vmware-nsx

Files

Salvatore Orlando 13f9e02a64 Remove calls to policy.check from plugin logic

Blueprint make-authz-orthogonal

This patch implements part #3 of this blueprint, according to its
specification.
It does so by allowing the view generator in the API layer to strip
off fields which do not satify authorization policies.
Also, some checks in unit tests for plugins relied on the
capability of the plugin to invoke directly the policy engine.
This checks have been removed and replaced by equivalent unit tests.
Finally, this patch required changes to most test cases for API
extensions in order to ensure the resource attribute map was
updated with the extension's attributes

Change-Id: I1ef94a8a628d34697254b68d7a539bd1c636876e

2013-05-15 01:49:34 +02:00

api_client

Enable automatic validation of many HACKING rules.

2013-04-11 19:48:28 +00:00

common

make default transport type configurable nvp

2013-05-13 19:52:20 -07:00

extensions

Remove calls to policy.check from plugin logic

2013-05-15 01:49:34 +02:00

__init__.py

Shorten the path of the nicira nvp plugin.

2013-04-11 19:10:25 +00:00

check_nvp_config.py

Simplify NVP plugin configuration

2013-04-25 13:56:32 -07:00

nicira_db.py

Shorten the path of the nicira nvp plugin.

2013-04-11 19:10:25 +00:00

nicira_models.py

Shorten the path of the nicira nvp plugin.

2013-04-11 19:10:25 +00:00

nicira_networkgw_db.py

Enable automatic validation of many HACKING rules.

2013-04-11 19:48:28 +00:00

nicira_qos_db.py

Remove calls to policy.check from plugin logic

2013-05-15 01:49:34 +02:00

nvp_cluster.py

Docstrings formatted according to pep257

2013-04-30 16:10:06 +03:00

nvp_plugin_version.py

Shorten the path of the nicira nvp plugin.

2013-04-11 19:10:25 +00:00

NvpApiClient.py

Docstrings formatted according to pep257

2013-04-30 16:10:06 +03:00

nvplib.py

make default transport type configurable nvp

2013-05-13 19:52:20 -07:00

QuantumPlugin.py

Remove calls to policy.check from plugin logic

2013-05-15 01:49:34 +02:00

README

Simplify NVP plugin configuration

2013-04-25 13:56:32 -07:00

README

nvp-plugin
-----------------------------------------------------------------------------

Overview and pre-requisites

    This is a Quantum plugin that can talk to a set of NVP controllers and
    implements the core Quantum v2 api.  In order to use it you must have
    Nicira NVP running and configured.  You must also have Quantum installed
    and configured.

NVP Plugin configuration

    1) Database configuration
    The NVP plugin leverages the Quantum database. The following connection
    parameters should be specified:
    - sql_connection: Database connection string
    - sql_max_retries: Maximum number of connection attempts (default 10)
    - reconnect_interval: Gap between connection attempts (default 2 seconds)
    2) NVP (general)
    - max_lp_per_bridged_ls: Maximum number of ports of a logical switch on a
    bridged transport zone (default 64)
    - concurrent_connections: Number of connects to each controller node
    (default 3)
    - nvp_gen_timout: Number of seconds a generation id should be valid for
    (default -1 meaning do not time out)
    3) NVP cluster
    By default the Quantum NVP plugin can talk to multiple controllers in a
    single cluster. In the future (Havana+) support for multiple clusters
    will be added.
    The following parameters can be configured:
    - default_tz_uuid: This is uuid of the default NVP Transport zone that
      will be used for creating tunneled isolated "Quantum" networks. It
      needs to be created in NVP before starting Quantum with the nvp plugin.
    - nvp_cluster_uuid: Optional paramter identifying the UUID of the cluster
      in NVP.  This can be retrieved from NVP management console "admin" section.
    - nvp_controllers: describes the list of controllers
    More details can be found in etc/quantum/plugins/nicira/nvp.ini

Quantum Configuration

    Modify your Quantum configuration for using the NVP Plugin:

    core_plugin =
        quantum.plugins.nicira.QuantumPlugin.NvpPluginV2