127 lines
3.4 KiB
Go
127 lines
3.4 KiB
Go
package vcd
|
|
|
|
import (
|
|
"fmt"
|
|
"github.com/hashicorp/terraform/helper/schema"
|
|
"github.com/opencredo/vmware-govcd"
|
|
)
|
|
|
|
func resourceVcdSNAT() *schema.Resource {
|
|
return &schema.Resource{
|
|
Create: resourceVcdSNATCreate,
|
|
Update: resourceVcdSNATUpdate,
|
|
Delete: resourceVcdSNATDelete,
|
|
Read: resourceVcdSNATRead,
|
|
|
|
Schema: map[string]*schema.Schema{
|
|
"edge_gateway": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Required: true,
|
|
ForceNew: true,
|
|
},
|
|
|
|
"external_ip": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Required: true,
|
|
},
|
|
|
|
"internal_ip": &schema.Schema{
|
|
Type: schema.TypeString,
|
|
Required: true,
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
func resourceVcdSNATCreate(d *schema.ResourceData, meta interface{}) error {
|
|
vcd_client := meta.(*govcd.VCDClient)
|
|
// Multiple VCD components need to run operations on the Edge Gateway, as
|
|
// the edge gatway will throw back an error if it is already performing an
|
|
// operation we must wait until we can aquire a lock on the client
|
|
vcd_client.Mutex.Lock()
|
|
defer vcd_client.Mutex.Unlock()
|
|
|
|
// Creating a loop to offer further protection from the edge gateway erroring
|
|
// due to being busy eg another person is using another client so wouldn't be
|
|
// constrained by out lock. If the edge gateway reurns with a busy error, wait
|
|
// 3 seconds and then try again. Continue until a non-busy error or success
|
|
edgeGateway, err := vcd_client.OrgVdc.FindEdgeGateway(d.Get("edge_gateway").(string))
|
|
if err != nil {
|
|
return fmt.Errorf("Unable to find edge gateway: %#v", err)
|
|
}
|
|
|
|
err = retryCall(4, func() error {
|
|
task, err := edgeGateway.AddNATMapping("SNAT", d.Get("internal_ip").(string),
|
|
d.Get("external_ip").(string),
|
|
"any")
|
|
if err != nil {
|
|
return fmt.Errorf("Error setting SNAT rules: %#v", err)
|
|
}
|
|
return task.WaitTaskCompletion()
|
|
})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
d.SetId(d.Get("internal_ip").(string))
|
|
return nil
|
|
}
|
|
|
|
func resourceVcdSNATUpdate(d *schema.ResourceData, meta interface{}) error {
|
|
return nil
|
|
}
|
|
|
|
func resourceVcdSNATRead(d *schema.ResourceData, meta interface{}) error {
|
|
vcd_client := meta.(*govcd.VCDClient)
|
|
e, err := vcd_client.OrgVdc.FindEdgeGateway(d.Get("edge_gateway").(string))
|
|
|
|
if err != nil {
|
|
return fmt.Errorf("Unable to find edge gateway: %#v", err)
|
|
}
|
|
|
|
var found bool
|
|
|
|
for _, r := range e.EdgeGateway.Configuration.EdgeGatewayServiceConfiguration.NatService.NatRule {
|
|
if r.RuleType == "SNAT" &&
|
|
r.GatewayNatRule.OriginalIP == d.Id() {
|
|
found = true
|
|
d.Set("external_ip", r.GatewayNatRule.TranslatedIP)
|
|
}
|
|
}
|
|
|
|
if !found {
|
|
d.SetId("")
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func resourceVcdSNATDelete(d *schema.ResourceData, meta interface{}) error {
|
|
vcd_client := meta.(*govcd.VCDClient)
|
|
// Multiple VCD components need to run operations on the Edge Gateway, as
|
|
// the edge gatway will throw back an error if it is already performing an
|
|
// operation we must wait until we can aquire a lock on the client
|
|
vcd_client.Mutex.Lock()
|
|
defer vcd_client.Mutex.Unlock()
|
|
|
|
edgeGateway, err := vcd_client.OrgVdc.FindEdgeGateway(d.Get("edge_gateway").(string))
|
|
if err != nil {
|
|
return fmt.Errorf("Unable to find edge gateway: %#v", err)
|
|
}
|
|
|
|
err = retryCall(4, func() error {
|
|
task, err := edgeGateway.RemoveNATMapping("SNAT", d.Get("internal_ip").(string),
|
|
d.Get("external_ip").(string),
|
|
"")
|
|
if err != nil {
|
|
return fmt.Errorf("Error setting SNAT rules: %#v", err)
|
|
}
|
|
return task.WaitTaskCompletion()
|
|
})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return nil
|
|
}
|