Add -Pignore-lispflowmapping-integrationtest
[releng/builder.git] / jjb / integration / integration-deploy-openstack-run-test.sh
1 #!/bin/bash
2 # Activate robotframework virtualenv
3 # ${ROBOT_VENV} comes from the integration-install-robotframework.sh
4 # script.
5 # shellcheck source=${ROBOT_VENV}/bin/activate disable=SC1091
6 source ${ROBOT_VENV}/bin/activate
7 source /tmp/common-functions.sh ${BUNDLEFOLDER}
8
9 PYTHON="${ROBOT_VENV}/bin/python"
10 SSH="ssh -t -t"
11 ADMIN_PASSWORD="admin"
12 OPENSTACK_MASTER_CLIENTS_VERSION="queens"
13
14 # TODO: remove this work to run changes.py if/when it's moved higher up to be visible at the Robot level
15 printf "\nshowing recent changes that made it into the distribution used by this job:\n"
16 $PYTHON -m pip install --upgrade urllib3
17 python ${WORKSPACE}/test/tools/distchanges/changes.py -d /tmp/distribution_folder \
18                   -u ${ACTUAL_BUNDLE_URL} -b ${DISTROBRANCH} \
19                   -r ssh://jenkins-${SILO}@git.opendaylight.org:29418 || true
20
21 printf "\nshowing recent changes that made it into integration/test used by this job:\n"
22 cd ${WORKSPACE}/test
23 printf "Hash    Author Date                    Commit Date                    Author               Subject\n"
24 printf "%s\n" "------- ------------------------------ ------------------------------ -------------------- -----------------------------"
25 git --no-pager log --pretty=format:'%h %<(30)%ad %<(30)%cd %<(20,trunc)%an%d %s' -n20
26 printf "\n"
27 cd -
28
29 cat << EOF
30 #################################################
31 ##         Deploy Openstack 3-node             ##
32 #################################################
33 EOF
34
35 # Catch command errors and collect logs.
36 # This ensures logs are collected when script commands fail rather than simply exiting.
37 function trap_handler() {
38     local prog="$0"
39     local lastline="$1"
40     local lasterr="$2"
41     echo "trap_hanlder: ${prog}: line ${lastline}: exit status of last command: ${lasterr}"
42     echo "trap_handler: command: ${BASH_COMMAND}"
43     exit 1
44 } # trap_handler()
45
46 trap 'trap_handler ${LINENO} ${$?}' ERR
47
48 function print_job_parameters() {
49     cat << EOF
50
51 Job parameters:
52 DISTROBRANCH: ${DISTROBRANCH}
53 DISTROSTREAM: ${DISTROSTREAM}
54 BUNDLE_URL: ${BUNDLE_URL}
55 CONTROLLERFEATURES: ${CONTROLLERFEATURES}
56 CONTROLLERDEBUGMAP: ${CONTROLLERDEBUGMAP}
57 TESTPLAN: ${TESTPLAN}
58 SUITES: ${SUITES}
59 PATCHREFSPEC: ${PATCHREFSPEC}
60 OPENSTACK_BRANCH: ${OPENSTACK_BRANCH}
61 DEVSTACK_HASH: ${DEVSTACK_HASH}
62 ODL_ML2_DRIVER_REPO: ${ODL_ML2_DRIVER_REPO}
63 ODL_ML2_BRANCH: ${ODL_ML2_BRANCH}
64 ODL_ML2_DRIVER_VERSION: ${ODL_ML2_DRIVER_VERSION}
65 ODL_ML2_PORT_BINDING: ${ODL_ML2_PORT_BINDING}
66 DEVSTACK_KUBERNETES_PLUGIN_REPO: ${DEVSTACK_KUBERNETES_PLUGIN_REPO}
67 DEVSTACK_LBAAS_PLUGIN_REPO: ${DEVSTACK_LBAAS_PLUGIN_REPO}
68 DEVSTACK_NETWORKING_SFC_PLUGIN_REPO: ${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO}
69 ODL_ENABLE_L3_FWD: ${ODL_ENABLE_L3_FWD}
70 IPSEC_VXLAN_TUNNELS_ENABLED: ${IPSEC_VXLAN_TUNNELS_ENABLED}
71 PUBLIC_BRIDGE: ${PUBLIC_BRIDGE}
72 ENABLE_HAPROXY_FOR_NEUTRON: ${ENABLE_HAPROXY_FOR_NEUTRON}
73 ENABLE_OS_SERVICES: ${ENABLE_OS_SERVICES}
74 ENABLE_OS_COMPUTE_SERVICES: ${ENABLE_OS_COMPUTE_SERVICES}
75 ENABLE_OS_NETWORK_SERVICES: ${ENABLE_OS_NETWORK_SERVICES}
76 ENABLE_OS_PLUGINS: ${ENABLE_OS_PLUGINS}
77 DISABLE_OS_SERVICES: ${DISABLE_OS_SERVICES}
78 TENANT_NETWORK_TYPE: ${TENANT_NETWORK_TYPE}
79 SECURITY_GROUP_MODE: ${SECURITY_GROUP_MODE}
80 PUBLIC_PHYSICAL_NETWORK: ${PUBLIC_PHYSICAL_NETWORK}
81 ENABLE_NETWORKING_L2GW: ${ENABLE_NETWORKING_L2GW}
82 CREATE_INITIAL_NETWORKS: ${CREATE_INITIAL_NETWORKS}
83 LBAAS_SERVICE_PROVIDER: ${LBAAS_SERVICE_PROVIDER}
84 NUM_OPENSTACK_SITES: ${NUM_OPENSTACK_SITES}
85 ODL_SFC_DRIVER: ${ODL_SFC_DRIVER}
86 ODL_SNAT_MODE: ${ODL_SNAT_MODE}
87
88 EOF
89 }
90
91 print_job_parameters
92
93 function create_etc_hosts() {
94     NODE_IP=$1
95     CTRL_IP=$2
96     : > ${WORKSPACE}/hosts_file
97     for iter in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`
98     do
99         COMPUTE_IP=OPENSTACK_COMPUTE_NODE_${iter}_IP
100         if [ "${!COMPUTE_IP}" == "${NODE_IP}" ]; then
101            CONTROL_HNAME=$(${SSH}  ${CTRL_IP}  "hostname")
102            echo "${CTRL_IP}   ${CONTROL_HNAME}" >> ${WORKSPACE}/hosts_file
103         else
104            COMPUTE_HNAME=$(${SSH}  ${!COMPUTE_IP}  "hostname")
105            echo "${!COMPUTE_IP}   ${COMPUTE_HNAME}" >> ${WORKSPACE}/hosts_file
106         fi
107     done
108
109     echo "Created the hosts file for ${NODE_IP}:"
110     cat ${WORKSPACE}/hosts_file
111 } # create_etc_hosts()
112
113 #function to install Openstack Clients for Testing
114 #This will pull the latest versions compatiable with the
115 # openstack release
116 function install_openstack_clients_in_robot_vm() {
117     packages=("python-novaclient" "python-neutronclient" "python-openstackclient")
118     local os_plugins
119     os_plugins=$(csv2ssv "${ENABLE_OS_PLUGINS}")
120     for plugin_name in $os_plugins; do
121         if [ "$plugin_name" == "networking-sfc" ]; then
122             packages+=("networking-sfc")
123         fi
124     done
125     openstack_version=$(echo ${OPENSTACK_BRANCH} | cut -d/ -f2)
126     #If the job tests "master", we will use the clients from previous released stable version to avoid failures
127     if [ "${openstack_version}" == "master" ]; then
128        openstack_version=${OPENSTACK_MASTER_CLIENTS_VERSION}
129     fi
130     for package in ${packages[*]}; do
131        echo "Get the current support version of the package ${package}"
132        wget https://raw.githubusercontent.com/openstack/requirements/stable/${openstack_version}/upper-constraints.txt -O /tmp/constraints.txt 2>/dev/null
133        echo "$PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt"
134        $PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt
135        echo "$PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt"
136        $PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt
137     done
138
139     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
140         #networking-l2gw is not officially available in any release yet. Gettting the latest stable version.
