enable driver_type gre and ml2_gre
[releng/builder.git] / jjb / integration / integration-deploy-openstack-run-test.sh
1 #!/bin/bash
2 # Activate robotframework virtualenv
3 # ${ROBOT_VENV} comes from the integration-install-robotframework.sh
4 # script.
5 # shellcheck source=${ROBOT_VENV}/bin/activate disable=SC1091
6 source ${ROBOT_VENV}/bin/activate
7 source /tmp/common-functions.sh ${BUNDLEFOLDER}
8 # Ensure we fail the job if any steps fail.
9 set -ex -o pipefail
10 totaltmr=$(timer)
11 get_os_deploy
12
13 PYTHON="${ROBOT_VENV}/bin/python"
14 SSH="ssh -t -t"
15 ADMIN_PASSWORD="admin"
16 OPENSTACK_MASTER_CLIENTS_VERSION="queens"
17
18 pip install odltools
19 odltools -V
20
21 # TODO: remove this work to run changes.py if/when it's moved higher up to be visible at the Robot level
22 printf "\nshowing recent changes that made it into the distribution used by this job:\n"
23 $PYTHON -m pip install --upgrade urllib3
24 python ${WORKSPACE}/test/tools/distchanges/changes.py -d /tmp/distribution_folder \
25                   -u ${ACTUAL_BUNDLE_URL} -b ${DISTROBRANCH} \
26                   -r ssh://jenkins-${SILO}@git.opendaylight.org:29418 || true
27
28 printf "\nshowing recent changes that made it into integration/test used by this job:\n"
29 cd ${WORKSPACE}/test
30 printf "Hash    Author Date                    Commit Date                    Author               Subject\n"
31 printf "%s\n" "------- ------------------------------ ------------------------------ -------------------- -----------------------------"
32 git --no-pager log --pretty=format:'%h %<(30)%ad %<(30)%cd %<(20,trunc)%an%d %s' -n20
33 printf "\n"
34 cd -
35
36 cat << EOF
37 #################################################
38 ##         Deploy Openstack 3-node             ##
39 #################################################
40 EOF
41
42 # Catch command errors and collect logs.
43 # This ensures logs are collected when script commands fail rather than simply exiting.
44 function trap_handler() {
45     local prog="$0"
46     local lastline="$1"
47     local lasterr="$2"
48     echo "trap_hanlder: ${prog}: line ${lastline}: exit status of last command: ${lasterr}"
49     echo "trap_handler: command: ${BASH_COMMAND}"
50     exit 1
51 } # trap_handler()
52
53 trap 'trap_handler ${LINENO} ${$?}' ERR
54
55 print_job_parameters
56
57 function create_etc_hosts() {
58     NODE_IP=$1
59     CTRL_IP=$2
60     : > ${WORKSPACE}/hosts_file
61     for iter in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
62         COMPUTE_IP=OPENSTACK_COMPUTE_NODE_${iter}_IP
63         if [ "${!COMPUTE_IP}" == "${NODE_IP}" ]; then
64            CONTROL_HNAME=$(${SSH}  ${CTRL_IP}  "hostname")
65            echo "${CTRL_IP}   ${CONTROL_HNAME}" >> ${WORKSPACE}/hosts_file
66         else
67            COMPUTE_HNAME=$(${SSH}  ${!COMPUTE_IP}  "hostname")
68            echo "${!COMPUTE_IP}   ${COMPUTE_HNAME}" >> ${WORKSPACE}/hosts_file
69         fi
70     done
71
72     echo "Created the hosts file for ${NODE_IP}:"
73     cat ${WORKSPACE}/hosts_file
74 } # create_etc_hosts()
75
76 #function to install Openstack Clients for Testing
77 #This will pull the latest versions compatiable with the
78 # openstack release
79 function install_openstack_clients_in_robot_vm() {
80     packages=("python-novaclient" "python-neutronclient" "python-openstackclient")
81     local os_plugins
82     os_plugins=$(csv2ssv "${ENABLE_OS_PLUGINS}")
83     for plugin_name in $os_plugins; do
84         if [ "$plugin_name" == "networking-sfc" ]; then
85             packages+=("networking-sfc")
86         fi
87     done
88     openstack_version=$(echo ${OPENSTACK_BRANCH} | cut -d/ -f2)
89     #If the job tests "master", we will use the clients from previous released stable version to avoid failures
90     if [ "${openstack_version}" == "master" ]; then
91        openstack_version=${OPENSTACK_MASTER_CLIENTS_VERSION}
92     fi
93     for package in ${packages[*]}; do
94        echo "Get the current support version of the package ${package}"
95        wget https://raw.githubusercontent.com/openstack/requirements/stable/${openstack_version}/upper-constraints.txt -O /tmp/constraints.txt 2>/dev/null
96        echo "$PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt"
97        $PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt
98        echo "$PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt"
99        $PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt
100     done
101
102     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
103         #networking-l2gw is not officially available in any release yet. Getting the latest stable version.
