130 lines
4.2 KiB
Bash
130 lines
4.2 KiB
Bash
#!/bin/bash
|
|
|
|
# Copyright 2018 VMware, Inc.
|
|
#
|
|
# All Rights Reserved
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
|
|
# Neutron VMware NSX Policy plugin
|
|
# --------------------------------
|
|
|
|
# Save trace setting
|
|
NSX_XTRACE=$(set +o | grep xtrace)
|
|
set +o xtrace
|
|
|
|
dir=${GITDIR['vmware-nsx']}/devstack
|
|
source $dir/lib/nsx_common
|
|
source $dir/lib/nsx_v3_p_common
|
|
|
|
function _ovsdb_connection {
|
|
managers=(${NSX_POLICY//,/ })
|
|
_ovsdb_connection ${managers[0]}
|
|
}
|
|
|
|
function setup_integration_bridge {
|
|
die_if_not_set $LINENO NSX_POLICY "NSX_POLICY has not been set!"
|
|
setup_integration_bridge_common
|
|
}
|
|
|
|
function neutron_plugin_configure_common {
|
|
neutron_plugin_configure_common_v3 "vmware_nsxp"
|
|
}
|
|
|
|
function neutron_plugin_configure_service {
|
|
nsxp_configure_service nsx_p
|
|
iniset /$Q_PLUGIN_CONF_FILE DEFAULT nsx_extension_drivers vmware_nsxp_dns
|
|
}
|
|
|
|
function nsxp_configure_service {
|
|
install_neutron_projects
|
|
_nsxp_ini_set default_overlay_tz $DEFAULT_OVERLAY_TZ_UUID
|
|
_nsxp_ini_set default_vlan_tz $DEFAULT_VLAN_TZ_UUID
|
|
if [[ "$DEFAULT_TIER0_ROUTER_UUID" != "" ]]; then
|
|
_nsxp_ini_set default_tier0_router $DEFAULT_TIER0_ROUTER_UUID
|
|
Q_L3_ENABLED=True
|
|
Q_L3_ROUTER_PER_TENANT=True
|
|
fi
|
|
# NSX_POLICY must be a comma separated string
|
|
if [[ "$NSX_POLICIES" != "" ]]; then
|
|
_nsxp_ini_set nsx_api_managers $NSX_POLICIES
|
|
elif [[ "$NSX_POLICY" != "" ]]; then
|
|
_nsxp_ini_set nsx_api_managers $NSX_POLICY
|
|
else
|
|
if [[ $1 == "nsx_p" ]]; then
|
|
die $LINENO "The VMware nsx-p plugin needs at least one NSX policy manager."
|
|
fi
|
|
fi
|
|
if [[ "$NSX_L2GW_DRIVER" != "" ]]; then
|
|
iniset /$Q_PLUGIN_CONF_FILE DEFAULT nsx_l2gw_driver $NSX_L2GW_DRIVER
|
|
fi
|
|
|
|
_nsxp_ini_set native_metadata_route $NATIVE_METADATA_ROUTE
|
|
_nsxp_ini_set dhcp_profile $DHCP_PROFILE_UUID
|
|
_nsxp_ini_set metadata_proxy $METADATA_PROXY_UUID
|
|
iniset $NEUTRON_CONF DEFAULT dhcp_agent_notification False
|
|
|
|
_nsxp_ini_set nsx_api_user $NSX_USER
|
|
_nsxp_ini_set nsx_api_password $NSX_PASSWORD
|
|
_nsxp_ini_set retries $NSX_RETRIES
|
|
_nsxp_ini_set insecure $NSX_INSECURE
|
|
_nsxp_ini_set ca_file $NSX_CA_FILE
|
|
|
|
if [[ "$NSX_USE_CLIENT_CERT_AUTH" == "True" ]]; then
|
|
_nsxp_ini_set nsx_use_client_auth "True"
|
|
_nsxp_ini_set nsx_client_cert_file "$CLIENT_CERT_FILE"
|
|
_nsxp_ini_set nsx_client_cert_storage "nsx-db"
|
|
_nsxp_ini_set nsx_client_cert_pk_password "openstack"
|
|
fi
|
|
}
|
|
|
|
function init_vmware_nsx_p {
|
|
# Generate client certificate
|
|
if [[ "$NSX_USE_CLIENT_CERT_AUTH" == "True" ]]; then
|
|
nsxadmin -o generate -r certificate
|
|
fi
|
|
if ! is_set NSX_GATEWAY_NETWORK_INTERFACE; then
|
|
echo "NSX_GATEWAY_NETWORK_INTERFACE not set not configuring routes"
|
|
return
|
|
fi
|
|
|
|
if ! is_set NSX_GATEWAY_NETWORK_CIDR; then
|
|
NSX_GATEWAY_NETWORK_CIDR=$PUBLIC_NETWORK_GATEWAY/${FLOATING_RANGE#*/}
|
|
echo "The IP address to set on $PUBLIC_BRIDGE was not specified. "
|
|
echo "Defaulting to $NSX_GATEWAY_NETWORK_CIDR"
|
|
fi
|
|
# Make sure the interface is up, but not configured
|
|
sudo ip link set $NSX_GATEWAY_NETWORK_INTERFACE up
|
|
# Save and then flush the IP addresses on the interface
|
|
addresses=$(ip addr show dev $NSX_GATEWAY_NETWORK_INTERFACE | grep inet | awk {'print $2'})
|
|
sudo ip addr flush $NSX_GATEWAY_NETWORK_INTERFACE
|
|
# Use the PUBLIC Bridge to route traffic to the NSX gateway
|
|
get_bridge_up
|
|
}
|
|
|
|
function stop_vmware_nsx_p {
|
|
# Clean client certificate if exists
|
|
nsxadmin -o clean -r certificate
|
|
|
|
if ! is_set NSX_GATEWAY_NETWORK_INTERFACE; then
|
|
echo "NSX_GATEWAY_NETWORK_INTERFACE was not configured."
|
|
return
|
|
fi
|
|
|
|
set_nsx_gateway_network_cidr
|
|
}
|
|
|
|
# Restore xtrace
|
|
$NSX_XTRACE
|