feat(neutron): add support for Neutron FWaaS - #3712
Open
Yaguang Tang (yaguangtang) wants to merge 6 commits into
Open
feat(neutron): add support for Neutron FWaaS#3712Yaguang Tang (yaguangtang) wants to merge 6 commits into
Yaguang Tang (yaguangtang) wants to merge 6 commits into
Conversation
Yaguang Tang (yaguangtang)
force-pushed
the
feat/add-neutron-fwaas-support
branch
from
March 3, 2026 10:43
88ea0a8 to
a4fd575
Compare
Yaguang Tang (yaguangtang)
force-pushed
the
feat/add-neutron-fwaas-support
branch
2 times, most recently
from
June 12, 2026 07:14
1ae7dfb to
2d42600
Compare
Yaguang Tang (yaguangtang)
force-pushed
the
feat/add-neutron-fwaas-support
branch
from
June 19, 2026 13:21
f9ff291 to
c1059cf
Compare
Yaguang Tang (yaguangtang)
force-pushed
the
feat/add-neutron-fwaas-support
branch
from
July 7, 2026 03:22
c1059cf to
95e390f
Compare
Mohammed Naser (mnaser)
requested changes
Jul 7, 2026
Mohammed Naser (mnaser)
left a comment
Mohammed Naser (mnaser)
left a comment
Member
There was a problem hiding this comment.
small comment but cuirious why there is a bunch of other changes, we should fix that
Comment on lines
+45
to
+47
|
|
||
| # Enable Neutron Firewall as a Service (FWaaS) | ||
| neutron_fwaas_enabled: false |
There was a problem hiding this comment.
Is there a reason not to just make it enable out of the box without a way to disable it?
Yaguang Tang (yaguangtang)
force-pushed
the
feat/add-neutron-fwaas-support
branch
from
July 8, 2026 02:54
f3f169d to
cada7b9
Compare
Member
Author
|
The CI fails due to vexxhost/docker-neutron#1962 needed. |
Member
Author
|
Mohammed Naser (@mnaser) The CI job fails due to neutron plugins aren't updated for a long time, vexxhost/docker-neutron#1327 |
Extend the default OVN Neutron wiring to include FWaaS so operators do not need a separate feature flag to turn it on. This change adds the firewall_v2 service plugin to the OVN defaults, configures the OVN FWaaS driver, mounts neutron_fwaas.conf in the Neutron server, RPC server, and db-sync jobs, runs the neutron-fwaas database migrations, and adds role and Helm coverage for the new wiring. Signed-off-by: Yaguang Tang <yaguang.tang@vexxhost.com>
Keep the Horizon defaults aligned with the OVN Neutron defaults by always loading the FWaaS dashboard panel when Atmosphere deploys Horizon. This keeps the FWaaS UI available out of the box alongside the existing VPNaaS panel and adds a test that covers the default panel list. Signed-off-by: Yaguang Tang <yaguang.tang@vexxhost.com>
Describe the new default FWaaS behavior for OVN deployments and capture it in the release notes so operators know what Atmosphere now enables automatically. The deployment guide now explains the built-in FWaaS wiring, and the release note summarizes the service plugin, driver, migration, and dashboard changes. Signed-off-by: Yaguang Tang <yaguang.tang@vexxhost.com>
Signed-off-by: Yaguang Tang <yaguang.tang@vexxhost.com>
Signed-off-by: Yaguang Tang <yaguang.tang@vexxhost.com>
Yaguang Tang (yaguangtang)
force-pushed
the
feat/add-neutron-fwaas-support
branch
from
August 6, 2026 13:56
18556cb to
3c314b4
Compare
Signed-off-by: Yaguang Tang <yaguang.tang@vexxhost.com>
Member
Author
|
Depends on vexxhost/docker-tempest#198 to pass tempest neutron plugin test cases. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
firewall_v2to the default OVN service pluginsneutron_fwaas.conffor neutron-server, neutron-rpc-server, and db-syncneutron-fwaasDB migrationsRelated