104         $PYTHON -m pip install networking-l2gw==11.0.0
105     fi
106 }
107
108 #Function to install rdo release
109 # This will help avoiding installing wrong version of packages which causes
110 # functionality failures
111 function install_rdo_release() {
112     local ip=$1
113     case ${OPENSTACK_BRANCH} in
114        *pike*)
115           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-pike/rdo-release-pike-1.noarch.rpm"
116           ;;
117
118        *queens*)
119           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
120           ;;
121
122        master)
123           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
124           ;;
125     esac
126 }
127
128 # Involves just setting up the shared directory
129 function setup_live_migration_control() {
130     local control_ip=$1
131     printf "${control_ip}:Setup directory Share with NFS"
132     cat > ${WORKSPACE}/setup_live_migration_control.sh << EOF
133 sudo mkdir --mode=777 /vm_instances
134 sudo chown -R jenkins:jenkins /vm_instances
135 sudo yum install -y nfs-utils
136 printf "/vm_instances *(rw,no_root_squash)" | sudo tee -a /etc/exports
137 sudo systemctl start rpcbind nfs-server
138 sudo exportfs
139 EOF
140     scp ${WORKSPACE}/setup_live_migration_control.sh ${control_ip}:/tmp/setup_live_migration_control.sh
141     ssh ${control_ip} "bash /tmp/setup_live_migration_control.sh"
142 }
143
144 # Involves mounting the share and configuring the libvirtd
145 function setup_live_migration_compute() {
146     local compute_ip=$1
147     local control_ip=$2
148     printf "${compute_ip}:Mount Shared directory from ${control_ip}"
149     printf "${compute_ip}:Configure libvirt in listen mode"
150     cat >  ${WORKSPACE}/setup_live_migration_compute.sh << EOF
151 sudo yum install -y libvirt libvirt-devel nfs-utils
152 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tls 0
153 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tcp 1
154 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' auth_tcp '"none"'
155 sudo crudini --verbose  --set --inplace /etc/sysconfig/libvirtd '' LIBVIRTD_ARGS '"--listen"'
156 sudo mkdir --mode=777 -p /var/instances
157 sudo chown -R jenkins:jenkins /var/instances
158 sudo chmod o+x /var/instances
159 sudo systemctl start rpcbind
160 sudo mount -t nfs ${control_ip}:/vm_instances /var/instances
161 sudo mount
162 EOF
163     scp ${WORKSPACE}/setup_live_migration_compute.sh ${compute_ip}:/tmp/setup_live_migration_compute.sh
164     ssh ${compute_ip} "bash /tmp/setup_live_migration_compute.sh"
165 }
166
167 # Add enable_services and disable_services to the local.conf
168 function add_os_services() {
169     local core_services=$1
170     local enable_services=$2
171     local disable_services=$3
172     local local_conf_file_name=$4
173     local enable_network_services=$5
174
175     cat >> ${local_conf_file_name} << EOF
176 enable_service $(csv2ssv "${core_services}")
177 EOF
178     if [ -n "${enable_services}" ]; then
179         cat >> ${local_conf_file_name} << EOF
180 enable_service $(csv2ssv "${enable_services}")
181 EOF
182     fi
183     if [ -n "${disable_services}" ]; then
184         cat >> ${local_conf_file_name} << EOF
185 disable_service $(csv2ssv "${disable_services}")
186 EOF
187     fi
188     if [ -n "${enable_network_services}" ]; then
189         cat >> ${local_conf_file_name} << EOF
190 enable_service $(csv2ssv "${enable_network_services}")
191 EOF
192     fi
193 }
194
195 function create_control_node_local_conf() {
196     HOSTIP=$1
197     MGRIP=$2
198     ODL_OVS_MANAGERS="$3"
199
200     local_conf_file_name=${WORKSPACE}/local.conf_control_${HOSTIP}
201     cat > ${local_conf_file_name} << EOF
202 [[local|localrc]]
203 LOGFILE=stack.sh.log
204 LOG_COLOR=False
205 USE_SYSTEMD=True
206 RECLONE=${RECLONE}
207 # Increase the wait used by stack to poll for services
208 SERVICE_TIMEOUT=120
209
210 disable_all_services
211 EOF
212
213     add_os_services "${CORE_OS_CONTROL_SERVICES}" "${ENABLE_OS_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}" "${ENABLE_OS_NETWORK_SERVICES}"
214
215     cat >> ${local_conf_file_name} << EOF
216
217 HOST_IP=${HOSTIP}
218 SERVICE_HOST=\$HOST_IP
219 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
220 NEUTRON_CREATE_INITIAL_NETWORKS=${CREATE_INITIAL_NETWORKS}
221
222 ODL_MODE=manual
223 ODL_MGR_IP=${MGRIP}
224 ODL_PORT=${ODL_PORT}
225 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
226 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
227
228 MYSQL_HOST=\$SERVICE_HOST
229 RABBIT_HOST=\$SERVICE_HOST
230 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
231 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
232 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
233
234 ADMIN_PASSWORD=${ADMIN_PASSWORD}
235 DATABASE_PASSWORD=${ADMIN_PASSWORD}
236 RABBIT_PASSWORD=${ADMIN_PASSWORD}
237 SERVICE_TOKEN=${ADMIN_PASSWORD}
238 SERVICE_PASSWORD=${ADMIN_PASSWORD}
239
240 NEUTRON_LBAAS_SERVICE_PROVIDERV2=${LBAAS_SERVICE_PROVIDER} # Only relevant if neutron-lbaas plugin is enabled
241 NEUTRON_SFC_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
242 NEUTRON_FLOWCLASSIFIER_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
243 ETCD_PORT=2379
244 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
245 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
246 ML2_VLAN_RANGES=${PUBLIC_PHYSICAL_NETWORK}
247 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
248 EOF
249     if [ "${TENANT_NETWORK_TYPE}" == "local" ]; then
250         cat >> ${local_conf_file_name} << EOF
251 ENABLE_TENANT_TUNNELS=false
252 EOF
253     fi
254
255     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
256         echo "ODL_V2DRIVER=True" >> ${local_conf_file_name}
257     fi
258     IFS=,
259     for plugin_name in ${ENABLE_OS_PLUGINS}; do
260         if [ "$plugin_name" == "networking-odl" ]; then
261             ENABLE_PLUGIN_ARGS="${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}"
262         elif [ "$plugin_name" == "kuryr-kubernetes" ]; then
263             ENABLE_PLUGIN_ARGS="${DEVSTACK_KUBERNETES_PLUGIN_REPO} master" # note: kuryr-kubernetes only exists in master at the moment
264         elif [ "$plugin_name" == "neutron-lbaas" ]; then
265             ENABLE_PLUGIN_ARGS="${DEVSTACK_LBAAS_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
266             IS_LBAAS_PLUGIN_ENABLED="yes"
267         elif [ "$plugin_name" == "networking-sfc" ]; then
268             ENABLE_PLUGIN_ARGS="${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO} master"
269             IS_SFC_PLUGIN_ENABLED="yes"
270         else
271             echo "Error: Invalid plugin $plugin_name, unsupported"
272             continue
273         fi
274         cat >> ${local_conf_file_name} << EOF
275
276 enable_plugin ${plugin_name} ${ENABLE_PLUGIN_ARGS}
277 EOF
278     done
279     unset IFS
280
281     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
282         cat >> ${local_conf_file_name} << EOF
283
284 enable_plugin networking-l2gw ${NETWORKING_L2GW_DRIVER} ${ODL_ML2_BRANCH}
285 NETWORKING_L2GW_SERVICE_DRIVER=L2GW:OpenDaylight:networking_odl.l2gateway.driver_v2.OpenDaylightL2gwDriver:default
286 EOF
287     fi
288
289     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
290        SERVICE_PLUGINS="odl-router_v2"
291     else
292        SERVICE_PLUGINS="odl-router"
293     fi
294     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
295         SERVICE_PLUGINS+=", networking_l2gw.services.l2gateway.plugin.L2GatewayPlugin"
296     fi
297     if [ "${IS_LBAAS_PLUGIN_ENABLED}" == "yes" ]; then
298         SERVICE_PLUGINS+=", lbaasv2"
299     fi
300     if [ "${IS_SFC_PLUGIN_ENABLED}" == "yes" ]; then
301         SERVICE_PLUGINS+=", networking_sfc.services.flowclassifier.plugin.FlowClassifierPlugin,networking_sfc.services.sfc.plugin.SfcPlugin"
302     fi
303
304     cat >> ${local_conf_file_name} << EOF
305
306 [[post-config|\$NEUTRON_CONF]]
307 [DEFAULT]
308 service_plugins = ${SERVICE_PLUGINS}
309 log_dir = /opt/stack/logs
310
311 [[post-config|/etc/neutron/plugins/ml2/ml2_conf.ini]]
312 [agent]
313 minimize_polling=True
314
315 [ml2]
316 # Needed for VLAN provider tests - because our provider networks are always encapsulated in VXLAN (br-physnet1)
317 # MTU(1400) + VXLAN(50) + VLAN(4) = 1454 < MTU eth0/br-physnet1(1458)
318 physical_network_mtus = ${PUBLIC_PHYSICAL_NETWORK}:1400
319 path_mtu = 1458
320 EOF
321     if [ "${ENABLE_GRE_TYPE_DRIVERS}" == "yes" ]; then
322         cat >> ${local_conf_file_name} << EOF
323 type_drivers = local,flat,vlan,gre,vxlan
324 [ml2_type_gre]
325 tunnel_id_ranges = 1:1000
326 EOF
327     fi
328     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
329         cat >> ${local_conf_file_name} << EOF
330
331 [ml2_odl]
332 enable_dhcp_service = True
333 EOF
334     fi
335
336     cat >> ${local_conf_file_name} << EOF
337
338 [ml2_odl]
339 # Trigger n-odl full sync every 30 secs.
