/
provision.py
2129 lines (1932 loc) · 88.9 KB
/
provision.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
import os
import string
import textwrap
import json
import socket
from time import sleep
from fabric.contrib.files import exists
from fabfile.config import *
from fabfile.utils.fabos import *
from fabfile.utils.host import *
from fabfile.utils.interface import *
from fabfile.utils.multitenancy import *
from fabfile.utils.migration import *
from fabfile.utils.storage import *
from fabfile.utils.analytics import *
from fabfile.utils.config import get_value
from fabfile.tasks.install import *
from fabfile.tasks.verify import *
from fabfile.tasks.helpers import *
from fabfile.utils.vcenter import *
from fabfile.utils.commandline import *
from fabfile.tasks.tester import setup_test_env
from fabfile.tasks.rabbitmq import setup_rabbitmq_cluster
from fabfile.tasks.vmware import provision_vcenter, provision_dvs_fab,\
configure_esxi_network, create_esxi_compute_vm
from fabfile.utils.cluster import get_vgw_details, get_orchestrator,\
get_vmware_details, get_tsn_nodes, get_toragent_nodes,\
get_esxi_vms_and_hosts
from fabfile.tasks.esxi_defaults import apply_esxi_defaults
FAB_UTILS_DIR = '/opt/contrail/utils/fabfile/utils/'
@task
@EXECUTE_TASK
@roles('all')
def bash_autocomplete_systemd():
host = env.host_string
output = sudo('uname -a')
if 'xen' in output or 'el6' in output or 'ubuntu' in output:
pass
else:
#Assume Fedora
sudo("echo 'source /etc/bash_completion.d/systemd-bash-completion.sh' >> ~/.bashrc")
@roles('cfgm')
@task
def setup_cfgm():
"""Provisions config services in all nodes defined in cfgm role."""
if env.roledefs['cfgm']:
execute("setup_cfgm_node", env.host_string)
def fixup_restart_haproxy_in_all_cfgm(nworkers):
template = string.Template("""
#contrail-config-marker-start
global
tune.maxrewrite 1024
listen contrail-config-stats :5937
mode http
stats enable
stats uri /
stats auth $__contrail_hap_user__:$__contrail_hap_passwd__
frontend quantum-server *:9696
default_backend quantum-server-backend
frontend contrail-api *:8082
default_backend contrail-api-backend
timeout client 3m
frontend contrail-discovery *:5998
default_backend contrail-discovery-backend
backend quantum-server-backend
option nolinger
balance roundrobin
$__contrail_quantum_servers__
#server 10.84.14.2 10.84.14.2:9697 check
backend contrail-api-backend
option nolinger
timeout server 3m
balance roundrobin
$__contrail_api_backend_servers__
#server 10.84.14.2 10.84.14.2:9100 check
#server 10.84.14.2 10.84.14.2:9101 check
backend contrail-discovery-backend
option nolinger
balance roundrobin
$__contrail_disc_backend_servers__
#server 10.84.14.2 10.84.14.2:9110 check
#server 10.84.14.2 10.84.14.2:9111 check
$__tor_agent_ha_config__
$__rabbitmq_config__
#contrail-config-marker-end
""")
q_listen_port = 9697
q_server_lines = ''
api_listen_port = 9100
api_server_lines = ''
disc_listen_port = 9110
disc_server_lines = ''
tor_agent_ha_config = ''
rabbitmq_config = """
listen rabbitmq 0.0.0.0:5673
mode tcp
maxconn 10000
balance roundrobin
option tcpka
option redispatch
timeout client 48h
timeout server 48h\n"""
space = ' ' * 3
for host_string in env.roledefs['cfgm']:
server_index = env.roledefs['cfgm'].index(host_string) + 1
host_ip = hstr_to_ip(get_control_host_string(host_string))
q_server_lines = q_server_lines + \
' server %s %s:%s check inter 2000 rise 2 fall 3\n' \
%(host_ip, host_ip, str(q_listen_port))
for i in range(nworkers):
api_server_lines = api_server_lines + \
' server %s %s:%s check inter 2000 rise 2 fall 3\n' \
%(host_ip, host_ip, str(api_listen_port + i))
disc_server_lines = disc_server_lines + \
' server %s %s:%s check inter 2000 rise 2 fall 3\n' \
%(host_ip, host_ip, str(disc_listen_port + i))
rabbitmq_config +=\
'%s server rabbit%s %s:5672 check inter 2000 rise 2 fall 3 weight 1 maxconn 500\n'\
% (space, server_index, host_ip)
if get_contrail_internal_vip() == get_openstack_internal_vip():
