May 2020 - Release-announce - lists.openstack.org

neutron 16.0.0 (ussuri)
by no-reply＠openstack.org 13 May '20

13 May '20

We are overjoyed to announce the release of: neutron 16.0.0: OpenStack Networking This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 16.0.0 ^^^^^^ Prelude The 16.0.0 release includes many bug fixes and new features. The most important improvements worth mentioning are: * Python 2 is no longer supported by Neutron, Python 3.6 and 3.7 are. * Address scopes and subnetpools can now be shared with other tenants using the Role Based Access Control ("RBAC") mechanism. * Security groups can now be set as "stateful". Conntrack will not be used for any rules from such a group. This is currently supported only by the "iptables" and "iptables_hybrid" drivers. * Neutron API now allows tagging resources directly in the "POST" request. * IGMP snooping (multicast) can now be enabled in the "OVS" and "OVN" drivers. * A list of IPv6 addresses for a dhcp-host entry in the dnsmasq DHCP agent driver can be configured. This solves problems with failing boot process when only one IP address is available. See #1861032 (https://bugs.launchpad.net/neutron/+bug/1861032)) for details about the issue. * The networking-ovn mechanism driver has been merged into the neutron repository and is now an in-tree driver for ML2. Changes in neutron 15.0.0.0rc1..16.0.0 -------------------------------------- 1e81440b63 Monkey patch original current_thread _active 54ffa37538 Add Octavia file in devstack/lib cca0aebb26 Add Prelude for Ussuri release notes. e3e9a90f75 Imported Translations from Zanata ed10d0ca60 Update TOX_CONSTRAINTS_FILE for stable/ussuri bd997fd9f1 Update .gitreview for stable/ussuri a8a2bd7e07 Lock subnets during port creation and subnet deletion dc9084a8ec [L3 HA] Add "no_track" option to VIPs in keepalived config 2697341846 [OVN] External ports: Account for VNIC_DIRECT_PHYSICAL / VNIC_MACVTAP 3a6a8c334a Provide correct fip cidr when deleting port forwarding ba35c0fc29 [OVN] Enable qos service plugin in tempest jobs d840881359 Additions to ovn-db-local.conf.sample 2273499155 Add rootwrap filter rule for radvd-kill script 8d85b35629 Add "rbac-address-scope" to OVN supported extensions aa9db869ee Fix "TestMonitorDaemon" keepalived-state-change input parameters 2ccddef913 Improve port retrieval when validating auto address 7e5a0e04b8 OVN: Add note re IGMP groups upon ovn-controller service restart c92950b0ee [Fullstack] Handle properly BrokenPipeError exception ac5094daa6 Wait until agent metadata is in SB chassis register b098239d72 Refactor OVN client QoS extension 56b971bb42 Allow sharing of subnet pools via RBAC mechanism 784f8e6416 Update OVN local.conf sample file 05d87d6d90 Promote tempest and fullstack uwsgi jobs to be voting f93aebe790 [OVN] Bump up transaction timeout for functional tests 2e6aa290a3 Default (shared) network segment range is not mandatory 25830e8ec5 [OVN] Add IGMP snooping configuration guide 2a36ea26cc Add fullstack tests for stateless security groups 02a74c3d2a Enable back mac spoofing and disabled port security tests a1735c46d8 Don't reschedule hosts unless we need to 21935365f2 "keepalived_state_change" needs to use threading to send arping 306280813f Replace ctype.CDLL by ctypes.PyDLL in linux.ip_lib 3e2b15f0d6 Add tunnel_ip_version to tunnel_sync() error message a90654ae5a Revert "Subcribe trunk & subport events to set subport id" d0a1652227 Add trunk subports to be one of dvr serviced device owners eb775458c6 [DVR] Don't populate unbound ports in router's ARP cache b27940c205 Migrate the OVN migration scripts 27c8391458 Fix neutron debug probe to use integration_bridge 3d3b61f879 Revert "[OVN] Set 'unknown' address properly when port sec is disabled" 6d619ea7c1 Fix name of "subnet_dns_publish_fixed_ip" extension in docs ea999564a5 [OVN] HA Chassis Group: Ignore UPDATES when external_ids hasn't changed 72a5b5b61f Fix return correct cache when reusing port ba00b06ae4 mech_driver.OVNMechanismDriver "_ovn_client" is a read-only property e37722c0f5 Wait before deleting trunk bridges for DPDK vhu 79e8230e39 Filter subnet by segment ID or None 113dfac608 Prioritize port create and update ready messages d7f925249a Mark security group fullstack tests as stable c52029c39a Do not link up HA router gateway in backup node 07b015d789 Use dict .get() to avoid a KeyError in the segment plugin 21ca0ab52c Enable neutron-ovn jobs in check queue 3281d15dd4 Switch tripleo based job to be run on Centos 8 00298fe6e8 [Security] fix allowed-address-pair 0.0.0.0/0 issue f31ae53dd5 Revert "Switch to use cast method in dhcp_ready_on_ports method" f156784b42 [OVN] Fix: DevStack guide e92e311232 [ovn] Documentation: Fix broken links in the OVN Doc 79af9e786d Add usage note in utils.Timer class f9d6076aec [OVN] Fix check_for_ha_chassis_group_address maintenance task d982a68446 Finish migration to new engine facade in test_db_base_plugin_v2 4980995176 Revert "Remove native openflow driver 'deferred' code" 1e970f1aa0 Switch to new engine facade in extensions unit tests 4da355098e Switch to new engine facade in test_allowedaddresspairs_db module c8f2a30983 Reno only - Make stateless allocation segment aware 42ad50db1e Add known gaps between ML2/OVS and OVN 4b10f6876f Fix fake_meta_dvr_port initialization 06fde66b0b [ovn] Stricter matching on metadata port binding event eb6104c0ac Allow sharing of address scopes via RBAC mechanism 9bd97242b6 Clear lsp.addresses always if port is OVN LB VIP port. ceb27f2c7d Mark TestVirtualPorts tests as unstable e1804e6f5f Use "datetime.datetime.isoformat" instead of "timeutils.isotime" 512d8abb4b Neutron ovs agent: Removing SmartNIC OVS representor port on instance tear down and resync ee73b50618 [OVN] Call OVNClient methods with context when possible 45643f2679 Change OVS tunnel tests to support unittest.mock 8c7aac4f3c Change TestOVNL3RouterPlugin to support unittest.mock f987486feb Deny delete last slaac subnet with allocation on segment 3d3dc60408 subnet create - segment aware auto-addr allocation 8ebc635a18 Subcribe trunk & subport events to set subport id 807a99f3ab [fullstack] Add option for custom apipaste.ini 7e09e72661 Filter subnets on fixed_ips segment e0cb072b84 [OVN] Switch release jobs to OVN 20.03 (v20.03.0 tag) 4912d11b34 Add fip_pf_description extension to be supported by service plugin 5a256dd937 Switch to new enginefacade in l3_hascheduler_db module 2b56e60140 Unblock security group update with same stateful data d92e71c297 Use OVN mech driver OVSDB connections for l3 plugin 933049f529 [OVN] Updates to tools/migrate_names.txt 8108db2c6f Bump neutron-lib to 2.2.0 9e416224b0 [OVN] OVN DB schema update aware maintenance tasks 4824a714bf [OVN] Add support for external ports 03ef29b1f0 [OVN] Default to TLS for OVN-enabled tests db26ded539 Fix bulk port tag test_type_args_passed_to_extension() cc281afeec Register DNSMASQ_OPTS in functional sanity tests 295480c53c Provide meaningful defaults for OVN/OVS_REPO_NAME 1e69279817 Check tc_lib.add_tc_policy_class input parameters d954cd4fea Remove native openflow driver 'deferred' code cbc473e066 Support for stateless security groups 8456240e7d Run fullstack security group test always serially 6b01ecf9ea Limit ovn sanity checks to q-svc 02a7e96743 Rename devstack service neutron-ovn-metadata-agent 7fa6c1bf39 [OVN] Add IGMP snooping support 592c2f8d91 DHCPv6 - Use addr6_list in dnsmasq 07d5a20b3b [OVN] Add missing OVN functional tests 36656ca318 [Community goal] Add contributor and PTL guide a27081636b Fix _notify_l3_agent_port_update when there is no binding host 2baeae7519 Clean dvr fip gateway entry when fip agent gw port is deleted 42fc820ded Increase log information in "TestMonitorDaemon" ec539cb76f Fix assertEqual() calls in metadata agent unit tests 5af046fd4e Remove extra header fields in proxied metadata requests 18c63a7148 [OVN] DevStack: Split the OVN_BRANCH and OVS_BRANCH variables 248cdaa6f7 Allow usage of assert_called_once method in unit tests 5c99964ead [OVN] Enable live-migration tests for devstack multinode ab1390163d Make neutron-ovn-tempest-slow job green 08132e213d Change way of retrieving LSP in virtual_port functional tests 8c103739f6 [OVN] Always update router static route d6e1523f78 Add tag-ports-during-bulk-creation to devstack 4739a4febb Ensure that default SG exists during list of SG rules API call 2581778264 [OVN] Remove SG dependency on original port dict 8ae949d5cb Revert "Blacklist test_multiple_ports_portrange_remote for OVN" b46dbce219 Fix logging call in the segment plugin c3bbbf575f [OVN] Update zuul jobs to use local OVN driver 046672247d Fix queries to retrieve allocations with network_segment_range 43e150e690 Ensure netlink.nla_slot tuple key is a string eae036a9d9 Catch PortBindingChassisEvent in test_agent_resync_on_non_existing_bridge 483cc047fa Remove leftovers of get_external_network_id for router d340f6be57 Add functional test for metadata agent monitoring 03378182f4 Remove neutron-tempest-dvr job from CI 5600163e9b [OvS] Handle re_added multi ports e4de8d0dd3 Improve log message on exception for invalid tunnel type 4d5817003c Blacklist test_multiple_ports_portrange_remote for OVN 321afc8f89 Move rejection of min-bw rule on non-physnet port to the ovs qos driver caa34c2797 Drop invalid rootwrap filters d874c46bff Filter by owner SGs when retrieving the SG rules dfd394805d Remove method get_security_group_rules_count 88a6c92dc7 [OVN] Merge networking-ovn vagrant into neutron 03203cc4c8 [OVN] Add OVN functional tests - part 1 6dbba8d5ce Check SG members instead of ports to skip flow update f5c5755100 [Fullstack] Wait until min QoS and Queue registers are set in DB 0d43372f14 Add "project_id" filter when changing the network segmentation ID 7593f95a74 Set a default IP route metric in ip_lib.list_ip_routes 3053caaa02 Workaround in NetworkSegmentRange OVO until "project_id" migration 33fb446add Deprecate config option "ovs_integration_bridge" 98266664c8 Mark NetcatTesterTestCase tests as unstable e2ab1636b0 Centralize traffic when LB and member has FIP 22ce84ab4d Revert "Add "ncat" rootwrap filter for debug" 2dd6222198 Set an absolute path in rootwrap filters_path ee01ea950d Bump neutron-lib to 2.1.0 cc3b9df426 "ping"/"ping6" command support in rootwrap filters cd66232c2b Merge networking-ovn documentation into neutron 0ef4233d89 Add "ncat" rootwrap filter for debug efec8fc153 Reduce the VLAN/tunneled ranges in fullstack tests 016e7826f1 Improve VLAN allocations synchronization 50025935fe Add 'fip-port-details' to OVN ML2 supported extensions c9a3d49513 Enhance agent's resources_synced check cc4c382fd5 Add NEUTRON_PATH to configure_for_func_testing.sh d8349033e9 Enforce "qos_max_rate" and "qos_burst" in OVN QoS options b85c273639 [OVN] Reduce the number of watched tables in MetadataProxyHandler 37fafeb678 Add SR-IOV agent resource provider information a0bb5763b2 dhcp-agent: equalize port create_low/update/delete priority f9b5a7b6d7 Add 'is_available' function e64bf6be1b [OVN] Devstack: Fix adding another compute node 6971404bb9 Add ovn-octavia-provider tag as official tag 99105848e5 Revert "Disable neutron-ovn-tempest-ovs-release temporarily" 244e6eead8 Use sys.executable instead of 'python' 13aa00026f Re-use existing ProcessLauncher from wsgi in RPC workers a05a3ba413 Remove plugins.ml2.db.get_binding_levels 93d9d6bbba Ensure there is always at most 1 dvr fip gw port per agent and network 18d8d3973a Revert "[DVR] Add lock during creation of FIP agent gateway port" c37781342e Use Python 3 as interpreter in test a1d65ba210 Remove duplicate QoS backend support table dcec852b7f [OVN] Update QoS related code from networking-ovn 5b12d808aa Disable neutron-ovn-tempest-ovs-release temporarily d027a9bc77 Fix duplicate ID warning during doc build 2cd75e073a OVN Metadata agent gets OVSDB updates for only its Chassis 4e60c047d2 Permit OVS build can be set 938581d9bd Increate tox-py38 timeout to 3600 seconds 97773eaea6 Increase log information when a RootHelperProcess fails 740741864a Remove sleep command when retrieving OVS dp b7dc0ac63a Increase tox-cover timeout to 4800 seconds cf36bd4ca5 Enable ovsdb debug messages in functional and fullstack b3a42cddc5 DVR: Remove control plane arp updates for DVR c471c7330c [OVN] Remove VLAN check when setting external_mac e22a191f47 Implement tagging during bulk port creation 7fa564ba2c Fix OVN agent devstack script to support IPv6 6ff46fb44b Add "ovn" as official tag used on Neutron's Launchpad 647b7f63f9 [OVN] Add an interval between agents health checks 936bd67aa4 Check "security_group_rule" quota during security group creation f8a3b2c589 Stop configuring install_command in tox. 3284b5f5ac [OVN] Provide local.conf sample file for DevStack 303937f3ae [OVN] scripts for networking-ovn code migration 2e316157ed Pass result dict to extensions by create port bulk 9283738843 [OVN] Bump ovsdbapp requirements to 1.0.0 710dad13a2 Collect exception information in ARPSpoofTestCase only