Open Stack

We are glad to announce the release of:

neutron 11.0.3: OpenStack Networking

This release is part of the pike release series.

Download the package from:

    https://tarballs.openstack.org/neutron/

For more details, please see below.

11.0.3
^^^^^^


New Features
************

* L2 agents based on "ML2" "_common_agent" have now the L2 extension
  API available. This API can be used by L2 extension drivers to
  request resources from the L2 agent. It is used, for example, to
  pass an instance of the "IptablesManager" to the "Linuxbridge" L2
  agent "QoS extension driver".


Bug Fixes
*********

* Fixes bug 1736674, security group rules are now properly applied
  by "Linuxbridge L2 agent" with "QoS extension driver" enabled.

* Adding security group rules by protocol number is documented, but
  somehow was broken without being noticed in one of the last couple
  of releases.  This is now fixed.  For more information see bug
  1716045 (https://bugs.launchpad.net/neutron/+bug/1716045).

Changes in neutron 11.0.2..11.0.3
---------------------------------

03c35d2 Fix creation of port when network has admin's QoS policy set
8e0c0b8 DVR: verify subnet has gateway_ip before installing IPv4 flow
30b86eb Fix error message when duplicate QoS rule is created
51e8615 Always pass device_owner to _ipam_get_subnets()
c0894f9 Fixing the filter in get MTU by network list query.
5b0a0f5 DVR: Fix dvr_no_external agent restart with fips
c00ddc0 Zuul: Remove project name
edd6e51 [Fullstack] Change how DSCP marking packets are tested
a367874 [Fullstack] Shutdown tcpdump process gracefully
a82b5f1 More efficiently clean up OVS ports
59520d6 Add retry decorator update_segment_host_mapping()
f74b39c Add log-tag to haproxy config file
f7207d4 Fix _port_arg for security rules with icmp/ipv6-icmp aliases
91f377c l3_ha: only pass host into update_port when updating router port bindings
5ab223d Speed up trunk MTU enforcement check
f1e669c ovs-lib: Pass string as udp port to ovsdb
27c58c6 Add missing iptable rule in snat ns for centralized fips.
990f943 Removed neutron-tempest-full
b9302f5 Switch rally job from q-* to neutron-* service names
615ced7 Fix error when using protocol number in security groups
d16f69b Support protocol numbers in security group API
b0c7a64 Checksum-fill proxied metadata replies
b0f7be9 Use same instance of iptables_manager in L2 agent and extensions
15d843a Fix callers of get_devices_with_ip() to pass addresses
c82c0f7 Moving legacy check and gate jobs
3e49cc7 trunk: Create vxlan network when testing inherit
78e3dbc ipam: don't commit IPAllocation while IpamAllocation is rolled back
adc344c [Qos] ingress bandwidth limit by ovs is not accurate
10c5788 tempest: check router interface exists before ssh
9dff53c Move segment deletion back to PRECOMMIT_DELETE
40a811b [Qos] Fix residues of ovs in ingress bw limit
622d0bc ovs-fw: catches exception from ovsdb
d67ad73 Added test suite and case to cover 'availability zone'
0b960a9 Fix HA router initialization exception
cd45277 Fix DNS connectivity issues with DVR+HA routers and DHCP-HA
5c16f2b ovsfw: Use multiple priorities in RULES_*_TABLE
f6560d1 Call update_all_ha_network_port_statuses on agent start
7fd30cb fullstack: Wait at least 3 minute for agents to report
04b1554 ovsfw: Merge multiple conjunction flows
3985aec Do not load default service plugins if core plugin is not DB based
c3896b6 Change iptables-restore lock interval to 5 per second
6809a6d Move check_ha_state_for_router() into notification code
2791ea0 Do not create fip agent port for dvr_no_external node


