2 ##############################################################################
3 # Copyright (c) 2015 Ericsson AB and others.
4 # jose.lausuch@ericsson.com
5 # All rights reserved. This program and the accompanying materials
6 # are made available under the terms of the Apache License, Version 2.0
7 # which accompanies this distribution, and is available at
8 # http://www.apache.org/licenses/LICENSE-2.0
9 ##############################################################################
13 echo "usage: $0 [-v] -d <destination> -i <installer_type> -a <installer_ip>" >&2
14 echo "[-v] Virtualized deployment" >&2
18 logger -s -t "fetch_os_creds.info" "$*"
23 logger -s -t "fetch_os_creds.error" "$*"
28 verify_connectivity() {
30 info "Verifying connectivity to $ip..."
31 for i in $(seq 0 10); do
32 if ping -c 1 -W 1 $ip > /dev/null; then
33 info "$ip is reachable!"
38 error "Can not talk to $ip."
43 if [ "$1" != "" ]; then
44 info "Exchanging keystone public IP in rc file to $public_ip"
45 sed -i "/OS_AUTH_URL/c\export OS_AUTH_URL=\'$public_ip'" $dest_path
46 sed -i 's/internalURL/publicURL/g' $dest_path
54 while getopts ":d:i:a:h:v" optchar; do
56 d) dest_path=${OPTARG} ;;
57 i) installer_type=${OPTARG} ;;
58 a) installer_ip=${OPTARG} ;;
59 v) DEPLOY_TYPE="virt" ;;
60 *) echo "Non-option argument: '-${OPTARG}'" >&2
67 # set vars from env if not provided by user as options
68 dest_path=${dest_path:-$HOME/opnfv-openrc.sh}
69 installer_type=${installer_type:-$INSTALLER_TYPE}
70 installer_ip=${installer_ip:-$INSTALLER_IP}
72 if [ -z $dest_path ] || [ -z $installer_type ] || [ -z $installer_ip ]; then
77 # Checking if destination path is valid
78 if [ -d $dest_path ]; then
79 error "Please provide the full destination path for the credentials file including the filename"
81 # Check if we can create the file (e.g. path is correct)
82 touch $dest_path || error "Cannot create the file specified. Check that the path is correct and run the script again."
86 ssh_options="-o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no"
88 # Start fetching the files
89 if [ "$installer_type" == "fuel" ]; then
91 verify_connectivity $installer_ip
93 env=$(sshpass -p r00tme ssh 2>/dev/null $ssh_options root@${installer_ip} \
94 'fuel env'|grep operational|head -1|awk '{print $1}') &> /dev/null
96 error "No operational environment detected in Fuel"
98 env_id="${FUEL_ENV:-$env}"
100 # Check if controller is alive (online='True')
101 controller_ip=$(sshpass -p r00tme ssh 2>/dev/null $ssh_options root@${installer_ip} \
102 "fuel node --env ${env_id} | grep controller | grep 'True\| 1' | awk -F\| '{print \$5}' | head -1" | \
103 sed 's/ //g') &> /dev/null
105 if [ -z $controller_ip ]; then
106 error "The controller $controller_ip is not up. Please check that the POD is correctly deployed."
109 info "Fetching rc file from controller $controller_ip..."
110 sshpass -p r00tme ssh 2>/dev/null $ssh_options root@${installer_ip} \
111 "scp $ssh_options ${controller_ip}:/root/openrc ." &> /dev/null
112 sshpass -p r00tme scp 2>/dev/null $ssh_options root@${installer_ip}:~/openrc $dest_path &> /dev/null
114 #This file contains the mgmt keystone API, we need the public one for our rc file
115 admin_ip=$(cat $dest_path | grep "OS_AUTH_URL" | sed 's/^.*\=//' | sed "s/^\([\"']\)\(.*\)\1\$/\2/g" | sed s'/\/$//')
116 public_ip=$(sshpass -p r00tme ssh $ssh_options root@${installer_ip} \
117 "ssh ${controller_ip} 'source openrc; openstack endpoint list'" \
118 | grep keystone | grep public | sed 's/ /\n/g' | grep ^http | head -1) &> /dev/null
119 #| grep http | head -1 | cut -d '|' -f 4 | sed 's/v1\/.*/v1\//' | sed 's/ //g') &> /dev/null
120 #NOTE: this is super ugly sed 's/v1\/.*/v1\//'OS_AUTH_URL
121 # but sometimes the output of endpoint-list is like this: http://172.30.9.70:8004/v1/%(tenant_id)s
122 # Fuel virtual need a fix
125 auth_url=$(cat $dest_path|grep AUTH_URL)
126 if [[ -z `echo $auth_url |grep v3` ]]; then
127 auth_url=$(echo $auth_url |sed "s|'$|v3&|")
129 sed -i '/AUTH_URL/d' $dest_path
130 echo $auth_url >> $dest_path
132 elif [ "$installer_type" == "apex" ]; then
133 verify_connectivity $installer_ip
135 # The credentials file is located in the Instack VM (192.0.2.1)
136 # NOTE: This might change for bare metal deployments
137 info "Fetching rc file from Instack VM $installer_ip..."
