forked from NationTech/harmony
Ian Letourneau
c80ede706b
## Description * Replace the CatalogSource approach to install the OperatorHub.io catalog by a more simple & straightforward way to install NMState * Improve logging * Add report summarizing the host network configuration that was applied (which host, bonds, port-channels) * Fix command to find next available port channel id ## Extra info Using the `apply_url` approach to install the NMState operator isn't the best approach: it's harder to maintain and upgrade. But it helps us achieve waht we wanted for now: install the NMState Operator to configure bonds on a host. The preferred approach, installing an operator from the OperatorHub.io catalog, didn't work for now. We had a timeout error with DeadlineExceeded probably caused by an insufficient CPU/Memory allocation to query such a big catalog, even though we tweaked the RAM allocation (we couldn't find a way to do it for CPU). Spent too much time on this so we stopped these efforts for now. It would be good to get back to it when we need to install something else from a custom catalog. Reviewed-on: NationTech/harmony#175
106 lines
3.2 KiB
Rust
106 lines
3.2 KiB
Rust
use brocade::BrocadeOptions;
|
|
use cidr::Ipv4Cidr;
|
|
use harmony::{
|
|
hardware::{Location, SwitchGroup},
|
|
infra::{brocade::BrocadeSwitchClient, opnsense::OPNSenseManagementInterface},
|
|
inventory::Inventory,
|
|
topology::{HAClusterTopology, LogicalHost, UnmanagedRouter},
|
|
};
|
|
use harmony_macros::{ip, ipv4};
|
|
use harmony_secret::{Secret, SecretManager};
|
|
use serde::{Deserialize, Serialize};
|
|
use std::{net::IpAddr, sync::Arc};
|
|
|
|
#[derive(Secret, Serialize, Deserialize, Debug, PartialEq)]
|
|
struct OPNSenseFirewallConfig {
|
|
username: String,
|
|
password: String,
|
|
}
|
|
|
|
pub async fn get_topology() -> HAClusterTopology {
|
|
let firewall = harmony::topology::LogicalHost {
|
|
ip: ip!("192.168.1.1"),
|
|
name: String::from("opnsense-1"),
|
|
};
|
|
|
|
let switch_auth = SecretManager::get_or_prompt::<BrocadeSwitchAuth>()
|
|
.await
|
|
.expect("Failed to get credentials");
|
|
|
|
let switches: Vec<IpAddr> = vec![ip!("192.168.1.101")]; // TODO: Adjust me
|
|
let brocade_options = Some(BrocadeOptions {
|
|
dry_run: *harmony::config::DRY_RUN,
|
|
..Default::default()
|
|
});
|
|
let switch_client = BrocadeSwitchClient::init(
|
|
&switches,
|
|
&switch_auth.username,
|
|
&switch_auth.password,
|
|
brocade_options,
|
|
)
|
|
.await
|
|
.expect("Failed to connect to switch");
|
|
|
|
let switch_client = Arc::new(switch_client);
|
|
|
|
let config = SecretManager::get_or_prompt::<OPNSenseFirewallConfig>().await;
|
|
let config = config.unwrap();
|
|
|
|
let opnsense = Arc::new(
|
|
harmony::infra::opnsense::OPNSenseFirewall::new(
|
|
firewall,
|
|
None,
|
|
&config.username,
|
|
&config.password,
|
|
)
|
|
.await,
|
|
);
|
|
let lan_subnet = ipv4!("192.168.1.0");
|
|
let gateway_ipv4 = ipv4!("192.168.1.1");
|
|
let gateway_ip = IpAddr::V4(gateway_ipv4);
|
|
harmony::topology::HAClusterTopology {
|
|
kubeconfig: None,
|
|
domain_name: "demo.harmony.mcd".to_string(),
|
|
router: Arc::new(UnmanagedRouter::new(
|
|
gateway_ip,
|
|
Ipv4Cidr::new(lan_subnet, 24).unwrap(),
|
|
)),
|
|
load_balancer: opnsense.clone(),
|
|
firewall: opnsense.clone(),
|
|
tftp_server: opnsense.clone(),
|
|
http_server: opnsense.clone(),
|
|
dhcp_server: opnsense.clone(),
|
|
dns_server: opnsense.clone(),
|
|
control_plane: vec![LogicalHost {
|
|
ip: ip!("192.168.1.20"),
|
|
name: "master".to_string(),
|
|
}],
|
|
bootstrap_host: LogicalHost {
|
|
ip: ip!("192.168.1.10"),
|
|
name: "bootstrap".to_string(),
|
|
},
|
|
workers: vec![],
|
|
switch_client: switch_client.clone(),
|
|
}
|
|
}
|
|
|
|
pub fn get_inventory() -> Inventory {
|
|
Inventory {
|
|
location: Location::new(
|
|
"Some virtual machine or maybe a physical machine if you're cool".to_string(),
|
|
"testopnsense".to_string(),
|
|
),
|
|
switch: SwitchGroup::from([]),
|
|
firewall_mgmt: Box::new(OPNSenseManagementInterface::new()),
|
|
storage_host: vec![],
|
|
worker_host: vec![],
|
|
control_plane_host: vec![],
|
|
}
|
|
}
|
|
|
|
#[derive(Secret, Serialize, Deserialize, Debug)]
|
|
pub struct BrocadeSwitchAuth {
|
|
pub username: String,
|
|
pub password: String,
|
|
}
|