April 2019 - Release-announce - lists.openstack.org

kolla-ansible 7.1.0 (rocky)
by no-reply＠openstack.org 13 Apr '19

13 Apr '19

We are pumped to announce the release of: kolla-ansible 7.1.0: Ansible Deployment of Kolla containers This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 7.1.0 ^^^^^ New Features ************ * Adds support for installing Docker Community Edition (CE) using the "kolla-ansible bootstrap-servers" command. Existing support uses the legacy packages from https://dockerproject.org. New packages are distributed via https://download.docker.com, and that location is now supported and used by default. Use of the new packages is enabled by setting the variable "docker_legacy_packages" to "false". New packages are enabled by default only for Ubuntu 18.04+, which does not support the legacy packages. It is also now possible to skip configuration of the Docker repository, by setting the variable "enable_docker_repo" to "false". * Exposed a config option to enable the ceph manager prometheus plugin, this also enables the exporter on the prometheus-server configuration for each ceph-mgr host. Upgrade Notes ************* * The default value for "docker_legacy_packages" is "true" on all OS distributions except Ubuntu 18.04+. If this is set to "false", the Docker Community Edition (CE) will be installed. If the "kolla- ansible bootstrap-servers" command is used on a previously deployed host that is running a legacy Docker engine, it would result in the Docker engine being upgraded to use the Docker Community Edition packages, which will result in a restart of the Docker engine and the containers running on that host. Use the "kolla-ansible" "-- serial" or "--limit" arguments to avoid losing quorum in clustered services such as MariaDB by restarting all containers at once. Other Notes *********** * Link kolla_logs docker volume to /var/log/kolla. Shorter log path will help to debug from log. The volume path is compatible with docker-engine and docker-ce. Changes in kolla-ansible 7.0.1..7.1.0 ------------------------------------- a7a6c0acc Fix failure to mount cephfs 0669d4f3e Create /volumes when using external ceph 79a976307 Remove recurse: yes for owner/perms on /etc/kolla 855c6143b Retry perform a synced flush task while upgrading elasticsearch 1e2df9e3d Don't send SIGHUP to placement-api 59d518a75 Fix booting instances after nova-compute upgrade 8232797c2 Fix reconfigure of neutron ml2_conf.ini 40a5c8c8a Use new Docker packages in Ubuntu 18.04+ 2e6a6ecfa Upgrade test: add support for being the source release 113e269af Replace openstack.org git:// URLs with https:// 90329984c Fix Neutron precheck to not fail with newer Docker 0f8fee14c Fix swift reconfigure 47883649e Fix Prometheus Server/Alertmanager config update 03a1a61e4 Fix bootstrap-servers on Ansible 2.6+ 1d15fa1fa Link kolla_log volume dir to /var/log/kolla facacff2f Add become for Octavia configuration tasks 6746aba8d Updates references to latest release to rocky. 124dbceca Configure region_name_for_services in heat.conf 17dab13f7 Karbor providers managed from deployment node 7de16dbc3 Support Docker CE in bootstrap-servers d835e1bfb Fix location of hostdirs for Murano services f74d7e511 Fix link to Manila Guide 88fbf1766 Fix MariaDB bootstrap issues on CentOS 1734ff713 Create cells before starting nova services c4f285c2c Fix py35/py36 and k-a-ubuntu-source gate jobs 7acdf9a31 Fix prometheus prechecks for haproxy and memcached 2f13d3920 Fix missing transport_url for ironic inspector 1026ad6e8 oslo.config>=5.2.0 which is a dependency of kolla-ansible requires rfc3986>=1.2.0 2cb13e408 [prometheus] Enable ceph mgr exporter e304fd41c Make the aodh support deploy separated 06888f88d Update the links to https ed87cd681 Add YAML format into docs for policy file 8229149fe Update the openstack_release c33bcffa5 Use kolla-ansible version to tag images 96c4a830d Optimize reconfiguration for multipathd Diffstat (except docs and test files) ------------------------------------- README.rst | 8 +- ansible/group_vars/all.yml | 2 + ansible/kolla-host.yml | 3 +- ansible/library/kolla_docker.py | 46 +++++++-- ansible/roles/baremetal/defaults/main.yml | 63 ++++++++++-- ansible/roles/baremetal/tasks/install.yml | 48 ++++++++- ansible/roles/baremetal/tasks/post-install.yml | 4 +- ansible/roles/baremetal/tasks/pre-install.yml | 109 +++++++++++---------- .../roles/baremetal/templates/docker_apt_repo.j2 | 6 -- .../roles/baremetal/templates/docker_yum_repo.j2 | 6 -- ansible/roles/ceph/tasks/start_mgrs.yml | 6 ++ ansible/roles/common/tasks/bootstrap.yml | 7 ++ ansible/roles/elasticsearch/tasks/upgrade.yml | 4 + ansible/roles/heat/templates/heat.conf.j2 | 2 + .../ironic/templates/ironic-inspector.conf.j2 | 4 + ansible/roles/karbor/handlers/main.yml | 1 + ansible/roles/karbor/tasks/config.yml | 24 ++++- .../karbor/templates/karbor-protection.json.j2 | 4 +- ansible/roles/manila/defaults/main.yml | 1 + ansible/roles/manila/tasks/deploy.yml | 3 +- ansible/roles/manila/tasks/fix_cephfs_owner.yml | 21 +++- ansible/roles/mariadb/templates/galera.cnf.j2 | 1 + ansible/roles/multipathd/defaults/main.yml | 21 ++++ ansible/roles/multipathd/handlers/main.yml | 24 +++++ ansible/roles/multipathd/tasks/config.yml | 54 +++++++--- ansible/roles/multipathd/tasks/deploy.yml | 3 +- ansible/roles/multipathd/tasks/pull.yml | 7 +- ansible/roles/multipathd/tasks/start.yml | 22 ----- ansible/roles/multipathd/tasks/upgrade.yml | 3 +- ansible/roles/murano/defaults/main.yml | 4 +- ansible/roles/neutron/handlers/main.yml | 4 +- ansible/roles/neutron/tasks/config.yml | 2 +- ansible/roles/neutron/tasks/precheck.yml | 5 +- ansible/roles/nova/defaults/main.yml | 12 +++ ansible/roles/nova/tasks/config.yml | 13 +-- ansible/roles/nova/tasks/create_cells.yml | 51 ++++++++++ ansible/roles/nova/tasks/deploy.yml | 4 +- ...simple_cell_setup.yml => discover_computes.yml} | 27 ----- ansible/roles/nova/tasks/reload.yml | 51 +++++++--- ansible/roles/octavia/tasks/config.yml | 2 + ansible/roles/prometheus/handlers/main.yml | 1 + ansible/roles/prometheus/tasks/config.yml | 2 +- ansible/roles/prometheus/tasks/precheck.yml | 3 +- .../roles/prometheus/templates/prometheus.yml.j2 | 10 ++ ansible/roles/swift/tasks/reconfigure.yml | 2 +- ansible/site.yml | 5 +- etc/kolla/globals.yml | 1 + lower-constraints.txt | 2 +- releasenotes/notes/docker-ce-722582da41cf6cd3.yaml | 26 +++++ .../notes/link_kolla_logs-e57a1e583f2872eb.yaml | 6 ++ ...s-add-ceph-manager-plugin-7bcde3ec0356e26b.yaml | 6 ++ requirements.txt | 1 + tools/cleanup-containers | 3 + tools/setup_gate.sh | 6 +- tox.ini | 2 +- 63 files changed, 603 insertions(+), 224 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d7f806744..0bf32bc9d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13,0 +14 @@ cryptography>=2.1 # BSD/Apache-2.0 +jmespath>=0.9.3 # MIT

