We are eager to announce the release of: neutron-vpnaas 9.0.0: OpenStack Networking VPN as a Service This release is part of the newton release series. For more details, please see below. 9.0.0 ^^^^^ Neutron VPNaaS is integrated with Guru Meditation Reports library. New Features ************ * Neutron VPNaaS services should respond to SIGUSR2 signal by dumping valuable debug information to standard error output. Changes in neutron-vpnaas 8.0.0.0rc1..9.0.0 ------------------------------------------- 89dac51 Switch upper-constraints and tox_install.sh to stable/newton 7c3e5b8 Update .gitreview for stable/newton 3c93dc6 Updated from global requirements a473bde Tag the alembic migration revisions for Newton 44f6465 Make tests resilient to new project_id field in API 892599a Updated from global requirements c21d3ac Use model_base from neutron-lib 0002c57 Readd tox_install NEUTRON_DIR 97cc8fc Add debug output to tox_install.sh 0720a85 Add support for Guru Meditation Reports for VPNaaS agents c26a4f6 Use temporary directory for neutron install af6649b Move service plugin aliases from neutron to neutron-vpnaas 26f9003 Updated from global requirements 453dbf4 Fix DeprecationWarnings part II 5813874 Adding tests for endpoint-group api. a000db3 TrivialFix: Add validation for tenant_id c8b9c6a TrivialFix: Cleanup imports in code fce8fea Revert "Update disable_ssl_certificate_validation reference" 34f0f98 Update disable_ssl_certificate_validation reference 41805f1 Strongswan: Fix incorrect strongswan auth algorithm sha256 symbol 2941611 Constrain remaining tox targets 3ca00bd Updated from global requirements a70f163 Remove temporary local HasProject 482785e Fix DeprecationWarnings part I 6017a35 Enable DeprecationWarning in test environments 65667c8 Add connection API cases 9cce0ee Updated from global requirements 06c8c0b Update imports (common.config -> conf.common) 6de03ab Updated from global requirements 113c39a Fix API Tests ea91ff8 Add Libreswan installation guide in devstack.rst bd724e6 Drop Newton tag from DB migration cc8b3f1 Rename DB columns: tenant -> project b6f8c40 Add migrations testing to VPNaaS functional jobs. e0ebc7d remove unused LOG 2da398d Updated from global requirements a79c232 Updated from global requirements 903def7 Updated from global requirements 50be42d Fix VPNaaS functional tests a75c641 Use tempest.lib tenants_client 0a82097 Replace tempest-lib to tempest in test-requirements.txt 7f79293 Updated from global requirements b9eeecb Updated from global requirements cb935c3 Updated from global requirements c9ee514 Updated from global requirements d47d569 Updated from global requirements c98d9bc Updated from global requirements 894af39 Use strongswan piddir as bind mount dir beff6e9 Copy/remove the strongswan.d config as root ccc0302 Updated from global requirements 764344f Updated from global requirements 5a7883b Updated from global requirements 8cddec3 Fix grenade plugin a65310b Add grenade upgrade hooks to stop agent 3086f02 Set path for neutron conf dir in devstack if missing 7cf4ef6 Support local_id configuration 393d4c6 Switch to using hacking checks from neutron-lib e10adef Strongswan: complete the ipsec.conf 814e3f0 Openswan/Libreswan: Check config changes before restart e69e003 Updated from global requirements 4dc32fd Updated from global requirements 40ca087 Don't use zuul-cloner for venv env, for periodic jobs b73e100 Openswan/Libreswan: support sha256 for auth algorithm 6c38daf Fix doc build if git is absent 3aeae7a Ensure that PK values don't default to NULL 21dedd8 Updated from global requirements 19172b3 OpenSwan: handle disconnect properly for multiple subnets a1b1260 Constraint requirements using mitaka upper-constraints.txt file 0067e26 VPNaaS returns 500 INTERNAL error with long names, descriptions fd28fdd Update devstack plugin for dependent packages 0101b01 Update devstack plugin for dependent packages bd41271 Update reno for stable/mitaka 0c7a5a6 