543 Commits

Author SHA1 Message Date
Slawek Kaplonski
4b30a94c88 [API-REF] Add clarification about QinQ and transparent vlan differences
Related-bug: #1915151
Change-Id: I1e3865345fc5f4aaeaa96fcd7cf24e528317fccc
2025-01-21 12:44:09 +01:00
Bodo Petermann
ef72d4cd6e vpnaas: add support for AES CTR
Additional choices for encryption algorithms in vpnaas policies
for AES Counter Mode (AES-CTR).

Related-Bug: #1938284
Change-Id: Icda2da71135065a1192954f33943b9ee225c5cf4
2025-01-14 22:11:07 +01:00
Pavlo Shchelokovskyy
ab7cdf25a7 Fix network-ip-availability API samples
the total_ips for the networks were not summing up
to total_ips in subnets.

Change-Id: Idd9d8ac99ed8188217ff030da72d6b3fecb61233
2024-12-20 14:44:00 +00:00
Ihar Hrachyshka
6933c73fe1 api-ref: explain nested SNAT behavior is backend specific
Change-Id: Ida705765a67bb719db129896c5ce27b3d146e279
2024-12-09 18:28:48 -05:00
Slawek Kaplonski
8396d75b31 Add definition of the 'qinq' api extension
This new extension allows to enable QinQ VLAN type for the networks.

Related-bug: #1915151
Change-Id: If6436c048bf51d503c4f433a900b67e9945965ac
2024-12-05 09:33:44 +00:00
Rodolfo Alonso Hernandez
eb7f5894aa Add new API extension `uplink-status-propagation-updatable`
Add the API extension ``uplink-status-propagation-updatable`` to make
the port field ``propagate_uplink_status`` updatable. Now is possible
to send a port PUT request to update the value defined during the
creation.

This change will have an effect in the ML2/SR-IOV agent that will need
to update the VF status accordingly.

Related-Bug: #2078661
Change-Id: I96d8b1cfe2f0cce2198d74f48abfc90d952384bd
2024-09-09 16:09:33 +00:00
Zuul
90fa9948fd Merge "Add port trusted vif extension" 2024-09-11 10:01:33 +00:00
Slawek Kaplonski
8650442665 Add port trusted vif extension
This new extension allows to set port to be trusted. That value will be
then passed to Nova in the port's binding:profile dict.

Related-Bug: #2060916
Change-Id: Ia809fb0a35cc764ad017d81b018efc81b6de8500
2024-09-09 07:10:20 +00:00
Rodolfo Alonso Hernandez
3d4e0fa1cf Add API extension `quota-check-limit-default`
This is a shim extension that indicates if Neutron quota engine
checks the resource usage before updating any quota limit. That
makes the extension ``quota-check-limit`` to be the default Neutron
quota engine behaviour and aligns it with other projects.

To enforce a quota limit without checking the resource usage, now
it is needed to pass the CLI parameter "--force".

Related-Bug: #1953170
Related-Bug: #1936408
Change-Id: I778e6090fe4d01e2bf0b51933897e80624bab38a
2024-09-06 07:07:44 +00:00
Rodolfo Alonso Hernandez
551bcff770 Add API extension `tag-creation`
The ``tag-creation`` shim extension API definition enables the creation
of multiple tags for a single resource using a ``POST`` request. The
value of the tags is passed as an argument of the call.

Related-Bug: #2073836
Change-Id: I8b7ac688f7aed64995b3c244b0a3662aa81313bc
2024-08-06 18:59:51 +00:00
elajkat
3bad954a17 api-ref: Add delete port bindings
Change-Id: I61ed4cdd15f8fe77023c4bc4c5f26eae6f1caab4
2024-07-04 07:33:49 +00:00
Slawek Kaplonski
4050d95bcf [api-ref] Add note about no validation of the target_tenant in RBAC API
Neutron can't really validate if string provided as 'target_tenant' in
the /v2.0/rbac-policies POST/PUT request is project ID or something
else, like e.g. project's name.
This patch adds small note about this to the Neutron api-ref document so
that users can be more aware of that.

