blob: d16cd3810ba44b185df733d10c88241b6b272e60 [file] [log] [blame]
Sean Daguee263c822014-12-05 14:25:28 -05001#!/bin/bash
2#
Mark McClainb05c8762013-07-06 23:29:39 -04003# lib/neutron
Joe Gordon23946052014-01-15 21:42:32 +00004# functions - functions specific to neutron
Mark McClainb05c8762013-07-06 23:29:39 -04005
6# Dependencies:
7# ``functions`` file
8# ``DEST`` must be defined
Stephan Renatuse578eff2013-11-19 13:31:04 +01009# ``STACK_USER`` must be defined
Mark McClainb05c8762013-07-06 23:29:39 -040010
11# ``stack.sh`` calls the entry points in this order:
12#
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010013# - install_neutron
14# - install_neutronclient
15# - install_neutron_agent_packages
16# - install_neutron_third_party
17# - configure_neutron
18# - init_neutron
19# - configure_neutron_third_party
20# - init_neutron_third_party
21# - start_neutron_third_party
Emilien Macchia677b7f2013-11-25 23:40:20 +010022# - create_neutron_cache_dir
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010023# - create_nova_conf_neutron
24# - start_neutron_service_and_check
yunhong jiang0d6e9922014-10-10 06:12:47 -070025# - start_neutron_agents
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010026# - create_neutron_initial_network
27# - setup_neutron_debug
Mark McClainb05c8762013-07-06 23:29:39 -040028#
29# ``unstack.sh`` calls the entry points in this order:
30#
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010031# - stop_neutron
yunhong jiang0d6e9922014-10-10 06:12:47 -070032# - stop_neutron_third_party
33# - cleanup_neutron
Mark McClainb05c8762013-07-06 23:29:39 -040034
35# Functions in lib/neutron are classified into the following categories:
36#
37# - entry points (called from stack.sh or unstack.sh)
38# - internal functions
39# - neutron exercises
40# - 3rd party programs
41
42
43# Neutron Networking
44# ------------------
45
46# Make sure that neutron is enabled in ``ENABLED_SERVICES``. If you want
47# to run Neutron on this host, make sure that q-svc is also in
48# ``ENABLED_SERVICES``.
49#
Mark McClainb05c8762013-07-06 23:29:39 -040050# See "Neutron Network Configuration" below for additional variables
51# that must be set in localrc for connectivity across hosts with
52# Neutron.
53#
54# With Neutron networking the NETWORK_MANAGER variable is ignored.
Mark McClainb05c8762013-07-06 23:29:39 -040055
John Davidge21529a52014-06-30 09:55:11 -040056# Settings
57# --------
58
59# Timeout value in seconds to wait for IPv6 gateway configuration
60GATEWAY_TIMEOUT=30
61
Mark McClainb05c8762013-07-06 23:29:39 -040062
63# Neutron Network Configuration
64# -----------------------------
65
John Davidge21529a52014-06-30 09:55:11 -040066# Subnet IP version
67IP_VERSION=${IP_VERSION:-4}
68# Validate IP_VERSION
69if [[ $IP_VERSION != "4" ]] && [[ $IP_VERSION != "6" ]] && [[ $IP_VERSION != "4+6" ]]; then
70 die $LINENO "IP_VERSION must be either 4, 6, or 4+6"
71fi
Mark McClainb05c8762013-07-06 23:29:39 -040072# Gateway and subnet defaults, in case they are not customized in localrc
73NETWORK_GATEWAY=${NETWORK_GATEWAY:-10.0.0.1}
Salvatore Orlando90234ac2013-11-25 05:44:10 -080074PUBLIC_NETWORK_GATEWAY=${PUBLIC_NETWORK_GATEWAY:-172.24.4.1}
Mark McClainb05c8762013-07-06 23:29:39 -040075PRIVATE_SUBNET_NAME=${PRIVATE_SUBNET_NAME:-"private-subnet"}
76PUBLIC_SUBNET_NAME=${PUBLIC_SUBNET_NAME:-"public-subnet"}
77
Rob Crittenden18d47782014-03-19 17:47:42 -040078if is_ssl_enabled_service "neutron" || is_service_enabled tls-proxy; then
79 Q_PROTOCOL="https"
80fi
81
John Davidge21529a52014-06-30 09:55:11 -040082# Generate 40-bit IPv6 Global ID to comply with RFC 4193
83IPV6_GLOBAL_ID=`uuidgen | sed s/-//g | cut -c 23- | sed -e "s/\(..\)\(....\)\(....\)/\1:\2:\3/"`
84
85# IPv6 gateway and subnet defaults, in case they are not customized in localrc
86IPV6_RA_MODE=${IPV6_RA_MODE:-slaac}
87IPV6_ADDRESS_MODE=${IPV6_ADDRESS_MODE:-slaac}
88IPV6_PUBLIC_SUBNET_NAME=${IPV6_PUBLIC_SUBNET_NAME:-ipv6-public-subnet}
89IPV6_PRIVATE_SUBNET_NAME=${IPV6_PRIVATE_SUBNET_NAME:-ipv6-private-subnet}
90FIXED_RANGE_V6=${FIXED_RANGE_V6:-fd$IPV6_GLOBAL_ID::/64}
91IPV6_PRIVATE_NETWORK_GATEWAY=${IPV6_PRIVATE_NETWORK_GATEWAY:-fd$IPV6_GLOBAL_ID::1}
92IPV6_PUBLIC_RANGE=${IPV6_PUBLIC_RANGE:-fe80:cafe:cafe::/64}
93IPV6_PUBLIC_NETWORK_GATEWAY=${IPV6_PUBLIC_NETWORK_GATEWAY:-fe80:cafe:cafe::2}
94# IPV6_ROUTER_GW_IP must be defined when IP_VERSION=4+6 as it cannot be
95# obtained conventionally until the l3-agent has support for dual-stack
96# TODO (john-davidge) Remove once l3-agent supports dual-stack
97IPV6_ROUTER_GW_IP=${IPV6_ROUTER_GW_IP:-fe80:cafe:cafe::1}
Rob Crittenden18d47782014-03-19 17:47:42 -040098
Mark McClainb05c8762013-07-06 23:29:39 -040099# Set up default directories
Sean Daguee08ab102014-11-13 17:09:28 -0500100GITDIR["python-neutronclient"]=$DEST/python-neutronclient
Sean Dague5cb19062014-11-01 01:37:45 +0100101
102
Mark McClainb05c8762013-07-06 23:29:39 -0400103NEUTRON_DIR=$DEST/neutron
Kyle Mestery20b839f2014-12-08 06:17:27 +0000104NEUTRON_FWAAS_DIR=$DEST/neutron-fwaas
105NEUTRON_LBAAS_DIR=$DEST/neutron-lbaas
106NEUTRON_VPNAAS_DIR=$DEST/neutron-vpnaas
Mark McClainb05c8762013-07-06 23:29:39 -0400107NEUTRON_AUTH_CACHE_DIR=${NEUTRON_AUTH_CACHE_DIR:-/var/cache/neutron}
108
109# Support entry points installation of console scripts
110if [[ -d $NEUTRON_DIR/bin/neutron-server ]]; then
111 NEUTRON_BIN_DIR=$NEUTRON_DIR/bin
Sean Dague3bdb9222013-10-22 08:36:16 -0400112else
113 NEUTRON_BIN_DIR=$(get_python_exec_prefix)
Mark McClainb05c8762013-07-06 23:29:39 -0400114fi
115
116NEUTRON_CONF_DIR=/etc/neutron
117NEUTRON_CONF=$NEUTRON_CONF_DIR/neutron.conf
118export NEUTRON_TEST_CONFIG_FILE=${NEUTRON_TEST_CONFIG_FILE:-"$NEUTRON_CONF_DIR/debug.ini"}
119
Adam Gandelman7614d212014-08-11 14:27:50 -0700120# Agent binaries. Note, binary paths for other agents are set in per-service
121# scripts in lib/neutron_plugins/services/
122AGENT_DHCP_BINARY="$NEUTRON_BIN_DIR/neutron-dhcp-agent"
123AGENT_L3_BINARY=${AGENT_L3_BINARY:-"$NEUTRON_BIN_DIR/neutron-l3-agent"}
124AGENT_META_BINARY="$NEUTRON_BIN_DIR/neutron-metadata-agent"
125
126# Agent config files. Note, plugin-specific Q_PLUGIN_CONF_FILE is set and
127# loaded from per-plugin scripts in lib/neutron_plugins/
128Q_DHCP_CONF_FILE=$NEUTRON_CONF_DIR/dhcp_agent.ini
129Q_L3_CONF_FILE=$NEUTRON_CONF_DIR/l3_agent.ini
130Q_FWAAS_CONF_FILE=$NEUTRON_CONF_DIR/fwaas_driver.ini
131Q_VPN_CONF_FILE=$NEUTRON_CONF_DIR/vpn_agent.ini
132Q_META_CONF_FILE=$NEUTRON_CONF_DIR/metadata_agent.ini
133
Henry Gessau0fc1cc22014-07-06 22:54:34 -0400134# Default name for Neutron database
135Q_DB_NAME=${Q_DB_NAME:-neutron}
Mark McClainb05c8762013-07-06 23:29:39 -0400136# Default Neutron Plugin
Kyle Mestery6d235002013-09-18 20:27:08 +0000137Q_PLUGIN=${Q_PLUGIN:-ml2}
Mark McClainb05c8762013-07-06 23:29:39 -0400138# Default Neutron Port
139Q_PORT=${Q_PORT:-9696}
Rob Crittenden18d47782014-03-19 17:47:42 -0400140# Default Neutron Internal Port when using TLS proxy
141Q_PORT_INT=${Q_PORT_INT:-19696}
Mark McClainb05c8762013-07-06 23:29:39 -0400142# Default Neutron Host
143Q_HOST=${Q_HOST:-$SERVICE_HOST}
Rob Crittenden18d47782014-03-19 17:47:42 -0400144# Default protocol
145Q_PROTOCOL=${Q_PROTOCOL:-$SERVICE_PROTOCOL}
Mark McClainb05c8762013-07-06 23:29:39 -0400146# Default admin username
147Q_ADMIN_USERNAME=${Q_ADMIN_USERNAME:-neutron}
148# Default auth strategy
149Q_AUTH_STRATEGY=${Q_AUTH_STRATEGY:-keystone}
150# Use namespace or not
151Q_USE_NAMESPACE=${Q_USE_NAMESPACE:-True}
152# RHEL's support for namespaces requires using veths with ovs
153Q_OVS_USE_VETH=${Q_OVS_USE_VETH:-False}
154Q_USE_ROOTWRAP=${Q_USE_ROOTWRAP:-True}
155# Meta data IP
156Q_META_DATA_IP=${Q_META_DATA_IP:-$SERVICE_HOST}
157# Allow Overlapping IP among subnets
158Q_ALLOW_OVERLAPPING_IP=${Q_ALLOW_OVERLAPPING_IP:-True}
159# Use neutron-debug command
160Q_USE_DEBUG_COMMAND=${Q_USE_DEBUG_COMMAND:-False}
161# The name of the default q-l3 router
162Q_ROUTER_NAME=${Q_ROUTER_NAME:-router1}
Aaron Rosen4540d002013-10-24 13:59:33 -0700163# nova vif driver that all plugins should use
164NOVA_VIF_DRIVER=${NOVA_VIF_DRIVER:-"nova.virt.libvirt.vif.LibvirtGenericVIFDriver"}
Terry Wilsonf06c4432014-05-20 10:54:51 -0500165Q_NOTIFY_NOVA_PORT_STATUS_CHANGES=${Q_NOTIFY_NOVA_PORT_STATUS_CHANGES:-True}
166Q_NOTIFY_NOVA_PORT_DATA_CHANGES=${Q_NOTIFY_NOVA_PORT_DATA_CHANGES:-True}
Aaron Rosencea32b12014-03-04 16:20:14 -0800167VIF_PLUGGING_IS_FATAL=${VIF_PLUGGING_IS_FATAL:-True}
168VIF_PLUGGING_TIMEOUT=${VIF_PLUGGING_TIMEOUT:-300}
Edgar Magana7bce8fa2014-11-04 17:32:54 +0100169# Specify if the initial private and external networks should be created
170NEUTRON_CREATE_INITIAL_NETWORKS=${NEUTRON_CREATE_INITIAL_NETWORKS:-True}
Aaron Rosen4540d002013-10-24 13:59:33 -0700171
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400172## Provider Network Information
173PROVIDER_SUBNET_NAME=${PROVIDER_SUBNET_NAME:-"provider_net"}
174
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900175# Use flat providernet for public network
176#
177# If Q_USE_PROVIDERNET_FOR_PUBLIC=True, use a flat provider network
178# for external interface of neutron l3-agent. In that case,
179# PUBLIC_PHYSICAL_NETWORK specifies provider:physical_network value
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900180# used for the network. In case of ofagent, you should add the
181# corresponding entry to your OFAGENT_PHYSICAL_INTERFACE_MAPPINGS.
