June 2023 - Release-announce - lists.openstack.org

neutron-lib 3.7.0 (bobcat)
by no-reply＠openstack.org 29 Jun '23

29 Jun '23

We are gleeful to announce the release of: neutron-lib 3.7.0: Neutron shared routines and utilities This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 3.7.0 ^^^^^ New Features ************ * Add new API extension "security-groups-rules-belongs-to-default- sg" that adds a new read only field "belongs_to_default_sg" in the security group rules. This flag determines if this security group rule belongs to the project's default security group. * The "port-hardware-offload" extension adds "hardware_offload_type" attribute to the port resource. This new attribute stores the type of hardware offload the port is going to use and will be populated in the port binding profile information with "'capabilities': [<hardware_offload_type>]". This extension is still not read by Nova; this is the reason Neutron still populates the port binding profile. The value of this parameter will not be updated if the port binding profile information is updated. Other Notes *********** * Resource "network" was added to the "EXT_PARENT_RESOURCE_MAPPING in ``neutron_lib.services.constants". Changes in neutron-lib 3.6.1..3.7.0 ----------------------------------- c965b18 Add short warning about UUIDs in the SG rule templates api a014720 Add "network" to the EXT_PARENT_RESOURCE_MAPPING c4be8ca Add subnet onboard API ref 972fbdd Add port hardware offload extension 1763eee Remove unnecessary required extension for "network_ha" extension 7da72b7 Add new SG rule ext. ``security-groups-rules-belongs-to-default-sg`` fc68d74 Add FirewallGroupPortNotSupported exception 9f72a47 api-ref: add api-ref for bindings 4b9753d [API REF] Add api-ref documentation for default SG rules API 829e970 Add a "GROUP BY" clause on queries with RBAC entries 64cfdac Add FIPAssociated exception 1ccebda Introduce "HasProjectPrimaryUniqueKey" class Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/index.rst | 3 + api-ref/source/v2/parameters.yaml | 102 ++++++++++ api-ref/source/v2/port_bindings.inc | 131 +++++++++++++ api-ref/source/v2/ports.inc | 8 + .../port-binding-activate-response.json | 16 ++ .../port_bindings/port-binding-create-request.json | 5 + .../port-binding-create-response.json | 16 ++ .../port_bindings/port-binding-list-response.json | 18 ++ .../samples/ports/port-bind-create-response.json | 3 +- .../v2/samples/ports/port-bind-show-response.json | 3 +- .../samples/ports/port-bind-update-response.json | 3 +- .../v2/samples/ports/port-create-request.json | 3 +- .../v2/samples/ports/port-create-response.json | 3 +- ...port-remove-allowed-address-pairs-response.json | 3 +- .../v2/samples/ports/port-show-response.json | 3 +- .../v2/samples/ports/port-update-response.json | 3 +- .../v2/samples/ports/ports-bind-list-response.json | 6 +- .../samples/ports/ports-bulk-create-request.json | 3 +- .../samples/ports/ports-bulk-create-response.json | 6 +- ...security-group-default-rule-create-request.json | 9 + ...ecurity-group-default-rule-create-response.json | 16 ++ ...group-default-rule-delete-request-json-http.txt | 3 + ...roup-default-rule-delete-response-json-http.txt | 1 + ...y-group-default-rule-show-request-json-http.txt | 2 + .../security-group-default-rule-show-response.json | 16 ++ ...-group-default-rules-list-request-json-http.txt | 2 + ...security-group-default-rules-list-response.json | 88 +++++++++ .../security-group-create-response.json | 6 +- .../security-group-rule-create-response.json | 3 +- .../security-group-rule-show-response.json | 3 +- .../security-group-rules-list-response.json | 12 +- .../security-group-show-response.json | 12 +- .../security-group-update-response.json | 3 +- .../security-groups-list-response.json | 12 +- .../samples/subnets/subnets-onboard-request.json | 1 + .../samples/subnets/subnets-onboard-response.json | 4 + api-ref/source/v2/security-group-rules.inc | 9 + .../source/v2/security_groups_default_rules.inc | 215 +++++++++++++++++++++ api-ref/source/v2/subnet_onboard_ops.inc | 46 +++++ neutron_lib/api/definitions/__init__.py | 5 + neutron_lib/api/definitions/network_ha.py | 3 +- .../api/definitions/port_hardware_offload_type.py | 50 +++++ .../security_groups_rules_belongs_to_default_sg.py | 52 +++++ neutron_lib/constants.py | 5 + neutron_lib/db/model_query.py | 9 + neutron_lib/exceptions/firewall_v2.py | 5 + neutron_lib/exceptions/l3.py | 12 ++ neutron_lib/services/constants.py | 2 + .../api/definitions/test_port_hardware_offload.py | 22 +++ ..._security_groups_rules_belongs_to_default_sg.py | 23 +++ ...les-belongs-to-default-sg-36a5ac28831101e6.yaml | 7 + .../add-vif-type-agilio-ovs-6bee5b2557aca10e.yaml | 2 +- ...tio-forwarder-portbinding-f7f87dfbef456ed1.yaml | 2 +- ...n-parent-resource-mapping-0bc57f9bb54d1dc9.yaml | 5 + .../port-hardware-offload-388906d9448426ad.yaml | 11 ++ .../portbindings-apidef-3d7893bcb94d7f61.yaml | 4 +- 56 files changed, 984 insertions(+), 36 deletions(-)

1 0

openstacksdk 1.3.1 (bobcat)
by no-reply＠openstack.org 29 Jun '23

29 Jun '23

We are satisfied to announce the release of: openstacksdk 1.3.1: An SDK for building applications to work with OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. Changes in openstacksdk 1.3.0..1.3.1 ------------------------------------ 2da00af1 Fix broken python3.6 support 9fc4b9f2 Add missing `force` parameter 8995d38b update rackspace profile to specify identity version Diffstat (except docs and test files) ------------------------------------- openstack/cloud/_block_storage.py | 2 +- openstack/config/vendors/rackspace.json | 1 + openstack/utils.py | 2 -- 6 files changed, 36 insertions(+), 6 deletions(-)

1 0

kuryr-tempest-plugin 0.15.0 (bobcat)
by no-reply＠openstack.org 29 Jun '23

29 Jun '23

We are psyched to announce the release of: kuryr-tempest-plugin 0.15.0: Kuryr Tempest Plugin This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kuryr-tempest-plugin Download the package from: https://tarballs.openstack.org/kuryr-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/kuryr/+bugs For more details, please see below. Changes in kuryr-tempest-plugin 0.14.1..0.15.0 ---------------------------------------------- 9db5ded Setting security context for kuryr demo pod 46a98e1 Test container: use UID instead of name Diffstat (except docs and test files) ------------------------------------- kuryr_tempest_plugin/config.py | 3 +++ test_container/Dockerfile | 4 ++-- 3 files changed, 25 insertions(+), 8 deletions(-)

1 0

oslo.db 13.1.0 (bobcat)
by no-reply＠openstack.org 29 Jun '23

29 Jun '23

We jubilantly announce the release of: oslo.db 13.1.0: Oslo Database library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 13.0.1..13.1.0 --------------------------------- c69e5e5 Handle server default quoting be31cd0 Bump bandit 5456520 Imported Translations from Zanata f6ba070 Ignore unset opts when deprecated Diffstat (except docs and test files) ------------------------------------- oslo_db/locale/en_GB/LC_MESSAGES/oslo_db.po | 39 +-------- oslo_db/locale/es/LC_MESSAGES/oslo_db.po | 47 ++--------- oslo_db/locale/fr/LC_MESSAGES/oslo_db.po | 48 ++--------- oslo_db/sqlalchemy/enginefacade.py | 62 +++++++++----- oslo_db/sqlalchemy/test_migrations.py | 7 ++ .../locale/en_GB/LC_MESSAGES/releasenotes.po | 97 +++++++++++++++++++++- test-requirements.txt | 2 +- 9 files changed, 217 insertions(+), 155 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 4388b76..75b9f7e 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13 +13 @@ testtools>=2.2.0 # MIT -bandit>=1.6.0,<1.7.0 # Apache-2.0 +bandit>=1.7.0,<1.8.0 # Apache-2.0

1 0

oslo.messaging 14.2.1 (antelope)
by no-reply＠openstack.org 29 Jun '23

29 Jun '23

We are satisfied to announce the release of: oslo.messaging 14.2.1: Oslo Messaging API This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.2.1 ^^^^^^ Upgrade Notes ************* * If kombu_reconnect_delay is specified in the [oslo_messaging_rabbit] section, ensure that it is less than 5.0, the value of ACK_REQUEUE_EVERY_SECONDS_MAX Bug Fixes ********* * Increased ACK_REQUEUE_EVERY_SECONDS_MAX to resolve issues with rabbitmq HA failover. Changes in oslo.messaging 14.2.0..14.2.1 ---------------------------------------- b4b49248 Increase ACK_REQUEUE_EVERY_SECONDS_MAX to exceed default kombu_reconnect_delay 50d87b95 move py3 jobs from zed to antelope 2fad9a7a Update TOX_CONSTRAINTS_FILE for stable/2023.1 3c6d99ab Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 2 +- oslo_messaging/_drivers/amqpdriver.py | 2 +- oslo_messaging/_drivers/impl_rabbit.py | 6 ++++-- releasenotes/notes/bug-1993149-e8b231791b65e938.yaml | 9 +++++++++ tox.ini | 6 +++--- 7 files changed, 20 insertions(+), 8 deletions(-)

1 0

neutron-tempest-plugin 2.4.0 (bobcat)
by no-reply＠openstack.org 26 Jun '23

26 Jun '23

We are pleased to announce the release of: neutron-tempest-plugin 2.4.0: Tempest plugin for Neutron Project This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/neutron-tempest-plugin Download the package from: https://tarballs.openstack.org/neutron-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-tempest-plugin 2.3.0..2.4.0 ---------------------------------------------- 08f0f97 Revert "Make neutron-tempest-plugin-bgpvpn-bagpipe non-voting" 03bd62e Don't check exit status when nc_client is spawned dd5b0e6 Don't use "Zero-I/O mode" in nc client in the TCP mode 764544f Define proper common API extensions for 2023.1 and Zed jobs 7b1f9b1 [fwaas]Disassociate all ports before deleting firewall group 8c7c5e3 Adapt bgpvpn scenarios to recent sRBAC changes 318d629 Make neutron-tempest-plugin-bgpvpn-bagpipe non-voting fdfb474 [S-RBAC] Update DSCP marking rule create API test 667393b Revert "Revert "Update nested-virt testing for the 2023.1 cycle"" 2f1856b Revert "[S-RBAC] Switch to new policies by default" b6fef5d Don't run stable/xena jobs in check/gate queue anymore 663bbc2 Get nc client's command based on the nc on correct host 62b7315 [S-RBAC] Switch to new policies by default 170b65f Test neutron-dynamic-routing on OVN Diffstat (except docs and test files) ------------------------------------- neutron_tempest_plugin/api/test_qos.py | 1 + neutron_tempest_plugin/bgpvpn/scenario/manager.py | 2 +- .../bgpvpn/scenario/test_bgpvpn_basic.py | 146 +++++++++++++-------- .../fwaas/api/test_fwaasv2_extensions.py | 5 +- neutron_tempest_plugin/scenario/base.py | 22 ++-- zuul.d/2023_1_jobs.yaml | 8 +- zuul.d/base-nested-switch.yaml | 30 ++++- zuul.d/master_jobs.yaml | 17 --- zuul.d/project.yaml | 6 - zuul.d/xena_jobs.yaml | 38 ++++++ zuul.d/yoga_jobs.yaml | 27 ++++ zuul.d/zed_jobs.yaml | 36 ++++- 12 files changed, 237 insertions(+), 101 deletions(-)

1 0

glance-store 4.6.0 (bobcat)
by no-reply＠openstack.org 22 Jun '23

22 Jun '23

We are delighted to announce the release of: glance-store 4.6.0: OpenStack Image Service Store Library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/glance-store Download the package from: https://pypi.org/project/glance-store Please report issues through: https://bugs.launchpad.net/glance-store/+bugs For more details, please see below. 4.6.0 ^^^^^ New Features * A *weight* option has been added to the store configuration definition. This allows configuring stores with *relative* weights to each other for sorting when an image exists in multiple stores. * The RBD driver now moves images to the trash if they cannot be deleted immediately due to having snapshots. This fixes the long- standing issue where base images are unable to be deleted until/unless all snapshots of it are also deleted. Moving the image to the trash allows Glance to proceed with the deletion of the image (as far as it is concerned), mark the RBD image for deletion, which will happen once the last snapshot that uses it has been deleted. Changes in glance-store 4.5.0..4.6.0 ------------------------------------ 5427e0c RBD: Trash image when snapshots prevent deletion b0b3edf Add per-store weight config element 127410c RBD: Wrap RBD calls in native threads cc39326 Make ceph job voting Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- glance_store/_drivers/rbd.py | 37 +++++--- glance_store/driver.py | 19 +++- .../notes/add-store-weight-d443fbea8cc8d4c9.yaml | 6 ++ .../rbd-trash-snapshots-158a39da4248fb0c.yaml | 10 ++ 7 files changed, 161 insertions(+), 28 deletions(-)

