
add openstack::quantum manifest that can be used to configure various quantum roles. updates the fixtures file to use the latest quantum from stackforge. also updates how quantum integrates into the other modules openstack::controller * public and private interface are no longer required * quantum user and db password should not have defaults (but also not be required) * change rabbit user * ovs_local_ip defaults to internal address * add quantum configuration to controller openstack::compute * add quantum_host (b/c it is difference from keystone host) * allow setting service username and tenant * set correct vif driver * user the quantum openstack class * default ovs_local_ip to internal address * change rabbit username to not default to nova (more services are not using it) nova::controller * add metadata and quantum user params * add quantum_md_proxy secret to nova::api * only require public and private interfaces for nova-networks * only configure nova compute components related to quantum Change-Id: I9dc1628fbb493fd93bfd602b1c6e33c01ad46d96
564 lines
18 KiB
Ruby
564 lines
18 KiB
Ruby
require 'spec_helper'
|
|
|
|
describe 'openstack::controller' do
|
|
|
|
# minimum set of default parameters
|
|
let :default_params do
|
|
{
|
|
:private_interface => 'eth0',
|
|
:public_interface => 'eth1',
|
|
:internal_address => '127.0.0.1',
|
|
:public_address => '10.0.0.1',
|
|
:admin_email => 'some_user@some_fake_email_address.foo',
|
|
:admin_password => 'ChangeMe',
|
|
:rabbit_password => 'rabbit_pw',
|
|
:rabbit_virtual_host => '/',
|
|
:keystone_db_password => 'keystone_pass',
|
|
:keystone_admin_token => 'keystone_admin_token',
|
|
:glance_db_password => 'glance_pass',
|
|
:glance_user_password => 'glance_pass',
|
|
:nova_db_password => 'nova_pass',
|
|
:nova_user_password => 'nova_pass',
|
|
:cinder_db_password => 'cinder_pass',
|
|
:cinder_user_password => 'cinder_pass',
|
|
:secret_key => 'secret_key',
|
|
:quantum => false,
|
|
:vncproxy_host => '10.0.0.1',
|
|
:nova_admin_tenant_name => 'services',
|
|
:nova_admin_user => 'nova',
|
|
:enabled_apis => 'ec2,osapi_compute,metadata',
|
|
}
|
|
end
|
|
|
|
let :facts do
|
|
{
|
|
:operatingsystem => 'Ubuntu',
|
|
:osfamily => 'Debian',
|
|
:operatingsystemrelease => '12.04',
|
|
:puppetversion => '2.7.x',
|
|
:memorysize => '2GB',
|
|
:processorcount => '2',
|
|
:concat_basedir => '/var/lib/puppet/concat',
|
|
}
|
|
end
|
|
|
|
let :params do
|
|
default_params
|
|
end
|
|
|
|
context 'database' do
|
|
|
|
context 'with unsupported db type' do
|
|
|
|
let :params do
|
|
default_params.merge({:db_type => 'sqlite'})
|
|
end
|
|
|
|
it do
|
|
expect { subject }.to raise_error(Puppet::Error)
|
|
end
|
|
|
|
end
|
|
|
|
context 'with default mysql params' do
|
|
|
|
let :params do
|
|
default_params.merge(
|
|
:enabled => true,
|
|
:db_type => 'mysql',
|
|
:quantum => true,
|
|
:metadata_shared_secret => 'secret',
|
|
:bridge_interface => 'eth1',
|
|
:quantum_user_password => 'q_pass',
|
|
:quantum_db_password => 'q_db_pass',
|
|
:cinder => true
|
|
)
|
|
end
|
|
|
|
it 'should configure mysql server' do
|
|
param_value(subject, 'class', 'mysql::server', 'enabled').should be_true
|
|
config_hash = param_value(subject, 'class', 'mysql::server', 'config_hash')
|
|
config_hash['bind_address'].should == '0.0.0.0'
