[release-announce] neutron 18.0.0 (wallaby)

We are happy to announce the release of: neutron 18.0.0: OpenStack Networking This release is part of the wallaby release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron 17.0.0.0rc1..18.0.0 -------------------------------------- 15fee2f573 Fix API policy rules for new personas a25b9f74d6 Fix create_port new API policy roles ec268b650f Fix new Network API policy rules ca78bf4a6b Fix Floating IP policy rules 80b373fbf1 [ovn]: Remove unwanted IP addresses from OVN ports e1a6c8cb88 [OVN] External ports (SR-IOV) QoS is handled by SR-IOV agent 201ea2af16 Migrate address-group API to the new secure rbac rules c1fdee4c57 Modify create address scope policy rule and add UT for that API 1d06fd915b Randomize segmentation ID assignation 0fb614046f [OVN][FT] Mech driver stop accessing DB at exit b065057509 Update TOX_CONSTRAINTS_FILE for stable/wallaby 570eb29256 Update .gitreview for stable/wallaby da2cc29ec0 Add release note about support for new secure RBAC policies 19eb12bd29 Revert "Implement "kill" method using os.kill()" e45de322a1 Change new policy rules for availability zones API 26072dc65d Base unit test framework to test new API policy enforcement 36b8c684b1 [OVN] Make delete_router_port() less error prone 8287654127 ovn: Do not set reside-on-redirect-chassis on distributed FIP 7f5711f77b Provide the rpc_response_max_timeout parameter to metadata-agent 9483037f5d ovn-migration: Add doctext explaining VXLAN to Geneve migration 10f43bdbdd functional: Collect northd logs 04e5a42f70 Switch neutron-grenade-dvr-multinode to be non voting temporary 2478dab841 [OVN] Set OVN_BUILD_FROM_SOURCE=True for ovs-master jobs 569aa4452a ovn-migration: Use DHCP nodes to configure dnsmasq 2bb52d49be Call install_ingress_direct_goto_flows() when ovs restarts 4b21111eb1 Implement "kill" method using os.kill() d3fce77ff5 ovn-migration: Change network type from vxlan to Geneve 7bb5fb2de1 ovn-migration: UNDERCLOUD_NODE_USER variable 062336e59b Set system_scope='all' in elevated context 194b08884f Log python warnings only once to limit size of CI jobs' output 67a9f46d80 Move policy rules "deprecated_*" params to the DeprecatedRule 1f68336b79 [OVN] Set send_periodic to False on provider networks 60b08896ab Test SQL cast in "get_total_reservations_map" c3427ca292 Bump neutron-lib to 2.10.1 759027a376 Always perform policy checks if enforce_new_defaults == true f628905279 Fix VLAN driver tests 9ed17cec2d Fix invalid JSON generated by quota details 32193267f5 Replace "ip route" command in "dvr_local_router" 202fa1f4a2 [OVN][Doc] Update docs for Routed Provider Networks 652f011cf3 Use normalized_cidr of the SG in the OVN driver 3a9e81bbb8 [SR-IOV] Do not fail if ip-link vf "min_tx_rate" is not supported ada9288492 Pass context objects directly to policy enforcement 4bb3c92917 Check for existence instead of fetching the whole net object bce27811df doc: Remove fwaas references from docs 50242af1b3 Add the base class DHCPResponder 24ac91b1b5 [OVN] zuul: make it clearer OVN+OVS packages are being used 4f009a8ab2 Disable TLS proxy for periodic Fedora job c33f0588cb [SR-IOV] Add support for ACCELERATOR_DIRECT VNIC type 2e20188441 Mech driver Resource Provider UUID5 namespaces should be different b04d64b90f [OVN] Set mcast_flood_reports on LSPs 9d04b8d479 Update ci_scenario_jobs document 90edcf6441 Add new policy rule SG_OWNER 02c8c037f8 Add constant for bagpipe flooding table 2bb4f5defd jobs: remove devstack-gate references d7c98a01a4 Implement secure RBAC for the l3 conntrack helper API 3b6dbb9a27 Implement secure RBAC for the floating ip port forwarding API e6ce2b450a Implement secure RBAC for the port API 067241b11b Implement new policy rules NET_OWNER and PARENT_OWNER 5c931f2913 Schedule networks to new segments if needed ee00bddce7 Remove rootwrap execution (6) 8e3a83c213 Config option to disable the DHCP functions 6cf71cbd6a Trivial: check if ipv6 is available for IptablesManager 9c2f0bba61 Add new policy rules NET_OWNER and PARENT_OWNER 0582146708 Clean port forwarding cache when router is DOWN f8f7c40295 [OVN] security group logging support (2 of 2) 14955f93f6 Ignore python warnings in the fullstack job 1dbe389392 Fix wrong packet_type set for IPv6 GRE tunnels in OVS 662f483120 [L3][HA] Retry when setting HA router GW status. d9542b6a01 Reduce number of the workers in fullstack gate job 8094b524f6 Allow sharing of address groups via RBAC mechanism 952c847795 [Functional] Mock classes from the ovn maintenance module 0a4dcb18bb Remove "IpCommandBase" base class e6ddea1aa0 Revert "DVR: Remove control plane arp updates for DVR" a6cdf273c0 Improve "get_devices_with_ip" performance 303d24ab8a Allow to manually define the gateway IP when using subnet pools 929a6a7007 ovn: Collect OVN logs b7956d80ca Implement "IPAllocation" router ports allocated retrieval f0f6d6189a [OVN] Fix RowNotFound: Cannot find Logical_Router 809cb5129e [doc]Replace ovn-controller man page url 8d44265736 Remove try block from privileged ip_lib module 85fc3d3610 [OVN] security group logging support (1 of 2) bdf1416958 Remove redundant _ensure_default_security_group 0d8ae15767 Remove update_initial_state() method from the HA router b168232e03 Make test_throttler happy 3398e6abc0 [OVN][QoS] Remove OVN QoS rule when FIP is dissasociated 2bfe143d83 Use normalized_cidr of the SG in the backen drivers adb3e943b1 Limit execution of the neutron CI jobs on some irrelevant file f416060d41 [OVN] Set OVN mech driver "resource_provider_uuid5_namespace" 591715b86e Implement "ip neigh flush" with Pyroute2 4b5bcff64c [OVS FW] Allow egress ICMPv6 only for know addresses 5a419cbc84 Remove rootwrap execution (5) 26f3de0f78 Add minimum bw qos rule validation for network 2638c8a561 Implement secure RBAC for RBAC policy API f58d09686c Implement secure RBAC for subnet pool API 57164efc98 Implement secure RBAC for service providers API e4a709a918 Implement secure RBAC for quotas API 01e289a03c Implement secure RBAC for the metering API 755982b0a2 Implement secure RBAC for the logging API 09664c593f Implement secure RBAC for Floating IP API 74e54e240f Implement secure RBAC for availability_zone API 66dac905bd Implement secure RBAC for address_scope API e4bbeee206 Don't configure dnsmasq entries for "network" ports 9641b6dfeb Update doc for upgrading to openvswitch firewall 1e220d7136 [OVS FW] Clean conntrack entries with mark == CT_MARK_INVALID ce8361a667 [L3HA] Bind metadata haproxy to IPv6 address if IPv6 is enabled 393d484e07 Fix deletion of rfp interfaces when router is re-enabled af89eeed36 Revert "Temporary make rally job non-voting" e22cc6e8cc Switch to new rolevar for run-temepst role ae22fe4495 Add support for VNIC type vDPA to ML2/OVS and ML2/OVN 86c03faa23 Bump neutron-lib to 2.9.0 9079bba00a [OVN][QOS] QoS for distributed floating IP ba56843d51 Change BaseLoggingTestCase setup for logging 924c40975a Bump oslo.policy to 3.6.2 3c40956166 Move router gateway deletion out of transaction 8ee73b1a5d Fix deepcopy of the OwnerCheck objects under uwsgi 5a0caaaf70 Remove OVN_SG_NAME_EXT_ID_KEY constant da8e655963 Use agent chassis table based on schema bfd6243fbf policy: Allow deepcopying of 'FieldCheck' b3b6cc06c3 [OVN] Update sample local.conf to mention OVN_BUILD_FROM_SOURCE 9f09b1fb19 Support address group in OVS firewall agent f06268a8ff Don't update AgentCache when Chassis_Private.chassis == [] a64d027da2 [OVN] Re-enables neutron-ovn-tempest-slow job (voting) b618d98541 [OVN] Fix RowNotFound exception while waiting for metadata networks 6c75316ca0 Remove rootwrap execution (4) da27fb0870 Remove "IptablesManager" unneeded input parameter "_execute" 27da92d634 [FT] Reset "AgentCache" singleton in functional tests bf14c725bb Stop metadata proxy gracefully a7bedd7428 Remove rootwrap execution (3) 7928b0d755 Remove rootwrap execution (2) c89c1f53db Remove rootwrap execution (1) e9e4395d57 Fix incorrect exception catch when update floating ip port forwarding cbfac6b7a8 Add extension unit tests for conntrack_helper plugin d452e78687 add_fake_chassis() may need to create a Chassis_Private 27255fce30 Convert OvnDbNotifyHandler rows to frozen rows 013c183d7c Don't try to create default SG when security groups are disabled e05101c8ac Fix update of trunk subports during live migration 257a51769b Drop meaningless translation marker f3c229b9cc Process DHCP events in order if related 1772e9543e Make neutron-tempest-dvr-ha-multinode-full to be 2 nodes job fc4e6ce1fe Move tempest job with neutron-lib master to the experimental queue d2073d6556 Remove flows for ARP reply MAC change 6ffeb0d623 Use constants from neutron-lib dc322a6e7d Remove duplicated assignement of the device_owner in UT 4f249b8579 Add note for openflow firewall 412160b97f Fix losses of ovs flows when ovs is restarted 7be2dc976a Change ARP reply MAC to router interface 0db771dcfe Add OVN mechanism driver to the ML2 config document 1ba73de0c6 Make all periodic jobs to be voting 9651c635b7 Temporary make rally job non-voting a2f317339d Fix misleading doc re: secgroup rule quota bfb8ef0199 Fix typo in "DhcpAgent.enable_isolated_metadata_proxy" 96eae957b0 [OVN] Allow schema checks to happen before starting connection fc60099d6c Fix unused 'timeout' in OvsdbMonitor start ffafc5f31e [ovn] Metadata agent: fix checking datapath type 088bfc79c4 Fix mock of the _is_keepalived_use_no_track_supported 2a6fd9d44d Optimize get_ports with QoS extension 278978bb42 Add OVN migration OSP 16.2 option 8912ea5575 Add port device profile extension 613a6f7947 Implement secure RBAC for the network IP availability c4e0cc76e6 Implement secure RBAC for floating IP pools API 6b17b8120d Implement secure RBAC for agents API ae64b77f57 Implement secure RBAC for flavor API f1541f2915 Implement secure RBAC for QoS API c156c7d883 Proper log translation 9c2029c2c8 Improve DHCP agent's debug messages 9d63e4c149 Don't run some more complex CI jobs on unrelated changes 0afa1b24ee Move "Co-gating" jobs to the periodic queue 4c12d10a24 [FT] Add lrp port binding wait event failure message 9676c28f9c Fix stopping timer in TestTimer 81574f04f3 Move some non-voting jobs to the experimental queue d474a48c66 Add openstack-python3-wallaby-jobs-arm64 job 7826661d65 Add resource_provider_bandwidths for computes 67f856e1e5 Provide object tagging using the tag plugin 1bbb31f46c [fullstack] Use delete_port attribute of destroy VM 8200014062 Remove documentation about nested transactions a7e02cdb17 [QoS] Get only min bw rules when extending port dict c84ae9762c [FT] Reduce "test_walk_versions" upgrade executions e7d126f9bc Use consistent filter API syntax 66e045360c [FT] Wait for the "neutron-keepalived-state-change" init message eac107a0d4 In OVO PortForwarding, retrieve FIP info from db_obj 19b137aeed [FT] Do not fail when decoding the JSON from ip_monitor 7a204f63e9 [fullstack] Be able to delete port when fake VM is destroyed d1ab4e26ea Switch tempest jobs to neutron specific ones f8a22c7d4a [OVS] Fix live-migration connection disruption 5d8f3fd614 Do not report ovs agent state if ovs is dead c68df5aeec Suppress deprecation warnings in policy enforer 24393a6e99 Add debug information for TestMinBwQoSOvs da3ce73198 Add support for deleting ml2/ovn agents d4ae574fd3 [FT] Add the datapath binding wait event to the watched list cb336541ee Change how ovn mech driver checks if vlan transparency is supported 64598ed51a [FT] Remove unneeded DB migration tests a37dc71ad6 create or delete port forwarding, update the floating ip status e1accae79b doc: Add available_features check to release checklist e007349d47 Optimize get_ports with trunk extension e0f15c5982 Add WaitForPortCreateEvent in BaseOVSTestCase 8ac61bda40 Pass subnet obj to save db call 75e030dfbd neutron-server api worker process should be named to their role 82ddc5ee1e Randomize port name in "BaseOVSTestCase" ab6d4afd95 Avoid race condition when processing RowEvents e4fb06b242 [ovn] Add neutron network to metadata namespace names 6ad1527ff8 Match Linux and Windows "execute" signature method a97b20580a Update path of the ovn extensions doc fe413fe01d [goal] Deprecate the JSON formatted policy file 6b0ae48381 Check the revision number only once db740decec [Docs] Guide about running and debugging tempest tests 0e0c7fa07e Add normalized_cidr column to SG rules d64c25c019 Follow-up: Move linters dependencies to tox.ini 0c00c060fb Update major release checklist 2340ad217b ovn: Support live migration to DPDK nodes 74490e09ff [L3] Document QoS support in Neutron 459716e644 Ensure XenAPI options are loaded 49c27eeda2 Extend address group notification data 92359b6fb9 Get sec group ids after address group update 3df21ee472 Implement "FdbInterface" with Pyroute2 b9e725ed72 Change the logic of "catch_exceptions" 1e81fd2bc0 Do not query the DB if QoS policy ID is None d0c5c4764d [ovn]: fix usage of lrp_set_options api to use **options c4007b0833 Rely on worker count for HashRing caching a8d5280b35 Remove duplicate licese text from the br_tun file 9f158922b6 Refactor the Neutron OSKenApp class 6db15a004d Add standard_attrs to address group 715f5f51c4 Check router interface not in use properly 87578a23bc Rename PortNumaAffinityPolicyExtensionTestPlugin 93225e016b [OVN] Update metadata port ony for requested subnet c613ede9fa Floating IP for routed networks: network:routed API ef063d6238 Implement secure RBAC for the subnet API e302cba68a Implement secure RBAC for security group API 4e18e62e6e Implement secure RBAC for the network segment range API c653c06c78 Implement secure RBAC for trunk API c6034bf7f4 New fullstack test for subnet port delete race condition 89e2fad8ef Move linters dependencies to tox.ini 2618acff51 Ensure "keepalived" is correcly disabled 329ea19f8b Fix removal of dvr-src mac flows when non-gateway port on router is deleted b4070c9752 Fix multicast traffic with IGMP snooping enabled 59827fa840 [Docs] Add doc about debugging of the Grenade jobs bbd5d785d6 Implement secure RBAC for the segment API 1a39d1c4d1 Implement secure RBAC for the router API 5246345a32 Implement secure RBAC for the network API 05ab8c591f Implement secure RBAC for auto_allocated_topology API 7e450091cf Switch to new engine facade for IpamPluggableBackend and Ipam driver ee75371df4 [OVN] Updates to tools/migrate_names.txt c4f957afbb Add vlan-transparent to OVN ML2 Supported API extensions 49cd9d7371 Remove duplicated meter_rpc instance initialization 91eb3d8346 Handle router HA port concurrently deleting 5a058d5019 [OVN] Skip maintenance IGMP snoop check if not LS name 0a0f647ea0 Delete HA metadata proxy PID and config with elevated privileges f4b64e519c Fix OVS conjunctive IP flows cleanup 26a30a3b78 [OVN] Ensure metadata checksum f63dc09206 Limit usage of resources in the fullstack tests job 8ca921b9eb Add common system and project policy check strings to constants e70e3ab455 Disable dns-integration API extension if it's not enabled in ML2 c8f88f2ab6 Fix imports order in neutron.services.ovn_l3_plugin module 0aa7f5b511 Add some wait time between stopping and starting again ovsdb monitor 86f6ea347a Add script which can clean patch ports between bridges 7c95150c84 Temporary blacklist test_reboot_server_hard in OVN IPv6 job 444ce313a8 Switch to new engine facade for l3_hamode_db leftovers f6a034f863 Add Python3 wallaby unit tests a6dbf97242 Deprecate XenAPI support 8d6c301301 Update requirements for recent pip failures e55f5e136b Bump requirements to perpare for secure RBAC 80e6781bc2 [GRE] Add possibility to create GRE tunnels over IPv6 533e93816d [ovn] Add 'security-groups-remote-address-group' extension to OVN 94f752bdee [Docs] Guide about running and debugging fullstack tests 23738d0df7 Migrate to new engine facade in the L3 extension UT module 95686a1da1 Migrate to new engine facade port numa affinity UT module c77c0892b7 Switch to new engine facade for ovn_db_sync module 002874e5a8 Fix TypeError for port_binding ece7453ef2 Remove neutron-tempest-with-uwsgi job from CI queues 510089bc5f Upgrade RPC version of SecurityGroup*Rpc 8ae10de297 Add OpenFlow10 protocol in OVSAgentBridge.setup_controllers() 9c236db3bf [OVN] ovn-metadata-agent: Retry registering Chassis at startup 4852dbd376 Remove left over code for filter_validation 087bd9aa1c [Doc] Remove info about compiling ovs kernel module in fullstack job 8ebd54d1bc Improve the CIDRs overlap check method for router add interface fc1fe016aa Neutron ovs agent: set mtu of smartnic port 5783e95288 Ensure ovsdb_probe_interval set before connect() a306428498 Update methods to use new ovsdbapp functions 9dc8bca740 [OVN] Fix inconsistent IGMP configuration 85c089eef2 Support remote address group in SG rules ab6c59b57e Fix calling of add_tunnel_port method from sanity checks module bf35cf65c8 Finish the new DB engine facade migration 55f5c78053 Remove "ovs-vsctl" support from rootwrap 0b98de0773 [OVS] Remove sleep during polling cycle a526950e32 ovn: Add a gap about e/w traffic fragmentation 790fff1d24 Remove "abc.abstractproperty" f03a11afb1 Do not shadow modules with a variable name b4795abef9 Adds a unique index to quotas 747ac57524 Disable not used services in the tempest and rally jobs af1ade69e7 Remove "find" rule from rootwrap filters d2187e8aa2 Add irrelevant-files for tripleo standalone jobs 3c0d57c884 Set metering iptables chain not found LOG level to WARNING 4cde6fb5ad Remove neutron-tempest-{iptables_hybrid,linuxbridge} jobs from CI fd335b4037 Import packaging.version explicitly e009ba0f62 Remove left over code for availability_zone_filter 77db2cf7bd Add missing "process_name" argument on Windows 7cf52bb532 Fix migration failed due TypeError of new_vlan_tag b495f4abbb [OVN] Make OVN IPv6 job voting again 489e0ead72 Fix migration from the HA to non-HA routers 78858e6719 Add "standard_attr_id" to some OVO dictionaries 323781d9f0 [ovn] Add 'net-mtu-writable' to supported extensions b5eadca521 Implement "find_child_pids" natively a217a5d290 Add port NUMA affinity policy ca3f2813c2 Disable cinder services on neutron grenade jobs 279fa8676e Add support for vlan transparency in the OVN driver 3cad670c97 Add devstack-tobiko-faults-centos job to the periodic queue dcf7acf2c6 SimpleInterfaceMonitor filter events by bridge name 25a694c098 Agent side push notifications for address groups 531d337db5 Remove left over code for admin_state_down_before_update b97a8eb488 Auto-remove floating agent gw ports on net/subnet delete 7842344a77 Add property "noopfirewall_or_firewall_disabled" 05d68ea135 Remove support for OVS versions <= 2.8.2 ad0605f9c3 Add process name to AsyncProcess 2df49fa879 Check project_id/tenant_id in API call b207f05ba7 Log dissasociation event when a FIP is deleted e392fb68c5 Don't fail if FIP is not in port forwarding cache during cleaning 70ef01c12f Fix local neutron folder path in ovn/sparse/Vagrantfile 3168caa3cb Fix invalid asssert_called_once_with e0e7f1b64e Switch tripleo standalone job to content provider d842d0dbf0 [Docs] Add info about how multicast is treated by fw drivers d60febb2d3 Remove deprecated use_veth_interconnection option ef0ec21186 ovn: support max_tunid option from NB_Global fb6945810c Fix a typo in sample policy file d4257f6b4a Use neutron-lib definition alias in the OVN extensions 2f66cb8182 Deprecate config option "keepalived_use_no_track" 14a1ad7009 Revert "Process ingress multicast traffic for 224.0.0.X separately" b41676f7fb Fix recent QoS minimum_bandwidth release note eb4cfbdb78 Fix recent MAC learning release note 71e08b8813 Treat Forbidden as NotFound in Designate aa2f058701 Implement "get_process_count_by_name" natively b4211c8c54 Implement "find_parent_pid" natively 2ece1002d2 Fix ovs agent, avoiding import error 4937928652 Server-side push notifications for address groups cd91e15768 [OVN] Simplify connection creation logic 4dca7fae87 Keepalived version check 8fc80b7e13 ovs firewall: fix mac learning on the ingress rule table when ovs offload enabled 0705699e60 "scope" conversion only just before pyroute2 method call 9d38c06980 Disable dstat service temporary in ovn scenario jobs df2c7baa23 Make test_agent_show only look for its own agents d2f8a2bea8 Rehome api tests for propagate_uplink_status 526693ed3c Remove ML2OVS-specific templates before migration to OVN 2325ad1950 Add locks for methods which sets nat rules in router b81e05e44a Imported Translations from Zanata ebb866310b Filter supported extension for OVN mech driver 3605e9f82d QoS policy update with placement: handle missing key a81f544347 Allow VXLAN network type for OVN driver ac6f94fcbf Update ovn-octavia-provider contacts a6a99bc9a0 Match created_at and updated_at timestamp in TestHashRing 7e31f2ae41 Do not load "qos-fip" if "qos" plugin is not loaded 24cd8598dc Fix formatting error in agent/linux/external_process.py d13efc6314 [L3] Let agent extension do delete router first 878fe8de92 [OVN][Doc] DevStack guide: Add command to get the port's UUID b8be1a05fa Process ingress multicast traffic for 224.0.0.X separately 996aa45e13 Capture timeout exception when deleting NamespaceFixture 3503022ce7 Convert neutron-grenade-ovn job to be zuulv3 f57b59a179 [Doc] Add section about diffs between ovs and iptables fw drivers b965b1ec4c Bump neutron-lib to 2.6.1 618e8588b3 Open Wallaby DB branch 00f1d325bd Do not retrieve again the Floating IP object during creation 9c0d502b19 include python36-devel in bindep, for tests e279a67d8f Use normalized cidrs in address groups a8ceb09f98 Use ebtables-legacy also in ovn multinode jobs be7882be27 Do not update agents "alive" state in TestAgentApi 704576e54e Default dnsmasq --conf-file to /dev/null ac08e89124 Change reference to OvnDbNotifyHandler._watched_events 7da5854f72 Use the 'all' tox env instead of 'all-plugin' 8e06d1d1eb Remove extraneous garp emission c8a819aff4 Filter out port with invalid ofport in OVS firewall 7d7f31a6ed Update master for stable/victoria f545c002dc Remove more empty lines in ipv6 ra conf. 959d8b6d73 Local mac direct flow for non-openflow firewall 10091f9346 Add source_ip_prefix and destination_ip_prefix to metering label rules be3669258c [OVN] update_port should not remove values from external_ids e77f631257 Migrate tempest jobs to Focal e613ffab7d Make abandon_old_reviews script to be compatible with python 3 87e5131432 Allow replacing the QoS policy of bound port 2864957ca5 Fix dhcp_release when client_id is specified b1f1c8aa50 Reduce log level in "ensure_device_is_ready" e10c0dedf4 ovn: Use new OVS commit hash 95558d0bf5 Metering fix error that might happen when labels are removed during processing 84d4fe177b [L3] Add missing address scope mark for IPv6 traffic 20b138ff31 fix dhcp bulk reload exceptions 3c2eaed7a9 Update networking-midonet maintainers list 5f6e37f966 Filter ML2Plugin mech driver supported extensions e7e71b2ca6 [OVN] Implement floating IP QoS in OVN backend 2500ca0b22 Update octavia