We are gleeful to announce the release of: neutron 8.2.0: OpenStack Networking This release is part of the mitaka stable release series. For more details, please see below. 8.2.0 ^^^^^ Add options to designate external dns driver of neutron for SSL based connections. This makes it possible to use neutron with designate in scenario where endpoints are SSL based. Users can specify to skip cert validation or specify path to a valid cert in [designate] section of neutron.conf file. Support for IPv6 addresses as tunnel endpoints in OVS. New Features ************ * Two new options are added to *[designate]* section to support SSL. * First option *insecure* allows to skip SSL validation when creating a keystone session to initate a designate client. Default value is False, which means to always verify connection. * Second option *ca_cert* allows setting path to a valid cert file. Default is None. * The local_ip value in ml2_conf.ini can now be set to an IPv6 address configured on the system. Other Notes *********** * Requires OVS 2.5+ version or higher with linux kernel 4.3 or higher. More info at OVS github page (https://github.com/openvswitch/ovs/blob/master/FAQ.md). Changes in neutron 8.1.2..8.2.0 ------------------------------- 63f9470 Macvtap: Allow noop alias as FW driver 198bb55 Fix of ping usage in net_helpers.async_ping() 989cf32 Lower ML2 message severity. b0d16a0 Fix OVSBridge.set_protocols arg c4f1dab Allow tox to be run with python 3 0038b3f Fix misuse of assertTrue in L3 DVR test case 4b7e7cb Imported Translations from Zanata 251d680 DVR: handle floating IP reassociation on the same host 33650bf Not auto schedule router when sync routers from agent 706abe2 Remove unhelpful test of oslo.service ServiceLauncher cda226b Revert "Fix _get_id_for" 9e403b1 When deleting floating IP catch PortNotFound dcbf753 Fix unicode bug for password-authenticated BGP peer c72a240 DVR: Ensure that only one fg device can exist at a time in fip ns 412ba9f Allow min_l3_agents_per_router to equal one b49841e Skip INVALID and UNASSIGNED ofport in vlan restore 95ddc01 sriov: Fix macvtap vf interface regex pattern 873ae30 Fix _get_id_for ce479da OVS: UnboundLocalError on switch timeout fixed aaa1486 Cap tempest to < 12.1.0 aa10d01 Imported Translations from Zanata 20c2bfb Imported Translations from Zanata 97088cf tests: clean up designate client session mock on test exit b685bf7 ovs: set device MTU after it's moved into a namespace c705e2f Fix designate dns driver for SSL based endpoints 344f7eb add PROTO_NUM_IPV6_ICMP for _validate_port_range 71686cd Update ml2 delete_subnet to deallocate via ipam f9d5064 Fixed help messages for path_mtu and global_physnet_mtus options 85ac60c DVR: Fix allowed_address_pair port binding with delayed fip 83ca27f After a migration clean up the floating ip on the source host eed1eb0 Updated from global requirements 1d18475 Refactor the rpc callback version discovery mechanism ed82f8b qos: Add API test for shared policy adc7418 Fix get_free_namespace_port to actually avoid used ports cb36ef3 Fix validation of floating-ip association 263a161 Adopt to config_dir option being a list and not a string 870f82e [qos] section is missing from neutron.conf a868433 neutron-db-manage: revision: fail for --autogenerate and branch e026550 Fix keepalived functional tests 0796a15 Avoid testing oslo.service library internals eac7256 Only load timestamp service plugin in timestamp tests 47c966a Fetch router port subnets in bulk fa2c319 Insert validation with request params for HTTP DELETE 13ff766 Make auto allocate plugin safe for unit/func tests 8cd91b1 Define localstatedir for ovs compilation 98e9154 De-dup user-defined SG rules before iptables call e3eaf20 Add a missing address-scope extension check 881f744 Skip firewall blink test for ovs-fw 98ab44f Fix regexp for ss output bf631b2 Always call ipam driver on subnet update c3892e4 OVS: Add support for IPv6 addresses