July 2024 - Release-announce - lists.openstack.org

ironic 26.0.0 (dalmatian)
by no-reply＠openstack.org 31 Jul '24

31 Jul '24

We are pleased to announce the release of: ironic 26.0.0: OpenStack Bare Metal Provisioning This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 26.0.0 ^^^^^^ New Features ************ * Adds support for updating BIOS in configurations where a single BMC is managing multiple systems (e.g. sushy-tools emulator with multiple VMs). In such cases, Targets parameter is added to SimpleUpdate API call. * Adds configuration options for operators to specify any or what boot modes to disallow for enrollment (*disallowed_enrollment_boot_modes*) and/or deployment (*disallowed_deployment_boot_modes*). Defaults are empty lists, indicating all boot modes are allowed. * Adds a new configuration option "store_cred_in_env" to allow switching between file-based and environment variable persistence for IPMI credentials. Defaults to "False". * Makes redfish driver firmware update feature a service step, enabling operators to perform firmware updates on active nodes. Upgrade Notes ************* * Adds upgrade checks for the following situations: * Error on unknown hardware types or interfaces in the configuration. * Warning on deprecated hardware types or interfaces in the configuration. * Warning on unknown hardware types or interfaces used on any nodes. * The deprecated "ibmc" hardware type has been removed from Ironic. * The deprecated "idrac-wsman" and related "idrac" interface aliases have been removed from the "idrac" hardware type. * The deprecated "xclarity" hardware type has been removed from Ironic. Security Issues *************** * Log the node UUID instead of the full node object in ironic/conductor/cleaning.py, to avoid logging the node's driver_info property (containing its BMC username and password). * Agent communication now requires an HTTPS url by default. This can be changed using the "[agent]require_tls" setting. Bug Fixes ********* * [bug 2069413 (https://bugs.launchpad.net/ironic/+bug/2069413) Fixes an issue with node servicing that caused node to be put into 'service failed' state when Ironic configuration option [pxe]enable_netboot_fallback was enabled. * [bug 2069430 (https://bugs.launchpad.net/ironic/+bug/2069430) Fixes an issue that prevented Ironic from being able to execute node servicing steps exposed by IPA's HardwareManager * Fixes an issue in Redfish generic attach and detach virtual media where the virtual media devices were not recognized causing a failure when attaching or detaching a single virtual media device. * Fixes the default grub initial configuration to be simpler and directly load the generated configuration file. The template also includes output which also help operators understand the context as to where the node is booting from, should issues be encountered. * Replaces deprecated "Storage.StorageControllers" in Redfish RAID with "Storage.Controllers", which provides an array of links to controller objects instead of embedding the full controller objects. The old field is now used as a fallback. * During node deployment, unless explicitly configured otherwise, Ironic now only creates PXE link files for ports with pxe_enabled=True, preventing unintended booting from disabled ports. Other Notes *********** * The Redfish interoperability profile 1.0.0 has been replaced with version 1.1.0 that adds a lot of missing resources and fields, and clarifies their purpose. Changes in ironic 25.0.0..26.0.0 -------------------------------- 88ad9a7bb Log node UUID and not entire node instance to avoid logging its driver_info field acf1c7d43 idrac driver doc should mention all dependencies 58f84d285 Allow disabling specific boot modes during deployment/enrollment 1e52143f0 Imported Translations from Zanata 3a4034759 Add Targets to firmware.update on multi system BMCs 11ce62d34 Imported Translations from Zanata fc69f9aad Follow-up to change; #922951 breaks RAID 74113c41e Fix anaconda boot interface 4d46bbf71 grub: directly load linked config file 8730a1a4b CI: Remove grub http boot from standalone CI test e2dad9128 Localdev: disable caching and related periodic 54c7ce513 Fixup: Move release note to proper directory 3dcbc1954 Add tox env for local dev; update documentation 1db409747 Inspector migration: mention switching over to ironicclient bb4cd9ea7 Upgrade check on removed or deprecated hardware types and interfaces 944ee5eee Deprecated field in Redfish Driver 62ff8a949 Make redfish firmware update a service step b9d1ace72 Add RPC calls and handlers needed to support async service steps be5c4b7d6 Render the redfish interop profile in the docs d28a61b2c Update the redfish interoperability profile e95d5a844 Fix log statement about starting inspection 7fe19631b Test empty media type in redfish virtual media boot 578f24bf1 Remove deprecated idrac wsman driver interfaces 3fd1fb351 Follow up to change on testing CI on ARM 656f93b6e Reorganize the documentation front page a36fd0095 Rework the navigation in the contributor guide 2548f022c Flexible IPMI credential persistence method configuration ef1ea4d36 Fix rendering of Redfish properties in the documentation c21b7d703 Enable HTTP network boot for Redfish hardware a88cc4d9d Documentation: migration guide from inspector 209ba7973 Provision ARM (aarch64) fake-bare-metal-vms f14794ca2 Remove ibmc hardware type c02ad76fe Remove deprecated xclarity hardware type 4f924f2d6 Fix execution of node servicing steps exposed by IPA's HardwareManager 78f54dfef Build PXE config for node in SERVICING state d189465b1 Update version change log with special treatment of .json removal d3fd725ef Fix and document redfish metrics 95784428a Decompose the Redfish documentation aaf62c678 Makes metal3 integration job vote again 28e83a087 metal3 integration is unstable currently, disable 8cd3fcd78 Trivial: Cleanup in neutron common code e958b379c Link MACs with PXE config to pxe_enabled ports 316274a9d Fix wrong option mentioned in release notes 46cc9e1d9 ci: fix https boot artifact path af33d8bd7 minor: additional tests for interaction around node lookup ed4f44e97 Remove unused parameter in ansible driver eaa0521be fix: Fix class typo for portgroup. Portgroup instead of PortGroup 613348d11 docs: add some additional context around iPXE and secure boot b00c49965 Correct bond_mode enum value for 802.3ad e736513be Follow up to broken Zuul config 6095b4017 Change [agent]require_tls to True by default Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + devstack/common_settings | 8 +- devstack/lib/ironic | 244 ++- devstack/tools/ironic/scripts/cirros-partition.sh | 2 +- devstack/tools/ironic/scripts/configure-vm.py | 3 +- devstack/tools/ironic/scripts/create-node.sh | 6 +- devstack/tools/ironic/templates/vm.xml | 13 +- driver-requirements.txt | 5 - ironic/api/controllers/v1/network-data-schema.json | 4 +- ironic/api/controllers/v1/node.py | 12 + ironic/api/controllers/v1/port.py | 2 +- ironic/api/controllers/v1/ramdisk.py | 10 +- ironic/api/controllers/v1/utils.py | 16 + ironic/api/controllers/v1/versions.py | 1 + ironic/cmd/status.py | 52 + ironic/common/exception.py | 20 +- ironic/common/neutron.py | 6 +- ironic/common/pxe_utils.py | 5 +- ironic/common/release_mappings.py | 2 +- ironic/conductor/cleaning.py | 2 +- ironic/conductor/deployments.py | 9 +- ironic/conductor/manager.py | 42 +- ironic/conductor/rpcapi.py | 17 +- ironic/conductor/utils.py | 28 + ironic/conf/__init__.py | 4 - ironic/conf/agent.py | 8 +- ironic/conf/api.py | 11 + ironic/conf/conductor.py | 12 + ironic/conf/ibmc.py | 35 - ironic/conf/ipmi.py | 5 + ironic/conf/opts.py | 1 - ironic/conf/xclarity.py | 44 - ironic/drivers/drac.py | 22 +- ironic/drivers/ibmc.py | 47 - ironic/drivers/modules/agent_base.py | 53 +- .../roles/deploy/files/partition_configdrive.sh | 1 - ironic/drivers/modules/drac/bios.py | 621 ------ ironic/drivers/modules/drac/common.py | 117 - ironic/drivers/modules/drac/inspect.py | 236 +- ironic/drivers/modules/drac/job.py | 116 - ironic/drivers/modules/drac/management.py | 385 +--- ironic/drivers/modules/drac/power.py | 243 --- ironic/drivers/modules/drac/raid.py | 1498 +------------ ironic/drivers/modules/drac/vendor_passthru.py | 179 -- ironic/drivers/modules/ibmc/management.py | 241 --- ironic/drivers/modules/ibmc/mappings.py | 70 - ironic/drivers/modules/ibmc/power.py | 149 -- ironic/drivers/modules/ibmc/raid.py | 203 -- ironic/drivers/modules/ibmc/utils.py | 172 -- ironic/drivers/modules/ibmc/vendor.py | 112 - ironic/drivers/modules/initial_grub_cfg.template | 9 +- ironic/drivers/modules/inspector/agent.py | 2 +- ironic/drivers/modules/inspector/interface.py | 11 +- ironic/drivers/modules/ipmitool.py | 110 +- ironic/drivers/modules/redfish/firmware.py | 47 +- ironic/drivers/modules/redfish/management.py | 4 - ironic/drivers/modules/redfish/raid.py | 9 +- ironic/drivers/modules/redfish/utils.py | 40 + ironic/drivers/modules/xclarity/common.py | 178 -- ironic/drivers/modules/xclarity/management.py | 248 --- ironic/drivers/modules/xclarity/power.py | 134 -- ironic/drivers/redfish.py | 8 +- ironic/drivers/xclarity.py | 35 - .../json_samples/systems_collection_dual.json | 19 + .../json_samples/systems_collection_single.json | 15 + .../unit/drivers/modules/drac/test_inspect.py | 491 ----- .../unit/drivers/modules/drac/test_management.py | 803 +------ .../drivers/modules/drac/test_periodic_task.py | 458 ---- .../unit/drivers/modules/ibmc/test_management.py | 294 --- .../modules/network/json_samples/network_data.json | 2 +- .../unit/drivers/modules/redfish/test_boot.py | 20 + .../unit/drivers/modules/redfish/test_firmware.py | 188 +- .../drivers/modules/redfish/test_management.py | 13 - .../unit/drivers/modules/redfish/test_raid.py | 72 +- .../unit/drivers/modules/redfish/test_utils.py | 19 + .../unit/drivers/modules/xclarity/test_common.py | 113 - .../drivers/modules/xclarity/test_management.py | 158 -- .../unit/drivers/modules/xclarity/test_power.py | 146 -- .../unit/drivers/third_party_driver_mock_specs.py | 55 - .../OpenStackIronicProfile.v1_0_0.json | 221 -- .../OpenStackIronicProfile.v1_1_0.json | 561 +++++ .../notes/accurate_alive-d2687bca802211a4.yaml | 4 +- ...-for-simpleupdate-targets-1ac970f4ff458981.yaml | 6 + ...isabling-bios-deployments-356f3215f80a879e.yaml | 7 + .../notes/bug-2069413-fc9262c573f2fe10.yaml | 7 + .../notes/bug-2069430-cb58c9beaa7a35de.yaml | 6 + .../driver-upgrade-check-d3afaf127cafbc06.yaml | 8 + ...ice_type-redfish-advmedia-dff448c2f9085a47.yaml | 0 ...ence_method_configuration-e5ed052576576d71.yaml | 6 + ...b-default-template-change-a7bacdef4543a9ae.yaml | 7 + ...mware-update-service-step-885f47cf051b57ee.yaml | 6 + .../notes/redfish-interop-1c2b5e3aeb10fea4.yaml | 6 + ...ve-deprecated-ibmc-driver-0c90817d8ad0ccc4.yaml | 4 + ...ve-deprecated-idrac-wsman-c31861acd8742eb9.yaml | 5 + ...object-from-log-statement-f1b92a8ca26686c2.yaml | 7 + ...ve-xclarity-hardware-type-aa1a26bcbb5b9670.yaml | 4 + ...d_field_in_redfish_driver-eb75e6bf67913963.yaml | 8 + ...to-only-pxe-enabled-ports-d2ca5386bdd04bef.yaml | 6 + .../set-agent-to-require-tls-08a9571793e75943.yaml | 5 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 79 +- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 159 -- setup.cfg | 19 - tools/ironic.conf.localdev | 26 + tox.ini | 26 + zuul.d/ironic-jobs.yaml | 104 +- zuul.d/project.yaml | 2 + 167 files changed, 4988 insertions(+), 14474 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index f72b45cd4..bd3d9dc4b 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -12,2 +11,0 @@ python-scciclient>=0.16.0,<0.17.0 -python-dracclient>=5.1.0,<9.0.0 -python-xclarityclient>=0.1.6 @@ -18,3 +15,0 @@ ansible>=2.7 -# HUAWEI iBMC hardware type uses the python-ibmcclient library -python-ibmcclient>=0.2.2,<0.3.0 -

1 0

kolla 18.1.0 (caracal)
by no-reply＠openstack.org 31 Jul '24

31 Jul '24

We jubilantly announce the release of: kolla 18.1.0: Kolla OpenStack Deployment This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. Changes in kolla 18.0.0..18.1.0 ------------------------------- 745c911f5 [docs] remove not working dev setup cc66d0a53 fix: apple silicon architecture selection 4936a6ff9 add kayobe to release management doc's Launchpad admin section bbe297d5b CI: Pin requests to <2.32 for publish jobs 7efe8a37f Drop packaging requirement and unpin docker-py eb23d9cc2 CI: pin codespell to <2.3.0 Diffstat (except docs and test files) ------------------------------------- kolla/common/config.py | 9 +++++---- kolla/image/build.py | 20 +++++++++----------- tox.ini | 2 +- 7 files changed, 32 insertions(+), 32 deletions(-)

1 0

kayobe 16.1.0 (caracal)
by no-reply＠openstack.org 31 Jul '24

31 Jul '24

We are jazzed to announce the release of: kayobe 16.1.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://bugs.launchpad.net/kayobe/+bugs For more details, please see below. Changes in kayobe 16.0.0..16.1.0 -------------------------------- a59f4ed2 Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + 1 file changed, 1 insertion(+)

1 0

kolla-ansible 18.1.0 (caracal)
by no-reply＠openstack.org 31 Jul '24

31 Jul '24

We are jazzed to announce the release of: kolla-ansible 18.1.0: Ansible Deployment of Kolla containers This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 18.1.0 ^^^^^^ Upgrade Notes ************* * MariaDB backup now uses the same image as the running MariaDB server. The following variables relating to MariaDB backups are no longer used and have been removed: * "mariabackup_image" * "mariabackup_tag" * "mariabackup_image_full" Bug Fixes ********* * Fixes trove module imports. Path to the modules needed by trove- api changed in source trove package so the configuration was updated. LP#1937120 * Modifies the MariaDB procedure to use the same container image as the running MariaDB server container. This should prevent compatibility issues that may cause the backup to fail. * Fixes a bug in kolla_podman_worker, where missing commas in list of strings create implicit concatenation of items that should be separate. LP#2067278 * Fixes configuration of CloudKitty when internal TLS is enabled. LP#1998831 * Fixes the dimensions comparison when we set values like *1g* in the container dimensions configuration, making the docker container getting restarted even with no changes, as we are comparing *1g* with *1073741824*, which is displayed in the docker inspect while *1g* is in the configuration. * Fixes keystone port in skyline-console pointing to wrong endpoint port. LP#2069855 * Fixes 2065168. Fix kolla systemd unit template to prevent restart all kolla services with docker.service restart. LP#[2065168] * All stable RabbitMQ feature flags are now enabled during deployments, reconfigures, and upgrades. As such, the variable "rabbitmq_feature_flags" is no longer required. This is a partial fix to RabbitMQ SLURP support. LP#2049512 * Fixes skyline's old format of stop task. It used docker_container which would cause problems with podman deployments. Changes in kolla-ansible 18.0.0..18.1.0 --------------------------------------- 2a209454e docs: Remove Stream 8 and Jammy past references cceb66b3e Support CloudKitty deployment with internal TLS b543ea464 Fix kolla-ansible systemd restart behaviour 9805ffb0e Fix the docker container dimensions comparison for short notation 2b4165c10 RMQ: enable all stable feature flags at once 9f7e1fd41 Skyline: Fix incorrect keystone port 4902dcdd5 kolla_url: port is a string 2220baf7e Use the running MariaDB server image for backups 4617fbc19 CI: increase timeout for server resize confirmation c5fbc602c Set node to a valid rabbitmq host c525f5858 Fix missing commas in kolla_podman_worker e6338d75f Fix trove module imports 2f3e8eebb Fix: Update Skyline stop task c19e45931 Revert "CI: Use 2023.2 image for rabbitmq on ipv6 scenario" bd8a6ecb6 CI: Pin codespell to <2.3.0 2bf3336c6 CI: Pin requests to <2.32 for docker sdk 60942145c Remove mistral and redis Diffstat (except docs and test files) ------------------------------------- ansible/module_utils/kolla_container_worker.py | 79 ++++++++++++++++++++-- ansible/module_utils/kolla_podman_worker.py | 6 +- ansible/module_utils/kolla_systemd_worker.py | 1 - ansible/rabbitmq.yml | 2 +- ansible/roles/cloudkitty/defaults/main.yml | 8 +-- ansible/roles/cloudkitty/tasks/bootstrap.yml | 3 + ansible/roles/mariadb/defaults/main.yml | 4 -- ansible/roles/mariadb/tasks/backup.yml | 14 +++- ansible/roles/rabbitmq/defaults/main.yml | 17 ----- ansible/roles/rabbitmq/tasks/feature-flags.yml | 11 +-- ansible/roles/service-rabbitmq/tasks/main.yml | 2 +- ansible/roles/skyline/tasks/stop.yml | 13 ++-- ansible/roles/skyline/templates/nginx.conf.j2 | 4 +- ansible/roles/trove/templates/trove.conf.j2 | 6 +- .../orchestration-and-nfv/tacker-guide.rst | 8 --- kolla_ansible/kolla_url.py | 1 + lint-requirements.txt | 1 + .../notes/bug-1937120-cd1ad24a9a4be739.yaml | 7 ++ .../notes/bug-2058644-1db8786303234787.yaml | 15 ++++ .../notes/bug-2067278-82287115c972a04e.yaml | 7 ++ .../cloudkitty-internal-tls-c3e18be2a9f95c5d.yaml | 5 ++ ...ges-when-using-dimensions-ad94b657b6c29cfc.yaml | 10 +++ ...fix-skyline-keystone-port-0a25395608f572d9.yaml | 5 ++ .../fix-systemd-restart-5fc282419cf13589.yaml | 7 ++ ...all-feature-flags-at-once-28b76958abf54083.yaml | 8 +++ .../notes/skyline-stop-7eb0d8770335a9ca.yaml | 6 ++ tox.ini | 1 - zuul.d/base.yaml | 1 + 33 files changed, 257 insertions(+), 95 deletions(-) Requirements updates -------------------- diff --git a/lint-requirements.txt b/lint-requirements.txt index 9f9a40259..58117d988 100644 --- a/lint-requirements.txt +++ b/lint-requirements.txt @@ -4,0 +5 @@ bashate>=0.5.1 # Apache-2.0 +codespell<2.3.0 # GPLv2

1 0

kayobe 15.4.0 (bobcat)
by no-reply＠openstack.org 31 Jul '24

31 Jul '24

We are amped to announce the release of: kayobe 15.4.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 15.4.0 ^^^^^^ Bug Fixes * Added fix for the custom RabbitMQ configuration. Fixed incorrect path and glob, so now you can template also all other configuration files such as "advanced.config", "definitions.json", "enabled_plugins", and "erl_inetrc" together with "rabbitmq.conf" and "rabbitmq-env.conf". * Fixes an issue where Dell OS6 and Dell OS9 switch configuration was not applied correctly. LP#2061102. * Fixes issue of ironic files being left behind after node deprovision which prevents it from being enrolled and provisioned again. * Fixes default Ubuntu Apt keyrings location to the recommended "/etc/apt/keyrings". * Fixes the bug where /etc/hosts was not populated correctly when running Kayobe using a host limit. LP#2051714 * Fixes an issue with overcloud service destroy where it failed to remove the inspection store docker volume. See LP#2050092. * Fixes bugs with the "kolla_enable_letsencrypt" variable which were causing overcloud container image build to fail, or to include "letsencrypt" images when disabled. Changes in kayobe 15.3.0..15.4.0 -------------------------------- 67bee0c5 Add ironic config files clean up tasks to overcloud deprovision db299399 Update instructions to migrate from CentOS Stream 8 8e2a3aeb Fix container image build issues with letsencrypt 30ecafdf CI: Fix kayobe-tox-molecule job 16147f17 Fix issue removing docker volumes 1549e35a Document required tags for Bifrost-only deployment 317f4cb3 Fix Dell OS6 and Dell OS9 switch configuration 2f3377e8 Add python3-devel to Kayobe dependencies 87582e1e Fix Bifrost database backup instructions 92ae295e Fix default place for Ubuntu Apt keyrings 4ba23949 Revert "Mark kayobe-tox-ansible job as non-voting" 43e3e40b CI: Bump cirros images to 0.5.3 ec25ccf8 Fix the glob for the custom RabbitMQ configuration 2caaffee Fix link in release note 1bcf3e19 Fix: configure etc-hosts for overcloud group Diffstat (except docs and test files) ------------------------------------- ansible/inventory/group_vars/all/kolla | 5 +-- ansible/overcloud-deprovision.yml | 39 ++++++++++++++++++++++ ansible/roles/apt/defaults/main.yml | 2 +- ansible/roles/dell-switch/tasks/main.yml | 4 +-- ansible/roles/docker-registry/tasks/destroy.yml | 2 +- ansible/roles/etc-hosts/defaults/main.yml | 2 +- .../roles/gather-facts-delegated/defaults/main.yml | 8 ++--- .../tasks/gather-facts-delegated.yml | 12 +++++++ .../roles/gather-facts-delegated/tasks/main.yml | 14 ++++---- ansible/roles/inspection-store/tasks/destroy.yml | 2 +- ansible/roles/kolla-openstack/defaults/main.yml | 2 +- .../kolla-openstack/molecule/default/molecule.yml | 4 +-- .../molecule/enable-everything/molecule.yml | 4 +-- ansible/roles/opensm/tasks/destroy.yml | 2 +- dev/functions | 2 +- playbooks/kayobe-infra-vm-base/overrides.yml.j2 | 2 +- playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 2 +- .../add-custom-rabbitmq-conf-7c3927e1024f0be1.yaml | 7 ++++ .../notes/bug-2061102-cbc4c65c14c09d55.yaml | 6 ++++ .../deprovision_leftover_fix-6b3150b32cbf9007.yaml | 5 +++ ...fix-apt-keyrings-location-28ea144738de54a7.yaml | 5 +++ .../fix-etc-hosts-management-6b33748ab37d6273.yaml | 6 ++++ ...ce-destroy-volume-cleanup-4b54d81cde9831c7.yaml | 6 ++++ ...-kolla-enable-letsencrypt-8e8746560be575ac.yaml | 6 ++++ .../notes/wipe-disks-0e72c9c8b7bf7e18.yaml | 4 +-- zuul.d/project.yaml | 4 +-- 30 files changed, 141 insertions(+), 49 deletions(-)

1 0

kolla 17.4.0 (bobcat)
by no-reply＠openstack.org 31 Jul '24

31 Jul '24

We are chuffed to announce the release of: kolla 17.4.0: Kolla OpenStack Deployment This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 17.4.0 ^^^^^^ Deprecation Notes ***************** * Support for building Masakari images is no longer deprecated. The Masakari CI scenarios are now working again, and commitment has been made to improve the health of the project. Bug Fixes ********* * Fixes a bug where swtpm and swtpm-tools deb packages are missing in 'nova-compute' and 'nova-libvirt' containers which keeps 'nova- compute' container from starting when operator enables TPM support in Nova. LP#2062572 * Fixes a bug where the "rsync" RPM package was missing in the "swift- base" container. See bug 2062072 for details. Changes in kolla 17.3.0..17.4.0 ------------------------------- 3ba0b4b33 [docs] remove not working dev setup f6d1e3eb6 add kayobe to release management doc's Launchpad admin section 0540f922e Move apt_prefs pins to respective images 91dceae1a CI: Pin requests to <2.32 for publish jobs 2c0f1b56a swift-base: fix rsync missing for rpm installs 2f0ae8ba2 Drop packaging requirement ba0aebd67 collectd: Mark unbuildable on rocky 9e38ef125 nova-compute: Remove duplicate openvswitch package 0bdc01d64 Revert Deprecation of Masakari 6c9a41d6f Nova: fix swtpm and swtpm-tools missing from deb installs 8cdfa5c00 Fix OpenSearch file ownership issues Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- .../opensearch/opensearch-dashboards/Dockerfile.j2 | 2 ++ kolla/image/build.py | 20 +++++++++----------- kolla/image/unbuildable.py | 1 + releasenotes/notes/bug-2062572-c55c71e1045a863f.yaml | 5 +++++ .../notes/dedeprecate-masakari-362eb4b01d558e9d.yaml | 6 ++++++ ...sync_rpm_swift_base_missing-9d106d94b52d0bad.yaml | 5 +++++ 19 files changed, 71 insertions(+), 36 deletions(-)

1 0

kolla-ansible 17.4.0 (bobcat)
by no-reply＠openstack.org 31 Jul '24

31 Jul '24

We are jazzed to announce the release of: kolla-ansible 17.4.0: Ansible Deployment of Kolla containers This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 17.4.0 ^^^^^^ Upgrade Notes ************* * MariaDB backup now uses the same image as the running MariaDB server. The following variables relating to MariaDB backups are no longer used and have been removed: * "mariabackup_image" * "mariabackup_tag" * "mariabackup_image_full" Deprecation Notes ***************** * Support for deploying Masakari is no longer deprecated. The Masakari CI scenarios are now working again, and commitment has been made to improve the health of the project. Bug Fixes ********* * Add conditionals for IPv6 sysctl settings that have IPV6 disabled in kernel. Changing sysctl settings related to IPv6 on those systems lead to errors. LP#1906306 * Fixes nova-cell not updating the cell0 database address when VIP changes. LP#1915302 * Fixes trove module imports. Path to the modules needed by trove- api changed in source trove package so the configuration was updated. LP#1937120 * Fixes "ovs-dpdk" images pull. LP#[2041864] * Incorrect condition in Podman part prevented the retrieval of facts of all the containers when no names were provided. LP#2058492 * Modifies the MariaDB procedure to use the same container image as the running MariaDB server container. This should prevent compatibility issues that may cause the backup to fail. * Fixes a bug in kolla_podman_worker, where missing commas in list of strings create implicit concatenation of items that should be separate. LP#2067278 * Fixed 'cinder-backup' service when Swift with TLS enabled. LP#2051986 * Fixes the dimensions comparison when we set values like *1g* in the container dimensions configuration, making the docker container getting restarted even with no changes, as we are comparing *1g* with *1073741824*, which is displayed in the docker inspect while *1g* is in the configuration. * Fixes keystone port in skyline-console pointing to wrong endpoint port. LP#2069855 * Fixes 2065168. Fix kolla systemd unit template to prevent restart all kolla services with docker.service restart. LP#[2065168] * Fixes a bug in kolla-ansible where the keystone service role was not being created during an upgrade. This was due to the service-ks- register role not being imported in the upgrade.yml file. The service-ks-register role is now imported in the upgrade.yml file. See bug: https://bugs.launchpad.net/kolla-ansible/+bug/2056761 * Fixed an issue where the MariaDB Cluster recovery process would fail if the sequence number was not found in the logs. The recovery process now checks the complete log file for the sequence number and recovers the cluster. See LP#1821173 for details. * Fix the Octavia jobboard boolean value. See https://bugs.launchpad.net/kolla-ansible/+bug/2058046 for details. * Updates the default Grafana OpenSearch datasource configuration to use values for OpenSearch that work out of the box. Replaces the Elasticsearch values that were previously being used. The new configuration can be applied by deleting your datasource and reconfiguring Grafana through kolla ansible. In order to prevent dashboards from breaking when the datasource is deleted, one should use datasource variables in Grafana. See bug 2039500. * All stable RabbitMQ feature flags are now enabled during deployments, reconfigures, and upgrades. As such, the variable "rabbitmq_feature_flags" is no longer required. This is a partial fix to RabbitMQ SLURP support. LP#2049512 * Fixes an issue where the Keystone admin endpoint would be recreated when upgrading Keystone. The endpoint is now explicitly removed during the upgrade process. * Fixes skyline's old format of stop task. It used docker_container which would cause problems with podman deployments. Changes in kolla-ansible 17.3.0..17.4.0 --------------------------------------- 9d542c1d9 docs: Remove Stream 8 and Jammy past references 54019c56f Fix prechecks for interfaces with dashes 2241bb508 Fix kolla-ansible systemd restart behaviour d076e5fe7 Fix the docker container dimensions comparison for short notation b2a83c40f RMQ: enable all stable feature flags at once aaa73f02f Skyline: Fix incorrect keystone port 12ca5ddd0 kolla_url: port is a string eaca02dd6 Test haproxy single external frontend e7728f63f Use the running MariaDB server image for backups 171c6c0f8 CI: increase timeout for server resize confirmation 95f7d8d1f CI: Use ControlPersist and ControlMaster fc94a6d4b Set node to a valid rabbitmq host f9f992106 Fix missing commas in kolla_podman_worker 168bb0f14 Fix trove module imports 9ccb95929 Fix: Update Skyline stop task 11267550d CI: Pin codespell to <2.3.0 8e68bef04 CI: Pin requests to <2.32 for docker sdk 36e67fb62 Remove mistral and redis ce1a1d15f ironic: mount metrics in conductor only when exporter is enabled bf95599b7 Configure Blazar with custom CA file 4d9250d82 fix swift keystone auth url 1ec3d0cec Update Grafana OpenSearch datasource configuration 61e11038c Revert "Deprecate Masakari" de2f80237 Update cell0 database connection 1fa4d718e Fix 'cinder-backup' service when Swift with TLS enabled 5c750e898 mariadb: fix cluster recovery adc109d1b Fix incorrect condition in kolla_container_facts 3e63d4a29 ironic: disable heartbeat_in_pthreads 1ee8088f1 Change the default ceph_nova_user in globals 26e9d624f Fix Skyline API Server TLS configuration bae1acf58 CI: fix check-failure.sh sudo missing de5af72b6 Add conditionals for IPv6 sysctl settings 096b0f5d0 CI: Increase galera node timeouts 67ef79b64 Rework quorum queues precheck 9a6444fd6 common: Fix fluentd labels when using Docker 26 31abb8328 fix confusing jammy upgrade docs a7f7cda59 fix creation of keystone service role on upgrade 112b2d617 octavia: add missing bool to the enable_octavia_jobboard parameter f9eec65fb Fix images pull in ovs-dpdk role a99608f4b [doc] document --limit limitations d82c2deb8 rabbitmq: bump wait timeout to 60 seconds 1b6c1cb3d post-2023.1: Remove keystone admin endpoint bits Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- ansible/library/kolla_container_facts.py | 2 +- ansible/module_utils/kolla_container_worker.py | 79 +++++++++++++++++++-- ansible/module_utils/kolla_podman_worker.py | 6 +- ansible/module_utils/kolla_systemd_worker.py | 1 - ansible/rabbitmq.yml | 2 +- ansible/roles/blazar/templates/blazar.conf.j2 | 1 + ansible/roles/cinder/templates/cinder.conf.j2 | 1 + ansible/roles/common/tasks/config.yml | 4 +- ansible/roles/grafana/defaults/main.yml | 6 +- ansible/roles/ironic/defaults/main.yml | 2 +- .../ironic/templates/ironic-inspector.conf.j2 | 2 +- ansible/roles/keystone/defaults/main.yml | 10 +-- ansible/roles/keystone/tasks/upgrade.yml | 16 +++++ ansible/roles/loadbalancer/tasks/config-host.yml | 7 ++ ansible/roles/loadbalancer/tasks/precheck.yml | 2 +- ansible/roles/mariadb/defaults/main.yml | 4 -- ansible/roles/mariadb/tasks/backup.yml | 14 +++- ansible/roles/mariadb/tasks/recover_cluster.yml | 2 +- ansible/roles/neutron/tasks/config-host.yml | 6 ++ ansible/roles/nova-cell/defaults/main.yml | 1 + .../roles/nova-cell/tasks/get_cell_settings.yml | 2 +- ansible/roles/nova/tasks/map_cell0.yml | 81 ++++++++++++++++------ ansible/roles/octavia/templates/octavia.conf.j2 | 2 +- ansible/roles/ovs-dpdk/vars/main.yml | 2 + ansible/roles/prechecks/tasks/port_checks.yml | 2 +- ansible/roles/rabbitmq/defaults/main.yml | 15 ---- ansible/roles/rabbitmq/tasks/feature-flags.yml | 11 +-- ansible/roles/rabbitmq/tasks/precheck.yml | 17 +++-- ansible/roles/rabbitmq/tasks/restart_services.yml | 2 +- .../roles/service-ks-register/defaults/main.yml | 1 + ansible/roles/service-ks-register/tasks/main.yml | 1 + ansible/roles/service-rabbitmq/tasks/main.yml | 2 +- ansible/roles/skyline/tasks/stop.yml | 13 ++-- ansible/roles/skyline/templates/gunicorn.py.j2 | 4 ++ ansible/roles/skyline/templates/nginx.conf.j2 | 4 +- ansible/roles/swift/templates/proxy-server.conf.j2 | 2 +- ansible/roles/trove/templates/trove.conf.j2 | 6 +- .../logging-and-monitoring/prometheus-guide.rst | 2 +- .../orchestration-and-nfv/tacker-guide.rst | 8 --- etc/kolla/globals.yml | 2 +- kolla_ansible/kolla_url.py | 1 + kolla_ansible/nova_filters.py | 3 +- lint-requirements.txt | 1 + .../notes/bug-1906306-640d5085576656f9.yaml | 8 +++ .../notes/bug-1915302-a668b00dddaff476.yaml | 5 ++ .../notes/bug-1937120-cd1ad24a9a4be739.yaml | 7 ++ .../notes/bug-2041864-f19f9a6afd0955e8.yaml | 5 ++ .../notes/bug-2058492-b86e8eceb04eec67.yaml | 6 ++ .../notes/bug-2058644-1db8786303234787.yaml | 15 ++++ .../notes/bug-2067278-82287115c972a04e.yaml | 7 ++ .../dedeprecate-masakari-52e3979f563db779.yaml | 6 ++ ...x-cinder-backup-tls-swift-cb694ed1df8caa26.yaml | 5 ++ ...ges-when-using-dimensions-ad94b657b6c29cfc.yaml | 10 +++ ...fix-skyline-keystone-port-0a25395608f572d9.yaml | 5 ++ .../fix-systemd-restart-5fc282419cf13589.yaml | 7 ++ ..._of_keystone_service_role-b6827b797aee2df6.yaml | 8 +++ ..._mariadb_cluster_recovery-1a48db23cb99d4c0.yaml | 8 +++ ...fix_octavia_jobboard_bool-bee05138f8209a8e.yaml | 5 ++ ...-datasource-configuration-04202c059f1abd05.yaml | 11 +++ ...all-feature-flags-at-once-28b76958abf54083.yaml | 8 +++ ...e-keystone-admin-endpoint-cb3b224e9e7a892f.yaml | 6 ++ .../notes/skyline-stop-7eb0d8770335a9ca.yaml | 6 ++ roles/cephadm/tasks/main.yml | 4 +- zuul.d/base.yaml | 14 ++++ zuul.d/jobs.yaml | 16 +++++ zuul.d/project.yaml | 2 + 78 files changed, 539 insertions(+), 154 deletions(-) Requirements updates -------------------- diff --git a/lint-requirements.txt b/lint-requirements.txt index 89cb54276..8458d70f6 100644 --- a/lint-requirements.txt +++ b/lint-requirements.txt @@ -4,0 +5 @@ bashate>=0.5.1 # Apache-2.0 +codespell<2.3.0 # GPLv2

