blob: b3e3d72e8c0db5ed2f9e143da7dbce62fc95c403 [file] [log] [blame]
Sean M. Collins2a242512016-05-03 09:03:09 -04001#!/bin/bash
2#
3# lib/neutron
4# Install and start **Neutron** network services
5
6# Dependencies:
7#
8# ``functions`` file
9# ``DEST`` must be defined
10
11# ``stack.sh`` calls the entry points in this order:
12#
13# - is_XXXX_enabled
14# - install_XXXX
15# - configure_XXXX
16# - init_XXXX
17# - start_XXXX
18# - stop_XXXX
19# - cleanup_XXXX
20
21# Save trace setting
22XTRACE=$(set +o | grep xtrace)
23set +o xtrace
24
25# Defaults
26# --------
27
28# Set up default directories
29GITDIR["python-neutronclient"]=$DEST/python-neutronclient
30
Kevin Benton66b361b2017-06-13 00:31:01 -070031# NEUTRON_DEPLOY_MOD_WSGI defines how neutron is deployed, allowed values:
32# - False (default) : Run neutron under Eventlet
33# - True : Run neutron under uwsgi
34# TODO(annp): Switching to uwsgi in next cycle if things turn out to be stable
35# enough
Jens Harbott3492fee2018-11-30 13:57:17 +000036NEUTRON_DEPLOY_MOD_WSGI=$(trueorfalse False NEUTRON_DEPLOY_MOD_WSGI)
Sean M. Collins2a242512016-05-03 09:03:09 -040037NEUTRON_AGENT=${NEUTRON_AGENT:-openvswitch}
38NEUTRON_DIR=$DEST/neutron
Sean M. Collins2a242512016-05-03 09:03:09 -040039
Slawek Kaplonski24b65ad2021-06-22 15:31:46 +020040# If NEUTRON_ENFORCE_SCOPE == True, it will set "enforce_scope"
41# and "enforce_new_defaults" to True in the Neutron's config to enforce usage
42# of the new RBAC policies and scopes.
43NEUTRON_ENFORCE_SCOPE=$(trueorfalse False NEUTRON_ENFORCE_SCOPE)
44
Brian Haley9aaa5292017-09-20 14:23:05 -040045NEUTRON_DISTRIBUTED_ROUTING=$(trueorfalse False NEUTRON_DISTRIBUTED_ROUTING)
46# Distributed Virtual Router (DVR) configuration
47# Can be:
48# - ``legacy`` - No DVR functionality
49# - ``dvr_snat`` - Controller or single node DVR
50# - ``dvr`` - Compute node in multi-node DVR
51# - ``dvr_no_external`` - Compute node in multi-node DVR, no external network
52#
53# Default is 'dvr_snat' since it can handle both DVR and legacy routers
54NEUTRON_DVR_MODE=${NEUTRON_DVR_MODE:-dvr_snat}
55
Sean M. Collins2a242512016-05-03 09:03:09 -040056NEUTRON_BIN_DIR=$(get_python_exec_prefix)
57NEUTRON_DHCP_BINARY="neutron-dhcp-agent"
58
59NEUTRON_CONF_DIR=/etc/neutron
60NEUTRON_CONF=$NEUTRON_CONF_DIR/neutron.conf
61NEUTRON_META_CONF=$NEUTRON_CONF_DIR/metadata_agent.ini
Brian Haleya5491912019-07-31 12:18:39 -040062NEUTRON_META_DATA_HOST=${NEUTRON_META_DATA_HOST:-$(ipv6_unquote $SERVICE_HOST)}
Sean M. Collins2a242512016-05-03 09:03:09 -040063
64NEUTRON_DHCP_CONF=$NEUTRON_CONF_DIR/dhcp_agent.ini
65NEUTRON_L3_CONF=$NEUTRON_CONF_DIR/l3_agent.ini
66NEUTRON_AGENT_CONF=$NEUTRON_CONF_DIR/
Josh8f721622018-02-01 09:45:47 +020067NEUTRON_CREATE_INITIAL_NETWORKS=${NEUTRON_CREATE_INITIAL_NETWORKS:-True}
Sean M. Collins2a242512016-05-03 09:03:09 -040068
69NEUTRON_STATE_PATH=${NEUTRON_STATE_PATH:=$DATA_DIR/neutron}
Sean M. Collins2a242512016-05-03 09:03:09 -040070
Kevin Benton66b361b2017-06-13 00:31:01 -070071NEUTRON_UWSGI_CONF=$NEUTRON_CONF_DIR/neutron-api-uwsgi.ini
72
Sean M. Collins2a242512016-05-03 09:03:09 -040073# By default, use the ML2 plugin
YAMAMOTO Takashi4a55d2a2016-08-24 15:30:09 +090074NEUTRON_CORE_PLUGIN=${NEUTRON_CORE_PLUGIN:-ml2}
75NEUTRON_CORE_PLUGIN_CONF_FILENAME=${NEUTRON_CORE_PLUGIN_CONF_FILENAME:-ml2_conf.ini}
76NEUTRON_CORE_PLUGIN_CONF_PATH=$NEUTRON_CONF_DIR/plugins/$NEUTRON_CORE_PLUGIN
77NEUTRON_CORE_PLUGIN_CONF=$NEUTRON_CORE_PLUGIN_CONF_PATH/$NEUTRON_CORE_PLUGIN_CONF_FILENAME
Sean M. Collins2a242512016-05-03 09:03:09 -040078
Ihar Hrachyshkabf697f52017-02-23 12:09:01 +000079NEUTRON_METERING_AGENT_CONF_FILENAME=${NEUTRON_METERING_AGENT_CONF_FILENAME:-metering_agent.ini}
80NEUTRON_METERING_AGENT_CONF=$NEUTRON_CONF_DIR/$NEUTRON_METERING_AGENT_CONF_FILENAME
81
Sean M. Collins2a242512016-05-03 09:03:09 -040082NEUTRON_AGENT_BINARY=${NEUTRON_AGENT_BINARY:-neutron-$NEUTRON_AGENT-agent}
83NEUTRON_L3_BINARY=${NEUTRON_L3_BINARY:-neutron-l3-agent}
84NEUTRON_META_BINARY=${NEUTRON_META_BINARY:-neutron-metadata-agent}
Ihar Hrachyshkabf697f52017-02-23 12:09:01 +000085NEUTRON_METERING_BINARY=${NEUTRON_METERING_BINARY:-neutron-metering-agent}
Sean M. Collins2a242512016-05-03 09:03:09 -040086
87# Public facing bits
Sean Daguef3b2f4c2017-04-13 10:11:48 -040088if is_service_enabled tls-proxy; then
Sean M. Collins2a242512016-05-03 09:03:09 -040089 NEUTRON_SERVICE_PROTOCOL="https"
90fi
91NEUTRON_SERVICE_HOST=${NEUTRON_SERVICE_HOST:-$SERVICE_HOST}
92NEUTRON_SERVICE_PORT=${NEUTRON_SERVICE_PORT:-9696}
