Debian

Available patches from Ubuntu

To see Ubuntu differences wrt. to Debian, write down a grep-dctrl query identifying the packages you're interested in:
grep-dctrl -n -sPackage Sources.Debian
(e.g. -FPackage linux-ntfs or linux-ntfs)

Modified packages are listed below:

Debian ( Changelog | PTS | Bugs ) Ubuntu ( Changelog | txt | LP | Bugs ) | Diff from Ubuntu

Source: vmware-nsx

vmware-nsx (12.0.1-0ubuntu1) bionic; urgency=medium * New upstream point release for OpenStack Queens. -- Corey Bryant <corey.bryant@canonical.com> Wed, 28 Feb 2018 15:52:53 -0500 vmware-nsx (12.0.0~git20180220.b0ae24dd-0ubuntu1) bionic; urgency=medium * New upstream release for OpenStack Queens. * d/*: wrap-and-sort -bast. * d/control: Update Standards-Version to 4.1.2. * d/control: Bump debhelper compat to 10. * d/control: Align (Build-)Depends with upstream. * New upstream snapshot for OpenStack Queens. * d/control: Align (Build-)Depends with upstream. -- Corey Bryant <corey.bryant@canonical.com> Tue, 20 Feb 2018 21:19:09 -0500 vmware-nsx (11.0.0~git20170831.ebc495190-0ubuntu1) artful; urgency=medium * New upstream snapshot for OpenStack Pike. * d/python-vmware-nsx.install: Correct install source for policy files. -- James Page <james.page@ubuntu.com> Thu, 31 Aug 2017 09:29:41 +0100 vmware-nsx (11.0.0~git20170502.d85dd105-0ubuntu1) artful; urgency=medium * No-change rebuild for sqlalchemy 1.1.x. * New upstream snapshot for OpenStack Pike. * Align (Build-)Depends with upstream milestone. -- James Page <james.page@ubuntu.com> Wed, 03 May 2017 12:50:30 -0400 vmware-nsx (10.0.1~git20170317.bfa48c0-0ubuntu1) zesty; urgency=medium [ James Page ] * New upstream snapshot for OpenStack Ocata. * d/control: Add epoch for networking-l2gw dependencies. * d/control: Add BD on python-neutron >= 10.0.0-0ubuntu3~ to ensure that unit tests execute with an in-memory sqlite db. * d/rules: Directly use ostestr for unit test execution. * d/p/*: Dropped, no longer required. * d/rules: Ignore results of unit tests due to random test failures with missing tables in sqlite backed tests when under memory pressure (See https://pad.lv/1676712). [ Chuck Short ] * debian/control: Update dependencies * debian/rules: Set PBR_VERSION * d/control: Add dep8 tests. -- James Page <james.page@ubuntu.com> Tue, 28 Mar 2017 05:05:40 +0100 vmware-nsx (9.0.0~git20160927.64c87d2-0ubuntu1) yakkety; urgency=medium * New upstream snapshot for OpenStack Newton. * d/p/0001-Include-alembic-migrations-in-module.patch: Cherry pick fix to ensure that alembic migrations are installed with module (LP: #1574610). -- James Page <james.page@ubuntu.com> Wed, 28 Sep 2016 14:34:21 +0100

Modifications :
  1. Download patch .pylintrc

    --- 8.0.0-2/.pylintrc 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/.pylintrc 2018-02-25 12:07:01.000000000 +0000 @@ -19,19 +19,13 @@ disable= locally-disabled, # "E" Error for important programming issues (likely bugs) access-member-before-definition, - bad-super-call, - maybe-no-member, no-member, no-method-argument, no-self-argument, - not-callable, - no-value-for-parameter, - super-on-old-class, - too-few-format-args, + not-an-iterable, # "W" Warnings for stylistic problems or minor programming issues abstract-method, - anomalous-backslash-in-string, - anomalous-unicode-escape-in-string, + abstract-class-instantiated, arguments-differ, attribute-defined-outside-init, bad-builtin, @@ -39,50 +33,68 @@ disable= broad-except, dangerous-default-value, deprecated-lambda, - duplicate-key, expression-not-assigned, fixme, global-statement, - global-variable-not-assigned, - logging-not-lazy, + literal-comparison, no-init, non-parent-init-called, + not-callable, protected-access, redefined-builtin, redefined-outer-name, - redefine-in-handler, signature-differs, star-args, super-init-not-called, - unnecessary-lambda, - unnecessary-pass, + super-on-old-class, unpacking-non-sequence, - unreachable, unused-argument, unused-import, unused-variable, + unsubscriptable-object, + useless-super-delegation, +# TODO(dougwig) - disable nonstandard-exception while we have neutron_lib shims + nonstandard-exception, # "C" Coding convention violations bad-continuation, + consider-iterating-dictionary, + consider-using-enumerate, invalid-name, + len-as-condition, + misplaced-comparison-constant, missing-docstring, - old-style-class, + singleton-comparison, superfluous-parens, + ungrouped-imports, + wrong-import-order, + wrong-import-position, # "R" Refactor recommendations abstract-class-little-used, abstract-class-not-used, + consider-merging-isinstance, + consider-using-ternary, duplicate-code, interface-not-implemented, + no-else-return, no-self-use, + redefined-argument-from-local, + simplifiable-if-statement, too-few-public-methods, too-many-ancestors, too-many-arguments, + too-many-boolean-expressions, too-many-branches, + too-many-function-args, too-many-instance-attributes, too-many-lines, too-many-locals, + too-many-nested-blocks, too-many-public-methods, too-many-return-statements, - too-many-statements + too-many-statements, + cyclic-import, + no-name-in-module, + bad-super-call [BASIC] # Variable names can be 1 to 31 characters long, with lowercase and underscores
  2. Download patch devstack/lib/nsx_common

    --- 8.0.0-2/devstack/lib/nsx_common 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/lib/nsx_common 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,134 @@ +#!/bin/bash + +# Copyright 2015 VMware, Inc. +# +# All Rights Reserved +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. + +# Common VMware NSXv and NSXv3 plugin +# ----------------------------------- + +# ensure we don't re-source this in the same environment +[[ -z "$_NSX_COMMON" ]] || return 0 +declare -r -g _NSX_COMMON=1 + +function _nsxv_ini_set { + if [[ $2 != "" ]]; then + iniset /$Q_PLUGIN_CONF_FILE nsxv $1 $2 + fi +} + +function nsxv_configure_service { + if [[ "$NSX_L2GW_DRIVER" != "" ]]; then + iniset /$Q_PLUGIN_CONF_FILE DEFAULT nsx_l2gw_driver $NSX_L2GW_DRIVER + fi + _nsxv_ini_set password "$NSXV_PASSWORD" + _nsxv_ini_set user "$NSXV_USER" + _nsxv_ini_set vdn_scope_id "$NSXV_VDN_SCOPE_ID" + _nsxv_ini_set dvs_id "$NSXV_DVS_ID" + _nsxv_ini_set manager_uri "$NSXV_MANAGER_URI" + _nsxv_ini_set ca_file "$NSXV_CA_FILE" + _nsxv_ini_set insecure "$NSXV_INSECURE" + _nsxv_ini_set datacenter_moid "$NSXV_DATACENTER_MOID" + _nsxv_ini_set datastore_id "$NSXV_DATASTORE_ID" + _nsxv_ini_set resource_pool_id "$NSXV_RESOURCE_POOL_ID" + _nsxv_ini_set availability_zones "$NSXV_AVAILABILITY_ZONES" + _nsxv_ini_set external_network "$NSXV_EXTERNAL_NETWORK" + _nsxv_ini_set cluster_moid "$NSXV_CLUSTER_MOID" + _nsxv_ini_set backup_edge_pool "$NSXV_BACKUP_POOL" + _nsxv_ini_set mgt_net_proxy_ips "$NSXV_MGT_NET_PROXY_IPS" + _nsxv_ini_set mgt_net_moid "$NSXV_MGT_NET_MOID" + _nsxv_ini_set mgt_net_proxy_netmask "$NSXV_MGT_NET_PROXY_NETMASK" + _nsxv_ini_set nova_metadata_port "$NSXV_NOVA_METADATA_PORT" + _nsxv_ini_set nova_metadata_ips "$NSXV_NOVA_METADATA_IPS" + _nsxv_ini_set metadata_shared_secret "$NSXV_METADATA_SHARED_SECRET" + _nsxv_ini_set metadata_insecure "$NSXV_METADATA_INSECURE" + _nsxv_ini_set metadata_nova_client_cert "$NSXV_METADATA_NOVA_CERT" + _nsxv_ini_set metadata_nova_client_priv_key "$NSXV_METADATA_NOVA_PRIV_KEY" + _nsxv_ini_set metadata_service_allowed_ports "$NSXV_METADATA_SERVICE_ALLOWED_PORTS" + _nsxv_ini_set edge_ha "$NSXV_EDGE_HA" + _nsxv_ini_set exclusive_router_appliance_size "$NSXV_EXCLUSIVE_ROUTER_APPLIANCE_SIZE" + _nsxv_ini_set use_dvs_features "$NSXV_USE_DVS_FEATURES" + _nsxv_ini_set use_nsx_policies "$NSXV_USE_NSX_POLICIES" + _nsxv_ini_set default_policy_id "$NSXV_DEFAULT_POLICY_ID" + _nsxv_ini_set allow_tenant_rules_with_policy "$NSXV_ALLOW_TENANT_RULES_WITH_POLICY" +} + +function _dvs_ini_set { + if [[ $2 != "" ]]; then + iniset /$Q_PLUGIN_CONF_FILE dvs $1 $2 + fi +} + +function dvs_configure_service { + _dvs_ini_set host_ip $1 + _dvs_ini_set host_username $2 + _dvs_ini_set host_password $3 + _dvs_ini_set ca_file $4 + _dvs_ini_set insecure $5 + _dvs_ini_set dvs_name $6 +} + +function _nsxv3_ini_set { + if [[ -z $1 || -z $2 ]]; then + if [[ $3 != "" ]]; then + die $LINENO $3 + fi + fi + if [[ $2 != "" ]]; then + iniset /$Q_PLUGIN_CONF_FILE nsx_v3 $1 $2 + fi +} + +function nsxv3_configure_service { + _nsxv3_ini_set default_overlay_tz $DEFAULT_OVERLAY_TZ_UUID "The VMware NSX plugin won't work without a default transport zone." + _nsxv3_ini_set default_vlan_tz $DEFAULT_VLAN_TZ_UUID + if [[ "$DEFAULT_TIER0_ROUTER_UUID" != "" ]]; then + _nsxv3_ini_set default_tier0_router $DEFAULT_TIER0_ROUTER_UUID + Q_L3_ENABLED=True + Q_L3_ROUTER_PER_TENANT=True + fi + # NSX_MANAGER must be a comma separated string + if [[ "$NSX_MANAGERS" != "" ]]; then + _nsxv3_ini_set nsx_api_managers $NSX_MANAGERS + elif [[ "$NSX_MANAGER" != "" ]]; then + _nsxv3_ini_set nsx_api_managers $NSX_MANAGER + else + die $LINENO "The VMware NSX plugin needs at least one NSX manager." + fi + if [[ "$NSX_L2GW_DRIVER" != "" ]]; then + iniset /$Q_PLUGIN_CONF_FILE DEFAULT nsx_l2gw_driver $NSX_L2GW_DRIVER + fi + _nsxv3_ini_set ens_support $ENS_SUPPORT + _nsxv3_ini_set nsx_api_user $NSX_USER + _nsxv3_ini_set nsx_api_password $NSX_PASSWORD + _nsxv3_ini_set retries $NSX_RETRIES + _nsxv3_ini_set insecure $NSX_INSECURE + _nsxv3_ini_set ca_file $NSX_CA_FILE + _nsxv3_ini_set default_bridge_cluster $DEFAULT_BRIDGE_CLUSTER_UUID + _nsxv3_ini_set native_dhcp_metadata $NATIVE_DHCP_METADATA + if [[ "$NATIVE_DHCP_METADATA" == "True" ]]; then + _nsxv3_ini_set native_metadata_route $NATIVE_METADATA_ROUTE + _nsxv3_ini_set dhcp_profile $DHCP_PROFILE_UUID + _nsxv3_ini_set metadata_proxy $METADATA_PROXY_UUID + _nsxv3_ini_set dhcp_relay_service $DHCP_RELAY_SERVICE + iniset $NEUTRON_CONF DEFAULT dhcp_agent_notification False + fi + if [[ "$NSX_USE_CLIENT_CERT_AUTH" == "True" ]]; then + _nsxv3_ini_set nsx_use_client_auth "True" + _nsxv3_ini_set nsx_client_cert_file "$CLIENT_CERT_FILE" + _nsxv3_ini_set nsx_client_cert_storage "nsx-db" + _nsxv3_ini_set nsx_client_cert_pk_password "openstack" + fi +}
  3. Download patch devstack/lib/vmware_dvs