if initialized fc507c701c Define new ipv6-only job for OVN bc0b38b282 Use distutils.version to check dnsmasq supported version c6a5b284b5 Ensure we don't pass empty addresses to lsp_set_addresses 3b56299e1f Ensure driver error preventing trunk port deletion is logged 06e43dd95d Add description field to portforwarding NAT rules 349869096b [OVN] Migrate the OVN tools f9e2514ddc [OVN] Double the tempest_concurrency 4f94c55ed3 Increase tox-py3{6,7} and lower-constraints timeout to 3600 seconds 28b1cb749d Remove networking-midonet job from Neutron's check queue 18410097f2 [ovn] Agent liveness - allow time to propagate checks 37521cee8d Assign local variable before being referred 2225457791 Update release-checklist doc page c5b7817fd0 Follow up to change of exception raised 2f46aee345 Remove python 3.5 from L3 rootwrap filters 45ae9dfb7d [OVN] Delete NAT entry first on any FIP update d6fccd247f Allow to kill keepalived state change monitor process cc890bf88b [OVN] Pass context while removing objects in OVN client 426afcfe02 [OVN] Use STACK_USER's actual primary group in starting services e395322fbf [OVN] Re-enable test_port_security_macspoofing_port 6d1d4cd6ba "_create_security_group_precommit" additional arguments are kwargs 89f138fa41 Remove "update_device_up" parameter from port notification d1e6c8e556 Remove TripleO job from Neutron's check queue f2b52b5e8f Add "qos_network_policy_id" to port definition 00a74d1137 Install OVN for functional tests 3ac866950f Replace support matrix ext with common library 13f1015809 Fix invalid assertFalse statements 1310c536e6 [OVN] Enable neutron-ovn-tempest-ovs-release job 0643ab44d8 Set OpenFlow 1.0, 1.3 and 1.4 by default on bridges 12089a526e Add support for direct ports with QoS in OVS 3acf0812a2 [OVN] Add missing pyOpenSSL requirement 1986865bd5 Add MariaDB 10.3 repository for Ubuntu Bionic 48ab58b46e [OVN] Change DevStack to use the local OVN driver 03b87ad963 [OVN] Set 'unknown' address properly when port sec is disabled 620adfe753 Complete dropping py27 support goal 0c8e520b37 [OVN] Add missing OvnSbIdl and OvnNbIdl unit tests 7d5cd3f47d [OVN] TrivialFix: use_new_ovn_repository must check major version a0fbb3da9b Modify exception string to have more information 03ad5bf19c Fix bug number in release note 7e0c44e21f Remove references to unittest2 library b20669fa6e IPv6 accepts first address only for routers 84658a96b3 Bump neutron-lib to 2.0.0 efa8dd0895 Add accepted egress direct flow 30a0333f64 Add Dongcan Ye as neutron-vpnaas lieutenant and bug contact person a022301b50 Set binding profile directly from OVNTrunkDriver (redo cont.) 93e9dc5426 ovs agent: signal to plugin if tunnel refresh needed 193cc4b5ec [OVN] Add OVN metadata entry points 668f582f8d Remove neutron-rootwrap-xen-dom0 script 331a195972 [OVN] Migrate the OVN mech driver f758bc9980 DhcpLocalProcess._enable should not call DhcpLocalProcess.restart af274fa826 Switch to reader context 6f7b88d080 Use effective MAC address for macvtap assigned VFs 83d7eb961d Add OVS QoS driver cache for minimum bandwidth rules 08bfbed4c3 Remove the condition that the mtu is nullable 5f2758bb80 Move arp device check out of loop b89616b1cf Add missing parameter option in log message 9c5156575d Pass correct port data to extension manager 0b3cff33c1 Subnet gateway should be a valid IP 0bf005b3c3 Disable not needed services in grenade jobs 2a8b5860a0 Imported Translations from Zanata 4075db5fd0 Improve ovs cleanup utility help e54b64f725 OVSInterfaceDriver.plug_new should catch correct exceptions 474bff078c Work around potential double row.delete() call 3faba7cae0 [L3] Switch order of processing added and removed router ports 52787dd4a4 Move tripleo standalone job to ostempest 480b04ce04 Unnecessary routers should not be created d484bbec2e Update TOX_ENV_SRC_MODULES example 3c156b6a4a Check "keepalived" is stopped in KeepalivedManagerTestCase 0166a1f286 Remove the neutron-grenade job definition 5663517613 Support L3 agent cleanup on shutdown f711090ed3 Check mtu on network update 3dbe5c2057 Add Neutron Priorities to dashboards list be1bdd4342 [OVN] Import OVN Client, L3 and QoS related code b869f30e0b Fix TestHashRingManager test cases 57bc6d167b Allow to select subnets to publish DNS records 36727e3463 Fix pep8 errors found by hacking 2.0.0 a75ec08ddb don't clear skb mark when ovs is hw-offload enabled df401ddca1 Remove unused arguments in test methods 364fc1413b Remove locks from privileged ip_lib module 04e391ba3e Bump neutron-lib to 1.30.0 fc4e3b95d8 Bump min pyroute2 version to 0.5.7 eabaf30fea Add etc/neutron/*.sample files to be ignored by git ade35a233e Add retries to update trunk port 7a9fcd11a8 [OVN] Move trunk driver b99765df8f Use "via" in gateway dictionary in Linux Bridge agent 07be793435 Use constraints for docs tox target ed26c606c1 Add a tox requirements target 49c0d0548a Move zuul jobs definitions to zuul.d directory 258eebea71 Locate RP-tree parent by hypervisor name af8a812240 Load the glibc library only once for Pyroute2 88153e7013 [OVN] Move OVN metadata agent fdb3f05055 [OVN] Import ovsdb related code (part 2) 3437572906 Replace "ip monitor" command with Pyroute2 implementation f77c1037e4 [OVN] Move OVN ACL commands to Neutron tree ec171b06f0 doc: fixed word 'neutron-serer' spelling error 8cc2765b5f Avoid raising NetworkInterfaceNotFound exception in DHCP agent logs 50ffa5173d [OVS] Handle added/removed ports in the same polling iteration b81155ee27 Migrate from ofctl to native QoS DSCP 96741866a7 Move DevStack OVN module to Neutron c5c896683c [OVN] Move OVN common.acl to Neutron tree 4b5cf9e5fb [OVN] Import ovsdb related code 65692127f6 [OVN] Move OVN commons to neutron tree f8cb7e849f [OVN] Add revision number maintenance methods 04f693bbbb [OVN] Add revision number methods 10bb7ecbb6 Update comments messages in abandon_old_reviews script b59fdaa9aa Log exact error during getting value from file d63da24a13 [OVN] Add hash ring methods 397eb2a2fe Serialize subnet creating depending on the network ID b01e0c2aa9 [OVS FW] Clean port rules if port not found in ovsdb a8b5afa41e Add upgrade check for NIC Switch agent 4b3baeb15a Do not inherit from built-in "dict" 151dab39dc Remove grenade-py3 job from Neutron CI 22d2bb94f7 Revert "Revise log when create port failed" f26b3620db [OVN] Add DB tables for OVN backend 5cb0ff418a Add more condition to check sg member exist 1e5ce97bb9 [OVN] Disable ovn jobs temporary d296188c2e Set ignore_basepython_conflict to true in tox.ini 9fa881f870 Add upgrade check for networking-ovn db version b898d2e3c0 List SG rules which belongs to tenant's SG 9267966628 [OVN] Sync requirements with OVN 9c6d3e073e Rehome networking-ovn CI jobs to neutron repository b4972e246d use objects common_types from neutron-lib 139b496ef9 Dont schedule Network, respecting network_auto_schedule config ea85e39660 Force arp_responder to True when DVR and tunneling enabled 185efb38aa Update networking-bgpvpn and networking-bagpipe liuetenants cdadaef53a OpenFlow monitor 728d8ee4b1 NetcatTester.stop_processes skip "No such process" exception e1a79995b9 Explicit mention py2 for neutron-grenade job 78231fb425 Start README.rst with a better title eba2e9ce19 Remove neutron-grenade job from Neutron CI queues 39255f3e7e Parameter 'fileds' value is not used in _get_subnets 3593b0dc69 Switch neutron-tempest-with-os-ken-master job to zuul v3 0041860e97 HA race condition test for DHCP scheduling 4afba466e0 Make network support read and write separation 458fd224db [Fullstack] Fix waiting for packet with DSCP mark in test a2fdf8aa72 Remove one of iptables_hybrid jobs 1d6207187c Update liaison for networking-sfc project eeefd54c53 doc: Adjust heading levels 3c9b0a5fac [fullstack] find ip based on allocation_pool c03b263a67 Trivial: fix firewall_refresh_needed return value type cae66a4d8d Revise log when create port failed 76de8a715d SR-IOV: macvtap assigned vf check using sysfs c4fd5a030f Remove old, legacy experimental CI jobs ab286bcdac Set DB retry for quota_enforcement pecan_wsgi hook 7a9d6d2641 Do not initialize snat-ns twice a545da420c Enable bulk updates for the dnsmasq d15ad2e481 Increase waiting time for network rescheduling 9ad03dcf96 Catch FileNotFoundError when listing namespace PIDs 0a3c53e411 Move migration to proper dir and fix objects tests 59b37701e9 TestMinBwQoSOvs must call the correct methods 5b341150e2 Add "igmp_snooping_enable" config option for OVS agent 02be7c13b3 Remove deprecated agent_type option 30d3e4c56c Fix Geneve max_header_size config option text eb3302207f Add profiler decorator to Neutron 26b8026cee Update security group rule if port range is all ports 7218873050 Set rootwrap daemon timeout for fullstack and functional tests cc3886fd78 PSExtDriverTestCase: initialize variable in case of exception aedc099176 Increase timeout when waiting for dnsmasq enablement 5537a81fbb Remove info about "ovsdb_interface" from config description 4d52b903eb Adding check for IPv6 address in setup_controllers cb2ebcc998 "round" with ndigits=None returns an integer 0a7f166861 Add neutron-tempest-mariadb-full periodic job 4379310846 Remove Floating IP DNS record upon associated port deletion a260afcf18 Add Source links to readme and update Documentation 68625686a4 Make the MTU attribute not nullable 48ea7da6c5 Router synch shouldn't return unrelated routers 1d55a4508f Clean-up ssl packages from bindep.txt 6842465260 Stop testing python 2 7c5ce50a0c Check dnsmasq process is active when spawned ecef65b9b5 Do not use exceptions in get_link_id() to control the code flow 4f59db2fab Reset timeout exception in DietTestCase when retrying 1a686fb401 Switch to use cast method in dhcp_ready_on_ports method 51dd91a73d Update bug contacts 48730d9449 Use threads insted of greethreads in IP monitor 471dc98707 Temporary disable CI job neutron-functional-python27 bdc1bc73f3 Fix mismatch of tags in dnsmasq options e801159003 Handle OVSFWPortNotFound and OVSFWTagNotFound in ovs firewall 60ac055ff6 Add more info when parsing config fails 4b67a06403 Log OVS firewall conjunction creation a8fa085364 [nova][train] Docs: Remove deprecated RetryFilter 70763c0d1b Update list of Neutron lieuetenants 555238da69 Start using oslo_utils.netutils.is_ipv6_enabled() 3fe4df00e3 [doc][IPv6] make kernel config addr_gen_mode clear e101652a63 Don't call super() in Timer class __init__ method 592b446299 Convert Pyroute2 byte results to strings dce7af902c Mock openstacksdk raise_from_response in ironic unit test 6b52e361f0 Fix misspell word 6a5a75d5a6 Add radvd_user config option ee3054b936 Switch to openstack-python3-ussuri-jobs ac0a426017 Add policy config for get_flavor_service_profile operation 12760c94c8 Adding LOG statements to debug 1838449 451c21571f ovsdb monitor: handle modified ports 040b550a86 Use admin context when updating router gateway 02b6c9827d doc: Update QoS minimum bandwidth limitations for Train 17706412e2 Switch neutron-tempest-postgres-full job definition to Zuul v3 74550b7b15 Code review policy - add note about approving mechanical changes 0fdcbe4ee8 Imported Translations from Zanata 654c1f06d5 Fix designate driver not being fully region aware a534f10e7b Add irrelevant files to neutron-centos-7-tripleo-standalone db3001a7a2 Remove QoS related objects unneeded compatibility conversions 4762ee9d1a Update master for stable/train 761b91fd22 Randomize VNI in FdbInterfaceTestCase 6b241bb13c Always make sure openvswitch kernel module is loaded 94f69ab407 Randomize BaseFullStackTestCase._find_available_ips ffe5943e65 Make port list by mac case insesitive d8eb42f1ea Configure keepalived interfaces according to config file f9a750fcaf Prevent providing privsep-helper paths outside /etc 2bb241b7a2 Log the IPTables rules if "debug_iptables_rules" c952b59600 Handle ports assigned to routers without routerports 0528068a35 switch to the newly created opensuse-15 nodeset def8e95aad fixed_configured=True when Add/Remove port IPs ab75405708 Initialize nova_notifier for only port data changes 69b3762dda Add binding_index to NetworkDhcpAgentBinding da93f09676 Open Ussuri DB branch Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .gitreview | 1 + .zuul.yaml | 456 --- CONTRIBUTING.rst | 19 +- HACKING.rst | 5 +- README.rst | 18 +- TESTING.rst | 18 +- bin/neutron-rootwrap-xen-dom0 | 154 - bindep.txt | 7 - devstack/lib/dns | 11 +- devstack/lib/octavia | 45 + devstack/lib/ovn_agent | 829 +++++ devstack/lib/ovs | 14 +- devstack/lib/tag_ports_during_bulk_creation | 3 + devstack/ovn-compute-local.conf.sample | 89 + devstack/ovn-db-local.conf.sample | 47 + devstack/ovn-local.conf.sample | 172 + devstack/ovn-vtep-local.conf.sample | 39 + devstack/plugin.sh | 35 + .../admin/ovn/figures/ovn-l3ha-bfd-failover.png | Bin 0 -> 122142 bytes .../admin/ovn/figures/ovn-l3ha-bfd-failover.svg | 2599 +++++++++++++ .../figures/ovn-north-south-distributed-fip.png | Bin 0 -> 125745 bytes .../figures/ovn-north-south-distributed-fip.svg | 3090 ++++++++++++++++ .../ovn/refarch/figures/ovn-architecture1.png | Bin 0 -> 205984 bytes .../ovn/refarch/figures/ovn-architecture1.svg | 1568 ++++++++ .../admin/ovn/refarch/figures/ovn-compute1.png | Bin 0 -> 139894 bytes .../admin/ovn/refarch/figures/ovn-compute1.svg | 982 +++++ .../admin/ovn/refarch/figures/ovn-services.png | Bin 0 -> 97775 bytes .../admin/ovn/refarch/figures/ovn-services.svg | 860 +++++ .../refarch/launch-instance-provider-network.rst | 774 ++++ .../launch-instance-selfservice-network.rst | 757 ++++ .../admin/ovn/refarch/selfservice-networks.rst | 517 +++ .../contributor/internals/code_profiling.rst | 197 + .../internals/ovn/acl_optimizations.rst | 186 + .../contributor/internals/ovn/data_model.rst | 263 ++ .../internals/ovn/database_consistency.rst | 442 +++ .../internals/ovn/distributed_ovsdb_events.rst | 142 + .../internals/ovn/l3_ha_rescheduling.rst | 166 + .../contributor/internals/ovn/loadbalancer.rst | 316 ++ .../contributor/internals/ovn/metadata_api.rst | 363 ++ .../contributor/internals/ovn/native_dhcp.rst | 53 + .../contributor/internals/ovn/ovn_worker.rst | 84 + .../contributor/internals/quality_of_service.rst | 40 +- .../contributor/ovn_vagrant/prerequisites.rst | 29 + .../ovn_vagrant/sparse-architecture.rst | 106 + .../contributor/policies/release-checklist.rst | 20 +- .../contributor/testing/ci_scenario_jobs.rst | 22 +- .../general_feature_support_matrix.ini | 167 +- .../provider_network_support_matrix.ini | 57 +- .../install/ovn/figures/ovn-initial-resources.png | Bin 0 -> 87952 bytes .../install/ovn/figures/ovn-initial-resources.svg | 1596 ++++++++ .../install/ovn/figures/tripleo-ovn-arch.png | Bin 0 -> 115804 bytes .../install/ovn/figures/tripleo-ovn-arch.svg | 3175 ++++++++++++++++ etc/neutron/rootwrap.d/debug.filters | 6 +- etc/neutron/rootwrap.d/iptables-firewall.filters | 3 + etc/neutron/rootwrap.d/l3.filters | 15 +- etc/neutron/rootwrap.d/privsep.filters | 2 +- .../neutron_ovn_metadata_agent.ini | 6 + etc/oslo-config-generator/ovn.ini | 6 + etc/rootwrap.conf | 3 + lower-constraints.txt | 21 +- neutron/agent/common/ovs_lib.py | 58 +- neutron/agent/common/ovsdb_monitor.py | 16 +- neutron/agent/common/placement_report.py | 61 +- neutron/agent/common/utils.py | 25 + neutron/agent/dhcp/agent.py | 54 +- neutron/agent/dhcp_agent.py | 2 + neutron/agent/l3/agent.py | 24 +- neutron/agent/l3/dvr.py | 6 +- neutron/agent/l3/dvr_edge_ha_router.py | 8 +- neutron/agent/l3/dvr_edge_router.py | 10 +- neutron/agent/l3/dvr_local_router.py | 41 +- neutron/agent/l3/extensions/port_forwarding.py | 4 +- neutron/agent/l3/ha.py | 9 + neutron/agent/l3/ha_router.py | 43 +- neutron/agent/l3/keepalived_state_change.py | 91 +- neutron/agent/l3/router_info.py | 40 +- neutron/agent/l3_agent.py | 2 + neutron/agent/linux/daemon.py | 2 +- neutron/agent/linux/dhcp.py | 275 +- neutron/agent/linux/external_process.py | 5 +- neutron/agent/linux/interface.py | 49 +- neutron/agent/linux/ip_lib.py | 62 +- neutron/agent/linux/ip_monitor.py | 86 - neutron/agent/linux/ipset_manager.py | 2 +- neutron/agent/linux/iptables_firewall.py | 81 +- neutron/agent/linux/iptables_manager.py | 1 + neutron/agent/linux/keepalived.py | 22 +- neutron/agent/linux/of_monitor.py | 84 + .../agent/linux/openvswitch_firewall/firewall.py | 173 +- neutron/agent/linux/openvswitch_firewall/rules.py | 6 + neutron/agent/linux/ra.py | 11 +- neutron/agent/linux/tc_lib.py | 50 +- neutron/agent/linux/utils.py | 5 +- neutron/agent/metadata/agent.py | 39 +- neutron/agent/metadata/driver.py | 7 +- neutron/agent/ovn/__init__.py | 0 neutron/agent/ovn/metadata/__init__.py | 0 neutron/agent/ovn/metadata/agent.py | 483 +++ neutron/agent/ovn/metadata/driver.py | 224 ++ neutron/agent/ovn/metadata/ovsdb.py | 72 + neutron/agent/ovn/metadata/server.py | 198 + neutron/agent/ovn/metadata_agent.py | 39 + neutron/agent/rpc.py | 8 +- neutron/agent/securitygroups_rpc.py | 8 +- .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 4 +- neutron/api/rpc/handlers/l3_rpc.py | 19 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 11 +- neutron/cmd/eventlet/agents/ovn_metadata.py | 17 + neutron/cmd/ovn/__init__.py | 0 neutron/cmd/ovn/migration_mtu.py | 119 + neutron/cmd/ovn/neutron_ovn_db_sync_util.py | 218 ++ neutron/cmd/ovs_cleanup.py | 4 +- neutron/cmd/sanity/checks.py | 52 +- neutron/cmd/sanity_check.py | 13 + neutron/cmd/upgrade_checks/checks.py | 123 +- neutron/common/_constants.py | 3 + neutron/common/cache_utils.py | 27 +- neutron/common/config.py | 1 - neutron/common/eventlet_utils.py | 9 +- neutron/common/ipv6_utils.py | 29 +- neutron/common/ovn/__init__.py | 0 neutron/common/ovn/acl.py | 499 +++ neutron/common/ovn/constants.py | 216 ++ neutron/common/ovn/exceptions.py | 38 + neutron/common/ovn/extensions.py | 57 + neutron/common/ovn/hash_ring_manager.py | 100 + neutron/common/ovn/utils.py | 474 +++ neutron/common/utils.py | 17 +- neutron/conf/agent/cmd.py | 3 +- neutron/conf/agent/common.py | 3 + neutron/conf/agent/dhcp.py | 11 +- neutron/conf/agent/l3/config.py | 14 + neutron/conf/agent/ovn/__init__.py | 0 neutron/conf/agent/ovn/metadata/__init__.py | 0 neutron/conf/agent/ovn/metadata/config.py | 58 + neutron/conf/agent/ovs_conf.py | 11 + neutron/conf/agent/ovsdb_api.py | 5 +- neutron/conf/plugins/ml2/drivers/driver_type.py | 4 +- .../plugins/ml2/drivers/mech_sriov/agent_common.py | 9 + neutron/conf/plugins/ml2/drivers/ovn/__init__.py | 0 neutron/conf/plugins/ml2/drivers/ovn/ovn_conf.py | 300 ++ neutron/conf/plugins/ml2/drivers/ovs_conf.py | 29 +- neutron/conf/policies/flavor.py | 17 +- neutron/conf/policies/security_group.py | 16 +- neutron/conf/profiling.py | 31 + neutron/core_extensions/qos.py | 8 +- neutron/db/address_scope_db.py | 6 +- neutron/db/agentschedulers_db.py | 6 +- neutron/db/db_base_plugin_common.py | 19 +- neutron/db/db_base_plugin_v2.py | 113 +- neutron/db/external_net_db.py | 7 - neutron/db/ipam_backend_mixin.py | 21 +- neutron/db/ipam_pluggable_backend.py | 25 +- neutron/db/l3_db.py | 79 +- neutron/db/l3_dvr_db.py | 224 +- neutron/db/l3_dvrscheduler_db.py | 85 +- neutron/db/l3_hascheduler_db.py | 5 +- neutron/db/migration/__init__.py | 2 + .../alembic_migrations/versions/EXPAND_HEAD | 2 +- .../expand/c613d0b82681_subnet_force_network_id.py | 5 + .../18a7e90ae768_add_security_group_stateful.py | 37 + ...22de6_add_dvr_fip_gateway_port_network_table.py | 42 + ...454a9655_add_dns_publish_fixed_ip_to_subnets.py | 46 + .../expand/86274d77933e_change_mtu_to_not_null.py | 55 + .../Ibac91d24da2_port_forwarding_description.py | 77 + .../a010322604bc_network_subnet_update_lock.py | 40 + .../expand/c3e9d13c4367_add_binding_index_to_.py | 68 + .../expand/d8bdf05313f4_add_in_use_to_subnet.py | 53 + ...236b0e1ff_add_rbac_support_for_address_scope.py | 82 + ...e88badaa9591_add_rbac_support_for_subnetpool.py | 81 + .../ussuri/expand/f4b9654dd40c_ovn_backend.py | 74 + neutron/db/migration/cli.py | 3 +- neutron/db/models/address_scope.py | 18 +- neutron/db/models/dns.py | 23 + neutron/db/models/dvr.py | 17 + neutron/db/models/ovn.py | 63 + neutron/db/models/plugins/ml2/geneveallocation.py | 8 + .../models/plugins/ml2/gre_allocation_endpoints.py | 8 + neutron/db/models/plugins/ml2/vlanallocation.py | 8 + neutron/db/models/plugins/ml2/vxlanallocation.py | 8 + neutron/db/models/port_forwarding.py | 6 +- neutron/db/models/securitygroup.py | 4 + neutron/db/models_v2.py | 65 +- neutron/db/network_dhcp_agent_binding/models.py | 12 + neutron/db/ovn_hash_ring_db.py | 69 + neutron/db/ovn_revision_numbers_db.py | 229 ++ neutron/db/rbac_db_models.py | 22 + neutron/db/securitygroups_db.py | 104 +- neutron/db/securitygroups_rpc_base.py | 41 +- neutron/debug/debug_agent.py | 2 + neutron/debug/shell.py | 2 + neutron/extensions/fip_pf_description.py | 20 + neutron/extensions/qos_port_network_policy.py | 20 + neutron/extensions/rbac.py | 5 + neutron/extensions/rbac_address_scope.py | 22 + neutron/extensions/rbac_subnetpool.py | 22 + neutron/extensions/stateful_security_group.py | 22 + neutron/extensions/subnet_dns_publish_fixed_ip.py | 20 + .../extensions/tag_ports_during_bulk_creation.py | 24 + neutron/extensions/tagging.py | 14 +- neutron/hacking/checks.py | 18 +- neutron/ipam/subnet_alloc.py | 2 +- neutron/ipam/utils.py | 15 +- neutron/locale/de/LC_MESSAGES/neutron.po | 587 +-- neutron/locale/es/LC_MESSAGES/neutron.po | 529 +-- neutron/locale/fr/LC_MESSAGES/neutron.po | 533 +-- neutron/locale/it/LC_MESSAGES/neutron.po | 522 +-- neutron/locale/ja/LC_MESSAGES/neutron.po | 526 +-- neutron/locale/ko_KR/LC_MESSAGES/neutron.po | 514 +-- neutron/locale/pt_BR/LC_MESSAGES/neutron.po | 517 +-- neutron/locale/ru/LC_MESSAGES/neutron.po | 507 +-- neutron/locale/tr_TR/LC_MESSAGES/neutron.po | 1648 --------- neutron/locale/zh_CN/LC_MESSAGES/neutron.po | 452 +-- neutron/locale/zh_TW/LC_MESSAGES/neutron.po | 462 +-- neutron/manager.py | 7 + neutron/objects/address_scope.py | 27 +- neutron/objects/agent.py | 2 +- neutron/objects/auto_allocate.py | 2 +- neutron/objects/common_types.py | 319 -- neutron/objects/conntrack_helper.py | 2 +- neutron/objects/extensions/port_security.py | 2 +- neutron/objects/flavor.py | 2 +- neutron/objects/floatingip.py | 2 +- neutron/objects/ipam.py | 2 +- neutron/objects/l3_hamode.py | 2 +- neutron/objects/l3agent.py | 2 +- neutron/objects/logapi/logging_resource.py | 2 +- neutron/objects/metering.py | 2 +- neutron/objects/network.py | 22 +- neutron/objects/network_segment_range.py | 98 +- neutron/objects/plugins/ml2/base.py | 40 + neutron/objects/plugins/ml2/flatallocation.py | 4 +- neutron/objects/plugins/ml2/geneveallocation.py | 9 +- neutron/objects/plugins/ml2/greallocation.py | 9 +- neutron/objects/plugins/ml2/vlanallocation.py | 39 +- neutron/objects/plugins/ml2/vxlanallocation.py | 11 +- .../objects/port/extensions/allowedaddresspairs.py | 2 +- .../objects/port/extensions/data_plane_status.py | 2 +- neutron/objects/port/extensions/extra_dhcp_opt.py | 2 +- .../port/extensions/uplink_status_propagation.py | 2 +- neutron/objects/port_forwarding.py | 22 +- neutron/objects/ports.py | 88 +- neutron/objects/qos/binding.py | 19 +- neutron/objects/qos/policy.py | 52 +- neutron/objects/qos/rule.py | 31 +- neutron/objects/qos/rule_type.py | 7 +- neutron/objects/quota.py | 2 +- neutron/objects/rbac.py | 12 +- neutron/objects/rbac_db.py | 43 +- neutron/objects/router.py | 18 +- neutron/objects/securitygroup.py | 32 +- neutron/objects/servicetype.py | 2 +- neutron/objects/subnet.py | 121 +- neutron/objects/subnetpool.py | 65 +- neutron/objects/trunk.py | 2 +- neutron/opts.py | 1 - neutron/pecan_wsgi/hooks/quota_enforcement.py | 1 + neutron/plugins/ml2/db.py | 20 - neutron/plugins/ml2/drivers/helpers.py | 142 +- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 7 +- .../agent/extension_drivers/qos_driver.py | 4 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 7 +- .../drivers/mech_sriov/agent/common/exceptions.py | 6 +- .../drivers/mech_sriov/agent/eswitch_manager.py | 93 +- .../ml2/drivers/mech_sriov/agent/pci_lib.py | 40 +- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 16 +- .../drivers/openvswitch/agent/common/constants.py | 2 + .../agent/extension_drivers/qos_driver.py | 54 +- .../openvswitch/agent/openflow/native/br_int.py | 29 +- .../openvswitch/agent/openflow/native/ofswitch.py | 5 +- .../agent/openflow/native/ovs_bridge.py | 10 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 56 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 327 +- neutron/plugins/ml2/drivers/ovn/__init__.py | 0 .../ml2/drivers/ovn/mech_driver/__init__.py | 0 .../ml2/drivers/ovn/mech_driver/mech_driver.py | 1157 ++++++ .../ml2/drivers/ovn/mech_driver/ovsdb/__init__.py | 0 .../ml2/drivers/ovn/mech_driver/ovsdb/api.py | 689 ++++ .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 1159 ++++++ .../ovn/mech_driver/ovsdb/extensions/__init__.py | 0 .../ovn/mech_driver/ovsdb/extensions/qos.py | 251 ++ .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 860 +++++ .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 622 ++++ .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 2313 ++++++++++++ .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 1244 +++++++ .