[apic-mapping] ACI L3 out support for ASR router

[Kent Wu]

Things we need to do:

1. we need to flesh out the shadow L3 out for each ACI VRF
2. each shadow L3 out will need its own vlan ID as ASR needs to know which VRF the traffic is coming from
3. we still need to support both the pre-existing and non pre-existing mode in the config file.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/282011
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=42e8f6a695d8417bcef9d8cab79ec8854748a934
Submitter: Jenkins
Branch: master

commit 42e8f6a695d8417bcef9d8cab79ec8854748a934
Author: Kent Wu <email address hidden>
Date: Thu Feb 18 10:39:01 2016 -0800

    [apic_mapping] NAT support for ASR router

    1. flesh out the shadow L3 out for each VRF.
    2. The shadow L3 out for each VRF will require its own vlan ID.
    3. check the asr vlan range setting in create_external_segment_precommit().
    4. add test cases for the above.
    5. no pre-existing mode support yet.

    Change-Id: I43caeac443921dd03f2e54c01e0e5afff41f1d86
    Closes-Bug: 1547723

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/283845

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/283881

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/283845
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=f2580216050504f333d77580878b715252ab6324
Submitter: Jenkins
Branch: stable/liberty

commit f2580216050504f333d77580878b715252ab6324
Author: Kent Wu <email address hidden>
Date: Thu Feb 18 10:39:01 2016 -0800

    [apic_mapping] NAT support for ASR router

    1. flesh out the shadow L3 out for each VRF.
    2. The shadow L3 out for each VRF will require its own vlan ID.
    3. check the asr vlan range setting in create_external_segment_precommit().
    4. add test cases for the above.
    5. no pre-existing mode support yet.

    Change-Id: I43caeac443921dd03f2e54c01e0e5afff41f1d86
    Closes-Bug: 1547723
    (cherry picked from commit 42e8f6a695d8417bcef9d8cab79ec8854748a934)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/283881
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=5a66ee04dd57a849c957b949aeb2890173a99598
Submitter: Jenkins
Branch: stable/kilo

commit 5a66ee04dd57a849c957b949aeb2890173a99598
Author: Kent Wu <email address hidden>
Date: Thu Feb 18 10:39:01 2016 -0800

    [apic_mapping] NAT support for ASR router

    1. flesh out the shadow L3 out for each VRF.
    2. The shadow L3 out for each VRF will require its own vlan ID.
    3. check the asr vlan range setting in create_external_segment_precommit().
    4. add test cases for the above.
    5. no pre-existing mode support yet.

    Change-Id: I43caeac443921dd03f2e54c01e0e5afff41f1d86
    Closes-Bug: 1547723
    (cherry picked from commit 42e8f6a695d8417bcef9d8cab79ec8854748a934)
    (cherry picked from commit f2580216050504f333d77580878b715252ab6324)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/299118

[OpenStack Infra (hudson-openstack)]

Change abandoned by Kent Wu (<email address hidden>) on branch: master
Review: https://review.openstack.org/299118
Reason: noticed that I wasn't following the right workflow to create this patch. Will re-sumit.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/300244

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/300244
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=c4c240cd52e7a192397c71e8de81749adbabbbad
Submitter: Jenkins
Branch: master

commit c4c240cd52e7a192397c71e8de81749adbabbbad
Author: Kent Wu <email address hidden>
Date: Thu Mar 31 15:37:27 2016 -0700

    [apic_mapping] preexisting mode support for ASR L3out
    1. query preexisting L3out in APIC then clone it to the right tenant
    2. trim those admin-only attributes; replace VRF, L3out name and
    encap before sending it to APIC as a request.
    3. add test cases for the above.

    This is the inital checkin, some TODO list:
    1. put those admin-only attributes into config items. This needs to
    be done in apicapi first.
    2. enhance the error-checking:
       a. in the ASR mode, only routed-subinterface will work in a L3out.
    Throw an exception if the preexisting L3out doesn't have
    routed-subinterfaces then.
       b. In OSPF/BFD interface profile, we can only support no
    authentication as those keys won't be returned while querying APIC.
    Maybe throw an exception also when its some other auth mode?

