Open Stack

We are happy to announce the release of:

octavia 6.2.0: OpenStack Octavia Scalable Load Balancer as a Service

This release is part of the ussuri stable release series.

The source is available from:

    https://opendev.org/openstack/octavia

Download the package from:

    https://pypi.org/project/octavia

Please report issues through:

    https://storyboard.openstack.org/#!/project/908

For more details, please see below.

6.2.0
^^^^^

Bug Fixes

* Fixes an issue with load balancer failover, when the VIP subnet is
  out of IP addresses, that could lead to the VIP being deallocated.

* Fixed an issue where members added to TLS-enabled pools would go
  to ERROR provisioning status.

* Fix default value override for timeout values for listeners.
  Changing the default timeouts in the configuration file wasn't
  correctly applied in the default listener parameters.

* Fix operational status for disabled UDP listeners. The operating
  status of disabled UDP listeners is now OFFLINE instead of ONLINE,
  the behavior is now similary to the behavior of HTTP/HTTPS/TCP/...
  listeners.

* Fixed an issue that could cause load balancers, with multiple
  amphora in a failed state, to be unable to complete a failover.

* Fix an incorrect  "operating_status" with empty UDP pools. A UDP
  pool without any member is now "ONLINE" instead of "OFFLINE".

* Add missing cloud-utils-growpart RPM to Red Hat based amphora
  images.

* Add missing cronie RPM to Red Hat based amphora images.

* Fix nf_conntrack_buckets sysctl in the Amphora, its value was
  incorrectly set.

* Fixed an issue were updating a CRL or client certificate on a pool
  would cause the pool to go into ERROR.

* Fixed an issue where TLS-enabled pools would fail to provision.

* Fix a potential invalid DOWN operating status for members of a UDP
  pool. A race condition could have occured when building the first
  heartbeat message after adding a new member in a pool, this recently
  added member could have been seen as DOWN.

* Add a validation step in the Octavia Amphora driver to ensure that
  the port_security_enabled parameter is set on the VIP network.

Changes in octavia 6.1.0..6.2.0
-------------------------------

63fb9f69 Fix LB failover when IP addresses exhausted
cddbc3c8 Drop lower constraints testing (stable Ussuri)
9d4704d3 Fix amphora image build
cc63ff8f Followup Remove haproxy_check_script for UDP-only
19fbb64d Fix backend certificate file paths
27230ba8 Fix overriding default listener timeout values in config file
4dac4554 Add validation for VIP network parameters in amphora driver
e9bc5d9f Configure rsyslog on Octavia service nodes in devstack
ebe234eb Fix pools going into ERROR when updating the pool
7b242468 Disable auto configuration of new interfaces in NetworkManager
95a97cf1 Support deletion of all tags
9f1307af Fix nf_conntrack_buckets sysctl in Amphora
a053d7c3 Fix AttributeError on TLS-enabled pool provisioning
01b9dcf3 Fix Ussuri requirements for Victoria grenade
cfe24559 Fix amphorav2 bytes error
89cc378b Fix operating status for empty UDP pools
b339d009 Use 'bash' in the keepalived check script
7bdf196e Fix lower-constraints
25f8980e Handle listener not found during loadbalancer status update
a258e108 Fix load balancers with failed amphora failover
2fcc877d Map cloud-guest-utils to cloud-utils-growpart for Red Hat distros.
12846655 Fix missing cronie package in RHEL-based image builds
b31f1432 Fix load balancers with failed amphora failover
71c214c8 Fix pep8 failures in gate
e3f09c41 Remove unnecessary joinedload
c26958bd Fix pool delete race on load balancer cascade delete
f9952c06 [Amphorav2] Healthmonitor operation minor fixes
ea47a0ef Fix invalid DOWN status when updating a UDP pool
8fe7cff8 Fix operational status for disabled UDP listeners
6a112142 Add some details on enable_anti_affinity option
966adf0f Fix user permission for WSGI configuration Task: 35692 Story: 2006172
0afb17c4 Add missing log line for finishing amp operations
5613958a Update devstack plugin