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 558 +++ .../ml2/drivers/ovn/mech_driver/ovsdb/worker.py | 38 + neutron/plugins/ml2/drivers/type_tunnel.py | 12 +- neutron/plugins/ml2/drivers/type_vlan.py | 53 +- neutron/plugins/ml2/extensions/dns_integration.py | 67 +- .../ml2/extensions/subnet_dns_publish_fixed_ip.py | 83 + .../extensions/tag_ports_during_bulk_creation.py | 58 + neutron/plugins/ml2/managers.py | 4 +- neutron/plugins/ml2/plugin.py | 92 +- neutron/plugins/ml2/rpc.py | 18 +- neutron/policy.py | 5 +- neutron/privileged/agent/linux/ip_lib.py | 106 +- neutron/profiling/__init__.py | 0 neutron/profiling/profiled_decorator.py | 82 + neutron/quota/resource_registry.py | 5 - neutron/scheduler/base_resource_filter.py | 2 +- neutron/scheduler/base_scheduler.py | 4 +- neutron/scheduler/dhcp_agent_scheduler.py | 64 +- neutron/scheduler/l3_ovn_scheduler.py | 154 + neutron/server/wsgi_eventlet.py | 2 +- neutron/service.py | 18 +- .../externaldns/drivers/designate/driver.py | 3 +- .../metering/drivers/iptables/iptables_driver.py | 6 +- neutron/services/ovn_l3/__init__.py | 0 neutron/services/ovn_l3/plugin.py | 427 +++ neutron/services/placement_report/plugin.py | 34 +- neutron/services/portforwarding/pf_plugin.py | 4 +- neutron/services/qos/drivers/manager.py | 5 +- neutron/services/qos/drivers/openvswitch/driver.py | 15 +- neutron/services/qos/drivers/ovn/__init__.py | 0 neutron/services/qos/drivers/ovn/driver.py | 63 + neutron/services/qos/qos_plugin.py | 16 +- neutron/services/segments/exceptions.py | 4 + neutron/services/segments/plugin.py | 55 +- neutron/services/tag/tag_plugin.py | 9 +- .../drivers/openvswitch/agent/ovsdb_handler.py | 5 +- neutron/services/trunk/drivers/ovn/__init__.py | 0 neutron/services/trunk/drivers/ovn/trunk_driver.py | 191 + neutron/services/trunk/plugin.py | 16 +- neutron/services/trunk/rpc/server.py | 44 +- .../agent/l3/bin/cmd_keepalived_state_change.py | 22 + .../agent/l3/test_keepalived_state_change.py | 219 +- .../functional/agent/l3/test_legacy_router.py | 10 +- .../functional/agent/l3/test_metadata_proxy.py | 2 +- .../functional/agent/linux/test_bridge_lib.py | 4 +- .../functional/agent/linux/test_ip_monitor.py | 67 - .../functional/agent/linux/test_keepalived.py | 17 +- .../functional/agent/linux/test_of_monitor.py | 98 + .../functional/agent/linux/test_process_monitor.py | 3 +- .../functional/agent/ovn/metadata/__init__.py | 0 .../agent/ovn/metadata/test_metadata_agent.py | 273 ++ .../test_c3e9d13c4367_add_binding_index_to_.py | 90 + .../functional/db/test_ovn_revision_numbers_db.py | 186 + .../functional/plugins/ml2/drivers/ovn/__init__.py | 0 .../ml2/drivers/ovn/mech_driver/__init__.py | 0 .../ml2/drivers/ovn/mech_driver/ovsdb/__init__.py | 0 .../ovn/mech_driver/ovsdb/extensions/__init__.py | 0 .../ovn/mech_driver/ovsdb/extensions/test_qos.py | 113 + .../drivers/ovn/mech_driver/ovsdb/test_impl_idl.py | 149 + .../ovn/mech_driver/ovsdb/test_maintenance.py | 828 +++++ .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 1153 ++++++ .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 1634 +++++++++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 233 ++ .../drivers/ovn/mech_driver/test_mech_driver.py | 596 +++ .../scheduler/test_dhcp_agent_scheduler.py | 62 +- .../l3_router/test_l3_dvr_router_plugin.py | 243 -- .../functional/services/ovn_l3/test_plugin.py | 552 +++ .../portforwarding/test_port_forwarding.py | 63 +- .../openvswitch/agent/test_ovsdb_handler.py | 3 +- .../services/trunk/drivers/ovn/__init__.py | 0 .../trunk/drivers/ovn/test_trunk_driver.py | 116 + .../unit/agent/common/test_placement_report.py | 54 +- .../agent/l3/extensions/test_port_forwarding.py | 19 +- .../linux/openvswitch_firewall/test_firewall.py | 100 +- .../agent/linux/openvswitch_firewall/test_rules.py | 3 +- .../unit/agent/linux/test_external_process.py | 19 + .../unit/agent/linux/test_iptables_firewall.py | 23 +- .../unit/api/rpc/handlers/test_resources_rpc.py | 2 +- .../api/rpc/handlers/test_securitygroups_rpc.py | 22 +- .../unit/common/ovn/test_hash_ring_manager.py | 134 + .../unit/extensions/test_data_plane_status.py | 3 +- .../extensions/test_floating_ip_port_forwarding.py | 37 +- .../extensions/test_network_ip_availability.py | 25 +- .../extensions/test_subnet_dns_publish_fixed_ip.py | 105 + .../objects/plugins/ml2/test_geneveallocation.py | 6 +- .../unit/objects/plugins/ml2/test_greallocation.py | 6 +- .../objects/plugins/ml2/test_vlanallocation.py | 6 +- .../objects/plugins/ml2/test_vxlanallocation.py | 6 +- .../unit/objects/test_network_segment_range.py | 206 +- .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 2 +- .../agent/test_linuxbridge_neutron_agent.py | 3 +- .../mech_sriov/agent/test_eswitch_manager.py | 159 +- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 40 +- .../mech_sriov/agent/test_sriov_nic_agent.py | 32 +- .../agent/extension_drivers/test_qos_driver.py | 27 +- .../agent/openflow/native/test_br_int.py | 58 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 699 ++-- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 42 +- .../ml2/drivers/ovn/mech_driver/__init__.py | 0 .../ml2/drivers/ovn/mech_driver/ovsdb/__init__.py | 0 .../ovn/mech_driver/ovsdb/extensions/__init__.py | 0 .../ovn/mech_driver/ovsdb/extensions/test_qos.py | 365 ++ .../ovn/mech_driver/ovsdb/schemas/ovn-nb.ovsschema | 449 +++ .../ovn/mech_driver/ovsdb/schemas/ovn-sb.ovsschema | 404 +++ .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 1564 ++++++++ .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 826 +++++ .../ovn/mech_driver/ovsdb/test_maintenance.py | 410 +++ .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 986 +++++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 603 +++ .../drivers/ovn/mech_driver/test_mech_driver.py | 3050 ++++++++++++++++ .../unit/plugins/ml2/drivers/test_type_vlan.py | 18 + .../test_tag_ports_during_bulk_creation.py | 129 + .../unit/plugins/ml2/test_ext_portsecurity.py | 1 + .../unit/plugins/ml2/test_tracked_resources.py | 5 + .../unit/privileged/agent/linux/test_ip_lib.py | 43 +- .../unit/scheduler/test_dhcp_agent_scheduler.py | 46 +- .../unit/scheduler/test_l3_agent_scheduler.py | 49 +- .../unit/services/placement_report/test_plugin.py | 33 +- .../services/qos/drivers/openvswitch/__init__.py | 0 .../qos/drivers/openvswitch/test_driver.py | 45 + .../unit/services/qos/drivers/ovn/__init__.py | 0 .../unit/services/qos/drivers/ovn/test_driver.py | 46 + .../unit/services/qos/drivers/test_manager.py | 3 +- .../unit/services/trunk/drivers/ovn/__init__.py | 0 .../trunk/drivers/ovn/test_trunk_driver.py | 382 ++ neutron/wsgi.py | 6 + playbooks/add_mariadb_repo.yaml | 3 + .../legacy/neutron-grenade-dvr-multinode/run.yaml | 12 + .../legacy/neutron-grenade-multinode/run.yaml | 12 + .../post.yaml | 0 .../run.yaml | 37 +- .../legacy/neutron-tempest-postgres-full/post.yaml | 15 - .../legacy/neutron-tempest-postgres-full/run.yaml | 46 - .../neutron-tempest-with-os-ken-master/post.yaml | 15 - .../neutron-tempest-with-os-ken-master/run.yaml | 55 - playbooks/multinode-setup.yaml | 4 + plugin.spec | 81 + ...ect-ports-with-QoS-in-OVS-48c78c156606e724.yaml | 7 + .../notes/Ussuri-prelude-ca4d793da2d0bc63.yaml | 28 + .../accepted_egress_direct-cc23873e213c6919.yaml | 20 + .../add-address-scope-rbac-a903ff28f6457606.yaml | 5 + ...-field-in-port-forwarding-5db3b3f407c7eef4.yaml | 4 + ...ping_enable-config-option-6a0e15e4ed0a2cf7.yaml | 7 + ...tu-writable-api-extension-f7038f85f3494a74.yaml | 2 +- .../add-subnetpool-rbac-2eb2008bd1b27b11.yaml | 5 + ...addres-case-insensitivity-750299c11b49a9a8.yaml | 9 + ...te-ovs_integration_bridge-d4d1521c35f999bd.yaml | 6 + .../notes/dhcp-bulk-updates-0150b764bb1b165f.yaml | 14 + ...p-host-addr6-list-support-45d104b3f7ce220e.yaml | 25 + .../notes/drop-python-2-7-9707a901c7d8eab6.yaml | 5 + .../notes/external-ports-03050eda7ffe13d5.yaml | 11 + ...-allocation-with-segments-b90e99a30d096c9d.yaml | 9 + ...ity-group-no-port-on-host-9177e66d4b16e90c.yaml | 8 + ...-routed-provider-networks-c54a54844d9a3926.yaml | 7 + ...rp-responder-true-for-dvr-5aabbfa51945dd5a.yaml | 8 + ...3_agent_graceful_shutdown-87bf3304e6fab8a5.yaml | 10 + ...parent-by-hypervisor-name-3244ed87dc57f950.yaml | 23 + .../make-mtu-not-nullable-2b2765bc85379545.yaml | 5 + ...roxy-header-vulnerability-60c44eb7c76d560c.yaml | 8 + ...-on-network-auto-schedule-1ea5e74fd5bb560c.yaml | 14 + ...ovn-igmp-snooping-support-1a6ec8e703311fce.yaml | 5 + .../radvd_user-config-option-24730a6d686fee18.yaml | 11 + ...-agent_type-config-option-31eea687b4ec2e3a.yaml | 5 + ...remove-get_binding_levels-c4e8b350a196706a.yaml | 6 + ...oup-rule-all-ports-update-2857d80e5742ebc5.yaml | 10 + ...-for-security-group-owner-6635dd3e4c6ab5ee.yaml | 6 + ...rnel-3.13-removed-support-8bb00902dd607746.yaml | 8 + .../stateful-security-group-04b2902ed9c44e4f.yaml | 18 + ...ublish-fixed-ip-extension-6a5bb42a048a6671.yaml | 10 + ...orts-during-bulk-creation-23161dd39d779e99.yaml | 5 + releasenotes/source/index.rst | 1 + .../source/locale/fr/LC_MESSAGES/releasenotes.po | 90 - .../source/locale/ja/LC_MESSAGES/releasenotes.po | 301 -- .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 103 - releasenotes/source/train.rst | 6 + requirements.txt | 16 +- roles/add_mariadb_repo/tasks/main.yaml | 17 + setup.cfg | 19 +- test-requirements.txt | 3 +- tools/abandon_old_reviews.sh | 4 +- tools/configure_for_func_testing.sh | 27 +- tools/deploy_rootwrap.sh | 5 +- tools/download_gerrit_change.py | 61 + tools/files_in_patch.py | 81 + tools/migrate_names.py | 111 + tools/migrate_names.txt | 49 + tools/ovn_migration/README.rst | 43 + tools/ovn_migration/hosts.sample | 37 + .../infrared/tripleo-ovn-migration/README.rst | 33 + .../infrared/tripleo-ovn-migration/main.yml | 194 + .../roles/create-resources/defaults/main.yml | 9 + .../roles/create-resources/tasks/main.yml | 33 + .../templates/create-resources.sh.j2 | 153 + .../create-resources/templates/start-pinger.sh.j2 | 58 + .../roles/prepare-migration/defaults/main.yml | 7 + .../roles/prepare-migration/tasks/main.yml | 181 + .../templates/start-ovn-migration.sh.j2 | 7 + tools/ovn_migration/migrate-to-ovn.yml | 204 ++ .../tripleo_environment/ovn_migration.sh | 349 ++ .../playbooks/ovn-migration.yml | 110 + .../playbooks/reduce-dhcp-renewal-time.yml | 24 + .../playbooks/roles/backup/tasks/main.yml | 19 + .../delete-neutron-resources/defaults/main.yml | 3 + .../roles/delete-neutron-resources/tasks/main.yml | 22 + .../templates/delete-neutron-resources.sh.j2 | 29 + .../playbooks/roles/migration/defaults/main.yml | 15 + .../roles/migration/tasks/activate-ovn.yml | 15 + .../roles/migration/tasks/cleanup-dataplane.yml | 79 + .../roles/migration/tasks/clone-dataplane.yml | 15 + .../playbooks/roles/migration/tasks/main.yml | 12 + .../playbooks/roles/migration/tasks/sync-dbs.yml | 20 + .../roles/migration/templates/activate-ovn.sh.j2 | 41 + .../roles/migration/templates/clone-br-int.sh.j2 | 77 + .../roles/post-migration/defaults/main.yml | 4 + .../playbooks/roles/post-migration/tasks/main.yml | 59 + .../playbooks/roles/pre-migration/tasks/main.yml | 17 + .../roles/resources/cleanup/defaults/main.yml | 6 + .../roles/resources/cleanup/tasks/main.yml | 26 + .../cleanup/templates/cleanup-resources.sh.j2 | 32 + .../roles/resources/create/defaults/main.yml | 5 + .../roles/resources/create/tasks/main.yml | 22 + .../create/templates/create-resources.sh.j2 | 128 + .../roles/resources/validate/defaults/main.yml | 5 + .../roles/resources/validate/tasks/main.yml | 12 + .../validate/templates/validate-resources.sh.j2 | 19 + .../roles/tripleo-update/defaults/main.yml | 4 + .../playbooks/roles/tripleo-update/tasks/main.yml | 24 + .../templates/generate-ovn-extras.sh.j2 | 7 + tools/pip_install_src_modules.sh | 2 +- tools/requirements.txt | 5 + tools/tripleo/ovn.yml | 51 + tox.ini | 64 +- vagrant/ovn/README.rst | 6 + vagrant/ovn/provisioning/boxes.yml | 6 + vagrant/ovn/provisioning/id_rsa | 27 + vagrant/ovn/provisioning/id_rsa.pub | 1 + vagrant/ovn/provisioning/provider-setup.sh | 19 + vagrant/ovn/provisioning/providers.rb | 42 + vagrant/ovn/provisioning/setup-base.sh | 104 + vagrant/ovn/provisioning/setup-compute.sh | 103 + vagrant/ovn/provisioning/setup-controller.sh | 130 + vagrant/ovn/provisioning/setup-db.sh | 29 + vagrant/ovn/provisioning/setup-vtep.sh | 32 + vagrant/ovn/sparse/README.rst | 9 + vagrant/ovn/sparse/Vagrantfile | 96 + vagrant/ovn/sparse/instances.yml | 46 + zuul.d/base.yaml | 59 + zuul.d/grenade.yaml | 49 + zuul.d/project.yaml | 124 + zuul.d/rally.yaml | 87 + zuul.d/tempest-multinode.yaml | 252 ++ zuul.d/tempest-singlenode.yaml | 308 ++ zuul.d/tripleo.yaml | 38 + 741 files changed, 91931 insertions(+), 13736 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4ba3f71160..875fc4ba82 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ Routes>=2.3.1 # MIT -debtcollector>=1.2.0 # Apache-2.0 +debtcollector>=1.19.0 # Apache-2.0 @@ -19 +19 @@ netifaces>=0.10.4 # MIT -neutron-lib>=1.29.1 # Apache-2.0 +neutron-lib>=2.2.0 # Apache-2.0 @@ -21 +21 @@ python-neutronclient>=6.7.0 # Apache-2.0 -tenacity>=3.2.1 # Apache-2.0 +tenacity>=4.4.0 # Apache-2.0 @@ -24 +24 @@ WebOb>=1.8.2 # MIT -keystoneauth1>=3.4.0 # Apache-2.0 +keystoneauth1>=3.14.0 # Apache-2.0 @@ -49 +49 @@ ovs>=2.8.0 # Apache-2.0 -ovsdbapp>=0.9.1 # Apache-2.0 +ovsdbapp>=1.0.0 # Apache-2.0 @@ -51,2 +51,2 @@ psutil>=3.2.2 # BSD -pyroute2>=0.5.3;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) -weakrefmethod>=1.0.2;python_version=='2.7' # PSF +pyroute2>=0.5.7;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) +pyOpenSSL>=17.1.0 # Apache-2.0 @@ -58,0 +59,2 @@ os-vif>=1.15.1 # Apache-2.0 +futurist>=1.2.0 # Apache-2.0 +tooz>=1.58.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 3aaac91e36..43d563a78f 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,2 +4 @@ -hacking>=1.1.0 # Apache-2.0 - +hacking>=1.1.0,<1.2.0 # Apache-2.0