    Change-Id: I37ba6954641afab60bfcf9219ed0dc4c7e78fee3
    Closes-Bug: 1547723

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/303721

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/303725

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/303721
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=04ba5f36ee660f8bbb79046fb14ebc0fd4dc5a23
Submitter: Jenkins
Branch: stable/liberty

commit 04ba5f36ee660f8bbb79046fb14ebc0fd4dc5a23
Author: Kent Wu <email address hidden>
Date: Thu Mar 31 15:37:27 2016 -0700

    [apic_mapping]preexisting support for ASR L3out

    1. query preexisting L3out in APIC then clone it to the right tenant
    2. trim those admin-only attributes; replace VRF, L3out name and
    encap before sending it to APIC as a request.
    3. add test cases for the above.

    This is the inital checkin, some TODO list:
    1. put those admin-only attributes into config items. This needs to
    be done in apicapi first.
    2. enhance the error-checking:
       a. in the ASR mode, only routed-subinterface will work in a L3out.
    Throw an exception if the preexisting L3out doesn't have
    routed-subinterfaces then.
       b. In OSPF/BFD interface profile, we can only support no
    authentication as those keys won't be returned while querying APIC.
    Maybe throw an exception also when its some other auth mode?

    Change-Id: I37ba6954641afab60bfcf9219ed0dc4c7e78fee3
    Closes-Bug: 1547723
    (cherry picked from commit c4c240cd52e7a192397c71e8de81749adbabbbad)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/303725
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=7e9b41e33646f15ad847899181832a58c5624d64
Submitter: Jenkins
Branch: stable/kilo

commit 7e9b41e33646f15ad847899181832a58c5624d64
Author: Kent Wu <email address hidden>
Date: Thu Mar 31 15:37:27 2016 -0700

    [apic_mapping]preexisting support for ASR L3out

    1. query preexisting L3out in APIC then clone it to the right tenant
    2. trim those admin-only attributes; replace VRF, L3out name and
    encap before sending it to APIC as a request.
    3. add test cases for the above.

    This is the inital checkin, some TODO list:
    1. put those admin-only attributes into config items. This needs to
    be done in apicapi first.
    2. enhance the error-checking:
       a. in the ASR mode, only routed-subinterface will work in a L3out.
    Throw an exception if the preexisting L3out doesn't have
    routed-subinterfaces then.
       b. In OSPF/BFD interface profile, we can only support no
    authentication as those keys won't be returned while querying APIC.
    Maybe throw an exception also when its some other auth mode?

    Change-Id: I37ba6954641afab60bfcf9219ed0dc4c7e78fee3
    Closes-Bug: 1547723
    (cherry picked from commit c4c240cd52e7a192397c71e8de81749adbabbbad)
    (cherry picked from commit d70fc28cda618743e023368e7a7fb3a568c9e0e0)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/304906
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=6fa1b0622897f540bb7faa3b3044305e374efc77
Submitter: Jenkins
Branch: master

commit 6fa1b0622897f540bb7faa3b3044305e374efc77
Author: Kent Wu <email address hidden>
Date: Tue Apr 12 16:39:39 2016 -0700

    [apic_mapping] preexisting support for ASR L3out

    1. added the error checkings while creating external segment.
    2. added UTs for the above.

    Change-Id: Ia2bff93b66f81c6820c3b41bc875f65c3b70c18d
    Partial-Bug: 1547723

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/306543

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/306547

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/306543
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=6eb389c4a8f6f452c8b61a79561af7656edb8d4c
Submitter: Jenkins
Branch: stable/liberty

commit 6eb389c4a8f6f452c8b61a79561af7656edb8d4c
Author: Kent Wu <email address hidden>
Date: Tue Apr 12 16:39:39 2016 -0700

    [apic_mapping] preexisting support for ASR L3out

    1. added the error checkings while creating external segment.
    2. added UTs for the above.

    Change-Id: Ia2bff93b66f81c6820c3b41bc875f65c3b70c18d
    Partial-Bug: 1547723
    (cherry picked from commit 6fa1b0622897f540bb7faa3b3044305e374efc77)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/306547
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=ecb494b9a0c8848b8d7f4a8a973705a37732d92a
Submitter: Jenkins
Branch: stable/kilo

commit ecb494b9a0c8848b8d7f4a8a973705a37732d92a
Author: Kent Wu <email address hidden>
Date: Tue Apr 12 16:39:39 2016 -0700

    [apic_mapping] preexisting support for ASR L3out

    1. added the error checkings while creating external segment.
    2. added UTs for the above.

