- Release-announce - lists.openstack.org

tempest 35.0.0 (bobcat)
by no-reply＠openstack.org 09 Jun '23

09 Jun '23

We are pumped to announce the release of: tempest 35.0.0: OpenStack Integration Testing This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/tempest Download the package from: https://pypi.org/project/tempest Please report issues through: https://bugs.launchpad.net/tempest/+bugs For more details, please see below. 35.0.0 ^^^^^^ Prelude ******* This is an intermediate release during the 2023.2 development cycle to mark the end of support for EM Xena release in Tempest. After this release, Tempest will support below OpenStack Releases: * 2023.1 * Zed * Yoga Current development of Tempest is for OpenStack 2023.2 development cycle. New Features ************ * Add delete_attachment to the v3 AttachmentsClient and terminate_connection to the v3 VolumesClient. Changes in tempest 34.2.0..35.0.0 --------------------------------- 366e020b2 Pin stable/2023.1 constraint in tox to release 35.0.0 c550f7797 End support for stable/xena 86b8b6204 [FIX] Floating IP already exists error b764ca1b5 Remove ubuntu focal job 037ea4efe Enable Nova, Glance RBAC old defaults in pre provisioned account testing bd97ae91e Fix test_delete_locations to be performed by admin cbaf22e85 Add tests to check attachments are secure 368d19d7e Remove closure _unshelve_server not useful be79b46bb Add request id to logs if we get a timeout. 2ba26afc1 Add skip for cinder extend volume with snapshot 4054e13e6 Create releasenotes page for tempest 34.2.0 e5da6756b Also require resources for PINGABLE 274878649 Make volumes_backup test wait for SSHABLE 0ab4ca3f3 Switch to the master constraint in tox.ini Diffstat (except docs and test files) ------------------------------------- .../add-volume-detach-libs-2cbb3ca924aed0ac.yaml | 5 + .../end-of-support-of-xena-2e747cff7f8bc48a.yaml | 12 ++ releasenotes/source/index.rst | 1 + releasenotes/source/v34.2.0.rst | 6 + tempest/api/compute/servers/test_server_actions.py | 15 +- tempest/api/image/base.py | 78 +++++++++ tempest/api/image/v2/admin/test_images.py | 38 +++++ tempest/api/image/v2/test_images.py | 107 +----------- tempest/api/volume/admin/test_volumes_actions.py | 6 +- tempest/api/volume/test_volumes_backup.py | 8 +- tempest/api/volume/test_volumes_extend.py | 3 + tempest/common/compute.py | 9 +- tempest/config.py | 6 + tempest/lib/api_schema/response/volume/volumes.py | 1 + .../lib/services/volume/v3/attachments_client.py | 7 + tempest/lib/services/volume/v3/volumes_client.py | 13 +- tempest/scenario/test_server_basic_ops.py | 12 +- tempest/scenario/test_server_volume_attachment.py | 189 +++++++++++++++++++++ zuul.d/integrated-gate.yaml | 9 - zuul.d/project.yaml | 10 +- zuul.d/stable-jobs.yaml | 18 -- zuul.d/tempest-specific.yaml | 7 +- 22 files changed, 390 insertions(+), 170 deletions(-)

1 0

ovn-octavia-provider 4.0.1 (antelope)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We eagerly announce the release of: ovn-octavia-provider 4.0.1: OpenStack Octavia integration with OVN This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/ovn-octavia-provider Download the package from: https://tarballs.openstack.org/ovn-octavia-provider/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in ovn-octavia-provider 4.0.0..4.0.1 -------------------------------------------- 125ffe7 Discard batch-update-members not valid request 099871f Apply admin_state_up on a new member creation e5c9146 Add retry on case of sqlite3.InterfaceError on FT d3e395a Fix update member action 67fa32f Use ovsdbapp commands to add/del backends to ip_port_mappings b78904c [stable/2023.1 only] Drop -master jobs Diffstat (except docs and test files) ------------------------------------- ovn_octavia_provider/driver.py | 43 +-- ovn_octavia_provider/helper.py | 360 ++++++++++++--------- ovn_octavia_provider/ovsdb/impl_idl_ovn.py | 46 +++ zuul.d/base.yaml | 22 -- zuul.d/project.yaml | 4 - 9 files changed, 516 insertions(+), 308 deletions(-)

1 0

neutron-lib 3.4.1 (antelope)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are pumped to announce the release of: neutron-lib 3.4.1: Neutron shared routines and utilities This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 3.4.0..3.4.1 ----------------------------------- 86ea887 Add a "GROUP BY" clause on queries with RBAC entries a130649 Context.elevated() method sets all required roles for context object 57dcd12 Return properly elevated context by get_admin_context() helper d9d10ea Use proper neutron-tempest-plugin template in 2023.1 branch 2851f84 Update TOX_CONSTRAINTS_FILE for stable/2023.1 5af6738 Update .gitreview for stable/2023.1 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .zuul.yaml | 2 +- neutron_lib/context.py | 17 +++++++++++------ neutron_lib/db/model_query.py | 9 +++++++++ tox.ini | 10 +++++----- 6 files changed, 58 insertions(+), 12 deletions(-)

1 0

neutron-lib 3.1.2 (zed)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are overjoyed to announce the release of: neutron-lib 3.1.2: Neutron shared routines and utilities This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron-lib Download the package from: https://pypi.org/project/neutron-lib Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-lib 3.1.1..3.1.2 ----------------------------------- fdbece1 Add a "GROUP BY" clause on queries with RBAC entries 00d4c31 Context.elevated() method sets all required roles for context object cbfb104 Return properly elevated context by get_admin_context() helper 7bc352a Do not set system scope on context Diffstat (except docs and test files) ------------------------------------- neutron_lib/context.py | 21 +++++++++++---------- neutron_lib/db/model_query.py | 9 +++++++++ 3 files changed, 53 insertions(+), 11 deletions(-)

