9834 Commits

Author SHA1 Message Date
Shih-Hao Li
5e0cc2bd77 Add release note for native DHCP/Metadata support
Change-Id: Icb59afa1e5eb6a21149d4d7c06fcfc57b16c71cd
2016-09-15 07:59:39 -07:00
Adit Sarfaty
0d3106062e NSX|V improve validate_network performance
validate_network calls may have called the backend up to 3 times,
while 1 time is enough

Change-Id: Ifbfb7adbb2fd53d279667c163a3e0da03a43293f
2016-09-14 09:36:55 +00:00
Jenkins
c7f26cb926 Merge "Remove deprectaion warnings for db models" 2016-09-14 08:07:37 +00:00
Jenkins
8c2c6395d4 Merge "Adding release notes for new feature - provider security-groups" 2016-09-13 21:10:31 +00:00
Jenkins
393563730d Merge "Add release notes for the Newton features" 2016-09-13 20:18:35 +00:00
Roey Chen
0243c2f56b Adding release notes for new feature - provider security-groups
Change-Id: I949b2ac1b8233b7f600533e182e93cf54536096c
2016-09-13 20:17:17 +00:00
Adit Sarfaty
abd604c91d Fix broken unit tests - add project_id
Commit I8775aa8a477191ef21e7c3c6da31d098befefc3c broke some of the unit tests

Change-Id: I58dbf6a38bcf42ea2c1e655119e1e63edfe2d42e
2016-09-13 13:44:06 +03:00
Devang Doshi
6d6eb4aea8 Tempest: Fixed error with nonexist module
- Fixed below error while running testr tool
- Module changed from oslotest to tempest.lib

Error:
File "/opt/stack/vmware-nsx/vmware_nsx_tempest/tests/base.py", line 18, in <module>
    from oslotest import base
ImportError: No module named oslotest

Change-Id: Ibda31e166db20ecb3422897c5c8194f57a3ceca6
2016-09-11 09:14:02 -07:00
Gary Kotton
33031263ee Remove deprectaion warnings for db models
Change-Id: I597695f60083fade117af7ca73457be544e11590
2016-09-11 01:15:37 -07:00
Jenkins
dd376dead4 Merge "NSX|V3: check if subnet overlaps with shared address space" 2016-09-11 06:20:07 +00:00
Shih-Hao Li
548700e815 NSX|V3: check if subnet overlaps with shared address space
NSX backend doesn't allow a subnet in 100.64.0.0/10 range
attached to a router. Thus we enforce this in the plugin
when creating a subnet.

Change-Id: Icf3c62a40744577d29bb052e5b90b5999c0ba7df
2016-09-10 11:50:58 -07:00
OpenStack Proposal Bot
a516a44261 Updated from global requirements
Change-Id: I9cfb37cb593bc7f21764afb2ffa9ad1d01607d08
2016-09-09 16:13:05 +00:00
Adit Sarfaty
1735b290b2 NSX|V fix IPAM driver log message format
Change-Id: I6064e78b1b970b853b8030dab8e9ba5b2d7fefda
2016-09-09 05:15:59 +00:00
Adit Sarfaty
09b57b6e78 Add release notes for the Newton features
Change-Id: Idf97041b6a35f2a91d1ee562e618eba8a0bc6a09
2016-09-08 15:15:52 +03:00
Adit Sarfaty
0bf70acc43 Fix Admin utils tests - resources registration
Commit I8a40f38d7c0e5aeca257ba62115fa9b02ad5aa93 broke our tests

Change-Id: Ib2d92da04efe4d349a041a6a137497cdaed06209
2016-09-08 12:38:42 +03:00
Jenkins
4bf1a654f1 Merge "NSX|V remove duplicate log message at edge_utils" 2016-09-08 05:50:13 +00:00
Jenkins
d29a465ac2 Merge "NSX|V: ensure that log message does not cause exception" 2016-09-08 05:48:02 +00:00
Adit Sarfaty
a79c52c50a NSX|V remove duplicate log message at edge_utils
The exact same message is also logged 15 lines above.
Change-Id: I1404d313ba9109124c2b2179a39a44514fd181ef
2016-09-08 05:03:35 +00:00
Jenkins
00392d196a Merge "[NSXv3]: get_floatingips filter must pass a list of ports" 2016-09-08 04:47:52 +00:00
Gary Kotton
955e2e6ef3 NSX|V: ensure that log message does not cause exception
Do not long index that does not exist

Change-Id: I2832ddf064b8bccdb9ad4c02f41ec023096a1365
Closes-bug: #1621103
2016-09-07 07:18:22 -07:00
Jenkins
8294215cb4 Merge "NSX|v IPAM support for external & provider networks" 2016-09-07 11:57:20 +00:00
Jenkins
c47854dd6b Merge "NSXv: use contexts correctly while using threads" 2016-09-07 11:52:59 +00:00
Jenkins
751c8dadfd Merge "NSX|V: enable port group to belong to a spoofguard policy" 2016-09-07 09:45:44 +00:00
Kobi Samoray
fe72c1bd0c NSXv: use contexts correctly while using threads
Contexts are not thread safe and therefore, methods which are called
as thread entry point should create their own context, and pass to
any called methods which are using contexts.

