blob: 4aa63890bd52d6dde6849dd068f6d363ab1aa3c5 [file] [log] [blame]
Sean Daguee263c822014-12-05 14:25:28 -05001#!/bin/bash
2#
Mark McClainb05c8762013-07-06 23:29:39 -04003# lib/neutron
Joe Gordon23946052014-01-15 21:42:32 +00004# functions - functions specific to neutron
Mark McClainb05c8762013-07-06 23:29:39 -04005
6# Dependencies:
7# ``functions`` file
8# ``DEST`` must be defined
Stephan Renatuse578eff2013-11-19 13:31:04 +01009# ``STACK_USER`` must be defined
Mark McClainb05c8762013-07-06 23:29:39 -040010
11# ``stack.sh`` calls the entry points in this order:
12#
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010013# - install_neutron_agent_packages
YAMAMOTO Takashi1a669dc2015-02-05 11:54:12 +090014# - install_neutronclient
15# - install_neutron
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010016# - install_neutron_third_party
17# - configure_neutron
18# - init_neutron
19# - configure_neutron_third_party
20# - init_neutron_third_party
21# - start_neutron_third_party
22# - create_nova_conf_neutron
23# - start_neutron_service_and_check
YAMAMOTO Takashi1a669dc2015-02-05 11:54:12 +090024# - check_neutron_third_party_integration
yunhong jiang0d6e9922014-10-10 06:12:47 -070025# - start_neutron_agents
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010026# - create_neutron_initial_network
27# - setup_neutron_debug
Mark McClainb05c8762013-07-06 23:29:39 -040028#
29# ``unstack.sh`` calls the entry points in this order:
30#
YAMAMOTO Takashi1a669dc2015-02-05 11:54:12 +090031# - teardown_neutron_debug
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010032# - stop_neutron
yunhong jiang0d6e9922014-10-10 06:12:47 -070033# - stop_neutron_third_party
34# - cleanup_neutron
Mark McClainb05c8762013-07-06 23:29:39 -040035
36# Functions in lib/neutron are classified into the following categories:
37#
38# - entry points (called from stack.sh or unstack.sh)
39# - internal functions
40# - neutron exercises
41# - 3rd party programs
42
43
44# Neutron Networking
45# ------------------
46
47# Make sure that neutron is enabled in ``ENABLED_SERVICES``. If you want
48# to run Neutron on this host, make sure that q-svc is also in
49# ``ENABLED_SERVICES``.
50#
Mark McClainb05c8762013-07-06 23:29:39 -040051# See "Neutron Network Configuration" below for additional variables
52# that must be set in localrc for connectivity across hosts with
53# Neutron.
54#
55# With Neutron networking the NETWORK_MANAGER variable is ignored.
Mark McClainb05c8762013-07-06 23:29:39 -040056
John Davidge21529a52014-06-30 09:55:11 -040057# Settings
58# --------
59
Mark McClainb05c8762013-07-06 23:29:39 -040060
61# Neutron Network Configuration
62# -----------------------------
63
John Davidge21529a52014-06-30 09:55:11 -040064# Subnet IP version
Sean M. Collins645114b2015-03-03 10:56:03 -050065IP_VERSION=${IP_VERSION:-"4+6"}
John Davidge21529a52014-06-30 09:55:11 -040066# Validate IP_VERSION
67if [[ $IP_VERSION != "4" ]] && [[ $IP_VERSION != "6" ]] && [[ $IP_VERSION != "4+6" ]]; then
68 die $LINENO "IP_VERSION must be either 4, 6, or 4+6"
69fi
Mark McClainb05c8762013-07-06 23:29:39 -040070# Gateway and subnet defaults, in case they are not customized in localrc
71NETWORK_GATEWAY=${NETWORK_GATEWAY:-10.0.0.1}
Salvatore Orlando90234ac2013-11-25 05:44:10 -080072PUBLIC_NETWORK_GATEWAY=${PUBLIC_NETWORK_GATEWAY:-172.24.4.1}
Mark McClainb05c8762013-07-06 23:29:39 -040073PRIVATE_SUBNET_NAME=${PRIVATE_SUBNET_NAME:-"private-subnet"}
74PUBLIC_SUBNET_NAME=${PUBLIC_SUBNET_NAME:-"public-subnet"}
75
Armando Migliaccio7dbcfae2016-02-19 14:43:42 -080076# Subnetpool defaults
77SUBNETPOOL_NAME=${SUBNETPOOL_NAME:-"shared-default-subnetpool"}
78
Assaf Mullerf5515402016-02-22 17:38:17 -050079SUBNETPOOL_PREFIX_V4=${SUBNETPOOL_PREFIX_V4:-10.0.0.0/8}
Armando Migliaccio7dbcfae2016-02-19 14:43:42 -080080SUBNETPOOL_PREFIX_V6=${SUBNETPOOL_PREFIX_V6:-2001:db8:8000::/48}
81
Assaf Mullerf5515402016-02-22 17:38:17 -050082SUBNETPOOL_SIZE_V4=${SUBNETPOOL_SIZE_V4:-24}
Armando Migliaccio7dbcfae2016-02-19 14:43:42 -080083SUBNETPOOL_SIZE_V6=${SUBNETPOOL_SIZE_V6:-64}
84
85
Rob Crittenden18d47782014-03-19 17:47:42 -040086if is_ssl_enabled_service "neutron" || is_service_enabled tls-proxy; then
87 Q_PROTOCOL="https"
88fi
89
John Davidge21529a52014-06-30 09:55:11 -040090# Generate 40-bit IPv6 Global ID to comply with RFC 4193
91IPV6_GLOBAL_ID=`uuidgen | sed s/-//g | cut -c 23- | sed -e "s/\(..\)\(....\)\(....\)/\1:\2:\3/"`
92
93# IPv6 gateway and subnet defaults, in case they are not customized in localrc
94IPV6_RA_MODE=${IPV6_RA_MODE:-slaac}
95IPV6_ADDRESS_MODE=${IPV6_ADDRESS_MODE:-slaac}
96IPV6_PUBLIC_SUBNET_NAME=${IPV6_PUBLIC_SUBNET_NAME:-ipv6-public-subnet}
97IPV6_PRIVATE_SUBNET_NAME=${IPV6_PRIVATE_SUBNET_NAME:-ipv6-private-subnet}
98FIXED_RANGE_V6=${FIXED_RANGE_V6:-fd$IPV6_GLOBAL_ID::/64}
99IPV6_PRIVATE_NETWORK_GATEWAY=${IPV6_PRIVATE_NETWORK_GATEWAY:-fd$IPV6_GLOBAL_ID::1}
Dane LeBlanca79e1012015-03-26 14:48:07 -0400100IPV6_PUBLIC_RANGE=${IPV6_PUBLIC_RANGE:-2001:db8::/64}
101IPV6_PUBLIC_NETWORK_GATEWAY=${IPV6_PUBLIC_NETWORK_GATEWAY:-2001:db8::2}
102IPV6_ROUTER_GW_IP=${IPV6_ROUTER_GW_IP:-2001:db8::1}
Rob Crittenden18d47782014-03-19 17:47:42 -0400103
Mark McClainb05c8762013-07-06 23:29:39 -0400104# Set up default directories
Sean Daguee08ab102014-11-13 17:09:28 -0500105GITDIR["python-neutronclient"]=$DEST/python-neutronclient
Sean Dague5cb19062014-11-01 01:37:45 +0100106
Doug Wiegley93e682c2015-03-03 10:31:30 -0700107
Mark McClainb05c8762013-07-06 23:29:39 -0400108NEUTRON_DIR=$DEST/neutron
Kyle Mestery20b839f2014-12-08 06:17:27 +0000109NEUTRON_FWAAS_DIR=$DEST/neutron-fwaas
Armando Migliacciob3f26cb2016-04-13 23:28:06 +0000110NEUTRON_LBAAS_DIR=$DEST/neutron-lbaas
Mark McClainb05c8762013-07-06 23:29:39 -0400111NEUTRON_AUTH_CACHE_DIR=${NEUTRON_AUTH_CACHE_DIR:-/var/cache/neutron}
112
113# Support entry points installation of console scripts
114if [[ -d $NEUTRON_DIR/bin/neutron-server ]]; then
115 NEUTRON_BIN_DIR=$NEUTRON_DIR/bin
Sean Dague3bdb9222013-10-22 08:36:16 -0400116else
117 NEUTRON_BIN_DIR=$(get_python_exec_prefix)
Mark McClainb05c8762013-07-06 23:29:39 -0400118fi
119
120NEUTRON_CONF_DIR=/etc/neutron
121NEUTRON_CONF=$NEUTRON_CONF_DIR/neutron.conf
122export NEUTRON_TEST_CONFIG_FILE=${NEUTRON_TEST_CONFIG_FILE:-"$NEUTRON_CONF_DIR/debug.ini"}
123
Armando Migliacciob3f26cb2016-04-13 23:28:06 +0000124# Default provider for load balancer service
125DEFAULT_LB_PROVIDER=LOADBALANCER:Haproxy:neutron_lbaas.services.loadbalancer.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver:default
126
Adam Gandelman7614d212014-08-11 14:27:50 -0700127# Agent binaries. Note, binary paths for other agents are set in per-service
128# scripts in lib/neutron_plugins/services/
129AGENT_DHCP_BINARY="$NEUTRON_BIN_DIR/neutron-dhcp-agent"
130AGENT_L3_BINARY=${AGENT_L3_BINARY:-"$NEUTRON_BIN_DIR/neutron-l3-agent"}
131AGENT_META_BINARY="$NEUTRON_BIN_DIR/neutron-metadata-agent"
132
133# Agent config files. Note, plugin-specific Q_PLUGIN_CONF_FILE is set and
134# loaded from per-plugin scripts in lib/neutron_plugins/
135Q_DHCP_CONF_FILE=$NEUTRON_CONF_DIR/dhcp_agent.ini
136Q_L3_CONF_FILE=$NEUTRON_CONF_DIR/l3_agent.ini
137Q_FWAAS_CONF_FILE=$NEUTRON_CONF_DIR/fwaas_driver.ini
Adam Gandelman7614d212014-08-11 14:27:50 -0700138Q_META_CONF_FILE=$NEUTRON_CONF_DIR/metadata_agent.ini
139
Henry Gessau0fc1cc22014-07-06 22:54:34 -0400140# Default name for Neutron database
141Q_DB_NAME=${Q_DB_NAME:-neutron}
Mark McClainb05c8762013-07-06 23:29:39 -0400142# Default Neutron Plugin
Kyle Mestery6d235002013-09-18 20:27:08 +0000143Q_PLUGIN=${Q_PLUGIN:-ml2}
Mark McClainb05c8762013-07-06 23:29:39 -0400144# Default Neutron Port
145Q_PORT=${Q_PORT:-9696}
Rob Crittenden18d47782014-03-19 17:47:42 -0400146# Default Neutron Internal Port when using TLS proxy
147Q_PORT_INT=${Q_PORT_INT:-19696}
Mark McClainb05c8762013-07-06 23:29:39 -0400148# Default Neutron Host
149Q_HOST=${Q_HOST:-$SERVICE_HOST}
Rob Crittenden18d47782014-03-19 17:47:42 -0400150# Default protocol
151Q_PROTOCOL=${Q_PROTOCOL:-$SERVICE_PROTOCOL}
Brian Haley180f5eb2015-06-16 13:14:31 -0400152# Default listen address
153Q_LISTEN_ADDRESS=${Q_LISTEN_ADDRESS:-$SERVICE_LISTEN_ADDRESS}
Mark McClainb05c8762013-07-06 23:29:39 -0400154# Default admin username
155Q_ADMIN_USERNAME=${Q_ADMIN_USERNAME:-neutron}
156# Default auth strategy
157Q_AUTH_STRATEGY=${Q_AUTH_STRATEGY:-keystone}
Mark McClainb05c8762013-07-06 23:29:39 -0400158# RHEL's support for namespaces requires using veths with ovs
159Q_OVS_USE_VETH=${Q_OVS_USE_VETH:-False}
160Q_USE_ROOTWRAP=${Q_USE_ROOTWRAP:-True}
Yuriy Taraday26623952014-07-16 17:41:53 +0400161Q_USE_ROOTWRAP_DAEMON=$(trueorfalse True Q_USE_ROOTWRAP_DAEMON)
Mark McClainb05c8762013-07-06 23:29:39 -0400162# Meta data IP
163Q_META_DATA_IP=${Q_META_DATA_IP:-$SERVICE_HOST}
164# Allow Overlapping IP among subnets
165Q_ALLOW_OVERLAPPING_IP=${Q_ALLOW_OVERLAPPING_IP:-True}
166# Use neutron-debug command
167Q_USE_DEBUG_COMMAND=${Q_USE_DEBUG_COMMAND:-False}
168# The name of the default q-l3 router
169Q_ROUTER_NAME=${Q_ROUTER_NAME:-router1}
Terry Wilsonf06c4432014-05-20 10:54:51 -0500170Q_NOTIFY_NOVA_PORT_STATUS_CHANGES=${Q_NOTIFY_NOVA_PORT_STATUS_CHANGES:-True}
171Q_NOTIFY_NOVA_PORT_DATA_CHANGES=${Q_NOTIFY_NOVA_PORT_DATA_CHANGES:-True}
Aaron Rosencea32b12014-03-04 16:20:14 -0800172VIF_PLUGGING_IS_FATAL=${VIF_PLUGGING_IS_FATAL:-True}
173VIF_PLUGGING_TIMEOUT=${VIF_PLUGGING_TIMEOUT:-300}
Edgar Magana7bce8fa2014-11-04 17:32:54 +0100174# Specify if the initial private and external networks should be created
175NEUTRON_CREATE_INITIAL_NETWORKS=${NEUTRON_CREATE_INITIAL_NETWORKS:-True}
Aaron Rosen4540d002013-10-24 13:59:33 -0700176
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400177## Provider Network Information
178PROVIDER_SUBNET_NAME=${PROVIDER_SUBNET_NAME:-"provider_net"}
John Kasperski50ce6262015-11-23 15:47:45 -0600179IPV6_PROVIDER_SUBNET_NAME=${IPV6_PROVIDER_SUBNET_NAME:-"provider_net_v6"}
180IPV6_PROVIDER_FIXED_RANGE=${IPV6_PROVIDER_FIXED_RANGE:-}
181IPV6_PROVIDER_NETWORK_GATEWAY=${IPV6_PROVIDER_NETWORK_GATEWAY:-}
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400182
Sean M. Collins64d5ecf2015-06-01 14:13:41 -0400183# Define the public bridge that will transmit traffic from VMs to the
184# physical network - used by both the OVS and Linux Bridge drivers.
