doc br_netfilter prereq for linux bridge

This patch updates our install documentation to account for the fact
that linux systems must have net.bridge sysctl knobs.

Change-Id: I8b65e2ef22d57cd6c501f25a33af8c1900f20497
Closes-Bug: #1672922

doc/source/install/compute-install-option1-obs.rst

@@ -50,4 +50,18 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Return to *Networking compute node configuration*

doc/source/install/compute-install-option1-rdo.rst

@@ -50,4 +50,18 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Return to *Networking compute node configuration*

doc/source/install/compute-install-option1-ubuntu.rst

@@ -50,4 +50,18 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Return to *Networking compute node configuration*

doc/source/install/compute-install-option2-obs.rst

@@ -61,4 +61,18 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Return to *Networking compute node configuration*.

doc/source/install/compute-install-option2-rdo.rst

@@ -61,4 +61,18 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Return to *Networking compute node configuration*.

doc/source/install/compute-install-option2-ubuntu.rst

@@ -61,4 +61,18 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Return to *Networking compute node configuration*.

doc/source/install/controller-install-option1-obs.rst

@@ -263,6 +263,20 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Configure the DHCP agent
 ------------------------
 

doc/source/install/controller-install-option1-rdo.rst

@@ -273,6 +273,20 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Configure the DHCP agent
 ------------------------
 

doc/source/install/controller-install-option1-ubuntu.rst

@@ -262,6 +262,20 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Configure the DHCP agent
 ------------------------
 

doc/source/install/controller-install-option2-obs.rst

@@ -290,6 +290,20 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Configure the layer-3 agent
 ---------------------------
 

doc/source/install/controller-install-option2-rdo.rst

@@ -300,6 +300,20 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Configure the layer-3 agent
 ---------------------------
 

doc/source/install/controller-install-option2-ubuntu.rst

@@ -289,6 +289,20 @@ networking infrastructure for instances and handles security groups.
 
     .. end
 
+  * Ensure your Linux operating system kernel supports network bridge filters
+    by verifying all the following ``sysctl`` values are set to ``1``:
+
+    .. code-block:: ini
+
+        net.bridge.bridge-nf-call-iptables
+        net.bridge.bridge-nf-call-ip6tables
+
+    .. end
+
+    To enable networking bridge support, typically the ``br_netfilter`` kernel
+    module needs to be loaded. Check your operating system's documentation for
+    additional details on enabling this module.
+
 Configure the layer-3 agent
 ---------------------------