Description
One current missing piece of our networking puzzle is support for address sets.
That is, a named set of address and/or subnets which can be used as source/destination selector within ACLs.
There is a native OVN object for this feature, so it would make sense to initially implement this for OVN networking.
Address sets should be scoped the same way as ACLs as they'll be very closely linked. This means address sets should be part of a project when features.networks=true
The expected changes should roughly be:
- Allocate API extension
- New database table (schema change)
- New database functions (using the generator)
- Add REST API structs for network address sets
- Add OVN NB bindings for managing address sets
- Add REST API to manipulate address sets
- Add integration with OVN ACLs
- Implement CLI command
- Refresh translations
- Add tests
Activity