364 lines
13 KiB
Bash
364 lines
13 KiB
Bash
# Devstack extras script to install Tricircle
|
|
|
|
# Test if any tricircle services are enabled
|
|
# is_tricircle_enabled
|
|
function is_tricircle_enabled {
|
|
[[ ,${ENABLED_SERVICES} =~ ,"t-api" ]] && return 0
|
|
return 1
|
|
}
|
|
|
|
# create_tricircle_accounts() - Set up common required tricircle
|
|
# service accounts in keystone
|
|
# Project User Roles
|
|
# -------------------------------------------------------------------------
|
|
# $SERVICE_TENANT_NAME tricircle service
|
|
|
|
function create_tricircle_accounts {
|
|
if [[ "$ENABLED_SERVICES" =~ "t-api" ]]; then
|
|
create_service_user "tricircle" "admin"
|
|
local tricircle_api=$(get_or_create_service "tricircle" \
|
|
"tricircle" "Cross Neutron Networking Automation Service")
|
|
|
|
local tricircle_api_url="$SERVICE_PROTOCOL://$TRICIRCLE_API_HOST/tricircle"
|
|
if [[ "$TRICIRCLE_DEPLOY_WITH_WSGI" == "False" ]]; then
|
|
tricircle_api_url="$SERVICE_PROTOCOL://$TRICIRCLE_API_HOST:$TRICIRCLE_API_PORT/"
|
|
fi
|
|
|
|
get_or_create_endpoint $tricircle_api \
|
|
"$CENTRAL_REGION_NAME" \
|
|
"$tricircle_api_url" \
|
|
"$tricircle_api_url" \
|
|
"$tricircle_api_url"
|
|
fi
|
|
}
|
|
|
|
# create_tricircle_cache_dir() - Set up cache dir for tricircle
|
|
function create_tricircle_cache_dir {
|
|
|
|
# Delete existing dir
|
|
sudo rm -rf $TRICIRCLE_AUTH_CACHE_DIR
|
|
sudo mkdir -p $TRICIRCLE_AUTH_CACHE_DIR
|
|
sudo chown `whoami` $TRICIRCLE_AUTH_CACHE_DIR
|
|
}
|
|
|
|
# common config-file configuration for tricircle services
|
|
function init_common_tricircle_conf {
|
|
local conf_file=$1
|
|
|
|
touch $conf_file
|
|
iniset $conf_file DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
|
|
iniset $conf_file DEFAULT verbose True
|
|
iniset $conf_file DEFAULT use_syslog $SYSLOG
|
|
iniset $conf_file DEFAULT tricircle_db_connection `database_connection_url tricircle`
|
|
|
|
iniset $conf_file client auth_url http://$KEYSTONE_SERVICE_HOST/identity
|
|
iniset $conf_file client identity_url http://$KEYSTONE_SERVICE_HOST/identity/v3
|
|
iniset $conf_file client admin_username admin
|
|
iniset $conf_file client admin_password $ADMIN_PASSWORD
|
|
iniset $conf_file client admin_tenant demo
|
|
iniset $conf_file client auto_refresh_endpoint True
|
|
iniset $conf_file client top_region_name $CENTRAL_REGION_NAME
|
|
|
|
iniset $conf_file oslo_concurrency lock_path $TRICIRCLE_STATE_PATH/lock
|
|
}
|
|
|
|
# common config-file configuration for local Neutron(s)
|
|
function init_local_neutron_conf {
|
|
|
|
iniset $NEUTRON_CONF DEFAULT core_plugin tricircle.network.local_plugin.TricirclePlugin
|
|
|
|
iniset $NEUTRON_CONF client auth_url http://$KEYSTONE_SERVICE_HOST/identity
|
|
