| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 1 | #!/bin/bash | 
|  | 2 | # | 
|  | 3 | # lib/neutron | 
|  | 4 | # Install and start **Neutron** network services | 
|  | 5 |  | 
|  | 6 | # Dependencies: | 
|  | 7 | # | 
|  | 8 | # ``functions`` file | 
|  | 9 | # ``DEST`` must be defined | 
|  | 10 |  | 
|  | 11 | # ``stack.sh`` calls the entry points in this order: | 
|  | 12 | # | 
|  | 13 | # - is_XXXX_enabled | 
|  | 14 | # - install_XXXX | 
|  | 15 | # - configure_XXXX | 
|  | 16 | # - init_XXXX | 
|  | 17 | # - start_XXXX | 
|  | 18 | # - stop_XXXX | 
|  | 19 | # - cleanup_XXXX | 
|  | 20 |  | 
|  | 21 | # Save trace setting | 
|  | 22 | XTRACE=$(set +o | grep xtrace) | 
|  | 23 | set +o xtrace | 
|  | 24 |  | 
|  | 25 | # Defaults | 
|  | 26 | # -------- | 
|  | 27 |  | 
|  | 28 | # Set up default directories | 
|  | 29 | GITDIR["python-neutronclient"]=$DEST/python-neutronclient | 
|  | 30 |  | 
|  | 31 | NEUTRON_AGENT=${NEUTRON_AGENT:-openvswitch} | 
|  | 32 | NEUTRON_DIR=$DEST/neutron | 
|  | 33 | NEUTRON_AUTH_CACHE_DIR=${NEUTRON_AUTH_CACHE_DIR:-/var/cache/neutron} | 
|  | 34 |  | 
|  | 35 | NEUTRON_BIN_DIR=$(get_python_exec_prefix) | 
|  | 36 | NEUTRON_DHCP_BINARY="neutron-dhcp-agent" | 
|  | 37 |  | 
|  | 38 | NEUTRON_CONF_DIR=/etc/neutron | 
|  | 39 | NEUTRON_CONF=$NEUTRON_CONF_DIR/neutron.conf | 
|  | 40 | NEUTRON_META_CONF=$NEUTRON_CONF_DIR/metadata_agent.ini | 
|  | 41 |  | 
|  | 42 | NEUTRON_DHCP_CONF=$NEUTRON_CONF_DIR/dhcp_agent.ini | 
|  | 43 | NEUTRON_L3_CONF=$NEUTRON_CONF_DIR/l3_agent.ini | 
|  | 44 | NEUTRON_AGENT_CONF=$NEUTRON_CONF_DIR/ | 
|  | 45 |  | 
|  | 46 | NEUTRON_STATE_PATH=${NEUTRON_STATE_PATH:=$DATA_DIR/neutron} | 
|  | 47 | NEUTRON_AUTH_CACHE_DIR=${NEUTRON_AUTH_CACHE_DIR:-/var/cache/neutron} | 
|  | 48 |  | 
|  | 49 | # By default, use the ML2 plugin | 
|  | 50 | NEUTRON_PLUGIN=${NEUTRON_PLUGIN:-ml2} | 
|  | 51 | NEUTRON_PLUGIN_CONF_FILENAME=${NEUTRON_PLUGIN_CONF_FILENAME:-ml2_conf.ini} | 
|  | 52 | NEUTRON_PLUGIN_CONF_PATH=$NEUTRON_CONF_DIR/plugins/$NEUTRON_PLUGIN | 
|  | 53 | NEUTRON_PLUGIN_CONF=$NEUTRON_PLUGIN_CONF_PATH/$NEUTRON_PLUGIN_CONF_FILENAME | 
|  | 54 |  | 
|  | 55 | NEUTRON_AGENT_BINARY=${NEUTRON_AGENT_BINARY:-neutron-$NEUTRON_AGENT-agent} | 
|  | 56 | NEUTRON_L3_BINARY=${NEUTRON_L3_BINARY:-neutron-l3-agent} | 
|  | 57 | NEUTRON_META_BINARY=${NEUTRON_META_BINARY:-neutron-metadata-agent} | 
|  | 58 |  | 
|  | 59 | # Public facing bits | 
|  | 60 | if is_ssl_enabled_service "neutron" || is_service_enabled tls-proxy; then | 
|  | 61 | NEUTRON_SERVICE_PROTOCOL="https" | 
|  | 62 | fi | 
|  | 63 | NEUTRON_SERVICE_HOST=${NEUTRON_SERVICE_HOST:-$SERVICE_HOST} | 
|  | 64 | NEUTRON_SERVICE_PORT=${NEUTRON_SERVICE_PORT:-9696} | 
|  | 65 | NEUTRON_SERVICE_PORT_INT=${NEUTRON_SERVICE_PORT_INT:-19696} | 
|  | 66 | NEUTRON_SERVICE_PROTOCOL=${NEUTRON_SERVICE_PROTOCOL:-$SERVICE_PROTOCOL} | 
|  | 67 |  | 
|  | 68 | NEUTRON_AUTH_STRATEGY=${NEUTRON_AUTH_STRATEGY:-keystone} | 
|  | 69 | NEUTRON_ROOTWRAP=$(get_rootwrap_location neutron) | 
|  | 70 | NEUTRON_ROOTWRAP_CONF_FILE=$NEUTRON_CONF_DIR/rootwrap.conf | 
|  | 71 | NEUTRON_ROOTWRAP_DAEMON_CMD="sudo $NEUTRON_ROOTWRAP-daemon $NEUTRON_ROOTWRAP_CONF_FILE" | 
|  | 72 |  | 
|  | 73 | # Add all enabled config files to a single config arg | 
|  | 74 | NEUTRON_CONFIG_ARG=${NEUTRON_CONFIG_ARG:-""} | 
|  | 75 |  | 
|  | 76 | # Functions | 
|  | 77 | # --------- | 
|  | 78 |  | 
|  | 79 | # Test if any Neutron services are enabled | 
