openstack/mistral — Stackers Network https://stackers.network/projects/openstack-mistral/ Weekly code-activity digest for openstack/mistral from Stackers Network. openstack/mistral — Week of 2026-06-13 https://stackers.network/projects/openstack-mistral/2026-06-13 https://stackers.network/projects/openstack-mistral/2026-06-13 Sat, 13 Jun 2026 00:00:00 +0000 Publicize policy sweep. The bulk of the week landed a coordinated set of policies governing which resources can be marked public, with new publicize policies and enforcement added for workbooks, environments, cron_triggers, code_sources, and dynamic_actions. Alongside the new… Publicize policy sweep. The bulk of the week landed a coordinated set of policies governing which resources can be marked public, with new publicize policies and enforcement added for workbooks, environments, cron_triggers, code_sources, and dynamic_actions. Alongside the new policies, the existing publicize behavior was tightened so that those actions — plus code_sources and dynamic_actions management — are restricted to admin only. A small cleanup removed unnecessary expect_errors=True from the policy test suite.

API reference. A ~2,600-line drop added API reference documentation covering all Mistral v2 resources (981192), filling a long-standing gap in the published docs.

Bug fixes. A failure in the keystone client when using trust-scoped tokens was fixed, and a piece of dead management_url code was removed.

Stable and CI. CI for unmaintained/2024.1 was restored, and a stable-only patch excludes a test case tied to bug #2147178.

]]> openstack/mistral — Week of 2026-06-06 https://stackers.network/projects/openstack-mistral/2026-06-06 https://stackers.network/projects/openstack-mistral/2026-06-06 Sat, 06 Jun 2026 00:00:00 +0000 Publicize policy overhaul. The week is almost entirely one coordinated effort: introducing publicize policies and enforcement across Mistral's cross-tenant-shareable resources, and locking the relevant policies down to admin by default. New publicize policy + enforcement landed… Publicize policy overhaul. The week is almost entirely one coordinated effort: introducing publicize policies and enforcement across Mistral's cross-tenant-shareable resources, and locking the relevant policies down to admin by default. New publicize policy + enforcement landed for workbooks, environments, cron_triggers, code_sources, and dynamic_actions, and the existing publicize paths were restricted to admin-only. A companion change also restricts the code_sources and dynamic_actions policies themselves to admins. Each patch was carried across master plus three stable backport branches, accounting for most of the ~7,100 lines of churn. See the workbooks policy addition as the representative change.

Hardening. A separate fix strips sensitive information from the workflow execution context so it no longer leaks through execution data, also backported across the supported branches. Policy tests were tidied to drop unnecessary expect_errors=True usage now that the new enforcement returns proper status codes.

Tooling and CI. A small change disables currently failing jobs to unstick the gate.

]]>