November 2018 - Release-announce - lists.openstack.org

puppet-manila 14.1.0 (stein)
by no-reply＠openstack.org 19 Nov '18

19 Nov '18

We are gleeful to announce the release of: puppet-manila 14.1.0: Puppet module for OpenStack Manila This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-manila/ For more details, please see below. Changes in puppet-manila 13.3.0..14.1.0 --------------------------------------- ff88e74 Prepare Stein M1 9acb520 Fix stdlib version in metadata 8784790 Install python3-manila in Fedora or RedHat > 7 4a96a90 Convert define spec testing to rspec-puppet-facts 0e5843d Use rspec-puppet-facts ae7183f Remove faulty config option from describe 4e4b954 Update min tox version to 2.0 72e5775 Dissuade .gitignore references to personal tools f18b52e switch documentation job to new PTI c535b3b import zuul job settings from project-config 8df43d0 Bump version for the start of Stein ac0819d Add the missing 'Table of Contents' 174fca5 Update reno for stable/rocky 8f78e43 Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitignore | 12 +- .zuul.yaml | 1 + README.md | 2 + manifests/params.pp | 4 +- metadata.json | 16 +- releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + spec/classes/manila_api_spec.rb | 227 +++++------ spec/classes/manila_backends_spec.rb | 22 +- spec/classes/manila_db_mysql_spec.rb | 79 ++-- spec/classes/manila_db_spec.rb | 33 +- spec/classes/manila_ganesha_spec.rb | 19 +- spec/classes/manila_init_spec.rb | 418 +++++++++++---------- spec/classes/manila_keystone_auth_spec.rb | 195 +++++----- spec/classes/manila_network_neutron_spec.rb | 30 +- spec/classes/manila_params_spec.rb | 16 +- spec/classes/manila_quota_spec.rb | 114 +++--- spec/classes/manila_rabbitmq_spec.rb | 94 ++--- spec/classes/manila_scheduler_spec.rb | 34 +- spec/classes/manila_share_generic_spec.rb | 32 +- spec/classes/manila_share_glusterfs_spec.rb | 22 +- spec/classes/manila_share_netapp_spec.rb | 25 +- spec/classes/manila_share_spec.rb | 36 +- spec/defines/manila_backend_dellemc_isilon_spec.rb | 42 ++- spec/defines/manila_backend_dellemc_unity_spec.rb | 42 ++- spec/defines/manila_backend_dellemc_vmax_spec.rb | 42 ++- spec/defines/manila_backend_dellemc_vnx_spec.rb | 42 ++- spec/defines/manila_backend_generic_spec.rb | 35 +- spec/defines/manila_backend_glusterfs_spec.rb | 23 +- spec/defines/manila_backend_glusternative_spec.rb | 21 +- spec/defines/manila_backend_glusternfs_spec.rb | 21 +- spec/defines/manila_backend_hitachi_hnas_spec.rb | 33 +- spec/defines/manila_backend_netapp_spec.rb | 42 ++- .../manila_network_neutron_single_network_spec.rb | 25 +- spec/defines/manila_network_standalone_spec.rb | 26 +- spec/defines/manila_service_instance_spec.rb | 70 ++-- spec/defines/manila_type_set_spec.rb | 22 +- spec/defines/manila_type_spec.rb | 22 +- tox.ini | 2 +- 39 files changed, 1077 insertions(+), 871 deletions(-)

1 0

puppet-ec2api 14.1.0 (stein)
by no-reply＠openstack.org 19 Nov '18

19 Nov '18

We jubilantly announce the release of: puppet-ec2api 14.1.0: Puppet module for OpenStack Ec2api This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-ec2api/ For more details, please see below. Changes in puppet-ec2api 13.3.0..14.1.0 --------------------------------------- 065e0e6 Prepare Stein M1 05661f4 Fix stdlib version in metadata f8d0d28 Convert spec testing to rspec-puppet-facts cd748c7 Update min tox version to 2.0 ff91c23 Dissuade .gitignore references to personal tools 8a0197f switch documentation job to new PTI 4d4a832 import zuul job settings from project-config 5c0d569 Bump version for the start of Stein d314987 Update reno for stable/rocky b873e4b Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitignore | 12 +++++++++++- .zuul.yaml | 1 + metadata.json | 16 ++++++---------- releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 ++++++ spec/classes/ec2api_config_spec.rb | 37 +++++++++++++++++++++++++------------ tox.ini | 2 +- 7 files changed, 51 insertions(+), 24 deletions(-)

1 0

puppet-heat 14.1.0 (stein)
by no-reply＠openstack.org 19 Nov '18

19 Nov '18

We are satisfied to announce the release of: puppet-heat 14.1.0: Puppet module for OpenStack Heat This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-heat/ For more details, please see below. 14.1.0 ^^^^^^ New Features * Added new parameter heat::cache::manage_backend_package that is sent to the oslo::cache class which determines if the backend cache python library should be installed or not. Defaults to true same as oslo::cache default value. Changes in puppet-heat 13.3.0..14.1.0 ------------------------------------- 46df659 Prepare Stein M1 8d58998 Fix stdlib version in metadata ffc4e32 Convert spec testing to rspec-puppet-facts 08c5070 Add manage_backend_package parameter 04df873 Install python3-heatclient in Fedora or RedHat > 7 432c51e Fix rabbitmq README and cleanup duplicate tests c453c27 Update min tox version to 2.0 7c96aa2 Dissuade .gitignore references to personal tools a316ea8 switch documentation job to new PTI ac23752 import zuul job settings from project-config 8089a63 Bump version for the start of Stein c745106 Add the missing 'Table of Contents' in README b0acc92 Update reno for stable/rocky cd52b00 Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitignore | 12 +++- .zuul.yaml | 1 + README.md | 12 ++-- manifests/cache.pp | 6 ++ manifests/params.pp | 3 +- metadata.json | 16 ++--- .../manage-backend-param-a8455322276f2200.yaml | 7 +++ releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 ++ spec/classes/heat_cache_spec.rb | 3 + spec/classes/heat_config_spec.rb | 36 +++++++---- spec/classes/heat_deps_spec.rb | 35 +++++++---- spec/classes/heat_init_spec.rb | 69 ++++------------------ tox.ini | 2 +- 14 files changed, 109 insertions(+), 100 deletions(-)