|  | 80 | # is_neutron_enabled | 
|  | 81 | function is_neutron_enabled { | 
|  | 82 | [[ ,${ENABLED_SERVICES} =~ ,"neutron-" || ,${ENABLED_SERVICES} =~ ,"q-" ]] && return 0 | 
|  | 83 | return 1 | 
|  | 84 | } | 
|  | 85 |  | 
|  | 86 | # Test if any Neutron services are enabled | 
|  | 87 | # is_neutron_enabled | 
|  | 88 | function is_neutron_legacy_enabled { | 
|  | 89 | [[ ,${ENABLED_SERVICES} =~ ,"q-" ]] && return 0 | 
|  | 90 | return 1 | 
|  | 91 | } | 
|  | 92 |  | 
|  | 93 | # cleanup_neutron() - Remove residual data files, anything left over from previous | 
|  | 94 | # runs that a clean run would need to clean up | 
|  | 95 | function cleanup_neutron_new { | 
|  | 96 | source $TOP_DIR/lib/neutron_plugins/${NEUTRON_AGENT}_agent | 
|  | 97 | if is_neutron_ovs_base_plugin; then | 
|  | 98 | neutron_ovs_base_cleanup | 
|  | 99 | fi | 
|  | 100 |  | 
|  | 101 | if [[ $NEUTRON_AGENT == "linuxbridge" ]]; then | 
|  | 102 | neutron_lb_cleanup | 
|  | 103 | fi | 
|  | 104 | # delete all namespaces created by neutron | 
|  | 105 | for ns in $(sudo ip netns list | grep -o -E '(qdhcp|qrouter|qlbaas|fip|snat)-[0-9a-f-]*'); do | 
|  | 106 | sudo ip netns delete ${ns} | 
|  | 107 | done | 
|  | 108 | } | 
|  | 109 |  | 
|  | 110 | # configure_neutron() - Set config files, create data dirs, etc | 
|  | 111 | function configure_neutron_new { | 
|  | 112 | sudo install -d -o $STACK_USER $NEUTRON_CONF_DIR | 
|  | 113 |  | 
|  | 114 | (cd $NEUTRON_DIR && exec ./tools/generate_config_file_samples.sh) | 
|  | 115 |  | 
|  | 116 | cp $NEUTRON_DIR/etc/neutron.conf.sample $NEUTRON_CONF | 
|  | 117 |  | 
|  | 118 | configure_neutron_rootwrap | 
|  | 119 |  | 
|  | 120 | mkdir -p $NEUTRON_PLUGIN_CONF_PATH | 
|  | 121 |  | 
|  | 122 | cp $NEUTRON_DIR/etc/neutron/plugins/$NEUTRON_PLUGIN/$NEUTRON_PLUGIN_CONF_FILENAME.sample $NEUTRON_PLUGIN_CONF | 
|  | 123 |  | 
|  | 124 | iniset $NEUTRON_CONF database connection `database_connection_url neutron` | 
|  | 125 | iniset $NEUTRON_CONF DEFAULT state_path $NEUTRON_STATE_PATH | 
|  | 126 | iniset $NEUTRON_CONF oslo_concurrency lock_path $NEUTRON_STATE_PATH/lock | 
|  | 127 | iniset $NEUTRON_CONF DEFAULT use_syslog $SYSLOG | 
|  | 128 |  | 
| Sean M. Collins | fbba3b9 | 2016-05-12 11:17:53 -0400 | [diff] [blame] | 129 | iniset $NEUTRON_CONF DEFAULT debug True | 
|  | 130 |  | 
| Sean M. Collins | 5394cc1 | 2016-05-11 15:03:38 -0400 | [diff] [blame] | 131 | iniset_rpc_backend neutron $NEUTRON_CONF | 
|  | 132 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 133 | # Neutron API server & Neutron plugin | 
|  | 134 | if is_service_enabled neutron-api; then | 
|  | 135 | local policy_file=$NEUTRON_CONF_DIR/policy.json | 
|  | 136 | cp $NEUTRON_DIR/etc/policy.json $policy_file | 
|  | 137 | # Allow neutron user to administer neutron to match neutron account | 
|  | 138 | sed -i 's/"context_is_admin":  "role:admin"/"context_is_admin":  "role:admin or user_name:neutron"/g' $policy_file | 
|  | 139 |  | 
|  | 140 | cp $NEUTRON_DIR/etc/api-paste.ini $NEUTRON_CONF_DIR/api-paste.ini | 
|  | 141 |  | 
|  | 142 | iniset $NEUTRON_CONF DEFAULT core_plugin ml2 | 
|  | 143 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 144 | iniset $NEUTRON_CONF DEFAULT policy_file $policy_file | 
|  | 145 | iniset $NEUTRON_CONF DEFAULT allow_overlapping_ips True | 
|  | 146 |  | 
|  | 147 | iniset $NEUTRON_CONF DEFAULT auth_strategy $NEUTRON_AUTH_STRATEGY | 
