neutron/ovn-metadata-v6-fe371854b09c8b56.yaml at 78e8f1dca0769877ecdd412e73841d7a90b5b8e5 - neutron - OpenDev: Free Software Needs Free Tools

openstack/neutron

Daniel Alvarez Sanchez d9c8731af3 [ovn] Add support for IPv6 metadata

This patch adds support for IPv6 metadata service in ML2/OVN.
The changes include:

- Add the 'fe80::a9fe:a9fe/128' address to the interface of the
  ovnmeta- namespace so that it's reachable from the guests

- Identify the port of the VM by looking up the source MAC address
  of the metadata request

- Restarts the haproxy instances to honor the configuration changes
  upon start of the metadata agent. In particular, haproxy now also
  binds on the 'fe80::a9fe:a9fe' address

When the VM requests metadata from its LLA, the traffic will reach
the ovnmeta namespace associated to its network.

The IPv6 metadata tests are passing and enabled in Tempest by
this patch:
https://review.opendev.org/c/openstack/neutron-tempest-plugin/+/894027

Besides, this patch ensures that the link-local address of the
metadata interface is present so that the metadata IPv6 endpoint
is reachable. It also fixes a bug that was causing the wrong LLA
to be present as the interface was set `up` first prior to changing
the MAC address. Now this order is inverted so that the proper LLA
is configured.

Change-Id: Idcef6de33ed2a73cb3c426db1c55fa9cd06de63f
Signed-off-by: Daniel Alvarez Sanchez <dalvarez@redhat.com>

2023-12-08 17:15:42 -05:00

8 lines

264 B

YAML

Raw Blame History

 ---
 features:
   - |
     IPv6 Metadata support was added to the ML2/OVN driver. The agent now
     provisions the ``fe80::a9fe:a9fe/128`` address to the OVN metadata
     namespace and makes haproxy listen on it to serve metadata requests
     to instances over IPv6.