Juju Charm - Neutron Open vSwitch
Go to file
2015-02-13 12:02:13 +00:00
hooks Add amulet tests 2015-02-13 12:02:13 +00:00
templates Add config flag to disable security groups, tidy relation usage from neutron-api 2014-10-10 10:55:20 +01:00
tests Add amulet tests 2015-02-13 12:02:13 +00:00
unit_tests [james-page,r=coreycb] Add option to disable security groups like nova-compute 2014-10-22 17:53:56 +01:00
.bzrignore Resync helpers, tidy README 2014-06-24 12:19:07 +01:00
.coveragerc Added nosetest config 2014-06-20 11:06:02 +01:00
.project Support os-data-network 2014-06-27 14:04:10 +01:00
.pydevproject Support os-data-network 2014-06-27 14:04:10 +01:00
charm-helpers-sync.yaml Remove __init__ from charm-helpers yaml. 2014-12-11 14:51:07 +00:00
charm-helpers-tests.yaml Add amulet tests 2015-02-13 12:02:13 +00:00
config.yaml Add config flag to disable security groups, tidy relation usage from neutron-api 2014-10-10 10:55:20 +01:00
copyright Fixes in response to bug comment 2014-06-23 12:49:58 +01:00
icon.svg Fixes in response to bug comment 2014-06-23 12:49:58 +01:00
Makefile Add amulet tests 2015-02-13 12:02:13 +00:00
metadata.yaml Resync helpers, tidy README 2014-06-24 12:19:07 +01:00
README.md Add documentation about disable-security-groups 2014-10-14 17:45:46 +01:00
setup.cfg Added nosetest config 2014-06-20 11:06:02 +01:00

Overview

This subordinate charm provides the Neutron OpenvSwitch configuration for a compute node.

Once deployed it takes over the management of the Neutron base and plugin configuration on the compute node.

Usage

To deploy (partial deployment of linked charms only):

juju deploy rabbitmq-server
juju deploy neutron-api
juju deploy nova-compute
juju deploy neutron-openvswitch
juju add-relation neutron-openvswitch nova-compute
juju add-relation neutron-openvswitch neutron-api
juju add-relation neutron-openvswitch rabbitmq-server

Note that the rabbitmq-server can optionally be a different instance of the rabbitmq-server charm than used by OpenStack Nova:

juju deploy rabbitmq-server rmq-neutron
juju add-relation neutron-openvswitch rmq-neutron
juju add-relation neutron-api rmq-neutron

The neutron-api and neutron-openvswitch charms must be related to the same instance of the rabbitmq-server charm.

Restrictions

It should only be used with OpenStack Icehouse and above and requires a seperate neutron-api service to have been deployed.

Disabling security group management

WARNING: this feature allows you to effectively disable security on your cloud!

This charm has a configuration option to allow users to disable any per-instance security group management; this must used with neutron-security-groups enabled in the neutron-api charm and could be used to turn off security on selected set of compute nodes:

juju deploy neutron-openvswitch neutron-openvswitch-insecure
juju set neutron-openvswitch-insecure disable-security-groups=True
juju deploy nova-compute nova-compute-insecure
juju add-relation nova-compute-insecure neutron-openvswitch-insecure
...

These compute nodes could then be accessed by cloud users via use of host aggregates with specific flavors to target instances to hypervisors with no per-instance security.