- Release-announce - lists.openstack.org

oslo.db 12.1.2 (zed)
by no-reply＠openstack.org 02 May '24

02 May '24

We exuberantly announce the release of: oslo.db 12.1.2: Oslo Database library This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/oslo.db Download the package from: https://pypi.org/project/oslo.db Please report issues through: https://bugs.launchpad.net/oslo.db/+bugs For more details, please see below. Changes in oslo.db 12.1.1..12.1.2 --------------------------------- 8620d4d exc_filters: Handle OperationalError for MariaDB/Galera Diffstat (except docs and test files) ------------------------------------- oslo_db/sqlalchemy/exc_filters.py | 2 ++ 2 files changed, 8 insertions(+)

1 0

networking-baremetal 6.1.1 (antelope)
by no-reply＠openstack.org 02 May '24

02 May '24

We are gleeful to announce the release of: networking-baremetal 6.1.1: Neutron plugin that provides deep Ironic/Neutron integration. This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/networking-baremetal Download the package from: https://pypi.org/project/networking-baremetal Please report issues through: https://storyboard.openstack.org/#!/project/openstack/networking- baremetal For more details, please see below. 6.1.1 ^^^^^ Bug Fixes * Fixes a bug which tried to force delete queues when quorum queues are enabled. Quorum queues do not support the auto-delete feature. See the bugreport 2046962 (https://bugs.launchpad.net/networking- baremetal/+bug/2046962) for details. Changes in networking-baremetal 6.1.0..6.1.1 -------------------------------------------- bfcd09e don't force amqp_auto_delete for quorum queues 1529ce9 Update TOX_CONSTRAINTS_FILE for stable/2023.1 ce4c378 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + networking_baremetal/agent/ironic_neutron_agent.py | 4 +++- .../notes/fix_autodelete_for_quorum_queues-e001f2d8d8ae780b.yaml | 6 ++++++ tox.ini | 8 ++++---- 4 files changed, 14 insertions(+), 5 deletions(-)

1 0

sushy 4.4.3 (antelope)
by no-reply＠openstack.org 02 May '24

02 May '24

We are jazzed to announce the release of: sushy 4.4.3: Sushy is a small Python library to communicate with Redfish based systems This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/sushy Download the package from: https://tarballs.openstack.org/sushy/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/sushy For more details, please see below. 4.4.3 ^^^^^ Bug Fixes * Fixes bug where sushy would not pass a read/connect timeout through to requests when making requests to a redfish service. This means that an ill-timed failure could cause python processes calling sushy to freeze indefinately. * Add TransferProtocolType for any general error that mentions it * In some cases registries might not be available because the our check for the registry language did not account for a possible country suffix. The logic was improved to take it into account. * Correctly handles errors on a request that is re-tried after refreshing an authentication token. * An issue was encountered on some HPE iLO supported machines where the Baseboard Management Controller would respond with a HTTP 400 error and an error message indicating the requested operation was invalid for the then system state. For example, attempting to change the power state via the BMC shortly after previously changing the power state. We now attempt to retry within the permitted number of retries when this error is encountered. Changes in sushy 4.4.2..4.4.3 ----------------------------- 69d9b44 Handle exceptions after re-authentication 6a35364 Remove version field from iLO error 4c331de Requests must always have a read/connect timeout fa4b0f7 Retry on ilo state error aa60883 Add TransferProtocolType for any general error that mentions it bdbbf86 Handle non-default language for registries 97bb075 Update TOX_CONSTRAINTS_FILE for stable/2023.1 9e689c1 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ...-read-and-connect-timeout-9f7dc3ed63c192c8.yaml | 5 + ...more-transferprotocoltype-739ce8bdedbcb51c.yaml | 4 + ...fault-language-registries-f73bdecc98ba2cc8.yaml | 7 + releasenotes/notes/re-raise-1fe9f912691e893e.yaml | 5 + ...retry-ilo-not-ready-error-0b4dce882282eaac.yaml | 10 + sushy/connector.py | 70 ++-- sushy/resources/base.py | 7 +- sushy/resources/manager/virtual_media.py | 4 + sushy/resources/registry/message_registry_file.py | 8 +- .../bios_attribute_registry_file_zthardware.json | 19 + .../bios_attribute_registry_zthardware.json | 75 ++++ .../transfer_proto_required_error2.json | 16 + .../unit/resources/manager/test_virtual_media.py | 12 +- .../resources/registry/test_attribute_registry.py | 38 ++ tox.ini | 10 +- 19 files changed, 834 insertions(+), 38 deletions(-)