    --- 8.0.0-2/devstack/lib/vmware_dvs 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/lib/vmware_dvs 2018-02-25 12:07:01.000000000 +0000 @@ -19,11 +19,17 @@ # Neutron VMware DVS plugin # ------------------------- +# Settings previously defined in devstack:lib/neutron-legacy +NEUTRON_CONF_DIR=/etc/neutron +export NEUTRON_TEST_CONFIG_FILE=${NEUTRON_TEST_CONFIG_FILE:-"$NEUTRON_CONF_DIR/debug.ini"} +Q_DHCP_CONF_FILE=$NEUTRON_CONF_DIR/dhcp_agent.ini + # Save trace setting DVS_XTRACE=$(set +o | grep xtrace) set +o xtrace source $TOP_DIR/lib/neutron_plugins/ovs_base +source $dir/lib/nsx_common DVS_BRIDGE=${DVS_BRIDGE:-br-dvs} DVS_INTERFACE=${DVS_INTERFACE:-eth1} @@ -58,10 +64,12 @@ function neutron_plugin_configure_common Q_PLUGIN_CONF_PATH=etc/neutron/plugins/vmware Q_PLUGIN_CONF_FILENAME=nsx.ini Q_PLUGIN_SRC_CONF_PATH=vmware-nsx/etc + VMWARE_NSX_DIR=vmware-nsx + # Uses oslo config generator to generate sample configuration file + (cd $DEST/$VMWARE_NSX_DIR && exec ./tools/generate_config_file_samples.sh) mkdir -p /$Q_PLUGIN_CONF_PATH - cp $DEST/$Q_PLUGIN_SRC_CONF_PATH/$Q_PLUGIN_CONF_FILENAME /$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME - Q_DB_NAME="neutron_nsx" - Q_PLUGIN_CLASS="vmware_nsx.plugin.NsxDvsPlugin" + cp $DEST/$Q_PLUGIN_SRC_CONF_PATH/nsx.ini.sample /$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME + Q_PLUGIN_CLASS="vmware_dvs" } function neutron_plugin_configure_debug_command { @@ -73,6 +81,7 @@ function neutron_plugin_configure_dhcp_a iniset $Q_DHCP_CONF_FILE DEFAULT enable_isolated_metadata True iniset $Q_DHCP_CONF_FILE DEFAULT enable_metadata_network True iniset $Q_DHCP_CONF_FILE DEFAULT ovs_integration_bridge $OVS_BRIDGE + iniset $Q_DHCP_CONF_FILE DEFAULT dhcp_driver "vmware_nsx.plugins.dvs.dhcp.Dnsmasq" } function neutron_plugin_configure_l3_agent { @@ -86,12 +95,8 @@ function neutron_plugin_configure_plugin } function neutron_plugin_configure_service { - iniset /$Q_PLUGIN_CONF_FILE dvs host_ip "$VMWAREAPI_IP" - iniset /$Q_PLUGIN_CONF_FILE dvs host_username "$VMWAREAPI_USER" - iniset /$Q_PLUGIN_CONF_FILE dvs host_password "$VMWAREAPI_PASSWORD" - iniset /$Q_PLUGIN_CONF_FILE dvs ca_file "$VMWAREAPI_CA_FILE" - iniset /$Q_PLUGIN_CONF_FILE dvs insecure "$VMWAREAPI_INSECURE" - iniset /$Q_PLUGIN_CONF_FILE dvs dvs_name "$VMWARE_DVS_NAME" + dvs_configure_service "$VMWAREAPI_IP" "$VMWAREAPI_USER" "$VMWAREAPI_PASSWORD" "$VMWAREAPI_CA_FILE" "$VMWAREAPI_INSECURE" "$VMWARE_DVS_NAME" + iniset /$Q_PLUGIN_CONF_FILE DEFAULT nsx_extension_drivers vmware_dvs_dns } function neutron_plugin_setup_interface_driver {
  4. Download patch releasenotes/notes/nsxv-ipam-support-6eb1ac4e0e025ddd.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-ipam-support-6eb1ac4e0e025ddd.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-ipam-support-6eb1ac4e0e025ddd.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,9 @@ +--- +prelude: > + The NSX-v plugin can use the platform IPAM for ip allocations for external + networks and provider networks. +features: + - The NSX-v plugin can use the platform IPAM for ip allocations for external + networks and provider networks. + In order to use this feature, the ipam_driver in the neutron.conf file + should be set to vmware_nsxv_ipam.
  5. Download patch releasenotes/notes/nsxv3-taas-driver-1a316cf3915fcb3d.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-taas-driver-1a316cf3915fcb3d.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-taas-driver-1a316cf3915fcb3d.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,7 @@ +--- +prelude: > + Support Tap-as-a-Service for port mirroring in NSXv3 plugin. +features: + - NSXv3 plugin now supports port mirroring via TaaS APIs which integrates + into the backend L3SPAN APIs i.e. the mirrored packets are sent to the + destination port over L3.
  6. Download patch devstack/lib/vmware_nsx_v

    --- 8.0.0-2/devstack/lib/vmware_nsx_v 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/lib/vmware_nsx_v 2018-02-25 12:07:01.000000000 +0000 @@ -24,6 +24,8 @@ NSXV_XTRACE=$(set +o | grep xtrace) set +o xtrace +dir=${GITDIR['vmware-nsx']}/devstack +source $dir/lib/nsx_common function setup_integration_bridge { : @@ -50,10 +52,14 @@ function neutron_plugin_configure_common Q_PLUGIN_CONF_PATH=etc/neutron/plugins/vmware Q_PLUGIN_CONF_FILENAME=nsx.ini Q_PLUGIN_SRC_CONF_PATH=vmware-nsx/etc + VMWARE_NSX_DIR=vmware-nsx + # Uses oslo config generator to generate sample configuration file + (cd $DEST/$VMWARE_NSX_DIR && exec ./tools/generate_config_file_samples.sh) mkdir -p /$Q_PLUGIN_CONF_PATH - cp $DEST/$Q_PLUGIN_SRC_CONF_PATH/$Q_PLUGIN_CONF_FILENAME /$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME - Q_DB_NAME="neutron_nsx" - Q_PLUGIN_CLASS="vmware_nsx.plugin.NsxVPlugin" + cp $DEST/$Q_PLUGIN_SRC_CONF_PATH/nsx.ini.sample /$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME + sudo install -d -o $STACK_USER $NEUTRON_CONF_DIR/policy.d + cp -vr $DEST/$Q_PLUGIN_SRC_CONF_PATH/policy.d/* $NEUTRON_CONF_DIR/policy.d/ + Q_PLUGIN_CLASS="vmware_nsxv" } function neutron_plugin_configure_debug_command { @@ -75,41 +81,12 @@ function neutron_plugin_configure_plugin die $LINENO "q-agt must not be executed with VMware NSXv plugin!" } -function _nsxv_ini_set { - if [[ $2 != "" ]]; then - iniset /$Q_PLUGIN_CONF_FILE nsxv $1 $2 - fi -} - function neutron_plugin_configure_service { - if [[ "$NSX_L2GW_DRIVER" != "" ]]; then - iniset /$Q_PLUGIN_CONF_FILE DEFAULT nsx_l2gw_driver $NSX_L2GW_DRIVER + nsxv_configure_service + iniset /$Q_PLUGIN_CONF_FILE DEFAULT nsx_extension_drivers vmware_nsxv_dns + if [[ "$NSXV_USE_DVS_FEATURES" != "" ]]; then + dvs_configure_service "$VMWAREAPI_IP" "$VMWAREAPI_USER" "$VMWAREAPI_PASSWORD" "$VMWAREAPI_CA_FILE" "$VMWAREAPI_INSECURE" "$VMWARE_DVS_NAME" fi - _nsxv_ini_set password "$NSXV_PASSWORD" - _nsxv_ini_set user "$NSXV_USER" - _nsxv_ini_set vdn_scope_id "$NSXV_VDN_SCOPE_ID" - _nsxv_ini_set dvs_id "$NSXV_DVS_ID" - _nsxv_ini_set manager_uri "$NSXV_MANAGER_URI" - _nsxv_ini_set ca_file "$NSXV_CA_FILE" - _nsxv_ini_set insecure "$NSXV_INSECURE" - _nsxv_ini_set datacenter_moid "$NSXV_DATACENTER_MOID" - _nsxv_ini_set datastore_id "$NSXV_DATASTORE_ID" - _nsxv_ini_set resource_pool_id "$NSXV_RESOURCE_POOL_ID" - _nsxv_ini_set external_network "$NSXV_EXTERNAL_NETWORK" - _nsxv_ini_set cluster_moid "$NSXV_CLUSTER_MOID" - _nsxv_ini_set backup_edge_pool "$NSXV_BACKUP_POOL" - _nsxv_ini_set mgt_net_proxy_ips "$NSXV_MGT_NET_PROXY_IPS" - _nsxv_ini_set mgt_net_moid "$NSXV_MGT_NET_MOID" - _nsxv_ini_set mgt_net_proxy_netmask "$NSXV_MGT_NET_PROXY_NETMASK" - _nsxv_ini_set nova_metadata_port "$NSXV_NOVA_METADATA_PORT" - _nsxv_ini_set nova_metadata_ips "$NSXV_NOVA_METADATA_IPS" - _nsxv_ini_set metadata_shared_secret "$NSXV_METADATA_SHARED_SECRET" - _nsxv_ini_set metadata_insecure "$NSXV_METADATA_INSECURE" - _nsxv_ini_set metadata_nova_client_cert "$NSXV_METADATA_NOVA_CERT" - _nsxv_ini_set metadata_nova_client_priv_key "$NSXV_METADATA_NOVA_PRIV_KEY" - _nsxv_ini_set metadata_service_allowed_ports "$NSXV_METADATA_SERVICE_ALLOWED_PORTS" - _nsxv_ini_set edge_ha "$NSXV_EDGE_HA" - _nsxv_ini_set exclusive_router_appliance_size "$NSXV_EXCLUSIVE_ROUTER_APPLIANCE_SIZE" } function neutron_plugin_setup_interface_driver {
  7. Download patch PKG-INFO

    --- 8.0.0-2/PKG-INFO 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/PKG-INFO 2018-02-25 12:18:08.000000000 +0000 @@ -0,0 +1,48 @@ +Metadata-Version: 1.1 +Name: vmware-nsx +Version: 12.0.1 +Summary: VMware NSX library for OpenStack projects +Home-page: https://launchpad.net/vmware-nsx +Author: OpenStack +Author-email: openstack-dev@lists.openstack.org +License: UNKNOWN +Description-Content-Type: UNKNOWN +Description: =================== + VMware-NSX package + =================== + + You have come across the VMware-NSX family of Neutron plugins + + External Resources: + ------------------- + + The homepage for the VMware-NSX project is on Launchpad_. + + .. _Launchpad: https://launchpad.net/vmware-nsx + + Use this site for asking for help, and filing bugs. + Code is available both git.openstack.org_ and github_. + + .. _git.openstack.org: https://git.openstack.org/cgit/openstack/vmware-nsx/tree/ + .. _github: https://github.com/openstack/vmware-nsx + + For help on usage and hacking of VMware-NSX, please send a message to the + openstack-dev_ mailing list. + + .. _openstack-dev: mailto:openstack-dev@lists.openstack.org + + For information on how to contribute to VMware-NSX, please see the + contents of the CONTRIBUTING.rst file. + + +Platform: UNKNOWN +Classifier: Environment :: OpenStack +Classifier: Intended Audience :: Information Technology +Classifier: Intended Audience :: System Administrators +Classifier: License :: OSI Approved :: Apache Software License +Classifier: Operating System :: POSIX :: Linux +Classifier: Programming Language :: Python +Classifier: Programming Language :: Python :: 2 +Classifier: Programming Language :: Python :: 2.7 +Classifier: Programming Language :: Python :: 3 +Classifier: Programming Language :: Python :: 3.5
  8. Download patch doc/source/housekeeper.rst

    --- 8.0.0-2/doc/source/housekeeper.rst 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/doc/source/housekeeper.rst 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,65 @@ +Plugin Housekeeper +================== + +During the Neutron plugin's operation, system may enter an inconsistent state +due to synchronization issues between different components, e.g Neutron and NSX +or NSX and vCenter. +Some of these inconsistencies may impact the operation of various system +elements. + +The Housekeeping mechanism should: +a) Detect such inconsistencies and warn about them. +b) Resolve inconsistencies when possible. + +Some of these inconsistencies can be resolved using the Admin utility, yet it +requires manual operation by the administrator while the housekeeping mechanism +should be automatic. + +Configuration +------------- + +Housekeeping mechanism uses two configuration parameters: + +nsxv.housekeeping_jobs: The housekeeper can be configured which tasks to +execute and which should be skipped. + +nsxv.housekeeping_readonly: Housekeeper may attempt to fix a broken environment +when this flag is set to False, or otherwise will just warn about +inconsistencies. + +Operation +--------- + +The housekeeping mechanism is an extension to the Neutron plugin. Therefore +it can be triggered by accessing the extension's URL with an administrator +context. + +A naive devstack example could be:: + + source devstack/openrc admin demo + export AUTH_TOKEN=`openstack token issue | awk '/ id /{print $4}'` + + curl -X PUT -s -H "X-Auth-Token: $AUTH_TOKEN" -H 'Content-Type: application/json' -d '{"housekeeper": {}}' http://<IP address>:9696/v2.0/housekeepers/all + +Where <IP address> would be the Neutron controller's IP or the virtual IP of +the load balancer which manages the Neutron controllers. +It is important to use the virtual IP in case of a load balanced active-backup +Neutron servers, as otherwise the housekeeping request may be handled by the +wrong controller. + +To operate the housekeeper periodically as it should, it should be scheduled +via a timing mechanism such as Linux cron. + +Plugin Jobs +----------- + +NSX-v +~~~~~ + +error_dhcp_edge: scans for DHCP Edge appliances which are in ERROR state. +When in non-readonly mode, the job will attempt recovery of the DHCP edges by +removing stale elements from the Neutron DB and reconfigure the interfaces at +the backend when required. + +error_backup_edge: scans from backup Edge appliances which are in ERROR state. +When in non-readonly mode, the job will reset the Edge appliance configuration.
  9. Download patch README.rst

