Juju Charm - Neutron Open vSwitch

Go to file

Liam Young 5a6e1fb159 Add amulet tests		2015-02-13 12:02:13 +00:00
hooks	Add amulet tests	2015-02-13 12:02:13 +00:00
templates	Add config flag to disable security groups, tidy relation usage from neutron-api	2014-10-10 10:55:20 +01:00
tests	Add amulet tests	2015-02-13 12:02:13 +00:00
unit_tests	[james-page,r=coreycb] Add option to disable security groups like nova-compute	2014-10-22 17:53:56 +01:00
.bzrignore	Resync helpers, tidy README	2014-06-24 12:19:07 +01:00
.coveragerc	Added nosetest config	2014-06-20 11:06:02 +01:00
.project	Support os-data-network	2014-06-27 14:04:10 +01:00
.pydevproject	Support os-data-network	2014-06-27 14:04:10 +01:00
charm-helpers-sync.yaml	Remove __init__ from charm-helpers yaml.	2014-12-11 14:51:07 +00:00
charm-helpers-tests.yaml	Add amulet tests	2015-02-13 12:02:13 +00:00
config.yaml	Add config flag to disable security groups, tidy relation usage from neutron-api	2014-10-10 10:55:20 +01:00
copyright	Fixes in response to bug comment	2014-06-23 12:49:58 +01:00
icon.svg	Fixes in response to bug comment	2014-06-23 12:49:58 +01:00
Makefile	Add amulet tests	2015-02-13 12:02:13 +00:00
metadata.yaml	Resync helpers, tidy README	2014-06-24 12:19:07 +01:00
README.md	Add documentation about disable-security-groups	2014-10-14 17:45:46 +01:00
setup.cfg	Added nosetest config	2014-06-20 11:06:02 +01:00

README.md

Overview

This subordinate charm provides the Neutron OpenvSwitch configuration for a compute node.

Once deployed it takes over the management of the Neutron base and plugin configuration on the compute node.

Usage

To deploy (partial deployment of linked charms only):

juju deploy rabbitmq-server
juju deploy neutron-api
juju deploy nova-compute
juju deploy neutron-openvswitch
juju add-relation neutron-openvswitch nova-compute
juju add-relation neutron-openvswitch neutron-api
juju add-relation neutron-openvswitch rabbitmq-server

Note that the rabbitmq-server can optionally be a different instance of the rabbitmq-server charm than used by OpenStack Nova:

juju deploy rabbitmq-server rmq-neutron
juju add-relation neutron-openvswitch rmq-neutron
juju add-relation neutron-api rmq-neutron

The neutron-api and neutron-openvswitch charms must be related to the same instance of the rabbitmq-server charm.

Restrictions

It should only be used with OpenStack Icehouse and above and requires a seperate neutron-api service to have been deployed.

Disabling security group management

WARNING: this feature allows you to effectively disable security on your cloud!

This charm has a configuration option to allow users to disable any per-instance security group management; this must used with neutron-security-groups enabled in the neutron-api charm and could be used to turn off security on selected set of compute nodes:

juju deploy neutron-openvswitch neutron-openvswitch-insecure
juju set neutron-openvswitch-insecure disable-security-groups=True
juju deploy nova-compute nova-compute-insecure
juju add-relation nova-compute-insecure neutron-openvswitch-insecure
...

These compute nodes could then be accessed by cloud users via use of host aggregates with specific flavors to target instances to hypervisors with no per-instance security.