|  | 148 | configure_auth_token_middleware $NEUTRON_CONF neutron $NEUTRON_AUTH_CACHE_DIR keystone_authtoken | 
|  | 149 |  | 
|  | 150 | # Configuration for neutron notifations to nova. | 
|  | 151 | iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_status_changes $Q_NOTIFY_NOVA_PORT_STATUS_CHANGES | 
|  | 152 | iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_data_changes $Q_NOTIFY_NOVA_PORT_DATA_CHANGES | 
|  | 153 |  | 
|  | 154 | iniset $NEUTRON_CONF nova auth_type password | 
|  | 155 | iniset $NEUTRON_CONF nova auth_url "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_AUTH_PORT/v3" | 
|  | 156 | iniset $NEUTRON_CONF nova username nova | 
|  | 157 | iniset $NEUTRON_CONF nova password $SERVICE_PASSWORD | 
|  | 158 | iniset $NEUTRON_CONF nova user_domain_id default | 
|  | 159 | iniset $NEUTRON_CONF nova project_name $SERVICE_TENANT_NAME | 
|  | 160 | iniset $NEUTRON_CONF nova project_domain_id default | 
|  | 161 | iniset $NEUTRON_CONF nova region_name $REGION_NAME | 
|  | 162 |  | 
|  | 163 | # Configure VXLAN | 
|  | 164 | # TODO(sc68cal) not hardcode? | 
|  | 165 | iniset $NEUTRON_PLUGIN_CONF ml2 tenant_network_types vxlan | 
|  | 166 | iniset $NEUTRON_PLUGIN_CONF ml2 type_drivers vxlan | 
|  | 167 | iniset $NEUTRON_PLUGIN_CONF ml2 mechanism_drivers openvswitch,linuxbridge | 
|  | 168 | iniset $NEUTRON_PLUGIN_CONF ml2_type_vxlan vni_ranges 1001:2000 | 
| Sean M. Collins | ba1a64d | 2016-07-25 11:32:42 -0400 | [diff] [blame^] | 169 | iniset $NEUTRON_PLUGIN_CONF ml2 extension_drivers port_security | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 170 | fi | 
|  | 171 |  | 
|  | 172 | # Neutron OVS or LB agent | 
|  | 173 | if is_service_enabled neutron-agent; then | 
|  | 174 | iniset $NEUTRON_PLUGIN_CONF agent tunnel_types vxlan | 
| Sean M. Collins | fbba3b9 | 2016-05-12 11:17:53 -0400 | [diff] [blame] | 175 | iniset $NEUTRON_PLUGIN_CONF DEFAULT debug True | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 176 |  | 
|  | 177 | # Configure the neutron agent | 
|  | 178 | if [[ $NEUTRON_AGENT == "linuxbridge" ]]; then | 
|  | 179 | iniset $NEUTRON_PLUGIN_CONF securitygroup iptables | 
|  | 180 | iniset $NEUTRON_PLUGIN_CONF vxlan local_ip $HOST_IP | 
|  | 181 | else | 
|  | 182 | iniset $NEUTRON_PLUGIN_CONF securitygroup iptables_hybrid | 
|  | 183 | iniset $NEUTRON_PLUGIN_CONF ovs local_ip $HOST_IP | 
|  | 184 | fi | 
|  | 185 | fi | 
|  | 186 |  | 
|  | 187 | # DHCP Agent | 
|  | 188 | if is_service_enabled neutron-dhcp; then | 
|  | 189 | cp $NEUTRON_DIR/etc/dhcp_agent.ini.sample $NEUTRON_DHCP_CONF | 
|  | 190 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 191 | iniset $NEUTRON_DHCP_CONF DEFAULT debug True | 
|  | 192 | iniset $NEUTRON_DHCP_CONF agent root_helper_daemon "$NEUTRON_ROOTWRAP_DAEMON_CMD" | 
|  | 193 | iniset $NEUTRON_DHCP_CONF DEFAULT interface_driver $NEUTRON_AGENT | 
|  | 194 | neutron_plugin_configure_dhcp_agent $NEUTRON_DHCP_CONF | 
|  | 195 | fi | 
|  | 196 |  | 
|  | 197 | if is_service_enabled neutron-l3; then | 
|  | 198 | cp $NEUTRON_DIR/etc/l3_agent.ini.sample $NEUTRON_L3_CONF | 
|  | 199 | iniset $NEUTRON_L3_CONF DEFAULT interface_driver $NEUTRON_AGENT | 
|  | 200 | iniset $NEUTRON_CONF DEFAULT service_plugins router | 
|  | 201 | iniset $NEUTRON_L3_CONF agent root_helper_daemon "$NEUTRON_ROOTWRAP_DAEMON_CMD" | 
|  | 202 | iniset $NEUTRON_L3_CONF DEFAULT debug True | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 203 | neutron_plugin_configure_l3_agent $NEUTRON_L3_CONF | 
