jjb/integration/integration-deploy-openstack-run-test.sh

   1 #!/bin/bash
   2 # Activate robotframework virtualenv
   3 # ${ROBOT_VENV} comes from the integration-install-robotframework.sh
   4 # script.
   5 # shellcheck source=${ROBOT_VENV}/bin/activate disable=SC1091
   6 source ${ROBOT_VENV}/bin/activate
   7 source /tmp/common-functions.sh ${BUNDLEFOLDER}
   8
   9 PYTHON="${ROBOT_VENV}/bin/python"
  10 SSH="ssh -t -t"
  11 ADMIN_PASSWORD="admin"
  12 OPENSTACK_MASTER_CLIENTS_VERSION="queens"
  13
  14 pip install odltools
  15 odltools -V
  16
  17 # TODO: remove this work to run changes.py if/when it's moved higher up to be visible at the Robot level
  18 printf "\nshowing recent changes that made it into the distribution used by this job:\n"
  19 $PYTHON -m pip install --upgrade urllib3
  20 python ${WORKSPACE}/test/tools/distchanges/changes.py -d /tmp/distribution_folder \
  21                   -u ${ACTUAL_BUNDLE_URL} -b ${DISTROBRANCH} \
  22                   -r ssh://jenkins-${SILO}@git.opendaylight.org:29418 || true
  23
  24 printf "\nshowing recent changes that made it into integration/test used by this job:\n"
  25 cd ${WORKSPACE}/test
  26 printf "Hash    Author Date                    Commit Date                    Author               Subject\n"
  27 printf "%s\n" "------- ------------------------------ ------------------------------ -------------------- -----------------------------"
  28 git --no-pager log --pretty=format:'%h %<(30)%ad %<(30)%cd %<(20,trunc)%an%d %s' -n20
  29 printf "\n"
  30 cd -
  31
  32 cat << EOF
  33 #################################################
  34 ##         Deploy Openstack 3-node             ##
  35 #################################################
  36 EOF
  37
  38 # Catch command errors and collect logs.
  39 # This ensures logs are collected when script commands fail rather than simply exiting.
  40 function trap_handler() {
  41     local prog="$0"
  42     local lastline="$1"
  43     local lasterr="$2"
  44     echo "trap_hanlder: ${prog}: line ${lastline}: exit status of last command: ${lasterr}"
  45     echo "trap_handler: command: ${BASH_COMMAND}"
  46     exit 1
  47 } # trap_handler()
  48
  49 trap 'trap_handler ${LINENO} ${$?}' ERR
  50
  51 print_job_parameters
  52
  53 function create_etc_hosts() {
  54     NODE_IP=$1
  55     CTRL_IP=$2
  56     : > ${WORKSPACE}/hosts_file
  57     for iter in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`
  58     do
  59         COMPUTE_IP=OPENSTACK_COMPUTE_NODE_${iter}_IP
  60         if [ "${!COMPUTE_IP}" == "${NODE_IP}" ]; then
  61            CONTROL_HNAME=$(${SSH}  ${CTRL_IP}  "hostname")
  62            echo "${CTRL_IP}   ${CONTROL_HNAME}" >> ${WORKSPACE}/hosts_file
  63         else
  64            COMPUTE_HNAME=$(${SSH}  ${!COMPUTE_IP}  "hostname")
  65            echo "${!COMPUTE_IP}   ${COMPUTE_HNAME}" >> ${WORKSPACE}/hosts_file
  66         fi
  67     done
  68
  69     echo "Created the hosts file for ${NODE_IP}:"
  70     cat ${WORKSPACE}/hosts_file
  71 } # create_etc_hosts()
  72
  73 #function to install Openstack Clients for Testing
  74 #This will pull the latest versions compatiable with the
  75 # openstack release
  76 function install_openstack_clients_in_robot_vm() {
  77     packages=("python-novaclient" "python-neutronclient" "python-openstackclient")
  78     local os_plugins
  79     os_plugins=$(csv2ssv "${ENABLE_OS_PLUGINS}")
  80     for plugin_name in $os_plugins; do
  81         if [ "$plugin_name" == "networking-sfc" ]; then
  82             packages+=("networking-sfc")
  83         fi
  84     done
  85     openstack_version=$(echo ${OPENSTACK_BRANCH} | cut -d/ -f2)
  86     #If the job tests "master", we will use the clients from previous released stable version to avoid failures
  87     if [ "${openstack_version}" == "master" ]; then
  88        openstack_version=${OPENSTACK_MASTER_CLIENTS_VERSION}
  89     fi
  90     for package in ${packages[*]}; do
  91        echo "Get the current support version of the package ${package}"
  92        wget https://raw.githubusercontent.com/openstack/requirements/stable/${openstack_version}/upper-constraints.txt -O /tmp/constraints.txt 2>/dev/null
  93        echo "$PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt"
  94        $PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt
  95        echo "$PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt"
  96        $PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt
  97     done
  98
  99     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 100         #networking-l2gw is not officially available in any release yet. Getting the latest stable version.
 101         $PYTHON -m pip install networking-l2gw==11.0.0
 102     fi
 103 }
 104
 105 function is_openstack_feature_enabled() {
 106     local feature=$1
 107     for enabled_feature in $(csv2ssv ${ENABLE_OS_SERVICES})
 108     do
 109         if [ "${enabled_feature}" == "${feature}" ]; then
 110            echo 1
 111            return
 112         fi
 113     done
 114     echo 0
 115 }
 116
 117 #Function to install rdo release
 118 # This will help avoiding installing wrong version of packages which causes
 119 # functionality failures
 120 function install_rdo_release() {
 121     local ip=$1
 122     case ${OPENSTACK_BRANCH} in
 123        *pike*)
 124           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-pike/rdo-release-pike-1.noarch.rpm"
 125           ;;
 126
 127        *queens*)
 128           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
 129           ;;
 130
 131        master)
 132           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
 133           ;;
 134     esac
 135 }
 136
 137 # Involves just setting up the shared directory
 138 function setup_live_migration_control() {
 139     local control_ip=$1
 140     printf "${control_ip}:Setup directory Share with NFS"
 141     cat > ${WORKSPACE}/setup_live_migration_control.sh << EOF
 142 sudo mkdir --mode=777 /vm_instances
 143 sudo chown -R jenkins:jenkins /vm_instances
 144 sudo yum install -y nfs-utils
 145 printf "/vm_instances *(rw,no_root_squash)" | sudo tee -a /etc/exports
 146 sudo systemctl start rpcbind nfs-server
 147 sudo exportfs
 148 EOF
 149     scp ${WORKSPACE}/setup_live_migration_control.sh ${control_ip}:/tmp/setup_live_migration_control.sh
 150     ssh ${control_ip} "bash /tmp/setup_live_migration_control.sh"
 151 }
 152
 153 # Involves mounting the share and configuring the libvirtd
 154 function setup_live_migration_compute() {
 155     local compute_ip=$1
 156     local control_ip=$2
 157     printf "${compute_ip}:Mount Shared directory from ${control_ip}"
 158     printf "${compute_ip}:Configure libvirt in listen mode"
 159     cat >  ${WORKSPACE}/setup_live_migration_compute.sh << EOF
 160 sudo yum install -y libvirt libvirt-devel nfs-utils
 161 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tls 0
 162 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tcp 1
 163 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' auth_tcp '"none"'