1 0

openstacksdk 1.3.0 (bobcat)
by no-reply＠openstack.org 22 Jun '23

22 Jun '23

We are delighted to announce the release of: openstacksdk 1.3.0: An SDK for building applications to work with OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 1.3.0 ^^^^^ New Features * Added support for block storage summary. * Adds support for querying a node's hardware inventory as per functionality introduced in API 1.81. Changes in openstacksdk 1.2.0..1.3.0 ------------------------------------ 2b4aeff6 fix connection.Connection finalizer a087bc0b Adds support for node hardware inventory 200cd5c4 Add block storage summary support 1c3157e1 Fix typo e94830dd Remove unnecessary quotes 7c5ce145 tox: Disable E501 c1c6a0e9 docs: Replace/remove shade-specific docs 2e186521 Add image metadef_resource_type into the registry 97f28e41 tests: Use uuid, not randint dcd89705 tests: Ignore our own deprecation warnings 3f9685ff Use custom warnings everywhere f4c3a773 cloud: Move identity-related helpers 3cb5bc98 utils: Add 'supports_version' 0b137cf1 cloud: Remove ClusteringCloudMixin d2127f84 cloud: Rename shade-specific method ca770c5b cloud: Remove '_ShadeAdapter' 2091ec2a Migrate warnings to openstack.warnings 68ecfacc tests: Isolate tests from OS_CLOUD b7b3f418 FWAAS: add Computed summary field to FirewallRule ad1a00e8 tests: Silence warning 165b50d9 add extended neutron job Diffstat (except docs and test files) ------------------------------------- .../block_storage/v3/block_storage_summary.rst | 14 + openstack/baremetal/v1/_proxy.py | 13 + openstack/baremetal/v1/node.py | 25 +- openstack/block_storage/v2/backup.py | 2 +- openstack/block_storage/v3/_proxy.py | 22 + openstack/block_storage/v3/backup.py | 2 +- .../block_storage/v3/block_storage_summary.py | 30 ++ openstack/block_storage/v3/type.py | 2 +- openstack/cloud/_baremetal.py | 14 +- openstack/cloud/_block_storage.py | 5 +- openstack/cloud/_clustering.py | 512 ------------------- openstack/cloud/_floating_ip.py | 11 +- openstack/cloud/_identity.py | 64 ++- openstack/cloud/_security_group.py | 6 +- openstack/cloud/_utils.py | 8 +- openstack/cloud/openstackcloud.py | 80 +-- openstack/compute/v2/_proxy.py | 24 +- openstack/compute/v2/hypervisor.py | 4 +- openstack/compute/v2/server_remote_console.py | 2 +- openstack/config/cloud_region.py | 31 +- openstack/config/loader.py | 35 +- openstack/connection.py | 11 +- openstack/exceptions.py | 10 - openstack/image/v1/_proxy.py | 6 +- openstack/image/v2/_proxy.py | 8 +- openstack/network/v2/_proxy.py | 12 +- openstack/network/v2/firewall_rule.py | 4 + openstack/object_store/v1/_proxy.py | 2 +- openstack/orchestration/util/event_utils.py | 9 +- openstack/proxy.py | 16 +- openstack/service_description.py | 37 +- .../block_storage/v3/test_block_storage_summary.py | 21 + .../network/v2/test_auto_allocated_topology.py | 4 +- .../accelerator/v2/test_accelerator_request.py | 2 +- .../block_storage/v3/test_block_storage_summary.py | 69 +++ openstack/utils.py | 57 ++- openstack/warnings.py | 12 + ...k-storage-summary-support-dd00d424c4e6a3b1.yaml | 5 + .../notes/add-node-inventory-52f54e16777814e7.yaml | 5 + tox.ini | 3 +- zuul.d/functional-jobs.yaml | 73 +++ zuul.d/project.yaml | 2 + 76 files changed, 984 insertions(+), 1508 deletions(-)

1 0

telemetry-tempest-plugin 1.10.0 (bobcat)
by no-reply＠openstack.org 22 Jun '23

22 Jun '23

We are happy to announce the release of: telemetry-tempest-plugin 1.10.0: Tempest plugin for Telemetry Projects This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/telemetry-tempest-plugin Download the package from: https://tarballs.openstack.org/telemetry-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/ceilometer/+bugs For more details, please see below. Changes in telemetry-tempest-plugin 1.9.0..1.10.0 ------------------------------------------------- c606168 Replace reference to deprecated [service_available] aodh_plugin 0db0376 Pin stable/wallaby jobs nodeset to Ubuntu Focal (20.04) Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- telemetry_tempest_plugin/aodh/api/base.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-)

1 0

oslo.db 13.0.1 (bobcat)
by no-reply＠openstack.org 22 Jun '23

22 Jun '23

We are chuffed to announce the release of: oslo.db 13.0.1: Oslo Database library This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 13.0.0..13.0.1 --------------------------------- c6e57cf Revert "Moves supported python runtimes from version 3.8 to 3.10" Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 8 ++++---- setup.cfg | 3 ++- 2 files changed, 6 insertions(+), 5 deletions(-)

1 0

oslo.db 12.3.2 (antelope)
by no-reply＠openstack.org 21 Jun '23

21 Jun '23

We are stoked to announce the release of: oslo.db 12.3.2: Oslo Database library This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 12.3.1..12.3.2 --------------------------------- 62aff14 Ignore unset opts when deprecated cf057ee Update TOX_CONSTRAINTS_FILE for stable/2023.1 3515f20 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_db/sqlalchemy/enginefacade.py | 62 +++++++++++++++++-------- tox.ini | 4 +- 5 files changed, 112 insertions(+), 31 deletions(-)

1 0

oslo.utils 4.12.4 (yoga)
by no-reply＠openstack.org 21 Jun '23

21 Jun '23

We are happy to announce the release of: oslo.utils 4.12.4: Oslo Utility library This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 4.12.3..4.12.4 ------------------------------------ 92d0c17 [imageutils] Fix __str__ for QemuImgInfo Diffstat (except docs and test files) ------------------------------------- oslo_utils/imageutils.py | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-)

1 0

osprofiler 4.0.0
by no-reply＠openstack.org 21 Jun '23

21 Jun '23

We are delighted to announce the release of: osprofiler 4.0.0: OpenStack Profiler Library The source is available from: https://opendev.org/openstack/osprofiler Download the package from: https://pypi.org/project/osprofiler For more details, please see below. 4.0.0 ^^^^^ New Features ************ * Add ability to set tracer process tags to Jaeger via a configuration option introduced, *profiler_jaeger/process_tags*. * Introduces service name prefix for Jaeger driver. Please consider using option *profiler_jaeger/service_name_prefix* to set it. * An OTLP (OpenTelemetry) exporter is now supported. The current support is experimental but the aim is to deprecate and remove legacy Jaeger driver which is using the already deprecated python library jaeger client. Operators who want to use it should enable *otlp*. OTLP is comptatible with Jaeger backend. Known Issues ************ * Using devstack, when unstacking, the docker container running Jaeger tracing will be deleted that to correctly clean processes started by devstack.. This also avoid *./stack.sh* to fail when recreating the environnement. Upgrade Notes ************* * The minimum redis-py version required is now >= 3.0.0 Changes in osprofiler 3.4.3..4.0.0 ---------------------------------- 908e740 add support of otlp exporter 52246cf devstack: remove jaeger container on unstack 3c9e7d9 [profiler] hmac_key should be secret 91d7c35 jaeger: introduce process tags' option for tracer b746875 jaeger: introduce service name prefix 9f50374 jaeger: fix driver initialization for tests 7d2c871 setup.cfg: Replace dashes with underscores f8d8002 Change StrictRedis usage to Redis fa83092 tox: Add functional-py38, functional-py39 envs 0b1bfad remove unicode prefix from code e29b187 Fix formattiing of release list Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 +- devstack/lib/osprofiler | 21 ++- devstack/plugin.sh | 6 + lower-constraints.txt | 2 + osprofiler/_utils.py | 12 ++ osprofiler/drivers/__init__.py | 1 + osprofiler/drivers/jaeger.py | 11 +- osprofiler/drivers/otlp.py | 179 +++++++++++++++++++++ osprofiler/drivers/redis_driver.py | 4 +- osprofiler/opts.py | 45 +++++- ...container-when-unstacking-e8fcdc036f80158a.yaml | 7 + .../jaeger-add-process-tags-79d5f5d7a0b049ef.yaml | 5 + ...aeger-service-name-prefix-72878a930f700878.yaml | 5 + .../notes/otlp-driver-cb932038ad580ac2.yaml | 8 + .../remove-strict-redis-9eb43d30c9c1fc43.yaml | 4 + releasenotes/source/conf.py | 16 +- releasenotes/source/index.rst | 22 +-- setup.cfg | 11 +- test-requirements.txt | 2 + tox.ini | 66 ++++---- 25 files changed, 510 insertions(+), 77 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 3e1bbd8..096429d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -22,0 +23,2 @@ jaeger-client>=3.8.0 # Apache-2.0 +opentelemetry-exporter-otlp>=1.16.0 +opentelemetry-sdk>=1.16.0

1 0

oslo.config 8.8.1 (yoga)
by no-reply＠openstack.org 21 Jun '23

21 Jun '23

We high-spiritedly announce the release of: oslo.config 8.8.1: Oslo Configuration API This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. Changes in oslo.config 8.8.0..8.8.1 ----------------------------------- 966c588 Disable a config test if ran under the root user e63b672 Update TOX_CONSTRAINTS_FILE for stable/yoga 7ee9b20 Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + tox.ini | 4 ++-- 3 files changed, 6 insertions(+), 2 deletions(-)

1 0

os-api-ref 3.0.0
by no-reply＠openstack.org 21 Jun '23

21 Jun '23

We are amped to announce the release of: os-api-ref 3.0.0: Sphinx Extensions to support API reference sites in OpenStack The source is available from: https://opendev.org/openstack/os-api-ref Download the package from: https://tarballs.openstack.org/os-api-ref/ For more details, please see below. Changes in os-api-ref 2.3.0..3.0.0 ---------------------------------- 443e97c remove unicode prefix from code 1813e19 Fix the 'No such file or directory' error 06cd5ab Remove deprecated sphinx-testing dependency d3c6dd2 Drop python3.6/3.7 support in testing runtime 92dddd6 Update CI to use unversioned jobs template a460735 Add Python3 yoga unit tests Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 +- os_api_ref/__init__.py | 3 +++ setup.cfg | 6 +++--- test-requirements.txt | 1 - 9 files changed, 42 insertions(+), 30 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index d165510..0fd36ef 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +10,0 @@ testtools>=2.2.0 # MIT -sphinx-testing>=1.0.1 # BSD License

1 0

keystoneauth 5.2.1 (bobcat)
by no-reply＠openstack.org 19 Jun '23

19 Jun '23

We are delighted to announce the release of: keystoneauth 5.2.1 This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/keystoneauth Download the package from: https://pypi.org/project/keystoneauth Please report issues through: https://bugs.launchpad.net/keystoneauth/+bugs For more details, please see below. Changes in keystoneauth 5.2.0..5.2.1 ------------------------------------ c69ade6 Remove last reference to the python six package 30d61ad Make v3oidcpassword send client_id 3e15740 Add RFC required headers and data to the request 4e51814 Fix up some packaging metadata Diffstat (except docs and test files) ------------------------------------- keystoneauth1/identity/v3/oauth2_mtls_client_credential.py | 5 +---- keystoneauth1/identity/v3/oidc.py | 5 +++-- setup.cfg | 1 + 3 files changed, 5 insertions(+), 6 deletions(-)

1 0

puppet-nova 20.4.0 (yoga)
by no-reply＠openstack.org 17 Jun '23

17 Jun '23

We are chuffed to announce the release of: puppet-nova 20.4.0: Puppet module for OpenStack Nova This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 20.4.0 ^^^^^^ New Features * The "nova::compute::libvirt::services" class now installs the "libvirt-damon" package explicitly in CentOS and RHEL when modular libvirt daemons are not used. This is required in recent CentOS Stream 9 to use legacy libvirtd service and socket. * Add "sysinfo_serial" parameter to control a Serial number entry generation method. Defaults to "$::os_service_default". * New parameters "max_client_requests" and "admin_max_client_requests" allow to configure corresponding settings for libvirt. * Now this module supports configuration of the "virtlockd" service. Changes in puppet-nova 20.3.0..20.4.0 ------------------------------------- 41a7721b Dont log output when setting virsh secret 315fd6ea Prepare new stable/yoga release 2a608663 Enable virtproxyd socket for migration 875b189f Add release note about libvirt-daemon package installation 83f3820f CentOS: Install libvirt-daemon package for monolithic daemon 185adaf4 Remove logic to look up removed parameters db940667 Wire-in max_client_requests for libvirt 9b83ee5f Remove unnecessary class dependencies a0df16f5 Support virtlockd configurations 74dd92f9 Fix missing dependency between qemu.conf and virtqemud 27e89624 Ensure modular libvirt daemons are started before executing virsh d3851769 Fix missing notifications about virt*d services e5932457 Add sysinfo_serial to control Serial number gen 299c62a0 Remove TripleO job 0bf19cfe Update TOX_CONSTRAINTS_FILE for stable/yoga 5ce162ed Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ------ .../provider/virtlockd_config/ini_setting.rb | 37 ++++++++++ lib/puppet/type/virtlockd_config.rb | 57 ++++++++++++++++ manifests/compute/image_cache.pp | 18 +---- manifests/compute/libvirt.pp | 6 ++ manifests/compute/libvirt/config.pp | 7 ++ manifests/compute/libvirt/qemu.pp | 3 +- manifests/compute/libvirt/services.pp | 79 +++++++++++++--------- manifests/compute/libvirt/virtlockd.pp | 60 ++++++++++++++++ manifests/compute/libvirt/virtlogd.pp | 5 -- manifests/compute/libvirt/virtnodedevd.pp | 42 +++++++----- manifests/compute/libvirt/virtproxyd.pp | 46 +++++++------ manifests/compute/libvirt/virtqemud.pp | 42 +++++++----- manifests/compute/libvirt/virtsecretd.pp | 42 +++++++----- manifests/compute/libvirt/virtstoraged.pp | 5 -- manifests/compute/rbd.pp | 9 +-- manifests/deps.pp | 15 ++++ manifests/migration/libvirt.pp | 27 ++++---- manifests/migration/qemu.pp | 2 +- manifests/params.pp | 1 + metadata.json | 2 +- .../notes/libvirt-daemon-1cfe1bd9f29708fe.yaml | 7 ++ .../libvirt_sysinfo_serial-e1603d45446726c3.yaml | 5 ++ ...bvirt_max_client_requests-1709c1d7a282264d.yaml | 5 ++ releasenotes/notes/virtlockd-d412855bb1536dea.yaml | 4 ++ spec/classes/nova_compute_libvirt_config_spec.rb | 11 +++ spec/classes/nova_compute_libvirt_guests_spec.rb | 4 -- spec/classes/nova_compute_libvirt_qemu_spec.rb | 24 +++---- spec/classes/nova_compute_libvirt_spec.rb | 23 ++++--- .../classes/nova_compute_libvirt_virtlockd_spec.rb | 57 ++++++++++++++++ spec/classes/nova_compute_libvirt_virtlogd_spec.rb | 10 --- .../nova_compute_libvirt_virtnodedevd_spec.rb | 28 ++++---- .../nova_compute_libvirt_virtproxyd_spec.rb | 30 ++++---- .../classes/nova_compute_libvirt_virtqemud_spec.rb | 28 ++++---- .../nova_compute_libvirt_virtsecretd_spec.rb | 28 ++++---- .../nova_compute_libvirt_virtstoraged_spec.rb | 10 --- spec/classes/nova_compute_rbd_spec.rb | 9 ++- spec/classes/nova_migration_libvirt_spec.rb | 60 ++++++++++++++++ spec/classes/nova_migration_qemu_spec.rb | 6 +- .../provider/virtlockd_config/ini_setting_spec.rb | 69 +++++++++++++++++++ spec/unit/type/virtlockd_config_spec.rb | 24 +++++++ tox.ini | 2 +- 43 files changed, 681 insertions(+), 288 deletions(-)

