November 2023 - Release-announce - lists.openstack.org

puppet-openstack-extras 21.0.1 (zed)
by no-reply＠openstack.org 30 Nov '23

30 Nov '23

We are jazzed to announce the release of: puppet-openstack-extras 21.0.1: Puppet module for OpenStack Openstack_extras This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/puppet-openstack-extras Download the package from: https://tarballs.openstack.org/puppet-openstack_extras/ For more details, please see below. 21.0.1 ^^^^^^ Bug Fixes * Now the Zed release is used by default. Changes in puppet-openstack-extras 21.0.0..21.0.1 ------------------------------------------------- 60324f2 Prepare new release 3665415 Fix wrong release fac5ca4 Add .pdkignore to exclude some files from tar ball c99d897 Update TOX_CONSTRAINTS_FILE for stable/zed 53a437c Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pdkignore | 51 ++++++++++++++++++++++ manifests/repo/debian/params.pp | 2 +- manifests/repo/redhat/params.pp | 2 +- metadata.json | 2 +- .../notes/fix-zed-release-99f23a977cc90e0c.yaml | 4 ++ .../openstack_extras_repo_debian_debian_spec.rb | 14 +++--- .../openstack_extras_repo_debian_ubuntu_spec.rb | 6 +-- .../openstack_extras_repo_redhat_redhat_spec.rb | 6 +-- tox.ini | 2 +- 10 files changed, 73 insertions(+), 17 deletions(-)

1 0

ironic 23.1.0 (caracal)
by no-reply＠openstack.org 30 Nov '23

30 Nov '23

We are jazzed to announce the release of: ironic 23.1.0: OpenStack Bare Metal Provisioning This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 23.1.0 ^^^^^^ New Features ************ * Sending signal "SIGUSR2" to a conductor process will now trigger a drain shutdown. This is similar to a "SIGTERM" graceful shutdown but the timeout is determined by "[DEFAULT]drain_shutdown_timeout" which defaults to "1800" seconds. This is enough time for running tasks on existing reserved nodes to either complete or reach their own failure timeout. During the drain period the conductor will be removed from the hash ring to prevent new tasks from starting. Other conductors will no longer fail reserved nodes on the draining conductor, which previously appeared to be orphaned. This is achieved by running the conductor keepalive heartbeat for this period, but setting the "online" state to "False". * While Ironic has not explicitly added support for OVN, because that is in theory a Neutron implementation detail, we have added some basic testing and are pleased to announce that you can use OVN's DHCP service for IPv4 based provisioning with OVN v23.06.00 and beyond. This is not without issues, and we've added ovn documentation (https://docs.openstack.org/ironic/latest/admin/ovn- networking.html) as a result to help provide as much Ironic operator clarity as possible. Known Issues ************ * Use of OVN may require disabling SNAT for provisioning with IPv4 when using TFTP. This is due to the Linux Kernel, and how IP packet handling occurs with OVN. No solution is known to this issue, and use of provisioning technologies which do *not* use TFTP is also advisable. * Use of OVN may require careful attention to the MTUs of networks. Oversized packets and networking may be dropped. That being said this is more likely an issue for testing than with actual physical baremetal in a production deployment. * Use of OVN for IPv6 based PXE/iPXE is not supported by Neutron. The Ironic project expects this to be addressed during the Caracal (2024.1) development cycle. * When configuring a single-conductor environment, make sure the number of worker pools ("[conductor]worker_pool_size") is larger than the maximum parallel deployments ("[conductor]max_concurrent_deploy"). This was not the case by default previously (the options used to be set to 100 and 250 accordingly). Upgrade Notes ************* * Because of a fix in the internal worker pool handling, you may now start seeing requests rejected with HTTP 503 under a very high load earlier than before. In this case, try increasing the "[conductor]worker_pool_size" option or consider adding more conductors. * The default worker pool size (the "[conductor]worker_pool_size" option) has been increased from 100 to 300. You may want to consider increasing it even further if your environment allows that. Bug Fixes ********* * The "parent_node" field, a newly added API field, has been constrained to store UUIDs over the names of nodes. When names are used, the value is changed to the UUID of the node. * Properly eject the virtual media from a DVD device in case this is the only MediaType available from the Hardware, and Ironic requested CD as the device to be used. See bug 2039042 (https://bugs.launchpad.net/ironic/+bug/2039042) for details. * When Ironic hits the limit on the number of the concurrent deploys (specified in the "[conductor]max_concurrent_deploy" option), the resulting HTTP code is now 503 instead of the more generic 500. * The per-node "external_http_url" setting in the driver info is now used for a boot ISO. Previously this setting was only used for a config floppy. * Fixes issue of changing or getting state of indicator LED of attached disk caused by misunderstanding SimpleStorage provides this functionality but actually Storage resource does. * Fixes handling new requests when the maximum number of internal workers is reached. Previously, after reaching the maximum number of workers (100 by default), we would queue the same number of requests (100 again). This was not intentional, and now Ironic no longer queues requests if there are no free threads to run them. Changes in ironic 23.0.0..23.1.0 -------------------------------- 0d59e25cf Use per-node external_http_url for boot ISO 81acd5df2 Implement drain shutdown support f42b359bd Make sqlalchemy-2x job voting again fa8df6919 Fix unit tests broken by olso.utils 1b55e4b4d Document new bug deputy role for Ironic b9baf7dbc eventlet monkey patch in unit tests earlier 43ccb17e1 [api-ref] Add firmware fields to driver API 7639268e7 [api-ref] Complete port name and shard documentation f6b4ad833 Remove outdated pysnmp reference 8154c0a9f Update devstack guide for image id; network always needed c3ee90dda Add inspection hooks 679176ab5 Add the setting of memcached servers to keystone_authtoken 766d2804a Make sure we eject media from DVD when CD is requested 2124d101d Extract generic image publishing code from image_utils d1ca14289 Reset parent_node values to uuids instead of names 124f6425e Refactor publishing images into a new module 40e825ba9 CI: Fix our internal MTU settings 9bd1e033f grenade: convert neutron cli commands to openstack 3f9151163 Introduce conductor touch while offline 224cdd726 Bump workers_pool_size to 300 and remove queueing of tasks 3f77091c6 Enable OVN CI cba10669f Fix the HTTP code for reaching max_concurrent_deploy: 503 instead of 500 6c8a04e8f api-ref for nodes/{node_ident}/firmware 56cbe2569 Do not store ramdisk logs as part of the inventory db549850e Imported Translations from Zanata bbc82fa14 Kickstart: Don't error unit tests ksvalidate is present a31bf57cb Add inspection hooks 7f053dc70 Add inspection hooks 609ccc903 Add inspection hooks 7b91f67df Update master for stable/2023.2 8db7220ba Support port name: API ca5be6338 [DOC] Add a little more clarity regarding parent/child nodes ffde150aa Transiton to Storage resource from SimpleStorage 9516c67b6 DB: Load only one instance for RPC interactions 8c93d7df8 Cleanup if images.fetch fails ad651b328 Remove traces of Docker from devstack dependencies Diffstat (except docs and test files) ------------------------------------- api-ref/source/baremetal-api-v1-drivers.inc | 12 + api-ref/source/baremetal-api-v1-ports.inc | 23 ++ api-ref/source/index.rst | 1 + api-ref/source/parameters.yaml | 59 ++- api-ref/source/samples/driver-get-response.json | 4 + .../samples/drivers-list-detail-response.json | 8 + api-ref/source/samples/port-create-request.json | 1 + api-ref/source/samples/port-create-response.json | 1 + .../source/samples/port-list-detail-response.json | 1 + api-ref/source/samples/port-update-response.json | 1 + bindep.txt | 3 - devstack/files/bindep.txt | 3 - devstack/lib/ironic | 108 +++++- devstack/plugin.sh | 20 +- devstack/settings | 14 + devstack/upgrade/resources.sh | 20 +- .../install/include/configure-ironic-api.inc | 10 +- ironic/api/controllers/v1/node.py | 26 +- ironic/api/controllers/v1/port.py | 27 +- ironic/api/controllers/v1/utils.py | 11 +- ironic/api/controllers/v1/versions.py | 6 +- ironic/common/exception.py | 2 +- ironic/common/image_publisher.py | 187 +++++++++ ironic/common/release_mappings.py | 2 +- ironic/common/rpc_service.py | 46 ++- ironic/conductor/base_manager.py | 20 +- ironic/conductor/inspection.py | 3 + ironic/conductor/rpcapi.py | 4 +- ironic/conf/conductor.py | 2 +- ironic/conf/default.py | 8 + ironic/conf/inspector.py | 55 ++- ironic/db/api.py | 8 +- ironic/db/sqlalchemy/api.py | 4 +- ironic/drivers/modules/image_cache.py | 3 + ironic/drivers/modules/image_utils.py | 304 ++++++--------- .../modules/inspector/hooks/accelerators.py | 80 ++++ .../drivers/modules/inspector/hooks/boot_mode.py | 42 ++ .../modules/inspector/hooks/cpu_capabilities.py | 47 +++ .../modules/inspector/hooks/extra_hardware.py | 83 ++++ .../inspector/hooks/known_accelerators.yaml | 9 + .../inspector/hooks/local_link_connection.py | 123 ++++++ ironic/drivers/modules/inspector/hooks/memory.py | 41 ++ .../drivers/modules/inspector/hooks/parse_lldp.py | 87 +++++ .../drivers/modules/inspector/hooks/pci_devices.py | 84 ++++ .../modules/inspector/hooks/physical_network.py | 99 +++++ .../drivers/modules/inspector/hooks/raid_device.py | 84 ++++ .../drivers/modules/inspector/hooks/root_device.py | 109 ++++++ ironic/drivers/modules/inspector/lldp_parsers.py | 364 ++++++++++++++++++ ironic/drivers/modules/inspector/lldp_tlvs.py | 365 ++++++++++++++++++ ironic/drivers/modules/redfish/boot.py | 19 +- ironic/drivers/modules/redfish/inspect.py | 14 +- ironic/drivers/modules/redfish/management.py | 58 +-- ironic/objects/conductor.py | 4 +- ironic/objects/port.py | 12 + .../modules/inspector/hooks/test_accelerators.py | 80 ++++ .../modules/inspector/hooks/test_boot_mode.py | 37 ++ .../inspector/hooks/test_cpu_capabilities.py | 37 ++ .../modules/inspector/hooks/test_extra_hardware.py | 165 ++++++++ .../inspector/hooks/test_local_link_connection.py | 178 +++++++++ .../drivers/modules/inspector/hooks/test_memory.py | 38 ++ .../modules/inspector/hooks/test_parse_lldp.py | 422 +++++++++++++++++++++ .../modules/inspector/hooks/test_pci_devices.py | 73 ++++ .../inspector/hooks/test_physical_network.py | 86 +++++ .../modules/inspector/hooks/test_raid_device.py | 107 ++++++ .../modules/inspector/hooks/test_root_device.py | 178 +++++++++ .../unit/drivers/modules/redfish/test_boot.py | 44 ++- .../unit/drivers/modules/redfish/test_inspect.py | 63 ++- .../drivers/modules/redfish/test_management.py | 141 ++++++- playbooks/ci-workarounds/get_extra_logging.yaml | 11 + ...rain-parent-node-to-uuids-51642cacfea0714d.yaml | 6 + releasenotes/notes/drain-5eafd17e0868e21a.yaml | 14 + .../fix-eject-media-dvd-b1994446ea71be9c.yaml | 8 + .../max_concurrent_deploy-7a31ba142bf5ad5c.yaml | 6 + ...ode-iso-external_http_url-c5e3fa9ae4960dd6.yaml | 5 + .../notes/ovn-support-6666dfa2e99e7ad4.yaml | 25 ++ ...torage-over-simplestorage-ccb3e0e38bfe8712.yaml | 6 + releasenotes/notes/workers-20ca5c225c1474e0.yaml | 25 ++ releasenotes/source/2023.2.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 26 +- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 159 ++++++++ requirements.txt | 2 + setup.cfg | 11 + zuul.d/ironic-jobs.yaml | 51 ++- 107 files changed, 5167 insertions(+), 633 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e57c72049..aa0e212b3 100644 --- a/requirements.txt +++ b/requirements.txt @@ -50,0 +51,2 @@ sushy>=4.3.0 +construct>=2.9.39 # MIT +netaddr>=0.9.0 # BSD

1 0

ironic-python-agent 9.8.0 (caracal)
by no-reply＠openstack.org 30 Nov '23

30 Nov '23

We are pumped to announce the release of: ironic-python-agent 9.8.0: Ironic Python Agent Ramdisk This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 9.8.0 ^^^^^ New Features ************ * Introducing basic authentication and configurable authentication strategy support for image and image checksum download processes. This feature introduces 3 new variables that could be set (either via oslo.config or image_info) to select the authentication strategy an provide credentials for HTTP(S) basic authentication. The 3 variables are structured in way that 1 of them 'image_server_auth_strategy' (string) provides the ability to select between authentication strategies by specifying the name of the strategy. Currently the only supported authentication strategy is the 'http-basic' which will make IPA use HTTP(S) basic authentication also known as the 'RFC 7617' standard. The other 2 variables 'image_server_password' and 'image_server_user' provide username and password credentials for image download processes. The 'image_server_password' and 'image_server_user' are not strategy specific and could be reused for any username + password based authentication strategy, but for the moment these 2 variables are only used for the 'http-basic' strategy. 'image_server_basic_auth' not just enables the feature but enforces checks on the values of the 2 related credentials. When the 'http-basic' strategy is enabled for image server download workflow the download logic will make sure to raise an exception in case any of the credentials are None or an empty string. Values coming from 'image_info' are prioritized over values coming from the 'oslo.config' framework and the 2 different credential source can't be mixed. Passing 1 or 2 out of the 3 from and source and the remaining values from an other source will result in a exception. * Adds numa_node id when collecting pci device info during inspection. * The Nvidia Mellanox "clean steps" to facilitate firmware updates of their network devices, are now available as deploy steps and service steps as well. Deprecation Notes ***************** * Removed the partial-implementation of image caching. This method was never used by Ironic, and was a vestige of a feature which was never completed. Image caching, if it were to be implemented today, would not use this method anyway. Bug Fixes ********* * Fixes a failure case where downloads would not be retried when the checksum fails verification. the agent now includes the checksum activity as part of the file download operation, and will automatically retry downloads when the checksum fails in accordance with the existing download retry logic. This is largely in response to what appears to be intermittent transport failures at lower levels which we cannot otherwise detect. * The default timeout value for the agent to lookup itself in an Ironic deployment has been extended to 600 seconds from 300 seconds. This is to provide better stability for Ironic deployments under heavy load which may be unable to service new requests. This is particularly true when the backing database is SQLite for Ironic due to the limited write concurrency of the database. * Fix the logic to detect the right parent device for a given multipath device. * Fixes the error handling of multipathd service startup/discovery process. IPA handles both scenario when the multipathd service is already started and the scenario when the service has not been started and in the second scenario IPA will try to start the service. IPA is not checking whether multipathd is running already and not, it will start the multipathd service even it is already running and expects 0 error code even if the service is already running. It has been noticed that with certain combinations of distros and multipathd versions the error code is not 0 when IPA tries to start multipathd when an instance of multipathd is already running. When the expected return code is not 0 that causes an exception and that will cause the multipath device discovery to terminate prematurely and if the selected root device is a multipath device then IPA won't be able to provision. This fix discards the exception that is caused by the non 0 error code returned by the multipathd startup process. In case there is a genuine issue with the multipath service, that would be caught when the actual multipath device listing command is executed (multipath -ll). * Fixes an issue with rebuilding instances on Software RAID with RAIDed ESP partitions. Changes in ironic-python-agent 9.7.0..9.8.0 ------------------------------------------- 0a29206 Handle different device outputs for multipath 7a52314 fix multipathd error handling release notes 26be55f Test coverage for efi_utils.get_boot_record 3d42298 Remove standby.cache_image support 76ad062 Get numa_node info when collecting pci devices info 13537db improve multipathd error handling dbf3e54 Replace shlex module with helper function cb61a8d Retry on checksum failures 7096178 implement basic-auth support for user-image download process 25704d2 Add additional mock tests to unit tests for read only devices. Change ordering to ensure mock tests work correctly. db9545e Update master for stable/2023.2 f86975d Add mlnx deploy_step entry to enable deploy time firmware 4efcce5 Extend the lookup timeout to 600 seconds 286d667 Conditional creation of RAIDed ESP for UEFI Software RAID Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/config.py | 27 +- ironic_python_agent/extensions/standby.py | 163 ++++++++--- ironic_python_agent/hardware.py | 23 +- ironic_python_agent/hardware_managers/mlnx.py | 5 +- ironic_python_agent/inspector.py | 14 +- ironic_python_agent/partition_utils.py | 132 ++++----- ironic_python_agent/raid_utils.py | 112 ++++--- ...uth-for-user-image-server-150835e7567444da.yaml | 27 ++ .../cache-image-removal-3b5a80a6038a320b.yaml | 5 + ...dering-download-completed-91cca9fef34d8cf5.yaml | 11 + ...extend-ipa-lookup-timeout-05ee5b1372792dbe.yaml | 9 + ...x-multipath-parent-device-e85afad63159250c.yaml | 5 + .../notes/get_numa_node-eeab34a92739b6f6.yaml | 3 + ...-now-available-for-deploy-4a4226ffaae888f3.yaml | 6 + ...rror_handling_improvement-1669d0de4bfdbe95.yaml | 19 ++ .../rebuild_on_esp_raid-33f359bdf5ccaa09.yaml | 5 + releasenotes/source/2023.2.rst | 6 + releasenotes/source/index.rst | 1 + 26 files changed, 952 insertions(+), 363 deletions(-)

1 0

cinderlib 5.2.0 (bobcat)
by no-reply＠openstack.org 30 Nov '23

30 Nov '23

We are satisfied to announce the release of: cinderlib 5.2.0: Direct usage of Cinder Block Storage drivers without the services This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/cinderlib Download the package from: https://tarballs.openstack.org/cinderlib/ Please report issues through: https://bugs.launchpad.net/cinderlib/+bugs For more details, please see below. Changes in cinderlib 5.1.0..5.2.0 --------------------------------- ab28330 Continue 2023.2 (Bobcat) development f1af46d persistence: Handle switch to alembic 98fc4b6 Add sqlalchemy-migrate dependency 6bb58dd Use openstack-tox-py311 fb61781 Add tooz to test-requirements 496ef8d Open cinderlib for 2023.2 (Bobcat) development b66c34f Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 67 +++++++++++++++------------ cinderlib/persistence/dbms.py | 17 ++++--- releasenotes/source/2023.1.rst | 6 +++ releasenotes/source/index.rst | 1 + requirements.txt | 6 +-- test-requirements.txt | 1 + tox.ini | 10 ++-- 8 files changed, 68 insertions(+), 48 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e4fb968..4567e27 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,2 +1,2 @@ -# restrict cinder to the 2023.1 series only -cinder>=22.0.0,<23.0.0 # Apache-2.0 +# restrict cinder to the 2023.2 series only +cinder>=23.0.0,<24.0.0 # Apache-2.0 @@ -4 +4 @@ cinder>=22.0.0,<23.0.0 # Apache-2.0 -os-brick>=6.2.0 # Apache-2.0 +os-brick>=6.4.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 97d223b..f2b2a57 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12 @@ testtools>=2.4.0 # MIT +tooz[etcd3gw]>=2.8.0 # Apache-2.0

1 0

ironic-inspector 11.8.0 (caracal)
by no-reply＠openstack.org 30 Nov '23

30 Nov '23

We are amped to announce the release of: ironic-inspector 11.8.0: Hardware introspection for OpenStack Bare Metal This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. Changes in ironic-inspector 11.7.0..11.8.0 ------------------------------------------ ad4664b Drop before_first_request usage of Flask app da6a446 [CI] Add sqlalchemy 2.0 unit testing 24733d0 SQLAlchemy 2.0 - Fix items lost in migration 1d2a6d7 Fix python shebang fbfe131 Update master for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- ironic_inspector/db/__init__.py | 2 - .../882b2d84cb1b_attribute_constraints_relaxing.py | 4 +- ...d00d6e3f38c4_change_created_finished_at_type.py | 8 +-- ironic_inspector/main.py | 7 ++- ironic_inspector/test/unit/db/test_migrations.py | 64 +++++++++++++--------- releasenotes/source/2023.2.rst | 6 ++ releasenotes/source/index.rst | 1 + tools/states_to_dot.py | 2 +- zuul.d/ironic-inspector-jobs.yaml | 18 ++++++ zuul.d/project.yaml | 2 + 10 files changed, 77 insertions(+), 37 deletions(-)

1 0

os-refresh-config 13.2.0
by no-reply＠openstack.org 27 Nov '23

27 Nov '23

We are jazzed to announce the release of: os-refresh-config 13.2.0: Refresh system configuration The source is available from: https://opendev.org/openstack/os-refresh-config Download the package from: https://tarballs.openstack.org/os-refresh-config/ For more details, please see below. Changes in os-refresh-config 13.1.0..13.2.0 ------------------------------------------- 812905b Update python job template Diffstat (except docs and test files) ------------------------------------- setup.cfg | 7 +++++-- zuul.d/layout.yaml | 2 +- 2 files changed, 6 insertions(+), 3 deletions(-)

1 0

os-apply-config 13.2.0
by no-reply＠openstack.org 27 Nov '23

27 Nov '23

We are delighted to announce the release of: os-apply-config 13.2.0: Config files from cloud metadata The source is available from: https://opendev.org/openstack/os-apply-config Download the package from: https://tarballs.openstack.org/os-apply-config/ For more details, please see below. Changes in os-apply-config 13.1.0..13.2.0 ----------------------------------------- 3c7f9b9 Update python job template Diffstat (except docs and test files) ------------------------------------- setup.cfg | 5 +++++ tox.ini | 4 ++-- zuul.d/layout.yaml | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-)

1 0

os-collect-config 13.2.0
by no-reply＠openstack.org 27 Nov '23

27 Nov '23

We are glad to announce the release of: os-collect-config 13.2.0: Collect and cache metadata, run hooks on changes. The source is available from: https://opendev.org/openstack/os-collect-config Download the package from: https://tarballs.openstack.org/os-collect-config/ For more details, please see below. Changes in os-collect-config 13.1.0..13.2.0 ------------------------------------------- 76173d8 Update python job template Diffstat (except docs and test files) ------------------------------------- setup.cfg | 5 +++++ tox.ini | 4 ++-- zuul.d/layout.yaml | 2 +- 3 files changed, 8 insertions(+), 3 deletions(-)

1 0

openstack-ansible 26.4.0 (zed)
by no-reply＠openstack.org 27 Nov '23

27 Nov '23

We are pumped to announce the release of: openstack-ansible 26.4.0: Ansible playbooks for deploying OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 26.4.0 ^^^^^^ Upgrade Notes ************* * Keystone OIDC parameter 'oidc_redirect_uri' is replaced with 'oidc_redirect_path'. This parameter no longer needs to be set explicitly unless you run additional services which may collide with the default on the same port as Keystone. Your OIDC provider may need to be updated to reflect this change in redirect URI which defaults to the Keystone public URL plus the path /oidc_redirect. Bug Fixes ********* * Fixed OpenStack command line OIDC integration where Apache mod_auth_openidc if >= v2.4.9 including on Ubuntu Jammy. Other Notes *********** * The "localhost" target was explicitly added to OSA inventory due to bug #2041717. As a result, the 'all' group now contains localhost, and custom playbooks targeting 'all' may need adjustment, e.g.: "hosts: all:!localhost" Changes in openstack-ansible 26.3.0..26.4.0 ------------------------------------------- 95f72b617 Fix incorrect release name c76fccc78 Bump SHAs for Zed 9ee288c6e Apply rate limit for journald in AIO builds 6288a73eb Explicitly add localhost to inventory.ini 49677812a Define install_method default when hosts resolution depend on it Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 3 ++ ansible-role-requirements.yml | 32 +++++++++++----------- deploy-guide/source/targethosts-prepare.rst | 2 +- inventory/inventory.ini | 3 ++ playbooks/ceph-rgw-keystone-setup.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 4 +-- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +-- .../defaults/repo_packages/openstack_services.yml | 16 +++++------ playbooks/healthcheck-infrastructure.yml | 2 +- playbooks/os-keystone-install.yml | 2 +- ...licit-localhost-inventory-96c5b0b28e23a066.yaml | 7 +++++ .../oidc-fix-redirect-uri-5909172a1db5457f.yaml | 13 +++++++++ scripts/gate-check-commit.sh | 2 +- .../templates/user_variables.aio.yml.j2 | 9 ++++++ 14 files changed, 68 insertions(+), 33 deletions(-)

1 0

openstack-ansible 25.6.0 (yoga)
by no-reply＠openstack.org 27 Nov '23

27 Nov '23

We are thrilled to announce the release of: openstack-ansible 25.6.0: Ansible playbooks for deploying OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 25.6.0 ^^^^^^ Upgrade Notes ************* * Keystone OIDC parameter 'oidc_redirect_uri' is replaced with 'oidc_redirect_path'. This parameter no longer needs to be set explicitly unless you run additional services which may collide with the default on the same port as Keystone. Your OIDC provider may need to be updated to reflect this change in redirect URI which defaults to the Keystone public URL plus the path /oidc_redirect. Bug Fixes ********* * Fixes use of Apache mod_auth_openidc on Ubuntu Jammy where a new OIDCXForwardedHeaders configuration option is required. * Fixed OpenStack command line OIDC integration where Apache mod_auth_openidc if >= v2.4.9 including on Ubuntu Jammy. Other Notes *********** * The "localhost" target was explicitly added to OSA inventory due to bug #2041717. As a result, the 'all' group now contains localhost, and custom playbooks targeting 'all' may need adjustment, e.g.: "hosts: all:!localhost" Changes in openstack-ansible 25.5.0..25.6.0 ------------------------------------------- 7047d7f71 Fix incorrect release name 16d513883 Bump SHAs for Yoga 302842f88 Explicitly add localhost to inventory.ini e0c3efb14 Define install_method default when hosts resolution depend on it Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 3 +++ ansible-role-requirements.yml | 24 +++++++++++----------- deploy-guide/source/targethosts-prepare.rst | 2 +- inventory/inventory.ini | 3 +++ playbooks/ceph-rgw-keystone-setup.yml | 2 +- playbooks/defaults/repo_packages/gnocchi.yml | 4 ++-- playbooks/defaults/repo_packages/nova_consoles.yml | 4 ++-- .../defaults/repo_packages/openstack_services.yml | 20 +++++++++--------- playbooks/healthcheck-infrastructure.yml | 2 +- playbooks/os-keystone-install.yml | 2 +- ...licit-localhost-inventory-96c5b0b28e23a066.yaml | 7 +++++++ ...tone-oidc-forwarded-proto-92471121e3949428.yaml | 5 +++++ .../oidc-fix-redirect-uri-5909172a1db5457f.yaml | 13 ++++++++++++ scripts/gate-check-commit.sh | 2 +- 14 files changed, 62 insertions(+), 31 deletions(-)

