11858 Commits

Author SHA1 Message Date
Gary Kotton
2f15090725 Tag the alembic migration revisions for Queens
This allows the database to be upgraded with the command:
  neutron-db-manage upgrade queens

Change-Id: Ia6ce7c636ac48468ba5ada7c31ff74f504b4fc1a
2018-02-09 06:36:31 +02:00
Gary Kotton
52b00656e7 NSX|V3: ensure that 0 is in the guest tag range
Change-Id: I9a92a4b0abe439482fe17a9c13537c8a7c0e5b2f
2018-02-08 23:15:19 +02:00
Adit Sarfaty
fd7c93b2dd TVD: Make sure subnets project is the same as the network
before creating a subnet, we should validate that the current tenant
project plugin is the same as the plugin the network was created with.

Change-Id: I3dcb4dca89313ec4359f2b467de5635ec2479cec
2018-02-09 23:26:51 +00:00
Zuul
6030d61b1d Merge "Add logging to help detect port security conflicts" 2018-02-09 19:07:52 +00:00
Zuul
82dc407f58 Merge "NSX|V: default support for IGMP traffic" 2018-02-08 22:28:59 +00:00
Gary Kotton
a9003e29a7 Add logging to help detect port security conflicts
Add logs that indicate if there are conflicting flags on a port for
port security and security groups.

Change-Id: I0eeadfcfaf2b90b7006b26ab59b61d9449ec37de
2018-02-08 14:26:55 -08:00
Zuul
3c289da795 Merge "NSX|V3: only allow physical network to be confogured for external net" 2018-02-08 22:24:55 +00:00
Gary Kotton
33dd28003c NSX|V3: validate external subnet has no DHCP enabled
Ensure that DHCP is disabaled for an external subnet.

Change-Id: I4e1f643a940903d57ee68232b3863d5d4e26957e
2018-02-08 09:31:18 -08:00
Zuul
bbaa593761 Merge "AdminUtils: Skip unsupported resources" 2018-02-08 02:43:30 +00:00
Zuul
2737019a39 Merge "NSX-V3: Update vlan-transparent case for network" 2018-02-08 00:28:39 +00:00
Zuul
c55f5e87f2 Merge "NSX-V: make sure error fw can be deleted" 2018-02-08 00:28:38 +00:00
Adit Sarfaty
025133b93a NSX-V3: Update vlan-transparent case for network
This flag should be updated also when disabled.

Change-Id: I8fc2d9f78559cf2c286d0e0cc59dee0dc5494823
2018-02-07 18:40:42 +02:00
Adit Sarfaty
6207386f9d NSX-V: make sure error fw can be deleted
Change-Id: Ia86ccc7906ff58b35dccb01f4c165822b9dbf2a9
2018-02-07 16:31:04 +00:00
Zuul
7ee63fce39 Merge "NSX|V: spoofguard_enabled disabled enhancement" 2018-02-07 13:23:35 +00:00
Zuul
3e25c08676 Merge "NSXv DNS integration" 2018-02-07 13:23:10 +00:00
Zuul
2832bfd8f9 Merge "NSX|V3: allow a router to be attached to a VLAN network" 2018-02-07 04:39:01 +00:00
Kobi Samoray
2b39fb3487 NSXv DNS integration
Complete NSXv integration with openstack/designate

Change-Id: I8b66fcc438c600bb736551acd2f3afa41714d40d
2018-02-07 01:54:42 +00:00
Zuul
4d7f8894ad Merge "TVD: do not support policy extension for nsx-t plugin" 2018-02-07 01:52:42 +00:00
Zuul
b750df9c1f Merge "TVD: fix get_<>s but plugin with filters" 2018-02-07 01:52:39 +00:00
Zuul
d49bedb197 Merge "TVD: Fix filtering without project id" 2018-02-07 01:52:37 +00:00
Zuul
8a53f29e4d Merge "NSXv3 DNS integration" 2018-02-07 01:52:34 +00:00
Zuul
35e7446459 Merge "NSX|V3: enable VLAN transparent to be configured with VLAN" 2018-02-07 00:45:27 +00:00
Gary Kotton
326b071db1 NSX|V: default support for IGMP traffic
Enable IGMP traffic to pass by default. This is added to the default
section created by the plugin.

