- Release-announce - lists.openstack.org

blazar 17.0.0.0rc1 (gazpacho)
by no-reply＠openstack.org 11 Mar '26

11 Mar '26

Hello everyone, A new release candidate for blazar for the end of the Gazpacho cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/blazar/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Gazpacho release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/gazpacho release branch at: https://opendev.org/openstack/blazar/src/branch/stable/gazpacho Release notes for blazar can be found at: https://docs.openstack.org/releasenotes/blazar/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/blazar/+bugs and tag it *gazpacho-rc-potential* to bring it to the blazar release crew's attention.

1 0

designate-dashboard 22.0.0.0rc1 (gazpacho)
by no-reply＠openstack.org 11 Mar '26

11 Mar '26

Hello everyone, A new release candidate for designate-dashboard for the end of the Gazpacho cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/designate-dashboard/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Gazpacho release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/gazpacho release branch at: https://opendev.org/openstack/designate-dashboard/src/branch/stable/gazpacho Release notes for designate-dashboard can be found at: https://docs.openstack.org/releasenotes/designate-dashboard/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/designate-dashboard/+bugs and tag it *gazpacho-rc-potential* to bring it to the designate-dashboard release crew's attention.

1 0

designate 22.0.0.0rc1 (gazpacho)
by no-reply＠openstack.org 11 Mar '26

11 Mar '26

Hello everyone, A new release candidate for designate for the end of the Gazpacho cycle is available! You can find the source code tarball at: https://tarballs.openstack.org/designate/ Unless release-critical issues are found that warrant a release candidate respin, this candidate will be formally released as the final Gazpacho release. You are therefore strongly encouraged to test and validate this tarball! Alternatively, you can directly test the stable/gazpacho release branch at: https://opendev.org/openstack/designate/src/branch/stable/gazpacho Release notes for designate can be found at: https://docs.openstack.org/releasenotes/designate/ If you find an issue that could be considered release-critical, please file it at: https://bugs.launchpad.net/designate/+bugs and tag it *gazpacho-rc-potential* to bring it to the designate release crew's attention.

1 0

bifrost 20.0.0 (gazpacho)
by no-reply＠openstack.org 10 Mar '26

10 Mar '26

We jubilantly announce the release of: bifrost 20.0.0 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/bifrost Download the package from: https://tarballs.openstack.org/bifrost/ Please report issues through: https://bugs.launchpad.net/bifrost/+bugs For more details, please see below. 20.0.0 ^^^^^^ New Features ************ * Adds the deployment of an OCI image registry with the eventual goal for artifacts to be hosted by the image registry in the default case for Bifrost. This feature is now installed by default utilizing the "bifrost-registry-install" role. * Adds variables to configure authentication parameters in the "bifrost-ironic-install" role, where IPA images are downloaded. The new variables are "ipa_download_url_username", "ipa_download_url_password", "ipa_download_force_basic_auth" and "ipa_download_unredirected_headers". Ramdisk and kernel images can be separately configured using "ipa_ramdisk"/"ipa_kernel" prefixes, e.g. "ipa_ramdisk_download_url_username". See documentation of the get_url and uri Ansible modules for more details on how to use these variables. * The OCI image registry installation can now be disabled using the "enable_registry" variable or the "--disable-registry" CLI flag. The registry remains enabled by default to maintain backward compatibility. To disable during installation: * CLI: "bifrost-cli install --disable-registry" * Ansible: "-e enable_registry=false" * Adds support for using Open vSwitch (OVS) as a virtual switch for testing environments. Setting "test_vm_switch_type" to "ovs" creates 3 separate VLANs for comprehensive network testing: one dedicated as an inspection network, another for the final tenant network, and a third for all other network types (cleaning, rescuing, servicing, etc.). This enhancement enables testing of the standalone networking feature with proper VLAN configuration support through the networking generic switch driver. * Added support for testing the new standalone Ironic networking service. When "enable_ironic_networking" is set to "True", the standalone networking service is launched alongside the main Ironic service using the "ironic-networking" networking driver. Generated inventory files now include port and driver information to utilize this new functionality. This feature enables testing of advanced network configuration capabilities in standalone Ironic deployments. Known Issues ************ * When testing standalone Ironic networking functionality, if "test_vm_use_static_local_link_connection_info" is set to false, then manual inspection must be performed on nodes prior to deployment to ensure "local_link_connection" information is available for switch port identification. Without this information, nodes may be silently provisioned on incorrect VLANs. * The OVS bridge type must be used for testing this functionality. Upgrade Notes ************* * The default IPA ramdisk used in bifrost is now debian DIB based which is smaller and compatible with more versions of GRUB. * Using tinyipa as ironic-python-agent ramdisk is not supported anymore. Bifrost has switched to using DIB (diskimage-builder) based IPA ramdisks for all CI jobs. All Bifrost CI jobs now use "dibipa" (DIB-based IPA) in their names to clearly indicate they use full- featured IPA ramdisks built with diskimage-builder. Test VM memory has been increased from 1024 MB to 4096 MB to accommodate the larger DIB-based IPA ramdisks (~500 MB vs ~80 MB for tinyipa). Three legacy job names with "tinyipa" in their names are kept for backward compatibility with other OpenStack projects (Ironic, openstacksdk, ansible-collections-openstack). These jobs now use DIB-based IPA despite their names. Projects using these legacy job names should migrate to the new "dibipa" job names when ready. * Supports for installing or using ironic-inspector has been completely removed. * Python 3.9 is not supported anymore. Bug Fixes ********* * Fixes the "dnsmasq" DHCP provider on the Debian family of operating systems by providing the correct dnsmasq leases file path. * The ILO driver has been removed as of the 2026.1 release. The 'ilo' and 'ilo5' hardware types have been removed from the default 'enabled_hardware_types' list and all related configuration options, dependencies, and interface support have been removed. Other Notes *********** * Previously, an "/etc/ironic/htpasswd" file was only generated when Keystone was not used as an authentication source. This artifact is now always generated for OCI image registry support. Changes in bifrost 19.3.0..20.0.0 --------------------------------- 01d8fcac Add support for standalone ironic networking 63f280e1 Upload to and use artifact from OCI registry 0beaaa71 Replace passlib with direct bcrypt for htpasswd generation 024a7bd8 Upload a disk image to OCI 96614f61 Remove unused sphinxcontrib-blockdiag 7acb2d40 Remove url tags from README 9dbf0fb8 tox: Drop basepython 3bae0dff CI: Fix previous release for SLURP upgrade jobs 35245e6f Add the ability to override 'disable_boot_timeout' 7c238ceb Provide a means to disable the registry service install e24c8930 CI: Make bifrost-upgrade-keystone-centos-10 voting aea3be4a Fix path to bifrost.crt with non-default tls_root 5b1728ed Document IPA image download options 77932a39 bifrost-registry-install: install the ORAS client 06308055 add an OCI artifact registry 233cbda7 Remove unused tinyipa CI jobs 2e10dad5 ci: undo non-voting for centos10 upgrade 3a78fead Centos: set masked: false for firewalld 0c3020cd Switch IPA ramdisk to debian DIB based 6f1fa327 Remove tinyipa support and switch to DIB-based IPA 1466c910 ILO driver retirement 71bebff8 Add support for OVS as a virtual switch a445fd1d Fix the dnsmasq.leases location on Debian systems b7bb21c6 [CI] upgrade from 2025.2 ac48e6fc reno: Update master for unmaintained/2024.1 01421632 Clarify correct usage of 'install --testenv' in bifrost-cli docs ccc614e4 verify creation of test VMs during testenv setup 12fa6197 Remove support for Python 3.9 2cefef38 Add support for Rocky Linux 10 image download 4143fa7e Remove the ability to install and use ironic-inspector 8174d8f1 Recover the Redfish UEFI CentOS 10 job 01e35239 CI: Make bifrost-upgrade-keystone-centos-10 voting f587a56c Update master for stable/2025.2 00171546 Support IPA download with authenticated requests 3e7754cd bug: drop --develop flag from testenv usage 2c5f1765 Remove ancient Python 3.6 tox test dce6f7a8 Replace CLA instructions with DCO Diffstat (except docs and test files) ------------------------------------- CONTRIBUTING.rst | 12 +- README.rst | 5 +- bifrost/cli.py | 7 +- playbooks/ci/run.yaml | 6 +- playbooks/install.yaml | 2 + playbooks/roles/bifrost-create-dib-image/README.md | 92 ++++ .../bifrost-create-dib-image/defaults/main.yml | 12 + .../roles/bifrost-create-dib-image/tasks/main.yml | 14 + .../tasks/upload_to_registry.yml | 122 +++++ playbooks/roles/bifrost-create-vm-nodes/README.md | 49 ++ .../bifrost-create-vm-nodes/defaults/main.yml | 24 +- .../handlers/main.yml} | 21 +- .../bifrost-create-vm-nodes/tasks/create_vm.yml | 86 ++- .../roles/bifrost-create-vm-nodes/tasks/main.yml | 3 + .../tasks/prepare_libvirt.yml | 19 +- .../bifrost-create-vm-nodes/tasks/prepare_ovs.yml | 120 +++++ .../templates/ovs-net.xml.j2 | 6 + .../templates/testvm.xml.j2 | 11 + .../roles/bifrost-create-vm-nodes/vars/debian.yml | 5 + .../roles/bifrost-create-vm-nodes/vars/redhat.yml | 7 + .../roles/bifrost-deploy-nodes-dynamic/README.md | 20 + .../bifrost-deploy-nodes-dynamic/defaults/main.yml | 6 + .../bifrost-deploy-nodes-dynamic/tasks/main.yml | 38 +- playbooks/roles/bifrost-ironic-install/README.md | 41 +- .../roles/bifrost-ironic-install/defaults/main.yml | 164 ++++-- .../bifrost-ironic-install/tasks/bootstrap.yml | 56 +- .../tasks/create_tftpboot.yml | 11 +- .../tasks/download_ipa_image.yml | 16 + .../bifrost-ironic-install/tasks/hw_types.yml | 7 - .../tasks/inspector_bootstrap.yml | 156 ------ .../roles/bifrost-ironic-install/tasks/install.yml | 5 - .../tasks/ironic_networking_bootstrap.yml | 138 +++++ ...ector_start.yml => ironic_networking_start.yml} | 20 +- .../tasks/keystone_setup_inspector.yml | 144 ----- .../roles/bifrost-ironic-install/tasks/main.yml | 7 + .../bifrost-ironic-install/tasks/ovs_bootstrap.yml | 62 +++ .../tasks/setup_firewalld.yml | 1 + .../roles/bifrost-ironic-install/tasks/start.yml | 7 +- .../bifrost-ironic-install/tasks/validate.yml | 36 -- .../bifrost-ironic-install/tasks/vendor_deps.yml | 7 - .../templates/default-boot-ipxe.j2 | 10 + .../templates/dnsmasq.conf.j2 | 4 + .../templates/inspector-default-boot-ipxe.j2 | 10 - .../templates/ironic-inspector.conf.j2 | 96 ---- .../templates/ironic-networking-switches.conf.j2 | 30 ++ .../templates/ironic-networking.conf.j2 | 102 ++++ .../templates/ironic.conf.j2 | 85 +-- .../nginx_conf.d_bifrost-httpboot.conf.j2 | 2 +- .../templates/nginx_conf.d_bifrost-ironic.conf.j2 | 19 - .../templates/ovs-vlans-dhcp.conf.j2 | 12 + .../templates/systemd_template.j2 | 3 +- .../roles/bifrost-ironic-install/vars/debian.yml | 1 + .../roles/bifrost-ironic-install/vars/redhat.yml | 1 + .../defaults/main.yml | 2 - .../tasks/validate.yml | 8 - .../templates/clouds.yaml.j2 | 8 - .../bifrost-keystone-install/tasks/upgrade.yml | 2 +- .../templates/logrotate.conf.j2 | 5 - playbooks/roles/bifrost-prep-for-install/README.md | 6 - .../bifrost-prep-for-install/defaults/main.yml | 26 +- playbooks/roles/bifrost-registry-install/README.md | 68 +++ .../bifrost-registry-install/defaults/main.yml | 56 ++ .../roles/bifrost-registry-install/meta/main.yml | 19 + .../bifrost-registry-install/tasks/bootstrap.yml | 111 ++++ .../bifrost-registry-install/tasks/install.yml | 9 + .../tasks/install_oras.yml | 48 ++ .../roles/bifrost-registry-install/tasks/main.yml | 29 + .../tasks/setup_firewalld.yml | 27 + .../roles/bifrost-registry-install/tasks/start.yml | 11 + .../bifrost-registry-install/tasks/validate.yml | 16 + .../templates/registry-config.yml.j2 | 30 ++ .../templates/registry.service.j2 | 30 ++ .../roles/bifrost-registry-install/vars/debian.yml | 5 + .../roles/bifrost-registry-install/vars/redhat.yml | 3 + playbooks/roles/bifrost-test-inspection/README.md | 2 +- playbooks/roles/bifrost-test-networking/README.md | 35 ++ .../bifrost-test-networking/defaults/main.yml | 6 + .../roles/bifrost-test-networking/meta/main.yml | 2 + .../roles/bifrost-test-networking/tasks/main.yml | 70 +++ playbooks/test-bifrost.yaml | 8 + .../notes/adds-OCI-registry-83f09e2878b436f4.yaml | 12 + .../notes/debian-default-2bb1d335f3ea515b.yaml | 5 + .../notes/dnsmasq-leases-88ece318b47e4465.yaml | 5 + .../notes/goodbye-tinyipa-a5efe0e972647616.yaml | 16 + .../notes/ipa-download-auth-c7ae9373b08dc514.yaml | 14 + .../notes/no-inspector-2995fa195b715fe4.yaml | 5 + ...optional-registry-install-95b69d1e03337b9e.yaml | 12 + ...vs-virtual-switch-support-36b3693a1076e2f6.yaml | 10 + .../notes/remove-py39-5e2f5eacb4380407.yaml | 4 + .../notes/retire-ilo-driver-da4317f3b1806ccd.yaml | 7 + ...ndalone-ironic-networking-5f5d71e2044eef88.yaml | 20 + releasenotes/source/2024.1.rst | 2 +- releasenotes/source/2025.2.rst | 6 + releasenotes/source/index.rst | 1 + requirements.txt | 1 - scripts/collect-test-info.sh | 3 +- scripts/install-deps.sh | 6 - scripts/test-bifrost.sh | 27 +- setup.cfg | 3 +- tox.ini | 6 - upper-constraints-cs9-py39.txt | 599 --------------------- zuul.d/bifrost-jobs.yaml | 115 ++-- zuul.d/project.yaml | 59 +- 109 files changed, 2257 insertions(+), 1517 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 05889903..467ed503 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8 +7,0 @@ PyYAML>=3.12 # MIT -passlib>=1.7.2 # BSD

1 0

horizon 25.6.0 (gazpacho)
by no-reply＠openstack.org 10 Mar '26

10 Mar '26

We are happy to announce the release of: horizon 25.6.0 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/horizon Download the package from: https://tarballs.openstack.org/horizon/ Please report issues through: https://bugs.launchpad.net/horizon/+bugs For more details, please see below. 25.6.0 ^^^^^^ New Features ************ * Don't send enable_port_security when disallowed by policy. When a user creates a network port, if they don't have the rights to change port security, they will be unable to submit the form. The solution is to not send any value for port security when the user doesn't have the rights to change it. * Horizon now supports Nova live migration with microversion 2.30. The "server_live_migrate" API call will request the appropriate microversion when available. * Added new configuration option "SWIFT_PANEL_FULL_LISTING" that defaults to "True". This configuration option can be set to "False" to prevent Horizon from doing full listing of containers and objects in the Swift panel that can cause high resource consumption in Horizon. Upgrade Notes ************* * Now the "WEBSSO_CHOICES" option includes the entry to use credentials mechanism by default. Bug Fixes ********* * [bug 2134391] Slowness of all operations involving listing Neutron ports and the floating IP addresses for the admin token. * [:bug:`2115353`] Added option to opt out of Keystone token scope swap. Horizon may prefer a domain-scoped token for some users (e.g. domain + project admins). This can conflict with certain custom Keystone policies. New setting "OPENSTACK_KEYSTONE_PREFER_DOMAIN_TOKEN" (default: "True") allows operators to disable this behavior. Changes in horizon 25.5.1..25.6.0 --------------------------------- 87da6c34b Link to SCSS styles instead of inlining them in every page 97310ed65 Remove local upper-constraints and go back to global one ce69d6ab6 Remove the Font Awesome hacks b5d591812 Remove old Horizon integration tests 637be2ce4 zuul: Remove PhantomJS deps and update parent job 246c2686c Remove references to PhantomJS 29ea0122b Upgrade selenium to 4.41.0 02e882d4e Create and use local upper-constraints to avoid Selenium failing aca54d862 Remove retired project from plugin registry e48d6a55e Fix spelling for utils method 568b59931 A hack to make Horizon work with Font Awesome 6.2 77d12b29d Unpin the version of flake8-import-order 75028ad45 Enable CSRF token handling for swift dashboard c2d951d7d fix(api): Avoid RecursionError when deepcopy Port apidict 40960c785 CI: move horizon-selenium-headless to Debian 13 a780380b9 Typo in port_security_enabled breaks port update for members e52e88891 Add multi-realm federation tests c8dd18051 Separate Identity Project Usage from Project Overview Usage 82e4bc950 Drop reference to removed policy.v3cloudsample.json cc9d8367b Use py313 jobs for django check and gate queue 1538329f5 Imported Translations from Zanata 7d3ee81ae Fix filters for admin snapshots table 5ad5e8d76 Fix "Displaying n items" count for tables with chevrons 5a62b3f48 Better handle missing project usage info 148ebe0d4 docs: add offline compression step 31eb8fa8b Imported Translations from Zanata 94d77edd8 Fix DHCP checkbox in subnet edit view 1223fac44 Do proper project_id filtering for port list 5902d4525 Send error messages to translation system. 675b217db Imported Translations from Zanata 29e5ad799 Imported Translations from Zanata 8ad75d3b1 Imported Translations from Zanata c425d6b24 Fix inconsistent borders for rows with chevrons 4dabc6c64 Imported Translations from Zanata 4c62b609f Imported Translations from Zanata a877edc6b Imported Translations from Zanata 94212eea5 de-angularize the Key Pairs table 5acdc8886 Use server filter mode for flavors tables 77412a02e Use a custom session serializer 39c6b4a5a reno: Update master for unmaintained/2024.1 4b933df52 Don't send enable_port_security when disallowed by policy ec95f2972 pytest-based selenium test fix floatingip test instability 1230aec62 Change negated in to not in e39fe103d Disable rule F405 check for ruff 48b7c713c Add missing import for gettext b7512f989 Remove duplicate key 83117a218 Revert "Remove all dependencies/connections of old integration test code" a28ab4fe3 Remove invalid "encoding" parameter f8249a891 Add integration tests for region selection and switching 1f7dff1a3 Imported Translations from Zanata 49e5fe185 Remove all dependencies/connections of old integration test code a4069d591 Force scope in all appcreds API calls 15d7212c9 Use server filter mode for volumes and snapshots tables ceb677d48 Add SWIFT_PANEL_FULL_LISTING config option 4b81bd78f Imported Translations from Zanata 64d34854b Replace DOMNodeInserted events with a mutation observer fc2de23a1 Imported Translations from Zanata d4d5dbfcf Imported Translations from Zanata dec23d6e8 Remove option for apache < 2.4 4a4530641 Imported Translations from Zanata 201205d40 Update master for stable/2025.2 035b6b1e7 Imported Translations from Zanata a52759326 Add credentials mechanism to default WEBSSO_CHOISES ef1e1fd22 Fix wrong documented default of WEBSSO_CHOICES 60455e5ff feat(dashboard): add microversion support for Nova live migration d142e8593 Opt out of token scope changes 131ac8ce5 Add non-voting job to test Django 5.2 c72e1b00f Catch callback in network service doesn't throw 27adc166b Add neutron-fwaas-dashboard in plugin registry 391777f8d docs: remove information about Xen dd9b03dd2 docs: drop outdated reference to TryStack e16596372 fix small mistake in code comment a6f710ba1 Updating function about the number of free IP addresses in the subnet 3e2ff4e06 Horizon save URL after okta login b418ce3ac Replace remaining reference to JSON format policy files e3e5a281c Fix small mistakes in documentation with Horizon naming and update URL for documentation to python 3 d96fc7a5a Fix small mistakes in phrases and prevent problems with translation to another languages 5c06ecd4b Skip tests for plugin-registry.csv update 1a4abf205 Update bug tracker for ironic UI ab64b6645 docs: using uppercase for encryption type 6a23ad89c docs: fix mistakes in documentation 7fcbcf3f4 Remove retired projects from plugin registry 8bf595775 remove unicode from files and update configuration for documentation f2d06de50 Make call to metadef namespaces API parallel 097a8a5f8 Add description for floating IP Diffstat (except docs and test files) ------------------------------------- .zuul.d/base.yaml | 6 +- .zuul.d/cross-jobs.yaml | 3 +- .zuul.d/django-jobs.yaml | 20 +- .zuul.d/tempest-and-integrated.yaml | 3 + .../contributor/topics/javascript_testing.rst | 7 +- .../locale/en_GB/LC_MESSAGES/doc-contributor.po | 36 +- horizon/forms/__init__.py | 1 + horizon/locale/en_GB/LC_MESSAGES/django.po | 8 +- horizon/middleware/operation_log.py | 2 +- horizon/static/horizon/js/horizon.forms.js | 34 +- horizon/static/horizon/js/horizon.tables.js | 2 +- horizon/test/firefox_binary.py | 112 ------ horizon/test/helpers.py | 9 +- horizon/test/webdriver.py | 8 +- horizon/themes.py | 1 + horizon/utils/scss_filter.py | 18 +- openstack_auth/defaults.py | 6 +- openstack_auth/forms.py | 2 +- openstack_auth/locale/en_GB/LC_MESSAGES/django.po | 20 +- openstack_auth/locale/ru/LC_MESSAGES/django.po | 23 +- openstack_auth/serializers.py | 85 +++++ openstack_auth/urls.py | 2 +- openstack_auth/user.py | 6 +- openstack_auth/utils.py | 2 +- openstack_auth/views.py | 25 +- openstack_dashboard/api/glance.py | 11 +- openstack_dashboard/api/keystone.py | 28 +- openstack_dashboard/api/microversions.py | 1 + openstack_dashboard/api/neutron.py | 38 +- openstack_dashboard/api/nova.py | 20 +- openstack_dashboard/api/swift.py | 10 +- .../dashboards/admin/flavors/tables.py | 15 +- .../dashboards/admin/flavors/views.py | 12 +- .../templates/floating_ips/_allocate.html | 2 + .../dashboards/admin/networks/subnets/tables.py | 6 +- .../dashboards/admin/networks/utils.py | 2 + .../dashboards/admin/snapshots/views.py | 4 +- .../dashboards/identity/projects/views.py | 2 +- .../containers/templates/containers/ngindex.html | 5 + .../dashboards/project/containers/views.py | 7 + .../templates/floating_ips/_allocate.html | 2 + .../dashboards/project/key_pairs/tables.py | 49 +++ .../dashboards/project/networks/ports/workflows.py | 20 + .../dashboards/project/networks/subnets/views.py | 3 +- .../networks/subnets/_detail_overview.html | 8 +- .../dashboards/project/networks/workflows.py | 4 +- .../dashboards/project/snapshots/tables.py | 13 +- .../dashboards/project/snapshots/views.py | 3 +- .../dashboard/project/containers/_containers.scss | 2 + .../templates/key_pairs/_chevron_column.html | 10 + .../templates/key_pairs/_keypairs_table.html | 65 ++++ .../templates/key_pairs/expandable_row.html | 26 ++ .../dashboards/project/volumes/tables.py | 17 +- .../dashboards/project/volumes/views.py | 6 +- openstack_dashboard/defaults.py | 23 +- .../local/local_settings.py.example | 2 - .../locale/cs/LC_MESSAGES/django.po | 6 +- .../locale/de/LC_MESSAGES/django.po | 6 +- .../locale/en_AU/LC_MESSAGES/django.po | 6 +- .../locale/en_GB/LC_MESSAGES/django.po | 356 +++++++++++++++++- .../locale/en_GB/LC_MESSAGES/djangojs.po | 201 ++++++++++- .../locale/eo/LC_MESSAGES/django.po | 5 +- .../locale/es/LC_MESSAGES/django.po | 6 +- .../locale/fr/LC_MESSAGES/django.po | 6 +- .../locale/id/LC_MESSAGES/django.po | 6 +- .../locale/ja/LC_MESSAGES/django.po | 6 +- .../locale/ka_GE/LC_MESSAGES/django.po | 5 +- .../locale/ko_KR/LC_MESSAGES/django.po | 6 +- .../locale/pt_BR/LC_MESSAGES/django.po | 6 +- .../locale/ru/LC_MESSAGES/django.po | 171 +++++---- .../locale/ru/LC_MESSAGES/djangojs.po | 12 +- .../locale/tr_TR/LC_MESSAGES/django.po | 6 +- .../locale/zh_Hans/LC_MESSAGES/django.po | 6 +- .../locale/zh_Hant/LC_MESSAGES/django.po | 6 +- .../management/commands/migrate_settings.py | 3 +- .../management/commands/update_catalog.py | 2 - openstack_dashboard/settings.py | 5 +- openstack_dashboard/static/app/app.module.js | 4 +- .../core/openstack-service-api/network.service.js | 15 +- .../openstack-service-api/network.service.spec.js | 15 +- .../static/dashboard/scss/_variables.scss | 2 +- .../dashboard/scss/components/_checkboxes.scss | 6 +- .../dashboard/scss/components/_radiobuttons.scss | 6 +- .../static/dashboard/scss/horizon.scss | 5 +- .../themes => static/dashboard/scss}/themes.scss | 6 +- openstack_dashboard/templates/_stylesheets.html | 22 +- .../pages/project/apiaccesspage.py | 6 +- openstack_dashboard/test/selenium/conftest.py | 89 +++-- .../test/selenium/integration/conftest.py | 11 +- .../test/selenium/integration/test_credentials.py | 12 +- .../test/selenium/integration/test_defaults.py | 31 +- .../selenium/integration/test_federation_login.py | 241 +++++++++++-- .../test/selenium/integration/test_flavors.py | 23 +- .../test/selenium/integration/test_floatingips.py | 47 ++- .../test/selenium/integration/test_groups.py | 33 +- .../test/selenium/integration/test_grouptypes.py | 14 +- .../selenium/integration/test_host_aggregates.py | 18 +- .../test/selenium/integration/test_images.py | 194 +++++----- .../test/selenium/integration/test_instances.py | 186 +++++----- .../test/selenium/integration/test_keypairs.py | 25 +- .../integration/test_metadata_definitions.py | 17 +- .../test/selenium/integration/test_networks.py | 89 ++--- .../test/selenium/integration/test_projects.py | 79 ++-- .../test/selenium/integration/test_regions.py | 117 ++++++ .../test/selenium/integration/test_routers.py | 93 +++-- .../selenium/integration/test_security_groups.py | 27 +- .../test/selenium/integration/test_settings.py | 2 +- .../selenium/integration/test_user_credentials.py | 57 +-- .../test/selenium/integration/test_users.py | 37 +- .../selenium/integration/test_volume_snapshots.py | 118 +++--- .../test/selenium/integration/test_volumes.py | 178 ++++----- .../test/selenium/integration/test_volumetypes.py | 96 ++--- .../test/selenium/ui/test_actions.py | 18 +- .../test/selenium/ui/test_browse.py | 19 +- .../test/selenium/ui/test_hypervisors.py | 33 +- .../test/selenium/ui/test_settings.py | 45 +-- openstack_dashboard/test/selenium/widgets.py | 55 ++- openstack_dashboard/test/settings.py | 3 +- openstack_dashboard/test/test_data/cinder_data.py | 1 - openstack_dashboard/test/unit/api/test_keystone.py | 6 +- openstack_dashboard/test/unit/api/test_network.py | 4 +- openstack_dashboard/test/unit/api/test_neutron.py | 11 +- openstack_dashboard/test/unit/api/test_nova.py | 18 +- openstack_dashboard/test/unit/api/test_swift.py | 25 +- openstack_dashboard/usage/__init__.py | 2 + openstack_dashboard/usage/tables.py | 16 +- playbooks/cross-jobs/phantomjs-deps.yaml | 6 - plugin-registry.csv | 10 +- ...to-default-websso-choices-fb25b7ce50d81e04.yaml | 5 + .../notes/bug-2134391-d9818a67c75a456b.yaml | 6 + ...when-disallowed-by-policy-aa3afc4ec7258fd4.yaml | 8 + ...live-migrate-microversion-c3ccf731126b6e28.yaml | 6 + ...swift-full-listing-config-3c1e03ba0b741916.yaml | 8 + releasenotes/notes/token-scope-change.yaml | 10 + releasenotes/source/2024.1.rst | 2 +- releasenotes/source/2025.2.rst | 6 + releasenotes/source/conf.py | 31 +- releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 251 ++++++++++++- .../source/locale/id/LC_MESSAGES/releasenotes.po | 5 +- requirements.txt | 2 +- tox.ini | 31 +- 214 files changed, 3409 insertions(+), 5276 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 21dc565b1..9c60b9a9c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -48 +48 @@ XStatic-Hogan>=2.0.0.2 # Apache 2.0 License -XStatic-Font-Awesome>=4.7.0.0 # SIL OFL 1.1 License, MIT License +XStatic-Font-Awesome>=6.2.1.2 # SIL OFL 1.1 License, MIT License

1 0

networking-baremetal 7.1.0 (gazpacho)
by no-reply＠openstack.org 03 Mar '26

03 Mar '26

We are tickled pink to announce the release of: networking-baremetal 7.1.0 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/networking-baremetal Download the package from: https://pypi.org/project/networking-baremetal Please report issues through: https://bugs.launchpad.net/networking-baremetal/+bugs For more details, please see below. 7.1.0 ^^^^^ New Features ************ * Adds a new L2VNI (Layer 2 Virtual Network Identifier) mechanism driver that enables baremetal servers to connect to VXLAN and Geneve overlay networks. The driver automatically allocates dynamic VLAN segments on physical networks and creates OVN localnet ports to bridge overlay traffic to baremetal nodes. To enable the driver, add "baremetal_l2vni" to the mechanism_drivers list in "ml2_conf.ini": [ml2] mechanism_drivers = ovn,baremetal_l2vni [baremetal_l2vni] create_localnet_ports = True default_physical_network = physnet1 See the L2VNI mechanism driver documentation for complete configuration and deployment details. * Adds support for filtering ports by conductor groups. When "[conductor_groups]conductor_groups" is configured, the agent will only query ports associated with nodes in the specified list of conductor groups. * Added HA chassis group alignment reconciliation to ironic-neutron- agent to address connectivity issues for baremetal nodes in OVN deployments (Launchpad bug #1995078). When router gateway ports and baremetal external ports have mismatched HA chassis group priorities, baremetal nodes can experience intermittent external connectivity failures. This occurs when different chassis are active for the router vs. the baremetal port, causing inconsistent routing. The ironic-neutron-agent now includes a periodic reconciliation loop that ensures router ports use the same ha_chassis_group as baremetal external ports on the same network. This eliminates priority mismatches and prevents connectivity failures. Key features: * Automatic alignment of HA chassis groups between router and baremetal ports * Distributed across multiple agents via hash ring for scalability * Time-windowed reconciliation to minimize API load (only checks recently created/updated resources by default) * Configurable reconciliation interval (default: 10 minutes) * Enabled by default Configuration options in the "[baremetal_agent]" section: * "enable_ha_chassis_group_alignment" - Enable/disable the feature (default: True) * "ha_chassis_group_alignment_interval" - Reconciliation interval in seconds (default: 600, minimum: 60) * "limit_ha_chassis_group_alignment_to_recent_changes_only" - Only check recently updated resources (default: True) * "ha_chassis_group_alignment_window" - Time window for recent resources in seconds (default: 1200) See the HA Chassis Group Alignment documentation for detailed configuration guidance and troubleshooting information. * Added an experimental L2VNI trunk reconciliation pattern to ironic- neutron-agent. This feature automatically manages trunk ports on network nodes for bridging OVN overlay networks to physical infrastructure based on ha_chassis_group membership. The feature is enabled by default. Disable it by setting "enable_l2vni_trunk_reconciliation = False" in the "[l2vni]" section of neutron.conf. See the L2VNI Trunk Reconciliation documentation for configuration options and deployment guidance. Bug Fixes ********* * Fixes an issue where Neutron would reject baremetal port binding to VXLAN and Geneve overlay networks with error "Host is not connected to any segments on routed provider network" when the segments service plugin was enabled. The baremetal-l2vni mechanism driver now reports support for overlay network types (vxlan, geneve) to enable hierarchical port binding. The base baremetal mechanism driver continues to handle only flat and vlan networks. This allows baremetal nodes to successfully bind to tenant overlay networks using the L2VNI hierarchical binding model without being incorrectly treated as routed provider networks. * Fixes an issue in the baremetal-l2vni mechanism driver where OVN localnet ports could become orphaned with stale VLAN tags when dynamic segments were released and reallocated. This could result in VLAN tag mismatches causing traffic to be tagged with incorrect VLAN IDs. The driver now validates that existing localnet ports have the correct VLAN tag matching the current dynamic segment allocation. If a mismatch is detected (for example, the localnet port has VLAN 107 but the current segment uses VLAN 135), the stale port is automatically deleted and recreated with the correct tag. Additionally, the driver now implements proper cleanup in "delete_port_postcommit()" to remove localnet ports and release dynamic segments when the last baremetal port using a segment is deleted. This prevents orphaned localnet ports and ensures VLAN IDs can be safely reused without configuration conflicts. * Fixes an issue in the baremetal-l2vni mechanism driver where "_ensure_router_gateway_chassis()" was incorrectly setting gateway_chassis on all router ports connected to L2VNI networks, including internal router ports. This caused OVN to treat them as distributed gateway ports, which prevented NAT flows from being created when multiple such ports existed. The function has been removed and replaced with a "requested-chassis" option on localnet ports to ensure they remain pinned to the correct chassis. * Fixes intermittent external connectivity failures for baremetal nodes in OVN deployments caused by mismatched HA chassis group priorities between router gateway ports and baremetal external ports (Launchpad bug #1995078). The ironic-neutron-agent now automatically aligns HA chassis group configuration to ensure consistent routing behavior. Changes in networking-baremetal 7.0.0..7.1.0 -------------------------------------------- 2634222 vxlan: trunk-reconciler: Dial back logging 5ad66a7 vxlan: follow-up on trunk reconciler cca6946 CI: implement vxlan job 0cfaec8 ci: switch over to redfish based jobs 2eecd1b Change tenant_network_types to project_network_types 8c10700 vlxan: explicitly prevent heiarchical agent triggered binding 610b68f vxlan: Fix mech looping and supported type declaration 7054ed2 vxlan: Fix port stickiness a42d05e vxlan: fix orphanded localnet binding 49baba5 Add a reconciler to fix bug 1995078 b8addea tox: Drop redundant injection of VIRTUAL_ENV variable 93ae2e2 Trunk port reconciliation for L2VNI attachments ae36d6e l2vni baremetal mech driver 9c53319 Remove MANIFEST.in 0798701 Add conductor group sharding support fc1f87e update pre-commit config to match ironic 6cb48fe Swap networking-baremetal to use pyproject.toml 231493f reno: Update master for unmaintained/2024.1 7412d34 Fix min version of Neutron 5fcce93 Update master for stable/2025.2 Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 12 +- MANIFEST.in | 6 - README.rst | 11 + devstack/lib/networking-baremetal | 7 +- .../configuration/ml2/l2vni-mechanism-driver.rst | 531 ++++++++ networking_baremetal/agent/agent_config.py | 217 ++++ networking_baremetal/agent/ironic_neutron_agent.py | 383 +++++- networking_baremetal/agent/l2vni_trunk_manager.py | 1287 ++++++++++++++++++++ networking_baremetal/agent/ovn_client.py | 260 ++++ networking_baremetal/config.py | 21 +- networking_baremetal/constants.py | 1 + networking_baremetal/neutron_client.py | 92 ++ .../plugins/ml2/baremetal_l2vni_mapping.py | 634 ++++++++++ networking_baremetal/plugins/ml2/baremetal_mech.py | 52 +- .../ironic_agent/test_hashring_member_manager.py | 1 + .../unit/plugins/ml2/test_baremetal_l2vni_mech.py | 743 +++++++++++ pyproject.toml | 61 +- ...dd-l2vni-mechanism-driver-a7f9e2c4b8d3a1f5.yaml | 23 + ...ect-l2vni-overlay-support-93785319735a4cc8.yaml | 13 + .../notes/conductor-groups-filtering-support.yaml | 7 + ...x-orphaned-localnet-ports-943b2ea6ebe40f2a.yaml | 19 + .../fix-snat-gateway-chassis-a8f91c2d4e7b3fa1.yaml | 11 + ...a-chassis-group-alignment-8f2d1e5c9a4b6e3d.yaml | 48 + ...2vni-trunk-reconciliation-4dced39222f4657e.yaml | 12 + releasenotes/source/2024.1.rst | 2 +- releasenotes/source/2025.2.rst | 6 + releasenotes/source/index.rst | 1 + requirements.txt | 4 +- setup.cfg | 48 - tox.ini | 6 +- zuul.d/networking-baremetal-jobs.yaml | 105 ++ zuul.d/project.yaml | 4 + 45 files changed, 8099 insertions(+), 80 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f31da62..8cd82dd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13 +13 @@ pbr>=6.0.0 # Apache-2.0 -openstacksdk>=0.31.2 # Apache-2.0 +openstacksdk>=4.9.0 # Apache-2.0 @@ -15 +15 @@ tooz>=6.3.0 # Apache-2.0 -neutron>=14.0.0.0b1 # Apache-2.0 +neutron>=27.0.0.0rc1 # Apache-2.0

1 0

trove 22.0.1 (dalmatian)
by no-reply＠openstack.org 03 Mar '26

03 Mar '26

We are psyched to announce the release of: trove 22.0.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/trove Download the package from: https://tarballs.openstack.org/trove/ Please report issues through: https://bugs.launchpad.net/trove/+bugs For more details, please see below. 22.0.1 ^^^^^^ Bug Fixes * fix a bug where the trove-manage script fails to upgrade the database when the DBDatastoreVersion table is not empty. * Fixes potential PostgreSQL shared memory exhaustion in mid-size deployments. * Fix a bug where replications failed to detach from the source instance because of the upgrade of the sqlachemy library. Changes in trove 22.0.0..22.0.1 ------------------------------- 370f0539 pg_hba.conf not re-creating after rebuild in PostgreSQL 3515f017 Set ipc_mode to host to prevent potential shared memory exhaustion 52b1feac Fix CI jobs for stable 2024.2 93efb5f5 [CI]: run perodical jobs on master branch only 95e879d4 Fix replication detach error 4c191c30 Fix MariaDB target dir for backup syntax 88cb086e Follow up: Add Datastore Version Registry Extension 513b0759 Change settings for stable/2024.2 f4986a7e Update TOX_CONSTRAINTS_FILE for stable/2024.2 c7ebb011 Update .gitreview for stable/2024.2 Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .../samples/datastore-version-show-response.json | 36 +++++++++++++--------- backup/Dockerfile | 2 +- backup/drivers/mariabackup.py | 2 +- devstack/plugin.sh | 4 +-- devstack/settings | 6 ++-- .../guest-agent/source-repository-guest-agent | 4 +-- integration/scripts/trovestack | 2 +- integration/scripts/trovestack.rc | 6 ++-- .../notes/fix-db-migration-b47ae342b4645b66.yaml | 5 +++ ...l-share-memory-exhaustion-b033973f1f83f3f0.yaml | 4 +++ .../fix-replication-detach-a21f29c89d089f9b.yaml | 5 +++ tox.ini | 6 ++-- trove/common/cfg.py | 2 +- trove/datastore/models.py | 3 +- ...cd1_add_datastore_version_registry_extension.py | 6 +++- trove/guestagent/api.py | 1 + trove/guestagent/datastore/mysql_common/service.py | 2 +- trove/guestagent/datastore/postgres/manager.py | 5 +++ trove/guestagent/utils/docker.py | 3 ++ zuul.d/jobs.yaml | 16 +++++++--- zuul.d/projects.yaml | 6 ++-- 22 files changed, 85 insertions(+), 42 deletions(-)

1 0

ironic-python-agent-builder 7.1.0 (gazpacho)
by no-reply＠openstack.org 03 Mar '26

03 Mar '26

We are delighted to announce the release of: ironic-python-agent-builder 7.1.0 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/ironic-python-agent-builder Download the package from: https://tarballs.openstack.org/ironic-python-agent-builder/ Please report issues through: https://bugs.launchpad.net/ironic-python-agent-builder/+bugs For more details, please see below. 7.1.0 ^^^^^ Bug Fixes * Fixes issues which could be encountered where prior configuration drives were considered valid for use by the configuration drive lockout script. This was discovered shortly after "simple-init" was added as a default element instead of an opt-in element for disk images. Because of the use of glean, this only resulted in incorrect network configuration of the agent in some cases for users utilizing upstream code. That support was promptly reverted, and this fix developed. We anticipate the simple-init element to be re-introduced at some point in the future. * Fixes the DHCP-less usage path by default through the simple-init element being enabled as a diskimage-builder dependency by default. This change was previously reverted to allow time to resolve bugs in the guard rail logic. Initalization of configuration drive configuration with simple-init is now handled appropriately. Changes in ironic-python-agent-builder 7.0.0..7.1.0 --------------------------------------------------- d0587db tox: Drop redundant injection of VIRTUAL_ENV variable 69d1e45 re-enable simple-init by default fdd47cb Drop redundant basepython 5430e9a Make multiple integration jobs voting 1c281d8 Lockout configdrive reads on network boots 9c877b2 Fixed rescue ConditionPathExists flag edccbb7 ci: Start running the advaned ironic job a4bfce1 Revert "Add simple-init by default" 96d997f Fix waiting config drive with the correct publisher id Diffstat (except docs and test files) ------------------------------------- .../ironic-python-agent.service | 2 +- .../ironic-agent-resolve-config-drive.service | 3 ++ .../bin/ironic-python-agent-resolve-configdrive.sh | 55 ++++++++++++---------- ...dd-simple-init-by-default-cfaa05c8178de93f.yaml | 8 ---- ...glean-configdrive-lockout-4afaa99a06e7a785.yaml | 11 +++++ .../re-enable-simple-init-b1dd1edc2ba9d646.yaml | 8 ++++ tox.ini | 7 +-- zuul.d/project.yaml | 6 ++- 8 files changed, 59 insertions(+), 41 deletions(-)

1 0

networking-generic-switch 9.0.0 (gazpacho)
by no-reply＠openstack.org 03 Mar '26

03 Mar '26

We joyfully announce the release of: networking-generic-switch 9.0.0 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/networking-generic-switch Download the package from: https://pypi.org/project/networking-generic-switch Please report issues through: https://bugs.launchpad.net/networking-generic-switch/+bugs For more details, please see below. 9.0.0 ^^^^^ New Features ************ * Adds per-port "default_vlan" parameter to device driver interfaces. The "plug_port_to_network", "delete_port", "plug_bond_to_network", and "unplug_bond_from_network" methods now accept an optional "default_vlan" parameter that allows specifying a default VLAN on a per-port basis. This enhancement provides greater flexibility compared to the existing switch-wide "ngs_port_default_vlan" configuration option. When both are specified, the per-port value takes precedence. If neither is provided, no default VLAN cleanup or restoration will be performed. * Extends VXLAN support to Arista EOS and SONiC switches, enabling VXLAN overlay networks for bare metal deployments across multiple switch platforms. **Prerequisites**: This feature requires the "networking-baremetal" plugin with the "baremetal-l2vni" mechanism driver, which handles hierarchical port binding and allocates local VLAN segments that are mapped to VXLAN VNIs on the switch fabric. **Arista EOS**: Arista EOS uses BGP EVPN control plane with ingress-replication for BUM (Broadcast, Unknown unicast, and Multicast) traffic handling, following the same architecture as Cisco NX-OS. This approach aligns with vendor best practices and scales properly with Neutron's dynamic VNI assignment model. For each VXLAN network, the driver automatically configures: * BGP EVPN control plane (VLAN configuration with route distinguisher and route targets) * VLAN to VNI mapping * Ingress-replication for BUM traffic (default behavior) Configuration requires: * "ngs_bgp_asn" - BGP AS number (required) * "vxlan_interface" - VXLAN interface name (defaults to "Vxlan1") Switch prerequisites include BGP EVPN configuration. **SONiC**: SONiC uses BGP EVPN control plane with ingress-replication for BUM (Broadcast, Unknown unicast, and Multicast) traffic handling. The implementation uses FRR for EVPN configuration and relies on EVPN Type-3 IMET routes for dynamic VTEP discovery, avoiding the scaling issues associated with static flood lists. For each VXLAN network, the driver automatically configures: * BGP EVPN control plane (per-VNI configuration in FRR with route distinguisher and route targets) * VLAN to VNI mapping on the VTEP interface * Ingress-replication for BUM traffic (via EVPN) Configuration requires: * "vtep_name" - VXLAN tunnel endpoint interface name (required) * "ngs_bgp_asn" - BGP AS number (required) See the VXLAN L2VNI Support section in the configuration documentation for complete setup instructions and examples for each platform. * Adds VXLAN support for Cisco NX-OS switches using BGP EVPN with ingress-replication. This enables VXLAN overlay networks for bare metal deployments with Cisco Nexus switches acting as VXLAN Tunnel Endpoints (VTEPs). **Prerequisites**: This feature requires the "networking-baremetal" plugin with the "baremetal-l2vni" mechanism driver, which handles hierarchical port binding and allocates local VLAN segments that are mapped to VXLAN VNIs on the switch fabric. The implementation uses BGP EVPN control plane with ingress- replication for BUM (Broadcast, Unknown unicast, and Multicast) traffic handling. This approach aligns with Cisco best practices and scales properly with Neutron's dynamic VNI assignment model. For each VXLAN network, the driver automatically configures: * BGP EVPN control plane (VNI L2, route distinguisher, route targets) * VLAN to VNI mapping (vn-segment) * NVE interface membership with ingress-replication protocol bgp Configuration is minimal - only the NVE interface name needs to be specified (defaults to "nve1"). Switch prerequisites include BGP EVPN configuration with the NVE interface set to "host-reachability protocol bgp". See the VXLAN L2VNI Support section in the configuration documentation for complete setup instructions and examples. * Now the etcd api version is detected automatically. The API version can be overridden by the "api_version" query parameter of the coordination backend url, or the "ETCD3GW_API_PATH" environment. * Adds VXLAN L2VNI support for Juniper Junos and Cumulus NVUE platforms, completing VXLAN capabilities across major network operating systems. **Prerequisites**: This feature requires the "networking-baremetal" plugin with the "baremetal-l2vni" mechanism driver, which handles hierarchical port binding and allocates local VLAN segments that are mapped to VXLAN VNIs on the switch fabric. **Juniper Junos**: Supports VXLAN L2VNI configuration on QFX and EX series switches. The implementation maps VLANs (referenced by name) to VNIs using the "vxlan vni" command. Optional EVPN control plane support is available via VRF target configuration. Configuration options: * "ngs_evpn_vni_config" - Enable EVPN VRF target configuration (default: false) * "ngs_bgp_asn" - BGP AS number (required when EVPN is enabled) When EVPN is enabled, the driver configures per-VLAN VRF targets for EVPN Type-2 route import/export using the format "target:<asn>:<vni>". **Cumulus NVUE**: Supports VXLAN L2VNI configuration on the default bridge domain "br_default" for Cumulus Linux 5.x switches. Provides flexible BUM traffic handling with support for: * EVPN-only deployments (no configuration needed) * Head-End Replication (HER) with static flood lists * Hybrid deployments combining EVPN and HER Configuration options: * "ngs_her_flood_list" - Global HER flood list (comma-separated VTEP IPs, optional) * "ngs_physnet_her_flood" - Per-physical-network HER flood lists (format: "physnet1:ip1,ip2;physnet2:ip3,ip4", optional) * "ngs_evpn_vni_config" - Enable EVPN VNI control plane configuration in FRR (default: false) * "ngs_bgp_asn" - BGP AS number (required when EVPN is enabled) HER flood list resolution follows a three-tier hierarchy: per- physnet mapping, global configuration, or EVPN-only (default). See the VXLAN L2VNI Support section in the configuration documentation for complete setup instructions and examples for each platform. * It is now possible to add security group support to existing drivers. This is implemented as a neutron service plugin and can be enabled by appending "genericswitch_security_group" to the neutron configuration "[DEFAULT]service_plugins" list. The security group feature is limited to applying one security group to a port. The first driver to have security group support added is "netmiko_cisco_nxos". Limitations specific to this driver are: * Only ingress rules allowed * Only IPv4 rules are implemented * Supports rules for protocols: tcp, udp, icmp * The "netmiko_dell_os10" driver now supports security groups on switches running Dell OS10, supporting the following: * Ingress and egress rules * IPv4 * Rule filters for IP protocols TCP, UDP and ICMP * The "netmiko_sonic" driver now supports security groups on upstream distributions of SONiC, supporting the following: * Ingress and egress rules * IPv4 and IPv6 * Rule filters for IP protocols TCP, UDP and ICMP The security group (ACL) implementation of Dell Enterprise SONiC 4.5 diverges from upstream enough to require the addition of a new driver "netmiko_dell_enterprise_sonic". This driver should be specified when running this distribution of SONiC on Dell hardware. Dell Enterprise SONiC 4.5 also lacks support for ICMP filter rules, and this is enforced by "netmiko_dell_enterprise_sonic". Upgrade Notes ************* * Any Aruba AOS-CX device using the "aruba_os" device type in its configuration needs a configuration update. The device type should be replaced with "aruba_aoscx". Bug Fixes ********* * Add error checking for Dell Force10 and OS10 devices. * Add Arista EOS bond trunk commands so LACP bond trunk ports are supported. * Convert boolean configuration parameters before passing them to Netmiko. Previously, we were only converting numeric parameters (int/floats). This allows full configurability of low-level Netmiko parameters, such as SSH key management. * Fix Netmiko device type for Aruba AOS-CX. The previously-used device type, "aruba_os", is meant for wireless controllers, not for switches running AOS-CX. As a result, trying to run any command over SSH with Netmiko would fail on Aruba AOS-CX switches. * Fixed incorrect command when unplugging bond subports. Previously, when a bond was unplugged from a network with trunk subports, the system would incorrectly try to add subports instead of removing them. This bug has been fixed, and the system now uses the correct command to remove subports, ensuring proper bond cleanup. Changes in networking-generic-switch 8.0.0..9.0.0 ------------------------------------------------- c06d3f9 Log warning when `backend_url`` is not configured 119f960 Detect device configuration errors on Dell Force10 and OS10 836461b docs: Reorder docs to be more sane 0de6128 vxlan: OVS testing patch for 'vxlan' binding model e19b240 vxlan: Add Junos, Cumulus NVUE, and denote Dell OS10 as unsupported bc00791 vxlan: Arista EOS and vendor neutral SONiC 9a584aa vxlan: follow-up cisco nxos/substrate review feedback. db7aa18 Avoid unnecessary functional test runs e0a103c Declare Python 3.13 supported 2ccb263 CI: Temporary setuptools pin c5b2e9a Remove unused sphinxcontrib-seqdiag 63d0009 l2vni plug case with Cisco NXOS cd93f3c devstack: Ignore error with file existing on restack bbb00c8 Migrate setup configuration to pyproject.toml format de89f51 Add Arista bond trunk support d09ce22 Update hacking to 7.0.0 58ee56c Use upper constraints in pep8 job f53cc2a clean up codespell jobs bf2f9f5 fix: segment binding level for VLAN support adfc71f reno: Update master for unmaintained/2024.1 e3e6cc5 Drop remaining logic for linuxbridge-agent 96198e7 tox: Enable codespell by default and limit it to relevant files 2db0a81 Add default vlan to driver interfaces 01da92a Drop ineffective ignore_base_python 5e463cf test_devices: Fix test to avoid scary backtrace 819c97f Update master for stable/2025.2 26160cd Fix incorrect command when unplugging bond subports 4997706 Cast boolean Netmiko kwargs to native types a24f603 Fix support for Aruba AOS CX devices b3c86c4 Add security group support to netmiko_dell_os10 61ea1f5 Add security group support to netmiko_sonic fa20b9f Add security group support to netmiko_cisco_nxos 39f8e0b tox: exclude all venv dirs from pep8 7462918 devstack: Drop explicit etcd api version 6402317 etcd: Discover api version automatically Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 12 + devstack/plugin.sh | 9 +- devstack/upgrade/upgrade.sh | 7 +- networking_generic_switch/batching.py | 10 +- networking_generic_switch/devices/__init__.py | 112 ++- .../devices/netmiko_devices/__init__.py | 214 ++++- .../devices/netmiko_devices/arista.py | 238 +++++- .../devices/netmiko_devices/cisco.py | 240 ++++++ .../devices/netmiko_devices/cumulus.py | 262 ++++++ .../devices/netmiko_devices/dell.py | 105 ++- .../devices/netmiko_devices/juniper.py | 240 ++++++ .../devices/netmiko_devices/ovs.py | 189 ++++- .../devices/netmiko_devices/sonic.py | 569 ++++++++++++- networking_generic_switch/generic_switch_mech.py | 194 ++++- networking_generic_switch/generic_switch_sg.py | 2 +- pyproject.toml | 100 ++- ...dd-default-vlan-parameter-c614b798f45f9973.yaml | 13 + .../add-dell-error-checking-28809170596cccda.yaml | 4 + .../notes/arista-bond-trunk-4a376a636f899173.yaml | 5 + ...rista-sonic-vxlan-support-8f3a9c4b2e1d5a67.yaml | 56 ++ ...cisco-nxos-vxlan-bgp-evpn-251dd384acac2d6f.yaml | 31 + ...nvert-netmiko-bool-params-55d86c55fc73503e.yaml | 7 + .../notes/etcd-api-discover-10e2f7c02e96e88b.yaml | 6 + ...aruba-netmiko-device-type-1e1a3e2e3eb3741e.yaml | 12 + ...unplugging-trunk-subports-66d8496b43c55130.yaml | 8 + ...per-cumulus-vxlan-support-6c8d4f2a9b3e7d15.yaml | 53 ++ releasenotes/notes/nx-os-sg-804cc5831089448a.yaml | 15 + releasenotes/notes/os10-sg-ceaea96b20b31dbd.yaml | 9 + releasenotes/notes/sonic-sg-b7142e4c153ca7ac.yaml | 17 + releasenotes/source/2024.1.rst | 2 +- releasenotes/source/2025.2.rst | 6 + releasenotes/source/index.rst | 1 + requirements.txt | 4 +- setup.cfg | 66 -- tox.ini | 13 +- zuul.d/networking-generic-switch-jobs.yaml | 5 +- zuul.d/project.yaml | 19 +- 55 files changed, 6887 insertions(+), 444 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 913556e..c61189a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -etcd3gw>=2.1.0 # Apache-2.0 +etcd3gw>=2.3.0 # Apache-2.0 @@ -7 +7 @@ stevedore>=1.20.0 # Apache-2.0 -netmiko>=4.1.1 # MIT +netmiko>=4.4.0 # MIT

1 0

ironic-tempest-plugin 3.0.0 (gazpacho)
by no-reply＠openstack.org 03 Mar '26

03 Mar '26

We enthusiastically announce the release of: ironic-tempest-plugin 3.0.0 This release is part of the gazpacho release series. The source is available from: https://opendev.org/openstack/ironic-tempest-plugin Download the package from: https://tarballs.openstack.org/ironic-tempest-plugin/ Please report issues through: https://bugs.launchpad.net/ironic/+bugs For more details, please see below. 3.0.0 ^^^^^ Deprecation Notes * Support for ironic-inspector has been deprecated, because ironic- inspector was already retired. Due to this deprecation, the following options are also deprecated. * "[service_available] ironic_inspector" * "[enforce_scope] ironic_inspector" * All options in the "[baremetal_introspection]" section. Changes in ironic-tempest-plugin 2.16.0..3.0.0 ---------------------------------------------- e8ac2c3 Remove flavor dependency from InspectorBasicTest 051071e Dial back the multi-tenancy testing 22e39ee Remove idrac-wsman tests 29cd41e Revert "Add graphical console validate to basic ops scenario" 3ae903c Remove MANIFEST.in d4f7ca7 Test graphical console novnc connection f78da1a Add graphical console validate to basic ops scenario d54d9cc Enable ironic-tempest-bios-ipmi-direct in check/gate 210d70c Add project badge dc72db4 Relax assertion in test_get_all_shards dba9f95 ci: fix and log errors on advanced tests disqualification 5933b56 Deprecate options for ironic-inspector tests b23bb10 Remove useless cover target f04e9ca Replace deprecated assertItemsEqual 95503b6 list detailed ports by node Diffstat (except docs and test files) ------------------------------------- MANIFEST.in | 6 --- README.rst | 15 +++--- ironic_tempest_plugin/config.py | 37 ++++++++++++++ .../services/baremetal/v1/json/baremetal_client.py | 16 ++++-- .../ironic_standalone/test_advanced_ops.py | 34 ++++++++----- .../scenario/ironic_standalone/test_basic_ops.py | 12 ----- .../scenario/ironic_standalone/test_cleaning.py | 12 ----- .../ironic_standalone/test_inspection_basic.py | 4 -- .../deprecate-inspector-0de255090cd2cb82.yaml | 10 ++++ test-requirements.txt | 1 - tox.ini | 10 ---- zuul.d/project.yaml | 3 ++ 18 files changed, 182 insertions(+), 90 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 0ce003e..a080de9 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -2 +1,0 @@ stestr>=1.0.0 # Apache-2.0 -coverage>=4.0 # Apache-2.0

1 0