Related-Bug: #2065743
Change-Id: Ie5bec404c372209ca15e4c8454957040032751cb
2024-05-31 20:30:21 +00:00
Sebastian Lohff
e106989ff8 Document BGPVPN list API filters
BGPVPNs can be filtered by project_id or network/router/port
associations when being listed.

Change-Id: I81aca687e67f541a975ec9d1302e859557bd7816
2024-04-19 16:48:17 +02:00
Zuul
688b135d86 Merge "Fix incorrect links for the filtering spec" 2024-04-15 09:16:06 +00:00
Brian Haley
c28b3ab8fe Fix incorrect links for the filtering spec
The spec networking_general_api_information.html was moved
to api-ref in [0] but some of the links pointing to it
were not updated. This change makes all the refs consistent
and adds links where missing.

Also moved sync/async and bulk create sections lower to
group all the filtering, pagination and sorting sections
together since they are inter-related.

[0] https://review.opendev.org/c/openstack/neutron-lib/+/362877

Change-Id: I895cc9aaee2546b95e93150c134f350a50346447
2024-04-04 19:00:17 -04:00
elajkat
a6e32d9d5c api-ref: add api-ref for remote_address_group in sg rules
Related-Bug: #2058138
Change-Id: I067c53c31a60336b8852cdf26a404b15cc0ccef8
2024-04-02 01:28:07 +00:00
Zuul
d131b53403 Merge "Add extension "subnet-external-network"" 2024-02-23 16:26:12 +00:00
Zuul
b3fe0ead28 Merge "Add "socket" NUMA affinity policy" 2024-02-22 18:21:03 +00:00
Slawek Kaplonski
3aec8fdfee [S-RBAC] Add note about port:binding:profile field and SERVICE role
With new default API policies binding:profile attribute of the port can
be only set or updated by the SERVICE user. This patch adds small note
about this to the Neutron API-REF document.

Related-Bug: #2052937
Change-Id: I0b2f2225e29537c9fd2de53b0945a451b9bcdde3
2024-02-19 09:10:40 +01:00
Artom Lifshitz
7eeb1b87ac Add "socket" NUMA affinity policy
The "socket" NUMA affinity policy has been supported in Nova since [1].

[1]https://review.opendev.org/c/openstack/nova/+/773792

Related-Bug: #2052786
Change-Id: Id84f3f5c83a1452875f2d7adf4611db319c240ce
2024-02-13 06:56:20 +00:00
Rodolfo Alonso Hernandez
fc2f383dd6 Add extension "subnet-external-network"
This extension adds a new field to the "subnet" resource:
"router:external". This boolean field, that is False by default,
represents if the subnet belongs to an external network.

Related-Bug: #2051831
Change-Id: I75a9c30f1e8031d40a548df345b02fbe0bc47706
2024-02-09 09:24:38 +00:00
elajkat
72442e0ba0 Tap mirror API def and API ref
Change-Id: Ifa1bf6abbf5d25769820b545d8d3bab195b146d3
Related-Bug: #2015471
2024-01-25 14:59:57 +01:00
Michał Dulko
b2aca16705 Add api-ref about SG rule bulk create
Neutron support bulk create of security group rules, but that's
undocumented in the api-ref. This commit fixes that by adding the docs
and examples of these calls.

Change-Id: I32ce8b3501a01552fed67ba24602e891c3c01cd4
2024-01-11 12:54:49 +01:00
Jakub Libosvar
b99cfa6004 api-ref: Document only unbound ports vnic_type updates
The Neutron patch linked below changes behavior of API update requests
to vnic_type port binding attribute on bound ports. It's no longer
allowed to update the vnic_type if the port is already bound.

