* Update neutron-fwaas from branch 'master'
to 553b23e9aa29d3597b1b69ce8925e37b5011fb69
- Merge "Remove translation sections from setup.cfg"
- Remove translation sections from setup.cfg
These translation sections are not needed anymore, Babel can generate
translation files without them.
Change-Id: I7eb99b96ea1e9a1a96e28c53760d9d747670d6e4
* Update neutron-fwaas from branch 'master'
to 69e4ee16f217fe809af67ebc4ff7eeaa2cb6bdf7
- Merge "disable nonstandard-exception"
- disable nonstandard-exception
Now we use neutron-lib as the standard exceptions.
Change-Id: Ie7dac7968626fe3ce775dfd0444d082d90cf5e71
* Update neutron-fwaas from branch 'master'
to 64d7cd2d601b8d31e61d03e53f39adac09e553dc
- Update master for stable/2024.1
Add file to the reno documentation build to show release notes for
stable/2024.1.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2024.1.
Sem-Ver: feature
Change-Id: If74eaf7f7d10994ec91e2ec676bb6eb4b2f484a6
* Update neutron-fwaas from branch 'master'
to 293df0f63f14d6c3e89f51a383dec6aa0a5ef0ad
- Merge "tox: Drop envdir"
- tox: Drop envdir
tox now always recreates an env although the env is shared using envdir
options.
~~~
$ tox -e genpolicy
genpolicy: recreate env because env type changed from
{'name': 'genconfig', 'type': 'VirtualEnvRunner'} to
{'name': 'genpolicy', 'type': 'VirtualEnvRunner'}
~~~
According to the maintainer of tox, this functionality is not intended
to be supported.
https://github.com/tox-dev/tox/issues/425#issuecomment-1011944293
Change-Id: I069f590d873ea7a0e689936664c07843c2706fd5
* Update neutron-fwaas from branch 'master'
to 625b6526ca91137068af404b5db5e1db1052898a
- Bump hacking
hacking 3.0.x is too old.
Try to synchronize pylint ignore and extension list with
other Networking projects.
With new pip the order of packages is not relevant, so the
related comment from requirements.txts is removed, see pip
documentation:
https://pip.pypa.io/en/stable/cli/pip_install/#installation-order
Change-Id: I99a2d30149088d3d71d56351d180e665c38686ef
* Update neutron-fwaas from branch 'master'
to 3fe92291f257a09607e31c949a08fca13a2110d1
- Update python classifier with py3.10 & py3.11 in setup.cfg
Change-Id: I6b9cc03d902e36f51b31ad2e39ae13a7acbb1b62
* Update neutron-fwaas from branch 'master'
to 75228edb41d355a319743e7e5636afd88e63bd26
- Remove usage of LBaaS constants
This removed usage of LBaaS constants from unit tests. LBaaS was
retired some time ago and these constants will be removed.
Change-Id: I2951c866cdfbd88bcba9fb8d299f592cd6a44dff
* Update neutron-fwaas from branch 'master'
to 9c6df04c78952bb653bac0e7aed15b00d60f2dd7
- py311: Add py311 job and sqlalchemy-main job to weekly
As an extra rename dsvm-fullstack to dsvm-fullstack-gate
Change-Id: Ib9627a46f95dec0727ccba1d819b84f6ef00041a
* Update neutron-fwaas from branch 'master'
to cfa0b34476a5cd9c4d570b6d0023ff49b781d8d7
- [sqlalchemy-20] Replace the context writer/reader
This patch replaces the old DB contexts and removes the subtransactions.
Change-Id: I9ac48eeba9f7d5d01153edb4b2f3341008ac2e01
* Update neutron-fwaas from branch 'master'
to a4284e4ee67663c64ad265a0f96cfae79cc4d050
- Remove the "sitepackages" in the extra arguments
This option is not needed since [1], Also set
tempest_plugins var to setup neutron-tempest-plugin
in tempest venv.
[1] https://review.opendev.org/c/openstack/devstack/+/558930
Change-Id: I595f81ac10443b6484b8b0bc0a12b5b58e75044f
* Update neutron-fwaas from branch 'master'
to 960530916d8514662ed81e0f9879b5e0e8cc01fa
- Update master for stable/2023.2
Add file to the reno documentation build to show release notes for
stable/2023.2.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.2.