1 0

puppet-nova 22.1.0 (antelope)
by no-reply＠openstack.org 15 Jun '23

15 Jun '23

We are pumped to announce the release of: puppet-nova 22.1.0: Puppet module for OpenStack Nova This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 22.1.0 ^^^^^^ New Features ************ * The new "nova::migration::libvirt::manage_service" parameter has been added. * The "nova::compute::libvirt::services" class now installs the "libvirt-damon" package explicitly in CentOS and RHEL when modular libvirt daemons are not used. This is required in recent CentOS Stream 9 to use legacy libvirtd service and socket. Bug Fixes ********* * The "nova::migration::libvirt" class no longer reads the "nova::compute::libvirt::manage_libvirt_services" parameter to decide whether the class should/shouldn't manage services. The new "nova::migration::libvirt::manage_service" parameter now controls that behavior. Changes in puppet-nova 22.0.0..22.1.0 ------------------------------------- c6e354fc Dont log output when setting virsh secret 56aeeb03 Fix restart of modular libvirt daemons after config change 510698dc Drop modular libvirt daemon names for Debian/Ubuntu 861bef82 Prohibit modular libvirt in non RedHat distributions 08dcf094 Prepare new stable/2023.1 release 3fa17436 Add release note about libvirt-daemon package installation d1bb160e CentOS: Install libvirt-daemon package for monolithic daemon 29f27cb2 Fix incorrect usage of manage_libvirt_services 42c66854 Remove logic to look up removed parameters 89512c90 Update TOX_CONSTRAINTS_FILE for stable/2023.1 ef06f39b Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + manifests/compute/image_cache.pp | 18 +- manifests/compute/libvirt/services.pp | 88 +++++-- manifests/compute/rbd.pp | 7 +- manifests/deps.pp | 1 + manifests/migration/libvirt.pp | 16 +- manifests/params.pp | 51 ++-- metadata.json | 2 +- ...on-libvirt-manage-service-3d205cd3772650b7.yaml | 13 + .../notes/libvirt-daemon-1cfe1bd9f29708fe.yaml | 7 + spec/classes/nova_compute_libvirt_services_spec.rb | 7 +- spec/classes/nova_compute_rbd_spec.rb | 9 +- spec/classes/nova_migration_libvirt_spec.rb | 286 +++++++++------------ tox.ini | 2 +- 14 files changed, 284 insertions(+), 224 deletions(-)

1 0

puppet-nova 21.1.0 (zed)
by no-reply＠openstack.org 15 Jun '23

15 Jun '23

We are overjoyed to announce the release of: puppet-nova 21.1.0: Puppet module for OpenStack Nova This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/puppet-nova Download the package from: https://tarballs.openstack.org/puppet-nova/ Please report issues through: https://bugs.launchpad.net/puppet-nova/+bugs For more details, please see below. 21.1.0 ^^^^^^ New Features ************ * The "nova::compute::libvirt::services" class now installs the "libvirt-damon" package explicitly in CentOS and RHEL when modular libvirt daemons are not used. This is required in recent CentOS Stream 9 to use legacy libvirtd service and socket. * The new "nova::instance_name_template" parameter has been added so that the "[DEFAULT] instance_name_template" option can be configured for not only nova-api but also the other nova services. The "nova::api::instance_name_template" parameter is still supported but is no loger recomemnded because it can cause incomplete configurations in case nova services are deployed in different nodes. * The "nova::compute::rbd" class now installs the "qemu-block-extra" package in Ubuntu or Debian. The "package_ensure" parameter can be used to customize state of the package. Bug Fixes ********* * The new parameters, "nova::cron::archive_deleted_rows::ensure" and "nova::cron::purge_shadow_tables::ensure", have been added. These parameters control the corresponding cron jobs existence. When either of two classes included, they can be given "ensure => absent" to unwind existing cron jobs. Changes in puppet-nova 21.0.0..21.1.0 ------------------------------------- b518ec5f Dont log output when setting virsh secret 39f25941 Prepare new stable/zed release 07b3bb8a Enable virtproxyd socket for migration 7795268f Add release note about libvirt-daemon package installation b9720fd4 CentOS: Install libvirt-daemon package for monolithic daemon 470f956d Zed-only: Remove TripleO job 7666f55b Remove logic to look up removed parameters 599ca429 Allow unwinding nova DB manage cron jobs 6d7e566c Migrate instance_name_template to the base class 10d24226 Ubuntu/Debian: Install qemu-block-extra when rbd backend is used 32e4e803 Remove unused exec resource to refresh network interfaces f07430f4 Update TOX_CONSTRAINTS_FILE for stable/zed c52406e8 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 19 ------- manifests/api.pp | 24 +++++++-- manifests/compute.pp | 1 - manifests/compute/image_cache.pp | 18 ++----- manifests/compute/libvirt/services.pp | 7 +++ manifests/compute/rbd.pp | 23 +++++++-- manifests/cron/archive_deleted_rows.pp | 6 +++ manifests/cron/purge_shadow_tables.pp | 8 ++- manifests/init.pp | 20 +++++--- manifests/migration/libvirt.pp | 23 ++++++--- manifests/params.pp | 1 + metadata.json | 2 +- .../delayed_nova_compute-23fe926e73fb3717.yaml | 8 +++ .../notes/libvirt-daemon-1cfe1bd9f29708fe.yaml | 7 +++ ...nce_name_template-to-base-52516c9df907a8c6.yaml | 9 ++++ .../notes/qemu-block-extra-998bf6f1d9d75eda.yaml | 6 +++ spec/classes/nova_cache_spec.rb | 1 - spec/classes/nova_compute_rbd_spec.rb | 31 +++++++++-- .../classes/nova_cron_archive_deleted_rows_spec.rb | 22 ++++++++ spec/classes/nova_cron_purge_shadow_tables_spec.rb | 16 ++++++ spec/classes/nova_init_spec.rb | 11 ++-- spec/classes/nova_migration_libvirt_spec.rb | 60 ++++++++++++++++++++++ tox.ini | 2 +- 24 files changed, 251 insertions(+), 75 deletions(-)

1 0

openstack-ansible 25.4.0 (yoga)
by no-reply＠openstack.org 15 Jun '23

15 Jun '23

We jubilantly announce the release of: openstack-ansible 25.4.0: Ansible playbooks for deploying OpenStack This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 25.4.0 ^^^^^^ Upgrade Notes ************* * Due to OSSA-2023-003, value of "openstack_service_token_roles_required" has been changed to "true". With that, major upgrades to Yoga release might struggle from prolonged dowtimes. Sensetive to API downtime environments can perform major upgrade to any prior release with subsequent minor upgrade that will enable "openstack_service_token_roles_required" and install safe versions of services. Other way around would be to manually create and assign "service" role to all "service" users. Deprecation Notes ***************** * RabbitMQ packages are no longer provided by PackageCloud due to the upstream repository being no longer available after 2023-05-28. Installations will now utilize a community mirror of CloudSmith repositories for rabbitmq and erlang. https://github.com/rabbitmq/rabbitmq-server/discussions/8386 Security Issues *************** * Includes SHA bumps for Nova, Cinder and Glance to cover OSSA-2023-003. Bug Fixes ********* * Fixes incorrect definition of ceilometer "polling_namespaces", when host is part of both central and compute groups (ie metal/aio scenario) * Fixes the absence of "libvirtd.service" on compute nodes. With CentOS upgrading the libvirt version to 9.3.0, they do not install libvirt-deamon as a dependency to libvirt-deamon-kvm anymore. libvirt-deamon is installed explicitly now. * https://bugs.launchpad.net/openstack-ansible/+bug/2021410 Changes in openstack-ansible 25.3.2..25.4.0 ------------------------------------------- f532987d4 Bump OpenStack-Ansible SHAs for Yoga 3a38adb9a Return distro jobs back 4a1b22d09 Force enable openstack_service_token_roles_required e9950054e Add internal_lb_vip_address to no_proxy 90858c96f Do not define cluster template labels Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 92 +++++++++++----------- inventory/group_vars/all/keystone.yml | 3 - playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 30 +++---- ...ometer_polling_namespaces-a21da7a655f4c922.yaml | 5 ++ ...all_libvirt_daemon_centos-9826ecb428bce8a5.yaml | 7 ++ .../notes/ossa-2023-003-b62fe9e279eb4434.yaml | 4 + ...f-packagecloud-deprecated-5ee62da847ccae1f.yaml | 11 +++ ...ken_roles_required_forced-b9ae6ce937c0ec32.yaml | 12 +++ .../templates/user_variables.aio.yml.j2 | 2 +- .../templates/user_variables_magnum.yml.j2 | 6 -- 11 files changed, 103 insertions(+), 73 deletions(-)