# Openstack and cfgm are same nodes.
# Dont add rabbitmq confing twice in haproxy, as setup_ha has added already.
rabbitmq_config = ''
# create TOR agent configuration for the HA proxy
if 'toragent' in env.roledefs.keys() and 'tor_agent' in env.keys():
tor_agent_ha_config = get_all_tor_agent_haproxy_config(env.roledefs['toragent'])
for host_string in env.roledefs['cfgm']:
haproxy_config = template.safe_substitute({
'__contrail_quantum_servers__': q_server_lines,
'__contrail_api_backend_servers__': api_server_lines,
'__contrail_disc_backend_servers__': disc_server_lines,
'__contrail_hap_user__': 'haproxy',
'__contrail_hap_passwd__': 'contrail123',
'__rabbitmq_config__': rabbitmq_config,
'__tor_agent_ha_config__': tor_agent_ha_config,
})
with settings(host_string=host_string):
# chop old settings including pesky default from pkg...
tmp_fname = "/tmp/haproxy-%s-config" %(host_string)
get_as_sudo("/etc/haproxy/haproxy.cfg", tmp_fname)
with settings(warn_only=True):
local("sed -i -e '/^#contrail-config-marker-start/,/^#contrail-config-marker-end/d' %s" %(tmp_fname))
local("sed -i -e 's/frontend\s*main\s*\*:5000/frontend main *:5001/' %s" %(tmp_fname))
local("sed -i -e 's/ssl-relay 0.0.0.0:8443/ssl-relay 0.0.0.0:5002/' %s" %(tmp_fname))
# ...generate new ones
cfg_file = open(tmp_fname, 'a')
cfg_file.write(haproxy_config)
cfg_file.close()
put(tmp_fname, "/etc/haproxy/haproxy.cfg", use_sudo=True)
local("rm %s" %(tmp_fname))
# haproxy enable
with settings(host_string=host_string, warn_only=True):
sudo("chkconfig haproxy on")
sudo("service haproxy restart")
# end fixup_restart_haproxy_in_all_cfgm
# Get HA proxy configuration for a TOR agent
def get_tor_agent_haproxy_config(proxy_name, proxy_port, ip1, port1, ip2, port2):
tor_agent_ha_config = '\n'
tor_agent_ha_config = tor_agent_ha_config + 'listen %s :%s\n' %(proxy_name, str(proxy_port))
tor_agent_ha_config = tor_agent_ha_config + ' mode tcp\n'
tor_agent_ha_config = tor_agent_ha_config + ' server %s %s:%s\n' %(ip1, ip1, str(port1))
tor_agent_ha_config = tor_agent_ha_config + ' server %s %s:%s\n' %(ip2, ip2, str(port2))
tor_agent_ha_config = tor_agent_ha_config + '\n'
return tor_agent_ha_config
#end get_tor_agent_haproxy_config
# Get HA proxy configuration for all TOR agents
def get_all_tor_agent_haproxy_config(*args):
tor_agent_ha_config = ''
for host_list in args:
for host_string in host_list:
with settings(host_string=host_string):
toragent_dict = getattr(env, 'tor_agent', None)
for i in range(len(toragent_dict[host_string])):
if 'standby_tor_agent_ip' in toragent_dict[host_string][i] and \
'standby_tor_agent_tor_ovs_port' in toragent_dict[host_string][i]:
proxy_name = 'contrail-tor-agent-' + toragent_dict[host_string][i]['tor_id']
ip1=hstr_to_ip(get_control_host_string(host_string))
port1 = int(toragent_dict[host_string][i]['tor_ovs_port'])
ip2 = toragent_dict[host_string][i]['standby_tor_agent_ip']
port2 = int(toragent_dict[host_string][i]['standby_tor_agent_tor_ovs_port'])
tor_agent_ha_config = tor_agent_ha_config + get_tor_agent_haproxy_config(proxy_name, port1, ip1, port1, ip2, port2)
return tor_agent_ha_config
#end get_all_tor_agent_haproxy_config
@roles('cfgm')
@task
def setup_haproxy_config():
"""Provisions HA proxy service in all nodes defined in cfgm role."""
if env.roledefs['cfgm']:
execute("setup_haproxy_config_node", env.host_string)
@task
def setup_haproxy_config_node(*args):
"""Provisions HA proxy service in one or list of nodes."""