 164 sudo crudini --verbose  --set --inplace /etc/sysconfig/libvirtd '' LIBVIRTD_ARGS '"--listen"'
 165 sudo mkdir --mode=777 -p /var/instances
 166 sudo chown -R jenkins:jenkins /var/instances
 167 sudo chmod o+x /var/instances
 168 sudo systemctl start rpcbind
 169 sudo mount -t nfs ${control_ip}:/vm_instances /var/instances
 170 sudo mount
 171 EOF
 172     scp ${WORKSPACE}/setup_live_migration_compute.sh ${compute_ip}:/tmp/setup_live_migration_compute.sh
 173     ssh ${compute_ip} "bash /tmp/setup_live_migration_compute.sh"
 174 }
 175
 176 # Add enable_services and disable_services to the local.conf
 177 function add_os_services() {
 178     local core_services=$1
 179     local enable_services=$2
 180     local disable_services=$3
 181     local local_conf_file_name=$4
 182     local enable_network_services=$5
 183
 184     cat >> ${local_conf_file_name} << EOF
 185 enable_service $(csv2ssv "${core_services}")
 186 EOF
 187     if [ -n "${enable_services}" ]; then
 188         cat >> ${local_conf_file_name} << EOF
 189 enable_service $(csv2ssv "${enable_services}")
 190 EOF
 191     fi
 192     if [ -n "${disable_services}" ]; then
 193         cat >> ${local_conf_file_name} << EOF
 194 disable_service $(csv2ssv "${disable_services}")
 195 EOF
 196     fi
 197     if [ -n "${enable_network_services}" ]; then
 198         cat >> ${local_conf_file_name} << EOF
 199 enable_service $(csv2ssv "${enable_network_services}")
 200 EOF
 201     fi
 202 }
 203
 204 function create_control_node_local_conf() {
 205     HOSTIP=$1
 206     MGRIP=$2
 207     ODL_OVS_MANAGERS="$3"
 208
 209     local_conf_file_name=${WORKSPACE}/local.conf_control_${HOSTIP}
 210     cat > ${local_conf_file_name} << EOF
 211 [[local|localrc]]
 212 LOGFILE=stack.sh.log
 213 LOG_COLOR=False
 214 USE_SYSTEMD=True
 215 RECLONE=${RECLONE}
 216 # Increase the wait used by stack to poll for services
 217 SERVICE_TIMEOUT=120
 218
 219 disable_all_services
 220 EOF
 221
 222     add_os_services "${CORE_OS_CONTROL_SERVICES}" "${ENABLE_OS_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}" "${ENABLE_OS_NETWORK_SERVICES}"
 223
 224     cat >> ${local_conf_file_name} << EOF
 225
 226 HOST_IP=${HOSTIP}
 227 SERVICE_HOST=\$HOST_IP
 228 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
 229 NEUTRON_CREATE_INITIAL_NETWORKS=${CREATE_INITIAL_NETWORKS}
 230
 231 ODL_MODE=manual
 232 ODL_MGR_IP=${MGRIP}
 233 ODL_PORT=${ODL_PORT}
 234 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
 235 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
 236
 237 MYSQL_HOST=\$SERVICE_HOST
 238 RABBIT_HOST=\$SERVICE_HOST
 239 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
 240 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
 241 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
 242
 243 ADMIN_PASSWORD=${ADMIN_PASSWORD}
 244 DATABASE_PASSWORD=${ADMIN_PASSWORD}
 245 RABBIT_PASSWORD=${ADMIN_PASSWORD}
 246 SERVICE_TOKEN=${ADMIN_PASSWORD}
 247 SERVICE_PASSWORD=${ADMIN_PASSWORD}
 248
 249 NEUTRON_LBAAS_SERVICE_PROVIDERV2=${LBAAS_SERVICE_PROVIDER} # Only relevant if neutron-lbaas plugin is enabled
 250 NEUTRON_SFC_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
 251 NEUTRON_FLOWCLASSIFIER_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
 252 ETCD_PORT=2379
 253 EOF
 254     if [ "${TENANT_NETWORK_TYPE}" == "local" ]; then
 255         cat >> ${local_conf_file_name} << EOF
 256 ENABLE_TENANT_TUNNELS=false
 257 EOF
 258     fi
 259
 260     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
 261         echo "ODL_V2DRIVER=True" >> ${local_conf_file_name}
 262     fi
 263     IFS=,
 264     for plugin_name in ${ENABLE_OS_PLUGINS}; do
 265         if [ "$plugin_name" == "networking-odl" ]; then
 266             ENABLE_PLUGIN_ARGS="${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}"
 267         elif [ "$plugin_name" == "kuryr-kubernetes" ]; then
 268             ENABLE_PLUGIN_ARGS="${DEVSTACK_KUBERNETES_PLUGIN_REPO} master" # note: kuryr-kubernetes only exists in master at the moment
 269         elif [ "$plugin_name" == "neutron-lbaas" ]; then
 270             ENABLE_PLUGIN_ARGS="${DEVSTACK_LBAAS_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
 271             IS_LBAAS_PLUGIN_ENABLED="yes"
 272         elif [ "$plugin_name" == "networking-sfc" ]; then
 273             ENABLE_PLUGIN_ARGS="${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO} master"
 274             IS_SFC_PLUGIN_ENABLED="yes"
 275         else
 276             echo "Error: Invalid plugin $plugin_name, unsupported"
 277             continue
 278         fi
 279         cat >> ${local_conf_file_name} << EOF
 280
 281 enable_plugin ${plugin_name} ${ENABLE_PLUGIN_ARGS}
 282 EOF
 283     done
 284     unset IFS
 285
 286     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 287         cat >> ${local_conf_file_name} << EOF
 288
 289 enable_plugin networking-l2gw ${NETWORKING_L2GW_DRIVER} ${ODL_ML2_BRANCH}
 290 NETWORKING_L2GW_SERVICE_DRIVER=L2GW:OpenDaylight:networking_odl.l2gateway.driver_v2.OpenDaylightL2gwDriver:default
 291 EOF
 292     fi
 293
 294     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
 295         cat >> ${local_conf_file_name} << EOF
 296
 297 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
 298 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
 299 ML2_VLAN_RANGES=${PUBLIC_PHYSICAL_NETWORK}
 300 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
 301 EOF
 302
 303         if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
 304            SERVICE_PLUGINS="odl-router_v2"
 305         else
 306            SERVICE_PLUGINS="odl-router"
 307         fi
 308         if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 309             SERVICE_PLUGINS+=", networking_l2gw.services.l2gateway.plugin.L2GatewayPlugin"
 310         fi
 311         if [ "${IS_LBAAS_PLUGIN_ENABLED}" == "yes" ]; then
 312             SERVICE_PLUGINS+=", lbaasv2"
 313         fi
 314         if [ "${IS_SFC_PLUGIN_ENABLED}" == "yes" ]; then
 315             SERVICE_PLUGINS+=", networking_sfc.services.flowclassifier.plugin.FlowClassifierPlugin,networking_sfc.services.sfc.plugin.SfcPlugin"
 316         fi
 317     fi #check for ODL_ENABLE_L3_FWD
 318
 319     cat >> ${local_conf_file_name} << EOF
 320
 321 [[post-config|\$NEUTRON_CONF]]
 322 [DEFAULT]
 323 service_plugins = ${SERVICE_PLUGINS}
 324 log_dir = /opt/stack/logs
 325
 326 [[post-config|/etc/neutron/plugins/ml2/ml2_conf.ini]]
 327 [agent]
 328 minimize_polling=True
 329
 330 [ml2]
 331 # Needed for VLAN provider tests - because our provider networks are always encapsulated in VXLAN (br-physnet1)
 332 # MTU(1400) + VXLAN(50) + VLAN(4) = 1454 < MTU eth0/br-physnet1(1458)
 333 physical_network_mtus = ${PUBLIC_PHYSICAL_NETWORK}:1400
 334 path_mtu = 1458
 335 EOF
 336
 337     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 338         cat >> ${local_conf_file_name} << EOF
 339
 340 [ml2_odl]
 341 enable_dhcp_service = True
 342 EOF
 343     fi
 344
 345     cat >> ${local_conf_file_name} << EOF
 346
 347 [ml2_odl]
 348 # Trigger n-odl full sync every 30 secs.