340 maintenance_interval = 30
341
342 [[post-config|/etc/neutron/dhcp_agent.ini]]
343 [DEFAULT]
344 force_metadata = True
345 enable_isolated_metadata = True
346 log_dir = /opt/stack/logs
347
348 [[post-config|/etc/nova/nova.conf]]
349 [scheduler]
350 discover_hosts_in_cells_interval = 30
351
352 [DEFAULT]
353 force_config_drive = False
354 force_raw_images = False
355 log_dir = /opt/stack/logs
356
357 EOF
358
359     if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
360         cat >> ${local_conf_file_name} << EOF
361 use_neutron = True
362 force_raw_images = False
363 log_dir = /opt/stack/logs
364 [libvirt]
365 live_migration_uri = qemu+tcp://%s/system
366 virt_type = qemu
367 EOF
368     fi
369
370     if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
371         echo "Combo local.conf created:"
372     else
373         echo "Control local.conf created:"
374     fi
375     cat ${local_conf_file_name}
376 } # create_control_node_local_conf()
377
378 function create_compute_node_local_conf() {
379     HOSTIP=$1
380     SERVICEHOST=$2
381     MGRIP=$3
382     ODL_OVS_MANAGERS="$4"
383
384     local_conf_file_name=${WORKSPACE}/local.conf_compute_${HOSTIP}
385     cat > ${local_conf_file_name} << EOF
386 [[local|localrc]]
387 LOGFILE=stack.sh.log
388 LOG_COLOR=False
389 USE_SYSTEMD=True
390 RECLONE=${RECLONE}
391 # Increase the wait used by stack to poll for the nova service on the control node
392 NOVA_READY_TIMEOUT=1800
393
394 disable_all_services
395 EOF
396
397     add_os_services "${CORE_OS_COMPUTE_SERVICES}" "${ENABLE_OS_COMPUTE_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}"
398
399     cat >> ${local_conf_file_name} << EOF
400 HOST_IP=${HOSTIP}
401 SERVICE_HOST=${SERVICEHOST}
402 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
403
404 ODL_MODE=manual
405 ODL_MGR_IP=${MGRIP}
406 ODL_PORT=${ODL_PORT}
407 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
408 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
409
410 Q_HOST=\$SERVICE_HOST
411 MYSQL_HOST=\$SERVICE_HOST
412 RABBIT_HOST=\$SERVICE_HOST
413 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
414 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
415 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
416
417 ADMIN_PASSWORD=${ADMIN_PASSWORD}
418 DATABASE_PASSWORD=${ADMIN_PASSWORD}
419 RABBIT_PASSWORD=${ADMIN_PASSWORD}
420 SERVICE_TOKEN=${ADMIN_PASSWORD}
421 SERVICE_PASSWORD=${ADMIN_PASSWORD}
422
423 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
424 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
425 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
426 EOF
427
428     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-odl ]]; then
429         cat >> ${local_conf_file_name} << EOF
430
431 enable_plugin networking-odl ${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}
432 EOF
433     fi
434
435     cat >> ${local_conf_file_name} << EOF
436
437 [[post-config|/etc/nova/nova.conf]]
438 [api]
439 auth_strategy = keystone
440 [DEFAULT]
441 use_neutron = True
442 force_raw_images = False
443 log_dir = /opt/stack/logs
444 [libvirt]
445 live_migration_uri = qemu+tcp://%s/system
446 virt_type = qemu
447 EOF
448
449     echo "Compute local.conf created:"
450     cat ${local_conf_file_name}
451 } # create_compute_node_local_conf()
452
453 function configure_haproxy_for_neutron_requests() {
454     MGRIP=$1
455     # shellcheck disable=SC2206
456     ODL_IPS=(${2//,/ })
457
458     cat > ${WORKSPACE}/install_ha_proxy.sh<< EOF
459 sudo systemctl stop firewalld
460 sudo yum -y install policycoreutils-python haproxy
461 EOF
462
463 cat > ${WORKSPACE}/haproxy.cfg << EOF
464 global
465   daemon
466   group  haproxy
467   log  /dev/log local0
468   maxconn  20480
469   pidfile  /tmp/haproxy.pid
470   user  haproxy
471
472 defaults
473   log  global
474   maxconn  4096
475   mode  tcp
476   retries  3
477   timeout  http-request 10s
478   timeout  queue 1m
479   timeout  connect 10s
480   timeout  client 1m
481   timeout  server 1m
482   timeout  check 10s
483
484 listen opendaylight
485   bind ${MGRIP}:8080
486   balance source
487
488 listen opendaylight_rest
489   bind ${MGRIP}:8181
490   balance source
491
492 listen opendaylight_websocket
493   bind ${MGRIP}:8185
494   balance source
495
496 EOF
497
498     odlindex=1
499     for odlip in ${ODL_IPS[*]}; do
500         sed -i "/listen opendaylight$/a server controller-${odlindex} ${odlip}:8080 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
501         sed -i "/listen opendaylight_rest$/a server controller-rest-${odlindex} ${odlip}:8181 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
502         sed -i "/listen opendaylight_websocket$/a server controller-websocket-${odlindex} ${odlip}:8185 check fall 5 inter 2000 rise 2" ${WORKSPACE}/haproxy.cfg
503         odlindex=$((odlindex+1))
504     done
505
506
507     echo "Dump haproxy.cfg"
508     cat ${WORKSPACE}/haproxy.cfg
509
510     cat > ${WORKSPACE}/deploy_ha_proxy.sh<< EOF
511 sudo chown haproxy:haproxy /tmp/haproxy.cfg
512 sudo sed -i 's/\\/etc\\/haproxy\\/haproxy.cfg/\\/tmp\\/haproxy.cfg/g' /usr/lib/systemd/system/haproxy.service
513 sudo /usr/sbin/semanage permissive -a haproxy_t
514 sudo systemctl restart haproxy
515 sleep 3
516 sudo netstat -tunpl
517 sudo systemctl status haproxy
518 true
519 EOF
520
521     scp ${WORKSPACE}/install_ha_proxy.sh ${MGRIP}:/tmp
522     ${SSH} ${MGRIP} "sudo bash /tmp/install_ha_proxy.sh"
523     scp ${WORKSPACE}/haproxy.cfg ${MGRIP}:/tmp
524     scp ${WORKSPACE}/deploy_ha_proxy.sh ${MGRIP}:/tmp
525     ${SSH} ${MGRIP} "sudo bash /tmp/deploy_ha_proxy.sh"
526 } # configure_haproxy_for_neutron_requests()
527
528 # Following three functions are debugging helpers when debugging devstack changes.
