We joyfully announce the release of: neutron 14.0.3: OpenStack Networking This release is part of the stein stable release series. The source is available from: https://opendev.org/openstack/neutron Download the package from: https://tarballs.openstack.org/null/ Please report issues through: https://bugs.launchpad.net/neutron/+bugs For more details, please see below. 14.0.3 ^^^^^^ Security Issues *************** * The OVS Firewall blocks traffic that does not have either the IPv4 or IPv6 ethertypes at present. This is a behavior change compared to the iptables_hybrid firewall, which only operates on IP packets and thus does not address other ethertypes. There is now a configuration option in the neutron openvswitch agent configuration file for permitted ethertypes and then ensures that the requested ethertypes are permitted on initialization. Bug Fixes ********* * Fixes an issue where deletion of a provider network could result in ML2 mechanism drivers not being passed information about the network's provider fields. The consequences of this depend on the mechanism driver in use, but could result in the event being ignored, leading to an incorrectly configured network. See bug 1841967 for details. * When updating the fixed-ips of a port residing on a routed provider network the port update would always fail if *host* was not set. See bug: 1844124 (https://bugs.launchpad.net/tripleo/+bug/1844124). Changes in neutron 14.0.2..14.0.3 --------------------------------- f522fa3fa8 switch to the newly created opensuse-15 nodeset 626eca984f Handle ports assigned to routers without routerports 074e1832aa fixed_configured=True when Add/Remove port IPs 9d04e38e86 OVS flows for custom ethertypes must be on EGRESS 09c4e0e970 DVR: Modify DVR flows to allow ARP requests to hit ARP Responder table add87accc5 DVR: Cleanup ml2 dvr portbindings on migration 77d4756df8 Change ip_lib decorators order 5eb234b226 Avoid unnecessary operation of ovsdb and flows 7156ebfc28 Fix creation of vlan network with segmentation_id set to 0 4396ef3050 Add info log about ready DHCP config for ports 5da06d7f42 Increase timeouts for OVSDB in functional tests 9f3c7e14cc Check the namespace is ready in test_mtu_update tests 0f4f48c716 Fix bulk port functioning with requested security groups 7ae3280c34 Create _mech_context before delete to avoid race 7b9cdb0c13 Disable "of_inactivity_probe" in fullstack tests dabab08597 Do not use privsep context when listing the namespaces in fullstack adac5d9b7a Delay HA router transition from "backup" to "master" b7bf836333 Refactor the L3 agent batch notifier e0f498aae9 Veth pair "IFLA_LINK" populated since kernel 4.15.0-60-generic 677d1f5d03 ML2 plugin: extract and postpone limit in port query 0a30dba670 Use created subnet in port generator in "test_port_ip_update_revises" 5b07cb21e3 Increase TestDhcpAgentHA.agent_down_time to 30 seconds c09e829580 Increase number of retries in _process_trunk_subport_bindings 3a2842bdd8 Initialize phys bridges before setup_rpc 287ae43e8f Populate binding levels when concurrent ops fail 8e9e0cbe14 Make sure the port still in port map when prepare_port_filter 750a8e8327 Fix sort issue in test_dhcp_agent_scheduler.test_filter_bindings f7532f0c92 [DVR] Add lock during creation of FIP agent gateway port 9f6d8c383f Clear skb mark on encapsulating packets 6b9bedd151 fix update port bug c3a3031f78 Check for agent restarted after checking for DVR port 2e7dd4db88 Fix default RPC worker count d090fb9a3c Retry trunk status updates failing with StaleDataError 8d8f66eddd Don't crash ovs agent during reconfigure of phys bridges 914538eb28 fix NetworkSegmentRange OVO entry point 431ba12873 Use --bind-dynamic with dnsmasq instead of --bind-interfaces 20e3f25cf7 Yield control to other greenthreads while processing trusted ports e1b84c9a70 Ignore first local port update notification 73e3f7d281 Fix list security groups performance with RBAC 2626baf3d6 Limit max ports per rpc for dhcp_ready_on_ports() aa60d6e837 Fix bulk port binding 1229be91d9 Refactor qos_plugin._extend_port_resource_request b452c508b6 Add qos_network_policy_id to Port OVO ccf5b7ea0a Don't match input interface in POSTROUTING table 0be471486b Add custom ethertype processing fc278a9251 Treat networks shared by RBAC in same way as shared with all tenants 9a5ca7145b Import "Manage Networking service quotas" admin guide 3504369918 Turn CIDR in query filter into proper subnet ff66205081 Stop OVS agent before starting it again Diffstat (except docs and test files) ------------------------------------- .zuul.yaml | 5 +- neutron/agent/common/ovs_lib.py | 1 + neutron/agent/dhcp/agent.py | 11 +- neutron/agent/l3/agent.py | 15 +- neutron/agent/l3/ha.py | 44 ++- neutron/agent/l3/ha_router.py | 25 +- neutron/agent/l3/router_info.py | 5 +- neutron/agent/linux/dhcp.py | 8 +- neutron/agent/linux/ip_lib.py | 16 +- .../agent/linux/openvswitch_firewall/firewall.py | 31 +- neutron/agent/resource_cache.py | 17 +- neutron/agent/rpc.py | 18 +- neutron/conf/agent/securitygroups_rpc.py | 8 +- neutron/db/db_base_plugin_common.py | 6 +- neutron/db/ipam_pluggable_backend.py | 2 +- neutron/db/l3_db.py | 78 ++--- neutron/db/l3_dvr_db.py | 90 ++++-- neutron/db/qos/models.py | 6 + neutron/db/securitygroups_db.py | 3 +- neutron/notifiers/batch_notifier.py | 41 +-- neutron/objects/ports.py | 95 +++++- neutron/objects/rbac_db.py | 29 -- .../drivers/openvswitch/agent/common/constants.py | 3 +- .../agent/openflow/native/br_dvr_process.py | 10 +- .../openvswitch/agent/openflow/native/br_int.py | 67 ++++ .../openvswitch/agent/ovs_dvr_neutron_agent.py | 41 ++- .../drivers/openvswitch/agent/ovs_neutron_agent.py | 47 ++- neutron/plugins/ml2/drivers/type_vlan.py | 4 +- neutron/plugins/ml2/plugin.py | 102 +++++- neutron/plugins/ml2/rpc.py | 20 +- neutron/policy.py | 6 +- neutron/privileged/agent/linux/ip_lib.py | 119 +++---- neutron/service.py | 2 +- neutron/services/qos/qos_plugin.py | 47 ++- neutron/services/trunk/rpc/server.py | 22 +- .../functional/pecan_wsgi/test_controllers.py | 39 ++- .../privileged/agent/linux/test_ip_lib.py | 43 +-- .../linux/openvswitch_firewall/test_firewall.py | 1 + .../plugins/ml2/drivers/l2pop/test_mech_driver.py | 5 +- .../agent/openflow/native/ovs_bridge_test_base.py | 9 +- .../openvswitch/agent/test_ovs_neutron_agent.py | 75 ++++- .../unit/plugins/ml2/drivers/test_type_vlan.py | 21 +- .../unit/scheduler/test_dhcp_agent_scheduler.py | 8 +- .../services/revisions/test_revision_plugin.py | 2 +- .../notes/custom_ethertypes-eae3fcab3293e3a1.yaml | 9 + .../fix-net-delete-race-f2fa5bac3ab35a5b.yaml | 9 + ...-routed-provider-networks-c54a54844d9a3926.yaml | 7 + setup.cfg | 2 +- 82 files changed, 1989 insertions(+), 489 deletions(-)