79 lines
2.8 KiB
Python
79 lines
2.8 KiB
Python
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from neutron.common import rpc as n_rpc
|
|
from neutron import manager
|
|
|
|
|
|
# TODO(amotoki): Move security group RPC API and agent callback
|
|
# from securitygroups_rpc.py.
|
|
|
|
|
|
class SecurityGroupServerRpcCallback(n_rpc.RpcCallback):
|
|
"""Callback for SecurityGroup agent RPC in plugin implementations.
|
|
|
|
Subclass which inherits this class must implement get_port_from_device().
|
|
"""
|
|
|
|
# API version history:
|
|
# 1.1 - Initial version
|
|
# 1.2 - security_group_info_for_devices introduced as an optimization
|
|
|
|
# NOTE: RPC_API_VERSION must not be overridden in subclasses
|
|
# to keep RPC API version consistent across plugins.
|
|
RPC_API_VERSION = '1.2'
|
|
|
|
@property
|
|
def plugin(self):
|
|
return manager.NeutronManager.get_plugin()
|
|
|
|
def _get_devices_info(self, devices):
|
|
devices_info = {}
|
|
for device in devices:
|
|
port = self.plugin.get_port_from_device(device)
|
|
if not port:
|
|
continue
|
|
if port['device_owner'].startswith('network:'):
|
|
continue
|
|
devices_info[port['id']] = port
|
|
return devices_info
|
|
|
|
def security_group_rules_for_devices(self, context, **kwargs):
|
|
"""Callback method to return security group rules for each port.
|
|
|
|
also convert remote_group_id rule
|
|
to source_ip_prefix and dest_ip_prefix rule
|
|
|
|
:params devices: list of devices
|
|
:returns: port correspond to the devices with security group rules
|
|
"""
|
|
devices_info = kwargs.get('devices')
|
|
ports = self._get_devices_info(devices_info)
|
|
return self.plugin.security_group_rules_for_ports(context, ports)
|
|
|
|
def security_group_info_for_devices(self, context, **kwargs):
|
|
"""Return security group information for requested devices.
|
|
|
|
:params devices: list of devices
|
|
:returns:
|
|
sg_info{
|
|
'security_groups': {sg_id: [rule1, rule2]}
|
|
'sg_member_ips': {sg_id: {'IPv4': [], 'IPv6': []}}
|
|
'devices': {device_id: {device_info}}
|
|
}
|
|
"""
|
|
devices_info = kwargs.get('devices')
|
|
ports = self._get_devices_info(devices_info)
|
|
return self.plugin.security_group_info_for_ports(context, ports)
|