11663 Commits

Author SHA1 Message Date
Adit Sarfaty
93268da5c2 AdminUtil NSX-v3: recreate dhcp server for a network
Usage:
nsxadmin -r dhcp-binding -o nsx-recreate --property net-id=<neutron-net-id>

Change-Id: Ib6e6e8285db95636c912d772b0d3ee543ebba8b6
2018-01-31 09:50:20 +02:00
Gary Kotton
b336b8cc03 NSX|TV: validate plugin is available
When admin creates plugin mapping validate that it is available.

Change-Id: If41dc891e8f9a484b85d00d9fff2f7fa3a6f376c
2018-01-30 07:38:19 +00:00
Zuul
2859a235e6 Merge "NSXv3: allow use api_workers=-1" 2018-01-28 12:15:35 +00:00
OpenStack Proposal Bot
925ebe9728 Updated from global requirements
Change-Id: I7a7cb60caff605e5d4c2c25037ae23a3e4df9166
2018-01-27 20:54:14 +00:00
Kobi Samoray
b934462ccb NSXv3: allow use api_workers=-1
Doing that failed to initialize fwaas callbacks

Change-Id: I5594a5ecd72c10e4d7caf96920a7d418010f52d5
2018-01-25 13:39:12 +02:00
Zuul
8882d158c9 Merge "NSX_V3: add flag to indicate if ENS networks can be created" 2018-01-25 07:35:25 +00:00
Gary Kotton
8b91fd814d NSX_V3: add flag to indicate if ENS networks can be created
Enable admin to control if ENS networks can be used.
In nsx_v3 section a new flag ens_support is added.

Change-Id: I99b885072964870fe61a26a5bab71c7ed0790c87
2018-01-24 02:44:35 -08:00
Zuul
913dbe467e Merge "use vlantransparent api def from neutron-lib" 2018-01-24 09:32:07 +00:00
Boden R
a8bfef1529 use vlantransparent api def from neutron-lib
The vlantransparent extension's API definition was rehomed into
neutron-lib with commit I78c3e0c0b74dd154b6133963dfc8b65f9527bd2c
This patch consumes it by using neutron-lib's implementation in prep
for Ibfaa1ebf24caec62f5743975b206400fcd30436d

Change-Id: I8e2bf3fb75b3ccbcb269677fb2aa826659fbbdd2
2018-01-23 15:29:57 -07:00
Zuul
28582356bb Merge "TVD: FWaaS plugins" 2018-01-23 21:46:43 +00:00
Zuul
e643476a7f Merge "NSX|V: ensure that only LAG is configured and not standby" 2018-01-23 11:34:23 +00:00
Adit Sarfaty
4530377c60 TVD: FWaaS plugins
Adding FWaaS v1/v2 plugins to be used with the TVD core plugin.
The plugins will make sure to separate the v/t returned lists
using the same solution that was introduced for the LBass, now as a
general class decorator.

Change-Id: I5f01b8cf093d5ef3b340dce2d12fc41031dd12e9
2018-01-23 10:18:21 +02:00
Gary Kotton
41e61b9ae8 NSX|V: ensure that only LAG is configured and not standby
In the event that there is a LAG only configure the LAG
and no standby.

Change-Id: Ieacf386ce9a8ca02d795e53c7ddab9d1356ecf88
2018-01-22 00:54:40 -08:00
Zuul
62cf6cb793 Merge "NSX-V3 devstack: cleanup VPNaaS objects" 2018-01-22 08:49:03 +00:00
Zuul
adcc6f7c67 Merge "TVD: ensure get_ports works for DVS plugin" 2018-01-22 07:18:39 +00:00
Gary Kotton
8960282459 TVD: make security group logging more robust
Ensure that DVS security groups (which do not have this extension)
do not cause exceptions

Change-Id: I1a318347f92d6d793768dd20d653c872a3f75da3
2018-01-21 18:09:22 +00:00
Zuul
6268a1f313 Merge "use multiprovidernet api definition from neutron-lib" 2018-01-21 11:32:50 +00:00
Gary Kotton
cdb7ec5b9a TVD: ensure get_ports works for DVS plugin
Get ports would not populate the nic type.

