Delete FreeIPA enroll script
This was used to manually enroll nodes to FreeIPa. It's not used nor supported, so lets delete it. The favored alternative is to use novajoin. Change-Id: I2168e8d52adbae79e12981b2a9971c0c03c22762 Closes-Bug: #1786762
This commit is contained in:
Juan Antonio Osorio Robles
parent
6f538dc820
commit
d055f6195d
@ -1,240 +0,0 @@
|
|||||||
#!/usr/bin/env python
|
|
||||||
# Copyright 2015 Red Hat, Inc.
|
|
||||||
#
|
|
||||||
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
||||||
# not use this file except in compliance with the License. You may obtain
|
|
||||||
# a copy of the License at
|
|
||||||
#
|
|
||||||
# http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
#
|
|
||||||
# Unless required by applicable law or agreed to in writing, software
|
|
||||||
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
||||||
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
||||||
# License for the specific language governing permissions and limitations
|
|
||||||
# under the License.
|
|
||||||
|
|
||||||
"""
|
|
||||||
Generate an environment file to enroll the controller nodes to FreeIPA via the
|
|
||||||
ExtraConfigPre hook.
|
|
||||||
|
|
||||||
Please note that this is only used for testing.
|
|
||||||
"""
|
|
||||||
|
|
||||||
from __future__ import print_function
|
|
||||||
|
|
||||||
import argparse
|
|
||||||
import collections
|
|
||||||
import logging
|
|
||||||
import os
|
|
||||||
from six.moves import input
|
|
||||||
import yaml
|
|
||||||
|
|
||||||
import tripleo_common.constants as tc_constants
|
|
||||||
|
|
||||||
|
|
||||||
logging.basicConfig(level=logging.INFO)
|
|
||||||
LOG = logging.getLogger(__name__)
|
|
||||||
|
|
||||||
|
|
||||||
autogen_warning = """### DO NOT MODIFY THIS FILE
|
|
||||||
### created by the script create_freeipa_enroll_envfile.py
|
|
||||||
|
|
||||||
"""
|
|
||||||
|
|
||||||
|
|
||||||
TEMPLATE_DEFAULT_PATH = os.path.join(
|
|
||||||
tc_constants.DEFAULT_TEMPLATES_PATH,
|
|
||||||
'puppet/extraconfig/tls/freeipa-enroll.yaml')
|
|
||||||
|
|
||||||
|
|
||||||
class TemplateDumper(yaml.SafeDumper):
|
|
||||||
def represent_ordered_dict(self, data):
|
|
||||||
return self.represent_dict(data.items())
|
|
||||||
|
|
||||||
|
|
||||||
TemplateDumper.add_representer(collections.OrderedDict,
|
|
||||||
TemplateDumper.represent_ordered_dict)
|
|
||||||
|
|
||||||
|
|
||||||
def write_env_file(output_file, env_dict):
|
|
||||||
with open(output_file, 'w') as f:
|
|
||||||
f.write(autogen_warning)
|
|
||||||
yaml.dump(env_dict, f, TemplateDumper, width=68,
|
|
||||||
default_flow_style=False)
|
|
||||||
LOG.info("environment file written to %s" % os.path.abspath(output_file))
|
|
||||||
|
|
||||||
|
|
||||||
def get_freeipa_parameter_defaults_dict(password, server, domain,
|
|
||||||
dns_servers, ipa_ip):
|
|
||||||
parameter_defaults = {
|
|
||||||
'FreeIPAOTP': password,
|
|
||||||
'FreeIPAServer': server,
|
|
||||||
'CloudDomain': domain,
|
|
||||||
}
|
|
||||||
if dns_servers:
|
|
||||||
parameter_defaults['DnsServers'] = dns_servers
|
|
||||||
if ipa_ip:
|
|
||||||
parameter_defaults['FreeIPAIPAddress'] = ipa_ip
|
|
||||||
return parameter_defaults
|
|
||||||
|
|
||||||
|
|
||||||
def get_freeipa_resource_registry_dict(stack):
|
|
||||||
resource_registry = {
|
|
||||||
'OS::TripleO::NodeTLSCAData': os.path.abspath(stack)
|
|
||||||
}
|
|
||||||
return resource_registry
|
|
||||||
|
|
||||||
|
|
||||||
def _form_fqdn(name, domain):
|
|
||||||
return "%s.%s" % (name, domain)
|
|
||||||
|
|
||||||
|
|
||||||
