René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"[repo-status] Daily Status Report – June 5, 2026","articleBody":"## ☁️ Apache CloudStack — Daily Status Report\n*Generated: June 5, 2026*\n\n---\n\n## 🚀 Latest Release\n\n**[Apache CloudStack 4.22.1.0 (LTS)](https://github.com/apache/cloudstack/releases/tag/4.22.1.0)** — released May 26, 2026 🎉  \nThe latest 4.22 LTS maintenance release is live, building on the security hardening from 4.22.0.1. Users still on 4.22.0.x are encouraged to upgrade!\n\n---\n\n## 🔀 Recently Merged (May 21 – June 4)\n\nA healthy flow of improvements landed on `main`:\n\n| PR | Description | Author |\n|----|-------------|--------|\n| [`#13028`](https://github.com/apache/cloudstack/pull/13028) | Indirect agent connection improvements | `@sureshanaparti` |\n| [`#13320`](https://github.com/apache/cloudstack/pull/13320) | Fix role auto-change during account creation | `@gp-santos` |\n| [`#13247`](https://github.com/apache/cloudstack/pull/13247) | Show network rate for compute/system/network offerings | `@sudo87` |\n| [`#12053`](https://github.com/apache/cloudstack/pull/12053) | WebSocket server framework + logs web session | `@shwstppr` |\n| [`#11814`](https://github.com/apache/cloudstack/pull/11814) | Extensions: sync \u0026 download functionalities | `@shwstppr` |\n| [`#13210`](https://github.com/apache/cloudstack/pull/13210) | Convert snapshot command timeouts | `@erikbocks` |\n| [`#13050`](https://github.com/apache/cloudstack/pull/13050) | FlashArray: fall back to array capacity when pod has no quota | `@genegr` |\n| [`#13078`](https://github.com/apache/cloudstack/pull/13078) | fix(linstor): surface ambiguous template fallbacks \u0026 legacy orphan cleanup | `@jmsperu` |\n| [`#13021`](https://github.com/apache/cloudstack/pull/13021) | Fix CPVM state validation in multiple zones | `@Tonitzpp` |\n| [`#12961`](https://github.com/apache/cloudstack/pull/12961) | Refactor Quota balance | `@winterhazel` |\n| [`#12975`](https://github.com/apache/cloudstack/pull/12975) | Live scaling for VMs with fixed service offerings on KVM | `@bernardodemarco` |\n| [`#12911`](https://github.com/apache/cloudstack/pull/12911) | Add ROOT CAs to trust store; force-provision certs on hosts \u0026 systemVMs | `@vishesh92` |\n| [`#13238`](https://github.com/apache/cloudstack/pull/13238) | docs: note MariaDB support in README | `@robertsilen` |\n\n---\n\n## 🔍 Open PRs Needing Attention\n\n### Ready for Review / Testing\n\n| PR | Description | Labels |\n|----|-------------|--------|\n| [`#13359`](https://github.com/apache/cloudstack/pull/13359) | UI: Fix VNF NIC mapping network select always disabled | `component:UI` |\n| [`#13356`](https://github.com/apache/cloudstack/pull/13356) | Fix public IP ranges form for public traffic type | `component:UI` |\n| [`#13330`](https://github.com/apache/cloudstack/pull/13330) | Fix VM migration with attached ISO | `needs-testing`, `needs-review` |\n| [`#13287`](https://github.com/apache/cloudstack/pull/13287) | Remove externalId param when creating networks | `needs-testing`, `needs-review` |\n| [`#13023`](https://github.com/apache/cloudstack/pull/13023) | Prevent template downloads to read-only secondary storage | `needs-testing` |\n| [`#13236`](https://github.com/apache/cloudstack/pull/13236) | Introduce Quota resource statement API | `component:api`, `component:quota` |\n| [`#13033`](https://github.com/apache/cloudstack/pull/13033) | Add Keycloak OAuth provider | `needs-testing` |\n\n### Major In-Progress Features (Draft)\n\n| PR | Feature |\n|----|---------|\n| [`#12991`](https://github.com/apache/cloudstack/pull/12991) | 🆕 Veeam KVM backup integration |\n| [`#12711`](https://github.com/apache/cloudstack/pull/12711) | 🔑 Key Management Service (KMS) |\n| [`#12617`](https://github.com/apache/cloudstack/pull/12617) | 💾 CLVM enhancements and fixes |\n| [`#13032`](https://github.com/apache/cloudstack/pull/13032) | 🌐 Network Extension: orchestrate external network devices |\n| [`#12737`](https://github.com/apache/cloudstack/pull/12737) | 🔡 CloudStack DNS framework (PowerDNS integration) |\n| [`#13354`](https://github.com/apache/cloudstack/pull/13354) / [`#13353`](https://github.com/apache/cloudstack/pull/13353) | ⚡ N+1 query eliminations (networking \u0026 storage) |\n\n---\n\n## 🔒 Security Findings — Action Needed\n\nA batch of **13 security-related issues** was filed on June 1 covering **plaintext credential exposure in logs and exception messages** across multiple components:\n\n- `SSHCmdHelper`, `OvmDiscoverer`, `KVM Host`, `ApiServlet`, `Script.java`, `Baremetal PING PXE`, `CIFS storage`, `IPMI`, `AsyncJob` logging\n\n\u003e ⚠️ **Maintainers**: These issues involve sensitive credential and password leakage in log output. Please review, prioritize, and assign accordingly. See issues [`#13296`](https://github.com/apache/cloudstack/issues/13296)–[`#13311`](https://github.com/apache/cloudstack/issues/13311).\n\n---\n\n## 🐛 New Bug Reports\n\n| Issue | Title | Status |\n|-------|-------|--------|\n| [`#13358`](https://github.com/apache/cloudstack/issues/13358) | VNF NIC Mapping — network select always disabled | ✅ PR#13359 ready |\n| [`#13357`](https://github.com/apache/cloudstack/issues/13357) | Reverting snapshot of ROOT encrypted volume → non-bootable VM | 🔍 Needs triage |\n| [`#13355`](https://github.com/apache/cloudstack/issues/13355) | `network_rate` DB column too small (SMALLINT overflow) | 🔍 Needs triage |\n\n---\n\n## 🌟 Highlights \u0026 Project Momentum\n\n- 👋 **New contributors**: `@jmsperu` and `@GaOrtiga` added to the collaborators list!\n- 📦 **Release cadence** is healthy: 4.22.1.0 shipped just 18 days after the 4.22.0.1 security release\n- 🔐 **Security posture**: The community is actively filing issues for log credential leakage — great proactive hygiene!\n- ⚡ **Performance work**: Draft PRs tackling N+1 query patterns in networking and storage layers\n- 🔌 **Ecosystem expansion**: WebSocket framework, Veeam backup, Keycloak OAuth, PowerDNS, and KMS all actively progressing\n\n---\n\n## ✅ Recommended Next Steps for Maintainers\n\n1. **Review \u0026 triage** the 13 credential-exposure security issues ([`#13296`](https://github.com/apache/cloudstack/issues/13296)–[`#13311`](https://github.com/apache/cloudstack/issues/13311)) — assign owners and target milestones\n2. **Merge PR [`#13359`](https://github.com/apache/cloudstack/pull/13359)** — the VNF NIC fix is straightforward with a ready PR\n3. **Test PR [`#13330`](https://github.com/apache/cloudstack/pull/13330)** — VM migration with ISO attached\n4. **Review PR [`#13033`](https://github.com/apache/cloudstack/pull/13033)** — Keycloak OAuth needs testing attention\n5. **Triage** [`#13357`](https://github.com/apache/cloudstack/issues/13357) (encrypted volume snapshot) and [`#13355`](https://github.com/apache/cloudstack/issues/13355) (network_rate type) for target release\n6. **Check stale drafts** — some PRs carry `no-pr-activity` or `status:has-conflicts` labels and could use a nudge\n\n---\n*🤖 Auto-generated by GitHub Copilot | Apache CloudStack repo*\n\n\n\n\n\u003e Generated by [Repo Status](https://github.com/apache/cloudstack/actions/runs/27036677657) · sonnet46 1.3M · [◷](https://github.com/search?q=repo%3Aapache%2Fcloudstack+is%3Aissue+%22gh-aw-workflow-call-id%3A+apache%2Fcloudstack%2Fdaily-repo-status%22\u0026type=issues)\n\u003e\n\u003cdetails\u003e\n\u003csummary\u003eAdd this agentic workflows to your repo\u003c/summary\u003e\n\nTo install this agentic workflow, run\n\n```\ngh aw add githubnext/agentics/workflows/repo-status.md@main\n```\n\u003c/details\u003e\n\n\n\u003c!-- gh-aw-agentic-workflow: Repo Status, engine: copilot, version: 1.0.52, model: claude-sonnet-4.6, id: 27036677657, workflow_id: daily-repo-status, run: https://github.com/apache/cloudstack/actions/runs/27036677657 --\u003e\n\n\u003c!-- gh-aw-workflow-id: daily-repo-status --\u003e\n\u003c!-- gh-aw-workflow-call-id: apache/cloudstack/daily-repo-status --\u003e","author":{"url":"https://github.com/github-actions[bot]","@type":"Person","name":"github-actions[bot]"},"datePublished":"2026-06-05T19:56:30.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/13360/cloudstack/issues/13360"}