529 # Keeping them for now so we can simply call them when needed.
530 ctrlhn=""
531 comp1hn=""
532 comp2hn=""
533 function get_hostnames () {
534     set +e
535     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
536     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
537     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
538     ctrlhn=$(${SSH} ${ctrlip} "hostname")
539     comp1hn=$(${SSH} ${comp1ip} "hostname")
540     comp2hn=$(${SSH} ${comp2ip} "hostname")
541     echo "hostnames: ${ctrlhn}, ${comp1hn}, ${comp2hn}"
542     set -e
543 }
544
545 function check_firewall() {
546     set +e
547     echo $-
548     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
549     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
550     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
551
552     echo "check_firewall on control"
553     ${SSH} ${ctrlip} "
554         sudo systemctl status firewalld
555         sudo systemctl -l status iptables
556         sudo iptables --line-numbers -nvL
557     " || true
558     echo "check_firewall on compute 1"
559     ${SSH} ${comp1ip} "
560         sudo systemctl status firewalld
561         sudo systemctl -l status iptables
562         sudo iptables --line-numbers -nvL
563     " || true
564     echo "check_firewall on compute 2"
565     ${SSH} ${comp2ip} "
566         sudo systemctl status firewalld
567         sudo systemctl -l status iptables
568         sudo iptables --line-numbers -nvL
569     " || true
570 }
571
572 function get_service () {
573     set +e
574     local iter=$1
575     #local idx=$2
576     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
577     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
578
579     #if [ ${idx} -eq 1 ]; then
580         if [ ${iter} -eq 1 ] || [ ${iter} -gt 16 ]; then
581             curl http://${ctrlip}:5000
582             curl http://${ctrlip}:35357
583             curl http://${ctrlip}/identity
584             ${SSH} ${ctrlip} "
585                 source /opt/stack/devstack/openrc admin admin;
586                 env
587                 openstack configuration show --unmask;
588                 openstack service list
589                 openstack --os-cloud devstack-admin --os-region RegionOne compute service list
590                 openstack hypervisor list;
591             " || true
592             check_firewall
593         fi
594     #fi
595     set -e
596 }
597
598 # Check if rabbitmq is ready by looking for a pid in it's status.
599 # The function returns the status of the grep command which callers can check.
600 function is_rabbitmq_ready() {
601     local -r ip=${1}
602     local grepfor="nova_cell1"
603     rm -f rabbit.txt
604     ${SSH} ${ip} "sudo rabbitmqctl list_vhosts" > rabbit.txt
605     grep ${grepfor} rabbit.txt
606 }
607
608 # retry the given command ($3) until success for a number of iterations ($1)
609 # sleeping ($2) between tries.
610 function retry() {
611     local -r -i max_tries=${1}
612     local -r -i sleep_time=${2}
613     local -r cmd=${3}
614     local -i retries=1
615     local -i rc=1
616     while true; do
617         echo "retry ${cmd}: attempt: ${retries}"
618         ${cmd}
619         rc=$?
620         if ((${rc} == 0)); then
621             break;
622         else
623             if ((${retries} == ${max_tries})); then
624                 break
625             else
626                 ((retries++))
627                 sleep ${sleep_time}
628             fi
629         fi
630     done
631     return ${rc}
632 }
633
634 ODL_PROVIDER_MAPPINGS="\${PUBLIC_PHYSICAL_NETWORK}:${PUBLIC_BRIDGE}"
635 RECLONE=False
636 ODL_PORT=8181
637
638 # Always compare the lists below against the devstack upstream ENABLED_SERVICES in
639 # https://github.com/openstack-dev/devstack/blob/master/stackrc#L52
640 # ODL CSIT does not use vnc, cinder, q-agt, q-l3 or horizon so they are not included below.
641 # collect performance stats
642 CORE_OS_CONTROL_SERVICES="dstat"
643 # Glance
644 CORE_OS_CONTROL_SERVICES+=",g-api,g-reg"
645 # Keystone
646 CORE_OS_CONTROL_SERVICES+=",key"
647 # Nova - services to support libvirt
648 CORE_OS_CONTROL_SERVICES+=",n-api,n-api-meta,n-cauth,n-cond,n-crt,n-obj,n-sch"
649 # ODL - services to connect to ODL
650 CORE_OS_CONTROL_SERVICES+=",odl-compute,odl-neutron"
651 # Additional services
652 CORE_OS_CONTROL_SERVICES+=",mysql,rabbit"
653
654 # collect performance stats
655 CORE_OS_COMPUTE_SERVICES="dstat"
656 # computes only need nova and odl
657 CORE_OS_COMPUTE_SERVICES+=",n-cpu,odl-compute"
658
659 cat > ${WORKSPACE}/disable_firewall.sh << EOF
660 sudo systemctl stop firewalld
661 # Open these ports to match the tutorial vms
662 # http/https (80/443), samba (445), netbios (137,138,139)
663 sudo iptables -I INPUT -p tcp -m multiport --dports 80,443,139,445 -j ACCEPT
664 sudo iptables -I INPUT -p udp -m multiport --dports 137,138 -j ACCEPT
665 # OpenStack services as well as vxlan tunnel ports 4789 and 9876
666 # identity public/admin (5000/35357), ampq (5672), vnc (6080), nova (8774), glance (9292), neutron (9696)
667 sudo sudo iptables -I INPUT -p tcp -m multiport --dports 5000,5672,6080,8774,9292,9696,35357 -j ACCEPT
668 sudo sudo iptables -I INPUT -p udp -m multiport --dports 4789,9876 -j ACCEPT
669 sudo iptables-save > /etc/sysconfig/iptables
670 sudo systemctl restart iptables
671 sudo iptables --line-numbers -nvL
672 true
673 EOF
674
675 cat > ${WORKSPACE}/get_devstack.sh << EOF
676 sudo systemctl stop firewalld
677 sudo yum install bridge-utils python-pip -y
678 #sudo systemctl stop  NetworkManager
679 #Disable NetworkManager and kill dhclient and dnsmasq
680 sudo systemctl stop NetworkManager
681 sudo killall dhclient
682 sudo killall dnsmasq
683 #Workaround for mysql failure
684 echo "127.0.0.1   localhost \${HOSTNAME}" >> /tmp/hosts
685 echo "::1         localhost \${HOSTNAME}" >> /tmp/hosts
686 sudo mv /tmp/hosts /etc/hosts
687 sudo mkdir /opt/stack
688 echo "Create RAM disk for /opt/stack"
689 sudo mount -t tmpfs -o size=2G tmpfs /opt/stack
690 sudo chmod 777 /opt/stack
691 cd /opt/stack
692 echo "git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}"
