openstack/tripleo-heat-templates
Code Issues Proposed changes

Add NeutronSecurityGroupQuota to allow setting quota_security_group

Browse Source 
As in related bug, we need to bump this to more than the default
10. Also adds an environment file into ci/environments for use
by the relevant jobs.

Change-Id: Ia944be7be58575b59d2ff3a46da059e34bc8d0c2
Related-Bug: 1864646
This commit is contained in:
Marios Andreou 2020-02-26 18:51:58 +02:00 committed by wes hayutin
parent be9a319461
commit a7566ecc77
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ci/environments/neutron_sec_group_quota.yaml Normal file
View File

@ -0,0 +1,2 @@
parameter_defaults:
NeutronSecurityGroupQuota: '150'

5
deployment/neutron/neutron-api-container-puppet.yaml
View File

@ -123,6 +123,10 @@ parameters:
default: '500' default: '500'
type: string type: string
description: Number of ports allowed per tenant, and minus means unlimited. description: Number of ports allowed per tenant, and minus means unlimited.
NeutronSecurityGroupQuota:
default: '10'
type: string
description: Number of security groups allowed per tenant, and minus means unlimited
# TODO(bogdando): Right now OVN doesn't support AZ aware routing scheduling. # TODO(bogdando): Right now OVN doesn't support AZ aware routing scheduling.
# Later in Train cycle OVN ml2 driver will be extended to support it. # Later in Train cycle OVN ml2 driver will be extended to support it.
# Until then, we have to determine if NeutronMechanismDrivers is OVN or OVS. # Until then, we have to determine if NeutronMechanismDrivers is OVN or OVS.
@ -288,6 +292,7 @@ outputs:
neutron::keystone::authtoken::project_domain_name: 'Default' neutron::keystone::authtoken::project_domain_name: 'Default'
neutron::keystone::authtoken::region_name: {get_param: KeystoneRegion} neutron::keystone::authtoken::region_name: {get_param: KeystoneRegion}
neutron::quota::quota_port: {get_param: NeutronPortQuota} neutron::quota::quota_port: {get_param: NeutronPortQuota}
neutron::quota::quota_security_group: {get_param: NeutronSecurityGroupQuota}
neutron::server::sync_db: true neutron::server::sync_db: true
neutron::server::notifications::region_name: {get_param: KeystoneRegion} neutron::server::notifications::region_name: {get_param: KeystoneRegion}
neutron::server::placement::region_name: {get_param: KeystoneRegion} neutron::server::placement::region_name: {get_param: KeystoneRegion}