nworkers = 1
fixup_restart_haproxy_in_all_cfgm(nworkers)
#end setup_haproxy_node
def fixup_restart_haproxy_in_one_compute(compute_host_string):
compute_haproxy_template = string.Template("""
#contrail-compute-marker-start
listen contrail-compute-stats :5938
mode http
stats enable
stats uri /
stats auth $__contrail_hap_user__:$__contrail_hap_passwd__
$__contrail_disc_stanza__
$__contrail_quantum_stanza__
$__contrail_qpid_stanza__
$__contrail_glance_api_stanza__
#contrail-compute-marker-end
""")
ds_stanza_template = string.Template("""
$__contrail_disc_frontend__
backend discovery-server-backend
balance roundrobin
$__contrail_disc_servers__
#server 10.84.14.2 10.84.14.2:5998 check
""")
q_stanza_template = string.Template("""
$__contrail_quantum_frontend__
backend quantum-server-backend
balance roundrobin
$__contrail_quantum_servers__
#server 10.84.14.2 10.84.14.2:9696 check
""")
g_api_stanza_template = string.Template("""
$__contrail_glance_api_frontend__
backend glance-api-backend
balance roundrobin
$__contrail_glance_apis__
#server 10.84.14.2 10.84.14.2:9292 check
""")
ds_frontend = textwrap.dedent("""\
frontend discovery-server 127.0.0.1:5998
default_backend discovery-server-backend
""")
q_frontend = textwrap.dedent("""\
frontend quantum-server 127.0.0.1:9696
default_backend quantum-server-backend
""")
g_api_frontend = textwrap.dedent("""\
frontend glance-api 127.0.0.1:9292
default_backend glance-api-backend
""")
haproxy_config = ''
# if this compute is also config, skip quantum and discovery
# stanza as they would have been generated in config context
ds_stanza = ''
q_stanza = ''
if compute_host_string not in env.roledefs['cfgm']:
# generate discovery service stanza
ds_server_lines = ''
for config_host_string in env.roledefs['cfgm']:
host_ip = hstr_to_ip(config_host_string)
ds_server_lines = ds_server_lines + \
' server %s %s:5998 check\n' %(host_ip, host_ip)
ds_stanza = ds_stanza_template.safe_substitute({
'__contrail_disc_frontend__': ds_frontend,
'__contrail_disc_servers__': ds_server_lines,
})
# generate quantum stanza
q_server_lines = ''
for config_host_string in env.roledefs['cfgm']:
host_ip = hstr_to_ip(config_host_string)
q_server_lines = q_server_lines + \
' server %s %s:9696 check\n' %(host_ip, host_ip)
q_stanza = q_stanza_template.safe_substitute({
'__contrail_quantum_frontend__': q_frontend,
'__contrail_quantum_servers__': q_server_lines,
})
# if this compute is also openstack, skip glance-api stanza
# as that would have been generated in openstack context
g_api_stanza = ''
if compute_host_string not in env.roledefs['openstack']:
# generate a glance-api stanza
g_api_server_lines = ''
for openstack_host_string in env.roledefs['openstack']:
host_ip = hstr_to_ip(openstack_host_string)
g_api_server_lines = g_api_server_lines + \
' server %s %s:9292 check\n' %(host_ip, host_ip)
g_api_stanza = g_api_stanza_template.safe_substitute({
'__contrail_glance_api_frontend__': g_api_frontend,
'__contrail_glance_apis__': g_api_server_lines,
})
# HACK: for now only one openstack
break
with settings(host_string=compute_host_string):
# chop old settings including pesky default from pkg...
tmp_fname = "/tmp/haproxy-%s-compute" %(compute_host_string)
get_as_sudo("/etc/haproxy/haproxy.cfg", tmp_fname)
with settings(warn_only=True):
local("sed -i -e '/^#contrail-compute-marker-start/,/^#contrail-compute-marker-end/d' %s"\
%(tmp_fname))
local("sed -i -e 's/*:5000/*:5001/' %s" %(tmp_fname))
local("sed -i -e 's/ssl-relay 0.0.0.0:8443/ssl-relay 0.0.0.0:5002/' %s" %(tmp_fname))
# ...generate new ones
compute_haproxy = compute_haproxy_template.safe_substitute({
'__contrail_hap_user__': 'haproxy',
'__contrail_hap_passwd__': 'contrail123',
'__contrail_disc_stanza__': ds_stanza,
'__contrail_quantum_stanza__': q_stanza,
'__contrail_glance_api_stanza__': g_api_stanza,
'__contrail_qpid_stanza__': '',
})
cfg_file = open(tmp_fname, 'a')
cfg_file.write(compute_haproxy)
cfg_file.close()
put(tmp_fname, "/etc/haproxy/haproxy.cfg", use_sudo=True)
local("rm %s" %(tmp_fname))
# enable
with settings(host_string=compute_host_string, warn_only=True):
sudo("chkconfig haproxy on")
sudo("service haproxy restart")
# end fixup_restart_haproxy_in_one_compute
def fixup_restart_haproxy_in_all_compute():
for compute_host_string in env.roledefs['compute']:
fixup_restart_haproxy_in_one_compute(compute_host_string)
# end fixup_restart_haproxy_in_all_compute
def fixup_restart_haproxy_in_all_openstack():
openstack_haproxy_template = string.Template("""
#contrail-openstack-marker-start
listen contrail-openstack-stats :5936
mode http
stats enable
stats uri /
stats auth $__contrail_hap_user__:$__contrail_hap_passwd__
$__contrail_quantum_stanza__
#contrail-openstack-marker-end
""")
q_stanza_template = string.Template("""
$__contrail_quantum_frontend__
backend quantum-server-backend
balance roundrobin
$__contrail_quantum_servers__
#server 10.84.14.2 10.84.14.2:9696 check
""")
q_frontend = textwrap.dedent("""\
frontend quantum-server 127.0.0.1:9696
default_backend quantum-server-backend
""")
# for all openstack, set appropriate haproxy stanzas
for openstack_host_string in env.roledefs['openstack']:
haproxy_config = ''
# if this openstack is also config, skip quantum stanza
# as that would have been generated in config context
q_stanza = ''
if openstack_host_string not in env.roledefs['cfgm']:
# generate a quantum stanza
q_server_lines = ''
for config_host_string in env.roledefs['cfgm']:
host_ip = hstr_to_ip(config_host_string)
q_server_lines = q_server_lines + \
' server %s %s:9696 check\n' %(host_ip, host_ip)
q_stanza = q_stanza_template.safe_substitute({
'__contrail_quantum_frontend__': q_frontend,
'__contrail_quantum_servers__': q_server_lines,
})
with settings(host_string=openstack_host_string):
