Open Stack

We jubilantly announce the release of:

neutron 12.1.1: OpenStack Networking

This release is part of the queens stable release series.

The source is available from:

    https://opendev.org/openstack/neutron

Download the package from:

    https://tarballs.openstack.org/null/

Please report issues through:

    https://bugs.launchpad.net/neutron/+bugs

For more details, please see below.

12.1.1
^^^^^^


Security Issues
***************

* The OVS Firewall blocks traffic that does not have either the IPv4
  or IPv6 ethertypes at present. This is a behavior change compared to
  the iptables_hybrid firewall, which only operates on IP packets and
  thus does not address other ethertypes.  There is now a
  configuration option in the neutron openvswitch agent configuration
  file for permitted ethertypes and then ensures that the requested
  ethertypes are permitted on initialization.


Bug Fixes
*********

* When updating the fixed-ips of a port residing on a routed
  provider network the port update would always fail if *host* was not
  set. See bug: 1844124
  (https://bugs.launchpad.net/tripleo/+bug/1844124).

Changes in neutron 12.1.0..12.1.1
---------------------------------

9b0919e648 raise priority of dead vlan drop
1bab70f909 fixed_configured=True when Add/Remove port IPs
9117f8b6c4 [Unit tests] Skip TestWSGIServer with IPv6 if no IPv6 enabled
99eaf3eeee OVS flows for custom ethertypes must be on EGRESS
7190771867 Avoid unnecessary operation of ovsdb and flows
17f3b75007 Fix creation of vlan network with segmentation_id set to 0
e7b0b44273 Add info log about ready DHCP config for ports
261880aea5 Check the namespace is ready in test_mtu_update tests
a28fc26aaa Increase timeouts for OVSDB in functional tests
05a07662bb Use created subnet in port generator in "test_port_ip_update_revises"
57725fc7d4 Increase TestDhcpAgentHA.agent_down_time to 30 seconds
8167fb944e Increase number of retries in _process_trunk_subport_bindings
46f0bdd4c7 Remove experimental openSUSE 42.3 job
6618a917d8 Initialize phys bridges before setup_rpc
f7e100d33f Populate binding levels when concurrent ops fail
e4b8795c23 Clear skb mark on encapsulating packets
f2176cade1 Stop OVS agent before starting it again
eabe3b707a Make sure the port still in port map when prepare_port_filter
99602ab15b [DVR] Add lock during creation of FIP agent gateway port
9aa7b045d7 Fix sort issue in test_dhcp_agent_scheduler.test_filter_bindings
2318a60046 Check for agent restarted after checking for DVR port
a0ac712a35 fix update port bug
10191fd817 Retry trunk status updates failing with StaleDataError
fa2863be86 Don't crash ovs agent during reconfigure of phys bridges
2a51cbb871 Filter placement API endpoint by type too
7ec7fd8fdf Use --bind-dynamic with dnsmasq instead of --bind-interfaces
639f5788bf Yield control to other greenthreads while processing trusted ports
cd033bee07 Limit max ports per rpc for dhcp_ready_on_ports()
51d71097c9 Add custom ethertype processing
9dc82e9067 Treat networks shared by RBAC in same way as shared with all tenants
4ecfdb6fd0 Turn CIDR in query filter into proper subnet


Diffstat (except docs and test files)
-------------------------------------

.zuul.yaml                                         | 11 ---
neutron/agent/common/ovs_lib.py                    |  1 +
neutron/agent/dhcp/agent.py                        | 11 ++-
neutron/agent/linux/dhcp.py                        |  8 +--
neutron/agent/linux/ip_lib.py                      | 16 ++++-
.../agent/linux/openvswitch_firewall/firewall.py   | 31 ++++++++-
neutron/conf/agent/securitygroups_rpc.py           |  8 ++-
neutron/db/db_base_plugin_common.py                |  6 ++
neutron/db/ipam_pluggable_backend.py               |  2 +-
neutron/db/l3_dvr_db.py                            | 76 +++++++++++---------
.../drivers/openvswitch/agent/common/constants.py  |  2 +
.../openvswitch/agent/openflow/native/br_int.py    |  3 +
.../openvswitch/agent/openflow/ovs_ofctl/br_int.py |  3 +
.../drivers/openvswitch/agent/ovs_neutron_agent.py | 31 +++++++--
neutron/plugins/ml2/drivers/type_vlan.py           |  4 +-
neutron/plugins/ml2/plugin.py                      | 18 ++++-
neutron/plugins/ml2/rpc.py                         | 20 +++---
neutron/policy.py                                  |  6 +-
neutron/privileged/agent/linux/ip_lib.py           |  7 ++
neutron/services/segments/placement_client.py      |  1 +
neutron/services/trunk/rpc/server.py               | 22 ++++--
.../linux/openvswitch_firewall/test_firewall.py    |  1 +
.../agent/openflow/native/test_br_int.py           |  6 ++
.../agent/openflow/ovs_ofctl/test_br_int.py        |  2 +
.../openvswitch/agent/test_ovs_neutron_agent.py    | 78 +++++++++++++++++++--
.../unit/plugins/ml2/drivers/test_type_vlan.py     | 21 ++++--
.../unit/scheduler/test_dhcp_agent_scheduler.py    |  8 ++-
.../services/revisions/test_revision_plugin.py     |  2 +-
.../notes/custom_ethertypes-eae3fcab3293e3a1.yaml  |  9 +++
...-routed-provider-networks-c54a54844d9a3926.yaml |  7 ++
49 files changed, 707 insertions(+), 112 deletions(-)