November 2018 - Release-announce - lists.openstack.org

neutron-fwaas 12.0.1 (queens)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We high-spiritedly announce the release of: neutron-fwaas 12.0.1: OpenStack Networking FWaaS This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/neutron-fwaas/ For more details, please see below. Changes in neutron-fwaas 12.0.0..12.0.1 --------------------------------------- 87695e5 Should forward only first accepted packet to table 91 and 92 cb53628 import zuul job settings from project-config aa1e78b Pin neutron version to stable/queens in unit test 1949733 Filter out conntrack entries with unknown protocol 58a6238 Fix pep8 new warnings and pip install error 9f6637a Fix sanity check for default firewall group name 384366b tests: don't rely on configuration files outside tests directory 5e96736 DVR-FWaaS: Fix DVR FWaaS rules for fipnamespace 43f56b7 Update UPPER_CONSTRAINTS_FILE for stable/queens 74c9044 Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 30 + .../versions/4202e3047e47_add_index_tenant_id.py | 3 +- .../540142f314f4_fwaas_router_insertion.py | 8 +- .../versions/796c68dffbb_cisco_csr_fwaas.py | 7 +- ...5cc0_shared_attribute_for_firewall_resources.py | 6 +- ...2258a43_create_default_firewall_groups_table.py | 10 +- ...e5bff_uniq_firewallgroupportassociation0port.py | 8 +- .../firewall/drivers/linux/iptables_fwaas.py | 11 +- .../firewall/drivers/linux/iptables_fwaas_v2.py | 9 +- .../linux/l2/openvswitch_firewall/firewall.py | 32 +- .../drivers/linux/l2/openvswitch_firewall/rules.py | 11 +- .../firewall/drivers/linux/legacy_conntrack.py | 10 +- neutron_fwaas/services/firewall/fwaas_plugin_v2.py | 4 +- .../linux/l2/openvswitch_firewall/test_rules.py | 7 +- .../firewall/drivers/linux/test_iptables_fwaas.py | 2 +- .../drivers/linux/test_iptables_fwaas_v2.py | 2 +- .../drivers/linux/test_legacy_conntrack.py | 31 +- tools/tox_install.sh | 9 +- tox.ini | 2 +- 24 files changed, 185 insertions(+), 764 deletions(-)

1 0

neutron-vpnaas 13.0.1 (rocky)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We are tickled pink to announce the release of: neutron-vpnaas 13.0.1: OpenStack Networking VPN as a Service This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/neutron-vpnaas/ For more details, please see below. Changes in neutron-vpnaas 13.0.0..13.0.1 ---------------------------------------- 0876f4d Match IPSEC SA established state ea3a41f import zuul job settings from project-config 1f7708b Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 14 +++++++- .../services/vpn/device_drivers/ipsec.py | 4 +-- .../unit/services/vpn/device_drivers/test_ipsec.py | 41 ++++++++++++++++++++-- 4 files changed, 54 insertions(+), 6 deletions(-)