Change-Id: Ic57eca5f71d02e3172df501c8528ba8aa3528e07
2018-01-21 03:02:57 -08:00
Adit Sarfaty
bbddf61c87 NSX-V3 devstack: cleanup VPNaaS objects
Delete nsx vpn sessions and local endpoints when cleaning up devstack

Change-Id: Ie5e9d9f87230fb950b6951e67e5548b24ca64d33
2018-01-21 10:47:22 +00:00
Boden R
c9d90d4e91 use multiprovidernet api definition from neutron-lib
The multiprovidernet API extension's definition was rehomed into
neutron-lib with If3367e6a14074a6225bba527e8f7e38c51280f85 and will be
consumed in neutron via I12c15c360f8bf5a45fbe70e5ed1202ef0e7ec0f0

This patch switches the code over to use neutron-lib's multiprovidernet
API definition rather than neutron's extension.

Change-Id: I6803fdf363a674303f21241a59dc6a281c84d433
2018-01-18 14:40:58 -07:00
Gary Kotton
ab86e8deaf TVD: ensure that can return specific tenant/project requests
A service tenant may do a request for a speicific tenants data,
for example, ports (as in the case with a nova boot). So we need
to ensure that the filters requested by the tenant are met.

Change-Id: Ic7ff59a813347f943e6c84478d9f036c90473c9e
2018-01-18 12:49:58 +00:00
Zuul
3caac5a518 Merge "TVD AdminUtils: Use only objects from specific plugin" 2018-01-18 11:44:37 +00:00
Zuul
f001513e7f Merge "NSX|V: enable binding floating ip's per AZ" 2018-01-18 09:53:48 +00:00
Zuul
e28ed675f6 Merge "NSX-V3 FWaaSV2 prevent adding compute ports to FW group" 2018-01-18 08:24:33 +00:00
Zuul
1a2321c93e Merge "Updated from global requirements" 2018-01-18 08:24:32 +00:00
Zuul
ea075df213 Merge "TVD|AdminUtils: Add all nsxv/v3 utils to tvd" 2018-01-18 08:24:31 +00:00
OpenStack Proposal Bot
3f4d10e2aa Updated from global requirements
Change-Id: I2104888d93fa18ffd8e6c8ae48bc87b9d2f01389
2018-01-18 03:39:17 +00:00
Zuul
fe2c87adbd Merge "NSX-v3: fix update_router_firewall error handling" 2018-01-18 02:32:53 +00:00
Adit Sarfaty
fa6cfd8e2b NSX-V3 FWaaSV2 prevent adding compute ports to FW group
Upstream now supportes FWaaS v2 on compute ports, but our driver does not.
When trying to add a compute port to the Firewall group, its status should
set to Error.

Change-Id: Id5965197c58b940e2d33892023ff321a77eac82a
2018-01-17 16:55:48 +00:00
Zuul
f97b3055df Merge "Updated from global requirements" 2018-01-17 13:27:58 +00:00
Adit Sarfaty
c06d20e21b TVD AdminUtils: Use only objects from specific plugin
filter get_<>s results in AdminUtils to retirve only the neutron objects
that belong to the nsxv/v3 plugin

Change-Id: I2d0675764c6b10861949c69b2f152e585d790f21
2018-01-17 11:39:36 +02:00
Adit Sarfaty
c1ea586d6e NSX-v3: fix update_router_firewall error handling
The wrong exception was used

Change-Id: Ia114a3deedbf752ae908d98bcc72418f67d37b53
2018-01-17 10:17:05 +02:00
Adit Sarfaty
09151b77e9 TVD|AdminUtils: Add all nsxv/v3 utils to tvd
The user of the TVD plugin can use the admin utilities of the nsxv/nsxv3 plugins
by calling:
nsxadmin --plugin nsxv -r <> -o <>
or:
nsxadmin --plugin nsxv3 -r <> -o <>

A separate patch will make sure that only the relevant neutron objects are being
retrived when using those utilities.