|  | 204 | fi | 
|  | 205 |  | 
|  | 206 | # Metadata | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 207 | if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 208 | cp $NEUTRON_DIR/etc/metadata_agent.ini.sample $NEUTRON_META_CONF | 
|  | 209 |  | 
| Sean M. Collins | fbba3b9 | 2016-05-12 11:17:53 -0400 | [diff] [blame] | 210 | iniset $NEUTRON_META_CONF DEFAULT debug True | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 211 | iniset $NEUTRON_META_CONF DEFAULT nova_metadata_ip $SERVICE_HOST | 
|  | 212 | iniset $NEUTRON_META_CONF agent root_helper_daemon "$NEUTRON_ROOTWRAP_DAEMON_CMD" | 
|  | 213 |  | 
|  | 214 | # TODO(dtroyer): remove the v2.0 hard code below | 
|  | 215 | iniset $NEUTRON_META_CONF DEFAULT auth_url $KEYSTONE_SERVICE_URI/v2.0 | 
|  | 216 | configure_auth_token_middleware $NEUTRON_META_CONF neutron $NEUTRON_AUTH_CACHE_DIR DEFAULT | 
|  | 217 | fi | 
|  | 218 |  | 
|  | 219 | # Format logging | 
|  | 220 | if [ "$LOG_COLOR" == "True" ] && [ "$SYSLOG" == "False" ]; then | 
|  | 221 | setup_colorized_logging $NEUTRON_CONF DEFAULT project_id | 
|  | 222 | else | 
|  | 223 | # Show user_name and project_name by default | 
|  | 224 | iniset $NEUTRON_CONF DEFAULT logging_context_format_string "%(asctime)s.%(msecs)03d %(levelname)s %(name)s [%(request_id)s %(user_name)s %(project_name)s] %(instance)s%(message)s" | 
|  | 225 | fi | 
|  | 226 |  | 
|  | 227 | if is_service_enabled tls-proxy; then | 
|  | 228 | # Set the service port for a proxy to take the original | 
|  | 229 | iniset $NEUTRON_CONF DEFAULT bind_port "$NEUTRON_SERVICE_PORT_INT" | 
|  | 230 | fi | 
|  | 231 |  | 
|  | 232 | if is_ssl_enabled_service "nova"; then | 
|  | 233 | iniset $NEUTRON_CONF nova cafile $SSL_BUNDLE_FILE | 
|  | 234 | fi | 
|  | 235 |  | 
|  | 236 | if is_ssl_enabled_service "neutron"; then | 
|  | 237 | ensure_certificates NEUTRON | 
|  | 238 |  | 
|  | 239 | iniset $NEUTRON_CONF DEFAULT use_ssl True | 
|  | 240 | iniset $NEUTRON_CONF DEFAULT ssl_cert_file "$NEUTRON_SSL_CERT" | 
|  | 241 | iniset $NEUTRON_CONF DEFAULT ssl_key_file "$NEUTRON_SSL_KEY" | 
|  | 242 | fi | 
|  | 243 |  | 
| Sean M. Collins | 8063fee | 2016-05-24 11:27:36 -0700 | [diff] [blame] | 244 | # Metering | 
|  | 245 | if is_service_enabled neutron-metering; then | 
| Sean M. Collins | 60f394a | 2016-06-17 16:15:30 -0400 | [diff] [blame] | 246 | source $TOP_DIR/lib/neutron_plugins/services/metering | 
| Sean M. Collins | 8063fee | 2016-05-24 11:27:36 -0700 | [diff] [blame] | 247 | neutron_agent_metering_configure_common | 
|  | 248 | neutron_agent_metering_configure_agent | 
|  | 249 | fi | 
|  | 250 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 251 | } | 
|  | 252 |  | 
|  | 253 | # configure_neutron_rootwrap() - configure Neutron's rootwrap | 
|  | 254 | function configure_neutron_rootwrap { | 
|  | 255 | # Set the paths of certain binaries | 
|  | 256 | neutron_rootwrap=$(get_rootwrap_location neutron) | 
|  | 257 |  | 
|  | 258 | # Specify ``rootwrap.conf`` as first parameter to neutron-rootwrap | 
|  | 259 | local rootwrap_sudoer_cmd="${neutron_rootwrap} $NEUTRON_CONF_DIR/rootwrap.conf" | 
|  | 260 |  | 
|  | 261 | # Deploy new rootwrap filters files (owned by root). | 
|  | 262 | # Wipe any existing rootwrap.d files first | 
|  | 263 | if [[ -d $NEUTRON_CONF_DIR/rootwrap.d ]]; then | 
|  | 264 | sudo rm -rf $NEUTRON_CONF_DIR/rootwrap.d | 
