We are tickled pink to announce the release of: neutron 26.0.2 This release is part of the epoxy release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 26.0.2 ^^^^^^ Bug Fixes * When ML2/OVN backend is used, usage of the metadata port IP address as a virtual IP address is blocked. That means that setting such IP address as allowed_address_pair for other port is not allowed and API will return 400 error in such case. For more information, see bug 2116249 (https://bugs.launchpad.net/neutron/+bug/2116249). * "ovn-db-sync" skipped chassis that were also gateways for syncing the segment host mappings but all other operations included them so add syncing them to "ovn-db-sync". For more information see bug 2116960 (https://bugs.launchpad.net/neutron/+bug/2116960). * When using the ML2/OVN mechanism driver, the QoS policies with maximum bandwidth rules only are always enforced using the internal OVN policers, regardless of the direction and network type. It is not relevant if the QoS policy has or not DSCP rules. Changes in neutron 26.0.1..26.0.2 --------------------------------- d7f1a89707 [S-RBAC] Fix policies for l3_conntrack_helpers 126a22b737 [S-RBAC] Fix policies for local_ip_association 6cd92e3cfa [OVN] ``HAChassisGroupRouterEvent`` is for router HCG only 830f03370f [S-RBAC] Fix policies for the l3_conntrack_helpers APIs 5a96fc167e [S-RBAC] Fix policies for the local_ip association APIs 1555e14677 [S-RBAC] Fix tests for port RBAC policies 77369fa1c8 [ML2/OVS] Maintain learning OF rules for GARP/ND in br-tun d84c51fd2f Decode the metadata response before sending it to the VM 4fa5543309 [OVN][FT] Check the subport Port_Binding is created before deletion d0349fe613 [OVN] Check LSP is subport before removing it from the trunk 3efe8dc995 Unify ``MetadataProxyHandlerBaseSocketServer`` class fdc376e366 Fix AttributeError accessing local compute port f277c5a90b [FT] Mark test_fip_connection_for_address_scope unstable c1dab18079 [FT] Increate the bridge creation event timeout 23ef72bc04 [FT] Randomize OVS test bridges and pre-delete them 37b417d993 Increase threshold in TestHAL3Agent fullstack test 6290746429 [OVN] Fix remote-managed binding profile validation 77f48f7d92 Delete tunnel endpoints if endpoint agent is deleted 213eedf67b Re Reduce number of routers created in test_gateway_chassis_rebalance b3bef32673 [OVN]: fix ovn-db-sync to include gateway chassis adbf0d5e2d OVS firewall: only remove security group when truly unused afc6ab714c [SGL] Use admin context to retrieve log objs c8af0f173d [doc] Document the L3 QoS support in Neutron c54641f901 [ML2/OVN] Validate allowed address pairs and distributed ports c8076daaa4 [FT] Isolate randomly failing address scope tests 6270b83167 [doc] Include the ML2/OVN minimum bandwidth support added in Zed d7e79d1337 Remove non voting arm64 jobs from stable branches 63ba2c9294 Use the OVN policer for max-bw only QoS policies 07716cd545 [doc] Change OVN agent "extension" section to "agent" 2224c9ea1e Limit trunk ACTIVE state hack to OVN 33adbc8afa [FT] Wait for the FIP Port_Binding event before checking MAC removal 79f43b229f Fix LoopingCallBase argument issue 4c780e7464 Fix bad i18n and fstrings interaction with flake8 28e0420978 Add state reporting back to metadata agents dc74c31900 Bandit: add B311 to skiplist 0121f2029a [OVN] Set OVN bridge in Chassis_Private in OVN agent b5a77aca04 Update OVN_AGENT_NEUTRON_SB_CFG_KEY when Neutron OVN Agent starts fa93909b0a Consider logging options when using OVNdbsync 31decc6401 Allow empty gateway IP in subnets from subnet pools ded8b2b037 Execute ``test_initialize_network...`` with concurrency 1 b86123a73f [FT] Improve ``test_assert_pings_during_br_phys_setup_not_lost*`` tests Diffstat (except docs and test files) ------------------------------------- .../agent/linux/openvswitch_firewall/firewall.py | 2 +- neutron/agent/metadata/agent.py | 109 +------ neutron/agent/ovn/agent/ovn_neutron_agent.py | 10 + neutron/agent/ovn/extensions/metadata.py | 4 + neutron/agent/ovn/metadata/server_socket.py | 105 +------ neutron/common/loopingcall.py | 211 +++++++++++++ neutron/common/metadata.py | 106 +++++++ neutron/common/ovn/acl.py | 5 +- neutron/common/ovn/constants.py | 2 +- neutron/common/ovn/utils.py | 4 +- neutron/conf/policies/l3_conntrack_helper.py | 16 +- neutron/conf/policies/local_ip_association.py | 12 +- neutron/db/allowedaddresspairs_db.py | 16 + neutron/ipam/requests.py | 36 ++- neutron/ipam/subnet_alloc.py | 18 +- .../openvswitch/agent/openflow/native/br_tun.py | 88 ++++-- .../openvswitch/agent/ovs_dvr_neutron_agent.py | 2 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 2 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 49 +++ .../ovn/mech_driver/ovsdb/extensions/qos.py | 23 +- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 88 ++++-- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 6 +- neutron/plugins/ml2/plugin.py | 28 ++ neutron/services/logapi/common/sg_callback.py | 5 +- neutron/services/logapi/drivers/ovn/driver.py | 74 +++++ neutron/services/trunk/drivers/ovn/trunk_driver.py | 48 +++ neutron/services/trunk/plugin.py | 10 +- .../agent/ovn/agent/test_ovn_neutron_agent.py | 12 +- .../agent/ovsdb/native/test_connection.py | 15 +- .../ovn/mech_driver/ovsdb/extensions/test_qos.py | 72 ++++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 63 ++-- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 55 +++- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 27 +- .../functional/services/ovn_l3/test_plugin.py | 2 +- .../trunk/drivers/ovn/test_trunk_driver.py | 45 ++- .../linux/openvswitch_firewall/test_firewall.py | 43 +++ .../unit/conf/policies/test_l3_conntrack_helper.py | 23 +- .../conf/policies/test_local_ip_association.py | 21 +- .../agent/openflow/native/test_br_tun.py | 158 +++++----- .../openvswitch/agent/test_ovs_neutron_agent.py | 11 +- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 50 +++- .../drivers/ovn/mech_driver/test_mech_driver.py | 41 +++ .../services/logapi/drivers/ovn/test_driver.py | 45 +++ .../trunk/drivers/ovn/test_trunk_driver.py | 69 +++++ ...-virtual-ip-by-ovn-driver-0d46fed7652fea7a.yaml | 8 + .../ovn-db-sync-gw-agent-cd049668511ac730.yaml | 7 + ...-max-bw-physical-networks-843dfce4a60fc38f.yaml | 7 + tox.ini | 6 +- zuul.d/job-templates.yaml | 8 - 64 files changed, 1953 insertions(+), 594 deletions(-)