182# For openvswitch agent, you should add the corresponding entry to
183# your OVS_BRIDGE_MAPPINGS.
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900184#
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900185# eg. (ofagent)
186# Q_USE_PROVIDERNET_FOR_PUBLIC=True
187# Q_USE_PUBLIC_VETH=True
188# PUBLIC_PHYSICAL_NETWORK=public
189# OFAGENT_PHYSICAL_INTERFACE_MAPPINGS=public:veth-pub-int
190#
191# eg. (openvswitch agent)
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900192# Q_USE_PROVIDERNET_FOR_PUBLIC=True
193# PUBLIC_PHYSICAL_NETWORK=public
194# OVS_BRIDGE_MAPPINGS=public:br-ex
195Q_USE_PROVIDERNET_FOR_PUBLIC=${Q_USE_PROVIDERNET_FOR_PUBLIC:-False}
196PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK:-public}
197
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900198# If Q_USE_PUBLIC_VETH=True, create and use a veth pair instead of
199# PUBLIC_BRIDGE. This is intended to be used with
200# Q_USE_PROVIDERNET_FOR_PUBLIC=True.
201Q_USE_PUBLIC_VETH=${Q_USE_PUBLIC_VETH:-False}
202Q_PUBLIC_VETH_EX=${Q_PUBLIC_VETH_EX:-veth-pub-ex}
203Q_PUBLIC_VETH_INT=${Q_PUBLIC_VETH_INT:-veth-pub-int}
204
Tomoe Sugiharaafbc6312013-11-14 20:02:47 +0000205# The next two variables are configured by plugin
206# e.g. _configure_neutron_l3_agent or lib/neutron_plugins/*
207#
208# The plugin supports L3.
209Q_L3_ENABLED=${Q_L3_ENABLED:-False}
210# L3 routers exist per tenant
211Q_L3_ROUTER_PER_TENANT=${Q_L3_ROUTER_PER_TENANT:-False}
Aaron Rosen4540d002013-10-24 13:59:33 -0700212
Mark McClainb05c8762013-07-06 23:29:39 -0400213# List of config file names in addition to the main plugin config file
214# See _configure_neutron_common() for details about setting it up
215declare -a Q_PLUGIN_EXTRA_CONF_FILES
216
Paul Michali746dcee2014-04-02 19:12:22 +0000217# List of (optional) config files for VPN device drivers to use with
218# the neutron-q-vpn agent
219declare -a Q_VPN_EXTRA_CONF_FILES
220
Mark McClainb05c8762013-07-06 23:29:39 -0400221
Dean Troyere2907b42014-02-26 17:35:37 -0600222Q_RR_CONF_FILE=$NEUTRON_CONF_DIR/rootwrap.conf
223if [[ "$Q_USE_ROOTWRAP" == "False" ]]; then
224 Q_RR_COMMAND="sudo"
225else
226 NEUTRON_ROOTWRAP=$(get_rootwrap_location neutron)
227 Q_RR_COMMAND="sudo $NEUTRON_ROOTWRAP $Q_RR_CONF_FILE"
Mark McClainb05c8762013-07-06 23:29:39 -0400228fi
229
Brian Haleyeea76212014-06-27 11:45:50 -0400230
231# Distributed Virtual Router (DVR) configuration
232# Can be:
Dean Troyer3324f192014-09-18 09:26:39 -0500233# - ``legacy`` - No DVR functionality
234# - ``dvr_snat`` - Controller or single node DVR
235# - ``dvr`` - Compute node in multi-node DVR
236#
Brian Haleyeea76212014-06-27 11:45:50 -0400237Q_DVR_MODE=${Q_DVR_MODE:-legacy}
238if [[ "$Q_DVR_MODE" != "legacy" ]]; then
239 Q_ML2_PLUGIN_MECHANISM_DRIVERS=openvswitch,linuxbridge,l2population
240fi
241
Dean Troyere2907b42014-02-26 17:35:37 -0600242# Provider Network Configurations
243# --------------------------------
244
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900245# The following variables control the Neutron ML2 plugins' allocation
246# of tenant networks and availability of provider networks. If these
247# are not configured in ``localrc``, tenant networks will be local to
248# the host (with no remote connectivity), and no physical resources
249# will be available for the allocation of provider networks.
Dean Troyere2907b42014-02-26 17:35:37 -0600250
Attila Fazekas8feaf6c2014-07-27 20:47:04 +0200251# To disable tunnels (GRE or VXLAN) for tenant networks,
252# set to False in ``local.conf``.
253# GRE tunnels are only supported by the openvswitch.
254ENABLE_TENANT_TUNNELS=${ENABLE_TENANT_TUNNELS:-True}
Dean Troyere2907b42014-02-26 17:35:37 -0600255
256# If using GRE tunnels for tenant networks, specify the range of
257# tunnel IDs from which tenant networks are allocated. Can be
258# overriden in ``localrc`` in necesssary.
Anant Patil3827dc02014-07-03 21:38:16 +0530259TENANT_TUNNEL_RANGES=${TENANT_TUNNEL_RANGES:-1:1000}
Dean Troyere2907b42014-02-26 17:35:37 -0600260
261# To use VLANs for tenant networks, set to True in localrc. VLANs
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900262# are supported by the ML2 plugins, requiring additional configuration
263# described below.
Dean Troyere2907b42014-02-26 17:35:37 -0600264ENABLE_TENANT_VLANS=${ENABLE_TENANT_VLANS:-False}
265
266# If using VLANs for tenant networks, set in ``localrc`` to specify
267# the range of VLAN VIDs from which tenant networks are
268# allocated. An external network switch must be configured to
269# trunk these VLANs between hosts for multi-host connectivity.
270#
271# Example: ``TENANT_VLAN_RANGE=1000:1999``
272TENANT_VLAN_RANGE=${TENANT_VLAN_RANGE:-}
273
274# If using VLANs for tenant networks, or if using flat or VLAN
275# provider networks, set in ``localrc`` to the name of the physical
276# network, and also configure ``OVS_PHYSICAL_BRIDGE`` for the
277# openvswitch agent or ``LB_PHYSICAL_INTERFACE`` for the linuxbridge
278# agent, as described below.
279#
280# Example: ``PHYSICAL_NETWORK=default``
281PHYSICAL_NETWORK=${PHYSICAL_NETWORK:-}
282
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900283# With the openvswitch agent, if using VLANs for tenant networks,
Dean Troyere2907b42014-02-26 17:35:37 -0600284# or if using flat or VLAN provider networks, set in ``localrc`` to
285# the name of the OVS bridge to use for the physical network. The
286# bridge will be created if it does not already exist, but a
287# physical interface must be manually added to the bridge as a
288# port for external connectivity.
289#
290# Example: ``OVS_PHYSICAL_BRIDGE=br-eth1``
291OVS_PHYSICAL_BRIDGE=${OVS_PHYSICAL_BRIDGE:-}
292
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900293# With the linuxbridge agent, if using VLANs for tenant networks,
Dean Troyere2907b42014-02-26 17:35:37 -0600294# or if using flat or VLAN provider networks, set in ``localrc`` to
295# the name of the network interface to use for the physical
296# network.
297#
298# Example: ``LB_PHYSICAL_INTERFACE=eth1``
299LB_PHYSICAL_INTERFACE=${LB_PHYSICAL_INTERFACE:-}
300
Edgar Magana6f335b92014-07-10 15:42:44 -0700301# When Neutron tunnels are enabled it is needed to specify the
302# IP address of the end point in the local server. This IP is set
303# by default to the same IP address that the HOST IP.
304# This variable can be used to specify a different end point IP address
305# Example: ``TUNNEL_ENDPOINT_IP=1.1.1.1``
306TUNNEL_ENDPOINT_IP=${TUNNEL_ENDPOINT_IP:-$HOST_IP}
307
Dean Troyere2907b42014-02-26 17:35:37 -0600308# With the openvswitch plugin, set to True in ``localrc`` to enable
309# provider GRE tunnels when ``ENABLE_TENANT_TUNNELS`` is False.
310#
311# Example: ``OVS_ENABLE_TUNNELING=True``
312OVS_ENABLE_TUNNELING=${OVS_ENABLE_TUNNELING:-$ENABLE_TENANT_TUNNELS}
313
Tan Lin27a196e2014-10-31 15:44:34 +0800314# Use DHCP agent for providing metadata service in the case of
315# without L3 agent (No Route Agent), set to True in localrc.
316ENABLE_ISOLATED_METADATA=${ENABLE_ISOLATED_METADATA:-False}
317
318# Add a static route as dhcp option, so the request to 169.254.169.254
319# will be able to reach through a route(DHCP agent)
320# This option require ENABLE_ISOLATED_METADATA = True
321ENABLE_METADATA_NETWORK=${ENABLE_METADATA_NETWORK:-False}
Mark McClainb05c8762013-07-06 23:29:39 -0400322# Neutron plugin specific functions
323# ---------------------------------
324
325# Please refer to ``lib/neutron_plugins/README.md`` for details.
