openstack/nova
Code Issues Proposed changes

Add bigswitch command to compute rootwrap filters

Browse Source 
'ivs-ctl' is called from the libvirt vif driver. While the filter exists
in network.filters, as the command is still used by nova compute it is
consistent to include it in compute.filters.

Change-Id: Icf61dba632fee26461ac18246ecf6a93f6bde346
This commit is contained in:
Brent Eagles 2016-08-19 14:51:26 -02:30
parent f3d001f36c
commit 58de26288c
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
etc/nova/rootwrap.d/compute.filters
View File

@ -86,6 +86,9 @@ tunctl: CommandFilter, tunctl, root
# nova/network/linux_net.py: 'ovs-vsctl', ....
ovs-vsctl: CommandFilter, ovs-vsctl, root
# nova/network/linux_net.py: 'ivs-ctl', ....
ivs-ctl: CommandFilter, ivs-ctl, root
# nova/virt/libvirt/vif.py: 'vrouter-port-control', ...
vrouter-port-control: CommandFilter, vrouter-port-control, root

5
releasenotes/notes/add-ivs-filter-to-compute-093734c1c5348e99.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- The ivs-ctl command has been added to the rootwrap filters in
compute.filters. Deployments needing support for BigSwitch no longer need
to add the filters manually nor include network.filters at installation.