Open Stack

We are chuffed to announce the release of:

neutron 9.4.0: OpenStack Networking

This release is part of the newton stable release series.

Download the package from:

    https://tarballs.openstack.org/neutron/

For more details, please see below.

9.4.0
^^^^^

Keepalived VRRP health check functionality to enable verification of
connectivity from the "master" router to all gateways.


New Features
************

* Activation of this feature enables gateway connectivity validation
  and rescheduling of the "master" router to another node when
  connectivity is lost. If all routers lose connectivity to the
  gateways, the election process will be repeated round-robin until
  one of the routers restores its gateway connection. In the mean
  time, all of the routers will be reported as "master".

Changes in neutron 9.3.1..9.4.0
-------------------------------

8c624ad Fixed Attribute error in fullstack l3 tests
7c2e051 Fixed docs job failure
7cfa858 Allow port security updates even without security-groups enabled
3567667 Get rid of custom wrap_db_retry call in sync_allocations
5f3552e Send both gratuitous ARP REQUESTs and REPLYs
b98267f Avoid router ri.process if initialize() fails
09c2e15 DVR: Do not check HA state on DVR-only routers
7534c00 Retrieve fresh network DB data before getting it in ml2
a2f07de Add IPv6 Prefix Delegation support for DVR
d8c495c Wait 2 seconds between gratuitous ARP updates instead of 1 second
bd7055d Allow offloading lookups in driver contexts
1361f55 Scan for mac through all devices
f142cde Move conntrack zones to IPTablesFirewall
4f01368 Stop killing conntrack state without CT Zone
7cbb448 Clear conntrack entries without zones if CT zones are not used
636d4a5 DVR: Don't clean snat-ns of DVR HA router when fullsync
7ae6e56 Fix duplicated sg rules check for remote_ip_prefix
acb1dfb Use correct retry mechanism in tags
4e886b1 IP Conntrack Manager changes for FWaaS v2
128ebb0 Simplify RootHelperProcess._read_stream()
f6ae49b Pass --concurrent flag to ebtables calls
308795e Add IPAllocations to the port fixed_ips
6b11276 fullstack: Compile openvswitch module for fullstack test
37de2f6 Lock in DHCP agent based on network_id
44c3ee8 Dont try to apply iptables rules in a endless loop
fe7e49a Ensure behavior of None for device_id
ef65c9c Allow self-sharing RBAC rules to be deleted without usage check
723df14 Ignore gre devices when fetching devices in test_cleanup_stale_devices
ce81ba1 Fix tempest router timestamp test when HA enabled
4143a39 Print useful error on rootwrap daemon failure
e6f5b40 Assert contents of returned devices in test
4a96b96 Get rid of delete_subnet method in ML2
01b3733 Add support for Keepalived VRRP health check
634d7b0 Set OVS inactivity_probe to vsctl_timeout when adding manager
4c9e3ed Clean up ovsdb-native's use of verify()
a1186b9 Remove stale floating IP addresses from rfp devices
757d3c0 Handle auto-address subnets on port update
c90f3a0 Switch RootHelperProcess from select.poll to select.select


Diffstat (except docs and test files)
-------------------------------------

TESTING.rst                                        |   2 -
devstack/lib/ovs                                   | 108 +++++--
neutron/agent/common/ovs_lib.py                    |  19 +-
neutron/agent/dhcp/agent.py                        |  88 ++++--
neutron/agent/l3/agent.py                          |  25 +-
neutron/agent/l3/dvr_edge_router.py                |   3 +
neutron/agent/l3/dvr_fip_ns.py                     |  16 +
neutron/agent/l3/ha.py                             |  12 +
neutron/agent/l3/ha_router.py                      |  16 +-
neutron/agent/l3/router_info.py                    |   3 +
neutron/agent/linux/interface.py                   |   4 +-
neutron/agent/linux/ip_conntrack.py                | 114 ++++++-
neutron/agent/linux/ip_lib.py                      |  62 ++--
neutron/agent/linux/iptables_firewall.py           | 161 +++-------
neutron/agent/linux/iptables_manager.py            |  16 +-
neutron/agent/linux/keepalived.py                  | 116 ++++++-
neutron/agent/linux/pd.py                          |  21 +-
neutron/agent/linux/utils.py                       |   6 +-
neutron/agent/ovsdb/native/commands.py             |  95 +++---
neutron/agent/ovsdb/native/connection.py           |   3 +-
neutron/agent/ovsdb/native/helpers.py              |   9 +-
neutron/common/constants.py                        |   5 +
neutron/db/db_base_plugin_common.py                |  12 +-
neutron/db/db_base_plugin_v2.py                    | 112 ++++---
neutron/db/ipam_pluggable_backend.py               |  37 ++-
neutron/db/securitygroups_db.py                    |  20 +-
neutron/plugins/ml2/driver_context.py              |  16 +-
.../ml2/drivers/linuxbridge/agent/arp_protect.py   |   2 +-
.../linuxbridge/agent/linuxbridge_neutron_agent.py |   6 +-
neutron/plugins/ml2/drivers/type_tunnel.py         |   5 +-
neutron/plugins/ml2/plugin.py                      | 166 ++--------
neutron/services/tag/tag_plugin.py                 |   5 +-
.../api/admin/test_shared_network_extension.py     |  23 ++
.../unit/agent/linux/test_iptables_firewall.py     | 352 ++++++++++++++-------
.../unit/agent/linux/test_iptables_manager.py      |  14 +
.../agent/test_linuxbridge_neutron_agent.py        |   4 +-
.../openvswitch/agent/test_ovs_neutron_agent.py    |   4 +-
...epalived-vrrp-healt-check-f23ed7c853151484.yaml |  11 +
64 files changed, 1890 insertions(+), 693 deletions(-)