344 Commits

Author SHA1 Message Date
Zuul
0e9b4413f4 Merge "Fix dhcp_agent configuration for vmware DVS" 2017-12-28 04:57:44 +00:00
Pierre Hanselmann
32d55341fb Fix dhcp_agent configuration for vmware DVS
interface_driver parameter is missing when using vmware DVS on the
dhcp_agent configuration. As a result we get the following error:
Error loading interface driver 'None'

Change-Id: I302a1392615792bd65cab9c0933cb7f7e5e1880d
Closes-Bug: #1736410
2017-12-18 15:16:08 +01:00
Zuul
a29487cd50 Merge "missing permissions when running as non root" 2017-12-18 10:56:21 +00:00
Zuul
89fa6f2f4e Merge "automate ovs datapath configuration" 2017-12-13 17:58:03 +00:00
Mathieu Rohon
fc593d531b missing permissions when running as non root
some tasks miss permissions to be run as a normal user

Change-Id: Ic53308adb7fa3a10a7b1f1caa27ca7dd67037cdd
2017-12-12 16:51:36 +01:00
Zuul
9b48099441 Merge "Add support for hybrid messaging backends" 2017-11-28 19:06:49 +00:00
Zuul
3aa21d78c5 Merge "Add dvr_no_external l3 dvr agent mode" 2017-11-24 02:49:03 +00:00
Andrew Smith
fd1d3af0df Add support for hybrid messaging backends
This commit separates the messaging rpc and notify transports in order
to support separate and different oslo.messaging backends

This patch:
* add rpc and notify variables
* update service role conf templates
* add example to globals.yaml
* add release note

Implements: blueprint hybrid-messaging
Change-Id: I34691c2895c8563f1f322f0850ecff98d11b5185
2017-11-22 14:09:40 -05:00
Zuul
2752709507 Merge "HyperV should not disable tunneling" 2017-11-22 16:24:41 +00:00
yong sheng gong
ff89ff4215 Add dvr_no_external l3 dvr agent mode
This patch introduces inner-compute and external-compute nodes
group to distinguish compute nodes which do not have external
reachability from compute nodes which can reach outside.

Co-Authored-By: jinke <jin.ke@99cloud.net>
Co-Authored-By: yong sheng gong <gong.yongsheng@99cloud.net>

Change-Id: I45b945f7885e8243b017cf8607cbd7f9827cb6e9
Closes-bug: #1722026
2017-11-21 22:26:19 -05:00
Sean Mooney
7eb24fa377 automate ovs datapath configuration
- This change automates generation of
  the datapath_type paramater in the ml2_conf.ini
- If enable_ovs_dpdk is no the datapath type
  will be system else it will be netdev which maintains
  the current default behaviour when dpdk is not enabled.

Change-Id: Iedbf39c621f3c0237f9b9934492b12c600f2c4d3
partial-implementes: bp/ovs-dpdk
2017-11-10 16:19:05 +00:00
Pierre Hanselmann
f0c7e7fef5 Enable vwmware dns-integration
dns-integration extension should be enable when
vmware is used.

Change-Id: I31943146e139108a913b9b5e9a0b0283b8ae4830
2017-11-08 15:23:14 +01:00
Duong Ha-Quang
2d3866c6a4 Specify 'become' for only necessary tasks (default roles)
Add become to only neccesary tasks in roles:
- glance
- heat
- horizon
- keystone
- neutron
- nova
- openvswitch

Gate is also updated to use 'become' feature

Change-Id: I2f3f27306e9f384148e1ad4d54d8da2ebef34d00
Partial-Implements: blueprint ansible-specific-task-become
2017-10-31 02:55:31 +00:00
Dan Ardelean
bac90b87bd HyperV should not disable tunneling
HyperV support disables tunneling for entire environment. This
should not be the case since tunneling can be used for KVM in mix
env. In this case, HyperV VMs can only use flat/vlan networks.

