Merge "Job for testing the ODL user configuration"
[releng/builder.git] / jjb / integration / integration-deploy-openstack-run-test.sh
1 #!/bin/bash
2 # Activate robotframework virtualenv
3 # ${ROBOT_VENV} comes from the integration-install-robotframework.sh
4 # script.
5 # shellcheck source=${ROBOT_VENV}/bin/activate disable=SC1091
6 source ${ROBOT_VENV}/bin/activate
7 source /tmp/common-functions.sh ${BUNDLEFOLDER}
8
9 PYTHON="${ROBOT_VENV}/bin/python"
10 SSH="ssh -t -t"
11 ADMIN_PASSWORD="admin"
12 OPENSTACK_MASTER_CLIENTS_VERSION="queens"
13
14 pip install odltools
15 odltools -V
16
17 # TODO: remove this work to run changes.py if/when it's moved higher up to be visible at the Robot level
18 printf "\nshowing recent changes that made it into the distribution used by this job:\n"
19 $PYTHON -m pip install --upgrade urllib3
20 python ${WORKSPACE}/test/tools/distchanges/changes.py -d /tmp/distribution_folder \
21                   -u ${ACTUAL_BUNDLE_URL} -b ${DISTROBRANCH} \
22                   -r ssh://jenkins-${SILO}@git.opendaylight.org:29418 || true
23
24 printf "\nshowing recent changes that made it into integration/test used by this job:\n"
25 cd ${WORKSPACE}/test
26 printf "Hash    Author Date                    Commit Date                    Author               Subject\n"
27 printf "%s\n" "------- ------------------------------ ------------------------------ -------------------- -----------------------------"
28 git --no-pager log --pretty=format:'%h %<(30)%ad %<(30)%cd %<(20,trunc)%an%d %s' -n20
29 printf "\n"
30 cd -
31
32 cat << EOF
33 #################################################
34 ##         Deploy Openstack 3-node             ##
35 #################################################
36 EOF
37
38 # Catch command errors and collect logs.
39 # This ensures logs are collected when script commands fail rather than simply exiting.
40 function trap_handler() {
41     local prog="$0"
42     local lastline="$1"
43     local lasterr="$2"
44     echo "trap_hanlder: ${prog}: line ${lastline}: exit status of last command: ${lasterr}"
45     echo "trap_handler: command: ${BASH_COMMAND}"
46     exit 1
47 } # trap_handler()
48
49 trap 'trap_handler ${LINENO} ${$?}' ERR
50
51 function print_job_parameters() {
52     cat << EOF
53
54 Job parameters:
55 DISTROBRANCH: ${DISTROBRANCH}
56 DISTROSTREAM: ${DISTROSTREAM}
57 BUNDLE_URL: ${BUNDLE_URL}
58 CONTROLLERFEATURES: ${CONTROLLERFEATURES}
59 CONTROLLERDEBUGMAP: ${CONTROLLERDEBUGMAP}
60 SCRIPTPLAN: ${SCRIPTPLAN}
61 CONFIGPLAN: ${CONFIGPLAN}
62 STREAMTESTPLAN: ${STREAMTESTPLAN}
63 TESTPLAN: ${TESTPLAN}
64 SUITES: ${SUITES}
65 PATCHREFSPEC: ${PATCHREFSPEC}
66 OPENSTACK_BRANCH: ${OPENSTACK_BRANCH}
67 DEVSTACK_HASH: ${DEVSTACK_HASH}
68 ODL_ML2_DRIVER_REPO: ${ODL_ML2_DRIVER_REPO}
69 ODL_ML2_BRANCH: ${ODL_ML2_BRANCH}
70 ODL_ML2_DRIVER_VERSION: ${ODL_ML2_DRIVER_VERSION}
71 ODL_ML2_PORT_BINDING: ${ODL_ML2_PORT_BINDING}
72 DEVSTACK_KUBERNETES_PLUGIN_REPO: ${DEVSTACK_KUBERNETES_PLUGIN_REPO}
73 DEVSTACK_LBAAS_PLUGIN_REPO: ${DEVSTACK_LBAAS_PLUGIN_REPO}
74 DEVSTACK_NETWORKING_SFC_PLUGIN_REPO: ${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO}
75 ODL_ENABLE_L3_FWD: ${ODL_ENABLE_L3_FWD}
76 IPSEC_VXLAN_TUNNELS_ENABLED: ${IPSEC_VXLAN_TUNNELS_ENABLED}
77 PUBLIC_BRIDGE: ${PUBLIC_BRIDGE}
78 ENABLE_HAPROXY_FOR_NEUTRON: ${ENABLE_HAPROXY_FOR_NEUTRON}
79 ENABLE_OS_SERVICES: ${ENABLE_OS_SERVICES}
80 ENABLE_OS_COMPUTE_SERVICES: ${ENABLE_OS_COMPUTE_SERVICES}
81 ENABLE_OS_NETWORK_SERVICES: ${ENABLE_OS_NETWORK_SERVICES}
82 ENABLE_OS_PLUGINS: ${ENABLE_OS_PLUGINS}
83 DISABLE_OS_SERVICES: ${DISABLE_OS_SERVICES}
84 TENANT_NETWORK_TYPE: ${TENANT_NETWORK_TYPE}
85 SECURITY_GROUP_MODE: ${SECURITY_GROUP_MODE}
86 ENABLE_ITM_DIRECT_TUNNELS: ${ENABLE_ITM_DIRECT_TUNNELS}
87 PUBLIC_PHYSICAL_NETWORK: ${PUBLIC_PHYSICAL_NETWORK}
88 ENABLE_NETWORKING_L2GW: ${ENABLE_NETWORKING_L2GW}
89 CREATE_INITIAL_NETWORKS: ${CREATE_INITIAL_NETWORKS}
90 LBAAS_SERVICE_PROVIDER: ${LBAAS_SERVICE_PROVIDER}
91 NUM_OPENSTACK_SITES: ${NUM_OPENSTACK_SITES}
92 ODL_SFC_DRIVER: ${ODL_SFC_DRIVER}
93 ODL_SNAT_MODE: ${ODL_SNAT_MODE}
94
95 EOF
96 }
97
98 print_job_parameters
99
100 function create_etc_hosts() {
101     NODE_IP=$1
102     CTRL_IP=$2
103     : > ${WORKSPACE}/hosts_file
104     for iter in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`
105     do
106         COMPUTE_IP=OPENSTACK_COMPUTE_NODE_${iter}_IP
107         if [ "${!COMPUTE_IP}" == "${NODE_IP}" ]; then
108            CONTROL_HNAME=$(${SSH}  ${CTRL_IP}  "hostname")
109            echo "${CTRL_IP}   ${CONTROL_HNAME}" >> ${WORKSPACE}/hosts_file
110         else
111            COMPUTE_HNAME=$(${SSH}  ${!COMPUTE_IP}  "hostname")
112            echo "${!COMPUTE_IP}   ${COMPUTE_HNAME}" >> ${WORKSPACE}/hosts_file
113         fi
114     done
115
116     echo "Created the hosts file for ${NODE_IP}:"
117     cat ${WORKSPACE}/hosts_file
118 } # create_etc_hosts()
119
120 #function to install Openstack Clients for Testing
121 #This will pull the latest versions compatiable with the
122 # openstack release
123 function install_openstack_clients_in_robot_vm() {
124     packages=("python-novaclient" "python-neutronclient" "python-openstackclient")
125     local os_plugins
126     os_plugins=$(csv2ssv "${ENABLE_OS_PLUGINS}")
127     for plugin_name in $os_plugins; do
128         if [ "$plugin_name" == "networking-sfc" ]; then
129             packages+=("networking-sfc")
130         fi
131     done
132     openstack_version=$(echo ${OPENSTACK_BRANCH} | cut -d/ -f2)
133     #If the job tests "master", we will use the clients from previous released stable version to avoid failures
134     if [ "${openstack_version}" == "master" ]; then
135        openstack_version=${OPENSTACK_MASTER_CLIENTS_VERSION}
136     fi
137     for package in ${packages[*]}; do
138        echo "Get the current support version of the package ${package}"
139        wget https://raw.githubusercontent.com/openstack/requirements/stable/${openstack_version}/upper-constraints.txt -O /tmp/constraints.txt 2>/dev/null
140        echo "$PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt"
141        $PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt
142        echo "$PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt"
143        $PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt
144     done
145
146     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
147         #networking-l2gw is not officially available in any release yet. Getting the latest stable version.
148         $PYTHON -m pip install networking-l2gw==11.0.0
149     fi
150 }
151
152 function is_openstack_feature_enabled() {
153     local feature=$1
154     for enabled_feature in $(csv2ssv ${ENABLE_OS_SERVICES})
155     do
156         if [ "${enabled_feature}" == "${feature}" ]; then
157            echo 1
158            return
159         fi
160     done
161     echo 0
162 }
163
164 #Function to install rdo release
165 # This will help avoiding installing wrong version of packages which causes
166 # functionality failures
167 function install_rdo_release() {
168     local ip=$1
169     case ${OPENSTACK_BRANCH} in
170        *pike*)
171           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-pike/rdo-release-pike-1.noarch.rpm"
172           ;;
173
174        *queens*)
175           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
176           ;;
177
178        master)
179           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
180           ;;
181     esac
182 }
183
184 # Involves just setting up the shared directory
185 function setup_live_migration_control() {
186     local control_ip=$1
187     printf "${control_ip}:Setup directory Share with NFS"
188     cat > ${WORKSPACE}/setup_live_migration_control.sh << EOF
189 sudo mkdir --mode=777 /vm_instances
190 sudo chown -R jenkins:jenkins /vm_instances
191 sudo yum install -y nfs-utils
192 printf "/vm_instances *(rw,no_root_squash)" | sudo tee -a /etc/exports
193 sudo systemctl start rpcbind nfs-server
194 sudo exportfs
195 EOF
196     scp ${WORKSPACE}/setup_live_migration_control.sh ${control_ip}:/tmp/setup_live_migration_control.sh
197     ssh ${control_ip} "bash /tmp/setup_live_migration_control.sh"
198 }
199
200 # Involves mounting the share and configuring the libvirtd
201 function setup_live_migration_compute() {
202     local compute_ip=$1
203     local control_ip=$2
204     printf "${compute_ip}:Mount Shared directory from ${control_ip}"
205     printf "${compute_ip}:Configure libvirt in listen mode"
206     cat >  ${WORKSPACE}/setup_live_migration_compute.sh << EOF
207 sudo yum install -y libvirt libvirt-devel nfs-utils
208 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tls 0
209 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tcp 1
210 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' auth_tcp '"none"'
211 sudo crudini --verbose  --set --inplace /etc/sysconfig/libvirtd '' LIBVIRTD_ARGS '"--listen"'
212 sudo mkdir --mode=777 -p /var/instances
213 sudo chown -R jenkins:jenkins /var/instances
214 sudo chmod o+x /var/instances
215 sudo systemctl start rpcbind
216 sudo mount -t nfs ${control_ip}:/vm_instances /var/instances
217 sudo mount
218 EOF
219     scp ${WORKSPACE}/setup_live_migration_compute.sh ${compute_ip}:/tmp/setup_live_migration_compute.sh
220     ssh ${compute_ip} "bash /tmp/setup_live_migration_compute.sh"
221 }
222
223 # Add enable_services and disable_services to the local.conf
224 function add_os_services() {
225     local core_services=$1
226     local enable_services=$2
227     local disable_services=$3
228     local local_conf_file_name=$4
229     local enable_network_services=$5
230
231     cat >> ${local_conf_file_name} << EOF
232 enable_service $(csv2ssv "${core_services}")
233 EOF
234     if [ -n "${enable_services}" ]; then
235         cat >> ${local_conf_file_name} << EOF
236 enable_service $(csv2ssv "${enable_services}")
237 EOF
238     fi
239     if [ -n "${disable_services}" ]; then
240         cat >> ${local_conf_file_name} << EOF
241 disable_service $(csv2ssv "${disable_services}")
242 EOF
243     fi
244     if [ -n "${enable_network_services}" ]; then
245         cat >> ${local_conf_file_name} << EOF
246 enable_service $(csv2ssv "${enable_network_services}")
247 EOF
248     fi
249 }
250
251 function create_control_node_local_conf() {
252     HOSTIP=$1
253     MGRIP=$2
254     ODL_OVS_MANAGERS="$3"
255
256     local_conf_file_name=${WORKSPACE}/local.conf_control_${HOSTIP}
257     cat > ${local_conf_file_name} << EOF
258 [[local|localrc]]
259 LOGFILE=stack.sh.log
260 LOG_COLOR=False
261 USE_SYSTEMD=True
262 RECLONE=${RECLONE}
263 # Increase the wait used by stack to poll for services
264 SERVICE_TIMEOUT=120
265
266 disable_all_services
267 EOF
268
269     add_os_services "${CORE_OS_CONTROL_SERVICES}" "${ENABLE_OS_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}" "${ENABLE_OS_NETWORK_SERVICES}"
270
271     cat >> ${local_conf_file_name} << EOF
272
273 HOST_IP=${HOSTIP}
274 SERVICE_HOST=\$HOST_IP
275 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
276 NEUTRON_CREATE_INITIAL_NETWORKS=${CREATE_INITIAL_NETWORKS}
277
278 ODL_MODE=manual
279 ODL_MGR_IP=${MGRIP}
280 ODL_PORT=${ODL_PORT}
281 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
282 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
283
284 MYSQL_HOST=\$SERVICE_HOST
285 RABBIT_HOST=\$SERVICE_HOST
286 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
287 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
288 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
289
290 ADMIN_PASSWORD=${ADMIN_PASSWORD}
291 DATABASE_PASSWORD=${ADMIN_PASSWORD}
292 RABBIT_PASSWORD=${ADMIN_PASSWORD}
293 SERVICE_TOKEN=${ADMIN_PASSWORD}
294 SERVICE_PASSWORD=${ADMIN_PASSWORD}
295
296 NEUTRON_LBAAS_SERVICE_PROVIDERV2=${LBAAS_SERVICE_PROVIDER} # Only relevant if neutron-lbaas plugin is enabled
297 NEUTRON_SFC_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
298 NEUTRON_FLOWCLASSIFIER_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
299 ETCD_PORT=2379
300 EOF
301     if [ "${TENANT_NETWORK_TYPE}" == "local" ]; then
302         cat >> ${local_conf_file_name} << EOF
303 ENABLE_TENANT_TUNNELS=false
304 EOF
305     fi
306
307     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
308         echo "ODL_V2DRIVER=True" >> ${local_conf_file_name}
309     fi
310     IFS=,
311     for plugin_name in ${ENABLE_OS_PLUGINS}; do
312         if [ "$plugin_name" == "networking-odl" ]; then
313             ENABLE_PLUGIN_ARGS="${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}"
314         elif [ "$plugin_name" == "kuryr-kubernetes" ]; then
315             ENABLE_PLUGIN_ARGS="${DEVSTACK_KUBERNETES_PLUGIN_REPO} master" # note: kuryr-kubernetes only exists in master at the moment