# chop old settings including pesky default from pkg...
tmp_fname = "/tmp/haproxy-%s-openstack" %(openstack_host_string)
get_as_sudo("/etc/haproxy/haproxy.cfg", tmp_fname)
with settings(warn_only=True):
local("sed -i -e '/^#contrail-openstack-marker-start/,/^#contrail-openstack-marker-end/d' %s"\
%(tmp_fname))
local("sed -i -e 's/*:5000/*:5001/' %s" %(tmp_fname))
local("sed -i -e 's/ssl-relay 0.0.0.0:8443/ssl-relay 0.0.0.0:5002/' %s" %(tmp_fname))
# ...generate new ones
openstack_haproxy = openstack_haproxy_template.safe_substitute({
'__contrail_hap_user__': 'haproxy',
'__contrail_hap_passwd__': 'contrail123',
'__contrail_quantum_stanza__': q_stanza,
})
cfg_file = open(tmp_fname, 'a')
cfg_file.write(openstack_haproxy)
cfg_file.close()
put(tmp_fname, "/etc/haproxy/haproxy.cfg", use_sudo=True)
local("rm %s" %(tmp_fname))
# enable
with settings(host_string=openstack_host_string, warn_only=True):
sudo("chkconfig haproxy on")
sudo("service haproxy restart")
# end fixup_restart_haproxy_in_all_openstack
@task
def setup_cfgm_node(*args):
"""Provisions config services in one or list of nodes. USAGE: fab setup_cfgm_node:user@1.1.1.1,user@2.2.2.2"""
for host_string in args:
# Enable settings for Ubuntu
with settings(host_string=host_string):
enable_haproxy()
nworkers = 1
fixup_restart_haproxy_in_all_cfgm(nworkers)
for host_string in args:
with settings(host_string=host_string):
if detect_ostype() == 'ubuntu':
with settings(warn_only=True):
sudo('rm /etc/init/supervisor-config.override')
sudo('rm /etc/init/neutron-server.override')
# Frame the command line to provision config node
cmd = frame_vnc_config_cmd(host_string)
# Execute the provision config script
with cd(INSTALLER_DIR):
sudo(cmd)
orch = get_orchestrator()
if orch == 'vcenter':
# Frame the command to provision vcenter-plugin
vcenter_info = getattr(env, 'vcenter', None)
if not vcenter_info:
print 'Error: vcenter block is not defined in testbed file.Exiting'
return
cassandra_ip_list = [hstr_to_ip(get_control_host_string(\
cassandra_host)) for cassandra_host in env.roledefs['database']]
cfgm_ip = get_contrail_internal_vip() or\
hstr_to_ip(get_control_host_string(env.roledefs['cfgm'][0]))
cmd = "setup-vcenter-plugin"
cmd += " --vcenter_url %s" % vcenter_info['server']
cmd += " --vcenter_username %s" % vcenter_info['username']
cmd += " --vcenter_password %s" % vcenter_info['password']
cmd += " --vcenter_datacenter %s" % vcenter_info['datacenter']
cmd += " --vcenter_dvswitch %s" % vcenter_info['dv_switch']['dv_switch_name']
cmd += " --api_hostname %s" % cfgm_ip
cmd += " --api_port 8082"
zk_servers_ports = ','.join(['%s:2181' %(s) for s in cassandra_ip_list])
cmd += " --zookeeper_serverlist %s" % zk_servers_ports
# Execute the provision vcenter-plugin script
with cd(INSTALLER_DIR):
sudo(cmd)
# HAPROXY fixups
haproxy = get_haproxy_opt()
if haproxy:
fixup_restart_haproxy_in_all_compute()
fixup_restart_haproxy_in_all_openstack()
#end setup_cfgm_node
def fixup_ceilometer_conf_common():
conf_file = '/etc/ceilometer/ceilometer.conf'
amqp_server_ip = get_openstack_amqp_server()
sudo("openstack-config --set %s DEFAULT rabbit_host %s" % (conf_file, amqp_server_ip))
value = "/var/log/ceilometer"
sudo("openstack-config --set %s DEFAULT log_dir %s" % (conf_file, value))
value = "a74ca26452848001921c"
openstack_sku = get_openstack_sku()
if openstack_sku == 'havana':
sudo("openstack-config --set %s DEFAULT metering_secret %s" % (conf_file, value))
else:
sudo("openstack-config --set %s publisher metering_secret %s" % (conf_file, value))
sudo("openstack-config --set %s DEFAULT auth_strategy keystone" % conf_file)
#end fixup_ceilometer_conf_common
def fixup_ceilometer_conf_keystone(openstack_ip):
conf_file = '/etc/ceilometer/ceilometer.conf'
with settings(warn_only=True):
