7f2b07007c
Previously, the registry_host parameter was not exposed to the openstack::controller class. This prevented the class from managing the parameter. The new parameter glance_registry_host was added to allow users to manage the IP address used by the Glance API service for communicating with the Glance Registry service. Defaults to '0.0.0.0' for backwards compatibility. Change-Id: Ica07c59ab6ad02a825f67abd6bde5f1043993ac3
630 lines
20 KiB
Ruby
630 lines
20 KiB
Ruby
require 'spec_helper'
|
|
|
|
describe 'openstack::controller' do
|
|
|
|
# minimum set of default parameters
|
|
let :default_params do
|
|
{
|
|
:private_interface => 'eth0',
|
|
:public_interface => 'eth1',
|
|
:internal_address => '127.0.0.1',
|
|
:public_address => '10.0.0.1',
|
|
:admin_email => 'some_user@some_fake_email_address.foo',
|
|
:admin_password => 'ChangeMe',
|
|
:rabbit_password => 'rabbit_pw',
|
|
:rabbit_cluster_nodes => false,
|
|
:rabbit_virtual_host => '/',
|
|
:keystone_db_password => 'keystone_pass',
|
|
:keystone_admin_token => 'keystone_admin_token',
|
|
:glance_registry_host => '0.0.0.0',
|
|
:glance_db_password => 'glance_pass',
|
|
:glance_user_password => 'glance_pass',
|
|
:nova_bind_address => '0.0.0.0',
|
|
:nova_db_password => 'nova_pass',
|
|
:nova_user_password => 'nova_pass',
|
|
:cinder_db_password => 'cinder_pass',
|
|
:cinder_user_password => 'cinder_pass',
|
|
:secret_key => 'secret_key',
|
|
:mysql_root_password => 'sql_pass',
|
|
:quantum => false,
|
|
:vncproxy_host => '10.0.0.1',
|
|
:nova_admin_tenant_name => 'services',
|
|
:nova_admin_user => 'nova',
|
|
:enabled_apis => 'ec2,osapi_compute,metadata',
|
|
}
|
|
end
|
|
|
|
let :facts do
|
|
{
|
|
:operatingsystem => 'Ubuntu',
|
|
:osfamily => 'Debian',
|
|
:operatingsystemrelease => '12.04',
|
|
:puppetversion => '2.7.x',
|
|
:memorysize => '2GB',
|
|
:processorcount => '2',
|
|
:concat_basedir => '/var/lib/puppet/concat',
|
|
}
|
|
end
|
|
|
|
let :params do
|
|
default_params
|
|
end
|
|
|
|
context 'database' do
|
|
|
|
context 'with unsupported db type' do
|
|
|
|
let :params do
|
|
default_params.merge({:db_type => 'sqlite'})
|
|
end
|
|
|
|
it do
|
|
expect { subject }.to raise_error(Puppet::Error)
|
|
end
|
|
|
|
end
|
|
|
|
context 'with default mysql params' do
|
|
|
|
let :params do
|
|
default_params.merge(
|
|
:enabled => true,
|
|
:db_type => 'mysql',
|
|
:quantum => true,
|
|
:metadata_shared_secret => 'secret',
|
|
:bridge_interface => 'eth1',
|
|
:quantum_user_password => 'q_pass',
|
|
:quantum_db_password => 'q_db_pass',
|
|
:cinder => true
|
|
)
|
|
end
|
|
|
|
it 'should configure mysql server' do
|
|
param_value(subject, 'class', 'mysql::server', 'enabled').should be_true
|
|
config_hash = param_value(subject, 'class', 'mysql::server', 'config_hash')
|
|
config_hash['bind_address'].should == '0.0.0.0'
|
|
config_hash['root_password'].should == 'sql_pass'
|
|
end
|
|
|
|
it 'should contain openstack db config' do
|
|
should contain_class('keystone::db::mysql').with(
|
|
:user => 'keystone',
|
|
:password => 'keystone_pass',
|
|
:dbname => 'keystone',
|
|
:allowed_hosts => '%'
|
|
)
|
|
should contain_class('glance::db::mysql').with(
|
|
:user => 'glance',
|
|
:password => 'glance_pass',
|
|
:dbname => 'glance',
|
|
:allowed_hosts => '%'
|
|
)
|
|
should contain_class('nova::db::mysql').with(
|
|
:user => 'nova',
|
|
:password => 'nova_pass',
|
|
:dbname => 'nova',
|
|
:allowed_hosts => '%'
|
|
)
|
|
should contain_class('cinder::db::mysql').with(
|
|
:user => 'cinder',
|
|
:password => 'cinder_pass',
|
|
:dbname => 'cinder',
|
|
:allowed_hosts => '%'
|
|
)
|
|
should contain_class('quantum::db::mysql').with(
|
|
:user => 'quantum',
|
|
:password => 'q_db_pass',
|
|
:dbname => 'quantum',
|
|
:allowed_hosts => '%'
|
|
)
|
|
end
|
|
|
|
|
|
it { should contain_class('mysql::server::account_security')}
|
|
|
|
end
|
|
|
|
context 'when cinder and quantum are false' do
|
|
|
|
let :params do
|
|
default_params.merge(
|
|
:quantum => false,
|
|
:cinder => false
|
|
)
|
|
end
|
|
it do
|
|
should_not contain_class('quantum::db::mysql')
|
|
should_not contain_class('cinder::db::mysql')
|
|
end
|
|
|
|
end
|
|
|
|
context 'when not enabled' do
|
|
|
|
let :params do
|
|
default_params.merge(
|
|
{:enabled => false}
|
|
)
|
|
end
|
|
|
|
it 'should configure mysql server' do
|
|
param_value(subject, 'class', 'mysql::server', 'enabled').should be_false
|
|
config_hash = param_value(subject, 'class', 'mysql::server', 'config_hash')
|
|
config_hash['bind_address'].should == '0.0.0.0'
|
|
config_hash['root_password'].should == 'sql_pass'
|
|
end
|
|
|
|
['keystone', 'nova', 'glance', 'cinder', 'quantum'].each do |x|
|
|
it { should_not contain_class("#{x}::db::mysql") }
|
|
end
|
|
end
|
|
|
|
context 'when account secutiry is not enabled' do
|
|
let :params do
|
|
default_params.merge(
|
|
{:mysql_account_security => false}
|
|
)
|
|
end
|
|
|
|
it { should_not contain_class('mysql::server::account_security')}
|
|
end
|
|
|
|
end
|
|
|
|
context 'keystone' do
|
|
|
|
context 'with default params' do
|
|
|
|
let :params do
|
|
default_params
|
|
end
|
|
|
|
it 'should configure default keystone configuration' do
|
|
|
|
should contain_class('openstack::keystone').with(
|
|
:swift => false,
|
|
:swift_user_password => false,
|
|
:swift_public_address => false
|
|
)
|
|
|
|
should contain_class('keystone').with(
|
|
:verbose => false,
|
|
:debug => false,
|
|
:catalog_type => 'sql',
|
|
:enabled => true,
|
|
:admin_token => 'keystone_admin_token',
|
|
:sql_connection => "mysql://keystone:keystone_pass@127.0.0.1/keystone"
|
|
)
|
|
|
|
should contain_class('keystone::roles::admin').with(
|
|
:email => 'some_user@some_fake_email_address.foo',
|
|
:password => 'ChangeMe',
|
|
:admin_tenant => 'admin'
|
|
)
|
|
should contain_class('keystone::endpoint').with(
|
|
:public_address => '10.0.0.1',
|
|
:internal_address => '127.0.0.1',
|
|
:admin_address => '127.0.0.1',
|
|
:region => 'RegionOne'
|
|
)
|
|
{
|
|
'nova' => 'nova_pass',
|
|
'cinder' => 'cinder_pass',
|
|
'glance' => 'glance_pass'
|
|
|
|
}.each do |type, pw|
|
|
should contain_class("#{type}::keystone::auth").with(
|
|
:password => pw,
|
|
:public_address => '10.0.0.1',
|
|
:internal_address => '10.0.0.1',
|
|
:admin_address => '10.0.0.1',
|
|
:region => 'RegionOne'
|
|
)
|
|
end
|
|
end
|
|
context 'when configuring swift' do
|
|
before :each do
|
|
params.merge!(
|
|
:swift => true,
|
|
:swift_user_password => 'foo',
|
|
:swift_public_address => '10.0.0.2'
|
|
)
|
|
end
|
|
it 'should configure swift auth in keystone' do
|
|
should contain_class('openstack::keystone').with(
|
|
:swift => true,
|
|
:swift_user_password => 'foo',
|
|
:swift_public_address => '10.0.0.2'
|
|
)
|
|
end
|
|
end
|
|
end
|
|
context 'when not enabled' do
|
|
|
|
let :params do
|
|
default_params.merge(:enabled => false)
|
|
end
|
|
|
|
it 'should not configure endpoints' do
|
|
should contain_class('keystone').with(:enabled => false)
|
|
should_not contain_class('keystone::roles::admin')
|
|
should_not contain_class('keystone::endpoint')
|
|
should_not contain_class('glance::keystone::auth')
