blob: bd876e29a9a10af8882dcedaa515a5c879f145da [file] [log] [blame]
Sean Daguee263c822014-12-05 14:25:28 -05001#!/bin/bash
2#
Mark McClainb05c8762013-07-06 23:29:39 -04003# lib/neutron
Joe Gordon23946052014-01-15 21:42:32 +00004# functions - functions specific to neutron
Mark McClainb05c8762013-07-06 23:29:39 -04005
6# Dependencies:
7# ``functions`` file
8# ``DEST`` must be defined
Stephan Renatuse578eff2013-11-19 13:31:04 +01009# ``STACK_USER`` must be defined
Mark McClainb05c8762013-07-06 23:29:39 -040010
11# ``stack.sh`` calls the entry points in this order:
12#
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010013# - install_neutron_agent_packages
YAMAMOTO Takashi1a669dc2015-02-05 11:54:12 +090014# - install_neutronclient
15# - install_neutron
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010016# - install_neutron_third_party
17# - configure_neutron
18# - init_neutron
19# - configure_neutron_third_party
20# - init_neutron_third_party
21# - start_neutron_third_party
22# - create_nova_conf_neutron
23# - start_neutron_service_and_check
YAMAMOTO Takashi1a669dc2015-02-05 11:54:12 +090024# - check_neutron_third_party_integration
yunhong jiang0d6e9922014-10-10 06:12:47 -070025# - start_neutron_agents
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010026# - create_neutron_initial_network
27# - setup_neutron_debug
Mark McClainb05c8762013-07-06 23:29:39 -040028#
29# ``unstack.sh`` calls the entry points in this order:
30#
YAMAMOTO Takashi1a669dc2015-02-05 11:54:12 +090031# - teardown_neutron_debug
Adam Spiers6a5aa7c2013-10-24 11:27:02 +010032# - stop_neutron
yunhong jiang0d6e9922014-10-10 06:12:47 -070033# - stop_neutron_third_party
34# - cleanup_neutron
Mark McClainb05c8762013-07-06 23:29:39 -040035
36# Functions in lib/neutron are classified into the following categories:
37#
38# - entry points (called from stack.sh or unstack.sh)
39# - internal functions
40# - neutron exercises
41# - 3rd party programs
42
43
44# Neutron Networking
45# ------------------
46
47# Make sure that neutron is enabled in ``ENABLED_SERVICES``. If you want
48# to run Neutron on this host, make sure that q-svc is also in
49# ``ENABLED_SERVICES``.
50#
Mark McClainb05c8762013-07-06 23:29:39 -040051# See "Neutron Network Configuration" below for additional variables
52# that must be set in localrc for connectivity across hosts with
53# Neutron.
54#
55# With Neutron networking the NETWORK_MANAGER variable is ignored.
Mark McClainb05c8762013-07-06 23:29:39 -040056
John Davidge21529a52014-06-30 09:55:11 -040057# Settings
58# --------
59
Mark McClainb05c8762013-07-06 23:29:39 -040060
61# Neutron Network Configuration
62# -----------------------------
63
John Davidge21529a52014-06-30 09:55:11 -040064# Subnet IP version
Sean M. Collins645114b2015-03-03 10:56:03 -050065IP_VERSION=${IP_VERSION:-"4+6"}
John Davidge21529a52014-06-30 09:55:11 -040066# Validate IP_VERSION
67if [[ $IP_VERSION != "4" ]] && [[ $IP_VERSION != "6" ]] && [[ $IP_VERSION != "4+6" ]]; then
68 die $LINENO "IP_VERSION must be either 4, 6, or 4+6"
69fi
Mark McClainb05c8762013-07-06 23:29:39 -040070# Gateway and subnet defaults, in case they are not customized in localrc
71NETWORK_GATEWAY=${NETWORK_GATEWAY:-10.0.0.1}
Salvatore Orlando90234ac2013-11-25 05:44:10 -080072PUBLIC_NETWORK_GATEWAY=${PUBLIC_NETWORK_GATEWAY:-172.24.4.1}
Mark McClainb05c8762013-07-06 23:29:39 -040073PRIVATE_SUBNET_NAME=${PRIVATE_SUBNET_NAME:-"private-subnet"}
74PUBLIC_SUBNET_NAME=${PUBLIC_SUBNET_NAME:-"public-subnet"}
75
Rob Crittenden18d47782014-03-19 17:47:42 -040076if is_ssl_enabled_service "neutron" || is_service_enabled tls-proxy; then
77 Q_PROTOCOL="https"
78fi
79
John Davidge21529a52014-06-30 09:55:11 -040080# Generate 40-bit IPv6 Global ID to comply with RFC 4193
81IPV6_GLOBAL_ID=`uuidgen | sed s/-//g | cut -c 23- | sed -e "s/\(..\)\(....\)\(....\)/\1:\2:\3/"`
82
83# IPv6 gateway and subnet defaults, in case they are not customized in localrc
84IPV6_RA_MODE=${IPV6_RA_MODE:-slaac}
85IPV6_ADDRESS_MODE=${IPV6_ADDRESS_MODE:-slaac}
86IPV6_PUBLIC_SUBNET_NAME=${IPV6_PUBLIC_SUBNET_NAME:-ipv6-public-subnet}
87IPV6_PRIVATE_SUBNET_NAME=${IPV6_PRIVATE_SUBNET_NAME:-ipv6-private-subnet}
88FIXED_RANGE_V6=${FIXED_RANGE_V6:-fd$IPV6_GLOBAL_ID::/64}
89IPV6_PRIVATE_NETWORK_GATEWAY=${IPV6_PRIVATE_NETWORK_GATEWAY:-fd$IPV6_GLOBAL_ID::1}
Dane LeBlanca79e1012015-03-26 14:48:07 -040090IPV6_PUBLIC_RANGE=${IPV6_PUBLIC_RANGE:-2001:db8::/64}
91IPV6_PUBLIC_NETWORK_GATEWAY=${IPV6_PUBLIC_NETWORK_GATEWAY:-2001:db8::2}
92IPV6_ROUTER_GW_IP=${IPV6_ROUTER_GW_IP:-2001:db8::1}
Rob Crittenden18d47782014-03-19 17:47:42 -040093
Mark McClainb05c8762013-07-06 23:29:39 -040094# Set up default directories
Sean Daguee08ab102014-11-13 17:09:28 -050095GITDIR["python-neutronclient"]=$DEST/python-neutronclient
Sean Dague5cb19062014-11-01 01:37:45 +010096
Doug Wiegley93e682c2015-03-03 10:31:30 -070097
Mark McClainb05c8762013-07-06 23:29:39 -040098NEUTRON_DIR=$DEST/neutron
Kyle Mestery20b839f2014-12-08 06:17:27 +000099NEUTRON_FWAAS_DIR=$DEST/neutron-fwaas
Doug Wiegley93e682c2015-03-03 10:31:30 -0700100NEUTRON_LBAAS_DIR=$DEST/neutron-lbaas
Kyle Mestery20b839f2014-12-08 06:17:27 +0000101NEUTRON_VPNAAS_DIR=$DEST/neutron-vpnaas
Mark McClainb05c8762013-07-06 23:29:39 -0400102NEUTRON_AUTH_CACHE_DIR=${NEUTRON_AUTH_CACHE_DIR:-/var/cache/neutron}
103
104# Support entry points installation of console scripts
105if [[ -d $NEUTRON_DIR/bin/neutron-server ]]; then
106 NEUTRON_BIN_DIR=$NEUTRON_DIR/bin
Sean Dague3bdb9222013-10-22 08:36:16 -0400107else
108 NEUTRON_BIN_DIR=$(get_python_exec_prefix)
Mark McClainb05c8762013-07-06 23:29:39 -0400109fi
110
111NEUTRON_CONF_DIR=/etc/neutron
112NEUTRON_CONF=$NEUTRON_CONF_DIR/neutron.conf
113export NEUTRON_TEST_CONFIG_FILE=${NEUTRON_TEST_CONFIG_FILE:-"$NEUTRON_CONF_DIR/debug.ini"}
114
Martin Hickey10bff0e2015-12-03 15:18:10 +0000115# Default provider for load balancer service
116DEFAULT_LB_PROVIDER=LOADBALANCER:Haproxy:neutron_lbaas.services.loadbalancer.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver:default
117
Martin Hickey47115b02015-12-18 11:08:38 +0000118# Default provider for VPN service
119DEFAULT_VPN_PROVIDER=VPN:openswan:neutron_vpnaas.services.vpn.service_drivers.ipsec.IPsecVPNDriver:default
120
Adam Gandelman7614d212014-08-11 14:27:50 -0700121# Agent binaries. Note, binary paths for other agents are set in per-service
122# scripts in lib/neutron_plugins/services/
123AGENT_DHCP_BINARY="$NEUTRON_BIN_DIR/neutron-dhcp-agent"
124AGENT_L3_BINARY=${AGENT_L3_BINARY:-"$NEUTRON_BIN_DIR/neutron-l3-agent"}
125AGENT_META_BINARY="$NEUTRON_BIN_DIR/neutron-metadata-agent"
126
127# Agent config files. Note, plugin-specific Q_PLUGIN_CONF_FILE is set and
128# loaded from per-plugin scripts in lib/neutron_plugins/
129Q_DHCP_CONF_FILE=$NEUTRON_CONF_DIR/dhcp_agent.ini
130Q_L3_CONF_FILE=$NEUTRON_CONF_DIR/l3_agent.ini
131Q_FWAAS_CONF_FILE=$NEUTRON_CONF_DIR/fwaas_driver.ini
132Q_VPN_CONF_FILE=$NEUTRON_CONF_DIR/vpn_agent.ini
133Q_META_CONF_FILE=$NEUTRON_CONF_DIR/metadata_agent.ini
134
Henry Gessau0fc1cc22014-07-06 22:54:34 -0400135# Default name for Neutron database
136Q_DB_NAME=${Q_DB_NAME:-neutron}
Mark McClainb05c8762013-07-06 23:29:39 -0400137# Default Neutron Plugin
Kyle Mestery6d235002013-09-18 20:27:08 +0000138Q_PLUGIN=${Q_PLUGIN:-ml2}
Mark McClainb05c8762013-07-06 23:29:39 -0400139# Default Neutron Port
140Q_PORT=${Q_PORT:-9696}
Rob Crittenden18d47782014-03-19 17:47:42 -0400141# Default Neutron Internal Port when using TLS proxy
142Q_PORT_INT=${Q_PORT_INT:-19696}
Mark McClainb05c8762013-07-06 23:29:39 -0400143# Default Neutron Host
144Q_HOST=${Q_HOST:-$SERVICE_HOST}
Rob Crittenden18d47782014-03-19 17:47:42 -0400145# Default protocol
146Q_PROTOCOL=${Q_PROTOCOL:-$SERVICE_PROTOCOL}
Brian Haley180f5eb2015-06-16 13:14:31 -0400147# Default listen address
148Q_LISTEN_ADDRESS=${Q_LISTEN_ADDRESS:-$SERVICE_LISTEN_ADDRESS}
Mark McClainb05c8762013-07-06 23:29:39 -0400149# Default admin username
150Q_ADMIN_USERNAME=${Q_ADMIN_USERNAME:-neutron}
151# Default auth strategy
152Q_AUTH_STRATEGY=${Q_AUTH_STRATEGY:-keystone}
Mark McClainb05c8762013-07-06 23:29:39 -0400153# RHEL's support for namespaces requires using veths with ovs
154Q_OVS_USE_VETH=${Q_OVS_USE_VETH:-False}
155Q_USE_ROOTWRAP=${Q_USE_ROOTWRAP:-True}
Yuriy Taraday26623952014-07-16 17:41:53 +0400156Q_USE_ROOTWRAP_DAEMON=$(trueorfalse True Q_USE_ROOTWRAP_DAEMON)
Mark McClainb05c8762013-07-06 23:29:39 -0400157# Meta data IP
158Q_META_DATA_IP=${Q_META_DATA_IP:-$SERVICE_HOST}
159# Allow Overlapping IP among subnets
160Q_ALLOW_OVERLAPPING_IP=${Q_ALLOW_OVERLAPPING_IP:-True}
161# Use neutron-debug command
162Q_USE_DEBUG_COMMAND=${Q_USE_DEBUG_COMMAND:-False}
163# The name of the default q-l3 router
164Q_ROUTER_NAME=${Q_ROUTER_NAME:-router1}
Terry Wilsonf06c4432014-05-20 10:54:51 -0500165Q_NOTIFY_NOVA_PORT_STATUS_CHANGES=${Q_NOTIFY_NOVA_PORT_STATUS_CHANGES:-True}
166Q_NOTIFY_NOVA_PORT_DATA_CHANGES=${Q_NOTIFY_NOVA_PORT_DATA_CHANGES:-True}
Aaron Rosencea32b12014-03-04 16:20:14 -0800167VIF_PLUGGING_IS_FATAL=${VIF_PLUGGING_IS_FATAL:-True}
168VIF_PLUGGING_TIMEOUT=${VIF_PLUGGING_TIMEOUT:-300}
Edgar Magana7bce8fa2014-11-04 17:32:54 +0100169# Specify if the initial private and external networks should be created
170NEUTRON_CREATE_INITIAL_NETWORKS=${NEUTRON_CREATE_INITIAL_NETWORKS:-True}
Aaron Rosen4540d002013-10-24 13:59:33 -0700171
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400172## Provider Network Information
173PROVIDER_SUBNET_NAME=${PROVIDER_SUBNET_NAME:-"provider_net"}
John Kasperski50ce6262015-11-23 15:47:45 -0600174IPV6_PROVIDER_SUBNET_NAME=${IPV6_PROVIDER_SUBNET_NAME:-"provider_net_v6"}
175IPV6_PROVIDER_FIXED_RANGE=${IPV6_PROVIDER_FIXED_RANGE:-}
176IPV6_PROVIDER_NETWORK_GATEWAY=${IPV6_PROVIDER_NETWORK_GATEWAY:-}
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400177
Sean M. Collins64d5ecf2015-06-01 14:13:41 -0400178# Define the public bridge that will transmit traffic from VMs to the
179# physical network - used by both the OVS and Linux Bridge drivers.
