openstack
/
charm-deployment-guide
Code Issues Proposed changes

ovn: Remove remote security group rule workaround 

The issue has been resolved.

Change-Id: I01a7d9cd995686ea1e3d204f2ee5e55a9650a035
This commit is contained in:
Frode Nordahl 2020-02-26 20:55:54 +01:00
parent 7d75fd1f2a
commit 3daac274d3
1 changed files with 1 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
deploy-guide/source/app-ovn.rst
View File

@ -244,7 +244,7 @@ Known feature gaps at this point in time:
20.02 OpenStack Charms release. Experimental support for using OVN as
transport for communication between Octavia units and its Amphorae as well
as support for the native OVN provider driver for Octavia is available in the
development version of Octavia (cs:~openstack-charmers-next/octavia).
development version of Octavia (``cs:~openstack-charmers-next/octavia``).
* No validation has been done with DPDK, SR-IOV or hardware-offloading in the
charms.
@ -253,27 +253,5 @@ Known feature gaps at this point in time:
may be possible to configure unsupported combinations of features with
undefined results.
* There is an unresolved issue with security groups rules that reference
remote security groups. Please remove any such rules while testing.
Example of how you could reset your default security group rules:
.. code:: bash
PROJECT_ID=$(openstack project list -f value -c ID \
--domain admin_domain)
SECGRP_ID=$(openstack security group list --project $PROJECT_ID \
| awk '/default/{print$2}')
openstack security group rule delete \
$(openstack security group rule list $SECGRP_ID| awk '/IPv./{print$2}')
openstack security group rule create --egress --protocol any \
--ethertype IPv4 $SECGRP_ID
openstack security group rule create --egress --protocol any \
--ethertype IPv6 $SECGRP_ID
openstack security group rule create --ingress --protocol any \
--ethertype IPv4 $SECGRP_ID --remote-ip YOUR_IPV4_LAB_NETWORK_CIDR
openstack security group rule create --ingress --protocol any \
--ethertype IPv6 $SECGRP_ID --remote-ip YOUR_IPV6_LAB_NETWORK_CIDR
.. LINKS
.. _Toward Convergence of ML2+OVS+DVR and OVN: http://specs.openstack.org/openstack/neutron-specs/specs/ussuri/ml2ovs-ovn-convergence.html