1 0

ironic-inspector 11.4.1 (antelope)
by no-reply＠openstack.org 02 May '24

02 May '24

We eagerly announce the release of: ironic-inspector 11.4.1: Hardware introspection for OpenStack Bare Metal This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ironic-inspector Download the package from: https://tarballs.openstack.org/ironic-inspector/ Please report issues through: https://storyboard.openstack.org/#!/project/944 For more details, please see below. 11.4.1 ^^^^^^ Bug Fixes * Fixes an issue where inspection would fail if an IPv6 address wrapped in brackets is used for the redfish BMC address. See bug: 2036455 (https://bugs.launchpad.net/ironic/+bug/2036455) * In case the lldp raw data collected by the inspection process includes non utf-8 information, the parser fails breaking the inspection process. This patch works around that excluding the malformed data and adding an entry in the logs to provide information on the failed tlv. * Fixes the Role Based Access Control state and capabilities to align with OpenStack Community RBAC goals which includes support for a "service" role by default to enable inter-service communication to be configured without an "admin" username. In large part, these changes were missed as the Inspector service is considered an "admin-only" service. Also in alignment with overall community position changes, where the "admin" role is sufficent without an explicit "system" scope. To help ensure a high level of security, explicit testing was also added for the "manager" role, which is unavailable as that role is reserved for administrative functions inside of a tenant's project. Changes in ironic-inspector 11.4.0..11.4.1 ------------------------------------------ 0c395ae Fix RBAC access for service/admin user access b43ce63 Handle LLDP parse Unicode error fbe087f Handle bracketed IPv6 redfish_address 7c182e8 tests: Replace assertItemsEqual with assertCountEqual 97b259d Update TOX_CONSTRAINTS_FILE for stable/2023.1 b128eeb Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_inspector/common/ironic.py | 4 + ironic_inspector/plugins/lldp_basic.py | 11 +- ironic_inspector/policy.py | 34 +- ironic_inspector/test/unit/db/test_api.py | 12 +- ironic_inspector/test/unit/test_acl.py | 359 ++++++++++++++++++++- ironic_inspector/test/unit/test_common_ironic.py | 8 + .../notes/bug-2036455-bd3f6381b78c20db.yaml | 7 + .../notes/fix-lldp-decode-83f4ad3869b0c7a7.yaml | 9 + ...or-openstack-rbac-changes-7ca8533f76e504d5.yaml | 14 + tox.ini | 10 +- 11 files changed, 442 insertions(+), 27 deletions(-)

