vmware-nsx/vmware_nsx/osc/v2/security_group.py
Adit Sarfaty 7a74b75a72 Add security group policy extension to OSC
Change-Id: I87fdcc937da36adbf4b9f620c205ee1dcdf6fcd2
2016-11-10 15:50:39 +02:00

149 lines
5.4 KiB
Python

# Copyright 2016 VMware, Inc.
# All rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
"""Security group action implementations with nsx extensions"""
from osc_lib import utils as osc_utils
from openstackclient.identity import common as identity_common
from openstackclient.network.v2 import security_group
from vmware_nsx._i18n import _
from vmware_nsx.osc.v2 import utils
def add_nsx_extensions_to_parser(parser, client_manager, for_create=True):
if 'security-group-logging' in utils.get_extensions(client_manager):
# logging
logging_enable_group = parser.add_mutually_exclusive_group()
logging_enable_group.add_argument(
'--logging',
action='store_true',
help=_("Enable logging")
)
logging_enable_group.add_argument(
'--no-logging',
action='store_true',
help=_("Disable logging (default)")
)
if ('provider-security-group' in utils.get_extensions(client_manager)
and for_create):
# provider
parser.add_argument(
'--provider',
action='store_true',
help=_("Provider security group")
)
if 'security-group-policy' in utils.get_extensions(client_manager):
# policy
parser.add_argument(
'--policy',
metavar='<policy>',
help=_("NSX Policy Id")
)
def _get_plugin_attrs(attrs, parsed_args, client_manager):
if 'security-group-logging' in utils.get_extensions(client_manager):
# logging
if parsed_args.logging:
attrs['logging'] = True
if parsed_args.no_logging:
attrs['logging'] = False
if 'provider-security-group' in utils.get_extensions(client_manager):
# provider
if hasattr(parsed_args, 'provider') and parsed_args.provider:
attrs['provider'] = True
if 'security-group-policy' in utils.get_extensions(client_manager):
# policy
if parsed_args.policy is not None:
attrs['policy'] = parsed_args.policy
return attrs
class NsxCreateSecurityGroup(security_group.CreateSecurityGroup):
"""Create a new security_group with vmware nsx extensions """
def take_action_network(self, client, parsed_args):
#TODO(asarfaty): Better to change the neutron client code of
# CreateSecurityGroup:take_action_network to use an internal
# get_attributes, and override only this
# Build the create attributes.
attrs = {}
attrs['name'] = parsed_args.name
attrs['description'] = self._get_description(parsed_args)
if parsed_args.project is not None:
identity_client = self.app.client_manager.identity
project_id = identity_common.find_project(
identity_client,
parsed_args.project,
parsed_args.project_domain,
).id
attrs['tenant_id'] = project_id
# add the plugin attributes
attrs = _get_plugin_attrs(attrs, parsed_args, self.app.client_manager)
# Create the security group and display the results.
obj = client.create_security_group(**attrs)
display_columns, property_columns = security_group._get_columns(obj)
data = osc_utils.get_item_properties(
obj,
property_columns,
formatters=security_group._formatters_network
)
return (display_columns, data)
def update_parser_common(self, parser):
parser = super(NsxCreateSecurityGroup, self).update_parser_common(
parser)
# Add the nsx attributes to the neutron security group attributes
add_nsx_extensions_to_parser(
parser, self.app.client_manager, for_create=True)
return parser
class NsxSetSecurityGroup(security_group.SetSecurityGroup):
"""Set security group properties with vmware nsx extensions """
def take_action_network(self, client, parsed_args):
#TODO(asarfaty): Better to change the neutron client code of
# CreateSecurityGroup:take_action_network to use an internal
# get_attributes, and override only this
obj = client.find_security_group(parsed_args.group,
ignore_missing=False)
attrs = {}
if parsed_args.name is not None:
attrs['name'] = parsed_args.name
if parsed_args.description is not None:
attrs['description'] = parsed_args.description
# add the plugin attributes
attrs = _get_plugin_attrs(attrs, parsed_args, self.app.client_manager)
client.update_security_group(obj, **attrs)
def update_parser_common(self, parser):
parser = super(NsxSetSecurityGroup, self).update_parser_common(parser)
# Add the nsx attributes to the neutron security group attributes
add_nsx_extensions_to_parser(
parser, self.app.client_manager, for_create=False)
return parser