 349 maintenance_interval = 30
 350
 351 [[post-config|/etc/neutron/dhcp_agent.ini]]
 352 [DEFAULT]
 353 force_metadata = True
 354 enable_isolated_metadata = True
 355 log_dir = /opt/stack/logs
 356
 357 [[post-config|/etc/nova/nova.conf]]
 358 [DEFAULT]
 359 force_config_drive = False
 360 force_raw_images = False
 361 log_dir = /opt/stack/logs
 362
 363 [scheduler]
 364 discover_hosts_in_cells_interval = 30
 365 EOF
 366
 367     echo "Control local.conf created:"
 368     cat ${local_conf_file_name}
 369 } # create_control_node_local_conf()
 370
 371 function create_compute_node_local_conf() {
 372     HOSTIP=$1
 373     SERVICEHOST=$2
 374     MGRIP=$3
 375     ODL_OVS_MANAGERS="$4"
 376
 377     local_conf_file_name=${WORKSPACE}/local.conf_compute_${HOSTIP}
 378     cat > ${local_conf_file_name} << EOF
 379 [[local|localrc]]
 380 LOGFILE=stack.sh.log
 381 LOG_COLOR=False
 382 USE_SYSTEMD=True
 383 RECLONE=${RECLONE}
 384 # Increase the wait used by stack to poll for the nova service on the control node
 385 NOVA_READY_TIMEOUT=1800
 386
 387 disable_all_services
 388 EOF
 389
 390     add_os_services "${CORE_OS_COMPUTE_SERVICES}" "${ENABLE_OS_COMPUTE_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}"
 391
 392     cat >> ${local_conf_file_name} << EOF
 393 HOST_IP=${HOSTIP}
 394 SERVICE_HOST=${SERVICEHOST}
 395 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
 396
 397 ODL_MODE=manual
 398 ODL_MGR_IP=${MGRIP}
 399 ODL_PORT=${ODL_PORT}
 400 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
 401 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
 402
 403 Q_HOST=\$SERVICE_HOST
 404 MYSQL_HOST=\$SERVICE_HOST
 405 RABBIT_HOST=\$SERVICE_HOST
 406 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
 407 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
 408 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
 409
 410 ADMIN_PASSWORD=${ADMIN_PASSWORD}
 411 DATABASE_PASSWORD=${ADMIN_PASSWORD}
 412 RABBIT_PASSWORD=${ADMIN_PASSWORD}
 413 SERVICE_TOKEN=${ADMIN_PASSWORD}
 414 SERVICE_PASSWORD=${ADMIN_PASSWORD}
 415 EOF
 416
 417     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-odl ]]; then
 418         cat >> ${local_conf_file_name} << EOF
 419
 420 enable_plugin networking-odl ${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}
 421 EOF
 422     fi
 423
 424     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
 425         cat >> ${local_conf_file_name} << EOF
 426
 427 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
 428 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
 429 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
 430 Q_L3_ENABLED=True
 431 ODL_L3=${ODL_L3}
 432 EOF
 433     fi
 434
 435     cat >> ${local_conf_file_name} << EOF
 436
 437 [[post-config|/etc/nova/nova.conf]]
 438 [api]
 439 auth_strategy = keystone
 440 [DEFAULT]
 441 use_neutron = True
 442 force_raw_images = False
 443 log_dir = /opt/stack/logs
 444 [libvirt]
 445 live_migration_uri = qemu+tcp://%s/system
 446 virt_type = qemu
 447 EOF
 448
 449     echo "Compute local.conf created:"
 450     cat ${local_conf_file_name}
 451 } # create_compute_node_local_conf()
 452
 453 function configure_haproxy_for_neutron_requests() {
 454     MGRIP=$1
 455     # shellcheck disable=SC2206
 456     ODL_IPS=(${2//,/ })
 457
 458     cat > ${WORKSPACE}/install_ha_proxy.sh<< EOF
 459 sudo systemctl stop firewalld
 460 sudo yum -y install policycoreutils-python haproxy
 461 EOF
 462
 463 cat > ${WORKSPACE}/haproxy.cfg << EOF
 464 global
 465   daemon
 466   group  haproxy
 467   log  /dev/log local0
 468   maxconn  20480
 469   pidfile  /tmp/haproxy.pid
 470   user  haproxy
 471
 472 defaults
 473   log  global
 474   maxconn  4096
 475   mode  tcp
 476   retries  3
 477   timeout  http-request 10s
 478   timeout  queue 1m
 479   timeout  connect 10s
 480   timeout  client 1m
 481   timeout  server 1m
 482   timeout  check 10s
 483
 484 listen opendaylight
 485   bind ${MGRIP}:8080
 486   balance source
 487
 488 listen opendaylight_rest
 489   bind ${MGRIP}:8181
 490   balance source
 491
 492 listen opendaylight_websocket
 493   bind ${MGRIP}:8185
 494   balance source
 495
 496 EOF
 497
 498     odlindex=1
 499     for odlip in ${ODL_IPS[*]}; do
 500         sed -i "/listen opendaylight$/a server controller-${odlindex} ${odlip}:8080 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
 501         sed -i "/listen opendaylight_rest$/a server controller-rest-${odlindex} ${odlip}:8181 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
 502         sed -i "/listen opendaylight_websocket$/a server controller-websocket-${odlindex} ${odlip}:8185 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
 503         odlindex=$((odlindex+1))
 504     done
 505
 506
 507     echo "Dump haproxy.cfg"
 508     cat ${WORKSPACE}/haproxy.cfg
 509
 510     cat > ${WORKSPACE}/deploy_ha_proxy.sh<< EOF
 511 sudo chown haproxy:haproxy /tmp/haproxy.cfg
 512 sudo sed -i 's/\\/etc\\/haproxy\\/haproxy.cfg/\\/tmp\\/haproxy.cfg/g' /usr/lib/systemd/system/haproxy.service
 513 sudo /usr/sbin/semanage permissive -a haproxy_t
 514 sudo systemctl restart haproxy
 515 sleep 3
 516 sudo netstat -tunpl
 517 sudo systemctl status haproxy
 518 true
 519 EOF
 520
 521     scp ${WORKSPACE}/install_ha_proxy.sh ${MGRIP}:/tmp
 522     ${SSH} ${MGRIP} "sudo bash /tmp/install_ha_proxy.sh"
 523     scp ${WORKSPACE}/haproxy.cfg ${MGRIP}:/tmp
 524     scp ${WORKSPACE}/deploy_ha_proxy.sh ${MGRIP}:/tmp
 525     ${SSH} ${MGRIP} "sudo bash /tmp/deploy_ha_proxy.sh"
 526 } # configure_haproxy_for_neutron_requests()
 527
 528 # Following three functions are debugging helpers when debugging devstack changes.
 529 # Keeping them for now so we can simply call them when needed.
 530 ctrlhn=""
 531 comp1hn=""
 532 comp2hn=""
 533 function get_hostnames () {
 534     set +e
 535     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
 536     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
 537     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
 538     ctrlhn=$(${SSH} ${ctrlip} "hostname")
 539     comp1hn=$(${SSH} ${comp1ip} "hostname")
 540     comp2hn=$(${SSH} ${comp2ip} "hostname")
 541     echo "hostnames: ${ctrlhn}, ${comp1hn}, ${comp2hn}"
 542     set -e
 543 }
 544
 545 function check_firewall() {
 546     set +e
 547     echo $-
 548     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
 549     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
 550     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
 551
 552     echo "check_firewall on control"
 553     ${SSH} ${ctrlip} "
 554         sudo systemctl status firewalld
 555         sudo systemctl -l status iptables
 556         sudo iptables --line-numbers -nvL
 557     " || true
 558     echo "check_firewall on compute 1"
 559     ${SSH} ${comp1ip} "
 560         sudo systemctl status firewalld
 561         sudo systemctl -l status iptables
 562         sudo iptables --line-numbers -nvL
 563     " || true
 564     echo "check_firewall on compute 2"
 565     ${SSH} ${comp2ip} "
 566         sudo systemctl status firewalld
 567         sudo systemctl -l status iptables
 568         sudo iptables --line-numbers -nvL
 569     " || true
 570 }
 571
 572 function get_service () {
 573     set +e
 574     local iter=$1
 575     #local idx=$2
 576     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
 577     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
 578
 579     #if [ ${idx} -eq 1 ]; then
 580         if [ ${iter} -eq 1 ] || [ ${iter} -gt 16 ]; then
 581             curl http://${ctrlip}:5000
 582             curl http://${ctrlip}:35357
 583             curl http://${ctrlip}/identity
 584             ${SSH} ${ctrlip} "
 585                 source /opt/stack/devstack/openrc admin admin;
 586                 env
 587                 openstack configuration show --unmask;
 588                 openstack service list
 589                 openstack --os-cloud devstack-admin --os-region RegionOne compute service list
 590                 openstack hypervisor list;
 591             " || true
 592             check_firewall
 593         fi
 594     #fi
 595     set -e
 596 }
 597
 598 # Check if rabbitmq is ready by looking for a pid in it's status.
 599 # The function returns the status of the grep command which callers can check.
 600 function is_rabbitmq_ready() {
 601     local -r ip=${1}
 602     local grepfor="nova_cell1"
 603     rm -f rabbit.txt
 604     ${SSH} ${ip} "sudo rabbitmqctl list_vhosts" > rabbit.txt
 605     grep ${grepfor} rabbit.txt
 606 }
 607
 608 # retry the given command ($3) until success for a number of iterations ($1)
 609 # sleeping ($2) between tries.
 610 function retry() {
 611     local -r -i max_tries=${1}
 612     local -r -i sleep_time=${2}
 613     local -r cmd=${3}
 614     local -i retries=1
 615     local -i rc=1
 616     while true; do
 617         echo "retry ${cmd}: attempt: ${retries}"
 618         ${cmd}
 619         rc=$?
 620         if ((${rc} == 0)); then
 621             break;
 622         else
 623             if ((${retries} == ${max_tries})); then
 624                 break
 625             else
 626                 ((retries++))
 627                 sleep ${sleep_time}
 628             fi
 629         fi
 630     done
 631     return ${rc}
 632 }
 633
 634 ODL_PROVIDER_MAPPINGS="\${PUBLIC_PHYSICAL_NETWORK}:${PUBLIC_BRIDGE}"
 635 ODL_L3=False
 636 RECLONE=False
 637 ODL_PORT=8181
 638
 639 # Always compare the lists below against the devstack upstream ENABLED_SERVICES in
 640 # https://github.com/openstack-dev/devstack/blob/master/stackrc#L52
 641 # ODL CSIT does not use vnc, cinder, q-agt, q-l3 or horizon so they are not included below.
 642 # collect performance stats
 643 CORE_OS_CONTROL_SERVICES="dstat"
 644 # Glance
 645 CORE_OS_CONTROL_SERVICES+=",g-api,g-reg"
 646 # Keystone
 647 CORE_OS_CONTROL_SERVICES+=",key"
 648 # Nova - services to support libvirt
 649 CORE_OS_CONTROL_SERVICES+=",n-api,n-api-meta,n-cauth,n-cond,n-crt,n-obj,n-sch"
 650 # ODL - services to connect to ODL
 651 CORE_OS_CONTROL_SERVICES+=",odl-compute,odl-neutron"
 652 # Additional services
 653 CORE_OS_CONTROL_SERVICES+=",mysql,rabbit"
 654
 655 # collect performance stats
 656 CORE_OS_COMPUTE_SERVICES="dstat"
 657 # computes only need nova and odl
 658 CORE_OS_COMPUTE_SERVICES+=",n-cpu,odl-compute"
 659
 660 cat > ${WORKSPACE}/disable_firewall.sh << EOF
 661 sudo systemctl stop firewalld
 662 # Open these ports to match the tutorial vms
 663 # http/https (80/443), samba (445), netbios (137,138,139)
 664 sudo iptables -I INPUT -p tcp -m multiport --dports 80,443,139,445 -j ACCEPT
 665 sudo iptables -I INPUT -p udp -m multiport --dports 137,138 -j ACCEPT
 666 # OpenStack services as well as vxlan tunnel ports 4789 and 9876
 667 # identity public/admin (5000/35357), ampq (5672), vnc (6080), nova (8774), glance (9292), neutron (9696)
 668 sudo sudo iptables -I INPUT -p tcp -m multiport --dports 5000,5672,6080,8774,9292,9696,35357 -j ACCEPT
 669 sudo sudo iptables -I INPUT -p udp -m multiport --dports 4789,9876 -j ACCEPT
 670 sudo iptables-save > /etc/sysconfig/iptables
 671 sudo systemctl restart iptables
 672 sudo iptables --line-numbers -nvL
 673 true
 674 EOF
 675
 676 cat > ${WORKSPACE}/get_devstack.sh << EOF
 677 sudo systemctl stop firewalld
 678 sudo yum install bridge-utils python-pip -y
 679 #sudo systemctl stop  NetworkManager
 680 #Disable NetworkManager and kill dhclient and dnsmasq
 681 sudo systemctl stop NetworkManager
 682 sudo killall dhclient
 683 sudo killall dnsmasq