1 0

bifrost 16.1.1 (antelope)
by no-reply＠openstack.org 02 May '24

02 May '24

We high-spiritedly announce the release of: bifrost 16.1.1: Deployment of physical machines using OpenStack Ironic and Ansible This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/bifrost For more details, please see below. 16.1.1 ^^^^^^ Deprecation Notes ***************** * Support for Fedora is no longer tested in the CI and will be removed from the code in the near future. Bug Fixes ********* * Fixes issue of lack of log rotation for Ironic logs by adding a role which installs and configures the logrotate service. * Fixes an issue where online data migrations were not performed in the default Bifrost configuration where "localhost" is used as the database address. See LP#2036772 for details. Changes in bifrost 16.1.0..16.1.1 --------------------------------- c47ea6a2 Restore discovery for dnsmasq dhcp provider 8c0d9c98 ansible-lint: Skip key-order[play] a28ae917 ironic: Perform online data migrations with localhost DB fc55597f Fix for lack of log rotation in Bifrost c5f6c074 Remove Fedora from the CI 4e63b24a Create the log file for the disk-image-create command 5d2af210 Remove extra symbols accidentally added 3017112f Skip unnecessary SDK get_machine calls eef2efb7 CI: Update cached cirros image to 0.5.3 ad4a2cef Fix ansible-lint 5a9154bf Repair Focal support and bring back the main voting jobs 867a4c46 chore: allow ironic-inspector to work with IPv6 disabled 73431d3a Update TOX_CONSTRAINTS_FILE for stable/2023.1 47f857ab Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .ansible-lint | 2 +- .gitreview | 1 + bifrost/inventory.py | 2 +- playbooks/install.yaml | 1 + .../bifrost-configdrives-dynamic/defaults/main.yml | 3 +- .../bifrost-configdrives-dynamic/tasks/main.yml | 1 - .../bifrost-create-dib-image/defaults/main.yml | 1 + .../roles/bifrost-create-dib-image/tasks/main.yml | 8 +++- .../bifrost-create-vm-nodes/defaults/main.yml | 2 +- .../roles/bifrost-ironic-install/defaults/main.yml | 2 +- .../defaults/required_defaults_Debian_family.yml | 2 +- .../bifrost-ironic-install/tasks/migrations.yml | 1 - .../templates/dnsmasq.conf.j2 | 2 +- .../templates/ironic-inspector.conf.j2 | 2 + .../bifrost-logrotate-install/defaults/main.yml | 45 ++++++++++++++++++ .../bifrost-logrotate-install/tasks/configure.yml | 18 ++++++++ .../bifrost-logrotate-install/tasks/install.yml | 17 +++++++ .../roles/bifrost-logrotate-install/tasks/main.yml | 24 ++++++++++ .../bifrost-logrotate-install/tasks/start.yml | 22 +++++++++ .../templates/logrotate.conf.j2 | 53 ++++++++++++++++++++++ .../bifrost-prep-for-install/defaults/main.yml | 2 +- playbooks/test-bifrost.yaml | 2 +- .../notes/fix_logrotate-bb2c38c42d9e43eb.yaml | 6 +++ releasenotes/notes/no-fedora-b316bb3147f01166.yaml | 5 ++ .../online-data-migrations2-b86dff53f42718f5.yaml | 7 +++ scripts/collect-test-info.sh | 2 + scripts/install-deps.sh | 2 +- tools/ansible-lint.sh | 1 + tox.ini | 6 +-- zuul.d/bifrost-jobs.yaml | 20 ++++---- zuul.d/project.yaml | 10 ++-- 32 files changed, 238 insertions(+), 38 deletions(-)

