GroupBasedPolicy/ReleaseNotes/Liberty

GBP Liberty Release Notes

This is the third OpenStack Group Based Policy release. The release comprises of four components/repositories (Service, Client, Heat automation, Horizon UI) and is designed to work with OpenStack stable Liberty.

GBP Service Commits

• Adding metadata server and DNS SG default rules (https://github.com/openstack/group-based-policy/commit/09379c3ff72588841e1cde278965007c531cbe4d)
• Fix policy rule update UT to check specific SG rule (https://github.com/openstack/group-based-policy/commit/bdeae71869ab50dcaef3d2b01e7339dd9268436d)
• Default subnet-prefix-length should be consistent (https://github.com/openstack/group-based-policy/commit/ce8aaa652940443ff8b07616afc48470d8c82bb0)
• Factor out of adding router interface to subnet (https://github.com/openstack/group-based-policy/commit/205490db39712def510d99863a5f0e89e929199d)
• Add support for NAT to APIC mapping driver (https://github.com/openstack/group-based-policy/commit/01589d03fd498b2085531e17fcba9d29ffca83fd)
• GBP-specific L3 plugin for FIPs (https://github.com/openstack/group-based-policy/commit/51ab66ac2f27422c6570008ebe7b99f68d3492b3)
• use nat pool to allocate floating ips (https://github.com/openstack/group-based-policy/commit/30e4b93e4b99816f9b751968f63589bee3e479a5)
• Send network information for port along with GBP details (https://github.com/openstack/group-based-policy/commit/9b7158f41b76333c62897d978790feec0207c937)
• test external segment routes after precommit operation (https://github.com/openstack/group-based-policy/commit/b67ba311e82c323f3d3876101aa5c2c61fa7dff4)
• [apic-mapping]add vrf details to get_gbp_details rpc (https://github.com/openstack/group-based-policy/commit/f8ef437c1236f620eb0ca5a8eec6c0124dbbd30e)
• Reset oslo pinning (https://github.com/openstack/group-based-policy/commit/d27c8ecc718b778e9e9c101bce7579dc8d5dd1dc)
• Handle NAT-pools properly in APIC-mapping driver (https://github.com/openstack/group-based-policy/commit/fd4aa91d76e78ae35006a924007cd7ede10c5e9c)
• add get_vrf_details rpc method to apic mapping (https://github.com/openstack/group-based-policy/commit/a53a2db8e14e600cccdc230c155454ce62c74a75)
• Fix incorrect reporting of failed exercise scripts (https://github.com/openstack/group-based-policy/commit/9743fad6256e58b3858888ccff680bf68a78eae2)
• Change ignore-errors to ignore_errors (https://github.com/openstack/group-based-policy/commit/d52b4f62e5536670461b01d6f673d4aaad00e273)
• explicitly specify router_id when creating a floating ip (https://github.com/openstack/group-based-policy/commit/dab68def4ad157548aaee62056727a5617c49cd7)
• Adding gbpfunctest integration tests to contrib (https://github.com/openstack/group-based-policy/commit/db24ec181864531e5d20f9393c84948a822699c1)
• Admin or Provider tenant to own implicit SCIs (https://github.com/openstack/group-based-policy/commit/3becb34638a1ff52c29df6ddd721d9b945aa2200)
• Handle concurrent implicit L3P creation (https://github.com/openstack/group-based-policy/commit/7acac86b65f360b1b0dc230cc944c96f1366d9dd)
• proxy ptg extension (https://github.com/openstack/group-based-policy/commit/090f94a381e787b62bf17b8448ea2a29df76092e)
• add proxy ip pool to proxy group extension (https://github.com/openstack/group-based-policy/commit/a08befaf87b51649578518619c00eda3ea80ebae)
• rmd and ipd to support proxy_group extension (https://github.com/openstack/group-based-policy/commit/1ffd4ee7ab74ab608f2dcba74d7e983a3bc4111e)
• [apic-mapping] reference existing apic objects (https://github.com/openstack/group-based-policy/commit/5cdafa3173d48c4a0111ef124a5dbf48f762e2dd)
• Provide external fixed-ip properly when setting router gateway (https://github.com/openstack/group-based-policy/commit/b4f3a5828947f5f5757108d716f20a6b75097dd5)
• the mighty PEP8 hammer shall rise on functional tests (https://github.com/openstack/group-based-policy/commit/f4ddd6c2048469ae376f80cf59b9a83c8fe2b008)
• introducing traffic stitching plumber (https://github.com/openstack/group-based-policy/commit/203f544bf711c96f731ed1d4f44da6cc02d6057e)