180PUBLIC_BRIDGE=${PUBLIC_BRIDGE:-br-ex}
181
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900182# Use flat providernet for public network
183#
184# If Q_USE_PROVIDERNET_FOR_PUBLIC=True, use a flat provider network
185# for external interface of neutron l3-agent. In that case,
186# PUBLIC_PHYSICAL_NETWORK specifies provider:physical_network value
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900187# used for the network. In case of ofagent, you should add the
188# corresponding entry to your OFAGENT_PHYSICAL_INTERFACE_MAPPINGS.
189# For openvswitch agent, you should add the corresponding entry to
190# your OVS_BRIDGE_MAPPINGS.
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900191#
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900192# eg. (ofagent)
193# Q_USE_PROVIDERNET_FOR_PUBLIC=True
194# Q_USE_PUBLIC_VETH=True
195# PUBLIC_PHYSICAL_NETWORK=public
196# OFAGENT_PHYSICAL_INTERFACE_MAPPINGS=public:veth-pub-int
197#
198# eg. (openvswitch agent)
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900199# Q_USE_PROVIDERNET_FOR_PUBLIC=True
200# PUBLIC_PHYSICAL_NETWORK=public
201# OVS_BRIDGE_MAPPINGS=public:br-ex
202Q_USE_PROVIDERNET_FOR_PUBLIC=${Q_USE_PROVIDERNET_FOR_PUBLIC:-False}
203PUBLIC_PHYSICAL_NETWORK=${PUBLIC_PHYSICAL_NETWORK:-public}
204
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900205# If Q_USE_PUBLIC_VETH=True, create and use a veth pair instead of
206# PUBLIC_BRIDGE. This is intended to be used with
207# Q_USE_PROVIDERNET_FOR_PUBLIC=True.
208Q_USE_PUBLIC_VETH=${Q_USE_PUBLIC_VETH:-False}
209Q_PUBLIC_VETH_EX=${Q_PUBLIC_VETH_EX:-veth-pub-ex}
210Q_PUBLIC_VETH_INT=${Q_PUBLIC_VETH_INT:-veth-pub-int}
211
Tomoe Sugiharaafbc6312013-11-14 20:02:47 +0000212# The next two variables are configured by plugin
213# e.g. _configure_neutron_l3_agent or lib/neutron_plugins/*
214#
215# The plugin supports L3.
216Q_L3_ENABLED=${Q_L3_ENABLED:-False}
217# L3 routers exist per tenant
Cedric Brandilyb814b532015-10-22 22:25:45 +0200218Q_L3_ROUTER_PER_TENANT=${Q_L3_ROUTER_PER_TENANT:-True}
Aaron Rosen4540d002013-10-24 13:59:33 -0700219
Mark McClainb05c8762013-07-06 23:29:39 -0400220# List of config file names in addition to the main plugin config file
221# See _configure_neutron_common() for details about setting it up
222declare -a Q_PLUGIN_EXTRA_CONF_FILES
223
Paul Michali746dcee2014-04-02 19:12:22 +0000224# List of (optional) config files for VPN device drivers to use with
225# the neutron-q-vpn agent
226declare -a Q_VPN_EXTRA_CONF_FILES
227
Mark McClainb05c8762013-07-06 23:29:39 -0400228
Dean Troyere2907b42014-02-26 17:35:37 -0600229Q_RR_CONF_FILE=$NEUTRON_CONF_DIR/rootwrap.conf
230if [[ "$Q_USE_ROOTWRAP" == "False" ]]; then
231 Q_RR_COMMAND="sudo"
232else
233 NEUTRON_ROOTWRAP=$(get_rootwrap_location neutron)
234 Q_RR_COMMAND="sudo $NEUTRON_ROOTWRAP $Q_RR_CONF_FILE"
Yuriy Taraday26623952014-07-16 17:41:53 +0400235 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
236 Q_RR_DAEMON_COMMAND="sudo $NEUTRON_ROOTWRAP-daemon $Q_RR_CONF_FILE"
237 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400238fi
239
Brian Haleyeea76212014-06-27 11:45:50 -0400240
241# Distributed Virtual Router (DVR) configuration
242# Can be:
Dean Troyer3324f192014-09-18 09:26:39 -0500243# - ``legacy`` - No DVR functionality
244# - ``dvr_snat`` - Controller or single node DVR
245# - ``dvr`` - Compute node in multi-node DVR
246#
Brian Haleyeea76212014-06-27 11:45:50 -0400247Q_DVR_MODE=${Q_DVR_MODE:-legacy}
248if [[ "$Q_DVR_MODE" != "legacy" ]]; then
249 Q_ML2_PLUGIN_MECHANISM_DRIVERS=openvswitch,linuxbridge,l2population
250fi
251
Dean Troyere2907b42014-02-26 17:35:37 -0600252# Provider Network Configurations
253# --------------------------------
254
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900255# The following variables control the Neutron ML2 plugins' allocation
256# of tenant networks and availability of provider networks. If these
257# are not configured in ``localrc``, tenant networks will be local to
258# the host (with no remote connectivity), and no physical resources
259# will be available for the allocation of provider networks.
Dean Troyere2907b42014-02-26 17:35:37 -0600260
Attila Fazekas8feaf6c2014-07-27 20:47:04 +0200261# To disable tunnels (GRE or VXLAN) for tenant networks,
262# set to False in ``local.conf``.
263# GRE tunnels are only supported by the openvswitch.
264ENABLE_TENANT_TUNNELS=${ENABLE_TENANT_TUNNELS:-True}
Dean Troyere2907b42014-02-26 17:35:37 -0600265
266# If using GRE tunnels for tenant networks, specify the range of
267# tunnel IDs from which tenant networks are allocated. Can be
Atsushi SAKAIfe7b56c2015-11-13 17:06:16 +0900268# overridden in ``localrc`` in necessary.
Anant Patil3827dc02014-07-03 21:38:16 +0530269TENANT_TUNNEL_RANGES=${TENANT_TUNNEL_RANGES:-1:1000}
Dean Troyere2907b42014-02-26 17:35:37 -0600270
271# To use VLANs for tenant networks, set to True in localrc. VLANs
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900272# are supported by the ML2 plugins, requiring additional configuration
273# described below.
Dean Troyere2907b42014-02-26 17:35:37 -0600274ENABLE_TENANT_VLANS=${ENABLE_TENANT_VLANS:-False}
275
276# If using VLANs for tenant networks, set in ``localrc`` to specify
277# the range of VLAN VIDs from which tenant networks are
278# allocated. An external network switch must be configured to
279# trunk these VLANs between hosts for multi-host connectivity.
280#
281# Example: ``TENANT_VLAN_RANGE=1000:1999``
282TENANT_VLAN_RANGE=${TENANT_VLAN_RANGE:-}
283
284# If using VLANs for tenant networks, or if using flat or VLAN
285# provider networks, set in ``localrc`` to the name of the physical
286# network, and also configure ``OVS_PHYSICAL_BRIDGE`` for the
287# openvswitch agent or ``LB_PHYSICAL_INTERFACE`` for the linuxbridge
288# agent, as described below.
289#
290# Example: ``PHYSICAL_NETWORK=default``
291PHYSICAL_NETWORK=${PHYSICAL_NETWORK:-}
292
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900293# With the openvswitch agent, if using VLANs for tenant networks,
Dean Troyere2907b42014-02-26 17:35:37 -0600294# or if using flat or VLAN provider networks, set in ``localrc`` to
295# the name of the OVS bridge to use for the physical network. The
296# bridge will be created if it does not already exist, but a
297# physical interface must be manually added to the bridge as a
298# port for external connectivity.
299#
300# Example: ``OVS_PHYSICAL_BRIDGE=br-eth1``
301OVS_PHYSICAL_BRIDGE=${OVS_PHYSICAL_BRIDGE:-}
302
YAMAMOTO Takashi15130cd2014-10-28 11:49:58 +0900303# With the linuxbridge agent, if using VLANs for tenant networks,
Dean Troyere2907b42014-02-26 17:35:37 -0600304# or if using flat or VLAN provider networks, set in ``localrc`` to
305# the name of the network interface to use for the physical
306# network.
307#
308# Example: ``LB_PHYSICAL_INTERFACE=eth1``
309LB_PHYSICAL_INTERFACE=${LB_PHYSICAL_INTERFACE:-}
310
Edgar Magana6f335b92014-07-10 15:42:44 -0700311# When Neutron tunnels are enabled it is needed to specify the
312# IP address of the end point in the local server. This IP is set
313# by default to the same IP address that the HOST IP.
314# This variable can be used to specify a different end point IP address
315# Example: ``TUNNEL_ENDPOINT_IP=1.1.1.1``
316TUNNEL_ENDPOINT_IP=${TUNNEL_ENDPOINT_IP:-$HOST_IP}
317
Dean Troyere2907b42014-02-26 17:35:37 -0600318# With the openvswitch plugin, set to True in ``localrc`` to enable
319# provider GRE tunnels when ``ENABLE_TENANT_TUNNELS`` is False.
320#
321# Example: ``OVS_ENABLE_TUNNELING=True``
322OVS_ENABLE_TUNNELING=${OVS_ENABLE_TUNNELING:-$ENABLE_TENANT_TUNNELS}
323
Tan Lin27a196e2014-10-31 15:44:34 +0800324# Use DHCP agent for providing metadata service in the case of
325# without L3 agent (No Route Agent), set to True in localrc.
326ENABLE_ISOLATED_METADATA=${ENABLE_ISOLATED_METADATA:-False}
327
328# Add a static route as dhcp option, so the request to 169.254.169.254
329# will be able to reach through a route(DHCP agent)
330# This option require ENABLE_ISOLATED_METADATA = True
331ENABLE_METADATA_NETWORK=${ENABLE_METADATA_NETWORK:-False}
Mark McClainb05c8762013-07-06 23:29:39 -0400332# Neutron plugin specific functions
333# ---------------------------------
334
335# Please refer to ``lib/neutron_plugins/README.md`` for details.
Hirofumi Ichihara36daecd2015-07-23 17:50:40 +0900336if [ -f $TOP_DIR/lib/neutron_plugins/$Q_PLUGIN ]; then
337 source $TOP_DIR/lib/neutron_plugins/$Q_PLUGIN
338fi
Mark McClainb05c8762013-07-06 23:29:39 -0400339
Doug Wiegley93e682c2015-03-03 10:31:30 -0700340# Agent loadbalancer service plugin functions
341# -------------------------------------------
342
343# Hardcoding for 1 service plugin for now
344source $TOP_DIR/lib/neutron_plugins/services/loadbalancer
345
Emilien Macchi40546f72013-09-24 15:10:25 +0200346# Agent metering service plugin functions
347# -------------------------------------------
348
349# Hardcoding for 1 service plugin for now
350source $TOP_DIR/lib/neutron_plugins/services/metering
351
Nachi Ueno69b3ff62013-06-07 10:28:33 -0700352# VPN service plugin functions
353# -------------------------------------------
354# Hardcoding for 1 service plugin for now
355source $TOP_DIR/lib/neutron_plugins/services/vpn
356
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700357# Firewall Service Plugin functions
Adam Spierscb961592013-10-05 12:11:07 +0100358# ---------------------------------
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700359source $TOP_DIR/lib/neutron_plugins/services/firewall
360
Mark McClainb05c8762013-07-06 23:29:39 -0400361# Use security group or not
362if has_neutron_plugin_security_group; then
363 Q_USE_SECGROUP=${Q_USE_SECGROUP:-True}
364else
365 Q_USE_SECGROUP=False
366fi
367
Dean Troyere2907b42014-02-26 17:35:37 -0600368# Save trace setting
Ian Wienand523f4882015-10-13 11:03:03 +1100369_XTRACE_NEUTRON=$(set +o | grep xtrace)
Dean Troyere2907b42014-02-26 17:35:37 -0600370set +o xtrace
371
372
Mark McClainb05c8762013-07-06 23:29:39 -0400373# Functions
374# ---------
375
Adam Gandelman7614d212014-08-11 14:27:50 -0700376function _determine_config_server {
377 local cfg_file
378 local opts="--config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE"
379 for cfg_file in ${Q_PLUGIN_EXTRA_CONF_FILES[@]}; do
380 opts+=" --config-file /$cfg_file"
381 done
382 echo "$opts"
383}
384
385function _determine_config_vpn {
386 local cfg_file
387 local opts="--config-file $NEUTRON_CONF --config-file=$Q_L3_CONF_FILE --config-file=$Q_VPN_CONF_FILE"
388 if is_service_enabled q-fwaas; then
389 opts+=" --config-file $Q_FWAAS_CONF_FILE"
390 fi
391 for cfg_file in ${Q_VPN_EXTRA_CONF_FILES[@]}; do
392 opts+=" --config-file $cfg_file"
393 done
394 echo "$opts"
395
396}
397
398function _determine_config_l3 {
399 local opts="--config-file $NEUTRON_CONF --config-file=$Q_L3_CONF_FILE"
400 if is_service_enabled q-fwaas; then
401 opts+=" --config-file $Q_FWAAS_CONF_FILE"
402 fi
403 echo "$opts"
404}
405
406# For services and agents that require it, dynamically construct a list of
407# --config-file arguments that are passed to the binary.
