Open Stack

We jubilantly announce the release of:

neutron-fwaas 15.0.0: OpenStack Networking FWaaS

This release is part of the train release series.

The source is available from:

    https://opendev.org/openstack/neutron-fwaas

Download the package from:

    https://tarballs.openstack.org/neutron-fwaas/

Please report issues through:

    https://bugs.launchpad.net/neutron/+bugs

For more details, please see below.

Changes in neutron-fwaas 14.0.0..15.0.0
---------------------------------------

f28c59df2 Default firewall group rules from configuration file
77e462428 Complete move of neutron-fwaas tempest tests to tempest plugin
a7e85121f Ignore fwg which has no ports when restarting l3-agent
381711995 Fix bug when updating policy in firewall group
e900457cc Switch tempest multinode job to zuulv3 and python3
90a2707cc Fix bug when removing a port from the firewall group
3b7edce28 Switch functional tests to be run using python3
d3efc3ed5 Fix list_entries for netlink_lib when running on py3
e351f264e Migrate functional tests job to zuul v3
9f990bf56 Add Python 3 Train unit tests
1569b84aa Switch neutron-fwaas-v2-dsvm-tempest job to python 3
1ad1f7856 Fix sorting of filter rules in legacy_conntrack module
f81def6e3 Convert legacy-neutron-fwaas-v2-dsvm-tempest job to zuulv3
ad1f5471b Add bindep.txt file to neutron-fwaas repo
fbea371e6 Fix removing non-last port from the group
5c334d584 netfilter_log: Correctly decode binary type prefix
45a36b8ba Update hacking version
9f78072cc Switch neutron-fwaas-fullstack job to zuulv3 syntax
c01b9c823 use logapi constants from neutron-lib
f17b9f7d6 Add L3 agent extension operation tests
d93801789 Dropping the py35 testing
b81d6cb11 Replace git.openstack.org URLs with opendev.org URLs
adb6e6c87 use test tools from neutron-lib
de4926030 fix gate
f909a2ee6 OpenDev Migration Patch
9ba9d8a3a devstack: Enable q-fwaas-v2 by default
27906d0ac stop using common db mixin methods
1f302508d use common constants from neutron-lib
2ca6760d8 Replace openstack.org git:// URLs with https://
9838f99d4 Update master for stable/stein
22aace21e Fix the verification method before creating and updating the firewall rule
0a2bef43e Migrate to stestr as unit tests runner


Diffstat (except docs and test files)
-------------------------------------

.gitignore                                         |   1 +
.gitreview                                         |   2 +-
.stestr.conf                                       |   3 +
.zuul.yaml                                         |  89 ++-
CONTRIBUTING.rst                                   |   2 +-
HACKING.rst                                        |   2 +-
README.rst                                         |   4 +-
TESTING.rst                                        |   4 +-
bindep.txt                                         |  10 +
devstack/README.rst                                |   2 -
devstack/lib/l2_agent                              |   2 +-
devstack/lib/l3_agent                              |   4 +-
devstack/settings                                  |   2 +
lower-constraints.txt                              |   5 +-
neutron_fwaas/db/firewall/v2/firewall_db_v2.py     | 142 ++--
neutron_fwaas/extensions/firewall.py               |   1 +
neutron_fwaas/extensions/firewall_v2.py            |  89 +++
neutron_fwaas/opts.py                              |   3 +
.../privileged/netfilter_log/libnetfilter_log.py   |   4 +-
neutron_fwaas/privileged/netlink_lib.py            |   2 +-
.../firewall/service_drivers/agents/agents.py      |   8 +-
.../agents/drivers/linux/iptables_fwaas_v2.py      |   2 +-
.../linux/l2/openvswitch_firewall/constants.py     |   5 +-
.../linux/l2/openvswitch_firewall/firewall.py      |  37 +-
.../agents/drivers/linux/legacy_conntrack.py       |  14 +-
.../agents/l3reference/firewall_l3_agent_v2.py     |  16 +-
.../logapi/agents/drivers/iptables/driver.py       |   2 +-
.../services/logapi/agents/drivers/iptables/log.py |   5 +-
.../services/logapi/common/fwg_callback.py         |   2 +-
.../services/logapi/common/port_callback.py        |   2 +-
.../logapi/agents/drivers/iptables/test_log.py     |  10 +-
.../unit/db/firewall/v2/test_firewall_db_v2.py     | 106 ++-
.../linux/l2/openvswitch_firewall/test_firewall.py |   9 +-
.../linux/l2/openvswitch_firewall/test_rules.py    |  13 +-
.../agents/drivers/linux/test_legacy_conntrack.py  |  10 +
.../l3reference/test_firewall_l3_agent_v2.py       | 178 ++++-
.../logapi/agents/drivers/iptables/test_log.py     |   2 +-
playbooks/neutron-fwaas-fullstack/post.yaml        |  80 --
playbooks/neutron-fwaas-fullstack/run.yaml         |  53 --
.../notes/bug-1799358-360c6ab27a32e0ac.yaml        |   7 +
releasenotes/source/index.rst                      |   1 +
releasenotes/source/stein.rst                      |   6 +
requirements.txt                                   |   2 +-
setup.cfg                                          |   5 +-
test-requirements.txt                              |   4 +-
tools/deploy_rootwrap.sh                           |   2 +
tox.ini                                            |  46 +-
64 files changed, 664 insertions(+), 2410 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 0d9e06614..69969bf09 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11 +11 @@ six>=1.10.0 # MIT
-neutron-lib>=1.25.0 # Apache-2.0
+neutron-lib>=1.26.0 # Apache-2.0
diff --git a/test-requirements.txt b/test-requirements.txt
index 82670ae2d..e0f78bf03 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -4 +4 @@
-hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0
+hacking>=1.1.0,<1.2.0 # Apache-2.0
@@ -13 +13 @@ os-testr>=1.0.0 # Apache-2.0
-testrepository>=0.0.18 # Apache-2.0/BSD
+stestr>=1.0.0 # Apache-2.0