1 0

openstack-ansible 27.3.0 (antelope)
by no-reply＠openstack.org 27 Nov '23

27 Nov '23

We are jazzed to announce the release of: openstack-ansible 27.3.0: Ansible playbooks for deploying OpenStack This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 27.3.0 ^^^^^^ Upgrade Notes ************* * Keystone OIDC parameter 'oidc_redirect_uri' is replaced with 'oidc_redirect_path'. This parameter no longer needs to be set explicitly unless you run additional services which may collide with the default on the same port as Keystone. Your OIDC provider may need to be updated to reflect this change in redirect URI which defaults to the Keystone public URL plus the path /oidc_redirect. Bug Fixes ********* * Fixed OpenStack command line OIDC integration where Apache mod_auth_openidc if >= v2.4.9 including on Ubuntu Jammy. Other Notes *********** * The "localhost" target was explicitly added to OSA inventory due to bug #2041717. As a result, the 'all' group now contains localhost, and custom playbooks targeting 'all' may need adjustment, e.g.: "hosts: all:!localhost" Changes in openstack-ansible 27.2.0..27.3.0 ------------------------------------------- d63b41447 Bump SHAs for 2023.1 7657895a3 Fix incorrect release name be52bb288 Explicitly add localhost to inventory.ini ec09d851e Remove amphora provider driver 954ce06ff Map default value of rabbitmq_management_ssl to haproxy_ssl 1a652f5a9 Add gate_log_requirements function 7c4060211 Apply rate limit for journald in AIO builds Diffstat (except docs and test files) ------------------------------------- ansible-collection-requirements.yml | 4 +-- ansible-role-requirements.yml | 40 +++++++++++----------- deploy-guide/source/targethosts-prepare.rst | 2 +- inventory/group_vars/all/all.yml | 2 +- inventory/group_vars/cinder_all/source_git.yml | 4 +-- inventory/group_vars/cloudkitty_all/source_git.yml | 4 +-- inventory/group_vars/gnocchi_all/source_git.yml | 4 +-- inventory/group_vars/horizon_all/source_git.yml | 6 ++-- inventory/group_vars/ironic_all/source_git.yml | 4 +-- inventory/group_vars/manila_all/source_git.yml | 4 +-- inventory/group_vars/neutron_all/source_git.yml | 6 ++-- inventory/group_vars/nova_all/source_git.yml | 6 ++-- inventory/group_vars/octavia_all/source_git.yml | 4 +-- inventory/group_vars/swift_all/source_git.yml | 4 +-- inventory/inventory.ini | 3 ++ ...licit-localhost-inventory-96c5b0b28e23a066.yaml | 7 ++++ .../oidc-fix-redirect-uri-5909172a1db5457f.yaml | 13 +++++++ scripts/scripts-library.sh | 14 ++++++++ .../templates/user_variables.aio.yml.j2 | 9 +++++ .../templates/user_variables_octavia.yml.j2 | 2 +- 20 files changed, 94 insertions(+), 48 deletions(-)

1 0

puppet-sahara 20.3.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We jubilantly announce the release of: puppet-sahara 20.3.1: Puppet module for OpenStack Sahara This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-sahara Download the package from: https://tarballs.openstack.org/puppet-sahara/ Please report issues through: https://bugs.launchpad.net/puppet-sahara/+bugs For more details, please see below. Changes in puppet-sahara 20.3.0..20.3.1 --------------------------------------- 8b82f3c Prepare final stable/yoga release a6a834b Add per module policy service refresh f4dc755 Update TOX_CONSTRAINTS_FILE for stable/yoga 7a65827 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/sahara_policy_spec.rb | 2 ++ tox.ini | 2 +- 6 files changed, 7 insertions(+), 3 deletions(-)

1 0

puppet-gnocchi 20.3.2 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are stoked to announce the release of: puppet-gnocchi 20.3.2: Puppet module for OpenStack Gnocchi This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-gnocchi Download the package from: https://tarballs.openstack.org/puppet-gnocchi/ Please report issues through: https://bugs.launchpad.net/puppet-gnocchi/+bugs For more details, please see below. Changes in puppet-gnocchi 20.3.1..20.3.2 ---------------------------------------- db3a1b4 Prepare final stable/yoga release 2fdcd56 Add per module policy service refresh Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/gnocchi_policy_spec.rb | 2 ++ 4 files changed, 5 insertions(+), 2 deletions(-)

1 0

puppet-cinder 20.4.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are glad to announce the release of: puppet-cinder 20.4.1: Puppet module for OpenStack Cinder This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-cinder Download the package from: https://tarballs.openstack.org/puppet-cinder/ Please report issues through: https://bugs.launchpad.net/puppet-cinder/+bugs For more details, please see below. Changes in puppet-cinder 20.4.0..20.4.1 --------------------------------------- a4fa12d Prepare final stable/yoga release acc9a28 Add per module policy service refresh Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/cinder_policy_spec.rb | 2 ++ 4 files changed, 5 insertions(+), 2 deletions(-)

1 0

puppet-ceilometer 20.4.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are delighted to announce the release of: puppet-ceilometer 20.4.1: Puppet module for OpenStack Ceilometer This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-ceilometer Download the package from: https://tarballs.openstack.org/puppet-ceilometer/ Please report issues through: https://bugs.launchpad.net/puppet-ceilometer/+bugs For more details, please see below. Changes in puppet-ceilometer 20.4.0..20.4.1 ------------------------------------------- 5b7dd77 Prepare final stable/yoga release 3f52e89 Set 'tenant_name_discovery' parameter in 'polling' section Diffstat (except docs and test files) ------------------------------------- manifests/agent/polling.pp | 7 ++++++- metadata.json | 2 +- spec/classes/ceilometer_agent_polling_spec.rb | 4 ++-- 3 files changed, 9 insertions(+), 4 deletions(-)

1 0

puppet-ironic 20.4.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are gleeful to announce the release of: puppet-ironic 20.4.1: Puppet module for OpenStack Ironic This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-ironic Download the package from: https://tarballs.openstack.org/puppet-ironic/ Please report issues through: https://bugs.launchpad.net/puppet-ironic/+bugs For more details, please see below. Changes in puppet-ironic 20.4.0..20.4.1 --------------------------------------- 58e59f8 Prepare final stable/yoga release a205202 Add per module policy service refresh 168c43d Fix missing dependency about policy config Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 9 +++++++++ manifests/inspector/policy.pp | 1 + manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/ironic_inspector_policy_spec.rb | 2 ++ spec/classes/ironic_policy_spec.rb | 2 ++ 6 files changed, 16 insertions(+), 1 deletion(-)

1 0

puppet-vitrage 10.3.2 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We jubilantly announce the release of: puppet-vitrage 10.3.2: Puppet module for OpenStack Vitrage This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-vitrage Download the package from: https://tarballs.openstack.org/puppet-vitrage/ Please report issues through: https://bugs.launchpad.net/puppet-vitrage/+bugs For more details, please see below. Changes in puppet-vitrage 10.3.1..10.3.2 ---------------------------------------- f1c4d80 Prepare final stable/yoga release e98d52c Add per module policy service refresh Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/vitrage_policy_spec.rb | 2 ++ 4 files changed, 5 insertions(+), 2 deletions(-)

1 0

puppet-glance 20.4.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are ecstatic to announce the release of: puppet-glance 20.4.1: Puppet module for OpenStack Glance This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-glance Download the package from: https://tarballs.openstack.org/puppet-glance/ Please report issues through: https://bugs.launchpad.net/puppet-glance/+bugs For more details, please see below. Changes in puppet-glance 20.4.0..20.4.1 --------------------------------------- 0e90a9c Prepare final stable/yoga release 4ee70b8 Add per module policy service refresh Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/glance_policy_spec.rb | 2 ++ 4 files changed, 5 insertions(+), 2 deletions(-)

1 0

puppet-placement 7.3.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are satisfied to announce the release of: puppet-placement 7.3.1: Puppet module for OpenStack placement This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-placement Download the package from: https://tarballs.openstack.org/puppet-placement/ Please report issues through: https://bugs.launchpad.net/puppet-placement/+bugs For more details, please see below. Changes in puppet-placement 7.3.0..7.3.1 ---------------------------------------- 1b5a311 Prepare final stable/yoga release bba3585 Add per module policy service refresh 027a866 Remove TripleO job 3987849 Update TOX_CONSTRAINTS_FILE for stable/yoga 600998e Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/placement_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 7 insertions(+), 22 deletions(-)

1 0

puppet-barbican 20.3.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are overjoyed to announce the release of: puppet-barbican 20.3.1: Puppet module for Barbican This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-barbican Download the package from: https://tarballs.openstack.org/puppet-barbican/ Please report issues through: https://bugs.launchpad.net/puppet-barbican/+bugs For more details, please see below. Changes in puppet-barbican 20.3.0..20.3.1 ----------------------------------------- d1a5138 Prepare final stable/yoga release 3331313 Add per module policy service refresh 8256f5f Update TOX_CONSTRAINTS_FILE for stable/yoga 974a851 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/barbican_policy_spec.rb | 2 ++ tox.ini | 2 +- 6 files changed, 7 insertions(+), 3 deletions(-)

1 0

puppet-watcher 20.3.2 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We jubilantly announce the release of: puppet-watcher 20.3.2: Puppet module for OpenStack Watcher This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-watcher Download the package from: https://tarballs.openstack.org/puppet-watcher/ Please report issues through: https://bugs.launchpad.net/puppet-watcher/+bugs For more details, please see below. Changes in puppet-watcher 20.3.1..20.3.2 ---------------------------------------- bb092e8 Prepare final stable/yoga release 2e5b0dd Add per module policy service refresh 66c0d90 Ubuntu: Re-enable watcher in acceptance tests Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/acceptance/watcher_wsgi_apache_spec.rb | 12 +++--------- spec/classes/watcher_policy_spec.rb | 2 ++ 5 files changed, 8 insertions(+), 11 deletions(-)

1 0

puppet-magnum 20.3.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are gleeful to announce the release of: puppet-magnum 20.3.1: Puppet module for Magnum This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-magnum Download the package from: https://tarballs.openstack.org/puppet-magnum/ Please report issues through: https://bugs.launchpad.net/puppet-magnum/+bugs For more details, please see below. Changes in puppet-magnum 20.3.0..20.3.1 --------------------------------------- e166607 Prepare final stable/yoga release 26844c2 Add per module policy service refresh 3b44d3d Update TOX_CONSTRAINTS_FILE for stable/yoga f9c09ce Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/magnum_policy_spec.rb | 2 ++ tox.ini | 2 +- 6 files changed, 7 insertions(+), 3 deletions(-)

1 0

puppet-heat 20.4.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are pleased to announce the release of: puppet-heat 20.4.1: Puppet module for OpenStack Heat This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-heat Download the package from: https://tarballs.openstack.org/puppet-heat/ Please report issues through: https://bugs.launchpad.net/puppet-heat/+bugs For more details, please see below. Changes in puppet-heat 20.4.0..20.4.1 ------------------------------------- 2ae5641 Prepare final stable/yoga release 60b67f6 Add per module policy service refresh Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/heat_policy_spec.rb | 2 ++ 4 files changed, 5 insertions(+), 2 deletions(-)

1 0

puppet-octavia 20.4.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are delighted to announce the release of: puppet-octavia 20.4.1: Puppet module for OpenStack Octavia This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-octavia Download the package from: https://tarballs.openstack.org/puppet-octavia/ Please report issues through: https://bugs.launchpad.net/puppet-octavia/+bugs For more details, please see below. Changes in puppet-octavia 20.4.0..20.4.1 ---------------------------------------- f0cd439 Prepare final stable/yoga release 97ee072 Add per module policy service refresh Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/octavia_policy_spec.rb | 2 ++ 4 files changed, 5 insertions(+), 2 deletions(-)

1 0

puppet-aodh 20.3.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We contentedly announce the release of: puppet-aodh 20.3.1: Puppet module for OpenStack Aodh This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-aodh Download the package from: https://tarballs.openstack.org/puppet-aodh/ Please report issues through: https://bugs.launchpad.net/puppet-aodh/+bugs For more details, please see below. Changes in puppet-aodh 20.3.0..20.3.1 ------------------------------------- 7c5eb87 Prepare final stable/yoga release 035f893 Add per module policy service refresh 4935899 Use openstack_spec_helper from zuul checkout 1657928 Update TOX_CONSTRAINTS_FILE for stable/yoga d721cf0 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + Gemfile | 19 ++++++++++++++----- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/aodh_policy_spec.rb | 2 ++ tox.ini | 2 +- 7 files changed, 21 insertions(+), 8 deletions(-)

1 0

puppet-trove 20.4.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We exuberantly announce the release of: puppet-trove 20.4.1: Puppet module for OpenStack Trove This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-trove Download the package from: https://tarballs.openstack.org/puppet-trove/ Please report issues through: https://bugs.launchpad.net/puppet-trove/+bugs For more details, please see below. Changes in puppet-trove 20.4.0..20.4.1 -------------------------------------- 92e04d9 Prepare final stable/yoga release f492a67 Add per module policy service refresh Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/trove_policy_spec.rb | 2 ++ 4 files changed, 5 insertions(+), 2 deletions(-)

1 0

puppet-keystone 20.4.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are pleased to announce the release of: puppet-keystone 20.4.1: Puppet module for OpenStack Keystone This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-keystone Download the package from: https://tarballs.openstack.org/puppet-keystone/ Please report issues through: https://bugs.launchpad.net/puppet-keystone/+bugs For more details, please see below. Changes in puppet-keystone 20.4.0..20.4.1 ----------------------------------------- de75367 Prepare final stable/yoga release ffd91c6 Add per module policy service refresh Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/keystone_policy_spec.rb | 2 ++ 4 files changed, 5 insertions(+), 2 deletions(-)

1 0

puppet-mistral 20.3.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We contentedly announce the release of: puppet-mistral 20.3.1: Puppet module for OpenStack Mistral This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-mistral Download the package from: https://tarballs.openstack.org/puppet-mistral/ Please report issues through: https://bugs.launchpad.net/puppet-mistral/+bugs For more details, please see below. Changes in puppet-mistral 20.3.0..20.3.1 ---------------------------------------- 7d052b5 Prepare final stable/yoga release 1c0e1b6 Add per module policy service refresh f0ff940 Update TOX_CONSTRAINTS_FILE for stable/yoga 66ae1f2 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/mistral_policy_spec.rb | 2 ++ tox.ini | 2 +- 6 files changed, 7 insertions(+), 3 deletions(-)

1 0

puppet-designate 20.3.2 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are ecstatic to announce the release of: puppet-designate 20.3.2: Puppet module for OpenStack Designate This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-designate Download the package from: https://tarballs.openstack.org/puppet-designate/ Please report issues through: https://bugs.launchpad.net/puppet-designate/+bugs For more details, please see below. Changes in puppet-designate 20.3.1..20.3.2 ------------------------------------------ e0f4225 Prepare final stable/yoga release 67dfe9e Add per module policy service refresh Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/designate_policy_spec.rb | 2 ++ 4 files changed, 5 insertions(+), 2 deletions(-)

1 0

puppet-manila 20.3.2 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We eagerly announce the release of: puppet-manila 20.3.2: Puppet module for OpenStack Manila This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-manila Download the package from: https://tarballs.openstack.org/puppet-manila/ Please report issues through: https://bugs.launchpad.net/puppet-manila/+bugs For more details, please see below. Changes in puppet-manila 20.3.1..20.3.2 --------------------------------------- 24cf3b7 Prepare final stable/yoga release d547287 Add per module policy service refresh Diffstat (except docs and test files) ------------------------------------- manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/manila_policy_spec.rb | 2 ++ 4 files changed, 5 insertions(+), 2 deletions(-)

1 0

puppet-murano 20.3.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are stoked to announce the release of: puppet-murano 20.3.1: Puppet module for OpenStack Murano This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-murano Download the package from: https://tarballs.openstack.org/puppet-murano/ Please report issues through: https://bugs.launchpad.net/puppet-murano/+bugs For more details, please see below. Changes in puppet-murano 20.3.0..20.3.1 --------------------------------------- 17ebe7d Prepare final stable/yoga release 9f632fe Add per module policy service refresh 0cf1b80 Update TOX_CONSTRAINTS_FILE for stable/yoga 6f4bb36 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/murano_policy_spec.rb | 2 ++ tox.ini | 2 +- 6 files changed, 7 insertions(+), 3 deletions(-)

1 0

puppet-cloudkitty 9.3.1 (yoga)
by no-reply＠openstack.org 24 Nov '23

24 Nov '23

We are pumped to announce the release of: puppet-cloudkitty 9.3.1: Puppet module for OpenStack cloudkitty This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-cloudkitty Download the package from: https://tarballs.openstack.org/puppet-cloudkitty/ Please report issues through: https://bugs.launchpad.net/puppet-cloudkitty/+bugs For more details, please see below. Changes in puppet-cloudkitty 9.3.0..9.3.1 ----------------------------------------- 944bba4 Prepare final stable/yoga release 2b41ca8 Add per module policy service refresh 5411c5d Update TOX_CONSTRAINTS_FILE for stable/yoga 7a5895e Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/deps.pp | 2 +- manifests/policy.pp | 1 + metadata.json | 2 +- spec/classes/cloudkitty_policy_spec.rb | 2 ++ tox.ini | 2 +- 6 files changed, 7 insertions(+), 3 deletions(-)

1 0

neutron 22.1.0 (antelope)
by no-reply＠openstack.org 23 Nov '23

23 Nov '23

We contentedly announce the release of: neutron 22.1.0: OpenStack Networking This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 22.1.0 ^^^^^^ Known Issues ************ * When using ML2/OVN, during an upgrade procedure, the OVS system-id stored value can be changed. The ovn-controller service will create the "Chassis" and "Chassis_Private" registers based on this OVS system-id. If the ovn-controller process is not gracefully stopped, that could lead to the existence of duplicated "Chassis" and "Chassis_Private" registers in the OVN Southbound database. Bug Fixes ********* * [bug 2022914 (https://bugs.launchpad.net/neutron/+bug/2022914) Neutron-API supports using relays as the southbound connection in a ML2/OVN setup. Before the maintenance worker of the API required a leader_only connection, which was removed. * Fixed the scenario where the DHCP agent is deployed in conjunction with the OVN metadata agent in order to serve metadata for baremetal nodes. In this scenario, the DHCP agent would not set the route needed for the OVN metadata agent service resulting in baremetal nodes not being able to query the metadata service. For more information see bug 1982569 (https://bugs.launchpad.net/neutron/+bug/1982569) * For OVN versions v22.09.0 and above, the "mcast_flood_reports" option is now set to "false" on all ports except "localnet" types. In the past, this option was set to "true" as a workaround for a bug in core OVN multicast implementation. * Now the ML2/OVN trunk driver prevents a trunk creation if the parent port is already bound. In the same way, if a parent port being used in a trunk is bound, the trunk cannot be deleted. * During the port bulk creation, if an IPAM allocation fails (for example, if the IP address is outside of the subnet CIDR), the other IPAM allocations already created are deleted before raising the exception. Fixes bug 2039550 (https://launchpad.net/bugs/2039550) * A new OVN maintenance method "remove_duplicated_chassis_registers" is added. This method will periodically check the OVN Southbound "Chassis" and "Chassis_Private" tables looking for duplicated registers. The older ones (based on the "Chassis_Private.nb_cfg_timestamp" value) will be removed when more than one register has the same hostname, that should be unique. Other Notes *********** * The external_mac entry in the NAT table is used to distribute/centralize the traffic to the FIPs. When there is an external_mac set the traffic is distributed (DVR). When it is empty it is centralized through the gateway port (no DVR). Upon port status transition to down, the external_mac was removed regardless of DVR being enabled or not, leading to centralize the FIP traffic for DVR -- though it was for down ports that won't accept traffic anyway. * Adds a maintenance task that runs once a day and is responsible for cleaning up Hash Ring nodes that haven't been updated in 5 days or more. See LP #2033281 for more information. * Added the missing extension "uplink-status-propagation" to the ML2/OVN mechanism driver. This extension is used by the ML2/SR-IOV mechanism driver, that could be loaded with ML2/OVN. Now it is possible to create ports with the "uplink-status-propagation" flag defined. * A ML2/OVN virtual port cannot be bound to a virtual machine. If a port IP address is assigned as an allowed address pair into another port, the first one is considered a virtual port. If the second port (non-virtual) is bound to ML2/OVN, the virtual port cannot be bound to a virtual machine; a virtual port is created only to reserve a set of IP addresses to be used by other ports. The OVN mechanism driver prevents that a virtual port has a device ID; a device ID is provided when the port is being bound. Changes in neutron 22.0.2..22.1.0 --------------------------------- fb99b7bfac Ensure ovn loadbalancer FIPs are centralized upon neutron restarts 2b611b77a6 [Fullstack] Drop all linuxbridge scenarios from fullstack tests 07c3eb49c5 [DHCP agent] Add route to OVN metadata port if exists a680d580e8 [Stable Only] Fix parent for nftables job 591cf6c35c Restore the tempest nftables jobs in experimental and periodic queues 1bc5068c7e [FT] Clear the idl lock in TestMaintenance tests a4c03671f2 Remove any IPAM allocation if port bulk creation fails 3123df2672 Add dhcpagentscheduler API extension to the ML2/OVN extensions 50fb47b10c "ebtables-nft" MAC rule deletion failing b9a0bf0b01 Parameter filters may be None, which cannot be called with ** ec588b0bc0 Fix intermittent failures in finding metada port in SB DB 9ae6cdf0ae Revert "[stable-only] Disable "neutron-tempest-plugin-jobs-2023-1" temporarily" cc209f44d1 Add "jammy" distribution release to the legacy ebtables installation 27a19fb88a [stable-only] Disable "neutron-tempest-plugin-jobs-2023-1" temporarily 7066974509 Use safer methods to get security groups on security group logging 226220ac3c [OVN] Fix rate and burst for stateless security groups de329d2828 [OVN] Add the default condition check in ``PortBindingChassisEvent`` 2319e7c35f [OVN] Match LSP_TYPE_VIRTUAL in PortBindingUpdateVirtualPortsEvent 93f223f8c0 Revert "[OVN][Trunk] Add port binding info on subport when parent is bound" c89d028a95 Reduce lock contention on subnets 96267a2582 [PostgreSQL] Subnet entity with ServiceType grouped by both tables b92fc1ad6c Use HasStandardAttributes as parent class for Tags DB model b7a59a5132 Switch fullstack/functional fips jobs to 9-stream 4adbc85de7 Check the device ID and host ID during virtual port binding 4a7e7f2d25 Functional: assert multiple calls for update_virtual_port_host e16a249611 Call the "tc qdisc" command for ingress qdisc without parent 7f51901d47 Revert "[OVN][Trunk] Set the subports correct host during live migration" fbda749de7 Improve the ``PortBindingUpdateVirtualPortsEvent`` match filter 234a098d7b [FT] Make explicit the "publish" call check in "test_port_forwarding" adfe0659c6 [OVN] Cleanup old Hash Ring node entries 4f707101d9 [OVN] Add the 'uplink-status-propagation' extension to ML2/OVN cd6171a6eb [OVN] Disable the mcast_flood_reports option for LSPs 6dc93c5072 [OVN][Trunk] Set the subports correct host during live migration f0923f4b50 [OVN] Skip the port status UP update during a live migration be0cb0690e Fix ovn-metadata agent sync of unused namespaces 98c4ae595b Send ovn heatbeat more often. 04541b0720 [OVN] ovn-db-sync check for router port differences 36f78ee7dc hash-ring: Retry all DB operations if inactive ddbb29afa4 [OVN] Retry retrieving LSP hosting information f0dec9fa8d [UT] Create network to make lazy loading in the models_v2 possible 6f8dc124c4 dvr: Avoid installing non-dvr openflow rule on startup fbaf313bab [OVN] Hash Ring: Better handle Neutron worker failures f0abced1c9 [neutron-api] remove leader_only for sb connection c1f5bac4a2 Fix ACL sync when default sg group is created e0c387f4e0 [2023.1 Only] Switch to 2023.1 neutron-tempest-plugin jobs ad4c50db38 [OVN][L3] Optimize FIP update operation d9eb4ff47c Set result when lswitch port exist 43cfe839eb [OVN] Prevent binding a virtual type port 3c0e54faf7 Move ``determine_bind_host`` to ``ovn.utils`` c8376e2a01 Implement ``get_port_type_virtual_and_parents`` method 133af425fa Implement ``get_subnets_address_scopes`` method fc29d62267 Ensure traffic is not centralized if DVR is enabled 8546131674 Don't allow deletion of the router ports without IP addresses cd8035306f Disable pool recycle in tests 287f4231a0 Delete sg rule which remote is the deleted sg 82e94208bc [OVN] Expose chassis hosting information in LSP 88d00e698f [FT] Move ``BaseOVSTestCase`` class to concurrency 1 executor 2f48c24d41 [OVN] Prevent Trunk creation/deletion with parent port bound 06694e336e Load FIP information during initialize not init df412885d1 [OVN] Hash Ring: Set nodes as offline upon exit 52cc01532b Improve Hash Ring logs 4462c1a3e0 [qos] _validate_create_network_callback return in no network 31a79f155e Delete network namespace on last port deletion 7fc12decdf [OVN] Remove SB "Chassis"/"Chassis_Private" duplicated registers Diffstat (except docs and test files) ------------------------------------- neutron/agent/l3/dvr_local_router.py | 3 + neutron/agent/linux/dhcp.py | 103 ++++++--- neutron/agent/ovn/metadata/agent.py | 25 ++- neutron/api/rpc/handlers/securitygroups_rpc.py | 7 + neutron/cmd/ovn/neutron_ovn_db_sync_util.py | 8 +- neutron/common/ovn/constants.py | 1 + neutron/common/ovn/exceptions.py | 7 +- neutron/common/ovn/extensions.py | 4 + neutron/common/ovn/hash_ring_manager.py | 9 +- neutron/common/ovn/utils.py | 157 +++++++++++++ neutron/common/utils.py | 16 ++ neutron/db/address_group_db.py | 1 + neutron/db/db_base_plugin_v2.py | 2 +- neutron/db/ipam_backend_mixin.py | 2 +- neutron/db/l3_db.py | 9 - neutron/db/l3_dvr_db.py | 15 +- neutron/db/models/tag.py | 2 +- neutron/db/models_v2.py | 52 +++-- neutron/db/ovn_hash_ring_db.py | 78 ++++++- neutron/objects/subnet.py | 8 + .../ml2/drivers/linuxbridge/agent/arp_protect.py | 4 +- .../openvswitch/agent/openflow/native/br_tun.py | 16 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 18 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 3 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 49 ++-- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 1 + .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 4 + .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 130 +++++++++-- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 250 ++++++++++++--------- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 77 ++++++- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 63 +++--- neutron/plugins/ml2/plugin.py | 17 +- neutron/services/logapi/drivers/ovn/driver.py | 33 ++- neutron/services/ovn_l3/plugin.py | 2 +- neutron/services/qos/qos_plugin.py | 4 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 39 ++-- neutron/services/trunk/plugin.py | 5 +- .../agent/ovn/metadata/test_metadata_agent.py | 26 ++- .../ovn/mech_driver/ovsdb/test_maintenance.py | 88 +++++++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 18 ++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 98 +++++++- .../privileged/agent/linux/test_tc_lib.py | 44 ++-- .../services/logapi/drivers/ovn/test_driver.py | 6 + .../trunk/drivers/ovn/test_trunk_driver.py | 75 ++++--- .../api/rpc/handlers/test_securitygroups_rpc.py | 50 ++++- .../agent/openflow/native/test_br_tun.py | 33 ++- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 9 +- .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 2 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 83 ++++++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 208 +++++++++-------- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 42 ++++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 17 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 67 ++++-- .../services/logapi/drivers/ovn/test_driver.py | 41 +++- .../trunk/drivers/ovn/test_trunk_driver.py | 2 - .../notes/bug-2022914-edbf1ea3514596b8.yaml | 7 + ...p-agent-ovn-metadata-port-33a654ccb9554c65.yaml | 9 + .../notes/dvr-external-mac-934409413e515eb2.yaml | 10 + .../notes/hash-ring-cleanup-1079d2375082cebe.yaml | 6 + ...uplink-status-propagation-4c232954f8b4f0ef.yaml | 7 + .../ovn-mcast_flood_reports-4eee20856ccfc7d7.yaml | 7 + ...n-trunk-check-parent-port-eeca2eceaca9d158.yaml | 6 + ...tual-port-prevent-binding-50efba5521e8a28e.yaml | 10 + ..._ipamallocation_leftovers-9d72cc5f616f51e4.yaml | 7 + ...ve_duplicated_ovn_chassis-df12fb6233ea3d3e.yaml | 17 ++ roles/legacy_ebtables/tasks/main.yaml | 3 +- roles/nftables/tasks/main.yaml | 6 + tox.ini | 4 +- zuul.d/base.yaml | 22 +- zuul.d/job-templates.yaml | 4 +- zuul.d/project.yaml | 2 +- 98 files changed, 2242 insertions(+), 665 deletions(-)

