PVE/API2/Network/SDN/Subnets.pm

   1 package PVE::API2::Network::SDN::Subnets;
   2
   3 use strict;
   4 use warnings;
   5
   6 use PVE::SafeSyslog;
   7 use PVE::Tools qw(extract_param);
   8 use PVE::Cluster qw(cfs_read_file cfs_write_file);
   9 use PVE::Exception qw(raise raise_param_exc);
  10 use PVE::Network::SDN;
  11 use PVE::Network::SDN::Subnets;
  12 use PVE::Network::SDN::SubnetPlugin;
  13 use PVE::Network::SDN::Vnets;
  14 use PVE::Network::SDN::Ipams;
  15 use PVE::Network::SDN::Ipams::Plugin;
  16
  17 use Storable qw(dclone);
  18 use PVE::JSONSchema qw(get_standard_option);
  19 use PVE::RPCEnvironment;
  20
  21 use PVE::RESTHandler;
  22
  23 use base qw(PVE::RESTHandler);
  24
  25 my $api_sdn_subnets_config = sub {
  26     my ($cfg, $id) = @_;
  27
  28     my $scfg = dclone(PVE::Network::SDN::Subnets::sdn_subnets_config($cfg, $id));
  29     $scfg->{subnet} = $id;
  30     $scfg->{cidr} = $id =~ s/-/\//r;
  31     $scfg->{digest} = $cfg->{digest};
  32
  33     return $scfg;
  34 };
  35
  36 __PACKAGE__->register_method ({
  37     name => 'index',
  38     path => '',
  39     method => 'GET',
  40     description => "SDN subnets index.",
  41     permissions => {
  42         description => "Only list entries where you have 'SDN.Audit' or 'SDN.Allocate' permissions on '/sdn/subnets/<subnet>'",
  43         user => 'all',
  44     },
  45     parameters => {
  46         additionalProperties => 0,
  47         properties => {
  48             vnet => get_standard_option('pve-sdn-vnet-id'),
  49         },
  50     },
  51     returns => {
  52         type => 'array',
  53         items => {
  54             type => "object",
  55             properties => {},
  56         },
  57         links => [ { rel => 'child', href => "{subnet}" } ],
  58     },
  59     code => sub {
  60         my ($param) = @_;
  61
  62         my $rpcenv = PVE::RPCEnvironment::get();
  63         my $authuser = $rpcenv->get_user();
  64
  65         my $vnetid = $param->{vnet};
  66
  67         my $cfg = PVE::Network::SDN::Subnets::config();
  68
  69         my @sids = PVE::Network::SDN::Subnets::sdn_subnets_ids($cfg);
  70         my $res = [];
  71         foreach my $id (@sids) {
  72             my $privs = [ 'SDN.Audit', 'SDN.Allocate' ];
  73             next if !$rpcenv->check_any($authuser, "/sdn/vnets/$vnetid/subnets/$id", $privs, 1);
  74
  75             my $scfg = &$api_sdn_subnets_config($cfg, $id);
  76             next if !$scfg->{vnet} || $scfg->{vnet} ne $vnetid;
  77             push @$res, $scfg;
  78         }
  79
  80         return $res;
  81     }});
  82
  83 __PACKAGE__->register_method ({
  84     name => 'read',
  85     path => '{subnet}',
  86     method => 'GET',
  87     description => "Read sdn subnet configuration.",
  88     permissions => {
  89         check => ['perm', '/sdn/vnets/{vnet}/subnets/{subnet}', ['SDN.Allocate']],
  90    },
  91
  92     parameters => {
  93         additionalProperties => 0,
  94         properties => {
  95             vnet => get_standard_option('pve-sdn-vnet-id'),
  96             subnet => get_standard_option('pve-sdn-subnet-id', {
  97                 completion => \&PVE::Network::SDN::Subnets::complete_sdn_subnets,
  98             }),
  99         },
 100     },
 101     returns => { type => 'object' },
 102     code => sub {
 103         my ($param) = @_;
 104
 105         my $cfg = PVE::Network::SDN::Subnets::config();
 106         my $scfg = &$api_sdn_subnets_config($cfg, $param->{subnet});
 107
 108         raise_param_exc({ vnet => "wrong vnet"}) if $param->{vnet} ne $scfg->{vnet};
 109
 110         return $scfg;
 111     }});
 112
 113 __PACKAGE__->register_method ({
 114     name => 'create',
 115     protected => 1,
 116     path => '',
 117     method => 'POST',
 118     description => "Create a new sdn subnet object.",
 119     permissions => {
 120         check => ['perm', '/sdn/vnets/{vnet}/subnets', ['SDN.Allocate']],
 121     },
 122     parameters => PVE::Network::SDN::SubnetPlugin->createSchema(),
 123     returns => { type => 'null' },
 124     code => sub {
 125         my ($param) = @_;
 126
 127         my $type = extract_param($param, 'type');
 128         my $cidr = extract_param($param, 'subnet');
 129         my $id = $cidr =~ s/\//-/r;
 130
 131         # create /etc/pve/sdn directory
 132         PVE::Cluster::check_cfs_quorum();
 133         mkdir("/etc/pve/sdn") if ! -d '/etc/pve/sdn';
 134
 135         PVE::Network::SDN::lock_sdn_config(
