We are glad to announce the release of: neutron 10.0.5: OpenStack Networking This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. 10.0.5 ^^^^^^ New Features ************ * L2 agents based on "ML2" "_common_agent" have now the L2 extension API available. This API can be used by L2 extension drivers to request resources from the L2 agent. It is used, for example, to pass an instance of the "IptablesManager" to the "Linuxbridge" L2 agent "QoS extension driver". Bug Fixes ********* * Fixes bug 1736674, security group rules are now properly applied by "Linuxbridge L2 agent" with "QoS extension driver" enabled. * Adding security group rules by protocol number is documented, but somehow was broken without being noticed in one of the last couple of releases. This is now fixed. For more information see bug 1716045 (https://bugs.launchpad.net/neutron/+bug/1716045). Changes in neutron 10.0.4..10.0.5 --------------------------------- f5e7420 DVR: verify subnet has gateway_ip before installing IPv4 flow 215ad4a Stop running grenade in Ocata 7c5a563 Fixing the filter in get MTU by network list query. 23f23d9 Zuul: Remove project name ee25995 Pass parameters when create eventlet.wsgi server 9376122 [Fullstack] Change how DSCP marking packets are tested 5ba8e46 [Fullstack] Shutdown tcpdump process gracefully 7a97ad3 More efficiently clean up OVS ports 2b22032 Fix callers of get_devices_with_ip() to pass addresses d786350 Fix _port_arg for security rules with icmp/ipv6-icmp aliases adf3ef0 l3_ha: only pass host into update_port when updating router port bindings a11d4cd Removed neutron-tempest-full 2d6c7e3 devstack: switch to new NEUTRON_* variables 3fff15b devstack: added new neutron-* aliases for services 521bdc7 Fix error when using protocol number in security groups 8442a14 Support protocol numbers in security group API df8412b Use same instance of iptables_manager in L2 agent and extensions 295c700 Moving legacy check and gate jobs 2a4b74a Fix DNS connectivity issues with DVR+HA routers and DHCP-HA 385ac55 Call update_all_ha_network_port_statuses on agent start c3fa8f0 Fix HA router initialization exception 29aafaf Don't create new QoS policy during update operation 319ac92 Don't wait on TRY_AGAIN when calling commit_block() 56a9522 Move check_ha_state_for_router() into notification code dd9deaf Fix port deletion when dns_integration is enabled 274907d Fix the wrong usage of new style class in metering ea3c86e Imported Translations from Zanata c6044fb Change OVS agent to update skipped port status to DOWN 4ed622e iptables: don't log lock error if we haven't passed -w d6645ad Notify port_update to agent for status change fc9c146 DVR: Fix router_update failure when agent restarts dd153c3 ovsfw: fix allowed_address_pairs MAC issue 68f9129 Fix race between create subnet and port requests d5cde63 rally: switch to new format for context name 0417c51 Avoid redundant HA port creation during migration 8b116af Fixes import_modules_recursively for Windows Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 196 +++++++++++++++++++++ devstack/lib/l2_agent | 2 +- devstack/lib/l2_agent_sriovnicswitch | 2 +- devstack/lib/macvtap_agent | 2 +- devstack/lib/qos | 2 +- devstack/plugin.sh | 31 ++-- neutron/agent/l3/agent.py | 37 ++-- neutron/agent/l3/dvr_fip_ns.py | 3 +- neutron/agent/l3/ha_router.py | 18 +- neutron/agent/l3/router_info.py | 1 + neutron/agent/l3/router_processing_queue.py | 7 +- neutron/agent/linux/ip_lib.py | 14 +- neutron/agent/linux/iptables_firewall.py | 23 +-- neutron/agent/linux/iptables_manager.py | 103 ++++++----- .../agent/linux/openvswitch_firewall/firewall.py | 72 ++++---- neutron/agent/linux/openvswitch_firewall/rules.py | 2 - neutron/agent/linux/utils.py | 3 +- neutron/agent/ovsdb/impl_idl.py | 33 +++- neutron/api/rpc/handlers/l3_rpc.py | 39 ++-- neutron/cmd/ovs_cleanup.py | 35 ++-- neutron/common/constants.py | 76 ++++++++ neutron/common/utils.py | 15 +- neutron/db/ipam_pluggable_backend.py | 14 +- neutron/db/l3_db.py | 2 +- neutron/db/l3_hamode_db.py | 19 +- neutron/locale/ko_KR/LC_MESSAGES/neutron.po | 39 +++- neutron/objects/common_types.py | 2 +- .../ml2/drivers/agent/_agent_manager_base.py | 7 + neutron/plugins/ml2/drivers/agent/_common_agent.py | 3 +- .../agent/extension_drivers/qos_driver.py | 20 ++- .../agent/linuxbridge_agent_extension_api.py | 32 ++++ .../linuxbridge/agent/linuxbridge_neutron_agent.py | 29 ++- .../drivers/macvtap/agent/macvtap_neutron_agent.py | 3 + .../openvswitch/agent/ovs_dvr_neutron_agent.py | 11 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 18 ++ neutron/plugins/ml2/extensions/dns_integration.py | 2 +- neutron/plugins/ml2/plugin.py | 2 + neutron/scheduler/l3_agent_scheduler.py | 5 + .../externaldns/drivers/designate/driver.py | 2 +- neutron/services/metering/agents/metering_agent.py | 2 +- neutron/services/qos/qos_plugin.py | 2 +- .../functional/agent/l3/test_legacy_router.py | 18 +- .../unit/agent/l3/test_router_processing_queue.py | 10 ++ .../linux/openvswitch_firewall/test_firewall.py | 5 +- .../agent/linux/openvswitch_firewall/test_rules.py | 5 - .../unit/agent/linux/test_iptables_firewall.py | 117 ++++++++++++ .../unit/agent/linux/test_iptables_manager.py | 59 ++++--- .../agent/extension_drivers/test_qos_driver.py | 37 ++++ .../agent/test_linuxbridge_agent_extension_api.py | 33 ++++ .../openvswitch/agent/test_ovs_neutron_agent.py | 8 +- .../plugins/ml2/extensions/test_dns_integration.py | 8 +- .../unit/scheduler/test_l3_agent_scheduler.py | 29 +++ .../metering/agents/test_metering_agent.py | 4 + neutron/wsgi.py | 1 + playbooks/legacy/neutron-fullstack/post.yaml | 80 +++++++++ playbooks/legacy/neutron-fullstack/run.yaml | 54 ++++++ playbooks/legacy/neutron-functional/post.yaml | 80 +++++++++ playbooks/legacy/neutron-functional/run.yaml | 54 ++++++ playbooks/legacy/neutron-rally-neutron/post.yaml | 41 +++++ playbooks/legacy/neutron-rally-neutron/run.yaml | 175 ++++++++++++++++++ .../post.yaml | 15 ++ .../neutron-tempest-dvr-ha-multinode-full/run.yaml | 63 +++++++ playbooks/legacy/neutron-tempest-dvr/post.yaml | 15 ++ playbooks/legacy/neutron-tempest-dvr/run.yaml | 44 +++++ .../legacy/neutron-tempest-linuxbridge/post.yaml | 15 ++ .../legacy/neutron-tempest-linuxbridge/run.yaml | 57 ++++++ .../neutron-tempest-multinode-full/post.yaml | 15 ++ .../legacy/neutron-tempest-multinode-full/run.yaml | 64 +++++++ playbooks/legacy/neutron-tempest-ovsfw/post.yaml | 15 ++ playbooks/legacy/neutron-tempest-ovsfw/run.yaml | 48 +++++ rally-jobs/plugins/trunk_scenario.py | 2 +- ...ommon-agent-extension-api-3fd06ff67329200a.yaml | 12 ++ ...group-protocol-by-numbers-48afb97ede961716.yaml | 8 + 97 files changed, 2214 insertions(+), 361 deletions(-)