Files
puppet-neutron/manifests/agents/fwaas.pp
Takashi Kajinami 2f9f130ef6 Re-add FWaaS support
Neutron FWaaS was revived in 2022[1] and was recently added back to
RDO.

[1] a9f26b81e28359e6ccacf95a97557ad3005adc5f

Change-Id: I79b50dcade4a97368a9a07fcdda3f3c35f2c5869
Signed-off-by: Takashi Kajinami <kajinamit@oss.nttdata.com>
2025-07-03 01:36:22 +09:00

70 lines
2.0 KiB
Puppet

# == Class: neutron::agents:fwaas
#
# Setups Neutron FWaaS agent.
#
# === Parameters
#
# [*package_ensure*]
# (optional) Ensure state for package. Defaults to 'present'.
#
# [*driver*]
# (optional) Name of the FWaaS driver.
# Defaults to $facts['os_service_default'].
#
# [*enabled*]
# (optional) Enable FWaaS.
# Defaults to $facts['os_service_default'].
#
# [*conntrack_driver*]
# (optional) Name of the firewall l3 driver.
# Defaults to $facts['os_service_default'].
#
# [*firewall_l2_driver*]
# (optional) Name of the firewall l2 driver.
# Defaults to $facts['os_service_default'].
#
# [*purge_config*]
# (optional) Whether to set only the specified config options
# in the fwaas config.
# Defaults to false.
#
class neutron::agents::fwaas (
$package_ensure = present,
$driver = $facts['os_service_default'],
$enabled = $facts['os_service_default'],
$conntrack_driver = $facts['os_service_default'],
$firewall_l2_driver = $facts['os_service_default'],
Boolean $purge_config = false,
) {
include neutron::deps
include neutron::params
resources { 'neutron_fwaas_agent_config':
purge => $purge_config,
}
# NOTE(tkajinam): options for l3 agent extension
neutron_fwaas_agent_config {
'fwaas/driver': value => $driver;
'fwaas/enabled': value => $enabled;
'fwaas/conntrack_driver': value => $conntrack_driver;
'fwaas/firewall_l2_driver': value => $firewall_l2_driver;
}
Neutron_fwaas_agent_config<||> ~> Service<| title == 'neutron-l3' |>
# NOTE(tkajinam): options for l2 agent extension
neutron_plugin_ml2 {
'fwaas/driver': value => $driver;
'fwaas/enabled': value => $enabled;
'fwaas/conntrack_driver': value => $conntrack_driver;
'fwaas/firewall_l2_driver': value => $firewall_l2_driver;
}
ensure_packages( 'neutron-fwaas', {
'ensure' => $package_ensure,
'name' => $::neutron::params::fwaas_package,
'tag' => ['openstack', 'neutron-package'],
})
}