185PUBLIC_BRIDGE=${PUBLIC_BRIDGE:-br-ex}
186
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900187# Use flat providernet for public network
188#
189# If Q_USE_PROVIDERNET_FOR_PUBLIC=True, use a flat provider network
190# for external interface of neutron l3-agent. In that case,
191# PUBLIC_PHYSICAL_NETWORK specifies provider:physical_network value
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900192# used for the network. In case of ofagent, you should add the
193# corresponding entry to your OFAGENT_PHYSICAL_INTERFACE_MAPPINGS.
194# For openvswitch agent, you should add the corresponding entry to
195# your OVS_BRIDGE_MAPPINGS.
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900196#
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900197# eg. (ofagent)
198# Q_USE_PROVIDERNET_FOR_PUBLIC=True
199# Q_USE_PUBLIC_VETH=True
200# PUBLIC_PHYSICAL_NETWORK=public
201# OFAGENT_PHYSICAL_INTERFACE_MAPPINGS=public:veth-pub-int
202#
203# eg. (openvswitch agent)
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900204# Q_USE_PROVIDERNET_FOR_PUBLIC=True
205# PUBLIC_PHYSICAL_NETWORK=public
206# OVS_BRIDGE_MAPPINGS=public:br-ex
207Q_USE_PROVIDERNET_FOR_PUBLIC=${Q_USE_PROVIDERNET_FOR_PUBLIC:-False}
208PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK:-public}
209
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900210# If Q_USE_PUBLIC_VETH=True, create and use a veth pair instead of
211# PUBLIC_BRIDGE. This is intended to be used with
212# Q_USE_PROVIDERNET_FOR_PUBLIC=True.
213Q_USE_PUBLIC_VETH=${Q_USE_PUBLIC_VETH:-False}
214Q_PUBLIC_VETH_EX=${Q_PUBLIC_VETH_EX:-veth-pub-ex}
215Q_PUBLIC_VETH_INT=${Q_PUBLIC_VETH_INT:-veth-pub-int}
216
Tomoe Sugiharaafbc6312013-11-14 20:02:47 +0000217# The next two variables are configured by plugin
218# e.g. _configure_neutron_l3_agent or lib/neutron_plugins/*
219#
220# The plugin supports L3.
221Q_L3_ENABLED=${Q_L3_ENABLED:-False}
222# L3 routers exist per tenant
Cedric Brandilyb814b532015-10-22 22:25:45 +0200223Q_L3_ROUTER_PER_TENANT=${Q_L3_ROUTER_PER_TENANT:-True}
Aaron Rosen4540d002013-10-24 13:59:33 -0700224
Mark McClainb05c8762013-07-06 23:29:39 -0400225# List of config file names in addition to the main plugin config file
226# See _configure_neutron_common() for details about setting it up
227declare -a Q_PLUGIN_EXTRA_CONF_FILES
228
Mark McClainb05c8762013-07-06 23:29:39 -0400229
Dean Troyere2907b42014-02-26 17:35:37 -0600230Q_RR_CONF_FILE=$NEUTRON_CONF_DIR/rootwrap.conf
231if [[ "$Q_USE_ROOTWRAP" == "False" ]]; then
232 Q_RR_COMMAND="sudo"
233else
234 NEUTRON_ROOTWRAP=$(get_rootwrap_location neutron)
235 Q_RR_COMMAND="sudo $NEUTRON_ROOTWRAP $Q_RR_CONF_FILE"
Yuriy Taraday26623952014-07-16 17:41:53 +0400236 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
237 Q_RR_DAEMON_COMMAND="sudo $NEUTRON_ROOTWRAP-daemon $Q_RR_CONF_FILE"
238 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400239fi
240
Brian Haleyeea76212014-06-27 11:45:50 -0400241
242# Distributed Virtual Router (DVR) configuration
243# Can be:
Dean Troyer3324f192014-09-18 09:26:39 -0500244# - ``legacy`` - No DVR functionality
245# - ``dvr_snat`` - Controller or single node DVR
246# - ``dvr`` - Compute node in multi-node DVR
247#
Brian Haleyeea76212014-06-27 11:45:50 -0400248Q_DVR_MODE=${Q_DVR_MODE:-legacy}
249if [[ "$Q_DVR_MODE" != "legacy" ]]; then
250 Q_ML2_PLUGIN_MECHANISM_DRIVERS=openvswitch,linuxbridge,l2population
251fi
252
Dean Troyere2907b42014-02-26 17:35:37 -0600253# Provider Network Configurations
254# --------------------------------
255
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900256# The following variables control the Neutron ML2 plugins' allocation
257# of tenant networks and availability of provider networks. If these
258# are not configured in ``localrc``, tenant networks will be local to
259# the host (with no remote connectivity), and no physical resources
260# will be available for the allocation of provider networks.
Dean Troyere2907b42014-02-26 17:35:37 -0600261
Attila Fazekas8feaf6c2014-07-27 20:47:04 +0200262# To disable tunnels (GRE or VXLAN) for tenant networks,
263# set to False in ``local.conf``.
264# GRE tunnels are only supported by the openvswitch.
265ENABLE_TENANT_TUNNELS=${ENABLE_TENANT_TUNNELS:-True}
Dean Troyere2907b42014-02-26 17:35:37 -0600266
267# If using GRE tunnels for tenant networks, specify the range of
268# tunnel IDs from which tenant networks are allocated. Can be
Atsushi SAKAIfe7b56c2015-11-13 17:06:16 +0900269# overridden in ``localrc`` in necessary.
Anant Patil3827dc02014-07-03 21:38:16 +0530270TENANT_TUNNEL_RANGES=${TENANT_TUNNEL_RANGES:-1:1000}
Dean Troyere2907b42014-02-26 17:35:37 -0600271
272# To use VLANs for tenant networks, set to True in localrc. VLANs
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900273# are supported by the ML2 plugins, requiring additional configuration
274# described below.
Dean Troyere2907b42014-02-26 17:35:37 -0600275ENABLE_TENANT_VLANS=${ENABLE_TENANT_VLANS:-False}
276
277# If using VLANs for tenant networks, set in ``localrc`` to specify
278# the range of VLAN VIDs from which tenant networks are
279# allocated. An external network switch must be configured to
280# trunk these VLANs between hosts for multi-host connectivity.
281#
282# Example: ``TENANT_VLAN_RANGE=1000:1999``
283TENANT_VLAN_RANGE=${TENANT_VLAN_RANGE:-}
284
285# If using VLANs for tenant networks, or if using flat or VLAN
286# provider networks, set in ``localrc`` to the name of the physical
287# network, and also configure ``OVS_PHYSICAL_BRIDGE`` for the
288# openvswitch agent or ``LB_PHYSICAL_INTERFACE`` for the linuxbridge
289# agent, as described below.
290#
291# Example: ``PHYSICAL_NETWORK=default``
292PHYSICAL_NETWORK=${PHYSICAL_NETWORK:-}
293
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900294# With the openvswitch agent, if using VLANs for tenant networks,
Dean Troyere2907b42014-02-26 17:35:37 -0600295# or if using flat or VLAN provider networks, set in ``localrc`` to
296# the name of the OVS bridge to use for the physical network. The
297# bridge will be created if it does not already exist, but a
298# physical interface must be manually added to the bridge as a
299# port for external connectivity.
300#
301# Example: ``OVS_PHYSICAL_BRIDGE=br-eth1``
302OVS_PHYSICAL_BRIDGE=${OVS_PHYSICAL_BRIDGE:-}
303
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900304# With the linuxbridge agent, if using VLANs for tenant networks,
Dean Troyere2907b42014-02-26 17:35:37 -0600305# or if using flat or VLAN provider networks, set in ``localrc`` to
306# the name of the network interface to use for the physical
307# network.
308#
309# Example: ``LB_PHYSICAL_INTERFACE=eth1``
310LB_PHYSICAL_INTERFACE=${LB_PHYSICAL_INTERFACE:-}
311
Edgar Magana6f335b92014-07-10 15:42:44 -0700312# When Neutron tunnels are enabled it is needed to specify the
313# IP address of the end point in the local server. This IP is set
314# by default to the same IP address that the HOST IP.
315# This variable can be used to specify a different end point IP address
316# Example: ``TUNNEL_ENDPOINT_IP=1.1.1.1``
317TUNNEL_ENDPOINT_IP=${TUNNEL_ENDPOINT_IP:-$HOST_IP}
318
Dean Troyere2907b42014-02-26 17:35:37 -0600319# With the openvswitch plugin, set to True in ``localrc`` to enable
320# provider GRE tunnels when ``ENABLE_TENANT_TUNNELS`` is False.
321#
322# Example: ``OVS_ENABLE_TUNNELING=True``
323OVS_ENABLE_TUNNELING=${OVS_ENABLE_TUNNELING:-$ENABLE_TENANT_TUNNELS}
324
Tan Lin27a196e2014-10-31 15:44:34 +0800325# Use DHCP agent for providing metadata service in the case of
326# without L3 agent (No Route Agent), set to True in localrc.
327ENABLE_ISOLATED_METADATA=${ENABLE_ISOLATED_METADATA:-False}
328
329# Add a static route as dhcp option, so the request to 169.254.169.254
330# will be able to reach through a route(DHCP agent)
331# This option require ENABLE_ISOLATED_METADATA = True
332ENABLE_METADATA_NETWORK=${ENABLE_METADATA_NETWORK:-False}
Mark McClainb05c8762013-07-06 23:29:39 -0400333# Neutron plugin specific functions
334# ---------------------------------
335
336# Please refer to ``lib/neutron_plugins/README.md`` for details.
Hirofumi Ichihara36daecd2015-07-23 17:50:40 +0900337if [ -f $TOP_DIR/lib/neutron_plugins/$Q_PLUGIN ]; then
338 source $TOP_DIR/lib/neutron_plugins/$Q_PLUGIN
339fi
Mark McClainb05c8762013-07-06 23:29:39 -0400340
Armando Migliacciob3f26cb2016-04-13 23:28:06 +0000341# Agent loadbalancer service plugin functions
342# -------------------------------------------
343
344# Hardcoding for 1 service plugin for now
345source $TOP_DIR/lib/neutron_plugins/services/loadbalancer
346
Emilien Macchi40546f72013-09-24 15:10:25 +0200347# Agent metering service plugin functions
348# -------------------------------------------
349
350# Hardcoding for 1 service plugin for now
351source $TOP_DIR/lib/neutron_plugins/services/metering
352
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700353# Firewall Service Plugin functions
Adam Spierscb961592013-10-05 12:11:07 +0100354# ---------------------------------
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700355source $TOP_DIR/lib/neutron_plugins/services/firewall
356
Mark McClainb05c8762013-07-06 23:29:39 -0400357# Use security group or not
358if has_neutron_plugin_security_group; then
359 Q_USE_SECGROUP=${Q_USE_SECGROUP:-True}
360else
361 Q_USE_SECGROUP=False
362fi
363
Dean Troyere2907b42014-02-26 17:35:37 -0600364# Save trace setting
Ian Wienand523f4882015-10-13 11:03:03 +1100365_XTRACE_NEUTRON=$(set +o | grep xtrace)
Dean Troyere2907b42014-02-26 17:35:37 -0600366set +o xtrace
367
368
Mark McClainb05c8762013-07-06 23:29:39 -0400369# Functions
370# ---------
371
Adam Gandelman7614d212014-08-11 14:27:50 -0700372function _determine_config_server {
373 local cfg_file
374 local opts="--config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE"
375 for cfg_file in ${Q_PLUGIN_EXTRA_CONF_FILES[@]}; do
Tom Patzig73467042016-04-19 17:02:34 +0200376 opts+=" --config-file $cfg_file"
Adam Gandelman7614d212014-08-11 14:27:50 -0700377 done
378 echo "$opts"
379}
380
Adam Gandelman7614d212014-08-11 14:27:50 -0700381function _determine_config_l3 {
382 local opts="--config-file $NEUTRON_CONF --config-file=$Q_L3_CONF_FILE"
383 if is_service_enabled q-fwaas; then
384 opts+=" --config-file $Q_FWAAS_CONF_FILE"
385 fi
386 echo "$opts"
387}
388
389# For services and agents that require it, dynamically construct a list of
390# --config-file arguments that are passed to the binary.