1 0

ironic 21.1.2 (zed)
by no-reply＠openstack.org 02 May '24

02 May '24

We joyfully announce the release of: ironic 21.1.2: OpenStack Bare Metal Provisioning This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 21.1.2 ^^^^^^ Upgrade Notes ************* * Adds "sha256", "sha384" and "sha512" as supported SNMPv3 authentication protocols to iRMC driver. * "ipxe" boot_interface will be preferred to "irmc-pxe" by default with the "irmc" hardware type during the new baremetal node creation. This change doesn't affect to the existing baremetal nodes. Operators who want to continue to use "irmc-pxe" as default boot interface need to specify it in "[DEFAULT]default_boot_interface" setting in "ironic.conf". Bug Fixes ********* * Fixes bug in iRMC driver, where *irmc* power_interface sets and updates *irmc_ipmi_succeed* flag which is used by rest of iRMC driver code to deal with iRMC firmware's IPMI incompatibility but *ipmitool* power_interface doesn't set nor update *irmc_ipmi_succeed* flag and rest of iRMC driver code fail to handle iRMC firmware's IPMI incompatibility correctly. * Fixes an issue where a System Scoped user could not trigger a node into a "manageable" state with cleaning enabled, as the Neutron client would attempt to utilize their user's token to create the Neutron port for the cleaning operation, as designed. This is because with requests made in the "system" scope, there is no associated project and the request fails. Ironic now checks if the request has been made with a "system" scope, and if so it utilizes the internal credential configuration to communicate with Neutron. * Fixes the default boot interface order for the "irmc" hardware type where previously it would prefer "irmc-pxe" over "ipxe". This created inconsistencies for operators using multiple hardware types, where both interfaces were enabled in the deployment. Because the fix is backported on this point of releasae of Zed, operators who will update their environment beyond this release have to check the related upgrade note and take necessary action even though their update will be done in Zed release. * Fixes issues with Lenovo hardware where the system firmware may display a blue "Boot Option Restoration" screen after the agent writes an image to the host in UEFI boot mode, requiring manual intervention before the deployed node boots. This issue is rooted in multiple changes being made to the underlying NVRAM configuration of the node. Lenovo engineers have suggested to *only* change the UEFI NVRAM and not perform any further changes via the BMC to configure the next boot. Ironic now does such on Lenovo hardware. More information and background on this issue can be discovered in bug 2053064 (https://bugs.launchpad.net/ironic/+bug/2053064) Changes in ironic 21.1.1..21.1.2 -------------------------------- d853407fd CI: Lock Zed CI to Zed IPA 55330d372 stable only/ci: pin CI to dnsmasq 2.85/pin proliantutils/scciclient 47308caff Special case lenovo UEFI boot setup d4c3d0ad9 Fix system scoped manageable node network failure aae565bdc [iRMC] Fix IPMI incompatibility handling error cfddd47b1 Add support auth protocols for iRMC 8fd5268c1 Fix anaconda stage2_id loading from image properties e4d8c362f Change boot_interface order of iRMC driver Diffstat (except docs and test files) ------------------------------------- devstack/lib/ironic | 20 ++++++++++++---- devstack/plugin.sh | 1 + driver-requirements.txt | 7 ++++-- ironic/common/neutron.py | 6 ++++- ironic/common/pxe_utils.py | 3 ++- ironic/conf/irmc.py | 15 ++++++++++-- ironic/drivers/irmc.py | 4 ++-- ironic/drivers/modules/agent_base.py | 21 +++++++++++++++-- ironic/drivers/modules/irmc/common.py | 7 ++++-- ironic/drivers/modules/irmc/inspect.py | 12 +++++++--- ironic/drivers/modules/irmc/management.py | 18 ++++++++++----- ironic/drivers/modules/irmc/power.py | 7 ++++-- ironic/drivers/modules/pxe_base.py | 13 +++++++++++ ...atibility-patch-situation-c246d2b59b2e8a78.yaml | 8 +++++++ ...tem-scope-triggered-clean-22ada9b920c08365.yaml | 12 ++++++++++ ...c-add-snmp-auth-protocols-3ff7597cea7ef9dd.yaml | 5 ++++ ...ange-boot-interface-order-e76f5018da116a90.yaml | 19 +++++++++++++++ ...boot-to-disk-calls-lenovo-39763bfc98f602d8.yaml | 13 +++++++++++ zuul.d/project.yaml | 22 ++++++++++++++---- 23 files changed, 232 insertions(+), 35 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 876e817cb..5c667388f 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -7 +7,4 @@ -proliantutils>=2.14.0 +# NOTE(TheJulia): Proliantutils 2.16.0 moves to pysnmp-lextudio +# however that breaks on imports and with testing due to collission +# with pysnmp. +proliantutils>=2.14.0,<2.16.0 @@ -9 +12 @@ pysnmp>=4.3.0,<5.0.0 -python-scciclient>=0.12.2 +python-scciclient>=0.12.2,<0.13.0

