121 Commits

Author SHA1 Message Date
Dan Ardelean
58ce2b54ea Add Hyper-V role
Implement an ansible role that adds Hyper-V as a compute node for
OpenStack using Kolla.

This will install and configure the Nova Compute service, the
Hyper-V Neutron agent and FreeRDP-WebConnect.
https://docs.openstack.org/ocata/config-reference/compute/hypervisor-hyper-v.html

Change-Id: I601835b0769c5ff173a980a05a752391ae8cc82f
Implements: blueprint hyperv-ansible-role
Co-Authored-By: Alessandro Pilotti <apilotti@cloudbasesolutions.com>
2017-06-15 16:12:31 +03:00
Jenkins
53a4f23469 Merge "Neutron oslo_messaging_notifications config error" 2017-06-12 07:07:12 +00:00
Bertrand Lallau
e624f216a8 Neutron oslo_messaging_notifications config error
With the following configuration in globals.yml:
enable_ceilometer="no"
enable_designate="no"
enable_searchlight="yes"

neutron.conf is generated like following:

[oslo_messaging_notifications]
driver = messagingv2
topics =

=> topics value is missing.
This patch fix it.

Closes-Bug: #1671940
Change-Id: I28ab60c61882caaba823bab84f30f77e270f29b4
2017-06-08 13:55:47 +00:00
Eduardo Gonzalez
ab4b1ff785 Support OSprofile usage
OSprofile allows user/devs trace OpenStack requests.

Implements: blueprint enable-osprofiler
Co-Authored-By: Bertrand Lallau <bertrand.lallau@gmail.com>
Change-Id: I82ea85d726011ef6cbf99380f395452d6d7f8053
2017-06-02 22:41:33 +02:00
Eduardo Gonzalez
2eeca32dae Fix neutron-openvswitch-agent crash on multinode
neutron-openvswitch-agent enter in restarting status in multinode
deployments because br-ex is no longer created on compute nodes
unless DVR is enabled.

This change add a conditional to only add bridge_mappings when
the node is in network or in compute when dvr is enabled.

Change-Id: I9d49158127af7fd78ecbc3d64a7509d1e4ae5672
Closes-Bug: #1688571
2017-05-05 15:56:51 +02:00
Bertrand Lallau
5fe11a8fcb Fix neutron agents restarted on ml2 config change
The following Neutron agents:
- neutron-metadata
- neutron-dhcp-agent
- neutron-l3-agent
- neutron-lbaasv2-agent
- neutron-vpn-agent
doesn't require ml2_conf.ini file.
ml2_conf.ini file is used to managed L2 network configuration.
This config doesn't have to be in DHCP, L3, metadata agents...

We should remove it to avoid restarting these agents in case of
ml2_conf.ini file modification.
Only neutron-server, neutron-openvswitch-agent,
neutron-linuxbridge-agent must be restarted.

Closes-Bug: #1677163
Change-Id: I0876b8a3845d1c2bccd996426a65df1a3a6f7085
2017-04-26 14:26:21 +00:00
Jeffrey Zhang
54c3cec0f1 Add fwaas extension in l3 agent when neutron fwaas is enabled
Change-Id: I3b3ad184dea6b93f21c8778386c04a93b38bc2af
Closes-Bug: #1683802
2017-04-18 21:19:59 +08:00
Jenkins
f9e7e8e893 Merge "Split Openvswitch into own role" 2017-04-13 14:39:16 +00:00
Marcus G K Williams
9badc4de21 Split Openvswitch into own role
Creates Openvswitch role and splits
openvswitch from Neutron role to enable
third party networking solutions that use
Openvswitch or customize Openvswitch.
For example Openvswitch with dpdk or
OpenDaylight.

Change-Id: I5a41c42c5ec0a5e6999b2570ddac0f5efc3102ee
Co-Authored-By: Mauricio Lima <mauriciolimab@gmail.com>
Partially-Implements: blueprint opendaylight-support
2017-04-11 16:15:35 -07:00
Jenkins
a97503c315 Merge "Remove min_l3_agents_per_router option" 2017-04-05 11:52:08 +00:00
shaofeng_cheng
fbb0dedb10 Fix qos rules are not applied on ocata with ovs
If the Open vSwitch agent is being used, set extensions to qos
in the [agent] section of ml2_conf.ini.
see
https://docs.openstack.org/ocata/networking-guide/config-qos.html

Change-Id: I85272b03222775b14a311a110077a8eed736f56c
Closes-Bug: #1676319
2017-04-01 14:33:54 +08:00
ZhongShengping
66ac7aa459 Remove min_l3_agents_per_router option
min_l3_agents_per_router parameter has been removed in neutron[0].
So we can remove it.

[0] https://github.com/openstack/neutron/blob/master/releasenotes/notes/remove-min-l3-agents-per-router-27aef7d91dec0348.yaml

Change-Id: Ia3f3686e2cc27e4bd0707add50ebc552117d6b03
Closes-Bug: #1677101
2017-03-30 08:44:48 +08:00
Thomas O'Neill
94dec80705 Add neutron-bgp-dragent playbooks and sensible defaults.
Depends-On: If7f5c80eb10a1c418785d9c659ae18bfecfcfe33
Change-Id: I9c54f01193b4e12338e71cd1f0a4635dcbfa43fe
Implements: blueprint neutron-bgp-dragent
2017-03-16 10:03:17 +00:00
Jeffrey Zhang
37c27b01e6 Add default dnsmasq_dns_servers in dhcp_agent.ini file
Change-Id: Ia2204db6d0ed91d78fb28fcef772752440cc3e5d
Closes-Bug: #1668499
2017-02-28 13:11:22 +08:00
Jenkins
b11fe67571 Merge "Make service_plugins and extensions more configurable" 2017-02-26 01:40:41 +00:00
zhubingbing
394cf342cb Remove extra spaces
Change-Id: I4fcacb2f7537236b538bd4bf8408acf08672790f
2017-02-16 17:07:33 +00:00
Eduardo Gonzalez
053fb379ec Make service_plugins and extensions more configurable
Ease new service_plugins and extension integration as well
as improve code readiness.

Change-Id: I9924de51a70e9342c9ac56113c9fbd148a58c322
2017-02-16 13:07:35 +00:00
Eduardo Gonzalez
50232c3b18 Fix extension_drivers check in ml2
Use neutron_extension_drivers to add the option only when
a extension_driver is enabled.

Change-Id: I44a4e8c95c331fff0b66d18c11566211408fbb85
Closes-Bug: #1665258
2017-02-16 07:54:02 +00:00
Jenkins
78e00a953a Merge "Use neutron user in neutron_lbaas.conf and overwrite defaults" 2017-02-08 18:55:04 +00:00
Eduardo Gonzalez
e516ea5099 Integrate designate with neutron
Integrate designate service with neutron to allow instances
and floatingip resolve designate dns.
MDNS service need to be reachable from nova instances
in order to resolve DNS queries.
Added new dns_interface to make this configurable.
Add designate guide.

Closes-Bug: #1661330

Change-Id: I5a2ac5cf2a9aa0977ae42d53dd64699623ddf3ed
2017-02-03 11:06:59 +00:00
Nenad Radojevic
431a2a096d Use neutron user in neutron_lbaas.conf and overwrite defaults
Lbaas should make a call to Barbican with the neutron-service-user.
Moreover, it is needed to set up the region as well as
endpoint_type in order to overwrite the defaults.

Change-Id: I13105d092cb4397db1bc6481c5ca6677b4d4c048
Closes-Bug: #1659249
2017-01-27 12:49:15 +00:00
Nenad Radojevic
c2ef7d6804 Fix placeholder for 'service_auth' section in neutron_lbaas.conf
The [service_auth] section in neutron_lbaas.conf should be set
no matter which driver is going to be used for the service provider.

Change-Id: I0339f8e5f68135aad4289dcbaed18d6bae24eda9
Closes-Bug: #1657702
2017-01-19 11:36:32 +00:00
Nenad Radojevic
380822eb97 TLS loadbalancer creation fails due to unread neutron_lbaas.conf
LBaaS v2 agent is starting without the config file neutron_lbaas.conf.
Added the file to lbaas' container config directory in order to
initialize a Keystone session for the creation of a TLS listener.

Change-Id: I2f47590af0421f4c8f1c8fd25e599e446ad1c0f1
Closes-Bug: #1656777
2017-01-16 10:34:11 +00:00
Jenkins
2aa1fa692d Merge "Use stevedore aliases for interface_driver configuration" 2017-01-06 13:56:55 +00:00
Ross Krumbeck
a9ade20bee Ansible-ize OpenStack Designate
Implement ansible role to deploy designate
and dependencies. The backend used is bind9.

Co-Authored-By: zhubingbing <zhubingbing10@gmail.com>
Co-Authored-By: Eduardo Gonzalez <dabarren@gmail.com>

Depends-On: 6d0dc3e0f931c7c50b64a4659900cc50b0d860a2
Implements: blueprint ansible-designate
Change-Id: I34d8126e0cd8d71d5ced9b62f3776cc354fbb549
2017-01-05 14:34:15 +00:00
ZhongShengping
e9c7d4543a Use stevedore aliases for interface_driver configuration
interface_driver configuration was updated to use stevedore aliases.
This patch is to change devstack scripts to now use the aliases
instead of the previous class imports.

Change-Id: Ida10765f89c07205837e46f8cb445391f0e15373
Closes-Bug: #1504536
2016-12-21 15:03:23 +08:00
Jenkins
7deee0485e Merge "Allow neutron-fwaas to be enabled in Neutron" 2016-12-15 04:03:43 +00:00
Jenkins
e1e73ac570 Merge "Implement octavia ansible role" 2016-12-13 03:33:46 +00:00
Jeffrey Zhang
7f89522b94 Implement octavia ansible role
Change-Id: Ic72b49275627aff239b23e9862966923555a464f
Implements: blueprint octavia-ansible-role
2016-12-12 16:27:34 +08:00
Jenkins
67ae89dec7 Merge "Fix neutron-vpnaas for redhat derived bases" 2016-12-09 19:44:46 +00:00
Jenkins
c93cc27643 Merge "Tacker NFV Ansible support" 2016-12-06 13:04:01 +00:00
Eduardo Gonzalez
775d8019b6 Add custom policies in service.json
Include custom policy.json files in service-api.json.j2 files

Change-Id: Ic55bfc6f61131aa72c3497ce8b2282056bcc7f92
Partially-Implements: blueprint custom-policies
2016-12-02 16:22:17 +00:00
Eduardo Gonzalez
79df5d84f8 Tacker NFV Ansible support
Add Ansible configuration for Tacker NFV service

Change-Id: I472d96e13a5270d1ee219c2f72f57d9c361f87a6
Partially-Implements: blueprint tacker-support
2016-11-29 17:19:21 +00:00
Paul Bourke
8c1ddaaa19 Fix neutron-vpnaas for redhat derived bases
The current redhat derived bases that Kolla ships use libreswan instead
of openswan (even running 'yum install openswan' on these bases results
in libreswan being installed).

This means we need to use this device_driver in vpnaas_agent.ini. Also
/lib/modules is required from the host for the ipsec driver.

Change-Id: I94480cda06718ab4aa10250520fa58956151e33a
Closes-Bug: #1644518
2016-11-24 11:18:54 +00:00
liyingjun
0af48d30a1 Notification needed for searchlight
Needs to enable notifications for services when enabling searchlight
[1][2][3][4]

[1]
http://docs.openstack.org/developer/searchlight/plugins/cinder.html#cinder-conf
[2]
http://docs.openstack.org/developer/searchlight/plugins/glance.html#glance-configuration
[3]
http://docs.openstack.org/developer/searchlight/plugins/neutron.html#neutron-configuration
[4]
http://docs.openstack.org/developer/searchlight/plugins/nova.html#nova-configuration

Change-Id: Id2167d901ac3d65599e54feb1b2d1818d2a633c9
Closes-bug: #1643393
2016-11-21 10:12:55 +08:00
Paul Bourke
75fbca3cfe Allow neutron-fwaas to be enabled in Neutron
This patch adds optional support for neutron-fwaas. To enable,
set:

enable_neutron_fwaas: yes

Change-Id: I2d434586807d7a008d2ee1d3ef8d7dc7fab47ca7
Implements: kolla-neutron-fwaas
Depends-On: I9ca36012cff2e17ea877a775e8e1ca5837a2bcb1
2016-11-18 21:06:14 +08:00
bjorn lofdahl
281a8547b1 Fix neutron.conf.j2 metadata_workers spelling error
Change-Id: I8dbb25d643ab8da2b049f70d28bdd0839b9f2605
Closes-Bug: #1641591
(cherry picked from commit 2f0d4ccee32df4999e0b50a327a9df2c2ac55971)
2016-11-18 11:18:08 +08:00
Zhijiang Hu
803aaa6597 Uses tunnel_interface as ovs tunnel instead of api_interface
Closes-Bug: #1638242
Change-Id: Ib5192d1379457cd4292fc71dcbd62f78a02a1c07
Signed-off-by: Zhijiang Hu <hu.zhijiang@zte.com.cn>
2016-11-06 22:06:42 -05:00
ZhongShengping
d7d2e0d09c deprecate external_network_bridge option in neutron
Option "external_network_bridge" from group "DEFAULT" is deprecated
for removal. Its value may be silently ignored in the future.

Change-Id: I2752fca275dd7b340c0ff97bfa3eecc0d3358e63
Closes-Bug: #1637808
2016-10-30 17:51:23 +08:00
Jeffrey Zhang
558d8ae998 Fix neutron upgrade permission issue
Change-Id: Id4e9d019ee5072b3a24e383174a2acfdb3ed984d
Partial-Bug: #1631503
2016-10-18 02:32:39 +00:00
Dave McCowan
cc2dde0854 OpenStack Services Should Use keystone_internal_url for auth
Horizon and Neutron mistakenly were using keystone_public_url
for authentication.  This works without error in deployments
when the internal services happen to have access to the
public network, but it is still wrong.  This fails to work
when the internal services can not access the public URLs,
for example when TLS is enabled on the public endppoints.

This patches corrects horizon and neutron to use
keystone_internal_url for auth.

Change-Id: I59b9094364bef375036028ba86a771dabf28c963
Closes-bug: #1625648
2016-10-15 18:50:41 -04:00
James McCarthy
cd968665eb Remove indentation from l3_agent.ini.j2
If enable_neutron_dvr is set, it leads to a failure of the
'Copying over l3_agent.ini' task due to parsing errors.

TrivialFix
Closes-bug: #1633488

Change-Id: Ia30970d65cf7b09fff336fe878d2be02e934b082
2016-10-14 15:05:45 +01:00
Jenkins
45f4540002 Merge "Fix template for multiple physical networks" 2016-10-13 17:01:17 +00:00
liyingjun
1706e17ae9 Fix template for multiple physical networks
This patch [1] adds support to config multiple physical networks for
ovs neutron plugin, but it missed to change ml2_conf.ini.j2
correspondingly.

[1]: https://review.openstack.org/#/c/373455/

Change-Id: I1937e1e5986657470add07d4bcf8587642aa45ec
Closes-bug: #1631903
2016-10-13 12:10:34 +00:00
Paul Bourke
cc0709792b Fix l3_agent.ini rendering error when DVR
The if/else blocks in this file cause a rendering error on control nodes
when enable_neutron_dvr: yes

ParsingError: File contains parsing errors: <???>
        [line  3]: u'    external_network_bridge =\n'

Change-Id: Ia461dcbbec531c4c6295b3c7e10da12c57b7d58b
Closes-Bug: 1626995
2016-10-04 16:22:31 +01:00
Christian Berendt
1116ae3f66 Add fwaas_driver.ini file to neutron-vpnaas-agent container
This solves the following issue:

oslo_config.cfg.ConfigFilesNotFoundError: Failed to find some config
files: /etc/neutron/fwaas_driver.ini

Change-Id: I606e591057574ca113f2cba18618f455f7c36bc6
Closes-bug: #1625672
2016-09-20 16:57:48 +02:00
Jenkins
ebcd7b2979 Merge "Remove duplicate lbaas provider config" 2016-09-19 13:48:18 +00:00
liyingjun
1b04a23d95 Remove duplicate lbaas provider config
Option `service_provider` is defined in neutron_lbaas.conf, there
is a duplicated config option in neutron.conf, it should be removed
there. Otherwise neutron-server will not be able to start with error:
'Invalid: Driver
neutron_lbaas.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver is
not unique across providers'

Change-Id: I3fc379535eb00bbcb23aa41de95ca8161883a181
Closes-bug: #1625174
2016-09-19 12:50:14 +00:00
liyingjun
0a024d9d7a Fix vpnaas for neutron
1. Install the missing vpnaas python module in neutron-server Dockerfile
2. Remove duplicated neutron-lbaas-common package from neutron-server,
since it is installed in neutron-base
3. Fix service plugin config, it's not vpn`ass` ;)) 'vpnass' ->
'neutron_vpnaas.services.vpn.plugin.VPNDriverPlugin' [1]

[1]:
https://github.com/openstack/neutron-vpnaas/blob/stable/newton/devstack/settings#L8

Change-Id: I5250b6875d96ef5df9cf39bce10ce072982aa80d
Closes-bug: #1625020
2016-09-19 07:19:00 +00:00
Christian Berendt
be0fcb5b99 Integrate neutron-vpnaas-agent into the neutron Ansible role
Implements: blueprint neutron-vpnaas-agent
Co-Authored-By: zhubingbing <zhubingbing10@gmail.com>
Change-Id: I1fae21f48d5beef47934aef7c23910536955f2b8
2016-09-15 05:07:46 +00:00