141         $PYTHON -m pip install networking-l2gw==11.0.0
142     fi
143 }
144
145 function is_openstack_feature_enabled() {
146     local feature=$1
147     for enabled_feature in $(csv2ssv ${ENABLE_OS_SERVICES})
148     do
149         if [ "${enabled_feature}" == "${feature}" ]; then
150            echo 1
151            return
152         fi
153     done
154     echo 0
155 }
156
157 function fix_libvirt_version_n_cpu_pike() {
158     local ip=$1
159     ${SSH} ${ip} "
160         cd /opt/stack;
161         git clone https://git.openstack.org/openstack/requirements;
162         cd requirements;
163         git checkout stable/pike;
164         sed -i s/libvirt-python===3.5.0/libvirt-python===4.2.0/ upper-constraints.txt
165    "
166 }
167
168 #Function to install rdo release
169 # This will help avoiding installing wrong version of packages which causes
170 # functionality failures
171 function install_rdo_release() {
172     local ip=$1
173     case ${OPENSTACK_BRANCH} in
174        *pike*)
175           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-pike/rdo-release-pike-1.noarch.rpm"
176           ;;
177
178        *queens*)
179           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
180           ;;
181
182        master)
183           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
184           ;;
185     esac
186 }
187
188
189 # Add enable_services and disable_services to the local.conf
190 function add_os_services() {
191     local core_services=$1
192     local enable_services=$2
193     local disable_services=$3
194     local local_conf_file_name=$4
195     local enable_network_services=$5
196
197     cat >> ${local_conf_file_name} << EOF
198 enable_service $(csv2ssv "${core_services}")
199 EOF
200     if [ -n "${enable_services}" ]; then
201         cat >> ${local_conf_file_name} << EOF
202 enable_service $(csv2ssv "${enable_services}")
203 EOF
204     fi
205     if [ -n "${disable_services}" ]; then
206         cat >> ${local_conf_file_name} << EOF
207 disable_service $(csv2ssv "${disable_services}")
208 EOF
209     fi
210     if [ -n "${enable_network_services}" ]; then
211         cat >> ${local_conf_file_name} << EOF
212 enable_service $(csv2ssv "${enable_network_services}")
213 EOF
214     fi
215 }
216
217 function create_control_node_local_conf() {
218     HOSTIP=$1
219     MGRIP=$2
220     ODL_OVS_MANAGERS="$3"
221
222     local_conf_file_name=${WORKSPACE}/local.conf_control_${HOSTIP}
223     cat > ${local_conf_file_name} << EOF
224 [[local|localrc]]
225 LOGFILE=stack.sh.log
226 USE_SCREEN=True
227 SCREEN_LOGDIR=/opt/stack/data/log
228 LOG_COLOR=False
229 RECLONE=${RECLONE}
230 # Increase the wait used by stack to poll for services
231 SERVICE_TIMEOUT=120
232
233 disable_all_services
234 EOF
235
236     add_os_services "${CORE_OS_CONTROL_SERVICES}" "${ENABLE_OS_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}" "${ENABLE_OS_NETWORK_SERVICES}"
237
238     cat >> ${local_conf_file_name} << EOF
239
240 HOST_IP=${HOSTIP}
241 SERVICE_HOST=\$HOST_IP
242 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
243 NEUTRON_CREATE_INITIAL_NETWORKS=${CREATE_INITIAL_NETWORKS}
244
245 ODL_MODE=manual
246 ODL_MGR_IP=${MGRIP}
247 ODL_PORT=${ODL_PORT}
248 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
249 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
250
251 MYSQL_HOST=\$SERVICE_HOST
252 RABBIT_HOST=\$SERVICE_HOST
253 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
254 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
255 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
256
257 ADMIN_PASSWORD=${ADMIN_PASSWORD}
258 DATABASE_PASSWORD=${ADMIN_PASSWORD}
259 RABBIT_PASSWORD=${ADMIN_PASSWORD}
260 SERVICE_TOKEN=${ADMIN_PASSWORD}
261 SERVICE_PASSWORD=${ADMIN_PASSWORD}
262
263 NEUTRON_LBAAS_SERVICE_PROVIDERV2=${LBAAS_SERVICE_PROVIDER} # Only relevant if neutron-lbaas plugin is enabled
264 NEUTRON_SFC_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
265 NEUTRON_FLOWCLASSIFIER_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
266 ETCD_PORT=2379
267 EOF
268     if [ "${TENANT_NETWORK_TYPE}" == "local" ]; then
269         cat >> ${local_conf_file_name} << EOF
270 ENABLE_TENANT_TUNNELS=false
271 EOF
272     fi
273
274     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
275         echo "ODL_V2DRIVER=True" >> ${local_conf_file_name}
276     fi
277     IFS=,
278     for plugin_name in ${ENABLE_OS_PLUGINS}; do
279         if [ "$plugin_name" == "networking-odl" ]; then
280             ENABLE_PLUGIN_ARGS="${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}"
281         elif [ "$plugin_name" == "kuryr-kubernetes" ]; then
282             ENABLE_PLUGIN_ARGS="${DEVSTACK_KUBERNETES_PLUGIN_REPO} master" # note: kuryr-kubernetes only exists in master at the moment
283         elif [ "$plugin_name" == "neutron-lbaas" ]; then
284             ENABLE_PLUGIN_ARGS="${DEVSTACK_LBAAS_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
285             IS_LBAAS_PLUGIN_ENABLED="yes"
286         elif [ "$plugin_name" == "networking-sfc" ]; then
287             ENABLE_PLUGIN_ARGS="${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO} master"
288             IS_SFC_PLUGIN_ENABLED="yes"
289         else
290             echo "Error: Invalid plugin $plugin_name, unsupported"
291             continue
292         fi
293         cat >> ${local_conf_file_name} << EOF
294
295 enable_plugin ${plugin_name} ${ENABLE_PLUGIN_ARGS}
296 EOF
297     done
298     unset IFS
299
300     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
301         cat >> ${local_conf_file_name} << EOF
302
303 enable_plugin networking-l2gw ${NETWORKING_L2GW_DRIVER} ${ODL_ML2_BRANCH}
304 NETWORKING_L2GW_SERVICE_DRIVER=L2GW:OpenDaylight:networking_odl.l2gateway.driver_v2.OpenDaylightL2gwDriver:default
305 EOF
306     fi
307
308     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
309         cat >> ${local_conf_file_name} << EOF
310
311 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
312 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
313 ML2_VLAN_RANGES=${PUBLIC_PHYSICAL_NETWORK}
314 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
315 EOF
316
317         if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
318            SERVICE_PLUGINS="odl-router_v2"
319         else
320            SERVICE_PLUGINS="odl-router"
321         fi