93NEUTRON_SERVICE_PORT_INT=${NEUTRON_SERVICE_PORT_INT:-19696}
94NEUTRON_SERVICE_PROTOCOL=${NEUTRON_SERVICE_PROTOCOL:-$SERVICE_PROTOCOL}
95
96NEUTRON_AUTH_STRATEGY=${NEUTRON_AUTH_STRATEGY:-keystone}
97NEUTRON_ROOTWRAP=$(get_rootwrap_location neutron)
98NEUTRON_ROOTWRAP_CONF_FILE=$NEUTRON_CONF_DIR/rootwrap.conf
Ihar Hrachyshkae65ab4a2017-02-24 17:47:55 +000099NEUTRON_ROOTWRAP_CMD="$NEUTRON_ROOTWRAP $NEUTRON_ROOTWRAP_CONF_FILE"
100NEUTRON_ROOTWRAP_DAEMON_CMD="$NEUTRON_ROOTWRAP-daemon $NEUTRON_ROOTWRAP_CONF_FILE"
Sean M. Collins2a242512016-05-03 09:03:09 -0400101
Ihar Hrachyshka615e1152017-02-23 10:41:51 +0000102# This is needed because _neutron_ovs_base_configure_l3_agent uses it to create
103# an external network bridge
104PUBLIC_BRIDGE=${PUBLIC_BRIDGE:-br-ex}
105PUBLIC_BRIDGE_MTU=${PUBLIC_BRIDGE_MTU:-1500}
106
Julia Kreger6e5b1382019-01-09 17:00:45 -0800107# Network type - default vxlan, however enables vlan based jobs to override
108# using the legacy environment variable as well as a new variable in greater
109# alignment with the naming scheme of this plugin.
110NEUTRON_TENANT_NETWORK_TYPE=${NEUTRON_TENANT_NETWORK_TYPE:-vxlan}
111
112NEUTRON_TENANT_VLAN_RANGE=${NEUTRON_TENANT_VLAN_RANGE:-${TENANT_VLAN_RANGE:-100:150}}
113
114# Physical network for VLAN network usage.
115NEUTRON_PHYSICAL_NETWORK=${NEUTRON_PHYSICAL_NETWORK:-}
116
Slawek Kaplonski1a21ccb2022-07-08 21:57:45 +0200117# The name of the service in the endpoint URL
118NEUTRON_ENDPOINT_SERVICE_NAME=${NEUTRON_ENDPOINT_SERVICE_NAME-"networking"}
119if [[ "$NEUTRON_DEPLOY_MOD_WSGI" == "True" && -z "$NEUTRON_ENDPOINT_SERVICE_NAME" ]]; then
120 NEUTRON_ENDPOINT_SERVICE_NAME="networking"
121fi
122
Julia Kreger6e5b1382019-01-09 17:00:45 -0800123
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900124# Additional neutron api config files
Sean Dagueafef8bf2017-03-06 14:07:23 -0500125declare -a -g _NEUTRON_SERVER_EXTRA_CONF_FILES_ABS
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900126
Sean M. Collins2a242512016-05-03 09:03:09 -0400127# Functions
128# ---------
129
130# Test if any Neutron services are enabled
131# is_neutron_enabled
132function is_neutron_enabled {
Clark Boylan902158b2017-05-30 14:11:09 -0700133 [[ ,${DISABLED_SERVICES} =~ ,"neutron" ]] && return 1
Sean M. Collins2a242512016-05-03 09:03:09 -0400134 [[ ,${ENABLED_SERVICES} =~ ,"neutron-" || ,${ENABLED_SERVICES} =~ ,"q-" ]] && return 0
135 return 1
136}
137
138# Test if any Neutron services are enabled
139# is_neutron_enabled
140function is_neutron_legacy_enabled {
Slawek Kaplonskia9a51ca2019-04-15 23:54:31 +0200141 # first we need to remove all "neutron-" from DISABLED_SERVICES list
142 disabled_services_copy=$(echo $DISABLED_SERVICES | sed 's/neutron-//g')
143 [[ ,${disabled_services_copy} =~ ,"neutron" ]] && return 1
Sean M. Collins2a242512016-05-03 09:03:09 -0400144 [[ ,${ENABLED_SERVICES} =~ ,"q-" ]] && return 0
145 return 1
146}
147
YAMAMOTO Takashic74315e2016-07-21 17:49:43 +0900148if is_neutron_legacy_enabled; then
149 source $TOP_DIR/lib/neutron-legacy
150fi
151
Sean M. Collins2a242512016-05-03 09:03:09 -0400152# cleanup_neutron() - Remove residual data files, anything left over from previous
153# runs that a clean run would need to clean up
154function cleanup_neutron_new {
elajkatc994dc42022-01-06 11:28:55 +0100155 deprecated "Using lib/neutron is deprecated, and it will be removed in AA release!"
Sean M. Collins2a242512016-05-03 09:03:09 -0400156 source $TOP_DIR/lib/neutron_plugins/${NEUTRON_AGENT}_agent
157 if is_neutron_ovs_base_plugin; then
158 neutron_ovs_base_cleanup
159 fi
160
161 if [[ $NEUTRON_AGENT == "linuxbridge" ]]; then
162 neutron_lb_cleanup
163 fi
164 # delete all namespaces created by neutron
165 for ns in $(sudo ip netns list | grep -o -E '(qdhcp|qrouter|qlbaas|fip|snat)-[0-9a-f-]*'); do
166 sudo ip netns delete ${ns}
167 done
168}
169
Ihar Hrachyshkae65ab4a2017-02-24 17:47:55 +0000170# configure_root_helper_options() - Configure agent rootwrap helper options
171function configure_root_helper_options {
172 local conffile=$1
173 iniset $conffile agent root_helper "sudo $NEUTRON_ROOTWRAP_CMD"
174 iniset $conffile agent root_helper_daemon "sudo $NEUTRON_ROOTWRAP_DAEMON_CMD"
175}
176
Sean M. Collins2a242512016-05-03 09:03:09 -0400177# configure_neutron() - Set config files, create data dirs, etc
178function configure_neutron_new {
elajkatc994dc42022-01-06 11:28:55 +0100179 deprecated "Using lib/neutron is deprecated, and it will be removed in AA release!"