1 0

puppet-ironic 14.1.0 (stein)
by no-reply＠openstack.org 19 Nov '18

19 Nov '18

We are stoked to announce the release of: puppet-ironic 14.1.0: Puppet module for OpenStack Ironic This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-ironic/ For more details, please see below. 14.1.0 ^^^^^^ New Features ************ * Expose the "endpoint_override" parameter in both "::ironic::drivers::inspector" and "::ironic::service_catalog" * Expose the "notification_level" parameter in "::ironic" * Adds "ironic::conductor::force_raw_images" which controls whether ironic forces the image format to be raw before deployment. * Adds "ironic::drivers::agent::image_download_source" which controls how ironic serves the image when using the "direct" deploy interface: via swift or via its local HTTP server. Bug Fixes ********* * In order to allow the ironic inspector dnsmasq service to receive packets after the network service is restarted, the bind-interfaces option should not be set. Since the ironic inspector is bound to the br-ctlplane interface, its not necessary to set this field as this dnsmasq instance will only service this interface. From the dnsmasq man page (http://www.thekelleys.org.uk/dnsmasq/docs /dnsmasq-man.html): -z, --bind-interfaces On systems which support it, dnsmasq binds the wildcard address, even when it is listening on only some interfaces. It then discards requests that it shouldn't reply to. This has the advantage of working even when interfaces come and go and change address. This option forces dnsmasq to really bind only the interfaces it is listening on. About the only time when this is useful is when running another nameserver (or another instance of dnsmasq) on the same machine. Setting this option also enables multiple instances of dnsmasq which provide DHCP service to run in the same machine. We do run another dnsmasq instance for neutron but that is bound to the tap interface in the namespace. * Fixes default configuration where only a single concurrent thread was permitted per WSGI worker process, which does not match the upstream configuration where threads are enabled per each spawned worker process. This allows for greater request concurrency to prevent situations where the webserver may incorrectly return a 500 error due to the server being unable to process the request in time. * In order to allow portability between x86_64 and ppc the syslinux- tftpboot package is used for ironix-pxe. Changes in puppet-ironic 13.3.0..14.1.0 --------------------------------------- c4e5aa2 Prepare Stein M1 cc5bcf8 Adjust syslinux_path for Fedora and RedHat > 7 0dd10d1 Fix stdlib version in metadata 77521e2 Convert spec testing to rspec-puppet-facts 0af07a5 For ironic-pxe use syslinux-tftpboot package instead of syslinux 919c6ca Install python3-ironicclient in Fedora or RedHat > 7 524b391 Expose dnsmasq_pxe_filter/purge_dhcp_hostsdir opt 4e11e3f Fix rabbitmq README and examples c0c8164 Update min tox version to 2.0 3cc57f1 Dissuade .gitignore references to personal tools 7a4fb04 Add missing endpoint_override params b9415d8 Provide more useful fail message 3848075 Expose the endpoint_override parameter 2897bb2 Configure image_download_source and force_raw_images 44ad813 Remove ironic inspector dnsmasq bind-interfaces setting e4d1ed6 switch documentation job to new PTI 2d68757 import zuul job settings from project-config f37d8f6 Add tests for oslo_messaging_notifications 2b21213 Bump version for the start of Stein 27bf3a0 Expose the notification_level paramenter 2177fc1 Add the missing 'Table of Contents' in README 3e773e3 Update reno for stable/rocky 037cd2c Correct default number of threads 707af57 Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitignore | 12 ++- .zuul.yaml | 1 + README.md | 8 +- examples/ironic.pp | 24 +++-- manifests/cinder.pp | 6 ++ manifests/conductor.pp | 6 ++ manifests/drivers/agent.pp | 9 ++ manifests/drivers/inspector.pp | 6 ++ manifests/glance.pp | 6 ++ manifests/init.pp | 6 ++ manifests/inspector/pxe_filter/dnsmasq.pp | 10 ++ manifests/neutron.pp | 6 ++ manifests/params.pp | 18 +++- manifests/pxe.pp | 9 +- manifests/service_catalog.pp | 6 ++ manifests/swift.pp | 6 ++ manifests/wsgi/apache.pp | 4 +- metadata.json | 16 ++- .../add-endpoint-override-ed2a335077e5fc24.yaml | 6 ++ .../add-notification-level-7d21ada84df44ca5.yaml | 4 + .../image-download-source-f4882929aa669b30.yaml | 9 ++ .../remove-bind-interfaces-98c7021ed271eeee.yaml | 25 +++++ ...threads-to-match-upstream-6fda517d7f6d1448.yaml | 9 ++ ...use-syslinux-tftpboot-pkg-409e279e9b990456.yaml | 4 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 ++ spec/classes/ironic_bifrost_spec.rb | 112 +++++++++++---------- spec/classes/ironic_cinder_spec.rb | 3 + spec/classes/ironic_conductor_spec.rb | 3 + spec/classes/ironic_config_spec.rb | 37 ++++--- spec/classes/ironic_drivers_agent_spec.rb | 3 + spec/classes/ironic_drivers_inspector_spec.rb | 3 + spec/classes/ironic_glance_spec.rb | 7 +- spec/classes/ironic_init_spec.rb | 46 ++++++--- .../ironic_inspector_pxe_filter_dnsmasq_spec.rb | 3 + spec/classes/ironic_neutron_spec.rb | 3 + spec/classes/ironic_pxe_spec.rb | 6 +- spec/classes/ironic_service_catalog_spec.rb | 3 + spec/classes/ironic_swift_spec.rb | 3 + spec/classes/ironic_wsgi_apache_spec.rb | 4 +- templates/inspector_dnsmasq_http.erb | 1 - templates/inspector_dnsmasq_tftp.erb | 1 - tox.ini | 2 +- 43 files changed, 340 insertions(+), 123 deletions(-)

1 0

puppet-barbican 14.1.0 (stein)
by no-reply＠openstack.org 19 Nov '18

19 Nov '18

We contentedly announce the release of: puppet-barbican 14.1.0: Puppet module for Barbican This release is part of the stein release series. Download the package from: https://tarballs.openstack.org/puppet-barbican/ For more details, please see below. 14.1.0 ^^^^^^ New Features * Add parameters for the PKCS#11 plugin to allow integration of the ATOS and Thales HSMs. * Added new class barbican::worker which can be used to manage the package and service for the barbican-worker. Changes in puppet-barbican 13.3.0..14.1.0 ----------------------------------------- 42e1953 Prepare Stein M1 3c3d14b Fix stdlib version in metadata 9d86a14 Install python3-barbican in Fedora or RedHat > 7 dae066a Add HSM related parameters 436a89e Convert spec testing to use rspec-puppet-facts 489c57a Update min tox version to 2.0 6e55ffb Dissuade .gitignore references to personal tools b8f9aa2 switch documentation job to new PTI 428cfe8 import zuul job settings from project-config c138d5d Bump version for the start of Stein 34e6f3a Add barbican::worker class f4db82e Add the missing 'Table of Contents' 12156f0 Update reno for stable/rocky fadc6b9 Remove PE requirement from metadata.json Diffstat (except docs and test files) ------------------------------------- .gitignore | 12 +- .zuul.yaml | 1 + README.md | 4 +- manifests/params.pp | 3 +- manifests/plugins/p11_crypto.pp | 57 ++++-- manifests/worker.pp | 66 +++++++ metadata.json | 16 +- .../notes/add-hsm-parameters-dd1d97ebc6034292.yaml | 5 + .../notes/worker-class-a35a35e71399695f.yaml | 5 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + spec/classes/barbican_keystone_auth_spec.rb | 204 +++++++++++---------- spec/classes/barbican_plugins_dogtag_spec.rb | 128 ++++++------- spec/classes/barbican_plugins_p11_crypto_spec.rb | 26 ++- spec/classes/barbican_worker_spec.rb | 99 ++++++++++ tox.ini | 2 +- 16 files changed, 437 insertions(+), 198 deletions(-)

1 0

python-neutronclient 6.11.0 (stein)
by no-reply＠openstack.org 15 Nov '18

15 Nov '18

We joyfully announce the release of: python-neutronclient 6.11.0: CLI and Client Library for OpenStack Networking This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through launchpad: https://bugs.launchpad.net/python-neutronclient For more details, please see below. 6.11.0 ^^^^^^ New Features * Adds the remote source firewall group and the remote destination firewall group field to the firewall rules. Changes in python-neutronclient 6.10.0..6.11.0 ---------------------------------------------- 1d45522 Fix docstring in method list_routers_on_l3_agent cb1e24b Fix docstring in method list_networks_on_dhcp_agent 3de4353 Fix api version handling, which completely breaks the client 5f69719 Don't quote {posargs} in tox.ini a385656 Adds the destination and source fwg to fwr 86a6740 Use templates for cover and lower-constraints 1a1dbf0 Consolidate irrelevant files added for py3 project 259c386 Switch to stestr Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 +- .stestr.conf | 3 + .testr.conf | 4 - .zuul.yaml | 27 +---- lower-constraints.txt | 3 +- neutronclient/neutron/client.py | 2 +- neutronclient/osc/v2/fwaas/firewallrule.py | 49 ++++++++ neutronclient/shell.py | 2 - neutronclient/v2_0/client.py | 4 +- .../notes/remote_fwg-0f5362e5be8b2e84.yaml | 5 + test-requirements.txt | 2 +- tox.ini | 12 +- 15 files changed, 217 insertions(+), 43 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 77a33e6..11865b8 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16 @@ requests-mock>=1.2.0 # Apache-2.0 -testrepository>=0.0.18 # Apache-2.0/BSD +stestr>=2.0.0 # Apache-2.0