1 0

neutron 20.3.1 (yoga)
by no-reply＠openstack.org 12 Jun '23

12 Jun '23

We are satisfied to announce the release of: neutron 20.3.1: OpenStack Networking This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 20.3.1 ^^^^^^ Known Issues ************ * The high availability of metadata service on isolated networks is limited or non-existent. IPv4 metadata is redundant when the DHCP agent managing it is redundant, but recovery is tied to the renewal of the DHCP lease, making most recoveries very slow. IPv6 metadata is not redundant at all as the IPv6 metadata address can only be configured in a single place at a time as it is link-local. Multiple agents trying to configure it will generate an IPv6 duplicate address detection failure. Administrators may observe the IPv6 metadata address in "dadfailed" state in the DHCP namespace for this reason, which is only an indication it is not highly available. Until a redesign is made to the isolated metadata service there is not a better deployment option. See bug 1953165 (https://bugs.launchpad.net/neutron/+bug/1953165) for information. * The *redirect-type=bridged* option is only used if all the tenant networks connected to the router are of type VLAN or FLAT. In this case their traffic will be distributed. However, if there is a mix of VLAN/FLAT and geneve networks connected to the same router, the redirect-type option is not set, and therefore the traffic for the VLAN/FLAT networks will also be centralized but not tunneled. Bug Fixes ********* * 1986003 (https://bugs.launchpad.net/neutron/+bug/1986003) Fixed an issue with concurrent requests to activate the same port binding where one of the requests returned a 500 Internal Server Error. With the fix one request will return successfully and the other will return a 409 Conflict (Binding already active). This fixes errors in nova live-migrations where those concurrent requests might be sent. Nova handles the 409/Conflict response gracefully. * Fix an issue in the OVN driver where network metadata could become unavailable if the metadata port was ever deleted, even if accidental. To re-create the port, a user can now disable, then enable, DHCP for one of the subnets associated with the network using the Neutron API. This will try and create the port, similar to what happens in the DHCP agent for ML2/OVS. For more information, see bug 2015377 (https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/2015377) * [bug 2003455 (https://bugs.launchpad.net/neutron/+bug/2003455) As part of a previous commit (https://review.opendev.org/c/openstack/neutron/+/875644) the *redirect-type=bridged* option was set in all the router gateway ports (cr-lrp ovn ports). However this was breaking the N/S traffic for geneve tenant networks connected to the provider networks through those routers with the redirect-type option enabled. To fix this we ensure that the redirect-type option is only set if all the networks connected to the router are of VLAN or FLAT type, otherwise we fall back to the default option. This also means that if there is a mix of VLAN and geneve tenant networks connected to the same router, the VLAN traffic will be centralized (but not tunneled). If the traffic for the VLAN/FLAT needs to be distributed, then it should use a different router. Changes in neutron 20.3.0..20.3.1 --------------------------------- b37a2f80ee Start metadata proxy even if IPv6 DAD fails 1a66962ee3 Change RBAC relationship loading method to "joined" 8d30f9223a Revert "Delete sg rule which remote is the deleted sg" bbbafe1681 [ovn] Avoid unwanted ACL_NOT_FOUND error when deleting log objects 508d8328aa Use explicit inner join for networks in port query 99b712b397 [stable-only][ovn] Fix ovsdbapp db_set command for stable branches f1db48afc1 Fix not working use_random_fully config option 46aefebd5d [OVN] Update ovn meter when neutron server reloads c3c056950d Delete sg rule which remote is the deleted sg defb6018f3 Suppress IPv6 metadata DAD failure and delete address 995c465539 Avoid retrieving ports if network list is empty c3fb31b574 Replace context decorators with context managers 9e088512b4 Honor debug mode in keepalived-state-change script logs b3dc3ffa63 Change flag check order in wait_until_address_ready() 47b9511ec5 OVN: Always try and create a metadata port on subnets c246913b2f Ensure redirect-type=bridged not used for geneve networks 347486fb51 Fix concurrent port binding activate 85321a61d3 Revert "Ensure vlan network traffic is not centralized" 9150206a07 [OVN] Explicitly define the fixed IPs for the metadata port fec0286e26 Fix default value for MTUs, when not provided 8c7f3b61f7 [OVS] Allow custom ethertype traffic in the ingress table 833260b04d Delete the PB level registers when deleting the duplicated PB 0152a6087f Only create a frozen Row on matching events f83a97dea2 Ensure vlan network traffic is not centralized 4529b5b230 Rename setup-mtu-t1 argument because it is misleading Diffstat (except docs and test files) ------------------------------------- neutron/agent/l3/keepalived_state_change.py | 1 - neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/ip_lib.py | 19 ++- neutron/agent/linux/iptables_manager.py | 7 +- .../agent/linux/openvswitch_firewall/firewall.py | 19 +++ neutron/agent/metadata/driver.py | 41 ++++- neutron/cmd/remove_duplicated_port_bindings.py | 15 +- neutron/common/_constants.py | 3 + neutron/common/ovn/constants.py | 2 + neutron/conf/agent/database/agentschedulers_db.py | 4 +- neutron/db/db_base_plugin_v2.py | 13 +- neutron/db/models/address_group.py | 2 +- neutron/db/models/address_scope.py | 2 +- neutron/db/models/securitygroup.py | 2 +- neutron/db/models_v2.py | 6 +- neutron/db/qos/models.py | 2 +- neutron/objects/db/api.py | 17 +- neutron/objects/ports.py | 16 +- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 34 ++++ .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 8 + .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 86 +++++++++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 185 +++++++++++++++++---- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 3 +- neutron/plugins/ml2/plugin.py | 8 + neutron/services/logapi/drivers/ovn/driver.py | 54 +----- neutron/services/qos/qos_plugin.py | 4 +- .../agent/l3/test_keepalived_state_change.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 40 +++++ .../ovn/mech_driver/ovsdb/test_ovn_client.py | 68 ++++++++ .../drivers/ovn/mech_driver/test_mech_driver.py | 44 ++++- .../linux/openvswitch_firewall/test_firewall.py | 22 +++ .../unit/agent/linux/test_iptables_manager.py | 34 ++++ .../ovn/mech_driver/ovsdb/test_maintenance.py | 69 +++++++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 61 +++++++ .../drivers/ovn/mech_driver/test_mech_driver.py | 65 ++++++-- .../services/logapi/drivers/ovn/test_driver.py | 75 ++------- .../notes/bug-1953165-6e848ea2c0398f56.yaml | 16 ++ .../notes/bug-1986003-9bf5ca04f9304336.yaml | 10 ++ ...vn-recreate-metadata-port-76e2c0e651267aa0.yaml | 11 ++ .../notes/redirect-type-f29e89ca97357fe9.yaml | 24 +++ .../infrared/tripleo-ovn-migration/main.yml | 4 +- .../tripleo_environment/ovn_migration.sh | 14 +- 58 files changed, 1095 insertions(+), 229 deletions(-)

1 0

trove-tempest-plugin 2.1.0 (bobcat)
by no-reply＠openstack.org 12 Jun '23

12 Jun '23

We high-spiritedly announce the release of: trove-tempest-plugin 2.1.0: Tempest plugin for Trove project This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/trove-tempest-plugin Download the package from: https://tarballs.openstack.org/trove-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/trove/+bugs For more details, please see below. Changes in trove-tempest-plugin 2.0.1..2.1.0 -------------------------------------------- 1300140 Ignore files for trove-tempest-ipv6 job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-)

1 0

neutron-lib 2.20.2 (yoga)
by no-reply＠openstack.org 12 Jun '23

12 Jun '23

We are gleeful to announce the release of: neutron-lib 2.20.2: Neutron shared routines and utilities This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 2.20.1..2.20.2 ------------------------------------- 467eafd Add a "GROUP BY" clause on queries with RBAC entries 5398bbd Use neutron-tempest-plugin-api-yoga job in the stable/yoga branch 7f7e4ae Don't check context.system_scope to check project scope e035984 Do not set system scope on context Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 12 +++-- neutron_lib/context.py | 4 -- neutron_lib/db/model_query.py | 9 ++++ neutron_lib/db/utils.py | 17 ++----- 6 files changed, 37 insertions(+), 97 deletions(-)

1 0

designate-tempest-plugin 0.19.0 (bobcat)
by no-reply＠openstack.org 12 Jun '23

12 Jun '23

We are satisfied to announce the release of: designate-tempest-plugin 0.19.0: OpenStack DNS As A Service (Designate) Functional Tests This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/designate-tempest-plugin Download the package from: https://tarballs.openstack.org/designate-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/designate/+bugs For more details, please see below. Changes in designate-tempest-plugin 0.18.0..0.19.0 -------------------------------------------------- 25c93a5 Remove stable/wallaby job from master gate afdcc1c Update testing for show and list a shared zone d52cff8 This patch removes the usage of DDT module from test_unauthed.py a5ba980 Unroll test_update_records_propagated_to_backends Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 - 7 files changed, 326 insertions(+), 174 deletions(-)

1 0

octavia-tempest-plugin 2.4.0 (bobcat)
by no-reply＠openstack.org 12 Jun '23

12 Jun '23

We are pleased to announce the release of: octavia-tempest-plugin 2.4.0: Tempest plugin for Octavia This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/octavia-tempest-plugin Download the package from: https://tarballs.openstack.org/octavia-tempest-plugin/ Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. Changes in octavia-tempest-plugin 2.3.0..2.4.0 ---------------------------------------------- b9af916 Splitting scenario jobs in 2 jobs 0790950 Fix jobs running on Jammy vs. Focal vs. Bionic nodes da06895 Updating Octavia tempest jobs on Ubuntu jammy (22.04) d698a18 Fix request interval in _wait_for_lb_functional 554873f Fix the pool client auth test 6dac8ff Update Octavia tempest tests for no scoped tokens 7664549 Spliting centos scenario job into 2 jobs 6590e6e Add h2 traffic/scenario test Diffstat (except docs and test files) ------------------------------------- octavia_tempest_plugin/config.py | 6 +- .../api/v2/test_availability_zone_capabilities.py | 2 +- .../barbican_scenario/v2/test_tls_barbican.py | 174 ++++++++++++++++++++- zuul.d/jobs.yaml | 170 +++++++++++++++++--- zuul.d/projects.yaml | 32 ++-- 21 files changed, 475 insertions(+), 134 deletions(-)

1 0

ovn-octavia-provider 2.1.1 (yoga)
by no-reply＠openstack.org 12 Jun '23

12 Jun '23

We are glad to announce the release of: ovn-octavia-provider 2.1.1: OpenStack Octavia integration with OVN This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ovn-octavia-provider Download the package from: https://tarballs.openstack.org/ovn-octavia-provider/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in ovn-octavia-provider 2.1.0..2.1.1 -------------------------------------------- 519a663 Discard batch-update-members not valid request 30206f1 Apply admin_state_up on a new member creation cb7e441 Add retry on case of sqlite3.InterfaceError on FT f6ce0a2 Fix update member action 0728197 Use ovsdbapp commands to add/del backends to ip_port_mappings 730843b Fix broken pep8 jobs due to bandit 1.7.5 updated version 2d40533 Add new FTs for health monitoring basic operations 0389cbe Remove HM uuiid from LB external_ids when the HM's pool is deleted 655a1f5 Reset member provisioning status to NO_MONITOR when a HM is deleted Diffstat (except docs and test files) ------------------------------------- ovn_octavia_provider/common/constants.py | 3 + ovn_octavia_provider/driver.py | 49 +-- ovn_octavia_provider/helper.py | 447 ++++++++++++--------- ovn_octavia_provider/ovsdb/impl_idl_ovn.py | 46 +++ 8 files changed, 854 insertions(+), 316 deletions(-)

1 0

tempest 35.0.0 (bobcat)
by no-reply＠openstack.org 09 Jun '23

09 Jun '23

We are pumped to announce the release of: tempest 35.0.0: OpenStack Integration Testing This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 35.0.0 ^^^^^^ Prelude ******* This is an intermediate release during the 2023.2 development cycle to mark the end of support for EM Xena release in Tempest. After this release, Tempest will support below OpenStack Releases: * 2023.1 * Zed * Yoga Current development of Tempest is for OpenStack 2023.2 development cycle. New Features ************ * Add delete_attachment to the v3 AttachmentsClient and terminate_connection to the v3 VolumesClient. Changes in tempest 34.2.0..35.0.0 --------------------------------- 366e020b2 Pin stable/2023.1 constraint in tox to release 35.0.0 c550f7797 End support for stable/xena 86b8b6204 [FIX] Floating IP already exists error b764ca1b5 Remove ubuntu focal job 037ea4efe Enable Nova, Glance RBAC old defaults in pre provisioned account testing bd97ae91e Fix test_delete_locations to be performed by admin cbaf22e85 Add tests to check attachments are secure 368d19d7e Remove closure _unshelve_server not useful be79b46bb Add request id to logs if we get a timeout. 2ba26afc1 Add skip for cinder extend volume with snapshot 4054e13e6 Create releasenotes page for tempest 34.2.0 e5da6756b Also require resources for PINGABLE 274878649 Make volumes_backup test wait for SSHABLE 0ab4ca3f3 Switch to the master constraint in tox.ini Diffstat (except docs and test files) ------------------------------------- .../add-volume-detach-libs-2cbb3ca924aed0ac.yaml | 5 + .../end-of-support-of-xena-2e747cff7f8bc48a.yaml | 12 ++ releasenotes/source/index.rst | 1 + releasenotes/source/v34.2.0.rst | 6 + tempest/api/compute/servers/test_server_actions.py | 15 +- tempest/api/image/base.py | 78 +++++++++ tempest/api/image/v2/admin/test_images.py | 38 +++++ tempest/api/image/v2/test_images.py | 107 +----------- tempest/api/volume/admin/test_volumes_actions.py | 6 +- tempest/api/volume/test_volumes_backup.py | 8 +- tempest/api/volume/test_volumes_extend.py | 3 + tempest/common/compute.py | 9 +- tempest/config.py | 6 + tempest/lib/api_schema/response/volume/volumes.py | 1 + .../lib/services/volume/v3/attachments_client.py | 7 + tempest/lib/services/volume/v3/volumes_client.py | 13 +- tempest/scenario/test_server_basic_ops.py | 12 +- tempest/scenario/test_server_volume_attachment.py | 189 +++++++++++++++++++++ zuul.d/integrated-gate.yaml | 9 - zuul.d/project.yaml | 10 +- zuul.d/stable-jobs.yaml | 18 -- zuul.d/tempest-specific.yaml | 7 +- 22 files changed, 390 insertions(+), 170 deletions(-)

1 0

ovn-octavia-provider 4.0.1 (antelope)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We eagerly announce the release of: ovn-octavia-provider 4.0.1: OpenStack Octavia integration with OVN This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ovn-octavia-provider Download the package from: https://tarballs.openstack.org/ovn-octavia-provider/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in ovn-octavia-provider 4.0.0..4.0.1 -------------------------------------------- 125ffe7 Discard batch-update-members not valid request 099871f Apply admin_state_up on a new member creation e5c9146 Add retry on case of sqlite3.InterfaceError on FT d3e395a Fix update member action 67fa32f Use ovsdbapp commands to add/del backends to ip_port_mappings b78904c [stable/2023.1 only] Drop -master jobs Diffstat (except docs and test files) ------------------------------------- ovn_octavia_provider/driver.py | 43 +-- ovn_octavia_provider/helper.py | 360 ++++++++++++--------- ovn_octavia_provider/ovsdb/impl_idl_ovn.py | 46 +++ zuul.d/base.yaml | 22 -- zuul.d/project.yaml | 4 - 9 files changed, 516 insertions(+), 308 deletions(-)

1 0

neutron-lib 3.4.1 (antelope)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are pumped to announce the release of: neutron-lib 3.4.1: Neutron shared routines and utilities This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 3.4.0..3.4.1 ----------------------------------- 86ea887 Add a "GROUP BY" clause on queries with RBAC entries a130649 Context.elevated() method sets all required roles for context object 57dcd12 Return properly elevated context by get_admin_context() helper d9d10ea Use proper neutron-tempest-plugin template in 2023.1 branch 2851f84 Update TOX_CONSTRAINTS_FILE for stable/2023.1 5af6738 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 2 +- neutron_lib/context.py | 17 +++++++++++------ neutron_lib/db/model_query.py | 9 +++++++++ tox.ini | 10 +++++----- 6 files changed, 58 insertions(+), 12 deletions(-)

1 0

neutron-lib 3.1.2 (zed)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are overjoyed to announce the release of: neutron-lib 3.1.2: Neutron shared routines and utilities This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 3.1.1..3.1.2 ----------------------------------- fdbece1 Add a "GROUP BY" clause on queries with RBAC entries 00d4c31 Context.elevated() method sets all required roles for context object cbfb104 Return properly elevated context by get_admin_context() helper 7bc352a Do not set system scope on context Diffstat (except docs and test files) ------------------------------------- neutron_lib/context.py | 21 +++++++++++---------- neutron_lib/db/model_query.py | 9 +++++++++ 3 files changed, 53 insertions(+), 11 deletions(-)

