1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
|
# This class installs and configures the OVN Neutron plugin
#
# === Parameters
#
# [*ovn_nb_connection*]
# (optional) The connection string for the OVN_Northbound OVSDB.
# Defaults to 'tcp:127.0.0.1:6641'
#
# [*ovn_sb_connection*]
# (optional) The connection string for the OVN_Southbound OVSDB
# Defaults to 'tcp:127.0.0.1:6642'
#
# [*ovn_nb_private_key*]
# (optional) The PEM file with private key for SSL connection to OVN-NB-DB
# Defaults to $facts['os_service_default']
#
# [*ovn_nb_certificate*]
# (optional) The PEM file with certificate that certifies the private
# key specified in ovn_nb_private_key
# Defaults to $facts['os_service_default']
#
# [*ovn_nb_ca_cert*]
# (optional) The PEM file with CA certificate that OVN should use to
# verify certificates presented to it by SSL peers
# Defaults to $facts['os_service_default']
#
# [*ovn_sb_private_key*]
# (optional) The PEM file with private key for SSL connection to OVN-SB-DB
# Defaults to $facts['os_service_default']
#
# [*ovn_sb_certificate*]
# (optional) The PEM file with certificate that certifies the
# private key specified in ovn_sb_private_key
# Defaults to $facts['os_service_default']
#
# [*ovn_sb_ca_cert*]
# (optional) The PEM file with CA certificate that OVN should use to
# verify certificates presented to it by SSL peers
# Defaults to $facts['os_service_default']
#
# [*package_ensure*]
# (optional) The intended state of the python-networking-odl
# package, i.e. any of the possible values of the 'ensure'
# property for a package resource type.
# Defaults to 'present'
#
# [*ovsdb_connection_timeout*]
# (optional) Timeout in seconds for the OVSDB connection transaction
# Defaults to $facts['os_service_default']
#
# [*ovsdb_retry_max_interval*]
# (optional) Max interval in seconds between each retry to get the OVN NB
# and SB IDLs.
# Defaults to $facts['os_service_default']
#
# [*ovsdb_probe_interval*]
# (optional) The probe interval for the OVSDB session in milliseconds.
# Defaults to $facts['os_service_default'].
#
# [*neutron_sync_mode*]
# (optional) The synchronization mode of OVN with Neutron DB.
# Valid values are - 'log', 'off', 'repair'
# off - synchronization is off
# log - during neutron-server startup check to see if OVN is in sync with
# the Neutron database. Log warnings for any inconsistencies found so
# that an admin can investigate.
# repair - during neutron-server startup, automatically create resources
# found in Neutron but not in OVN. Also remove resources from OVN
# that are no longer in Neutron.
# Defaults to $facts['os_service_default']
#
# [*ovn_metadata_enabled*]
# (optional) Whether to enable metadata service in OVN.
# Type: boolean
# Defaults to $facts['os_service_default']
#
# [*dvr_enabled*]
# (optional) Whether to enable DVR.
# Type: boolean
# Defaults to $facts['os_service_default']
#
# [*disable_ovn_dhcp_for_baremetal_ports*]
# (optional) Whether to disable built-in DHCP for baremetal ports.
# Type: boolean
# Defaults to $facts['os_service_default']
#
# [*dns_servers*]
# (optional) List of dns servers which will be as forwarders
# if a subnet's dns_nameservers is empty.
# Type: List
# Defaults to $facts['os_service_default']
#
# [*vhostuser_socket_dir*]
# (optional) The vhost-user socket directory for OVS
# Type: String
# Defaults to $facts['os_service_default']
#
# [*dhcp_default_lease_time*]
# (optional) Default lease time (in seconds) to use with OVN's native DHCP
# service.
# Defaults to $facts['os_service_default']
#
# [*ovn_dhcp4_global_options*]
# (optional) Global DHCP6 options which will be automatically set on each
# subnet upon creation and on all existing subnets when Neutron starts.
# Defaults to $facts['os_service_default']
#
# [*ovn_dhcp6_global_options*]
# (optional) Global DHCP6 options which will be automatically set on each
# subnet upon creation and on all existing subnets when Neutron starts.
# Defaults to $facts['os_service_default']
#
# [*ovn_emit_need_to_frag*]
# (optional) Configure OVN to emit "need to frag" packets in case
# of MTU mismatch. Before enabling this configuration make
# sure that its supported by the host kernel (version >=
# 5.2) or by checking the output of the following command:
# ovs-appctl -t ovs-vswitchd dpif/show-dp-features br-int |
# grep "Check pkt length action".
# Type: boolean
# Defaults to $facts['os_service_default']
#
# [*localnet_learn_fdb*]
# (optional) If enabled it will allow localnet ports to learn MAC addresses
# and store them in FDB SB table. This avoids flooding for
# traffic towards unknown IPs when port security is disable.
# It requires OVN 22.09 or newer.
# Type: boolean
# Defaults to $facts['os_service_default']
#
# [*fdb_age_threshold*]
# (optional) The number of seconds to keep FD entries in the OVN DB.
# Defaults to $facts['os_service_default']
#
# [*mac_binding_age_threshold*]
# (optional) The number of seconds to keep MAC_Binding entries in the OVN DB.
# Defaults to $facts['os_service_default']
#
# [*broadcast_arps_to_all_routers*]
# (optional) If enabled OVM will flood ARP requests to all attached ports on
# a network. Supported by OVM >= 23.06.
# Type: boolean
# Defaults to $facts['os_service_default']
#
# [*ovn_router_indirect_snat*]
# (optional) Whether to configure SNAT for all nested subnets connected to
# the router through any routers.
# Defaults to $facts['os_service_default']
#
# [*ignore_lsp_down*]
# (optional) Do not install ARP/ND reply flows for logical switch ports
# if the port is DOWN.
# Defaults to $facts['os_service_default']
#
# [*fdb_removal_limit*]
# (optional) FDB aging bulk removal limit.
# Defaults to $facts['os_service_default']
#
# [*mac_binding_removal_limit*]
# (optional) MAC binding aging bulk removal limit.
# Defaults to $facts['os_service_default']
#
# [*network_log_rate_limit*]
# (Optional) Maximum packets logging per second.
# Used by logging service plugin.
# Defaults to $facts['os_service_default'].
# Minimum possible value is 100.
#
# [*network_log_burst_limit*]
# (Optional) Maximum number of packets per rate_limit.
# Used by logging service plugin.
# Defaults to $facts['os_service_default'].
# Minimum possible value is 25.
#
# [*network_log_local_output_log_base*]
# (Optional) Output logfile path on agent side, default syslog file.
# Used by logging service plugin.
# Defaults to $facts['os_service_default'].
#
class neutron::plugins::ml2::ovn(
$ovn_nb_connection = $facts['os_service_default'],
$ovn_sb_connection = $facts['os_service_default'],
$ovn_nb_private_key = $facts['os_service_default'],
$ovn_nb_certificate = $facts['os_service_default'],
$ovn_nb_ca_cert = $facts['os_service_default'],
$ovn_sb_private_key = $facts['os_service_default'],
$ovn_sb_certificate = $facts['os_service_default'],
$ovn_sb_ca_cert = $facts['os_service_default'],
$package_ensure = 'present',
$ovsdb_connection_timeout = $facts['os_service_default'],
$ovsdb_retry_max_interval = $facts['os_service_default'],
$ovsdb_probe_interval = $facts['os_service_default'],
$neutron_sync_mode = $facts['os_service_default'],
$ovn_metadata_enabled = $facts['os_service_default'],
$dvr_enabled = $facts['os_service_default'],
$disable_ovn_dhcp_for_baremetal_ports = $facts['os_service_default'],
$dns_servers = $facts['os_service_default'],
