Bug 1297833

Summary:	VPNaaS should use libreswan driver instead of openswan by default
Product:	[Community] RDO	Reporter:	Eran Kuris <ekuris>
Component:	openstack-packstack	Assignee:	Javier Peña <jpena>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Shai Revivo <srevivo>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	Juno	CC:	amuller, aortega, chris.brown, chrisw, derekh, ekuris, jcoufal, jpena, mmagr, nyechiel, srevivo
Target Milestone:	---
Target Release:	trunk
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2017-06-18 06:06:03 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Eran Kuris 2016-01-12 15:01:55 UTC

Description of problem:
When installing OSP-8 with packstack and enabling "VPNaaS" in answer file 
it install VPNaaS with openswan driver when it should be liberswan.
Driver configuration should be : 

In vpnagent.ini:
[vpnagent]
vpn_device_driver=neutron_vpnaas.services.vpn.device_drivers.libreswan_ipsec.LibreSwanDriver


In /etc/neutron/neutron.conf

 service_plugins = neutron.services.vpn.plugin.VPNDriverPlugin


In  /etc/neutron/neutron_vpnaas.conf

service_provider=VPN:libreswan:neutron_vpnaas.services.vpn.service_drivers.ipsec.IPsecVPNDriver:default

How reproducible:
always

Steps to Reproduce:
1.deploy with packstack osp-8 and enable vpnass 
2.verify in vpnagent.ini which driver is used 
3.

Actual results:


Expected results:


Additional info:

Comment 4 Javier Peña 2016-01-28 09:56:33 UTC

Currently, the upstream puppet-neutron code only supports openswan as a provider (https://github.com/openstack/puppet-neutron/blob/master/manifests/agents/vpnaas.pp#L63-L74), and treats libreswan as a drop-in replacement (https://github.com/openstack/puppet-neutron/blob/master/manifests/params.pp#L63-L67).

Is this correct, or are there any differences that recommend using the libreswan-specific driver?

Comment 5 Eran Kuris 2016-01-28 11:24:02 UTC

As far as I know its correct

Comment 6 Javier Peña 2016-02-09 16:45:19 UTC

Apparently we should use the Libreswan driver, because there are some specific initialization steps required for it (https://bugs.launchpad.net/neutron/+bug/1444017).

Adding support for Libreswan in Packstack via https://review.openstack.org/273471 (puppet-neutron support) and https://review.openstack.org/277951 (Packstack support).

Comment 7 Mike McCune 2016-03-28 22:48:26 UTC

This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions

Comment 9 Christopher Brown 2017-06-17 19:26:29 UTC

Looks like this was merged so can be closed now?