Enable back IPv6 for OVN based scenario

IPv6 has been disabled recently by default to reduce the attack
surface of the system, however OVN/Geneve kernel-based tunnels
require it to function properly.

[https://www.mail-archive.com/ovs-discuss@openvswitch.org/msg03639.html]

Change-Id: Ife86dfad77e7899bd28f83a49c361cd8a623597c
Signed-off-by: Michael Polenchuk <mpolenchuk@mirantis.com>

diff --git a/mcp/reclass/classes/cluster/mcp-ovn-ha/openstack/init.yml b/mcp/reclass/classes/cluster/mcp-ovn-ha/openstack/init.yml
index 737af52..ec0d36c 100644 (file)
--- a/mcp/reclass/classes/cluster/mcp-ovn-ha/openstack/init.yml
+++ b/mcp/reclass/classes/cluster/mcp-ovn-ha/openstack/init.yml
@@ -11,3 +11,10 @@ classes:
 parameters:
   _param:
     neutron_tenant_network_types: "geneve,flat"
+  linux:
+    system:
+      kernel:
+        ~boot_options:
+          - ipv6.disable=0
+          - spectre_v2=off
+          - nopti

diff --git a/mcp/reclass/classes/cluster/mcp-ovn-noha/init.yml b/mcp/reclass/classes/cluster/mcp-ovn-noha/init.yml
index 82f4632..49e7e46 100644 (file)
--- a/mcp/reclass/classes/cluster/mcp-ovn-noha/init.yml
+++ b/mcp/reclass/classes/cluster/mcp-ovn-noha/init.yml
@@ -10,3 +10,9 @@ classes:
   - cluster.mcp-common-noha.init_options
   - cluster.mcp-ovn-noha.infra
   - cluster.mcp-ovn-noha.openstack
+parameters:
+  linux:
+    system:
+      kernel:
+        ~boot_options:
+          - ipv6.disable=0