322         if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
323             SERVICE_PLUGINS+=", networking_l2gw.services.l2gateway.plugin.L2GatewayPlugin"
324         fi
325         if [ "${IS_LBAAS_PLUGIN_ENABLED}" == "yes" ]; then
326             SERVICE_PLUGINS+=", lbaasv2"
327         fi
328         if [ "${IS_SFC_PLUGIN_ENABLED}" == "yes" ]; then
329             SERVICE_PLUGINS+=", networking_sfc.services.flowclassifier.plugin.FlowClassifierPlugin,networking_sfc.services.sfc.plugin.SfcPlugin"
330         fi
331     fi #check for ODL_ENABLE_L3_FWD
332
333     cat >> ${local_conf_file_name} << EOF
334
335 [[post-config|\$NEUTRON_CONF]]
336 [DEFAULT]
337 service_plugins = ${SERVICE_PLUGINS}
338
339 [[post-config|/etc/neutron/plugins/ml2/ml2_conf.ini]]
340 [agent]
341 minimize_polling=True
342
343 [ml2]
344 # Needed for VLAN provider tests - because our provider networks are always encapsulated in VXLAN (br-physnet1)
345 # MTU(1400) + VXLAN(50) + VLAN(4) = 1454 < MTU eth0/br-physnet1(1458)
346 physical_network_mtus = ${PUBLIC_PHYSICAL_NETWORK}:1400
347 path_mtu = 1458
348
349 [[post-config|/etc/neutron/dhcp_agent.ini]]
350 [DEFAULT]
351 force_metadata = True
352 enable_isolated_metadata = True
353
354 [[post-config|/etc/nova/nova.conf]]
355 [DEFAULT]
356 force_config_drive = False
357 force_raw_images = False
358
359 [scheduler]
360 discover_hosts_in_cells_interval = 30
361 EOF
362
363     echo "Control local.conf created:"
364     cat ${local_conf_file_name}
365 } # create_control_node_local_conf()
366
367 function create_compute_node_local_conf() {
368     HOSTIP=$1
369     SERVICEHOST=$2
370     MGRIP=$3
371     ODL_OVS_MANAGERS="$4"
372
373     local_conf_file_name=${WORKSPACE}/local.conf_compute_${HOSTIP}
374     cat > ${local_conf_file_name} << EOF
375 [[local|localrc]]
376 LOGFILE=stack.sh.log
377 LOG_COLOR=False
378 USE_SCREEN=True
379 SCREEN_LOGDIR=/opt/stack/data/log
380 RECLONE=${RECLONE}
381 # Increase the wait used by stack to poll for the nova service on the control node
382 NOVA_READY_TIMEOUT=1800
383
384 disable_all_services
385 EOF
386
387     add_os_services "${CORE_OS_COMPUTE_SERVICES}" "${ENABLE_OS_COMPUTE_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}"
388
389     cat >> ${local_conf_file_name} << EOF
390 HOST_IP=${HOSTIP}
391 SERVICE_HOST=${SERVICEHOST}
392 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
393
394 ODL_MODE=manual
395 ODL_MGR_IP=${MGRIP}
396 ODL_PORT=${ODL_PORT}
397 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
398 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
399
400 Q_HOST=\$SERVICE_HOST
401 MYSQL_HOST=\$SERVICE_HOST
402 RABBIT_HOST=\$SERVICE_HOST
403 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
404 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
405 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
406
407 ADMIN_PASSWORD=${ADMIN_PASSWORD}
408 DATABASE_PASSWORD=${ADMIN_PASSWORD}
409 RABBIT_PASSWORD=${ADMIN_PASSWORD}
410 SERVICE_TOKEN=${ADMIN_PASSWORD}
411 SERVICE_PASSWORD=${ADMIN_PASSWORD}
412 EOF
413
414     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-odl ]]; then
415         cat >> ${local_conf_file_name} << EOF
416
417 enable_plugin networking-odl ${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}
418 EOF
419     fi
420
421     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
422         cat >> ${local_conf_file_name} << EOF
423
424 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
425 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
426 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
427 Q_L3_ENABLED=True
428 ODL_L3=${ODL_L3}
429 EOF
430     fi
431
432     cat >> ${local_conf_file_name} << EOF
433
434 [[post-config|/etc/nova/nova.conf]]
435 [api]
436 auth_strategy = keystone
437 [DEFAULT]
438 use_neutron = True
439 force_raw_images = False
440 EOF
441
442     echo "Compute local.conf created:"
443     cat ${local_conf_file_name}
444 } # create_compute_node_local_conf()
445
446 function configure_haproxy_for_neutron_requests() {
447     MGRIP=$1
448     # shellcheck disable=SC2206
449     ODL_IPS=(${2//,/ })
450
451     cat > ${WORKSPACE}/install_ha_proxy.sh<< EOF
452 sudo systemctl stop firewalld
453 sudo yum -y install policycoreutils-python haproxy
454 EOF
455
456 cat > ${WORKSPACE}/haproxy.cfg << EOF
457 global
458   daemon
459   group  haproxy
460   log  /dev/log local0
461   maxconn  20480
462   pidfile  /tmp/haproxy.pid
463   user  haproxy
464
465 defaults
466   log  global
467   maxconn  4096
468   mode  tcp
469   retries  3
470   timeout  http-request 10s
471   timeout  queue 1m
472   timeout  connect 10s
473   timeout  client 1m
474   timeout  server 1m
475   timeout  check 10s
476
477 listen opendaylight
478   bind ${MGRIP}:8080
479   balance source
480
481 listen opendaylight_rest
482   bind ${MGRIP}:8181
483   balance source
484
485 listen opendaylight_websocket
486   bind ${MGRIP}:8185
487   balance source
488
489 EOF
490
491     odlindex=1
492     for odlip in ${ODL_IPS[*]}; do
493         sed -i "/listen opendaylight$/a server controller-${odlindex} ${odlip}:8080 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
494         sed -i "/listen opendaylight_rest$/a server controller-rest-${odlindex} ${odlip}:8181 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
495         sed -i "/listen opendaylight_websocket$/a server controller-websocket-${odlindex} ${odlip}:8185 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
496         odlindex=$((odlindex+1))
497     done
498
499
500     echo "Dump haproxy.cfg"
501     cat ${WORKSPACE}/haproxy.cfg
502
503     cat > ${WORKSPACE}/deploy_ha_proxy.sh<< EOF
504 sudo chown haproxy:haproxy /tmp/haproxy.cfg
505 sudo sed -i 's/\\/etc\\/haproxy\\/haproxy.cfg/\\/tmp\\/haproxy.cfg/g' /usr/lib/systemd/system/haproxy.service
506 sudo /usr/sbin/semanage permissive -a haproxy_t
507 sudo systemctl restart haproxy
508 sleep 3
509 sudo netstat -tunpl
510 sudo systemctl status haproxy
511 true
512 EOF
513
514     scp ${WORKSPACE}/install_ha_proxy.sh ${MGRIP}:/tmp
515     ${SSH} ${MGRIP} "sudo bash /tmp/install_ha_proxy.sh"
516     scp ${WORKSPACE}/haproxy.cfg ${MGRIP}:/tmp
517     scp ${WORKSPACE}/deploy_ha_proxy.sh ${MGRIP}:/tmp
518     ${SSH} ${MGRIP} "sudo bash /tmp/deploy_ha_proxy.sh"
519 } # configure_haproxy_for_neutron_requests()
520
521 # Following three functions are debugging helpers when debugging devstack changes.