Update .gitreview for stable/mitaka Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + devstack/plugin.sh | 1 + devstack/settings | 1 + devstack/upgrade/resources.sh | 14 + devstack/upgrade/settings | 1 + devstack/upgrade/shutdown.sh | 36 + devstack/upgrade/upgrade.sh | 14 + etc/neutron/rootwrap.d/vpnaas.filters | 2 + neutron_vpnaas/cmd/__init__.py | 26 + .../db/migration/alembic_migrations/env.py | 2 +- .../alembic_migrations/versions/CONTRACT_HEAD | 2 +- .../alembic_migrations/versions/EXPAND_HEAD | 2 +- .../contract/56893333aa52_fix_identifier_map_fk.py | 2 +- .../b6a2519ab7dc_rename_tenant_to_project.py | 143 ++++ .../newton/expand/52783a36bd67_support_local_id.py | 42 + .../newton/expand/fe637dc3f042_support_sha256.py | 39 + neutron_vpnaas/db/vpn/vpn_db.py | 6 +- neutron_vpnaas/db/vpn/vpn_models.py | 27 +- neutron_vpnaas/db/vpn/vpn_validator.py | 8 +- neutron_vpnaas/extensions/vpn_endpoint_groups.py | 4 +- neutron_vpnaas/extensions/vpnaas.py | 56 +- .../services/vpn/device_drivers/ipsec.py | 83 +- .../vpn/device_drivers/strongswan_ipsec.py | 22 +- .../template/openswan/ipsec.conf.template | 2 +- .../template/openswan/ipsec.secret.template | 2 +- .../template/strongswan/ipsec.conf.template | 14 +- .../template/strongswan/ipsec.secret.template | 2 +- .../services/vpn/service_drivers/base_ipsec.py | 5 + .../services/vpn/service_drivers/cisco_csr_db.py | 2 +- .../functional/common/test_migrations_sync.py | 28 +- .../functional/openswan/test_openswan_driver.py | 40 + .../strongswan/test_strongswan_driver.py | 78 ++ .../unit/extensions/test_vpn_endpoint_groups.py | 5 +- .../unit/services/vpn/device_drivers/test_ipsec.py | 106 ++- .../services/vpn/service_drivers/test_ipsec.py | 6 + .../notes/oslo-reports-3059c2e10e1b35b5.yaml | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/mitaka.rst | 6 + requirements.txt | 21 +- setup.cfg | 5 + test-requirements.txt | 16 +- tools/tox_install.sh | 40 +- tox.ini | 27 +- 64 files changed, 2404 insertions(+), 860 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f2a94de..6a4163c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6 +6 @@ pbr>=1.6 # Apache-2.0 -requests!=2.9.0,>=2.8.1 # Apache-2.0 +requests>=2.10.0 # Apache-2.0 @@ -8 +8 @@ Jinja2>=2.8 # BSD License (3 clause) -netaddr!=0.7.16,>=0.7.12 # BSD +netaddr!=0.7.16,>=0.7.13 # BSD @@ -10 +10 @@ SQLAlchemy<1.1.0,>=1.0.10 # MIT -alembic>=0.8.0 # MIT +alembic>=0.8.4 # MIT @@ -12,4 +12,4 @@ six>=1.9.0 # MIT -neutron-lib>=0.0.1 # Apache-2.0 -oslo.concurrency>=3.5.0 # Apache-2.0 -oslo.config>=3.7.0 # Apache-2.0 -oslo.db>=4.1.0 # Apache-2.0 +neutron-lib>=0.4.0 # Apache-2.0 +oslo.concurrency>=3.8.0 # Apache-2.0 +oslo.config>=3.14.0 # Apache-2.0 +oslo.db!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0 @@ -17 +17,2 @@ oslo.log>=1.14.0 # Apache-2.0 -oslo.messaging>=4.0.0 # Apache-2.0 +oslo.messaging>=5.2.0 # Apache-2.0 +oslo.reports>=0.6.0 # Apache-2.0 @@ -19,2 +20,2 @@ oslo.serialization>=1.10.0 # Apache-2.0 -oslo.service>=1.0.0 # Apache-2.0 -oslo.utils>=3.5.0 # Apache-2.0 +oslo.service>=1.10.0 # Apache-2.0 +oslo.utils>=3.16.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index b8beb57..4f2cba8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking<0.11,>=0.10.0 -astroid<1.4.0 # LGPL # breaks pylint 1.4.4 +astroid<1.4.0 # LGPLv2.1 # breaks pylint 1.4.4 @@ -8,3 +8,3 @@ coverage>=3.6 # Apache-2.0 -fixtures>=1.3.1 # Apache-2.0/BSD -mock>=1.2 # BSD -pylint==1.4.5 # GNU GPL v2 +fixtures>=3.0.0 # Apache-2.0/BSD +mock>=2.0 # BSD +pylint==1.4.5 # GPLv2 @@ -12,2 +12,2 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -requests-mock>=0.7.0 # Apache-2.0 -sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD +requests-mock>=1.0 # Apache-2.0 +sphinx!=1.3b1,<1.3,>=1.2.1 # BSD @@ -16 +16 @@ testrepository>=0.0.18 # Apache-2.0/BSD -tempest-lib>=0.14.0 # Apache-2.0 +tempest>=12.1.0 # Apache-2.0 @@ -23 +23 @@ oslotest>=1.10.0 # Apache-2.0 -reno>=0.1.1 # Apache2 +reno>=1.8.0 # Apache2