138 lines
4.2 KiB
Puppet
138 lines
4.2 KiB
Puppet
# == Define: neutron::plugins::ml2::cisco::nexus_creds
|
|
#
|
|
# Defined type to configure the Cisco Nexus Switch Credentials
|
|
# for use by the ML2 Mech Driver for Cisco Nexus Switches.
|
|
#
|
|
# More info available here:
|
|
# http://networking-cisco.readthedocs.io
|
|
#
|
|
#
|
|
# neutron::plugins::ml2::cisco::nexus_creds used by
|
|
# neutron::plugins::ml2::cisco::nexus
|
|
#
|
|
# === Parameters:
|
|
#
|
|
# [*username*]
|
|
# (not used) The username for logging into the switch to manage it.
|
|
#
|
|
# [*password*]
|
|
# (not used) The password for logging into the switch to manage it.
|
|
#
|
|
# [*servers*]
|
|
# (not used) A hash of server names (key) mapped to the switch's
|
|
# interfaces (value). For each host connected to a port on the
|
|
# switch, specify the hostname and the Nexus physical port/s
|
|
# (interface/s) it is connected to. The values in the hash can
|
|
# be a comma separated list of interfaces mapped to the server.
|
|
#
|
|
# Hash Format:
|
|
#
|
|
# {
|
|
# <hostname> => "<interfaceID1>,<interfaceID2>,<... interfaceID_N>"
|
|
# }
|
|
#
|
|
# Interface ID format options:
|
|
# "<intf_type>:<position>"
|
|
# Valid intf_type's are 'ethernet' and 'port-channel'.
|
|
# The default setting for <intf_type:> is 'ethernet' and need not be
|
|
# added to this setting.
|
|
#
|
|
# Example:
|
|
# {
|
|
# 'control1' => 'ethernet:1/1',
|
|
# 'control2' => 'ethernet:1/2',
|
|
# 'compute1' => '1/3,1/4'
|
|
# }
|
|
#
|
|
# [*ip_address*]
|
|
# (required) The IP address of the switch.
|
|
#
|
|
# [*ssh_port*]
|
|
# (not used) The SSH port to use when connecting to the switch.
|
|
# Defaults to undef.
|
|
#
|
|
# [*nve_src_intf*]
|
|
# (not used) Only valid if VXLAN overlay is configured and
|
|
# vxlan_global_config is set to True.
|
|
#
|
|
# The NVE source interface is a loopback interface that is configured on
|
|
# the switch with valid /32 IP address. This /32 IP address must be known
|
|
# by the transient devices in the transport network and the remote VTEPs.
|
|
# This is accomplished by advertising it through a dynamic routing protocol
|
|
# in the transport network. (NB: If no nve_src_intf is defined then a
|
|
# default setting of 0 (creates "loopback0") will be used.)
|
|
#
|
|
# Defaults to undef.
|
|
#
|
|
# [*physnet*]
|
|
# (not used) Only valid if VXLAN overlay is configured.
|
|
# The physical network name defined in the network_vlan_ranges variable
|
|
# (defined under the ml2_type_vlan section) that this switch is controlling.
|
|
# The configured 'physnet' is the physical network domain that is connected
|
|
# to this switch. The vlan ranges defined in network_vlan_ranges for a
|
|
# a physical network are allocated dynamically and are unique per physical
|
|
# network. These dynamic vlans may be reused across physical networks.
|
|
#
|
|
# Defaults to undef.
|
|
#
|
|
# [*vpc_pool*]
|
|
# (not used) Required for Baremetal deployments and Port-Channel creation
|
|
# is needed. This defines the pool of port-channel ids which are
|
|
# available for port-channel creation.
|
|
#
|
|
# Defaults to undef.
|
|
#
|
|
# [*intfcfg_portchannel*]
|
|
# (not used) For use with Baremetal deployments and custom port-channel
|
|
# configuration is required during port-channel creation.
|
|
#
|
|
# Defaults to undef.
|
|
#
|
|
# [*https_verify*]
|
|
# (not used) Set to True when certification authority (CA) file is in
|
|
# the Operating System repository or is a locally defined file whose
|
|
# name is provided in https_local_certificate. Set to False
|
|
# to skip https certification checking thus making the connection
|
|
# insecure. Getting a certificate and setting https_verify to True
|
|
# is strongly advised for production to prevent man-in-the-middle
|
|
# attacks. Be advised the default will change from False to True
|
|
# in future releases.
|
|
#
|
|
# Defaults to undef.
|
|
#
|
|
# [*https_local_certificate*]
|
|
# (not used) Configure a local certificate file to present in https
|
|
# requests. For experimental purpose when an official certificate
|
|
# from a Trusted Certificate Authority is not yet available.
|
|
#
|
|
# Defaults to undef.
|
|
#
|
|
|
|
|
|
define neutron::plugins::ml2::cisco::nexus_creds(
|
|
# Not used parameters
|
|
$username,
|
|
$password,
|
|
$servers,
|
|
# Used parameters
|
|
$ip_address,
|
|
$ssh_port = undef,
|
|
$nve_src_intf = undef,
|
|
$physnet = undef,
|
|
$vpc_pool = undef,
|
|
$intfcfg_portchannel = undef,
|
|
$https_verify = undef,
|
|
$https_local_certificate = undef,
|
|
|
|
) {
|
|
include ::neutron::deps
|
|
|
|
ensure_resource('file', '/var/lib/neutron/.ssh',
|
|
{
|
|
ensure => directory,
|
|
owner => 'neutron',
|
|
tag => 'neutron-config-file',
|
|
}
|
|
)
|
|
}
|