522 # Keeping them for now so we can simply call them when needed.
523 ctrlhn=""
524 comp1hn=""
525 comp2hn=""
526 function get_hostnames () {
527     set +e
528     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
529     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
530     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
531     ctrlhn=$(${SSH} ${ctrlip} "hostname")
532     comp1hn=$(${SSH} ${comp1ip} "hostname")
533     comp2hn=$(${SSH} ${comp2ip} "hostname")
534     echo "hostnames: ${ctrlhn}, ${comp1hn}, ${comp2hn}"
535     set -e
536 }
537
538 function check_firewall() {
539     set +e
540     echo $-
541     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
542     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
543     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
544
545     echo "check_firewall on control"
546     ${SSH} ${ctrlip} "
547         sudo systemctl status firewalld
548         sudo systemctl -l status iptables
549         sudo iptables --line-numbers -nvL
550     " || true
551     echo "check_firewall on compute 1"
552     ${SSH} ${comp1ip} "
553         sudo systemctl status firewalld
554         sudo systemctl -l status iptables
555         sudo iptables --line-numbers -nvL
556     " || true
557     echo "check_firewall on compute 2"
558     ${SSH} ${comp2ip} "
559         sudo systemctl status firewalld
560         sudo systemctl -l status iptables
561         sudo iptables --line-numbers -nvL
562     " || true
563 }
564
565 function get_service () {
566     set +e
567     local iter=$1
568     #local idx=$2
569     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
570     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
571
572     #if [ ${idx} -eq 1 ]; then
573         if [ ${iter} -eq 1 ] || [ ${iter} -gt 16 ]; then
574             curl http://${ctrlip}:5000
575             curl http://${ctrlip}:35357
576             curl http://${ctrlip}/identity
577             ${SSH} ${ctrlip} "
578                 source /opt/stack/devstack/openrc admin admin;
579                 env
580                 openstack configuration show --unmask;
581                 openstack service list
582                 openstack --os-cloud devstack-admin --os-region RegionOne compute service list
583                 openstack hypervisor list;
584             " || true
585             check_firewall
586         fi
587     #fi
588     set -e
589 }
590
591 # Check if rabbitmq is ready by looking for a pid in it's status.
592 # The function returns the status of the grep command which callers can check.
593 function is_rabbitmq_ready() {
594     local -r ip=${1}
595     local grepfor="nova_cell1"
596     rm -f rabbit.txt
597     ${SSH} ${ip} "sudo rabbitmqctl list_vhosts" > rabbit.txt
598     grep ${grepfor} rabbit.txt
599 }
600
601 # retry the given command ($3) until success for a number of iterations ($1)
602 # sleeping ($2) between tries.
603 function retry() {
604     local -r -i max_tries=${1}
605     local -r -i sleep_time=${2}
606     local -r cmd=${3}
607     local -i retries=1
608     local -i rc=1
609     while true; do
610         echo "retry ${cmd}: attempt: ${retries}"
611         ${cmd}
612         rc=$?
613         if ((${rc} == 0)); then
614             break;
615         else
616             if ((${retries} == ${max_tries})); then
617                 break
618             else
619                 ((retries++))
620                 sleep ${sleep_time}
621             fi
622         fi
623     done
624     return ${rc}
625 }
626
627 # if we are using the new netvirt impl, as determined by the feature name
628 # odl-netvirt-openstack (note: old impl is odl-ovsdb-openstack) then we
629 # want PROVIDER_MAPPINGS to be used -- this should be fixed if we want to support
630 # external networks in legacy netvirt
631 if [[ ${CONTROLLERFEATURES} == *"odl-netvirt-openstack"* ]]; then
632   ODL_PROVIDER_MAPPINGS="\${PUBLIC_PHYSICAL_NETWORK}:${PUBLIC_BRIDGE}"
633 else
634   ODL_PROVIDER_MAPPINGS=
635 fi
636
637 # if we are using the old netvirt impl, as determined by the feature name
638 # odl-ovsdb-openstack (note: new impl is odl-netvirt-openstack) then we
639 # want ODL_L3 to be True.  New impl wants it False
640 if [[ ${CONTROLLERFEATURES} == *"odl-ovsdb-openstack"* ]]; then
641     ODL_L3=True
642 else
643     ODL_L3=False
644 fi
645
646 RECLONE=False
647 ODL_PORT=8181
648
649 # Always compare the lists below against the devstack upstream ENABLED_SERVICES in
650 # https://github.com/openstack-dev/devstack/blob/master/stackrc#L52
651 # ODL CSIT does not use vnc, cinder, q-agt, q-l3 or horizon so they are not included below.