1 0

python-openstackclient 3.17.0 (stein)
by no-reply＠openstack.org 08 Nov '18

08 Nov '18

We high-spiritedly announce the release of: python-openstackclient 3.17.0: OpenStack Command-line Client This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through launchpad: https://storyboard.openstack.org/#!/project/975 For more details, please see below. 3.17.0 ^^^^^^ New Features ************ * Add "--project" option to "limit list" command. [Bug 1798744 (https://bugs.launchpad.net/python-openstackclient/+bug/1798744)] * Add "--dns-domain" and "--dns-name" options to the "floating ip create" commands. These options set the DNS domain and name for the floating IP. Check backend available extension and return an error message if it is missing (instead of a Bad Request HTTP 400). [Bug 1547736 (https://storyboard.openstack.org/#!/story/1547736)] * Add "--long" option to the "floating ip list" command. This adds "DNS Name" and "DNS Domain" columns to the floating IP list. [Bug 1547736 (https://storyboard.openstack.org/#!/story/1547736)] * Add dns-domain support for network commands. The new parameter "-- dns-domain" is added to the "network create" and "network set" commands. This parameter sets the domain name for the network. Check backend available extension and return an error message if it is missing (instead of a Bad Request HTTP 400). * Add options "--sign-key-path" and "--sign-cert-id" to the "image create" command. Tthe image must be present on disk, therefore the "file" option is required: "image create --file <filename> --sign-key-path <key-path> --sign- cert-id <secret-id>". A prompt for a password ensures, that the private key can be protected too. [Bug 2002128 (https://storyboard.openstack.org/#!/story/2002128)] * Add "--property" option to the "server rebuild" command, to provide the ability to specify properties of the rebuilt instance. [Story 2003979 (https://storyboard.openstack.org/#!/story/2003979)] * A new command, "openstack volume backend capability show <host>" was added which will provide a list of all capabilities that can be configured for the requested backend. The required *<host>* parameter takes the form *host@backend-name*. * A new command, "openstack volume backend pool list" was added which will provide a list of all backend storage pools. The optional "-long" parameter includes some basic configuration and stats for each pool. Deprecation Notes ***************** * The "--project" and "--user" options for the "volume create" command have been deprecated. They are deprecated because Cinder's volume create API ignores the corresponding API inputs. Bug Fixes ********* * Fix "volume create" by removing two broken options. The "-- project" and "--user" options were intended to specify an alternate project and/or user for the volume, but the Volume service's API does not support this behavior. This caused the volume to be created, but without the expected project/user values. However, an alternate project and/or user may be specified using identity overrides (e.g. --os-username, --os-project-id). Changes in python-openstackclient 3.16.0..3.17.0 ------------------------------------------------ 0d764cd Add project param in LimitList parser 651f0c3 Handle not having cinderclient.v1 available 9647d43 Add volume backend pool list command 4039d0d Add volume backend capability show command 91a2d88 Allow endpoint filtering on both project and project-domain e3dc30f Add --property option to 'server rebuild' command 01eeed2 Remove python-ceilometerclient 424ab43 Add monascaclient to `not plugins` list 3c58244 Fix some spaces in help messages 544f0e2 fix tox python3 overrides 01c3548 Fix help message for subnetpool default-quota value 1b66ad9 Fix 'project purge' deleting wrong project's servers and volumes 14ceb63 Add metavar for name parameter in subnet create 1981eb2 osc-included image signing (using openstacksdk) 62302ad Use templates for cover and lower-constraints 0461b7c add lib-forward-testing-python3 test job 67eeacd add python 3.6 unit test job d8020ab switch documentation job to new PTI 77a533f import zuul job settings from project-config 030fd71 Deprecate volume create --project and --user options 29ca990 Fix inconsistency (nit) 5c0de6e Detailed help message for QoS max-burst-kbps value def83a0 Fix broken gate jobs ed09f28 Add DNS support to floating IP commands 6cb0f0f Fix missing trailing spaces in network help messages 2b62b6e Update reno for stable/rocky b8754e1 Add dns-domain support to Network object Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 12 +- lower-constraints.txt | 2 +- openstackclient/common/project_purge.py | 4 +- openstackclient/compute/v2/server.py | 13 +- openstackclient/identity/v3/endpoint.py | 2 +- openstackclient/identity/v3/limit.py | 13 +- openstackclient/image/v2/image.py | 58 +++++++ openstackclient/network/common.py | 25 +++ openstackclient/network/v2/floating_ip.py | 29 +++- openstackclient/network/v2/network.py | 18 ++- openstackclient/network/v2/network_qos_rule.py | 5 +- openstackclient/network/v2/port.py | 30 ++-- openstackclient/network/v2/router.py | 10 +- openstackclient/network/v2/subnet.py | 3 +- openstackclient/network/v2/subnet_pool.py | 10 +- .../functional/volume/v1/test_transfer_request.py | 37 +++-- .../functional/volume/v2/test_transfer_request.py | 42 ++++-- .../functional/volume/v3/test_transfer_request.py | 2 + .../unit/network/v2/test_floating_ip_network.py | 12 ++ openstackclient/volume/client.py | 21 ++- openstackclient/volume/v2/volume.py | 48 +++--- openstackclient/volume/v2/volume_backend.py | 113 ++++++++++++++ .../notes/bug-1777153-750e6044aa28d5d8.yaml | 15 ++ .../notes/bug-1798744-5512256baf4dc633.yaml | 4 + ...loatingip_dns_integration-f26c7575694d098d.yaml | 14 ++ .../network_dns_integration-5914b2c2be474a41.yaml | 9 ++ ...sc-included-image-signing-a7021a4dbdcf6336.yaml | 11 ++ .../server-rebuild-property-e8c6439b04e27c80.yaml | 6 + .../notes/volume-backend-c5faae0b31556a24.yaml | 11 ++ releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + requirements.txt | 2 +- setup.cfg | 3 + tox.ini | 5 + 57 files changed, 1019 insertions(+), 351 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2ee03a5..205d4e6 100644 --- a/requirements.txt +++ b/requirements.txt @@ -10 +10 @@ keystoneauth1>=3.4.0 # Apache-2.0 -openstacksdk>=0.11.2 # Apache-2.0 +openstacksdk>=0.17.0 # Apache-2.0

1 0

oslo.service 1.33.0 (stein)
by no-reply＠openstack.org 07 Nov '18

07 Nov '18

We are chuffed to announce the release of: oslo.service 1.33.0: oslo.service library This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/oslo.service Download the package from: https://pypi.org/project/oslo.service Please report issues through launchpad: https://bugs.launchpad.net/oslo.service For more details, please see below. Changes in oslo.service 1.32.1..1.33.0 -------------------------------------- b85d935 Fixture to mock loopingcall wait() 643578c Limit monotonic to py2 Diffstat (except docs and test files) ------------------------------------- oslo_service/__init__.py | 2 +- oslo_service/fixture.py | 52 ++++++++++++++++++++++++++++++++++++++ oslo_service/periodic_task.py | 6 ++++- requirements.txt | 3 ++- 8 files changed, 106 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9e71d4c..4afebff 100644 --- a/requirements.txt +++ b/requirements.txt @@ -6,0 +7 @@ eventlet!=0.18.3,!=0.20.1,>=0.18.2 # MIT +fixtures>=3.0.0 # Apache-2.0/BSD @@ -8 +9 @@ greenlet>=0.4.10 # MIT -monotonic>=0.6 # Apache-2.0 +monotonic>=0.6;python_version<'3.3' # Apache-2.0

1 0

yaml2ical 0.10.0
by no-reply＠openstack.org 07 Nov '18

07 Nov '18

We joyfully announce the release of: yaml2ical 0.10.0: Convert YAML meeting descriptions into iCalendar files Download the package from: https://tarballs.openstack.org/yaml2ical/ For more details, please see below. Changes in yaml2ical 0.9.0..0.10.0 ---------------------------------- 02ba0f5 add day_specifier to recurrence cc4d324 add base class for recurrence 913f2d8 update the versions of python 3 claimed Diffstat (except docs and test files) ------------------------------------- setup.cfg | 5 ++-- tox.ini | 2 +- yaml2ical/recurrence.py | 57 ++++++++++++++++++++++++++++++++++---- 4 files changed, 68 insertions(+), 8 deletions(-)

1 0

python-barbicanclient 4.8.0 (stein)
by no-reply＠openstack.org 07 Nov '18

07 Nov '18

We are delighted to announce the release of: python-barbicanclient 4.8.0: Client Library for OpenStack Barbican Key Management API This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/python-barbicanclient/ Download the package from: https://tarballs.openstack.org/python-barbicanclient/ Please report issues through launchpad: https://storyboard.openstack.org/#!/project/984 For more details, please see below. 4.8.0 ^^^^^ New Features * Lookups (for all Read/Update/Delete actions) are now performed using only the UUID of the entity. For backward compatability, full HATEOS refs may be used, but everything before the UUID will be stripped and the service catalog entry for Barbican will be substituted. This should have no impact on accessing existing secrets with any version of Barbican. Changes in python-barbicanclient 4.7.0..4.8.0 --------------------------------------------- 2956fba Don't quote {posargs} in tox.ini 6651c8f Allow fetching by UUID, and respect interface 1a8cc8c Import python-barbicanclient-dsvm f1572f0 add python 3.6 unit test job 8ed329e switch documentation job to new PTI f459e98 import zuul job settings from project-config Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 21 +++++ barbicanclient/base.py | 23 ++++-- barbicanclient/v1/acls.py | 35 ++++++++- barbicanclient/v1/cas.py | 5 +- barbicanclient/v1/containers.py | 34 ++++---- barbicanclient/v1/orders.py | 14 ++-- barbicanclient/v1/secrets.py | 29 ++++--- playbooks/python-barbicanclient-dsvm/post.yaml | 15 ++++ playbooks/python-barbicanclient-dsvm/run.yaml | 64 +++++++++++++++ .../use-only-uuid-from-href-81710d1b388dce57.yaml | 8 ++ tox.ini | 3 +- 17 files changed, 467 insertions(+), 97 deletions(-)

1 0

mistral 5.2.7 (pike)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We are chuffed to announce the release of: mistral 5.2.7: Mistral Project This release is part of the pike stable release series. Download the package from: https://pypi.org/project/mistral For more details, please see below. 5.2.7 ^^^^^ Bug Fixes * The header X-Target-Insecure previously accepted any string and used it for comparisons. This meant unless it was empty (or not provided) it would always evaluate as True. This change makes the validation stricter, only accepting "True" and "False" and converting these to boolean values. Any other value will return an error. Changes in mistral 5.2.6..5.2.7 ------------------------------- 4a7065c Explicitly convert X-Target-Insecure to a boolean Diffstat (except docs and test files) ------------------------------------- mistral/context.py | 12 +++++- .../x-target-insecure-values-4b2bdbfd42526abc.yaml | 8 ++++ 3 files changed, 65 insertions(+), 1 deletion(-)

1 0

mistral 6.0.6 (queens)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We contentedly announce the release of: mistral 6.0.6: Mistral Project This release is part of the queens stable release series. Download the package from: https://pypi.org/project/mistral For more details, please see below. 6.0.6 ^^^^^ Bug Fixes * The header X-Target-Insecure previously accepted any string and used it for comparisons. This meant unless it was empty (or not provided) it would always evaluate as True. This change makes the validation stricter, only accepting "True" and "False" and converting these to boolean values. Any other value will return an error. Changes in mistral 6.0.5..6.0.6 ------------------------------- 241d0b4 Explicitly convert X-Target-Insecure to a boolean Diffstat (except docs and test files) ------------------------------------- mistral/context.py | 12 +++++- .../x-target-insecure-values-4b2bdbfd42526abc.yaml | 8 ++++ 3 files changed, 65 insertions(+), 1 deletion(-)

1 0

bifrost 5.1.1 (rocky)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We are stoked to announce the release of: bifrost 5.1.1: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/bifrost/ For more details, please see below. Changes in bifrost 5.1.0..5.1.1 ------------------------------- 1ea45d1 Fix ironic configuration for new oslo messaging 37bf890 Fix bug in dnsmasq config ea5e3ca Refactor bifrost-integration-tinyipa jobs d58c08f Refactor bifrost-integration-dibipa-debian jobs 60d3599 Refactor bifrost-integration-dhcp jobs c328d0f import zuul job settings from project-config 8f5ae17 Update UPPER_CONSTRAINTS_FILE for stable/rocky cdb629f Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../bifrost-integration-dhcp-centos-7/post.yaml | 15 ----- .../bifrost-integration-dhcp-centos-7/run.yaml | 72 --------------------- .../post.yaml | 15 ----- .../bifrost-integration-dhcp-opensuse-423/run.yaml | 73 ---------------------- .../legacy/bifrost-integration-dhcp/post.yaml | 2 +- .../post.yaml | 15 ----- .../run.yaml | 73 ---------------------- .../post.yaml | 15 ----- .../run.yaml | 73 ---------------------- .../bifrost-integration-dibipa-debian/post.yaml | 2 +- .../bifrost-integration-tinyipa-centos-7/post.yaml | 15 ----- .../bifrost-integration-tinyipa-centos-7/run.yaml | 72 --------------------- .../post.yaml | 15 ----- .../run.yaml | 72 --------------------- .../legacy/bifrost-integration-tinyipa/post.yaml | 2 +- .../templates/dnsmasq.conf.j2 | 2 +- .../templates/ironic.conf.j2 | 3 +- tox.ini | 4 +- zuul.d/legacy-bifrost-jobs.yaml | 57 ++++++++--------- zuul.d/project.yaml | 13 ++-- 21 files changed, 44 insertions(+), 567 deletions(-)

1 0

neutron-lib 1.20.0 (stein)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We exuberantly announce the release of: neutron-lib 1.20.0: Neutron shared routines and utilities This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through launchpad: https://bugs.launchpad.net/neutron For more details, please see below. 1.20.0 ^^^^^^ Prelude ******* This release adds support for custom filtering in versioned object. New Features ************ * The "qos-rules-alias" API extension is introduced to enable users to perform "GET", "PUT" and "DELETE" operations on "bandwidth_limit_rules", "dscp_marking_rules" and "minimum_bandwidth_rules" as though they are first level resources. In other words, the user will not have to specify the QoS policy ID. * The "neutron.db._resource_extend" is now available as "neutron_lib.db.resource_extend" along with a new "DBResourceExtendFixture" that allows tests to modify the map of registered resource functions. * A class called "FilterObj" is introduced. This is the base class from which the custom filter class should inherit. This release also implements two filter class: "NotIn" and "NotEqual". The class "StringMatchingFilterObj" is now a subclass of "FilterObj". Bug Fixes ********* * Bug 1796854 (https://bugs.launchpad.net/neutron/+bug/1796854) is fixed by validating if advsvc context is used. * Neutron API should not allow user to set zero for floating IP port forwarding internal or external port number. Directly modify the floating-ip-port-forwarding extension to change external_port and internal_port minimum value to 1. Then API and port forwarding object will make consistent for these attributes. * Change API to enforce policy rules for subnet entities with specified segment_ids, to fix a broken implementation of that policy enforcement. Bug: 1784259 (https://bugs.launchpad.net/neutron/+bug/1784259) Changes in neutron-lib 1.19.0..1.20.0 ------------------------------------- 8dc31ec Disable port number 0 for floating IP port_forwarding dafbd30 Support custom filters in OVO e5afd0b rehome the resource_extend db module 0ecceac Fix random_mac_generator to make proper EUI64s 00147a7 Allow advsvc role to create port in foreign tenant 0c47606 Add api-ref for qos-rules-alias extension 3e44497 Use QoS constants definitions eb2e5c9 Define qos-rules-alias extension f27064f Use authorize instead of enforce in policy fe62f2e build universal wheels 691cd28 PlacementAPIClient.update_resource_class client call missing argument d14b379 Let Neutron enforce rule on create_subnet with segment_id [neutron-lib part] Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/parameters.yaml | 6 +- api-ref/source/v2/qos.inc | 91 +++++++++++++ neutron_lib/_policy.py | 5 +- neutron_lib/api/attributes.py | 5 +- neutron_lib/api/definitions/__init__.py | 4 + neutron_lib/api/definitions/base.py | 3 + .../api/definitions/floating_ip_port_forwarding.py | 6 +- neutron_lib/api/definitions/metering.py | 5 +- neutron_lib/api/definitions/qos.py | 10 +- .../api/definitions/qos_bw_limit_direction.py | 5 +- neutron_lib/api/definitions/qos_rules_alias.py | 117 +++++++++++++++++ .../api/definitions/subnet_segmentid_enforce.py | 79 +++++++++++ neutron_lib/db/model_query.py | 12 +- neutron_lib/db/resource_extend.py | 146 +++++++++++++++++++++ neutron_lib/fixture.py | 16 +++ neutron_lib/objects/utils.py | 42 +++++- neutron_lib/placement/client.py | 2 +- .../api/definitions/test_qos_bw_limit_direction.py | 3 +- .../unit/api/definitions/test_qos_rules_alias.py | 28 ++++ .../definitions/test_subnet_segmentid_enforce.py | 23 ++++ neutron_lib/utils/net.py | 2 +- .../advsvc-role-support-d4f1c532264b729a.yaml | 4 + .../disable-port-number-zero-2fb484a802f099a7.yaml | 8 ++ .../qos-rules-alias-ext-c13417dcb3d81130.yaml | 8 ++ .../rehome-resource-extend-7eee483ec4146801.yaml | 6 + ...segment_id_policy_enforce-cd8053c51417d373.yaml | 7 + .../support-custom-filter-f4a15bb5b38b7d3e.yaml | 9 ++ setup.cfg | 3 + 38 files changed, 836 insertions(+), 41 deletions(-)

1 0

pymod2pkg 0.16.0
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We are overjoyed to announce the release of: pymod2pkg 0.16.0: python module name to package name map Download the package from: https://tarballs.openstack.org/pymod2pkg/ For more details, please see below. Changes in pymod2pkg 0.15.0..0.16.0 ----------------------------------- 29aa5b5 Add watcher service Diffstat (except docs and test files) ------------------------------------- pymod2pkg/__init__.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-)

1 0

neutron-fwaas 12.0.1 (queens)
by no-reply＠openstack.org 05 Nov '18

05 Nov '18

We high-spiritedly announce the release of: neutron-fwaas 12.0.1: OpenStack Networking FWaaS This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/neutron-fwaas/ For more details, please see below. Changes in neutron-fwaas 12.0.0..12.0.1 --------------------------------------- 87695e5 Should forward only first accepted packet to table 91 and 92 cb53628 import zuul job settings from project-config aa1e78b Pin neutron version to stable/queens in unit test 1949733 Filter out conntrack entries with unknown protocol 58a6238 Fix pep8 new warnings and pip install error 9f6637a Fix sanity check for default firewall group name 384366b tests: don't rely on configuration files outside tests directory 5e96736 DVR-FWaaS: Fix DVR FWaaS rules for fipnamespace 43f56b7 Update UPPER_CONSTRAINTS_FILE for stable/queens 74c9044 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 30 + .../versions/4202e3047e47_add_index_tenant_id.py | 3 +- .../540142f314f4_fwaas_router_insertion.py | 8 +- .../versions/796c68dffbb_cisco_csr_fwaas.py | 7 +- ...5cc0_shared_attribute_for_firewall_resources.py | 6 +- ...2258a43_create_default_firewall_groups_table.py | 10 +- ...e5bff_uniq_firewallgroupportassociation0port.py | 8 +- .../firewall/drivers/linux/iptables_fwaas.py | 11 +- .../firewall/drivers/linux/iptables_fwaas_v2.py | 9 +- .../linux/l2/openvswitch_firewall/firewall.py | 32 +- .../drivers/linux/l2/openvswitch_firewall/rules.py | 11 +- .../firewall/drivers/linux/legacy_conntrack.py | 10 +- neutron_fwaas/services/firewall/fwaas_plugin_v2.py | 4 +- .../linux/l2/openvswitch_firewall/test_rules.py | 7 +- .../firewall/drivers/linux/test_iptables_fwaas.py | 2 +- .../drivers/linux/test_iptables_fwaas_v2.py | 2 +- .../drivers/linux/test_legacy_conntrack.py | 31 +- tools/tox_install.sh | 9 +- tox.ini | 2 +- 24 files changed, 185 insertions(+), 764 deletions(-)

1 0

neutron-vpnaas 13.0.1 (rocky)
by no-reply＠openstack.org 05 Nov '18

05 Nov '18

We are tickled pink to announce the release of: neutron-vpnaas 13.0.1: OpenStack Networking VPN as a Service This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/neutron-vpnaas/ For more details, please see below. Changes in neutron-vpnaas 13.0.0..13.0.1 ---------------------------------------- 0876f4d Match IPSEC SA established state ea3a41f import zuul job settings from project-config 1f7708b Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 14 +++++++- .../services/vpn/device_drivers/ipsec.py | 4 +-- .../unit/services/vpn/device_drivers/test_ipsec.py | 41 ++++++++++++++++++++-- 4 files changed, 54 insertions(+), 6 deletions(-)

1 0

neutron 12.0.5 (queens)
by no-reply＠openstack.org 05 Nov '18

05 Nov '18

We are stoked to announce the release of: neutron 12.0.5: OpenStack Networking This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. Changes in neutron 12.0.4..12.0.5 --------------------------------- 545925c Add capabilities for privsep f916a3e DVR: Avoid address scope rules for dvr_no_external agents 861dfbd Add permanent ARP entries for DVR fip/qrouter veth pair 6a9450b [Functional] Increase test_timeout for db migration tests 81fc369 Make port binding attempt after agent is revived 3578ab8 Fix dvr ha router gateway goes wrong host cc0fc25 DVR-HA: Configure extra routes on router namespace in dvr_snat node db07fe8 [Functional] Increase test_timeout for db migration tests fa9685a Allow Ipv6 addresses for nova_metadata_host b93ef2f Install centralized floating IP nat rules to all ha nodes 9664acb Fix corner case in failure assigning MAC to SR-IOV NIC 354709f doc: add known limitation about attaching SR-IOV ports da50847 Do not install centralized FIP if HA port is down c34f5dc Fetch specific columns rather than full ORM entities 4ca8baf dhcp: serializing port delete and network rpc calls 9bc8ad5 Don't uninstall flow tables in setup_dvr_flows_on_integ_br 011d0fb Parse dhcp leases file in a more robust way 1e7230b Fix IPv6 prefix delegation issue on agent restart c704d0d ovsdb monitor: do not die on ovsdb-client stderr output ff7923f l2 pop: check for more than 1 first active port on a node e55ff3e Add iptables metadata marking rule on router init b70afb5 Revert "DVR: Inter Tenant Traffic between networks not possible with shared net" 2d47cb7 Revert "DVR: Add error handling for get_network_info_for_id rpc call" 5c2c0a4 Use system protocol assigments for iptables protocol map de6051a Drop strict-order flag from dnsmasq invocation Diffstat (except docs and test files) ------------------------------------- neutron/agent/dhcp/agent.py | 37 ++- neutron/agent/l3/dvr_edge_ha_router.py | 5 +- neutron/agent/l3/dvr_edge_router.py | 8 + neutron/agent/l3/dvr_fip_ns.py | 7 + neutron/agent/l3/dvr_local_router.py | 84 +++++- neutron/agent/l3/ha_router.py | 1 + neutron/agent/l3/router_info.py | 21 +- neutron/agent/linux/dhcp.py | 5 +- neutron/agent/linux/iptables_firewall.py | 46 +++- neutron/agent/linux/ovsdb_monitor.py | 2 +- neutron/agent/metadata/agent.py | 7 +- neutron/agent/metadata/driver.py | 12 - .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 7 +- neutron/api/rpc/handlers/dvr_rpc.py | 14 - neutron/common/ipv6_utils.py | 12 + neutron/db/agents_db.py | 2 + neutron/db/db_base_plugin_v2.py | 6 +- neutron/db/external_net_db.py | 16 +- neutron/db/l3_db.py | 4 +- neutron/db/l3_dvr_db.py | 36 +-- neutron/db/l3_hamode_db.py | 35 +++ neutron/db/portbindings_db.py | 2 +- neutron/db/provisioning_blocks.py | 3 +- neutron/db/rbac_db_mixin.py | 2 +- neutron/ipam/subnet_alloc.py | 4 +- neutron/objects/ports.py | 10 + neutron/plugins/ml2/db.py | 13 +- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 7 +- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 5 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 48 +--- neutron/plugins/ml2/plugin.py | 49 ++++ neutron/privileged/__init__.py | 5 +- neutron/quota/resource.py | 6 +- neutron/scheduler/l3_agent_scheduler.py | 2 +- .../unit/agent/l3/test_l3_agent_extension_api.py | 6 +- .../unit/agent/linux/test_iptables_firewall.py | 16 ++ .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 54 ++++ .../mech_sriov/agent/test_sriov_nic_agent.py | 29 +++ .../openvswitch/agent/test_ovs_neutron_agent.py | 289 ++------------------- 60 files changed, 1313 insertions(+), 513 deletions(-)

1 0

neutron-vpnaas 12.0.1 (queens)
by no-reply＠openstack.org 05 Nov '18

05 Nov '18

We are glad to announce the release of: neutron-vpnaas 12.0.1: OpenStack Networking VPN as a Service This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/neutron-vpnaas/ For more details, please see below. 12.0.1 ^^^^^^ New Features ************ * VPNaaS support in neutron L3 agent is now implemented as L3 agent extension. We no longer have a separate binary "neutron-vpn-agent". To enable VPNaaS support in L3 agent, ensure to specify "vpnaas" to the configuration "extensions" in "[AGENT]" section of the L3 agent config file. Upgrade Notes ************* * The separate L3 agent binary "neutron-vpn-agent" for VPNaaS support is dropped and VPNaaS support is now implemented as L3 agent extension. When upgrading your deployment to Queens, ensure to specify "vpnaas" to "[AGENT] extensions" configuration of the L3 agent config file and run "neutron-l3-agent" instead of "neutron- vpn-agent". Bug Fixes ********* * The libreswan driver of neutron-vpnaas can now also work with Libreswan 3.19+ (bug #1711456 (https://launchpad.net/bugs/1711456)). Changes in neutron-vpnaas 12.0.0..12.0.1 ---------------------------------------- 3f36a0a Match IPSEC SA established state 881dfe8 import zuul job settings from project-config 5b48852 Make libreswan driver work with recent versions a88d115 Fix functional tests gate 88478d5 Fix: sphinx-docs job for stable branch and pep8 issues 4dbd359 Add release note on migration from vpn-agent to L3 agent extension 8b01dca Update UPPER_CONSTRAINTS_FILE for stable/queens 2e01dfe Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 12 ++ etc/neutron/rootwrap.d/vpnaas.filters | 2 +- .../versions/3ea02b2a773e_add_index_tenant_id.py | 4 +- ...3dfd6afaa2_populate_vpn_service_table_fields.py | 10 +- .../expand/41b509d10b5e_vpnaas_endpoint_groups.py | 8 +- .../95601446dbcc_add_flavor_id_to_vpnservices.py | 8 +- neutron_vpnaas/db/vpn/vpn_db.py | 4 +- .../services/vpn/device_drivers/ipsec.py | 123 +++++++++++-------- .../services/vpn/device_drivers/libreswan_ipsec.py | 76 +++++++++++- .../template/openswan/ipsec.conf.template | 3 +- .../unit/services/vpn/device_drivers/test_ipsec.py | 131 +++++++++++++++++---- ...n-driver-works-with-3.19+-7e1fc79ac6c7efe5.yaml | 4 + .../notes/vpn-l3-extension-5cab632bb2c38531.yaml | 14 +++ tools/tox_install.sh | 5 +- tox.ini | 2 +- 17 files changed, 328 insertions(+), 99 deletions(-)

1 0

mistral 7.0.4 (rocky)
by no-reply＠openstack.org 05 Nov '18

05 Nov '18

We jubilantly announce the release of: mistral 7.0.4: Mistral Project This release is part of the rocky stable release series. Download the package from: https://pypi.org/project/mistral For more details, please see below. 7.0.4 ^^^^^ Bug Fixes * Fix issue where next link in some list APIs, when invoked with pagination and filter(s), contained JSON string. This made next link an invalid URL. This issue impacted all REST APIs where filters can be used. * Removed DB polling from the logic that checks readiness of a "join" task which leads to situations when CPU was mostly occupied by scheduler that runs corresponding periodic jobs and that doesn't let the workflow move forward with a proper speed. That happens in case if a workflow has lots of "join" tasks with many dependencies. It's fixed now. Changes in mistral 7.0.3..7.0.4 ------------------------------- 8306fa1 Improve join by removing periodic jobs ef1b65b make user_info_endpoint_url independent of auth_url dfb1f06 Fix next link in get resource list rest API 718dbeb Update OnClauseSPec task name criteria 7016fe7 Make Rally job non-voting till its failures are fixed Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 +- mistral/api/controllers/resource.py | 11 +- mistral/auth/keycloak.py | 12 ++- mistral/engine/action_queue.py | 2 +- mistral/engine/task_handler.py | 112 ++++++++++++++------- mistral/lang/v2/on_clause.py | 2 +- .../unit/engine/test_subworkflows_pause_resume.py | 30 ------ mistral/workflow/base.py | 10 ++ mistral/workflow/direct_workflow.py | 51 ++++++++++ mistral/workflow/lookup_utils.py | 5 +- mistral/workflow/reverse_workflow.py | 3 + .../fix-next-url-formatting-2cc0d8a27625c73a.yaml | 9 ++ .../remove_polling_from_join-3a7921c4af741822.yaml | 9 ++ 17 files changed, 252 insertions(+), 99 deletions(-)