|
|
config_hash['root_password'].should == 'sql_pass'
|
|
end
|
|
|
|
it 'should contain openstack db config' do
|
|
should contain_class('keystone::db::mysql').with(
|
|
:user => 'keystone',
|
|
:password => 'keystone_pass',
|
|
:dbname => 'keystone',
|
|
:allowed_hosts => '%'
|
|
)
|
|
should contain_class('glance::db::mysql').with(
|
|
:user => 'glance',
|
|
:password => 'glance_pass',
|
|
:dbname => 'glance',
|
|
:allowed_hosts => '%'
|
|
)
|
|
should contain_class('nova::db::mysql').with(
|
|
:user => 'nova',
|
|
:password => 'nova_pass',
|
|
:dbname => 'nova',
|
|
:allowed_hosts => '%'
|
|
)
|
|
should contain_class('cinder::db::mysql').with(
|
|
:user => 'cinder',
|
|
:password => 'cinder_pass',
|
|
:dbname => 'cinder',
|
|
:allowed_hosts => '%'
|
|
)
|
|
should contain_class('quantum::db::mysql').with(
|
|
:user => 'quantum',
|
|
:password => 'q_db_pass',
|
|
:dbname => 'quantum',
|
|
:allowed_hosts => '%'
|
|
)
|
|
end
|
|
|
|
|
|
it { should contain_class('mysql::server::account_security')}
|
|
|
|
end
|
|
|
|
context 'when cinder and quantum are false' do
|
|
|
|
let :params do
|
|
default_params.merge(
|
|
:quantum => false,
|
|
:cinder => false
|
|
)
|
|
end
|
|
it do
|
|
should_not contain_class('quantum::db::mysql')
|
|
should_not contain_class('cinder::db::mysql')
|
|
end
|
|
|
|
end
|
|
|
|
context 'when not enabled' do
|
|
|
|
let :params do
|
|
default_params.merge(
|
|
{:enabled => false}
|
|
)
|
|
end
|
|
|
|
it 'should configure mysql server' do
|
|
param_value(subject, 'class', 'mysql::server', 'enabled').should be_false
|
|
config_hash = param_value(subject, 'class', 'mysql::server', 'config_hash')
|
|
config_hash['bind_address'].should == '0.0.0.0'
|
|
config_hash['root_password'].should == 'sql_pass'
|
|
end
|
|
|
|
['keystone', 'nova', 'glance', 'cinder', 'quantum'].each do |x|
|
|
it { should_not contain_class("#{x}::db::mysql") }
|
|
end
|
|
end
|
|
|
|
context 'when account secutiry is not enabled' do
|
|
let :params do
|
|
default_params.merge(
|
|
{:mysql_account_security => false}
|
|
)
|
|
end
|
|
|
|
it { should_not contain_class('mysql::server::account_security')}
|
|
end
|
|
|
|
end
|
|
|
|
context 'keystone' do
|
|
|
|
context 'with default params' do
|
|
|
|
let :params do
|
|
default_params
|
|
end
|
|
|
|
it { should contain_class('keystone').with(
|
|
:verbose => 'False',
|
|
:debug => 'False',
|
|
:catalog_type => 'sql',
|
|
:enabled => true,
|
|
:admin_token => 'keystone_admin_token',
|
|
:sql_connection => "mysql://keystone:keystone_pass@127.0.0.1/keystone"
|
|
) }
|
|
|
|
it 'should contain endpoints' do
|
|
should contain_class('keystone::roles::admin').with(
|
|
:email => 'some_user@some_fake_email_address.foo',
|
|
:password => 'ChangeMe',
|
|
:admin_tenant => 'admin'
|
|
)
|
|
should contain_class('keystone::endpoint').with(
|
|
:public_address => '10.0.0.1',
|
|
:internal_address => '127.0.0.1',
|
|
:admin_address => '127.0.0.1',
|
|
:region => 'RegionOne'
|
|
)
|
|
{
|
|
'nova' => 'nova_pass',
|
|
'cinder' => 'cinder_pass',
|
|
'glance' => 'glance_pass'
|
|
|
|
}.each do |type, pw|
|
|
should contain_class("#{type}::keystone::auth").with(
|
|
:password => pw,
|
|
:public_address => '10.0.0.1',
|
|
:internal_address => '10.0.0.1',
|
|
:admin_address => '10.0.0.1',
|
|
:region => 'RegionOne'
|
|
)
|
|
end
