GroupBasedPolicy/ReleaseNotes/Liberty

GBP Liberty 版本说明

这是 OpenStack 基于组策略（Group Based Policy）的第三个版本。该版本由四个组件/仓库（服务、客户端、Heat 自动化、Horizon 用户界面）组成，旨在与 OpenStack 稳定的 Liberty 版本协同工作。

GBP 服务提交

• 添加元数据服务器和 DNS SG 默认规则 (https://github.com/openstack/group-based-policy/commit/09379c3ff72588841e1cde278965007c531cbe4d)
• 修复策略规则更新 UT 以检查特定 SG 规则 (https://github.com/openstack/group-based-policy/commit/bdeae71869ab50dcaef3d2b01e7339dd9268436d)
• 默认子网前缀长度应保持一致 (https://github.com/openstack/group-based-policy/commit/ce8aaa652940443ff8b07616afc48470d8c82bb0)
• 从子网添加路由器接口中抽离 (https://github.com/openstack/group-based-policy/commit/205490db39712def510d99863a5f0e89e929199d)
• 为 APIC 映射驱动程序添加 NAT 支持 (https://github.com/openstack/group-based-policy/commit/01589d03fd498b2085531e17fcba9d29ffca83fd)
• GBP 专属的 FIP L3 插件 (https://github.com/openstack/group-based-policy/commit/51ab66ac2f27422c6570008ebe7b99f68d3492b3)
• 使用 NAT 池分配浮动 IP (https://github.com/openstack/group-based-policy/commit/30e4b93e4b99816f9b751968f63589bee3e479a5)
• 随 GBP 详细信息一起发送端口的网络信息 (https://github.com/openstack/group-based-policy/commit/9b7158f41b76333c62897d978790feec0207c937)
• 预提交操作后测试外部段路由 (https://github.com/openstack/group-based-policy/commit/b67ba311e82c323f3d3876101aa5c2c61fa7dff4)
• [apic-mapping] 添加 vrf 详细信息到 get_gbp_details rpc (https://github.com/openstack/group-based-policy/commit/f8ef437c1236f620eb0ca5a8eec6c0124dbbd30e)
• 重置 oslo 锁定 (https://github.com/openstack/group-based-policy/commit/d27c8ecc718b778e9e9c101bce7579dc8d5dd1dc)
• 在 APIC 映射驱动程序中正确处理 NAT-池 (https://github.com/openstack/group-based-policy/commit/fd4aa91d76e78ae35006a924007cd7ede10c5e9c)
• 为 apic 映射添加 get_vrf_details rpc 方法 (https://github.com/openstack/group-based-policy/commit/a53a2db8e14e600cccdc230c155454ce62c74a75)
• 修复错误报告失败的练习脚本 (https://github.com/openstack/group-based-policy/commit/9743fad6256e58b3858888ccff680bf68a78eae2)
• 将 ignore-errors 更改为 ignore_errors (https://github.com/openstack/group-based-policy/commit/d52b4f62e5536670461b01d6f673d4aaad00e273)
• 创建浮动 IP 时明确指定 router_id (https://github.com/openstack/group-based-policy/commit/dab68def4ad157548aaee62056727a5617c49cd7)
• 将 gbpfunctest 集成测试添加到 contrib (https://github.com/openstack/group-based-policy/commit/db24ec181864531e5d20f9393c84948a822699c1)
• 管理员或提供者租户拥有隐式 SCI (https://github.com/openstack/group-based-policy/commit/3becb34638a1ff52c29df6ddd721d9b945aa2200)
• 处理并发隐式 L3P 创建 (https://github.com/openstack/group-based-policy/commit/7acac86b65f360b1b0dc230cc944c96f1366d9dd)
• 代理 ptg 扩展 (https://github.com/openstack/group-based-policy/commit/090f94a381e787b62bf17b8448ea2a29df76092e)
• 为代理组扩展添加代理 IP 池 (https://github.com/openstack/group-based-policy/commit/a08befaf87b51649578518619c00eda3ea80ebae)
