Merge "Resolved MRN-1234:" into release-0.3
This commit is contained in:
@@ -467,39 +467,69 @@ update-rc.d rabbitmq-server-murano defaults
|
|||||||
</warning>
|
</warning>
|
||||||
</section>
|
</section>
|
||||||
<section>
|
<section>
|
||||||
<title>Configuring Quantum SecurityGroups quotas</title>
|
<title>Configure Quantum</title>
|
||||||
<para>
|
<section>
|
||||||
Default quotas driver used by quantum is - <filename>quantum.quota.ConfDriver</filename>, all limits set in <filename>/etc/quantum/
|
<title>Allow subnet ip-range overlapping</title>
|
||||||
quantum.conf</filename> - non flexible. To extend functionality and flexibility, default quota driver should be
|
<para>
|
||||||
changed to - <filename>quantum.db.quota_db.DbQuotaDrive</filename>.
|
When deploying environments, Murano will create dedicated network for each of them, and every such network will have a subnet created.
|
||||||
</para>
|
All these subnets will have identical ip-ranges. Theoretically this is perfectly fine, as these subnets belong to different isolated Networks
|
||||||
<itemizedlist>
|
(L2 segments) and are connected to different routers.
|
||||||
<listitem>
|
</para>
|
||||||
<para>
|
<para>
|
||||||
Change <filename>/etc/quantum/quantum.conf</filename> with next values:
|
However, by default Quantum does not allow overlapping IPs for different subnets - even in different Networks.
|
||||||
</para>
|
To override this restriction, change <filename>/etc/quantum/quantum.conf</filename>: uncomment <filename>allow_overlapping_ips</filename> parameter
|
||||||
<screen>
|
and change its value to <filename>True</filename>:
|
||||||
|
</para>
|
||||||
|
<screen>
|
||||||
|
[DEFAULT]
|
||||||
|
...
|
||||||
|
# Enable or disable overlapping IPs for subnets
|
||||||
|
# Attention: the following parameter MUST be set to False if Neutron is
|
||||||
|
# being used in conjunction with nova security groups
|
||||||
|
allow_overlapping_ips = True
|
||||||
|
</screen>
|
||||||
|
<para>
|
||||||
|
Then, restart all quantum services:
|
||||||
|
</para>
|
||||||
|
<screen>
|
||||||
|
cd /etc/init.d/
|
||||||
|
for q in quantum-*; do restart $q; done
|
||||||
|
</screen>
|
||||||
|
</section>
|
||||||
|
<section>
|
||||||
|
<title>Specify SecurityGroups quotas</title>
|
||||||
|
<para>
|
||||||
|
Default quotas driver used by quantum is - <filename>quantum.quota.ConfDriver</filename>, all limits set in <filename>/etc/quantum/
|
||||||
|
quantum.conf</filename> - non flexible. To extend functionality and flexibility, default quota driver should be
|
||||||
|
changed to - <filename>quantum.db.quota_db.DbQuotaDrive</filename>.
|
||||||
|
</para>
|
||||||
|
<itemizedlist>
|
||||||
|
<listitem>
|
||||||
|
<para>
|
||||||
|
Change <filename>/etc/quantum/quantum.conf</filename> with next values:
|
||||||
|
</para>
|
||||||
|
<screen>
|
||||||
[QUOTAS]
|
[QUOTAS]
|
||||||
...
|
...
|
||||||
#quota_driver = quantum.quota.ConfDriver
|
#quota_driver = quantum.quota.ConfDriver
|
||||||
quota_driver = quantum.db.quota_db.DbQuotaDriver
|
quota_driver = quantum.db.quota_db.DbQuotaDriver
|
||||||
...
|
...
|
||||||
</screen>
|
</screen>
|
||||||
</listitem>
|
</listitem>
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>
|
<para>
|
||||||
Restart all quantum services:
|
Restart all quantum services:
|
||||||
</para>
|
</para>
|
||||||
<screen>
|
<screen>
|
||||||
cd /etc/init.d/
|
cd /etc/init.d/
|
||||||
for q in quantum-*; do restart $q; done
|
for q in quantum-*; do restart $q; done
|
||||||
</screen>
|
</screen>
|
||||||
</listitem>
|
</listitem>
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>
|
<para>
|
||||||
Update required quota with quantum CLI:
|
Update required quota with quantum CLI:
|
||||||
</para>
|
</para>
|
||||||
<screen>
|
<screen>
|
||||||
quantum quota-update --security_group 100 --tenant-id <tenant_id>
|
quantum quota-update --security_group 100 --tenant-id <tenant_id>
|
||||||
+---------------------+-------+
|
+---------------------+-------+
|
||||||
| Field | Value |
|
| Field | Value |
|
||||||
@@ -512,9 +542,10 @@ quantum quota-update --security_group 100 --tenant-id <tenant_id>
|
|||||||
| security_group_rule | 100 |
|
| security_group_rule | 100 |
|
||||||
| subnet | 10 |
|
| subnet | 10 |
|
||||||
+---------------------+-------+
|
+---------------------+-------+
|
||||||
</screen>
|
</screen>
|
||||||
</listitem>
|
</listitem>
|
||||||
</itemizedlist>
|
</itemizedlist>
|
||||||
|
</section>
|
||||||
</section>
|
</section>
|
||||||
<section>
|
<section>
|
||||||
<title>Reconfigure rate-limits for Nova</title>
|
<title>Reconfigure rate-limits for Nova</title>
|
||||||
|
Reference in New Issue
Block a user