    --- 8.0.0-2/README.rst 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/README.rst 2018-02-25 12:07:01.000000000 +0000 @@ -9,12 +9,12 @@ External Resources: The homepage for the VMware-NSX project is on Launchpad_. -.. _Launchpad: http://launchpad.net/vmware-nsx +.. _Launchpad: https://launchpad.net/vmware-nsx Use this site for asking for help, and filing bugs. Code is available both git.openstack.org_ and github_. -.. _git.openstack.org: http://git.openstack.org/cgit/openstack/vmware-nsx/tree/ +.. _git.openstack.org: https://git.openstack.org/cgit/openstack/vmware-nsx/tree/ .. _github: https://github.com/openstack/vmware-nsx For help on usage and hacking of VMware-NSX, please send a message to the
  10. Download patch releasenotes/source/conf.py

    --- 8.0.0-2/releasenotes/source/conf.py 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/source/conf.py 2018-02-25 12:07:01.000000000 +0000 @@ -58,17 +58,12 @@ master_doc = 'index' project = u'VMware NSX Release Notes' copyright = u'2015, VMware, Inc.' -# The version info for the project you're documenting, acts as replacement for -# |version| and |release|, also used in various other places throughout the -# built documents. -# -# The short X.Y version. -from vmware_nsx import version as vmware_version -vmware_nsx_version = vmware_version.version_info +# Release notes do not need a version number in the title, they +# cover multiple releases. # The full version, including alpha/beta/rc tags. -release = vmware_nsx_version.version_string_with_vcs() +release = '' # The short X.Y version. -version = vmware_nsx_version.canonical_version_string() +version = '' # The language for content autogenerated by Sphinx. Refer to documentation # for a list of supported languages. @@ -275,3 +270,6 @@ texinfo_documents = [ # If true, do not generate a @detailmenu in the "Top" node's menu. # texinfo_no_detailmenu = False + +# -- Options for Internationalization output ------------------------------ +locale_dirs = ['locale/']
  11. Download patch releasenotes/notes/nsxv3-trnasparent-vlan-fe06e1d3aa2fbcd9.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-trnasparent-vlan-fe06e1d3aa2fbcd9.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-trnasparent-vlan-fe06e1d3aa2fbcd9.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,6 @@ +--- +prelude: > + The NSX-V3 plugin supports transparent vlan networks. +features: + - | + The NSX-V3 plugin supports transparent vlan networks for guest vlan.
  12. Download patch devstack/tools/nsxv_edge_resources.py

    --- 8.0.0-2/devstack/tools/nsxv_edge_resources.py 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/tools/nsxv_edge_resources.py 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,110 @@ +#!/usr/bin/env python +# Copyright 2015 VMware Inc +# All Rights Reserved +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. + +""" +Purpose: Configure edge resource limits + +Usage: + python nsxv_edge_resources.py --vsm-ip <nsx-manager-ip> + --username <nsx-manager-username> + --password <nsx-manager-password> +""" + +import base64 +import optparse +import xml.etree.ElementTree as et + +from oslo_serialization import jsonutils +import requests +import six + +requests.packages.urllib3.disable_warnings() + + +class NSXClient(object): + + def __init__(self, host, username, password, *args, **kwargs): + self._host = host + self._username = username + self._password = password + + def _get_headers(self, format): + auth_cred = self._username + ":" + self._password + auth = base64.b64encode(auth_cred) + headers = {} + headers['Authorization'] = "Basic %s" % auth + headers['Content-Type'] = "application/%s" % format + headers['Accept'] = "application/%s" % format + return headers + + def _get_url(self, uri): + return 'https://%s/%s' % (self._host, uri) + + def _get(self, format, uri): + headers = self._get_headers(format) + url = self._get_url(uri) + response = requests.get(url, headers=headers, + verify=False) + return response + + def _put(self, format, uri, data): + headers = self._get_headers(format) + url = self._get_url(uri) + response = requests.put(url, headers=headers, + verify=False, data=data) + return response + + def _get_tuning_configration(self): + response = self._get("json", + "/api/4.0/edgePublish/tuningConfiguration") + return jsonutils.loads(response.text) + + def configure_reservations(self): + config = self._get_tuning_configration() + # NSX only receive XML format for the resource allocation update + tuning = et.Element('tuningConfiguration') + for opt, val in six.iteritems(config): + child = et.Element(opt) + if (opt == 'edgeVCpuReservationPercentage' or + opt == 'edgeMemoryReservationPercentage'): + child.text = '0' + elif opt == 'megaHertzPerVCpu': + child.text = '1500' + else: + child.text = str(val) + tuning.append(child) + self._put("xml", + "/api/4.0/edgePublish/tuningConfiguration", + et.tostring(tuning)) + print("Edge resource limits set") + + +if __name__ == "__main__": + + parser = optparse.OptionParser() + parser.add_option("--vsm-ip", dest="vsm_ip", help="NSX Manager IP address") + parser.add_option("-u", "--username", default="admin", dest="username", + help="NSX Manager username") + parser.add_option("-p", "--password", default="default", dest="password", + help="NSX Manager password") + (options, args) = parser.parse_args() + print("vsm-ip: %s" % options.vsm_ip) + print("username: %s" % options.username) + print("password: %s" % options.password) + + nsx_client = NSXClient(options.vsm_ip, options.username, + options.password) + nsx_client.configure_reservations()
  13. Download patch debian/rules

    --- 8.0.0-2/debian/rules 2016-07-11 09:48:23.000000000 +0000 +++ 12.0.1-0ubuntu1/debian/rules 2018-02-28 20:52:53.000000000 +0000 @@ -2,16 +2,26 @@ include /usr/share/openstack-pkg-tools/pkgos.make -export OSLO_PACKAGE_VERSION=$(VERSION) +export OSLO_PACKAGE_VERSION=$(shell echo '$(VERSION)' | cut -d + -f 1) %: dh $@ --buildsystem=python_distutils --with python2 override_dh_auto_test: ifeq (,$(findstring nocheck, $(DEB_BUILD_OPTIONS))) - ostestr + # NOTE(jamespage): Disable unit tests due to sqlite related test failures + # with in-memory db's in low memory conditions. + # See https://bugs.launchpad.net/1676712 + # ostestr + : endif +override_dh_auto_install: + dh_auto_install + mkdir -p $(CURDIR)/debian/python-vmware-nsx/etc/neutron/plugins/vmware + PYTHONPATH=$(CURDIR) oslo-config-generator --namespace nsx \ + --output-file $(CURDIR)/debian/python-vmware-nsx/etc/neutron/plugins/vmware/nsx.ini + override_dh_clean: dh_clean -O--buildsystem=python_distutils rm -rf build
  14. Download patch CONTRIBUTING.rst

    --- 8.0.0-2/CONTRIBUTING.rst 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/CONTRIBUTING.rst 2018-02-25 12:07:01.000000000 +0000 @@ -1,13 +1,13 @@ If you would like to contribute to the development of OpenStack, you must follow the steps documented at: - http://docs.openstack.org/infra/manual/developers.html#development-workflow + https://docs.openstack.org/infra/manual/developers.html#development-workflow Once those steps have been completed, changes to OpenStack should be submitted for review via the Gerrit tool, following the workflow documented at: - http://docs.openstack.org/infra/manual/developers.html#development-workflow + https://docs.openstack.org/infra/manual/developers.html#development-workflow Pull requests submitted through GitHub will be ignored.
  15. Download patch etc/policy.d/dynamic-routing.json

    --- 8.0.0-2/etc/policy.d/dynamic-routing.json 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/etc/policy.d/dynamic-routing.json 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,15 @@ +{ + "get_bgp_speaker": "rule:admin_only", + "create_bgp_speaker": "rule:admin_only", + "update_bgp_speaker": "rule:admin_only", + "delete_bgp_speaker": "rule:admin_only", + "get_bgp_peer": "rule:admin_only", + "create_bgp_peer": "rule:admin_only", + "update_bgp_peer": "rule:admin_only", + "delete_bgp_peer": "rule:admin_only", + "add_bgp_peer": "rule:admin_only", + "remove_bgp_peer": "rule:admin_only", + "add_gateway_network": "rule:admin_only", + "remove_gateway_network": "rule:admin_only", + "get_advertised_routes":"rule:admin_only", +}
  16. Download patch MANIFEST.in

    --- 8.0.0-2/MANIFEST.in 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/MANIFEST.in 2018-02-25 12:07:01.000000000 +0000 @@ -2,6 +2,10 @@ include AUTHORS include README.rst include ChangeLog include LICENSE + +include vmware_nsx/db/migration/alembic_migrations/script.py.mako +recursive-include vmware_nsx/db/migration/alembic_migrations/versions * + recursive-include vmware_nsx/neutron/locale * exclude .gitignore
  17. Download patch devstack/lib/vmware_nsx

    --- 8.0.0-2/devstack/lib/vmware_nsx 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/lib/vmware_nsx 2018-02-25 12:07:01.000000000 +0000 @@ -20,6 +20,12 @@ # Neutron VMware NSX plugin # ------------------------- +# Settings previously defined in devstack:lib/neutron-legacy +NEUTRON_CONF_DIR=/etc/neutron +export NEUTRON_TEST_CONFIG_FILE=${NEUTRON_TEST_CONFIG_FILE:-"$NEUTRON_CONF_DIR/debug.ini"} +Q_DHCP_CONF_FILE=$NEUTRON_CONF_DIR/dhcp_agent.ini +Q_META_DATA_IP=${Q_META_DATA_IP:-$SERVICE_HOST} + # Save trace setting NSX_XTRACE=$(set +o | grep xtrace) set +o xtrace @@ -60,9 +66,12 @@ function neutron_plugin_configure_common Q_PLUGIN_CONF_PATH=etc/neutron/plugins/vmware Q_PLUGIN_CONF_FILENAME=nsx.ini Q_PLUGIN_SRC_CONF_PATH=vmware-nsx/etc + VMWARE_NSX_DIR=vmware-nsx + # Uses oslo config generator to generate sample configuration file + (cd $DEST/$VMWARE_NSX_DIR && exec ./tools/generate_config_file_samples.sh) mkdir -p /$Q_PLUGIN_CONF_PATH - cp $DEST/$Q_PLUGIN_SRC_CONF_PATH/$Q_PLUGIN_CONF_FILENAME /$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME - Q_PLUGIN_CLASS="neutron.plugins.vmware.plugin.NsxPlugin" + cp $DEST/$Q_PLUGIN_SRC_CONF_PATH/nsx.ini.sample /$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME + Q_PLUGIN_CLASS="vmware_nsx" } function neutron_plugin_configure_debug_command {
  18. Download patch etc/nsx.ini
  19. Download patch etc/policy.d/flow-classifier.json

    --- 8.0.0-2/etc/policy.d/flow-classifier.json 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/etc/policy.d/flow-classifier.json 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,7 @@ +{ + "create_flow_classifier": "rule:admin_only", + "update_flow_classifier": "rule:admin_only", + "delete_flow_classifier": "rule:admin_only", + "get_flow_classifier": "rule:admin_only", +} +
  20. Download patch debian/compat

    --- 8.0.0-2/debian/compat 2016-07-11 09:48:23.000000000 +0000 +++ 12.0.1-0ubuntu1/debian/compat 2018-02-28 20:52:53.000000000 +0000 @@ -1 +1 @@ -9 +10
  21. Download patch releasenotes/notes/nsxv3-native-dhcp-config-2b6bdd372a2d643f.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-native-dhcp-config-2b6bdd372a2d643f.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-native-dhcp-config-2b6bdd372a2d643f.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,9 @@ +--- +prelude: > + Starting Newton release we added support for native DHCP and metadata + provided by NSXv3 backend. +features: + - Since now most of the NSXv3 deployment are using native DHCP/Metadata, + default this option native_dhcp_metadata to True. By default, it will + use NSXv3 native DHCP and Metadata unless this has been explicitly + set to False.
  22. Download patch .gitreview

    --- 8.0.0-2/.gitreview 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/.gitreview 1970-01-01 00:00:00.000000000 +0000 @@ -1,5 +0,0 @@ -[gerrit] -host=review.openstack.org -port=29418 -project=openstack/vmware-nsx.git -defaultbranch=stable/mitaka
  23. Download patch releasenotes/notes/dvs_dns_integration-831224f15acbc728.yaml

    --- 8.0.0-2/releasenotes/notes/dvs_dns_integration-831224f15acbc728.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/dvs_dns_integration-831224f15acbc728.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,8 @@ +--- +features: + - | + One can enable DNS integration for the upstream neutron for + VMware NSX-DVS. DNS integration extension by setting: + nsx_extension_drivers = vmware_dvs_dns + in the default section of neutron.conf. +
  24. Download patch releasenotes/source/pike.rst

    --- 8.0.0-2/releasenotes/source/pike.rst 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/source/pike.rst 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,6 @@ +=================================== + Pike Series Release Notes +=================================== + +.. release-notes:: + :branch: origin/stable/pike
  25. Download patch devstack/plugin.sh