316         elif [ "$plugin_name" == "neutron-lbaas" ]; then
317             ENABLE_PLUGIN_ARGS="${DEVSTACK_LBAAS_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
318             IS_LBAAS_PLUGIN_ENABLED="yes"
319         elif [ "$plugin_name" == "networking-sfc" ]; then
320             ENABLE_PLUGIN_ARGS="${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO} master"
321             IS_SFC_PLUGIN_ENABLED="yes"
322         else
323             echo "Error: Invalid plugin $plugin_name, unsupported"
324             continue
325         fi
326         cat >> ${local_conf_file_name} << EOF
327
328 enable_plugin ${plugin_name} ${ENABLE_PLUGIN_ARGS}
329 EOF
330     done
331     unset IFS
332
333     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
334         cat >> ${local_conf_file_name} << EOF
335
336 enable_plugin networking-l2gw ${NETWORKING_L2GW_DRIVER} ${ODL_ML2_BRANCH}
337 NETWORKING_L2GW_SERVICE_DRIVER=L2GW:OpenDaylight:networking_odl.l2gateway.driver_v2.OpenDaylightL2gwDriver:default
338 EOF
339     fi
340
341     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
342         cat >> ${local_conf_file_name} << EOF
343
344 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
345 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
346 ML2_VLAN_RANGES=${PUBLIC_PHYSICAL_NETWORK}
347 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
348 EOF
349
350         if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
351            SERVICE_PLUGINS="odl-router_v2"
352         else
353            SERVICE_PLUGINS="odl-router"
354         fi
355         if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
356             SERVICE_PLUGINS+=", networking_l2gw.services.l2gateway.plugin.L2GatewayPlugin"
357         fi
358         if [ "${IS_LBAAS_PLUGIN_ENABLED}" == "yes" ]; then
359             SERVICE_PLUGINS+=", lbaasv2"
360         fi
361         if [ "${IS_SFC_PLUGIN_ENABLED}" == "yes" ]; then
362             SERVICE_PLUGINS+=", networking_sfc.services.flowclassifier.plugin.FlowClassifierPlugin,networking_sfc.services.sfc.plugin.SfcPlugin"
363         fi
364     fi #check for ODL_ENABLE_L3_FWD
365
366     cat >> ${local_conf_file_name} << EOF
367
368 [[post-config|\$NEUTRON_CONF]]
369 [DEFAULT]
370 service_plugins = ${SERVICE_PLUGINS}
371 log_dir = /opt/stack/logs
372
373 [[post-config|/etc/neutron/plugins/ml2/ml2_conf.ini]]
374 [agent]
375 minimize_polling=True
376
377 [ml2]
378 # Needed for VLAN provider tests - because our provider networks are always encapsulated in VXLAN (br-physnet1)
379 # MTU(1400) + VXLAN(50) + VLAN(4) = 1454 < MTU eth0/br-physnet1(1458)
380 physical_network_mtus = ${PUBLIC_PHYSICAL_NETWORK}:1400
381 path_mtu = 1458
382 EOF
383
384     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
385         cat >> ${local_conf_file_name} << EOF
386
387 [ml2_odl]
388 enable_dhcp_service = True
389 EOF
390     fi
391
392     cat >> ${local_conf_file_name} << EOF
393
394 [ml2_odl]
395 # Trigger n-odl full sync every 30 secs.
396 maintenance_interval = 30
397
398 [[post-config|/etc/neutron/dhcp_agent.ini]]
399 [DEFAULT]
400 force_metadata = True
401 enable_isolated_metadata = True
402 log_dir = /opt/stack/logs
403
404 [[post-config|/etc/nova/nova.conf]]
405 [DEFAULT]
406 force_config_drive = False
407 force_raw_images = False
408 log_dir = /opt/stack/logs
409
410 [scheduler]
411 discover_hosts_in_cells_interval = 30
412 EOF
413
414     echo "Control local.conf created:"
415     cat ${local_conf_file_name}
416 } # create_control_node_local_conf()
417
418 function create_compute_node_local_conf() {
419     HOSTIP=$1
420     SERVICEHOST=$2
421     MGRIP=$3
422     ODL_OVS_MANAGERS="$4"
423
424     local_conf_file_name=${WORKSPACE}/local.conf_compute_${HOSTIP}
425     cat > ${local_conf_file_name} << EOF
426 [[local|localrc]]
427 LOGFILE=stack.sh.log
428 LOG_COLOR=False
429 USE_SYSTEMD=True
430 RECLONE=${RECLONE}
431 # Increase the wait used by stack to poll for the nova service on the control node
432 NOVA_READY_TIMEOUT=1800
433
434 disable_all_services
435 EOF
436
437     add_os_services "${CORE_OS_COMPUTE_SERVICES}" "${ENABLE_OS_COMPUTE_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}"
438
439     cat >> ${local_conf_file_name} << EOF
440 HOST_IP=${HOSTIP}
441 SERVICE_HOST=${SERVICEHOST}
442 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
443
444 ODL_MODE=manual
445 ODL_MGR_IP=${MGRIP}
446 ODL_PORT=${ODL_PORT}
447 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
448 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
449
450 Q_HOST=\$SERVICE_HOST
451 MYSQL_HOST=\$SERVICE_HOST
452 RABBIT_HOST=\$SERVICE_HOST
453 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
454 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
455 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
456
457 ADMIN_PASSWORD=${ADMIN_PASSWORD}
458 DATABASE_PASSWORD=${ADMIN_PASSWORD}
459 RABBIT_PASSWORD=${ADMIN_PASSWORD}
460 SERVICE_TOKEN=${ADMIN_PASSWORD}
461 SERVICE_PASSWORD=${ADMIN_PASSWORD}
462 EOF
463
464     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-odl ]]; then
465         cat >> ${local_conf_file_name} << EOF
466
467 enable_plugin networking-odl ${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}
468 EOF
469     fi
470
471     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
472         cat >> ${local_conf_file_name} << EOF
473
474 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
475 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
476 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
477 Q_L3_ENABLED=True
478 ODL_L3=${ODL_L3}
479 EOF
480     fi
481
482     cat >> ${local_conf_file_name} << EOF
483
484 [[post-config|/etc/nova/nova.conf]]
485 [api]
486 auth_strategy = keystone
487 [DEFAULT]
488 use_neutron = True
489 force_raw_images = False
490 log_dir = /opt/stack/logs
491 [libvirt]
492 live_migration_uri = qemu+tcp://%s/system
493 virt_type = qemu
494 EOF
495
496     echo "Compute local.conf created:"
497     cat ${local_conf_file_name}
498 } # create_compute_node_local_conf()
499
500 function configure_haproxy_for_neutron_requests() {
501     MGRIP=$1
502     # shellcheck disable=SC2206
503     ODL_IPS=(${2//,/ })
504