1 0

ovn-octavia-provider 3.1.1 (zed)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We exuberantly announce the release of: ovn-octavia-provider 3.1.1: OpenStack Octavia integration with OVN This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ovn-octavia-provider Download the package from: https://tarballs.openstack.org/ovn-octavia-provider/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in ovn-octavia-provider 3.1.0..3.1.1 -------------------------------------------- 36d507e Discard batch-update-members not valid request 2f5b273 Apply admin_state_up on a new member creation 23ea3bb Add retry on case of sqlite3.InterfaceError on FT 187d3fc Fix update member action dfb5cc7 Use ovsdbapp commands to add/del backends to ip_port_mappings 75b8456 Fix broken pep8 jobs due to bandit 1.7.5 updated version 5f1567c Add new FTs for health monitoring basic operations aa2c9a3 Remove HM uuiid from LB external_ids when the HM's pool is deleted 0f5e9b3 Reset member provisioning status to NO_MONITOR when a HM is deleted Diffstat (except docs and test files) ------------------------------------- ovn_octavia_provider/common/constants.py | 3 + ovn_octavia_provider/driver.py | 49 +-- ovn_octavia_provider/helper.py | 447 ++++++++++++--------- ovn_octavia_provider/ovsdb/impl_idl_ovn.py | 46 +++ 8 files changed, 854 insertions(+), 316 deletions(-)

1 0

neutron-dynamic-routing 21.0.1 (zed)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are thrilled to announce the release of: neutron-dynamic-routing 21.0.1: Neutron Dynamic Routing This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron-dynamic-routing Download the package from: https://tarballs.openstack.org/neutron-dynamic-routing/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-dynamic-routing 21.0.0..21.0.1 ------------------------------------------------- 962bb66 Fix address_scope calculation 0d7fb34 Fix tox.ini for tox4 0eb1c1d Update TOX_CONSTRAINTS_FILE for stable/zed dc198d6 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + neutron_dynamic_routing/db/bgp_db.py | 8 +++++--- tox.ini | 13 ++++++------- 3 files changed, 12 insertions(+), 10 deletions(-)

1 0

ironic 22.0.0 (bobcat)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are tickled pink to announce the release of: ironic 22.0.0: OpenStack Bare Metal Provisioning This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 22.0.0 ^^^^^^ New Features ************ * Add new conductor conf option: [conductor]poweroff_in_cleanfail (default: False). when True nodes entering clean failed state will be powered off. This option may be unsafe when using Cleaning to perform hardware-transformative actions such as firmware upgrade. * Adds the concept of "parent_node" which allows a "child node", such as an independently managed BMC controlled device deployed within a "parent_node" as part of API version *1.83*. Child nodes are hidden from normal node lists as they are not "general purpose" machines, but have a specific embedded usage. In this model, RBAC rules also apply so if you wish an "owner" or "lessee" to have the child node visible, they must also have the the appropriate "owner" or "lessee" value set matching the parent node. * Adds a "/v1/nodes/?include_children=True" parameter to get a list of all nodes and their children. * Adds a "/v1/nodes/?parent_node=<node_ident>" query parameter to permit retrieval of a list of child nodes assigned to the parent denoted by "<node_ident>". * On shutdown the conductor will wait for at most "[DEFAULT]graceful_shutdown_timeout" seconds for existing lock node reservations to clear. Previously lock reservations were cleared immediately, which in some cases would result in nodes going into a failed state. * The Redfish firmware upgrade interface now supports checksum determination by length, and "sha256" and "sha512" checksums may now be supplied to the step arguments. Upgrade Notes ************* * This upgrade contains an additional field for the "nodes" table, named "parent_node". This update also indexes the "parent_node" database column to prevent performance issues in large deployments. * "[DEFAULT]graceful_shutdown_timeout" defaults to 60s. Systemd "TimeoutStopSec" defaults to 30s. Kubernetes "terminationGracePeriodSeconds" defaults to 90s. It is recommended to align the value of "[DEFAULT]graceful_shutdown_timeout" with the graceful timeout of the process manager of the conductor process. * Fully removes the "cpus" property from the documentation and inspect interface implementations. It was never used internally by Ironic, and is no longer used by Nova. * The defaults for "kernel_append_params" have had the Linux kernel command line parameter "nomodeset" removed from the defaults for the "kernel_append_params" settings. The "nomodeset" option is for troubleshooting and changes the behavior of the graphics interface such that memory can be locked upon graphical updates on physical servers with BMC graphical interfaces, which results in spikes in latency and packet loss whenever graphics updates occur. Operators may add the option to their local configuration, but should be aware that large image transfers or other high IO operations can be impacted. Bug Fixes ********* * [bug 2010613 (https://storyboard.openstack.org/#!/story/2010613) Fixes issue with SNMP v3 auth protocol and priv protocol set in driver info not being retrieved correctly when a SNMP client is initialized. * Fixes Ironic integration with Cinder because of changes which resulted as part of the recent Security related fix in bug 2004555 (https://launchpad.net/bugs/2004555) The work in Ironic to track this fix was logged in bug 2019892 (https://bugs.launchpad.net/ironic/+bug/2019892) Ironic now sends a service token to Cinder, which allows for access restrictions added as part of the original CVE-2023-2088 fix to be appropriately bypassed. Ironic was not vulnerable, but the restrictions added as a result did impact Ironic's usage. This is because Ironic volume attachments are not on a shared "compute node", but instead mapped to the physical machines and Ironic handles the attachment life- cycle after initial attachment. * Fixes "Invalid cross-device link" in some cases when using "file://" image URLs. * Fixes issues in Ironic's use of SQLAlchemy with SQLite Databases, which is common with users like Metal3, which prevented Ironic from supporting SQLAlchemy 2.0 properly, as autocommit was re-enabled. * Fixes bug of iRMC driver in parse_driver_info where, if FIPS is enabled, SNMP version is always required to be version 3 even though iRMC driver's xxx_interface doesn't use SNMP actually. * Fixes bug in iRMC driver, where *irmc* power_interface sets and updates *irmc_ipmi_succeed* flag which is used by rest of iRMC driver code to deal with iRMC firmware's IPMI incompatibility but *ipmitool* power_interface doesn't set nor update *irmc_ipmi_succeed* flag and rest of iRMC driver code fail to handle iRMC firmware's IPMI incompatibility correctly. * Fixes an issue where an agent token could be inadvertently orphaned if a node is already in the target power state when we attempt to turn the node off. * Fixes scope classification check with the "self_owned_node" policy check where it was limited to check execution with only project scoped, so system scoped users who ticked the policy endpoint would basically get an incorrect error. * Enables boot mode switching during anaconda deploy for "ilo" and "ilo5" hardware types. * Fixes secure boot with anaconda deploy. * Fixes the bug where provisioning a Redfish managed node fails if the BMC doesn't support EthernetInterfaces attribute, even if MAC address information is provided manually. This is done by handling of MissingAttributeError sushy exception in get_mac_addresses() method. This fix is needed to successfully provision machines such as Cisco UCSB and UCSX. * No longer re-calculates checksums for images that are already raw. Previously, it would cause significant delays in deploying raw images. * Fixes an issue where the database upgrade can hang on Python 3.10. This was because open transactions could become orphaned awaiting the Python runtime to clean up their memory references due to the way the overall database query was being intiiated to pre-flight check the upgrade. We have structurally changed the behavior to remedy this case. * Agents deploying on physical servers with default kernel arguments were suspetible to packet loss if a Matrox VGA/Aspeed BMC Graphics interface is present on the machine. The defaults have been changed to remove the use of the "nomodeset" kernel command line parameter which should only be used for troubleshooting as it has been determined that the memory updates can lock all of the kernel memory upon any console graphics update which can negatively impact IO for Networking or Disk interactions. * Fixes an issue where an agent token was being orphaned if a baremetal node timed out during cleaning operations, leading to issues where the node would not be able to establish a new token with Ironic upon future in some cases. We now always wipe the token in this case. Changes in ironic 21.4.0..22.0.0 -------------------------------- bf850cad1 Make metal3 job voting d66530494 Add DB model for Firmware aeb01a075 follow-up on DPU change api-ref da0d7494e Add ironic-grenade-skip-level Job d2039a29d Handle nova policy change 124ad571f Explicitly pin CIRROS_VERSION eaf26c7c6 Remove unused get_not_versions from dbapi ea68a4a79 Remove model_query use from general dbapi calls 93688e953 Explicitly use a session for DB version check 3f5e25e18 DPU modeling - parent_node DB/Model/API 27bf20911 [iRMC] Fix IPMI incompatibility handling error 4beeef777 CI: DB: Don't return inside of node get wrappers fce8c3a65 CI: Change tinycore URL 8b98dfafd CI: Disable mysql counters for grenade 1cb371327 CI: Try to isolate test failures in neutron vif logic 9c0b4c90a Fix Cinder Integration fallout from CVE-2023-2088 65b8895e8 Update docs: Ironic uses launchpad now 912dcbbdc CI: Mark BFV job non-voting for now c8c83ef54 Migrate to pysnmp lextudio ecosystem 995e38cd7 Don't return the in-flight SQL handler 9da6dfd73 Fix self_owned_node policy check 17d3b72b3 Remove indicators list by component from api-ref 3139460cd Imported Translations from Zanata 1b8c0be0b Fix api-ref v1-indicators cec72275a CI: Fix another network test 451857777 CI: Modify dhcp client ID fail b48dfd44c Use monotonic time for hashring reset cae05c70e Make rbac enforced test non-voting for the time being 7a5f80cec Fix anaconda stage2_id loading from image properties 03cd9788e Support longer checksums for redfish firmware upgrade 7f281392c Change wholedisk image checksum to sha256 f10958a54 Handle MissingAttributeError when using OOB inspections to fetch MACs c03a5b44e Remove autocommit, again. 75b881bd3 Fix DB/Lock session handling issues f2605e928 Remove use of nomodeset by default 3f09bdcf9 [iRMC] Fix parse_driver_info bug enforcing SNMP v3 under FIPS mode c7b8236ab Configure docs: we no longer use storyboard 510a612ee Add ablity to power off nodes in clean failed e0c0b771e [iRMC] Fix typo of Python string format in log message 153d4d838 Upgrade to latest hacking - v6 708354573 tests: Replace invalid UUIDs 00aadf570 db: Resolve SAWarning warnings 5268c50a7 Run metal3 integration with ironic-image from source a5a737e38 Set ironic-grenade to wait 120 seconds 9f422a8df Fix requests calls with timeouts cc9fa8526 Remove outdated API version information from the enrollment docs 59c6ad96c Always fall back from hard linking to copying files 4bcef0eee Do not log into the template1 database during test-setup ebc1053ce Exclude all files starting with . from flake8 tests 3e21560bf Remove all references to the "cpus" property b201e52f8 [CI] Fix port list benchmark d0448ea20 Use main branch of metal3-dev-env to run metal3 integration job 21437135a Add error logging on lookup failures in the API 6341003da Enables boot modes switching with Anaconda deploy for ilo driver c5e004a73 Fixes Secureboot with Anaconda deploy e30ba65f9 Refactoring: clean up inspection data handlers 3dd54a110 Refactoring: DRY in the root API controller 0e7c6f978 Refactoring: create ironic.conductor.inspection b13ce6eb3 Imported Translations from Zanata 48ea2c5e7 Update master for stable/2023.1 f00da959e Do not recalculate checksum if disk_format is not changed a6d87a608 Add a non-voting metal3 CI job bcf6c1226 Clean out agent token even if power is already off 47b590948 Wipe Agent Token when cleaning timeout occcurs 005f21c0d Fix auth_protocol and priv_protocol for SNMP v3 d43f7fbc6 Refactoring: extract some common functions from the inspector code 9acfd5136 Restructure the inspector module in preparation for its expansion b41d5d514 Document [fake] delay config values 6a9e319fb On rpc service stop, wait for node reservation release Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- api-ref/source/baremetal-api-v1-indicators.inc | 45 +--- api-ref/source/baremetal-api-v1-nodes.inc | 18 ++ api-ref/source/conf.py | 2 +- api-ref/source/parameters.yaml | 13 + .../node-indicators-component-list-response.json | 45 ---- .../source/samples/node-inventory-response.json | 1 - devstack/lib/ironic | 17 +- devstack/tools/ironic/scripts/cirros-partition.sh | 2 +- .../install/include/kernel-boot-parameters.inc | 4 +- driver-requirements.txt | 4 +- ironic/api/controllers/v1/__init__.py | 146 +++-------- ironic/api/controllers/v1/node.py | 206 +++++++++++---- ironic/api/controllers/v1/ramdisk.py | 6 +- ironic/api/controllers/v1/utils.py | 17 +- ironic/api/controllers/v1/versions.py | 4 +- ironic/common/cinder.py | 71 +++++- ironic/common/hash_ring.py | 4 +- ironic/common/image_service.py | 35 +-- ironic/common/keystone.py | 24 +- ironic/common/kickstart_utils.py | 4 +- ironic/common/molds.py | 6 +- ironic/common/policy.py | 12 +- ironic/common/pxe_utils.py | 3 +- ironic/common/release_mappings.py | 4 +- ironic/common/rpc_service.py | 18 +- ironic/common/utils.py | 28 ++ ironic/conductor/base_manager.py | 17 +- ironic/conductor/inspection.py | 108 ++++++++ ironic/conductor/manager.py | 100 +------- ironic/conductor/utils.py | 17 +- ironic/conf/conductor.py | 8 + ironic/conf/default.py | 5 +- ironic/conf/ilo.py | 2 +- ironic/conf/inventory.py | 15 +- ironic/conf/opts.py | 1 - ironic/conf/pxe.py | 2 +- ironic/conf/redfish.py | 2 +- ironic/db/api.py | 10 - ironic/db/sqlalchemy/__init__.py | 23 +- .../163040c5513f_add_firmware_information.py | 50 ++++ .../versions/fe222f476baf_add_parent_node_field.py | 35 +++ ironic/db/sqlalchemy/api.py | 269 ++++++++++++-------- ironic/db/sqlalchemy/models.py | 21 +- ironic/drivers/base.py | 4 +- .../ansible/playbooks/library/stream_url.py | 3 +- ironic/drivers/modules/deploy_utils.py | 37 ++- ironic/drivers/modules/drac/inspect.py | 14 - ironic/drivers/modules/drac/raid.py | 2 +- ironic/drivers/modules/ilo/boot.py | 12 + ironic/drivers/modules/inspect_utils.py | 129 +++++----- ironic/drivers/modules/inspector/__init__.py | 15 ++ ironic/drivers/modules/inspector/client.py | 57 +++++ .../{inspector.py => inspector/interface.py} | 105 ++------ ironic/drivers/modules/irmc/common.py | 12 + ironic/drivers/modules/irmc/inspect.py | 5 +- ironic/drivers/modules/irmc/management.py | 18 +- ironic/drivers/modules/pxe.py | 15 +- ironic/drivers/modules/pxe_base.py | 7 +- ironic/drivers/modules/redfish/firmware_utils.py | 18 +- ironic/drivers/modules/redfish/inspect.py | 4 +- ironic/drivers/modules/redfish/management.py | 11 +- ironic/drivers/modules/snmp.py | 4 +- ironic/hacking/checks.py | 2 +- ironic/objects/node.py | 8 +- .../unit/drivers/modules/drac/test_inspect.py | 22 -- .../unit/drivers/modules/inspector/__init__.py | 0 .../unit/drivers/modules/inspector/test_client.py | 65 +++++ .../test_interface.py} | 70 +---- .../unit/drivers/modules/irmc/test_inspect.py | 6 - .../unit/drivers/modules/network/test_common.py | 27 +- .../drivers/modules/redfish/test_firmware_utils.py | 24 ++ .../unit/drivers/modules/redfish/test_inspect.py | 18 +- .../drivers/modules/redfish/test_management.py | 10 + .../unit/drivers/modules/test_deploy_utils.py | 73 +++++- .../unit/drivers/modules/test_inspect_utils.py | 136 ++++------ playbooks/metal3-ci/fetch_kube_logs.yaml | 32 +++ playbooks/metal3-ci/fetch_pod_logs.yaml | 24 ++ playbooks/metal3-ci/post.yaml | 194 ++++++++++++++ playbooks/metal3-ci/run.yaml | 39 +++ .../Cleanfail-power-off-13b5fdcc2727866a.yaml | 8 + .../add-parent-node-support-10bd42abd008db6f.yaml | 23 ++ .../notes/bug-2010613-3ab1f32aaa776f28.yaml | 7 + .../notes/cinder-2019892-6b5a9de5c5f05aa6.yaml | 16 ++ .../notes/cross-link-1ffd1a4958f14fd7.yaml | 5 + ...b-sqlite-OperationalError-7934dbda2a21c69e.yaml | 6 + ...nforcing-snmpv3-with-fips-e45971d363925ec3.yaml | 6 + ...atibility-patch-situation-c246d2b59b2e8a78.yaml | 8 + .../fix-power-off-token-wipe-e7d605997f00d39d.yaml | 6 + ...ix-self-owned-node-policy-fc2dae357879dc33.yaml | 7 + ...a_deploy_with_ilo_drivers-16637adb62f0ed2f.yaml | 5 + ...boot_with_anaconda_deploy-84d7c1e3bbfa40f2.yaml | 4 + .../graceful_shutdown_wait-9a62627714b86726.yaml | 15 ++ ...g-ethernetinterfaces-attr-7e52f7259fe66762.yaml | 9 + releasenotes/notes/no-cpus-c79717303470bf3c.yaml | 6 + .../notes/no-recalculate-653e524fd6160e72.yaml | 5 + ...sh-firmware-sha256-sha512-3e40c3a087fe42b4.yaml | 6 + ...-model-query-from-upgrade-af227b6c8a5d654a.yaml | 9 + .../notes/remove-nomodset-7a352a9519c1045b.yaml | 22 ++ ...ken-upon-cleaning-timeout-c9add514fad1b02c.yaml | 7 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/conf.py | 2 +- releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 55 +++- test-requirements.txt | 4 +- tools/benchmark/generate-statistics.py | 2 + tools/test-setup.sh | 2 +- tox.ini | 4 +- zuul.d/ironic-jobs.yaml | 13 + zuul.d/metal3-jobs.yaml | 30 +++ zuul.d/project.yaml | 13 +- 159 files changed, 3129 insertions(+), 1473 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 876e817cb..c5a90f2d0 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -8 +8,3 @@ proliantutils>=2.14.0 -pysnmp>=4.3.0,<5.0.0 +pysnmp-lextudio>=5.0.0 # BSD +pyasn1-lextudio>=1.1.0 # BSD +pyasn1-modules-lextudio>=0.2.0 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 0c4bdb0ca..57c4a9c2c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16,3 @@ WebTest>=2.0.27 # MIT -pysnmp>=4.4.12 +pysnmp-lextudio>=5.0.0 # BSD +pyasn1-lextudio>=1.1.0 # BSD +pyasn1-modules-lextudio>=0.2.0 # BSD