1 0

neutron 12.0.5 (queens)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We are stoked to announce the release of: neutron 12.0.5: OpenStack Networking This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. Changes in neutron 12.0.4..12.0.5 --------------------------------- 545925c Add capabilities for privsep f916a3e DVR: Avoid address scope rules for dvr_no_external agents 861dfbd Add permanent ARP entries for DVR fip/qrouter veth pair 6a9450b [Functional] Increase test_timeout for db migration tests 81fc369 Make port binding attempt after agent is revived 3578ab8 Fix dvr ha router gateway goes wrong host cc0fc25 DVR-HA: Configure extra routes on router namespace in dvr_snat node db07fe8 [Functional] Increase test_timeout for db migration tests fa9685a Allow Ipv6 addresses for nova_metadata_host b93ef2f Install centralized floating IP nat rules to all ha nodes 9664acb Fix corner case in failure assigning MAC to SR-IOV NIC 354709f doc: add known limitation about attaching SR-IOV ports da50847 Do not install centralized FIP if HA port is down c34f5dc Fetch specific columns rather than full ORM entities 4ca8baf dhcp: serializing port delete and network rpc calls 9bc8ad5 Don't uninstall flow tables in setup_dvr_flows_on_integ_br 011d0fb Parse dhcp leases file in a more robust way 1e7230b Fix IPv6 prefix delegation issue on agent restart c704d0d ovsdb monitor: do not die on ovsdb-client stderr output ff7923f l2 pop: check for more than 1 first active port on a node e55ff3e Add iptables metadata marking rule on router init b70afb5 Revert "DVR: Inter Tenant Traffic between networks not possible with shared net" 2d47cb7 Revert "DVR: Add error handling for get_network_info_for_id rpc call" 5c2c0a4 Use system protocol assigments for iptables protocol map de6051a Drop strict-order flag from dnsmasq invocation Diffstat (except docs and test files) ------------------------------------- neutron/agent/dhcp/agent.py | 37 ++- neutron/agent/l3/dvr_edge_ha_router.py | 5 +- neutron/agent/l3/dvr_edge_router.py | 8 + neutron/agent/l3/dvr_fip_ns.py | 7 + neutron/agent/l3/dvr_local_router.py | 84 +++++- neutron/agent/l3/ha_router.py | 1 + neutron/agent/l3/router_info.py | 21 +- neutron/agent/linux/dhcp.py | 5 +- neutron/agent/linux/iptables_firewall.py | 46 +++- neutron/agent/linux/ovsdb_monitor.py | 2 +- neutron/agent/metadata/agent.py | 7 +- neutron/agent/metadata/driver.py | 12 - .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 7 +- neutron/api/rpc/handlers/dvr_rpc.py | 14 - neutron/common/ipv6_utils.py | 12 + neutron/db/agents_db.py | 2 + neutron/db/db_base_plugin_v2.py | 6 +- neutron/db/external_net_db.py | 16 +- neutron/db/l3_db.py | 4 +- neutron/db/l3_dvr_db.py | 36 +-- neutron/db/l3_hamode_db.py | 35 +++ neutron/db/portbindings_db.py | 2 +- neutron/db/provisioning_blocks.py | 3 +- neutron/db/rbac_db_mixin.py | 2 +- neutron/ipam/subnet_alloc.py | 4 +- neutron/objects/ports.py | 10 + neutron/plugins/ml2/db.py | 13 +- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 7 +- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 5 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 48 +--- neutron/plugins/ml2/plugin.py | 49 ++++ neutron/privileged/__init__.py | 5 +- neutron/quota/resource.py | 6 +- neutron/scheduler/l3_agent_scheduler.py | 2 +- .../unit/agent/l3/test_l3_agent_extension_api.py | 6 +- .../unit/agent/linux/test_iptables_firewall.py | 16 ++ .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 54 ++++ .../mech_sriov/agent/test_sriov_nic_agent.py | 29 +++ .../openvswitch/agent/test_ovs_neutron_agent.py | 289 ++------------------- 60 files changed, 1313 insertions(+), 513 deletions(-)

