fixes bug 1179820
we must set firewall driver if we want to use quantum security group because
quantum will disable security group if we do not change the default firewall
driver. Currently devstack will not change the default firewall driver
if we just running quantum server on a node which will cause nova unable to
security group information.
Change-Id: Ie274325decbf252630a237ed3d6ee3136eb259fe
| ... | ... |
@@ -74,6 +74,11 @@ function quantum_plugin_configure_service() {
|
| 74 | 74 |
if [[ "$LB_VLAN_RANGES" != "" ]]; then |
| 75 | 75 |
iniset /$Q_PLUGIN_CONF_FILE VLANS network_vlan_ranges $LB_VLAN_RANGES |
| 76 | 76 |
fi |
| 77 |
+ if [[ "$Q_USE_SECGROUP" == "True" ]]; then |
|
| 78 |
+ iniset /$Q_PLUGIN_CONF_FILE SECURITYGROUP firewall_driver quantum.agent.linux.iptables_firewall.IptablesFirewallDriver |
|
| 79 |
+ else |
|
| 80 |
+ iniset /$Q_PLUGIN_CONF_FILE SECURITYGROUP firewall_driver quantum.agent.firewall.NoopFirewallDriver |
|
| 81 |
+ fi |
|
| 77 | 82 |
} |
| 78 | 83 |
|
| 79 | 84 |
function quantum_plugin_setup_interface_driver() {
|
| ... | ... |
@@ -84,6 +84,8 @@ function quantum_plugin_configure_service() {
|
| 84 | 84 |
iniset /$Q_PLUGIN_CONF_FILE OFC driver $OFC_DRIVER |
| 85 | 85 |
iniset /$Q_PLUGIN_CONF_FILE OFC api_retry_max OFC_RETRY_MAX |
| 86 | 86 |
iniset /$Q_PLUGIN_CONF_FILE OFC api_retry_interval OFC_RETRY_INTERVAL |
| 87 |
+ |
|
| 88 |
+ _quantum_ovs_base_configure_firewall_driver |
|
| 87 | 89 |
} |
| 88 | 90 |
|
| 89 | 91 |
function quantum_plugin_setup_interface_driver() {
|
| ... | ... |
@@ -133,6 +133,8 @@ function quantum_plugin_configure_service() {
|
| 133 | 133 |
if [[ $OVS_ENABLE_TUNNELING = "True" ]]; then |
| 134 | 134 |
iniset /$Q_PLUGIN_CONF_FILE OVS enable_tunneling True |
| 135 | 135 |
fi |
| 136 |
+ |
|
| 137 |
+ _quantum_ovs_base_configure_firewall_driver |
|
| 136 | 138 |
} |
| 137 | 139 |
|
| 138 | 140 |
function quantum_plugin_setup_interface_driver() {
|
| ... | ... |
@@ -58,6 +58,8 @@ function quantum_plugin_configure_plugin_agent() {
|
| 58 | 58 |
|
| 59 | 59 |
function quantum_plugin_configure_service() {
|
| 60 | 60 |
iniset /$Q_PLUGIN_CONF_FILE OVS openflow_rest_api $RYU_API_HOST:$RYU_API_PORT |
| 61 |
+ |
|
| 62 |
+ _quantum_ovs_base_configure_firewall_driver |
|
| 61 | 63 |
} |
| 62 | 64 |
|
| 63 | 65 |
function quantum_plugin_setup_interface_driver() {
|