We are delighted to announce the release of: neutron 24.2.0 This release is part of the caracal release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/neutron/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 24.2.0 ^^^^^^ New Features ************ * A new ML2 OVN driver configuration option "ovn_router_indirect_snat" was added. When set to True, all external gateways will enable SNAT for all nested networks that are indirectly connected to gateways (through other routers). This option mimics the *router* service plugin behavior used with ML2 Open vSwitch and some other backends. Bug Fixes ********* * For OVN DPDK ports, live migration activation strategy that expects a RARP frame sent by QEMU is no longer used. This is because for DPDK ports, QEMU does not send a RARP frame, which affects the time to recover network connectivity for DPDK ports after live migration is complete. Note that because of the change, some low number of duplicate packets from these ports may be observed during live migration. * Subnet policies have been updated to allow other users to operate on them. Network owners and readers can now retrieve the subnet and project members can now update and delete the subnet. For more information, see bug 2038646 (https://launchpad.net/bugs/2038646). Other Notes *********** * Add support for the "address-group" in the OVN mechanism driver. * When "ovn_router_indirect_snat" option is used, for some OVN releases, floating IP connectivity may be broken. See more details at: https://issues.redhat.com/browse/FDP-744 Changes in neutron 24.1.0..24.2.0 --------------------------------- 6fce8c2ad3 [OVN] Support address group for ovn driver b20dcbfcfc Fix ovn_db_sync for user defined flavor routers 79a92aa60f AddressGroup API collection should be the resource name in plural 1381d3610e [Stable Only][CI][fips jobs] Use stable constraints for tempest cecbabfb2c stable-only: Drop grenade jobs ac4b5a1111 [UT] Delete the OVN AgentCache instance in the cleanup 5dc298f93a Create random named resources in ``TestOvnSbSync`` 7f260408df [OVN] Isolate test_ovn_client* Functional Tests fa5dd4d76e If OVS Manager creation failes retry to set values dedcb6734e [OVN][FT] Use MySQL backend for ``TestNBDbMonitor*`` classes c2a51c596a [OVN] Isolate ``test_ovsdb_monitor.TestNBDbMonitor*`` FTs 78b6c60032 [OVN] Isolate ``test_maintenance.Test*Maintenance`` FTs 77d8a665ef Optionally configure IPv6 metadata address 5018cdf988 Remove the duplicated YOGA database milestone 75b90cd44e [stable-only] Fix the Neutron milestones list 6d843b6cae [OVN] Isolate test_ovn_db_sync.TestOvnNbSync.* FTs 93dd241d22 [S-RBAC] Fix policies for the SG rules API 1218e07966 Don't change original target dict by the OwnerCheck policy rule e1129dde37 Fast exit if "segments" plugin is not loaded 83f18a6390 [OVN] Do not delete twice the agent from the cache 1f3348eafa [OVN] Use the MySQL backend for the ``TestOvnNbSync`` tests (2) 78a996d5c1 [ovn][trivial] Add 'empty_string_filtering' extension to OVN 4f8444811d [QoS] QoS rule check also considers the direction 502df59a93 Catch when the process does not exist when killing it 54dfcc4ef5 Update Nova aggregates on changed host mappings 0335bc2ec8 Revert "Add router ``PUT`` external gateways actions policies" 706569c732 Add router ``PUT`` external gateways actions policies 0ca60e95e3 Revert "Track all interfaces in Keepalived" 456b7db848 OVS: Set log level to INFO for unconfigured ofport cases ecc4958eed [OVN] Set reside-on-chassis-redirect also for FLAT networks 5e1c9397cb [OVN] Add the network type to the ``Logical_Switch`` register 0b28687f0c Clean up state VRRP PID file 4df4313b7f [Functional tests] Add logging router interfaces in metadata IPv6 tests 854ade9f2c functional: Handle ovsdb monitor returning inserts in different checks 5407a30520 ovn: Disable activation-strategy=rarp for DPDK ports a5fea70714 Make sure that policy enforcer is initialized before use 746cb6f15a Allow network owner reader to get subnets 75c5ef3191 Use the correct input for OVN agent deletion 549af9e07c Revert "[HA] Do not add initial state change delay in HA router" 17541a43aa Support nested SNAT for ml2/ovn Diffstat (except docs and test files) ------------------------------------- neutron/agent/dhcp/agent.py | 4 +- neutron/agent/l3/ha.py | 20 +- neutron/agent/linux/dhcp.py | 14 +- neutron/agent/linux/external_process.py | 26 +- neutron/agent/linux/keepalived.py | 14 +- neutron/agent/ovn/metadata/agent.py | 30 ++- neutron/agent/ovsdb/native/helpers.py | 2 +- neutron/api/v2/base.py | 11 - neutron/common/ovn/acl.py | 13 + neutron/common/ovn/constants.py | 6 + neutron/common/ovn/extensions.py | 2 + neutron/common/ovn/utils.py | 10 + neutron/conf/plugins/ml2/drivers/ovn/ovn_conf.py | 10 + neutron/conf/policies/base.py | 13 + neutron/conf/policies/security_group.py | 10 +- neutron/conf/policies/subnet.py | 5 +- neutron/db/address_group_db.py | 1 + neutron/db/agentschedulers_db.py | 3 + neutron/db/migration/__init__.py | 1 + .../c181bb1d89e4_qos_minimum_packet_rate_rules.py | 5 - neutron/db/models/address_group.py | 2 +- neutron/db/ovn_revision_numbers_db.py | 2 + neutron/extensions/quotasv2.py | 1 - neutron/extensions/tagging.py | 15 -- neutron/objects/qos/qos_policy_validator.py | 5 + neutron/pecan_wsgi/hooks/policy_enforcement.py | 2 - .../drivers/openvswitch/agent/ovs_neutron_agent.py | 22 +- .../ml2/drivers/ovn/mech_driver/mech_driver.py | 35 ++- .../ml2/drivers/ovn/mech_driver/ovsdb/commands.py | 1 + .../drivers/ovn/mech_driver/ovsdb/impl_idl_ovn.py | 8 + .../drivers/ovn/mech_driver/ovsdb/maintenance.py | 66 ++++- .../drivers/ovn/mech_driver/ovsdb/ovn_client.py | 271 ++++++++++++++------- .../drivers/ovn/mech_driver/ovsdb/ovn_db_sync.py | 12 +- .../drivers/ovn/mech_driver/ovsdb/ovsdb_monitor.py | 2 +- neutron/policy.py | 21 +- neutron/privileged/agent/ovsdb/native/helpers.py | 33 ++- neutron/services/segments/db.py | 26 +- neutron/services/segments/plugin.py | 36 ++- .../functional/agent/common/test_ovsdb_monitor.py | 14 +- .../functional/agent/l3/test_metadata_proxy.py | 49 ++-- .../agent/linux/test_external_process.py | 69 ++++++ .../functional/agent/ovsdb/native/test_helpers.py | 26 ++ .../ovn/mech_driver/ovsdb/test_maintenance.py | 82 ++++++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 108 +++++++- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 84 ++++--- .../ovn/mech_driver/ovsdb/test_ovsdb_monitor.py | 6 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 60 +++-- .../unit/agent/linux/test_external_process.py | 19 +- .../unit/conf/policies/test_security_group.py | 68 +++++- .../unit/objects/qos/test_qos_policy_validator.py | 53 ++++ .../ml2/drivers/ovn/agent/test_neutron_agent.py | 2 +- .../ovn/mech_driver/ovsdb/test_maintenance.py | 65 ++++- .../ovn/mech_driver/ovsdb/test_ovn_client.py | 89 ++++++- .../ovn/mech_driver/ovsdb/test_ovn_db_sync.py | 21 +- .../drivers/ovn/mech_driver/test_mech_driver.py | 30 ++- ...ategy-rarp-for-dpdk-ports-7f9164e57c578b95.yaml | 9 + ...ver-support-address-group-fac3d96af5093a17.yaml | 4 + .../subnet_policies_updated-ec1ddc477757b441.yaml | 7 + ...pport-nested-snat-for-ovn-e4aa3b9af66c905b.yaml | 13 + tox.ini | 6 +- zuul.d/job-templates.yaml | 1 - zuul.d/project.yaml | 4 - zuul.d/tempest-singlenode.yaml | 4 + 74 files changed, 1748 insertions(+), 483 deletions(-)