1 0

neutron 20.5.0 (yoga)
by no-reply＠openstack.org 23 Nov '23

23 Nov '23

We are thrilled to announce the release of: neutron 20.5.0: OpenStack Networking This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 20.5.0 ^^^^^^ Bug Fixes ********* * [bug 2022914 (https://bugs.launchpad.net/neutron/+bug/2022914) Neutron-API supports using relays as the southbound connection in a ML2/OVN setup. Before the maintenance worker of the API required a leader_only connection, which was removed. * Fixed the scenario where the DHCP agent is deployed in conjunction with the OVN metadata agent in order to serve metadata for baremetal nodes. In this scenario, the DHCP agent would not set the route needed for the OVN metadata agent service resulting in baremetal nodes not being able to query the metadata service. For more information see bug 1982569 (https://bugs.launchpad.net/neutron/+bug/1982569) * For OVN versions v22.09.0 and above, the "mcast_flood_reports" option is now set to "false" on all ports except "localnet" types. In the past, this option was set to "true" as a workaround for a bug in core OVN multicast implementation. * Now the ML2/OVN trunk driver prevents a trunk creation if the parent port is already bound. In the same way, if a parent port being used in a trunk is bound, the trunk cannot be deleted. * During the port bulk creation, if an IPAM allocation fails (for example, if the IP address is outside of the subnet CIDR), the other IPAM allocations already created are deleted before raising the exception. Fixes bug 2039550 (https://launchpad.net/bugs/2039550) Other Notes *********** * Adds a maintenance task that runs once a day and is responsible for cleaning up Hash Ring nodes that haven't been updated in 5 days or more. See LP #2033281 for more information. * Added the missing extension "uplink-status-propagation" to the ML2/OVN mechanism driver. This extension is used by the ML2/SR-IOV mechanism driver, that could be loaded with ML2/OVN. Now it is possible to create ports with the "uplink-status-propagation" flag defined. Changes in neutron 20.4.0..20.5.0 --------------------------------- bef1f7a486 Ensure ovn loadbalancer FIPs are centralized upon neutron restarts 358e349ebf [Stable Only] Fix parent for nftables job 4b1e0bc5e4 [DHCP agent] Add route to OVN metadata port if exists 7dbd06d66e "ebtables-nft" MAC rule deletion failing df5cb326ed Remove any IPAM allocation if port bulk creation fails 9d4638071f Add dhcpagentscheduler API extension to the ML2/OVN extensions e2ccd6f3d2 [stable-only] Replace cirros image versions not cached in the CI 69c4712d8d Parameter filters may be None, which cannot be called with ** bb7d13930d Use safer methods to get security groups on security group logging e82afb138d [OVN] Fix rate and burst for stateless security groups 45dab8b83b [OVN] Add the default condition check in ``PortBindingChassisEvent`` cf096344b0 Revert "[OVN][Trunk] Add port binding info on subport when parent is bound" 921cde14c1 Reduce lock contention on subnets a4efc2dd80 [PostgreSQL] Subnet entity with ServiceType grouped by both tables edf33d2217 Add 3 secs to wait for keepalived state change ef31c17cb8 Use HasStandardAttributes as parent class for Tags DB model de424f5991 Revert "[OVN][Trunk] Set the subports correct host during live migration" 272b3ae718 Call the "tc qdisc" command for ingress qdisc without parent 22c3951a93 [FT] Make explicit the "publish" call check in "test_port_forwarding" 79010935c0 [OVN] Cleanup old Hash Ring node entries 62ed750a15 [OVN] Add the 'uplink-status-propagation' extension to ML2/OVN 82f06feebe [OVN][Trunk] Set the subports correct host during live migration 9186d511a5 [OVN] Skip the port status UP update during a live migration 7034f4cf73 Fix ovn-metadata agent sync of unused namespaces 7746912334 Send ovn heatbeat more often. 373f155cb7 Spread OVN metadata agent heartbeat response in time 334dc3322a [OVN] Disable the mcast_flood_reports option for LSPs b288a1264a [OVN] ovn-db-sync check for router port differences c569db73e2 hash-ring: Retry all DB operations if inactive 10a981a158 [OVN] Retry retrieving LSP hosting information 8ebd7dbdf0 [UT] Create network to make lazy loading in the models_v2 possible 7692e3ae6c dvr: Avoid installing non-dvr openflow rule on startup 24a063959a [OVN] Hash Ring: Better handle Neutron worker failures 580027b7c9 [neutron-api] remove leader_only for sb connection 539961b4b9 [OVN] Prevent Trunk creation/deletion with parent port bound Diffstat (except docs and test files) ------------------------------------- neutron/agent/linux/dhcp.py | 64 ++++++++---- neutron/agent/ovn/metadata/agent.py | 44 +++++++-- neutron/cmd/ovn/neutron_ovn_db_sync_util.py | 8 +- neutron/common/ovn/extensions.py | 4 + neutron/common/ovn/utils.py | 7 ++ neutron/common/utils.py | 16 +++ neutron/db/address_group_db.py | 1 + neutron/db/db_base_plugin_v2.py | 2 +- neutron/db/ipam_backend_mixin.py | 2 +- neutron/db/l3_dvr_db.py | 15 +-- neutron/db/models/tag.py | 2 +- neutron/db/models_v2.py | 52 +++++++--- neutron/db/ovn_hash_ring_db.py | 33 ++++++- neutron/objects/subnet.py | 9 ++ .../ml2/drivers/linuxbridge/agent/arp_protect.py | 4 +- .../openvswitch/agent/openflow/native/br_tun.py | 16 ++- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 18 ++-- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 3 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 37 ++++--- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 4 + .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 71 +++++++++++--- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 98 ++++++++++++++++--- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 44 ++++++++- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 18 +++- neutron/plugins/ml2/plugin.py | 7 +- neutron/services/logapi/drivers/ovn/driver.py | 37 +++++-- neutron/services/trunk/drivers/ovn/trunk_driver.py | 39 ++++---- neutron/services/trunk/plugin.py | 5 +- .../agent/l3/test_keepalived_state_change.py | 2 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 28 ++++-- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 42 ++++++++ .../privileged/agent/linux/test_tc_lib.py | 37 ++++--- .../services/logapi/drivers/ovn/test_driver.py | 6 ++ .../trunk/drivers/ovn/test_trunk_driver.py | 75 ++++++++------ .../agent/openflow/native/test_br_tun.py | 33 ++++++- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 9 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 83 +++++++++++++++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 108 ++++++++++++++++++++- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 42 ++++++++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 17 +++- .../drivers/ovn/mech_driver/test_mech_driver.py | 32 +++--- .../services/logapi/drivers/ovn/test_driver.py | 41 +++++--- .../trunk/drivers/ovn/test_trunk_driver.py | 2 - .../notes/bug-2022914-edbf1ea3514596b8.yaml | 7 ++ ...p-agent-ovn-metadata-port-33a654ccb9554c65.yaml | 9 ++ .../notes/hash-ring-cleanup-1079d2375082cebe.yaml | 6 ++ ...uplink-status-propagation-4c232954f8b4f0ef.yaml | 7 ++ .../ovn-mcast_flood_reports-4eee20856ccfc7d7.yaml | 7 ++ ...n-trunk-check-parent-port-eeca2eceaca9d158.yaml | 6 ++ ..._ipamallocation_leftovers-9d72cc5f616f51e4.yaml | 7 ++ zuul.d/base.yaml | 4 +- zuul.d/tempest-multinode.yaml | 24 ++--- zuul.d/tempest-singlenode.yaml | 12 +-- 64 files changed, 1193 insertions(+), 292 deletions(-)

