Merge "Update build timeout for docker image to 60m"
[releng/builder.git] / jjb / integration / integration-deploy-openstack-run-test.sh
1 #@IgnoreInspection BashAddShebang
2 # Activate robotframework virtualenv
3 # ${ROBOT_VENV} comes from the integration-install-robotframework.sh
4 # script.
5 # shellcheck source=${ROBOT_VENV}/bin/activate disable=SC1091
6 source ${ROBOT_VENV}/bin/activate
7 PYTHON="${ROBOT_VENV}/bin/python"
8 SSH="ssh -t -t"
9 ADMIN_PASSWORD=admin
10
11 # TODO: remove this work to run changes.py if/when it's moved higher up to be visible at the Robot level
12 echo "showing recent changes that made it in to the distribution used by this job"
13 $PYTHON -m pip install --upgrade urllib3
14 python ${WORKSPACE}/test/tools/distchanges/changes.py -d /tmp/distribution_folder \
15                   -u ${ACTUAL_BUNDLE_URL} -b ${DISTROBRANCH} \
16                   -r ssh://jenkins-${SILO}@git.opendaylight.org:29418 || true
17 cat << EOF
18 #################################################
19 ##         Deploy Openstack 3-node             ##
20 #################################################
21 EOF
22
23 # Catch command errors and collect logs.
24 # This ensures logs are collected when script commands fail rather than simply exiting.
25 function trap_handler() {
26     local prog="$0"
27     local lastline="$1"
28     local lasterr="$2"
29     echo "${prog}: line ${lastline}: exit status of last command: ${lasterr}"
30     echo "command: ${BASH_COMMAND}"
31     collect_logs
32     exit 1
33 } # trap_handler()
34
35 trap 'trap_handler ${LINENO} ${$?}' ERR
36
37 function print_job_parameters() {
38     cat << EOF
39
40 Job parameters:
41 DISTROBRANCH: ${DISTROBRANCH}
42 DISTROSTREAM: ${DISTROSTREAM}
43 BUNDLE_URL: ${BUNDLE_URL}
44 CONTROLLERFEATURES: ${CONTROLLERFEATURES}
45 CONTROLLERDEBUGMAP: ${CONTROLLERDEBUGMAP}
46 TESTPLAN: ${TESTPLAN}
47 SUITES: ${SUITES}
48 PATCHREFSPEC: ${PATCHREFSPEC}
49 OPENSTACK_BRANCH: ${OPENSTACK_BRANCH}
50 DEVSTACK_HASH: ${DEVSTACK_HASH}
51 ODL_ML2_DRIVER_REPO: ${ODL_ML2_DRIVER_REPO}
52 ODL_ML2_BRANCH: ${ODL_ML2_BRANCH}
53 ODL_ML2_DRIVER_VERSION: ${ODL_ML2_DRIVER_VERSION}
54 ODL_ML2_PORT_BINDING: ${ODL_ML2_PORT_BINDING}
55 DEVSTACK_KUBERNETES_PLUGIN_REPO: ${DEVSTACK_KUBERNETES_PLUGIN_REPO}
56 DEVSTACK_LBAAS_PLUGIN_REPO: ${DEVSTACK_LBAAS_PLUGIN_REPO}
57 DEVSTACK_NETWORKING_SFC_PLUGIN_REPO: ${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO}
58 ODL_ENABLE_L3_FWD: ${ODL_ENABLE_L3_FWD}
59 IPSEC_VXLAN_TUNNELS_ENABLED: ${IPSEC_VXLAN_TUNNELS_ENABLED}
60 PUBLIC_BRIDGE: ${PUBLIC_BRIDGE}
61 ENABLE_HAPROXY_FOR_NEUTRON: ${ENABLE_HAPROXY_FOR_NEUTRON}
62 ENABLE_OS_SERVICES: ${ENABLE_OS_SERVICES}
63 ENABLE_OS_COMPUTE_SERVICES: ${ENABLE_OS_COMPUTE_SERVICES}
64 ENABLE_OS_PLUGINS: ${ENABLE_OS_PLUGINS}
65 DISABLE_OS_SERVICES: ${DISABLE_OS_SERVICES}
66 TENANT_NETWORK_TYPE: ${TENANT_NETWORK_TYPE}
67 SECURITY_GROUP_MODE: ${SECURITY_GROUP_MODE}
68 PUBLIC_PHYSICAL_NETWORK: ${PUBLIC_PHYSICAL_NETWORK}
69 ENABLE_NETWORKING_L2GW: ${ENABLE_NETWORKING_L2GW}
70 CREATE_INITIAL_NETWORKS: ${CREATE_INITIAL_NETWORKS}
71 LBAAS_SERVICE_PROVIDER: ${LBAAS_SERVICE_PROVIDER}
72 NUM_OPENSTACK_SITES: ${NUM_OPENSTACK_SITES}
73 ODL_SFC_DRIVER: ${ODL_SFC_DRIVER}
74 ODL_SNAT_MODE: ${ODL_SNAT_MODE}
75
76 EOF
77 }
78
79 print_job_parameters
80
81 function create_etc_hosts() {
82     NODE_IP=$1
83     CTRL_IP=$2
84     : > ${WORKSPACE}/hosts_file
85     for iter in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`
86     do
87         COMPUTE_IP=OPENSTACK_COMPUTE_NODE_${iter}_IP
88         if [ "${!COMPUTE_IP}" == "${NODE_IP}" ]; then
89            CONTROL_HNAME=$(${SSH}  ${CTRL_IP}  "hostname")
90            echo "${CTRL_IP}   ${CONTROL_HNAME}" >> ${WORKSPACE}/hosts_file
91         else
92            COMPUTE_HNAME=$(${SSH}  ${!COMPUTE_IP}  "hostname")
93            echo "${!COMPUTE_IP}   ${COMPUTE_HNAME}" >> ${WORKSPACE}/hosts_file
94         fi
95     done
96
97     echo "Created the hosts file for ${NODE_IP}:"
98     cat ${WORKSPACE}/hosts_file
99 } # create_etc_hosts()
100
101 # convert commas in csv strings to spaces (ssv)
102 function csv2ssv() {
103     local csv=$1
104     if [ -n "${csv}" ]; then
105         ssv=$(echo ${csv} | sed 's/,/ /g' | sed 's/\ \ */\ /g')
106     fi
107
108     echo "${ssv}"
109 } # csv2ssv
110
111 # Add enable_services and disable_services to the local.conf
112 function add_os_services() {
113     local core_services=$1
114     local enable_services=$2
115     local disable_services=$3
116     local local_conf_file_name=$4
117
118     cat >> ${local_conf_file_name} << EOF
119 enable_service $(csv2ssv "${core_services}")
120 EOF
121     if [ -n "${enable_services}" ]; then
122         cat >> ${local_conf_file_name} << EOF
123 enable_service $(csv2ssv "${enable_services}")
124 EOF
125     fi
126     if [ -n "${disable_services}" ]; then
127         cat >> ${local_conf_file_name} << EOF
128 disable_service $(csv2ssv "${disable_services}")
129 EOF
130     fi
131 }
132
133 function create_control_node_local_conf() {
134     HOSTIP=$1
135     MGRIP=$2
136     ODL_OVS_MANAGERS="$3"
137
138     local_conf_file_name=${WORKSPACE}/local.conf_control_${HOSTIP}
139     cat > ${local_conf_file_name} << EOF
140 [[local|localrc]]
141 LOGFILE=stack.sh.log
142 USE_SCREEN=True
143 SCREEN_LOGDIR=/opt/stack/data/log
144 LOG_COLOR=False