408function determine_config_files {
409 local opts=""
410 case "$1" in
411 "neutron-server") opts="$(_determine_config_server)" ;;
412 "neutron-vpn-agent") opts="$(_determine_config_vpn)" ;;
413 "neutron-l3-agent") opts="$(_determine_config_l3)" ;;
414 esac
415 if [ -z "$opts" ] ; then
416 die $LINENO "Could not determine config files for $1."
417 fi
418 echo "$opts"
419}
420
Dean Troyere4fa7212014-01-15 15:04:49 -0600421# Test if any Neutron services are enabled
422# is_neutron_enabled
423function is_neutron_enabled {
424 [[ ,${ENABLED_SERVICES} =~ ,"q-" ]] && return 0
425 return 1
426}
427
Mark McClainb05c8762013-07-06 23:29:39 -0400428# configure_neutron()
429# Set common config for all neutron server and agents.
Ian Wienandaee18c72014-02-21 15:35:08 +1100430function configure_neutron {
Mark McClainb05c8762013-07-06 23:29:39 -0400431 _configure_neutron_common
Brant Knudson2dd110c2015-03-14 12:39:14 -0500432 iniset_rpc_backend neutron $NEUTRON_CONF
Mark McClainb05c8762013-07-06 23:29:39 -0400433
434 # goes before q-svc to init Q_SERVICE_PLUGIN_CLASSES
Doug Wiegley93e682c2015-03-03 10:31:30 -0700435 if is_service_enabled q-lbaas; then
Sean Dagued6f92232016-02-09 06:34:36 -0500436 deprecated "Configuring q-lbaas through devstack is deprecated"
Doug Wiegley93e682c2015-03-03 10:31:30 -0700437 _configure_neutron_lbaas
438 fi
Emilien Macchi40546f72013-09-24 15:10:25 +0200439 if is_service_enabled q-metering; then
440 _configure_neutron_metering
441 fi
Nachi Ueno69b3ff62013-06-07 10:28:33 -0700442 if is_service_enabled q-vpn; then
Sean Dagued6f92232016-02-09 06:34:36 -0500443 deprecated "Configuring q-vpn through devstack is deprecated"
Nachi Ueno69b3ff62013-06-07 10:28:33 -0700444 _configure_neutron_vpn
445 fi
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700446 if is_service_enabled q-fwaas; then
Sean Dagued6f92232016-02-09 06:34:36 -0500447 deprecated "Configuring q-fwaas through devstack is deprecated"
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700448 _configure_neutron_fwaas
449 fi
Stephen Ma9b38eb22014-04-02 02:13:09 +0000450 if is_service_enabled q-agt q-svc; then
Mark McClainb05c8762013-07-06 23:29:39 -0400451 _configure_neutron_service
452 fi
453 if is_service_enabled q-agt; then
454 _configure_neutron_plugin_agent
455 fi
456 if is_service_enabled q-dhcp; then
457 _configure_neutron_dhcp_agent
458 fi
459 if is_service_enabled q-l3; then
460 _configure_neutron_l3_agent
461 fi
462 if is_service_enabled q-meta; then
463 _configure_neutron_metadata_agent
464 fi
465
Brian Haleyeea76212014-06-27 11:45:50 -0400466 if [[ "$Q_DVR_MODE" != "legacy" ]]; then
467 _configure_dvr
468 fi
Dina Belova58adaa62014-07-11 18:18:12 +0400469 if is_service_enabled ceilometer; then
470 _configure_neutron_ceilometer_notifications
471 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400472
473 _configure_neutron_debug_command
armando-migliaccioe155b892015-06-12 08:55:02 -0700474
475 iniset $NEUTRON_CONF DEFAULT api_workers "$API_WORKERS"
Mark McClainb05c8762013-07-06 23:29:39 -0400476}
477
Ian Wienandaee18c72014-02-21 15:35:08 +1100478function create_nova_conf_neutron {
Yong Sheng Gong032e4542013-08-25 10:21:10 +0800479 iniset $NOVA_CONF DEFAULT network_api_class "nova.network.neutronv2.api.API"
Davanum Srinivasd6456e62015-08-19 10:33:23 -0400480
Jamie Lennox394968f2015-08-28 09:18:26 +1000481 iniset $NOVA_CONF neutron auth_plugin "v3password"
482 iniset $NOVA_CONF neutron auth_url "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_AUTH_PORT/v3"
483 iniset $NOVA_CONF neutron username "$Q_ADMIN_USERNAME"
484 iniset $NOVA_CONF neutron password "$SERVICE_PASSWORD"
485 iniset $NOVA_CONF neutron user_domain_name "Default"
486 iniset $NOVA_CONF neutron project_name "$SERVICE_TENANT_NAME"
487 iniset $NOVA_CONF neutron project_domain_name "Default"
Gary Kotton13d385e2014-06-17 23:24:53 -0700488 iniset $NOVA_CONF neutron auth_strategy "$Q_AUTH_STRATEGY"
Bartosz Górski0abde392014-02-28 14:15:19 +0100489 iniset $NOVA_CONF neutron region_name "$REGION_NAME"
Rob Crittenden18d47782014-03-19 17:47:42 -0400490 iniset $NOVA_CONF neutron url "${Q_PROTOCOL}://$Q_HOST:$Q_PORT"
Mark McClainb05c8762013-07-06 23:29:39 -0400491
492 if [[ "$Q_USE_SECGROUP" == "True" ]]; then
493 LIBVIRT_FIREWALL_DRIVER=nova.virt.firewall.NoopFirewallDriver
Jeff Peeler1143f7e2013-10-31 16:21:52 -0400494 iniset $NOVA_CONF DEFAULT firewall_driver $LIBVIRT_FIREWALL_DRIVER
Yong Sheng Gong032e4542013-08-25 10:21:10 +0800495 iniset $NOVA_CONF DEFAULT security_group_api neutron
Mark McClainb05c8762013-07-06 23:29:39 -0400496 fi
497
Matt Riedemann925c2562015-08-25 13:40:25 -0700498 # optionally set options in nova_conf
Mark McClainb05c8762013-07-06 23:29:39 -0400499 neutron_plugin_create_nova_conf
500
Mark McClainb05c8762013-07-06 23:29:39 -0400501 if is_service_enabled q-meta; then
Gary Kottondd745502014-08-11 23:38:47 -0700502 iniset $NOVA_CONF neutron service_metadata_proxy "True"
Mark McClainb05c8762013-07-06 23:29:39 -0400503 fi
Aaron Rosencea32b12014-03-04 16:20:14 -0800504
505 iniset $NOVA_CONF DEFAULT vif_plugging_is_fatal "$VIF_PLUGGING_IS_FATAL"
506 iniset $NOVA_CONF DEFAULT vif_plugging_timeout "$VIF_PLUGGING_TIMEOUT"
Mark McClainb05c8762013-07-06 23:29:39 -0400507}
508
Emilien Macchia677b7f2013-11-25 23:40:20 +0100509# create_neutron_cache_dir() - Part of the _neutron_setup_keystone() process
Ian Wienandaee18c72014-02-21 15:35:08 +1100510function create_neutron_cache_dir {
Emilien Macchia677b7f2013-11-25 23:40:20 +0100511 # Create cache dir
Dean Troyer8421c2b2015-03-16 13:52:19 -0500512 sudo install -d -o $STACK_USER $NEUTRON_AUTH_CACHE_DIR
Emilien Macchia677b7f2013-11-25 23:40:20 +0100513 rm -f $NEUTRON_AUTH_CACHE_DIR/*
514}
515
Mark McClainb05c8762013-07-06 23:29:39 -0400516# create_neutron_accounts() - Set up common required neutron accounts
517
518# Tenant User Roles
519# ------------------------------------------------------------------
520# service neutron admin # if enabled
521
522# Migrated from keystone_data.sh
Ian Wienandaee18c72014-02-21 15:35:08 +1100523function create_neutron_accounts {
Mark McClainb05c8762013-07-06 23:29:39 -0400524 if [[ "$ENABLED_SERVICES" =~ "q-svc" ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100525
Jamie Lennox85ff5322015-01-28 14:28:01 +1000526 create_service_user "neutron"
Bartosz Górski0abde392014-02-28 14:15:19 +0100527
Mark McClainb05c8762013-07-06 23:29:39 -0400528 if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then
Bartosz Górski0abde392014-02-28 14:15:19 +0100529
Jamie Lennoxb17ad752015-05-29 06:04:47 +0000530 get_or_create_service "neutron" "network" "Neutron Service"
531 get_or_create_endpoint "network" \
Bartosz Górski0abde392014-02-28 14:15:19 +0100532 "$REGION_NAME" \
Rob Crittenden18d47782014-03-19 17:47:42 -0400533 "$Q_PROTOCOL://$SERVICE_HOST:$Q_PORT/" \
534 "$Q_PROTOCOL://$SERVICE_HOST:$Q_PORT/" \
535 "$Q_PROTOCOL://$SERVICE_HOST:$Q_PORT/"
Mark McClainb05c8762013-07-06 23:29:39 -0400536 fi
537 fi
538}
539
Ian Wienandaee18c72014-02-21 15:35:08 +1100540function create_neutron_initial_network {
Steve Martinelli19685422014-01-24 13:02:26 -0600541 TENANT_ID=$(openstack project list | grep " demo " | get_field 1)
DennyZhang23178a92013-10-22 17:07:32 -0500542 die_if_not_set $LINENO TENANT_ID "Failure retrieving TENANT_ID for demo"
Mark McClainb05c8762013-07-06 23:29:39 -0400543
Robd06a6d92014-12-04 20:32:22 +0000544 # Allow drivers that need to create an initial network to do so here
545 if type -p neutron_plugin_create_initial_network_profile > /dev/null; then
546 neutron_plugin_create_initial_network_profile $PHYSICAL_NETWORK
547 fi
548
Sean Dague2f8e08b2014-12-05 08:31:16 -0500549 if is_provider_network; then
Satoru Moriyaaf9b2512014-09-01 20:43:08 +0900550 die_if_not_set $LINENO PHYSICAL_NETWORK "You must specify the PHYSICAL_NETWORK"
Atsushi SAKAIfe7b56c2015-11-13 17:06:16 +0900551 die_if_not_set $LINENO PROVIDER_NETWORK_TYPE "You must specify the PROVIDER_NETWORK_TYPE"
Satoru Moriyaaf9b2512014-09-01 20:43:08 +0900552 NET_ID=$(neutron net-create $PHYSICAL_NETWORK --tenant_id $TENANT_ID --provider:network_type $PROVIDER_NETWORK_TYPE --provider:physical_network "$PHYSICAL_NETWORK" ${SEGMENTATION_ID:+--provider:segmentation_id $SEGMENTATION_ID} --shared | grep ' id ' | get_field 2)
Naohiro Tamura907d41c2015-02-19 20:57:20 +0900553 die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PHYSICAL_NETWORK $TENANT_ID"
Zhongyue Luo2548e6f2014-12-18 15:57:31 +0800554
555 if [[ "$IP_VERSION" =~ 4.* ]]; then
John Davidge8a3b7d42015-07-07 11:10:54 +0100556 SUBNET_ID=$(neutron subnet-create --tenant_id $TENANT_ID --ip_version 4 ${ALLOCATION_POOL:+--allocation-pool $ALLOCATION_POOL} --name $PROVIDER_SUBNET_NAME --gateway $NETWORK_GATEWAY --subnetpool None $NET_ID $FIXED_RANGE | grep ' id ' | get_field 2)
Naohiro Tamura907d41c2015-02-19 20:57:20 +0900557 die_if_not_set $LINENO SUBNET_ID "Failure creating SUBNET_ID for $PROVIDER_SUBNET_NAME $TENANT_ID"
Zhongyue Luo2548e6f2014-12-18 15:57:31 +0800558 fi
559
John Kasperski50ce6262015-11-23 15:47:45 -0600560 if [[ "$IP_VERSION" =~ .*6 ]] && [[ -n "$IPV6_PROVIDER_FIXED_RANGE" ]] && [[ -n "$IPV6_PROVIDER_NETWORK_GATEWAY" ]]; then
561 SUBNET_V6_ID=$(neutron subnet-create --tenant_id $TENANT_ID --ip_version 6 --ipv6-address-mode $IPV6_ADDRESS_MODE --gateway $IPV6_PROVIDER_NETWORK_GATEWAY --name $IPV6_PROVIDER_SUBNET_NAME --subnetpool None $NET_ID $IPV6_PROVIDER_FIXED_RANGE | grep 'id' | get_field 2)
562 die_if_not_set $LINENO SUBNET_V6_ID "Failure creating SUBNET_V6_ID for $IPV6_PROVIDER_SUBNET_NAME $TENANT_ID"
Zhongyue Luo2548e6f2014-12-18 15:57:31 +0800563 fi
564
Kahou Leid663e292015-10-24 12:18:57 -0700565 if [[ $Q_AGENT == "openvswitch" ]]; then
566 sudo ip link set $OVS_PHYSICAL_BRIDGE up
567 sudo ip link set br-int up
568 sudo ip link set $PUBLIC_INTERFACE up
569 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400570 else
Dirk Mueller25049cd2014-01-09 13:53:52 +0100571 NET_ID=$(neutron net-create --tenant-id $TENANT_ID "$PRIVATE_NETWORK_NAME" | grep ' id ' | get_field 2)
Naohiro Tamura4abc4d12015-02-17 22:20:19 +0900572 die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PRIVATE_NETWORK_NAME $TENANT_ID"
John Davidge21529a52014-06-30 09:55:11 -0400573
574 if [[ "$IP_VERSION" =~ 4.* ]]; then
575 # Create IPv4 private subnet
576 SUBNET_ID=$(_neutron_create_private_subnet_v4)
577 fi
578
579 if [[ "$IP_VERSION" =~ .*6 ]]; then
580 # Create IPv6 private subnet
581 IPV6_SUBNET_ID=$(_neutron_create_private_subnet_v6)
582 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400583 fi
584
585 if [[ "$Q_L3_ENABLED" == "True" ]]; then
586 # Create a router, and add the private subnet as one of its interfaces
587 if [[ "$Q_L3_ROUTER_PER_TENANT" == "True" ]]; then
588 # create a tenant-owned router.