|
|
end
|
|
end
|
|
context 'when not enabled' do
|
|
|
|
let :params do
|
|
default_params.merge(:enabled => false)
|
|
end
|
|
|
|
it 'should not configure endpoints' do
|
|
should contain_class('keystone').with(:enabled => false)
|
|
should_not contain_class('keystone::roles::admin')
|
|
should_not contain_class('keystone::endpoint')
|
|
should_not contain_class('glance::keystone::auth')
|
|
should_not contain_class('nova::keystone::auth')
|
|
end
|
|
end
|
|
end
|
|
|
|
it do
|
|
should contain_class('memcached').with(
|
|
:listen_ip => '127.0.0.1'
|
|
)
|
|
end
|
|
|
|
|
|
|
|
context 'config for glance' do
|
|
|
|
context 'when enabled' do
|
|
it 'should contain enabled glance with defaults' do
|
|
|
|
should contain_class('glance::api').with(
|
|
:verbose => 'False',
|
|
:debug => 'False',
|
|
:auth_type => 'keystone',
|
|
:auth_host => '127.0.0.1',
|
|
:auth_port => '35357',
|
|
:keystone_tenant => 'services',
|
|
:keystone_user => 'glance',
|
|
:keystone_password => 'glance_pass',
|
|
:sql_connection => 'mysql://glance:glance_pass@127.0.0.1/glance',
|
|
:enabled => true
|
|
)
|
|
|
|
should contain_class('glance::registry').with(
|
|
:verbose => 'False',
|
|
:debug => 'False',
|
|
:auth_type => 'keystone',
|
|
:auth_host => '127.0.0.1',
|
|
:auth_port => '35357',
|
|
:keystone_tenant => 'services',
|
|
:keystone_user => 'glance',
|
|
:keystone_password => 'glance_pass',
|
|
:sql_connection => "mysql://glance:glance_pass@127.0.0.1/glance",
|
|
:enabled => true
|
|
)
|
|
|
|
should contain_class('glance::backend::file')
|
|
end
|
|
end
|
|
context 'when not enabled' do
|
|
|
|
let :params do
|
|
default_params.merge(:enabled => false)
|
|
end
|
|
|
|
it 'should disable glance services' do
|
|
should contain_class('glance::api').with(
|
|
:enabled => false
|
|
)
|
|
|
|
should contain_class('glance::registry').with(
|
|
:enabled => false
|
|
)
|
|
end
|
|
end
|
|
context 'when params are overridden' do
|
|
|
|
let :params do
|
|
default_params.merge(
|
|
:verbose => 'False',
|
|
:glance_user_password => 'glance_pass2',
|
|
:glance_db_password => 'glance_pass3',
|
|
:db_host => '127.0.0.2',
|
|
:glance_db_user => 'dan',
|
|
:glance_db_dbname => 'name',
|
|
:db_host => '127.0.0.2'
|
|
)
|
|
end
|
|
|
|
it 'should override params for glance' do
|
|
should contain_class('glance::api').with(
|
|
:verbose => 'False',
|
|
:debug => 'False',
|
|
:auth_type => 'keystone',
|
|
:auth_host => '127.0.0.1',
|
|
:auth_port => '35357',
|
|
:keystone_tenant => 'services',
|
|
:keystone_user => 'glance',
|
|
:keystone_password => 'glance_pass2',
|
|
:sql_connection => 'mysql://dan:glance_pass3@127.0.0.2/name'
|
|
)
|
|
|
|
should contain_class('glance::registry').with(
|
|
:verbose => 'False',
|
|
:debug => 'False',
|
|
:auth_type => 'keystone',
|
|
:auth_host => '127.0.0.1',
|
|
:auth_port => '35357',
|
|
:keystone_tenant => 'services',
|
|
:keystone_user => 'glance',
|
|
:keystone_password => 'glance_pass2',
|
|
:sql_connection => "mysql://dan:glance_pass3@127.0.0.2/name"
|
|
)
|
|
end
|
|
end
|
|
end
|
|
|
|
context 'config for nova' do
|
|
let :facts do
|
|
{
|
|
:operatingsystem => 'Ubuntu',
|
|
:osfamily => 'Debian',
|
|
:operatingsystemrelease => '12.04',
|
|
:puppetversion => '2.7.x',
|
|
:memorysize => '2GB',
|
|
:processorcount => '2',
|
|
