1f9d16fe8d
Allows admin to control security-groups rule logging
NSXv distributed firewall expose an API to control rule logging,
as for the moment, admin user can use this feature only from inside of
the distributed firewall.
This patch make use of this API to provide the cloud admin with three ways
to control security-group logging:
- log whenever security-group rule is matched
- log when a packet doesn't match any security-group rule
- log whenever security-group rule is matched for selected
security-groups
Change-Id: I2a4dbff2ecba4c6041b4aaad1f20941440a5f6b6
68 lines
1.9 KiB
Python
68 lines
1.9 KiB
Python
# Copyright 2016 VMware, Inc. All rights reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from neutron.api import extensions
|
|
from neutron.api.v2 import attributes
|
|
|
|
RESOURCE_ATTRIBUTE_MAP = {
|
|
'security_groups': {
|
|
'logging': {
|
|
'allow_post': True,
|
|
'allow_put': True,
|
|
'convert_to': attributes.convert_to_boolean,
|
|
'default': False,
|
|
'enforce_policy': True,
|
|
'is_visible': True}
|
|
}
|
|
}
|
|
|
|
|
|
class Securitygrouplogging(extensions.ExtensionDescriptor):
|
|
"""Security group logging extension."""
|
|
|
|
@classmethod
|
|
def get_name(cls):
|
|
return "Security group logging"
|
|
|
|
@classmethod
|
|
def get_alias(cls):
|
|
return "security-group-logging"
|
|
|
|
@classmethod
|
|
def get_description(cls):
|
|
return "Security group logging extension."
|
|
|
|
@classmethod
|
|
def get_namespace(cls):
|
|
# todo
|
|
return "http://docs.openstack.org/ext/security_group_logging/api/v2.0"
|
|
|
|
@classmethod
|
|
def get_updated(cls):
|
|
return "2015-04-13T10:00:00-00:00"
|
|
|
|
def get_required_extensions(self):
|
|
return ["security-group"]
|
|
|
|
@classmethod
|
|
def get_resources(cls):
|
|
"""Returns Ext Resources."""
|
|
return []
|
|
|
|
def get_extended_resources(self, version):
|
|
if version == "2.0":
|
|
return RESOURCE_ATTRIBUTE_MAP
|
|
else:
|
|
return {}
|