$vhostuser_socket_dir = $facts['os_service_default'],
$dhcp_default_lease_time = $facts['os_service_default'],
$ovn_dhcp4_global_options = $facts['os_service_default'],
$ovn_dhcp6_global_options = $facts['os_service_default'],
$ovn_emit_need_to_frag = $facts['os_service_default'],
$localnet_learn_fdb = $facts['os_service_default'],
$fdb_age_threshold = $facts['os_service_default'],
$mac_binding_age_threshold = $facts['os_service_default'],
$broadcast_arps_to_all_routers = $facts['os_service_default'],
$ovn_router_indirect_snat = $facts['os_service_default'],
$ignore_lsp_down = $facts['os_service_default'],
$fdb_removal_limit = $facts['os_service_default'],
$mac_binding_removal_limit = $facts['os_service_default'],
$network_log_rate_limit = $facts['os_service_default'],
$network_log_burst_limit = $facts['os_service_default'],
$network_log_local_output_log_base = $facts['os_service_default'],
) {
include neutron::deps
require neutron::plugins::ml2
if ! ( $neutron_sync_mode in ['off', 'log', 'repair', $facts['os_service_default']] ) {
fail( 'Invalid value for neutron_sync_mode parameter' )
}
$ovn_dhcp4_global_options_real = $ovn_dhcp4_global_options ? {
Hash => join(join_keys_to_values($ovn_dhcp4_global_options, ':'), ','),
default => join(any2array($ovn_dhcp4_global_options), ',')
}
$ovn_dhcp6_global_options_real = $ovn_dhcp6_global_options ? {
Hash => join(join_keys_to_values($ovn_dhcp6_global_options, ':'), ','),
default => join(any2array($ovn_dhcp6_global_options), ',')
}
neutron_plugin_ml2 {
'ovn/ovn_nb_connection' : value => join(any2array($ovn_nb_connection), ',');
'ovn/ovn_sb_connection' : value => join(any2array($ovn_sb_connection), ',');
'ovn/ovn_nb_private_key' : value => $ovn_nb_private_key;
'ovn/ovn_nb_certificate' : value => $ovn_nb_certificate;
'ovn/ovn_nb_ca_cert' : value => $ovn_nb_ca_cert;
'ovn/ovn_sb_private_key' : value => $ovn_sb_private_key;
'ovn/ovn_sb_certificate' : value => $ovn_sb_certificate;
'ovn/ovn_sb_ca_cert' : value => $ovn_sb_ca_cert;
'ovn/ovsdb_connection_timeout' : value => $ovsdb_connection_timeout;
'ovn/ovsdb_retry_max_interval' : value => $ovsdb_retry_max_interval;
'ovn/ovsdb_probe_interval' : value => $ovsdb_probe_interval;
'ovn/neutron_sync_mode' : value => $neutron_sync_mode;
'ovn/ovn_metadata_enabled' : value => $ovn_metadata_enabled;
'ovn/enable_distributed_floating_ip' : value => $dvr_enabled;
'ovn/disable_ovn_dhcp_for_baremetal_ports': value => $disable_ovn_dhcp_for_baremetal_ports;
'ovn/dns_servers' : value => join(any2array($dns_servers), ',');
'ovn/vhost_sock_dir' : value => $vhostuser_socket_dir;
'ovn/dhcp_default_lease_time' : value => $dhcp_default_lease_time;
'ovn/ovn_dhcp4_global_options' : value => $ovn_dhcp4_global_options_real;
'ovn/ovn_dhcp6_global_options' : value => $ovn_dhcp6_global_options_real;
'ovn/ovn_emit_need_to_frag' : value => $ovn_emit_need_to_frag;
'ovn/localnet_learn_fdb' : value => $localnet_learn_fdb;
'ovn/fdb_age_threshold' : value => $fdb_age_threshold;
'ovn/mac_binding_age_threshold' : value => $mac_binding_age_threshold;
'ovn/broadcast_arps_to_all_routers' : value => $broadcast_arps_to_all_routers;
'ovn/ovn_router_indirect_snat' : value => $ovn_router_indirect_snat;
'ovn_nb_global/ignore_lsp_down' : value => $ignore_lsp_down;
'ovn_nb_global/fdb_removal_limit' : value => $fdb_removal_limit;
'ovn_nb_global/mac_binding_removal_limit' : value => $mac_binding_removal_limit;
'network_log/rate_limit' : value => $network_log_rate_limit;
'network_log/burst_limit' : value => $network_log_burst_limit;
'network_log/local_output_log_base' : value => $network_log_local_output_log_base;
}
}
|