1 0

ironic-python-agent 9.4.1 (antelope)
by no-reply＠openstack.org 02 May '24

02 May '24

We are overjoyed to announce the release of: ironic-python-agent 9.4.1: Ironic Python Agent Ramdisk This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ironic-python-agent Download the package from: https://tarballs.openstack.org/ironic-python-agent/ Please report issues through: https://storyboard.openstack.org/#!/project/openstack/ironic- python-agent For more details, please see below. 9.4.1 ^^^^^ Bug Fixes ********* * Fixes a failure case where a deployed instance may be unable to access the configuration drive post-deployment. This can occur when block devices only support 4KB IO interactions. When 4KB block IO sizes are in use, the ISO9660 filesystem driver in Linux cannot be used as it is modeled around a 2KB block. We now attempt to verify, and rebuild the configuration drive on a FAT filesystem when we cannot mount the supplied configuration drive. Operators can force the agent to write configuration drives using the FAT filesystem using the "[DEFAULT]config_drive_rebuild" option. * Fixes a failure case where downloads would not be retried when the checksum fails verification. the agent now includes the checksum activity as part of the file download operation, and will automatically retry downloads when the checksum fails in accordance with the existing download retry logic. This is largely in response to what appears to be intermittent transport failures at lower levels which we cannot otherwise detect. * Fixes UEFI NVRAM record handling with efibootmgr so we can accept and handle UTF-16 encoded data which is to be expected in UEFI NVRAM as the records are UTF-16 encoded. * Fixes handling of UEFI NVRAM records to allow for unexpected characters in the response, so it is non-fatal to Ironic. * Fixes an issue with rebuilding instances on Software RAID with RAIDed ESP partitions. * Fixes, or at least lessens the case where a running Ironic agent can stack up numerous lookup requests against an Ironic deployment when a node is locked. In particular, this is beause the lookup also drives generation of the agent token, which requires the conductor to allocate a worker, and generate the token, and return the result to the API client. Ironic's retry logic will now wait up to "60" seconds, and if an HTTP Conflict (409) message is received, the agent will automatically pause lookup operations for thirty seconds as opposed continue to attempt lookups which could create more work for the Ironic deployment needlessly. Other Notes *********** * The agent now logs the size of data transferred when downloading images, which can be helpful in troubleshooting image download issues. Changes in ironic-python-agent 9.4.0..9.4.1 ------------------------------------------- 3bf1980 Conditional creation of RAIDed ESP for UEFI Software RAID 424e4b3 Retry on checksum failures 0e6c4c4 preserve/handle config drives on 4k block devices 8045678 Handle the node being locked 33188d9 Log the number of bytes downloaded 2fe6a45 Fix UTF-16 result handling for efibootmgr 034ae89 Update TOX_CONSTRAINTS_FILE for stable/2023.1 e3f9c2b Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + ironic_python_agent/config.py | 5 + ironic_python_agent/efi_utils.py | 15 +- ironic_python_agent/extensions/standby.py | 55 ++++- ironic_python_agent/ironic_api_client.py | 27 ++- ironic_python_agent/partition_utils.py | 98 ++++++++- ironic_python_agent/raid_utils.py | 112 ++++++---- ...-block-size-config-drives-4470828dd06d2600.yaml | 12 ++ ...dering-download-completed-91cca9fef34d8cf5.yaml | 11 + ...ootmgr-character-encoding-19e531ba694824c1.yaml | 9 + .../notes/log-download-size-57982fa8df336520.yaml | 5 + .../rebuild_on_esp_raid-33f359bdf5ccaa09.yaml | 5 + ...d-node-conflict-is-locked-2ea21dd45abfe4f7.yaml | 13 ++ tox.ini | 8 +- 21 files changed, 740 insertions(+), 133 deletions(-)

1 0

horizon 23.0.2 (zed)
by no-reply＠openstack.org 30 Apr '24

30 Apr '24

We jubilantly announce the release of: horizon 23.0.2: OpenStack Dashboard This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. Changes in horizon 23.0.1..23.0.2 --------------------------------- 5de40f9b2 Fix error on changing user password by admin Diffstat (except docs and test files) ------------------------------------- openstack_dashboard/api/keystone.py | 1 + 1 file changed, 1 insertion(+)