145 RECLONE=${RECLONE}
146
147 disable_all_services
148 EOF
149
150     add_os_services "${CORE_OS_CONTROL_SERVICES}" "${ENABLE_OS_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}"
151
152     cat >> ${local_conf_file_name} << EOF
153
154 HOST_IP=${HOSTIP}
155 SERVICE_HOST=\$HOST_IP
156 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
157 NEUTRON_CREATE_INITIAL_NETWORKS=${CREATE_INITIAL_NETWORKS}
158
159 ODL_MODE=manual
160 ODL_MGR_IP=${MGRIP}
161 ODL_PORT=8080
162 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
163 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
164
165 MYSQL_HOST=\$SERVICE_HOST
166 RABBIT_HOST=\$SERVICE_HOST
167 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
168 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
169 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
170
171 ADMIN_PASSWORD=${ADMIN_PASSWORD}
172 DATABASE_PASSWORD=${ADMIN_PASSWORD}
173 RABBIT_PASSWORD=${ADMIN_PASSWORD}
174 SERVICE_TOKEN=${ADMIN_PASSWORD}
175 SERVICE_PASSWORD=${ADMIN_PASSWORD}
176
177 NEUTRON_LBAAS_SERVICE_PROVIDERV2=${LBAAS_SERVICE_PROVIDER} # Only relevant if neutron-lbaas plugin is enabled
178 NEUTRON_SFC_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
179 NEUTRON_FLOWCLASSIFIER_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
180 ETCD_PORT=2379
181 EOF
182
183     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
184         echo "ODL_V2DRIVER=True" >> ${local_conf_file_name}
185     fi
186
187     IFS=,
188     for plugin_name in ${ENABLE_OS_PLUGINS}; do
189         if [ "$plugin_name" == "networking-odl" ]; then
190             ENABLE_PLUGIN_ARGS="${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}"
191         elif [ "$plugin_name" == "kuryr-kubernetes" ]; then
192             ENABLE_PLUGIN_ARGS="${DEVSTACK_KUBERNETES_PLUGIN_REPO} master" # note: kuryr-kubernetes only exists in master at the moment
193         elif [ "$plugin_name" == "neutron-lbaas" ]; then
194             ENABLE_PLUGIN_ARGS="${DEVSTACK_LBAAS_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
195             IS_LBAAS_PLUGIN_ENABLED="yes"
196         elif [ "$plugin_name" == "networking-sfc" ]; then
197             ENABLE_PLUGIN_ARGS="${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
198         else
199             echo "Error: Invalid plugin $plugin_name, unsupported"
200             continue
201         fi
202         cat >> ${local_conf_file_name} << EOF
203
204 enable_plugin ${plugin_name} ${ENABLE_PLUGIN_ARGS}
205 EOF
206     done
207     unset IFS
208
209     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
210         cat >> ${local_conf_file_name} << EOF
211
212 enable_plugin networking-l2gw ${NETWORKING_L2GW_DRIVER} ${ODL_ML2_BRANCH}
213 NETWORKING_L2GW_SERVICE_DRIVER=L2GW:OpenDaylight:networking_odl.l2gateway.driver.OpenDaylightL2gwDriver:default
214 EOF
215     fi
216
217     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
218         cat >> ${local_conf_file_name} << EOF
219
220 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
221 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
222 ML2_VLAN_RANGES=${PUBLIC_PHYSICAL_NETWORK}
223 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
224 EOF
225
226         if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
227            SERVICE_PLUGINS="odl-router_v2"
228         else
229            SERVICE_PLUGINS="odl-router"
230         fi
231         if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
232             SERVICE_PLUGINS+=", networking_l2gw.services.l2gateway.plugin.L2GatewayPlugin"
233         fi
234         if [ "${IS_LBAAS_PLUGIN_ENABLED}" == "yes" ]; then
235             SERVICE_PLUGINS+=", lbaasv2"
236         fi
237     fi #check for ODL_ENABLE_L3_FWD
238
239     cat >> ${local_conf_file_name} << EOF
240
241 [[post-config|\$NEUTRON_CONF]]
242 [DEFAULT]
243 service_plugins = ${SERVICE_PLUGINS}
244
245 [[post-config|/etc/neutron/plugins/ml2/ml2_conf.ini]]
246 [agent]
247 minimize_polling=True
248
249 [ml2]
250 # Needed for VLAN provider tests - because our provider networks are always encapsulated in VXLAN (br-physnet1)
251 # MTU(1440) + VXLAN(50) + VLAN(4) = 1494 < MTU eth0/br-physnet1(1500)
252 physical_network_mtus = ${PUBLIC_PHYSICAL_NETWORK}:1440
253 path_mtu = 1490
254
255 # workaround for port-status not working due to https://bugs.opendaylight.org/show_bug.cgi?id=9092
256 [ml2_odl]
257 odl_features=nothing
258
259 [[post-config|/etc/neutron/dhcp_agent.ini]]
260 [DEFAULT]
261 force_metadata = True
262 enable_isolated_metadata = True
263
264 [[post-config|/etc/nova/nova.conf]]
265 [DEFAULT]
266 force_config_drive = False
267
268 [scheduler]
269 discover_hosts_in_cells_interval = 30
270 EOF
271
272     echo "Control local.conf created:"
273     cat ${local_conf_file_name}
274 } # create_control_node_local_conf()
275
276 function create_compute_node_local_conf() {
277     HOSTIP=$1
278     SERVICEHOST=$2
279     MGRIP=$3
280     ODL_OVS_MANAGERS="$4"
281
282     local_conf_file_name=${WORKSPACE}/local.conf_compute_${HOSTIP}
283     cat > ${local_conf_file_name} << EOF
284 [[local|localrc]]
285 LOGFILE=stack.sh.log
286 LOG_COLOR=False
287 USE_SCREEN=True
288 SCREEN_LOGDIR=/opt/stack/data/log
289 RECLONE=${RECLONE}
290
291 disable_all_services
292 EOF
293