Depends-On: https://review.opendev.org/c/openstack/neutron/+/892815
Related-bug: #2033090
Change-Id: Ic5c6d54a1e5e57e977623ac6a4e2e6278f7237b7
Signed-off-by: Jakub Libosvar <libosvar@redhat.com>
2023-11-14 15:39:37 +00:00
Bodo Petermann
b7598dab47 vpnaas: add support for more ciphers (auth, encryption, pfs modes)
Encryption algorithms: add AES CCM mode and AES GCM mode variants
for 128/192/256 bit keys and 8/12/16 octet ICVs.
Auth algorithms: add aes-xcbc and aes-cmac.
PFS: add Diffie Hellman groups 15 to 31.

Related-Bug: #1938284
Change-Id: Iba86fe9a1bbf88223b57a45fb89349c6b1858015
2023-10-24 13:18:59 +02:00
elajkat
7de2cb339b api-ref: Move sfc api-ref to neutron-lib
Change-Id: I1ce9d664b3a3415ab15681b75abe0076706703da
2023-07-24 16:37:49 +02:00
Zuul
d5acebbe7b Merge "Add port hardware offload extension" 2023-06-28 09:01:27 +00:00
Slawek Kaplonski
c965b1892f Add short warning about UUIDs in the SG rule templates api
SG rule template API accepts any string (any uuid) as remote group id or
remote address group id. It may be something what's not existing in the
time of the creation of template and that's fine. But if it will be not
existing when regular SG will be created for project it will fail making
SG for that project.
This patch adds small warning about this to the default SG rules
template api-ref.

Additionally this patch updated some small issues in the "create
default security group rule" section.

Related-Bug: #1983053
Change-Id: I9bad07d8ed11796047883f87b45a7da0799cdcb1
2023-06-27 14:44:28 +00:00
Zuul
8c46dd4b67 Merge "Add subnet onboard API ref" 2023-06-23 15:34:01 +00:00
Nurmatov Mamatisa
c4be8ca291 Add subnet onboard API ref
Closes-Bug: #2016413
Change-Id: Iefd9700ca999c7ab3ff1ea99252539692b66b4c3
2023-06-22 14:36:11 +00:00
Rodolfo Alonso Hernandez
972fbdd4be Add port hardware offload extension
This new new port extension allows to create ports with hardware
offloaded capabilities.

Spec: https://review.opendev.org/c/openstack/neutron-specs/+/882272

Related-Bug: #2013228
Change-Id: I0c9863ff21f3dee6120f1c8424a69ded6c3612b1
2023-06-21 18:01:35 +00:00
Zuul
95b6a4bb47 Merge "Add new SG rule ext. `security-groups-rules-belongs-to-default-sg`" 2023-06-16 00:26:40 +00:00
Zuul
bb9e5b1c19 Merge "[API REF] Add api-ref documentation for default SG rules API" 2023-06-07 19:57:06 +00:00
Rodolfo Alonso Hernandez
7da72b7f2d Add new SG rule ext. `security-groups-rules-belongs-to-default-sg`
Added a new API extension
``security-groups-rules-belongs-to-default-sg`` that adds a new
read only field ``belongs_to_default_sg`` in the security group
rules. This flag determines if this security group rule belongs
to the project's default security group.

Related-Bug: #2019960

Change-Id: Ibd8f57d82b28f5cdb8874f1ae22cb35adcd8e880
2023-06-07 09:50:57 +00:00
elajkat
9f72a4722f api-ref: add api-ref for bindings
Change-Id: I1e61c120570db7d7ba0b86ce36d4a1e2eefdf9fe
Related-Bug: #1580880
2023-05-31 19:46:50 +02:00
Slawek Kaplonski
4b9753de30 [API REF] Add api-ref documentation for default SG rules API
Related-Bug: #1983053
Change-Id: I0053337686d49229b44e157977b2607051ad1604
2023-05-31 09:30:36 +00:00
Zuul
ab8a9dd0d9 Merge "New `network-ha` API definition" 2023-05-08 23:45:10 +00:00
Rodolfo Alonso Hernandez
d5884bb20b New `network-ha` API definition
This new network API field, that can be used during the network
creation, will trigger the creation of a ``ha_router_networks``
database register. This register binds the project with the
created network and defines it as the high availability network
of the project, that is unique per project.

The default value is "False".