1 0

neutron-vpnaas 12.0.1 (queens)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We are glad to announce the release of: neutron-vpnaas 12.0.1: OpenStack Networking VPN as a Service This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/neutron-vpnaas/ For more details, please see below. 12.0.1 ^^^^^^ New Features ************ * VPNaaS support in neutron L3 agent is now implemented as L3 agent extension. We no longer have a separate binary "neutron-vpn-agent". To enable VPNaaS support in L3 agent, ensure to specify "vpnaas" to the configuration "extensions" in "[AGENT]" section of the L3 agent config file. Upgrade Notes ************* * The separate L3 agent binary "neutron-vpn-agent" for VPNaaS support is dropped and VPNaaS support is now implemented as L3 agent extension. When upgrading your deployment to Queens, ensure to specify "vpnaas" to "[AGENT] extensions" configuration of the L3 agent config file and run "neutron-l3-agent" instead of "neutron- vpn-agent". Bug Fixes ********* * The libreswan driver of neutron-vpnaas can now also work with Libreswan 3.19+ (bug #1711456 (https://launchpad.net/bugs/1711456)). Changes in neutron-vpnaas 12.0.0..12.0.1 ---------------------------------------- 3f36a0a Match IPSEC SA established state 881dfe8 import zuul job settings from project-config 5b48852 Make libreswan driver work with recent versions a88d115 Fix functional tests gate 88478d5 Fix: sphinx-docs job for stable branch and pep8 issues 4dbd359 Add release note on migration from vpn-agent to L3 agent extension 8b01dca Update UPPER_CONSTRAINTS_FILE for stable/queens 2e01dfe Update .gitreview for stable/queens Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 12 ++ etc/neutron/rootwrap.d/vpnaas.filters | 2 +- .../versions/3ea02b2a773e_add_index_tenant_id.py | 4 +- ...3dfd6afaa2_populate_vpn_service_table_fields.py | 10 +- .../expand/41b509d10b5e_vpnaas_endpoint_groups.py | 8 +- .../95601446dbcc_add_flavor_id_to_vpnservices.py | 8 +- neutron_vpnaas/db/vpn/vpn_db.py | 4 +- .../services/vpn/device_drivers/ipsec.py | 123 +++++++++++-------- .../services/vpn/device_drivers/libreswan_ipsec.py | 76 +++++++++++- .../template/openswan/ipsec.conf.template | 3 +- .../unit/services/vpn/device_drivers/test_ipsec.py | 131 +++++++++++++++++---- ...n-driver-works-with-3.19+-7e1fc79ac6c7efe5.yaml | 4 + .../notes/vpn-l3-extension-5cab632bb2c38531.yaml | 14 +++ tools/tox_install.sh | 5 +- tox.ini | 2 +- 17 files changed, 328 insertions(+), 99 deletions(-)

1 0

mistral 7.0.4 (rocky)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We jubilantly announce the release of: mistral 7.0.4: Mistral Project This release is part of the rocky stable release series. Download the package from: https://pypi.org/project/mistral For more details, please see below. 7.0.4 ^^^^^ Bug Fixes * Fix issue where next link in some list APIs, when invoked with pagination and filter(s), contained JSON string. This made next link an invalid URL. This issue impacted all REST APIs where filters can be used. * Removed DB polling from the logic that checks readiness of a "join" task which leads to situations when CPU was mostly occupied by scheduler that runs corresponding periodic jobs and that doesn't let the workflow move forward with a proper speed. That happens in case if a workflow has lots of "join" tasks with many dependencies. It's fixed now. Changes in mistral 7.0.3..7.0.4 ------------------------------- 8306fa1 Improve join by removing periodic jobs ef1b65b make user_info_endpoint_url independent of auth_url dfb1f06 Fix next link in get resource list rest API 718dbeb Update OnClauseSPec task name criteria 7016fe7 Make Rally job non-voting till its failures are fixed Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 +- mistral/api/controllers/resource.py | 11 +- mistral/auth/keycloak.py | 12 ++- mistral/engine/action_queue.py | 2 +- mistral/engine/task_handler.py | 112 ++++++++++++++------- mistral/lang/v2/on_clause.py | 2 +- .../unit/engine/test_subworkflows_pause_resume.py | 30 ------ mistral/workflow/base.py | 10 ++ mistral/workflow/direct_workflow.py | 51 ++++++++++ mistral/workflow/lookup_utils.py | 5 +- mistral/workflow/reverse_workflow.py | 3 + .../fix-next-url-formatting-2cc0d8a27625c73a.yaml | 9 ++ .../remove_polling_from_join-3a7921c4af741822.yaml | 9 ++ 17 files changed, 252 insertions(+), 99 deletions(-)

