jjb/integration/integration-deploy-openstack-run-test.sh

   1 #!/bin/bash
   2 # Activate robotframework virtualenv
   3 # ${ROBOT_VENV} comes from the integration-install-robotframework.sh
   4 # script.
   5 # shellcheck source=${ROBOT_VENV}/bin/activate disable=SC1091
   6 source ${ROBOT_VENV}/bin/activate
   7 source /tmp/common-functions.sh ${BUNDLEFOLDER}
   8 # Ensure we fail the job if any steps fail.
   9 set -ex -o pipefail
  10 totaltmr=$(timer)
  11 get_os_deploy
  12
  13 PYTHON="${ROBOT_VENV}/bin/python"
  14 SSH="ssh -t -t"
  15 ADMIN_PASSWORD="admin"
  16 OPENSTACK_MASTER_CLIENTS_VERSION="queens"
  17 #Size of the partition to /opt/stack in control and compute nodes
  18 TMPFS_SIZE=2G
  19
  20 # TODO: remove this work to run changes.py if/when it's moved higher up to be visible at the Robot level
  21 printf "\nshowing recent changes that made it into the distribution used by this job:\n"
  22 $PYTHON -m pip install --upgrade urllib3
  23 python ${WORKSPACE}/test/tools/distchanges/changes.py -d /tmp/distribution_folder \
  24                   -u ${ACTUAL_BUNDLE_URL} -b ${DISTROBRANCH} \
  25                   -r ssh://jenkins-${SILO}@git.opendaylight.org:29418 || true
  26
  27 printf "\nshowing recent changes that made it into integration/test used by this job:\n"
  28 cd ${WORKSPACE}/test
  29 printf "Hash    Author Date                    Commit Date                    Author               Subject\n"
  30 printf "%s\n" "------- ------------------------------ ------------------------------ -------------------- -----------------------------"
  31 git --no-pager log --pretty=format:'%h %<(30)%ad %<(30)%cd %<(20,trunc)%an%d %s' -n20
  32 printf "\n"
  33 cd -
  34
  35 cat << EOF
  36 #################################################
  37 ##         Deploy Openstack 3-node             ##
  38 #################################################
  39 EOF
  40
  41 # Catch command errors and collect logs.
  42 # This ensures logs are collected when script commands fail rather than simply exiting.
  43 function trap_handler() {
  44     local prog="$0"
  45     local lastline="$1"
  46     local lasterr="$2"
  47     echo "trap_handler: ${prog}: line ${lastline}: exit status of last command: ${lasterr}"
  48     echo "trap_handler: command: ${BASH_COMMAND}"
  49     exit 1
  50 } # trap_handler()
  51
  52 trap 'trap_handler ${LINENO} ${$?}' ERR
  53
  54 print_job_parameters
  55
  56 function create_etc_hosts() {
  57     NODE_IP=$1
  58     CTRL_IP=$2
  59     : > ${WORKSPACE}/hosts_file
  60     for iter in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
  61         COMPUTE_IP=OPENSTACK_COMPUTE_NODE_${iter}_IP
  62         if [ "${!COMPUTE_IP}" == "${NODE_IP}" ]; then
  63            CONTROL_HNAME=$(${SSH}  ${CTRL_IP}  "hostname")
  64            echo "${CTRL_IP}   ${CONTROL_HNAME}" >> ${WORKSPACE}/hosts_file
  65         else
  66            COMPUTE_HNAME=$(${SSH}  ${!COMPUTE_IP}  "hostname")
  67            echo "${!COMPUTE_IP}   ${COMPUTE_HNAME}" >> ${WORKSPACE}/hosts_file
  68         fi
  69     done
  70
  71     echo "Created the hosts file for ${NODE_IP}:"
  72     cat ${WORKSPACE}/hosts_file
  73 } # create_etc_hosts()
  74
  75 #function to install Openstack Clients for Testing
  76 #This will pull the latest versions compatiable with the
  77 # openstack release
  78 function install_openstack_clients_in_robot_vm() {
  79     packages=("python-novaclient" "python-neutronclient" "python-openstackclient")
  80     local os_plugins
  81     os_plugins=$(csv2ssv "${ENABLE_OS_PLUGINS}")
  82     for plugin_name in $os_plugins; do
  83         if [ "$plugin_name" == "networking-sfc" ]; then
  84             packages+=("networking-sfc")
  85         fi
  86     done
  87     openstack_version=$(echo ${OPENSTACK_BRANCH} | cut -d/ -f2)
  88     #If the job tests "master", we will use the clients from previous released stable version to avoid failures
  89     if [ "${openstack_version}" == "master" ]; then
  90        openstack_version=${OPENSTACK_MASTER_CLIENTS_VERSION}
  91     fi
  92     for package in ${packages[*]}; do
  93        echo "Get the current support version of the package ${package}"
  94        wget https://raw.githubusercontent.com/openstack/requirements/stable/${openstack_version}/upper-constraints.txt -O /tmp/constraints.txt 2>/dev/null
  95        echo "$PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt"
  96        $PYTHON -m pip install --upgrade --no-deps ${package} --no-cache-dir -c /tmp/constraints.txt
  97        echo "$PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt"
  98        $PYTHON -m pip install ${package} --no-cache-dir -c /tmp/constraints.txt
  99     done
 100
 101     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 102         #networking-l2gw is not officially available in any release yet. Getting the latest stable version.
 103         $PYTHON -m pip install networking-l2gw==11.0.0
 104     fi
 105 }
 106
 107 #Function to install rdo release
 108 # This will help avoiding installing wrong version of packages which causes
 109 # functionality failures
 110 function install_rdo_release() {
 111     local ip=$1
 112     case ${OPENSTACK_BRANCH} in
 113        *queens*)
 114           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
 115           ;;
 116
 117        master)
 118           ${SSH} ${ip} "sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm"
 119           ;;
 120     esac
 121 }
 122
 123 # Involves just setting up the shared directory
 124 function setup_live_migration_control() {
 125     local control_ip=$1
 126     printf "%s:Setup directory Share with NFS" "${control_ip}"
 127     cat > ${WORKSPACE}/setup_live_migration_control.sh << EOF
 128 sudo mkdir --mode=777 /vm_instances
 129 sudo chown -R jenkins:jenkins /vm_instances
 130 sudo yum install -y nfs-utils
 131 printf "/vm_instances *(rw,no_root_squash)" | sudo tee -a /etc/exports
 132 sudo systemctl start rpcbind nfs-server
 133 sudo exportfs
 134 EOF
 135     scp ${WORKSPACE}/setup_live_migration_control.sh ${control_ip}:/tmp/setup_live_migration_control.sh
 136     ssh ${control_ip} "bash /tmp/setup_live_migration_control.sh"
 137 }
 138
 139 # Involves mounting the share and configuring the libvirtd
 140 function setup_live_migration_compute() {
 141     local compute_ip=$1
 142     local control_ip=$2
 143     printf "%s:Mount Shared directory from ${control_ip}" "${compute_ip}"
 144     printf "%s:Configure libvirt in listen mode" "${compute_ip}"
 145     cat >  ${WORKSPACE}/setup_live_migration_compute.sh << EOF
 146 sudo yum install -y libvirt libvirt-devel nfs-utils
 147 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tls 0
 148 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' listen_tcp 1
 149 sudo crudini --verbose  --set --inplace /etc/libvirt/libvirtd.conf '' auth_tcp '"none"'
 150 sudo crudini --verbose  --set --inplace /etc/sysconfig/libvirtd '' LIBVIRTD_ARGS '"--listen"'