1 0

neutron 23.1.0 (bobcat)
by no-reply＠openstack.org 23 Nov '23

23 Nov '23

We are excited to announce the release of: neutron 23.1.0: OpenStack Networking This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 23.1.0 ^^^^^^ Bug Fixes * Fixed the scenario where the DHCP agent is deployed in conjunction with the OVN metadata agent in order to serve metadata for baremetal nodes. In this scenario, the DHCP agent would not set the route needed for the OVN metadata agent service resulting in baremetal nodes not being able to query the metadata service. For more information see bug 1982569 (https://bugs.launchpad.net/neutron/+bug/1982569) * During the port bulk creation, if an IPAM allocation fails (for example, if the IP address is outside of the subnet CIDR), the other IPAM allocations already created are deleted before raising the exception. Fixes bug 2039550 (https://launchpad.net/bugs/2039550) Changes in neutron 23.0.0.0b1..23.1.0 ------------------------------------- c03d76a41d Ensure ovn loadbalancer FIPs are centralized upon neutron restarts 80b50732e9 [Fullstack] Drop all linuxbridge scenarios from fullstack tests 15814a4623 [Stable Only] Fix parent for nftables job 6a33b2d5c5 Restore the tempest nftables jobs in experimental and periodic queues 2ecb7084fe [DHCP agent] Add route to OVN metadata port if exists 54122203f4 [FT] Clear the idl lock in TestMaintenance tests 28d69eaef4 [stable/2023.2 only] Drop -master jobs c6f5ea61c8 [2023.2 Only] Switch to 2023.2 neutron-tempest-plugin jobs f797f8bc2e Add dhcpagentscheduler API extension to the ML2/OVN extensions 5485a19356 "ebtables-nft" MAC rule deletion failing 59e3b22d14 Remove any IPAM allocation if port bulk creation fails aaa8f18d11 Parameter filters may be None, which cannot be called with ** de121943ee Fix the ``log.setup`` method call with "fix_eventlet=False" 4266dce979 Add "jammy" distribution release to the legacy ebtables installation 61f94ab449 [OVN] Add the default condition check in ``PortBindingChassisEvent`` 04e9b063ad [OVN] Match LSP_TYPE_VIRTUAL in PortBindingUpdateVirtualPortsEvent d28bcf0fe1 Revert "[OVN][Trunk] Add port binding info on subport when parent is bound" f1638bb6d1 Use safer methods to get security groups on security group logging 05aed84c2a Update TOX_CONSTRAINTS_FILE for stable/2023.2 74bca8052a Update .gitreview for stable/2023.2 0ca6953194 Fix wrong indentation in release note b2ceb8b854 Add release note with known issue with FIP PFs and vlan tenant networks 8cba9a2ee8 Call the "tc qdisc" command for ingress qdisc without parent 34e441e06c Revert "[OVN][Trunk] Set the subports correct host during live migration" c930196dd8 [CI] Bump OVS_BRANCH in ovs/ovn source deploy jobs f7489abaf8 [UT] Adjust autogen_process_directives for alembic-1.12.0+ a3a113aedb [OVN] Fix rate and burst for stateless security groups b250b85770 [UT] Reduce the binding retry loop in ``L3HATestFramework`` c6b6ecc751 Drop release notes for l3-ext-gw-multihoming and adjacent features 5c2f54ca03 Default SG rules template - Update related docs and add release note a4c8392209 Default SG rules - use new rules templates to create rules for SGs 78bc33d300 [Fullstack] Use new DB for each running test 7f777c223e [OVN] Cleanup old Hash Ring node entries d9eb04478e [FT] Make explicit the "publish" call check in "test_port_forwarding" fa130f29f7 Update QoS config document: use YAML config examples 0545f40a04 [OVN] Add the 'uplink-status-propagation' extension to ML2/OVN a3b00768d6 Check the device ID and host ID during virtual port binding 0e5c91c499 Add some more known issues to the OVN gap document e6fb32e27d Fix race condition when creating two routers without HA network 4109ee9bb4 Use the new network HA parameter aad82233eb Prevent internal IP change for floating IP 87b2f34a98 Fix ovn-metadata agent sync of unused namespaces 7ed79c1f78 [OVN][Trunk] Set the subports correct host during live migration e1f887ca9f [OVN] Skip the port status UP update during a live migration 7848eb0bf9 Add "openstack-tox-py310-with-sqlalchemy-master" to check queue 24a645d1d7 Fix bindep for Debian bookworm 72b5120ac2 Remove local CI job "tox-py311" superseded by "openstack-tox-py311" 06dbc5227b [OVN] Disable the mcast_flood_reports option for LSPs 4295598261 Use SQLAlchemy expression "select" 85d3fff97e Use HasStandardAttributes as parent class for Tags DB model 49fcd2f515 Force DB migration script to be run before some fullstack tests 43b4c9ebc5 [sqlalchemy-20] TableClause.insert constructs Insert object 3044b938b9 [OVN] Retry retrieving LSP hosting information afcce6d749 Initialize logger for rpc-server and wsgi script 4693836a1b [OVN] ovn-db-sync check for router port differences 395dd237d1 Fix missing oslo.versionedobjects library option 6fef1e6525 Add max limit to agent_down_time 0741a0d5a5 Add NET_OWNER_MEMBER and NET_OWNER_READER policy rules 5b7031841e Create is_ovn_metadata_port() method a505ff7dbb hash-ring: Retry all DB operations if inactive 14b2f4f60f [UT] Create network to make lazy loading in the models_v2 possible 4757b46646 Fix some new pylint "W" warnings 9e8e3a7867 [OVN] Hash Ring: Better handle Neutron worker failures 019d3421f2 Update Cirros to 0.6.2 ba6f7bf83e dvr: Avoid installing non-dvr openflow rule on startup 89702218db Add extra router attributes for ECMP and BFD 6c513217c2 ovs-agent: React to DB down just like to server down 36db70a718 Add sanity check for dnsmasq 2.86 321182980d Follow up on a small nit from patch 875989 [1] 96fd203a14 For hosts in DVR mode, only fetch bound FIPs 5db57734aa Initialize config in DietTestCase class 929b383743 Fix some new pylint "R" warnings aeb8036393 [sqlalchemy-20] Replace Query.get() with Session.get() c831771053 [PostgreSQL] Subnet entity with ServiceType grouped by both tables cc38cb0cee [sqlalchemy-20] Use the correct OVO field type c94fb2bb88 [sqlalchemy-20] Define one DB model per "FromClause.join" clause a9c8bf5c06 [neutron-api] remove leader_only for sb connection 32121ee638 Add unit tests periodic jobs to the experimental queue b2f1cc724a Add "openstack-tox-py310-with-sqlalchemy-master" CI job 49b68d36a0 [Docs] Add recommendation about usage of cache in the neutron-metadata-agent 67be07fd5b Add new DEFAULT option named "my_ipv6" e41fae522b Default SG api rules template - DB and OVO models 670675dd17 [sqlalchemy-20] Network "repr" should be tested with any order 02b12b0917 Refactor for ovs qos driver meter limit features 65bbbcee76 Set result when lswitch port exist 26a2266cf4 [FT] Move ``BaseOVSTestCase`` class to concurrency 1 executor 80ad28e696 Define the port "fixed_ips" in the creation call 68ecae5ff9 [OVN] Prevent binding a virtual type port b4eb5d71ab Drop redundant index on ports table 42ae944870 Switch fullstack/functional fips jobs to 9-stream f2dd2d3cac doc: fix typo in metering-agent.rst 4a71a7f82f Remove unused method from OVN L3 plugin 833a6d82cd [OVN] Prevent Trunk creation/deletion with parent port bound 28926957d6 [OVN] Expose chassis hosting information in LSP b92d133de6 [OVN] Read the necessary configuration options in the OVN agent load c8c74f12e0 Load FIP information during initialize not init 0090572b93 Ensure traffic is not centralized if DVR is enabled 024704625a Add missing port_binding policies 39e167ab27 Add neutron-tempest-plugin-linuxbridge job to the periodic queue 4a97429e7f [OVN] Improve ovn_l3/plugin.py exception logging add2a6eb8c [ovn][ipv6] Add some more tests to skiplist b084213382 Add more debugging to common agent code 8cd949fc9b Increase timeout in test_get_all_devices() 22ace8a752 [OVS] Check the datapath ID set by the creation method 6632420675 Revert "Use ``TextClause`` to define the DB model "server_default"" 7b85f9c244 [OVN][L3] Optimize FIP update operation 32d589f03e Don't allow deletion of the router ports without IP addresses 576c468b71 Disable pool recycle in tests 67a0b07287 Delete sg rule which remote is the deleted sg a174467639 Explicitly define the subnet creating a new port 08fe84f443 [sqlalchemy-20] Remove redundant indexes from some tables 126d54badc Fix some new pylint "E" warnings dfe29e6760 Delete network namespace on last port deletion 9d9f47c20c [OVN] Remove SB "Chassis"/"Chassis_Private" duplicated registers 8887cdf5d3 Imported Translations from Zanata 955e621167 [OVN][Trunk] Add port binding info on subport when parent is bound f2e3ab3805 [OVN] Hash Ring: Set nodes as offline upon exit 6e3525188f [S-RBAC] Fix policies for CUD subnets APIs ec4bfb91f0 [qos] _validate_create_network_callback return in no network 593278550a Functional: assert multiple calls for update_virtual_port_host 0c66dfaed8 [OVN] The all() and count() methods should be inside a DB txn 8b0c7d2c8d Return back the test_dvr_ha_router_interface_mtu_update test case 57e860ca19 Return back the test_dvr_router_interface_mtu_update test case afa20faec3 [OVN] Improve Hash Ring logs 0c09dbdb2a Subnet now inherit the sRBAC perm. from the parent resource Network 9ca0e34a5e Delete the "Chassis_Private" register when deleting an agent 5e0c102830 Send ovn heatbeat more often. 15fb672641 dhcp/agent: add more detail to a todo note regarding call_driver a9323f0325 dhcp/agent: fix 'get_metadata_bind_interface' driver call 050536c66e Stop the RPC connections when the agent exits ce12b6ac19 Do not query neutron-rpc for sg rules upon sg deletion 1f5f8965c3 gate: bump ovn to the latest LTS release (22.03) 2a8c7ff4f0 [ovn][ipv6] Skip test_update_router_admin_state f9be5d886d Fix 'consider-using-with' warning f070ba6f9d Revert "[OVN] Remove backwards compatibility with OVN < v20.09" e8cd39b3d7 Make DB migration creating indexes in RBACs conditional 61b358b6b5 [S-RBAC] Add API policies for get and activate port bindings b6ce722324 Raise the timeout of "neutron-ovn-rally-task" to 9000 e9da29d16c Change RBAC relationship loading method to "joined" 37dda9bc69 Move ``determine_bind_host`` to ``ovn.utils`` ac24dbed1c Implement ``get_port_type_virtual_and_parents`` method a22b1dedc2 Implement ``get_subnets_address_scopes`` method 9f6f6d5082 Return 409 Conflict to tenant user deleting port attached to FIP 2fbfe3855e Improve the ``PortBindingUpdateVirtualPortsEvent`` match filter 413044f253 [OVN] The L3 scheduler does not use all chassis by default 1b9a16c956 Add description field to the security_group_default_rules resource a72e97ddff Update api extension for default sg rules API a221764751 Allow Multiple External Gateways 0b67da59c6 [sqlalchemy-20] Open a connection to execute a command ac231c8174 Improve "sync_ha_chassis_group" method 35cb164ea5 [ovn]disable security group notifier 9e6675ec06 Increase the waiting period to receive a port creation event 43ef447a57 SG rule dict method allows DB object and Neutron OVO 846003c437 Start metadata proxy even if IPv6 DAD fails 452973c0db Revert "Use a writer context for the online alembic migrations" f42d86cc0d Bump neutron-lib to 3.6.1 ebc0658d55 Revert "Delete sg rule which remote is the deleted sg" e0a2427a2f [ovn] Avoid unwanted ACL_NOT_FOUND error when deleting log objects b677d65b2d [OVN][Migration] Enable settings backup subnet for NFS clients 6fa3d8019f Use ``TextClause`` to define the DB model "server_default" 1d0335810d Disable mysql gather performance in jobs 10ff1caaca Fix some new pylint "C" warnings ed274efcf7 Update pylint version 5f4a41326d Add rate-limiting to metadata agents 43c756d728 [alembic] Alembic operations require keywords only arguments 0959e452d3 [sqlalchemy-20] Retrieve the ``URL`` string with the password a86e300a0b Handle no more IP addresses available during a network sync a612346146 Fix not working use_random_fully config option a06b44e12d Imported Translations from Zanata 01af4b2cda Remove the neutron-debug tool 3b7699bc66 Add scope ID to the "GROUP BY" clause in ``get_scoped_floating_ips`` 01de74dedf [S-RBAC] Get QoS rule types API available for READER role 7573fca58c Notify neutron-server ovs is restarted d409296bde docs: Deindent code blocks 043a8ecad9 [OVN] Use the API context in ``OVNClient._add_router_ext_gw`` method 363c690529 Replace "tenant_id" with "project_id" in address scope 6a2ccfac32 Make "project_id" in "L3HARouterNetwork" unique constraint 98ac1fa31a [sqlalchemy-20] Add the transaction context to the upgrade checks methods 3e65ef863c Mark "ipv6_pd_enabled" as deprecated and experimental. 4edff4fe8d [S-RBAC] Fix new policies for FIP PFs APIs be0dc09d52 [S-RBAC] Fix new policies for get QoS rules APIs 97d658c4ce port-hint-ovs-tx-steering: shim extension 6b55589ae0 port-hint-ovs-tx-steering: agent side 0390ada97c port-hints: api extension c3602ac19b [OVN] Update ovn meter when neutron server reloads be4e150de9 [OVN] Remove backwards compatibility with OVN < v20.09 dde1d69c78 Add host metadata haproxy manager c0af5b3b5e Reduce lock contention on subnets 256297fc7f rbacs: clean-up to use defined constants ACCESS_* 6eb7006801 Drop retries in tests for TimeoutException 78dbe55f19 Add extra log to help figuring out OVS events 30c0e5699e Fix doc links for networking option 2 adaba13bdb Add new DEFAULT option named "my_ip" b1cc242fad Add a method to retrieve router gateway ports 7a59cf0eb9 Correct planned removal for maintenance function 2be53b1719 [functional] Fix db_set use in test_cascading_del_in_txn a9963e90d9 ``_get_ovn_version`` returns a 3 element tuple 4ad979a534 Mark "test_port_creation_and_deletion" as unstable 9ac59e4b4a Avoid retrieving ports if network list is empty 4bac350f68 Remove "neutron-ovn-tempest-ovs-release-ubuntu-old" job b19b55909d Don't set and remove immediately DEAD VLAN tag in tests 88ce859b56 Change API to validate network MTU minimums 9f22dc1d3a Doc: Add FWaaS v2 install details 853dc2570d Add py39 jobs to tox override template 39d252da7c Deprecated support for Windows OS 82029c2c51 Use a writer context for the online alembic migrations 2cafe0a9c4 Revert "Move to python3.9 as minimal python version" f93c9be1c1 Move to python3.9 as minimal python version 4e27e27ae2 Replace context decorators with context managers dd184c5c10 Fix Loki tempest jobs b31453af47 [OVN] Admin procedure for duplicated or deleted OVN agents 872b53f618 Fix functional tests modules which are using PluginFixture 670cc383e0 [S-RBAC] Switch to new policies by default d757c530bc Update QoS documentation a84567b8d6 Remove the ``OVNSqlFixture`` class workaround 05ba4257de Remove creation of DHCP port in the OVN metadata unit test f23d7af8d7 Use explicit inner join for networks in port query 43829301f3 Handle "no such process" during keepalived process cleanup 34ea8988d6 [OVN] Add update event to ``OVSInterfaceEvent`` class a5e26408d2 Fix dns_integration and ml2 plugin unit tests modules 5db17654b9 Fix servicetype unit tests module f92d6fa72a Fix segments unit tests module 6b5acb5835 [S-RBAC] Get availability zone API available for READER role 340fd3cfe7 Run master jobs only on master branch 706a0e0268 Fix parent of neutron-ovn-tempest-with-uwsgi-loki 28961c8b76 Fix network_segment_range unit tests module 73ac4510c7 [grenade] Collect ovn services logs 2364327bd1 Run periodic jobs in experimental queue too 9d51633013 Fix intermittent failures in finding metada port in SB DB 267efd2984 OVN: Always try and create a metadata port on subnets c7ef824941 Do not check the context object in ``TestMeteringPlugin`` 5510cdab92 [ovn] OVNClient._get_router_ports: Drop unused parameter e5d4499672 [ovn] Drop use of LR OVN_GW_NETWORK_EXT_ID_KEY d67d1c2736 [ovn] Drop use of OVN_GW_PORT_EXT_ID_KEY 69f30c92ef [sqlalchemy-20] Add reader context to ``get_ports_on_host_by_subnet`` 7dfbdf65a7 Add support for localnet_learn_fdb OVN option e374b82d8f [CI][fullstack/functional] Report slowest tests 8eecccfeae [S-RBAC] Allow network owners to get ports from that network 95c19c8868 Checkout "sqlalchemy/alembic" main branch in sqlalchmey-master jobs 3de8ebebd8 Pin OVS_BRANCH to working commit a06fe7cfd9 Fix NoSuchOptError error in Ipam unit tests 5a17f2b24a Pass physical bridge informations to OVS agent extension API 33cf2cdc83 Fix ACL sync when default sg group is created 7828acaf4f [ovn] Add end to end test for QosExtension 2aee961ab6 Suppress IPv6 metadata DAD failure and delete address ade2a9f893 Mark "test_multiple_agents_for_network" as unstable fa172ab7dc rbacs: fix typo, s/cxt/ctx e6de524555 rbacs: filter out model that are already owned by context 7073410be3 Bump skip-level lower version to stable/zed 775d5de9f1 Add debug information to ``MacvtapAgentTestCase.test_get_all_devices`` 0ec04dd638 Ensure redirect-type=bridged not used for geneve networks d4654e3011 Filter out unsatisfied routers in SQL 33c4a2d97e Update url and package name 3cc28a004a Add plugin.spec to irrelevant-files b777aa57b2 Update the quota guide examples cfe38a0014 Change name of ``_TestIsSessionActive`` test case. 5c60d697c3 OVN agent: Stop registering unused options 27b3eacd3d Revert "Ensure vlan network traffic is not centralized" e4da60740b [sqlalchemy-20] Do not use strings for aatribute names in loader options 0a69dd5e3d [sqlalchemy-20] query.join should define one table/column per call 4b8e484e1d Increase port name size and type to internal 2ccf1e1e90 [OVN] OVN agent should register "Chassis_Private" by default f42f1cfa69 [sqlalchemy-20] Provide SQL "case" expression correct input paremeters 831ac3152d Fix a number of configuration typos 5b4ed5b117 Fix concurrent port binding activate 1646e5b28d Add neutron-lib project to the SQLAlchemy master branch CI jobs 0220236c63 Cleanup before executing "test_get_all_devices" 6e1dbe9781 Add oslo.db project to the SQLAlchemy master branch CI jobs 97aa84b69a Open the 2023.2 (Bobcat) DB branch c97dcfd03f doc: state that O flag can be 0 in dhcpv6-stateful 6358495720 Delete sg rule which remote is the deleted sg 04d3f889ef Fix metadata agent intermittent test failures 9704dca84e [OVN] Explicitly define the fixed IPs for the metadata port dea48cfc0a Only create a frozen Row on matching events 711fbb9820 Imported Translations from Zanata 8ea2a9c128 Fix typo in unit test 442b437a81 Change external process manager tests to clean temp files efab60c0bf Try to optimize Mysql server mem usage on some CI jobs 745497a112 [OVN] Remove "update_port_qos_with_external_ids_reference" 5c98d9e8d1 [OVS] Parse the "permitted_ethertypes" at the FW initialization bffa642b35 [OVN] Method ``get_port_qos`` should always return 2 values 008277b8c1 [OVS] Allow custom ethertype traffic in the ingress table b9567033fc [OVN] Use the BW values retrieved from ``get_port_qos`` 08eb8e2498 Use neutron-lib policy rules c8ccf2ffbb [OVN] Change oslo config options entry point for the OVN agent cf96bd8bdf ovs: fix regression when vlan mapping is not already registered d44f164f4d ovn_idl_impl: fix a logic bug in get_sg_port_groups d9358b67bd functional: set dns_domain config option after its registration 8946684fb2 Remove duplicate rows in MySQL query output 5d2086c698 Add 2023.1 release name in routed networks doc b6bc4c8a66 Add Lajos Katona to Client and Doc areas as lieutenant d4a85833a7 [sqlalchemy-20] The Session.begin.subtransactions flag is deprecated 0a214b0437 Imported Translations from Zanata 999116126e Add full support for OVN NB "Gateway_Chassis" table 4254ccd1bc Update master for stable/2023.1 8e3bddbf8b Ensure vlan network traffic is not centralized 39b65575cd Change the release tag to use the release identification 44ac03de14 Fix policy unit test deprecation warnings ebcde41fc8 [OVN] Add ``get_gateway_chassis_az_hints`` method to OVN API 2af5fd889b Add sleep before checking if ovs port is in the namespace 12093015de Add Jens Harbott as Lieutenants in Infra area 75e8360224 Reintroduce agent bridge resync test 3cf4899cf0 [OVN] Adding support for VNIC type virtio-forwarder. f3c743d090 Do not update static routes in snat-ns for dvr router with ha Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pylintrc | 26 +- bindep.txt | 9 +- ...g-bgp-floating-ip-over-l2-segmented-network.rst | 420 +++++++------ .../shared/deploy-selfservice-initialnetworks.txt | 7 + .../internals/ovn/ovn_network_logging.rst | 114 ++-- .../contributor/internals/ovn/port_forwarding.rst | 110 ++-- .../contributor/testing/ci_scenario_jobs.rst | 23 - .../install/compute-install-option2-ubuntu.rst | 4 +- etc/oslo-config-generator/neutron.conf | 1 + neutron/agent/common/ip_lib.py | 9 + neutron/agent/common/ovsdb_monitor.py | 12 + neutron/agent/dhcp/agent.py | 12 +- .../l2/extensions/metadata}/__init__.py | 0 .../l2/extensions/metadata/host_metadata_proxy.py | 200 ++++++ neutron/agent/l3/agent.py | 7 +- neutron/agent/l3/dvr_edge_ha_router.py | 4 + neutron/agent/l3/dvr_edge_router.py | 19 +- neutron/agent/l3/dvr_local_router.py | 3 + neutron/agent/l3/router_info.py | 7 +- neutron/agent/l3_agent.py | 3 + neutron/agent/linux/dhcp.py | 111 ++-- neutron/agent/linux/interface.py | 2 +- neutron/agent/linux/ip_lib.py | 19 +- neutron/agent/linux/iptables_firewall.py | 6 +- neutron/agent/linux/iptables_manager.py | 14 +- .../agent/linux/openvswitch_firewall/firewall.py | 43 +- neutron/agent/linux/tc_lib.py | 2 +- neutron/agent/metadata/driver.py | 62 +- neutron/agent/metadata_agent.py | 3 + neutron/agent/ovn/agent/ovn_neutron_agent.py | 2 +- neutron/agent/ovn/agent/ovsdb.py | 9 +- neutron/agent/ovn/extensions/qos_hwol.py | 10 +- neutron/agent/ovn/metadata/agent.py | 25 +- neutron/agent/ovn/metadata/driver.py | 23 +- neutron/agent/ovn/metadata_agent.py | 2 + neutron/agent/ovn/ovn_neutron_agent.py | 6 +- neutron/agent/rpc.py | 3 +- neutron/api/rpc/callbacks/version_manager.py | 9 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 15 +- neutron/cmd/ovn/neutron_ovn_db_sync_util.py | 10 +- neutron/cmd/sanity/checks.py | 54 +- neutron/cmd/sanity_check.py | 25 + neutron/cmd/upgrade_checks/checks.py | 145 +++-- neutron/common/_constants.py | 6 + neutron/common/config.py | 2 +- neutron/common/metadata.py | 67 ++ neutron/common/ovn/constants.py | 9 +- neutron/common/ovn/exceptions.py | 7 +- neutron/common/ovn/extensions.py | 8 + neutron/common/ovn/hash_ring_manager.py | 9 +- neutron/common/ovn/utils.py | 237 ++++++++ neutron/common/utils.py | 40 +- neutron/conf/agent/common.py | 11 +- neutron/conf/agent/database/agents_db.py | 21 +- neutron/conf/agent/database/agentschedulers_db.py | 9 +- neutron/conf/agent/dhcp.py | 14 +- neutron/conf/agent/l3/config.py | 29 +- neutron/conf/agent/metadata/config.py | 45 +- neutron/conf/agent/ovn/metadata/config.py | 6 +- neutron/conf/agent/ovs_conf.py | 8 +- neutron/conf/agent/ovsdb_api.py | 4 +- neutron/conf/agent/securitygroups_rpc.py | 8 +- neutron/conf/common.py | 44 +- neutron/conf/db/dvr_mac_db.py | 8 +- neutron/conf/db/l3_agentschedulers_db.py | 4 +- neutron/conf/db/l3_dvr_db.py | 2 +- neutron/conf/db/l3_extra_gws_db.py | 36 ++ neutron/conf/db/l3_hamode_db.py | 16 +- neutron/conf/db/l3_ndpproxy_db.py | 2 +- neutron/conf/experimental.py | 5 + neutron/conf/extensions/conntrack_helper.py | 2 +- neutron/conf/plugins/ml2/drivers/agent.py | 6 +- neutron/conf/plugins/ml2/drivers/linuxbridge.py | 16 +- .../ml2/drivers/mech_sriov/mech_sriov_conf.py | 2 +- neutron/conf/plugins/ml2/drivers/ovn/ovn_conf.py | 50 +- neutron/conf/plugins/ml2/drivers/ovs_conf.py | 14 +- neutron/conf/policies/__init__.py | 4 + neutron/conf/policies/address_group.py | 8 +- neutron/conf/policies/address_scope.py | 18 +- neutron/conf/policies/agent.py | 23 +- neutron/conf/policies/auto_allocated_topology.py | 5 +- neutron/conf/policies/availability_zone.py | 11 +- neutron/conf/policies/base.py | 64 +- .../conf/policies/default_security_group_rules.py | 91 +++ neutron/conf/policies/flavor.py | 23 +- neutron/conf/policies/floatingip.py | 11 +- neutron/conf/policies/floatingip_pools.py | 3 +- .../conf/policies/floatingip_port_forwarding.py | 25 +- neutron/conf/policies/l3_conntrack_helper.py | 17 +- neutron/conf/policies/local_ip.py | 9 +- neutron/conf/policies/local_ip_association.py | 13 +- neutron/conf/policies/logging.py | 11 +- neutron/conf/policies/metering.py | 13 +- neutron/conf/policies/ndp_proxy.py | 9 +- neutron/conf/policies/network.py | 57 +- neutron/conf/policies/network_ip_availability.py | 3 +- neutron/conf/policies/network_segment_range.py | 9 +- neutron/conf/policies/port.py | 280 ++++----- neutron/conf/policies/port_bindings.py | 75 +++ neutron/conf/policies/qos.py | 77 +-- neutron/conf/policies/quotas.py | 7 +- neutron/conf/policies/rbac.py | 21 +- neutron/conf/policies/router.py | 77 ++- neutron/conf/policies/security_group.py | 21 +- neutron/conf/policies/segment.py | 9 +- neutron/conf/policies/service_type.py | 5 +- neutron/conf/policies/subnet.py | 35 +- neutron/conf/policies/subnetpool.py | 25 +- neutron/conf/policies/trunk.py | 15 +- neutron/conf/quota.py | 16 +- neutron/conf/service.py | 2 +- neutron/conf/services/extdns_designate_driver.py | 4 +- neutron/db/address_group_db.py | 1 + neutron/db/address_scope_db.py | 7 +- neutron/db/agents_db.py | 22 +- neutron/db/db_base_plugin_common.py | 11 +- neutron/db/db_base_plugin_v2.py | 92 ++- neutron/db/dvr_mac_db.py | 1 + neutron/db/external_net_db.py | 24 +- neutron/db/ipam_backend_mixin.py | 2 +- neutron/db/l3_agentschedulers_db.py | 4 +- neutron/db/l3_attrs_db.py | 10 +- neutron/db/l3_db.py | 102 +++- neutron/db/l3_dvr_db.py | 26 +- neutron/db/l3_dvrscheduler_db.py | 2 +- neutron/db/l3_extra_gws_db.py | 577 ++++++++++++++++++ neutron/db/l3_hamode_db.py | 89 ++- neutron/db/migration/__init__.py | 6 +- ...53938cdc1_update_segment_networks_constraint.py | 3 + .../0aefee21cd87_remove_dedundant_indexes.py | 65 ++ ...19773d7_create_l3harouternetwork_project_id_.py | 40 ++ .../2023.2/expand/6f1145bff34c_port_hints.py | 45 ++ .../expand/89c58a70ceba_ecmp_bfd_attributes.py | 39 ++ .../93f394357a27_remove_in_use_on_subnets.py | 42 ++ .../b1199a3adbef_de_duplicate_indices_for_ports.py | 54 ++ .../c33da356b165_security_group_default_rules.py | 130 ++++ .../alembic_migrations/versions/EXPAND_HEAD | 2 +- .../liberty/expand/45f955889773_quota_usage.py | 2 +- .../2b4c2465d44b_dvr_sheduling_refactoring.py | 29 +- .../mitaka/contract/4ffceebfcdc_standard_desc.py | 11 +- .../8a6d8bdae39_migrate_neutron_resources_table.py | 23 +- ...tributes_to_support_external_dns_integration.py | 15 +- ...86_add_binding_index_to_routerl3agentbinding.py | 19 +- .../7bbb25278f53_device_owner_ha_replicate_int.py | 21 +- .../7d9d8eeec6ad_rename_tenant_to_project.py | 2 +- .../8fd3918ef6f4_add_segment_host_mapping.py | 5 +- .../newton/contract/97c25b0d2353_add_name_desc.py | 25 +- .../a84ccf28f06a_migrate_dns_name_from_port.py | 21 +- .../a8b517cff8ab_add_routerport_bindings_for_ha.py | 29 +- ...12a3ef66e62_add_standardattr_to_qos_policies.py | 27 +- .../62c781cb6192_add_qos_policies_default_table.py | 1 - .../804a3c76314c_add_data_plane_status_to_port.py | 2 +- ...2437bf41_add_propagate_uplink_status_to_port.py | 2 +- ...454a9655_add_dns_publish_fixed_ip_to_subnets.py | 3 +- .../expand/86274d77933e_change_mtu_to_not_null.py | 11 +- .../Ibac91d24da2_port_forwarding_description.py | 19 +- .../expand/c3e9d13c4367_add_binding_index_to_.py | 17 +- .../fd6107509ccd_ovn_distributed_device_owner.py | 9 +- ...766_add_standard_attributes_to_address_group.py | 21 +- ...8d6f371_rbac_target_tenant_to_target_project.py | 2 +- .../expand/ba859d649675_add_indexes_to_rbacs.py | 26 +- .../I43e0b669096_port_forwarding_port_ranges.py | 27 +- neutron/db/migration/cli.py | 5 +- neutron/db/models/address_group.py | 2 +- neutron/db/models/address_scope.py | 2 +- neutron/db/models/data_plane_status.py | 2 +- neutron/db/models/dns.py | 12 +- neutron/db/models/l3_attrs.py | 6 + neutron/db/models/l3ha.py | 5 + neutron/db/models/port_hints.py | 35 ++ neutron/db/models/securitygroup.py | 2 +- neutron/db/models/securitygroup_default_rules.py | 47 ++ neutron/db/models/segment.py | 2 - neutron/db/models/tag.py | 2 +- neutron/db/models/uplink_status_propagation.py | 2 +- neutron/db/models_v2.py | 60 +- neutron/db/ovn_hash_ring_db.py | 78 ++- neutron/db/ovn_revision_numbers_db.py | 18 +- neutron/db/port_hints_db.py | 53 ++ neutron/db/qos/models.py | 4 +- neutron/db/quota/models.py | 4 +- neutron/db/securitygroups_db.py | 301 +++++++-- neutron/db/securitygroups_rpc_base.py | 12 +- neutron/debug/README | 38 -- neutron/debug/commands.py | 130 ---- neutron/debug/debug_agent.py | 176 ------ neutron/debug/shell.py | 92 --- neutron/exceptions/mtu.py | 28 + neutron/extensions/l3_extra_gws.py | 22 + neutron/extensions/network_ha.py | 21 + neutron/extensions/network_ip_availability.py | 6 +- neutron/extensions/port_hint_ovs_tx_steering.py | 21 + neutron/extensions/port_hints.py | 20 + .../extensions/security_groups_default_rules.py | 76 ++- neutron/locale/de/LC_MESSAGES/neutron.po | 452 +------------- neutron/locale/es/LC_MESSAGES/neutron.po | 411 +------------ neutron/locale/fr/LC_MESSAGES/neutron.po | 415 +------------ neutron/locale/it/LC_MESSAGES/neutron.po | 409 +------------ neutron/locale/ja/LC_MESSAGES/neutron.po | 404 +----------- neutron/locale/ko_KR/LC_MESSAGES/neutron.po | 372 +----------- neutron/locale/pt_BR/LC_MESSAGES/neutron.po | 400 +----------- neutron/locale/ru/LC_MESSAGES/neutron.po | 401 +----------- neutron/locale/zh_CN/LC_MESSAGES/neutron.po | 348 +---------- neutron/locale/zh_TW/LC_MESSAGES/neutron.po | 352 +---------- neutron/objects/db/api.py | 18 +- neutron/objects/l3agent.py | 4 +- neutron/objects/port/extensions/port_hints.py | 53 ++ neutron/objects/port_forwarding.py | 13 +- neutron/objects/ports.py | 9 +- neutron/objects/router.py | 74 ++- neutron/objects/securitygroup_default_rules.py | 58 ++ neutron/objects/subnet.py | 8 + neutron/opts.py | 9 +- neutron/pecan_wsgi/hooks/policy_enforcement.py | 3 +- neutron/plugins/ml2/driver_context.py | 2 +- neutron/plugins/ml2/drivers/agent/_common_agent.py | 15 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 4 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 2 +- .../agent/extension_drivers/qos_driver.py | 156 +++-- .../openvswitch/agent/openflow/native/br_int.py | 89 ++- .../openvswitch/agent/openflow/native/br_tun.py | 16 +- .../openvswitch/agent/ovs_agent_extension_api.py | 17 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 18 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 104 +++- .../plugins/ml2/drivers/ovn/agent/neutron_agent.py | 10 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 80 ++- .../ml2/drivers/ovn/mech_driver/ovsdb/api.py | 9 + .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 40 +- .../ovn/mech_driver/ovsdb/extensions/qos.py | 11 - .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 22 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 298 +++++++-- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 570 +++++++++-------- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 85 ++- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 70 ++- .../ml2/extensions/port_hint_ovs_tx_steering.py | 35 ++ neutron/plugins/ml2/extensions/port_hints.py | 45 ++ neutron/plugins/ml2/plugin.py | 34 +- neutron/policy.py | 23 +- neutron/profiling/profiled_decorator.py | 63 +- neutron/scheduler/l3_agent_scheduler.py | 17 +- neutron/scheduler/l3_ovn_scheduler.py | 23 +- neutron/server/__init__.py | 1 + neutron/service.py | 5 +- neutron/services/l3_router/l3_router_plugin.py | 5 +- neutron/services/logapi/common/db_api.py | 11 +- .../logapi/drivers/openvswitch/ovs_firewall_log.py | 2 +- neutron/services/logapi/drivers/ovn/driver.py | 86 ++- neutron/services/loki/loki_plugin.py | 4 +- neutron/services/network_ip_availability/plugin.py | 4 +- neutron/services/ovn_l3/plugin.py | 35 +- neutron/services/qos/qos_plugin.py | 8 +- neutron/services/tag/tag_plugin.py | 3 + .../trunk/drivers/openvswitch/agent/driver.py | 5 +- .../drivers/openvswitch/agent/ovsdb_handler.py | 7 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 25 +- neutron/services/trunk/plugin.py | 7 +- .../agent/l3/test_keepalived_state_change.py | 2 +- .../functional/agent/l3/test_metadata_proxy.py | 173 +++++- .../functional/agent/linux/test_keepalived.py | 17 +- .../agent/ovn/extensions/test_qos_hwol.py | 49 +- .../agent/ovn/metadata/test_metadata_agent.py | 61 +- .../test_ba859d649675_add_indexes_to_rbacs.py | 55 ++ .../test_c3e9d13c4367_add_binding_index_to_.py | 29 +- .../macvtap/agent/test_macvtap_neutron_agent.py | 25 +- .../ovn/mech_driver/ovsdb/extensions/test_qos.py | 202 +++++- .../drivers/ovn/mech_driver/ovsdb/test_impl_idl.py | 38 ++ .../ovn/mech_driver/ovsdb/test_maintenance.py | 158 ++++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 86 +++ .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 40 +- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 118 +++- .../drivers/ovn/mech_driver/test_mech_driver.py | 90 ++- .../privileged/agent/linux/test_tc_lib.py | 44 +- .../scheduler/test_l3_agent_scheduler.py | 6 + .../l3_router/test_l3_dvr_ha_router_plugin.py | 13 +- .../l3_router/test_l3_dvr_router_plugin.py | 78 ++- .../services/logapi/drivers/ovn/test_driver.py | 9 +- .../functional/services/ovn_l3/test_plugin.py | 42 +- .../portforwarding/test_port_forwarding.py | 7 +- .../trunk/drivers/ovn/test_trunk_driver.py | 37 +- .../l2/extensions/metadata}/__init__.py | 0 .../metadata/test_host_metadata_proxy.py | 104 ++++ .../linux/openvswitch_firewall/test_firewall.py | 22 + .../unit/agent/linux/test_external_process.py | 113 ++-- .../unit/agent/linux/test_iptables_manager.py | 34 ++ .../api/rpc/handlers/test_securitygroups_rpc.py | 114 +++- .../unit/conf/policies/test_availability_zone.py | 6 - .../policies/test_default_security_group_rules.py | 133 ++++ .../policies/test_floatingip_port_forwarding.py | 347 ++++++----- .../unit/extensions/test_availability_zone.py | 21 +- .../unit/extensions/test_data_plane_status.py | 12 +- .../unit/extensions/test_default_subnetpools.py | 8 +- .../test_expose_port_forwarding_in_fip.py | 22 +- .../extensions/test_floating_ip_port_forwarding.py | 31 +- .../unit/extensions/test_l3_conntrack_helper.py | 21 +- .../extensions/test_network_ip_availability.py | 86 ++- .../unit/extensions/test_network_segment_range.py | 36 +- .../test_security_groups_default_rules.py | 484 +++++++++++++++ .../unit/extensions/test_subnet_service_types.py | 5 +- .../unit/extensions/test_subnetpool_prefix_ops.py | 4 +- .../objects/port/extensions/test_port_hints.py | 33 + .../objects/test_securitygroup_default_rules.py | 27 + .../ml2/drivers/agent/test__common_agent.py | 11 +- .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 68 ++- .../agent/extension_drivers/test_qos_driver.py | 34 +- .../agent/openflow/native/test_br_int.py | 47 +- .../agent/openflow/native/test_br_tun.py | 33 +- .../agent/test_ovs_agent_extension_api.py | 8 + .../openvswitch/agent/test_ovs_neutron_agent.py | 122 ++++ .../drivers/openvswitch/agent/test_ovs_tunnel.py | 9 +- .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 24 +- .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 85 ++- .../ovn/mech_driver/ovsdb/test_maintenance.py | 306 ++++++++-- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 269 +++++--- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 42 ++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 17 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 436 +++++++------ .../plugins/ml2/drivers/ovn/test_db_migration.py | 6 +- .../ml2/extensions/test_dns_domain_keywords.py | 6 +- .../plugins/ml2/extensions/test_dns_integration.py | 4 +- .../test_tag_ports_during_bulk_creation.py | 22 +- .../unit/plugins/ml2/test_extension_driver_api.py | 16 +- .../unit/plugins/ml2/test_tracked_resources.py | 51 +- .../unit/scheduler/test_l3_agent_scheduler.py | 44 +- .../unit/services/logapi/common/test_db_api.py | 7 + .../services/logapi/drivers/ovn/test_driver.py | 116 ++-- .../unit/services/metering/test_metering_plugin.py | 211 +++---- .../services/revisions/test_revision_plugin.py | 8 +- plugin.spec | 2 +- ...ecurity-group-rules-added-94a9ac6cdd1c538e.yaml | 23 + ...te-support-for-Windows-OS-80e32ef7e5e05b44.yaml | 5 + ...d-distributed-FIPs-config-0b4e9a92255cf4a8.yaml | 13 + ...dd-metadata-rate-limiting-bf0c17a31f86ee16.yaml | 8 + .../agent_down_time_max-af3b62763aaa2fe5.yaml | 6 + .../notes/bug-1953165-6e848ea2c0398f56.yaml | 16 + .../notes/bug-1986003-9bf5ca04f9304336.yaml | 10 + .../notes/bug-1999209-febf1fa3512556b3.yaml | 7 + .../notes/bug-2022914-edbf1ea3514596b8.yaml | 7 + ...p-agent-ovn-metadata-port-33a654ccb9554c65.yaml | 9 + .../notes/dvr-external-mac-934409413e515eb2.yaml | 10 + ...ce-scope-and-new-defaults-1f82a9eb71125f5d.yaml | 25 + ...tworks_unique_per_project-4d02e963cfc8d546.yaml | 8 + ...e_neutron_server-db-check-82fc780ff9455446.yaml | 7 + .../notes/hash-ring-cleanup-1079d2375082cebe.yaml | 6 + .../notes/localnet-learn-fdb-22469280b49701fc.yaml | 23 + ...d_enabled_as_experimental-c9bfe343a0beb334.yaml | 7 + .../network_ha_extension-99578e7ee47f47db.yaml | 8 + .../notes/new-my-ip-config-b8efeb05dd50cfd6.yaml | 9 + .../notes/new-my-ipv6-config-361b5dc824591fe5.yaml | 9 + ...uplink-status-propagation-4c232954f8b4f0ef.yaml | 7 + ...eduler-only-on-gw-chassis-33c22c1f5f7a73d4.yaml | 12 + .../ovn-mcast_flood_reports-4eee20856ccfc7d7.yaml | 7 + ...vn-recreate-metadata-port-76e2c0e651267aa0.yaml | 11 + ...n-trunk-check-parent-port-eeca2eceaca9d158.yaml | 6 + ...tual-port-prevent-binding-50efba5521e8a28e.yaml | 10 + ...port-hint-ovs-tx-steering-277a411933ed372b.yaml | 13 + .../notes/port-hints-d465bb2fa144537c.yaml | 12 + ..._ipamallocation_leftovers-9d72cc5f616f51e4.yaml | 7 + .../notes/redirect-type-f29e89ca97357fe9.yaml | 24 + ...ve_duplicated_ovn_chassis-df12fb6233ea3d3e.yaml | 17 + .../remove_neutron_debug-262a139650d71183.yaml | 6 + ...ork_subnet_mtu_validation-c221f22efcfae927.yaml | 22 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 59 +- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 4 +- requirements.txt | 8 +- roles/legacy_ebtables/tasks/main.yaml | 3 +- roles/nftables/tasks/main.yaml | 6 + setup.cfg | 5 +- tools/configure_for_func_testing.sh | 7 +- .../infrared/tripleo-ovn-migration/README.rst | 6 +- .../infrared/tripleo-ovn-migration/main.yml | 2 +- .../tripleo_environment/ovn_migration.sh | 4 +- .../playbooks/roles/recovery-backup/tasks/main.yml | 1 + tox.ini | 20 +- zuul.d/base.yaml | 98 +-- zuul.d/grenade.yaml | 27 +- zuul.d/job-templates.yaml | 106 ++-- zuul.d/project.yaml | 11 +- zuul.d/rally.yaml | 14 +- zuul.d/tempest-multinode.yaml | 89 +-- zuul.d/tempest-singlenode.yaml | 275 ++------- 519 files changed, 15886 insertions(+), 11354 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2b2d62fbb9..115c514170 100644 --- a/requirements.txt +++ b/requirements.txt @@ -23 +23 @@ netifaces>=0.10.4 # MIT -neutron-lib>=3.4.0 # Apache-2.0 +neutron-lib>=3.7.0 # Apache-2.0 @@ -37 +37 @@ oslo.i18n>=3.20.0 # Apache-2.0 -oslo.log>=4.5.0 # Apache-2.0 +oslo.log>=5.3.0 # Apache-2.0 @@ -47 +47 @@ oslo.upgradecheck>=1.3.0 # Apache-2.0 -oslo.utils>=4.8.0 # Apache-2.0 +oslo.utils>=6.2.0 # Apache-2.0 @@ -53 +53 @@ ovs>=2.10.0 # Apache-2.0 -ovsdbapp>=1.16.0 # Apache-2.0 +ovsdbapp>=2.2.1 # Apache-2.0