    Change-Id: Ia2bff93b66f81c6820c3b41bc875f65c3b70c18d
    Partial-Bug: 1547723
    (cherry picked from commit 6fa1b0622897f540bb7faa3b3044305e374efc77)
    (cherry picked from commit 6eb389c4a8f6f452c8b61a79561af7656edb8d4c)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/307517

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/307517
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=cdfa14e189d2d30735b4129503a19c03eafef7cc
Submitter: Jenkins
Branch: master

commit cdfa14e189d2d30735b4129503a19c03eafef7cc
Author: Kent Wu <email address hidden>
Date: Mon Apr 18 16:19:54 2016 -0700

    [apic_mapping] some naming changes

    1. replace router_type=asr with edge_nat=true as we will need this mode for other types of
    routers too.
    2. when edge_nat=true, replace Shd-<L3 out name> with Auto-<L3 out name> as this l3 out will
    also have node/IF profiles created.
    3. these 2 naming changes were requested by Mandeep.
    4. also use "none" while checking the BGP authentication. This way if in the future they add
    support to other new types of authentications then the code will still work.

    Change-Id: I469073ad3c03cfa1f6c0bb93d452a72236eabb73
    Partial-Bug: 1547723

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/308043

[OpenStack Infra (hudson-openstack)]

Change abandoned by Kent Wu (<email address hidden>) on branch: stable/liberty
Review: https://review.openstack.org/308043

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/308046

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/308043
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=a3d5e2329050802f4a677c9940027db02f68a0b0
Submitter: Jenkins
Branch: stable/liberty

commit a3d5e2329050802f4a677c9940027db02f68a0b0
Author: Kent Wu <email address hidden>
Date: Mon Apr 18 16:19:54 2016 -0700

    [apic_mapping] some naming changes

    1. replace router_type=asr with edge_nat=true as we will need this mode for other types of
    routers too.
    2. when edge_nat=true, replace Shd-<L3 out name> with Auto-<L3 out name> as this l3 out will
    also have node/IF profiles created.
    3. these 2 naming changes were requested by Mandeep.
    4. also use "none" while checking the BGP authentication. This way if in the future they add
    support to other new types of authentications then the code will still work.

    Change-Id: I469073ad3c03cfa1f6c0bb93d452a72236eabb73
    Partial-Bug: 1547723
    (cherry picked from commit cdfa14e189d2d30735b4129503a19c03eafef7cc)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/308046
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=e4eca94c01842cd7e6bcfe8771bf66d1daff3c8d
Submitter: Jenkins
Branch: stable/kilo

commit e4eca94c01842cd7e6bcfe8771bf66d1daff3c8d
Author: Kent Wu <email address hidden>
Date: Mon Apr 18 16:19:54 2016 -0700

    [apic_mapping] some naming changes

    1. replace router_type=asr with edge_nat=true as we will need this mode for other types of
    routers too.
    2. when edge_nat=true, replace Shd-<L3 out name> with Auto-<L3 out name> as this l3 out will
    also have node/IF profiles created.
    3. these 2 naming changes were requested by Mandeep.
    4. also use "none" while checking the BGP authentication. This way if in the future they add
    support to other new types of authentications then the code will still work.

    Change-Id: I469073ad3c03cfa1f6c0bb93d452a72236eabb73
    Partial-Bug: 1547723
    (cherry picked from commit cdfa14e189d2d30735b4129503a19c03eafef7cc)
    (cherry picked from commit a3d5e2329050802f4a677c9940027db02f68a0b0)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/308623

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/314394

[OpenStack Infra (hudson-openstack)]

Change abandoned by Kent Wu (<email address hidden>) on branch: master
Review: https://review.openstack.org/308623
Reason: abandon this one for now as those options should not be exposed to the users per the conversation with Amit.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/314394
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=e5cfc78600079c262c547d33f1297094b7797fb9
Submitter: Jenkins
Branch: master

commit e5cfc78600079c262c547d33f1297094b7797fb9
Author: Kent Wu <email address hidden>
Date: Mon May 9 18:39:37 2016 -0700

    [apic_mapping] make the naming changes consistent

    1. when edge_nat=true, replace Shd-<L3 out name> with Auto-<L3 out name> and
    do it in a central location as last attempt missed some cases.
    2. this will also replace Shd-<external_epg> with Auto-<external_epg>.
    3. fixed an obvious logic error.

