- Release-announce - lists.openstack.org

kolla 13.0.1 (xena)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are glad to announce the release of: kolla 13.0.1: Kolla OpenStack Deployment This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 13.0.1 ^^^^^^ Bug Fixes * CentOS "nova-compute" image has "linux-firmware" package removed to save image size by ~500MB. LP#1926801 * Fixes "Permission denied" issue for swift-recon tool that appears when swift-recon tool tries to access deafult recon_lock_path * Nova images are built without "pypowervm" package. It is needed only for POWER architecture support (which we do not support) and breaks CentOS builds by trying to install (Python 2 only) 'futures' package. * Ensures the "nvme-cli" package is present in "nova-compute" images, as it expected by "os-brick". Changes in kolla 13.0.0..13.0.1 ------------------------------- 24fba48e8 nova: drop pypowervm dependency 56d639283 Ensure nvme-cli is present in nova-compute images c02ec3f8e nova-compute: trim image a bit on CentOS 0d8d2f40c Add Swift lock path in Swift containers Diffstat (except docs and test files) ------------------------------------- releasenotes/notes/bug-1946801-5f3af3c44e567fcf.yaml | 6 ++++++ .../notes/fix-lock-swift-path-9b743367e4014f92.yaml | 5 +++++ .../notes/nova-drop-pypowervm-256048c2a9cd594d.yaml | 6 ++++++ releasenotes/notes/nova-nvme-cli-bf940ad0005cac80.yaml | 5 +++++ 8 files changed, 41 insertions(+), 9 deletions(-)

1 0

kayobe 9.2.0 (victoria)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are gleeful to announce the release of: kayobe 9.2.0: Deployment of OpenStack to bare metal using OpenStack kolla and bifrost This release is part of the victoria stable release series. The source is available from: https://opendev.org/openstack/kayobe Download the package from: https://tarballs.openstack.org/kayobe/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/kayobe For more details, please see below. 9.2.0 ^^^^^ New Features ************ * Adds a new "kolla_bifrost_use_firewalld" variable used to define whether Bifrost uses firewalld, which is now disabled by default. * Adds support for configuring the "filter" and "gather_subset" arguments for the "setup" module via "kayobe_ansible_setup_filter" and "kayobe_ansible_setup_gather_subset" respectively. These can be used to reduce the number of facts, which can have a significant effect on performance of Ansible. * Adds a new command, "kayobe overcloud facts gather", to gather Ansible facts for overcloud hosts. This may be useful for populating a fact cache. * Adds support for the "metalink" option in custom DNF repositories configured with "dnf_custom_repos" in "dnf.yml". Upgrade Notes ************* * Updates all references to Ansible facts within Kayobe from using individual fact variables to using the items in the "ansible_facts" dictionary. This allows users to disable fact variable injection in their Ansible configuration, which may provide some performance improvement. Check for facts referenced in local configuration files, and update to use "ansible_facts" before disabling fact variable injection. * Bifrost is now configured to avoid using firewalld, to prevent conflicts with firewall rules set by Kayobe on the seed host. The existing behaviour can be retained by setting "kolla_bifrost_use_firewalld" to "True" in "bifrost.yml". * Removes the workaround for bogus name server entries in some CentOS 7 images, together with the "overcloud_host_image_workaround_resolv_enabled" variable. Bug Fixes ********* * Prevents Bifrost from using firewalld to avoid conflicts with firewall rules set by Kayobe on the seed host. See story 2009252 for more details. * Sets proxy option when using "dnf" during user bootstrapping, before "dnf.conf" is updated. This allows Kayobe to install Python 3 during host configuration when "dnf" requires a proxy to operate. * Fixes an issue bug where introspection data save would fail. See story 2009129 for more details. * Filter out 25 Gigabit Ethernet interface names in the Ironic inspector rule setting node names from interface LLDP switch port descriptions. * Fixes a failure to detect the Kayobe installation prefix when "lib" is present multiple times in the installation path. See story 2009721 for details. Changes in kayobe 9.1.0..9.2.0 ------------------------------ 6180c4d8 docs: Improve all-in-one scenario c0073e7e Fix installation prefix detection 7bade28f CI: always return host configure test results a518ac34 Remove stale config dump from seed hypervisor host configure 0a3ab6e3 Add the missing documentation for mariadb recovery e3af71b6 CI: enable DNF tests on CentOS Stream 8 2d658cdc Set proxy option in early dnf invocation 3e99a3e9 Prevent Bifrost from using firewalld 459b6880 Remove CentOS 7 image resolv.conf workaround 68960f60 Fix IPA builder version typo f8486397 Fix wrong filename in bifrost docs 157e9b9d CI: Fix bashate ignores 8e1b8905 Make setup module arguments configurable b588b805 CI: Disable libvirt debug logs 0cccd22e Add missing quotes to Docker registry TLS example aabb6abf CI: Log disk usage details 30473356 Sync documentation with kolla_openstack_custom_config 46bbe36c CI: build CentOS Stream deployment images b0978e77 Fix typo in IP allocation filename 7bf2ab99 Use ansible_facts to reference facts 18460ecf CI: Fix get_logs.sh docker logs output 11554bd3 CI: Add CentOS Stream 8 750a17c4 Fix overcloud introspection data save 9e98ce3b Add twentyFiveGigE to port descriptions in inspector rules 761665ff dnf: add metalink argument to custom dnf repository 90f07dce Sync Kolla Ansible feature flags aacb2709 Remove stale DIB_DISABLE_KERNEL_CLEANUP references Diffstat (except docs and test files) ------------------------------------- ansible/container-image-build.yml | 4 +- ansible/disable-selinux.yml | 4 +- ansible/dnf.yml | 2 +- ansible/group_vars/all/bifrost | 4 + ansible/group_vars/all/globals | 11 ++ ansible/group_vars/all/inspector | 4 + ansible/group_vars/all/overcloud | 11 -- ansible/group_vars/all/time | 2 +- ansible/host-package-update.yml | 2 +- ansible/kayobe-ansible-user.yml | 6 +- ansible/kayobe-target-venv.yml | 18 ++- ansible/kolla-target-venv.yml | 8 +- ansible/network.yml | 2 + ansible/overcloud-etc-hosts-fixup.yml | 4 +- ansible/overcloud-facts-gather.yml | 10 ++ ansible/overcloud-host-image-workaround-resolv.yml | 35 ----- ansible/overcloud-introspection-data-save.yml | 2 +- ansible/overcloud-ipa-build.yml | 2 +- ansible/overcloud-ipa-images.yml | 4 +- ansible/roles/bootstrap/tasks/main.yml | 4 +- ansible/roles/disable-selinux/tasks/main.yml | 2 +- ansible/roles/dnf/tasks/custom-repo.yml | 3 +- ansible/roles/docker-registry/tasks/config.yml | 16 +- ansible/roles/docker/tasks/main.yml | 2 +- ansible/roles/inspection-store/tasks/config.yml | 4 +- ansible/roles/ipa-images/tasks/main.yml | 8 +- .../kolla-ansible-host-vars/templates/host-vars.j2 | 2 + ansible/roles/kolla-ansible/defaults/main.yml | 2 +- ansible/roles/kolla-ansible/tasks/config.yml | 4 +- ansible/roles/kolla-ansible/tasks/install.yml | 12 +- ansible/roles/kolla-ansible/vars/main.yml | 36 ++++- .../roles/kolla-bifrost/templates/bifrost.yml.j2 | 3 + .../roles/kolla-openstack/templates/ironic.conf.j2 | 2 +- ansible/roles/kolla/defaults/main.yml | 2 +- ansible/roles/kolla/tasks/config.yml | 4 +- ansible/roles/kolla/tasks/install.yml | 12 +- ansible/roles/ssh-known-host/tasks/main.yml | 2 +- ansible/seed-ipa-build.yml | 2 +- ansible/seed-service-upgrade-prep.yml | 2 +- ansible/seed-vm-provision.yml | 8 +- ansible/snat.yml | 4 +- ansible/timezone.yml | 2 +- .../configuration/reference/docker-registry.rst | 4 +- .../configuration/reference/kolla-ansible.rst | 2 + .../configuration/scenarios/all-in-one/index.rst | 82 +++++++++-- .../scenarios/all-in-one/overcloud.rst | 161 +++++++++++++++++---- etc/kayobe/bifrost.yml | 6 +- etc/kayobe/globals.yml | 11 ++ etc/kayobe/ipa.yml | 2 +- etc/kayobe/kolla.yml | 37 ++++- etc/kayobe/overcloud.yml | 11 -- kayobe/ansible.py | 1 + kayobe/cli/commands.py | 30 ++-- kayobe/utils.py | 9 +- playbooks/kayobe-base/pre.yml | 14 ++ playbooks/kayobe-overcloud-base/globals.yml.j2 | 3 + .../kayobe-overcloud-host-configure-base/run.yml | 20 +-- .../kayobe-overcloud-upgrade-base/globals.yml.j2 | 3 + playbooks/kayobe-seed-base/overrides.yml.j2 | 11 +- .../kayobe-seed-upgrade-base/overrides.yml.j2 | 1 + .../notes/ansible-facts-2b3389a2534d47a2.yaml | 10 ++ .../bifrost-use-firewalld-90b69e2ac6eead67.yaml | 16 ++ releasenotes/notes/dnf-proxy-22a6eb457c06a223.yaml | 6 + ...x-introspection-data-save-51001baa37d97084.yaml | 6 + .../inspector-25gbe-port-9bdc3bb354e3dfb6.yaml | 5 + ...stall-prefix-multiple-lib-9288e8c11da3c0bc.yaml | 6 + ...ve-resolv-conf-workaround-4cb484d3a66c4e58.yaml | 6 + .../notes/setup-module-args-2c36e56bf78ab5f0.yaml | 11 ++ .../yum-repository-metalink-26afa7c9f7026539.yaml | 5 + requirements.yml | 28 ++-- roles/kayobe-diagnostics/files/get_logs.sh | 4 +- setup.cfg | 3 + tools/run-bashate.sh | 2 +- zuul.d/jobs.yaml | 37 +++++ zuul.d/nodesets.yaml | 6 + zuul.d/project.yaml | 15 +- 84 files changed, 759 insertions(+), 255 deletions(-)

1 0

kolla 12.1.0 (wallaby)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are satisfied to announce the release of: kolla 12.1.0: Kolla OpenStack Deployment This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/kolla Download the package from: https://tarballs.openstack.org/kolla/ Please report issues through: https://bugs.launchpad.net/kolla/+bugs For more details, please see below. 12.1.0 ^^^^^^ New Features ************ * Add masakari-dashboard to debian binary horizon image. * Support for Debian/Ubuntu binary (aka packaged) CloudKitty images. * Adds support for the "ironic-neutron-agent" image in Debian and Ubuntu binary images. Also adds support for the "baremetal" ML2 driver in the "neutron-server" image in Debian and Ubuntu binary images. * Improve the way offline scenario are supported: * Switching dumb-init installation to distribution provided packages. * Allow to set group for user. Upgrade Notes ************* * Debian now uses upstream MariaDB repos (thus following Ubuntu images). This is done to avoid issues like the related one and have an easy workaround of pinning to chosen MariaDB version if need arises. Operators may want to reflect this in their repo mirrors and proxies. LP#1944410 * "Gnocchi" version has been updated to "4.4.1". Bug Fixes ********* * Adds an option to the monasca-thresh container which checks if the topology is currently submitted (KOLLA_BOOTSTRAP), with an option to kill it (TOPOLOGY_REPLACE). Topology names and various timeouts may be customized. LP#1808805 * Fixes missing boto3 library required by glance_store. LP#1884259 * Fixes an issue with logs going missing in the Fluentd pipeline by pinning td-agent to 4.0.* also on Debian. LP#1930867 [Debian] * Fix missing default policy files for debian-binary-horizon. LP#1933759 * Fixes user uid inconsistency beetween base and openstack-base debian binary images. LP#1934753 * Add missing pacemaker cli utils to Debian hacluster images. LP#1934788 * Fixes an issue with cinder-volume missing "lsscsi" and "nvme" commands on Debian and Ubuntu. LP#1942038 * Fixes kolla-toolbox ansible.log logging for different users than ansible. LP#1942846 * CentOS "nova-compute" image has "linux-firmware" package removed to save image size by ~500MB. LP#1926801 * Fixes an issue with Elasticsearch curator not working due to too new python elasticsearch library. LP#1941073 * Fixes "Permission denied" issue for swift-recon tool that appears when swift-recon tool tries to access deafult recon_lock_path * Fixes an issue with the logstash image which was incompatible with the last OSS version (7.10) of Elasticsearch. Logstash is now pinned to 7.9. LP#1941754 * Ensures the "nvme-cli" package is present in "nova-compute" images, as it expected by "os-brick". Changes in kolla 12.0.1..12.1.0 ------------------------------- 0b45557bd Ensure nvme-cli is present in nova-compute images 3c33f878c nova-compute: trim image a bit on CentOS f81e7939f Add Swift lock path in Swift containers 6448d3d21 cinder-volume/ubuntu: add lsscsi and nvme c9a71e977 gnocchi: update to 4.4.1 0366a31d2 logstash: pin to 7.9.* for Elasticsearch OSS compatibility fe7b66323 [debian] Use upstream MariaDB 22a003276 toolbox: Move custom Ansible config to global location c978baf14 Fix Elasticsearch Curator f0ffe4050 debian: Change influxdb, rabbitmq and td-agent repos to bullseye 1ec1d8b46 Pin td-agent to 4.0.* also on Debian af76e6703 [doc] Ubuntu has Ceph Pacific in Wallaby+ 333f02a07 Allow build debian/ubuntu-binary cloudkitty images 3567cffb2 ironic-neutron-agent: enable for Debuntu binary 571572a25 Add some system users to fix user uid inconsistencies b7b9d3855 base/deb: bump 'system' groups limit beyond Kolla ones 69a6809b1 Config: allow to set group for user d8eed6c0c Fix naming of CentOS Stream in reno 4a0d2ce11 monasca-thresh: Allow topology check and removal in storm ac18704dd Fix missing pacemaker-cli-utils in Debian hacluster images b927e6a41 Add missing default policy files for debian-binary-horizon a7c5173b3 Add boto3 as s3 dependency for Glance container 57ddaad7a Add masakari-dashboard to debian binary horizon image 25d7f48c1 Improve offline build scenario. Diffstat (except docs and test files) ------------------------------------- .../cloudkitty/cloudkitty-processor/Dockerfile.j2 | 5 +- .../elasticsearch-curator/Dockerfile.j2 | 2 + .../hacluster-pacemaker-remote/Dockerfile.j2 | 6 ++ .../monasca/monasca-thresh/topology_bootstrap.sh | 90 ++++++++++++++++++++++ .../ironic-neutron-agent/Dockerfile.j2 | 5 +- kolla/common/config.py | 16 +++- kolla/image/build.py | 5 +- kolla/template/repos.yaml | 14 ++-- .../add-masakari-dashboard-eae5f216888e5fe0.yaml | 3 + .../notes/bug-1808805-e63af01591f03506.yaml | 8 ++ .../notes/bug-1884259-23bdaa6c1c038a81.yaml | 5 ++ .../notes/bug-1930867-debian-c01f2cd22d8c10f0.yaml | 6 ++ .../notes/bug-1933759-c03e50c243850a49.yaml | 5 ++ .../notes/bug-1934753-98ec4951a0f7373b.yaml | 6 ++ .../notes/bug-1934788-b1fd51f443479fb6.yaml | 5 ++ .../notes/bug-1942038-f1d96ae352f73bd1.yaml | 6 ++ .../notes/bug-1942846-1216faacacba94be.yaml | 5 ++ .../notes/bug-1946801-5f3af3c44e567fcf.yaml | 6 ++ .../notes/centos-8-stream-b5b45ccee94f7cf5.yaml | 2 +- ...cloudkitty-debuntu-binary-09b182fc672b7d77.yaml | 4 + .../debian-mariadb-upstream-75e05cbdaa013abe.yaml | 10 +++ ...untu-ironic-neutron-agent-6534d616b37643a8.yaml | 6 ++ ...fix-elasticsearch-curator-7876896ebbd41ad3.yaml | 6 ++ .../fix-lock-swift-path-9b743367e4014f92.yaml | 5 ++ .../notes/gnocchi-4.4.1-1332afc3c6fca766.yaml | 4 + .../improve_offline_support-e7b2384fb7390184.yaml | 5 ++ .../notes/logstash-7.9-30fd90e921037a8a.yaml | 6 ++ .../notes/nova-nvme-cli-bf940ad0005cac80.yaml | 5 ++ .../notes/set-group-for-user-aa9b3eae69d8f6a0.yaml | 3 + 50 files changed, 341 insertions(+), 56 deletions(-)

1 0

aodhclient 2.3.1 (xena)
by no-reply＠openstack.org 03 Jan '22

03 Jan '22

We are ecstatic to announce the release of: aodhclient 2.3.1: Python client library for Aodh This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/aodhclient Download the package from: https://pypi.org/project/aodhclient For more details, please see below. Changes in aodhclient 2.3.0..2.3.1 ---------------------------------- 90067b6 Fix aodhclient for pyparse 3.0.6 Diffstat (except docs and test files) ------------------------------------- aodhclient/utils.py | 2 +- 2 files changed, 1 insertion(+), 176 deletions(-)

1 0

octavia 9.0.1 (xena)
by no-reply＠openstack.org 23 Dec '21

23 Dec '21

We are glad to announce the release of: octavia 9.0.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the xena stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 9.0.1 ^^^^^ Bug Fixes * Fix an issue with the provisioning status of a load balancer that was set to ERROR too early when an error occurred, making the load balancer mutable while the execution of the tasks for this resources haven't finished yet. * Fix an issue that could set the provisioning status of a load balancer to a PENDING_UPDATE state when an error occurred in the amphora failover flow. Changes in octavia 9.0.0..9.0.1 ------------------------------- 4039d35c Fix LB set in ERROR too early in the revert flow 45c992c1 Fix failover of az-specific loadbalancers 8681637d Fix management network selection when calculating deltas 26c75ccd Pin pylint on stable/xena a741bcea Update TOX_CONSTRAINTS_FILE for stable/xena 50db4b50 Update .gitreview for stable/xena Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../amphora-agent/source-repository-amphora-agent | 4 +- elements/octavia-lib/source-repository-octavia-lib | 2 +- .../worker/v1/tasks/amphora_driver_tasks.py | 8 -- .../controller/worker/v1/tasks/database_tasks.py | 46 +---------- .../controller/worker/v1/tasks/network_tasks.py | 8 +- .../controller/worker/v2/flows/amphora_flows.py | 4 + .../worker/v2/tasks/amphora_driver_tasks.py | 10 --- .../controller/worker/v2/tasks/database_tasks.py | 81 ++----------------- .../controller/worker/v2/tasks/network_tasks.py | 8 +- .../worker/v1/tasks/test_amphora_driver_tasks.py | 37 +-------- .../worker/v1/tasks/test_database_tasks.py | 78 ++---------------- .../worker/v2/flows/test_amphora_flows.py | 3 +- .../worker/v2/tasks/test_amphora_driver_tasks.py | 37 +-------- .../worker/v2/tasks/test_database_tasks.py | 93 +++------------------- .../worker/v2/tasks/test_network_tasks.py | 6 +- ...isioning-status-on-errors-7f3736ef6e94d453.yaml | 9 +++ test-requirements.txt | 2 +- tox.ini | 8 +- 19 files changed, 68 insertions(+), 377 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a4e7a9ba..9c58f385 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -11 +11 @@ oslotest>=3.2.0 # Apache-2.0 -pylint>=2.5.3 # GPLv2 +pylint>=2.5.3,<=2.10.2 # GPLv2

1 0

octavia 8.0.1 (wallaby)
by no-reply＠openstack.org 23 Dec '21

23 Dec '21

We contentedly announce the release of: octavia 8.0.1: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the wallaby stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 8.0.1 ^^^^^ Deprecation Notes ***************** * The "[amphora_agent].agent_server_network_file" configuration option is now deprecated, the new Amphora network configuration tool introduced in Xena does not support a single configuration file. Bug Fixes ********* * Amphora network configuration for the VIP interface and the pool member interfaces are now applied with the amphora-interface tool. amphora-interface uses pyroute2 low-level functions to configure the interfaces instead of distribution-specific tools such as "network- scripts" or "/etc/network/interfaces" files. * Disable conntrack for TCP flows in the Amphora, it reduces memory usage for HAProxy-based listeners and prevents some kernel warnings about dropped packets. * Fix an issue with amphorav2 driver, a failover of an amphora created an amphora with an ERROR status. * Fixes loadbalancer creation failure when one of the listener port matches with the octavia generated peer ports and the allowed_cidr is explicitly set to 0.0.0.0/0 on the listener. This is due to creation of two security group rules with remote_ip_prefix as None and remote_ip_prefix as 0.0.0.0/0 which neutron rejects the second request with security group rule already exists. * Fix a serialization error when using host_routes in VIP subnets when persistence in the amphorav2 driver is enabled. * Fixed MAX_TIMEOUT for timeout_client_data, timeout_member_connect, timeout_member_data, timeout_tcp_inspect API listener. The value was reduced from 365 days to 24 days, which now does not exceed the value of the data type in DB. * Fixed an issue with the "lo" interface in the "amphora-haproxy" network namespace. The "lo" interface was down and prevented haproxy to communicate with other haproxy processes (for persistent stick tables) on configuration change. It delayed old haproxy worker cleanup and increased the memory consumption usage after reloading the configuration. * Increase the limit value for nr_open and file-max in the amphora, the new value is based on what HAProxy 2.x is expecting from the system with the greatest maxconn value that Octavia can set. * Fix an issue with the provisioning status of a load balancer that was set to ERROR too early when an error occurred, making the load balancer mutable while the execution of the tasks for this resources haven't finished yet. * Fix an issue that could set the provisioning status of a load balancer to a PENDING_UPDATE state when an error occurred in the amphora failover flow. * Fix weighted round-robin for UDP and SCTP listeners with keepalived and lvs. The algorithm must be specified as 'wrr' in order for weighted round-robin to work correctly, but was being set to 'rr'. Changes in octavia 8.0.0..8.0.1 ------------------------------- 9b7791db Fix LB set in ERROR too early in MapLoadbalancerToAmphora f700bdbb Fix LB set in ERROR too early in the revert flow 77a87a7f Fix failover of az-specific loadbalancers 60b14c69 Fix management network selection when calculating deltas 19058596 Disable conntrack for TCP flows in the amphora e692201f Fix duplicate SG creation for listener peer port 4dbca788 Fix MAX_TIMEOUT value for listener c524eaf1 Fix PlugVIPAmphora revert function in amphorav2 de2f752e Add generic network interface management in the amphora f55376bf Update nr_open limit value in the amphora 6367a849 Fix using host_routes in VIP subnet with amphorav2 f16f72cc Add caps for pip-extra-reqs/pip-missing-reqs 9ba11825 Enable lo interface in the amphora-haproxy netns bd01b2b0 Fix race conditions between API and worker DB calls 20db85fd Fix comment for the ca_certificates_file opt adb454b2 Optimize CountPoolChildrenForQuota task in amphorav2 19504cef Fix amphora failover flow in amphorav2 driver a53e2eab Fix task_flow.max_workers with persistence in amphorav2 e06530e6 Fix jobboard_enabled setting in devstack 168f1a12 Fix devstack cleanup when using amphorav2 46979a0d Cap hacking and pylint d9603b3d Fix weighted round-robin about UDP and SCTP listener Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 12 +- .../75-amphora-agent-install | 3 + .../static/usr/local/bin/lvs-masquerade.sh | 27 + .../post-install.d/20-haproxy-tune-kernel | 4 +- etc/octavia.conf | 17 +- octavia/amphorae/backends/agent/agent_jinja_cfg.py | 2 - .../backends/agent/api_server/loadbalancer.py | 5 - .../amphorae/backends/agent/api_server/osutils.py | 512 +----------- octavia/amphorae/backends/agent/api_server/plug.py | 56 +- .../amphorae/backends/agent/api_server/server.py | 2 + .../api_server/templates/amphora-netns.systemd.j2 | 6 +- .../api_server/templates/plug_port_ethX.conf.j2 | 43 - .../api_server/templates/plug_vip_ethX.conf.j2 | 82 -- .../api_server/templates/rh_plug_port_ethX.conf.j2 | 47 -- .../rh_plug_port_eth_ifdown_local.conf.j2 | 19 - .../templates/rh_plug_port_eth_ifup_local.conf.j2 | 19 - .../api_server/templates/rh_plug_vip_ethX.conf.j2 | 60 -- .../templates/rh_plug_vip_ethX_alias.conf.j2 | 29 - .../api_server/templates/rh_route_ethX.conf.j2 | 29 - .../api_server/templates/rh_rule_ethX.conf.j2 | 17 - .../agent/api_server/templates/systemd.conf.j2 | 2 +- .../agent/api_server/templates/sysvinit.conf.j2 | 6 +- .../agent/api_server/templates/upstart.conf.j2 | 6 +- octavia/amphorae/backends/agent/api_server/util.py | 6 +- .../agent/templates/amphora_agent_conf.template | 3 - octavia/amphorae/backends/utils/interface.py | 237 ++++++ octavia/amphorae/backends/utils/interface_file.py | 218 +++++ octavia/cmd/interface.py | 90 ++ octavia/common/base_taskflow.py | 5 +- octavia/common/config.py | 9 +- octavia/common/constants.py | 41 +- octavia/common/exceptions.py | 5 + octavia/common/jinja/lvs/jinja_cfg.py | 2 +- .../worker/v1/tasks/amphora_driver_tasks.py | 8 - .../controller/worker/v1/tasks/database_tasks.py | 51 +- .../controller/worker/v1/tasks/network_tasks.py | 8 +- octavia/controller/worker/v2/controller_worker.py | 36 +- .../controller/worker/v2/flows/amphora_flows.py | 4 + .../worker/v2/tasks/amphora_driver_tasks.py | 16 +- .../controller/worker/v2/tasks/database_tasks.py | 96 +-- .../controller/worker/v2/tasks/network_tasks.py | 11 +- octavia/db/repositories.py | 10 + .../drivers/neutron/allowed_address_pairs.py | 17 +- .../backend/agent/api_server/test_server.py | 894 ++++++++++---------- .../backends/agent/api_server/test_osutils.py | 432 ++-------- .../backends/agent/api_server/test_plug.py | 139 ---- .../backends/agent/api_server/test_util.py | 2 +- .../backends/agent/test_agent_jinja_cfg.py | 8 - .../unit/amphorae/backends/utils/test_interface.py | 902 +++++++++++++++++++++ .../amphorae/backends/utils/test_interface_file.py | 583 +++++++++++++ .../sample_configs/sample_configs_combined.py | 8 +- .../worker/v1/tasks/test_amphora_driver_tasks.py | 37 +- .../worker/v1/tasks/test_database_tasks.py | 110 +-- .../worker/v2/flows/test_amphora_flows.py | 6 +- .../worker/v2/tasks/test_amphora_driver_tasks.py | 42 +- .../worker/v2/tasks/test_database_tasks.py | 125 +-- .../worker/v2/tasks/test_database_tasks_quota.py | 36 +- .../worker/v2/tasks/test_network_tasks.py | 18 +- .../controller/worker/v2/test_controller_worker.py | 24 +- .../drivers/neutron/test_allowed_address_pairs.py | 30 + ...work-interface-management-d77bc9905ed997f6.yaml | 13 + ...disable-conntrack-for-tcp-01ef6948d99353c2.yaml | 6 + ...mphora-failover-amphorav2-b19a76ccfdc75245.yaml | 5 + ...fix-duplicate-sg-creation-0c502a5d2d8c276d.yaml | 9 + ...amphorav2-and-persistence-54b99d651a4ee9c4.yaml | 5 + .../fix-listener-MAX_TIMEOUT-4c4fdf804a96c34b.yaml | 7 + ...o-interface-amphora-netns-90fb9934026e1485.yaml | 8 + .../fix-nr_open-limit-value-7f475c3e301a608d.yaml | 6 + ...isioning-status-on-errors-7f3736ef6e94d453.yaml | 9 + ...udp-and-sctp-listener-wrr-50de9dc0774a8ea1.yaml | 6 + setup.cfg | 1 + test-requirements.txt | 4 +- tox.ini | 18 +- 79 files changed, 3248 insertions(+), 2429 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index a4e7a9ba..d1dd6b6d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4 +4 @@ -hacking>=3.0 # Apache-2.0 +hacking>=3.0,<4.1.0 # Apache-2.0 @@ -11 +11 @@ oslotest>=3.2.0 # Apache-2.0 -pylint>=2.5.3 # GPLv2 +pylint>=2.5.3,<2.8 # GPLv2