1 0

neutron 21.2.0 (zed)
by no-reply＠openstack.org 23 Nov '23

23 Nov '23

We are thrilled to announce the release of: neutron 21.2.0: OpenStack Networking This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 21.2.0 ^^^^^^ Known Issues ************ * When using ML2/OVN, during an upgrade procedure, the OVS system-id stored value can be changed. The ovn-controller service will create the "Chassis" and "Chassis_Private" registers based on this OVS system-id. If the ovn-controller process is not gracefully stopped, that could lead to the existence of duplicated "Chassis" and "Chassis_Private" registers in the OVN Southbound database. Bug Fixes ********* * [bug 2022914 (https://bugs.launchpad.net/neutron/+bug/2022914) Neutron-API supports using relays as the southbound connection in a ML2/OVN setup. Before the maintenance worker of the API required a leader_only connection, which was removed. * Fixed the scenario where the DHCP agent is deployed in conjunction with the OVN metadata agent in order to serve metadata for baremetal nodes. In this scenario, the DHCP agent would not set the route needed for the OVN metadata agent service resulting in baremetal nodes not being able to query the metadata service. For more information see bug 1982569 (https://bugs.launchpad.net/neutron/+bug/1982569) * For OVN versions v22.09.0 and above, the "mcast_flood_reports" option is now set to "false" on all ports except "localnet" types. In the past, this option was set to "true" as a workaround for a bug in core OVN multicast implementation. * Now the ML2/OVN trunk driver prevents a trunk creation if the parent port is already bound. In the same way, if a parent port being used in a trunk is bound, the trunk cannot be deleted. * During the port bulk creation, if an IPAM allocation fails (for example, if the IP address is outside of the subnet CIDR), the other IPAM allocations already created are deleted before raising the exception. Fixes bug 2039550 (https://launchpad.net/bugs/2039550) * A new OVN maintenance method "remove_duplicated_chassis_registers" is added. This method will periodically check the OVN Southbound "Chassis" and "Chassis_Private" tables looking for duplicated registers. The older ones (based on the "Chassis_Private.nb_cfg_timestamp" value) will be removed when more than one register has the same hostname, that should be unique. Other Notes *********** * The external_mac entry in the NAT table is used to distribute/centralize the traffic to the FIPs. When there is an external_mac set the traffic is distributed (DVR). When it is empty it is centralized through the gateway port (no DVR). Upon port status transition to down, the external_mac was removed regardless of DVR being enabled or not, leading to centralize the FIP traffic for DVR -- though it was for down ports that won't accept traffic anyway. * Adds a maintenance task that runs once a day and is responsible for cleaning up Hash Ring nodes that haven't been updated in 5 days or more. See LP #2033281 for more information. * Added the missing extension "uplink-status-propagation" to the ML2/OVN mechanism driver. This extension is used by the ML2/SR-IOV mechanism driver, that could be loaded with ML2/OVN. Now it is possible to create ports with the "uplink-status-propagation" flag defined. Changes in neutron 21.1.2..21.2.0 --------------------------------- 15d5db0d6e Ensure ovn loadbalancer FIPs are centralized upon neutron restarts 0e38f2ab9a [Fullstack] Drop all linuxbridge scenarios from fullstack tests 67c1b0df24 [Stable Only] Fix parent for nftables job 66a55a2844 Restore the tempest nftables jobs in experimental and periodic queues d869affee8 [DHCP agent] Add route to OVN metadata port if exists d1e3446133 Send ovn heatbeat more often. a7e91a84aa Spread OVN metadata agent heartbeat response in time 85b25009af "ebtables-nft" MAC rule deletion failing 717eb38991 Remove any IPAM allocation if port bulk creation fails 6476edc986 Add dhcpagentscheduler API extension to the ML2/OVN extensions d9596fd18f [stable-only] Replace cirros image versions not cached in the CI d3001b6f63 Parameter filters may be None, which cannot be called with ** 373d8ee969 Use safer methods to get security groups on security group logging 3152bc14f8 [OVN] Fix rate and burst for stateless security groups 3597474477 [OVN] Add the default condition check in ``PortBindingChassisEvent`` 0364f18848 [OVN] Match LSP_TYPE_VIRTUAL in PortBindingUpdateVirtualPortsEvent 904db03f3e Revert "[OVN][Trunk] Add port binding info on subport when parent is bound" d25c129ec2 Reduce lock contention on subnets 86bc3761d1 [PostgreSQL] Subnet entity with ServiceType grouped by both tables e27a4af2b1 Add 3 secs to wait for keepalived state change 52b8d5cf0c Use HasStandardAttributes as parent class for Tags DB model a48f34022d Switch fullstack/functional fips jobs to 9-stream 40c2afc2dc Functional: assert multiple calls for update_virtual_port_host 37d09f95cd Call the "tc qdisc" command for ingress qdisc without parent f3409f6b6c Revert "[OVN][Trunk] Set the subports correct host during live migration" 810c813adf Improve the ``PortBindingUpdateVirtualPortsEvent`` match filter d08194bbb7 [FT] Make explicit the "publish" call check in "test_port_forwarding" 850da2af84 [OVN] Cleanup old Hash Ring node entries e369dbf32e [OVN] Add the 'uplink-status-propagation' extension to ML2/OVN 1ce5ef7f83 [OVN][Trunk] Set the subports correct host during live migration 6a9990dba1 [OVN] Skip the port status UP update during a live migration 9a537fdf6c Fix ovn-metadata agent sync of unused namespaces 7da91baa25 [OVN] Disable the mcast_flood_reports option for LSPs bc71377ba7 [OVN] ovn-db-sync check for router port differences 7364c5527f hash-ring: Retry all DB operations if inactive 3729df1181 [OVN] Retry retrieving LSP hosting information 2e50aef67a [UT] Create network to make lazy loading in the models_v2 possible b96dc966ce dvr: Avoid installing non-dvr openflow rule on startup ebd19805b8 [OVN] Hash Ring: Better handle Neutron worker failures a34549294c [neutron-api] remove leader_only for sb connection a131686abf Fix ACL sync when default sg group is created 4f2de74171 [OVN][L3] Optimize FIP update operation bfdc1bf25a Set result when lswitch port exist b9b819d766 Ensure traffic is not centralized if DVR is enabled 1fe05c561c Don't allow deletion of the router ports without IP addresses a03a60e89d Disable pool recycle in tests 4d09a6f7de Delete sg rule which remote is the deleted sg 984193b0dc [OVN] Expose chassis hosting information in LSP 0d499808f1 [OVN] Prevent Trunk creation/deletion with parent port bound 7972c1e224 Load FIP information during initialize not init ad78bd4ca2 [OVN] Hash Ring: Set nodes as offline upon exit b4f7c9dff4 [OVN] Improve Hash Ring logs f1d7dbc3e7 [qos] _validate_create_network_callback return in no network a1547abb99 [OVN] Remove SB "Chassis"/"Chassis_Private" duplicated registers Diffstat (except docs and test files) ------------------------------------- neutron/agent/l3/dvr_local_router.py | 3 + neutron/agent/linux/dhcp.py | 64 +++++--- neutron/agent/ovn/metadata/agent.py | 44 ++++-- neutron/api/rpc/handlers/securitygroups_rpc.py | 7 + neutron/cmd/ovn/neutron_ovn_db_sync_util.py | 8 +- neutron/common/ovn/constants.py | 1 + neutron/common/ovn/exceptions.py | 7 +- neutron/common/ovn/extensions.py | 4 + neutron/common/ovn/hash_ring_manager.py | 9 +- neutron/common/ovn/utils.py | 7 + neutron/common/utils.py | 16 ++ neutron/db/address_group_db.py | 1 + neutron/db/db_base_plugin_v2.py | 2 +- neutron/db/ipam_backend_mixin.py | 2 +- neutron/db/l3_db.py | 9 -- neutron/db/l3_dvr_db.py | 15 +- neutron/db/models/tag.py | 2 +- neutron/db/models_v2.py | 52 +++++-- neutron/db/ovn_hash_ring_db.py | 78 ++++++++-- neutron/objects/subnet.py | 9 ++ .../ml2/drivers/linuxbridge/agent/arp_protect.py | 4 +- .../openvswitch/agent/openflow/native/br_tun.py | 16 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 18 ++- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 3 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 42 ++++-- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 1 + .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 4 + .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 128 ++++++++++++++-- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 163 +++++++++++++++++---- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 77 ++++++++-- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 63 ++++---- neutron/plugins/ml2/plugin.py | 17 ++- neutron/services/logapi/drivers/ovn/driver.py | 37 ++++- neutron/services/ovn_l3/plugin.py | 2 +- neutron/services/qos/qos_plugin.py | 4 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 39 +++-- neutron/services/trunk/plugin.py | 5 +- .../agent/l3/test_keepalived_state_change.py | 2 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 86 +++++++++-- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 18 +++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 98 ++++++++++++- .../privileged/agent/linux/test_tc_lib.py | 37 +++-- .../services/logapi/drivers/ovn/test_driver.py | 6 + .../trunk/drivers/ovn/test_trunk_driver.py | 75 ++++++---- .../api/rpc/handlers/test_securitygroups_rpc.py | 50 ++++++- .../agent/openflow/native/test_br_tun.py | 33 ++++- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 9 +- .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 2 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 83 ++++++++++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 132 ++++++++++++++++- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 42 ++++++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 17 ++- .../drivers/ovn/mech_driver/test_mech_driver.py | 41 ++++-- .../services/logapi/drivers/ovn/test_driver.py | 41 ++++-- .../trunk/drivers/ovn/test_trunk_driver.py | 2 - .../notes/bug-2022914-edbf1ea3514596b8.yaml | 7 + ...p-agent-ovn-metadata-port-33a654ccb9554c65.yaml | 9 ++ .../notes/dvr-external-mac-934409413e515eb2.yaml | 10 ++ .../notes/hash-ring-cleanup-1079d2375082cebe.yaml | 6 + ...uplink-status-propagation-4c232954f8b4f0ef.yaml | 7 + .../ovn-mcast_flood_reports-4eee20856ccfc7d7.yaml | 7 + ...n-trunk-check-parent-port-eeca2eceaca9d158.yaml | 6 + ..._ipamallocation_leftovers-9d72cc5f616f51e4.yaml | 7 + ...ve_duplicated_ovn_chassis-df12fb6233ea3d3e.yaml | 17 +++ roles/nftables/tasks/main.yaml | 6 + zuul.d/base.yaml | 22 +-- zuul.d/job-templates.yaml | 4 +- zuul.d/tempest-multinode.yaml | 24 +-- zuul.d/tempest-singlenode.yaml | 12 +- 95 files changed, 1789 insertions(+), 496 deletions(-)

1 0

sushy 4.7.0 (caracal)
by no-reply＠openstack.org 23 Nov '23

23 Nov '23

We are delighted to announce the release of: sushy 4.7.0: Sushy is a small Python library to communicate with Redfish based systems This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 4.7.0 ^^^^^ New Features * Adds functionality to the "set_system_boot_options" method permitting an "http_boot_uri" option to be set. * Adds an "http_boot_uri" option to the System boot object, permitting an API client user to view what the BMC's redfish "HttpBootUri" setting is. Changes in sushy 4.6.0..4.7.0 ----------------------------- 7340b34 Adds an option for setting the http boot uri Diffstat (except docs and test files) ------------------------------------- ...add-http-boot-uri-support-5c25816e13ccdb27.yaml | 9 +++ sushy/resources/system/system.py | 36 +++++++++++- 4 files changed, 110 insertions(+), 5 deletions(-)

1 0

ovsdbapp 2.5.0 (caracal)
by no-reply＠openstack.org 21 Nov '23

21 Nov '23

We joyfully announce the release of: ovsdbapp 2.5.0: A library for creating OVSDB applications This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 2.4.1..2.5.0 -------------------------------- ef564d6 nb: allow to add route even if learned route exists 02a7b2b TAAS: Add commands for creating Mirrors dae455b nb: provide 'route_table' in lr-route-{add,del,list} 033b6e3 nb: add 'nexthop' argument to 'lr_route_del' 6193545 Handle events with conditions and match_fn dd56fd5 venv: unit tests don't work for 'hardware_vtep' a39b4f8 Update master for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/event.py | 12 + ovsdbapp/constants.py | 1 + ovsdbapp/schema/ovn_northbound/api.py | 93 +++++++- ovsdbapp/schema/ovn_northbound/commands.py | 142 +++++++++++- ovsdbapp/schema/ovn_northbound/impl_idl.py | 37 +++- .../schema/hardware_vtep/test_impl_idl.py | 14 ++ .../schema/ovn_northbound/test_impl_idl.py | 244 ++++++++++++++++++++- .../functional/schema/ovn_southbound/event.py | 11 + .../schema/ovn_southbound/test_impl_idl.py | 16 ++ ovsdbapp/venv.py | 6 +- releasenotes/source/2023.2.rst | 6 + releasenotes/source/index.rst | 1 + tox.ini | 2 +- 13 files changed, 560 insertions(+), 25 deletions(-)

1 0

os-vif 3.3.0 (caracal)
by no-reply＠openstack.org 20 Nov '23

20 Nov '23

We are excited to announce the release of: os-vif 3.3.0: A library for plugging and unplugging virtual interfaces in OpenStack. This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/os-vif Download the package from: https://pypi.org/project/os-vif Please report issues through: https://bugs.launchpad.net/os-vif/+bugs For more details, please see below. 3.3.0 ^^^^^ Bug Fixes * An issue when after nova-compute service restart configured with *isolate_vif=True* instances lost connectivity unless neutron rebinds ports. Which is normally happening by agent restart or port update. Changes in os-vif 3.2.0..3.3.0 ------------------------------ 458e8d5 Update master for stable/2023.2 0a0dec3 Don't break traffic if port already exists Diffstat (except docs and test files) ------------------------------------- ...-restart-with-isolate_vif-71617a41741b33e8.yaml | 7 ++++ releasenotes/source/2023.2.rst | 6 ++++ releasenotes/source/index.rst | 1 + vif_plug_ovs/ovs.py | 15 +++++++-- 5 files changed, 64 insertions(+), 4 deletions(-)

1 0

python-aodhclient 3.4.0 (caracal)
by no-reply＠openstack.org 20 Nov '23

20 Nov '23

We are gleeful to announce the release of: python-aodhclient 3.4.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/python-aodhclient Download the package from: https://pypi.org/project/python-aodhclient Please report issues through: https://bugs.launchpad.net/python-aodhclient/+bugs For more details, please see below. Changes in python-aodhclient 3.3.0..3.4.0 ----------------------------------------- 0a4b26b Prometheus alarms 6dd743f Fix gate 6cf6c49 Fix bindep.txt for python 3.11 job(Debian Bookworm) Diffstat (except docs and test files) ------------------------------------- aodhclient/v2/alarm.py | 6 ++++- aodhclient/v2/alarm_cli.py | 14 ++++++++++-- bindep.txt | 3 ++- tox.ini | 6 ++++- 5 files changed, 63 insertions(+), 5 deletions(-)

1 0

keystoneauth 5.4.0 (caracal)
by no-reply＠openstack.org 20 Nov '23

20 Nov '23

We joyfully announce the release of: keystoneauth 5.4.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/keystoneauth Download the package from: https://pypi.org/project/keystoneauth Please report issues through: https://bugs.launchpad.net/keystoneauth/+bugs For more details, please see below. 5.4.0 ^^^^^ Bug Fixes * Fixes a condition where URL parameters would be appended to a new URL discovered via a redirect. This was resulting in arguments being duplicated on requests to the new server being redirected to. URL redirects are intended to redirect the requester to the final location, and generally include a fully formatted final destination URL, which would include URL parameters. URL parameters are now dropped when attempting to issue a request once redirected. Changes in keystoneauth 5.3.0..5.4.0 ------------------------------------ 74f0524 Drop parameters when connecting to a redirected endpoint efba3f9 Update master for stable/2023.2 c800dce Keep request-id at redirect 66cd04e Add project URLs from README as packaging metadata Diffstat (except docs and test files) ------------------------------------- keystoneauth1/session.py | 11 +++++++++++ ...-url-parameters-on-redirect-13951b4a4c830d0f.yaml | 10 ++++++++++ releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + setup.cfg | 5 +++++ 6 files changed, 53 insertions(+)

1 0

keystonemiddleware 10.5.0 (caracal)
by no-reply＠openstack.org 20 Nov '23

20 Nov '23

We are satisfied to announce the release of: keystonemiddleware 10.5.0: Middleware for OpenStack Identity This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/keystonemiddleware Download the package from: https://pypi.org/project/keystonemiddleware Please report issues through: https://bugs.launchpad.net/keystonemiddleware/+bugs For more details, please see below. 10.5.0 ^^^^^^ New Features ************ * [blueprint enhance-oauth2-interoperability (https://blueprints.launchpad.net/keystone/+spec/enhance- oauth2-interoperability)] Added the ability to authenticate using a system-scoped token and the ability to authenticate using a cached token to the external_oauth2_token filter. * [blueprint enhance-oauth2-interoperability (https://blueprints.launchpad.net/keystone/+spec/enhance- oauth2-interoperability)] The external_oauth2_token filter has been added for accepting or denying incoming requests containing OAuth 2.0 access tokens that are obtained from an external authorization server by users through their OAuth 2.0 credentials. Bug Fixes ********* * In situation of encryption using memcached. Its possible that data in memcached becomes un-decryptable. The previous implementation of token cache was not correctly handling the case. Changes in keystonemiddleware 10.4.1..10.5.0 -------------------------------------------- 53b4cb2 External OAuth2.0 Authorization Server Support de15a61 External OAuth2.0 Authorization Server Support 7033768 auth_token: fix issue when data in cache gets corrupted Diffstat (except docs and test files) ------------------------------------- keystonemiddleware/auth_token/_cache.py | 4 + keystonemiddleware/external_oauth2_token.py | 972 +++++++++ .../unit/test_external_oauth2_token_middleware.py | 2260 ++++++++++++++++++++ ...e-oauth2-interoperability-b1a00f10887d33dd.yaml | 7 + ...e-oauth2-interoperability-dd998d4e0eafed3c.yaml | 8 + ...ache-data-corrupted-issue-d1bd546625690581.yaml | 6 + requirements.txt | 1 + setup.cfg | 1 + test-requirements.txt | 1 + 12 files changed, 3456 insertions(+) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index e8b640d..ff3577b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14,0 +15 @@ pycadf!=2.0.0,>=1.1.0 # Apache-2.0 +PyJWT>=2.4.0 # MIT diff --git a/test-requirements.txt b/test-requirements.txt index f56db0f..205323c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15,0 +16 @@ oslo.messaging>=5.29.0 # Apache-2.0 +PyJWT>=2.4.0 # MIT

1 0

octavia-lib 3.4.0 (caracal)
by no-reply＠openstack.org 20 Nov '23

20 Nov '23

We are chuffed to announce the release of: octavia-lib 3.4.0: A library to support Octavia provider drivers. This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/octavia-lib Download the package from: https://pypi.org/project/octavia-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/octavia-lib For more details, please see below. 3.4.0 ^^^^^ Bug Fixes * Fixed a possible receive timeout if the driver agent didn't respond inside five seconds. For example if you have a very slow database. Changes in octavia-lib 3.3.0..3.4.0 ----------------------------------- 395de65 Update master for stable/2023.2 2a84a21 Fix a possible receive timeout Diffstat (except docs and test files) ------------------------------------- octavia_lib/api/drivers/driver_lib.py | 16 ++++++++++++---- ...ble-receive-timeout-error-f6d2454c48eb10cf.yaml | 5 +++++ releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 5 files changed, 45 insertions(+), 5 deletions(-)

1 0

python-octaviaclient 3.6.0 (caracal)
by no-reply＠openstack.org 20 Nov '23

20 Nov '23

We contentedly announce the release of: python-octaviaclient 3.6.0: Octavia client for OpenStack Load Balancing This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/python-octaviaclient Download the package from: https://pypi.org/project/python-octaviaclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- octaviaclient For more details, please see below. 3.6.0 ^^^^^ Bug Fixes * Removed unneeded attributes that could have been passed to the API when calling "listener create", hsts_include_subdomains and hsts_preload were passed even when not used. It fixes an issue when using a recent python-octaviaclient release with older Octavia releases (without this HSTS feature). Changes in python-octaviaclient 3.5.0..3.6.0 -------------------------------------------- db6b62e Set default value for HSTS options to None Diffstat (except docs and test files) ------------------------------------- octaviaclient/osc/v2/listener.py | 2 ++ ...e-unneeded-attributes-in-listener-create-2e7cb2de281ac7fe.yaml | 8 ++++++++ 3 files changed, 13 insertions(+)

1 0

os-brick 6.5.0 (caracal)
by no-reply＠openstack.org 20 Nov '23

20 Nov '23

We are pleased to announce the release of: os-brick 6.5.0: OpenStack Cinder brick library for managing local volume attaches This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/os-brick Download the package from: https://pypi.org/project/os-brick Please report issues through: https://bugs.launchpad.net/os-brick/+bugs For more details, please see below. 6.5.0 ^^^^^ Bug Fixes * PowerFlex driver Bug #2013749 (https://bugs.launchpad.net/os- brick/+bug/2013749): Added new error code for powerflex 4.x which was causing this error. Added handling for the new error code returned from Powerflex 4.x when a we try to map a volume which is already mapped. Changes in os-brick 6.4.0..6.5.0 -------------------------------- bbc732c Revert "Dell PowerFlex password appears in plain text when creating a volume" 33661ec Dell PowerFlex password appears in plain text when creating a volume from an image 42d9a89 Dell Powerflex: Add new VOLUME_ALREADY_MAPPED_ERROR 034a6f2 Update master for stable/2023.2 eea10de Use generic testing template Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- os_brick/initiator/connectors/scaleio.py | 4 +++- releasenotes/notes/bug-2013749-3de9f827b82116a2.yaml | 9 +++++++++ releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 6 files changed, 29 insertions(+), 2 deletions(-)

1 0

python-magnumclient 4.3.0 (caracal)
by no-reply＠openstack.org 20 Nov '23

20 Nov '23

We are pumped to announce the release of: python-magnumclient 4.3.0: Client library for Magnum API This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/python-magnumclient Download the package from: https://pypi.org/project/python-magnumclient Please report issues through: https://bugs.launchpad.net/python-magnumclient/+bugs For more details, please see below. Changes in python-magnumclient 4.2.0..4.3.0 ------------------------------------------- fb28368 Bugfix: master_lb_enabled flag now works as intended. 3d5ab01 setup.cfg: rename deprecated dash-separated options 7f00f41 Update master for stable/2023.2 31a6c8f Use TOX_CONSTRAINTS_FILE bb49cef Add python 3.10 to setup.cfg metadata 13cafc1 Clean up tox.ini c30f10f Remove translation sections from setup.cfg Diffstat (except docs and test files) ------------------------------------- babel.cfg | 0 magnumclient/osc/v1/clusters.py | 2 +- releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + setup.cfg | 9 +++++---- tox.ini | 3 +-- 6 files changed, 14 insertions(+), 7 deletions(-)

1 0

python-venusclient 2.2.0 (caracal)
by no-reply＠openstack.org 20 Nov '23

20 Nov '23

We are thrilled to announce the release of: python-venusclient 2.2.0: Python client for venus API This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/python-venusclient Download the package from: https://pypi.org/project/python-venusclient Please report issues through: https://bugs.launchpad.net/openstack-venus/+bugs For more details, please see below. Changes in python-venusclient 2.1.0..2.2.0 ------------------------------------------ 9208ade Add delete-anomaly-rule in venusclient CLI 956a08e Combine 4 get-type-xxx to get-search-params in venusclient CLI 73f507b Add 'get-anomaly-rule' to venusclient 5a2b1f5 Add parameter desc of analyse-log of venusclient CLI 38abcf7 Add add_anomaly_rule to venusclient 594f204 modify search logs params in venusclient 8d6b6f6 Add set-custom-config subcommand to venusclient 1ca4f68 Document Format Modification 5e791c3 Update master for stable/2023.2 243f335 Adding get-instance-callchain subcommand to venusclient Diffstat (except docs and test files) ------------------------------------- HACKING.rst | 3 +- README.rst | 4 +- releasenotes/source/2023.2.rst | 6 +++ releasenotes/source/index.rst | 1 + venusclient/v1/analyse.py | 17 +++--- venusclient/v1/analyse_shell.py | 34 +++++++++++- venusclient/v1/anomaly.py | 35 ++++++++++++ venusclient/v1/anomaly_shell.py | 51 ++++++++++++++++++ venusclient/v1/config.py | 16 ++++++ venusclient/v1/config_shell.py | 15 ++++++ venusclient/v1/search.py | 89 ++++++++++++------------------- venusclient/v1/search_shell.py | 115 +++++++++++++++++++++++++++++++--------- 12 files changed, 291 insertions(+), 95 deletions(-)

1 0

python-manilaclient 4.7.0 (caracal)
by no-reply＠openstack.org 20 Nov '23

20 Nov '23

We are stoked to announce the release of: python-manilaclient 4.7.0: Client library for OpenStack Manila API. This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 4.7.0 ^^^^^ Bug Fixes * Fixed default share type lookup associated with the "openstack share create" command. The lookup now resolves default share types correctly even on environments where the default type isn't named "default". See launchpad bug #2030686 (https://launchpad.net/bugs/2030686) for more details. Changes in python-manilaclient 4.6.0..4.7.0 ------------------------------------------- a870c13 Fix default share type resolution in OSC 244e87a Fix "test_share_access_show" osc functional test 946c113 Fix decoder path and add transfer commands a078139 Update master for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- manilaclient/osc/v2/data/manila.csv | 5 +++++ manilaclient/osc/v2/share.py | 4 ++-- manilaclient/shell.py | 5 +++-- manilaclient/v2/share_types.py | 6 +++--- .../bug-2030686-fix-default-share-lookup-cc7e592a0dc855e1.yaml | 8 ++++++++ releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 9 files changed, 31 insertions(+), 8 deletions(-)

1 0

neutron-lib 3.9.0 (caracal)
by no-reply＠openstack.org 17 Nov '23

17 Nov '23

We are pumped to announce the release of: neutron-lib 3.9.0: Neutron shared routines and utilities This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 3.9.0 ^^^^^ New Features * Added support for more ciphers to the neutron-vpnaas API. Added encryption algorithms (AES CCM and AES GCM modes for 128/192/256 bit keys and 8/12/16 octet ICVs, e.g. aes-256-ccm-16), authentication algorithms (AES-XCBC, AES-CMAC) and PFS choices (Diffie Hellman groups 15 to 31). * "CallbacksManager" can now subscribe cancellable events. By default, only "before_" and "precommit_" events, in case of error, can raise a "CallbackFailure" exception. Now, if the event is subscribed with the flag "cancellable" enabled, the "publish" method will raise this exception if the callback fails and returns an error. Changes in neutron-lib 3.8.0..3.9.0 ----------------------------------- 8bb438d Switch to py311 sqlalchemy master job 343b2db Remove unmaintained API report tooling 825d292 Change test_sqlalchemytypes.py to support sqlalchemy 2.0 b7598da vpnaas: add support for more ciphers (auth, encryption, pfs modes) 08b8c6d Add the "cancellable" flag to the ``CallbacksManager`` events 1da7187 Imported Translations from Zanata bdebe1d Update master for stable/2023.2 7de2cb3 api-ref: Move sfc api-ref to neutron-lib Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + api-ref/source/v2/index.rst | 8 + api-ref/source/v2/parameters.yaml | 226 ++- .../samples/sfc-chains/port-chain-create-req.json | 15 + .../samples/sfc-chains/port-chain-create-resp.json | 16 + .../v2/samples/sfc-chains/port-chain-get-resp.json | 16 + .../samples/sfc-chains/port-chain-list-resp.json | 18 + .../samples/sfc-chains/port-chain-update-req.json | 16 + .../samples/sfc-chains/port-chain-update-resp.json | 16 + .../flow-classifier-create-req.json | 14 + .../flow-classifier-create-resp.json | 15 + .../sfc-classifiers/flow-classifier-get-resp.json | 15 + .../sfc-classifiers/flow-classifier-list-resp.json | 17 + .../flow-classifier-update-req.json | 8 + .../flow-classifier-update-resp.json | 15 + .../port-pair-group-create-req.json | 10 + .../port-pair-group-create-resp.json | 11 + .../port-pair-group-get-resp.json | 11 + .../port-pair-group-list-resp.json | 13 + .../port-pair-group-update-req.json | 10 + .../port-pair-group-update-resp.json | 11 + .../sfc-port-pairs/port-pair-create-req.json | 9 + .../sfc-port-pairs/port-pair-create-resp.json | 10 + .../samples/sfc-port-pairs/port-pair-get-resp.json | 10 + .../sfc-port-pairs/port-pair-list-resp.json | 13 + .../sfc-port-pairs/port-pair-update-req.json | 7 + .../sfc-port-pairs/port-pair-update-resp.json | 10 + .../service-graph-create-req.json | 22 + .../service-graph-create-resp.json | 25 + .../sfc-service-graphs/service-graph-get-resp.json | 25 + .../service-graph-list-resp.json | 39 + .../service-graph-update-req.json | 6 + .../service-graph-update-resp.json | 25 + api-ref/source/v2/sfc-chains.inc | 206 +++ api-ref/source/v2/sfc-classifiers.inc | 230 +++ api-ref/source/v2/sfc-port-pair-groups.inc | 202 +++ api-ref/source/v2/sfc-port-pairs.inc | 200 +++ api-ref/source/v2/sfc-servicegraph.inc | 189 +++ neutron_lib/api/definitions/__init__.py | 2 + neutron_lib/api/definitions/vpn.py | 68 +- neutron_lib/api/definitions/vpn_aes_ccm_gcm.py | 27 + neutron_lib/callbacks/events.py | 6 + neutron_lib/callbacks/exceptions.py | 7 +- neutron_lib/callbacks/manager.py | 74 +- neutron_lib/callbacks/registry.py | 6 +- .../locale/zh_CN/LC_MESSAGES/neutron_lib.po | 229 +-- .../unit/api/definitions/test_vpn_aes_ccm_gcm.py | 18 + .../notes/add-vpnaas-ciphers-6c1dffbc2cdc3225.yaml | 8 + ...anager-cancellable-events-966d76925db919a8.yaml | 8 + releasenotes/source/2023.2.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 317 ++++ test-requirements.txt | 1 + tools/api_report.sh | 93 -- tools/pyir.py | 1526 -------------------- tox.ini | 4 - 59 files changed, 2316 insertions(+), 1947 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 036b8a9..652d301 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8,0 +9 @@ coverage!=4.4,>=4.0 # Apache-2.0 +ddt>=1.0.1 # MIT

1 0

etcd3gw 2.2.0
by no-reply＠openstack.org 16 Nov '23

16 Nov '23

We are amped to announce the release of: etcd3gw 2.2.0: A python client for etcd3 grpc-gateway v3 API The source is available from: https://opendev.org/openstack/etcd3gw Download the package from: https://tarballs.openstack.org/etcd3gw/ For more details, please see below. Changes in etcd3gw 2.1.0..2.2.0 ------------------------------- 823914e Fix warnings in doc build f4751f1 Revert "Moves supported python runtimes from version 3.8 to 3.10" 9745e76 Moves supported python runtimes from version 3.8 to 3.10 1a2ddf8 Fix the docs job 714d366 Allow override of api path via ETCD3GW_API_PATH envvar Diffstat (except docs and test files) ------------------------------------- etcd3gw/client.py | 3 ++- setup.cfg | 1 + tox.ini | 1 - 5 files changed, 11 insertions(+), 7 deletions(-)

