Role os_neutron for OpenStack-Ansible
Go to file
Dmitriy Rabotyagov 601c66666f Run neutron OVN agents as neutron user
As of today we run some agents, like neutron-ovn-metadata agent as
root user, since it needs access to ovsdb socket, which has 750 permissions
by default.

With that, for OVN we already use connection via host:port to the same
ovsdb manager, which allows to run it as an arbitrary user.

In order to align connection methods and to run services with lower
privileges
we introduce couple of new variables that allow to create valid connection
strings for both OpenFlow listeners and regular connection to the manager.

Change-Id: Iceab27aa1fdacc8b13f7ef6974b6a9076b8b7cd9
2024-02-20 13:34:49 +01:00
defaults Run neutron OVN agents as neutron user 2024-02-20 13:34:49 +01:00
doc Merge "Deprecate OpenDaylight support" 2023-10-11 11:38:43 +00:00
examples Fix linters for example playbook 2023-09-28 09:51:34 +02:00
files/rootwrap.d Update vpnaas rootwrap filters 2020-01-13 19:36:11 -05:00
handlers Fix linters and metadata 2023-09-04 18:55:41 +02:00
meta Fix linters and metadata 2023-09-04 18:55:41 +02:00
releasenotes Run neutron OVN agents as neutron user 2024-02-20 13:34:49 +01:00
tasks Fix permissions for rootwrap files 2024-02-14 19:03:24 +01:00
templates Run neutron OVN agents as neutron user 2024-02-20 13:34:49 +01:00
tests Deprecate OpenDaylight support 2023-10-05 14:48:53 +00:00
vars Run neutron OVN agents as neutron user 2024-02-20 13:34:49 +01:00
zuul.d Replace voting jobs with Rocky Linux 2024-02-13 11:54:02 +01:00
.gitignore Updated from OpenStack Ansible Tests 2019-09-04 15:17:04 +00:00
.gitreview OpenDev Migration Patch 2019-04-19 19:41:19 +00:00
bindep.txt Updated from OpenStack Ansible Tests 2021-03-12 22:20:20 +00:00
CONTRIBUTING.rst [ussuri][goal] Update contributor documentation 2020-05-18 08:20:24 +00:00
LICENSE Convert existing roles into galaxy roles 2015-02-18 10:56:25 +00:00
manual-test.rc Use centralised test scripts 2016-09-28 09:24:41 +01:00
README.rst Start README.rst with a better title 2019-12-20 01:10:52 +00:00
run_tests.sh Updated from OpenStack Ansible Tests 2022-03-31 20:14:17 +00:00
tox.ini Define constraints file for docs and renos 2023-08-17 16:32:23 +02:00
Vagrantfile Updated from OpenStack Ansible Tests 2021-12-17 16:47:23 +00:00

OpenStack-Ansible neutron

image

Ansible role that installs and configures OpenStack neutron.

Documentation for the project can be found at:

https://docs.openstack.org/openstack-ansible-os_neutron/latest/

Release notes for the project can be found at:

https://docs.openstack.org/releasenotes/openstack-ansible-os_neutron

The project source code repository is located at:

https://opendev.org/openstack/openstack-ansible-os_neutron/

The project home is at:

https://launchpad.net/openstack-ansible

The project bug tracker is located at:

https://bugs.launchpad.net/openstack-ansible