1. Install the missing vpnaas python module in neutron-server Dockerfile
2. Remove duplicated neutron-lbaas-common package from neutron-server,
since it is installed in neutron-base
3. Fix service plugin config, it's not vpn`ass` ;)) 'vpnass' ->
'neutron_vpnaas.services.vpn.plugin.VPNDriverPlugin' [1]
[1]:
https://github.com/openstack/neutron-vpnaas/blob/stable/newton/devstack/settings#L8
Change-Id: I5250b6875d96ef5df9cf39bce10ce072982aa80d
Closes-bug: #1625020
This implements the neutron-vpnaas-agent container for Ubuntu/Debian
with installation from source packages.
Co-Authored-By: zhubingbing <zhubingbing10@gmail.com>
Implements: blueprint neutron-vpnaas-agent
Change-Id: I3e4b513fb8e1670c4df0edb4951610f777ff72e6
Networking-SFC is a neutron big-tent project support Service Function
Chaining in Neutron.
* Rename the image from neutron-networking-sfc-agent to
neutron-sfc-agent.
* Add networking-sfc role in playbooks.
Co-Authored-by: Jeffrey Zhang <zhang.lei.fly@gmail.com>
Change-Id: I1f99650eed85f59929d4ab6b2226603c54f29577
Implements: blueprint enable-networking-sfc-support
Change needed to add header blocks to all Dockerfiles, similar to the
base.
Use case is to easily run something before packages are installed, e.g.
to COPY a local rpm in that can be added to the package list.
Change-Id: I1bbfdf0b762da0a392aa8bf47781315b45377bee
Closes-Bug: 1618969
UCA latest Newton release lack of neutron-lbaas-common package, disable
neutron-lbaas-agent for Ubuntu binary until they fix it.
TrivialFix
Change-Id: I2c02fc578cffe82918ae6affe6cf0e6095ae47e4
Signed-off-by: Jeffrey Zhang <zhang.lei.fly@gmail.com>
Is a best practice in Unix/Linux scripts to use dots
instead of source command.
Using dots will avoid issues with non BASH shells
TrivialFix
Change-Id: Ie6480a1954f853f79faffa093452715ebd9f7d90
Signed-off-by: Eduardo Gonzalez <dabarren@gmail.com>
* Inspected each error and fixed / added nosec where appropriate.
* build-swift-ring.py which was throwing sec errors is no longer used so
removed it.
* Removed the dev/ directory from being checked.
Closes-Bug: #1617713
Change-Id: I25664cabca4137e5c9f499c1af3f5ce78b86fb56
Currently if the install_packages macro is run with an empty
package list, it will add a yum or apt-get command with no
packages listed.
This bug fix aims to omit this line when no packages have
been given, or, the operator wants to use the "_override" /
"_remove" functionality to disable all packages being
installed in a Dockerfile.
Co-Authored-By: Paul Bourke <paul.bourke@oracle.com>
Change-Id: Ifaaaebfccc3adb0f2f68a35ac08e59378bc87fdb
Closes-bug: 1612446
Networking-SFC is a neutron big-tent project
Kolla does not have Networking-SFC agent support for now. This
is essential for Service Function Chaining use case. Build Networking-SFC
Container.
Change-Id: I67b4d6e061dbe31e2211cd3210726ab4c30cd087
Partially-Implements: blueprint enable-networking-sfc-support
* copy the ml2_conf.ini file to the container
* map the host /etc/localtime file to the container
* remove the output_file and wrap_with options in the lbaas_agent.ini
file, which are useless
* remove the interface_driver in the lbaas_agent, which is configured
in the neutron.conf file
* install net-tools package into the container, which is used by the
neutron-lbaas
Change-Id: Ia58d825e41d3b843d8c6e6b3c9ee1756c1aed1ac
Closes-Bug: #1606755
Remove the extra '\' after RUN command for ubuntu, otherwise the later
COPY will not run correctly for ubuntu image.
Change-Id: Ie7de201711c6e684f58665027888c34f4c245487
Closes-bug: #1605453
The copy instructions do copy the README.txt file and the oslo-config-generator
directory to /etc/neutron. This makes no sense. Only the
neutron/rootwrap.d/lbaas-haproxy.filters should be copied to /etc/neutron/rootwrap.d.
TrivialFix
Change-Id: I2dfd86b718166d1d3e348dd9ba14056bb763e64f
When building image for neutron-base on ubuntu, it failed with
installing neutron-lbaas, it should be neutron-lbaas-agent
Change-Id: Ia8ba9c4b578368940b44c7943648a15a9f9f7518
Closes-bug: #1597141
L3 HA requires keepalived. It has to be installed when install_type
is source.
Change-Id: I3265b74490559ca9b22a19917a76925a55e32cdd
Closes-bug: 1588829
The --service option to neutron-db-manage is deprecated and will be
removed soon. Use --subproject instead.
Related-Bug: #1501380
Change-Id: I2f64634d6f01c06a071abf064caf11a134800d04
Previously, kolla did not support neutron lbaas functionality.
Only Lbaasv2 is supported in Mitaka. Additional information can
be found here:
http://docs.openstack.org/mitaka/networking-guide/adv-config-lbaas.html
Magnum uses Neutron Lbaas to provide high availability to COE API
and Etcd endpoints within a bay. Therefore, Neutron Lbaas is required
for Kolla to support Magnum.
Co-Authored-By: Serguei Bezverkhi <sbezverk@cisco.com>
Partial-Bug: #1551992
Change-Id: I05360b7c447c601fcb3c2b6b2a913ef5cc0f3a1b
Currently Ubuntu source installation loads arping package which is version
2.11. It does not support -U keyword which is used by lbaas.
iputil-arping package should be used instead.
Change-Id: I64c5e5b40e561d309281204b4f6aeaf0fb395cb5
Closes-Bug: #1586085
neutron-plugin-linuxbridge and neutron-plugin-openvswitch package
is useless and removed in Mitaka on Ubuntu
Change-Id: Ia156d58410198af969f579cd5e7461c31ea63408
Closes-Bug: #1568281
Conntrack is used by neutron as a dep, but not installed in the source
containers. This leads to errors in the log and in some cases network
instability.
Change-Id: Ie6eae7530bf4e378eedb852a16ed8595402113a6
Closes-Bug: #1561008
Neutron containers share the same log directory. So all containers
should use same username to create directories.
Change-Id: Id95a3205b53dd87ba21d55ebecada89d9f86d37b
Closes-Bug: #1551829
The python-neutron package now pulls the required dependency on
python-oslo-reports:
774036f7f9/openstack-neutron.spec (L125)
TrivialFix
Change-Id: I6cb4d0d9601c910cf631dddcf715a7f4fc9754e3
*** Requires Docker 1.10 which is released ***
Documentation will be in the next patch. You must set the following
in your docker.service daemon control file for propogation to work:
[Service]
MountFlags=shared
======================================================================
Thanks to mount propagation in Docker 1.10 we can use thin containers
finally! This is extremely useful to operators since now they can
access the network namespaces from the hosts (outside the neutron
container). But additionally it allows us to implement the VPN agent
and other services easier.
Neutron containers and the neutron role are brought into the standards
of the new Kolla. Completely with drop-root and ansible formating
updates.
The ip_wrapper.py script was (thankfully) not needed so it has been
removed from the repo.
Partially-Implements: blueprint upgrade-neutron
Change-Id: Iaf5555283240457e1912459f397a6393d886fba1
Because we use rootwrap in a venv we need to update the exec_dirs.
Without doing this *some* commands will break for various reasons that
I won't get into in this review in detail. But this is required for
neutron-l3-agent in a container + drop-root.
Change-Id: I1a09f7188fdd501b7ce251d9f2fb0e5b10222142
Partially-Implements: blueprint drop-root
openstack-neutron package is missing a dependency on
python-oslo-reports. Add it to Kolla until RDO packaging is fixed.
Change-Id: Idfdc1139b790ed8778540a763e0f205101140db7
Closes-Bug: #1531107
There were some inconsistencies with pip install instructions
thoughout Kolla. We fix those here.
Additionally, we fix the virtualenv to properly use the site-packages
on the host if a library is not available in the venv.
Change-Id: Ib84d48e8826bb96060338b3fa0782620c98794a8
Related-Bug: #1524684
Closes-Bug: #1529434