1 0

openstack-congress 6.0.2 (pike)
by no-reply＠openstack.org 13 Apr '19

13 Apr '19

We are excited to announce the release of: openstack-congress 6.0.2: Congress: The open policy framework for the cloud. This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/congress Download the package from: https://tarballs.openstack.org/congress/ Please report issues through: https://bugs.launchpad.net/congress/+bugs For more details, please see below. Changes in openstack-congress 6.0.1..6.0.2 ------------------------------------------ 6e0558e6 change the dist name to 'openstack-congress' 3d0b233b simplify README.rst c079bae0 Replace openstack.org git:// URLs with https:// 741484b0 Use YAML safe_load_all d3e8a9cc Improve documentation of policy create API 3dab8e1d import zuul job settings from project-config 6a7bc328 Zuul: Remove project name Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 11 ++- README.rst | 83 +--------------------- congress/__init__.py | 2 +- congress/library_service/library_service.py | 2 +- congress/version.py | 2 +- .../legacy/congress-devstack-api-base/run.yaml | 14 ++-- .../congress-devstack-py35-api-mysql/run.yaml | 14 ++-- .../legacy/congress-pe-replicated-base/run.yaml | 14 ++-- setup.cfg | 2 +- 12 files changed, 165 insertions(+), 112 deletions(-)

1 0

openstack-congress 8.0.1 (rocky)
by no-reply＠openstack.org 13 Apr '19

13 Apr '19

We are jazzed to announce the release of: openstack-congress 8.0.1: Congress: The open policy framework for the cloud. This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/congress Download the package from: https://tarballs.openstack.org/congress/ Please report issues through: https://bugs.launchpad.net/congress/+bugs For more details, please see below. 8.0.1 ^^^^^ Prelude ******* Bug Fixes ********* * Fixed an issue where some vitrage and monasca webhook updates are missed by the policy engine under some conditions. Changes in openstack-congress 8.0.0..8.0.1 ------------------------------------------ e4693afc change the dist name to 'openstack-congress' 4c5b2366 simplify README.rst 02e0bf65 Replace openstack.org git:// URLs with https:// ade25890 Use YAML safe_load 6054c09a Use YAML safe_load_all fe00d003 Set nova_servers_addresses_table feature flag False 57b89e21 Add release note for webhook pub-sub bugfix 82092ac8 Avoid coreference between current state and _last_published_data e28d1702 Set feature flag to indicate monasca webhook rocky schema a04ee51d set congressz3.support_builtins to false ff9e1fec Improve documentation of policy create API 6862ac9f add rocky feature flags for tempest testing 8a99299b add instruction to install rabbitmq-server 4d40d3cc import zuul job settings from project-config 1f92b5d8 Update UPPER_CONSTRAINTS_FILE for stable/rocky 8b423a66 Update .gitreview for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 8 +++ README.rst | 83 +--------------------- congress/__init__.py | 2 +- congress/datasources/datasource_driver.py | 4 +- congress/dse2/data_service.py | 25 ++++--- congress/dse2/dse_node.py | 2 +- congress/library_service/library_service.py | 2 +- congress/version.py | 2 +- devstack/plugin.sh | 9 ++- .../legacy/congress-devstack-api-base/run.yaml | 14 ++-- .../congress-devstack-py35-api-mysql/run.yaml | 10 +-- .../legacy/congress-pe-replicated-base/run.yaml | 12 ++-- .../notes/webhook-publish-2127b66893a33ea2.yaml | 5 ++ setup.cfg | 2 +- tox.ini | 2 +- 21 files changed, 221 insertions(+), 144 deletions(-)

