-
Notifications
You must be signed in to change notification settings - Fork 438
/
client.go
111 lines (94 loc) · 2.68 KB
/
client.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
package client
import (
"context"
"crypto/rand"
"crypto/tls"
"crypto/x509"
"encoding/binary"
"fmt"
"os"
"strings"
"sync/atomic"
"time"
"github.com/cenkalti/backoff/v4"
"github.com/ovn-org/libovsdb/client"
"github.com/ovn-org/libovsdb/ovsdb"
"k8s.io/klog/v2"
"github.com/kubeovn/kube-ovn/pkg/ovsdb/ovnnb"
)
const timeout = 3 * time.Second
var namedUUIDCounter uint32
func init() {
buff := make([]byte, 4)
if _, err := rand.Reader.Read(buff); err != nil {
panic(err)
}
namedUUIDCounter = binary.LittleEndian.Uint32(buff)
}
func NamedUUID() string {
return fmt.Sprintf("u%010d", atomic.AddUint32(&namedUUIDCounter, 1))
}
// NewNbClient creates a new OVN NB client
func NewNbClient(addr string) (client.Client, error) {
dbModel, err := ovnnb.FullDatabaseModel()
if err != nil {
return nil, err
}
logger := klog.NewKlogr().WithName("libovsdb")
options := []client.Option{
client.WithReconnect(timeout, &backoff.ConstantBackOff{Interval: time.Second}),
client.WithLeaderOnly(true),
client.WithLogger(&logger),
}
var ssl bool
endpoints := strings.Split(addr, ",")
for _, ep := range endpoints {
if !ssl && strings.HasPrefix(ep, client.SSL) {
ssl = true
}
options = append(options, client.WithEndpoint(ep))
}
if ssl {
cert, err := tls.LoadX509KeyPair("/var/run/tls/cert", "/var/run/tls/key")
if err != nil {
return nil, fmt.Errorf("failed to load x509 cert key pair: %v", err)
}
caCert, err := os.ReadFile("/var/run/tls/cacert")
if err != nil {
return nil, fmt.Errorf("failed to read ca cert: %v", err)
}
certPool := x509.NewCertPool()
certPool.AppendCertsFromPEM(caCert)
// #nosec
tlsConfig := &tls.Config{
Certificates: []tls.Certificate{cert},
RootCAs: certPool,
InsecureSkipVerify: true,
}
options = append(options, client.WithTLSConfig(tlsConfig))
}
c, err := client.NewOVSDBClient(dbModel, options...)
if err != nil {
return nil, err
}
ctx, cancel := context.WithTimeout(context.Background(), time.Duration(len(endpoints)+1)*timeout)
defer cancel()
if err = c.Connect(ctx); err != nil {
klog.Errorf("failed to connect to OVN NB server %s: %v", addr, err)
return nil, err
}
monitor := c.NewMonitor(
client.WithTable(&ovnnb.LogicalRouter{}),
client.WithTable(&ovnnb.LogicalRouterPort{}),
client.WithTable(&ovnnb.LogicalRouterPolicy{}),
client.WithTable(&ovnnb.LogicalRouterStaticRoute{}),
client.WithTable(&ovnnb.LogicalSwitchPort{}),
client.WithTable(&ovnnb.PortGroup{}),
)
monitor.Method = ovsdb.ConditionalMonitorRPC
if _, err = c.Monitor(context.TODO(), monitor); err != nil {
klog.Errorf("failed to monitor database on OVN NB server %s: %v", addr, err)
return nil, err
}
return c, nil
}