authtoken_config = sudo("grep '^auth_host =' /etc/ceilometer/ceilometer.conf").succeeded
if not authtoken_config:
config_cmd = "openstack-config --set %s keystone_authtoken" % conf_file
sudo("%s admin_password CEILOMETER_PASS" % config_cmd)
sudo("%s admin_user ceilometer" % config_cmd)
sudo("%s admin_tenant_name service" % config_cmd)
sudo("%s auth_uri http://%s:5000" % (config_cmd, openstack_ip))
sudo("%s auth_protocol http" % config_cmd)
sudo("%s auth_port 35357" % config_cmd)
sudo("%s auth_host %s" % (config_cmd, openstack_ip))
config_cmd = "openstack-config --set %s service_credentials" % conf_file
sudo("%s os_password CEILOMETER_PASS" % config_cmd)
sudo("%s os_tenant_name service" % config_cmd)
sudo("%s os_username ceilometer" % config_cmd)
sudo("%s os_auth_url http://%s:5000/v2.0" % (config_cmd, openstack_ip))
#end fixup_ceilometer_conf_keystone
def fixup_ceilometer_pipeline_conf(analytics_ip):
import yaml
rconf_file = '/etc/ceilometer/pipeline.yaml'
conf_file = 'pipeline.yaml'
ltemp_dir = tempfile.mkdtemp()
get(rconf_file, ltemp_dir)
with open('%s/%s' % (ltemp_dir, conf_file)) as fap:
data = fap.read()
pipeline_dict = yaml.safe_load(data)
# If already configured with 'contrail_source' and/or 'contrail_sink' exit
for source in pipeline_dict['sources']:
if source['name'] == 'contrail_source':
return
for sink in pipeline_dict['sinks']:
if sink['name'] == 'contrail_sink':
return
# Edit meters in sources to exclude floating IP meters if '*' is
# configured
for source in pipeline_dict['sources']:
for mname in source['meters']:
if mname == '*':
source['meters'].append('!ip.floating.*')
print('Excluding floating IP meters from source %s' % (source['name']))
break
# Add contrail source and sinks to the pipeline
contrail_source = {'interval': 600,
'meters': ['ip.floating.receive.bytes',
'ip.floating.receive.packets',
'ip.floating.transmit.bytes',
'ip.floating.transmit.packets'],
'name': 'contrail_source',
'sinks': ['contrail_sink']}
contrail_source['resources'] = ['contrail://%s:8081/' % (analytics_ip)]
contrail_sink = {'publishers': ['rpc://'],
'transformers': None,
'name': 'contrail_sink'}
pipeline_dict['sources'].append(contrail_source)
pipeline_dict['sinks'].append(contrail_sink)
with open('%s/%s' % (ltemp_dir, conf_file), 'w') as fap:
yaml.safe_dump(pipeline_dict, fap, explicit_start=True,
default_flow_style=False, indent=4)
rtemp_dir = sudo('(tempdir=$(mktemp -d); echo $tempdir)')
put('%s/%s' % (ltemp_dir, conf_file), rtemp_dir, use_sudo=True)
sudo('mv %s/%s %s' % (rtemp_dir, conf_file, rconf_file))
local('rm -rf %s' % (ltemp_dir))
sudo('rm -rf %s' % (rtemp_dir))
#end fixup_ceilometer_pipeline_conf
def setup_ceilometer_mongodb(ip):
with settings(warn_only=True):
sudo("service mongodb stop")
sudo("sed -i -e '/^[ ]*bind/s/^/#/' /etc/mongodb.conf")
sudo("service mongodb start")
# check if the mongodb is running, if not, issue start again
count = 1
while sudo("service mongodb status | grep not").succeeded:
count += 1
if count > 10:
break
sleep(1)
run("service mongodb restart")
# check if ceilometer user has already been added
count = 1
cmd = "mongo --host " + ip + " --quiet --eval \"db.system.users.find({'user':'ceilometer'}).count()\" ceilometer"
output = sudo(cmd)
while not output.succeeded:
count += 1
if count > 10:
raise RuntimeError("Not able to connect to mongodb")
sleep(1)
output = sudo(cmd)
# Does user ceilometer exist
if output == "1":
return
cmd = "mongo --host " + ip + " --eval 'db = db.getSiblingDB(\"ceilometer\"); db.addUser({user: \"ceilometer\", pwd: \"CEILOMETER_DBPASS\", roles: [ \"readWrite\", \"dbAdmin\" ]})'"
if not sudo(cmd).succeeded:
raise RuntimeError("Not able to add ceilometer mongodb user")
#end setup_ceilometer_mongodb
@task
@roles('compute')
def setup_ceilometer_compute():
"""Provisions ceilometer compute services in all nodes defined in compute role."""