1 0

neutron 11.0.6 (pike)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We are thrilled to announce the release of: neutron 11.0.6: OpenStack Networking This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. 11.0.6 ^^^^^^ New Features * A new config option "bridge_mac_table_size" has been added for Neutron OVS agent. This value will be set on every Open vSwitch bridge managed by the openvswitch-neutron-agent in "other_config :mac-table-size" column in ovsdb. Default value for this new option is set to 50000 and it should be enough for most systems. More details about this option can be found in Open vSwitch documentation (http://www.openvswitch.org/support/dist-docs/ovs- vswitchd.conf.db.5.html) For more information see bug 1775797 (https://bugs.launchpad.net/neutron/+bug/1775797). Changes in neutron 11.0.5..11.0.6 --------------------------------- bdbcf56 DVR: Avoid address scope rules for dvr_no_external agents 6b701e6 Don't uninstall flow tables in setup_dvr_flows_on_integ_br 3eaaf07 [Functional] Increase test_timeout for db migration tests 44ed7e5 Fix dvr ha router gateway goes wrong host 020d745 Revert "DVR: Inter Tenant Traffic between networks not possible with shared net" 9481da1 DVR-HA: Configure extra routes on router namespace in dvr_snat node eb7bb07 Revert "DVR: Add error handling for get_network_info_for_id rpc call" f26eed6 [Functional] Increase test_timeout for db migration tests c78b80b Fix bash cmd used in scenario trunk tests 8b57a6d Fix corner case in failure assigning MAC to SR-IOV NIC 5a91c6d Don't skip DVR port while neutron-openvswitch-agent is restared. 77152ee DVR: Fix mac format for backward compatibility with vsctl api 58aaff6 Do not install centralized FIP if HA port is down 04b7f80 Parse dhcp leases file in a more robust way c5f3bc2 import zuul job settings from project-config 5843387 ovsdb monitor: do not die on ovsdb-client stderr output 8804486 Revert "DVR: Fix allowed_address_pair IP, ARP table update by neutron agent" 9189ade [OVS] Shut down the port on changing the admin-state to false dbd6dbb tests: Add decorator to mark unstable tests 1ba5e69 l2 pop: check for more than 1 first active port on a node 6a8a1f8 Add iptables metadata marking rule on router init 64a9d41 Trivial: avoid KeyError while processing ports f41287b Wait until all router ports are DOWN before migration 5be3950 Remove fdb entries for ha router interfaces when going DOWN cefafe3 get_subnet_for_dvr returns SNAT mac instead of distributed gateway in subnet_info 9cb7643 DVR: Add IPv6 csnat port address correctly c49cc2c Reduce qos rpc times on the ovs-agent side 27519e8 Use older keepalived version in functional tests e44b431 Make dvr router port creation retriable 6aada38 Retry dhcp_release on failures ac6ae10 Refactor DVR HA migarations DB operations 988ecea Disallow router interface out of subnet IP range f591c89 Skip MTU check during deletion of Networks be7267a Fix fwaas v1 configuration doc ed4a70c Add list of all working DSCP marks 00998f6 Reduce IP address collision during port creating e5584db [Fullstack] HA L3 agent restart only standby agents ee1ae8b Set trusted port only once in iptables firewall driver 45ae2e4 Fix UT BridgeLibTest when IPv6 is disabled a7c9352 DVR: Self recover from the loss of 'fg' ports in FIP Namespace 3cfa987 DVR: FIP gateway port is tagged as DEAD port by OVS with external-bridge e6c6351 Dropping radvd process privileges 5522da6 [Fullstack] Change time waiting for async ping results a6ee16d This patch changes the CT zone allocation range e123bd7 Iptables firewall driver adds forward rules for trusted ports 073b44b [Scenario tests] Try longer SSH timeout for ubuntu image 44b159a [OVS] Add mac-table-size to be set on each ovs bridge 74a8a70 Enable dns_domain_ports extension in tempest config eb7ee4d Don't set administratively disabled ports as ACTIVE a4f9135 Windows: fix exec calls b22a9d5 Fix race condition with enabling SG on many ports at once a423322 Use rally 0.12.1 release for stable/pike branch. 5e96713 Add/rm centralized fips for DVR+HA from standby node 18a2f9b Fix DVR scheduling checks wrong profile for host cb0afda Handle AgentNotFoundByTypeHost exception properly cdcc704 [OVS] Fix for cleaning after skipped_devices 0adc910 Fix Port OVO filtering based on security groups e8a9cc1 [Fullstack] Add block test until IPs will be really configured 28e5996 [Fullstack] Wait for SG to be applied by L2 agent ba9fd19 Disable IPv6 forwarding by default on HA routers 0dfc7ef test_security_groups: Randomize SG names a06e6b2 Fix meter-label-rule creation 29e0c76 Refresh router objects after port binding cf14d20 DVR: Restarting l3 agent loses centralized fip ip on qg-interface e36c6b6 DVR: Add error handling for get_network_info_for_id rpc call 6956821 DVR: Inter Tenant Traffic between networks not possible with shared net Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 155 +++++- neutron/agent/common/ovs_lib.py | 5 + neutron/agent/l2/extensions/qos.py | 3 +- neutron/agent/l3/dvr.py | 4 +- neutron/agent/l3/dvr_edge_ha_router.py | 18 +- neutron/agent/l3/dvr_fip_ns.py | 10 +- neutron/agent/l3/dvr_local_router.py | 68 ++- neutron/agent/l3/ha_router.py | 7 +- neutron/agent/l3/namespaces.py | 5 +- neutron/agent/l3/router_info.py | 18 +- neutron/agent/linux/dhcp.py | 93 +++- neutron/agent/linux/ip_conntrack.py | 9 +- neutron/agent/linux/ip_lib.py | 7 + neutron/agent/linux/iptables_comments.py | 1 + neutron/agent/linux/iptables_firewall.py | 38 +- neutron/agent/linux/ovsdb_monitor.py | 2 +- neutron/agent/linux/ra.py | 11 +- neutron/agent/metadata/driver.py | 12 - neutron/agent/resource_cache.py | 2 +- neutron/agent/securitygroups_rpc.py | 16 +- neutron/agent/windows/utils.py | 39 +- neutron/agent/windows/winutils.py | 606 --------------------- neutron/api/rpc/handlers/l3_rpc.py | 12 +- neutron/common/eventlet_utils.py | 8 +- neutron/conf/agent/ovs_conf.py | 7 + neutron/db/l3_agentschedulers_db.py | 8 +- neutron/db/l3_db.py | 56 +- neutron/db/l3_dvr_db.py | 84 +-- neutron/db/l3_dvrscheduler_db.py | 9 +- neutron/db/l3_hamode_db.py | 58 +- neutron/ipam/drivers/neutrondb_ipam/driver.py | 5 +- neutron/objects/ports.py | 22 + neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 40 +- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 5 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 29 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 8 +- neutron/plugins/ml2/plugin.py | 7 +- neutron/plugins/ml2/rpc.py | 20 +- neutron/privileged/agent/linux/ip_lib.py | 3 +- .../metering/drivers/iptables/iptables_driver.py | 4 +- .../l3_router/test_l3_dvr_router_plugin.py | 12 +- .../unit/agent/l3/test_l3_agent_extension_api.py | 6 +- .../unit/agent/linux/test_iptables_firewall.py | 113 +++- .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 149 +++++ .../mech_sriov/agent/test_sriov_nic_agent.py | 29 + .../openvswitch/agent/test_ovs_neutron_agent.py | 78 ++- .../unit/scheduler/test_l3_agent_scheduler.py | 51 +- .../services/metering/drivers/test_iptables.py | 38 +- ...-table-size-config-option-d255d5208650f34b.yaml | 14 + tools/configure_for_func_testing.sh | 6 + 92 files changed, 2814 insertions(+), 1103 deletions(-)

1 0

neutron-fwaas 11.0.2 (pike)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We are happy to announce the release of: neutron-fwaas 11.0.2: OpenStack Networking FWaaS This release is part of the pike stable release series. Download the package from: https://tarballs.openstack.org/neutron-fwaas/ For more details, please see below. Changes in neutron-fwaas 11.0.1..11.0.2 --------------------------------------- 2df0379 import zuul job settings from project-config 1d884ea Fix pep8 new warnings and pip install error d02659f tests: don't rely on configuration files outside tests directory e96a39f DVR-FWaaS: Fix DVR FWaaS rules for fipnamespace ea4e959 Install neutron as of stable/pike for unit tests c3d175a Use neutron-lib FirewallInternalDriverError c2bafa9 Fix filtering parameter to get firewall_group Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 33 + neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 10 +- .../versions/4202e3047e47_add_index_tenant_id.py | 3 +- .../540142f314f4_fwaas_router_insertion.py | 8 +- .../versions/796c68dffbb_cisco_csr_fwaas.py | 7 +- ...5cc0_shared_attribute_for_firewall_resources.py | 6 +- .../agents/l3reference/firewall_l3_agent.py | 2 +- .../agents/l3reference/firewall_l3_agent_v2.py | 2 +- .../firewall/drivers/linux/iptables_fwaas.py | 13 +- .../firewall/drivers/linux/iptables_fwaas_v2.py | 11 +- .../unit/db/firewall/v2/test_firewall_db_v2.py | 46 ++ .../firewall/drivers/linux/test_iptables_fwaas.py | 2 +- .../drivers/linux/test_iptables_fwaas_v2.py | 2 +- tools/tox_install.sh | 9 +- tox.ini | 3 +- 19 files changed, 180 insertions(+), 723 deletions(-)