    --- 8.0.0-2/devstack/plugin.sh 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/plugin.sh 2018-02-25 12:07:01.000000000 +0000 @@ -17,17 +17,31 @@ # under the License. +GITDIR['vmware-nsxlib']=$DEST/vmware-nsxlib +GITREPO['vmware-nsxlib']=${NSXLIB_REPO:-${GIT_BASE}/openstack/vmware-nsxlib.git} +GITBRANCH['vmware-nsxlib']=${NSXLIB_BRANCH:-master} + dir=${GITDIR['vmware-nsx']}/devstack if [[ "$1" == "stack" && "$2" == "install" ]]; then + if use_library_from_git 'vmware-nsxlib'; then + git_clone_by_name 'vmware-nsxlib' + setup_dev_lib 'vmware-nsxlib' + fi setup_develop ${GITDIR['vmware-nsx']} fi if [[ $Q_PLUGIN == 'vmware_nsx_v' ]]; then source $dir/lib/vmware_nsx_v if [[ "$1" == "unstack" ]]; then - python $dir/tools/nsxv_cleanup.py --vsm-ip ${NSXV_MANAGER_URI/https:\/\/} --user $NSXV_USER --password $NSXV_PASSWORD + db_connection=$(iniget $NEUTRON_CONF database connection) + python $dir/tools/nsxv_cleanup.py --vsm-ip ${NSXV_MANAGER_URI/https:\/\/} --user $NSXV_USER --password $NSXV_PASSWORD --db-connection $db_connection + elif [[ "$1" == "clean" ]]; then + if is_service_enabled q-svc || is_service_enabled neutron-api; then + python $dir/tools/nsxv_cleanup.py --vsm-ip ${NSXV_MANAGER_URI/https:\/\/} --user $NSXV_USER --password $NSXV_PASSWORD + fi fi + elif [[ $Q_PLUGIN == 'vmware_nsx' ]]; then source $dir/lib/vmware_nsx if [[ "$1" == "stack" && "$2" == "post-config" ]]; then @@ -42,12 +56,42 @@ elif [[ $Q_PLUGIN == 'vmware_nsx_v3' ]]; if [[ "$1" == "stack" && "$2" == "post-config" ]]; then init_vmware_nsx_v3 elif [[ "$1" == "unstack" ]]; then - stop_vmware_nsx - NSX_MANAGER=${NSX_MANAGERS:-$NSX_MANAGER} - IFS=',' - NSX_MANAGER=($NSX_MANAGER) - unset IFS - python $dir/tools/nsxv3_cleanup.py --mgr-ip $NSX_MANAGER --user $NSX_USER --password $NSX_PASSWORD + db_connection=$(iniget $NEUTRON_CONF database connection) + stop_vmware_nsx_v3 + # only clean up when q-svc (legacy support) or neutron-api is enabled + if is_service_enabled q-svc || is_service_enabled neutron-api; then + NSX_MANAGER=${NSX_MANAGERS:-$NSX_MANAGER} + IFS=',' + NSX_MANAGER=($NSX_MANAGER) + unset IFS + python $dir/tools/nsxv3_cleanup.py --mgr-ip $NSX_MANAGER --user $NSX_USER --password $NSX_PASSWORD --db-connection $db_connection + fi + elif [[ "$1" == 'clean' ]]; then + if is_service_enabled q-svc || is_service_enabled neutron-api; then + python $dir/tools/nsxv3_cleanup.py --mgr-ip $NSX_MANAGER --user $NSX_USER --password $NSX_PASSWORD + fi + fi +elif [[ $Q_PLUGIN == 'vmware_nsx_tvd' ]]; then + source $dir/lib/vmware_nsx_tvd + if [[ "$1" == "stack" && "$2" == "post-config" ]]; then + init_vmware_nsx_tvd + elif [[ "$1" == "unstack" ]]; then + db_connection=$(iniget $NEUTRON_CONF database connection) + stop_vmware_nsx_tvd + # only clean up when q-svc (legacy support) or neutron-api is enabled + if is_service_enabled q-svc || is_service_enabled neutron-api; then + NSX_MANAGER=${NSX_MANAGERS:-$NSX_MANAGER} + IFS=',' + NSX_MANAGER=($NSX_MANAGER) + unset IFS + python $dir/tools/nsxv3_cleanup.py --mgr-ip $NSX_MANAGER --user $NSX_USER --password $NSX_PASSWORD --db-connection $db_connection + python $dir/tools/nsxv_cleanup.py --vsm-ip ${NSXV_MANAGER_URI/https:\/\/} --user $NSXV_USER --password $NSXV_PASSWORD --db-connection $db_connection + fi + elif [[ "$1" == 'clean' ]]; then + if is_service_enabled q-svc || is_service_enabled neutron-api; then + python $dir/tools/nsxv3_cleanup.py --mgr-ip $NSX_MANAGER --user $NSX_USER --password $NSX_PASSWORD + python $dir/tools/nsxv_cleanup.py --vsm-ip ${NSXV_MANAGER_URI/https:\/\/} --user $NSXV_USER --password $NSXV_PASSWORD + fi fi elif [[ $Q_PLUGIN == 'vmware_dvs' ]]; then source $dir/lib/vmware_dvs
  26. Download patch debian/control

    --- 8.0.0-2/debian/control 2016-07-11 09:48:23.000000000 +0000 +++ 12.0.1-0ubuntu1/debian/control 2018-02-28 20:52:53.000000000 +0000 @@ -1,87 +1,114 @@ Source: vmware-nsx Section: net Priority: optional -Maintainer: PKG OpenStack <openstack-devel@lists.alioth.debian.org> -Uploaders: Thomas Goirand <zigo@debian.org>, - James Page <james.page@ubuntu.com>, -Build-Depends: debhelper (>= 9~), - dh-python, - openstack-pkg-tools (>= 23~), - python-all, - python-setuptools, - python-sphinx, -Build-Depends-Indep: python-coverage (>= 3.6), - python-decorator (>= 3.4.0), - python-enum34, - python-eventlet (>= 0.18.2), - python-fixtures (>= 1.3.1), - python-hacking (>= 0.9.2), - python-httplib2 (>= 0.7.5), - python-mock (>= 1.2), - python-netaddr (>= 0.7.12), - python-networking-l2gw, - python-neutron-lbaas (>= 1:8.0.0~), - python-neutron-lib (>= 0.0.1), - python-os-testr, - python-oslo.concurrency (>= 3.5.0), - python-oslo.config (>= 1:3.7.0), - python-oslo.db (>= 4.1.0), - python-oslo.i18n (>= 2.1.0), - python-oslo.log (>= 1.14.0), - python-oslo.serialization (>= 1.10.0), - python-oslo.service (>= 1.0.0), - python-oslo.utils (>= 3.5.0), - python-oslo.vmware (>= 1.16.0), - python-oslosphinx (>= 2.5.0), - python-oslotest (>= 1.10.0), - python-pbr (>= 1.6), - python-prettytable (>= 0.7), - python-retrying (>= 1.2.3), - python-six (>= 1.9.0), - python-sqlalchemy (>= 1.0.10), - python-stevedore (>= 1.5.0), - python-subunit (>= 0.0.18), - python-tempest-lib (>= 0.14.0), - python-testresources, - python-testscenarios (>= 0.4), - python-testtools (>= 1.4.0), - python-tooz (>= 1.28.0), - python-webtest (>= 2.0), - subunit (>= 0.0.18), - testrepository (>= 0.0.18), -Standards-Version: 3.9.6 +Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> +XSBC-Original-Maintainer: PKG OpenStack <openstack-devel@lists.alioth.debian.org> +Uploaders: + Thomas Goirand <zigo@debian.org>, + James Page <james.page@ubuntu.com>, +Build-Depends: + debhelper (>= 10~), + dh-python, + openstack-pkg-tools (>= 23~), + python-all, + python-setuptools, +Build-Depends-Indep: + pylint (>= 1.4.5), + python-coverage (>= 4.0), + python-decorator (>= 3.4.0), + python-enum34 (>= 1.0.4), + python-eventlet (>= 0.18.2), + python-fixtures (>= 3.0.0), + python-hacking (>= 0.12.0), + python-httplib2 (>= 0.9.1), + python-mock (>= 2.0.0), + python-netaddr (>= 0.7.18), + python-networking-l2gw (>= 1:1.0.0+git20170315), + python-networking-sfc (>= 4.0.0), + python-neutron (>= 11.0.0~), + python-neutron-dynamic-routing (>= 11.0.0~), + python-neutron-fwaas (>= 11.0.0~), + python-neutron-lbaas (>= 11.0.0~), + python-neutron-lib (>= 1.13.0), + python-neutron-taas (>= 1.0.0), + python-openstackclient (>= 3.12.0), + python-os-testr, + python-osc-lib (>= 1.8.0), + python-oslo.concurrency (>= 3.25.0), + python-oslo.config (>= 1:5.1.0), + python-oslo.context (>= 1:2.19.2), + python-oslo.db (>= 4.27.0), + python-oslo.i18n (>= 3.15.3), + python-oslo.log (>= 3.36.0), + python-oslo.privsep (>= 1.23.0), + python-oslo.serialization (>= 2.18.0), + python-oslo.service (>= 1.24.0), + python-oslo.utils (>= 3.33.0), + python-oslo.vmware (>= 2.17.0), + python-oslosphinx (>= 4.7.0), + python-oslotest (>= 1:3.2.0), + python-prettytable (>= 0.7.1), + python-psycopg2 (>= 2.6.2), + python-pymysql (>= 0.7.6), + python-pyroute2 (>= 0.4.21), + python-requests-mock (>= 1.1.0), + python-six (>= 1.10.0), + python-sphinx (>= 1.6.2), + python-sqlalchemy (>= 1.0.10), + python-stevedore (>= 1:1.20.0), + python-subunit (>= 0.0.18), + python-tempest (>= 1:17.1.0), + python-tenacity (>= 3.2.1), + python-testrepository (>= 0.0.18), + python-testresources (>= 2.0.0), + python-testscenarios (>= 0.4), + python-testtools (>= 2.2.0), + python-tooz (>= 1.58.0), + python-vmware-nsxlib (>= 0.7.0), + python-webtest (>= 2.0.27), +Standards-Version: 4.1.2 Homepage: http://neutron.openstack.org/ Vcs-Browser: https://anonscm.debian.org/cgit/openstack/vmware-nsx.git/ Vcs-Git: https://anonscm.debian.org/git/openstack/vmware-nsx.git +Testsuite: autopkgtest-pkg-python Package: python-vmware-nsx Architecture: all Section: python -Depends: python-decorator (>= 3.4.0), - python-eventlet (>= 0.18.2), - python-httplib2 (>= 0.7.5), - python-netaddr (>= 0.7.12), - python-networking-l2gw, - python-neutron-lbaas (>= 1:8.0.0~), - python-neutron-lib (>= 0.0.1), - python-oslo.concurrency (>= 3.5.0), - python-oslo.config (>= 1:3.7.0), - python-oslo.db (>= 4.1.0), - python-oslo.i18n (>= 2.1.0), - python-oslo.log (>= 1.14.0), - python-oslo.serialization (>= 1.10.0), - python-oslo.service (>= 1.0.0), - python-oslo.utils (>= 3.5.0), - python-oslo.vmware (>= 1.16.0), - python-pbr (>= 1.6), - python-prettytable (>= 0.7), - python-retrying (>= 1.2.3), - python-six (>= 1.9.0), - python-sqlalchemy (>= 1.0.10), - python-stevedore (>= 1.5.0), - python-tooz (>= 1.28.0), - ${misc:Depends}, - ${python:Depends}, +Depends: + python-decorator (>= 3.4.0), + python-eventlet (>= 0.18.2), + python-httplib2 (>= 0.9.1), + python-netaddr (>= 0.7.18), + python-networking-l2gw (>= 1:1.0.0+git20170315), + python-networking-sfc (>= 4.0.0), + python-neutron-dynamic-routing (>= 11.0.0~), + python-neutron-fwaas (>= 11.0.0~), + python-neutron-lbaas (>= 11.0.0~), + python-neutron-lib (>= 1.13.0), + python-neutron-taas (>= 1.0.0), + python-openstackclient (>= 3.12.0), + python-osc-lib (>= 1.8.0), + python-oslo.concurrency (>= 3.25.0), + python-oslo.config (>= 1:5.1.0), + python-oslo.context (>= 1:2.19.2), + python-oslo.db (>= 4.27.0), + python-oslo.i18n (>= 3.15.3), + python-oslo.log (>= 3.36.0), + python-oslo.serialization (>= 2.18.0), + python-oslo.service (>= 1.24.0), + python-oslo.utils (>= 3.33.0), + python-oslo.vmware (>= 2.17.0), + python-pbr (>= 2.0.0), + python-prettytable (>= 0.7.1), + python-six (>= 1.10.0), + python-sqlalchemy (>= 1.0.10), + python-stevedore (>= 1:1.20.0), + python-tenacity (>= 3.2.1), + python-tooz (>= 1.58.0), + python-vmware-nsxlib (>= 0.2.0), + ${misc:Depends}, + ${python:Depends}, Description: OpenStack virtual network service - VMWare NSX plugin Neutron provides an API to dynamically request and configure virtual networks. These networks connect "interfaces" from other OpenStack services (such as
  27. Download patch doc/source/usage.rst

    --- 8.0.0-2/doc/source/usage.rst 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/doc/source/usage.rst 2018-02-25 12:07:01.000000000 +0000 @@ -4,4 +4,4 @@ Usage To use in a project:: - import vmware \ No newline at end of file + import vmware_nsx
  28. Download patch etc/policy.d/neutron-fwaas.json

