René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"[repo-status] Daily Status Report – June 4, 2026","articleBody":"## ☁️ Apache CloudStack – Daily Status Report\n**Date:** June 4, 2026\n\n---\n\n## 🚀 Latest Release\n\n**[Apache CloudStack 4.22.1.0 (LTS)](https://github.com/apache/cloudstack/releases/tag/4.22.1.0)** — released May 26, 2026 🎉\nMaintenance update with full release notes, install and upgrade guides available at [docs.cloudstack.apache.org]((docs.cloudstack.apache.org/redacted)\n\n---\n\n## 🔀 Recently Merged PRs\n\n| PR | Title | Author |\n|----|-------|--------|\n| [`#13320`](https://github.com/apache/cloudstack/pull/13320) | Stop role from auto-changing when user manually selects a role during account creation | `@gp-santos` |\n| [`#13210`](https://github.com/apache/cloudstack/pull/13210) | Fix snapshot command timeout unit conversion (seconds→ms for qemu-img) | `@erikbocks` |\n| [`#13050`](https://github.com/apache/cloudstack/pull/13050) | FlashArray: fall back to array capacity when pod has no quota | `@genegr` |\n| [`#13238`](https://github.com/apache/cloudstack/pull/13238) | Docs: note MariaDB support in README | `@robertsilen` |\n| [`#13078`](https://github.com/apache/cloudstack/pull/13078) | fix(linstor): surface ambiguous template fallbacks and legacy orphan cleanup | `@jmsperu` |\n| [`#13021`](https://github.com/apache/cloudstack/pull/13021) | Fix validation of CPVM states in multiple zones | `@Tonitzpp` |\n| [`#12961`](https://github.com/apache/cloudstack/pull/12961) | Refactor Quota balance | `@winterhazel` |\n\n---\n\n## 🔥 Active PRs to Watch (updated today)\n\n| PR | Title | Author |\n|----|-------|--------|\n| [`#13349`](https://github.com/apache/cloudstack/pull/13349) | Optimize DB updates: bulk UPDATE instead of row-level locks | `@sureshanaparti` |\n| [`#13345`](https://github.com/apache/cloudstack/pull/13345) | Indirect agent connection improvements | `@sureshanaparti` |\n| [`#13346`](https://github.com/apache/cloudstack/pull/13346) | systemvm: fix VPC VPN issue when network ID \u003e 1000 on Netris | `@weizhouapache` |\n| [`#13330`](https://github.com/apache/cloudstack/pull/13330) | Fix VM migration with attached ISO | `@hsato03` |\n| [`#13032`](https://github.com/apache/cloudstack/pull/13032) | Network Extension: Orchestrate external network devices | `@weizhouapache` |\n| [`#13074`](https://github.com/apache/cloudstack/pull/13074) | feat(backup): incremental NAS backup support for KVM | `@jmsperu` |\n| [`#12711`](https://github.com/apache/cloudstack/pull/12711) | Feature: Key Management Service (KMS) | `@vishesh92` |\n| [`#12124`](https://github.com/apache/cloudstack/pull/12124) | New Dell EMC ECS Object Storage Plugin | `@mhkadhum` |\n| [`#13293`](https://github.com/apache/cloudstack/pull/13293) | Add draft project security threat-model document | `@potiuk` |\n| [`#12321`](https://github.com/apache/cloudstack/pull/12321) | Deal with Storage Manager tech debt | `@DaanHoogland` |\n\n---\n\n## 🐛 New Issues This Week (June 1–4)\n\nA very active week for issue reporting! Highlights:\n\n### 🔒 Security Hardening Series\nContributor **`@davift`** filed a detailed batch of hardening requests:\n- [`#13343`](https://github.com/apache/cloudstack/issues/13343) – Block abusers by IP (rate limiting/IP banning)\n- [`#13342`](https://github.com/apache/cloudstack/issues/13342) – Request limits and throttling defaults\n- [`#13341`](https://github.com/apache/cloudstack/issues/13341) – Weak default passwords \u0026 DB encryption key\n- [`#13340`](https://github.com/apache/cloudstack/issues/13340) – Per-account/user source CIDR allowlist\n- [`#13339`](https://github.com/apache/cloudstack/issues/13339) – 2FA required before destructive operations\n- [`#13338`](https://github.com/apache/cloudstack/issues/13338) – Email alerts for security-relevant events\n- [`#13335`](https://github.com/apache/cloudstack/issues/13335)–[`#13337`](https://github.com/apache/cloudstack/issues/13337) – 2FA configuration improvements\n\nContributor **`@YLChen-007`** filed several sensitive log exposure vulnerability reports:\n- [`#13311`](https://github.com/apache/cloudstack/issues/13311) – ApiServlet