1 0

tooz 4.3.0
by no-reply＠openstack.org 16 Nov '23

16 Nov '23

We are pleased to announce the release of: tooz 4.3.0: Coordination library for distributed systems. The source is available from: https://opendev.org/openstack/tooz Download the package from: https://pypi.org/project/tooz For more details, please see below. 4.3.0 ^^^^^ Upgrade Notes * This version of tooz defaults to the *v3* endpoint for the *etcd3gw* backend. The previous behavior can be restored by appending *?api_version=v3alpha* to the coordination URL. The *v3alpha* and *v3beta* endpoints have been deprecated by upstream etcd. * The minimum redis-py version required is now >= 3.0.0 Changes in tooz 4.2.0..4.3.0 ---------------------------- 6ab9dfc Add missing % in diagnostic_lines.append call 738931d Update the default etcd3gw endpoint to v3 0feead5 Replace en-dash with ASCII minus in a docstring 378566d Change StrictRedis usage to Redis Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 20 -------------------- releasenotes/notes/etcd-3.4-eee8300c942a1263.yaml | 7 +++++++ .../notes/remove-strict-redis-555f0f4e369480e3.yaml | 4 ++++ setup-etcd-env.sh | 2 +- tooz/coordination.py | 2 +- tooz/drivers/etcd3gw.py | 4 ++-- tooz/drivers/pgsql.py | 2 +- tooz/drivers/redis.py | 4 ++-- 10 files changed, 24 insertions(+), 30 deletions(-)

1 0

oslo.messaging 14.2.3 (antelope)
by no-reply＠openstack.org 16 Nov '23

16 Nov '23

We are pleased to announce the release of: oslo.messaging 14.2.3: Oslo Messaging API This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 14.2.2..14.2.3 ---------------------------------------- 45a01414 Add is_admin to safe fields list for notifications 3645839d Disable greenthreads for RabbitDriver "listen" connections Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_rabbit.py | 2 ++ oslo_messaging/_utils.py | 3 +++ oslo_messaging/notify/notifier.py | 4 ++++ 3 files changed, 9 insertions(+)

1 0

oslo.messaging 12.13.3 (yoga)
by no-reply＠openstack.org 16 Nov '23

16 Nov '23

We are amped to announce the release of: oslo.messaging 12.13.3: Oslo Messaging API This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 12.13.2..12.13.3 ------------------------------------------ 047da4e5 Add is_admin to safe fields list for notifications Diffstat (except docs and test files) ------------------------------------- oslo_messaging/notify/notifier.py | 4 ++++ 1 file changed, 4 insertions(+)

1 0

python-cyborgclient 2.3.0 (caracal)
by no-reply＠openstack.org 16 Nov '23

16 Nov '23

We are psyched to announce the release of: python-cyborgclient 2.3.0: Python client for cyborg API This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/python-cyborgclient Download the package from: https://pypi.org/project/python-cyborgclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cyborg For more details, please see below. Changes in python-cyborgclient 2.2.1..2.3.0 ------------------------------------------- f2d73d3 Update master for stable/2023.2 528144a Add client api for enable and disable device 2ca2978 resolve keyerror for string format 0b8f60c add ut for delete attribute client exception error de34fc8 Update master for stable/2023.1 8c19a8f refactor the getid method base.py Diffstat (except docs and test files) ------------------------------------- cyborgclient/common/base.py | 5 +-- cyborgclient/osc/plugin.py | 2 +- cyborgclient/osc/v2/attribute.py | 2 +- cyborgclient/osc/v2/device.py | 55 ++++++++++++++++++++++-- releasenotes/source/2023.1.rst | 6 +++ releasenotes/source/2023.2.rst | 6 +++ releasenotes/source/index.rst | 2 + setup.cfg | 2 + 10 files changed, 86 insertions(+), 10 deletions(-)

1 0

python-neutronclient 11.1.0 (caracal)
by no-reply＠openstack.org 16 Nov '23

16 Nov '23

We joyfully announce the release of: python-neutronclient 11.1.0: CLI and Client Library for OpenStack Networking This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. Changes in python-neutronclient 11.0.0..11.1.0 ---------------------------------------------- ee6f6a1 Drop unused simplejson 8c983fa Imported Translations from Zanata b9152a5 OSC: Remove SFC V2 calls to neutronclient 396432a OSC: Remove VPNAAS V2 calls to neutronclient 6597c42 Update master for stable/2023.2 fccfe8c OSC: Remove FWAAS V2 calls to neutronclient Diffstat (except docs and test files) ------------------------------------- neutronclient/osc/v2/fwaas/firewallgroup.py | 103 +++--- neutronclient/osc/v2/fwaas/firewallpolicy.py | 118 +++--- neutronclient/osc/v2/fwaas/firewallrule.py | 86 +++-- neutronclient/osc/v2/sfc/sfc_flow_classifier.py | 98 +++-- neutronclient/osc/v2/sfc/sfc_port_chain.py | 147 ++++---- neutronclient/osc/v2/sfc/sfc_port_pair.py | 89 +++-- neutronclient/osc/v2/sfc/sfc_port_pair_group.py | 112 +++--- neutronclient/osc/v2/sfc/sfc_service_graph.py | 81 +++-- neutronclient/osc/v2/vpnaas/endpoint_group.py | 63 ++-- neutronclient/osc/v2/vpnaas/ikepolicy.py | 58 +-- .../osc/v2/vpnaas/ipsec_site_connection.py | 109 +++--- neutronclient/osc/v2/vpnaas/ipsecpolicy.py | 59 +-- neutronclient/osc/v2/vpnaas/vpnservice.py | 64 ++-- .../unit/osc/v2/vpnaas/test_endpoint_group.py | 59 ++- .../osc/v2/vpnaas/test_ipsec_site_connection.py | 105 +++--- releasenotes/source/2023.2.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 400 +++++++++++++++++++++ requirements.txt | 3 +- 35 files changed, 2032 insertions(+), 1512 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3ed2768..5a20fc0 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ netaddr>=0.7.18 # BSD -openstacksdk>=1.0.2 # Apache-2.0 +openstacksdk>=1.5.0 # Apache-2.0 @@ -25 +24,0 @@ requests>=2.14.2 # Apache-2.0 -simplejson>=3.5.1 # MIT

1 0

metalsmith 2.1.0 (caracal)
by no-reply＠openstack.org 15 Nov '23

15 Nov '23

We are chuffed to announce the release of: metalsmith 2.1.0: Deployment and Scheduling tool for Bare Metal This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/metalsmith For more details, please see below. Changes in metalsmith 2.0.1..2.1.0 ---------------------------------- 66a94ef Document LP as official bugtracker e4fd02f Metalsmith in maintenance mode 71192b1 Update master for stable/2023.2 9c928d3 Set role default metalsmith_provisioning_timeout Diffstat (except docs and test files) ------------------------------------- README.rst | 11 ++++++++--- .../roles/metalsmith_deployment/defaults/main.yml | 2 +- releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 4 files changed, 16 insertions(+), 4 deletions(-)

1 0

sushy 4.6.0 (caracal)
by no-reply＠openstack.org 15 Nov '23

15 Nov '23

We are tickled pink to announce the release of: sushy 4.6.0: Sushy is a small Python library to communicate with Redfish based systems This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 4.6.0 ^^^^^ Bug Fixes * Fixes missing ETag in PATCH operation against Redfish resources with backward compatibility for Redfish implementation which doesn't work with ETag in header. Changes in sushy 4.5.1..4.6.0 ----------------------------- 4ff512a Fix missing ETag when patching Redfish resource 82772d3 Update master for stable/2023.2 89a0988 Fix wrong _get_registry logic in ResourceBase Diffstat (except docs and test files) ------------------------------------- .../notes/fix-missing-etags-ded8c0bb31fafef7.yaml | 6 ++++++ releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + sushy/resources/base.py | 2 +- sushy/resources/chassis/chassis.py | 3 ++- sushy/resources/manager/virtual_media.py | 4 +++- sushy/resources/settings.py | 2 +- sushy/resources/system/bios.py | 4 ++++ sushy/resources/system/secure_boot.py | 4 +++- sushy/resources/system/storage/controller.py | 4 ++++ sushy/resources/system/storage/drive.py | 3 ++- sushy/resources/system/system.py | 3 ++- .../unit/resources/manager/test_virtual_media.py | 5 ++++- .../resources/system/storage/test_controller.py | 5 ++++- .../unit/resources/system/storage/test_drive.py | 4 +++- .../unit/resources/system/test_secure_boot.py | 4 +++- 20 files changed, 89 insertions(+), 26 deletions(-)

1 0

python-masakariclient 8.3.0 (caracal)
by no-reply＠openstack.org 15 Nov '23

15 Nov '23

We are amped to announce the release of: python-masakariclient 8.3.0: masakariclient module and a CLI tool for masakari This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/python-masakariclient Download the package from: https://tarballs.openstack.org/python-masakariclient/ Please report issues through: https://bugs.launchpad.net/python-masakariclient/+bugs For more details, please see below. 8.3.0 ^^^^^ New Features * Adds support for Masakari VMove API in microversion 1.3. Blueprint vm-evacuations-for-host-recovery Changes in python-masakariclient 8.2.0..8.3.0 --------------------------------------------- b43a4ce support for Masakari VMove Diffstat (except docs and test files) ------------------------------------- masakariclient/osc/v1/vmove.py | 134 +++++++++++++++++++++ masakariclient/plugin.py | 3 +- .../blueprint-add-vmoves-a74335fec8446523.yaml | 5 + setup.cfg | 2 + 5 files changed, 236 insertions(+), 1 deletion(-)

1 0

os-ken 2.8.0 (caracal)
by no-reply＠openstack.org 14 Nov '23

14 Nov '23

We are happy to announce the release of: os-ken 2.8.0: A component-based software defined networking framework for OpenStack. This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/os-ken Download the package from: https://pypi.org/project/os-ken Please report issues through: https://storyboard.openstack.org/#!/project/openstack/os-ken For more details, please see below. Changes in os-ken 2.7.0..2.8.0 ------------------------------ c57f2cc6 Avoid RuntimeError caused by iteration over sys.modules 15d41af6 Fix python shebang 3ccb5607 Update master for stable/2023.2 c18ac550 Remove duplicate requirements files 3fdfa3b2 Remove unused requirements file c2106add [CI] Run a ml2/ovs job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 ++-- os_ken/cmd/manager.py | 2 +- os_ken/cmd/of_config_cli.py | 2 +- os_ken/cmd/ofa_neutron_agent.py | 2 +- os_ken/cmd/rpc_cli.py | 2 +- releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + tools/doc-requires | 2 -- tools/normalize_json.py | 2 +- tools/optional-requires | 5 ----- tools/pip-requires | 7 ------- tools/topology_graphviz.py | 2 +- 18 files changed, 22 insertions(+), 29 deletions(-)

1 0

cliff 4.4.0 (caracal)
by no-reply＠openstack.org 14 Nov '23

14 Nov '23

We are pumped to announce the release of: cliff 4.4.0: Command Line Interface Formulation Framework This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/cliff Download the package from: https://pypi.org/project/cliff Please report issues through: https://storyboard.openstack.org/#!/project/openstack/cliff For more details, please see below. Changes in cliff 4.3.0..4.4.0 ----------------------------- 606644c Handle complex objects in yaml formatter better 2f3e17d Add pre-commit 13424d1 Fix pre-commit issues e02f89c Autofit table output if stdout is a tty 6096869 Fix flake8 violation E721 989c440 Use upper-constraint in doc generation f2215ba Clarification of the algorithm used Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 33 ++++++++++++++++++++++ bandit.yaml | 2 ++ cliff/formatters/table.py | 11 +++++++- cliff/formatters/yaml_format.py | 22 +++++++++------ cliff/utils.py | 8 +++--- demoapp/README.rst | 2 +- tox.ini | 4 ++- 15 files changed, 149 insertions(+), 44 deletions(-)

1 0

osc-lib 2.9.0 (caracal)
by no-reply＠openstack.org 14 Nov '23

14 Nov '23

We are jazzed to announce the release of: osc-lib 2.9.0: OpenStackClient Library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/osc-lib Download the package from: https://pypi.org/project/osc-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/osc-lib For more details, please see below. Changes in osc-lib 2.8.1..2.9.0 ------------------------------- 32b640f Update master for stable/2023.2 9af8b45 utils: Don't warn for partial formatter classes Diffstat (except docs and test files) ------------------------------------- osc_lib/utils/__init__.py | 16 ++++++++++++++-- releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 3 files changed, 21 insertions(+), 2 deletions(-)

1 0

mistral-extra 13.2.0 (caracal)
by no-reply＠openstack.org 14 Nov '23

14 Nov '23

We are thrilled to announce the release of: mistral-extra 13.2.0: Mistral OpenStack-specific bindings This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/mistral-extra Download the package from: https://pypi.org/project/mistral-extra Please report issues through: https://bugs.launchpad.net/mistral/+bugs For more details, please see below. Changes in mistral-extra 13.1.0..13.2.0 --------------------------------------- 3a86bd3 fix BaremetalIntrospectionAction loading failed 6482a86 Rename trove instances.edit to instances.update Diffstat (except docs and test files) ------------------------------------- mistral_extra/actions/openstack/actions.py | 19 ++++++++++++++++--- mistral_extra/actions/openstack/mapping.json | 2 +- 2 files changed, 17 insertions(+), 4 deletions(-)

1 0

oslo.messaging 14.5.0 (caracal)
by no-reply＠openstack.org 14 Nov '23

14 Nov '23

We are chuffed to announce the release of: oslo.messaging 14.5.0: Oslo Messaging API This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.5.0 ^^^^^^ Bug Fixes * Change heartbeat_rate default from 2 to 3 in order to send AMQP heartbeat frames at correct interval Changes in oslo.messaging 14.4.0..14.5.0 ---------------------------------------- 3438726d Add some logs when sending RPC messages d16cddd8 Move integration jobs to Ubuntu 22.04 (Jammy) 8759cd7d Imported Translations from Zanata a3715386 test py311 job c1b606f7 Add is_admin to safe fields list for notifications 7705b4f3 Update master for stable/2023.2 7da68f26 Add Python3 antelope unit tests 36fb5bce Set default heartbeat_rate to 3 ee13e536 Bump bandit and make oslo.messaging compatible with latest rules Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 42 ++++++++++------------ bindep.txt | 17 ++------- oslo_messaging/_drivers/impl_rabbit.py | 7 +++- oslo_messaging/_metrics/client.py | 3 +- oslo_messaging/notify/notifier.py | 4 +++ .../notes/heartbeat-rate-3-7ada9edbccc11a3f.yaml | 5 +++ releasenotes/source/2023.2.rst | 6 ++++ releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 37 ++++++++++++++++--- test-requirements.txt | 2 +- tox.ini | 8 ++--- 12 files changed, 83 insertions(+), 51 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3a7c44fc..daf74261 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -29 +29 @@ pyngus>=2.2.0 # Apache-2.0 -bandit>=1.6.0,<1.7.0 # Apache-2.0 +bandit>=1.7.0,<1.8.0 # Apache-2.0

1 0

oslo.log 5.4.0 (caracal)
by no-reply＠openstack.org 14 Nov '23

14 Nov '23

We are ecstatic to announce the release of: oslo.log 5.4.0: oslo.log library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.log Download the package from: https://pypi.org/project/oslo.log Please report issues through: https://bugs.launchpad.net/oslo.log/+bugs For more details, please see below. 5.4.0 ^^^^^ Deprecation Notes * Windows support has been deprecated, because of the retiremenet of the Winstackers project. Changes in oslo.log 5.3.0..5.4.0 -------------------------------- f3693db Deprecate Windows support ca1ef3b Update master for stable/2023.2 390a1d1 Catch RuntimeError when loading log config file Diffstat (except docs and test files) ------------------------------------- oslo_log/_options.py | 2 ++ oslo_log/log.py | 2 +- releasenotes/notes/deprecate-windows-support-75e6ac72310d5e72.yaml | 5 +++++ releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + 5 files changed, 15 insertions(+), 1 deletion(-)

1 0

oslo.context 5.3.0 (caracal)
by no-reply＠openstack.org 14 Nov '23

14 Nov '23

We enthusiastically announce the release of: oslo.context 5.3.0: Oslo Context library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.context Download the package from: https://pypi.org/project/oslo.context Please report issues through: https://bugs.launchpad.net/oslo.context/+bugs For more details, please see below. 5.3.0 ^^^^^ New Features * Added "redacted_copy" method to "RequestContext". This returns a copy of the context with secrets redacted. This will allow downstreams that inherit and enhance the "RequestContext" can include the additional data in the redacted copy if they wish by overriding the "redacted_copy" method. Changes in oslo.context 5.2.0..5.3.0 ------------------------------------ 059f9ba Add method for getting redacted copy of context 1e95f85 Update master for stable/2023.2 e70a618 Bump bandit Diffstat (except docs and test files) ------------------------------------- oslo_context/context.py | 36 ++++++++++++++++++++++ .../notes/redacted-copy-efd02c83c287451f.yaml | 7 +++++ releasenotes/source/2023.2.rst | 6 ++++ releasenotes/source/index.rst | 1 + test-requirements.txt | 2 +- 6 files changed, 66 insertions(+), 2 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 4aa0d27..1d38365 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +13 @@ stestr>=2.0.0 # Apache-2.0 -bandit>=1.6.0,<1.7.0 # Apache-2.0 +bandit>=1.7.0,<1.8.0 # Apache-2.0

1 0

oslo.vmware 4.3.0 (caracal)
by no-reply＠openstack.org 14 Nov '23

14 Nov '23

We are chuffed to announce the release of: oslo.vmware 4.3.0: Oslo VMware library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.vmware Download the package from: https://pypi.org/project/oslo.vmware Please report issues through: https://bugs.launchpad.net/oslo.vmware/+bugs For more details, please see below. Changes in oslo.vmware 4.2.0..4.3.0 ----------------------------------- 60da85c Imported Translations from Zanata 19b4d3c Add PBM WSDL for vSphere 8.0 da01521 Update master for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- oslo_vmware/wsdl/8.0/core-types.xsd | 287 + oslo_vmware/wsdl/8.0/pbm-messagetypes.xsd | 223 + oslo_vmware/wsdl/8.0/pbm-types.xsd | 1071 + oslo_vmware/wsdl/8.0/pbm.wsdl | 3995 +++ oslo_vmware/wsdl/8.0/pbmService.wsdl | 16 + oslo_vmware/wsdl/8.0/query-types.xsd | 254 + oslo_vmware/wsdl/8.0/reflect-types.xsd | 14 + oslo_vmware/wsdl/8.0/vim-types.xsd | 35936 +++++++++++++++++++ releasenotes/source/2023.2.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 7 +- 11 files changed, 41808 insertions(+), 2 deletions(-)

1 0

oslo.i18n 6.2.0 (caracal)
by no-reply＠openstack.org 14 Nov '23

14 Nov '23

We are jazzed to announce the release of: oslo.i18n 6.2.0: Oslo i18n library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.i18n Download the package from: https://pypi.org/project/oslo.i18n Please report issues through: https://bugs.launchpad.net/oslo.i18n/+bugs For more details, please see below. Changes in oslo.i18n 6.1.0..6.2.0 --------------------------------- 3dd3fa7 Update master for stable/2023.2 05f9961 Bump bandit 77a994a The locale.getdefaultlocale is deprecated Diffstat (except docs and test files) ------------------------------------- oslo_i18n/_message.py | 2 +- releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + test-requirements.txt | 2 +- 5 files changed, 18 insertions(+), 11 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 1b99e25..a936058 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15 +15 @@ oslo.config>=5.2.0 # Apache-2.0 -bandit>=1.6.0,<1.7.0 # Apache-2.0 +bandit>=1.7.0,<1.8.0 # Apache-2.0

1 0

ansible-config-template 2.1.0
by no-reply＠openstack.org 13 Nov '23

13 Nov '23

We are jazzed to announce the release of: ansible-config-template 2.1.0: Config Template plugin for Ansible The source is available from: https://opendev.org/openstack/ansible-config-template Download the package from: https://tarballs.openstack.org/ansible-config_template/ For more details, please see below. 2.1.0 ^^^^^ New Features ************ * Added support for arguments that can be used to avoid templating Jinja content: * variable_start_string * variable_end_string * block_start_string * block_end_string Bug Fixes ********* * Jinja2 {% raw %} tag and string escapnig, as well as special headers in template files are working as expected now. Changes in ansible-config-template 2.0.0..2.1.0 ----------------------------------------------- c272bc3 Revert "Publish openstack.config_template on galaxy" 130ecf6 Bump collection version in metafile 2a59c04 setup.cfg: Replace dashes with underscores e528ed0 Fix usage of {% raw %} tags and Jinja2 headers fdb572d Add support for start/end_string arguments 7951228 Remove TripleO jobs 26a8d94 Replace deprecated whitelist_externals 2ccc59f document the removal of keys in ini files e8a66da remove unicode prefix from code Diffstat (except docs and test files) ------------------------------------- galaxy.yml | 2 +- plugins/action/config_template.py | 49 ++++++++++------ .../notes/raw_tag_fixed-9c7cc7506314f76b.yaml | 5 ++ .../start_end_string_support-420acb44b5feeb5c.yaml | 10 ++++ releasenotes/source/conf.py | 12 ++-- setup.cfg | 12 ++-- tox.ini | 6 +- zuul.d/project.yaml | 10 ---- 16 files changed, 246 insertions(+), 43 deletions(-)

1 0

oslo.utils 6.3.0 (caracal)
by no-reply＠openstack.org 09 Nov '23

09 Nov '23

We are happy to announce the release of: oslo.utils 6.3.0: Oslo Utility library This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 6.2.1..6.3.0 ---------------------------------- 0588ba2 versionutil: Remove trailing alpha/beta/rc suffix d6b9e84 Fix missing PyYAML dependency cecf061 Mask chapsecret a122f5c Imported Translations from Zanata 7ef1004 Update master for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- oslo_utils/strutils.py | 2 +- oslo_utils/versionutils.py | 2 ++ releasenotes/source/2023.2.rst | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/locale/en_GB/LC_MESSAGES/releasenotes.po | 7 +++++-- requirements.txt | 1 + 7 files changed, 26 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index cc0b9a1..57158f7 100644 --- a/requirements.txt +++ b/requirements.txt @@ -14,0 +15 @@ tzdata>=2022.4 # MIT +PyYAML>=3.13 # MIT

1 0

manila 15.3.0 (zed)
by no-reply＠openstack.org 09 Nov '23

09 Nov '23

We contentedly announce the release of: manila 15.3.0: Shared Storage for OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/manila Download the package from: https://tarballs.openstack.org/manila/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. 15.3.0 ^^^^^^ Bug Fixes * Role based access control is enforced on the POST /shares/{share_id}/action API to reset status, task state, replica state and similar fields. This prevents the situation where deployments allow some users access to these APIs, but they don't belong to projects where the resources exist. See bug 1955627 (https://launchpad.net/bugs/1955627) for more context. * NetApp driver: Fixed the issue with replica promotion where the autosize attributes were not being updated on ONTAP. Now, the autosize attributes are updated after promoting the replica. For more details, please refer to launchpad bug #1957075 (https://bugs.launchpad.net/manila/+bug/1957075) * NetApp driver bug #1982808 (https://bugs.launchpad.net/manila/+bug/1982808) Fixed issue preventing the storage system from proper clean up unused SnapMirror snapshots after a replica promote, significantly increasing the amount of space consumed in ONTAP volumes by snapshots. * Fixed several Manila API error messages with their contents. For more details, please refer to launchpad bug #2007060 (https://bugs.launchpad.net/manila/+bug/2007060) * Share replicas in state *error_deleting* are now skipped during periodic updates. For more details, please refer to launchpad bug #2024556 (https://bugs.launchpad.net/manila/+bug/2024556) * Share server backend details set function adds db records without checking existing entries. This results in duplicate records for the combination of given share server id and key. Fixed it by updating records if already exist else creating new. See the launchpad bug 2024658 (https://bugs.launchpad.net/manila/+bug/2024658) for more details. * The "manage" API for snapshots now validates the format of "provider_location" and "share_id" fields and handles errors appropriately. These fields are expected to contain string values. * The "updated_at" field is correctly set on share and snapshot access rules when an update has been made on the database. * bug #2025649 (https://bugs.launchpad.net/manila/+bug/2025649) Fixed share server API error message. Changes in manila 15.2.0..15.3.0 -------------------------------- bd344c878 adds share server uuid on migration cancel 27a89a6a1 [RBAC] Enforce check for share updates 3badc8633 Validate provider_location while managing snapshot 44035950c Respect provided "host" when plugging ports 1ee09205a Set "updated_at" field on access rules 6db352411 NetApp ONTAP: Fix SnapMirror snapshots not being cleaned up 3a218a0d1 [NetApp] Fixed replica promotion to updated autosize attributes dfd2faefe Add default to read_deleted in context's from_dict 7adab824c Fix error message from share server API c14f4f094 skip periodic update on replicas in 'error_deleting' 98ea6ac76 [coordination] backend_url should be secret ecd14b4e3 Fix duplicate entries in share_server_backend_details 315fc6509 Fix Manila API error message Diffstat (except docs and test files) ------------------------------------- manila/api/openstack/wsgi.py | 31 ++++++-- manila/api/v1/share_servers.py | 5 +- manila/api/v1/share_types_extra_specs.py | 4 +- manila/api/v1/shares.py | 8 +- manila/api/v2/share_group_snapshots.py | 6 +- manila/api/v2/share_groups.py | 6 +- manila/api/v2/share_instance_export_locations.py | 2 +- manila/api/v2/share_networks.py | 3 + manila/api/v2/share_replica_export_locations.py | 2 +- manila/api/v2/share_replicas.py | 14 ++-- manila/api/v2/share_servers.py | 3 + manila/api/v2/share_snapshot_instances.py | 3 + manila/api/v2/share_snapshots.py | 3 + manila/api/v2/share_types.py | 2 +- manila/api/v2/shares.py | 11 +-- manila/context.py | 2 +- manila/coordination.py | 1 + manila/db/sqlalchemy/api.py | 49 +++++++++--- manila/exception.py | 4 + manila/share/api.py | 3 +- .../netapp/dataontap/cluster_mode/data_motion.py | 30 +++++++ .../netapp/dataontap/cluster_mode/lib_base.py | 93 ++++++++++++++++++++++ manila/share/drivers/service_instance.py | 2 +- manila/share/manager.py | 1 + .../dataontap/cluster_mode/test_data_motion.py | 54 +++++++++++++ .../netapp/dataontap/cluster_mode/test_lib_base.py | 55 ++++++++++++- ...add-check-to-reset-status-baa126a7145a45bb.yaml | 8 ++ ...omote-autosize-attributes-c180bb7db328bece.yaml | 7 ++ ...-snapshots-not-cleaned-up-63cc98cd468adbd1.yaml | 9 +++ ...2007060-fix-error-message-7a34357c0212d8f9.yaml | 6 ++ ...p-error-deleting-replicas-aa2ef4154d5e38f6.yaml | 6 ++ ...re-server-backend-details-adf45b417d45b437.yaml | 8 ++ ...vider-location-validation-b6d1e977f50643bb.yaml | 6 ++ ...t-updated_at-access-rules-a382a3e352f3ef7d.yaml | 5 ++ ..._share_server_api_2025649-f818f594e97c59e6.yaml | 6 ++ 40 files changed, 505 insertions(+), 81 deletions(-)