Change-Id: I6237c42918442625acd946b7455d236612ba19cc
Closes-Bug: #1725417
2017-10-27 12:35:31 +03:00
Jeffrey Zhang
baa9319a75 Move to zuul v3 in project jobs
Partial-Bug: #1720601
Change-Id: Ibc20a6ae8c645ff82f3c14a6286073dffd4cfae2
2017-10-18 12:31:52 -07:00
Jenkins
65e9b8ae10 Merge "Implement neutron firewall v2" 2017-10-14 08:04:32 +00:00
Jenkins
d474987ad9 Merge "Fix deployment with public TLS enabled" 2017-10-12 08:41:00 +00:00
Jenkins
149cd19630 Merge "Add placement section to neutron.conf" 2017-10-11 09:27:06 +00:00
Jenkins
8e2e437e6c Merge "Move vmware password parameters to passwords.yml" 2017-10-10 09:05:06 +00:00
Christian Berendt
9db257b13f Move vmware password parameters to passwords.yml
Change-Id: Ie26c6b392c5ac86c3ec5effa5241ce5cad10fe40
2017-10-10 07:11:20 +02:00
Christian Berendt
39adda41b6 Add placement section to neutron.conf
This is required by routed provider networks.

Change-Id: I529c310c5119e68343114dc1ef12d7d8cc7e2ce1
2017-10-09 07:17:20 +00:00
Eduardo Gonzalez
56374206be Fix deployment with public TLS enabled
When deploying with tls enabled in public
endpoints, ansible modules fails due SSL certificates
are self-signed.

This change adds a new variable to allow customization
on which endpoints ansible should connect.
Defaults to admin because admin auth parameters defaults
to admin endpoint.

Change-Id: Ic3ed58cf9c9579cae08a11bbfe6fce983b5a9cbc
Closes-Bug: #1720995
2017-10-05 08:36:34 +00:00
Jeffrey Zhang
068a45e39e Implement neutron firewall v2
Closes-Bug: #1719775
Depends-On: I76803f0f81260129a242e31e81f4f956c5a44ef9
Change-Id: I675c486dda17ce5d6d5a9f665ade904f42d06611
2017-10-03 10:36:56 +08:00
Pierre Hanselmann
c60293f6d6 Fix neutron invalid json file
Fix a missing comma in config.json when neutron_plugin_agent is set
to 'vmware_nsxv' or 'vmware_dvs'.

Closes-Bug: #1720380

Change-Id: I088f09a426a5435202176c45a77b1fbc19468f97
2017-09-29 16:53:28 +02:00
Christian Berendt
2e91cc197b Add service plugin segment to neutron
This also sorts the list service_plugins.

Change-Id: I28c12337e56060061a5db13c9a23f8d4b231b1fd
2017-09-28 09:33:26 +02:00
Bertrand Lallau
a3dfdfc085 Simplify Openstack services configuration possibilities
Actually Openstack services configuration can be overriden using many
files:
- /etc/kolla/config/<< service name >>/<< config file >>
- /etc/kolla/config/<< service name >>/<<host>>/<< config file >>
- /etc/kolla/config/global.conf
- /etc/kolla/config/database.conf
- /etc/kolla/config/messaging.conf

Only per-service configuration is actually documented here:
https://github.com/openstack/kolla-ansible/blob/master/doc/advanced-configuration.rst#L164

Allowing to globally modify service configuration can be perform too,
but it can be done in 3 different manners, all not documented:
- /etc/kolla/config/global.conf
- /etc/kolla/config/database.conf
- /etc/kolla/config/messaging.conf

database.conf and messaging.conf seems redundant with global.conf.
In order to simplify codebase it seems logical to remove them.

Documentation has been added for overriding configuration globally and
release note has been added too.

Closes-Bug: #1682479
Change-Id: I5d922dfc0d938173bad34ac64e490b78db1b7e31
2017-09-13 17:47:36 +02:00
Bertrand Lallau
41d4d7bcaf Clean Boolean condition check on exists check
"bool" filter is not required cause exists return Boolean

Change-Id: I5fa53ec1ebba14ebb8ed3d3d75ae4fb0c6666c44
2017-09-01 09:44:22 +02:00
Kuo-tung Kao
5d22ea34c0 let openvswitch_db listener localhost
Openvswitch_db is not necessary to listener api_address.
Just let openvswitch_db listener localhost to avoid security issues.

Change-Id: If4912d90abae933a1ed9e2d14336b89b7c7179dd
Closes-Bug: #1712767
2017-08-24 16:43:47 +08:00
Bertrand Lallau
b6aadb9656 Fix VMware VPN, LBAAS and neutron-server config
As describe here in vmware-guide:
https://github.com/openstack/kolla-ansible/blob/master/doc/vmware-guide.rst#L116
VMware NSX-V (neutron_plugin_agent: "vmware_nsxv") supports Neutron
LBaaS and VPNaaS services.

neutron_plugin_agent valid options are [ openvswitch, linuxbridge,
vmware_nsxv, vmware_dvs, opendaylight ]:
https://github.com/openstack/kolla-ansible/blob/master/ansible/group_vars/all.yml#L125

Change-Id: I50667862adc7a3d51465a482b513e924f12b75cd
Closes-Bug: #1711576
2017-08-18 13:00:32 +02:00
Jenkins
5cff57ae4e Merge "Add vpnaas support to vsphere by vmware-nsx plugin" 2017-08-17 00:31:17 +00:00
shaofeng_cheng
9ea1b06bfa Remove service_providers in vpnaas_agent.ini
Service_providers config group is already configured in the neutron_vpnaas.conf.
So, we only need to load the neutron_vpnaas.conf configuration file
when the neutron_vpnaas_agent container starts, without having
to duplicate the configuration.

Change-Id: I7b78831325db4bbb263b2cc174e848ea7037ad0a
2017-08-13 10:41:11 +08:00
Jenkins
64b3716e61 Merge "Add fwaas support to vsphere by vmware-nsx plugin" 2017-08-11 11:21:17 +00:00
Jenkins
89a55b4f44 Merge "Clear all l3 related namespace before starting neutron-l3-agent" 2017-08-11 11:16:43 +00:00
shaofeng_cheng
a87af7aab0 Add vpnaas support to vsphere by vmware-nsx plugin
Add vpnaas support to vsphere by vmware-nsx plugin in neutron.

Depends-On: I7b78831325db4bbb263b2cc174e848ea7037ad0a
Change-Id: I83040c97e5ee4b2ccc0a874623870334c313b4b2
Partially-implements: blueprint kolla-ansible-support-vsphere
2017-08-11 09:59:30 +08:00
Marcus G K Williams
57496c4147 Add OpenDaylight role
Adds role for OpenDaylight deploy.

Change-Id: I1e697ea4d3f33aab4b0f55863a377b39eda8f609
Co-Authored-By: Mauricio Lima <mauriciolimab@gmail.com>
Co-Authored-By: Jiri Prokes <jirix.x.prokes@intel.com>
Co-Authored-By: Eduardo Gonzalez <dabarren@gmail.com>
Partially-Implements: blueprint opendaylight-support
2017-08-03 07:39:38 -07:00
guochao
70ca560322 Add vmware DVS support to kolla-ansible
Openstack is able to simply manage VLAN network on VMware
Distributed Switch.
DHCP agent can provide dhcp offer with vlan tag provided
by OVS.
Both neutron external nic and physical nic of vCenter/
vSphere should be on a vlan trunk port and can communicate
with each other.