326source $TOP_DIR/lib/neutron_plugins/$Q_PLUGIN
327
328# Agent loadbalancer service plugin functions
329# -------------------------------------------
330
331# Hardcoding for 1 service plugin for now
332source $TOP_DIR/lib/neutron_plugins/services/loadbalancer
333
Emilien Macchi40546f72013-09-24 15:10:25 +0200334# Agent metering service plugin functions
335# -------------------------------------------
336
337# Hardcoding for 1 service plugin for now
338source $TOP_DIR/lib/neutron_plugins/services/metering
339
Nachi Ueno69b3ff62013-06-07 10:28:33 -0700340# VPN service plugin functions
341# -------------------------------------------
342# Hardcoding for 1 service plugin for now
343source $TOP_DIR/lib/neutron_plugins/services/vpn
344
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700345# Firewall Service Plugin functions
Adam Spierscb961592013-10-05 12:11:07 +0100346# ---------------------------------
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700347source $TOP_DIR/lib/neutron_plugins/services/firewall
348
Mark McClainb05c8762013-07-06 23:29:39 -0400349# Use security group or not
350if has_neutron_plugin_security_group; then
351 Q_USE_SECGROUP=${Q_USE_SECGROUP:-True}
352else
353 Q_USE_SECGROUP=False
354fi
355
Dean Troyer4237f592014-01-29 16:22:11 -0600356# Tell Tempest this project is present
357TEMPEST_SERVICES+=,neutron
358
359
Dean Troyere2907b42014-02-26 17:35:37 -0600360# Save trace setting
361XTRACE=$(set +o | grep xtrace)
362set +o xtrace
363
364
Mark McClainb05c8762013-07-06 23:29:39 -0400365# Functions
366# ---------
367
Adam Gandelman7614d212014-08-11 14:27:50 -0700368function _determine_config_server {
369 local cfg_file
370 local opts="--config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE"
371 for cfg_file in ${Q_PLUGIN_EXTRA_CONF_FILES[@]}; do
372 opts+=" --config-file /$cfg_file"
373 done
374 echo "$opts"
375}
376
377function _determine_config_vpn {
378 local cfg_file
379 local opts="--config-file $NEUTRON_CONF --config-file=$Q_L3_CONF_FILE --config-file=$Q_VPN_CONF_FILE"
380 if is_service_enabled q-fwaas; then
381 opts+=" --config-file $Q_FWAAS_CONF_FILE"
382 fi
383 for cfg_file in ${Q_VPN_EXTRA_CONF_FILES[@]}; do
384 opts+=" --config-file $cfg_file"
385 done
386 echo "$opts"
387
388}
389
390function _determine_config_l3 {
391 local opts="--config-file $NEUTRON_CONF --config-file=$Q_L3_CONF_FILE"
392 if is_service_enabled q-fwaas; then
393 opts+=" --config-file $Q_FWAAS_CONF_FILE"
394 fi
395 echo "$opts"
396}
397
398# For services and agents that require it, dynamically construct a list of
399# --config-file arguments that are passed to the binary.
400function determine_config_files {
401 local opts=""
402 case "$1" in
403 "neutron-server") opts="$(_determine_config_server)" ;;
404 "neutron-vpn-agent") opts="$(_determine_config_vpn)" ;;
405 "neutron-l3-agent") opts="$(_determine_config_l3)" ;;
406 esac
407 if [ -z "$opts" ] ; then
408 die $LINENO "Could not determine config files for $1."
409 fi
410 echo "$opts"
411}
412
Dean Troyere4fa7212014-01-15 15:04:49 -0600413# Test if any Neutron services are enabled
414# is_neutron_enabled
415function is_neutron_enabled {
416 [[ ,${ENABLED_SERVICES} =~ ,"q-" ]] && return 0
417 return 1
418}
419
Mark McClainb05c8762013-07-06 23:29:39 -0400420# configure_neutron()
421# Set common config for all neutron server and agents.
Ian Wienandaee18c72014-02-21 15:35:08 +1100422function configure_neutron {
Mark McClainb05c8762013-07-06 23:29:39 -0400423 _configure_neutron_common
424 iniset_rpc_backend neutron $NEUTRON_CONF DEFAULT
425
426 # goes before q-svc to init Q_SERVICE_PLUGIN_CLASSES
427 if is_service_enabled q-lbaas; then
428 _configure_neutron_lbaas
429 fi
Emilien Macchi40546f72013-09-24 15:10:25 +0200430 if is_service_enabled q-metering; then
431 _configure_neutron_metering
432 fi
Nachi Ueno69b3ff62013-06-07 10:28:33 -0700433 if is_service_enabled q-vpn; then
434 _configure_neutron_vpn
435 fi
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700436 if is_service_enabled q-fwaas; then
437 _configure_neutron_fwaas
438 fi
Stephen Ma9b38eb22014-04-02 02:13:09 +0000439 if is_service_enabled q-agt q-svc; then
Mark McClainb05c8762013-07-06 23:29:39 -0400440 _configure_neutron_service
441 fi
442 if is_service_enabled q-agt; then
443 _configure_neutron_plugin_agent
444 fi
445 if is_service_enabled q-dhcp; then
446 _configure_neutron_dhcp_agent
447 fi
448 if is_service_enabled q-l3; then
449 _configure_neutron_l3_agent
450 fi
451 if is_service_enabled q-meta; then
452 _configure_neutron_metadata_agent
453 fi
454
Brian Haleyeea76212014-06-27 11:45:50 -0400455 if [[ "$Q_DVR_MODE" != "legacy" ]]; then
456 _configure_dvr
457 fi
Dina Belova58adaa62014-07-11 18:18:12 +0400458 if is_service_enabled ceilometer; then
459 _configure_neutron_ceilometer_notifications
460 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400461
462 _configure_neutron_debug_command
463}
464
Ian Wienandaee18c72014-02-21 15:35:08 +1100465function create_nova_conf_neutron {
Yong Sheng Gong032e4542013-08-25 10:21:10 +0800466 iniset $NOVA_CONF DEFAULT network_api_class "nova.network.neutronv2.api.API"
Gary Kotton13d385e2014-06-17 23:24:53 -0700467 iniset $NOVA_CONF neutron admin_username "$Q_ADMIN_USERNAME"
468 iniset $NOVA_CONF neutron admin_password "$SERVICE_PASSWORD"
469 iniset $NOVA_CONF neutron admin_auth_url "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_AUTH_PORT/v2.0"
470 iniset $NOVA_CONF neutron auth_strategy "$Q_AUTH_STRATEGY"
471 iniset $NOVA_CONF neutron admin_tenant_name "$SERVICE_TENANT_NAME"
Bartosz Górski0abde392014-02-28 14:15:19 +0100472 iniset $NOVA_CONF neutron region_name "$REGION_NAME"
Rob Crittenden18d47782014-03-19 17:47:42 -0400473 iniset $NOVA_CONF neutron url "${Q_PROTOCOL}://$Q_HOST:$Q_PORT"
Mark McClainb05c8762013-07-06 23:29:39 -0400474
475 if [[ "$Q_USE_SECGROUP" == "True" ]]; then
476 LIBVIRT_FIREWALL_DRIVER=nova.virt.firewall.NoopFirewallDriver
Jeff Peeler1143f7e2013-10-31 16:21:52 -0400477 iniset $NOVA_CONF DEFAULT firewall_driver $LIBVIRT_FIREWALL_DRIVER
Yong Sheng Gong032e4542013-08-25 10:21:10 +0800478 iniset $NOVA_CONF DEFAULT security_group_api neutron
Mark McClainb05c8762013-07-06 23:29:39 -0400479 fi
480
481 # set NOVA_VIF_DRIVER and optionally set options in nova_conf
482 neutron_plugin_create_nova_conf
483
Gary Kotton51c681d2014-04-22 01:40:56 -0700484 iniset $NOVA_CONF libvirt vif_driver "$NOVA_VIF_DRIVER"
Mark McClainb05c8762013-07-06 23:29:39 -0400485 iniset $NOVA_CONF DEFAULT linuxnet_interface_driver "$LINUXNET_VIF_DRIVER"
486 if is_service_enabled q-meta; then
Gary Kottondd745502014-08-11 23:38:47 -0700487 iniset $NOVA_CONF neutron service_metadata_proxy "True"
Mark McClainb05c8762013-07-06 23:29:39 -0400488 fi
Aaron Rosencea32b12014-03-04 16:20:14 -0800489
490 iniset $NOVA_CONF DEFAULT vif_plugging_is_fatal "$VIF_PLUGGING_IS_FATAL"
491 iniset $NOVA_CONF DEFAULT vif_plugging_timeout "$VIF_PLUGGING_TIMEOUT"
Mark McClainb05c8762013-07-06 23:29:39 -0400492}
493
Emilien Macchia677b7f2013-11-25 23:40:20 +0100494# create_neutron_cache_dir() - Part of the _neutron_setup_keystone() process
Ian Wienandaee18c72014-02-21 15:35:08 +1100495function create_neutron_cache_dir {
Emilien Macchia677b7f2013-11-25 23:40:20 +0100496 # Create cache dir
497 sudo mkdir -p $NEUTRON_AUTH_CACHE_DIR
498 sudo chown $STACK_USER $NEUTRON_AUTH_CACHE_DIR
499 rm -f $NEUTRON_AUTH_CACHE_DIR/*
500}
501
Mark McClainb05c8762013-07-06 23:29:39 -0400502# create_neutron_accounts() - Set up common required neutron accounts
503
504# Tenant User Roles
505# ------------------------------------------------------------------
506# service neutron admin # if enabled
507
508# Migrated from keystone_data.sh
Ian Wienandaee18c72014-02-21 15:35:08 +1100509function create_neutron_accounts {
Mark McClainb05c8762013-07-06 23:29:39 -0400510
Dean Troyer188493d2014-07-25 15:54:11 -0500511 local service_tenant=$(openstack project list | awk "/ $SERVICE_TENANT_NAME / { print \$2 }")
Kevin Benton08a5fcc2014-07-18 16:06:12 -0700512 local service_role=$(openstack role list | awk "/ service / { print \$2 }")
Mark McClainb05c8762013-07-06 23:29:39 -0400513
514 if [[ "$ENABLED_SERVICES" =~ "q-svc" ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100515
Jamie Lennox18f39bf2015-01-28 13:38:32 +1000516 local neutron_user=$(get_or_create_user "neutron" "$SERVICE_PASSWORD")
Kevin Benton08a5fcc2014-07-18 16:06:12 -0700517 get_or_add_user_role $service_role $neutron_user $service_tenant
Bartosz Górski0abde392014-02-28 14:15:19 +0100518
Mark McClainb05c8762013-07-06 23:29:39 -0400519 if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100520
Dean Troyer188493d2014-07-25 15:54:11 -0500521 local neutron_service=$(get_or_create_service "neutron" \
Bartosz Górski0abde392014-02-28 14:15:19 +0100522 "network" "Neutron Service")
Dean Troyer188493d2014-07-25 15:54:11 -0500523 get_or_create_endpoint $neutron_service \
Bartosz Górski0abde392014-02-28 14:15:19 +0100524 "$REGION_NAME" \
Rob Crittenden18d47782014-03-19 17:47:42 -0400525 "$Q_PROTOCOL://$SERVICE_HOST:$Q_PORT/" \
526 "$Q_PROTOCOL://$SERVICE_HOST:$Q_PORT/" \
527 "$Q_PROTOCOL://$SERVICE_HOST:$Q_PORT/"
Mark McClainb05c8762013-07-06 23:29:39 -0400528 fi
529 fi
530}
531
Ian Wienandaee18c72014-02-21 15:35:08 +1100532function create_neutron_initial_network {
Steve Martinelli19685422014-01-24 13:02:26 -0600533 TENANT_ID=$(openstack project list | grep " demo " | get_field 1)
DennyZhang23178a92013-10-22 17:07:32 -0500534 die_if_not_set $LINENO TENANT_ID "Failure retrieving TENANT_ID for demo"
Mark McClainb05c8762013-07-06 23:29:39 -0400535
Robd06a6d92014-12-04 20:32:22 +0000536 # Allow drivers that need to create an initial network to do so here
537 if type -p neutron_plugin_create_initial_network_profile > /dev/null; then
538 neutron_plugin_create_initial_network_profile $PHYSICAL_NETWORK
539 fi
540
Sean Dague2f8e08b2014-12-05 08:31:16 -0500541 if is_provider_network; then
Satoru Moriyaaf9b2512014-09-01 20:43:08 +0900542 die_if_not_set $LINENO PHYSICAL_NETWORK "You must specify the PHYSICAL_NETWORK"
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400543 die_if_not_set $LINENO PROVIDER_NETWORK_TYPE "You must specifiy the PROVIDER_NETWORK_TYPE"
Satoru Moriyaaf9b2512014-09-01 20:43:08 +0900544 NET_ID=$(neutron net-create $PHYSICAL_NETWORK --tenant_id $TENANT_ID --provider:network_type $PROVIDER_NETWORK_TYPE --provider:physical_network "$PHYSICAL_NETWORK" ${SEGMENTATION_ID:+--provider:segmentation_id $SEGMENTATION_ID} --shared | grep ' id ' | get_field 2)
Zhongyue Luo2548e6f2014-12-18 15:57:31 +0800545
546 if [[ "$IP_VERSION" =~ 4.* ]]; then
547 SUBNET_ID=$(neutron subnet-create --tenant_id $TENANT_ID --ip_version 4 ${ALLOCATION_POOL:+--allocation-pool $ALLOCATION_POOL} --name $PROVIDER_SUBNET_NAME --gateway $NETWORK_GATEWAY $NET_ID $FIXED_RANGE | grep ' id ' | get_field 2)
548 fi
549
550 if [[ "$IP_VERSION" =~ .*6 ]]; then
551 SUBNET_V6_ID=$(neutron subnet-create --tenant_id $TENANT_ID --ip_version 6 --ipv6-address-mode slaac --gateway $V6_NETWORK_GATEWAY --name $PROVIDER_SUBNET_NAME_V6 $NET_ID $FIXED_RANGE_V6 | grep 'id' | get_field 2)
552 fi
553
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400554 sudo ip link set $OVS_PHYSICAL_BRIDGE up
555 sudo ip link set br-int up
556 sudo ip link set $PUBLIC_INTERFACE up
Mark McClainb05c8762013-07-06 23:29:39 -0400557 else
Dirk Mueller25049cd2014-01-09 13:53:52 +0100558 NET_ID=$(neutron net-create --tenant-id $TENANT_ID "$PRIVATE_NETWORK_NAME" | grep ' id ' | get_field 2)
DennyZhang23178a92013-10-22 17:07:32 -0500559 die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PHYSICAL_NETWORK $TENANT_ID"
John Davidge21529a52014-06-30 09:55:11 -0400560
561 if [[ "$IP_VERSION" =~ 4.* ]]; then
562 # Create IPv4 private subnet
563 SUBNET_ID=$(_neutron_create_private_subnet_v4)
564 fi
565
566 if [[ "$IP_VERSION" =~ .*6 ]]; then
567 # Create IPv6 private subnet
568 IPV6_SUBNET_ID=$(_neutron_create_private_subnet_v6)
569 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400570 fi
571
572 if [[ "$Q_L3_ENABLED" == "True" ]]; then
573 # Create a router, and add the private subnet as one of its interfaces
574 if [[ "$Q_L3_ROUTER_PER_TENANT" == "True" ]]; then
575 # create a tenant-owned router.
Dirk Mueller25049cd2014-01-09 13:53:52 +0100576 ROUTER_ID=$(neutron router-create --tenant-id $TENANT_ID $Q_ROUTER_NAME | grep ' id ' | get_field 2)
DennyZhang23178a92013-10-22 17:07:32 -0500577 die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $TENANT_ID $Q_ROUTER_NAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400578 else
579 # Plugin only supports creating a single router, which should be admin owned.
580 ROUTER_ID=$(neutron router-create $Q_ROUTER_NAME | grep ' id ' | get_field 2)
DennyZhang23178a92013-10-22 17:07:32 -0500581 die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $Q_ROUTER_NAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400582 fi
John Davidge21529a52014-06-30 09:55:11 -0400583
Mark McClainb05c8762013-07-06 23:29:39 -0400584 # Create an external network, and a subnet. Configure the external network as router gw
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900585 if [ "$Q_USE_PROVIDERNET_FOR_PUBLIC" = "True" ]; then
586 EXT_NET_ID=$(neutron net-create "$PUBLIC_NETWORK_NAME" -- --router:external=True --provider:network_type=flat --provider:physical_network=${PUBLIC_PHYSICAL_NETWORK} | grep ' id ' | get_field 2)
587 else
588 EXT_NET_ID=$(neutron net-create "$PUBLIC_NETWORK_NAME" -- --router:external=True | grep ' id ' | get_field 2)
589 fi
DennyZhang23178a92013-10-22 17:07:32 -0500590 die_if_not_set $LINENO EXT_NET_ID "Failure creating EXT_NET_ID for $PUBLIC_NETWORK_NAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400591
John Davidge21529a52014-06-30 09:55:11 -0400592 if [[ "$IP_VERSION" =~ 4.* ]]; then
593 # Configure router for IPv4 public access
594 _neutron_configure_router_v4
595 fi
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900596
John Davidge21529a52014-06-30 09:55:11 -0400597 if [[ "$IP_VERSION" =~ .*6 ]]; then
598 # Configure router for IPv6 public access
599 _neutron_configure_router_v6
Mark McClainb05c8762013-07-06 23:29:39 -0400600 fi
Sean Dague3bdb9222013-10-22 08:36:16 -0400601 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400602}
603
604# init_neutron() - Initialize databases, etc.
Ian Wienandaee18c72014-02-21 15:35:08 +1100605function init_neutron {
Ihar Hrachyshka157c84b2014-10-06 13:29:39 +0200606 recreate_database $Q_DB_NAME
Salvatore Orlandodd649882013-08-05 08:56:17 -0700607 # Run Neutron db migrations
608 $NEUTRON_BIN_DIR/neutron-db-manage --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE upgrade head
Doug Wiegleyf9512d62014-12-15 10:23:20 -0800609 for svc in fwaas lbaas vpnaas; do
610 if [ "$svc" = "vpnaas" ]; then
611 q_svc="q-vpn"
612 else
613 q_svc="q-$svc"
614 fi
615 if is_service_enabled $q_svc; then
616 $NEUTRON_BIN_DIR/neutron-db-manage --service $svc --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE upgrade head
617 fi
618 done
Mark McClainb05c8762013-07-06 23:29:39 -0400619}
620
621# install_neutron() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100622function install_neutron {
Mark McClainb05c8762013-07-06 23:29:39 -0400623 git_clone $NEUTRON_REPO $NEUTRON_DIR $NEUTRON_BRANCH
624 setup_develop $NEUTRON_DIR
Kyle Mestery20b839f2014-12-08 06:17:27 +0000625 if is_service_enabled q-fwaas; then
626 git_clone $NEUTRON_FWAAS_REPO $NEUTRON_FWAAS_DIR $NEUTRON_FWAAS_BRANCH
627 setup_develop $NEUTRON_FWAAS_DIR
628 fi
629 if is_service_enabled q-lbaas; then
630 git_clone $NEUTRON_LBAAS_REPO $NEUTRON_LBAAS_DIR $NEUTRON_LBAAS_BRANCH
631 setup_develop $NEUTRON_LBAAS_DIR
632 fi
633 if is_service_enabled q-vpn; then
634 git_clone $NEUTRON_VPNAAS_REPO $NEUTRON_VPNAAS_DIR $NEUTRON_VPNAAS_BRANCH
635 setup_develop $NEUTRON_VPNAAS_DIR
636 fi
Mate Lakat6df64892014-10-17 13:09:49 +0200637
638 if [ "$VIRT_DRIVER" == 'xenserver' ]; then
639 local dom0_ip
640 dom0_ip=$(echo "$XENAPI_CONNECTION_URL" | cut -d "/" -f 3-)
641
642 local ssh_dom0
643 ssh_dom0="sudo -u $DOMZERO_USER ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null root@$dom0_ip"
644
645 # Find where the plugins should go in dom0
646 local xen_functions
647 xen_functions=$(cat $TOP_DIR/tools/xen/functions)
648 local plugin_dir
649 plugin_dir=$($ssh_dom0 "$xen_functions; set -eux; xapi_plugin_location")
650
651 # install neutron plugins to dom0
652 tar -czf - -C $NEUTRON_DIR/neutron/plugins/openvswitch/agent/xenapi/etc/xapi.d/plugins/ ./ |
653 $ssh_dom0 "tar -xzf - -C $plugin_dir && chmod a+x $plugin_dir/*"
654 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400655}
656
657# install_neutronclient() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100658function install_neutronclient {
Sean Daguee08ab102014-11-13 17:09:28 -0500659 if use_library_from_git "python-neutronclient"; then
660 git_clone_by_name "python-neutronclient"
661 setup_dev_lib "python-neutronclient"
662 sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-neutronclient"]}/tools/,/etc/bash_completion.d/}neutron.bash_completion
Sean Dague5cb19062014-11-01 01:37:45 +0100663 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400664}
665
666# install_neutron_agent_packages() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100667function install_neutron_agent_packages {
Robert Li72b3e442014-07-17 15:04:52 -0400668 # radvd doesn't come with the OS. Install it if the l3 service is enabled.
669 if is_service_enabled q-l3; then
670 install_package radvd
671 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400672 # install packages that are specific to plugin agent(s)
673 if is_service_enabled q-agt q-dhcp q-l3; then
674 neutron_plugin_install_agent_packages
675 fi
676
677 if is_service_enabled q-lbaas; then
Sean Dague3bdb9222013-10-22 08:36:16 -0400678 neutron_agent_lbaas_install_agent_packages
Mark McClainb05c8762013-07-06 23:29:39 -0400679 fi
680}
681
682# Start running processes, including screen
Ian Wienandaee18c72014-02-21 15:35:08 +1100683function start_neutron_service_and_check {
Adam Gandelman7614d212014-08-11 14:27:50 -0700684 local cfg_file_options="$(determine_config_files neutron-server)"
Rob Crittenden18d47782014-03-19 17:47:42 -0400685 local service_port=$Q_PORT
686 local service_protocol=$Q_PROTOCOL
687 if is_service_enabled tls-proxy; then
688 service_port=$Q_PORT_INT
689 service_protocol="http"
690 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400691 # Start the Neutron service
Chris Dent2f27a0e2014-09-09 13:46:02 +0100692 run_process q-svc "python $NEUTRON_BIN_DIR/neutron-server $cfg_file_options"
Mark McClainb05c8762013-07-06 23:29:39 -0400693 echo "Waiting for Neutron to start..."