1 0

ovn-octavia-provider 3.1.1 (zed)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We exuberantly announce the release of: ovn-octavia-provider 3.1.1: OpenStack Octavia integration with OVN This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/ovn-octavia-provider Download the package from: https://tarballs.openstack.org/ovn-octavia-provider/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in ovn-octavia-provider 3.1.0..3.1.1 -------------------------------------------- 36d507e Discard batch-update-members not valid request 2f5b273 Apply admin_state_up on a new member creation 23ea3bb Add retry on case of sqlite3.InterfaceError on FT 187d3fc Fix update member action dfb5cc7 Use ovsdbapp commands to add/del backends to ip_port_mappings 75b8456 Fix broken pep8 jobs due to bandit 1.7.5 updated version 5f1567c Add new FTs for health monitoring basic operations aa2c9a3 Remove HM uuiid from LB external_ids when the HM's pool is deleted 0f5e9b3 Reset member provisioning status to NO_MONITOR when a HM is deleted Diffstat (except docs and test files) ------------------------------------- ovn_octavia_provider/common/constants.py | 3 + ovn_octavia_provider/driver.py | 49 +-- ovn_octavia_provider/helper.py | 447 ++++++++++++--------- ovn_octavia_provider/ovsdb/impl_idl_ovn.py | 46 +++ 8 files changed, 854 insertions(+), 316 deletions(-)

1 0

neutron-dynamic-routing 21.0.1 (zed)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are thrilled to announce the release of: neutron-dynamic-routing 21.0.1: Neutron Dynamic Routing This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron-dynamic-routing Download the package from: https://tarballs.openstack.org/neutron-dynamic-routing/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-dynamic-routing 21.0.0..21.0.1 ------------------------------------------------- 962bb66 Fix address_scope calculation 0d7fb34 Fix tox.ini for tox4 0eb1c1d Update TOX_CONSTRAINTS_FILE for stable/zed dc198d6 Update .gitreview for stable/zed Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + neutron_dynamic_routing/db/bgp_db.py | 8 +++++--- tox.ini | 13 ++++++------- 3 files changed, 12 insertions(+), 10 deletions(-)

