Open Stack

We are gleeful to announce the release of:

neutron 8.2.0: OpenStack Networking

This release is part of the mitaka stable release series.

For more details, please see below.

8.2.0
^^^^^

Add options to designate external dns driver of neutron for SSL based
connections. This makes it possible to use neutron with designate in
scenario where endpoints are SSL based. Users can specify to skip cert
validation or specify path to a valid cert in [designate] section of
neutron.conf file.

Support for IPv6 addresses as tunnel endpoints in OVS.


New Features
************

* Two new options are added to *[designate]* section to support SSL.

* First option *insecure* allows to skip SSL validation when
  creating a keystone session to initate a designate client. Default
  value is False, which means to always verify connection.

* Second option *ca_cert* allows setting path to a valid cert file.
  Default is None.

* The local_ip value in ml2_conf.ini can now be set to an IPv6
  address configured on the system.


Other Notes
***********

* Requires OVS 2.5+ version or higher with linux kernel 4.3 or
  higher. More info at OVS github page
  (https://github.com/openvswitch/ovs/blob/master/FAQ.md).

Changes in neutron 8.1.2..8.2.0
-------------------------------

63f9470 Macvtap: Allow noop alias as FW driver
198bb55 Fix of ping usage in net_helpers.async_ping()
989cf32 Lower ML2 message severity.
b0d16a0 Fix OVSBridge.set_protocols arg
c4f1dab Allow tox to be run with python 3
0038b3f Fix misuse of assertTrue in L3 DVR test case
4b7e7cb Imported Translations from Zanata
251d680 DVR: handle floating IP reassociation on the same host
33650bf Not auto schedule router when sync routers from agent
706abe2 Remove unhelpful test of oslo.service ServiceLauncher
cda226b Revert "Fix _get_id_for"
9e403b1 When deleting floating IP catch PortNotFound
dcbf753 Fix unicode bug for password-authenticated BGP peer
c72a240 DVR: Ensure that only one fg device can exist at a time in fip ns
412ba9f Allow min_l3_agents_per_router to equal one
b49841e Skip INVALID and UNASSIGNED ofport in vlan restore
95ddc01 sriov: Fix macvtap vf interface regex pattern
873ae30 Fix _get_id_for
ce479da OVS: UnboundLocalError on switch timeout fixed
aaa1486 Cap tempest to < 12.1.0
aa10d01 Imported Translations from Zanata
20c2bfb Imported Translations from Zanata
97088cf tests: clean up designate client session mock on test exit
b685bf7 ovs: set device MTU after it's moved into a namespace
c705e2f Fix designate dns driver for SSL based endpoints
344f7eb add PROTO_NUM_IPV6_ICMP for _validate_port_range
71686cd Update ml2 delete_subnet to deallocate via ipam
f9d5064 Fixed help messages for path_mtu and global_physnet_mtus options
85ac60c DVR: Fix allowed_address_pair port binding with delayed fip
83ca27f After a migration clean up the floating ip on the source host
eed1eb0 Updated from global requirements
1d18475 Refactor the rpc callback version discovery mechanism
ed82f8b qos: Add API test for shared policy
adc7418 Fix get_free_namespace_port to actually avoid used ports
cb36ef3 Fix validation of floating-ip association
263a161 Adopt to config_dir option being a list and not a string
870f82e [qos] section is missing from neutron.conf
a868433 neutron-db-manage: revision: fail for --autogenerate and branch
e026550 Fix keepalived functional tests
0796a15 Avoid testing oslo.service library internals
eac7256 Only load timestamp service plugin in timestamp tests
47c966a Fetch router port subnets in bulk
fa2c319 Insert validation with request params for HTTP DELETE
13ff766 Make auto allocate plugin safe for unit/func tests
8cd91b1 Define localstatedir for ovs compilation
98e9154 De-dup user-defined SG rules before iptables call
e3eaf20 Add a missing address-scope extension check
881f744 Skip firewall blink test for ovs-fw
98ab44f Fix regexp for ss output
bf631b2 Always call ipam driver on subnet update
c3892e4 OVS: Add support for IPv6 addresses as tunnel endpoints


Diffstat (except docs and test files)
-------------------------------------

devstack/lib/ovs                                   |  10 +-
neutron/agent/common/ovs_lib.py                    |   4 +-
neutron/agent/l3/dvr_fip_ns.py                     |  14 +-
neutron/agent/l3/dvr_local_router.py               |  44 +++++--
neutron/agent/l3/router_info.py                    |  14 ++
neutron/agent/linux/interface.py                   |  13 +-
neutron/agent/linux/iptables_firewall.py           |   9 +-
.../agent/linux/openvswitch_firewall/firewall.py   |   4 +-
neutron/api/rpc/callbacks/exceptions.py            |   6 +-
neutron/api/rpc/callbacks/version_manager.py       |  61 +++++----
neutron/api/rpc/handlers/l3_rpc.py                 |   5 -
neutron/api/v2/base.py                             |   3 +
neutron/cmd/sanity/checks.py                       |   3 +-
neutron/common/config.py                           |  11 +-
neutron/common/constants.py                        |   3 +-
neutron/common/utils.py                            |  15 +++
neutron/db/agents_db.py                            |  14 +-
neutron/db/ipam_pluggable_backend.py               |  33 +++--
neutron/db/l3_db.py                                | 116 ++++++++++-------
neutron/db/l3_dvr_db.py                            |  75 ++++++++++-
neutron/db/l3_dvrscheduler_db.py                   |   7 +
neutron/db/l3_hamode_db.py                         |   9 +-
neutron/db/migration/cli.py                        |   5 +-
neutron/db/securitygroups_db.py                    |   3 +-
neutron/extensions/l3_ext_ha_mode.py               |   4 +-
neutron/ipam/drivers/neutrondb_ipam/driver.py      |   9 ++
neutron/locale/de/LC_MESSAGES/neutron.po           |  70 +---------
neutron/locale/es/LC_MESSAGES/neutron.po           |  75 +----------
neutron/locale/fr/LC_MESSAGES/neutron.po           |  71 +----------
neutron/locale/it/LC_MESSAGES/neutron.po           |  78 +-----------
neutron/locale/ja/LC_MESSAGES/neutron.po           |  77 ++---------
.../locale/ko_KR/LC_MESSAGES/neutron-log-error.po  |   9 +-
.../ko_KR/LC_MESSAGES/neutron-log-warning.po       |  12 +-
neutron/locale/ko_KR/LC_MESSAGES/neutron.po        |  65 +---------
neutron/locale/pt_BR/LC_MESSAGES/neutron.po        |  69 +---------
neutron/locale/ru/LC_MESSAGES/neutron.po           |  69 +---------
.../tr_TR/LC_MESSAGES/neutron-log-warning.po       |  12 +-
neutron/locale/tr_TR/LC_MESSAGES/neutron.po        |  25 +---
neutron/locale/zh_CN/LC_MESSAGES/neutron.po        | 129 ++++++-------------
neutron/locale/zh_TW/LC_MESSAGES/neutron.po        |  60 +--------
neutron/notifiers/nova.py                          |   8 +-
neutron/opts.py                                    |   2 +-
neutron/plugins/ml2/config.py                      |   8 +-
.../drivers/macvtap/agent/macvtap_neutron_agent.py |  11 +-
.../ml2/drivers/mech_sriov/agent/pci_lib.py        |   2 +-
.../ml2/drivers/openvswitch/agent/common/config.py |   5 +-
.../agent/openflow/native/ovs_bridge.py            |  18 ++-
.../drivers/openvswitch/agent/ovs_neutron_agent.py |  45 ++++++-
neutron/plugins/ml2/managers.py                    |   2 +-
neutron/plugins/ml2/plugin.py                      |  77 ++++++-----
neutron/services/auto_allocate/db.py               |  20 ++-
neutron/services/bgp/driver/ryu/driver.py          |   3 +
.../externaldns/drivers/designate/driver.py        |  11 +-
neutron/services/provider_configuration.py         |  46 +++++--
.../functional/agent/linux/test_keepalived.py      |  34 ++---
.../l3_router/test_l3_dvr_router_plugin.py         | 141 +++++++++++++++++++++
.../unit/agent/linux/test_iptables_firewall.py     |   8 ++
.../unit/api/rpc/callbacks/test_version_manager.py |  42 +++---
.../ipam/drivers/neutrondb_ipam/test_driver.py     |  41 ++++++
.../macvtap/agent/test_macvtap_neutron_agent.py    |   8 +-
.../ml2/drivers/mech_sriov/agent/test_pci_lib.py   |  12 ++
.../agent/openflow/native/test_ovs_bridge.py       |  35 +++++
.../openvswitch/agent/test_ovs_neutron_agent.py    | 121 +++++++++++++++---
.../drivers/openvswitch/agent/test_ovs_tunnel.py   |   6 +-
.../plugins/ml2/extensions/test_dns_integration.py |  63 +++++++++
.../unit/scheduler/test_l3_agent_scheduler.py      |  47 +++++--
.../unit/services/bgp/driver/ryu/test_driver.py    |  33 ++++-
.../unit/services/test_provider_configuration.py   |  58 +++++++++
...ignate-driver-ssl-options-169c299c96f2aff0.yaml |  16 +++
...ovs-ipv6-tunnel-endpoints-f41b4954a04c43f6.yaml |  10 ++
requirements.txt                                   |   2 +-
tox.ini                                            |   2 +-
103 files changed, 1748 insertions(+), 1157 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index 065acac..eb8b5e8 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -30 +30 @@ stevedore>=1.5.0 # Apache-2.0
-oslo.concurrency>=3.5.0 # Apache-2.0
+oslo.concurrency>=3.7.1 # Apache-2.0