294     add_os_services "${CORE_OS_COMPUTE_SERVICES}" "${ENABLE_OS_COMPUTE_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}"
295
296     cat >> ${local_conf_file_name} << EOF
297
298 HOST_IP=${HOSTIP}
299 SERVICE_HOST=${SERVICEHOST}
300 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
301
302 ODL_MODE=manual
303 ODL_MGR_IP=${MGRIP}
304 ODL_PORT=8080
305 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
306 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
307
308 Q_HOST=\$SERVICE_HOST
309 MYSQL_HOST=\$SERVICE_HOST
310 RABBIT_HOST=\$SERVICE_HOST
311 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
312 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
313 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
314
315 ADMIN_PASSWORD=${ADMIN_PASSWORD}
316 DATABASE_PASSWORD=${ADMIN_PASSWORD}
317 RABBIT_PASSWORD=${ADMIN_PASSWORD}
318 SERVICE_TOKEN=${ADMIN_PASSWORD}
319 SERVICE_PASSWORD=${ADMIN_PASSWORD}
320 EOF
321
322     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-odl ]]; then
323         cat >> ${local_conf_file_name} << EOF
324
325 enable_plugin networking-odl ${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}
326 EOF
327     fi
328
329     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
330         cat >> ${local_conf_file_name} << EOF
331
332 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
333 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
334 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
335 Q_L3_ENABLED=True
336 ODL_L3=${ODL_L3}
337 EOF
338     fi
339
340     cat >> ${local_conf_file_name} << EOF
341
342 [[post-config|/etc/nova/nova.conf]]
343 [api]
344 auth_strategy = keystone
345 [DEFAULT]
346 use_neutron = True
347 EOF
348
349     echo "Compute local.conf created:"
350     cat ${local_conf_file_name}
351 } # create_compute_node_local_conf()
352
353 function configure_haproxy_for_neutron_requests() {
354     MGRIP=$1
355     ODL_IPS=(${2//,/ })
356
357     cat > ${WORKSPACE}/install_ha_proxy.sh<< EOF
358 sudo systemctl stop firewalld
359 sudo yum -y install policycoreutils-python haproxy
360 EOF
361
362 cat > ${WORKSPACE}/haproxy.cfg << EOF
363 global
364   daemon
365   group  haproxy
366   log  /dev/log local0
367   maxconn  20480
368   pidfile  /tmp/haproxy.pid
369   user  haproxy
370
371 defaults
372   log  global
373   maxconn  4096
374   mode  tcp
375   retries  3
376   timeout  http-request 10s
377   timeout  queue 1m
378   timeout  connect 10s
379   timeout  client 1m
380   timeout  server 1m
381   timeout  check 10s
382
383 listen opendaylight
384   bind ${MGRIP}:8080
385   balance source
386 EOF
387
388     odlindex=1
389     for odlip in ${ODL_IPS[*]}; do
390         cat >> ${WORKSPACE}/haproxy.cfg << EOF
391   server controller-${odlindex} ${odlip}:8080 check fall 5 inter 2000 rise 2
392 EOF
393         odlindex=$((odlindex+1))
394     done
395
396     cat >> ${WORKSPACE}/haproxy.cfg << EOF
397 listen opendaylight_rest
398   bind ${MGRIP}:8181
399   balance source
400 EOF
401
402     odlindex=1
403     for odlip in ${ODL_IPS[*]}; do
404         cat >> ${WORKSPACE}/haproxy.cfg << EOF
405   server controller-rest-${odlindex} ${odlip}:8181 check fall 5 inter 2000 rise 2
406 EOF
407         odlindex=$((odlindex+1))
408     done
409
410     echo "Dump haproxy.cfg"
411     cat ${WORKSPACE}/haproxy.cfg
412
413     cat > ${WORKSPACE}/deploy_ha_proxy.sh<< EOF
414 sudo chown haproxy:haproxy /tmp/haproxy.cfg
415 sudo sed -i 's/\\/etc\\/haproxy\\/haproxy.cfg/\\/tmp\\/haproxy.cfg/g' /usr/lib/systemd/system/haproxy.service
416 sudo /usr/sbin/semanage permissive -a haproxy_t
417 sudo systemctl restart haproxy
418 sleep 3
419 sudo netstat -tunpl
420 sudo systemctl status haproxy
421 true
422 EOF
423
424     scp ${WORKSPACE}/install_ha_proxy.sh ${MGRIP}:/tmp
425     ${SSH} ${MGRIP} "sudo bash /tmp/install_ha_proxy.sh"
426     scp ${WORKSPACE}/haproxy.cfg ${MGRIP}:/tmp
427     scp ${WORKSPACE}/deploy_ha_proxy.sh ${MGRIP}:/tmp
428     ${SSH} ${MGRIP} "sudo bash /tmp/deploy_ha_proxy.sh"
429 } # configure_haproxy_for_neutron_requests()
430
431 function collect_logs () {
432     set +e  # We do not want to create red dot just because something went wrong while fetching logs.
433
434     for i in `seq 1 ${NUM_ODL_SYSTEM}`; do
435         CONTROLLERIP=ODL_SYSTEM_${i}_IP
436         echo "Lets's take the karaf thread dump again..."
437         KARAF_PID=$(ssh ${!CONTROLLERIP} "ps aux | grep ${KARAF_ARTIFACT} | grep -v grep | tr -s ' ' | cut -f2 -d' '")
438         ssh ${!CONTROLLERIP} "jstack $KARAF_PID"> ${WORKSPACE}/karaf_${i}_threads_after.log || true
439         echo "killing karaf process..."
440         ${SSH} "${!CONTROLLERIP}" bash -c 'ps axf | grep karaf | grep -v grep | awk '"'"'{print "kill -9 " $1}'"'"' | sh'
441     done
442
443     cat > extra_debug.sh << EOF
444 echo -e "/usr/sbin/lsmod | /usr/bin/grep openvswitch\n"
445 /usr/sbin/lsmod | /usr/bin/grep openvswitch
446 echo -e "\ngrep ct_ /var/log/openvswitch/ovs-vswitchd.log\n"
447 grep ct_ /var/log/openvswitch/ovs-vswitchd.log
448 echo -e "\novsdb-tool -mm show-log\n"
449 ovsdb-tool -mm show-log
450 echo -e "\nsudo netstat -punta\n"
451 sudo netstat -punta
452 echo -e "\nsudo getenforce\n"
453 sudo getenforce
454 echo -e "\njournalctl > /tmp/journalctl.log\n"
455 sudo journalctl > /tmp/journalctl.log
456 EOF
457
458     sleep 5
459     # FIXME: Do not create .tar and gzip before copying.
