neutron

fwaas_v2 - unable to associate port with firewall (PXC strict mode)

Bug #1831986 reported by James Page on 2019-06-07

This bug affects 4 people

	Status	Importance	Assigned to
Ubuntu Cloud Archive	Fix Released	Medium	Unassigned
Rocky	Won't Fix	Medium	Unassigned
Stein	Fix Released	Medium	Unassigned
Train	Fix Released	Medium	Unassigned
neutron	In Progress	Undecided	James Page
neutron-fwaas (Ubuntu)	Fix Released	Medium	Unassigned
Disco	Won't Fix	Medium	Unassigned
Eoan	Fix Released	Medium	Unassigned

Bug Description

[Impact]
Unable to associate ports with a firewall under FWaaS v2

[Test Case]
Deploy OpenStack (stein or Later) using Charms
Create firewall policy, apply to router - failure as unable to associate port with policy in underlying DB

[Regression Potential]
Medium; the proposed fix has not been accepted upstream as yet (discussion ongoing due to change of database migrations).

[Original Bug Report]
Impacts both Stein and Rocky (although rocky does not enable v2 just yet).

542 a9761fa9124740028d0c1d70ff7aa542] DBAPIError exception wrapped from (pymysql.err.InternalError) (1105, 'Percona-XtraDB-Cluster prohibits use of DML command on a table (neutron.firewall_group_port_associations_v2) without an explicit primary key with pxc_strict_mode = ENFORCING or MASTER') [SQL: 'DELETE FROM firewall_group_port_associations_v2 WHERE firewall_group_port_associations_v2.firewall_group_id = %(firewall_group_id_1)s'] [parameters: {'firewall_group_id_1': '85a277d0-ebaf-4a5d-9d45-6a74b8f54372'}] (Background on this error at: http://sqlalche.me/e/2j85): pymysql.err.InternalError: (1105, 'Percona-XtraDB-Cluster prohibits use of DML command on a table (neutron.firewall_group_port_associations_v2) without an explicit primary key with pxc_strict_mode = ENFORCING or MASTER')
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters Traceback (most recent call last):
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-packages/sqlalchemy/engine/base.py", line 1193, in _execute_context
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters context)
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-packages/sqlalchemy/engine/default.py", line 509, in do_execute
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters cursor.execute(statement, parameters)
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-packages/pymysql/cursors.py", line 165, in execute
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters result = self._query(query)
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-packages/pymysql/cursors.py", line 321, in _query
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters conn.query(q)
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-packages/pymysql/connections.py", line 860, in query
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters self._affected_rows = self._read_query_result(unbuffered=unbuffered)
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-packages/pymysql/connections.py", line 1061, in _read_query_result
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters result.read()
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-packages/pymysql/connections.py", line 1349, in read
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters first_packet = self.connection._read_packet()
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-packages/pymysql/connections.py", line 1018, in _read_packet
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters packet.check_error()
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-packages/pymysql/connections.py", line 384, in check_error
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters err.raise_mysql_exception(self._data)
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-packages/pymysql/err.py", line 107, in raise_mysql_exception
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters raise errorclass(errno, errval)
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters pymysql.err.InternalError: (1105, 'Percona-XtraDB-Cluster prohibits use of DML command on a table (neutron.firewall_group_port_associations_v2) without an explicit primary key with pxc_strict_mode = ENFORCING or MASTER')
2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters

ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: neutron-server 2:14.0.0-0ubuntu1.1~cloud0 [origin: Canonical]
ProcVersionSignature: Ubuntu 4.15.0-51.55-generic 4.15.18
Uname: Linux 4.15.0-51-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.6
Architecture: amd64
CrashDB:
{
                "impl": "launchpad",
                "project": "cloud-archive",
                "bug_pattern_url": "http://people.canonical.com/~ubuntu-archive/bugpatterns/bugpatterns.xml",
             }
Date: Fri Jun 7 10:22:18 2019
Ec2AMI: ami-000005f0
Ec2AMIManifest: FIXME
Ec2AvailabilityZone: nova
Ec2InstanceType: m1.blue
Ec2Kernel: unavailable
Ec2Ramdisk: unavailable
PackageArchitecture: all
ProcEnviron:
TERM=screen-256color
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=C.UTF-8
SHELL=/bin/bash
SourcePackage: neutron
UpgradeStatus: No upgrade log present (probably fresh install)
mtime.conffile..etc.default.neutron-server: 2019-06-07T09:50:57.855385

See original description

Tags:

Revision history for this message

James Page (james-page) wrote on 2019-06-07:

Dependencies.txt Edit (10.0 KiB, text/plain; charset="utf-8")
ProcCpuinfoMinimal.txt Edit (1.0 KiB, text/plain; charset="utf-8")
modified.conffile..etc.default.neutron-server.txt Edit (319 bytes, text/plain; charset="utf-8")

summary:

- 542 a9761fa9124740028d0c1d70ff7aa542] DBAPIError exception wrapped from
- (pymysql.err.InternalError) (1105, 'Percona-XtraDB-Cluster prohibits use
- of DML command on a table (neutron.firewall_group_port_associations_v2)
- without an explicit primary key with pxc_strict_mode = ENFORCING or
- MASTER') [SQL: 'DELETE FROM firewall_group_port_associations_v2 WHERE
- firewall_group_port_associations_v2.firewall_group_id =
- %(firewall_group_id_1)s'] [parameters: {'firewall_group_id_1':
- '85a277d0-ebaf-4a5d-9d45-6a74b8f54372'}] (Background on this error at:
- http://sqlalche.me/e/2j85): pymysql.err.InternalError: (1105, 'Percona-
- XtraDB-Cluster prohibits use of DML command on a table
- (neutron.firewall_group_port_associations_v2) without an explicit
- primary key with pxc_strict_mode = ENFORCING or MASTER') 2019-06-07
- 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters Traceback (most
- recent call last): 2019-06-07 10:07:50.937 30837 ERROR
- oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-
- packages/sqlalchemy/engine/base.py", line 1193, in _execute_context
- 2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters
- context) 2019-06-07 10:07:50.937 30837 ERROR
- oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-
- packages/sqlalchemy/engine/default.py", line 509, in do_execute
- 2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters
- cursor.execute(statement, parameters) 2019-06-07 10:07:50.937 30837
- ERROR oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-
- packages/pymysql/cursors.py", line 165, in execute 2019-06-07
- 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters result =
- self._query(query) 2019-06-07 10:07:50.937 30837 ERROR
- oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-
- packages/pymysql/cursors.py", line 321, in _query 2019-06-07
- 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters
- conn.query(q) 2019-06-07 10:07:50.937 30837 ERROR
- oslo_db.sqlalchemy.exc_filters File "/usr/lib/python3/dist-
- packages/pymysql/connections.py", line 860, in query 2019-06-07
- 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters
- self._affected_rows = self._read_query_result(unbuffered=unbuffered)
- 2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters
- File "/usr/lib/python3/dist-packages/pymysql/connections.py", line 1061,
- in _read_query_result 2019-06-07 10:07:50.937 30837 ERROR
- oslo_db.sqlalchemy.exc_filters result.read() 2019-06-07 10:07:50.937
- 30837 ERROR oslo_db.sqlalchemy.exc_filters File
- "/usr/lib/python3/dist-packages/pymysql/connections.py", line 1349, in
- read 2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters
- first_packet = self.connection._read_packet() 2019-06-07 10:07:50.937
- 30837 ERROR oslo_db.sqlalchemy.exc_filters File
- "/usr/lib/python3/dist-packages/pymysql/connections.py", line 1018, in
- _read_packet 2019-06-07 10:07:50.937 30837 ERROR
- oslo_db.sqlalchemy.exc_filters packet.check_error() 2019-06-07
- 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters File
- "/usr/lib/python3/dist-packages/pymysql/connections.py", line 384, in
- check_error 2019-06-07 10:07:50.937 30837 ERROR
- oslo_db.sqlalchemy.exc_filters err.raise_mysql_exception(self._data)
- 2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters
- File "/usr/lib/python3/dist-packages/pymysql/err.py", line 107, in
- raise_mysql_exception 2019-06-07 10:07:50.937 30837 ERROR
- oslo_db.sqlalchemy.exc_filters raise errorclass(errno, errval)
- 2019-06-07 10:07:50.937 30837 ERROR oslo_db.sqlalchemy.exc_filters
- pymysql.err.InternalError: (1105, 'Percona-XtraDB-Cluster prohibits use
- of DML command on a table (neutron.firewall_group_port_associations_v2)
- without an explicit primary key with pxc_strict_mode = ENFORCING or
- MASTER') 2019-06-07 10:07:50.937 30837 ERROR
- oslo_db.sqlalchemy.exc_filters
+ fwaas_v2 - unable to associate port with firewall (PXC strict mode)

description:

updated

Revision history for this message

Sahid Orentino (sahid-ferdjaoui) wrote on 2019-06-07:

Missing primary keys for firewall_group_port_associations_v2 and firewall_policy_rule_associations_v2. The workaround is to change the mode used [0].

juju config percona-cluster pxc-strict-mode=PERMISSIVE

[0] https://bugs.launchpad.net/ubuntu/+source/octavia/+bug/1826875/comments/3

Changed in neutron:
assignee:	nobody → Sahid Orentino (sahid-ferdjaoui)

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2019-06-07: Fix proposed to neutron-fwaas (master)

Fix proposed to branch: master
Review: https://review.opendev.org/663931

Changed in neutron:
status:	New → In Progress

James Page (james-page) on 2019-06-12

tags:

added: py3

OpenStack Infra (hudson-openstack) on 2019-07-04

Changed in neutron:
assignee:	Sahid Orentino (sahid-ferdjaoui) → James Page (james-page)

Revision history for this message

James Page (james-page) wrote on 2019-07-04:

As cosmic EOL's today not targeting for this fix.

James Page (james-page) on 2019-07-04

Changed in neutron-fwaas (Ubuntu Eoan):
status:	New → Triaged
Changed in neutron-fwaas (Ubuntu Disco):
status:	New → Triaged
importance:	Undecided → Medium
Changed in neutron-fwaas (Ubuntu Eoan):
importance:	Undecided → Medium

OpenStack Infra (hudson-openstack) on 2019-07-16

Changed in neutron:
assignee:	James Page (james-page) → Sahid Orentino (sahid-ferdjaoui)

OpenStack Infra (hudson-openstack) on 2019-07-23

Changed in neutron:
assignee:	Sahid Orentino (sahid-ferdjaoui) → James Page (james-page)

OpenStack Infra (hudson-openstack) on 2019-07-25

Changed in neutron:
assignee:	James Page (james-page) → Sahid Orentino (sahid-ferdjaoui)

OpenStack Infra (hudson-openstack) on 2019-10-11

Changed in neutron:
assignee:	Sahid Orentino (sahid-ferdjaoui) → James Page (james-page)

Revision history for this message

Launchpad Janitor (janitor) wrote on 2019-10-11:

This bug was fixed in the package neutron-fwaas - 1:15.0.0~rc1-0ubuntu3

---------------
neutron-fwaas (1:15.0.0~rc1-0ubuntu3) eoan; urgency=medium

  * d/p/add-missing-pk-firewall-group-associations-v2.patch: Cherry pick
    fix to resolve issue with missing primary key on
    firewall_group_associations_v2 table (LP: #1831986).

-- James Page <email address hidden> Fri, 11 Oct 2019 14:19:24 +0100

Changed in neutron-fwaas (Ubuntu Eoan):
status:	Triaged → Fix Released

James Page (james-page) on 2019-10-14

Changed in cloud-archive:
status:	Triaged → Fix Committed

Revision history for this message

James Page (james-page) wrote on 2019-10-14:

This bug was fixed in the package neutron-fwaas - 1:15.0.0~rc1-0ubuntu3~cloud0
---------------

neutron-fwaas (1:15.0.0~rc1-0ubuntu3~cloud0) bionic-train; urgency=medium
.
   * New update for the Ubuntu Cloud Archive.
.
neutron-fwaas (1:15.0.0~rc1-0ubuntu3) eoan; urgency=medium
.
   * d/p/add-missing-pk-firewall-group-associations-v2.patch: Cherry pick
     fix to resolve issue with missing primary key on
     firewall_group_associations_v2 table (LP: #1831986).

Changed in cloud-archive:
status:	Triaged → Fix Released

James Page (james-page) on 2019-12-02

description:

updated

Revision history for this message

Timo Aaltonen (tjaalton) wrote on 2019-12-13: Please test proposed package

Hello James, or anyone else affected,

Accepted neutron-fwaas into disco-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/neutron-fwaas/1:14.0.0-0ubuntu1.2 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested and change the tag from verification-needed-disco to verification-done-disco. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-disco. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Changed in neutron-fwaas (Ubuntu Disco):
status:	Triaged → Fix Committed
tags:	added: verification-needed verification-needed-disco

Revision history for this message

Corey Bryant (corey.bryant) wrote on 2019-12-13:

Hello James, or anyone else affected,

Accepted neutron-fwaas into stein-proposed. The package will build now and be available in the Ubuntu Cloud Archive in a few hours, and then in the -proposed repository.

Please help us by testing this new package. To enable the -proposed repository:

sudo add-apt-repository cloud-archive:stein-proposed
sudo apt-get update

Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-stein-needed to verification-stein-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-stein-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

tags:

added: verification-stein-needed

Revision history for this message

Corey Bryant (corey.bryant) wrote on 2020-01-09:

#10

Since disco is EOL this month, we can work this through the stein cloud archive.

Changed in neutron-fwaas (Ubuntu Disco):
status:	Fix Committed → Won't Fix

Mathew Hodson (mhodson) on 2020-02-06

tags:

removed: verification-needed verification-needed-disco

Akihiro Motoki (amotoki) on 2020-02-13

tags:

added: db fwaas

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2020-06-16: Change abandoned on neutron-fwaas (master)

#11

Change abandoned by Slawek Kaplonski (<email address hidden>) on branch: master
Review: https://review.opendev.org/663931
Reason: As we are going to deprecate master branch in this project this patch is not needed anymore.

Corey Bryant (corey.bryant) on 2022-06-13

Changed in cloud-archive:
status:	Fix Released → Fix Committed

Corey Bryant (corey.bryant) on 2022-06-13

Changed in cloud-archive:
status:	Fix Committed → Fix Released

Revision history for this message

Corey Bryant (corey.bryant) wrote on 2022-06-14:

#12

Download full text (15.2 KiB)

This bug was fixed in the package neutron-fwaas - 1:16.0.0+git2022060611.b7be99c14-0ubuntu1~cloud0
---------------

neutron-fwaas (1:16.0.0+git2022060611.b7be99c14-0ubuntu1~cloud0) jammy-zed; urgency=medium
 .
   * New package for the Ubuntu Cloud Archive.
 .
 neutron-fwaas (1:16.0.0+git2022060611.b7be99c14-0ubuntu1) kinetic; urgency=medium
 .
   * New upstream snapshot for OpenStack Zed.
   * d/control: Update standards version to 4.6.1.
 .
 neutron-fwaas (1:16.0.0+git2022033113.de8a4d4cf-0ubuntu1) jammy; urgency=medium
 .
   * New upstream snapshot for OpenStack Yoga.
 .
 neutron-fwaas (1:16.0.0+git2022030710.a9f26b81e-0ubuntu1) jammy; urgency=medium
 .
   * d/control: Update VCS paths for move to lp:~ubuntu-openstack-dev.
   * New upstream snapshot for OpenStack Yoga.
   * d/control: Align (Build-)Depends with upstream.
   * d/control: Switch to debhelper-compat 13.
   * d/p/add-missing-pk-firewall-group-associations-v2.patch: Rebased.
 .
 neutron-fwaas (1:16.0.0-0ubuntu1) groovy; urgency=medium
 .
   * d/watch: Scope to 16.x series and get tarballs from opendev.org.
   * New upstream release for OpenStack Ussuri (LP: #1877642).
 .
 neutron-fwaas (1:16.0.0~b3~git2020032402.5e6c04885-0ubuntu1) focal; urgency=medium
 .
   * New upstream snapshot for OpenStack Ussuri.
 .
 neutron-fwaas (1:16.0.0~b2~git2020020713.d9ac7173f-0ubuntu1) focal; urgency=medium
 .
   * New upstream snapshot for OpenStack Ussuri.
   * d/p/add-missing-pk-firewall-group-associations-v2.patch: Refreshed.
 .
 neutron-fwaas (1:16.0.0~b1~git2019121712.330e233a4-0ubuntu1) focal; urgency=medium
 .
   * New upstream snapshot for OpenStack Ussuri.
   * d/control: Align (Build-)Depends with upstream.
   * d/control, d/rules, d/compat: Switch to debhelper compat 12 and pybuild.
   * d/rules: Update PBR_VERSION to handle ~git versioning.
 .
 neutron-fwaas (1:15.0.0-0ubuntu1) eoan; urgency=medium
 .
   * New upstream release for OpenStack Train.
 .
 neutron-fwaas (1:15.0.0~rc1-0ubuntu3) eoan; urgency=medium
 .
   * d/p/add-missing-pk-firewall-group-associations-v2.patch: Cherry pick
     fix to resolve issue with missing primary key on
     firewall_group_associations_v2 table (LP: #1831986).
 .
 neutron-fwaas (1:15.0.0~rc1-0ubuntu2) eoan; urgency=medium
 .
   * d/p/disable-check-constraint-for-public-columns.patch: Disable
     creation of check constraints for 'public' columns under MySQL
     (LP: #1846606) resolving compatibility with MySQL >= 8.
   * d/tests/*: Add autopkgtest to validate database migrations under
     MySQL.
 .
 neutron-fwaas (1:15.0.0~rc1-0ubuntu1) eoan; urgency=medium
 .
   [ Sahid Orentino Ferdjaoui ]
   * New upstream snapshot for OpenStack Train.
 .
   [ Corey Bryant ]
   * d/watch: Monitor 15.x series.
   * New upstream release for OpenStack Train.
   * d/control: Align (Build-)Depends with upstream.
   * d/p/drop-sphinxcontrib-apidoc.patch: Dropped. No longer needed.
 .
 neutron-fwaas (1:15.0.0~b2~git2019073114.243a7ef57-0ubuntu1) eoan; urgency=medium
 .
   * New upstream snapshot for OpenStack Train.
   * d/control: Align (Build-)Depends with upstream.
   * d/p/netfilter_log-Correct-decode-binary-types.patch: Dropped.
     Fixed in snapshot.
 .
 neutron-fwaas (1:15.0.0~b1~git2019061312.45a36b8ba-0ubuntu1) eoan; urgency=medium
 .
   * d/p/netfilter_log-Correct-decode-binary-types.patch: Cherry pick fix
     to resolve decoding of netfilter log prefix information under Python
     3 (LP: #1832210).
   * New upstream snapshot for OpenStack Train.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:14.0.0-0ubuntu1) disco; urgency=medium
 .
   * New upstream release for OpenStack Stein.
 .
 neutron-fwaas (1:14.0.0~rc1-0ubuntu1) disco; urgency=medium
 .
   * New upstream release candidate for OpenStack Stein.
   * d/control: Align (Build-)Depends with upstream.
   * d/p/*: Refresh.
 .
 neutron-fwaas (1:14.0.0~b2-0ubuntu2) disco; urgency=medium
 .
   * d/rules: Drop scrub of /usr/bin from python3-neutron-fwaas, fixup
     shebang in Python scripts.
 .
 neutron-fwaas (1:14.0.0~b2-0ubuntu1) disco; urgency=medium
 .
   * d/watch: Monitor 14.x series.
   * New upstream milestone for OpenStack Stein.
 .
 neutron-fwaas (1:14.0.0~b1~git2019013133.d2adcdec8-0ubuntu1) disco; urgency=medium
 .
   * New upstream snapshot for OpenStack Stein.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:14.0.0~b1~git2018111632.f2c2a51a9-0ubuntu1) disco; urgency=medium
 .
   * New upstream snapshot for OpenStack Stein.
   * d/control,rules: Drop Python 2 support.
   * d/p/*: Refresh.
 .
 neutron-fwaas (1:13.0.0-0ubuntu1) cosmic; urgency=medium
 .
   * New upstream release for OpenStack Rocky.
 .
 neutron-fwaas (1:13.0.0~rc1-0ubuntu1) cosmic; urgency=medium
 .
   [ Corey Bryant ]
   * New upstream release candidate for OpenStack Rocky.
   * d/control: Align (Build-)Depends with upstream.
 .
   [ James Page ]
   * d/control: Add zmq to BD's.
   * d/control,d/p/pyzmq-disable.patch: Disable hard runtime requirement on
     zeromq; optionally required for new libnetfilter_log support so document
     via Suggests instead.
 .
 neutron-fwaas (1:13.0.0~b3-0ubuntu1) cosmic; urgency=medium
 .
   * New upstream milestone for OpenStack Rocky.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:13.0.0~b2-0ubuntu3) cosmic; urgency=medium
 .
   * d/control: Add Breaks/Replaces for python-vmware-nsx. There was a conflict
     where both packages were attempting to install neutron-fwaas.json. The
     installation of that file from vmware-nsx has been dropped allowing
     neutron-fwaas-common to install it.
 .
 neutron-fwaas (1:13.0.0~b2-0ubuntu2) cosmic; urgency=medium
 .
   * Add support for Python 3:
     - d/control: Add Py3 BD's.
     - d/rules: Use pkgos-dh_auto_install.
     - d/control: Add python3-neutron-fwaas.
     - d/python-neutron-fwaas.install: Drop, not needed.
     - d/common: Add neutron-fwaas-common package for shared
       config files.
 .
 neutron-fwaas (1:13.0.0~b2-0ubuntu1) cosmic; urgency=medium
 .
   * New upstream milestone for OpenStack Rocky.
 .
 neutron-fwaas (1:13.0.0~b1-0ubuntu1) cosmic; urgency=medium
 .
   * d/watch: Scope to 13.x series.
   * New upstream milestone for OpenStack Rocky.
   * d/control: Align (Build-)Depends with upstream.
   * d/p/drop-sphinxcontrib-apidoc.patch: Drop sphinxcontrib.apidoc extension
     until package is available.
   * d/control: Update Standards-Version to 4.1.4.
   * d/watch, d/control, d/copyright: Use https URLs.
   * d/control: Enable autopkgtest-pkg-python testsuite.
 .
 neutron-fwaas (1:12.0.0-0ubuntu1) bionic; urgency=medium
 .
   * New upstream release for OpenStack Queens.
 .
 neutron-fwaas (1:12.0.0~rc1-0ubuntu1) bionic; urgency=medium
 .
   * New upstream milestone for OpenStack Queens.
   * d/control: Align (Build-)Depends with upstream.
   * d/control: Switch to using python3-sphinx.
 .
 neutron-fwaas (1:12.0.0~b3-0ubuntu1) bionic; urgency=medium
 .
   * New upstream milestone for OpenStack Queens.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:12.0.0~b2-0ubuntu1) bionic; urgency=medium
 .
   * d/watch: Scope to 12.x series.
   * New upstream milestone for OpenStack Queens.
   * d/control: Align (Build-)Depends with upstream.
   * d/*: wrap-and-sort -bast.
   * d/control,compat: Bump debhelper compat to 10.
   * d/control: Bumped Standards-Version to 4.1.2.
   * d/p/*: Drop, no longer needed.
 .
 neutron-fwaas (1:12.0.0~b1-0ubuntu1) bionic; urgency=medium
 .
   * New upstream milestone for OpenStack Queens.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:11.0.1-0ubuntu1) artful; urgency=medium
 .
   * d/control: Add rename package to BDs as d/rules needs it and it
     is no longer available by default in Artful.
   * New stable point release for OpenStack Pike (LP: #1719728).
 .
 neutron-fwaas (1:11.0.0-0ubuntu1) artful; urgency=medium
 .
   * New upstream release for OpenStack Pike.
 .
 neutron-fwaas (1:11.0.0~rc2-0ubuntu1) artful; urgency=medium
 .
   * New upstream release candidate for OpenStack Pike.
 .
 neutron-fwaas (1:11.0.0~rc1-0ubuntu1) artful; urgency=medium
 .
   * New upstream release candidate for OpenStack Pike.
   * d/control: Align (Build-)Depends with upstream.
   * d/p/drop-openstackdoctheme.patch: Temporarily drop openstackdocstheme
     sphinx extension until sphinx>=1.6.2 is available.
 .
 neutron-fwaas (1:11.0.0~b3-0ubuntu1) artful; urgency=medium
 .
   * New upstream milestone for OpenStack Pike.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:11.0.0~b2-0ubuntu1) artful; urgency=medium
 .
   * New upstream milestone for OpenStack Pike.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:11.0.0~b1-0ubuntu2) artful; urgency=medium
 .
   * No-change rebuild for sqlalchemy 1.1.x.
 .
 neutron-fwaas (1:11.0.0~b1-0ubuntu1) artful; urgency=medium
 .
   * d/p/*: Drop patches, in upstream stable branch.
   * New upstream milestone for OpenStack Pike.
   * Align (Build-)Depends with upstream milestone.
 .
 neutron-fwaas (1:10.0.0-0ubuntu2) zesty; urgency=medium
 .
   * d/p/gate_hook-stop-including-localrc.patch: Cherry-pick patch from
     stable/ocata to fix tempest failure (LP: #1667736).
 .
 neutron-fwaas (1:10.0.0-0ubuntu1) zesty; urgency=medium
 .
   * New upstream release for OpenStack Ocata.
 .
 neutron-fwaas (1:10.0.0~rc2-0ubuntu1) zesty; urgency=medium
 .
   * New upstream release candidate for OpenStack Ocata.
 .
 neutron-fwaas (1:10.0.0~rc1-0ubuntu1) zesty; urgency=medium
 .
   * New upstream milestone for Ocata.
 .
 neutron-fwaas (1:10.0.0~b3-0ubuntu1) zesty; urgency=medium
 .
   * New upstream release.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:10.0.0~b2-0ubuntu1) zesty; urgency=medium
 .
   [ Chuck Short ]
   * debian/rules: Set PBR_VERSION to correct distro version for
     package build.
 .
   [ Corey Bryant ]
   * New upstream milestone release for OpenStack Ocata.
   * d/control: Align (Build-)Depends with upstream.
   * d/rules: Use ostestr for unit test execution.
 .
 neutron-fwaas (1:10.0.0~b1-0ubuntu1) zesty; urgency=medium
 .
   * New upstream milestone release for OpenStack Ocata.
   * d/control: Align (build-)depends with upstream.
 .
 neutron-fwaas (1:9.0.0-0ubuntu1) yakkety; urgency=medium
 .
   * d/control: oslo.log min version level in global-requirements is too low,
     so set min version to upper-constraints level (LP: #1628883).
   * New upstream release for OpenStack Newton.
   * d/control: Align python-neutron BD with Newton final release.
 .
 neutron-fwaas (1:9.0.0~rc2-0ubuntu1) yakkety; urgency=medium
 .
   * New upstream release candidate for OpenStack Newton.
 .
 neutron-fwaas (1:9.0.0~rc1-0ubuntu1) yakkety; urgency=medium
 .
   * New upstream release candidate for OpenStack Newton.
 .
 neutron-fwaas (1:9.0.0~b3-0ubuntu1) yakkety; urgency=medium
 .
   [ David Della Vecchia ]
   * New upstream milestone for OpenStack Newton.
   * d/control: Align (build-)depends with upstream.
 .
   [ Corey Bryant]
   * d/control: Add python-neutron to Depends.
 .
 neutron-fwaas (1:9.0.0~b2-0ubuntu1) yakkety; urgency=medium
 .
   * New upstream milestone for OpenStack Newton.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:9.0.0~b1-0ubuntu1) yakkety; urgency=medium
 .
   [ James Page ]
   * d/rules: Drop usr/bin/neutron-l3-agent from install as it clashes with
     the agent provide by the neutron-l3-agent package.
 .
   [ David Della Vecchia ]
   * New upstream milestone for OpenStack Newton.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:8.0.0-0ubuntu1) xenial; urgency=medium
 .
   * New upstream release for OpenStack Mitaka.
   * d/control: Set min python-neutron BD to 2:8.0.0.
 .
 neutron-fwaas (1:8.0.0~rc1-0ubuntu1) xenial; urgency=medium
 .
   * New upstream release candidate for OpenStack Mitaka.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:8.0.0~b3-0ubuntu1) xenial; urgency=medium
 .
   * New upstream milestone for OpenStack Mitaka.
   * d/control: Align (Build-)Depends with upstream.
 .
 neutron-fwaas (1:8.0.0~b2-0ubuntu1) xenial; urgency=medium
 .
   * New upstream milestone for OpenStack Mitaka.
   * d/control: Align (build-)depends with upstream.
   * d/rules: Generate config files with generate_config_file_samples.sh.
 .
 neutron-fwaas (1:8.0.0~b1-0ubuntu1) xenial; urgency=medium
 .
   * New upstream milestone for OpenStack Mitaka.
   * d/control: Align (build-)depends with upstream.
 .
 neutron-fwaas (1:7.0.0-0ubuntu1) wily; urgency=medium
 .
   * New upstream release for OpenStack Liberty.
 .
 neutron-fwaas (1:7.0.0~rc3-0ubuntu1) wily; urgency=medium
 .
   * New upstream release candidate for OpenStack Liberty.
 .
 neutron-fwaas (1:7.0.0~rc2-0ubuntu1) wily; urgency=medium
 .
   * New upstream release candidate for OpenStack Liberty.
 .
 neutron-fwaas (1:7.0.0~rc1-0ubuntu1) wily; urgency=medium
 .
   * d/watch: Update to cope with upstream rc versioning.
   * New upstream release candidate for OpenStack Liberty.
   * d/rules: Drop removal of .eggs directory in override_dh_auto_clean.
   * d/control: Bump minimum pbr version to 1.8.
 .
 neutron-fwaas (1:7.0.0~b3-0ubuntu1) wily; urgency=medium
 .
   * New upstream milestone for OpenStack Liberty.
   * d/control: Align (build-)depends with upstream.
 .
 neutron-fwaas (1:7.0.0~b2-0ubuntu1) wily; urgency=medium
 .
   * New upstream milestone for OpenStack Liberty.
   * d/control: Align (build-)depends with upstream.
   * d/rules: Fix override_dh_auto_clean rule and remove .eggs directory.
 .
 neutron-fwaas (1:7.0.0~b1-0ubuntu3) wily; urgency=medium
 .
   * No change rebuild with SQLAlchemy 1.0.6.
 .
 neutron-fwaas (1:7.0.0~b1-0ubuntu2) wily; urgency=medium
 .
   * Switch neutron-common -> python-neutron as BD for testing.
   * Ignore broken dependency generation for oslo.messaging_ for older
     dh-python versions.
 .
 neutron-fwaas (1:7.0.0~b1-0ubuntu1) wily; urgency=medium
 .
   * New upstream milestone for OpenStack Liberty.
   * Align (build-)depends with upstream.
 .
 neutron-fwaas (2015.1.0-0ubuntu1) vivid; urgency=medium
 .
   * New upstream release for OpenStack Kilo. (LP: #1449744)
 .
 neutron-fwaas (2015.1~rc1-0ubuntu2) vivid; urgency=medium
 .
   * d/control: Declare a Breaks/Replaces on neutron-common as this package
     has taken ownership of /etc/neutron/fwaas_driver.ini (LP: #1446592).
 .
 neutron-fwaas (2015.1~rc1-0ubuntu1) vivid; urgency=medium
 .
   * New upstream milestone release:
     - d/control: Align version requirement with upstream.
 .
 neutron-fwaas (2015.1~b3-0ubuntu1) vivid; urgency=medium
 .
   * New upstream milestone release:
     - d/control: Align version requirement with upstream, add new dependency
       on oslo-log.
   * Enable unit test suite execution:
     - d/control: Switch BD on python-neutron -> neutron-common.
     - d/rules: Enable execution of unit tests.
 .
 neutron-fwaas (2015.1~b2-0ubuntu1) vivid; urgency=medium
 .
   * New upstream release:
     - d/control: Update/align dependencies with upstream.
     - d/rules: Don't drop fwaas_driver.ini from install, as now
       provided from this package.
 .
 neutron-fwaas (2015.1~b1-0ubuntu2) vivid; urgency=medium
 .
   * d/control: Add missing ${python:Depends} to binary package depends.
   * d/copyright: Update reference for Format field.
   * d/rules: Minor cleanup for test suite execution.
 .
 neutron-fwaas (2015.1~b1-0ubuntu1) vivid; urgency=medium
 .
   * Initial release for OpenStack Kilo-1 milestone.