Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1286409

Summary:	OSPD- should support enable --port_security_enabled extension
Product:	Red Hat OpenStack	Reporter:	Eran Kuris <ekuris>
Component:	rhosp-director	Assignee:	chris alfonso <calfonso>
Status:	CLOSED DUPLICATE	QA Contact:	yeylon <yeylon>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.0 (Liberty)	CC:	hbrock, mburns, rhel-osp-director-maint, srevivo, yfried
Target Milestone:	---	Keywords:	Automation
Target Release:	8.0 (Liberty)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-11-30 14:04:28 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Eran Kuris 2015-11-29 08:19:15 UTC

Description of problem:
there is no option to enable --port_security_enabled extension  when deploying overcloud osp env.

should have this option:
openstack overcloud deploy --templates --control-scale 1 --compute-scale 1 -- --port_security_enabled=True

which effect this file:
 vi /etc/neutron/plugin.ini 
extension_drivers=port_security 
 

Version-Release number of selected component (if applicable):
$ rpm -qa |grep neutron
openstack-neutron-ml2-7.0.0-3.el7ost.noarch
openstack-neutron-openvswitch-7.0.0-3.el7ost.noarch
openstack-neutron-common-7.0.0-3.el7ost.noarch
openstack-neutron-7.0.0-3.el7ost.noarch
python-neutronclient-3.1.0-1.el7ost.noarch
python-neutron-7.0.0-3.el7ost.noarch
rpm -qa |grep instack
instack-0.0.8-1.el7ost.noarch
instack-undercloud-2.1.3-1.el7ost.noarch


How reproducible:
always

Steps to Reproduce:
1.$ openstack overcloud deploy --help 

2.
3.

Actual results:


Expected results:


Additional info:

Comment 2 yfried 2015-11-29 11:29:06 UTC

(In reply to Eran Kuris from comment #0)
> Description of problem:
> there is no option to enable --port_security_enabled extension  when
> deploying overcloud osp env.

IMO, port-security is a minor feature that shouldn't require a specific flag.
I would expect to be able to edit the conf files generically.
Something like --extra-conf neutorn.server.extension_drivers=port_security

Or maybe in somewhere in the templates?

> 
> should have this option:
> openstack overcloud deploy --templates --control-scale 1 --compute-scale 1
> -- --port_security_enabled=True
> 
> which effect this file:
>  vi /etc/neutron/plugin.ini 
> extension_drivers=port_security 

File is on the node running neutron-server

Comment 3 Mike Burns 2015-11-30 14:04:28 UTC


*** This bug has been marked as a duplicate of bug 1282428 ***