• rmd 和 ipd 支持 proxy_group 扩展 (https://github.com/openstack/group-based-policy/commit/1ffd4ee7ab74ab608f2dcba74d7e983a3bc4111e)
• [apic-mapping] 引用现有 apic 对象 (https://github.com/openstack/group-based-policy/commit/5cdafa3173d48c4a0111ef124a5dbf48f762e2dd)
• 设置路由器网关时正确提供外部固定 IP (https://github.com/openstack/group-based-policy/commit/b4f3a5828947f5f5757108d716f20a6b75097dd5)
• 强大的 PEP8 锤子将敲击功能测试 (https://github.com/openstack/group-based-policy/commit/f4ddd6c2048469ae376f80cf59b9a83c8fe2b008)
• 引入流量缝合管道 (https://github.com/openstack/group-based-policy/commit/203f544bf711c96f731ed1d4f44da6cc02d6057e)
• 以提供者为中心的服务链 (https://github.com/openstack/group-based-policy/commit/98e21c3c34f57b689e980a2f196b174da16a6034)
• [apic-mapping] 支持流量缝合管道 (https://github.com/openstack/group-based-policy/commit/fe7c90133087561e6aa6688f35f7ef34b20de73e)
• [apic-mapping] 使用 pt 描述指向不同的端口 (https://github.com/openstack/group-based-policy/commit/88ae6fb961fea02dd8650b2693a032c5e549337d)
• [APIC mapping] 支持多个外部策略 (https://github.com/openstack/group-based-policy/commit/ce87321b8f8c8dba28c538ff2d1c431870bb140d)
• [APIC mapping] 对隐式外部网络的更改 (https://github.com/openstack/group-based-policy/commit/8e69d0b000398f70aef96572835429da2341c626)
• [apic-mapping] 创建策略规则时允许协议使用通配符 (https://github.com/openstack/group-based-policy/commit/2607f34e7e82ed45c849527edd4b2692c73b9c78)
• [apic-mapping] 允许 pr 使用通配符 [第二部分] (https://github.com/openstack/group-based-policy/commit/86574d34b842c3dfbec9bc28f2434298a52e2148)
• [APIC mapping] 为 NAT BD 设置“关联 L3Out” (https://github.com/openstack/group-based-policy/commit/080d5ba47baa35183b859a093b41d81247c50b49)
• [apic_mapping] 在 FIP API 上通知端口链 (https://github.com/openstack/group-based-policy/commit/630c39d184fda1be5c3fabea104c0d0958680d53)
• 当 prs 消费者添加/删除时通知 ncp 插件的 api (https://github.com/openstack/group-based-policy/commit/c5db82e429f2efe3bb9d3511f26bfa625f97879d)
• 使用新的 CLI 更新 devstack 练习脚本 (https://github.com/openstack/group-based-policy/commit/0ef31645c4da17b3ac84ce124e4bbb0fadae5eea)
• [apic-mapping] 作为 opflex RPC 的一部分发送固定 IP (https://github.com/openstack/group-based-policy/commit/67a51dba8abd73f1ff9966be89e8dfdb6d98e53c)
• 修复自动分配外部固定 IP 的数据库更新 (https://github.com/openstack/group-based-policy/commit/19ba4e8aa909f9f3b9b745f717dc761f8dc25068)
• 修复路由器接口状态 (https://github.com/openstack/group-based-policy/commit/24d231ed18c682ae8ab5724e08d10c1408a63efe)
• 处理并发子网分配 (https://github.com/openstack/group-based-policy/commit/280d00dbddffb894201b18c251b60c7002524e69)
• 将 SC 映射重构为专用 gbp 驱动程序 (https://github.com/openstack/group-based-policy/commit/90de127ec75f2780d8d2d2bd10dc93e95c764377)
• 为 PT 通知使用链管理员上下文 (https://github.com/openstack/group-based-policy/commit/c2617cbc2d4e868b72aaace582abf2ffe31c7d87)
• [apic-mapping] 增强 opflex rpc 的子网信息 (https://github.com/openstack/group-based-policy/commit/a0f523df4eca5e7757575836b189a3e38cf4785c)
• [apic-mapping] 处理子网并发分配 (https://github.com/openstack/group-based-policy/commit/f181f55381a12080c1727d5de0e27ccb6d56232f)
• [apic-mapping] 不要将路由器附加到代理子网 (https://github.com/openstack/group-based-policy/commit/87b8220de42bd25e485a460d32afd60c8c44a75a)
• 更改 stackforge 引用 (https://github.com/openstack/group-based-policy/commit/abb7358b528fd0ff97b210f69811c3baae260287)
• 修复 UT 破坏 gate 的问题 (https://github.com/openstack/group-based-policy/commit/171dde72ee48e67c3e7ef8c34b18c567e2d26e45)
• [APIC mapping] 允许为外部段禁用 NAT (https://github.com/openstack/group-based-policy/commit/d7ab9f3d44354539d7c4aa67b24dd4062b84b0d8)
• 更新期间拒绝 EP 共享 (https://github.com/openstack/group-based-policy/commit/4af78586e8bec5da247492ef63833580de90f4d1)
• 为 HA 添加 cluster_id 属性到 PTs (https://github.com/openstack/group-based-policy/commit/8888c117cc681f8e233afb576c862bb0e7402812)
• 检索端口时使用提升的上下文 (https://github.com/openstack/group-based-policy/commit/6c8e5c864121df9384fc5f1b0a6394cef15e62bd)
• 修复 L3 插件中的端口通知更新 (https://github.com/openstack/group-based-policy/commit/b738606e3620fcfe4edeb6b5b409f46ab0d97c55)
• [apic-mapping] 根据拥有地址添加详细信息 (https://github.com/openstack/group-based-policy/commit/ae4c08e08b61bac43ca2141bd00d139e492f7e90)
• [APIC mapping] 根据通知更新 IP 地址所有权信息 (https://github.com/openstack/group-based-policy/commit/b09bb383ccf44a0c4ab6a4a0949f548dae79db34)
• [Apic Mapping] TScP 与管理员拥有的资源 (https://github.com/openstack/group-based-policy/commit/841382061489579e99102d30113b85da83b2596b)
• 在添加消费者时不要通知不相关的链 (https://github.com/openstack/group-based-policy/commit/51ebf62321e3b2629bee55fd6d2656d79898ed9d)
• 删除代理时删除代理子网 (https://github.com/openstack/group-based-policy/commit/104396405bfa6882103e39796a53841f50bb94aa)
• [APIC mapping] 正确比较拥有的地址 (https://github.com/openstack/group-based-policy/commit/8487111de14400f165e935cdef0e1a0e32cdb551)
• [APIC mapping] 支持预先存在的 L3Outs (https://github.com/openstack/group-based-policy/commit/5d628c9f43a521891009740c086f9ec41d40abda)
• [apic-mapping] 按 mac 地址范围划分集群主站详细信息 (https://github.com/openstack/group-based-policy/commit/5ffaf36e113d97c233f77d2bdc50a6fd7873c6bd)
• [apic-mapping] 优雅地使 get_gbp_details 失败 (https://github.com/openstack/group-based-policy/commit/75655771949ffedc7f1738514114d930649011f3)
• [apic-mapping] 正确通知链头 (https://github.com/openstack/group-based-policy/commit/fddce6c13a20d4dab8dd5877f1f6bc264c02419b)
• [apic-mapping] RPC 驱动的 SNAT IP 分配 (https://github.com/openstack/group-based-policy/commit/af2f450d08b5f0e0dc4c7f82beb6c31e8d66769d)
• [apic-mapping] 在 opflex RPC 上正确范围 ctx (https://github.com/openstack/group-based-policy/commit/b9dd34e5ff84027b539853b810796c881422aac4)
