February 2020 - Release-announce - lists.openstack.org

networking-odl 14.0.1 (stein)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are delighted to announce the release of: networking-odl 14.0.1: OpenStack Networking This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/networking-odl Download the package from: https://pypi.org/project/networking-odl Please report issues through: https://bugs.launchpad.net/networking-odl/+bugs For more details, please see below. Changes in networking-odl 14.0.0..14.0.1 ---------------------------------------- 5b062f03e [stein-only] Constrain l2gw to Stein version b58962471 [stein-only] Upper-constrain neutron to stable/stein cae2107fc Fix double-digit ODL version number handling for devstack d9e171187 OpenDev Migration Patch 2f111b9b3 Replace openstack.org git:// URLs with https:// e784431e5 Update UPPER_CONSTRAINTS_FILE for stable/stein 27c5e6bff Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- .zuul.d/jobs.yaml | 24 +++++++++++----------- devstack/local.conf.example | 2 +- devstack/odl-releases/common | 2 +- .../legacy/grenade-dsvm-networking-odl/run.yaml | 10 ++++----- .../run.yaml | 10 ++++----- .../run.yaml | 10 ++++----- .../run.yaml | 8 ++++---- .../run.yaml | 8 ++++---- playbooks/tempest/run.yaml | 2 +- requirements.txt | 4 ++-- tox.ini | 8 ++++---- 13 files changed, 48 insertions(+), 46 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 06dcd8fec..cbff60ed0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14 +14 @@ websocket-client>=0.47.0 # LGPLv2+ -neutron>=13.0.0.0b2 # Apache-2.0 +neutron>=13.0.0.0b2,<15.0.0.0b1 # Apache-2.0 @@ -16 +16 @@ neutron-lbaas>=13.0.0.0b1 # Apache-2.0 -networking-l2gw>=12.0.0 # Apache-2.0 +networking-l2gw>=12.0.0,<15.0.0 # Apache-2.0

1 0

neutron-vpnaas-dashboard 1.5.2 (stein)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are thrilled to announce the release of: neutron-vpnaas-dashboard 1.5.2: Neutron VPNaaS Dashboard This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/neutron-vpnaas-dashboard Download the package from: https://tarballs.openstack.org/neutron-vpnaas-dashboard/ Please report issues through: https://bugs.launchpad.net/neutron-vpnaas-dashboard/+bugs For more details, please see below. Changes in neutron-vpnaas-dashboard 1.5.1..1.5.2 ------------------------------------------------ 4463b3f Imported Translations from Zanata 3b056c5 OpenDev Migration Patch 58630c3 Imported Translations from Zanata b1fd656 Update UPPER_CONSTRAINTS_FILE for stable/stein cb740f5 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 +- .../locale/de/LC_MESSAGES/django.po | 20 +++- .../locale/id/LC_MESSAGES/django.po | 22 ++++- .../locale/ja/LC_MESSAGES/django.po | 9 +- .../locale/ko_KR/LC_MESSAGES/django.po | 20 +++- .../source/locale/de/LC_MESSAGES/releasenotes.po | 97 ------------------- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 104 --------------------- .../source/locale/es/LC_MESSAGES/releasenotes.po | 25 ----- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 32 ------- .../source/locale/id/LC_MESSAGES/releasenotes.po | 91 ------------------ .../source/locale/ja/LC_MESSAGES/releasenotes.po | 39 -------- .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 39 -------- .../locale/pt_BR/LC_MESSAGES/releasenotes.po | 30 ------ .../source/locale/ru/LC_MESSAGES/releasenotes.po | 29 ------ .../locale/zh_CN/LC_MESSAGES/releasenotes.po | 34 ------- tox.ini | 6 +- 16 files changed, 65 insertions(+), 535 deletions(-)