460     for i in `seq 1 ${NUM_ODL_SYSTEM}`; do
461         CONTROLLERIP=ODL_SYSTEM_${i}_IP
462         ${SSH} "${!CONTROLLERIP}"  "cp -r /tmp/${BUNDLEFOLDER}/data/log /tmp/odl_log"
463         ${SSH} "${!CONTROLLERIP}"  "tar -cf /tmp/odl${i}_karaf.log.tar /tmp/odl_log/*"
464         scp "${!CONTROLLERIP}:/tmp/odl${i}_karaf.log.tar" "${WORKSPACE}/odl${i}_karaf.log.tar"
465         ${SSH} "${!CONTROLLERIP}"  "tar -cf /tmp/odl${i}_zrpcd.log.tar /tmp/zrpcd.init.log"
466         scp "${!CONTROLLERIP}:/tmp/odl${i}_zrpcd.log.tar" "${WORKSPACE}/odl${i}_zrpcd.log.tar"
467         tar -xvf ${WORKSPACE}/odl${i}_karaf.log.tar -C . --strip-components 2 --transform s/karaf/odl${i}_karaf/g
468         grep "ROBOT MESSAGE\| ERROR " odl${i}_karaf.log > odl${i}_err.log
469         # Print ROBOT lines, Print Caused by...Exception: lines,
470         # Print Exception{ lines as well as the previous line that has the timestamp for context
471         sed -n -e '/ROBOT MESSAGE/P' -e '/Caused by.*Exception:/P' -e '$!N;/Exception{/P;D' odl${i}_karaf.log > odl${i}_exception.log
472         grep "ROBOT MESSAGE\| ERROR \| WARN \|Exception" odl${i}_karaf.log > odl${i}_err_warn_exception.log
473         rm ${WORKSPACE}/odl${i}_karaf.log.tar
474     done
475
476     # Since this log collection work is happening before the archive build macro which also
477     # creates the ${WORKSPACE}/archives dir, we have to do it here first.  The mkdir in the
478     # archives build step will essentially be a noop.
479     mkdir -p ${WORKSPACE}/archives
480
481     print_job_parameters > ${WORKSPACE}/archives/params.txt
482
483     # Control Node
484     for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
485         OSIP=OPENSTACK_CONTROL_NODE_${i}_IP
486         NODE_FOLDER="control_${i}"
487         mkdir -p ${NODE_FOLDER}
488         scp ${!OSIP}:/etc/kuryr/kuryr.conf ${NODE_FOLDER}
489         scp ${!OSIP}:/etc/neutron/dhcp_agent.ini ${NODE_FOLDER}
490         scp ${!OSIP}:/etc/neutron/metadata_agent.ini ${NODE_FOLDER}
491         scp ${!OSIP}:/etc/neutron/neutron.conf ${NODE_FOLDER}
492         scp ${!OSIP}:/etc/neutron/neutron_lbaas.conf ${NODE_FOLDER}
493         scp ${!OSIP}:/etc/neutron/plugins/ml2/ml2_conf.ini ${NODE_FOLDER}
494         scp ${!OSIP}:/etc/neutron/services/loadbalancer/haproxy/lbaas_agent.ini ${NODE_FOLDER}
495         scp ${!OSIP}:/etc/nova/nova.conf ${NODE_FOLDER}
496         scp ${!OSIP}:/opt/stack/devstack/nohup.out ${NODE_FOLDER}/stack.log
497         scp ${!OSIP}:/opt/stack/requirements/upper-constraints.txt ${NODE_FOLDER}
498         scp ${!OSIP}:/tmp/get_devstack.sh.txt ${NODE_FOLDER}
499         scp ${!OSIP}:/var/log/openvswitch/ovs-vswitchd.log ${NODE_FOLDER}
500         scp ${!OSIP}:/var/log/openvswitch/ovsdb-server.log ${NODE_FOLDER}
501         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/etc/hosts ${NODE_FOLDER}
502         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/usr/lib/systemd/system/haproxy.service ${NODE_FOLDER}
503         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/audit/audit.log ${NODE_FOLDER}
504         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/messages ${NODE_FOLDER}
505         rsync -avhe ssh ${!OSIP}:/opt/stack/logs/* ${NODE_FOLDER} # rsync to prevent copying of symbolic links
506         scp extra_debug.sh ${!OSIP}:/tmp
507         ${SSH} ${!OSIP} "bash /tmp/extra_debug.sh > /tmp/extra_debug.log"
508         scp ${!OSIP}:/tmp/extra_debug.log ${NODE_FOLDER}
509         scp ${!OSIP}:/tmp/journalctl.log ${NODE_FOLDER}
510         scp ${!OSIP}:/tmp/*.xz ${NODE_FOLDER}
511         mv local.conf_control_${!OSIP} ${NODE_FOLDER}/local.conf
512         mv ${NODE_FOLDER} ${WORKSPACE}/archives/
513     done
514
515     # Compute Nodes
516     for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
517         OSIP=OPENSTACK_COMPUTE_NODE_${i}_IP
518         NODE_FOLDER="compute_${i}"
519         mkdir -p ${NODE_FOLDER}
520         scp ${!OSIP}:/etc/nova/nova.conf ${NODE_FOLDER}
521         scp ${!OSIP}:/opt/stack/devstack/nohup.out ${NODE_FOLDER}/stack.log
522         scp ${!OSIP}:/opt/stack/requirements/upper-constraints.txt ${NODE_FOLDER}
523         scp ${!OSIP}:/tmp/get_devstack.sh.txt ${NODE_FOLDER}
524         scp ${!OSIP}:/var/log/openvswitch/ovs-vswitchd.log ${NODE_FOLDER}
525         scp ${!OSIP}:/var/log/openvswitch/ovsdb-server.log ${NODE_FOLDER}
526         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/etc/hosts ${NODE_FOLDER}
527         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/audit/audit.log ${NODE_FOLDER}
528         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/dmesg.log ${NODE_FOLDER}
529         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/libvirt ${NODE_FOLDER}
530         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/messages ${NODE_FOLDER}
531         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/nova-agent.log ${NODE_FOLDER}
532         rsync -avhe ssh ${!OSIP}:/opt/stack/logs/* ${NODE_FOLDER} # rsync to prevent copying of symbolic links
533         scp extra_debug.sh ${!OSIP}:/tmp
534         ${SSH} ${!OSIP} "bash /tmp/extra_debug.sh > /tmp/extra_debug.log"
535         scp ${!OSIP}:/tmp/extra_debug.log ${NODE_FOLDER}
536         scp ${!OSIP}:/tmp/journalctl.log ${NODE_FOLDER}
537         scp ${!OSIP}:/tmp/*.xz ${NODE_FOLDER}/
538         mv local.conf_compute_${!OSIP} ${NODE_FOLDER}/local.conf
539         mv ${NODE_FOLDER} ${WORKSPACE}/archives/
540     done
541
542     # Tempest
543     DEVSTACK_TEMPEST_DIR="/opt/stack/tempest"
544     TESTREPO=".stestr"
545     TEMPEST_LOGS_DIR=${WORKSPACE}/archives/tempest
546     # Look for tempest test results in the $TESTREPO dir and copy if found
547     if ${SSH} ${OPENSTACK_CONTROL_NODE_1_IP} "sudo sh -c '[ -f ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/0 ]'"; then
548         ${SSH} ${OPENSTACK_CONTROL_NODE_1_IP} "for I in \$(sudo ls ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/ | grep -E '^[0-9]+$'); do sudo sh -c \"${DEVSTACK_TEMPEST_DIR}/.tox/tempest/bin/subunit-1to2 < ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/\${I} >> ${DEVSTACK_TEMPEST_DIR}/subunit_log.txt\"; done"
549         ${SSH} ${OPENSTACK_CONTROL_NODE_1_IP} "sudo sh -c '${DEVSTACK_TEMPEST_DIR}/.tox/tempest/bin/python ${DEVSTACK_TEMPEST_DIR}/.tox/tempest/lib/python2.7/site-packages/os_testr/subunit2html.py ${DEVSTACK_TEMPEST_DIR}/subunit_log.txt ${DEVSTACK_TEMPEST_DIR}/tempest_results.html'"
550         mkdir -p ${TEMPEST_LOGS_DIR}
551         scp ${OPENSTACK_CONTROL_NODE_1_IP}:${DEVSTACK_TEMPEST_DIR}/tempest_results.html ${TEMPEST_LOGS_DIR}
552         scp ${OPENSTACK_CONTROL_NODE_1_IP}:${DEVSTACK_TEMPEST_DIR}/tempest.log ${TEMPEST_LOGS_DIR}
553         mv ${WORKSPACE}/tempest_output* ${TEMPEST_LOGS_DIR}
554     else
555         echo "tempest results not found in ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/0"
556     fi
557 } # collect_logs()
558
559 # if we are using the new netvirt impl, as determined by the feature name
560 # odl-netvirt-openstack (note: old impl is odl-ovsdb-openstack) then we
561 # want PROVIDER_MAPPINGS to be used -- this should be fixed if we want to support
562 # external networks in legacy netvirt
563 if [[ ${CONTROLLERFEATURES} == *"odl-netvirt-openstack"* ]]; then
564   ODL_PROVIDER_MAPPINGS="\${PUBLIC_PHYSICAL_NETWORK}:${PUBLIC_BRIDGE}"
565 else
566   ODL_PROVIDER_MAPPINGS=
567 fi
568
569 # if we are using the old netvirt impl, as determined by the feature name
570 # odl-ovsdb-openstack (note: new impl is odl-netvirt-openstack) then we
571 # want ODL_L3 to be True.  New impl wants it False
572 if [[ ${CONTROLLERFEATURES} == *"odl-ovsdb-openstack"* ]]; then
573     ODL_L3=True
574 else
575     ODL_L3=False
576 fi
577
578 RECLONE=False
579
580 # Always compare the lists below against the devstack upstream ENABLED_SERVICES in
581 # https://github.com/openstack-dev/devstack/blob/master/stackrc#L52
582 # ODL CSIT does not use vnc, cinder, q-agt, q-l3 or horizon so they are not included below.
583 # collect performance stats
584 CORE_OS_CONTROL_SERVICES="dstat"
585 # Glance
586 CORE_OS_CONTROL_SERVICES+=",g-api,g-reg"
587 # Keystone
588 CORE_OS_CONTROL_SERVICES+=",key"
589 # Nova - services to support libvirt
590 CORE_OS_CONTROL_SERVICES+=",n-api,n-api-meta,n-cauth,n-cond,n-crt,n-obj,n-sch"
591 # ODL - services to connect to ODL
592 CORE_OS_CONTROL_SERVICES+=",odl-compute,odl-neutron"
593 # Neutron
594 CORE_OS_CONTROL_SERVICES+=",q-dhcp,q-meta,q-svc"
595 # Additional services
596 CORE_OS_CONTROL_SERVICES+=",mysql,rabbit"
597
598 # computes only need nova and odl
599 CORE_OS_COMPUTE_SERVICES="n-cpu,odl-compute"
600
601 cat > ${WORKSPACE}/disable_firewall.sh << EOF
602 sudo systemctl stop firewalld
603 sudo systemctl stop iptables
604 true
605 EOF
606
607 cat > ${WORKSPACE}/get_devstack.sh << EOF
608 sudo systemctl stop firewalld
609 sudo yum install bridge-utils python-pip -y
610 #sudo systemctl stop  NetworkManager
611 #Disable NetworkManager and kill dhclient and dnsmasq
612 sudo systemctl stop NetworkManager
613 sudo killall dhclient
614 sudo killall dnsmasq
615 #Workaround for mysql failure
616 echo "127.0.0.1   localhost \${HOSTNAME}" >> /tmp/hosts
617 echo "::1         localhost \${HOSTNAME}" >> /tmp/hosts
618 sudo mv /tmp/hosts /etc/hosts
619 sudo mkdir /opt/stack
620 sudo chmod 777 /opt/stack
621 cd /opt/stack
622 echo "git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}"
623 git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}
624 cd devstack
625 if [ -n "${DEVSTACK_HASH}" ]; then
626     echo "git checkout ${DEVSTACK_HASH}"
627     git checkout ${DEVSTACK_HASH}
628 fi
629 git --no-pager log --pretty=format:'%h %<(13)%ar%<(13)%cr %<(20,trunc)%an%d %s\n%b' -n20
630 EOF
631
632 cat > "${WORKSPACE}/setup_host_cell_mapping.sh" << EOF
633 sudo nova-manage cell_v2 map_cell0
634 sudo nova-manage cell_v2 simple_cell_setup
635 sudo nova-manage db sync
636 sudo nova-manage cell_v2 discover_hosts
637 EOF
638
639 NUM_OPENSTACK_SITES=${NUM_OPENSTACK_SITES:-1}
640 compute_index=1
641 odl_index=1
642 os_node_list=()
643 os_interval=$(( ${NUM_OPENSTACK_SYSTEM} / ${NUM_OPENSTACK_SITES} ))
644 ha_proxy_index=${os_interval}
645
646 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
647     if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
648         echo "Configure HAProxy"
649         ODL_HAPROXYIP_PARAM=OPENSTACK_HAPROXY_${i}_IP
650         ha_proxy_index=$(( $ha_proxy_index + $os_interval ))
651         odl_index=$(((i - 1) * 3 + 1))
652         ODL_IP_PARAM1=ODL_SYSTEM_$((odl_index++))_IP
653         ODL_IP_PARAM2=ODL_SYSTEM_$((odl_index++))_IP
654         ODL_IP_PARAM3=ODL_SYSTEM_$((odl_index++))_IP
655         ODLMGRIP[$i]=${!ODL_HAPROXYIP_PARAM} # ODL Northbound uses HAProxy VIP
656         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM1},${!ODL_IP_PARAM2},${!ODL_IP_PARAM3}" # OVSDB connects to all ODL IPs
657         configure_haproxy_for_neutron_requests ${!ODL_HAPROXYIP_PARAM} "${ODL_OVS_MGRS[$i]}"
658     else
659         ODL_IP_PARAM=ODL_SYSTEM_${i}_IP
660         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM}" # ODL Northbound uses ODL IP
661         ODLMGRIP[$i]=${!ODL_IP_PARAM} # OVSDB connects to ODL IP
662     fi
663 done
664
665 # Begin stacking the nodes, starting with the controller(s) and then the compute(s)
666
667 for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
668     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
669     echo "Stack the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${CONTROLIP}"
670     create_etc_hosts ${!CONTROLIP}
671     scp ${WORKSPACE}/hosts_file ${!CONTROLIP}:/tmp/hosts
672     scp ${WORKSPACE}/get_devstack.sh ${!CONTROLIP}:/tmp
673     ${SSH} ${!CONTROLIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
674     create_control_node_local_conf ${!CONTROLIP} ${ODLMGRIP[$i]} "${ODL_OVS_MGRS[$i]}"
675     scp ${WORKSPACE}/local.conf_control_${!CONTROLIP} ${!CONTROLIP}:/opt/stack/devstack/local.conf
676     ssh ${!CONTROLIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
677     ssh ${!CONTROLIP} "ps -ef | grep stack.sh"
678     ssh ${!CONTROLIP} "ls -lrt /opt/stack/devstack/nohup.out"
679     os_node_list+=(${!CONTROLIP})
680     # Workaround for stable/newton jobs
681     # TODO: can this be removed now?
