jjb/integration/integration-deploy-openstack-run-test.sh

   1 #@IgnoreInspection BashAddShebang
   2 # Activate robotframework virtualenv
   3 # ${ROBOT_VENV} comes from the integration-install-robotframework.sh
   4 # script.
   5 # shellcheck source=${ROBOT_VENV}/bin/activate disable=SC1091
   6 source ${ROBOT_VENV}/bin/activate
   7 PYTHON="${ROBOT_VENV}/bin/python"
   8 SSH="ssh -t -t"
   9 ADMIN_PASSWORD=admin
  10
  11 # TODO: remove this work to run changes.py if/when it's moved higher up to be visible at the Robot level
  12 echo "showing recent changes that made it in to the distribution used by this job"
  13 $PYTHON -m pip install --upgrade urllib3
  14 python ${WORKSPACE}/test/tools/distchanges/changes.py -d /tmp/distribution_folder \
  15                   -u ${ACTUAL_BUNDLE_URL} -b ${DISTROBRANCH} \
  16                   -r ssh://jenkins-${SILO}@git.opendaylight.org:29418 || true
  17
  18 echo "#################################################"
  19 echo "##         Deploy Openstack 3-node             ##"
  20 echo "#################################################"
  21
  22 # Catch command errors and collect logs.
  23 # This ensures logs are collected when script commands fail rather than simply exiting.
  24 function trap_handler() {
  25     local prog="$0"
  26     local lastline="$1"
  27     local lasterr="$2"
  28     echo "${prog}: line ${lastline}: exit status of last command: ${lasterr}"
  29     echo "command: ${BASH_COMMAND}"
  30     collect_logs
  31     exit 1
  32 } # trap_handler()
  33
  34 trap 'trap_handler ${LINENO} ${$?}' ERR
  35
  36 function create_etc_hosts() {
  37     NODE_IP=$1
  38     CTRL_IP=$2
  39     : > ${WORKSPACE}/hosts_file
  40     for iter in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`
  41     do
  42         COMPUTE_IP=OPENSTACK_COMPUTE_NODE_${iter}_IP
  43         if [ "${!COMPUTE_IP}" == "${NODE_IP}" ]; then
  44            CONTROL_HNAME=$(${SSH}  ${CTRL_IP}  "hostname")
  45            echo "${CTRL_IP}   ${CONTROL_HNAME}" >> ${WORKSPACE}/hosts_file
  46         else
  47            COMPUTE_HNAME=$(${SSH}  ${!COMPUTE_IP}  "hostname")
  48            echo "${!COMPUTE_IP}   ${COMPUTE_HNAME}" >> ${WORKSPACE}/hosts_file
  49         fi
  50     done
  51
  52     echo "Created the hosts file for ${NODE_IP}:"
  53     cat ${WORKSPACE}/hosts_file
  54 } # create_etc_hosts()
  55
  56 # convert commas in csv strings to spaces (ssv)
  57 function csv2ssv() {
  58     local csv=$1
  59     if [ -n "${csv}" ]; then
  60         ssv=$(echo ${csv} | sed 's/,/ /g' | sed 's/\ \ */\ /g')
  61     fi
  62
  63     echo "${ssv}"
  64 } # csv2ssv
  65
  66 function create_control_node_local_conf() {
  67     HOSTIP=$1
  68     MGRIP=$2
  69     ODL_OVS_MANAGERS="$3"
  70
  71     local_conf_file_name=${WORKSPACE}/local.conf_control_${HOSTIP}
  72     cat > ${local_conf_file_name} << EOF
  73 [[local|localrc]]
  74 LOGFILE=stack.sh.log
  75 USE_SCREEN=True
  76 SCREEN_LOGDIR=/opt/stack/data/log
  77 LOG_COLOR=False
  78 RECLONE=${RECLONE}
  79
  80 disable_all_services
  81 EOF
  82
  83     CORE_OS_SERVICES="dstat,g-api,g-reg,key,mysql,n-api,n-cauth,n-cond,n-crt,n-obj,n-sch,odl-compute,odl-neutron,q-dhcp,q-meta,q-svc,rabbit"
  84     cat >> ${local_conf_file_name} << EOF
  85 enable_service $(csv2ssv "${CORE_OS_SERVICES}")
  86 EOF
  87     if [ -n "${ENABLE_OS_SERVICES}" ]; then
  88         cat >> ${local_conf_file_name} << EOF
  89 enable_service $(csv2ssv "${ENABLE_OS_SERVICES}")
  90 EOF
  91     fi
  92     if [ -n "${DISABLE_OS_SERVICES}" ]; then
  93         cat >> ${local_conf_file_name} << EOF
  94 disable_service $(csv2ssv "${DISABLE_OS_SERVICES}")
  95 EOF
  96     fi
  97
  98     cat >> ${local_conf_file_name} << EOF
  99
 100 HOST_IP=${HOSTIP}
 101 SERVICE_HOST=\$HOST_IP
 102 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
 103 NEUTRON_CREATE_INITIAL_NETWORKS=${CREATE_INITIAL_NETWORKS}
 104 #Q_PLUGIN=ml2
 105 #ENABLE_TENANT_TUNNELS=True
 106 #LIBVIRT_TYPE=qemu
 107
 108 ODL_MODE=manual
 109 ODL_MGR_IP=${MGRIP}
 110 ODL_PORT=8080
 111 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
 112 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
 113
 114 MYSQL_HOST=\$SERVICE_HOST
 115 RABBIT_HOST=\$SERVICE_HOST
 116 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
 117 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
 118 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
 119
 120 ADMIN_PASSWORD=${ADMIN_PASSWORD}
 121 DATABASE_PASSWORD=${ADMIN_PASSWORD}
 122 RABBIT_PASSWORD=${ADMIN_PASSWORD}
 123 SERVICE_TOKEN=${ADMIN_PASSWORD}
 124 SERVICE_PASSWORD=${ADMIN_PASSWORD}
 125
 126 NEUTRON_LBAAS_SERVICE_PROVIDERV2=${LBAAS_SERVICE_PROVIDER} # Only relevant if neutron-lbaas plugin is enabled
 127 NEUTRON_SFC_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
 128 NEUTRON_FLOWCLASSIFIER_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
 129 ETCD_PORT=2379
 130 EOF
 131
 132     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
 133         echo "ODL_V2DRIVER=True" >> ${local_conf_file_name}
 134     fi
 135
 136     IFS=,
 137     for plugin_name in ${ENABLE_OS_PLUGINS}; do
 138         if [ "$plugin_name" == "networking-odl" ]; then
 139             ENABLE_PLUGIN_ARGS="${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}"
 140         elif [ "$plugin_name" == "kuryr-kubernetes" ]; then
 141             ENABLE_PLUGIN_ARGS="${DEVSTACK_KUBERNETES_PLUGIN_REPO} master" # note: kuryr-kubernetes only exists in master at the moment