1 0

neutron 21.1.1 (zed)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are chuffed to announce the release of: neutron 21.1.1: OpenStack Networking This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 21.1.1 ^^^^^^ Known Issues ************ * The high availability of metadata service on isolated networks is limited or non-existent. IPv4 metadata is redundant when the DHCP agent managing it is redundant, but recovery is tied to the renewal of the DHCP lease, making most recoveries very slow. IPv6 metadata is not redundant at all as the IPv6 metadata address can only be configured in a single place at a time as it is link-local. Multiple agents trying to configure it will generate an IPv6 duplicate address detection failure. Administrators may observe the IPv6 metadata address in "dadfailed" state in the DHCP namespace for this reason, which is only an indication it is not highly available. Until a redesign is made to the isolated metadata service there is not a better deployment option. See bug 1953165 (https://bugs.launchpad.net/neutron/+bug/1953165) for information. * The *redirect-type=bridged* option is only used if all the tenant networks connected to the router are of type VLAN or FLAT. In this case their traffic will be distributed. However, if there is a mix of VLAN/FLAT and geneve networks connected to the same router, the redirect-type option is not set, and therefore the traffic for the VLAN/FLAT networks will also be centralized but not tunneled. Bug Fixes ********* * 1986003 (https://bugs.launchpad.net/neutron/+bug/1986003) Fixed an issue with concurrent requests to activate the same port binding where one of the requests returned a 500 Internal Server Error. With the fix one request will return successfully and the other will return a 409 Conflict (Binding already active). This fixes errors in nova live-migrations where those concurrent requests might be sent. Nova handles the 409/Conflict response gracefully. * Fix an issue in the OVN driver where network metadata could become unavailable if the metadata port was ever deleted, even if accidental. To re-create the port, a user can now disable, then enable, DHCP for one of the subnets associated with the network using the Neutron API. This will try and create the port, similar to what happens in the DHCP agent for ML2/OVS. For more information, see bug 2015377 (https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/2015377) * [bug 2003455 (https://bugs.launchpad.net/neutron/+bug/2003455) As part of a previous commit (https://review.opendev.org/c/openstack/neutron/+/875644) the *redirect-type=bridged* option was set in all the router gateway ports (cr-lrp ovn ports). However this was breaking the N/S traffic for geneve tenant networks connected to the provider networks through those routers with the redirect-type option enabled. To fix this we ensure that the redirect-type option is only set if all the networks connected to the router are of VLAN or FLAT type, otherwise we fall back to the default option. This also means that if there is a mix of VLAN and geneve tenant networks connected to the same router, the VLAN traffic will be centralized (but not tunneled). If the traffic for the VLAN/FLAT needs to be distributed, then it should use a different router. Changes in neutron 21.1.0..21.1.1 --------------------------------- 1a711f399a Start metadata proxy even if IPv6 DAD fails d3b403bfee Change RBAC relationship loading method to "joined" 8bf6f7f03c Revert "Delete sg rule which remote is the deleted sg" 8def3b694d [ovn] Avoid unwanted ACL_NOT_FOUND error when deleting log objects 004ed33ec1 Use explicit inner join for networks in port query 1529c0a297 [stable-only][ovn] Fix ovsdbapp db_set command for stable branches 2317295cf5 Fix not working use_random_fully config option 438e486451 docs: Deindent code blocks 039caabfe3 [S-RBAC] Fix new policies for FIP PFs APIs ca942e9732 [S-RBAC] Get QoS rule types API available for READER role 9177e90db4 [S-RBAC] Fix new policies for get QoS rules APIs 1864dd8684 [OVN] Update ovn meter when neutron server reloads 876c681821 [S-RBAC] Get availability zone API available for READER role 55a3543aba [S-RBAC] Allow network owners to get ports from that network e4cf8cc0a6 Delete sg rule which remote is the deleted sg 1c615281f7 Suppress IPv6 metadata DAD failure and delete address 9fa3ed4a84 Avoid retrieving ports if network list is empty beaed42bd9 Replace context decorators with context managers ecbb69522a Honor debug mode in keepalived-state-change script logs 0c18181ee9 Change flag check order in wait_until_address_ready() 0681f8b3ad OVN: Always try and create a metadata port on subnets b43c9a6ec0 Do not check the context object in ``TestMeteringPlugin`` 061eafdd81 [stable/zed only] Drop -master jobs ec1a0e27dc Ensure redirect-type=bridged not used for geneve networks bd0d2ae6f1 Fix concurrent port binding activate f5d3ef2a23 Make path for tcpdump release-specific ba7d18d634 Revert "Ensure vlan network traffic is not centralized" d35fa4cdd3 [OVN] Explicitly define the fixed IPs for the metadata port d0d8702e89 Fix default value for MTUs, when not provided 138a47bfd6 [OVS] Allow custom ethertype traffic in the ingress table 07855a6826 Delete the PB level registers when deleting the duplicated PB 0091a25ea6 Only create a frozen Row on matching events a415bb4c98 Ensure vlan network traffic is not centralized Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 7 +- ...g-bgp-floating-ip-over-l2-segmented-network.rst | 420 +++++++------ .../internals/ovn/ovn_network_logging.rst | 114 ++-- .../contributor/internals/ovn/port_forwarding.rst | 110 ++-- .../contributor/testing/ci_scenario_jobs.rst | 11 - neutron/agent/l3/keepalived_state_change.py | 1 - neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/ip_lib.py | 19 +- neutron/agent/linux/iptables_manager.py | 7 +- .../agent/linux/openvswitch_firewall/firewall.py | 19 + neutron/agent/metadata/driver.py | 41 +- neutron/cmd/remove_duplicated_port_bindings.py | 15 +- neutron/common/_constants.py | 3 + neutron/common/ovn/constants.py | 2 + neutron/conf/agent/database/agentschedulers_db.py | 4 +- neutron/conf/policies/availability_zone.py | 6 +- neutron/conf/policies/base.py | 14 + .../conf/policies/floatingip_port_forwarding.py | 16 +- neutron/conf/policies/port.py | 1 + neutron/conf/policies/qos.py | 22 +- neutron/db/db_base_plugin_v2.py | 13 +- neutron/db/models/address_group.py | 2 +- neutron/db/models/address_scope.py | 2 +- neutron/db/models/securitygroup.py | 2 +- neutron/db/models_v2.py | 6 +- neutron/db/qos/models.py | 2 +- neutron/objects/db/api.py | 18 +- neutron/objects/ports.py | 16 +- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 34 ++ .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 8 + .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 86 ++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 185 +++++- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 3 +- neutron/plugins/ml2/plugin.py | 8 + neutron/services/logapi/drivers/ovn/driver.py | 54 +- neutron/services/qos/qos_plugin.py | 4 +- .../agent/l3/test_keepalived_state_change.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 40 ++ .../ovn/mech_driver/ovsdb/test_ovn_client.py | 68 +++ .../drivers/ovn/mech_driver/test_mech_driver.py | 44 +- .../linux/openvswitch_firewall/test_firewall.py | 22 + .../unit/agent/linux/test_iptables_manager.py | 34 ++ .../unit/conf/policies/test_availability_zone.py | 6 - .../policies/test_floatingip_port_forwarding.py | 347 ++++++----- .../ovn/mech_driver/ovsdb/test_maintenance.py | 69 ++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 61 ++ .../drivers/ovn/mech_driver/test_mech_driver.py | 65 +- .../services/logapi/drivers/ovn/test_driver.py | 75 +-- .../unit/services/metering/test_metering_plugin.py | 24 +- .../notes/bug-1953165-6e848ea2c0398f56.yaml | 16 + .../notes/bug-1986003-9bf5ca04f9304336.yaml | 10 + ...vn-recreate-metadata-port-76e2c0e651267aa0.yaml | 11 + .../notes/redirect-type-f29e89ca97357fe9.yaml | 24 + zuul.d/base.yaml | 24 - zuul.d/job-templates.yaml | 16 - zuul.d/tempest-multinode.yaml | 53 -- zuul.d/tempest-singlenode.yaml | 99 ---- 79 files changed, 2401 insertions(+), 1602 deletions(-)