652 # collect performance stats
653 CORE_OS_CONTROL_SERVICES="dstat"
654 # Glance
655 CORE_OS_CONTROL_SERVICES+=",g-api,g-reg"
656 # Keystone
657 CORE_OS_CONTROL_SERVICES+=",key"
658 # Nova - services to support libvirt
659 CORE_OS_CONTROL_SERVICES+=",n-api,n-api-meta,n-cauth,n-cond,n-crt,n-obj,n-sch"
660 # ODL - services to connect to ODL
661 CORE_OS_CONTROL_SERVICES+=",odl-compute,odl-neutron"
662 # Additional services
663 CORE_OS_CONTROL_SERVICES+=",mysql,rabbit"
664
665 # collect performance stats
666 CORE_OS_COMPUTE_SERVICES="dstat"
667 # computes only need nova and odl
668 CORE_OS_COMPUTE_SERVICES+=",n-cpu,odl-compute"
669
670 cat > ${WORKSPACE}/disable_firewall.sh << EOF
671 sudo systemctl stop firewalld
672 # Open these ports to match the tutorial vms
673 # http/https (80/443), samba (445), netbios (137,138,139)
674 sudo iptables -I INPUT -p tcp -m multiport --dports 80,443,139,445 -j ACCEPT
675 sudo iptables -I INPUT -p udp -m multiport --dports 137,138 -j ACCEPT
676 # OpenStack services as well as vxlan tunnel ports 4789 and 9876
677 # identity public/admin (5000/35357), ampq (5672), vnc (6080), nova (8774), glance (9292), neutron (9696)
678 sudo sudo iptables -I INPUT -p tcp -m multiport --dports 5000,5672,6080,8774,9292,9696,35357 -j ACCEPT
679 sudo sudo iptables -I INPUT -p udp -m multiport --dports 4789,9876 -j ACCEPT
680 sudo iptables-save > /etc/sysconfig/iptables
681 sudo systemctl restart iptables
682 sudo iptables --line-numbers -nvL
683 true
684 EOF
685
686 cat > ${WORKSPACE}/get_devstack.sh << EOF
687 sudo systemctl stop firewalld
688 sudo yum install bridge-utils python-pip -y
689 #sudo systemctl stop  NetworkManager
690 #Disable NetworkManager and kill dhclient and dnsmasq
691 sudo systemctl stop NetworkManager
692 sudo killall dhclient
693 sudo killall dnsmasq
694 #Workaround for mysql failure
695 echo "127.0.0.1   localhost \${HOSTNAME}" >> /tmp/hosts
696 echo "::1         localhost \${HOSTNAME}" >> /tmp/hosts
697 sudo mv /tmp/hosts /etc/hosts
698 sudo mkdir /opt/stack
699 echo "Create RAM disk for /opt/stack"
700 sudo mount -t tmpfs -o size=2G tmpfs /opt/stack
701 sudo chmod 777 /opt/stack
702 cd /opt/stack
703 echo "git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}"
704 git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}
705 cd devstack
706 if [ -n "${DEVSTACK_HASH}" ]; then
707     echo "git checkout ${DEVSTACK_HASH}"
708     git checkout ${DEVSTACK_HASH}
709 fi
710 git --no-pager log --pretty=format:'%h %<(13)%ar%<(13)%cr %<(20,trunc)%an%d %s%b' -n20
711 echo
712
713 echo "workaround: do not upgrade openvswitch"
714 sudo yum install -y yum-plugin-versionlock
715 sudo yum versionlock add openvswitch
716
717 #Install qemu-img command in Control Node for Pike
718 echo "Install qemu-img application"
719 sudo yum install -y qemu-img
720 EOF
721
722 cat > "${WORKSPACE}/setup_host_cell_mapping.sh" << EOF
723 sudo nova-manage cell_v2 map_cell0
724 sudo nova-manage cell_v2 simple_cell_setup
725 sudo nova-manage db sync
726 sudo nova-manage cell_v2 discover_hosts
727 EOF
728
729 NUM_OPENSTACK_SITES=${NUM_OPENSTACK_SITES:-1}
730 compute_index=1
731 odl_index=1
732 os_node_list=()
733 os_interval=$(( ${NUM_OPENSTACK_SYSTEM} / ${NUM_OPENSTACK_SITES} ))
734 ha_proxy_index=${os_interval}
735
736 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
737     if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
738         echo "Configure HAProxy"
739         ODL_HAPROXYIP_PARAM=OPENSTACK_HAPROXY_${i}_IP
740         ha_proxy_index=$(( $ha_proxy_index + $os_interval ))
741         odl_index=$(((i - 1) * 3 + 1))
742         ODL_IP_PARAM1=ODL_SYSTEM_$((odl_index++))_IP
743         ODL_IP_PARAM2=ODL_SYSTEM_$((odl_index++))_IP
744         ODL_IP_PARAM3=ODL_SYSTEM_$((odl_index++))_IP
745         ODLMGRIP[$i]=${!ODL_HAPROXYIP_PARAM} # ODL Northbound uses HAProxy VIP
746         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM1},${!ODL_IP_PARAM2},${!ODL_IP_PARAM3}" # OVSDB connects to all ODL IPs
747         configure_haproxy_for_neutron_requests ${!ODL_HAPROXYIP_PARAM} "${ODL_OVS_MGRS[$i]}"
748     else
749         ODL_IP_PARAM=ODL_SYSTEM_${i}_IP
750         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM}" # ODL Northbound uses ODL IP
751         ODLMGRIP[$i]=${!ODL_IP_PARAM} # OVSDB connects to ODL IP
752     fi
753 done
754
755 # Begin stacking the nodes, starting with the controller(s) and then the compute(s)
756
757 for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
758     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
759     echo "Configure the stack of the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${!CONTROLIP}"
760     scp ${WORKSPACE}/disable_firewall.sh ${!CONTROLIP}:/tmp
761     ${SSH} ${!CONTROLIP} "sudo bash /tmp/disable_firewall.sh"
762     create_etc_hosts ${!CONTROLIP}
763     scp ${WORKSPACE}/hosts_file ${!CONTROLIP}:/tmp/hosts
764     scp ${WORKSPACE}/get_devstack.sh ${!CONTROLIP}:/tmp
765     # devstack Master is yet to migrate fully to lib/neutron, there are some ugly hacks that is
766     # affecting the stacking.
767     #Workaround For Queens, Make the physical Network as physnet1 in lib/neutron
768     #Workaround Comment out creating initial Networks in lib/neutron
769     ${SSH} ${!CONTROLIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
770     if [ "${ODL_ML2_BRANCH}" == "stable/queens" ]; then
771        ssh ${!CONTROLIP} "sed -i 's/flat_networks public/flat_networks public,physnet1/' /opt/stack/devstack/lib/neutron"
772        ssh ${!CONTROLIP} "sed -i '186i iniset \$NEUTRON_CORE_PLUGIN_CONF ml2_type_vlan network_vlan_ranges public:1:4094,physnet1:1:4094' /opt/stack/devstack/lib/neutron"
773     fi
774     create_control_node_local_conf ${!CONTROLIP} ${ODLMGRIP[$i]} "${ODL_OVS_MGRS[$i]}"
775     scp ${WORKSPACE}/local.conf_control_${!CONTROLIP} ${!CONTROLIP}:/opt/stack/devstack/local.conf
776     echo "Install rdo release to avoid incompatible Package versions"
777     install_rdo_release ${!CONTROLIP}
778     echo "Stack the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${CONTROLIP}"
779     ssh ${!CONTROLIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
780     ssh ${!CONTROLIP} "ps -ef | grep stack.sh"
781     ssh ${!CONTROLIP} "ls -lrt /opt/stack/devstack/nohup.out"
782     os_node_list+=("${!CONTROLIP}")
783 done
784
785 # This is a backup to the CELLSV2_SETUP=singleconductor workaround. Keeping it here as an easy lookup
786 # if needed.
787 # Let the control node get started to avoid a race condition where the computes start and try to access
788 # the nova_cell1 on the control node before it is created. If that happens, the nova-compute service on the
789 # compute exits and does not attempt to restart.
790 # 180s is chosen because in test runs the control node usually finished in 17-20 minutes and the computes finished
791 # in 17 minutes, so take the max difference of 3 minutes and the jobs should still finish around the same time.
792 # one of the following errors is seen in the compute n-cpu.log:
793 # Unhandled error: NotAllowed: Connection.open: (530) NOT_ALLOWED - access to vhost 'nova_cell1' refused for user 'stackrabbit'
794 # AccessRefused: (0, 0): (403) ACCESS_REFUSED - Login was refused using authentication mechanism AMQPLAIN. For details see the broker logfile.
