601c66666f
As of today we run some agents, like neutron-ovn-metadata agent as root user, since it needs access to ovsdb socket, which has 750 permissions by default. With that, for OVN we already use connection via host:port to the same ovsdb manager, which allows to run it as an arbitrary user. In order to align connection methods and to run services with lower privileges we introduce couple of new variables that allow to create valid connection strings for both OpenFlow listeners and regular connection to the manager. Change-Id: Iceab27aa1fdacc8b13f7ef6974b6a9076b8b7cd9
18 lines
636 B
YAML
18 lines
636 B
YAML
---
|
|
features:
|
|
- |
|
|
Added new variables to os_neutron role that allow to adjust connection
|
|
to OVS manager:
|
|
|
|
* ``neutron_ovsdb_manager_host``: defaults to 127.0.0.1
|
|
* ``neutron_ovsdb_manager_port``: defaults to 6640
|
|
* ``neutron_ovsdb_manager_proto``: defaults to tcp
|
|
* ``neutron_ovsdb_manager_connection``: Combines proto, host and port
|
|
into a valid connection string for neutron plugins.
|
|
|
|
deprecations:
|
|
- |
|
|
Variable ``neutron_ovs_socket_path`` has been deprecated and will be
|
|
silently ignored. Please use ``neutron_ovsdb_manager_connection`` in
|
|
order to override connection to OVS.
|