 142         elif [ "$plugin_name" == "neutron-lbaas" ]; then
 143             ENABLE_PLUGIN_ARGS="${DEVSTACK_LBAAS_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
 144             IS_LBAAS_PLUGIN_ENABLED="yes"
 145         elif [ "$plugin_name" == "networking-sfc" ]; then
 146             ENABLE_PLUGIN_ARGS="${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
 147         else
 148             echo "Error: Invalid plugin $plugin_name, unsupported"
 149             continue
 150         fi
 151         cat >> ${local_conf_file_name} << EOF
 152
 153 enable_plugin ${plugin_name} ${ENABLE_PLUGIN_ARGS}
 154 EOF
 155     done
 156     unset IFS
 157
 158     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 159         cat >> ${local_conf_file_name} << EOF
 160
 161 enable_plugin networking-l2gw ${NETWORKING_L2GW_DRIVER} ${ODL_ML2_BRANCH}
 162 NETWORKING_L2GW_SERVICE_DRIVER=L2GW:OpenDaylight:networking_odl.l2gateway.driver.OpenDaylightL2gwDriver:default
 163 EOF
 164     fi
 165
 166     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
 167         cat >> ${local_conf_file_name} << EOF
 168
 169 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
 170 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
 171 ML2_VLAN_RANGES=${PUBLIC_PHYSICAL_NETWORK}
 172 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
 173 EOF
 174
 175         if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
 176            SERVICE_PLUGINS="odl-router_v2"
 177         else
 178            SERVICE_PLUGINS="odl-router"
 179         fi
 180         if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 181             SERVICE_PLUGINS+=", networking_l2gw.services.l2gateway.plugin.L2GatewayPlugin"
 182         fi
 183         if [ "${IS_LBAAS_PLUGIN_ENABLED}" == "yes" ]; then
 184             SERVICE_PLUGINS+=", lbaasv2"
 185         fi
 186     fi #check for ODL_ENABLE_L3_FWD
 187
 188     cat >> ${local_conf_file_name} << EOF
 189
 190 [[post-config|\$NEUTRON_CONF]]
 191 [DEFAULT]
 192 service_plugins = ${SERVICE_PLUGINS}
 193
 194 [[post-config|/etc/neutron/plugins/ml2/ml2_conf.ini]]
 195 [agent]
 196 minimize_polling=True
 197
 198 [ml2]
 199 # Needed for VLAN provider tests - because our provider networks are always encapsulated in VXLAN (br-physnet1)
 200 # MTU(1440) + VXLAN(50) + VLAN(4) = 1494 < MTU eth0/br-physnet1(1500)
 201 physical_network_mtus = ${PUBLIC_PHYSICAL_NETWORK}:1440
 202 path_mtu = 1490
 203
 204 # workaround for port-status not working due to https://bugs.opendaylight.org/show_bug.cgi?id=9092
 205 [ml2_odl]
 206 odl_features=nothing
 207
 208 [[post-config|/etc/neutron/dhcp_agent.ini]]
 209 [DEFAULT]
 210 force_metadata = True
 211 enable_isolated_metadata = True
 212
 213 [[post-config|/etc/nova/nova.conf]]
 214 [DEFAULT]
 215 force_config_drive = False
 216
 217 [scheduler]
 218 discover_hosts_in_cells_interval = 30
 219 EOF
 220
 221     echo "Control local.conf created:"
 222     cat ${local_conf_file_name}
 223 } # create_control_node_local_conf()
 224
 225 function create_compute_node_local_conf() {
 226     HOSTIP=$1
 227     SERVICEHOST=$2
 228     MGRIP=$3
 229     ODL_OVS_MANAGERS="$4"
 230
 231     local_conf_file_name=${WORKSPACE}/local.conf_compute_${HOSTIP}
 232     cat > ${local_conf_file_name} << EOF
 233 [[local|localrc]]
 234 LOGFILE=stack.sh.log
 235 LOG_COLOR=False
 236 USE_SCREEN=True
 237 SCREEN_LOGDIR=/opt/stack/data/log
 238 RECLONE=${RECLONE}
 239
 240 disable_all_services
 241 EOF
 242
 243     CORE_OS_SERVICES="n-cpu,odl-compute"
 244     cat >> ${local_conf_file_name} << EOF
 245 enable_service $(csv2ssv "${CORE_OS_SERVICES}")
 246 EOF
 247     if [ -n "${ENABLE_OS_COMPUTE_SERVICES}" ]; then
 248         cat >> ${local_conf_file_name} << EOF
 249 enable_service $(csv2ssv "${ENABLE_OS_COMPUTE_SERVICES}")
 250 EOF
 251     fi
 252     if [ -n "${DISABLE_OS_SERVICES}" ]; then
 253         cat >> ${local_conf_file_name} << EOF
 254 disable_service $(csv2ssv "${DISABLE_OS_SERVICES}")
 255 EOF
 256     fi
 257
 258     cat >> ${local_conf_file_name} << EOF
 259
 260 HOST_IP=${HOSTIP}
 261 SERVICE_HOST=${SERVICEHOST}
 262 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
 263 #Q_PLUGIN=ml2
 264 #ENABLE_TENANT_TUNNELS=True
 265 #LIBVIRT_TYPE=qemu
 266 #MULTI_HOST=1
 267
 268 ODL_MODE=manual
 269 ODL_MGR_IP=${MGRIP}
 270 ODL_PORT=8080
 271 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
 272 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
 273
 274 Q_HOST=\$SERVICE_HOST
 275 MYSQL_HOST=\$SERVICE_HOST
 276 RABBIT_HOST=\$SERVICE_HOST
 277 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
 278 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
 279 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
 280
 281 ADMIN_PASSWORD=${ADMIN_PASSWORD}
 282 DATABASE_PASSWORD=${ADMIN_PASSWORD}
 283 RABBIT_PASSWORD=${ADMIN_PASSWORD}
 284 SERVICE_TOKEN=${ADMIN_PASSWORD}
 285 SERVICE_PASSWORD=${ADMIN_PASSWORD}
 286 EOF
 287
 288     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-odl ]]; then
 289         cat >> ${local_conf_file_name} << EOF
 290
 291 enable_plugin networking-odl ${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}
 292 EOF
 293     fi
 294
 295     if [ "${ODL_ENABLE_L3_FWD}" == "yes" ]; then
 296         cat >> ${local_conf_file_name} << EOF
 297
 298 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