1 0

glance-store 4.3.2 (antelope)
by no-reply＠openstack.org 09 Nov '23

09 Nov '23

We are delighted to announce the release of: glance-store 4.3.2: OpenStack Image Service Store Library This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/glance-store Download the package from: https://pypi.org/project/glance-store Please report issues through: https://bugs.launchpad.net/glance-store/+bugs For more details, please see below. 4.3.2 ^^^^^ New Features * The RBD driver now moves images to the trash if they cannot be deleted immediately due to having snapshots. This fixes the long- standing issue where base images are unable to be deleted until/unless all snapshots of it are also deleted. Moving the image to the trash allows Glance to proceed with the deletion of the image (as far as it is concerned), mark the RBD image for deletion, which will happen once the last snapshot that uses it has been deleted. Changes in glance-store 4.3.1..4.3.2 ------------------------------------ aae8199 RBD: Trash image when snapshots prevent deletion d68a842 Do not always import boto3 4f4de23 Update 'extras' for cinder driver Diffstat (except docs and test files) ------------------------------------- glance_store/_drivers/rbd.py | 21 ++++++------ glance_store/_drivers/s3.py | 21 +++++++++--- .../rbd-trash-snapshots-158a39da4248fb0c.yaml | 10 ++++++ setup.cfg | 2 +- 6 files changed, 78 insertions(+), 27 deletions(-)

1 0

kolla 15.3.0 (zed)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We exuberantly announce the release of: kolla 15.3.0: Kolla OpenStack Deployment This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 15.3.0 ^^^^^^ Bug Fixes * Fixes missing way for kolla-toolbox to be built offline. LP#2020761 * Adds missing *grafana-opensearch-datasource* plugin to the list of plugins in the docker image. * Fix container restart conditions to be tolerant of missing optional source and/or destination files. For more details, see the following bug report (https://bugs.launchpad.net/kolla/+bug/1997984) Changes in kolla 15.2.0..15.3.0 ------------------------------- 199ebafeb Fix missing grafana opensearch datasource 2b7711570 Fix an issue with zun-cni-daemon building images in aarch64 8498b43c1 ubuntu: mark collectd and telegraf as buildable d7425533c CI: Fix zuul config errors 81b9a7aab Revert "bifrost: mark unbuidable for Ubuntu" d67fd2fcb rabbitmq: Use novemberain repos for Debian/Ubuntu 8558004ab Improve kolla-toolbox offline support. 1d5e1a391 Revert "Disable build of Gnocchi containers" 81dd5d66d Add server-status handler to Rocky/Centos Apache conf 3684f67fe Add comprehensive checks for container restarts a8138eb10 docs: we moved UNBUILDABLE_IMAGES to separate file 3e2afe2f6 Add support for running Nova upgrade checks 9b612fa23 CI: Add rocky9 experimental jobs Diffstat (except docs and test files) ------------------------------------- .zuul.d/rocky.yaml | 21 +++++++ .zuul.d/ubuntu.yaml | 42 ++----------- kolla/common/sources.py | 2 +- kolla/image/unbuildable.py | 10 --- kolla/template/methods.py | 4 ++ kolla/template/repos.yaml | 10 +-- .../notes/bug-2020761-c31f28c922ebcf84.yaml | 5 ++ ...ana-opensearch-datasource-96dc8061d9721af3.yaml | 5 ++ ...tainer-restart-conditions-57d36b13b0aa964b.yaml | 6 ++ 19 files changed, 182 insertions(+), 64 deletions(-)

1 0

kolla 16.2.0 (antelope)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are stoked to announce the release of: kolla 16.2.0: Kolla OpenStack Deployment This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 16.2.0 ^^^^^^ Bug Fixes * Fixes missing way for kolla-toolbox to be built offline. LP#2020761 * Adds missing *grafana-opensearch-datasource* plugin to the list of plugins in the docker image. * Fix container restart conditions to be tolerant of missing optional source and/or destination files. For more details, see the following bug report (https://bugs.launchpad.net/kolla/+bug/1997984) Changes in kolla 16.1.0..16.2.0 ------------------------------- 9ee9677f9 Fix missing grafana opensearch datasource 0e6676cb0 rabbitmq: Use novemberain repos for Debian/Ubuntu bbe79d1be Fix stderr logging when image build fail 78c62dacd ubuntu: mark collectd and telegraf as buildable 47e3d894a Improve kolla-toolbox offline support. 2da6ceab7 Revert "Disable build of Gnocchi containers" 902a84693 Add server-status handler to Rocky/Centos Apache conf 288a400db Add comprehensive checks for container restarts ba8b1ff29 docs: we moved UNBUILDABLE_IMAGES to separate file cad045b26 rabbitmq: Fix repo for ubuntu aarch64 Diffstat (except docs and test files) ------------------------------------- kolla/common/sources.py | 2 +- kolla/image/tasks.py | 9 ++- kolla/image/unbuildable.py | 9 --- kolla/template/methods.py | 4 ++ kolla/template/repos.yaml | 12 ++-- .../notes/bug-2020761-c31f28c922ebcf84.yaml | 5 ++ ...ana-opensearch-datasource-96dc8061d9721af3.yaml | 5 ++ ...tainer-restart-conditions-57d36b13b0aa964b.yaml | 6 ++ 15 files changed, 157 insertions(+), 27 deletions(-)

1 0

kolla-ansible 15.3.0 (zed)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are psyched to announce the release of: kolla-ansible 15.3.0: Ansible Deployment of Kolla containers This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 15.3.0 ^^^^^^ New Features ************ * Added capability to specify custom kernel modules for Neutron: *neutron_modules_default*: Lists default modules. *neutron_modules_extra*: For custom modules and parameters. * Added a neutron check for ML2/OVS and ML2/OVN presence at the start of deploy phase. It will fail if neutron_plugin_agent is set to "ovn" and use of ML2/OVS container detected. In case where neutron_plugin_agent is set to "openvswitch" the check will fail when it detects ML2/OVN container or any of the OVN specific volumes. Upgrade Notes ************* * Default keystone user role has been changed from deprecated role "_member_" to "member" role. * Now "ironic_tftp" service does not bind on 0.0.0.0, by default it uses ip address of the "api_interface". To revert to the old behaviour, please set "ironic_tftp_interface_address: 0.0.0.0" in "globals.yml". * Before upgrading to the Zed release of Kolla-Ansible on Ubuntu, ensure that Elasticsearch indexes created in version 6 or earlier are reindexed. OpenSearch 2.x does not support these older indexes. A precheck for this scenario has now been introduced. * Configure Nova libvirt.num_pcie_ports to 16 by default. Nova currently sets 'num_pcie_ports' to "0" (defaults to libvirt's "1"), which is not sufficient for hotplug use with 'q35' machine type. * Changes default value of nova libvirt driver setting "skip_cpu_compare_on_dest" to true. With the libvirt driver, during live migration, skip comparing guest CPU with the destination host. When using QEMU >= 2.9 and libvirt >= 4.4.0, libvirt will do the correct thing with respect to checking CPU compatibility on the destination host during live migration. Security Issues *************** * Restrict the access to the http Openstack services exposed /server- status by default through the HAProxy on the public endpoint. Fixes issue for Ubuntu/Debian installations. RockyLinux/CentOS not affected. LP#1996913 Bug Fixes ********* * Fixes issues with OVN NB/SB DB deployment, where first node needs to be rebootstrapped. LP#1875223 * "enable_keystone_federation" and "keystone_enable_federation_openid" have not been explicitly handled as bool in various templates in the keystone role so far. LP#2036390 * Fixes an issue when Kolla is setting the producer tasks to None, and this disables all designate producer tasks. LP#1879557 * Fixes "ironic_tftp" which binds to all ip addresses on the system. Added "ironic_tftp_interface", "ironic_tftp_address_family" and "ironic_tftp_interface_address" parameters to set the address for the "ironic_tftp" service. LP#2024664 * Fixes an OpenSearch migration process by adding precheck for Elasticsearch indexes in too low version for OpenSearch 2.x. * Fixes an issue where a Docker health check wasn't configured for the OpenSearch Dashboards container. See bug 2028362. * Fixes an issue where 'q35' libvirt machine type VM could not hotplug more than one PCIe device at a time. * Fixes an issue where keepalived track script fails on single controller environment and keepalived VIP goes into BACKUP state. "keepalived_track_script_enabled" variable has been introduced (default: true), which can be used to disable track scripts in keepalived configuration. LP#2025219 * Fixes an issue were an OVS-DPDK task had a different name to how it was being notified. * When upgrading Nova to a new release, we use the tool "nova-status upgrade check" to make sure that there are no "nova-compute" that are older than N-1 releases. This was performed using the current "nova-api" container, so computes which will be too old after the upgrade were not caught. Now the upgraded "nova-api" container image is used, so older computes are identified correctly. LP#1957080 Changes in kolla-ansible 15.2.0..15.3.0 --------------------------------------- 6ba7fd279 Rename per role filters files a5e1eb965 Default keystone user role changed to member e5b102696 Add ML2/OVN and ML2/OVS setting checks for neutron 741808ca6 Add option for extra kernel modules in neutron role 2f8cffee2 CI: add block support to validate-all-file.py 0fe42b26a README: link to the meetings page directly 9c5a47d5c keystone: ensure bool for two parameters 944f93a5e Configure Nova libvirt.num_pcie_ports to 16 by default 5c4c3aefc ovn: Fix broken deployment/reconfig on Ubuntu 4fb7ebdc5 CI: Remove redundant set/unset_cirros_image_q35_machine_type 1b44dde7b Prevent libvirtd reload when only generating config 3dc9fe1a8 CI: add q35 hardware machine type to tests 03db998f6 ovn: Improve clustering 48b570cb8 Fix designate-producers not running properly 139c872af Added precheck for OpenSearch migration bc9f36893 Use better default bind address for ironic-tftp 916587d6b Fix D001 Line too long in mariadb-guide 309aebc97 Fixes WEBSSO_KEYSTONE_URL Value d0c53de28 Drop useless DUMMY_ENVIRONMENT environment for cron container 4e2bebbc0 Fixes task name in notify module to the actual task name 35cabb263 Use the upgraded image to run Nova upgrade checks a73d8110e CI: Add missing Rocky9 upgrade jobs f381fb548 Deny access to public /server-status in http Openstack services 077455734 Enable nova libvirt driver skip_cpu_compare_on_dest workaround 511007f71 Fix OpenSearch Dashboards health check 993b854bb loadbalancer: Add option to not define track script Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/group_vars/all.yml | 5 +- ansible/library/kolla_container_volume_facts.py | 91 ++++++++++++++ ansible/library/kolla_toolbox.py | 2 +- ansible/roles/common/defaults/main.yml | 2 - .../{filters.py => kolla_common_filters.py} | 0 .../roles/designate/templates/designate.conf.j2 | 1 - .../templates/haproxy_single_service_split.cfg.j2 | 3 + ansible/roles/horizon/templates/horizon.conf.j2 | 4 + ansible/roles/horizon/templates/local_settings.j2 | 2 +- ansible/roles/ironic/defaults/main.yml | 1 + ansible/roles/ironic/templates/ironic-tftp.json.j2 | 2 +- ansible/roles/keystone/templates/keystone.conf.j2 | 2 +- ansible/roles/keystone/templates/keystone.json.j2 | 2 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 +- ansible/roles/loadbalancer/defaults/main.yml | 4 + ansible/roles/loadbalancer/tasks/config.yml | 1 + .../templates/keepalived/keepalived.conf.j2 | 4 + ansible/roles/neutron/defaults/main.yml | 7 ++ ansible/roles/neutron/tasks/config-host.yml | 5 +- ansible/roles/neutron/tasks/deploy.yml | 2 + .../neutron/tasks/neutron_plugin_agent_check.yml | 35 ++++++ ansible/roles/neutron/tasks/precheck.yml | 2 + ansible/roles/neutron/tasks/upgrade.yml | 2 + .../{filters.py => kolla_nova_cell_filters.py} | 0 ansible/roles/nova-cell/handlers/main.yml | 2 + .../templates/nova.conf.d/libvirt.conf.j2 | 3 + ansible/roles/nova/tasks/upgrade.yml | 55 +++++++-- ansible/roles/opensearch/handlers/main.yml | 1 + ansible/roles/opensearch/tasks/upgrade.yml | 27 +++++ ansible/roles/ovn-db/defaults/main.yml | 19 +++ ansible/roles/ovn-db/tasks/bootstrap-initial.yml | 83 +++++++++++++ ansible/roles/ovn-db/tasks/deploy.yml | 10 ++ ansible/roles/ovn-db/tasks/lookup_cluster.yml | 131 +++++++++++++++++++++ ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- ansible/roles/ovs-dpdk/handlers/main.yml | 2 +- .../central-logging-guide.rst | 6 + releasenotes/notes/1875223-05552108375d005a.yaml | 5 + ...ron-custom-kernel-modules-d105d3f84665e0a4.yaml | 6 + .../notes/bug-2036390-d087c5bfd504c9f3.yaml | 7 ++ ...cers-not-running-properly-3568f9167a9547f6.yaml | 6 + ...nge-default-keystone-role-386974967adfed65.yaml | 5 + ...default-tftp-bind-address-602acf76136d1732.yaml | 14 +++ ...rch-migration-old-indexes-e329d741f02be437.yaml | 11 ++ ...s-dashboards-health-check-bf56027f8c3369ea.yaml | 6 + ...-q35-pcie-hotplug-libvirt-50b1879d61b1df72.yaml | 10 ++ ...rvices-deny-server-status-39d0259664053e59.yaml | 7 ++ .../keepalived_track_script-edfebb520f006647.yaml | 9 ++ .../notes/ml2ovs_precheck-c859504004f6884b.yaml | 9 ++ ...ovs-dpdk-task-name-bugfix-099b386886a40236.yaml | 5 + ...hecks-with-upgraded-image-dca9c515bcd89ec8.yaml | 10 ++ .../skip-cpu-compare-on-dest-927004854f41bc32.yaml | 9 ++ tools/validate-all-file.py | 67 +++++++---- zuul.d/base.yaml | 1 + zuul.d/jobs.yaml | 31 +++++ zuul.d/project.yaml | 4 + 62 files changed, 782 insertions(+), 75 deletions(-)

1 0

kolla-ansible 14.10.0 (yoga)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are satisfied to announce the release of: kolla-ansible 14.10.0: Ansible Deployment of Kolla containers This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 14.10.0 ^^^^^^^ New Features ************ * Added capability to specify custom kernel modules for Neutron: *neutron_modules_default*: Lists default modules. *neutron_modules_extra*: For custom modules and parameters. * Added a neutron check for ML2/OVS and ML2/OVN presence at the start of deploy phase. It will fail if neutron_plugin_agent is set to "ovn" and use of ML2/OVS container detected. In case where neutron_plugin_agent is set to "openvswitch" the check will fail when it detects ML2/OVN container or any of the OVN specific volumes. Upgrade Notes ************* * Default keystone user role has been changed from deprecated role "_member_" to "member" role. * Now "ironic_tftp" service does not bind on 0.0.0.0, by default it uses ip address of the "api_interface". To revert to the old behaviour, please set "ironic_tftp_interface_address: 0.0.0.0" in "globals.yml". * Configure Nova libvirt.num_pcie_ports to 16 by default. Nova currently sets 'num_pcie_ports' to "0" (defaults to libvirt's "1"), which is not sufficient for hotplug use with 'q35' machine type. * Influxdb variable "infuxdb_internal_endpoint" has been fixed to "influxdb_internal_endpoint". Operators might need to review the relevant variable. * Changes default value of nova libvirt driver setting "skip_cpu_compare_on_dest" to true. With the libvirt driver, during live migration, skip comparing guest CPU with the destination host. When using QEMU >= 2.9 and libvirt >= 4.4.0, libvirt will do the correct thing with respect to checking CPU compatibility on the destination host during live migration. Security Issues *************** * Restrict the access to the http Openstack services exposed /server- status by default through the HAProxy on the public endpoint. Fixes issue for Ubuntu/Debian installations. RockyLinux/CentOS not affected. LP#1996913 Bug Fixes ********* * Fixes issues with OVN NB/SB DB deployment, where first node needs to be rebootstrapped. LP#1875223 * Set correct permissions for opensearch-dashboard data location *LP#2020152 https://bugs.launchpad.net/kolla-ansible/+bug/2020152* * "enable_keystone_federation" and "keystone_enable_federation_openid" have not been explicitly handled as bool in various templates in the keystone role so far. LP#2036390 * Fixes an issue when Kolla is setting the producer tasks to None, and this disables all designate producer tasks. LP#1879557 * Fixes "ironic_tftp" which binds to all ip addresses on the system. Added "ironic_tftp_interface", "ironic_tftp_address_family" and "ironic_tftp_interface_address" parameters to set the address for the "ironic_tftp" service. LP#2024664 * Fixes an OpenSearch migration process by adding precheck for Elasticsearch indexes in too low version for OpenSearch 2.x. * Fixes an issue where a Docker health check wasn't configured for the OpenSearch Dashboards container. See bug 2028362. * Fixes an issue where 'q35' libvirt machine type VM could not hotplug more than one PCIe device at a time. Changes in kolla-ansible 14.9.0..14.10.0 ---------------------------------------- 87449416c Default keystone user role changed to member ed95bb779 kolla_address: check correct error return value f59edacf4 Add ML2/OVN and ML2/OVS setting checks for neutron 967354e48 CI: Drop upgrade jobs since Xena is EOL b073d2038 Add option for extra kernel modules in neutron role 2ae7698dc CI: add block support to validate-all-file.py a05e5908c README: link to the meetings page directly 2f47802ae keystone: ensure bool for two parameters 401a39f52 Configure Nova libvirt.num_pcie_ports to 16 by default 5bc5fe364 ovn: Fix broken deployment/reconfig on Ubuntu 6186a0a6d CI: Remove redundant set/unset_cirros_image_q35_machine_type a71eced1d Prevent libvirtd reload when only generating config d74917e69 CI: add q35 hardware machine type to tests c3d64ce56 [yoga only] followup ovn clustering fix 2d89909d9 Fix typo in endpoint influxdb_internal_endpoint variable d626c02fb ovn: Improve clustering bc13da0f7 Fix designate-producers not running properly aa6388b36 Use better default bind address for ironic-tftp 3bcfba581 Added precheck for OpenSearch migration 3b17c915a opensearch-dashboard: fix permissions 13b4487f2 Fix D001 Line too long in mariadb-guide d75e96f92 Drop useless DUMMY_ENVIRONMENT environment for cron container 634e0304c Remove incorrect variable from OpenSearch role 893b80627 Deny access to public /server-status in http Openstack services ffdea86ee Enable nova libvirt driver skip_cpu_compare_on_dest workaround fc398d5fe Add documentation for migrating from CS8 to RL9 328f62ddd Fix OpenSearch Dashboards health check 3dc458d1f Correct [pci] syntax in Nova SRIOV documentation 3e6d412a1 opensearch: alter path after using rpm/deb packaging Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/group_vars/all.yml | 7 +- ansible/library/kolla_container_volume_facts.py | 84 +++++++++ ansible/library/kolla_toolbox.py | 2 +- ansible/opensearch-migration.yml | 27 +++ ansible/roles/common/defaults/main.yml | 2 - .../roles/designate/templates/designate.conf.j2 | 1 - ansible/roles/grafana/defaults/main.yml | 2 +- .../templates/haproxy_single_service_split.cfg.j2 | 3 + ansible/roles/horizon/templates/horizon.conf.j2 | 4 + ansible/roles/ironic/defaults/main.yml | 1 + ansible/roles/ironic/templates/ironic-tftp.json.j2 | 2 +- ansible/roles/keystone/templates/keystone.conf.j2 | 2 +- ansible/roles/keystone/templates/keystone.json.j2 | 2 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 +- ansible/roles/neutron/defaults/main.yml | 7 + ansible/roles/neutron/tasks/config-host.yml | 5 +- ansible/roles/neutron/tasks/deploy.yml | 2 + .../neutron/tasks/neutron_plugin_agent_check.yml | 33 ++++ ansible/roles/neutron/tasks/precheck.yml | 2 + ansible/roles/neutron/tasks/upgrade.yml | 2 + ansible/roles/nova-cell/handlers/main.yml | 2 + .../templates/nova.conf.d/libvirt.conf.j2 | 3 + ansible/roles/opensearch/handlers/main.yml | 1 + ansible/roles/opensearch/tasks/upgrade.yml | 2 - .../templates/opensearch-dashboards.json.j2 | 19 +- .../roles/opensearch/templates/opensearch.json.j2 | 2 +- .../templates/opensearch_dashboards.yml.j2 | 2 +- ansible/roles/ovn-db/defaults/main.yml | 19 ++ ansible/roles/ovn-db/tasks/bootstrap-initial.yml | 83 +++++++++ ansible/roles/ovn-db/tasks/deploy.yml | 10 ++ ansible/roles/ovn-db/tasks/lookup_cluster.yml | 130 ++++++++++++++ ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- .../central-logging-guide-opensearch.rst | 6 + kolla_ansible/kolla_address.py | 2 +- releasenotes/notes/1875223-05552108375d005a.yaml | 5 + ...ron-custom-kernel-modules-d105d3f84665e0a4.yaml | 6 + .../notes/bug-2020152-165c87048d92dedb.yaml | 5 + .../notes/bug-2036390-d087c5bfd504c9f3.yaml | 7 + ...cers-not-running-properly-3568f9167a9547f6.yaml | 6 + ...nge-default-keystone-role-386974967adfed65.yaml | 5 + ...default-tftp-bind-address-602acf76136d1732.yaml | 14 ++ ...rch-migration-old-indexes-e329d741f02be437.yaml | 5 + ...s-dashboards-health-check-bf56027f8c3369ea.yaml | 6 + ...-q35-pcie-hotplug-libvirt-50b1879d61b1df72.yaml | 10 ++ ...rvices-deny-server-status-39d0259664053e59.yaml | 7 + .../notes/ml2ovs_precheck-c859504004f6884b.yaml | 9 + ...e-wrong-influxdb-variable-8a93d8fda8dce926.yaml | 6 + .../skip-cpu-compare-on-dest-927004854f41bc32.yaml | 9 + tools/validate-all-file.py | 67 ++++--- zuul.d/base.yaml | 1 + zuul.d/jobs.yaml | 8 +- zuul.d/nodesets.yaml | 34 ++++ zuul.d/project.yaml | 13 -- 64 files changed, 921 insertions(+), 92 deletions(-)

1 0

kayobe 12.9.0 (yoga)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are delighted to announce the release of: kayobe 12.9.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 12.9.0 ^^^^^^ New Features ************ * The Spanning Tree Protocol (STP) can now be configured on bridge interfaces. Enable or disable STP by setting the "bridge_stp" attribute for a network. Note that STP is not set by default on Ubuntu, but it is disabled on Rocky Linux 9 for compatibility with network scripts, as NetworkManager enables STP on all bridges by default. For CentOS Stream 8 and Rocky Linux 8 enabling STP is not supported. * Attempts to log in to the kolla docker registry can be skipped by setting "deploy_containers_registry_attempt_login" to false. This is required for deployments using a non-standard registry deployed on the seed during the deploy-container step, since it takes place after the registry login attempt. Upgrade Notes ************* * For Rocky Linux 9, Kayobe now disables STP on a bridge by default. This action will cause the bridge interface to restart during the host configuration process. * Adds an introspection rule to update the location of the deployment kernel registered in existing Ironic nodes. Nodes discovered on a deployment running the Train release or earlier may still be using the "ipa.vmlinuz" kernel, which stays unchanged when deployment images get updated. If only default introspection rules are in use, existing nodes may be updated from the Bifrost container with the following command: "OS_CLOUD=bifrost baremetal introspection reprocess $NODE_UUID_OR_NAME" If non-default rules are used, reprocessing may revert any customisation done by the operator. In this case, a more cautious approach is to update the deployment kernel location manually: "OS_CLOUD=bifrost baremetal node set --driver-info deploy_kernel=<http://url/to/ipa.kernel> $NODE_UUID_OR_NAME" If the "kolla_bifrost_inspector_rules" list is customised, the rule "inspector_rule_legacy_deploy_kernel" should be added to it. Bug Fixes ********* * Fixes failure to run "kayobe overcloud deprovision" after Bifrost is redeployed. LP#2038889 * Improves performance of Bifrost operations by preventing unnecessary requests to the Ironic API. * Fixes detection of data file path when using editable installations with a recent pip. * Fixes the regression in configuring additional route options on CentOS / Rocky. * Fixed issue of seed containers being unable to use password protected registry by adding docker login function to kayobe deploy- containers role. * Adds a workaround to avoid NetworkManager setting the MTU of bridge VLAN interfaces to an incorrect value. LP#2039947 * Fixes conflicts between NetworkManager nmconnection files generated by "cloud-init" and those generated by Kayobe by upgrading the "MichaelRigart.interfaces" role to version 1.14.4. LP#2039975 Changes in kayobe 12.8.0..12.9.0 -------------------------------- 3282cda6 Fix MTU of NetworkManager bridge VLAN interfaces b0832bf1 Bump MichaelRigart.interfaces to v1.14.4 c6d08295 Add option to skip kolla docker registry login f609ae27 bifrost: Populate bifrost host vars on deprovision 8e93ecc9 Add introspection rule to update deploy kernel location 390fbf1d Fix data file path detection with new pip b0f8d4fb Remove upgrade jobs following Xena EOL 0582864d Speed up calls to Bifrost 3794929b CI: fetch systemd configuration including kolla-generated unit files 967c4bef Add STP option for bridge interfaces 4132c190 Fix for seed-containers being unable to use password protected registry b9b2e71d Fix CentOS / Rocky route options ca362a92 docs: Add a warning on creating network loops 0a284020 Limit interface names to 15 characters Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 5 +- ansible/group_vars/all/bifrost | 5 +- ansible/group_vars/all/inspector | 12 ++++ ansible/overcloud-bios-raid.yml | 2 + ansible/overcloud-deprovision.yml | 3 + ansible/overcloud-hardware-inspect.yml | 4 ++ ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-provision.yml | 4 ++ ansible/roles/deploy-containers/defaults/main.yml | 2 + ansible/roles/deploy-containers/tasks/main.yml | 9 +++ ansible/roles/network-redhat/tasks/main.yml | 2 +- ansible/seed-introspection-rules.yml | 1 + .../reference/seed-custom-containers.rst | 23 ++++++++ etc/kayobe/bifrost.yml | 3 + kayobe/cli/commands.py | 3 +- kayobe/plugins/action/kolla_ansible_host_vars.py | 5 +- kayobe/plugins/filter/networkd.py | 3 + kayobe/plugins/filter/networks.py | 66 +++++++++++++++++++++- kayobe/utils.py | 25 ++++++++ .../overrides.yml.j2 | 2 + .../add-bridge-stp-option-9be6bf35f6425548.yaml | 13 +++++ ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 7 +++ .../notes/bifrost-speedup-9902552b86150ad4.yaml | 5 ++ ...le-install-data-file-path-743b7a85a5f5db6d.yaml | 5 ++ .../fix-rhel-route-options-94b7dd3712a0c6d3.yaml | 5 ++ .../kayobe_docker_login-495a424c2da479a7.yaml | 6 ++ ...ridge-vlan-mtu-workaround-71d48d582b5e23d6.yaml | 6 ++ ...manager-cloud-init-config-315c0eb846b72c93.yaml | 7 +++ ...lla-docker-registry-login-f5b0ba858a35ea39.yaml | 9 +++ .../update-deploy-kernel-6943f3ad3cb82c51.yaml | 20 +++++++ requirements.txt | 1 + requirements.yml | 4 +- roles/kayobe-diagnostics/files/get_logs.sh | 4 ++ zuul.d/project.yaml | 16 ++---- 38 files changed, 301 insertions(+), 26 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index bab4725e..c5be19e9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,0 +5 @@ cliff>=3.1.0 # Apache +importlib-metadata;python_version<'3.8' # Apache-2.0