Sem-Ver: feature
Change-Id: I5f7c8b7b019852558289e94dd18d4867b033b3cb
* Update neutron-fwaas from branch 'master'
to 3fcf1b8246def319fd4cc4a840b9be0b951b54e9
- Merge "Firewall group associated with ports is not allowed to be deleted"
- Firewall group associated with ports is not allowed to be deleted
Currently, we determine that the firewall group is in use based on
its ACTIVE status. But the firewall group may have just updated
the port and is currently PENDING_UPDATE status, deletion should
not be allowed at this time.
This patch changes the judgment method for deleting firewall
groups, no longer based on their status. But like other neutron
resources, based on whether or not they are associated.
Closes-Bug: #2018967
Depends-On: https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/883826
Change-Id: Ib7ab0daf9f6de45125ffc9408f865fc0964ff339
* Update neutron-fwaas from branch 'master'
to 193d1e27661438e11a44b379367d56affba79b21
- Use unittest.mock instead of mock
The mock third party library was needed for mock support in py2
runtimes. Since we now only support py38 and later, we can use the
standard lib unittest.mock module instead.
Change-Id: I009b6e65424ba3b662949baa1226fbf0ff14af80
* Update neutron-fwaas from branch 'master'
to a3efd32a864b609512ead366e099b2034bbacd7d
- Merge "[alembic] Alembic operations require keywords only arguments"
- [alembic] Alembic operations require keywords only arguments
Since [1] (release 1.11.0), the Alembic operations "now enforce
keyword-only arguments as passed as keyword and not positionally"
(from the commit message).
This change is compatible with the previous versions (as confirmed
in the CI).
[1]df75e85489
Closes-Bug: #2019948
Change-Id: Iedf9a47a80a2775f73e7873ce3e55c4152d0f564
* Update neutron-fwaas from branch 'master'
to 768937b0d7e7301092af189701f6adca49d3168c
- Merge "Remove Exception Definition in fwaas_v2 Extension"
- Remove Exception Definition in fwaas_v2 Extension
These exception definitions are already in neutral-lib.
And it has already been directly referenced in neutron lib
in the code.
Change-Id: I9f0d5efc3d86bdab97a188ea880780b19e2a7e43
* Update neutron-fwaas from branch 'master'
to 52539bc57819a12ad3699954cc3c1e87d38158eb
- Merge "notify the plugin only on status updated"
- notify the plugin only on status updated
If the status of the firewall group is consistent with the status
to be updated, there is no need to notify the plugin to update the
status.
The processing of the agent requires a certain amount of time. If
firewall group is updated during this period, updating the firewall
group status at this time may cause the firewall group to be in an
incorrect state.
Partial-Bug: #2021457
Change-Id: I316827259367d78d7dbb57888ad41408d44c43f6
* Update neutron-fwaas from branch 'master'
to 3b4e1bdda1cd8cd76ecc6ffdfc6c72ea35fa7e18
- Support standard_attrs for fwaas resources
Now, this patch will support standard_attrs for
firewall_group/firewall_rule/firewall_policy.
Closes-Bug: #1986906
Change-Id: Ib7b06d604a0950a104215bcf4386e14b77d20d12
* Update neutron-fwaas from branch 'master'
to e479c1a1d6be2f3d15f22e70290be8b936a30815
- Fix issues due to recent RBAC changes
Neutron recently merged a commit enabling secure rbacs by default
[1], breaking several unit tests of networking-fwaas.
This patch changes the necessary test calls to be admin and
requires neutron >= 23.0.0.0b2.
[1]670cc383e0
Related-Bug: #2019097
Change-Id: I60ad379f9fc94919581f461fd6a731cfe4baba30
* Update neutron-fwaas from branch 'master'
to 70d3174f8cdd611e8f9fa94bdce34adbff0fd173
- Use neutron-lib policy rules
Change-Id: Iac29a8dd4888eaaf5ff833d840953a5b92bd56e8
* Update neutron-fwaas from branch 'master'
to bc64e848517f3069cebf37c8a3f9737d82d523d5
- Update master for stable/2023.1
Add file to the reno documentation build to show release notes for
stable/2023.1.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/2023.1.
