Open Stack

We exuberantly announce the release of:

neutron 12.0.4: OpenStack Networking

This release is part of the queens stable release series.

Download the package from:

    https://tarballs.openstack.org/neutron/

For more details, please see below.

12.0.4
^^^^^^


New Features
************

* A new config option "bridge_mac_table_size" has been added for
  Neutron OVS agent. This value will be set on every Open vSwitch
  bridge managed by the openvswitch-neutron-agent in "other_config
  :mac-table-size" column in ovsdb. Default value for this new option
  is set to 50000 and it should be enough for most systems. More
  details about this option can be found in Open vSwitch documentation
  (http://www.openvswitch.org/support/dist-docs/ovs-
  vswitchd.conf.db.5.html) For more information see bug 1775797
  (https://bugs.launchpad.net/neutron/+bug/1775797).


Other Notes
***********

* The metering agent iptables driver can now load its interface
  driver by using a stevedore alias in the "metering_agent.ini" file.
  For example, "interface_driver = openvswitch"  instead of
  "interface_driver =
  neutron.agent.linux.interface.OVSInterfaceDriver"

Changes in neutron 12.0.3..12.0.4
---------------------------------

02e9a3c ovs fw: apply the NORMAL action on egress traffic in a single table
c0d57c9 DVR: Add IPv6 csnat port address correctly
6465226 Fix lost connection when create security group log
d1943af Fix no packet log data when debug is set False in configuration
d5fd35d Reduce qos rpc times on the ovs-agent side
6e13c37 import zuul job settings from project-config
ca3bfea Fix iptables metering driver entrypoint
2652100 Trivial: avoid KeyError while processing ports
2315420 Remove fdb entries for ha router interfaces when going DOWN
b600368 get_subnet_for_dvr returns SNAT mac instead of distributed gateway in subnet_info
1594905 cap bandit in test-requirements.txt
75b86f8 Update metering driver to load interface driver
c4d1dfd Config privsep in the metering agent
c18e128 Fix no ACCEPT event can get for security group logging
2051873 Make dvr router port creation retriable
e211cc2 Update install doc for ubuntu
c79841c [QoS] Clear rate limits when default null values are used
d909b73 Use oslo_db.sqlalchemy.test_fixtures
c7e80a6 Fix DHCP isolated subnets with routed networks
8287d7f Disallow router interface out of subnet IP range
9bc0541 Skip MTU check during deletion of Networks
e5e82f4 Fix fwaas v1 configuration doc
55d90d9 Add list of all working DSCP marks
1511c5f Reduce IP address collision during port creating
9235937 use callback payloads for PRECOMMIT_UPDATE events
63534cd [Fullstack] HA L3 agent restart only standby agents
f001b27 Fix UT BridgeLibTest when IPv6 is disabled
c5e8d77 Make L3 IP tc filter rate limit more accurate
f384828 Mark unit test test_get_objects_queries_constant as unstable
e5f292a DVR: Self recover from the loss of 'fg' ports in FIP Namespace
09a117b DVR: FIP gateway port is tagged as DEAD port by OVS with external-bridge
593bce9 Fix an attribute error on listing AZs with filters
dfebab1 Configure privsep helper in neutron-netns-cleanup
2689444 Use rally 0.12.1 release for stable/queens branch.
11e604a Dropping radvd process privileges
cd67ac6 Mark test_ha_router_restart_agents_no_packet_lost as unstable
99ed1b7 Revert "Ensure _get_changed_synthetic_fields() return updatable fields"
65fcbc2 DVR: FloatingIP create throws an error if no l3 agent
e3be3f9 [OVS] Add mac-table-size to be set on each ovs bridge
1f76c95 Windows: fix exec calls
b3e4741 Don't set administratively disabled ports as ACTIVE
e3d11d4 Add/rm centralized fips for DVR+HA from standby node
2ae4d6c [Fullstack] Wait for SG to be applied by L2 agent
8cf3905 ovs: removed sinkhole RPC target for old topics
8f35286 Revert "DVR: Fix allowed_address_pair IP, ARP table update by neutron agent"
663a792 Fix DVR scheduling checks wrong profile for host
5c09d4f Use neutron-tempest-plugin-jobs-queens job template
92a103b [Fullstack] Add block test until IPs will be really configured
75d08e2 Ensure _get_changed_synthetic_fields() return updatable fields
143d6ce Adds egress and ingress forward rules for trusted ports


Diffstat (except docs and test files)
-------------------------------------

.zuul.yaml                                         | 120 +++-
.../contributor/internals/openvswitch_firewall.rst | 111 ++--
.../install/controller-install-option1-ubuntu.rst  |   4 +-
.../install/controller-install-option2-ubuntu.rst  |   4 +-
etc/neutron/rootwrap.d/l3.filters                  |   4 +-
neutron/agent/common/ovs_lib.py                    |   5 +
neutron/agent/l2/extensions/qos.py                 |   3 +-
neutron/agent/l3/dvr.py                            |   4 +-
neutron/agent/l3/dvr_edge_ha_router.py             |  10 +-
neutron/agent/l3/dvr_fip_ns.py                     |  10 +-
neutron/agent/l3/dvr_local_router.py               |  18 +-
neutron/agent/l3/extensions/fip_qos.py             |   9 +-
neutron/agent/linux/dhcp.py                        |   9 +-
neutron/agent/linux/iptables_firewall.py           |  40 +-
neutron/agent/linux/l3_tc_lib.py                   |   2 +-
.../agent/linux/openvswitch_firewall/firewall.py   |  35 +-
neutron/agent/linux/openvswitch_firewall/rules.py  |  13 +-
neutron/agent/linux/ra.py                          |   9 +-
neutron/agent/windows/utils.py                     |  39 +-
neutron/agent/windows/winutils.py                  | 606 ---------------------
neutron/cmd/netns_cleanup.py                       |   1 +
neutron/common/eventlet_utils.py                   |   8 +-
neutron/conf/agent/ovs_conf.py                     |   7 +
neutron/db/agents_db.py                            |   2 +-
neutron/db/l3_db.py                                |  65 ++-
neutron/db/l3_dvr_db.py                            |  88 ++-
neutron/db/l3_dvrscheduler_db.py                   |   9 +-
neutron/db/l3_hamode_db.py                         |  33 +-
neutron/db/securitygroups_db.py                    |  13 +-
neutron/ipam/drivers/neutrondb_ipam/driver.py      |   5 +-
neutron/plugins/ml2/drivers/l2pop/mech_driver.py   |  26 +-
.../drivers/openvswitch/agent/common/constants.py  |   2 +
.../openvswitch/agent/ovs_dvr_neutron_agent.py     |   2 +-
.../drivers/openvswitch/agent/ovs_neutron_agent.py |  28 +-
neutron/plugins/ml2/plugin.py                      |  30 +-
neutron/privileged/agent/linux/ip_lib.py           |   3 +-
neutron/services/auto_allocate/db.py               |  67 ++-
.../service_providers/driver_controller.py         |  40 +-
.../logapi/drivers/openvswitch/ovs_firewall_log.py |  24 +-
neutron/services/metering/agents/metering_agent.py |   1 +
.../metering/drivers/iptables/iptables_driver.py   |   9 +-
neutron/services/qos/qos_plugin.py                 |  19 +-
neutron/services/trunk/callbacks.py                |   1 +
neutron/services/trunk/plugin.py                   |  15 +-
.../l3_router/test_l3_dvr_router_plugin.py         |  50 +-
.../functional/services/logapi/test_logging.py     |  24 +-
.../agent/linux/openvswitch_firewall/test_rules.py |  13 +-
.../unit/agent/linux/test_iptables_firewall.py     | 441 ++++++++-------
.../unit/extensions/test_availability_zone.py      |   5 +
.../plugins/ml2/drivers/l2pop/test_mech_driver.py  |  40 ++
.../openvswitch/agent/test_ovs_neutron_agent.py    |  37 +-
.../unit/scheduler/test_l3_agent_scheduler.py      |  51 +-
.../service_providers/test_driver_controller.py    |   8 +-
.../drivers/openvswitch/test_ovs_firewall_log.py   |  11 +-
...ver-load-interface-driver-ca397f1db40ec643.yaml |   7 +
...-table-size-config-option-d255d5208650f34b.yaml |  14 +
setup.cfg                                          |   2 +-
test-requirements.txt                              |   2 +-
88 files changed, 1617 insertions(+), 1335 deletions(-)


Requirements updates
--------------------

diff --git a/test-requirements.txt b/test-requirements.txt
index 5b087c9..9a326f2 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -6 +6 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0
-bandit>=1.1.0 # Apache-2.0
+bandit>=1.1.0,<1.5.0 # Apache-2.0