openstack/openstack-ansible-os_neutron
Code Issues Proposed changes
4f0187e7fc
openstack-ansible-os_neutron/releasenotes/notes
History
Dmitriy Rabotyagov 601c66666f Run neutron OVN agents as neutron user 
As of today we run some agents, like neutron-ovn-metadata agent as
root user, since it needs access to ovsdb socket, which has 750 permissions
by default.

With that, for OVN we already use connection via host:port to the same
ovsdb manager, which allows to run it as an arbitrary user.

In order to align connection methods and to run services with lower
privileges
we introduce couple of new variables that allow to create valid connection
strings for both OpenFlow listeners and regular connection to the manager.

Change-Id: Iceab27aa1fdacc8b13f7ef6974b6a9076b8b7cd9
2024-02-20 13:34:49 +01:00
..
.placeholder Add reno scaffolding for release notes management 2016-04-09 19:21:03 +01:00
adding-new-neutron-plugin_base-extension-dbe31debf2187ed1.yaml Adding support of subnet_dns_publish_fixed_ip extension in ml2 plugin 2021-03-22 21:44:14 +00:00
apt-source-filenamed-2cc698add82f5eea.yaml Allow override of the repo filename 2017-01-03 14:11:38 +00:00
cap-workers-fc70b4f8586ba1a5.yaml Cap the number of worker threads 2017-02-09 15:20:47 +00:00
capping_neutron_workers-d97a5d50ca996af5.yaml Cap the number of worker threads 2017-02-23 05:20:59 -05:00
db-pooling-91ac966776313feb.yaml Database connection pooling improvements 2021-12-08 13:55:04 +00:00
db-pooling-old-vars-b5dbab9bfb21cc78.yaml Remove legacy db pooling variables 2022-02-01 09:21:11 +00:00
deprecate_auth_plugin-347b326919d67a18.yaml Deprecate auth_plugin option 2017-03-25 12:27:06 +08:00
dragonflow-removed-6285225b5525cd50.yaml Remove dragonflow ML2 driver 2018-11-06 12:06:21 +00:00
drop_legacy_l3_ha-e8d5d3dbd7c882fc.yaml Drop legacy neutron L3 HA tool 2019-07-17 15:15:55 +03:00
drop-powervm-5612f71e00e45277.yaml powervm: drop custom code 2021-03-12 21:14:47 +01:00
dynamic_tunnel_types-3eb1aa46a0ca9a19.yaml Dynamic Neutron OVS agent tunnel_types and local_ip config 2016-06-24 14:26:20 -04:00
fix-l3-agent-ha-keepalive-helper-5f1f82c437c8a430.yaml Fix the subprocess invocation of neutron-l3-agent 2019-01-11 21:07:08 +01:00
fwaasv2-added-ab9ba18c8b98a83e.yaml Add support for Neutron FWaaS v2 2017-09-27 06:19:20 -05:00
heartbeat-in-pthread-9f5fde7bfdd7d306.yaml Add configuration option for heartbeat_in_pthread 2022-03-15 10:39:52 +00:00
lbaas-removal-1e215d7ecd770559.yaml Remove LBaaS v2 plugin 2019-05-16 23:46:18 +00:00
lbaasv2-options-ae992286abfa689f.yaml Fix LBaaSv2 config and package requirements 2018-01-25 19:12:40 +00:00
lbaasv2-service-provider-config-57d394bdc64f632e.yaml Make LBaaSv2 service_provider configurable 2016-07-21 15:52:24 -05:00
make-vlan-ranges-optional-1c8f3d183c369e16.yaml Make VLAN ranges option when defining provider networks 2020-12-05 10:05:54 +00:00
metadata-proxy-cleanup-eed6ff482035dc83.yaml Switch to backticks in release note 2016-07-08 10:32:56 -05:00
