René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"[repo-status] Daily Status Report – June 6, 2026","articleBody":"## 🌟 Apache CloudStack — Daily Status Report\n**Date:** June 6, 2026\n\n---\n\n## 🚀 Recent Releases\n\n| Release | Type | Date |\n|---------|------|------|\n| [4.22.1.0 (LTS)](https://github.com/apache/cloudstack/releases/tag/4.22.1.0) | Maintenance | May 26, 2026 |\n| [4.22.0.1 (LTS Security)](https://github.com/apache/cloudstack/releases/tag/4.22.0.1) | Security (7 CVEs fixed) | May 8, 2026 |\n| [4.20.3.0 (LTS)](https://github.com/apache/cloudstack/releases/tag/4.20.3.0) | Maintenance | Apr 17, 2026 |\n\nThe security release fixed critical CVEs including unauthenticated command injection in direct download templates and unauthorized cross-tenant access in the Proxmox extension. Great job, security team! 🔐\n\n---\n\n## 📬 Active Pull Requests\n\n### 🔥 Hot PRs (updated today)\n\n| # | Title | Author | Status |\n|---|-------|--------|--------|\n| [`#13363`](https://github.com/apache/cloudstack/pull/13363) | Drain per-host reservation when VM starts on different host | `@Kukunin` | needs review |\n| [`#13361`](https://github.com/apache/cloudstack/pull/13361) | KVM: apply rbd_default_data_pool for volumes from templates | `@bhouse-nexthop` | needs review |\n| [`#13022`](https://github.com/apache/cloudstack/pull/13022) | NPE fix in `listProjectRoles` for removed project | `@Tonitzpp` | needs review |\n| [`#12991`](https://github.com/apache/cloudstack/pull/12991) | Backup: Veeam KVM integration | `@shwstppr` | in testing |\n| [`#12617`](https://github.com/apache/cloudstack/pull/12617) | CLVM enhancements and fixes | `@Pearl1594` | in testing |\n\n### 🌱 Major Features in Progress\n\n| # | Feature | Author |\n|---|---------|--------|\n| [`#12711`](https://github.com/apache/cloudstack/pull/12711) | 🔑 Key Management Service (KMS) | `@vishesh92` |\n| [`#13032`](https://github.com/apache/cloudstack/pull/13032) | 🌐 Network Extension: Orchestrate external network devices | `@weizhouapache` |\n| [`#13033`](https://github.com/apache/cloudstack/pull/13033) | 🔐 Add Keycloak OAuth provider | `@tazouxme` |\n| [`#13236`](https://github.com/apache/cloudstack/pull/13236) | 📊 Quota resource statement API | `@winterhazel` |\n| [`#12874`](https://github.com/apache/cloudstack/pull/12874) | Cross-zone template registration for Edge Zones | `@vishesh92` |\n\n### ✅ Recently Merged\n\n- **`#13320`** — Stop role from auto-changing on manual account creation (June 3)\n- **`#13210`** — Convert snapshot command timeouts (June 1)\n- **`#12053`** — WebSocket server framework + logs web session (June 2)\n- **`#11814`** — Extensions: sync \u0026 download functionalities (June 2)\n\n---\n\n## 🐛 Issues Spotlight\n\n### 🔒 Security Reports (needs triage)\nA batch of **9 security issues** was filed by `@YLChen-007` on June 5 flagging potential **credential/password exposure in logs and exception traces** across several components (KVM, OVM3, Baremetal, CIFS, SSH). These deserve prompt attention!