Diffstat (except docs and test files)
-------------------------------------

.zuul.yaml                                         | 267 +++++++++++++++++++++
.../contributor/internals/l2_agent_extensions.rst  |  11 +
.../contributor/internals/openvswitch_firewall.rst | 117 +++++++--
.../contributor/internals/quality_of_service.rst   |   4 +
neutron/agent/common/ovs_lib.py                    |  66 +++--
neutron/agent/l3/agent.py                          |  42 +++-
neutron/agent/l3/dvr_edge_router.py                |   7 +-
neutron/agent/l3/dvr_fip_ns.py                     |   3 +-
neutron/agent/l3/ha_router.py                      |  18 +-
neutron/agent/l3/router_info.py                    |   1 +
neutron/agent/l3/router_processing_queue.py        |   7 +-
neutron/agent/linux/ip_lib.py                      |   7 +-
neutron/agent/linux/iptables_firewall.py           |  21 +-
neutron/agent/linux/iptables_manager.py            | 105 ++++----
.../agent/linux/openvswitch_firewall/firewall.py   |  66 +++--
neutron/agent/linux/openvswitch_firewall/rules.py  | 157 +++++++++++-
neutron/agent/metadata/driver.py                   |  20 +-
neutron/agent/ovsdb/impl_idl.py                    |  35 +++
neutron/cmd/ovs_cleanup.py                         |  43 ++--
neutron/common/constants.py                        |  83 ++++++-
neutron/common/exceptions.py                       |   6 +
neutron/common/utils.py                            |   9 +
neutron/db/db_base_plugin_v2.py                    |   8 +
neutron/db/ipam_backend_mixin.py                   |   6 +-
neutron/db/ipam_pluggable_backend.py               |   7 +-
neutron/db/l3_db.py                                |   2 +-
neutron/db/l3_dvr_db.py                            |  36 ++-
neutron/db/l3_hamode_db.py                         |  20 +-
neutron/ipam/exceptions.py                         |   3 +-
neutron/manager.py                                 |   6 +-
neutron/neutron_plugin_base_v2.py                  |   7 +
neutron/objects/common_types.py                    |   2 +-
neutron/objects/qos/qos_policy_validator.py        |  21 ++
neutron/objects/qos/rule.py                        |  23 ++
.../ml2/drivers/agent/_agent_manager_base.py       |   7 +
neutron/plugins/ml2/drivers/agent/_common_agent.py |   3 +-
.../agent/extension_drivers/qos_driver.py          |  21 +-
.../agent/linuxbridge_agent_extension_api.py       |  32 +++
.../linuxbridge/agent/linuxbridge_neutron_agent.py |  28 ++-
.../drivers/macvtap/agent/macvtap_neutron_agent.py |   3 +
.../agent/extension_drivers/qos_driver.py          |  32 ++-
.../openvswitch/agent/ovs_dvr_neutron_agent.py     |  11 +-
neutron/services/qos/qos_plugin.py                 |  12 +-
neutron/services/segments/db.py                    |   5 +-
neutron/services/trunk/rules.py                    |  81 +++++--
.../functional/agent/l3/test_legacy_router.py      |  18 +-
.../l3_router/test_l3_dvr_router_plugin.py         |  10 +
.../tempest/scenario/admin/test_floatingip.py      | 109 +++++++++
.../unit/agent/l3/test_router_processing_queue.py  |  10 +
.../linux/openvswitch_firewall/test_firewall.py    |  26 +-
.../agent/linux/openvswitch_firewall/test_rules.py | 141 ++++++++++-
.../unit/agent/linux/test_iptables_firewall.py     |  93 +++++++
.../unit/agent/linux/test_iptables_manager.py      |  24 +-
.../unit/extensions/test_subnet_service_types.py   |  27 ++-
.../agent/extension_drivers/test_qos_driver.py     |  37 +++
.../agent/test_linuxbridge_agent_extension_api.py  |  33 +++
.../agent/extension_drivers/test_qos_driver.py     |  17 +-
playbooks/legacy/neutron-fullstack/post.yaml       |  80 ++++++
playbooks/legacy/neutron-fullstack/run.yaml        |  54 +++++
playbooks/legacy/neutron-functional/post.yaml      |  80 ++++++
playbooks/legacy/neutron-functional/run.yaml       |  54 +++++
.../legacy/neutron-grenade-dvr-multinode/post.yaml |  15 ++
.../legacy/neutron-grenade-dvr-multinode/run.yaml  |  47 ++++
.../legacy/neutron-grenade-multinode/post.yaml     |  15 ++
.../legacy/neutron-grenade-multinode/run.yaml      |  47 ++++
playbooks/legacy/neutron-grenade/post.yaml         |  15 ++
playbooks/legacy/neutron-grenade/run.yaml          |  57 +++++
playbooks/legacy/neutron-rally-neutron/post.yaml   |  41 ++++
playbooks/legacy/neutron-rally-neutron/run.yaml    | 175 ++++++++++++++
.../post.yaml                                      |  15 ++
.../neutron-tempest-dvr-ha-multinode-full/run.yaml |  63 +++++
playbooks/legacy/neutron-tempest-dvr/post.yaml     |  15 ++
playbooks/legacy/neutron-tempest-dvr/run.yaml      |  44 ++++
.../legacy/neutron-tempest-linuxbridge/post.yaml   |  15 ++
.../legacy/neutron-tempest-linuxbridge/run.yaml    |  57 +++++
.../neutron-tempest-multinode-full/post.yaml       |  15 ++
.../legacy/neutron-tempest-multinode-full/run.yaml |  64 +++++
playbooks/legacy/neutron-tempest-ovsfw/post.yaml   |  15 ++
playbooks/legacy/neutron-tempest-ovsfw/run.yaml    |  48 ++++
rally-jobs/extra/trunk_scenario.setup              |   2 +-
...ommon-agent-extension-api-3fd06ff67329200a.yaml |  12 +
...group-protocol-by-numbers-48afb97ede961716.yaml |   8 +
111 files changed, 3380 insertions(+), 447 deletions(-)