Open Stack

We are amped to announce the release of:

octavia 7.1.2: OpenStack Octavia Scalable Load Balancer as a Service

This release is part of the victoria stable release series.

The source is available from:

    https://opendev.org/openstack/octavia

Download the package from:

    https://pypi.org/project/octavia

Please report issues through:

    https://storyboard.openstack.org/#!/project/908

For more details, please see below.

7.1.2
^^^^^

Bug Fixes

* Fixed an issue with batch member updates, that don't have any
  changes, not properly rolling back the update.

* Disable conntrack for TCP flows in the Amphora, it reduces memory
  usage for HAProxy-based listeners and prevents some kernel warnings
  about dropped packets.

* Fixed an issue that an amphorav2 LB cannot be reached after
  loadbalancer failover. The LB security group was not set in the
  amphora port.

* Fixes an issue where provider drivers may not decrement the load
  balancer objects quota on delete.

* Fixes loadbalancer creation failure when one of the listener port
  matches with the octavia generated peer ports and the allowed_cidr
  is explicitly set to 0.0.0.0/0 on the listener. This is due to
  creation of two security group rules with remote_ip_prefix as None
  and remote_ip_prefix as 0.0.0.0/0 which neutron rejects the second
  request with security group rule already exists.

* Fix an issue with the rsyslog configuration file in the Amphora
  when the log offloading feature and the local log storage feature
  are both disabled.

* Fix a serialization error when using host_routes in VIP subnets
  when persistence in the amphorav2 driver is enabled.

* Some IPv6 UDP members were incorrectly marked in ERROR status,
  because of a formatting issue while generating the health message in
  the amphora.

* Fixed MAX_TIMEOUT for timeout_client_data, timeout_member_connect,
  timeout_member_data, timeout_tcp_inspect API listener. The value was
  reduced from 365 days to 24 days, which now does not exceed the
  value of the data type in DB.

* Fixed an issue with the "lo" interface in the "amphora-haproxy"
  network namespace. The "lo" interface was down and prevented haproxy
  to communicate with other haproxy processes (for persistent stick
  tables) on configuration change. It delayed old haproxy worker
  cleanup and increased the memory consumption usage after reloading
  the configuration.

* Increase the limit value for nr_open and file-max in the amphora,
  the new value is based on what HAProxy 2.x is expecting from the
  system with the greatest maxconn value that Octavia can set.

* Fix an issue with the provisioning status of a load balancer that
  was set to ERROR too early when an error occurred, making the load
  balancer mutable while the execution of the tasks for this resources
  haven't finished yet.

* Fix an issue that could set the provisioning status of a load
  balancer to a PENDING_UPDATE state when an error occurred in the
  amphora failover flow.

* Fix load balancers that use customized host_routes in the VIP or
  the member subnets in amphorav2.

* Fix weighted round-robin for UDP listeners with keepalived and
  lvs. The algorithm must be specified as 'wrr' in order for weighted
  round-robin to work correctly, but was being set to 'rr'.

* Fixed the healthcheck endpoint always querying the backends by
  caching results for a configurable time. The default is five
  seconds.

Changes in octavia 7.1.1..7.1.2
-------------------------------

de20868a Fix LB set in ERROR too early in MapLoadbalancerToAmphora
17f2c674 Fix LB set in ERROR too early in the revert flow
e3026d35 Fix failover of az-specific loadbalancers
4703bebd Fix management network selection when calculating deltas
061ca287 Fix using host_routes in VIP subnet with amphorav2
c0ad3b34 Disable conntrack for TCP flows in the amphora
f7dde919 Fix duplicate SG creation for listener peer port
b94493eb Fix MAX_TIMEOUT value for listener
80ff90e3 Fix periodic image builder jobs
bf012c2c Fix PlugVIPAmphora revert function in amphorav2
c177987f Update nr_open limit value in the amphora
18413fab Add caps for pip-extra-reqs/pip-missing-reqs
739be788 Fix race conditions between API and worker DB calls
74c0ff2a Enable lo interface in the amphora-haproxy netns
ee7b2621 Add amphora_id in store params for failover_amphora
d69d0666 Fix comment for the ca_certificates_file opt
37b15da4 Optimize CountPoolChildrenForQuota task in amphorav2
bbb203a2 Fix task_flow.max_workers with persistence in amphorav2
2195a45a Fix rsyslog configuration when disabling logs
93ec146a Fix jobboard_enabled setting in devstack
5d49484e Fix devstack cleanup when using amphorav2
a139d2f9 Fix using subnets with host_routes in amphorav2 driver
582b4bab Make /healthcheck cache results
7ab43edc Cap hacking
1cb53e14 Fix empty Batch Member Update to unlock objects
c7640b90 Fix weighted round-robin about UDP listener
e3b68219 Fix LB failover for amphorav2: set security group
8b210bb5 Fix incorrect ERROR status with IPv6 UDP members
0a8254e0 Fix provider driver quota handling


Diffstat (except docs and test files)
-------------------------------------

devstack/plugin.sh                                 |  12 +-
.../static/usr/local/bin/udp-masquerade.sh         |  27 +++++
.../post-install.d/20-haproxy-tune-kernel          |   4 +-
etc/octavia.conf                                   |  19 ++-
.../amphorae/backends/agent/api_server/osutils.py  |   2 +-
.../api_server/templates/amphora-netns.systemd.j2  |   4 +
.../agent/api_server/templates/systemd.conf.j2     |   2 +-
.../amphorae/backends/utils/keepalivedlvs_query.py |  13 ++-
octavia/api/drivers/amphora_driver/v1/driver.py    |  11 +-
octavia/api/drivers/amphora_driver/v2/driver.py    |  11 +-
octavia/api/drivers/driver_agent/driver_updater.py |  43 ++++++-
octavia/api/healthcheck/healthcheck_plugins.py     |  23 +++-
octavia/api/v2/controllers/member.py               |   6 +
octavia/common/base_taskflow.py                    |   5 +-
octavia/common/config.py                           |   6 +-
octavia/common/constants.py                        |   4 +-
.../logging/templates/10-rsyslog.conf.template     |   5 +
octavia/common/jinja/lvs/jinja_cfg.py              |   2 +-
.../worker/v1/tasks/amphora_driver_tasks.py        |   8 --
.../controller/worker/v1/tasks/database_tasks.py   |  51 +-------
.../controller/worker/v1/tasks/network_tasks.py    |   8 +-
octavia/controller/worker/v2/controller_worker.py  |  60 ++++++++--
.../controller/worker/v2/flows/amphora_flows.py    |   4 +
.../worker/v2/tasks/amphora_driver_tasks.py        |  38 +++---
.../controller/worker/v2/tasks/database_tasks.py   |  96 ++-------------
.../controller/worker/v2/tasks/network_tasks.py    |  13 ++-
octavia/db/repositories.py                         |  10 ++
.../drivers/neutron/allowed_address_pairs.py       |  17 ++-
.../backend/agent/api_server/test_keepalivedlvs.py |   2 +-
.../backends/utils/test_keepalivedlvs_query.py     |  29 ++++-
.../amphora_driver/v1/test_amphora_driver.py       |  11 +-
.../amphora_driver/v2/test_amphora_driver.py       |  11 +-
.../drivers/driver_agent/test_driver_updater.py    |  66 ++++++++++-
.../common/jinja/logging/test_logging_jinja_cfg.py |  38 +++---
.../unit/common/jinja/lvs/test_lvs_jinja_cfg.py    |  16 +--
.../sample_configs/sample_configs_combined.py      |   4 +-
.../common/sample_configs/sample_configs_split.py  |   2 +-
.../worker/v1/tasks/test_amphora_driver_tasks.py   |  37 +-----
.../worker/v1/tasks/test_database_tasks.py         | 110 ++---------------
.../worker/v1/tasks/test_network_tasks.py          |   5 +-
.../worker/v2/flows/test_amphora_flows.py          |   6 +-
.../worker/v2/tasks/test_amphora_driver_tasks.py   | 130 +++++++++++++++------
.../worker/v2/tasks/test_database_tasks.py         | 125 ++------------------
.../worker/v2/tasks/test_database_tasks_quota.py   |  36 +-----
.../worker/v2/tasks/test_network_tasks.py          |  23 +++-
.../controller/worker/v2/test_controller_worker.py |  24 ++--
.../drivers/neutron/test_allowed_address_pairs.py  |  30 +++++
playbooks/image-build/run.yaml                     |  25 +++-
...batch-member-update-issue-09b76787553e7752.yaml |   5 +
...disable-conntrack-for-tcp-01ef6948d99353c2.yaml |   6 +
...phorav2-failover-secgroup-c793de5e00b32653.yaml |   5 +
...ver-agent-decrement-quota-27486d9fa0bdeb89.yaml |   5 +
...fix-duplicate-sg-creation-0c502a5d2d8c276d.yaml |   9 ++
...x-error-in-rsyslog-config-a316a7856e1a847a.yaml |   5 +
...amphorav2-and-persistence-54b99d651a4ee9c4.yaml |   5 +
...x-ipv6-udp-health-message-ed94b35bbea396ec.yaml |   5 +
.../fix-listener-MAX_TIMEOUT-4c4fdf804a96c34b.yaml |   7 ++
...o-interface-amphora-netns-90fb9934026e1485.yaml |   8 ++
.../fix-nr_open-limit-value-7f475c3e301a608d.yaml  |   6 +
...isioning-status-on-errors-7f3736ef6e94d453.yaml |   9 ++
...net-host_routes-amphorav2-3c079c5a3bfa1b3d.yaml |   5 +
.../fix-udp-listener-wrr-50de9dc0774a8ea1.yaml     |   6 +
.../notes/healthcheck-cache-641f0a64e6f5856c.yaml  |   5 +
test-requirements.txt                              |   2 +-
tox.ini                                            |  18 ++-
71 files changed, 837 insertions(+), 614 deletions(-)


Requirements updates
--------------------

diff --git a/test-requirements.txt b/test-requirements.txt
index 0a6a27f2..855843c7 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -4 +4 @@
-hacking>=3.0 # Apache-2.0
+hacking>=3.0,<4.1.0 # Apache-2.0