Open Stack

We are eager to announce the release of:

neutron-vpnaas 9.0.0: OpenStack Networking VPN as a Service

This release is part of the newton release series.

For more details, please see below.

9.0.0
^^^^^

Neutron VPNaaS is integrated with Guru Meditation Reports library.


New Features
************

* Neutron VPNaaS services should respond to SIGUSR2 signal by
  dumping valuable debug information to standard error output.

Changes in neutron-vpnaas 8.0.0.0rc1..9.0.0
-------------------------------------------

89dac51 Switch upper-constraints and tox_install.sh to stable/newton
7c3e5b8 Update .gitreview for stable/newton
3c93dc6 Updated from global requirements
a473bde Tag the alembic migration revisions for Newton
44f6465 Make tests resilient to new project_id field in API
892599a Updated from global requirements
c21d3ac Use model_base from neutron-lib
0002c57 Readd tox_install NEUTRON_DIR
97cc8fc Add debug output to tox_install.sh
0720a85 Add support for Guru Meditation Reports for VPNaaS agents
c26a4f6 Use temporary directory for neutron install
af6649b Move service plugin aliases from neutron to neutron-vpnaas
26f9003 Updated from global requirements
453dbf4 Fix DeprecationWarnings part II
5813874 Adding tests for endpoint-group api.
a000db3 TrivialFix: Add validation for tenant_id
c8b9c6a TrivialFix: Cleanup imports in code
fce8fea Revert "Update disable_ssl_certificate_validation reference"
34f0f98 Update disable_ssl_certificate_validation reference
41805f1 Strongswan: Fix incorrect strongswan auth algorithm sha256 symbol
2941611 Constrain remaining tox targets
3ca00bd Updated from global requirements
a70f163 Remove temporary local HasProject
482785e Fix DeprecationWarnings part I
6017a35 Enable DeprecationWarning in test environments
65667c8 Add connection API cases
9cce0ee Updated from global requirements
06c8c0b Update imports (common.config -> conf.common)
6de03ab Updated from global requirements
113c39a Fix API Tests
ea91ff8 Add Libreswan installation guide in devstack.rst
bd724e6 Drop Newton tag from DB migration
cc8b3f1 Rename DB columns: tenant -> project
b6f8c40 Add migrations testing to VPNaaS functional jobs.
e0ebc7d remove unused LOG
2da398d Updated from global requirements
a79c232 Updated from global requirements
903def7 Updated from global requirements
50be42d Fix VPNaaS functional tests
a75c641 Use tempest.lib tenants_client
0a82097 Replace tempest-lib to tempest in test-requirements.txt
7f79293 Updated from global requirements
b9eeecb Updated from global requirements
cb935c3 Updated from global requirements
c9ee514 Updated from global requirements
d47d569 Updated from global requirements
c98d9bc Updated from global requirements
894af39 Use strongswan piddir as bind mount dir
beff6e9 Copy/remove the strongswan.d config as root
ccc0302 Updated from global requirements
764344f Updated from global requirements
5a7883b Updated from global requirements
8cddec3 Fix grenade plugin
a65310b Add grenade upgrade hooks to stop agent
3086f02 Set path for neutron conf dir in devstack if missing
7cf4ef6 Support local_id configuration
393d4c6 Switch to using hacking checks from neutron-lib
e10adef Strongswan: complete the ipsec.conf
814e3f0 Openswan/Libreswan: Check config changes before restart
e69e003 Updated from global requirements
4dc32fd Updated from global requirements
40ca087 Don't use zuul-cloner for venv env, for periodic jobs
b73e100 Openswan/Libreswan: support sha256 for auth algorithm
6c38daf Fix doc build if git is absent
3aeae7a Ensure that PK values don't default to NULL
21dedd8 Updated from global requirements
19172b3 OpenSwan: handle disconnect properly for multiple subnets
a1b1260 Constraint requirements using mitaka upper-constraints.txt file
0067e26 VPNaaS returns 500 INTERNAL error with long names, descriptions
fd28fdd Update devstack plugin for dependent packages
0101b01 Update devstack plugin for dependent packages
bd41271 Update reno for stable/mitaka
0c7a5a6 Update .gitreview for stable/mitaka


Diffstat (except docs and test files)
-------------------------------------

.gitreview                                         |   1 +
devstack/plugin.sh                                 |   1 +
devstack/settings                                  |   1 +
devstack/upgrade/resources.sh                      |  14 +
devstack/upgrade/settings                          |   1 +
devstack/upgrade/shutdown.sh                       |  36 +
devstack/upgrade/upgrade.sh                        |  14 +
etc/neutron/rootwrap.d/vpnaas.filters              |   2 +
neutron_vpnaas/cmd/__init__.py                     |  26 +
.../db/migration/alembic_migrations/env.py         |   2 +-
.../alembic_migrations/versions/CONTRACT_HEAD      |   2 +-
.../alembic_migrations/versions/EXPAND_HEAD        |   2 +-
.../contract/56893333aa52_fix_identifier_map_fk.py |   2 +-
.../b6a2519ab7dc_rename_tenant_to_project.py       | 143 ++++
.../newton/expand/52783a36bd67_support_local_id.py |  42 +
.../newton/expand/fe637dc3f042_support_sha256.py   |  39 +
neutron_vpnaas/db/vpn/vpn_db.py                    |   6 +-
neutron_vpnaas/db/vpn/vpn_models.py                |  27 +-
neutron_vpnaas/db/vpn/vpn_validator.py             |   8 +-
neutron_vpnaas/extensions/vpn_endpoint_groups.py   |   4 +-
neutron_vpnaas/extensions/vpnaas.py                |  56 +-
.../services/vpn/device_drivers/ipsec.py           |  83 +-
.../vpn/device_drivers/strongswan_ipsec.py         |  22 +-
.../template/openswan/ipsec.conf.template          |   2 +-
.../template/openswan/ipsec.secret.template        |   2 +-
.../template/strongswan/ipsec.conf.template        |  14 +-
.../template/strongswan/ipsec.secret.template      |   2 +-
.../services/vpn/service_drivers/base_ipsec.py     |   5 +
.../services/vpn/service_drivers/cisco_csr_db.py   |   2 +-
.../functional/common/test_migrations_sync.py      |  28 +-
.../functional/openswan/test_openswan_driver.py    |  40 +
.../strongswan/test_strongswan_driver.py           |  78 ++
.../unit/extensions/test_vpn_endpoint_groups.py    |   5 +-
.../unit/services/vpn/device_drivers/test_ipsec.py | 106 ++-
.../services/vpn/service_drivers/test_ipsec.py     |   6 +
.../notes/oslo-reports-3059c2e10e1b35b5.yaml       |   6 +
releasenotes/source/index.rst                      |   1 +
releasenotes/source/mitaka.rst                     |   6 +
requirements.txt                                   |  21 +-
setup.cfg                                          |   5 +
test-requirements.txt                              |  16 +-
tools/tox_install.sh                               |  40 +-
tox.ini                                            |  27 +-
64 files changed, 2404 insertions(+), 860 deletions(-)


Requirements updates
--------------------

diff --git a/requirements.txt b/requirements.txt
index f2a94de..6a4163c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6 +6 @@ pbr>=1.6 # Apache-2.0
-requests!=2.9.0,>=2.8.1 # Apache-2.0
+requests>=2.10.0 # Apache-2.0
@@ -8 +8 @@ Jinja2>=2.8 # BSD License (3 clause)
-netaddr!=0.7.16,>=0.7.12 # BSD
+netaddr!=0.7.16,>=0.7.13 # BSD
@@ -10 +10 @@ SQLAlchemy<1.1.0,>=1.0.10 # MIT
-alembic>=0.8.0 # MIT
+alembic>=0.8.4 # MIT
@@ -12,4 +12,4 @@ six>=1.9.0 # MIT
-neutron-lib>=0.0.1 # Apache-2.0
-oslo.concurrency>=3.5.0 # Apache-2.0
-oslo.config>=3.7.0 # Apache-2.0
-oslo.db>=4.1.0 # Apache-2.0
+neutron-lib>=0.4.0 # Apache-2.0
+oslo.concurrency>=3.8.0 # Apache-2.0
+oslo.config>=3.14.0 # Apache-2.0
+oslo.db!=4.13.1,!=4.13.2,>=4.10.0 # Apache-2.0
@@ -17 +17,2 @@ oslo.log>=1.14.0 # Apache-2.0
-oslo.messaging>=4.0.0 # Apache-2.0
+oslo.messaging>=5.2.0 # Apache-2.0
+oslo.reports>=0.6.0 # Apache-2.0
@@ -19,2 +20,2 @@ oslo.serialization>=1.10.0 # Apache-2.0
-oslo.service>=1.0.0 # Apache-2.0
-oslo.utils>=3.5.0 # Apache-2.0
+oslo.service>=1.10.0 # Apache-2.0
+oslo.utils>=3.16.0 # Apache-2.0
diff --git a/test-requirements.txt b/test-requirements.txt
index b8beb57..4f2cba8 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -6 +6 @@ hacking<0.11,>=0.10.0
-astroid<1.4.0 # LGPL # breaks pylint 1.4.4
+astroid<1.4.0 # LGPLv2.1 # breaks pylint 1.4.4
@@ -8,3 +8,3 @@ coverage>=3.6 # Apache-2.0
-fixtures>=1.3.1 # Apache-2.0/BSD
-mock>=1.2 # BSD
-pylint==1.4.5 # GNU GPL v2
+fixtures>=3.0.0 # Apache-2.0/BSD
+mock>=2.0 # BSD
+pylint==1.4.5 # GPLv2
@@ -12,2 +12,2 @@ python-subunit>=0.0.18 # Apache-2.0/BSD
-requests-mock>=0.7.0 # Apache-2.0
-sphinx!=1.2.0,!=1.3b1,<1.3,>=1.1.2 # BSD
+requests-mock>=1.0 # Apache-2.0
+sphinx!=1.3b1,<1.3,>=1.2.1 # BSD
@@ -16 +16 @@ testrepository>=0.0.18 # Apache-2.0/BSD
-tempest-lib>=0.14.0 # Apache-2.0
+tempest>=12.1.0 # Apache-2.0
@@ -23 +23 @@ oslotest>=1.10.0 # Apache-2.0
-reno>=0.1.1 # Apache2
+reno>=1.8.0 # Apache2