391function determine_config_files {
392 local opts=""
393 case "$1" in
394 "neutron-server") opts="$(_determine_config_server)" ;;
Adam Gandelman7614d212014-08-11 14:27:50 -0700395 "neutron-l3-agent") opts="$(_determine_config_l3)" ;;
396 esac
397 if [ -z "$opts" ] ; then
398 die $LINENO "Could not determine config files for $1."
399 fi
400 echo "$opts"
401}
402
Dean Troyere4fa7212014-01-15 15:04:49 -0600403# Test if any Neutron services are enabled
404# is_neutron_enabled
405function is_neutron_enabled {
406 [[ ,${ENABLED_SERVICES} =~ ,"q-" ]] && return 0
407 return 1
408}
409
Mark McClainb05c8762013-07-06 23:29:39 -0400410# configure_neutron()
411# Set common config for all neutron server and agents.
Ian Wienandaee18c72014-02-21 15:35:08 +1100412function configure_neutron {
Mark McClainb05c8762013-07-06 23:29:39 -0400413 _configure_neutron_common
Brant Knudson2dd110c2015-03-14 12:39:14 -0500414 iniset_rpc_backend neutron $NEUTRON_CONF
Mark McClainb05c8762013-07-06 23:29:39 -0400415
416 # goes before q-svc to init Q_SERVICE_PLUGIN_CLASSES
Armando Migliacciob3f26cb2016-04-13 23:28:06 +0000417 if is_service_enabled q-lbaas; then
418 deprecated "Configuring q-lbaas through devstack is deprecated"
419 _configure_neutron_lbaas
420 fi
Emilien Macchi40546f72013-09-24 15:10:25 +0200421 if is_service_enabled q-metering; then
422 _configure_neutron_metering
423 fi
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700424 if is_service_enabled q-fwaas; then
Sean Dagued6f92232016-02-09 06:34:36 -0500425 deprecated "Configuring q-fwaas through devstack is deprecated"
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700426 _configure_neutron_fwaas
427 fi
Stephen Ma9b38eb22014-04-02 02:13:09 +0000428 if is_service_enabled q-agt q-svc; then
Mark McClainb05c8762013-07-06 23:29:39 -0400429 _configure_neutron_service
430 fi
431 if is_service_enabled q-agt; then
432 _configure_neutron_plugin_agent
433 fi
434 if is_service_enabled q-dhcp; then
435 _configure_neutron_dhcp_agent
436 fi
437 if is_service_enabled q-l3; then
438 _configure_neutron_l3_agent
439 fi
440 if is_service_enabled q-meta; then
441 _configure_neutron_metadata_agent
442 fi
443
Brian Haleyeea76212014-06-27 11:45:50 -0400444 if [[ "$Q_DVR_MODE" != "legacy" ]]; then
445 _configure_dvr
446 fi
Dina Belova58adaa62014-07-11 18:18:12 +0400447 if is_service_enabled ceilometer; then
448 _configure_neutron_ceilometer_notifications
449 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400450
451 _configure_neutron_debug_command
armando-migliaccioe155b892015-06-12 08:55:02 -0700452
453 iniset $NEUTRON_CONF DEFAULT api_workers "$API_WORKERS"
Mark McClainb05c8762013-07-06 23:29:39 -0400454}
455
Ian Wienandaee18c72014-02-21 15:35:08 +1100456function create_nova_conf_neutron {
Sean Daguef21cc1f2016-03-04 11:08:32 -0500457 iniset $NOVA_CONF DEFAULT use_neutron True
Matthew Kassawara28af7962016-02-10 19:04:08 +0000458 iniset $NOVA_CONF neutron auth_type "password"
Jamie Lennox394968f2015-08-28 09:18:26 +1000459 iniset $NOVA_CONF neutron auth_url "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_AUTH_PORT/v3"
460 iniset $NOVA_CONF neutron username "$Q_ADMIN_USERNAME"
461 iniset $NOVA_CONF neutron password "$SERVICE_PASSWORD"
Jamie Lennoxcbcbd8f2016-01-21 16:08:14 -0600462 iniset $NOVA_CONF neutron user_domain_name "$SERVICE_DOMAIN_NAME"
Sean Dague7580a0c2016-02-17 06:23:36 -0500463 iniset $NOVA_CONF neutron project_name "$SERVICE_PROJECT_NAME"
Jamie Lennoxcbcbd8f2016-01-21 16:08:14 -0600464 iniset $NOVA_CONF neutron project_domain_name "$SERVICE_DOMAIN_NAME"
Gary Kotton13d385e2014-06-17 23:24:53 -0700465 iniset $NOVA_CONF neutron auth_strategy "$Q_AUTH_STRATEGY"
Bartosz Górski0abde392014-02-28 14:15:19 +0100466 iniset $NOVA_CONF neutron region_name "$REGION_NAME"
Rob Crittenden18d47782014-03-19 17:47:42 -0400467 iniset $NOVA_CONF neutron url "${Q_PROTOCOL}://$Q_HOST:$Q_PORT"
Mark McClainb05c8762013-07-06 23:29:39 -0400468
469 if [[ "$Q_USE_SECGROUP" == "True" ]]; then
470 LIBVIRT_FIREWALL_DRIVER=nova.virt.firewall.NoopFirewallDriver
Jeff Peeler1143f7e2013-10-31 16:21:52 -0400471 iniset $NOVA_CONF DEFAULT firewall_driver $LIBVIRT_FIREWALL_DRIVER
Mark McClainb05c8762013-07-06 23:29:39 -0400472 fi
473
Matt Riedemann925c2562015-08-25 13:40:25 -0700474 # optionally set options in nova_conf
Mark McClainb05c8762013-07-06 23:29:39 -0400475 neutron_plugin_create_nova_conf
476
Mark McClainb05c8762013-07-06 23:29:39 -0400477 if is_service_enabled q-meta; then
Gary Kottondd745502014-08-11 23:38:47 -0700478 iniset $NOVA_CONF neutron service_metadata_proxy "True"
Mark McClainb05c8762013-07-06 23:29:39 -0400479 fi
Aaron Rosencea32b12014-03-04 16:20:14 -0800480
481 iniset $NOVA_CONF DEFAULT vif_plugging_is_fatal "$VIF_PLUGGING_IS_FATAL"
482 iniset $NOVA_CONF DEFAULT vif_plugging_timeout "$VIF_PLUGGING_TIMEOUT"
Mark McClainb05c8762013-07-06 23:29:39 -0400483}
484
Emilien Macchia677b7f2013-11-25 23:40:20 +0100485# create_neutron_cache_dir() - Part of the _neutron_setup_keystone() process
Ian Wienandaee18c72014-02-21 15:35:08 +1100486function create_neutron_cache_dir {
Emilien Macchia677b7f2013-11-25 23:40:20 +0100487 # Create cache dir
Dean Troyer8421c2b2015-03-16 13:52:19 -0500488 sudo install -d -o $STACK_USER $NEUTRON_AUTH_CACHE_DIR
Emilien Macchia677b7f2013-11-25 23:40:20 +0100489 rm -f $NEUTRON_AUTH_CACHE_DIR/*
490}
491
Mark McClainb05c8762013-07-06 23:29:39 -0400492# create_neutron_accounts() - Set up common required neutron accounts
493
494# Tenant User Roles
495# ------------------------------------------------------------------
496# service neutron admin # if enabled
497
498# Migrated from keystone_data.sh
Ian Wienandaee18c72014-02-21 15:35:08 +1100499function create_neutron_accounts {
Mark McClainb05c8762013-07-06 23:29:39 -0400500 if [[ "$ENABLED_SERVICES" =~ "q-svc" ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100501
Jamie Lennox85ff5322015-01-28 14:28:01 +1000502 create_service_user "neutron"
Bartosz Górski0abde392014-02-28 14:15:19 +0100503
Sean Dague985e9582016-02-10 07:25:24 -0500504 get_or_create_service "neutron" "network" "Neutron Service"
Matt Riedemannae4578b2016-04-23 01:45:40 +0000505 get_or_create_endpoint \
Sean Dague985e9582016-02-10 07:25:24 -0500506 "network" \
507 "$REGION_NAME" \
508 "$Q_PROTOCOL://$SERVICE_HOST:$Q_PORT/" \
509 "$Q_PROTOCOL://$SERVICE_HOST:$Q_PORT/" \
510 "$Q_PROTOCOL://$SERVICE_HOST:$Q_PORT/"
Mark McClainb05c8762013-07-06 23:29:39 -0400511 fi
512}
513
Ian Wienandaee18c72014-02-21 15:35:08 +1100514function create_neutron_initial_network {
Sean Dague0486a362016-04-04 09:17:01 -0400515 local project_id
516 project_id=$(openstack project list | grep " demo " | get_field 1)
517 die_if_not_set $LINENO project_id "Failure retrieving project_id for demo"
Mark McClainb05c8762013-07-06 23:29:39 -0400518
Robd06a6d92014-12-04 20:32:22 +0000519 # Allow drivers that need to create an initial network to do so here
520 if type -p neutron_plugin_create_initial_network_profile > /dev/null; then
521 neutron_plugin_create_initial_network_profile $PHYSICAL_NETWORK
522 fi
523
Sean Dague2f8e08b2014-12-05 08:31:16 -0500524 if is_provider_network; then
Satoru Moriyaaf9b2512014-09-01 20:43:08 +0900525 die_if_not_set $LINENO PHYSICAL_NETWORK "You must specify the PHYSICAL_NETWORK"
Atsushi SAKAIfe7b56c2015-11-13 17:06:16 +0900526 die_if_not_set $LINENO PROVIDER_NETWORK_TYPE "You must specify the PROVIDER_NETWORK_TYPE"
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300527 NET_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" net-create $PHYSICAL_NETWORK --tenant_id $project_id --provider:network_type $PROVIDER_NETWORK_TYPE --provider:physical_network "$PHYSICAL_NETWORK" ${SEGMENTATION_ID:+--provider:segmentation_id $SEGMENTATION_ID} --shared | grep ' id ' | get_field 2)
Sean Dague0486a362016-04-04 09:17:01 -0400528 die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PHYSICAL_NETWORK $project_id"
Zhongyue Luo2548e6f2014-12-18 15:57:31 +0800529
530 if [[ "$IP_VERSION" =~ 4.* ]]; then
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300531 SUBNET_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create --tenant_id $project_id --ip_version 4 ${ALLOCATION_POOL:+--allocation-pool $ALLOCATION_POOL} --name $PROVIDER_SUBNET_NAME --gateway $NETWORK_GATEWAY $NET_ID $FIXED_RANGE | grep ' id ' | get_field 2)
Sean Dague0486a362016-04-04 09:17:01 -0400532 die_if_not_set $LINENO SUBNET_ID "Failure creating SUBNET_ID for $PROVIDER_SUBNET_NAME $project_id"
Zhongyue Luo2548e6f2014-12-18 15:57:31 +0800533 fi
534
John Kasperski50ce6262015-11-23 15:47:45 -0600535 if [[ "$IP_VERSION" =~ .*6 ]] && [[ -n "$IPV6_PROVIDER_FIXED_RANGE" ]] && [[ -n "$IPV6_PROVIDER_NETWORK_GATEWAY" ]]; then
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300536 SUBNET_V6_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create --tenant_id $project_id --ip_version 6 --ipv6-address-mode $IPV6_ADDRESS_MODE --gateway $IPV6_PROVIDER_NETWORK_GATEWAY --name $IPV6_PROVIDER_SUBNET_NAME $NET_ID $IPV6_PROVIDER_FIXED_RANGE | grep 'id' | get_field 2)
Sean Dague0486a362016-04-04 09:17:01 -0400537 die_if_not_set $LINENO SUBNET_V6_ID "Failure creating SUBNET_V6_ID for $IPV6_PROVIDER_SUBNET_NAME $project_id"
Zhongyue Luo2548e6f2014-12-18 15:57:31 +0800538 fi
539
Kahou Leid663e292015-10-24 12:18:57 -0700540 if [[ $Q_AGENT == "openvswitch" ]]; then
541 sudo ip link set $OVS_PHYSICAL_BRIDGE up
542 sudo ip link set br-int up
543 sudo ip link set $PUBLIC_INTERFACE up
544 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400545 else
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300546 NET_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" net-create --tenant-id $project_id "$PRIVATE_NETWORK_NAME" | grep ' id ' | get_field 2)
Sean Dague0486a362016-04-04 09:17:01 -0400547 die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PRIVATE_NETWORK_NAME $project_id"
John Davidge21529a52014-06-30 09:55:11 -0400548
549 if [[ "$IP_VERSION" =~ 4.* ]]; then
550 # Create IPv4 private subnet
Sean Dague0486a362016-04-04 09:17:01 -0400551 SUBNET_ID=$(_neutron_create_private_subnet_v4 $project_id)
John Davidge21529a52014-06-30 09:55:11 -0400552 fi
553
554 if [[ "$IP_VERSION" =~ .*6 ]]; then
555 # Create IPv6 private subnet
Sean Dague0486a362016-04-04 09:17:01 -0400556 IPV6_SUBNET_ID=$(_neutron_create_private_subnet_v6 $project_id)
John Davidge21529a52014-06-30 09:55:11 -0400557 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400558 fi
559
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300560 AUTO_ALLOCATE_EXT=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" ext-list | grep 'auto-allocated-topology' | get_field 1)
561 SUBNETPOOL_EXT=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" ext-list | grep 'subnet_allocation' | get_field 1)
Mark McClainb05c8762013-07-06 23:29:39 -0400562 if [[ "$Q_L3_ENABLED" == "True" ]]; then
563 # Create a router, and add the private subnet as one of its interfaces
564 if [[ "$Q_L3_ROUTER_PER_TENANT" == "True" ]]; then
565 # create a tenant-owned router.