 299 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
 300 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
 301 Q_L3_ENABLED=True
 302 ODL_L3=${ODL_L3}
 303 EOF
 304     fi
 305
 306     cat >> ${local_conf_file_name} << EOF
 307
 308 [[post-config|/etc/nova/nova.conf]]
 309 [api]
 310 auth_strategy = keystone
 311 [DEFAULT]
 312 use_neutron = True
 313 EOF
 314
 315     echo "Compute local.conf created:"
 316     cat ${local_conf_file_name}
 317 } # create_compute_node_local_conf()
 318
 319 function configure_haproxy_for_neutron_requests() {
 320     MGRIP=$1
 321     ODL_IPS=(${2//,/ })
 322
 323     cat > ${WORKSPACE}/install_ha_proxy.sh<< EOF
 324 sudo systemctl stop firewalld
 325 sudo yum -y install policycoreutils-python haproxy
 326 EOF
 327
 328 cat > ${WORKSPACE}/haproxy.cfg << EOF
 329 global
 330   daemon
 331   group  haproxy
 332   log  /dev/log local0
 333   maxconn  20480
 334   pidfile  /tmp/haproxy.pid
 335   user  haproxy
 336
 337 defaults
 338   log  global
 339   maxconn  4096
 340   mode  tcp
 341   retries  3
 342   timeout  http-request 10s
 343   timeout  queue 1m
 344   timeout  connect 10s
 345   timeout  client 1m
 346   timeout  server 1m
 347   timeout  check 10s
 348
 349 listen opendaylight
 350   bind ${MGRIP}:8080
 351   balance source
 352 EOF
 353
 354     odlindex=1
 355     for odlip in ${ODL_IPS[*]}; do
 356         cat >> ${WORKSPACE}/haproxy.cfg << EOF
 357   server controller-${odlindex} ${odlip}:8080 check fall 5 inter 2000 rise 2
 358 EOF
 359         odlindex=$((odlindex+1))
 360     done
 361
 362     cat >> ${WORKSPACE}/haproxy.cfg << EOF
 363 listen opendaylight_rest
 364   bind ${MGRIP}:8181
 365   balance source
 366 EOF
 367
 368     odlindex=1
 369     for odlip in ${ODL_IPS[*]}; do
 370         cat >> ${WORKSPACE}/haproxy.cfg << EOF
 371   server controller-rest-${odlindex} ${odlip}:8181 check fall 5 inter 2000 rise 2
 372 EOF
 373         odlindex=$((odlindex+1))
 374     done
 375
 376     echo "Dump haproxy.cfg"
 377     cat ${WORKSPACE}/haproxy.cfg
 378
 379     cat > ${WORKSPACE}/deploy_ha_proxy.sh<< EOF
 380 sudo chown haproxy:haproxy /tmp/haproxy.cfg
 381 sudo sed -i 's/\\/etc\\/haproxy\\/haproxy.cfg/\\/tmp\\/haproxy.cfg/g' /usr/lib/systemd/system/haproxy.service
 382 sudo /usr/sbin/semanage permissive -a haproxy_t
 383 sudo systemctl restart haproxy
 384 sleep 3
 385 sudo netstat -tunpl
 386 sudo systemctl status haproxy
 387 true
 388 EOF
 389
 390     scp ${WORKSPACE}/install_ha_proxy.sh ${MGRIP}:/tmp
 391     ${SSH} ${MGRIP} "sudo bash /tmp/install_ha_proxy.sh"
 392     scp ${WORKSPACE}/haproxy.cfg ${MGRIP}:/tmp
 393     scp ${WORKSPACE}/deploy_ha_proxy.sh ${MGRIP}:/tmp
 394     ${SSH} ${MGRIP} "sudo bash /tmp/deploy_ha_proxy.sh"
 395 } # configure_haproxy_for_neutron_requests()
 396
 397 function collect_logs () {
 398     set +e  # We do not want to create red dot just because something went wrong while fetching logs.
 399     for i in `seq 1 ${NUM_ODL_SYSTEM}`; do
 400         CONTROLLERIP=ODL_SYSTEM_${i}_IP
 401         echo "Lets's take the karaf thread dump again..."
 402         KARAF_PID=$(ssh ${!CONTROLLERIP} "ps aux | grep ${KARAF_ARTIFACT} | grep -v grep | tr -s ' ' | cut -f2 -d' '")
 403         ssh ${!CONTROLLERIP} "jstack $KARAF_PID"> ${WORKSPACE}/karaf_${i}_threads_after.log || true
 404         echo "killing karaf process..."
 405         ${SSH} "${!CONTROLLERIP}" bash -c 'ps axf | grep karaf | grep -v grep | awk '"'"'{print "kill -9 " $1}'"'"' | sh'
 406     done
 407
 408     cat > extra_debug.sh << EOF
 409 echo -e "/usr/sbin/lsmod | /usr/bin/grep openvswitch\n"
 410 /usr/sbin/lsmod | /usr/bin/grep openvswitch
 411 echo -e "\ngrep ct_ /var/log/openvswitch/ovs-vswitchd.log\n"
 412 grep ct_ /var/log/openvswitch/ovs-vswitchd.log
 413 echo -e "\novsdb-tool -mm show-log\n"
 414 ovsdb-tool -mm show-log
 415 echo -e "\nsudo netstat -punta\n"
 416 sudo netstat -punta
 417 echo -e "\nsudo getenforce\n"
 418 sudo getenforce
 419 echo -e "\njournalctl > /tmp/journalctl.log\n"
 420 sudo journalctl > /tmp/journalctl.log
 421 EOF
 422
 423     sleep 5
 424     # FIXME: Do not create .tar and gzip before copying.
 425     for i in `seq 1 ${NUM_ODL_SYSTEM}`; do
 426         CONTROLLERIP=ODL_SYSTEM_${i}_IP
 427         ${SSH} "${!CONTROLLERIP}"  "cp -r /tmp/${BUNDLEFOLDER}/data/log /tmp/odl_log"
 428         ${SSH} "${!CONTROLLERIP}"  "tar -cf /tmp/odl${i}_karaf.log.tar /tmp/odl_log/*"
 429         scp "${!CONTROLLERIP}:/tmp/odl${i}_karaf.log.tar" "${WORKSPACE}/odl${i}_karaf.log.tar"
 430         ${SSH} "${!CONTROLLERIP}"  "tar -cf /tmp/odl${i}_zrpcd.log.tar /tmp/zrpcd.init.log"
 431         scp "${!CONTROLLERIP}:/tmp/odl${i}_zrpcd.log.tar" "${WORKSPACE}/odl${i}_zrpcd.log.tar"
 432         tar -xvf ${WORKSPACE}/odl${i}_karaf.log.tar -C . --strip-components 2 --transform s/karaf/odl${i}_karaf/g
 433         grep "ROBOT MESSAGE\| ERROR " odl${i}_karaf.log > odl${i}_err.log
 434         grep "ROBOT MESSAGE\|Exception" odl${i}_karaf.log > odl${i}_exception.log
 435         grep "ROBOT MESSAGE\| ERROR \| WARN \|Exception" odl${i}_karaf.log > odl${i}_err_warn_exception.log
 436         rm ${WORKSPACE}/odl${i}_karaf.log.tar
 437     done
 438
 439     # Since this log collection work is happening before the archive build macro which also
 440     # creates the ${WORKSPACE}/archives dir, we have to do it here first.  The mkdir in the
 441     # archives build step will essentially be a noop.