795 # Compare that timestamp to this log in the control stack.log: sudo rabbitmqctl set_permissions -p nova_cell1 stackrabbit
796 # If the n-cpu.log is earlier than the control stack.log timestamp then the failure condition is likely hit.
797 if [ ${NUM_OPENSTACK_COMPUTE_NODES} -gt 0 ]; then
798     WAIT_FOR_RABBITMQ_MINUTES=60
799     echo "Wait a maximum of ${WAIT_FOR_RABBITMQ_MINUTES}m until rabbitmq is ready and nova_cell1 created to allow the controller to create nova_cell1 before the computes need it"
800     set +e
801     retry ${WAIT_FOR_RABBITMQ_MINUTES} 60 "is_rabbitmq_ready ${OPENSTACK_CONTROL_NODE_1_IP}"
802     rc=$?
803     set -e
804     if ((${rc} == 0)); then
805       echo "rabbitmq is ready, starting ${NUM_OPENSTACK_COMPUTE_NODES} compute(s)"
806     else
807       echo "rabbitmq was not ready in ${WAIT_FOR_RABBITMQ_MINUTES}m"
808       exit 1
809     fi
810 fi
811
812 for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
813     NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
814     SITE_INDEX=$((((i - 1) / NUM_COMPUTES_PER_SITE) + 1)) # We need the site index to infer the control node IP for this compute
815     COMPUTEIP=OPENSTACK_COMPUTE_NODE_${i}_IP
816     CONTROLIP=OPENSTACK_CONTROL_NODE_${SITE_INDEX}_IP
817     echo "Configure the stack of the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${!COMPUTEIP}"
818     scp ${WORKSPACE}/disable_firewall.sh "${!COMPUTEIP}:/tmp"
819     ${SSH} "${!COMPUTEIP}" "sudo bash /tmp/disable_firewall.sh"
820     create_etc_hosts ${!COMPUTEIP} ${!CONTROLIP}
821     scp ${WORKSPACE}/hosts_file ${!COMPUTEIP}:/tmp/hosts
822     scp ${WORKSPACE}/get_devstack.sh  ${!COMPUTEIP}:/tmp
823     ${SSH} ${!COMPUTEIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
824     if [ "${ODL_ML2_BRANCH}" == "stable/pike" ]; then
825         echo "Updating requirements for ${ODL_ML2_BRANCH}"
826         echo "Workaround for libvirt-python failing installation"
827         echo "Modify upper-constraints to use libvirt-python 4.2.0"
828         fix_libvirt_version_n_cpu_pike ${!COMPUTEIP}
829     fi
830     create_compute_node_local_conf ${!COMPUTEIP} ${!CONTROLIP} ${ODLMGRIP[$SITE_INDEX]} "${ODL_OVS_MGRS[$SITE_INDEX]}"
831     scp ${WORKSPACE}/local.conf_compute_${!COMPUTEIP} ${!COMPUTEIP}:/opt/stack/devstack/local.conf
832     echo "Install rdo release to avoid incompatible Package versions"
833     install_rdo_release ${!COMPUTEIP}
834     echo "Stack the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${COMPUTEIP}"
835     ssh ${!COMPUTEIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
836     ssh ${!COMPUTEIP} "ps -ef | grep stack.sh"
837     os_node_list+=("${!COMPUTEIP}")
838 done
839
840 echo "nodelist: ${os_node_list[*]}"
841
842 # This script runs on the openstack nodes. It greps for a string that devstack writes when stacking is complete.
843 # The script then writes a status depending on the grep output that is later scraped by the robot vm to control
844 # the status polling.
845 cat > ${WORKSPACE}/check_stacking.sh << EOF
846 > /tmp/stack_progress
847 ps -ef | grep "stack.sh" | grep -v grep
848 ret=\$?
849 if [ \${ret} -eq 1 ]; then
850     grep "This is your host IP address:" /opt/stack/devstack/nohup.out
851     if [ \$? -eq 0 ]; then
852         echo "Stacking Complete" > /tmp/stack_progress
853     else
854         echo "Stacking Failed" > /tmp/stack_progress
855     fi
856 elif [ \${ret} -eq 0 ]; then
857     echo "Still Stacking" > /tmp/stack_progress
858 fi
859 EOF
860
861 # devstack debugging
862 # get_hostnames
863
864 # Check if the stacking is finished. Poll all nodes every 60s for one hour.
865 iteration=0
866 in_progress=1
867 while [ ${in_progress} -eq 1 ]; do
868     iteration=$(($iteration + 1))
869     for index in "${!os_node_list[@]}"; do
870         echo "node $index ${os_node_list[index]}: checking stacking status attempt ${iteration} of 60"
871         scp ${WORKSPACE}/check_stacking.sh  ${os_node_list[index]}:/tmp
872         ${SSH} ${os_node_list[index]} "bash /tmp/check_stacking.sh"
873         scp ${os_node_list[index]}:/tmp/stack_progress .
874         cat stack_progress
875         stacking_status=`cat stack_progress`
876         # devstack debugging
877         # get_service "${iteration}" "${index}"
878         if [ "$stacking_status" == "Still Stacking" ]; then
879             continue
880         elif [ "$stacking_status" == "Stacking Failed" ]; then
881             echo "node $index ${os_node_list[index]}: stacking has failed"
882             exit 1
883         elif [ "$stacking_status" == "Stacking Complete" ]; then
884             echo "node $index ${os_node_list[index]}: stacking complete"
885             unset 'os_node_list[index]'
886             if  [ ${#os_node_list[@]} -eq 0 ]; then
887                 in_progress=0
888             fi
889         fi
890     done
891     echo "sleep for a minute before the next check"
892     sleep 60
893     if [ ${iteration} -eq 60 ]; then
894         echo "stacking has failed - took longer than 60m"
895         exit 1
896     fi
897 done
898
899 # Further configuration now that stacking is complete.
900 NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
901 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
902     echo "Configure the Control Node"
903     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
904     # Gather Compute IPs for the site
905     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
906         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
907         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
908         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
909     done
910
911     echo "sleep for 60s and print hypervisor-list"
912     sleep 60
913     ${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; nova hypervisor-list"
914     # in the case that we are doing openstack (control + compute) all in one node, then the number of hypervisors
915     # will be the same as the number of openstack systems. However, if we are doing multinode openstack then the
916     # assumption is we have a single control node and the rest are compute nodes, so the number of expected hypervisors
917     # is one less than the total number of openstack systems
918     if [ $((NUM_OPENSTACK_SYSTEM / NUM_OPENSTACK_SITES)) -eq 1 ]; then
919         expected_num_hypervisors=1
920     else
921         expected_num_hypervisors=${NUM_COMPUTES_PER_SITE}
922     fi
923     num_hypervisors=$(${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; openstack hypervisor list -f value | wc -l" | tail -1 | tr -d "\r")
924     if ! [ "${num_hypervisors}" ] || ! [ ${num_hypervisors} -eq ${expected_num_hypervisors} ]; then
925         echo "Error: Only $num_hypervisors hypervisors detected, expected $expected_num_hypervisors"
926         exit 1
927     fi
928
929     # Gather Compute IPs for the site
930     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
931         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
932         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
933         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
934     done
935
936     # External Network
937     echo "prepare external networks by adding vxlan tunnels between all nodes on a separate bridge..."