:concat_basedir => '/var/lib/puppet/concat',
|
|
}
|
|
end
|
|
|
|
context 'with default params' do
|
|
|
|
it 'should contain enabled nova services' do
|
|
should contain_class('nova::rabbitmq').with(
|
|
:userid => 'openstack',
|
|
:password => 'rabbit_pw',
|
|
:virtual_host => '/',
|
|
:enabled => true
|
|
)
|
|
should contain_class('nova').with(
|
|
:sql_connection => 'mysql://nova:nova_pass@127.0.0.1/nova',
|
|
:rabbit_host => '127.0.0.1',
|
|
:rabbit_userid => 'openstack',
|
|
:rabbit_password => 'rabbit_pw',
|
|
:rabbit_virtual_host => '/',
|
|
:image_service => 'nova.image.glance.GlanceImageService',
|
|
:glance_api_servers => '10.0.0.1:9292',
|
|
:verbose => 'False'
|
|
)
|
|
should contain_class('nova::api').with(
|
|
:enabled => true,
|
|
:admin_tenant_name => 'services',
|
|
:admin_user => 'nova',
|
|
:admin_password => 'nova_pass',
|
|
:enabled_apis => 'ec2,osapi_compute,metadata'
|
|
)
|
|
should contain_class('nova::cert').with(:enabled => true)
|
|
should contain_class('nova::consoleauth').with(:enabled => true)
|
|
should contain_class('nova::scheduler').with(:enabled => true)
|
|
should contain_class('nova::objectstore').with(:enabled => true)
|
|
should contain_class('nova::conductor').with(:enabled => true)
|
|
should contain_class('nova::vncproxy').with(
|
|
:enabled => true,
|
|
:host => '10.0.0.1'
|
|
)
|
|
end
|
|
it { should_not contain_nova_config('DEFAULT/auto_assign_floating_ip') }
|
|
end
|
|
context 'when auto assign floating ip is assigned' do
|
|
let :params do
|
|
default_params.merge(:auto_assign_floating_ip => 'true')
|
|
end
|
|
it { should contain_nova_config('DEFAULT/auto_assign_floating_ip').with(:value => 'True')}
|
|
end
|
|
context 'when not enabled' do
|
|
let :params do
|
|
default_params.merge(:enabled => false)
|
|
end
|
|
it 'should disable everything' do
|
|
should contain_class('nova::rabbitmq').with(:enabled => false)
|
|
should contain_class('nova::api').with(:enabled => false)
|
|
should contain_class('nova::cert').with(:enabled => false)
|
|
should contain_class('nova::consoleauth').with(:enabled => false)
|
|
should contain_class('nova::scheduler').with(:enabled => false)
|
|
should contain_class('nova::objectstore').with(:enabled => false)
|
|
should contain_class('nova::vncproxy').with(:enabled => false)
|
|
end
|
|
end
|
|
end
|
|
|
|
|
|
context 'config for horizon' do
|
|
|
|
it 'should contain enabled horizon' do
|
|
should contain_class('horizon').with(
|
|
:secret_key => 'secret_key',
|
|
:cache_server_ip => '127.0.0.1',
|
|
:cache_server_port => '11211',
|
|
:horizon_app_links => false
|
|
)
|
|
end
|
|
|
|
describe 'when horizon is disabled' do
|
|
let :params do
|
|
default_params.merge(:horizon => false)
|
|
end
|
|
it { should_not contain_class('horizon') }
|
|
end
|
|
|
|
end
|
|
|
|
context 'cinder' do
|
|
|
|
context 'when disabled' do
|
|
let :params do
|
|
default_params.merge(:cinder => false)
|
|
end
|
|
it 'should not contain cinder classes' do
|
|
should_not contain_class('cinder')
|
|
should_not contain_class('cinder::api')
|
|
should_not contain_class('cinder:"scheduler')
|
|
end
|
|
end
|
|
|
|
context 'when enabled' do
|
|
let :params do
|
|
default_params
|
|
end
|
|
it 'should configure cinder using defaults' do
|
|
should contain_class('cinder').with(
|
|
:verbose => 'False',
|
|