 442     mkdir -p ${WORKSPACE}/archives
 443
 444     # Control Node
 445     for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
 446         OSIP=OPENSTACK_CONTROL_NODE_${i}_IP
 447         NODE_FOLDER="control_${i}"
 448         mkdir -p ${NODE_FOLDER}
 449         scp ${!OSIP}:/etc/kuryr/kuryr.conf ${NODE_FOLDER}
 450         scp ${!OSIP}:/etc/neutron/dhcp_agent.ini ${NODE_FOLDER}
 451         scp ${!OSIP}:/etc/neutron/metadata_agent.ini ${NODE_FOLDER}
 452         scp ${!OSIP}:/etc/neutron/neutron.conf ${NODE_FOLDER}
 453         scp ${!OSIP}:/etc/neutron/neutron_lbaas.conf ${NODE_FOLDER}
 454         scp ${!OSIP}:/etc/neutron/plugins/ml2/ml2_conf.ini ${NODE_FOLDER}
 455         scp ${!OSIP}:/etc/neutron/services/loadbalancer/haproxy/lbaas_agent.ini ${NODE_FOLDER}
 456         scp ${!OSIP}:/etc/nova/nova.conf ${NODE_FOLDER}
 457         scp ${!OSIP}:/opt/stack/devstack/nohup.out ${NODE_FOLDER}/stack.log
 458         scp ${!OSIP}:/opt/stack/requirements/upper-constraints.txt ${NODE_FOLDER}
 459         scp ${!OSIP}:/tmp/get_devstack.sh.txt ${NODE_FOLDER}
 460         scp ${!OSIP}:/var/log/openvswitch/ovs-vswitchd.log ${NODE_FOLDER}
 461         scp ${!OSIP}:/var/log/openvswitch/ovsdb-server.log ${NODE_FOLDER}
 462         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/etc/hosts ${NODE_FOLDER}
 463         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/usr/lib/systemd/system/haproxy.service ${NODE_FOLDER}
 464         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/audit/audit.log ${NODE_FOLDER}
 465         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/messages ${NODE_FOLDER}
 466         rsync -avhe ssh ${!OSIP}:/opt/stack/logs/* ${NODE_FOLDER} # rsync to prevent copying of symbolic links
 467         scp extra_debug.sh ${!OSIP}:/tmp
 468         ${SSH} ${!OSIP} "bash /tmp/extra_debug.sh > /tmp/extra_debug.log"
 469         scp ${!OSIP}:/tmp/extra_debug.log ${NODE_FOLDER}
 470         scp ${!OSIP}:/tmp/journalctl.log ${NODE_FOLDER}
 471         scp ${!OSIP}:/tmp/*.xz ${NODE_FOLDER}
 472         mv local.conf_control_${!OSIP} ${NODE_FOLDER}/local.conf
 473         mv ${NODE_FOLDER} ${WORKSPACE}/archives/
 474     done
 475
 476     # Compute Nodes
 477     for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
 478         OSIP=OPENSTACK_COMPUTE_NODE_${i}_IP
 479         NODE_FOLDER="compute_${i}"
 480         mkdir -p ${NODE_FOLDER}
 481         scp ${!OSIP}:/etc/nova/nova.conf ${NODE_FOLDER}
 482         scp ${!OSIP}:/opt/stack/devstack/nohup.out ${NODE_FOLDER}/stack.log
 483         scp ${!OSIP}:/opt/stack/requirements/upper-constraints.txt ${NODE_FOLDER}
 484         scp ${!OSIP}:/tmp/get_devstack.sh.txt ${NODE_FOLDER}
 485         scp ${!OSIP}:/var/log/openvswitch/ovs-vswitchd.log ${NODE_FOLDER}
 486         scp ${!OSIP}:/var/log/openvswitch/ovsdb-server.log ${NODE_FOLDER}
 487         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/etc/hosts ${NODE_FOLDER}
 488         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/audit/audit.log ${NODE_FOLDER}
 489         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/dmesg.log ${NODE_FOLDER}
 490         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/libvirt ${NODE_FOLDER}
 491         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/messages ${NODE_FOLDER}
 492         rsync --rsync-path="sudo rsync" -avhe ssh ${!OSIP}:/var/log/nova-agent.log ${NODE_FOLDER}
 493         rsync -avhe ssh ${!OSIP}:/opt/stack/logs/* ${NODE_FOLDER} # rsync to prevent copying of symbolic links
 494         scp extra_debug.sh ${!OSIP}:/tmp
 495         ${SSH} ${!OSIP} "bash /tmp/extra_debug.sh > /tmp/extra_debug.log"
 496         scp ${!OSIP}:/tmp/extra_debug.log ${NODE_FOLDER}
 497         scp ${!OSIP}:/tmp/journalctl.log ${NODE_FOLDER}
 498         scp ${!OSIP}:/tmp/*.xz ${NODE_FOLDER}/
 499         mv local.conf_compute_${!OSIP} ${NODE_FOLDER}/local.conf
 500         mv ${NODE_FOLDER} ${WORKSPACE}/archives/
 501     done
 502
 503     # Tempest
 504     DEVSTACK_TEMPEST_DIR="/opt/stack/tempest"
 505     TESTREPO=".stestr"
 506     # Look for tempest test results in the $TESTREPO dir and copy if found
 507     if ${SSH} ${OPENSTACK_CONTROL_NODE_1_IP} "sudo sh -c '[ -f ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/0 ]'"; then
 508         ${SSH} ${OPENSTACK_CONTROL_NODE_1_IP} "for I in \$(sudo ls ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/ | grep -E '^[0-9]+$'); do sudo sh -c \"${DEVSTACK_TEMPEST_DIR}/.tox/tempest/bin/subunit-1to2 < ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/\${I} >> ${DEVSTACK_TEMPEST_DIR}/subunit_log.txt\"; done"
 509         ${SSH} ${OPENSTACK_CONTROL_NODE_1_IP} "sudo sh -c '${DEVSTACK_TEMPEST_DIR}/.tox/tempest/bin/python ${DEVSTACK_TEMPEST_DIR}/.tox/tempest/lib/python2.7/site-packages/os_testr/subunit2html.py ${DEVSTACK_TEMPEST_DIR}/subunit_log.txt ${DEVSTACK_TEMPEST_DIR}/tempest_results.html'"
 510         TEMPEST_LOGS_DIR=${WORKSPACE}/archives/tempest
