We are excited to announce the release of: neutron 25.2.1 This release is part of the dalmatian release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 25.2.1 ^^^^^^ New Features ************ * Now if the configuration option "[ovn]ovn_emit_need_to_frag" is set, OVN will always set the "gateway_mtu" option in the gateway "Logical_Router_Port". The value defined will be the lowest MTU of all networks connected to this router. Bug Fixes ********* * When ML2/OVN backend is used, usage of the metadata port IP address as a virtual IP address is blocked. That means that setting such IP address as allowed_address_pair for other port is not allowed and API will return 400 error in such case. For more information, see bug 2116249 (https://bugs.launchpad.net/neutron/+bug/2116249). * "ovn-db-sync" skipped chassis that were also gateways for syncing the segment host mappings but all other operations included them so add syncing them to "ovn-db-sync". For more information see bug 2116960 (https://bugs.launchpad.net/neutron/+bug/2116960). Changes in neutron 25.2.0..25.2.1 --------------------------------- 513680616f [S-RBAC] Fix policies for l3_conntrack_helpers d9ac18257f [S-RBAC] Fix policies for local_ip_association 9493185ec5 [OVN] ``HAChassisGroupRouterEvent`` is for router HCG only 4136075226 [S-RBAC] Fix policies for the l3_conntrack_helpers APIs 82699960ba [S-RBAC] Fix policies for the local_ip association APIs 8872672e7f [S-RBAC] Fix tests for port RBAC policies 197c920cdb [OVN] Set always the GW LRP "gateway_mtu" option fcaae5823b [ML2/OVS] Maintain learning OF rules for GARP/ND in br-tun 41b9dfa5d1 [OVN][FT] Check the subport Port_Binding is created before deletion a845b98a6d [OVN] Check LSP is subport before removing it from the trunk 47cab6f186 [FT] Mark test_fip_connection_for_address_scope unstable 75ffc96936 [FT] Increate the bridge creation event timeout 29f0431567 [FT] Randomize OVS test bridges and pre-delete them 958352ba8d Increase threshold in TestHAL3Agent fullstack test 7983fb314e [OVN] Fix remote-managed binding profile validation b3bd1fd42f Re Reduce number of routers created in test_gateway_chassis_rebalance b8d89f7f86 [OVN]: fix ovn-db-sync to include gateway chassis 5787434fb4 OVS firewall: only remove security group when truly unused 06770df2d3 [SGL] Use admin context to retrieve log objs dbdc27fb93 [ML2/OVN] Validate allowed address pairs and distributed ports 5caca0dab0 [FT] Isolate randomly failing address scope tests 22ef8681b7 Remove non voting arm64 jobs from stable branches 2416eaa71d [doc] Change OVN agent "extension" section to "agent" fd9d90706d Limit trunk ACTIVE state hack to OVN 2ce5e3b277 Bandit: add B311 to skiplist fda4773206 Consider logging options when using OVNdbsync 71cf3f22cb Allow empty gateway IP in subnets from subnet pools 2ac9bc4fe7 [FT] Improve ``test_assert_pings_during_br_phys_setup_not_lost*`` tests a703dececb Fix nova notification on port unplug c12d12b670 Add provider network resources filter for "network" 8463c6ec84 [OVN] OVN agent retrieval filter matching improvement a710c78e33 Allow to delete singleton instances 24d3c4ad03 [FT] Match the correct event in ``test_subport_delete`` Diffstat (except docs and test files) ------------------------------------- .../agent/linux/openvswitch_firewall/firewall.py | 2 +- neutron/common/ovn/acl.py | 5 +- neutron/common/ovn/constants.py | 7 +- neutron/common/ovn/utils.py | 4 +- neutron/common/utils.py | 19 +- neutron/conf/policies/l3_conntrack_helper.py | 16 +- neutron/conf/policies/local_ip_association.py | 12 +- neutron/db/allowedaddresspairs_db.py | 16 + neutron/db/db_base_plugin_v2.py | 35 +++ neutron/ipam/requests.py | 36 ++- neutron/ipam/subnet_alloc.py | 18 +- .../openvswitch/agent/openflow/native/br_tun.py | 88 ++++-- .../plugins/ml2/drivers/ovn/agent/neutron_agent.py | 23 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 55 +++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 26 +- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 88 ++++-- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 6 +- neutron/plugins/ml2/managers.py | 16 - neutron/plugins/ml2/plugin.py | 9 +- neutron/services/logapi/common/sg_callback.py | 5 +- neutron/services/logapi/drivers/ovn/driver.py | 74 +++++ neutron/services/trunk/drivers/ovn/trunk_driver.py | 48 +++ neutron/services/trunk/plugin.py | 10 +- .../agent/ovsdb/native/test_connection.py | 15 +- .../mech_driver/ovsdb/extensions/test_placement.py | 11 +- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 74 ++++- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 55 +++- .../functional/services/ovn_l3/test_plugin.py | 2 +- .../trunk/drivers/ovn/test_trunk_driver.py | 54 +++- .../linux/openvswitch_firewall/test_firewall.py | 43 +++ .../unit/conf/policies/test_l3_conntrack_helper.py | 23 +- .../conf/policies/test_local_ip_association.py | 21 +- .../agent/openflow/native/test_br_tun.py | 154 +++++----- .../ml2/drivers/ovn/agent/test_neutron_agent.py | 129 +++++++- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 50 +++- .../drivers/ovn/mech_driver/test_mech_driver.py | 57 +++- .../services/logapi/drivers/ovn/test_driver.py | 45 +++ .../trunk/drivers/ovn/test_trunk_driver.py | 69 +++++ ...-virtual-ip-by-ovn-driver-0d46fed7652fea7a.yaml | 8 + .../ovn-db-sync-gw-agent-cd049668511ac730.yaml | 7 + .../ovn_router_gateway_mtu-ac69e07b30093193.yaml | 7 + tox.ini | 6 +- zuul.d/job-templates.yaml | 8 - 58 files changed, 1701 insertions(+), 458 deletions(-)