693 git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}
694 cd devstack
695 if [ -n "${DEVSTACK_HASH}" ]; then
696     echo "git checkout ${DEVSTACK_HASH}"
697     git checkout ${DEVSTACK_HASH}
698 fi
699 git --no-pager log --pretty=format:'%h %<(13)%ar%<(13)%cr %<(20,trunc)%an%d %s%b' -n20
700 echo
701
702 echo "workaround: do not upgrade openvswitch"
703 sudo yum install -y yum-plugin-versionlock
704 sudo yum versionlock add openvswitch
705
706 #Install qemu-img command in Control Node for Pike
707 echo "Install qemu-img application"
708 sudo yum install -y qemu-img
709 EOF
710
711 cat > "${WORKSPACE}/setup_host_cell_mapping.sh" << EOF
712 sudo nova-manage cell_v2 map_cell0
713 sudo nova-manage cell_v2 simple_cell_setup
714 sudo nova-manage db sync
715 sudo nova-manage cell_v2 discover_hosts
716 EOF
717
718 NUM_OPENSTACK_SITES=${NUM_OPENSTACK_SITES:-1}
719 compute_index=1
720 odl_index=1
721 os_node_list=()
722 os_interval=$(( ${NUM_OPENSTACK_SYSTEM} / ${NUM_OPENSTACK_SITES} ))
723 ha_proxy_index=${os_interval}
724
725 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
726     if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
727         echo "Configure HAProxy"
728         ODL_HAPROXYIP_PARAM=OPENSTACK_HAPROXY_${i}_IP
729         ha_proxy_index=$(( $ha_proxy_index + $os_interval ))
730         odl_index=$(((i - 1) * 3 + 1))
731         ODL_IP_PARAM1=ODL_SYSTEM_$((odl_index++))_IP
732         ODL_IP_PARAM2=ODL_SYSTEM_$((odl_index++))_IP
733         ODL_IP_PARAM3=ODL_SYSTEM_$((odl_index++))_IP
734         ODLMGRIP[$i]=${!ODL_HAPROXYIP_PARAM} # ODL Northbound uses HAProxy VIP
735         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM1},${!ODL_IP_PARAM2},${!ODL_IP_PARAM3}" # OVSDB connects to all ODL IPs
736         configure_haproxy_for_neutron_requests ${!ODL_HAPROXYIP_PARAM} "${ODL_OVS_MGRS[$i]}"
737     else
738         ODL_IP_PARAM=ODL_SYSTEM_${i}_IP
739         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM}" # ODL Northbound uses ODL IP
740         ODLMGRIP[$i]=${!ODL_IP_PARAM} # OVSDB connects to ODL IP
741     fi
742 done
743
744 os_ip_list=()
745 for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
746     cip=OPENSTACK_CONTROL_NODE_${i}_IP
747     ip=${!cip}
748     os_ip_list+=("${ip}")
749 done
750
751 for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
752     cip=OPENSTACK_COMPUTE_NODE_${i}_IP
753     ip=${!cip}
754     os_ip_list+=("${ip}")
755 done
756
757 for i in "${!os_ip_list[@]}"; do
758     ip=${os_ip_list[i]}
759     tcpdump_start "${i}" "${ip}" "port 6653"
760 done
761
762 # Begin stacking the nodes, starting with the controller(s) and then the compute(s)
763
764 for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
765     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
766     echo "Configure the stack of the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${!CONTROLIP}"
767     scp ${WORKSPACE}/disable_firewall.sh ${!CONTROLIP}:/tmp
768     ${SSH} ${!CONTROLIP} "sudo bash /tmp/disable_firewall.sh"
769     create_etc_hosts ${!CONTROLIP}
770     scp ${WORKSPACE}/hosts_file ${!CONTROLIP}:/tmp/hosts
771     scp ${WORKSPACE}/get_devstack.sh ${!CONTROLIP}:/tmp
772     # devstack Master is yet to migrate fully to lib/neutron, there are some ugly hacks that is
773     # affecting the stacking.
774     # Workaround For Queens, Make the physical Network as physnet1 in lib/neutron
775     # In Queens the neutron new libs are used and do not have the following options from Pike and earlier:
776     # Q_ML2_PLUGIN_FLAT_TYPE_OPTIONS could be used for the flat_networks
777     # and Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS could be used for the ml2_type_vlan
778     ${SSH} ${!CONTROLIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
779     if [ "${ODL_ML2_BRANCH}" == "stable/queens" ]; then
780        ssh ${!CONTROLIP} "sed -i 's/flat_networks public/flat_networks public,physnet1/' /opt/stack/devstack/lib/neutron"
781        ssh ${!CONTROLIP} "sed -i '186i iniset \$NEUTRON_CORE_PLUGIN_CONF ml2_type_vlan network_vlan_ranges public:1:4094,physnet1:1:4094' /opt/stack/devstack/lib/neutron"
782     fi
783     create_control_node_local_conf ${!CONTROLIP} ${ODLMGRIP[$i]} "${ODL_OVS_MGRS[$i]}"
784     scp ${WORKSPACE}/local.conf_control_${!CONTROLIP} ${!CONTROLIP}:/opt/stack/devstack/local.conf
785     echo "Install rdo release to avoid incompatible Package versions"
786     install_rdo_release ${!CONTROLIP}
787     setup_live_migration_control ${!CONTROLIP}
788     if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
789         setup_live_migration_compute ${!CONTROLIP} ${!CONTROLIP}
790     fi
791     echo "Stack the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${CONTROLIP}"
792     ssh ${!CONTROLIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
793     ssh ${!CONTROLIP} "ps -ef | grep stack.sh"
794     ssh ${!CONTROLIP} "ls -lrt /opt/stack/devstack/nohup.out"
795     os_node_list+=("${!CONTROLIP}")
796 done
797
798 # This is a backup to the CELLSV2_SETUP=singleconductor workaround. Keeping it here as an easy lookup
799 # if needed.
800 # Let the control node get started to avoid a race condition where the computes start and try to access
801 # the nova_cell1 on the control node before it is created. If that happens, the nova-compute service on the
802 # compute exits and does not attempt to restart.
803 # 180s is chosen because in test runs the control node usually finished in 17-20 minutes and the computes finished
804 # in 17 minutes, so take the max difference of 3 minutes and the jobs should still finish around the same time.
805 # one of the following errors is seen in the compute n-cpu.log:
806 # Unhandled error: NotAllowed: Connection.open: (530) NOT_ALLOWED - access to vhost 'nova_cell1' refused for user 'stackrabbit'
807 # AccessRefused: (0, 0): (403) ACCESS_REFUSED - Login was refused using authentication mechanism AMQPLAIN. For details see the broker logfile.
808 # Compare that timestamp to this log in the control stack.log: sudo rabbitmqctl set_permissions -p nova_cell1 stackrabbit
809 # If the n-cpu.log is earlier than the control stack.log timestamp then the failure condition is likely hit.