1 0

openstack-ansible 24.0.0 (xena)
by no-reply＠openstack.org 22 Dec '21

22 Dec '21

We jubilantly announce the release of: openstack-ansible 24.0.0: Ansible playbooks for deploying OpenStack This release is part of the xena release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 24.0.0 ^^^^^^ New Features ************ * Enable VeNCrypt authentication scheme from noVNC proxy to compute nodes. When using HTTPS, the TLS encryption only applies to data between the tenant user and proxy server. To provide protection from the noVNC proxy to the Compute Nodes, it is necessary to enable the VeNCrypt authentication scheme for VNC. A pre-existing PKI (Public Key Infrastructure) setup is required. Initially to help with the transition from unencrypted VNC to VeNCrypt, compute nodes auth scheme allows for both encrypted and unencrypted sessions using the variable *nova_vencrypt_auth_scheme*, this will be removed in future releases. * UEFI boot support has been added. To migrate from Legacy BIOS mode, define *boot_mode:uefi* as a capability for baremetal nodes that support UEFI. In addition, corresponding flavor(s) will need to be created or modified to include *boot_mode:uefi* as a capability for scheduling to occur against UEFI nodes. * Implemented new variable "connection_recycle_time" responsible for SQLAlchemy's connection recycling * Galera role now leverages PKI role for creation and distribution of the certificates and certificate authorities. This introduces bunch of new variables which controls CA and certificates generation details. If user SSL certificates are provided - they would be used instead of the generated ones. The following new variables were introduced: * galera_ssl_verify * galera_pki_dir * galera_pki_create_ca * galera_pki_regen_ca * galera_pki_certificates * galera_pki_regen_cert * galera_pki_authorities * galera_pki_install_ca * galera_pki_keys_path * galera_pki_certs_path * galera_pki_intermediate_cert_name * galera_pki_intermediate_cert_path * galera_pki_install_certificates * MariaDB now uses TLS encryption by default. Certificate will be issued and signed with internal CA using PKI role. Deployers can disable encrypting MariaDB connections by setting "galera_use_ssl: false" in their user_variables.yml Client certificates could be still provided and they will be distributed with PKI role as well. * Added variable *horizon_policy_overrides* which allows to customize horizon specific policies. As we don't want to carry and maintain horizon policies with OSA, they're retrieved from horizon hosts and adjusted in-place, which means that they won't rollback in case you just remove override. *horizon_policy_overrides* has also non- standart format, as it's nested dictionary, where 1st level key represents service which policy needs to be overriden, and it's value is normal policy override format. * Support for the networking-baremetal mechanism driver and agent has been implemented. The ironic-neutron-agent is a neutron agent that populates the host to physical network mapping for baremetal nodes in neutron. Neutron uses this to calculate the segment to host mapping information. This feature may be enabled by adding "ml2.baremetal" to the "neutron_plugin_types" list in "/etc/openstack_deploy/user_variables.yml". * The "provider_networks" library has been updated to support the definition of bond member interfaces that can automatically be added as bond ports to OVS provider bridges setup during a deployment. This feature is currently limited to DPDK-based deployments. To activate this feature, add the "network_bond_interfaces" key to the respective provider network definition in "openstack_user_config.yml". For more information, refer to the latest Open vSwitch w/ DPDK deployment guide. * Added variables "systemd_run_dir" and "systemd_lock_dir" that allows to control run and lock path for directories that will be used by systemd services. Variables should not include service name since it will be added by default at the end of the provided path. These variables could be also defined as keys inside "systemd_services" and this will have prescedence over default behaviour. * Default run path for systemd services has been changed to "/run" and lock path to "/run/lock". * Nova now defaults to to using the "QEMU-native TLS" feature for live migrations, rather than the deprecated SSH method. A pre- existing PKI (Public Key Infrastructure) setup is required. QEMU-native TLS requires all compute hosts to accept TCP connections on port 16514 and port range 49152 to 49261. More information can be found here: https://docs.openstack.org/nova/latest/admin/secure-live-migration- with-qemu-native-tls.html Deprecation Notes ***************** * For consistency reasons, "octavia_db_pool_size" was deprecated in favor of "octavia_db_max_pool_size" which is in a standardized format used in other repositories. "octavia_db_pool_size" support it will be removed in Yoga release. * For consistency reasons, "neutron_db_pool_size" was deprecated in favor of "neutron_db_max_pool_size" which is in a standardized format used in other repositories. However, it will be supported until Yoga release. * For consistency reasons, the following variables were deprecated in favor of the new ones in a standardized format used in other repositories. "keystone_database_pool_timeout" -> "keystone_db_pool_timeout" "keystone_database_max_pool_size" -> "keystone_db_max_pool_size" "keystone_database_idle_timeout" -> "keystone_db_connection_recycle_time" However, they