diff options
| author |   Bin Yang <bin.yang@windriver.com> | 2020-02-23 20:18:41 +0800 |
|---|---|---|
| committer | Bin Yang <bin.yang@windriver.com> | 2020-02-23 23:52:21 +0800 |
| commit | 6547e45fd9f60437811ef35b9d101cdaef494542 (patch) | |
| tree | 593f7a67769e9b5806a7bd7174c8858783d61d70 /starlingx/demo/firewall-sriov/templates/protected-private-net.yaml | |
| parent | 0a13e91612de5fa590bdecb7b17ef79e7f220131 (diff) | |
Add cnf for firewall with network of sriov
sriov driver can be either netdevice or vfio
start scripts support netdevice only yet
Change-Id: Ifa1e9acc558387d38245bd99669225fbf5fb8d05
Issue-ID: MULTICLOUD-999
Signed-off-by: Bin Yang <bin.yang@windriver.com>
Diffstat (limited to 'starlingx/demo/firewall-sriov/templates/protected-private-net.yaml')
| -rw-r--r-- | starlingx/demo/firewall-sriov/templates/protected-private-net.yaml | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/starlingx/demo/firewall-sriov/templates/protected-private-net.yaml b/starlingx/demo/firewall-sriov/templates/protected-private-net.yaml new file mode 100644 index 00000000..f30e9c52 --- /dev/null +++ b/starlingx/demo/firewall-sriov/templates/protected-private-net.yaml @@ -0,0 +1,29 @@ +apiVersion: "k8s.cni.cncf.io/v1" +kind: NetworkAttachmentDefinition +metadata: + name: sriov-device-{{ .Values.global.protectedNetName }} + annotations: + k8s.v1.cni.cncf.io/resourceName: intel.com/pci_sriov_net_{{ .Values.global.protectedNetProviderName }} +{{- if eq .Values.global.protectedNetProviderDriver "netdevice" }} +spec: + config: '{ + "type": "sriov", + "name": "sriov-device", + "vlan": {{ .Values.global.protectedNetProviderVlan }}, + "ipam": { + "type": "host-local", + "subnet": "{{ .Values.global.protectedNetCidr }}", + "routes": [{ + "dst": "0.0.0.0/0" + }], + "gateway": "{{ .Values.global.protectedNetGwIp }}" + } + }' +{{- else }} +spec: + config: '{ + "type": "sriov", + "name": "sriov-device", + "vlan": {{ .Values.global.protectedNetProviderVlan }} + }' +{{ end -}}
\ No newline at end of file |