 136             sub {
 137
 138                 my $cfg = PVE::Network::SDN::Subnets::config();
 139                 my $opts = PVE::Network::SDN::SubnetPlugin->check_config($id, $param, 1, 1);
 140
 141                 my $scfg = undef;
 142                 if ($scfg = PVE::Network::SDN::Subnets::sdn_subnets_config($cfg, $id, 1)) {
 143                     die "sdn subnet object ID '$id' already defined\n";
 144                 }
 145
 146                 $cfg->{ids}->{$id} = $opts;
 147                 PVE::Network::SDN::SubnetPlugin->on_update_hook($id, $opts);
 148
 149                 PVE::Network::SDN::Subnets::write_config($cfg);
 150                 PVE::Network::SDN::increase_version();
 151
 152             }, "create sdn subnet object failed");
 153
 154         return undef;
 155     }});
 156
 157 __PACKAGE__->register_method ({
 158     name => 'update',
 159     protected => 1,
 160     path => '{subnet}',
 161     method => 'PUT',
 162     description => "Update sdn subnet object configuration.",
 163     permissions => {
 164         check => ['perm', '/sdn/vnets/{vnet}/subnets', ['SDN.Allocate']],
 165     },
 166     parameters => PVE::Network::SDN::SubnetPlugin->updateSchema(),
 167     returns => { type => 'null' },
 168     code => sub {
 169         my ($param) = @_;
 170
 171         my $id = extract_param($param, 'subnet');
 172         my $digest = extract_param($param, 'digest');
 173
 174         PVE::Network::SDN::lock_sdn_config(
 175          sub {
 176
 177             my $cfg = PVE::Network::SDN::Subnets::config();
 178             my $scfg = &$api_sdn_subnets_config($cfg, $id);
 179
 180             PVE::SectionConfig::assert_if_modified($cfg, $digest);
 181
 182             my $opts = PVE::Network::SDN::SubnetPlugin->check_config($id, $param, 0, 1);
 183             $cfg->{ids}->{$id} = $opts;
 184
 185             raise_param_exc({ ipam => "you can't change ipam"}) if $opts->{ipam} && $scfg->{ipam} && $opts->{ipam} ne $scfg->{ipam};
 186
 187             PVE::Network::SDN::SubnetPlugin->on_update_hook($id, $opts, $scfg);
 188
 189             PVE::Network::SDN::Subnets::write_config($cfg);
 190             PVE::Network::SDN::increase_version();
 191
 192             }, "update sdn subnet object failed");
 193
 194         return undef;
 195     }});
 196
 197 __PACKAGE__->register_method ({
 198     name => 'delete',
 199     protected => 1,
 200     path => '{subnet}',
 201     method => 'DELETE',
 202     description => "Delete sdn subnet object configuration.",
 203     permissions => {
 204         check => ['perm', '/sdn/vnets/{vnet}/subnets', ['SDN.Allocate']],
 205     },
 206     parameters => {
 207         additionalProperties => 0,
 208         properties => {
 209             vnet => get_standard_option('pve-sdn-vnet-id'),
 210             subnet => get_standard_option('pve-sdn-subnet-id', {
 211                 completion => \&PVE::Network::SDN::Subnets::complete_sdn_subnets,
 212             }),
 213         },
 214     },
 215     returns => { type => 'null' },
 216     code => sub {
 217         my ($param) = @_;
 218
 219         my $id = extract_param($param, 'subnet');
 220
 221         PVE::Network::SDN::lock_sdn_config(
 222             sub {
 223                 my $cfg = PVE::Network::SDN::Subnets::config();
 224
 225                 my $scfg = PVE::Network::SDN::Subnets::sdn_subnets_config($cfg, $id);
 226
 227                 my $subnets_cfg = PVE::Network::SDN::Subnets::config();
 228                 my $vnets_cfg = PVE::Network::SDN::Vnets::config();
 229
 230                 PVE::Network::SDN::SubnetPlugin->on_delete_hook($id, $subnets_cfg, $vnets_cfg);
 231
 232                 my $ipam_cfg = PVE::Network::SDN::Ipams::config();
 233                 my $ipam = $cfg->{ids}->{$id}->{ipam};
 234                 if ($ipam) {
 235                     raise_param_exc({ ipam => "$ipam not existing"}) if !$ipam_cfg->{ids}->{$ipam};
 236                     my $plugin_config = $ipam_cfg->{ids}->{$ipam};
 237                     my $plugin = PVE::Network::SDN::Ipams::Plugin->lookup($plugin_config->{type});
 238                     $plugin->del_subnet($plugin_config, $id, $scfg);
 239                 }
 240
 241                 delete $cfg->{ids}->{$id};
 242
 243                 PVE::Network::SDN::Subnets::write_config($cfg);
 244                 PVE::Network::SDN::increase_version();
 245
 246             }, "delete sdn subnet object failed");
 247
 248
 249         return undef;
 250     }});
 251
 252 1;