19 15:26:40 +08:00
neutron-lbaas-v2-resources-c0ebbeb9bc9f7a42.yaml Add release notes for new v2 Load Balancer resources 2016-03-02 09:44:11 -06:00
neutron-quota-resource-7fa5e4df8287bf77.yaml Add OS::Neutron::Quota resource 2017-01-11 20:11:49 +00:00
neutron-segment-support-a7d44af499838a4e.yaml Add releasenote for neutron segment support 2017-04-25 14:04:33 +05:30
nova-quota-resource-84350f0467ce2d40.yaml Add OS::Nova::Quota resource 2016-11-11 15:20:15 +00:00
octavia-resources-0a25720e16dfe55d.yaml Add octavia L7Rule Resource 2018-01-23 13:03:55 +05:30
parameter-group-for-nested-04559c4de34e326a.yaml Add ParameterGroups for the nested stack during stack.validate 2017-05-18 15:10:32 +05:30
parameter-tags-148ef065616f92fc.yaml Added tags attribute to the template parameter 2017-11-13 15:51:19 +05:30
policy-in-code-124372f6cdb0a497.yaml [policy in code] part 7 add sample and releasenote 2017-12-13 10:58:56 +08:00
project-tags-orchestration-If9125519e35f9f95ea8343cb07c377de9ccf5edf.yaml Add project tags to heat orchestration 2018-01-09 16:33:13 +00:00
random-string-entropy-9b8e23874cd79b8f.yaml Fix entropy problems with OS::Random::String 2018-03-20 20:48:38 -04:00
remove-SSLMiddleware-2f15049af559f26a.yaml Remove SSLMiddleware 2017-10-18 02:19:46 +00:00
remove-cloudwatch-api-149403251da97b41.yaml Remove CloudWatch API 2018-01-28 09:11:17 +05:30
remove-heat-resourcetype-constraint-b679618a149fc04e.yaml Remove broken heat.resource_type custom constraint 2017-08-01 13:35:16 -04:00
repeat-support-setting-permutations-fbc3234166b529ca.yaml Add release note for repeat improvement 2017-07-20 11:17:16 +08:00
resource-search-3234afe601ea4e9d.yaml Adds release notes for resource-search 2016-02-17 21:15:59 +05:30
resource_group_removal_policies_mode-d489e0cc49942e2a.yaml Add removal_policies_mode to ResourceGroup 2018-01-04 09:41:15 +00:00
restrict_update_replace-68abece58cf3f6a0.yaml Release note for resource update restrict 2016-02-26 09:46:17 +05:30
sahara-job-resource-84aecc11fdf1d5af.yaml Add reno for OS::Sahara::Job 2017-01-18 16:46:00 +04:00
senlin-resources-71c856dc62d0b407.yaml Add release notes for senlin resources 2016-02-26 14:23:28 +00:00
server-add-user-data-update-policy-c34646acfaada4d4.yaml Add user_data_update_policy property to OS::Nova::Server 2016-03-03 01:52:51 +00:00
server-ephemeral-bdm-v2-55e0fe2afc5d8b63.yaml Ephemeral disk size support for server bdm_v2 2016-12-08 15:27:55 +04:00
server-group-soft-policy-8eabde24bf14bf1d.yaml Add reno for soft policies supporting 2017-06-28 07:32:28 +00:00
server-side-multi-env-7862a75e596ae8f5.yaml Release notes for server-side env resolution 2016-02-15 15:36:51 -05:00
set-networks-for-trove-cluster-b997a049eedbad17.yaml Enable to specify network for Trove Cluster 2017-12-15 11:52:49 +00:00
set-tags-for-network-resource-d6f3843c546744a2.yaml Support adding tags for network 2017-04-27 03:52:20 +00:00
set-tags-for-port-471155bb53436361.yaml Support set tags for neutron port 2017-04-28 03:23:46 +00:00
set-tags-for-subnet-17a97b88dd11de63.yaml Support adding tags for subnet 2017-04-28 03:24:13 +00:00
set-tags-for-subnetpool-d86ca0d7e35a05f1.yaml Support set tags for neutron subnetpool 2017-04-28 03:24:28 +00:00
stack-definition-in-functions-3f7f172a53edf535.yaml Add release note for StackDefinition API 2017-09-27 10:12:27 -04:00
store-resource-attributes-8bcbedca2f86986e.yaml Always cache attributes in outputs in Resource.node_data() 2017-07-10 22:06:45 -04:00
subnet-pool-resource-c32ff97d4f956b73.yaml Add note for subnet pool support 2015-12-15 17:23:33 +05:30
support-rbac-for-qos-policy-a55434654e1dd953.yaml Support object_type 'qos_policy' for neutron rbac 2017-06-08 10:27:27 +08:00
sync-queens-releasenote-13f68851f7201e37.yaml Sync releasenote for Queens 2018-02-09 16:20:07 +00:00
system-random-string-38a14ae2cb6f4a24.yaml Replace random with SystemRandom for RandomString 2018-01-31 15:57:20 +02:00
template-validate-improvements-52ecf5125c9efeda.yaml Release notes for template validation improvements 2016-02-05 14:48:48 +05:30
yaql-function-4895e39555c2841d.yaml Add reno for yaql function 2016-07-15 13:18:08 +00:00
zaqar-notification-a4d240bbf31b7440.yaml Correct resource type in zaqar notification releasenotes 2017-02-09 14:55:51 +08:00