7dddf0f7d1
This constructs a VM's BMH network config secret, based on a template.
It also integrates IPAM functionality into the controller.
TODOs for subsequent patchsets:
- manage VM mac addresses.
- implement replacement of e.g. $vino.nodebridgegw
- confirm the nameservers definition below works
(it's a different field than we use in hostgenerator-m3)
The current patchset generates a networkData like so from the sample CRs:
links:
- id: management
name: management
type: bridge
mtu: 1500
# ethernet_mac_address: ??
bridgeName: vminfra-bridge
- id: external
name: external
type: sriov-bond
mtu: 9100
# ethernet_mac_address: ??
bond_miimon: 100
bond_mode: 802.3ad
bond_xmit_hash_policy: layer3+4
pf: [enp29s0f0,enp219s1f1]
vlan: 100
networks:
- id: management
type: ipv4
link: management
ip_address: 192.168.2.10
#netmask: "TODO - see if needed when ip has CIDR range"
dns_nameservers: [135.188.34.124]
routes:
- network: 10.0.0.0
netmask: 255.255.255.0
gateway: $vino.nodebridgegw
- id: external
type: ipv4
link: external
ip_address: 169.0.0.10
#netmask: "TODO - see if needed when ip has CIDR range"
dns_nameservers: []
routes:
- network: 0.0.0.0
netmask: 0.0.0.0
gateway: 169.0.0.1
Change-Id: I99b1a104764687c8b84f2495591e0712bed73ae5
67 lines
783 B
YAML
67 lines
783 B
YAML
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
creationTimestamp: null
|
|
name: manager-role
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- nodes
|
|
verbs:
|
|
- get
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- pods
|
|
verbs:
|
|
- list
|
|
- watch
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- create
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- airship.airshipit.org
|
|
resources:
|
|
- ippools
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- airship.airshipit.org
|
|
resources:
|
|
- vinoes
|
|
verbs:
|
|
- create
|
|
- delete
|
|
- get
|
|
- list
|
|
- patch
|
|
- update
|
|
- watch
|
|
- apiGroups:
|
|
- airship.airshipit.org
|
|
resources:
|
|
- vinoes/status
|
|
verbs:
|
|
- get
|
|
- patch
|
|
- update
|