1 0

networking-bgpvpn 12.0.0 (ussuri)
by no-reply＠openstack.org 13 May '20

13 May '20

We are pleased to announce the release of: networking-bgpvpn 12.0.0: API and Framework to interconnect bgpvpn to neutron networks This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/networking-bgpvpn Download the package from: https://pypi.org/project/networking-bgpvpn Please report issues through: https://bugs.launchpad.net/bgpvpn/+bugs For more details, please see below. Changes in networking-bgpvpn 11.0.0..12.0.0 ------------------------------------------- d6a93f6 Fix recent gate failures 9dcd5ed Add release note on horizon optional dependency af146b9 Use extras for horizon dependency 49c7e58 Switch functional/install jobs to Zuulv3 syntax 0a77c0b Remove references for unittest2 b3134d1 Fix lower constraints 643b627 Fix sphinx requirements 47719d1 Drop Django 1.11 support 87cc7a3 translation: drop babel extractor definitions 3fa26d6 Imported Translations from Zanata 40fa37b [ussuri][goal] Drop python 2.7 support and testing e76a266 use standard_attr db from neutron-lib 07a5950 Update the constraints url 8add7ec Use Horizon project template for django jobs 70e6a57 PDF documentation build 00f2a6b Update master for stable/train 735568b fix tox python3 overrides Diffstat (except docs and test files) ------------------------------------- .pylintrc | 3 +- .zuul.yaml | 70 ++++++++-------- babel-django.cfg | 3 - babel-djangojs.cfg | 12 --- .../locale/en_GB/LC_MESSAGES/django.po | 97 ++-------------------- bgpvpn_dashboard/locale/fr/LC_MESSAGES/django.po | 97 +--------------------- bindep.txt | 7 +- devstack/gate_hook.sh | 22 ----- devstack/post_test_hook.sh | 48 ----------- devstack/pre_test_hook.sh | 2 - lower-constraints.txt | 59 +++++++------ .../locale/en_GB/LC_MESSAGES/networking_bgpvpn.po | 45 +--------- networking_bgpvpn/neutron/db/bgpvpn_db.py | 7 +- .../services/service_drivers/bagpipe/bagpipe.py | 2 +- .../en_GB/LC_MESSAGES/networking_bgpvpn_heat.po | 43 +++++++++- .../post.yaml | 15 ---- .../run.yaml | 80 ------------------ .../run.yaml | 15 ---- .../networking-bgpvpn-dsvm-functional/post.yaml | 15 ---- .../networking-bgpvpn-dsvm-functional/run.yaml | 78 ----------------- playbooks/networking-bgpvpn-dsvm-install/run.yaml | 15 ---- .../notes/drop-py-2-7-4db5f2b1529bb09c.yaml | 6 ++ .../notes/horizon-in-extras-371d572b09437dc4.yaml | 10 +++ releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 97 ++++++++++++++++++---- releasenotes/source/train.rst | 6 ++ requirements.txt | 10 +-- setup.cfg | 14 +++- test-requirements.txt | 10 ++- tools/test-setup.sh | 57 ------------- tox.ini | 44 +++++----- 36 files changed, 302 insertions(+), 755 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index c344f3a..c801947 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,2 +5 @@ -pbr!=2.1.0,>=2.0.0 # Apache-2.0 -Babel!=2.4.0,>=2.3.4 # BSD +pbr>=4.0.0 # Apache-2.0 @@ -8 +7 @@ oslo.config>=5.2.0 # Apache-2.0 -oslo.db>=4.27.0 # Apache-2.0 +oslo.db>=4.37.0 # Apache-2.0 @@ -12,2 +11,2 @@ oslo.utils>=3.33.0 # Apache-2.0 -neutron-lib>=1.18.0 # Apache-2.0 -debtcollector>=1.2.0 # Apache-2.0 +neutron-lib>=1.30.0 # Apache-2.0 +debtcollector>=1.19.0 # Apache-2.0 @@ -18 +16,0 @@ neutron>=13.0.0 # Apache-2.0 -horizon>=14.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 537f9f3..f817be1 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ PyMySQL>=0.7.6 # MIT License -WebOb>=1.7.1 # MIT +WebOb>=1.8.2 # MIT @@ -12,0 +13,2 @@ oslotest>=3.2.0 # Apache-2.0 +astroid==2.1.0;python_version>="3.0" # LGPLv2.1 +pylint==2.2.0;python_version>="3.0" # GPLv2 @@ -17 +18,0 @@ testtools>=2.2.0 # MIT -pylint==1.9.2 # GPLv2 @@ -21 +22,3 @@ tempest>=17.1.0 # Apache-2.0 -# if they are in the required-projects list for a job: +# if they are in the required-projects list for a job. +# Installation by 'extras' in tox.ini does not honor upper-constraints, +# so we specify the same here to ensure upper-constraints. @@ -22,0 +26 @@ networking-bagpipe>=9.0.0 # Apache-2.0 +horizon>=17.1.0 # Apache-2.0

1 0

neutron-vpnaas 16.0.0 (ussuri)
by no-reply＠openstack.org 13 May '20

13 May '20

We are amped to announce the release of: neutron-vpnaas 16.0.0: OpenStack Networking VPN as a Service This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/neutron-vpnaas Download the package from: https://tarballs.openstack.org/neutron-vpnaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-vpnaas 15.0.0..16.0.0 ---------------------------------------- 4bc39fa53 Fix unsubscriptable-object error a8158e0ae Update TOX_CONSTRAINTS_FILE for stable/ussuri cbf738f18 Update .gitreview for stable/ussuri be935a225 Fix invalid escape sequence warning a64f25f68 Cleanup py27 support f1856ab2c Fix the endpoint_type column name and order 92781c975 Using unittest.mock instead of mock 5da7b0176 Migrate functional tests job to the zuul v3 syntax 547ce6745 Migrate neutron-vpnaas-dsvm-rally job to the zuul v3 syntax e0fb6700b Run neutron-vpn-netns-wrapper in venv 15c58acf0 Deprecate ``ovs_integration_bridge`` c11bf0fdb Using policy constants from neutron-lib 7124a4d4f Fix pep8 error in py37 5e93b5163 Fix functional gate failure cdecf0e12 devstack: no need to use sudo for genconfig b30acb02b Volunteer as driver maintainers 5b3a139c4 Drop using six library 7d851c640 Drop python 2 support and testing 4077093c1 Complete move of neutron-vpnaas tempest tests to tempest plugin 880ab440b Use cidr from tempest config project_network_v6_cidr e2122edb8 Use list of self.processes keys in Python2/3 23af68f52 Install suitable service_providers 7b5a5a855 Switch to Ussuri jobs 8e9572f07 Skip check config changed while restart_check_config not enable 811602c37 PDF documentation build d763f012f Update master for stable/train 3c1e0da1a Fix local_id override in ipsec unit tests Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pylintrc | 7 +- .zuul.yaml | 81 +- devstack/plugin.sh | 2 +- devstack/settings | 21 +- lower-constraints.txt | 2 - neutron_vpnaas/__init__.py | 8 +- neutron_vpnaas/db/vpn/vpn_db.py | 4 +- neutron_vpnaas/db/vpn/vpn_models.py | 2 +- neutron_vpnaas/extensions/vpn_endpoint_groups.py | 5 +- neutron_vpnaas/extensions/vpnaas.py | 5 +- neutron_vpnaas/policies/base.py | 17 - neutron_vpnaas/policies/endpoint_group.py | 2 +- neutron_vpnaas/policies/ike_policy.py | 2 +- neutron_vpnaas/policies/ipsec_policy.py | 2 +- neutron_vpnaas/policies/ipsec_site_connection.py | 2 +- neutron_vpnaas/policies/vpnservice.py | 2 +- neutron_vpnaas/services/vpn/common/constants.py | 4 +- .../services/vpn/common/netns_wrapper.py | 7 +- .../services/vpn/device_drivers/__init__.py | 5 +- .../services/vpn/device_drivers/ipsec.py | 36 +- .../services/vpn/device_drivers/libreswan_ipsec.py | 5 +- .../vpn/device_drivers/strongswan_ipsec.py | 7 +- .../services/vpn/service_drivers/__init__.py | 4 +- .../services/vpn/service_drivers/base_ipsec.py | 4 +- .../functional/openswan/test_openswan_driver.py | 7 +- .../strongswan/test_strongswan_driver.py | 2 +- .../unit/extensions/test_vpn_endpoint_groups.py | 2 +- .../unit/services/vpn/common/test_netns_wrapper.py | 2 +- .../unit/services/vpn/device_drivers/test_ipsec.py | 53 +- .../services/vpn/service_drivers/test_ipsec.py | 2 +- playbooks/configure_functional_job.yaml | 4 + .../neutron-vpnaas-dsvm-functional-sswan/post.yaml | 80 -- .../neutron-vpnaas-dsvm-functional-sswan/run.yaml | 56 -- .../legacy/neutron-vpnaas-dsvm-rally/post.yaml | 106 --- .../legacy/neutron-vpnaas-dsvm-rally/run.yaml | 63 -- .../notes/drop-py27-support-d83cd4daa0e37383.yaml | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 + requirements.txt | 1 - setup.cfg | 22 +- setup.py | 9 - test-requirements.txt | 6 +- tox.ini | 34 +- 68 files changed, 275 insertions(+), 2003 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index eb1b88094..0a8c39982 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +10,0 @@ alembic>=0.8.10 # MIT -six>=1.10.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index e93f552e9..722fde82a 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -9,2 +9 @@ flake8-import-order==0.12 # LGPLv3 -mock>=2.0.0 # BSD -pylint==1.7.6 # GPLv2 +pylint==2.3.0 # GPLv2 @@ -12,2 +11 @@ requests-mock>=1.2.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD +sphinx!=1.6.6,!=1.6.7,>=1.6.2 # BSD