Rob Crittenden18d47782014-03-19 17:47:42 -0400694 if is_ssl_enabled_service "neutron"; then
695 ssl_ca="--ca-certificate=${SSL_BUNDLE_FILE}"
696 fi
697 if ! timeout $SERVICE_TIMEOUT sh -c "while ! wget ${ssl_ca} --no-proxy -q -O- $service_protocol://$Q_HOST:$service_port; do sleep 1; done"; then
Sean Dague3bdb9222013-10-22 08:36:16 -0400698 die $LINENO "Neutron did not start"
Mark McClainb05c8762013-07-06 23:29:39 -0400699 fi
Rob Crittenden18d47782014-03-19 17:47:42 -0400700 # Start proxy if enabled
701 if is_service_enabled tls-proxy; then
702 start_tls_proxy '*' $Q_PORT $Q_HOST $Q_PORT_INT &
703 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400704}
705
706# Start running processes, including screen
Ian Wienandaee18c72014-02-21 15:35:08 +1100707function start_neutron_agents {
Mark McClainb05c8762013-07-06 23:29:39 -0400708 # Start up the neutron agents if enabled
Chris Dent2f27a0e2014-09-09 13:46:02 +0100709 run_process q-agt "python $AGENT_BINARY --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE"
710 run_process q-dhcp "python $AGENT_DHCP_BINARY --config-file $NEUTRON_CONF --config-file=$Q_DHCP_CONF_FILE"
Nachi Ueno584750f2013-07-15 18:22:21 -0700711
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400712 if is_provider_network; then
Zhongyue Luo56b7efb2014-12-16 11:36:49 +0800713 sudo ovs-vsctl --no-wait -- --may-exist add-port $OVS_PHYSICAL_BRIDGE $PUBLIC_INTERFACE
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400714 sudo ip link set $OVS_PHYSICAL_BRIDGE up
715 sudo ip link set br-int up
716 sudo ip link set $PUBLIC_INTERFACE up
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700717 if is_ironic_hardware; then
718 for IP in $(ip addr show dev $PUBLIC_INTERFACE | grep ' inet ' | awk '{print $2}'); do
719 sudo ip addr del $IP dev $PUBLIC_INTERFACE
720 sudo ip addr add $IP dev $OVS_PHYSICAL_BRIDGE
721 done
722 sudo route add -net $FIXED_RANGE gw $NETWORK_GATEWAY dev $OVS_PHYSICAL_BRIDGE
723 fi
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400724 fi
725
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700726 if is_service_enabled q-vpn; then
Chris Dent2f27a0e2014-09-09 13:46:02 +0100727 run_process q-vpn "$AGENT_VPN_BINARY $(determine_config_files neutron-vpn-agent)"
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700728 else
Chris Dent2f27a0e2014-09-09 13:46:02 +0100729 run_process q-l3 "python $AGENT_L3_BINARY $(determine_config_files neutron-l3-agent)"
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700730 fi
731
Chris Dent2f27a0e2014-09-09 13:46:02 +0100732 run_process q-meta "python $AGENT_META_BINARY --config-file $NEUTRON_CONF --config-file=$Q_META_CONF_FILE"
Mark McClainb05c8762013-07-06 23:29:39 -0400733
734 if [ "$VIRT_DRIVER" = 'xenserver' ]; then
735 # For XenServer, start an agent for the domU openvswitch
Chris Dent2f27a0e2014-09-09 13:46:02 +0100736 run_process q-domua "python $AGENT_BINARY --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE.domU"
Mark McClainb05c8762013-07-06 23:29:39 -0400737 fi
738
739 if is_service_enabled q-lbaas; then
Chris Dent2f27a0e2014-09-09 13:46:02 +0100740 run_process q-lbaas "python $AGENT_LBAAS_BINARY --config-file $NEUTRON_CONF --config-file=$LBAAS_AGENT_CONF_FILENAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400741 fi
Emilien Macchi40546f72013-09-24 15:10:25 +0200742
743 if is_service_enabled q-metering; then
Chris Dent2f27a0e2014-09-09 13:46:02 +0100744 run_process q-metering "python $AGENT_METERING_BINARY --config-file $NEUTRON_CONF --config-file $METERING_AGENT_CONF_FILENAME"
Emilien Macchi40546f72013-09-24 15:10:25 +0200745 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400746}
747
748# stop_neutron() - Stop running processes (non-screen)
Ian Wienandaee18c72014-02-21 15:35:08 +1100749function stop_neutron {
Mark McClainb05c8762013-07-06 23:29:39 -0400750 if is_service_enabled q-dhcp; then
751 pid=$(ps aux | awk '/[d]nsmasq.+interface=(tap|ns-)/ { print $2 }')
752 [ ! -z "$pid" ] && sudo kill -9 $pid
753 fi
754 if is_service_enabled q-meta; then
Jakub Libosvar1f763282014-01-28 23:01:38 +0100755 sudo pkill -9 -f neutron-ns-metadata-proxy || :
Mark McClainb05c8762013-07-06 23:29:39 -0400756 fi
Akihiro Motokiedddb1f2013-12-09 20:21:06 +0900757
758 if is_service_enabled q-lbaas; then
759 neutron_lbaas_stop
760 fi
761 if is_service_enabled q-fwaas; then
762 neutron_fwaas_stop
763 fi
764 if is_service_enabled q-vpn; then
765 neutron_vpn_stop
766 fi
767 if is_service_enabled q-metering; then
768 neutron_metering_stop
769 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400770}
771
772# cleanup_neutron() - Remove residual data files, anything left over from previous
773# runs that a clean run would need to clean up
Ian Wienandaee18c72014-02-21 15:35:08 +1100774function cleanup_neutron {
gong yong sheng1eb4c6a2014-12-24 09:21:01 +0800775 if is_provider_network && is_ironic_hardware; then
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700776 for IP in $(ip addr show dev $OVS_PHYSICAL_BRIDGE | grep ' inet ' | awk '{print $2}'); do
777 sudo ip addr del $IP dev $OVS_PHYSICAL_BRIDGE
778 sudo ip addr add $IP dev $PUBLIC_INTERFACE
779 done
780 sudo route del -net $FIXED_RANGE gw $NETWORK_GATEWAY dev $OVS_PHYSICAL_BRIDGE
781 fi
782
Mark McClainb05c8762013-07-06 23:29:39 -0400783 if is_neutron_ovs_base_plugin; then
784 neutron_ovs_base_cleanup
785 fi
786
787 # delete all namespaces created by neutron
Brian Haleyeea76212014-06-27 11:45:50 -0400788 for ns in $(sudo ip netns list | grep -o -E '(qdhcp|qrouter|qlbaas|fip|snat)-[0-9a-f-]*'); do
Mark McClainb05c8762013-07-06 23:29:39 -0400789 sudo ip netns delete ${ns}
790 done
791}
792
793# _configure_neutron_common()
794# Set common config for all neutron server and agents.
795# This MUST be called before other ``_configure_neutron_*`` functions.
Ian Wienandaee18c72014-02-21 15:35:08 +1100796function _configure_neutron_common {
Mark McClainb05c8762013-07-06 23:29:39 -0400797 # Put config files in ``NEUTRON_CONF_DIR`` for everyone to find
798 if [[ ! -d $NEUTRON_CONF_DIR ]]; then
799 sudo mkdir -p $NEUTRON_CONF_DIR
800 fi
801 sudo chown $STACK_USER $NEUTRON_CONF_DIR
802
803 cp $NEUTRON_DIR/etc/neutron.conf $NEUTRON_CONF
804
805 # Set plugin-specific variables ``Q_DB_NAME``, ``Q_PLUGIN_CLASS``.
806 # For main plugin config file, set ``Q_PLUGIN_CONF_PATH``, ``Q_PLUGIN_CONF_FILENAME``.
807 # For addition plugin config files, set ``Q_PLUGIN_EXTRA_CONF_PATH``,
808 # ``Q_PLUGIN_EXTRA_CONF_FILES``. For example:
Adam Spierscb961592013-10-05 12:11:07 +0100809 #
Mark McClainb05c8762013-07-06 23:29:39 -0400810 # ``Q_PLUGIN_EXTRA_CONF_FILES=(file1, file2)``
811 neutron_plugin_configure_common
812
sbauzae2c4ee22013-08-29 17:29:46 +0200813 if [[ "$Q_PLUGIN_CONF_PATH" == '' || "$Q_PLUGIN_CONF_FILENAME" == '' || "$Q_PLUGIN_CLASS" == '' ]]; then
Mark McClainb05c8762013-07-06 23:29:39 -0400814 die $LINENO "Neutron plugin not set.. exiting"
815 fi
816
817 # If needed, move config file from ``$NEUTRON_DIR/etc/neutron`` to ``NEUTRON_CONF_DIR``
818 mkdir -p /$Q_PLUGIN_CONF_PATH
819 Q_PLUGIN_CONF_FILE=$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME
820 cp $NEUTRON_DIR/$Q_PLUGIN_CONF_FILE /$Q_PLUGIN_CONF_FILE
821
Ihar Hrachyshkab816e5d2014-07-21 13:53:50 +0200822 iniset $NEUTRON_CONF database connection `database_connection_url $Q_DB_NAME`
Mark McClainb05c8762013-07-06 23:29:39 -0400823 iniset $NEUTRON_CONF DEFAULT state_path $DATA_DIR/neutron
salvatoree4e535b2014-10-29 18:22:46 +0100824 iniset $NEUTRON_CONF DEFAULT use_syslog $SYSLOG
Mark McClainb05c8762013-07-06 23:29:39 -0400825 # If addition config files are set, make sure their path name is set as well
826 if [[ ${#Q_PLUGIN_EXTRA_CONF_FILES[@]} > 0 && $Q_PLUGIN_EXTRA_CONF_PATH == '' ]]; then
827 die $LINENO "Neutron additional plugin config not set.. exiting"
828 fi
829
830 # If additional config files exist, copy them over to neutron configuration
831 # directory
832 if [[ $Q_PLUGIN_EXTRA_CONF_PATH != '' ]]; then
Mark McClainb05c8762013-07-06 23:29:39 -0400833 local f
834 for (( f=0; $f < ${#Q_PLUGIN_EXTRA_CONF_FILES[@]}; f+=1 )); do
835 Q_PLUGIN_EXTRA_CONF_FILES[$f]=$Q_PLUGIN_EXTRA_CONF_PATH/${Q_PLUGIN_EXTRA_CONF_FILES[$f]}
Mark McClainb05c8762013-07-06 23:29:39 -0400836 done
837 fi
838
Joe Gordonbee5c502013-08-30 13:48:08 -0400839 if [ "$VIRT_DRIVER" = 'fake' ]; then
840 # Disable arbitrary limits
841 iniset $NEUTRON_CONF quotas quota_network -1
842 iniset $NEUTRON_CONF quotas quota_subnet -1
843 iniset $NEUTRON_CONF quotas quota_port -1
844 iniset $NEUTRON_CONF quotas quota_security_group -1
845 iniset $NEUTRON_CONF quotas quota_security_group_rule -1
846 fi
847
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700848 # Format logging
849 if [ "$LOG_COLOR" == "True" ] && [ "$SYSLOG" == "False" ]; then
Salvatore Orlandobc7f6432013-11-25 10:11:14 -0800850 setup_colorized_logging $NEUTRON_CONF DEFAULT project_id
venkata anil9b1df572015-01-15 07:38:22 +0000851 else
852 # Show user_name and project_name by default like in nova
853 iniset $NEUTRON_CONF DEFAULT logging_context_format_string "%(asctime)s.%(msecs)03d %(levelname)s %(name)s [%(request_id)s %(user_name)s %(project_name)s] %(instance)s%(message)s"
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700854 fi
855
Rob Crittenden18d47782014-03-19 17:47:42 -0400856 if is_service_enabled tls-proxy; then
857 # Set the service port for a proxy to take the original
858 iniset $NEUTRON_CONF DEFAULT bind_port "$Q_PORT_INT"
859 fi
860
861 if is_ssl_enabled_service "nova"; then
862 iniset $NEUTRON_CONF DEFAULT nova_ca_certificates_file "$SSL_BUNDLE_FILE"
863 fi
864
865 if is_ssl_enabled_service "neutron"; then
866 ensure_certificates NEUTRON
867
868 iniset $NEUTRON_CONF DEFAULT use_ssl True
869 iniset $NEUTRON_CONF DEFAULT ssl_cert_file "$NEUTRON_SSL_CERT"
