We exuberantly announce the release of: neutron-fwaas 14.0.0: OpenStack Networking FWaaS This release is part of the stein release series. The source is available from: https://git.openstack.org/cgit/openstack/neutron-fwaas Download the package from: https://tarballs.openstack.org/neutron-fwaas/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. Changes in neutron-fwaas 13.0.0.0rc1..14.0.0 -------------------------------------------- 4a8687e3f Add new upgrade check cc2e0a3f0 Update lower-constraints to be same as in Neutron 2860abca2 Change openstack-dev to openstack-discuss 9844e5e09 Fix firewall rule 'shared' check in updating fwp 68e25e05c fix tox python3 overrides ea08d6fd5 add python 3.7 unit test job 5694e2dba Add service checks before trying to configure it a48e1316f Remove midonet job 36ca752e8 Fix gate issues on master e7f2f781e FWaaS v1->v2 DB migration 0e968fa0c Removing FWaaS v1 source code 55874d06b Change netns tests with oslo.privsep to check netns links f1d40107e Define types for C calls in netlink_lib 9f8709b39 doc: Add policy reference 328874382 Convert policy.json into policy-in-code 781a06c98 Replace ryu with os_ken 2a7994851 Move port validation support into the driver fa48d16d6 ICMPv6 is not an available protocol when creating firewall rule 778ddb1ee Switch to tempest.common.utils.requires_ext f32927857 use neutron-lib for _model_query 1db799a09 Correct package name libnetfilter-log on CentOS c0d28ecc2 Add python 3.6 unit test job 68698cbe9 [Trivial Fix] modify spelling error of "resource" 2b685096d Update tox minversion to 2.0 d86921845 Increment versioning with pbr instruction 4dbb3a352 Adding UTs for firewall driver_api 48b82f7c9 Subscribe Neutron port update events for FWG Logging handling f8e4a193e Fix associating firewall group with DVR/L3HA port 314e1de7f opt in for neutron-lib consumption patches 55d9529c3 Add functional test for FWaaS L3 logging driver 3f6d79652 use common rpc and exceptions from neutron-lib fb14c43da add local tox targets for pep8 and py3 a968d8225 remove external_network_bridge option 956190357 Use templates for cover and lower-constraints 4d058ab38 add python 3.6 unit test job 536de58f3 switch documentation job to new PTI 9b4bb440f import zuul job settings from project-config 5519d771e Switch to neutron-lib version of fake_notifier 6ccdd943a Remove remaining NFLOG rules on deleting log resource 93c71ce98 Should forward only first accepted packet to table 91 and 92 9f6150a58 Update neutron import 14822da40 Add dependency for generating reno e63882d43 Load neutron_fwaas.conf with '--config-file' for neutron-server 55254d4bd Update reno for stable/rocky Diffstat (except docs and test files) ------------------------------------- .gitignore | 1 + .zuul.yaml | 56 +- devstack/README.rst | 28 +- devstack/plugin.sh | 81 +- devstack/settings | 2 - etc/neutron/policy.d/neutron-fwaas.json | 52 - etc/oslo-policy-generator/policy.conf | 3 + lower-constraints.txt | 34 +- neutron_fwaas/cmd/__init__.py | 0 neutron_fwaas/cmd/upgrade_checks/__init__.py | 0 neutron_fwaas/cmd/upgrade_checks/checks.py | 40 + neutron_fwaas/cmd/v1_to_v2_db_migration.py | 136 ++ neutron_fwaas/common/exceptions.py | 4 +- neutron_fwaas/db/firewall/firewall_db.py | 588 +------- .../db/firewall/firewall_router_insertion_db.py | 98 -- neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 10 +- neutron_fwaas/db/models/head.py | 2 - neutron_fwaas/policies/base.py | 17 + neutron_fwaas/policies/firewall_group.py | 113 ++ neutron_fwaas/policies/firewall_policy.py | 113 ++ neutron_fwaas/policies/firewall_rule.py | 136 ++ .../privileged/netfilter_log/libnetfilter_log.py | 14 +- neutron_fwaas/privileged/netlink_lib.py | 37 +- neutron_fwaas/services/firewall/fwaas_plugin.py | 444 ------ neutron_fwaas/services/firewall/fwaas_plugin_v2.py | 44 +- .../firewall/service_drivers/agents/agents.py | 23 +- .../agents/drivers/linux/iptables_fwaas.py | 431 ------ .../agents/drivers/linux/iptables_fwaas_v2.py | 40 +- .../linux/l2/openvswitch_firewall/firewall.py | 32 +- .../drivers/linux/l2/openvswitch_firewall/rules.py | 11 +- .../service_drivers/agents/firewall_agent_api.py | 2 +- .../firewall/service_drivers/agents/l2/fwaas_v2.py | 2 +- .../agents/l3reference/firewall_l3_agent.py | 428 ------ .../agents/l3reference/firewall_l3_agent_v2.py | 2 +- .../firewall/service_drivers/driver_api.py | 6 + .../logapi/agents/drivers/iptables/driver.py | 4 + .../services/logapi/agents/drivers/iptables/log.py | 32 +- neutron_fwaas/services/logapi/common/log_db_api.py | 19 +- .../services/logapi/common/port_callback.py | 40 + .../functional/services/logapi/agents/__init__.py | 0 .../services/logapi/agents/drivers/__init__.py | 0 .../logapi/agents/drivers/iptables/__init__.py | 0 .../logapi/agents/drivers/iptables/test_log.py | 567 ++++++++ .../unit/db/firewall/v2/test_firewall_db_v2.py | 48 +- .../linux/l2/openvswitch_firewall/test_rules.py | 7 +- .../agents/drivers/linux/test_iptables_fwaas.py | 412 ------ .../agents/drivers/linux/test_iptables_fwaas_v2.py | 83 ++ .../service_drivers/agents/l2/test_fwaas_v2.py | 2 +- .../agents/l3reference/test_firewall_l3_agent.py | 361 ----- .../firewall/service_drivers/agents/test_agents.py | 4 +- .../firewall/service_drivers/test_driver_api.py | 291 ++++ .../unit/services/firewall/test_fwaas_plugin.py | 786 ---------- .../unit/services/firewall/test_fwaas_plugin_v2.py | 55 +- .../logapi/agents/drivers/iptables/test_log.py | 35 +- .../unit/services/logapi/agents/l3/test_fwg_log.py | 2 +- .../unit/services/logapi/common/test_log_db_api.py | 38 +- .../services/logapi/common/test_port_callback.py | 203 +++ .../notes/remove_fwaas_v1-15c6e19484f46d1b.yaml | 8 + releasenotes/source/index.rst | 1 + releasenotes/source/rocky.rst | 6 + requirements.txt | 19 +- setup.cfg | 17 +- test-requirements.txt | 4 +- tox.ini | 43 +- 90 files changed, 2422 insertions(+), 6478 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index f4bd3c06a..0d9e06614 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr!=2.1.0,>=2.0.0 # Apache-2.0 +pbr>=4.0.0 # Apache-2.0 @@ -8 +8 @@ netaddr>=0.7.18 # BSD -SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT +SQLAlchemy>=1.2.0 # MIT @@ -11 +11,2 @@ six>=1.10.0 # MIT -neutron-lib>=1.18.0 # Apache-2.0 +neutron-lib>=1.25.0 # Apache-2.0 +os-ken >= 0.3.0 # Apache-2.0 @@ -13 +14 @@ oslo.config>=5.2.0 # Apache-2.0 -oslo.db>=4.27.0 # Apache-2.0 +oslo.db>=4.37.0 # Apache-2.0 @@ -18,2 +19,2 @@ oslo.utils>=3.33.0 # Apache-2.0 -oslo.privsep>=1.23.0 # Apache-2.0 -pyroute2>=0.4.21;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) +oslo.privsep>=1.32.0 # Apache-2.0 +pyroute2>=0.5.3;sys_platform!='win32' # Apache-2.0 (+ dual licensed GPL2) @@ -21,0 +23,6 @@ pyzmq>=14.3.1 # LGPL+BSD + +# The comment below indicates this project repo is current with neutron-lib +# and should receive neutron-lib consumption patches as they are released +# in neutron-lib. It also implies the project will stay current with TC +# and infra initiatives ensuring consumption patches can land. +# neutron-lib-current diff --git a/test-requirements.txt b/test-requirements.txt index ff121d7b7..82670ae2d 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -17 +17 @@ testscenarios>=0.4 # Apache-2.0/BSD -WebOb>=1.7.1 # MIT +WebOb>=1.8.2 # MIT @@ -21 +21 @@ PyMySQL>=0.7.6 # MIT License -psycopg2>=2.6.2 # LGPL/ZPL +psycopg2>=2.7.3 # LGPL/ZPL