1 0

octavia 11.0.3 (zed)
by no-reply＠openstack.org 29 Apr '24

29 Apr '24

We enthusiastically announce the release of: octavia 11.0.3: OpenStack Octavia Scalable Load Balancer as a Service This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/octavia Download the package from: https://pypi.org/project/octavia Please report issues through: https://storyboard.openstack.org/#!/project/908 For more details, please see below. 11.0.3 ^^^^^^ Bug Fixes * Fixed error on update UDP Health Monitor with empty "delay" parameter * Fix the issue, when "limit" parameter in request less or equal 0. Now it returns resources according pagination_max_limit as expected, instead of error. * Fixed a bug with HTTP/HTTPS health-monitors on pools with ALPN protocols in the amphora-driver. The healthchecks sent by haproxy were flagged as bad requests by the backend servers. Updated haproxy configuration to use ALPN for the heathchecks too. * Fixed TLS-HELLO health-monitors in the amphora-driver. * Fix the issue where nf_conntrack* opts values are lost after rebooting the Amphora VM. more details Story 2010795 * Fixed SQLAlchemy warnings about the relationship between the Tags object and the other Octavia resources. Changes in octavia 11.0.2..11.0.3 --------------------------------- 944b6b1a Fix negative or 0 limit parameter in pagination 32d0e3d1 Handle empty delay on update healthmonitor dda3e4a1 Fix the issue of losing nf_conntrace* values after a reboot. 5b8f49ff Don't update the management port when calculating delta [v1] beb64534 Fix TLS-HELLO healthmonitors in the amphora-driver 778859a2 Fix health-monitors with ALPN members 6ae57727 Fix SQLAlchemy warning about conflict relationship with Tags 48b9d42a Rename Context to RequestContext Diffstat (except docs and test files) ------------------------------------- .../api_server/templates/amphora-netns.systemd.j2 | 4 +- octavia/api/common/hooks.py | 3 +- octavia/api/common/pagination.py | 2 +- octavia/api/v2/controllers/health_monitor.py | 4 +- octavia/common/context.py | 2 +- .../haproxy/combined_listeners/templates/macros.j2 | 12 ++-- .../controller/worker/v1/tasks/network_tasks.py | 22 ++++--- .../worker/v2/tasks/notification_tasks.py | 3 +- octavia/db/models.py | 21 ++++--- .../api/v2/test_availability_zone_profiles.py | 15 +++-- .../functional/api/v2/test_availability_zones.py | 15 +++-- .../functional/api/v2/test_flavor_profiles.py | 15 +++-- .../haproxy/combined_listeners/test_jinja_cfg.py | 33 +++++------ .../worker/v1/tasks/test_network_tasks.py | 11 ---- .../worker/v2/tasks/test_notification_tasks.py | 9 +-- ...itor-update-without-delay-c56240e59e15483f.yaml | 4 ++ ...nation-less-or-equal-zero-93a33f1318ea34e5.yaml | 6 ++ ...thmonitor-with-alpn-pools-82249b2b9a025068.yaml | 7 +++ ...-tls-hello-healthmonitors-a4b98a80f6de8394.yaml | 4 ++ ...-ipvs-before-setting-opts-c5b2f0871bc38c27.yaml | 5 ++ ...ags-relationship-warnings-a3c0175135f6cd84.yaml | 5 ++ 34 files changed, 480 insertions(+), 220 deletions(-)