|  | 265 | fi | 
|  | 266 |  | 
|  | 267 | # Deploy filters to /etc/neutron/rootwrap.d | 
|  | 268 | sudo install -d -o root -g root -m 755 $NEUTRON_CONF_DIR/rootwrap.d | 
|  | 269 | sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/neutron/rootwrap.d/*.filters $NEUTRON_CONF_DIR/rootwrap.d | 
|  | 270 |  | 
|  | 271 | # Set up ``rootwrap.conf``, pointing to ``$NEUTRON_CONF_DIR/rootwrap.d`` | 
|  | 272 | sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/rootwrap.conf $NEUTRON_CONF_DIR | 
|  | 273 | sudo sed -e "s:^filters_path=.*$:filters_path=$NEUTRON_CONF_DIR/rootwrap.d:" -i $NEUTRON_CONF_DIR/rootwrap.conf | 
|  | 274 |  | 
|  | 275 | # Set up the rootwrap sudoers for Neutron | 
|  | 276 | tempfile=`mktemp` | 
|  | 277 | echo "$STACK_USER ALL=(root) NOPASSWD: $rootwrap_sudoer_cmd *" >$tempfile | 
|  | 278 | chmod 0440 $tempfile | 
|  | 279 | sudo chown root:root $tempfile | 
|  | 280 | sudo mv $tempfile /etc/sudoers.d/neutron-rootwrap | 
|  | 281 | } | 
|  | 282 |  | 
|  | 283 | # Make Neutron-required changes to nova.conf | 
|  | 284 | function configure_neutron_nova_new { | 
|  | 285 | iniset $NOVA_CONF DEFAULT use_neutron True | 
|  | 286 | iniset $NOVA_CONF neutron auth_type "password" | 
|  | 287 | iniset $NOVA_CONF neutron auth_url "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_AUTH_PORT/v3" | 
|  | 288 | iniset $NOVA_CONF neutron username neutron | 
|  | 289 | iniset $NOVA_CONF neutron password "$SERVICE_PASSWORD" | 
|  | 290 | iniset $NOVA_CONF neutron user_domain_name "Default" | 
|  | 291 | iniset $NOVA_CONF neutron project_name "$SERVICE_TENANT_NAME" | 
|  | 292 | iniset $NOVA_CONF neutron project_domain_name "Default" | 
|  | 293 | iniset $NOVA_CONF neutron auth_strategy $NEUTRON_AUTH_STRATEGY | 
|  | 294 | iniset $NOVA_CONF neutron region_name "$REGION_NAME" | 
|  | 295 | iniset $NOVA_CONF neutron url $NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT | 
|  | 296 |  | 
|  | 297 | iniset $NOVA_CONF DEFAULT firewall_driver nova.virt.firewall.NoopFirewallDriver | 
|  | 298 |  | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 299 | if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 300 | iniset $NOVA_CONF neutron service_metadata_proxy "True" | 
|  | 301 | fi | 
|  | 302 |  | 
|  | 303 | } | 
|  | 304 |  | 
|  | 305 | # Tenant               User       Roles | 
|  | 306 | # ------------------------------------------------------------------ | 
|  | 307 | # service              neutron    admin        # if enabled | 
|  | 308 |  | 
|  | 309 | # create_neutron_accounts() - Create required service accounts | 
|  | 310 | function create_neutron_accounts_new { | 
|  | 311 | if [[ "$ENABLED_SERVICES" =~ "neutron-api" ]]; then | 
|  | 312 |  | 
|  | 313 | create_service_user "neutron" | 
|  | 314 |  | 
|  | 315 | neutron_service=$(get_or_create_service "neutron" \ | 
|  | 316 | "network" "Neutron Service") | 
|  | 317 | get_or_create_endpoint $neutron_service \ | 
|  | 318 | "$REGION_NAME" \ | 
|  | 319 | "$NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT/" \ | 
|  | 320 | "$NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT/" \ | 
|  | 321 | "$NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT/" | 
|  | 322 | fi | 
|  | 323 | } | 
|  | 324 |  | 
|  | 325 | # create_neutron_cache_dir() - Part of the init_neutron() process | 
|  | 326 | function create_neutron_cache_dir { | 
|  | 327 | # Create cache dir | 