682     if [ "${ODL_ML2_BRANCH}" == "stable/newton" ]; then
683         ssh ${!CONTROLIP} "cd /opt/stack; git clone https://git.openstack.org/openstack/requirements; cd requirements; git checkout stable/newton; sed -i /appdirs/d upper-constraints.txt"
684     fi
685 done
686
687 for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
688     NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
689     SITE_INDEX=$((((i - 1) / NUM_COMPUTES_PER_SITE) + 1)) # We need the site index to infer the control node IP for this compute
690     COMPUTEIP=OPENSTACK_COMPUTE_NODE_${i}_IP
691     CONTROLIP=OPENSTACK_CONTROL_NODE_${SITE_INDEX}_IP
692     echo "Stack the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${COMPUTEIP}"
693     create_etc_hosts ${!COMPUTEIP} ${!CONTROLIP}
694     scp ${WORKSPACE}/hosts_file ${!COMPUTEIP}:/tmp/hosts
695     scp ${WORKSPACE}/get_devstack.sh  ${!COMPUTEIP}:/tmp
696     ${SSH} ${!COMPUTEIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
697     create_compute_node_local_conf ${!COMPUTEIP} ${!CONTROLIP} ${ODLMGRIP[$SITE_INDEX]} "${ODL_OVS_MGRS[$SITE_INDEX]}"
698     scp ${WORKSPACE}/local.conf_compute_${!COMPUTEIP} ${!COMPUTEIP}:/opt/stack/devstack/local.conf
699     ssh ${!COMPUTEIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
700     ssh ${!COMPUTEIP} "ps -ef | grep stack.sh"
701     os_node_list+=(${!COMPUTEIP})
702     # Workaround for https://review.openstack.org/#/c/491032/
703     # Modify upper-constraints to use libvirt-python 3.2.0
704     if [ "${ODL_ML2_BRANCH}" == "stable/ocata" ]; then
705         ${SSH} ${!COMPUTEIP} "
706             cd /opt/stack;
707             git clone https://git.openstack.org/openstack/requirements;
708             cd requirements;
709             git checkout stable/ocata;
710             sed -i s/libvirt-python===2.5.0/libvirt-python===3.2.0/ upper-constraints.txt
711         "
712     fi
713 done
714
715 echo "nodelist: ${os_node_list[*]}"
716
717 # This script runs on the openstack nodes. It greps for a string that devstack writes when stacking is complete.
718 # The script then writes a status depending on the grep output that is later scraped by the robot vm to control
719 # the status polling.
720 cat > ${WORKSPACE}/check_stacking.sh << EOF
721 > /tmp/stack_progress
722 ps -ef | grep "stack.sh" | grep -v grep
723 ret=\$?
724 if [ \${ret} -eq 1 ]; then
725     grep "This is your host IP address:" /opt/stack/devstack/nohup.out
726     if [ \$? -eq 0 ]; then
727         echo "Stacking Complete" > /tmp/stack_progress
728     else
729         echo "Stacking Failed" > /tmp/stack_progress
730     fi
731 elif [ \${ret} -eq 0 ]; then
732     echo "Still Stacking" > /tmp/stack_progress
733 fi
734 EOF
735
736 # Check if the stacking is finished. Poll all nodes every 60s for one hour.
737 iteration=0
738 in_progress=1
739 while [ ${in_progress} -eq 1 ]; do
740     iteration=$(($iteration + 1))
741     for index in "${!os_node_list[@]}"; do
742         echo "node $index ${os_node_list[index]}: checking stacking status attempt ${iteration} of 60"
743         scp ${WORKSPACE}/check_stacking.sh  ${os_node_list[index]}:/tmp
744         ${SSH} ${os_node_list[index]} "bash /tmp/check_stacking.sh"
745         scp ${os_node_list[index]}:/tmp/stack_progress .
746         cat stack_progress
747         stacking_status=`cat stack_progress`
748         if [ "$stacking_status" == "Still Stacking" ]; then
749             continue
750         elif [ "$stacking_status" == "Stacking Failed" ]; then
751             echo "node $index ${os_node_list[index]}: stacking has failed"
752             collect_logs
753             exit 1
754         elif [ "$stacking_status" == "Stacking Complete" ]; then
755             echo "node $index ${os_node_list[index]}: stacking complete"
756             unset 'os_node_list[index]'
757             if  [ ${#os_node_list[@]} -eq 0 ]; then
758                 in_progress=0
759             fi
760         fi
761     done
762     echo "sleep for a minute before the next check"
763     sleep 60
764     if [ ${iteration} -eq 60 ]; then
765         echo "stacking has failed - took longer than 60m"
766         collect_logs
767         exit 1
768     fi
769 done
770
771 # Further configuration now that stacking is complete.
772 NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
773 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
774     echo "Configure the Control Node"
775     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
776     # Gather Compute IPs for the site
777     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
778         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
779         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
780         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
781     done
782
783     # Need to disable firewalld and iptables in compute nodes as well
784     for ip in ${COMPUTE_IPS[*]}; do
785         scp ${WORKSPACE}/disable_firewall.sh "${ip}:/tmp"
786         ${SSH} "${ip}" "sudo bash /tmp/disable_firewall.sh"
787     done
788
789     #Need to disable firewalld and iptables in control node
790     echo "Stop Firewall in Control Node for compute nodes to be able to reach the ports and add to hypervisor-list"
791     scp ${WORKSPACE}/disable_firewall.sh ${!CONTROLIP}:/tmp
792     ${SSH} ${!CONTROLIP} "sudo bash /tmp/disable_firewall.sh"
793
794     echo "sleep for 60s and print hypervisor-list"
795     sleep 60
796     # In Ocata if we do not enable the n-cpu in control node then
797     # we need to discover hosts manually and ensure that they are mapped to cells.
