Commit Graph

378 Commits (44d566d6362384490ea4c09f6ada3a3336fa118f)
 

Author SHA1 Message Date
Adit Sarfaty 44d566d636 Policy: support multiple services in a communication map
Change-Id: I982b04e428f86168838c114b233e646d332dde28
5 years ago
Zuul f680a5acd2 Merge "Retry search calls on error" 5 years ago
Adit Sarfaty cc6a5cb498 Add more update options to VPN objects
Change-Id: Ieb9da32b6f3b908dda7b4c5b99cb4ca2b79c9286
5 years ago
Adit Sarfaty 8676000486 Retry search calls on error
Search queries sometimes return error 400 with:
error_code: 60508
error_message: 'Indexing is in progress, please retry after sometime.

This patche will retry the request on this error.

Change-Id: Id47886ba0e72ea946dcf07ae0bdbc81fef1dd4f0
5 years ago
Zuul 085766350e Merge "Avoid tools/tox_install.sh" 5 years ago
OpenStack Proposal Bot 8512f1f32c Updated from global requirements
Change-Id: I2ef764e182954109fb8c0b17867427e8ad0f5482
5 years ago
Andreas Jaeger 5efa58c4e3 Avoid tools/tox_install.sh
Remove tools/tox_install.sh and adjust tox.ini for using it.
There's no need for this anymore.

Change-Id: I2d26dc7f6934f6f08540acb1e866e4d012c004a1
5 years ago
OpenStack Proposal Bot cce8806f7f Updated from global requirements
Change-Id: Id5328167ec8a2552a4fe87410874e2930c46c0b2
5 years ago
Zuul e77684506d Merge "NsxLibMetadataProxy: get md proxy status function" 5 years ago
Michal Kelner Mishali 966e146df6 NsxLibMetadataProxy: get md proxy status function
New function under core_resources/NsxLibMetadataProxy to retrieve
md_proxy status.

Change-Id: I9b4e8520965878c949bee5129fa5c20a4b80671d
Signed-off-by: Michal Kelner Mishali <mkelnermishal@vmware.com>
5 years ago
OpenStack Proposal Bot cd8ff1af43 Updated from global requirements
Change-Id: Ieb43f449b07d5fbe5fa7acbba2cf8461e0d7179f
5 years ago
Adit Sarfaty b87e94457c Separate native DHCP apis to allow external usage
In order to allow update of a dhcp server, some apis needed to be exposed.

Change-Id: I07658bdaabe919f94dc877585206c76a1191f16c
5 years ago
Zuul 649ffdecfc Merge "Policy: Add connection information to enforcement points" 5 years ago
Zuul ef94a4cd0c Merge "Refactor policy code to match the new NSX" 5 years ago
Zuul e69d8de2e6 Merge "Enabled adding tags to nat rules" 5 years ago
Zuul 7b8d519caa Merge "Remove some old TODOs from the code" 5 years ago
Adit Sarfaty df1b50f094 Remove some old TODOs from the code
TrivialFix

Change-Id: I48004e1da900971b3909b5417c3798e7c9722a80
5 years ago
Gary Kotton 4447dcaed9 Enabled adding tags to nat rules
The following methods now have the ability to add tags:
- add_fip_nat_rules
- add_gw_snat_rule
- add_nat_rule

Change-Id: I6dc34ab3749ff4a5f1a575f407d8474538c69f96
5 years ago
Adit Sarfaty 1849131a06 Add router transport zone
In NSX 2.2 & up, there is a logical router advanced config of
an overlay transport-zone-id.
Also adding a router api to get the tier0 router overlay TZ to
be used here.

Change-Id: I3a447202785b7b6ac320ddbb6a3f2cdeac1f78aa
5 years ago
Adit Sarfaty af56e15ff0 Add Transport Nodes api support & router TZ support
1. Add support for the transport nodes resource basic operations
2. Use it for getting the list of TZ of a tier0 router

Change-Id: I381c947044454c04efbc1c38ed7691ef8213ffef
5 years ago
Adit Sarfaty de0c8e29a4 migrate to stestr
ostestr is no longer installed by default by infra and will be totally
removed longer term; stestr [1] is its replacement.

This is the reason out gate is failing with the following today:

nsx/tools/ostestr_compat_shim.sh: ostestr: not found

This patch moves us to stestr by:
- Updating tox.ini to use stestr rather than call ostestr_compat_shim.sh
and in turn ostestr.
- Removing ostestr_compat_shim.sh as its no longer used.

Change-Id: I1f97df69500058a7d330f7be5735a54c68f35559
5 years ago
Adit Sarfaty e0ad9472e5 Policy: Add connection information to enforcement points
Adding edge-cluster-id and transport-zone-id to the enforcement points
connection info

Change-Id: I98ebb3130a3f6e62d36895a6709d33683d9e6093
5 years ago
Adit Sarfaty 31f2095cc1 Refactor policy code to match the new NSX
The NSX policy manager changed the supported apis:
- Use PATCH instead of POST
- Remove the Communication profiles
- Add ID to communication maps, and allow multiple maps

Change-Id: I8cb2dd21892fd9e0878653f5667187fef76a3315
5 years ago
wangqi 5f64eceb69 fix typo in tox_install.sh
Change-Id: I6e5b3489343abf268bd27ce4b148ab3f3d2c652f
5 years ago
Zuul c25f33e163 Merge "VPN DPD timeout changes" 5 years ago
Zuul aa7a40051e Merge "VPN policy rules update" 5 years ago
Zuul c46c38e8c2 Merge "Add support for http PATCH method" 5 years ago
wangqi ae53b87aef change http with https
Change-Id: Ic9aa2bdc1c885089ae2c854907a94d500daf8f90
5 years ago
Zuul 892db21adb Merge "fix error url" 5 years ago
Anna Khmelnitsky f8d80792e5 Add support for http PATCH method
This is needed for NSX Policy

Change-Id: Ic2e3803be1c13d4dee6cb62a6bd4b4dd83d7cf10
5 years ago
Adit Sarfaty b1aeec6d76 VPN DPD timeout changes
The NSX implementation changed the DPD timeout limits and field name

Change-Id: Ic4ad0484685e4aeb7054bcfa52551beea8fe0cd9
5 years ago
Adit Sarfaty 3d4cb671fb VPN policy rules update
The NSX policy rules changed on the nSX.
The session rules will always be 'protect' rules,
and bypass rules were added to the vpn service.

Change-Id: I2dbf54544e7b49b828c5372f792e55fb1bd19d7c
5 years ago
Adit Sarfaty 2656e43357 Fix rate-limit attribute name
Backend NSX changed it.

Change-Id: Id5a04538c9416af2640d941715106f768e6bd1aa
5 years ago
melissaml cee37a255a fix error url
Change-Id: I36ba9ce956345e9496f3bc09b05355c6b7254f35
5 years ago
Gary Kotton df13d53903 Enable router interface to have 'centralized' type
This is required when we have a VLAN network that needs to be
attached to a router

Change-Id: I34ae08841158635e10ec4bd4518db4712ba4e984
5 years ago
Gary Kotton 354ea46ac1 VLAN ID and trunk spec are exclusive - can only set one
We should only set one - the vlan id or the trunk spec. The trunk
spec will have precedence.

Change-Id: Id62cad5b2c7b5caa8c817039819114806281746d
5 years ago
Zuul aafdcc3929 Merge "Enable search_by_tags to use only scope or tag" 5 years ago
Zuul 10acb14a0b Merge "Remove obsolete tempest-lib" 5 years ago
Gary Kotton f1b1dcd98b Enable search_by_tags to use only scope or tag
Enable more refined searches and not enforce that a scope and a tag
are required.

Change-Id: I542dd84a6690410744a22328001ac9c2de0a53b6
5 years ago
Gary Kotton 989e777ab4 Ensure that max_attempts is set
The NsxLibApiBase can have the nsxlib_config passed as None.
In order to use the retry logic we retrieve the max_attempts from
the client object. This is always set.

Change-Id: I4ac60f9a3d89b60d9b35390825578cb7f849dfa8
5 years ago
Zuul a277bbc6ad Merge "Fix VPN local endpoint structure" 5 years ago
Andreas Jaeger fdbc24b968 Remove obsolete tempest-lib
tempest-lib has been reintegrated into tempest and this repository
already uses tempest instead of tempest-lib. Remove requirements for
tempest-lib, tempest is already listed.

See also
https://specs.openstack.org/openstack/qa-specs/specs/tempest/implemented/reintegrate-tempest-lib.html

Change-Id: I7cb0d4c53fd876c6c5b4138e01853c47d065c495
5 years ago
OpenStack Proposal Bot 1464ae82e0 Updated from global requirements
Change-Id: Ieea894b881fe8900925893723f2fff352be1a193
5 years ago
Adit Sarfaty 17617d1e30 Fix VPN local endpoint structure
NSX request format changed.

Change-Id: I084c41bdb22eb681571c97060ba065181032fc97
5 years ago
Zuul cf9d4c0f27 Merge "Updated from global requirements" 5 years ago
Zuul c368fa37ee Merge "Fix VPN api as the NSX api changed" 5 years ago
Adit Sarfaty eaa14e1e25 Fix VPN api as the NSX api changed
Catching up with different VPN api changes done in the NSX

Change-Id: I32d6593860844bd23bb251c3fe30957c6efb9c2a
5 years ago
OpenStack Proposal Bot c0f0fbcbc7 Updated from global requirements
Change-Id: I378125e5c48bfde0ab22790c66fb704d58a9ac7f
5 years ago
Adit Sarfaty faeb5b8605 Support get & update for rate limit
Rate limit is returned as a part of node/services/http response
In order to update one should:
1. GET the current configuration
2. PUT the updated configuration (the http response will be 202)
3. POST a restart action request (the http response will be 202)

Change-Id: I35a05f9810832e9a22ec9db43f167f13df0744a4
5 years ago
Shih-Hao Li 9bf329a0e3 NSXv3: Enhance NSGroup create and update functions
- Allow passing direct members when creating a new NSGroup
- Allow removing membership_criteria when updating a NSGroup

Change-Id: Ib0e5f5193f2d9ed455e0918fdf67da7a0acfdb62
5 years ago