1 0

neutron 11.0.7 (pike)
by no-reply＠openstack.org 13 Apr '19

13 Apr '19

We are happy to announce the release of: neutron 11.0.7: OpenStack Networking This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 11.0.7 ^^^^^^ Critical Issues *************** * The neutron-openvswitch-agent can sometimes spend too much time handling a large number of ports, exceeding its timeout value, "agent_boot_time", for L2 population. Because of this, some flow update operations will not be triggerred, resulting in lost flows during agent restart, especially for host-to-host vxlan tunnel flows, causing the original tunnel flows to be treated as stale due to the different cookie IDs. The agent's first RPC loop will also do a stale flow clean-up procedure and delete them, leading to a loss of connectivity. Please ensure that all neutron-server and neutron- openvswitch-agent binaries are upgraded for the changes to take effect, after which the L2 population "agent_boot_time" config option will no longer be used. Bug Fixes ********* * Fixes bug 1501206 (https://bugs.launchpad.net/neutron/+bug/1501206) This ensures that DHCP agent instances running dnsmasq as a DNS server can no longer be exploited as DNS amplifiers when the tenant network is using publicly routed IP addresses by adding an option that will allow them to only serve DNS requests from local networks. * Fixes an issue causing IP allocation on port update to fail when the initial IP allocation was deferred due to lack of binding info. If both the port mac_address and binding info (binding_host_id) were updated in the same request, the fixed_ips field was added to the request internally. The code to complete the deferred allocation failed to execute in that case. (For more information see bug 1811905 (https://bugs.launchpad.net/neutron/+bug/1811905).) * The neutron-openvswitch-agent was changed to notify the neutron- server in its first RPC loop that it has restarted. This signals neutron-server to provide updated L2 population information to correctly program FDB entries, ensuring connectivity to instances is not interrupted. This fixes the following bugs: 1794991 (https://bugs.launchpad.net/neutron/+bug/1794991) 1799178 (https://bugs.launchpad.net/neutron/+bug/1799178) 1813703 (https://bugs.launchpad.net/neutron/+bug/1813703) 1813714 (https://bugs.launchpad.net/neutron/+bug/1813714) 1813715 (https://bugs.launchpad.net/neutron/+bug/1813715) Other Notes *********** * The metering agent iptables driver can now load its interface driver by using a stevedore alias in the "metering_agent.ini" file. For example, "interface_driver = openvswitch" instead of "interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver" Changes in neutron 11.0.6..11.0.7 --------------------------------- 36a1e193cb Don't pass None arg to neutron-keepalived-state-change 8865466e9f OVS agent: always send start flag during initial sync 4651fac9cb Specify tenant_id in TestRevisionPlugin objects ff0a444526 Fix QoS rule update 672a4328a9 Add rootwrap filters to kill state change monitor e6ec35f679 Fix port update deferred IP allocation with host_id + new MAC 51a7666533 Divide-and-conquer security group beasts a6c3d3ae3c Try to enable dnsmasq process several times 6191355da6 [OVS] Exception message when retrieving bridge-id and is not present ad1d4358ec [Functional tests] Change way how conntrack entries are checked 1c72d30d2d Change duplicate OVS bridge datapath-ids 125fc48111 Remove conntrack rule when FIP is deleted 62fe7852bb More accurate agent restart state transfer fb84771d13 Divide-and-conquer local bridge flows beasts a9bc8ab1e1 Fix KeyError in OVS firewall 6345337681 Check if process' cmdline is "space separarated" 9274bb5e4c Replace openstack.org git:// URLs with https:// 93cd1921f1 ovs: survive errors from check_ovs_status 876e1d7969 ovs: raise RuntimeError in _get_dp if id is None e2f93a2703 [Functional] Don't assert that HA router don't have IPs configured 6b41b07dc3 ovsfw: Update SG rules even if OVSFW Port is not found bfdd867580 Improve invalid port ranges error message 6c9a282bcd Enable ipv6_forwarding in HA router's namespace 91c26f5658 Set initial ha router state in neutron-keepalived-state-change 9961fa068b Do not release DHCP lease when no client ID is set on port e53afe831a When converting sg rules to iptables, do not emit dport if not supported 5aa1c315fc Spawn metadata proxy on dvr ha standby routers a906ace3ef DVR edge router: avoid accidental centralized floating IP remove 6d375dcced ovsfw: Don't create rules if updated port doesn't exist 8b255a648c Add new test decorator skip_if_timeout 3af8e2719c Fix notification about arp entries for dvr routers 6098f54722 Add lock_path in installation guide 10c981512a Fix update of ports cache in router_info class d218a8abb2 Ensure dnsmasq is down before enabling it in restart method b2418bc248 Block port update from unbound DHCP agent f9cbd939b9 Fix performance regression adding rules to security groups 399f1c1b65 Always fill UDP checksums in DHCPv6 replies 72d9c3ccb3 Secure dnsmasq process against external abuse edd8ad31d7 Check port VNIC type when associating a floating IP 4f5c5ab433 Enable 'all' IPv6 forwarding knob correctly c5a1214ca6 protect DHCP agent cache out of sync c86473d1a6 Add kill_timeout to AsyncProcess 9b399af547 Fullstack: init trunk agent's driver only when necessary dab82d56c4 Don't modify global variables in unit tests 329de01d09 Do state report after setting start_flag on OVS restart d36cb19813 Do not delete trunk bridges