Unnamed repository; edit this file 'description' to name the repository. https://git.platform-os.org/openstack/kolla-ansible.git/atom?h=stable%2F2026.1 2026-04-17T09:07:00+00:00 2026-04-17T09:07:00+00:00 Maximilian Stinsky maximilian.stinsky-damke@wiit.cloud 2024-07-19T10:35:19+00:00 urn:sha1:4f5dda873762438b3ba296da289dae5f3312c9da This patch implements vpnaas for OVN environments. It deploys a standalone neutron-ovn-vpn-agent on neutron nodes. The container no longer requires 'privileged: true'. Running as the 'neutron' user with specific kernel capabilities ensures the agent can manage network namespaces and interfaces without full privileges. Added capabilities: - NET_ADMIN # manage interfaces, IPs, routing, firewall - SYS_ADMIN # create/manage network namespaces - SYS_PTRACE # allow 'ip netns exec' attach to processes - DAC_OVERRIDE # bypass file read/write restrictions - DAC_READ_SEARCH # allow directory traversal and file read - SETPCAP # retain capabilities for privileged ops Added security options: - apparmor=unconfined # disable AppArmor confinement - seccomp=unconfined # disable seccomp filtering - label=disable # disable SELinux/labeling Depends-On: https://review.opendev.org/c/openstack/kolla/+/924302 Closes-Bug: #2048392 Change-Id: I961b1407ae1402d146f0c09924df8e007e331af5 Signed-off-by: Joachim de Groot <joachim.de.groot@menzel-it.net> Signed-off-by: Piotr Milewski <vurmil@gmail.com> 2018-04-28T15:43:06+00:00 ZhijunWei wzj334965317@outlook.com 2018-04-28T15:41:54+00:00 urn:sha1:44b49adda1650d66f0c19c0a7a35352b854980cc the /etc/kolla/adminrc.sh should be export before init vpn script, this ps to add test for credentials set to avoid it missing. Change-Id: Ib849d5f5804221c507c2466f2f08179340188c24 2017-11-03T13:30:00+00:00 rtmdk rtmdk@163.com 2017-11-03T06:33:36+00:00 urn:sha1:0c6879b85f4ba53281318b1c7919482a014caa47 Change-Id: Ie865b7175b46f939b629d5378d98d0aeba963df2 Closes-Bug: #1729778 2017-01-17T14:28:01+00:00 Paul Bourke paul.bourke@oracle.com 2016-11-24T11:56:59+00:00 urn:sha1:ef4069a1d35c7de1718c630cecfe47071d9d7933 Change-Id: I2b456b1626875d863f896ad7fc6c0024f5ed110f