 151 sudo mkdir --mode=777 -p /var/instances
 152 sudo chown -R jenkins:jenkins /var/instances
 153 sudo chmod o+x /var/instances
 154 sudo systemctl start rpcbind
 155 sudo mount -t nfs ${control_ip}:/vm_instances /var/instances
 156 sudo mount
 157 EOF
 158     scp ${WORKSPACE}/setup_live_migration_compute.sh ${compute_ip}:/tmp/setup_live_migration_compute.sh
 159     ssh ${compute_ip} "bash /tmp/setup_live_migration_compute.sh"
 160 }
 161
 162 # Add enable_services and disable_services to the local.conf
 163 function add_os_services() {
 164     local core_services=$1
 165     local enable_services=$2
 166     local disable_services=$3
 167     local local_conf_file_name=$4
 168     local enable_network_services=$5
 169
 170     cat >> ${local_conf_file_name} << EOF
 171 enable_service $(csv2ssv "${core_services}")
 172 EOF
 173     if [ -n "${enable_services}" ]; then
 174         cat >> ${local_conf_file_name} << EOF
 175 enable_service $(csv2ssv "${enable_services}")
 176 EOF
 177     fi
 178     if [ -n "${disable_services}" ]; then
 179         cat >> ${local_conf_file_name} << EOF
 180 disable_service $(csv2ssv "${disable_services}")
 181 EOF
 182     fi
 183     if [ -n "${enable_network_services}" ]; then
 184         cat >> ${local_conf_file_name} << EOF
 185 enable_service $(csv2ssv "${enable_network_services}")
 186 EOF
 187     fi
 188 }
 189
 190 function create_control_node_local_conf() {
 191     HOSTIP=$1
 192     MGRIP=$2
 193     ODL_OVS_MANAGERS="$3"
 194
 195     local_conf_file_name=${WORKSPACE}/local.conf_control_${HOSTIP}
 196     cat > ${local_conf_file_name} << EOF
 197 [[local|localrc]]
 198 LOGFILE=stack.sh.log
 199 LOG_COLOR=False
 200 USE_SYSTEMD=True
 201 RECLONE=${RECLONE}
 202 # Increase the wait used by stack to poll for services
 203 SERVICE_TIMEOUT=120
 204
 205 disable_all_services
 206 EOF
 207
 208     add_os_services "${CORE_OS_CONTROL_SERVICES}" "${ENABLE_OS_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}" "${ENABLE_OS_NETWORK_SERVICES}"
 209
 210     cat >> ${local_conf_file_name} << EOF
 211
 212 HOST_IP=${HOSTIP}
 213 SERVICE_HOST=\$HOST_IP
 214 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
 215 NEUTRON_CREATE_INITIAL_NETWORKS=${CREATE_INITIAL_NETWORKS}
 216
 217 ODL_MODE=manual
 218 ODL_MGR_IP=${MGRIP}
 219 ODL_PORT=${ODL_PORT}
 220 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
 221 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
 222
 223 MYSQL_HOST=\$SERVICE_HOST
 224 RABBIT_HOST=\$SERVICE_HOST
 225 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
 226 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
 227 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
 228
 229 ADMIN_PASSWORD=${ADMIN_PASSWORD}
 230 DATABASE_PASSWORD=${ADMIN_PASSWORD}
 231 RABBIT_PASSWORD=${ADMIN_PASSWORD}
 232 SERVICE_TOKEN=${ADMIN_PASSWORD}
 233 SERVICE_PASSWORD=${ADMIN_PASSWORD}
 234
 235 NEUTRON_LBAAS_SERVICE_PROVIDERV2=${LBAAS_SERVICE_PROVIDER} # Only relevant if neutron-lbaas plugin is enabled
 236 NEUTRON_SFC_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
 237 NEUTRON_FLOWCLASSIFIER_DRIVERS=${ODL_SFC_DRIVER} # Only relevant if networking-sfc plugin is enabled
 238 ETCD_PORT=2379
 239 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
 240 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
 241 ML2_VLAN_RANGES=${PUBLIC_PHYSICAL_NETWORK}
 242 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
 243 EOF
 244     if [ "${TENANT_NETWORK_TYPE}" == "local" ]; then
 245         cat >> ${local_conf_file_name} << EOF
 246 ENABLE_TENANT_TUNNELS=false
 247 EOF
 248     fi
 249
 250     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
 251         echo "ODL_V2DRIVER=True" >> ${local_conf_file_name}
 252     fi
 253     IFS=,
 254     for plugin_name in ${ENABLE_OS_PLUGINS}; do
 255         if [ "$plugin_name" == "networking-odl" ]; then
 256             ENABLE_PLUGIN_ARGS="${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}"
 257         elif [ "$plugin_name" == "kuryr-kubernetes" ]; then
 258             ENABLE_PLUGIN_ARGS="${DEVSTACK_KUBERNETES_PLUGIN_REPO} master" # note: kuryr-kubernetes only exists in master at the moment
 259         elif [ "$plugin_name" == "neutron-lbaas" ]; then
 260             ENABLE_PLUGIN_ARGS="${DEVSTACK_LBAAS_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
 261             IS_LBAAS_PLUGIN_ENABLED="yes"
 262         elif [ "$plugin_name" == "networking-sfc" ]; then
 263             ENABLE_PLUGIN_ARGS="${DEVSTACK_NETWORKING_SFC_PLUGIN_REPO} ${OPENSTACK_BRANCH}"
 264             IS_SFC_PLUGIN_ENABLED="yes"
 265         else
 266             echo "Error: Invalid plugin $plugin_name, unsupported"
 267             continue
 268         fi
 269         cat >> ${local_conf_file_name} << EOF
 270
 271 enable_plugin ${plugin_name} ${ENABLE_PLUGIN_ARGS}
 272 EOF
 273     done
 274     unset IFS
 275
 276     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 277         cat >> ${local_conf_file_name} << EOF
 278
 279 enable_plugin networking-l2gw ${NETWORKING_L2GW_DRIVER} ${ODL_ML2_BRANCH}
 280 NETWORKING_L2GW_SERVICE_DRIVER=L2GW:OpenDaylight:networking_odl.l2gateway.driver_v2.OpenDaylightL2gwDriver:default
 281 EOF
 282     fi
 283
 284     if [ "${ODL_ML2_DRIVER_VERSION}" == "v2" ]; then
 285        SERVICE_PLUGINS="odl-router_v2"
 286     else
 287        SERVICE_PLUGINS="odl-router"
 288     fi
 289     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 290         SERVICE_PLUGINS+=", networking_l2gw.services.l2gateway.plugin.L2GatewayPlugin"
 291     fi
 292     if [ "${IS_LBAAS_PLUGIN_ENABLED}" == "yes" ]; then
 293         SERVICE_PLUGINS+=", lbaasv2"
 294     fi
 295     if [ "${IS_SFC_PLUGIN_ENABLED}" == "yes" ]; then
 296         SERVICE_PLUGINS+=", networking_sfc.services.flowclassifier.plugin.FlowClassifierPlugin,networking_sfc.services.sfc.plugin.SfcPlugin"
 297     fi
 298
 299     cat >> ${local_conf_file_name} << EOF
 300
 301 [[post-config|\$NEUTRON_CONF]]
 302 [DEFAULT]
 303 service_plugins = ${SERVICE_PLUGINS}
 304 log_dir = /opt/stack/logs
 305
 306 [[post-config|/etc/neutron/plugins/ml2/ml2_conf.ini]]
 307 [agent]
 308 minimize_polling=True
 309
 310 [ml2]
 311 # Needed for VLAN provider tests - because our provider networks are always encapsulated in VXLAN (br-physnet1)
 312 # MTU(1400) + VXLAN(50) + VLAN(4) = 1454 < MTU eth0/br-physnet1(1458)
 313 physical_network_mtus = ${PUBLIC_PHYSICAL_NETWORK}:1400
 314 path_mtu = 1458
 315 EOF
 316     if [ "${ENABLE_GRE_TYPE_DRIVERS}" == "yes" ]; then
 317         cat >> ${local_conf_file_name} << EOF
 318 type_drivers = local,flat,vlan,gre,vxlan
 319 [ml2_type_gre]
 320 tunnel_id_ranges = 1:1000
 321 EOF
 322     fi
 323     if [ "${ENABLE_NETWORKING_L2GW}" == "yes" ]; then
 324         cat >> ${local_conf_file_name} << EOF
 325
 326 [ml2_odl]
 327 enable_dhcp_service = True
 328 EOF
 329     fi
 330
 331     cat >> ${local_conf_file_name} << EOF
 332
 333 [ml2_odl]
 334 # Trigger n-odl full sync every 30 secs.