1 0

python-neutronclient 6.12.1 (stein)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We high-spiritedly announce the release of: python-neutronclient 6.12.1: CLI and Client Library for OpenStack Networking This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. Changes in python-neutronclient 6.12.0..6.12.1 ---------------------------------------------- 450039b Use secure sha256 instead of sha1 08a26a0 Fix broken pep8 and requirements jobs a57eaff OpenDev Migration Patch ca01b06 Replace openstack.org git:// URLs with https:// d581c8b Update UPPER_CONSTRAINTS_FILE for stable/stein 892c857 Update .gitreview for stable/stein Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- neutronclient/common/utils.py | 4 ++-- test-requirements.txt | 2 +- tox.ini | 2 +- 7 files changed, 10 insertions(+), 8 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index dabdb0e..5824501 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking>=1.1.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<1.6.0 # Apache-2.0

1 0

ovsdbapp 0.17.2 (train)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are ecstatic to announce the release of: ovsdbapp 0.17.2: A library for creating OVSDB applications This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 0.17.1..0.17.2 ---------------------------------- df70748 Log invalid address values in lsp_set_addresses Diffstat (except docs and test files) ------------------------------------- ovsdbapp/schema/ovn_northbound/commands.py | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-)

1 0

networking-ovn 7.1.0 (train)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are amped to announce the release of: networking-ovn 7.1.0: OpenStack Neutron integration with OVN This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/networking-ovn Download the package from: https://pypi.org/project/networking-ovn Please report issues through: https://bugs.launchpad.net/networking-ovn/+bugs For more details, please see below. 7.1.0 ^^^^^ Bug Fixes * OVN Octavia provider driver now supports both TCP and UDP pool/listener protocols configured in the same Octavia Load Balancer. * Upon adding an IP address to the allowed_address_pairs field of a Neutron's port, networking-ovn will look if that IP address matches with the IP of an existing port in the same network and set its type to "virtual" (if it does match). By doing that, networking-ovn tells OVN that this virtual port is not bound to any VIF (required for VRRP configuration). Changes in networking-ovn 7.0.0..7.1.0 -------------------------------------- b60cfee4 Fix for getting port groups while using OVS up to 2.9 57ac3892 Centralize traffic when LB and member has FIP b9958774 Agent liveness - allow time to propagate checks ed7adede Don't fail if VIP already exist or has been deleted before ba542715 [OVN] Delete NAT entry first on any FIP update 88e965dc Use 'container image prepare' in prepare-migration da8d0669 Fix py2 vs py3 dict keys comparison in functional test 69807753 Don't send malformed status update to Octavia 53ad1170 Exclude all device_ids that belong to Neutron DHCP Agent 9aa7edd7 Don't fail in case subnet or Logical Switch not found f57aa48d Cache OvnProviderHelper object in OvnProviderDriver c6e5339d Add support for multiple L4 protocols withing same LB 5a9ba75e Enable InternalDNS related tests ead6414e Change passed domain_name parameter value cf1365f8 Add OVN Octavia CI jobs 309dc9d1 Update master for stable/train b5ca90fe Only set "unknown" in LSP that makes sense c418dd72 Set binding profile directly from OVNTrunkDriver (redo cont.) ade39ec3 Fix pep8 errors found by hacking 2.0.0 9783c1f5 migration: Use ForceNeutronDriverUpdate when migrating 0e12ee1c Fix container images names in migration plugin 0d603a7e tox: Pass OVN and OVS source directories 07df2a6b Add support for virtual port type a49513ec Switch release jobs to use OVS 2.12 in Train bd978656 Fix agent extension support after hashring merge 6b0c5fa6 Added OSP16 & train to plugin spec. 8eb4d0d8 Update local.conf.sample to match stable/train 8cd28b83 Fallback to default network_driver value if octavia not present 0351f5f8 Remove escape characters from container command 48daa780 [metadata-agent] Fix issue with TLS/SSL connections 0ef9461c Initialize TLS prior to retrieving OVSDB schema 050b1425 Add missing unittests to OVN provider driver e24adcf5 Disable ip_version checking while updating member without new ip 4b1c92c8 Avoid port group creation race 92fc4dd6 Do not lose router logical port upon subnet add on the external net 1e20b9bf Set binding profile directly from OVNTrunkDriver (redo) 7a21e6f6 Revert "Temporary jobs list change for stable/train" Diffstat (except docs and test files) ------------------------------------- devstack/devstackgaterc | 2 +- devstack/lib/networking-ovn | 7 +- devstack/lib/ovn | 4 +- devstack/local.conf.sample | 4 +- .../roles/prepare-migration/tasks/main.yml | 40 +- .../roles/migration/tasks/cleanup-dataplane.yml | 8 +- .../templates/generate-ovn-extras.sh.j2 | 1 + networking_ovn/agent/metadata/ovsdb.py | 2 +- networking_ovn/agent/stats.py | 41 - networking_ovn/common/constants.py | 16 + networking_ovn/common/exceptions.py | 4 - networking_ovn/common/maintenance.py | 13 + networking_ovn/common/ovn_client.py | 320 ++++- networking_ovn/common/utils.py | 25 + networking_ovn/ml2/mech_driver.py | 76 +- networking_ovn/ml2/trunk_driver.py | 110 +- networking_ovn/octavia/ovn_driver.py | 1190 ++++++++++------ networking_ovn/ovn_db_sync.py | 6 +- networking_ovn/ovsdb/commands.py | 74 + networking_ovn/ovsdb/impl_idl_ovn.py | 49 +- networking_ovn/ovsdb/ovn_api.py | 36 + networking_ovn/ovsdb/ovsdb_monitor.py | 65 +- plugin.spec | 2 + ...driver-multiple-protocols-4a93e184b8f374c7.yaml | 5 + .../notes/virtual-ports-fe725a817ce45e6d.yaml | 9 + releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 + tox.ini | 3 + zuul.d/networking-ovn-jobs.yaml | 106 +- zuul.d/project.yaml | 8 +- 46 files changed, 4193 insertions(+), 1123 deletions(-)