as tunnel endpoints Diffstat (except docs and test files) ------------------------------------- devstack/lib/ovs | 10 +- neutron/agent/common/ovs_lib.py | 4 +- neutron/agent/l3/dvr_fip_ns.py | 14 +- neutron/agent/l3/dvr_local_router.py | 44 +++++-- neutron/agent/l3/router_info.py | 14 ++ neutron/agent/linux/interface.py | 13 +- neutron/agent/linux/iptables_firewall.py | 9 +- .../agent/linux/openvswitch_firewall/firewall.py | 4 +- neutron/api/rpc/callbacks/exceptions.py | 6 +- neutron/api/rpc/callbacks/version_manager.py | 61 +++++---- neutron/api/rpc/handlers/l3_rpc.py | 5 - neutron/api/v2/base.py | 3 + neutron/cmd/sanity/checks.py | 3 +- neutron/common/config.py | 11 +- neutron/common/constants.py | 3 +- neutron/common/utils.py | 15 +++ neutron/db/agents_db.py | 14 +- neutron/db/ipam_pluggable_backend.py | 33 +++-- neutron/db/l3_db.py | 116 ++++++++++------- neutron/db/l3_dvr_db.py | 75 ++++++++++- neutron/db/l3_dvrscheduler_db.py | 7 + neutron/db/l3_hamode_db.py | 9 +- neutron/db/migration/cli.py | 5 +- neutron/db/securitygroups_db.py | 3 +- neutron/extensions/l3_ext_ha_mode.py | 4 +- neutron/ipam/drivers/neutrondb_ipam/driver.py | 9 ++ neutron/locale/de/LC_MESSAGES/neutron.po | 70 +--------- neutron/locale/es/LC_MESSAGES/neutron.po | 75 +---------- neutron/locale/fr/LC_MESSAGES/neutron.po | 71 +---------- neutron/locale/it/LC_MESSAGES/neutron.po | 78 +----------- neutron/locale/ja/LC_MESSAGES/neutron.po | 77 ++--------- .../locale/ko_KR/LC_MESSAGES/neutron-log-error.po | 9 +- .../ko_KR/LC_MESSAGES/neutron-log-warning.po | 12 +- neutron/locale/ko_KR/LC_MESSAGES/neutron.po | 65 +--------- neutron/locale/pt_BR/LC_MESSAGES/neutron.po | 69 +--------- neutron/locale/ru/LC_MESSAGES/neutron.po | 69 +--------- .../tr_TR/LC_MESSAGES/neutron-log-warning.po | 12 +- neutron/locale/tr_TR/LC_MESSAGES/neutron.po | 25 +--- neutron/locale/zh_CN/LC_MESSAGES/neutron.po | 129 ++++++------------- neutron/locale/zh_TW/LC_MESSAGES/neutron.po | 60 +-------- neutron/notifiers/nova.py | 8 +- neutron/opts.py | 2 +- neutron/plugins/ml2/config.py | 8 +- .../drivers/macvtap/agent/macvtap_neutron_agent.py | 11 +- .../ml2/drivers/mech_sriov/agent/pci_lib.py | 2 +- .../ml2/drivers/openvswitch/agent/common/config.py | 5 +- .../agent/openflow/native/ovs_bridge.py | 18 ++- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 45 ++++++- neutron/plugins/ml2/managers.py | 2 +- neutron/plugins/ml2/plugin.py | 77 ++++++----- neutron/services/auto_allocate/db.py | 20 ++- neutron/services/bgp/driver/ryu/driver.py | 3 + .../externaldns/drivers/designate/driver.py | 11 +- neutron/services/provider_configuration.py | 46 +++++-- .../functional/agent/linux/test_keepalived.py | 34 ++--- .../l3_router/test_l3_dvr_router_plugin.py | 141 +++++++++++++++++++++ .../unit/agent/linux/test_iptables_firewall.py | 8 ++ .../unit/api/rpc/callbacks/test_version_manager.py | 42 +++--- .../ipam/drivers/neutrondb_ipam/test_driver.py | 41 ++++++ .../macvtap/agent/test_macvtap_neutron_agent.py | 8 +- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 12 ++ .../agent/openflow/native/test_ovs_bridge.py | 35 +++++ .../openvswitch/agent/test_ovs_neutron_agent.py | 121 +++++++++++++++--- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 6 +- .../plugins/ml2/extensions/test_dns_integration.py | 63 +++++++++ .../unit/scheduler/test_l3_agent_scheduler.py | 47 +++++-- .../unit/services/bgp/driver/ryu/test_driver.py | 33 ++++- .../unit/services/test_provider_configuration.py | 58 +++++++++ ...ignate-driver-ssl-options-169c299c96f2aff0.yaml | 16 +++ ...ovs-ipv6-tunnel-endpoints-f41b4954a04c43f6.yaml | 10 ++ requirements.txt | 2 +- tox.ini | 2 +- 103 files changed, 1748 insertions(+), 1157 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 065acac..eb8b5e8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -30 +30 @@ stevedore>=1.5.0 # Apache-2.0 -oslo.concurrency>=3.5.0 # Apache-2.0 +oslo.concurrency>=3.7.1 # Apache-2.0