870 iniset $NEUTRON_CONF DEFAULT ssl_key_file "$NEUTRON_SSL_KEY"
871 fi
872
Mark McClainb05c8762013-07-06 23:29:39 -0400873 _neutron_setup_rootwrap
874}
875
Ian Wienandaee18c72014-02-21 15:35:08 +1100876function _configure_neutron_debug_command {
Mark McClainb05c8762013-07-06 23:29:39 -0400877 if [[ "$Q_USE_DEBUG_COMMAND" != "True" ]]; then
878 return
879 fi
880
881 cp $NEUTRON_DIR/etc/l3_agent.ini $NEUTRON_TEST_CONFIG_FILE
882
883 iniset $NEUTRON_TEST_CONFIG_FILE DEFAULT verbose False
884 iniset $NEUTRON_TEST_CONFIG_FILE DEFAULT debug False
885 iniset $NEUTRON_TEST_CONFIG_FILE DEFAULT use_namespaces $Q_USE_NAMESPACE
Mark McClainb05c8762013-07-06 23:29:39 -0400886 iniset $NEUTRON_TEST_CONFIG_FILE agent root_helper "$Q_RR_COMMAND"
887
Mark McClainb05c8762013-07-06 23:29:39 -0400888 _neutron_setup_interface_driver $NEUTRON_TEST_CONFIG_FILE
889
890 neutron_plugin_configure_debug_command
891}
892
Ian Wienandaee18c72014-02-21 15:35:08 +1100893function _configure_neutron_dhcp_agent {
Mark McClainb05c8762013-07-06 23:29:39 -0400894
895 cp $NEUTRON_DIR/etc/dhcp_agent.ini $Q_DHCP_CONF_FILE
896
897 iniset $Q_DHCP_CONF_FILE DEFAULT verbose True
Ben Nemec03997942013-08-10 09:56:16 -0500898 iniset $Q_DHCP_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Mark McClainb05c8762013-07-06 23:29:39 -0400899 iniset $Q_DHCP_CONF_FILE DEFAULT use_namespaces $Q_USE_NAMESPACE
900 iniset $Q_DHCP_CONF_FILE DEFAULT root_helper "$Q_RR_COMMAND"
901
Tan Lin27a196e2014-10-31 15:44:34 +0800902 if ! is_service_enabled q-l3; then
903 if [[ "$ENABLE_ISOLATED_METADATA" = "True" ]]; then
904 iniset $Q_DHCP_CONF_FILE DEFAULT enable_isolated_metadata $ENABLE_ISOLATED_METADATA
905 iniset $Q_DHCP_CONF_FILE DEFAULT enable_metadata_network $ENABLE_METADATA_NETWORK
906 else
907 if [[ "$ENABLE_METADATA_NETWORK" = "True" ]]; then
908 die "$LINENO" "Enable isolated metadata is a must for metadata network"
909 fi
910 fi
911 fi
912
Mark McClainb05c8762013-07-06 23:29:39 -0400913 _neutron_setup_interface_driver $Q_DHCP_CONF_FILE
914
915 neutron_plugin_configure_dhcp_agent
916}
917
Ian Wienandaee18c72014-02-21 15:35:08 +1100918function _configure_neutron_l3_agent {
Paul Michali746dcee2014-04-02 19:12:22 +0000919 local cfg_file
Mark McClainb05c8762013-07-06 23:29:39 -0400920 Q_L3_ENABLED=True
921 # for l3-agent, only use per tenant router if we have namespaces
922 Q_L3_ROUTER_PER_TENANT=$Q_USE_NAMESPACE
Nachi Ueno69b3ff62013-06-07 10:28:33 -0700923
Paul Michali746dcee2014-04-02 19:12:22 +0000924 if is_service_enabled q-vpn; then
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +0100925 cp $NEUTRON_VPNAAS_DIR/etc/vpn_agent.ini $Q_VPN_CONF_FILE
Paul Michali746dcee2014-04-02 19:12:22 +0000926 fi
927
Mark McClainb05c8762013-07-06 23:29:39 -0400928 cp $NEUTRON_DIR/etc/l3_agent.ini $Q_L3_CONF_FILE
929
930 iniset $Q_L3_CONF_FILE DEFAULT verbose True
Ben Nemec03997942013-08-10 09:56:16 -0500931 iniset $Q_L3_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Mark McClainb05c8762013-07-06 23:29:39 -0400932 iniset $Q_L3_CONF_FILE DEFAULT use_namespaces $Q_USE_NAMESPACE
933 iniset $Q_L3_CONF_FILE DEFAULT root_helper "$Q_RR_COMMAND"
934
Mark McClainb05c8762013-07-06 23:29:39 -0400935 _neutron_setup_interface_driver $Q_L3_CONF_FILE
936
937 neutron_plugin_configure_l3_agent
938}
939
Ian Wienandaee18c72014-02-21 15:35:08 +1100940function _configure_neutron_metadata_agent {
Mark McClainb05c8762013-07-06 23:29:39 -0400941 cp $NEUTRON_DIR/etc/metadata_agent.ini $Q_META_CONF_FILE
942
943 iniset $Q_META_CONF_FILE DEFAULT verbose True
Ben Nemec03997942013-08-10 09:56:16 -0500944 iniset $Q_META_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Mark McClainb05c8762013-07-06 23:29:39 -0400945 iniset $Q_META_CONF_FILE DEFAULT nova_metadata_ip $Q_META_DATA_IP
946 iniset $Q_META_CONF_FILE DEFAULT root_helper "$Q_RR_COMMAND"
947
Hirofumi Ichiharacc571552014-09-25 20:00:29 +0900948 # Configures keystone for metadata_agent
949 # The third argument "True" sets auth_url needed to communicate with keystone
950 _neutron_setup_keystone $Q_META_CONF_FILE DEFAULT True
Maru Newbybf10ac52013-08-10 21:27:54 +0000951
Mark McClainb05c8762013-07-06 23:29:39 -0400952}
953
Dina Belova58adaa62014-07-11 18:18:12 +0400954function _configure_neutron_ceilometer_notifications {
JordanPd4d4a342014-09-15 09:26:53 +0000955 iniset $NEUTRON_CONF DEFAULT notification_driver messaging
Dina Belova58adaa62014-07-11 18:18:12 +0400956}
957
Ian Wienandaee18c72014-02-21 15:35:08 +1100958function _configure_neutron_lbaas {
Mark McClainb05c8762013-07-06 23:29:39 -0400959 neutron_agent_lbaas_configure_common
960 neutron_agent_lbaas_configure_agent
961}
962
Ian Wienandaee18c72014-02-21 15:35:08 +1100963function _configure_neutron_metering {
Emilien Macchi40546f72013-09-24 15:10:25 +0200964 neutron_agent_metering_configure_common
965 neutron_agent_metering_configure_agent
966}
967
Ian Wienandaee18c72014-02-21 15:35:08 +1100968function _configure_neutron_fwaas {
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700969 neutron_fwaas_configure_common
970 neutron_fwaas_configure_driver
971}
972
Ian Wienandaee18c72014-02-21 15:35:08 +1100973function _configure_neutron_vpn {
Nachi Ueno69b3ff62013-06-07 10:28:33 -0700974 neutron_vpn_install_agent_packages
975 neutron_vpn_configure_common
Nachi Ueno69b3ff62013-06-07 10:28:33 -0700976}
977
Brian Haleyeea76212014-06-27 11:45:50 -0400978function _configure_dvr {
979 iniset $NEUTRON_CONF DEFAULT router_distributed True
980 iniset $Q_L3_CONF_FILE DEFAULT agent_mode $Q_DVR_MODE
981}
982
983
Mark McClainb05c8762013-07-06 23:29:39 -0400984# _configure_neutron_plugin_agent() - Set config files for neutron plugin agent
985# It is called when q-agt is enabled.
Ian Wienandaee18c72014-02-21 15:35:08 +1100986function _configure_neutron_plugin_agent {
Mark McClainb05c8762013-07-06 23:29:39 -0400987 # Specify the default root helper prior to agent configuration to
988 # ensure that an agent's configuration can override the default
989 iniset /$Q_PLUGIN_CONF_FILE agent root_helper "$Q_RR_COMMAND"
990 iniset $NEUTRON_CONF DEFAULT verbose True
Ben Nemec03997942013-08-10 09:56:16 -0500991 iniset $NEUTRON_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Mark McClainb05c8762013-07-06 23:29:39 -0400992
993 # Configure agent for plugin
994 neutron_plugin_configure_plugin_agent
995}
996
997# _configure_neutron_service() - Set config files for neutron service
998# It is called when q-svc is enabled.
Ian Wienandaee18c72014-02-21 15:35:08 +1100999function _configure_neutron_service {
Mark McClainb05c8762013-07-06 23:29:39 -04001000 Q_API_PASTE_FILE=$NEUTRON_CONF_DIR/api-paste.ini
1001 Q_POLICY_FILE=$NEUTRON_CONF_DIR/policy.json
1002
1003 cp $NEUTRON_DIR/etc/api-paste.ini $Q_API_PASTE_FILE
1004 cp $NEUTRON_DIR/etc/policy.json $Q_POLICY_FILE
1005
Kevin Benton08a5fcc2014-07-18 16:06:12 -07001006 # allow neutron user to administer neutron to match neutron account
1007 sed -i 's/"context_is_admin": "role:admin"/"context_is_admin": "role:admin or user_name:neutron"/g' $Q_POLICY_FILE
1008
Mark McClainb05c8762013-07-06 23:29:39 -04001009 # Update either configuration file with plugin
1010 iniset $NEUTRON_CONF DEFAULT core_plugin $Q_PLUGIN_CLASS
1011
1012 if [[ $Q_SERVICE_PLUGIN_CLASSES != '' ]]; then
1013 iniset $NEUTRON_CONF DEFAULT service_plugins $Q_SERVICE_PLUGIN_CLASSES
1014 fi
1015
1016 iniset $NEUTRON_CONF DEFAULT verbose True
Ben Nemec03997942013-08-10 09:56:16 -05001017 iniset $NEUTRON_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Mark McClainb05c8762013-07-06 23:29:39 -04001018 iniset $NEUTRON_CONF DEFAULT policy_file $Q_POLICY_FILE
1019 iniset $NEUTRON_CONF DEFAULT allow_overlapping_ips $Q_ALLOW_OVERLAPPING_IP
1020
1021 iniset $NEUTRON_CONF DEFAULT auth_strategy $Q_AUTH_STRATEGY
1022 _neutron_setup_keystone $NEUTRON_CONF keystone_authtoken
1023
Aaron Rosencea32b12014-03-04 16:20:14 -08001024 # Configuration for neutron notifations to nova.
Terry Wilsonf06c4432014-05-20 10:54:51 -05001025 iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_status_changes $Q_NOTIFY_NOVA_PORT_STATUS_CHANGES
1026 iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_data_changes $Q_NOTIFY_NOVA_PORT_DATA_CHANGES
Aaron Rosencea32b12014-03-04 16:20:14 -08001027 iniset $NEUTRON_CONF DEFAULT nova_url "$NOVA_SERVICE_PROTOCOL://$NOVA_SERVICE_HOST:$NOVA_SERVICE_PORT/v2"
Dirk Mueller5ca261a2014-04-04 22:48:02 +02001028 iniset $NEUTRON_CONF DEFAULT nova_admin_username nova
Aaron Rosencea32b12014-03-04 16:20:14 -08001029 iniset $NEUTRON_CONF DEFAULT nova_admin_password $SERVICE_PASSWORD
1030 ADMIN_TENANT_ID=$(openstack project list | awk "/ service / { print \$2 }")
1031 iniset $NEUTRON_CONF DEFAULT nova_admin_tenant_id $ADMIN_TENANT_ID
1032 iniset $NEUTRON_CONF DEFAULT nova_admin_auth_url "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_AUTH_PORT/v2.0"
1033
Mark McClainb05c8762013-07-06 23:29:39 -04001034 # Configure plugin
1035 neutron_plugin_configure_service
1036}
1037
1038# Utility Functions
1039#------------------
1040
Isaku Yamahata9e136b42013-12-16 15:52:03 +09001041# _neutron_service_plugin_class_add() - add service plugin class
Ian Wienandaee18c72014-02-21 15:35:08 +11001042function _neutron_service_plugin_class_add {
Isaku Yamahata9e136b42013-12-16 15:52:03 +09001043 local service_plugin_class=$1
1044 if [[ $Q_SERVICE_PLUGIN_CLASSES == '' ]]; then
1045 Q_SERVICE_PLUGIN_CLASSES=$service_plugin_class
1046 elif [[ ! ,${Q_SERVICE_PLUGIN_CLASSES}, =~ ,${service_plugin_class}, ]]; then
1047 Q_SERVICE_PLUGIN_CLASSES="$Q_SERVICE_PLUGIN_CLASSES,$service_plugin_class"
1048 fi
1049}
1050
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +01001051# _neutron_deploy_rootwrap_filters() - deploy rootwrap filters to $Q_CONF_ROOTWRAP_D (owned by root).
1052function _neutron_deploy_rootwrap_filters {
1053 local srcdir=$1
1054 mkdir -p -m 755 $Q_CONF_ROOTWRAP_D
1055 sudo cp -pr $srcdir/etc/neutron/rootwrap.d/* $Q_CONF_ROOTWRAP_D/
1056 sudo chown -R root:root $Q_CONF_ROOTWRAP_D
1057 sudo chmod 644 $Q_CONF_ROOTWRAP_D/*
1058}
1059
Mark McClainb05c8762013-07-06 23:29:39 -04001060# _neutron_setup_rootwrap() - configure Neutron's rootwrap
Ian Wienandaee18c72014-02-21 15:35:08 +11001061function _neutron_setup_rootwrap {
Mark McClainb05c8762013-07-06 23:29:39 -04001062 if [[ "$Q_USE_ROOTWRAP" == "False" ]]; then
1063 return
1064 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001065 # Wipe any existing ``rootwrap.d`` files first
1066 Q_CONF_ROOTWRAP_D=$NEUTRON_CONF_DIR/rootwrap.d
1067 if [[ -d $Q_CONF_ROOTWRAP_D ]]; then
1068 sudo rm -rf $Q_CONF_ROOTWRAP_D
1069 fi
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +01001070
1071 _neutron_deploy_rootwrap_filters $NEUTRON_DIR
1072
Mark McClainb05c8762013-07-06 23:29:39 -04001073 # Set up ``rootwrap.conf``, pointing to ``$NEUTRON_CONF_DIR/rootwrap.d``
1074 # location moved in newer versions, prefer new location
1075 if test -r $NEUTRON_DIR/etc/neutron/rootwrap.conf; then
Sean Dague3bdb9222013-10-22 08:36:16 -04001076 sudo cp -p $NEUTRON_DIR/etc/neutron/rootwrap.conf $Q_RR_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001077 else
Sean Dague3bdb9222013-10-22 08:36:16 -04001078 sudo cp -p $NEUTRON_DIR/etc/rootwrap.conf $Q_RR_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001079 fi
1080 sudo sed -e "s:^filters_path=.*$:filters_path=$Q_CONF_ROOTWRAP_D:" -i $Q_RR_CONF_FILE
1081 sudo chown root:root $Q_RR_CONF_FILE
1082 sudo chmod 0644 $Q_RR_CONF_FILE
1083 # Specify ``rootwrap.conf`` as first parameter to neutron-rootwrap
1084 ROOTWRAP_SUDOER_CMD="$NEUTRON_ROOTWRAP $Q_RR_CONF_FILE *"
1085
1086 # Set up the rootwrap sudoers for neutron
1087 TEMPFILE=`mktemp`
Stephan Renatuse578eff2013-11-19 13:31:04 +01001088 echo "$STACK_USER ALL=(root) NOPASSWD: $ROOTWRAP_SUDOER_CMD" >$TEMPFILE
Mark McClainb05c8762013-07-06 23:29:39 -04001089 chmod 0440 $TEMPFILE
1090 sudo chown root:root $TEMPFILE
1091 sudo mv $TEMPFILE /etc/sudoers.d/neutron-rootwrap
1092
1093 # Update the root_helper
1094 iniset $NEUTRON_CONF agent root_helper "$Q_RR_COMMAND"
1095}
1096
1097# Configures keystone integration for neutron service and agents
Ian Wienandaee18c72014-02-21 15:35:08 +11001098function _neutron_setup_keystone {
Mark McClainb05c8762013-07-06 23:29:39 -04001099 local conf_file=$1
1100 local section=$2
Hirofumi Ichiharacc571552014-09-25 20:00:29 +09001101 local use_auth_url=$3
1102
1103 # Configures keystone for metadata_agent
1104 # metadata_agent needs auth_url to communicate with keystone
1105 if [[ "$use_auth_url" == "True" ]]; then
1106 iniset $conf_file $section auth_url $KEYSTONE_SERVICE_URI/v2.0
1107 fi
Jamie Lennox3561d7f2014-05-21 17:18:43 +10001108
Brant Knudson05952372014-09-19 17:22:22 -05001109 create_neutron_cache_dir
1110 configure_auth_token_middleware $conf_file $Q_ADMIN_USERNAME $NEUTRON_AUTH_CACHE_DIR $section
Mark McClainb05c8762013-07-06 23:29:39 -04001111}
1112
Ian Wienandaee18c72014-02-21 15:35:08 +11001113function _neutron_setup_interface_driver {
Mark McClainb05c8762013-07-06 23:29:39 -04001114
1115 # ovs_use_veth needs to be set before the plugin configuration
1116 # occurs to allow plugins to override the setting.
1117 iniset $1 DEFAULT ovs_use_veth $Q_OVS_USE_VETH
1118
1119 neutron_plugin_setup_interface_driver $1
1120}
1121
John Davidge21529a52014-06-30 09:55:11 -04001122# Create private IPv4 subnet
1123function _neutron_create_private_subnet_v4 {
1124 local subnet_params="--tenant-id $TENANT_ID "
1125 subnet_params+="--ip_version 4 "
1126 subnet_params+="--gateway $NETWORK_GATEWAY "
1127 subnet_params+="--name $PRIVATE_SUBNET_NAME "
1128 subnet_params+="$NET_ID $FIXED_RANGE"
1129 local subnet_id=$(neutron subnet-create $subnet_params | grep ' id ' | get_field 2)
1130 die_if_not_set $LINENO subnet_id "Failure creating private IPv4 subnet for $TENANT_ID"
1131 echo $subnet_id
1132}
1133
1134# Create private IPv6 subnet
1135function _neutron_create_private_subnet_v6 {
1136 die_if_not_set $LINENO IPV6_RA_MODE "IPV6 RA Mode not set"
1137 die_if_not_set $LINENO IPV6_ADDRESS_MODE "IPV6 Address Mode not set"
1138 local ipv6_modes="--ipv6-ra-mode $IPV6_RA_MODE --ipv6-address-mode $IPV6_ADDRESS_MODE"
1139 local subnet_params="--tenant-id $TENANT_ID "
1140 subnet_params+="--ip_version 6 "
1141 subnet_params+="--gateway $IPV6_PRIVATE_NETWORK_GATEWAY "
1142 subnet_params+="--name $IPV6_PRIVATE_SUBNET_NAME "
1143 subnet_params+="$NET_ID $FIXED_RANGE_V6 $ipv6_modes"
1144 local ipv6_subnet_id=$(neutron subnet-create $subnet_params | grep ' id ' | get_field 2)
1145 die_if_not_set $LINENO ipv6_subnet_id "Failure creating private IPv6 subnet for $TENANT_ID"
1146 echo $ipv6_subnet_id
1147}
1148
1149# Create public IPv4 subnet
1150function _neutron_create_public_subnet_v4 {
1151 local subnet_params+="--ip_version 4 "
1152 subnet_params+="${Q_FLOATING_ALLOCATION_POOL:+--allocation-pool $Q_FLOATING_ALLOCATION_POOL} "
1153 subnet_params+="--gateway $PUBLIC_NETWORK_GATEWAY "
1154 subnet_params+="--name $PUBLIC_SUBNET_NAME "
1155 subnet_params+="$EXT_NET_ID $FLOATING_RANGE "
1156 subnet_params+="-- --enable_dhcp=False"
1157 local id_and_ext_gw_ip=$(neutron subnet-create $subnet_params | grep -e 'gateway_ip' -e ' id ')
1158 die_if_not_set $LINENO id_and_ext_gw_ip "Failure creating public IPv4 subnet"
1159 echo $id_and_ext_gw_ip
1160}
1161
1162# Create public IPv6 subnet
1163function _neutron_create_public_subnet_v6 {
1164 local subnet_params="--ip_version 6 "
1165 subnet_params+="--gateway $IPV6_PUBLIC_NETWORK_GATEWAY "
1166 subnet_params+="--name $IPV6_PUBLIC_SUBNET_NAME "
1167 subnet_params+="$EXT_NET_ID $IPV6_PUBLIC_RANGE "
1168 subnet_params+="-- --enable_dhcp=False"
1169 local ipv6_id_and_ext_gw_ip=$(neutron subnet-create $subnet_params | grep -e 'gateway_ip' -e ' id ')
1170 die_if_not_set $LINENO ipv6_id_and_ext_gw_ip "Failure creating an IPv6 public subnet"
1171 echo $ipv6_id_and_ext_gw_ip
1172}
1173
1174# Configure neutron router for IPv4 public access
1175function _neutron_configure_router_v4 {
1176 neutron router-interface-add $ROUTER_ID $SUBNET_ID
1177 # Create a public subnet on the external network
1178 local id_and_ext_gw_ip=$(_neutron_create_public_subnet_v4 $EXT_NET_ID)
1179 local ext_gw_ip=$(echo $id_and_ext_gw_ip | get_field 2)
1180 PUB_SUBNET_ID=$(echo $id_and_ext_gw_ip | get_field 5)
1181 # Configure the external network as the default router gateway
1182 neutron router-gateway-set $ROUTER_ID $EXT_NET_ID
1183
1184 # This logic is specific to using the l3-agent for layer 3
1185 if is_service_enabled q-l3; then
1186 # Configure and enable public bridge
1187 if is_neutron_ovs_base_plugin && [[ "$Q_USE_NAMESPACE" = "True" ]]; then
1188 local ext_gw_interface=$(_neutron_get_ext_gw_interface)
1189 local cidr_len=${FLOATING_RANGE#*/}
1190 sudo ip addr add $ext_gw_ip/$cidr_len dev $ext_gw_interface
1191 sudo ip link set $ext_gw_interface up
1192 ROUTER_GW_IP=`neutron port-list -c fixed_ips -c device_owner | grep router_gateway | awk -F '"' -v subnet_id=$PUB_SUBNET_ID '$4 == subnet_id { print $8; }'`
1193 die_if_not_set $LINENO ROUTER_GW_IP "Failure retrieving ROUTER_GW_IP"
1194 sudo route add -net $FIXED_RANGE gw $ROUTER_GW_IP
1195 fi
1196 _neutron_set_router_id
1197 fi
1198}
1199
1200# Configure neutron router for IPv6 public access
1201function _neutron_configure_router_v6 {
1202 neutron router-interface-add $ROUTER_ID $IPV6_SUBNET_ID
1203 # Create a public subnet on the external network
1204 local ipv6_id_and_ext_gw_ip=$(_neutron_create_public_subnet_v6 $EXT_NET_ID)
1205 local ipv6_ext_gw_ip=$(echo $ipv6_id_and_ext_gw_ip | get_field 2)
1206 local ipv6_pub_subnet_id=$(echo $ipv6_id_and_ext_gw_ip | get_field 5)
1207
1208 # If the external network has not already been set as the default router
1209 # gateway when configuring an IPv4 public subnet, do so now
1210 if [[ "$IP_VERSION" == "6" ]]; then
1211 neutron router-gateway-set $ROUTER_ID $EXT_NET_ID
1212 fi
1213
1214 # This logic is specific to using the l3-agent for layer 3
1215 if is_service_enabled q-l3; then
1216 local ipv6_router_gw_port
1217 # Ensure IPv6 forwarding is enabled on the host
1218 sudo sysctl -w net.ipv6.conf.all.forwarding=1
1219 # Configure and enable public bridge
1220 if [[ "$IP_VERSION" = "6" ]]; then
1221 # Override global IPV6_ROUTER_GW_IP with the true value from neutron
1222 IPV6_ROUTER_GW_IP=`neutron port-list -c fixed_ips -c device_owner | grep router_gateway | awk -F '"' -v subnet_id=$ipv6_pub_subnet_id '$4 == subnet_id { print $8; }'`
1223 die_if_not_set $LINENO IPV6_ROUTER_GW_IP "Failure retrieving IPV6_ROUTER_GW_IP"
1224 ipv6_router_gw_port=`neutron port-list -c id -c fixed_ips -c device_owner | grep router_gateway | awk -F '"' -v subnet_id=$ipv6_pub_subnet_id '$4 == subnet_id { print $1; }' | awk -F ' | ' '{ print $2; }'`
1225 die_if_not_set $LINENO ipv6_router_gw_port "Failure retrieving ipv6_router_gw_port"
1226 else
