This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.

This is a mechanically generated change to replace openstack.org
git:// URLs with https:// equivalents.

This is in aid of a planned future move of the git hosting
infrastructure to a self-hosted instance of gitea (https://gitea.io),
which does not support the git wire protocol at this stage.

This update should result in no functional change.

For more information see the thread at

 http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003825.html

Change-Id: I2f2b2272cb0e9a08928ce6900c9663a3a7eef96e

After https://review.openstack.org/#/c/524406/ landed,
we need to register L3 opts before initializing router info.

Change-Id: I2017be0e9ca069abfdd1c5250bc06b3b4109fa83
Closes-Bug: #1760320
(cherry picked from commit e10993c9)

While using IKE policy with version v2,
the IPsec siteconnection status always down.
From librewan wiki[1], the "phase2" in IKEv2 mistakenly
calls itself a PARENT SA which same as "phase1",
This is a known bug for some versions of libreswan.

For the newer versions of libreswan(3.20+),
the "IPsec SA established" will successful output if
phase2 state established.

Here we match the "established" and "newest IPSEC" for
an established IPSEC SA.

[1] https://libreswan.org/wiki/How_to_read_status_output

Change-Id: Iffff7d00f48e69fbc53bb45df17d6a5be6760a6d
Closes-Bug: #1781354
(cherry picked from commit 321392b9)

This is a mechanically generated patch to complete step 1 of moving
the zuul job settings out of project-config and into each project
repository.

Because there will be a separate patch on each branch, the branch
specifiers for branch-specific jobs have been removed.

Because this patch is generated by a script, there may be some
cosmetic changes to the layout of the YAML file(s) as the contents are
normalized.

See the python3-first goal document for details:
https://governance.openstack.org/tc/goals/stein/python3-first.html

Change-Id: If95ae0a42e1e5ee37f7698c4bf65a2defd9c8d8f
Story: #2002586
Task: #24314

LibreSwan 3.19 introduces a new commandline argument '--nssdir' for
pluto which defaults to '/etc/ipsec.d'. As older versions don't
understand such an option, we cannot just add it to the commandline.

The commandline arguments of LibreSwan are not stable enough to rely on.
For example, in 3.19, 'ipsec initnss' has the new argument '--nssdir',
and in 3.20, 'ipsec pluto' also gets this new argument '--nssdir', then
in 3.22, the argument '--ctlbase' is phased out.

In this commit, instead of trying new options and then fallback to old
ones for older versions, the bind-mount method used in StrongSwan driver
is adopted. With /etc and /var/run bind mounted, all the commandline
arguments related to configuration file places can be removed. This
ensures that changes of such arguments between different versions won't
bother as the default places are always used.

This commit also replaces 'auth=' by 'phase2=' in the configuration
template as the former is for a long time an alias of the latter and
removed in LibreSwan 3.19.

The virtual-private argument of 'ipsec pluto' has been put into the
configuration file to avoid commas(,) in the commandline so that the
netns_wrapper can work well.

This commit has been simply tested on CentOS 7.4 with the following
versions of LibreSwan provided by the CentOS repo:

  - libreswan-3.12-5.el7.x86_64.rpm
  - libreswan-3.12-10.1.el7_1.x86_64.rpm
  - libreswan-3.15-5.el7_1.x86_64.rpm
  - libreswan-3.15-8.el7.x86_64.rpm
  - libreswan-3.20-3.el7.x86_64.rpm
  - libreswan-3.20-5.el7_4.x86_64.rpm

and different versions of LibreSwan provided by libreswan.org[1]:

[1] https://download.libreswan.org/binaries/rhel/7/x86_64/

Conflicts:
	.zuul.yaml
	neutron_vpnaas/tests/tempest/scenario/test_vpnaas.py
	neutron_vpnaas/tests/unit/services/vpn/device_drivers/test_ipsec.py

Change-Id: Iacb6f13187b49cf771f0c24662d6af9217c211b8
Closes-Bug: #1711456
Closes-Bug: #1782337
(cherry picked from commit b6c8ea8a)

With commit 88f5e11d8bf[1], neutron plugs new ports as dead vlan. During
functional tests all the ports are untagged. So such tag should be
removed during functional testing.

Closes-Bug: #1777673

[1] I024bbbdf7059835b2f23c264b48478c71633a43c

Change-Id: I7b472b4a4f51fea473635fbd731a897e46af5eee
(cherry picked from commit a46f7d60)

build-openstack-sphinx-docs jobs fail on stable branches due to the new
pip version 10 introduces some previously Warning as Error: in case of
calling "pip install" without any package name, the command fails.
tox_install.sh is called during docs job without any package passed to pip.

Pep8 job is broken due to recent pep8 upgrade and corresponding
pycodestyle update.

This commit fixes the following errors:
  - E731 do not assign a lambda expression, use a def
  - W503 line break before binary operator
  - E402 module level import not at top of file

Change-Id: I55879d70f05de60a423176e5bf1803758f27c691

Unfortunately we have no release note on VPNaaS l3 agent extensions.
It is a big change from operator perspective, so it is worth documented
as a release note.

This commit is intentionally proposed directly to stable/queens
so that we can have this only in the queens release notes.

Change-Id: I61bec5d84ff554a9d39e11c58f9ed54787db36a3
Closes-Bug: #1751069

The new stable upper-constraints file is only available
after the openstack/requirements repository is branched.
This will happen around the RC1 timeframe.

Recheck and merge this change once the requirements
repository has been branched.

The CI system will work with this patch before the requirements
repository is branched because zuul configues the job to run
with a local copy of the file and defaults to the master branch.
However, accepting the patch will break the test configuration
on developers' local systems, so please wait until after the
requirements repository is branched to merge the patch.

Change-Id: I41598cdb13b67b3d7f0f24622a07243bf7972287

Change-Id: I2fcc3c347b7e6a5e051ec156da923b634bd4fa4e

Zuul no longer requires the project-name for in-repo configuration.
Omitting it makes forking or renaming projects easier.

Change-Id: I3407a96dd5f4fce5683386ffd9784118a2d7e6aa

Change-Id: If46cb3d425fee2da95100103e58cbbc11a674916

* https://review.openstack.org/519310 syncs the code from neutron
  project to neutron-tempest-plugin repo and it is better to depend
  on new one inorder to avoid the breakage.

Change-Id: Icf3ec7c186f45e86d602d5bc8754b91ddab47732

This patch adds doc for how to test VPNaaS with devstack
in order to help developers, operators and users easy to
understand VPNaaS as fast as possible.

This patch addresses the gap and improves docs as
discussed in Boston summit.

The content of this patch is basic inheritted from wiki page [1]
[1] https://wiki.openstack.org/wiki/Neutron/VPNaaS/HowToInstall

Change-Id: I8465cb90645af0fc3ea8cda554b0477b15f01fbe
Related-bug: 1692131

Change-Id: I9b2780e1e1e6dc8b733348e0aad2024304e11ebb

This patch adds more info to contributor guide to let
new contributors know how to contribute to vpnaas actively.

Change-Id: I62baaa077393009d8fa23d36413a3059bc2c4a0c
Related-bug: 1692131

This patch add more info about vpnaas team in order to let
new contributor know how to reach out relevent members.

Change-Id: I2a442973e7a4bf8498835d5ddf161bf635fc8bcb
Related-bug: 1692131

Now that VPNaaS is running under L3 agent extension.
There is no need extra steps.

Change-Id: I0f6a6dfe83f81da9d98b7ba1bd1b594eed4152e8
Related-bug: 1692131

This patch implements first step in zuulv3 migration guide [1]:

Move jobs to neutron-vpnaas repo

[1] https://docs.openstack.org/infra/manual/zuulv3.html#legacy-job-migration-details



Needed-By: I6feeb874eedbb7e7278923c4f6f4e526f1def24c
Needed-By: I9ee5756c15ab6c8a393dd77680d6277fb35a7ee2

Co-Authored-By: Cao Xuan Hoang <hoangcx@vn.fujitsu.com>
Change-Id: If66846aa7bfc2afd42b9ffd077cdb179563f5995

Change-Id: Ife93b18cb202a338d9b9fe6e2a0ae2a755ed6369

Change-Id: I01649563b5c3da3ece5599650725196520003a64

This patch is for stopping using ensure_dir in device_driver, as
the neutron.common.utils.ensure_dir is deprecated for removal, also
ensure_tree(path, 0o755) from oslo_utils.fileutils is suggested to be
used to create a directory.

Co-Authored-By: Cao Xuan Hoang <hoangcx@vn.fujitsu.com>
Change-Id: Ic9b4b86e65052c06c33c8628bb0c6700cdfd875b

Release notes are version independent, so remove version/release
values. We've found that projects now require the service package
to be installed in order to build release notes, and this is entirely
due to the current convention of pulling in the version information.

Release notes should not need installation in order to build, so this
unnecessary version setting needs to be removed.

This is needed for new release notes publishing, see
I56909152975f731a9d2c21b2825b972195e48ee8 and the discussion starting
at
http://lists.openstack.org/pipermail/openstack-dev/2017-November/124480.html
.

Change-Id: I779bd58265402894ac729c91f41da293361128e9

Change-Id: Ia74f4ee9a19d79bd595536cd435c3ebaf3a39480

The flavors extension's API definition was rehomed into neutron-lib with
commit I0229a80bb168bac8dc0fa17fb2b06f1b140d27b4 and will be consumed in
neutron with I265ac1c0596d0fb0acaf99eeb7cfe9501732476f
This patch follows suit, consuming the rehomed code from neutron-lib.

Change-Id: I5d239cd3530f3139ab6ded646a499f1b8da90a37

Change-Id: I4971b8910c2bcee206d0d5d86f527f9426441f21