810 if [ ${NUM_OPENSTACK_COMPUTE_NODES} -gt 0 ]; then
811     WAIT_FOR_RABBITMQ_MINUTES=60
812     echo "Wait a maximum of ${WAIT_FOR_RABBITMQ_MINUTES}m until rabbitmq is ready and nova_cell1 created to allow the controller to create nova_cell1 before the computes need it"
813     set +e
814     retry ${WAIT_FOR_RABBITMQ_MINUTES} 60 "is_rabbitmq_ready ${OPENSTACK_CONTROL_NODE_1_IP}"
815     rc=$?
816     set -e
817     if ((${rc} == 0)); then
818       echo "rabbitmq is ready, starting ${NUM_OPENSTACK_COMPUTE_NODES} compute(s)"
819     else
820       echo "rabbitmq was not ready in ${WAIT_FOR_RABBITMQ_MINUTES}m"
821       exit 1
822     fi
823 fi
824
825 for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
826     NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
827     SITE_INDEX=$((((i - 1) / NUM_COMPUTES_PER_SITE) + 1)) # We need the site index to infer the control node IP for this compute
828     COMPUTEIP=OPENSTACK_COMPUTE_NODE_${i}_IP
829     CONTROLIP=OPENSTACK_CONTROL_NODE_${SITE_INDEX}_IP
830     echo "Configure the stack of the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${!COMPUTEIP}"
831     scp ${WORKSPACE}/disable_firewall.sh "${!COMPUTEIP}:/tmp"
832     ${SSH} "${!COMPUTEIP}" "sudo bash /tmp/disable_firewall.sh"
833     create_etc_hosts ${!COMPUTEIP} ${!CONTROLIP}
834     scp ${WORKSPACE}/hosts_file ${!COMPUTEIP}:/tmp/hosts
835     scp ${WORKSPACE}/get_devstack.sh  ${!COMPUTEIP}:/tmp
836     ${SSH} ${!COMPUTEIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
837     create_compute_node_local_conf ${!COMPUTEIP} ${!CONTROLIP} ${ODLMGRIP[$SITE_INDEX]} "${ODL_OVS_MGRS[$SITE_INDEX]}"
838     scp ${WORKSPACE}/local.conf_compute_${!COMPUTEIP} ${!COMPUTEIP}:/opt/stack/devstack/local.conf
839     echo "Install rdo release to avoid incompatible Package versions"
840     install_rdo_release ${!COMPUTEIP}
841     setup_live_migration_compute ${!COMPUTEIP} ${!CONTROLIP}
842     echo "Stack the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${!COMPUTEIP}"
843     ssh ${!COMPUTEIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
844     ssh ${!COMPUTEIP} "ps -ef | grep stack.sh"
845     os_node_list+=("${!COMPUTEIP}")
846 done
847
848 echo "nodelist: ${os_node_list[*]}"
849
850 # This script runs on the openstack nodes. It greps for a string that devstack writes when stacking is complete.
851 # The script then writes a status depending on the grep output that is later scraped by the robot vm to control
852 # the status polling.
853 cat > ${WORKSPACE}/check_stacking.sh << EOF
854 > /tmp/stack_progress
855 ps -ef | grep "stack.sh" | grep -v grep
856 ret=\$?
857 if [ \${ret} -eq 1 ]; then
858     grep "This is your host IP address:" /opt/stack/devstack/nohup.out
859     if [ \$? -eq 0 ]; then
860         echo "Stacking Complete" > /tmp/stack_progress
861     else
862         echo "Stacking Failed" > /tmp/stack_progress
863     fi
864 elif [ \${ret} -eq 0 ]; then
865     echo "Still Stacking" > /tmp/stack_progress
866 fi
867 EOF
868
869 # devstack debugging
870 # get_hostnames
871
872 # Check if the stacking is finished. Poll all nodes every 60s for one hour.
873 iteration=0
874 in_progress=1
875 while [ ${in_progress} -eq 1 ]; do
876     iteration=$(($iteration + 1))
877     for index in "${!os_node_list[@]}"; do
878         echo "node $index ${os_node_list[index]}: checking stacking status attempt ${iteration} of 60"
879         scp ${WORKSPACE}/check_stacking.sh  ${os_node_list[index]}:/tmp
880         ${SSH} ${os_node_list[index]} "bash /tmp/check_stacking.sh"
881         scp ${os_node_list[index]}:/tmp/stack_progress .
882         cat stack_progress
883         stacking_status=`cat stack_progress`
884         # devstack debugging
885         # get_service "${iteration}" "${index}"
886         if [ "$stacking_status" == "Still Stacking" ]; then
887             continue
888         elif [ "$stacking_status" == "Stacking Failed" ]; then
889             echo "node $index ${os_node_list[index]}: stacking has failed"
890             exit 1
891         elif [ "$stacking_status" == "Stacking Complete" ]; then
892             echo "node $index ${os_node_list[index]}: stacking complete"
893             unset 'os_node_list[index]'
894             if  [ ${#os_node_list[@]} -eq 0 ]; then
895                 in_progress=0
896             fi
897         fi
898     done
899     echo "sleep for a minute before the next check"
900     sleep 60
901     if [ ${iteration} -eq 60 ]; then
902         echo "stacking has failed - took longer than 60m"
903         exit 1
904     fi
905 done
906
907 # Further configuration now that stacking is complete.
908 NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
909 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
910     echo "Configure the Control Node"
911     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
912     # Gather Compute IPs for the site
913     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
914         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
915         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
916         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
917     done
918
919     echo "sleep for 60s and print hypervisor-list"
920     sleep 60
921     ${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; nova hypervisor-list"
922     # in the case that we are doing openstack (control + compute) all in one node, then the number of hypervisors
923     # will be the same as the number of openstack systems. However, if we are doing multinode openstack then the
924     # assumption is we have a single control node and the rest are compute nodes, so the number of expected hypervisors
925     # is one less than the total number of openstack systems
926     if [ $((NUM_OPENSTACK_SYSTEM / NUM_OPENSTACK_SITES)) -eq 1 ]; then
927         expected_num_hypervisors=1
928     else
929         expected_num_hypervisors=${NUM_COMPUTES_PER_SITE}
930         if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
931             expected_num_hypervisors=$((expected_num_hypervisors + 1))
932         fi
933     fi
934     num_hypervisors=$(${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; openstack hypervisor list -f value | wc -l" | tail -1 | tr -d "\r")
935     if ! [ "${num_hypervisors}" ] || ! [ ${num_hypervisors} -eq ${expected_num_hypervisors} ]; then
936         echo "Error: Only $num_hypervisors hypervisors detected, expected $expected_num_hypervisors"
937         exit 1
938     fi
939
940     # Gather Compute IPs for the site
941     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
942         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
943         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
944         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
945     done
946
947     # External Network
948     echo "prepare external networks by adding vxlan tunnels between all nodes on a separate bridge..."
949     # FIXME Should there be a unique gateway IP and devstack index for each site?
