We are tickled pink to announce the release of: neutron 21.2.1: OpenStack Networking This release is part of the zed stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 21.2.1 ^^^^^^ New Features ************ * Remote address group support was added to the iptables-based firewall drivers (IptablesFirewallDriver and OVSHybridIptablesFirewallDriver), Previously it was only available in the OVSFirewallDriver. For more information, see bug 2058138 (https://bugs.launchpad.net/neutron/+bug/2058138). Known Issues ************ * The fix of bug 2048785 (https://bugs.launchpad.net/neutron/+bug/2048785) only fixes newly created trunk parent ports. If the fix of already existing trunks is needed, then either delete and re-create the affected trunks or set tpt ports' vlan_mode and tag manually: "ovs-vsctl set Port tpt-... vlan_mode=access tag=0" Bug Fixes ********* * The config option "agent_down_time" is now limited to a maximum value of *2147483*, as neutron-server will fail to start if it is configured higher. See bug 2028724 (https://bugs.launchpad.net/neutron/+bug/2028724) for more information. * [bug 2036423 (https://bugs.launchpad.net/neutron/+bug/2036423)] Now it is not possible to delete a subnet gateway IP if that subnet has a router interface; the subnet gateway IP modification was already forbidden. * When synchronizing the OVN databases, either when running the migration command or during startup, the code responsible for synchronization will only clean up segment-to-host mappings for hosts with agent_type "OVN Controller agent". Before, the synchronization would clean up (delete) segment-to-host mappings for non-OVN hosts. Fixes bug: 2040172 (https://bugs.launchpad.net/neutron/+bug/2040172). Other Notes *********** * Added extension "subnetpool-prefix-ops" to the ML2/OVN mechanism driver. Changes in neutron 21.2.0..21.2.1 --------------------------------- 4fc3c71546 Fix KeyError failure in _sync_subnet_dhcp_options() de9e3e8c9b Fix TestOVNMechanismDriver ipv6 tests ca25eb96f1 Enhance IptablesFirewallDriver with remote address groups 386ebde547 Use the system-dependent string for IP protocol 4 29d28152ac Remove duplicate rows in MySQL query output 38ac22354d fix netns deletion of broken namespaces cf21a4d979 [OVN] Set MTU of the VETH interfaces between OVS and metadata 7c7b020abe Fix iptables mapping of 'ipip' protocol d253552ad2 [stable-only][OVN] Set VETH interface MAC address before up b7e219391d Stable-Only: Temporary stop running grenade jobs on Zed aedb872e4f Ensure that haproxy spawned by the metadata agents is active 85debddc1c Remove TripleO jobs 32d7efbfb0 Retry ``set|get_link_attribute(s)`` if the interface is not present b9e3818b6e [OVN] Add ``subnetpool-prefix-ops`` extension to ML2/OVN mech driver 1f5ce18a14 [OVN][FT] Retry in case of timeout when executing "ovsdb-client". c47c600b6a [Fullstack] Consolidate segmentation_id update tests into single test 5250b62a85 [Fullstack] Remove SecurityGroupRulesTest.test_normalized_cidr_in_rule test af83df07f4 [Fullstack] Remove test_port_shut_down module 69bda7333f [Fullstack] Remove unnecessary tests 2de488ab11 Set trunk parent port as access port in ovs to avoid loop 0396b33bc4 Revert "Add sleep before checking if ovs port is in the namespace" 905e2e430a Forbid the subnet gateway IP deletion if a router interface is attached 8f15164068 Register Chassis_Private table in BaseOvnSbIdl 222c997022 Add sleep before checking if ovs port is in the namespace 2c8076dd28 Add max limit to agent_down_time 5dcad1d7c7 Don't set port capabilities for OVS HW offloading bbe235779b Improve the SG RPC callback ``security_group_info_for_ports`` 602bb1a325 [OVN][FT] Make explicit the "publish" call check in "test_port_forwarding" 4eb234a447 [OVN] DB sync host/physnet - filter on agent_type 4698dd899f Metadata: handle process exceptions 74a3262a8a Correctly validate subnet arguments when using a subnetpool de5b7244ee [Fullstack] Double check that agent is dead when it should be dead 69e0dacd05 [DHCP agent] Fetch OVN Metadata port from plugin 9d22276013 get_hosts_mapped_with_segments add filter agt_type cbebc3dd8a [DHCP agent] Fix route to OVN metadata port for non-isolated networks b2100c6a29 docs: update default value of metadata workers for ml2/ovn 61ad633a33 Catch non-existent entry failures better in ip_lib Diffstat (except docs and test files) ------------------------------------- .../contributor/internals/openvswitch_agent.rst | 34 +-- neutron/agent/linux/dhcp.py | 5 +- neutron/agent/linux/ip_lib.py | 17 +- neutron/agent/linux/iptables_firewall.py | 20 +- neutron/agent/metadata/driver.py | 8 +- neutron/agent/ovn/metadata/agent.py | 48 ++-- neutron/agent/ovn/metadata/driver.py | 8 +- neutron/api/rpc/handlers/securitygroups_rpc.py | 10 +- neutron/common/ovn/extensions.py | 2 + neutron/conf/agent/database/agents_db.py | 5 + neutron/conf/agent/metadata/config.py | 2 +- neutron/db/db_base_plugin_v2.py | 54 ++-- neutron/db/securitygroups_rpc_base.py | 25 +- neutron/objects/router.py | 19 +- neutron/objects/securitygroup.py | 7 + .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 11 +- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 19 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 2 + neutron/privileged/agent/linux/ip_lib.py | 32 ++- neutron/services/segments/db.py | 37 ++- .../drivers/openvswitch/agent/trunk_manager.py | 12 +- .../functional/agent/linux/test_bridge_lib.py | 7 + .../ovn/mech_driver/ovsdb/test_maintenance.py | 8 +- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 50 ++++ .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 9 +- .../privileged/agent/linux/test_ip_lib.py | 78 +++-- .../openvswitch/agent/test_trunk_manager.py | 8 + .../unit/agent/linux/test_iptables_firewall.py | 58 ++++ .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 15 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 8 +- .../unit/privileged/agent/linux/test_ip_lib.py | 11 + .../agent_down_time_max-af3b62763aaa2fe5.yaml | 6 + ...85-trunk-parent-vlan-mode-9280ff2d45403bde.yaml | 8 + ...deletion-router-interface-072a18373f920ed9.yaml | 6 + ...ort-remote-address-groups-89da589aad3c01d3.yaml | 8 + ...ion-subnetpool-prefix-ops-9b2e4dbdcc174ede.yaml | 3 + ...physnet-filter-agent-type-9e22942bed304807.yaml | 10 + zuul.d/job-templates.yaml | 22 -- zuul.d/project.yaml | 13 +- zuul.d/tripleo.yaml | 79 ------ 63 files changed, 954 insertions(+), 1013 deletions(-)