if env.roledefs['compute']:
execute("setup_ceilometer_compute_node", env.host_string)
@task
def setup_ceilometer_compute_node(*args):
"""Provisions ceilometer compute services in one or list of nodes. USAGE: fab setup_ceilometer_compute_node:user@1.1.1.1,user@2.2.2.2"""
openstack_host = get_control_host_string(env.roledefs['openstack'][0])
openstack_ip = hstr_to_ip(openstack_host)
for host_string in args:
with settings(host_string=host_string):
os_type = detect_ostype()
with settings(warn_only=True):
compute_ceilometer_present = sudo("grep '^instance_usage_audit =' /etc/nova/nova.conf").succeeded
if not compute_ceilometer_present:
config_cmd = "openstack-config --set /etc/nova/nova.conf DEFAULT"
sudo("%s notification_driver ceilometer.compute.nova_notifier" % config_cmd)
sudo("%s notification_driver nova.openstack.common.notifier.rpc_notifier" % config_cmd)
sudo("%s notify_on_state_change vm_and_task_state" % config_cmd)
sudo("%s instance_usage_audit_period hour" % config_cmd)
sudo("%s instance_usage_audit True" % config_cmd)
if os_type == 'ubuntu':
nova_services = ['nova-compute']
elif os_type in ['redhat']:
nova_services = ['openstack-nova-compute']
else:
raise RuntimeError("Unsupported OS Type (%s)", os_type)
for svc in nova_services:
sudo("service %s restart" % (svc))
if host_string != openstack_host:
# copy over ceilometer.conf from the first openstack node
conf_file = '/etc/ceilometer/ceilometer.conf'
local_tempdir = tempfile.mkdtemp()
with lcd(local_tempdir):
with settings(host_string = openstack_host):
get(conf_file, local_tempdir)
tempdir = sudo('(tempdir=$(mktemp -d); echo $tempdir)')
put('%s/ceilometer.conf' % (local_tempdir), tempdir, use_sudo=True)
sudo('mv %s/ceilometer.conf %s' % (tempdir, conf_file))
local('rm -rf %s' % (local_tempdir))
sudo('rm -rf %s' % (tempdir))
if os_type == 'ubuntu':
ceilometer_services = ['ceilometer-agent-compute']
elif os_type in ['redhat']:
ceilometer_services = ['openstack-ceilometer-compute']
else:
raise RuntimeError("Unsupported OS Type (%s)", os_type)
for svc in ceilometer_services:
sudo("service %s restart" % (svc))
@task
@roles('openstack')
def setup_contrail_ceilometer_plugin():
"""Provisions contrail ceilometer plugin in the first node defined in openstack role."""
if env.roledefs['openstack'] and env.host_string == env.roledefs['openstack'][0]:
execute("setup_contrail_ceilometer_plugin_node", env.host_string)
@task
def setup_contrail_ceilometer_plugin_node(*args):
"""Provisions contrail ceilometer plugin in one or list of nodes.
USAGE: fab setup_contrail_ceilometer_plugin_node:user@1.1.1.1,user@2.2.2.2"""
analytics_ip = hstr_to_ip(env.roledefs['collector'][0])
for host_string in args:
with settings(host_string=host_string):
# Fixup ceilometer pipeline.yaml cfg
fixup_ceilometer_pipeline_conf(analytics_ip)
os_type = detect_ostype()
if os_type == 'ubuntu':
ceilometer_services = ['ceilometer-agent-central']
elif os_type in ['redhat']:
ceilometer_services = ['openstack-ceilometer-central']
else:
raise RuntimeError("Unsupported OS Type (%s)", os_type)
for svc in ceilometer_services:
sudo("service %s restart" % (svc))
@task
@roles('openstack')
def setup_ceilometer():
"""Provisions ceilometer services in all nodes defined in openstack role."""
if env.roledefs['openstack'] and env.host_string == env.roledefs['openstack'][0]:
execute("setup_ceilometer_node", env.host_string)
execute("setup_image_service_node", env.host_string)
@task
def setup_ceilometer_node(*args):
"""Provisions ceilometer services in one or list of nodes. USAGE: fab setup_ceilometer_node:user@1.1.1.1,user@2.2.2.2"""
analytics_ip = hstr_to_ip(env.roledefs['collector'][0])
for host_string in args:
self_host = get_control_host_string(host_string)
self_ip = hstr_to_ip(self_host)
with settings(host_string=host_string):
openstack_sku = get_openstack_sku()
if openstack_sku == 'havana':
ceilometer_services = ['ceilometer-agent-central',
'ceilometer-api',
'ceilometer-collector']
else:
ceilometer_services = ['ceilometer-agent-central',
'ceilometer-agent-notification',
'ceilometer-api',
'ceilometer-collector',
'ceilometer-alarm-evaluator',
'ceilometer-alarm-notifier']
setup_ceilometer_mongodb(self_ip)
conf_file = "/etc/ceilometer/ceilometer.conf"
value = "mongodb://ceilometer:CEILOMETER_DBPASS@" + self_ip + ":27017/ceilometer"
if openstack_sku == 'havana':
sudo("openstack-config --set %s DEFAULT connection %s" % (conf_file, value))
else:
sudo("openstack-config --set %s database connection %s" % (conf_file, value))
fixup_ceilometer_conf_common()
#keystone auth params
cmd = "source /etc/contrail/openstackrc;keystone user-get ceilometer"
with settings(warn_only=True):
output = sudo(cmd)
count = 1
while not output.succeeded and (
"Unable to establish connection" in output or
"Service Unavailable (HTTP 503)" in output):
count += 1
if count > 10:
raise RuntimeError("Unable to connect to keystone")
sleep(1)
with settings(warn_only=True):
output = sudo(cmd)
if not output.succeeded:
sudo("source /etc/contrail/openstackrc;keystone user-create --name=ceilometer --pass=CEILOMETER_PASS --tenant=service --email=ceilometer@example.com")
sudo("source /etc/contrail/openstackrc;keystone user-role-add --user=ceilometer --tenant=service --role=admin")
fixup_ceilometer_conf_keystone(self_ip)
#create keystone service and endpoint
with settings(warn_only=True):
ceilometer_service_exists = sudo("source /etc/contrail/openstackrc;keystone service-list | grep ceilometer").succeeded
if not ceilometer_service_exists:
sudo("source /etc/contrail/openstackrc;keystone service-create --name=ceilometer --type=metering --description=\"Telemetry\"")
sudo("source /etc/contrail/openstackrc;keystone endpoint-create --service-id=$(keystone service-list | awk '/ metering / {print $2}') --publicurl=http://%s:8777 --internalurl=http://%s:8777 --adminurl=http://%s:8777 --region=RegionOne" %(self_ip, self_ip, self_ip))
# Fixup ceilometer pipeline cfg
fixup_ceilometer_pipeline_conf(analytics_ip)
for svc in ceilometer_services:
sudo("service %s restart" %(svc))
#end setup_ceilometer_node
@task
def setup_image_service_node(*args):
"""Provisions image services in one or list of nodes. USAGE: fab setup_image_service_node:user@1.1.1.1,user@2.2.2.2"""
amqp_server_ip = get_openstack_amqp_server()
for host_string in args:
openstack_sku = get_openstack_sku()
glance_configs = {'DEFAULT' : {'notification_driver' : 'messaging',
'rpc_backend' : 'rabbit',
'rabbit_host' : '%s' % amqp_server_ip,
'rabbit_password' : 'guest'}
}
if openstack_sku == 'havana':
glance_configs['DEFAULT']['notifier_strategy'] = 'rabbit'
glance_configs['DEFAULT']['rabbit_userid'] = 'guest'
conf_file = "/etc/glance/glance-api.conf"
for section, key_values in glance_configs.iteritems():
for key, value in key_values.iteritems():
sudo("openstack-config --set %s %s %s %s" % (conf_file, section, key, value))
sudo("service glance-registry restart")
sudo("service glance-api restart")
@task
@roles('openstack')
def setup_openstack():
"""Provisions openstack services in all nodes defined in openstack role."""
execute('add_openstack_reserverd_ports')
if env.roledefs['openstack']:
execute("setup_openstack_node", env.host_string)
# Blindly run setup_openstack twice for Ubuntu
#TODO Need to remove this finally
if detect_ostype() == 'ubuntu':
execute("setup_openstack_node", env.host_string)
if is_package_installed('contrail-openstack-dashboard'):
execute('setup_contrail_horizon_node', env.host_string)
if is_ceilometer_provision_supported():
setup_ceilometer()
@task
@roles('openstack')
def setup_nova_aggregate():
if get_orchestrator() == 'vcenter':
return
if env.roledefs['openstack'].index(env.host_string) == 0:
# Copy only once in a HA setup
copy_openstackrc()
execute('setup_nova_aggregate_node', env.host_string)
@task
def setup_nova_aggregate_node(*args):
for compute_host in env.roledefs['compute']:
hypervisor = get_hypervisor(compute_host)
host_name = None
for i in range(5):
try:
host_name = socket.gethostbyaddr(
hstr_to_ip(compute_host))[0].split('.')[0]
except socket.herror:
sleep(5)
continue
else:
break
if not host_name:
raise RuntimeError("Not able to get the hostname of compute host:%s", compute_host)
if hypervisor == 'docker':
retry = 10
while retry:
with settings(warn_only=True):
aggregate_list = sudo("(source /etc/contrail/openstackrc; nova aggregate-list)")
if aggregate_list.failed:
sleep(6)
retry -= 1
continue
break
if hypervisor not in aggregate_list:
sudo("(source /etc/contrail/openstackrc; nova aggregate-create %s nova/%s)" % (hypervisor, hypervisor))
sudo("(source /etc/contrail/openstackrc; nova aggregate-add-host %s %s)" % (hypervisor, host_name))
@roles('openstack')
@task
def setup_contrail_horizon():
if env.roledefs['openstack']:
if is_package_installed('contrail-openstack-dashboard'):
execute('setup_contrail_horizon_node', env.host_string)
@task
def setup_openstack_node(*args):
"""Provisions openstack services in one or list of nodes. USAGE: fab setup_openstack_node:user@1.1.1.1,user@2.2.2.2"""
#qpidd_changes_for_ubuntu()
for host_string in args:
# Frame the command line to provision openstack
cmd = frame_vnc_openstack_cmd(host_string)
# Execute the provision openstack script
with settings(host_string=host_string):
with cd(INSTALLER_DIR):
sudo(cmd)
#end setup_openstack_node
@task
def setup_contrail_horizon_node(*args):
'''
Configure horizon to pick up contrail customization
Based on OS and SKU type pick conf file in following order:
1. /etc/openstack-dashboard/local_settings.py
2. /etc/openstack-dashboard/local_settings
3. /usr/lib/python2.6/site-packages/openstack_dashboard/local/local_settings.py
'''
file_name = '/etc/openstack-dashboard/local_settings.py'
if not exists(file_name):
file_name = '/etc/openstack-dashboard/local_settings'
if not exists(file_name):
file_name = '/usr/lib/python2.6/site-packages/openstack_dashboard/local/local_settings.py'
if not exists(file_name):
return
pattern='^HORIZON_CONFIG.*customization_module.*'
line = '''HORIZON_CONFIG[\'customization_module\'] = \'contrail_openstack_dashboard.overrides\' '''
insert_line_to_file(pattern = pattern, line = line, file_name = file_name)
pattern = 'LOGOUT_URL.*'
if detect_ostype() == 'ubuntu':
line = '''LOGOUT_URL='/horizon/auth/logout/' '''
web_restart = 'service apache2 restart'
else:
line = '''LOGOUT_URL='/dashboard/auth/logout/' '''
web_restart = 'service httpd restart'
insert_line_to_file(pattern = pattern, line = line, file_name = file_name)
#HA settings
internal_vip = get_openstack_internal_vip()
if internal_vip:
with settings(warn_only=True):
hash_key = sudo("grep 'def hash_key' %s" % file_name).succeeded
if not hash_key:
# Add a hash generating function
sudo('sed -i "/^SECRET_KEY.*/a\ return new_key" %s' % file_name)
sudo('sed -i "/^SECRET_KEY.*/a\ new_key = m.hexdigest()" %s' % file_name)
sudo('sed -i "/^SECRET_KEY.*/a\ m.update(new_key)" %s' % file_name)
sudo('sed -i "/^SECRET_KEY.*/a\ m = hashlib.md5()" %s' % file_name)
sudo('sed -i "/^SECRET_KEY.*/a\ if len(new_key) > 250:" %s' % file_name)
sudo('sed -i "/^SECRET_KEY.*/a\ new_key = \':\'.join([key_prefix, str(version), key])" %s' % file_name)
sudo('sed -i "/^SECRET_KEY.*/a\def hash_key(key, key_prefix, version):" %s' % file_name)
sudo('sed -i "/^SECRET_KEY.*/a\import hashlib" %s' % file_name)
sudo('sed -i "/^SECRET_KEY.*/a\# To ensure key size of 250" %s' % file_name)
sudo("sed -i \"s/'LOCATION' : '127.0.0.1:11211',/'LOCATION' : '%s:11211',/\" %s" % (hstr_to_ip(env.host_string), file_name))
with settings(warn_only=True):
if sudo("grep '\'KEY_FUNCTION\': hash_key,' %s" % file_name).failed:
sudo('sed -i "/\'LOCATION\'.*/a\ \'KEY_FUNCTION\': hash_key," %s' % file_name)
sudo("sed -i -e 's/OPENSTACK_HOST = \"127.0.0.1\"/OPENSTACK_HOST = \"%s\"/' %s" % (internal_vip,file_name))
sudo(web_restart)
#end setup_contrail_horizon_node
@task
@roles('collector')
def setup_collector():
"""Provisions collector services in all nodes defined in collector role."""
if env.roledefs['collector']:
execute("setup_collector_node", env.host_string)
@task
def setup_collector_node(*args):
"""Provisions collector services in one or list of nodes. USAGE: fab setup_collector_node:user@1.1.1.1,user@2.2.2.2"""
for host_string in args:
#we need the redis to be listening on *, comment bind line
with settings(host_string=host_string):
with settings(warn_only=True):
if detect_ostype() == 'ubuntu':
sudo("service redis-server stop")
sudo("sed -i -e '/^[ ]*bind/s/^/#/' /etc/redis/redis.conf")
#If redis passwd sepcified add that to the conf file
if get_redis_password():
sudo("sed -i '/^# requirepass/ c\ requirepass "+ get_redis_password()+"' /etc/redis/redis.conf")
sudo("service redis-server start")
#check if the redis-server is running, if not, issue start again
count = 1
while sudo("service redis-server status | grep not").succeeded:
count += 1
if count > 10:
break
sleep(1)
sudo("service redis-server restart")
else:
sudo("service redis stop")
sudo("sed -i -e '/^[ ]*bind/s/^/#/' /etc/redis.conf")
#If redis passwd sepcified add that to the conf file
if get_redis_password():
sudo("sed -i '/^# requirepass/ c\ requirepass "+ get_redis_password()+"' /etc/redis.conf")
sudo("chkconfig redis on")
sudo("service redis start")
# Frame the command line to provision collector
cmd = frame_vnc_collector_cmd(host_string)
# Execute the provision collector script
with settings(host_string=host_string):
if detect_ostype() == 'ubuntu':
with settings(warn_only=True):
sudo('rm /etc/init/supervisor-analytics.override')
with cd(INSTALLER_DIR):
print cmd
sudo(cmd)
#end setup_collector
@task
@roles('database')
def setup_database():
"""Provisions database services in all nodes defined in database role."""
if env.roledefs['database']:
execute("setup_database_node", env.host_string)
@task
def setup_database_node(*args):
"""Provisions database services in one or list of nodes. USAGE: fab setup_database_node:user@1.1.1.1,user@2.2.2.2"""
for host_string in args:
# Frame the command line to provision database
cmd = frame_vnc_database_cmd(host_string)
# Execute the provision database script
with settings(host_string=host_string):
if detect_ostype() == 'ubuntu':
with settings(warn_only=True):
sudo('rm /etc/init/supervisor-database.override')
with cd(INSTALLER_DIR):
sudo(cmd)
#end setup_database