938     # FIXME Should there be a unique gateway IP and devstack index for each site?
939     devstack_index=1
940     for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
941         # FIXME - Workaround, ODL (new netvirt) currently adds PUBLIC_BRIDGE as a port in br-int since it doesn't see such a bridge existing when we stack
942         ${SSH} $ip "sudo ovs-vsctl --if-exists del-port br-int $PUBLIC_BRIDGE"
943         ${SSH} $ip "sudo ovs-vsctl --may-exist add-br $PUBLIC_BRIDGE -- set bridge $PUBLIC_BRIDGE other-config:disable-in-band=true other_config:hwaddr=f6:00:00:ff:01:0$((devstack_index++))"
944     done
945
946     # ipsec support
947     if [ "${IPSEC_VXLAN_TUNNELS_ENABLED}" == "yes" ]; then
948         # shellcheck disable=SC2206
949         ALL_NODES=(${!CONTROLIP} ${COMPUTE_IPS[*]})
950         for ((inx_ip1=0; inx_ip1<$((${#ALL_NODES[@]} - 1)); inx_ip1++)); do
951             for ((inx_ip2=$((inx_ip1 + 1)); inx_ip2<${#ALL_NODES[@]}; inx_ip2++)); do
952                 KEY1=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
953                 KEY2=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
954                 ID=0x$(dd if=/dev/urandom count=4 bs=1 2> /dev/null| xxd -p -c 8)
955                 ip1=${ALL_NODES[$inx_ip1]}
956                 ip2=${ALL_NODES[$inx_ip2]}
957                 ${SSH} $ip1 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
958                 ${SSH} $ip1 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
959                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir out tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
960                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir in tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
961
962                 ${SSH} $ip2 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
963                 ${SSH} $ip2 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
964                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir out tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
965                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir in tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
966             done
967         done
968
969         for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
970             echo "ip xfrm configuration for node $ip:"
971             ${SSH} $ip "sudo ip xfrm policy list"
972             ${SSH} $ip "sudo ip xfrm state list"
973         done
974     fi
975
976     # Control Node - PUBLIC_BRIDGE will act as the external router
977     # Parameter values below are used in integration/test - changing them requires updates in intergration/test as well
978     EXTNET_GATEWAY_IP="10.10.10.250"
979     EXTNET_INTERNET_IP="10.9.9.9"
980     EXTNET_PNF_IP="10.10.10.253"
981     ${SSH} ${!CONTROLIP} "sudo ifconfig ${PUBLIC_BRIDGE} up ${EXTNET_GATEWAY_IP}/24"
982
983     # Control Node - external net PNF simulation
984     ${SSH} ${!CONTROLIP} "
985         sudo ip netns add pnf_ns;
986         sudo ip link add pnf_veth0 type veth peer name pnf_veth1;
987         sudo ip link set pnf_veth1 netns pnf_ns;
988         sudo ip link set pnf_veth0 up;
989         sudo ip netns exec pnf_ns ifconfig pnf_veth1 up ${EXTNET_PNF_IP}/24;
990         sudo ovs-vsctl add-port ${PUBLIC_BRIDGE} pnf_veth0;
991     "
992
993     # Control Node - external net internet address simulation
994     ${SSH} ${!CONTROLIP} "
995         sudo ip tuntap add dev internet_tap mode tap;
996         sudo ifconfig internet_tap up ${EXTNET_INTERNET_IP}/24;
997     "
998
999     # Computes
1000     compute_index=1
1001     for compute_ip in ${COMPUTE_IPS[*]}; do
1002         # Tunnel from controller to compute
1003         COMPUTEPORT=compute$(( compute_index++ ))_vxlan
1004         ${SSH} ${!CONTROLIP} "
1005             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $COMPUTEPORT -- set interface $COMPUTEPORT type=vxlan options:local_ip=${!CONTROLIP} options:remote_ip=$compute_ip options:dst_port=9876 options:key=flow
1006         "
1007         # Tunnel from compute to controller
1008         CONTROLPORT="control_vxlan"
1009         ${SSH} $compute_ip "
1010             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $CONTROLPORT -- set interface $CONTROLPORT type=vxlan options:local_ip=$compute_ip options:remote_ip=${!CONTROLIP} options:dst_port=9876 options:key=flow
1011         "
1012     done
1013 done
1014
1015 if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
1016     odlmgrip=OPENSTACK_HAPROXY_1_IP
1017     HA_PROXY_IP=${!odlmgrip}
1018     HA_PROXY_1_IP=${!odlmgrip}
1019     odlmgrip2=OPENSTACK_HAPROXY_2_IP
1020     HA_PROXY_2_IP=${!odlmgrip2}
1021     odlmgrip3=OPENSTACK_HAPROXY_1_IP
1022     HA_PROXY_3_IP=${!odlmgrip3}
1023 else
1024     HA_PROXY_IP=${ODL_SYSTEM_IP}
1025     HA_PROXY_1_IP=${ODL_SYSTEM_1_IP}
1026     HA_PROXY_2_IP=${ODL_SYSTEM_2_IP}
1027     HA_PROXY_3_IP=${ODL_SYSTEM_3_IP}
1028 fi
1029
1030 echo "Locating test plan to use..."
1031 testplan_filepath="${WORKSPACE}/test/csit/testplans/${STREAMTESTPLAN}"
1032 if [ ! -f "${testplan_filepath}" ]; then
1033     testplan_filepath="${WORKSPACE}/test/csit/testplans/${TESTPLAN}"
1034 fi
1035
1036 echo "Changing the testplan path..."
1037 cat "${testplan_filepath}" | sed "s:integration:${WORKSPACE}:" > testplan.txt
1038 cat testplan.txt
1039
1040 # Use the testplan if specific SUITES are not defined.
1041 if [ -z "${SUITES}" ]; then
1042     SUITES=`egrep -v '(^[[:space:]]*#|^[[:space:]]*$)' testplan.txt | tr '\012' ' '`
1043 else
1044     newsuites=""
1045     workpath="${WORKSPACE}/test/csit/suites"
1046     for suite in ${SUITES}; do
1047         fullsuite="${workpath}/${suite}"
1048         if [ -z "${newsuites}" ]; then
1049             newsuites+=${fullsuite}
1050         else
1051             newsuites+=" "${fullsuite}
1052         fi
1053     done
1054     SUITES=${newsuites}
1055 fi
1056
1057 #install all client versions required for this job testing
1058 install_openstack_clients_in_robot_vm
1059
1060 # TODO: run openrc on control node and then scrape the vars from it
1061 # Environment Variables Needed to execute Openstack Client for NetVirt Jobs
1062 cat > /tmp/os_netvirt_client_rc << EOF
1063 export OS_USERNAME=admin
1064 export OS_PASSWORD=admin
1065 export OS_PROJECT_NAME=admin
1066 export OS_USER_DOMAIN_NAME=default
1067 export OS_PROJECT_DOMAIN_NAME=default
1068 export OS_AUTH_URL="http://${!CONTROLIP}/identity"
1069 export OS_IDENTITY_API_VERSION=3
1070 export OS_IMAGE_API_VERSION=2
1071 export OS_TENANT_NAME=admin
1072 unset OS_CLOUD
1073 EOF
1074
1075 source /tmp/os_netvirt_client_rc
1076
1077 echo "Get all versions before executing pybot"
1078 echo "openstack --version"
1079 which openstack
1080 openstack --version
1081 echo "nova --version"
1082 which nova
1083 nova --version
1084 echo "neutron --version"
1085 which neutron
1086 neutron --version
1087
1088 echo "Starting Robot test suites ${SUITES} ..."