1 0

kolla 16.5.0 (antelope)
by no-reply＠openstack.org 31 Jul '24

31 Jul '24

We enthusiastically announce the release of: kolla 16.5.0: Kolla OpenStack Deployment This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 16.5.0 ^^^^^^ Bug Fixes * Fixes a bug where swtpm and swtpm-tools deb packages are missing in 'nova-compute' and 'nova-libvirt' containers which keeps 'nova- compute' container from starting when operator enables TPM support in Nova. LP#2062572 * Fixes a bug where the "rsync" RPM package was missing in the "swift- base" container. See bug 2062072 for details. Changes in kolla 16.4.0..16.5.0 ------------------------------- 90385d68e [docs] remove not working dev setup 46989bd53 CI: fix publish docker credential var 0468ab930 add kayobe to release management doc's Launchpad admin section c0f6339a4 swift-base: fix rsync missing for rpm installs b5c936a3a Pin requests to <2.32 for docker sdk (2023.1 and older releases) d455ec283 collectd: Mark unbuildable on rocky ef5472a20 nova-compute: Remove duplicate openvswitch package 64eed98cf Nova: fix swtpm and swtpm-tools missing from deb installs 7bd57039e Fix OpenSearch file ownership issues Diffstat (except docs and test files) ------------------------------------- .zuul.d/debian.yaml | 4 ++-- .zuul.d/rocky.yaml | 2 +- .zuul.d/ubuntu.yaml | 2 +- kolla/image/unbuildable.py | 1 + releasenotes/notes/bug-2062572-c55c71e1045a863f.yaml | 5 +++++ ..._rsync_rpm_swift_base_missing-9d106d94b52d0bad.yaml | 5 +++++ requirements.txt | 1 + 14 files changed, 31 insertions(+), 20 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6a56bcb1e..a9f8acb8e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,0 +3 @@ docker>=3.0.0,<7.0.0 # Apache-2.0 +requests<2.32.0 # Apache-2.0

1 0

kayobe 14.6.0 (antelope)
by no-reply＠openstack.org 31 Jul '24

31 Jul '24

We are stoked to announce the release of: kayobe 14.6.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 14.6.0 ^^^^^^ New Features ************ * Adds support for custom RabbitMQ configuration. * Adds a new dev script "dev/rabbitmq-migrate-queues.sh" that will enable quorum queues and migrate RabbitMQ to use these. Bug Fixes ********* * Fixes an issue where Dell OS6 and Dell OS9 switch configuration was not applied correctly. LP#2061102. * Fixes issue of ironic files being left behind after node deprovision which prevents it from being enrolled and provisioned again. * Fixes default Ubuntu Apt keyrings location to the recommended "/etc/apt/keyrings". * Fixes the bug where /etc/hosts was not populated correctly when running Kayobe using a host limit. LP#2051714 * Fixes an issue with overcloud service destroy where it failed to remove the inspection store docker volume. See LP#2050092. Changes in kayobe 14.5.0..14.6.0 -------------------------------- 8c733c7a Add ironic config files clean up tasks to overcloud deprovision ca17d667 Update instructions to migrate from CentOS Stream 8 20582e40 CI: Fix kayobe-tox-molecule job c43b1152 Fix permissions on dev/rabbitmq-migrate-queues.sh d0062df2 Fix issue removing docker volumes c0a881ab Add script to migrate to RabbitMQ quorum queues a612a672 Fix Dell OS6 and Dell OS9 switch configuration f6596910 CI: Fix upgrade jobs following zed branch renaming d9c1f459 Document required tags for Bifrost-only deployment 5130cec8 Add python3-devel to Kayobe dependencies b491ce2e Fix Bifrost database backup instructions 66399fa3 Fix default place for Ubuntu Apt keyrings a789a062 Revert "Mark kayobe-tox-ansible job as non-voting" 018448f3 CI: Bump cirros images to 0.5.3 1410b52c Adds support for custom RabbitMQ configuration. 941ee319 Fix for post configure upgrading openstacksdk 22ef31d9 Fix link in release note d7d77953 Fix: configure etc-hosts for overcloud group Diffstat (except docs and test files) ------------------------------------- ansible/overcloud-deprovision.yml | 39 ++++++++++++++++++++++ ansible/provision-net.yml | 2 +- ansible/roles/apt/defaults/main.yml | 2 +- ansible/roles/dell-switch/tasks/main.yml | 4 +-- ansible/roles/docker-registry/tasks/destroy.yml | 2 +- ansible/roles/etc-hosts/defaults/main.yml | 2 +- .../roles/gather-facts-delegated/defaults/main.yml | 8 ++--- .../tasks/gather-facts-delegated.yml | 12 +++++++ .../roles/gather-facts-delegated/tasks/main.yml | 14 ++++---- ansible/roles/inspection-store/tasks/destroy.yml | 2 +- ansible/roles/kolla-openstack/defaults/main.yml | 6 ++++ .../kolla-openstack/molecule/default/molecule.yml | 4 +-- .../molecule/enable-everything/molecule.yml | 4 +-- ansible/roles/kolla-openstack/vars/main.yml | 5 +++ ansible/roles/opensm/tasks/destroy.yml | 2 +- dev/functions | 2 +- dev/rabbitmq-migrate-queues.sh | 34 +++++++++++++++++++ .../configuration/reference/kolla-ansible.rst | 1 + playbooks/kayobe-base/pre.yml | 10 +++--- playbooks/kayobe-infra-vm-base/overrides.yml.j2 | 2 +- playbooks/kayobe-seed-vm-base/overrides.yml.j2 | 2 +- .../add-custom-rabbitmq-conf-8e67ac6a9c7f43e1.yaml | 3 ++ ...mq-queue-migration-script-5f5badff51d60911.yaml | 5 +++ .../notes/bug-2061102-cbc4c65c14c09d55.yaml | 6 ++++ .../deprovision_leftover_fix-6b3150b32cbf9007.yaml | 5 +++ ...fix-apt-keyrings-location-28ea144738de54a7.yaml | 5 +++ .../fix-etc-hosts-management-6b33748ab37d6273.yaml | 6 ++++ ...ce-destroy-volume-cleanup-4b54d81cde9831c7.yaml | 6 ++++ .../notes/wipe-disks-0e72c9c8b7bf7e18.yaml | 4 +-- zuul.d/project.yaml | 4 +-- 34 files changed, 184 insertions(+), 52 deletions(-)

1 0

kolla-ansible 16.6.0 (antelope)
by no-reply＠openstack.org 31 Jul '24

31 Jul '24

We enthusiastically announce the release of: kolla-ansible 16.6.0: Ansible Deployment of Kolla containers This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/kolla-ansible Download the package from: https://tarballs.openstack.org/kolla-ansible/ Please report issues through: https://bugs.launchpad.net/kolla-ansible/+bugs For more details, please see below. 16.6.0 ^^^^^^ Upgrade Notes ************* * MariaDB backup now uses the same image as the running MariaDB server. The following variables relating to MariaDB backups are no longer used and have been removed: * "mariabackup_image" * "mariabackup_tag" * "mariabackup_image_full" Bug Fixes ********* * Add conditionals for IPv6 sysctl settings that have IPV6 disabled in kernel. Changing sysctl settings related to IPv6 on those systems lead to errors. LP#1906306 * Fixes trove module imports. Path to the modules needed by trove- api changed in source trove package so the configuration was updated. LP#1937120 * Fixes "ovs-dpdk" images pull. LP#[2041864] * Fixes configuration of nova-compute and nova-compute-ironic, that will enable exposing vendordata over configdrive. LP#2049607 * Modifies the MariaDB procedure to use the same container image as the running MariaDB server container. This should prevent compatibility issues that may cause the backup to fail. * Fixes a bug where Nova and Cinder would not register the required keystone service role if keystone tags are skipped. LP#2049762 * Fixed 'cinder-backup' service when Swift with TLS enabled. LP#2051986 * Fixes an idempotency issue in the OpenSearch upgrade tasks where subsequent runs of kolla-ansible upgrade would leave shard allocation disabled. LP#2049512 * Fixes keystone port in skyline-console pointing to wrong endpoint port. LP#2069855 * Fixes 2065168. Fix kolla systemd unit template to prevent restart all kolla services with docker.service restart. LP#[2065168] * Fixed an issue where the MariaDB Cluster recovery process would fail if the sequence number was not found in the logs. The recovery process now checks the complete log file for the sequence number and recovers the cluster. See LP#1821173 for details. * A precheck has been added to catch when "om_enable_rabbitmq_quorum_queues" is set to "True", but quorum queues have not been configured on all appropriate queues. A manual migration is required, see here for details: https://docs.openstack.org/kolla-ansible/latest/reference/message- queues/rabbitmq.html#high-availability LP#2045887 * All stable RabbitMQ feature flags are now enabled during deployments, reconfigures, and upgrades. As such, the variable "rabbitmq_feature_flags" is no longer required. This is a partial fix to RabbitMQ SLURP support. LP#2049512 * Fixes an issue where the Keystone admin endpoint would be recreated when upgrading Keystone. The endpoint is now explicitly removed during the upgrade process. * Fixes skyline's old format of stop task. It used docker_container which would cause problems with podman deployments. Changes in kolla-ansible 16.5.0..16.6.0 --------------------------------------- f78dab4bd Fix prechecks for interfaces with dashes d7c7576f6 Fix kolla-ansible systemd restart behaviour 6851d33cf Skyline: Fix incorrect keystone port e7de000bc Use the running MariaDB server image for backups ef0785381 RMQ: enable all stable feature flags at once 8d643a688 CI: increase timeout for server resize confirmation a32840e59 Set node to a valid rabbitmq host da90c86db Fix trove module imports f1763db5a Fix: Update Skyline stop task 98459eeb7 CI: Pin codespell to <2.3.0 160a81b8b CI: Pin requests to <2.32 for docker sdk e42829f05 Remove mistral and redis 0631cd968 Cinder and Nova: add service role cb537d045 Configure Blazar with custom CA file 86ab8fa6a fix swift keystone auth url 9d0e8cae7 Fix 'cinder-backup' service when Swift with TLS enabled 92e67409c mariadb: fix cluster recovery 4d7caa209 post-2023.1: Remove keystone admin endpoint bits f8d383128 ironic: disable heartbeat_in_pthreads 59465420e Change the default ceph_nova_user in globals d01edd177 Fix Skyline API Server TLS configuration d019bd13a Fix OpenSearch upgrade tasks idempotency f56396da3 Add conditionals for IPv6 sysctl settings fceb4fac7 CI: Increase galera node timeouts 6e4e30100 fix confusing jammy upgrade docs d6188a893 Fix images pull in ovs-dpdk role c1acb1bf6 [doc] document --limit limitations edc8ef8c1 rabbitmq: bump wait timeout to 60 seconds 7be33a827 RabbitMQ: correct docs on Quorum Queue migrations d50d2f817 Rework quorum queues precheck 4e1ded015 Add precheck for RabbitMQ quorum queues 10a6ecb87 Configure missing nova services to expose vendordata over configdrive ea75f34f3 CI: Use ControlPersist and ControlMaster Diffstat (except docs and test files) ------------------------------------- ansible/module_utils/kolla_systemd_worker.py | 2 +- ansible/rabbitmq.yml | 2 +- ansible/roles/blazar/templates/blazar.conf.j2 | 1 + ansible/roles/cinder/defaults/main.yml | 3 ++ ansible/roles/cinder/tasks/register.yml | 1 + ansible/roles/cinder/tasks/upgrade.yml | 1 + ansible/roles/cinder/templates/cinder.conf.j2 | 1 + .../ironic/templates/ironic-inspector.conf.j2 | 2 +- ansible/roles/keystone/defaults/main.yml | 7 ++-- ansible/roles/keystone/tasks/upgrade.yml | 5 +-- ansible/roles/loadbalancer/tasks/config-host.yml | 7 ++++ ansible/roles/loadbalancer/tasks/precheck.yml | 2 +- ansible/roles/mariadb/defaults/main.yml | 4 --- ansible/roles/mariadb/tasks/backup.yml | 14 +++++++- ansible/roles/mariadb/tasks/recover_cluster.yml | 2 +- ansible/roles/neutron/tasks/config-host.yml | 6 ++++ ansible/roles/nova-cell/tasks/config.yml | 31 ++++++++++++++++ .../templates/nova-compute-ironic.json.j2 | 6 ++++ .../roles/nova-cell/templates/nova-compute.json.j2 | 6 ++++ ansible/roles/nova-cell/templates/nova.conf.j2 | 5 +++ ansible/roles/nova/defaults/main.yml | 3 ++ ansible/roles/nova/tasks/register.yml | 1 + ansible/roles/nova/tasks/upgrade.yml | 1 + ansible/roles/opensearch/handlers/main.yml | 41 ++++++++++++++++++++++ ansible/roles/opensearch/tasks/upgrade.yml | 35 ------------------ ansible/roles/ovs-dpdk/vars/main.yml | 2 ++ ansible/roles/prechecks/tasks/port_checks.yml | 2 +- ansible/roles/rabbitmq/defaults/main.yml | 7 ---- ansible/roles/rabbitmq/tasks/feature-flags.yml | 11 ++---- ansible/roles/rabbitmq/tasks/precheck.yml | 29 +++++++++++++++ ansible/roles/rabbitmq/tasks/restart_services.yml | 2 +- .../roles/service-ks-register/defaults/main.yml | 1 + ansible/roles/service-ks-register/tasks/main.yml | 1 + ansible/roles/service-rabbitmq/tasks/main.yml | 2 +- ansible/roles/skyline/tasks/stop.yml | 13 +++---- ansible/roles/skyline/templates/gunicorn.py.j2 | 4 +++ ansible/roles/skyline/templates/nginx.conf.j2 | 4 +-- ansible/roles/swift/templates/proxy-server.conf.j2 | 2 +- ansible/roles/trove/templates/trove.conf.j2 | 6 ++-- .../logging-and-monitoring/prometheus-guide.rst | 2 +- .../orchestration-and-nfv/tacker-guide.rst | 8 ----- etc/kolla/globals.yml | 2 +- lint-requirements.txt | 1 + .../notes/bug-1906306-640d5085576656f9.yaml | 8 +++++ .../notes/bug-1937120-cd1ad24a9a4be739.yaml | 7 ++++ .../notes/bug-2041864-f19f9a6afd0955e8.yaml | 5 +++ .../notes/bug-2049607-fb79ea2960b91bde.yaml | 6 ++++ .../notes/bug-2058644-1db8786303234787.yaml | 15 ++++++++ ...ova-register-service-role-46a5a745ca697654.yaml | 6 ++++ ...x-cinder-backup-tls-swift-cb694ed1df8caa26.yaml | 5 +++ ...earch-upgrade-idempotency-4d20a8102717cc56.yaml | 6 ++++ ...fix-skyline-keystone-port-0a25395608f572d9.yaml | 5 +++ .../fix-systemd-restart-5fc282419cf13589.yaml | 7 ++++ ..._mariadb_cluster_recovery-1a48db23cb99d4c0.yaml | 8 +++++ ...recheck-for-quorum-queues-ba10f58538959112.yaml | 9 +++++ ...all-feature-flags-at-once-28b76958abf54083.yaml | 8 +++++ ...e-keystone-admin-endpoint-cb3b224e9e7a892f.yaml | 6 ++++ .../notes/skyline-stop-7eb0d8770335a9ca.yaml | 6 ++++ roles/cephadm/tasks/main.yml | 4 +-- 67 files changed, 339 insertions(+), 117 deletions(-) Requirements updates -------------------- diff --git a/lint-requirements.txt b/lint-requirements.txt index 89cb54276..8458d70f6 100644 --- a/lint-requirements.txt +++ b/lint-requirements.txt @@ -4,0 +5 @@ bashate>=0.5.1 # Apache-2.0 +codespell<2.3.0 # GPLv2

1 0

ironic-python-agent 9.13.0 (dalmatian)
by no-reply＠openstack.org 30 Jul '24

30 Jul '24

We eagerly announce the release of: ironic-python-agent 9.13.0: Ironic Python Agent Ramdisk This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent/+bugs For more details, please see below. Changes in ironic-python-agent 9.12.0..9.13.0 --------------------------------------------- b2ec08a Adding support to view indiv. cpu-core info a177319 Follow up to broken Zuul config 599a825 Fix versions in release notes 30cb2d7 Enable voting for codespell CI Diffstat (except docs and test files) ------------------------------------- ironic_python_agent/hardware.py | 146 +++++++++++++++++---- releasenotes/source/2023.1.rst | 6 +- releasenotes/source/2023.2.rst | 6 +- releasenotes/source/2024.1.rst | 6 +- releasenotes/source/zed.rst | 6 +- zuul.d/ironic-python-agent-jobs.yaml | 5 - zuul.d/project.yaml | 4 +- 9 files changed, 335 insertions(+), 77 deletions(-)

1 0

etcd3gw 2.4.1
by no-reply＠openstack.org 30 Jul '24

30 Jul '24

We are jazzed to announce the release of: etcd3gw 2.4.1: A python client for etcd3 grpc-gateway v3 API The source is available from: https://opendev.org/openstack/etcd3gw Download the package from: https://tarballs.openstack.org/etcd3gw/ For more details, please see below. Changes in etcd3gw 2.4.0..2.4.1 ------------------------------- b5ff7f1 Fix watcher failing with huge payloads 3337348 Drop extras from test requirements Diffstat (except docs and test files) ------------------------------------- etcd3gw/watch.py | 4 ++++ test-requirements.txt | 4 ---- 3 files changed, 49 insertions(+), 4 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 08606b1..01725a4 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -13,4 +12,0 @@ urllib3>=1.15.1 # MIT - -# TODO(tkajinam): Remove this once the following change is released -# https://github.com/testing-cabal/testrepository/pull/48 -extras>=1.0.0 # MIT

1 0

python-openstackclient 6.6.1 (caracal)
by no-reply＠openstack.org 29 Jul '24

29 Jul '24

We are amped to announce the release of: python-openstackclient 6.6.1: OpenStack Command-line Client This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/python-openstackclient Download the package from: https://pypi.org/project/python-openstackclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- openstackclient For more details, please see below. Changes in python-openstackclient 6.6.0..6.6.1 ---------------------------------------------- 685b7506 Drop direct dependency on simplejson 28253855 Update TOX_CONSTRAINTS_FILE for stable/2024.1 17f29c67 Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + openstackclient/api/api.py | 7 +++---- requirements.txt | 1 + tox.ini | 8 ++++---- 4 files changed, 9 insertions(+), 8 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index a1b87a04..0cc6c7e8 100644 --- a/requirements.txt +++ b/requirements.txt @@ -15,0 +16 @@ python-cinderclient>=3.3.0 # Apache-2.0 +requests>=2.14.2 # Apache-2.0

1 0

horizon 25.0.0 (dalmatian)
by no-reply＠openstack.org 26 Jul '24

26 Jul '24

We exuberantly announce the release of: horizon 25.0.0: OpenStack Dashboard This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. 25.0.0 ^^^^^^ Upgrade Notes * Python 3.8 support has been removed. Now the minimum supported python version is 3.9. Changes in horizon 24.0.0..25.0.0 --------------------------------- 80bd68b1f Update job nodesets from bullseye to bookworm 88d8593ad Update USER_MENU_LINKS f4a278ce2 pytest-based selenium tests add fix image modal instability 2 94138323e Replace use of testtools.testcase.TestSkipped 23fa6c499 feat: add clouds.yaml download in menu a2d84f10e SDK for Neutron networks and subnets e1ff24fb7 pytest-based selenium tests add fix image modal instability 85316931b Replace pytz by built-in library 13722c202 Fix the display of 'None' in the Volumes table 73ac7b161 pytest-based selenium tests add fix instance deleted assertion 3804e8e21 pytest-based selenium tests add clarification of RC file naming 0d6cad000 pytest-based selenium tests add tests stability improvements 47823cce7 Remove deprecated exceptions.check_message 20e7a0469 reno: Update master for unmaintained/zed 1332c6277 Drop pymongo from requirements a4e31aa9e Remove old excludes 14212342c Respect SSL settings in placement API 250ef3413 pytest-based selenium tests switch zuul job to voting fb4f41e25 Imported Translations from Zanata dd025dbc3 pytest-based UI tests add basic browse test f20d18637 Allow port_get to fail when listing all floating ips 1cf516892 pytest-based integration tests:add instances tests 88c6fd0df pytest-based selenium tests : Add non-voting pytest-ui job d0c816741 pytest-based UI tests add vCPU pCPU test 04d6edb38 Include compound sorting information in docs b5a160a1c pytest-based integration tests:add images tests 54e4f83e7 pytest-based UI tests fix auth and user data ccef197e0 Don't pass the auth_key for volume transfer in the URL c6bba842a Sanitize data for CSV generation 10e45042f Imported Translations from Zanata 58c987dbc Update master for stable/2024.1 cf51415b0 pytest-based UI tests add help page and theme tests da8e95929 Fix error on changing user password by admin ed768ab50 Fix Users/Groups tab list when a domain context is set Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 2 +- .zuul.d/nodejs-jobs.yaml | 4 +- .zuul.d/project.yaml | 7 +- .zuul.d/tempest-and-integrated.yaml | 36 ++- .../locale/en_GB/LC_MESSAGES/doc-configuration.po | 24 +- .../locale/en_GB/LC_MESSAGES/doc-contributor.po | 50 ++- horizon/exceptions.py | 17 - horizon/middleware/base.py | 4 +- horizon/tables/base.py | 12 +- horizon/test/unit/middleware/test_base.py | 8 +- horizon/utils/csvbase.py | 5 +- openstack_auth/backend.py | 5 +- openstack_dashboard/api/keystone.py | 1 + openstack_dashboard/api/neutron.py | 161 +++++++--- openstack_dashboard/api/placement.py | 11 +- openstack_dashboard/api/rest/config.py | 6 +- .../dashboards/admin/networks/tables.py | 6 +- .../dashboards/admin/networks/views.py | 8 +- .../dashboards/identity/projects/tabs.py | 13 +- .../dashboards/project/instances/utils.py | 2 +- .../dashboards/project/network_topology/views.py | 4 +- .../dashboards/project/networks/subnets/views.py | 2 +- .../dashboards/project/networks/tables.py | 8 +- .../dashboards/project/networks/tabs.py | 2 +- .../templates/networks/_detail_overview.html | 4 +- .../dashboards/project/networks/views.py | 12 +- .../dashboards/project/volumes/forms.py | 21 +- .../dashboards/project/volumes/tables.py | 3 +- .../volumes/templates/volumes/_show_transfer.html | 7 - .../dashboards/project/volumes/urls.py | 5 +- .../dashboards/project/volumes/views.py | 80 +++-- .../dashboards/settings/user/forms.py | 11 +- .../locale/as/LC_MESSAGES/django.po | 5 +- .../locale/bn_IN/LC_MESSAGES/django.po | 5 +- .../locale/brx/LC_MESSAGES/django.po | 5 +- .../locale/cs/LC_MESSAGES/django.po | 5 +- .../locale/de/LC_MESSAGES/django.po | 5 +- .../locale/en_AU/LC_MESSAGES/django.po | 5 +- .../locale/en_GB/LC_MESSAGES/django.po | 77 ++++- .../locale/en_GB/LC_MESSAGES/djangojs.po | 37 ++- .../locale/eo/LC_MESSAGES/django.po | 5 +- .../locale/es/LC_MESSAGES/django.po | 5 +- .../locale/fr/LC_MESSAGES/django.po | 5 +- .../locale/gu/LC_MESSAGES/django.po | 5 +- .../locale/hi/LC_MESSAGES/django.po | 5 +- .../locale/id/LC_MESSAGES/django.po | 5 +- .../locale/it/LC_MESSAGES/django.po | 5 +- .../locale/ja/LC_MESSAGES/django.po | 5 +- .../locale/ka_GE/LC_MESSAGES/django.po | 5 +- .../locale/kn/LC_MESSAGES/django.po | 5 +- .../locale/ko_KR/LC_MESSAGES/django.po | 5 +- .../locale/kok/LC_MESSAGES/django.po | 5 +- .../locale/ks/LC_MESSAGES/django.po | 5 +- .../locale/mai/LC_MESSAGES/django.po | 5 +- .../locale/mni/LC_MESSAGES/django.po | 5 +- .../locale/mr/LC_MESSAGES/django.po | 5 +- .../locale/ne/LC_MESSAGES/django.po | 5 +- .../locale/pa_IN/LC_MESSAGES/django.po | 5 +- .../locale/pl_PL/LC_MESSAGES/django.po | 5 +- .../locale/pt_BR/LC_MESSAGES/django.po | 5 +- .../locale/ru/LC_MESSAGES/django.po | 5 +- .../locale/ta/LC_MESSAGES/django.po | 5 +- .../locale/tr_TR/LC_MESSAGES/django.po | 5 +- .../locale/ur/LC_MESSAGES/django.po | 5 +- .../locale/zh_Hans/LC_MESSAGES/django.po | 5 +- .../locale/zh_Hant/LC_MESSAGES/django.po | 5 +- openstack_dashboard/settings.py | 6 + .../test/selenium/integration/conftest.py | 78 +++-- .../test/selenium/integration/test_credentials.py | 12 +- .../test/selenium/integration/test_floatingips.py | 46 +-- .../test/selenium/integration/test_images.py | 150 ++++++++- .../test/selenium/integration/test_instances.py | 342 +++++++++++++++++++-- .../test/selenium/integration/test_routers.py | 18 +- .../selenium/integration/test_volume_snapshots.py | 70 +++-- .../test/selenium/integration/test_volumes.py | 91 +++--- openstack_dashboard/test/selenium/ui/conftest.py | 39 +-- .../test/selenium/ui/test_browse.py | 151 +++++++++ .../test/selenium/ui/test_hypervisors.py | 97 ++++++ .../test/selenium/ui/test_settings.py | 41 +++ openstack_dashboard/test/selenium/widgets.py | 49 +-- openstack_dashboard/test/test_data/neutron_data.py | 132 ++++++-- .../test/unit/api/rest/test_network.py | 6 +- openstack_dashboard/test/unit/api/test_network.py | 18 +- openstack_dashboard/test/unit/api/test_neutron.py | 277 +++++++++-------- openstack_dashboard/utils/filters.py | 4 + .../notes/remove-py38-6914ddb9fdf4cacd.yaml | 5 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + .../source/locale/de/LC_MESSAGES/releasenotes.po | 5 +- .../locale/en_GB/LC_MESSAGES/releasenotes.po | 262 ++++------------ .../source/locale/fr/LC_MESSAGES/releasenotes.po | 280 +++++++++++++++++ .../source/locale/id/LC_MESSAGES/releasenotes.po | 130 +------- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 60 +--- releasenotes/source/zed.rst | 2 +- requirements.txt | 14 +- setup.cfg | 5 +- test-requirements.txt | 10 +- 112 files changed, 2234 insertions(+), 1256 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index aa8b4b55d..3197078fa 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,10 +3,0 @@ - -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. -# Order matters to the pip dependency resolver, so sorting this file -# changes how packages are installed. New dependencies should be -# added in alphabetical order, however, some dependencies may need to -# be installed in a specific order. -# -# PBR should always appear first @@ -18 +7,0 @@ Babel>=2.6.0 # BSD -debtcollector>=1.2.0 # Apache-2.0 @@ -35 +23,0 @@ osprofiler>=3.4.2 # Apache-2.0 -pymongo!=3.1,>=3.0.2 # Apache-2.0 @@ -43 +30,0 @@ python-swiftclient>=3.2.0 # Apache-2.0 -pytz>=2013.6 # MIT @@ -46,0 +34 @@ semantic-version>=2.3.1 # BSD +tzdata>=2022.4 diff --git a/test-requirements.txt b/test-requirements.txt index 803fa25fa..2aed2d0d7 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,9 +1 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. -# Order matters to the pip dependency resolver, so sorting this file -# changes how packages are installed. New dependencies should be -# added in alphabetical order, however, some dependencies may need to -# be installed in a specific order. -# -coverage!=4.4,>=4.0 # Apache-2.0 +coverage>=4.0 # Apache-2.0

1 0

os-traits 3.1.0
by no-reply＠openstack.org 26 Jul '24

26 Jul '24

We contentedly announce the release of: os-traits 3.1.0: A library containing standardized trait strings The source is available from: https://opendev.org/openstack/os-traits Download the package from: https://pypi.org/project/os-traits For more details, please see below. Changes in os-traits 3.0.0..3.1.0 --------------------------------- fa4f920 Add a new trait for stateless firmware support 747dbef Bump min versions to exclude known bad versions b67cbd0 Remove old excludes 51327df Add a new trait for AMD SEV-ES 7ca1822 Bupm hacking 2cf5131 Add traits for TPM models 83e83b7 Update spec reference links 36d91f1 Update bug tracker url 74f9410 Update python classifier in setup.cfg 2bb3adc add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- os_traits/compute/migrate.py | 2 +- os_traits/compute/security.py | 14 +++++++++----- os_traits/hw/cpu/x86/amd.py | 3 ++- pyproject.toml | 3 +++ requirements.txt | 6 +----- setup.cfg | 1 + test-requirements.txt | 8 ++------ 9 files changed, 21 insertions(+), 20 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 6de9f4e..428d763 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=3.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index e10642c..50c9824 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,6 +1,2 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - -hacking>=3.0.1,<3.1.0 # Apache-2.0 -coverage!=4.4,>=4.0 # Apache-2.0 +hacking>=6.1.0,<6.2.0 # Apache-2.0 +coverage>=4.4.1 # Apache-2.0

1 0

manila-tempest-plugin 2.4.0 (dalmatian)
by no-reply＠openstack.org 26 Jul '24

26 Jul '24

We are psyched to announce the release of: manila-tempest-plugin 2.4.0: Tempest plugin manila-tempest-plugin This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/manila-tempest-plugin Download the package from: https://tarballs.openstack.org/manila-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/manila/+bugs For more details, please see below. Changes in manila-tempest-plugin zed-last..2.4.0 ------------------------------------------------ caf8b90 additional configuration options for scenario tests b615b26 Reduce test resource consumption cephfs-nfs f7928e6 Temporarily remove neutron dynamic routing b50ac9f [CI] Fix cephfs-nfs job 26fe97c Use devstack's OSCaaS in test jobs 986c7bd Fix racy DHSS=True share groups test 6d00585 Add stable/2024.1 job on gate and remove zed job bac0c6f Remove old excludes Diffstat (except docs and test files) ------------------------------------- requirements.txt | 6 +----- test-requirements.txt | 8 ++------ zuul.d/manila-tempest-jobs.yaml | 19 ++++++++++++------- zuul.d/manila-tempest-stable-jobs.yaml | 19 +++++++++++++------ zuul.d/project.yaml | 2 +- 10 files changed, 60 insertions(+), 31 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 108bbee..ae5ea16 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=3.0.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index e422e93..761bf70 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,3 +1 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. +hacking>=3.0.1,<3.1.0 # Apache-2.0 @@ -5,3 +3 @@ -hacking>=3.0.1,<3.1.0;python_version>'3' # Apache-2.0 - -coverage!=4.4,>=4.0 # Apache-2.0 +coverage>=4.4.1 # Apache-2.0

1 0

neutron-lib 3.14.0 (dalmatian)
by no-reply＠openstack.org 25 Jul '24

25 Jul '24

We are glad to announce the release of: neutron-lib 3.14.0: Neutron shared routines and utilities This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 3.14.0 ^^^^^^ New Features ************ * A new field is added to the model query hooks: "rbac_actions". This field can modify the RBAC entries filter, setting the required RBAC actions for this specific model. This field is implemented initially for the "network" and the "subnet" model, that require an additional RBAC action ("access_as_external"). Other Notes *********** * API resources which do not really have "project_id" associated with them, because either it belongs to the project to which their parent belongs ("QoS rules") or does not belong to any project ("flavor" and "service profile"), do not accept "project_id" nor "tenant_id" to be sent in the body of the POST or PUT request. * MechanismDrivers can now start their own RPC listeners by implementing start_rpc_listeners(). It is preferred to use this method instead of initialize() for this task to support the split between RPC and API workers. Changes in neutron-lib 3.13.0..3.14.0 ------------------------------------- 24da2ca Missing required extension in 'subnet-external-network' bbe0f31 Don't add tenant_id to all resources during create request 3bad954 api-ref: Add delete port bindings 98cee6e Add start_rpc_listeners() to MechanismDriver 2a13651 Add the ability to define the ``BaseWorker.set_proctitle`` flag b855036 Add the field "rbac_actions" to the model query hooks 453bbe8 Add neutron unit test job in check queue Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 14 ++++ api-ref/source/v2/port_bindings.inc | 23 ++++++ neutron_lib/api/attributes.py | 9 ++- neutron_lib/api/definitions/flavors.py | 26 +------ neutron_lib/api/definitions/qos.py | 5 -- .../api/definitions/subnet_external_network.py | 2 +- neutron_lib/db/model_query.py | 43 +++++++++-- neutron_lib/plugins/ml2/api.py | 11 +++ neutron_lib/worker.py | 8 ++ ...rces-which-do-not-need-it-c32ed9a7795595a7.yaml | 8 ++ ...o-start-own-rpc-listeners-54f05910ac3f336a.yaml | 7 ++ .../query_hook_rbac_actions-14e1e79f71d3cc22.yaml | 8 ++ 14 files changed, 209 insertions(+), 49 deletions(-)