Sean M. Collins2a242512016-05-03 09:03:09 -0400180 sudo install -d -o $STACK_USER $NEUTRON_CONF_DIR
181
182 (cd $NEUTRON_DIR && exec ./tools/generate_config_file_samples.sh)
183
184 cp $NEUTRON_DIR/etc/neutron.conf.sample $NEUTRON_CONF
185
186 configure_neutron_rootwrap
187
YAMAMOTO Takashi4a55d2a2016-08-24 15:30:09 +0900188 mkdir -p $NEUTRON_CORE_PLUGIN_CONF_PATH
Sean M. Collins2a242512016-05-03 09:03:09 -0400189
YAMAMOTO Takashi1df17c92017-05-01 17:00:42 +0900190 # NOTE(yamamoto): A decomposed plugin should prepare the config file in
191 # its devstack plugin.
192 if [ -f $NEUTRON_DIR/etc/neutron/plugins/$NEUTRON_CORE_PLUGIN/$NEUTRON_CORE_PLUGIN_CONF_FILENAME.sample ]; then
193 cp $NEUTRON_DIR/etc/neutron/plugins/$NEUTRON_CORE_PLUGIN/$NEUTRON_CORE_PLUGIN_CONF_FILENAME.sample $NEUTRON_CORE_PLUGIN_CONF
194 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400195
196 iniset $NEUTRON_CONF database connection `database_connection_url neutron`
197 iniset $NEUTRON_CONF DEFAULT state_path $NEUTRON_STATE_PATH
198 iniset $NEUTRON_CONF oslo_concurrency lock_path $NEUTRON_STATE_PATH/lock
199 iniset $NEUTRON_CONF DEFAULT use_syslog $SYSLOG
200
Gary Kottond2ef6152016-09-20 04:12:11 -0700201 iniset $NEUTRON_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Sean M. Collinsfbba3b92016-05-12 11:17:53 -0400202
Sean M. Collins5394cc12016-05-11 15:03:38 -0400203 iniset_rpc_backend neutron $NEUTRON_CONF
204
Sean M. Collins2a242512016-05-03 09:03:09 -0400205 # Neutron API server & Neutron plugin
206 if is_service_enabled neutron-api; then
207 local policy_file=$NEUTRON_CONF_DIR/policy.json
Sean M. Collins2a242512016-05-03 09:03:09 -0400208 # Allow neutron user to administer neutron to match neutron account
Akihiro Motoki80769c52018-11-23 05:18:40 +0900209 # NOTE(amotoki): This is required for nova works correctly with neutron.
210 if [ -f $NEUTRON_DIR/etc/policy.json ]; then
211 cp $NEUTRON_DIR/etc/policy.json $policy_file
212 sed -i 's/"context_is_admin": "role:admin"/"context_is_admin": "role:admin or user_name:neutron"/g' $policy_file
213 else
214 echo '{"context_is_admin": "role:admin or user_name:neutron"}' > $policy_file
215 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400216
217 cp $NEUTRON_DIR/etc/api-paste.ini $NEUTRON_CONF_DIR/api-paste.ini
218
YAMAMOTO Takashi4a55d2a2016-08-24 15:30:09 +0900219 iniset $NEUTRON_CONF DEFAULT core_plugin $NEUTRON_CORE_PLUGIN
Sean M. Collins2a242512016-05-03 09:03:09 -0400220
Sean M. Collins2a242512016-05-03 09:03:09 -0400221 iniset $NEUTRON_CONF DEFAULT policy_file $policy_file
Brian Haley9aaa5292017-09-20 14:23:05 -0400222 iniset $NEUTRON_CONF DEFAULT router_distributed $NEUTRON_DISTRIBUTED_ROUTING
Sean M. Collins2a242512016-05-03 09:03:09 -0400223
224 iniset $NEUTRON_CONF DEFAULT auth_strategy $NEUTRON_AUTH_STRATEGY
Dirk Mueller8ab64b32017-11-17 19:52:29 +0100225 configure_keystone_authtoken_middleware $NEUTRON_CONF neutron
226 configure_keystone_authtoken_middleware $NEUTRON_CONF nova nova
Sean M. Collins2a242512016-05-03 09:03:09 -0400227
Julia Kreger6e5b1382019-01-09 17:00:45 -0800228 # Configure tenant network type
229 iniset $NEUTRON_CORE_PLUGIN_CONF ml2 tenant_network_types $NEUTRON_TENANT_NETWORK_TYPE
Brian Haley9aaa5292017-09-20 14:23:05 -0400230
231 local mech_drivers="openvswitch"
232 if [[ "$NEUTRON_DISTRIBUTED_ROUTING" = "True" ]]; then
233 mech_drivers+=",l2population"
234 else
235 mech_drivers+=",linuxbridge"
236 fi
Takashi Kajinamicf0bf742022-07-13 22:34:47 +0900237 if [[ "$mech_drivers" == *"linuxbridge"* ]]; then
238 iniset $NEUTRON_CONF experimental linuxbridge True
239 fi
240
Brian Haley9aaa5292017-09-20 14:23:05 -0400241 iniset $NEUTRON_CORE_PLUGIN_CONF ml2 mechanism_drivers $mech_drivers
Brian Haleyc869d592020-02-28 14:55:08 -0500242 iniset $NEUTRON_CORE_PLUGIN_CONF ml2 overlay_ip_version $TUNNEL_IP_VERSION
Brian Haley9aaa5292017-09-20 14:23:05 -0400243
YAMAMOTO Takashi4a55d2a2016-08-24 15:30:09 +0900244 iniset $NEUTRON_CORE_PLUGIN_CONF ml2_type_vxlan vni_ranges 1001:2000
Harald Jensåsf1a794e2019-08-21 10:49:57 +0200245 iniset $NEUTRON_CORE_PLUGIN_CONF ml2_type_flat flat_networks $PUBLIC_NETWORK_NAME
Julia Kreger6e5b1382019-01-09 17:00:45 -0800246 if [[ "$NEUTRON_TENANT_NETWORK_TYPE" =~ "vlan" ]] && [[ "$NEUTRON_PHYSICAL_NETWORK" != "" ]]; then
247 iniset $NEUTRON_CORE_PLUGIN_CONF ml2_type_vlan network_vlan_ranges ${NEUTRON_PHYSICAL_NETWORK}:${NEUTRON_TENANT_VLAN_RANGE}
248 fi
Matt Riedemannc9c9d312016-09-15 20:33:22 -0400249 if [[ "$NEUTRON_PORT_SECURITY" = "True" ]]; then
Ihar Hrachyshkaf511c362017-03-07 06:31:49 +0000250 neutron_ml2_extension_driver_add port_security