 684 #Workaround for mysql failure
 685 echo "127.0.0.1   localhost \${HOSTNAME}" >> /tmp/hosts
 686 echo "::1         localhost \${HOSTNAME}" >> /tmp/hosts
 687 sudo mv /tmp/hosts /etc/hosts
 688 sudo mkdir /opt/stack
 689 echo "Create RAM disk for /opt/stack"
 690 sudo mount -t tmpfs -o size=2G tmpfs /opt/stack
 691 sudo chmod 777 /opt/stack
 692 cd /opt/stack
 693 echo "git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}"
 694 git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}
 695 cd devstack
 696 if [ -n "${DEVSTACK_HASH}" ]; then
 697     echo "git checkout ${DEVSTACK_HASH}"
 698     git checkout ${DEVSTACK_HASH}
 699 fi
 700 git --no-pager log --pretty=format:'%h %<(13)%ar%<(13)%cr %<(20,trunc)%an%d %s%b' -n20
 701 echo
 702
 703 echo "workaround: do not upgrade openvswitch"
 704 sudo yum install -y yum-plugin-versionlock
 705 sudo yum versionlock add openvswitch
 706
 707 #Install qemu-img command in Control Node for Pike
 708 echo "Install qemu-img application"
 709 sudo yum install -y qemu-img
 710 EOF
 711
 712 cat > "${WORKSPACE}/setup_host_cell_mapping.sh" << EOF
 713 sudo nova-manage cell_v2 map_cell0
 714 sudo nova-manage cell_v2 simple_cell_setup
 715 sudo nova-manage db sync
 716 sudo nova-manage cell_v2 discover_hosts
 717 EOF
 718
 719 NUM_OPENSTACK_SITES=${NUM_OPENSTACK_SITES:-1}
 720 compute_index=1
 721 odl_index=1
 722 os_node_list=()
 723 os_interval=$(( ${NUM_OPENSTACK_SYSTEM} / ${NUM_OPENSTACK_SITES} ))
 724 ha_proxy_index=${os_interval}
 725
 726 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
 727     if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
 728         echo "Configure HAProxy"
 729         ODL_HAPROXYIP_PARAM=OPENSTACK_HAPROXY_${i}_IP
 730         ha_proxy_index=$(( $ha_proxy_index + $os_interval ))
 731         odl_index=$(((i - 1) * 3 + 1))
 732         ODL_IP_PARAM1=ODL_SYSTEM_$((odl_index++))_IP
 733         ODL_IP_PARAM2=ODL_SYSTEM_$((odl_index++))_IP
 734         ODL_IP_PARAM3=ODL_SYSTEM_$((odl_index++))_IP
 735         ODLMGRIP[$i]=${!ODL_HAPROXYIP_PARAM} # ODL Northbound uses HAProxy VIP
 736         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM1},${!ODL_IP_PARAM2},${!ODL_IP_PARAM3}" # OVSDB connects to all ODL IPs
 737         configure_haproxy_for_neutron_requests ${!ODL_HAPROXYIP_PARAM} "${ODL_OVS_MGRS[$i]}"
 738     else
 739         ODL_IP_PARAM=ODL_SYSTEM_${i}_IP
 740         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM}" # ODL Northbound uses ODL IP
 741         ODLMGRIP[$i]=${!ODL_IP_PARAM} # OVSDB connects to ODL IP
 742     fi
 743 done
 744
 745 # Begin stacking the nodes, starting with the controller(s) and then the compute(s)
 746
 747 for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
 748     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
 749     echo "Configure the stack of the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${!CONTROLIP}"
 750     scp ${WORKSPACE}/disable_firewall.sh ${!CONTROLIP}:/tmp
 751     ${SSH} ${!CONTROLIP} "sudo bash /tmp/disable_firewall.sh"
 752     create_etc_hosts ${!CONTROLIP}
 753     scp ${WORKSPACE}/hosts_file ${!CONTROLIP}:/tmp/hosts
 754     scp ${WORKSPACE}/get_devstack.sh ${!CONTROLIP}:/tmp
 755     # devstack Master is yet to migrate fully to lib/neutron, there are some ugly hacks that is
 756     # affecting the stacking.
 757     # Workaround For Queens, Make the physical Network as physnet1 in lib/neutron
 758     # In Queens the neutron new libs are used and do not have the following options from Pike and earlier:
 759     # Q_ML2_PLUGIN_FLAT_TYPE_OPTIONS could be used for the flat_networks
 760     # and Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS could be used for the ml2_type_vlan
 761     ${SSH} ${!CONTROLIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
 762     if [ "${ODL_ML2_BRANCH}" == "stable/queens" ]; then
 763        ssh ${!CONTROLIP} "sed -i 's/flat_networks public/flat_networks public,physnet1/' /opt/stack/devstack/lib/neutron"
 764        ssh ${!CONTROLIP} "sed -i '186i iniset \$NEUTRON_CORE_PLUGIN_CONF ml2_type_vlan network_vlan_ranges public:1:4094,physnet1:1:4094' /opt/stack/devstack/lib/neutron"
 765     fi
 766     create_control_node_local_conf ${!CONTROLIP} ${ODLMGRIP[$i]} "${ODL_OVS_MGRS[$i]}"
 767     scp ${WORKSPACE}/local.conf_control_${!CONTROLIP} ${!CONTROLIP}:/opt/stack/devstack/local.conf
 768     echo "Install rdo release to avoid incompatible Package versions"
 769     install_rdo_release ${!CONTROLIP}
 770     setup_live_migration_control ${!CONTROLIP}
 771     echo "Stack the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${CONTROLIP}"
 772     ssh ${!CONTROLIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
 773     ssh ${!CONTROLIP} "ps -ef | grep stack.sh"
 774     ssh ${!CONTROLIP} "ls -lrt /opt/stack/devstack/nohup.out"
 775     os_node_list+=("${!CONTROLIP}")
 776 done
 777
 778 # This is a backup to the CELLSV2_SETUP=singleconductor workaround. Keeping it here as an easy lookup
 779 # if needed.
 780 # Let the control node get started to avoid a race condition where the computes start and try to access
 781 # the nova_cell1 on the control node before it is created. If that happens, the nova-compute service on the
 782 # compute exits and does not attempt to restart.
 783 # 180s is chosen because in test runs the control node usually finished in 17-20 minutes and the computes finished
 784 # in 17 minutes, so take the max difference of 3 minutes and the jobs should still finish around the same time.
 785 # one of the following errors is seen in the compute n-cpu.log:
 786 # Unhandled error: NotAllowed: Connection.open: (530) NOT_ALLOWED - access to vhost 'nova_cell1' refused for user 'stackrabbit'
 787 # AccessRefused: (0, 0): (403) ACCESS_REFUSED - Login was refused using authentication mechanism AMQPLAIN. For details see the broker logfile.