 511         mkdir -p ${TEMPEST_LOGS_DIR}
 512         scp ${OPENSTACK_CONTROL_NODE_1_IP}:${DEVSTACK_TEMPEST_DIR}/tempest_results.html ${TEMPEST_LOGS_DIR}
 513         scp ${OPENSTACK_CONTROL_NODE_1_IP}:${DEVSTACK_TEMPEST_DIR}/tempest.log ${TEMPEST_LOGS_DIR}
 514         mv ${WORKSPACE}/tempest_output* ${TEMPEST_LOGS_DIR}
 515     else
 516         echo "tempest results not found in ${DEVSTACK_TEMPEST_DIR}/${TESTREPO}/0"
 517     fi
 518 } # collect_logs()
 519
 520 # if we are using the new netvirt impl, as determined by the feature name
 521 # odl-netvirt-openstack (note: old impl is odl-ovsdb-openstack) then we
 522 # want PROVIDER_MAPPINGS to be used -- this should be fixed if we want to support
 523 # external networks in legacy netvirt
 524 if [[ ${CONTROLLERFEATURES} == *"odl-netvirt-openstack"* ]]; then
 525   ODL_PROVIDER_MAPPINGS="\${PUBLIC_PHYSICAL_NETWORK}:${PUBLIC_BRIDGE}"
 526 else
 527   ODL_PROVIDER_MAPPINGS=
 528 fi
 529
 530 # if we are using the old netvirt impl, as determined by the feature name
 531 # odl-ovsdb-openstack (note: new impl is odl-netvirt-openstack) then we
 532 # want ODL_L3 to be True.  New impl wants it False
 533 if [[ ${CONTROLLERFEATURES} == *"odl-ovsdb-openstack"* ]]; then
 534     ODL_L3=True
 535 else
 536     ODL_L3=False
 537 fi
 538
 539 cat > ${WORKSPACE}/disable_firewall.sh << EOF
 540 sudo systemctl stop firewalld
 541 sudo systemctl stop iptables
 542 true
 543 EOF
 544
 545 cat > ${WORKSPACE}/get_devstack.sh << EOF
 546 sudo systemctl stop firewalld
 547 sudo yum install bridge-utils python-pip -y
 548 #sudo systemctl stop  NetworkManager
 549 #Disable NetworkManager and kill dhclient and dnsmasq
 550 sudo systemctl stop NetworkManager
 551 sudo killall dhclient
 552 sudo killall dnsmasq
 553 #Workaround for mysql failure
 554 echo "127.0.0.1   localhost \${HOSTNAME}" >> /tmp/hosts
 555 echo "::1         localhost \${HOSTNAME}" >> /tmp/hosts
 556 sudo mv /tmp/hosts /etc/hosts
 557 sudo mkdir /opt/stack
 558 sudo chmod 777 /opt/stack
 559 cd /opt/stack
 560 echo "git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}"
 561 git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}
 562 cd devstack
 563 if [ -n "${DEVSTACK_HASH}" ]; then
 564     echo "git checkout ${DEVSTACK_HASH}"
 565     git checkout ${DEVSTACK_HASH}
 566 fi
 567 git --no-pager log --pretty=format:'%h %<(13)%ar%<(13)%cr %<(20,trunc)%an%d %s\n%b' -n20
 568 EOF
 569
 570 cat > "${WORKSPACE}/setup_host_cell_mapping.sh" << EOF
 571 sudo nova-manage cell_v2 map_cell0
 572 sudo nova-manage cell_v2 simple_cell_setup
 573 sudo nova-manage db sync
 574 sudo nova-manage cell_v2 discover_hosts
 575 EOF
 576
 577 NUM_OPENSTACK_SITES=${NUM_OPENSTACK_SITES:-1}
 578 compute_index=1
 579 odl_index=1
 580 os_node_list=()
 581 os_interval=$(( ${NUM_OPENSTACK_SYSTEM} / ${NUM_OPENSTACK_SITES} ))
 582 ha_proxy_index=${os_interval}
 583
 584 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
 585     if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
 586         echo "Configure HAProxy"
 587         ODL_HAPROXYIP_PARAM=OPENSTACK_HAPROXY_${i}_IP
 588         ha_proxy_index=$(( $ha_proxy_index + $os_interval ))
 589         odl_index=$(((i - 1) * 3 + 1))
 590         ODL_IP_PARAM1=ODL_SYSTEM_$((odl_index++))_IP
 591         ODL_IP_PARAM2=ODL_SYSTEM_$((odl_index++))_IP
 592         ODL_IP_PARAM3=ODL_SYSTEM_$((odl_index++))_IP
 593         ODLMGRIP[$i]=${!ODL_HAPROXYIP_PARAM} # ODL Northbound uses HAProxy VIP
 594         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM1},${!ODL_IP_PARAM2},${!ODL_IP_PARAM3}" # OVSDB connects to all ODL IPs
 595         configure_haproxy_for_neutron_requests ${!ODL_HAPROXYIP_PARAM} "${ODL_OVS_MGRS[$i]}"
 596     else
 597         ODL_IP_PARAM=ODL_SYSTEM_${i}_IP
 598         ODL_OVS_MGRS[$i]="${!ODL_IP_PARAM}" # ODL Northbound uses ODL IP
 599         ODLMGRIP[$i]=${!ODL_IP_PARAM} # OVSDB connects to ODL IP
 600     fi
 601 done
 602
 603 # Begin stacking the nodes, starting with the controller(s) and then the compute(s)
 604
 605 for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
 606     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
 607     echo "Stack the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${CONTROLIP}"
 608     create_etc_hosts ${!CONTROLIP}
 609     scp ${WORKSPACE}/hosts_file ${!CONTROLIP}:/tmp/hosts
 610     scp ${WORKSPACE}/get_devstack.sh ${!CONTROLIP}:/tmp
 611     ${SSH} ${!CONTROLIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
 612     create_control_node_local_conf ${!CONTROLIP} ${ODLMGRIP[$i]} "${ODL_OVS_MGRS[$i]}"
 613     scp ${WORKSPACE}/local.conf_control_${!CONTROLIP} ${!CONTROLIP}:/opt/stack/devstack/local.conf
 614     ssh ${!CONTROLIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
 615     ssh ${!CONTROLIP} "ps -ef | grep stack.sh"
 616     ssh ${!CONTROLIP} "ls -lrt /opt/stack/devstack/nohup.out"
 617     os_node_list+=(${!CONTROLIP})
 618     # Workaround for stable/newton jobs
 619     # TODO: can this be removed now?
