- Cookstyle fixes
- Refactor Berksfile to use groups so we can exclude integration testing
cookbooks
- Update documentation
- Cleanup line wraps
- Enable sensitive resources for the template[/etc/neutron/neutron.conf] and
template[/etc/neutron/metadata_agent.ini] to resources improve security.
- Update delivery configuration to exclude integration cookbooks
- Fix ChefSpec output.
- Update lbaas recipe to use v2 agent driver.
- Add recommended configuration settings to neutron.conf based in Stein
installation docs.
- Remove any resources that define the default action.
- Switch package installations to send packages as arrays instead of individual
package resources. This generally speeds up chef runs.
- Manage /etc/neutron/neutron_lbaas.conf so we can set service_provider
properly.
- Add some missing ChefSpec tests.
- Configure neutron_lbaas.conf on Ubuntu in a manner that allows it to properly
pull in the configuration via the --config-dir option. This is due to the fact
we need to set an additional [service_providers] service_provider line and we
can't do that with hashes.
- Remove FWaaS as it's unmaintained upstream.
Depends-On: https://review.opendev.org/701027
Depends-On: https://review.opendev.org/706151
Change-Id: Id29884766440d37fa18fd62f3f93eecc22224d51
This updates all references of let(:chef_run) to cached(:chef_run) to
speed up tests. By doing this, we have to create a new cached(:chef_run)
block whenever we need to adjust node attributes for testing.
Additional fixes:
- Pull in openstack-network::ml2_core_plugin in server spec so that we get the
default attributes set
- Remove unused shared_examples
Speed was improved from 4 minutes 18.7 seconds to 1 minute 2.73 seconds
Change-Id: Ib10a6828e6886a57527a5e5a506cc57364ec0c2a
Python2.7 is going EOL soon, let us deploy python3 for Rocky from the
start, so we avoid having to switch later.
Depends-On: https://review.opendev.org/682918
Change-Id: I3be10959888870cec8774c2729465a0785eb837f
- Switched default linter to cookstyle
- Renamed rake tasks to better conform with Chef conventions
Change-Id: I5dd1971392fdf282d0f214dfce9dcbecc18542a8
- Corrections made to db_migration for Ocata
- Style and lint fixes for newer chefdk
- Rewrote metadata.rb for readability
- Added some defaults from the linuxbridge documentation for Ocata
in an attempt to get virtual networking functional out of the box
https://docs.openstack.org/ocata/install-guide-ubuntu/neutron-controller-install-option2.html
Change-Id: I16d6f892f325a80eb3eabd10110177246b63663f
- Now use cookbook-openstackclient to create endpoints role service and
user
- added domain creation and access granting
- added values to work with identity_v3
- rewrote specs to work again
- updated readme
- updated neutron-package dependencies for debian
Change-Id: I2d404a424bd79a6e9b282304e21591fa33a48981
Depends-On: I0f8955f05de9b33711c54b9a198f45018cceb8e1
Change Id350abd82df48c1e00e4b2bb8bc944658ddd85e6 replaced auth_plugin
with auth_type but missed one occurance in the default receipe.
Change-Id: I395b48616ea57167558df7c6a0dda30c01d724b1
* removed the creation of ovs bridges (except br-int) from all recipes,
since this can not be done in a sufficient generic way or only with a lot of
case switches to cope with all possible network setups
* added an example recipe to create all default ovs bridges from the
networking guide for legacy ovs setups (we should also create one for dvr later)
* splittet recipe ml2_openvswitch into seperate recipes for ml2_openvswitch config,
openvswitch_agent and openvswitch to allow bridge creation from wrapper recipe inbetween
and seperate configs from package installation
Change-Id: I6383575862ba110b3f3b5cba227288dc026fce77
* added new logic to render plugin templates
* refactored recipe names to be more consistence
* moved version up to 13.0.0 for mitaka release
* removed suse as supported platform
* added verisionbumb for refactored os-identity and common
* adapted optimized endpoint logic
* added endpoint attributes to fit new endpoint logic
* adapted the specs (unit tests) to work again
* refactored attributes throughout all recipes that were connected to the
attributes used for the neutron.conf.erb template to adapt the new template
attribute syntax
* removed some attributes that were set to non default values, since the
defaults from neutron cloud and should be used instead
* moved all attributes form attributes/default.rb that were used in
neutron.conf.erb to attributes/neutron_conf.rb
* refactored attributes to fit new template logic
* refactored recipes/default.rb to fit new template logic
* removed all attributes set to default values in attribtues/default and
template
* replaced static plugin logic and templates with new config logic, following
the same principles as for neutron.conf
* renamed recipes to fit attributes and actual service names
* added recipes for ml2_core_plugin, ml2_openvswitch and ml2_linuxbridge as well
as a recipe for the creation of all plugin configs (plugin_conf) like plugin.ini
Change-Id: I9cc1b5cc069987ac83e064322c2291772505ff5f
Implements: blueprint cookbook-refactoring
Depends-On: I0547182085eed91d05384fdd7734408a839a9a2c
Depends-On: I3262b2e6f792f37c32a446e6567790b82bdd4613
Remove dup in attributes
Incorrect service resource name reference
iproute package in wrong spec
White space cleanup
Change-Id: I269012e141bee21d1122dec300ba2a80b3d31780
- According to the bool attribute
node['openstack']['endpoints']['db']['enabled_slave'], enable/disable
neutron database slave_connection
- Add the slave_connection generated from db_uri function
Implements: blueprint sql-slave-connection-support
Change-Id: I19fc7fb4ab4a62fcdea77c9c4d18135fb2f49d41
When lbaas or vpnaas is enabled, we should make sure related
packages are installed before neutron-server start, otherwise
neutron-server will crash for could find plugin list in
service_plugins.