1 0

murano 9.0.0 (ussuri)
by no-reply＠openstack.org 13 May '20

13 May '20

We are chuffed to announce the release of: murano 9.0.0: Murano API This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/murano Download the package from: https://tarballs.openstack.org/murano/ Please report issues through: https://bugs.launchpad.net/murano/+bugs For more details, please see below. Changes in murano 8.0.0..9.0.0 ------------------------------ 4cbbf56b Monkey patch original current_thread _active d8b91c62 Update TOX_CONSTRAINTS_FILE for stable/ussuri 386d37b9 Update .gitreview for stable/ussuri 4866d548 Use unittest.mock instead of third party mock 035f4e30 Remove six usage murano/contrib 8bf959f8 Remove six murano/api 07242fc2 Remove six murano/packages aa5f9450 Remove six murano/engine 91c0f48a Remove six murano/dsl fc15882b Remove six usage 272a9e40 Remove six murano/db 070a4723 Remove six murano/hacking d3f05df5 Remove six murano/common a9e530fd Remove six murano/policy 53695b68 Add contrib to irrelevant-files 3ae53b7f Sync heat-translator and tosca-parser version 0304eb28 Sync python-glanceclient version 1c02f36c Sync python-magnumclient ac2e1736 Clean muranoartifact py2 support 564f9cf3 Cleanup py27 support d1dae85a Update hacking for Python3 25ebd01d Drop unittest2 usage b33d3989 Imported Translations from Zanata 9fe5a99a Eventlet monkey patching should be as early as possible 3afc74b1 Add --procname-prefix for uwsgi murano-api 5e12408b [ussuri][goal] Drop python 2.7 support and testing d536a70a Imported Translations from Zanata 8983cd6a Update master for stable/train Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 +- contrib/glance/setup.cfg | 15 +- contrib/plugins/magnum_plugin/requirements.txt | 2 +- .../plugins/murano_exampleplugin/requirements.txt | 2 +- .../plugin/csar_package.py | 5 +- .../murano_heat-translator_plugin/requirements.txt | 4 +- devstack/plugin.sh | 2 +- lower-constraints.txt | 2 - murano/api/middleware/fault.py | 3 +- murano/api/v1/environments.py | 5 +- murano/api/v1/schemas.py | 3 +- murano/api/v1/static_actions.py | 6 +- murano/api/v1/templates.py | 3 +- murano/api/versions.py | 2 +- murano/cmd/__init__.py | 14 ++ murano/cmd/api.py | 9 -- murano/cmd/cfapi.py | 9 -- murano/cmd/engine.py | 9 -- murano/common/helpers/token_sanitizer.py | 4 +- murano/common/utils.py | 19 ++- murano/common/wsgi.py | 9 +- murano/db/migration/helpers.py | 3 +- murano/db/services/environments.py | 3 +- murano/dsl/contracts/basic.py | 12 +- murano/dsl/contracts/instances.py | 4 +- murano/dsl/dsl.py | 12 +- murano/dsl/dsl_exception.py | 4 +- murano/dsl/executor.py | 3 +- murano/dsl/helpers.py | 20 ++- murano/dsl/macros.py | 5 +- murano/dsl/meta.py | 4 +- murano/dsl/murano_method.py | 10 +- murano/dsl/murano_package.py | 3 +- murano/dsl/murano_property.py | 11 +- murano/dsl/murano_type.py | 5 +- murano/dsl/namespace_resolver.py | 6 +- murano/dsl/package_loader.py | 5 +- murano/dsl/principal_objects/stack_trace.py | 3 +- murano/dsl/schema_generator.py | 6 +- murano/dsl/serializer.py | 5 +- murano/dsl/session_local_storage.py | 5 +- murano/dsl/virtual_exceptions.py | 4 +- murano/dsl/yaql_expression.py | 9 +- murano/dsl/yaql_functions.py | 3 +- murano/engine/package_loader.py | 26 ++-- murano/engine/system/agent.py | 4 +- murano/engine/system/status_reporter.py | 3 +- murano/engine/system/workflowclient.py | 2 +- murano/engine/system/yaql_functions.py | 7 +- murano/hacking/checks.py | 18 +-- murano/locale/en_GB/LC_MESSAGES/murano.po | 11 +- murano/monkey_patch.py | 31 +++++ murano/packages/exceptions.py | 6 +- murano/packages/hot_package.py | 3 +- murano/packages/load_utils.py | 4 +- murano/packages/package.py | 5 +- murano/packages/package_base.py | 11 +- murano/policy/model_policy_enforcer.py | 2 +- murano/policy/modify/actions/base.py | 5 +- .../unit/api/middleware/test_fault_wrapper.py | 2 +- .../api/middleware/test_version_negotiation.py | 3 +- .../unit/db/services/test_templates_service.py | 3 +- .../unit/engine/system/test_agent_listener.py | 2 +- .../unit/engine/system/test_garbage_collector.py | 2 +- .../unit/engine/system/test_instance_reporter.py | 2 +- .../unit/engine/system/test_metadef_browser.py | 2 +- .../unit/engine/system/test_workflowclient.py | 4 +- .../policy/modify/actions/test_action_manager.py | 2 +- .../unit/policy/test_model_policy_enforcer.py | 3 +- playbooks/legacy/grenade-devstack-murano/run.yaml | 1 + .../notes/drop-py-2-7-37d8f1a13e867edb.yaml | 6 + releasenotes/source/index.rst | 1 + .../source/locale/de/LC_MESSAGES/releasenotes.po | 87 ++++++++++++ .../locale/en_GB/LC_MESSAGES/releasenotes.po | 152 ++++++++++++++++++++- releasenotes/source/train.rst | 6 + requirements.txt | 1 - setup.cfg | 9 +- setup.py | 9 -- test-requirements.txt | 4 +- tox.ini | 36 ++--- 136 files changed, 563 insertions(+), 406 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 116b884c..ccbeedca 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16 +15,0 @@ psutil>=3.2.2 # BSD -six>=1.10.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index 64dbb88c..29257c6b 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0,<4.0.0 # Apache-2.0 @@ -8 +7,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -mock>=2.0.0 # BSD @@ -15 +13,0 @@ testscenarios>=0.4 # Apache-2.0/BSD -unittest2>=1.1.0 # BSD

1 0

freezer-dr 8.0.0 (ussuri)
by no-reply＠openstack.org 13 May '20

13 May '20

We are pumped to announce the release of: freezer-dr 8.0.0: OpenStack Disaster Recovery This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/freezer-dr Download the package from: https://tarballs.openstack.org/freezer-dr/ For more details, please see below. Changes in freezer-dr 7.2.0..8.0.0 ---------------------------------- 72de51b Cleanup py27 support b9ef93c Remove six useage 8361e3f Add py36 in envlist d682c3a [ussuri][goal] Drop python 2.7 support and testing 1f3892b Switch to Ussuri jobs Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 3 +- freezer_dr/evacuators/common/driver.py | 4 +- freezer_dr/fencers/common/driver.py | 4 +- freezer_dr/monitors/common/driver.py | 4 +- freezer_dr/monitors/drivers/default/driver.py | 8 +-- freezer_dr/monitors/drivers/monasca/driver.py | 57 ++++++++++++---------- freezer_dr/notifiers/common/driver.py | 4 +- freezer_dr/notifiers/drivers/slack/slack.py | 3 +- lower-constraints.txt | 4 +- .../notes/drop-py-2-7-7c6101f30ffd8c71.yaml | 6 +++ setup.cfg | 20 ++------ setup.py | 9 ---- test-requirements.txt | 8 +-- tox.ini | 22 +++------ 16 files changed, 75 insertions(+), 113 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 9f319c4..2d62c43 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ astroid==1.6.5 # LGPLv2.1 -hacking>=1.1.0,<1.2.0 # Apache-2.0 +hacking>=3.0,<3.1.0 # Apache-2.0 @@ -14,3 +14,3 @@ testtools>=2.2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD -openstackdocstheme>=1.18.1 # Apache-2.0 +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2 # BSD +openstackdocstheme>=1.31.2 # Apache-2.0 +sphinxcontrib-apidoc>=0.2.0

1 0

monasca-persister 2.0.0 (ussuri)
by no-reply＠openstack.org 13 May '20

13 May '20

We are jazzed to announce the release of: monasca-persister 2.0.0: Moves metrics and alarm state transitions from the Message Queue to the Metrics and Alarms database. This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/monasca-persister Download the package from: https://tarballs.openstack.org/monasca-persister/ Please report issues through: https://bugs.launchpad.net/monasca/+bugs For more details, please see below. Changes in monasca-persister 1.15.0..2.0.0 ------------------------------------------ d95e7d7 Update TOX_CONSTRAINTS_FILE for stable/ussuri f181e0a Update .gitreview for stable/ussuri 1bc4818 Migrate from ujson to simplejson 26844c1 Add tests for cassandra/retry_policy.py 72cc931 Fix constraints and requirements to fix failing tests a8b8d3e Fix batch_size configuration option in Docker 0696cf5 Add configuration option influxdb.batch_size 3ed12b9 Change README.rst with a better title 29c6c96 [ussuri][goal] Drop python 2.7 support and testing 97aab2f Support default_retention_hours for influxdb 53fd59f Support Kafka events enable option df12bd8 Support automatic db creation for InfluxDB e883b5b Move data_points to repository class ac14433 Switch to Ussuri jobs 3b6e17c Bump the openstackdocstheme extension to 1.20 71e4101 Blacklist sphinx 2.1.0 (autodoc bug) ce964e4 Support multiple kafka consumers 9354132 Update master for stable/train e7956c9 Add option for kafka client f289a91 Update links in pom.xml Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 10 +- README.rst | 9 +- lower-constraints.txt | 5 +- monasca_persister/conf/influxdb.py | 7 ++ .../repositories/abstract_repository.py | 2 +- .../repositories/cassandra/abstract_repository.py | 3 + .../cassandra/alarm_state_history_repository.py | 8 +- .../repositories/cassandra/metrics_repository.py | 7 +- monasca_persister/repositories/data_points.py | 55 +++++++++++ .../elasticsearch/events_repository.py | 8 +- .../repositories/influxdb/abstract_repository.py | 37 +++++-- .../influxdb/alarm_state_history_repository.py | 30 +++--- .../repositories/influxdb/line_utils.py | 33 ++----- .../repositories/influxdb/metrics_repository.py | 2 +- monasca_persister/repositories/persister.py | 37 +------ monasca_persister/repositories/utils.py | 4 +- ...est_cassandra_alarm_state_history_repository.py | 42 ++++---- ...test_influxdb_alarm_state_history_repository.py | 28 +++--- .../db-per-tenant/migrate-to-db-per-tenant.py | 16 ++- pom.xml | 2 +- .../add_influxb_batch_size-01b7a476b6bd8a81.yaml | 6 ++ .../notes/drop-py-2-7-048b2fafecb6f6af.yaml | 6 ++ ...-default-retention-policy-aaa446ebe6fc3cb5.yaml | 7 ++ ...ort-automatic-db-creation-0856216b42b91e7d.yaml | 4 + releasenotes/source/conf.py | 16 --- releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 ++ requirements.txt | 2 + setup.cfg | 4 +- test-requirements.txt | 7 +- tox.ini | 4 +- 43 files changed, 545 insertions(+), 280 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9754709..c61f1fb 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,0 +9,2 @@ monasca-common>=2.16.0 # Apache-2.0 +cassandra-driver>=3.11.0 +simplejson>=3.8.1 diff --git a/test-requirements.txt b/test-requirements.txt index be25cb7..2a7d547 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +7,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -mock>=2.0.0 # BSD @@ -12,0 +12 @@ pycodestyle>=2.5.0 # MIT +cassandra-driver>=3.11.0 @@ -15,2 +15 @@ pycodestyle>=2.5.0 # MIT -sphinx!=1.6.6,!=1.6.7,>=1.6.2,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.2;python_version>='3.4' # BSD +sphinx!=1.6.6,!=1.6.7,!=2.1.0,>=1.6.2;python_version>='3.4' # BSD @@ -18 +17 @@ reno>=2.5.0 # Apache-2.0 -openstackdocstheme>=1.18.1 # Apache-2.0 +openstackdocstheme>=1.20.0 # Apache-2.0

1 0

networking-sfc 10.0.0 (ussuri)
by no-reply＠openstack.org 13 May '20

13 May '20

We are jazzed to announce the release of: networking-sfc 10.0.0: APIs and implementations to support Service Function Chaining in Neutron. This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/networking-sfc Download the package from: https://pypi.org/project/networking-sfc Please report issues through: https://bugs.launchpad.net/networking-sfc/+bugs For more details, please see below. Changes in networking-sfc 9.0.0..10.0.0 --------------------------------------- 95df874 Cleanup py27 support 4f9350f Remove the dependency on the "mock" package 8417568 Drop python 2 support and testing 5417e6c Switch to Ussuri jobs 0b2d678 Fix misspell word 4daff05 PDF documentation build 0644862 [Functional tests] Fix SIGHUP handling tests 98a02bf Update master for stable/train Diffstat (except docs and test files) ------------------------------------- api-ref/source/conf.py | 24 +++------- lower-constraints.txt | 5 --- .../unit/services/flowclassifier/test_plugin.py | 3 +- .../extensions/openvswitch/test_sfc_driver.py | 2 +- .../unit/services/sfc/agent/extensions/test_sfc.py | 2 +- .../unit/services/sfc/drivers/ovs/test_driver.py | 7 +-- .../notes/drop-py27-support-4670c8cdcfa3ba78.yaml | 6 +++ releasenotes/source/conf.py | 5 --- releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 +++ setup.cfg | 16 ++----- setup.py | 9 ---- test-requirements.txt | 5 --- tox.ini | 52 ++++++++-------------- zuul.d/project.yaml | 3 +- 33 files changed, 110 insertions(+), 129 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 4667e38..477dd94 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -10,4 +9,0 @@ requests-mock>=1.2.0 # Apache-2.0 -sphinx!=1.6.6,!=1.6.7,>=1.6.5,<2.0.0;python_version=='2.7' # BSD -sphinx!=1.6.6,!=1.6.7,>=1.6.5;python_version>='3.4' # BSD -openstackdocstheme>=1.18.1 # Apache-2.0 -os-api-ref>=1.4.0 # Apache-2.0 @@ -25 +20,0 @@ PyMySQL>=0.7.6 # MIT License -reno>=2.5.0 # Apache-2.0