 620     if [ "${ODL_ML2_BRANCH}" == "stable/newton" ]; then
 621         ssh ${!CONTROLIP} "cd /opt/stack; git clone https://git.openstack.org/openstack/requirements; cd requirements; git checkout stable/newton; sed -i /appdirs/d upper-constraints.txt"
 622     fi
 623 done
 624
 625 for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
 626     NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
 627     SITE_INDEX=$((((i - 1) / NUM_COMPUTES_PER_SITE) + 1)) # We need the site index to infer the control node IP for this compute
 628     COMPUTEIP=OPENSTACK_COMPUTE_NODE_${i}_IP
 629     CONTROLIP=OPENSTACK_CONTROL_NODE_${SITE_INDEX}_IP
 630     echo "Stack the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${COMPUTEIP}"
 631     create_etc_hosts ${!COMPUTEIP} ${!CONTROLIP}
 632     scp ${WORKSPACE}/hosts_file ${!COMPUTEIP}:/tmp/hosts
 633     scp ${WORKSPACE}/get_devstack.sh  ${!COMPUTEIP}:/tmp
 634     ${SSH} ${!COMPUTEIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
 635     create_compute_node_local_conf ${!COMPUTEIP} ${!CONTROLIP} ${ODLMGRIP[$SITE_INDEX]} "${ODL_OVS_MGRS[$SITE_INDEX]}"
 636     scp ${WORKSPACE}/local.conf_compute_${!COMPUTEIP} ${!COMPUTEIP}:/opt/stack/devstack/local.conf
 637     ssh ${!COMPUTEIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
 638     ssh ${!COMPUTEIP} "ps -ef | grep stack.sh"
 639     os_node_list+=(${!COMPUTEIP})
 640     # Workaround for https://review.openstack.org/#/c/491032/
 641     # Modify upper-constraints to use libvirt-python 3.2.0
 642     if [ "${ODL_ML2_BRANCH}" == "stable/ocata" ]; then
 643         ${SSH} ${!COMPUTEIP} "
 644             cd /opt/stack;
 645             git clone https://git.openstack.org/openstack/requirements;
 646             cd requirements;
 647             git checkout stable/ocata;
 648             sed -i s/libvirt-python===2.5.0/libvirt-python===3.2.0/ upper-constraints.txt
 649         "
 650     fi
 651 done
 652
 653 echo "nodelist: ${os_node_list[*]}"
 654
 655 # This script runs on the openstack nodes. It greps for a string that devstack writes when stacking is complete.
 656 # The script then writes a status depending on the grep output that is later scraped by the robot vm to control
 657 # the status polling.
 658 cat > ${WORKSPACE}/check_stacking.sh << EOF
 659 > /tmp/stack_progress
 660 ps -ef | grep "stack.sh" | grep -v grep
 661 ret=\$?
 662 if [ \${ret} -eq 1 ]; then
 663     grep "This is your host IP address:" /opt/stack/devstack/nohup.out
 664     if [ \$? -eq 0 ]; then
 665         echo "Stacking Complete" > /tmp/stack_progress
 666     else
 667         echo "Stacking Failed" > /tmp/stack_progress
 668     fi
 669 elif [ \${ret} -eq 0 ]; then
 670     echo "Still Stacking" > /tmp/stack_progress
 671 fi
 672 EOF
 673
 674 # Check if the stacking is finished. Poll all nodes every 60s for one hour.
 675 iteration=0
 676 in_progress=1
 677 while [ ${in_progress} -eq 1 ]; do
 678     iteration=$(($iteration + 1))
 679     for index in "${!os_node_list[@]}"; do
 680         echo "node $index ${os_node_list[index]}: checking stacking status attempt ${iteration} of 60"
 681         scp ${WORKSPACE}/check_stacking.sh  ${os_node_list[index]}:/tmp
 682         ${SSH} ${os_node_list[index]} "bash /tmp/check_stacking.sh"
 683         scp ${os_node_list[index]}:/tmp/stack_progress .
 684         cat stack_progress
 685         stacking_status=`cat stack_progress`
 686         if [ "$stacking_status" == "Still Stacking" ]; then
 687             continue
 688         elif [ "$stacking_status" == "Stacking Failed" ]; then
 689             echo "node $index ${os_node_list[index]}: stacking has failed"
 690             collect_logs
 691             exit 1
 692         elif [ "$stacking_status" == "Stacking Complete" ]; then
 693             echo "node $index ${os_node_list[index]}: stacking complete"
 694             unset 'os_node_list[index]'
 695             if  [ ${#os_node_list[@]} -eq 0 ]; then
 696                 in_progress=0
 697             fi
 698         fi
 699     done
 700     echo "sleep for a minute before the next check"
 701     sleep 60
 702     if [ ${iteration} -eq 60 ]; then
 703         echo "stacking has failed - took longer than 60m"
 704         collect_logs
 705         exit 1
 706     fi
 707 done
 708
 709 # Further configuration now that stacking is complete.
 710 NUM_COMPUTES_PER_SITE=$((NUM_OPENSTACK_COMPUTE_NODES / NUM_OPENSTACK_SITES))
 711 for i in `seq 1 ${NUM_OPENSTACK_SITES}`; do
 712     echo "Configure the Control Node"
 713     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
 714     # Gather Compute IPs for the site
 715     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
 716         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
 717         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
 718         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
 719     done
 720
 721     # Need to disable firewalld and iptables in compute nodes as well
 722     for ip in ${COMPUTE_IPS[*]}; do
 723         scp ${WORKSPACE}/disable_firewall.sh "${ip}:/tmp"
 724         ${SSH} "${ip}" "sudo bash /tmp/disable_firewall.sh"
 725     done
 726
 727     #Need to disable firewalld and iptables in control node
 728     echo "Stop Firewall in Control Node for compute nodes to be able to reach the ports and add to hypervisor-list"
 729     scp ${WORKSPACE}/disable_firewall.sh ${!CONTROLIP}:/tmp
 730     ${SSH} ${!CONTROLIP} "sudo bash /tmp/disable_firewall.sh"
 731
 732     echo "sleep for 60s and print hypervisor-list"
 733     sleep 60
 734     # In Ocata if we do not enable the n-cpu in control node then
 735     # we need to discover hosts manually and ensure that they are mapped to cells.
 736     # reference: https://ask.openstack.org/en/question/102256/how-to-configure-placement-service-for-compute-node-on-ocata/
 737     if [ "${OPENSTACK_BRANCH}" == "stable/ocata" ]; then
 738         scp ${WORKSPACE}/setup_host_cell_mapping.sh  ${!CONTROLIP}:/tmp
 739         ${SSH} ${!CONTROLIP} "sudo bash /tmp/setup_host_cell_mapping.sh"
 740     fi
 741     ${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; nova hypervisor-list"
 742     # in the case that we are doing openstack (control + compute) all in one node, then the number of hypervisors
 743     # will be the same as the number of openstack systems. However, if we are doing multinode openstack then the
 744     # assumption is we have a single control node and the rest are compute nodes, so the number of expected hypervisors
 745     # is one less than the total number of openstack systems
 746     if [ $((NUM_OPENSTACK_SYSTEM / NUM_OPENSTACK_SITES)) -eq 1 ]; then
 747         expected_num_hypervisors=1
 748     else
 749         expected_num_hypervisors=${NUM_COMPUTES_PER_SITE}
 750     fi
 751     num_hypervisors=$(${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; openstack hypervisor list -f value | wc -l" | tail -1 | tr -d "\r")
 752     if ! [ "${num_hypervisors}" ] || ! [ ${num_hypervisors} -eq ${expected_num_hypervisors} ]; then
 753         echo "Error: Only $num_hypervisors hypervisors detected, expected $expected_num_hypervisors"
 754         collect_logs
 755         exit 1
 756     fi
 757
 758     # upgrading pip, urllib3 and httplib2 so that tempest tests can be run on openstack control node
 759     # this needs to happen after devstack runs because it seems devstack is pulling in specific versions
 760     # of these libs that are not working for tempest.