|  | 328 | sudo install -d -o $STACK_USER $NEUTRON_AUTH_CACHE_DIR | 
|  | 329 | rm -f $NEUTRON_AUTH_CACHE_DIR/* | 
|  | 330 | } | 
|  | 331 |  | 
|  | 332 | # init_neutron() - Initialize databases, etc. | 
|  | 333 | function init_neutron_new { | 
|  | 334 |  | 
|  | 335 | recreate_database neutron | 
|  | 336 |  | 
|  | 337 | # Run Neutron db migrations | 
|  | 338 | $NEUTRON_BIN_DIR/neutron-db-manage $NEUTRON_CONFIG_ARG upgrade heads | 
|  | 339 |  | 
|  | 340 | create_neutron_cache_dir | 
|  | 341 | } | 
|  | 342 |  | 
|  | 343 | # install_neutron() - Collect source and prepare | 
|  | 344 | function install_neutron_new { | 
|  | 345 | git_clone $NEUTRON_REPO $NEUTRON_DIR $NEUTRON_BRANCH | 
|  | 346 | setup_develop $NEUTRON_DIR | 
|  | 347 |  | 
|  | 348 | # Install neutron-lib from git so we make sure we're testing | 
|  | 349 | # the latest code. | 
|  | 350 | if use_library_from_git "neutron-lib"; then | 
|  | 351 | git_clone_by_name "neutron-lib" | 
|  | 352 | setup_dev_lib "neutron-lib" | 
|  | 353 | fi | 
|  | 354 |  | 
|  | 355 | # L3 service requires radvd | 
|  | 356 | if is_service_enabled neutron-l3; then | 
|  | 357 | install_package radvd | 
|  | 358 | fi | 
|  | 359 |  | 
|  | 360 | if is_service_enabled neutron-agent neutron-dhcp neutron-l3; then | 
|  | 361 | #TODO(sc68cal) - kind of ugly | 
|  | 362 | source $TOP_DIR/lib/neutron_plugins/${NEUTRON_AGENT}_agent | 
|  | 363 | neutron_plugin_install_agent_packages | 
|  | 364 | fi | 
|  | 365 |  | 
|  | 366 | } | 
|  | 367 |  | 
|  | 368 | # install_neutronclient() - Collect source and prepare | 
|  | 369 | function install_neutronclient { | 
|  | 370 | if use_library_from_git "python-neutronclient"; then | 
|  | 371 | git_clone_by_name "python-neutronclient" | 
|  | 372 | setup_dev_lib "python-neutronclient" | 
|  | 373 | sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-neutronclient"]}/tools/,/etc/bash_completion.d/}neutron.bash_completion | 
|  | 374 | fi | 
|  | 375 | } | 
|  | 376 |  | 
|  | 377 | # start_neutron_api() - Start the API process ahead of other things | 
|  | 378 | function start_neutron_api { | 
|  | 379 | local service_port=$NEUTRON_SERVICE_PORT | 
|  | 380 | local service_protocol=$NEUTRON_SERVICE_PROTOCOL | 
|  | 381 | if is_service_enabled tls-proxy; then | 
|  | 382 | service_port=$NEUTRON_SERVICE_PORT_INT | 
|  | 383 | service_protocol="http" | 
|  | 384 | fi | 
|  | 385 |  | 
|  | 386 | # Start the Neutron service | 
|  | 387 | # TODO(sc68cal) Stop hard coding this | 
|  | 388 | run_process neutron-api "$NEUTRON_BIN_DIR/neutron-server --config-file $NEUTRON_CONF --config-file $NEUTRON_PLUGIN_CONF" | 
|  | 389 |  | 
|  | 390 | if is_ssl_enabled_service "neutron"; then | 
|  | 391 | ssl_ca="--ca-certificate=${SSL_BUNDLE_FILE}" | 
|  | 392 | local testcmd="wget ${ssl_ca} --no-proxy -q -O- $service_protocol://$NEUTRON_SERVICE_HOST:$service_port" | 
|  | 393 | test_with_retry "$testcmd" "Neutron did not start" $SERVICE_TIMEOUT | 
|  | 394 | else | 
|  | 395 | if ! wait_for_service $SERVICE_TIMEOUT $service_protocol://$NEUTRON_SERVICE_HOST:$service_port; then | 
|  | 396 | die $LINENO "neutron-api did not start" | 
|  | 397 | fi | 
|  | 398 | fi | 
|  | 399 |  | 
|  | 400 |  | 
|  | 401 | # Start proxy if enabled | 
|  | 402 | if is_service_enabled tls-proxy; then | 
|  | 403 | start_tls_proxy '*' $NEUTRON_SERVICE_PORT $NEUTRON_SERVICE_HOST $NEUTRON_SERVICE_PORT_INT & | 
|  | 404 | fi | 
|  | 405 | } | 
|  | 406 |  | 
|  | 407 | # start_neutron() - Start running processes, including screen | 
|  | 408 | function start_neutron_new { | 
|  | 409 | _set_config_files | 
|  | 410 |  | 
|  | 411 | # Start up the neutron agents if enabled | 
|  | 412 | # TODO(sc68cal) Make this pluggable so different DevStack plugins for different Neutron plugins | 
|  | 413 | # can resolve the $NEUTRON_AGENT_BINARY | 
|  | 414 | if is_service_enabled neutron-agent; then | 
|  | 415 | run_process neutron-agent "$NEUTRON_BIN_DIR/$NEUTRON_AGENT_BINARY $NEUTRON_CONFIG_ARG" | 
|  | 416 | fi | 
|  | 417 | if is_service_enabled neutron-dhcp; then | 
|  | 418 | neutron_plugin_configure_dhcp_agent $NEUTRON_DHCP_CONF | 
|  | 419 | run_process neutron-dhcp "$NEUTRON_BIN_DIR/$NEUTRON_DHCP_BINARY $NEUTRON_CONFIG_ARG" | 
|  | 420 | fi | 
|  | 421 | if is_service_enabled neutron-l3; then | 
|  | 422 | run_process neutron-l3 "$NEUTRON_BIN_DIR/$NEUTRON_L3_BINARY $NEUTRON_CONFIG_ARG" | 
|  | 423 | # XXX(sc68cal) - Here's where plugins can wire up their own networks instead | 
|  | 424 | # of the code in lib/neutron_plugins/services/l3 | 
|  | 425 | if type -p neutron_plugin_create_initial_networks > /dev/null; then | 
|  | 426 | neutron_plugin_create_initial_networks | 
|  | 427 | else | 
|  | 428 | # XXX(sc68cal) Load up the built in Neutron networking code and build a topology | 
|  | 429 | source $TOP_DIR/lib/neutron_plugins/services/l3 | 
|  | 430 | # Create the networks using servic | 
|  | 431 | create_neutron_initial_network | 
|  | 432 | fi | 
|  | 433 | fi | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 434 | if is_service_enabled neutron-metadata-agent; then | 
|  | 435 | run_process neutron-metadata-agent "$NEUTRON_BIN_DIR/$NEUTRON_META_BINARY $NEUTRON_CONFIG_ARG" | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 436 | fi | 
| Sean M. Collins | 8063fee | 2016-05-24 11:27:36 -0700 | [diff] [blame] | 437 |  | 
|  | 438 | if is_service_enabled neutron-metering; then | 
|  | 439 | run_process neutron-metering "$AGENT_METERING_BINARY --config-file $NEUTRON_CONF --config-file $METERING_AGENT_CONF_FILENAME" | 
|  | 440 | fi | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 441 | } | 
|  | 442 |  | 
|  | 443 | # stop_neutron() - Stop running processes (non-screen) | 
|  | 444 | function stop_neutron_new { | 
|  | 445 | for serv in neutron-api neutron-agent neutron-l3; do | 
|  | 446 | stop_process $serv | 
|  | 447 | done | 
|  | 448 |  | 
|  | 449 | if is_service_enabled neutron-dhcp; then | 
|  | 450 | stop_process neutron-dhcp | 
|  | 451 | pid=$(ps aux | awk '/[d]nsmasq.+interface=(tap|ns-)/ { print $2 }') | 
|  | 452 | [ ! -z "$pid" ] && sudo kill -9 $pid | 
|  | 453 | fi | 
|  | 454 |  | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 455 | if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 456 | sudo pkill -9 -f neutron-ns-metadata-proxy || : | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 457 | stop_process neutron-metadata-agent | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 458 | fi | 
|  | 459 | } | 
|  | 460 |  | 
|  | 461 | # Compile the lost of enabled config files | 
|  | 462 | function _set_config_files { | 
|  | 463 |  | 
| Sean M. Collins | e7d2b56 | 2016-05-12 12:04:03 -0400 | [diff] [blame] | 464 | NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_CONF" | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 465 |  | 
|  | 466 | #TODO(sc68cal) OVS and LB agent uses settings in NEUTRON_PLUGIN_CONF (ml2_conf.ini) but others may not | 
