X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=blobdiff_plain;f=ci%2Fopenstack.sh;h=139a0dfc662008074afec4acd28a0e11fa77eed7;hb=149e7053b83b2236eac66701837c0d183bb25b81;hp=d0d7f8a0f023f641c74b7b0ce093070eb4462458;hpb=ecfd70bde101afc0c6b96730ad2a2e1be64c5650;p=joid.git diff --git a/ci/openstack.sh b/ci/openstack.sh index d0d7f8a0..139a0dfc 100755 --- a/ci/openstack.sh +++ b/ci/openstack.sh @@ -1,5 +1,4 @@ #!/bin/bash -ex - ############################################################################## # All rights reserved. This program and the accompanying materials # are made available under the terms of the Apache License, Version 2.0 @@ -7,6 +6,17 @@ # http://www.apache.org/licenses/LICENSE-2.0 ############################################################################## +set -ex + +source common/tools.sh + +#./openstack.sh "$opnfvsdn" "$opnfvlab" "$opnfvdistro" "$openstack" || true + +opnfvsdn=$1 +opnfvlab=$2 +opnfvdistro=$3 +opnfvos=$4 + if [ -f ./deployconfig.yaml ];then EXTERNAL_NETWORK=`grep floating-ip-range deployconfig.yaml | cut -d ' ' -f 4 ` @@ -20,7 +30,6 @@ if [ -f ./deployconfig.yaml ];then EXTNET_NET=${EXTNET[3]} EXTNET_PORT=`grep "ext-port" deployconfig.yaml | cut -d ' ' -f 4 | sed -e 's/ //' | tr ',' ' '` ADMNET_GW=`grep "admNetgway" deployconfig.yaml | cut -d ' ' -f 4 | sed -e 's/ //' | tr ',' ' '` - API_FQDN=`grep "os-domain-name" deployconfig.yaml | cut -d ' ' -f 4 | sed -e 's/ //' | tr ',' ' '` fi # launch eth on computer nodes and remove default gw route @@ -38,141 +47,169 @@ update_gw_mac() { ## get gateway mac EXTNET_GW_MAC=$(juju ssh nova-compute/0 "arp -a ${EXTNET_GW} | grep -Eo '([0-9a-fA-F]{2})(([/\s:-][0-9a-fA-F]{2}){5})'") ## set external gateway mac in onos - juju set onos-controller gateway-mac=$EXTNET_GW_MAC + juju config onos-controller gateway-mac=$EXTNET_GW_MAC } unitAddress() { - juju status | python -c "import yaml; import sys; print yaml.load(sys.stdin)[\"services\"][\"$1\"][\"units\"][\"$1/$2\"][\"public-address\"]" 2> /dev/null + juju status --format yaml | python -c "import yaml; import sys; print yaml.load(sys.stdin)[\"applications\"][\"$1\"][\"units\"][\"$1/$2\"][\"public-address\"]" 2> /dev/null } unitMachine() { - juju status | python -c "import yaml; import sys; print yaml.load(sys.stdin)[\"services\"][\"$1\"][\"units\"][\"$1/$2\"][\"machine\"]" 2> /dev/null + juju status --format yaml | python -c "import yaml; import sys; print yaml.load(sys.stdin)[\"applications\"][\"$1\"][\"units\"][\"$1/$2\"][\"machine\"]" 2> /dev/null } keystoneIp() { - KEYSTONE=$(juju status keystone |grep public-address|sed -- 's/.*\: //') - if [ $(echo $KEYSTONE|wc -w) == 1 ];then - echo $KEYSTONE + if [ $(juju status keystone --format=short | grep " keystone"|wc -l) == 1 ];then + unitAddress keystone 0 else - juju get keystone | python -c "import yaml; import sys; print yaml.load(sys.stdin)['settings']['vip']['value']" + juju config keystone vip | cut -d " " -f 1 fi } # create external network and subnet in openstack create_openrc() { + echo_info "Creating the openrc (OpenStack client environment scripts)" + mkdir -m 0700 -p cloud - keystoneIp=$(keystoneIp) - adminPasswd=$(juju get keystone | grep admin-password -A 5 | grep value | awk '{print $2}' 2> /dev/null) - configOpenrc admin $adminPasswd admin http://$keystoneIp:5000/v2.0 Canonical > cloud/admin-openrc - chmod 0600 cloud/admin-openrc + usessl=$(juju