diff options
| author | Thomas Lamprecht <t.lamprecht@proxmox.com> | 2023-05-25 18:10:14 +0200 | 
|---|---|---|
| committer | Thomas Lamprecht <t.lamprecht@proxmox.com> | 2023-05-25 18:18:57 +0200 | 
| commit | 6029cbb071c3722c717eebbafaf1b373f3edaadc (patch) | |
| tree | 456d7aff44d2ae220d1671f77da7528174d53fe6 /src/PVE/API2/Network/SDN/Zones.pm | |
| parent | cead0f28af4aceee83af6636d4f5ffb2d2f6c6b1 (diff) | |
separate packaging and source build system
like almost all of our repos do nowadays, modern git can detect such
things on rebase so in development stuff should be hopefully not too
much affected by this.
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
Diffstat (limited to 'src/PVE/API2/Network/SDN/Zones.pm')
| -rw-r--r-- | src/PVE/API2/Network/SDN/Zones.pm | 351 | 
1 files changed, 351 insertions, 0 deletions
diff --git a/src/PVE/API2/Network/SDN/Zones.pm b/src/PVE/API2/Network/SDN/Zones.pm new file mode 100644 index 0000000..6e53240 --- /dev/null +++ b/src/PVE/API2/Network/SDN/Zones.pm @@ -0,0 +1,351 @@ +package PVE::API2::Network::SDN::Zones; + +use strict; +use warnings; + +use Storable qw(dclone); + +use PVE::Cluster qw(cfs_read_file cfs_write_file); +use PVE::Exception qw(raise raise_param_exc); +use PVE::JSONSchema qw(get_standard_option); +use PVE::RPCEnvironment; +use PVE::SafeSyslog; +use PVE::Tools qw(extract_param); + +use PVE::Network::SDN::Dns; +use PVE::Network::SDN::Subnets; +use PVE::Network::SDN::Vnets; +use PVE::Network::SDN; + +use PVE::Network::SDN::Zones::EvpnPlugin; +use PVE::Network::SDN::Zones::FaucetPlugin; +use PVE::Network::SDN::Zones::Plugin; +use PVE::Network::SDN::Zones::QinQPlugin; +use PVE::Network::SDN::Zones::SimplePlugin; +use PVE::Network::SDN::Zones::VlanPlugin; +use PVE::Network::SDN::Zones::VxlanPlugin; +use PVE::Network::SDN::Zones; + +use PVE::RESTHandler; +use base qw(PVE::RESTHandler); + +my $sdn_zones_type_enum = PVE::Network::SDN::Zones::Plugin->lookup_types(); + +my $api_sdn_zones_config = sub { +    my ($cfg, $id) = @_; + +    my $scfg = dclone(PVE::Network::SDN::Zones::sdn_zones_config($cfg, $id)); +    $scfg->{zone} = $id; +    $scfg->{digest} = $cfg->{digest}; + +    if ($scfg->{nodes}) { +        $scfg->{nodes} = PVE::Network::SDN::encode_value($scfg->{type}, 'nodes', $scfg->{nodes}); +    } + +    if ($scfg->{exitnodes}) { +        $scfg->{exitnodes} = PVE::Network::SDN::encode_value($scfg->{type}, 'exitnodes', $scfg->{exitnodes}); +    } + +    my $pending = $scfg->{pending}; +    if ($pending->{nodes}) { +        $pending->{nodes} = PVE::Network::SDN::encode_value($scfg->{type}, 'nodes', $pending->{nodes}); +    } + +    if ($pending->{exitnodes}) { +        $pending->{exitnodes} = PVE::Network::SDN::encode_value($scfg->{type}, 'exitnodes', $pending->{exitnodes}); +    } + +    return $scfg; +}; + +__PACKAGE__->register_method ({ +    name => 'index', +    path => '', +    method => 'GET', +    description => "SDN zones index.", +    permissions => { +	description => "Only list entries where you have 'SDN.Audit' or 'SDN.Allocate' permissions on '/sdn/zones/<zone>'", +	user => 'all', +    }, +    parameters => { +    	additionalProperties => 0, +	properties => { +	    type => { +		description => "Only list SDN zones of specific type", +		type => 'string', +		enum => $sdn_zones_type_enum, +		optional => 1, +	    }, +	    running => { +		type => 'boolean', +		optional => 1, +		description => "Display running config.", +	    }, +	    pending => { +		type => 'boolean', +		optional => 1, +		description => "Display pending config.", +	    }, +	}, +    }, +    returns => { +	type => 'array', +	items => { +	    type => "object", +	    properties => { zone => { type => 'string'}, +			    type => { type => 'string'}, +			    mtu => { type => 'integer', optional => 1 }, +			    dns => { type => 'string', optional => 1}, +			    reversedns => { type => 'string', optional => 1}, +			    dnszone => { type => 'string', optional => 1}, +			    ipam => { type => 'string', optional => 1}, +			    pending => { optional => 1}, +			    state => { type => 'string', optional => 1}, +			    nodes => { type => 'string', optional => 1}, +			  }, +	}, +	links => [ { rel => 'child', href => "{zone}" } ], +    }, +    code => sub { +	my ($param) = @_; + +	my $rpcenv = PVE::RPCEnvironment::get(); +	my $authuser = $rpcenv->get_user(); + +	my $cfg = {}; +	if ($param->{pending}) { +	    my $running_cfg = PVE::Network::SDN::running_config(); +	    my $config = PVE::Network::SDN::Zones::config(); +	    $cfg = PVE::Network::SDN::pending_config($running_cfg, $config, 'zones'); +        } elsif ($param->{running}) { +	    my $running_cfg = PVE::Network::SDN::running_config(); +	    $cfg = $running_cfg->{zones}; +        } else { +	    $cfg = PVE::Network::SDN::Zones::config(); +        } + +	my @sids = PVE::Network::SDN::Zones::sdn_zones_ids($cfg); +	my $res = []; +	for my $id (@sids) { +	    my $privs = [ 'SDN.Audit', 'SDN.Allocate' ]; +	    next if !$rpcenv->check_any($authuser, "/sdn/zones/$id", $privs, 1); + +	    my $scfg = &$api_sdn_zones_config($cfg, $id); +	    next if $param->{type} && $param->{type} ne $scfg->{type}; + +	    my $plugin_config = $cfg->{ids}->{$id}; +	    my $plugin = PVE::Network::SDN::Zones::Plugin->lookup($plugin_config->{type}); +	    push @$res, $scfg; +	} + +	return $res; +    }}); + +__PACKAGE__->register_method ({ +    name => 'read', +    path => '{zone}', +    method => 'GET', +    description => "Read sdn zone configuration.", +    permissions => { +	check => ['perm', '/sdn/zones/{zone}', ['SDN.Allocate']], +   }, + +    parameters => { +    	additionalProperties => 0, +	properties => { +	    zone => get_standard_option('pve-sdn-zone-id'), +	    running => { +		type => 'boolean', +		optional => 1, +		description => "Display running config.", +	    }, +	    pending => { +		type => 'boolean', +		optional => 1, +		description => "Display pending config.", +	    } +	}, +    }, +    returns => { type => 'object' }, +    code => sub { +	my ($param) = @_; + +	my $cfg = {}; +	if ($param->{pending}) { +	    my $running_cfg = PVE::Network::SDN::running_config(); +	    my $config = PVE::Network::SDN::Zones::config(); +	    $cfg = PVE::Network::SDN::pending_config($running_cfg, $config, 'zones'); +        } elsif ($param->{running}) { +	    my $running_cfg = PVE::Network::SDN::running_config(); +	    $cfg = $running_cfg->{zones}; +        } else { +	    $cfg = PVE::Network::SDN::Zones::config(); +        } + +	return &$api_sdn_zones_config($cfg, $param->{zone}); +    }}); + +__PACKAGE__->register_method ({ +    name => 'create', +    protected => 1, +    path => '', +    method => 'POST', +    description => "Create a new sdn zone object.", +    permissions => { +	check => ['perm', '/sdn/zones', ['SDN.Allocate']], +    }, +    parameters => PVE::Network::SDN::Zones::Plugin->createSchema(), +    returns => { type => 'null' }, +    code => sub { +	my ($param) = @_; + +	my $type = extract_param($param, 'type'); +	my $id = extract_param($param, 'zone'); + +	my $plugin = PVE::Network::SDN::Zones::Plugin->lookup($type); +	my $opts = $plugin->check_config($id, $param, 1, 1); + +	PVE::Cluster::check_cfs_quorum(); +	mkdir("/etc/pve/sdn"); + +	PVE::Network::SDN::lock_sdn_config(sub { +	    my $zone_cfg = PVE::Network::SDN::Zones::config(); +	    my $controller_cfg = PVE::Network::SDN::Controllers::config(); +	    my $dns_cfg = PVE::Network::SDN::Dns::config(); + +	    my $scfg = undef; +	    if ($scfg = PVE::Network::SDN::Zones::sdn_zones_config($zone_cfg, $id, 1)) { +		die "sdn zone object ID '$id' already defined\n"; +	    } + +	    my $dnsserver = $opts->{dns}; +	    raise_param_exc({ dns => "$dnsserver don't exist"}) +		if $dnsserver && !$dns_cfg->{ids}->{$dnsserver}; + +	    my $reversednsserver = $opts->{reversedns}; +	    raise_param_exc({ reversedns => "$reversednsserver don't exist"}) +		if $reversednsserver && !$dns_cfg->{ids}->{$reversednsserver}; + +	    my $dnszone = $opts->{dnszone}; +	    raise_param_exc({ dnszone => "missing dns server"}) +		if $dnszone && !$dnsserver; + +	    my $ipam = $opts->{ipam}; +	    my $ipam_cfg = PVE::Network::SDN::Ipams::config(); +	    raise_param_exc({ ipam => "$ipam not existing"}) if $ipam && !$ipam_cfg->{ids}->{$ipam}; + +	    $zone_cfg->{ids}->{$id} = $opts; +	    $plugin->on_update_hook($id, $zone_cfg, $controller_cfg); + +	    PVE::Network::SDN::Zones::write_config($zone_cfg); + +	}, "create sdn zone object failed"); + +	return; +    }}); + +__PACKAGE__->register_method ({ +    name => 'update', +    protected => 1, +    path => '{zone}', +    method => 'PUT', +    description => "Update sdn zone object configuration.", +    permissions => { +	check => ['perm', '/sdn/zones', ['SDN.Allocate']], +    }, +    parameters => PVE::Network::SDN::Zones::Plugin->updateSchema(), +    returns => { type => 'null' }, +    code => sub { +	my ($param) = @_; + +	my $id = extract_param($param, 'zone'); +	my $digest = extract_param($param, 'digest'); + +	PVE::Network::SDN::lock_sdn_config(sub { +	    my $zone_cfg = PVE::Network::SDN::Zones::config(); +	    my $controller_cfg = PVE::Network::SDN::Controllers::config(); +	    my $dns_cfg = PVE::Network::SDN::Dns::config(); + +	    PVE::SectionConfig::assert_if_modified($zone_cfg, $digest); + +	    my $scfg = PVE::Network::SDN::Zones::sdn_zones_config($zone_cfg, $id); + +	    my $plugin = PVE::Network::SDN::Zones::Plugin->lookup($scfg->{type}); +	    my $opts = $plugin->check_config($id, $param, 0, 1); + +	    if ($opts->{ipam} && !$scfg->{ipam} || $opts->{ipam} ne $scfg->{ipam}) { + +		# don't allow ipam change if subnet are defined for now, need to implement resync ipam content +		my $subnets_cfg = PVE::Network::SDN::Subnets::config(); +		for my $subnetid (sort keys %{$subnets_cfg->{ids}}) { +		    my $subnet = PVE::Network::SDN::Subnets::sdn_subnets_config($subnets_cfg, $subnetid); +		    raise_param_exc({ ipam => "can't change ipam if a subnet is already defined in this zone"}) +			if $subnet->{zone} eq $id; +		} +	    } + +	    $zone_cfg->{ids}->{$id} = $opts; + +	    my $dnsserver = $opts->{dns}; +	    raise_param_exc({ dns => "$dnsserver don't exist"}) if $dnsserver && !$dns_cfg->{ids}->{$dnsserver}; + +	    my $reversednsserver = $opts->{reversedns}; +	    raise_param_exc({ reversedns => "$reversednsserver don't exist"}) if $reversednsserver && !$dns_cfg->{ids}->{$reversednsserver}; + +	    my $dnszone = $opts->{dnszone}; +	    raise_param_exc({ dnszone => "missing dns server"}) if $dnszone && !$dnsserver; + +	    my $ipam = $opts->{ipam}; +	    my $ipam_cfg = PVE::Network::SDN::Ipams::config(); +	    raise_param_exc({ ipam => "$ipam not existing"}) if $ipam && !$ipam_cfg->{ids}->{$ipam}; + +	    $plugin->on_update_hook($id, $zone_cfg, $controller_cfg); + +	    PVE::Network::SDN::Zones::write_config($zone_cfg); + +	}, "update sdn zone object failed"); + +	return; +    }}); + +__PACKAGE__->register_method ({ +    name => 'delete', +    protected => 1, +    path => '{zone}', +    method => 'DELETE', +    description => "Delete sdn zone object configuration.", +    permissions => { +	check => ['perm', '/sdn/zones', ['SDN.Allocate']], +    }, +    parameters => { +	additionalProperties => 0, +	properties => { +	    zone => get_standard_option('pve-sdn-zone-id', { +		completion => \&PVE::Network::SDN::Zones::complete_sdn_zones, +	    }), +	}, +    }, +    returns => { type => 'null' }, +    code => sub { +	my ($param) = @_; + +	my $id = extract_param($param, 'zone'); + +        PVE::Network::SDN::lock_sdn_config(sub { +	    my $cfg = PVE::Network::SDN::Zones::config(); +	    my $scfg = PVE::Network::SDN::Zones::sdn_zones_config($cfg, $id); + +	    my $plugin = PVE::Network::SDN::Zones::Plugin->lookup($scfg->{type}); +	    my $vnet_cfg = PVE::Network::SDN::Vnets::config(); + +	    $plugin->on_delete_hook($id, $vnet_cfg); + +	    delete $cfg->{ids}->{$id}; + +	    PVE::Network::SDN::Zones::write_config($cfg); +	}, "delete sdn zone object failed"); + +	return; +    }}); + +1;  | 
