openstack/kolla-ansible.git/doc/source/reference/networking, branch stable/2026.1

Remove leftover mention of Linux bridge driver

2026-09-17T15:05:03+00:00

This reference was missed during the removal of the Linux bridge mechanism driver [1]. [1] https://review.opendev.org/c/openstack/kolla-ansible/+/962278 Change-Id: Iff92e75a594a4888cf4cd179d7ac5de46e5c7f09 Signed-off-by: Pierre Riteau (cherry picked from commit bf02dd405a084ffd680bc5a835b8ab48e76485f6)

Merge "Implement neutron-ovn-vpn-agent"

2026-04-17T15:06:26+00:00

Implement neutron-ovn-vpn-agent

2026-04-17T09:07:00+00:00

This patch implements vpnaas for OVN environments. It deploys a standalone neutron-ovn-vpn-agent on neutron nodes. The container no longer requires 'privileged: true'. Running as the 'neutron' user with specific kernel capabilities ensures the agent can manage network namespaces and interfaces without full privileges. Added capabilities: - NET_ADMIN # manage interfaces, IPs, routing, firewall - SYS_ADMIN # create/manage network namespaces - SYS_PTRACE # allow 'ip netns exec' attach to processes - DAC_OVERRIDE # bypass file read/write restrictions - DAC_READ_SEARCH # allow directory traversal and file read - SETPCAP # retain capabilities for privileged ops Added security options: - apparmor=unconfined # disable AppArmor confinement - seccomp=unconfined # disable seccomp filtering - label=disable # disable SELinux/labeling Depends-On: https://review.opendev.org/c/openstack/kolla/+/924302 Closes-Bug: #2048392 Change-Id: I961b1407ae1402d146f0c09924df8e007e331af5 Signed-off-by: Joachim de Groot Signed-off-by: Piotr Milewski

Fix: Update outdated documentation

2026-04-12T15:31:35+00:00

Change-Id: I5dc53f74afd9a5b565201dc9d3039d82cb65dabc Signed-off-by: Piotr Milewski

ovn-db: add support for ovn-northd extra command-line arguments

2026-03-04T15:34:11+00:00

Adds the ovn_northd_cmdline_extras variable to allow operators to pass additional command-line arguments to the ovn-northd daemon. This enables customization of performance-related parameters such as thread count (--n-threads), parallel build (--use-parallel-build), and inactivity probe timeout (--inactivity-probe). The implementation follows the established cmdline_extras pattern used throughout kolla-ansible for services like Prometheus exporters. Closes-Bug: #2142316 Change-Id: I870034da10f80ff2208bbad529fa7de9a2548c06 Signed-off-by: Antony Messerli

Replace Redis with Valkey

2025-11-06T16:01:20+00:00

This change replaces Redis with Valkey, which is non-existent on Rocky Linux 10 / CentOS Stream 10 due to licensing issues. Co-Authored-By: Bartosz Bezak Co-Authored-By: Michal Nasiadka Change-Id: Ifcc6ec6e943c20867d969b0bdb0e4cbac53eea1e Signed-off-by: Grzegorz Koper Signed-off-by: Bartosz Bezak Signed-off-by: Michal Nasiadka

Merge "Enable Neutron agent wrappers by default"

2025-10-30T19:04:18+00:00

Merge "Run neutron-ovn-metadata-agent haproxy processes in separate containers"

2025-10-30T10:13:21+00:00

Enable Neutron agent wrappers by default

2025-10-29T12:49:29+00:00

Neutron agent wrappers are now enabled by default. Wrapper containers restart DHCP, L3, and related agents without having to respawn the main service containers, which reduces dataplane disruptions during upgrades and restarts. Operators who need the previous behaviour can set ``neutron_agents_wrappers`` to ``"no"`` in ``/etc/kolla/globals.yml``. Change-Id: I755e3dfcd326f7c1c05c1e9275dda93753db5873 Signed-off-by: Bartosz Bezak

Run neutron-ovn-metadata-agent haproxy processes in separate containers

2025-10-29T11:46:41+00:00

Follow up on Iaa1e687152db8351bc0e9b10e66f412860ac13a5 This patch implements the same experimental feature of running processes in seperated containers to the neutron-ovn-metadata-agent Co-Authored-By: Bartosz Bezak Depends-On: https://review.opendev.org/c/openstack/kolla/+/960726 Change-Id: If42aa11735bee963afc33d2e06541e1d9aab0515 Signed-off-by: Maximilian Stinsky Signed-off-by: Bartosz Bezak