1 0

neutron 13.0.2 (rocky)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We are pumped to announce the release of: neutron 13.0.2: OpenStack Networking This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. Changes in neutron 13.0.1..13.0.2 --------------------------------- a3d471b Add capabilities for privsep fc944d3 Add permanent ARP entries for DVR fip/qrouter veth pair 54c2526 Use neutron-tempest-plugin-jobs-rocky in rocky branch ed1b228 Increase tempest jobs timeout 63ebee3 [Functional] Increase test_timeout for db migration tests d585179 Make port binding attempt after agent is revived b411b5f Fix dvr ha router gateway goes wrong host 054e8e0 Allow update request with current segment_id 114752c DVR-HA: Configure extra routes on router namespace in dvr_snat node 026d911 [Functional] Increase test_timeout for db migration tests 8f54993 Fullstack test for minimum bw rule ingress create 1984372 Allow Ipv6 addresses for nova_metadata_host 2a1cdf0 Install centralized floating IP nat rules to all ha nodes 9574da1 Fix corner case in failure assigning MAC to SR-IOV NIC 694d775 Revert "DVR: Inter Tenant Traffic between networks not possible with shared net" d1a0d63 Revert "DVR: Add error handling for get_network_info_for_id rpc call" 1cd4b8e Do not install centralized FIP if HA port is down 02bd0ba Fetch specific columns rather than full ORM entities 7859941 doc: add known limitation about attaching SR-IOV ports 0ea92d3 Don't uninstall flow tables in setup_dvr_flows_on_integ_br ffcb22f Parse dhcp leases file in a more robust way b2cd922 Fix IPv6 prefix delegation issue on agent restart 0cf75ec [Fullstack] Mark securitygroups tests as unstable 5bd182e ovsdb monitor: do not die on ovsdb-client stderr output 1c1bb73 Fix pylint warning with eventlet > 0.22.0 dbc9441 l2 pop: check for more than 1 first active port on a node c28e496 metadata: use requests for comms with nova api 3c1c40d Use system protocol assigments for iptables protocol map Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 8 +- neutron/agent/l3/dvr_edge_ha_router.py | 5 +- neutron/agent/l3/dvr_edge_router.py | 8 + neutron/agent/l3/dvr_fip_ns.py | 7 + neutron/agent/l3/dvr_local_router.py | 35 +++ neutron/agent/l3/ha_router.py | 1 + neutron/agent/l3/router_info.py | 3 + neutron/agent/linux/dhcp.py | 4 + neutron/agent/linux/iptables_firewall.py | 46 +++- neutron/agent/linux/ovsdb_monitor.py | 2 +- neutron/agent/linux/utils.py | 4 + neutron/agent/metadata/agent.py | 51 ++-- neutron/api/rpc/handlers/dvr_rpc.py | 14 - neutron/common/ipv6_utils.py | 12 + neutron/db/agents_db.py | 2 + neutron/db/db_base_plugin_v2.py | 6 +- neutron/db/external_net_db.py | 14 +- neutron/db/ipam_backend_mixin.py | 5 +- neutron/db/ipam_pluggable_backend.py | 7 +- neutron/db/l3_db.py | 4 +- neutron/db/l3_dvr_db.py | 36 +-- neutron/db/l3_hamode_db.py | 35 +++ neutron/db/portbindings_db.py | 2 +- neutron/db/provisioning_blocks.py | 3 +- neutron/db/rbac_db_mixin.py | 2 +- neutron/ipam/subnet_alloc.py | 4 +- neutron/objects/ports.py | 10 + neutron/plugins/ml2/db.py | 8 +- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 7 +- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 5 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 48 +--- neutron/plugins/ml2/plugin.py | 48 ++++ neutron/privileged/__init__.py | 5 +- neutron/quota/resource.py | 6 +- neutron/scheduler/l3_agent_scheduler.py | 2 +- .../unit/agent/linux/test_iptables_firewall.py | 16 ++ .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 54 ++++ .../mech_sriov/agent/test_sriov_nic_agent.py | 29 +++ .../openvswitch/agent/test_ovs_neutron_agent.py | 289 ++------------------- requirements.txt | 1 + 63 files changed, 1192 insertions(+), 501 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2961e8a..0825799 100644 --- a/requirements.txt +++ b/requirements.txt @@ -12,0 +13 @@ httplib2>=0.9.1 # MIT +requests>=2.14.2 # Apache-2.0

1 0

neutron-fwaas 13.0.1 (rocky)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We high-spiritedly announce the release of: neutron-fwaas 13.0.1: OpenStack Networking FWaaS This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/neutron-fwaas/ For more details, please see below. Changes in neutron-fwaas 13.0.0..13.0.1 --------------------------------------- 1b1c91c Should forward only first accepted packet to table 91 and 92 7b2fac2 import zuul job settings from project-config 915479f Update UPPER_CONSTRAINTS_FILE for stable/rocky Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 28 +++++++++++++++++++ .../linux/l2/openvswitch_firewall/firewall.py | 32 ++++++---------------- .../drivers/linux/l2/openvswitch_firewall/rules.py | 11 ++++---- .../linux/l2/openvswitch_firewall/test_rules.py | 7 ++--- tox.ini | 2 +- 5 files changed, 46 insertions(+), 34 deletions(-)

