We exuberantly announce the release of: neutron 12.0.4: OpenStack Networking This release is part of the queens stable release series. Download the package from: https://tarballs.openstack.org/neutron/ For more details, please see below. 12.0.4 ^^^^^^ New Features ************ * A new config option "bridge_mac_table_size" has been added for Neutron OVS agent. This value will be set on every Open vSwitch bridge managed by the openvswitch-neutron-agent in "other_config :mac-table-size" column in ovsdb. Default value for this new option is set to 50000 and it should be enough for most systems. More details about this option can be found in Open vSwitch documentation (http://www.openvswitch.org/support/dist-docs/ovs- vswitchd.conf.db.5.html) For more information see bug 1775797 (https://bugs.launchpad.net/neutron/+bug/1775797). Other Notes *********** * The metering agent iptables driver can now load its interface driver by using a stevedore alias in the "metering_agent.ini" file. For example, "interface_driver = openvswitch" instead of "interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver" Changes in neutron 12.0.3..12.0.4 --------------------------------- 02e9a3c ovs fw: apply the NORMAL action on egress traffic in a single table c0d57c9 DVR: Add IPv6 csnat port address correctly 6465226 Fix lost connection when create security group log d1943af Fix no packet log data when debug is set False in configuration d5fd35d Reduce qos rpc times on the ovs-agent side 6e13c37 import zuul job settings from project-config ca3bfea Fix iptables metering driver entrypoint 2652100 Trivial: avoid KeyError while processing ports 2315420 Remove fdb entries for ha router interfaces when going DOWN b600368 get_subnet_for_dvr returns SNAT mac instead of distributed gateway in subnet_info 1594905 cap bandit in test-requirements.txt 75b86f8 Update metering driver to load interface driver c4d1dfd Config privsep in the metering agent c18e128 Fix no ACCEPT event can get for security group logging 2051873 Make dvr router port creation retriable e211cc2 Update install doc for ubuntu c79841c [QoS] Clear rate limits when default null values are used d909b73 Use oslo_db.sqlalchemy.test_fixtures c7e80a6 Fix DHCP isolated subnets with routed networks 8287d7f Disallow router interface out of subnet IP range 9bc0541 Skip MTU check during deletion of Networks e5e82f4 Fix fwaas v1 configuration doc 55d90d9 Add list of all working DSCP marks 1511c5f Reduce IP address collision during port creating 9235937 use callback payloads for PRECOMMIT_UPDATE events 63534cd [Fullstack] HA L3 agent restart only standby agents f001b27 Fix UT BridgeLibTest when IPv6 is disabled c5e8d77 Make L3 IP tc filter rate limit more accurate f384828 Mark unit test test_get_objects_queries_constant as unstable e5f292a DVR: Self recover from the loss of 'fg' ports in FIP Namespace 09a117b DVR: FIP gateway port is tagged as DEAD port by OVS with external-bridge 593bce9 Fix an attribute error on listing AZs with filters dfebab1 Configure privsep helper in neutron-netns-cleanup 2689444 Use rally 0.12.1 release for stable/queens branch. 