We are jazzed to announce the release of: neutron-fwaas 10.0.0: OpenStack Networking FWaaS This release is part of the ocata release series. Download the package from: https://tarballs.openstack.org/neutron-fwaas/ For more details, please see below. Changes in neutron-fwaas 9.0.0.0rc1..10.0.0 ------------------------------------------- 0ee81f5 Revert "Netlink solution to improve FWaaS performance" e7be764 Pin to stable/ocata fb6915d Add functional test to run dsvm-functional 70ea2d4 Add functional test to run dsvm-functional a9511e9 Correct LOG message in fwaas_plugin_v2 8fcc4d2 Do not complain in firewall_deleted if the FW is already deleted 83ad04b Correct LOG message in fwaas_plugin_v2 80ee37a Update UPPER_CONSTRAINTS_FILE for stable/ocata 4052914 Update reno for stable/ocata 74921ae Update .gitreview for stable/ocata ff24916 Use addCleanup instead of tearDown d370a2e Switch to decorators.idempotent_id 4ba3f5c TrivialFix: Added link for modindex 0565b48 Optimize _make_firewall_group_dict_with_rules e7ebbeb Update policy.json for FWaaS v2 e62e53a Updated from global requirements 6d5afd1 Netlink solution to improve FWaaS performance 0f02e18 Fix validation in converting 'protocol' 8a86782 Fix tempest gate issue on FirewallNotFound exception 8a97921 Optimize _make_firewall_dict_with_rules db queries 8de85ab Updated from global requirements 0fe3b40 Fix 'ports' attribute for firewall_group 1903395 TrivialFix : Fix Port Error Message 89c9437 Fix AssertionError raised from _set_rules_for_policy 15b4f5b Use BRANCH constants from neutron_lib bdcaef8 Fix duplicated python version in classifier 16bc403 Track neutron-lib migration of agent extensions dd72452 Support neutron-lib hacking check H904 7ef9cb3 Updated from global requirements 4bdee1c [WIP]Remove no used attribute in FirewallPolicyRuleAssociation 2170ab3 Fix update fwr with ipv6 address 48289e8 Consistent update with router_info fe93fcd Fix a typo 7ae94e9 Remove httplib2 useless requirement 962ba14 Updated from global requirements 4e746b9 Enable coverage report in console output c07616f Check error message returned by the system 58417e5 Fix PENDING_UPDATE state when update exist no policy fw_group with ports 27b0fff Privsep configuration for neutron-fwaas 5f980e8 Updated from global requirements b7db6f7 Not allow to update icmp fw_rule with port e77740d Use neutron-lib and fwaas constants instead of neutron c6846c3 Updated from global requirements 18727e0 Tempest Scenario tests for FWaaS V2 f769759 Docs: fix Devstack config documentation rendering 4fe93bb Changed the home-page link 37709b3 Adding validation protocol parameters when updating firewall rules c3d3d6c Updated from global requirements bc36296 neutron-lib cleanup in neutron-fwaas fffd6bc Fix removing rule_association on updating a policy daf0c4a Add os-testr to test requirements 351774d Use ExtensionDescriptor from neutron-lib 9c859f9 Use DB field sizes instead of _MAX_LEN constants b51eeae Remove PLURALS 0f8b443 Show team and repo badges on README 8ab2725 Reenable FWaaS v2 tempest tests 8af9d55 Add a variant of gate hook script 642e09d Revert "Set NETWORK_API_EXTENSIONS in fwaas devstack plugin" 7880f27 FWaaS v2 Tempest API tests 8bf87a0 Set NETWORK_API_EXTENSIONS in fwaas devstack plugin cd59240 Use TimeoutException from tempest.lib f7c7d6b Updated from global requirements 2b548d8 Switch to using plugins directory in lieu of neutron manager 7931610 Updated from global requirements 4e615b1 Replaces uuid.uuid4 with uuidutils.generate_uuid() e4851b3 Add smoke tests to neutron-fwaas 2dbe899 Remove unused code e3a742a Add developer documentation to FWaaS cadd0e3 Updated from global requirements 7de8441 Fix fwaas_v2 driver internal error when restart l3 agent 4ae1c26 Remove last vestiges of oslo-incubator 7be3a8f Updated from global requirements ea2e87e Remove unnecessary neutron agent config reference 27f3bbc Remove import of neutron.extensions a3c8021 Updated from global requirements fa1db21 Add Python 3.5 classifier and venv aabd3a4 Catch the integrityError when update firewall group with non exist port 7fd0ea3 Updated from global requirements c93fbf7 Migrate references from neutron to neutron-lib 4ce07ca Fix UnboundLocalError during update firewall group. da5de3c Fix typo in comment 192476f Refactor of _convert_fwaas_to_iptables_rule and dependencies 54ffa6f Updated from global requirements b80de37 Deal with the '-m protocol' flag in iptables FwAAS v1 and v2 13168c0 Enable release notes translation 26a7f38 Fix periodic-neutron-fwaas-pyXX-with-neutron-lib-master jobs 78da7cf Updated from global requirements e9ab56b Updated from global requirements 32fbec3 Remove reference to third-party drivers in readme 469e2e3 Fix import path for l3_config 2edad4e Updated from global requirements a66f3a6 Add devstack plugin support for fwaas v2 9727aac Fix an argument for an exception message 2a4cffb gate_hook: Fix INSTALL_MYSQL_ONLY != True case 9caf4d0 Fix KeyError when fw rule associated with a policy is updated 5abde67 Updated from global requirements 7978a95 Check for _interfaces in updated_router 867a4f1 Add neutron-fwaas in-tree documentation 795afd7 Update reno for stable/newton f9e8daa Validation of router_ids insertion with column selection Diffstat (except docs and test files) ------------------------------------- .gitreview | 1 + .pylintrc | 7 +- README.rst | 12 +- devstack/README.rst | 39 ++- devstack/lib/l2_agent | 16 ++ devstack/lib/l3_agent | 16 ++ devstack/plugin.sh | 46 ++- devstack/settings | 3 +- etc/neutron/policy.d/neutron-fwaas.json | 54 +++- etc/neutron/rootwrap.d/fwaas-privsep.filters | 7 + neutron_fwaas/common/fwaas_constants.py | 2 + neutron_fwaas/db/firewall/firewall_db.py | 42 +-- neutron_fwaas/db/firewall/v2/firewall_db_v2.py | 79 ++++-- .../liberty/contract/67c8e8d61d5_initial.py | 4 +- .../versions/liberty/expand/c40fbb377ad_initial.py | 4 +- neutron_fwaas/db/models/head.py | 4 +- neutron_fwaas/extensions/firewall.py | 44 ++- neutron_fwaas/extensions/firewall_v2.py | 59 ++-- .../extensions/firewallrouterinsertion.py | 2 +- .../agents/l3reference/firewall_l3_agent.py | 60 ++-- .../agents/l3reference/firewall_l3_agent_v2.py | 89 +++--- .../firewall/drivers/linux/iptables_fwaas.py | 75 +++-- .../firewall/drivers/linux/iptables_fwaas_v2.py | 76 +++-- neutron_fwaas/services/firewall/fwaas_plugin.py | 86 +++--- neutron_fwaas/services/firewall/fwaas_plugin_v2.py | 88 ++++-- .../unit/db/firewall/v2/test_firewall_db_v2.py | 147 ++++++++-- .../agents/l3reference/test_firewall_l3_agent.py | 23 +- .../l3reference/test_firewall_l3_agent_v2.py | 77 ++++- .../firewall/drivers/linux/test_iptables_fwaas.py | 9 +- .../drivers/linux/test_iptables_fwaas_v2.py | 9 +- .../unit/services/firewall/test_fwaas_plugin.py | 122 +++++--- .../unit/services/firewall/test_fwaas_plugin_v2.py | 228 +++++++++++++-- releasenotes/source/conf.py | 3 + releasenotes/source/index.rst | 4 +- releasenotes/source/newton.rst | 6 + releasenotes/source/ocata.rst | 6 + requirements.txt | 22 +- setup.cfg | 13 +- test-requirements.txt | 15 +- tools/check_unit_test_structure.sh | 3 +- tools/install_venv.py | 72 ----- tools/install_venv_common.py | 172 ------------ tools/ostestr_compat_shim.sh | 8 + tools/tox_install.sh | 2 +- tools/with_venv.sh | 19 -- tox.ini | 6 +- 71 files changed, 2265 insertions(+), 832 deletions(-) Requirements updates -------------------- diff --git a/requirements.txt b/requirements.txt index 3a3316c..fed35bd 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4 +4 @@ -pbr>=1.6 # Apache-2.0 +pbr>=1.8 # Apache-2.0 @@ -7,2 +7 @@ eventlet!=0.18.3,>=0.18.2 # MIT -httplib2>=0.7.5 # MIT -netaddr!=0.7.16,>=0.7.12 # BSD +netaddr!=0.7.16,>=0.7.13 # BSD @@ -10 +9 @@ SQLAlchemy<1.1.0,>=1.0.10 # MIT -alembic>=0.8.4 # MIT +alembic>=0.8.10 # MIT @@ -12,5 +11,5 @@ six>=1.9.0 # MIT -neutron-lib>=0.4.0 # Apache-2.0 -oslo.config>=3.14.0 # Apache-2.0 -oslo.db!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0 -oslo.log>=1.14.0 # Apache-2.0 -oslo.messaging>=5.2.0 # Apache-2.0 +neutron-lib>=1.1.0 # Apache-2.0 +oslo.config!=3.18.0,>=3.14.0 # Apache-2.0 +oslo.db>=4.15.0 # Apache-2.0 +oslo.log>=3.11.0 # Apache-2.0 +oslo.messaging>=5.14.0 # Apache-2.0 @@ -19,2 +18,3 @@ oslo.service>=1.10.0 # Apache-2.0 -oslo.utils>=3.16.0 # Apache-2.0 - +oslo.utils>=3.18.0 # Apache-2.0 +oslo.privsep>=1.9.0 # Apache-2.0 +pyroute2>=0.4.12 # Apache-2.0 (+ dual licensed GPL2) diff --git a/test-requirements.txt b/test-requirements.txt index 595767d..fa213cd 100644 --- a/test-requirements.txt +++ b/test-requirements.txt @@ -6 +6 @@ hacking<0.11,>=0.10.0 -coverage>=3.6 # Apache-2.0 +coverage>=4.0 # Apache-2.0 @@ -10,3 +10,3 @@ python-subunit>=0.0.18 # Apache-2.0/BSD -requests-mock>=1.0 # Apache-2.0 -sphinx!=1.3b1,<1.3,>=1.2.1 # BSD -oslosphinx!=3.4.0,>=2.5.0 # Apache-2.0 +requests-mock>=1.1 # Apache-2.0 +sphinx!=1.3b1,<1.4,>=1.2.1 # BSD +oslosphinx>=4.7.0 # Apache-2.0 @@ -13,0 +14 @@ oslo.concurrency>=3.8.0 # Apache-2.0 +os-testr>=0.8.0 # Apache-2.0 @@ -18 +19 @@ testscenarios>=0.4 # Apache-2.0/BSD -WebOb>=1.2.3 # MIT +WebOb>=1.6.0 # MIT @@ -21,2 +22,2 @@ oslotest>=1.10.0 # Apache-2.0 -reno>=1.8.0 # Apache2 -PyMySQL!=0.7.7,>=0.6.2 # MIT License +reno>=1.8.0 # Apache-2.0 +PyMySQL>=0.7.6 # MIT License