Change-Id: I0320cc8bf81cda22633637ee9eac4a57fc3b4086
2018-02-07 00:40:27 +00:00
Gary Kotton
a97627ac51 NSX|V3: only allow physical network to be confogured for external net
External network type or segmentation ID is not support so we throw
an exception if one of these is configured at external network
creation.

An external network is just associated to a edge cluster.

Change-Id: I0a7f265f4af4be9a37169fe07cefe574f49d4401
2018-02-06 16:17:41 -08:00
Gary Kotton
209c3ba9e0 NSX|V3: allow a router to be attached to a VLAN network
Change-Id: Ic7a258ae2a8cab8acf81eef3663cb2864da01793
Depends-On: I34ae08841158635e10ec4bd4518db4712ba4e984
2018-02-06 23:36:22 +00:00
Gary Kotton
0b7d97e0d9 NSX|V: spoofguard_enabled disabled enhancement
If the global configuration flag is disabled then instances should
be added to the global exclude list

Change-Id: Ibe618db490867d7639d5a7362fab2cb1c933f0cf
2018-02-06 22:44:39 +00:00
Zuul
a7f1b3513f Merge "Use the new PTI for document build" 2018-02-06 22:25:40 +00:00
Kobi Samoray
89b9171c58 NSXv3 DNS integration
Complete NSXv3 integration with openstack/designate

Change-Id: Ie91864e132ded03777013c88bf9dab7a09bc1289
2018-02-06 19:49:53 +02:00
Adit Sarfaty
e3b2ae22b7 TVD: do not support policy extension for nsx-t plugin
If not nsx-v plugin:
- Fail if security group create/update is called with a policy
- Remove the policy field from the security group results
- Fail when accessing a specific policy
- Return empty list when trying to list the policies

Change-Id: Ib63a8105577b9f55ddeae83adcab16815ab09000
2018-02-06 01:45:45 +02:00
Adit Sarfaty
bee5dc6f2d TVD: fix get_<>s but plugin with filters
When getting networks/ports/etc with filters, we should filter by
the context plugin even if filters are added to the request

Change-Id: I25c8df14cb5958842518557a302264995bcbb7d7
2018-02-06 01:21:46 +02:00
Adit Sarfaty
8be988e49d TVD: Fix filtering without project id
the plugin filtering method should support the case where the context
does not have any project id, and skip the filterring

Change-Id: I35f7eb508891d1b930867b91e98b7fb6a276eeac
2018-02-06 00:15:37 +02:00
Zuul
da500f1e84 Merge "NSX-v3: VPNaaS supports only No-SNAT routers" 2018-02-05 11:18:00 +00:00
Zuul
04cc453983 Merge "AdminUtil NSX-v3: recreate dhcp server for a network" 2018-02-05 11:17:59 +00:00
Zuul
55ddd89eba Merge "TVD: Fix FWaaS typo" 2018-02-05 11:17:58 +00:00
Gary Kotton
c93f928b03 TVD: no longer experimental
Remove the log. The plugin is progressing nicely. Core services
are working and have been tested thorughly.

A few remaining issues with service plugins.

Change-Id: I381400fb8bd977b2d8375cb599ae4f675e9e1a6d
2018-02-03 13:43:33 -08:00
Sean McGinnis
7dd27bfc7c Use the new PTI for document build
For compliance with the Project Testing Interface as described in:

https://governance.openstack.org/tc/reference/project-testing-interface.html

For more detials information, please refer to:

http://lists.openstack.org/pipermail/openstack-dev/2017-December/125710.html

Change-Id: I9cf0bac7edc5f4d45af2729428f92d8a6fd7860d
2018-02-02 07:58:29 +01:00
Gary Kotton
bfce2c50b4 NSX|V3: enable VLAN transparent to be configured with VLAN
The plugin will enforce that a VLAN ID should not be configured
with the transparent flag.

