| 2017-01-31 16:32:12 |
Boden R |
bug |
|
|
added bug |
| 2017-01-31 16:36:20 |
Alexandra Settle |
tags |
|
networking-guide |
|
| 2017-01-31 16:36:33 |
Alexandra Settle |
openstack-manuals: importance |
Undecided |
Low |
|
| 2017-01-31 16:36:43 |
Alexandra Settle |
bug |
|
|
added subscriber John Davidge |
| 2017-01-31 16:37:04 |
Boden R |
description |
This bug was generated after further inspecting [1].
IIUC based on [1], L2 agents with mixed securitygroup firewall drivers are now supported and can be achieved by setting the firewall_driver on each agent::
[securitygroup]
firewall_driver = driver_for_agent
This is then reported and used by neutron server (IIUC the server firewall_driver will be used if the agent doesn't report its driver for backwards compat).
The mix approach appears to be reflected in the deploy OVS providers section of the networking guide (ex [2]).
However when following/viewing the config ref for the L2 agents [3], the [securitygroups] section isn't even mentioned. For example [4]. I do see security groups documented in [5], but as a deployer/admin it's not clear how I associate [4] with the L2 agent configs [3].
Is there someway we can make it more clear that [5] is applicable to the L2 agents?
[1] https://bugs.launchpad.net/neutron/+bug/1607724
[2] http://docs.openstack.org/newton/networking-guide/deploy-ovs-provider.html
[3] http://docs.openstack.org/newton/networking-guide/config-ml2.html#agents
[4] http://docs.openstack.org/newton/config-reference/networking/networking_options_reference.html#open-vswitch-agent-configuration-options
[5] http://docs.openstack.org/newton/config-reference/networking/networking_options_reference.html#security-groups |
This bug was generated after further inspecting [1].
IIUC based on [1], L2 agents with mixed securitygroup firewall drivers are now supported and can be achieved by setting the firewall_driver on each agent::
[securitygroup]
firewall_driver = driver_for_agent
This is then reported and used by neutron server (IIUC the server firewall_driver will be used if the agent doesn't report its driver for backwards compat).
The mix approach appears to be reflected in the deploy OVS providers section of the networking guide (ex [2]).
However when following/viewing the config ref for the L2 agents [3], the [securitygroups] section isn't even mentioned. For example [4]. I do see security groups documented in [5], but as a deployer/admin it's not clear how I associate [5] with the L2 agent configs [3].
Is there someway we can make it more clear that [5] is applicable to the L2 agents?
[1] https://bugs.launchpad.net/neutron/+bug/1607724
[2] http://docs.openstack.org/newton/networking-guide/deploy-ovs-provider.html
[3] http://docs.openstack.org/newton/networking-guide/config-ml2.html#agents
[4] http://docs.openstack.org/newton/config-reference/networking/networking_options_reference.html#open-vswitch-agent-configuration-options
[5] http://docs.openstack.org/newton/config-reference/networking/networking_options_reference.html#security-groups |
|
| 2017-02-01 16:44:09 |
John Davidge |
tags |
networking-guide |
config-reference networking-guide |
|
| 2017-02-01 17:09:41 |
John Davidge |
openstack-manuals: status |
New |
Confirmed |
|
| 2017-04-21 16:25:06 |
OpenStack Infra |
openstack-manuals: status |
Confirmed |
In Progress |
|
| 2017-04-21 16:25:06 |
OpenStack Infra |
openstack-manuals: assignee |
|
Thomas Maddox (thomas-maddox) |
|
| 2017-05-18 13:48:23 |
Alexandra Settle |
openstack-manuals: assignee |
Thomas Maddox (thomas-maddox) |
|
|
| 2017-05-22 10:59:06 |
Alexandra Settle |
openstack-manuals: assignee |
|
Alexandra Settle (alexandra-settle) |
|
| 2017-05-22 11:05:01 |
Alexandra Settle |
openstack-manuals: assignee |
Alexandra Settle (alexandra-settle) |
|
|
| 2017-09-12 22:04:32 |
Alexandra Settle |
bug task added |
|
neutron |
|
| 2017-09-12 22:04:43 |
Alexandra Settle |
neutron: status |
New |
Confirmed |
|
| 2017-09-12 22:04:46 |
Alexandra Settle |
openstack-manuals: status |
In Progress |
Won't Fix |
|