config keystone ssl_ca) + if [[ "$usessl" == "" ]]; then + usessl=no + else + usessl=yes + fi + keystoneIp=$(juju config keystone os-public-hostname | cut -d " " -f 1) + if [[ "$keystoneIp" == "" ]]; then + keystoneIp=$(keystoneIp) + fi + adminPasswd=$(juju config keystone admin-password | cut -d " " -f 1) + + v3api=$(juju config keystone preferred-api-version) + + if [[ "$v3api" == "3" ]]; then + if [ "$usessl" == "yes" ]; then + configOpenrc admin $adminPasswd admin https://$keystoneIp:5000/v3 RegionOne publicURL > ~/joid_config/admin-openrc + else + configOpenrc admin $adminPasswd admin http://$keystoneIp:5000/v3 RegionOne publicURL > ~/joid_config/admin-openrc + fi + chmod 0600 ~/joid_config/admin-openrc + source ~/joid_config/admin-openrc + projectid=`openstack project show admin -c id -f value` + projectdomainid=`openstack domain show admin_domain -c id -f value` + userdomainid=`openstack user show admin -c domain_id -f value` + urlapi=`openstack catalog show keystone --format yaml | python -c "import yaml; import sys; print yaml.load(sys.stdin)['endpoints']" | grep public | cut -d " " -f 4` + configOpenrc admin $adminPasswd admin $urlapi RegionOne > ~/joid_config/admin-openrc + else + configOpenrc2 admin $adminPasswd admin http://$keystoneIp:5000/v2.0 RegionOne > ~/joid_config/admin-openrc + chmod 0600 ~/joid_config/admin-openrc + fi +} + +configOpenrc2() { +cat <<-EOF +export SERVICE_ENDPOINT=$4 +unset SERVICE_TOKEN +unset SERVICE_ENDPOINT +export OS_USERNAME=$1 +export OS_PASSWORD=$2 +export OS_TENANT_NAME=$3 +export OS_AUTH_URL=$4 +export OS_REGION_NAME=$5 +EOF } configOpenrc() { -if [ "$API_FQDN" != "''" ]; then - cat <<-EOF - export OS_USERNAME=$1 - export OS_PASSWORD=$2 - export OS_TENANT_NAME=$3 - export OS_AUTH_URL=$4 - export OS_REGION_NAME=$5 - export OS_ENDPOINT_TYPE='internalURL' - export CINDER_ENDPOINT_TYPE='internalURL' - export GLANCE_ENDPOINT_TYPE='internalURL' - export KEYSTONE_ENDPOINT_TYPE='internalURL' - export NEUTRON_ENDPOINT_TYPE='internalURL' - export NOVA_ENDPOINT_TYPE='internalURL' +if [ "$usessl" == "yes" ]; then +cat <<-EOF +#export OS_NO_CACHE='true' +export OS_AUTH_URL=$4 +export OS_USER_DOMAIN_NAME=admin_domain +export OS_PROJECT_DOMAIN_NAME=admin_domain +export OS_USERNAME=$1 +export OS_TENANT_NAME=$3 +export OS_PROJECT_NAME=$3 +export OS_PASSWORD=$2 +export OS_IDENTITY_API_VERSION=3 +export OS_REGION_NAME=$5 +export OS_INTERFACE=public +export OS_CACERT=~/joid_config/keystone_juju_ca_cert.crt EOF else - cat <<-EOF - export OS_USERNAME=$1 - export OS_PASSWORD=$2 - export OS_TENANT_NAME=$3 - export OS_AUTH_URL=$4 - export OS_REGION_NAME=$5 +cat <<-EOF +#export OS_NO_CACHE='true' +export OS_AUTH_URL=$4 +export OS_USER_DOMAIN_NAME=admin_domain +export OS_PROJECT_DOMAIN_NAME=admin_domain +export OS_USERNAME=$1 +export OS_TENANT_NAME=$3 +export OS_PROJECT_NAME=$3 +export OS_PASSWORD=$2 +export OS_IDENTITY_API_VERSION=3 +export OS_REGION_NAME=$5 +export OS_INTERFACE=public +#export OS_CACERT=~/joid_config/bradm.etsi-ubuntu-jh.maas.pem EOF - fi } -if [ "$API_FQDN" != "''" ]; then - # Push api fqdn local ip to all /etc/hosts - API_FQDN=$(juju get keystone | python -c "import yaml; import sys;\ - print yaml.load(sys.stdin)['settings']['os-public-hostname']['value']") - - KEYSTONEIP=$(keystoneIp) - juju run --all "if grep $API_FQDN /etc/hosts > /dev/null; then \ - echo 'API FQDN already present'; \ - else \ - sudo sh -c 'echo $KEYSTONEIP $API_FQDN >> /etc/hosts'; \ - echo 'API FQDN injected'; \ - fi" - #change in jumphost as well as below commands will run on jumphost - - if grep $API_FQDN /etc/hosts; then - echo 'API FQDN already present' - else - sudo sh -c "echo $KEYSTONEIP $API_FQDN >> /etc/hosts" - echo 'API FQDN injected' - fi +if [ "$usessl" == "yes" ]; then + juju scp keystone/0:/usr/local/share/ca-certificates/keystone_juju_ca_cert.crt ~/joid_config/ fi # Create an load openrc create_openrc -. ./cloud/admin-openrc +. ~/joid_config/admin-openrc ## ## removing the swift API endpoint which is created by radosgw. ## one option is not to used radosgw and other one is remove endpoint. ## -echo "Removing swift endpoint and service" -swift_service_id=$(openstack service list | grep swift | cut -d ' ' -f 2) -swift_endpoint_id=$(openstack endpoint list | grep swift | cut -d ' ' -f 2) -openstack endpoint delete $swift_endpoint_id -openstack service delete $swift_service_id +#echo "Removing swift endpoint and service" +#swift_service_id=$(openstack service list | grep swift | cut -d ' ' -f 2) +#swift_endpoint_id=$(openstack endpoint list | grep swift | cut -d ' ' -f 2) +#openstack endpoint delete $swift_endpoint_id +#openstack service delete $swift_service_id ## ## Create external subnet Network ## -#neutron net-create ext-net --shared --router:external=True -neutron net-create ext-net --router:external=True +echo_info "Creating external network with neutron" -if [ "onos" == "$1" ]; then +if [ "onos" == "$opnfvsdn" ]; then launch_eth - neutron subnet-create ext-net --name ext-subnet \ - --allocation-pool start=$EXTNET_FIP,end=$EXTNET_LIP \ - --disable-dhcp --gateway $EXTNET_GW --dns-nameserver 8.8.8.8 $EXTNET_NET - #neutron subnet-create ext-net --name ext-subnet $EXTNET_NET - #update_gw_mac -elif [ "nosdn" == "$1" ]; then - neutron subnet-create ext-net --name ext-subnet \ - --allocation-pool start=$EXTNET_FIP,end=$EXTNET_LIP \ - --disable-dhcp --gateway $EXTNET_GW --dns-nameserver 8.8.8.8 $EXTNET_NET - # configure security groups - #neutron security-group-rule-create --direction ingress --ethertype IPv4 --protocol icmp --remote-ip-prefix 0.0.0.0/0 default - #neutron security-group-rule-create --direction ingress --ethertype IPv4 --protocol tcp --port-range-min 22 --port-range-max 22 --remote-ip-prefix 0.0.0.0/0 default + openstack network show ext-net > /dev/null 2>&1 || openstack network create \ + --external --share --enable ext-net +elif [ "ocl" == "$opnfvsdn" ]; then + openstack network show ext-net > /dev/null 2>&1 || openstack network create \ + --external --share --enable ext-net + else - neutron subnet-create ext-net --name ext-subnet \ - --allocation-pool start=$EXTNET_FIP,end=$EXTNET_LIP \ - --disable-dhcp --gateway $EXTNET_GW --dns-nameserver 8.8.8.8 $EXTNET_NET + openstack network show ext-net > /dev/null 2>&1 || openstack network create \ + --provider-network-type flat \ + --provider-physical-network physnet1 \ + --external --share --enable ext-net fi +openstack subnet show ext-subnet > /dev/null 2>&1 || openstack subnet create \ + --allocation-pool start=$EXTNET_FIP,end=$EXTNET_LIP \ + --no-dhcp --gateway $EXTNET_GW --network ext-net --subnet-range $EXTNET_NET ext-subnet -# Create Congress datasources -sudo apt-get install -y python-congressclient - -# Remove public endpoint and recreate it from internal -# Waiting congress