 761     ${SSH} ${!CONTROLIP} "sudo pip install --upgrade pip"
 762     ${SSH} ${!CONTROLIP} "sudo pip install urllib3 --upgrade"
 763     ${SSH} ${!CONTROLIP} "sudo pip install httplib2 --upgrade"
 764
 765     # Gather Compute IPs for the site
 766     for j in `seq 1 ${NUM_COMPUTES_PER_SITE}`; do
 767         COMPUTE_INDEX=$(((i-1) * NUM_COMPUTES_PER_SITE + j))
 768         IP_VAR=OPENSTACK_COMPUTE_NODE_${COMPUTE_INDEX}_IP
 769         COMPUTE_IPS[$((j-1))]=${!IP_VAR}
 770     done
 771
 772     # Need to disable firewalld and iptables in compute nodes as well
 773     for ip in ${COMPUTE_IPS[*]}; do
 774         scp ${WORKSPACE}/disable_firewall.sh "${ip}:/tmp"
 775         ${SSH} "${ip}" "sudo bash /tmp/disable_firewall.sh"
 776     done
 777
 778     # External Network
 779     echo "prepare external networks by adding vxlan tunnels between all nodes on a separate bridge..."
 780     # FIXME Should there be a unique gateway IP and devstack index for each site?
 781     devstack_index=1
 782     for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
 783         # FIXME - Workaround, ODL (new netvirt) currently adds PUBLIC_BRIDGE as a port in br-int since it doesn't see such a bridge existing when we stack
 784         ${SSH} $ip "sudo ovs-vsctl --if-exists del-port br-int $PUBLIC_BRIDGE"
 785         ${SSH} $ip "sudo ovs-vsctl --may-exist add-br $PUBLIC_BRIDGE -- set bridge $PUBLIC_BRIDGE other-config:disable-in-band=true other_config:hwaddr=f6:00:00:ff:01:0$((devstack_index++))"
 786     done
 787
 788     # ipsec support
 789     if [ "${IPSEC_VXLAN_TUNNELS_ENABLED}" == "yes" ]; then
 790         ALL_NODES=(${!CONTROLIP} ${COMPUTE_IPS[*]})
 791         for ((inx_ip1=0; inx_ip1<$((${#ALL_NODES[@]} - 1)); inx_ip1++)); do
 792             for ((inx_ip2=$((inx_ip1 + 1)); inx_ip2<${#ALL_NODES[@]}; inx_ip2++)); do
 793                 KEY1=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
 794                 KEY2=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
 795                 ID=0x$(dd if=/dev/urandom count=4 bs=1 2> /dev/null| xxd -p -c 8)
 796                 ip1=${ALL_NODES[$inx_ip1]}
 797                 ip2=${ALL_NODES[$inx_ip2]}
 798                 ${SSH} $ip1 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
 799                 ${SSH} $ip1 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
 800                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir out tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
 801                 ${SSH} $ip1 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir in tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
 802
 803                 ${SSH} $ip2 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
 804                 ${SSH} $ip2 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
 805                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir out tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
 806                 ${SSH} $ip2 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir in tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
 807             done
 808         done
 809
 810         for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
 811             echo "ip xfrm configuration for node $ip:"
 812             ${SSH} $ip "sudo ip xfrm policy list"
 813             ${SSH} $ip "sudo ip xfrm state list"
 814         done
 815     fi
 816
 817     # Control Node - PUBLIC_BRIDGE will act as the external router
 818     # Parameter values below are used in integration/test - changing them requires updates in intergration/test as well
 819     EXTNET_GATEWAY_IP="10.10.10.250"
 820     EXTNET_INTERNET_IP="10.9.9.9"
 821     EXTNET_PNF_IP="10.10.10.253"
 822     ${SSH} ${!CONTROLIP} "sudo ifconfig ${PUBLIC_BRIDGE} up ${EXTNET_GATEWAY_IP}/24"
 823
 824     # Control Node - external net PNF simulation
 825     ${SSH} ${!CONTROLIP} "
 826         sudo ip netns add pnf_ns;
 827         sudo ip link add pnf_veth0 type veth peer name pnf_veth1;
 828         sudo ip link set pnf_veth1 netns pnf_ns;
 829         sudo ip link set pnf_veth0 up;
 830         sudo ip netns exec pnf_ns ifconfig pnf_veth1 up ${EXTNET_PNF_IP}/24;
 831         sudo ovs-vsctl add-port ${PUBLIC_BRIDGE} pnf_veth0;
 832     "
 833
 834     # Control Node - external net internet address simulation
 835     ${SSH} ${!CONTROLIP} "
 836         sudo ip tuntap add dev internet_tap mode tap;
 837         sudo ifconfig internet_tap up ${EXTNET_INTERNET_IP}/24;
 838     "
 839
 840     # Computes
 841     compute_index=1
 842     for compute_ip in ${COMPUTE_IPS[*]}; do
 843         # Tunnel from controller to compute
 844         COMPUTEPORT=compute$(( compute_index++ ))_vxlan
 845         ${SSH} ${!CONTROLIP} "
 846             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $COMPUTEPORT -- set interface $COMPUTEPORT type=vxlan options:local_ip=${!CONTROLIP} options:remote_ip=$compute_ip options:dst_port=9876 options:key=flow
 847         "
 848         # Tunnel from compute to controller
 849         CONTROLPORT="control_vxlan"
 850         ${SSH} $compute_ip "
 851             sudo ovs-vsctl add-port $PUBLIC_BRIDGE $CONTROLPORT -- set interface $CONTROLPORT type=vxlan options:local_ip=$compute_ip options:remote_ip=${!CONTROLIP} options:dst_port=9876 options:key=flow
 852         "
 853     done
 854 done
 855
 856 if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
 857     odlmgrip=OPENSTACK_HAPROXY_1_IP
 858     HA_PROXY_IP=${!odlmgrip}
 859     HA_PROXY_1_IP=${!odlmgrip}
 860     odlmgrip2=OPENSTACK_HAPROXY_2_IP
 861     HA_PROXY_2_IP=${!odlmgrip2}
 862     odlmgrip3=OPENSTACK_HAPROXY_1_IP
 863     HA_PROXY_3_IP=${!odlmgrip3}
 864 else
 865     HA_PROXY_IP=${ODL_SYSTEM_IP}
 866     HA_PROXY_1_IP=${ODL_SYSTEM_1_IP}
 867     HA_PROXY_2_IP=${ODL_SYSTEM_2_IP}
 868     HA_PROXY_3_IP=${ODL_SYSTEM_3_IP}
 869 fi
 870
 871 echo "Locating test plan to use..."