505     cat > ${WORKSPACE}/install_ha_proxy.sh<< EOF
506 sudo systemctl stop firewalld
507 sudo yum -y install policycoreutils-python haproxy
508 EOF
509
510 cat > ${WORKSPACE}/haproxy.cfg << EOF
511 global
512   daemon
513   group  haproxy
514   log  /dev/log local0
515   maxconn  20480
516   pidfile  /tmp/haproxy.pid
517   user  haproxy
518
519 defaults
520   log  global
521   maxconn  4096
522   mode  tcp
523   retries  3
524   timeout  http-request 10s
525   timeout  queue 1m
526   timeout  connect 10s
527   timeout  client 1m
528   timeout  server 1m
529   timeout  check 10s
530
531 listen opendaylight
532   bind ${MGRIP}:8080
533   balance source
534
535 listen opendaylight_rest
536   bind ${MGRIP}:8181
537   balance source
538
539 listen opendaylight_websocket
540   bind ${MGRIP}:8185
541   balance source
542
543 EOF
544
545     odlindex=1
546     for odlip in ${ODL_IPS[*]}; do
547         sed -i "/listen opendaylight$/a server controller-${odlindex} ${odlip}:8080 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
548         sed -i "/listen opendaylight_rest$/a server controller-rest-${odlindex} ${odlip}:8181 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
549         sed -i "/listen opendaylight_websocket$/a server controller-websocket-${odlindex} ${odlip}:8185 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
550         odlindex=$((odlindex+1))
551     done
552
553
554     echo "Dump haproxy.cfg"
555     cat ${WORKSPACE}/haproxy.cfg
556
557     cat > ${WORKSPACE}/deploy_ha_proxy.sh<< EOF
558 sudo chown haproxy:haproxy /tmp/haproxy.cfg
559 sudo sed -i 's/\\/etc\\/haproxy\\/haproxy.cfg/\\/tmp\\/haproxy.cfg/g' /usr/lib/systemd/system/haproxy.service
560 sudo /usr/sbin/semanage permissive -a haproxy_t
561 sudo systemctl restart haproxy
562 sleep 3
563 sudo netstat -tunpl
564 sudo systemctl status haproxy
565 true
566 EOF
567
568     scp ${WORKSPACE}/install_ha_proxy.sh ${MGRIP}:/tmp
569     ${SSH} ${MGRIP} "sudo bash /tmp/install_ha_proxy.sh"
570     scp ${WORKSPACE}/haproxy.cfg ${MGRIP}:/tmp
571     scp ${WORKSPACE}/deploy_ha_proxy.sh ${MGRIP}:/tmp
572     ${SSH} ${MGRIP} "sudo bash /tmp/deploy_ha_proxy.sh"
573 } # configure_haproxy_for_neutron_requests()
574
575 # Following three functions are debugging helpers when debugging devstack changes.
576 # Keeping them for now so we can simply call them when needed.
577 ctrlhn=""
578 comp1hn=""
579 comp2hn=""
580 function get_hostnames () {
581     set +e
582     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
583     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
584     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
585     ctrlhn=$(${SSH} ${ctrlip} "hostname")
586     comp1hn=$(${SSH} ${comp1ip} "hostname")
587     comp2hn=$(${SSH} ${comp2ip} "hostname")
588     echo "hostnames: ${ctrlhn}, ${comp1hn}, ${comp2hn}"
589     set -e
590 }
591
592 function check_firewall() {
593     set +e
594     echo $-
595     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
596     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
597     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
598
599     echo "check_firewall on control"
600     ${SSH} ${ctrlip} "
601         sudo systemctl status firewalld
602         sudo systemctl -l status iptables
603         sudo iptables --line-numbers -nvL
604     " || true
605     echo "check_firewall on compute 1"
606     ${SSH} ${comp1ip} "
607         sudo systemctl status firewalld
608         sudo systemctl -l status iptables
609         sudo iptables --line-numbers -nvL
610     " || true
611     echo "check_firewall on compute 2"
612     ${SSH} ${comp2ip} "
613         sudo systemctl status firewalld
614         sudo systemctl -l status iptables
615         sudo iptables --line-numbers -nvL
616     " || true
617 }
618
619 function get_service () {
620     set +e
621     local iter=$1
622     #local idx=$2
623     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
624     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
625
626     #if [ ${idx} -eq 1 ]; then
627         if [ ${iter} -eq 1 ] || [ ${iter} -gt 16 ]; then
628             curl http://${ctrlip}:5000
629             curl http://${ctrlip}:35357
630             curl http://${ctrlip}/identity
631             ${SSH} ${ctrlip} "
632                 source /opt/stack/devstack/openrc admin admin;
633                 env
634                 openstack configuration show --unmask;
635                 openstack service list
636                 openstack --os-cloud devstack-admin --os-region RegionOne compute service list
637                 openstack hypervisor list;
638             " || true
639             check_firewall
640         fi
641     #fi
642     set -e
643 }
644
645 # Check if rabbitmq is ready by looking for a pid in it's status.
646 # The function returns the status of the grep command which callers can check.
647 function is_rabbitmq_ready() {
648     local -r ip=${1}
649     local grepfor="nova_cell1"
650     rm -f rabbit.txt
651     ${SSH} ${ip} "sudo rabbitmqctl list_vhosts" > rabbit.txt
652     grep ${grepfor} rabbit.txt
653 }
654
655 # retry the given command ($3) until success for a number of iterations ($1)
656 # sleeping ($2) between tries.
657 function retry() {
658     local -r -i max_tries=${1}
659     local -r -i sleep_time=${2}
660     local -r cmd=${3}
661     local -i retries=1
662     local -i rc=1
663     while true; do
664         echo "retry ${cmd}: attempt: ${retries}"
665         ${cmd}
666         rc=$?
667         if ((${rc} == 0)); then
668             break;
669         else
670             if ((${retries} == ${max_tries})); then
671                 break
672             else
673                 ((retries++))
674                 sleep ${sleep_time}
675             fi
676         fi
677     done
678     return ${rc}
679 }
680
681 ODL_PROVIDER_MAPPINGS="\${PUBLIC_PHYSICAL_NETWORK}:${PUBLIC_BRIDGE}"
682 ODL_L3=False
683 RECLONE=False
684 ODL_PORT=8181
685
686 # Always compare the lists below against the devstack upstream ENABLED_SERVICES in
687 # https://github.com/openstack-dev/devstack/blob/master/stackrc#L52
688 # ODL CSIT does not use vnc, cinder, q-agt, q-l3 or horizon so they are not included below.