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300566 ROUTER_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-create --tenant-id $project_id $Q_ROUTER_NAME | grep ' id ' | get_field 2)
Sean Dague0486a362016-04-04 09:17:01 -0400567 die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $project_id $Q_ROUTER_NAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400568 else
569 # Plugin only supports creating a single router, which should be admin owned.
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300570 ROUTER_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-create $Q_ROUTER_NAME | grep ' id ' | get_field 2)
DennyZhang23178a92013-10-22 17:07:32 -0500571 die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $Q_ROUTER_NAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400572 fi
John Davidge21529a52014-06-30 09:55:11 -0400573
Armando Migliaccio7dbcfae2016-02-19 14:43:42 -0800574 # if the extension is available, then mark the external
575 # network as default, and provision default subnetpools
576 EXTERNAL_NETWORK_FLAGS="--router:external"
577 if [[ -n $AUTO_ALLOCATE_EXT && -n $SUBNETPOOL_EXT ]]; then
578 EXTERNAL_NETWORK_FLAGS="$EXTERNAL_NETWORK_FLAGS --is-default"
579 if [[ "$IP_VERSION" =~ 4.* ]]; then
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300580 SUBNETPOOL_V4_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnetpool-create $SUBNETPOOL_NAME --default-prefixlen $SUBNETPOOL_SIZE_V4 --pool-prefix $SUBNETPOOL_PREFIX_V4 --shared --is-default=True | grep ' id ' | get_field 2)
Armando Migliaccio7dbcfae2016-02-19 14:43:42 -0800581 fi
582 if [[ "$IP_VERSION" =~ .*6 ]]; then
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300583 SUBNETPOOL_V6_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnetpool-create $SUBNETPOOL_NAME --default-prefixlen $SUBNETPOOL_SIZE_V6 --pool-prefix $SUBNETPOOL_PREFIX_V6 --shared --is-default=True | grep ' id ' | get_field 2)
Armando Migliaccio7dbcfae2016-02-19 14:43:42 -0800584 fi
585 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400586 # Create an external network, and a subnet. Configure the external network as router gw
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900587 if [ "$Q_USE_PROVIDERNET_FOR_PUBLIC" = "True" ]; then
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300588 EXT_NET_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" net-create "$PUBLIC_NETWORK_NAME" -- $EXTERNAL_NETWORK_FLAGS --provider:network_type=flat --provider:physical_network=${PUBLIC_PHYSICAL_NETWORK} | grep ' id ' | get_field 2)
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900589 else
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300590 EXT_NET_ID=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" net-create "$PUBLIC_NETWORK_NAME" -- $EXTERNAL_NETWORK_FLAGS | grep ' id ' | get_field 2)
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900591 fi
DennyZhang23178a92013-10-22 17:07:32 -0500592 die_if_not_set $LINENO EXT_NET_ID "Failure creating EXT_NET_ID for $PUBLIC_NETWORK_NAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400593
John Davidge21529a52014-06-30 09:55:11 -0400594 if [[ "$IP_VERSION" =~ 4.* ]]; then
595 # Configure router for IPv4 public access
596 _neutron_configure_router_v4
597 fi
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900598
John Davidge21529a52014-06-30 09:55:11 -0400599 if [[ "$IP_VERSION" =~ .*6 ]]; then
600 # Configure router for IPv6 public access
601 _neutron_configure_router_v6
Mark McClainb05c8762013-07-06 23:29:39 -0400602 fi
Sean Dague3bdb9222013-10-22 08:36:16 -0400603 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400604}
605
606# init_neutron() - Initialize databases, etc.
Ian Wienandaee18c72014-02-21 15:35:08 +1100607function init_neutron {
Ihar Hrachyshka157c84b2014-10-06 13:29:39 +0200608 recreate_database $Q_DB_NAME
Salvatore Orlandodd649882013-08-05 08:56:17 -0700609 # Run Neutron db migrations
610 $NEUTRON_BIN_DIR/neutron-db-manage --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE upgrade head
Mark McClainb05c8762013-07-06 23:29:39 -0400611}
612
613# install_neutron() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100614function install_neutron {
Doug Wiegley86561c32016-02-10 18:37:21 -0700615 # Install neutron-lib from git so we make sure we're testing
616 # the latest code.
617 if use_library_from_git "neutron-lib"; then
618 git_clone_by_name "neutron-lib"
619 setup_dev_lib "neutron-lib"
620 fi
621
Mark McClainb05c8762013-07-06 23:29:39 -0400622 git_clone $NEUTRON_REPO $NEUTRON_DIR $NEUTRON_BRANCH
623 setup_develop $NEUTRON_DIR
Kyle Mestery20b839f2014-12-08 06:17:27 +0000624 if is_service_enabled q-fwaas; then
625 git_clone $NEUTRON_FWAAS_REPO $NEUTRON_FWAAS_DIR $NEUTRON_FWAAS_BRANCH
626 setup_develop $NEUTRON_FWAAS_DIR
627 fi
Armando Migliacciob3f26cb2016-04-13 23:28:06 +0000628 if is_service_enabled q-lbaas; then
629 git_clone $NEUTRON_LBAAS_REPO $NEUTRON_LBAAS_DIR $NEUTRON_LBAAS_BRANCH
630 setup_develop $NEUTRON_LBAAS_DIR
631 fi
Mate Lakat6df64892014-10-17 13:09:49 +0200632
633 if [ "$VIRT_DRIVER" == 'xenserver' ]; then
634 local dom0_ip
635 dom0_ip=$(echo "$XENAPI_CONNECTION_URL" | cut -d "/" -f 3-)
636
637 local ssh_dom0
638 ssh_dom0="sudo -u $DOMZERO_USER ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null root@$dom0_ip"
639
640 # Find where the plugins should go in dom0
641 local xen_functions
642 xen_functions=$(cat $TOP_DIR/tools/xen/functions)
643 local plugin_dir
644 plugin_dir=$($ssh_dom0 "$xen_functions; set -eux; xapi_plugin_location")
645
646 # install neutron plugins to dom0
Huan Xie201e3c12015-08-27 12:34:24 +0100647 tar -czf - -C $NEUTRON_DIR/neutron/plugins/ml2/drivers/openvswitch/agent/xenapi/etc/xapi.d/plugins/ ./ |
Mate Lakat6df64892014-10-17 13:09:49 +0200648 $ssh_dom0 "tar -xzf - -C $plugin_dir && chmod a+x $plugin_dir/*"
649 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400650}
651
652# install_neutronclient() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100653function install_neutronclient {
Sean Daguee08ab102014-11-13 17:09:28 -0500654 if use_library_from_git "python-neutronclient"; then
655 git_clone_by_name "python-neutronclient"
656 setup_dev_lib "python-neutronclient"
657 sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-neutronclient"]}/tools/,/etc/bash_completion.d/}neutron.bash_completion
Sean Dague5cb19062014-11-01 01:37:45 +0100658 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400659}
660
661# install_neutron_agent_packages() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100662function install_neutron_agent_packages {
Robert Li72b3e442014-07-17 15:04:52 -0400663 # radvd doesn't come with the OS. Install it if the l3 service is enabled.
664 if is_service_enabled q-l3; then
665 install_package radvd
666 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400667 # install packages that are specific to plugin agent(s)
668 if is_service_enabled q-agt q-dhcp q-l3; then
669 neutron_plugin_install_agent_packages
670 fi
Armando Migliacciob3f26cb2016-04-13 23:28:06 +0000671
672 if is_service_enabled q-lbaas; then
673 neutron_agent_lbaas_install_agent_packages
674 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400675}
676
677# Start running processes, including screen
Ian Wienandaee18c72014-02-21 15:35:08 +1100678function start_neutron_service_and_check {
Rob Crittenden18d47782014-03-19 17:47:42 -0400679 local service_port=$Q_PORT
680 local service_protocol=$Q_PROTOCOL
Ian Wienand7ae97292016-02-16 14:50:53 +1100681 local cfg_file_options
682
683 cfg_file_options="$(determine_config_files neutron-server)"
684
Rob Crittenden18d47782014-03-19 17:47:42 -0400685 if is_service_enabled tls-proxy; then
686 service_port=$Q_PORT_INT
687 service_protocol="http"
688 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400689 # Start the Neutron service
Davanum Srinivas59756e92015-09-23 17:42:54 -0400690 run_process q-svc "$NEUTRON_BIN_DIR/neutron-server $cfg_file_options"
Mark McClainb05c8762013-07-06 23:29:39 -0400691 echo "Waiting for Neutron to start..."
Rob Crittenden18d47782014-03-19 17:47:42 -0400692 if is_ssl_enabled_service "neutron"; then
693 ssl_ca="--ca-certificate=${SSL_BUNDLE_FILE}"
694 fi
Sean Dague442e4e92015-06-24 13:24:02 -0400695
696 local testcmd="wget ${ssl_ca} --no-proxy -q -O- $service_protocol://$Q_HOST:$service_port"
697 test_with_retry "$testcmd" "Neutron did not start" $SERVICE_TIMEOUT
698
Rob Crittenden18d47782014-03-19 17:47:42 -0400699 # Start proxy if enabled
700 if is_service_enabled tls-proxy; then
701 start_tls_proxy '*' $Q_PORT $Q_HOST $Q_PORT_INT &
702 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400703}
704
Russell Bryant09b94602015-06-08 15:25:43 -0400705# Control of the l2 agent is separated out to make it easier to test partial
706# upgrades (everything upgraded except the L2 agent)
707function start_neutron_l2_agent {
Davanum Srinivas59756e92015-09-23 17:42:54 -0400708 run_process q-agt "$AGENT_BINARY --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE"
Nachi Ueno584750f2013-07-15 18:22:21 -0700709
Kahou Leid663e292015-10-24 12:18:57 -0700710 if is_provider_network && [[ $Q_AGENT == "openvswitch" ]]; then
Zhongyue Luo56b7efb2014-12-16 11:36:49 +0800711 sudo ovs-vsctl --no-wait -- --may-exist add-port $OVS_PHYSICAL_BRIDGE $PUBLIC_INTERFACE
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400712 sudo ip link set $OVS_PHYSICAL_BRIDGE up
713 sudo ip link set br-int up
714 sudo ip link set $PUBLIC_INTERFACE up
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700715 if is_ironic_hardware; then
716 for IP in $(ip addr show dev $PUBLIC_INTERFACE | grep ' inet ' | awk '{print $2}'); do
717 sudo ip addr del $IP dev $PUBLIC_INTERFACE
718 sudo ip addr add $IP dev $OVS_PHYSICAL_BRIDGE
719 done
gong yong sheng348c6ac2015-06-23 14:03:47 +0800720 sudo ip route replace $FIXED_RANGE via $NETWORK_GATEWAY dev $OVS_PHYSICAL_BRIDGE
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700721 fi
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400722 fi
Russell Bryant09b94602015-06-08 15:25:43 -0400723}
724
725function start_neutron_other_agents {
Davanum Srinivas59756e92015-09-23 17:42:54 -0400726 run_process q-dhcp "$AGENT_DHCP_BINARY --config-file $NEUTRON_CONF --config-file=$Q_DHCP_CONF_FILE"
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400727
Paul Michalie4289c82015-08-14 11:49:27 -0400728 if is_service_enabled neutron-vpnaas; then
729 : # Started by plugin
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700730 else
Davanum Srinivas59756e92015-09-23 17:42:54 -0400731 run_process q-l3 "$AGENT_L3_BINARY $(determine_config_files neutron-l3-agent)"
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700732 fi
733
Davanum Srinivas59756e92015-09-23 17:42:54 -0400734 run_process q-meta "$AGENT_META_BINARY --config-file $NEUTRON_CONF --config-file=$Q_META_CONF_FILE"
Armando Migliacciob3f26cb2016-04-13 23:28:06 +0000735 run_process q-lbaas "$AGENT_LBAAS_BINARY --config-file $NEUTRON_CONF --config-file=$LBAAS_AGENT_CONF_FILENAME"
Davanum Srinivas59756e92015-09-23 17:42:54 -0400736 run_process q-metering "$AGENT_METERING_BINARY --config-file $NEUTRON_CONF --config-file $METERING_AGENT_CONF_FILENAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400737
738 if [ "$VIRT_DRIVER" = 'xenserver' ]; then
739 # For XenServer, start an agent for the domU openvswitch
Davanum Srinivas59756e92015-09-23 17:42:54 -0400740 run_process q-domua "$AGENT_BINARY --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE.domU"
Mark McClainb05c8762013-07-06 23:29:39 -0400741 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400742}
743
Russell Bryant09b94602015-06-08 15:25:43 -0400744# Start running processes, including screen
745function start_neutron_agents {
746 # Start up the neutron agents if enabled
747 start_neutron_l2_agent
748 start_neutron_other_agents
749}
750
751function stop_neutron_l2_agent {
752 stop_process q-agt
753}
754
755function stop_neutron_other {
Mark McClainb05c8762013-07-06 23:29:39 -0400756 if is_service_enabled q-dhcp; then
Chris Dent36891dc2015-02-03 16:22:44 +0000757 stop_process q-dhcp
Mark McClainb05c8762013-07-06 23:29:39 -0400758 pid=$(ps aux | awk '/[d]nsmasq.+interface=(tap|ns-)/ { print $2 }')
759 [ ! -z "$pid" ] && sudo kill -9 $pid
760 fi
Chris Dent36891dc2015-02-03 16:22:44 +0000761
762 stop_process q-svc
Li Maa15d9de2016-01-19 19:11:51 +0800763
764 if is_service_enabled q-l3; then
765 sudo pkill -f "radvd -C $DATA_DIR/neutron/ra"
766 stop_process q-l3
767 fi
Chris Dent36891dc2015-02-03 16:22:44 +0000768
Mark McClainb05c8762013-07-06 23:29:39 -0400769 if is_service_enabled q-meta; then
Jakub Libosvar1f763282014-01-28 23:01:38 +0100770 sudo pkill -9 -f neutron-ns-metadata-proxy || :
Chris Dent36891dc2015-02-03 16:22:44 +0000771 stop_process q-meta
Mark McClainb05c8762013-07-06 23:29:39 -0400772 fi
Akihiro Motokiedddb1f2013-12-09 20:21:06 +0900773
Armando Migliacciob3f26cb2016-04-13 23:28:06 +0000774 if is_service_enabled q-lbaas; then
775 neutron_lbaas_stop
776 fi
Akihiro Motokiedddb1f2013-12-09 20:21:06 +0900777 if is_service_enabled q-fwaas; then
778 neutron_fwaas_stop
779 fi
Akihiro Motokiedddb1f2013-12-09 20:21:06 +0900780 if is_service_enabled q-metering; then
781 neutron_metering_stop
782 fi
Li Ma50120fa2015-12-13 10:41:34 +0800783
784 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
785 sudo pkill -9 -f $NEUTRON_ROOTWRAP-daemon || :
786 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400787}
788
Russell Bryant09b94602015-06-08 15:25:43 -0400789# stop_neutron() - Stop running processes (non-screen)
790function stop_neutron {
791 stop_neutron_other
792 stop_neutron_l2_agent
793}
794
Sean M. Collins00e16a92015-02-20 11:45:21 -0500795# _move_neutron_addresses_route() - Move the primary IP to the OVS bridge
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600796# on startup, or back to the public interface on cleanup. If no IP is
797# configured on the interface, just add it as a port to the OVS bridge.