if service port attached cc7e3e92fe Fix the bug about DHCP port whose network has multiple subnets. fccc786fd5 Force all fdb entries update after ovs-vswitchd restart 6e3102b095 Get centralized FIP only on router's snat host a2b6f4af6b DevStack: OVS: Only install kernel-* packages when needed 888cbc2970 Include all rootwrap filters when building wheels f7f09c79e5 DVR: Centralized FloatingIPs are not cleared after migration. c08f99c7e0 Fix connection between 2 dvr routers a4fe8a03ae Wait to ipv6 forwarding be really changed by L3 agent c757992da1 Add missing step for ovs deploy guides cb2b2d20e6 iptables-restore wait period cannot be zero b527af20bb Use system protocol assigments for iptables protocol map 7dad724b0d Install centralized floating IP nat rules to all ha nodes 663d6486a3 Add capabilities for privsep 16c2d64bdc Add permanent ARP entries for DVR fip/qrouter veth pair 2fba9f42b9 Allow Ipv6 addresses for nova_metadata_host d0931c4e55 dhcp: serializing port delete and network rpc calls aa4cbc9cde Drop strict-order flag from dnsmasq invocation a54a7235a5 Fix iptables metering driver entrypoint dc13609435 Update metering driver to load interface driver Diffstat (except docs and test files) ------------------------------------- devstack/lib/ovs | 12 +- .../install/controller-install-option1-obs.rst | 12 + .../install/controller-install-option1-ubuntu.rst | 12 + .../install/controller-install-option2-obs.rst | 12 + .../install/controller-install-option2-ubuntu.rst | 12 + etc/neutron/rootwrap.d/l3.filters | 13 +- neutron/agent/common/ovs_lib.py | 22 +- neutron/agent/dhcp/agent.py | 123 ++++++--- neutron/agent/l3/agent.py | 65 ++++- neutron/agent/l3/dvr_edge_ha_router.py | 7 +- neutron/agent/l3/dvr_edge_router.py | 39 ++- neutron/agent/l3/dvr_fip_ns.py | 7 + neutron/agent/l3/dvr_local_router.py | 50 +++- neutron/agent/l3/ha.py | 37 ++- neutron/agent/l3/ha_router.py | 11 +- neutron/agent/l3/keepalived_state_change.py | 22 ++ neutron/agent/l3/router_info.py | 53 ++-- neutron/agent/l3/router_processing_queue.py | 17 +- neutron/agent/linux/async_process.py | 34 ++- neutron/agent/linux/dhcp.py | 60 +++-- neutron/agent/linux/ip_lib.py | 6 + neutron/agent/linux/iptables_firewall.py | 66 ++++- neutron/agent/linux/iptables_manager.py | 2 +- .../agent/linux/openvswitch_firewall/exceptions.py | 4 + .../agent/linux/openvswitch_firewall/firewall.py | 49 ++-- neutron/agent/linux/openvswitch_firewall/rules.py | 16 +- neutron/agent/linux/utils.py | 15 +- neutron/agent/metadata/agent.py | 7 +- neutron/agent/rpc.py | 5 +- neutron/agent/securitygroups_rpc.py | 16 +- .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 7 +- neutron/api/rpc/handlers/dhcp_rpc.py | 13 +- neutron/cmd/sanity/checks.py | 15 ++ neutron/cmd/sanity_check.py | 15 ++ neutron/common/constants.py | 15 ++ neutron/common/ipv6_utils.py | 12 + neutron/db/ipam_pluggable_backend.py | 10 +- neutron/db/l3_db.py | 25 ++ neutron/db/l3_dvr_db.py | 127 ++++++++- neutron/db/l3_dvr_ha_scheduler_db.py | 9 +- neutron/db/l3_dvrscheduler_db.py | 170 +++++++++--- neutron/db/securitygroups_db.py | 147 +++++------ neutron/extensions/securitygroup.py | 5 +- neutron/objects/base.py | 2 +- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 9 +- .../drivers/openvswitch/agent/common/constants.py | 33 +++ .../openvswitch/agent/openflow/native/br_int.py | 2 + .../openvswitch/agent/openflow/native/br_phys.py | 1 + .../openvswitch/agent/openflow/native/br_tun.py | 1 + .../openvswitch/agent/openflow/native/ofswitch.py | 15 +- .../agent/openflow/native/ovs_bridge.py | 8 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 74 +++++- neutron/plugins/ml2/rpc.py | 12 +- neutron/privileged/__init__.py | 5 +- .../metering/drivers/iptables/iptables_driver.py | 9 +- neutron/services/qos/qos_plugin.py | 3 +- .../drivers/openvswitch/agent/ovsdb_handler.py | 14 + .../agent/l3/test_keepalived_state_change.py | 30 ++- .../functional/agent/linux/test_netlink_lib.py | 8 +- .../l3_router/test_l3_dvr_router_plugin.py | 14 +- .../openvswitch/agent/test_ovsdb_handler.py | 8 + .../linux/openvswitch_firewall/test_firewall.py | 21 +- .../agent/linux/openvswitch_firewall/test_rules.py | 13 +- .../unit/agent/linux/test_iptables_firewall.py | 30 +++ .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 23 +- .../agent/openflow/native/test_ovs_bridge.py | 5 + .../openvswitch/agent/test_ovs_neutron_agent.py | 60 ++++- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 13 +- .../unit/scheduler/test_l3_agent_scheduler.py | 46 +++- .../services/revisions/test_revision_plugin.py | 1 + .../openvswitch/agent/test_ovsdb_handler.py | 4 +- playbooks/legacy/neutron-fullstack/run.yaml | 2 +- playbooks/legacy/neutron-functional/run.yaml | 2 +- .../legacy/neutron-grenade-dvr-multinode/run.yaml | 2 +- .../legacy/neutron-grenade-multinode/run.yaml | 2 +- playbooks/legacy/neutron-grenade/run.yaml | 2 +- playbooks/legacy/neutron-rally-neutron/run.yaml | 24 +- .../neutron-tempest-dvr-ha-multinode-full/run.yaml | 2 +- playbooks/legacy/neutron-tempest-dvr/run.yaml | 2 +- .../legacy/neutron-tempest-linuxbridge/run.yaml | 2 +- .../legacy/neutron-tempest-multinode-full/run.yaml | 2 +- playbooks/legacy/neutron-tempest-ovsfw/run.yaml | 2 +- .../dnsmasq-local-service-c8eaa91894a7d6d4.yaml | 8 + ...e-request-as-binding-data-2a01c1ed1a8eff66.yaml | 10 + ...ver-load-interface-driver-ca397f1db40ec643.yaml | 7 + ...cise-agent-state-transfer-67c771cb1ee04dd0.yaml | 27 ++ setup.cfg | 14 +- 118 files changed, 2655 insertions(+), 642 deletions(-)