iniset $NEUTRON_CONF client identity_url http://$KEYSTONE_SERVICE_HOST/identity/v3
|
|
iniset $NEUTRON_CONF client admin_username admin
|
|
iniset $NEUTRON_CONF client admin_password $ADMIN_PASSWORD
|
|
iniset $NEUTRON_CONF client admin_tenant demo
|
|
iniset $NEUTRON_CONF client auto_refresh_endpoint True
|
|
iniset $NEUTRON_CONF client top_pod_name $CENTRAL_REGION_NAME
|
|
|
|
iniset $NEUTRON_CONF tricircle real_core_plugin neutron.plugins.ml2.plugin.Ml2Plugin
|
|
iniset $NEUTRON_CONF tricircle central_neutron_url http://$KEYSTONE_SERVICE_HOST:$TRICIRCLE_NEUTRON_PORT
|
|
}
|
|
|
|
# Set the environment variables for local Neutron(s)
|
|
function init_local_neutron_variables {
|
|
|
|
export Q_USE_PROVIDERNET_FOR_PUBLIC=True
|
|
|
|
Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS=${Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS:-}
|
|
Q_ML2_PLUGIN_VXLAN_TYPE_OPTIONS=${Q_ML2_PLUGIN_VXLAN_TYPE_OPTIONS:-}
|
|
# if VLAN options were not set in local.conf, use default VLAN bridge
|
|
# and VLAN options
|
|
if [ "$Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS" == "" ]; then
|
|
|
|
export TRICIRCLE_ADD_DEFAULT_BRIDGES=True
|
|
|
|
local vlan_option="bridge:$TRICIRCLE_DEFAULT_VLAN_RANGE"
|
|
local ext_option="extern:$TRICIRCLE_DEFAULT_EXT_RANGE"
|
|
local vlan_ranges=(network_vlan_ranges=$vlan_option,$ext_option)
|
|
Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS=$vlan_ranges
|
|
Q_ML2_PLUGIN_VXLAN_TYPE_OPTIONS="vni_ranges=$TRICIRCLE_DEFAULT_VXLAN_RANGE"
|
|
Q_ML2_PLUGIN_FLAT_TYPE_OPTIONS="flat_networks=$TRICIRCLE_DEFAULT_FLAT_NETWORKS"
|
|
|
|
local vlan_mapping="bridge:$TRICIRCLE_DEFAULT_VLAN_BRIDGE"
|
|
local ext_mapping="extern:$TRICIRCLE_DEFAULT_EXT_BRIDGE"
|
|
OVS_BRIDGE_MAPPINGS=$vlan_mapping,$ext_mapping
|
|
|
|
fi
|
|
}
|
|
|
|
function add_default_bridges {
|
|
|
|
if [ "$TRICIRCLE_ADD_DEFAULT_BRIDGES" == "True" ]; then
|
|
_neutron_ovs_base_add_bridge $TRICIRCLE_DEFAULT_VLAN_BRIDGE
|
|
_neutron_ovs_base_add_bridge $TRICIRCLE_DEFAULT_EXT_BRIDGE
|
|
fi
|
|
}
|
|
|
|
function configure_tricircle_api {
|
|
|
|
if is_service_enabled t-api ; then
|
|
echo "Configuring Tricircle API"
|
|
|
|
init_common_tricircle_conf $TRICIRCLE_API_CONF
|
|
|
|
setup_colorized_logging $TRICIRCLE_API_CONF DEFAULT tenant_name
|
|
|
|
if is_service_enabled keystone; then
|
|
|
|
create_tricircle_cache_dir
|
|
|
|
# Configure auth token middleware
|
|
configure_auth_token_middleware $TRICIRCLE_API_CONF tricircle \
|
|
$TRICIRCLE_AUTH_CACHE_DIR
|
|
|
|
else
|
|
iniset $TRICIRCLE_API_CONF DEFAULT auth_strategy noauth
|
|
fi
|
|
|
|
fi
|
|
}
|
|
|
|
# configure_tricircle_api_wsgi() - Set WSGI config files
|
|
function configure_tricircle_api_wsgi {
|
|
local tricircle_api_apache_conf
|
|
local venv_path=""
|
|
local tricircle_bin_dir=""
|
|
local tricircle_ssl_listen="#"
|
|
|
|
tricircle_bin_dir=$(get_python_exec_prefix)
|
|
tricircle_api_apache_conf=$(apache_site_config_for tricircle-api)
|
|
|
|
if is_ssl_enabled_service "tricircle-api"; then
|
|
tricircle_ssl_listen=""
|
|
tricircle_ssl="SSLEngine On"
|
|
tricircle_certfile="SSLCertificateFile $TRICIRCLE_SSL_CERT"
|
|
tricircle_keyfile="SSLCertificateKeyFile $TRICIRCLE_SSL_KEY"
|
|
fi
|
|
|
|
# configure venv bin if VENV is used
|
|
if [[ ${USE_VENV} = True ]]; then
|
|
venv_path="python-path=${PROJECT_VENV["tricircle"]}/lib/$(python_version)/site-packages"
|
|
tricircle_bin_dir=${PROJECT_VENV["tricircle"]}/bin
|
|
fi
|
|
|
|
sudo cp $TRICIRCLE_API_APACHE_TEMPLATE $tricircle_api_apache_conf
|
|
sudo sed -e "
|
|
s|%TRICIRCLE_BIN%|$tricircle_bin_dir|g;
|
|
s|%PUBLICPORT%|$TRICIRCLE_API_PORT|g;
|
|
s|%APACHE_NAME%|$APACHE_NAME|g;
|
|
s|%PUBLICWSGI%|$tricircle_bin_dir/tricircle-api-wsgi|g;
|
|
s|%SSLENGINE%|$tricircle_ssl|g;
|
|
s|%SSLCERTFILE%|$tricircle_certfile|g;
|
|
s|%SSLKEYFILE%|$tricircle_keyfile|g;
|
|
s|%SSLLISTEN%|$tricircle_ssl_listen|g;
|
|
s|%USER%|$STACK_USER|g;
|
|
s|%VIRTUALENV%|$venv_path|g
|
|
s|%APIWORKERS%|$API_WORKERS|g
|
|
" -i $tricircle_api_apache_conf
|
|
}
|
|
|
|
# start_tricircle_api_wsgi() - Start the API processes ahead of other things
|
|
function start_tricircle_api_wsgi {
|
|
enable_apache_site tricircle-api
|
|
restart_apache_server
|
|
tail_log tricircle-api /var/log/$APACHE_NAME/tricircle-api.log
|
|
|
|
echo "Waiting for tricircle-api to start..."
|
|
if ! wait_for_service $SERVICE_TIMEOUT $TRICIRCLE_API_PROTOCOL://$TRICIRCLE_API_HOST/tricircle; then
|
|
die $LINENO "tricircle-api did not start"
|
|
fi
|
|
}
|
|
|
|
# stop_tricircle_api_wsgi() - Disable the api service and stop it.
|
|
function stop_tricircle_api_wsgi {
|
|
disable_apache_site tricircle-api
|
|
restart_apache_server
|
|
}
|
|
|
|
# cleanup_tricircle_api_wsgi() - Remove residual data files, anything left over from previous
|
|
# runs that a clean run would need to clean up
|
|
function cleanup_tricircle_api_wsgi {
|
|
sudo rm -f $(apache_site_config_for tricircle-api)
|
|
}
|
|
|
|
function configure_tricircle_xjob {
|
|
if is_service_enabled t-job ; then
|
|
echo "Configuring Tricircle xjob"
|
|
|
|
init_common_tricircle_conf $TRICIRCLE_XJOB_CONF
|
|
|
|
setup_colorized_logging $TRICIRCLE_XJOB_CONF DEFAULT
|
|
fi
|
|
}
|
|
|
|
function start_central_neutron_server {
|
|
local server_index=0
|
|
local region_name=$1
|
|
local q_port=$2
|
|
|
|
get_or_create_service "neutron" "network" "Neutron Service"
|
|
get_or_create_endpoint "network" \
|
|
"$region_name" \
|
|
"$Q_PROTOCOL://$SERVICE_HOST:$q_port/" \
|
|
"$Q_PROTOCOL://$SERVICE_HOST:$q_port/" \
|
|
"$Q_PROTOCOL://$SERVICE_HOST:$q_port/"
|
|
|
|
# reconfigure central neutron server to use our own central plugin
|
|
echo "Configuring central Neutron plugin for Tricircle"
|
|
|
|
cp $NEUTRON_CONF $NEUTRON_CONF.$server_index
|
|
iniset $NEUTRON_CONF.$server_index database connection `database_connection_url $Q_DB_NAME$server_index`
|
|
iniset $NEUTRON_CONF.$server_index DEFAULT bind_port $q_port
|
|
iniset $NEUTRON_CONF.$server_index DEFAULT core_plugin "tricircle.network.central_plugin.TricirclePlugin"
|
|
iniset $NEUTRON_CONF.$server_index DEFAULT service_plugins ""
|
|
iniset $NEUTRON_CONF.$server_index DEFAULT tricircle_db_connection `database_connection_url tricircle`
|
|
iniset $NEUTRON_CONF.$server_index DEFAULT notify_nova_on_port_data_changes False
|
|
iniset $NEUTRON_CONF.$server_index DEFAULT notify_nova_on_port_status_changes False
|
|
iniset $NEUTRON_CONF.$server_index client admin_username admin
|
|
iniset $NEUTRON_CONF.$server_index client admin_password $ADMIN_PASSWORD
|
|
iniset $NEUTRON_CONF.$server_index client admin_tenant demo
|
|
iniset $NEUTRON_CONF.$server_index client auto_refresh_endpoint True
|
|
iniset $NEUTRON_CONF.$server_index client top_region_name $CENTRAL_REGION_NAME
|
|
|
|
local type_drivers=local
|
|
local tenant_network_types=local
|
|
if [ "$Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS" != "" ]; then
|
|
type_drivers+=,vlan
|
|
tenant_network_types+=,vlan
|
|
iniset $NEUTRON_CONF.$server_index tricircle network_vlan_ranges `echo $Q_ML2_PLUGIN_VLAN_TYPE_OPTIONS | awk -F= '{print $2}'`
|
|
fi
|
|
if [ "$Q_ML2_PLUGIN_VXLAN_TYPE_OPTIONS" != "" ]; then
|
|
type_drivers+=,vxlan
|
|
tenant_network_types+=,vxlan
|
|
iniset $NEUTRON_CONF.$server_index tricircle vni_ranges `echo $Q_ML2_PLUGIN_VXLAN_TYPE_OPTIONS | awk -F= '{print $2}'`
|
|
fi
|
|
if [ "Q_ML2_PLUGIN_FLAT_TYPE_OPTIONS" != "" ]; then
|
|
type_drivers+=,flat
|
|
tenant_network_types+=,flat
|
|
iniset $NEUTRON_CONF.$server_index tricircle flat_networks `echo $Q_ML2_PLUGIN_FLAT_TYPE_OPTIONS | awk -F= '{print $2}'`
|
|
fi
|
|
iniset $NEUTRON_CONF.$server_index tricircle type_drivers $type_drivers
|
|
iniset $NEUTRON_CONF.$server_index tricircle tenant_network_types $tenant_network_types
|
|
iniset $NEUTRON_CONF.$server_index tricircle enable_api_gateway False
|
|
# default value of bridge_network_type is vxlan
|
|
|
|
recreate_database $Q_DB_NAME$server_index
|
|
$NEUTRON_BIN_DIR/neutron-db-manage --config-file $NEUTRON_CONF.$server_index --config-file /$Q_PLUGIN_CONF_FILE upgrade head
|
|
|
|
enable_service q-svc$server_index
|
|
run_process q-svc$server_index "$NEUTRON_BIN_DIR/neutron-server --config-file $NEUTRON_CONF.$server_index --config-file /$Q_PLUGIN_CONF_FILE"
|
|
}
|
|
|
|
# if the plugin is enabled to run, that means the Tricircle is enabled
|
|
# by default, so no need to judge the variable Q_ENABLE_TRICIRCLE
|
|
|
|
if [[ "$1" == "stack" && "$2" == "pre-install" ]]; then
|
|
echo_summary "Tricircle pre-install"
|
|
|
|
# init_local_neutron_variables before installation
|
|
init_local_neutron_variables
|
|
|
|
elif [[ "$1" == "stack" && "$2" == "install" ]]; then
|
|
echo_summary "Installing Tricircle"
|
|
elif [[ "$1" == "stack" && "$2" == "post-config" ]]; then
|
|
|
|
echo_summary "Configuring Tricircle"
|
|
export NEUTRON_CREATE_INITIAL_NETWORKS=False
|
|
sudo install -d -o $STACK_USER -m 755 $TRICIRCLE_CONF_DIR
|
|
|
|
if [[ "$TRICIRCLE_START_SERVICES" == "True" ]]; then
|
|
enable_service t-api t-job
|
|
configure_tricircle_api
|
|
configure_tricircle_xjob
|
|
|
|
if [[ "$TRICIRCLE_DEPLOY_WITH_WSGI" == "True" ]]; then
|
|
configure_tricircle_api_wsgi
|
|
fi
|
|
fi
|
|
|
|
echo export PYTHONPATH=\$PYTHONPATH:$TRICIRCLE_DIR >> $RC_DIR/.localrc.auto
|
|
|
|
setup_package $TRICIRCLE_DIR -e
|
|
|
|
if [[ "$TRICIRCLE_START_SERVICES" == "True" ]]; then
|
|
recreate_database tricircle
|
|
tricircle-db-manage --config-file="$TRICIRCLE_API_CONF" db_sync
|
|
|
|
if is_service_enabled q-svc ; then
|
|
start_central_neutron_server $CENTRAL_REGION_NAME $TRICIRCLE_NEUTRON_PORT
|
|
fi
|
|
fi
|
|
|
|
# update the local neutron.conf after the central Neutron has started
|
|
init_local_neutron_conf
|
|
|
|
# add default bridges br-vlan, br-ext if needed, ovs-vsctl
|
|
# is just being installed before this stage
|
|
add_default_bridges
|
|
|
|
elif [[ "$1" == "stack" && "$2" == "extra" ]]; then
|
|
echo_summary "Initializing Tricircle Service"
|
|
|
|
if [[ ${USE_VENV} = True ]]; then
|
|
PROJECT_VENV["tricircle"]=${TRICIRCLE_DIR}.venv
|
|
TRICIRCLE_BIN_DIR=${PROJECT_VENV["tricircle"]}/bin
|
|
else
|
|
TRICIRCLE_BIN_DIR=$(get_python_exec_prefix)
|
|
fi
|
|
|
|
if is_service_enabled t-api; then
|
|
|
|
create_tricircle_accounts
|
|
|
|
if [[ "$TRICIRCLE_DEPLOY_WITH_WSGI" == "True" ]]; then
|
|
start_tricircle_api_wsgi
|
|
else
|
|
run_process t-api "$TRICIRCLE_BIN_DIR/tricircle-api --config-file $TRICIRCLE_API_CONF"
|
|
fi
|
|
fi
|
|
|
|
if is_service_enabled t-job; then
|
|
run_process t-job "$TRICIRCLE_BIN_DIR/tricircle-xjob --config-file $TRICIRCLE_XJOB_CONF"
|
|
fi
|
|
fi
|
|
|
|
if [[ "$1" == "unstack" ]]; then
|
|
|
|
if is_service_enabled t-api; then
|
|
if [[ "$TRICIRCLE_DEPLOY_WITH_WSGI" == "True" ]]; then
|
|
stop_tricircle_api_wsgi
|
|
clean_tricircle_api_wsgi
|
|
else
|
|
stop_process t-api
|
|
fi
|
|
fi
|
|
|
|
if is_service_enabled t-job; then
|
|
stop_process t-job
|
|
fi
|
|
|
|
if is_service_enabled q-svc0; then
|
|
stop_process q-svc0
|
|
fi
|
|
fi
|