 335 maintenance_interval = 30
 336
 337 [[post-config|/etc/neutron/dhcp_agent.ini]]
 338 [DEFAULT]
 339 force_metadata = True
 340 enable_isolated_metadata = True
 341 log_dir = /opt/stack/logs
 342
 343 [[post-config|/etc/nova/nova.conf]]
 344 [scheduler]
 345 discover_hosts_in_cells_interval = 30
 346
 347 [DEFAULT]
 348 force_config_drive = False
 349 force_raw_images = False
 350 log_dir = /opt/stack/logs
 351
 352 EOF
 353
 354     if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
 355         cat >> ${local_conf_file_name} << EOF
 356 use_neutron = True
 357 force_raw_images = False
 358 log_dir = /opt/stack/logs
 359 [libvirt]
 360 live_migration_uri = qemu+tcp://%s/system
 361 virt_type = qemu
 362 EOF
 363     fi
 364
 365     if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
 366         echo "Combo local.conf created:"
 367     else
 368         echo "Control local.conf created:"
 369     fi
 370     cat ${local_conf_file_name}
 371 } # create_control_node_local_conf()
 372
 373 function create_compute_node_local_conf() {
 374     HOSTIP=$1
 375     SERVICEHOST=$2
 376     MGRIP=$3
 377     ODL_OVS_MANAGERS="$4"
 378
 379     local_conf_file_name=${WORKSPACE}/local.conf_compute_${HOSTIP}
 380     cat > ${local_conf_file_name} << EOF
 381 [[local|localrc]]
 382 LOGFILE=stack.sh.log
 383 LOG_COLOR=False
 384 USE_SYSTEMD=True
 385 RECLONE=${RECLONE}
 386 # Increase the wait used by stack to poll for the nova service on the control node
 387 NOVA_READY_TIMEOUT=1800
 388
 389 disable_all_services
 390 EOF
 391
 392     add_os_services "${CORE_OS_COMPUTE_SERVICES}" "${ENABLE_OS_COMPUTE_SERVICES}" "${DISABLE_OS_SERVICES}" "${local_conf_file_name}"
 393
 394     cat >> ${local_conf_file_name} << EOF
 395 HOST_IP=${HOSTIP}
 396 SERVICE_HOST=${SERVICEHOST}
 397 Q_ML2_TENANT_NETWORK_TYPE=${TENANT_NETWORK_TYPE}
 398
 399 ODL_MODE=manual
 400 ODL_MGR_IP=${MGRIP}
 401 ODL_PORT=${ODL_PORT}
 402 ODL_PORT_BINDING_CONTROLLER=${ODL_ML2_PORT_BINDING}
 403 ODL_OVS_MANAGERS=${ODL_OVS_MANAGERS}
 404
 405 Q_HOST=\$SERVICE_HOST
 406 MYSQL_HOST=\$SERVICE_HOST
 407 RABBIT_HOST=\$SERVICE_HOST
 408 GLANCE_HOSTPORT=\$SERVICE_HOST:9292
 409 KEYSTONE_AUTH_HOST=\$SERVICE_HOST
 410 KEYSTONE_SERVICE_HOST=\$SERVICE_HOST
 411
 412 ADMIN_PASSWORD=${ADMIN_PASSWORD}
 413 DATABASE_PASSWORD=${ADMIN_PASSWORD}
 414 RABBIT_PASSWORD=${ADMIN_PASSWORD}
 415 SERVICE_TOKEN=${ADMIN_PASSWORD}
 416 SERVICE_PASSWORD=${ADMIN_PASSWORD}
 417
 418 PUBLIC_BRIDGE=${PUBLIC_BRIDGE}
 419 PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK}
 420 ODL_PROVIDER_MAPPINGS=${ODL_PROVIDER_MAPPINGS}
 421 EOF
 422
 423     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-odl ]]; then
 424         cat >> ${local_conf_file_name} << EOF
 425
 426 enable_plugin networking-odl ${ODL_ML2_DRIVER_REPO} ${ODL_ML2_BRANCH}
 427 EOF
 428     fi
 429
 430     cat >> ${local_conf_file_name} << EOF
 431
 432 [[post-config|/etc/nova/nova.conf]]
 433 [api]
 434 auth_strategy = keystone
 435 [DEFAULT]
 436 use_neutron = True
 437 force_raw_images = False
 438 log_dir = /opt/stack/logs
 439 [libvirt]
 440 live_migration_uri = qemu+tcp://%s/system
 441 virt_type = qemu
 442 EOF
 443
 444     echo "Compute local.conf created:"
 445     cat ${local_conf_file_name}
 446 } # create_compute_node_local_conf()
 447
 448 function configure_haproxy_for_neutron_requests() {
 449     local -r haproxy_ip=$1
 450     # shellcheck disable=SC2206
 451     local -r odl_ips=(${2//,/ })
 452
 453     cat > ${WORKSPACE}/install_ha_proxy.sh<< EOF
 454 sudo systemctl stop firewalld
 455 sudo yum -y install policycoreutils-python haproxy
 456 EOF
 457
 458     cat > ${WORKSPACE}/haproxy.cfg << EOF
 459 global
 460   daemon
 461   group  haproxy
 462   log  /dev/log local0 debug
 463   maxconn  20480
 464   pidfile  /tmp/haproxy.pid
 465   ssl-default-bind-ciphers  !SSLv2:kEECDH:kRSA:kEDH:kPSK:+3DES:!aNULL:!eNULL:!MD5:!EXP:!RC4:!SEED:!IDEA:!DES
 466   ssl-default-bind-options  no-sslv3 no-tlsv10
 467   stats  socket /var/lib/haproxy/stats mode 600 level user
 468   stats  timeout 2m
 469   user  haproxy
 470
 471 defaults
 472   log  global
 473   option  log-health-checks
 474   maxconn  4096
 475   mode  tcp
 476   retries  3
 477   timeout  http-request 10s
 478   timeout  queue 2m
 479   timeout  connect 5s
 480   timeout  client 5s
 481   timeout  server 5s
 482
 483 listen opendaylight
 484   bind ${haproxy_ip}:8181 transparent
 485   mode http
 486   http-request set-header X-Forwarded-Proto https if { ssl_fc }
 487   http-request set-header X-Forwarded-Proto http if !{ ssl_fc }
 488   option httpchk GET /diagstatus
 489   option httplog
 490 EOF
 491
 492     odlindex=1
 493     for odlip in ${odl_ips[*]}; do
 494         echo "  server opendaylight-rest-${odlindex} ${odlip}:8181 check fall 5 inter 2000 rise 2" >> ${WORKSPACE}/haproxy.cfg
 495         odlindex=$((odlindex+1))
 496     done
 497
 498     cat >> ${WORKSPACE}/haproxy.cfg << EOF
 499
 500 listen opendaylight_ws
 501   bind ${haproxy_ip}:8185 transparent
 502   mode http
 503   timeout tunnel 3600s
 504   option httpchk GET /data-change-event-subscription/neutron:neutron/neutron:ports/datastore=OPERATIONAL/scope=SUBTREE HTTP/1.1\r\nHost:\ ws.opendaylight.org\r\nConnection:\ Upgrade\r\nUpgrade:\ websocket\r\nSec-WebSocket-Key:\ haproxy\r\nSec-WebSocket-Version:\ 13\r\nSec-WebSocket-Protocol:\ echo-protocol
 505   http-check expect status 101
 506 EOF
 507
 508     odlindex=1
 509     for odlip in ${odl_ips[*]}; do
 510         echo "  server opendaylight-ws-${odlindex} ${odlip}:8185 check fall 3 inter 1000 rise 2" >> ${WORKSPACE}/haproxy.cfg
 511         odlindex=$((odlindex+1))
 512     done
 513
 514     echo "Dump haproxy.cfg"
 515     cat ${WORKSPACE}/haproxy.cfg
 516
 517     cat > ${WORKSPACE}/deploy_ha_proxy.sh<< EOF
 518 sudo chown haproxy:haproxy /tmp/haproxy.cfg
 519 sudo sed -i 's/\\/etc\\/haproxy\\/haproxy.cfg/\\/tmp\\/haproxy.cfg/g' /usr/lib/systemd/system/haproxy.service
 520 sudo /usr/sbin/semanage permissive -a haproxy_t
 521 sudo systemctl restart haproxy
 522 sleep 3
 523 sudo netstat -tunpl
 524 sudo systemctl status haproxy
 525 true
 526 EOF
 527
 528     scp ${WORKSPACE}/install_ha_proxy.sh ${haproxy_ip}:/tmp
 529     ${SSH} ${haproxy_ip} "sudo bash /tmp/install_ha_proxy.sh"
 530     scp ${WORKSPACE}/haproxy.cfg ${haproxy_ip}:/tmp
 531     scp ${WORKSPACE}/deploy_ha_proxy.sh ${haproxy_ip}:/tmp
 532     ${SSH} ${haproxy_ip} "sudo bash /tmp/deploy_ha_proxy.sh"
 533 } # configure_haproxy_for_neutron_requests()
 534
 535 # Following three functions are debugging helpers when debugging devstack changes.