|  | 467 | if is_service_enabled neutron-agent; then | 
|  | 468 | NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_PLUGIN_CONF" | 
|  | 469 | fi | 
|  | 470 |  | 
|  | 471 | if is_service_enabled neutron-dhcp; then | 
|  | 472 | NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_DHCP_CONF" | 
|  | 473 | fi | 
|  | 474 |  | 
|  | 475 | if is_service_enabled neutron-l3; then | 
|  | 476 | NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_L3_CONF" | 
|  | 477 | fi | 
|  | 478 |  | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 479 | if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 480 | NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_META_CONF" | 
|  | 481 | fi | 
|  | 482 |  | 
|  | 483 | } | 
|  | 484 |  | 
|  | 485 | # Dispatch functions | 
|  | 486 | # These are needed for compatibility between the old and new implementations | 
|  | 487 | # where there are function name overlaps.  These will be removed when | 
|  | 488 | # neutron-legacy is removed. | 
|  | 489 | # TODO(sc68cal) Remove when neutron-legacy is no more. | 
|  | 490 | function cleanup_neutron { | 
|  | 491 | if is_neutron_legacy_enabled; then | 
|  | 492 | # Call back to old function | 
|  | 493 | cleanup_mutnauq "$@" | 
|  | 494 | else | 
|  | 495 | cleanup_neutron_new "$@" | 
|  | 496 | fi | 
|  | 497 | } | 
|  | 498 |  | 
|  | 499 | function configure_neutron { | 
|  | 500 | if is_neutron_legacy_enabled; then | 
|  | 501 | # Call back to old function | 
|  | 502 | configure_mutnauq "$@" | 
|  | 503 | else | 
|  | 504 | configure_neutron_new "$@" | 
|  | 505 | fi | 
|  | 506 | } | 
|  | 507 |  | 
|  | 508 | function configure_neutron_nova { | 
|  | 509 | if is_neutron_legacy_enabled; then | 
|  | 510 | # Call back to old function | 
|  | 511 | create_nova_conf_neutron "$@" | 
|  | 512 | else | 
|  | 513 | configure_neutron_nova_new "$@" | 
|  | 514 | fi | 
|  | 515 | } | 
|  | 516 |  | 
|  | 517 | function create_neutron_accounts { | 
|  | 518 | if is_neutron_legacy_enabled; then | 
|  | 519 | # Call back to old function | 
|  | 520 | create_mutnauq_accounts "$@" | 
|  | 521 | else | 
|  | 522 | create_neutron_accounts_new "$@" | 
|  | 523 | fi | 
|  | 524 | } | 
|  | 525 |  | 
|  | 526 | function init_neutron { | 
|  | 527 | if is_neutron_legacy_enabled; then | 
|  | 528 | # Call back to old function | 
|  | 529 | init_mutnauq "$@" | 
|  | 530 | else | 
|  | 531 | init_neutron_new "$@" | 
|  | 532 | fi | 
|  | 533 | } | 
|  | 534 |  | 
|  | 535 | function install_neutron { | 
|  | 536 | if is_neutron_legacy_enabled; then | 
|  | 537 | # Call back to old function | 
|  | 538 | install_mutnauq "$@" | 
|  | 539 | else | 
|  | 540 | install_neutron_new "$@" | 
|  | 541 | fi | 
|  | 542 | } | 
|  | 543 |  | 
|  | 544 | function start_neutron { | 
|  | 545 | if is_neutron_legacy_enabled; then | 
|  | 546 | # Call back to old function | 
|  | 547 | start_mutnauq_l2_agent "$@" | 
|  | 548 | start_mutnauq_other_agents "$@" | 
|  | 549 | else | 
|  | 550 | start_neutron_new "$@" | 
|  | 551 | fi | 
|  | 552 | } | 
|  | 553 |  | 
|  | 554 | function stop_neutron { | 
|  | 555 | if is_neutron_legacy_enabled; then | 
|  | 556 | # Call back to old function | 
|  | 557 | stop_mutnauq "$@" | 
|  | 558 | else | 
|  | 559 | stop_neutron_new "$@" | 
|  | 560 | fi | 
|  | 561 | } | 
|  | 562 |  | 
|  | 563 | # Restore xtrace | 
|  | 564 | $XTRACE |