19016 Commits

Author SHA1 Message Date
Inessa Vasilevskaya
7322bd6efb Make code follow log translation guideline
Since Pike log messages should not be translated.
This patch removes calls to i18n _LC, _LI, _LE, _LW from
logging logic throughout the code. Translators definition
from neutron._i18n is removed as well.
This patch also removes log translation verification from
ignore directive in tox.ini.

Change-Id: If9aa76fcf121c0e61a7c08088006c5873faee56e
2017-08-14 02:01:48 +00:00
Jenkins
c65e541b6e Merge "Remove code to debug auto address allocation error" 2017-08-14 01:44:29 +00:00
Jenkins
f7e799a4a8 Merge "Apply network MTU changes to dhcp ports" 2017-08-12 22:57:34 +00:00
Jenkins
b503b32624 Merge "DVR: Provide options for DVR North/South routing centralized" 2017-08-12 13:08:29 +00:00
Jenkins
559f83a6c1 Merge "Apply network MTU changes to l3 ports" 2017-08-12 06:16:30 +00:00
Jenkins
21a7ad29bf Merge "Drop port_delete and port_update debug msgs" 2017-08-12 06:04:06 +00:00
Jenkins
4f581d2168 Merge "Add API test for port dns_domain" 2017-08-11 20:30:25 +00:00
Jenkins
e53bb591ec Merge "Update reno for stable/pike" 2017-08-11 15:49:20 +00:00
Jenkins
76e1af8188 Merge "Allow unprivileged users to get their quota usage" 2017-08-11 15:24:15 +00:00
Ihar Hrachyshka
9df067f12d Apply network MTU changes to dhcp ports
This patch makes DHCP agent to update its ports' MTU when it's changed
on core plugin side.

Related-Bug: #1671634
Change-Id: Ie1e1ca6a5f908c1e5669ddb3988d49c57da4b9c4
2017-08-11 15:12:40 +00:00
Ihar Hrachyshka
cc69828ff0 Apply network MTU changes to l3 ports
This patch makes L3 agent to update its ports' MTU when it's changed on
core plugin side.

Related-Bug: #1671634
Change-Id: I4444da6358e8b8420a3a365e1107b02f5bb1161d
2017-08-11 11:10:10 -04:00
Jenkins
dfd8946edd Merge "Add unit tests for dns_domain for ports" 2017-08-11 13:54:09 +00:00
Jenkins
eb0eb01029 Merge "Add port dns_domain processing logic" 2017-08-11 13:53:52 +00:00
Jenkins
57950b9891 Merge "ovs-fw: Handle only known trusted ports" 2017-08-11 13:52:22 +00:00
60517921fe Update reno for stable/pike
Change-Id: I4ad9adc99c97d4f0b60c0812090fd1005970a14a
2017-08-11 08:59:15 +00:00
Jenkins
d225b86738 Merge "Deprecate web_framework option" 2017-08-11 07:06:29 +00:00
Jenkins
ceb86366d2 Merge "Allow to set/modify network mtu" 2017-08-11 07:06:15 +00:00
Zhengwei Gao
9e185bca08 Allow unprivileged users to get their quota usage
When user try to get quota usage detail for their own project, it will
return null. As process logic of details method is incorrect, it only
allow admin to get other's project quota usage detail.

Change-Id: I2e21dac497a6c5bffba6b55cb4456820900449df
Closes-Bug: #1708133
2017-08-11 06:41:24 +00:00
Jenkins
6280787f84 Merge "Allow extension driver to provide multiple aliases" 2017-08-11 03:13:57 +00:00
Jenkins
b940f041a6 Merge "Reduce rally sub-port count" 2017-08-11 02:26:07 +00:00
Jenkins
a04f8fd049 Merge "DVR: Fix router_update failure when agent restarts" 2017-08-11 01:15:50 +00:00
Kevin Benton
a6a2d4d134 Deprecate web_framework option
We didn't quite get around to pulling out all of the old API
code before the end of the cycle so we should deprecate this
option to make sure people don't use it.

Change-Id: Idf9d497bbccdb89c6e5898611d1cad9a18b1bcbb
Implements: blueprint wsgi-pecan-switch
2017-08-11 01:11:19 +00:00
Ihar Hrachyshka
f21c7e2851 Allow to set/modify network mtu
This patch adds ``net-mtu-writable`` API extension that allows to write
to network ``mtu`` attribute.

The patch also adds support for the extension to ml2, as well as covers
the feature with unit and tempest tests. Agent side implementation of
the feature is moved into a separate patch to ease review.

DocImpact: neutron controller now supports ``net-mtu-writable`` API
           extension.
APIImpact: new ``net-mtu-writable`` API extension was added.

Related-Bug: #1671634
Change-Id: Ib232796562edd8fa69ec06b0cc5cb752c1467add
2017-08-11 00:57:34 +00:00
Swaminathan Vasudevan
9515c771e7 DVR: Provide options for DVR North/South routing centralized
DVR supports both East/West and North/South routing. While the
SNAT is centralized the DNAT is mostly distributed. There are
certain circumstances where the DNAT might be centralized when
the ports are unbound.

In order to have a well defined behavior and when there are
no external network connectivity available in the compute host,
the DNAT functionality is centralized.
In order to achieve this we are introducing a new agent type
option 'dvr_no_external' to centralize the DNAT.

This new L3 agent type ('dvr_no_external') would only allow the East/West
routing to occur in the compute host and the DNAT or Floating IP will be
configured in the centralized network node.

Change-Id: Ia5d7336e478e0fa5ba62b7ae5ed0c56656116d94
Partial-Bug: #1667877
2017-08-10 23:40:31 +00:00
Kevin Benton
e97ee8a972 Reduce rally sub-port count
This test is executed 4 times and creating 1000 Neutron ports
just to run this scenario 4 times results in this job taking
15 minutes to complete its iterations.

This cuts the count in half to 125 per execution to cut the run
time in half and ensure we don't get to close to the gate timeout.

This was done once before as part of
817a19c4b9ced01af9bbb6f7383283e3f0f0e9bd but unfortunately being
part of another SLA change resulted in it being reverted as part
of the SLA change.

Change-Id: I61466d87b002252efc163cbb5d03eafc5d4da3fb
2017-08-10 11:21:03 -07:00
Jenkins
55a7ab79ff Merge "tests: apply latest release milestone alembic scripts first" 2017-08-10 10:59:59 +00:00
Jenkins
7543948ea8 Merge "functional: disable netlink tests" 2017-08-10 02:29:29 +00:00
Miguel Lavalle
39a9e09716 Add API test for port dns_domain
This patchset adds a Tempest API test for the port dns_domain attribute.

It also enables the dns-domain-ports extension for testing, which is a
super-set of the dns extension.

Change-Id: I5c1da61a8a49c190aad549713da646a3abb8ccb1
2017-08-09 16:20:48 -05:00
Miguel Lavalle
589d206987 Add unit tests for dns_domain for ports
This patchset adds unit tests for dns_domain for ports.

Change-Id: Ib8c05260334703088f48ce932054146d796e56e0
2017-08-09 16:12:53 -05:00
Jakub Libosvar
75ddc9c34e functional: disable netlink tests
Current gate runs with kernel 4.4.0-89. Creating conntrack entries fails
with this version and leaves conntrack in stuck state leading to
functional tests to hang.

This patch proposes to skip those tests that create conntrack entries so
we can enable back the functional job to voting to avoid new regressions
at this suite.

Change-Id: I9f883cea1d101efe6a7214c3a9b679fc32427365
Related-bug: #1709032
2017-08-09 13:44:12 +00:00
Jenkins
90098180fa Merge "[log]: Add validator to logging api" 2017-08-09 06:31:44 +00:00
Jenkins
30ce6749f9 Merge "DVR: Configure centralized floatingips to snat_namespace." 2017-08-09 03:56:47 +00:00
Jenkins
9dd4fd133a Merge "[log]: add driver manager to LoggingPlugin" 2017-08-09 01:52:40 +00:00
Jenkins
90af23080e Merge "Fill device_info with port_security_enabled data" 2017-08-09 01:06:28 +00:00
Miguel Lavalle
4a77533259 Add port dns_domain processing logic
This patchset adds logic to the ML2 DNS integration extension to process
a new dns_domain attribute associated to ports.

This patchset belongs to a series that adds dns_domain attribute
functionality to ports.

DocImpact: Ports have a new dns_domain attribute, that takes precedence
           over networks dns_domain when published to an external DNS
           service.

APIImpact: Users can now specify a dns_domain attribute in port POST and
           PUT operations.

Change-Id: I02d8587d3a1f9f3f6b8cbc79dbe8df4b4b99a893
Partial-Bug: #1650678
2017-08-08 18:42:43 -05:00
Kevin Benton
37d33b2fcd Allow extension driver to provide multiple aliases
This allows extensions to supercede older extensions
if they provide all of the same functionality plus more.
This is used by the DNS domain port extension driver.

Change-Id: I3e91669a83e9e16039f4063bf54b511cec94cecc
Partial-bug: #1650678
2017-08-08 16:29:28 -07:00
Jenkins
9629bd1302 Merge "Degrade log message for missing fanout exchange to debug" 2017-08-08 20:21:30 +00:00
Jakub Libosvar
03c100b959 Fill device_info with port_security_enabled data
Firewall drivers check if port security is enabled. After ovo is sent
over the wire, the port_security_enabled is part of 'security' field.
The patch translates the RPC call from agent to server so the payload
containing port_security_enabled is at the same place.