Related-Bug: #2016198

Change-Id: Id6e434060a7559026f9083904a91213b39361336
2023-05-08 08:05:53 +00:00
Zuul
1e1ed7d4d4 Merge "port-hint-ovs-tx-steering: Add missing api-ref response sample" 2023-05-04 17:01:57 +00:00
Zuul
96c11047fb Merge "New api-def: allowedaddresspairs-atomic" 2023-05-03 22:58:02 +00:00
Zuul
54c6dbf1e1 Merge "doc: Remove fwaas v2 deprecation message" 2023-05-03 20:17:13 +00:00
Bence Romsics
e8f1e0270b port-hint-ovs-tx-steering: Add missing api-ref response sample
Change-Id: I8de7bb96417b85eaefd84835cd1cc8743f3158e8
Partially-Bug: #1990842
Related-Change (spec): https://review.opendev.org/c/openstack/neutron-specs/+/862133
2023-04-25 13:20:38 +02:00
liushy
8728076402 New api-def: allowedaddresspairs-atomic
Partial-Bug: #2012332
Change-Id: Ibc713217ffb67ce35e03ae7f341a302a9edef4d1
2023-04-21 11:05:50 +08:00
Dmitrii Shcherbakov
e52a9372f7 ext-gw-multihoming: api-def and api-ref
API additions for [1].

* Added a new router attribute: external_gateways;
* Added new API definitions for:
    PUT add_external_gateways
    PUT update_external_gateways
    PUT remove_external_gateways
* Added extensions for each of the new router-level attributes:
  * enable_default_route_ecmp
  * enable_default_route_bfd
* Combined the validation logic for the external_gateway_info type
  across extensions (l3_ext_gw_mode, qos_gateway_ip and the new
  extension called l3_ext_gw_multihoming).

[1] https://review.opendev.org/c/openstack/neutron-specs/+/870030/

Change-Id: I2618475636b2bb9bfd743a62f5d4859d4f68a547
Related-Bug: #2002687
2023-04-20 19:18:02 +03:00
elajkat
724d1d1af7 doc: Remove fwaas v2 deprecation message
Change-Id: Id3dc86a0eaf441e80c016f00d0cbb6ef1b3f0ec7
2023-04-17 12:51:25 +02:00
Zuul
c5413d56b6 Merge "port-hints: api-ref: Add field length limitation" 2023-04-05 18:53:40 +00:00
Bence Romsics
08cdc726b9 port-hints: api-ref: Add field length limitation
Partially-Implements: #1990842
Related-Change (spec): https://review.opendev.org/c/openstack/neutron-specs/+/862133

Change-Id: I91fdcb93b4633d59c4c2424567fb01eee3c2571e
2023-03-30 14:18:51 +02:00
Ihar Hrachyshka
8337580561 api-ref: describe which protocols are enabled for stateless SG
This behavior matches what ML2/OVS implementation does and what we
intend to implement for ML2/OVN. More than that, a decision was made
during vPTG to make the behavior part of api-ref to facilitate
cross-backend consistency.

Related-Bug: #2006949
Related-Bug: #2009053
Change-Id: Ic633eedd9f0d320d9ad0c27a72f07b1b016d7ba3
2023-03-29 16:33:56 -04:00
Ihar Hrachyshka
eeec3633b9 api-ref: add semantics for stateless security group api
Change-Id: I7c1c47e287855f32b9d418482965b95212190291
2023-03-29 16:33:52 -04:00
Bence Romsics
ec6a39c463 port-hint-ovs-tx-steering: api definition
The ``port-hint-ovs-tx-steering`` extension allows new values (i.e. a
hint) in the ``hints`` port attribute. It allows the control of Open
vSwitch's Userspace Tx packet steering options. For Open vSwitch details
please see:
https://docs.openvswitch.org/en/latest/topics/userspace-tx-steering/

Change-Id: I150e5b5660164a8f6fcc9c9161cf69e721a435ed
Partially-Implements: #1990842
Related-Change (spec): https://review.opendev.org/c/openstack/neutron-specs/+/862133
2023-02-20 13:11:54 +01:00