    Change-Id: I8ad72566a03fe81dfcf71cef590a99c01dbd710a
    Partial-Bug: 1547723

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/315215

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/315217

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/315219

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/315215
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=43a2b1ce08b1159231641d4c8af7232b53f8da0d
Submitter: Jenkins
Branch: stable/mitaka

commit 43a2b1ce08b1159231641d4c8af7232b53f8da0d
Author: Kent Wu <email address hidden>
Date: Mon May 9 18:39:37 2016 -0700

    [apic_mapping] make the naming changes consistent

    1. when edge_nat=true, replace Shd-<L3 out name> with Auto-<L3 out name> and
    do it in a central location as last attempt missed some cases.
    2. this will also replace Shd-<external_epg> with Auto-<external_epg>.
    3. fixed an obvious logic error.

    Change-Id: I8ad72566a03fe81dfcf71cef590a99c01dbd710a
    Partial-Bug: 1547723
    (cherry picked from commit e5cfc78600079c262c547d33f1297094b7797fb9)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/315217
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=5046dc0d0067c82029a94011a999c2b991642bb8
Submitter: Jenkins
Branch: stable/liberty

commit 5046dc0d0067c82029a94011a999c2b991642bb8
Author: Kent Wu <email address hidden>
Date: Mon May 9 18:39:37 2016 -0700

    [apic_mapping] make the naming changes consistent

    1. when edge_nat=true, replace Shd-<L3 out name> with Auto-<L3 out name> and
    do it in a central location as last attempt missed some cases.
    2. this will also replace Shd-<external_epg> with Auto-<external_epg>.
    3. fixed an obvious logic error.

    Change-Id: I8ad72566a03fe81dfcf71cef590a99c01dbd710a
    Partial-Bug: 1547723
    (cherry picked from commit e5cfc78600079c262c547d33f1297094b7797fb9)
    (cherry picked from commit 43a2b1ce08b1159231641d4c8af7232b53f8da0d)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/315219
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=09f833e2a261546a0b56b42c9d8d4aa22148165c
Submitter: Jenkins
Branch: stable/kilo

commit 09f833e2a261546a0b56b42c9d8d4aa22148165c
Author: Kent Wu <email address hidden>
Date: Mon May 9 18:39:37 2016 -0700

    [apic_mapping] make the naming changes consistent

    1. when edge_nat=true, replace Shd-<L3 out name> with Auto-<L3 out name> and
    do it in a central location as last attempt missed some cases.
    2. this will also replace Shd-<external_epg> with Auto-<external_epg>.
    3. fixed an obvious logic error.

    Change-Id: I8ad72566a03fe81dfcf71cef590a99c01dbd710a
    Partial-Bug: 1547723
    (cherry picked from commit e5cfc78600079c262c547d33f1297094b7797fb9)
    (cherry picked from commit 43a2b1ce08b1159231641d4c8af7232b53f8da0d)
    (cherry picked from commit 5046dc0d0067c82029a94011a999c2b991642bb8)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/316321

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/317770

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/316321
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=42c32191237af053728f71fc673dbad9dc5ca7f7
Submitter: Jenkins
Branch: master

commit 42c32191237af053728f71fc673dbad9dc5ca7f7
Author: Kent Wu <email address hidden>
Date: Fri May 13 17:12:32 2016 -0700

    [apic_mapping] handle the ES routes update for edge_nat

    1. when edge_nat=true and not preexisting, we also need to update the
    static routes on the Auto-<L3out> along with the real l3out for the
    ES routes update event.
    2. added test cases for this also.

    Change-Id: I26597f08bb557379e9acb592cf4123fd27e884c3
    Partial-Bug: 1547723

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/317776

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/317778

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/317770
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=0040ce3c6f8b8601bfd813a8908b4028c42a048a
Submitter: Jenkins
Branch: stable/mitaka

commit 0040ce3c6f8b8601bfd813a8908b4028c42a048a
Author: Kent Wu <email address hidden>
Date: Fri May 13 17:12:32 2016 -0700

    [apic_mapping] handle the ES routes update for edge_nat

    1. when edge_nat=true and not preexisting, we also need to update the
    static routes on the Auto-<L3out> along with the real l3out for the
    ES routes update event.
    2. added test cases for this also.

    Change-Id: I26597f08bb557379e9acb592cf4123fd27e884c3
    Partial-Bug: 1547723
    (cherry picked from commit 42c32191237af053728f71fc673dbad9dc5ca7f7)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/317776
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=ffadf8e8c7146d6db7226c1af3c23323ef5d037c
Submitter: Jenkins
Branch: stable/liberty

commit ffadf8e8c7146d6db7226c1af3c23323ef5d037c
Author: Kent Wu <email address hidden>
Date: Fri May 13 17:12:32 2016 -0700

    [apic_mapping] handle the ES routes update for edge_nat

    1. when edge_nat=true and not preexisting, we also need to update the
    static routes on the Auto-<L3out> along with the real l3out for the
    ES routes update event.
    2. added test cases for this also.

    Change-Id: I26597f08bb557379e9acb592cf4123fd27e884c3
    Partial-Bug: 1547723
    (cherry picked from commit 42c32191237af053728f71fc673dbad9dc5ca7f7)
    (cherry picked from commit 0040ce3c6f8b8601bfd813a8908b4028c42a048a)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/317778
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=360ac3cce0f2f81fb4b6d3a61685bed2baed7342
Submitter: Jenkins
Branch: stable/kilo

commit 360ac3cce0f2f81fb4b6d3a61685bed2baed7342
Author: Kent Wu <email address hidden>
Date: Fri May 13 17:12:32 2016 -0700

    [apic_mapping] handle the ES routes update for edge_nat

    1. when edge_nat=true and not preexisting, we also need to update the
    static routes on the Auto-<L3out> along with the real l3out for the
    ES routes update event.
    2. added test cases for this also.

    Change-Id: I26597f08bb557379e9acb592cf4123fd27e884c3
    Partial-Bug: 1547723
    (cherry picked from commit 42c32191237af053728f71fc673dbad9dc5ca7f7)
    (cherry picked from commit 0040ce3c6f8b8601bfd813a8908b4028c42a048a)
    (cherry picked from commit ffadf8e8c7146d6db7226c1af3c23323ef5d037c)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/320183

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/320183
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=d8adb9140b12f4e3cc07fb8dfc635f813803c940
Submitter: Jenkins
Branch: master

commit d8adb9140b12f4e3cc07fb8dfc635f813803c940
Author: Kent Wu <email address hidden>
Date: Mon May 23 19:07:20 2016 -0700

    [apic_mapping] dynamic routing support for edge_nat

        1. associate/disassociate the tenant BDs to the Auto-L3out.
        2. added test cases.

        Partial-Bug: 1547723

    Change-Id: I86201a21e685d1176832dd1e364f830a00c8a353

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/321856

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/321857

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/321859

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/321859
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=a3322d3504a60a059f3d88f0140c2a1990f981ce
Submitter: Jenkins
Branch: stable/kilo

commit a3322d3504a60a059f3d88f0140c2a1990f981ce
Author: Kent Wu <email address hidden>
Date: Mon May 23 19:07:20 2016 -0700

    [apic_mapping] dynamic routing support for edge_nat

        1. associate/disassociate the tenant BDs to the Auto-L3out.
        2. added test cases.

        Partial-Bug: 1547723

    Change-Id: I86201a21e685d1176832dd1e364f830a00c8a353
    (cherry picked from commit d8adb9140b12f4e3cc07fb8dfc635f813803c940)
    (cherry picked from commit b4e699da233d87302d65bb4f91b07bee32579fe1)
    (cherry picked from commit 15ab634cd07fa2432d39e5d17281d0c464803ae9)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/321857
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=15ab634cd07fa2432d39e5d17281d0c464803ae9
Submitter: Jenkins
Branch: stable/liberty

commit 15ab634cd07fa2432d39e5d17281d0c464803ae9
Author: Kent Wu <email address hidden>
Date: Mon May 23 19:07:20 2016 -0700

    [apic_mapping] dynamic routing support for edge_nat

        1. associate/disassociate the tenant BDs to the Auto-L3out.
        2. added test cases.