Matt Riedemannc9c9d312016-09-15 20:33:22 -0400251 fi
Slawek Kaplonski24b65ad2021-06-22 15:31:46 +0200252 configure_rbac_policies
Sean M. Collins2a242512016-05-03 09:03:09 -0400253 fi
254
255 # Neutron OVS or LB agent
256 if is_service_enabled neutron-agent; then
YAMAMOTO Takashi4a55d2a2016-08-24 15:30:09 +0900257 iniset $NEUTRON_CORE_PLUGIN_CONF agent tunnel_types vxlan
258 iniset $NEUTRON_CORE_PLUGIN_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Ihar Hrachyshkae65ab4a2017-02-24 17:47:55 +0000259 configure_root_helper_options $NEUTRON_CORE_PLUGIN_CONF
Sean M. Collins2a242512016-05-03 09:03:09 -0400260
261 # Configure the neutron agent
262 if [[ $NEUTRON_AGENT == "linuxbridge" ]]; then
Sean M. Collinsedcb7e52016-12-15 11:29:28 -0500263 iniset $NEUTRON_CORE_PLUGIN_CONF securitygroup firewall_driver iptables
Brian Haleyc869d592020-02-28 14:55:08 -0500264 iniset $NEUTRON_CORE_PLUGIN_CONF vxlan local_ip $TUNNEL_ENDPOINT_IP
Jakub Libosvara99ab702018-05-14 16:12:52 +0200265 elif [[ $NEUTRON_AGENT == "openvswitch" ]]; then
266 iniset $NEUTRON_CORE_PLUGIN_CONF securitygroup firewall_driver openvswitch
Brian Haleyc869d592020-02-28 14:55:08 -0500267 iniset $NEUTRON_CORE_PLUGIN_CONF ovs local_ip $TUNNEL_ENDPOINT_IP
Brian Haley9aaa5292017-09-20 14:23:05 -0400268
269 if [[ "$NEUTRON_DISTRIBUTED_ROUTING" = "True" ]]; then
270 iniset $NEUTRON_CORE_PLUGIN_CONF agent l2_population True
271 iniset $NEUTRON_CORE_PLUGIN_CONF agent enable_distributed_routing True
Swaminathan Vasudevan9bf7e262019-05-02 13:45:46 -0700272 iniset $NEUTRON_CORE_PLUGIN_CONF agent arp_responder True
Brian Haley9aaa5292017-09-20 14:23:05 -0400273 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400274 fi
Ihar Hrachyshkab3a210f2016-09-29 13:26:30 +0000275
Denis Buliga0bf75a42017-02-06 16:56:46 +0200276 if ! running_in_container; then
277 enable_kernel_bridge_firewall
278 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400279 fi
280
281 # DHCP Agent
282 if is_service_enabled neutron-dhcp; then
283 cp $NEUTRON_DIR/etc/dhcp_agent.ini.sample $NEUTRON_DHCP_CONF
284
Gary Kottond2ef6152016-09-20 04:12:11 -0700285 iniset $NEUTRON_DHCP_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Sean Dague78801c12016-08-04 14:10:07 -0400286 # make it so we have working DNS from guests
287 iniset $NEUTRON_DHCP_CONF DEFAULT dnsmasq_local_resolv True
288
Ihar Hrachyshkae65ab4a2017-02-24 17:47:55 +0000289 configure_root_helper_options $NEUTRON_DHCP_CONF
Sean M. Collins2a242512016-05-03 09:03:09 -0400290 iniset $NEUTRON_DHCP_CONF DEFAULT interface_driver $NEUTRON_AGENT
291 neutron_plugin_configure_dhcp_agent $NEUTRON_DHCP_CONF
292 fi
293
294 if is_service_enabled neutron-l3; then
295 cp $NEUTRON_DIR/etc/l3_agent.ini.sample $NEUTRON_L3_CONF
296 iniset $NEUTRON_L3_CONF DEFAULT interface_driver $NEUTRON_AGENT
YAMAMOTO Takashid9ec4202016-07-21 16:14:52 +0900297 neutron_service_plugin_class_add router
Ihar Hrachyshkae65ab4a2017-02-24 17:47:55 +0000298 configure_root_helper_options $NEUTRON_L3_CONF
Gary Kottond2ef6152016-09-20 04:12:11 -0700299 iniset $NEUTRON_L3_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Sean M. Collins2a242512016-05-03 09:03:09 -0400300 neutron_plugin_configure_l3_agent $NEUTRON_L3_CONF
Ihar Hrachyshkae3915932017-02-24 06:24:47 +0000301
302 # Configure the neutron agent to serve external network ports
303 if [[ $NEUTRON_AGENT == "linuxbridge" ]]; then
304 iniset $NEUTRON_CORE_PLUGIN_CONF linux_bridge bridge_mappings "$PUBLIC_NETWORK_NAME:$PUBLIC_BRIDGE"
305 else
306 iniset $NEUTRON_CORE_PLUGIN_CONF ovs bridge_mappings "$PUBLIC_NETWORK_NAME:$PUBLIC_BRIDGE"
307 fi
Brian Haley9aaa5292017-09-20 14:23:05 -0400308
309 if [[ "$NEUTRON_DISTRIBUTED_ROUTING" = "True" ]]; then
310 iniset $NEUTRON_L3_CONF DEFAULT agent_mode $NEUTRON_DVR_MODE
311 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400312 fi
313
314 # Metadata
Sean M. Collins1cd28282016-05-11 15:07:19 -0400315 if is_service_enabled neutron-metadata-agent; then
Sean M. Collins2a242512016-05-03 09:03:09 -0400316 cp $NEUTRON_DIR/etc/metadata_agent.ini.sample $NEUTRON_META_CONF
317
Gary Kottond2ef6152016-09-20 04:12:11 -0700318 iniset $NEUTRON_META_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Brian Haleya5491912019-07-31 12:18:39 -0400319 iniset $NEUTRON_META_CONF DEFAULT nova_metadata_host $NEUTRON_META_DATA_HOST
Armando Migliaccio06f2ea22017-02-02 16:47:00 -0800320 iniset $NEUTRON_META_CONF DEFAULT metadata_workers $API_WORKERS
Ihar Hrachyshkae65ab4a2017-02-24 17:47:55 +0000321 # TODO(ihrachys) do we really need to set rootwrap for metadata agent?