networking-baremetal-plugin-agent-support-cfb06fa4faf85bdc.yaml Implement ironic_neutron_agent and baremetal driver 2021-10-27 10:43:13 +00:00
networking-generic-switch-support-6ae4be93aa50a7c3.yaml Add networking-generic-switch support for Ironic integration 2020-04-07 22:13:02 +00:00
neutron_az_support-97f3ab40bf554766.yaml Add Availability Zone variables 2024-01-03 15:03:27 +01:00
neutron_bgp_speaker_driver-update-789404b846221290.yaml Update neutron_bgp_speaker_driver 2019-05-15 22:41:22 -05:00
neutron_init_time_settings-66ad8a3d9eb951b0.yaml Rename release note to unique hash 2017-04-28 11:39:32 +01:00
neutron_ovs_dvr-7fca77cac0545441.yaml Support for Open vSwitch Distributed Virtual Routing 2016-07-18 09:50:15 -04:00
neutron-agent-dynamic-enable-47f0c709ef0dfe55.yaml Dynamically determine whether Neutron Agents should be enabled 2016-04-20 10:02:50 +01:00
neutron-bgp-552e6e1f6d37f38d.yaml Update the doc link for release notes 2017-11-24 11:37:57 +08:00
neutron-dhcp-config-list-3e9354e5da138b53.yaml Allow to set dnsmasq configuration options 2022-11-23 15:19:59 +01:00
neutron-dhcp-mtu-8767de6f541b04c1.yaml Stop configuring neutron to enforce DHCP MTU option 2016-05-12 12:12:33 +01:00
neutron-dpdk-bonds-4dd98fc0b341ebfb.yaml Add Support for DPDK Bonding 2021-12-18 18:36:56 +00:00
neutron-dragonflow-support-fce23f85c6a0bebd.yaml Implement Dragonflow deployment 2017-02-09 15:33:57 +00:00
neutron-fwaas-5c7c6508f2cc05c3.yaml Update the doc link for release notes 2017-11-24 11:37:57 +08:00
neutron-init-config-overrides-9d1d2b3b908705ed.yaml Fix a typo 2017-09-05 17:13:27 +08:00
neutron-mtu-cleanup-ce73693b4f7aef0d.yaml More MTU cleanups for Neutron 2016-05-19 01:24:53 +00:00
neutron-networking-calico-b05b08f989f768ee.yaml Project Calico integration 2016-08-22 14:47:25 -05:00
neutron-opendaylight-bgpvpn-support-3e44e278a53deeac.yaml add ml2 config for networking bgpvpn 2018-02-12 10:50:27 +01:00
neutron-opendaylight-sfc-support-8b249b8f8efbc087.yaml Use the new services names for sfc 2019-02-14 09:18:22 +00:00
neutron-opendaylight-support-453dc9324eafaae7.yaml Fix releasenote for opendaylight support 2018-08-10 18:20:26 +01:00
neutron-ovs-interface-mappings-789902128b82e721.yaml Provide support for network interface mappings without override 2018-12-21 13:44:30 +00:00
neutron-ovs-powervm-116662f169e17175.yaml Enable higher performance I/O through 2016-07-20 14:59:44 -04:00
neutron-service-setup-host-895ececec99d7a51.yaml Execute service setup against a delegated host using Ansible built-in modules 2018-07-12 18:15:37 +01:00
neutron-sriov-50c0099554574d01.yaml fix url in doc 2018-12-26 15:39:55 +08:00
neutron-vpnaas-5c7c6508f2cc05c5.yaml Update the doc link for release notes 2017-11-24 11:37:57 +08:00
neutron-vpnaas-custom-config-ad991bb02b9ed655.yaml Allow to provide custom configuration for VPNaaS 2022-06-18 10:00:36 +02:00
new_default_quotas-154f76dd7f2f568f.yaml Handle Pike changes for Neutron 2017-12-11 16:59:49 +00:00
opendaylight_deprecated-31aa11363c0ec736.yaml Deprecate OpenDaylight support 2023-10-05 14:48:53 +00:00
openstack-distribution-packages-f5d3174b96fc2372.yaml Add support for using distribution packages for OpenStack services 2018-06-11 13:21:17 +01:00
openvswitch-nsh-support-a9f86a929e072cea.yaml Add OvS-NSH support 2017-12-01 12:17:39 +02:00
openvswitch-support-1b71ae52dde81403.yaml Implementing neutron_openvswitch_agent 2016-05-11 17:35:12 -04:00
os_neutron-centos-support-6e3aede0f8b13af4.yaml Add CentOS support for os_neutron 2016-10-04 10:02:36 -04:00
os_neutron-only-install-venv-ca3bf63ed0507e4b.yaml Only install to virtual environment 2016-07-07 11:04:10 -04:00
os-neutron-deprecate-dhcp-domain-63b4c4dfbccd3a3a.yaml Rename neutron_dhcp_domain to neutron_dns_domain 2017-02-16 12:35:17 -08:00
os-neutron-handle_internal_only_routers-e46092d6f1f7c4b0.yaml Use upstream neutron default for handle_internal_only_routers 2016-05-03 15:18:07 -05:00
oslo-messaging-separate-backends-9b3fcaaa21a0d9f4.yaml releasenotes: oslo-messaging-separate-backends add project name 2018-10-15 16:56:48 +02:00
override-ovs-firewall-driver-0ba4dee50aff725c.yaml Allow overriding firewall_driver for ovs 2021-01-12 12:25:36 +01:00
ovn_dhcp_metadata_agents-851b42a6923c811f.yaml Disable dhcp-agent and metadata-agent for OVN 2023-01-18 13:58:28 +00:00
ovn-ssl-e9cb73e0713cf8bc.yaml add ovn ssl config 2022-11-30 16:03:14 +00:00
ovsdb_manager_connection-5ea44a5fd9aa789b.yaml Run neutron OVN agents as neutron user 2024-02-20 13:34:49 +01:00
package-list-name-changes-a86f7e7c805c2d81.yaml Rename package lists (and related vars) appropriately 2016-08-30 19:36:56 +01:00
package-state-fb7d26a4b7c41a77.yaml Add ability to change apt/yum package state 2016-08-02 15:39:08 +01:00
remove_rpc_backend-8134a355d9864e12.yaml Deprecate rpc_backend option 2017-06-01 15:24:00 +08:00
remove-lbaasv1-26044c48b5d3b508.yaml Remove LBaaSv1 2016-07-21 10:24:55 -05:00
remove-plumgrid-8c86d99999a2ca48.yaml Remove plumgrid network provider type 2017-05-17 13:45:04 -05:00
remove-requirements-git-212d02658644c17b.yaml Simplify pip options/constraints mechanism 2016-11-04 07:36:59 +00:00
remove-unsupported-tests-09241c373062518c.yaml Add integrated tests various Neutron deployment scenarios 2021-03-03 17:13:13 +00:00
removed-db-create-tasks-eed527e915f23ee0.yaml Removed the db create tasks 2016-05-10 22:21:58 -05:00
removed-neutron-ha-tool-dd7a4717e03163f9.yaml Deprecate the deployment of the AT&T neutron HA tool 2016-07-11 23:18:27 +00:00
revert-third-party-ovs-support-04602870ad8ccd2e.yaml Remove third-party OVS NSH support in favor of built-in support 2021-03-16 08:56:55 +00:00
selinux-neutron-bare-metal-c89174daf6f8b273.yaml Add SELinux policies for bare metal agents 2018-01-26 17:47:39 +00:00
service-conf-path-b27cab31dbc72ad4.yaml Allow Neutron services to specify config path 2016-08-08 16:30:53 +00:00
updated-neutron-plugin_base-25b5dcacc87acd0f.yaml Updated neutron plugin_base setup and config(s) 2016-03-16 14:18:15 +00:00
use-uca-by-default-070751b0b388fcbe.yaml Move UCA repo URL var to role defaults 2016-07-16 22:00:41 +01:00