Re: [openstack-dev] [Policy][Group-based-policy] ODL Policy Driver Specs
Hi Yapeng, Sumit,
In Openstack GBP command line, for l2policy help, there is an argument
--network that can be passed. Can you please elaborate on which network do
we need to pass here and what is the use of the same.
gbp l2policy-create --help
usage: gbp l2policy-create [-h] [-f {html,json,shell,table,value,yaml}]
[-c COLUMN] [--max-width integer]
[--prefix PREFIX] [--request-format {json,xml}]
[--tenant-id TENANT_ID] [--description
DESCRIPTION]
[--network NETWORK] [--l3-policy L3_POLICY]
NAME
Create a L2 Policy for a given tenant.
positional arguments:
NAME Name of L2 Policy to create
optional arguments:
-h, --helpshow this help message and exit
--request-format {json,xml}
The XML or JSON request format.
--tenant-id TENANT_ID
The owner tenant ID.
--description DESCRIPTION
Description of the L2 Policy
--network NETWORK Network to map the L2 Policy
--l3-policy L3_POLICY
L3 Policy uuid
Also, the PTG help includes an additional subnet parameter. Please also
provide inputs on it.
stack@tcs-ThinkCentre-M58p:/home/tcs/JUNIPER/gbp_openstack_odl/devstack$
gbp policy-target-group-create --help
usage: gbp policy-target-group-create [-h]
[-f
{html,json,shell,table,value,yaml}]
[-c COLUMN] [--max-width integer]
[--prefix PREFIX]
[--request-format {json,xml}]
[--tenant-id TENANT_ID]
[--description DESCRIPTION]
[--l2-policy L2_POLICY]
[--provided-policy-rule-sets
PROVIDED_POLICY_RULE_SETS]
[--consumed-policy-rule-sets
CONSUMED_POLICY_RULE_SETS]
[--network-service-policy
NETWORK_SERVICE_POLICY]
[--subnets SUBNETS]
NAME
Create a Policy Target Group for a given tenant.
positional arguments:
NAME Name of Policy Target Group to create
optional arguments:
-h, --helpshow this help message and exit
--request-format {json,xml}
The XML or JSON request format.
--tenant-id TENANT_ID
The owner tenant ID.
--description DESCRIPTION
Description of the Policy Target Group
--l2-policy L2_POLICY
L2 policy uuid
--provided-policy-rule-sets PROVIDED_POLICY_RULE_SETS
Dictionary of provided policy rule set uuids
--consumed-policy-rule-sets CONSUMED_POLICY_RULE_SETS
Dictionary of consumed policy rule set uuids
--network-service-policy NETWORK_SERVICE_POLICY
Network service policy uuid
--subnets SUBNETS List of neutron subnet uuids
output formatters:
output formatter options
-f {html,json,shell,table,value,yaml}, --format
{html,json,shell,table,value,yaml}
the output format, defaults to table
-c COLUMN, --column COLUMN
specify the column(s) to include, can be repeated
table formatter:
--max-width integer
Maximum display width, 0 to disable
shell formatter:
a format a UNIX shell can parse (variable=value)
--prefix PREFIX add a prefix to all variable names
Thanks Regards
Sachi Gupta
From: Yapeng Wu yapeng...@huawei.com
To: Sachi Gupta sachi.gu...@tcs.com, OpenStack Development Mailing
List (not for usage questions) openstack-dev@lists.openstack.org,
groupbasedpolicy-...@lists.opendaylight.org
groupbasedpolicy-...@lists.opendaylight.org
Cc: bu...@noironetworks.com bu...@noironetworks.com
Date: 01/13/2015 11:48 PM
Subject:RE: [openstack-dev] [Policy][Group-based-policy] ODL
Policy Driver Specs
Hi, Sachi,
Please see my inlined replies.
Also, please refer to this link when you try to integrate OpenStack GBP
and ODL GBP:
https://wiki.openstack.org/wiki/GroupBasedPolicy/InstallODLIntegrationDevstack
Yapeng
From: Sachi Gupta [mailto:sachi.gu...@tcs.com]
Sent: Tuesday, January 13, 2015 4:02 AM
To: OpenStack Development Mailing List (not for usage questions);
groupbasedpolicy-...@lists.opendaylight.org; Yapeng Wu
Cc: bu...@noironetworks.com
Subject: Re: [openstack-dev] [Policy][Group-based-policy] ODL Policy
Driver Specs
Hi,
While working on the integration of Openstack With ODL GBP, I have the
below queries:
1. Endpoint-group Create: When I create a new policy-target-group
Re: [openstack-dev] [Policy][Group-based-policy] ODL Policy Driver Specs
Hi, While working on the integration of Openstack With ODL GBP, I have the below queries: Endpoint-group Create: When I create a new policy-target-group from Openstack say gbp target-policy-group-create group1, it internally creates a l2.policy which includes the creation of the network and subnet. Meaning creation of EPG will create Network and subnet implicitly in Openstack and also the corresponding EPG, subnet, l3-context, l2-flood-domain, l2-bridge-domain will be created in the ODL GBP. So during the above EPG creation, neutron network and subnet call will come to the neutron northbound of ODL or only to ODL GBP?? In ODL, there is no Endpoint create API, instead there is an API to register the endpoints. So what is the sync between the OS and ODL for Endpoint create and register.? Thanks Regards Sachi Gupta From: Yapeng Wu yapeng...@huawei.com To: OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.org Date: 01/12/2015 09:01 PM Subject:Re: [openstack-dev] [Policy][Group-based-policy] ODL Policy Driver Specs Hello, Sachi, They both works. “End point group” has been renamed to “policy target group”. It is recommended to use “gbp policy-target-group-create”. Yapeng From: Sachi Gupta [mailto:sachi.gu...@tcs.com] Sent: Monday, January 12, 2015 7:03 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Policy][Group-based-policy] ODL Policy Driver Specs Hi, Can anyone explain the difference between gbp group-create and gbp policy-target-group-create?? I think both these are working same. Thanks Regards Sachi Gupta From:Sumit Naiksatam sumitnaiksa...@gmail.com To:OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.org Date:11/26/2014 01:35 PM Subject:Re: [openstack-dev] [Policy][Group-based-policy] ODL Policy DriverSpecs Hi, This GBP spec is currently being worked on: https://review.openstack.org/#/c/134285/ It will be helpful if you can add [Policy][Group-based-policy] in the subject of your emails, so that the email gets characterized correctly. Thanks, ~Sumit. On Tue, Nov 25, 2014 at 4:27 AM, Sachi Gupta sachi.gu...@tcs.com wrote: Hey All, I need to understand the interaction between the Openstack GBP and the Opendaylight GBP project which will be done by ODL Policy driver. Can someone provide me with specs of ODL Policy driver for making my understanding on call flow. Thanks Regards Sachi Gupta =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Policy][Group-based-policy] ODL Policy Driver Specs
Hi, Can anyone explain the difference between gbp group-create and gbp policy-target-group-create?? I think both these are working same. Thanks Regards Sachi Gupta From: Sumit Naiksatam sumitnaiksa...@gmail.com To: OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.org Date: 11/26/2014 01:35 PM Subject:Re: [openstack-dev] [Policy][Group-based-policy] ODL Policy Driver Specs Hi, This GBP spec is currently being worked on: https://review.openstack.org/#/c/134285/ It will be helpful if you can add [Policy][Group-based-policy] in the subject of your emails, so that the email gets characterized correctly. Thanks, ~Sumit. On Tue, Nov 25, 2014 at 4:27 AM, Sachi Gupta sachi.gu...@tcs.com wrote: Hey All, I need to understand the interaction between the Openstack GBP and the Opendaylight GBP project which will be done by ODL Policy driver. Can someone provide me with specs of ODL Policy driver for making my understanding on call flow. Thanks Regards Sachi Gupta =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] ODL Policy Driver Specs
Hey All, I need to understand the interaction between the Openstack GBP and the Opendaylight GBP project which will be done by ODL Policy driver. Can someone provide me with specs of ODL Policy driver for making my understanding on call flow. Thanks Regards Sachi Gupta =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] Group-Based Policy Understanding and Queries
Hi All, Request you all to provide inputs of the below queries: As per my understanding GBP constructs are mapped to neutron calls for example - creating an endpoint, the neutron mapping driver will map it to the existing port creation method. Similarly to achieve the complete functionality of GBP openstack, I have checked for the neutron calls and it includes network, subnet, port, router, security group. Creating a contract - policy rules..Will this include a call to firewall rules or only security group calls will be done? I need to integrate Openstack with Opendaylight(ODL). To achieve the interface between two will it be done by ML2 plugin and neutron mapping driver of Openstack or something additional is required? The neutron northbound APIs of ODL include network, subnet, port, router, security groups, firewall calls. Any other call that needs to be included a part from these in ODL. Do the neutron calls that will be mapped by the neutron mapping driver of openstack are something different from the previous neutron calls that were being made without using GBP??? For example: The network create call that was used previously with ODL without using GBP in openstack. Will it be different from the network call to ODL that will be made by GBP mapping driver of openstack. How the GBP project in openstack will be affecting the Opendaylight neutron calls?? Thanks in Advance Sachi Gupta From: Sumit Naiksatam sumitnaiksa...@gmail.com To: OpenStack Development Mailing List (not for usage questions) openstack-dev@lists.openstack.org Date: 09/23/2014 04:33 AM Subject:Re: [openstack-dev] Group-Based Policy Understanding and Queries Thanks for your interest in GBP, responses inline. On Sun, Sep 21, 2014 at 11:35 PM, Sachi Gupta sachi.gu...@tcs.com wrote: Hi All, Request you all to provide inputs on below understanding: Openstack: Group-based policy is a blueprint for Juno-3 release of Openstack. It will extend OpenStack Networking with policy and connectivity abstractions that enable significantly more simplified and application-oriented interfaces than with the current Neutron API model. When will be the code ready for Group-based policy as an open source? The code has been in review in gerrit for a while now, you can find all the links to all the patches here: https://wiki.openstack.org/wiki/Meetings/Neutron_Group_Policy/Patches We are also consolidating this code in Stackforge so that its usable starting from the Juno release. Openstack group policy API will be an extension to the Neutron APIs. There will be a policy manager to manage the policy and policy rules. Will GBP a part of neutron?? If yes, then will GBP be a part of Horizon under neutron? The wiki page above has links to client, Horizon and Heat patches. Policy driver which will act as an interface(ODL Policy Driver). For eg. we used neutron ML2 plugin as an interface between Openstack neutron and ODL neutron northbound. When will the policy driver for ODL available? Openstack policy driver for ODL will act as an interface to ODL. Which API in ODL, Policy calls from Openstack ODL Policy driver will be hitting?? I know that this was planned, so you would probably need to check with the author of the following patch for the status on this: https://review.openstack.org/#/c/105606/ We can also bring this up for discussion during the weekly IRC: https://wiki.openstack.org/wiki/Meetings/Neutron_Group_Policy Thanks Regards Sachi Gupta =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] Group-Based Policy Understanding and Queries
Hi All, Request you all to provide inputs on below understanding: Openstack: Group-based policy is a blueprint for Juno-3 release of Openstack. It will extend OpenStack Networking with policy and connectivity abstractions that enable significantly more simplified and application-oriented interfaces than with the current Neutron API model. When will be the code ready for Group-based policy as an open source? Openstack group policy API will be an extension to the Neutron APIs. There will be a policy manager to manage the policy and policy rules. Will GBP a part of neutron?? If yes, then will GBP be a part of Horizon under neutron? Policy driver which will act as an interface(ODL Policy Driver). For eg. we used neutron ML2 plugin as an interface between Openstack neutron and ODL neutron northbound. When will the policy driver for ODL available? Openstack policy driver for ODL will act as an interface to ODL. Which API in ODL, Policy calls from Openstack ODL Policy driver will be hitting?? Thanks Regards Sachi Gupta =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] Get Tenant Details in novaclient
Hi, nova --os-tenant-name admin list --tenant c40ad5830e194f2296ad11a96cefc487 --all-tenants 1 - Works Fine and returns all the servers available where c40ad5830e194f2296ad11a96cefc487 is the id of the demo tenant whereas nova --os-tenant-name admin list --tenant demo --all-tenants 1 - Returns nothing when tenant-name demo is passed in place of its id. For the above bug, need to get the tenant details in novaclient on the basis of tenant-name being passed to nova api so that the list of servers can be shown up by both tenant_name or tenant_id. Also, to interact between Openstaack components we can use the rest calls. Can anyone suggest how to get the keystone tenant-details in novaclient to make the above functionality work. Thanks in advance Sachi =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] OpenDaylight ML2 mechanism driver - Openstack
Hi, I have set up OpenStack Havana with neutron ML2 plugin and ODL controller following link http://www.siliconloons.com/getting-started-with-opendaylight-and-openstack/ . The ODL mechanism driver file in /opt/stack/neutron/neutron/plugins/ml2/drivers/mechanism_odl.py is attached. When I issued the network create command with no network name, the call passes to ODL and returns with 400 error code in sendjson method. In line no 187, this exception catches but is ignored due to which network is created in the openstack but is failed in ODL. Please suggest the changes that needs to be done to synchronize OpenStack with ODL. Thanks Regards Sachi Gupta Systems Engineer Tata Consultancy Services Mailto: sachi.gu...@tcs.com Website: http://www.tcs.com Experience certainty. IT Services Business Solutions Consulting =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you mechanism_odl.py Description: Binary data ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] Booting a Vm Failed VirtualMachineInterfaceFailed
Hi, While booting a virtual machine from Openstack dashboard, the call comes to Openstack compute where it is showing vif_binding details as vif_type = ovs Please suggest on how to change the vif_type to vrouter Thanks Regards Sachi Gupta =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] Configuration Changes Ignored in devstack
Installed Openstack-dev for deploying OpenStack cloud, and made changes to the configuration files (such as - /etc/nova/nova.conf etc) and have ran stack.sh script. Running stack.sh script overrides the configuration file changes. To make the changes persistent, have added Reclone=no and Offline=true in localrc file, but still facing the same issue. Please suggest how to make changes persistent in configuration files. Thanks Regards Sachi Gupta =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] Integrate vif-driver=vrouter(Opencontrail) with Openstack
Hi All, I cloned the Openstack directory from git://github.com/openstack-dev/devstack.git and created local.conf file. Now, I need to add OpenContrail vif_driver=vrouter to work with Openstack so that the images booted via OpenStack gets attached to OpenContrail vrouter via vif_driver. Thanks Regards Sachi Gupta =-=-= Notice: The information contained in this e-mail message and/or attachments to it may contain confidential or privileged information. If you are not the intended recipient, any dissemination, use, review, distribution, printing or copying of the information contained in this e-mail message and/or attachments to it are strictly prohibited. If you have received this communication in error, please notify us by reply e-mail or telephone and immediately and permanently delete the message and any attachments. Thank you ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