• provider centric service chains (https://github.com/openstack/group-based-policy/commit/98e21c3c34f57b689e980a2f196b174da16a6034)
• [apic-mapping] support for traffic stitching plumber (https://github.com/openstack/group-based-policy/commit/fe7c90133087561e6aa6688f35f7ef34b20de73e)
• [apic-mapping] use pt description to point a different port (https://github.com/openstack/group-based-policy/commit/88ae6fb961fea02dd8650b2693a032c5e549337d)
• [APIC mapping] Support for multiple external-policies (https://github.com/openstack/group-based-policy/commit/ce87321b8f8c8dba28c538ff2d1c431870bb140d)
• [APIC mapping] Changes to implicit external networks (https://github.com/openstack/group-based-policy/commit/8e69d0b000398f70aef96572835429da2341c626)
• [apic-mapping] allow wildcard for protocol when creating a policy rule (https://github.com/openstack/group-based-policy/commit/2607f34e7e82ed45c849527edd4b2692c73b9c78)
• [apic-mapping] allow wildcard for pr [second-part] (https://github.com/openstack/group-based-policy/commit/86574d34b842c3dfbec9bc28f2434298a52e2148)
• [APIC mapping] Set 'Associated L3Out' for NAT BD (https://github.com/openstack/group-based-policy/commit/080d5ba47baa35183b859a093b41d81247c50b49)
• [apic_mapping] Notify port chain on FIP APIs (https://github.com/openstack/group-based-policy/commit/630c39d184fda1be5c3fabea104c0d0958680d53)
• api to notify ncp plugin when prs consumer added/removed (https://github.com/openstack/group-based-policy/commit/c5db82e429f2efe3bb9d3511f26bfa625f97879d)
• Update devstack exercise scripts with new CLI (https://github.com/openstack/group-based-policy/commit/0ef31645c4da17b3ac84ce124e4bbb0fadae5eea)
• [apic-mapping] send fixed ips as part of the opflex RPC (https://github.com/openstack/group-based-policy/commit/67a51dba8abd73f1ff9966be89e8dfdb6d98e53c)
• Fix to DB update for auto-allocated external fixed IP (https://github.com/openstack/group-based-policy/commit/19ba4e8aa909f9f3b9b745f717dc761f8dc25068)
• Fix router interface status (https://github.com/openstack/group-based-policy/commit/24d231ed18c682ae8ab5724e08d10c1408a63efe)
• Handle concurrent subnet allocation (https://github.com/openstack/group-based-policy/commit/280d00dbddffb894201b18c251b60c7002524e69)
• refactor SC mapping into a dedicated gbp driver (https://github.com/openstack/group-based-policy/commit/90de127ec75f2780d8d2d2bd10dc93e95c764377)
• use chain admin context for PT notifications (https://github.com/openstack/group-based-policy/commit/c2617cbc2d4e868b72aaace582abf2ffe31c7d87)
• [apic-mapping] enhance subnet info for opflex rpc (https://github.com/openstack/group-based-policy/commit/a0f523df4eca5e7757575836b189a3e38cf4785c)
• [apic-mapping] handle subnet concurrent allocation (https://github.com/openstack/group-based-policy/commit/f181f55381a12080c1727d5de0e27ccb6d56232f)
• [apic-mapping] do not attach routers to proxy subnets (https://github.com/openstack/group-based-policy/commit/87b8220de42bd25e485a460d32afd60c8c44a75a)
• Changing stackforge references (https://github.com/openstack/group-based-policy/commit/abb7358b528fd0ff97b210f69811c3baae260287)
• Fix UT breaking gate (https://github.com/openstack/group-based-policy/commit/171dde72ee48e67c3e7ef8c34b18c567e2d26e45)
• [APIC mapping] Allow disabling NAT for external-segments (https://github.com/openstack/group-based-policy/commit/d7ab9f3d44354539d7c4aa67b24dd4062b84b0d8)
• reject EP sharing during update (https://github.com/openstack/group-based-policy/commit/4af78586e8bec5da247492ef63833580de90f4d1)
• add cluster_id attribute to PTs for HA (https://github.com/openstack/group-based-policy/commit/8888c117cc681f8e233afb576c862bb0e7402812)
• Use elevated context when retrieving ports (https://github.com/openstack/group-based-policy/commit/6c8e5c864121df9384fc5f1b0a6394cef15e62bd)
• Fix port notification update in L3 plugin (https://github.com/openstack/group-based-policy/commit/b738606e3620fcfe4edeb6b5b409f46ab0d97c55)