138 if [ -f /root/.ssh/id_rsa ]; then
139 chmod 600 /root/.ssh/id_rsa
141 sudo scp $ssh_options root@$installer_ip:/home/stack/overcloudrc $dest_path
143 elif [ "$installer_type" == "compass" ]; then
144 verify_connectivity $installer_ip
145 controller_ip=$(sshpass -p'root' ssh 2>/dev/null $ssh_options root@${installer_ip} \
146 'mysql -ucompass -pcompass -Dcompass -e"select * from cluster;"' \
147 | awk -F"," '{for(i=1;i<NF;i++)if($i~/\"127.0.0.1\"/) {print $(i+2);break;}}' \
148 | grep -oP "\d+.\d+.\d+.\d+")
150 if [ -z $controller_ip ]; then
151 error "The controller $controller_ip is not up. Please check that the POD is correctly deployed."
154 info "Fetching rc file from controller $controller_ip..."
155 sshpass -p root ssh 2>/dev/null $ssh_options root@${installer_ip} \
156 "scp $ssh_options ${controller_ip}:/opt/admin-openrc.sh ." &> /dev/null
157 sshpass -p root scp 2>/dev/null $ssh_options root@${installer_ip}:~/admin-openrc.sh $dest_path &> /dev/null
159 info "This file contains the mgmt keystone API, we need the public one for our rc file"
160 grep "OS_AUTH_URL.*v2" $dest_path > /dev/null 2>&1
161 if [ $? -eq 0 ] ; then
162 public_ip=$(sshpass -p root ssh $ssh_options root@${installer_ip} \
163 "ssh ${controller_ip} 'source /opt/admin-openrc.sh; openstack endpoint show identity '" \
164 | grep publicurl | awk '{print $4}')
166 public_ip=$(sshpass -p root ssh $ssh_options root@${installer_ip} \
167 "ssh ${controller_ip} 'source /opt/admin-openrc.sh; \
168 openstack endpoint list --interface public --service identity '" \
169 | grep identity | awk '{print $14}')
171 info "public_ip: $public_ip"
172 swap_to_public $public_ip
175 elif [ "$installer_type" == "joid" ]; then
176 # do nothing...for the moment
177 # we can either do a scp from the jumphost or use the -v option to transmit the param to the docker file
178 echo "Do nothing, creds will be provided through volume option at docker creation for joid"
180 elif [ "$installer_type" == "foreman" ]; then
181 #ip_foreman="172.30.10.73"
182 controller="oscontroller1.opnfv.com"
183 verify_connectivity $installer_ip
185 # Check if controller is alive (here is more difficult to get the ip from a command like "fuel node")
186 sshpass -p vagrant ssh $ssh_options root@${installer_ip} \
187 "sshpass -p Op3nStack ssh $ssh_options root@${controller} 'ls'" &> /dev/null
188 if [ $? -ne 0 ]; then
189 error "The controller ${controller} is not up. Please check that the POD is correctly deployed."
192 info "Fetching openrc from a Foreman Controller '${controller}'..."
193 sshpass -p vagrant ssh $ssh_options root@${installer_ip} \
194 "sshpass -p Op3nStack scp $ssh_options root@${controller}:~/keystonerc_admin ." &> /dev/null
195 sshpass -p vagrant scp $ssh_options root@${installer_ip}:~/keystonerc_admin $dest_path &> /dev/null
197 #This file contains the mgmt keystone API, we need the public one for our rc file
198 admin_ip=$(cat $dest_path | grep "OS_AUTH_URL" | sed 's/^.*\=//' | sed "s/^\([\"']\)\(.*\)\1\$/\2/g" | sed s'/\/$//')
199 public_ip=$(sshpass -p vagrant ssh $ssh_options root@${installer_ip} \
200 "sshpass -p Op3nStack ssh $ssh_options root@${controller} \
201 'source keystonerc_admin;keystone endpoint-list'" \
202 | grep $admin_ip | sed 's/ /\n/g' | grep ^http | head -1) &> /dev/null
205 error "Installer $installer is not supported by this script"
209 if [ ! -f $dest_path ]; then
210 error "There has been an error retrieving the credentials"
213 echo "-------- Credentials: --------"