322 configure_root_helper_options $NEUTRON_META_CONF
Sean M. Collins2a242512016-05-03 09:03:09 -0400323
324 # TODO(dtroyer): remove the v2.0 hard code below
Sean Daguec13b8a12017-04-20 06:54:51 -0400325 iniset $NEUTRON_META_CONF DEFAULT auth_url $KEYSTONE_SERVICE_URI
Dirk Mueller8ab64b32017-11-17 19:52:29 +0100326 configure_keystone_authtoken_middleware $NEUTRON_META_CONF neutron DEFAULT
Sean M. Collins2a242512016-05-03 09:03:09 -0400327 fi
328
329 # Format logging
Sean Dague27f66e92017-05-02 09:08:17 -0400330 setup_logging $NEUTRON_CONF
Sean M. Collins2a242512016-05-03 09:03:09 -0400331
Kevin Benton66b361b2017-06-13 00:31:01 -0700332 if is_service_enabled tls-proxy && [ "$NEUTRON_DEPLOY_MOD_WSGI" == "False" ]; then
Sean M. Collins2a242512016-05-03 09:03:09 -0400333 # Set the service port for a proxy to take the original
334 iniset $NEUTRON_CONF DEFAULT bind_port "$NEUTRON_SERVICE_PORT_INT"
Jens Harbott411c34d2017-08-29 14:40:26 +0000335 iniset $NEUTRON_CONF oslo_middleware enable_proxy_headers_parsing True
Sean M. Collins2a242512016-05-03 09:03:09 -0400336 fi
337
Sean M. Collins8063fee2016-05-24 11:27:36 -0700338 # Metering
339 if is_service_enabled neutron-metering; then
Ihar Hrachyshkabf697f52017-02-23 12:09:01 +0000340 cp $NEUTRON_DIR/etc/metering_agent.ini.sample $NEUTRON_METERING_AGENT_CONF
YAMAMOTO Takashid9ec4202016-07-21 16:14:52 +0900341 neutron_service_plugin_class_add metering
Sean M. Collins8063fee2016-05-24 11:27:36 -0700342 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400343}
344
345# configure_neutron_rootwrap() - configure Neutron's rootwrap
346function configure_neutron_rootwrap {
Sean M. Collins2a242512016-05-03 09:03:09 -0400347 # Deploy new rootwrap filters files (owned by root).
348 # Wipe any existing rootwrap.d files first
349 if [[ -d $NEUTRON_CONF_DIR/rootwrap.d ]]; then
350 sudo rm -rf $NEUTRON_CONF_DIR/rootwrap.d
351 fi
352
353 # Deploy filters to /etc/neutron/rootwrap.d
354 sudo install -d -o root -g root -m 755 $NEUTRON_CONF_DIR/rootwrap.d
355 sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/neutron/rootwrap.d/*.filters $NEUTRON_CONF_DIR/rootwrap.d
356
357 # Set up ``rootwrap.conf``, pointing to ``$NEUTRON_CONF_DIR/rootwrap.d``
358 sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/rootwrap.conf $NEUTRON_CONF_DIR
359 sudo sed -e "s:^filters_path=.*$:filters_path=$NEUTRON_CONF_DIR/rootwrap.d:" -i $NEUTRON_CONF_DIR/rootwrap.conf
360
361 # Set up the rootwrap sudoers for Neutron
362 tempfile=`mktemp`
Ihar Hrachyshkae65ab4a2017-02-24 17:47:55 +0000363 echo "$STACK_USER ALL=(root) NOPASSWD: $NEUTRON_ROOTWRAP_CMD *" >$tempfile
364 echo "$STACK_USER ALL=(root) NOPASSWD: $NEUTRON_ROOTWRAP_DAEMON_CMD" >>$tempfile
Sean M. Collins2a242512016-05-03 09:03:09 -0400365 chmod 0440 $tempfile
366 sudo chown root:root $tempfile
367 sudo mv $tempfile /etc/sudoers.d/neutron-rootwrap
368}
369
370# Make Neutron-required changes to nova.conf
Lucas Alvares Gomese6385932018-06-28 11:00:28 +0100371# Takes a single optional argument which is the config file to update,
372# if not passed $NOVA_CONF is used.
Sean M. Collins2a242512016-05-03 09:03:09 -0400373function configure_neutron_nova_new {
elajkatc994dc42022-01-06 11:28:55 +0100374 deprecated "Using lib/neutron is deprecated, and it will be removed in AA release!"
Lucas Alvares Gomese6385932018-06-28 11:00:28 +0100375 local conf=${1:-$NOVA_CONF}
Matt Riedemanne95f2a32018-06-18 16:17:29 -0400376 iniset $conf neutron auth_type "password"
377 iniset $conf neutron auth_url "$KEYSTONE_SERVICE_URI"
378 iniset $conf neutron username neutron
379 iniset $conf neutron password "$SERVICE_PASSWORD"
380 iniset $conf neutron user_domain_name "Default"
381 iniset $conf neutron project_name "$SERVICE_TENANT_NAME"
382 iniset $conf neutron project_domain_name "Default"
383 iniset $conf neutron auth_strategy $NEUTRON_AUTH_STRATEGY
384 iniset $conf neutron region_name "$REGION_NAME"
Sean M. Collins2a242512016-05-03 09:03:09 -0400385
Gary Kotton88f85582016-08-14 06:55:42 -0700386 # optionally set options in nova_conf
Matt Riedemanne95f2a32018-06-18 16:17:29 -0400387 neutron_plugin_create_nova_conf $conf
Gary Kotton88f85582016-08-14 06:55:42 -0700388
Sean M. Collins1cd28282016-05-11 15:07:19 -0400389 if is_service_enabled neutron-metadata-agent; then
Matt Riedemanne95f2a32018-06-18 16:17:29 -0400390 iniset $conf neutron service_metadata_proxy "True"
Sean M. Collins2a242512016-05-03 09:03:09 -0400391 fi
392
393}
394
395# Tenant User Roles
396# ------------------------------------------------------------------
397# service neutron admin # if enabled
398
399# create_neutron_accounts() - Create required service accounts
400function create_neutron_accounts_new {
elajkatc994dc42022-01-06 11:28:55 +0100401 deprecated "Using lib/neutron is deprecated, and it will be removed in AA release!"
Kevin Benton66b361b2017-06-13 00:31:01 -0700402 local neutron_url
403
404 if [ "$NEUTRON_DEPLOY_MOD_WSGI" == "True" ]; then
Slawek Kaplonski1a21ccb2022-07-08 21:57:45 +0200405 neutron_url=$NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST/
Kevin Benton66b361b2017-06-13 00:31:01 -0700406 else
407 neutron_url=$NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT/
408 fi
Slawek Kaplonski1a21ccb2022-07-08 21:57:45 +0200409 if [ ! -z "$NEUTRON_ENDPOINT_SERVICE_NAME" ]; then
410 neutron_url=$neutron_url$NEUTRON_ENDPOINT_SERVICE_NAME
411 fi
Kevin Benton66b361b2017-06-13 00:31:01 -0700412
413
Sean M. Collins2a242512016-05-03 09:03:09 -0400414 if [[ "$ENABLED_SERVICES" =~ "neutron-api" ]]; then
415
416 create_service_user "neutron"
417
418 neutron_service=$(get_or_create_service "neutron" \
419 "network" "Neutron Service")
420 get_or_create_endpoint $neutron_service \
Kevin Benton66b361b2017-06-13 00:31:01 -0700421 "$REGION_NAME" "$neutron_url"
Sean M. Collins2a242512016-05-03 09:03:09 -0400422 fi
423}
424
Sean M. Collins2a242512016-05-03 09:03:09 -0400425# init_neutron() - Initialize databases, etc.