689 # collect performance stats
690 CORE_OS_CONTROL_SERVICES="dstat"
691 # Glance
692 CORE_OS_CONTROL_SERVICES+=",g-api,g-reg"
693 # Keystone
694 CORE_OS_CONTROL_SERVICES+=",key"
695 # Nova - services to support libvirt
696 CORE_OS_CONTROL_SERVICES+=",n-api,n-api-meta,n-cauth,n-cond,n-crt,n-obj,n-sch"
697 # ODL - services to connect to ODL
698 CORE_OS_CONTROL_SERVICES+=",odl-compute,odl-neutron"
699 # Additional services
700 CORE_OS_CONTROL_SERVICES+=",mysql,rabbit"
701
702 # collect performance stats
703 CORE_OS_COMPUTE_SERVICES="dstat"
704 # computes only need nova and odl
705 CORE_OS_COMPUTE_SERVICES+=",n-cpu,odl-compute"
706
707 cat > ${WORKSPACE}/disable_firewall.sh << EOF
708 sudo systemctl stop firewalld
709 # Open these ports to match the tutorial vms
710 # http/https (80/443), samba (445), netbios (137,138,139)
711 sudo iptables -I INPUT -p tcp -m multiport --dports 80,443,139,445 -j ACCEPT
712 sudo iptables -I INPUT -p udp -m multiport --dports 137,138 -j ACCEPT
713 # OpenStack services as well as vxlan tunnel ports 4789 and 9876
714 # identity public/admin (5000/35357), ampq (5672), vnc (6080), nova (8774), glance (9292), neutron (9696)
715 sudo sudo iptables -I INPUT -p tcp -m multiport --dports 5000,5672,6080,8774,9292,9696,35357 -j ACCEPT
716 sudo sudo iptables -I INPUT -p udp -m multiport --dports 4789,9876 -j ACCEPT
717 sudo iptables-save > /etc/sysconfig/iptables
718 sudo systemctl restart iptables
719 sudo iptables --line-numbers -nvL
720 true
721 EOF
722
723 cat > ${WORKSPACE}/get_devstack.sh << EOF
724 sudo systemctl stop firewalld
725 sudo yum install bridge-utils python-pip -y
726 #sudo systemctl stop  NetworkManager
727 #Disable NetworkManager and kill dhclient and dnsmasq
728 sudo systemctl stop NetworkManager
729 sudo killall dhclient
730 sudo killall dnsmasq
731 #Workaround for mysql failure
732 echo "127.0.0.1   localhost \${HOSTNAME}" >> /tmp/hosts
733 echo "::1         localhost \${HOSTNAME}" >> /tmp/hosts
734 sudo mv /tmp/hosts /etc/hosts
735 sudo mkdir /opt/stack
736 echo "Create RAM disk for /opt/stack"
737 sudo mount -t tmpfs -o size=2G tmpfs /opt/stack
738 sudo chmod 777 /opt/stack
739 cd /opt/stack
740 echo "git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}"
741 git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}
742 cd devstack
743 if [ -n "${DEVSTACK_HASH}" ]; then
744     echo "git checkout ${DEVSTACK_HASH}"
745     git checkout ${DEVSTACK_HASH}
746 fi
747 git --no-pager log --pretty=format:'%h %<(13)%ar%<(13)%cr %<(20,trunc)%an%d %s%b' -n20
748 echo
749
750 echo "workaround: do not upgrade openvswitch"
751 sudo yum install -y yum-plugin-versionlock
752 sudo yum versionlock add openvswitch
753
754 #Install qemu-img command in Control Node for Pike
755 echo "Install qemu-img application"
756 sudo yum install -y qemu-img
757 EOF
758
759 cat > "${WORKSPACE}/setup_host_cell_mapping.sh" << EOF
760 sudo nova-manage cell_v2 map_cell0
761 sudo nova-manage cell_v2 simple_cell_setup
762 sudo nova-manage db sync
763 sudo nova-manage cell_v2 discover_hosts
764 EOF
765
766 NUM_OPENSTACK_SITES=${NUM_OPENSTACK_SITES:-1}
767 compute_index=1
768 odl_index=1
769 os_node_list=()
770 os_interval=$(( ${NUM_OPENSTACK_SYSTEM} / ${NUM_OPENSTACK_SITES} ))
771 ha_proxy_index=${os_interval}
772
773 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
774     if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
775         echo "Configure HAProxy"
776         ODL_HAPROXYIP_PARAM=OPENSTACK_HAPROXY_${i}_IP
777         ha_proxy_index=$(( $ha_proxy_index + $os_interval ))
778         odl_index=$(((i - 1) * 3 + 1))
779         ODL_IP_PARAM1=ODL_SYSTEM_$((odl_index++))_IP
780         ODL_IP_PARAM2=ODL_SYSTEM_$((odl_index++))_IP
781         ODL_IP_PARAM3=ODL_SYSTEM_$((odl_index++))_IP
782         ODLMGRIP[$i]=${!ODL_HAPROXYIP_PARAM} # ODL Northbound uses HAProxy VIP
783         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM1},${!ODL_IP_PARAM2},${!ODL_IP_PARAM3}" # OVSDB connects to all ODL IPs
784         configure_haproxy_for_neutron_requests ${!ODL_HAPROXYIP_PARAM} "${ODL_OVS_MGRS[$i]}"
785     else
786         ODL_IP_PARAM=ODL_SYSTEM_${i}_IP
787         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM}" # ODL Northbound uses ODL IP
788         ODLMGRIP[$i]=${!ODL_IP_PARAM} # OVSDB connects to ODL IP
789     fi
790 done
791
792 # Begin stacking the nodes, starting with the controller(s) and then the compute(s)
793
794 for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
795     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
796     echo "Configure the stack of the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${!CONTROLIP}"
797     scp ${WORKSPACE}/disable_firewall.sh ${!CONTROLIP}:/tmp
798     ${SSH} ${!CONTROLIP} "sudo bash /tmp/disable_firewall.sh"
799     create_etc_hosts ${!CONTROLIP}
800     scp ${WORKSPACE}/hosts_file ${!CONTROLIP}:/tmp/hosts
801     scp ${WORKSPACE}/get_devstack.sh ${!CONTROLIP}:/tmp
802     # devstack Master is yet to migrate fully to lib/neutron, there are some ugly hacks that is
803     # affecting the stacking.
804     # Workaround For Queens, Make the physical Network as physnet1 in lib/neutron
805     # In Queens the neutron new libs are used and do not have the following options from Pike and earlier:
806     # Q_ML2_PLUGIN_FLAT_TYPE_OPTIONS could be used for the flat_networks
807     # and Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS could be used for the ml2_type_vlan
808     ${SSH} ${!CONTROLIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
809     if [ "${ODL_ML2_BRANCH}" == "stable/queens" ]; then
810        ssh ${!CONTROLIP} "sed -i 's/flat_networks public/flat_networks public,physnet1/' /opt/stack/devstack/lib/neutron"
811        ssh ${!CONTROLIP} "sed -i '186i iniset \$NEUTRON_CORE_PLUGIN_CONF ml2_type_vlan network_vlan_ranges public:1:4094,physnet1:1:4094' /opt/stack/devstack/lib/neutron"
812     fi
813     create_control_node_local_conf ${!CONTROLIP} ${ODLMGRIP[$i]} "${ODL_OVS_MGRS[$i]}"
814     scp ${WORKSPACE}/local.conf_control_${!CONTROLIP} ${!CONTROLIP}:/opt/stack/devstack/local.conf
815     echo "Install rdo release to avoid incompatible Package versions"
816     install_rdo_release ${!CONTROLIP}
817     setup_live_migration_control ${!CONTROLIP}
818     echo "Stack the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${CONTROLIP}"
819     ssh ${!CONTROLIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
820     ssh ${!CONTROLIP} "ps -ef | grep stack.sh"
821     ssh ${!CONTROLIP} "ls -lrt /opt/stack/devstack/nohup.out"
822     os_node_list+=("${!CONTROLIP}")
823 done
824
825 # This is a backup to the CELLSV2_SETUP=singleconductor workaround. Keeping it here as an easy lookup
826 # if needed.