Dirk Mueller25049cd2014-01-09 13:53:52 +0100589 ROUTER_ID=$(neutron router-create --tenant-id $TENANT_ID $Q_ROUTER_NAME | grep ' id ' | get_field 2)
DennyZhang23178a92013-10-22 17:07:32 -0500590 die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $TENANT_ID $Q_ROUTER_NAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400591 else
592 # Plugin only supports creating a single router, which should be admin owned.
593 ROUTER_ID=$(neutron router-create $Q_ROUTER_NAME | grep ' id ' | get_field 2)
DennyZhang23178a92013-10-22 17:07:32 -0500594 die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $Q_ROUTER_NAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400595 fi
John Davidge21529a52014-06-30 09:55:11 -0400596
Mark McClainb05c8762013-07-06 23:29:39 -0400597 # Create an external network, and a subnet. Configure the external network as router gw
YAMAMOTO Takashi6a633fd2014-07-23 12:02:18 +0900598 if [ "$Q_USE_PROVIDERNET_FOR_PUBLIC" = "True" ]; then
599 EXT_NET_ID=$(neutron net-create "$PUBLIC_NETWORK_NAME" -- --router:external=True --provider:network_type=flat --provider:physical_network=${PUBLIC_PHYSICAL_NETWORK} | grep ' id ' | get_field 2)
600 else
601 EXT_NET_ID=$(neutron net-create "$PUBLIC_NETWORK_NAME" -- --router:external=True | grep ' id ' | get_field 2)
602 fi
DennyZhang23178a92013-10-22 17:07:32 -0500603 die_if_not_set $LINENO EXT_NET_ID "Failure creating EXT_NET_ID for $PUBLIC_NETWORK_NAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400604
John Davidge21529a52014-06-30 09:55:11 -0400605 if [[ "$IP_VERSION" =~ 4.* ]]; then
606 # Configure router for IPv4 public access
607 _neutron_configure_router_v4
608 fi
YAMAMOTO Takashi0f18c232014-09-12 23:44:58 +0900609
John Davidge21529a52014-06-30 09:55:11 -0400610 if [[ "$IP_VERSION" =~ .*6 ]]; then
611 # Configure router for IPv6 public access
612 _neutron_configure_router_v6
Mark McClainb05c8762013-07-06 23:29:39 -0400613 fi
Sean Dague3bdb9222013-10-22 08:36:16 -0400614 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400615}
616
617# init_neutron() - Initialize databases, etc.
Ian Wienandaee18c72014-02-21 15:35:08 +1100618function init_neutron {
Ihar Hrachyshka157c84b2014-10-06 13:29:39 +0200619 recreate_database $Q_DB_NAME
Salvatore Orlandodd649882013-08-05 08:56:17 -0700620 # Run Neutron db migrations
621 $NEUTRON_BIN_DIR/neutron-db-manage --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE upgrade head
Mark McClainb05c8762013-07-06 23:29:39 -0400622}
623
624# install_neutron() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100625function install_neutron {
Doug Wiegley86561c32016-02-10 18:37:21 -0700626 # Install neutron-lib from git so we make sure we're testing
627 # the latest code.
628 if use_library_from_git "neutron-lib"; then
629 git_clone_by_name "neutron-lib"
630 setup_dev_lib "neutron-lib"
631 fi
632
Mark McClainb05c8762013-07-06 23:29:39 -0400633 git_clone $NEUTRON_REPO $NEUTRON_DIR $NEUTRON_BRANCH
634 setup_develop $NEUTRON_DIR
Kyle Mestery20b839f2014-12-08 06:17:27 +0000635 if is_service_enabled q-fwaas; then
636 git_clone $NEUTRON_FWAAS_REPO $NEUTRON_FWAAS_DIR $NEUTRON_FWAAS_BRANCH
637 setup_develop $NEUTRON_FWAAS_DIR
638 fi
Doug Wiegley93e682c2015-03-03 10:31:30 -0700639 if is_service_enabled q-lbaas; then
640 git_clone $NEUTRON_LBAAS_REPO $NEUTRON_LBAAS_DIR $NEUTRON_LBAAS_BRANCH
641 setup_develop $NEUTRON_LBAAS_DIR
642 fi
Kyle Mestery20b839f2014-12-08 06:17:27 +0000643 if is_service_enabled q-vpn; then
644 git_clone $NEUTRON_VPNAAS_REPO $NEUTRON_VPNAAS_DIR $NEUTRON_VPNAAS_BRANCH
645 setup_develop $NEUTRON_VPNAAS_DIR
646 fi
Mate Lakat6df64892014-10-17 13:09:49 +0200647
648 if [ "$VIRT_DRIVER" == 'xenserver' ]; then
649 local dom0_ip
650 dom0_ip=$(echo "$XENAPI_CONNECTION_URL" | cut -d "/" -f 3-)
651
652 local ssh_dom0
653 ssh_dom0="sudo -u $DOMZERO_USER ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null root@$dom0_ip"
654
655 # Find where the plugins should go in dom0
656 local xen_functions
657 xen_functions=$(cat $TOP_DIR/tools/xen/functions)
658 local plugin_dir
659 plugin_dir=$($ssh_dom0 "$xen_functions; set -eux; xapi_plugin_location")
660
661 # install neutron plugins to dom0
Huan Xie201e3c12015-08-27 12:34:24 +0100662 tar -czf - -C $NEUTRON_DIR/neutron/plugins/ml2/drivers/openvswitch/agent/xenapi/etc/xapi.d/plugins/ ./ |
Mate Lakat6df64892014-10-17 13:09:49 +0200663 $ssh_dom0 "tar -xzf - -C $plugin_dir && chmod a+x $plugin_dir/*"
664 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400665}
666
667# install_neutronclient() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100668function install_neutronclient {
Sean Daguee08ab102014-11-13 17:09:28 -0500669 if use_library_from_git "python-neutronclient"; then
670 git_clone_by_name "python-neutronclient"
671 setup_dev_lib "python-neutronclient"
672 sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-neutronclient"]}/tools/,/etc/bash_completion.d/}neutron.bash_completion
Sean Dague5cb19062014-11-01 01:37:45 +0100673 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400674}
675
676# install_neutron_agent_packages() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +1100677function install_neutron_agent_packages {
Robert Li72b3e442014-07-17 15:04:52 -0400678 # radvd doesn't come with the OS. Install it if the l3 service is enabled.
679 if is_service_enabled q-l3; then
680 install_package radvd
681 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400682 # install packages that are specific to plugin agent(s)
683 if is_service_enabled q-agt q-dhcp q-l3; then
684 neutron_plugin_install_agent_packages
685 fi
Doug Wiegley93e682c2015-03-03 10:31:30 -0700686
687 if is_service_enabled q-lbaas; then
688 neutron_agent_lbaas_install_agent_packages
689 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400690}
691
692# Start running processes, including screen
Ian Wienandaee18c72014-02-21 15:35:08 +1100693function start_neutron_service_and_check {
Adam Gandelman7614d212014-08-11 14:27:50 -0700694 local cfg_file_options="$(determine_config_files neutron-server)"
Rob Crittenden18d47782014-03-19 17:47:42 -0400695 local service_port=$Q_PORT
696 local service_protocol=$Q_PROTOCOL
697 if is_service_enabled tls-proxy; then
698 service_port=$Q_PORT_INT
699 service_protocol="http"
700 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400701 # Start the Neutron service
Davanum Srinivas59756e92015-09-23 17:42:54 -0400702 run_process q-svc "$NEUTRON_BIN_DIR/neutron-server $cfg_file_options"
Mark McClainb05c8762013-07-06 23:29:39 -0400703 echo "Waiting for Neutron to start..."
Rob Crittenden18d47782014-03-19 17:47:42 -0400704 if is_ssl_enabled_service "neutron"; then
705 ssl_ca="--ca-certificate=${SSL_BUNDLE_FILE}"
706 fi
Sean Dague442e4e92015-06-24 13:24:02 -0400707
708 local testcmd="wget ${ssl_ca} --no-proxy -q -O- $service_protocol://$Q_HOST:$service_port"
709 test_with_retry "$testcmd" "Neutron did not start" $SERVICE_TIMEOUT
710
Rob Crittenden18d47782014-03-19 17:47:42 -0400711 # Start proxy if enabled
712 if is_service_enabled tls-proxy; then
713 start_tls_proxy '*' $Q_PORT $Q_HOST $Q_PORT_INT &
714 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400715}
716
Russell Bryant09b94602015-06-08 15:25:43 -0400717# Control of the l2 agent is separated out to make it easier to test partial
718# upgrades (everything upgraded except the L2 agent)
719function start_neutron_l2_agent {
Davanum Srinivas59756e92015-09-23 17:42:54 -0400720 run_process q-agt "$AGENT_BINARY --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE"
Nachi Ueno584750f2013-07-15 18:22:21 -0700721
Kahou Leid663e292015-10-24 12:18:57 -0700722 if is_provider_network && [[ $Q_AGENT == "openvswitch" ]]; then
Zhongyue Luo56b7efb2014-12-16 11:36:49 +0800723 sudo ovs-vsctl --no-wait -- --may-exist add-port $OVS_PHYSICAL_BRIDGE $PUBLIC_INTERFACE
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400724 sudo ip link set $OVS_PHYSICAL_BRIDGE up
725 sudo ip link set br-int up
726 sudo ip link set $PUBLIC_INTERFACE up
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700727 if is_ironic_hardware; then
728 for IP in $(ip addr show dev $PUBLIC_INTERFACE | grep ' inet ' | awk '{print $2}'); do
729 sudo ip addr del $IP dev $PUBLIC_INTERFACE
730 sudo ip addr add $IP dev $OVS_PHYSICAL_BRIDGE
731 done
gong yong sheng348c6ac2015-06-23 14:03:47 +0800732 sudo ip route replace $FIXED_RANGE via $NETWORK_GATEWAY dev $OVS_PHYSICAL_BRIDGE
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700733 fi
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400734 fi
Russell Bryant09b94602015-06-08 15:25:43 -0400735}
736
737function start_neutron_other_agents {
Davanum Srinivas59756e92015-09-23 17:42:54 -0400738 run_process q-dhcp "$AGENT_DHCP_BINARY --config-file $NEUTRON_CONF --config-file=$Q_DHCP_CONF_FILE"
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -0400739
Paul Michalie4289c82015-08-14 11:49:27 -0400740 if is_service_enabled neutron-vpnaas; then
741 : # Started by plugin
742 elif is_service_enabled q-vpn; then
Chris Dent2f27a0e2014-09-09 13:46:02 +0100743 run_process q-vpn "$AGENT_VPN_BINARY $(determine_config_files neutron-vpn-agent)"
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700744 else
Davanum Srinivas59756e92015-09-23 17:42:54 -0400745 run_process q-l3 "$AGENT_L3_BINARY $(determine_config_files neutron-l3-agent)"
Ravi Chunduru95c93e22013-07-16 04:18:47 -0700746 fi
747
Davanum Srinivas59756e92015-09-23 17:42:54 -0400748 run_process q-meta "$AGENT_META_BINARY --config-file $NEUTRON_CONF --config-file=$Q_META_CONF_FILE"
749 run_process q-lbaas "$AGENT_LBAAS_BINARY --config-file $NEUTRON_CONF --config-file=$LBAAS_AGENT_CONF_FILENAME"
750 run_process q-metering "$AGENT_METERING_BINARY --config-file $NEUTRON_CONF --config-file $METERING_AGENT_CONF_FILENAME"
Mark McClainb05c8762013-07-06 23:29:39 -0400751
752 if [ "$VIRT_DRIVER" = 'xenserver' ]; then
753 # For XenServer, start an agent for the domU openvswitch
Davanum Srinivas59756e92015-09-23 17:42:54 -0400754 run_process q-domua "$AGENT_BINARY --config-file $NEUTRON_CONF --config-file /$Q_PLUGIN_CONF_FILE.domU"
Mark McClainb05c8762013-07-06 23:29:39 -0400755 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400756}
757
Russell Bryant09b94602015-06-08 15:25:43 -0400758# Start running processes, including screen
759function start_neutron_agents {
760 # Start up the neutron agents if enabled
761 start_neutron_l2_agent
762 start_neutron_other_agents
763}
764
765function stop_neutron_l2_agent {
766 stop_process q-agt
767}
768
769function stop_neutron_other {
Mark McClainb05c8762013-07-06 23:29:39 -0400770 if is_service_enabled q-dhcp; then
Chris Dent36891dc2015-02-03 16:22:44 +0000771 stop_process q-dhcp
Mark McClainb05c8762013-07-06 23:29:39 -0400772 pid=$(ps aux | awk '/[d]nsmasq.+interface=(tap|ns-)/ { print $2 }')
773 [ ! -z "$pid" ] && sudo kill -9 $pid
774 fi
Chris Dent36891dc2015-02-03 16:22:44 +0000775
776 stop_process q-svc
777 stop_process q-l3
778
Mark McClainb05c8762013-07-06 23:29:39 -0400779 if is_service_enabled q-meta; then
Jakub Libosvar1f763282014-01-28 23:01:38 +0100780 sudo pkill -9 -f neutron-ns-metadata-proxy || :
Chris Dent36891dc2015-02-03 16:22:44 +0000781 stop_process q-meta
Mark McClainb05c8762013-07-06 23:29:39 -0400782 fi
Akihiro Motokiedddb1f2013-12-09 20:21:06 +0900783
Doug Wiegley93e682c2015-03-03 10:31:30 -0700784 if is_service_enabled q-lbaas; then
785 neutron_lbaas_stop
786 fi
Akihiro Motokiedddb1f2013-12-09 20:21:06 +0900787 if is_service_enabled q-fwaas; then
788 neutron_fwaas_stop
789 fi
790 if is_service_enabled q-vpn; then
791 neutron_vpn_stop
792 fi
793 if is_service_enabled q-metering; then
794 neutron_metering_stop
795 fi
Li Ma50120fa2015-12-13 10:41:34 +0800796
797 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
798 sudo pkill -9 -f $NEUTRON_ROOTWRAP-daemon || :
799 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400800}
801
Russell Bryant09b94602015-06-08 15:25:43 -0400802# stop_neutron() - Stop running processes (non-screen)
803function stop_neutron {
804 stop_neutron_other
805 stop_neutron_l2_agent
806}
807
Sean M. Collins00e16a92015-02-20 11:45:21 -0500808# _move_neutron_addresses_route() - Move the primary IP to the OVS bridge
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600809# on startup, or back to the public interface on cleanup. If no IP is
810# configured on the interface, just add it as a port to the OVS bridge.