We may consider implementing change of OVO field to contain boolean
directly.

Change-Id: I647343e84b41da63d7ffcc5a87f3dfa2036adc56
Closes-bug: #1605654
2017-08-08 19:42:09 +00:00
Swaminathan Vasudevan
8b4bb9c0b0 DVR: Configure centralized floatingips to snat_namespace.
This patch is the agent side patch that takes care of configuring
the centralized floatingips for the unbound ports in the snat_namespace.

Change-Id: I595ce4d6520adfd57bacbdf20ed03ffefd0b190a
Closes-Bug: #1583694
2017-08-08 10:44:45 -07:00
Jenkins
5d5ebd0bd9 Merge "Don't check full subnet body in test_filtering_shared_subnets" 2017-08-08 15:54:44 +00:00
Jenkins
d224effd26 Merge "Do not use prelude section for individual release notes" 2017-08-08 11:25:46 +00:00
Ihar Hrachyshka
242b63be23 Don't check full subnet body in test_filtering_shared_subnets
Plugins may add attributes to subnets, in which case simple equality
check will fail. Instead of comparing bodies, compare just IDs. It
should be enough to achieve the goal of the test case.

Change-Id: Iebc22f99285777df7de499c713b2bc1e38e0bd62
Closes-Bug: #1706986
2017-08-08 11:17:19 +00:00
Nguyen Phuong An
6847790414 [log]: Add validator to logging api
This patch added a validator to logging api for checking resource bound
(sg or port is exist or not, ...) and validating whether or not supporting
logging type on each port when we create a log object by specific port_id.

Co-Authored-By: Yushiro FURUKAWA <y.furukawa_2@jp.fujitsu.com>

Change-Id: I10f2441fc2c7bdbda51b05002549b235743a7deb
Partially-implements: blueprint security-group-logging
Related-Bug: #1468366
2017-08-08 13:25:40 +07:00
Nguyen Phuong An
39a9ed4c50 [log]: add driver manager to LoggingPlugin
This patch adds driver manger to LoggingPlugin to manage
logging drivers are enabled belong ML2 dirvers.

Co-Authored-By: Yushiro FURUKAWA <y.furukawa_2@jp.fujitsu.com>

Change-Id: I5a0f896c9ec7f670b662f16825feccbc07db19dd
Partially-implements: blueprint security-group-logging
Related-Bug: #1468366
2017-08-08 13:18:09 +07:00
Ihar Hrachyshka
1da78c924e tests: apply latest release milestone alembic scripts first
Before walking through migration scripts that belong to the release
under development, we should first execute all scripts for the latest
official release because it serves a convergence point. Without it, we
can't guarantee that calling --expand will succeed because some of new
scripts may depend on schema state that is defined by contract scripts.

Change-Id: I501b38900fb2f4409839ecd09be4d937cf20c6a9
Related-Bug: #1671634
2017-08-07 10:09:13 -07:00
Akihiro Motoki
12d6a3ea4c doc: Fix non-existing URLs
Change-Id: I72c1c0fcb7cc541b87b184b32f0797539b919a44
Closes-Bug: #1708394
2017-08-06 23:19:05 +00:00
Jenkins
37bb9a41c4 Merge "Exclude relnote from past releases from Pike relnotes" 2017-08-04 16:53:01 +00:00
Akihiro Motoki
010b133938 Do not use prelude section for individual release notes
prelude section is prepared for general comments about a release [1].
At now neutron release notes use prelude section randomly.
Some rel notes use it and some do not.

This commit drop or move prelude section in Pike release notes.

In addition, some guideline on writing a release note
to the release notes howto page.

Change-Id: I53fefcc3eed30700d095c77d9e000319668097e8
2017-08-04 07:17:52 +00:00
Akihiro Motoki
6f1ecf2466 Exclude relnote from past releases from Pike relnotes
reno includes release notes touched in a target release
even if they are added from past releases.
The recent release note cleanup I made as part of doc8 adoption
and some other cleanup touched release notes from past releases.
As a result, we see several number of release notes from past
release in the Pike release notes unexpectedly.

Also adds a warning note to the release notes howto page

Change-Id: I127f96896488e9992d9309d76055b4883f6a62f3
Closes-Bug: #1708560
2017-08-04 07:16:57 +00:00
Jenkins
9d616f075c Merge "Sinkhole workaround for old topics" 2017-08-04 02:36:58 +00:00