827 # Let the control node get started to avoid a race condition where the computes start and try to access
828 # the nova_cell1 on the control node before it is created. If that happens, the nova-compute service on the
829 # compute exits and does not attempt to restart.
830 # 180s is chosen because in test runs the control node usually finished in 17-20 minutes and the computes finished
831 # in 17 minutes, so take the max difference of 3 minutes and the jobs should still finish around the same time.
832 # one of the following errors is seen in the compute n-cpu.log:
833 # Unhandled error: NotAllowed: Connection.open: (530) NOT_ALLOWED - access to vhost 'nova_cell1' refused for user 'stackrabbit'
834 # AccessRefused: (0, 0): (403) ACCESS_REFUSED - Login was refused using authentication mechanism AMQPLAIN. For details see the broker logfile.
835 # Compare that timestamp to this log in the control stack.log: sudo rabbitmqctl set_permissions -p nova_cell1 stackrabbit
836 # If the n-cpu.log is earlier than the control stack.log timestamp then the failure condition is likely hit.
837 if [ ${NUM_OPENSTACK_COMPUTE_NODES} -gt 0 ]; then
838     WAIT_FOR_RABBITMQ_MINUTES=60
839     echo "Wait a maximum of ${WAIT_FOR_RABBITMQ_MINUTES}m until rabbitmq is ready and nova_cell1 created to allow the controller to create nova_cell1 before the computes need it"
840     set +e
841     retry ${WAIT_FOR_RABBITMQ_MINUTES} 60 "is_rabbitmq_ready ${OPENSTACK_CONTROL_NODE_1_IP}"
842     rc=$?
843     set -e
844     if ((${rc} == 0)); then
845       echo "rabbitmq is ready, starting ${NUM_OPENSTACK_COMPUTE_NODES} compute(s)"
846     else
847       echo "rabbitmq was not ready in ${WAIT_FOR_RABBITMQ_MINUTES}m"
848       exit 1
849     fi
850 fi
851
852 for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
853     NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
854     SITE_INDEX=$((((i - 1) / NUM_COMPUTES_PER_SITE) + 1)) # We need the site index to infer the control node IP for this compute
855     COMPUTEIP=OPENSTACK_COMPUTE_NODE_${i}_IP
856     CONTROLIP=OPENSTACK_CONTROL_NODE_${SITE_INDEX}_IP
857     echo "Configure the stack of the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${!COMPUTEIP}"
858     scp ${WORKSPACE}/disable_firewall.sh "${!COMPUTEIP}:/tmp"
859     ${SSH} "${!COMPUTEIP}" "sudo bash /tmp/disable_firewall.sh"
860     create_etc_hosts ${!COMPUTEIP} ${!CONTROLIP}
861     scp ${WORKSPACE}/hosts_file ${!COMPUTEIP}:/tmp/hosts
862     scp ${WORKSPACE}/get_devstack.sh  ${!COMPUTEIP}:/tmp
863     ${SSH} ${!COMPUTEIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
864     create_compute_node_local_conf ${!COMPUTEIP} ${!CONTROLIP} ${ODLMGRIP[$SITE_INDEX]} "${ODL_OVS_MGRS[$SITE_INDEX]}"
865     scp ${WORKSPACE}/local.conf_compute_${!COMPUTEIP} ${!COMPUTEIP}:/opt/stack/devstack/local.conf
866     echo "Install rdo release to avoid incompatible Package versions"
867     install_rdo_release ${!COMPUTEIP}
868     setup_live_migration_compute ${!COMPUTEIP} ${!CONTROLIP}
869     echo "Stack the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${COMPUTEIP}"
870     ssh ${!COMPUTEIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
871     ssh ${!COMPUTEIP} "ps -ef | grep stack.sh"
872     os_node_list+=("${!COMPUTEIP}")
873 done
874
875 echo "nodelist: ${os_node_list[*]}"
876
877 # This script runs on the openstack nodes. It greps for a string that devstack writes when stacking is complete.
878 # The script then writes a status depending on the grep output that is later scraped by the robot vm to control
879 # the status polling.
880 cat > ${WORKSPACE}/check_stacking.sh << EOF
881 > /tmp/stack_progress
882 ps -ef | grep "stack.sh" | grep -v grep
883 ret=\$?
884 if [ \${ret} -eq 1 ]; then
885     grep "This is your host IP address:" /opt/stack/devstack/nohup.out
886     if [ \$? -eq 0 ]; then
887         echo "Stacking Complete" > /tmp/stack_progress
888     else
889         echo "Stacking Failed" > /tmp/stack_progress
890     fi
891 elif [ \${ret} -eq 0 ]; then
892     echo "Still Stacking" > /tmp/stack_progress
893 fi
894 EOF
895
896 # devstack debugging
897 # get_hostnames
898
899 # Check if the stacking is finished. Poll all nodes every 60s for one hour.
900 iteration=0
901 in_progress=1
902 while [ ${in_progress} -eq 1 ]; do
903     iteration=$(($iteration + 1))
904     for index in "${!os_node_list[@]}"; do
905         echo "node $index ${os_node_list[index]}: checking stacking status attempt ${iteration} of 60"
906         scp ${WORKSPACE}/check_stacking.sh  ${os_node_list[index]}:/tmp
907         ${SSH} ${os_node_list[index]} "bash /tmp/check_stacking.sh"
908         scp ${os_node_list[index]}:/tmp/stack_progress .
909         cat stack_progress
910         stacking_status=`cat stack_progress`
911         # devstack debugging
912         # get_service "${iteration}" "${index}"
913         if [ "$stacking_status" == "Still Stacking" ]; then
914             continue
915         elif [ "$stacking_status" == "Stacking Failed" ]; then
916             echo "node $index ${os_node_list[index]}: stacking has failed"
917             exit 1
918         elif [ "$stacking_status" == "Stacking Complete" ]; then
919             echo "node $index ${os_node_list[index]}: stacking complete"
920             unset 'os_node_list[index]'
921             if  [ ${#os_node_list[@]} -eq 0 ]; then
922                 in_progress=0
923             fi
924         fi
925     done
926     echo "sleep for a minute before the next check"
927     sleep 60
928     if [ ${iteration} -eq 60 ]; then
929         echo "stacking has failed - took longer than 60m"
930         exit 1
931     fi
932 done
933
934 # Further configuration now that stacking is complete.
935 NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
936 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
937     echo "Configure the Control Node"
938     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
939     # Gather Compute IPs for the site
940     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
941         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
942         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
943         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
944     done
945
946     echo "sleep for 60s and print hypervisor-list"
947     sleep 60
948     ${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; nova hypervisor-list"
949     # in the case that we are doing openstack (control + compute) all in one node, then the number of hypervisors
950     # will be the same as the number of openstack systems. However, if we are doing multinode openstack then the
951     # assumption is we have a single control node and the rest are compute nodes, so the number of expected hypervisors
952     # is one less than the total number of openstack systems
953     if [ $((NUM_OPENSTACK_SYSTEM / NUM_OPENSTACK_SITES)) -eq 1 ]; then
954         expected_num_hypervisors=1
955     else
956         expected_num_hypervisors=${NUM_COMPUTES_PER_SITE}
957     fi
958     num_hypervisors=$(${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; openstack hypervisor list -f value | wc -l" | tail -1 | tr -d "\r")
959     if ! [ "${num_hypervisors}" ] || ! [ ${num_hypervisors} -eq ${expected_num_hypervisors} ]; then
960         echo "Error: Only $num_hypervisors hypervisors detected, expected $expected_num_hypervisors"
961         exit 1
962     fi
963
964     # Gather Compute IPs for the site
965     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
966         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
967         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
968         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
969     done
970
971     # External Network
972     echo "prepare external networks by adding vxlan tunnels between all nodes on a separate bridge..."
