11858 Commits

Author SHA1 Message Date
Zuul
8882d158c9 Merge "NSX_V3: add flag to indicate if ENS networks can be created" 2018-01-25 07:35:25 +00:00
Gary Kotton
8b91fd814d NSX_V3: add flag to indicate if ENS networks can be created
Enable admin to control if ENS networks can be used.
In nsx_v3 section a new flag ens_support is added.

Change-Id: I99b885072964870fe61a26a5bab71c7ed0790c87
2018-01-24 02:44:35 -08:00
Zuul
913dbe467e Merge "use vlantransparent api def from neutron-lib" 2018-01-24 09:32:07 +00:00
Boden R
a8bfef1529 use vlantransparent api def from neutron-lib
The vlantransparent extension's API definition was rehomed into
neutron-lib with commit I78c3e0c0b74dd154b6133963dfc8b65f9527bd2c
This patch consumes it by using neutron-lib's implementation in prep
for Ibfaa1ebf24caec62f5743975b206400fcd30436d

Change-Id: I8e2bf3fb75b3ccbcb269677fb2aa826659fbbdd2
2018-01-23 15:29:57 -07:00
Zuul
28582356bb Merge "TVD: FWaaS plugins" 2018-01-23 21:46:43 +00:00
Zuul
e643476a7f Merge "NSX|V: ensure that only LAG is configured and not standby" 2018-01-23 11:34:23 +00:00
Adit Sarfaty
4530377c60 TVD: FWaaS plugins
Adding FWaaS v1/v2 plugins to be used with the TVD core plugin.
The plugins will make sure to separate the v/t returned lists
using the same solution that was introduced for the LBass, now as a
general class decorator.

Change-Id: I5f01b8cf093d5ef3b340dce2d12fc41031dd12e9
2018-01-23 10:18:21 +02:00
Gary Kotton
41e61b9ae8 NSX|V: ensure that only LAG is configured and not standby
In the event that there is a LAG only configure the LAG
and no standby.

Change-Id: Ieacf386ce9a8ca02d795e53c7ddab9d1356ecf88
2018-01-22 00:54:40 -08:00
Zuul
62cf6cb793 Merge "NSX-V3 devstack: cleanup VPNaaS objects" 2018-01-22 08:49:03 +00:00
Zuul
adcc6f7c67 Merge "TVD: ensure get_ports works for DVS plugin" 2018-01-22 07:18:39 +00:00
Gary Kotton
8960282459 TVD: make security group logging more robust
Ensure that DVS security groups (which do not have this extension)
do not cause exceptions

Change-Id: I1a318347f92d6d793768dd20d653c872a3f75da3
2018-01-21 18:09:22 +00:00
Zuul
6268a1f313 Merge "use multiprovidernet api definition from neutron-lib" 2018-01-21 11:32:50 +00:00
Gary Kotton
cdb7ec5b9a TVD: ensure get_ports works for DVS plugin
Get ports would not populate the nic type.

Change-Id: Ic57eca5f71d02e3172df501c8528ba8aa3528e07
2018-01-21 03:02:57 -08:00
Adit Sarfaty
bbddf61c87 NSX-V3 devstack: cleanup VPNaaS objects
Delete nsx vpn sessions and local endpoints when cleaning up devstack

Change-Id: Ie5e9d9f87230fb950b6951e67e5548b24ca64d33
2018-01-21 10:47:22 +00:00
Boden R
c9d90d4e91 use multiprovidernet api definition from neutron-lib
The multiprovidernet API extension's definition was rehomed into
neutron-lib with If3367e6a14074a6225bba527e8f7e38c51280f85 and will be
consumed in neutron via I12c15c360f8bf5a45fbe70e5ed1202ef0e7ec0f0

This patch switches the code over to use neutron-lib's multiprovidernet
API definition rather than neutron's extension.

Change-Id: I6803fdf363a674303f21241a59dc6a281c84d433
2018-01-18 14:40:58 -07:00
Gary Kotton
ab86e8deaf TVD: ensure that can return specific tenant/project requests
A service tenant may do a request for a speicific tenants data,
for example, ports (as in the case with a nova boot). So we need
to ensure that the filters requested by the tenant are met.

Change-Id: Ic7ff59a813347f943e6c84478d9f036c90473c9e
2018-01-18 12:49:58 +00:00
Zuul
3caac5a518 Merge "TVD AdminUtils: Use only objects from specific plugin" 2018-01-18 11:44:37 +00:00
Zuul
f001513e7f Merge "NSX|V: enable binding floating ip's per AZ" 2018-01-18 09:53:48 +00:00
Zuul
e28ed675f6 Merge "NSX-V3 FWaaSV2 prevent adding compute ports to FW group" 2018-01-18 08:24:33 +00:00
Zuul
1a2321c93e Merge "Updated from global requirements" 2018-01-18 08:24:32 +00:00
Zuul
ea075df213 Merge "TVD|AdminUtils: Add all nsxv/v3 utils to tvd" 2018-01-18 08:24:31 +00:00
OpenStack Proposal Bot
3f4d10e2aa Updated from global requirements
Change-Id: I2104888d93fa18ffd8e6c8ae48bc87b9d2f01389
2018-01-18 03:39:17 +00:00
Zuul
fe2c87adbd Merge "NSX-v3: fix update_router_firewall error handling" 2018-01-18 02:32:53 +00:00
Adit Sarfaty
fa6cfd8e2b NSX-V3 FWaaSV2 prevent adding compute ports to FW group
Upstream now supportes FWaaS v2 on compute ports, but our driver does not.
When trying to add a compute port to the Firewall group, its status should
set to Error.

Change-Id: Id5965197c58b940e2d33892023ff321a77eac82a
2018-01-17 16:55:48 +00:00
Zuul
f97b3055df Merge "Updated from global requirements" 2018-01-17 13:27:58 +00:00
Adit Sarfaty
c06d20e21b TVD AdminUtils: Use only objects from specific plugin
filter get_<>s results in AdminUtils to retirve only the neutron objects
that belong to the nsxv/v3 plugin

Change-Id: I2d0675764c6b10861949c69b2f152e585d790f21
2018-01-17 11:39:36 +02:00
Adit Sarfaty
c1ea586d6e NSX-v3: fix update_router_firewall error handling
The wrong exception was used

Change-Id: Ia114a3deedbf752ae908d98bcc72418f67d37b53
2018-01-17 10:17:05 +02:00
Adit Sarfaty
09151b77e9 TVD|AdminUtils: Add all nsxv/v3 utils to tvd
The user of the TVD plugin can use the admin utilities of the nsxv/nsxv3 plugins
by calling:
nsxadmin --plugin nsxv -r <> -o <>
or:
nsxadmin --plugin nsxv3 -r <> -o <>

A separate patch will make sure that only the relevant neutron objects are being
retrived when using those utilities.

Change-Id: I813f69bf2e08f3845f0135fdb00666746f5d20c6
2018-01-17 09:51:59 +02:00
OpenStack Proposal Bot
21a381a68c Updated from global requirements
Change-Id: I9dcdaa1e84cbf430923479f0b39c7c7ded0e2295
2018-01-17 07:26:38 +00:00
Adit Sarfaty
0edcfacc69 AdminUtils: NSX-V3: Show and update the NSX rate limit
Usage:
nsxadmin -r rate-limit -o show
nsxadmin -r rate-limit -o nsx-update --property rate_limit=45

Change-Id: I0b08cd42be61158a1358479d8f0cae271e26541f
Depends-on: I35a05f9810832e9a22ec9db43f167f13df0744a4
2018-01-17 07:08:48 +00:00
Zuul
108a706d92 Merge "Fix VPN api as the NSX api changed" 2018-01-17 06:55:33 +00:00
Zuul
c594154fd8 Merge "TVD availability zones" 2018-01-16 14:04:05 +00:00
Adit Sarfaty
ffd5bbaeda NSX-v| Do not allow setting qos policy on port
The nsx-v plugin supports qos on a netwrok level only.