|
|
should_not contain_class('nova::keystone::auth')
|
|
end
|
|
end
|
|
end
|
|
|
|
it do
|
|
should contain_class('memcached').with(
|
|
:listen_ip => '127.0.0.1'
|
|
)
|
|
end
|
|
|
|
|
|
|
|
context 'config for glance' do
|
|
|
|
context 'when enabled' do
|
|
it 'should contain enabled glance with defaults' do
|
|
|
|
should contain_class('glance::api').with(
|
|
:verbose => false,
|
|
:debug => false,
|
|
:auth_type => 'keystone',
|
|
:auth_host => '127.0.0.1',
|
|
:auth_port => '35357',
|
|
:keystone_tenant => 'services',
|
|
:keystone_user => 'glance',
|
|
:keystone_password => 'glance_pass',
|
|
:registry_host => '0.0.0.0',
|
|
:sql_connection => 'mysql://glance:glance_pass@127.0.0.1/glance',
|
|
:enabled => true
|
|
)
|
|
|
|
should contain_class('glance::registry').with(
|
|
:verbose => false,
|
|
:debug => false,
|
|
:auth_type => 'keystone',
|
|
:auth_host => '127.0.0.1',
|
|
:auth_port => '35357',
|
|
:keystone_tenant => 'services',
|
|
:keystone_user => 'glance',
|
|
:keystone_password => 'glance_pass',
|
|
:sql_connection => "mysql://glance:glance_pass@127.0.0.1/glance",
|
|
:enabled => true
|
|
)
|
|
|
|
should contain_class('glance::backend::file')
|
|
end
|
|
end
|
|
context 'when not enabled' do
|
|
|
|
let :params do
|
|
default_params.merge(:enabled => false)
|
|
end
|
|
|
|
it 'should disable glance services' do
|
|
should contain_class('glance::api').with(
|
|
:enabled => false
|
|
)
|
|
|
|
should contain_class('glance::registry').with(
|
|
:enabled => false
|
|
)
|
|
end
|
|
end
|
|
context 'when params are overridden' do
|
|
|
|
let :params do
|
|
default_params.merge(
|
|
:verbose => false,
|
|
:debug => false,
|
|
:glance_registry_host => '127.0.0.2',
|
|
:glance_user_password => 'glance_pass2',
|
|
:glance_db_password => 'glance_pass3',
|
|
:db_host => '127.0.0.2',
|
|
:sql_idle_timeout => '30',
|
|
:glance_db_user => 'dan',
|
|
:glance_db_dbname => 'name',
|
|
:db_host => '127.0.0.2'
|
|
)
|
|
end
|
|
|
|
it 'should override params for glance' do
|
|
should contain_class('glance::api').with(
|
|
:verbose => false,
|
|
:debug => false,
|
|
:registry_host => '127.0.0.2',
|
|
:auth_type => 'keystone',
|
|
:auth_host => '127.0.0.1',
|
|
:auth_port => '35357',
|
|
:keystone_tenant => 'services',
|
|
:keystone_user => 'glance',
|
|
:keystone_password => 'glance_pass2',
|
|
:sql_connection => 'mysql://dan:glance_pass3@127.0.0.2/name',
|
|
:sql_idle_timeout => '30'
|
|
)
|
|
|
|
should contain_class('glance::registry').with(
|
|
:verbose => false,
|
|
:debug => false,
|
|
:auth_type => 'keystone',
|
|
:auth_host => '127.0.0.1',
|
|
:auth_port => '35357',
|
|
:keystone_tenant => 'services',
|
|
:keystone_user => 'glance',
|
|
:keystone_password => 'glance_pass2',
|
|
:sql_connection => "mysql://dan:glance_pass3@127.0.0.2/name"
|
|
)
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'config for nova' do
|
|
let :facts do
|
|
{
|
|
:operatingsystem => 'Ubuntu',
|
|
:osfamily => 'Debian',
|
|
:operatingsystemrelease => '12.04',
|
|
:puppetversion => '2.7.x',
|
|
:memorysize => '2GB',
|
|
:processorcount => '2',
|
|
:concat_basedir => '/var/lib/puppet/concat',
|
|
}
|
|
end
|
|
|
|
context 'with default params' do
|
|
|
|
it 'should contain enabled nova services' do
|
|
should_not contain_resources('nova_config').with_purge(true)
|
|
should contain_class('nova::rabbitmq').with(
|
|
:userid => 'openstack',
|
|
:password => 'rabbit_pw',
|
|
:cluster_disk_nodes => false,
|
|
:virtual_host => '/',
|
|
:enabled => true
|
|
)
|
|
should contain_class('nova').with(
|
|
