b11f37f860
Implements an L3 service plugin, apic_aim_l3, that, in conjunction
with the apic_aim mechanism driver, maps each Neutron router to an AIM
Contract and ContractSubject whose DNs and status are exposed via
extended attributes similar to those on the core Neutron resources. An
"any" Filter and FilterEntry are created per-tenant, and referenced in
this contract, allowing all traffic from EPGs providing and consuming
this contract to be routed.
The add_router_interface and remove_router_interface methods are stubs
that will be implemented in the next patch set. They will manage the
mapping of router interfaces to AIM Subnets, along with having the
default EPGs associated with those interfaces provide and consume the
router's Contract.
The corresponding GBP policy driver's extension is renamed
apic_aim_gbp for consistency with the apic_aim and apic_aim_l3
extensions at the Neutron level, and all extensions are now in the
gbpservice.neutron.extensions module.
The GBP policy driver's unit tests are updated to account for the
Filter and FilterEntry resources created by the mechanism driver.
The apic_aim unit tests wipe the AIM DB in tearDown, and use the
aci_integration_manager branch of the apicapi repo.
The GBP devstack plugin, when ENABLE_APIC_AIM=True, configures neutron
to use the apic_aim_l3 service plugin, and installs the
aci_integration_manager branch of the apicapi repo.
Change-Id: I1b7f0c80e66d55d58c27fe9e4cb461f62aec3c42
(cherry picked from commit e382e7611f)
69 lines
2.6 KiB
Plaintext
Executable File
69 lines
2.6 KiB
Plaintext
Executable File
# Make sure the plugin name in local.conf is "gbp", as in: enable_plugin gbp <remote> <branch>
|
|
source $DEST/gbp/devstack/lib/gbp
|
|
|
|
[[ $ENABLE_APIC_AIM = True ]] && source $DEST/gbp/devstack/lib/apic_aim
|
|
|
|
ENABLE_NFP=${ENABLE_NFP:-False}
|
|
[[ $ENABLE_NFP = True ]] && NFP_DEVSTACK_MODE=${NFP_DEVSTACK_MODE:-base}
|
|
[[ $ENABLE_NFP = True ]] && source $DEST/gbp/devstack/lib/nfp
|
|
# VM locations
|
|
ConfiguratorQcow2Image=${ConfiguratorQcow2Image:-build}
|
|
|
|
# Enable necessary Neutron plugins, including group_policy and ncp (L3
|
|
# is set via ML2_L3_PLUGIN, so isn't listed here).
|
|
Q_SERVICE_PLUGIN_CLASSES=group_policy,ncp
|
|
|
|
# Preferred git mirror
|
|
GIT_BASE=${GIT_BASE:-https://git.openstack.org}
|
|
|
|
# Git repositories needed to deploy GBP:
|
|
GBPSERVICE_REPO=${GBPSERVICE_REPO:-${GIT_BASE}/openstack/group-based-policy.git}
|
|
GBPSERVICE_BRANCH=${GBPSERVICE_BRANCH:-stable/mitaka}
|
|
GBPCLIENT_REPO=${GBPCLIENT_REPO:-${GIT_BASE}/openstack/python-group-based-policy-client.git}
|
|
GBPCLIENT_BRANCH=${GBPCLIENT_BRANCH:-stable/mitaka}
|
|
GBPUI_REPO=${GBPUI_REPO:-${GIT_BASE}/openstack/group-based-policy-ui.git}
|
|
GBPUI_BRANCH=${GBPUI_BRANCH:-stable/mitaka}
|
|
GBPHEAT_REPO=${GBPHEAT_REPO:-${GIT_BASE}/openstack/group-based-policy-automation.git}
|
|
GBPHEAT_BRANCH=${GBPHEAT_BRANCH:-stable/mitaka}
|
|
AIM_BRANCH=${AIM_BRANCH:-master}
|
|
APICML2_BRANCH=${APICML2_BRANCH:-stable/mitaka}
|
|
OPFLEX_BRANCH=${OPFLEX_BRANCH:-master}
|
|
APICAPI_BRANCH=${APICAPI_BRANCH:-aci_integration_manager}
|
|
|
|
# Enable necessary services, including group-policy (and disable others)
|
|
disable_service n-net
|
|
enable_service n-novnc
|
|
enable_service q-svc
|
|
if [[ $ENABLE_APIC_AIM = True ]]; then
|
|
disable_service q-agt
|
|
disable_service q-l3
|
|
else
|
|
enable_service q-agt
|
|
enable_service q-l3
|
|
fi
|
|
enable_service q-dhcp
|
|
enable_service q-fwaas
|
|
[[ $ENABLE_NFP = True ]] && [[ $NFP_DEVSTACK_MODE = advanced ]] && enable_service neutron-vpnaas
|
|
enable_service q-lbaas
|
|
enable_service q-meta
|
|
enable_service neutron
|
|
enable_service group-policy
|
|
disable_service tempest
|
|
ENABLED_SERVICES+=,heat,h-api,h-api-cfn,h-api-cw,h-eng
|
|
if [[ $ENABLE_NFP = True ]]; then
|
|
# NFP services
|
|
enable_service nfp_orchestrator
|
|
enable_service nfp_proxy
|
|
enable_service nfp_proxy_agent
|
|
[[ $NFP_DEVSTACK_MODE = base ]] && enable_service nfp_base_configurator
|
|
[[ $NFP_DEVSTACK_MODE != base ]] && enable_service nfp_config_orchestrator
|
|
fi
|
|
|
|
OVS_PHYSICAL_BRIDGE=br-ex
|
|
|
|
# Deployment preferences
|
|
SYSLOG=${SYSLOG:-True}
|
|
|
|
# Skip exercises by default (can be overridden in local.conf)
|
|
SKIP_EXERCISES=${SKIP_EXERCISES:-volumes,trove,swift,sahara,euca,bundle,boot_from_volume,aggregates,zaqar,client-env,neutron-adv-test,floating_ips,client-args,horizon,sec_groups,gbp_servicechain,gbp_heat}
|