We jubilantly announce the release of: neutron 9.4.1: OpenStack Networking This release is part of the newton stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. 9.4.1 ^^^^^ Prelude ******* IPv6 addresses in DHCP namespaces will now be (correctly) statically configured by the DHCP agent. Upgrade Notes ************* * On upgrade, IPv6 addresses in the DHCP namespaces that have been created dynmically via SLAAC will be removed, and a static IPv6 address will be added instead. Bug Fixes ********* * There is a race condition when adding ports in DHCP namespaces where an IPv6 address could be dynamically created via SLAAC from a Router Advertisement sent from the L3 agent, leading to a failure to start the DHCP agent. This bug has been fixed, but care must be taken on an upgrade dealing with any possibly stale dynamic addresses. For more information, see bug 1627902 (https://launchpad.net/bugs/1627902). Changes in neutron 9.4.0..9.4.1 ------------------------------- f11afc5 tests: don't set description in test_blank_update_clears_association 80ac267 gate_hook: Add support for neutron-full with the ovs firewall 1eb87a1 Increase subnet count for rally test b5594aa Prevent regression of IP loss on MAC update 9429b39 Functional tests: change assert to wait_until_true 798ee7f Handle CIDR IP address in allowed address pairs 76b4df2 objects: exclude revision_number from updatable fields 8f866de Fix: set IPv6 forwarding when there's an IPv6 gw c15b7aa Don't log about retrying failed devices if empty abf1b4b Revert "deepcopy binding and binding levels avoid expiration" cdc216b Log reserved cookies in cleanup_flows method 1495453 Disable RA and IPv6 forwarding on backup HA routers 364501f QoS: update the database before notifying the backend on delete 2df43d6 Use _is_dns_integration_supported for _delete_floatingip a8d9ad9 Use subqueryload in l2pop DB for binding ports 7299b2f tempest: Make _create_router_with_client obey enable_snat=False 25b1fe2 Always call create_rtr_2_fip_link 578ca25 Fix tempest router migration test when HA enabled, v2 a916fc5 Drop IPv6 Router Advertisements in OVS firewall 3c0f4b7 Don't iterate updated_rule_sg_ids or updated_sg_members 7df6028 Use e.exc_type instead of calling str on exception 7a3b336 Don't add duplicate metadata rules after router update 3f76a2f neutron-rpc-server fails with no plugins loaded 7fa7022 Fix tempest test failing with segments extension 735cd9d tempest: Obey identity_feature_enabled.api_v2_admin in a few tests 1766a8e Update minimum tox version to 2.3.2 1e3db7e Ignore gre devices in namespaces when cleaning up devices c5b6c12 test_dhcp: Use a safer host name 00ac588 Add missing unit test for segment db 7f207a7 [Pecan] Fix custom tenant_id project_id matching 7ff7ca2 Stop arping when interface gets deleted b413c39 Correctly configure IPv6 addresses on upgrades b5b68b3 Retry ebtables lock acquisition failures c95561e Update pylint disable list to pass pylint 1.7.1 checks d1af6cb Mask password when logging request body 1694294 Disable 'accept_ra' in DHCP agent namespace 90c24e9 Set HA network port to DOWN when l3 agent starts e6c1d6d l3_ha_mode: call bulk _populate_mtu_and_subnets_for_ports 48747ea api: work around Routes cutting off suffix from resource id d48e5c7 Add API test for tag cb77309 deepcopy binding and binding levels avoid expiration fe3a213 Macvtap: Check for no original port in is_live_migration f6b3d25 Update the host_id for network:router_gateway interfaces d54fc45 ovs: bubble up failures into main thread in native ofctl mode afdc38f Add IPv6 default route to DHCP namespace Diffstat (except docs and test files) ------------------------------------- .pylintrc | 16 ++ neutron/agent/l3/dvr_edge_router.py | 3 +- neutron/agent/l3/dvr_fip_ns.py | 12 +- neutron/agent/l3/dvr_local_router.py | 5 +- neutron/agent/l3/dvr_snat_ns.py | 3 +- neutron/agent/l3/ha.py | 30 ++-- neutron/agent/l3/ha_router.py | 9 +- neutron/agent/l3/namespaces.py | 3 +- neutron/agent/l3/router_info.py | 28 +++- neutron/agent/linux/dhcp.py | 79 ++++++--- neutron/agent/linux/interface.py | 67 +++++--- neutron/agent/linux/ip_lib.py | 10 +- neutron/agent/linux/iptables_firewall.py | 4 +- .../agent/linux/openvswitch_firewall/firewall.py | 14 +- neutron/agent/metadata/driver.py | 10 +- neutron/api/rpc/handlers/l3_rpc.py | 29 ++++ neutron/api/v2/base.py | 4 +- neutron/api/v2/resource.py | 16 +- neutron/cmd/netns_cleanup.py | 3 +- neutron/common/constants.py | 12 ++ neutron/db/l3_db.py | 2 +- neutron/db/l3_hamode_db.py | 8 +- neutron/objects/extensions/standardattributes.py | 3 + neutron/pecan_wsgi/hooks/policy_enforcement.py | 12 ++ neutron/plugins/ml2/drivers/l2pop/db.py | 4 + .../ml2/drivers/linuxbridge/agent/arp_protect.py | 13 ++ .../drivers/macvtap/mech_driver/mech_macvtap.py | 3 + .../openvswitch/agent/openflow/native/ofswitch.py | 2 + .../agent/openflow/native/ovs_ryuapp.py | 6 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 3 +- neutron/server/rpc_eventlet.py | 5 +- neutron/services/qos/qos_plugin.py | 2 +- .../trunk/drivers/linuxbridge/agent/driver.py | 2 +- .../functional/pecan_wsgi/test_controllers.py | 21 +++ .../api/admin/test_floating_ips_admin_actions.py | 3 + .../api/admin/test_shared_network_extension.py | 11 +- .../services/network/json/network_client.py | 41 +++++ .../linux/openvswitch_firewall/test_firewall.py | 4 +- .../macvtap/mech_driver/test_mech_macvtap.py | 3 + rally-jobs/neutron-neutron.yaml | 7 +- .../dhcp-ipv6-address-update-ff18d1eb0c196bce.yaml | 19 +++ tox.ini | 2 +- 65 files changed, 1099 insertions(+), 184 deletions(-)