 788 # Compare that timestamp to this log in the control stack.log: sudo rabbitmqctl set_permissions -p nova_cell1 stackrabbit
 789 # If the n-cpu.log is earlier than the control stack.log timestamp then the failure condition is likely hit.
 790 if [ ${NUM_OPENSTACK_COMPUTE_NODES} -gt 0 ]; then
 791     WAIT_FOR_RABBITMQ_MINUTES=60
 792     echo "Wait a maximum of ${WAIT_FOR_RABBITMQ_MINUTES}m until rabbitmq is ready and nova_cell1 created to allow the controller to create nova_cell1 before the computes need it"
 793     set +e
 794     retry ${WAIT_FOR_RABBITMQ_MINUTES} 60 "is_rabbitmq_ready ${OPENSTACK_CONTROL_NODE_1_IP}"
 795     rc=$?
 796     set -e
 797     if ((${rc} == 0)); then
 798       echo "rabbitmq is ready, starting ${NUM_OPENSTACK_COMPUTE_NODES} compute(s)"
 799     else
 800       echo "rabbitmq was not ready in ${WAIT_FOR_RABBITMQ_MINUTES}m"
 801       exit 1
 802     fi
 803 fi
 804
 805 for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
 806     NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
 807     SITE_INDEX=$((((i - 1) / NUM_COMPUTES_PER_SITE) + 1)) # We need the site index to infer the control node IP for this compute
 808     COMPUTEIP=OPENSTACK_COMPUTE_NODE_${i}_IP
 809     CONTROLIP=OPENSTACK_CONTROL_NODE_${SITE_INDEX}_IP
 810     echo "Configure the stack of the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${!COMPUTEIP}"
 811     scp ${WORKSPACE}/disable_firewall.sh "${!COMPUTEIP}:/tmp"
 812     ${SSH} "${!COMPUTEIP}" "sudo bash /tmp/disable_firewall.sh"
 813     create_etc_hosts ${!COMPUTEIP} ${!CONTROLIP}
 814     scp ${WORKSPACE}/hosts_file ${!COMPUTEIP}:/tmp/hosts
 815     scp ${WORKSPACE}/get_devstack.sh  ${!COMPUTEIP}:/tmp
 816     ${SSH} ${!COMPUTEIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
 817     create_compute_node_local_conf ${!COMPUTEIP} ${!CONTROLIP} ${ODLMGRIP[$SITE_INDEX]} "${ODL_OVS_MGRS[$SITE_INDEX]}"
 818     scp ${WORKSPACE}/local.conf_compute_${!COMPUTEIP} ${!COMPUTEIP}:/opt/stack/devstack/local.conf
 819     echo "Install rdo release to avoid incompatible Package versions"
 820     install_rdo_release ${!COMPUTEIP}
 821     setup_live_migration_compute ${!COMPUTEIP} ${!CONTROLIP}
 822     echo "Stack the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${COMPUTEIP}"
 823     ssh ${!COMPUTEIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
 824     ssh ${!COMPUTEIP} "ps -ef | grep stack.sh"
 825     os_node_list+=("${!COMPUTEIP}")
 826 done
 827
 828 echo "nodelist: ${os_node_list[*]}"
 829
 830 # This script runs on the openstack nodes. It greps for a string that devstack writes when stacking is complete.
 831 # The script then writes a status depending on the grep output that is later scraped by the robot vm to control
 832 # the status polling.
 833 cat > ${WORKSPACE}/check_stacking.sh << EOF
 834 > /tmp/stack_progress
 835 ps -ef | grep "stack.sh" | grep -v grep
 836 ret=\$?
 837 if [ \${ret} -eq 1 ]; then
 838     grep "This is your host IP address:" /opt/stack/devstack/nohup.out
 839     if [ \$? -eq 0 ]; then
 840         echo "Stacking Complete" > /tmp/stack_progress
 841     else
 842         echo "Stacking Failed" > /tmp/stack_progress
 843     fi
 844 elif [ \${ret} -eq 0 ]; then
 845     echo "Still Stacking" > /tmp/stack_progress
 846 fi
 847 EOF
 848
 849 # devstack debugging
 850 # get_hostnames
 851
 852 # Check if the stacking is finished. Poll all nodes every 60s for one hour.
 853 iteration=0
 854 in_progress=1
 855 while [ ${in_progress} -eq 1 ]; do
 856     iteration=$(($iteration + 1))
 857     for index in "${!os_node_list[@]}"; do
 858         echo "node $index ${os_node_list[index]}: checking stacking status attempt ${iteration} of 60"
 859         scp ${WORKSPACE}/check_stacking.sh  ${os_node_list[index]}:/tmp
 860         ${SSH} ${os_node_list[index]} "bash /tmp/check_stacking.sh"
 861         scp ${os_node_list[index]}:/tmp/stack_progress .
 862         cat stack_progress
 863         stacking_status=`cat stack_progress`
 864         # devstack debugging
 865         # get_service "${iteration}" "${index}"
 866         if [ "$stacking_status" == "Still Stacking" ]; then
 867             continue
 868         elif [ "$stacking_status" == "Stacking Failed" ]; then
 869             echo "node $index ${os_node_list[index]}: stacking has failed"
 870             exit 1
 871         elif [ "$stacking_status" == "Stacking Complete" ]; then
 872             echo "node $index ${os_node_list[index]}: stacking complete"
 873             unset 'os_node_list[index]'
 874             if  [ ${#os_node_list[@]} -eq 0 ]; then
 875                 in_progress=0
 876             fi
 877         fi
 878     done
 879     echo "sleep for a minute before the next check"
 880     sleep 60
 881     if [ ${iteration} -eq 60 ]; then
 882         echo "stacking has failed - took longer than 60m"
 883         exit 1
 884     fi
 885 done
 886
 887 # Further configuration now that stacking is complete.
 888 NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
 889 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
 890     echo "Configure the Control Node"
 891     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
 892     # Gather Compute IPs for the site
 893     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
 894         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
 895         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
 896         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
 897     done
 898
 899     echo "sleep for 60s and print hypervisor-list"
 900     sleep 60
 901     ${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; nova hypervisor-list"
 902     # in the case that we are doing openstack (control + compute) all in one node, then the number of hypervisors
 903     # will be the same as the number of openstack systems. However, if we are doing multinode openstack then the
 904     # assumption is we have a single control node and the rest are compute nodes, so the number of expected hypervisors
 905     # is one less than the total number of openstack systems
 906     if [ $((NUM_OPENSTACK_SYSTEM / NUM_OPENSTACK_SITES)) -eq 1 ]; then
 907         expected_num_hypervisors=1
 908     else
 909         expected_num_hypervisors=${NUM_COMPUTES_PER_SITE}
 910     fi
 911     num_hypervisors=$(${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; openstack hypervisor list -f value | wc -l" | tail -1 | tr -d "\r")
 912     if ! [ "${num_hypervisors}" ] || ! [ ${num_hypervisors} -eq ${expected_num_hypervisors} ]; then
 913         echo "Error: Only $num_hypervisors hypervisors detected, expected $expected_num_hypervisors"
 914         exit 1
 915     fi
 916
 917     # Gather Compute IPs for the site
 918     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
 919         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
 920         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
 921         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
 922     done
 923
 924     # External Network
 925     echo "prepare external networks by adding vxlan tunnels between all nodes on a separate bridge..."
 926     # FIXME Should there be a unique gateway IP and devstack index for each site?
 927     devstack_index=1
 928     for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
 929         # FIXME - Workaround, ODL (new netvirt) currently adds PUBLIC_BRIDGE as a port in br-int since it doesn't see such a bridge existing when we stack
 930         ${SSH} $ip "sudo ovs-vsctl --if-exists del-port br-int $PUBLIC_BRIDGE"
 931         ${SSH} $ip "sudo ovs-vsctl --may-exist add-br $PUBLIC_BRIDGE -- set bridge $PUBLIC_BRIDGE other-config:disable-in-band=true other_config:hwaddr=f6:00:00:ff:01:0$((devstack_index++))"
 932     done
 933
 934     # ipsec support
 935     if [ "${IPSEC_VXLAN_TUNNELS_ENABLED}" == "yes" ]; then
 936         # shellcheck disable=SC2206
 937         ALL_NODES=(${!CONTROLIP} ${COMPUTE_IPS[*]})
 938         for ((inx_ip1=0; inx_ip1<$((${#ALL_NODES[@]} - 1)); inx_ip1++)); do
 939             for ((inx_ip2=$((inx_ip1 + 1)); inx_ip2<${#ALL_NODES[@]}; inx_ip2++)); do
 940                 KEY1=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
 941                 KEY2=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
 942                 ID=0x$(dd if=/dev/urandom count=4 bs=1 2> /dev/null| xxd -p -c 8)
 943                 ip1=${ALL_NODES[$inx_ip1]}
 944                 ip2=${ALL_NODES[$inx_ip2]}
 945                 ${SSH} $ip1 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
 946                 ${SSH} $ip1 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
 947                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir out tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
 948                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir in tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
 949
 950                 ${SSH} $ip2 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
 951                 ${SSH} $ip2 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
 952                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir out tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
 953                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir in tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
 954             done
 955         done
 956
 957         for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
 958             echo "ip xfrm configuration for node $ip:"
 959             ${SSH} $ip "sudo ip xfrm policy list"
 960             ${SSH} $ip "sudo ip xfrm state list"
 961         done
 962     fi
 963
 964     # Control Node - PUBLIC_BRIDGE will act as the external router
 965     # Parameter values below are used in integration/test - changing them requires updates in intergration/test as well
 966     EXTNET_GATEWAY_IP="10.10.10.250"
 967     EXTNET_INTERNET_IP="10.9.9.9"
 968     EXTNET_PNF_IP="10.10.10.253"
 969     ${SSH} ${!CONTROLIP} "sudo ifconfig ${PUBLIC_BRIDGE} up ${EXTNET_GATEWAY_IP}/24"
 970
 971     # Control Node - external net PNF simulation
 972     ${SSH} ${!CONTROLIP} "
 973         sudo ip netns add pnf_ns;
 974         sudo ip link add pnf_veth0 type veth peer name pnf_veth1;
 975         sudo ip link set pnf_veth1 netns pnf_ns;
 976         sudo ip link set pnf_veth0 up;
 977         sudo ip netns exec pnf_ns ifconfig pnf_veth1 up ${EXTNET_PNF_IP}/24;
 978         sudo ovs-vsctl add-port ${PUBLIC_BRIDGE} pnf_veth0;
 979     "
 980
 981     # Control Node - external net internet address simulation
 982     ${SSH} ${!CONTROLIP} "
 983         sudo ip tuntap add dev internet_tap mode tap;
 984         sudo ifconfig internet_tap up ${EXTNET_INTERNET_IP}/24;
 985     "
 986
 987     # Computes
 988     compute_index=1
 989     for compute_ip in ${COMPUTE_IPS[*]}; do
 990         # Tunnel from controller to compute
 991         COMPUTEPORT=compute$(( compute_index++ ))_vxlan
 992         ${SSH} ${!CONTROLIP} "
 993             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $COMPUTEPORT -- set interface $COMPUTEPORT type=vxlan options:local_ip=${!CONTROLIP} options:remote_ip=$compute_ip options:dst_port=9876 options:key=flow
 994         "
 995         # Tunnel from compute to controller
 996         CONTROLPORT="control_vxlan"
 997         ${SSH} $compute_ip "
 998             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $CONTROLPORT -- set interface $CONTROLPORT type=vxlan options:local_ip=$compute_ip options:remote_ip=${!CONTROLIP} options:dst_port=9876 options:key=flow
 999         "
1000     done
1001 done
1002
1003 if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
1004     odlmgrip=OPENSTACK_HAPROXY_1_IP
1005     HA_PROXY_IP=${!odlmgrip}
1006     HA_PROXY_1_IP=${!odlmgrip}
1007     odlmgrip2=OPENSTACK_HAPROXY_2_IP
1008     HA_PROXY_2_IP=${!odlmgrip2}
1009     odlmgrip3=OPENSTACK_HAPROXY_1_IP
1010     HA_PROXY_3_IP=${!odlmgrip3}
1011 else
1012     HA_PROXY_IP=${ODL_SYSTEM_IP}
1013     HA_PROXY_1_IP=${ODL_SYSTEM_1_IP}
1014     HA_PROXY_2_IP=${ODL_SYSTEM_2_IP}
1015     HA_PROXY_3_IP=${ODL_SYSTEM_3_IP}
1016 fi
1017
1018 echo "Locating test plan to use..."
1019 testplan_filepath="${WORKSPACE}/test/csit/testplans/${STREAMTESTPLAN}"
1020 if [ ! -f "${testplan_filepath}" ]; then
1021     testplan_filepath="${WORKSPACE}/test/csit/testplans/${TESTPLAN}"
1022 fi
1023
1024 echo "Changing the testplan path..."
1025 cat "${testplan_filepath}" | sed "s:integration:${WORKSPACE}:" > testplan.txt
1026 cat testplan.txt
1027
1028 # Use the testplan if specific SUITES are not defined.
1029 if [ -z "${SUITES}" ]; then
1030     SUITES=`egrep -v '(^[[:space:]]*#|^[[:space:]]*$)' testplan.txt | tr '\012' ' '`
1031 else
1032     newsuites=""
1033     workpath="${WORKSPACE}/test/csit/suites"
1034     for suite in ${SUITES}; do
1035         fullsuite="${workpath}/${suite}"
1036         if [ -z "${newsuites}" ]; then
1037             newsuites+=${fullsuite}
1038         else
1039             newsuites+=" "${fullsuite}
1040         fi
1041     done
1042     SUITES=${newsuites}
1043 fi
1044
1045 #install all client versions required for this job testing
1046 install_openstack_clients_in_robot_vm
1047
1048 # TODO: run openrc on control node and then scrape the vars from it
1049 # Environment Variables Needed to execute Openstack Client for NetVirt Jobs
1050 cat > /tmp/os_netvirt_client_rc << EOF
1051 export OS_USERNAME=admin
1052 export OS_PASSWORD=admin
1053 export OS_PROJECT_NAME=admin
1054 export OS_USER_DOMAIN_NAME=default
1055 export OS_PROJECT_DOMAIN_NAME=default
1056 export OS_AUTH_URL="http://${!CONTROLIP}/identity"
1057 export OS_IDENTITY_API_VERSION=3
1058 export OS_IMAGE_API_VERSION=2
1059 export OS_TENANT_NAME=admin
1060 unset OS_CLOUD
1061 EOF
1062
1063 source /tmp/os_netvirt_client_rc
1064
1065 echo "Get all versions before executing pybot"
1066 echo "openstack --version"
1067 which openstack
1068 openstack --version
1069 echo "nova --version"
1070 which nova
1071 nova --version
1072 echo "neutron --version"
1073 which neutron
1074 neutron --version
1075
1076 echo "Starting Robot test suites ${SUITES} ..."
