5 cluster_sync_timeout=1800
9 if [[ -n $(is_bootstrap_node) ]]; then
13 check_galera_root_password
14 check_disk_for_mysql_dump
16 # We want to disable fencing during the cluster --stop as it might fence
17 # nodes where a service fails to stop, which could be fatal during an upgrade
18 # procedure. So we remember the stonith state. If it was enabled we reenable it
19 # at the end of this script
20 STONITH_STATE=$(pcs property show stonith-enabled | grep "stonith-enabled" | awk '{ print $2 }')
21 pcs property set stonith-enabled=false
23 # Migrate to HA NG and fix up rabbitmq queues
24 # We fix up the rabbitmq ha queues after the migration because it will
25 # restart the rabbitmq resource. Doing it after the migration means no other
26 # services will be restart as there are no other constraints
27 if [[ -n $(is_bootstrap_node) ]]; then
29 rabbitmq_mitaka_newton_upgrade
32 # After migrating the cluster to HA-NG the services not under pacemaker's control
33 # are still up and running. We need to stop them explicitely otherwise during the yum
34 # upgrade the rpm %post sections will try to do a systemctl try-restart <service>, which
35 # is going to take a long time because rabbit is down. By having the service stopped
36 # systemctl try-restart is a noop
38 for service in $(services_to_migrate); do
39 manage_systemd_service stop "${service%%-clone}"
40 # So the reason for not reusing check_resource_systemd is that
41 # I have observed systemctl is-active returning unknown with at least
42 # one service that was stopped (See LP 1627254)
45 tend=$(( $tstart + $timeout ))
47 while (( $(date +%s) < $tend )); do
48 if [[ "$(systemctl is-active ${service%%-clone})" = "active" ]]; then
49 echo "$service still active, sleeping $check_interval seconds."
52 # we do not care if it is inactive, unknown or failed as long as it is
60 # In case the mysql package is updated, the database on disk must be
61 # upgraded as well. This typically needs to happen during major
62 # version upgrades (e.g. 5.5 -> 5.6, 5.5 -> 10.1...)
64 # Because in-place upgrades are not supported across 2+ major versions
65 # (e.g. 5.5 -> 10.1), we rely on logical upgrades via dump/restore cycle
66 # https://bugzilla.redhat.com/show_bug.cgi?id=1341968
68 # The default is to determine automatically if upgrade is needed based
69 # on mysql package versionning, but this can be overriden manually
70 # to support specific upgrade scenario
72 if [[ -n $(is_bootstrap_node) ]]; then
73 if [ $DO_MYSQL_UPGRADE -eq 1 ]; then
74 mysqldump $backup_flags > "$MYSQL_BACKUP_DIR/openstack_database.sql"
75 cp -rdp /etc/my.cnf* "$MYSQL_BACKUP_DIR"
78 pcs resource disable redis
79 check_resource redis stopped 600
80 pcs resource disable rabbitmq
81 check_resource rabbitmq stopped 600
82 pcs resource disable galera
83 check_resource galera stopped 600
84 pcs resource disable openstack-cinder-volume
85 check_resource openstack-cinder-volume stopped 600
86 # Disable all VIPs before stopping the cluster, so that pcs doesn't use one as a source address:
87 # https://bugzilla.redhat.com/show_bug.cgi?id=1330688
88 for vip in $(pcs resource show | grep ocf::heartbeat:IPaddr2 | grep Started | awk '{ print $1 }'); do
89 pcs resource disable $vip
90 check_resource $vip stopped 60
92 pcs cluster stop --all
96 # Swift isn't controlled by pacemaker
100 while systemctl is-active pacemaker; do
103 if (( tnow-tstart > cluster_sync_timeout )) ; then
104 echo_error "ERROR: cluster shutdown timed out"
109 # The reason we do an sql dump *and* we move the old dir out of
110 # the way is because it gives us an extra level of safety in case
111 # something goes wrong during the upgrade. Once the restore is
112 # successful we go ahead and remove it. If the directory exists
113 # we bail out as it means the upgrade process had issues in the last
115 if [ $DO_MYSQL_UPGRADE -eq 1 ]; then
116 if [ -d $MYSQL_TEMP_UPGRADE_BACKUP_DIR ]; then
117 echo_error "ERROR: mysql backup dir already exist"
120 mv /var/lib/mysql $MYSQL_TEMP_UPGRADE_BACKUP_DIR
124 # Special-case OVS for https://bugs.launchpad.net/tripleo/+bug/1635205
125 if [[ -n $(rpm -q --scripts openvswitch | awk '/postuninstall/,/*/' | grep "systemctl.*try-restart") ]]; then
126 echo "Manual upgrade of openvswitch - restart in postun detected"
127 mkdir OVS_UPGRADE || true
129 echo "Attempting to downloading latest openvswitch with yumdownloader"
130 yumdownloader --resolve openvswitch
131 echo "Updating openvswitch with nopostun"
132 rpm -U --nopostun ./*.rpm
135 echo "Skipping manual upgrade of openvswitch - no restart in postun detected"
138 yum -y install python-zaqarclient # needed for os-collect-config
141 # We need to ensure at least those two configuration settings, otherwise
142 # mariadb 10.1+ won't activate galera replication.
143 # wsrep_cluster_address must only be set though, its value does not
144 # matter because it's overriden by the galera resource agent.
145 cat >> /etc/my.cnf.d/galera.cnf <<EOF
148 wsrep_cluster_address = gcomm://localhost
151 if [ $DO_MYSQL_UPGRADE -eq 1 ]; then
152 # Scripts run via heat have no HOME variable set and this confuses
156 mkdir /var/lib/mysql || /bin/true
157 chown mysql:mysql /var/lib/mysql
158 chmod 0755 /var/lib/mysql
159 restorecon -R /var/lib/mysql/
160 mysql_install_db --datadir=/var/lib/mysql --user=mysql
161 chown -R mysql:mysql /var/lib/mysql/
163 if [ "$(hiera -c /etc/puppet/hiera.yaml bootstrap_nodeid)" = "$(facter hostname)" ]; then
164 mysqld_safe --wsrep-new-cluster &
165 # We have a populated /root/.my.cnf with root/password here so
166 # we need to temporarily rename it because the newly created
167 # db is empty and no root password is set
168 mv /root/.my.cnf /root/.my.cnf.temporary
169 timeout 60 sh -c 'while ! mysql -e "" &> /dev/null; do sleep 1; done'
170 mysql -u root < "$MYSQL_BACKUP_DIR/openstack_database.sql"
171 mv /root/.my.cnf.temporary /root/.my.cnf
172 mysqladmin -u root shutdown
173 # The import was successful so we may remove the folder
174 rm -r "$MYSQL_BACKUP_DIR"
178 # If we reached here without error we can safely blow away the origin
179 # mysql dir from every controller
181 # TODO: What if the upgrade fails on the bootstrap node, but not on
182 # this controller. Data may be lost.
183 if [ $DO_MYSQL_UPGRADE -eq 1 ]; then
184 rm -r $MYSQL_TEMP_UPGRADE_BACKUP_DIR
187 # Let's reset the stonith back to true if it was true, before starting the cluster
188 if [ $STONITH_STATE == "true" ]; then
189 pcs -f /var/lib/pacemaker/cib/cib.xml property set stonith-enabled=true
192 # Pin messages sent to compute nodes to kilo, these will be upgraded later
193 crudini --set /etc/nova/nova.conf upgrade_levels compute "$upgrade_level_nova_compute"
194 # https://bugzilla.redhat.com/show_bug.cgi?id=1284047
195 # Change-Id: Ib3f6c12ff5471e1f017f28b16b1e6496a4a4b435
196 crudini --set /etc/ceilometer/ceilometer.conf DEFAULT rpc_backend rabbit
197 # https://bugzilla.redhat.com/show_bug.cgi?id=1284058
198 # Ifd1861e3df46fad0e44ff9b5cbd58711bbc87c97 Swift Ceilometer middleware no longer exists
199 crudini --set /etc/swift/proxy-server.conf pipeline:main pipeline "catch_errors healthcheck cache ratelimit tempurl formpost authtoken keystone staticweb proxy-logging proxy-server"
200 # LP: 1615035, required only for M/N upgrade.
201 crudini --set /etc/nova/nova.conf DEFAULT scheduler_host_manager host_manager
202 # LP: 1627450, required only for M/N upgrade
203 crudini --set /etc/nova/nova.conf DEFAULT scheduler_driver filter_scheduler
205 crudini --set /etc/sahara/sahara.conf DEFAULT plugins ambari,cdh,mapr,vanilla,spark,storm