Depends-On: I4655086a3f058ec769d3d37ec6a19565b5ea0841
Change-Id: I6d1629e93f0efeddd2a9000f66cc6f714bebb07c
Partially-implements: blueprint kolla-ansible-support-vsphere
2017-07-24 05:42:14 +00:00
Eduardo Gonzalez
d4e7dfb376 Finish/fix neutron sfc service
Neutron-sfc-agent start its functions with openvswitch.
This change moves sfc configuration into neutron-openvswitch-agent.

Rework config files to use openvswitch when sfc or openvswitch
are used as network plugin.

Also adds sfc extension_driver to ml2

Change-Id: If1ebf9554f6d686cc6d064e698a48f8a6b6172b3
Closes-Bug: #1664493
Depends-On: I60ba1333231a4ae38a041d41e551f7d74fe15e3b
2017-07-19 09:06:24 +01:00
Jenkins
8df4d59593 Merge "Restart lbaas agent when lbaas conf changed" 2017-07-19 03:26:57 +00:00
Jeffrey Zhang
cacf08f0a6 Remove all kolla-kubernetes configurations
kolla-kubernetes is using its own configuration generation[0], so it is
time for kolla-ansible to remove the related code to simplify the
logical.

[0] https://github.com/openstack/kolla-kubernetes/tree/master/ansible

Change-Id: I7bb0b7fe3b8eea906613e936d5e9d19f4f2e80bb
Implements: blueprint clean-k8s-config
2017-07-18 22:00:58 +08:00
shaofeng_cheng
6c58d554de Restart lbaas agent when lbaas conf changed
Neutron-lbaas-agent container is not restart when neutron_lbaas.conf changed.

Closes-Bug: #1704900

Change-Id: Ie9babdf5ad0875b604cb1728a116b450e0f89858
2017-07-18 09:35:19 +08:00
shaofeng_cheng
4eda91e229 Add fwaas support to vsphere by vmware-nsx plugin
Add fwaas support to vsphere by vmware-nsx plugin in neutron.

Change-Id: Ie80830f97701d322a3610815f6abd63c523a96d4
Partially-implements: blueprint kolla-ansible-support-vsphere
2017-07-17 17:57:43 +08:00
Jenkins
d5c6689629 Merge "Fix fwaas options" 2017-07-14 13:17:42 +00:00
Jenkins
003450a2c6 Merge "Only use br-tun on network and compute nodes" 2017-07-13 12:08:41 +00:00
Jenkins
a71aa61ea7 Merge "Use unified vars in task" 2017-07-12 01:56:12 +00:00
Jenkins
9e2a023397 Merge "Use /run for all containers when need access namespace" 2017-07-12 01:55:23 +00:00
Jenkins
4510c525a6 Merge "Set neutron RPC workers and state report workers" 2017-07-10 13:44:18 +00:00
Jenkins
0572a394be Merge "Avoid launching "local" actions too many times" 2017-07-10 13:40:49 +00:00
Jeffrey Zhang
58964d6825 Clear all l3 related namespace before starting neutron-l3-agent
Remove all l3 related namespaces in case of multiple active routers in
l3 high available mode. The root cause is that keepalived does not
remove the vip address from nic during starting.

neutron-vpnaas-agent is subclass of l3 agent, so should remove all l3
related namespace before starting vpnaas agent.

Closes-Bug: #1703078
Depends-On: Ic9417d2eb03e0dd93f7c668b189b4ad9c72eae0f
Change-Id: I05c1faf2551bb5e70c299e884adf58cd2af52739
2017-07-10 11:53:13 +08:00
Jeffrey Zhang
dba360f5a8 Use /run for all containers when need access namespace
If use /run/netns, it may cause namepace stale and unable to remove. The
root cause may be that docker engine still unrelease the namespace
folder.

Change-Id: If120d54c266878990c952b60043b596b0a0788ab
Closes-Bug: #1703077
2017-07-08 14:07:59 +08:00
Jenkins
f2a19a4811 Merge "Standardize Keystone domain variables" 2017-07-07 09:21:16 +00:00