Back to bug 1032450

Who When What Removed Added
RHEL Program Management 2013-11-20 09:25:55 UTC Target Release --- 4.0
yeylon 2013-11-21 07:05:42 UTC Whiteboard network
lpeer 2013-11-21 09:23:02 UTC Priority unspecified high
Status NEW ASSIGNED
CC lpeer
Assignee rhos-maint twilson
Terry Wilson 2013-12-06 23:25:45 UTC Status ASSIGNED ON_DEV
Perry Myers 2013-12-09 15:44:52 UTC Depends On 1039204
Target Milestone --- rc
Stephen Gordon 2013-12-09 15:49:16 UTC CC sgordon
Doc Text 0) packstack --allinone
1) Add the vpnaas.filters file to /usr/share/neutron/rootwrap
2) Add l3_agent.ini to the list of config files in /etc/init.d/neutron-vpn-agent
3) Add fwaas_driver.ini to /etc/neutron and set the appropriate fields
4) Add /etc/neutron/fwaas_driver.ini to the config files in /etc/init.d/neutron-l3-agent
5) Add service_plugins = neutron.services.firewall.fwaas_plugin.FirewallPlugin, neutron.services.vpn.plugin.VPNDriverPlugin to /etc/neutron.conf
6) restart all of the neutron services
7) Fix selinux issues (https://bugzilla.redhat.com/show_bug.cgi?id=1039204) with semanage fcontext -a -t neutron_exec_t /usr/bin/neutron-vpn-agent ; restorecon /usr/bin/neutron* (or disable selinux)
8) Restart all neutron services
9) Create firewall rules, policy, firewall and verify that firewall shows ACTIVE
Doc Type Bug Fix Known Issue
Stephen Gordon 2013-12-09 15:51:04 UTC CC twilson
Flags needinfo?(twilson)
Terry Wilson 2013-12-09 19:33:44 UTC Status ON_DEV MODIFIED
Fixed In Version openstack-neutron-2013.2-14.el6ost
Doc Text 0) packstack --allinone
1) Add the vpnaas.filters file to /usr/share/neutron/rootwrap
2) Add l3_agent.ini to the list of config files in /etc/init.d/neutron-vpn-agent
3) Add fwaas_driver.ini to /etc/neutron and set the appropriate fields
4) Add /etc/neutron/fwaas_driver.ini to the config files in /etc/init.d/neutron-l3-agent
5) Add service_plugins = neutron.services.firewall.fwaas_plugin.FirewallPlugin, neutron.services.vpn.plugin.VPNDriverPlugin to /etc/neutron.conf
6) restart all of the neutron services
7) Fix selinux issues (https://bugzilla.redhat.com/show_bug.cgi?id=1039204) with semanage fcontext -a -t neutron_exec_t /usr/bin/neutron-vpn-agent ; restorecon /usr/bin/neutron* (or disable selinux)
8) Restart all neutron services
9) Create firewall rules, policy, firewall and verify that firewall shows ACTIVE
Added /etc/neutron/fwaas_driver.ini to the package and set up neutron-vpn-agent and neutron-l3-agent to pass the correct ini files for VPNaaS and FWaaS.
Doc Type Known Issue Bug Fix
Flags needinfo?(twilson)
Ofer Blaut 2013-12-09 20:34:33 UTC QA Contact oblaut rvaknin
errata-xmlrpc 2013-12-09 21:22:54 UTC Status MODIFIED ON_QA
Bruce Reeler 2013-12-10 04:17:49 UTC CC breeler
Flags needinfo?(twilson)
Rami Vaknin 2013-12-11 15:22:13 UTC Status ON_QA VERIFIED
Terry Wilson 2013-12-11 20:56:19 UTC Doc Text Added /etc/neutron/fwaas_driver.ini to the package and set up neutron-vpn-agent and neutron-l3-agent to pass the correct ini files for VPNaaS and FWaaS. Cause: The l3-agent and vpn-agent init scripts were missing references to the proper config files, and the fwaas_driver.ini sample config were not being installed.

Consequence: The VPNaaS and FWaaS functionality could not be used with the init scripts.

Fix: Added /etc/neutron/fwaas_driver.ini to the package and set up neutron-vpn-agent and neutron-l3-agent to pass the correct ini files for VPNaaS and FWaaS.

Result: VPNaaS and FWaas can be configured and used.
Flags needinfo?(twilson)
Don Domingo 2013-12-12 01:52:39 UTC CC ddomingo
Doc Text Cause: The l3-agent and vpn-agent init scripts were missing references to the proper config files, and the fwaas_driver.ini sample config were not being installed.

Consequence: The VPNaaS and FWaaS functionality could not be used with the init scripts.

Fix: Added /etc/neutron/fwaas_driver.ini to the package and set up neutron-vpn-agent and neutron-l3-agent to pass the correct ini files for VPNaaS and FWaaS.

Result: VPNaaS and FWaas can be configured and used.
In previous releases, the /etc/init.d/neutron-vpn-agent script did not contain a reference to /etc/neutron/l3_agent.ini. At the same time, the Networking service packages did not provide a sample init script for FWaaS. These prevented VPNaaS and FWaaS features from being used with Networking service init scripts.

This fix ensures that deploying the Networking service will also:

* add a reference to /etc/neutron/l3_agent.ini in /etc/init.d/neutron-vpn-agent,
* install a sample init script for FWaaS, i.e. /etc/neutron/fwaas_driver.ini, and
* add a reference to /etc/neutron/fwaas_driver.ini in /etc/init.d/neutron-l3-agent.

With this, VPNaaS and FWaaS features can now be configured and used properly with Networking service init scripts.
Terry Wilson 2013-12-13 16:42:08 UTC Depends On 1042939
errata-xmlrpc 2013-12-19 17:40:40 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2013-12-20 00:37:32 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2013-12-19 19:37:32 UTC
Perry Myers 2016-04-26 13:33:22 UTC CC pmyers

Back to bug 1032450