426function init_neutron_new {
427
elajkatc994dc42022-01-06 11:28:55 +0100428 deprecated "Using lib/neutron is deprecated, and it will be removed in AA release!"
Sean M. Collins2a242512016-05-03 09:03:09 -0400429 recreate_database neutron
430
Clark Boylan633dbc32017-06-14 12:09:21 -0700431 time_start "dbsync"
Sean M. Collins2a242512016-05-03 09:03:09 -0400432 # Run Neutron db migrations
Ihar Hrachyshka19f4b3f2017-02-23 20:44:18 +0000433 $NEUTRON_BIN_DIR/neutron-db-manage upgrade heads
Clark Boylan633dbc32017-06-14 12:09:21 -0700434 time_stop "dbsync"
Sean M. Collins2a242512016-05-03 09:03:09 -0400435}
436
437# install_neutron() - Collect source and prepare
438function install_neutron_new {
elajkatc994dc42022-01-06 11:28:55 +0100439 deprecated "Using lib/neutron is deprecated, and it will be removed in AA release!"
Sean M. Collins2a242512016-05-03 09:03:09 -0400440 git_clone $NEUTRON_REPO $NEUTRON_DIR $NEUTRON_BRANCH
441 setup_develop $NEUTRON_DIR
442
443 # Install neutron-lib from git so we make sure we're testing
444 # the latest code.
445 if use_library_from_git "neutron-lib"; then
446 git_clone_by_name "neutron-lib"
447 setup_dev_lib "neutron-lib"
448 fi
449
450 # L3 service requires radvd
451 if is_service_enabled neutron-l3; then
452 install_package radvd
453 fi
454
455 if is_service_enabled neutron-agent neutron-dhcp neutron-l3; then
456 #TODO(sc68cal) - kind of ugly
457 source $TOP_DIR/lib/neutron_plugins/${NEUTRON_AGENT}_agent
458 neutron_plugin_install_agent_packages
459 fi
460
461}
462
463# install_neutronclient() - Collect source and prepare
464function install_neutronclient {
465 if use_library_from_git "python-neutronclient"; then
466 git_clone_by_name "python-neutronclient"
467 setup_dev_lib "python-neutronclient"
468 sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-neutronclient"]}/tools/,/etc/bash_completion.d/}neutron.bash_completion
469 fi
470}
471
472# start_neutron_api() - Start the API process ahead of other things
473function start_neutron_api {
474 local service_port=$NEUTRON_SERVICE_PORT
475 local service_protocol=$NEUTRON_SERVICE_PROTOCOL
Kevin Benton66b361b2017-06-13 00:31:01 -0700476 local neutron_url
Sean M. Collins2a242512016-05-03 09:03:09 -0400477 if is_service_enabled tls-proxy; then
478 service_port=$NEUTRON_SERVICE_PORT_INT
479 service_protocol="http"
480 fi
481
YAMAMOTO Takashied887d82017-02-22 14:21:33 -0500482 local opts=""
483 opts+=" --config-file $NEUTRON_CONF"
484 opts+=" --config-file $NEUTRON_CORE_PLUGIN_CONF"
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900485 local cfg_file
486 for cfg_file in ${_NEUTRON_SERVER_EXTRA_CONF_FILES_ABS[@]}; do
487 opts+=" --config-file $cfg_file"
488 done
489
Kevin Benton66b361b2017-06-13 00:31:01 -0700490 if [ "$NEUTRON_DEPLOY_MOD_WSGI" == "True" ]; then
Ian Wienand312517d2018-06-22 22:23:29 +1000491 run_process neutron-api "$(which uwsgi) --procname-prefix neutron-api --ini $NEUTRON_UWSGI_CONF"
Slawek Kaplonski1a21ccb2022-07-08 21:57:45 +0200492 neutron_url=$service_protocol://$NEUTRON_SERVICE_HOST/
Kevin Benton66b361b2017-06-13 00:31:01 -0700493 enable_service neutron-rpc-server
494 run_process neutron-rpc-server "$NEUTRON_BIN_DIR/neutron-rpc-server $opts"
495 else
496 # Start the Neutron service
497 # TODO(sc68cal) Stop hard coding this
498 run_process neutron-api "$NEUTRON_BIN_DIR/neutron-server $opts"
Slawek Kaplonski1a21ccb2022-07-08 21:57:45 +0200499 neutron_url=$service_protocol://$NEUTRON_SERVICE_HOST:$service_port/
Kevin Benton66b361b2017-06-13 00:31:01 -0700500 # Start proxy if enabled
501 if is_service_enabled tls-proxy; then
502 start_tls_proxy neutron '*' $NEUTRON_SERVICE_PORT $NEUTRON_SERVICE_HOST $NEUTRON_SERVICE_PORT_INT
503 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400504 fi
Slawek Kaplonski1a21ccb2022-07-08 21:57:45 +0200505 if [ ! -z "$NEUTRON_ENDPOINT_SERVICE_NAME" ]; then
506 neutron_url=$neutron_url$NEUTRON_ENDPOINT_SERVICE_NAME
507 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400508
Kevin Benton66b361b2017-06-13 00:31:01 -0700509 if ! wait_for_service $SERVICE_TIMEOUT $neutron_url; then
510 die $LINENO "neutron-api did not start"
Sean M. Collins2a242512016-05-03 09:03:09 -0400511 fi
512}
513
Sean Dague0eebeb42017-08-30 14:16:58 -0400514# start_neutron() - Start running processes
Sean M. Collins2a242512016-05-03 09:03:09 -0400515function start_neutron_new {
elajkatc994dc42022-01-06 11:28:55 +0100516 deprecated "Using lib/neutron is deprecated, and it will be removed in AA release!"