will be supported until next Yoga release. * "keystone_database_min_pool_size" was deprecated as it's deprecated in oslo.db * Variable "systemd_lock_path" has been dropped and has no effect now. In order to customize lock dir path please use "systemd_lock_dir". Please keep in mind, that for "systemd_lock_dir" you don't need to provide full path like it was with "systemd_lock_path" since service name is added to the end of the path. * Following variables were removed in favor of PKI ones and have no effect anymore: * galera_ssl_self_signed_regen * galera_ssl_self_signed_subject * galera_ssl_ca_self_signed_subject * We removed multiple web server support for keystone and left only Apache since nginx is missing features required for federation setup. With this change following variables are deprecated and have no effect: * keystone_web_server * keystone_centos_nginx_mirror * keystone_centos_nginx_key * keystone_nginx_access_log_format_combined * keystone_nginx_access_log_format_extras * keystone_nginx_ports * keystone_nginx_extra_conf Nginx web server will be removed and replaced with Apache during upgrade. * Variable "nova_enabled_vgpu_types" has been deprecated and is replaced with "nova_enabled_mdev_types". Bug Fixes ********* * Fixed inconsistency in "haproxy_frontend_raw" key naming between documentation and service template. Previously, template generation was expecting "haproxy_raw" instead of the "haproxy_frontend_raw". * For deployers using Keystone as an OIDC-based Service Provider there has been a spelling fix for the OIDCScope setting. Please use "keystone_sp.trusted_idp_list.0.oidc_scope" instead of "keystone_sp.trusted_idp_list.0.idc_scope". * This release addresses an issue which could cause wheels to fail to be built when upgrading from one operating system to another. Upgrading to this release is recommended before attempting an operating system upgrade. Other Notes *********** * Set a new default value for "galera_wait_timeout" which is inherited from global "openstack_db_connection_recycle_time". * Set new default values for db pooling variables which are inherited from the global ones. Changes in openstack-ansible 23.0.0.0rc1..24.0.0 ------------------------------------------------ b88a4783f Bump OpenStack-Ansible for Xena RC2 and release eda30de65 Set galera to use TLS for connections by default d33e0bcd2 Change haproxy variable used to set security headers to haproxy_frontend_raw 9c17fd726 [doc] Add Xena compatible OS 97060d391 Fix ceph-ansible shallow_since 50c8a2283 Add documentation of security improvements made to Openstack Ansible c2f3bfe6a [doc] Clean out project index page for stable branches 9fd96ddc9 Update TOX_CONSTRAINTS_FILE for stable/xena d3e2e3f99 Update .gitreview for stable/xena a0cfc507e Freeze roles for Xena RC1 97b837826 Add nfs deployment scenario b58dbee2a Remove retrievement of config_tempalte as a module 3c76df5f7 Reduce manila CI check memory consumption 76cd97b1e Reduce ceph memory overhead for AIO by setting is_hci to true 1fd3e0c44 Do not fail when nova console is disabled a433db53a Update ceph-ansible release to pacific be16cc841 From now on, we will change default values for database connection pooling in each role 2ea412bae Ensure hardware facts are gathered for galera hosts. b6fe07ecf Add security headers to HAProxy Horizon service b859d5897 Add config_tempalte to collections 92f8639ec Configure HAProxy to check Horizon's login page fbbf1e275 Globally define systemd_lock_dir db79a0f27 Pin uWSGI version 678b14c21 Do not upgrade packages without upgrades 68d8bd272 Remove provider_networks from neutron playbook d7b5f6cda Increase Apache thread limit for keystone 8b7a5e4d0 Deprecate OVN-related haproxy configuration c564ad9a0 Minor update of openstack collection 3504694b4 Fix error in dynamic-address-fact task 3e4fffec9 Bump ansible and collection versions 067df8fb7 Remove note about metal/horizon compatability d27d4daed Add playbook to generate any user defined certificates e62392648 Switch services to track stable/xena 002fb0910 Remove reference to deprecated python-ceilometerclient 834cd874c [doc] Fix netplan sample 78d9a8596 Fix manila haproxy manage 5505d4a14 Use cinder defaults for cinder_management_address 7a2be19d6 Implements framework for ironic_neutron_agent and Neutron 'baremetal' plugin 1c75669df Remove unnecessary pki step in haproxy install a74caa919 Bump OpenStack-Ansible master 6e9da4753 Add serial execution to all playbooks f05092277 Change pki_create_ca condition aeb20518f Bump ansible version to 2.11.5 464d7e5d3 Bump collection versions ffd5f8859 Revert "Add integrated build job to use in sahara repo" 172779f54 Replace deprecated include statement 5e8b57ad0 Bump OpenStack-Ansible master 430a0bc1f Include openstack_services for murano role d1e727ed3 Replace deprecated collection names 6e50398f0 Update pip version e1937b3f1 Switch ceph-ansible to Pacific c9f403099 Enable tempest tests for sahara 2dc1611f1 Add heat service when scenario includes sahara 3d59c738f Add integrated build job to use in sahara repo 6e45de76f Switch CentOS upgrade jobs to Stream ones 5451778f4 Move galera tasks to pre_tasks afebcb984 Set bullseye jobs to voting e48485b83 Add guide for distribution upgrades to docs 3cb74de15 Set doc jobs to voting 9e535931a skip -W on sphinx-build for translation. ed035fb27 Add shallow_since to parallel git clone