Hi, On Tue, Nov 17, 2020 at 02:56:55PM +0530, Rabi Mishra wrote:

On Tue, Nov 17, 2020 at 2:32 PM Yves Gd <yves.guimard@gmail.com> wrote:

...

Hi,

Trying to use a HOT firewall template, I encounter this error: "ERROR: HEAT-E99001 Service neutron is not available for resource type OS::Neutron::Firewall, reason: Required extension fwaas in neutron service is not available."

We use fwaas v2, is it supported by heat module on Train version?

No it's not supported. The existing heat resources use fwaas v1 api, which has been removed from neutron in stein. So these heat resources are useless in train.

Feel free to create a story and contribute. With very few contributors, we've not been able to keep up with all service api changes.

Please also note that due to lack of maintainers, we deprecated neutron-fwaas project so ussuri is last release of that project.

...

Our openstack environment is deployed by kolla (9.2.0) with fwaas enabled. I assume "yes" but would like to be sure.

Sorry if it's written somewhere but I couldn't find this information.

Here is a simple version producing the error: ------------------- heat_template_version: rocky resources: firewall1: type: OS::Neutron::Firewall properties: description: Test fwaas name: Test_fwaas -------------------

Regards, Yves

-- Regards, Rabi Mishra

-- Slawek Kaplonski Principal Software Engineer Red Hat