firewall_driver configuration option has been introduced in the patch
of OVS security group support and it affects Linux Bridge plugin.
The default value of firewall_driver is NoopDriver.
Thus firewall_driver configuration is required in Linux Bridge plugin.
Nachi Ueno [Fri, 11 Jan 2013 00:24:54 +0000 (16:24 -0800)]
Implements quantum security groups support on OVS plugin
implements bp quantum-security-groups-iptables-ovs
- Adding [SECURITYGROUP] firewall_driver to the conf
- Adding NoopFirewallDriver
- Adding OVSHybridIptablesFirewallDriver
- Refactoring security group code to support OVS plugin
Henry Gessau [Thu, 7 Feb 2013 21:01:28 +0000 (16:01 -0500)]
Improvements to API validation logic.
Do not automatically map generic exceptions like AttributeError to
http errors (instead they should be handled closer to where they occur
so that they can be "intelligently" converted to the appropriate
error).
Fix up some expected error codes in the unit tests.
Improve some of the validation messages.
Remove all use of locals() in attributes.py
Mark McClain [Tue, 5 Feb 2013 04:59:59 +0000 (23:59 -0500)]
add non-routed subnet metadata support
implements blueprint metadata-non-routed
This patchset completes Quantum metadata support by adding metadata
proxy support for isolated network segments. The support requires that
the guest instance request host routes, so that the DHCP port can be
used to proxy metadata requests. NOTE: The cirros image does not support
host router, so the UEC or equivalent required for testing and usage.
'Flat' and 'Vlan' where not being converted into 'bridge'
This change cannot have unit tests because the fake nvp api
client does not validate such constraints at the moment
Arvind Somya [Tue, 5 Feb 2013 22:22:50 +0000 (17:22 -0500)]
Cisco plugin cleanup follow up commit
A commit was made by Alex Xu (https://review.openstack.org/#/c/20073) a day before the Cisco plugin
cleanup that led to some deleted files creeping back into the Cisco plugin. This commit backs out
the deleted files again.
Ante Karamatic [Mon, 4 Feb 2013 13:02:25 +0000 (14:02 +0100)]
Be smarter when figuring out broadcast address
In most cases, broadcast is set when IP is set, but sometimes
it can be ommitted. In those cases we should figure it out based
on CIDR, and not assume it.
The patch set adds 2 new functions:
1. register_root_helper - this enables all wanting to use
the root_helper variable. This is under the section AGENT.
2. get_root_helper - this is a helper function that returns the
root_helper. This should be used when the application used to
have the root_helper defined under the section DEFAULT. This
ensures backward compatability.
This change allows to reset session persistence, if it
was configured for a VIP. It's possible by passing None
value for session persistence through the REST API.
This patch implement rpc in ryu-agent, instead of accessing a
database directly.
Because it was not necessary to transmit information via database,
therefore the table is eliminated.
Also, I remove openflow controller stuff from a configuration file
of the Ryu plugin because it was not used anymore.
Aaron Rosen [Fri, 25 Jan 2013 19:30:18 +0000 (11:30 -0800)]
Make get_security_groups() return security group rules
In nova, get_security_groups() returns the security groups and their
security group rules. In order to implement the security group proxy
it needs to return this data to nova. This can be done using multiple
requests from nova-api to quantum i.e: get_security_groups(), then
get_security_group() for each group to obtain the rules. If one has a lot
of security groups this will generate a lot of requests. Adding this change
allows all the security groups and their rules to be returned in one shot.
OVSInterfaceDriver plug() creates a veth pair and add it to an OVS
bridge when ovs_use_veth=True. It is useful that OVS cleanup utility
removes such veth paris in addition to removing OVS ports.
Veth pairs to be removed are veth devices corresponding to ports
removed when all_ovs_port==False. Veth pairs created to connect
the integration bridge and physical bridges are not removed.
Paul Michali [Thu, 24 Jan 2013 13:13:18 +0000 (08:13 -0500)]
Reqd. core_plugin for plugin agents & show cfg opts loaded.
For the linuxbridge, openvswitch, nec, and ryu plugin agents,
require the core_plugin configuration option, and throw an
exception, if not present. Note: cannot make this a required
option for all agents, as there are agent that include the
core config options, but do not require core_plugin.
In addition, log (as debug) the configuration options that
have been loaded at start-up for these four agents. This will
help with diagnosing start-up issues related to the
configuraiton settings (or lack of).
Tested that exception thrown, when missing core_plugin
value in config file(s) included, for these four agents.
Fix InvalidContentType can't be raised because of error in constructor
InvalidContentType exception class is defined two times:
in quantum.openstack.common.exception and quantum.common.exceptions
with two different signatures.
A lot of code like wsgi.Serializer.serialize() imports one of them but
attempts to use it with the signature of another one, which ends with
TypeError exception.
This change fixes the bug by removing the second definition of
InvalidContentType class and leaving only one which works correctly
with all code. Also adds unit tests for exceptions to prevent this and similar bugs.
In addition to this the code does the following:
1. validates if the port exists on the OVS when a port update event takes
place
2. when a port is created the initial state is set as 'DOWN'. this is
later updated by the agent when it is detected as up
Code Review / openstack-build / neutron-build.git / log