47a2b8fbb4
Add support to enable logging of security groups for OpenStack Queens or later; this feature is enabled via the neutron-api charm, with local configuration options provided in the neutron-openvswitch charm. The feature is only compatible with the openvswitch firewall driver and will not be enabled if this configuration option is not set in the neutron-openvswitch charm. This change is removing unnecessary Neutron config option "neutron_firewall_driver" since FW drivers are being handled on agents side (not on API server) since Mitaka release. Change-Id: Icadb055b2c5c3216b6d086b44a4823595b2baffa Closes-Bug: #1787397
62 lines
1.4 KiB
INI
62 lines
1.4 KiB
INI
# queens
|
|
###############################################################################
|
|
# [ WARNING ]
|
|
# Configuration file maintained by Juju. Local changes may be overwritten.
|
|
###############################################################################
|
|
[ml2]
|
|
{% if extension_drivers -%}
|
|
extension_drivers={{ extension_drivers }}
|
|
{% endif -%}
|
|
|
|
{% if neutron_plugin == 'Calico' -%}
|
|
type_drivers = local,flat
|
|
mechanism_drivers = calico
|
|
{% else -%}
|
|
type_drivers = {{ tenant_network_types }}
|
|
tenant_network_types = {{ tenant_network_types }}
|
|
mechanism_drivers = {{ mechanism_drivers }}
|
|
|
|
{% if physical_network_mtus -%}
|
|
physical_network_mtus = {{ physical_network_mtus }}
|
|
{% endif -%}
|
|
{% if path_mtu -%}
|
|
path_mtu = {{ path_mtu }}
|
|
{% endif -%}
|
|
|
|
[ml2_type_gre]
|
|
tunnel_id_ranges = 1:1000
|
|
|
|
[ml2_type_vxlan]
|
|
vni_ranges = {{ vni_ranges }}
|
|
|
|
[ml2_type_vlan]
|
|
network_vlan_ranges = {{ vlan_ranges }}
|
|
|
|
[ml2_type_flat]
|
|
flat_networks = {{ network_providers }}
|
|
|
|
[ovs]
|
|
enable_tunneling = True
|
|
local_ip = {{ local_ip }}
|
|
|
|
[agent]
|
|
tunnel_types = {{ overlay_network_type }}
|
|
{% if 'log' in service_plugins -%}
|
|
extensions = log
|
|
|
|
{% endif -%}
|
|
|
|
{% endif -%}
|
|
|
|
[securitygroup]
|
|
{% if neutron_security_groups -%}
|
|
enable_security_group = True
|
|
{% else -%}
|
|
enable_security_group = False
|
|
{% endif -%}
|
|
|
|
{% if supported_pci_vendor_devs %}
|
|
[ml2_sriov]
|
|
supported_pci_vendor_devs = {{ supported_pci_vendor_devs }}
|
|
{% endif -%}
|