Sean M. Collins00e16a92015-02-20 11:45:21 -0500798function _move_neutron_addresses_route {
799 local from_intf=$1
800 local to_intf=$2
801 local add_ovs_port=$3
Brian Haleya0d1b012015-11-16 17:30:48 -0500802 local del_ovs_port=$4
803 local af=$5
Sean M. Collins00e16a92015-02-20 11:45:21 -0500804
805 if [[ -n "$from_intf" && -n "$to_intf" ]]; then
806 # Remove the primary IP address from $from_intf and add it to $to_intf,
807 # along with the default route, if it exists. Also, when called
808 # on configure we will also add $from_intf as a port on $to_intf,
809 # assuming it is an OVS bridge.
810
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600811 local IP_ADD=""
812 local IP_DEL=""
Shinobu KINJOf95315b2015-11-07 10:21:08 +0900813 local IP_UP=""
Ian Wienandada886d2015-10-07 14:06:26 +1100814 local DEFAULT_ROUTE_GW
Sean M. Collins59e86a32015-11-09 11:06:39 -0500815 DEFAULT_ROUTE_GW=$(ip -f $af r | awk "/default.+$from_intf/ { print \$3; exit }")
Sean M. Collins00e16a92015-02-20 11:45:21 -0500816 local ADD_OVS_PORT=""
Brian Haleya0d1b012015-11-16 17:30:48 -0500817 local DEL_OVS_PORT=""
Sean M. Collins00e16a92015-02-20 11:45:21 -0500818
Brian Haleybb9caea2015-11-16 17:18:42 -0500819 IP_BRD=$(ip -f $af a s dev $from_intf scope global primary | grep inet | awk '{ print $2, $3, $4; exit }')
Adam Kacmarsky11298a02015-06-26 14:49:47 -0600820
Sean M. Collins00e16a92015-02-20 11:45:21 -0500821 if [ "$DEFAULT_ROUTE_GW" != "" ]; then
Sean M. Collins59e86a32015-11-09 11:06:39 -0500822 ADD_DEFAULT_ROUTE="sudo ip -f $af r replace default via $DEFAULT_ROUTE_GW dev $to_intf"
Sean M. Collins00e16a92015-02-20 11:45:21 -0500823 fi
824
825 if [[ "$add_ovs_port" == "True" ]]; then
Raman Budnydb02bbf2015-03-31 13:09:09 +0300826 ADD_OVS_PORT="sudo ovs-vsctl --may-exist add-port $to_intf $from_intf"
Sean M. Collins00e16a92015-02-20 11:45:21 -0500827 fi
828
Brian Haleya0d1b012015-11-16 17:30:48 -0500829 if [[ "$del_ovs_port" == "True" ]]; then
830 DEL_OVS_PORT="sudo ovs-vsctl --if-exists del-port $from_intf $to_intf"
831 fi
832
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600833 if [[ "$IP_BRD" != "" ]]; then
Brian Haley94510212015-09-02 15:40:04 -0400834 IP_DEL="sudo ip addr del $IP_BRD dev $from_intf"
835 IP_ADD="sudo ip addr add $IP_BRD dev $to_intf"
Shinobu KINJOf95315b2015-11-07 10:21:08 +0900836 IP_UP="sudo ip link set $to_intf up"
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600837 fi
838
Brian Haleya0d1b012015-11-16 17:30:48 -0500839 # The add/del OVS port calls have to happen either before or
840 # after the address is moved in order to not leave it orphaned.
841 $DEL_OVS_PORT; $IP_DEL; $IP_ADD; $IP_UP; $ADD_OVS_PORT; $ADD_DEFAULT_ROUTE
Sean M. Collins00e16a92015-02-20 11:45:21 -0500842 fi
843}
844
Mark McClainb05c8762013-07-06 23:29:39 -0400845# cleanup_neutron() - Remove residual data files, anything left over from previous
846# runs that a clean run would need to clean up
Ian Wienandaee18c72014-02-21 15:35:08 +1100847function cleanup_neutron {
Sean M. Collins00e16a92015-02-20 11:45:21 -0500848
Yalei Wang316b3482015-07-15 21:00:31 +0800849 if [[ -n "$OVS_PHYSICAL_BRIDGE" ]]; then
Brian Haleya0d1b012015-11-16 17:30:48 -0500850 _move_neutron_addresses_route "$OVS_PHYSICAL_BRIDGE" "$PUBLIC_INTERFACE" False True "inet"
Adam Kacmarsky11298a02015-06-26 14:49:47 -0600851
Yalei Wang316b3482015-07-15 21:00:31 +0800852 if [[ $(ip -f inet6 a s dev "$OVS_PHYSICAL_BRIDGE" | grep -c 'global') != 0 ]]; then
Sean M. Collins790266f2015-11-11 13:36:35 -0500853 # ip(8) wants the prefix length when deleting
854 local v6_gateway
855 v6_gateway=$(ip -6 a s dev $OVS_PHYSICAL_BRIDGE | grep $IPV6_PUBLIC_NETWORK_GATEWAY | awk '{ print $2 }')
856 sudo ip -6 addr del $v6_gateway dev $OVS_PHYSICAL_BRIDGE
Brian Haleya0d1b012015-11-16 17:30:48 -0500857 _move_neutron_addresses_route "$OVS_PHYSICAL_BRIDGE" "$PUBLIC_INTERFACE" False False "inet6"
Yalei Wang316b3482015-07-15 21:00:31 +0800858 fi
Sean M. Collins00e16a92015-02-20 11:45:21 -0500859
Yalei Wang316b3482015-07-15 21:00:31 +0800860 if is_provider_network && is_ironic_hardware; then
861 for IP in $(ip addr show dev $OVS_PHYSICAL_BRIDGE | grep ' inet ' | awk '{print $2}'); do
862 sudo ip addr del $IP dev $OVS_PHYSICAL_BRIDGE
863 sudo ip addr add $IP dev $PUBLIC_INTERFACE
864 done
865 sudo route del -net $FIXED_RANGE gw $NETWORK_GATEWAY dev $OVS_PHYSICAL_BRIDGE
866 fi
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700867 fi
868
Mark McClainb05c8762013-07-06 23:29:39 -0400869 if is_neutron_ovs_base_plugin; then
870 neutron_ovs_base_cleanup
871 fi
872
Sean M. Collins7bc2af72015-06-08 12:36:30 -0400873 if [[ $Q_AGENT == "linuxbridge" ]]; then
874 neutron_lb_cleanup
875 fi
876
Mark McClainb05c8762013-07-06 23:29:39 -0400877 # delete all namespaces created by neutron
Armando Migliacciob3f26cb2016-04-13 23:28:06 +0000878 for ns in $(sudo ip netns list | grep -o -E '(qdhcp|qrouter|qlbaas|fip|snat)-[0-9a-f-]*'); do
Mark McClainb05c8762013-07-06 23:29:39 -0400879 sudo ip netns delete ${ns}
880 done
881}
882
Doug Wiegley93e682c2015-03-03 10:31:30 -0700883
Maru Newby952fd902015-01-30 22:27:12 +0000884function _create_neutron_conf_dir {
Mark McClainb05c8762013-07-06 23:29:39 -0400885 # Put config files in ``NEUTRON_CONF_DIR`` for everyone to find
Dean Troyer8421c2b2015-03-16 13:52:19 -0500886 sudo install -d -o $STACK_USER $NEUTRON_CONF_DIR
Maru Newby952fd902015-01-30 22:27:12 +0000887}
888
889# _configure_neutron_common()
890# Set common config for all neutron server and agents.
891# This MUST be called before other ``_configure_neutron_*`` functions.
892function _configure_neutron_common {
893 _create_neutron_conf_dir
Mark McClainb05c8762013-07-06 23:29:39 -0400894
Martin Hickey30d5fae2015-11-10 13:44:15 +0000895 # Uses oslo config generator to generate core sample configuration files
896 (cd $NEUTRON_DIR && exec ./tools/generate_config_file_samples.sh)
897
898 cp $NEUTRON_DIR/etc/neutron.conf.sample $NEUTRON_CONF
Mark McClainb05c8762013-07-06 23:29:39 -0400899
Jerry Zhao296c1e32015-08-07 20:43:54 -0400900 Q_POLICY_FILE=$NEUTRON_CONF_DIR/policy.json
901 cp $NEUTRON_DIR/etc/policy.json $Q_POLICY_FILE
902
903 # allow neutron user to administer neutron to match neutron account
904 sed -i 's/"context_is_admin": "role:admin"/"context_is_admin": "role:admin or user_name:neutron"/g' $Q_POLICY_FILE
905
Mark McClainb05c8762013-07-06 23:29:39 -0400906 # Set plugin-specific variables ``Q_DB_NAME``, ``Q_PLUGIN_CLASS``.
907 # For main plugin config file, set ``Q_PLUGIN_CONF_PATH``, ``Q_PLUGIN_CONF_FILENAME``.
Tom Patzig67223b02016-04-19 16:43:05 +0200908 # For additional plugin config files, set ``Q_PLUGIN_EXTRA_CONF_PATH`` and
Mark McClainb05c8762013-07-06 23:29:39 -0400909 # ``Q_PLUGIN_EXTRA_CONF_FILES``. For example:
Adam Spierscb961592013-10-05 12:11:07 +0100910 #
Tom Patzig67223b02016-04-19 16:43:05 +0200911 # ``Q_PLUGIN_EXTRA_CONF_PATH=/path/to/plugins``
Boden R82bca442016-04-15 10:56:09 -0600912 # ``Q_PLUGIN_EXTRA_CONF_FILES=(file1 file2)``
Mark McClainb05c8762013-07-06 23:29:39 -0400913 neutron_plugin_configure_common
914
sbauzae2c4ee22013-08-29 17:29:46 +0200915 if [[ "$Q_PLUGIN_CONF_PATH" == '' || "$Q_PLUGIN_CONF_FILENAME" == '' || "$Q_PLUGIN_CLASS" == '' ]]; then
Mark McClainb05c8762013-07-06 23:29:39 -0400916 die $LINENO "Neutron plugin not set.. exiting"
917 fi
918
919 # If needed, move config file from ``$NEUTRON_DIR/etc/neutron`` to ``NEUTRON_CONF_DIR``
920 mkdir -p /$Q_PLUGIN_CONF_PATH
921 Q_PLUGIN_CONF_FILE=$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME
Hirofumi Ichihara97cc85b2015-09-08 13:51:01 +0900922 # NOTE(hichihara): Some neutron vendor plugins were already decomposed and
923 # there is no config file in Neutron tree. They should prepare the file in each plugin.
