b7cb3b7523
As discussed in the bug report, we setup iptables rules for the metadata service even if we're using neutron (which routes to metadata in a different way). This is because of the split-brain behaviour of the network driver interface versus the network API interface. Instead, only setup iptables if we are _not_ using neutron. Change-Id: I43df9200aba1018d2c7cd2f118864326af15fd42 Closes-Bug: #1687187
37 lines
1.4 KiB
Python
37 lines
1.4 KiB
Python
# Copyright 2010 United States Government as represented by the
|
|
# Administrator of the National Aeronautics and Space Administration.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from nova import manager
|
|
from nova.network import driver
|
|
from nova import utils
|
|
|
|
|
|
class MetadataManager(manager.Manager):
|
|
"""Metadata Manager.
|
|
|
|
This class manages the Metadata API service initialization. Currently, it
|
|
just adds an iptables filter rule for the metadata service.
|
|
"""
|
|
def __init__(self, *args, **kwargs):
|
|
super(MetadataManager, self).__init__(*args, **kwargs)
|
|
|
|
if not utils.is_neutron():
|
|
# NOTE(mikal): we only add iptables rules if we're running
|
|
# under nova-network. This code should go away when the
|
|
# deprecation of nova-network is complete.
|
|
self.network_driver = driver.load_network_driver()
|
|
self.network_driver.metadata_accept()
|