Change-Id: Ia8629c211807972d228358893a7b787c55b5be7f
2016-09-07 09:26:35 +00:00
Abhishek Raut
3a1c0daab4 [NSXv3]: get_floatingips filter must pass a list of ports
Filters accept list of ports in the query instead of a single
port id. This led to get_floatingips returning empty list
even if a floating ip exists for a given port.
This patch removes the redundant get_floatingips method and
passes a list instead of a single item in TaaS driver.

Change-Id: I349f9ad16edb4e5069c70d209ccd7537f59620ec
2016-09-07 01:10:40 -07:00
Gary Kotton
62f0aa3cb5 NSX_V3: always set the metadata proxy in nova.conf
For devstack ensure that this is always set. This willenable the code
to work for native and non native matadata support

Change-Id: Ibdf0031d99fedbe3cbeb1f40dd19d52b7669d4bb
2016-09-07 07:40:04 +00:00
Jenkins
cf2dcccc7f Merge "NSX|V3: ensure that the NSX credenatials are set for devstack" 2016-09-07 07:35:02 +00:00
Jenkins
8ef287eee4 Merge "Use model_base from neutron_lib" 2016-09-07 06:16:39 +00:00
Shih-Hao Li
d972419cbd NSX|V3: Add relatedErrors in the details of ManagerError exception
Change-Id: I2e6cc303ef61a61b930b51d3ce7c74d1a269662d
2016-09-06 17:03:37 -07:00
Adit Sarfaty
d2e50bdfb7 NSX|v IPAM support for external & provider networks
For IPv4 external networks and provider networks, NSX-V plugin will use
the NSX-V backend IPAM.
To enable this option set 'ipam_driver = vmware_nsxv_ipam' in the
neutron.conf

Change-Id: Icdc3e7d24dac08a29f045f10fcea9ec4496b8446
2016-09-06 12:32:57 +03:00
Gary Kotton
7e63f047ec NSX|V3: ensure that the NSX credenatials are set for devstack
Make sure that the credentials are set when spinning up a devstack
component that requires the OVS then we enforce that the NSX validations
are done.

This is necessary to determine how we configure the OVS manager.

Change-Id: Ibeec9e72ddea45b24ffde5e25b2ca8347c34bd43
2016-09-06 02:21:18 -07:00
Gary Kotton
26435656f9 NSX|V: enable port group to belong to a spoofguard policy
A admin may create a provider network with a port group that already
belongs to a spoofguard policy. This patch does three things:

1. Enables the portgroup to have an existing spoofguard policy
2. On roolback does not blow away the portgroup
3. Ensures that a predefined spoofguard policy is not deleted

Change-Id: I66a73e9b697cd4afbecaa8df84a07164df5eda2a
2016-09-05 04:05:55 -07:00
Jenkins
c48a13a77d Merge "NSXV3-devstack: added parameter -1 to curl command" 2016-09-02 08:36:14 +00:00
linb
175f50f5f3 Fix more backup edges at the backend
Backend edge pool have more than maximum number of edges at the backend.
The bug is introduced partly due to commit
I42b632ba7c66cd4fc5e57e6bb91c9c91ec513622. When we try to collect one
edge into backup edge pool, we would first put its status to UPDATE in
case of other service using it. But we didn't add the UPDATE status edge
when we getting backup edge number. The patch fixed the bug.

Change-Id: I674c2f74fc03dceb7911f59353176ebad1637947
2016-09-01 16:08:26 +03:00
Saurabh Chordiya
44fb8390ed NSXV3-devstack: added parameter -1 to curl command
curl command without -1 doesn't work on RHEL in case of https so
need to use -1 to force it to use TLS version 1.
Also verified that it works on Ubuntu w/wo -1

Change-Id: I855e41c3348233a395ad94ac46a8d1eaef6dd7ff
2016-09-01 16:55:52 +05:30
Jenkins
ca07940adf Merge "NSX|V3: Fix connected routes not advertised" 2016-09-01 11:15:19 +00:00
Gary Kotton
943085e3f2 Use model_base from neutron_lib
This follows the commit 60ae70dde196191217c8c46242be283c7fd30039.
That code has been approved upstream

Change-Id: Ibe283886cf81822750db4b1dedfa69cdac1f7e43
2016-09-01 02:37:49 -07:00
linb
c848378a2e NSX|V3: Fix connected routes not advertised
When disabling snat flag of router, we would consider it a NOSNAT user
case. For this case, we need to advertise connected route so that the
internal networks of router would be accessible from outside network.