1 0

neutron 22.0.1 (antelope)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are pleased to announce the release of: neutron 22.0.1: OpenStack Networking This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 22.0.1 ^^^^^^ Known Issues ************ * The high availability of metadata service on isolated networks is limited or non-existent. IPv4 metadata is redundant when the DHCP agent managing it is redundant, but recovery is tied to the renewal of the DHCP lease, making most recoveries very slow. IPv6 metadata is not redundant at all as the IPv6 metadata address can only be configured in a single place at a time as it is link-local. Multiple agents trying to configure it will generate an IPv6 duplicate address detection failure. Administrators may observe the IPv6 metadata address in "dadfailed" state in the DHCP namespace for this reason, which is only an indication it is not highly available. Until a redesign is made to the isolated metadata service there is not a better deployment option. See bug 1953165 (https://bugs.launchpad.net/neutron/+bug/1953165) for information. * The *redirect-type=bridged* option is only used if all the tenant networks connected to the router are of type VLAN or FLAT. In this case their traffic will be distributed. However, if there is a mix of VLAN/FLAT and geneve networks connected to the same router, the redirect-type option is not set, and therefore the traffic for the VLAN/FLAT networks will also be centralized but not tunneled. Bug Fixes ********* * 1986003 (https://bugs.launchpad.net/neutron/+bug/1986003) Fixed an issue with concurrent requests to activate the same port binding where one of the requests returned a 500 Internal Server Error. With the fix one request will return successfully and the other will return a 409 Conflict (Binding already active). This fixes errors in nova live-migrations where those concurrent requests might be sent. Nova handles the 409/Conflict response gracefully. * Fix an issue in the OVN driver where network metadata could become unavailable if the metadata port was ever deleted, even if accidental. To re-create the port, a user can now disable, then enable, DHCP for one of the subnets associated with the network using the Neutron API. This will try and create the port, similar to what happens in the DHCP agent for ML2/OVS. For more information, see bug 2015377 (https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/2015377) * [bug 2003455 (https://bugs.launchpad.net/neutron/+bug/2003455) As part of a previous commit (https://review.opendev.org/c/openstack/neutron/+/875644) the *redirect-type=bridged* option was set in all the router gateway ports (cr-lrp ovn ports). However this was breaking the N/S traffic for geneve tenant networks connected to the provider networks through those routers with the redirect-type option enabled. To fix this we ensure that the redirect-type option is only set if all the networks connected to the router are of VLAN or FLAT type, otherwise we fall back to the default option. This also means that if there is a mix of VLAN and geneve tenant networks connected to the same router, the VLAN traffic will be centralized (but not tunneled). If the traffic for the VLAN/FLAT needs to be distributed, then it should use a different router. Changes in neutron 22.0.0..22.0.1 --------------------------------- e7f85abae6 Start metadata proxy even if IPv6 DAD fails 593939911c Change RBAC relationship loading method to "joined" d3fb57617d Revert "Delete sg rule which remote is the deleted sg" 97e478dcf5 [ovn] Avoid unwanted ACL_NOT_FOUND error when deleting log objects edbb0f4aa5 Use explicit inner join for networks in port query 48a000641d Fix not working use_random_fully config option 551ba73aa4 [stable-only][ovn] Fix ovsdbapp db_set command for stable branches 1ef6a605ad docs: Deindent code blocks 812526a279 [S-RBAC] Fix new policies for FIP PFs APIs c82eee0fd6 [S-RBAC] Get QoS rule types API available for READER role 572cc2d43e [S-RBAC] Fix new policies for get QoS rules APIs 05ff8ce3ee [OVN] Update ovn meter when neutron server reloads e7ccc75e0a [S-RBAC] Get availability zone API available for READER role 88963bafa5 [S-RBAC] Allow network owners to get ports from that network a15eece771 Delete sg rule which remote is the deleted sg ef41cb6073 Avoid retrieving ports if network list is empty 78a24a3a75 OVN: Always try and create a metadata port on subnets 0d3998c742 Replace context decorators with context managers 071255f098 Suppress IPv6 metadata DAD failure and delete address 2d543824a6 [sqlalchemy-20] Add reader context to ``get_ports_on_host_by_subnet`` 6efae0b110 Do not check the context object in ``TestMeteringPlugin`` 7e8898ec84 [stable/2023.1 only] Drop -master jobs da7b179933 Ensure redirect-type=bridged not used for geneve networks 4c4a168281 [stable/2023.1 only] Drop branches regex from skip level jobs 1b6fd61e33 Fix concurrent port binding activate 39f8db04a3 Revert "Ensure vlan network traffic is not centralized" 2a90dc754b [OVN] OVN agent should register "Chassis_Private" by default f822742af0 [OVN] Explicitly define the fixed IPs for the metadata port Diffstat (except docs and test files) ------------------------------------- ...g-bgp-floating-ip-over-l2-segmented-network.rst | 420 +++++++------ .../internals/ovn/ovn_network_logging.rst | 114 ++-- .../contributor/internals/ovn/port_forwarding.rst | 110 ++-- .../contributor/testing/ci_scenario_jobs.rst | 15 - neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/ip_lib.py | 8 +- neutron/agent/linux/iptables_manager.py | 7 +- neutron/agent/metadata/driver.py | 41 +- neutron/agent/ovn/agent/ovn_neutron_agent.py | 2 +- neutron/common/_constants.py | 3 + neutron/conf/agent/database/agentschedulers_db.py | 4 +- neutron/conf/policies/availability_zone.py | 6 +- neutron/conf/policies/base.py | 14 + .../conf/policies/floatingip_port_forwarding.py | 16 +- neutron/conf/policies/port.py | 1 + neutron/conf/policies/qos.py | 22 +- neutron/db/db_base_plugin_v2.py | 11 +- neutron/db/dvr_mac_db.py | 1 + neutron/db/models/address_group.py | 2 +- neutron/db/models/address_scope.py | 2 +- neutron/db/models/securitygroup.py | 2 +- neutron/db/models_v2.py | 6 +- neutron/db/qos/models.py | 2 +- neutron/objects/db/api.py | 18 +- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 34 ++ .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 8 + .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 91 ++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 195 ++++-- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 2 +- neutron/plugins/ml2/plugin.py | 8 + neutron/services/logapi/drivers/ovn/driver.py | 54 +- neutron/services/qos/qos_plugin.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 40 ++ .../ovn/mech_driver/ovsdb/test_ovn_client.py | 68 +++ .../drivers/ovn/mech_driver/test_mech_driver.py | 44 +- .../unit/agent/linux/test_iptables_manager.py | 34 ++ .../unit/conf/policies/test_availability_zone.py | 6 - .../policies/test_floatingip_port_forwarding.py | 347 ++++++----- .../ovn/mech_driver/ovsdb/test_maintenance.py | 68 ++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 61 ++ .../drivers/ovn/mech_driver/test_mech_driver.py | 65 +- .../services/logapi/drivers/ovn/test_driver.py | 75 +-- .../unit/services/metering/test_metering_plugin.py | 24 +- .../notes/bug-1953165-6e848ea2c0398f56.yaml | 16 + .../notes/bug-1986003-9bf5ca04f9304336.yaml | 10 + .../notes/bug-2003455-dff0d0f00b5a18e2.yaml | 9 - ...vn-recreate-metadata-port-76e2c0e651267aa0.yaml | 11 + .../notes/redirect-type-f29e89ca97357fe9.yaml | 24 + zuul.d/base.yaml | 70 --- zuul.d/grenade.yaml | 6 - zuul.d/job-templates.yaml | 27 - zuul.d/tempest-multinode.yaml | 53 -- zuul.d/tempest-singlenode.yaml | 225 ------- 73 files changed, 2285 insertions(+), 1798 deletions(-)

1 0

openstack-ansible 26.1.2 (zed)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We high-spiritedly announce the release of: openstack-ansible 26.1.2: Ansible playbooks for deploying OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 26.1.2 ^^^^^^ Deprecation Notes ***************** * RabbitMQ packages are no longer provided by PackageCloud due to the upstream repository being no longer available after 2023-05-28. Installations will now utilize a community mirror of CloudSmith repositories for rabbitmq and erlang. https://github.com/rabbitmq/rabbitmq-server/discussions/8386 Security Issues *************** * Includes SHA bumps for Nova, Cinder and Glance to cover OSSA-2023-003. Bug Fixes ********* * Fixes incorrect definition of ceilometer "polling_namespaces", when host is part of both central and compute groups (ie metal/aio scenario) * Fixes the absence of "libvirtd.service" on compute nodes. With CentOS upgrading the libvirt version to 9.3.0, they do not install libvirt-deamon as a dependency to libvirt-deamon-kvm anymore. libvirt-deamon is installed explicitly now. * https://bugs.launchpad.net/openstack-ansible/+bug/2021410 Changes in openstack-ansible 26.1.1..26.1.2 ------------------------------------------- 5c4a616a3 Bump OpenStack-Ansible SHAs for Zed 503f3e855 Use Zed Senlin version instead of master 11d8a0652 Remove unreadable unicode symbols 10efee32d Bump down etcd version for zun b7a119005 [doc] Add Ubuntu 22.04 as supported in AIO docs 7b1d070d3 Do not define cluster template labels 18f7c5349 Add internal_lb_vip_address to no_proxy Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 112 ++++++++++----------- playbooks/ceph-rgw-keystone-setup.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 28 +++--- playbooks/os-zun-install.yml | 4 + ...ometer_polling_namespaces-a21da7a655f4c922.yaml | 5 + ...all_libvirt_daemon_centos-9826ecb428bce8a5.yaml | 7 ++ .../notes/ossa-2023-003-99a7ab9c33b6da88.yaml | 4 + ...f-packagecloud-deprecated-5ee62da847ccae1f.yaml | 11 ++ .../templates/user_variables.aio.yml.j2 | 2 +- .../templates/user_variables_magnum.yml.j2 | 6 -- 12 files changed, 107 insertions(+), 81 deletions(-)

1 0

oslo.utils 6.0.2 (zed)
by no-reply＠openstack.org 01 Jun '23

01 Jun '23

We are delighted to announce the release of: oslo.utils 6.0.2: ======================== Team and repository tags ======================== .. image:: https://governance.openstack.org/tc/badges/oslo.utils.svg :target: https://governance.openstack.org/tc/reference/tags/index.html .. Change things from this point on ========== oslo.utils ========== .. image:: https://img.shields.io/pypi/v/oslo.utils.svg :target: https://pypi.org/project/oslo.utils/ :alt: Latest Version .. image:: https://img.shields.io/pypi/dm/oslo.utils.svg :target: https://pypi.org/project/oslo.utils/ :alt: Downloads The oslo.utils library provides support for common utility type functions, such as encoding, exception handling, string manipulation, and time handling. * Free software: Apache license * Documentation: https://docs.openstack.org/oslo.utils/latest/ * Source: https://opendev.org/openstack/oslo.utils * Bugs: https://bugs.launchpad.net/oslo.utils * Release notes: https://docs.openstack.org/releasenotes/oslo.utils/ This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 6.0.1..6.0.2 ---------------------------------- 716c2e2 [imageutils] Fix __str__ for QemuImgInfo f04ba14 Update TOX_CONSTRAINTS_FILE for stable/zed 1f86025 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 3 ++- oslo_utils/imageutils.py | 2 +- tox.ini | 4 ++-- 4 files changed, 8 insertions(+), 4 deletions(-)

1 0

oslo.db 12.1.1 (zed)
by no-reply＠openstack.org 01 Jun '23

01 Jun '23

We are pleased to announce the release of: oslo.db 12.1.1: ======================== Team and repository tags ======================== .. image:: https://governance.openstack.org/tc/badges/oslo.db.svg :target: https://governance.openstack.org/tc/reference/tags/index.html .. Change things from this point on =============================================== oslo.db -- OpenStack Database Pattern Library =============================================== .. image:: https://img.shields.io/pypi/v/oslo.db.svg :target: https://pypi.org/project/oslo.db/ :alt: Latest Version .. image:: https://img.shields.io/pypi/dm/oslo.db.svg :target: https://pypi.org/project/oslo.db/ :alt: Downloads The oslo db (database) handling library, provides database connectivity to different database backends and various other helper utils. * Free software: Apache license * Documentation: https://docs.openstack.org/oslo.db/latest * Source: https://opendev.org/openstack/oslo.db * Bugs: https://bugs.launchpad.net/oslo.db * Release notes: https://docs.openstack.org/releasenotes/oslo.db/ This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 12.1.0..12.1.1 --------------------------------- 717c824 types: Set 'cache_ok' (redux) 95c2fc6 Update TOX_CONSTRAINTS_FILE for stable/zed bc47794 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_db/sqlalchemy/types.py | 8 +++++++- tox.ini | 4 ++-- 3 files changed, 10 insertions(+), 3 deletions(-)

1 0

oslo.metrics 0.5.1 (zed)
by no-reply＠openstack.org 01 Jun '23

01 Jun '23

We are glad to announce the release of: oslo.metrics 0.5.1: ==================== Oslo Metrics Library ==================== This Oslo metrics API supports collecting metrics data from other Oslo libraries and exposing the metrics data to monitoring system. This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/oslo.metrics Download the package from: https://pypi.org/project/oslo.metrics Please report issues through: https://bugs.launchpad.net/oslo.metrics/+bugs For more details, please see below. Changes in oslo.metrics 0.5.0..0.5.1 ------------------------------------ 2e58dad Fix logging labales --> labels 9e8e549 Update TOX_CONSTRAINTS_FILE for stable/zed 14d1a40 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_metrics/message_router.py | 2 +- tox.ini | 4 ++-- 3 files changed, 4 insertions(+), 3 deletions(-)