1 0

neutron 13.0.3 (rocky)
by no-reply＠openstack.org 13 Apr '19

13 Apr '19

We are delighted to announce the release of: neutron 13.0.3: OpenStack Networking This release is part of the rocky stable release series. The source is available from: https://git.openstack.org/cgit/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 13.0.3 ^^^^^^ Critical Issues *************** * The neutron-openvswitch-agent can sometimes spend too much time handling a large number of ports, exceeding its timeout value, "agent_boot_time", for L2 population. Because of this, some flow update operations will not be triggerred, resulting in lost flows during agent restart, especially for host-to-host vxlan tunnel flows, causing the original tunnel flows to be treated as stale due to the different cookie IDs. The agent's first RPC loop will also do a stale flow clean-up procedure and delete them, leading to a loss of connectivity. Please ensure that all neutron-server and neutron- openvswitch-agent binaries are upgraded for the changes to take effect, after which the L2 population "agent_boot_time" config option will no longer be used. Bug Fixes ********* * Fixes bug 1501206 (https://bugs.launchpad.net/neutron/+bug/1501206) This ensures that DHCP agent instances running dnsmasq as a DNS server can no longer be exploited as DNS amplifiers when the tenant network is using publicly routed IP addresses by adding an option that will allow them to only serve DNS requests from local networks. * Fixes an issue causing IP allocation on port update to fail when the initial IP allocation was deferred due to lack of binding info. If both the port mac_address and binding info (binding_host_id) were updated in the same request, the fixed_ips field was added to the request internally. The code to complete the deferred allocation failed to execute in that case. (For more information see bug 1811905 (https://bugs.launchpad.net/neutron/+bug/1811905).) * The neutron-openvswitch-agent was changed to notify the neutron- server in its first RPC loop that it has restarted. This signals neutron-server to provide updated L2 population information to correctly program FDB entries, ensuring connectivity to instances is not interrupted. This fixes the following bugs: 1794991 (https://bugs.launchpad.net/neutron/+bug/1794991) 1799178 (https://bugs.launchpad.net/neutron/+bug/1799178) 1813703 (https://bugs.launchpad.net/neutron/+bug/1813703) 1813714 (https://bugs.launchpad.net/neutron/+bug/1813714) 1813715 (https://bugs.launchpad.net/neutron/+bug/1813715) Changes in neutron 13.0.2..13.0.3 --------------------------------- 279c99ab7d Don't pass None arg to neutron-keepalived-state-change 056e049e2b Improve port dhcp Provisioning 1d81086f55 Try to enable dnsmasq process several times 289f66bd74 [Functional tests] Change way how conntrack entries are checked 7590f3f591 Specify tenant_id in TestRevisionPlugin objects f7262f5280 [OVS] Exception message when retrieving bridge-id and is not present 97bf23244d Fix slow SG api calls when limiting fields 6b9d8bf308 OVS agent: always send start flag during initial sync 004caf773a Change ovs version we use in fullstack tests 6494fcc2e4 Divide-and-conquer security group beasts 8f8c899c69 Rename router processing queue code to be more generic eb6cacb16c Set lower addr to avoid IP out of range e096e2427c Remove conntrack rule when FIP is deleted cc49ab5501 More accurate agent restart state transfer e7788ed0c8 Fix QoS rule update af67d516a5 Divide-and-conquer local bridge flows beasts 569b3fddab Fix KeyError in OVS firewall 836d5eca4f Check if process' cmdline is "space separarated" 96b0b90b89 Add enforcer logic for neutron policy 344495f1a8 Replace openstack.org git:// URLs with https:// 8b7955dade Add rootwrap filters to kill state change monitor e5202b9fb1 [Functional] Don't assert that HA router don't have IPs configured e813fc8d05 Improve invalid port ranges error message 570f6086c0 Fix fullstack test_dscp_marking_packets test c07e6a5ea8 Enable ipv6_forwarding in HA router's namespace 56c591996b Set initial ha router state in neutron-keepalived-state-change ce037876a7 Do not release DHCP lease when no client ID is set on port 558a977902 When converting sg rules to iptables, do not emit dport if not supported bc828851ab Spawn metadata proxy on dvr ha standby routers 3c66b1c453 DVR-HA: Unbinding a HA router from agent does not clear HA interface 28a7dd12fe Delete port binding level for deleted bindings c620b3c91e DVR edge router: avoid accidental centralized floating IP remove e6f22ce81c Add new test decorator skip_if_timeout 5bf56bde87 Fix notification about arp entries for dvr routers 964dd28a95 Switch isolated metadata proxy to bind to 169.254.169.254 679e8ee6cc Fix update of ports cache in router_info class b7796f6c91 DHCP: fix default dns search name 0465269554 Ensure dnsmasq is down before enabling it in restart method f8a192e22e Fix performance regression adding rules to security groups 50a7a74e97 Always fill UDP checksums in DHCPv6 replies b3f32e1900 Fix port update deferred IP allocation with host_id + new MAC a7afd6e86d Secure dnsmasq process against external abuse 777dc929dd Change duplicate OVS bridge datapath-ids 1e6ce6f963 Remove a bare raise noticed by the linter b92ecfc615 Update neutron files for new over-indentation hacking rule (E117) 18f2cea730 Remove IPv6 addresses in dnsmasq leases file 573b0be3e8 Add lock_path in installation guide e04ee2c5b6 Clear residual qos rules after l2-agent restarts. 9f003cf497 Use status_code instead of status in requests 8294bcf92e protect DHCP agent cache out of sync 0f14e30fa4 Check port VNIC type when associating a floating IP 886782c177 [DVR] Allow multiple subnets per external network 025e767b94 Add kill_timeout to AsyncProcess 684b10234e Don't modify global variables in unit tests dfedafe5f6 Enable 'all' IPv6 forwarding knob correctly 6a56d38798 Do state report after setting start_flag on OVS restart eb8d4e3383 Block port update from unbound DHCP agent 25ab89f7d3 Do not delete trunk bridges if service port attached fea4365500 Fix the bug about DHCP port whose network has multiple subnets. ae2ef68140 Force all fdb entries update after ovs-vswitchd restart 2c11424178 Reinitialize ovs firewall after ovs-vswitchd restart 8f3fd6815c Imported Translations from Zanata 115a9f5558 Get centralized FIP only on router's snat host 3206492a3b Update docs for disabling DNS server announcement 7ce626b407 DVR: Centralized FloatingIPs are not cleared after migration. 