• 限制 ML2 delete_network/subnet 重试 (https://github.com/openstack/group-based-policy/commit/86b4c6d42828ab5d4bc6d8b14d0e915d613fb2c7)
• [apic-mapping] 为 SNAT 自动分配发送 ES 名称 (https://github.com/openstack/group-based-policy/commit/5a5af2f942a7fffd1ac03c133db7108840ffd85c)
• [apic-mapping] 避免端口通知的缓存结果 (https://github.com/openstack/group-based-policy/commit/dc1ef88175fcc59af3994afaa07170c13e9298bf)
• [apic-mapping] 在集群中传播混杂模式 (https://github.com/openstack/group-based-policy/commit/4077c310aa677657bc146ad33609085381534fe0)
• 在 PTG 创建时仅处理与 SC 实例化相关的 PTG (https://github.com/openstack/group-based-policy/commit/ce31bd44eb4f62c3e88f09a8606eaf932061e7e9)
• 拒绝删除正在由外部策略使用的 PRS (https://github.com/openstack/group-based-policy/commit/155a8271ca08c37c459cc5f3415e527c5a348440)
• 更新 ODL 映射 (https://github.com/openstack/group-based-policy/commit/6de8aea66cfd18fbc96e6bb1a3ace412cd772992)
• NCP 中管理 ptg 查找使用管理员上下文 (https://github.com/openstack/group-based-policy/commit/0777b6836ebea255ddeee823cbd81fdd436627af)
• 拒绝更新正在使用的 ServiceChain Spec 中的节点 (https://github.com/openstack/group-based-policy/commit/fb3340528fc62a7f113cc8d10c38c90b2f4ad251)
• [APIC mapping] 为 L3Outs 设置外部路由域 (https://github.com/openstack/group-based-policy/commit/957b5614ec5395eb8a6c718cbd8621a58a8b98a6)
• [APIC mapping] 更新浮动 IP 资源的操作状态 (https://github.com/openstack/group-based-policy/commit/b1b23c27e56914394c00f8999a60506d43e211ab)
• 分类器使用默认双向 (https://github.com/openstack/group-based-policy/commit/6bde94fa66dd1a3ac07b4cf1b63f20c10b39a502)
• GBP 支持 IP 协议号 (https://github.com/openstack/group-based-policy/commit/346a760f51fbcfe359f7b405b0c0df58499de720)
• [apic-mapping] 恢复 udp 规则 (https://github.com/openstack/group-based-policy/commit/50bb23377c627ec97e04169ac90882764c668d38)
• [apic-mapping] 避免 gbp-details 上 snat 重复 (https://github.com/openstack/group-based-policy/commit/c6a04ecd7057de0b95fdc5713a879158cb6d2f5f)
• 修复 README 文件中的仓库 URL (https://github.com/openstack/group-based-policy/commit/50b53f1ce56a649d45fd74453aeda34c9ff6f4f8)
• 将 API 中 name 属性长度增加到 128，数据库中增加到 255 (https://github.com/openstack/group-based-policy/commit/071add821835e8c1b338d8ce0cb177518201eaef)
• [apic-mapping] 调试链重叠 IP (https://github.com/openstack/group-based-policy/commit/b048c61119d3a8a471a4fb6c3ec1b8c9f4f4bf40)
• [apic-mapping] 在代理端口时将真实端口 ID 放入 ha 表 (https://github.com/openstack/group-based-policy/commit/f3fc14c94b9b2d2ed57fdd6a029724c4df967b46)
• 避免分配多个路由器网关 IP (https://github.com/openstack/group-based-policy/commit/46a121339ffee90154cfc900a8991735746a4c11)
• [APIC mapping] 在 get_gbp_details 中发送正确的主机 SNAT IP (https://github.com/openstack/group-based-policy/commit/f2c3b1478d6cb4fc3e9be8be35894ca557e401bc)