1089 # please add pybot -v arguments on a single line and alphabetized
1090 suite_num=0
1091 for suite in ${SUITES}; do
1092     # prepend an incremental counter to the suite name so that the full robot log combining all the suites as is done
1093     # in the rebot step below will list all the suites in chronological order as rebot seems to alphabetize them
1094     let "suite_num = suite_num + 1"
1095     suite_index="$(printf %02d ${suite_num})"
1096     suite_name="$(basename ${suite} | cut -d. -f1)"
1097     log_name="${suite_index}_${suite_name}"
1098     pybot -N ${log_name} \
1099     -c critical -e exclude -e skip_if_${DISTROSTREAM} \
1100     --log log_${log_name}.html --report None --output output_${log_name}.xml \
1101     --removekeywords wuks \
1102     --removekeywords name:SetupUtils.Setup_Utils_For_Setup_And_Teardown \
1103     --removekeywords name:SetupUtils.Setup_Test_With_Logging_And_Without_Fast_Failing \
1104     --removekeywords name:OpenStackOperations.Add_OVS_Logging_On_All_OpenStack_Nodes \
1105     -v BUNDLEFOLDER:${BUNDLEFOLDER} \
1106     -v BUNDLE_URL:${ACTUAL_BUNDLE_URL} \
1107     -v CONTROLLERFEATURES:"${CONTROLLERFEATURES}" \
1108     -v CONTROLLER_USER:${USER} \
1109     -v DEVSTACK_DEPLOY_PATH:/opt/stack/devstack \
1110     -v HA_PROXY_IP:${HA_PROXY_IP} \
1111     -v HA_PROXY_1_IP:${HA_PROXY_1_IP} \
1112     -v HA_PROXY_2_IP:${HA_PROXY_2_IP} \
1113     -v HA_PROXY_3_IP:${HA_PROXY_3_IP} \
1114     -v JDKVERSION:${JDKVERSION} \
1115     -v JENKINS_WORKSPACE:${WORKSPACE} \
1116     -v NEXUSURL_PREFIX:${NEXUSURL_PREFIX} \
1117     -v NUM_ODL_SYSTEM:${NUM_ODL_SYSTEM} \
1118     -v NUM_OPENSTACK_SITES:${NUM_OPENSTACK_SITES} \
1119     -v NUM_OS_SYSTEM:${NUM_OPENSTACK_SYSTEM} \
1120     -v NUM_TOOLS_SYSTEM:${NUM_TOOLS_SYSTEM} \
1121     -v ODL_SNAT_MODE:${ODL_SNAT_MODE} \
1122     -v ODL_ENABLE_L3_FWD:${ODL_ENABLE_L3_FWD} \
1123     -v ODL_STREAM:${DISTROSTREAM} \
1124     -v ODL_SYSTEM_IP:${ODL_SYSTEM_IP} \
1125     -v ODL_SYSTEM_1_IP:${ODL_SYSTEM_1_IP} \
1126     -v ODL_SYSTEM_2_IP:${ODL_SYSTEM_2_IP} \
1127     -v ODL_SYSTEM_3_IP:${ODL_SYSTEM_3_IP} \
1128     -v ODL_SYSTEM_4_IP:${ODL_SYSTEM_4_IP} \
1129     -v ODL_SYSTEM_5_IP:${ODL_SYSTEM_5_IP} \
1130     -v ODL_SYSTEM_6_IP:${ODL_SYSTEM_6_IP} \
1131     -v ODL_SYSTEM_7_IP:${ODL_SYSTEM_7_IP} \
1132     -v ODL_SYSTEM_8_IP:${ODL_SYSTEM_8_IP} \
1133     -v ODL_SYSTEM_9_IP:${ODL_SYSTEM_9_IP} \
1134     -v OS_CONTROL_NODE_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1135     -v OS_CONTROL_NODE_1_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1136     -v OS_CONTROL_NODE_2_IP:${OPENSTACK_CONTROL_NODE_2_IP} \
1137     -v OS_CONTROL_NODE_3_IP:${OPENSTACK_CONTROL_NODE_3_IP} \
1138     -v OPENSTACK_BRANCH:${OPENSTACK_BRANCH} \
1139     -v OS_COMPUTE_1_IP:${OPENSTACK_COMPUTE_NODE_1_IP} \
1140     -v OS_COMPUTE_2_IP:${OPENSTACK_COMPUTE_NODE_2_IP} \
1141     -v OS_COMPUTE_3_IP:${OPENSTACK_COMPUTE_NODE_3_IP} \
1142     -v OS_COMPUTE_4_IP:${OPENSTACK_COMPUTE_NODE_4_IP} \
1143     -v OS_COMPUTE_5_IP:${OPENSTACK_COMPUTE_NODE_5_IP} \
1144     -v OS_COMPUTE_6_IP:${OPENSTACK_COMPUTE_NODE_6_IP} \
1145     -v OS_USER:${USER} \
1146     -v PUBLIC_PHYSICAL_NETWORK:${PUBLIC_PHYSICAL_NETWORK} \
1147     -v SECURITY_GROUP_MODE:${SECURITY_GROUP_MODE} \
1148     -v TOOLS_SYSTEM_IP:${TOOLS_SYSTEM_1_IP} \
1149     -v TOOLS_SYSTEM_1_IP:${TOOLS_SYSTEM_1_IP} \
1150     -v TOOLS_SYSTEM_2_IP:${TOOLS_SYSTEM_2_IP} \
1151     -v USER_HOME:${HOME} \
1152     -v WORKSPACE:/tmp \
1153     ${TESTOPTIONS} ${suite} || true
1154 done
1155 #rebot exit codes seem to be different
1156 rebot --output ${WORKSPACE}/output.xml --log log_full.html --report None -N openstack output_*.xml || true
1157
1158 echo "Examining the files in data/log and checking file size"
1159 ssh ${ODL_SYSTEM_IP} "ls -altr /tmp/${BUNDLEFOLDER}/data/log/"
1160 ssh ${ODL_SYSTEM_IP} "du -hs /tmp/${BUNDLEFOLDER}/data/log/*"
1161
1162 echo "Tests Executed"
1163
1164 true  # perhaps Jenkins is testing last exit code
1165 # vim: ts=4 sw=4 sts=4 et ft=sh :