1 0

oslo.messaging 14.3.1 (bobcat)
by no-reply＠openstack.org 01 Jun '23

01 Jun '23

We are ecstatic to announce the release of: oslo.messaging 14.3.1: ======================== Team and repository tags ======================== .. image:: https://governance.openstack.org/tc/badges/oslo.messaging.svg :target: https://governance.openstack.org/tc/reference/tags/index.html .. Change things from this point on Oslo Messaging Library ====================== .. image:: https://img.shields.io/pypi/v/oslo.messaging.svg :target: https://pypi.org/project/oslo.messaging/ :alt: Latest Version .. image:: https://img.shields.io/pypi/dm/oslo.messaging.svg :target: https://pypi.org/project/oslo.messaging/ :alt: Downloads The Oslo messaging API supports RPC and notifications over a number of different messaging transports. * License: Apache License, Version 2.0 * Documentation: https://docs.openstack.org/oslo.messaging/latest/ * Source: https://opendev.org/openstack/oslo.messaging * Bugs: https://bugs.launchpad.net/oslo.messaging * Release notes: https://docs.openstack.org/releasenotes/oslo.messaging/ This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.3.1 ^^^^^^ Upgrade Notes ************* * If kombu_reconnect_delay is specified in the [oslo_messaging_rabbit] section, ensure that it is less than 5.0, the value of ACK_REQUEUE_EVERY_SECONDS_MAX Bug Fixes ********* * Increased ACK_REQUEUE_EVERY_SECONDS_MAX to resolve issues with rabbitmq HA failover. Changes in oslo.messaging 14.3.0..14.3.1 ---------------------------------------- 0602d1a1 Increase ACK_REQUEUE_EVERY_SECONDS_MAX to exceed default kombu_reconnect_delay Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/amqpdriver.py | 2 +- oslo_messaging/_drivers/impl_rabbit.py | 6 ++++-- releasenotes/notes/bug-1993149-e8b231791b65e938.yaml | 9 +++++++++ 4 files changed, 15 insertions(+), 4 deletions(-)

1 0

ironic-python-agent 9.5.0 (bobcat)
by no-reply＠openstack.org 01 Jun '23

01 Jun '23

We are chuffed to announce the release of: ironic-python-agent 9.5.0: =================== Ironic Python Agent =================== Team and repository tags ======================== .. image:: https://governance.openstack.org/tc/badges/ironic-python- agent.svg :target: https://governance.openstack.org/tc/reference/tags/index.html Overview ======== An agent for controlling and deploying Ironic controlled baremetal nodes. The ironic-python-agent works with the agent driver in Ironic to provision the node. Starting with ironic-python-agent running on a ramdisk on the unprovisioned node, Ironic makes API calls to ironic- python-agent to provision the machine. This allows for greater control and flexibility of the entire deployment process. The ironic-python-agent may also be used with the original Ironic pxe drivers as of the Kilo OpenStack release. Building the IPA deployment ramdisk =================================== For more information see the `Image Builder <https://docs.openstack.org/ironic-python- agent/latest/install/index.html#image-builders>`_ section of the Ironic Python Agent developer guide. Using IPA with devstack ======================= This is covered in the `Deploying Ironic with DevStack <https://docs.openstack.org/ironic/latest/contributor/dev- quickstart.html#deploying-ironic-with-devstack>`_ section of the Ironic dev-quickstart guide. Project Resources ================= Project bugs are tracked on Launchpad: https://bugs.launchpad.net/ironic-python-agent/+bugs Developer documentation can be found here: https://docs.openstack.org/ironic-python-agent/latest/ Release notes for the project are available at: https://docs.openstack.org/releasenotes/ironic-python-agent/ Source code repository for the project is located at: https://opendev.org/openstack/ironic-python-agent/ IRC channel: #openstack-ironic on irc.oftc.net To contribute, start here: `Openstack: How to contribute <https://docs.openstack.org/infra/manual/developers.html>`_. This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 9.5.0 ^^^^^ New Features ************ * The hardware inventory now contains information about the system firmware: vendor, version and the build date. * The "ironic-python-agent" will now attempt to determine a checksum type by evaluating the length of the supplied checksum. This allows SHA512 (SHA-2) and SHA256 (SHA-2) checksums to be identified and utilized without an explicit declaration of the checksum type utilizing the "os_hash_algo" value. * Improved parsing of checksum files. * Added support for the "ALGORITHM (FILENAME) = CHECKSUM" format used by CentOS Stream. * Lines starting with "#" are ignored as comments. * If checksum file contain only the checksum itself, the content is validated to ensure it is one of the known checksum types. * Adds a new inspection collector "lldp" that collects LLDP information into the "lldp_raw" field. * The hardware inventory now contains supported network interface speed in Mbit/s. Deprecation Notes ***************** * Support for MD5 checksums have been deprecated and will be removed after the 2024 Release. * The LLDP information as part of the general inventory is deprecated. Use the new "lldp" inspection collector to retrieve it. * The "ipa-collect-lldp" kernel parameter and the corresponding option are now deprecated. Bug Fixes ********* * Fixes UEFI NVRAM record handling with efibootmgr so we can accept and handle UTF-16 encoded data which is to be expected in UEFI NVRAM as the records are UTF-16 encoded. * Fixes handling of UEFI NVRAM records to allow for unexpected characters in the response, so it is non-fatal to Ironic. Changes in ironic-python-agent 9.4.0..9.5.0 ------------------------------------------- 406c844 Follow-up Add documentation for MellanoxDeviceHardwareManager 6098747 Ironic (and IPA) use launchpad now c1c5537 Revert disabling MD5 checksums e7a048e Add support for CentOS SUM files 9ed232e Add network interface speed to the inventory c05fdf7 Fix checksum validation logic 3e05a03 Deprecate LLDP in inventory in favour of a new collector 32df26a Disable MD5 image checksums d7234c2 Upgrade to latest hacking - v6 76accfb Fix UTF-16 result handling for efibootmgr 0304c73 Report system firmware information in the inventory 2ddb693 Trivial: formatting issue in the inventory docs b32f6c6 [Trivial] Fix typo in efi_utils 9f09b88 Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 4 +- README.rst | 6 +- ironic_python_agent/agent.py | 2 + ironic_python_agent/config.py | 8 +- ironic_python_agent/efi_utils.py | 17 +- ironic_python_agent/extensions/standby.py | 157 ++- ironic_python_agent/hardware.py | 229 ++-- ironic_python_agent/inspector.py | 9 + ironic_python_agent/netutils.py | 24 + ironic_python_agent/utils.py | 27 + releasenotes/notes/bmo-extra-147559c8d1776e8c.yaml | 5 + ...isable-md5-image-checksum-7def176928d36e75.yaml | 12 + ...support-additional-format-4b29c5cdaa6b8d16.yaml | 11 + ...ootmgr-character-encoding-19e531ba694824c1.yaml | 9 + releasenotes/notes/lldp-raw-a09174cb930bca97.yaml | 12 + releasenotes/notes/net-speed-8854901e2051bb79.yaml | 5 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/conf.py | 2 +- releasenotes/source/index.rst | 1 + setup.cfg | 1 + tox.ini | 2 +- 29 files changed, 1710 insertions(+), 875 deletions(-)

1 0

ironic-inspector 11.5.0 (bobcat)
by no-reply＠openstack.org 01 Jun '23

01 Jun '23

We are pumped to announce the release of: ironic-inspector 11.5.0: =============================================== Hardware introspection for OpenStack Bare Metal =============================================== Introduction ============ .. image:: https://governance.openstack.org/tc/badges/ironic- inspector.svg :target: https://governance.openstack.org/tc/reference/tags/index.html This is an auxiliary service for discovering hardware properties for a node managed by `Ironic`_. Hardware introspection or hardware properties discovery is a process of getting hardware parameters required for scheduling from a bare metal node, given its power management credentials (e.g. IPMI address, user name and password). * Free software: Apache license * Source: https://opendev.org/openstack/ironic-inspector/ * Bugs: https://storyboard.openstack.org/#!/project/944 * Downloads: https://tarballs.openstack.org/ironic-inspector/ * Documentation: https://docs.openstack.org/ironic-inspector/latest/ * Python client library and CLI tool: `python-ironic-inspector-client <https://pypi.org/project/python-ironic-inspector-client>`_ (`documentation <https://docs.openstack.org/python-ironic-inspector- client/latest/>`_). .. _Ironic: https://wiki.openstack.org/wiki/Ironic .. note:: **ironic-inspector** was called *ironic-discoverd* before version 2.0.0. Release Notes ============= For information on any current or prior version, see `the release notes`_. .. _the release notes: https://docs.openstack.org/releasenotes/ironic- inspector/ This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. Changes in ironic-inspector 11.4.0..11.5.0 ------------------------------------------ 62e42d3 Imported Translations from Zanata c3dd0f1 Upgrade to latest hacking - v6 437e743 tests: Replace assertItemsEqual with assertCountEqual 974ec5a Update master for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- ironic_inspector/test/unit/db/test_api.py | 12 ++++++------ releasenotes/source/2023.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + .../source/locale/en_GB/LC_MESSAGES/releasenotes.po | 15 +++++++++------ tox.ini | 2 +- 5 files changed, 23 insertions(+), 13 deletions(-)

1 0

ceilometer 18.1.0 (yoga)
by no-reply＠openstack.org 01 Jun '23

01 Jun '23

We are happy to announce the release of: ceilometer 18.1.0: OpenStack Telemetry This release is part of the yoga stable release series. The source is available from: https://opendev.org/openstack/ceilometer Download the package from: https://tarballs.openstack.org/ceilometer/ Please report issues through: https://bugs.launchpad.net/ceilometer/+bugs For more details, please see below. 18.1.0 ^^^^^^ New Features * Identify user and projects names with the help of their UUIDs in the polled samples. If they are identified, set "project_name" and "user_name" fields in the sample to the corresponding values. Changes in ceilometer 18.0.0..18.1.0 ------------------------------------ 7d9e167d Properly handle 'resource_id' as None for Gnocchi publisher 741605e9 Fix Non-OpenStack dynamic pollster credentials handling c6f00257 Add user/project names to polled samples 3517acea Add vanity names to telemetry polling notifications dcae2040 Fix barbican credentials retrieval b583cbca NoUniqueMatch: ClientException on Gnocchi publisher 51b0c368 Fix swift pollsters that use get_account 1f65bce6 Add CentOS Stream 9 jobs 51db4983 Add centos9s jobs 4fd15dfe Remove queue declaration and fix lower-constraint job cb132b30 Fix OutgoingBytesDeltaPollster sample name cc22c4d6 Debug log libvirt metadata version fails bed18e58 Update TOX_CONSTRAINTS_FILE for stable/yoga 86c7237f Update .gitreview for stable/yoga Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 9 +++- ceilometer/cache_utils.py | 53 ++++++++++++++++++ ceilometer/compute/pollsters/net.py | 2 +- ceilometer/compute/virt/libvirt/utils.py | 4 +- ceilometer/objectstore/swift.py | 2 +- .../non_openstack_credentials_discovery.py | 2 +- ceilometer/polling/dynamic_pollster.py | 14 +++++ ceilometer/polling/manager.py | 63 +++++++++++++++++++++- ceilometer/publisher/gnocchi.py | 56 +++++++++++++++---- ceilometer/publisher/utils.py | 2 + ceilometer/sample.py | 5 +- ceilometer/telemetry/notifications.py | 2 + .../test_non_openstack_credentials_discovery.py | 10 ++-- ...add-tenant-name-discovery-668260bb4b2b0e8c.yaml | 6 +++ test-requirements.txt | 1 + tox.ini | 6 +-- 20 files changed, 257 insertions(+), 41 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index adb4c60f..1a41d9d3 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -18,0 +19 @@ testresources>=2.0.1 # Apache-2.0 +cryptography<=36.0.2 # Apache-2.0

1 0

ceilometer 19.1.0 (zed)
by no-reply＠openstack.org 01 Jun '23

01 Jun '23

We eagerly announce the release of: ceilometer 19.1.0: OpenStack Telemetry This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ceilometer Download the package from: https://tarballs.openstack.org/ceilometer/ Please report issues through: https://bugs.launchpad.net/ceilometer/+bugs For more details, please see below. 19.1.0 ^^^^^^ New Features ************ * Identify user and projects names with the help of their UUIDs in the polled samples. If they are identified, set "project_name" and "user_name" fields in the sample to the corresponding values. Bug Fixes ********* * [bug 2007108 (https://bugs.launchpad.net/ceilometer/+bug/2007108) The retired metrics dependent on SNMP have been removed from the default "polling.yaml". Changes in ceilometer 19.0.0..19.1.0 ------------------------------------ 5968c822 Properly handle 'resource_id' as None for Gnocchi publisher 7c121c45 Add vanity names to telemetry polling notifications 17648c71 Fix barbican credentials retrieval a059600c NoUniqueMatch: ClientException on Gnocchi publisher 23308bfa Remove SNMP metrics from default polling 38b7659c Add TCP publisher 1da0e14b Add user/project names to polled samples 5d246c6c Fix OutgoingBytesDeltaPollster sample name 142cb0b6 Remove lingering queue declaration 3f28ae3d Update TOX_CONSTRAINTS_FILE for stable/zed 9ffd73a7 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 1 - ceilometer/cache_utils.py | 53 +++++ ceilometer/compute/pollsters/net.py | 2 +- .../non_openstack_credentials_discovery.py | 2 +- ceilometer/polling/manager.py | 63 +++++- ceilometer/publisher/gnocchi.py | 56 +++++- ceilometer/publisher/tcp.py | 94 +++++++++ ceilometer/publisher/utils.py | 6 +- ceilometer/sample.py | 5 +- ceilometer/telemetry/notifications.py | 2 + .../test_non_openstack_credentials_discovery.py | 10 +- etc/ceilometer/polling.yaml | 18 -- ...add-tenant-name-discovery-668260bb4b2b0e8c.yaml | 6 + .../notes/bug-2007108-dba7163b245ad8fd.yaml | 6 + setup.cfg | 1 + tox.ini | 6 +- 20 files changed, 557 insertions(+), 56 deletions(-)

1 0