Martin Hickey30d5fae2015-11-10 13:44:15 +0000924 if [ -f "$NEUTRON_DIR/$Q_PLUGIN_CONF_FILE.sample" ]; then
925 cp "$NEUTRON_DIR/$Q_PLUGIN_CONF_FILE.sample" /$Q_PLUGIN_CONF_FILE
926 elif [ -f $NEUTRON_DIR/$Q_PLUGIN_CONF_FILE ]; then
Hirofumi Ichihara97cc85b2015-09-08 13:51:01 +0900927 cp $NEUTRON_DIR/$Q_PLUGIN_CONF_FILE /$Q_PLUGIN_CONF_FILE
928 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400929
Ihar Hrachyshkab816e5d2014-07-21 13:53:50 +0200930 iniset $NEUTRON_CONF database connection `database_connection_url $Q_DB_NAME`
Mark McClainb05c8762013-07-06 23:29:39 -0400931 iniset $NEUTRON_CONF DEFAULT state_path $DATA_DIR/neutron
salvatoree4e535b2014-10-29 18:22:46 +0100932 iniset $NEUTRON_CONF DEFAULT use_syslog $SYSLOG
Brian Haley180f5eb2015-06-16 13:14:31 -0400933 iniset $NEUTRON_CONF DEFAULT bind_host $Q_LISTEN_ADDRESS
Martin Hickey30d5fae2015-11-10 13:44:15 +0000934 iniset $NEUTRON_CONF oslo_concurrency lock_path $DATA_DIR/neutron/lock
935
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +0300936 # NOTE(freerunner): Need to adjust Region Name for nova in multiregion installation
937 iniset $NEUTRON_CONF nova region_name $REGION_NAME
938
Mark McClainb05c8762013-07-06 23:29:39 -0400939 # If addition config files are set, make sure their path name is set as well
940 if [[ ${#Q_PLUGIN_EXTRA_CONF_FILES[@]} > 0 && $Q_PLUGIN_EXTRA_CONF_PATH == '' ]]; then
941 die $LINENO "Neutron additional plugin config not set.. exiting"
942 fi
943
944 # If additional config files exist, copy them over to neutron configuration
945 # directory
946 if [[ $Q_PLUGIN_EXTRA_CONF_PATH != '' ]]; then
Mark McClainb05c8762013-07-06 23:29:39 -0400947 local f
948 for (( f=0; $f < ${#Q_PLUGIN_EXTRA_CONF_FILES[@]}; f+=1 )); do
949 Q_PLUGIN_EXTRA_CONF_FILES[$f]=$Q_PLUGIN_EXTRA_CONF_PATH/${Q_PLUGIN_EXTRA_CONF_FILES[$f]}
Mark McClainb05c8762013-07-06 23:29:39 -0400950 done
951 fi
952
Joe Gordonbee5c502013-08-30 13:48:08 -0400953 if [ "$VIRT_DRIVER" = 'fake' ]; then
954 # Disable arbitrary limits
955 iniset $NEUTRON_CONF quotas quota_network -1
956 iniset $NEUTRON_CONF quotas quota_subnet -1
957 iniset $NEUTRON_CONF quotas quota_port -1
958 iniset $NEUTRON_CONF quotas quota_security_group -1
959 iniset $NEUTRON_CONF quotas quota_security_group_rule -1
960 fi
961
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700962 # Format logging
963 if [ "$LOG_COLOR" == "True" ] && [ "$SYSLOG" == "False" ]; then
Salvatore Orlandobc7f6432013-11-25 10:11:14 -0800964 setup_colorized_logging $NEUTRON_CONF DEFAULT project_id
venkata anil9b1df572015-01-15 07:38:22 +0000965 else
966 # Show user_name and project_name by default like in nova
Ronald Bradforde8264902016-01-20 21:16:33 +0000967 iniset $NEUTRON_CONF DEFAULT logging_user_identity_format "%(user_name)s %(project_name)s"
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700968 fi
969
Rob Crittenden18d47782014-03-19 17:47:42 -0400970 if is_service_enabled tls-proxy; then
971 # Set the service port for a proxy to take the original
972 iniset $NEUTRON_CONF DEFAULT bind_port "$Q_PORT_INT"
973 fi
974
975 if is_ssl_enabled_service "nova"; then
Jamie Lennoxdc757dd2015-03-09 14:48:09 +1100976 iniset $NEUTRON_CONF nova cafile $SSL_BUNDLE_FILE
Rob Crittenden18d47782014-03-19 17:47:42 -0400977 fi
978
979 if is_ssl_enabled_service "neutron"; then
980 ensure_certificates NEUTRON
981
982 iniset $NEUTRON_CONF DEFAULT use_ssl True
983 iniset $NEUTRON_CONF DEFAULT ssl_cert_file "$NEUTRON_SSL_CERT"
984 iniset $NEUTRON_CONF DEFAULT ssl_key_file "$NEUTRON_SSL_KEY"
985 fi
986
Mark McClainb05c8762013-07-06 23:29:39 -0400987 _neutron_setup_rootwrap
988}
989
Ian Wienandaee18c72014-02-21 15:35:08 +1100990function _configure_neutron_debug_command {
Mark McClainb05c8762013-07-06 23:29:39 -0400991 if [[ "$Q_USE_DEBUG_COMMAND" != "True" ]]; then
992 return
993 fi
994
Martin Hickey30d5fae2015-11-10 13:44:15 +0000995 cp $NEUTRON_DIR/etc/l3_agent.ini.sample $NEUTRON_TEST_CONFIG_FILE
Mark McClainb05c8762013-07-06 23:29:39 -0400996
Mark McClainb05c8762013-07-06 23:29:39 -0400997 iniset $NEUTRON_TEST_CONFIG_FILE DEFAULT debug False
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -0700998 iniset $NEUTRON_TEST_CONFIG_FILE AGENT root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +0400999 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001000 iniset $NEUTRON_TEST_CONFIG_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001001 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001002
Mark McClainb05c8762013-07-06 23:29:39 -04001003 _neutron_setup_interface_driver $NEUTRON_TEST_CONFIG_FILE
1004
1005 neutron_plugin_configure_debug_command
1006}
1007
Ian Wienandaee18c72014-02-21 15:35:08 +11001008function _configure_neutron_dhcp_agent {
Mark McClainb05c8762013-07-06 23:29:39 -04001009
Martin Hickey30d5fae2015-11-10 13:44:15 +00001010 cp $NEUTRON_DIR/etc/dhcp_agent.ini.sample $Q_DHCP_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001011
Ben Nemec03997942013-08-10 09:56:16 -05001012 iniset $Q_DHCP_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001013 iniset $Q_DHCP_CONF_FILE AGENT root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001014 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001015 iniset $Q_DHCP_CONF_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001016 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001017
Tan Lin27a196e2014-10-31 15:44:34 +08001018 if ! is_service_enabled q-l3; then
1019 if [[ "$ENABLE_ISOLATED_METADATA" = "True" ]]; then
1020 iniset $Q_DHCP_CONF_FILE DEFAULT enable_isolated_metadata $ENABLE_ISOLATED_METADATA
1021 iniset $Q_DHCP_CONF_FILE DEFAULT enable_metadata_network $ENABLE_METADATA_NETWORK
1022 else
1023 if [[ "$ENABLE_METADATA_NETWORK" = "True" ]]; then
1024 die "$LINENO" "Enable isolated metadata is a must for metadata network"
1025 fi
1026 fi
1027 fi
1028
Mark McClainb05c8762013-07-06 23:29:39 -04001029 _neutron_setup_interface_driver $Q_DHCP_CONF_FILE
1030
1031 neutron_plugin_configure_dhcp_agent
1032}
1033
Ian Wienandaee18c72014-02-21 15:35:08 +11001034function _configure_neutron_l3_agent {
Mark McClainb05c8762013-07-06 23:29:39 -04001035 Q_L3_ENABLED=True
Nachi Ueno69b3ff62013-06-07 10:28:33 -07001036
Martin Hickey30d5fae2015-11-10 13:44:15 +00001037 cp $NEUTRON_DIR/etc/l3_agent.ini.sample $Q_L3_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001038
Ben Nemec03997942013-08-10 09:56:16 -05001039 iniset $Q_L3_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001040 iniset $Q_L3_CONF_FILE AGENT root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001041 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001042 iniset $Q_L3_CONF_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001043 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001044
Mark McClainb05c8762013-07-06 23:29:39 -04001045 _neutron_setup_interface_driver $Q_L3_CONF_FILE
1046
1047 neutron_plugin_configure_l3_agent
Sean M. Collins00e16a92015-02-20 11:45:21 -05001048
Brian Haleya0d1b012015-11-16 17:30:48 -05001049 _move_neutron_addresses_route "$PUBLIC_INTERFACE" "$OVS_PHYSICAL_BRIDGE" True False "inet"
Adam Kacmarsky11298a02015-06-26 14:49:47 -06001050
1051 if [[ $(ip -f inet6 a s dev "$PUBLIC_INTERFACE" | grep -c 'global') != 0 ]]; then
Brian Haleya0d1b012015-11-16 17:30:48 -05001052 _move_neutron_addresses_route "$PUBLIC_INTERFACE" "$OVS_PHYSICAL_BRIDGE" False False "inet6"
Sean M. Collins00e16a92015-02-20 11:45:21 -05001053 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001054}
1055
Ian Wienandaee18c72014-02-21 15:35:08 +11001056function _configure_neutron_metadata_agent {
Martin Hickey30d5fae2015-11-10 13:44:15 +00001057 cp $NEUTRON_DIR/etc/metadata_agent.ini.sample $Q_META_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001058
Ben Nemec03997942013-08-10 09:56:16 -05001059 iniset $Q_META_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Mark McClainb05c8762013-07-06 23:29:39 -04001060 iniset $Q_META_CONF_FILE DEFAULT nova_metadata_ip $Q_META_DATA_IP
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001061 iniset $Q_META_CONF_FILE AGENT root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001062 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001063 iniset $Q_META_CONF_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001064 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001065}
1066
Dina Belova58adaa62014-07-11 18:18:12 +04001067function _configure_neutron_ceilometer_notifications {
Wanlong Gaocf04a9a2016-01-16 17:46:35 +08001068 iniset $NEUTRON_CONF oslo_messaging_notifications driver messaging
Dina Belova58adaa62014-07-11 18:18:12 +04001069}
1070
Armando Migliacciob3f26cb2016-04-13 23:28:06 +00001071function _configure_neutron_lbaas {
1072 # Uses oslo config generator to generate LBaaS sample configuration files
1073 (cd $NEUTRON_LBAAS_DIR && exec ./tools/generate_config_file_samples.sh)
1074
1075 if [ -f $NEUTRON_LBAAS_DIR/etc/neutron_lbaas.conf.sample ]; then
1076 cp $NEUTRON_LBAAS_DIR/etc/neutron_lbaas.conf.sample $NEUTRON_CONF_DIR/neutron_lbaas.conf
1077 iniset $NEUTRON_CONF_DIR/neutron_lbaas.conf service_providers service_provider $DEFAULT_LB_PROVIDER
1078 fi
1079 neutron_agent_lbaas_configure_common
1080 neutron_agent_lbaas_configure_agent
1081}
1082
Ian Wienandaee18c72014-02-21 15:35:08 +11001083function _configure_neutron_metering {
Emilien Macchi40546f72013-09-24 15:10:25 +02001084 neutron_agent_metering_configure_common
1085 neutron_agent_metering_configure_agent
1086}
1087
Ian Wienandaee18c72014-02-21 15:35:08 +11001088function _configure_neutron_fwaas {
Doug Wiegley37da4592015-01-30 23:30:08 -07001089 if [ -f $NEUTRON_FWAAS_DIR/etc/neutron_fwaas.conf ]; then
1090 cp $NEUTRON_FWAAS_DIR/etc/neutron_fwaas.conf $NEUTRON_CONF_DIR
1091 fi
Ravi Chunduru95c93e22013-07-16 04:18:47 -07001092 neutron_fwaas_configure_common
1093 neutron_fwaas_configure_driver
1094}
1095
Brian Haleyeea76212014-06-27 11:45:50 -04001096function _configure_dvr {
1097 iniset $NEUTRON_CONF DEFAULT router_distributed True
1098 iniset $Q_L3_CONF_FILE DEFAULT agent_mode $Q_DVR_MODE
1099}
1100
1101
Mark McClainb05c8762013-07-06 23:29:39 -04001102# _configure_neutron_plugin_agent() - Set config files for neutron plugin agent
1103# It is called when q-agt is enabled.
Ian Wienandaee18c72014-02-21 15:35:08 +11001104function _configure_neutron_plugin_agent {
Mark McClainb05c8762013-07-06 23:29:39 -04001105 # Specify the default root helper prior to agent configuration to
1106 # ensure that an agent's configuration can override the default
1107 iniset /$Q_PLUGIN_CONF_FILE agent root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001108 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
1109 iniset /$Q_PLUGIN_CONF_FILE agent root_helper_daemon "$Q_RR_DAEMON_COMMAND"
1110 fi
Ben Nemec03997942013-08-10 09:56:16 -05001111 iniset $NEUTRON_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Mark McClainb05c8762013-07-06 23:29:39 -04001112
1113 # Configure agent for plugin
1114 neutron_plugin_configure_plugin_agent
1115}
1116
1117# _configure_neutron_service() - Set config files for neutron service
1118# It is called when q-svc is enabled.