973     # FIXME Should there be a unique gateway IP and devstack index for each site?
974     devstack_index=1
975     for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
976         # FIXME - Workaround, ODL (new netvirt) currently adds PUBLIC_BRIDGE as a port in br-int since it doesn't see such a bridge existing when we stack
977         ${SSH} $ip "sudo ovs-vsctl --if-exists del-port br-int $PUBLIC_BRIDGE"
978         ${SSH} $ip "sudo ovs-vsctl --may-exist add-br $PUBLIC_BRIDGE -- set bridge $PUBLIC_BRIDGE other-config:disable-in-band=true other_config:hwaddr=f6:00:00:ff:01:0$((devstack_index++))"
979     done
980
981     # ipsec support
982     if [ "${IPSEC_VXLAN_TUNNELS_ENABLED}" == "yes" ]; then
983         # shellcheck disable=SC2206
984         ALL_NODES=(${!CONTROLIP} ${COMPUTE_IPS[*]})
985         for ((inx_ip1=0; inx_ip1<$((${#ALL_NODES[@]} - 1)); inx_ip1++)); do
986             for ((inx_ip2=$((inx_ip1 + 1)); inx_ip2<${#ALL_NODES[@]}; inx_ip2++)); do
987                 KEY1=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
988                 KEY2=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
989                 ID=0x$(dd if=/dev/urandom count=4 bs=1 2> /dev/null| xxd -p -c 8)
990                 ip1=${ALL_NODES[$inx_ip1]}
991                 ip2=${ALL_NODES[$inx_ip2]}
992                 ${SSH} $ip1 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
993                 ${SSH} $ip1 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
994                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir out tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
995                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir in tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
996
997                 ${SSH} $ip2 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
998                 ${SSH} $ip2 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
999                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir out tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
1000                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir in tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
1001             done
1002         done
1003
1004         for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
1005             echo "ip xfrm configuration for node $ip:"
1006             ${SSH} $ip "sudo ip xfrm policy list"
1007             ${SSH} $ip "sudo ip xfrm state list"
1008         done
1009     fi
1010
1011     # Control Node - PUBLIC_BRIDGE will act as the external router
1012     # Parameter values below are used in integration/test - changing them requires updates in intergration/test as well
1013     EXTNET_GATEWAY_IP="10.10.10.250"
1014     EXTNET_INTERNET_IP="10.9.9.9"
1015     EXTNET_PNF_IP="10.10.10.253"
1016     ${SSH} ${!CONTROLIP} "sudo ifconfig ${PUBLIC_BRIDGE} up ${EXTNET_GATEWAY_IP}/24"
1017
1018     # Control Node - external net PNF simulation
1019     ${SSH} ${!CONTROLIP} "
1020         sudo ip netns add pnf_ns;
1021         sudo ip link add pnf_veth0 type veth peer name pnf_veth1;
1022         sudo ip link set pnf_veth1 netns pnf_ns;
1023         sudo ip link set pnf_veth0 up;
1024         sudo ip netns exec pnf_ns ifconfig pnf_veth1 up ${EXTNET_PNF_IP}/24;
1025         sudo ovs-vsctl add-port ${PUBLIC_BRIDGE} pnf_veth0;
1026     "
1027
1028     # Control Node - external net internet address simulation
1029     ${SSH} ${!CONTROLIP} "
1030         sudo ip tuntap add dev internet_tap mode tap;
1031         sudo ifconfig internet_tap up ${EXTNET_INTERNET_IP}/24;
1032     "
1033
1034     # Computes
1035     compute_index=1
1036     for compute_ip in ${COMPUTE_IPS[*]}; do
1037         # Tunnel from controller to compute
1038         COMPUTEPORT=compute$(( compute_index++ ))_vxlan
1039         ${SSH} ${!CONTROLIP} "
1040             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $COMPUTEPORT -- set interface $COMPUTEPORT type=vxlan options:local_ip=${!CONTROLIP} options:remote_ip=$compute_ip options:dst_port=9876 options:key=flow
1041         "
1042         # Tunnel from compute to controller
1043         CONTROLPORT="control_vxlan"
1044         ${SSH} $compute_ip "
1045             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $CONTROLPORT -- set interface $CONTROLPORT type=vxlan options:local_ip=$compute_ip options:remote_ip=${!CONTROLIP} options:dst_port=9876 options:key=flow
1046         "
1047     done
1048 done
1049
1050 if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
1051     odlmgrip=OPENSTACK_HAPROXY_1_IP
1052     HA_PROXY_IP=${!odlmgrip}
1053     HA_PROXY_1_IP=${!odlmgrip}
1054     odlmgrip2=OPENSTACK_HAPROXY_2_IP
1055     HA_PROXY_2_IP=${!odlmgrip2}
1056     odlmgrip3=OPENSTACK_HAPROXY_1_IP
1057     HA_PROXY_3_IP=${!odlmgrip3}
1058 else
1059     HA_PROXY_IP=${ODL_SYSTEM_IP}
1060     HA_PROXY_1_IP=${ODL_SYSTEM_1_IP}
1061     HA_PROXY_2_IP=${ODL_SYSTEM_2_IP}
1062     HA_PROXY_3_IP=${ODL_SYSTEM_3_IP}
1063 fi
1064
1065 echo "Locating test plan to use..."
1066 testplan_filepath="${WORKSPACE}/test/csit/testplans/${STREAMTESTPLAN}"
1067 if [ ! -f "${testplan_filepath}" ]; then
1068     testplan_filepath="${WORKSPACE}/test/csit/testplans/${TESTPLAN}"
1069 fi
1070
1071 echo "Changing the testplan path..."
1072 cat "${testplan_filepath}" | sed "s:integration:${WORKSPACE}:" > testplan.txt
1073 cat testplan.txt
1074
1075 # Use the testplan if specific SUITES are not defined.
1076 if [ -z "${SUITES}" ]; then
1077     SUITES=`egrep -v '(^[[:space:]]*#|^[[:space:]]*$)' testplan.txt | tr '\012' ' '`
1078 else
1079     newsuites=""
1080     workpath="${WORKSPACE}/test/csit/suites"
1081     for suite in ${SUITES}; do
1082         fullsuite="${workpath}/${suite}"
1083         if [ -z "${newsuites}" ]; then
1084             newsuites+=${fullsuite}
1085         else
1086             newsuites+=" "${fullsuite}
1087         fi
1088     done
1089     SUITES=${newsuites}
1090 fi
1091
1092 #install all client versions required for this job testing
1093 install_openstack_clients_in_robot_vm
1094
1095 # TODO: run openrc on control node and then scrape the vars from it
1096 # Environment Variables Needed to execute Openstack Client for NetVirt Jobs
1097 cat > /tmp/os_netvirt_client_rc << EOF
1098 export OS_USERNAME=admin
1099 export OS_PASSWORD=admin
1100 export OS_PROJECT_NAME=admin
1101 export OS_USER_DOMAIN_NAME=default
1102 export OS_PROJECT_DOMAIN_NAME=default
1103 export OS_AUTH_URL="http://${!CONTROLIP}/identity"
1104 export OS_IDENTITY_API_VERSION=3
1105 export OS_IMAGE_API_VERSION=2
1106 export OS_TENANT_NAME=admin
1107 unset OS_CLOUD
1108 EOF
1109
1110 source /tmp/os_netvirt_client_rc
1111
1112 echo "Get all versions before executing pybot"
1113 echo "openstack --version"
1114 which openstack
1115 openstack --version
1116 echo "nova --version"
1117 which nova
1118 nova --version
1119 echo "neutron --version"
1120 which neutron
1121 neutron --version
1122
1123 echo "Starting Robot test suites ${SUITES} ..."