:sql_connection => 'mysql://cinder:cinder_pass@127.0.0.1/cinder?charset=utf8',
|
|
:rabbit_password => 'rabbit_pw'
|
|
)
|
|
should contain_class('cinder::api').with_keystone_password('cinder_pass')
|
|
should contain_class('cinder::scheduler')
|
|
end
|
|
end
|
|
|
|
context 'when overriding config' do
|
|
let :params do
|
|
default_params.merge(
|
|
:verbose => 'True',
|
|
:rabbit_password => 'rabbit_pw2',
|
|
:cinder_user_password => 'foo',
|
|
:cinder_db_password => 'bar',
|
|
:cinder_db_user => 'baz',
|
|
:cinder_db_dbname => 'blah',
|
|
:db_host => '127.0.0.2'
|
|
)
|
|
end
|
|
it 'should configure cinder using defaults' do
|
|
should contain_class('cinder').with(
|
|
:verbose => 'True',
|
|
:sql_connection => 'mysql://baz:bar@127.0.0.2/blah?charset=utf8',
|
|
:rabbit_password => 'rabbit_pw2'
|
|
)
|
|
should contain_class('cinder::api').with_keystone_password('foo')
|
|
should contain_class('cinder::scheduler')
|
|
end
|
|
end
|
|
|
|
end
|
|
|
|
context 'network config' do
|
|
|
|
context 'when quantum' do
|
|
|
|
let :params do
|
|
default_params.merge({
|
|
:quantum => true,
|
|
:verbose => true,
|
|
:quantum_user_password => 'q_pass',
|
|
:bridge_interface => 'eth_27',
|
|
:internal_address => '10.0.0.3',
|
|
:quantum_db_password => 'q_db_pass',
|
|
:metadata_shared_secret => 'secret'
|
|
})
|
|
end
|
|
|
|
it { should_not contain_class('nova::network') }
|
|
|
|
it 'should configure quantum' do
|
|
|
|
should contain_class('openstack::quantum').with(
|
|
:db_host => '127.0.0.1',
|
|
:rabbit_host => '127.0.0.1',
|
|
:rabbit_user => 'openstack',
|
|
:rabbit_password => 'rabbit_pw',
|
|
:rabbit_virtual_host => '/',
|
|
:ovs_local_ip => '10.0.0.3',
|
|
:bridge_uplinks => ["br-ex:eth_27"],
|
|
:bridge_mappings => ["default:br-ex"],
|
|
:enable_ovs_agent => false,
|
|
:firewall_driver => 'quantum.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver',
|
|
:db_name => 'quantum',
|
|
:db_user => 'quantum',
|
|
:db_password => 'q_db_pass',
|
|
:enable_dhcp_agent => true,
|
|
:enable_l3_agent => true,
|
|
:enable_metadata_agent => true,
|
|
:auth_url => 'http://127.0.0.1:35357/v2.0',
|
|
:user_password => 'q_pass',
|
|
:shared_secret => 'secret',
|
|
:keystone_host => '127.0.0.1',
|
|
:enabled => true,
|
|
:enable_server => true,
|
|
:verbose => true
|
|
)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
context 'when nova network' do
|
|
|
|
|
|
context 'when multi-host is not set' do
|
|
let :params do
|
|
default_params.merge(:quantum => false, :multi_host => false)
|
|
end
|
|
it {should contain_class('nova::network').with(
|
|
:private_interface => 'eth0',
|
|
:public_interface => 'eth1',
|
|
:fixed_range => '10.0.0.0/24',
|
|
:floating_range => false,
|
|
:network_manager => 'nova.network.manager.FlatDHCPManager',
|
|
:config_overrides => {},
|
|
:create_networks => true,
|
|
:num_networks => 1,
|
|
:enabled => true,
|
|
:install_service => true
|
|
)}
|
|
end
|
|
|
|
context 'when multi-host is set' do
|
|
let :params do
|
|
default_params.merge(:quantum => false, :multi_host => true)
|
|
end
|
|
it { should contain_nova_config('DEFAULT/multi_host').with(:value => 'True')}
|
|
it {should contain_class('nova::network').with(
|
|
:create_networks => true,
|
|
:enabled => false,
|
|
:install_service => false
|
|
)}
|
|
end
|
|
|
|
end
|
|
end
|
|
end
|