From: "Rémi PAETA" <remi.paeta@comaite.com>
To: pve-devel@lists.proxmox.com
Subject: [RFC PATCH manager 14/16] ui: sdn: vnet: add port security for ovn zones
Date: Tue, 13 Oct 2026 14:14:30 +0200 [thread overview]
Message-ID: <20261013121432.2642979-15-remi.paeta@comaite.com> (raw)
In-Reply-To: <20261013121432.2642979-1-remi.paeta@comaite.com>
Vnets of OVN zones can override the port security level of their zone.
The field is only shown for OVN zones, the only ones supporting it, and
gets removed from the vnet when moving it to another zone type.
Signed-off-by: Rémi PAETA <remi.paeta@comaite.com>
---
www/manager6/sdn/VnetEdit.js | 26 ++++++++++++++++++++++++++
1 file changed, 26 insertions(+)
diff --git a/www/manager6/sdn/VnetEdit.js b/www/manager6/sdn/VnetEdit.js
index 2c2b454a..36638e10 100644
--- a/www/manager6/sdn/VnetEdit.js
+++ b/www/manager6/sdn/VnetEdit.js
@@ -32,6 +32,9 @@ Ext.define('PVE.sdn.VnetInputPanel', {
if (me.down('#sdnVnetVlanAwareField').isDisabled()) {
addDelete('vlanaware');
}
+ if (me.down('#sdnVnetPortSecurityField').isDisabled()) {
+ addDelete('port-security');
+ }
return values;
},
@@ -95,6 +98,23 @@ Ext.define('PVE.sdn.VnetInputPanel', {
deleteEmpty: '{!isCreate}',
},
},
+ {
+ xtype: 'proxmoxKVComboBox',
+ itemId: 'sdnVnetPortSecurityField',
+ name: 'port-security',
+ value: '',
+ emptyText: gettext('Zone default'),
+ comboItems: [
+ ['off', gettext('Off')],
+ ['mac', 'MAC'],
+ ['mac-ip', 'MAC + IP'],
+ ],
+ fieldLabel: gettext('Port Security'),
+ allowBlank: true,
+ cbind: {
+ deleteEmpty: '{!isCreate}',
+ },
+ },
],
advancedItems: [
{
@@ -142,6 +162,12 @@ Ext.define('PVE.sdn.VnetInputPanel', {
} else {
vlanField.setDisabled(false);
}
+
+ // only OVN zones filter the traffic of the guest ports
+ let portSecurityField = me.down('#sdnVnetPortSecurityField');
+ let isOvn = zoneType === 'ovn';
+ portSecurityField.setHidden(!isOvn);
+ portSecurityField.setDisabled(!isOvn);
},
});
--
2.47.3
next prev parent reply other threads:[~2026-10-13 12:23 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-09 9:22 [RFC] sdn: OVN zone and controller plugins Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH ve-rs/network/manager/docs 00/16] sdn: add " Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH ve-rs 01/16] ve-config: sdn: add ovn zone type Rémi PAETA
2026-10-13 12:14 ` SPAM: [RFC PATCH network 02/16] sdn: controllers: add ovn plugin Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH network 03/16] sdn: zones: " Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH network 04/16] sdn: ovn: sync the northbound database on reload Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH network 05/16] sdn: ovn: configure the chassis on boot and on network reload Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH network 06/16] sdn: ovn: add port security Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH network 07/16] sdn: ovn: allow overriding the port security per vnet Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH network 08/16] sdn: subnets: refuse gateway, snat and dhcp on ovn zones Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH network 09/16] sdn: ovn: support ssl connections to the databases Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH network 10/16] sdn: ovn: bind guest ports to the chassis of their node Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH manager 11/16] ui: sdn: controller selector: allow filtering by controller type Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH manager 12/16] ui: sdn: add ovn controller Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH manager 13/16] ui: sdn: add ovn zone Rémi PAETA
2026-10-13 12:14 ` Rémi PAETA [this message]
2026-10-13 12:14 ` [RFC PATCH manager 15/16] ui: sdn: vnet: disable isolate ports for ovn zones Rémi PAETA
2026-10-13 12:14 ` [RFC PATCH docs 16/16] sdn: document ovn zones and controllers Rémi PAETA
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261013121432.2642979-15-remi.paeta@comaite.com \
--to=remi.paeta@comaite.com \
--cc=pve-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.