 536 # Keeping them for now so we can simply call them when needed.
 537 ctrlhn=""
 538 comp1hn=""
 539 comp2hn=""
 540 function get_hostnames () {
 541     set +e
 542     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
 543     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
 544     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
 545     ctrlhn=$(${SSH} ${ctrlip} "hostname")
 546     comp1hn=$(${SSH} ${comp1ip} "hostname")
 547     comp2hn=$(${SSH} ${comp2ip} "hostname")
 548     echo "hostnames: ${ctrlhn}, ${comp1hn}, ${comp2hn}"
 549     set -e
 550 }
 551
 552 function check_firewall() {
 553     set +e
 554     echo $-
 555     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
 556     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
 557     local comp2ip=${OPENSTACK_COMPUTE_NODE_2_IP}
 558
 559     echo "check_firewall on control"
 560     ${SSH} ${ctrlip} "
 561         sudo systemctl status firewalld
 562         sudo systemctl -l status iptables
 563         sudo iptables --line-numbers -nvL
 564     " || true
 565     echo "check_firewall on compute 1"
 566     ${SSH} ${comp1ip} "
 567         sudo systemctl status firewalld
 568         sudo systemctl -l status iptables
 569         sudo iptables --line-numbers -nvL
 570     " || true
 571     echo "check_firewall on compute 2"
 572     ${SSH} ${comp2ip} "
 573         sudo systemctl status firewalld
 574         sudo systemctl -l status iptables
 575         sudo iptables --line-numbers -nvL
 576     " || true
 577 }
 578
 579 function get_service () {
 580     set +e
 581     local iter=$1
 582     #local idx=$2
 583     local ctrlip=${OPENSTACK_CONTROL_NODE_1_IP}
 584     local comp1ip=${OPENSTACK_COMPUTE_NODE_1_IP}
 585
 586     #if [ ${idx} -eq 1 ]; then
 587         if [ ${iter} -eq 1 ] || [ ${iter} -gt 16 ]; then
 588             curl http://${ctrlip}:5000
 589             curl http://${ctrlip}:35357
 590             curl http://${ctrlip}/identity
 591             ${SSH} ${ctrlip} "
 592                 source /opt/stack/devstack/openrc admin admin;
 593                 env
 594                 openstack configuration show --unmask;
 595                 openstack service list
 596                 openstack --os-cloud devstack-admin --os-region RegionOne compute service list
 597                 openstack hypervisor list;
 598             " || true
 599             check_firewall
 600         fi
 601     #fi
 602     set -e
 603 }
 604
 605 # Check if rabbitmq is ready by looking for a pid in it's status.
 606 # The function returns the status of the grep command which callers can check.
 607 function is_rabbitmq_ready() {
 608     local -r ip=${1}
 609     local grepfor="nova_cell1"
 610     rm -f rabbit.txt
 611     ${SSH} ${ip} "sudo rabbitmqctl list_vhosts" > rabbit.txt
 612     grep ${grepfor} rabbit.txt
 613 }
 614
 615 # retry the given command ($3) until success for a number of iterations ($1)
 616 # sleeping ($2) between tries.
 617 function retry() {
 618     local -r -i max_tries=${1}
 619     local -r -i sleep_time=${2}
 620     local -r cmd=${3}
 621     local -i retries=1
 622     local -i rc=1
 623     while true; do
 624         echo "retry ${cmd}: attempt: ${retries}"
 625         ${cmd}
 626         rc=$?
 627         if ((${rc} == 0)); then
 628             break;
 629         else
 630             if ((${retries} == ${max_tries})); then
 631                 break
 632             else
 633                 ((retries++))
 634                 sleep ${sleep_time}
 635             fi
 636         fi
 637     done
 638     return ${rc}
 639 }
 640
 641 function install_ovs() {
 642     local -r node=${1}
 643     local -r rpm_path=${2}
 644
 645     if [ "${OVS_INSTALL:0:1}" = "v" ]; then
 646        # An OVS version was given, so we build it ourselves from OVS git repo.
 647        # Only on the first node though, consecutive nodes will use RPMs
 648        # built for the first one.
 649        [ ! -d "${rpm_path}" ] && mkdir -p "${rpm_path}" && build_ovs ${node} ${OVS_INSTALL} "${rpm_path}"
 650        # Install OVS from path
 651        install_ovs_from_path ${node} "${rpm_path}"
 652     elif [ "${OVS_INSTALL:0:4}" = "http" ]; then
 653        # Otherwise, install from rpm repo directly.
 654        install_ovs_from_repo ${node} ${OVS_INSTALL}
 655     else
 656        echo "Expected either an OVS version git tag or a repo http url"
 657        exit 1
 658     fi
 659 }
 660
 661 ODL_PROVIDER_MAPPINGS="\${PUBLIC_PHYSICAL_NETWORK}:${PUBLIC_BRIDGE}"
 662 RECLONE=False
 663 ODL_PORT=8181
 664
 665 # Always compare the lists below against the devstack upstream ENABLED_SERVICES in
 666 # https://github.com/openstack-dev/devstack/blob/master/stackrc#L52
 667 # ODL CSIT does not use vnc, cinder, q-agt, q-l3 or horizon so they are not included below.
