133 lines
3.8 KiB
Plaintext
133 lines
3.8 KiB
Plaintext
[[local|localrc]]
|
|
DATABASE_PASSWORD=abc123
|
|
ADMIN_PASSWORD=abc123
|
|
MYSQL_PASSWORD=$DATABASE_PASSWORD
|
|
RABBIT_PASSWORD=abc123
|
|
SERVICE_PASSWORD=$ADMIN_PASSWORD
|
|
SERVICE_TOKEN=abc123
|
|
|
|
Q_SERVICE_PLUGIN_CLASSES=neutron.services.l3_router.l3_router_plugin.L3RouterPlugin,group_policy,ncp,qos
|
|
|
|
|
|
# Using group-policy branches
|
|
# ---------------------------
|
|
|
|
GIT_BASE=${GIT_BASE:-git://git.openstack.org}
|
|
|
|
GBPSERVICE_REPO=${GIT_BASE}/openstack/group-based-policy.git
|
|
GBPSERVICE_BRANCH=master
|
|
#GBPSERVICE_REPO=https://review.openstack.org/openstack/group-based-policy
|
|
#GBPSERVICE_BRANCH=refs/changes/85/298385/154
|
|
|
|
GBPCLIENT_REPO=${GIT_BASE}/openstack/python-group-based-policy-client.git
|
|
GBPCLIENT_BRANCH=master
|
|
#GBPCLIENT_REPO=https://review.openstack.org/openstack/python-group-based-policy-client
|
|
#GBPCLIENT_BRANCH=refs/changes/95/311695/3
|
|
|
|
GBPUI_REPO=${GIT_BASE}/openstack/group-based-policy-ui.git
|
|
GBPUI_BRANCH=master
|
|
#GBPUI_REPO=https://review.openstack.org/openstack/group-based-policy-ui
|
|
#GBPUI_BRANCH=refs/changes/02/136802/14
|
|
|
|
GBPHEAT_REPO=${GIT_BASE}/openstack/group-based-policy-automation.git
|
|
GBPHEAT_BRANCH=master
|
|
#GBPHEAT_REPO=
|
|
#GBPHEAT_BRANCH=
|
|
|
|
# Enable neutron for group-policy-poc
|
|
# -----------------------------------
|
|
disable_service n-net
|
|
#disable_service h-eng
|
|
#disable_service h-api
|
|
#disable_service h-api-cfn
|
|
#disable_service h-api-cw
|
|
enable_service q-svc
|
|
enable_service q-agt
|
|
enable_service q-dhcp
|
|
enable_service q-l3
|
|
enable_plugin neutron-fwaas http://git.openstack.org/openstack/neutron-fwaas stable/ocata
|
|
enable_plugin neutron-lbaas https://git.openstack.org/openstack/neutron-lbaas stable/ocata
|
|
enable_plugin neutron https://github.com/openstack/neutron.git stable/ocata
|
|
|
|
|
|
#ENBALE OCTAVIA
|
|
enable_plugin octavia https://git.openstack.org/openstack/octavia
|
|
#ENABLED_SERVICES+=,octavia,o-cw,o-hk,o-hm,o-api
|
|
|
|
enable_service q-fwaas-v1
|
|
enable_service q-lbaasv2
|
|
enable_service q-meta
|
|
enable_service neutron
|
|
enable_service group-policy
|
|
disable_service tempest
|
|
ENABLED_SERVICES+=,heat,h-api,h-api-cfn,h-api-cw,h-eng
|
|
enable_service orchestrator,proxy,proxy_agent,base_configurator,q-lbaasv2-agent
|
|
|
|
LOG_COLOR=False
|
|
DEST=/opt/stack/new
|
|
LOGFILE=$DEST/logs/stack.sh.log
|
|
SKIP_EXERCISES=volumes,trove,swift,sahara,euca,bundle,boot_from_volume,aggregates,zaqar,client-env,client-args,sec_groups,neutron-adv-test,floating_ips,horizon
|
|
|
|
#OFFLINE=True
|
|
RECLONE=True
|
|
|
|
# Group-based Policy configuration
|
|
# Comment the lines below if you don't want to configure the datapath
|
|
# and use the dummy driver.
|
|
[[post-config|/etc/nova/nova.conf]]
|
|
[neutron]
|
|
allow_duplicate_networks = True
|
|
|
|
#[[post-config|/etc/heat/heat.conf]]
|
|
#[DEFAULT]
|
|
#plugin_dirs=/opt/stack/gbpautomation/gbpautomation/heat
|
|
|
|
[[post-config|/etc/neutron/neutron.conf]]
|
|
[keystone_authtoken]
|
|
project_name = service
|
|
username = neutron
|
|
password = abc123
|
|
|
|
[group_policy]
|
|
policy_drivers=implicit_policy,resource_mapping,chain_mapping
|
|
extension_drivers=proxy_group
|
|
|
|
[servicechain]
|
|
servicechain_drivers = simplechain_driver
|
|
#servicechain_drivers = chain_with_two_arm_appliance_driver
|
|
|
|
[node_composition_plugin]
|
|
node_plumber = admin_owned_resources_apic_plumber
|
|
node_drivers = heat_node_driver,nfp_node_driver
|
|
|
|
[admin_owned_resources_apic_tscp]
|
|
plumbing_resource_owner_user = neutron
|
|
plumbing_resource_owner_password = abc123
|
|
plumbing_resource_owner_tenant_name = service
|
|
|
|
[group_policy_implicit_policy]
|
|
default_ip_pool = 10.0.0.0/8
|
|
default_proxy_ip_pool = 192.169.0.0/16
|
|
default_external_segment_name = default
|
|
|
|
[nfp_node_driver]
|
|
is_service_admin_owned = False
|
|
svc_management_ptg_name = svc_management_ptg
|
|
|
|
[quotas]
|
|
default_quota = -1
|
|
quota_network = -1
|
|
quota_subnet = -1
|
|
quota_port = -1
|
|
quota_security_group = -1
|
|
quota_security_group_rule = -1
|
|
quota_router = -1
|
|
quota_floatingip = -1
|
|
|
|
[agent]
|
|
extensions = qos
|
|
|
|
[[post-config|/etc/neutron/plugins/ml2/ml2_conf.ini]]
|
|
[ml2]
|
|
extension_drivers = qos,port_security
|