798     # reference: https://ask.openstack.org/en/question/102256/how-to-configure-placement-service-for-compute-node-on-ocata/
799     if [ "${OPENSTACK_BRANCH}" == "stable/ocata" ]; then
800         scp ${WORKSPACE}/setup_host_cell_mapping.sh  ${!CONTROLIP}:/tmp
801         ${SSH} ${!CONTROLIP} "sudo bash /tmp/setup_host_cell_mapping.sh"
802     fi
803     ${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; nova hypervisor-list"
804     # in the case that we are doing openstack (control + compute) all in one node, then the number of hypervisors
805     # will be the same as the number of openstack systems. However, if we are doing multinode openstack then the
806     # assumption is we have a single control node and the rest are compute nodes, so the number of expected hypervisors
807     # is one less than the total number of openstack systems
808     if [ $((NUM_OPENSTACK_SYSTEM / NUM_OPENSTACK_SITES)) -eq 1 ]; then
809         expected_num_hypervisors=1
810     else
811         expected_num_hypervisors=${NUM_COMPUTES_PER_SITE}
812     fi
813     num_hypervisors=$(${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; openstack hypervisor list -f value | wc -l" | tail -1 | tr -d "\r")
814     if ! [ "${num_hypervisors}" ] || ! [ ${num_hypervisors} -eq ${expected_num_hypervisors} ]; then
815         echo "Error: Only $num_hypervisors hypervisors detected, expected $expected_num_hypervisors"
816         collect_logs
817         exit 1
818     fi
819
820     # upgrading pip, urllib3 and httplib2 so that tempest tests can be run on openstack control node
821     # this needs to happen after devstack runs because it seems devstack is pulling in specific versions
822     # of these libs that are not working for tempest.
823     ${SSH} ${!CONTROLIP} "sudo pip install --upgrade pip"
824     ${SSH} ${!CONTROLIP} "sudo pip install urllib3 --upgrade"
825     ${SSH} ${!CONTROLIP} "sudo pip install httplib2 --upgrade"
826
827     # Gather Compute IPs for the site
828     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
829         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
830         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
831         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
832     done
833
834     # Need to disable firewalld and iptables in compute nodes as well
835     for ip in ${COMPUTE_IPS[*]}; do
836         scp ${WORKSPACE}/disable_firewall.sh "${ip}:/tmp"
837         ${SSH} "${ip}" "sudo bash /tmp/disable_firewall.sh"
838     done
839
840     # External Network
841     echo "prepare external networks by adding vxlan tunnels between all nodes on a separate bridge..."
842     # FIXME Should there be a unique gateway IP and devstack index for each site?
843     devstack_index=1
844     for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
845         # FIXME - Workaround, ODL (new netvirt) currently adds PUBLIC_BRIDGE as a port in br-int since it doesn't see such a bridge existing when we stack
846         ${SSH} $ip "sudo ovs-vsctl --if-exists del-port br-int $PUBLIC_BRIDGE"
847         ${SSH} $ip "sudo ovs-vsctl --may-exist add-br $PUBLIC_BRIDGE -- set bridge $PUBLIC_BRIDGE other-config:disable-in-band=true other_config:hwaddr=f6:00:00:ff:01:0$((devstack_index++))"
848     done
849
850     # ipsec support
851     if [ "${IPSEC_VXLAN_TUNNELS_ENABLED}" == "yes" ]; then
852         ALL_NODES=(${!CONTROLIP} ${COMPUTE_IPS[*]})
853         for ((inx_ip1=0; inx_ip1<$((${#ALL_NODES[@]} - 1)); inx_ip1++)); do
854             for ((inx_ip2=$((inx_ip1 + 1)); inx_ip2<${#ALL_NODES[@]}; inx_ip2++)); do
855                 KEY1=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
856                 KEY2=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
857                 ID=0x$(dd if=/dev/urandom count=4 bs=1 2> /dev/null| xxd -p -c 8)
858                 ip1=${ALL_NODES[$inx_ip1]}
859                 ip2=${ALL_NODES[$inx_ip2]}
860                 ${SSH} $ip1 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
861                 ${SSH} $ip1 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
862                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir out tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
863                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir in tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
864
865                 ${SSH} $ip2 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
866                 ${SSH} $ip2 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
867                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir out tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
868                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir in tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
869             done
870         done
871
872         for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
873             echo "ip xfrm configuration for node $ip:"
874             ${SSH} $ip "sudo ip xfrm policy list"
875             ${SSH} $ip "sudo ip xfrm state list"
876         done
877     fi
878
879     # Control Node - PUBLIC_BRIDGE will act as the external router
880     # Parameter values below are used in integration/test - changing them requires updates in intergration/test as well
881     EXTNET_GATEWAY_IP="10.10.10.250"
882     EXTNET_INTERNET_IP="10.9.9.9"
883     EXTNET_PNF_IP="10.10.10.253"
884     ${SSH} ${!CONTROLIP} "sudo ifconfig ${PUBLIC_BRIDGE} up ${EXTNET_GATEWAY_IP}/24"
885
886     # Control Node - external net PNF simulation
887     ${SSH} ${!CONTROLIP} "
888         sudo ip netns add pnf_ns;
889         sudo ip link add pnf_veth0 type veth peer name pnf_veth1;
890         sudo ip link set pnf_veth1 netns pnf_ns;
891         sudo ip link set pnf_veth0 up;
892         sudo ip netns exec pnf_ns ifconfig pnf_veth1 up ${EXTNET_PNF_IP}/24;
893         sudo ovs-vsctl add-port ${PUBLIC_BRIDGE} pnf_veth0;
894     "
895
896     # Control Node - external net internet address simulation
897     ${SSH} ${!CONTROLIP} "
898         sudo ip tuntap add dev internet_tap mode tap;
899         sudo ifconfig internet_tap up ${EXTNET_INTERNET_IP}/24;
900     "
901
902     # Computes
903     compute_index=1
904     for compute_ip in ${COMPUTE_IPS[*]}; do
905         # Tunnel from controller to compute
906         COMPUTEPORT=compute$(( compute_index++ ))_vxlan
907         ${SSH} ${!CONTROLIP} "
908             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $COMPUTEPORT -- set interface $COMPUTEPORT type=vxlan options:local_ip=${!CONTROLIP} options:remote_ip=$compute_ip options:dst_port=9876 options:key=flow
909         "
910         # Tunnel from compute to controller
911         CONTROLPORT="control_vxlan"
912         ${SSH} $compute_ip "
913             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $CONTROLPORT -- set interface $CONTROLPORT type=vxlan options:local_ip=$compute_ip options:remote_ip=${!CONTROLIP} options:dst_port=9876 options:key=flow
914         "
915     done
916 done
917
918 if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
919     odlmgrip=OPENSTACK_HAPROXY_1_IP
920     HA_PROXY_IP=${!odlmgrip}
921     HA_PROXY_1_IP=${!odlmgrip}
922     odlmgrip2=OPENSTACK_HAPROXY_2_IP
923     HA_PROXY_2_IP=${!odlmgrip2}
924     odlmgrip3=OPENSTACK_HAPROXY_1_IP
925     HA_PROXY_3_IP=${!odlmgrip3}
926 else
927     HA_PROXY_IP=${ODL_SYSTEM_IP}
928     HA_PROXY_1_IP=${ODL_SYSTEM_1_IP}
929     HA_PROXY_2_IP=${ODL_SYSTEM_2_IP}
930     HA_PROXY_3_IP=${ODL_SYSTEM_3_IP}
931 fi
932
933 echo "Locating test plan to use..."