        Partial-Bug: 1547723

    Change-Id: I86201a21e685d1176832dd1e364f830a00c8a353
    (cherry picked from commit d8adb9140b12f4e3cc07fb8dfc635f813803c940)
    (cherry picked from commit b4e699da233d87302d65bb4f91b07bee32579fe1)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/321856
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=b4e699da233d87302d65bb4f91b07bee32579fe1
Submitter: Jenkins
Branch: stable/mitaka

commit b4e699da233d87302d65bb4f91b07bee32579fe1
Author: Kent Wu <email address hidden>
Date: Mon May 23 19:07:20 2016 -0700

    [apic_mapping] dynamic routing support for edge_nat

        1. associate/disassociate the tenant BDs to the Auto-L3out.
        2. added test cases.

        Partial-Bug: 1547723

    Change-Id: I86201a21e685d1176832dd1e364f830a00c8a353
    (cherry picked from commit d8adb9140b12f4e3cc07fb8dfc635f813803c940)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/333040

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/333042

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/333043

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/333040
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=9a22f6334faa81b28db42c431b9b13d71d324cd0
Submitter: Jenkins
Branch: stable/mitaka

commit 9a22f6334faa81b28db42c431b9b13d71d324cd0
Author: Kent Wu <email address hidden>
Date: Wed Jun 22 12:26:37 2016 -0700

    [apic_mapping] Use the tenant name instead of ID while cloning l3out

    Partial-Bug: 1547723

    Change-Id: If9aa892dd6ddf6d2628f450cef0817b3f9e0e209
    (cherry picked from commit 805def1f5831b07fd53c91c880358bdbe5bf6fc2)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/333042
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=9ae4adb98f9704faa7056f8b73852f7ee2da2fda
Submitter: Jenkins
Branch: stable/liberty

commit 9ae4adb98f9704faa7056f8b73852f7ee2da2fda
Author: Kent Wu <email address hidden>
Date: Wed Jun 22 12:26:37 2016 -0700

    [apic_mapping] Use the tenant name instead of ID while cloning l3out

    Partial-Bug: 1547723

    Change-Id: If9aa892dd6ddf6d2628f450cef0817b3f9e0e209
    (cherry picked from commit 805def1f5831b07fd53c91c880358bdbe5bf6fc2)
    (cherry picked from commit 9a22f6334faa81b28db42c431b9b13d71d324cd0)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/333043
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=c526dfd11930f7b1e39766a51c2401c745f22566
Submitter: Jenkins
Branch: stable/kilo

commit c526dfd11930f7b1e39766a51c2401c745f22566
Author: Kent Wu <email address hidden>
Date: Wed Jun 22 12:26:37 2016 -0700

    [apic_mapping] Use the tenant name instead of ID while cloning l3out

    Partial-Bug: 1547723

    Change-Id: If9aa892dd6ddf6d2628f450cef0817b3f9e0e209
    (cherry picked from commit 805def1f5831b07fd53c91c880358bdbe5bf6fc2)
    (cherry picked from commit 9a22f6334faa81b28db42c431b9b13d71d324cd0)
    (cherry picked from commit 9ae4adb98f9704faa7056f8b73852f7ee2da2fda)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/333607

[OpenStack Infra (hudson-openstack)]

Change abandoned by Kent Wu (<email address hidden>) on branch: master
Review: https://review.openstack.org/333607
Reason: abandon this one as there are still fixes required.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/334091

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/334091
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=2b03454b17de88ae2f09c86dcb17f9711c19ebe8
Submitter: Jenkins
Branch: master

commit 2b03454b17de88ae2f09c86dcb17f9711c19ebe8
Author: Kent Wu <email address hidden>
Date: Fri Jun 24 13:57:53 2016 -0700

    [apic_mapping] Fix bugs while setting auto-l3out for BDs

    1. use the tenant of each BD instead.
    2. don't use the transaction to avoid the ApicInvalidTransactionMultipleRoot
    exception under some certain workflow.
    3. added more UTs to cover all the config combinations.

    Change-Id: Ie045fb578e8b355b55d27de4ae2c66e66bd2dbff
    Partial-Bug: 1547723

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/334193

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/334194

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/334193
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=3b027dd1fe3d4fdf86ba3e7db3cde18c93c3880a
Submitter: Jenkins
Branch: stable/mitaka

commit 3b027dd1fe3d4fdf86ba3e7db3cde18c93c3880a
Author: Kent Wu <email address hidden>
Date: Fri Jun 24 13:57:53 2016 -0700

    [apic_mapping] Fix bugs while setting auto-l3out for BDs

    1. use the tenant of each BD instead.
    2. don't use the transaction to avoid the ApicInvalidTransactionMultipleRoot
    exception under some certain workflow.
    3. added more UTs to cover all the config combinations.

    Change-Id: Ie045fb578e8b355b55d27de4ae2c66e66bd2dbff
    Partial-Bug: 1547723
    (cherry picked from commit 2b03454b17de88ae2f09c86dcb17f9711c19ebe8)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/334194
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=0013cfeb2b6dc1b7f965b81c5fc901eee8d2b9de
Submitter: Jenkins
Branch: stable/liberty

commit 0013cfeb2b6dc1b7f965b81c5fc901eee8d2b9de
Author: Kent Wu <email address hidden>
Date: Fri Jun 24 13:57:53 2016 -0700

    [apic_mapping] Fix bugs while setting auto-l3out for BDs

    1. use the tenant of each BD instead.
    2. don't use the transaction to avoid the ApicInvalidTransactionMultipleRoot
    exception under some certain workflow.
    3. added more UTs to cover all the config combinations.

    Change-Id: Ie045fb578e8b355b55d27de4ae2c66e66bd2dbff
    Partial-Bug: 1547723
    (cherry picked from commit 2b03454b17de88ae2f09c86dcb17f9711c19ebe8)
    (cherry picked from commit 3b027dd1fe3d4fdf86ba3e7db3cde18c93c3880a)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/334621

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/334621
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=07ba9c23b9930d6d65367650231a6794ea8f30e3
Submitter: Jenkins
Branch: stable/kilo

commit 07ba9c23b9930d6d65367650231a6794ea8f30e3
Author: Kent Wu <email address hidden>
Date: Fri Jun 24 13:57:53 2016 -0700

    [apic_mapping] Fix bugs while setting auto-l3out for BDs

    1. use the tenant of each BD instead.
    2. don't use the transaction to avoid the ApicInvalidTransactionMultipleRoot
    exception under some certain workflow.
    3. added more UTs to cover all the config combinations.

    Change-Id: Ie045fb578e8b355b55d27de4ae2c66e66bd2dbff
    Partial-Bug: 1547723
    (cherry picked from commit 2b03454b17de88ae2f09c86dcb17f9711c19ebe8)
    (cherry picked from commit 3b027dd1fe3d4fdf86ba3e7db3cde18c93c3880a)
    (cherry picked from commit 0013cfeb2b6dc1b7f965b81c5fc901eee8d2b9de)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/339759

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/339857

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/339759
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=5cd08377899f3cb898efe5a30300021542c5dae1
Submitter: Jenkins
Branch: master

commit 5cd08377899f3cb898efe5a30300021542c5dae1
Author: Kent Wu <email address hidden>
Date: Fri Jul 8 11:06:42 2016 -0700

    [apic_mapping] Don't create NatEPG/NatBD when EdgeNat is on

    1. also don't update the subnet of the NatBD.
    2. added corresponding UTs.

    Change-Id: I9fe911e423fea6c34847d19f341d98b18313ac88
    Partial-Bug: 1547723

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/339858

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/339859

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/339857
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=05555818171901d306827fe91e8ffb42d9db6107
Submitter: Jenkins
Branch: stable/mitaka

commit 05555818171901d306827fe91e8ffb42d9db6107
Author: Kent Wu <email address hidden>
Date: Fri Jul 8 11:06:42 2016 -0700

    [apic_mapping] Don't create NatEPG/NatBD when EdgeNat is on

    1. also don't update the subnet of the NatBD.
    2. added corresponding UTs.