 668 # collect performance stats
 669 CORE_OS_CONTROL_SERVICES="dstat"
 670 # Glance
 671 CORE_OS_CONTROL_SERVICES+=",g-api,g-reg"
 672 # Keystone
 673 CORE_OS_CONTROL_SERVICES+=",key"
 674 # Nova - services to support libvirt
 675 CORE_OS_CONTROL_SERVICES+=",n-api,n-api-meta,n-cauth,n-cond,n-crt,n-obj,n-sch"
 676 # ODL - services to connect to ODL
 677 CORE_OS_CONTROL_SERVICES+=",odl-compute,odl-neutron"
 678 # Additional services
 679 CORE_OS_CONTROL_SERVICES+=",mysql,rabbit"
 680
 681 # collect performance stats
 682 CORE_OS_COMPUTE_SERVICES="dstat"
 683 # computes only need nova and odl
 684 CORE_OS_COMPUTE_SERVICES+=",n-cpu,odl-compute"
 685
 686 cat > ${WORKSPACE}/disable_firewall.sh << EOF
 687 sudo systemctl stop firewalld
 688 # Open these ports to match the tutorial vms
 689 # http/https (80/443), samba (445), netbios (137,138,139)
 690 sudo iptables -I INPUT -p tcp -m multiport --dports 80,443,139,445 -j ACCEPT
 691 sudo iptables -I INPUT -p udp -m multiport --dports 137,138 -j ACCEPT
 692 # OpenStack services as well as vxlan tunnel ports 4789 and 9876
 693 # identity public/admin (5000/35357), ampq (5672), vnc (6080), nova (8774), glance (9292), neutron (9696)
 694 sudo sudo iptables -I INPUT -p tcp -m multiport --dports 5000,5672,6080,8774,9292,9696,35357 -j ACCEPT
 695 sudo sudo iptables -I INPUT -p udp -m multiport --dports 4789,9876 -j ACCEPT
 696 sudo iptables-save > /etc/sysconfig/iptables
 697 sudo systemctl restart iptables
 698 sudo iptables --line-numbers -nvL
 699 true
 700 EOF
 701
 702 #For SFC Tests a larger partition is required for creating instances with Ubuntu
 703 if [[ "${ENABLE_OS_PLUGINS}" =~ networking-sfc ]]; then
 704    TMPFS_SIZE=12G
 705 fi
 706 cat > ${WORKSPACE}/get_devstack.sh << EOF
 707 sudo systemctl stop firewalld
 708 sudo yum install bridge-utils python-pip -y
 709 #sudo systemctl stop  NetworkManager
 710 #Disable NetworkManager and kill dhclient and dnsmasq
 711 sudo systemctl stop NetworkManager
 712 sudo killall dhclient
 713 sudo killall dnsmasq
 714 #Workaround for mysql failure
 715 echo "127.0.0.1   localhost \${HOSTNAME}" >> /tmp/hosts
 716 echo "::1         localhost \${HOSTNAME}" >> /tmp/hosts
 717 sudo mv /tmp/hosts /etc/hosts
 718 sudo mkdir /opt/stack
 719 echo "Create RAM disk for /opt/stack"
 720 sudo mount -t tmpfs -o size=${TMPFS_SIZE} tmpfs /opt/stack
 721 sudo chmod 777 /opt/stack
 722 cd /opt/stack
 723 echo "git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}"
 724 git clone https://git.openstack.org/openstack-dev/devstack --branch ${OPENSTACK_BRANCH}
 725 cd devstack
 726 if [ -n "${DEVSTACK_HASH}" ]; then
 727     echo "git checkout ${DEVSTACK_HASH}"
 728     git checkout ${DEVSTACK_HASH}
 729 fi
 730 wget https://raw.githubusercontent.com/shague/odl_tools/master/fix-logging.patch.txt -O /tmp/fix-logging.patch.txt
 731 patch --verbose -p1 -i /tmp/fix-logging.patch.txt
 732 git --no-pager log --pretty=format:'%h %<(13)%ar%<(13)%cr %<(20,trunc)%an%d %s%b' -n20
 733 echo
 734
 735 echo "workaround: do not upgrade openvswitch"
 736 sudo yum install -y yum-plugin-versionlock
 737 sudo yum versionlock add openvswitch
 738 EOF
 739
 740 cat > "${WORKSPACE}/setup_host_cell_mapping.sh" << EOF
 741 sudo nova-manage cell_v2 map_cell0
 742 sudo nova-manage cell_v2 simple_cell_setup
 743 sudo nova-manage db sync
 744 sudo nova-manage cell_v2 discover_hosts
 745 EOF
 746
 747 cat > "${WORKSPACE}/workaround_networking_sfc.sh" << EOF
 748 cd /opt/stack
 749 git clone https://git.openstack.org/openstack/networking-sfc
 750 cd networking-sfc
 751 git checkout ${OPENSTACK_BRANCH}
 752 git checkout master -- devstack/plugin.sh
 753 EOF
 754
 755 NUM_OPENSTACK_SITES=${NUM_OPENSTACK_SITES:-1}
 756 compute_index=1
 757 os_node_list=()
 758
 759 if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
 760     echo "Configure HAProxy"
 761     ODL_HAPROXYIP_PARAM=OPENSTACK_HAPROXY_1_IP
 762     ODL_IP_PARAM1=ODL_SYSTEM_1_IP
 763     ODL_IP_PARAM2=ODL_SYSTEM_2_IP
 764     ODL_IP_PARAM3=ODL_SYSTEM_3_IP
 765     ODLMGRIP=${!ODL_HAPROXYIP_PARAM} # ODL Northbound uses HAProxy VIP
 766     ODL_OVS_MGRS="${!ODL_IP_PARAM1},${!ODL_IP_PARAM2},${!ODL_IP_PARAM3}" # OVSDB connects to all ODL IPs
 767     configure_haproxy_for_neutron_requests ${!ODL_HAPROXYIP_PARAM} "${ODL_OVS_MGRS}"
 768 else
 769     ODL_IP_PARAM=ODL_SYSTEM_1_IP
 770     ODLMGRIP=${!ODL_IP_PARAM} # OVSDB connects to ODL IP
 771     ODL_OVS_MGRS="${!ODL_IP_PARAM}" # ODL Northbound uses ODL IP
 772 fi
 773
 774 os_ip_list=()
 775 for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
 776     cip=OPENSTACK_CONTROL_NODE_${i}_IP
 777     ip=${!cip}
 778     os_ip_list+=("${ip}")
 779 done
 780
 781 for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
 782     cip=OPENSTACK_COMPUTE_NODE_${i}_IP
 783     ip=${!cip}
 784     os_ip_list+=("${ip}")
 785 done
 786
 787 for i in "${!os_ip_list[@]}"; do
 788     ip=${os_ip_list[i]}
 789     tcpdump_start "${i}" "${ip}" "port 6653"
 790 done
 791
 792
 793 # Begin stacking the nodes, starting with the controller(s) and then the compute(s)
 794
 795 for i in `seq 1 ${NUM_OPENSTACK_CONTROL_NODES}`; do
 796     CONTROLIP=OPENSTACK_CONTROL_NODE_${i}_IP
 797     echo "Configure the stack of the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${!CONTROLIP}"
 798     scp ${WORKSPACE}/disable_firewall.sh ${!CONTROLIP}:/tmp
 799     ${SSH} ${!CONTROLIP} "sudo bash /tmp/disable_firewall.sh"
 800     create_etc_hosts ${!CONTROLIP}
 801     scp ${WORKSPACE}/hosts_file ${!CONTROLIP}:/tmp/hosts
 802     scp ${WORKSPACE}/get_devstack.sh ${!CONTROLIP}:/tmp
 803     # devstack Master is yet to migrate fully to lib/neutron, there are some ugly hacks that is
 804     # affecting the stacking.
 805     # Workaround For Queens, Make the physical Network as physnet1 in lib/neutron
 806     # In Queens the neutron new libs are used and do not have the following options from Pike and earlier:
 807     # Q_ML2_PLUGIN_FLAT_TYPE_OPTIONS could be used for the flat_networks
 808     # and Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS could be used for the ml2_type_vlan
 809     ${SSH} ${!CONTROLIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
 810     if [ "${ODL_ML2_BRANCH}" == "stable/queens" ]; then
 811        ssh ${!CONTROLIP} "sed -i 's/flat_networks public/flat_networks public,physnet1/' /opt/stack/devstack/lib/neutron"
 812        ssh ${!CONTROLIP} "sed -i '186i iniset \$NEUTRON_CORE_PLUGIN_CONF ml2_type_vlan network_vlan_ranges public:1:4094,physnet1:1:4094' /opt/stack/devstack/lib/neutron"
 813        #Workaround for networking-sfc to configure the paramaters in neutron.conf if the
 814        # services used are neutron-api, neutron-dhcp etc instead of q-agt.
 815        # Can be removed if the patch https://review.openstack.org/#/c/596287/ gets merged
 816        if [[ "${ENABLE_OS_PLUGINS}" =~ networking-sfc ]]; then
 817            scp ${WORKSPACE}/workaround_networking_sfc.sh ${!CONTROLIP}:/tmp/
 818            ssh ${!CONTROLIP} "bash -x /tmp/workaround_networking_sfc.sh"
 819        fi
 820     fi
 821     create_control_node_local_conf ${!CONTROLIP} ${ODLMGRIP} "${ODL_OVS_MGRS}"
 822     scp ${WORKSPACE}/local.conf_control_${!CONTROLIP} ${!CONTROLIP}:/opt/stack/devstack/local.conf
 823     echo "Install rdo release to avoid incompatible Package versions"
 824     install_rdo_release ${!CONTROLIP}
 825     setup_live_migration_control ${!CONTROLIP}
 826     if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
 827         setup_live_migration_compute ${!CONTROLIP} ${!CONTROLIP}
 828     fi
 829     [ -n "${OVS_INSTALL}" ] && install_ovs ${!CONTROLIP} /tmp/ovs_rpms
 830     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-sfc ]]; then
 831         # This should be really done by networking-odl devstack plugin,
 832         # but in the meantime do it ourselves
 833         ssh ${!CONTROLIP} "sudo ovs-vsctl set Open_vSwitch . external_ids:of-tunnel=true"
 834     fi
 835     echo "Stack the control node ${i} of ${NUM_OPENSTACK_CONTROL_NODES}: ${CONTROLIP}"
 836     ssh ${!CONTROLIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
 837     ssh ${!CONTROLIP} "ps -ef | grep stack.sh"
 838     ssh ${!CONTROLIP} "ls -lrt /opt/stack/devstack/nohup.out"
 839     os_node_list+=("${!CONTROLIP}")
 840 done
 841
 842 # This is a backup to the CELLSV2_SETUP=singleconductor workaround. Keeping it here as an easy lookup
 843 # if needed.