1 0

neutron 15.0.2 (train)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are satisfied to announce the release of: neutron 15.0.2: OpenStack Networking This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 15.0.2 ^^^^^^ Upgrade Notes ************* * For users affected by bug 1853840 (https://launchpad.net/bugs/1853840) the hypervisor name now can be set per physical network device in config option "resource_provider_hypervisors" which is located in the "[ovs]" ini- section for "ovs-agent" and "[sriov_nic]" ini-section for "sriov- agent". Hypervisor names default to "socket.gethostname()" which works out of the box with "libvirt" even when the "DEFAULT.host" config option is set to a non-default value. Bug Fixes ********* * Bug https://bugs.launchpad.net/neutron/+bug/1732067 described a flooding issue on the neutron-ovs-agent integration bridge. And bug https://bugs.launchpad.net/neutron/+bug/1841622 proposed a solution for it. The accepted egress packets will be taken care in the final egress tables (61 when openflow firewall is not enabled, table 94 otherwise) with direct output flows for unicast traffic with a minimum influence on the existing cloud networking. A new config option "explicitly_egress_direct", with default value False, was added for the aim of distinguishing clouds which are running the network node mixed with compute services, upstream neutron CI should be an example. In such situation, this "explicitly_egress_direct" should be set to False, because there are numerous cases from HA routers which can not be covered, particularly when you have centralized floating IPs running in such mixed hosts. Otherwise, set "explicitly_egress_direct" to True to avoid the flooding. One more note is if your network nodes are for networing services only, we recommand you disable all the security_group to get a higher performance. * Neutron now locates the root resource provider of the resource provider tree it creates by using the hypervisor name instead of the hostname. These are different in rare cases only. The hypervisor name can be set per physical network device in config option "resource_provider_hypervisors" which is located in the "[ovs]" ini- section for "ovs-agent" and "[sriov_nic]" ini-section for "sriov- agent". Hypervisor names default to "socket.gethostname()" which works out of the box with "libvirt" even when the "DEFAULT.host" config option is set to a non-default value. We believe this change fixes bug 1853840 (https://launchpad.net/bugs/1853840). * Owners of security groups now see all security group rules which belong to the security group, even if the rule was created by the admin user. Fixes bug 1824248 (https://bugs.launchpad.net/neutron/+bug/1824248). Other Notes *********** * When the "enable_distributed_routing" (DVR) configuration option is set to "True" and tunneling is enabled, the "arp_responder" option will be forced to "True" since it is now required in order for ARP to work properly. For more information, see bug 1774459 (https://bugs.launchpad.net/neutron/+bug/1774459). Changes in neutron 15.0.1..15.0.2 --------------------------------- 503bbdab87 [OVS] Handle added/removed ports in the same polling iteration 3ddba37ccc Unnecessary routers should not be created 9db46c5794 Reset timeout exception in DietTestCase when retrying 1e59a9f6db Remove sleep