-
Notifications
You must be signed in to change notification settings - Fork 438
/
client.go
100 lines (85 loc) · 2.51 KB
/
client.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
package client
import (
"context"
"crypto/tls"
"crypto/x509"
"fmt"
"log"
"math/rand"
"os"
"strings"
"sync/atomic"
"time"
"github.com/cenkalti/backoff/v4"
"github.com/go-logr/stdr"
"github.com/ovn-org/libovsdb/client"
"k8s.io/klog/v2"
"github.com/kubeovn/kube-ovn/pkg/ovsdb/ovnnb"
)
var namedUUIDCounter = rand.Uint32()
func NamedUUID() string {
return fmt.Sprintf("u%010d", atomic.AddUint32(&namedUUIDCounter, 1))
}
// NewNbClient creates a new OVN NB client
func NewNbClient(addr string, timeout int) (client.Client, error) {
dbModel, err := ovnnb.FullDatabaseModel()
if err != nil {
return nil, err
}
logger := stdr.NewWithOptions(log.New(os.Stderr, "", log.LstdFlags), stdr.Options{LogCaller: stdr.All}).
WithName("libovsdb")
stdr.SetVerbosity(3)
options := []client.Option{
client.WithReconnect(time.Duration(timeout)*time.Second, &backoff.ZeroBackOff{}),
client.WithLeaderOnly(true),
client.WithLogger(&logger),
}
var ssl bool
for _, ep := range strings.Split(addr, ",") {
if !ssl && strings.HasPrefix(ep, client.SSL) {
ssl = true
}
options = append(options, client.WithEndpoint(ep))
}
if ssl {
cert, err := tls.LoadX509KeyPair("/var/run/tls/cert", "/var/run/tls/key")
if err != nil {
return nil, fmt.Errorf("failed to load x509 cert key pair: %v", err)
}
caCert, err := os.ReadFile("/var/run/tls/cacert")
if err != nil {
return nil, fmt.Errorf("failed to read ca cert: %v", err)
}
certPool := x509.NewCertPool()
certPool.AppendCertsFromPEM(caCert)
// #nosec
tlsConfig := &tls.Config{
Certificates: []tls.Certificate{cert},
RootCAs: certPool,
InsecureSkipVerify: true,
}
options = append(options, client.WithTLSConfig(tlsConfig))
}
c, err := client.NewOVSDBClient(dbModel, options...)
if err != nil {
return nil, err
}
if err = c.Connect(context.TODO()); err != nil {
klog.Errorf("failed to connect to OVN NB server %s: %v", addr, err)
return nil, err
}
monitorOpts := []client.MonitorOption{
client.WithTable(&ovnnb.LogicalRouter{}),
client.WithTable(&ovnnb.LogicalRouterPort{}),
client.WithTable(&ovnnb.LogicalRouterPolicy{}),
client.WithTable(&ovnnb.LogicalSwitchPort{}),
client.WithTable(&ovnnb.PortGroup{}),
client.WithTable(&ovnnb.LogicalRouterStaticRoute{}),
client.WithTable(&ovnnb.LogicalRouterPolicy{}),
}
if _, err = c.Monitor(context.TODO(), c.NewMonitor(monitorOpts...)); err != nil {
klog.Errorf("failed to monitor database on OVN NB server %s: %v", addr, err)
return nil, err
}
return c, nil
}