dfb716b2c2
Ensure that a n1kv tenant who has no access to a network profile belonging to some other tenant, is not allowed to modify that profile. Currently, a tenant can create networks on any network profile if he has the network profile id. Change-Id: I53d767acceaa5e2c08e75e6f18847f659cda8d8b Closes-Bug: 1365727
108 lines
3.8 KiB
INI
108 lines
3.8 KiB
INI
[cisco]
|
|
|
|
# (StrOpt) A short prefix to prepend to the VLAN number when creating a
|
|
# VLAN interface. For example, if an interface is being created for
|
|
# VLAN 2001 it will be named 'q-2001' using the default prefix.
|
|
#
|
|
# vlan_name_prefix = q-
|
|
# Example: vlan_name_prefix = vnet-
|
|
|
|
# (StrOpt) A short prefix to prepend to the VLAN number when creating a
|
|
# provider VLAN interface. For example, if an interface is being created
|
|
# for provider VLAN 3003 it will be named 'p-3003' using the default prefix.
|
|
#
|
|
# provider_vlan_name_prefix = p-
|
|
# Example: provider_vlan_name_prefix = PV-
|
|
|
|
# (BoolOpt) A flag indicating whether Openstack networking should manage the
|
|
# creation and removal of VLAN interfaces for provider networks on the Nexus
|
|
# switches. If the flag is set to False then Openstack will not create or
|
|
# remove VLAN interfaces for provider networks, and the administrator needs
|
|
# to manage these interfaces manually or by external orchestration.
|
|
#
|
|
# provider_vlan_auto_create = True
|
|
|
|
# (BoolOpt) A flag indicating whether Openstack networking should manage
|
|
# the adding and removing of provider VLANs from trunk ports on the Nexus
|
|
# switches. If the flag is set to False then Openstack will not add or
|
|
# remove provider VLANs from trunk ports, and the administrator needs to
|
|
# manage these operations manually or by external orchestration.
|
|
#
|
|
# provider_vlan_auto_trunk = True
|
|
|
|
# (StrOpt) Period-separated module path to the model class to use for
|
|
# the Cisco neutron plugin.
|
|
#
|
|
# model_class = neutron.plugins.cisco.models.virt_phy_sw_v2.VirtualPhysicalSwitchModelV2
|
|
|
|
# (BoolOpt) A flag to enable Layer 3 support on the Nexus switches.
|
|
# Note: This feature is not supported on all models/versions of Cisco
|
|
# Nexus switches. To use this feature, all of the Nexus switches in the
|
|
# deployment must support it.
|
|
# nexus_l3_enable = False
|
|
|
|
# (BoolOpt) A flag to enable round robin scheduling of routers for SVI.
|
|
# svi_round_robin = False
|
|
|
|
# Cisco Nexus Switch configurations.
|
|
# Each switch to be managed by Openstack Neutron must be configured here.
|
|
#
|
|
# N1KV Format.
|
|
# [N1KV:<IP address of VSM>]
|
|
# username=<credential username>
|
|
# password=<credential password>
|
|
#
|
|
# Example:
|
|
# [N1KV:2.2.2.2]
|
|
# username=admin
|
|
# password=mySecretPassword
|
|
|
|
[cisco_n1k]
|
|
|
|
# (StrOpt) Specify the name of the integration bridge to which the VIFs are
|
|
# attached.
|
|
# Default value: br-int
|
|
# integration_bridge = br-int
|
|
|
|
# (StrOpt) Name of the policy profile to be associated with a port when no
|
|
# policy profile is specified during port creates.
|
|
# Default value: service_profile
|
|
# default_policy_profile = service_profile
|
|
|
|
# (StrOpt) Name of the policy profile to be associated with a port owned by
|
|
# network node (dhcp, router).
|
|
# Default value: dhcp_pp
|
|
# network_node_policy_profile = dhcp_pp
|
|
|
|
# (StrOpt) Name of the network profile to be associated with a network when no
|
|
# network profile is specified during network creates. Admin should pre-create
|
|
# a network profile with this name.
|
|
# Default value: default_network_profile
|
|
# default_network_profile = network_pool
|
|
|
|
# (IntOpt) Time in seconds for which the plugin polls the VSM for updates in
|
|
# policy profiles.
|
|
# Default value: 60
|
|
# poll_duration = 60
|
|
|
|
# (BoolOpt) Specify whether tenants are restricted from accessing all the
|
|
# policy profiles.
|
|
# Default value: False, indicating all tenants can access all policy profiles.
|
|
#
|
|
# restrict_policy_profiles = False
|
|
|
|
# (IntOpt) Number of threads to use to make HTTP requests to the VSM.
|
|
# Default value: 4
|
|
# http_pool_size = 4
|
|
|
|
# (IntOpt) Timeout duration in seconds for the http request
|
|
# Default value: 15
|
|
# http_timeout = 15
|
|
|
|
# (BoolOpt) Specify whether tenants are restricted from accessing network
|
|
# profiles belonging to other tenants.
|
|
# Default value: True, indicating other tenants cannot access network
|
|
# profiles belonging to a tenant.
|
|
#
|
|
# restrict_network_profiles = True
|