    --- 8.0.0-2/etc/policy.d/neutron-fwaas.json 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/etc/policy.d/neutron-fwaas.json 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,50 @@ +{ + "shared_firewalls": "field:firewalls:shared=True", + "shared_firewall_policies": "field:firewall_policies:shared=True", + "shared_firewall_rules": "field:firewall_rules:shared=True", + + "create_firewall": "", + "update_firewall": "rule:admin_or_owner", + "delete_firewall": "rule:admin_or_owner", + + "create_firewall:shared": "rule:admin_only", + "update_firewall:shared": "rule:admin_only", + "delete_firewall:shared": "rule:admin_only", + + "get_firewall": "rule:admin_or_owner or rule:shared_firewalls", + + "shared_firewall_groups": "field:firewall_groups:shared=True", + "shared_firewall_policies": "field:firewall_policies:shared=True", + "shared_firewall_rules": "field:firewall_rules:shared=True", + + "create_firewall_group": "", + "update_firewall_group": "rule:admin_or_owner", + "delete_firewall_group": "rule:admin_or_owner", + + "create_firewall_group:shared": "rule:admin_only", + "update_firewall_group:shared": "rule:admin_only", + "delete_firewall_group:shared": "rule:admin_only", + + "get_firewall_group": "rule:admin_or_owner or rule:shared_firewall_groups", + + + "create_firewall_policy": "", + "update_firewall_policy": "rule:admin_or_owner", + "delete_firewall_policy": "rule:admin_or_owner", + + "create_firewall_policy:shared": "rule:admin_only", + "update_firewall_policy:shared": "rule:admin_only", + "delete_firewall_policy:shared": "rule:admin_only", + + "get_firewall_policy": "rule:admin_or_owner or rule:shared_firewall_policies", + + "create_firewall_rule": "", + "update_firewall_rule": "rule:admin_or_owner", + "delete_firewall_rule": "rule:admin_or_owner", + + "create_firewall_rule:shared": "rule:admin_only", + "update_firewall_rule:shared": "rule:admin_only", + "delete_firewall_rule:shared": "rule:admin_only", + + "get_firewall_rule": "rule:admin_or_owner or rule:shared_firewall_rules" +}
  29. Download patch releasenotes/notes/nsxv3-add-trunk-driver-925ad1205972cbdf.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-add-trunk-driver-925ad1205972cbdf.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-add-trunk-driver-925ad1205972cbdf.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,7 @@ +--- +prelude: > + Support VLAN-aware-VM feature in NSXv3 plugin. +features: + - Trunk driver for NSXv3 plugin which allows creation of trunk ports + and subports which subsequently create parent port and child ports + relationship in the backend.
  30. Download patch devstack/nsx_v/devstackgaterc

    --- 8.0.0-2/devstack/nsx_v/devstackgaterc 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/nsx_v/devstackgaterc 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,34 @@ +# Copyright 2016 VMware, Inc. +# +# All Rights Reserved +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. + + +# This file is sourced by the NSX-v3 CI to run selective set of tests +# based on the features that are ready to be tested. + +# Begin list of exclusions. +r="^(?!.*" + +r="$r(?:tempest\.api\.network\.test_ports\.PortsTestJSON\.test_create_update_port_with_second_ip.*)" +r="$r|(?:tempest\.api\.network\.test_floating_ips\.FloatingIPTestJSON\.test_create_update_floatingip_with_port_multiple_ip_address.*)" +r="$r|(?:tempest\.api\.network\.test_routers\.RoutersTest\.test_update_delete_extra_route.*)" + +# End list of exclusions. +r="$r)" + +# only run tempest.api.network tests +r="$r(tempest\.api\.network).*$" + +export DEVSTACK_GATE_TEMPEST_REGEX="$r"
  31. Download patch ChangeLog
  32. Download patch HACKING.rst

    --- 8.0.0-2/HACKING.rst 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/HACKING.rst 2018-02-25 12:07:01.000000000 +0000 @@ -2,7 +2,7 @@ VMware-NSX Style Commandments ============================= - Step 1: Read the OpenStack Style Commandments - http://docs.openstack.org/developer/hacking/ + https://docs.openstack.org/developer/hacking/ - Step 2: Read on VMware-NSX Specific Commandments
  33. Download patch etc/policy.json

    --- 8.0.0-2/etc/policy.json 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/etc/policy.json 2018-02-25 12:07:01.000000000 +0000 @@ -45,6 +45,7 @@ "create_port:binding:host_id": "rule:admin_only", "create_port:binding:profile": "rule:admin_only", "create_port:mac_learning_enabled": "rule:admin_or_network_owner or rule:context_is_advsvc", + "create_port:provider_security_groups": "rule:admin_only", "get_port": "rule:admin_or_owner or rule:context_is_advsvc", "get_port:queue_id": "rule:admin_only", "get_port:binding:vif_type": "rule:admin_only", @@ -57,45 +58,9 @@ "update_port:binding:host_id": "rule:admin_only", "update_port:binding:profile": "rule:admin_only", "update_port:mac_learning_enabled": "rule:admin_or_network_owner or rule:context_is_advsvc", + "update_port:provider_security_groups": "rule:admin_only", "delete_port": "rule:admin_or_owner or rule:context_is_advsvc", - "get_router:ha": "rule:admin_only", - "create_router": "rule:regular_user", - "create_router:external_gateway_info:enable_snat": "rule:admin_only", - "create_router:distributed": "rule:admin_only", - "create_router:ha": "rule:admin_only", - "get_router": "rule:admin_or_owner", - "get_router:distributed": "rule:admin_only", - "update_router:external_gateway_info:enable_snat": "rule:admin_only", - "update_router:distributed": "rule:admin_only", - "update_router:ha": "rule:admin_only", - "delete_router": "rule:admin_or_owner", - - "add_router_interface": "rule:admin_or_owner", - "remove_router_interface": "rule:admin_or_owner", - - "create_router:external_gateway_info:external_fixed_ips": "rule:admin_only", - "update_router:external_gateway_info:external_fixed_ips": "rule:admin_only", - - "create_firewall": "", - "get_firewall": "rule:admin_or_owner", - "create_firewall:shared": "rule:admin_only", - "get_firewall:shared": "rule:admin_only", - "update_firewall": "rule:admin_or_owner", - "update_firewall:shared": "rule:admin_only", - "delete_firewall": "rule:admin_or_owner", - - "create_firewall_policy": "", - "get_firewall_policy": "rule:admin_or_owner or rule:shared_firewalls", - "create_firewall_policy:shared": "rule:admin_or_owner", - "update_firewall_policy": "rule:admin_or_owner", - "delete_firewall_policy": "rule:admin_or_owner", - - "create_firewall_rule": "", - "get_firewall_rule": "rule:admin_or_owner or rule:shared_firewalls", - "update_firewall_rule": "rule:admin_or_owner", - "delete_firewall_rule": "rule:admin_or_owner", - "create_qos_queue": "rule:admin_only", "get_qos_queue": "rule:admin_only", @@ -139,5 +104,5 @@ "get_service_provider": "rule:regular_user", "get_lsn": "rule:admin_only", - "create_lsn": "rule:admin_only" + "create_lsn": "rule:admin_only", }
  34. Download patch devstack/tools/nsxv_fw_autodraft_setting.py

    --- 8.0.0-2/devstack/tools/nsxv_fw_autodraft_setting.py 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/tools/nsxv_fw_autodraft_setting.py 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,124 @@ +#!/usr/bin/env python +# Copyright 2016 VMware Inc +# All Rights Reserved +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. + +""" +Purpose: Configure distributed firewall autodraft setting + +Usage: + python nsxv_fw_autodraft_setting.py --vsm-ip <nsx-manager-ip> + --username <nsx-manager-username> + --password <nsx-manager-password> + [--autodraft-disable] + [--autodraft-enable] +""" + +import base64 +import optparse + +from oslo_serialization import jsonutils +import requests + +requests.packages.urllib3.disable_warnings() + + +GLOBAL_CONFIG_URI = 'api/4.0/firewall/config/globalconfiguration' +AUTO_DRAFT_DISABLED = 'autoDraftDisabled' + + +class NSXClient(object): + + def __init__(self, host, username, password, *args, **kwargs): + self._host = host + self._username = username + self._password = password + + def _get_headers(self, format): + auth_cred = self._username + ":" + self._password + auth = base64.b64encode(auth_cred) + headers = {} + headers['Authorization'] = "Basic %s" % auth + headers['Content-Type'] = "application/%s" % format + headers['Accept'] = "application/%s" % format + return headers + + def _get_url(self, uri): + return 'https://%s/%s' % (self._host, uri) + + def _get(self, format, uri): + headers = self._get_headers(format) + url = self._get_url(uri) + response = requests.get(url, headers=headers, + verify=False) + return response + + def _put(self, format, uri, data): + headers = self._get_headers(format) + url = self._get_url(uri) + response = requests.put(url, headers=headers, + verify=False, data=data) + return response + + def disable_autodraft(self): + self._set_autodraft(True) + + def enable_autodraft(self): + self._set_autodraft(False) + + def _get_global_config(self): + resp = self._get('json', GLOBAL_CONFIG_URI) + global_conf = jsonutils.loads(resp.text) + return global_conf + + def _set_autodraft(self, disabled): + global_conf = self._get_global_config() + global_conf[AUTO_DRAFT_DISABLED] = disabled + self._put('json', GLOBAL_CONFIG_URI, jsonutils.dumps(global_conf)) + + +if __name__ == "__main__": + parser = optparse.OptionParser() + parser.add_option("--vsm-ip", dest="vsm_ip", help="NSX Manager IP address") + parser.add_option("-u", "--username", default="admin", dest="username", + help="NSX Manager username") + parser.add_option("-p", "--password", default="default", dest="password", + help="NSX Manager password") + parser.add_option("--disable-autodraft", action="store_true", + default=False, dest="disabled", + help="Disable the autodraft setting for NSX " + "distributed firewal.") + parser.add_option("--enable-autodraft", action="store_true", + default=False, dest="enabled", + help="Enable the autodraft setting for NSX " + "distributed firewal.") + (options, args) = parser.parse_args() + print("vsm-ip: %s" % options.vsm_ip) + print("username: %s" % options.username) + print("password: %s" % options.password) + + if options.disabled and options.enabled: + print("Please provide only one of the options: --disable-autodraft, " + "--enable-autodraft.") + + nsx_client = NSXClient(options.vsm_ip, options.username, + options.password) + if options.disabled: + print("Disabling autodraft settings:") + nsx_client.disable_autodraft() + print("Autodraft is now disabled.") + if options.enabled: + print("Enabling autodraft settings:") + nsx_client.enable_autodraft() + print("Autodraft is now enabled.")
  35. Download patch releasenotes/notes/nsxv3-lbaasv2-driver-57f37d6614eb1510.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-lbaasv2-driver-57f37d6614eb1510.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-lbaasv2-driver-57f37d6614eb1510.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,8 @@ +--- +prelude: > + NSXv3 plugin supports LBaaS v2 using NSX native load balancing. +features: + - | + Add NSXv3 neutron lbaas v2 driver to support LBaaS v2.0. This + includes both layer4 and layer7 load balancing via NSX native + load balancer.
  36. Download patch doc/source/index.rst

    --- 8.0.0-2/doc/source/index.rst 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/doc/source/index.rst 2018-02-25 12:07:01.000000000 +0000 @@ -1,4 +1,4 @@ -Welcome to oslo.vmware's documentation! +Welcome to vmware-nsx's documentation! ======================================= Contents:
  37. Download patch releasenotes/notes/rename_uuid_to_name-e64699df75176d4d.yaml

    --- 8.0.0-2/releasenotes/notes/rename_uuid_to_name-e64699df75176d4d.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/rename_uuid_to_name-e64699df75176d4d.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,9 @@ +--- +prelude: > + - In NSX|v3 plugin, the 'dhcp_profile_uuid' and 'metadata_proxy_uuid' + options have been deprecated and replaced by 'dhcp_profile' + and 'metadata_proxy' respectively, which can accept both name or uuid. +deprecations: + - In NSX|v3 plugin, the 'dhcp_profile_uuid' and 'metadata_proxy_uuid' + options have been deprecated and replaced by 'dhcp_profile' + and 'metadata_proxy' respectively, which can accept both name or uuid.
  38. Download patch releasenotes/notes/nsxv-availability-zones-85db159a647762b3.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-availability-zones-85db159a647762b3.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-availability-zones-85db159a647762b3.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,11 @@ +--- +prelude: > + The NSX-v plugin supports availability zones hints on routers and networks + creation in order to create them on the requested nsx datastore and + resource pool. +features: + - The NSX-v plugin supports availability zones hints on routers and networks + creation in order to create them on the requested nsx datastore and + resource pool. + The availability zones configuration includes the resource pool, datastore, + and HA datastore.
  39. Download patch doc/requirements.txt

    --- 8.0.0-2/doc/requirements.txt 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/doc/requirements.txt 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,11 @@ +# The order of packages is significant, because pip processes them in the order +# of appearance. Changing the order has an impact on the overall integration +# process, which may cause wedges in the gate later. +sphinx!=1.6.6,>=1.6.2 # BSD +oslosphinx>=4.7.0 # Apache-2.0 +reno>=2.5.0 # Apache-2.0 + +fixtures>=3.0.0 # Apache-2.0/BSD +testresources>=2.0.0 # Apache-2.0/BSD +testscenarios>=0.4 # Apache-2.0/BSD +oslotest>=3.2.0 # Apache-2.0
  40. Download patch releasenotes/notes/dns-search-domain-configuration-a134af0ef028282c.yaml

