OpenDaylight OVS class needs to add SSL certificates to every ODL

[Tim Rozet]

In HA mode, we were trying to use an MD-SAL based trust store to add OVS certificates to. However this is currently unsupported with OpenFlow Plugin and does not work correctly with OVSDB. Therefore we need to stick with file based trust store. In that case, every ODL needs the certificate added to it.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/564353

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/564353
Committed: https://git.openstack.org/cgit/openstack/puppet-neutron/commit/?id=7c7a39da8081eaf536050daaa350b6fb2606be12
Submitter: Zuul
Branch: master

commit 7c7a39da8081eaf536050daaa350b6fb2606be12
Author: Tim Rozet <email address hidden>
Date: Wed Apr 25 18:03:33 2018 -0400

    Fixes ODL OVS to add certs to every node

    Certificates were only being added to the VIP, which means only one node
    would get the add certificate request. This would work if there was a
    highly available trust store, however MD-SAL lacks support in OpenFlow
    Plugin and therefore we have to use a file based trust store. Since we
    are using a file based trust store, the certificate needs to be pushed
    to every OpenDaylight node.

    Also includes minor fix where tcp was only being force-modified to ssl
    for the first ODL OVSDB URI.

    Closes-Bug: 1766989

    Change-Id: Ifd8401e2facdad07ccda4ec6f885a82bc0a16421
    Signed-off-by: Tim Rozet <email address hidden>

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/565281

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/565281
Committed: https://git.openstack.org/cgit/openstack/puppet-neutron/commit/?id=43ce982fda8ef2ec2ae0cb2e17b5610b1ca77c97
Submitter: Zuul
Branch: stable/queens

commit 43ce982fda8ef2ec2ae0cb2e17b5610b1ca77c97
Author: Tim Rozet <email address hidden>
Date: Wed Apr 25 18:03:33 2018 -0400

    Fixes ODL OVS to add certs to every node

    Certificates were only being added to the VIP, which means only one node
    would get the add certificate request. This would work if there was a
    highly available trust store, however MD-SAL lacks support in OpenFlow
    Plugin and therefore we have to use a file based trust store. Since we
    are using a file based trust store, the certificate needs to be pushed
    to every OpenDaylight node.

    Also includes minor fix where tcp was only being force-modified to ssl
    for the first ODL OVSDB URI.

    Closes-Bug: 1766989

    Change-Id: Ifd8401e2facdad07ccda4ec6f885a82bc0a16421
    Signed-off-by: Tim Rozet <email address hidden>
    (cherry picked from commit 7c7a39da8081eaf536050daaa350b6fb2606be12)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/puppet-neutron 13.1.0 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/puppet-neutron 12.4.1 release.