Change-Id: I8d5939dacd74496158932b658c3aec4d78ad1fe9
Closes-Bug: #1486390
In order to allow components to better handle and respond to mq failures,
oslo has some heartbeat options that are useful.
Change-Id: Ief96c7fce659376f476b11b527c60ce999777b81
Partial-Bug: #1462438
After the refact of nova authentication in neutron, it supports
three auth_plugin: password, v2password, v3password. Each
auth_plugin match a different auth_url. For example:
a) password
auth_plugin = password
auth_url = http://127.0.0.1:35357/
b) v2password
auth_plugin = v2password
auth_url = http://127.0.0.1:35357/v2.0
c) v3password
auth_plugin = v3password
auth_url = http://127.0.0.1:35357/v3
The auth_url should be set following the auth_plugin automatically.
Change-Id: Ia584a6c6a64fcaa92012c957da004ac029ca7db2
Closes-bug: #1459594
Closes-bug: #1461480
Cleaned up all the minor rubocop issues, the ones left relate to
complex logic and what I think is a bug in rubocop for nested
vs compact modules/class definitions.
Change-Id: I6451b7593f36287d4efe4d7542f97d0a090fb1d1
Authenticating to nova using nova_admin_* options is deprecated.
CONF.nova_admin_auth_url
CONF.nova_admin_username
CONF.nova_admin_password
CONF.nova_admin_tenant_id
CONF.nova_admin_tenant_name
This should be done using an auth plugin, like password:
[nova]
region_name = RegionOne
project_domain_id = default
project_name = service
user_domain_id = default
password = passw0rd
username = nova
auth_url = http://127.0.0.1:35357
auth_plugin = password
Reference: https://github.com/openstack/neutron/blob/master/neutron/notifiers/nova.py#L85-90
Change-Id: I8896af89f1b5fef39776a8aa1289cb9ee7645a08
Closes-bug: #1449058
- deprecated Gemfile
- updated TESTING and README
- updated Rakefile to use chef exec instead of bundle exec
- replaced Runner by SoloRunner in specs
Change-Id: Ic99092a33eeaa57dc7083c892bca729735bebdf7
For Kilo release, there are many deprecated group/name in conf files of openstack,
so we need to change the deprecated group/name to new group/name.
blueprint conf-section-update-for-kilo
Closes-bug: #1436170
Change-Id: Ibdd35e55ab79bc684782182d3e4341e672f04401
In my recent patch to move to identity_url, I mistakenly also
touched the nova_admin_auth_url which removed the v2.0 protocol
version from it. This prevents neutron from working properly
with nova.
Change-Id: Ib48a9a4be4478eb5f6fd1a07c8bd13d57af1c4db
Closes-Bug: #1446652
On ubuntu, the openvswitch template is rendered into the ml2
template. Some of openvswitch template variables were missing
from the ml2 template definition.
Change-Id: I62274d2a1c15e6d7e2a5079b0182513ee18f67b2
Closes-Bug: #1444647
Oslo.message using rabbit_max_retries and rabbit_retry_interval to
define reconnect rabbitmq server times and interval when can not
connect to rabbitmq server.
Partial-bug: #1439968
Change-Id: I8e19c3343627d4e2316f91b4fb084c5b6486dd84
Remove deprecated keys and use identity_uri via the new transform
helper method.
Also, cleanup specs for endpoint testing to make sure Common is
fully tested.
Change-Id: Iad3da2be74823b8d706eb9b4e12311cbf655ab7f
Implements: blueprint identity-uri
Used the existing ovs conf as a partial template to simply include
in the ml2 conf. This keeps all the attributes the same.
A more detailed spec will have to be done after some refactoring
to allow for sections to be tested.
Please give this idea a try, it seems to allow me to setup neutron
on ubuntu with ml2. I'm working toward using this as a basis for
getting the repo aio_neutron test working.
Change-Id: Ia988f3d7ef1c280c40b55cea4f455710f673dd32
Closes-Bug: #1314751
This patch adds logic to check whether current node
is network node or not.
When current node is not network node, stop neutron-server
from restarting even when neutron configuration file
is changed.
Change-Id: I0649be26515435a9c1d01e7daa7d3fb3ade90cce
Closes-Bug:1393667
Patches in base neutron allow for use of just the nova tenant name
instead of having to make an ugly cli call into keystone to get the
uuid. This is much much cleaner way to do it.
Kept the old admin_tenant_id attribute, added a new
admin_tenant_name one. This should come directly from the Compute
cookbook attribute, service_tenant_name, but since Network does
not depend upon Compute cookbook, I simply added the default here.
I don't think we want to introduce a depends between Network and
Compute, that would be a circular dependency.
Change-Id: I88948b6ad300192cb00b07f10d29dc7ec19d4ba2
Closes-Bug: #1427817
Parameterize l3_ha, max_l3_agents_per_router,
ha_vrrp_advert_int setting, so that user can deploy
a topology with neutron l3 agent HA enabled.
Change-Id: Iab159efcc30349e6481c944a5afb16293fbb0826
Closes-Bug: #1417913
Parameterize dhcp_agents_per_network setting, so that
user can deploy a topology with multiple dhcp agent
working.
Change-Id: I22d584f077e7cbc64bdf53522166352a512e84a5
Closes-Bug: #1414908
The current check was only for nil and when folks used
empty string for cafile, it caused an error and was hard to
figure out want went wrong.
Change-Id: Ib638dcdaa65a490ffac90d2dffac56f0a05aa699
Closes-Bug: 1394688
Renamed the common.rb recipe to default.rb in an early attempt
to simplify the refactor happening here:
https://review.openstack.org/#/c/141459/
Change-Id: Idd904f80cd51711db456606298e9761452bed23d
Ghanshyam Mann