1 0

neutron 24.0.1 (caracal)
by no-reply＠openstack.org 23 Jul '24

23 Jul '24

We are overjoyed to announce the release of: neutron 24.0.1: OpenStack Networking This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 24.0.1 ^^^^^^ Other Notes * Enhance error handling in the Neutron metadata service for cases when the Nova metadata service is unavailable, ensuring correct HTTP status codes are returned. Changes in neutron 23.0.0.0rc1..24.0.1 -------------------------------------- 59bc8e476f Checking pci_slot to avoid changing staus to BUILD forever 424f1e6f4c [FT] Add a timeout for the NB/SB connection stop method 94d86ba8b8 Add the port "fixed_ips" information in the DHCP RPC 4c70d3ea61 Change to use selectin for RBACs in SubnetPool DB load strategy f25cc2f503 Reorder subnet RBAC policy check strings 346d433aa8 Return empty BpInfo if missing binding:profile 3d97c4f2ac [OVN] Sanitize the classless-static-route DHCP option 7e36795563 [FT] Run test_periodic_sync_routers_task tests serially f94f8b6384 Add a default goto table=94 for openvswitch fw f0901c75e2 [OVN] Bump revision number after update_virtual_port_host 1098929a54 [OVN] Fix virtual parent match for PortBindingUpdateVirtualPortsEvent f7e9b2e5b3 Revert "Use HasStandardAttributes as parent class for Tags DB model" 966fa566e5 Revert "[OVN] Prevent Trunk creation/deletion with parent port bound" 0d8cc09c4a [stable only] Fix KeyError in set_gateway_mtu 4221f706ce [functional tests] compatibility with ovsdbapp>=2.6.1 5bdd0efb39 [stable only] Do not fail on missing logical router ports d8208fc514 Return both project_id when validating auto allocate network a61598f64b Put monitors dictionary back in MetadataDriverBase class ac1472c8cf Don't update revision number if object was not modified 51961e195f Fix KeyError failure in _sync_subnet_dhcp_options() 646270de5b Fixing the 500 HTTP code in the metadata service if Nova is down d683804dfa Check unspecified flavor in user defined driver 0eccc52f82 Enhance IptablesFirewallDriver with remote address groups fed96541c7 Fix making all user defined flavor routers HA 14f5d52fa7 Update TOX_CONSTRAINTS_FILE for stable/2024.1 0ed3ab9d80 Update .gitreview for stable/2024.1 2a196fefd4 Fix TestOVNMechanismDriver ipv6 tests b8953b543a [OVN] Enable "ha" API flag for OVN routers 33044d5e04 reno: Update master for unmaintained/xena 499988db7f reno: Update master for unmaintained/wallaby 63e976b620 reno: Update master for unmaintained/victoria cd1d191e33 Use the system-dependent string for IP protocol 4 fe31f4fe02 [OVN] Implement OVN agent metadata extension 09412db90b Exclude files from coverage check, improve overall result 06d48cb980 ``OvnDriver`` and ``DvrHaDriver`` to use "distributed_support" variable 8b007e6366 [FT] Check "Port_Binding" register exists before checking type b5aecfeff8 [OVN] Make mandatory the router name in the LRP.external_ids af91252646 Remove unneeded check in dhcp.py fa3223bb9d [OVN] Remove OVN_GATEWAY_INVALID_CHASSIS artifact cc1ff09b9e [ovn] Add support for enable_default_route_bfd attribute 743bd1ccef [ovn] Ensure OVN DB update on change of number of GW ports ae9749a5e3 [ovn] Ensure all routes are deleted when deleting ExtGw 86f51a4136 Explicitly set __tablename__ for Trunk 12ed429e7b [ovn] Document the OVN L3 scheduler: Anti-Affinity 793dfb04d0 Fix iptables mapping of 'ipip' protocol 8df5ee61d9 [ovn] Apply soft anti-affinity for LRs with multiple LRPs when scheduling 898498ca3b [ovn] Add helper for retrieving LR associated with LRP 0bae4b70b6 [ovn] Make scheduling of unhosted gateways aware of current transaction 63f690e6fd Make common Metadata Driver classes 47b4d14955 [OVN] Set MTU of the VETH interfaces between OVS and metadata f73a2515cb [OVN] Identify the LR GW port with "external_ids:neutron:is_ext_gw" 7ddbb6222c [OVN][FT] Check ``WaitForCreatePortBindingEvent`` wait result 0e833e3b20 Update ``PortNumaAffinityPolicyExtensionTestCase`` tested policies 981df94416 [OVN] Remove ``create_lrouter`` and ``delete_lrouter`` implementation 2f7f7c2fc2 Ensure that haproxy spawned by the metadata agents is active ebb7ec1eed ``IpLinkCommand.set_netns`` "is_ovs_port" parameter no longer needed 016f5187a5 Retry ``set|get_link_attribute(s)`` if the interface is not present e7154d748e Enable logging for scheduler functional tests 2ed9834047 Fix invalid IP address representation in unit test a644b3c62b [S-RBAC] Change policies for port's binding:profile field 7c21b776c6 Fix undefined-loop-variable warnings 352de7c42c Update some examples to use openstackclient d755c2551f [OVN] Add ``ProviderResourceAssociation`` to any ML2/OVN router 1e7baf2110 Fix misplaced-bare-raise warning 7f017d9c9c Fix unidiomatic-typecheck warnings 4d6a60b40e Fix import-outside-toplevel warnings 74555bceca Fix useless-else-on-loop warning e4cdfa3587 Fix unnecessary-comprehension warnings 2db6d45490 Fix pointless-string-statement warnings 5def8e9306 Fix a typo in parameter description 027ad4624d Fix wrong option name in release note d55c591ecd [OVN] A LRP in an external tunnelled network has no chassis 78e8f1dca0 Set minumum boundary for workers b38f72b212 Completely disable rpc workers when rpc_workers=0 cce872ead3 [Docs] Add info about incompatible PF configuration in ML2/OVN gaps a355d2a0d5 Log warning about port forwardings that won't work properly fa28c3c35c Allow HA routers to have automatic l3agent failover df24fbeb48 [OVN] Document the OVN L3 scheduler: AZs distribution 52662cad7a Change SG rules backref load method to "joined" babb63275d Use different process title for RpcReportsWorker and RpcWorker 188fe6c953 [OVN] Document the OVN L3 scheduler 542c2ff463 Update hacking version 4df5f2f41b [UT] Fix ``APIv2TestBase`` derived test classes ce53fb55ad [OVN] Warn about invalid OVN and FIP PF config during start of Neutron a097f363d1 reno: Update master for unmaintained/yoga 94ea289600 tox: Drop envdir c16463c866 dhcp: rename get_process_uuid as private b37c0f45c8 dhcp: fix usage of helper function to retrieve process name 5b49c507ba [OVN][CI] Update OVS_BRANCH to be compatible with ovn main 1600d54175 [OVN] Add ``subnetpool-prefix-ops`` extension to ML2/OVN mech driver 70e51eb2ba [OVN] Use elevated context to retrieve subnet in router port configuration a926aad434 Fix test_update_timestamp unit test failure c6ac441a51 [UT] Change number of ``utcnow`` call number in ``test_update_timpestamp`` bf83de893f Replace CRLF by LF a29ea3724e [ovn] AZs distribution in L3 port scheduler 4ccc296f56 [ovn] Honor `enable_default_route_ecmp` attribute 0bc9a71387 [ovn] Implement support for external-gateway-multihoming extension 27601f8eea Set trunk parent port as access port in ovs to avoid loop bf2f8342d7 python-3.12: do not use datetime.datetime.utcnow() 3ef02cc2fb Consume code from neutron-lib 64fddf4f2d [OVN][FT] Retry in case of timeout when executing "ovsdb-client". cd1eb7852d [OVN] Add a start method to the OVN agent extensions 9e74ea11e8 [OVN] The OVN agent exposes the ``load_config`` method. 1dbc373869 Update .pylintrc 49366ecada Router flavors and service type for OVN 3d5d82a197 ovn-l3: reschedule lower priorities b5f5f3def3 ovn-l3 scheduler: calculate load of chassis per priority e234a7aeab If method ``set_netns`` fails, restore previous device namespace 637e7a5007 Make get_ports RPC method common for the DHCP and Metadata agent 70f9dd926f update OVS_BRANCH to be compatible with ovn main branch f9e40971e9 Forbid the subnet gateway IP deletion if a router interface is attached baaf240ce3 [OVN] Add the bridge name and datapath type to the port VIF details d55b15bedc Fix unnecessary-list-index-lookup warning 5dfb742d71 Add firewall_v2 to extensions supported by ovn d2a50945bf Remove _use_db_facade() c05fa72915 Fix use-list-literal warnings 3d8460c222 Fix use-maxsplit-arg warnings 3e2ae14c07 Fix implicit-str-concat warnings e68a920c11 [OVN] Update lsp host id when virtual parent moves 8ac18a8ee1 Cleanup setup.py and requirements d1fe6a1c27 [FT] Add more information to ``IpRouteCommandTestCase`` if fails de40bfbafb Update exception conditions in ``_process_create_port`` 90ea96b290 Remove the "new_facade" parameter that is no longer needed 3eeb5d3e6a Add info about metering agent gap in the ML2/OVN backend 70eb4006c6 Not process security group for none active ports 4007cfa956 Remove deprecated OVN vif_type config option 712d000a7e Remove deprecated name quota_rbac_entry cf7e3b98ef dhcp: improving log level of cleanup stale devices 4d9482d8ec Update python classifier in setup.cfg 2f00111940 Disallow subnet cidr of :: without PD 566fea3fed fix netns deletion of broken namespaces 087df97449 [OVN] Remove backwards compatibility with OVN < v20.09 ver 2 d603b0fc2c [OVN] "description" property missing in ``NeutronAgent`` ff94b49ce5 doc: Drop description about old translation method b4d39fd6e5 [FT] Remove test "test_get_datapath_id" e45c403676 [UT] OVN fake resources factory method should return instance 86efc8be99 [OVN] OVN agent extensions correctly consume agent API fa46584af9 [OVN] Retrieve the OVN agent extensions correctly a641e8aec0 Handle creation of Port_Binding with chassis set 114ca0f1be Fix IGMP inconsistency across drivers d0fdda5530 [OVN] Fix UT assertion d9c8731af3 [ovn] Add support for IPv6 metadata 69308192f9 Remove check_router_mac_binding_options maintenance task 9a62bbc290 Remove _delete_default_ha_chassis_group maintenance task 58dcd30dbb [Fullstack] Double check that agent is dead when it should be dead 8935b7a133 [Fullstack] Consolidate segmentation_id update tests into single test ef15700055 [Fullstack] Remove SecurityGroupRulesTest.test_normalized_cidr_in_rule test fea0e7d0ae [Fullstack] Remove test_port_shut_down module c1a0ceb86c [Fullstack] Remove unnecessary tests 3fe59efd22 [Trivial] speed up l3_db floating IP port janitor DB query 41fd683663 Create an OVN metadata namespace prefix constant 37384a4705 FIP QoS: check policy id before blindly updating FIP a579e504e9 [OVN] Remove backwards compatibility with OVN < v20.09 bb1114c8b1 Make ``OVNMechanismDriver.post_fork_initialize`` callback cancellable b687414570 Fix consider-using-from-import warnings 3233407d77 Fix "use a generator" warnings 673e373b6f Fix assignment-from-none warnings e522d04668 Remove the SubresourceTest class 3e1a99f1c2 Fix consider-using-sys-exit warning c794227941 Remove some useless else statements 5943685c88 Fix consider-using-in warning bdeec3577c Fix simplifiable-if-expression warning 8d899c8d33 Fix deprecated-method warning 4b0d433472 Fix format-string-without-interpolation a246fd6567 Remove re-importation of uuid library ed0515737b Metadata: handle process exceptions dfb083657f Remove migrate_to_port_groups maintenance task 1fe3aefd4b Remove migrate_to_stateful_fips maintenance task 034fcb0f6d [OVN] Add baremetal support without Neutron DHCP agent for IPv6 656028f311 Remove logic for old LBaaS(v2) 62982a1ff4 Remove vnic_type_blacklist deprecated name 47d140d4d0 Replace network type names by constants ed07a430f5 Validate ip versions d8a2f212f7 Add [metadata_rate_limiting] options to example config files 0afa24d9af [DHCP agent] Fetch OVN Metadata port from plugin 1c13fb03d1 Remove ovs_integration_bridge configuration option 56172ed5ae [DHCP agent] Fix route to OVN metadata port for non-isolated networks efe530e0eb Fix releasenote location 241eb143f4 Remove segment_mtu configuration option 0dcebba676 Remove agent veth_mtu configuration option 0a554b4f29 Add support for OVN MAC_Binding aging eddde3522b Remove deprected and unused argument from update_port_status() 3aafeefc85 [OVN] DB sync host/physnet - filter on agent_type 56663edb20 Remove ovn_l3_mode configuration option 95b4e8f41d Make unit tests compatible with neutron-lib-3.9.0 78b5fe2ff4 [ML2/OVN] Add gateway_port support for FIP 407585f99f docs: update default value of metadata workers for ml2/ovn 2f91d330da Correctly validate subnet arguments when using a subnetpool 354205a423 Forbid updating vnic type on a bound port 8d7d6f154b [CI] Remove py310-with-sqlalchemy-master job fb9437ca25 Use py311 for all neutron jobs cd8816acd1 [OVN] Update the External Ports documentation 770914f98d [OVN] Enhanced external port scheduling f2a3020cf0 Ensure ovn loadbalancer FIPs are centralized upon neutron restarts 618478d304 Revert "Make job openstack-tox-py310-with-sqlalchemy-master non-voting temporary" 688c5e2a91 [Fullstack] Drop all linuxbridge scenarios from fullstack tests e13aea6b8c Fix modified-iterating-list pylint warning 9bab423bf3 [OVN] Remove logic for old localnet port naming e1b4a065c7 Make job openstack-tox-py310-with-sqlalchemy-master non-voting temporary a555a274e6 Validate [designate] ipvN_ptr_zone_prefix_size at config layer 46c1220b38 Remove deprecated [designate] admin_* parameters e4542bca80 ovn: Document fragmentation / pmtud gaps 29505104aa Update OVN client _get_port_options() code and utils 842f2f8e6c [Docs] Fix info about provider bridge name in the bridge_mappings 49b83c0561 Update job overrides for Caracal release c4d8868651 Remove deprecated get_floatingip_by_ips() 34f7a5805e doc: Fix wrong sections of ovs-agent config options 39a1f1e7fd [FT] Clear the idl lock in TestMaintenance tests 64b5787c32 get_hosts_mapped_with_segments add filter agt_type 2bcad25d34 doc: Stop configuring authtoken middleware in compute 2a637820eb doc: Remove remaining description about allow_overlapping_ips 1e9f50c736 Add support for FDB aging 4f0a35c28f Revert "Disable mysql gather performance in jobs" bd0fec95fa Use convert_version_to_tuple() throughout tree c3b855a100 Remove obsolete PID files before start 2fe08b23b7 l3_extra_gws: Add PRECOMMIT_UPDATE receiver 9d91415dc8 l3_extra_gws: Fix update_external_gateways handling 2ae623b2b4 l3_extra_gws: Fix KeyError when removing extra GW port 6d4c433cfc l3_extra_gws: Listing GW ports requires admin context 8219f3f61b Get default value for BFD/ECMP extra attributes from config f18c5426b0 Add note to avoid version checks in sanity checks 73cd6dca74 Update OVN db sync code log messages 3fc8d32383 Don't set port capabilities for OVS HW offloading 6a5859fc07 Fix python shebang b2e14b23f3 Add constant to identify OVN LB HM ports 1f1824397d [OVN] Populate the "router.distributed" flag in ML2/OVN aead4aa99d [OVN] Set the Neutron port status based on "lsp.up" and "lsp.enabled" 1879d92533 "ebtables-nft" MAC rule deletion failing 2919290c95 [OVN] Use the ``AgentCache`` deletion method 71a7abb498 Remove any IPAM allocation if port bulk creation fails f9b91289a5 Add policy enforcer for "tags" service plugin 3ec7f96cbb ovn: Spawn metadata resources on additional chassis event 1a9907756e Bump skip-level lower version to stable/2023.1 4e566b11d0 Introduce ovn_nb_global config section b0107bf40a Don't respawn a process that has been stopped f006d29251 Add dhcpagentscheduler API extension to the ML2/OVN extensions daa0d1c5a2 Restore the tempest nftables jobs in experimental and periodic queues 8aad094985 Drop unused tables from the Neutron database 96223931ca Create a policy rule to control if a rule belongs to the default SG 1aa1f2f9cb Missing SG rule default group extension in ``Ml2Plugin`` 78027da56c Remove the publish patch in SG rule BEFORE_DELETE and BEFORE_CREATE 294e1c60b4 [RBAC] Update the subnet policies e066cab875 Add a new extension "security-groups-rules-belongs-to-default-sg" 428f7a8418 [S-RBAC] Add service role in neutron policy 5245dcb467 [fullstack] Unify ``TestQoSPolicyIsDefault`` tests 90d06b387c [fullstack] Unify ``TestMTUScenarios`` tests a5e764c8c2 ovn: don't set (empty) requested-chassis= key for ports 0aa154b5ce Fix the ``log.setup`` method call with "fix_eventlet=False" acc6ff0580 Add "jammy" distribution release to the legacy ebtables installation d13967ccad [UT] Add chassis.external_ids dict in ``TestOvnSbIdlNotifyHandler`` 1e274d6762 functional: Enable test_fip_connection_for_address_scope test fed7060904 TestSegmentHostMappingNoStore class is missing config f51e215f71 Remove a print statement from the iptables unit test a76aa01977 [OVN] Add the default condition check in ``PortBindingChassisEvent`` 6801589510 ovn-metadata: Refactor events 3e6387edb8 ovn-trunk: Refactor event handling 6f2355f173 Fix the common/ovn functional tests 7e10a01874 Parameter filters may be None, which cannot be called with ** 1160aaa471 [OVN] Match LSP_TYPE_VIRTUAL in PortBindingUpdateVirtualPortsEvent 56821b6aea Register GMR with config 1d7e99bc0f Add has_lock_periodic decorator for OVN Maintenance 878ea0dfd5 Add a new option to enable signals b7201b9fbb Add router ID in HA router process() debug message 095a35fdd2 Use compiled OVN version v23.09.0 4c571cedbb Use is_ovn_metadata_port from the ovn utils 236f8d0b97 [OVN] Add a log message after the "post_fork_initialize" method c282077058 Fix pointless-string-statement pylint warning 1b034f8d62 Revert "[OVN][Trunk] Add port binding info on subport when parent is bound" 53d4a43251 Imported Translations from Zanata e63cdd216b Alphabetize some of the admin and contrib docs 67bd591c5b Use safer methods to get security groups on security group logging 2ec273cdc7 contributor docs: Architectural overview for metadata efd7199960 Update master for stable/2023.2 7e0ba8bcda Open the 2024.1 (Caracal) DB branch 82f2a21d1c [DHCP agent] Add route to OVN metadata port if exists 0611735715 Remove ovn.ini example file f163105158 Add release notes for l3-ext-gw-multihoming and adjacent features 25728955c9 Patch apidef for BFD/ECMP extra attributes 113f3f6689 Add missing extension classes for router BFD/ECMP extra attributes 16875b5f92 Catch non-existent entry failures better in ip_lib e897a62311 [OVN] Update release note section to "fixes" for LP#2036705 6b6abb9698 Improve the SG RPC callback ``security_group_info_for_ports`` 28059598d2 [ovn]Only synchronize non dynamic segments 2f637b2cb9 [OVN][FT] Make explicit the "publish" call check in "test_port_forwarding" 80f547ad1d Add a "port" child table "porthardwareoffloadtype" ccf2efdd3e Add more logging for lrp scheduling on gtws 994d6ace18 Remove some invalid text from the network component doc 1954290636 Add python3.10 support in testing runtime 48f2933060 Fix pylint "W" missing-timeout warnings 2c0e9cfa71 Create a single method to set the quota usage dirty bit 5c246e6b57 Support rarp protocol for egress table 08032e9cc6 Allow neutron managed ports to bypass PREROUTING chain Diffstat (except docs and test files) ------------------------------------- .coveragerc | 15 +- .gitreview | 1 + .pylintrc | 4 - HACKING.rst | 1 - ...g-bgp-floating-ip-over-l2-segmented-network.rst | 6 +- .../figures/neutron-metadata-dhcp-agent.dot | 105 ++++ .../figures/neutron-metadata-dhcp-agent.png | Bin 0 -> 119092 bytes .../figures/neutron-metadata-dhcp-agent.svg | 167 ++++++ .../figures/neutron-metadata-l3-agent.dot | 115 ++++ .../figures/neutron-metadata-l3-agent.png | Bin 0 -> 119977 bytes .../figures/neutron-metadata-l3-agent.svg | 180 ++++++ .../contributor/internals/address_scopes.rst | 2 +- .../contributor/internals/agent_extensions.rst | 2 +- .../contributor/internals/code_profiling.rst | 4 +- .../internals/external_dns_integration.rst | 4 +- .../contributor/internals/l2_agent_extensions.rst | 2 +- .../contributor/internals/l3_agent_extensions.rst | 2 +- .../contributor/internals/linuxbridge_agent.rst | 4 +- .../contributor/internals/openvswitch_agent.rst | 34 +- .../contributor/internals/openvswitch_firewall.rst | 13 + .../contributor/internals/ovn/native_dhcp.rst | 10 +- .../contributor/internals/provisioning_blocks.rst | 4 +- .../contributor/internals/security_group_api.rst | 4 +- .../contributor/internals/services_and_agents.rst | 2 +- .../contributor/internals/sriov_nic_agent.rst | 5 +- .../contributor/policies/gate-failure-triage.rst | 5 +- .../contributor/testing/ci_scenario_jobs.rst | 2 +- .../contributor/testing/ml2_ovn_devstack.rst | 6 +- .../contributor/testing/ml2_ovs_devstack.rst | 6 +- .../install/compute-install-option1-ubuntu.rst | 21 +- .../install/compute-install-option2-ubuntu.rst | 46 +- .../install/controller-install-option1-obs.rst | 21 +- .../install/controller-install-option1-rdo.rst | 21 +- .../install/controller-install-option1-ubuntu.rst | 21 +- .../install/controller-install-option2-obs.rst | 48 +- .../install/controller-install-option2-rdo.rst | 48 +- .../install/controller-install-option2-ubuntu.rst | 50 +- etc/oslo-config-generator/ml2_conf.ini | 1 + etc/oslo-config-generator/ovn.ini | 6 - neutron/__init__.py | 8 +- neutron/agent/common/async_process.py | 17 + neutron/agent/common/base_agent_rpc.py | 33 ++ neutron/agent/common/ovs_lib.py | 15 +- neutron/agent/dhcp/agent.py | 12 +- neutron/agent/l3/ha_router.py | 4 +- neutron/agent/l3/l3_agent_extensions_manager.py | 12 +- neutron/agent/linux/dhcp.py | 85 ++- neutron/agent/linux/external_process.py | 30 +- neutron/agent/linux/interface.py | 7 +- neutron/agent/linux/ip_lib.py | 44 +- neutron/agent/linux/iptables_firewall.py | 59 +- neutron/agent/linux/iptables_manager.py | 5 + neutron/agent/linux/keepalived.py | 12 - .../agent/linux/openvswitch_firewall/firewall.py | 34 ++ neutron/agent/metadata/agent.py | 38 +- neutron/agent/metadata/driver.py | 302 ++-------- neutron/agent/metadata/driver_base.py | 289 ++++++++++ neutron/agent/metadata_agent.py | 3 - neutron/agent/ovn/agent/ovn_neutron_agent.py | 50 +- neutron/agent/ovn/extensions/extension_manager.py | 33 +- neutron/agent/ovn/extensions/metadata.py | 174 ++++++ neutron/agent/ovn/extensions/noop.py | 4 + neutron/agent/ovn/extensions/qos_hwol.py | 25 +- neutron/agent/ovn/metadata/agent.py | 486 ++++++++++------ neutron/agent/ovn/metadata/driver.py | 201 +------ neutron/agent/ovn/metadata/server.py | 53 +- neutron/agent/rpc.py | 4 +- neutron/agent/securitygroups_rpc.py | 3 + .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 1 + neutron/api/rpc/handlers/securitygroups_rpc.py | 10 +- neutron/api/v2/base.py | 13 + neutron/cmd/__init__.py | 28 - neutron/cmd/destroy_patch_ports.py | 2 + neutron/cmd/ovn/migration_mtu.py | 8 +- neutron/cmd/ovn/neutron_ovn_db_sync_util.py | 24 +- neutron/cmd/runtime_checks.py | 9 +- neutron/cmd/sanity/checks.py | 26 +- neutron/cmd/sanity_check.py | 18 +- neutron/cmd/upgrade_checks/checks.py | 128 +++++ neutron/common/_constants.py | 7 +- neutron/common/config.py | 2 +- neutron/common/metadata.py | 6 +- neutron/common/ovn/constants.py | 37 +- neutron/common/ovn/exceptions.py | 7 + neutron/common/ovn/extensions.py | 25 + neutron/common/ovn/utils.py | 322 ++++++++--- neutron/common/utils.py | 25 +- neutron/conf/agent/common.py | 6 - neutron/conf/agent/metadata/config.py | 10 +- neutron/conf/agent/ovn/metadata/config.py | 4 +- neutron/conf/agent/ovs_conf.py | 37 +- neutron/conf/common.py | 5 +- neutron/conf/plugins/ml2/config.py | 19 +- .../ml2/drivers/mech_sriov/mech_sriov_conf.py | 1 - .../ml2/drivers/openvswitch/mech_ovs_conf.py | 1 - neutron/conf/plugins/ml2/drivers/ovn/ovn_conf.py | 101 ++-- neutron/conf/plugins/ml2/drivers/ovs_conf.py | 13 +- neutron/conf/policies/base.py | 14 +- neutron/conf/policies/floatingip.py | 38 ++ neutron/conf/policies/network.py | 41 ++ neutron/conf/policies/network_segment_range.py | 39 ++ neutron/conf/policies/port.py | 131 +++-- neutron/conf/policies/port_bindings.py | 8 +- neutron/conf/policies/router.py | 35 ++ neutron/conf/policies/security_group.py | 49 ++ neutron/conf/policies/segment.py | 36 ++ neutron/conf/policies/subnet.py | 63 ++- neutron/conf/policies/subnetpool.py | 39 ++ neutron/conf/policies/trunk.py | 36 ++ neutron/conf/quota.py | 1 - neutron/conf/service.py | 9 +- neutron/conf/services/extdns_designate_driver.py | 68 +-- neutron/db/address_group_db.py | 1 + neutron/db/agents_db.py | 2 +- neutron/db/db_base_plugin_v2.py | 78 ++- neutron/db/l3_db.py | 40 +- neutron/db/l3_dvr_db.py | 15 +- neutron/db/l3_extra_gws_db.py | 97 ++-- neutron/db/migration/__init__.py | 1 + .../db/migration/alembic_migrations/script.py.mako | 12 +- .../expand/89c58a70ceba_ecmp_bfd_attributes.py | 5 + .../expand/054e34dbe6b4_drop_unused_tables.py | 150 +++++ ...791_add_port_hardware_offload_extension_type.py | 44 ++ .../alembic_migrations/versions/EXPAND_HEAD | 2 +- .../alembic_migrations/versions/kilo_initial.py | 9 +- neutron/db/migration/cli.py | 3 +- neutron/db/models/port_hardware_offload_type.py | 38 ++ neutron/db/models/securitygroup.py | 41 +- neutron/db/models/tag.py | 2 +- neutron/db/models_v2.py | 2 +- neutron/db/ovn_l3_hamode_db.py | 39 ++ neutron/db/port_hardware_offload_type_db.py | 52 ++ neutron/db/quota/api.py | 33 +- neutron/db/securitygroups_db.py | 34 +- neutron/db/securitygroups_rpc_base.py | 25 +- neutron/extensions/ecmp_routes.py | 40 +- neutron/extensions/l3_enable_default_route_bfd.py | 30 + neutron/extensions/l3_enable_default_route_ecmp.py | 30 + .../port_hardware_offload_type.py} | 14 +- .../security_groups_rules_belongs_to_default_sg.py | 21 + neutron/extensions/securitygroup.py | 4 + neutron/extensions/tagging.py | 119 ++-- neutron/hacking/checks.py | 33 +- neutron/notifiers/ironic.py | 18 +- neutron/objects/base.py | 10 - neutron/objects/l3agent.py | 6 +- .../port/extensions/port_hardware_offload_type.py | 42 ++ .../port/extensions/port_numa_affinity_policy.py | 2 - neutron/objects/ports.py | 12 +- neutron/objects/router.py | 6 + neutron/objects/securitygroup.py | 56 +- neutron/objects/subnet.py | 11 + neutron/opts.py | 8 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 4 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 2 +- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 42 +- .../openvswitch/agent/openflow/native/br_int.py | 2 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 12 +- .../plugins/ml2/drivers/ovn/agent/neutron_agent.py | 50 +- neutron/plugins/ml2/drivers/ovn/db_migration.py | 31 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 100 +++- .../ml2/drivers/ovn/mech_driver/ovsdb/api.py | 144 ++--- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 228 ++++++-- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 205 ++++--- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 435 +++++++++------ .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 609 +++++++++++++-------- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 400 +++++++------- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 188 +++---- neutron/plugins/ml2/extensions/dns_integration.py | 14 +- .../ml2/extensions/port_hardware_offload_type.py | 47 ++ neutron/plugins/ml2/ovo_rpc.py | 7 +- neutron/plugins/ml2/plugin.py | 46 +- neutron/plugins/ml2/rpc.py | 3 +- neutron/privileged/agent/linux/ip_lib.py | 32 +- neutron/quota/resource.py | 3 +- neutron/scheduler/l3_ovn_scheduler.py | 170 ++++-- neutron/server/__init__.py | 19 + neutron/server/api_eventlet.py | 2 +- neutron/server/rpc_eventlet.py | 3 +- neutron/server/wsgi_eventlet.py | 2 +- neutron/service.py | 18 +- neutron/services/auto_allocate/db.py | 4 +- .../externaldns/drivers/designate/driver.py | 38 +- .../service_providers/driver_controller.py | 17 +- .../services/l3_router/service_providers/dvrha.py | 2 +- neutron/services/logapi/drivers/ovn/driver.py | 22 +- neutron/services/ovn_l3/plugin.py | 248 ++------- .../services/ovn_l3/service_providers/__init__.py | 0 .../ovn_l3/service_providers/driver_controller.py | 65 +++ neutron/services/ovn_l3/service_providers/ovn.py | 253 +++++++++ .../ovn_l3/service_providers/user_defined.py | 171 ++++++ neutron/services/placement_report/plugin.py | 2 +- .../services/portforwarding/drivers/ovn/driver.py | 62 ++- neutron/services/qos/qos_plugin.py | 3 +- neutron/services/revisions/revision_plugin.py | 6 +- neutron/services/segments/db.py | 37 +- .../drivers/openvswitch/agent/trunk_manager.py | 12 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 88 +-- neutron/services/trunk/models.py | 2 + neutron/services/trunk/plugin.py | 5 +- .../l2/extensions/test_ovs_agent_qos_extension.py | 2 +- .../agent/l3/bin/cmd_keepalived_state_change.py | 3 +- .../functional/agent/l3/test_legacy_router.py | 2 +- .../functional/agent/l3/test_metadata_proxy.py | 4 +- .../functional/agent/linux/bin/ipt_binname.py | 3 +- .../functional/agent/linux/test_bridge_lib.py | 7 + .../agent/ovn/agent/fake_ovn_agent_extension.py | 7 + .../agent/ovn/agent/test_ovn_neutron_agent.py | 67 ++- .../agent/ovn/extensions/test_qos_hwol.py | 16 +- .../agent/ovn/metadata/test_metadata_agent.py | 459 ++++++++++++---- .../mech_driver/ovsdb/extensions/test_placement.py | 3 +- .../drivers/ovn/mech_driver/ovsdb/test_impl_idl.py | 319 ++++++++++- .../ovn/mech_driver/ovsdb/test_maintenance.py | 312 ++++++++--- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 121 ++-- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 239 ++++++-- .../drivers/ovn/mech_driver/test_mech_driver.py | 216 +++++++- .../privileged/agent/linux/test_ip_lib.py | 80 ++- .../scheduler/test_dhcp_agent_scheduler.py | 16 +- .../scheduler/test_l3_agent_scheduler.py | 7 +- .../conntrack_helper/test_conntrack_helper.py | 3 +- .../functional/services/ovn_l3/test_plugin.py | 488 +++++++++++++---- .../openvswitch/agent/test_trunk_manager.py | 8 + .../trunk/drivers/ovn/test_trunk_driver.py | 77 +-- .../unit/agent/common/test_placement_report.py | 1 - .../agent/common/test_resource_processing_queue.py | 5 +- .../metadata/test_host_metadata_proxy.py | 5 + .../agent/l2/extensions/test_fdb_population.py | 11 - .../linux/openvswitch_firewall/test_firewall.py | 19 +- .../unit/agent/linux/test_external_process.py | 34 +- .../unit/agent/linux/test_iptables_firewall.py | 144 ++++- .../unit/agent/linux/test_iptables_manager.py | 13 +- .../rpc/agentnotifiers/test_dhcp_rpc_agent_api.py | 1 + .../unit/api/rpc/handlers/test_resources_rpc.py | 2 +- .../conf/policies/test_auto_allocated_topology.py | 21 + .../unit/conf/policies/test_availability_zone.py | 13 + .../unit/conf/policies/test_floatingip_pools.py | 13 + .../policies/test_floatingip_port_forwarding.py | 43 ++ .../unit/conf/policies/test_l3_conntrack_helper.py | 31 ++ .../conf/policies/test_local_ip_association.py | 28 + .../conf/policies/test_network_ip_availability.py | 13 + .../conf/policies/test_network_segment_range.py | 82 +++ .../unit/conf/policies/test_security_group.py | 224 +++++++- .../extensions/test_network_ip_availability.py | 12 +- .../extensions/test_port_hardware_offload_type.py | 73 +++ .../extensions/test_port_numa_affinity_policy.py | 10 +- .../extensions/test_port_hardware_offload_type.py | 38 ++ .../unit/objects/test_network_segment_range.py | 2 +- .../mech_sriov/agent/test_sriov_nic_agent.py | 30 + .../agent/openflow/native/test_br_int.py | 2 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 18 +- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 5 +- .../ml2/drivers/ovn/agent/test_neutron_agent.py | 16 +- .../ovn/mech_driver/ovsdb/schemas/ovn-nb.ovsschema | 130 ++++- .../ovn/mech_driver/ovsdb/schemas/ovn-sb.ovsschema | 154 +++++- .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 179 +++--- .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 94 +++- .../ovn/mech_driver/ovsdb/test_maintenance.py | 267 +++++---- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 101 +++- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 56 +- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 183 ++++--- .../drivers/ovn/mech_driver/test_mech_driver.py | 589 ++++++++++++++------ .../plugins/ml2/drivers/ovn/test_db_migration.py | 26 +- .../unit/plugins/ml2/drivers/test_type_flat.py | 3 +- .../plugins/ml2/extensions/test_dns_integration.py | 80 --- .../unit/plugins/ml2/test_tracked_resources.py | 14 +- .../unit/privileged/agent/linux/test_ip_lib.py | 11 + .../unit/scheduler/test_l3_agent_scheduler.py | 30 +- .../unit/services/conntrack_helper/test_plugin.py | 5 +- .../externaldns/drivers/designate/test_driver.py | 40 +- .../services/logapi/drivers/ovn/test_driver.py | 22 +- .../metering/agents/test_metering_agent.py | 16 +- .../services/metering/drivers/test_iptables.py | 1 - .../services/ovn_l3/service_providers/__init__.py | 0 .../service_providers/test_driver_controller.py | 59 ++ .../ovn_l3/service_providers/test_user_defined.py | 133 +++++ .../unit/services/placement_report/test_plugin.py | 2 +- .../portforwarding/drivers/ovn/test_driver.py | 80 ++- .../services/revisions/test_revision_plugin.py | 5 +- .../trunk/drivers/ovn/test_trunk_driver.py | 223 +++++--- .../Add-service-role-support-3e28b1bfcfc59c29.yaml | 10 + ...-require-centralized-FIPs-65864dfeb3edc9b1.yaml | 17 + ...ing-to-ARP-for-DOWN-ports-3620173f00089539.yaml | 11 + ...d-gw-port-support-for-FIP-fb97b85f5928740b.yaml | 15 + ...add-ovn-l3-router-flavors-5c2e14fca15723fa.yaml | 8 + .../notes/bug-2030741-f4c780df9cf3db4e.yaml | 6 + ...85-trunk-parent-vlan-mode-9280ff2d45403bde.yaml | 8 + .../notes/bug-2052484-9a80c1d035349879.yaml | 16 + ...rity-group-rules-policies-b6e350477c88edd8.yaml | 7 + ...p-agent-ovn-metadata-port-33a654ccb9554c65.yaml | 9 + .../notes/ecmp-routes-771ff34beafee370.yaml | 14 +- ...efault-route-bfd-and-ecmp-2cbb3be64ee25410.yaml | 8 + .../enable_signals-option-706167609c0a5fa7.yaml | 11 + .../external-port-scheduling-a5419ac51d863087.yaml | 14 + ...deletion-router-interface-072a18373f920ed9.yaml | 6 + .../notes/igmp-flood-f1b8aa5c799679ea.yaml | 31 ++ ...ort-remote-address-groups-89da589aad3c01d3.yaml | 8 + ...rt-in-the-ML2-OVN-backend-1b98dadb6ea30e60.yaml | 5 + .../l3-ext-gw-multihoming-99be481ddeaa3a6d.yaml | 6 + ...xy-enhance-error-handling-3655404d44249097.yaml | 6 + .../notes/min-workers-8705bf4f76c8b70d.yaml | 11 + ...ork_subnet_mtu_validation-c221f22efcfae927.yaml | 0 ...owner-for-ovn-lb-hm-ports-f5a648c4d948c5c8.yaml | 9 + ...ion-subnetpool-prefix-ops-9b2e4dbdcc174ede.yaml | 3 + ...physnet-filter-agent-type-9e22942bed304807.yaml | 10 + ...n-l3-router-ha-enablement-24c5a5f9fc763db1.yaml | 7 + ...cheduler-unbound-gw-ports-46ced10f810d845d.yaml | 13 + .../notes/ovn-metadata-v6-fe371854b09c8b56.yaml | 7 + ...n-router-distributed-flag-48a8e72c1b258e40.yaml | 12 + ...n-support-chassis_private-35192565e9ee2a00.yaml | 5 + ...n-trunk-check-parent-port-eeca2eceaca9d158.yaml | 6 - ...ge-name-and-datapath-type-d2bd5b438118355f.yaml | 8 + ...l3_reschedules_lower_lrps-5b492131dab9040b.yaml | 6 + ...re-offload-type-extension-acd266f95c1d7d29.yaml | 11 + ..._ipamallocation_leftovers-9d72cc5f616f51e4.yaml | 7 + ...sed_on_lsp_up_and_enabled-31c062fc7089f62a.yaml | 9 + .../remove-agent-veth_mtu-9276f88cf8b43b8e.yaml | 6 + ...move-designate-admin-opts-f3f4fe1037dbd75a.yaml | 11 + ...ve-ovs_integration_bridge-583b8c395f6ba64e.yaml | 6 + .../notes/remove-segment_mtu-4a78b8d47830fb8a.yaml | 6 + .../resource-tags-policies-a2ffd52e57d7b4b8.yaml | 7 + .../notes/support-fdb-aging-b9ab82d75db81bbc.yaml | 14 + .../support-ovn-mac-aging-8a555c608ccf8b04.yaml | 9 + ...reports-worker-proc-title-09671cd397685403.yaml | 12 + .../notes/update-vnic-type-d2cb5b78d5ba1c32.yaml | 7 + releasenotes/source/2023.2.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 5 +- .../source/locale/fr/LC_MESSAGES/releasenotes.po | 90 +++ .../locale/ko_KR/LC_MESSAGES/releasenotes.po | 103 ++++ releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/yoga.rst | 2 +- requirements.txt | 13 +- roles/legacy_ebtables/tasks/main.yaml | 3 +- roles/nftables/tasks/main.yaml | 6 + setup.cfg | 4 + setup.py | 9 - test-requirements.txt | 3 - tools/configure_for_func_testing.sh | 6 +- tox.ini | 29 +- zuul.d/base.yaml | 4 +- zuul.d/grenade.yaml | 19 +- zuul.d/job-templates.yaml | 50 +- zuul.d/rally.yaml | 8 +- zuul.d/tempest-multinode.yaml | 9 +- zuul.d/tempest-singlenode.yaml | 10 +- 555 files changed, 17513 insertions(+), 6721 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index cb72debe32..101d4f3d57 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,4 +3,0 @@ - -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. @@ -23 +19 @@ netifaces>=0.10.4 # MIT -neutron-lib>=3.7.0 # Apache-2.0 +neutron-lib>=3.9.0 # Apache-2.0 @@ -37 +33 @@ oslo.i18n>=3.20.0 # Apache-2.0 -oslo.log>=4.5.0 # Apache-2.0 +oslo.log>=5.3.0 # Apache-2.0 @@ -47 +43 @@ oslo.upgradecheck>=1.3.0 # Apache-2.0 -oslo.utils>=6.2.0 # Apache-2.0 +oslo.utils>=7.0.0 # Apache-2.0 @@ -53,2 +49 @@ ovs>=2.10.0 # Apache-2.0 -ovsdbapp>=2.2.1 # Apache-2.0 -packaging>=20.4 # Apache-2.0 +ovsdbapp>=2.3.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index ab952537fc..cdf72fd136 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,3 +0,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later.

1 0

neutron 23.2.0 (bobcat)
by no-reply＠openstack.org 23 Jul '24

23 Jul '24

We are glad to announce the release of: neutron 23.2.0: OpenStack Networking This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 23.2.0 ^^^^^^ Prelude ******* The OVN changed support for NAT rules including a new column and auto- discovery logic to know about logical router gateway ports for NAT on a Logical Router. New Features ************ * A new OVN driver Northbound DB column has been added to allow configuring gateway port for NAT rule. If the OVN backend supports the *gateway_port* column in the Northbound DB NAT table, the gateway port uuid will be configured to any floating IP to prevent North/South traffic issues. Previously created FIP rules will be updated only once during the maintenance task to include the gateway_port reference (if OVN backend supports it). In case all FIP entries are already configured no maintenance action will be performed. * A new ovn-cms-options option called "enable-chassis-as-extport- host" is now recognized by ML2/OVN and is used to identify nodes that are eligible for scheduling OVN's external ports. This feature is backward compatible and if no nodes contain this new option the external ports will continue to be scheduled using the "enable- chassis-as-gw" option as before. This change also introduces a limit to the number of members for each HA Chassis Group to 5, matching the limit of gateway router port replicas. This is because OVN uses BFD to monitor the connectivity of each member and having an unlimited number of members could potentially put a lot of stress in OVN. * Remote address group support was added to the iptables-based firewall drivers (IptablesFirewallDriver and OVSHybridIptablesFirewallDriver), Previously it was only available in the OVSFirewallDriver. For more information, see bug 2058138 (https://bugs.launchpad.net/neutron/+bug/2058138) * Added the tags policies for the following resources: network, subnet, port, router, floating IP, network segment, network segment range, security group and security group rule. The policies control the creation, the update and the deletion of the resource tags. Known Issues ************ * The fix of bug 2048785 (https://bugs.launchpad.net/neutron/+bug/2048785) only fixes newly created trunk parent ports. If the fix of already existing trunks is needed, then either delete and re-create the affected trunks or set tpt ports' vlan_mode and tag manually: "ovs-vsctl set Port tpt-... vlan_mode=access tag=0" Bug Fixes ********* * [bug 2036423 (https://bugs.launchpad.net/neutron/+bug/2036423) Now it is not possible to delete a subnet gateway IP if that subnet has a router interface; the subnet gateway IP modification was already forbidden. * When synchronizing the OVN databases, either when running the migration command or during startup, the code responsible for synchronization will only clean up segment-to-host mappings for hosts with agent_type "OVN Controller agent". Before, the synchronization would clean up (delete) segment-to-host mappings for non-OVN hosts. Fixes bug: 2040172 (https://bugs.launchpad.net/neutron/+bug/2040172) * [bug 2045889 (https://bugs.launchpad.net/neutron/+bug/2045889) The ports bound to ML2/OVN now contain the OVS bridge name and datapath type in the VIF details dictionary. NOTE: in the ML2/OVS to ML2/OVN migration, the local host OVN bridge (integration bridge) per port is not known; "br-int" will be used by default (that value is rarely changed). * [bug 2036705 (https://bugs.launchpad.net/neutron/+bug/2036705) The Neutron "port.status" field ("ACTIVE", "DOWN") is now set based on the ML2/OVN Logical Switch Port "up" and "enabled" flags. The user can now set the "port.admin_state_up", that is replicated in the "lsp.enabled" flag, to enable or disable the port. If the port is disabled, the traffic is stopped and the "port.status" is set to "DOWN". Other Notes *********** * When the following configuration is enabled at the same time: * OVN L3 service plugin ("ovn-router") * Port forwarding service plugin ("port_forwarding") * "vlan" or "flat" network types configured in the ML2 configuration variable "tenant_network_types" * The OVN floating IP traffic is distributed ("enable_distributed_floating_ip" = "True") the Neutron server will report a warning during plugin initialization because this is an invalid configuration matrix. Floating IPs need to always be centralized in such a case. For more details see bug report (https://bugs.launchpad.net/neutron/+bug/2028846) * The new value for 'device_owner' for OVN loadbalancer health monitor ports (ovn-lb-hm:distributed) is now supported by Neutron, providing a LOCALPORT behavior to these ports. The responsibility to define these ports with the new value instead of the old one (network:distributed) is under the OVN-Octavia Provider driver, which will take care of database conversion for these ports. * Added extension "subnetpool-prefix-ops" to the ML2/OVN mechanism driver. Changes in neutron 23.0.0.0b1..23.2.0 ------------------------------------- 1da102e402 Checking pci_slot to avoid changing staus to BUILD forever 45318c2c2f [FT] Add a timeout for the NB/SB connection stop method 94a1baa63d Add the port "fixed_ips" information in the DHCP RPC a73ef23e3f Change to use selectin for RBACs in SubnetPool DB load strategy 0019e448d8 Reorder subnet RBAC policy check strings 11cfa25d13 Add policy enforcer for "tags" service plugin 2842023327 [RBAC] Update the subnet policies aec330bafe Return empty BpInfo if missing binding:profile f6ec99d1b8 [OVN] Sanitize the classless-static-route DHCP option f5bc50787a [FT] Run test_periodic_sync_routers_task tests serially fc7fa9cf30 Add a default goto table=94 for openvswitch fw 8d4eeee135 [OVN] Bump revision number after update_virtual_port_host 5b61b842ad [OVN] Fix virtual parent match for PortBindingUpdateVirtualPortsEvent 88419c31d7 [OVN] Update lsp host id when virtual parent moves 2614e77bd1 Revert "Use HasStandardAttributes as parent class for Tags DB model" 4c56dfded1 [stable only] Fix KeyError in set_gateway_mtu 72b64013e2 [ML2/OVN] Add gateway_port support for FIP d1c5eac0a8 [functional tests] compatibility with ovsdbapp>=2.4.2 cbfb4349a1 [stable only] Do not fail on missing logical router ports de0e7341a9 Return both project_id when validating auto allocate network 12bb563ae7 [stable/2023.2 only] Fix incorrect cherry-pick for ext gw ac2ceb63cf Don't update revision number if object was not modified 9685c7f5cf [stable/2023.2 only] Update grenade_from_branch to unmaintained/zed e34c95c4b9 Fix KeyError failure in _sync_subnet_dhcp_options() 377e1f6838 Enhance IptablesFirewallDriver with remote address groups 8db03d65e8 Fix TestOVNMechanismDriver ipv6 tests 6925391e96 Use the system-dependent string for IP protocol 4 44c113651b Fix iptables mapping of 'ipip' protocol 101898fde8 [OVN] Set MTU of the VETH interfaces between OVS and metadata ac63999b66 [stable-only][OVN] Set VETH interface MAC address before up 32af674783 Ensure that haproxy spawned by the metadata agents is active a512e5c624 Retry ``set|get_link_attribute(s)`` if the interface is not present a68369b65a [OVN] A LRP in an external tunnelled network has no chassis 09e007c1ae Disallow subnet cidr of :: without PD 8748557738 [Docs] Add info about incompatible PF configuration in ML2/OVN gaps 3eaa326a7a Log warning about port forwardings that won't work properly 37c53085ff [OVN] Warn about invalid OVN and FIP PF config during start of Neutron 00a9525370 [OVN] Add ``subnetpool-prefix-ops`` extension to ML2/OVN mech driver aad8dd8677 Change SG rules backref load method to "joined" b1d7df2c17 [OVN] Use elevated context to retrieve subnet in router port configuration 0b5ffd1e1b dhcp: fix usage of helper function to retrieve process name 0526fb868e [OVN][FT] Retry in case of timeout when executing "ovsdb-client". 4aa2a773ab [Fullstack] Consolidate segmentation_id update tests into single test 3d13945734 [Fullstack] Remove SecurityGroupRulesTest.test_normalized_cidr_in_rule test da39dff8dd [Fullstack] Remove test_port_shut_down module 39cf91d8f7 [Fullstack] Remove unnecessary tests 1e5ba78870 Set trunk parent port as access port in ovs to avoid loop 3b6e642a67 Make get_ports RPC method common for the DHCP and Metadata agent 2c797b107b If method ``set_netns`` fails, restore previous device namespace 2c567e002c [OVN] OVN agent extensions correctly consume agent API f61b6f81af [OVN] Add the bridge name and datapath type to the port VIF details debeab272a Forbid the subnet gateway IP deletion if a router interface is attached d5945fcaa5 Make ``OVNMechanismDriver.post_fork_initialize`` callback cancellable f07cc43964 fix netns deletion of broken namespaces e9cf2fd6cc Handle creation of Port_Binding with chassis set 60eb15ed30 Register Chassis_Private table in BaseOvnSbIdl 6dfeab9a0a [UT] OVN fake resources factory method should return instance ac465e9ef6 Improve the SG RPC callback ``security_group_info_for_ports`` 496db46e32 Make unit tests compatible with neutron-lib 3.8.1 ac0f6774cf [OVN] Retrieve the OVN agent extensions correctly 76a58448e5 [OVN][FT] Make explicit the "publish" call check in "test_port_forwarding" e552aba974 [OVN] Fix UT assertion de248d2826 [OVN] DB sync host/physnet - filter on agent_type 4b4bea6059 [OVN] Update the External Ports documentation cd9366b9ba Correctly validate subnet arguments when using a subnetpool 9fcec1d59b [Fullstack] Double check that agent is dead when it should be dead 14a830fb36 Metadata: handle process exceptions e6d150ef7d [OVN] Enhanced external port scheduling 81c78e2929 ovn-metadata: Refactor events 95b6ad36d0 Fix the common/ovn functional tests e536483b9b [DHCP agent] Fetch OVN Metadata port from plugin 242508cd4b get_hosts_mapped_with_segments add filter agt_type 0edb776c6a [DHCP agent] Fix route to OVN metadata port for non-isolated networks 2200101f9f docs: update default value of metadata workers for ml2/ovn d5a049ef07 Add constant to identify OVN LB HM ports a7aeec703d Remove obsolete PID files before start 9196b612de Catch non-existent entry failures better in ip_lib c03d76a41d Ensure ovn loadbalancer FIPs are centralized upon neutron restarts 80b50732e9 [Fullstack] Drop all linuxbridge scenarios from fullstack tests 7daf61a0af Don't set port capabilities for OVS HW offloading 15814a4623 [Stable Only] Fix parent for nftables job 6a33b2d5c5 Restore the tempest nftables jobs in experimental and periodic queues 2ecb7084fe [DHCP agent] Add route to OVN metadata port if exists 54122203f4 [FT] Clear the idl lock in TestMaintenance tests 7225322f66 [fullstack] Unify ``TestQoSPolicyIsDefault`` tests 2a2c62ddfb [fullstack] Unify ``TestMTUScenarios`` tests 28d69eaef4 [stable/2023.2 only] Drop -master jobs c6f5ea61c8 [2023.2 Only] Switch to 2023.2 neutron-tempest-plugin jobs f797f8bc2e Add dhcpagentscheduler API extension to the ML2/OVN extensions 5485a19356 "ebtables-nft" MAC rule deletion failing 59e3b22d14 Remove any IPAM allocation if port bulk creation fails aaa8f18d11 Parameter filters may be None, which cannot be called with ** de121943ee Fix the ``log.setup`` method call with "fix_eventlet=False" 4266dce979 Add "jammy" distribution release to the legacy ebtables installation 61f94ab449 [OVN] Add the default condition check in ``PortBindingChassisEvent`` 04e9b063ad [OVN] Match LSP_TYPE_VIRTUAL in PortBindingUpdateVirtualPortsEvent d28bcf0fe1 Revert "[OVN][Trunk] Add port binding info on subport when parent is bound" f1638bb6d1 Use safer methods to get security groups on security group logging 05aed84c2a Update TOX_CONSTRAINTS_FILE for stable/2023.2 74bca8052a Update .gitreview for stable/2023.2 0ca6953194 Fix wrong indentation in release note b2ceb8b854 Add release note with known issue with FIP PFs and vlan tenant networks 8cba9a2ee8 Call the "tc qdisc" command for ingress qdisc without parent 34e441e06c Revert "[OVN][Trunk] Set the subports correct host during live migration" c930196dd8 [CI] Bump OVS_BRANCH in ovs/ovn source deploy jobs f7489abaf8 [UT] Adjust autogen_process_directives for alembic-1.12.0+ a3a113aedb [OVN] Fix rate and burst for stateless security groups b250b85770 [UT] Reduce the binding retry loop in ``L3HATestFramework`` c6b6ecc751 Drop release notes for l3-ext-gw-multihoming and adjacent features 5c2f54ca03 Default SG rules template - Update related docs and add release note a4c8392209 Default SG rules - use new rules templates to create rules for SGs 78bc33d300 [Fullstack] Use new DB for each running test 7f777c223e [OVN] Cleanup old Hash Ring node entries d9eb04478e [FT] Make explicit the "publish" call check in "test_port_forwarding" fa130f29f7 Update QoS config document: use YAML config examples 0545f40a04 [OVN] Add the 'uplink-status-propagation' extension to ML2/OVN a3b00768d6 Check the device ID and host ID during virtual port binding 0e5c91c499 Add some more known issues to the OVN gap document e6fb32e27d Fix race condition when creating two routers without HA network 4109ee9bb4 Use the new network HA parameter aad82233eb Prevent internal IP change for floating IP 87b2f34a98 Fix ovn-metadata agent sync of unused namespaces 7ed79c1f78 [OVN][Trunk] Set the subports correct host during live migration e1f887ca9f [OVN] Skip the port status UP update during a live migration d084f2724d [OVN] Set the Neutron port status based on "lsp.up" and "lsp.enabled" 7848eb0bf9 Add "openstack-tox-py310-with-sqlalchemy-master" to check queue 24a645d1d7 Fix bindep for Debian bookworm 72b5120ac2 Remove local CI job "tox-py311" superseded by "openstack-tox-py311" dd3ba9a6cf [OVN] Add a log message after the "post_fork_initialize" method 06dbc5227b [OVN] Disable the mcast_flood_reports option for LSPs 4295598261 Use SQLAlchemy expression "select" 85d3fff97e Use HasStandardAttributes as parent class for Tags DB model 49fcd2f515 Force DB migration script to be run before some fullstack tests 43b4c9ebc5 [sqlalchemy-20] TableClause.insert constructs Insert object 3044b938b9 [OVN] Retry retrieving LSP hosting information afcce6d749 Initialize logger for rpc-server and wsgi script 4693836a1b [OVN] ovn-db-sync check for router port differences 395dd237d1 Fix missing oslo.versionedobjects library option 6fef1e6525 Add max limit to agent_down_time 0741a0d5a5 Add NET_OWNER_MEMBER and NET_OWNER_READER policy rules 5b7031841e Create is_ovn_metadata_port() method a505ff7dbb hash-ring: Retry all DB operations if inactive 14b2f4f60f [UT] Create network to make lazy loading in the models_v2 possible 4757b46646 Fix some new pylint "W" warnings 9e8e3a7867 [OVN] Hash Ring: Better handle Neutron worker failures 019d3421f2 Update Cirros to 0.6.2 ba6f7bf83e dvr: Avoid installing non-dvr openflow rule on startup 89702218db Add extra router attributes for ECMP and BFD 6c513217c2 ovs-agent: React to DB down just like to server down 36db70a718 Add sanity check for dnsmasq 2.86 321182980d Follow up on a small nit from patch 875989 [1] 96fd203a14 For hosts in DVR mode, only fetch bound FIPs 5db57734aa Initialize config in DietTestCase class 929b383743 Fix some new pylint "R" warnings aeb8036393 [sqlalchemy-20] Replace Query.get() with Session.get() c831771053 [PostgreSQL] Subnet entity with ServiceType grouped by both tables cc38cb0cee [sqlalchemy-20] Use the correct OVO field type c94fb2bb88 [sqlalchemy-20] Define one DB model per "FromClause.join" clause a9c8bf5c06 [neutron-api] remove leader_only for sb connection 32121ee638 Add unit tests periodic jobs to the experimental queue b2f1cc724a Add "openstack-tox-py310-with-sqlalchemy-master" CI job 49b68d36a0 [Docs] Add recommendation about usage of cache in the neutron-metadata-agent 67be07fd5b Add new DEFAULT option named "my_ipv6" e41fae522b Default SG api rules template - DB and OVO models 670675dd17 [sqlalchemy-20] Network "repr" should be tested with any order 02b12b0917 Refactor for ovs qos driver meter limit features 65bbbcee76 Set result when lswitch port exist 26a2266cf4 [FT] Move ``BaseOVSTestCase`` class to concurrency 1 executor 80ad28e696 Define the port "fixed_ips" in the creation call 68ecae5ff9 [OVN] Prevent binding a virtual type port b4eb5d71ab Drop redundant index on ports table 42ae944870 Switch fullstack/functional fips jobs to 9-stream f2dd2d3cac doc: fix typo in metering-agent.rst 4a71a7f82f Remove unused method from OVN L3 plugin 833a6d82cd [OVN] Prevent Trunk creation/deletion with parent port bound 28926957d6 [OVN] Expose chassis hosting information in LSP b92d133de6 [OVN] Read the necessary configuration options in the OVN agent load c8c74f12e0 Load FIP information during initialize not init 0090572b93 Ensure traffic is not centralized if DVR is enabled 024704625a Add missing port_binding policies 39e167ab27 Add neutron-tempest-plugin-linuxbridge job to the periodic queue 4a97429e7f [OVN] Improve ovn_l3/plugin.py exception logging add2a6eb8c [ovn][ipv6] Add some more tests to skiplist b084213382 Add more debugging to common agent code 8cd949fc9b Increase timeout in test_get_all_devices() 22ace8a752 [OVS] Check the datapath ID set by the creation method 6632420675 Revert "Use ``TextClause`` to define the DB model "server_default"" 7b85f9c244 [OVN][L3] Optimize FIP update operation 32d589f03e Don't allow deletion of the router ports without IP addresses 576c468b71 Disable pool recycle in tests 67a0b07287 Delete sg rule which remote is the deleted sg a174467639 Explicitly define the subnet creating a new port 08fe84f443 [sqlalchemy-20] Remove redundant indexes from some tables 126d54badc Fix some new pylint "E" warnings dfe29e6760 Delete network namespace on last port deletion 9d9f47c20c [OVN] Remove SB "Chassis"/"Chassis_Private" duplicated registers 8887cdf5d3 Imported Translations from Zanata 955e621167 [OVN][Trunk] Add port binding info on subport when parent is bound f2e3ab3805 [OVN] Hash Ring: Set nodes as offline upon exit 6e3525188f [S-RBAC] Fix policies for CUD subnets APIs ec4bfb91f0 [qos] _validate_create_network_callback return in no network 593278550a Functional: assert multiple calls for update_virtual_port_host 0c66dfaed8 [OVN] The all() and count() methods should be inside a DB txn 8b0c7d2c8d Return back the test_dvr_ha_router_interface_mtu_update test case 57e860ca19 Return back the test_dvr_router_interface_mtu_update test case afa20faec3 [OVN] Improve Hash Ring logs 0c09dbdb2a Subnet now inherit the sRBAC perm. from the parent resource Network 9ca0e34a5e Delete the "Chassis_Private" register when deleting an agent 5e0c102830 Send ovn heatbeat more often. 15fb672641 dhcp/agent: add more detail to a todo note regarding call_driver a9323f0325 dhcp/agent: fix 'get_metadata_bind_interface' driver call 050536c66e Stop the RPC connections when the agent exits ce12b6ac19 Do not query neutron-rpc for sg rules upon sg deletion 1f5f8965c3 gate: bump ovn to the latest LTS release (22.03) 2a8c7ff4f0 [ovn][ipv6] Skip test_update_router_admin_state f9be5d886d Fix 'consider-using-with' warning f070ba6f9d Revert "[OVN] Remove backwards compatibility with OVN < v20.09" e8cd39b3d7 Make DB migration creating indexes in RBACs conditional 61b358b6b5 [S-RBAC] Add API policies for get and activate port bindings b6ce722324 Raise the timeout of "neutron-ovn-rally-task" to 9000 e9da29d16c Change RBAC relationship loading method to "joined" 37dda9bc69 Move ``determine_bind_host`` to ``ovn.utils`` ac24dbed1c Implement ``get_port_type_virtual_and_parents`` method a22b1dedc2 Implement ``get_subnets_address_scopes`` method 9f6f6d5082 Return 409 Conflict to tenant user deleting port attached to FIP 2fbfe3855e Improve the ``PortBindingUpdateVirtualPortsEvent`` match filter 413044f253 [OVN] The L3 scheduler does not use all chassis by default 1b9a16c956 Add description field to the security_group_default_rules resource a72e97ddff Update api extension for default sg rules API a221764751 Allow Multiple External Gateways 0b67da59c6 [sqlalchemy-20] Open a connection to execute a command ac231c8174 Improve "sync_ha_chassis_group" method 35cb164ea5 [ovn]disable security group notifier 9e6675ec06 Increase the waiting period to receive a port creation event 43ef447a57 SG rule dict method allows DB object and Neutron OVO 846003c437 Start metadata proxy even if IPv6 DAD fails 452973c0db Revert "Use a writer context for the online alembic migrations" f42d86cc0d Bump neutron-lib to 3.6.1 ebc0658d55 Revert "Delete sg rule which remote is the deleted sg" e0a2427a2f [ovn] Avoid unwanted ACL_NOT_FOUND error when deleting log objects b677d65b2d [OVN][Migration] Enable settings backup subnet for NFS clients 6fa3d8019f Use ``TextClause`` to define the DB model "server_default" 1d0335810d Disable mysql gather performance in jobs 10ff1caaca Fix some new pylint "C" warnings ed274efcf7 Update pylint version 5f4a41326d Add rate-limiting to metadata agents 43c756d728 [alembic] Alembic operations require keywords only arguments 0959e452d3 [sqlalchemy-20] Retrieve the ``URL`` string with the password a86e300a0b Handle no more IP addresses available during a network sync a612346146 Fix not working use_random_fully config option a06b44e12d Imported Translations from Zanata 01af4b2cda Remove the neutron-debug tool 3b7699bc66 Add scope ID to the "GROUP BY" clause in ``get_scoped_floating_ips`` 01de74dedf [S-RBAC] Get QoS rule types API available for READER role 7573fca58c Notify neutron-server ovs is restarted d409296bde docs: Deindent code blocks 043a8ecad9 [OVN] Use the API context in ``OVNClient._add_router_ext_gw`` method 363c690529 Replace "tenant_id" with "project_id" in address scope 6a2ccfac32 Make "project_id" in "L3HARouterNetwork" unique constraint 98ac1fa31a [sqlalchemy-20] Add the transaction context to the upgrade checks methods 3e65ef863c Mark "ipv6_pd_enabled" as deprecated and experimental. 4edff4fe8d [S-RBAC] Fix new policies for FIP PFs APIs be0dc09d52 [S-RBAC] Fix new policies for get QoS rules APIs 97d658c4ce port-hint-ovs-tx-steering: shim extension 6b55589ae0 port-hint-ovs-tx-steering: agent side 0390ada97c port-hints: api extension c3602ac19b [OVN] Update ovn meter when neutron server reloads be4e150de9 [OVN] Remove backwards compatibility with OVN < v20.09 dde1d69c78 Add host metadata haproxy manager c0af5b3b5e Reduce lock contention on subnets 256297fc7f rbacs: clean-up to use defined constants ACCESS_* 6eb7006801 Drop retries in tests for TimeoutException 78dbe55f19 Add extra log to help figuring out OVS events 30c0e5699e Fix doc links for networking option 2 adaba13bdb Add new DEFAULT option named "my_ip" b1cc242fad Add a method to retrieve router gateway ports 7a59cf0eb9 Correct planned removal for maintenance function 2be53b1719 [functional] Fix db_set use in test_cascading_del_in_txn a9963e90d9 ``_get_ovn_version`` returns a 3 element tuple 4ad979a534 Mark "test_port_creation_and_deletion" as unstable 9ac59e4b4a Avoid retrieving ports if network list is empty 4bac350f68 Remove "neutron-ovn-tempest-ovs-release-ubuntu-old" job b19b55909d Don't set and remove immediately DEAD VLAN tag in tests 88ce859b56 Change API to validate network MTU minimums 9f22dc1d3a Doc: Add FWaaS v2 install details 853dc2570d Add py39 jobs to tox override template 39d252da7c Deprecated support for Windows OS 82029c2c51 Use a writer context for the online alembic migrations 2cafe0a9c4 Revert "Move to python3.9 as minimal python version" f93c9be1c1 Move to python3.9 as minimal python version 4e27e27ae2 Replace context decorators with context managers dd184c5c10 Fix Loki tempest jobs b31453af47 [OVN] Admin procedure for duplicated or deleted OVN agents 872b53f618 Fix functional tests modules which are using PluginFixture 670cc383e0 [S-RBAC] Switch to new policies by default d757c530bc Update QoS documentation a84567b8d6 Remove the ``OVNSqlFixture`` class workaround 05ba4257de Remove creation of DHCP port in the OVN metadata unit test f23d7af8d7 Use explicit inner join for networks in port query 43829301f3 Handle "no such process" during keepalived process cleanup 34ea8988d6 [OVN] Add update event to ``OVSInterfaceEvent`` class a5e26408d2 Fix dns_integration and ml2 plugin unit tests modules 5db17654b9 Fix servicetype unit tests module f92d6fa72a Fix segments unit tests module 6b5acb5835 [S-RBAC] Get availability zone API available for READER role 340fd3cfe7 Run master jobs only on master branch 706a0e0268 Fix parent of neutron-ovn-tempest-with-uwsgi-loki 28961c8b76 Fix network_segment_range unit tests module 73ac4510c7 [grenade] Collect ovn services logs 2364327bd1 Run periodic jobs in experimental queue too 9d51633013 Fix intermittent failures in finding metada port in SB DB 267efd2984 OVN: Always try and create a metadata port on subnets c7ef824941 Do not check the context object in ``TestMeteringPlugin`` 5510cdab92 [ovn] OVNClient._get_router_ports: Drop unused parameter e5d4499672 [ovn] Drop use of LR OVN_GW_NETWORK_EXT_ID_KEY d67d1c2736 [ovn] Drop use of OVN_GW_PORT_EXT_ID_KEY 69f30c92ef [sqlalchemy-20] Add reader context to ``get_ports_on_host_by_subnet`` 7dfbdf65a7 Add support for localnet_learn_fdb OVN option e374b82d8f [CI][fullstack/functional] Report slowest tests 8eecccfeae [S-RBAC] Allow network owners to get ports from that network 95c19c8868 Checkout "sqlalchemy/alembic" main branch in sqlalchmey-master jobs 3de8ebebd8 Pin OVS_BRANCH to working commit a06fe7cfd9 Fix NoSuchOptError error in Ipam unit tests 5a17f2b24a Pass physical bridge informations to OVS agent extension API 33cf2cdc83 Fix ACL sync when default sg group is created 7828acaf4f [ovn] Add end to end test for QosExtension 2aee961ab6 Suppress IPv6 metadata DAD failure and delete address ade2a9f893 Mark "test_multiple_agents_for_network" as unstable fa172ab7dc rbacs: fix typo, s/cxt/ctx e6de524555 rbacs: filter out model that are already owned by context 7073410be3 Bump skip-level lower version to stable/zed 775d5de9f1 Add debug information to ``MacvtapAgentTestCase.test_get_all_devices`` 0ec04dd638 Ensure redirect-type=bridged not used for geneve networks d4654e3011 Filter out unsatisfied routers in SQL 33c4a2d97e Update url and package name 3cc28a004a Add plugin.spec to irrelevant-files b777aa57b2 Update the quota guide examples cfe38a0014 Change name of ``_TestIsSessionActive`` test case. 5c60d697c3 OVN agent: Stop registering unused options 27b3eacd3d Revert "Ensure vlan network traffic is not centralized" e4da60740b [sqlalchemy-20] Do not use strings for aatribute names in loader options 0a69dd5e3d [sqlalchemy-20] query.join should define one table/column per call 4b8e484e1d Increase port name size and type to internal 2ccf1e1e90 [OVN] OVN agent should register "Chassis_Private" by default f42f1cfa69 [sqlalchemy-20] Provide SQL "case" expression correct input paremeters 831ac3152d Fix a number of configuration typos 5b4ed5b117 Fix concurrent port binding activate 1646e5b28d Add neutron-lib project to the SQLAlchemy master branch CI jobs 0220236c63 Cleanup before executing "test_get_all_devices" 6e1dbe9781 Add oslo.db project to the SQLAlchemy master branch CI jobs 97aa84b69a Open the 2023.2 (Bobcat) DB branch c97dcfd03f doc: state that O flag can be 0 in dhcpv6-stateful 6358495720 Delete sg rule which remote is the deleted sg 04d3f889ef Fix metadata agent intermittent test failures 9704dca84e [OVN] Explicitly define the fixed IPs for the metadata port dea48cfc0a Only create a frozen Row on matching events 711fbb9820 Imported Translations from Zanata 8ea2a9c128 Fix typo in unit test 442b437a81 Change external process manager tests to clean temp files efab60c0bf Try to optimize Mysql server mem usage on some CI jobs 745497a112 [OVN] Remove "update_port_qos_with_external_ids_reference" 5c98d9e8d1 [OVS] Parse the "permitted_ethertypes" at the FW initialization bffa642b35 [OVN] Method ``get_port_qos`` should always return 2 values 008277b8c1 [OVS] Allow custom ethertype traffic in the ingress table b9567033fc [OVN] Use the BW values retrieved from ``get_port_qos`` 08eb8e2498 Use neutron-lib policy rules c8ccf2ffbb [OVN] Change oslo config options entry point for the OVN agent cf96bd8bdf ovs: fix regression when vlan mapping is not already registered d44f164f4d ovn_idl_impl: fix a logic bug in get_sg_port_groups d9358b67bd functional: set dns_domain config option after its registration 8946684fb2 Remove duplicate rows in MySQL query output 5d2086c698 Add 2023.1 release name in routed networks doc b6bc4c8a66 Add Lajos Katona to Client and Doc areas as lieutenant d4a85833a7 [sqlalchemy-20] The Session.begin.subtransactions flag is deprecated 0a214b0437 Imported Translations from Zanata 999116126e Add full support for OVN NB "Gateway_Chassis" table 4254ccd1bc Update master for stable/2023.1 8e3bddbf8b Ensure vlan network traffic is not centralized 39b65575cd Change the release tag to use the release identification 44ac03de14 Fix policy unit test deprecation warnings ebcde41fc8 [OVN] Add ``get_gateway_chassis_az_hints`` method to OVN API 2af5fd889b Add sleep before checking if ovs port is in the namespace 12093015de Add Jens Harbott as Lieutenants in Infra area 75e8360224 Reintroduce agent bridge resync test 3cf4899cf0 [OVN] Adding support for VNIC type virtio-forwarder. f3c743d090 Do not update static routes in snat-ns for dvr router with ha Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pylintrc | 26 +- bindep.txt | 9 +- ...g-bgp-floating-ip-over-l2-segmented-network.rst | 420 +++++----- .../shared/deploy-selfservice-initialnetworks.txt | 7 + .../contributor/internals/openvswitch_agent.rst | 34 +- .../contributor/internals/openvswitch_firewall.rst | 13 + .../internals/ovn/ovn_network_logging.rst | 114 +-- .../contributor/internals/ovn/port_forwarding.rst | 110 +-- .../contributor/testing/ci_scenario_jobs.rst | 23 - .../install/compute-install-option2-ubuntu.rst | 4 +- etc/oslo-config-generator/neutron.conf | 1 + neutron/agent/common/base_agent_rpc.py | 33 + neutron/agent/common/ip_lib.py | 9 + neutron/agent/common/ovsdb_monitor.py | 12 + neutron/agent/dhcp/agent.py | 24 +- .../l2/extensions/metadata}/__init__.py | 0 .../l2/extensions/metadata/host_metadata_proxy.py | 200 +++++ neutron/agent/l3/agent.py | 7 +- neutron/agent/l3/dvr_edge_ha_router.py | 4 + neutron/agent/l3/dvr_edge_router.py | 19 +- neutron/agent/l3/dvr_local_router.py | 3 + neutron/agent/l3/router_info.py | 7 +- neutron/agent/l3_agent.py | 3 + neutron/agent/linux/dhcp.py | 120 ++- neutron/agent/linux/external_process.py | 30 +- neutron/agent/linux/interface.py | 7 +- neutron/agent/linux/ip_lib.py | 47 +- neutron/agent/linux/iptables_firewall.py | 26 +- neutron/agent/linux/iptables_manager.py | 14 +- neutron/agent/linux/keepalived.py | 12 - .../agent/linux/openvswitch_firewall/firewall.py | 67 +- neutron/agent/linux/tc_lib.py | 2 +- neutron/agent/metadata/agent.py | 12 +- neutron/agent/metadata/driver.py | 73 +- neutron/agent/metadata_agent.py | 3 + neutron/agent/ovn/agent/ovn_neutron_agent.py | 8 +- neutron/agent/ovn/agent/ovsdb.py | 9 +- neutron/agent/ovn/extensions/extension_manager.py | 7 +- neutron/agent/ovn/extensions/noop.py | 4 + neutron/agent/ovn/extensions/qos_hwol.py | 35 +- neutron/agent/ovn/metadata/agent.py | 246 +++--- neutron/agent/ovn/metadata/driver.py | 31 +- neutron/agent/ovn/metadata_agent.py | 2 + neutron/agent/ovn/ovn_neutron_agent.py | 6 +- neutron/agent/rpc.py | 3 +- .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 1 + neutron/api/rpc/callbacks/version_manager.py | 9 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 25 +- neutron/cmd/ovn/neutron_ovn_db_sync_util.py | 10 +- neutron/cmd/sanity/checks.py | 54 +- neutron/cmd/sanity_check.py | 25 + neutron/cmd/upgrade_checks/checks.py | 176 +++-- neutron/common/_constants.py | 10 + neutron/common/config.py | 2 +- neutron/common/metadata.py | 67 ++ neutron/common/ovn/constants.py | 28 +- neutron/common/ovn/exceptions.py | 14 +- neutron/common/ovn/extensions.py | 10 + neutron/common/ovn/hash_ring_manager.py | 9 +- neutron/common/ovn/utils.py | 432 ++++++++++- neutron/common/utils.py | 40 +- neutron/conf/agent/common.py | 11 +- neutron/conf/agent/database/agents_db.py | 21 +- neutron/conf/agent/database/agentschedulers_db.py | 9 +- neutron/conf/agent/dhcp.py | 14 +- neutron/conf/agent/l3/config.py | 29 +- neutron/conf/agent/metadata/config.py | 47 +- neutron/conf/agent/ovn/metadata/config.py | 6 +- neutron/conf/agent/ovs_conf.py | 8 +- neutron/conf/agent/ovsdb_api.py | 4 +- neutron/conf/agent/securitygroups_rpc.py | 8 +- neutron/conf/common.py | 44 +- neutron/conf/db/dvr_mac_db.py | 8 +- neutron/conf/db/l3_agentschedulers_db.py | 4 +- neutron/conf/db/l3_dvr_db.py | 2 +- neutron/conf/db/l3_extra_gws_db.py | 36 + neutron/conf/db/l3_hamode_db.py | 16 +- neutron/conf/db/l3_ndpproxy_db.py | 2 +- neutron/conf/experimental.py | 5 + neutron/conf/extensions/conntrack_helper.py | 2 +- neutron/conf/plugins/ml2/drivers/agent.py | 6 +- neutron/conf/plugins/ml2/drivers/linuxbridge.py | 16 +- .../ml2/drivers/mech_sriov/mech_sriov_conf.py | 2 +- neutron/conf/plugins/ml2/drivers/ovn/ovn_conf.py | 50 +- neutron/conf/plugins/ml2/drivers/ovs_conf.py | 20 +- neutron/conf/policies/__init__.py | 4 + neutron/conf/policies/address_group.py | 8 +- neutron/conf/policies/address_scope.py | 18 +- neutron/conf/policies/agent.py | 23 +- neutron/conf/policies/auto_allocated_topology.py | 5 +- neutron/conf/policies/availability_zone.py | 11 +- neutron/conf/policies/base.py | 64 +- .../conf/policies/default_security_group_rules.py | 91 +++ neutron/conf/policies/flavor.py | 23 +- neutron/conf/policies/floatingip.py | 49 +- neutron/conf/policies/floatingip_pools.py | 3 +- .../conf/policies/floatingip_port_forwarding.py | 25 +- neutron/conf/policies/l3_conntrack_helper.py | 17 +- neutron/conf/policies/local_ip.py | 9 +- neutron/conf/policies/local_ip_association.py | 13 +- neutron/conf/policies/logging.py | 11 +- neutron/conf/policies/metering.py | 13 +- neutron/conf/policies/ndp_proxy.py | 9 +- neutron/conf/policies/network.py | 97 ++- neutron/conf/policies/network_ip_availability.py | 3 +- neutron/conf/policies/network_segment_range.py | 48 +- neutron/conf/policies/port.py | 326 ++++---- neutron/conf/policies/port_bindings.py | 75 ++ neutron/conf/policies/qos.py | 77 +- neutron/conf/policies/quotas.py | 7 +- neutron/conf/policies/rbac.py | 21 +- neutron/conf/policies/router.py | 112 ++- neutron/conf/policies/security_group.py | 63 +- neutron/conf/policies/segment.py | 45 +- neutron/conf/policies/service_type.py | 5 +- neutron/conf/policies/subnet.py | 94 ++- neutron/conf/policies/subnetpool.py | 64 +- neutron/conf/policies/trunk.py | 51 +- neutron/conf/quota.py | 16 +- neutron/conf/service.py | 2 +- neutron/conf/services/extdns_designate_driver.py | 4 +- neutron/db/address_group_db.py | 1 + neutron/db/address_scope_db.py | 7 +- neutron/db/agents_db.py | 22 +- neutron/db/db_base_plugin_common.py | 11 +- neutron/db/db_base_plugin_v2.py | 170 +++- neutron/db/dvr_mac_db.py | 1 + neutron/db/external_net_db.py | 24 +- neutron/db/ipam_backend_mixin.py | 2 +- neutron/db/l3_agentschedulers_db.py | 4 +- neutron/db/l3_attrs_db.py | 10 +- neutron/db/l3_db.py | 102 ++- neutron/db/l3_dvr_db.py | 26 +- neutron/db/l3_dvrscheduler_db.py | 2 +- neutron/db/l3_extra_gws_db.py | 577 ++++++++++++++ neutron/db/l3_hamode_db.py | 89 ++- neutron/db/migration/__init__.py | 6 +- ...53938cdc1_update_segment_networks_constraint.py | 3 + .../0aefee21cd87_remove_dedundant_indexes.py | 65 ++ ...19773d7_create_l3harouternetwork_project_id_.py | 40 + .../2023.2/expand/6f1145bff34c_port_hints.py | 45 ++ .../expand/89c58a70ceba_ecmp_bfd_attributes.py | 39 + .../93f394357a27_remove_in_use_on_subnets.py | 42 + .../b1199a3adbef_de_duplicate_indices_for_ports.py | 54 ++ .../c33da356b165_security_group_default_rules.py | 130 ++++ .../alembic_migrations/versions/EXPAND_HEAD | 2 +- .../liberty/expand/45f955889773_quota_usage.py | 2 +- .../2b4c2465d44b_dvr_sheduling_refactoring.py | 29 +- .../mitaka/contract/4ffceebfcdc_standard_desc.py | 11 +- .../8a6d8bdae39_migrate_neutron_resources_table.py | 23 +- ...tributes_to_support_external_dns_integration.py | 15 +- ...86_add_binding_index_to_routerl3agentbinding.py | 19 +- .../7bbb25278f53_device_owner_ha_replicate_int.py | 21 +- .../7d9d8eeec6ad_rename_tenant_to_project.py | 2 +- .../8fd3918ef6f4_add_segment_host_mapping.py | 5 +- .../newton/contract/97c25b0d2353_add_name_desc.py | 25 +- .../a84ccf28f06a_migrate_dns_name_from_port.py | 21 +- .../a8b517cff8ab_add_routerport_bindings_for_ha.py | 29 +- ...12a3ef66e62_add_standardattr_to_qos_policies.py | 27 +- .../62c781cb6192_add_qos_policies_default_table.py | 1 - .../804a3c76314c_add_data_plane_status_to_port.py | 2 +- ...2437bf41_add_propagate_uplink_status_to_port.py | 2 +- ...454a9655_add_dns_publish_fixed_ip_to_subnets.py | 3 +- .../expand/86274d77933e_change_mtu_to_not_null.py | 11 +- .../Ibac91d24da2_port_forwarding_description.py | 19 +- .../expand/c3e9d13c4367_add_binding_index_to_.py | 17 +- .../fd6107509ccd_ovn_distributed_device_owner.py | 9 +- ...766_add_standard_attributes_to_address_group.py | 21 +- ...8d6f371_rbac_target_tenant_to_target_project.py | 2 +- .../expand/ba859d649675_add_indexes_to_rbacs.py | 26 +- .../I43e0b669096_port_forwarding_port_ranges.py | 27 +- neutron/db/migration/cli.py | 5 +- neutron/db/models/address_group.py | 2 +- neutron/db/models/address_scope.py | 2 +- neutron/db/models/data_plane_status.py | 2 +- neutron/db/models/dns.py | 12 +- neutron/db/models/l3_attrs.py | 6 + neutron/db/models/l3ha.py | 5 + neutron/db/models/port_hints.py | 35 + neutron/db/models/securitygroup.py | 8 +- neutron/db/models/securitygroup_default_rules.py | 47 ++ neutron/db/models/segment.py | 2 - neutron/db/models/uplink_status_propagation.py | 2 +- neutron/db/models_v2.py | 60 +- neutron/db/ovn_hash_ring_db.py | 78 +- neutron/db/ovn_revision_numbers_db.py | 18 +- neutron/db/port_hints_db.py | 53 ++ neutron/db/qos/models.py | 4 +- neutron/db/quota/models.py | 4 +- neutron/db/securitygroups_db.py | 301 ++++++-- neutron/db/securitygroups_rpc_base.py | 37 +- neutron/debug/README | 38 - neutron/debug/commands.py | 130 ---- neutron/debug/debug_agent.py | 176 ----- neutron/debug/shell.py | 92 --- neutron/exceptions/mtu.py | 28 + neutron/extensions/l3_extra_gws.py | 22 + neutron/extensions/network_ha.py | 21 + neutron/extensions/network_ip_availability.py | 6 +- neutron/extensions/port_hint_ovs_tx_steering.py | 21 + neutron/extensions/port_hints.py | 20 + .../extensions/security_groups_default_rules.py | 76 +- neutron/extensions/tagging.py | 119 ++- neutron/locale/de/LC_MESSAGES/neutron.po | 452 +---------- neutron/locale/es/LC_MESSAGES/neutron.po | 411 +--------- neutron/locale/fr/LC_MESSAGES/neutron.po | 415 +--------- neutron/locale/it/LC_MESSAGES/neutron.po | 409 +--------- neutron/locale/ja/LC_MESSAGES/neutron.po | 404 +--------- neutron/locale/ko_KR/LC_MESSAGES/neutron.po | 372 +-------- neutron/locale/pt_BR/LC_MESSAGES/neutron.po | 400 +--------- neutron/locale/ru/LC_MESSAGES/neutron.po | 401 +--------- neutron/locale/zh_CN/LC_MESSAGES/neutron.po | 348 +-------- neutron/locale/zh_TW/LC_MESSAGES/neutron.po | 352 +-------- neutron/objects/db/api.py | 18 +- neutron/objects/l3agent.py | 4 +- neutron/objects/port/extensions/port_hints.py | 53 ++ neutron/objects/port_forwarding.py | 13 +- neutron/objects/ports.py | 9 +- neutron/objects/router.py | 74 +- neutron/objects/securitygroup.py | 7 + neutron/objects/securitygroup_default_rules.py | 58 ++ neutron/objects/subnet.py | 19 + neutron/opts.py | 9 +- neutron/pecan_wsgi/hooks/policy_enforcement.py | 3 +- neutron/plugins/ml2/driver_context.py | 2 +- neutron/plugins/ml2/drivers/agent/_common_agent.py | 15 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 4 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 2 +- .../drivers/mech_sriov/agent/sriov_nic_agent.py | 42 +- .../agent/extension_drivers/qos_driver.py | 156 ++-- .../openvswitch/agent/openflow/native/br_int.py | 91 ++- .../openvswitch/agent/openflow/native/br_tun.py | 16 +- .../openvswitch/agent/ovs_agent_extension_api.py | 17 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 18 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 104 ++- .../plugins/ml2/drivers/ovn/agent/neutron_agent.py | 10 +- neutron/plugins/ml2/drivers/ovn/db_migration.py | 26 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 139 +++- .../ml2/drivers/ovn/mech_driver/ovsdb/api.py | 31 + .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 40 +- .../ovn/mech_driver/ovsdb/extensions/qos.py | 11 - .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 56 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 382 +++++++-- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 716 ++++++++++------- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 104 ++- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 174 +++-- .../ml2/extensions/port_hint_ovs_tx_steering.py | 35 + neutron/plugins/ml2/extensions/port_hints.py | 45 ++ neutron/plugins/ml2/plugin.py | 34 +- neutron/policy.py | 23 +- neutron/privileged/agent/linux/ip_lib.py | 32 +- neutron/profiling/profiled_decorator.py | 63 +- neutron/scheduler/l3_agent_scheduler.py | 17 +- neutron/scheduler/l3_ovn_scheduler.py | 23 +- neutron/server/__init__.py | 1 + neutron/service.py | 5 +- neutron/services/auto_allocate/db.py | 4 +- neutron/services/l3_router/l3_router_plugin.py | 5 +- neutron/services/logapi/common/db_api.py | 11 +- .../logapi/drivers/openvswitch/ovs_firewall_log.py | 2 +- neutron/services/logapi/drivers/ovn/driver.py | 86 +-- neutron/services/loki/loki_plugin.py | 4 +- neutron/services/network_ip_availability/plugin.py | 4 +- neutron/services/ovn_l3/plugin.py | 35 +- .../services/portforwarding/drivers/ovn/driver.py | 62 +- neutron/services/qos/qos_plugin.py | 8 +- neutron/services/revisions/revision_plugin.py | 6 +- neutron/services/segments/db.py | 37 +- neutron/services/tag/tag_plugin.py | 3 + .../trunk/drivers/openvswitch/agent/driver.py | 5 +- .../drivers/openvswitch/agent/ovsdb_handler.py | 7 +- .../drivers/openvswitch/agent/trunk_manager.py | 12 +- neutron/services/trunk/drivers/ovn/trunk_driver.py | 25 +- neutron/services/trunk/plugin.py | 7 +- .../agent/l3/test_keepalived_state_change.py | 2 +- .../functional/agent/l3/test_metadata_proxy.py | 173 ++++- .../functional/agent/linux/test_bridge_lib.py | 7 + .../functional/agent/linux/test_keepalived.py | 17 +- .../agent/ovn/agent/fake_ovn_agent_extension.py | 4 + .../agent/ovn/agent/test_ovn_neutron_agent.py | 10 +- .../agent/ovn/extensions/test_qos_hwol.py | 65 +- .../agent/ovn/metadata/test_metadata_agent.py | 230 +++--- .../debug => functional/common/ovn}/__init__.py | 0 .../test_ba859d649675_add_indexes_to_rbacs.py | 55 ++ .../test_c3e9d13c4367_add_binding_index_to_.py | 29 +- .../macvtap/agent/test_macvtap_neutron_agent.py | 25 +- .../ovn/mech_driver/ovsdb/extensions/test_qos.py | 202 ++++- .../drivers/ovn/mech_driver/ovsdb/test_impl_idl.py | 90 ++- .../ovn/mech_driver/ovsdb/test_maintenance.py | 225 +++++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 86 +++ .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 90 ++- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 244 +++++- .../drivers/ovn/mech_driver/test_mech_driver.py | 226 +++++- .../privileged/agent/linux/test_ip_lib.py | 78 +- .../privileged/agent/linux/test_tc_lib.py | 44 +- .../scheduler/test_l3_agent_scheduler.py | 6 + .../l3_router/test_l3_dvr_ha_router_plugin.py | 13 +- .../l3_router/test_l3_dvr_router_plugin.py | 78 +- .../services/logapi/drivers/ovn/test_driver.py | 9 +- .../functional/services/ovn_l3/test_plugin.py | 82 +- .../portforwarding/test_port_forwarding.py | 7 +- .../openvswitch/agent/test_trunk_manager.py | 8 + .../trunk/drivers/ovn/test_trunk_driver.py | 37 +- .../unit/agent/l2/extensions/metadata/__init__.py | 0 .../metadata/test_host_metadata_proxy.py | 109 +++ .../linux/openvswitch_firewall/test_firewall.py | 29 +- .../unit/agent/linux/test_external_process.py | 141 ++-- .../unit/agent/linux/test_iptables_firewall.py | 58 ++ .../unit/agent/linux/test_iptables_manager.py | 34 + .../rpc/agentnotifiers/test_dhcp_rpc_agent_api.py | 1 + .../api/rpc/handlers/test_securitygroups_rpc.py | 114 ++- .../unit/conf/policies/test_availability_zone.py | 6 - .../policies/test_default_security_group_rules.py | 133 ++++ .../policies/test_floatingip_port_forwarding.py | 347 +++++---- .../conf/policies/test_network_segment_range.py | 51 ++ .../unit/conf/policies/test_security_group.py | 110 ++- .../unit/extensions/test_availability_zone.py | 21 +- .../unit/extensions/test_data_plane_status.py | 12 +- .../unit/extensions/test_default_subnetpools.py | 8 +- .../test_expose_port_forwarding_in_fip.py | 22 +- .../extensions/test_floating_ip_port_forwarding.py | 31 +- .../unit/extensions/test_l3_conntrack_helper.py | 21 +- .../extensions/test_network_ip_availability.py | 86 ++- .../unit/extensions/test_network_segment_range.py | 36 +- .../test_security_groups_default_rules.py | 484 ++++++++++++ .../unit/extensions/test_subnet_service_types.py | 5 +- .../unit/extensions/test_subnetpool_prefix_ops.py | 4 +- .../objects/port/extensions/test_port_hints.py | 33 + .../objects/test_securitygroup_default_rules.py | 27 + .../ml2/drivers/agent/test__common_agent.py | 11 +- .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 68 +- .../mech_sriov/agent/test_sriov_nic_agent.py | 30 + .../agent/extension_drivers/test_qos_driver.py | 34 +- .../agent/openflow/native/test_br_int.py | 49 +- .../agent/openflow/native/test_br_tun.py | 33 +- .../agent/test_ovs_agent_extension_api.py | 8 + .../openvswitch/agent/test_ovs_neutron_agent.py | 122 +++ .../drivers/openvswitch/agent/test_ovs_tunnel.py | 9 +- .../drivers/ovn/mech_driver/ovsdb/test_commands.py | 24 +- .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 137 +++- .../ovn/mech_driver/ovsdb/test_maintenance.py | 439 +++++++++-- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 269 ++++--- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 57 +- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 132 +++- .../drivers/ovn/mech_driver/test_mech_driver.py | 854 +++++++++++++++------ .../plugins/ml2/drivers/ovn/test_db_migration.py | 32 +- .../ml2/extensions/test_dns_domain_keywords.py | 6 +- .../plugins/ml2/extensions/test_dns_integration.py | 4 +- .../test_tag_ports_during_bulk_creation.py | 22 +- .../unit/plugins/ml2/test_extension_driver_api.py | 16 +- .../unit/plugins/ml2/test_tracked_resources.py | 51 +- .../unit/privileged/agent/linux/test_ip_lib.py | 11 + .../unit/scheduler/test_l3_agent_scheduler.py | 44 +- .../unit/services/logapi/common/test_db_api.py | 7 + .../services/logapi/drivers/ovn/test_driver.py | 116 ++- .../unit/services/metering/test_metering_plugin.py | 211 +++-- .../portforwarding/drivers/ovn/test_driver.py | 80 +- .../services/revisions/test_revision_plugin.py | 13 +- plugin.spec | 2 +- ...ecurity-group-rules-added-94a9ac6cdd1c538e.yaml | 23 + ...te-support-for-Windows-OS-80e32ef7e5e05b44.yaml | 5 + ...d-distributed-FIPs-config-0b4e9a92255cf4a8.yaml | 13 + ...-require-centralized-FIPs-65864dfeb3edc9b1.yaml | 17 + ...d-gw-port-support-for-FIP-fb97b85f5928740b.yaml | 15 + ...dd-metadata-rate-limiting-bf0c17a31f86ee16.yaml | 8 + .../agent_down_time_max-af3b62763aaa2fe5.yaml | 6 + .../notes/bug-1953165-6e848ea2c0398f56.yaml | 16 + .../notes/bug-1986003-9bf5ca04f9304336.yaml | 10 + .../notes/bug-1999209-febf1fa3512556b3.yaml | 7 + .../notes/bug-2022914-edbf1ea3514596b8.yaml | 7 + ...85-trunk-parent-vlan-mode-9280ff2d45403bde.yaml | 8 + ...p-agent-ovn-metadata-port-33a654ccb9554c65.yaml | 9 + .../notes/dvr-external-mac-934409413e515eb2.yaml | 10 + ...ce-scope-and-new-defaults-1f82a9eb71125f5d.yaml | 25 + .../external-port-scheduling-a5419ac51d863087.yaml | 14 + ...deletion-router-interface-072a18373f920ed9.yaml | 6 + ...tworks_unique_per_project-4d02e963cfc8d546.yaml | 8 + ...e_neutron_server-db-check-82fc780ff9455446.yaml | 7 + .../notes/hash-ring-cleanup-1079d2375082cebe.yaml | 6 + ...ort-remote-address-groups-89da589aad3c01d3.yaml | 8 + .../notes/localnet-learn-fdb-22469280b49701fc.yaml | 23 + ...d_enabled_as_experimental-c9bfe343a0beb334.yaml | 7 + .../network_ha_extension-99578e7ee47f47db.yaml | 8 + ...owner-for-ovn-lb-hm-ports-f5a648c4d948c5c8.yaml | 9 + .../notes/new-my-ip-config-b8efeb05dd50cfd6.yaml | 9 + .../notes/new-my-ipv6-config-361b5dc824591fe5.yaml | 9 + ...ion-subnetpool-prefix-ops-9b2e4dbdcc174ede.yaml | 3 + ...uplink-status-propagation-4c232954f8b4f0ef.yaml | 7 + ...physnet-filter-agent-type-9e22942bed304807.yaml | 10 + ...eduler-only-on-gw-chassis-33c22c1f5f7a73d4.yaml | 12 + .../ovn-mcast_flood_reports-4eee20856ccfc7d7.yaml | 7 + ...vn-recreate-metadata-port-76e2c0e651267aa0.yaml | 11 + ...n-trunk-check-parent-port-eeca2eceaca9d158.yaml | 6 + ...ge-name-and-datapath-type-d2bd5b438118355f.yaml | 8 + ...tual-port-prevent-binding-50efba5521e8a28e.yaml | 10 + ...port-hint-ovs-tx-steering-277a411933ed372b.yaml | 13 + .../notes/port-hints-d465bb2fa144537c.yaml | 12 + ..._ipamallocation_leftovers-9d72cc5f616f51e4.yaml | 7 + ...sed_on_lsp_up_and_enabled-31c062fc7089f62a.yaml | 9 + .../notes/redirect-type-f29e89ca97357fe9.yaml | 24 + ...ve_duplicated_ovn_chassis-df12fb6233ea3d3e.yaml | 17 + .../remove_neutron_debug-262a139650d71183.yaml | 6 + .../resource-tags-policies-a2ffd52e57d7b4b8.yaml | 7 + ...ork_subnet_mtu_validation-c221f22efcfae927.yaml | 22 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 59 +- .../source/locale/ja/LC_MESSAGES/releasenotes.po | 4 +- requirements.txt | 8 +- roles/legacy_ebtables/tasks/main.yaml | 3 +- roles/nftables/tasks/main.yaml | 6 + setup.cfg | 5 +- tools/configure_for_func_testing.sh | 7 +- .../infrared/tripleo-ovn-migration/README.rst | 6 +- .../infrared/tripleo-ovn-migration/main.yml | 2 +- .../tripleo_environment/ovn_migration.sh | 4 +- .../playbooks/roles/recovery-backup/tasks/main.yml | 1 + tox.ini | 20 +- zuul.d/base.yaml | 98 +-- zuul.d/grenade.yaml | 27 +- zuul.d/job-templates.yaml | 106 +-- zuul.d/project.yaml | 11 +- zuul.d/rally.yaml | 14 +- zuul.d/tempest-multinode.yaml | 89 +-- zuul.d/tempest-singlenode.yaml | 275 +------ 575 files changed, 21057 insertions(+), 12947 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2b2d62fbb9..340d8b9d81 100644 --- a/requirements.txt +++ b/requirements.txt @@ -23 +23 @@ netifaces>=0.10.4 # MIT -neutron-lib>=3.4.0 # Apache-2.0 +neutron-lib>=3.8.1 # Apache-2.0 @@ -37 +37 @@ oslo.i18n>=3.20.0 # Apache-2.0 -oslo.log>=4.5.0 # Apache-2.0 +oslo.log>=5.3.0 # Apache-2.0 @@ -47 +47 @@ oslo.upgradecheck>=1.3.0 # Apache-2.0 -oslo.utils>=4.8.0 # Apache-2.0 +oslo.utils>=6.2.0 # Apache-2.0 @@ -53 +53 @@ ovs>=2.10.0 # Apache-2.0 -ovsdbapp>=1.16.0 # Apache-2.0 +ovsdbapp>=2.2.1 # Apache-2.0

1 0

osc-placement 4.4.0 (dalmatian)
by no-reply＠openstack.org 23 Jul '24

23 Jul '24

We are delighted to announce the release of: osc-placement 4.4.0: OpenStackClient plugin for the Placement service This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/osc-placement Download the package from: https://pypi.org/project/osc-placement Please report issues through: https://bugs.launchpad.net/placement-osc-plugin/+bugs For more details, please see below. Changes in osc-placement 4.3.0..4.4.0 ------------------------------------- 4089a85 Replace simplejson by built-in json b0f9676 Make python 3.12 functional job voting f9c6e8c Update testing of python versions d7fd6d0 reno: Update master for unmaintained/zed 7465708 Update master for stable/2024.1 87146b3 reno: Update master for unmaintained/xena 6171458 reno: Update master for unmaintained/wallaby 3756d27 reno: Update master for unmaintained/victoria 2ea53eb tox: Drop envdir fa4c7e3 add pyproject.toml to support pip 23.1 Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 18 ++++++++++++------ osc_placement/http.py | 2 +- pyproject.toml | 3 +++ releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- requirements.txt | 1 - setup.cfg | 2 +- tox.ini | 20 ++++++++++++-------- 14 files changed, 42 insertions(+), 23 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 9f29ac0..ef2b703 100644 --- a/requirements.txt +++ b/requirements.txt @@ -3 +2,0 @@ keystoneauth1>=3.3.0 # Apache-2.0 -simplejson>=3.16.0 # MIT

1 0

neutron 22.2.0 (antelope)
by no-reply＠openstack.org 23 Jul '24

23 Jul '24

We are psyched to announce the release of: neutron 22.2.0: OpenStack Networking This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 22.2.0 ^^^^^^ Prelude ******* The OVN changed support for NAT rules including a new column and auto- discovery logic to know about logical router gateway ports for NAT on a Logical Router. New Features ************ * A new OVN driver Northbound DB column has been added to allow configuring gateway port for NAT rule. If the OVN backend supports the *gateway_port* column in the Northbound DB NAT table, the gateway port uuid will be configured to any floating IP to prevent North/South traffic issues. Previously created FIP rules will be updated only once during the maintenance task to include the gateway_port reference (if OVN backend supports it). In case all FIP entries are already configured no maintenance action will be performed. * A new ovn-cms-options option called "enable-chassis-as-extport- host" is now recognized by ML2/OVN and is used to identify nodes that are eligible for scheduling OVN's external ports. This feature is backward compatible and if no nodes contain this new option the external ports will continue to be scheduled using the "enable- chassis-as-gw" option as before. This change also introduces a limit to the number of members for each HA Chassis Group to 5, matching the limit of gateway router port replicas. This is because OVN uses BFD to monitor the connectivity of each member and having an unlimited number of members could potentially put a lot of stress in OVN. * Remote address group support was added to the iptables-based firewall drivers (IptablesFirewallDriver and OVSHybridIptablesFirewallDriver), Previously it was only available in the OVSFirewallDriver. For more information, see bug 2058138 (https://bugs.launchpad.net/neutron/+bug/2058138) Known Issues ************ * The fix of bug 2048785 (https://bugs.launchpad.net/neutron/+bug/2048785) only fixes newly created trunk parent ports. If the fix of already existing trunks is needed, then either delete and re-create the affected trunks or set tpt ports' vlan_mode and tag manually: "ovs-vsctl set Port tpt-... vlan_mode=access tag=0" Upgrade Notes ************* * In ML2/OVN, any new router gateway port (OVN logical router port) will be scheduled only on those chassis configured as gateway. Any existing router gateway port will preserve the current chassis assignation. Bug Fixes ********* * The config option "agent_down_time" is now limited to a maximum value of *2147483*, as neutron-server will fail to start if it is configured higher. See bug 2028724 (https://bugs.launchpad.net/neutron/+bug/2028724) for more information. * [bug 2036423 (https://bugs.launchpad.net/neutron/+bug/2036423) Now it is not possible to delete a subnet gateway IP if that subnet has a router interface; the subnet gateway IP modification was already forbidden. * When synchronizing the OVN databases, either when running the migration command or during startup, the code responsible for synchronization will only clean up segment-to-host mappings for hosts with agent_type "OVN Controller agent". Before, the synchronization would clean up (delete) segment-to-host mappings for non-OVN hosts. Fixes bug: 2040172 (https://bugs.launchpad.net/neutron/+bug/2040172) * [bug 2045889 (https://bugs.launchpad.net/neutron/+bug/2045889) The ports bound to ML2/OVN now contain the OVS bridge name and datapath type in the VIF details dictionary. NOTE: in the ML2/OVS to ML2/OVN migration, the local host OVN bridge (integration bridge) per port is not known; "br-int" will be used by default (that value is rarely changed). * [bug 2036705 (https://bugs.launchpad.net/neutron/+bug/2036705) The Neutron "port.status" field ("ACTIVE", "DOWN") is now set based on the ML2/OVN Logical Switch Port "up" and "enabled" flags. The user can now set the "port.admin_state_up", that is replicated in the "lsp.enabled" flag, to enable or disable the port. If the port is disabled, the traffic is stopped and the "port.status" is set to "DOWN". Other Notes *********** * When the following configuration is enabled at the same time: * OVN L3 service plugin ("ovn-router") * Port forwarding service plugin ("port_forwarding") * "vlan" or "flat" network types configured in the ML2 configuration variable "tenant_network_types" * The OVN floating IP traffic is distributed ("enable_distributed_floating_ip" = "True") the Neutron server will report a warning during plugin initialization because this is an invalid configuration matrix. Floating IPs need to always be centralized in such a case. For more details see bug report (https://bugs.launchpad.net/neutron/+bug/2028846) * The new value for 'device_owner' for OVN loadbalancer health monitor ports (ovn-lb-hm:distributed) is now supported by Neutron, providing a LOCALPORT behavior to these ports. The responsibility to define these ports with the new value instead of the old one (network:distributed) is under the OVN-Octavia Provider driver, which will take care of database conversion for these ports. * Added extension "subnetpool-prefix-ops" to the ML2/OVN mechanism driver. Changes in neutron 22.1.0..22.2.0 --------------------------------- 27eee0b9e8 Checking pci_slot to avoid changing staus to BUILD forever 603f388ae9 [FT] Add a timeout for the NB/SB connection stop method 182b5acbdf Add the port "fixed_ips" information in the DHCP RPC 46dbdcf3f2 Change to use selectin for RBACs in SubnetPool DB load strategy 14dca0116e Return empty BpInfo if missing binding:profile d32fa358c5 Increase timeout in test_get_all_devices() 65be5a940b Add debug information to ``MacvtapAgentTestCase.test_get_all_devices`` 9de68a7408 Cleanup before executing "test_get_all_devices" 498eaa16a0 [2023.1 Only][OVN] Add the bridge name and datapath type to the port VIF details 0fb74dbbe1 [OVN] Sanitize the classless-static-route DHCP option 114f68fa59 [FT] Run test_periodic_sync_routers_task tests serially 1045985c76 Add a default goto table=94 for openvswitch fw 27869542aa [OVN] Bump revision number after update_virtual_port_host cbcfa692fc [OVN] Fix virtual parent match for PortBindingUpdateVirtualPortsEvent ebd52b0df3 [OVN] Update lsp host id when virtual parent moves 4f5c023279 Revert "Use HasStandardAttributes as parent class for Tags DB model" 961a7a304c [ML2/OVN] Add gateway_port support for FIP cd92d42cfa [stable only] Fix KeyError in set_gateway_mtu fde31034ae [functional tests] compatibility with ovsdbapp>=2.2.2 da8f6ef4dd [stable only] Do not fail on missing logical router ports 75eefdbc69 Return both project_id when validating auto allocate network c190408171 [stable/2023.1 only] Fix missing test fix for ext gw 0fe6b7cec0 Don't update revision number if object was not modified 2ec0ef0909 Fix KeyError failure in _sync_subnet_dhcp_options() 872c6ad2cd Enhance IptablesFirewallDriver with remote address groups 0a421118f2 [OVN] The L3 scheduler does not use all chassis by default 9bb37523a5 [stable/2023.1 only] Fix incorrect cherry-pick for ext gw a8bf8cdaa6 Fix TestOVNMechanismDriver ipv6 tests 10af328885 Use the system-dependent string for IP protocol 4 d17b1a6abb Fix iptables mapping of 'ipip' protocol 5ffec5d17a [OVN] Set MTU of the VETH interfaces between OVS and metadata 0673a9bb23 [stable-only][OVN] Set VETH interface MAC address before up 0dfe8dedd6 Ensure that haproxy spawned by the metadata agents is active b34911a6c9 [OVN] A LRP in an external tunnelled network has no chassis 1d2a1c68c0 Retry ``set|get_link_attribute(s)`` if the interface is not present 475a25259f [Docs] Add info about incompatible PF configuration in ML2/OVN gaps bd6595ddb8 Log warning about port forwardings that won't work properly c40f637bde [OVN] Warn about invalid OVN and FIP PF config during start of Neutron 45acc0c53b Disallow subnet cidr of :: without PD c019a42086 [OVN] Add ``subnetpool-prefix-ops`` extension to ML2/OVN mech driver 331f6ae240 Unmaintained-Only: change stable/yoga to unmaintained 3dec91ec58 Change SG rules backref load method to "joined" 68542c04a1 [OVN] Use elevated context to retrieve subnet in router port configuration fd0eabcf36 dhcp: fix usage of helper function to retrieve process name 2f678b980c [OVN][FT] Retry in case of timeout when executing "ovsdb-client". f8628b5c04 [Fullstack] Consolidate segmentation_id update tests into single test e5c743b820 [Fullstack] Remove SecurityGroupRulesTest.test_normalized_cidr_in_rule test 37367c1092 [Fullstack] Remove test_port_shut_down module 1226d6adcd [Fullstack] Remove unnecessary tests 17d15db7f4 Set trunk parent port as access port in ovs to avoid loop 09c1c61677 Make get_ports RPC method common for the DHCP and Metadata agent 20ba447787 Make ``OVNMechanismDriver.post_fork_initialize`` callback cancellable 3eddcd970d If method ``set_netns`` fails, restore previous device namespace 643dbbbf6b [OVN] OVN agent extensions correctly consume agent API a991b097c1 [OVN] Retrieve the OVN agent extensions correctly 5ff38217c7 Mark "test_port_creation_and_deletion" as unstable a72b44a3a9 Forbid the subnet gateway IP deletion if a router interface is attached bd1927028e Register Chassis_Private table in BaseOvnSbIdl c5e70ad716 Add sleep before checking if ovs port is in the namespace 69c49c4ef2 fix netns deletion of broken namespaces 94cf7a4c28 Add max limit to agent_down_time 696b2f4d4b Increase port name size and type to internal b992d639b9 Handle creation of Port_Binding with chassis set 63c16672a5 Metadata: handle process exceptions 11b977ca39 [UT] OVN fake resources factory method should return instance 29d5570ab3 Improve the SG RPC callback ``security_group_info_for_ports`` 1d7d489b3a [ovn][ipv6] Add some more tests to skiplist a7cff2d286 [ovn][ipv6] Skip test_update_router_admin_state 0aeb703db7 Make unit tests compatible with neutron-lib 3.4.2 b9ffa5aa13 [OVN] Add update event to ``OVSInterfaceEvent`` class 7c7a99acb8 Remove obsolete PID files before start 6205158831 ovn-metadata: Refactor events 8f0ac0a201 Update the External Ports documentation 1dbe4248bb Enhanced external port scheduling d69d8688b8 Reintroduce agent bridge resync test c4b322597b [OVN][FT] Make explicit the "publish" call check in "test_port_forwarding" cc642431f0 Fix the common/ovn functional tests 8c26736027 Improve "sync_ha_chassis_group" method 877e85e5a8 [OVN] DB sync host/physnet - filter on agent_type f2ec3a6cec Correctly validate subnet arguments when using a subnetpool a28ec9ed3c [Fullstack] Double check that agent is dead when it should be dead fd06c73665 For hosts in DVR mode, only fetch bound FIPs ae90f380a8 [DHCP agent] Fetch OVN Metadata port from plugin d235f65516 get_hosts_mapped_with_segments add filter agt_type f81549c0e5 [DHCP agent] Fix route to OVN metadata port for non-isolated networks de0755232f Add constant to identify OVN LB HM ports 458915e56f docs: update default value of metadata workers for ml2/ovn 87f7b9a46c Catch non-existent entry failures better in ip_lib ba8335375a Don't set port capabilities for OVS HW offloading 37bdb9e7d5 Add scope ID to the "GROUP BY" clause in ``get_scoped_floating_ips`` f96691b208 Remove duplicate rows in MySQL query output 1514fbe1f8 [OVN] Set the Neutron port status based on "lsp.up" and "lsp.enabled" 0de8e70d29 [OVN] Add a log message after the "post_fork_initialize" method Diffstat (except docs and test files) ------------------------------------- .../contributor/internals/openvswitch_agent.rst | 34 +- .../contributor/internals/openvswitch_firewall.rst | 13 + neutron/agent/common/base_agent_rpc.py | 33 ++ neutron/agent/dhcp/agent.py | 12 +- neutron/agent/linux/dhcp.py | 19 +- neutron/agent/linux/external_process.py | 30 +- neutron/agent/linux/interface.py | 7 +- neutron/agent/linux/ip_lib.py | 39 +- neutron/agent/linux/iptables_firewall.py | 20 +- neutron/agent/linux/keepalived.py | 12 - .../agent/linux/openvswitch_firewall/firewall.py | 24 ++ neutron/agent/metadata/agent.py | 12 +- neutron/agent/metadata/driver.py | 11 +- neutron/agent/ovn/agent/ovn_neutron_agent.py | 6 +- neutron/agent/ovn/extensions/extension_manager.py | 7 +- neutron/agent/ovn/extensions/noop.py | 4 + neutron/agent/ovn/extensions/qos_hwol.py | 29 +- neutron/agent/ovn/metadata/agent.py | 228 ++++++---- neutron/agent/ovn/metadata/driver.py | 8 +- .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 1 + neutron/api/rpc/handlers/securitygroups_rpc.py | 10 +- neutron/cmd/upgrade_checks/checks.py | 31 ++ neutron/common/_constants.py | 3 + neutron/common/ovn/constants.py | 19 + neutron/common/ovn/exceptions.py | 7 + neutron/common/ovn/extensions.py | 2 + neutron/common/ovn/utils.py | 271 +++++++++++- neutron/conf/agent/database/agents_db.py | 5 + neutron/conf/agent/metadata/config.py | 2 +- neutron/conf/plugins/ml2/drivers/ovs_conf.py | 6 +- neutron/db/db_base_plugin_v2.py | 78 ++-- neutron/db/l3_db.py | 9 +- neutron/db/l3_dvr_db.py | 11 +- neutron/db/models/securitygroup.py | 6 +- neutron/db/models/tag.py | 2 +- neutron/db/models_v2.py | 2 +- neutron/db/securitygroups_rpc_base.py | 25 +- neutron/objects/router.py | 40 +- neutron/objects/securitygroup.py | 7 + .../drivers/mech_sriov/agent/sriov_nic_agent.py | 42 +- .../openvswitch/agent/openflow/native/br_int.py | 2 +- neutron/plugins/ml2/drivers/ovn/db_migration.py | 26 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 62 ++- .../ml2/drivers/ovn/mech_driver/ovsdb/api.py | 22 + .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 24 ++ .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 34 +- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 97 ++++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 241 ++++++----- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 19 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 106 +++-- neutron/privileged/agent/linux/ip_lib.py | 32 +- neutron/scheduler/l3_ovn_scheduler.py | 23 +- neutron/services/auto_allocate/db.py | 4 +- neutron/services/ovn_l3/plugin.py | 2 +- .../services/portforwarding/drivers/ovn/driver.py | 62 ++- neutron/services/revisions/revision_plugin.py | 6 +- neutron/services/segments/db.py | 37 +- .../drivers/openvswitch/agent/trunk_manager.py | 12 +- .../functional/agent/linux/test_bridge_lib.py | 7 + .../agent/ovn/agent/fake_ovn_agent_extension.py | 4 + .../agent/ovn/agent/test_ovn_neutron_agent.py | 10 +- .../agent/ovn/extensions/test_qos_hwol.py | 65 +-- .../agent/ovn/metadata/test_metadata_agent.py | 220 +++++----- .../macvtap/agent/test_macvtap_neutron_agent.py | 25 +- .../drivers/ovn/mech_driver/ovsdb/test_impl_idl.py | 90 +++- .../ovn/mech_driver/ovsdb/test_maintenance.py | 92 +++- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 50 +++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 128 +++++- .../drivers/ovn/mech_driver/test_mech_driver.py | 134 +++++- .../privileged/agent/linux/test_ip_lib.py | 78 ++-- .../functional/services/ovn_l3/test_plugin.py | 42 +- .../openvswitch/agent/test_trunk_manager.py | 8 + .../linux/openvswitch_firewall/test_firewall.py | 7 +- .../unit/agent/linux/test_external_process.py | 34 +- .../unit/agent/linux/test_iptables_firewall.py | 58 +++ .../rpc/agentnotifiers/test_dhcp_rpc_agent_api.py | 1 + .../mech_sriov/agent/test_sriov_nic_agent.py | 30 ++ .../agent/openflow/native/test_br_int.py | 2 +- .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 52 ++- .../ovn/mech_driver/ovsdb/test_maintenance.py | 155 ++++++- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 15 +- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 115 ++++- .../drivers/ovn/mech_driver/test_mech_driver.py | 480 +++++++++++++++------ .../plugins/ml2/drivers/ovn/test_db_migration.py | 26 +- .../unit/privileged/agent/linux/test_ip_lib.py | 11 + .../portforwarding/drivers/ovn/test_driver.py | 80 +++- .../services/revisions/test_revision_plugin.py | 5 +- ...-require-centralized-FIPs-65864dfeb3edc9b1.yaml | 17 + ...d-gw-port-support-for-FIP-fb97b85f5928740b.yaml | 15 + .../agent_down_time_max-af3b62763aaa2fe5.yaml | 6 + ...85-trunk-parent-vlan-mode-9280ff2d45403bde.yaml | 8 + .../external-port-scheduling-a5419ac51d863087.yaml | 14 + ...deletion-router-interface-072a18373f920ed9.yaml | 6 + ...ort-remote-address-groups-89da589aad3c01d3.yaml | 8 + ...owner-for-ovn-lb-hm-ports-f5a648c4d948c5c8.yaml | 9 + ...ion-subnetpool-prefix-ops-9b2e4dbdcc174ede.yaml | 3 + ...physnet-filter-agent-type-9e22942bed304807.yaml | 10 + ...eduler-only-on-gw-chassis-33c22c1f5f7a73d4.yaml | 6 + ...ge-name-and-datapath-type-d2bd5b438118355f.yaml | 8 + ...sed_on_lsp_up_and_enabled-31c062fc7089f62a.yaml | 9 + requirements.txt | 4 +- tox.ini | 4 +- zuul.d/grenade.yaml | 4 +- zuul.d/tempest-singlenode.yaml | 5 +- 146 files changed, 4350 insertions(+), 1820 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2b2d62fbb9..58531dea3c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -23 +23 @@ netifaces>=0.10.4 # MIT -neutron-lib>=3.4.0 # Apache-2.0 +neutron-lib>=3.4.2 # Apache-2.0 @@ -53 +53 @@ ovs>=2.10.0 # Apache-2.0 -ovsdbapp>=1.16.0 # Apache-2.0 +ovsdbapp>=2.2.1 # Apache-2.0

1 0

oslo.log 6.1.1 (dalmatian)
by no-reply＠openstack.org 19 Jul '24

19 Jul '24

We are stoked to announce the release of: oslo.log 6.1.1: oslo.log library This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/oslo.log Download the package from: https://pypi.org/project/oslo.log Please report issues through: https://bugs.launchpad.net/oslo.log/+bugs For more details, please see below. Changes in oslo.log 6.1.0..6.1.1 -------------------------------- f1dde6e Revert "Remove the usage of the Eventlet debug feature from oslo.log." Diffstat (except docs and test files) ------------------------------------- oslo_log/pipe_mutex.py | 15 +++++++++++++++ ...b_prevent_multiple_readers-usage-b23cea69a05cd6d4.yaml | 14 -------------- 3 files changed, 25 insertions(+), 18 deletions(-)

1 0

oslo.messaging 14.2.5 (antelope)
by no-reply＠openstack.org 19 Jul '24

19 Jul '24

We joyfully announce the release of: oslo.messaging 14.2.5: Oslo Messaging API This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.2.5 ^^^^^^ Bug Fixes * Force queue deletion when it is not possible de redeclare a queue. See bug 2068630 for details. Changes in oslo.messaging 14.2.4..14.2.5 ---------------------------------------- 86bf53a1 Handle NotFound exception when declaring a queue da1706e6 kafka: Fix invalid hostaddr format for IPv6 address Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_kafka.py | 7 ++++++- oslo_messaging/_drivers/impl_rabbit.py | 23 ++++++++++++++++++++++ .../notes/bug-2068630-6ff92f213bc4eca0.yaml | 6 ++++++ 4 files changed, 45 insertions(+), 1 deletion(-)

1 0

taskflow 5.9.0 (dalmatian)
by no-reply＠openstack.org 19 Jul '24

19 Jul '24

We are chuffed to announce the release of: taskflow 5.9.0: Taskflow structured state management library. This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/taskflow Download the package from: https://pypi.org/project/taskflow Please report issues through: https://bugs.launchpad.net/taskflow/+bugs For more details, please see below. 5.9.0 ^^^^^ New Features * Added an Etcd-based backend for jobboard. This backend is similar to the Redis backend, it requires that the consumer extends the expiry of the job that is being running. Changes in taskflow 5.8.0..5.9.0 -------------------------------- fc14510a Follow-up of "Add Etcd backend for jobboard" c62d95d4 Add functional test with etcd f0fd57a8 Add Etcd backend for jobboard Diffstat (except docs and test files) ------------------------------------- .gitignore | 4 + .zuul.yaml | 10 + .../etcd-jobboard-backend-8a9fea2238fb0f12.yaml | 6 + setup-etcd-env.sh | 31 ++ setup.cfg | 3 + taskflow/jobs/backends/impl_etcd.py | 610 +++++++++++++++++++++ test-requirements.txt | 3 + tox.ini | 3 +- 13 files changed, 1143 insertions(+), 1 deletion(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index aeb3776d..743880ed 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11,0 +12,3 @@ redis>=4.0.0 # MIT +# etcd3gw +etcd3gw>=2.0.0 # Apache-2.0 +

1 0

oslo.messaging 14.4.2 (bobcat)
by no-reply＠openstack.org 19 Jul '24

19 Jul '24

We are jazzed to announce the release of: oslo.messaging 14.4.2: Oslo Messaging API This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.4.2 ^^^^^^ Bug Fixes * Auto-delete the failed quorum rabbit queues. When rabbit is failing for a specific quorum queue, delete the queue before trying to recreate it. This may happen if the queue is not recoverable on rabbit side. See https://www.rabbitmq.com/quorum- queues.html#availability for more info on this specific case. * Force queue deletion when it is not possible de redeclare a queue. See bug 2068630 for details. Changes in oslo.messaging 14.4.1..14.4.2 ---------------------------------------- 9c36c270 Handle NotFound exception when declaring a queue 8be07d3a kafka: Fix invalid hostaddr format for IPv6 address 34260a40 Auto-delete the failed quorum rabbit queues Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_kafka.py | 7 ++- oslo_messaging/_drivers/impl_rabbit.py | 57 ++++++++++++++++++++-- ...uto-deleted-failed-quorum-ca6a3923c3ed999a.yaml | 9 ++++ .../notes/bug-2068630-6ff92f213bc4eca0.yaml | 6 +++ 5 files changed, 84 insertions(+), 5 deletions(-)

1 0

oslo.messaging 14.7.1 (caracal)
by no-reply＠openstack.org 19 Jul '24

19 Jul '24

We are excited to announce the release of: oslo.messaging 14.7.1: Oslo Messaging API This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.7.1 ^^^^^^ Bug Fixes * Force queue deletion when it is not possible de redeclare a queue. See bug 2068630 for details. Changes in oslo.messaging 14.7.0..14.7.1 ---------------------------------------- 58124491 Handle NotFound exception when declaring a queue e0929a35 Fix incorrect desc of rabbit_stream_fanout option 5cb7cbfc kafka: Fix invalid hostaddr format for IPv6 address 95b8e0ff Update TOX_CONSTRAINTS_FILE for stable/2024.1 bc91d26f Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + oslo_messaging/_drivers/impl_kafka.py | 7 ++++- oslo_messaging/_drivers/impl_rabbit.py | 33 ++++++++++++++++++---- .../notes/bug-2068630-6ff92f213bc4eca0.yaml | 6 ++++ tox.ini | 6 ++-- 6 files changed, 54 insertions(+), 9 deletions(-)

1 0

openstacksdk 3.3.0 (dalmatian)
by no-reply＠openstack.org 16 Jul '24

16 Jul '24

We are tickled pink to announce the release of: openstacksdk 3.3.0: An SDK for building applications to work with OpenStack This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 3.3.0 ^^^^^ New Features * Adds support for querying a bare-metal node's firmware as per functionality introduced in API 1.86. Changes in openstacksdk 3.1.0..3.3.0 ------------------------------------ 9145dcec compute, volume: Improve 'update_quota_set' d40d6a2e compute: Correct base path for default, detailed quotas 7040c81d Use mypy syntax compatible with older pythons. 8cfb60ec Combine 3 auto_allocated_topology tests into one test 3ee18eb1 Run auto_allocated_topology functional tests in the own project c6281c5b baremetal: Adds list node firmware support d84ef4f9 tests: Rework warnings-related tests 4275dfc5 compute, block storage: Add support for quota class sets 0f311ff3 compute: Add additional server create parameters dbf5c975 compute: Add additional options to Server.rebuild 0bd02b3a compute: Add support for legacy 'onSharedStorage' param 6d98de4f compute: Add server tag proxy methods 67cd6668 compute: Add Server.clear_password action 916f9af6 compute, block storage: Minor fixes to limits 850c99cf [func test] Fix race between attachment delete and server delete 8091075e Remove retired project Senlin job 2b6b32fa baremetal: Decode 'config_drive' argument to 'set_provision_state' 00ed7a5e Identity: Add support for inherited_to for role_assignments 46af31f6 Add support for federation service providers ba975949 docs: Add missing identity v3 proxy API docs 30d5753b reno: Update master for unmaintained/zed fc539d10 pre-commit: Add pyupgrade hook 8b02b045 trivial: Prepare for pyupgrade pre-commit hook 93e2976c tox: Don't install package in pep8 113e4125 Fix AttributeError in delete_limit method a8adbadf cloud: Do not reference other cloud mixin's methods 763e09a4 cloud: Trivial fixes f90fd9a3 cloud: Remove use of OpenStackCloudCreateException 5de45a32 hacking: Add check for deprecated exception types 81d60c78 README: Add guide on raw HTTP layer e67a7b14 pre-commit: Bump versions 761d558e Allow filtering BGPVPNs 4b9a3e91 Extend project cleanup e409254e image: Pass correct stores argument f73335df Add quota class set to shared file system fab08bab Add Binero public cloud to vendor 1610e2da Fix multiple image_id query mappings 7131781a Remove mypy union line which breaks older pythons. 67c1fb82 Adding SDK support for ``glance md-namespace-objects-delete`` 111d72d5 Add Binero public cloud to vendor support 52b86348 volume: Allow passing a volume type object to retype_volume 644087b2 volume: Add ability to set, unset image metadata 52c5d745 volume: Allow setting volume statuses individually be669963 Add Tap Mirrors to SDK 8b84bf0e image: make sure the target for "clear_cache" is valid 16ddc1ca Fixed update_metadef_object e7bdb02f Allow project switching for Designate API 8567c858 Allow tags to be passed through to compute.create_server Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 11 +- README.rst | 113 +++++- .../user/resources/block_storage/v2/limits.rst | 6 +- .../user/resources/block_storage/v3/limits.rst | 8 +- .../user/resources/network/v2/tap_mirror.rst | 12 + .../user/resources/shared_file_system/index.rst | 1 + .../shared_file_system/v2/quota_class_set.rst | 13 + examples/connect.py | 2 +- openstack/{_hacking.py => _hacking/checks.py} | 24 +- openstack/accelerator/v2/accelerator_request.py | 8 +- openstack/accelerator/v2/device_profile.py | 8 +- openstack/baremetal/v1/_common.py | 3 + openstack/baremetal/v1/_proxy.py | 10 + openstack/baremetal/v1/driver.py | 2 +- openstack/baremetal/v1/node.py | 63 +++- .../baremetal_introspection/v1/introspection.py | 2 +- openstack/block_storage/_base_proxy.py | 2 +- openstack/block_storage/v2/_proxy.py | 121 +++++- openstack/block_storage/v2/limits.py | 6 +- openstack/block_storage/v2/quota_class_set.py | 39 ++ openstack/block_storage/v2/volume.py | 37 +- openstack/block_storage/v3/_proxy.py | 127 +++++-- openstack/block_storage/v3/limits.py | 14 +- openstack/block_storage/v3/quota_class_set.py | 39 ++ openstack/block_storage/v3/service.py | 2 +- openstack/block_storage/v3/type.py | 2 +- openstack/block_storage/v3/volume.py | 36 +- openstack/cloud/_baremetal.py | 6 +- openstack/cloud/_block_storage.py | 20 +- openstack/cloud/_compute.py | 135 ++++--- openstack/cloud/_dns.py | 4 +- openstack/cloud/_floating_ip.py | 141 ++++--- openstack/cloud/_identity.py | 61 +-- openstack/cloud/_image.py | 9 +- openstack/cloud/_network.py | 27 +- openstack/cloud/_network_common.py | 82 +++-- openstack/cloud/_object_store.py | 5 +- openstack/cloud/_security_group.py | 47 ++- openstack/cloud/_utils.py | 4 +- openstack/cloud/exc.py | 20 +- openstack/cloud/meta.py | 12 +- openstack/cloud/openstackcloud.py | 12 +- openstack/common/quota_set.py | 2 +- openstack/common/tag.py | 3 +- openstack/compute/v2/_proxy.py | 176 ++++++++- openstack/compute/v2/flavor.py | 2 +- openstack/compute/v2/keypair.py | 2 +- openstack/compute/v2/limits.py | 35 +- openstack/compute/v2/quota_class_set.py | 61 +++ openstack/compute/v2/quota_set.py | 1 + openstack/compute/v2/server.py | 104 ++++-- openstack/compute/v2/server_remote_console.py | 2 +- openstack/compute/v2/service.py | 4 +- openstack/config/cloud_config.py | 2 +- openstack/config/cloud_region.py | 6 +- openstack/config/defaults.py | 2 +- openstack/config/loader.py | 26 +- openstack/config/vendors/__init__.py | 4 +- openstack/config/vendors/binero.json | 13 + openstack/connection.py | 6 +- openstack/dns/v2/_base.py | 22 +- openstack/dns/v2/_proxy.py | 2 +- openstack/exceptions.py | 14 +- openstack/fixture/connection.py | 2 +- openstack/identity/v3/_proxy.py | 409 +++++++++++++-------- openstack/identity/v3/role_assignment.py | 3 +- openstack/identity/v3/service_provider.py | 48 +++ openstack/image/_download.py | 5 +- openstack/image/v1/_proxy.py | 10 +- openstack/image/v1/image.py | 2 +- openstack/image/v2/_proxy.py | 60 ++- openstack/image/v2/cache.py | 6 +- openstack/image/v2/image.py | 6 +- openstack/image/v2/metadef_namespace.py | 10 + openstack/load_balancer/v2/amphora.py | 10 +- openstack/load_balancer/v2/load_balancer.py | 4 +- openstack/load_balancer/v2/quota.py | 2 +- openstack/message/v2/claim.py | 2 +- openstack/network/v2/_base.py | 2 +- openstack/network/v2/_proxy.py | 106 ++++++ openstack/network/v2/bgpvpn.py | 13 + openstack/network/v2/quota.py | 4 +- openstack/network/v2/security_group_rule.py | 4 +- openstack/network/v2/tap_mirror.py | 54 +++ openstack/object_store/v1/_base.py | 2 +- openstack/object_store/v1/_proxy.py | 17 +- openstack/orchestration/util/event_utils.py | 6 +- openstack/orchestration/util/template_format.py | 4 +- openstack/orchestration/v1/_proxy.py | 2 +- openstack/orchestration/v1/software_config.py | 4 +- openstack/orchestration/v1/software_deployment.py | 8 +- openstack/orchestration/v1/stack.py | 24 +- openstack/proxy.py | 21 +- openstack/resource.py | 44 ++- openstack/shared_file_system/v2/_proxy.py | 37 +- openstack/shared_file_system/v2/quota_class_set.py | 57 +++ openstack/test/fakes.py | 4 +- .../baremetal/test_baremetal_allocation.py | 2 +- .../baremetal/test_baremetal_deploy_templates.py | 2 +- .../functional/baremetal/test_baremetal_node.py | 14 +- .../functional/baremetal/test_baremetal_port.py | 2 +- .../baremetal/test_baremetal_port_group.py | 2 +- .../baremetal/test_baremetal_volume_connector.py | 2 +- .../baremetal/test_baremetal_volume_target.py | 2 +- .../functional/block_storage/v2/test_backup.py | 4 +- .../functional/block_storage/v2/test_snapshot.py | 4 +- .../functional/block_storage/v2/test_stats.py | 2 +- .../functional/block_storage/v2/test_volume.py | 4 +- .../functional/block_storage/v3/test_backup.py | 4 +- .../functional/block_storage/v3/test_snapshot.py | 4 +- .../functional/cloud/test_cluster_templates.py | 2 +- .../functional/cloud/test_floating_ip_pool.py | 2 +- .../cloud/test_qos_bandwidth_limit_rule.py | 2 +- .../functional/cloud/test_qos_dscp_marking_rule.py | 2 +- .../cloud/test_qos_minimum_bandwidth_rule.py | 2 +- .../compute/v2/test_volume_attachment.py | 14 + .../identity/v3/test_application_credential.py | 2 +- .../load_balancer/v2/test_load_balancer.py | 4 +- .../functional/network/v2/test_address_group.py | 4 +- .../functional/network/v2/test_address_scope.py | 4 +- .../network/v2/test_agent_add_remove_network.py | 2 +- .../network/v2/test_agent_add_remove_router.py | 2 +- .../network/v2/test_auto_allocated_topology.py | 78 +++- .../network/v2/test_default_security_group_rule.py | 2 +- .../functional/network/v2/test_firewall_group.py | 4 +- .../functional/network/v2/test_firewall_policy.py | 4 +- .../functional/network/v2/test_firewall_rule.py | 4 +- .../v2/test_firewall_rule_insert_remove_policy.py | 4 +- .../functional/network/v2/test_floating_ip.py | 4 +- .../network/v2/test_l3_conntrack_helper.py | 4 +- .../network/v2/test_local_ip_association.py | 4 +- .../network/v2/test_network_ip_availability.py | 4 +- .../network/v2/test_network_segment_range.py | 4 +- .../functional/network/v2/test_port_forwarding.py | 4 +- .../network/v2/test_qos_bandwidth_limit_rule.py | 4 +- .../network/v2/test_qos_dscp_marking_rule.py | 4 +- .../network/v2/test_qos_minimum_bandwidth_rule.py | 4 +- .../v2/test_qos_minimum_packet_rate_rule.py | 4 +- .../functional/network/v2/test_qos_rule_type.py | 2 +- .../functional/network/v2/test_rbac_policy.py | 4 +- .../network/v2/test_router_add_remove_interface.py | 4 +- .../functional/network/v2/test_security_group.py | 4 +- .../network/v2/test_security_group_rule.py | 4 +- .../functional/network/v2/test_service_profile.py | 4 +- .../network/v2/test_subnet_from_subnet_pool.py | 4 +- .../functional/network/v2/test_subnet_pool.py | 4 +- .../functional/object_store/v1/test_account.py | 4 +- .../functional/object_store/v1/test_container.py | 2 +- .../functional/orchestration/v1/test_stack.py | 4 +- .../shared_file_system/test_quota_class_set.py | 43 +++ .../shared_file_system/test_resource_lock.py | 2 +- .../functional/shared_file_system/test_share.py | 4 +- .../shared_file_system/test_share_access_rule.py | 4 +- .../shared_file_system/test_share_group.py | 2 +- .../test_share_group_snapshot.py | 4 +- .../shared_file_system/test_share_instance.py | 2 +- .../shared_file_system/test_share_network.py | 4 +- .../shared_file_system/test_share_snapshot.py | 4 +- .../test_share_snapshot_instance.py | 2 +- .../unit/accelerator/v2/test_device_profile.py | 4 +- .../unit/baremetal_introspection/v1/test_proxy.py | 10 +- .../unit/cloud/test_coe_clusters_certificate.py | 2 +- .../unit/cloud/test_create_volume_snapshot.py | 2 +- .../unit/cloud/test_delete_volume_snapshot.py | 2 +- .../unit/cloud/test_server_delete_metadata.py | 2 +- .../unit/clustering/v1/test_cluster_policy.py | 2 +- .../unit/compute/v2/test_server_remote_console.py | 2 +- .../unit/identity/v3/test_service_provider.py | 62 ++++ .../unit/orchestration/v1/test_stack_event.py | 2 +- .../unit/orchestration/v1/test_stack_files.py | 8 +- .../shared_file_system/v2/test_quota_class_set.py | 99 +++++ .../shared_file_system/v2/test_share_instance.py | 2 +- openstack/warnings.py | 24 ++ openstack/workflow/v2/cron_trigger.py | 4 +- ...-resource-list-by-project-8b5479a045ef7373.yaml | 6 + ...-service-provider-support-8c97cbb157883626.yaml | 4 + ...mespace-object-delete-all-6cea62cb038012df.yaml | 5 + ...ode-firmware-list-support-fec2f96a3a578730.yaml | 5 + ...et-to-shared-file-systems-43da33e6a3ed65e3.yaml | 4 + ...add-server-clear-password-256e269223453bd7.yaml | 5 + ...-server-tag-proxy-methods-c791a36d8d4d85f6.yaml | 8 + ...me-image-metadata-support-c61bcb918fdff529.yaml | 4 + .../bgpvpn-list-filters-e76183a7008c0631.yaml | 7 + ...nherited-role-assignments-8fe9ac9509d99f4d.yaml | 11 + .../network-add-tap-mirror-46376bd98ee69c81.yaml | 5 + releasenotes/source/conf.py | 1 - releasenotes/source/zed.rst | 2 +- tools/keystone_version.py | 8 +- tools/print-services.py | 10 +- tox.ini | 9 +- zuul.d/functional-jobs.yaml | 28 +- zuul.d/project.yaml | 2 - 409 files changed, 4569 insertions(+), 1931 deletions(-)

1 0

openstack-ansible 29.0.1 (caracal)
by no-reply＠openstack.org 16 Jul '24

16 Jul '24

We jubilantly announce the release of: openstack-ansible 29.0.1: Ansible playbooks for deploying OpenStack This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 29.0.1 ^^^^^^ Deprecation Notes ***************** * The variable "keystone_external_ssl" was deprecated and is no longer used. You still can control if communication between HAProxy and Keystone should be covered with TLS through "keystone_backend_ssl" or "haproxy_ssl"/"haproxy_ssl_all_vips" for communication between clients and HAProxy on frontend. Security Issues *************** * Includes safe (non-vulnerable) versions of services regarding OSSA-2024-001 (https://security.openstack.org/ossa/OSSA-2024-001.html) Changes in openstack-ansible 29.0.0..29.0.1 ------------------------------------------- 7985e7a62 Bump SHAs for 2024.1 (Caracal) 7f767c717 [doc] Override pdf filename for the deploy guide Diffstat (except docs and test files) ------------------------------------- ansible-collection-requirements.yml | 2 +- ansible-role-requirements.yml | 30 +++++++++++----------- deploy-guide/source/conf.py | 2 ++ inventory/group_vars/all/source_git.yml | 4 +-- inventory/group_vars/cinder_all/source_git.yml | 4 +-- inventory/group_vars/glance_all/source_git.yml | 4 +-- inventory/group_vars/ironic_all/source_git.yml | 6 ++--- inventory/group_vars/keystone_all/source_git.yml | 4 +-- inventory/group_vars/magnum_all/source_git.yml | 4 +-- inventory/group_vars/manila_all/source_git.yml | 4 +-- inventory/group_vars/neutron_all/source_git.yml | 10 ++++---- inventory/group_vars/nova_all/source_git.yml | 6 ++--- inventory/group_vars/octavia_all/source_git.yml | 4 +-- inventory/group_vars/skyline_all/source_git.yml | 4 +-- inventory/group_vars/swift_all/source_git.yml | 4 +-- .../notes/OSSA-2024-001-c9ce721cf2229af7.yaml | 5 ++++ ...tone_external_ssl-removal-5d972299f98dcc32.yaml | 8 ++++++ 17 files changed, 60 insertions(+), 45 deletions(-)

1 0

openstack-ansible 27.5.0 (antelope)
by no-reply＠openstack.org 15 Jul '24

15 Jul '24

We are chuffed to announce the release of: openstack-ansible 27.5.0: Ansible playbooks for deploying OpenStack This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 27.5.0 ^^^^^^ New Features ************ * Added variable "cinder_manage_volume_types" that allows to skip volume type creation and management by os_cinder role. Upgrade Notes ************* * Support is added to enable all stable RabbitMQ feature flags by default. This happens automatically post upgrade, and avoids compatibility issues which could occur when installing a new version of RabbitMQ. * Stable RabbitMQ feature flags will be enabled automatically pre- upgrade in order to prevent failures during the upgrade process. Deprecation Notes ***************** * The variable "keystone_external_ssl" was deprecated and is no longer used. You still can control if communication between HAProxy and Keystone should be covered with TLS through "keystone_backend_ssl" or "haproxy_ssl"/"haproxy_ssl_all_vips" for communication between clients and HAProxy on frontend. Security Issues *************** * Includes safe (non-vulnerable) versions of services regarding OSSA-2024-001 (https://security.openstack.org/ossa/OSSA-2024-001.html) Bug Fixes ********* * Python wheels build no longer fails in case of issues with a repo host and should succeed as long as there at least one reachable repo host with matching Distro/Version/Architecture. Changes in openstack-ansible 27.4.3..27.5.0 ------------------------------------------- c8c6efc55 Bump SHAs for 2023.1 9e12af6c9 Enable RabbitMQ feature flags pre-upgrade dc258b2e5 Configure all directories to be safe for git clone in CI 8a5b45041 Remove retired projects from zuul required-projects Diffstat (except docs and test files) ------------------------------------- ansible-collection-requirements.yml | 2 +- ansible-role-requirements.yml | 44 +++++++++++----------- inventory/group_vars/all/source_git.yml | 4 +- inventory/group_vars/cinder_all/source_git.yml | 4 +- inventory/group_vars/cloudkitty_all/source_git.yml | 4 +- inventory/group_vars/glance_all/source_git.yml | 4 +- inventory/group_vars/heat_all/source_git.yml | 4 +- inventory/group_vars/horizon_all/source_git.yml | 4 +- inventory/group_vars/ironic_all/source_git.yml | 4 +- inventory/group_vars/keystone_all/source_git.yml | 4 +- inventory/group_vars/magnum_all/source_git.yml | 4 +- inventory/group_vars/manila_all/source_git.yml | 4 +- inventory/group_vars/neutron_all/source_git.yml | 8 ++-- inventory/group_vars/nova_all/source_git.yml | 6 +-- inventory/group_vars/octavia_all/source_git.yml | 6 +-- inventory/group_vars/swift_all/source_git.yml | 4 +- playbooks/rabbitmq-install.yml | 13 +++++++ .../notes/OSSA-2024-001-06e266d84c2b3d38.yaml | 5 +++ ...llow_to_skip_volume_types-8698ec60660a0510.yaml | 5 +++ .../notes/feature-flags-9faf32a3d49af4fc.yaml | 6 +++ ...tone_external_ssl-removal-5d972299f98dcc32.yaml | 8 ++++ .../rabbitmq-feature-flags-d1a0f3fd4e17cbf4.yaml | 5 +++ ...env_build_facts_gathering-9a85f72324d6e7e0.yaml | 6 +++ .../templates/user_variables.aio.yml.j2 | 5 +++ zuul.d/jobs.yaml | 15 -------- 25 files changed, 108 insertions(+), 70 deletions(-)

1 0

openstack-ansible 28.3.0 (bobcat)
by no-reply＠openstack.org 15 Jul '24

15 Jul '24

We are excited to announce the release of: openstack-ansible 28.3.0: Ansible playbooks for deploying OpenStack This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 28.3.0 ^^^^^^ New Features ************ * Added variable "cinder_manage_volume_types" that allows to skip volume type creation and management by os_cinder role. Upgrade Notes ************* * Support is added to enable all stable RabbitMQ feature flags by default. This happens automatically post upgrade, and avoids compatibility issues which could occur when installing a new version of RabbitMQ. * Stable RabbitMQ feature flags will be enabled automatically pre- upgrade in order to prevent failures during the upgrade process. Deprecation Notes ***************** * The variable "keystone_external_ssl" was deprecated and is no longer used. You still can control if communication between HAProxy and Keystone should be covered with TLS through "keystone_backend_ssl" or "haproxy_ssl"/"haproxy_ssl_all_vips" for communication between clients and HAProxy on frontend. Security Issues *************** * Includes safe (non-vulnerable) versions of services regarding OSSA-2024-001 (https://security.openstack.org/ossa/OSSA-2024-001.html) Changes in openstack-ansible 28.2.1..28.3.0 ------------------------------------------- ca8aa766c Bump SHAs for 2023.2 (Bobcat) 18d742dd2 Update RabbitMQ SHA 4894e423d Configure all directories to be safe for git clone in CI 11bcd452b Enable RabbitMQ feature flags pre-upgrade 3fec9b695 Remove retired projects from zuul required-projects Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 44 +++++++++++----------- inventory/group_vars/all/source_git.yml | 4 +- inventory/group_vars/cinder_all/source_git.yml | 4 +- inventory/group_vars/cloudkitty_all/source_git.yml | 4 +- inventory/group_vars/glance_all/source_git.yml | 4 +- inventory/group_vars/heat_all/source_git.yml | 4 +- inventory/group_vars/ironic_all/source_git.yml | 4 +- inventory/group_vars/keystone_all/source_git.yml | 4 +- inventory/group_vars/magnum_all/source_git.yml | 4 +- inventory/group_vars/manila_all/source_git.yml | 4 +- inventory/group_vars/neutron_all/source_git.yml | 8 ++-- inventory/group_vars/nova_all/source_git.yml | 6 +-- inventory/group_vars/octavia_all/source_git.yml | 6 +-- inventory/group_vars/swift_all/source_git.yml | 4 +- playbooks/rabbitmq-install.yml | 13 +++++++ .../notes/OSSA-2024-001-252e923d988dad84.yaml | 5 +++ ...llow_to_skip_volume_types-8698ec60660a0510.yaml | 5 +++ .../notes/feature-flags-9faf32a3d49af4fc.yaml | 6 +++ ...tone_external_ssl-removal-5d972299f98dcc32.yaml | 8 ++++ .../rabbitmq-feature-flags-d1a0f3fd4e17cbf4.yaml | 5 +++ .../templates/user_variables.aio.yml.j2 | 5 +++ zuul.d/jobs.yaml | 15 -------- 22 files changed, 99 insertions(+), 67 deletions(-)

1 0

openstack-ansible 26.5.3 (zed)
by no-reply＠openstack.org 15 Jul '24

15 Jul '24

We are stoked to announce the release of: openstack-ansible 26.5.3: Ansible playbooks for deploying OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. Changes in openstack-ansible 26.5.2..26.5.3 ------------------------------------------- 6d4d953d6 Switch u-c to SHA eadd8d466 Transition Zed to Unmaintained 7c6e5ef7f Remove retired projects from zuul required-projects Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 118 ++++++------ .../defaults/repo_packages/openstack_services.yml | 210 ++++++++++----------- tox.ini | 2 +- zuul.d/jobs.yaml | 9 - 5 files changed, 166 insertions(+), 175 deletions(-)

1 0

cinder 22.2.0 (antelope)
by no-reply＠openstack.org 10 Jul '24

10 Jul '24

We are psyched to announce the release of: cinder 22.2.0: OpenStack Block Storage This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 22.2.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected with an "ImageUnacceptable" error because such images could be used in an exploit to expose host information. Given that qcow2 external data files were never supported by Cinder, this change should have no impact on users. See Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) for details. Bug Fixes ********* * Ceph backup driver Bug #1895035 (https://bugs.launchpad.net/cinder/+bug/1895035) Fixed restore full backups to non RBD volumes. * Bug #1912624 (https://bugs.launchpad.net/cinder/+bug/1912624) Corrected regression introduced by the refactoring of the backup service in the ussuri release, which prevented the creation of a volume backup in a different availability zone. * Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image is now rejected with an "ImageUnacceptable" error if it is used to create a volume. Given that qcow2 external data files were never supported by Cinder, the only use for such an image previously was to attempt to steal host information, and hence this change should have no impact on users. * Dell PowerMax driver bug #2051828 (https://bugs.launchpad.net/cinder/+bug/2051828) The driver only recognized 10.0 as being Unisphere 10 and would try to use 9.2 for Unisphere 10.x (where x > 0), but now it correctly recognizes 10.x as being Unisphere 10. * HPE 3PAR driver Bug #1994521 (https://bugs.launchpad.net/cinder/+bug/1994521) Fixed: While performing a delete snapshot (s1) operation, the volumes (v2) dependent on the snapshot (s1) are converted to base volumes. This operation fails if these dependent volumes (v2) have their own dependent snapshots (s2). The errors during the failure were vague and not helpful. With this release, we added conditions to fail this operation early and also added useful error message. * HPE 3PAR driver Bug #2015034 (https://bugs.launchpad.net/cinder/+bug/2015034) Added handling for VLAN iscsi IPs in the 3PAR iSCSI driver. Changes in cinder 22.1.2..22.2.0 -------------------------------- 5f5e86e35 CVE-2024-32498: Check for external qcow2 data file 1d7a0f5d8 Recognize Dell PowerMax Unisphere 10.x (x>0) b30ed079f HPE 3PAR: use vlan iscsi ips 0cca8c2aa [stable-only] Set volume_image_dep_tests flag c9330c6b6 Ceph: Fix restore backups to diff backend 22e6866f6 Fix 'cinder-backup' service when Swift with TLS enabled af040f925 3PAR: Error out if vol cannot be converted to base 8f9632461 Stable-only: Remove skip-level upgrade job 4ab3cbd70 Do not ignore availability_zone in backup creation Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 7 +- cinder/backup/api.py | 3 +- cinder/backup/drivers/ceph.py | 65 +- cinder/backup/drivers/swift.py | 3 +- cinder/image/format_inspector.py | 938 +++++++++++++++++++++ cinder/image/image_utils.py | 86 +- cinder/privsep/format_inspector.py | 38 + cinder/scheduler/driver.py | 2 +- cinder/scheduler/filter_scheduler.py | 11 +- cinder/scheduler/host_manager.py | 18 +- cinder/scheduler/manager.py | 5 +- .../dell_emc/powermax/test_powermax_rest.py | 21 + cinder/volume/drivers/dell_emc/powermax/rest.py | 61 +- cinder/volume/drivers/hpe/hpe_3par_common.py | 27 +- cinder/volume/drivers/hpe/hpe_3par_iscsi.py | 111 ++- cinder/volume/drivers/nfs.py | 10 + cinder/volume/drivers/remotefs.py | 3 +- .../drivers/dell-emc-powermax-driver.rst | 56 +- .../bug-1895035-rbd-restore-0cd94ccd467ae1e3.yaml | 6 + ...2624-bakup-a-z-regression-452f4bc9dfd41871.yaml | 7 + ...9-disallow-qcow2-datafile-abc4e6d8be766710.yaml | 19 + ...l-powermax-unisphere-v101-7195af74d1c7671c.yaml | 8 + ...t-to-base-vol-delete-snap-a460a4b1c419804a.yaml | 11 + ...e-3par-use-vlan-iscsi-ips-f75787b0d281030b.yaml | 5 + 34 files changed, 2591 insertions(+), 159 deletions(-)

1 0

cinder 23.2.0 (bobcat)
by no-reply＠openstack.org 10 Jul '24

10 Jul '24

We are pleased to announce the release of: cinder 23.2.0: OpenStack Block Storage This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 23.2.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected with an "ImageUnacceptable" error because such images could be used in an exploit to expose host information. Given that qcow2 external data files were never supported by Cinder, this change should have no impact on users. See Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) for details. Bug Fixes ********* * Bug #2008017 (https://bugs.launchpad.net/cinder/+bug/2012246) Hide value of the *[coordination] backend_url* option from logs because it can contain credential. * Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image is now rejected with an "ImageUnacceptable" error if it is used to create a volume. Given that qcow2 external data files were never supported by Cinder, the only use for such an image previously was to attempt to steal host information, and hence this change should have no impact on users. * Dell PowerMax driver bug #2051828 (https://bugs.launchpad.net/cinder/+bug/2051828) The driver only recognized 10.0 as being Unisphere 10 and would try to use 9.2 for Unisphere 10.x (where x > 0), but now it correctly recognizes 10.x as being Unisphere 10. * Bug #1988942 (https://bugs.launchpad.net/cinder/+bug/1988942) Increased size of volume image metadata values accepted by the Block Storage API. Volume image metadata values were limited to 255 characters but Glance allows up to 65535 bytes. This change does not affect the database tables which already allow up to 65535 bytes for image metadata values. Changes in cinder 23.1.0..23.2.0 -------------------------------- 9e667b02b CVE-2024-32498: Check for external qcow2 data file 1ec51a0af [stable-only] Set volume_image_dep_tests flag 9c504a019 [coordination] backend_url should be secret 245274505 RBD: Use "RBD" capitalization in user-facing text 68acf0b81 Recognize Dell PowerMax Unisphere 10.x (x>0) 1e5260264 Fix 'cinder-backup' service when Swift with TLS enabled 6fcdf82f6 Tests: Quiet Fungible invalid UUID warnings c0d9e2a2c Tests: Make NEC tests faster 9267b2f46 [stable-only] fix relnote markup 2fb2ff99b Increase size of volume image metadata values 5d24ae271 Ceph: Fix restoring old backups to a different backend Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 5 + cinder/api/schemas/volume_image_metadata.py | 2 +- cinder/api/validation/parameter_types.py | 9 + cinder/api/validation/validators.py | 8 + cinder/backup/drivers/ceph.py | 44 +- cinder/backup/drivers/swift.py | 3 +- cinder/coordination.py | 1 + cinder/image/format_inspector.py | 938 +++++++++++++++++++++ cinder/image/image_utils.py | 86 +- cinder/privsep/format_inspector.py | 38 + .../unit/api/contrib/test_volume_image_metadata.py | 65 +- .../dell_emc/powermax/test_powermax_rest.py | 21 + .../unit/volume/drivers/fungible/test_driver.py | 2 +- .../drivers/nec/v/test_internal_nec_rest_fc.py | 5 +- cinder/volume/drivers/dell_emc/powermax/rest.py | 61 +- cinder/volume/drivers/nfs.py | 10 + cinder/volume/drivers/rbd.py | 34 +- cinder/volume/drivers/remotefs.py | 3 +- .../drivers/dell-emc-powermax-driver.rst | 6 + .../notes/bug-2012246-292d7d93260a1fe5.yaml | 6 + ...9-disallow-qcow2-datafile-abc4e6d8be766710.yaml | 19 + ...l-powermax-unisphere-v101-7195af74d1c7671c.yaml | 8 + ...ge-metadata-size-increase-323812970dc0e513.yaml | 8 + ...pure-storage-fix-failover-fe6260a112409742.yaml | 4 +- 31 files changed, 2269 insertions(+), 119 deletions(-)

1 0

cinder 24.1.0 (caracal)
by no-reply＠openstack.org 10 Jul '24

10 Jul '24

We exuberantly announce the release of: cinder 24.1.0: OpenStack Block Storage This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/cinder Download the package from: https://tarballs.openstack.org/cinder/ Please report issues through: https://bugs.launchpad.net/cinder/+bugs For more details, please see below. 24.1.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected with an "ImageUnacceptable" error because such images could be used in an exploit to expose host information. Given that qcow2 external data files were never supported by Cinder, this change should have no impact on users. See Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) for details. Bug Fixes ********* * Dell PowerMax driver bug #2034937 (https://bugs.launchpad.net/cinder/+bug/2034937) Fixed This change is to update the live migration ability in environments using PowerMax. In previous 2023.1 version, the live migration fails without a pool name. This update add the ability of live migration without a pool name. * Bug #2058596 (https://bugs.launchpad.net/cinder/+bug/2058596) Fixed broken "backup_swift_service_auth=True" which made swift backup driver consistently fail during object data access. * Bug #2059809 (https://bugs.launchpad.net/cinder/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image is now rejected with an "ImageUnacceptable" error if it is used to create a volume. Given that qcow2 external data files were never supported by Cinder, the only use for such an image previously was to attempt to steal host information, and hence this change should have no impact on users. * Bug #2031897 (https://bugs.launchpad.net/cinder/+bug/2031897) Fixed issues for volume backups with the Ceph driver where failures of the first process ("rbd export-diff") were not caught. Instead, only the return code of the second process ("rbd import-diff") was recognized. This change also preserves the stderr that was lost previously in order to ease debugging. Changes in cinder 24.0.0..24.1.0 -------------------------------- db98dc207 CVE-2024-32498: Check for external qcow2 data file 966bc53c8 Fix broken backup_swift_service_auth=True 52f885b77 Ceph: Catch more failure conditions on volume backup 1aa541d02 PowerMax: Allow live migration without pool name Diffstat (except docs and test files) ------------------------------------- cinder/backup/drivers/ceph.py | 58 +- cinder/backup/drivers/swift.py | 3 +- cinder/image/format_inspector.py | 938 +++++++++++++++++++++ cinder/image/image_utils.py | 86 +- cinder/privsep/format_inspector.py | 38 + cinder/service_auth.py | 11 + .../drivers/dell_emc/powermax/powermax_data.py | 7 + .../dell_emc/powermax/test_powermax_masking.py | 17 + cinder/volume/drivers/dell_emc/powermax/masking.py | 10 +- cinder/volume/drivers/nfs.py | 10 + cinder/volume/drivers/remotefs.py | 3 +- ...ation-without-a-pool-name-7690fcd67b5f690c.yaml | 10 + .../notes/bug-2058596-3c676e7fdc642b3d.yaml | 6 + ...9-disallow-qcow2-datafile-abc4e6d8be766710.yaml | 19 + ...h-more-failure-conditions-d2ec640f5ff8051c.yaml | 10 + 23 files changed, 2123 insertions(+), 93 deletions(-)

1 0

nova 27.4.0 (antelope)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We are jazzed to announce the release of: nova 27.4.0: Cloud computing fabric controller This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 27.4.0 ^^^^^^ Bug Fixes * Ironic virt driver now uses the node cache and respects partition keys, such as conductor group, for list_instances and list_instance_uuids calls. This fix will improve performance of the periodic queries which use these driver methods and reduce API and DB load on the backing Ironic service. Changes in nova 27.3.0..27.4.0 ------------------------------ f732f84768 Fix vmdk_allowed_types checking 9e10ac2549 Additional qemu safety checking on base images 67e5376dd6 Check images with format_inspector for safety af4d819c60 Reject qcow files with data-file attributes 42d3725b51 Fix disk_formats in ceph job tempest config 3226318b53 [ironic] Partition & use cache for list_instance* b128957591 Fix nova-manage image_property show unexpected keyword 43273631d8 Improve logging at '_numa_cells_support_network_metadata' Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 + nova/cmd/manage.py | 8 +- nova/conf/workarounds.py | 10 + nova/image/format_inspector.py | 939 +++++++++++++++++++++ nova/virt/hardware.py | 27 +- nova/virt/images.py | 56 +- nova/virt/ironic/driver.py | 33 +- nova/virt/libvirt/imagebackend.py | 15 + nova/virt/libvirt/utils.py | 30 + ...nce-respect-partition-key-339ff653eaa00753.yaml | 5 + 15 files changed, 1446 insertions(+), 73 deletions(-)

1 0

nova 28.2.0 (bobcat)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We contentedly announce the release of: nova 28.2.0: Cloud computing fabric controller This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. 28.2.0 ^^^^^^ Bug Fixes * Ironic virt driver now uses the node cache and respects partition keys, such as conductor group, for list_instances and list_instance_uuids calls. This fix will improve performance of the periodic queries which use these driver methods and reduce API and DB load on the backing Ironic service. Changes in nova 28.1.0..28.2.0 ------------------------------ 70a435fd51 Fix vmdk_allowed_types checking 0269234dc4 Additional qemu safety checking on base images 0acf5ee7b5 Check images with format_inspector for safety 736328f78f Reject qcow files with data-file attributes 625a10f7d0 Fix disk_formats in ceph job tempest config 555d7d0ad0 [ironic] Partition & use cache for list_instance* 0d970bfa5a Improve logging at '_numa_cells_support_network_metadata' 611bd95aab Adding server actions tests to grenade-multinode Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 +- nova/conf/workarounds.py | 10 + nova/image/format_inspector.py | 939 +++++++++++++++++++++ nova/virt/hardware.py | 27 +- nova/virt/images.py | 56 +- nova/virt/ironic/driver.py | 33 +- nova/virt/libvirt/imagebackend.py | 15 + nova/virt/libvirt/utils.py | 30 + ...nce-respect-partition-key-339ff653eaa00753.yaml | 5 + 14 files changed, 1443 insertions(+), 70 deletions(-)

1 0

nova 29.1.0 (caracal)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We jubilantly announce the release of: nova 29.1.0: Cloud computing fabric controller This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/nova Download the package from: https://tarballs.openstack.org/nova/ Please report issues through: https://bugs.launchpad.net/nova/+bugs For more details, please see below. Changes in nova 29.0.2..29.1.0 ------------------------------ 11301e7e3f Fix vmdk_allowed_types checking 8a0d5f2afa Additional qemu safety checking on base images f07fa55fd8 Check images with format_inspector for safety 58d933eafb Reject qcow files with data-file attributes 62b3192c70 Fix disk_formats in ceph job tempest config Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 2 + nova/conf/workarounds.py | 10 + nova/image/format_inspector.py | 939 ++++++++++++++++++++++ nova/virt/images.py | 56 +- nova/virt/libvirt/imagebackend.py | 15 + nova/virt/libvirt/utils.py | 30 + 10 files changed, 1363 insertions(+), 18 deletions(-)

1 0

glance 27.1.0 (bobcat)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We are excited to announce the release of: glance 27.1.0: OpenStack Image Service This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. 27.1.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected from glance because such images could be used in an exploit to expose host information. See Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) for details. Bug Fixes ********* * Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image format with an external data file will be rejected from glance. To achieve the same, format_inspector has been extended by adding safety checks for qcow2 and vmdk files in glance. Unsafe qcow and vmdk files will be rejected by pre-examining them with a format inspector to ensure safe configurations prior to any qemu-img operations. Changes in glance 27.0.0..27.1.0 -------------------------------- 835c89c7 Add releasenote for CVE-2024-32498 fix 78c97fd1 Revert "[stable only] Make import jobs non-voting" 212426fa Increase timeout for tempest-integrated-storage-import job fb0004a0 [stable only] Make import jobs non-voting 1ea1a937 Fix import job to provide valid disk-formats list to tempest 2befcfcb Add safety check and detection support to FI tool 54c1edbf Add file format detection to format_inspector 4bc13f95 Add QED format detection to format_inspector c2373030 Reject unsafe qcow and vmdk files 50aa0dfa Add VMDK safety check 733d771a Extend format_inspector for QCOW safety 87a98f0d Reject qcow files with data-file attributes 5e2acc91 Support Stream Optimized VMDKs 56da508e Remove py38-fips jobs because stream8 is dead cec35e92 Fix broken glance-cache-prefetcher utility 9a4a3067 Update TOX_CONSTRAINTS_FILE for stable/2023.2 6b7d26c9 Update .gitreview for stable/2023.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 4 +- glance/async_/flows/base_import.py | 10 + glance/async_/flows/plugins/image_conversion.py | 52 +++- glance/cmd/cache_prefetcher.py | 2 + glance/common/format_inspector.py | 270 +++++++++++++++++++-- .../async_/flows/plugins/test_image_conversion.py | 73 +++++- ...9-disallow-qcow2-datafile-5d5ff4dbd590c911.yaml | 17 ++ tools/test_format_inspector.py | 7 + tox.ini | 2 +- 12 files changed, 571 insertions(+), 53 deletions(-)

1 0

glance 28.1.0 (caracal)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We joyfully announce the release of: glance 28.1.0: OpenStack Image Service This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. 28.1.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected from glance because such images could be used in an exploit to expose host information. See Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) for details. Bug Fixes ********* * Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image format with an external data file will be rejected from glance. To achieve the same, format_inspector has been extended by adding safety checks for qcow2 and vmdk files in glance. Unsafe qcow and vmdk files will be rejected by pre-examining them with a format inspector to ensure safe configurations prior to any qemu-img operations. Changes in glance 28.0.1..28.1.0 -------------------------------- b5b29a0a Add releasenote for CVE-2024-32498 fix 4168ee5a Revert "[stable only] Make import jobs non-voting" 35968d7a Increase timeout for tempest-integrated-storage-import job bc996f20 [stable only] Make import jobs non-voting 400345bf Fix import job to provide valid disk-formats list to tempest 1e5c4444 Add safety check and detection support to FI tool 26e5b855 Add file format detection to format_inspector 83acfc46 Add QED format detection to format_inspector f482a92f Reject unsafe qcow and vmdk files b9ef41ac Add VMDK safety check 7a6c344c Extend format_inspector for QCOW safety 35c7e85d Reject qcow files with data-file attributes eb3eb4ea Remove SQLAlchemy tips jobs 99540a99 Fix broken glance-cache-prefetcher utility f6a553aa Replace remaining usage of [DEFAULT] sql_connection 708ca14f Update TOX_CONSTRAINTS_FILE for stable/2024.1 83683937 Update .gitreview for stable/2024.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 22 +- glance/async_/flows/base_import.py | 10 + glance/async_/flows/plugins/image_conversion.py | 52 +++- glance/cmd/cache_prefetcher.py | 2 + glance/common/format_inspector.py | 266 +++++++++++++++++++-- .../async_/flows/plugins/test_image_conversion.py | 73 +++++- ...9-disallow-qcow2-datafile-5d5ff4dbd590c911.yaml | 17 ++ tools/test_format_inspector.py | 7 + tox.ini | 2 +- 13 files changed, 523 insertions(+), 54 deletions(-)

1 0

glance 26.1.0 (antelope)
by no-reply＠openstack.org 09 Jul '24

09 Jul '24

We exuberantly announce the release of: glance 26.1.0: OpenStack Image Service This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/glance Download the package from: https://tarballs.openstack.org/glance/ Please report issues through: https://bugs.launchpad.net/glance/+bugs For more details, please see below. 26.1.0 ^^^^^^ Security Issues *************** * Images in the qcow2 format with an external data file are now rejected from glance because such images could be used in an exploit to expose host information. See Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) for details. Bug Fixes ********* * Bug #2059809 (https://bugs.launchpad.net/glance/+bug/2059809) Fixed issue where a qcow2 format image with an external data file could expose host information. Such an image format with an external data file will be rejected from glance. To achieve the same, format_inspector has been extended by adding safety checks for qcow2 and vmdk files in glance. Unsafe qcow and vmdk files will be rejected by pre-examining them with a format inspector to ensure safe configurations prior to any qemu-img operations. Changes in glance 26.0.0..26.1.0 -------------------------------- edd75b70 Add releasenote for CVE-2024-32498 fix d65e8a51 Revert "[stable only] Make import jobs non-voting" 6918d5b5 Increase timeout for tempest-integrated-storage-import job f9ccc2d8 [stable only] Make import jobs non-voting f98e9ae4 Fix import job to provide valid disk-formats list to tempest a1c94b47 Add safety check and detection support to FI tool 1656fe88 Add file format detection to format_inspector 9b3faf37 Add QED format detection to format_inspector c1c54abe Reject unsafe qcow and vmdk files 812e56d1 Add VMDK safety check 48600242 Extend format_inspector for QCOW safety dba3bdb4 Reject qcow files with data-file attributes ef22a742 Support Stream Optimized VMDKs a45667b7 Remove py38-fips jobs because stream8 is dead 70170d2a Fix broken glance-cache-prefetcher utility 065e2d7e Adjust integrated-storage-import jobs 285021bd Update TOX_CONSTRAINTS_FILE for stable/2023.1 0c03779f Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 6 +- glance/async_/flows/base_import.py | 10 + glance/async_/flows/plugins/image_conversion.py | 52 +++- glance/cmd/cache_prefetcher.py | 2 + glance/common/format_inspector.py | 270 +++++++++++++++++++-- .../async_/flows/plugins/test_image_conversion.py | 73 +++++- playbooks/post-check-metadata-injection.yaml | 16 +- ...9-disallow-qcow2-datafile-5d5ff4dbd590c911.yaml | 17 ++ tools/test_format_inspector.py | 7 + tox.ini | 2 +- 13 files changed, 583 insertions(+), 59 deletions(-)

1 0

python-magnumclient 4.6.0 (dalmatian)
by no-reply＠openstack.org 05 Jul '24

05 Jul '24

We joyfully announce the release of: python-magnumclient 4.6.0: Client library for Magnum API This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-magnumclient Download the package from: https://pypi.org/project/python-magnumclient Please report issues through: https://bugs.launchpad.net/python-magnumclient/+bugs For more details, please see below. Changes in python-magnumclient 4.5.0..4.6.0 ------------------------------------------- 5d8fd38 Update VerifiedHTTPSConnection for Python >= 3.12 65430f8 Remove extraneous quote in non-TLS kubeconfig 8ab4238 Update Python runtime for 2024.2 2692346 Add insecure_registry to osc part of the client Diffstat (except docs and test files) ------------------------------------- magnumclient/common/httpclient.py | 17 ++++++++--------- magnumclient/common/utils.py | 2 +- magnumclient/osc/v1/cluster_templates.py | 6 ++++++ tox.ini | 2 +- 5 files changed, 17 insertions(+), 11 deletions(-)

1 0

keystoneauth 5.7.0 (dalmatian)
by no-reply＠openstack.org 05 Jul '24

05 Jul '24

We are psyched to announce the release of: keystoneauth 5.7.0 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/keystoneauth Download the package from: https://pypi.org/project/keystoneauth Please report issues through: https://bugs.launchpad.net/keystoneauth/+bugs For more details, please see below. Changes in keystoneauth 5.6.0..5.7.0 ------------------------------------ 0eb7b6e tox: Migrate to tox v4 d1b78d9 Python 3.12: do not use datetime.utcnow() 29b6f37 reno: Update master for unmaintained/zed 7a0aa43 Do not log sensitive info in OIDC 91f86ad reno: Update master for unmaintained/xena 814f326 reno: Update master for unmaintained/wallaby 8335f29 reno: Update master for unmaintained/victoria 76984a7 Update master for stable/2024.1 cabcb70 Output verification_uri_complete by logger a678378 Drop unused reno from test requirements Diffstat (except docs and test files) ------------------------------------- keystoneauth1/_utils.py | 10 ++-- keystoneauth1/extras/_saml2/v3/adfs.py | 3 +- keystoneauth1/identity/v3/oidc.py | 59 +++++++++++++++++++++-- releasenotes/source/2024.1.rst | 6 +++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- test-requirements.txt | 1 - tox.ini | 85 +++++++++++++++++----------------- 11 files changed, 118 insertions(+), 55 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index d37e6cf..62584c5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -12 +11,0 @@ betamax>=0.7.0 # Apache-2.0 -reno>=3.1.0 # Apache-2.0

1 0

python-observabilityclient 0.3.0 (dalmatian)
by no-reply＠openstack.org 05 Jul '24

05 Jul '24

We contentedly announce the release of: python-observabilityclient 0.3.0: OpenStack Observability Client This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-observabilityclient Download the package from: https://pypi.org/project/python-observabilityclient Please report issues through: https://bugs.launchpad.net/python-observabilityclient/+bugs For more details, please see below. Changes in python-observabilityclient 0.2.0..0.3.0 -------------------------------------------------- e64b943 Drop direct usage of simplejson dbe0272 Use stestr for testing 42534ae Remove unused test dependencies f3ea3bf Drop unused --dev and --messy Diffstat (except docs and test files) ------------------------------------- observabilityclient/prometheus_client.py | 13 ++----------- observabilityclient/v1/base.py | 11 ----------- setup.cfg | 9 ++------- tox.ini | 5 ++--- 4 files changed, 6 insertions(+), 32 deletions(-)

1 0

python-vitrageclient 5.1.0 (dalmatian)
by no-reply＠openstack.org 05 Jul '24

05 Jul '24

We are stoked to announce the release of: python-vitrageclient 5.1.0: Vitrage Client API Library This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-vitrageclient Download the package from: https://pypi.org/project/python-vitrageclient Please report issues through: https://bugs.launchpad.net/python-vitrageclient/+bugs For more details, please see below. Changes in python-vitrageclient 5.0.0..5.1.0 -------------------------------------------- e3ad06e Support networkx 3.x 5bec5fb Update master for stable/2024.1 b71c184 reno: Update master for unmaintained/xena 60654d7 reno: Update master for unmaintained/wallaby bd8a5c3 reno: Update master for unmaintained/victoria Diffstat (except docs and test files) ------------------------------------- releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- vitrageclient/common/formatters.py | 5 ++++- 6 files changed, 14 insertions(+), 4 deletions(-)

1 0

tosca-parser 2.11.0 (dalmatian)
by no-reply＠openstack.org 05 Jul '24

05 Jul '24

We are tickled pink to announce the release of: tosca-parser 2.11.0: Parser for TOSCA Simple Profile in YAML. This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/tosca-parser Download the package from: https://pypi.org/project/tosca-parser Please report issues through: https://bugs.launchpad.net/tosca-parser/+bugs For more details, please see below. Changes in tosca-parser 2.10.0..2.11.0 -------------------------------------- bfbe9b3 Support for updating tosca-parser with TOSCA1.3 1b9281a Move test samples to reduce setuptools warnings 5231982 Mock replacement for unit tests with external URL 8714783 Add TOSCA v1.3 to valid template version Diffstat (except docs and test files) ------------------------------------- .../csar_invalid_multilevel_imports_validation.zip | Bin .../data/CSAR/csar_multiple_deployment_flavour.zip | Bin .../data/CSAR/csar_relative_path_import_check.zip | Bin .../csar_root_level_yaml_and_tosca_metadata.zip | Bin .../csar_root_yaml_with_tosca_definition1_0.zip | Bin .../csar_valid_multilevel_imports_validation.zip | Bin .../data/CSAR/csar_wordpress_invalid_artifact.zip | Bin .../CSAR/csar_wordpress_invalid_artifact_multi.zip | Bin .../CSAR/csar_wordpress_invalid_import_path.zip | Bin .../CSAR/csar_wordpress_invalid_import_url.zip | Bin .../CSAR/csar_wordpress_invalid_script_path.zip | Bin .../CSAR/csar_wordpress_invalid_script_url.zip | Bin .../data/CSAR/csar_wordpress_valid_artifact.zip | Bin .../CSAR/csar_wordpress_valid_artifact_multi.zip | Bin .../csar_wordpress_with_url_import_and_script.zip | Bin 0 -> 5672 bytes .../data/CSAR/multi_level_imports_response.yaml | 0 .../data}/artifacts/logstash/configure_collectd.py | 0 .../artifacts/logstash/configure_elasticsearch.py | 0 .../data}/artifacts/logstash/configure_rsyslog.py | 0 .../data}/artifacts/mongodb/create_database.sh | 0 .../artifacts/mysql/mysql_database_configure.sh | 0 .../data}/artifacts/mysql/mysql_dbms_configure.sh | 0 .../data}/artifacts/mysql/mysql_dbms_install.sh | 0 .../data}/artifacts/mysql/mysql_dbms_start.sh | 0 .../data}/artifacts/webserver/webserver_install.sh | 0 .../data}/artifacts/webserver/webserver_start.sh | 0 .../artifacts/wordpress/wordpress_configure.sh | 0 .../data}/artifacts/wordpress/wordpress_install.sh | 0 .../containers/test_container_docker_mysql.yaml | 0 .../custom_types/compute_with_attribute_list.yaml | 0 .../compute_with_nested_atributes.yaml | 0 .../data/custom_types/container_cap_child.yaml | 0 .../custom_types/custom_cap_with_datatype.yaml | 0 .../custom_types/custom_nested_data_types.yaml | 0 .../custom_relationship_type_defs.yaml | 0 .../data/custom_types/db_with_list_param.yaml | 0 .../custom_types/invalid_template_version.yaml | 0 .../data/custom_types/nested_test_kibana.yaml | 0 .../data/custom_types/nested_test_wordpress.yaml | 0 .../custom_types}/paypalpizzastore_nodejs_app.yaml | 0 .../data/custom_types/template_version_1_3.yaml | 6 + .../test_custom_datatypes_in_current_template.yaml | 0 ...est_custom_datatypes_nested_datatype_error.yaml | 0 .../datatypes/test_custom_datatypes_positive.yaml | 0 .../test_custom_datatypes_value_error.yaml | 0 .../datatypes/test_datatype_portspec_add_req.yaml | 0 .../data/dsl_definitions/test_nested_dsl_def.yaml | 0 .../data/extensions}/tosca_helloworld_nfv.yaml | 0 .../functions/test_capabilties_inheritance.yaml | 0 .../data/functions/test_container_cap_child.yaml | 0 .../test_get_attribute_custom_data_type.yaml | 0 .../functions/test_get_attribute_host_keyword.yaml | 0 .../test_get_attribute_host_not_found.yaml | 0 ...test_get_attribute_illegal_host_in_outputs.yaml | 0 .../test_get_attribute_nested_data_types.yaml | 0 .../test_get_attribute_source_target_keywords.yaml | 0 .../test_get_attribute_unknown_attribute_name.yaml | 0 ...t_get_attribute_unknown_node_template_name.yaml | 0 .../functions/test_get_attribute_with_index.yaml | 0 .../test_get_attribute_with_index_error.yaml | 0 .../test_get_attribute_with_nested_params.yaml | 0 .../functions/test_get_implicit_attribute.yaml | 0 .../data/functions/test_get_prop_cap_bool.yaml | 0 .../data/functions/test_get_prop_cap_host.yaml | 0 .../test_get_property_source_target_keywords.yaml | 0 .../functions/test_get_property_with_host.yaml | 0 .../functions/test_invalid_function_signature.yaml | 0 .../test_unknown_capability_property.yaml | 0 .../functions/test_unknown_input_in_interface.yaml | 0 .../functions/test_unknown_input_in_property.yaml | 0 .../tosca_nested_property_names_indexes.yaml | 0 .../test_custom_interface_in_template.yaml | 0 .../test_custom_interface_invalid_operation.yaml | 0 .../test_custom_interface_notifications.yaml | 32 +++ .../test_custom_interface_operations.yaml | 29 +++ .../test_policies_without_required_property.yaml | 0 .../policies/test_tosca_nfv_multiple_policies.yaml | 0 .../policies/tosca_custom_policy_template.yaml | 0 .../relationship/test_custom_relationship.yaml | 0 .../test_custom_relationship_key_schema.yaml | 21 ++ .../repositories/test_repositories_definition.yaml | 2 +- .../tosca_repositories_test_definition.yaml | 0 .../data/test_capability_without_properties.yaml | 0 .../data/test_import_invalid_template_version.yaml | 0 .../data/test_multiple_validation_errors.yaml | 0 .../data/test_nodetype_without_relationship.yaml | 0 .../test_normative_type_properties_override.yaml | 0 .../data/test_tosca_custom_rel_with_script.yaml | 0 .../test_tosca_normative_type_by_shortname.yaml | 0 .../data/topology_template/databasesubsystem.yaml | 0 .../data/topology_template/definitions_1_2.yaml | 0 .../data/topology_template/queuingsubsystem.yaml | 0 .../topology_template/transactionsubsystem.yaml | 0 .../validate/queuingsubsystem_invalid_input.yaml | 0 .../validate/system_invalid_input.yaml | 0 .../test_example_app_substitution_mappings.yaml | 0 .../test_substitution_mappings_invalid_output.yaml | 0 .../test_substitution_mappings_valid_output.yaml | 0 .../data/tosca_single_instance_wordpress.yaml | 0 ...stance_wordpress_with_local_abspath_import.yaml | 0 ..._single_instance_wordpress_with_url_import.yaml | 2 +- .../data/tosca_test_get_operation_output.yaml | 0 toscaparser/dataentity.py | 31 ++- toscaparser/elements/constraints.py | 8 +- toscaparser/elements/grouptype.py | 2 + toscaparser/elements/tosca_type_validation.py | 3 +- toscaparser/entity_template.py | 18 ++ toscaparser/groups.py | 2 + toscaparser/nodetemplate.py | 35 ++- toscaparser/parameters.py | 7 +- toscaparser/properties.py | 7 +- .../csar_wordpress_with_url_import_and_script.zip | Bin 6046 -> 0 bytes .../CSAR/tosca_elk/Definitions/elasticsearch.yaml | 11 - .../data/CSAR/tosca_elk/Definitions/kibana.yaml | 16 -- .../data/CSAR/tosca_elk/Definitions/logstash.yaml | 25 -- .../data/CSAR/tosca_elk/Definitions/tosca_elk.yaml | 217 ----------------- .../data/CSAR/tosca_elk/Python/collectd/config.py | 25 -- .../Python/logstash/configure_collectd.py | 28 --- .../Python/logstash/configure_elasticsearch.py | 26 -- .../tosca_elk/Python/logstash/configure_rsyslog.py | 25 -- .../data/CSAR/tosca_elk/Scripts/collectd/create.sh | 5 - .../data/CSAR/tosca_elk/Scripts/collectd/start.sh | 4 - .../CSAR/tosca_elk/Scripts/elasticsearch/create.sh | 14 -- .../CSAR/tosca_elk/Scripts/elasticsearch/start.sh | 4 - .../data/CSAR/tosca_elk/Scripts/kibana/config.sh | 7 - .../data/CSAR/tosca_elk/Scripts/kibana/create.sh | 12 - .../data/CSAR/tosca_elk/Scripts/kibana/start.sh | 4 - .../data/CSAR/tosca_elk/Scripts/logstash/create.sh | 20 -- .../data/CSAR/tosca_elk/Scripts/logstash/start.sh | 4 - .../data/CSAR/tosca_elk/Scripts/mongodb/config.sh | 7 - .../data/CSAR/tosca_elk/Scripts/mongodb/create.sh | 14 -- .../tosca_elk/Scripts/mongodb/create_database.sh | 5 - .../data/CSAR/tosca_elk/Scripts/mongodb/start.sh | 5 - .../data/CSAR/tosca_elk/Scripts/nodejs/config.sh | 28 --- .../data/CSAR/tosca_elk/Scripts/nodejs/create.sh | 7 - .../data/CSAR/tosca_elk/Scripts/nodejs/start.sh | 3 - .../data/CSAR/tosca_elk/Scripts/rsyslog/config.sh | 30 --- .../data/CSAR/tosca_elk/Scripts/rsyslog/create.sh | 5 - .../data/CSAR/tosca_elk/Scripts/rsyslog/start.sh | 4 - .../data/CSAR/tosca_elk/TOSCA-Metadata/TOSCA.meta | 4 - .../tosca_single_instance_wordpress.yaml | 109 --------- .../tosca_single_instance_wordpress/README.txt | 22 -- .../Scripts/MYSQLDBMS/configure.sh | 5 - .../Scripts/MYSQLDBMS/install.sh | 9 - .../Scripts/MYSQLDBMS/start.sh | 2 - .../Scripts/MYSQLDatabase/configure.sh | 8 - .../Scripts/WebServer/install.sh | 5 - .../Scripts/WebServer/start.sh | 2 - .../Scripts/WordPress/configure.sh | 4 - .../Scripts/WordPress/install.sh | 5 - .../TOSCA-Metadata/TOSCA.meta | 5 - .../custom_types/paypalpizzastore_nodejs_app.yaml | 29 --- .../data/load_balancer/tosca_load_balancer.yaml | 75 ------ .../v1.0/network/tosca_one_server_one_network.yaml | 43 ---- .../network/tosca_one_server_three_networks.yaml | 64 ----- .../network/tosca_server_on_existing_network.yaml | 39 --- .../network/tosca_two_servers_one_network.yaml | 79 ------ .../tosca_blockstorage_with_attachment.yaml | 61 ----- ...sca_blockstorage_with_attachment_notation1.yaml | 87 ------- ...sca_blockstorage_with_attachment_notation2.yaml | 99 -------- ...blockstorage_with_custom_relationship_type.yaml | 64 ----- ...ca_blockstorage_with_relationship_template.yaml | 59 ----- ...osca_multiple_blockstorage_with_attachment.yaml | 93 ------- .../v1.0/storage/tosca_single_object_store.yaml | 17 -- .../v1.0/tosca_nodejs_mongodb_two_instances.yaml | 96 -------- .../spec_samples/v1.0/tosca_single_server.yaml | 32 --- .../{extensions/nfv => }/test_tosca_nfv_tpl.py | 7 +- toscaparser/tosca_template.py | 6 +- toscaparser/triggers.py | 7 +- 273 files changed, 653 insertions(+), 2080 deletions(-)

1 0

castellan 5.1.0 (dalmatian)
by no-reply＠openstack.org 04 Jul '24

04 Jul '24

We jubilantly announce the release of: castellan 5.1.0: Generic Key Manager interface for OpenStack This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/castellan Download the package from: https://tarballs.openstack.org/castellan/ Please report issues through: https://bugs.launchpad.net/castellan/+bugs For more details, please see below. 5.1.0 ^^^^^ New Features * The new "[vault] timeout" option has been added. This determines timeout in each HTTP request to Vault server. It defaults to 60 seconds. Changes in castellan 5.0.0..5.1.0 --------------------------------- b757f78 Remove unused test hook scripts 0ef56b7 reno: Update master for unmaintained/zed a18831e Remove old excludes db91f2e Drop wrong documented choices for barbican_endpoint_type 327ee6e vault: Hide values used for authentication 8c89839 Use upper-constraint in doc generation 2af34f2 vault: Add timeout option 9558ccd Update master for stable/2024.1 ec6a494 reno: Update master for unmaintained/xena ce2706a reno: Update master for unmaintained/wallaby a6e6a0e reno: Update master for unmaintained/victoria 1a7af12 pre-commit: Integrate bandit 9744fe5 pre-commit: Bump versions Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 33 ++++++++---------- castellan/key_manager/barbican_key_manager.py | 3 +- castellan/key_manager/vault_key_manager.py | 16 ++++++--- .../notes/vault-timeout-5eebb432e0943f74.yaml | 5 +++ releasenotes/source/2024.1.rst | 6 ++++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- requirements.txt | 4 +-- test-requirements.txt | 7 +--- tox.ini | 33 +++++++----------- 16 files changed, 58 insertions(+), 104 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 24adf8b..edd8c39 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=2.0.0 # Apache-2.0 @@ -11 +11 @@ keystoneauth1>=3.4.0 # Apache-2.0 -requests>=2.18.0,!=2.20.0 # Apache-2.0 +requests>=2.18.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index 54c3fcb..59b2487 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,3 +1 @@ -hacking>=6.1.0,<6.2.0 # Apache-2.0 - -coverage!=4.4,>=4.0 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -12 +9,0 @@ testtools>=2.2.0 # MIT -bandit>=1.6.0,<1.7.0 # Apache-2.0 @@ -14,2 +10,0 @@ pifpaf>=0.10.0 # Apache-2.0 - -pre-commit>=2.6.0 # MIT

1 0

oslo.messaging 14.8.1 (dalmatian)
by no-reply＠openstack.org 04 Jul '24

04 Jul '24

We are psyched to announce the release of: oslo.messaging 14.8.1: Oslo Messaging API This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. 14.8.1 ^^^^^^ Bug Fixes * Force queue deletion when it is not possible de redeclare a queue. See bug 2068630 for details. Changes in oslo.messaging 14.8.0..14.8.1 ---------------------------------------- 0d3338fd Handle NotFound exception when declaring a queue 82d62870 rabbit: Make PreconditionFailed warning log more informative Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/impl_rabbit.py | 27 +++++++++++++++++++++- .../notes/bug-2068630-6ff92f213bc4eca0.yaml | 6 +++++ 2 files changed, 32 insertions(+), 1 deletion(-)

1 0

osc-lib 3.1.0 (dalmatian)
by no-reply＠openstack.org 04 Jul '24

04 Jul '24

We jubilantly announce the release of: osc-lib 3.1.0: OpenStackClient Library This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/osc-lib Download the package from: https://pypi.org/project/osc-lib Please report issues through: https://storyboard.openstack.org/#!/project/openstack/osc-lib For more details, please see below. Changes in osc-lib 3.0.1..3.1.0 ------------------------------- f9bcdec Drop dependency on simplejson 65f47ff reno: Update master for unmaintained/zed 7c096fa Update master for stable/2024.1 011145b reno: Update master for unmaintained/xena bac1ec5 reno: Update master for unmaintained/wallaby 8ffeeef reno: Update master for unmaintained/victoria 7689c38 zuul: Use openstack-python3-jobs template 6032f8b Fix branch selection in zuul config Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 4 ++-- osc_lib/api/api.py | 7 +++---- releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- requirements.txt | 2 +- 9 files changed, 17 insertions(+), 11 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 5fd3a6e..bed0660 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11 @@ oslo.utils>=3.33.0 # Apache-2.0 -simplejson>=3.5.1 # MIT +requests>=2.14.2 # Apache-2.0

1 0

oslo.config 9.5.0 (dalmatian)
by no-reply＠openstack.org 04 Jul '24

04 Jul '24

We joyfully announce the release of: oslo.config 9.5.0: Oslo Configuration API This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/oslo.config Download the package from: https://pypi.org/project/oslo.config Please report issues through: https://bugs.launchpad.net/oslo.config/+bugs For more details, please see below. 9.5.0 ^^^^^ New Features * "Dict" type now supports the "key_value_separator" parameter. This parameter allows using a customized separator between key and value. Changes in oslo.config 9.4.0..9.5.0 ----------------------------------- 4f916ed Fix tests for Python 3.13 3f0c6e9 reno: Update master for unmaintained/zed 311a601 Remove old excludes d193c65 Dict: Support customizing key-value separator 4c767ed Update master for stable/2024.1 8c849f3 reno: Update master for unmaintained/xena b05228a reno: Update master for unmaintained/wallaby 648f979 reno: Update master for unmaintained/victoria c40eacd doc: Drop oslo.db.concurrency namespace Diffstat (except docs and test files) ------------------------------------- oslo_config/types.py | 19 +++++++++++++++---- .../dict-key-value-separator-127ce36ba4d9245f.yaml | 5 +++++ releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- setup.cfg | 2 +- test-requirements.txt | 5 +---- 14 files changed, 48 insertions(+), 21 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 8fcdd84..e4fcd92 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -15,4 +15 @@ oslo.log>=3.36.0 # Apache-2.0 -# when we can require tox>= 1.4, this can go into tox.ini: -# [testenv:cover] -# deps = {[testenv]deps} coverage -coverage!=4.4,>=4.0 # Apache-2.0 +coverage>=4.0 # Apache-2.0

1 0

oslo.utils 7.2.0 (dalmatian)
by no-reply＠openstack.org 04 Jul '24

04 Jul '24

We are excited to announce the release of: oslo.utils 7.2.0: Oslo Utility library This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/oslo.utils Download the package from: https://pypi.org/project/oslo.utils Please report issues through: https://bugs.launchpad.net/oslo.utils/+bugs For more details, please see below. Changes in oslo.utils 7.1.0..7.2.0 ---------------------------------- d02659d reno: Update master for unmaintained/zed 81a5f66 Remove old excludes 5aaabf6 Update master for stable/2024.1 14bdc08 reno: Update master for unmaintained/xena e3fc92d reno: Update master for unmaintained/wallaby 7a3dd70 reno: Update master for unmaintained/victoria a14bc13 netutils: Explicitly require INET_ATON Diffstat (except docs and test files) ------------------------------------- oslo_utils/netutils.py | 5 +++-- releasenotes/source/2024.1.rst | 6 ++++++ releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- requirements.txt | 2 +- test-requirements.txt | 7 ++----- 10 files changed, 18 insertions(+), 16 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index be2c366..07fe867 100644 --- a/requirements.txt +++ b/requirements.txt @@ -9 +9 @@ pytz>=2013.6;python_version<"3.9" # MIT -netaddr>=0.7.18 # BSD +netaddr>=0.10.0 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 2a80df1..4af9398 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1 +1 @@ -eventlet>=0.18.2,!=0.18.3,!=0.20.1,!=0.21.0,!=0.23.0 # MIT +eventlet>=0.18.2 # MIT @@ -9,4 +9 @@ stestr>=2.0.0 # Apache-2.0 -# when we can require tox>= 1.4, this can go into tox.ini: -# [testenv:cover] -# deps = {[testenv]deps} coverage -coverage!=4.4,>=4.0 # Apache-2.0 +coverage>=4.0 # Apache-2.0

1 0

oslo.cache 3.8.0 (dalmatian)
by no-reply＠openstack.org 04 Jul '24

04 Jul '24

We are tickled pink to announce the release of: oslo.cache 3.8.0: Cache storage for OpenStack projects. This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/oslo.cache Download the package from: https://pypi.org/project/oslo.cache Please report issues through: https://bugs.launchpad.net/oslo.cache/+bugs For more details, please see below. 3.8.0 ^^^^^ New Features * The new "[cache] redis_db" option has been added, so that a non- default database can be used. * The "dogpile.cache.redis" backend and "dogpile.cache.redis_sentinel" backend now supports enabling socket keepalive configurations by setting the "[cache] enable_socket_keepalive" option to "True". Use the "socket_keepalive_*" options to tune keepalive behavior. Changes in oslo.cache 3.7.0..3.8.0 ---------------------------------- 48dbe78 redis: Make database id configurable bb468f2 Use f-string when creating config dict 3203778 Redis Sentinel: Use dogpile.cache interface for username 0368f02 reno: Update master for unmaintained/zed 299ccb9 Remove old excludes fe55f2c Redis: Support socket keepalive 8953a43 Update master for stable/2024.1 94e4e3c reno: Update master for unmaintained/xena 69ebaef reno: Update master for unmaintained/wallaby 72b76b4 reno: Update master for unmaintained/victoria Diffstat (except docs and test files) ------------------------------------- oslo_cache/_opts.py | 4 + oslo_cache/core.py | 113 +++++++------- releasenotes/notes/redis-db-adb38e980f171dc9.yaml | 5 + .../redis-socket-keepalive-4c6cfde0be827282.yaml | 7 + releasenotes/source/2024.1.rst | 6 + releasenotes/source/index.rst | 1 + releasenotes/source/victoria.rst | 2 +- releasenotes/source/wallaby.rst | 2 +- releasenotes/source/xena.rst | 2 +- releasenotes/source/zed.rst | 2 +- requirements.txt | 2 +- setup.cfg | 2 +- test-requirements.txt | 2 +- 15 files changed, 247 insertions(+), 81 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 410731a..fa24c25 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1 +1 @@ -dogpile.cache>=1.1.5 # BSD +dogpile.cache>=1.3.1 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index e60f707..66e83a5 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -7 +7 @@ python-memcached>=1.56 # PSF -pymongo!=3.1,>=3.0.2 # Apache-2.0 +pymongo>=3.0.2 # Apache-2.0

1 0

oslo.db 16.0.0 (dalmatian)
by no-reply＠openstack.org 04 Jul '24

04 Jul '24

We are pleased to announce the release of: oslo.db 16.0.0: Oslo Database library This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. 16.0.0 ^^^^^^ Upgrade Notes * The "oslo_db.concurrency.TpoolDbapiWrapper" class and supporting "[database] use_tpool" config option have been removed. Changes in oslo.db 15.1.0..16.0.0 --------------------------------- 94926c4 Omit params for execute if empty 59fa4bc Remove [database] use_tpool and TpoolDbapiWrapper Diffstat (except docs and test files) ------------------------------------- oslo_db/concurrency.py | 97 ------------------ oslo_db/sqlalchemy/enginefacade.py | 6 +- .../notes/remove-use_tpool-29a8bf9fc68a9bb2.yaml | 5 + setup.cfg | 1 - 6 files changed, 9 insertions(+), 214 deletions(-)

1 0

oslo.log 6.1.0 (dalmatian)
by no-reply＠openstack.org 04 Jul '24

04 Jul '24

We enthusiastically announce the release of: oslo.log 6.1.0: oslo.log library This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/oslo.log Download the package from: https://pypi.org/project/oslo.log Please report issues through: https://bugs.launchpad.net/oslo.log/+bugs For more details, please see below. 6.1.0 ^^^^^ New Features ************ * The new "log_color" option has been added. When this option is set to "False", color keys are not set. Bug Fixes ********* * Remove the usage of the Eventlet debug feature from oslo.log Then hub_prevent_multiple_readers is a debug convenience. This feature is a debug convenience. The problem with disabling this procedure is that it exposes you to risks (https://eventlet.readthedocs.io/en/la test/reference/api/eventlet.html#eventlet.debug.hub_prevent_multipl e_readers). Deactivation applies to the entire stack. If a project uses oslo.log, for example nova, then it exposes all threads to concurrent access on the process file descriptors. When several greenlets are reading from the same socket, it's difficult to predict which greenlet will receive which data. That services using oslo.log should prefer using tpool rather than un-monkey patched version of stdlib threading module which is not compatible with eventlet. Changes in oslo.log 6.0.0..6.1.0 -------------------------------- 60c39a3 Replace deprecated logging.warn() calls with logging.warning() 9c717f1 add a missing link to the release note 8705f67 Remove the usage of the Eventlet debug feature from oslo.log. cdda78e Add option to disable color Diffstat (except docs and test files) ------------------------------------- oslo_log/_options.py | 5 +++++ oslo_log/log.py | 12 ++++++++---- oslo_log/pipe_mutex.py | 15 --------------- releasenotes/notes/log_color-531437cab4477bcb.yaml | 5 +++++ ...b_prevent_multiple_readers-usage-b23cea69a05cd6d4.yaml | 14 ++++++++++++++ 7 files changed, 40 insertions(+), 33 deletions(-)

1 0

python-ironicclient 5.7.0 (dalmatian)
by no-reply＠openstack.org 03 Jul '24

03 Jul '24

We are tickled pink to announce the release of: python-ironicclient 5.7.0: OpenStack Bare Metal Provisioning API Client Library This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-ironicclient Download the package from: https://pypi.org/project/python-ironicclient Please report issues through: https://bugs.launchpad.net/python-ironicclient/+bugs For more details, please see below. 5.7.0 ^^^^^ New Features ************ * Adds "name" field support, which is introduced in ironic API 1.88. * Traits can be specified and applied for nodes to be created with the "openstack baremetal create" command. Bug Fixes ********* * Fixes the issue that "--description-contains" does not work when trying to query nodes with description filter. Changes in python-ironicclient 5.6.0..5.7.0 ------------------------------------------- b35b79b Fixes the description filter ba06bee Support traits configuration on baremetal create CLI 0357ed5 Client support port name a1761b8 Fix functional test run 54825ab Add test for driver raid property list Diffstat (except docs and test files) ------------------------------------- ironicclient/common/http.py | 2 +- ironicclient/osc/v1/baremetal_port.py | 24 ++++++++++++++ .../osc/v1/test_baremetal_driver_basic.py | 17 ++++++++++ ironicclient/v1/create_resources.py | 3 ++ ironicclient/v1/node.py | 7 +++- ironicclient/v1/port.py | 2 +- ironicclient/v1/resource_fields.py | 2 ++ playbooks/functional/run.yaml | 5 +-- .../fix-description-contains-03f2c32268495660.yaml | 5 +++ releasenotes/notes/port-name-6b1bf35a3939bedb.yaml | 4 +++ ...aits-for-baremetal-create-36af46998feca011.yaml | 5 +++ 17 files changed, 144 insertions(+), 27 deletions(-)

1 0

python-manilaclient 4.9.1 (dalmatian)
by no-reply＠openstack.org 03 Jul '24

03 Jul '24

We are pumped to announce the release of: python-manilaclient 4.9.1: Client library for OpenStack Manila API. This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-manilaclient Download the package from: https://pypi.org/project/python-manilaclient Please report issues through: https://bugs.launchpad.net/python-manilaclient/+bugs For more details, please see below. 4.9.1 ^^^^^ Bug Fixes * Share network create command failed with 2.32 version of api, due to set availability zone argument for old version of create function, which doesn't have this argument. The bug was fixed by adding a check that the user set the availability zone in query. Changes in python-manilaclient 4.9.0..4.9.1 ------------------------------------------- ae363bd Don't set availability_zone for 2.32 version of api 48fbad6 Fix show info about share network 69083c7 Remove old excludes Diffstat (except docs and test files) ------------------------------------- manilaclient/osc/v2/share_networks.py | 21 ++++++++++++++------- ...9-fix-share-network-create-fa76f38f1b640001.yaml | 7 +++++++ requirements.txt | 10 +++------- test-requirements.txt | 2 +- 6 files changed, 27 insertions(+), 21 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 283aab0..ca78e2b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5,4 +4,0 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - @@ -10 +6 @@ -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=3.0.0 # Apache-2.0 @@ -14 +10 @@ oslo.log>=3.36.0 # Apache-2.0 -oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 +oslo.serialization>=2.20.0 # Apache-2.0 @@ -19 +15 @@ simplejson>=3.5.1 # MIT -Babel!=2.4.0,>=2.3.4 # BSD +Babel>=2.5.0 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index aae70c7..ea299ae 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -3 +3 @@ hacking>=6.1.0,<6.2.0 # Apache-2.0 -coverage!=4.4,>=4.0 # Apache-2.0 +coverage>=4.4.1 # Apache-2.0

1 0

python-cloudkittyclient 5.2.0 (dalmatian)
by no-reply＠openstack.org 03 Jul '24

03 Jul '24

We contentedly announce the release of: python-cloudkittyclient 5.2.0: API client of cloudkitty, Rating as a Service project. This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-cloudkittyclient Download the package from: https://pypi.org/project/python-cloudkittyclient Please report issues through: https://storyboard.openstack.org/#!/project/openstack/python- cloudkittyclient For more details, please see below. Changes in python-cloudkittyclient 5.1.0..5.2.0 ----------------------------------------------- 98c1330 add group by time help to CLI Diffstat (except docs and test files) ------------------------------------- cloudkittyclient/v2/summary_cli.py | 14 ++++++++++++-- 1 file changed, 12 insertions(+), 2 deletions(-)

1 0

sushy 5.1.1 (dalmatian)
by no-reply＠openstack.org 03 Jul '24

03 Jul '24

We exuberantly announce the release of: sushy 5.1.1: Sushy is a small Python library to communicate with Redfish based systems This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://bugs.launchpad.net/sushy/+bugs For more details, please see below. Changes in sushy 5.1.0..5.1.1 ----------------------------- 2ac3287 Fix link to bugs eb3aa8e Trivial: fix duplicated docstring Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- sushy/resources/registry/attribute_registry.py | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-)

1 0

python-neutronclient 11.3.1 (dalmatian)
by no-reply＠openstack.org 03 Jul '24

03 Jul '24

We are amped to announce the release of: python-neutronclient 11.3.1: CLI and Client Library for OpenStack Networking This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-neutronclient Download the package from: https://pypi.org/project/python-neutronclient Please report issues through: https://bugs.launchpad.net/python-neutronclient/+bugs For more details, please see below. Changes in python-neutronclient 11.3.0..11.3.1 ---------------------------------------------- 2169b2b Fix insert and remove rule from firewall policy Diffstat (except docs and test files) ------------------------------------- neutronclient/osc/v2/fwaas/firewallpolicy.py | 4 ++-- 2 files changed, 10 insertions(+), 10 deletions(-)

1 0

openstacksdk 3.2.0 (dalmatian)
by no-reply＠openstack.org 03 Jul '24

03 Jul '24

We are jazzed to announce the release of: openstacksdk 3.2.0: An SDK for building applications to work with OpenStack This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/openstacksdk Download the package from: https://pypi.org/project/openstacksdk Please report issues through: https://storyboard.openstack.org/#!/project/openstack/openstacksdk For more details, please see below. 3.2.0 ^^^^^ New Features ************ * Add functionality to list DNS resources for a certain project only, or for all projects, using the new *project_id* and *all_projects* parameters. * Add support for service providers to the identity service. * Add support for deleting all objects inside a namespace. * Added get and update to Quota Class Set to file system as a service. * The "Server.clear_password" and equivalent "clear_server_password" proxy method have been added. * The following new compute proxy methods have been added: * "add_tag_to_server" * "remove_tag_from_server" * "remove_tags_from_server" * Added support for managing volume image metadata. * "openstack.network.v2.bgpvpn.BgpVpn" can now be filtered by its associations to *networks*, *routers* and *ports. Additionally, filtering for the attributes `name*, *project_id*, *local_pref*, *vni* and *type* is now done on server-side. * Add support for "inherited_to" filter for listing identity role assignments in the cloud layer. This allows filtering by whether role grants are inheritable to sub-projects. * Add "Tap Mirror" and introduce the support for creating, reading, updating and deleting "tap_mirrors". Deprecation Notes ***************** * Deprecate "os-inherit-extension-inherited-to" in favor of "inherited_to" filter for listing identity role_assignments in the cloud layer. Changes in openstacksdk 3.1.0..3.2.0 ------------------------------------ d84ef4f9 tests: Rework warnings-related tests 4275dfc5 compute, block storage: Add support for quota class sets 0f311ff3 compute: Add additional server create parameters 0bd02b3a compute: Add support for legacy 'onSharedStorage' param dbf5c975 compute: Add additional options to Server.rebuild 6d98de4f compute: Add server tag proxy methods 67cd6668 compute: Add Server.clear_password action 916f9af6 compute, block storage: Minor fixes to limits 850c99cf [func test] Fix race between attachment delete and server delete 8091075e Remove retired project Senlin job 2b6b32fa baremetal: Decode 'config_drive' argument to 'set_provision_state' 00ed7a5e Identity: Add support for inherited_to for role_assignments 46af31f6 Add support for federation service providers ba975949 docs: Add missing identity v3 proxy API docs 30d5753b reno: Update master for unmaintained/zed fc539d10 pre-commit: Add pyupgrade hook 8b02b045 trivial: Prepare for pyupgrade pre-commit hook 93e2976c tox: Don't install package in pep8 113e4125 Fix AttributeError in delete_limit method a8adbadf cloud: Do not reference other cloud mixin's methods 763e09a4 cloud: Trivial fixes f90fd9a3 cloud: Remove use of OpenStackCloudCreateException 5de45a32 hacking: Add check for deprecated exception types 81d60c78 README: Add guide on raw HTTP layer e67a7b14 pre-commit: Bump versions 761d558e Allow filtering BGPVPNs 4b9a3e91 Extend project cleanup e409254e image: Pass correct stores argument f73335df Add quota class set to shared file system fab08bab Add Binero public cloud to vendor 1610e2da Fix multiple image_id query mappings 7131781a Remove mypy union line which breaks older pythons. 67c1fb82 Adding SDK support for ``glance md-namespace-objects-delete`` 111d72d5 Add Binero public cloud to vendor support 52b86348 volume: Allow passing a volume type object to retype_volume 644087b2 volume: Add ability to set, unset image metadata 52c5d745 volume: Allow setting volume statuses individually be669963 Add Tap Mirrors to SDK 8b84bf0e image: make sure the target for "clear_cache" is valid 16ddc1ca Fixed update_metadef_object e7bdb02f Allow project switching for Designate API 8567c858 Allow tags to be passed through to compute.create_server Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 11 +- README.rst | 113 +++++- .../user/resources/block_storage/v2/limits.rst | 6 +- .../user/resources/block_storage/v3/limits.rst | 8 +- .../user/resources/network/v2/tap_mirror.rst | 12 + .../user/resources/shared_file_system/index.rst | 1 + .../shared_file_system/v2/quota_class_set.rst | 13 + examples/connect.py | 2 +- openstack/{_hacking.py => _hacking/checks.py} | 24 +- openstack/accelerator/v2/accelerator_request.py | 8 +- openstack/accelerator/v2/device_profile.py | 8 +- openstack/baremetal/v1/driver.py | 2 +- openstack/baremetal/v1/node.py | 32 +- .../baremetal_introspection/v1/introspection.py | 2 +- openstack/block_storage/_base_proxy.py | 2 +- openstack/block_storage/v2/_proxy.py | 83 ++++- openstack/block_storage/v2/limits.py | 6 +- openstack/block_storage/v2/quota_class_set.py | 39 ++ openstack/block_storage/v2/volume.py | 37 +- openstack/block_storage/v3/_proxy.py | 94 ++++- openstack/block_storage/v3/limits.py | 14 +- openstack/block_storage/v3/quota_class_set.py | 39 ++ openstack/block_storage/v3/service.py | 2 +- openstack/block_storage/v3/type.py | 2 +- openstack/block_storage/v3/volume.py | 36 +- openstack/cloud/_baremetal.py | 6 +- openstack/cloud/_block_storage.py | 12 +- openstack/cloud/_compute.py | 128 ++++--- openstack/cloud/_dns.py | 4 +- openstack/cloud/_floating_ip.py | 141 ++++--- openstack/cloud/_identity.py | 61 +-- openstack/cloud/_image.py | 9 +- openstack/cloud/_network.py | 27 +- openstack/cloud/_network_common.py | 82 +++-- openstack/cloud/_object_store.py | 5 +- openstack/cloud/_security_group.py | 47 ++- openstack/cloud/_utils.py | 4 +- openstack/cloud/exc.py | 20 +- openstack/cloud/meta.py | 12 +- openstack/cloud/openstackcloud.py | 12 +- openstack/common/quota_set.py | 2 +- openstack/common/tag.py | 3 +- openstack/compute/v2/_proxy.py | 123 ++++++- openstack/compute/v2/flavor.py | 2 +- openstack/compute/v2/keypair.py | 2 +- openstack/compute/v2/limits.py | 35 +- openstack/compute/v2/quota_class_set.py | 61 +++ openstack/compute/v2/quota_set.py | 1 + openstack/compute/v2/server.py | 104 ++++-- openstack/compute/v2/server_remote_console.py | 2 +- openstack/compute/v2/service.py | 4 +- openstack/config/cloud_config.py | 2 +- openstack/config/cloud_region.py | 6 +- openstack/config/defaults.py | 2 +- openstack/config/loader.py | 26 +- openstack/config/vendors/__init__.py | 4 +- openstack/config/vendors/binero.json | 13 + openstack/connection.py | 6 +- openstack/dns/v2/_base.py | 22 +- openstack/dns/v2/_proxy.py | 2 +- openstack/exceptions.py | 14 +- openstack/fixture/connection.py | 2 +- openstack/identity/v3/_proxy.py | 409 +++++++++++++-------- openstack/identity/v3/role_assignment.py | 3 +- openstack/identity/v3/service_provider.py | 48 +++ openstack/image/_download.py | 5 +- openstack/image/v1/_proxy.py | 10 +- openstack/image/v1/image.py | 2 +- openstack/image/v2/_proxy.py | 60 ++- openstack/image/v2/cache.py | 6 +- openstack/image/v2/image.py | 6 +- openstack/image/v2/metadef_namespace.py | 10 + openstack/load_balancer/v2/amphora.py | 10 +- openstack/load_balancer/v2/load_balancer.py | 4 +- openstack/load_balancer/v2/quota.py | 2 +- openstack/message/v2/claim.py | 2 +- openstack/network/v2/_base.py | 2 +- openstack/network/v2/_proxy.py | 106 ++++++ openstack/network/v2/bgpvpn.py | 13 + openstack/network/v2/quota.py | 4 +- openstack/network/v2/security_group_rule.py | 4 +- openstack/network/v2/tap_mirror.py | 54 +++ openstack/object_store/v1/_base.py | 2 +- openstack/object_store/v1/_proxy.py | 17 +- openstack/orchestration/util/event_utils.py | 6 +- openstack/orchestration/util/template_format.py | 4 +- openstack/orchestration/v1/_proxy.py | 2 +- openstack/orchestration/v1/software_config.py | 4 +- openstack/orchestration/v1/software_deployment.py | 8 +- openstack/orchestration/v1/stack.py | 24 +- openstack/proxy.py | 21 +- openstack/resource.py | 44 ++- openstack/shared_file_system/v2/_proxy.py | 37 +- openstack/shared_file_system/v2/quota_class_set.py | 57 +++ openstack/test/fakes.py | 4 +- .../baremetal/test_baremetal_allocation.py | 2 +- .../baremetal/test_baremetal_deploy_templates.py | 2 +- .../functional/baremetal/test_baremetal_node.py | 4 +- .../functional/baremetal/test_baremetal_port.py | 2 +- .../baremetal/test_baremetal_port_group.py | 2 +- .../baremetal/test_baremetal_volume_connector.py | 2 +- .../baremetal/test_baremetal_volume_target.py | 2 +- .../functional/block_storage/v2/test_backup.py | 4 +- .../functional/block_storage/v2/test_snapshot.py | 4 +- .../functional/block_storage/v2/test_stats.py | 2 +- .../functional/block_storage/v2/test_volume.py | 4 +- .../functional/block_storage/v3/test_backup.py | 4 +- .../functional/block_storage/v3/test_snapshot.py | 4 +- .../functional/cloud/test_cluster_templates.py | 2 +- .../functional/cloud/test_floating_ip_pool.py | 2 +- .../cloud/test_qos_bandwidth_limit_rule.py | 2 +- .../functional/cloud/test_qos_dscp_marking_rule.py | 2 +- .../cloud/test_qos_minimum_bandwidth_rule.py | 2 +- .../compute/v2/test_volume_attachment.py | 14 + .../identity/v3/test_application_credential.py | 2 +- .../load_balancer/v2/test_load_balancer.py | 4 +- .../functional/network/v2/test_address_group.py | 4 +- .../functional/network/v2/test_address_scope.py | 4 +- .../network/v2/test_agent_add_remove_network.py | 2 +- .../network/v2/test_agent_add_remove_router.py | 2 +- .../network/v2/test_auto_allocated_topology.py | 4 +- .../network/v2/test_default_security_group_rule.py | 2 +- .../functional/network/v2/test_firewall_group.py | 4 +- .../functional/network/v2/test_firewall_policy.py | 4 +- .../functional/network/v2/test_firewall_rule.py | 4 +- .../v2/test_firewall_rule_insert_remove_policy.py | 4 +- .../functional/network/v2/test_floating_ip.py | 4 +- .../network/v2/test_l3_conntrack_helper.py | 4 +- .../network/v2/test_local_ip_association.py | 4 +- .../network/v2/test_network_ip_availability.py | 4 +- .../network/v2/test_network_segment_range.py | 4 +- .../functional/network/v2/test_port_forwarding.py | 4 +- .../network/v2/test_qos_bandwidth_limit_rule.py | 4 +- .../network/v2/test_qos_dscp_marking_rule.py | 4 +- .../network/v2/test_qos_minimum_bandwidth_rule.py | 4 +- .../v2/test_qos_minimum_packet_rate_rule.py | 4 +- .../functional/network/v2/test_qos_rule_type.py | 2 +- .../functional/network/v2/test_rbac_policy.py | 4 +- .../network/v2/test_router_add_remove_interface.py | 4 +- .../functional/network/v2/test_security_group.py | 4 +- .../network/v2/test_security_group_rule.py | 4 +- .../functional/network/v2/test_service_profile.py | 4 +- .../network/v2/test_subnet_from_subnet_pool.py | 4 +- .../functional/network/v2/test_subnet_pool.py | 4 +- .../functional/object_store/v1/test_account.py | 4 +- .../functional/object_store/v1/test_container.py | 2 +- .../functional/orchestration/v1/test_stack.py | 4 +- .../shared_file_system/test_quota_class_set.py | 43 +++ .../shared_file_system/test_resource_lock.py | 2 +- .../functional/shared_file_system/test_share.py | 4 +- .../shared_file_system/test_share_access_rule.py | 4 +- .../shared_file_system/test_share_group.py | 2 +- .../test_share_group_snapshot.py | 4 +- .../shared_file_system/test_share_instance.py | 2 +- .../shared_file_system/test_share_network.py | 4 +- .../shared_file_system/test_share_snapshot.py | 4 +- .../test_share_snapshot_instance.py | 2 +- .../unit/accelerator/v2/test_device_profile.py | 4 +- .../unit/baremetal_introspection/v1/test_proxy.py | 10 +- .../unit/cloud/test_coe_clusters_certificate.py | 2 +- .../unit/cloud/test_create_volume_snapshot.py | 2 +- .../unit/cloud/test_delete_volume_snapshot.py | 2 +- .../unit/cloud/test_server_delete_metadata.py | 2 +- .../unit/clustering/v1/test_cluster_policy.py | 2 +- .../unit/compute/v2/test_server_remote_console.py | 2 +- .../unit/identity/v3/test_service_provider.py | 62 ++++ .../unit/orchestration/v1/test_stack_event.py | 2 +- .../unit/orchestration/v1/test_stack_files.py | 8 +- .../shared_file_system/v2/test_quota_class_set.py | 99 +++++ .../shared_file_system/v2/test_share_instance.py | 2 +- openstack/workflow/v2/cron_trigger.py | 4 +- ...-resource-list-by-project-8b5479a045ef7373.yaml | 6 + ...-service-provider-support-8c97cbb157883626.yaml | 4 + ...mespace-object-delete-all-6cea62cb038012df.yaml | 5 + ...et-to-shared-file-systems-43da33e6a3ed65e3.yaml | 4 + ...add-server-clear-password-256e269223453bd7.yaml | 5 + ...-server-tag-proxy-methods-c791a36d8d4d85f6.yaml | 8 + ...me-image-metadata-support-c61bcb918fdff529.yaml | 4 + .../bgpvpn-list-filters-e76183a7008c0631.yaml | 7 + ...nherited-role-assignments-8fe9ac9509d99f4d.yaml | 11 + .../network-add-tap-mirror-46376bd98ee69c81.yaml | 5 + releasenotes/source/conf.py | 1 - releasenotes/source/zed.rst | 2 +- tools/keystone_version.py | 8 +- tools/print-services.py | 10 +- tox.ini | 9 +- zuul.d/functional-jobs.yaml | 28 +- zuul.d/project.yaml | 2 - 405 files changed, 4246 insertions(+), 1830 deletions(-)

1 0

ovsdbapp 2.8.0 (dalmatian)
by no-reply＠openstack.org 03 Jul '24

03 Jul '24

We are excited to announce the release of: ovsdbapp 2.8.0: A library for creating OVSDB applications This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/ovsdbapp Download the package from: https://tarballs.openstack.org/ovsdbapp/ Please report issues through: https://bugs.launchpad.net/ovsdbapp/+bugs For more details, please see below. Changes in ovsdbapp 2.7.1..2.8.0 -------------------------------- eb8a07a Use log.warning() from the logging library f45ee76 Improve compatibility with netaddr 1.x Diffstat (except docs and test files) ------------------------------------- ovsdbapp/backend/ovs_idl/vlog.py | 2 +- ovsdbapp/utils.py | 2 +- requirements.txt | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 778430d..b15760c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -5 +5 @@ fixtures>=3.0.0 # Apache-2.0/BSD -netaddr>=0.7.18 # BSD +netaddr>=0.10.0 # BSD

1 0

python-barbicanclient 7.0.0 (dalmatian)
by no-reply＠openstack.org 03 Jul '24

03 Jul '24

We high-spiritedly announce the release of: python-barbicanclient 7.0.0: Client Library for OpenStack Barbican Key Management API This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/python-barbicanclient Download the package from: https://tarballs.openstack.org/python-barbicanclient/ Please report issues through: https://bugs.launchpad.net/python-barbicanclient/+bugs For more details, please see below. 7.0.0 ^^^^^ Upgrade Notes * Support for certificate order has been removed. Changes in python-barbicanclient 6.0.0..7.0.0 --------------------------------------------- e688a6f Remove support for certificate order Diffstat (except docs and test files) ------------------------------------- barbicanclient/barbican_cli/v1/orders.py | 46 ++-------- barbicanclient/v1/orders.py | 97 +--------------------- .../remove-certificate-order-b7ba806f1a918657.yaml | 4 + 4 files changed, 13 insertions(+), 210 deletions(-)

1 0

metalsmith 2.3.0 (dalmatian)
by no-reply＠openstack.org 03 Jul '24

03 Jul '24

We are jazzed to announce the release of: metalsmith 2.3.0: Deployment and Scheduling tool for Bare Metal This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/metalsmith Download the package from: https://tarballs.openstack.org/metalsmith/ Please report issues through: https://bugs.launchpad.net/metalsmith/+bugs For more details, please see below. Changes in metalsmith 2.2.0..2.3.0 ---------------------------------- dd5dc4e Error with clarity when a bad upgrade was encountered Diffstat (except docs and test files) ------------------------------------- metalsmith/_provisioner.py | 48 ++++++++++++++++++++++++----- metalsmith/test/test_provisioner.py | 61 ++++++++++++++++++++++++++++++++++--- 2 files changed, 96 insertions(+), 13 deletions(-)

1 0