command when retrieving OVS dp 967d3dea91 Check "security_group_rule" quota during security group creation 9e8bdef93c Randomize BaseFullStackTestCase._find_available_ips c36f1fc292 Remove one of iptables_hybrid jobs a618a26bf4 Ensure driver error preventing trunk port deletion is logged 79ea54b21d Allow to kill keepalived state change monitor process 6c1cf88667 Add accepted egress direct flow 135e37ea52 Fix bug number in release note 8ec0c2d865 Add retries to update trunk port f5354f5343 [L3] Switch order of processing added and removed router ports dc8c1deeee Force arp_responder to True when DVR and tunneling enabled 8680863ae9 Check mtu on network update 9a6766470e Locate RP-tree parent by hypervisor name 124680084c Use "via" in gateway dictionary in Linux Bridge agent a1237df19e don't clear skb mark when ovs is hw-offload enabled 6d9aae2ab3 Cap hacking in test-requirements.txt d1c4ba5810 Use constraints for docs tox target a6b55d760b List SG rules which belongs to tenant's SG Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 - .../contributor/testing/ci_scenario_jobs.rst | 5 - etc/neutron/rootwrap.d/l3.filters | 16 +- neutron/agent/common/ovs_lib.py | 14 +- neutron/agent/common/placement_report.py | 61 +++--- neutron/agent/common/utils.py | 24 +++ neutron/agent/l3/router_info.py | 20 +- neutron/agent/linux/ip_lib.py | 2 +- .../agent/linux/openvswitch_firewall/firewall.py | 136 +++++++++++++- neutron/agent/securitygroups_rpc.py | 4 + .../plugins/ml2/drivers/mech_sriov/agent_common.py | 9 + neutron/conf/plugins/ml2/drivers/ovs_conf.py | 21 ++- neutron/conf/policies/security_group.py | 16 +- neutron/db/l3_dvrscheduler_db.py | 10 +- neutron/db/securitygroups_db.py | 24 ++- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 4 +- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 13 +- .../drivers/openvswitch/agent/common/constants.py | 2 + .../openvswitch/agent/openflow/native/br_int.py | 10 +- .../openvswitch/agent/openflow/native/ofswitch.py | 5 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 56 +++--- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 208 +++++++++++++++++---- neutron/plugins/ml2/plugin.py | 3 +- neutron/policy.py | 3 +- neutron/services/placement_report/plugin.py | 34 +++- neutron/services/trunk/plugin.py | 16 +- neutron/services/trunk/rpc/server.py | 44 +++-- .../unit/agent/common/test_placement_report.py | 54 +++++- .../linux/openvswitch_firewall/test_firewall.py | 60 +++++- .../agent/test_linuxbridge_neutron_agent.py | 2 +- .../mech_sriov/agent/test_sriov_nic_agent.py | 14 +- .../agent/openflow/native/test_br_int.py | 28 ++- .../openvswitch/agent/test_ovs_neutron_agent.py | 161 +++++++++------- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 9 +- .../unit/scheduler/test_l3_agent_scheduler.py | 5 + .../unit/services/placement_report/test_plugin.py | 33 +++- .../accepted_egress_direct-cc23873e213c6919.yaml | 20 ++ ...rp-responder-true-for-dvr-5aabbfa51945dd5a.yaml | 8 + ...parent-by-hypervisor-name-3244ed87dc57f950.yaml | 23 +++ ...-for-security-group-owner-6635dd3e4c6ab5ee.yaml | 6 + test-requirements.txt | 2 +- tox.ini | 5 +- 55 files changed, 1092 insertions(+), 301 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3aaac91e36..c8f3f91857 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=1.1.0 # Apache-2.0 +hacking>=1.1.0,<1.2.0 # Apache-2.0