35033083b9 Fix connection between 2 dvr routers bbb60c0d69 DevStack: OVS: Only install kernel-* packages when needed 6dd6980eb2 Wait to ipv6 forwarding be really changed by L3 agent 9882c79398 Add missing step for ovs deploy guides 0fa1d46979 Verify port_forwarding subnet and IP address both c039f0f1c4 iptables-restore wait period cannot be zero Diffstat (except docs and test files) ------------------------------------- devstack/lib/ovs | 12 +- .../install/controller-install-option1-obs.rst | 12 + .../install/controller-install-option1-ubuntu.rst | 12 + .../install/controller-install-option2-obs.rst | 12 + .../install/controller-install-option2-ubuntu.rst | 12 + etc/neutron/rootwrap.d/l3.filters | 13 +- neutron/agent/common/ovs_lib.py | 19 +- .../resource_processing_queue.py} | 127 ++++---- neutron/agent/dhcp/agent.py | 267 +++++++++++------ neutron/agent/l2/extensions/qos.py | 6 + neutron/agent/l3/agent.py | 188 ++++++++---- neutron/agent/l3/dvr_edge_ha_router.py | 7 +- neutron/agent/l3/dvr_edge_router.py | 31 +- neutron/agent/l3/dvr_fip_ns.py | 46 +-- neutron/agent/l3/dvr_local_router.py | 15 +- neutron/agent/l3/dvr_snat_ns.py | 2 +- neutron/agent/l3/ha.py | 37 ++- neutron/agent/l3/ha_router.py | 13 +- neutron/agent/l3/keepalived_state_change.py | 22 ++ neutron/agent/l3/router_info.py | 59 ++-- neutron/agent/linux/async_process.py | 34 ++- neutron/agent/linux/dhcp.py | 77 +++-- neutron/agent/linux/interface.py | 32 +- neutron/agent/linux/ip_lib.py | 21 +- neutron/agent/linux/iptables_firewall.py | 20 +- neutron/agent/linux/iptables_manager.py | 2 +- .../agent/linux/openvswitch_firewall/firewall.py | 24 +- neutron/agent/linux/openvswitch_firewall/rules.py | 16 +- neutron/agent/linux/utils.py | 15 +- neutron/agent/metadata/agent.py | 3 +- neutron/agent/metadata/driver.py | 21 +- neutron/agent/rpc.py | 5 +- neutron/agent/securitygroups_rpc.py | 16 +- .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 54 +++- neutron/api/rpc/handlers/dhcp_rpc.py | 15 +- neutron/cmd/sanity/checks.py | 15 + neutron/cmd/sanity_check.py | 15 + neutron/common/constants.py | 15 + neutron/db/ipam_pluggable_backend.py | 10 +- neutron/db/l3_db.py | 58 +++- neutron/db/l3_dvr_db.py | 127 +++++++- neutron/db/l3_dvr_ha_scheduler_db.py | 9 +- neutron/db/l3_dvrscheduler_db.py | 170 ++++++++--- .../a8b517cff8ab_add_routerport_bindings_for_ha.py | 7 +- neutron/db/securitygroups_db.py | 178 ++++++----- neutron/extensions/securitygroup.py | 5 +- neutron/locale/de/LC_MESSAGES/neutron.po | 79 +---- neutron/locale/es/LC_MESSAGES/neutron.po | 79 +---- neutron/locale/fr/LC_MESSAGES/neutron.po | 80 +---- neutron/locale/it/LC_MESSAGES/neutron.po | 79 +---- neutron/locale/ja/LC_MESSAGES/neutron.po | 82 +----- neutron/locale/ko_KR/LC_MESSAGES/neutron.po | 107 ++----- neutron/locale/pt_BR/LC_MESSAGES/neutron.po | 78 +---- neutron/locale/ru/LC_MESSAGES/neutron.po | 74 +---- neutron/locale/tr_TR/LC_MESSAGES/neutron.po | 63 +--- neutron/locale/zh_CN/LC_MESSAGES/neutron.po | 72 +---- neutron/locale/zh_TW/LC_MESSAGES/neutron.po | 72 +---- neutron/objects/base.py | 43 ++- neutron/objects/qos/qos_policy_validator.py | 24 +- neutron/objects/securitygroup.py | 6 +- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 7 +- .../drivers/openvswitch/agent/common/constants.py | 36 +++ .../agent/extension_drivers/qos_driver.py | 23 +- .../openvswitch/agent/openflow/native/br_int.py | 2 + .../openvswitch/agent/openflow/native/br_phys.py | 1 + .../openvswitch/agent/openflow/native/br_tun.py | 1 + .../openvswitch/agent/openflow/native/ofswitch.py | 15 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 66 ++++- neutron/plugins/ml2/plugin.py | 6 +- neutron/plugins/ml2/rpc.py | 30 +- neutron/policy.py | 22 ++ neutron/privileged/agent/linux/ip_lib.py | 14 +- neutron/services/qos/qos_plugin.py | 3 +- .../drivers/openvswitch/agent/ovsdb_handler.py | 14 + .../agent/l3/test_keepalived_state_change.py | 30 +- .../functional/agent/linux/test_netlink_lib.py | 8 +- .../l3_router/test_l3_dvr_router_plugin.py | 14 +- .../portforwarding/test_port_forwarding.py | 37 ++- .../openvswitch/agent/test_ovsdb_handler.py | 8 + .../test_resource_processing_queue.py} | 65 +++-- .../linux/openvswitch_firewall/test_firewall.py | 11 + .../agent/linux/openvswitch_firewall/test_rules.py | 13 +- .../unit/agent/linux/test_iptables_firewall.py | 14 + .../rpc/agentnotifiers/test_dhcp_rpc_agent_api.py | 37 ++- .../test_expose_port_forwarding_in_fip.py | 89 +++++- .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 23 +- .../agent/test_linuxbridge_neutron_agent.py | 18 +- .../macvtap/agent/test_macvtap_neutron_agent.py | 11 +- .../mech_driver/test_mech_sriov_nic_switch.py | 28 +- .../agent/extension_drivers/test_qos_driver.py | 4 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 52 +++- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 13 +- .../unit/scheduler/test_l3_agent_scheduler.py | 46 ++- .../service_providers/test_driver_controller.py | 4 +- .../services/revisions/test_revision_plugin.py | 1 + .../openvswitch/agent/test_ovsdb_handler.py | 4 +- .../legacy/neutron-fullstack-python35/run.yaml | 2 +- .../legacy/neutron-fullstack-with-uwsgi/run.yaml | 2 +- playbooks/legacy/neutron-fullstack/run.yaml | 2 +- .../legacy/neutron-functional-python35/run.yaml | 2 +- .../legacy/neutron-functional-with-uwsgi/run.yaml | 2 +- playbooks/legacy/neutron-functional/run.yaml | 2 +- .../legacy/neutron-grenade-dvr-multinode/run.yaml | 2 +- .../legacy/neutron-grenade-multinode/run.yaml | 2 +- playbooks/legacy/neutron-grenade/run.yaml | 2 +- .../neutron-tempest-dvr-ha-multinode-full/run.yaml | 2 +- playbooks/legacy/neutron-tempest-dvr/run.yaml | 2 +- .../neutron-tempest-iptables_hybrid/run.yaml | 2 +- .../legacy/neutron-tempest-linuxbridge/run.yaml | 2 +- .../legacy/neutron-tempest-multinode-full/run.yaml | 2 +- .../legacy/neutron-tempest-postgres-full/run.yaml | 2 +- .../neutron-tempest-with-ryu-master/run.yaml | 2 +- .../dnsmasq-local-service-c8eaa91894a7d6d4.yaml | 8 + ...e-request-as-binding-data-2a01c1ed1a8eff66.yaml | 10 + ...cise-agent-state-transfer-67c771cb1ee04dd0.yaml | 27 ++ .../source/locale/fr/LC_MESSAGES/releasenotes.po | 90 ------ .../source/locale/ja/LC_MESSAGES/releasenotes.po | 301 ------------------- .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 103 ------- setup.cfg | 2 + 168 files changed, 3640 insertions(+), 2485 deletions(-)