1124 # please add pybot -v arguments on a single line and alphabetized
1125 suite_num=0
1126 for suite in ${SUITES}; do
1127     # prepend an incremental counter to the suite name so that the full robot log combining all the suites as is done
1128     # in the rebot step below will list all the suites in chronological order as rebot seems to alphabetize them
1129     let "suite_num = suite_num + 1"
1130     suite_index="$(printf %02d ${suite_num})"
1131     suite_name="$(basename ${suite} | cut -d. -f1)"
1132     log_name="${suite_index}_${suite_name}"
1133     pybot -N ${log_name} \
1134     -c critical -e exclude -e skip_if_${DISTROSTREAM} \
1135     --log log_${log_name}.html --report None --output output_${log_name}.xml \
1136     --removekeywords wuks \
1137     --removekeywords name:SetupUtils.Setup_Utils_For_Setup_And_Teardown \
1138     --removekeywords name:SetupUtils.Setup_Test_With_Logging_And_Without_Fast_Failing \
1139     --removekeywords name:OpenStackOperations.Add_OVS_Logging_On_All_OpenStack_Nodes \
1140     -v BUNDLEFOLDER:${BUNDLEFOLDER} \
1141     -v BUNDLE_URL:${ACTUAL_BUNDLE_URL} \
1142     -v CONTROLLERFEATURES:"${CONTROLLERFEATURES}" \
1143     -v CONTROLLER_USER:${USER} \
1144     -v DEVSTACK_DEPLOY_PATH:/opt/stack/devstack \
1145     -v ENABLE_ITM_DIRECT_TUNNELS:${ENABLE_ITM_DIRECT_TUNNELS} \
1146     -v HA_PROXY_IP:${HA_PROXY_IP} \
1147     -v HA_PROXY_1_IP:${HA_PROXY_1_IP} \
1148     -v HA_PROXY_2_IP:${HA_PROXY_2_IP} \
1149     -v HA_PROXY_3_IP:${HA_PROXY_3_IP} \
1150     -v JDKVERSION:${JDKVERSION} \
1151     -v JENKINS_WORKSPACE:${WORKSPACE} \
1152     -v NEXUSURL_PREFIX:${NEXUSURL_PREFIX} \
1153     -v NUM_ODL_SYSTEM:${NUM_ODL_SYSTEM} \
1154     -v NUM_OPENSTACK_SITES:${NUM_OPENSTACK_SITES} \
1155     -v NUM_OS_SYSTEM:${NUM_OPENSTACK_SYSTEM} \
1156     -v NUM_TOOLS_SYSTEM:${NUM_TOOLS_SYSTEM} \
1157     -v ODL_SNAT_MODE:${ODL_SNAT_MODE} \
1158     -v ODL_ENABLE_L3_FWD:${ODL_ENABLE_L3_FWD} \
1159     -v ODL_STREAM:${DISTROSTREAM} \
1160     -v ODL_SYSTEM_IP:${ODL_SYSTEM_IP} \
1161     -v ODL_SYSTEM_1_IP:${ODL_SYSTEM_1_IP} \
1162     -v ODL_SYSTEM_2_IP:${ODL_SYSTEM_2_IP} \
1163     -v ODL_SYSTEM_3_IP:${ODL_SYSTEM_3_IP} \
1164     -v ODL_SYSTEM_4_IP:${ODL_SYSTEM_4_IP} \
1165     -v ODL_SYSTEM_5_IP:${ODL_SYSTEM_5_IP} \
1166     -v ODL_SYSTEM_6_IP:${ODL_SYSTEM_6_IP} \
1167     -v ODL_SYSTEM_7_IP:${ODL_SYSTEM_7_IP} \
1168     -v ODL_SYSTEM_8_IP:${ODL_SYSTEM_8_IP} \
1169     -v ODL_SYSTEM_9_IP:${ODL_SYSTEM_9_IP} \
1170     -v OS_CONTROL_NODE_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1171     -v OS_CONTROL_NODE_1_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1172     -v OS_CONTROL_NODE_2_IP:${OPENSTACK_CONTROL_NODE_2_IP} \
1173     -v OS_CONTROL_NODE_3_IP:${OPENSTACK_CONTROL_NODE_3_IP} \
1174     -v OPENSTACK_BRANCH:${OPENSTACK_BRANCH} \
1175     -v OS_COMPUTE_1_IP:${OPENSTACK_COMPUTE_NODE_1_IP} \
1176     -v OS_COMPUTE_2_IP:${OPENSTACK_COMPUTE_NODE_2_IP} \
1177     -v OS_COMPUTE_3_IP:${OPENSTACK_COMPUTE_NODE_3_IP} \
1178     -v OS_COMPUTE_4_IP:${OPENSTACK_COMPUTE_NODE_4_IP} \
1179     -v OS_COMPUTE_5_IP:${OPENSTACK_COMPUTE_NODE_5_IP} \
1180     -v OS_COMPUTE_6_IP:${OPENSTACK_COMPUTE_NODE_6_IP} \
1181     -v CMP_INSTANCES_SHARED_PATH:/var/instances \
1182     -v OS_USER:${USER} \
1183     -v PUBLIC_PHYSICAL_NETWORK:${PUBLIC_PHYSICAL_NETWORK} \
1184     -v SECURITY_GROUP_MODE:${SECURITY_GROUP_MODE} \
1185     -v TOOLS_SYSTEM_IP:${TOOLS_SYSTEM_1_IP} \
1186     -v TOOLS_SYSTEM_1_IP:${TOOLS_SYSTEM_1_IP} \
1187     -v TOOLS_SYSTEM_2_IP:${TOOLS_SYSTEM_2_IP} \
1188     -v USER_HOME:${HOME} \
1189     -v WORKSPACE:/tmp \
1190     ${TESTOPTIONS} ${suite} || true
1191 done
1192 #rebot exit codes seem to be different
1193 rebot --output ${WORKSPACE}/output.xml --log log_full.html --report None -N openstack output_*.xml || true
1194
1195 echo "Examining the files in data/log and checking file size"
1196 ssh ${ODL_SYSTEM_IP} "ls -altr /tmp/${BUNDLEFOLDER}/data/log/"
1197 ssh ${ODL_SYSTEM_IP} "du -hs /tmp/${BUNDLEFOLDER}/data/log/*"
1198
1199 echo "Tests Executed"
1200
1201 true  # perhaps Jenkins is testing last exit code
1202 # vim: ts=4 sw=4 sts=4 et ft=sh :