1227 ipv6_router_gw_port=`neutron port-list -c id -c fixed_ips -c device_owner | grep router_gateway | awk -F '"' -v subnet_id=$PUB_SUBNET_ID '$4 == subnet_id { print $1; }' | awk -F ' | ' '{ print $2; }'`
1228 die_if_not_set $LINENO ipv6_router_gw_port "Failure retrieving ipv6_router_gw_port"
1229 fi
1230
1231 # The ovs_base_configure_l3_agent function flushes the public
1232 # bridge's ip addresses, so turn IPv6 support in the host off
1233 # and then on to recover the public bridge's link local address
1234 sudo sysctl -w net.ipv6.conf.${PUBLIC_BRIDGE}.disable_ipv6=1
1235 sudo sysctl -w net.ipv6.conf.${PUBLIC_BRIDGE}.disable_ipv6=0
Sean M. Collinsfc094652014-12-09 11:36:53 -07001236 if ! ip -6 addr show dev $PUBLIC_BRIDGE | grep 'scope global'; then
1237 # Create an IPv6 ULA address for PUBLIC_BRIDGE if one is not present
1238 IPV6_BRIDGE_ULA=`uuidgen | sed s/-//g | cut -c 23- | sed -e "s/\(..\)\(....\)\(....\)/\1:\2:\3/"`
1239 sudo ip -6 addr add fd$IPV6_BRIDGE_ULA::1 dev $PUBLIC_BRIDGE
1240 fi
1241
John Davidge21529a52014-06-30 09:55:11 -04001242 if is_neutron_ovs_base_plugin && [[ "$Q_USE_NAMESPACE" = "True" ]]; then
1243 local ext_gw_interface=$(_neutron_get_ext_gw_interface)
1244 local ipv6_cidr_len=${IPV6_PUBLIC_RANGE#*/}
1245
1246 # Define router_ns based on whether DVR is enabled
1247 local router_ns=qrouter
1248 if [[ "$Q_DVR_MODE" == "dvr_snat" ]]; then
1249 router_ns=snat
1250 fi
1251
1252 # Configure interface for public bridge
1253 sudo ip -6 addr add $ipv6_ext_gw_ip/$ipv6_cidr_len dev $ext_gw_interface
1254
1255 # Wait until layer 3 agent has configured the gateway port on
1256 # the public bridge, then add gateway address to the interface
1257 # TODO (john-davidge) Remove once l3-agent supports dual-stack
1258 if [[ "$IP_VERSION" == "4+6" ]]; then
1259 if ! timeout $GATEWAY_TIMEOUT sh -c "until sudo ip netns exec $router_ns-$ROUTER_ID ip addr show qg-${ipv6_router_gw_port:0:11} | grep $ROUTER_GW_IP; do sleep 1; done"; then
1260 die $LINENO "Timeout retrieving ROUTER_GW_IP"
1261 fi
1262 # Configure the gateway port with the public IPv6 adress
1263 sudo ip netns exec $router_ns-$ROUTER_ID ip -6 addr add $IPV6_ROUTER_GW_IP/$ipv6_cidr_len dev qg-${ipv6_router_gw_port:0:11}
1264 # Add a default IPv6 route to the neutron router as the
1265 # l3-agent does not add one in the dual-stack case
1266 sudo ip netns exec $router_ns-$ROUTER_ID ip -6 route replace default via $ipv6_ext_gw_ip dev qg-${ipv6_router_gw_port:0:11}
1267 fi
1268 sudo ip -6 route add $FIXED_RANGE_V6 via $IPV6_ROUTER_GW_IP dev $ext_gw_interface
1269 fi
1270 _neutron_set_router_id
1271 fi
1272}
1273
1274# Explicitly set router id in l3 agent configuration
1275function _neutron_set_router_id {
1276 if [[ "$Q_USE_NAMESPACE" == "False" ]]; then
1277 iniset $Q_L3_CONF_FILE DEFAULT router_id $ROUTER_ID
1278 fi
1279}
1280
1281# Get ext_gw_interface depending on value of Q_USE_PUBLIC_VETH
1282function _neutron_get_ext_gw_interface {
1283 if [[ "$Q_USE_PUBLIC_VETH" == "True" ]]; then
1284 echo $Q_PUBLIC_VETH_EX
1285 else
1286 # Disable in-band as we are going to use local port
1287 # to communicate with VMs
1288 sudo ovs-vsctl set Bridge $PUBLIC_BRIDGE \
1289 other_config:disable-in-band=true
1290 echo $PUBLIC_BRIDGE
1291 fi
1292}
1293
Mark McClainb05c8762013-07-06 23:29:39 -04001294# Functions for Neutron Exercises
1295#--------------------------------
1296
Ian Wienandaee18c72014-02-21 15:35:08 +11001297function delete_probe {
Mark McClainb05c8762013-07-06 23:29:39 -04001298 local from_net="$1"
1299 net_id=`_get_net_id $from_net`
1300 probe_id=`neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-list -c id -c network_id | grep $net_id | awk '{print $2}'`
1301 neutron-debug --os-tenant-name admin --os-username admin probe-delete $probe_id
1302}
1303
Ian Wienandaee18c72014-02-21 15:35:08 +11001304function setup_neutron_debug {
Mark McClainb05c8762013-07-06 23:29:39 -04001305 if [[ "$Q_USE_DEBUG_COMMAND" == "True" ]]; then
1306 public_net_id=`_get_net_id $PUBLIC_NETWORK_NAME`
1307 neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-create --device-owner compute $public_net_id
1308 private_net_id=`_get_net_id $PRIVATE_NETWORK_NAME`
1309 neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-create --device-owner compute $private_net_id
1310 fi
1311}
1312
Ian Wienandaee18c72014-02-21 15:35:08 +11001313function teardown_neutron_debug {
Mark McClainb05c8762013-07-06 23:29:39 -04001314 delete_probe $PUBLIC_NETWORK_NAME
1315 delete_probe $PRIVATE_NETWORK_NAME
1316}
1317
Ian Wienandaee18c72014-02-21 15:35:08 +11001318function _get_net_id {
Mark McClainb05c8762013-07-06 23:29:39 -04001319 neutron --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD net-list | grep $1 | awk '{print $2}'
1320}
1321
Ian Wienandaee18c72014-02-21 15:35:08 +11001322function _get_probe_cmd_prefix {
Mark McClainb05c8762013-07-06 23:29:39 -04001323 local from_net="$1"
1324 net_id=`_get_net_id $from_net`
1325 probe_id=`neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-list -c id -c network_id | grep $net_id | awk '{print $2}' | head -n 1`
1326 echo "$Q_RR_COMMAND ip netns exec qprobe-$probe_id"
1327}
1328
Ian Wienandaee18c72014-02-21 15:35:08 +11001329function _ping_check_neutron {
Mark McClainb05c8762013-07-06 23:29:39 -04001330 local from_net=$1
1331 local ip=$2
1332 local timeout_sec=$3
1333 local expected=${4:-"True"}
1334 local check_command=""
1335 probe_cmd=`_get_probe_cmd_prefix $from_net`
1336 if [[ "$expected" = "True" ]]; then
1337 check_command="while ! $probe_cmd ping -w 1 -c 1 $ip; do sleep 1; done"
1338 else
1339 check_command="while $probe_cmd ping -w 1 -c 1 $ip; do sleep 1; done"
1340 fi
1341 if ! timeout $timeout_sec sh -c "$check_command"; then
1342 if [[ "$expected" = "True" ]]; then
1343 die $LINENO "[Fail] Couldn't ping server"
1344 else
1345 die $LINENO "[Fail] Could ping server"
1346 fi
1347 fi
1348}
1349
1350# ssh check
Ian Wienandaee18c72014-02-21 15:35:08 +11001351function _ssh_check_neutron {
Mark McClainb05c8762013-07-06 23:29:39 -04001352 local from_net=$1
1353 local key_file=$2
1354 local ip=$3
1355 local user=$4
1356 local timeout_sec=$5
1357 local probe_cmd = ""
1358 probe_cmd=`_get_probe_cmd_prefix $from_net`
1359 if ! timeout $timeout_sec sh -c "while ! $probe_cmd ssh -o StrictHostKeyChecking=no -i $key_file ${user}@$ip echo success; do sleep 1; done"; then
1360 die $LINENO "server didn't become ssh-able!"
1361 fi
1362}
1363
1364# Neutron 3rd party programs
1365#---------------------------
1366
1367# please refer to ``lib/neutron_thirdparty/README.md`` for details
1368NEUTRON_THIRD_PARTIES=""
1369for f in $TOP_DIR/lib/neutron_thirdparty/*; do
Sean Dague3bdb9222013-10-22 08:36:16 -04001370 third_party=$(basename $f)
1371 if is_service_enabled $third_party; then
1372 source $TOP_DIR/lib/neutron_thirdparty/$third_party
1373 NEUTRON_THIRD_PARTIES="$NEUTRON_THIRD_PARTIES,$third_party"
1374 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001375done
1376
Ian Wienandaee18c72014-02-21 15:35:08 +11001377function _neutron_third_party_do {
Mark McClainb05c8762013-07-06 23:29:39 -04001378 for third_party in ${NEUTRON_THIRD_PARTIES//,/ }; do
1379 ${1}_${third_party}
1380 done
1381}
1382
1383# configure_neutron_third_party() - Set config files, create data dirs, etc
Ian Wienandaee18c72014-02-21 15:35:08 +11001384function configure_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001385 _neutron_third_party_do configure
1386}
1387
1388# init_neutron_third_party() - Initialize databases, etc.
Ian Wienandaee18c72014-02-21 15:35:08 +11001389function init_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001390 _neutron_third_party_do init
1391}
1392
1393# install_neutron_third_party() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +11001394function install_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001395 _neutron_third_party_do install
1396}
1397
1398# start_neutron_third_party() - Start running processes, including screen
Ian Wienandaee18c72014-02-21 15:35:08 +11001399function start_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001400 _neutron_third_party_do start
1401}
1402
1403# stop_neutron_third_party - Stop running processes (non-screen)
Ian Wienandaee18c72014-02-21 15:35:08 +11001404function stop_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001405 _neutron_third_party_do stop
1406}
1407
armando-migliaccioef1e0802014-01-02 16:33:53 -08001408# check_neutron_third_party_integration() - Check that third party integration is sane
Ian Wienandaee18c72014-02-21 15:35:08 +11001409function check_neutron_third_party_integration {
armando-migliaccioef1e0802014-01-02 16:33:53 -08001410 _neutron_third_party_do check
1411}
1412
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -04001413function is_provider_network {
1414 if [ "$Q_USE_PROVIDER_NETWORKING" == "True" ] && [ "$Q_L3_ENABLED" == "False" ]; then
1415 return 0
1416 fi
1417 return 1
1418}
1419
Mark McClainb05c8762013-07-06 23:29:39 -04001420
1421# Restore xtrace
1422$XTRACE
1423
Adam Spiers6a5aa7c2013-10-24 11:27:02 +01001424# Tell emacs to use shell-script-mode
1425## Local variables:
1426## mode: shell-script
1427## End: