In case of none default enforcement point value, the Segment
create might fail, because it is hard coded to use default ep
for querying transport zone, if specified. This change add
support for creating segment with transport zone in none default
enforcement point
Change-Id: Id122f9591c2bded5edc43fad514e6e1e9e6a9fa3
- Expose Building DHCP Config V4 and V6 in NsxPolicyTier1SegmentApi
- Update update_advertisement_rules to allow batch removal of existings
rules via prefix matching even if no new rules are to be added
Change-Id: I215630fb2af41d71431774d88129c08c4aeac904
Whenever the cluster in initialized, new loops for keepalive validation
are created.
The old loos should be stopped to not overload the nsx with keepalive checks.
Change-Id: I6ae746ba11457c141814424f42e9a0c0e2684601
- Add censoring of sensitive headers from being logged in _proxy()
- Fix issue where Cookie and X-XSRF-TOKEN were not censored as intended
Change-Id: I14b422a25b40d0014c05226f9ae4fe8be75e33fb
In addition to status code, also log error message and
local NSX time for failed NSX authentication for
easier troubleshooting for failed JWT authentication and
potential clock drift between NSX, VC and Master node.
Change-Id: Icf31477bffda85ba73a1123232b6aa5503066922
Since the NSX fix the certificate pem when creating it, we should
do the same when comparing a new one to existing ones.
Change-Id: I7da39447869c7ec2a99820676b6fb75b0a098acf
This patch adds an option to collect per cluster or per endpoint API
call records during _proxy() call. This enables client side API auditing
without the need to rely on NSX support bundles. By default this option
is disabled.
Change-Id: Ied30d90fc745d5009850c1c83c74eacd46d5fbd9
If IP block is created by Policy API, we need
{'X-Allow-Overwrite': 'true'} in header to delete subnet
Change-Id: Ib05437fef32d2ea206ee5af67b441f710d6f5016
This exception happens when the user's license expires on NSX and
a patch call is made. This is supported with NSX 3.1.0 and beyond
Change-Id: Ifb2dd824128720bd25d0053faab57cbbb6c7f04f
There is a short gap between NSX-T provider updating the realization
entity with Error state, and attaching with actual alarms. This would
result in nsxlib returning 'Unknown' RealizationErrorStateError
exception, while the real error is something else.
Upon getting a None error code, the get_info funtion should be retried
as well.
Change-Id: Ica3051b4858991738992022df1dd62b47dd9178d
This patch adds uri_segment as an alias of resource for all MP LB
resources, enabling proper use of _get_resource_by_name_or_id for these
resources.
Change-Id: I548519a8d2ea25d4324060894e0a3a0d03dd7e7e
Since py2 is no longer supported, built in methods can replace the
six package usage, as been done in the neutron project.
Change-Id: I435462c940e68fa48a910210e584cf139b3b9d95
This property is used to specify LS ID when creating segment, this
property is only used in NSX Highline backup/restore case currently.
Change-Id: I5033579623cde5dcf857ffdfd1f2d18390e9ff81
Use the policy 'rules' attribute instead of adding child rules.
This is expected to have better performance on the NSX side.
This patch re-itroduce the fix from: I213616a8b47f11adb1a897568746885f3e77078c
but this time with a flag to not break stuff
Change-Id: Ib6361575642fa96a93dd49107ece1f120a6e61b2