1 0

kayobe 14.2.0 (antelope)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are thrilled to announce the release of: kayobe 14.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 14.2.0 ^^^^^^ New Features ************ * The Spanning Tree Protocol (STP) can now be configured on bridge interfaces. Enable or disable STP by setting the "bridge_stp" attribute for a network. Note that STP is not set by default on Ubuntu, but it is disabled on Rocky Linux 9 for compatibility with network scripts, as NetworkManager enables STP on all bridges by default. * Kolla Ansible inventories in the Kayobe configuration are now passed through without modification. Previously, only "group_vars" were passed through. When using multiple environments, the Kolla inventory from the base configuration layer **and** the Kolla inventory from the Kayobe environment layer will be passed through. The inventory from the environment takes precedence over the inventory from the base layer. This allows you to put any shared configuration in the base layer. * Attempts to log in to the kolla docker registry can be skipped by setting "deploy_containers_registry_attempt_login" to false. This is required for deployments using a non-standard registry deployed on the seed during the deploy-container step, since it takes place after the registry login attempt. Upgrade Notes ************* * For Rocky Linux 9, Kayobe now disables STP on a bridge by default. This action will cause the bridge interface to restart during the host configuration process. * As Kolla Ansible inventories are now passed through without modification, the inventory directory in Kayobe configuration ("etc/kayobe/kolla/inventory/") must be a valid Ansible inventory, although "*.j2" files used as Kolla Ansible inventory templates are ignored. For cases where only "group_vars" or "hosts_vars" are required, a blank inventory file in the same directory may be used. * It is no longer possible to create an environment named "kayobe". This is reserved for internal use. * Adds an introspection rule to update the location of the deployment kernel registered in existing Ironic nodes. Nodes discovered on a deployment running the Train release or earlier may still be using the "ipa.vmlinuz" kernel, which stays unchanged when deployment images get updated. If only default introspection rules are in use, existing nodes may be updated from the Bifrost container with the following command: "OS_CLOUD=bifrost baremetal introspection reprocess $NODE_UUID_OR_NAME" If non-default rules are used, reprocessing may revert any customisation done by the operator. In this case, a more cautious approach is to update the deployment kernel location manually: "OS_CLOUD=bifrost baremetal node set --driver-info deploy_kernel=<http://url/to/ipa.kernel> $NODE_UUID_OR_NAME" If the "kolla_bifrost_inspector_rules" list is customised, the rule "inspector_rule_legacy_deploy_kernel" should be added to it. Bug Fixes ********* * Fixes failure to run "kayobe overcloud deprovision" after Bifrost is redeployed. LP#2038889 * Improves performance of Bifrost operations by preventing unnecessary requests to the Ironic API. * Fixes detection of data file path when using editable installations with a recent pip. * Fixes the regression in configuring additional route options on CentOS / Rocky. * Fixed issue of seed containers being unable to use password protected registry by adding docker login function to kayobe deploy- containers role. * Adds a workaround to avoid NetworkManager setting the MTU of bridge VLAN interfaces to an incorrect value. LP#2039947 * Fixes conflicts between NetworkManager nmconnection files generated by "cloud-init" and those generated by Kayobe by upgrading the "MichaelRigart.interfaces" role to version 1.14.4. LP#2039975 Changes in kayobe 14.1.0..14.2.0 -------------------------------- 6e2a551f Fix MTU of NetworkManager bridge VLAN interfaces 94e79f9f Bump MichaelRigart.interfaces to v1.14.4 8b433cc0 Add option to skip kolla docker registry login 7825b287 bifrost: Populate bifrost host vars on deprovision 9a5a3b58 Add introspection rule to update deploy kernel location 16a993be Use importlib.metadata instead of importlib_metadata a44f0636 Fix data file path detection with new pip 6ec4e8a5 Complete Skydive removal and Skyline addition 5a82ecb0 Fix firewalld configuration for monitoring hosts c7aaecfc Speed up calls to Bifrost ebdf4935 CI: fetch systemd configuration including kolla-generated unit files ad4fc2a3 Fix for seed-containers being unable to use password protected registry 62481994 Fix CentOS / Rocky route options d2b1fcaf Add STP option for bridge interfaces 68bdfcec docs: Add a warning on creating network loops 4c09f11b Pass through kolla inventories as is Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 5 +- ansible/inventory/group_vars/all/bifrost | 5 +- ansible/inventory/group_vars/all/inspector | 12 +++++ ansible/inventory/group_vars/all/kolla | 8 ++-- ansible/inventory/group_vars/monitoring/firewall | 4 +- ansible/kolla-ansible.yml | 4 +- ansible/overcloud-bios-raid.yml | 2 + ansible/overcloud-deprovision.yml | 3 ++ ansible/overcloud-hardware-inspect.yml | 4 ++ ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-provision.yml | 4 ++ ansible/roles/deploy-containers/defaults/main.yml | 2 + ansible/roles/deploy-containers/tasks/main.yml | 9 ++++ ansible/roles/kolla-ansible/defaults/main.yml | 8 +++- ansible/roles/kolla-ansible/tasks/config.yml | 56 ++++++++++++++++++---- ansible/roles/kolla-ansible/vars/Debian.yml | 1 + ansible/roles/kolla-ansible/vars/RedHat.yml | 1 + ansible/roles/kolla-ansible/vars/main.yml | 4 ++ ansible/roles/network-redhat/tasks/main.yml | 2 +- ansible/seed-introspection-rules.yml | 1 + .../configuration/reference/kolla-ansible.rst | 19 +++++++- .../reference/seed-custom-containers.rst | 23 +++++++++ etc/kayobe/bifrost.yml | 3 ++ kayobe/ansible.py | 5 ++ kayobe/cli/commands.py | 3 +- kayobe/kolla_ansible.py | 54 ++++++++++++++------- kayobe/plugins/filter/networkd.py | 3 ++ kayobe/plugins/filter/networks.py | 50 ++++++++++++++++++- kayobe/utils.py | 22 +++++++++ .../overrides.yml.j2 | 2 + .../add-bridge-stp-option-9be6bf35f6425548.yaml | 12 +++++ ...ultiple-kolla-inventories-65fd7a4922c639c5.yaml | 21 ++++++++ ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 7 +++ .../notes/bifrost-speedup-9902552b86150ad4.yaml | 5 ++ ...le-install-data-file-path-743b7a85a5f5db6d.yaml | 5 ++ .../fix-rhel-route-options-94b7dd3712a0c6d3.yaml | 5 ++ .../kayobe_docker_login-495a424c2da479a7.yaml | 6 +++ ...ridge-vlan-mtu-workaround-71d48d582b5e23d6.yaml | 6 +++ ...manager-cloud-init-config-315c0eb846b72c93.yaml | 7 +++ ...lla-docker-registry-login-f5b0ba858a35ea39.yaml | 9 ++++ .../update-deploy-kernel-6943f3ad3cb82c51.yaml | 20 ++++++++ requirements.yml | 4 +- roles/kayobe-diagnostics/files/get_logs.sh | 4 ++ 53 files changed, 578 insertions(+), 70 deletions(-)

1 0

kolla 14.11.0 (yoga)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are happy to announce the release of: kolla 14.11.0: Kolla OpenStack Deployment This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 14.11.0 ^^^^^^^ Bug Fixes * Fixes missing way for kolla-toolbox to be built offline. LP#2020761 * Fixes an issue with Elasticsearch curator not working due to too new python elasticsearch-curator library not compatible with Elasticsearch version 7. LP#2028048 * Adds missing *grafana-opensearch-datasource* plugin to the list of plugins in the docker image. * Fix container restart conditions to be tolerant of missing optional source and/or destination files. For more details, see the following bug report (https://bugs.launchpad.net/kolla/+bug/1997984) Changes in kolla 14.10.0..14.11.0 --------------------------------- 8304b9456 Fix missing grafana opensearch datasource 83987b16a Fix an issue with zun-cni-daemon building images in aarch64 26de85f2f [yoga-only]: Fix erlang versions 06f9ddef8 rabbitmq: Use novemberain repos for Debian/Ubuntu 1f11f5c23 [yoga-only]: Fix kolla-toolbox after Galaxy migration c2be45ca1 CI: Drop upgrade jobs since Xena is EOL 0cdce9f77 Improve kolla-toolbox offline support. 0353c51c6 Add comprehensive checks for container restarts feed9d87f Revert "Disable build of Gnocchi containers" c90d4a208 Add server-status handler to Rocky/Centos Apache conf a76d93dfb Pin iptables to 1.8.4 in Centos Stream 8 aadc29061 Pin elasticsearch-curator==5.8.4 a3367db6b CI: Add rocky9 experimental jobs 7a30d4d76 opensearch-dashboards: Fix permissions 23e0819d6 opensearch: move to yum/apt repos ca472c5f7 Pin setuptools=67.2.* ce2b14e5a Use erlang-25 from copr on aarch64 9cdee8398 ovsdpdk: add libdpdk-dev d49cca549 rabbitmq: use erlang-25 ppa on Debian/Ubuntu Diffstat (except docs and test files) ------------------------------------- .zuul.d/centos.yaml | 4 - .zuul.d/debian.yaml | 2 - .zuul.d/rocky.yaml | 21 ++++ .zuul.d/ubuntu.yaml | 10 +- ...rences.debian => apt_preferences.debian.x86_64} | 2 +- ...rences.ubuntu => apt_preferences.ubuntu.x86_64} | 2 +- .../elasticsearch-curator/Dockerfile.j2 | 2 +- .../opensearch/opensearch-dashboards/Dockerfile.j2 | 32 +++--- .../opensearch-dashboards/extend_start.sh | 8 +- kolla/common/config.py | 6 +- kolla/image/build.py | 2 - kolla/template/methods.py | 4 + kolla/template/repos.yaml | 110 +++++++++++++++------ .../notes/bug-2020761-c31f28c922ebcf84.yaml | 5 + ...x-elasesticsearch-curator-f2f154dc707d15bd.yaml | 7 ++ ...ana-opensearch-datasource-96dc8061d9721af3.yaml | 5 + ...tainer-restart-conditions-57d36b13b0aa964b.yaml | 6 ++ 35 files changed, 402 insertions(+), 104 deletions(-)

1 0

kayobe 13.3.0 (zed)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are jazzed to announce the release of: kayobe 13.3.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 13.3.0 ^^^^^^ New Features ************ * The Spanning Tree Protocol (STP) can now be configured on bridge interfaces. Enable or disable STP by setting the "bridge_stp" attribute for a network. Note that STP is not set by default on Ubuntu, but it is disabled on Rocky Linux 9 for compatibility with network scripts, as NetworkManager enables STP on all bridges by default. * Attempts to log in to the kolla docker registry can be skipped by setting "deploy_containers_registry_attempt_login" to false. This is required for deployments using a non-standard registry deployed on the seed during the deploy-container step, since it takes place after the registry login attempt. Upgrade Notes ************* * For Rocky Linux 9, Kayobe now disables STP on a bridge by default. This action will cause the bridge interface to restart during the host configuration process. * Adds an introspection rule to update the location of the deployment kernel registered in existing Ironic nodes. Nodes discovered on a deployment running the Train release or earlier may still be using the "ipa.vmlinuz" kernel, which stays unchanged when deployment images get updated. If only default introspection rules are in use, existing nodes may be updated from the Bifrost container with the following command: "OS_CLOUD=bifrost baremetal introspection reprocess $NODE_UUID_OR_NAME" If non-default rules are used, reprocessing may revert any customisation done by the operator. In this case, a more cautious approach is to update the deployment kernel location manually: "OS_CLOUD=bifrost baremetal node set --driver-info deploy_kernel=<http://url/to/ipa.kernel> $NODE_UUID_OR_NAME" If the "kolla_bifrost_inspector_rules" list is customised, the rule "inspector_rule_legacy_deploy_kernel" should be added to it. Bug Fixes ********* * Fixes failure to run "kayobe overcloud deprovision" after Bifrost is redeployed. LP#2038889 * Improves performance of Bifrost operations by preventing unnecessary requests to the Ironic API. * Fixes detection of data file path when using editable installations with a recent pip. * Fixes the regression in configuring additional route options on CentOS / Rocky. * Fixed issue of seed containers being unable to use password protected registry by adding docker login function to kayobe deploy- containers role. * Adds a workaround to avoid NetworkManager setting the MTU of bridge VLAN interfaces to an incorrect value. LP#2039947 * Fixes conflicts between NetworkManager nmconnection files generated by "cloud-init" and those generated by Kayobe by upgrading the "MichaelRigart.interfaces" role to version 1.14.4. LP#2039975 Changes in kayobe 13.2.0..13.3.0 -------------------------------- 790427f8 Fix MTU of NetworkManager bridge VLAN interfaces bacab88a Bump MichaelRigart.interfaces to v1.14.4 0638862a Add option to skip kolla docker registry login a1a1f8d3 bifrost: Populate bifrost host vars on deprovision cd0bdbdd Add introspection rule to update deploy kernel location 8b7b8e37 Revert "CI: Disable bare metal testing on RL9/c9s" a1fc1b43 CI: Enable Ubuntu jobs again d773ed56 Use importlib.metadata instead of importlib_metadata 77a0e36f Fix data file path detection with new pip 16c10d12 Fix firewalld configuration for monitoring hosts 0cb8a93e Speed up calls to Bifrost 3e3b41cc CI: fetch systemd configuration including kolla-generated unit files fbe1bd4f Fix for seed-containers being unable to use password protected registry 3abfeb27 Fix CentOS / Rocky route options b0f5e013 Add STP option for bridge interfaces e00f9cad docs: Add a warning on creating network loops abff761c Limit interface names to 15 characters Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 5 +- ansible/inventory/group_vars/all/bifrost | 5 +- ansible/inventory/group_vars/all/inspector | 12 +++++ ansible/inventory/group_vars/monitoring/firewall | 4 +- ansible/overcloud-bios-raid.yml | 2 + ansible/overcloud-deprovision.yml | 3 ++ ansible/overcloud-hardware-inspect.yml | 4 ++ ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-provision.yml | 4 ++ ansible/roles/deploy-containers/defaults/main.yml | 2 + ansible/roles/deploy-containers/tasks/main.yml | 9 ++++ ansible/roles/network-redhat/tasks/main.yml | 2 +- ansible/seed-introspection-rules.yml | 1 + ...tenks-deploy-config-compute-libvirt-on-host.yml | 6 +++ dev/tenks-deploy-config-compute.yml | 6 +++ .../reference/seed-custom-containers.rst | 23 +++++++++ etc/kayobe/bifrost.yml | 3 ++ kayobe/cli/commands.py | 3 +- kayobe/plugins/action/kolla_ansible_host_vars.py | 5 +- kayobe/plugins/filter/networkd.py | 3 ++ kayobe/plugins/filter/networks.py | 60 ++++++++++++++++++++-- kayobe/utils.py | 22 ++++++++ playbooks/kayobe-overcloud-base/run.yml | 2 - .../overrides.yml.j2 | 2 + playbooks/kayobe-overcloud-upgrade-base/run.yml | 4 -- .../add-bridge-stp-option-9be6bf35f6425548.yaml | 12 +++++ ...ost-host-vars-deprovision-525c450cf20f7f71.yaml | 7 +++ .../notes/bifrost-speedup-9902552b86150ad4.yaml | 5 ++ ...le-install-data-file-path-743b7a85a5f5db6d.yaml | 5 ++ .../fix-rhel-route-options-94b7dd3712a0c6d3.yaml | 5 ++ .../kayobe_docker_login-495a424c2da479a7.yaml | 6 +++ ...ridge-vlan-mtu-workaround-71d48d582b5e23d6.yaml | 6 +++ ...manager-cloud-init-config-315c0eb846b72c93.yaml | 7 +++ ...lla-docker-registry-login-f5b0ba858a35ea39.yaml | 9 ++++ .../update-deploy-kernel-6943f3ad3cb82c51.yaml | 20 ++++++++ requirements.yml | 4 +- roles/kayobe-diagnostics/files/get_logs.sh | 4 ++ zuul.d/project.yaml | 16 ++---- 42 files changed, 296 insertions(+), 34 deletions(-)

1 0

kolla-ansible 16.2.0 (antelope)
by no-reply＠openstack.org 08 Nov '23

08 Nov '23

We are delighted to announce the release of: kolla-ansible 16.2.0: Ansible Deployment of Kolla containers This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 16.2.0 ^^^^^^ New Features ************ * Added capability to specify custom kernel modules for Neutron: *neutron_modules_default*: Lists default modules. *neutron_modules_extra*: For custom modules and parameters. * Supports Debian Bookworm (12) as host distribution. * Added a neutron check for ML2/OVS and ML2/OVN presence at the start of deploy phase. It will fail if neutron_plugin_agent is set to "ovn" and use of ML2/OVS container detected. In case where neutron_plugin_agent is set to "openvswitch" the check will fail when it detects ML2/OVN container or any of the OVN specific volumes. * In the configuration template of the Senlin service the "cafile" parameter is now set by default in the "authentication" section. This way the use of self-signed certificates on the internal Keystone endpoint is also usable in the Senlin service. Upgrade Notes ************* * Default keystone user role has been changed from deprecated role "_member_" to "member" role. * Now "ironic_tftp" service does not bind on 0.0.0.0, by default it uses ip address of the "api_interface". To revert to the old behaviour, please set "ironic_tftp_interface_address: 0.0.0.0" in "globals.yml". * Configure Nova libvirt.num_pcie_ports to 16 by default. Nova currently sets 'num_pcie_ports' to "0" (defaults to libvirt's "1"), which is not sufficient for hotplug use with 'q35' machine type. * Changes default value of nova libvirt driver setting "skip_cpu_compare_on_dest" to true. With the libvirt driver, during live migration, skip comparing guest CPU with the destination host. When using QEMU >= 2.9 and libvirt >= 4.4.0, libvirt will do the correct thing with respect to checking CPU compatibility on the destination host during live migration. Security Issues *************** * Restrict the access to the http Openstack services exposed /server- status by default through the HAProxy on the public endpoint. Fixes issue for Ubuntu/Debian installations. RockyLinux/CentOS not affected. LP#1996913 Bug Fixes ********* * Fixes issues with OVN NB/SB DB deployment, where first node needs to be rebootstrapped. LP#1875223 * "enable_keystone_federation" and "keystone_enable_federation_openid" have not been explicitly handled as bool in various templates in the keystone role so far. LP#2036390 * Fixes an issue when Kolla is setting the producer tasks to None, and this disables all designate producer tasks. LP#1879557 * Fixes "ironic_tftp" which binds to all ip addresses on the system. Added "ironic_tftp_interface", "ironic_tftp_address_family" and "ironic_tftp_interface_address" parameters to set the address for the "ironic_tftp" service. LP#2024664 * Fixes an issue where a Docker health check wasn't configured for the OpenSearch Dashboards container. See bug 2028362. * Fixes an issue where 'q35' libvirt machine type VM could not hotplug more than one PCIe device at a time. * Fixes an issue where keepalived track script fails on single controller environment and keepalived VIP goes into BACKUP state. "keepalived_track_script_enabled" variable has been introduced (default: true), which can be used to disable track scripts in keepalived configuration. LP#2025219 * Fixes an issue were an OVS-DPDK task had a different name to how it was being notified. Changes in kolla-ansible 16.1.0..16.2.0 --------------------------------------- 9f32dada6 Rename per role filters files d3bab163d Default keystone user role changed to member c40fc0dbc Add ML2/OVN and ML2/OVS setting checks for neutron 2569a69ff Add option for extra kernel modules in neutron role d40d59f3f README: link to the meetings page directly 82898bff2 keystone: ensure bool for two parameters fc7ed97d5 Configure Nova libvirt.num_pcie_ports to 16 by default 319da0050 ovn: Fix broken deployment/reconfig on Ubuntu aa6202d88 CI: Remove redundant set/unset_cirros_image_q35_machine_type 7f208d9d5 Prevent libvirtd reload when only generating config aaaeb3e90 debian: fix some debian jobs 2e6644719 CI: add q35 hardware machine type to tests f848b81c2 CI: add block support to validate-all-file.py ff1d9dd17 senlin: add missing cafile parameter fdcb72b38 ovn: Improve clustering 12cf8bd17 Fix designate-producers not running properly 9c689f21e Use better default bind address for ironic-tftp c3541ad72 Fix D001 Line too long in mariadb-guide 13b8f90be Fixes WEBSSO_KEYSTONE_URL Value 764bbf6ef Drop useless DUMMY_ENVIRONMENT environment for cron container 6955f956f Fixes task name in notify module to the actual task name 404dc0d4a debian: Add Bookworm Host OS support a5addd825 systemd: handle running container without systemd unit 68f610f8b CI: bump ansible version in linter b5b2951c2 update ansible version 817d92fa3 Deny access to public /server-status in http Openstack services 06016233c Enable nova libvirt driver skip_cpu_compare_on_dest workaround b10e7dbe8 Fix OpenSearch Dashboards health check dfa1f83c2 Fix the fluentd regexp to collect the logs 739fb69cc opensearch: alter path after using rpm/deb packaging 3aaf78659 Trivial: Add deploy-containers for skyline 8d5356268 loadbalancer: Add option to not define track script Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/group_vars/all.yml | 5 +- ansible/library/kolla_container_volume_facts.py | 91 ++++++++++++++ ansible/library/kolla_toolbox.py | 2 +- ansible/module_utils/kolla_docker_worker.py | 7 +- ansible/module_utils/kolla_systemd_worker.py | 13 +- ansible/roles/common/defaults/main.yml | 2 - .../{filters.py => kolla_common_filters.py} | 0 .../common/templates/conf/input/00-global.conf.j2 | 4 +- .../roles/designate/templates/designate.conf.j2 | 1 - .../templates/haproxy_single_service_split.cfg.j2 | 3 + ansible/roles/horizon/templates/horizon.conf.j2 | 4 + ansible/roles/horizon/templates/local_settings.j2 | 2 +- ansible/roles/ironic/defaults/main.yml | 1 + ansible/roles/ironic/templates/ironic-tftp.json.j2 | 2 +- ansible/roles/keystone/templates/keystone.conf.j2 | 2 +- ansible/roles/keystone/templates/keystone.json.j2 | 2 +- .../roles/keystone/templates/wsgi-keystone.conf.j2 | 2 +- ansible/roles/loadbalancer/defaults/main.yml | 4 + ansible/roles/loadbalancer/tasks/config.yml | 1 + .../templates/keepalived/keepalived.conf.j2 | 4 + ansible/roles/neutron/defaults/main.yml | 7 ++ ansible/roles/neutron/tasks/config-host.yml | 5 +- ansible/roles/neutron/tasks/deploy.yml | 2 + .../neutron/tasks/neutron_plugin_agent_check.yml | 35 ++++++ ansible/roles/neutron/tasks/precheck.yml | 2 + ansible/roles/neutron/tasks/upgrade.yml | 2 + .../{filters.py => kolla_nova_cell_filters.py} | 0 ansible/roles/nova-cell/handlers/main.yml | 2 + .../templates/nova.conf.d/libvirt.conf.j2 | 3 + ansible/roles/opensearch/handlers/main.yml | 1 + .../templates/opensearch-dashboards.json.j2 | 14 +-- .../roles/opensearch/templates/opensearch.json.j2 | 2 +- .../templates/opensearch_dashboards.yml.j2 | 2 +- ansible/roles/ovn-db/defaults/main.yml | 19 +++ ansible/roles/ovn-db/tasks/bootstrap-initial.yml | 83 +++++++++++++ ansible/roles/ovn-db/tasks/deploy.yml | 10 ++ ansible/roles/ovn-db/tasks/lookup_cluster.yml | 131 +++++++++++++++++++++ ansible/roles/ovn-db/templates/ovn-nb-db.json.j2 | 2 +- ansible/roles/ovn-db/templates/ovn-sb-db.json.j2 | 2 +- ansible/roles/ovs-dpdk/handlers/main.yml | 2 +- ansible/roles/prechecks/vars/main.yml | 1 + ansible/roles/senlin/templates/senlin.conf.j2 | 1 + ansible/roles/skyline/tasks/deploy-containers.yml | 2 + lint-requirements.txt | 2 +- releasenotes/notes/1875223-05552108375d005a.yaml | 5 + ...ron-custom-kernel-modules-d105d3f84665e0a4.yaml | 6 + .../notes/bug-2036390-d087c5bfd504c9f3.yaml | 7 ++ ...cers-not-running-properly-3568f9167a9547f6.yaml | 6 + ...nge-default-keystone-role-386974967adfed65.yaml | 5 + .../debian-bookworm-host-08840d78c88742d3.yaml | 4 + ...default-tftp-bind-address-602acf76136d1732.yaml | 14 +++ ...s-dashboards-health-check-bf56027f8c3369ea.yaml | 6 + ...-q35-pcie-hotplug-libvirt-50b1879d61b1df72.yaml | 10 ++ ...rvices-deny-server-status-39d0259664053e59.yaml | 7 ++ .../keepalived_track_script-edfebb520f006647.yaml | 9 ++ .../notes/ml2ovs_precheck-c859504004f6884b.yaml | 9 ++ ...ovs-dpdk-task-name-bugfix-099b386886a40236.yaml | 5 + ...lin-authentication-cafile-4fe5e2f79769c872.yaml | 7 ++ .../skip-cpu-compare-on-dest-927004854f41bc32.yaml | 9 ++ test-requirements.txt | 2 +- tools/validate-all-file.py | 72 ++++++----- zuul.d/base.yaml | 1 + zuul.d/jobs.yaml | 51 +++++++- zuul.d/nodesets.yaml | 22 ++++ zuul.d/project.yaml | 23 ++-- 74 files changed, 784 insertions(+), 102 deletions(-) Requirements updates -------------------- diff --git a/lint-requirements.txt b/lint-requirements.txt index 0f255aa34..89cb54276 100644 --- a/lint-requirements.txt +++ b/lint-requirements.txt @@ -1 +1 @@ -ansible>=4,<6 # GPLv3 +ansible>=6,<8 # GPLv3 diff --git a/test-requirements.txt b/test-requirements.txt index 76b4eba12..c16a76461 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -8 +8 @@ stestr>=2.0.0 # Apache-2.0 -ansible>=4,<6 # GPLv3 +ansible>=6,<8 # GPLv3

1 0

pbr 6.0.0
by no-reply＠openstack.org 07 Nov '23

07 Nov '23

We high-spiritedly announce the release of: pbr 6.0.0: Python Build Reasonableness The source is available from: https://opendev.org/openstack/pbr Download the package from: https://pypi.org/project/pbr For more details, please see below. 6.0.0 ^^^^^ Upgrade Notes * The deprecated support for *setup.py build_sphinx* has been removed. This feature has been deprecated since version 4.2. Setuptools and sphinx have removed support for this command which breaks PBR's ability to integrate with those two tools to provide this functionality. Users should switch to building sphinx docs with sphinx directly. Changes in pbr 5.11.1..6.0.0 ---------------------------- 1115115 build: Use kwargs 457a89f Add support for PEP-660 6df1643 Fix PBR integration testing d03d617 Replace imp with importlib.machinery 0e335e6 Add release note for build_sphinx removal ee04b62 Use _ instead of - in setup.cfg directives 47c5afe Remove sphinx doc building integration Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 39 +++ pbr/build.py | 66 ++++- pbr/builddoc.py | 292 --------------------- pbr/hooks/commands.py | 3 - pbr/packaging.py | 12 +- pyproject.toml.future | 2 +- .../build_sphinx_removal-de990a5c14a9e64d.yaml | 8 + 14 files changed, 150 insertions(+), 633 deletions(-)

1 0

sushy-tools 1.0.1
by no-reply＠openstack.org 02 Nov '23

02 Nov '23

We eagerly announce the release of: sushy-tools 1.0.1: A set of tools to support the development and test of the Sushy library (https://docs.openstack.org/sushy/) The source is available from: https://opendev.org/openstack/sushy-tools Download the package from: https://tarballs.openstack.org/sushy-tools/ For more details, please see below. Changes in sushy-tools 1.0.0..1.0.1 ----------------------------------- 37f1182 Add BiosVersion field to System Diffstat (except docs and test files) ------------------------------------- sushy_tools/emulator/templates/system.json | 1 + 1 file changed, 1 insertion(+)

1 0