1 0

nova 18.0.3 (rocky)
by no-reply＠openstack.org 06 Nov '18

06 Nov '18

We high-spiritedly announce the release of: nova 18.0.3: Cloud computing fabric controller This release is part of the rocky stable release series. Download the package from: https://tarballs.openstack.org/nova/ For more details, please see below. 18.0.3 ^^^^^^ Upgrade Notes * A new check is added to the "nova-status upgrade check" CLI to check for use of the "nova-consoleauth" service to warn and provide additional instructions to set "[workarounds]enable_consoleauth = True" while performing a live/rolling upgrade. Changes in nova 18.0.2..18.0.3 ------------------------------ 2147093 Add nova-status upgrade check for consoles 63bf383 Explain cpu_model_extra_flags and nested guest support d362e42 Add rolling upgrade info to enable_consoleauth workaround reno 66ec5b4 libvirt: Avoid setting MTU during live migration if unset d28e734 Add tests for bug #1800511 ad3ed22 Fix up compute rpcapi version for pike release 6aecf47 Ensure attachment cleanup on failure in driver.pre_live_migration ae2da62 Move live_migration.pre.start to the start of the method 2a741be conductor: Recreate volume attachments during a reschedule 96889ad Add regression test for bug#1784353 3452b60 fixtures: Track volume attachments within CinderFixtureNewAttachFlow 57566f4 Ignore uuid if already set in ComputeNode.update_from_virt_driver 44e12db Fix formatting non-templated cell URLs with no config 6bd7e8a Use unique consumer_id when doing online data migration 83396b3 Add recreate test for bug 1798163 cf3c2f3 Handle volume API failure in _post_live_migration 3c69c1f Use nova-consoleauth only if workaround enabled 1722e9f Replace usage of get_legacy_facade() with get_engine() d1243fe Imported Translations from Zanata 57b4675 Handle missing marker during online data migration ae39c03 Not set instance to ERROR if set_admin_password failed 22c404d hyperv: Cleans up live migration Planned VM f8b5e61 Update ssh configuration doc Diffstat (except docs and test files) ------------------------------------- nova/api/openstack/compute/console_auth_tokens.py | 24 +- nova/api/openstack/placement/objects/consumer.py | 4 + .../placement/objects/resource_provider.py | 4 + nova/cmd/status.py | 83 + nova/compute/api.py | 79 +- nova/compute/manager.py | 176 +- nova/compute/rpcapi.py | 8 +- nova/conductor/manager.py | 25 + nova/console/websocketproxy.py | 22 +- nova/db/sqlalchemy/api.py | 6 +- nova/locale/cs/LC_MESSAGES/nova.po | 17 +- nova/locale/de/LC_MESSAGES/nova.po | 17 +- nova/locale/es/LC_MESSAGES/nova.po | 17 +- nova/locale/fr/LC_MESSAGES/nova.po | 17 +- nova/locale/it/LC_MESSAGES/nova.po | 17 +- nova/locale/ja/LC_MESSAGES/nova.po | 17 +- nova/locale/ko_KR/LC_MESSAGES/nova.po | 33 +- nova/locale/pt_BR/LC_MESSAGES/nova.po | 17 +- nova/locale/ru/LC_MESSAGES/nova.po | 17 +- nova/locale/tr_TR/LC_MESSAGES/nova.po | 14 +- nova/locale/zh_CN/LC_MESSAGES/nova.po | 17 +- nova/locale/zh_TW/LC_MESSAGES/nova.po | 17 +- nova/objects/cell_mapping.py | 14 +- nova/objects/compute_node.py | 5 + nova/objects/console_auth_token.py | 18 + nova/objects/request_spec.py | 18 +- .../api/openstack/placement/db/test_consumer.py | 33 +- .../functional/compute/test_live_migration.py | 148 + .../functional/regressions/test_bug_1404867.py | 6 +- .../functional/regressions/test_bug_1675570.py | 6 +- .../functional/regressions/test_bug_1784353.py | 90 + .../openstack/compute/test_console_auth_tokens.py | 105 +- nova/virt/hyperv/vmops.py | 6 + nova/virt/hyperv/volumeops.py | 6 + nova/virt/libvirt/migration.py | 9 +- ...status-check-consoleauths-618acb3a67f97418.yaml | 7 + ...rounds-enable-consoleauth-71d68c3879dc2c8a.yaml | 39 +- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 5612 -------------------- 55 files changed, 1645 insertions(+), 6142 deletions(-)

1 0