 844 # Let the control node get started to avoid a race condition where the computes start and try to access
 845 # the nova_cell1 on the control node before it is created. If that happens, the nova-compute service on the
 846 # compute exits and does not attempt to restart.
 847 # 180s is chosen because in test runs the control node usually finished in 17-20 minutes and the computes finished
 848 # in 17 minutes, so take the max difference of 3 minutes and the jobs should still finish around the same time.
 849 # one of the following errors is seen in the compute n-cpu.log:
 850 # Unhandled error: NotAllowed: Connection.open: (530) NOT_ALLOWED - access to vhost 'nova_cell1' refused for user 'stackrabbit'
 851 # AccessRefused: (0, 0): (403) ACCESS_REFUSED - Login was refused using authentication mechanism AMQPLAIN. For details see the broker logfile.
 852 # Compare that timestamp to this log in the control stack.log: sudo rabbitmqctl set_permissions -p nova_cell1 stackrabbit
 853 # If the n-cpu.log is earlier than the control stack.log timestamp then the failure condition is likely hit.
 854 if [ ${NUM_OPENSTACK_COMPUTE_NODES} -gt 0 ]; then
 855     WAIT_FOR_RABBITMQ_MINUTES=60
 856     echo "Wait a maximum of ${WAIT_FOR_RABBITMQ_MINUTES}m until rabbitmq is ready and nova_cell1 created to allow the controller to create nova_cell1 before the computes need it"
 857     set +e
 858     retry ${WAIT_FOR_RABBITMQ_MINUTES} 60 "is_rabbitmq_ready ${OPENSTACK_CONTROL_NODE_1_IP}"
 859     rc=$?
 860     set -e
 861     if ((${rc} == 0)); then
 862       echo "rabbitmq is ready, starting ${NUM_OPENSTACK_COMPUTE_NODES} compute(s)"
 863     else
 864       echo "rabbitmq was not ready in ${WAIT_FOR_RABBITMQ_MINUTES}m"
 865       exit 1
 866     fi
 867 fi
 868
 869 for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
 870     COMPUTEIP=OPENSTACK_COMPUTE_NODE_${i}_IP
 871     CONTROLIP=OPENSTACK_CONTROL_NODE_1_IP
 872     echo "Configure the stack of the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${!COMPUTEIP}"
 873     scp ${WORKSPACE}/disable_firewall.sh "${!COMPUTEIP}:/tmp"
 874     ${SSH} "${!COMPUTEIP}" "sudo bash /tmp/disable_firewall.sh"
 875     create_etc_hosts ${!COMPUTEIP} ${!CONTROLIP}
 876     scp ${WORKSPACE}/hosts_file ${!COMPUTEIP}:/tmp/hosts
 877     scp ${WORKSPACE}/get_devstack.sh  ${!COMPUTEIP}:/tmp
 878     ${SSH} ${!COMPUTEIP} "bash /tmp/get_devstack.sh > /tmp/get_devstack.sh.txt 2>&1"
 879     create_compute_node_local_conf ${!COMPUTEIP} ${!CONTROLIP} ${ODLMGRIP} "${ODL_OVS_MGRS}"
 880     scp ${WORKSPACE}/local.conf_compute_${!COMPUTEIP} ${!COMPUTEIP}:/opt/stack/devstack/local.conf
 881     echo "Install rdo release to avoid incompatible Package versions"
 882     install_rdo_release ${!COMPUTEIP}
 883     setup_live_migration_compute ${!COMPUTEIP} ${!CONTROLIP}
 884     [ -n "${OVS_INSTALL}" ] && install_ovs ${!COMPUTEIP} /tmp/ovs_rpms
 885     if [[ "${ENABLE_OS_PLUGINS}" =~ networking-sfc ]]; then
 886         # This should be really done by networking-odl devstack plugin,
 887         # but in the meantime do it ourselves
 888         ssh ${!COMPUTEIP} "sudo ovs-vsctl set Open_vSwitch . external_ids:of-tunnel=true"
 889     fi
 890     echo "Stack the compute node ${i} of ${NUM_OPENSTACK_COMPUTE_NODES}: ${!COMPUTEIP}"
 891     ssh ${!COMPUTEIP} "cd /opt/stack/devstack; nohup ./stack.sh > /opt/stack/devstack/nohup.out 2>&1 &"
 892     ssh ${!COMPUTEIP} "ps -ef | grep stack.sh"
 893     os_node_list+=("${!COMPUTEIP}")
 894 done
 895
 896 echo "nodelist: ${os_node_list[*]}"
 897
 898 # This script runs on the openstack nodes. It greps for a string that devstack writes when stacking is complete.
 899 # The script then writes a status depending on the grep output that is later scraped by the robot vm to control
 900 # the status polling.
 901 cat > ${WORKSPACE}/check_stacking.sh << EOF
 902 > /tmp/stack_progress
 903 ps -ef | grep "stack.sh" | grep -v grep
 904 ret=\$?
 905 if [ \${ret} -eq 1 ]; then
 906     grep "This is your host IP address:" /opt/stack/devstack/nohup.out
 907     if [ \$? -eq 0 ]; then
 908         echo "Stacking Complete" > /tmp/stack_progress
 909     else
 910         echo "Stacking Failed" > /tmp/stack_progress
 911     fi
 912 elif [ \${ret} -eq 0 ]; then
 913     echo "Still Stacking" > /tmp/stack_progress
 914 fi
 915 EOF
 916
 917 # devstack debugging
 918 # get_hostnames
 919
 920 # Check if the stacking is finished. Poll all nodes every 60s for one hour.
 921 iteration=0
 922 in_progress=1
 923 while [ ${in_progress} -eq 1 ]; do
 924     iteration=$(($iteration + 1))
 925     for index in "${!os_node_list[@]}"; do
 926         echo "node $index ${os_node_list[index]}: checking stacking status attempt ${iteration} of 60"
 927         scp ${WORKSPACE}/check_stacking.sh  ${os_node_list[index]}:/tmp
 928         ${SSH} ${os_node_list[index]} "bash /tmp/check_stacking.sh"
 929         scp ${os_node_list[index]}:/tmp/stack_progress .
 930         cat stack_progress
 931         stacking_status=`cat stack_progress`
 932         # devstack debugging
 933         # get_service "${iteration}" "${index}"
 934         if [ "$stacking_status" == "Still Stacking" ]; then
 935             continue
 936         elif [ "$stacking_status" == "Stacking Failed" ]; then
 937             echo "node $index ${os_node_list[index]}: stacking has failed"
 938             exit 1
 939         elif [ "$stacking_status" == "Stacking Complete" ]; then
 940             echo "node $index ${os_node_list[index]}: stacking complete"
 941             unset 'os_node_list[index]'
 942             if  [ ${#os_node_list[@]} -eq 0 ]; then
 943                 in_progress=0
 944             fi
 945         fi
 946     done
 947     echo "sleep for a minute before the next check"
 948     sleep 60
 949     if [ ${iteration} -eq 60 ]; then
 950         echo "stacking has failed - took longer than 60m"
 951         exit 1
 952     fi
 953 done
 954
 955 # Further configuration now that stacking is complete.