Change-Id: I0fbe56f02cf5f95445af59ac673131d10cd17a70
2018-01-16 13:47:06 +02:00
Adit Sarfaty
58b5f0b478 Fix VPN api as the NSX api changed
Catching up with different VPN api changes done in the NSX

Change-Id: I78263af403056c9282da5799b9f64b3d8f22b80d
Depends-on: I32d6593860844bd23bb251c3fe30957c6efb9c2a
2018-01-16 11:03:21 +02:00
Gary Kotton
b448aba9b8 NSX|V: enable binding floating ip's per AZ
Enable admin to enable this config variable per AZ.

Change-Id: I19ee2b4adf49e9bcd3e6004dc76d61761bb81b92
2018-01-15 22:09:08 -08:00
Zuul
c4a462d131 Merge "NSX-v3: Use logical switch id in FWaaS V2 rules" 2018-01-15 15:16:21 +00:00
Adit Sarfaty
b0a02917ee TVD availability zones
1. Do not allow the same availability zone to be configured for both
   NSX-V and NSX-T
2. Adding separate configurations for the nsx-v/t default availability
zones under the tvd configuration section:
[nsx_tvd]
nsx_v_default_availability_zones = zone2
nsx_v3_default_availability_zones = zone1

Change-Id: Ic77dae9398b8281b8ea4d2988447907d1ac55c90
2018-01-15 12:59:45 +02:00
Zuul
b12e6a414b Merge "NSX|V: ensure port security is enabled for address pair support" 2018-01-15 07:51:44 +00:00
Gary Kotton
69d87b94ce TVD: support lbaasv2 'provider' filtering
The patch ensures that only a V tenant can see v resources and the
same for a T tenant/project.

NOTES:
1. In the neutron configuration file a new service plugin is created.
   So we need the following:
[DEFAULT]
service_plugins = vmware_nsxtvd_lbaasv2

2. The extensions path needs to be updated so that the default LBaaS
   extensions can be loaded.

So for example in the devstack case we need to configure:
[DEFAULT]
api_extensions_path = /opt/stack/neutron-lbaas/neutron_lbaas/extensions

Change-Id: Iea497cbb150048bedf712a195c7854e4836ad4a5
2018-01-14 22:02:15 -08:00
Gary Kotton
498a8215bd NSX_V3: enable non native DHCP to work with AZ support
The dhcp and metadata prodiles do not need to be set.

Change-Id: I5e7f50d9e9c8517372e04317b17f99434aaba080
2018-01-14 08:21:42 +00:00
Zuul
bdeabecca7 Merge "use api attributes from neutron-lib" 2018-01-13 08:15:44 +00:00
Zuul
3aa4aa5d42 Merge "NSX-v3: Inform FWaaS when a router interface is removed" 2018-01-12 13:50:08 +00:00
Zuul
36250d8af8 Merge "TVD: move plugins init_complete code to the end of init" 2018-01-12 13:28:42 +00:00
Zuul
1b4c6e7a10 Merge "NSXv, DVS: Use neutron DB name instead of neutron_nsx" 2018-01-12 13:28:41 +00:00
Zuul
8bc1f62699 Merge "TV: doc creation of admin for a specific plugin" 2018-01-12 11:48:30 +00:00
Zuul
2d590c5c85 Merge "TVD: improve default plugin failure at boot time" 2018-01-12 11:48:29 +00:00
Zuul
9aa702e99d Merge "TVD: get_address_scopes and get_subnet_pools support" 2018-01-12 11:48:28 +00:00
Adit Sarfaty
f885408518 NSX-v3: Inform FWaaS when a router interface is removed
In FWaaS v2, the firewall group is attached to router interface ports.
When the last interface is removed, the firewall status should be set to
inactive until addign a new port.

Change-Id: I20a7566d80fa011772066ecd076a303b0fb07f99
2018-01-12 10:44:54 +00:00
Adit Sarfaty
bbf48e9c69 TVD: move plugins init_complete code to the end of init
If the nsx-v/v3 init fails, the registration to init_complete should
not be done, since the init_complete method might fail too.

Change-Id: I2b9550394f67f4dfb79dba9455f2d75af5d28802
2018-01-12 10:44:40 +00:00
Kobi Samoray
c9b8eba4e4 NSXv, DVS: Use neutron DB name instead of neutron_nsx
No sense in changing the DB name, really.

Change-Id: I7f20f4ae9c724791bd3f025a664e9cf92902c938
2018-01-12 10:44:18 +00:00