    --- 8.0.0-2/releasenotes/notes/dns-search-domain-configuration-a134af0ef028282c.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/dns-search-domain-configuration-a134af0ef028282c.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,9 @@ +--- +prelude: > + Enable an admin to configure a global search domain. + This is used if no search domain is configured on a + subnet. +features: + - A new configuration variable in the nsxv section will + enable the admin to configure a search domain. The new + variable is dns_search_domain.
  41. Download patch doc/source/conf.py

    --- 8.0.0-2/doc/source/conf.py 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/doc/source/conf.py 2018-02-25 12:07:01.000000000 +0000 @@ -47,7 +47,7 @@ if os.path.isfile(PATH) and os.access(PA if fnmatch.fnmatch(line, '*' + pattern[4:]): found = True if not found: - print line, + print(line) # The suffix of source filenames. source_suffix = '.rst'
  42. Download patch devstack/nsx_v3/kvm_compute_local.conf.sample

    --- 8.0.0-2/devstack/nsx_v3/kvm_compute_local.conf.sample 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/nsx_v3/kvm_compute_local.conf.sample 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,41 @@ +[[post-config|$NOVA_CONF]] +[neutron] +ovs_bridge=nsxvswitch + +[[local|localrc]] + +<git-base>=https://git.openstack.org/ +enable_plugin vmware-nsx <vmware-nsx-repo> <os-branch> +Q_PLUGIN=vmware_nsx_v3 +ENABLED_SERVICES=n-cpu,neutron +SERVICE_HOST=<service-host-ip> # OpenStack controller node IP +MYSQL_HOST=$SERVICE_HOST +RABBIT_HOST=$SERVICE_HOST +Q_HOST=$SERVICE_HOST +DATABASE_PASSWORD=openstack +RABBIT_PASSWORD=openstack +SERVICE_TOKEN=openstack +SERVICE_PASSWORD=openstack +ADMIN_PASSWORD=openstack +RECLONE=no +OVS_BRIDGE=nsxvswitch +IPV6_ENABLED=False +IP_VERSION=4 +HOST_IP=<this-host-ip> # OpenStack compute node IP +MULTI_HOST=1 +NOVA_VNC_ENABLED=True +NOVNCPROXY_URL="" +VNCSERVER_LISTEN=$HOST_IP +VNCSERVER_PROXYCLIENT_ADDRESS=$VNCSERVER_LISTEN +disable_service zookeeper +#DEBUG=False +#DEFAULT_VLAN_TZ_UUID=changeme # Optional, for VLAN provider networks + +# Enable Logging +LOGFILE=/opt/stack/logs/stack.sh.log +VERBOSE=True +LOG_COLOR=True + +NSX_MANAGER=<nsx-manager1-ip> +NSX_USER=<nsx-manager-user> +NSX_PASSWORD=<nsx-manager-password>
  43. Download patch .gitignore

    --- 8.0.0-2/.gitignore 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/.gitignore 1970-01-01 00:00:00.000000000 +0000 @@ -1,29 +0,0 @@ -AUTHORS -build/* -build-stamp -ChangeLog -cover/ -covhtml/ -dist/ -doc/build -*.DS_Store -*.pyc -vmware_nsx.egg-info/ -pbr*.egg/ -run_tests.err.log -run_tests.log -setuptools*.egg/ -subunit.log -*.mo -*.sw? -*~ -/.* -!/.coveragerc -!/.gitignore -!/.gitreview -!/.mailmap -!/.pylintrc -!/.testr.conf - -# Files created by releasenotes build -releasenotes/build
  44. Download patch releasenotes/notes/nsxv-fwaas-driver-4c457dee3fc3bae2.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-fwaas-driver-4c457dee3fc3bae2.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-fwaas-driver-4c457dee3fc3bae2.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,6 @@ +--- +prelude: > + The NSX-V plugin can suppport FWaaS-V1 for setting router edges firewall rules. +features: + - | + The NSX-V plugin can suppport FWaaS-V1 for setting router edges firewall rules.
  45. Download patch etc/policy/routers.json

    --- 8.0.0-2/etc/policy/routers.json 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/etc/policy/routers.json 1970-01-01 00:00:00.000000000 +0000 @@ -1,7 +0,0 @@ -{ - "create_router:external_gateway_info:enable_snat": "rule:admin_or_owner", - "create_router:distributed": "rule:admin_or_owner", - "get_router:distributed": "rule:admin_or_owner", - "update_router:external_gateway_info:enable_snat": "rule:admin_or_owner", - "update_router:distributed": "rule:admin_or_owner" -}
  46. Download patch api-ref/rest.md
  47. Download patch releasenotes/notes/rename_uuid_config_params-b36c379f64838334.yaml

    --- 8.0.0-2/releasenotes/notes/rename_uuid_config_params-b36c379f64838334.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/rename_uuid_config_params-b36c379f64838334.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,13 @@ +--- +prelude: > + The 'default_tier0_router_uuid', 'default_overlay_tz_uuid', + 'default_vlan_tz_uuid', and 'default_bridge_cluster_uuid' + options have been deprecated and replaced by 'default_tier0_router', + 'default_overlay_tz', 'default_vlan_tz', and 'default_bridge_cluster' + respectively, which can accept both name or uuid +deprecations: + - The 'default_tier0_router_uuid', 'default_overlay_tz_uuid', + 'default_vlan_tz_uuid', and 'default_bridge_cluster_uuid' + options have been deprecated and replaced by 'default_tier0_router', + 'default_overlay_tz', 'default_vlan_tz', and 'default_bridge_cluster' + respectively, which can accept both name or uuid
  48. Download patch releasenotes/notes/nsxv-service-insertion-32ab34a0e0f6ab4f.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-service-insertion-32ab34a0e0f6ab4f.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-service-insertion-32ab34a0e0f6ab4f.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,9 @@ +--- +prelude: > + The NSX-V plugin supports service insertion by redirecting traffic matched + to the neutron flow classifiers, to the NSX-V partner security services. +features: + - The NSX-V plugin supports service insertion by redirecting traffic matched + to the neutron flow classifiers, to the NSX-V partner security services. + For each flow-classifier defined in neutron, a new traffic redirection rule + will be created in the NSX partner security services tab.
  49. Download patch releasenotes/notes/nsxv3-vpnaas-0b02762ff4b83904.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-vpnaas-0b02762ff4b83904.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-vpnaas-0b02762ff4b83904.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,6 @@ +--- +prelude: > + Support VPN-as-a-Service for VPN IPSEC in NSXv3 plugin. +features: + - | + NSXv3 plugin now supports VPN SEC through VPNaaS plugin.
  50. Download patch devstack/lib/vmware_nsx_tvd
  51. Download patch devstack/tools/nsxv_cleanup.py
  52. Download patch devstack/nsx_v3/devstackgaterc

    --- 8.0.0-2/devstack/nsx_v3/devstackgaterc 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/nsx_v3/devstackgaterc 2018-02-25 12:07:01.000000000 +0000 @@ -24,7 +24,15 @@ r="$r(?:tempest\.api\.network\.test_exte r="$r|(?:tempest\.api\.network\.test_routers\.DvrRoutersTest.*)" r="$r|(?:tempest\.api\.network\.test_routers_negative\.DvrRoutersNegativeTest.*)" -r="$r|(?:tempest\.api\.network\.test_allowed_address_pair\.AllowedAddressPairTestJSON\.test_update_port_with_cidr_address_pair*)" +r="$r|(?:tempest\.api\.network\.test_allowed_address_pair\.AllowedAddressPairTestJSON\.test_update_port_with_cidr_address_pair.*)" +#Native DHCP has no agents +r="$r|(?:tempest\.api\.network\.admin\.test_agent_management\.AgentManagementTestJSON.*)" +#Can not create more than one DHCP-enabled subnet +r="$r|(?:tempest\.api\.network\.test_ports\.PortsTestJSON\.test_create_update_port_with_second_ip.*)" +r="$r|(?:tempest\.api\.network\.test_ports\.PortsTestJSON\.test_update_port_with_security_group_and_extra_attributes.*)" +r="$r|(?:tempest\.api\.network\.test_ports\.PortsTestJSON\.test_update_port_with_two_security_groups_and_extra_attributes.*)" +r="$r|(?:tempest\.api\.network\.test_extra_dhcp_options\.ExtraDHCPOptionsTestJSON\.test_.*_with_extra_dhcp_options.*)" +r="$r|(?:tempest\.api\.network\.test_floating_ips\.FloatingIPTestJSON\.test_create_update_floatingip_with_port_multiple_ip_address.*)" # End list of exclusions. r="$r)"
  53. Download patch releasenotes/source/newton.rst

    --- 8.0.0-2/releasenotes/source/newton.rst 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/source/newton.rst 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,6 @@ +============================ + Newton Series Release Notes +============================ + +.. release-notes:: + :branch: origin/stable/newton
  54. Download patch releasenotes/notes/nsxv3-availability-zones-8decf892df62.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-availability-zones-8decf892df62.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-availability-zones-8decf892df62.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,9 @@ +--- +prelude: > + The NSX-v3 plugin supports availability zones hints on networks + creation in order to separate the native dhcp configuration. +features: + - The NSX-v3 plugin supports availability zones hints on networks + creation in order to separate the native dhcp configuration. + The availability zones configuration includes the metadata_proxy, + dhcp_profile, native_metadata_route and dns related parameters.
  55. Download patch devstack/localrc_nsx_v3

    --- 8.0.0-2/devstack/localrc_nsx_v3 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/localrc_nsx_v3 2018-02-25 12:07:01.000000000 +0000 @@ -6,7 +6,11 @@ SERVICE_TOKEN=password SERVICE_PASSWORD=password ADMIN_PASSWORD=password Q_PLUGIN=vmware_nsx_v3 +NSX_PASSWORD=Admin!23Admin DEFAULT_OVERLAY_TZ_UUID=<FILL_IN> EDGE_CLUSTER_UUID=<FILL_IN> NSX_MANAGER=<FILL_IN> NSX_CONTROLLERS=<FILL_IN> +DHCP_PROFILE_UUID=<FILL_IN> +METADATA_PROXY_UUID=<FILL_IN> +DHCP_RELAY_SERVICE=<FILL_IN>
  56. Download patch releasenotes/source/index.rst

    --- 8.0.0-2/releasenotes/source/index.rst 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/source/index.rst 2018-02-25 12:07:39.000000000 +0000 @@ -5,5 +5,8 @@ .. toctree:: :maxdepth: 1 - liberty unreleased + pike + ocata + newton + liberty
  57. Download patch etc/policy/network-gateways.json

    --- 8.0.0-2/etc/policy/network-gateways.json 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/etc/policy/network-gateways.json 1970-01-01 00:00:00.000000000 +0000 @@ -1,10 +0,0 @@ -{ - "create_network_gateway": "rule:admin_or_owner", - "update_network_gateway": "rule:admin_or_owner", - "delete_network_gateway": "rule:admin_or_owner", - "connect_network": "rule:admin_or_owner", - "disconnect_network": "rule:admin_or_owner", - "create_gateway_device": "rule:admin_or_owner", - "update_gateway_device": "rule:admin_or_owner", - "delete_gateway_device": "rule_admin_or_owner" -}
  58. Download patch releasenotes/notes/nsxv-bgp-support-44f857d382943e08.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-bgp-support-44f857d382943e08.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-bgp-support-44f857d382943e08.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,6 @@ +--- +prelude: > + The NSX-V plugin suppports BGP for dynamic routing. +features: + - | + The NSX-V plugin can suppport BGP for dynamic routing.
  59. Download patch debian/watch

    --- 8.0.0-2/debian/watch 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/debian/watch 2018-02-28 20:52:53.000000000 +0000 @@ -0,0 +1,3 @@ +version=3 +opts="uversionmangle=s/\.([a-zA-Z])/~$1/;s/%7E/~/;s/\.0b/~b/;s/\.0rc/~rc/" \ + http://tarballs.openstack.org/vmware-nsx vmware-nsx-(\d.*)\.tar\.gz
  60. Download patch releasenotes/notes/nsxv-edge-random-placement-9534371967edec8f.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-edge-random-placement-9534371967edec8f.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-edge-random-placement-9534371967edec8f.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,9 @@ +--- +prelude: > + Support randomly selecting which will be the primary datastore and which + will be the secondary one when deplying an edge, in order to balance the load. + This new option is available globally as well as per availability_zone. +features: + - | + Support randomly selecting which will be the primary datastore and which + will be the secondary one when deplying an edge, in order to balance the load.
  61. Download patch releasenotes/notes/provider-security-group-2cfc1231dcaf21ac.yaml

    --- 8.0.0-2/releasenotes/notes/provider-security-group-2cfc1231dcaf21ac.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/provider-security-group-2cfc1231dcaf21ac.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,14 @@ +--- +prelude: > + Tenant specific blocking firewall rules to be managed via Neutron + security-group API +features: + - Admin user can now create a security-group with the 'provider' flag to + indicate whether rules take implicit 'deny' action. + - Provider security-group rules takes precedence over normal security-group + rules + - Each tenant may have at most one security-group marked as provider + - New tenant ports are associated with the provider + security-group automatically, unless explicitly asked otherwise + - Supported by NSX V3 + - Supported by NSX VSphere, version 6.2 or newer \ No newline at end of file
  62. Download patch etc/policy.d/routers.json