Sean M. Collins2a242512016-05-03 09:03:09 -0400517 # Start up the neutron agents if enabled
518 # TODO(sc68cal) Make this pluggable so different DevStack plugins for different Neutron plugins
519 # can resolve the $NEUTRON_AGENT_BINARY
520 if is_service_enabled neutron-agent; then
Ihar Hrachyshka19f4b3f2017-02-23 20:44:18 +0000521 # TODO(ihrachys) stop loading ml2_conf.ini into agents, instead load agent specific files
522 run_process neutron-agent "$NEUTRON_BIN_DIR/$NEUTRON_AGENT_BINARY --config-file $NEUTRON_CONF --config-file $NEUTRON_CORE_PLUGIN_CONF"
Sean M. Collins2a242512016-05-03 09:03:09 -0400523 fi
524 if is_service_enabled neutron-dhcp; then
525 neutron_plugin_configure_dhcp_agent $NEUTRON_DHCP_CONF
Ihar Hrachyshka19f4b3f2017-02-23 20:44:18 +0000526 run_process neutron-dhcp "$NEUTRON_BIN_DIR/$NEUTRON_DHCP_BINARY --config-file $NEUTRON_CONF --config-file $NEUTRON_DHCP_CONF"
Sean M. Collins2a242512016-05-03 09:03:09 -0400527 fi
528 if is_service_enabled neutron-l3; then
Ihar Hrachyshka19f4b3f2017-02-23 20:44:18 +0000529 run_process neutron-l3 "$NEUTRON_BIN_DIR/$NEUTRON_L3_BINARY --config-file $NEUTRON_CONF --config-file $NEUTRON_L3_CONF"
YAMAMOTO Takashic07170a2016-07-20 19:44:05 +0900530 fi
Josh8f721622018-02-01 09:45:47 +0200531 if is_service_enabled neutron-api && [[ "$NEUTRON_CREATE_INITIAL_NETWORKS" == "True" ]]; then
YAMAMOTO Takashi07edde12016-10-19 19:21:00 +0000532 # XXX(sc68cal) - Here's where plugins can wire up their own networks instead
533 # of the code in lib/neutron_plugins/services/l3
534 if type -p neutron_plugin_create_initial_networks > /dev/null; then
535 neutron_plugin_create_initial_networks
536 else
537 # XXX(sc68cal) Load up the built in Neutron networking code and build a topology
538 source $TOP_DIR/lib/neutron_plugins/services/l3
539 # Create the networks using servic
540 create_neutron_initial_network
541 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400542 fi
Sean M. Collins1cd28282016-05-11 15:07:19 -0400543 if is_service_enabled neutron-metadata-agent; then
Ihar Hrachyshka19f4b3f2017-02-23 20:44:18 +0000544 run_process neutron-metadata-agent "$NEUTRON_BIN_DIR/$NEUTRON_META_BINARY --config-file $NEUTRON_CONF --config-file $NEUTRON_META_CONF"
Sean M. Collins2a242512016-05-03 09:03:09 -0400545 fi
Sean M. Collins8063fee2016-05-24 11:27:36 -0700546
547 if is_service_enabled neutron-metering; then
Ihar Hrachyshka868746b2017-09-13 15:44:18 -0600548 run_process neutron-metering "$NEUTRON_BIN_DIR/$NEUTRON_METERING_BINARY --config-file $NEUTRON_CONF --config-file $NEUTRON_METERING_AGENT_CONF"
Sean M. Collins8063fee2016-05-24 11:27:36 -0700549 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400550}
551
Sean Dague0eebeb42017-08-30 14:16:58 -0400552# stop_neutron() - Stop running processes
Sean M. Collins2a242512016-05-03 09:03:09 -0400553function stop_neutron_new {
elajkatc994dc42022-01-06 11:28:55 +0100554 deprecated "Using lib/neutron is deprecated, and it will be removed in AA release!"
Sean M. Collins2a242512016-05-03 09:03:09 -0400555 for serv in neutron-api neutron-agent neutron-l3; do
556 stop_process $serv
557 done
558
Kevin Benton66b361b2017-06-13 00:31:01 -0700559 if is_service_enabled neutron-rpc-server; then
560 stop_process neutron-rpc-server
561 fi
562
Sean M. Collins2a242512016-05-03 09:03:09 -0400563 if is_service_enabled neutron-dhcp; then
564 stop_process neutron-dhcp
565 pid=$(ps aux | awk '/[d]nsmasq.+interface=(tap|ns-)/ { print $2 }')
566 [ ! -z "$pid" ] && sudo kill -9 $pid
567 fi
568
Sean M. Collins1cd28282016-05-11 15:07:19 -0400569 if is_service_enabled neutron-metadata-agent; then
Sean M. Collins1cd28282016-05-11 15:07:19 -0400570 stop_process neutron-metadata-agent
Sean M. Collins2a242512016-05-03 09:03:09 -0400571 fi
572}
573
YAMAMOTO Takashid9ec4202016-07-21 16:14:52 +0900574# neutron_service_plugin_class_add() - add service plugin class
575function neutron_service_plugin_class_add_new {
elajkatc994dc42022-01-06 11:28:55 +0100576 deprecated "Using lib/neutron is deprecated, and it will be removed in AA release!"
YAMAMOTO Takashid9ec4202016-07-21 16:14:52 +0900577 local service_plugin_class=$1
578 local plugins=""
579
580 plugins=$(iniget $NEUTRON_CONF DEFAULT service_plugins)
YAMAMOTO Takashi84e45c92017-02-22 14:25:14 -0500581 if [ $plugins ]; then
582 plugins+=","
583 fi
584 plugins+="${service_plugin_class}"
YAMAMOTO Takashid9ec4202016-07-21 16:14:52 +0900585 iniset $NEUTRON_CONF DEFAULT service_plugins $plugins
586}
587
Ihar Hrachyshkaf511c362017-03-07 06:31:49 +0000588function _neutron_ml2_extension_driver_add {
589 local driver=$1
590 local drivers=""
591
592 drivers=$(iniget $NEUTRON_CORE_PLUGIN_CONF ml2 extension_drivers)
593 if [ $drivers ]; then
594 drivers+=","
595 fi
596 drivers+="${driver}"
597 iniset $NEUTRON_CORE_PLUGIN_CONF ml2 extension_drivers $drivers
598}
599
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900600function neutron_server_config_add_new {
elajkatc994dc42022-01-06 11:28:55 +0100601 deprecated "Using lib/neutron is deprecated, and it will be removed in AA release!"
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900602 _NEUTRON_SERVER_EXTRA_CONF_FILES_ABS+=($1)
603}
604
YAMAMOTO Takashic043b6f2017-02-23 22:30:08 -0500605# neutron_deploy_rootwrap_filters() - deploy rootwrap filters
606function neutron_deploy_rootwrap_filters_new {
elajkatc994dc42022-01-06 11:28:55 +0100607 deprecated "Using lib/neutron is deprecated, and it will be removed in AA release!"
