RMD to support multiple SG Managers

Registered by Ivar Lazzaro

As we evolve as a project, being able to innovate at a fast pace is very important, especially as far as the interaction with other Openstack Projects is concerned.
More specifically, the interaction with Neutron's Security Groups is a very important piece of our logic, and we should be capable of easily switch between different ways of mapping GBP constructs to Security Groups in order to improve efficiency and capabilities, by still keeping a way to provide backward compatibility for existing deployments.

For these reasons, this blueprint aims to build a plugin architecture for Security Group management in the RMD.
The first implementations will include:

- remote_subnet_manager, which keeps the same logic we have used so far for SG mapping;

- remote_group_manager, a new SG manager which uses remote-SG logic for easier rule management, and also creates multiple SGs depending on their scope in order to provide shareability of PRSs.

Blueprint information

Status:
Not started
Approver:
None
Priority:
Undefined
Drafter:
Ivar Lazzaro
Direction:
Needs approval
Assignee:
Ivar Lazzaro
Definition:
New
Series goal:
None
Implementation:
Unknown
Milestone target:
None

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/sg-managers-in-rmd,n,z

Addressed by: https://review.openstack.org/179327
    add sharing capability to PRS for RMD

Addressed by: https://review.openstack.org/227562
    refactor SC mapping into a dedicated gbp driver

Addressed by: https://review.openstack.org/229673
    add cluster_id attribute to PTs for HA

Addressed by: https://review.openstack.org/229614
    use chain admin context for PT notifications

Addressed by: https://review.openstack.org/236044
    refactor SC mapping into a dedicated gbp driver

Addressed by: https://review.openstack.org/239157
    add cluster_id attribute to PTs for HA

Addressed by: https://review.openstack.org/239162
    add cluster_id attribute to PTs for HA

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.