client can be use with internal endpoints -if [ "$API_FQDN" != "''" ]; then - CONGRESS_PUB_ENDPOINT=$(openstack endpoint list --service policy --interface public -c ID -f value) - openstack endpoint delete $CONGRESS_PUB_ENDPOINT - CONGRESS_NEW_PUB_ENDPOINT=$(openstack endpoint list --service policy --interface internal -c URL -f value) - openstack endpoint create --region Canonical policy public $CONGRESS_NEW_PUB_ENDPOINT +# Ocl can push packets to the fabric network in order to reach a gateway if BGP/L3VPN hasn't been configured. +if [ "ocl" == "$opnfvsdn" ]; then + echo "Creating simple gateway functions on ocl vRouters" + juju run --application nova-compute "sudo \ + python /opt/contrail/utils/provision_vgw_interface.py \ + --oper create --interface vgw1 --subnets $EXTNET_NET --routes 0.0.0.0/24 --vrf default-domain:admin:ext-net:ext-net" fi +#congress team is not updating and supporting charm anymore so defer it. + +# Create Congress datasources +#sudo apt-get install -y python-congressclient + #openstack congress datasource create nova "nova" \ # --config username=$OS_USERNAME \ # --config tenant_name=$OS_TENANT_NAME \ @@ -203,44 +240,3 @@ fi # --config tenant_name=$OS_TENANT_NAME \ # --config password=$OS_PASSWORD \ # --config auth_url=http://$keystoneIp:5000/v2.0 - - -##enable extra stuff only if testing manually - -#neutron security-group-rule-create --direction ingress --ethertype IPv4 --protocol icmp --remote-ip-prefix 0.0.0.0/0 default -#neutron security-group-rule-create --direction ingress --ethertype IPv4 --protocol tcp --port-range-min 22 --port-range-max 22 --remote-ip-prefix 0.0.0.0/0 default - -#wget -P /tmp/images http://download.cirros-cloud.net/0.3.3/cirros-0.3.3-x86_64-disk.img -#openstack image create --file /tmp/images/cirros-0.3.3-x86_64-disk.img --disk-format qcow2 --container-format bare "cirros-0.3.3-x86_64" -#wget -P /tmp/images http://cloud-images.ubuntu.com/trusty/current/trusty-server-cloudimg-amd64-disk1.img -#openstack image create --file /tmp/images/trusty-server-cloudimg-amd64-disk1.img --disk-format qcow2 --container-format bare "ubuntu-trusty-daily" -#wget -P /tmp/images http://cloud-images.ubuntu.com/trusty/current/xenial-server-cloudimg-amd64.tar.gz -#openstack image create --file /tmp/images/xenial-server-cloudimg-amd64.tar.gz --container-format bare --disk-format raw "xenial-server-cloudimg-amd64" - -#rm -rf /tmp/images - -## import key pair -#openstack project create --description "Demo Tenant" demo -#openstack user create --project demo --password demo --email demo@demo.demo demo - -#openstack keypair create --public-key ~/.ssh/id_rsa.pub ubuntu-keypair - -## create vm network -#neutron net-create demo-net -#neutron subnet-create --name demo-subnet --gateway 10.20.5.1 demo-net 10.20.5.0/24 -#neutron router-create demo-router -#neutron router-interface-add demo-router demo-subnet -#neutron router-gateway-set demo-router ext-net - -## create pool of floating ips -#i=0 -#while [ $i -ne 3 ]; do -# neutron floatingip-create ext-net -# i=$((i + 1)) -#done - -##http://docs.openstack.org/juno/install-guide/install/apt/content/launch-instance-neutron.html -# netid=`neutron net-show demo-net -c id -f value` -# nova boot --flavor m1.small --image cirros-0.3.3-x86_64 --nic net-id=$netid --security-group default --key-name ubuntu-keypair demo-instance1 -# nova floating-ip-associate demo-instance1 10.5.15.8 -