YAMAMOTO Takashic043b6f2017-02-23 22:30:08 -0500608 local srcdir=$1
609 sudo install -d -o root -g root -m 755 $NEUTRON_CONF_DIR/rootwrap.d
610 sudo install -o root -g root -m 644 $srcdir/etc/neutron/rootwrap.d/*.filters $NEUTRON_CONF_DIR/rootwrap.d
611}
612
Sean M. Collins2a242512016-05-03 09:03:09 -0400613# Dispatch functions
614# These are needed for compatibility between the old and new implementations
615# where there are function name overlaps. These will be removed when
616# neutron-legacy is removed.
617# TODO(sc68cal) Remove when neutron-legacy is no more.
618function cleanup_neutron {
Kevin Benton66b361b2017-06-13 00:31:01 -0700619 if [ "$NEUTRON_DEPLOY_MOD_WSGI" == "True" ]; then
620 stop_process neutron-api
621 stop_process neutron-rpc-server
622 remove_uwsgi_config "$NEUTRON_UWSGI_CONF" "$NEUTRON_BIN_DIR/neutron-api"
623 sudo rm -f $(apache_site_config_for neutron-api)
624 fi
625
Sean M. Collins2a242512016-05-03 09:03:09 -0400626 if is_neutron_legacy_enabled; then
627 # Call back to old function
628 cleanup_mutnauq "$@"
629 else
630 cleanup_neutron_new "$@"
631 fi
632}
633
634function configure_neutron {
635 if is_neutron_legacy_enabled; then
636 # Call back to old function
637 configure_mutnauq "$@"
638 else
639 configure_neutron_new "$@"
640 fi
Kevin Benton66b361b2017-06-13 00:31:01 -0700641
642 if [ "$NEUTRON_DEPLOY_MOD_WSGI" == "True" ]; then
643 write_uwsgi_config "$NEUTRON_UWSGI_CONF" "$NEUTRON_BIN_DIR/neutron-api" "/networking"
644 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400645}
646
Slawek Kaplonski24b65ad2021-06-22 15:31:46 +0200647# configure_rbac_policies() - Configure Neutron to enforce new RBAC
648# policies and scopes if NEUTRON_ENFORCE_SCOPE == True
649function configure_rbac_policies {
Slawek Kaplonskice1ae9d2022-06-29 09:56:12 +0200650 if [[ "$NEUTRON_ENFORCE_SCOPE" == "True" || "$ENFORCE_SCOPE" == "True" ]]; then
Slawek Kaplonski24b65ad2021-06-22 15:31:46 +0200651 iniset $NEUTRON_CONF oslo_policy enforce_new_defaults True
652 iniset $NEUTRON_CONF oslo_policy enforce_scope True
653 else
654 iniset $NEUTRON_CONF oslo_policy enforce_new_defaults False
655 iniset $NEUTRON_CONF oslo_policy enforce_scope False
656 fi
657}
658
659
Sean M. Collins2a242512016-05-03 09:03:09 -0400660function configure_neutron_nova {
661 if is_neutron_legacy_enabled; then
662 # Call back to old function
Matt Riedemanne95f2a32018-06-18 16:17:29 -0400663 create_nova_conf_neutron $NOVA_CONF
664 if [[ "${CELLSV2_SETUP}" == "superconductor" ]]; then
665 for i in $(seq 1 $NOVA_NUM_CELLS); do
666 local conf
667 conf=$(conductor_conf $i)
668 create_nova_conf_neutron $conf
669 done
670 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400671 else
Matt Riedemanne95f2a32018-06-18 16:17:29 -0400672 configure_neutron_nova_new $NOVA_CONF
673 if [[ "${CELLSV2_SETUP}" == "superconductor" ]]; then
674 for i in $(seq 1 $NOVA_NUM_CELLS); do
675 local conf
676 conf=$(conductor_conf $i)
677 configure_neutron_nova_new $conf
678 done
679 fi
Sean M. Collins2a242512016-05-03 09:03:09 -0400680 fi
681}
682
683function create_neutron_accounts {
684 if is_neutron_legacy_enabled; then
685 # Call back to old function
686 create_mutnauq_accounts "$@"
687 else
688 create_neutron_accounts_new "$@"
689 fi
690}
691
692function init_neutron {
693 if is_neutron_legacy_enabled; then
694 # Call back to old function
695 init_mutnauq "$@"
696 else
697 init_neutron_new "$@"
698 fi
699}
700
701function install_neutron {
702 if is_neutron_legacy_enabled; then
703 # Call back to old function
704 install_mutnauq "$@"
705 else
706 install_neutron_new "$@"
707 fi
708}
709
YAMAMOTO Takashid9ec4202016-07-21 16:14:52 +0900710function neutron_service_plugin_class_add {
711 if is_neutron_legacy_enabled; then
712 # Call back to old function
713 _neutron_service_plugin_class_add "$@"
714 else
715 neutron_service_plugin_class_add_new "$@"
716 fi
717}
718
Ihar Hrachyshkaf511c362017-03-07 06:31:49 +0000719function neutron_ml2_extension_driver_add {
720 if is_neutron_legacy_enabled; then
721 # Call back to old function
722 _neutron_ml2_extension_driver_add_old "$@"
723 else
724 _neutron_ml2_extension_driver_add "$@"
725 fi
726}
727
YAMAMOTO Takashic74315e2016-07-21 17:49:43 +0900728function install_neutron_agent_packages {
729 if is_neutron_legacy_enabled; then
730 # Call back to old function
731 install_neutron_agent_packages_mutnauq "$@"
732 else
733 :
734 fi
735}
736
YAMAMOTO Takashieede9dd2016-07-15 10:27:53 +0900737function neutron_server_config_add {
738 if is_neutron_legacy_enabled; then
739 # Call back to old function
740 mutnauq_server_config_add "$@"
741 else
742 neutron_server_config_add_new "$@"
743 fi
744}
745
Sean M. Collins2a242512016-05-03 09:03:09 -0400746function start_neutron {
747 if is_neutron_legacy_enabled; then
748 # Call back to old function
749 start_mutnauq_l2_agent "$@"
750 start_mutnauq_other_agents "$@"
751 else
752 start_neutron_new "$@"
753 fi
754}
755
756function stop_neutron {
757 if is_neutron_legacy_enabled; then
758 # Call back to old function
759 stop_mutnauq "$@"
760 else
761 stop_neutron_new "$@"
762 fi
763}
764
YAMAMOTO Takashic043b6f2017-02-23 22:30:08 -0500765function neutron_deploy_rootwrap_filters {
766 if is_neutron_legacy_enabled; then
767 # Call back to old function
768 _neutron_deploy_rootwrap_filters "$@"
769 else
770 neutron_deploy_rootwrap_filters_new "$@"
771 fi
772}
773
Sean M. Collins2a242512016-05-03 09:03:09 -0400774# Restore xtrace
775$XTRACE