Change-Id: I813f69bf2e08f3845f0135fdb00666746f5d20c6
2018-01-17 09:51:59 +02:00
OpenStack Proposal Bot
21a381a68c Updated from global requirements
Change-Id: I9dcdaa1e84cbf430923479f0b39c7c7ded0e2295
2018-01-17 07:26:38 +00:00
Adit Sarfaty
0edcfacc69 AdminUtils: NSX-V3: Show and update the NSX rate limit
Usage:
nsxadmin -r rate-limit -o show
nsxadmin -r rate-limit -o nsx-update --property rate_limit=45

Change-Id: I0b08cd42be61158a1358479d8f0cae271e26541f
Depends-on: I35a05f9810832e9a22ec9db43f167f13df0744a4
2018-01-17 07:08:48 +00:00
Zuul
108a706d92 Merge "Fix VPN api as the NSX api changed" 2018-01-17 06:55:33 +00:00
Zuul
c594154fd8 Merge "TVD availability zones" 2018-01-16 14:04:05 +00:00
Adit Sarfaty
ffd5bbaeda NSX-v| Do not allow setting qos policy on port
The nsx-v plugin supports qos on a netwrok level only.

Change-Id: I0fbe56f02cf5f95445af59ac673131d10cd17a70
2018-01-16 13:47:06 +02:00
Adit Sarfaty
58b5f0b478 Fix VPN api as the NSX api changed
Catching up with different VPN api changes done in the NSX

Change-Id: I78263af403056c9282da5799b9f64b3d8f22b80d
Depends-on: I32d6593860844bd23bb251c3fe30957c6efb9c2a
2018-01-16 11:03:21 +02:00
Gary Kotton
b448aba9b8 NSX|V: enable binding floating ip's per AZ
Enable admin to enable this config variable per AZ.

Change-Id: I19ee2b4adf49e9bcd3e6004dc76d61761bb81b92
2018-01-15 22:09:08 -08:00
Zuul
c4a462d131 Merge "NSX-v3: Use logical switch id in FWaaS V2 rules" 2018-01-15 15:16:21 +00:00
Adit Sarfaty
b0a02917ee TVD availability zones
1. Do not allow the same availability zone to be configured for both
   NSX-V and NSX-T
2. Adding separate configurations for the nsx-v/t default availability
zones under the tvd configuration section:
[nsx_tvd]
nsx_v_default_availability_zones = zone2
nsx_v3_default_availability_zones = zone1

Change-Id: Ic77dae9398b8281b8ea4d2988447907d1ac55c90
2018-01-15 12:59:45 +02:00
Zuul
b12e6a414b Merge "NSX|V: ensure port security is enabled for address pair support" 2018-01-15 07:51:44 +00:00
Gary Kotton
69d87b94ce TVD: support lbaasv2 'provider' filtering
The patch ensures that only a V tenant can see v resources and the
same for a T tenant/project.

NOTES:
1. In the neutron configuration file a new service plugin is created.
   So we need the following:
[DEFAULT]
service_plugins = vmware_nsxtvd_lbaasv2

2. The extensions path needs to be updated so that the default LBaaS
   extensions can be loaded.

So for example in the devstack case we need to configure:
[DEFAULT]
api_extensions_path = /opt/stack/neutron-lbaas/neutron_lbaas/extensions

Change-Id: Iea497cbb150048bedf712a195c7854e4836ad4a5
2018-01-14 22:02:15 -08:00
Gary Kotton
498a8215bd NSX_V3: enable non native DHCP to work with AZ support
The dhcp and metadata prodiles do not need to be set.

Change-Id: I5e7f50d9e9c8517372e04317b17f99434aaba080
2018-01-14 08:21:42 +00:00
Zuul
bdeabecca7 Merge "use api attributes from neutron-lib" 2018-01-13 08:15:44 +00:00
Zuul
3aa4aa5d42 Merge "NSX-v3: Inform FWaaS when a router interface is removed" 2018-01-12 13:50:08 +00:00
Zuul
36250d8af8 Merge "TVD: move plugins init_complete code to the end of init" 2018-01-12 13:28:42 +00:00
Zuul
1b4c6e7a10 Merge "NSXv, DVS: Use neutron DB name instead of neutron_nsx" 2018-01-12 13:28:41 +00:00
Zuul
8bc1f62699 Merge "TV: doc creation of admin for a specific plugin" 2018-01-12 11:48:30 +00:00