1 0

neutron 11.0.6 (pike)
by no-reply＠openstack.org 05 Nov '18

05 Nov '18

We are thrilled to announce the release of: neutron 11.0.6: OpenStack Networking This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. 11.0.6 ^^^^^^ New Features * A new config option "bridge_mac_table_size" has been added for Neutron OVS agent. This value will be set on every Open vSwitch bridge managed by the openvswitch-neutron-agent in "other_config :mac-table-size" column in ovsdb. Default value for this new option is set to 50000 and it should be enough for most systems. More details about this option can be found in Open vSwitch documentation (http://www.openvswitch.org/support/dist-docs/ovs- vswitchd.conf.db.5.html) For more information see bug 1775797 (https://bugs.launchpad.net/neutron/+bug/1775797). Changes in neutron 11.0.5..11.0.6 --------------------------------- bdbcf56 DVR: Avoid address scope rules for dvr_no_external agents 6b701e6 Don't uninstall flow tables in setup_dvr_flows_on_integ_br 3eaaf07 [Functional] Increase test_timeout for db migration tests 44ed7e5 Fix dvr ha router gateway goes wrong host 020d745 Revert "DVR: Inter Tenant Traffic between networks not possible with shared net" 9481da1 DVR-HA: Configure extra routes on router namespace in dvr_snat node eb7bb07 Revert "DVR: Add error handling for get_network_info_for_id rpc call" f26eed6 [Functional] Increase test_timeout for db migration tests c78b80b Fix bash cmd used in scenario trunk tests 8b57a6d Fix corner case in failure assigning MAC to SR-IOV NIC 5a91c6d Don't skip DVR port while neutron-openvswitch-agent is restared. 77152ee DVR: Fix mac format for backward compatibility with vsctl api 58aaff6 Do not install centralized FIP if HA port is down 04b7f80 Parse dhcp leases file in a more robust way c5f3bc2 import zuul job settings from project-config 5843387 ovsdb monitor: do not die on ovsdb-client stderr output 8804486 Revert "DVR: Fix allowed_address_pair IP, ARP table update by neutron agent" 9189ade [OVS] Shut down the port on changing the admin-state to false dbd6dbb tests: Add decorator to mark unstable tests 1ba5e69 l2 pop: check for more than 1 first active port on a node 6a8a1f8 Add iptables metadata marking rule on router init 64a9d41 Trivial: avoid KeyError while processing ports f41287b Wait until all router ports are DOWN before migration 5be3950 Remove fdb entries for ha router interfaces when going DOWN cefafe3 get_subnet_for_dvr returns SNAT mac instead of distributed gateway in subnet_info 9cb7643 DVR: Add IPv6 csnat port address correctly c49cc2c Reduce qos rpc times on the ovs-agent side 27519e8 Use older keepalived version in functional tests e44b431 Make dvr router port creation retriable 6aada38 Retry dhcp_release on failures ac6ae10 Refactor DVR HA migarations DB operations 988ecea Disallow router interface out of subnet IP range f591c89 Skip MTU check during deletion of Networks be7267a Fix fwaas v1 configuration doc ed4a70c Add list of all working DSCP marks 00998f6 Reduce IP address collision during port creating e5584db [Fullstack] HA L3 agent restart only standby agents ee1ae8b Set trusted port only once in iptables firewall driver 45ae2e4 Fix UT BridgeLibTest when IPv6 is disabled a7c9352 DVR: Self recover from the loss of 'fg' ports in FIP Namespace 3cfa987 DVR: FIP gateway port is tagged as DEAD port by OVS with external-bridge e6c6351 Dropping radvd process privileges 5522da6 [Fullstack] Change time waiting for async ping results a6ee16d This patch changes the CT zone allocation range e123bd7 Iptables firewall driver adds forward rules for trusted ports 073b44b [Scenario tests] Try longer SSH timeout for ubuntu image 44b159a [OVS] Add mac-table-size to be set on each ovs bridge 74a8a70 Enable dns_domain_ports extension in tempest config eb7ee4d Don't set administratively disabled ports as ACTIVE a4f9135 Windows: fix exec calls b22a9d5 Fix race condition with enabling SG on many ports at once a423322 Use rally 0.12.1 release for stable/pike branch. 5e96713 Add/rm centralized fips for DVR+HA from standby node 18a2f9b Fix DVR scheduling checks wrong profile for host cb0afda Handle AgentNotFoundByTypeHost exception properly cdcc704 [OVS] Fix for cleaning after skipped_devices 0adc910 Fix Port OVO filtering based on security groups e8a9cc1 [Fullstack] Add block test until IPs will be really configured 28e5996 [Fullstack] Wait for SG to be applied by L2 agent ba9fd19 Disable IPv6 forwarding by default on HA routers 0dfc7ef test_security_groups: Randomize SG names a06e6b2 Fix meter-label-rule creation 29e0c76 Refresh router objects after port binding cf14d20 DVR: Restarting l3 agent loses centralized fip ip on qg-interface e36c6b6 DVR: Add error handling for get_network_info_for_id rpc call 6956821 DVR: Inter Tenant Traffic between networks not possible with shared net Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 155 +++++- neutron/agent/common/ovs_lib.py | 5 + neutron/agent/l2/extensions/qos.py | 3 +- neutron/agent/l3/dvr.py | 4 +- neutron/agent/l3/dvr_edge_ha_router.py | 18 +- neutron/agent/l3/dvr_fip_ns.py | 10 +- neutron/agent/l3/dvr_local_router.py | 68 ++- neutron/agent/l3/ha_router.py | 7 +- neutron/agent/l3/namespaces.py | 5 +- neutron/agent/l3/router_info.py | 18 +- neutron/agent/linux/dhcp.py | 93 +++- neutron/agent/linux/ip_conntrack.py | 9 +- neutron/agent/linux/ip_lib.py | 7 + neutron/agent/linux/iptables_comments.py | 1 + neutron/agent/linux/iptables_firewall.py | 38 +- neutron/agent/linux/ovsdb_monitor.py | 2 +- neutron/agent/linux/ra.py | 11 +- neutron/agent/metadata/driver.py | 12 - neutron/agent/resource_cache.py | 2 +- neutron/agent/securitygroups_rpc.py | 16 +- neutron/agent/windows/utils.py | 39 +- neutron/agent/windows/winutils.py | 606 --------------------- neutron/api/rpc/handlers/l3_rpc.py | 12 +- neutron/common/eventlet_utils.py | 8 +- neutron/conf/agent/ovs_conf.py | 7 + neutron/db/l3_agentschedulers_db.py | 8 +- neutron/db/l3_db.py | 56 +- neutron/db/l3_dvr_db.py | 84 +-- neutron/db/l3_dvrscheduler_db.py | 9 +- neutron/db/l3_hamode_db.py | 58 +- neutron/ipam/drivers/neutrondb_ipam/driver.py | 5 +- neutron/objects/ports.py | 22 + neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 40 +- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 5 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 29 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 8 +- neutron/plugins/ml2/plugin.py | 7 +- neutron/plugins/ml2/rpc.py | 20 +- neutron/privileged/agent/linux/ip_lib.py | 3 +- .../metering/drivers/iptables/iptables_driver.py | 4 +- .../l3_router/test_l3_dvr_router_plugin.py | 12 +- .../unit/agent/l3/test_l3_agent_extension_api.py | 6 +- .../unit/agent/linux/test_iptables_firewall.py | 113 +++- .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 149 +++++ .../mech_sriov/agent/test_sriov_nic_agent.py | 29 + .../openvswitch/agent/test_ovs_neutron_agent.py | 78 ++- .../unit/scheduler/test_l3_agent_scheduler.py | 51 +- .../services/metering/drivers/test_iptables.py | 38 +- ...-table-size-config-option-d255d5208650f34b.yaml | 14 + tools/configure_for_func_testing.sh | 6 + 92 files changed, 2814 insertions(+), 1103 deletions(-)

1 0

neutron-fwaas 11.0.2 (pike)
by no-reply＠openstack.org 05 Nov '18

05 Nov '18

We are happy to announce the release of: neutron-fwaas 11.0.2: OpenStack Networking FWaaS This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/neutron-fwaas/ For more details, please see below. Changes in neutron-fwaas 11.0.1..11.0.2 --------------------------------------- 2df0379 import zuul job settings from project-config 1d884ea Fix pep8 new warnings and pip install error d02659f tests: don't rely on configuration files outside tests directory e96a39f DVR-FWaaS: Fix DVR FWaaS rules for fipnamespace ea4e959 Install neutron as of stable/pike for unit tests c3d175a Use neutron-lib FirewallInternalDriverError c2bafa9 Fix filtering parameter to get firewall_group Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 33 + neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 10 +- .../versions/4202e3047e47_add_index_tenant_id.py | 3 +- .../540142f314f4_fwaas_router_insertion.py | 8 +- .../versions/796c68dffbb_cisco_csr_fwaas.py | 7 +- ...5cc0_shared_attribute_for_firewall_resources.py | 6 +- .../agents/l3reference/firewall_l3_agent.py | 2 +- .../agents/l3reference/firewall_l3_agent_v2.py | 2 +- .../firewall/drivers/linux/iptables_fwaas.py | 13 +- .../firewall/drivers/linux/iptables_fwaas_v2.py | 11 +- .../unit/db/firewall/v2/test_firewall_db_v2.py | 46 ++ .../firewall/drivers/linux/test_iptables_fwaas.py | 2 +- .../drivers/linux/test_iptables_fwaas_v2.py | 2 +- tools/tox_install.sh | 9 +- tox.ini | 3 +- 19 files changed, 180 insertions(+), 723 deletions(-)