• [apic-mapping] add details info based on owned addresses (https://github.com/openstack/group-based-policy/commit/ae4c08e08b61bac43ca2141bd00d139e492f7e90)
• [APIC mapping] Update IP address ownership info based on notifications (https://github.com/openstack/group-based-policy/commit/b09bb383ccf44a0c4ab6a4a0949f548dae79db34)
• [Apic Mapping] TScP with Admin owned Resources (https://github.com/openstack/group-based-policy/commit/841382061489579e99102d30113b85da83b2596b)
• do not notify unrelated chains on consumer added (https://github.com/openstack/group-based-policy/commit/51ebf62321e3b2629bee55fd6d2656d79898ed9d)
• delete proxy subnets when proxy is deleted (https://github.com/openstack/group-based-policy/commit/104396405bfa6882103e39796a53841f50bb94aa)
• [APIC mapping] Compare owned-addresses correctly (https://github.com/openstack/group-based-policy/commit/8487111de14400f165e935cdef0e1a0e32cdb551)
• [APIC mapping] Support pre-existing L3Outs (https://github.com/openstack/group-based-policy/commit/5d628c9f43a521891009740c086f9ec41d40abda)
• [apic-mapping] scope cluster master details by mac address (https://github.com/openstack/group-based-policy/commit/5ffaf36e113d97c233f77d2bdc50a6fd7873c6bd)
• [apic-mapping]gracefully fail get_gbp_details (https://github.com/openstack/group-based-policy/commit/75655771949ffedc7f1738514114d930649011f3)
• [apic-mapping] notify head of the chain correctly (https://github.com/openstack/group-based-policy/commit/fddce6c13a20d4dab8dd5877f1f6bc264c02419b)
• [apic-mapping] RPC-driven allocation of SNAT IPs (https://github.com/openstack/group-based-policy/commit/af2f450d08b5f0e0dc4c7f82beb6c31e8d66769d)
• [apic-mapping] scope ctx correctly on opflex RPC (https://github.com/openstack/group-based-policy/commit/b9dd34e5ff84027b539853b810796c881422aac4)
• Limit ML2 delete_network/subnet retries (https://github.com/openstack/group-based-policy/commit/86b4c6d42828ab5d4bc6d8b14d0e915d613fb2c7)
• [apic-mapping] Send ES name for SNAT auto alloc (https://github.com/openstack/group-based-policy/commit/5a5af2f942a7fffd1ac03c133db7108840ffd85c)
• [apic-mapping] avoid cached results for port notifications (https://github.com/openstack/group-based-policy/commit/dc1ef88175fcc59af3994afaa07170c13e9298bf)
• [apic-mapping] propagate promiscuous mode when in a cluster (https://github.com/openstack/group-based-policy/commit/4077c310aa677657bc146ad33609085381534fe0)
• Process only relevant PTG for SC instantiation on PTG create (https://github.com/openstack/group-based-policy/commit/ce31bd44eb4f62c3e88f09a8606eaf932061e7e9)
• Reject deletion of PRS in use by External Policy (https://github.com/openstack/group-based-policy/commit/155a8271ca08c37c459cc5f3415e527c5a348440)
• Update ODL Mapping (https://github.com/openstack/group-based-policy/commit/6de8aea66cfd18fbc96e6bb1a3ace412cd772992)
• management ptg lookup in NCP to use admin context (https://github.com/openstack/group-based-policy/commit/0777b6836ebea255ddeee823cbd81fdd436627af)
• Reject updating nodes in an in use ServiceChain Spec (https://github.com/openstack/group-based-policy/commit/fb3340528fc62a7f113cc8d10c38c90b2f4ad251)
• [APIC mapping] Set external routed domain for L3Outs (https://github.com/openstack/group-based-policy/commit/957b5614ec5395eb8a6c718cbd8621a58a8b98a6)
• [APIC mapping] Update operational status of floating-IP resource (https://github.com/openstack/group-based-policy/commit/b1b23c27e56914394c00f8999a60506d43e211ab)
• Use default bi direction for classifier (https://github.com/openstack/group-based-policy/commit/6bde94fa66dd1a3ac07b4cf1b63f20c10b39a502)
• Support IP protocol Numbers in GBP (https://github.com/openstack/group-based-policy/commit/346a760f51fbcfe359f7b405b0c0df58499de720)
• [apic-mapping] revert udp rules (https://github.com/openstack/group-based-policy/commit/50bb23377c627ec97e04169ac90882764c668d38)
• [apic-mapping] avoid snat duplicate on gbp-details (https://github.com/openstack/group-based-policy/commit/c6a04ecd7057de0b95fdc5713a879158cb6d2f5f)
• Fix the repository URL in the README file (https://github.com/openstack/group-based-policy/commit/50b53f1ce56a649d45fd74453aeda34c9ff6f4f8)
• Increase name attr len to 128 in API and 255 in DB (https://github.com/openstack/group-based-policy/commit/071add821835e8c1b338d8ce0cb177518201eaef)
• [apic-mapping] debugging chain overlapping ips (https://github.com/openstack/group-based-policy/commit/b048c61119d3a8a471a4fb6c3ec1b8c9f4f4bf40)
• [apic-mapping]Put real port IDs in ha table when proxy port (https://github.com/openstack/group-based-policy/commit/f3fc14c94b9b2d2ed57fdd6a029724c4df967b46)
• Avoid allocating multiple router gateway IPs (https://github.com/openstack/group-based-policy/commit/46a121339ffee90154cfc900a8991735746a4c11)
• [APIC mapping] Send correct host SNAT IP in get_gbp_details (https://github.com/openstack/group-based-policy/commit/f2c3b1478d6cb4fc3e9be8be35894ca557e401bc)
• [APIC mapping] Set external IP for L3Policy only once (https://github.com/openstack/group-based-policy/commit/d710a82b510a00ad897cfdd1cd5365996a31cdb9)
• Allow disabling of default route via DHCP (https://github.com/openstack/group-based-policy/commit/e5497c4b259e171bef2fb7b69add0c949ad337e8)
• validate l2p update at plugin level (https://github.com/openstack/group-based-policy/commit/e80abf5e007cf207ea94d3cb7cfef509ae17685c)
• [apic-mapping] create reverse rules for ICMP as needed (https://github.com/openstack/group-based-policy/commit/823df565f0532f7b969e66392dcacd5ec844b52d)
• Deprecated tox -downloadcache option removed (https://github.com/openstack/group-based-policy/commit/581dc0d07d9225f5a26396db0cd743fb636a94a9)
• port extra attribute extension for gbp mapping (https://github.com/openstack/group-based-policy/commit/0d5cedc413fc99461b39f2854475416679e4e2c1)
• [APIC mapping] Fix contract association for pre-existing external EPG (https://github.com/openstack/group-based-policy/commit/1105a01346e11bc0e5ad6b7c093365ec8ba272fd)
• remove python 2.6 trove classifier (https://github.com/openstack/group-based-policy/commit/ce9d11025ca567da7a7aeeca57b218618f4bdc61)
• Changing data type of 'config' column of 'sc_nodes' (https://github.com/openstack/group-based-policy/commit/c071c4ac704dfe8991a6f62cebac655f3a4f9844)
• Remove unused functional test setup (https://github.com/openstack/group-based-policy/commit/2dce1c2829f1b0e558059a0fa4e50643246ae393)
• Aligning with liberty dependencies (https://github.com/openstack/group-based-policy/commit/c806a88f3fa172e5fa94f3e58fb074a83e6ad966)
• Pin keystoneclient to liberty branch (https://github.com/openstack/group-based-policy/commit/3143af2781823f14dd6e8183876cb9ea7cb303c3)
• [APIC mapping] Update liberty dependencies (https://github.com/openstack/group-based-policy/commit/097a2cdaa52877a45d99d457b970b87693722325)
• Shared resources tests for gbpfunc (https://github.com/openstack/group-based-policy/commit/b37666b236ef5f665ee590f4f247b15cfcc6e8e6)
• Initializing proxy pool attrs from conf (https://github.com/openstack/group-based-policy/commit/d164bdcc46f83e0643451de8d2f9d7c7f60a8825)
• Point integration job to GBP stable liberty (https://github.com/openstack/group-based-policy/commit/8c833f5ab1df6e2c3851ea987b75ee2d5476a9a4)
• [APIC mapping] Allow more L3-policies to connect to external segment (https://github.com/openstack/group-based-policy/commit/1f0a82d6e594c47ea6d1a63bb0bc9c78aa4df829)
• [apic-mappic] do not enforce subnet check in shadow BD (https://github.com/openstack/group-based-policy/commit/6ca964f88e286dbc6b12f880025eb1bc421b39f2)
• [APIC mapping] Restrict creation of external EPGs to tenant (https://github.com/openstack/group-based-policy/commit/ca82a0a0e757e88238245467b1fd58aaa53bc935)
• [apic-mapping] retrieve the right subnets during PTG allocation (https://github.com/openstack/group-based-policy/commit/866a58212d0defcc3283927cd996d272cd4f18b6)
• Prevent deletion of NAT pool having floating IP (https://github.com/openstack/group-based-policy/commit/91bc8a4e65e5e28c7818807bf5d0f69e63b6dda7)
• [apic_mapping] NAT support for ASR router (https://github.com/openstack/group-based-policy/commit/f2580216050504f333d77580878b715252ab6324)