\n\n- [`#13311`](https://github.com/apache/cloudstack/issues/13311) — ApiServlet logs duplicate sensitive query params\n- [`#13308`](https://github.com/apache/cloudstack/issues/13308) — Plaintext password exposure in OVM3 logs\n- [`#13309`](https://github.com/apache/cloudstack/issues/13309) — Script.java command sanitization leak\n- [`#13297`](https://github.com/apache/cloudstack/issues/13297)–[`#13306`](https://github.com/apache/cloudstack/issues/13306) — Multiple credential exposure issues\n\n### 🐞 Other Recent Issues\n- [`#13358`](https://github.com/apache/cloudstack/issues/13358) — UI: VNF NIC mapping network dropdown always disabled (PR fix ready: `#13359`)\n- [`#13357`](https://github.com/apache/cloudstack/issues/13357) — Snapshot revert of ROOT encrypted volume makes VM non-bootable\n- [`#13355`](https://github.com/apache/cloudstack/issues/13355) — `network_rate` column type too small (needs DB migration)\n- [`#13313`](https://github.com/apache/cloudstack/issues/13313) — Show VM name in backup events\n\n---\n\n## 📊 Project Health Snapshot\n\n| Area | Activity |\n|------|----------|\n| 🖥️ KVM | Active: CLVM, RBD, Veeam backup, VM migration fixes |\n| 🌐 Networking | Network Extension framework, Keycloak OAuth, VNF UI fixes |\n| 💾 Storage | KMS feature, read-only storage guard, physical size fix |\n| 🧰 CI/CD | Pre-commit workflow improvements by `@jbampton` |\n| 📦 Quota | Quota balance refactor merged; resource statement API incoming |\n| 🔐 Security | Credential leak issues need triage — 9 open reports |\n\n---\n\n## 🎯 Recommended Next Steps for Maintainers\n\n1. **🚨 Triage the credential exposure issues** from `@YLChen-007` — assign severity and owners\n2. **👀 Review** [`#13363`](https://github.com/apache/cloudstack/pull/13363) (host reservation drain) and [`#13361`](https://github.com/apache/cloudstack/pull/13361) (RBD pool) — both look well-scoped and ready\n3. **🧪 Help test** [`#12617`](https://github.com/apache/cloudstack/pull/12617) (CLVM) and [`#12991`](https://github.com/apache/cloudstack/pull/12991) (Veeam backup) which are awaiting validation\n4. **🔑 Advance** [`#12711`](https://github.com/apache/cloudstack/pull/12711) (KMS) — a high-impact feature that would benefit from more review bandwidth\n5. **🗂️ Check** [`#13355`](https://github.com/apache/cloudstack/issues/13355) — the `network_rate` type change needs a DB migration and careful planning\n\n---\n\n\u003e 💪 The community is buzzing with activity! A huge shoutout to everyone contributing features, fixes, and reviews. Every PR merged and issue triaged makes CloudStack better for everyone!\n\n_Generated automatically on 2026-06-06_\n\n\n\n\n\u003e Generated by [Repo Status](https://github.com/apache/cloudstack/actions/runs/27072073803) · sonnet46 689.8K · [◷](https://github.com/search?q=repo%3Aapache%2Fcloudstack+is%3Aissue+%22gh-aw-workflow-call-id%3A+apache%2Fcloudstack%2Fdaily-repo-status%22\u0026type=issues)\n\u003e\n\u003cdetails\u003e\n\u003csummary\u003eAdd this agentic workflows to your repo\u003c/summary\u003e\n\nTo install this agentic workflow, run\n\n```\ngh aw add githubnext/agentics/workflows/repo-status.md@main\n```\n\u003c/details\u003e\n\n\n\u003c!-- gh-aw-agentic-workflow: Repo Status, engine: copilot, version: 1.0.52, model: claude-sonnet-4.6, id: 27072073803, workflow_id: daily-repo-status, run: https://github.com/apache/cloudstack/actions/runs/27072073803 --\u003e\n\n\u003c!-- gh-aw-workflow-id: daily-repo-status --\u003e\n\u003c!-- gh-aw-workflow-call-id: apache/cloudstack/daily-repo-status --\u003e","author":{"url":"https://github.com/github-actions[bot]","@type":"Person","name":"github-actions[bot]"},"datePublished":"2026-06-06T19:49:32.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/13364/cloudstack/issues/13364"}