1 0

ironic 22.0.0 (bobcat)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are tickled pink to announce the release of: ironic 22.0.0: OpenStack Bare Metal Provisioning This release is part of the bobcat release series. The source is available from: https://opendev.org/openstack/ironic Download the package from: https://tarballs.openstack.org/ironic/ Please report issues through: https://storyboard.openstack.org/#!/project/943 For more details, please see below. 22.0.0 ^^^^^^ New Features ************ * Add new conductor conf option: [conductor]poweroff_in_cleanfail (default: False). when True nodes entering clean failed state will be powered off. This option may be unsafe when using Cleaning to perform hardware-transformative actions such as firmware upgrade. * Adds the concept of "parent_node" which allows a "child node", such as an independently managed BMC controlled device deployed within a "parent_node" as part of API version *1.83*. Child nodes are hidden from normal node lists as they are not "general purpose" machines, but have a specific embedded usage. In this model, RBAC rules also apply so if you wish an "owner" or "lessee" to have the child node visible, they must also have the the appropriate "owner" or "lessee" value set matching the parent node. * Adds a "/v1/nodes/?include_children=True" parameter to get a list of all nodes and their children. * Adds a "/v1/nodes/?parent_node=<node_ident>" query parameter to permit retrieval of a list of child nodes assigned to the parent denoted by "<node_ident>". * On shutdown the conductor will wait for at most "[DEFAULT]graceful_shutdown_timeout" seconds for existing lock node reservations to clear. Previously lock reservations were cleared immediately, which in some cases would result in nodes going into a failed state. * The Redfish firmware upgrade interface now supports checksum determination by length, and "sha256" and "sha512" checksums may now be supplied to the step arguments. Upgrade Notes ************* * This upgrade contains an additional field for the "nodes" table, named "parent_node". This update also indexes the "parent_node" database column to prevent performance issues in large deployments. * "[DEFAULT]graceful_shutdown_timeout" defaults to 60s. Systemd "TimeoutStopSec" defaults to 30s. Kubernetes "terminationGracePeriodSeconds" defaults to 90s. It is recommended to align the value of "[DEFAULT]graceful_shutdown_timeout" with the graceful timeout of the process manager of the conductor process. * Fully removes the "cpus" property from the documentation and inspect interface implementations. It was never used internally by Ironic, and is no longer used by Nova. * The defaults for "kernel_append_params" have had the Linux kernel command line parameter "nomodeset" removed from the defaults for the "kernel_append_params" settings. The "nomodeset" option is for troubleshooting and changes the behavior of the graphics interface such that memory can be locked upon graphical updates on physical servers with BMC graphical interfaces, which results in spikes in latency and packet loss whenever graphics updates occur. Operators may add the option to their local configuration, but should be aware that large image transfers or other high IO operations can be impacted. Bug Fixes ********* * [bug 2010613 (https://storyboard.openstack.org/#!/story/2010613) Fixes issue with SNMP v3 auth protocol and priv protocol set in driver info not being retrieved correctly when a SNMP client is initialized. * Fixes Ironic integration with Cinder because of changes which resulted as part of the recent Security related fix in bug 2004555 (https://launchpad.net/bugs/2004555) The work in Ironic to track this fix was logged in bug 2019892 (https://bugs.launchpad.net/ironic/+bug/2019892) Ironic now sends a service token to Cinder, which allows for access restrictions added as part of the original CVE-2023-2088 fix to be appropriately bypassed. Ironic was not vulnerable, but the restrictions added as a result did impact Ironic's usage. This is because Ironic volume attachments are not on a shared "compute node", but instead mapped to the physical machines and Ironic handles the attachment life- cycle after initial attachment. * Fixes "Invalid cross-device link" in some cases when using "file://" image URLs. * Fixes issues in Ironic's use of SQLAlchemy with SQLite Databases, which is common with users like Metal3, which prevented Ironic from supporting SQLAlchemy 2.0 properly, as autocommit was re-enabled. * Fixes bug of iRMC driver in parse_driver_info where, if FIPS is enabled, SNMP version is always required to be version 3 even though iRMC driver's xxx_interface doesn't use SNMP actually. * Fixes bug in iRMC driver, where *irmc* power_interface sets and updates *irmc_ipmi_succeed* flag which is used by rest of iRMC driver code to deal with iRMC firmware's IPMI incompatibility but *ipmitool* power_interface doesn't set nor update *irmc_ipmi_succeed* flag and rest of iRMC driver code fail to handle iRMC firmware's IPMI incompatibility correctly. * Fixes an issue where an agent token could be inadvertently orphaned if a node is already in the target power state when we attempt to turn the node off. * Fixes scope classification check with the "self_owned_node" policy check where it was limited to check execution with only project scoped, so system scoped users who ticked the policy endpoint would basically get an incorrect error. * Enables boot mode switching during anaconda deploy for "ilo" and "ilo5" hardware types. * Fixes secure boot with anaconda deploy. * Fixes the bug where provisioning a Redfish managed node fails if the BMC doesn't support EthernetInterfaces attribute, even if MAC address information is provided manually. This is done by handling of MissingAttributeError sushy exception in get_mac_addresses() method. This fix is needed to successfully provision machines such as Cisco UCSB and UCSX. * No longer re-calculates checksums for images that are already raw. Previously, it would cause significant delays in deploying raw images. * Fixes an issue where the database upgrade can hang on Python 3.10. This was because open transactions could become orphaned awaiting the Python runtime to clean up their memory references due to the way the overall database query was being intiiated to pre-flight check the upgrade. We have structurally changed the behavior to remedy this case. * Agents deploying on physical servers with default kernel arguments were suspetible to packet loss if a Matrox VGA/Aspeed BMC Graphics interface is present on the machine. The defaults have been changed to remove the use of the "nomodeset" kernel command line parameter which should only be used for troubleshooting as it has been determined that the memory updates can lock all of the kernel memory upon any console graphics update which can negatively impact IO for Networking or Disk interactions. * Fixes an issue where an agent token was being orphaned if a baremetal node timed out during cleaning operations, leading to issues where the node would not be able to establish a new token with Ironic upon future in some cases. We now always wipe the token in this case. Changes in ironic 21.4.0..22.0.0 -------------------------------- bf850cad1 Make metal3 job voting d66530494 Add DB model for Firmware aeb01a075 follow-up on DPU change api-ref da0d7494e Add ironic-grenade-skip-level Job d2039a29d Handle nova policy change 124ad571f Explicitly pin CIRROS_VERSION eaf26c7c6 Remove unused get_not_versions from dbapi ea68a4a79 Remove model_query use from general dbapi calls 93688e953 Explicitly use a session for DB version check 3f5e25e18 DPU modeling - parent_node DB/Model/API 27bf20911 [iRMC] Fix IPMI incompatibility handling error 4beeef777 CI: DB: Don't return inside of node get wrappers fce8c3a65 CI: Change tinycore URL 8b98dfafd CI: Disable mysql counters for grenade 1cb371327 CI: Try to isolate test failures in neutron vif logic 9c0b4c90a Fix Cinder Integration fallout from CVE-2023-2088 65b8895e8 Update docs: Ironic uses launchpad now 912dcbbdc CI: Mark BFV job non-voting for now c8c83ef54 Migrate to pysnmp lextudio ecosystem 995e38cd7 Don't return the in-flight SQL handler 9da6dfd73 Fix self_owned_node policy check 17d3b72b3 Remove indicators list by component from api-ref 3139460cd Imported Translations from Zanata 1b8c0be0b Fix api-ref v1-indicators cec72275a CI: Fix another network test 451857777 CI: Modify dhcp client ID fail b48dfd44c Use monotonic time for hashring reset cae05c70e Make rbac enforced test non-voting for the time being 7a5f80cec Fix anaconda stage2_id loading from image properties 03cd9788e Support longer checksums for redfish firmware upgrade 7f281392c Change wholedisk image checksum to sha256 f10958a54 Handle MissingAttributeError when using OOB inspections to fetch MACs c03a5b44e Remove autocommit, again. 75b881bd3 Fix DB/Lock session handling issues f2605e928 Remove use of nomodeset by default 3f09bdcf9 [iRMC] Fix parse_driver_info bug enforcing SNMP v3 under FIPS mode c7b8236ab Configure docs: we no longer use storyboard 510a612ee Add ablity to power off nodes in clean failed e0c0b771e [iRMC] Fix typo of Python string format in log message 153d4d838 Upgrade to latest hacking - v6 708354573 tests: Replace invalid UUIDs 00aadf570 db: Resolve SAWarning warnings 5268c50a7 Run metal3 integration with ironic-image from source a5a737e38 Set ironic-grenade to wait 120 seconds 9f422a8df Fix requests calls with timeouts cc9fa8526 Remove outdated API version information from the enrollment docs 59c6ad96c Always fall back from hard linking to copying files 4bcef0eee Do not log into the template1 database during test-setup ebc1053ce Exclude all files starting with . from flake8 tests 3e21560bf Remove all references to the "cpus" property b201e52f8 [CI] Fix port list benchmark d0448ea20 Use main branch of metal3-dev-env to run metal3 integration job 21437135a Add error logging on lookup failures in the API 6341003da Enables boot modes switching with Anaconda deploy for ilo driver c5e004a73 Fixes Secureboot with Anaconda deploy e30ba65f9 Refactoring: clean up inspection data handlers 3dd54a110 Refactoring: DRY in the root API controller 0e7c6f978 Refactoring: create ironic.conductor.inspection b13ce6eb3 Imported Translations from Zanata 48ea2c5e7 Update master for stable/2023.1 f00da959e Do not recalculate checksum if disk_format is not changed a6d87a608 Add a non-voting metal3 CI job bcf6c1226 Clean out agent token even if power is already off 47b590948 Wipe Agent Token when cleaning timeout occcurs 005f21c0d Fix auth_protocol and priv_protocol for SNMP v3 d43f7fbc6 Refactoring: extract some common functions from the inspector code 9acfd5136 Restructure the inspector module in preparation for its expansion b41d5d514 Document [fake] delay config values 6a9e319fb On rpc service stop, wait for node reservation release Diffstat (except docs and test files) ------------------------------------- README.rst | 2 +- api-ref/source/baremetal-api-v1-indicators.inc | 45 +--- api-ref/source/baremetal-api-v1-nodes.inc | 18 ++ api-ref/source/conf.py | 2 +- api-ref/source/parameters.yaml | 13 + .../node-indicators-component-list-response.json | 45 ---- .../source/samples/node-inventory-response.json | 1 - devstack/lib/ironic | 17 +- devstack/tools/ironic/scripts/cirros-partition.sh | 2 +- .../install/include/kernel-boot-parameters.inc | 4 +- driver-requirements.txt | 4 +- ironic/api/controllers/v1/__init__.py | 146 +++-------- ironic/api/controllers/v1/node.py | 206 +++++++++++---- ironic/api/controllers/v1/ramdisk.py | 6 +- ironic/api/controllers/v1/utils.py | 17 +- ironic/api/controllers/v1/versions.py | 4 +- ironic/common/cinder.py | 71 +++++- ironic/common/hash_ring.py | 4 +- ironic/common/image_service.py | 35 +-- ironic/common/keystone.py | 24 +- ironic/common/kickstart_utils.py | 4 +- ironic/common/molds.py | 6 +- ironic/common/policy.py | 12 +- ironic/common/pxe_utils.py | 3 +- ironic/common/release_mappings.py | 4 +- ironic/common/rpc_service.py | 18 +- ironic/common/utils.py | 28 ++ ironic/conductor/base_manager.py | 17 +- ironic/conductor/inspection.py | 108 ++++++++ ironic/conductor/manager.py | 100 +------- ironic/conductor/utils.py | 17 +- ironic/conf/conductor.py | 8 + ironic/conf/default.py | 5 +- ironic/conf/ilo.py | 2 +- ironic/conf/inventory.py | 15 +- ironic/conf/opts.py | 1 - ironic/conf/pxe.py | 2 +- ironic/conf/redfish.py | 2 +- ironic/db/api.py | 10 - ironic/db/sqlalchemy/__init__.py | 23 +- .../163040c5513f_add_firmware_information.py | 50 ++++ .../versions/fe222f476baf_add_parent_node_field.py | 35 +++ ironic/db/sqlalchemy/api.py | 269 ++++++++++++-------- ironic/db/sqlalchemy/models.py | 21 +- ironic/drivers/base.py | 4 +- .../ansible/playbooks/library/stream_url.py | 3 +- ironic/drivers/modules/deploy_utils.py | 37 ++- ironic/drivers/modules/drac/inspect.py | 14 - ironic/drivers/modules/drac/raid.py | 2 +- ironic/drivers/modules/ilo/boot.py | 12 + ironic/drivers/modules/inspect_utils.py | 129 +++++----- ironic/drivers/modules/inspector/__init__.py | 15 ++ ironic/drivers/modules/inspector/client.py | 57 +++++ .../{inspector.py => inspector/interface.py} | 105 ++------ ironic/drivers/modules/irmc/common.py | 12 + ironic/drivers/modules/irmc/inspect.py | 5 +- ironic/drivers/modules/irmc/management.py | 18 +- ironic/drivers/modules/pxe.py | 15 +- ironic/drivers/modules/pxe_base.py | 7 +- ironic/drivers/modules/redfish/firmware_utils.py | 18 +- ironic/drivers/modules/redfish/inspect.py | 4 +- ironic/drivers/modules/redfish/management.py | 11 +- ironic/drivers/modules/snmp.py | 4 +- ironic/hacking/checks.py | 2 +- ironic/objects/node.py | 8 +- .../unit/drivers/modules/drac/test_inspect.py | 22 -- .../unit/drivers/modules/inspector/__init__.py | 0 .../unit/drivers/modules/inspector/test_client.py | 65 +++++ .../test_interface.py} | 70 +---- .../unit/drivers/modules/irmc/test_inspect.py | 6 - .../unit/drivers/modules/network/test_common.py | 27 +- .../drivers/modules/redfish/test_firmware_utils.py | 24 ++ .../unit/drivers/modules/redfish/test_inspect.py | 18 +- .../drivers/modules/redfish/test_management.py | 10 + .../unit/drivers/modules/test_deploy_utils.py | 73 +++++- .../unit/drivers/modules/test_inspect_utils.py | 136 ++++------ playbooks/metal3-ci/fetch_kube_logs.yaml | 32 +++ playbooks/metal3-ci/fetch_pod_logs.yaml | 24 ++ playbooks/metal3-ci/post.yaml | 194 ++++++++++++++ playbooks/metal3-ci/run.yaml | 39 +++ .../Cleanfail-power-off-13b5fdcc2727866a.yaml | 8 + .../add-parent-node-support-10bd42abd008db6f.yaml | 23 ++ .../notes/bug-2010613-3ab1f32aaa776f28.yaml | 7 + .../notes/cinder-2019892-6b5a9de5c5f05aa6.yaml | 16 ++ .../notes/cross-link-1ffd1a4958f14fd7.yaml | 5 + ...b-sqlite-OperationalError-7934dbda2a21c69e.yaml | 6 + ...nforcing-snmpv3-with-fips-e45971d363925ec3.yaml | 6 + ...atibility-patch-situation-c246d2b59b2e8a78.yaml | 8 + .../fix-power-off-token-wipe-e7d605997f00d39d.yaml | 6 + ...ix-self-owned-node-policy-fc2dae357879dc33.yaml | 7 + ...a_deploy_with_ilo_drivers-16637adb62f0ed2f.yaml | 5 + ...boot_with_anaconda_deploy-84d7c1e3bbfa40f2.yaml | 4 + .../graceful_shutdown_wait-9a62627714b86726.yaml | 15 ++ ...g-ethernetinterfaces-attr-7e52f7259fe66762.yaml | 9 + releasenotes/notes/no-cpus-c79717303470bf3c.yaml | 6 + .../notes/no-recalculate-653e524fd6160e72.yaml | 5 + ...sh-firmware-sha256-sha512-3e40c3a087fe42b4.yaml | 6 + ...-model-query-from-upgrade-af227b6c8a5d654a.yaml | 9 + .../notes/remove-nomodset-7a352a9519c1045b.yaml | 22 ++ ...ken-upon-cleaning-timeout-c9add514fad1b02c.yaml | 7 + releasenotes/source/2023.1.rst | 6 + releasenotes/source/conf.py | 2 +- releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 55 +++- test-requirements.txt | 4 +- tools/benchmark/generate-statistics.py | 2 + tools/test-setup.sh | 2 +- tox.ini | 4 +- zuul.d/ironic-jobs.yaml | 13 + zuul.d/metal3-jobs.yaml | 30 +++ zuul.d/project.yaml | 13 +- 159 files changed, 3129 insertions(+), 1473 deletions(-) Requirements updates -------------------- diff --git a/driver-requirements.txt b/driver-requirements.txt index 876e817cb..c5a90f2d0 100644 --- a/driver-requirements.txt +++ b/driver-requirements.txt @@ -8 +8,3 @@ proliantutils>=2.14.0 -pysnmp>=4.3.0,<5.0.0 +pysnmp-lextudio>=5.0.0 # BSD +pyasn1-lextudio>=1.1.0 # BSD +pyasn1-modules-lextudio>=0.2.0 # BSD diff --git a/test-requirements.txt b/test-requirements.txt index 0c4bdb0ca..57c4a9c2c 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -16 +16,3 @@ WebTest>=2.0.27 # MIT -pysnmp>=4.4.12 +pysnmp-lextudio>=5.0.0 # BSD +pyasn1-lextudio>=1.1.0 # BSD +pyasn1-modules-lextudio>=0.2.0 # BSD

1 0

neutron 21.1.1 (zed)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are chuffed to announce the release of: neutron 21.1.1: OpenStack Networking This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 21.1.1 ^^^^^^ Known Issues ************ * The high availability of metadata service on isolated networks is limited or non-existent. IPv4 metadata is redundant when the DHCP agent managing it is redundant, but recovery is tied to the renewal of the DHCP lease, making most recoveries very slow. IPv6 metadata is not redundant at all as the IPv6 metadata address can only be configured in a single place at a time as it is link-local. Multiple agents trying to configure it will generate an IPv6 duplicate address detection failure. Administrators may observe the IPv6 metadata address in "dadfailed" state in the DHCP namespace for this reason, which is only an indication it is not highly available. Until a redesign is made to the isolated metadata service there is not a better deployment option. See bug 1953165 (https://bugs.launchpad.net/neutron/+bug/1953165) for information. * The *redirect-type=bridged* option is only used if all the tenant networks connected to the router are of type VLAN or FLAT. In this case their traffic will be distributed. However, if there is a mix of VLAN/FLAT and geneve networks connected to the same router, the redirect-type option is not set, and therefore the traffic for the VLAN/FLAT networks will also be centralized but not tunneled. Bug Fixes ********* * 1986003 (https://bugs.launchpad.net/neutron/+bug/1986003) Fixed an issue with concurrent requests to activate the same port binding where one of the requests returned a 500 Internal Server Error. With the fix one request will return successfully and the other will return a 409 Conflict (Binding already active). This fixes errors in nova live-migrations where those concurrent requests might be sent. Nova handles the 409/Conflict response gracefully. * Fix an issue in the OVN driver where network metadata could become unavailable if the metadata port was ever deleted, even if accidental. To re-create the port, a user can now disable, then enable, DHCP for one of the subnets associated with the network using the Neutron API. This will try and create the port, similar to what happens in the DHCP agent for ML2/OVS. For more information, see bug 2015377 (https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/2015377) * [bug 2003455 (https://bugs.launchpad.net/neutron/+bug/2003455) As part of a previous commit (https://review.opendev.org/c/openstack/neutron/+/875644) the *redirect-type=bridged* option was set in all the router gateway ports (cr-lrp ovn ports). However this was breaking the N/S traffic for geneve tenant networks connected to the provider networks through those routers with the redirect-type option enabled. To fix this we ensure that the redirect-type option is only set if all the networks connected to the router are of VLAN or FLAT type, otherwise we fall back to the default option. This also means that if there is a mix of VLAN and geneve tenant networks connected to the same router, the VLAN traffic will be centralized (but not tunneled). If the traffic for the VLAN/FLAT needs to be distributed, then it should use a different router. Changes in neutron 21.1.0..21.1.1 --------------------------------- 1a711f399a Start metadata proxy even if IPv6 DAD fails d3b403bfee Change RBAC relationship loading method to "joined" 8bf6f7f03c Revert "Delete sg rule which remote is the deleted sg" 8def3b694d [ovn] Avoid unwanted ACL_NOT_FOUND error when deleting log objects 004ed33ec1 Use explicit inner join for networks in port query 1529c0a297 [stable-only][ovn] Fix ovsdbapp db_set command for stable branches 2317295cf5 Fix not working use_random_fully config option 438e486451 docs: Deindent code blocks 039caabfe3 [S-RBAC] Fix new policies for FIP PFs APIs ca942e9732 [S-RBAC] Get QoS rule types API available for READER role 9177e90db4 [S-RBAC] Fix new policies for get QoS rules APIs 1864dd8684 [OVN] Update ovn meter when neutron server reloads 876c681821 [S-RBAC] Get availability zone API available for READER role 55a3543aba [S-RBAC] Allow network owners to get ports from that network e4cf8cc0a6 Delete sg rule which remote is the deleted sg 1c615281f7 Suppress IPv6 metadata DAD failure and delete address 9fa3ed4a84 Avoid retrieving ports if network list is empty beaed42bd9 Replace context decorators with context managers ecbb69522a Honor debug mode in keepalived-state-change script logs 0c18181ee9 Change flag check order in wait_until_address_ready() 0681f8b3ad OVN: Always try and create a metadata port on subnets b43c9a6ec0 Do not check the context object in ``TestMeteringPlugin`` 061eafdd81 [stable/zed only] Drop -master jobs ec1a0e27dc Ensure redirect-type=bridged not used for geneve networks bd0d2ae6f1 Fix concurrent port binding activate f5d3ef2a23 Make path for tcpdump release-specific ba7d18d634 Revert "Ensure vlan network traffic is not centralized" d35fa4cdd3 [OVN] Explicitly define the fixed IPs for the metadata port d0d8702e89 Fix default value for MTUs, when not provided 138a47bfd6 [OVS] Allow custom ethertype traffic in the ingress table 07855a6826 Delete the PB level registers when deleting the duplicated PB 0091a25ea6 Only create a frozen Row on matching events a415bb4c98 Ensure vlan network traffic is not centralized Diffstat (except docs and test files) ------------------------------------- devstack/plugin.sh | 7 +- ...g-bgp-floating-ip-over-l2-segmented-network.rst | 420 +++++++------ .../internals/ovn/ovn_network_logging.rst | 114 ++-- .../contributor/internals/ovn/port_forwarding.rst | 110 ++-- .../contributor/testing/ci_scenario_jobs.rst | 11 - neutron/agent/l3/keepalived_state_change.py | 1 - neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/ip_lib.py | 19 +- neutron/agent/linux/iptables_manager.py | 7 +- .../agent/linux/openvswitch_firewall/firewall.py | 19 + neutron/agent/metadata/driver.py | 41 +- neutron/cmd/remove_duplicated_port_bindings.py | 15 +- neutron/common/_constants.py | 3 + neutron/common/ovn/constants.py | 2 + neutron/conf/agent/database/agentschedulers_db.py | 4 +- neutron/conf/policies/availability_zone.py | 6 +- neutron/conf/policies/base.py | 14 + .../conf/policies/floatingip_port_forwarding.py | 16 +- neutron/conf/policies/port.py | 1 + neutron/conf/policies/qos.py | 22 +- neutron/db/db_base_plugin_v2.py | 13 +- neutron/db/models/address_group.py | 2 +- neutron/db/models/address_scope.py | 2 +- neutron/db/models/securitygroup.py | 2 +- neutron/db/models_v2.py | 6 +- neutron/db/qos/models.py | 2 +- neutron/objects/db/api.py | 18 +- neutron/objects/ports.py | 16 +- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 34 ++ .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 8 + .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 86 ++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 185 +++++- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 2 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 3 +- neutron/plugins/ml2/plugin.py | 8 + neutron/services/logapi/drivers/ovn/driver.py | 54 +- neutron/services/qos/qos_plugin.py | 4 +- .../agent/l3/test_keepalived_state_change.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 40 ++ .../ovn/mech_driver/ovsdb/test_ovn_client.py | 68 +++ .../drivers/ovn/mech_driver/test_mech_driver.py | 44 +- .../linux/openvswitch_firewall/test_firewall.py | 22 + .../unit/agent/linux/test_iptables_manager.py | 34 ++ .../unit/conf/policies/test_availability_zone.py | 6 - .../policies/test_floatingip_port_forwarding.py | 347 ++++++----- .../ovn/mech_driver/ovsdb/test_maintenance.py | 69 ++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 61 ++ .../drivers/ovn/mech_driver/test_mech_driver.py | 65 +- .../services/logapi/drivers/ovn/test_driver.py | 75 +-- .../unit/services/metering/test_metering_plugin.py | 24 +- .../notes/bug-1953165-6e848ea2c0398f56.yaml | 16 + .../notes/bug-1986003-9bf5ca04f9304336.yaml | 10 + ...vn-recreate-metadata-port-76e2c0e651267aa0.yaml | 11 + .../notes/redirect-type-f29e89ca97357fe9.yaml | 24 + zuul.d/base.yaml | 24 - zuul.d/job-templates.yaml | 16 - zuul.d/tempest-multinode.yaml | 53 -- zuul.d/tempest-singlenode.yaml | 99 ---- 79 files changed, 2401 insertions(+), 1602 deletions(-)

1 0

neutron 22.0.1 (antelope)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We are pleased to announce the release of: neutron 22.0.1: OpenStack Networking This release is part of the antelope release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 22.0.1 ^^^^^^ Known Issues ************ * The high availability of metadata service on isolated networks is limited or non-existent. IPv4 metadata is redundant when the DHCP agent managing it is redundant, but recovery is tied to the renewal of the DHCP lease, making most recoveries very slow. IPv6 metadata is not redundant at all as the IPv6 metadata address can only be configured in a single place at a time as it is link-local. Multiple agents trying to configure it will generate an IPv6 duplicate address detection failure. Administrators may observe the IPv6 metadata address in "dadfailed" state in the DHCP namespace for this reason, which is only an indication it is not highly available. Until a redesign is made to the isolated metadata service there is not a better deployment option. See bug 1953165 (https://bugs.launchpad.net/neutron/+bug/1953165) for information. * The *redirect-type=bridged* option is only used if all the tenant networks connected to the router are of type VLAN or FLAT. In this case their traffic will be distributed. However, if there is a mix of VLAN/FLAT and geneve networks connected to the same router, the redirect-type option is not set, and therefore the traffic for the VLAN/FLAT networks will also be centralized but not tunneled. Bug Fixes ********* * 1986003 (https://bugs.launchpad.net/neutron/+bug/1986003) Fixed an issue with concurrent requests to activate the same port binding where one of the requests returned a 500 Internal Server Error. With the fix one request will return successfully and the other will return a 409 Conflict (Binding already active). This fixes errors in nova live-migrations where those concurrent requests might be sent. Nova handles the 409/Conflict response gracefully. * Fix an issue in the OVN driver where network metadata could become unavailable if the metadata port was ever deleted, even if accidental. To re-create the port, a user can now disable, then enable, DHCP for one of the subnets associated with the network using the Neutron API. This will try and create the port, similar to what happens in the DHCP agent for ML2/OVS. For more information, see bug 2015377 (https://bugs.launchpad.net/ubuntu/+source/neutron/+bug/2015377) * [bug 2003455 (https://bugs.launchpad.net/neutron/+bug/2003455) As part of a previous commit (https://review.opendev.org/c/openstack/neutron/+/875644) the *redirect-type=bridged* option was set in all the router gateway ports (cr-lrp ovn ports). However this was breaking the N/S traffic for geneve tenant networks connected to the provider networks through those routers with the redirect-type option enabled. To fix this we ensure that the redirect-type option is only set if all the networks connected to the router are of VLAN or FLAT type, otherwise we fall back to the default option. This also means that if there is a mix of VLAN and geneve tenant networks connected to the same router, the VLAN traffic will be centralized (but not tunneled). If the traffic for the VLAN/FLAT needs to be distributed, then it should use a different router. Changes in neutron 22.0.0..22.0.1 --------------------------------- e7f85abae6 Start metadata proxy even if IPv6 DAD fails 593939911c Change RBAC relationship loading method to "joined" d3fb57617d Revert "Delete sg rule which remote is the deleted sg" 97e478dcf5 [ovn] Avoid unwanted ACL_NOT_FOUND error when deleting log objects edbb0f4aa5 Use explicit inner join for networks in port query 48a000641d Fix not working use_random_fully config option 551ba73aa4 [stable-only][ovn] Fix ovsdbapp db_set command for stable branches 1ef6a605ad docs: Deindent code blocks 812526a279 [S-RBAC] Fix new policies for FIP PFs APIs c82eee0fd6 [S-RBAC] Get QoS rule types API available for READER role 572cc2d43e [S-RBAC] Fix new policies for get QoS rules APIs 05ff8ce3ee [OVN] Update ovn meter when neutron server reloads e7ccc75e0a [S-RBAC] Get availability zone API available for READER role 88963bafa5 [S-RBAC] Allow network owners to get ports from that network a15eece771 Delete sg rule which remote is the deleted sg ef41cb6073 Avoid retrieving ports if network list is empty 78a24a3a75 OVN: Always try and create a metadata port on subnets 0d3998c742 Replace context decorators with context managers 071255f098 Suppress IPv6 metadata DAD failure and delete address 2d543824a6 [sqlalchemy-20] Add reader context to ``get_ports_on_host_by_subnet`` 6efae0b110 Do not check the context object in ``TestMeteringPlugin`` 7e8898ec84 [stable/2023.1 only] Drop -master jobs da7b179933 Ensure redirect-type=bridged not used for geneve networks 4c4a168281 [stable/2023.1 only] Drop branches regex from skip level jobs 1b6fd61e33 Fix concurrent port binding activate 39f8db04a3 Revert "Ensure vlan network traffic is not centralized" 2a90dc754b [OVN] OVN agent should register "Chassis_Private" by default f822742af0 [OVN] Explicitly define the fixed IPs for the metadata port Diffstat (except docs and test files) ------------------------------------- ...g-bgp-floating-ip-over-l2-segmented-network.rst | 420 +++++++------ .../internals/ovn/ovn_network_logging.rst | 114 ++-- .../contributor/internals/ovn/port_forwarding.rst | 110 ++-- .../contributor/testing/ci_scenario_jobs.rst | 15 - neutron/agent/linux/dhcp.py | 3 +- neutron/agent/linux/ip_lib.py | 8 +- neutron/agent/linux/iptables_manager.py | 7 +- neutron/agent/metadata/driver.py | 41 +- neutron/agent/ovn/agent/ovn_neutron_agent.py | 2 +- neutron/common/_constants.py | 3 + neutron/conf/agent/database/agentschedulers_db.py | 4 +- neutron/conf/policies/availability_zone.py | 6 +- neutron/conf/policies/base.py | 14 + .../conf/policies/floatingip_port_forwarding.py | 16 +- neutron/conf/policies/port.py | 1 + neutron/conf/policies/qos.py | 22 +- neutron/db/db_base_plugin_v2.py | 11 +- neutron/db/dvr_mac_db.py | 1 + neutron/db/models/address_group.py | 2 +- neutron/db/models/address_scope.py | 2 +- neutron/db/models/securitygroup.py | 2 +- neutron/db/models_v2.py | 6 +- neutron/db/qos/models.py | 2 +- neutron/objects/db/api.py | 18 +- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 34 ++ .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 8 + .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 91 ++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 195 ++++-- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 2 +- neutron/plugins/ml2/plugin.py | 8 + neutron/services/logapi/drivers/ovn/driver.py | 54 +- neutron/services/qos/qos_plugin.py | 4 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 40 ++ .../ovn/mech_driver/ovsdb/test_ovn_client.py | 68 +++ .../drivers/ovn/mech_driver/test_mech_driver.py | 44 +- .../unit/agent/linux/test_iptables_manager.py | 34 ++ .../unit/conf/policies/test_availability_zone.py | 6 - .../policies/test_floatingip_port_forwarding.py | 347 ++++++----- .../ovn/mech_driver/ovsdb/test_maintenance.py | 68 ++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 61 ++ .../drivers/ovn/mech_driver/test_mech_driver.py | 65 +- .../services/logapi/drivers/ovn/test_driver.py | 75 +-- .../unit/services/metering/test_metering_plugin.py | 24 +- .../notes/bug-1953165-6e848ea2c0398f56.yaml | 16 + .../notes/bug-1986003-9bf5ca04f9304336.yaml | 10 + .../notes/bug-2003455-dff0d0f00b5a18e2.yaml | 9 - ...vn-recreate-metadata-port-76e2c0e651267aa0.yaml | 11 + .../notes/redirect-type-f29e89ca97357fe9.yaml | 24 + zuul.d/base.yaml | 70 --- zuul.d/grenade.yaml | 6 - zuul.d/job-templates.yaml | 27 - zuul.d/tempest-multinode.yaml | 53 -- zuul.d/tempest-singlenode.yaml | 225 ------- 73 files changed, 2285 insertions(+), 1798 deletions(-)

1 0

openstack-ansible 26.1.2 (zed)
by no-reply＠openstack.org 08 Jun '23

08 Jun '23

We high-spiritedly announce the release of: openstack-ansible 26.1.2: Ansible playbooks for deploying OpenStack This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/openstack-ansible Download the package from: https://tarballs.openstack.org/openstack-ansible/ Please report issues through: https://bugs.launchpad.net/openstack-ansible/+bugs For more details, please see below. 26.1.2 ^^^^^^ Deprecation Notes ***************** * RabbitMQ packages are no longer provided by PackageCloud due to the upstream repository being no longer available after 2023-05-28. Installations will now utilize a community mirror of CloudSmith repositories for rabbitmq and erlang. https://github.com/rabbitmq/rabbitmq-server/discussions/8386 Security Issues *************** * Includes SHA bumps for Nova, Cinder and Glance to cover OSSA-2023-003. Bug Fixes ********* * Fixes incorrect definition of ceilometer "polling_namespaces", when host is part of both central and compute groups (ie metal/aio scenario) * Fixes the absence of "libvirtd.service" on compute nodes. With CentOS upgrading the libvirt version to 9.3.0, they do not install libvirt-deamon as a dependency to libvirt-deamon-kvm anymore. libvirt-deamon is installed explicitly now. * https://bugs.launchpad.net/openstack-ansible/+bug/2021410 Changes in openstack-ansible 26.1.1..26.1.2 ------------------------------------------- 5c4a616a3 Bump OpenStack-Ansible SHAs for Zed 503f3e855 Use Zed Senlin version instead of master 11d8a0652 Remove unreadable unicode symbols 10efee32d Bump down etcd version for zun b7a119005 [doc] Add Ubuntu 22.04 as supported in AIO docs 7b1d070d3 Do not define cluster template labels 18f7c5349 Add internal_lb_vip_address to no_proxy Diffstat (except docs and test files) ------------------------------------- ansible-role-requirements.yml | 112 ++++++++++----------- playbooks/ceph-rgw-keystone-setup.yml | 2 +- playbooks/defaults/repo_packages/nova_consoles.yml | 4 +- .../defaults/repo_packages/openstack_services.yml | 28 +++--- playbooks/os-zun-install.yml | 4 + ...ometer_polling_namespaces-a21da7a655f4c922.yaml | 5 + ...all_libvirt_daemon_centos-9826ecb428bce8a5.yaml | 7 ++ .../notes/ossa-2023-003-99a7ab9c33b6da88.yaml | 4 + ...f-packagecloud-deprecated-5ee62da847ccae1f.yaml | 11 ++ .../templates/user_variables.aio.yml.j2 | 2 +- .../templates/user_variables_magnum.yml.j2 | 6 -- 12 files changed, 107 insertions(+), 81 deletions(-)

1 0