:sql_connection => 'mysql://nova:nova_pass@127.0.0.1/nova',
|
|
:rabbit_host => '127.0.0.1',
|
|
:rabbit_hosts => false,
|
|
:rabbit_userid => 'openstack',
|
|
:rabbit_password => 'rabbit_pw',
|
|
:rabbit_virtual_host => '/',
|
|
:image_service => 'nova.image.glance.GlanceImageService',
|
|
:glance_api_servers => '10.0.0.1:9292',
|
|
:debug => false,
|
|
:verbose => false
|
|
)
|
|
should contain_class('nova::api').with(
|
|
:enabled => true,
|
|
:admin_tenant_name => 'services',
|
|
:admin_user => 'nova',
|
|
:admin_password => 'nova_pass',
|
|
:enabled_apis => 'ec2,osapi_compute,metadata',
|
|
:api_bind_address => '0.0.0.0'
|
|
)
|
|
should contain_class('nova::cert').with(:enabled => true)
|
|
should contain_class('nova::consoleauth').with(:enabled => true)
|
|
should contain_class('nova::scheduler').with(:enabled => true)
|
|
should contain_class('nova::objectstore').with(:enabled => true)
|
|
should contain_class('nova::conductor').with(:enabled => true)
|
|
should contain_class('nova::vncproxy').with(
|
|
:enabled => true,
|
|
:host => '10.0.0.1'
|
|
)
|
|
end
|
|
it { should_not contain_nova_config('DEFAULT/auto_assign_floating_ip') }
|
|
end
|
|
context 'when auto assign floating ip is assigned' do
|
|
let :params do
|
|
default_params.merge(:auto_assign_floating_ip => true)
|
|
end
|
|
it { should contain_nova_config('DEFAULT/auto_assign_floating_ip').with(:value => true)}
|
|
end
|
|
context 'when not enabled' do
|
|
let :params do
|
|
default_params.merge(:enabled => false)
|
|
end
|
|
it 'should disable everything' do
|
|
should contain_class('nova::rabbitmq').with(:enabled => false)
|
|
should contain_class('nova::api').with(:enabled => false)
|
|
should contain_class('nova::cert').with(:enabled => false)
|
|
should contain_class('nova::consoleauth').with(:enabled => false)
|
|
should contain_class('nova::scheduler').with(:enabled => false)
|
|
should contain_class('nova::objectstore').with(:enabled => false)
|
|
should contain_class('nova::vncproxy').with(:enabled => false)
|
|
end
|
|
end
|
|
context 'when params are overridden' do
|
|
let :params do
|
|
default_params.merge(
|
|
:sql_idle_timeout => '30'
|
|
)
|
|
end
|
|
it 'should override params for nova' do
|
|
should contain_class('nova').with(
|
|
:sql_idle_timeout => '30'
|
|
)
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'config for horizon' do
|
|
|
|
it 'should contain enabled horizon' do
|
|
should contain_class('horizon').with(
|
|
:secret_key => 'secret_key',
|
|
:cache_server_ip => '127.0.0.1',
|
|
:cache_server_port => '11211',
|
|
:horizon_app_links => false
|
|
)
|
|
end
|
|
|
|
describe 'when horizon is disabled' do
|
|
let :params do
|
|
default_params.merge(:horizon => false)
|
|
end
|
|
it { should_not contain_class('horizon') }
|
|
end
|
|
|
|
end
|
|
|
|
context 'cinder' do
|
|
|
|
context 'when disabled' do
|
|
let :params do
|
|
default_params.merge(:cinder => false)
|
|
end
|
|
it 'should not contain cinder classes' do
|
|
should_not contain_class('cinder')
|
|
should_not contain_class('cinder::api')
|
|
should_not contain_class('cinder:"scheduler')
|
|
end
|
|
end
|
|
|
|
context 'when enabled' do
|
|
let :params do
|
|
default_params
|
|
end
|
|
it 'should configure cinder using defaults' do
|
|
should contain_class('cinder').with(
|
|
:debug => false,
|
|
:verbose => false,
|
|
:sql_connection => 'mysql://cinder:cinder_pass@127.0.0.1/cinder?charset=utf8',
|
|
:rabbit_password => 'rabbit_pw'
|
|
)
|
|
should contain_class('cinder::api').with_keystone_password('cinder_pass')
|
|
should contain_class('cinder::scheduler')
|
|
end
|
|
end
|
|
|
|
context 'when overriding config' do
|
|
let :params do
|
|
default_params.merge(
|
|
:debug => true,
|
|
:verbose => true,
|
|
:rabbit_host => '127.0.0.1',
|
|
:rabbit_hosts => false,
|
|
:rabbit_user => 'rabbituser',
|
|
:rabbit_password => 'rabbit_pw2',
|
|
:cinder_user_password => 'foo',
|
|
:cinder_db_password => 'bar',
|
|
:cinder_db_user => 'baz',
|
|
:cinder_db_dbname => 'blah',
|
|
:sql_idle_timeout => '30',
|
|
:db_host => '127.0.0.2'
|
|
)
|
|
end
|
|
it 'should configure cinder using defaults' do
|
|
should contain_class('cinder').with(
|
|
:debug => true,
|
|
:verbose => true,
|
|
:sql_connection => 'mysql://baz:bar@127.0.0.2/blah?charset=utf8',
|
|
:sql_idle_timeout => '30',
|
|
:rabbit_password => 'rabbit_pw2',
|
|
:rabbit_userid => 'rabbituser'
|
|
)
|
|
should contain_class('cinder::api').with_keystone_password('foo')
|
|
should contain_class('cinder::scheduler')
|
|
end
|
|
end
|
|
|
|
end
|
|
|
|
context 'network config' do
|
|
|
|
context 'when quantum' do
|
|
|
|
let :params do
|
|
default_params.merge({
|
|
:quantum => true,
|
|
:debug => true,
|
|
:verbose => true,
|
|
:sql_idle_timeout => '30',
|
|
:quantum_user_password => 'q_pass',
|
|
:bridge_interface => 'eth_27',
|
|
:internal_address => '10.0.0.3',
|
|
:quantum_db_password => 'q_db_pass',
|
|
:metadata_shared_secret => 'secret'
|
|
})
|
|
end
|
|
|
|
it { should_not contain_class('nova::network') }
|
|
|
|
it 'should configure quantum' do
|
|
|
|
should contain_class('openstack::quantum').with(
|
|
:db_host => '127.0.0.1',
|
|
:sql_idle_timeout => '30',
|
|
:rabbit_host => '127.0.0.1',
|
|
:rabbit_hosts => false,
|
|
:rabbit_user => 'openstack',
|
|
:rabbit_password => 'rabbit_pw',
|
|
:rabbit_virtual_host => '/',
|
|
:tenant_network_type => 'gre',
|
|
:network_vlan_ranges => 'physnet1:1000:2000',
|
|
:ovs_enable_tunneling => true,
|
|
:ovs_local_ip => '10.0.0.3',
|
|
:bridge_uplinks => ["br-ex:eth_27"],
|
|
:bridge_mappings => ["default:br-ex"],
|
|
:enable_ovs_agent => true,
|
|
:firewall_driver => 'quantum.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver',
|
|
:db_name => 'quantum',
|
|
:db_user => 'quantum',
|
|
:db_password => 'q_db_pass',
|
|
:enable_dhcp_agent => true,
|
|
:enable_l3_agent => true,
|
|
:enable_metadata_agent => true,
|
|
:auth_url => 'http://127.0.0.1:35357/v2.0',
|
|
:user_password => 'q_pass',
|
|
:shared_secret => 'secret',
|
|
:keystone_host => '127.0.0.1',
|
|
:enabled => true,
|
|
:enable_server => true,
|
|
:debug => true,
|
|
:verbose => true
|
|
)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
context 'when nova network' do
|
|
|
|
|
|
context 'when multi-host is not set' do
|
|
let :params do
|
|
default_params.merge(:quantum => false, :multi_host => false)
|
|
end
|
|
it {should contain_class('nova::network').with(
|
|
:private_interface => 'eth0',
|
|
:public_interface => 'eth1',
|
|
:fixed_range => '10.0.0.0/24',
|
|
:floating_range => false,
|
|
:network_manager => 'nova.network.manager.FlatDHCPManager',
|
|
:config_overrides => {},
|
|
:create_networks => true,
|
|
:num_networks => 1,
|
|
:enabled => true,
|
|
:install_service => true
|
|
)}
|
|
end
|
|
|
|
context 'when multi-host is set' do
|
|
let :params do
|
|
default_params.merge(:quantum => false, :multi_host => true)
|
|
end
|
|
it { should contain_nova_config('DEFAULT/multi_host').with(:value => true)}
|
|
it {should contain_class('nova::network').with(
|
|
:create_networks => true,
|
|
:enabled => false,
|
|
:install_service => false
|
|
)}
|
|
end
|
|
|
|
end
|
|
end
|
|
end
|