def get_cloud_names_parameter_defaults_dict(cloud_name,
|
|
||||||
cloud_name_internal,
|
|
||||||
cloud_name_storage,
|
|
||||||
cloud_name_storage_management,
|
|
||||||
cloud_name_ctlplane,
|
|
||||||
cloud_domain):
|
|
||||||
return {
|
|
||||||
'CloudName': _form_fqdn(cloud_name, cloud_domain),
|
|
||||||
'CloudNameInternal': _form_fqdn(cloud_name_internal, cloud_domain),
|
|
||||||
'CloudNameStorage': _form_fqdn(cloud_name_storage, cloud_domain),
|
|
||||||
'CloudNameStorageManagement': _form_fqdn(cloud_name_storage_management,
|
|
||||||
cloud_domain),
|
|
||||||
'CloudNameCtlplane': _form_fqdn(cloud_name_ctlplane, cloud_domain),
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
def get_freeipa_environment_dict(password, server, domain, dns_servers, ipa_ip,
|
|
||||||
stack, cloud_name, cloud_name_internal,
|
|
||||||
cloud_name_storage,
|
|
||||||
cloud_name_storage_management,
|
|
||||||
cloud_name_ctlplane):
|
|
||||||
enroll_dict = get_freeipa_parameter_defaults_dict(password, server, domain,
|
|
||||||
dns_servers, ipa_ip)
|
|
||||||
names_dict = get_cloud_names_parameter_defaults_dict(
|
|
||||||
cloud_name,
|
|
||||||
cloud_name_internal,
|
|
||||||
cloud_name_storage,
|
|
||||||
cloud_name_storage_management,
|
|
||||||
cloud_name_ctlplane,
|
|
||||||
domain)
|
|
||||||
enroll_dict.update(names_dict)
|
|
||||||
return get_environment_dict(enroll_dict,
|
|
||||||
get_freeipa_resource_registry_dict(stack))
|
|
||||||
|
|
||||||
|
|
||||||
def get_environment_dict(parameter_defaults=None, resource_registry=None):
|
|
||||||
resulting_dict = collections.OrderedDict()
|
|
||||||
if parameter_defaults:
|
|
||||||
resulting_dict['parameter_defaults'] = parameter_defaults
|
|
||||||
if resource_registry:
|
|
||||||
resulting_dict['resource_registry'] = resource_registry
|
|
||||||
return resulting_dict
|
|
||||||
|
|
||||||
|
|
||||||
def _confirm(message):
|
|
||||||
user_input = input(message)
|
|
||||||
return user_input.lower() in ['true', '1', 't', 'y', 'yes']
|
|
||||||
|
|
||||||
|
|
||||||
def _confirmation_if_output_file_exists(output, overwrite):
|
|
||||||
if os.path.isfile(output) and not overwrite:
|
|
||||||
LOG.warning("%s exists in the filesystem." % output)
|
|
||||||
if not _confirm("Do you want to overwrite it? "):
|
|
||||||
raise RuntimeError("%s exists and won't be overwritten." % output)
|
|
||||||
|
|
||||||
|
|
||||||
def _assert_stack_file_exists(stack):
|
|
||||||
if not os.path.isfile(stack):
|
|
||||||
raise IOError("%s file doesn't exist." % stack)
|
|
||||||
|
|
||||||
|
|
||||||
def _assert_not_empty(server, domain):
|
|
||||||
if not server or not domain:
|
|
||||||
raise RuntimeError(
|
|
||||||
"FreeIPA's server and the domain name can't be empty")
|
|
||||||
|
|
||||||
|
|
||||||
def _warn_unmatching_domain(server, domain):
|
|
||||||
if not server.endswith(domain):
|
|
||||||
LOG.warning(("FreeIPA's server domain doesn't seem to match the given "
|
|
||||||
"domain %s ... watch out") % domain)
|
|
||||||
|
|
||||||
|
|
||||||
def _validate_input(args):
|
|
||||||
_confirmation_if_output_file_exists(args.output, args.overwrite)
|
|
||||||
_assert_stack_file_exists(args.stack)
|
|
||||||
_assert_not_empty(args.server, args.domain)
|
|
||||||
_warn_unmatching_domain(args.server, args.domain)
|
|
||||||
|
|
||||||
|
|
||||||
def _get_options():
|
|
||||||
parser = argparse.ArgumentParser(description=__doc__)
|
|
||||||
# Base stack arguments
|
|
||||||
parser.add_argument('-w', '--password', required=True,
|
|
||||||
help='The OTP that will be used for the nodes.')
|
|
||||||
parser.add_argument('-s', '--server', required=True,
|
|
||||||
help="The FreeIPA server's fqdn.")
|
|
||||||
parser.add_argument('-d', '--domain', required=True,
|
|
||||||
help=("The FreeIPA managed domain (must match the "
|
|
||||||
"kerberos realm."))
|
|
||||||
parser.add_argument('-D', '--dns-server', action='append',
|
|
||||||
help=("The DNS server(s) that the overcloud should "
|
|
||||||
"have configured."))
|
|
||||||
parser.add_argument('-i', '--ipa-ip',
|
|
||||||
help="The FreeIPA server's IP address.")
|
|
||||||
parser.add_argument('-S', '--stack',
|
|
||||||
default=TEMPLATE_DEFAULT_PATH,
|
|
||||||
help=("stack template that will be used if not "
|
|
||||||
"default."))
|
|
||||||
parser.add_argument('-o', '--output',
|
|
||||||
default='freeipa-enroll.yaml',
|
|
||||||
help=('file that the freeipa-related environment will '
|
|
||||||
'be written to.'))
|
|
||||||
|
|
||||||
# Cloud name environment arguments
|
|
||||||
parser.add_argument('--cloud-name',
|
|
||||||
default='overcloud',
|
|
||||||
help=("The shortname for the overcloud (the domain "
|
|
||||||
"will be appended to this)."))
|
|
||||||
parser.add_argument('--cloud-name-internal',
|
|
||||||
default='overcloud.internalapi',
|
|
||||||
help=("The shortname name of the overcloud's internal "
|
|
||||||
"API endpoint (the domain will be appended to "
|
|
||||||
"this)."))
|
|
||||||
parser.add_argument('--cloud-name-storage',
|
|
||||||
default='overcloud.storage',
|
|
||||||
help=("The shortname name of the overcloud's storage "
|
|
||||||
"endpoint (the domain will be appended to "
|
|
||||||
"this)."))
|
|
||||||
parser.add_argument('--cloud-name-storage-management',
|
|
||||||
default='overcloud.storagemgmt',
|
|
||||||
help=("The shortname name of the overcloud's storage "
|
|
||||||
" management endpoint (the domain will be "
|
|
||||||
"appended to this)."))
|
|
||||||
parser.add_argument('--cloud-name-ctlplane',
|
|
||||||
default='overcloud.ctlplane',
|
|
||||||
help=("The shortname name of the overcloud's "
|
|
||||||
"ctlplane endpoint (the domain will be "
|
|
||||||
"appended to this)."))
|
|
||||||
|
|
||||||
# Extra
|
|
||||||
parser.add_argument('--overwrite', action='store_true',
|
|
||||||
help='overwrite the output file if it already exists.')
|
|
||||||
return parser.parse_args()
|
|
||||||
|
|
||||||
|
|
||||||
def main():
|
|
||||||
args = _get_options()
|
|
||||||
_validate_input(args)
|
|
||||||
enroll_dict = get_freeipa_environment_dict(
|
|
||||||
args.password, args.server, args.domain, args.dns_server, args.ipa_ip,
|
|
||||||
args.stack, args.cloud_name, args.cloud_name_internal,
|
|
||||||
args.cloud_name_storage, args.cloud_name_storage_management,
|
|
||||||
args.cloud_name_ctlplane)
|
|
||||||
write_env_file(args.output, enroll_dict)
|
|
||||||
|
|
||||||
|
|
||||||
if __name__ == '__main__':
|
|
||||||
main()
|
|
||||||
@ -26,7 +26,6 @@ scripts =
|
|||||||
scripts/bootstrap_host_exec
|
scripts/bootstrap_host_exec
|
||||||
scripts/bootstrap_host_only_eval
|
scripts/bootstrap_host_only_eval
|
||||||
scripts/bootstrap_host_only_exec
|
scripts/bootstrap_host_only_exec
|
||||||
scripts/create_freeipa_enroll_envfile.py
|
|
||||||
scripts/pull-puppet-modules
|
scripts/pull-puppet-modules
|
||||||
scripts/run-validation
|
scripts/run-validation
|
||||||
scripts/tripleo-build-images
|
scripts/tripleo-build-images
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user