1 0

kolla-ansible 6.2.0 (queens)
by no-reply＠openstack.org 13 Apr '19

13 Apr '19

We eagerly announce the release of: kolla-ansible 6.2.0: Ansible Deployment of Kolla containers This release is part of the queens stable release series. The source is available from: https://git.openstack.org/cgit/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 6.2.0 ^^^^^ New Features * Adds support for configuring a default gateway to be used in the Ironic Inspector inspection network. This is configured via the "ironic_dnsmasq_default_gateway" variable, and is not set by default. * Set docker runtime directory by configure the docker daemon.An operator named "docker_runtime_directory" will be add. Changes in kolla-ansible 6.1.1..6.2.0 ------------------------------------- ffd68d7ca Remove recurse: yes for owner/perms on /etc/kolla 177787d5e Fix booting instances after nova-compute upgrade 40145f249 Fix reconfigure of neutron ml2_conf.ini 918e0e7ad Replace openstack.org git:// URLs with https:// 64433830a Fix swift reconfigure e2ff275ca Fix failure to mount cephfs 02da5c74f Create /volumes when using external ceph 8af677e82 Add task to create volumes path in cephfs 43bb77fe9 Configure region_name_for_services in heat.conf 9c2181aaf Fix link to Manila Guide 3fdf3a212 Fix MariaDB bootstrap issues on CentOS f2e882a59 Create cells before starting nova services 3e5579830 Add Zun scenario job for ubuntu 69d429e3e Add support for Ceilometer custom polling.yaml 968401cb6 Fix py35/py36 and k-a-ubuntu-source gate jobs 4f7ac580b Add a configuration about docker runtime directory 00e7a8342 Allow nova to use ceph cinder volumes without nova rbd backend 8b08f8aab Add Cinder credentials to ironic.conf 035defce0 Allow configuring a gateway for the inspection network 4302a7fa2 Add cap NET_ADMIN for ironic_dnsmasq 367b53a6f Use kolla-ansible version to tag images 04ecd5717 Adding ironic_dnsmasq_boot_file parameter to globals.yml b4b354ae6 Ironic dnsmasq should not use VIP for TFTP server 74b6b9ee8 Correct the description for Ironic 84fcfead5 Add the ironic_dnsmasq_dhcp_range prechecks for Ironic Dnsmasq 968368b18 Fix ironic inspector dnsmasq listening interface Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 13 +++- ansible/library/kolla_docker.py | 46 +++++++++++--- ansible/roles/baremetal/defaults/main.yml | 2 + ansible/roles/baremetal/tasks/pre-install.yml | 4 +- .../baremetal/templates/docker_systemd_service.j2 | 2 +- ansible/roles/ceilometer/handlers/main.yml | 3 + ansible/roles/ceilometer/tasks/config.yml | 26 ++++++++ .../templates/ceilometer-central.json.j2 | 8 ++- .../templates/ceilometer-compute.json.j2 | 8 ++- .../templates/ceilometer-notification.json.j2 | 8 ++- ansible/roles/heat/templates/heat.conf.j2 | 2 + ansible/roles/ironic/defaults/main.yml | 2 + ansible/roles/ironic/tasks/precheck.yml | 9 +++ ansible/roles/ironic/tasks/register.yml | 2 +- ansible/roles/ironic/tasks/start.yml | 2 + .../roles/ironic/templates/ironic-dnsmasq.conf.j2 | 11 ++-- ansible/roles/ironic/templates/ironic.conf.j2 | 11 ++++ ansible/roles/manila/defaults/main.yml | 1 + ansible/roles/manila/tasks/deploy.yml | 6 ++ ansible/roles/manila/tasks/fix_cephfs_owner.yml | 73 ++++++++++++++++++++++ ansible/roles/mariadb/templates/galera.cnf.j2 | 1 + ansible/roles/neutron/handlers/main.yml | 4 +- ansible/roles/neutron/tasks/config.yml | 2 +- ansible/roles/nova/defaults/main.yml | 12 ++++ ansible/roles/nova/tasks/config.yml | 13 +--- ansible/roles/nova/tasks/create_cells.yml | 51 +++++++++++++++ ansible/roles/nova/tasks/deploy.yml | 6 +- ...simple_cell_setup.yml => discover_computes.yml} | 27 -------- ansible/roles/nova/tasks/external_ceph.yml | 23 ++++--- ansible/roles/nova/tasks/reload.yml | 51 ++++++++++----- ansible/roles/nova/templates/nova-libvirt.json.j2 | 4 +- ansible/roles/swift/tasks/reconfigure.yml | 2 +- ansible/roles/zun/templates/zun.conf.j2 | 1 + etc/kolla/globals.yml | 6 +- .../ironic-dnsmasq-gateway-5a887a0a2f946bd5.yaml | 6 ++ ...ker-runtime-directory-set-da7e77a70626c0d1.yaml | 5 ++ requirements.txt | 1 + tools/setup_gate.sh | 19 +++++- tox.ini | 2 +- 44 files changed, 441 insertions(+), 100 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4f880bb8e..7585c4cfe 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13,0 +14 @@ cryptography!=2.0,>=1.9 # BSD/Apache-2.0 +jmespath>=0.9.0 # MIT