 956 echo "Configure the Control Node"
 957 CONTROLIP=OPENSTACK_CONTROL_NODE_1_IP
 958 # Gather Compute IPs for the site
 959 for i in `seq 1 ${NUM_OPENSTACK_COMPUTE_NODES}`; do
 960     IP_VAR=OPENSTACK_COMPUTE_NODE_${i}_IP
 961     COMPUTE_IPS[$((i-1))]=${!IP_VAR}
 962 done
 963
 964 echo "sleep for 60s and print hypervisor-list"
 965 sleep 60
 966 ${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; nova hypervisor-list"
 967 # in the case that we are doing openstack (control + compute) all in one node, then the number of hypervisors
 968 # will be the same as the number of openstack systems. However, if we are doing multinode openstack then the
 969 # assumption is we have a single control node and the rest are compute nodes, so the number of expected hypervisors
 970 # is one less than the total number of openstack systems
 971 if [ ${NUM_OPENSTACK_SYSTEM} -eq 1 ]; then
 972     expected_num_hypervisors=1
 973 else
 974     expected_num_hypervisors=${NUM_OPENSTACK_COMPUTE_NODES}
 975     if [ "$(is_openstack_feature_enabled n-cpu)" == "1" ]; then
 976         expected_num_hypervisors=$((expected_num_hypervisors + 1))
 977     fi
 978 fi
 979 num_hypervisors=$(${SSH} ${!CONTROLIP} "cd /opt/stack/devstack; source openrc admin admin; openstack hypervisor list -f value | wc -l" | tail -1 | tr -d "\r")
 980 if ! [ "${num_hypervisors}" ] || ! [ ${num_hypervisors} -eq ${expected_num_hypervisors} ]; then
 981     echo "Error: Only $num_hypervisors hypervisors detected, expected $expected_num_hypervisors"
 982     exit 1
 983 fi
 984
 985 # External Network
 986 echo "prepare external networks by adding vxlan tunnels between all nodes on a separate bridge..."
 987 # FIXME Should there be a unique gateway IP and devstack index for each site?
 988 devstack_index=1
 989 for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
 990     # FIXME - Workaround, ODL (new netvirt) currently adds PUBLIC_BRIDGE as a port in br-int since it doesn't see such a bridge existing when we stack
 991     ${SSH} $ip "sudo ovs-vsctl --if-exists del-port br-int $PUBLIC_BRIDGE"
 992     ${SSH} $ip "sudo ovs-vsctl --may-exist add-br $PUBLIC_BRIDGE -- set bridge $PUBLIC_BRIDGE other-config:disable-in-band=true other_config:hwaddr=f6:00:00:ff:01:0$((devstack_index++))"
 993 done
 994
 995 # ipsec support
 996 if [ "${IPSEC_VXLAN_TUNNELS_ENABLED}" == "yes" ]; then
 997     # shellcheck disable=SC2206
 998     ALL_NODES=(${!CONTROLIP} ${COMPUTE_IPS[*]})
 999     for ((inx_ip1=0; inx_ip1<$((${#ALL_NODES[@]} - 1)); inx_ip1++)); do
1000         for ((inx_ip2=$((inx_ip1 + 1)); inx_ip2<${#ALL_NODES[@]}; inx_ip2++)); do
1001             KEY1=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
1002             KEY2=0x$(dd if=/dev/urandom count=32 bs=1 2> /dev/null| xxd -p -c 64)
1003             ID=0x$(dd if=/dev/urandom count=4 bs=1 2> /dev/null| xxd -p -c 8)
1004             ip1=${ALL_NODES[$inx_ip1]}
1005             ip2=${ALL_NODES[$inx_ip2]}
1006             ${SSH} $ip1 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1007             ${SSH} $ip1 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1008             ${SSH} $ip1 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir out tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
1009             ${SSH} $ip1 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir in tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
1010
1011             ${SSH} $ip2 "sudo ip xfrm state add src $ip2 dst $ip1 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1012             ${SSH} $ip2 "sudo ip xfrm state add src $ip1 dst $ip2 proto esp spi $ID reqid $ID mode transport auth sha256 $KEY1 enc aes $KEY2"
1013             ${SSH} $ip2 "sudo ip xfrm policy add src $ip2 dst $ip1 proto udp dir out tmpl src $ip2 dst $ip1 proto esp reqid $ID mode transport"
1014             ${SSH} $ip2 "sudo ip xfrm policy add src $ip1 dst $ip2 proto udp dir in tmpl src $ip1 dst $ip2 proto esp reqid $ID mode transport"
1015         done
1016     done
1017
1018     for ip in ${!CONTROLIP} ${COMPUTE_IPS[*]}; do
1019         echo "ip xfrm configuration for node $ip:"
1020         ${SSH} $ip "sudo ip xfrm policy list"
1021         ${SSH} $ip "sudo ip xfrm state list"
1022     done
1023 fi
1024
1025 # Control Node - PUBLIC_BRIDGE will act as the external router
1026 # Parameter values below are used in integration/test - changing them requires updates in intergration/test as well
1027 EXTNET_GATEWAY_IP="10.10.10.250"
1028 EXTNET_INTERNET_IP="10.9.9.9"
1029 EXTNET_PNF_IP="10.10.10.253"
1030 ${SSH} ${!CONTROLIP} "sudo ifconfig ${PUBLIC_BRIDGE} up ${EXTNET_GATEWAY_IP}/24"
1031
1032 # Control Node - external net PNF simulation
1033 ${SSH} ${!CONTROLIP} "
1034     sudo ip netns add pnf_ns;
1035     sudo ip link add pnf_veth0 type veth peer name pnf_veth1;
1036     sudo ip link set pnf_veth1 netns pnf_ns;
1037     sudo ip link set pnf_veth0 up;
1038     sudo ip netns exec pnf_ns ifconfig pnf_veth1 up ${EXTNET_PNF_IP}/24;
1039     sudo ovs-vsctl add-port ${PUBLIC_BRIDGE} pnf_veth0;
1040 "
1041
1042 # Control Node - external net internet address simulation
1043 ${SSH} ${!CONTROLIP} "
1044     sudo ip tuntap add dev internet_tap mode tap;
1045     sudo ifconfig internet_tap up ${EXTNET_INTERNET_IP}/24;
1046 "
1047
1048 # Computes
1049 compute_index=1
1050 for compute_ip in ${COMPUTE_IPS[*]}; do
1051     # Tunnel from controller to compute
1052     COMPUTEPORT=compute$(( compute_index++ ))_vxlan
1053     ${SSH} ${!CONTROLIP} "
1054         sudo ovs-vsctl add-port $PUBLIC_BRIDGE $COMPUTEPORT -- set interface $COMPUTEPORT type=vxlan options:local_ip=${!CONTROLIP} options:remote_ip=$compute_ip options:dst_port=9876 options:key=flow
1055     "
1056     # Tunnel from compute to controller
1057     CONTROLPORT="control_vxlan"
1058     ${SSH} $compute_ip "
1059         sudo ovs-vsctl add-port $PUBLIC_BRIDGE $CONTROLPORT -- set interface $CONTROLPORT type=vxlan options:local_ip=$compute_ip options:remote_ip=${!CONTROLIP} options:dst_port=9876 options:key=flow
1060     "
1061 done
1062
1063 if [ "${ENABLE_HAPROXY_FOR_NEUTRON}" == "yes" ]; then
1064     odlmgrip=OPENSTACK_HAPROXY_1_IP
1065     HA_PROXY_IP=${!odlmgrip}
1066     HA_PROXY_1_IP=${!odlmgrip}
1067     odlmgrip2=OPENSTACK_HAPROXY_2_IP
1068     HA_PROXY_2_IP=${!odlmgrip2}
1069     odlmgrip3=OPENSTACK_HAPROXY_1_IP
1070     HA_PROXY_3_IP=${!odlmgrip3}
1071 else
1072     HA_PROXY_IP=${ODL_SYSTEM_IP}
1073     HA_PROXY_1_IP=${ODL_SYSTEM_1_IP}
1074     HA_PROXY_2_IP=${ODL_SYSTEM_2_IP}
1075     HA_PROXY_3_IP=${ODL_SYSTEM_3_IP}
1076 fi
1077
1078 get_test_suites SUITES
1079
1080 #install all client versions required for this job testing
1081 install_openstack_clients_in_robot_vm
1082
1083 # TODO: run openrc on control node and then scrape the vars from it
1084 # Environment Variables Needed to execute Openstack Client for NetVirt Jobs
1085 cat > /tmp/os_netvirt_client_rc << EOF
1086 export OS_USERNAME=admin
1087 export OS_PASSWORD=admin
1088 export OS_PROJECT_NAME=admin
1089 export OS_USER_DOMAIN_NAME=default
1090 export OS_PROJECT_DOMAIN_NAME=default
1091 export OS_AUTH_URL="http://${!CONTROLIP}/identity"
1092 export OS_IDENTITY_API_VERSION=3
1093 export OS_IMAGE_API_VERSION=2
1094 export OS_TENANT_NAME=admin
1095 unset OS_CLOUD
1096 EOF
1097
1098 source /tmp/os_netvirt_client_rc
1099
1100 echo "Get all versions before executing pybot"
1101 echo "openstack --version"
1102 which openstack
1103 openstack --version
1104 echo "nova --version"
1105 which nova
1106 nova --version
1107 echo "neutron --version"
1108 which neutron
1109 neutron --version
1110
1111 stacktime=$(timer $totaltmr)
1112 printf "Stacking elapsed time: %s\n" "${stacktime}"
1113
1114 echo "Starting Robot test suites ${SUITES} ..."
1115 # please add pybot -v arguments on a single line and alphabetized
1116 suite_num=0
1117 for suite in ${SUITES}; do
1118     # prepend an incremental counter to the suite name so that the full robot log combining all the suites as is done
1119     # in the rebot step below will list all the suites in chronological order as rebot seems to alphabetize them
1120     let "suite_num = suite_num + 1"
1121     suite_index="$(printf %02d ${suite_num})"
1122     suite_name="$(basename ${suite} | cut -d. -f1)"
1123     log_name="${suite_index}_${suite_name}"
1124     pybot -N ${log_name} \
1125     -c critical -e exclude -e skip_if_${DISTROSTREAM} \
1126     --log log_${log_name}.html --report report_${log_name}.html --output output_${log_name}.xml \
1127     --removekeywords wuks \
1128     --removekeywords name:SetupUtils.Setup_Utils_For_Setup_And_Teardown \
1129     --removekeywords name:SetupUtils.Setup_Test_With_Logging_And_Without_Fast_Failing \
1130     --removekeywords name:OpenStackOperations.Add_OVS_Logging_On_All_OpenStack_Nodes \
1131     -v BUNDLEFOLDER:${BUNDLEFOLDER} \
1132     -v BUNDLE_URL:${ACTUAL_BUNDLE_URL} \
1133     -v CMP_INSTANCES_SHARED_PATH:/var/instances \
1134     -v CONTROLLERFEATURES:"${CONTROLLERFEATURES}" \
1135     -v CONTROLLER_USER:${USER} \
1136     -v DEVSTACK_DEPLOY_PATH:/opt/stack/devstack \
1137     -v ENABLE_ITM_DIRECT_TUNNELS:${ENABLE_ITM_DIRECT_TUNNELS} \
1138     -v HA_PROXY_IP:${HA_PROXY_IP} \
1139     -v HA_PROXY_1_IP:${HA_PROXY_1_IP} \
1140     -v HA_PROXY_2_IP:${HA_PROXY_2_IP} \
1141     -v HA_PROXY_3_IP:${HA_PROXY_3_IP} \
1142     -v JDKVERSION:${JDKVERSION} \
1143     -v JENKINS_WORKSPACE:${WORKSPACE} \
1144     -v NEXUSURL_PREFIX:${NEXUSURL_PREFIX} \
1145     -v NUM_ODL_SYSTEM:${NUM_ODL_SYSTEM} \
1146     -v NUM_OS_SYSTEM:${NUM_OPENSTACK_SYSTEM} \
1147     -v NUM_TOOLS_SYSTEM:${NUM_TOOLS_SYSTEM} \
1148     -v ODL_SNAT_MODE:${ODL_SNAT_MODE} \
1149     -v ODL_STREAM:${DISTROSTREAM} \
1150     -v ODL_SYSTEM_IP:${ODL_SYSTEM_IP} \
1151     -v ODL_SYSTEM_1_IP:${ODL_SYSTEM_1_IP} \
1152     -v ODL_SYSTEM_2_IP:${ODL_SYSTEM_2_IP} \
1153     -v ODL_SYSTEM_3_IP:${ODL_SYSTEM_3_IP} \
1154     -v ODL_SYSTEM_4_IP:${ODL_SYSTEM_4_IP} \
1155     -v ODL_SYSTEM_5_IP:${ODL_SYSTEM_5_IP} \
1156     -v ODL_SYSTEM_6_IP:${ODL_SYSTEM_6_IP} \
1157     -v ODL_SYSTEM_7_IP:${ODL_SYSTEM_7_IP} \
1158     -v ODL_SYSTEM_8_IP:${ODL_SYSTEM_8_IP} \
1159     -v ODL_SYSTEM_9_IP:${ODL_SYSTEM_9_IP} \
1160     -v OS_CONTROL_NODE_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1161     -v OS_CONTROL_NODE_1_IP:${OPENSTACK_CONTROL_NODE_1_IP} \
1162     -v OS_CONTROL_NODE_2_IP:${OPENSTACK_CONTROL_NODE_2_IP} \
1163     -v OS_CONTROL_NODE_3_IP:${OPENSTACK_CONTROL_NODE_3_IP} \
1164     -v OPENSTACK_BRANCH:${OPENSTACK_BRANCH} \
1165     -v OS_COMPUTE_1_IP:${OPENSTACK_COMPUTE_NODE_1_IP} \
1166     -v OS_COMPUTE_2_IP:${OPENSTACK_COMPUTE_NODE_2_IP} \
1167     -v OS_COMPUTE_3_IP:${OPENSTACK_COMPUTE_NODE_3_IP} \
1168     -v OS_COMPUTE_4_IP:${OPENSTACK_COMPUTE_NODE_4_IP} \
1169     -v OS_COMPUTE_5_IP:${OPENSTACK_COMPUTE_NODE_5_IP} \
1170     -v OS_COMPUTE_6_IP:${OPENSTACK_COMPUTE_NODE_6_IP} \
1171     -v OPENSTACK_TOPO:${OPENSTACK_TOPO} \
1172     -v OS_USER:${USER} \
1173     -v PUBLIC_PHYSICAL_NETWORK:${PUBLIC_PHYSICAL_NETWORK} \
1174     -v SECURITY_GROUP_MODE:${SECURITY_GROUP_MODE} \
1175     -v TOOLS_SYSTEM_IP:${TOOLS_SYSTEM_1_IP} \
1176     -v TOOLS_SYSTEM_1_IP:${TOOLS_SYSTEM_1_IP} \
1177     -v TOOLS_SYSTEM_2_IP:${TOOLS_SYSTEM_2_IP} \
1178     -v TOOLS_SYSTEM_3_IP:${TOOLS_SYSTEM_3_IP} \
1179     -v USER_HOME:${HOME} \
1180     -v WORKSPACE:/tmp \
1181     ${TESTOPTIONS} ${suite} || true
1182 done
1183 #rebot exit codes seem to be different
1184 rebot --output ${WORKSPACE}/output.xml --log log_full.html --report report.html -N openstack output_*.xml || true
1185
1186 echo "Examining the files in data/log and checking file size"
1187 ssh ${ODL_SYSTEM_IP} "ls -altr /tmp/${BUNDLEFOLDER}/data/log/"
1188 ssh ${ODL_SYSTEM_IP} "du -hs /tmp/${BUNDLEFOLDER}/data/log/*"
1189
1190 echo "Tests Executed"
1191 printf "Total elapsed time: %s, stacking time: %s\n" "$(timer $totaltmr)" "${stacktime}"
1192 true  # perhaps Jenkins is testing last exit code
1193 # vim: ts=4 sw=4 sts=4 et ft=sh :