12722 Commits

Author SHA1 Message Date
OpenDev Sysadmins
b3478c2635 OpenDev Migration Patch
This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.
2019-04-19 19:51:46 +00:00
Zuul
30eab6bb8c Merge "NSX|P: Add ipv6-specific router adv rule" 2019-04-18 19:14:19 +00:00
Anna Khmelnitsky
ec41aa8fda NSX|P: Add ipv6-specific router adv rule
Since NAT is not a use case for ipv6, all connected ipv6 subnets
need to be advertised. There seems to be no way to add single rule
for all ipv6 subnets, therefore an allow rule will be added for all
ipv6 subnets.

Change-Id: Iaf89738f8d71a2f743ba699bebd5c8361c130a3c
2019-04-18 08:05:12 +00:00
Kobi Samoray
1b7ff25d56 NSXP: Use native route advertisement rule API
Change-Id: Ia35986c082f4d8daf355a6e535393e4b06c3f707
Depends-On: Iad1011252fd21c87b1b5bd454fd6fb5a8064835d
2019-04-18 07:37:38 +00:00
Zuul
e871f7d2e9 Merge "NSXP: protect router when it hosts a loadbalancer" 2019-04-17 17:47:56 +00:00
Kobi Samoray
ac2ad801fc NSXP: Fix LB service tags on public subnet
While creating a LB service on a LB service, the router id is not
available and should be set while setting connectivity during member
creation.

Change-Id: I7667311e4d4721bc8b19697c3dbf2e9fc31214d7
2019-04-17 14:28:26 +03:00
Anna Khmelnitsky
e435a2cea6 NSX|P: Fix dhcp config with dual stack
IPv4 dhcp config could take the wrong fixed IP for dhcp port. This
patch ensures IP from correct subnet is taken.

Change-Id: Ieceeba30c6f4f7ee703f84f45173f6e172af9557
2019-04-15 17:28:10 -07:00
Zuul
e87c59ff2b Merge "NSXP LB: pass lb_pool_id when needed" 2019-04-15 17:33:39 +00:00
Zuul
43113c0300 Merge "Delete SG rules when deleting their remote group" 2019-04-15 16:30:51 +00:00
Zuul
c53cefcae8 Merge "NSX|P: Handle slaac profile for vlan subnets" 2019-04-15 16:19:37 +00:00
Kobi Samoray
fdef6eb61c NSXP LB: pass lb_pool_id when needed
Change-Id: If464c36cbc83380e7b032c7b2ffc71da18e36e16
2019-04-14 16:22:56 +03:00
Kobi Samoray
b63002c3e5 NSXP: protect router when it hosts a loadbalancer
Change-Id: I2a64a5ec532b216c26bcfd5083332f18b927cf38
2019-04-14 14:59:28 +03:00
Zuul
55898569d3 Merge "Fix session persistence profile management" 2019-04-14 07:21:55 +00:00
Zuul
6ee8dd7520 Merge "NSX|P: Use random ID in FWaaS service" 2019-04-14 06:19:28 +00:00
Zuul
2236441b9a Merge "NSX|P: Improve error handling when deleting backend resources" 2019-04-14 05:35:33 +00:00
Salvatore Orlando
8459b35461 Fix session persistence profile management
Ensure the right NSX client library is used, add
method for creating tags on session persistence
profile.

Change-Id: Ic2998af1f629d55b3cde4d4e1c14f3aa620cee8b
2019-04-12 15:19:44 -07:00
Anna Khmelnitsky
0c12b06dfc NSX|P: Handle slaac profile for vlan subnets
Since vlan subnets are attached using service interface, the plugin
can assign ndra profile on subnet level.
For same reason, exclude vlan subnets from consideration when removing
slaac profile from router.

Change-Id: I742795ee80543d5a18ad701a964f3e40d07a2699
2019-04-11 20:47:15 +00:00
Zuul
c726275a30 Merge "NSX|P: Update slaac config on router" 2019-04-11 07:35:12 +00:00
Zuul
3245e74954 Merge "Add DB migration milestones for Stein" 2019-04-11 07:08:27 +00:00
Adit Sarfaty
f05c05562b NSX|P: Improve error handling when deleting backend resources
When deleting a backend resource after the neutron resource was
already deleted, ignore resource not found error, but fail the
neutron action with a message to make sure the user is aware of
the zombie resources on the backend

Change-Id: Id1d949c3fb462a4a9eff4e0b87700ec988700098
2019-04-11 09:27:13 +03:00
Adit Sarfaty
1ca92978ab Delete SG rules when deleting their remote group
Subscribe to a callback that will be called upon security group deletion,
and will look for rules with this SG as their remote-group-id and
delete them explicitly.
Else, those rules will only be deleted from the neutron DB, without
the NSX backend being aware of this.

This code was added in the common plugin, and will affect the V, V3 & P plugins.

Change-Id: Ie01dc29efaa3bf30ac314f45542d83f5a4cf238f
2019-04-11 08:32:58 +03:00
Adit Sarfaty
b2680a7aae NSX|P: Use random ID in FWaaS service
Deleting and recreating a service may fail becasue the purge cycle was
not over yet.
Instead of waiting for it, a random id will be used.

Change-Id: I2421146592f18bf77cd4c6631aa4af03086fe0ae
2019-04-11 05:25:28 +00:00
Adit Sarfaty
6431cb9ffa Add DB migration milestones for Stein
Change-Id: Ic7de8d60e7cb3736f61d40c8f7cd41eaeddaa6ff
2019-04-11 05:24:29 +00:00
Anna Khmelnitsky
ac06b1b985 NSX|P: Update slaac config on router
In neutron, slaac is enabled per subnet. However on policy
slaac is router configuration.
In order to avoid another passthrough API, router will be
configured with slaac profile if at least one of its subnet
has slaac enabled.

Change-Id: I7a055aa4d73425011c22248c8d7d9d2e0a383dc8
2019-04-10 13:35:07 -07:00
Zuul
c29c51d2fb Merge "NSX|P: Disable API passthrough for enable_standby_relocation" 2019-04-10 15:14:41 +00:00
Zuul
c56eb5b2bd Merge "NSX|P: Fix removal of provider security groups from port" 2019-04-10 12:01:15 +00:00
Michal Kelner Mishali
d5c5913c43 NSX|P: Disable API passthrough for enable_standby_relocation
Following updated support on backend, removing the need for
passthrough API when enabling enable_standby_relocation.

Change-Id: Ic1588f8aeb83115d5c51c94477b4f8e93fefafa8
Signed-off-by: Michal Kelner Mishali <mkelnermishal@vmware.com>
2019-04-10 11:12:35 +00:00
Adit Sarfaty
e68ad8d6a5 NSX|P: Improve exclude list creation
1. Even if the group was already created,
   verify it is a part of the exclude list.
2. Add the new group to the ex clude list,
   without removing existing groups.

Change-Id: I65e1b8aff6a250185c4cb6bdfac82e8a8e9289bf
2019-04-09 13:50:42 +03:00
Zuul
dc52e3b0ca Merge "NSXP LB: Complete Octavia init" 2019-04-09 00:21:36 +00:00
Zuul
ab21a5d125 Merge "NSX|P: Enable IPv6 Router Advertisement" 2019-04-08 16:12:27 +00:00
Adit Sarfaty
b25cc5dcee NSX|P: Fix LB waf profile usage
Do not use it unless configured.

Change-Id: I0622c8d06d826f3df6743d760c78df4a204b3ea5
2019-04-08 14:58:29 +03:00
Kobi Samoray
4f413ab2a9 Octavia: add o-da to required service list
Update documentation as Octavia now requires the driver agent to
operate.

Change-Id: I1a798fdf1478bf808bffc39e7b0e389f7ec7db15
2019-04-08 11:53:42 +03:00
Adit Sarfaty
ef6498085c NSX|P: Fix removal of provider security groups from port
Change-Id: I74e39328858fe91515f7796d3bef80de934843c4
2019-04-08 11:34:08 +03:00
Kobi Samoray
41ca584def NSXP LB: Complete Octavia init
Change-Id: I7d7d0674444fa82193d0e1e391b5760a23c0ef69
2019-04-07 13:33:00 +03:00
Anna Khmelnitsky
762c5f61ac NSX|P: Enable IPv6 Router Advertisement
Always allow IPv6 RA in default firewall section. This is needed
for SLAAC.

Change-Id: Ifb1ad93b73c93d5207ea67923dbf5615174c1002
2019-04-06 20:43:59 -07:00
Zuul
04a9b980db Merge "NSX|V3: Support listener default pool with session persistence" 2019-04-05 15:33:47 +00:00
Boden R
ff839a810d update requirement versions for stein
Change-Id: I9eb4c15a0df44e4ed86822b271d201ec48555edd
2019-04-04 11:17:03 -06:00
Adit Sarfaty
56b5b801f8 Temporarily use octavia exceptions
Until I1a566353b7fb125184849b3a0f864d3ef6896d94 is merged, switching back
to use octavia exceptions directly instead of octavia-lib ones

Change-Id: I515c6b31a9921ce213a3e80dd1c06b2c3b3d2352
2019-04-04 14:15:46 +03:00
Zuul
4f7a29bdf9 Merge "use trunk constants from neutron-lib" 2019-04-04 08:59:53 +00:00
Zuul
42b49c12ff Merge "Implement providernet._raise_if_updates_provider_attributes internally" 2019-04-04 06:42:53 +00:00
Zuul
1d8b8b2e1f Merge "Handle multiple default SG creation in all plugins" 2019-04-04 06:14:23 +00:00
Zuul
8c7dd1aa52 Merge "NSX|P: Sleep before first check of realization" 2019-04-04 06:12:22 +00:00
Kobi Samoray
7d8d2ec5e8 NSXP: Delete LB pool when listener is broken
Allow the deleteion of LB pool even though listener is missing from backend.

Change-Id: Ie59ca39992466344e542794d0e5ebaec1d7edf35
2019-04-03 14:48:35 +00:00
Zuul
59bf4b8a4c Merge "NSX|P: Configure exclude list for port-security-disabled ports" 2019-04-03 12:25:35 +00:00
Zuul
e63868ee57 Merge "NSX|P: Add ipv6 neighbor discovery to global FW" 2019-04-03 11:27:05 +00:00
Zuul
277422e530 Merge "NSX|V3+P: Ensure router GW & interfaces do not overlap" 2019-04-03 11:15:32 +00:00
Adit Sarfaty
1821a19fe4 NSX|P: Configure exclude list for port-security-disabled ports
Change-Id: Idad42b8080232808bb6011efbe77e8c6523d94a9
2019-04-03 13:39:11 +03:00
Adit Sarfaty
b02375bc5a NSX|P: Sleep before first check of realization
Upon network create, for the MD proxy support hte plugin needs
the nsx id of the newly created segment.
The first cehck for realized id will surely fail, so this patch
adds a short sleep before that.

Change-Id: Ieba153b3441b8db875c78c94ff4d4d80441d76b1
2019-04-03 13:28:33 +03:00
Rodolfo Alonso Hernandez
33212a66eb Implement providernet._raise_if_updates_provider_attributes internally
Function [1] is a private function in Neutron and should not be imported
in other projects. Also this function is removed in [2], while
implementing the related bug.

Related-Bug: #1806052

[1] https://github.com/openstack/neutron/blob/stable/stein/neutron/extensions/providernet.py#L24
[2] https://review.openstack.org/#/c/633165/

Change-Id: Ic6260fbe944062c8db7c888b77c3725b2f44c68c
2019-04-03 11:16:03 +01:00
Anna Khmelnitsky
f79649f9c2 NSX|P: Add ipv6 neighbor discovery to global FW
According to RFC ND solicitation and advertisiment messages can
be from unspecified address or to multicast. Thus address-based
membership would not always work.
This patch allows ND packets globally.

Change-Id: I0e926986e0446d5f67b7f1ddc4bf051e7513d4ac
2019-04-03 09:04:42 +00:00