plugin code 3edca83f83 Switch to new engine facade in L3 router's driver_controller module 2f0c352973 Log exception generated in Controller.prepare_request_body 5cc8f16a58 Lock sg updates while in _apply_port_filter() 5b48b7ceff Add Loki testing for Neutron 2207b88544 Flush ebtables arp protect chains before deleting them Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + TESTING.rst | 112 +-- bindep.txt | 2 + devstack/lib/loki | 6 + devstack/lib/octavia | 63 +- devstack/lib/ovs | 2 +- devstack/ovn-compute-local.conf.sample | 17 +- devstack/ovn-db-local.conf.sample | 17 +- devstack/ovn-local.conf.sample | 18 +- devstack/ovn-vtep-local.conf.sample | 17 +- devstack/plugin.sh | 4 + ...g-bgp-floating-ip-over-l2-segmented-network.rst | 464 ++++++++++++ .../bgp-floating-ip-over-l2-segmented-network.png | Bin 0 -> 75200 bytes .../bgp-floating-ip-over-l2-segmented-network.svg | 2 + .../contributor/internals/openvswitch_agent.rst | 5 +- .../contributor/internals/openvswitch_firewall.rst | 54 +- .../internals/ovn/ovn_network_logging.rst | 144 ++++ .../contributor/internals/service_extensions.rst | 4 + .../contributor/internals/services_and_agents.rst | 2 +- .../contributor/policies/gate-failure-triage.rst | 41 ++ .../contributor/policies/release-checklist.rst | 35 +- .../contributor/testing/ci_scenario_jobs.rst | 95 ++- .../testing/template_model_sync_test.rst | 4 +- etc/api-paste.ini | 4 + etc/neutron/rootwrap.d/debug.filters | 8 - etc/neutron/rootwrap.d/dhcp.filters | 9 - etc/neutron/rootwrap.d/dibbler.filters | 5 - etc/neutron/rootwrap.d/ebtables.filters | 11 - etc/neutron/rootwrap.d/iptables-firewall.filters | 27 - etc/neutron/rootwrap.d/l3.filters | 48 -- etc/neutron/rootwrap.d/linuxbridge-plugin.filters | 8 - etc/neutron/rootwrap.d/openvswitch-plugin.filters | 8 - etc/oslo-config-generator/openvswitch_agent.ini | 1 - etc/rootwrap.conf | 7 - lower-constraints.txt | 45 +- neutron/agent/common/async_process.py | 9 +- neutron/agent/common/ovs_lib.py | 28 +- neutron/agent/common/ovsdb_monitor.py | 42 +- neutron/agent/common/polling.py | 25 +- neutron/agent/dhcp/agent.py | 151 ++-- neutron/agent/l2/extensions/dhcp/__init__.py | 0 neutron/agent/l2/extensions/dhcp/base.py | 181 +++++ neutron/agent/l2/extensions/fdb_population.py | 31 +- neutron/agent/l3/agent.py | 21 +- neutron/agent/l3/dvr_edge_router.py | 10 +- neutron/agent/l3/dvr_fip_ns.py | 2 +- neutron/agent/l3/dvr_local_router.py | 26 +- neutron/agent/l3/extensions/port_forwarding.py | 22 +- neutron/agent/l3/ha.py | 6 +- neutron/agent/l3/ha_router.py | 20 +- neutron/agent/l3/keepalived_state_change.py | 27 +- neutron/agent/l3/namespaces.py | 8 +- neutron/agent/l3/router_info.py | 11 +- neutron/agent/linux/bridge_lib.py | 96 ++- neutron/agent/linux/dhcp.py | 45 +- neutron/agent/linux/external_process.py | 14 +- neutron/agent/linux/interface.py | 12 +- neutron/agent/linux/ip_conntrack.py | 27 +- neutron/agent/linux/ip_lib.py | 147 ++-- neutron/agent/linux/ipset_manager.py | 2 +- neutron/agent/linux/iptables_firewall.py | 6 +- neutron/agent/linux/iptables_manager.py | 37 +- neutron/agent/linux/keepalived.py | 36 +- neutron/agent/linux/l3_tc_lib.py | 3 +- .../agent/linux/openvswitch_firewall/firewall.py | 158 ++-- neutron/agent/linux/openvswitch_firewall/rules.py | 13 +- neutron/agent/linux/ra.py | 12 +- neutron/agent/linux/utils.py | 138 ++-- neutron/agent/linux/xenapi_root_helper.py | 92 --- neutron/agent/metadata/driver.py | 29 +- neutron/agent/metadata_agent.py | 3 + neutron/agent/ovn/metadata/agent.py | 106 ++- neutron/agent/ovn/metadata/ovsdb.py | 6 +- neutron/agent/ovsdb/native/helpers.py | 5 +- neutron/agent/rpc.py | 41 +- neutron/agent/securitygroups_rpc.py | 63 +- neutron/agent/windows/utils.py | 21 +- neutron/api/extensions.py | 28 + .../api/rpc/agentnotifiers/dhcp_rpc_agent_api.py | 11 +- neutron/api/rpc/agentnotifiers/l3_rpc_agent_api.py | 10 +- .../rpc/agentnotifiers/metering_rpc_agent_api.py | 5 +- neutron/api/rpc/callbacks/resources.py | 3 + neutron/api/rpc/handlers/dhcp_rpc.py | 15 + neutron/api/rpc/handlers/l3_rpc.py | 10 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 70 +- neutron/api/v2/base.py | 47 +- neutron/cmd/destroy_patch_ports.py | 90 +++ neutron/cmd/ipset_cleanup.py | 9 +- neutron/cmd/ovn/neutron_ovn_db_sync_util.py | 8 +- neutron/cmd/runtime_checks.py | 19 + neutron/cmd/sanity/checks.py | 56 +- neutron/cmd/sanity_check.py | 21 +- neutron/cmd/upgrade_checks/checks.py | 3 + neutron/common/_constants.py | 3 +- neutron/common/config.py | 6 + neutron/common/ovn/acl.py | 18 +- neutron/common/ovn/constants.py | 9 +- neutron/common/ovn/extensions.py | 104 ++- neutron/common/ovn/hash_ring_manager.py | 27 +- neutron/common/ovn/utils.py | 44 +- neutron/common/utils.py | 27 + neutron/conf/agent/common.py | 4 - neutron/conf/agent/l3/config.py | 5 + neutron/conf/agent/xenapi_conf.py | 17 +- neutron/conf/common.py | 27 +- neutron/conf/plugins/ml2/drivers/ovs_conf.py | 9 - neutron/conf/policies/__init__.py | 2 + neutron/conf/policies/address_group.py | 60 ++ neutron/conf/policies/address_scope.py | 103 ++- neutron/conf/policies/agent.py | 179 +++-- neutron/conf/policies/auto_allocated_topology.py | 36 +- neutron/conf/policies/availability_zone.py | 20 +- neutron/conf/policies/base.py | 61 ++ neutron/conf/policies/flavor.py | 183 +++-- neutron/conf/policies/floatingip.py | 83 ++- neutron/conf/policies/floatingip_pools.py | 19 +- .../conf/policies/floatingip_port_forwarding.py | 78 +- neutron/conf/policies/l3_conntrack_helper.py | 77 +- neutron/conf/policies/logging.py | 85 ++- neutron/conf/policies/metering.py | 100 ++- neutron/conf/policies/network.py | 389 +++++++--- neutron/conf/policies/network_ip_availability.py | 21 +- neutron/conf/policies/network_segment_range.py | 68 +- neutron/conf/policies/port.py | 800 +++++++++++++++------ neutron/conf/policies/qos.py | 349 +++++---- neutron/conf/policies/quotas.py | 53 +- neutron/conf/policies/rbac.py | 117 ++- neutron/conf/policies/router.py | 301 +++++--- neutron/conf/policies/security_group.py | 132 ++-- neutron/conf/policies/segment.py | 67 +- neutron/conf/policies/service_type.py | 20 +- neutron/conf/policies/subnet.py | 144 +++- neutron/conf/policies/subnetpool.py | 183 +++-- neutron/conf/policies/trunk.py | 116 ++- neutron/core_extensions/qos.py | 5 +- neutron/db/_utils.py | 15 +- neutron/db/address_group_db.py | 118 ++- neutron/db/agents_db.py | 3 +- neutron/db/agentschedulers_db.py | 29 +- neutron/db/db_base_plugin_common.py | 33 +- neutron/db/db_base_plugin_v2.py | 44 +- neutron/db/extraroute_db.py | 10 +- neutron/db/ipam_backend_mixin.py | 37 +- neutron/db/ipam_pluggable_backend.py | 61 +- neutron/db/l3_db.py | 198 ++--- neutron/db/l3_dvr_db.py | 161 ++++- neutron/db/l3_dvrscheduler_db.py | 57 +- neutron/db/l3_fip_pools_db.py | 3 +- neutron/db/l3_gateway_ip_qos.py | 11 +- neutron/db/l3_gwmode_db.py | 8 +- neutron/db/l3_hamode_db.py | 30 +- neutron/db/metering/metering_db.py | 61 +- neutron/db/migration/__init__.py | 2 + .../alembic_migrations/versions/EXPAND_HEAD | 2 +- ..._destination_ip_prefix_neutron_metering_rule.py | 42 ++ .../expand/1e0744e4ffea_port_device_profile.py | 43 ++ ...766_add_standard_attributes_to_address_group.py | 95 +++ .../532aa95457e2_port_numa_affinity_policy.py | 44 ++ ...5a7bd4425_add_rbac_support_for_address_group.py | 46 ++ ...677_support_remote_address_group_in_sg_rules.py | 41 ++ ...0820fc498_add_unique_quotas_project_resource.py | 71 ++ neutron/db/migration/cli.py | 3 +- neutron/db/models/address_group.py | 14 +- neutron/db/models/metering.py | 2 + neutron/db/models/port_device_profile.py | 34 + neutron/db/models/port_numa_affinity_policy.py | 36 + neutron/db/models/securitygroup.py | 5 + neutron/db/ovn_revision_numbers_db.py | 36 +- neutron/db/port_device_profile_db.py | 38 + neutron/db/port_numa_affinity_policy_db.py | 67 ++ neutron/db/provisioning_blocks.py | 3 +- neutron/db/quota/models.py | 7 + neutron/db/rbac_db_models.py | 14 +- neutron/db/securitygroups_db.py | 72 +- neutron/db/securitygroups_rpc_base.py | 110 ++- neutron/debug/debug_agent.py | 2 + .../_admin_state_down_before_update_lib.py | 32 - .../extensions/_availability_zone_filter_lib.py | 34 - .../extensions/admin_state_down_before_update.py | 3 +- neutron/extensions/availability_zone_filter.py | 2 +- neutron/extensions/dhcpagentscheduler.py | 11 + neutron/extensions/filter_validation.py | 2 +- .../metering_source_and_destination_fields.py | 42 ++ ...er_validation_lib.py => port_device_profile.py} | 22 +- neutron/extensions/port_numa_affinity_policy.py | 20 + neutron/extensions/qos_fip.py | 4 +- neutron/extensions/quotasv2.py | 14 +- neutron/extensions/rbac_address_group.py | 20 + .../extensions/security_groups_normalized_cidr.py | 20 + .../security_groups_remote_address_group.py | 21 + neutron/extensions/securitygroup.py | 6 +- neutron/ipam/drivers/neutrondb_ipam/driver.py | 11 +- neutron/ipam/requests.py | 40 +- neutron/locale/de/LC_MESSAGES/neutron.po | 42 +- neutron/locale/es/LC_MESSAGES/neutron.po | 36 +- neutron/locale/fr/LC_MESSAGES/neutron.po | 36 +- neutron/locale/it/LC_MESSAGES/neutron.po | 36 +- neutron/locale/ja/LC_MESSAGES/neutron.po | 35 +- neutron/locale/ko_KR/LC_MESSAGES/neutron.po | 36 +- neutron/locale/pt_BR/LC_MESSAGES/neutron.po | 36 +- neutron/locale/ru/LC_MESSAGES/neutron.po | 36 +- neutron/locale/zh_CN/LC_MESSAGES/neutron.po | 34 +- neutron/locale/zh_TW/LC_MESSAGES/neutron.po | 34 +- neutron/notifiers/nova.py | 16 + neutron/objects/address_group.py | 37 +- neutron/objects/base.py | 11 +- neutron/objects/l3_hamode.py | 2 +- neutron/objects/metering.py | 32 +- neutron/objects/network_segment_range.py | 11 +- neutron/objects/plugins/ml2/base.py | 10 +- .../objects/port/extensions/port_device_profile.py | 36 + .../port/extensions/port_numa_affinity_policy.py | 44 ++ neutron/objects/port_forwarding.py | 6 +- neutron/objects/ports.py | 36 +- neutron/objects/qos/policy.py | 16 +- neutron/objects/qos/rule.py | 3 + neutron/objects/quota.py | 5 +- neutron/objects/rbac_db.py | 12 +- neutron/objects/router.py | 1 - neutron/objects/securitygroup.py | 68 +- neutron/objects/stdattrs.py | 2 - neutron/objects/subnet.py | 41 +- neutron/objects/subnetpool.py | 4 +- neutron/objects/trunk.py | 12 +- neutron/opts.py | 3 +- neutron/pecan_wsgi/hooks/body_validation.py | 24 +- neutron/plugins/ml2/db.py | 5 +- neutron/plugins/ml2/drivers/helpers.py | 12 +- .../ml2/drivers/linuxbridge/agent/arp_protect.py | 16 +- .../linuxbridge/agent/linuxbridge_neutron_agent.py | 103 ++- neutron/plugins/ml2/drivers/mech_agent.py | 1 + .../ml2/drivers/mech_sriov/agent/pci_lib.py | 9 +- .../drivers/mech_sriov/mech_driver/mech_driver.py | 9 +- .../drivers/openvswitch/agent/common/constants.py | 7 +- .../agent/openflow/native/base_oskenapp.py | 38 + .../agent/openflow/native/br_dvr_process.py | 40 ++ .../openvswitch/agent/openflow/native/br_int.py | 5 +- .../openvswitch/agent/openflow/native/br_tun.py | 16 +- .../agent/openflow/native/ovs_bridge.py | 2 +- .../agent/openflow/native/ovs_oskenapp.py | 7 +- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 95 ++- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 338 +++++---- .../openvswitch/mech_driver/mech_openvswitch.py | 9 +- .../plugins/ml2/drivers/ovn/agent/neutron_agent.py | 154 ++-- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 219 +++--- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 20 - .../ovn/mech_driver/ovsdb/extensions/qos.py | 112 ++- .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 130 ++-- .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 33 +- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 219 +++--- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 3 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 186 ++++- neutron/plugins/ml2/drivers/type_vlan.py | 6 - .../plugins/ml2/extensions/port_device_profile.py | 42 ++ .../ml2/extensions/port_numa_affinity_policy.py | 47 ++ neutron/plugins/ml2/ovo_rpc.py | 5 + neutron/plugins/ml2/plugin.py | 70 +- neutron/policy.py | 62 +- neutron/privileged/__init__.py | 9 + neutron/privileged/agent/linux/dhcp.py | 2 +- neutron/privileged/agent/linux/ip_lib.py | 83 ++- neutron/privileged/agent/linux/netlink_lib.py | 7 +- neutron/privileged/agent/linux/utils.py | 42 ++ neutron/privileged/agent/ovsdb/__init__.py | 0 neutron/privileged/agent/ovsdb/native/__init__.py | 0 neutron/privileged/agent/ovsdb/native/helpers.py | 47 ++ neutron/scheduler/l3_agent_scheduler.py | 11 +- .../externaldns/drivers/designate/driver.py | 2 +- neutron/services/l3_router/l3_router_plugin.py | 7 +- .../service_providers/driver_controller.py | 2 +- neutron/services/logapi/common/db_api.py | 2 +- .../logapi/drivers/openvswitch/log_oskenapp.py | 25 +- .../logapi/drivers/openvswitch/ovs_firewall_log.py | 10 +- neutron/services/logapi/drivers/ovn/__init__.py | 0 neutron/services/logapi/drivers/ovn/driver.py | 363 ++++++++++ neutron/services/metering/agents/metering_agent.py | 11 +- .../metering/drivers/iptables/iptables_driver.py | 59 +- neutron/services/metering/metering_plugin.py | 93 ++- neutron/services/ovn_l3/plugin.py | 76 +- .../services/portforwarding/drivers/ovn/driver.py | 10 + neutron/services/portforwarding/pf_plugin.py | 28 +- neutron/services/qos/drivers/manager.py | 9 + neutron/services/qos/drivers/openvswitch/driver.py | 5 +- neutron/services/qos/qos_plugin.py | 236 +++++- neutron/services/revisions/revision_plugin.py | 7 +- neutron/services/segments/db.py | 3 +- neutron/services/trunk/drivers/base.py | 3 +- neutron/services/trunk/plugin.py | 36 +- neutron/services/trunk/rpc/server.py | 9 +- neutron/services/trunk/rules.py | 4 +- neutron/services/trunk/utils.py | 5 +- .../functional/agent/common/test_ovsdb_monitor.py | 82 +++ .../agent/l3/test_keepalived_state_change.py | 64 +- .../functional/agent/l3/test_legacy_router.py | 2 +- .../functional/agent/linux/test_bridge_lib.py | 116 ++- .../functional/agent/linux/test_keepalived.py | 3 +- .../functional/agent/linux/test_netlink_lib.py | 14 +- .../functional/agent/linux/test_ovsdb_monitor.py | 4 + .../agent/ovn/metadata/test_metadata_agent.py | 26 +- .../functional/cmd/test_destroy_patch_ports.py | 93 +++ .../functional/cmd/test_linuxbridge_cleanup.py | 8 +- ...86_add_binding_index_to_routerl3agentbinding.py | 87 --- .../test_3b935b28e7a0_migrate_to_pluggable_ipam.py | 142 ---- .../migrations/test_97c25b0d2353_add_name_desc.py | 70 -- ..._a8b517cff8ab_add_routerport_bindings_for_ha.py | 102 --- ...12a3ef66e62_add_standardattr_to_qos_policies.py | 60 -- .../functional/objects/plugins/ml2/__init__.py | 0 .../functional/objects/plugins/ml2/test_base.py | 90 +++ .../objects/plugins/ml2/test_geneveallocation.py | 26 + .../objects/plugins/ml2/test_greallocation.py | 26 + .../objects/plugins/ml2/test_vlanallocation.py | 26 + .../objects/plugins/ml2/test_vxlanallocation.py | 26 + .../ovn/mech_driver/ovsdb/extensions/test_qos.py | 51 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 2 +- .../ovn/mech_driver/ovsdb/test_ovn_db_resources.py | 65 ++ .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 12 +- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 91 ++- .../drivers/ovn/mech_driver/test_mech_driver.py | 83 ++- .../privileged/agent/linux/test_ip_lib.py | 26 +- .../l3_router/test_l3_dvr_router_plugin.py | 243 +++++++ .../functional/services/logapi/drivers/__init__.py | 0 .../services/logapi/drivers/ovn/__init__.py | 0 .../services/logapi/drivers/ovn/test_driver.py | 279 +++++++ .../functional/services/ovn_l3/test_plugin.py | 9 +- .../portforwarding/test_port_forwarding.py | 65 -- .../unit/agent/l2/extensions/dhcp/__init__.py | 0 .../unit/agent/l2/extensions/dhcp/test_base.py | 206 ++++++ .../agent/l2/extensions/test_fdb_population.py | 147 ++-- .../agent/l3/extensions/test_port_forwarding.py | 32 + .../linux/openvswitch_firewall/test_firewall.py | 112 ++- .../linux/openvswitch_firewall/test_iptables.py | 6 +- .../unit/agent/linux/test_external_process.py | 12 +- .../unit/agent/linux/test_iptables_firewall.py | 11 +- .../unit/agent/linux/test_iptables_manager.py | 210 +++--- .../unit/agent/linux/test_xenapi_root_helper.py | 86 --- .../rpc/agentnotifiers/test_dhcp_rpc_agent_api.py | 4 +- .../api/rpc/handlers/test_securitygroups_rpc.py | 45 +- .../unit/common/ovn/test_hash_ring_manager.py | 19 +- .../unit/conf/policies/test_availability_zone.py | 37 + .../extensions/test_floating_ip_port_forwarding.py | 58 ++ .../unit/extensions/test_l3_conntrack_helper.py | 141 ++++ .../unit/extensions/test_port_device_profile.py | 58 ++ .../extensions/test_port_numa_affinity_policy.py | 86 +++ .../test_security_groups_normalized_cidr.py | 69 ++ .../extensions/test_port_numa_affinity_policy.py | 38 + .../drivers/linuxbridge/agent/test_arp_protect.py | 68 +- .../agent/test_linuxbridge_neutron_agent.py | 122 ++-- .../ml2/drivers/mech_sriov/agent/test_pci_lib.py | 10 + .../mech_driver/test_mech_sriov_nic_switch.py | 12 +- .../unit/plugins/ml2/drivers/mechanism_logger.py | 8 + .../unit/plugins/ml2/drivers/mechanism_test.py | 6 + .../agent/openflow/native/ovs_bridge_test_base.py | 9 +- .../agent/openflow/native/test_br_int.py | 2 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 335 +++++++-- .../drivers/openvswitch/agent/test_ovs_tunnel.py | 131 +--- .../mech_driver/test_mech_openvswitch.py | 4 +- .../ovn/mech_driver/ovsdb/extensions/test_qos.py | 195 ++++- .../ovn/mech_driver/ovsdb/test_impl_idl_ovn.py | 77 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 207 ++++-- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 4 +- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 105 ++- .../drivers/ovn/mech_driver/test_mech_driver.py | 274 +++++-- .../unit/plugins/ml2/drivers/test_type_vlan.py | 80 ++- .../unit/scheduler/test_l3_agent_scheduler.py | 44 ++ .../unit/services/logapi/drivers/ovn/__init__.py | 0 .../services/logapi/drivers/ovn/test_driver.py | 323 +++++++++ .../unit/services/metering/test_metering_plugin.py | 248 ++++++- .../portforwarding/drivers/ovn/test_driver.py | 27 +- .../qos/drivers/openvswitch/test_driver.py | 2 + .../unit/services/qos/drivers/test_manager.py | 23 + .../services/revisions/test_revision_plugin.py | 13 + neutron/wsgi.py | 8 +- playbooks/legacy/neutron-ovn-grenade/post.yaml | 15 - playbooks/legacy/neutron-ovn-grenade/run.yaml | 84 --- playbooks/prepare-ovn-multinode.yaml | 7 + plugin.spec | 1 + ...ormalized-cidr-to-sg-rule-066be9154c2ed0b2.yaml | 7 + .../notes/add-sg-logging-ovn-83cc121a657a1d14.yaml | 7 + ...d-attrs-to-address-groups-f5a8565fd2ed91c6.yaml | 10 + releasenotes/notes/bug-7dc8245da8e0e571.yaml | 6 + ..._disable_traditional_dhcp-e553e2bd327c37c5.yaml | 10 + ...h-gateway-and-subnetpools-559335807639b5b6.yaml | 7 + ...son-formatted-policy-file-4be7b9394a2ae40f.yaml | 20 + ...e-keepalived_use_no_track-50d481d2809604d4.yaml | 5 + ...es-for-all-types-of-ports-39c03b3782d2753e.yaml | 6 + ...ning-in-case--ovs-offload-26193bf1638fd673.yaml | 11 + .../network-routed-subnets-cf4874d97ddacd77.yaml | 11 + ...ort-for-vlan-transparency-3ac9d965f5093a15.yaml | 4 + ...n-igmp-flood-unregistered-82aeb640f5dded84.yaml | 8 + .../ovn-mcast-flood-reports-80fb529120f2af1c.yaml | 7 + ...aces-include-network-name-e6e4e5f6ff69e7ed.yaml | 7 + ...-device-profile-extension-30ffdaf6a89b89dc.yaml | 13 + .../remove_xenapi_support-2cc2a4b9ad0ef01d.yaml | 7 + ...ace-rootwrap-with-privsep-5b85f1ba83df9554.yaml | 17 + .../secure-rbac-policies-a05bb75f2575cede.yaml | 23 + ...pports_accelerator_direct-e550369b6e4c18e1.yaml | 9 + ...s-in-security-group-rules-ce3d9864068c1131.yaml | 12 + ...pport-deleting-ovn-agents-0a5635d9078498ba.yaml | 7 + ...allocation_for_bound_port-5358620322b66ae9.yaml | 10 + .../notes/vhost-vdpa-4597a27de6232350.yaml | 14 + .../notes/vxlan-ovn-support-89f71332fa41952c.yaml | 5 + releasenotes/source/index.rst | 1 + .../locale/en_GB/LC_MESSAGES/releasenotes.po | 427 +++++++++++ releasenotes/source/victoria.rst | 6 + requirements.txt | 32 +- setup.cfg | 4 +- test-requirements.txt | 8 - tools/abandon_old_reviews.sh | 8 +- tools/migrate_names.txt | 4 +- .../roles/prepare-migration/tasks/main.yml | 10 + .../tripleo_environment/ovn_migration.sh | 22 +- .../playbooks/ovn-migration.yml | 10 + .../roles/prepare-controllers/defaults/main.yml | 2 + .../roles/prepare-controllers/tasks/main.yml | 20 + tox.ini | 29 +- vagrant/ovn/sparse/.gitignore | 1 + vagrant/ovn/sparse/Vagrantfile | 2 +- zuul.d/base.yaml | 26 +- zuul.d/grenade.yaml | 204 +++++- zuul.d/project.yaml | 96 ++- zuul.d/rally.yaml | 66 +- zuul.d/tempest-multinode.yaml | 173 ++++- zuul.d/tempest-singlenode.yaml | 295 ++++++-- zuul.d/tripleo.yaml | 43 +- 564 files changed, 20000 insertions(+), 6879 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 2d59616b67..bf410a9387 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11 +11 @@ decorator>=3.4.0 # BSD -eventlet>=0.21.0 # MIT +eventlet>=0.22.1 # MIT @@ -14 +14 @@ httplib2>=0.9.1 # MIT -requests>=2.14.2 # Apache-2.0 +requests>=2.18.0 # Apache-2.0 @@ -16 +16 @@ Jinja2>=2.10 # BSD License (3 clause) -keystonemiddleware>=4.17.0 # Apache-2.0 +keystonemiddleware>=5.1.0 # Apache-2.0 @@ -19 +19 @@ netifaces>=0.10.4 # MIT -neutron-lib>=2.6.0 # Apache-2.0 +neutron-lib>=2.10.1 # Apache-2.0 @@ -25 +25 @@ keystoneauth1>=3.14.0 # Apache-2.0 -alembic>=0.8.10 # MIT +alembic>=0.9.6 # MIT @@ -29,2 +29,2 @@ oslo.concurrency>=3.26.0 # Apache-2.0 -oslo.config>=5.2.0 # Apache-2.0 -oslo.context>=2.20.0 # Apache-2.0 +oslo.config>=8.0.0 # Apache-2.0 +oslo.context>=2.22.0 # Apache-2.0 @@ -33 +33 @@ oslo.i18n>=3.20.0 # Apache-2.0 -oslo.log>=4.2.1 # Apache-2.0 +oslo.log>=4.3.0 # Apache-2.0 @@ -36 +36 @@ oslo.middleware>=3.31.0 # Apache-2.0 -oslo.policy>=1.30.0 # Apache-2.0 +oslo.policy>=3.7.0 # Apache-2.0 @@ -41,3 +41,3 @@ oslo.serialization>=2.25.0 # Apache-2.0 -oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 -oslo.upgradecheck>=0.1.0 # Apache-2.0 -oslo.utils>=4.4.0 # Apache-2.0 +oslo.service>=1.31.0 # Apache-2.0 +oslo.upgradecheck>=1.3.0 # Apache-2.0 +oslo.utils>=4.5.0 # Apache-2.0 @@ -47,3 +47,4 @@ os-ken >= 0.3.0 # Apache-2.0 -ovs>=2.8.0 # Apache-2.0 -ovsdbapp>=1.3.0 # Apache-2.0 -psutil>=3.2.2 # BSD +ovs>=2.10.0 # Apache-2.0 +ovsdbapp>=1.7.0 # Apache-2.0 +packaging>=20.4 # Apache-2.0 +psutil>=5.3.0 # BSD @@ -56 +56,0 @@ python-designateclient>=2.7.0 # Apache-2.0 -os-xenapi>=0.3.1 # Apache-2.0 diff --git a/test-requirements.txt b/test-requirements.txt index b3ae967883..ab952537fc 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -4,2 +3,0 @@ -hacking>=3.0.1,<3.1.0 # Apache-2.0 -bandit!=1.6.0,>=1.1.0 # Apache-2.0 @@ -8 +5,0 @@ fixtures>=3.0.0 # Apache-2.0/BSD -flake8-import-order==0.12 # LGPLv3 @@ -16 +12,0 @@ stestr>=1.0.0 # Apache-2.0 -reno>=3.1.0 # Apache-2.0 @@ -18,3 +13,0 @@ ddt>=1.0.1 # MIT -astroid==2.3.3 # LGPLv2.1 -pylint==2.4.4 # GPLv2 -isort==4.3.21 # MIT @@ -23 +15,0 @@ PyMySQL>=0.7.6 # MIT License -bashate>=0.5.1 # Apache-2.0