We are ecstatic to announce the release of: neutron-vpnaas 26.0.0 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/neutron-vpnaas Download the package from: https://tarballs.openstack.org/neutron-vpnaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-vpnaas 25.0.0..26.0.0 ---------------------------------------- b12b8f96b Use releases.openstack.org instead of opendev.org 5cf0516b7 Use write connection for get_vpn_services_on_host 980dd0806 Use consistent regex to validate ovsdb_connection f6033dd2e Add support for additional auth, encryption, PFS choices 151687f81 Update jobs based on testing runtime for 2025.1 ef770d898 Use subprocess.Popen instead of Neutron eventlet utility method 35a5478a2 Register VPN_AGENTS_SCHEDULER_OPTS in plugin config sample 64a7a080c Update default envlist 705dfd082 functional: Fix failing due to Noble and pip restricitons 0bac8169c Fix connection status reporting when using LibreSwan 4 4ed8e10f4 tests: test_db_base_plugin_v2.py was moved to common b04ba041f reno: Update master for unmaintained/2023.1 00ef4b086 pyupgrade changes for Python3.9+ 960cf21df Use ``alembic.op.alter_column`` 6372f73e4 Bump hacking 8ded7fe70 Fix typo in default NEUTRON_VPNAAS_DEVICE_DRIVER for StrongSwan 428f736b8 Load core neutron.conf in ovn-vpn-agent a8ee157dd [sqlalchemy-20] Remove CI job "neutron-vpnaas-openstack-tox-py310-with-sqlalchemy-main" f50d906c7 Remove old excludes 30dfcad56 Update master for stable/2024.2 309f4a0f7 Add oslo.log options to generated ovn vpn agent config 2cff099c2 reno: Update master for unmaintained/zed Diffstat (except docs and test files) ------------------------------------- .pre-commit-config.yaml | 4 +- .pylintrc | 3 - .zuul.yaml | 32 +---- devstack/plugin.sh | 2 +- devstack/settings | 2 +- etc/oslo-config-generator/ovn_vpn_agent.ini | 1 + neutron_vpnaas/agent/ovn/vpn/ovsdb.py | 2 +- .../api/rpc/agentnotifiers/vpn_rpc_agent_api.py | 2 +- .../2025.1/expand/b18aab30fddc_add_more_ciphers.py | 72 +++++++++++ .../alembic_migrations/versions/EXPAND_HEAD | 2 +- .../newton/expand/fe637dc3f042_support_sha256.py | 10 +- ...903cbde_add_auth_algorithm_sha384_and_sha512.py | 9 +- neutron_vpnaas/db/vpn/vpn_agentschedulers_db.py | 2 +- neutron_vpnaas/db/vpn/vpn_db.py | 12 +- neutron_vpnaas/db/vpn/vpn_ext_gw_db.py | 2 +- neutron_vpnaas/db/vpn/vpn_models.py | 43 +++++-- neutron_vpnaas/db/vpn/vpn_validator.py | 8 +- neutron_vpnaas/extensions/vpn_aes_ctr.py | 37 ++++++ neutron_vpnaas/extensions/vpn_agentschedulers.py | 6 +- neutron_vpnaas/extensions/vpn_endpoint_groups.py | 2 +- neutron_vpnaas/opts.py | 5 +- neutron_vpnaas/scheduler/vpn_agent_scheduler.py | 4 +- neutron_vpnaas/services/vpn/agent.py | 13 +- .../services/vpn/common/netns_wrapper.py | 44 ++++--- .../services/vpn/device_drivers/__init__.py | 2 +- .../services/vpn/device_drivers/ipsec.py | 35 ++++-- .../services/vpn/device_drivers/libreswan_ipsec.py | 9 +- .../services/vpn/device_drivers/ovn_ipsec.py | 8 +- .../vpn/device_drivers/strongswan_ipsec.py | 55 ++++++++- .../template/openswan/ipsec.conf.template | 9 +- .../template/strongswan/ipsec.conf.template | 2 + neutron_vpnaas/services/vpn/ovn/agent_monitor.py | 2 +- neutron_vpnaas/services/vpn/ovn_agent.py | 1 + neutron_vpnaas/services/vpn/ovn_plugin.py | 3 +- neutron_vpnaas/services/vpn/plugin.py | 24 ++-- .../services/vpn/service_drivers/__init__.py | 4 +- .../services/vpn/service_drivers/base_ipsec.py | 14 +-- .../vpn/service_drivers/driver_validator.py | 2 +- .../services/vpn/service_drivers/ipsec.py | 5 +- .../services/vpn/service_drivers/ovn_ipsec.py | 20 +-- neutron_vpnaas/services/vpn/vpn_service.py | 2 +- .../functional/common/test_migrations_sync.py | 16 +-- .../functional/openswan/test_openswan_driver.py | 4 +- .../functional/strongswan/test_netns_wrapper.py | 2 +- .../strongswan/test_strongswan_driver.py | 20 +-- .../unit/db/vpn/test_vpn_agentschedulers_db.py | 71 ++++++++--- .../unit/extensions/test_vpn_endpoint_groups.py | 2 +- .../unit/services/vpn/common/test_netns_wrapper.py | 2 +- .../unit/services/vpn/device_drivers/test_ipsec.py | 135 ++++++++++----------- .../services/vpn/device_drivers/test_ovn_ipsec.py | 14 ++- .../services/vpn/service_drivers/test_ipsec.py | 10 +- .../services/vpn/service_drivers/test_ovn_ipsec.py | 55 ++++++++- rally-jobs/plugins/vpn_base.py | 20 +-- rally-jobs/plugins/vpn_utils.py | 11 +- .../notes/additional-ciphers-cda989b9a5ff363d.yaml | 8 ++ releasenotes/source/2023.1.rst | 2 +- releasenotes/source/2024.2.rst | 6 + releasenotes/source/conf.py | 1 - releasenotes/source/index.rst | 1 + releasenotes/source/zed.rst | 2 +- requirements.txt | 6 +- setup.cfg | 4 +- test-requirements.txt | 6 +- tools/check_i18n.py | 2 +- tools/configure_for_vpn_func_testing.sh | 2 +- tox.ini | 10 +- 76 files changed, 658 insertions(+), 404 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index dac35ac52..9f5b5ae32 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,4 +3,0 @@ - -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. @@ -14 +10 @@ alembic>=1.6.5 # MIT -neutron-lib>=2.6.0 # Apache-2.0 +neutron-lib>=3.18.0 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index bddbc8133..898aa0ec2 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -1,5 +1 @@ -# The order of packages is significant, because pip processes them in the order -# of appearance. Changing the order has an impact on the overall integration -# process, which may cause wedges in the gate later. - -coverage!=4.4,>=4.0 # Apache-2.0 +coverage>=4.4.1 # Apache-2.0