Files
271ff6a09c104f97f23511973877e8b1502c1c40
openstack-ansible-ops /scripts /generate-networks.sh

78 lines
2.6 KiB
Bash
Raw Normal View History

#!/usr/bin/env bash
# Copyright 2017, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
source openrc
# Create a basic flat network
neutron net-create GATEWAY_NET \
--shared \
--router:external=True \
--provider:physical_network=flat \
--provider:network_type=flat
neutron subnet-create GATEWAY_NET 172.16.24.0/22 \
--name GATEWAY_NET_SUBNET \
--gateway 172.16.24.2 \
--allocation-pool start=172.16.25.201,end=172.16.25.255 \
--dns-nameservers list=true 172.16.24.2
# Create a basic VXLAN network
neutron net-create PRIVATE_NET \
--shared \
--router:external=True \
--provider:network_type=vxlan \
--provider:segmentation_id 101
neutron subnet-create PRIVATE_NET 192.168.0.0/24 \
--name PRIVATE_NET_SUBNET
# Create a neutron router and wire it up to the GATEWAY_NET and PRIVATE_NET_SUBNET
ROUTER_ID="$(neutron router-create GATEWAY_NET_ROUTER | grep -w id | awk '{print 4ドル}')"
neutron router-gateway-set \
"${ROUTER_ID}" \
"$(neutron net-list | awk '/GATEWAY_NET/ {print 2ドル}')"
neutron router-interface-add \
"${ROUTER_ID}" \
"$(neutron subnet-list | awk '/PRIVATE_NET_SUBNET/ {print 2ドル}')"
# Neutron security group setup
for id in "$(neutron security-group-list -f yaml | awk '/- id\:/ {print 3ドル}')"; do
# Allow ICMP
neutron security-group-rule-create --protocol icmp \
--direction ingress \
"$id" || true
# Allow all TCP
neutron security-group-rule-create --protocol tcp \
--port-range-min 1 \
--port-range-max 65535 \
--direction ingress \
"$id" || true
# Allow all UDP
neutron security-group-rule-create --protocol udp \
--port-range-min 1 \
--port-range-max 65535 -\
-direction ingress \
"$id" || true
done