11e604a Dropping radvd process privileges cd67ac6 Mark test_ha_router_restart_agents_no_packet_lost as unstable 99ed1b7 Revert "Ensure _get_changed_synthetic_fields() return updatable fields" 65fcbc2 DVR: FloatingIP create throws an error if no l3 agent e3be3f9 [OVS] Add mac-table-size to be set on each ovs bridge 1f76c95 Windows: fix exec calls b3e4741 Don't set administratively disabled ports as ACTIVE e3d11d4 Add/rm centralized fips for DVR+HA from standby node 2ae4d6c [Fullstack] Wait for SG to be applied by L2 agent 8cf3905 ovs: removed sinkhole RPC target for old topics 8f35286 Revert "DVR: Fix allowed_address_pair IP, ARP table update by neutron agent" 663a792 Fix DVR scheduling checks wrong profile for host 5c09d4f Use neutron-tempest-plugin-jobs-queens job template 92a103b [Fullstack] Add block test until IPs will be really configured 75d08e2 Ensure _get_changed_synthetic_fields() return updatable fields 143d6ce Adds egress and ingress forward rules for trusted ports Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 120 +++- .../contributor/internals/openvswitch_firewall.rst | 111 ++-- .../install/controller-install-option1-ubuntu.rst | 4 +- .../install/controller-install-option2-ubuntu.rst | 4 +- etc/neutron/rootwrap.d/l3.filters | 4 +- neutron/agent/common/ovs_lib.py | 5 + neutron/agent/l2/extensions/qos.py | 3 +- neutron/agent/l3/dvr.py | 4 +- neutron/agent/l3/dvr_edge_ha_router.py | 10 +- neutron/agent/l3/dvr_fip_ns.py | 10 +- neutron/agent/l3/dvr_local_router.py | 18 +- neutron/agent/l3/extensions/fip_qos.py | 9 +- neutron/agent/linux/dhcp.py | 9 +- neutron/agent/linux/iptables_firewall.py | 40 +- neutron/agent/linux/l3_tc_lib.py | 2 +- .../agent/linux/openvswitch_firewall/firewall.py | 35 +- neutron/agent/linux/openvswitch_firewall/rules.py | 13 +- neutron/agent/linux/ra.py | 9 +- neutron/agent/windows/utils.py | 39 +- neutron/agent/windows/winutils.py | 606 --------------------- neutron/cmd/netns_cleanup.py | 1 + neutron/common/eventlet_utils.py | 8 +- neutron/conf/agent/ovs_conf.py | 7 + neutron/db/agents_db.py | 2 +- neutron/db/l3_db.py | 65 ++- neutron/db/l3_dvr_db.py | 88 ++- neutron/db/l3_dvrscheduler_db.py | 9 +- neutron/db/l3_hamode_db.py | 33 +- neutron/db/securitygroups_db.py | 13 +- neutron/ipam/drivers/neutrondb_ipam/driver.py | 5 +- neutron/plugins/ml2/drivers/l2pop/mech_driver.py | 26 +- .../drivers/openvswitch/agent/common/constants.py | 2 + .../openvswitch/agent/ovs_dvr_neutron_agent.py | 2 +- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 28 +- neutron/plugins/ml2/plugin.py | 30 +- neutron/privileged/agent/linux/ip_lib.py | 3 +- neutron/services/auto_allocate/db.py | 67 ++- .../service_providers/driver_controller.py | 40 +- .../logapi/drivers/openvswitch/ovs_firewall_log.py | 24 +- neutron/services/metering/agents/metering_agent.py | 1 + .../metering/drivers/iptables/iptables_driver.py | 9 +- neutron/services/qos/qos_plugin.py | 19 +- neutron/services/trunk/callbacks.py | 1 + neutron/services/trunk/plugin.py | 15 +- .../l3_router/test_l3_dvr_router_plugin.py | 50 +- .../functional/services/logapi/test_logging.py | 24 +- .../agent/linux/openvswitch_firewall/test_rules.py | 13 +- .../unit/agent/linux/test_iptables_firewall.py | 441 ++++++++------- .../unit/extensions/test_availability_zone.py | 5 + .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 40 ++ .../openvswitch/agent/test_ovs_neutron_agent.py | 37 +- .../unit/scheduler/test_l3_agent_scheduler.py | 51 +- .../service_providers/test_driver_controller.py | 8 +- .../drivers/openvswitch/test_ovs_firewall_log.py | 11 +- ...ver-load-interface-driver-ca397f1db40ec643.yaml | 7 + ...-table-size-config-option-d255d5208650f34b.yaml | 14 + setup.cfg | 2 +- test-requirements.txt | 2 +- 88 files changed, 1617 insertions(+), 1335 deletions(-) Requirements updates -------------------- diff --git a/test-requirements.txt b/test-requirements.txt index 5b087c9..9a326f2 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking!=0.13.0,<0.14,>=0.12.0 # Apache-2.0 -bandit>=1.1.0 # Apache-2.0 +bandit>=1.1.0,<1.5.0 # Apache-2.0