934 testplan_filepath="${WORKSPACE}/test/csit/testplans/${STREAMTESTPLAN}"
935 if [ ! -f "${testplan_filepath}" ]; then
936     testplan_filepath="${WORKSPACE}/test/csit/testplans/${TESTPLAN}"
937 fi
938
939 echo "Changing the testplan path..."
940 cat "${testplan_filepath}" | sed "s:integration:${WORKSPACE}:" > testplan.txt
941 cat testplan.txt
942
943 # Use the testplan if specific SUITES are not defined.
944 if [ -z "${SUITES}" ]; then
945     SUITES=`egrep -v '(^[[:space:]]*#|^[[:space:]]*$)' testplan.txt | tr '\012' ' '`
946 fi
947
948 if [ "${OPENSTACK_BRANCH}" == "stable/pike" ] || [ "${OPENSTACK_BRANCH}" == "master" ]; then
949    AUTH="http://${!CONTROLIP}/identity"
950 else
951    AUTH="http://${!CONTROLIP}:35357/v3"
952 fi
953
954 # Environment Variables Needed to execute Openstack Client for NetVirt Jobs
955 cat > /tmp/os_netvirt_client_rc << EOF
956 export OS_USERNAME=admin
957 export OS_PASSWORD=admin
958 export OS_PROJECT_NAME=admin
959 export OS_USER_DOMAIN_NAME=default
960 export OS_PROJECT_DOMAIN_NAME=default
961 export OS_AUTH_URL=${AUTH}
962 export OS_IDENTITY_API_VERSION=3
963 export OS_IMAGE_API_VERSION=2
964 export OS_TENANT_NAME=admin
965 unset OS_CLOUD
966 EOF
967
968 source /tmp/os_netvirt_client_rc
969
970 echo "Starting Robot test suites ${SUITES} ..."
971 # please add pybot -v arguments on a single line and alphabetized
972 pybot -N ${TESTPLAN} --removekeywords wuks -c critical -e exclude -e skip_if_${DISTROSTREAM} \
973     -v BUNDLEFOLDER:${BUNDLEFOLDER} \
974     -v BUNDLE_URL:${ACTUAL_BUNDLE_URL} \
975     -v CONTROLLER_USER:${USER} \
976     -v DEVSTACK_DEPLOY_PATH:/opt/stack/devstack \
977     -v HA_PROXY_IP:${HA_PROXY_IP} \
978     -v HA_PROXY_1_IP:${HA_PROXY_1_IP} \
979     -v HA_PROXY_2_IP:${HA_PROXY_2_IP} \
980     -v HA_PROXY_3_IP:${HA_PROXY_3_IP} \
981     -v JDKVERSION:${JDKVERSION} \
982     -v NEXUSURL_PREFIX:${NEXUSURL_PREFIX} \
983     -v NUM_ODL_SYSTEM:${NUM_ODL_SYSTEM} \
984     -v NUM_OPENSTACK_SITES:${NUM_OPENSTACK_SITES} \
985     -v NUM_OS_SYSTEM:${NUM_OPENSTACK_SYSTEM} \
986     -v NUM_TOOLS_SYSTEM:${NUM_TOOLS_SYSTEM} \
987     -v ODL_SNAT_MODE:${ODL_SNAT_MODE} \
988     -v ODL_STREAM:${DISTROSTREAM} \
989     -v ODL_SYSTEM_IP:${ODL_SYSTEM_IP} \
990     -v ODL_SYSTEM_1_IP:${ODL_SYSTEM_1_IP} \
991     -v ODL_SYSTEM_2_IP:${ODL_SYSTEM_2_IP} \
992     -v ODL_SYSTEM_3_IP:${ODL_SYSTEM_3_IP} \
993     -v ODL_SYSTEM_4_IP:${ODL_SYSTEM_4_IP} \
994     -v ODL_SYSTEM_5_IP:${ODL_SYSTEM_5_IP} \
995     -v ODL_SYSTEM_6_IP:${ODL_SYSTEM_6_IP} \
996     -v ODL_SYSTEM_7_IP:${ODL_SYSTEM_7_IP} \
997     -v ODL_SYSTEM_8_IP:${ODL_SYSTEM_8_IP} \
998     -v ODL_SYSTEM_9_IP:${ODL_SYSTEM_9_IP} \
999     -v OS_CONTROL_NODE_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1000     -v OS_CONTROL_NODE_1_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1001     -v OS_CONTROL_NODE_2_IP:${OPENSTACK_CONTROL_NODE_2_IP} \
1002     -v OS_CONTROL_NODE_3_IP:${OPENSTACK_CONTROL_NODE_3_IP} \
1003     -v OPENSTACK_BRANCH:${OPENSTACK_BRANCH} \
1004     -v OS_COMPUTE_1_IP:${OPENSTACK_COMPUTE_NODE_1_IP} \
1005     -v OS_COMPUTE_2_IP:${OPENSTACK_COMPUTE_NODE_2_IP} \
1006     -v OS_COMPUTE_3_IP:${OPENSTACK_COMPUTE_NODE_3_IP} \
1007     -v OS_COMPUTE_4_IP:${OPENSTACK_COMPUTE_NODE_4_IP} \
1008     -v OS_COMPUTE_5_IP:${OPENSTACK_COMPUTE_NODE_5_IP} \
1009     -v OS_COMPUTE_6_IP:${OPENSTACK_COMPUTE_NODE_6_IP} \
1010     -v OS_USER:${USER} \
1011     -v PUBLIC_PHYSICAL_NETWORK:${PUBLIC_PHYSICAL_NETWORK} \
1012     -v SECURITY_GROUP_MODE:${SECURITY_GROUP_MODE} \
1013     -v TOOLS_SYSTEM_IP:${TOOLS_SYSTEM_1_IP} \
1014     -v TOOLS_SYSTEM_1_IP:${TOOLS_SYSTEM_1_IP} \
1015     -v TOOLS_SYSTEM_2_IP:${TOOLS_SYSTEM_2_IP} \
1016     -v USER_HOME:${HOME} \
1017     -v WORKSPACE:/tmp \
1018     ${TESTOPTIONS} ${SUITES} || true
1019
1020 echo "Examining the files in data/log and checking file size"
1021 ssh ${ODL_SYSTEM_IP} "ls -altr /tmp/${BUNDLEFOLDER}/data/log/"
1022 ssh ${ODL_SYSTEM_IP} "du -hs /tmp/${BUNDLEFOLDER}/data/log/*"
1023
1024 echo "Tests Executed"
1025 collect_logs
1026
1027 true  # perhaps Jenkins is testing last exit code
1028 # vim: ts=4 sw=4 sts=4 et ft=sh :