1 0

keystone 17.0.0 (ussuri)
by no-reply＠openstack.org 13 May '20

13 May '20

We are excited to announce the release of: keystone 17.0.0: OpenStack Identity This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/keystone Download the package from: https://tarballs.openstack.org/keystone/ Please report issues through: https://bugs.launchpad.net/keystone/+bugs For more details, please see below. 17.0.0 ^^^^^^ Upgrade Notes ************* * [bug 1872737 (https://bugs.launchpad.net/keystone/+bug/1872737) Added a default TTL of 15 minutes for signed EC2 credential requests, where previously an EC2 signed token request was valid indefinitely. This change in behavior is needed to protect against replay attacks. Critical Issues *************** * [bug 1872733 (https://bugs.launchpad.net/keystone/+bug/1872733) Fixed a critical security issue in which an authenticated user could escalate their privileges by altering a valid EC2 credential. * [bug 1872735 (https://bugs.launchpad.net/keystone/+bug/1872735) Fixed a security issue in which a trustee or an application credential user could create an EC2 credential or an application credential that would permit them to get a token that elevated their role assignments beyond the subset delegated to them in the trust or application credential. A new attribute "app_cred_id" is now automatically added to the access blob of an EC2 credential and the role list in the trust or application credential is respected. Security Issues *************** * [bug 1872733 (https://bugs.launchpad.net/keystone/+bug/1872733) Fixed a critical security issue in which an authenticated user could escalate their privileges by altering a valid EC2 credential. * [bug 1872735 (https://bugs.launchpad.net/keystone/+bug/1872735) Fixed a security issue in which a trustee or an application credential user could create an EC2 credential or an application credential that would permit them to get a token that elevated their role assignments beyond the subset delegated to them in the trust or application credential. A new attribute "app_cred_id" is now automatically added to the access blob of an EC2 credential and the role list in the trust or application credential is respected. * [bug 1872737 (https://bugs.launchpad.net/keystone/+bug/1872737) Fixed an incorrect EC2 token validation implementation in which the timestamp of the signed request was ignored, which made EC2 and S3 token requests vulnerable to replay attacks. The default TTL is 15 minutes but is configurable. * [bug 1872755 (https://bugs.launchpad.net/keystone/+bug/1872755) Added validation to the EC2 credentials update API to ensure the metadata labels 'trust_id' and 'app_cred_id' are not altered by the user. These labels are used by keystone to determine the scope allowed by the credential, and altering these automatic labels could enable an EC2 credential holder to elevate their access beyond what is permitted by the application credential or trust that was used to create the EC2 credential. * [bug 1873290 (https://bugs.launchpad.net/keystone/+bug/1873290) [bug 1872735 (https://bugs.launchpad.net/keystone/+bug/1872735) Fixed the token model to respect the roles authorized OAuth1 access tokens. Previously, the list of roles authorized for an OAuth1 access token were ignored, so when an access token was used to request a keystone token, the keystone token would contain every role assignment the creator had for the project. This also fixed EC2 credentials to respect those roles as well. Bug Fixes ********* * [bug 1872733 (https://bugs.launchpad.net/keystone/+bug/1872733) Fixed a critical security issue in which an authenticated user could escalate their privileges by altering a valid EC2 credential. * [bug 1872735 (https://bugs.launchpad.net/keystone/+bug/1872735) Fixed a security issue in which a trustee or an application credential user could create an EC2 credential or an application credential that would permit them to get a token that elevated their role assignments beyond the subset delegated to them in the trust or application credential. A new attribute "app_cred_id" is now automatically added to the access blob of an EC2 credential and the role list in the trust or application credential is respected. * [bug 1872737 (https://bugs.launchpad.net/keystone/+bug/1872737) Fixed an incorrect EC2 token validation implementation in which the timestamp of the signed request was ignored, which made EC2 and S3 token requests vulnerable to replay attacks. The default TTL is 15 minutes but is configurable. * [bug 1872755 (https://bugs.launchpad.net/keystone/+bug/1872755) Added validation to the EC2 credentials update API to ensure the metadata labels 'trust_id' and 'app_cred_id' are not altered by the user. These labels are used by keystone to determine the scope allowed by the credential, and altering these automatic labels could enable an EC2 credential holder to elevate their access beyond what is permitted by the application credential or trust that was used to create the EC2 credential. * [bug 1873290 (https://bugs.launchpad.net/keystone/+bug/1873290) [bug 1872735 (https://bugs.launchpad.net/keystone/+bug/1872735) Fixed the token model to respect the roles authorized OAuth1 access tokens. Previously, the list of roles authorized for an OAuth1 access token were ignored, so when an access token was used to request a keystone token, the keystone token would contain every role assignment the creator had for the project. This also fixed EC2 credentials to respect those roles as well. Changes in keystone 16.0.0.0rc1..17.0.0 --------------------------------------- 2f2736ebb Fix security issues with EC2 credentials ba89d2779 Ensure OAuth1 authorized roles are respected 8d5becbe4 Check timestamp of signed EC2 token request aef912187 Imported Translations from Zanata 61f60ed4c Update TOX_CONSTRAINTS_FILE for stable/ussuri 961b39c3e Update .gitreview for stable/ussuri e45a75d62 Add schema placeholders for Ussuri af916d9ba Remove Babel as requirement f7c1a8494 Remove a note related to UUID tokens from example configuration d23965aaf Update api-ref for federated objects in user c18956f19 Expiring Group Memberships API - Allow set idp authorization_ttl e723a1c16 Add federated support for updating a user 39d66ac78 Update contributors document keystone 1627c2828 Add federated support for creating a user 121ee8ce7 Stop configuring install_command in tox. 35e83918f Cleanup py27 support 652f02c8b Add federated support for get user 8153a9d59 Add expiring user group memberships on mapped authentication d8938514f Expiring Group Membership Driver - Add, List Groups ee54ba0ce Expiring User Group Membership Model 143f07f54 Community goal: Adding contributing.rst ba8dd06e1 Parse cli args in get_enforcer dda426b61 Add openstack_groups to assertion 6525203c1 Change time faking for totp test 34f6144a4 Document the "immutable" resource option e5bab15a0 remove oslo-concurrency from requirements b35459b29 drop mock from test-requirements 271c09bb5 Correcting api-ref for users ba2e4b83e NIT: Fix spelling 0bbd2dd6f Copy shibboleth logs in federation jobs a183badaa Ignore SQLAlchemy RemovedIn20Warning 8c99a90f3 Switch from mock to unittest.mock use a6bb81146 Refactor some ldap code to implement TODOs e715a4bbd Doc Cleanup 175cb0b64 Tell reno to ignore the kilo branch 13410383c Constraint dependencies for docs build 9ee3d337f Removing tempest-full from gate 5544bca8e Check if content-type contains http, not equals 2e97ec577 Add docs about bootstrapping immutable roles 3aacc4dfe Add domain admin grant test cases da2804694 Default to bootstrapping roles as immutable 527b1587e Use inspect instead of Inspector.from_engine() 453004193 Remove six usage 9fed446b0 Updating tox -e all-plugin command 1db57944d Capture output from test run of policy generator 6dbf3a68b Cleanup doc/requirements.txt 95edaaab0 Always have username in CADF initiator a4b7a6106 Fix duplicated words issue like "each each user_id" 25cf359e5 Ensure bootstrap handles multiple roles with the same name c2d883066 Fix role_assignments role.id filter 150d3ef8b Fix release note link formatting f0d964e66 Fix token auth error if federated_groups_id is empty list 01a8c1fca Update OIDC documentation to handle bearer access token flow a950f9c37 Imported Translations from Zanata 58790d9dc Add docs for app cred access rules 90f6ff727 Remove python 2.7 specific library 2c0623bab Add name in GET API of application credentials 7597ecc13 Stop adding entry in local_user while updating ephemerals 5d6b8cb3d Fix api-ref roles response description 17c337dbd Fix credential list for project members 8c58b5b75 Fix application credential doc example 48f70150b Migrate grenade jobs to py3 72cbaa91f Start README.rst with a better title f421a0f07 Drop old neutron-grenade job a92885a98 Stop testing Python 2 d6977a0e9 Remove group deletion for non-sql driver when removing domains. d75b2552b Refresh "how can I help?" doc e2d83ae95 Re-enable line-length linter 19d4831da Fix line-length PEP8 errors for c7fae97 fb0be8e59 Add voting k2k tests 7debb1a30 Fix K2K auth flow diagram 5c71ebd7a Stop explicitly requiring pycodestyle 1d40b2e61 Add Source links to readme acfb60249 Switch to opensuse-15 nodeset 5d54d2d93 Switch to official Ussuri jobs 9607ed326 Revert "Resource backend is SQL only now" c4d609778 Drop project.id foreign keys 1f860f939 Fix sql migrate repo prefix check e4626f4bc Add schema placeholders for Train 9d949e494 Overhaul the RBAC documentation for administrators c7331ccd2 Fix wrong interface description 52ab0cf57 Import LDAP job into project e894842a0 Update getting started guide 5f5f10630 Remove legacy protection tests 3b6accf18 Update token definitions d4a6023de Remove policy.v3cloudsample.json e383fb7e5 Imported Translations from Zanata 5b2b67f64 Fix misspell word d435995c4 Update master for stable/train Diffstat (except docs and test files) ------------------------------------- .gitignore | 2 + .gitreview | 1 + .zuul.yaml | 49 +- README.rst | 16 +- api-ref/source/conf.py | 5 - .../v3-ext/federation/identity-provider/idp.inc | 6 +- .../federation/identity-provider/parameters.yaml | 9 + .../identity-provider/samples/get-response.json | 3 +- .../identity-provider/samples/update-response.json | 3 +- api-ref/source/v3/application-credentials.inc | 1 + api-ref/source/v3/domains.inc | 5 + api-ref/source/v3/index.rst | 9 + api-ref/source/v3/parameters.yaml | 115 +- api-ref/source/v3/projects.inc | 7 +- api-ref/source/v3/roles.inc | 13 +- .../v3/samples/admin/domain-create-response.json | 3 +- .../v3/samples/admin/domain-show-response.json | 3 +- .../v3/samples/admin/domain-update-response.json | 3 +- .../v3/samples/admin/project-create-request.json | 3 +- .../v3/samples/admin/project-create-response.json | 3 +- .../admin/project-show-parents-response.json | 1 + .../v3/samples/admin/project-show-response.json | 3 +- .../admin/project-show-subtree-response.json | 1 + .../v3/samples/admin/project-update-response.json | 3 +- .../v3/samples/admin/role-create-response.json | 3 +- .../v3/samples/admin/role-show-response.json | 3 +- .../v3/samples/admin/role-update-response.json | 3 +- .../v3/samples/admin/user-create-request.json | 11 + .../v3/samples/admin/user-create-response.json | 11 + .../samples/admin/user-groups-list-response.json | 2 + .../v3/samples/admin/user-show-response.json | 1 + .../v3/samples/admin/user-update-response.json | 1 + api-ref/source/v3/service-catalog.inc | 2 +- api-ref/source/v3/users.inc | 23 +- devstack/files/federation/attribute-map.xml | 1 + devstack/lib/federation.sh | 9 + .../admin/federation/configure_federation.rst | 13 +- .../admin/federation/mapping_combinations.rst | 57 +- etc/policy.v3cloudsample.json | 30 - keystone/api/_shared/EC2_S3_Resource.py | 84 +- keystone/api/_shared/authentication.py | 5 +- keystone/api/_shared/saml.py | 24 +- keystone/api/auth.py | 18 +- keystone/api/credentials.py | 108 +- keystone/api/discovery.py | 8 +- keystone/api/domains.py | 22 +- keystone/api/ec2tokens.py | 4 +- keystone/api/endpoints.py | 6 +- keystone/api/groups.py | 12 +- keystone/api/limits.py | 6 +- keystone/api/os_ep_filter.py | 16 +- keystone/api/os_federation.py | 25 +- keystone/api/os_inherit.py | 26 +- keystone/api/os_oauth1.py | 12 +- keystone/api/policy.py | 24 +- keystone/api/projects.py | 26 +- keystone/api/regions.py | 8 +- keystone/api/registered_limits.py | 6 +- keystone/api/roles.py | 12 +- keystone/api/s3tokens.py | 10 +- keystone/api/services.py | 6 +- keystone/api/system.py | 14 +- keystone/api/trusts.py | 25 +- keystone/api/users.py | 42 +- keystone/application_credential/backends/base.py | 5 +- keystone/application_credential/backends/sql.py | 9 +- keystone/assignment/backends/base.py | 5 +- keystone/assignment/core.py | 12 +- keystone/assignment/role_backends/base.py | 5 +- keystone/auth/core.py | 20 +- keystone/auth/plugins/base.py | 6 +- keystone/auth/plugins/core.py | 17 +- keystone/auth/plugins/external.py | 4 +- keystone/auth/plugins/mapped.py | 12 +- keystone/auth/plugins/token.py | 3 +- keystone/auth/plugins/totp.py | 3 +- keystone/catalog/backends/base.py | 6 +- keystone/cmd/bootstrap.py | 18 +- keystone/cmd/cli.py | 17 +- keystone/cmd/doctor/ldap.py | 2 +- keystone/common/manager.py | 4 +- keystone/common/policies/endpoint_group.py | 8 +- keystone/common/policies/grant.py | 28 +- keystone/common/policies/policy_association.py | 39 +- keystone/common/policies/trust.py | 12 +- keystone/common/rbac_enforcer/enforcer.py | 2 +- keystone/common/rbac_enforcer/policy.py | 7 +- keystone/common/resource_options/core.py | 6 +- .../014_contract_add_domain_id_to_user_table.py | 3 +- ...e_service_and_region_fk_for_registered_limit.py | 2 +- ..._contract_expand_update_pk_for_unified_limit.py | 2 +- .../sql/contract_repo/versions/067_placeholder.py | 18 + .../sql/contract_repo/versions/068_placeholder.py | 18 + .../sql/contract_repo/versions/069_placeholder.py | 18 + .../sql/contract_repo/versions/070_placeholder.py | 18 + .../sql/contract_repo/versions/071_placeholder.py | 18 + .../versions/072_contract_drop_domain_id_fk.py | 47 + .../073_contract_expiring_group_membership.py | 15 + .../sql/contract_repo/versions/074_placeholder.py | 18 + .../sql/contract_repo/versions/075_placeholder.py | 18 + .../sql/contract_repo/versions/076_placeholder.py | 18 + .../sql/contract_repo/versions/077_placeholder.py | 18 + .../sql/contract_repo/versions/078_placeholder.py | 18 + keystone/common/sql/core.py | 9 +- .../versions/067_placeholder.py | 18 + .../versions/068_placeholder.py | 18 + .../versions/069_placeholder.py | 18 + .../versions/070_placeholder.py | 18 + .../versions/071_placeholder.py | 18 + .../versions/072_migrate_drop_domain_id_fk.py | 20 + .../073_migrate_expiring_group_membership.py | 15 + .../versions/074_placeholder.py | 18 + .../versions/075_placeholder.py | 18 + .../versions/076_placeholder.py | 18 + .../versions/077_placeholder.py | 18 + .../versions/078_placeholder.py | 18 + ...pand_add_application_credential_access_rules.py | 3 +- ...te_id_attribute_to_federation_protocol_table.py | 3 +- .../sql/expand_repo/versions/067_placeholder.py | 18 + .../sql/expand_repo/versions/068_placeholder.py | 18 + .../sql/expand_repo/versions/069_placeholder.py | 18 + .../sql/expand_repo/versions/070_placeholder.py | 18 + .../sql/expand_repo/versions/071_placeholder.py | 18 + .../versions/072_expand_drop_domain_id_fk.py | 20 + .../073_expand_expiring_group_membership.py | 47 + .../sql/expand_repo/versions/074_placeholder.py | 18 + .../sql/expand_repo/versions/075_placeholder.py | 18 + .../sql/expand_repo/versions/076_placeholder.py | 18 + .../sql/expand_repo/versions/077_placeholder.py | 18 + .../sql/expand_repo/versions/078_placeholder.py | 18 + keystone/common/sql/upgrades.py | 3 +- keystone/common/utils.py | 22 +- keystone/common/validation/parameter_types.py | 5 + keystone/common/validation/validators.py | 9 +- keystone/conf/credential.py | 11 +- keystone/conf/default.py | 3 +- keystone/conf/federation.py | 10 + keystone/conf/memcache.py | 5 +- keystone/conf/resource.py | 8 - keystone/credential/backends/base.py | 4 +- keystone/credential/backends/sql.py | 3 +- keystone/credential/providers/core.py | 5 +- keystone/credential/providers/fernet/core.py | 5 +- keystone/endpoint_policy/backends/base.py | 4 +- keystone/exception.py | 56 +- keystone/federation/backends/base.py | 5 +- keystone/federation/backends/sql.py | 19 +- keystone/federation/core.py | 2 +- keystone/federation/idp.py | 26 +- keystone/federation/schema.py | 2 + keystone/federation/utils.py | 79 +- keystone/identity/backends/base.py | 5 +- keystone/identity/backends/ldap/common.py | 74 +- keystone/identity/backends/ldap/core.py | 3 +- keystone/identity/backends/resource_options.py | 4 +- keystone/identity/backends/sql.py | 54 +- keystone/identity/backends/sql_model.py | 46 +- keystone/identity/core.py | 152 +- keystone/identity/generator.py | 5 +- keystone/identity/mapping_backends/base.py | 6 +- keystone/identity/schema.py | 24 + keystone/identity/shadow_backends/base.py | 60 +- keystone/identity/shadow_backends/sql.py | 54 + keystone/limit/backends/base.py | 5 +- keystone/limit/models/base.py | 4 +- keystone/locale/de/LC_MESSAGES/keystone.po | 123 +- keystone/locale/en_GB/LC_MESSAGES/keystone.po | 237 +- keystone/locale/es/LC_MESSAGES/keystone.po | 72 +- keystone/locale/fr/LC_MESSAGES/keystone.po | 75 +- keystone/locale/it/LC_MESSAGES/keystone.po | 73 +- keystone/locale/ja/LC_MESSAGES/keystone.po | 74 +- keystone/locale/ko_KR/LC_MESSAGES/keystone.po | 68 +- keystone/locale/pt_BR/LC_MESSAGES/keystone.po | 73 +- keystone/locale/ru/LC_MESSAGES/keystone.po | 71 +- keystone/locale/tr_TR/LC_MESSAGES/keystone.po | 47 +- keystone/locale/zh_CN/LC_MESSAGES/keystone.po | 67 +- keystone/locale/zh_TW/LC_MESSAGES/keystone.po | 67 +- keystone/models/receipt_model.py | 5 +- keystone/models/token_model.py | 23 +- keystone/notifications.py | 18 + keystone/oauth1/backends/base.py | 5 +- keystone/oauth1/validator.py | 4 +- keystone/policy/backends/base.py | 4 +- keystone/receipt/handlers.py | 4 +- keystone/receipt/provider.py | 3 +- keystone/receipt/providers/base.py | 5 +- keystone/receipt/receipt_formatters.py | 32 +- keystone/resource/backends/base.py | 5 +- keystone/resource/backends/sql.py | 2 - keystone/resource/backends/sql_model.py | 3 +- keystone/resource/config_backends/base.py | 5 +- keystone/resource/core.py | 14 +- keystone/revoke/backends/base.py | 4 +- keystone/server/flask/application.py | 7 +- keystone/server/flask/common.py | 10 +- .../request_processing/middleware/auth_context.py | 19 +- .../protection/v3/test_application_credential.py | 24 +- .../unit/application_credential/test_backends.py | 9 +- .../unit/identity/backends/test_ldap_common.py | 2 +- .../unit/receipt/test_receipt_serialization.py | 3 +- .../test_associate_project_endpoint_extension.py | 114 +- keystone/token/provider.py | 8 +- keystone/token/providers/base.py | 5 +- keystone/token/token_formatters.py | 48 +- keystone/trust/backends/base.py | 5 +- keystone/trust/backends/sql.py | 1 - keystone/trust/core.py | 2 - keystone/version.py | 2 +- lower-constraints.txt | 4 +- .../keystone-dsvm-grenade-multinode/run.yaml | 1 + .../notes/bug-1641625-fe463874dc5edb10.yaml | 7 + .../notes/bug-1806762-08ff9eecdc03c554.yaml | 21 + .../notes/bug-1809116-b65502f3b606b060.yaml | 19 + .../notes/bug-1816076-ba39508e6ade529e.yaml | 15 + .../notes/bug-1823258-9649b56a440b5ae1.yaml | 10 + .../notes/bug-1848238-f6533644f7907358.yaml | 6 + .../notes/bug-1848342-317c9e4afa65a3ff.yaml | 23 + .../notes/bug-1855080-08b28181b7cb2470.yaml | 23 + .../notes/bug-1856881-277103af343187f1.yaml | 7 + .../notes/bug-1856904-101af15bb48eb3ca.yaml | 9 + .../notes/bug-1856962-2c87d541da61c727.yaml | 6 + .../notes/bug-1858012-584267ada7e33f2c.yaml | 7 + .../notes/bug-1872733-2377f456a57ad32c.yaml | 16 + .../notes/bug-1872735-0989e51d2248ce1e.yaml | 31 + .../notes/bug-1872737-f8e1ad3b6705b766.yaml | 28 + .../notes/bug-1872755-2c81d3267b89f124.yaml | 19 + .../notes/bug-1873290-ff7f8e4cee15b75a.yaml | 19 + .../notes/drop-project-id-fk-b683b414e1585be8.yaml | 9 + .../removed-as-of-ussuri-d2f6ef8901ef54ed.yaml | 6 + .../notes/resource-driver-33793dd5080ee4d2.yaml | 6 + .../use-correct-inspect-8142e317c1e39c2a.yaml | 8 + releasenotes/source/conf.py | 13 +- releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 1699 ---------- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 3423 -------------------- releasenotes/source/train.rst | 6 + reno.yaml | 4 + requirements.txt | 8 +- setup.cfg | 18 +- setup.py | 9 - test-requirements.txt | 3 - tools/fast8.sh | 2 +- tox.ini | 30 +- 356 files changed, 7282 insertions(+), 11229 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 36a0cdc68..2fa9509f8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,4 +4,0 @@ -# Temporarily add Babel reference to avoid problem -# in keystone-coverage-db CI job -Babel!=2.4.0,>=2.3.4 # BSD - @@ -14 +9,0 @@ cryptography>=2.1 # BSD/Apache-2.0 -six>=1.10.0 # MIT @@ -24 +18,0 @@ oslo.cache>=1.26.0 # Apache-2.0 -oslo.concurrency>=3.26.0 # Apache-2.0 @@ -32 +26 @@ oslo.middleware>=3.31.0 # Apache-2.0 -oslo.policy>=2.3.0 # Apache-2.0 +oslo.policy>=3.0.2 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index a86a1fa44..3e53e2553 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +6,0 @@ pep257==0.7.0 # MIT License -pycodestyle>=2.0.0 # MIT License @@ -23,2 +21,0 @@ lxml!=3.7.0,>=3.4.1 # BSD -# mock object framework -mock>=2.0.0 # BSD

