Announcing Atmosphere v4.2.10 - Enhanced Security and Efficiency

Discover Atmosphere v4.2.10—now with enhanced network security, streamlined image management, and faster upgrades.

VEXXHOST is proud to introduce the latest release of Atmosphere, v4.2.10, which delivers a host of improvements aimed at bolstering network security and enhancing the overall efficiency of cloud operations. 

The release's key highlight is the pre-pulling of ovn-controller images, which cuts down on system update downtime and keeps network connections stable. Additionally, the new image name prefix feature makes it easier to work with image proxies and caching, reducing the complexity of image management by removing the need for separate inventory overrides. 

New features 

• Neutron Policy Checks
  Enhanced security is achieved by adding a POST method, /address-pair, to verify that ports involved in address pair bindings are created within the same project. This feature empowers non-admin users to manage address pair bindings securely and ensures resources are not inadvertently exposed to other projects. 
• Image Name Prefixes 
  Integration with image proxies and caching mechanisms is now streamlined through the ability to specify prefixes for image names. This eliminates the need for maintaining separate inventory overrides for each image, simplifying image management across the board. 
• Pre-Pulled ovn-controller Images 
  To optimize the upgrade process, the ovn-controller image is now pre-pulled on nodes before the deployment of the Helm chart. This proactive measure significantly reduces the time required to transition to the new version of the ovn-controller image, enhancing service availability during upgrades.

Bug Fixes

• neutron-ironic-agent Service Startup
  Resolved a bug where the neutron-ironic-agent service failed to start, ensuring smoother operation and reliability. 
• Non-Root User Operation for OVS and OVN with DPDK
  Addressed a critical issue where QEMU could not write the vhost user socket file due to both OVS and OVN running as the root user. The components are now configured to run with non-root user ID 42424, aligning with QEMU and other OpenStack services inside the container for improved security. 
• CI Tooling for Image Pinning
  Fixed a regression in the CI tooling caused by the new atmosphere_image_prefix variable, restoring its proper functionality for pinning images. 
• Corrected vTPM Documentation
  Updated the documentation for using the virtual Trusted Platform Module (vTPM) to point to the accurate metadata properties for images, ensuring clarity and correctness. 

Additional Notes

The release also marks a new era of meticulous documentation with the integration of reno for release notes, ensuring that each change is accurately captured and communicated. In parallel, we've optimized our continuous integration process, now bypassing heavy CI jobs for release note updates to maintain our commitment to operational efficiency.

We invite you to experience the heightened security, improved efficiency, and refined operational performance that Atmosphere v4.2.10 has to offer.

These critical updates reflect our commitment to providing a platform that not only addresses today's cloud computing challenges but also proactively prepares for future demands. As the cloud landscape advances, it's essential to keep pace with these changes. We encourage our users to follow the progress of Atmosphere to leverage the full potential of these updates. 

If you require support or are interested in trying Atmosphere, we invite you to reach out to us. Our team is prepared to assist you in harnessing the power of these new features and ensuring that your cloud infrastructure remains at the forefront of innovation and reliability. Contact us today to explore how these updates can enhance your cloud experience and drive your business forward.