x/packstack
Code Issues Proposed changes

Switch to supported firewall v2 driver

Browse Source 
Firewall v1 driver was deprecated long ago and
is now removed in [1], let's switch to firewall v2
driver.

[1] https://review.openstack.org/#/c/616410/

Change-Id: Ic995a392075133dd1fba9e417e07149dc1cb4863
This commit is contained in:
yatin 2019-02-05 12:28:57 +05:30
parent 5847b42828
commit feb1f62540
3 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
packstack/plugins/neutron_350.py
View File

@ -757,9 +757,9 @@ def create_manifests(config, messages):
service_plugins.append('metering')
if config['CONFIG_NEUTRON_FWAAS'] == 'y':
service_plugins.append('firewall')
fwaas_sp = ('FIREWALL:Iptables:neutron.agent.linux.iptables_firewall.'
'OVSHybridIptablesFirewallDriver:default')
service_plugins.append('firewall_v2')
fwaas_sp = ('FIREWALL_V2:fwaas_db:neutron_fwaas.services.firewall.'
'service_drivers.agents.agents.FirewallAgentDriver:default')
service_providers.append(fwaas_sp)
if config['CONFIG_NEUTRON_VPNAAS'] == 'y':

4
packstack/puppet/modules/packstack/manifests/neutron/fwaas.pp
View File

@ -2,7 +2,7 @@ class packstack::neutron::fwaas ()
{
class { '::neutron::services::fwaas':
enabled => true,
agent_version => 'v1',
driver => 'neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver',
agent_version => 'v2',
driver => 'neutron_fwaas.services.firewall.service_drivers.agents.drivers.linux.iptables_fwaas_v2.IptablesFwaasDriver',
}
}

2
packstack/puppet/modules/packstack/manifests/neutron/l3.pp
View File

@ -7,7 +7,7 @@ class packstack::neutron::l3 ()
$neutron_fwaas_enabled = str2bool(hiera('CONFIG_NEUTRON_FWAAS'))
if $neutron_fwaas_enabled {
$extensions = 'fwaas'
$extensions = 'fwaas_v2'
} else {
$extensions = undef
}