    --- 8.0.0-2/etc/policy.d/routers.json 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/etc/policy.d/routers.json 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,20 @@ +{ + "create_router:distributed": "rule:admin_or_owner", + "get_router:distributed": "rule:admin_or_owner", + "update_router:distributed": "rule:admin_or_owner", + + "get_router:ha": "rule:admin_only", + "create_router": "rule:regular_user", + "create_router:external_gateway_info:enable_snat": "rule:admin_or_owner", + "create_router:ha": "rule:admin_only", + "get_router": "rule:admin_or_owner", + "update_router:external_gateway_info:enable_snat": "rule:admin_or_owner", + "update_router:ha": "rule:admin_only", + "delete_router": "rule:admin_or_owner", + + "add_router_interface": "rule:admin_or_owner", + "remove_router_interface": "rule:admin_or_owner", + + "create_router:external_gateway_info:external_fixed_ips": "rule:admin_only", + "update_router:external_gateway_info:external_fixed_ips": "rule:admin_only", +}
  63. Download patch requirements.txt

    --- 8.0.0-2/requirements.txt 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/requirements.txt 2018-02-25 12:07:01.000000000 +0000 @@ -1,26 +1,29 @@ # The order of packages is significant, because pip processes them in the order # of appearance. Changing the order has an impact on the overall integration # process, which may cause wedges in the gate later. -pbr>=1.6 # Apache-2.0 +pbr!=2.1.0,>=2.0.0 # Apache-2.0 -enum34;python_version=='2.7' or python_version=='2.6' or python_version=='3.3' # BSD -eventlet!=0.18.3,>=0.18.2 # MIT -httplib2>=0.7.5 # MIT -netaddr!=0.7.16,>=0.7.12 # BSD -retrying!=1.3.0,>=1.2.3 # Apache-2.0 -SQLAlchemy<1.1.0,>=1.0.10 # MIT -six>=1.9.0 # MIT -stevedore>=1.5.0 # Apache-2.0 -neutron-lib>=0.0.1 # Apache-2.0 -oslo.concurrency>=3.5.0 # Apache-2.0 -oslo.config>=3.7.0 # Apache-2.0 -oslo.db>=4.1.0 # Apache-2.0 -oslo.i18n>=2.1.0 # Apache-2.0 -oslo.log>=1.14.0 # Apache-2.0 -oslo.serialization>=1.10.0 # Apache-2.0 -oslo.service>=1.0.0 # Apache-2.0 -oslo.utils>=3.5.0 # Apache-2.0 -oslo.vmware>=1.16.0 # Apache-2.0 -PrettyTable<0.8,>=0.7 # BSD -tooz>=1.28.0 # Apache-2.0 +enum34>=1.0.4;python_version=='2.7' or python_version=='2.6' or python_version=='3.3' # BSD +eventlet!=0.18.3,!=0.20.1,<0.21.0,>=0.18.2 # MIT +httplib2>=0.9.1 # MIT +netaddr>=0.7.18 # BSD +tenacity>=3.2.1 # Apache-2.0 +SQLAlchemy!=1.1.5,!=1.1.6,!=1.1.7,!=1.1.8,>=1.0.10 # MIT +six>=1.10.0 # MIT +stevedore>=1.20.0 # Apache-2.0 +neutron-lib>=1.13.0 # Apache-2.0 +osc-lib>=1.8.0 # Apache-2.0 +python-openstackclient>=3.12.0 # Apache-2.0 +oslo.concurrency>=3.25.0 # Apache-2.0 +oslo.context>=2.19.2 # Apache-2.0 +oslo.config>=5.1.0 # Apache-2.0 +oslo.db>=4.27.0 # Apache-2.0 +oslo.i18n>=3.15.3 # Apache-2.0 +oslo.log>=3.36.0 # Apache-2.0 +oslo.serialization!=2.19.1,>=2.18.0 # Apache-2.0 +oslo.service!=1.28.1,>=1.24.0 # Apache-2.0 +oslo.utils>=3.33.0 # Apache-2.0 +oslo.vmware>=2.17.0 # Apache-2.0 +PrettyTable<0.8,>=0.7.1 # BSD +tooz>=1.58.0 # Apache-2.0 decorator>=3.4.0 # BSD
  64. Download patch releasenotes/notes/nsxv3-switching-profiles-250aa43f5070dc37.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-switching-profiles-250aa43f5070dc37.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-switching-profiles-250aa43f5070dc37.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,8 @@ +--- +prelude: > + The nsx-v3 plugin can add pre-configured switching profiles to new nsx + ports. The configuration can also be done per availability zone. +features: + - | + The nsx-v3 plugin can add pre-configured switching profiles to new nsx + ports. The configuration can also be done per availability zone.
  65. Download patch devstack/nsx_v3/controller_local.conf.sample

    --- 8.0.0-2/devstack/nsx_v3/controller_local.conf.sample 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/nsx_v3/controller_local.conf.sample 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,117 @@ +[[post-extra|$TEMPEST_CONFIG]] +[nsxv3] +nsx_manager=<nsx-manager1-ip> +nsx_user=<nsx-username> +nsx_password=<nsx-password> + +[[post-config|$NOVA_CONF]] +[DEFAULT] +image_handlers=vmware_copy, vmware_download +force_config_drive = False +[vmware] +task_poll_interval=0.5 +use_linked_clone=false +insecure = true +datastore_regex = vdnet* + +[[local|localrc]] + +DATABASE_PASSWORD=openstack +ADMIN_PASSWORD=openstack +SERVICE_PASSWORD=openstack +SERVICE_TOKEN=openstack +RABBIT_PASSWORD=openstack + +# Enable Logging +LOGFILE=/opt/stack/logs/stack.sh.log +VERBOSE=True +LOG_COLOR=True + +RECLONE=True + +VIRT_DRIVER=vsphere +CINDER_DRIVER=vsphere +CINDER_ENABLED_BACKENDS=vsphere +VMWAREAPI_IP=<vcenter-ip> +VMWAREAPI_USER=<vcenter-user> +VMWAREAPI_PASSWORD=<vcenter-password> +VMWAREAPI_CLUSTER=<vcenter-cluster> + +# Use IPv4 only +IP_VERSION=4 + +# Pre-requisite +ENABLED_SERVICES=rabbit,mysql,key + +# Horizon (Dashboard UI) +ENABLED_SERVICES+=,horizon +#HORIZON_REPO=https://github.com/openstack/horizon + +# Nova - Compute Service +ENABLED_SERVICES+=,n-api,n-crt,n-obj,n-cpu,n-cond,n-sch + +# Nova Network - If you don't want to use Neutron and need a simple network setup (old good stuff!) +#ENABLED_SERVICES+=,n-net + +## Nova Cells +#ENABLED_SERVICES+=,n-cell + +# VNC server +ENABLED_SERVICES+=,n-novnc,n-xvnc,n-cauth + +# Glance - Image Service +ENABLED_SERVICES+=,g-api,g-reg + +# Tempest +ENABLED_SERVICES+=,tempest + +# Swift - Object Storage +#ENABLED_SERVICES+=,s-proxy,s-object,s-container,s-account + +# Neutron - Networking Service +# If Neutron is not declared the old good nova-network will be used +# If use agent to provider DHCP and metadata +#ENABLED_SERVICES+=,q-svc,q-dhcp,q-meta,neutron +# If use native DHCP support from NSX, q-dhcp & q-meta shouldn't be enabled +ENABLED_SERVICES+=,q-svc,neutron + +## Neutron - Load Balancing +#ENABLED_SERVICES+=,q-lbaas + +## Neutron - VPN as a Service +#ENABLED_SERVICES+=,q-vpn + +## Neutron - Firewall as a Service +#ENABLED_SERVICES+=,q-fwaas + +# Cinder - Block Device Service +#ENABLED_SERVICES+=,cinder,c-api,c-vol,c-sch,c-bak + +# Apache fronted for WSGI +APACHE_ENABLED_SERVICES+=keystone,swift + +# Enable NSX-T plugin stable/liberty branch +enable_plugin vmware-nsx <vmware-nsx-repo> <os-branch> +Q_PLUGIN=vmware_nsx_v3 +# Defatult vlan transport zone for provider network +DEFAULT_VLAN_TZ_UUID=<vlan-tz-uuid> +# Defatult overlay transport zone fro tenant network +DEFAULT_OVERLAY_TZ_UUID=<overlay-tz-uuid> +NSX_MANAGER=<nsx-managers-ip> +OVS_BRIDGE=nsxvswitch +NSX_USER=<nsx-username> +NSX_PASSWORD=<nsx-password> +# Default tier0 uuid which is created by admin +DEFAULT_TIER0_ROUTER_UUID=<tier0-router-uuid> +# Default Edge cluster uuid +DEFAULT_EDGE_CLUSTER_UUID=<edge-cluster-uuid> + +# Enabled native DHCP support from NSX backend +DHCP_PROFILE_UUID=<dhcp-profile-uuid> +DHCP_RELAY_SERVICE=<dhcp-relay-service> +METADATA_PROXY_UUID=<metadata-proxy-uuid> +METADATA_PROXY_SHARED_SECRET=<metadata-proxy-secret> +METADATA_PROXY_USE_HTTPS=False +METADATA_PROXY_CERT_FILE=<metadata-proxy-cert-file> +METADATA_PROXY_PRIV_KEY_FILE=<metadata-proxy-priv-key-file> +NATIVE_DHCP_METADATA=True
  66. Download patch releasenotes/notes/universal-switch-41487c280ad3c8ad.yaml

    --- 8.0.0-2/releasenotes/notes/universal-switch-41487c280ad3c8ad.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/universal-switch-41487c280ad3c8ad.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,8 @@ +--- +prelude: > + The NSX-v plugin supports universal switches. +features: + The NSX-v universal transport zone can be used in order to create universal + switches as VXLAN networks over all the nsx managers. For this option to be + enabled, the vdn_scope_id parameter in nsx.ini should be set to the ID of + the universal transport zone which is 'universalvdnscope'.
  67. Download patch releasenotes/notes/nsxv3-update-provider-types-aa1c20e988878ffe.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-update-provider-types-aa1c20e988878ffe.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-update-provider-types-aa1c20e988878ffe.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,8 @@ +--- +prelude: > + Adding support for Geneve and nSX-network provider networks. +features: + - | + Deprecating the VXLAN provider network type. + Adding Geneve provider networks (with overlay transport zone). + Adding nsx-net provider networks attached to an existing nsx
  68. Download patch etc/README.txt

    --- 8.0.0-2/etc/README.txt 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/etc/README.txt 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,9 @@ +To generate the sample vmware-nsx configuration files, run the following +command from the top level of the vmware-nsx directory: + +tox -e genconfig + +If a 'tox' environment is unavailable, then you can run the following script +instead to generate the configuration files: + +./tools/generate_config_file_samples.sh
  69. Download patch debian/python-vmware-nsx.install

    --- 8.0.0-2/debian/python-vmware-nsx.install 2016-07-11 09:48:23.000000000 +0000 +++ 12.0.1-0ubuntu1/debian/python-vmware-nsx.install 2018-02-28 20:52:53.000000000 +0000 @@ -1,3 +1 @@ -etc/nsx.ini /etc/neutron -etc/policy.json /usr/share/doc/python-vmware-nsx -etc/policy/* /etc/neutron/policy.d/ +etc/policy.d/* /etc/neutron/policy.d/
  70. Download patch releasenotes/notes/nsx-dns-integration-extension-8260456051d61743.yaml

    --- 8.0.0-2/releasenotes/notes/nsx-dns-integration-extension-8260456051d61743.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsx-dns-integration-extension-8260456051d61743.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,6 @@ +--- +prelude: > + The dns-integration extension is now supported in both NSXV and NSXV3 + plugins. It can be enabled by adding 'vmware_nsxv_dns' (for NSXV) or + 'vmware_nsxv3_dns' (for NSXV3) to the ``nsx_extension_drivers`` + configuration variable in neutron.conf file.
  71. Download patch devstack/tools/nsxv3_cleanup.py
  72. Download patch releasenotes/notes/nsxv-subnets-dhcp-mtu-c7028748b516422e.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-subnets-dhcp-mtu-c7028748b516422e.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-subnets-dhcp-mtu-c7028748b516422e.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,7 @@ +--- +prelude: > + The new extension dhcp-mtu of subnets in the NSX-v plugin can be used to + configure the DHCP client network interface MTU +features: + - The new extension dhcp-mtu of subnets in the NSX-v plugin can be used to + configure the DHCP client network interface MTU.
  73. Download patch releasenotes/source/ocata.rst

    --- 8.0.0-2/releasenotes/source/ocata.rst 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/source/ocata.rst 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,7 @@ +============================ +Ocata Series Release Notes +============================ + +.. release-notes:: + :branch: origin/stable/ocata +
  74. Download patch releasenotes/notes/nsxv3-native-dhcp-metadata-27af1de98302162f.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-native-dhcp-metadata-27af1de98302162f.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-native-dhcp-metadata-27af1de98302162f.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,9 @@ +--- +prelude: > + The NSX-V3 plugin supports native DHCP and metadata services provided + by NSX backend. +features: + - The NSX-V3 plugin version 1.1.0 allows users to use native DHCP and + metadata services provided by designated edge cluster in NSX backend + version 1.1.0. The edge cluster can provides high availability if + more than one edge nodes are configured in the cluster.
  75. Download patch AUTHORS
  76. Download patch releasenotes/notes/qos-support-d52b5e3abfc6c8d4.yaml

    --- 8.0.0-2/releasenotes/notes/qos-support-d52b5e3abfc6c8d4.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/qos-support-d52b5e3abfc6c8d4.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,9 @@ +--- +prelude: > + Support for QoS bandwidth limit and DSCP marking. +features: + - The plugin can apply a QoS rule to networks and ports that mark outgoing + traffic's type of service packet header field. + - The plugin can apply a QoS rule to networks and ports that limits the + outgoing traffic with the defined average and peak bandwidth. +
  77. Download patch releasenotes/notes/ens_support-49dbc626ba1b16be.yaml