 872 testplan_filepath="${WORKSPACE}/test/csit/testplans/${STREAMTESTPLAN}"
 873 if [ ! -f "${testplan_filepath}" ]; then
 874     testplan_filepath="${WORKSPACE}/test/csit/testplans/${TESTPLAN}"
 875 fi
 876
 877 echo "Changing the testplan path..."
 878 cat "${testplan_filepath}" | sed "s:integration:${WORKSPACE}:" > testplan.txt
 879 cat testplan.txt
 880
 881 # Use the testplan if specific SUITES are not defined.
 882 if [ -z "${SUITES}" ]; then
 883     SUITES=`egrep -v '(^[[:space:]]*#|^[[:space:]]*$)' testplan.txt | tr '\012' ' '`
 884 fi
 885
 886 if [ "${OPENSTACK_BRANCH}" == "stable/pike" ]; then
 887    AUTH="http://${!CONTROLIP}/identity"
 888 else
 889    AUTH="http://${!CONTROLIP}:35357/v3"
 890 fi
 891
 892 # Environment Variables Needed to execute Openstack Client for NetVirt Jobs
 893 cat > /tmp/os_netvirt_client_rc << EOF
 894 export OS_USERNAME=admin
 895 export OS_PASSWORD=admin
 896 export OS_PROJECT_NAME=admin
 897 export OS_USER_DOMAIN_NAME=default
 898 export OS_PROJECT_DOMAIN_NAME=default
 899 export OS_AUTH_URL=${AUTH}
 900 export OS_IDENTITY_API_VERSION=3
 901 export OS_IMAGE_API_VERSION=2
 902 export OS_TENANT_NAME=admin
 903 unset OS_CLOUD
 904 EOF
 905
 906 source /tmp/os_netvirt_client_rc
 907
 908 echo "Starting Robot test suites ${SUITES} ..."
 909 # please add pybot -v arguments on a single line and alphabetized
 910 pybot -N ${TESTPLAN} --removekeywords wuks -c critical -e exclude -e skip_if_${DISTROSTREAM} \
 911     -v BUNDLEFOLDER:${BUNDLEFOLDER} \
 912     -v BUNDLE_URL:${ACTUAL_BUNDLE_URL} \
 913     -v CONTROLLER_USER:${USER} \
 914     -v DEVSTACK_DEPLOY_PATH:/opt/stack/devstack \
 915     -v HA_PROXY_IP:${HA_PROXY_IP} \
 916     -v HA_PROXY_1_IP:${HA_PROXY_1_IP} \
 917     -v HA_PROXY_2_IP:${HA_PROXY_2_IP} \
 918     -v HA_PROXY_3_IP:${HA_PROXY_3_IP} \
 919     -v JDKVERSION:${JDKVERSION} \
 920     -v NEXUSURL_PREFIX:${NEXUSURL_PREFIX} \
 921     -v NUM_ODL_SYSTEM:${NUM_ODL_SYSTEM} \
 922     -v NUM_OPENSTACK_SITES:${NUM_OPENSTACK_SITES} \
 923     -v NUM_OS_SYSTEM:${NUM_OPENSTACK_SYSTEM} \
 924     -v NUM_TOOLS_SYSTEM:${NUM_TOOLS_SYSTEM} \
 925     -v ODL_SNAT_MODE:${ODL_SNAT_MODE} \
 926     -v ODL_STREAM:${DISTROSTREAM} \
 927     -v ODL_SYSTEM_IP:${ODL_SYSTEM_IP} \
 928     -v ODL_SYSTEM_1_IP:${ODL_SYSTEM_1_IP} \
 929     -v ODL_SYSTEM_2_IP:${ODL_SYSTEM_2_IP} \
 930     -v ODL_SYSTEM_3_IP:${ODL_SYSTEM_3_IP} \
 931     -v ODL_SYSTEM_4_IP:${ODL_SYSTEM_4_IP} \
 932     -v ODL_SYSTEM_5_IP:${ODL_SYSTEM_5_IP} \
 933     -v ODL_SYSTEM_6_IP:${ODL_SYSTEM_6_IP} \
 934     -v ODL_SYSTEM_7_IP:${ODL_SYSTEM_7_IP} \
 935     -v ODL_SYSTEM_8_IP:${ODL_SYSTEM_8_IP} \
 936     -v ODL_SYSTEM_9_IP:${ODL_SYSTEM_9_IP} \
 937     -v OS_CONTROL_NODE_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
 938     -v OS_CONTROL_NODE_1_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
 939     -v OS_CONTROL_NODE_2_IP:${OPENSTACK_CONTROL_NODE_2_IP} \
 940     -v OS_CONTROL_NODE_3_IP:${OPENSTACK_CONTROL_NODE_3_IP} \
 941     -v OPENSTACK_BRANCH:${OPENSTACK_BRANCH} \
 942     -v OS_COMPUTE_1_IP:${OPENSTACK_COMPUTE_NODE_1_IP} \
 943     -v OS_COMPUTE_2_IP:${OPENSTACK_COMPUTE_NODE_2_IP} \
 944     -v OS_COMPUTE_3_IP:${OPENSTACK_COMPUTE_NODE_3_IP} \
 945     -v OS_COMPUTE_4_IP:${OPENSTACK_COMPUTE_NODE_4_IP} \
 946     -v OS_COMPUTE_5_IP:${OPENSTACK_COMPUTE_NODE_5_IP} \
 947     -v OS_COMPUTE_6_IP:${OPENSTACK_COMPUTE_NODE_6_IP} \
 948     -v OS_USER:${USER} \
 949     -v PUBLIC_PHYSICAL_NETWORK:${PUBLIC_PHYSICAL_NETWORK} \
 950     -v SECURITY_GROUP_MODE:${SECURITY_GROUP_MODE} \
 951     -v TOOLS_SYSTEM_IP:${TOOLS_SYSTEM_1_IP} \
 952     -v TOOLS_SYSTEM_1_IP:${TOOLS_SYSTEM_1_IP} \
 953     -v TOOLS_SYSTEM_2_IP:${TOOLS_SYSTEM_2_IP} \
 954     -v USER_HOME:${HOME} \
 955     -v WORKSPACE:/tmp \
 956     ${TESTOPTIONS} ${SUITES} || true
 957
 958 echo "Examining the files in data/log and checking file size"
 959 ssh ${ODL_SYSTEM_IP} "ls -altr /tmp/${BUNDLEFOLDER}/data/log/"
 960 ssh ${ODL_SYSTEM_IP} "du -hs /tmp/${BUNDLEFOLDER}/data/log/*"
 961
 962 echo "Tests Executed"
 963 collect_logs
 964
 965 true  # perhaps Jenkins is testing last exit code
 966 # vim: ts=4 sw=4 sts=4 et ft=sh :