950     devstack_index=1
951     for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
952         # FIXME - Workaround, ODL (new netvirt) currently adds PUBLIC_BRIDGE as a port in br-int since it doesn't see such a bridge existing when we stack
953         ${SSH} $ip "sudo ovs-vsctl --if-exists del-port br-int $PUBLIC_BRIDGE"
954         ${SSH} $ip "sudo ovs-vsctl --may-exist add-br $PUBLIC_BRIDGE -- set bridge $PUBLIC_BRIDGE other-config:disable-in-band=true other_config:hwaddr=f6:00:00:ff:01:0$((devstack_index++))"
955     done
956
957     # ipsec support
958     if [ "${IPSEC_VXLAN_TUNNELS_ENABLED}" == "yes" ]; then
959         # shellcheck disable=SC2206
960         ALL_NODES=(${!CONTROLIP} ${COMPUTE_IPS[*]})
961         for ((inx_ip1=0; inx_ip1<$((${#ALL_NODES[@]} - 1)); inx_ip1++)); do
962             for ((inx_ip2=$((inx_ip1 + 1)); inx_ip2<${#ALL_NODES[@]}; inx_ip2++)); do
963                 KEY1=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
964                 KEY2=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
965                 ID=0x$(dd if=/dev/urandom count=4 bs=1 2> /dev/null| xxd -p -c 8)
966                 ip1=${ALL_NODES[$inx_ip1]}
967                 ip2=${ALL_NODES[$inx_ip2]}
968                 ${SSH} $ip1 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
969                 ${SSH} $ip1 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
970                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir out tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
971                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir in tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
972
973                 ${SSH} $ip2 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
974                 ${SSH} $ip2 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
975                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir out tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
976                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir in tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
977             done
978         done
979
980         for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
981             echo "ip xfrm configuration for node $ip:"
982             ${SSH} $ip "sudo ip xfrm policy list"
983             ${SSH} $ip "sudo ip xfrm state list"
984         done
985     fi
986
987     # Control Node - PUBLIC_BRIDGE will act as the external router
988     # Parameter values below are used in integration/test - changing them requires updates in intergration/test as well
989     EXTNET_GATEWAY_IP="10.10.10.250"
990     EXTNET_INTERNET_IP="10.9.9.9"
991     EXTNET_PNF_IP="10.10.10.253"
992     ${SSH} ${!CONTROLIP} "sudo ifconfig ${PUBLIC_BRIDGE} up ${EXTNET_GATEWAY_IP}/24"
993
994     # Control Node - external net PNF simulation
995     ${SSH} ${!CONTROLIP} "
996         sudo ip netns add pnf_ns;
997         sudo ip link add pnf_veth0 type veth peer name pnf_veth1;
998         sudo ip link set pnf_veth1 netns pnf_ns;
999         sudo ip link set pnf_veth0 up;
1000         sudo ip netns exec pnf_ns ifconfig pnf_veth1 up ${EXTNET_PNF_IP}/24;
1001         sudo ovs-vsctl add-port ${PUBLIC_BRIDGE} pnf_veth0;
1002     "
1003
1004     # Control Node - external net internet address simulation
1005     ${SSH} ${!CONTROLIP} "
1006         sudo ip tuntap add dev internet_tap mode tap;
1007         sudo ifconfig internet_tap up ${EXTNET_INTERNET_IP}/24;
1008     "
1009
1010     # Computes
1011     compute_index=1
1012     for compute_ip in ${COMPUTE_IPS[*]}; do
1013         # Tunnel from controller to compute
1014         COMPUTEPORT=compute$(( compute_index++ ))_vxlan
1015         ${SSH} ${!CONTROLIP} "
1016             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $COMPUTEPORT -- set interface $COMPUTEPORT type=vxlan options:local_ip=${!CONTROLIP} options:remote_ip=$compute_ip options:dst_port=9876 options:key=flow
1017         "
1018         # Tunnel from compute to controller
1019         CONTROLPORT="control_vxlan"
1020         ${SSH} $compute_ip "
1021             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $CONTROLPORT -- set interface $CONTROLPORT type=vxlan options:local_ip=$compute_ip options:remote_ip=${!CONTROLIP} options:dst_port=9876 options:key=flow
1022         "
1023     done
1024 done
1025
1026 if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
1027     odlmgrip=OPENSTACK_HAPROXY_1_IP
1028     HA_PROXY_IP=${!odlmgrip}
1029     HA_PROXY_1_IP=${!odlmgrip}
1030     odlmgrip2=OPENSTACK_HAPROXY_2_IP
1031     HA_PROXY_2_IP=${!odlmgrip2}
1032     odlmgrip3=OPENSTACK_HAPROXY_1_IP
1033     HA_PROXY_3_IP=${!odlmgrip3}
1034 else
1035     HA_PROXY_IP=${ODL_SYSTEM_IP}
1036     HA_PROXY_1_IP=${ODL_SYSTEM_1_IP}
1037     HA_PROXY_2_IP=${ODL_SYSTEM_2_IP}
1038     HA_PROXY_3_IP=${ODL_SYSTEM_3_IP}
1039 fi
1040
1041 echo "Locating test plan to use..."
1042 testplan_filepath="${WORKSPACE}/test/csit/testplans/${STREAMTESTPLAN}"
1043 if [ ! -f "${testplan_filepath}" ]; then
1044     testplan_filepath="${WORKSPACE}/test/csit/testplans/${TESTPLAN}"
1045 fi
1046
1047 echo "Changing the testplan path..."
1048 cat "${testplan_filepath}" | sed "s:integration:${WORKSPACE}:" > testplan.txt
1049 cat testplan.txt
1050
1051 # Use the testplan if specific SUITES are not defined.
1052 if [ -z "${SUITES}" ]; then
1053     SUITES=`egrep -v '(^[[:space:]]*#|^[[:space:]]*$)' testplan.txt | tr '\012' ' '`
1054 else
1055     newsuites=""
1056     workpath="${WORKSPACE}/test/csit/suites"
1057     for suite in ${SUITES}; do
1058         fullsuite="${workpath}/${suite}"
1059         if [ -z "${newsuites}" ]; then
1060             newsuites+=${fullsuite}
1061         else
1062             newsuites+=" "${fullsuite}
1063         fi
1064     done
1065     SUITES=${newsuites}
1066 fi
1067
1068 #install all client versions required for this job testing
1069 install_openstack_clients_in_robot_vm
1070
1071 # TODO: run openrc on control node and then scrape the vars from it
1072 # Environment Variables Needed to execute Openstack Client for NetVirt Jobs
1073 cat > /tmp/os_netvirt_client_rc << EOF
1074 export OS_USERNAME=admin
1075 export OS_PASSWORD=admin
1076 export OS_PROJECT_NAME=admin
1077 export OS_USER_DOMAIN_NAME=default
1078 export OS_PROJECT_DOMAIN_NAME=default
1079 export OS_AUTH_URL="http://${!CONTROLIP}/identity"
1080 export OS_IDENTITY_API_VERSION=3
1081 export OS_IMAGE_API_VERSION=2
1082 export OS_TENANT_NAME=admin
1083 unset OS_CLOUD
1084 EOF
1085
1086 source /tmp/os_netvirt_client_rc
1087
1088 echo "Get all versions before executing pybot"
1089 echo "openstack --version"
1090 which openstack
1091 openstack --version
1092 echo "nova --version"
1093 which nova
1094 nova --version
1095 echo "neutron --version"
1096 which neutron
1097 neutron --version
1098
1099 stacktime=$(timer $totaltmr)
1100 printf "Stacking elapsed time: %s\n" "${stacktime}"
1101
1102 echo "Starting Robot test suites ${SUITES} ..."
1103 # please add pybot -v arguments on a single line and alphabetized
1104 suite_num=0
1105 for suite in ${SUITES}; do
1106     # prepend an incremental counter to the suite name so that the full robot log combining all the suites as is done
1107     # in the rebot step below will list all the suites in chronological order as rebot seems to alphabetize them
1108     let "suite_num = suite_num + 1"
1109     suite_index="$(printf %02d ${suite_num})"
1110     suite_name="$(basename ${suite} | cut -d. -f1)"
1111     log_name="${suite_index}_${suite_name}"
1112     pybot -N ${log_name} \
1113     -c critical -e exclude -e skip_if_${DISTROSTREAM} \
1114     --log log_${log_name}.html --report report_${log_name}.html --output output_${log_name}.xml \
1115     --removekeywords wuks \
1116     --removekeywords name:SetupUtils.Setup_Utils_For_Setup_And_Teardown \
1117     --removekeywords name:SetupUtils.Setup_Test_With_Logging_And_Without_Fast_Failing \
1118     --removekeywords name:OpenStackOperations.Add_OVS_Logging_On_All_OpenStack_Nodes \
1119     -v BUNDLEFOLDER:${BUNDLEFOLDER} \
1120     -v BUNDLE_URL:${ACTUAL_BUNDLE_URL} \
1121     -v CMP_INSTANCES_SHARED_PATH:/var/instances \
1122     -v CONTROLLERFEATURES:"${CONTROLLERFEATURES}" \
1123     -v CONTROLLER_USER:${USER} \
1124     -v DEVSTACK_DEPLOY_PATH:/opt/stack/devstack \
1125     -v ENABLE_ITM_DIRECT_TUNNELS:${ENABLE_ITM_DIRECT_TUNNELS} \
1126     -v HA_PROXY_IP:${HA_PROXY_IP} \
1127     -v HA_PROXY_1_IP:${HA_PROXY_1_IP} \
1128     -v HA_PROXY_2_IP:${HA_PROXY_2_IP} \
1129     -v HA_PROXY_3_IP:${HA_PROXY_3_IP} \
1130     -v JDKVERSION:${JDKVERSION} \
1131     -v JENKINS_WORKSPACE:${WORKSPACE} \
1132     -v NEXUSURL_PREFIX:${NEXUSURL_PREFIX} \
1133     -v NUM_ODL_SYSTEM:${NUM_ODL_SYSTEM} \
1134     -v NUM_OPENSTACK_SITES:${NUM_OPENSTACK_SITES} \
1135     -v NUM_OS_SYSTEM:${NUM_OPENSTACK_SYSTEM} \
1136     -v NUM_TOOLS_SYSTEM:${NUM_TOOLS_SYSTEM} \
1137     -v ODL_SNAT_MODE:${ODL_SNAT_MODE} \
1138     -v ODL_STREAM:${DISTROSTREAM} \
1139     -v ODL_SYSTEM_IP:${ODL_SYSTEM_IP} \
1140     -v ODL_SYSTEM_1_IP:${ODL_SYSTEM_1_IP} \
1141     -v ODL_SYSTEM_2_IP:${ODL_SYSTEM_2_IP} \
1142     -v ODL_SYSTEM_3_IP:${ODL_SYSTEM_3_IP} \
1143     -v ODL_SYSTEM_4_IP:${ODL_SYSTEM_4_IP} \
1144     -v ODL_SYSTEM_5_IP:${ODL_SYSTEM_5_IP} \
1145     -v ODL_SYSTEM_6_IP:${ODL_SYSTEM_6_IP} \
1146     -v ODL_SYSTEM_7_IP:${ODL_SYSTEM_7_IP} \
1147     -v ODL_SYSTEM_8_IP:${ODL_SYSTEM_8_IP} \
1148     -v ODL_SYSTEM_9_IP:${ODL_SYSTEM_9_IP} \
1149     -v OS_CONTROL_NODE_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1150     -v OS_CONTROL_NODE_1_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1151     -v OS_CONTROL_NODE_2_IP:${OPENSTACK_CONTROL_NODE_2_IP} \
1152     -v OS_CONTROL_NODE_3_IP:${OPENSTACK_CONTROL_NODE_3_IP} \
1153     -v OPENSTACK_BRANCH:${OPENSTACK_BRANCH} \
1154     -v OS_COMPUTE_1_IP:${OPENSTACK_COMPUTE_NODE_1_IP} \
1155     -v OS_COMPUTE_2_IP:${OPENSTACK_COMPUTE_NODE_2_IP} \
1156     -v OS_COMPUTE_3_IP:${OPENSTACK_COMPUTE_NODE_3_IP} \
1157     -v OS_COMPUTE_4_IP:${OPENSTACK_COMPUTE_NODE_4_IP} \
1158     -v OS_COMPUTE_5_IP:${OPENSTACK_COMPUTE_NODE_5_IP} \
1159     -v OS_COMPUTE_6_IP:${OPENSTACK_COMPUTE_NODE_6_IP} \
1160     -v OPENSTACK_TOPO:${OPENSTACK_TOPO} \
1161     -v OS_USER:${USER} \
1162     -v PUBLIC_PHYSICAL_NETWORK:${PUBLIC_PHYSICAL_NETWORK} \
1163     -v SECURITY_GROUP_MODE:${SECURITY_GROUP_MODE} \
1164     -v TOOLS_SYSTEM_IP:${TOOLS_SYSTEM_1_IP} \
1165     -v TOOLS_SYSTEM_1_IP:${TOOLS_SYSTEM_1_IP} \
1166     -v TOOLS_SYSTEM_2_IP:${TOOLS_SYSTEM_2_IP} \
1167     -v USER_HOME:${HOME} \
1168     -v WORKSPACE:/tmp \
1169     ${TESTOPTIONS} ${suite} || true
1170 done
1171 #rebot exit codes seem to be different
1172 rebot --output ${WORKSPACE}/output.xml --log log_full.html --report report.html -N openstack output_*.xml || true
1173
1174 echo "Examining the files in data/log and checking file size"
1175 ssh ${ODL_SYSTEM_IP} "ls -altr /tmp/${BUNDLEFOLDER}/data/log/"
1176 ssh ${ODL_SYSTEM_IP} "du -hs /tmp/${BUNDLEFOLDER}/data/log/*"
1177
1178 echo "Tests Executed"
1179 printf "Total elapsed time: %s, stacking time: %s\n" "$(timer $totaltmr)" "${stacktime}"
1180 true  # perhaps Jenkins is testing last exit code
1181 # vim: ts=4 sw=4 sts=4 et ft=sh :