Sean M. Collins00e16a92015-02-20 11:45:21 -0500811function _move_neutron_addresses_route {
812 local from_intf=$1
813 local to_intf=$2
814 local add_ovs_port=$3
Brian Haleya0d1b012015-11-16 17:30:48 -0500815 local del_ovs_port=$4
816 local af=$5
Sean M. Collins00e16a92015-02-20 11:45:21 -0500817
818 if [[ -n "$from_intf" && -n "$to_intf" ]]; then
819 # Remove the primary IP address from $from_intf and add it to $to_intf,
820 # along with the default route, if it exists. Also, when called
821 # on configure we will also add $from_intf as a port on $to_intf,
822 # assuming it is an OVS bridge.
823
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600824 local IP_ADD=""
825 local IP_DEL=""
Shinobu KINJOf95315b2015-11-07 10:21:08 +0900826 local IP_UP=""
Ian Wienandada886d2015-10-07 14:06:26 +1100827 local DEFAULT_ROUTE_GW
Sean M. Collins59e86a32015-11-09 11:06:39 -0500828 DEFAULT_ROUTE_GW=$(ip -f $af r | awk "/default.+$from_intf/ { print \$3; exit }")
Sean M. Collins00e16a92015-02-20 11:45:21 -0500829 local ADD_OVS_PORT=""
Brian Haleya0d1b012015-11-16 17:30:48 -0500830 local DEL_OVS_PORT=""
Sean M. Collins00e16a92015-02-20 11:45:21 -0500831
Brian Haleybb9caea2015-11-16 17:18:42 -0500832 IP_BRD=$(ip -f $af a s dev $from_intf scope global primary | grep inet | awk '{ print $2, $3, $4; exit }')
Adam Kacmarsky11298a02015-06-26 14:49:47 -0600833
Sean M. Collins00e16a92015-02-20 11:45:21 -0500834 if [ "$DEFAULT_ROUTE_GW" != "" ]; then
Sean M. Collins59e86a32015-11-09 11:06:39 -0500835 ADD_DEFAULT_ROUTE="sudo ip -f $af r replace default via $DEFAULT_ROUTE_GW dev $to_intf"
Sean M. Collins00e16a92015-02-20 11:45:21 -0500836 fi
837
838 if [[ "$add_ovs_port" == "True" ]]; then
Raman Budnydb02bbf2015-03-31 13:09:09 +0300839 ADD_OVS_PORT="sudo ovs-vsctl --may-exist add-port $to_intf $from_intf"
Sean M. Collins00e16a92015-02-20 11:45:21 -0500840 fi
841
Brian Haleya0d1b012015-11-16 17:30:48 -0500842 if [[ "$del_ovs_port" == "True" ]]; then
843 DEL_OVS_PORT="sudo ovs-vsctl --if-exists del-port $from_intf $to_intf"
844 fi
845
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600846 if [[ "$IP_BRD" != "" ]]; then
Brian Haley94510212015-09-02 15:40:04 -0400847 IP_DEL="sudo ip addr del $IP_BRD dev $from_intf"
848 IP_ADD="sudo ip addr add $IP_BRD dev $to_intf"
Shinobu KINJOf95315b2015-11-07 10:21:08 +0900849 IP_UP="sudo ip link set $to_intf up"
Adam Kacmarsky6b172c82015-08-13 15:14:05 -0600850 fi
851
Brian Haleya0d1b012015-11-16 17:30:48 -0500852 # The add/del OVS port calls have to happen either before or
853 # after the address is moved in order to not leave it orphaned.
854 $DEL_OVS_PORT; $IP_DEL; $IP_ADD; $IP_UP; $ADD_OVS_PORT; $ADD_DEFAULT_ROUTE
Sean M. Collins00e16a92015-02-20 11:45:21 -0500855 fi
856}
857
Mark McClainb05c8762013-07-06 23:29:39 -0400858# cleanup_neutron() - Remove residual data files, anything left over from previous
859# runs that a clean run would need to clean up
Ian Wienandaee18c72014-02-21 15:35:08 +1100860function cleanup_neutron {
Sean M. Collins00e16a92015-02-20 11:45:21 -0500861
Yalei Wang316b3482015-07-15 21:00:31 +0800862 if [[ -n "$OVS_PHYSICAL_BRIDGE" ]]; then
Brian Haleya0d1b012015-11-16 17:30:48 -0500863 _move_neutron_addresses_route "$OVS_PHYSICAL_BRIDGE" "$PUBLIC_INTERFACE" False True "inet"
Adam Kacmarsky11298a02015-06-26 14:49:47 -0600864
Yalei Wang316b3482015-07-15 21:00:31 +0800865 if [[ $(ip -f inet6 a s dev "$OVS_PHYSICAL_BRIDGE" | grep -c 'global') != 0 ]]; then
Sean M. Collins790266f2015-11-11 13:36:35 -0500866 # ip(8) wants the prefix length when deleting
867 local v6_gateway
868 v6_gateway=$(ip -6 a s dev $OVS_PHYSICAL_BRIDGE | grep $IPV6_PUBLIC_NETWORK_GATEWAY | awk '{ print $2 }')
869 sudo ip -6 addr del $v6_gateway dev $OVS_PHYSICAL_BRIDGE
Brian Haleya0d1b012015-11-16 17:30:48 -0500870 _move_neutron_addresses_route "$OVS_PHYSICAL_BRIDGE" "$PUBLIC_INTERFACE" False False "inet6"
Yalei Wang316b3482015-07-15 21:00:31 +0800871 fi
Sean M. Collins00e16a92015-02-20 11:45:21 -0500872
Yalei Wang316b3482015-07-15 21:00:31 +0800873 if is_provider_network && is_ironic_hardware; then
874 for IP in $(ip addr show dev $OVS_PHYSICAL_BRIDGE | grep ' inet ' | awk '{print $2}'); do
875 sudo ip addr del $IP dev $OVS_PHYSICAL_BRIDGE
876 sudo ip addr add $IP dev $PUBLIC_INTERFACE
877 done
878 sudo route del -net $FIXED_RANGE gw $NETWORK_GATEWAY dev $OVS_PHYSICAL_BRIDGE
879 fi
yunhong jiangae9ee6b2014-10-08 07:01:02 -0700880 fi
881
Mark McClainb05c8762013-07-06 23:29:39 -0400882 if is_neutron_ovs_base_plugin; then
883 neutron_ovs_base_cleanup
884 fi
885
Sean M. Collins7bc2af72015-06-08 12:36:30 -0400886 if [[ $Q_AGENT == "linuxbridge" ]]; then
887 neutron_lb_cleanup
888 fi
889
Mark McClainb05c8762013-07-06 23:29:39 -0400890 # delete all namespaces created by neutron
Doug Wiegley93e682c2015-03-03 10:31:30 -0700891 for ns in $(sudo ip netns list | grep -o -E '(qdhcp|qrouter|qlbaas|fip|snat)-[0-9a-f-]*'); do
Mark McClainb05c8762013-07-06 23:29:39 -0400892 sudo ip netns delete ${ns}
893 done
894}
895
Doug Wiegley93e682c2015-03-03 10:31:30 -0700896
Maru Newby952fd902015-01-30 22:27:12 +0000897function _create_neutron_conf_dir {
Mark McClainb05c8762013-07-06 23:29:39 -0400898 # Put config files in ``NEUTRON_CONF_DIR`` for everyone to find
Dean Troyer8421c2b2015-03-16 13:52:19 -0500899 sudo install -d -o $STACK_USER $NEUTRON_CONF_DIR
Maru Newby952fd902015-01-30 22:27:12 +0000900}
901
902# _configure_neutron_common()
903# Set common config for all neutron server and agents.
904# This MUST be called before other ``_configure_neutron_*`` functions.
905function _configure_neutron_common {
906 _create_neutron_conf_dir
Mark McClainb05c8762013-07-06 23:29:39 -0400907
Martin Hickey30d5fae2015-11-10 13:44:15 +0000908 # Uses oslo config generator to generate core sample configuration files
909 (cd $NEUTRON_DIR && exec ./tools/generate_config_file_samples.sh)
910
911 cp $NEUTRON_DIR/etc/neutron.conf.sample $NEUTRON_CONF
Mark McClainb05c8762013-07-06 23:29:39 -0400912
Jerry Zhao296c1e32015-08-07 20:43:54 -0400913 Q_POLICY_FILE=$NEUTRON_CONF_DIR/policy.json
914 cp $NEUTRON_DIR/etc/policy.json $Q_POLICY_FILE
915
916 # allow neutron user to administer neutron to match neutron account
917 sed -i 's/"context_is_admin": "role:admin"/"context_is_admin": "role:admin or user_name:neutron"/g' $Q_POLICY_FILE
918
Mark McClainb05c8762013-07-06 23:29:39 -0400919 # Set plugin-specific variables ``Q_DB_NAME``, ``Q_PLUGIN_CLASS``.
920 # For main plugin config file, set ``Q_PLUGIN_CONF_PATH``, ``Q_PLUGIN_CONF_FILENAME``.
921 # For addition plugin config files, set ``Q_PLUGIN_EXTRA_CONF_PATH``,
922 # ``Q_PLUGIN_EXTRA_CONF_FILES``. For example:
Adam Spierscb961592013-10-05 12:11:07 +0100923 #
Mark McClainb05c8762013-07-06 23:29:39 -0400924 # ``Q_PLUGIN_EXTRA_CONF_FILES=(file1, file2)``
925 neutron_plugin_configure_common
926
sbauzae2c4ee22013-08-29 17:29:46 +0200927 if [[ "$Q_PLUGIN_CONF_PATH" == '' || "$Q_PLUGIN_CONF_FILENAME" == '' || "$Q_PLUGIN_CLASS" == '' ]]; then
Mark McClainb05c8762013-07-06 23:29:39 -0400928 die $LINENO "Neutron plugin not set.. exiting"
929 fi
930
931 # If needed, move config file from ``$NEUTRON_DIR/etc/neutron`` to ``NEUTRON_CONF_DIR``
932 mkdir -p /$Q_PLUGIN_CONF_PATH
933 Q_PLUGIN_CONF_FILE=$Q_PLUGIN_CONF_PATH/$Q_PLUGIN_CONF_FILENAME
Hirofumi Ichihara97cc85b2015-09-08 13:51:01 +0900934 # NOTE(hichihara): Some neutron vendor plugins were already decomposed and
935 # there is no config file in Neutron tree. They should prepare the file in each plugin.