Sem-Ver: feature
Change-Id: I63a4a2131a6d569a120346dc20e8a413cdae93f4
* Update neutron-fwaas from branch 'master'
to 230e9bf38c97c0e243d1c8bd86bbd4b078bdce12
- Merge "Use upper-constraints in docs job"
- Use upper-constraints in docs job
Since we use usedevelop=True, as a result neutron-fwaas
installation happens at 'develop-inst' phase and it installs
requirements from requirements.txt without considering
tox constraints, This can lead to issue where broken
requirements are installed in docs job and as a result
it will fail.
In order to get constraints be considered for this case, add
requirements.txt to deps for docs env(same as [1]).
[1 https://review.opendev.org/q/Ic8f6472fe708d12f8fc129729465367083e1095a
Change-Id: Iea9556f6f025ad2f3dfa38fd401aa64414bd561f
* Update neutron-fwaas from branch 'master'
to 9aef6c4e038c82b00ccaa70c6d15196c98d8d0b8
- [sqlalchemy-20] The Connection.connect() method is considered legacy
Change-Id: I5eaf60426e10c15ac16800ce1962d6690ff80f92
Related-Bug: #2008227
* Update neutron-fwaas from branch 'master'
to e18ff58141bee6bee9d889878a4730ffcc937ccf
- Merge "Remove the convert_to functionality"
- Remove the convert_to functionality
'convert_to_string' has been added to neutron-lib and apply for
firewall-rule[1], we can remove in neutron-fwaas.
[1] https://review.opendev.org/c/openstack/neutron-lib/+/486133
Change-Id: I73a92dee952654bffa20620ede134acb5b28f95d
* Update neutron-fwaas from branch 'master'
to fc5531e978cd1e789e1e849eef102bb8ae797000
- Add get_firewall_groups_count method
In some logs before other SqlAlchemy tracebacks the missing of
this method is reported.
Change-Id: I36b2083ab3432080857d8ce97ea96f9b5acc87fe
Related-Bug: #2006683
* Update neutron-fwaas from branch 'master'
to a68f48916376d9c2f46751d08729f7b67970f18f
- CI: add neutron and neutron-lib to docs required-projects
Change-Id: Ic88902271fa84c8e8f73d5b34808a0ac43a45200
* Update neutron-fwaas from branch 'master'
to e7518f6fcf6237977576d73f71887151fe2dbb5b
- tox4: Add ignore_basepython_conflict = True to tox.ini
With latest tox (>4.0.15) python version conflicted with base
python. Adding ignore_basepython_conflict = True solves this
issue.
Change-Id: I4711cdb1741c0348bc81049be53a5480945e7e12
* Update neutron-fwaas from branch 'master'
to 9326c70da552e9a27c0115e6d696cfa3b504e39d
- Remove note about migration from lib/neutron-legacy to lib/neutron
In [1] we finally got rid of the unfinished lib/neutron module and kept
only lib/neutron-legacy. It's renamed to lib/neutron now and it's the
only neutron related module in Devstack.
So this patch removes left over todo comments about things to do when
migration to the new lib/neutron module will be finished.
[1] https://review.opendev.org/c/openstack/devstack/+/865014
Change-Id: I7913f4b0426624c1486efd027d6c412dfa296a06
* Update neutron-fwaas from branch 'master'
to d248ef3694b35e3dc81bdde9f7e3b2425b2e7380
- Merge "Remove reference to 'all-plugin' tox environment"
- Remove reference to 'all-plugin' tox environment
The 'all-plugin' tox environment was deprecated by this patch [1].
Instead of the 'all-plugin' it is recommended to use the 'all' tox
environment.
[1] https://review.opendev.org/c/openstack/tempest/+/543974
Change-Id: I8981592bf8c4e812c72b446e9d9fdeaaaa8c4537
* Update neutron-fwaas from branch 'master'
to a343e4f56f0e6899f88eda459fea6d3ecd3c3440
- Switch to 2023.1 Python3 unit tests and generic template name
This is an automatically generated patch to ensure unit testing
is in place for all the of the tested runtimes for antelope. Also,
updating the template name to generic one.
See also the PTI in governance [1].
[1]: https://governance.openstack.org/tc/reference/project-testing-interface.html
Change-Id: I7847ca8d6760745ae6fc85748de7248fb3e05c52
* Update neutron-fwaas from branch 'master'
to e629c3565668e344e31db719fd3c50079a69a820
- Update master for stable/zed
Add file to the reno documentation build to show release notes for
stable/zed.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/zed.
Sem-Ver: feature
Change-Id: I37f7771e52e7f6d624bedca57b8c5186bf6be0cb
* Update neutron-fwaas from branch 'master'
to 553e6b64110d573a08a5470c00dfa282ac72b0b9
- Adopt to latest VlanManager and oslo.db changes
The work for making routed networks work with multiple segments per
host, introduced new signature for VlanManager.get, requesting
segmentation_id, make neutron-fwaas code compatible with it.
With oslo.db 12.1.0 some unit tests started to fail, with using the
CONTEXT_R/W session we can fix it.
Adopt dsvm-functional target name as [0] changed in Neutron, so the new
name of the target is dsvm-functional-gate.
[0]: https://review.opendev.org/c/openstack/neutron/+/856262
Change-Id: Ie7459974f6f2358c8d9c37e66aa9cda530ecefc0
Related-Bug: #1956435
Related-Bug: #1764738
* Update neutron-fwaas from branch 'master'
to 965ac6bcdbe743547c83a3d38dead925b14fbeb7
- Merge "Use ovs constants from neutron-lib"
- Use ovs constants from neutron-lib
ovs constants are being dropped from neutron repo[1] as
those are available in neutron-lib since 2.19.0.
This patch updates minimum required version of neutron-lib
and switch to use ovs_constants from neutron-lib.
[1] https://review.opendev.org/c/openstack/neutron/+/797121
[2] https://review.opendev.org/c/openstack/neutron-lib/+/822131
Change-Id: Ida899e6fc709d3a946934e3ad5e20499380189de
* Update neutron-fwaas from branch 'master'
to a1c6c7c1c69c9d4a5feb1b7eb6e8d7f229f794b3
- Merge "Cleanup py27 support"
- Cleanup py27 support
This repo is now testing only with Python 3, so let's make
a few cleanups:
- Remove python 2.7 stanza from setup.py
Change-Id: I81159c58b7513ce6a338598209039752c0cced77
* Update neutron-fwaas from branch 'master'
to 6fe8024fb6f52034202b01622b17f8c929807dea
- Merge "Bump pyroute2 version to 0.7.2"
- Bump pyroute2 version to 0.7.2
pyroute2 version 0.6.x instead of one monolithic package pyroute2
is broken down into several, minimizing requirements of each
package[1]. but verion 0.7.x goes back to one monolithic package.
Avoid using version 0.6.x, bump pyroute2 version >=0.7.2(version
0.7.1 contains bugs[2]).
[1] https://github.com/svinota/pyroute2/discussions/786
[2] https://review.opendev.org/c/openstack/requirements/+/850295
Change-Id: I3149804aacf013292bd6e6559bb1e8ceb2d7a6f2
* Update neutron-fwaas from branch 'master'
to 1a73c60ea628232c4d4c949170c9e3b4a5980a13
- Merge "Add libczmq4 to bindep for testing on jammy"
- Add libczmq4 to bindep for testing on jammy
py310 job is failing for fwaas on jammy, adding libczmq4 to bindep can
solve the issue.
Change-Id: Ie23b9dee179d11cee34f892b9eb86be36d71aab0
* Update neutron-fwaas from branch 'master'
to eed9348789d4c5030ffe7580e802cfbb4c9ab5b0
- Add weekly jobs
Add jobs to the weekly periodic pipeline (see [1]).
Current jobs to be run weekly: openstack-tox-py39,
neutron-fwaas-functional and neutron-tempest-plugin-fwaas.
[1]: https://opendev.org/zuul/project-config/src/branch/master/zuul.d/pipelines.yaml#L130
Change-Id: I28c707d1a0c633563dab1de8a69c823f6d445bc1
* Update neutron-fwaas from branch 'master'
to b126f4224addced1c7f4f8608562bad5f134020f
- Remove usage of six
Remove six-library Replace the following items with Python 3 style code.
