Browse code

add firewall driver if we use quantum security group

fixes bug 1179820

we must set firewall driver if we want to use quantum security group because
quantum will disable security group if we do not change the default firewall
driver. Currently devstack will not change the default firewall driver
if we just running quantum server on a node which will cause nova unable to
security group information.

Change-Id: Ie274325decbf252630a237ed3d6ee3136eb259fe

Jiajun Liu authored on 2013/05/14 18:48:15
Showing 4 changed files
... ...
@@ -74,6 +74,11 @@ function quantum_plugin_configure_service() {
74 74
     if [[ "$LB_VLAN_RANGES" != "" ]]; then
75 75
         iniset /$Q_PLUGIN_CONF_FILE VLANS network_vlan_ranges $LB_VLAN_RANGES
76 76
     fi
77
+    if [[ "$Q_USE_SECGROUP" == "True" ]]; then
78
+        iniset /$Q_PLUGIN_CONF_FILE SECURITYGROUP firewall_driver quantum.agent.linux.iptables_firewall.IptablesFirewallDriver
79
+    else
80
+        iniset /$Q_PLUGIN_CONF_FILE SECURITYGROUP firewall_driver quantum.agent.firewall.NoopFirewallDriver
81
+    fi
77 82
 }
78 83
 
79 84
 function quantum_plugin_setup_interface_driver() {
... ...
@@ -84,6 +84,8 @@ function quantum_plugin_configure_service() {
84 84
     iniset /$Q_PLUGIN_CONF_FILE OFC driver $OFC_DRIVER
85 85
     iniset /$Q_PLUGIN_CONF_FILE OFC api_retry_max OFC_RETRY_MAX
86 86
     iniset /$Q_PLUGIN_CONF_FILE OFC api_retry_interval OFC_RETRY_INTERVAL
87
+
88
+    _quantum_ovs_base_configure_firewall_driver
87 89
 }
88 90
 
89 91
 function quantum_plugin_setup_interface_driver() {
... ...
@@ -133,6 +133,8 @@ function quantum_plugin_configure_service() {
133 133
     if [[ $OVS_ENABLE_TUNNELING = "True" ]]; then
134 134
         iniset /$Q_PLUGIN_CONF_FILE OVS enable_tunneling True
135 135
     fi
136
+
137
+    _quantum_ovs_base_configure_firewall_driver
136 138
 }
137 139
 
138 140
 function quantum_plugin_setup_interface_driver() {
... ...
@@ -58,6 +58,8 @@ function quantum_plugin_configure_plugin_agent() {
58 58
 
59 59
 function quantum_plugin_configure_service() {
60 60
     iniset /$Q_PLUGIN_CONF_FILE OVS openflow_rest_api $RYU_API_HOST:$RYU_API_PORT
61
+
62
+    _quantum_ovs_base_configure_firewall_driver
61 63
 }
62 64
 
63 65
 function quantum_plugin_setup_interface_driver() {