Ian Wienandaee18c72014-02-21 15:35:08 +11001119function _configure_neutron_service {
Mark McClainb05c8762013-07-06 23:29:39 -04001120 Q_API_PASTE_FILE=$NEUTRON_CONF_DIR/api-paste.ini
Mark McClainb05c8762013-07-06 23:29:39 -04001121 cp $NEUTRON_DIR/etc/api-paste.ini $Q_API_PASTE_FILE
Kevin Benton08a5fcc2014-07-18 16:06:12 -07001122
Mark McClainb05c8762013-07-06 23:29:39 -04001123 # Update either configuration file with plugin
1124 iniset $NEUTRON_CONF DEFAULT core_plugin $Q_PLUGIN_CLASS
1125
1126 if [[ $Q_SERVICE_PLUGIN_CLASSES != '' ]]; then
1127 iniset $NEUTRON_CONF DEFAULT service_plugins $Q_SERVICE_PLUGIN_CLASSES
1128 fi
1129
Ben Nemec03997942013-08-10 09:56:16 -05001130 iniset $NEUTRON_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Chris Dent74a85b02015-04-22 18:02:39 +00001131 iniset $NEUTRON_CONF oslo_policy policy_file $Q_POLICY_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001132 iniset $NEUTRON_CONF DEFAULT allow_overlapping_ips $Q_ALLOW_OVERLAPPING_IP
1133
1134 iniset $NEUTRON_CONF DEFAULT auth_strategy $Q_AUTH_STRATEGY
1135 _neutron_setup_keystone $NEUTRON_CONF keystone_authtoken
1136
Atsushi SAKAIfe7b56c2015-11-13 17:06:16 +09001137 # Configuration for neutron notifications to nova.
Terry Wilsonf06c4432014-05-20 10:54:51 -05001138 iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_status_changes $Q_NOTIFY_NOVA_PORT_STATUS_CHANGES
1139 iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_data_changes $Q_NOTIFY_NOVA_PORT_DATA_CHANGES
Jamie Lennoxdc757dd2015-03-09 14:48:09 +11001140
Thomas Bechtoldfb948912016-03-27 08:59:42 +02001141 configure_auth_token_middleware $NEUTRON_CONF nova $NEUTRON_AUTH_CACHE_DIR nova
Aaron Rosencea32b12014-03-04 16:20:14 -08001142
Mark McClainb05c8762013-07-06 23:29:39 -04001143 # Configure plugin
1144 neutron_plugin_configure_service
1145}
1146
1147# Utility Functions
1148#------------------
1149
Isaku Yamahata9e136b42013-12-16 15:52:03 +09001150# _neutron_service_plugin_class_add() - add service plugin class
Ian Wienandaee18c72014-02-21 15:35:08 +11001151function _neutron_service_plugin_class_add {
Isaku Yamahata9e136b42013-12-16 15:52:03 +09001152 local service_plugin_class=$1
1153 if [[ $Q_SERVICE_PLUGIN_CLASSES == '' ]]; then
1154 Q_SERVICE_PLUGIN_CLASSES=$service_plugin_class
1155 elif [[ ! ,${Q_SERVICE_PLUGIN_CLASSES}, =~ ,${service_plugin_class}, ]]; then
1156 Q_SERVICE_PLUGIN_CLASSES="$Q_SERVICE_PLUGIN_CLASSES,$service_plugin_class"
1157 fi
1158}
1159
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +01001160# _neutron_deploy_rootwrap_filters() - deploy rootwrap filters to $Q_CONF_ROOTWRAP_D (owned by root).
1161function _neutron_deploy_rootwrap_filters {
gong yong sheng3d6eaae2015-09-15 15:00:29 +08001162 if [[ "$Q_USE_ROOTWRAP" == "False" ]]; then
1163 return
1164 fi
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +01001165 local srcdir=$1
Dean Troyer8421c2b2015-03-16 13:52:19 -05001166 sudo install -d -o root -m 755 $Q_CONF_ROOTWRAP_D
1167 sudo install -o root -m 644 $srcdir/etc/neutron/rootwrap.d/* $Q_CONF_ROOTWRAP_D/
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +01001168}
1169
Mark McClainb05c8762013-07-06 23:29:39 -04001170# _neutron_setup_rootwrap() - configure Neutron's rootwrap
Ian Wienandaee18c72014-02-21 15:35:08 +11001171function _neutron_setup_rootwrap {
Mark McClainb05c8762013-07-06 23:29:39 -04001172 if [[ "$Q_USE_ROOTWRAP" == "False" ]]; then
1173 return
1174 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001175 # Wipe any existing ``rootwrap.d`` files first
1176 Q_CONF_ROOTWRAP_D=$NEUTRON_CONF_DIR/rootwrap.d
1177 if [[ -d $Q_CONF_ROOTWRAP_D ]]; then
1178 sudo rm -rf $Q_CONF_ROOTWRAP_D
1179 fi
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +01001180
1181 _neutron_deploy_rootwrap_filters $NEUTRON_DIR
1182
Mark McClainb05c8762013-07-06 23:29:39 -04001183 # Set up ``rootwrap.conf``, pointing to ``$NEUTRON_CONF_DIR/rootwrap.d``
1184 # location moved in newer versions, prefer new location
1185 if test -r $NEUTRON_DIR/etc/neutron/rootwrap.conf; then
Dean Troyer8421c2b2015-03-16 13:52:19 -05001186 sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/neutron/rootwrap.conf $Q_RR_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001187 else
Dean Troyer8421c2b2015-03-16 13:52:19 -05001188 sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/rootwrap.conf $Q_RR_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001189 fi
1190 sudo sed -e "s:^filters_path=.*$:filters_path=$Q_CONF_ROOTWRAP_D:" -i $Q_RR_CONF_FILE
Robert Li2c5d4622015-04-21 15:48:22 -04001191 sudo sed -e 's:^exec_dirs=\(.*\)$:exec_dirs=\1,/usr/local/bin:' -i $Q_RR_CONF_FILE
1192
Mark McClainb05c8762013-07-06 23:29:39 -04001193 # Specify ``rootwrap.conf`` as first parameter to neutron-rootwrap
1194 ROOTWRAP_SUDOER_CMD="$NEUTRON_ROOTWRAP $Q_RR_CONF_FILE *"
Yuriy Taraday26623952014-07-16 17:41:53 +04001195 ROOTWRAP_DAEMON_SUDOER_CMD="$NEUTRON_ROOTWRAP-daemon $Q_RR_CONF_FILE"
Mark McClainb05c8762013-07-06 23:29:39 -04001196
1197 # Set up the rootwrap sudoers for neutron
1198 TEMPFILE=`mktemp`
Stephan Renatuse578eff2013-11-19 13:31:04 +01001199 echo "$STACK_USER ALL=(root) NOPASSWD: $ROOTWRAP_SUDOER_CMD" >$TEMPFILE
Yuriy Taraday26623952014-07-16 17:41:53 +04001200 echo "$STACK_USER ALL=(root) NOPASSWD: $ROOTWRAP_DAEMON_SUDOER_CMD" >>$TEMPFILE
Mark McClainb05c8762013-07-06 23:29:39 -04001201 chmod 0440 $TEMPFILE
1202 sudo chown root:root $TEMPFILE
1203 sudo mv $TEMPFILE /etc/sudoers.d/neutron-rootwrap
1204
1205 # Update the root_helper
1206 iniset $NEUTRON_CONF agent root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001207 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
1208 iniset $NEUTRON_CONF agent root_helper_daemon "$Q_RR_DAEMON_COMMAND"
1209 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001210}
1211
Ihar Hrachyshkabb4654b2015-10-06 18:09:07 +02001212# Configures keystone integration for neutron service
Ian Wienandaee18c72014-02-21 15:35:08 +11001213function _neutron_setup_keystone {
Mark McClainb05c8762013-07-06 23:29:39 -04001214 local conf_file=$1
1215 local section=$2
Jamie Lennox3561d7f2014-05-21 17:18:43 +10001216
Brant Knudson05952372014-09-19 17:22:22 -05001217 create_neutron_cache_dir
1218 configure_auth_token_middleware $conf_file $Q_ADMIN_USERNAME $NEUTRON_AUTH_CACHE_DIR $section
Mark McClainb05c8762013-07-06 23:29:39 -04001219}
1220
Ian Wienandaee18c72014-02-21 15:35:08 +11001221function _neutron_setup_interface_driver {
Mark McClainb05c8762013-07-06 23:29:39 -04001222
1223 # ovs_use_veth needs to be set before the plugin configuration
1224 # occurs to allow plugins to override the setting.
1225 iniset $1 DEFAULT ovs_use_veth $Q_OVS_USE_VETH
1226
1227 neutron_plugin_setup_interface_driver $1
1228}
1229
John Davidge21529a52014-06-30 09:55:11 -04001230# Create private IPv4 subnet
1231function _neutron_create_private_subnet_v4 {
Sean Dague0486a362016-04-04 09:17:01 -04001232 local project_id=$1
1233 local subnet_params="--tenant-id $project_id "
John Davidge21529a52014-06-30 09:55:11 -04001234 subnet_params+="--ip_version 4 "
1235 subnet_params+="--gateway $NETWORK_GATEWAY "
1236 subnet_params+="--name $PRIVATE_SUBNET_NAME "
1237 subnet_params+="$NET_ID $FIXED_RANGE"
Ian Wienandada886d2015-10-07 14:06:26 +11001238 local subnet_id
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +03001239 subnet_id=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create $subnet_params | grep ' id ' | get_field 2)
Sean Dague0486a362016-04-04 09:17:01 -04001240 die_if_not_set $LINENO subnet_id "Failure creating private IPv4 subnet for $project_id"
John Davidge21529a52014-06-30 09:55:11 -04001241 echo $subnet_id
1242}
1243
1244# Create private IPv6 subnet
1245function _neutron_create_private_subnet_v6 {
Sean Dague0486a362016-04-04 09:17:01 -04001246 local project_id=$1
John Davidge21529a52014-06-30 09:55:11 -04001247 die_if_not_set $LINENO IPV6_RA_MODE "IPV6 RA Mode not set"
1248 die_if_not_set $LINENO IPV6_ADDRESS_MODE "IPV6 Address Mode not set"
1249 local ipv6_modes="--ipv6-ra-mode $IPV6_RA_MODE --ipv6-address-mode $IPV6_ADDRESS_MODE"
Sean Dague0486a362016-04-04 09:17:01 -04001250 local subnet_params="--tenant-id $project_id "
John Davidge21529a52014-06-30 09:55:11 -04001251 subnet_params+="--ip_version 6 "
1252 subnet_params+="--gateway $IPV6_PRIVATE_NETWORK_GATEWAY "
1253 subnet_params+="--name $IPV6_PRIVATE_SUBNET_NAME "
1254 subnet_params+="$NET_ID $FIXED_RANGE_V6 $ipv6_modes"
Ian Wienandada886d2015-10-07 14:06:26 +11001255 local ipv6_subnet_id
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +03001256 ipv6_subnet_id=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create $subnet_params | grep ' id ' | get_field 2)
Sean Dague0486a362016-04-04 09:17:01 -04001257 die_if_not_set $LINENO ipv6_subnet_id "Failure creating private IPv6 subnet for $project_id"
John Davidge21529a52014-06-30 09:55:11 -04001258 echo $ipv6_subnet_id
1259}
1260
1261# Create public IPv4 subnet
1262function _neutron_create_public_subnet_v4 {
1263 local subnet_params+="--ip_version 4 "
1264 subnet_params+="${Q_FLOATING_ALLOCATION_POOL:+--allocation-pool $Q_FLOATING_ALLOCATION_POOL} "
1265 subnet_params+="--gateway $PUBLIC_NETWORK_GATEWAY "
1266 subnet_params+="--name $PUBLIC_SUBNET_NAME "
1267 subnet_params+="$EXT_NET_ID $FLOATING_RANGE "
1268 subnet_params+="-- --enable_dhcp=False"
Ian Wienandada886d2015-10-07 14:06:26 +11001269 local id_and_ext_gw_ip
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +03001270 id_and_ext_gw_ip=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create $subnet_params | grep -e 'gateway_ip' -e ' id ')
John Davidge21529a52014-06-30 09:55:11 -04001271 die_if_not_set $LINENO id_and_ext_gw_ip "Failure creating public IPv4 subnet"
1272 echo $id_and_ext_gw_ip
1273}
1274
1275# Create public IPv6 subnet
1276function _neutron_create_public_subnet_v6 {
1277 local subnet_params="--ip_version 6 "
1278 subnet_params+="--gateway $IPV6_PUBLIC_NETWORK_GATEWAY "
1279 subnet_params+="--name $IPV6_PUBLIC_SUBNET_NAME "
1280 subnet_params+="$EXT_NET_ID $IPV6_PUBLIC_RANGE "
1281 subnet_params+="-- --enable_dhcp=False"
Ian Wienandada886d2015-10-07 14:06:26 +11001282 local ipv6_id_and_ext_gw_ip
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +03001283 ipv6_id_and_ext_gw_ip=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" subnet-create $subnet_params | grep -e 'gateway_ip' -e ' id ')
John Davidge21529a52014-06-30 09:55:11 -04001284 die_if_not_set $LINENO ipv6_id_and_ext_gw_ip "Failure creating an IPv6 public subnet"
1285 echo $ipv6_id_and_ext_gw_ip
1286}
1287
1288# Configure neutron router for IPv4 public access
1289function _neutron_configure_router_v4 {
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +03001290 neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-interface-add $ROUTER_ID $SUBNET_ID
John Davidge21529a52014-06-30 09:55:11 -04001291 # Create a public subnet on the external network
Ian Wienandada886d2015-10-07 14:06:26 +11001292 local id_and_ext_gw_ip
1293 id_and_ext_gw_ip=$(_neutron_create_public_subnet_v4 $EXT_NET_ID)
1294 local ext_gw_ip
1295 ext_gw_ip=$(echo $id_and_ext_gw_ip | get_field 2)
John Davidge21529a52014-06-30 09:55:11 -04001296 PUB_SUBNET_ID=$(echo $id_and_ext_gw_ip | get_field 5)
1297 # Configure the external network as the default router gateway
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +03001298 neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-gateway-set $ROUTER_ID $EXT_NET_ID
John Davidge21529a52014-06-30 09:55:11 -04001299
1300 # This logic is specific to using the l3-agent for layer 3
1301 if is_service_enabled q-l3; then
1302 # Configure and enable public bridge
Sean M. Collins71947d52015-06-17 17:33:02 -04001303 local ext_gw_interface="none"
Cedric Brandilyb814b532015-10-22 22:25:45 +02001304 if is_neutron_ovs_base_plugin; then
Sean M. Collins71947d52015-06-17 17:33:02 -04001305 ext_gw_interface=$(_neutron_get_ext_gw_interface)
1306 elif [[ "$Q_AGENT" = "linuxbridge" ]]; then
1307 # Search for the brq device the neutron router and network for $FIXED_RANGE
1308 # will be using.
1309 # e.x. brq3592e767-da for NET_ID 3592e767-da66-4bcb-9bec-cdb03cd96102
1310 ext_gw_interface=brq${EXT_NET_ID:0:11}
1311 fi
1312 if [[ "$ext_gw_interface" != "none" ]]; then
John Davidge21529a52014-06-30 09:55:11 -04001313 local cidr_len=${FLOATING_RANGE#*/}
Sean M. Collins71947d52015-06-17 17:33:02 -04001314 local testcmd="ip -o link | grep -q $ext_gw_interface"
1315 test_with_retry "$testcmd" "$ext_gw_interface creation failed"
YAMAMOTO Takashi909fa8f2015-03-27 10:56:16 +09001316 if [[ $(ip addr show dev $ext_gw_interface | grep -c $ext_gw_ip) == 0 && ( $Q_USE_PROVIDERNET_FOR_PUBLIC == "False" || $Q_USE_PUBLIC_VETH == "True" ) ]]; then
Sean M. Collins00e16a92015-02-20 11:45:21 -05001317 sudo ip addr add $ext_gw_ip/$cidr_len dev $ext_gw_interface
1318 sudo ip link set $ext_gw_interface up
1319 fi
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +03001320 ROUTER_GW_IP=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" port-list -c fixed_ips -c device_owner | grep router_gateway | awk -F'ip_address' '{ print $2 }' | cut -f3 -d\" | tr '\n' ' ')
John Davidge21529a52014-06-30 09:55:11 -04001321 die_if_not_set $LINENO ROUTER_GW_IP "Failure retrieving ROUTER_GW_IP"
gong yong sheng348c6ac2015-06-23 14:03:47 +08001322 sudo ip route replace $FIXED_RANGE via $ROUTER_GW_IP
John Davidge21529a52014-06-30 09:55:11 -04001323 fi
1324 _neutron_set_router_id
1325 fi
1326}
1327
1328# Configure neutron router for IPv6 public access
1329function _neutron_configure_router_v6 {
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +03001330 neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-interface-add $ROUTER_ID $IPV6_SUBNET_ID
John Davidge21529a52014-06-30 09:55:11 -04001331 # Create a public subnet on the external network
Ian Wienandada886d2015-10-07 14:06:26 +11001332 local ipv6_id_and_ext_gw_ip
1333 ipv6_id_and_ext_gw_ip=$(_neutron_create_public_subnet_v6 $EXT_NET_ID)
1334 local ipv6_ext_gw_ip
1335 ipv6_ext_gw_ip=$(echo $ipv6_id_and_ext_gw_ip | get_field 2)
1336 local ipv6_pub_subnet_id
1337 ipv6_pub_subnet_id=$(echo $ipv6_id_and_ext_gw_ip | get_field 5)
John Davidge21529a52014-06-30 09:55:11 -04001338
1339 # If the external network has not already been set as the default router
1340 # gateway when configuring an IPv4 public subnet, do so now
1341 if [[ "$IP_VERSION" == "6" ]]; then
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +03001342 neutron --os-cloud devstack-admin --os-region "$REGION_NAME" router-gateway-set $ROUTER_ID $EXT_NET_ID
John Davidge21529a52014-06-30 09:55:11 -04001343 fi
1344
1345 # This logic is specific to using the l3-agent for layer 3
1346 if is_service_enabled q-l3; then
John Davidge21529a52014-06-30 09:55:11 -04001347 # Ensure IPv6 forwarding is enabled on the host
1348 sudo sysctl -w net.ipv6.conf.all.forwarding=1
1349 # Configure and enable public bridge
Dane LeBlanca79e1012015-03-26 14:48:07 -04001350 # Override global IPV6_ROUTER_GW_IP with the true value from neutron
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +03001351 IPV6_ROUTER_GW_IP=$(neutron --os-cloud devstack-admin --os-region "$REGION_NAME" port-list -c fixed_ips | grep $ipv6_pub_subnet_id | awk -F'ip_address' '{ print $2 }' | cut -f3 -d\" | tr '\n' ' ')
Dane LeBlanca79e1012015-03-26 14:48:07 -04001352 die_if_not_set $LINENO IPV6_ROUTER_GW_IP "Failure retrieving IPV6_ROUTER_GW_IP"
John Davidge21529a52014-06-30 09:55:11 -04001353
Cedric Brandilyb814b532015-10-22 22:25:45 +02001354 if is_neutron_ovs_base_plugin; then
Ian Wienandada886d2015-10-07 14:06:26 +11001355 local ext_gw_interface
1356 ext_gw_interface=$(_neutron_get_ext_gw_interface)
John Davidge21529a52014-06-30 09:55:11 -04001357 local ipv6_cidr_len=${IPV6_PUBLIC_RANGE#*/}
1358
John Davidge21529a52014-06-30 09:55:11 -04001359 # Configure interface for public bridge
1360 sudo ip -6 addr add $ipv6_ext_gw_ip/$ipv6_cidr_len dev $ext_gw_interface
gong yong sheng348c6ac2015-06-23 14:03:47 +08001361 sudo ip -6 route replace $FIXED_RANGE_V6 via $IPV6_ROUTER_GW_IP dev $ext_gw_interface
John Davidge21529a52014-06-30 09:55:11 -04001362 fi
1363 _neutron_set_router_id
1364 fi
1365}
1366
1367# Explicitly set router id in l3 agent configuration
1368function _neutron_set_router_id {
Cedric Brandilyb814b532015-10-22 22:25:45 +02001369 if [[ "$Q_L3_ROUTER_PER_TENANT" == "False" ]]; then
John Davidge21529a52014-06-30 09:55:11 -04001370 iniset $Q_L3_CONF_FILE DEFAULT router_id $ROUTER_ID
1371 fi
1372}
1373
1374# Get ext_gw_interface depending on value of Q_USE_PUBLIC_VETH
1375function _neutron_get_ext_gw_interface {
1376 if [[ "$Q_USE_PUBLIC_VETH" == "True" ]]; then
1377 echo $Q_PUBLIC_VETH_EX
1378 else
1379 # Disable in-band as we are going to use local port
1380 # to communicate with VMs
1381 sudo ovs-vsctl set Bridge $PUBLIC_BRIDGE \
1382 other_config:disable-in-band=true
1383 echo $PUBLIC_BRIDGE
1384 fi
1385}
1386
Mark McClainb05c8762013-07-06 23:29:39 -04001387# Functions for Neutron Exercises
1388#--------------------------------
1389
Ian Wienandaee18c72014-02-21 15:35:08 +11001390function delete_probe {
Mark McClainb05c8762013-07-06 23:29:39 -04001391 local from_net="$1"
1392 net_id=`_get_net_id $from_net`
1393 probe_id=`neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-list -c id -c network_id | grep $net_id | awk '{print $2}'`
1394 neutron-debug --os-tenant-name admin --os-username admin probe-delete $probe_id
1395}
1396
Ian Wienandaee18c72014-02-21 15:35:08 +11001397function setup_neutron_debug {
Mark McClainb05c8762013-07-06 23:29:39 -04001398 if [[ "$Q_USE_DEBUG_COMMAND" == "True" ]]; then
1399 public_net_id=`_get_net_id $PUBLIC_NETWORK_NAME`
Brad Behle629917a2016-03-22 14:27:32 -05001400 if [[ -n $public_net_id ]]; then
1401 neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-create --device-owner compute $public_net_id
1402 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001403 private_net_id=`_get_net_id $PRIVATE_NETWORK_NAME`
Brad Behle629917a2016-03-22 14:27:32 -05001404 if [[ -n $private_net_id ]]; then
1405 neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-create --device-owner compute $private_net_id
1406 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001407 fi
1408}
1409
Ian Wienandaee18c72014-02-21 15:35:08 +11001410function teardown_neutron_debug {
Mark McClainb05c8762013-07-06 23:29:39 -04001411 delete_probe $PUBLIC_NETWORK_NAME
1412 delete_probe $PRIVATE_NETWORK_NAME
1413}
1414
Ian Wienandaee18c72014-02-21 15:35:08 +11001415function _get_net_id {
Victor Ryzhenkin878d7d82016-04-27 15:15:52 +03001416 neutron --os-cloud devstack-admin --os-region "$REGION_NAME" --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD net-list | grep $1 | awk '{print $2}'
Mark McClainb05c8762013-07-06 23:29:39 -04001417}
1418
Ian Wienandaee18c72014-02-21 15:35:08 +11001419function _get_probe_cmd_prefix {
Mark McClainb05c8762013-07-06 23:29:39 -04001420 local from_net="$1"
1421 net_id=`_get_net_id $from_net`
1422 probe_id=`neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-list -c id -c network_id | grep $net_id | awk '{print $2}' | head -n 1`
1423 echo "$Q_RR_COMMAND ip netns exec qprobe-$probe_id"
1424}
1425
Mark McClainb05c8762013-07-06 23:29:39 -04001426# ssh check
Ian Wienandaee18c72014-02-21 15:35:08 +11001427function _ssh_check_neutron {
Mark McClainb05c8762013-07-06 23:29:39 -04001428 local from_net=$1
1429 local key_file=$2
1430 local ip=$3
1431 local user=$4
1432 local timeout_sec=$5
1433 local probe_cmd = ""
1434 probe_cmd=`_get_probe_cmd_prefix $from_net`
Sean Dague442e4e92015-06-24 13:24:02 -04001435 local testcmd="$probe_cmd ssh -o StrictHostKeyChecking=no -i $key_file ${user}@$ip echo success"
1436 test_with_retry "$testcmd" "server $ip didn't become ssh-able" $timeout_sec
Mark McClainb05c8762013-07-06 23:29:39 -04001437}
1438
1439# Neutron 3rd party programs
1440#---------------------------
1441
1442# please refer to ``lib/neutron_thirdparty/README.md`` for details
1443NEUTRON_THIRD_PARTIES=""
1444for f in $TOP_DIR/lib/neutron_thirdparty/*; do
Sean Dague3bdb9222013-10-22 08:36:16 -04001445 third_party=$(basename $f)
1446 if is_service_enabled $third_party; then
1447 source $TOP_DIR/lib/neutron_thirdparty/$third_party
1448 NEUTRON_THIRD_PARTIES="$NEUTRON_THIRD_PARTIES,$third_party"
1449 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001450done
1451
Ian Wienandaee18c72014-02-21 15:35:08 +11001452function _neutron_third_party_do {
Mark McClainb05c8762013-07-06 23:29:39 -04001453 for third_party in ${NEUTRON_THIRD_PARTIES//,/ }; do
1454 ${1}_${third_party}
1455 done
1456}
1457
1458# configure_neutron_third_party() - Set config files, create data dirs, etc
Ian Wienandaee18c72014-02-21 15:35:08 +11001459function configure_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001460 _neutron_third_party_do configure
1461}
1462
1463# init_neutron_third_party() - Initialize databases, etc.
Ian Wienandaee18c72014-02-21 15:35:08 +11001464function init_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001465 _neutron_third_party_do init
1466}
1467
1468# install_neutron_third_party() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +11001469function install_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001470 _neutron_third_party_do install
1471}
1472
1473# start_neutron_third_party() - Start running processes, including screen
Ian Wienandaee18c72014-02-21 15:35:08 +11001474function start_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001475 _neutron_third_party_do start
1476}
1477
1478# stop_neutron_third_party - Stop running processes (non-screen)
Ian Wienandaee18c72014-02-21 15:35:08 +11001479function stop_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001480 _neutron_third_party_do stop
1481}
1482
armando-migliaccioef1e0802014-01-02 16:33:53 -08001483# check_neutron_third_party_integration() - Check that third party integration is sane
Ian Wienandaee18c72014-02-21 15:35:08 +11001484function check_neutron_third_party_integration {
armando-migliaccioef1e0802014-01-02 16:33:53 -08001485 _neutron_third_party_do check
1486}
1487
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -04001488function is_provider_network {
1489 if [ "$Q_USE_PROVIDER_NETWORKING" == "True" ] && [ "$Q_L3_ENABLED" == "False" ]; then
1490 return 0
1491 fi
1492 return 1
1493}
1494
Mark McClainb05c8762013-07-06 23:29:39 -04001495
1496# Restore xtrace
Ian Wienand523f4882015-10-13 11:03:03 +11001497$_XTRACE_NEUTRON
Mark McClainb05c8762013-07-06 23:29:39 -04001498
Adam Spiers6a5aa7c2013-10-24 11:27:02 +01001499# Tell emacs to use shell-script-mode
1500## Local variables:
1501## mode: shell-script
1502## End: