summaryrefslogtreecommitdiffstats
path: root/starlingx/demo/firewall-sriov/templates/protected-private-net.yaml
diff options
context:
space:
mode:
authorBin Yang <bin.yang@windriver.com>2020-02-23 20:18:41 +0800
committerBin Yang <bin.yang@windriver.com>2020-02-23 23:52:21 +0800
commit6547e45fd9f60437811ef35b9d101cdaef494542 (patch)
tree593f7a67769e9b5806a7bd7174c8858783d61d70 /starlingx/demo/firewall-sriov/templates/protected-private-net.yaml
parent0a13e91612de5fa590bdecb7b17ef79e7f220131 (diff)
Add cnf for firewall with network of sriov
sriov driver can be either netdevice or vfio start scripts support netdevice only yet Change-Id: Ifa1e9acc558387d38245bd99669225fbf5fb8d05 Issue-ID: MULTICLOUD-999 Signed-off-by: Bin Yang <bin.yang@windriver.com>
Diffstat (limited to 'starlingx/demo/firewall-sriov/templates/protected-private-net.yaml')
-rw-r--r--starlingx/demo/firewall-sriov/templates/protected-private-net.yaml29
1 files changed, 29 insertions, 0 deletions
diff --git a/starlingx/demo/firewall-sriov/templates/protected-private-net.yaml b/starlingx/demo/firewall-sriov/templates/protected-private-net.yaml
new file mode 100644
index 00000000..f30e9c52
--- /dev/null
+++ b/starlingx/demo/firewall-sriov/templates/protected-private-net.yaml
@@ -0,0 +1,29 @@
+apiVersion: "k8s.cni.cncf.io/v1"
+kind: NetworkAttachmentDefinition
+metadata:
+ name: sriov-device-{{ .Values.global.protectedNetName }}
+ annotations:
+ k8s.v1.cni.cncf.io/resourceName: intel.com/pci_sriov_net_{{ .Values.global.protectedNetProviderName }}
+{{- if eq .Values.global.protectedNetProviderDriver "netdevice" }}
+spec:
+ config: '{
+ "type": "sriov",
+ "name": "sriov-device",
+ "vlan": {{ .Values.global.protectedNetProviderVlan }},
+ "ipam": {
+ "type": "host-local",
+ "subnet": "{{ .Values.global.protectedNetCidr }}",
+ "routes": [{
+ "dst": "0.0.0.0/0"
+ }],
+ "gateway": "{{ .Values.global.protectedNetGwIp }}"
+ }
+ }'
+{{- else }}
+spec:
+ config: '{
+ "type": "sriov",
+ "name": "sriov-device",
+ "vlan": {{ .Values.global.protectedNetProviderVlan }}
+ }'
+{{ end -}} \ No newline at end of file