Open Stack

We exuberantly announce the release of:

neutron-fwaas 14.0.0: OpenStack Networking FWaaS

This release is part of the stein release series.

The source is available from:

    https://git.openstack.org/cgit/openstack/neutron-fwaas

Download the package from:

    https://tarballs.openstack.org/neutron-fwaas/

Please report issues through:

    https://bugs.launchpad.net/neutron/+bugs

For more details, please see below.

Changes in neutron-fwaas 13.0.0.0rc1..14.0.0
--------------------------------------------

4a8687e3f Add new upgrade check
cc2e0a3f0 Update lower-constraints to be same as in Neutron
2860abca2 Change openstack-dev to openstack-discuss
9844e5e09 Fix firewall rule 'shared' check in updating fwp
68e25e05c fix tox python3 overrides
ea08d6fd5 add python 3.7 unit test job
5694e2dba Add service checks before trying to configure it
a48e1316f Remove midonet job
36ca752e8 Fix gate issues on master
e7f2f781e FWaaS v1->v2 DB migration
0e968fa0c Removing FWaaS v1 source code
55874d06b Change netns tests with oslo.privsep to check netns links
f1d40107e Define types for C calls in netlink_lib
9f8709b39 doc: Add policy reference
328874382 Convert policy.json into policy-in-code
781a06c98 Replace ryu with os_ken
2a7994851 Move port validation support into the driver
fa48d16d6 ICMPv6 is not an available protocol when creating firewall rule
778ddb1ee Switch to tempest.common.utils.requires_ext
f32927857 use neutron-lib for _model_query
1db799a09 Correct package name libnetfilter-log on CentOS
c0d28ecc2 Add python 3.6 unit test job
68698cbe9 [Trivial Fix] modify spelling error of "resource"
2b685096d Update tox minversion to 2.0
d86921845 Increment versioning with pbr instruction
4dbb3a352 Adding UTs for firewall driver_api
48b82f7c9 Subscribe Neutron port update events for FWG Logging handling
f8e4a193e Fix associating firewall group with DVR/L3HA port
314e1de7f opt in for neutron-lib consumption patches
55d9529c3 Add functional test for FWaaS L3 logging driver
3f6d79652 use common rpc and exceptions from neutron-lib
fb14c43da add local tox targets for pep8 and py3
a968d8225 remove external_network_bridge option
956190357 Use templates for cover and lower-constraints
4d058ab38 add python 3.6 unit test job
536de58f3 switch documentation job to new PTI
9b4bb440f import zuul job settings from project-config
5519d771e Switch to neutron-lib version of fake_notifier
6ccdd943a Remove remaining NFLOG rules on deleting log resource
93c71ce98 Should forward only first accepted packet to table 91 and 92
9f6150a58 Update neutron import
14822da40 Add dependency for generating reno
e63882d43 Load neutron_fwaas.conf with '--config-file' for neutron-server
55254d4bd Update reno for stable/rocky


Diffstat (except docs and test files)
-------------------------------------

.gitignore                                         |    1 +
.zuul.yaml                                         |   56 +-
devstack/README.rst                                |   28 +-
devstack/plugin.sh                                 |   81 +-
devstack/settings                                  |    2 -
etc/neutron/policy.d/neutron-fwaas.json            |   52 -
etc/oslo-policy-generator/policy.conf              |    3 +
lower-constraints.txt                              |   34 +-
neutron_fwaas/cmd/__init__.py                      |    0
neutron_fwaas/cmd/upgrade_checks/__init__.py       |    0
neutron_fwaas/cmd/upgrade_checks/checks.py         |   40 +
neutron_fwaas/cmd/v1_to_v2_db_migration.py         |  136 ++
neutron_fwaas/common/exceptions.py                 |    4 +-
neutron_fwaas/db/firewall/firewall_db.py           |  588 +-------
.../db/firewall/firewall_router_insertion_db.py    |   98 --
neutron_fwaas/db/firewall/v2/firewall_db_v2.py     |   10 +-
neutron_fwaas/db/models/head.py                    |    2 -
neutron_fwaas/policies/base.py                     |   17 +
neutron_fwaas/policies/firewall_group.py           |  113 ++
neutron_fwaas/policies/firewall_policy.py          |  113 ++
neutron_fwaas/policies/firewall_rule.py            |  136 ++
.../privileged/netfilter_log/libnetfilter_log.py   |   14 +-
neutron_fwaas/privileged/netlink_lib.py            |   37 +-
neutron_fwaas/services/firewall/fwaas_plugin.py    |  444 ------
neutron_fwaas/services/firewall/fwaas_plugin_v2.py |   44 +-
.../firewall/service_drivers/agents/agents.py      |   23 +-
.../agents/drivers/linux/iptables_fwaas.py         |  431 ------
.../agents/drivers/linux/iptables_fwaas_v2.py      |   40 +-
.../linux/l2/openvswitch_firewall/firewall.py      |   32 +-
.../drivers/linux/l2/openvswitch_firewall/rules.py |   11 +-
.../service_drivers/agents/firewall_agent_api.py   |    2 +-
.../firewall/service_drivers/agents/l2/fwaas_v2.py |    2 +-
.../agents/l3reference/firewall_l3_agent.py        |  428 ------
.../agents/l3reference/firewall_l3_agent_v2.py     |    2 +-
.../firewall/service_drivers/driver_api.py         |    6 +
.../logapi/agents/drivers/iptables/driver.py       |    4 +
.../services/logapi/agents/drivers/iptables/log.py |   32 +-
neutron_fwaas/services/logapi/common/log_db_api.py |   19 +-
.../services/logapi/common/port_callback.py        |   40 +
.../functional/services/logapi/agents/__init__.py  |    0
.../services/logapi/agents/drivers/__init__.py     |    0
.../logapi/agents/drivers/iptables/__init__.py     |    0
.../logapi/agents/drivers/iptables/test_log.py     |  567 ++++++++
.../unit/db/firewall/v2/test_firewall_db_v2.py     |   48 +-
.../linux/l2/openvswitch_firewall/test_rules.py    |    7 +-
.../agents/drivers/linux/test_iptables_fwaas.py    |  412 ------
.../agents/drivers/linux/test_iptables_fwaas_v2.py |   83 ++
.../service_drivers/agents/l2/test_fwaas_v2.py     |    2 +-
.../agents/l3reference/test_firewall_l3_agent.py   |  361 -----
.../firewall/service_drivers/agents/test_agents.py |    4 +-
.../firewall/service_drivers/test_driver_api.py    |  291 ++++
.../unit/services/firewall/test_fwaas_plugin.py    |  786 ----------
.../unit/services/firewall/test_fwaas_plugin_v2.py |   55 +-
.../logapi/agents/drivers/iptables/test_log.py     |   35 +-
.../unit/services/logapi/agents/l3/test_fwg_log.py |    2 +-
.../unit/services/logapi/common/test_log_db_api.py |   38 +-
.../services/logapi/common/test_port_callback.py   |  203 +++
.../notes/remove_fwaas_v1-15c6e19484f46d1b.yaml    |    8 +
releasenotes/source/index.rst                      |    1 +
releasenotes/source/rocky.rst                      |    6 +
requirements.txt                                   |   19 +-
setup.cfg                                          |   17 +-
test-requirements.txt                              |    4 +-
tox.ini                                            |   43 +-
90 files changed, 2422 insertions(+), 6478 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index f4bd3c06a..0d9e06614 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -4 +4 @@
-pbr!=2.1.0,>=2.0.0 # Apache-2.0
+pbr>=4.0.0 # Apache-2.0
@@ -8 +8 @@ netaddr>=0.7.18 # BSD
-SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT
+SQLAlchemy>=1.2.0 # MIT
@@ -11 +11,2 @@ six>=1.10.0 # MIT
-neutron-lib>=1.18.0 # Apache-2.0
+neutron-lib>=1.25.0 # Apache-2.0
+os-ken >= 0.3.0 # Apache-2.0
@@ -13 +14 @@ oslo.config>=5.2.0 # Apache-2.0
-oslo.db>=4.27.0 # Apache-2.0
+oslo.db>=4.37.0 # Apache-2.0
@@ -18,2 +19,2 @@ oslo.utils>=3.33.0 # Apache-2.0
-oslo.privsep>=1.23.0 # Apache-2.0
-pyroute2>=0.4.21;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2)
+oslo.privsep>=1.32.0 # Apache-2.0
+pyroute2>=0.5.3;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2)
@@ -21,0 +23,6 @@ pyzmq>=14.3.1 # LGPL+BSD
+
+# The comment below indicates this project repo is current with neutron-lib
+# and should receive neutron-lib consumption patches as they are released
+# in neutron-lib. It also implies the project will stay current with TC
+# and infra initiatives ensuring consumption patches can land.
+# neutron-lib-current
diff --git a/test-requirements.txt b/test-requirements.txt
index ff121d7b7..82670ae2d 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -17 +17 @@ testscenarios>=0.4 # Apache-2.0/BSD
-WebOb>=1.7.1 # MIT
+WebOb>=1.8.2 # MIT
@@ -21 +21 @@ PyMySQL>=0.7.6 # MIT License
-psycopg2>=2.6.2 # LGPL/ZPL
+psycopg2>=2.7.3 # LGPL/ZPL