logs duplicate sensitive query params\n- [`#13309`](https://github.com/apache/cloudstack/issues/13309) – Script.java command sanitization vulnerability\n- [`#13308`](https://github.com/apache/cloudstack/issues/13308) – Plaintext passwords in OVM3 config\n- [`#13307`](https://github.com/apache/cloudstack/issues/13307) – Plaintext VM user-data \u0026 SSH keys in logs\n- [`#13306`](https://github.com/apache/cloudstack/issues/13306) – Keystore credentials exposed in logs\n- [`#13305`](https://github.com/apache/cloudstack/issues/13305) – SSL private key exposure\n- [`#13304`](https://github.com/apache/cloudstack/issues/13304) – Auth credentials exposed in system logs\n- [`#13303`](https://github.com/apache/cloudstack/issues/13303) – Credential exposure via param serialization\n\n### 📋 Other Notable Issues\n- [`#13347`](https://github.com/apache/cloudstack/issues/13347) – Persistent routes on Virtual Router lost after reboot\n- [`#13331`](https://github.com/apache/cloudstack/issues/13331) – Blank volume snapshots list (bug)\n- [`#13329`](https://github.com/apache/cloudstack/issues/13329) – Zone wizard: can't re-add host if initial add fails\n- [`#13328`](https://github.com/apache/cloudstack/issues/13328) – No option to delete the SystemVM template\n- [`#13326`](https://github.com/apache/cloudstack/issues/13326) – No option to update the Bucket region\n- [`#13324`](https://github.com/apache/cloudstack/issues/13324) – Missing `ErrorinPrepareForMaintenance` event\n- [`#13313`](https://github.com/apache/cloudstack/issues/13313) – Show VM name in backup events\n\n---\n\n## 📊 Milestone Progress\n\n### 4.23.0 (Next Major Release)\n- ✅ Closed: **136** issues/PRs\n- 🔧 Open: **186** issues/PRs\n- Keep up the momentum — the pipeline is flowing well! 💪\n\n---\n\n## ✅ Actionable Next Steps for Maintainers\n\n1. **🔒 Security review needed**: The large batch of security hardening issues (`#13303`–`#13343`) requires triage — many touch sensitive defaults and log exposure. Consider assigning dedicated security-focused reviewers.\n2. **👀 Review ready PRs**: [`#13349`](https://github.com/apache/cloudstack/pull/13349) (bulk DB UPDATE optimization), [`#13345`](https://github.com/apache/cloudstack/pull/13345) (agent connection improvements), and [`#13346`](https://github.com/apache/cloudstack/pull/13346) (VPN fix) all need attention.\n3. **🗺️ Big features in flight**: KMS (`#12711`), incremental NAS backup (`#13074`), Network Extension (`#13032`), and Dell EMC ECS plugin (`#12124`) are all actively updated — these deserve review bandwidth.\n4. **🧹 Tech debt**: PR [`#12321`](https://github.com/apache/cloudstack/pull/12321) (Storage Manager cleanup) has been open a while — worth prioritizing to reduce long-term maintenance cost.\n5. **📝 Threat model**: [`#13293`](https://github.com/apache/cloudstack/pull/13293) (draft security threat model) is a great initiative — community input and review is encouraged!\n\n---\n\n*Generated automatically on June 4, 2026. Keep building amazing cloud infrastructure! ☁️⚡*\n\n\n\n\n\u003e Generated by [Repo Status](https://github.com/apache/cloudstack/actions/runs/26975777189) · sonnet46 833.2K · [◷](https://github.com/search?q=repo%3Aapache%2Fcloudstack+is%3Aissue+%22gh-aw-workflow-call-id%3A+apache%2Fcloudstack%2Fdaily-repo-status%22\u0026type=issues)\n\u003e\n\u003cdetails\u003e\n\u003csummary\u003eAdd this agentic workflows to your repo\u003c/summary\u003e\n\nTo install this agentic workflow, run\n\n```\ngh aw add githubnext/agentics/workflows/repo-status.md@main\n```\n\u003c/details\u003e\n\n\n\u003c!-- gh-aw-agentic-workflow: Repo Status, engine: copilot, version: 1.0.52, model: claude-sonnet-4.6, id: 26975777189, workflow_id: daily-repo-status, run: https://github.com/apache/cloudstack/actions/runs/26975777189 --\u003e\n\n\u003c!-- gh-aw-workflow-id: daily-repo-status --\u003e\n\u003c!-- gh-aw-workflow-call-id: apache/cloudstack/daily-repo-status --\u003e","author":{"url":"https://github.com/github-actions[bot]","@type":"Person","name":"github-actions[bot]"},"datePublished":"2026-06-04T19:57:04.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/13350/cloudstack/issues/13350"}