Puppet Class: neutron::plugins::ml2::ovn

Defined in:
manifests/plugins/ml2/ovn.pp

Overview

This class installs and configures the OVN Neutron plugin

Parameters

ovn_nb_connection

(optional) The connection string for the OVN_Northbound OVSDB. Defaults to ‘tcp:127.0.0.1:6641’

ovn_sb_connection

(optional) The connection string for the OVN_Southbound OVSDB Defaults to ‘tcp:127.0.0.1:6642’

ovn_nb_private_key

(optional) The PEM file with private key for SSL connection to OVN-NB-DB Defaults to $facts

ovn_nb_certificate

(optional) The PEM file with certificate that certifies the private key specified in ovn_nb_private_key Defaults to $facts

ovn_nb_ca_cert

(optional) The PEM file with CA certificate that OVN should use to verify certificates presented to it by SSL peers Defaults to $facts

ovn_sb_private_key

(optional) The PEM file with private key for SSL connection to OVN-SB-DB Defaults to $facts

ovn_sb_certificate

(optional) The PEM file with certificate that certifies the private key specified in ovn_sb_private_key Defaults to $facts

ovn_sb_ca_cert

(optional) The PEM file with CA certificate that OVN should use to verify certificates presented to it by SSL peers Defaults to $facts

package_ensure

(optional) The intended state of the python-networking-odl package, i.e. any of the possible values of the ‘ensure’ property for a package resource type. Defaults to ‘present’

ovsdb_connection_timeout

(optional) Timeout in seconds for the OVSDB connection transaction Defaults to $facts

ovsdb_retry_max_interval

(optional) Max interval in seconds between each retry to get the OVN NB and SB IDLs. Defaults to $facts

ovsdb_probe_interval

(optional) The probe interval for the OVSDB session in milliseconds. Defaults to $facts.

neutron_sync_mode

(optional) The synchronization mode of OVN with Neutron DB. Valid values are - ‘log’, ‘off’, ‘repair’ off - synchronization is off log - during neutron-server startup check to see if OVN is in sync with

the Neutron database. Log warnings for any inconsistencies found so
that an admin can investigate.

repair - during neutron-server startup, automatically create resources

found in Neutron but not in OVN. Also remove resources from OVN
that are no longer in Neutron.

Defaults to $facts

ovn_metadata_enabled

(optional) Whether to enable metadata service in OVN. Type: boolean Defaults to $facts

dvr_enabled

(optional) Whether to enable DVR. Type: boolean Defaults to $facts

disable_ovn_dhcp_for_baremetal_ports

(optional) Whether to disable built-in DHCP for baremetal ports. Type: boolean Defaults to $facts

dns_servers

(optional) List of dns servers which will be as forwarders

if a subnet's dns_nameservers is empty.

Type: List Defaults to $facts

vhostuser_socket_dir

(optional) The vhost-user socket directory for OVS Type: String Defaults to $facts

ovn_emit_need_to_frag

(optional) Configure OVN to emit “need to frag” packets in case

of MTU mismatch. Before enabling this configuration make
sure that its supported by the host kernel (version >=
5.2) or by checking the output of the following command:
ovs-appctl -t ovs-vswitchd dpif/show-dp-features br-int |
grep "Check pkt length action".

Type: boolean Defaults to $facts

localnet_learn_fdb

(optional) If enabled it will allow localnet ports to learn MAC addresses

and store them in FDB SB table. This avoids flooding for
traffic towards unknown IPs when port security is disable.
It requires OVN 22.09 or newer.

Type: boolean Defaults to $facts

network_log_rate_limit

(Optional) Maximum packets logging per second. Used by logging service plugin. Defaults to $facts. Minimum possible value is 100.

network_log_burst_limit

(Optional) Maximum number of packets per rate_limit. Used by logging service plugin. Defaults to $facts. Minimum possible value is 25.

network_log_local_output_log_base

(Optional) Output logfile path on agent side, default syslog file. Used by logging service plugin. Defaults to $facts.

Parameters:

  • ovn_nb_connection (Any) (defaults to: $facts['os_service_default'])
  • ovn_sb_connection (Any) (defaults to: $facts['os_service_default'])
  • ovn_nb_private_key (Any) (defaults to: $facts['os_service_default'])
  • ovn_nb_certificate (Any) (defaults to: $facts['os_service_default'])
  • ovn_nb_ca_cert (Any) (defaults to: $facts['os_service_default'])
  • ovn_sb_private_key (Any) (defaults to: $facts['os_service_default'])
  • ovn_sb_certificate (Any) (defaults to: $facts['os_service_default'])
  • ovn_sb_ca_cert (Any) (defaults to: $facts['os_service_default'])
  • package_ensure (Any) (defaults to: 'present')
  • ovsdb_connection_timeout (Any) (defaults to: $facts['os_service_default'])
  • ovsdb_retry_max_interval (Any) (defaults to: $facts['os_service_default'])
  • ovsdb_probe_interval (Any) (defaults to: $facts['os_service_default'])
  • neutron_sync_mode (Any) (defaults to: $facts['os_service_default'])
  • ovn_metadata_enabled (Any) (defaults to: $facts['os_service_default'])
  • dvr_enabled (Any) (defaults to: $facts['os_service_default'])
  • disable_ovn_dhcp_for_baremetal_ports (Any) (defaults to: $facts['os_service_default'])
  • dns_servers (Any) (defaults to: $facts['os_service_default'])
  • vhostuser_socket_dir (Any) (defaults to: $facts['os_service_default'])
  • ovn_emit_need_to_frag (Any) (defaults to: $facts['os_service_default'])
  • localnet_learn_fdb (Any) (defaults to: $facts['os_service_default'])
  • network_log_rate_limit (Any) (defaults to: $facts['os_service_default'])
  • network_log_burst_limit (Any) (defaults to: $facts['os_service_default'])
  • network_log_local_output_log_base (Any) (defaults to: $facts['os_service_default'])


133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
# File 'manifests/plugins/ml2/ovn.pp', line 133

class neutron::plugins::ml2::ovn(
  $ovn_nb_connection                    = $facts['os_service_default'],
  $ovn_sb_connection                    = $facts['os_service_default'],
  $ovn_nb_private_key                   = $facts['os_service_default'],
  $ovn_nb_certificate                   = $facts['os_service_default'],
  $ovn_nb_ca_cert                       = $facts['os_service_default'],
  $ovn_sb_private_key                   = $facts['os_service_default'],
  $ovn_sb_certificate                   = $facts['os_service_default'],
  $ovn_sb_ca_cert                       = $facts['os_service_default'],
  $package_ensure                       = 'present',
  $ovsdb_connection_timeout             = $facts['os_service_default'],
  $ovsdb_retry_max_interval             = $facts['os_service_default'],
  $ovsdb_probe_interval                 = $facts['os_service_default'],
  $neutron_sync_mode                    = $facts['os_service_default'],
  $ovn_metadata_enabled                 = $facts['os_service_default'],
  $dvr_enabled                          = $facts['os_service_default'],
  $disable_ovn_dhcp_for_baremetal_ports = $facts['os_service_default'],
  $dns_servers                          = $facts['os_service_default'],
  $vhostuser_socket_dir                 = $facts['os_service_default'],
  $ovn_emit_need_to_frag                = $facts['os_service_default'],
  $localnet_learn_fdb                   = $facts['os_service_default'],
  $network_log_rate_limit               = $facts['os_service_default'],
  $network_log_burst_limit              = $facts['os_service_default'],
  $network_log_local_output_log_base    = $facts['os_service_default'],
) {

  include neutron::deps
  require neutron::plugins::ml2

  if ! ( $neutron_sync_mode in ['off', 'log', 'repair', $facts['os_service_default']] ) {
    fail( 'Invalid value for neutron_sync_mode parameter' )
  }

  neutron_plugin_ml2 {
    'ovn/ovn_nb_connection'                   : value => join(any2array($ovn_nb_connection), ',');
    'ovn/ovn_sb_connection'                   : value => join(any2array($ovn_sb_connection), ',');
    'ovn/ovn_nb_private_key'                  : value => $ovn_nb_private_key;
    'ovn/ovn_nb_certificate'                  : value => $ovn_nb_certificate;
    'ovn/ovn_nb_ca_cert'                      : value => $ovn_nb_ca_cert;
    'ovn/ovn_sb_private_key'                  : value => $ovn_sb_private_key;
    'ovn/ovn_sb_certificate'                  : value => $ovn_sb_certificate;
    'ovn/ovn_sb_ca_cert'                      : value => $ovn_sb_ca_cert;
    'ovn/ovsdb_connection_timeout'            : value => $ovsdb_connection_timeout;
    'ovn/ovsdb_retry_max_interval'            : value => $ovsdb_retry_max_interval;
    'ovn/ovsdb_probe_interval'                : value => $ovsdb_probe_interval;
    'ovn/neutron_sync_mode'                   : value => $neutron_sync_mode;
    'ovn/ovn_metadata_enabled'                : value => $ovn_metadata_enabled;
    'ovn/enable_distributed_floating_ip'      : value => $dvr_enabled;
    'ovn/disable_ovn_dhcp_for_baremetal_ports': value => $disable_ovn_dhcp_for_baremetal_ports;
    'ovn/dns_servers'                         : value => join(any2array($dns_servers), ',');
    'ovn/vhost_sock_dir'                      : value => $vhostuser_socket_dir;
    'ovn/ovn_emit_need_to_frag'               : value => $ovn_emit_need_to_frag;
    'ovn/localnet_learn_fdb'                  : value => $localnet_learn_fdb;
    'network_log/rate_limit'                  : value => $network_log_rate_limit;
    'network_log/burst_limit'                 : value => $network_log_burst_limit;
    'network_log/local_output_log_base'       : value => $network_log_local_output_log_base;
  }
}