• [APIC mapping] 仅为 L3Policy 设置一次外部 IP (https://github.com/openstack/group-based-policy/commit/d710a82b510a00ad897cfdd1cd5365996a31cdb9)
• 允许通过 DHCP 禁用默认路由 (https://github.com/openstack/group-based-policy/commit/e5497c4b259e171bef2fb7b69add0c949ad337e8)
• 在插件级别验证 l2p 更新 (https://github.com/openstack/group-based-policy/commit/e80abf5e007cf207ea94d3cb7cfef509ae17685c)
• [apic-mapping] 根据需要为 ICMP 创建反向规则 (https://github.com/openstack/group-based-policy/commit/823df565f0532f7b969e66392dcacd5ec844b52d)
• 已删除已弃用的 tox -downloadcache 选项 (https://github.com/openstack/group-based-policy/commit/581dc0d07d9225f5a26396db0cd743fb636a94a9)
• 用于 gbp 映射的端口额外属性扩展 (https://github.com/openstack/group-based-policy/commit/0d5cedc413fc99461b39f2854475416679e4e2c1)
• [APIC mapping] 修复预先存在的外部 EPG 的契约关联 (https://github.com/openstack/group-based-policy/commit/1105a01346e11bc0e5ad6b7c093365ec8ba272fd)
• 删除 python 2.6 trove 分类器 (https://github.com/openstack/group-based-policy/commit/ce9d11025ca567da7a7aeeca57b218618f4bdc61)
• 更改 'sc_nodes' 表中 'config' 列的数据类型 (https://github.com/openstack/group-based-policy/commit/c071c4ac704dfe8991a6f62cebac655f3a4f9844)
• 删除未使用的功能测试设置 (https://github.com/openstack/group-based-policy/commit/2dce1c2829f1b0e558059a0fa4e50643246ae393)
• 与 liberty 依赖项对齐 (https://github.com/openstack/group-based-policy/commit/c806a88f3fa172e5fa94f3e58fb074a83e6ad966)
• 将 keystoneclient 锁定到 liberty 分支 (https://github.com/openstack/group-based-policy/commit/3143af2781823f14dd6e8183876cb9ea7cb303c3)
• [APIC mapping] 更新 liberty 依赖项 (https://github.com/openstack/group-based-policy/commit/097a2cdaa52877a45d99d457b970b87693722325)
• gbpfunc 的共享资源测试 (https://github.com/openstack/group-based-policy/commit/b37666b236ef5f665ee590f4f247b15cfcc6e8e6)
• 从 conf 初始化代理池属性 (https://github.com/openstack/group-based-policy/commit/d164bdcc46f83e0643451de8d2f9d7c7f60a8825)
• 将集成作业指向 GBP 稳定 liberty (https://github.com/openstack/group-based-policy/commit/8c833f5ab1df6e2c3851ea987b75ee2d5476a9a4)
• [APIC mapping] 允许更多 L3 策略连接到外部段 (https://github.com/openstack/group-based-policy/commit/1f0a82d6e594c47ea6d1a63bb0bc9c78aa4df829)
• [apic-mappic] 不在影子 BD 中强制执行子网检查 (https://github.com/openstack/group-based-policy/commit/6ca964f88e286dbc6b12f880025eb1bc421b39f2)
• [APIC mapping] 将外部 EPG 的创建限制到租户 (https://github.com/openstack/group-based-policy/commit/ca82a0a0e757e88238245467b1fd58aaa53bc935)
• [apic-mapping] 在 PTG 分配期间检索正确的子网 (https://github.com/openstack/group-based-policy/commit/866a58212d0defcc3283927cd996d272cd4f18b6)
• 阻止删除拥有浮动 IP 的 NAT 池 (https://github.com/openstack/group-based-policy/commit/91bc8a4e65e5e28c7818807bf5d0f69e63b6dda7)
• [apic_mapping] ASR 路由器的 NAT 支持 (https://github.com/openstack/group-based-policy/commit/f2580216050504f333d77580878b715252ab6324)