- six.six.add_metaclass
- six.PY2
- requirement.txt
Change-Id: Ib87394e41cdba7fc57e6ae6ed08ba1f84465441e
* Update neutron-fwaas from branch 'master'
to e4fbbaae0806983b0806ba1201ed88bf6dfe9ed8
- Merge "Remove usage of six"
- Remove usage of six
Remove six-library Replace the following items with Python 3 style code.
- six.iteritems
- six.string_types
Change-Id: I102520d28c9189a38cd1760b040eecdd4046b16f
* Update neutron-fwaas from branch 'master'
to fa3ee866107660c5c2e954b15c7adc88149e31f4
- Merge "setup.cfg: Replace dashes with underscores"
- setup.cfg: Replace dashes with underscores
Setuptools v54.1.0 introduces a warning that the use of
dash-separated options in 'setup.cfg' will not be supported
in a future version [1].
Get ahead of the issue by replacing the dashes with underscores.
Without this, we see 'UserWarning' messages
like the following on new enough
versions of setuptools:
UserWarning: Usage of dash-separated 'description-file' will not be
supported in future versions. Please use the underscore name
'description_file' instead
[1] https://github.com/pypa/setuptools/commit/a2e9ae4cb
Change-Id: If3a6ae3ae3d8d4e87fcb864ba2edf4d1aba6b25e
* Update neutron-fwaas from branch 'master'
to 64a02d2e98cd08acc775d056dc97bc00b1473424
- [doc]remove warning for "deprecate this project"
We have revived the neutron-fwaas project[1], we shoulod remove
the warning in README.rst.
[1] https://review.opendev.org/c/openstack/neutron-fwaas/+/828149
Change-Id: Ib0e091cd594d2344b57c883dd01e1b6e7d7e4bf2
* Update neutron-fwaas from branch 'master'
to b7be99c14761e7f08c319a1d875692a975b937db
- Remove "distutils" library
Library "distutils" will be marked as deprecated in Python 3.10:
https://peps.python.org/pep-0386/
This patch does the following replacements, that provide the same
functionality and API:
- distutils.spawn.find_executable -> shutil.which
Change-Id: Ib9cf36a70b6e5aba93f87e6be5c2636599166de2
Closes-Bug: #1973780
* Update neutron-fwaas from branch 'master'
to ba0a036469947477a1da8d5427413d22a68193b0
- Add the corresponding DB context to all SQL transactions
Neutron code migrated to SQLAlchemy 2.0[1], the goal of this
patch is to make the fwaas plugin code compliant with
SQLAlchemy 2.0.
[1] https://review.opendev.org/c/openstack/neutron/+/833247
Related-Bug: #1964575
Change-Id: If3e996740d4b5024e9c798227d0a58ceb09eb1d6
* Update neutron-fwaas from branch 'master'
to 3bbcc5f8bb1cd9e6526ac5db995ad87cfa8e9bde
- Changed minversion in tox to 3.18.0
The patch bumps min version of tox to 3.18.0 in order to
replace tox's whitelist_externals by allowlist_externals option:
https://github.com/tox-dev/tox/blob/master/docs/changelog.rst#v3180-2020-07-23
Change-Id: Ice25307cb403768f3a7909395773ee38154f46ec
* Update neutron-fwaas from branch 'master'
to 1b4a84527c2a9d0d4ecd32afd4cee634e7aa635f
- Update python testing as per zed cycle teting runtime
In Zed cycle, we have dropped the python 3.6/3.7[1] testing
and its support. Add release notes and update the python
classifier for the same.
[1] https://governance.openstack.org/tc/reference/runtimes/zed.html
Change-Id: Ib04b560408ccf22c86e899e15fbcbe86b53f636e
* Update neutron-fwaas from branch 'master'
to 28ba8cc6ca2e8503846e483cf60ae2aebd31472c
- Merge "Fix error when apply rule with dst port large than src port"
- Fix error when apply rule with dst port large than src port
When apply firewall group to a port with rule have dest port large than
source port, neutron-openvswitch-agent raise error 'port_max' is smaller
than 'port_min'. It because key 'port_range_max' is assigned by
source_port_range_max. Fix hard code 'port_range_max' to key_max.
Change-Id: I32d9efd857932547a13d275b8a4f294e03fe7535
Closes-Bug: #1869121