Adds VPNaaS support for OVN.
Add a new stand-alone VPN agent to support OVN+VPN. Add OVN-specific
service and device drivers that support this new VPN agent. This will
have no impact on the existing VPN solution for ML2/OVS, the existing
L3 agent and its VPN extension will still work.
Add a new VPN agent scheduler that will schedule VPN services to VPN
agents on a per-router basis.
Add two new database tables: vpn_ext_gws (to store extra port IDs)
and routervpnagentbindings (to store VPN agent ID per router).
More details see spec (neutron-specs/specs/xena/vpnaas-ovn.rst).
This work is based on work of MingShuan Xian (xianms@cn.ibm.com),
see https://bugs.launchpad.net/networking-ovn/+bug/1586253
Depends-On: https://review.opendev.org/c/openstack/neutron/+/847005
Depends-On: https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/847007
Closes-Bug: #1905391
Change-Id: I632f86762d63edbfe225727db11ea21bbb1ffc25
This is an automatically generated patch to ensure unit testing
is in place for all the of the tested runtimes for antelope. Also,
updating the template name to generic one.
See also the PTI in governance [1].
[1]: https://governance.openstack.org/tc/reference/project-testing-interface.html
Change-Id: I4b384c47e618511b1d5016d966e3ccde496c82fe
Unit tests jobs (openstack-tox-py3x) are better to run with latest
Neutron otherwise they can fail till a new Neutron release is out.
Change-Id: I83cb8ca8969567f0383f6842ccf66e1864e0a715
This patch is mean to stop running functional tests so we can land
multiple independent smaller patches (since some will/can be back-
ported and other won't be).
Change-Id: Ic0a4def429942203416560491b85651a4c30c8e1
It migrates neutron-vpnaas-dsvm-functional-sswan job to the native
Zuulv3 syntax and renames it to be "neutron-vpnaas-functional-sswan".
Change-Id: Ibe6ac8677ace52e08edb7e47f3365616a3e6b29a
This is a mechanically generated change to replace openstack.org
git:// URLs with https:// equivalents.
This is in aid of a planned future move of the git hosting
infrastructure to a self-hosted instance of gitea (https://gitea.io),
which does not support the git wire protocol at this stage.
This update should result in no functional change.
For more information see the thread at
http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003825.html
Change-Id: I595d2589e375b006d629885c56794bb25082a483
lower-constraints.txt is updated.
- ryu 4.24
- pecan 1.3.2
neutron-vpnaas-tempest-libreswan-centos is now non-voting
because Cinder DB migration fails on CentOS 7.
This patch also includes the changes from [1] as without them the tests
fail.
[1] https://review.openstack.org/#/c/599034/
Related-Bug: 1808709
Change-Id: Id6a2eadfacb3983cfc05142860a827d3233561dd
This is a mechanically generated patch to switch the documentation
jobs to use the new PTI versions of the jobs as part of the
python3-first goal.
See the python3-first goal document for details:
https://governance.openstack.org/tc/goals/stein/python3-first.html
Fix tox.ini html files in right place.
Change-Id: I8493a3ef704b1da458153a8da3f9b26145f5bff2
Story: #2002586
Task: #24314
Use openstack-tox-cover template, this runs the cover job
in the check queue only.
Use openstack-lower-constraints-jobs template, remove the
definition of neutron-vpnaas-tox-lower-constraints, the neutron
template does this correctly.
Remove jobs that are part of the templates.
Change-Id: I7e39bc8e3348883b06a8f38a503dd5db14d20c5d
This is a mechanically generated patch to complete step 1 of moving
the zuul job settings out of project-config and into each project
repository.
Because there will be a separate patch on each branch, the branch
specifiers for branch-specific jobs have been removed.
Because this patch is generated by a script, there may be some
cosmetic changes to the layout of the YAML file(s) as the contents are
normalized.
See the python3-first goal document for details:
https://governance.openstack.org/tc/goals/stein/python3-first.html
Change-Id: I5c06bc35d0ff9e68743b1d44cbba2541268b88ec
Story: #2002586
Task: #24314
This patch adds a py3-dev tox target for running py3 UTs locally.
It also updates the local .zuul.yaml for a neutron-vpnaas specific
lower constraints job that ensure neutron/master is installed.
Change-Id: Iab9f134b17b56d765d5ac523d9b5a4b4d4e00fb7
Partial-Bug: #1779335
LibreSwan 3.19 introduces a new commandline argument '--nssdir' for
pluto which defaults to '/etc/ipsec.d'. As older versions don't
understand such an option, we cannot just add it to the commandline.
The commandline arguments of LibreSwan are not stable enough to rely on.
For example, in 3.19, 'ipsec initnss' has the new argument '--nssdir',
and in 3.20, 'ipsec pluto' also gets this new argument '--nssdir', then
in 3.22, the argument '--ctlbase' is phased out.
In this commit, instead of trying new options and then fallback to old
ones for older versions, the bind-mount method used in StrongSwan driver
is adopted. With /etc and /var/run bind mounted, all the commandline
arguments related to configuration file places can be removed. This
ensures that changes of such arguments between different versions won't
bother as the default places are always used.
This commit also replaces 'auth=' by 'phase2=' in the configuration
template as the former is for a long time an alias of the latter and
removed in LibreSwan 3.19.
The virtual-private argument of 'ipsec pluto' has been put into the
configuration file to avoid commas(,) in the commandline so that the
netns_wrapper can work well.
A new tempest job for running LibreSwan as the device driver on CentOS 7
is also added to avoid regression.
This commit has been simply tested on CentOS 7.4 with the following
versions of LibreSwan provided by the CentOS repo:
- libreswan-3.12-5.el7.x86_64.rpm
- libreswan-3.12-10.1.el7_1.x86_64.rpm
- libreswan-3.15-5.el7_1.x86_64.rpm
- libreswan-3.15-8.el7.x86_64.rpm
- libreswan-3.20-3.el7.x86_64.rpm
- libreswan-3.20-5.el7_4.x86_64.rpm
and different versions of LibreSwan provided by libreswan.org[1]:
[1] https://download.libreswan.org/binaries/rhel/7/x86_64/
Change-Id: Iacb6f13187b49cf771f0c24662d6af9217c211b8
Closes-Bug: #1711456
'neutron_vpnaas' is the correct module name.
Previously it was 'neutron-vpnaas' and as a result tempest and
functional tests are run unexpectedly.
Change-Id: I2e691dfcc10ebc7e28d2c546b171006601ea17d5
Create a tox environment for running the unit tests against the lower
bounds of the dependencies.
Create a lower-constraints.txt to be used to enforce the lower bounds
in those tests.
Add openstack-tox-lower-constraints job to the zuul configuration.
See http://lists.openstack.org/pipermail/openstack-dev/2018-March/128352.html
for more details.
Change-Id: I312f591a68fa30636502eadb563de5656faca3e9
Depends-On: https://review.openstack.org/555034
Signed-off-by: Doug Hellmann <doug@doughellmann.com>
Zuul no longer requires the project-name for in-repo configuration.
Omitting it makes forking or renaming projects easier.
Change-Id: I3407a96dd5f4fce5683386ffd9784118a2d7e6aa
* https://review.openstack.org/519310 syncs the code from neutron
project to neutron-tempest-plugin repo and it is better to depend
on new one inorder to avoid the breakage.
Change-Id: Icf3ec7c186f45e86d602d5bc8754b91ddab47732
This patch implements first step in zuulv3 migration guide [1]:
Move jobs to neutron-vpnaas repo
[1] https://docs.openstack.org/infra/manual/zuulv3.html#legacy-job-migration-details
Needed-By: I6feeb874eedbb7e7278923c4f6f4e526f1def24c
Needed-By: I9ee5756c15ab6c8a393dd77680d6277fb35a7ee2
Co-Authored-By: Cao Xuan Hoang <hoangcx@vn.fujitsu.com>
Change-Id: If66846aa7bfc2afd42b9ffd077cdb179563f5995
Jeremy Stanley
OpenStack Release Bot