Diffstat (except docs and test files)
-------------------------------------

devstack/README.md                                 |   2 +-
devstack/plugin.sh                                 |  24 +--
devstack/settings                                  |   2 +-
elements/amphora-agent/pkg-map                     |   4 +-
.../etc/NetworkManager/conf.d/no-auto-default.conf |   7 +
.../post-install.d/20-haproxy-tune-kernel          |   1 -
httpd/octavia-api.conf                             |   2 +-
lower-constraints.txt                              | 178 ---------------------
.../backends/agent/api_server/keepalivedlvs.py     |   9 +-
.../amphorae/backends/agent/api_server/server.py   |   4 +-
.../api_server/templates/amphora-netns.systemd.j2  |   4 +
.../templates/keepalived_check_script.conf.j2      |   2 +-
.../backends/health_daemon/health_daemon.py        |   5 +-
.../amphorae/backends/utils/keepalivedlvs_query.py |  45 +++++-
.../amphorae/drivers/haproxy/rest_api_driver.py    |  26 +--
octavia/amphorae/drivers/health/heartbeat_udp.py   |   4 +-
octavia/api/drivers/amphora_driver/v1/driver.py    |  18 ++-
octavia/api/drivers/amphora_driver/v2/driver.py    |  41 +++--
octavia/api/drivers/driver_factory.py              |   2 +-
octavia/api/drivers/utils.py                       |   6 +-
octavia/api/v2/types/listener.py                   |  28 +---
octavia/certificates/manager/barbican.py           |   2 +-
octavia/certificates/manager/barbican_legacy.py    |   4 +-
octavia/cmd/health_manager.py                      |   2 +-
octavia/cmd/house_keeping.py                       |   6 +-
octavia/common/config.py                           |   3 +-
octavia/common/constants.py                        |   2 +
octavia/common/data_models.py                      |  12 +-
octavia/common/jinja/lvs/templates/base.j2         |   4 +
octavia/common/jinja/lvs/templates/macros.j2       |  12 +-
octavia/compute/drivers/nova_driver.py             |   7 +-
.../healthmanager/health_drivers/update_db.py      |   8 +
octavia/controller/queue/v2/endpoints.py           |   6 +-
octavia/controller/worker/task_utils.py            |  30 ++--
octavia/controller/worker/v1/controller_worker.py  |  11 +-
.../worker/v1/flows/load_balancer_flows.py         |   4 +-
.../worker/v1/tasks/amphora_driver_tasks.py        |  10 +-
.../controller/worker/v1/tasks/compute_tasks.py    |   2 +-
.../controller/worker/v1/tasks/database_tasks.py   |  37 ++---
.../controller/worker/v1/tasks/network_tasks.py    |  24 ++-
octavia/controller/worker/v2/controller_worker.py  |  17 +-
.../worker/v2/flows/load_balancer_flows.py         |   4 +-
.../controller/worker/v2/tasks/compute_tasks.py    |   2 +-
.../controller/worker/v2/tasks/database_tasks.py   |  37 +++--
.../controller/worker/v2/tasks/network_tasks.py    |  22 ++-
octavia/db/prepare.py                              |  14 ++
octavia/db/repositories.py                         |  17 +-
octavia/network/data_models.py                     |   4 +-
.../drivers/neutron/allowed_address_pairs.py       |  11 +-
octavia/network/drivers/neutron/utils.py           |   3 +-
octavia/network/drivers/noop_driver/driver.py      |   6 +-
.../backend/agent/api_server/test_keepalivedlvs.py |  10 +-
.../functional/api/v2/test_availability_zones.py   |   2 +-
.../backends/utils/test_keepalivedlvs_query.py     |  78 ++++++++-
.../drivers/haproxy/test_rest_api_driver_0_5.py    |  40 ++---
.../drivers/haproxy/test_rest_api_driver_1_0.py    |  25 +--
.../amphora_driver/v1/test_amphora_driver.py       |  30 +++-
.../amphora_driver/v2/test_amphora_driver.py       |  54 +++++--
.../unit/common/jinja/lvs/test_lvs_jinja_cfg.py    |  59 +++++++
.../sample_configs/sample_configs_combined.py      |  32 +++-
.../worker/v1/tasks/test_amphora_driver_tasks.py   |  22 ++-
.../worker/v1/tasks/test_network_tasks.py          |  16 ++
.../worker/v2/tasks/test_network_tasks.py          |  21 +++
...er-ip-addresses-exhausted-69110b2fa4683e1a.yaml |   5 +
...d-member-tls-enabled-pool-cc77bfa320aaf659.yaml |   5 +
...eout-values-for-listeners-108c8048ba8beb9a.yaml |   6 +
...sable-udp-listener-status-3d34a5596e62da1c.yaml |   6 +
...x-dual-error-amp-failover-69e323892bad8254.yaml |   5 +
...fix-empty-udp-pool-status-3171950628898468.yaml |   5 +
...sing-cloud-guest-utils-rh-eb39a53502dc1e91.yaml |   4 +
.../fix-missing-cronie-rh-bd31001338ddbb1e.yaml    |   4 +
..._conntrack_buckets-sysctl-75ae6dbb9d052863.yaml |   5 +
.../notes/fix-pool-crl-2cc6f2705f5b2009.yaml       |   5 +
...enabled-pool-provisioning-e3adb987244a025a.yaml |   4 +
...nstable-UDP-health-status-ba32690b83a9641b.yaml |   7 +
...lidate-vip-network-params-57662cc3a99f80e5.yaml |   5 +
requirements.txt                                   |   4 +-
tox.ini                                            |  10 --
zuul.d/jobs.yaml                                   |   1 +
zuul.d/projects.yaml                               |   1 -
84 files changed, 884 insertions(+), 461 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 050e01d5..930f62a5 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -28 +28 @@ oslo.reports>=1.18.0 # Apache-2.0
-oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0
+oslo.serialization>=2.28.1 # Apache-2.0
@@ -42 +42 @@ taskflow>=4.1.0 # Apache-2.0
-diskimage-builder>=2.24.0 # Apache-2.0
+diskimage-builder>=2.27.0 # Apache-2.0