1 0

neutron-fwaas 15.0.1 (train)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are overjoyed to announce the release of: neutron-fwaas 15.0.1: OpenStack Networking FWaaS This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/neutron-fwaas Download the package from: https://tarballs.openstack.org/neutron-fwaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-fwaas 15.0.0..15.0.1 --------------------------------------- 3c3efef25 Switch neutron-tempest-plugin jobs to train branch 67b94c672 Add 'none' to L3AgentExtensionAPI due to API changes 22d5255c2 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 6d484473b Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 ++-- .../functional/services/logapi/agents/drivers/iptables/test_log.py | 2 +- tox.ini | 2 +- 4 files changed, 5 insertions(+), 4 deletions(-)

1 0

networking-bgpvpn 11.0.1 (train)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are chuffed to announce the release of: networking-bgpvpn 11.0.1: API and Framework to interconnect bgpvpn to neutron networks This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/networking-bgpvpn Download the package from: https://pypi.org/project/networking-bgpvpn Please report issues through: https://bugs.launchpad.net/bgpvpn/+bugs For more details, please see below. Changes in networking-bgpvpn 11.0.0..11.0.1 ------------------------------------------- c1ce035 [stable-only] Cap horizon to Train version 584b2f4 Switch neutron-tempest-plugin jobs to train branch 34c6aa7 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train b3d803b Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 ++-- requirements.txt | 2 +- tox.ini | 6 +++--- 5 files changed, 9 insertions(+), 7 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c344f3a..4ace197 100644 --- a/requirements.txt +++ b/requirements.txt @@ -18 +18 @@ neutron>=13.0.0 # Apache-2.0 -horizon>=14.0.0 # Apache-2.0 +horizon>=14.0.0,<17.0.0 # Apache-2.0

1 0

networking-bagpipe 11.0.1 (train)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We joyfully announce the release of: networking-bagpipe 11.0.1: Mechanism driver for Neutron ML2 plugin using BGP E-VPNs/IP VPNs as a backend This release is part of the train stable release series. The source is available from: https://opendev.org/openstack/networking-bagpipe Download the package from: https://pypi.org/project/networking-bagpipe Please report issues through: https://bugs.launchpad.net/networking-bagpipe/+bugs For more details, please see below. Changes in networking-bagpipe 11.0.0..11.0.1 -------------------------------------------- a61ad6c bagpipe-bgp: cleanly ignore RTC route of unsupported type 626d4a0 assorted fixes in networking_bagpipe.bagpipe_bgp module 7b28dbd bagpipe-bgp: fix a broken looking-glass path e2d300b Switch neutron-tempest-plugin jobs to train branch eb8f751 Update TOX/UPPER_CONSTRAINTS_FILE for stable/train 00afcb3 Update .gitreview for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 ++-- .../bagpipe_bgp/common/dataplane_utils.py | 2 +- networking_bagpipe/bagpipe_bgp/common/run_command.py | 4 ++-- networking_bagpipe/bagpipe_bgp/engine/__init__.py | 11 +++++++++-- networking_bagpipe/bagpipe_bgp/engine/bgp_manager.py | 2 +- networking_bagpipe/bagpipe_bgp/engine/worker.py | 18 ++++++++++++------ tox.ini | 2 +- 8 files changed, 29 insertions(+), 15 deletions(-)

1 0

puppet-vitrage 6.1.0 (ussuri)
by no-reply＠openstack.org 18 Feb '20

18 Feb '20

We are chuffed to announce the release of: puppet-vitrage 6.1.0: Puppet module for OpenStack Vitrage This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/puppet-vitrage Download the package from: https://tarballs.openstack.org/puppet-vitrage/ Please report issues through: https://bugs.launchpad.net/puppet-vitrage/+bugs For more details, please see below. Changes in puppet-vitrage 6.0.0..6.1.0 -------------------------------------- 8338efd Prepare Ussuri M2 28f2446 Fix stdlib version in metadata Diffstat (except docs and test files) ------------------------------------- metadata.json | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-)

1 0