Change-Id: I9310e2de62346b805514fdd5cd3507b245e8e0cc
2018-02-01 18:55:28 +02:00
Zuul
9ab1f68179 Merge "AdminUtils NSX-v: Fix SG migration to policy" 2018-02-01 13:21:35 +00:00
Adit Sarfaty
9667f4f6d1 TVD: Fix FWaaS typo
TVD plugin for FWaaS overides all the 'list' actions.
by mistake get_firewall was also overriden

Change-Id: I0904a845cdcfbfa248de501bf368b4a134fe2026
2018-02-01 12:44:30 +00:00
Adit Sarfaty
0d4258651b AdminUtils NSX-v: Fix SG migration to policy
Admin utility for migrating security group from rules to NSX policy fails becasue
of an api change.

Change-Id: I7d23640f3262d5602245c1d00468e82ec53d34ea
2018-02-01 13:06:33 +02:00
Nguyen Hung Phuong
68a9b50cf8 Remove pbr warnerrors in favor of sphinx check
This change removes the now unused "warnerrors" setting, which is
replaced by "warning-is-error" in sphinx releases >= 1.5 [1].

[1] http://lists.openstack.org/pipermail/openstack-dev/ 2017-March/113085.html

Change-Id: Ie82fce03c73f4a78b557caecc5bcf4ad9c8b7cb1
Closes-Bug:#1693670
2018-02-01 13:48:04 +07:00
Gary Kotton
aa013353df TVD: ensure that extra attributs are set for router iif they exist
Validate that the extra attributes are configured.

Change-Id: I45aad02b6b2855653aef37c0cd9dfeaf7e152bde
2018-02-01 06:29:17 +00:00
Adit Sarfaty
a71b3859ad AdminUtils: Skip unsupported resources
Some admin util resources depends on external libreries that are not
always installed.
This patch will skip those, so the rest of the resources can be used.

Change-Id: I860f054fdadfe9ced93c3ba77f9b5d82b07da9fa
2018-01-31 10:31:00 +02:00
Gary Kotton
142927151a NSX|V3: enahance admin utility for metadata proxy list
This will now list the status of the service on the NSX.

Depends-On: I542dd84a6690410744a22328001ac9c2de0a53b6
Change-Id: Ie93c1c7092da4ddc07c8868a774e0969bf51338d
2018-01-31 00:25:15 -08:00
Adit Sarfaty
93268da5c2 AdminUtil NSX-v3: recreate dhcp server for a network
Usage:
nsxadmin -r dhcp-binding -o nsx-recreate --property net-id=<neutron-net-id>

Change-Id: Ib6e6e8285db95636c912d772b0d3ee543ebba8b6
2018-01-31 09:50:20 +02:00
Gary Kotton
b336b8cc03 NSX|TV: validate plugin is available
When admin creates plugin mapping validate that it is available.

Change-Id: If41dc891e8f9a484b85d00d9fff2f7fa3a6f376c
2018-01-30 07:38:19 +00:00
Adit Sarfaty
30a8b2176f NSX-v3: VPNaaS supports only No-SNAT routers
Prevent the creation of a vpn service for a rotuer with SNAT enabled,
and prevent updating the SNAT to enabled for a router with a vpn service.

Change-Id: Ib6bfd9e019b2161245ba4951ef48e84314e0b923
2018-01-29 11:48:25 +02:00
Zuul
2859a235e6 Merge "NSXv3: allow use api_workers=-1" 2018-01-28 12:15:35 +00:00
OpenStack Proposal Bot
925ebe9728 Updated from global requirements
Change-Id: I7a7cb60caff605e5d4c2c25037ae23a3e4df9166
2018-01-27 20:54:14 +00:00
Kobi Samoray
b934462ccb NSXv3: allow use api_workers=-1
Doing that failed to initialize fwaas callbacks

Change-Id: I5594a5ecd72c10e4d7caf96920a7d418010f52d5
2018-01-25 13:39:12 +02:00