1 0

neutron 13.0.2 (rocky)
by no-reply＠openstack.org 05 Nov '18

05 Nov '18

We are pumped to announce the release of: neutron 13.0.2: OpenStack Networking This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. Changes in neutron 13.0.1..13.0.2 --------------------------------- a3d471b Add capabilities for privsep fc944d3 Add permanent ARP entries for DVR fip/qrouter veth pair 54c2526 Use neutron-tempest-plugin-jobs-rocky in rocky branch ed1b228 Increase tempest jobs timeout 63ebee3 [Functional] Increase test_timeout for db migration tests d585179 Make port binding attempt after agent is revived b411b5f Fix dvr ha router gateway goes wrong host 054e8e0 Allow update request with current segment_id 114752c DVR-HA: Configure extra routes on router namespace in dvr_snat node 026d911 [Functional] Increase test_timeout for db migration tests 8f54993 Fullstack test for minimum bw rule ingress create 1984372 Allow Ipv6 addresses for nova_metadata_host 2a1cdf0 Install centralized floating IP nat rules to all ha nodes 9574da1 Fix corner case in failure assigning MAC to SR-IOV NIC 694d775 Revert "DVR: Inter Tenant Traffic between networks not possible with shared net" d1a0d63 Revert "DVR: Add error handling for get_network_info_for_id rpc call" 1cd4b8e Do not install centralized FIP if HA port is down 02bd0ba Fetch specific columns rather than full ORM entities 7859941 doc: add known limitation about attaching SR-IOV ports 0ea92d3 Don't uninstall flow tables in setup_dvr_flows_on_integ_br ffcb22f Parse dhcp leases file in a more robust way b2cd922 Fix IPv6 prefix delegation issue on agent restart 0cf75ec [Fullstack] Mark securitygroups tests as unstable 5bd182e ovsdb monitor: do not die on ovsdb-client stderr output 1c1bb73 Fix pylint warning with eventlet > 0.22.0 dbc9441 l2 pop: check for more than 1 first active port on a node c28e496 metadata: use requests for comms with nova api 3c1c40d Use system protocol assigments for iptables protocol map Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 8 +- neutron/agent/l3/dvr_edge_ha_router.py | 5 +- neutron/agent/l3/dvr_edge_router.py | 8 + neutron/agent/l3/dvr_fip_ns.py | 7 + neutron/agent/l3/dvr_local_router.py | 35 +++ neutron/agent/l3/ha_router.py | 1 + neutron/agent/l3/router_info.py | 3 + neutron/agent/linux/dhcp.py | 4 + neutron/agent/linux/iptables_firewall.py | 46 +++- neutron/agent/linux/ovsdb_monitor.py | 2 +- neutron/agent/linux/utils.py | 4 + neutron/agent/metadata/agent.py | 51 ++-- neutron/api/rpc/handlers/dvr_rpc.py | 14 - neutron/common/ipv6_utils.py | 12 + neutron/db/agents_db.py | 2 + neutron/db/db_base_plugin_v2.py | 6 +- neutron/db/external_net_db.py | 14 +- neutron/db/ipam_backend_mixin.py | 5 +- neutron/db/ipam_pluggable_backend.py | 7 +- neutron/db/l3_db.py | 4 +- neutron/db/l3_dvr_db.py | 36 +-- neutron/db/l3_hamode_db.py | 35 +++ neutron/db/portbindings_db.py | 2 +- neutron/db/provisioning_blocks.py | 3 +- neutron/db/rbac_db_mixin.py | 2 +- neutron/ipam/subnet_alloc.py | 4 +- neutron/objects/ports.py | 10 + neutron/plugins/ml2/db.py | 8 +- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 7 +- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 5 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 48 +--- neutron/plugins/ml2/plugin.py | 48 ++++ neutron/privileged/__init__.py | 5 +- neutron/quota/resource.py | 6 +- neutron/scheduler/l3_agent_scheduler.py | 2 +- .../unit/agent/linux/test_iptables_firewall.py | 16 ++ .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 54 ++++ .../mech_sriov/agent/test_sriov_nic_agent.py | 29 +++ .../openvswitch/agent/test_ovs_neutron_agent.py | 289 ++------------------- requirements.txt | 1 + 63 files changed, 1192 insertions(+), 501 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2961e8a..0825799 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,0 +13 @@ httplib2>=0.9.1 # MIT +requests>=2.14.2 # Apache-2.0

1 0

neutron-fwaas 13.0.1 (rocky)
by no-reply＠openstack.org 05 Nov '18

05 Nov '18

We high-spiritedly announce the release of: neutron-fwaas 13.0.1: OpenStack Networking FWaaS This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/neutron-fwaas/ For more details, please see below. Changes in neutron-fwaas 13.0.0..13.0.1 --------------------------------------- 1b1c91c Should forward only first accepted packet to table 91 and 92 7b2fac2 import zuul job settings from project-config 915479f Update UPPER_CONSTRAINTS_FILE for stable/rocky Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 28 +++++++++++++++++++ .../linux/l2/openvswitch_firewall/firewall.py | 32 ++++++---------------- .../drivers/linux/l2/openvswitch_firewall/rules.py | 11 ++++---- .../linux/l2/openvswitch_firewall/test_rules.py | 7 ++--- tox.ini | 2 +- 5 files changed, 46 insertions(+), 34 deletions(-)

1 0

nova 18.0.3 (rocky)
by no-reply＠openstack.org 05 Nov '18

05 Nov '18

We high-spiritedly announce the release of: nova 18.0.3: Cloud computing fabric controller This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 18.0.3 ^^^^^^ Upgrade Notes * A new check is added to the "nova-status upgrade check" CLI to check for use of the "nova-consoleauth" service to warn and provide additional instructions to set "[workarounds]enable_consoleauth = True" while performing a live/rolling upgrade. Changes in nova 18.0.2..18.0.3 ------------------------------ 2147093 Add nova-status upgrade check for consoles 63bf383 Explain cpu_model_extra_flags and nested guest support d362e42 Add rolling upgrade info to enable_consoleauth workaround reno 66ec5b4 libvirt: Avoid setting MTU during live migration if unset d28e734 Add tests for bug #1800511 ad3ed22 Fix up compute rpcapi version for pike release 6aecf47 Ensure attachment cleanup on failure in driver.pre_live_migration ae2da62 Move live_migration.pre.start to the start of the method 2a741be conductor: Recreate volume attachments during a reschedule 96889ad Add regression test for bug#1784353 3452b60 fixtures: Track volume attachments within CinderFixtureNewAttachFlow 57566f4 Ignore uuid if already set in ComputeNode.update_from_virt_driver 44e12db Fix formatting non-templated cell URLs with no config 6bd7e8a Use unique consumer_id when doing online data migration 83396b3 Add recreate test for bug 1798163 cf3c2f3 Handle volume API failure in _post_live_migration 3c69c1f Use nova-consoleauth only if workaround enabled 1722e9f Replace usage of get_legacy_facade() with get_engine() d1243fe Imported Translations from Zanata 57b4675 Handle missing marker during online data migration ae39c03 Not set instance to ERROR if set_admin_password failed 22c404d hyperv: Cleans up live migration Planned VM f8b5e61 Update ssh configuration doc Diffstat (except docs and test files) ------------------------------------- nova/api/openstack/compute/console_auth_tokens.py | 24 +- nova/api/openstack/placement/objects/consumer.py | 4 + .../placement/objects/resource_provider.py | 4 + nova/cmd/status.py | 83 + nova/compute/api.py | 79 +- nova/compute/manager.py | 176 +- nova/compute/rpcapi.py | 8 +- nova/conductor/manager.py | 25 + nova/console/websocketproxy.py | 22 +- nova/db/sqlalchemy/api.py | 6 +- nova/locale/cs/LC_MESSAGES/nova.po | 17 +- nova/locale/de/LC_MESSAGES/nova.po | 17 +- nova/locale/es/LC_MESSAGES/nova.po | 17 +- nova/locale/fr/LC_MESSAGES/nova.po | 17 +- nova/locale/it/LC_MESSAGES/nova.po | 17 +- nova/locale/ja/LC_MESSAGES/nova.po | 17 +- nova/locale/ko_KR/LC_MESSAGES/nova.po | 33 +- nova/locale/pt_BR/LC_MESSAGES/nova.po | 17 +- nova/locale/ru/LC_MESSAGES/nova.po | 17 +- nova/locale/tr_TR/LC_MESSAGES/nova.po | 14 +- nova/locale/zh_CN/LC_MESSAGES/nova.po | 17 +- nova/locale/zh_TW/LC_MESSAGES/nova.po | 17 +- nova/objects/cell_mapping.py | 14 +- nova/objects/compute_node.py | 5 + nova/objects/console_auth_token.py | 18 + nova/objects/request_spec.py | 18 +- .../api/openstack/placement/db/test_consumer.py | 33 +- .../functional/compute/test_live_migration.py | 148 + .../functional/regressions/test_bug_1404867.py | 6 +- .../functional/regressions/test_bug_1675570.py | 6 +- .../functional/regressions/test_bug_1784353.py | 90 + .../openstack/compute/test_console_auth_tokens.py | 105 +- nova/virt/hyperv/vmops.py | 6 + nova/virt/hyperv/volumeops.py | 6 + nova/virt/libvirt/migration.py | 9 +- ...status-check-consoleauths-618acb3a67f97418.yaml | 7 + ...rounds-enable-consoleauth-71d68c3879dc2c8a.yaml | 39 +- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 5612 -------------------- 55 files changed, 1645 insertions(+), 6142 deletions(-)

1 0