1 0

neutron 21.2.1 (zed)
by no-reply＠openstack.org 26 Apr '24

26 Apr '24

We are tickled pink to announce the release of: neutron 21.2.1: OpenStack Networking This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 21.2.1 ^^^^^^ New Features ************ * Remote address group support was added to the iptables-based firewall drivers (IptablesFirewallDriver and OVSHybridIptablesFirewallDriver), Previously it was only available in the OVSFirewallDriver. For more information, see bug 2058138 (https://bugs.launchpad.net/neutron/+bug/2058138) Known Issues ************ * The fix of bug 2048785 (https://bugs.launchpad.net/neutron/+bug/2048785) only fixes newly created trunk parent ports. If the fix of already existing trunks is needed, then either delete and re-create the affected trunks or set tpt ports' vlan_mode and tag manually: "ovs-vsctl set Port tpt-... vlan_mode=access tag=0" Bug Fixes ********* * The config option "agent_down_time" is now limited to a maximum value of *2147483*, as neutron-server will fail to start if it is configured higher. See bug 2028724 (https://bugs.launchpad.net/neutron/+bug/2028724) for more information. * [bug 2036423 (https://bugs.launchpad.net/neutron/+bug/2036423) Now it is not possible to delete a subnet gateway IP if that subnet has a router interface; the subnet gateway IP modification was already forbidden. * When synchronizing the OVN databases, either when running the migration command or during startup, the code responsible for synchronization will only clean up segment-to-host mappings for hosts with agent_type "OVN Controller agent". Before, the synchronization would clean up (delete) segment-to-host mappings for non-OVN hosts. Fixes bug: 2040172 (https://bugs.launchpad.net/neutron/+bug/2040172) Other Notes *********** * Added extension "subnetpool-prefix-ops" to the ML2/OVN mechanism driver. Changes in neutron 21.2.0..21.2.1 --------------------------------- 4fc3c71546 Fix KeyError failure in _sync_subnet_dhcp_options() de9e3e8c9b Fix TestOVNMechanismDriver ipv6 tests ca25eb96f1 Enhance IptablesFirewallDriver with remote address groups 386ebde547 Use the system-dependent string for IP protocol 4 29d28152ac Remove duplicate rows in MySQL query output 38ac22354d fix netns deletion of broken namespaces cf21a4d979 [OVN] Set MTU of the VETH interfaces between OVS and metadata 7c7b020abe Fix iptables mapping of 'ipip' protocol d253552ad2 [stable-only][OVN] Set VETH interface MAC address before up b7e219391d Stable-Only: Temporary stop running grenade jobs on Zed aedb872e4f Ensure that haproxy spawned by the metadata agents is active 85debddc1c Remove TripleO jobs 32d7efbfb0 Retry ``set|get_link_attribute(s)`` if the interface is not present b9e3818b6e [OVN] Add ``subnetpool-prefix-ops`` extension to ML2/OVN mech driver 1f5ce18a14 [OVN][FT] Retry in case of timeout when executing "ovsdb-client". c47c600b6a [Fullstack] Consolidate segmentation_id update tests into single test 5250b62a85 [Fullstack] Remove SecurityGroupRulesTest.test_normalized_cidr_in_rule test af83df07f4 [Fullstack] Remove test_port_shut_down module 69bda7333f [Fullstack] Remove unnecessary tests 2de488ab11 Set trunk parent port as access port in ovs to avoid loop 0396b33bc4 Revert "Add sleep before checking if ovs port is in the namespace" 905e2e430a Forbid the subnet gateway IP deletion if a router interface is attached 8f15164068 Register Chassis_Private table in BaseOvnSbIdl 222c997022 Add sleep before checking if ovs port is in the namespace 2c8076dd28 Add max limit to agent_down_time 5dcad1d7c7 Don't set port capabilities for OVS HW offloading bbe235779b Improve the SG RPC callback ``security_group_info_for_ports`` 602bb1a325 [OVN][FT] Make explicit the "publish" call check in "test_port_forwarding" 4eb234a447 [OVN] DB sync host/physnet - filter on agent_type 4698dd899f Metadata: handle process exceptions 74a3262a8a Correctly validate subnet arguments when using a subnetpool de5b7244ee [Fullstack] Double check that agent is dead when it should be dead 69e0dacd05 [DHCP agent] Fetch OVN Metadata port from plugin 9d22276013 get_hosts_mapped_with_segments add filter agt_type cbebc3dd8a [DHCP agent] Fix route to OVN metadata port for non-isolated networks b2100c6a29 docs: update default value of metadata workers for ml2/ovn 61ad633a33 Catch non-existent entry failures better in ip_lib Diffstat (except docs and test files) ------------------------------------- .../contributor/internals/openvswitch_agent.rst | 34 +-- neutron/agent/linux/dhcp.py | 5 +- neutron/agent/linux/ip_lib.py | 17 +- neutron/agent/linux/iptables_firewall.py | 20 +- neutron/agent/metadata/driver.py | 8 +- neutron/agent/ovn/metadata/agent.py | 48 ++-- neutron/agent/ovn/metadata/driver.py | 8 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 10 +- neutron/common/ovn/extensions.py | 2 + neutron/conf/agent/database/agents_db.py | 5 + neutron/conf/agent/metadata/config.py | 2 +- neutron/db/db_base_plugin_v2.py | 54 ++-- neutron/db/securitygroups_rpc_base.py | 25 +- neutron/objects/router.py | 19 +- neutron/objects/securitygroup.py | 7 + .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 11 +- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 19 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 2 + neutron/privileged/agent/linux/ip_lib.py | 32 ++- neutron/services/segments/db.py | 37 ++- .../drivers/openvswitch/agent/trunk_manager.py | 12 +- .../functional/agent/linux/test_bridge_lib.py | 7 + .../ovn/mech_driver/ovsdb/test_maintenance.py | 8 +- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 50 ++++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 9 +- .../privileged/agent/linux/test_ip_lib.py | 78 +++-- .../openvswitch/agent/test_trunk_manager.py | 8 + .../unit/agent/linux/test_iptables_firewall.py | 58 ++++ .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 15 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 8 +- .../unit/privileged/agent/linux/test_ip_lib.py | 11 + .../agent_down_time_max-af3b62763aaa2fe5.yaml | 6 + ...85-trunk-parent-vlan-mode-9280ff2d45403bde.yaml | 8 + ...deletion-router-interface-072a18373f920ed9.yaml | 6 + ...ort-remote-address-groups-89da589aad3c01d3.yaml | 8 + ...ion-subnetpool-prefix-ops-9b2e4dbdcc174ede.yaml | 3 + ...physnet-filter-agent-type-9e22942bed304807.yaml | 10 + zuul.d/job-templates.yaml | 22 -- zuul.d/project.yaml | 13 +- zuul.d/tripleo.yaml | 79 ------ 63 files changed, 954 insertions(+), 1013 deletions(-)

1 0