Change-Id: I6f92384bd19563ac4f9e812765a4a9a93e0c2087
2016-09-01 05:12:32 +00:00
Aaron Rosen
bc26f40491 Fix provider sg delete by non admin and non admin rule change
This patch restricts the deleting of an provider security group only
to the admin thus preventing the tenant from deleting it.

It also prevents a non admin user from adding or deleting rules from
this group.

NOTE: we are using the following policy.json entry to prevent the
creation of a provider security group by a normal tenant:

    "create_security_group:provider": "rule:admin_only"

Change-Id: Ie195225654b0c7cd8cfb715691c5a3bb4c8ee13d
2016-08-31 20:06:36 -07:00
Aaron Rosen
e64512ed2c Fix failing unit tests from neutron changes
The following patch in neutron:

a92647300d0148d5d23f7c16631b192923702a1f

checked the paths to where the securitygroup_db models were located. This
patch fixes the issue by updating the path in the vmware-nsx repo so the
tests pass again.

Change-Id: I7d81ce5cd7ee76928f607d6976ae90b1a7d976a1
2016-08-31 20:06:31 -07:00
Jenkins
1d07f7b63a Merge "NSX|V3: be more robust under port name update" 2016-08-30 19:16:40 +00:00
Jenkins
088c031ab5 Merge "Admin util: remove deprecation warning" 2016-08-30 19:15:52 +00:00
Gary Kotton
e72ee70590 NSX|V: return default AZ if name AZ not found
Ensure that a AZ is returned. There may be an edge case after a
migration that there is no AZ configured.

Change-Id: I56c33f5f331781c1874b8d3fed73f6c2ad90095c
2016-08-30 06:44:32 -07:00
Gary Kotton
144b8b047b NSX|V3: be more robust under port name update
Under load the NSX may throw an exception when trying to update a
attached router port. A update to the port would
lead to the following exception:

"Managing the LogicalRouter attachment on LogicalPort is not
 supported. Please use LogicalRouter APIs to do these operations."

We should not fail on this.

Change-Id: I0f7e0489c2797f0f84c0b33206c203650eec1e7e
2016-08-30 03:46:11 -07:00
Gary Kotton
4098386065 NSX|V3: ensure that variables are assigned
If router_update fails with a ManagerError then the exception
handling may use an unassigned variable.

Change-Id: I46f44dea7e08c5c5108480ddd0ec449f006aca7e
2016-08-30 02:34:04 -07:00
Gary Kotton
2966be9725 Admin util: remove deprecation warning
SecurityGroup was moved to neutron.db.models.securitygroup

Change-Id: Ic02cf91c9fef88b9f552f140bf11b757936f41ae
2016-08-29 23:51:19 -07:00
Jenkins
7a35069b73 Merge "NSXT: Adding a script to set global firewall config autodraft option" 2016-08-29 08:32:33 +00:00
Abhishek Raut
c3b287d4b8 [NSX|v3]: L2gateway fails to start when Bridge cluster configured
Recent change If2fe1e014b78703ff0a9cdff1e4e8d45f3a4a16d
broke L2GW driver for NSXv3. This patch makes sure that the driver
starts and creates bridge clusters using the new nsxlib.
This patch adds a callback to create default l2 gw after the core
plugin is initialized.

Change-Id: Iced699b13e265f515c23fcc952ba9bb1e64b5762
2016-08-28 04:12:09 -07:00
Roey Chen
25b160653d NSXT: Adding a script to set global firewall config autodraft option
Change-Id: I3a7b0b7c5f4d2c2da083ac002dc799060dfd218e
2016-08-28 08:00:08 +00:00
Abhishek Raut
58dc54f52a NSXv3: Fix tap-flow-create to use floating IP of destination port
This patch changes the workflow for L3 SPAN such that the destination
port must have a L3 reachable IP address i.e. a floating IP so that
L3 SPAN can work. Unit tests will be added in a separate patch.

Change-Id: Ie0c2aed71988cbbd9cba60bb1fcb1ec30d0b4bc4
2016-08-27 10:06:15 -07:00