1 0

networking-odl 16.0.0 (ussuri)
by no-reply＠openstack.org 13 May '20

13 May '20

We eagerly announce the release of: networking-odl 16.0.0: OpenStack Networking This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/networking-odl Download the package from: https://pypi.org/project/networking-odl Please report issues through: https://bugs.launchpad.net/networking-odl/+bugs For more details, please see below. Changes in networking-odl 15.0.0..16.0.0 ---------------------------------------- 56d5d9594 Make tempest jobs use the latest ODL and zuulv3 4790215a4 Fix enums in db model 3de47a829 Fix gate failure d3323d05d Remove references for unittest2 358da8623 Additional python2 removal cleanups 0d2df7e6f Remove networking-odl python2 jobs ef695842c Try deinit odl_features in TestOdlFeaturesNoFixture setUpClass 924141c66 Change function.func_doc to function.__doc__ f1239c916 Switch to Ussuri jobs b24529823 Remove the remaining neutron-lbaas related constants 9639f57a4 Update master for stable/train f8336170a Bump pylint version to one that supports python3.7 Diffstat (except docs and test files) ------------------------------------- .pylintrc | 11 ++- .zuul.d/jobs.yaml | 84 +++++++++++-------- .zuul.d/project.yaml | 37 ++------- TESTING.rst | 2 +- devstack/post_test_hook.sh | 76 ----------------- devstack/pre_test_hook.sh | 94 ---------------------- devstack/settings.odl | 2 +- lower-constraints.txt | 47 ++++++----- networking_odl/__init__.py | 9 +-- networking_odl/common/callback.py | 2 +- networking_odl/common/constants.py | 11 --- networking_odl/common/lightweight_testing.py | 7 +- networking_odl/db/models.py | 8 +- networking_odl/journal/full_sync.py | 5 -- networking_odl/journal/periodic_task.py | 2 +- networking_odl/journal/worker.py | 3 +- .../post.yaml | 80 ------------------ .../run.yaml | 88 -------------------- .../post.yaml | 80 ------------------ .../run.yaml | 88 -------------------- playbooks/multinode-setup.yaml | 3 + playbooks/tempest/pre.yaml | 1 + playbooks/tempest/run.yaml | 6 -- .../notes/drop-py27-support-3bc8094e1823cfcf.yaml | 6 ++ releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 ++ requirements.txt | 10 +-- roles/show-odl-info/tasks/main.yaml | 2 +- setup.cfg | 6 +- test-requirements.txt | 5 +- tox.ini | 43 +--------- 36 files changed, 146 insertions(+), 717 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index d24b2d4d5..c14bd0793 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ -pbr>=3.1.1 # Apache-2.0 +pbr>=4.0.0 # Apache-2.0 @@ -9 +9 @@ debtcollector>=1.19.0 # Apache-2.0 -neutron-lib>=1.25.0 # Apache-2.0 +neutron-lib>=2.0.0 # Apache-2.0 @@ -14 +14 @@ websocket-client>=0.47.0 # LGPLv2+ -neutron>=13.0.0.0b2 # Apache-2.0 +neutron>=16.0.0.0b1 # Apache-2.0 @@ -16,2 +16,2 @@ networking-l2gw>=12.0.0 # Apache-2.0 -networking-sfc>=8.0.0.0b1 # Apache-2.0 -networking-bgpvpn>=8.0.0 # Apache-2.0 +networking-sfc>=10.0.0.0b1 # Apache-2.0 +networking-bgpvpn>=10.0.0b1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 731bce898..292d2adab 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,2 +13,2 @@ stestr>=2.0.0 # Apache-2.0 -pecan>=1.2.1 # BSD -pylint==1.8.4 # GPLv2 +pecan>=1.3.2 # BSD +pylint==2.2.0;python_version>="3.0" # GPLv2 @@ -19,0 +20 @@ bashate>=0.5.1 # Apache-2.0 +astroid==2.1.0;python_version>="3.0" # LGPLv2.1

1 0

masakari-dashboard 2.0.0 (ussuri)
by no-reply＠openstack.org 13 May '20

13 May '20

We are psyched to announce the release of: masakari-dashboard 2.0.0: Horizon plugin for masakari This release is part of the ussuri release series. The source is available from: https://opendev.org/openstack/masakari-dashboard Download the package from: https://tarballs.openstack.org/masakari-dashboard/ Please report issues through: https://bugs.launchpad.net/masakari/+bugs For more details, please see below. Changes in masakari-dashboard 1.0.0..2.0.0 ------------------------------------------ 7f5336c Use unittest.mock instead of third party mock a64e5ca s/assertItemsEqual/assertCountEqual/g 57a4ce4 Drop Django 1.11 support dbc0a4a [ussuri][goal] Drop python 2.7 support and testing a232649 Use Horizon project template for django jobs 43e557c Update master for stable/train Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 +-- .../notes/drop-py-2-7-a5322c1cb7c74c61.yaml | 6 +++++ releasenotes/source/index.rst | 1 + releasenotes/source/train.rst | 6 +++++ requirements.txt | 2 +- setup.cfg | 2 -- test-requirements.txt | 1 - tox.ini | 31 +++++----------------- 11 files changed, 39 insertions(+), 48 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index b82e5a0..1118b31 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ pbr!=2.1.0,>=2.0.0 # Apache-2.0 -horizon>=14.0.0.0b3 # Apache-2.0 +horizon>=17.1.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index a81a07a..2e6034e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -14 +13,0 @@ coverage!=4.4,>=4.0 # Apache-2.0 -mock>=2.0.0 # BSD

1 0