e1adb7d9f Bump master branch a332bda37 Fix permissions for files created on repo server 9b9d6b883 Revert "set non-voting for broken tox-doc test" 17f92b0f5 haproxy: decrease check interval for letsencrypt back ends de64a324e set non-voting for broken tox-doc test cea883dfc Do not use https for metadata service with calico networking 3088fe204 Deprecate os-panko role 0965d2a22 Moving IRC network reference to OFTC 6e22c20cd Imported Translations from Zanata aab4de765 Start Xena cycle 1ee9b1bbe Update master for stable/wallaby Diffstat (except docs and test files) ------------------------------------- .gitreview | 2 +- ansible-collection-requirements.yml | 15 +- ansible-role-requirements.yml | 235 +++++++++-------- deploy-guide/source/conf.py | 4 +- deploy-guide/source/configure.rst | 2 - .../admin/upgrades/distribution-upgrades.rst | 281 +++++++++++++++++++++ .../admin/upgrades/os-compatibility-matrix.html | 25 ++ etc/netplan/01-static.yml | 2 +- etc/openstack_deploy/conf.d/ceph.yml.aio | 4 + etc/openstack_deploy/conf.d/panko.yml.aio | 3 - etc/openstack_deploy/conf.d/panko.yml.example | 8 - etc/openstack_deploy/env.d/aio_metal.yml.example | 3 - etc/openstack_deploy/user_secrets.yml | 4 - global-requirement-pins.txt | 5 +- inventory/env.d/neutron.yml | 4 + inventory/group_vars/all/all.yml | 14 +- inventory/group_vars/all/ceph.yml | 2 +- inventory/group_vars/all/infra.yml | 1 + inventory/group_vars/all/nova.yml | 4 + inventory/group_vars/cinder_all.yml | 3 - inventory/group_vars/haproxy/haproxy.yml | 74 ++---- inventory/inventory.ini | 6 +- playbooks/ceph-rgw-keystone-setup.yml | 10 +- playbooks/certificate-authority.yml | 2 +- playbooks/certificate-generate.yml | 32 +++ playbooks/common-playbooks/neutron.yml | 20 -- playbooks/common-tasks/dynamic-address-fact.yml | 6 +- playbooks/defaults/distro_install.yml | 1 - playbooks/defaults/repo_packages/gnocchi.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 220 ++++++++-------- playbooks/etcd-install.yml | 1 + playbooks/galera-install.yml | 19 +- playbooks/haproxy-install.yml | 8 +- playbooks/library/git_requirements.py | 64 +++-- playbooks/memcached-install.yml | 1 + playbooks/os-aodh-install.yml | 1 + playbooks/os-barbican-install.yml | 1 + playbooks/os-blazar-install.yml | 1 + playbooks/os-ceilometer-install.yml | 1 + playbooks/os-cinder-install.yml | 16 +- playbooks/os-designate-install.yml | 1 + playbooks/os-glance-install.yml | 6 +- playbooks/os-gnocchi-install.yml | 1 + playbooks/os-heat-install.yml | 1 + playbooks/os-horizon-install.yml | 1 + playbooks/os-ironic-install.yml | 1 + playbooks/os-magnum-install.yml | 1 + playbooks/os-manila-install.yml | 5 +- playbooks/os-masakari-install.yml | 2 + playbooks/os-mistral-install.yml | 1 + playbooks/os-murano-install.yml | 2 + playbooks/os-neutron-install.yml | 8 +- playbooks/os-octavia-install.yml | 1 + playbooks/os-panko-install.yml | 40 --- playbooks/os-placement-install.yml | 1 + playbooks/os-sahara-install.yml | 1 + playbooks/os-senlin-install.yml | 1 + playbooks/os-tacker-install.yml | 1 + playbooks/os-trove-install.yml | 1 + playbooks/os-zun-install.yml | 1 + playbooks/qdrouterd-install.yml | 2 +- playbooks/rabbitmq-install.yml | 4 +- playbooks/repo-install.yml | 1 + playbooks/setup-hosts.yml | 1 + playbooks/setup-openstack.yml | 1 - playbooks/unbound-install.yml | 1 + playbooks/utility-install.yml | 1 + .../notes/VNC-proxy-security-520e6dac6bad0018.yaml | 16 ++ .../adds-uefi-boot-support-18ad99dd21f7e8be.yaml | 7 + .../notes/ceph_pacific-9952da2810a737c1.yaml | 12 + .../notes/db-pooling-14f33d291a246203.yaml | 2 + .../notes/db-pooling-15b6222fedc2cb8c.yaml | 7 + .../notes/db-pooling-7c42f3aed39d5fc9.yaml | 2 + .../notes/db-pooling-91ac966776313feb.yaml | 7 + .../notes/db-pooling-cec321004b4a8a79.yaml | 4 + .../notes/db-pooling-f078d5d7668377b2.yaml | 11 + ...eprecate-ovn-haproxy-vips-061652cd82342819.yaml | 6 + ...precate_systemd_lock_path-fba3aff8b1b4468d.yaml | 9 + .../notes/dperecate_os_panko-0d2f6822ffc8fd43.yaml | 7 + .../notes/galera_pki-2d6d77a86e8475cd.yaml | 34 +++ .../notes/galera_use_ssl-e906b5ba8b2e62ef.yaml | 9 + .../haproxy_frontend_raw-0811d5d445a66b41.yaml | 6 + .../horizon_policy_overrides-ca84702ef993ea92.yaml | 10 + .../keystone_drop_nginx-5e7791d22f0be48a.yaml | 16 ++ ...etal-plugin-agent-support-cfb06fa4faf85bdc.yaml | 8 + .../notes/neutron-dpdk-bonds-4dd98fc0b341ebfb.yaml | 10 + .../notes/nova_mdev_types-df92fb3d1ce339ec.yaml | 5 + ...e-oidc-scope-spelling-fix-3051b95adeb37901.yaml | 7 + ...-upgrade-requirements-fix-bcc81b049339e9b5.yaml | 7 + .../notes/security-headers-87de60203899fdbb.yaml | 19 ++ .../systemd_run_lock_dir-5b4b0cad9c860ce0.yaml | 12 + .../notes/tls-migration-3ed93cc04dab5eee.yaml | 13 + releasenotes/source/index.rst | 1 + releasenotes/source/wallaby.rst | 6 + scripts/bootstrap-ansible.sh | 2 +- scripts/gate-check-commit.sh | 2 +- scripts/get-ansible-role-requirements.yml | 5 +- scripts/openstack-ansible.rc | 5 +- scripts/run-upgrade.sh | 12 +- .../bootstrap-host/tasks/prepare_aio_config.yml | 16 +- .../templates/user_variables.aio.yml.j2 | 5 +- .../templates/user_variables_ceph.yml.j2 | 1 + .../templates/user_variables_manila.yml.j2 | 6 +- .../templates/user_variables_murano.yml.j2 | 2 +- .../templates/user_variables_nfs.yml.j2 | 9 + .../templates/user_variables_sahara.yml.j2 | 26 +- tox.ini | 5 +- zuul.d/jobs.yaml | 26 +- zuul.d/project-templates.yaml | 22 +- 134 files changed, 1585 insertions(+), 720 deletions(-)

1 0

oslo.policy 3.10.1 (yoga)
by no-reply＠openstack.org 16 Dec '21

16 Dec '21

We are ecstatic to announce the release of: oslo.policy 3.10.1: Oslo Policy library This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.policy Download the package from: https://pypi.org/project/oslo.policy Please report issues through: https://bugs.launchpad.net/oslo.policy/+bugs For more details, please see below. 3.10.1 ^^^^^^ Other Notes * Scope check is enforced for all rules, registered ones as well as the ones which are subclasses of the "BaseCheck" class if rule has "scope_types" set. Changes in oslo.policy 3.10.0..3.10.1 ------------------------------------- 919c328 Enforce scope check always when rule has scope_types set 1e89f03 Increase timeout of the cross-neutron-tox-py38 job Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 1 + oslo_policy/policy.py | 2 ++ ...lways-when-rule-has-scope_types-8f983cdf70766e4f.yaml | 6 ++++++ 4 files changed, 25 insertions(+)

1 0

oslo.messaging 12.11.1 (yoga)
by no-reply＠openstack.org 16 Dec '21

16 Dec '21

We are pumped to announce the release of: oslo.messaging 12.11.1: Oslo Messaging API This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/oslo.messaging Download the package from: https://pypi.org/project/oslo.messaging Please report issues through: https://bugs.launchpad.net/oslo.messaging/+bugs For more details, please see below. Changes in oslo.messaging 12.11.0..12.11.1 ------------------------------------------ 02a38f50 amqp1: fix race when reconnecting Diffstat (except docs and test files) ------------------------------------- oslo_messaging/_drivers/amqp1_driver/controller.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)

1 0

neutron-lib 2.18.0 (yoga)
by no-reply＠openstack.org 15 Dec '21

15 Dec '21

We jubilantly announce the release of: neutron-lib 2.18.0: Neutron shared routines and utilities This release is part of the yoga release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 2.18.0 ^^^^^^ New Features * New API validators "validate_oneline_not_empty_string" and "validate_oneline_not_empty_string_or_none" are added. Those validators are now used to validate "opt_name" and "opt_value" fields of the extra_dhcp_opt so strings with newline character are not valid for dhcp extra option's name nor value. * A new method "update_network" has been added to "L3AgentExtension" to handle the network update events in the L3 agent extensions. * Added field "qos_network_policy_id" to the "floatingip" definition. This read only parameter contains the QoS policy of the network where the floating IP is plugged. * The "qos-fip" extension's API definition is now available in "neutron_lib.api.definitions.qos_fip". Changes in neutron-lib 2.17.0..2.18.0 ------------------------------------- 6a922e4 Allow to pass custom reason in NetworkInUse exception 4807bac Add new method "update_network" to "L3AgentExtension". 4d44f54 Replace "target_tenant" with "target_project" in RBAC OVOs and models a3b564d Exception for BFD: BfdMonitorInUse 8736420 Rehome QoS floating IP extension f9497ac Add floating IP network QoS field to floating IP definition d2bd776 Make update_qos_minbw_allocation() more generic 1f4c403 Add oneline_string validators Diffstat (except docs and test files) ------------------------------------- api-ref/source/v2/floatingips.inc | 24 +++++ api-ref/source/v2/parameters.yaml | 18 ++++ .../floatingips/floating-ips-list-response.json | 13 ++- .../floatingips/floatingip-create-request.json | 3 +- .../floatingips/floatingip-create-response.json | 3 +- .../floatingips/floatingip-show-response.json | 4 +- .../floatingips/floatingip-update-response.json | 4 +- neutron_lib/agent/l3_extension.py | 10 ++ neutron_lib/api/definitions/__init__.py | 4 + neutron_lib/api/definitions/base.py | 2 + neutron_lib/api/definitions/extra_dhcp_opt.py | 4 +- neutron_lib/api/definitions/qos_fip.py | 41 ++++++++ .../api/definitions/qos_fip_network_policy.py | 41 ++++++++ neutron_lib/api/validators/__init__.py | 34 ++++++ neutron_lib/db/model_query.py | 8 +- neutron_lib/exceptions/__init__.py | 11 +- neutron_lib/exceptions/l3.py | 5 + neutron_lib/placement/client.py | 47 ++++----- .../api/definitions/test_qos_fip_network_policy.py | 25 +++++ ...-oneline-string-validator-aa4e1ccad9d8d5c8.yaml | 8 ++ ...extensions-update-network-e4887f7f258e40f0.yaml | 5 + .../qos-fip-network-policy-ded58703313ae248.yaml | 6 ++ .../rehome-qos-fip-apidef-a2e4d49af177be85.yaml | 5 + 27 files changed, 440 insertions(+), 78 deletions(-)

1 0