1 0

os-brick 1.15.9 (pike)
by no-reply＠openstack.org 13 Apr '19

13 Apr '19

We are thrilled to announce the release of: os-brick 1.15.9: OpenStack Cinder brick library for managing local volume attaches This release is part of the pike stable release series. The source is available from: https://git.openstack.org/cgit/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. Changes in os-brick 1.15.8..1.15.9 ---------------------------------- 05e60a9 Improve detection of multipathd running 97c1da1 Succeed on iSCSI detach when path just went down c45d8f6 The validation of iscsi session should be case insensitive f64ad52 Fix NFS "already mounted" detection 22c7de8 Remove the unnecessary pv_list assign during LVM object init bd4981e set vg_thin_pool_size to float type Diffstat (except docs and test files) ------------------------------------- os_brick/initiator/connectors/iscsi.py | 2 +- os_brick/initiator/linuxscsi.py | 36 ++++++++++++++++------- os_brick/local_dev/lvm.py | 4 +-- os_brick/remotefs/remotefs.py | 13 +++++--- 9 files changed, 110 insertions(+), 29 deletions(-)

1 0

os-traits 0.12.0
by no-reply＠openstack.org 13 Apr '19

13 Apr '19

We are pumped to announce the release of: os-traits 0.12.0: A library containing standardized trait strings The source is available from: https://git.openstack.org/cgit/openstack/os-traits Download the package from: https://pypi.org/project/os-traits For more details, please see below. Changes in os-traits 0.11.0..0.12.0 ----------------------------------- 1b14058 Add contextual comment about image type traits d225a7f Add COMPUTE_IMAGE_TYPE_* traits e4d0e7e Update master for stable/stein 5033915 Update bug links for storyboard 07ecadd Change python3.5 job to python3.7 job on Stein+ Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- CONTRIBUTING.rst | 4 ++-- README.rst | 2 +- os_traits/compute/image.py | 42 ++++++++++++++++++++++++++++++++++++++++++ releasenotes/source/index.rst | 1 + releasenotes/source/stein.rst | 6 ++++++ tox.ini | 2 +- 7 files changed, 54 insertions(+), 5 deletions(-)

1 0

python-cloudkittyclient 2.1.1 (stein)
by no-reply＠openstack.org 12 Apr '19

12 Apr '19

We contentedly announce the release of: python-cloudkittyclient 2.1.1: API client of cloudkitty, Rating as a Service project. This release is part of the stein stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-cloudkittyclient Download the package from: https://pypi.org/project/python-cloudkittyclient Please report issues through: https://bugs.launchpad.net/cloudkitty/+bugs For more details, please see below. 2.1.1 ^^^^^ Bug Fixes * The "rating.get_quotation" method of the client has been fixed: the json body has been updated to match the API reference. Changes in python-cloudkittyclient 2.1.0..2.1.1 ----------------------------------------------- b465e86 Fix the rating.get_quotation method 1724798 Adding a python3 functional job 1ee30ec Asserting 'summary get' returns nothing in functional tests 8b26d75 Fix releasenotes generation 377172f Update UPPER_CONSTRAINTS_FILE for stable/stein 98e1772 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 16 ++++++++ cloudkittyclient/v1/rating/__init__.py | 6 ++- .../notes/fix-get-quotation-1d2c18a979f85fe6.yaml | 5 +++ releasenotes/source/conf.py | 17 +++----- tox.ini | 2 +- 8 files changed, 83 insertions(+), 16 deletions(-)

1 0

python-searchlightclient 1.5.1 (stein)
by no-reply＠openstack.org 12 Apr '19

12 Apr '19

We are overjoyed to announce the release of: python-searchlightclient 1.5.1: OpenStack Indexing and Search API Client Library This release is part of the stein stable release series. The source is available from: https://git.openstack.org/cgit/openstack/python-searchlightclient Download the package from: https://pypi.org/project/python-searchlightclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- searchlightclient For more details, please see below. Changes in python-searchlightclient 1.5.0..1.5.1 ------------------------------------------------ 2fa8155 Update setup.cfg 480c362 Drop py35 tox test 26e8369 Drop py35 tests 5b2688c Update UPPER_CONSTRAINTS_FILE for stable/stein 726d2f5 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - setup.cfg | 1 - tox.ini | 6 +++--- 4 files changed, 4 insertions(+), 5 deletions(-)

1 0