Martin Hickey30d5fae2015-11-10 13:44:15 +0000936 if [ -f "$NEUTRON_DIR/$Q_PLUGIN_CONF_FILE.sample" ]; then
937 cp "$NEUTRON_DIR/$Q_PLUGIN_CONF_FILE.sample" /$Q_PLUGIN_CONF_FILE
938 elif [ -f $NEUTRON_DIR/$Q_PLUGIN_CONF_FILE ]; then
Hirofumi Ichihara97cc85b2015-09-08 13:51:01 +0900939 cp $NEUTRON_DIR/$Q_PLUGIN_CONF_FILE /$Q_PLUGIN_CONF_FILE
940 fi
Mark McClainb05c8762013-07-06 23:29:39 -0400941
Ihar Hrachyshkab816e5d2014-07-21 13:53:50 +0200942 iniset $NEUTRON_CONF database connection `database_connection_url $Q_DB_NAME`
Mark McClainb05c8762013-07-06 23:29:39 -0400943 iniset $NEUTRON_CONF DEFAULT state_path $DATA_DIR/neutron
salvatoree4e535b2014-10-29 18:22:46 +0100944 iniset $NEUTRON_CONF DEFAULT use_syslog $SYSLOG
Brian Haley180f5eb2015-06-16 13:14:31 -0400945 iniset $NEUTRON_CONF DEFAULT bind_host $Q_LISTEN_ADDRESS
Martin Hickey30d5fae2015-11-10 13:44:15 +0000946 iniset $NEUTRON_CONF oslo_concurrency lock_path $DATA_DIR/neutron/lock
947
Mark McClainb05c8762013-07-06 23:29:39 -0400948 # If addition config files are set, make sure their path name is set as well
949 if [[ ${#Q_PLUGIN_EXTRA_CONF_FILES[@]} > 0 && $Q_PLUGIN_EXTRA_CONF_PATH == '' ]]; then
950 die $LINENO "Neutron additional plugin config not set.. exiting"
951 fi
952
953 # If additional config files exist, copy them over to neutron configuration
954 # directory
955 if [[ $Q_PLUGIN_EXTRA_CONF_PATH != '' ]]; then
Mark McClainb05c8762013-07-06 23:29:39 -0400956 local f
957 for (( f=0; $f < ${#Q_PLUGIN_EXTRA_CONF_FILES[@]}; f+=1 )); do
958 Q_PLUGIN_EXTRA_CONF_FILES[$f]=$Q_PLUGIN_EXTRA_CONF_PATH/${Q_PLUGIN_EXTRA_CONF_FILES[$f]}
Mark McClainb05c8762013-07-06 23:29:39 -0400959 done
960 fi
961
Joe Gordonbee5c502013-08-30 13:48:08 -0400962 if [ "$VIRT_DRIVER" = 'fake' ]; then
963 # Disable arbitrary limits
964 iniset $NEUTRON_CONF quotas quota_network -1
965 iniset $NEUTRON_CONF quotas quota_subnet -1
966 iniset $NEUTRON_CONF quotas quota_port -1
967 iniset $NEUTRON_CONF quotas quota_security_group -1
968 iniset $NEUTRON_CONF quotas quota_security_group_rule -1
969 fi
970
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700971 # Format logging
972 if [ "$LOG_COLOR" == "True" ] && [ "$SYSLOG" == "False" ]; then
Salvatore Orlandobc7f6432013-11-25 10:11:14 -0800973 setup_colorized_logging $NEUTRON_CONF DEFAULT project_id
venkata anil9b1df572015-01-15 07:38:22 +0000974 else
975 # Show user_name and project_name by default like in nova
Ronald Bradforde8264902016-01-20 21:16:33 +0000976 iniset $NEUTRON_CONF DEFAULT logging_user_identity_format "%(user_name)s %(project_name)s"
Salvatore Orlando05ae8332013-08-20 14:51:08 -0700977 fi
978
Rob Crittenden18d47782014-03-19 17:47:42 -0400979 if is_service_enabled tls-proxy; then
980 # Set the service port for a proxy to take the original
981 iniset $NEUTRON_CONF DEFAULT bind_port "$Q_PORT_INT"
982 fi
983
984 if is_ssl_enabled_service "nova"; then
Jamie Lennoxdc757dd2015-03-09 14:48:09 +1100985 iniset $NEUTRON_CONF nova cafile $SSL_BUNDLE_FILE
Rob Crittenden18d47782014-03-19 17:47:42 -0400986 fi
987
988 if is_ssl_enabled_service "neutron"; then
989 ensure_certificates NEUTRON
990
991 iniset $NEUTRON_CONF DEFAULT use_ssl True
992 iniset $NEUTRON_CONF DEFAULT ssl_cert_file "$NEUTRON_SSL_CERT"
993 iniset $NEUTRON_CONF DEFAULT ssl_key_file "$NEUTRON_SSL_KEY"
994 fi
995
Mark McClainb05c8762013-07-06 23:29:39 -0400996 _neutron_setup_rootwrap
997}
998
Ian Wienandaee18c72014-02-21 15:35:08 +1100999function _configure_neutron_debug_command {
Mark McClainb05c8762013-07-06 23:29:39 -04001000 if [[ "$Q_USE_DEBUG_COMMAND" != "True" ]]; then
1001 return
1002 fi
1003
Martin Hickey30d5fae2015-11-10 13:44:15 +00001004 cp $NEUTRON_DIR/etc/l3_agent.ini.sample $NEUTRON_TEST_CONFIG_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001005
Mark McClainb05c8762013-07-06 23:29:39 -04001006 iniset $NEUTRON_TEST_CONFIG_FILE DEFAULT debug False
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001007 iniset $NEUTRON_TEST_CONFIG_FILE AGENT root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001008 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001009 iniset $NEUTRON_TEST_CONFIG_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001010 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001011
Mark McClainb05c8762013-07-06 23:29:39 -04001012 _neutron_setup_interface_driver $NEUTRON_TEST_CONFIG_FILE
1013
1014 neutron_plugin_configure_debug_command
1015}
1016
Ian Wienandaee18c72014-02-21 15:35:08 +11001017function _configure_neutron_dhcp_agent {
Mark McClainb05c8762013-07-06 23:29:39 -04001018
Martin Hickey30d5fae2015-11-10 13:44:15 +00001019 cp $NEUTRON_DIR/etc/dhcp_agent.ini.sample $Q_DHCP_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001020
Ben Nemec03997942013-08-10 09:56:16 -05001021 iniset $Q_DHCP_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001022 iniset $Q_DHCP_CONF_FILE AGENT root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001023 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001024 iniset $Q_DHCP_CONF_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001025 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001026
Tan Lin27a196e2014-10-31 15:44:34 +08001027 if ! is_service_enabled q-l3; then
1028 if [[ "$ENABLE_ISOLATED_METADATA" = "True" ]]; then
1029 iniset $Q_DHCP_CONF_FILE DEFAULT enable_isolated_metadata $ENABLE_ISOLATED_METADATA
1030 iniset $Q_DHCP_CONF_FILE DEFAULT enable_metadata_network $ENABLE_METADATA_NETWORK
1031 else
1032 if [[ "$ENABLE_METADATA_NETWORK" = "True" ]]; then
1033 die "$LINENO" "Enable isolated metadata is a must for metadata network"
1034 fi
1035 fi
1036 fi
1037
Mark McClainb05c8762013-07-06 23:29:39 -04001038 _neutron_setup_interface_driver $Q_DHCP_CONF_FILE
1039
1040 neutron_plugin_configure_dhcp_agent
1041}
1042
Ian Wienandaee18c72014-02-21 15:35:08 +11001043function _configure_neutron_l3_agent {
Mark McClainb05c8762013-07-06 23:29:39 -04001044 Q_L3_ENABLED=True
Nachi Ueno69b3ff62013-06-07 10:28:33 -07001045
Paul Michali746dcee2014-04-02 19:12:22 +00001046 if is_service_enabled q-vpn; then
Paul Michali6fd47202015-02-23 17:07:48 -05001047 neutron_vpn_configure_agent
Paul Michali746dcee2014-04-02 19:12:22 +00001048 fi
1049
Martin Hickey30d5fae2015-11-10 13:44:15 +00001050 cp $NEUTRON_DIR/etc/l3_agent.ini.sample $Q_L3_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001051
Ben Nemec03997942013-08-10 09:56:16 -05001052 iniset $Q_L3_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001053 iniset $Q_L3_CONF_FILE AGENT root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001054 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001055 iniset $Q_L3_CONF_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001056 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001057
Mark McClainb05c8762013-07-06 23:29:39 -04001058 _neutron_setup_interface_driver $Q_L3_CONF_FILE
1059
1060 neutron_plugin_configure_l3_agent
Sean M. Collins00e16a92015-02-20 11:45:21 -05001061
Brian Haleya0d1b012015-11-16 17:30:48 -05001062 _move_neutron_addresses_route "$PUBLIC_INTERFACE" "$OVS_PHYSICAL_BRIDGE" True False "inet"
Adam Kacmarsky11298a02015-06-26 14:49:47 -06001063
1064 if [[ $(ip -f inet6 a s dev "$PUBLIC_INTERFACE" | grep -c 'global') != 0 ]]; then
Brian Haleya0d1b012015-11-16 17:30:48 -05001065 _move_neutron_addresses_route "$PUBLIC_INTERFACE" "$OVS_PHYSICAL_BRIDGE" False False "inet6"
Sean M. Collins00e16a92015-02-20 11:45:21 -05001066 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001067}
1068
Ian Wienandaee18c72014-02-21 15:35:08 +11001069function _configure_neutron_metadata_agent {
Martin Hickey30d5fae2015-11-10 13:44:15 +00001070 cp $NEUTRON_DIR/etc/metadata_agent.ini.sample $Q_META_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001071
Ben Nemec03997942013-08-10 09:56:16 -05001072 iniset $Q_META_CONF_FILE DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Mark McClainb05c8762013-07-06 23:29:39 -04001073 iniset $Q_META_CONF_FILE DEFAULT nova_metadata_ip $Q_META_DATA_IP
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001074 iniset $Q_META_CONF_FILE AGENT root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001075 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
Hirofumi Ichihara2bb3a642015-08-18 12:59:08 -07001076 iniset $Q_META_CONF_FILE AGENT root_helper_daemon "$Q_RR_DAEMON_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001077 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001078}
1079
Dina Belova58adaa62014-07-11 18:18:12 +04001080function _configure_neutron_ceilometer_notifications {
Wanlong Gaocf04a9a2016-01-16 17:46:35 +08001081 iniset $NEUTRON_CONF oslo_messaging_notifications driver messaging
Dina Belova58adaa62014-07-11 18:18:12 +04001082}
1083
Doug Wiegley93e682c2015-03-03 10:31:30 -07001084function _configure_neutron_lbaas {
Martin Hickey10bff0e2015-12-03 15:18:10 +00001085 # Uses oslo config generator to generate LBaaS sample configuration files
1086 (cd $NEUTRON_LBAAS_DIR && exec ./tools/generate_config_file_samples.sh)
1087
1088 if [ -f $NEUTRON_LBAAS_DIR/etc/neutron_lbaas.conf.sample ]; then
1089 cp $NEUTRON_LBAAS_DIR/etc/neutron_lbaas.conf.sample $NEUTRON_CONF_DIR/neutron_lbaas.conf
1090 iniset $NEUTRON_CONF_DIR/neutron_lbaas.conf service_providers service_provider $DEFAULT_LB_PROVIDER
Doug Wiegley93e682c2015-03-03 10:31:30 -07001091 fi
1092 neutron_agent_lbaas_configure_common
1093 neutron_agent_lbaas_configure_agent
1094}
1095
Ian Wienandaee18c72014-02-21 15:35:08 +11001096function _configure_neutron_metering {
Emilien Macchi40546f72013-09-24 15:10:25 +02001097 neutron_agent_metering_configure_common
1098 neutron_agent_metering_configure_agent
1099}
1100
Ian Wienandaee18c72014-02-21 15:35:08 +11001101function _configure_neutron_fwaas {
Doug Wiegley37da4592015-01-30 23:30:08 -07001102 if [ -f $NEUTRON_FWAAS_DIR/etc/neutron_fwaas.conf ]; then
1103 cp $NEUTRON_FWAAS_DIR/etc/neutron_fwaas.conf $NEUTRON_CONF_DIR
1104 fi
Ravi Chunduru95c93e22013-07-16 04:18:47 -07001105 neutron_fwaas_configure_common
1106 neutron_fwaas_configure_driver
1107}
1108
Ian Wienandaee18c72014-02-21 15:35:08 +11001109function _configure_neutron_vpn {
Martin Hickey2b4d6d12015-12-04 14:40:03 +00001110 # Uses oslo config generator to generate VPNaaS sample configuration files
1111 (cd $NEUTRON_VPNAAS_DIR && exec ./tools/generate_config_file_samples.sh)
1112 if [ -f $NEUTRON_VPNAAS_DIR/etc/neutron_vpnaas.conf.sample ]; then
1113 cp $NEUTRON_VPNAAS_DIR/etc/neutron_vpnaas.conf.sample $NEUTRON_CONF_DIR/neutron_vpnaas.conf
Martin Hickey47115b02015-12-18 11:08:38 +00001114 iniset $NEUTRON_CONF_DIR/neutron_vpnaas.conf service_providers service_provider $DEFAULT_VPN_PROVIDER
Doug Wiegley37da4592015-01-30 23:30:08 -07001115 fi
Nachi Ueno69b3ff62013-06-07 10:28:33 -07001116 neutron_vpn_install_agent_packages
1117 neutron_vpn_configure_common
Nachi Ueno69b3ff62013-06-07 10:28:33 -07001118}
1119
Brian Haleyeea76212014-06-27 11:45:50 -04001120function _configure_dvr {
1121 iniset $NEUTRON_CONF DEFAULT router_distributed True
1122 iniset $Q_L3_CONF_FILE DEFAULT agent_mode $Q_DVR_MODE
1123}
1124
1125
Mark McClainb05c8762013-07-06 23:29:39 -04001126# _configure_neutron_plugin_agent() - Set config files for neutron plugin agent
1127# It is called when q-agt is enabled.
Ian Wienandaee18c72014-02-21 15:35:08 +11001128function _configure_neutron_plugin_agent {
Mark McClainb05c8762013-07-06 23:29:39 -04001129 # Specify the default root helper prior to agent configuration to
1130 # ensure that an agent's configuration can override the default
1131 iniset /$Q_PLUGIN_CONF_FILE agent root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001132 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
1133 iniset /$Q_PLUGIN_CONF_FILE agent root_helper_daemon "$Q_RR_DAEMON_COMMAND"
1134 fi
Ben Nemec03997942013-08-10 09:56:16 -05001135 iniset $NEUTRON_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Mark McClainb05c8762013-07-06 23:29:39 -04001136
1137 # Configure agent for plugin
1138 neutron_plugin_configure_plugin_agent
1139}
1140
1141# _configure_neutron_service() - Set config files for neutron service
1142# It is called when q-svc is enabled.
