We are jazzed to announce the release of: neutron-fwaas 22.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/neutron-fwaas Download the package from: https://tarballs.openstack.org/neutron-fwaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-fwaas 21.0.0..22.0.0 --------------------------------------- 9060a96b1 Use releases.openstack.org instead of opendev.org 0dc313f3e Drop v1 to v2 migration 56b8924fe db: add missing primary key in firewall_group_associations_v2 bbfcab97f Remove ovsdb_interface and of_interface 6149609ba Install runtime/test dependencies for venv target f315f199f Drop remaining test code for linuxbridge machanism driver ce7630a13 Use common constants from neutron-lib for agent_mode 824469b13 Drop extra space from nflog-prefix 753c7d838 [OVN] Fix the provider error in devstack settings 1d0a19968 tests: test_db_base_plugin_v2.py was moved to common 3cccd0fee reno: Update master for unmaintained/2023.1 070113c90 pyupgrade changes for Python3.9+ bef88ac0e pre-commit: update versions 636142301 Use ``alembic.op.alter_column`` 083571242 Add note about requirements lower bounds 9f30a6f44 Update jobs based on testing runtime for 2025.1 f7b0c71ac Move oslo.concurrency to install requirements c40812e2d [sqlalchemy-20] Remove CI job "neutron-fwaas-openstack-tox-py310-with-sqlalchemy-main" caca5ae4a Account for iptables-save output spacing differences 0a2fce5ee Update master for stable/2024.2 58eda16d5 Fix FWaaS logs duplication in neutron-l3-agent log 8de0c36cb Support l3 stateless firewall based on OVN Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 6 +- .pylintrc | 1 - .zuul.yaml | 19 +- devstack/plugin.sh | 11 +- devstack/settings | 1 + neutron_fwaas/cmd/v1_to_v2_db_migration.py | 139 ------- neutron_fwaas/db/firewall/firewall_db.py | 89 ---- neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 24 +- .../2025.1/contract/1007f519ea46_drop_v1.py | 40 ++ ...e9ef63_add_pk_firewall_group_associations_v2.py | 53 +++ .../540142f314f4_fwaas_router_insertion.py | 17 +- .../versions/796c68dffbb_cisco_csr_fwaas.py | 24 +- .../alembic_migrations/versions/CONTRACT_HEAD | 2 +- .../alembic_migrations/versions/EXPAND_HEAD | 2 +- .../liberty/expand/4b47ea298795_add_reject_rule.py | 14 +- .../expand/d6a12e637e28_neutron_fwaas_v2_0.py | 4 + .../privileged/netfilter_log/libnetfilter_log.py | 4 +- neutron_fwaas/privileged/netlink_lib.py | 18 +- neutron_fwaas/services/firewall/fwaas_plugin_v2.py | 2 +- .../firewall/service_drivers/agents/agents.py | 16 +- .../agents/drivers/conntrack_base.py | 2 +- .../service_drivers/agents/drivers/fwaas_base.py | 2 +- .../agents/drivers/fwaas_base_v2.py | 2 +- .../agents/drivers/linux/iptables_fwaas_v2.py | 31 +- .../agents/drivers/linux/l2/driver_base.py | 2 +- .../linux/l2/openvswitch_firewall/firewall.py | 22 +- .../drivers/linux/l2/openvswitch_firewall/rules.py | 6 +- .../service_drivers/agents/firewall_agent_api.py | 8 +- .../service_drivers/agents/firewall_service.py | 2 +- .../firewall/service_drivers/agents/l2/fwaas_v2.py | 2 +- .../agents/l3reference/firewall_l3_agent_v2.py | 40 +- .../firewall/service_drivers/driver_api.py | 6 +- .../firewall/service_drivers/ovn/__init__.py | 0 .../services/firewall/service_drivers/ovn/acl.py | 237 +++++++++++ .../firewall/service_drivers/ovn/constants.py | 44 ++ .../firewall/service_drivers/ovn/exceptions.py | 33 ++ .../service_drivers/ovn/firewall_l3_driver.py | 358 ++++++++++++++++ .../services/logapi/agents/drivers/iptables/log.py | 15 +- neutron_fwaas/services/logapi/agents/l3/fwg_log.py | 2 +- .../functional/privileged/test_netlink_lib.py | 2 +- .../logapi/agents/drivers/iptables/test_log.py | 43 +- .../unit/db/firewall/v2/test_firewall_db_v2.py | 22 +- .../netfilter_log/test_libnetfilter_log.py | 4 +- .../drivers/linux/l2/noop/test_noop_driver.py | 2 +- .../linux/l2/openvswitch_firewall/test_firewall.py | 30 +- .../linux/l2/openvswitch_firewall/test_rules.py | 4 +- .../agents/drivers/linux/test_iptables_fwaas_v2.py | 101 +++-- .../agents/drivers/linux/test_legacy_conntrack.py | 4 +- .../agents/drivers/linux/test_netlink_conntrack.py | 4 +- .../service_drivers/agents/l2/fake_data.py | 4 +- .../service_drivers/agents/l2/test_fwaas_v2.py | 46 +-- .../l3reference/test_firewall_l3_agent_v2.py | 32 +- .../firewall/service_drivers/agents/test_agents.py | 68 ++-- .../agents/test_firewall_agent_api.py | 2 +- .../agents/test_firewall_service.py | 2 +- .../firewall/service_drivers/ovn/__init__.py | 0 .../service_drivers/ovn/test_firewall_l3_driver.py | 452 +++++++++++++++++++++ .../firewall/service_drivers/test_driver_api.py | 2 +- .../unit/services/firewall/test_fwaas_plugin_v2.py | 27 +- .../logapi/agents/drivers/iptables/test_driver.py | 2 +- .../logapi/agents/drivers/iptables/test_log.py | 32 +- .../unit/services/logapi/agents/l3/test_fwg_log.py | 2 +- .../services/logapi/common/test_fwg_callback.py | 2 +- .../unit/services/logapi/common/test_log_db_api.py | 4 +- .../services/logapi/common/test_port_callback.py | 2 +- .../unit/services/logapi/test_fwg_validate.py | 2 +- ...all_group_associations_v2-3fddb21b3a19b598.yaml | 7 + ...fix-fwaas-log-duplication-85159dc33e43f095.yaml | 11 + ...remove-v1-to-v2-migration-4c5b7f60c6843739.yaml | 5 + ...3-firewall-for-ovn-driver-3f5632ad13cf35fd.yaml | 15 + releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2024.2.rst | 6 + releasenotes/source/conf.py | 1 - releasenotes/source/index.rst | 1 + requirements.txt | 4 + setup.cfg | 6 +- test-requirements.txt | 1 - tools/configure_for_func_testing.sh | 13 - tox.ini | 3 +- 94 files changed, 1723 insertions(+), 881 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 4185da125..1876468f1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -0,0 +1,3 @@ +# Requirements lower bounds listed here are our best effort to keep them up to +# date but we do not test them so no guarantee of having them all correct. If +# you find any incorrect lower bounds, let us know or propose a fix. @@ -6,0 +10 @@ os-ken >= 0.3.0 # Apache-2.0 +oslo.concurrency>=3.26.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index bdb9dc3d5..9cef38035 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +5,0 @@ requests-mock>=1.2.0 # Apache-2.0 -oslo.concurrency>=3.26.0 # Apache-2.0