5588d7217e
Add support for the ussuri stable branch. * Removed use of services in devstack (e.g. FWaaS and LBaas), which were only used by the deprecated legacy plugin. * https://review.opendev.org/#/c/572767/ changed the return value of _get_security_groups_on_port from a list of security group IDs to a list of security group OVOs. The monkey patch of this method has been updated to be consistent with this upstream change. * https://review.opendev.org/#/c/703143/ removed the upstream get_binding_levels, which is replaced by the corresponding OVO call, get_binding_level_objs. * https://review.opendev.org/#/c/709122/ broke the __repr__ method in the AddressScope model class. This patch works around this by using the dictionary representation instead. * https://review.opendev.org/#/c/679399/ made the MTU field of networks non-nullable, and sets it to a constant if not set explicitly. This broke GBP APIs which create networks as part of their implementation. This patch adds a monkey patch to pass in a value of 0, if one wasn't specified. * Fixed alias uncovered by PEP8 checks. Change-Id: I219bc9a5c2034499e59788ab11ef0ae310e97e1e
89 lines
3.4 KiB
Plaintext
Executable File
89 lines
3.4 KiB
Plaintext
Executable File
# Make sure the plugin name in local.conf is "group-based-policy", as in: enable_plugin group-based-policy <remote> <branch>
|
|
source $DEST/group-based-policy/devstack/lib/group-based-policy
|
|
|
|
ENABLE_GBP_GATE=${ENABLE_GBP_GATE:-False}
|
|
ENABLE_APIC_AIM=${ENABLE_APIC_AIM:-False}
|
|
ENABLE_APIC_AIM_GATE=${ENABLE_APIC_AIM_GATE:-False}
|
|
[[ $ENABLE_APIC_AIM = True ]] && source $DEST/group-based-policy/devstack/lib/apic_aim
|
|
[[ $ENABLE_APIC_AIM_GATE = True ]] && source $DEST/group-based-policy/devstack/lib/apic_aim
|
|
[[ $ENABLE_NSX_POLICY = True ]] && source $DEST/group-based-policy/devstack/lib/nsx
|
|
|
|
ENABLE_NFP=${ENABLE_NFP:-False}
|
|
[[ $ENABLE_NFP = True ]] && NFP_DEVSTACK_MODE=${NFP_DEVSTACK_MODE:-base}
|
|
[[ $ENABLE_NFP = True ]] && source $DEST/group-based-policy/devstack/lib/nfp
|
|
# VM locations
|
|
ConfiguratorQcow2Image=${ConfiguratorQcow2Image:-build}
|
|
|
|
# Enable necessary Neutron plugins, including group_policy and ncp (L3
|
|
# is set via ML2_L3_PLUGIN, so isn't listed here).
|
|
_neutron_service_plugin_class_add "group_policy,ncp"
|
|
|
|
# Preferred git mirror
|
|
GIT_BASE=${GIT_BASE:-https://opendev.org}
|
|
|
|
# Git repositories needed to deploy GBP:
|
|
GBPSERVICE_REPO=${GBPSERVICE_REPO:-${GIT_BASE}/x/group-based-policy.git}
|
|
GBPSERVICE_BRANCH=${GBPSERVICE_BRANCH:-master}
|
|
GBPCLIENT_REPO=${GBPCLIENT_REPO:-${GIT_BASE}/x/python-group-based-policy-client.git}
|
|
GBPCLIENT_BRANCH=${GBPCLIENT_BRANCH:-stable/ussuri}
|
|
GBPUI_REPO=${GBPUI_REPO:-${GIT_BASE}/x/group-based-policy-ui.git}
|
|
GBPUI_BRANCH=${GBPUI_BRANCH:-master}
|
|
GBPHEAT_REPO=${GBPHEAT_REPO:-${GIT_BASE}/x/group-based-policy-automation.git}
|
|
GBPHEAT_BRANCH=${GBPHEAT_BRANCH:-master}
|
|
AIM_BRANCH=${AIM_BRANCH:-master}
|
|
OPFLEX_BRANCH=${OPFLEX_BRANCH:-stable/ussuri}
|
|
APICAPI_BRANCH=${APICAPI_BRANCH:-master}
|
|
ACITOOLKIT_BRANCH=${ACITOOLKIT_BRANCH:-noiro-lite}
|
|
|
|
# Enable necessary services, including group-policy (and disable others)
|
|
disable_service n-net
|
|
enable_service q-svc
|
|
if [[ $ENABLE_APIC_AIM = True || $ENABLE_APIC_AIM_GATE = True ]]; then
|
|
disable_service q-agt
|
|
disable_service q-l3
|
|
else
|
|
enable_service q-agt
|
|
enable_service q-l3
|
|
fi
|
|
if [[ $ENABLE_APIC_AIM_GATE = True ]]; then
|
|
disable_service q-dhcp
|
|
disable_service q-meta
|
|
else
|
|
enable_service q-dhcp
|
|
fi
|
|
enable_service q-meta
|
|
enable_service neutron
|
|
enable_service group-policy
|
|
|
|
if [[ $ENABLE_NSX_POLICY = False ]]; then
|
|
if [[ $ENABLE_APIC_AIM_GATE = False ]]; then
|
|
ENABLED_SERVICES+=,heat,h-api,h-api-cfn,h-api-cw,h-eng
|
|
disable_service tempest
|
|
else
|
|
# this may not be required
|
|
DISABLED_SERVICES+=,n-api,n-cpu,n-cond,n-sch,n-novnc,n-cauth,g-api,g-reg,c-sch,c-api,c-vol,horizon,heat,h-api,h-api-cfn,h-api-cw,h-eng,dstat,tempest
|
|
fi
|
|
fi
|
|
if [[ $ENABLE_NFP = True ]]; then
|
|
# NFP services
|
|
enable_service nfp_orchestrator
|
|
enable_service nfp_proxy
|
|
enable_service nfp_proxy_agent
|
|
[[ $NFP_DEVSTACK_MODE = base ]] && enable_service nfp_base_configurator
|
|
[[ $NFP_DEVSTACK_MODE != base ]] && enable_service nfp_config_orchestrator
|
|
fi
|
|
if [[ $ENABLE_NSX_POLICY = True ]]; then
|
|
disable_service q-meta
|
|
disable_service q-dhcp
|
|
disable_service q-l3
|
|
disable_service q-agt
|
|
fi
|
|
|
|
OVS_PHYSICAL_BRIDGE=br-ex
|
|
|
|
# Deployment preferences
|
|
SYSLOG=${SYSLOG:-True}
|
|
|
|
# Skip exercises by default (can be overridden in local.conf)
|
|
SKIP_EXERCISES=${SKIP_EXERCISES:-volumes,trove,swift,sahara,euca,bundle,boot_from_volume,aggregates,zaqar,client-env,neutron-adv-test,floating_ips,client-args,horizon,sec_groups,gbp_servicechain,gbp_heat}
|