charm-neutron-gateway/templates
Liam Young 115c34fadd Add AppArmor Rule for keepalived
A patch was introduced [0] "..which sets the backup gateway
device link down by default. When the VRRP sets the master state in
one host, the L3 agent state change procedure will
do link up action for the gate$way device.".

This change causes an issue when using keepalived 2.X (focal+) which
is fixed by patch [1] which adds a new 'no_track' option to all VIPs
and routes in keepalived's config file.

Patch [1] which fixed keepalived 2.X broke keepalived 1.X (<focal).
So patch [2] was added which adds a keepalived_use_no_track config
option which is set to True control whether the 'no_track' option
is added to the keepalived config.

Finally, patchset [3] introduces automatic detection of the
keepalived version by adding a call to `keepalived --version`
but this is denied by the packages apparmor rules.

[0] https://review.opendev.org/c/openstack/neutron/+/707406
[1] https://review.opendev.org/c/openstack/neutron/+/721799
[2] https://review.opendev.org/c/openstack/neutron/+/745641
[3] https://review.opendev.org/c/openstack/neutron/+/757620

Change-Id: I3eb1ef3fe29a8c4e5e26953844f303c8e985248a
2021-09-22 11:30:52 +00:00
..
icehouse Make ovs_use_veth a config option 2020-01-29 18:24:45 -08:00
juno Revert "Stop using veth pairs to connect qdhcp ns" 2019-08-02 11:56:17 +00:00
kilo Switch keystone authentication calls to admin ep 2018-03-19 18:00:28 +00:00
mitaka Make ovs_use_veth a config option 2020-01-29 18:24:45 -08:00
newton Add keepalived-healthcheck-interval config option 2020-08-20 13:23:57 +01:00
ocata Make ovs_use_veth a config option 2020-01-29 18:24:45 -08:00
parts Allow Juju AZ context information to be used 2018-10-09 13:52:41 +03:00
queens Make fw driver configurable 2021-07-20 14:55:28 +01:00
rocky Add keepalived-healthcheck-interval config option 2020-08-20 13:23:57 +01:00
stein Add keepalived-healthcheck-interval config option 2020-08-20 13:23:57 +01:00
ext-port.conf default to no network-device-mtu 2015-02-10 12:00:24 +00:00
os-charm-phy-nic-mtu.conf [hopem,r=] 2015-06-29 18:57:01 +01:00
usr.bin.neutron-dhcp-agent Fix misspell word 2020-03-24 11:59:32 +01:00
usr.bin.neutron-l3-agent Add AppArmor Rule for keepalived 2021-09-22 11:30:52 +00:00
usr.bin.neutron-lbaas-agent Add apparmor template for neutron services 2016-09-28 23:06:50 +00:00
usr.bin.neutron-lbaasv2-agent apparmor: Misc fixes for lbaasv2 profile 2018-05-14 09:24:43 +01:00
usr.bin.neutron-metadata-agent Apparmor profiles for Queens 2018-04-25 21:37:52 +00:00
usr.bin.neutron-metering-agent Apparmor profiles for Queens 2018-04-25 21:37:52 +00:00
usr.bin.neutron-openvswitch-agent Apparmor profiles for Queens 2018-04-25 21:37:52 +00:00
usr.bin.nova-api-metadata Apparmor profiles for Queens 2018-04-25 21:37:52 +00:00