    --- 8.0.0-2/releasenotes/notes/ens_support-49dbc626ba1b16be.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/ens_support-49dbc626ba1b16be.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,8 @@ +--- +prelude: > + Add a configuration variable indicating that ENS transport zones can be + used. +features: + - | + Add a new configuration variable ``ens_support`` to the ``nsx_v3`` section. + This indicates if a tenant or admin can create ENS networks.
  78. Download patch devstack/lib/vmware_nsx_v3
  79. Download patch releasenotes/notes/nsxv3-ipam-support-137174152c65459d.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-ipam-support-137174152c65459d.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-ipam-support-137174152c65459d.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,11 @@ +--- +prelude: > + The NSX-v3 plugin can use the platform IPAM for ip allocations for all + network types. +features: + - The NSX-v3 plugin can use the platform IPAM for ip allocations for all + network types. + In order to use this feature, the ipam_driver in the neutron.conf file + should be set to vmware_nsxv3_ipam. + Currently the plugin does not support allocating a specific address + from the pool depending on the NSX version.
  80. Download patch etc/policy.d/network-gateways.json

    --- 8.0.0-2/etc/policy.d/network-gateways.json 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/etc/policy.d/network-gateways.json 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,10 @@ +{ + "create_network_gateway": "rule:admin_or_owner", + "update_network_gateway": "rule:admin_or_owner", + "delete_network_gateway": "rule:admin_or_owner", + "connect_network": "rule:admin_or_owner", + "disconnect_network": "rule:admin_or_owner", + "create_gateway_device": "rule:admin_or_owner", + "update_gateway_device": "rule:admin_or_owner", + "delete_gateway_device": "rule:admin_or_owner" +}
  81. Download patch devstack/README.rst

    --- 8.0.0-2/devstack/README.rst 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/README.rst 2018-02-25 12:07:01.000000000 +0000 @@ -27,6 +27,7 @@ NSXV_PASSWORD # NSXv password. NSXV_CLUSTER_MOID # clusters ids containing OpenStack hosts. NSXV_DATACENTER_MOID # datacenter id for edge deployment. NSXV_RESOURCE_POOL_ID # resource-pool id for edge deployment. +NSXV_AVAILABILITY_ZONES # alternative resource-pools/data stores ids/edge_ha for edge deployment NSXV_DATASTORE_ID # datastore id for edge deployment. NSXV_EXTERNAL_NETWORK # id of logic switch for physical network connectivity. NSXV_VDN_SCOPE_ID # network scope id for VXLAN virtual-wires.
  82. Download patch releasenotes/notes/block-all-no-security-groups-47af550349dbc85a.yaml

    --- 8.0.0-2/releasenotes/notes/block-all-no-security-groups-47af550349dbc85a.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/block-all-no-security-groups-47af550349dbc85a.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,9 @@ +--- +prelude: > + Enable 'use_default_block_all' to ensure that traffic to a port that has + no security groups and has port security enabled will be discarded. +features: + - | + Enable 'use_default_block_all' to ensure that traffic to a port that has + no security groups and has port security enabled will be discarded. This + will ensure the same behaviours as the upstream security groups.
  83. Download patch releasenotes/notes/nsxv-policy-3f552191f94873cd.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-policy-3f552191f94873cd.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-policy-3f552191f94873cd.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,8 @@ +--- +prelude: > + The NSX-V plugin allows admin user to create security groups consuming + NSX policies, both as regular / default and provider security gruops. +features: + - The NSX-V plugin supports the concumption of NSX policies through security + groups. Depending on the configuration, an admin user can create security + groups without rules, that will be connected to an NSX policy.
  84. Download patch releasenotes/notes/nsxv-lbaas-l7-704f748300d1a399.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-lbaas-l7-704f748300d1a399.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-lbaas-l7-704f748300d1a399.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,5 @@ +--- +prelude: > + The NSX-V lbaas plugin now supports L7 rules & policies. +features: + - The NSX-V lbaas plugin now supports L7 rules & policies.
  85. Download patch devstack/nsx_v/tvd_devstackgaterc

    --- 8.0.0-2/devstack/nsx_v/tvd_devstackgaterc 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/devstack/nsx_v/tvd_devstackgaterc 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,46 @@ +# Copyright 2017 VMware, Inc. +# +# All Rights Reserved +# +# Licensed under the Apache License, Version 2.0 (the "License"); you may +# not use this file except in compliance with the License. You may obtain +# a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT +# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the +# License for the specific language governing permissions and limitations +# under the License. + + +# This file is sourced by the NSX-TVD-V CI to run selective set of tests +# based on the features that are ready to be tested. +# Note that the TVD plugin enabled a lot of extensions that the NSX-V plugin does not support +# so those tests should be skipped. + +# Begin list of exclusions. +r="^(?!.*" + +# unsupported NSX-V tests +r="$r(?:tempest\.api\.network\.test_ports\.PortsTestJSON\.test_create_update_port_with_second_ip.*)" +r="$r|(?:tempest\.api\.network\.test_floating_ips\.FloatingIPTestJSON\.test_create_update_floatingip_with_port_multiple_ip_address.*)" +r="$r|(?:tempest\.api\.network\.test_routers\.RoutersTest\.test_update_delete_extra_route.*)" + +# unsupported TVD tests +r="$r|(?:tempest\.api\.network\.test_networks\.NetworksTest\.test_show_network_fields.*)" +r="$r|(?:tempest\.api\.network\.test_extra_dhcp_options\.ExtraDHCPOptionsTestJSON\.test_update.*)" +r="$r|(?:tempest\.api\.network\.test_extensions\.ExtensionsTestJSON\..*)" +r="$r|(?:tempest\.api\.network\.test_allowed_address_pair\.AllowedAddressPairTestJSON\.test_update.*)" +r="$r|(?:tempest\.api\.network\.admin\.test_routers_dvr\.RoutersTestDVR\..*)" +r="$r|(?:tempest\.api\.network\.admin\.test_l3_agent_scheduler\.L3AgentSchedulerTestJSON\..*)" +r="$r|(?:tempest\.api\.network\.admin.\test_metering_extensions.*)" + +# End list of exclusions. +r="$r)" + +# only run tempest.api.network tests +r="$r(tempest\.api\.network).*$" + +export DEVSTACK_GATE_TEMPEST_REGEX="$r"
  86. Download patch releasenotes/notes/nsxv-vlan-selection-ec73aac44b3648a1.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-vlan-selection-ec73aac44b3648a1.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-vlan-selection-ec73aac44b3648a1.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,6 @@ +--- +prelude: > + The NSX-V plugin can decide on the VLAN tag for a provider network. +features: + - | + The NSX-V plugin can decide on the VLAN tag for a provider network.
  87. Download patch doc/source/installation.rst

    --- 8.0.0-2/doc/source/installation.rst 2016-07-08 09:30:03.000000000 +0000 +++ 12.0.1-0ubuntu1/doc/source/installation.rst 2018-02-25 12:07:01.000000000 +0000 @@ -4,9 +4,9 @@ Installation At the command line:: - $ pip install + $ pip install vmware-nsx Or, if you have virtualenvwrapper installed:: - $ mkvirtualenv - $ pip install \ No newline at end of file + $ mkvirtualenv vmware-nsx + $ pip install vmware-nsx
  88. Download patch releasenotes/notes/bind-floating-ips-per-az-142f0de7ebfae1c8.yaml

    --- 8.0.0-2/releasenotes/notes/bind-floating-ips-per-az-142f0de7ebfae1c8.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/bind-floating-ips-per-az-142f0de7ebfae1c8.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,10 @@ +--- +prelude: > + Enable 'bind_floatingip_to_all_interfaces' to be configured per + availability zone. +features: + - | + Enable 'bind_floatingip_to_all_interfaces' to be configured per + availability zone. This will enable an admin to ensure that an AZ + can have flotaing IP's configured on all edge vNICS. This enables VM's + on the same subnet to communicate via floating IP's.
  89. Download patch debian/gbp.conf

    --- 8.0.0-2/debian/gbp.conf 2016-07-11 09:48:23.000000000 +0000 +++ 12.0.1-0ubuntu1/debian/gbp.conf 2018-02-28 20:52:53.000000000 +0000 @@ -1,8 +1,6 @@ [DEFAULT] -upstream-branch = master -debian-branch = debian/mitaka -upstream-tag = %(version)s -compression = xz +debian-branch = master +pristine-tar = True [buildpackage] export-dir = ../build-area/
  90. Download patch doc/source/admin_util.rst
  91. Download patch releasenotes/notes/nsx-extension-drivers-b1aedabe5296d4d0.yaml

    --- 8.0.0-2/releasenotes/notes/nsx-extension-drivers-b1aedabe5296d4d0.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsx-extension-drivers-b1aedabe5296d4d0.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,7 @@ +--- +prelude: > + We have added a new configuration variable that will enable us to + enable existing extensions. The new configuration variable is + ``nsx_extension_drivers``. This is in the default section. + This is a list of extansion names. The code for the drivers + must be in the directory vmware_nsx.extension_drivers.
  92. Download patch etc/oslo-config-generator/nsx.ini

    --- 8.0.0-2/etc/oslo-config-generator/nsx.ini 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/etc/oslo-config-generator/nsx.ini 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,5 @@ +[DEFAULT] +output_file = etc/nsx.ini.sample +wrap_width = 79 + +namespace = nsx
  93. Download patch doc/source/devstack.rst
  94. Download patch releasenotes/notes/nsxv-router-flavors-8e4cea7f6e12d44d.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-router-flavors-8e4cea7f6e12d44d.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-router-flavors-8e4cea7f6e12d44d.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,7 @@ +--- +prelude: > + The NSX-v plugin supports using router flavors in routers creation. +features: + - The NSX-v plugin supports using router flavors in routers creation. + A router flavor can include the router type, size, distributed flag and + availability zones in order to easily create similar routers.
  95. Download patch releasenotes/notes/nsxv-exclusive-dhcp-7e5cde1cd88f8c5b.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv-exclusive-dhcp-7e5cde1cd88f8c5b.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv-exclusive-dhcp-7e5cde1cd88f8c5b.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,8 @@ +--- +prelude: > + Add support for exclusive DHCP edges. +features: + - | + The NSX-v will now enable a tenant to deploy a exclusive DHCP edge. This + is either via the global configuration variable ``exclusive_dhcp_edge`` or + per AZ. By default this is disabled.
  96. Download patch releasenotes/notes/nsxv3-multi-managers-b645c4202a8476e9.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-multi-managers-b645c4202a8476e9.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-multi-managers-b645c4202a8476e9.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,7 @@ +--- +prelude: > + The NSX-v3 plugin supports different credentials for the NSX managers. +features: + The nsxv3 configuration parameters ca_file, nsx_api_user & nsx_api_password + are now lists, in order to support different credentials for each of the + NSX managers.
  97. Download patch releasenotes/notes/nsxv3-init-from-tags-bcd4f3245a78e9a6.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-init-from-tags-bcd4f3245a78e9a6.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-init-from-tags-bcd4f3245a78e9a6.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,10 @@ +--- +prelude: > + NSX-V3 plugin supports a new configuration option for the transport zones, + tier-0 router, dhcp profile and md-proxy in the nsx ini file using NSX + Tags insead of names or IDs. +features: + - | + NSX-V3 plugin supports a new configuration option for the transport zones, + tier-0 router, dhcp profile and md-proxy in the nsx ini file using NSX + Tags insead of names or IDs.
  98. Download patch releasenotes/notes/nsxv3-dhcp-relay-32cf1ae281e1.yaml

    --- 8.0.0-2/releasenotes/notes/nsxv3-dhcp-relay-32cf1ae281e1.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/nsxv3-dhcp-relay-32cf1ae281e1.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,11 @@ +--- +prelude: > + The NSX-v3 plugin supports DHCP relay service per network + availability zones. +features: + - The NSX-v3 plugin supports DHCP relay service per network + availability zones. When a router interface port is created, + the relay service will be added to it. + DHCP traffic on the subnet will go through the DHCP server + configured in the dhcp relay service on the NSX, if it is + connected to the router. \ No newline at end of file
  99. Download patch releasenotes/notes/fwaas_v2-9445ea0aaea91c60.yaml

    --- 8.0.0-2/releasenotes/notes/fwaas_v2-9445ea0aaea91c60.yaml 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/releasenotes/notes/fwaas_v2-9445ea0aaea91c60.yaml 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,6 @@ +--- +prelude: > + The NSX-v3 plugin supports FWaaS V2. +features: + The NSX-v3 plugin now supports FWaaS V2 allowing to set a + different firewall group policy on each router port.
  100. Download patch etc/policy.d/security-groups.json

    --- 8.0.0-2/etc/policy.d/security-groups.json 1970-01-01 00:00:00.000000000 +0000 +++ 12.0.1-0ubuntu1/etc/policy.d/security-groups.json 2018-02-25 12:07:01.000000000 +0000 @@ -0,0 +1,8 @@ +{ + "create_security_group:logging": "rule:admin_only", + "update_security_group:logging": "rule:admin_only", + "get_security_group:logging": "rule:admin_only", + "create_security_group:provider": "rule:admin_only", + "create_security_group:policy": "rule:admin_only", + "update_security_group:policy": "rule:admin_only", +}
  101. ...
  1. vmware-nsx