1077 # please add pybot -v arguments on a single line and alphabetized
1078 suite_num=0
1079 for suite in ${SUITES}; do
1080     # prepend an incremental counter to the suite name so that the full robot log combining all the suites as is done
1081     # in the rebot step below will list all the suites in chronological order as rebot seems to alphabetize them
1082     let "suite_num = suite_num + 1"
1083     suite_index="$(printf %02d ${suite_num})"
1084     suite_name="$(basename ${suite} | cut -d. -f1)"
1085     log_name="${suite_index}_${suite_name}"
1086     pybot -N ${log_name} \
1087     -c critical -e exclude -e skip_if_${DISTROSTREAM} \
1088     --log log_${log_name}.html --report None --output output_${log_name}.xml \
1089     --removekeywords wuks \
1090     --removekeywords name:SetupUtils.Setup_Utils_For_Setup_And_Teardown \
1091     --removekeywords name:SetupUtils.Setup_Test_With_Logging_And_Without_Fast_Failing \
1092     --removekeywords name:OpenStackOperations.Add_OVS_Logging_On_All_OpenStack_Nodes \
1093     -v BUNDLEFOLDER:${BUNDLEFOLDER} \
1094     -v BUNDLE_URL:${ACTUAL_BUNDLE_URL} \
1095     -v CONTROLLERFEATURES:"${CONTROLLERFEATURES}" \
1096     -v CONTROLLER_USER:${USER} \
1097     -v DEVSTACK_DEPLOY_PATH:/opt/stack/devstack \
1098     -v ENABLE_ITM_DIRECT_TUNNELS:${ENABLE_ITM_DIRECT_TUNNELS} \
1099     -v HA_PROXY_IP:${HA_PROXY_IP} \
1100     -v HA_PROXY_1_IP:${HA_PROXY_1_IP} \
1101     -v HA_PROXY_2_IP:${HA_PROXY_2_IP} \
1102     -v HA_PROXY_3_IP:${HA_PROXY_3_IP} \
1103     -v JDKVERSION:${JDKVERSION} \
1104     -v JENKINS_WORKSPACE:${WORKSPACE} \
1105     -v NEXUSURL_PREFIX:${NEXUSURL_PREFIX} \
1106     -v NUM_ODL_SYSTEM:${NUM_ODL_SYSTEM} \
1107     -v NUM_OPENSTACK_SITES:${NUM_OPENSTACK_SITES} \
1108     -v NUM_OS_SYSTEM:${NUM_OPENSTACK_SYSTEM} \
1109     -v NUM_TOOLS_SYSTEM:${NUM_TOOLS_SYSTEM} \
1110     -v ODL_SNAT_MODE:${ODL_SNAT_MODE} \
1111     -v ODL_ENABLE_L3_FWD:${ODL_ENABLE_L3_FWD} \
1112     -v ODL_STREAM:${DISTROSTREAM} \
1113     -v ODL_SYSTEM_IP:${ODL_SYSTEM_IP} \
1114     -v ODL_SYSTEM_1_IP:${ODL_SYSTEM_1_IP} \
1115     -v ODL_SYSTEM_2_IP:${ODL_SYSTEM_2_IP} \
1116     -v ODL_SYSTEM_3_IP:${ODL_SYSTEM_3_IP} \
1117     -v ODL_SYSTEM_4_IP:${ODL_SYSTEM_4_IP} \
1118     -v ODL_SYSTEM_5_IP:${ODL_SYSTEM_5_IP} \
1119     -v ODL_SYSTEM_6_IP:${ODL_SYSTEM_6_IP} \
1120     -v ODL_SYSTEM_7_IP:${ODL_SYSTEM_7_IP} \
1121     -v ODL_SYSTEM_8_IP:${ODL_SYSTEM_8_IP} \
1122     -v ODL_SYSTEM_9_IP:${ODL_SYSTEM_9_IP} \
1123     -v OS_CONTROL_NODE_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1124     -v OS_CONTROL_NODE_1_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1125     -v OS_CONTROL_NODE_2_IP:${OPENSTACK_CONTROL_NODE_2_IP} \
1126     -v OS_CONTROL_NODE_3_IP:${OPENSTACK_CONTROL_NODE_3_IP} \
1127     -v OPENSTACK_BRANCH:${OPENSTACK_BRANCH} \
1128     -v OS_COMPUTE_1_IP:${OPENSTACK_COMPUTE_NODE_1_IP} \
1129     -v OS_COMPUTE_2_IP:${OPENSTACK_COMPUTE_NODE_2_IP} \
1130     -v OS_COMPUTE_3_IP:${OPENSTACK_COMPUTE_NODE_3_IP} \
1131     -v OS_COMPUTE_4_IP:${OPENSTACK_COMPUTE_NODE_4_IP} \
1132     -v OS_COMPUTE_5_IP:${OPENSTACK_COMPUTE_NODE_5_IP} \
1133     -v OS_COMPUTE_6_IP:${OPENSTACK_COMPUTE_NODE_6_IP} \
1134     -v CMP_INSTANCES_SHARED_PATH:/var/instances \
1135     -v OS_USER:${USER} \
1136     -v PUBLIC_PHYSICAL_NETWORK:${PUBLIC_PHYSICAL_NETWORK} \
1137     -v SECURITY_GROUP_MODE:${SECURITY_GROUP_MODE} \
1138     -v TOOLS_SYSTEM_IP:${TOOLS_SYSTEM_1_IP} \
1139     -v TOOLS_SYSTEM_1_IP:${TOOLS_SYSTEM_1_IP} \
1140     -v TOOLS_SYSTEM_2_IP:${TOOLS_SYSTEM_2_IP} \
1141     -v USER_HOME:${HOME} \
1142     -v WORKSPACE:/tmp \
1143     ${TESTOPTIONS} ${suite} || true
1144 done
1145 #rebot exit codes seem to be different
1146 rebot --output ${WORKSPACE}/output.xml --log log_full.html --report None -N openstack output_*.xml || true
1147
1148 echo "Examining the files in data/log and checking file size"
1149 ssh ${ODL_SYSTEM_IP} "ls -altr /tmp/${BUNDLEFOLDER}/data/log/"
1150 ssh ${ODL_SYSTEM_IP} "du -hs /tmp/${BUNDLEFOLDER}/data/log/*"
1151
1152 echo "Tests Executed"
1153
1154 true  # perhaps Jenkins is testing last exit code
1155 # vim: ts=4 sw=4 sts=4 et ft=sh :