    Change-Id: I9fe911e423fea6c34847d19f341d98b18313ac88
    Partial-Bug: 1547723
    (cherry picked from commit 5cd08377899f3cb898efe5a30300021542c5dae1)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/339858
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=b6ee6fd45588cef966ca61fce2c62597dbafe22d
Submitter: Jenkins
Branch: stable/liberty

commit b6ee6fd45588cef966ca61fce2c62597dbafe22d
Author: Kent Wu <email address hidden>
Date: Fri Jul 8 11:06:42 2016 -0700

    [apic_mapping] Don't create NatEPG/NatBD when EdgeNat is on

    1. also don't update the subnet of the NatBD.
    2. added corresponding UTs.

    Change-Id: I9fe911e423fea6c34847d19f341d98b18313ac88
    Partial-Bug: 1547723
    (cherry picked from commit 5cd08377899f3cb898efe5a30300021542c5dae1)
    (cherry picked from commit 05555818171901d306827fe91e8ffb42d9db6107)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/339859
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=ea9cf9beb6e96ad1ce9331a2632b54a24ed62683
Submitter: Jenkins
Branch: stable/kilo

commit ea9cf9beb6e96ad1ce9331a2632b54a24ed62683
Author: Kent Wu <email address hidden>
Date: Fri Jul 8 11:06:42 2016 -0700

    [apic_mapping] Don't create NatEPG/NatBD when EdgeNat is on

    1. also don't update the subnet of the NatBD.
    2. added corresponding UTs.

    Change-Id: I9fe911e423fea6c34847d19f341d98b18313ac88
    Partial-Bug: 1547723
    (cherry picked from commit 5cd08377899f3cb898efe5a30300021542c5dae1)
    (cherry picked from commit 05555818171901d306827fe91e8ffb42d9db6107)
    (cherry picked from commit b6ee6fd45588cef966ca61fce2c62597dbafe22d)

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/417544

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/417544
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=dcbc2dc77951a3e4a6a32ae41f62421537fae80d
Submitter: Jenkins
Branch: master

commit dcbc2dc77951a3e4a6a32ae41f62421537fae80d
Author: Kent Wu <email address hidden>
Date: Fri Jan 6 15:44:57 2017 -0800

    [apic-mapping] Call the mapper properly to get the right PTG name

    This is to make sure we can get the PTG name stored in the mapper DB
    while doing the bind_dvs_port(). Otherwise when the PTG name is
    chagned on openStack side, we will use the new PTG name which is
    wrong as APIC and vCenter are still using the old name.

    Partial-bug: 1547723
    Change-Id: Iec7f614e5d84c1d51d7ad7eff6bf6d89eb362fbc

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/418062

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/liberty
Review: https://review.openstack.org/418064

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/418062
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=dbfd0acc525757face69bab0137aead5482ffb89
Submitter: Jenkins
Branch: stable/mitaka

commit dbfd0acc525757face69bab0137aead5482ffb89
Author: Kent Wu <email address hidden>
Date: Fri Jan 6 15:44:57 2017 -0800

    [apic-mapping] Call the mapper properly to get the right PTG name

    This is to make sure we can get the PTG name stored in the mapper DB
    while doing the bind_dvs_port(). Otherwise when the PTG name is
    chagned on openStack side, we will use the new PTG name which is
    wrong as APIC and vCenter are still using the old name.

    Partial-bug: 1547723
    Change-Id: Iec7f614e5d84c1d51d7ad7eff6bf6d89eb362fbc
    (cherry picked from commit dcbc2dc77951a3e4a6a32ae41f62421537fae80d)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/418064
Committed: https://git.openstack.org/cgit/openstack/group-based-policy/commit/?id=82170af6591e47a2369f4e66a5ace72034a6691d
Submitter: Jenkins
Branch: stable/liberty

commit 82170af6591e47a2369f4e66a5ace72034a6691d
Author: Kent Wu <email address hidden>
Date: Fri Jan 6 15:44:57 2017 -0800

    [apic-mapping] Call the mapper properly to get the right PTG name

    This is to make sure we can get the PTG name stored in the mapper DB
    while doing the bind_dvs_port(). Otherwise when the PTG name is
    chagned on openStack side, we will use the new PTG name which is
    wrong as APIC and vCenter are still using the old name.

    Partial-bug: 1547723
    Change-Id: Iec7f614e5d84c1d51d7ad7eff6bf6d89eb362fbc
    (cherry picked from commit dcbc2dc77951a3e4a6a32ae41f62421537fae80d)
    (cherry picked from commit dbfd0acc525757face69bab0137aead5482ffb89)