Ian Wienandaee18c72014-02-21 15:35:08 +11001143function _configure_neutron_service {
Mark McClainb05c8762013-07-06 23:29:39 -04001144 Q_API_PASTE_FILE=$NEUTRON_CONF_DIR/api-paste.ini
Mark McClainb05c8762013-07-06 23:29:39 -04001145 cp $NEUTRON_DIR/etc/api-paste.ini $Q_API_PASTE_FILE
Kevin Benton08a5fcc2014-07-18 16:06:12 -07001146
Mark McClainb05c8762013-07-06 23:29:39 -04001147 # Update either configuration file with plugin
1148 iniset $NEUTRON_CONF DEFAULT core_plugin $Q_PLUGIN_CLASS
1149
1150 if [[ $Q_SERVICE_PLUGIN_CLASSES != '' ]]; then
1151 iniset $NEUTRON_CONF DEFAULT service_plugins $Q_SERVICE_PLUGIN_CLASSES
1152 fi
1153
Ben Nemec03997942013-08-10 09:56:16 -05001154 iniset $NEUTRON_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL
Chris Dent74a85b02015-04-22 18:02:39 +00001155 iniset $NEUTRON_CONF oslo_policy policy_file $Q_POLICY_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001156 iniset $NEUTRON_CONF DEFAULT allow_overlapping_ips $Q_ALLOW_OVERLAPPING_IP
1157
1158 iniset $NEUTRON_CONF DEFAULT auth_strategy $Q_AUTH_STRATEGY
1159 _neutron_setup_keystone $NEUTRON_CONF keystone_authtoken
1160
Atsushi SAKAIfe7b56c2015-11-13 17:06:16 +09001161 # Configuration for neutron notifications to nova.
Terry Wilsonf06c4432014-05-20 10:54:51 -05001162 iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_status_changes $Q_NOTIFY_NOVA_PORT_STATUS_CHANGES
1163 iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_data_changes $Q_NOTIFY_NOVA_PORT_DATA_CHANGES
Jamie Lennoxdc757dd2015-03-09 14:48:09 +11001164
1165 iniset $NEUTRON_CONF nova auth_plugin password
1166 iniset $NEUTRON_CONF nova auth_url $KEYSTONE_AUTH_URI
1167 iniset $NEUTRON_CONF nova username nova
1168 iniset $NEUTRON_CONF nova password $SERVICE_PASSWORD
1169 iniset $NEUTRON_CONF nova user_domain_id default
1170 iniset $NEUTRON_CONF nova project_name $SERVICE_TENANT_NAME
1171 iniset $NEUTRON_CONF nova project_domain_id default
1172 iniset $NEUTRON_CONF nova region_name $REGION_NAME
Aaron Rosencea32b12014-03-04 16:20:14 -08001173
Mark McClainb05c8762013-07-06 23:29:39 -04001174 # Configure plugin
1175 neutron_plugin_configure_service
1176}
1177
1178# Utility Functions
1179#------------------
1180
Isaku Yamahata9e136b42013-12-16 15:52:03 +09001181# _neutron_service_plugin_class_add() - add service plugin class
Ian Wienandaee18c72014-02-21 15:35:08 +11001182function _neutron_service_plugin_class_add {
Isaku Yamahata9e136b42013-12-16 15:52:03 +09001183 local service_plugin_class=$1
1184 if [[ $Q_SERVICE_PLUGIN_CLASSES == '' ]]; then
1185 Q_SERVICE_PLUGIN_CLASSES=$service_plugin_class
1186 elif [[ ! ,${Q_SERVICE_PLUGIN_CLASSES}, =~ ,${service_plugin_class}, ]]; then
1187 Q_SERVICE_PLUGIN_CLASSES="$Q_SERVICE_PLUGIN_CLASSES,$service_plugin_class"
1188 fi
1189}
1190
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +01001191# _neutron_deploy_rootwrap_filters() - deploy rootwrap filters to $Q_CONF_ROOTWRAP_D (owned by root).
1192function _neutron_deploy_rootwrap_filters {
gong yong sheng3d6eaae2015-09-15 15:00:29 +08001193 if [[ "$Q_USE_ROOTWRAP" == "False" ]]; then
1194 return
1195 fi
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +01001196 local srcdir=$1
Dean Troyer8421c2b2015-03-16 13:52:19 -05001197 sudo install -d -o root -m 755 $Q_CONF_ROOTWRAP_D
1198 sudo install -o root -m 644 $srcdir/etc/neutron/rootwrap.d/* $Q_CONF_ROOTWRAP_D/
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +01001199}
1200
Mark McClainb05c8762013-07-06 23:29:39 -04001201# _neutron_setup_rootwrap() - configure Neutron's rootwrap
Ian Wienandaee18c72014-02-21 15:35:08 +11001202function _neutron_setup_rootwrap {
Mark McClainb05c8762013-07-06 23:29:39 -04001203 if [[ "$Q_USE_ROOTWRAP" == "False" ]]; then
1204 return
1205 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001206 # Wipe any existing ``rootwrap.d`` files first
1207 Q_CONF_ROOTWRAP_D=$NEUTRON_CONF_DIR/rootwrap.d
1208 if [[ -d $Q_CONF_ROOTWRAP_D ]]; then
1209 sudo rm -rf $Q_CONF_ROOTWRAP_D
1210 fi
Ihar Hrachyshka5893cc72014-12-22 11:49:42 +01001211
1212 _neutron_deploy_rootwrap_filters $NEUTRON_DIR
1213
Mark McClainb05c8762013-07-06 23:29:39 -04001214 # Set up ``rootwrap.conf``, pointing to ``$NEUTRON_CONF_DIR/rootwrap.d``
1215 # location moved in newer versions, prefer new location
1216 if test -r $NEUTRON_DIR/etc/neutron/rootwrap.conf; then
Dean Troyer8421c2b2015-03-16 13:52:19 -05001217 sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/neutron/rootwrap.conf $Q_RR_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001218 else
Dean Troyer8421c2b2015-03-16 13:52:19 -05001219 sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/rootwrap.conf $Q_RR_CONF_FILE
Mark McClainb05c8762013-07-06 23:29:39 -04001220 fi
1221 sudo sed -e "s:^filters_path=.*$:filters_path=$Q_CONF_ROOTWRAP_D:" -i $Q_RR_CONF_FILE
Robert Li2c5d4622015-04-21 15:48:22 -04001222 sudo sed -e 's:^exec_dirs=\(.*\)$:exec_dirs=\1,/usr/local/bin:' -i $Q_RR_CONF_FILE
1223
Mark McClainb05c8762013-07-06 23:29:39 -04001224 # Specify ``rootwrap.conf`` as first parameter to neutron-rootwrap
1225 ROOTWRAP_SUDOER_CMD="$NEUTRON_ROOTWRAP $Q_RR_CONF_FILE *"
Yuriy Taraday26623952014-07-16 17:41:53 +04001226 ROOTWRAP_DAEMON_SUDOER_CMD="$NEUTRON_ROOTWRAP-daemon $Q_RR_CONF_FILE"
Mark McClainb05c8762013-07-06 23:29:39 -04001227
1228 # Set up the rootwrap sudoers for neutron
1229 TEMPFILE=`mktemp`
Stephan Renatuse578eff2013-11-19 13:31:04 +01001230 echo "$STACK_USER ALL=(root) NOPASSWD: $ROOTWRAP_SUDOER_CMD" >$TEMPFILE
Yuriy Taraday26623952014-07-16 17:41:53 +04001231 echo "$STACK_USER ALL=(root) NOPASSWD: $ROOTWRAP_DAEMON_SUDOER_CMD" >>$TEMPFILE
Mark McClainb05c8762013-07-06 23:29:39 -04001232 chmod 0440 $TEMPFILE
1233 sudo chown root:root $TEMPFILE
1234 sudo mv $TEMPFILE /etc/sudoers.d/neutron-rootwrap
1235
1236 # Update the root_helper
1237 iniset $NEUTRON_CONF agent root_helper "$Q_RR_COMMAND"
Yuriy Taraday26623952014-07-16 17:41:53 +04001238 if [[ "$Q_USE_ROOTWRAP_DAEMON" == "True" ]]; then
1239 iniset $NEUTRON_CONF agent root_helper_daemon "$Q_RR_DAEMON_COMMAND"
1240 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001241}
1242
Ihar Hrachyshkabb4654b2015-10-06 18:09:07 +02001243# Configures keystone integration for neutron service
Ian Wienandaee18c72014-02-21 15:35:08 +11001244function _neutron_setup_keystone {
Mark McClainb05c8762013-07-06 23:29:39 -04001245 local conf_file=$1
1246 local section=$2
Jamie Lennox3561d7f2014-05-21 17:18:43 +10001247
Brant Knudson05952372014-09-19 17:22:22 -05001248 create_neutron_cache_dir
1249 configure_auth_token_middleware $conf_file $Q_ADMIN_USERNAME $NEUTRON_AUTH_CACHE_DIR $section
Mark McClainb05c8762013-07-06 23:29:39 -04001250}
1251
Ian Wienandaee18c72014-02-21 15:35:08 +11001252function _neutron_setup_interface_driver {
Mark McClainb05c8762013-07-06 23:29:39 -04001253
1254 # ovs_use_veth needs to be set before the plugin configuration
1255 # occurs to allow plugins to override the setting.
1256 iniset $1 DEFAULT ovs_use_veth $Q_OVS_USE_VETH
1257
1258 neutron_plugin_setup_interface_driver $1
1259}
1260
John Davidge21529a52014-06-30 09:55:11 -04001261# Create private IPv4 subnet
1262function _neutron_create_private_subnet_v4 {
1263 local subnet_params="--tenant-id $TENANT_ID "
1264 subnet_params+="--ip_version 4 "
1265 subnet_params+="--gateway $NETWORK_GATEWAY "
1266 subnet_params+="--name $PRIVATE_SUBNET_NAME "
John Davidge8a3b7d42015-07-07 11:10:54 +01001267 subnet_params+="--subnetpool None "
John Davidge21529a52014-06-30 09:55:11 -04001268 subnet_params+="$NET_ID $FIXED_RANGE"
Ian Wienandada886d2015-10-07 14:06:26 +11001269 local subnet_id
1270 subnet_id=$(neutron subnet-create $subnet_params | grep ' id ' | get_field 2)
John Davidge21529a52014-06-30 09:55:11 -04001271 die_if_not_set $LINENO subnet_id "Failure creating private IPv4 subnet for $TENANT_ID"
1272 echo $subnet_id
1273}
1274
1275# Create private IPv6 subnet
1276function _neutron_create_private_subnet_v6 {
1277 die_if_not_set $LINENO IPV6_RA_MODE "IPV6 RA Mode not set"
1278 die_if_not_set $LINENO IPV6_ADDRESS_MODE "IPV6 Address Mode not set"
1279 local ipv6_modes="--ipv6-ra-mode $IPV6_RA_MODE --ipv6-address-mode $IPV6_ADDRESS_MODE"
1280 local subnet_params="--tenant-id $TENANT_ID "
1281 subnet_params+="--ip_version 6 "
1282 subnet_params+="--gateway $IPV6_PRIVATE_NETWORK_GATEWAY "
1283 subnet_params+="--name $IPV6_PRIVATE_SUBNET_NAME "
John Davidge8a3b7d42015-07-07 11:10:54 +01001284 subnet_params+="--subnetpool None "
John Davidge21529a52014-06-30 09:55:11 -04001285 subnet_params+="$NET_ID $FIXED_RANGE_V6 $ipv6_modes"
Ian Wienandada886d2015-10-07 14:06:26 +11001286 local ipv6_subnet_id
1287 ipv6_subnet_id=$(neutron subnet-create $subnet_params | grep ' id ' | get_field 2)
John Davidge21529a52014-06-30 09:55:11 -04001288 die_if_not_set $LINENO ipv6_subnet_id "Failure creating private IPv6 subnet for $TENANT_ID"
1289 echo $ipv6_subnet_id
1290}
1291
1292# Create public IPv4 subnet
1293function _neutron_create_public_subnet_v4 {
1294 local subnet_params+="--ip_version 4 "
1295 subnet_params+="${Q_FLOATING_ALLOCATION_POOL:+--allocation-pool $Q_FLOATING_ALLOCATION_POOL} "
1296 subnet_params+="--gateway $PUBLIC_NETWORK_GATEWAY "
1297 subnet_params+="--name $PUBLIC_SUBNET_NAME "
John Davidge8a3b7d42015-07-07 11:10:54 +01001298 subnet_params+="--subnetpool None "
John Davidge21529a52014-06-30 09:55:11 -04001299 subnet_params+="$EXT_NET_ID $FLOATING_RANGE "
1300 subnet_params+="-- --enable_dhcp=False"
Ian Wienandada886d2015-10-07 14:06:26 +11001301 local id_and_ext_gw_ip
1302 id_and_ext_gw_ip=$(neutron subnet-create $subnet_params | grep -e 'gateway_ip' -e ' id ')
John Davidge21529a52014-06-30 09:55:11 -04001303 die_if_not_set $LINENO id_and_ext_gw_ip "Failure creating public IPv4 subnet"
1304 echo $id_and_ext_gw_ip
1305}
1306
1307# Create public IPv6 subnet
1308function _neutron_create_public_subnet_v6 {
1309 local subnet_params="--ip_version 6 "
1310 subnet_params+="--gateway $IPV6_PUBLIC_NETWORK_GATEWAY "
1311 subnet_params+="--name $IPV6_PUBLIC_SUBNET_NAME "
John Davidge8a3b7d42015-07-07 11:10:54 +01001312 subnet_params+="--subnetpool None "
John Davidge21529a52014-06-30 09:55:11 -04001313 subnet_params+="$EXT_NET_ID $IPV6_PUBLIC_RANGE "
1314 subnet_params+="-- --enable_dhcp=False"
Ian Wienandada886d2015-10-07 14:06:26 +11001315 local ipv6_id_and_ext_gw_ip
1316 ipv6_id_and_ext_gw_ip=$(neutron subnet-create $subnet_params | grep -e 'gateway_ip' -e ' id ')
John Davidge21529a52014-06-30 09:55:11 -04001317 die_if_not_set $LINENO ipv6_id_and_ext_gw_ip "Failure creating an IPv6 public subnet"
1318 echo $ipv6_id_and_ext_gw_ip
1319}
1320
1321# Configure neutron router for IPv4 public access
1322function _neutron_configure_router_v4 {
1323 neutron router-interface-add $ROUTER_ID $SUBNET_ID
1324 # Create a public subnet on the external network
Ian Wienandada886d2015-10-07 14:06:26 +11001325 local id_and_ext_gw_ip
1326 id_and_ext_gw_ip=$(_neutron_create_public_subnet_v4 $EXT_NET_ID)
1327 local ext_gw_ip
1328 ext_gw_ip=$(echo $id_and_ext_gw_ip | get_field 2)
John Davidge21529a52014-06-30 09:55:11 -04001329 PUB_SUBNET_ID=$(echo $id_and_ext_gw_ip | get_field 5)
1330 # Configure the external network as the default router gateway
1331 neutron router-gateway-set $ROUTER_ID $EXT_NET_ID
1332
1333 # This logic is specific to using the l3-agent for layer 3
1334 if is_service_enabled q-l3; then
1335 # Configure and enable public bridge
Sean M. Collins71947d52015-06-17 17:33:02 -04001336 local ext_gw_interface="none"
Cedric Brandilyb814b532015-10-22 22:25:45 +02001337 if is_neutron_ovs_base_plugin; then
Sean M. Collins71947d52015-06-17 17:33:02 -04001338 ext_gw_interface=$(_neutron_get_ext_gw_interface)
1339 elif [[ "$Q_AGENT" = "linuxbridge" ]]; then
1340 # Search for the brq device the neutron router and network for $FIXED_RANGE
1341 # will be using.
1342 # e.x. brq3592e767-da for NET_ID 3592e767-da66-4bcb-9bec-cdb03cd96102
1343 ext_gw_interface=brq${EXT_NET_ID:0:11}
1344 fi
1345 if [[ "$ext_gw_interface" != "none" ]]; then
John Davidge21529a52014-06-30 09:55:11 -04001346 local cidr_len=${FLOATING_RANGE#*/}
Sean M. Collins71947d52015-06-17 17:33:02 -04001347 local testcmd="ip -o link | grep -q $ext_gw_interface"
1348 test_with_retry "$testcmd" "$ext_gw_interface creation failed"
YAMAMOTO Takashi909fa8f2015-03-27 10:56:16 +09001349 if [[ $(ip addr show dev $ext_gw_interface | grep -c $ext_gw_ip) == 0 && ( $Q_USE_PROVIDERNET_FOR_PUBLIC == "False" || $Q_USE_PUBLIC_VETH == "True" ) ]]; then
Sean M. Collins00e16a92015-02-20 11:45:21 -05001350 sudo ip addr add $ext_gw_ip/$cidr_len dev $ext_gw_interface
1351 sudo ip link set $ext_gw_interface up
1352 fi
Sirushti Murugesanc00df202015-10-07 15:06:51 +05301353 ROUTER_GW_IP=`neutron port-list -c fixed_ips -c device_owner | grep router_gateway | awk -F'ip_address' '{ print $2 }' | cut -f3 -d\" | tr '\n' ' '`
John Davidge21529a52014-06-30 09:55:11 -04001354 die_if_not_set $LINENO ROUTER_GW_IP "Failure retrieving ROUTER_GW_IP"
gong yong sheng348c6ac2015-06-23 14:03:47 +08001355 sudo ip route replace $FIXED_RANGE via $ROUTER_GW_IP
John Davidge21529a52014-06-30 09:55:11 -04001356 fi
1357 _neutron_set_router_id
1358 fi
1359}
1360
1361# Configure neutron router for IPv6 public access
1362function _neutron_configure_router_v6 {
1363 neutron router-interface-add $ROUTER_ID $IPV6_SUBNET_ID
1364 # Create a public subnet on the external network
Ian Wienandada886d2015-10-07 14:06:26 +11001365 local ipv6_id_and_ext_gw_ip
1366 ipv6_id_and_ext_gw_ip=$(_neutron_create_public_subnet_v6 $EXT_NET_ID)
1367 local ipv6_ext_gw_ip
1368 ipv6_ext_gw_ip=$(echo $ipv6_id_and_ext_gw_ip | get_field 2)
1369 local ipv6_pub_subnet_id
1370 ipv6_pub_subnet_id=$(echo $ipv6_id_and_ext_gw_ip | get_field 5)
John Davidge21529a52014-06-30 09:55:11 -04001371
1372 # If the external network has not already been set as the default router
1373 # gateway when configuring an IPv4 public subnet, do so now
1374 if [[ "$IP_VERSION" == "6" ]]; then
1375 neutron router-gateway-set $ROUTER_ID $EXT_NET_ID
1376 fi
1377
1378 # This logic is specific to using the l3-agent for layer 3
1379 if is_service_enabled q-l3; then
John Davidge21529a52014-06-30 09:55:11 -04001380 # Ensure IPv6 forwarding is enabled on the host
1381 sudo sysctl -w net.ipv6.conf.all.forwarding=1
1382 # Configure and enable public bridge
Dane LeBlanca79e1012015-03-26 14:48:07 -04001383 # Override global IPV6_ROUTER_GW_IP with the true value from neutron
Sirushti Murugesanc00df202015-10-07 15:06:51 +05301384 IPV6_ROUTER_GW_IP=`neutron port-list -c fixed_ips | grep $ipv6_pub_subnet_id | awk -F'ip_address' '{ print $2 }' | cut -f3 -d\" | tr '\n' ' '`
Dane LeBlanca79e1012015-03-26 14:48:07 -04001385 die_if_not_set $LINENO IPV6_ROUTER_GW_IP "Failure retrieving IPV6_ROUTER_GW_IP"
John Davidge21529a52014-06-30 09:55:11 -04001386
Cedric Brandilyb814b532015-10-22 22:25:45 +02001387 if is_neutron_ovs_base_plugin; then
Ian Wienandada886d2015-10-07 14:06:26 +11001388 local ext_gw_interface
1389 ext_gw_interface=$(_neutron_get_ext_gw_interface)
John Davidge21529a52014-06-30 09:55:11 -04001390 local ipv6_cidr_len=${IPV6_PUBLIC_RANGE#*/}
1391
John Davidge21529a52014-06-30 09:55:11 -04001392 # Configure interface for public bridge
1393 sudo ip -6 addr add $ipv6_ext_gw_ip/$ipv6_cidr_len dev $ext_gw_interface
gong yong sheng348c6ac2015-06-23 14:03:47 +08001394 sudo ip -6 route replace $FIXED_RANGE_V6 via $IPV6_ROUTER_GW_IP dev $ext_gw_interface
John Davidge21529a52014-06-30 09:55:11 -04001395 fi
1396 _neutron_set_router_id
1397 fi
1398}
1399
1400# Explicitly set router id in l3 agent configuration
1401function _neutron_set_router_id {
Cedric Brandilyb814b532015-10-22 22:25:45 +02001402 if [[ "$Q_L3_ROUTER_PER_TENANT" == "False" ]]; then
John Davidge21529a52014-06-30 09:55:11 -04001403 iniset $Q_L3_CONF_FILE DEFAULT router_id $ROUTER_ID
1404 fi
1405}
1406
1407# Get ext_gw_interface depending on value of Q_USE_PUBLIC_VETH
1408function _neutron_get_ext_gw_interface {
1409 if [[ "$Q_USE_PUBLIC_VETH" == "True" ]]; then
1410 echo $Q_PUBLIC_VETH_EX
1411 else
1412 # Disable in-band as we are going to use local port
1413 # to communicate with VMs
1414 sudo ovs-vsctl set Bridge $PUBLIC_BRIDGE \
1415 other_config:disable-in-band=true
1416 echo $PUBLIC_BRIDGE
1417 fi
1418}
1419
Mark McClainb05c8762013-07-06 23:29:39 -04001420# Functions for Neutron Exercises
1421#--------------------------------
1422
Ian Wienandaee18c72014-02-21 15:35:08 +11001423function delete_probe {
Mark McClainb05c8762013-07-06 23:29:39 -04001424 local from_net="$1"
1425 net_id=`_get_net_id $from_net`
1426 probe_id=`neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-list -c id -c network_id | grep $net_id | awk '{print $2}'`
1427 neutron-debug --os-tenant-name admin --os-username admin probe-delete $probe_id
1428}
1429
Ian Wienandaee18c72014-02-21 15:35:08 +11001430function setup_neutron_debug {
Mark McClainb05c8762013-07-06 23:29:39 -04001431 if [[ "$Q_USE_DEBUG_COMMAND" == "True" ]]; then
1432 public_net_id=`_get_net_id $PUBLIC_NETWORK_NAME`
1433 neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-create --device-owner compute $public_net_id
1434 private_net_id=`_get_net_id $PRIVATE_NETWORK_NAME`
1435 neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-create --device-owner compute $private_net_id
1436 fi
1437}
1438
Ian Wienandaee18c72014-02-21 15:35:08 +11001439function teardown_neutron_debug {
Mark McClainb05c8762013-07-06 23:29:39 -04001440 delete_probe $PUBLIC_NETWORK_NAME
1441 delete_probe $PRIVATE_NETWORK_NAME
1442}
1443
Ian Wienandaee18c72014-02-21 15:35:08 +11001444function _get_net_id {
Mark McClainb05c8762013-07-06 23:29:39 -04001445 neutron --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD net-list | grep $1 | awk '{print $2}'
1446}
1447
Ian Wienandaee18c72014-02-21 15:35:08 +11001448function _get_probe_cmd_prefix {
Mark McClainb05c8762013-07-06 23:29:39 -04001449 local from_net="$1"
1450 net_id=`_get_net_id $from_net`
1451 probe_id=`neutron-debug --os-tenant-name admin --os-username admin --os-password $ADMIN_PASSWORD probe-list -c id -c network_id | grep $net_id | awk '{print $2}' | head -n 1`
1452 echo "$Q_RR_COMMAND ip netns exec qprobe-$probe_id"
1453}
1454
Mark McClainb05c8762013-07-06 23:29:39 -04001455# ssh check
Ian Wienandaee18c72014-02-21 15:35:08 +11001456function _ssh_check_neutron {
Mark McClainb05c8762013-07-06 23:29:39 -04001457 local from_net=$1
1458 local key_file=$2
1459 local ip=$3
1460 local user=$4
1461 local timeout_sec=$5
1462 local probe_cmd = ""
1463 probe_cmd=`_get_probe_cmd_prefix $from_net`
Sean Dague442e4e92015-06-24 13:24:02 -04001464 local testcmd="$probe_cmd ssh -o StrictHostKeyChecking=no -i $key_file ${user}@$ip echo success"
1465 test_with_retry "$testcmd" "server $ip didn't become ssh-able" $timeout_sec
Mark McClainb05c8762013-07-06 23:29:39 -04001466}
1467
1468# Neutron 3rd party programs
1469#---------------------------
1470
1471# please refer to ``lib/neutron_thirdparty/README.md`` for details
1472NEUTRON_THIRD_PARTIES=""
1473for f in $TOP_DIR/lib/neutron_thirdparty/*; do
Sean Dague3bdb9222013-10-22 08:36:16 -04001474 third_party=$(basename $f)
1475 if is_service_enabled $third_party; then
1476 source $TOP_DIR/lib/neutron_thirdparty/$third_party
1477 NEUTRON_THIRD_PARTIES="$NEUTRON_THIRD_PARTIES,$third_party"
1478 fi
Mark McClainb05c8762013-07-06 23:29:39 -04001479done
1480
Ian Wienandaee18c72014-02-21 15:35:08 +11001481function _neutron_third_party_do {
Mark McClainb05c8762013-07-06 23:29:39 -04001482 for third_party in ${NEUTRON_THIRD_PARTIES//,/ }; do
1483 ${1}_${third_party}
1484 done
1485}
1486
1487# configure_neutron_third_party() - Set config files, create data dirs, etc
Ian Wienandaee18c72014-02-21 15:35:08 +11001488function configure_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001489 _neutron_third_party_do configure
1490}
1491
1492# init_neutron_third_party() - Initialize databases, etc.
Ian Wienandaee18c72014-02-21 15:35:08 +11001493function init_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001494 _neutron_third_party_do init
1495}
1496
1497# install_neutron_third_party() - Collect source and prepare
Ian Wienandaee18c72014-02-21 15:35:08 +11001498function install_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001499 _neutron_third_party_do install
1500}
1501
1502# start_neutron_third_party() - Start running processes, including screen
Ian Wienandaee18c72014-02-21 15:35:08 +11001503function start_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001504 _neutron_third_party_do start
1505}
1506
1507# stop_neutron_third_party - Stop running processes (non-screen)
Ian Wienandaee18c72014-02-21 15:35:08 +11001508function stop_neutron_third_party {
Mark McClainb05c8762013-07-06 23:29:39 -04001509 _neutron_third_party_do stop
1510}
1511
armando-migliaccioef1e0802014-01-02 16:33:53 -08001512# check_neutron_third_party_integration() - Check that third party integration is sane
Ian Wienandaee18c72014-02-21 15:35:08 +11001513function check_neutron_third_party_integration {
armando-migliaccioef1e0802014-01-02 16:33:53 -08001514 _neutron_third_party_do check
1515}
1516
Sean M. Collins5ec6f8f2014-05-14 17:01:03 -04001517function is_provider_network {
1518 if [ "$Q_USE_PROVIDER_NETWORKING" == "True" ] && [ "$Q_L3_ENABLED" == "False" ]; then
1519 return 0
1520 fi
1521 return 1
1522}
1523
Mark McClainb05c8762013-07-06 23:29:39 -04001524
1525# Restore xtrace
Ian Wienand523f4882015-10-13 11:03:03 +11001526$_XTRACE_NEUTRON
Mark McClainb05c8762013-07-06 23:29:39 -04001527
Adam Spiers6a5aa7c2013-10-24 11:27:02 +01001528# Tell emacs to use shell-script-mode
1529## Local variables:
1530## mode: shell-script
1531## End: