openstack/openstack-helm
Code Issues Proposed changes

Neutron chart: add OVS firewall

Browse Source 
Add openvswitch based firewall, which is better than hybrid iptables one.
It does not interfere with k8s iptables rules on compute nodes.
The advantage is that VMs have access to the OpenStack API.

Change-Id: Ic6baef5867db962b3cb4709d7e6dce8a9a13584f
Closes-Bug: #1686371
This commit is contained in:
Artur Korzeniewski 2017-05-17 14:03:50 +02:00
parent fb22abdb63
commit 83710071bb
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
neutron/values.yaml
View File

@ -389,6 +389,12 @@ conf:
agent:
tunnel_types: vxlan
ovsdb_connection: unix:/var/run/openvswitch/db.sock
securitygroup:
neutron:
ml2:
ovs:
agent:
firewall_driver: openvswitch
metering_agent:
override:
append: