| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 1 | #!/bin/bash | 
|  | 2 | # | 
|  | 3 | # lib/neutron | 
|  | 4 | # Install and start **Neutron** network services | 
|  | 5 |  | 
|  | 6 | # Dependencies: | 
|  | 7 | # | 
|  | 8 | # ``functions`` file | 
|  | 9 | # ``DEST`` must be defined | 
|  | 10 |  | 
|  | 11 | # ``stack.sh`` calls the entry points in this order: | 
|  | 12 | # | 
|  | 13 | # - is_XXXX_enabled | 
|  | 14 | # - install_XXXX | 
|  | 15 | # - configure_XXXX | 
|  | 16 | # - init_XXXX | 
|  | 17 | # - start_XXXX | 
|  | 18 | # - stop_XXXX | 
|  | 19 | # - cleanup_XXXX | 
|  | 20 |  | 
|  | 21 | # Save trace setting | 
|  | 22 | XTRACE=$(set +o | grep xtrace) | 
|  | 23 | set +o xtrace | 
|  | 24 |  | 
|  | 25 | # Defaults | 
|  | 26 | # -------- | 
|  | 27 |  | 
|  | 28 | # Set up default directories | 
|  | 29 | GITDIR["python-neutronclient"]=$DEST/python-neutronclient | 
|  | 30 |  | 
|  | 31 | NEUTRON_AGENT=${NEUTRON_AGENT:-openvswitch} | 
|  | 32 | NEUTRON_DIR=$DEST/neutron | 
|  | 33 | NEUTRON_AUTH_CACHE_DIR=${NEUTRON_AUTH_CACHE_DIR:-/var/cache/neutron} | 
|  | 34 |  | 
|  | 35 | NEUTRON_BIN_DIR=$(get_python_exec_prefix) | 
|  | 36 | NEUTRON_DHCP_BINARY="neutron-dhcp-agent" | 
|  | 37 |  | 
|  | 38 | NEUTRON_CONF_DIR=/etc/neutron | 
|  | 39 | NEUTRON_CONF=$NEUTRON_CONF_DIR/neutron.conf | 
|  | 40 | NEUTRON_META_CONF=$NEUTRON_CONF_DIR/metadata_agent.ini | 
|  | 41 |  | 
|  | 42 | NEUTRON_DHCP_CONF=$NEUTRON_CONF_DIR/dhcp_agent.ini | 
|  | 43 | NEUTRON_L3_CONF=$NEUTRON_CONF_DIR/l3_agent.ini | 
|  | 44 | NEUTRON_AGENT_CONF=$NEUTRON_CONF_DIR/ | 
|  | 45 |  | 
|  | 46 | NEUTRON_STATE_PATH=${NEUTRON_STATE_PATH:=$DATA_DIR/neutron} | 
|  | 47 | NEUTRON_AUTH_CACHE_DIR=${NEUTRON_AUTH_CACHE_DIR:-/var/cache/neutron} | 
|  | 48 |  | 
|  | 49 | # By default, use the ML2 plugin | 
| YAMAMOTO Takashi | 4a55d2a | 2016-08-24 15:30:09 +0900 | [diff] [blame] | 50 | NEUTRON_CORE_PLUGIN=${NEUTRON_CORE_PLUGIN:-ml2} | 
|  | 51 | NEUTRON_CORE_PLUGIN_CONF_FILENAME=${NEUTRON_CORE_PLUGIN_CONF_FILENAME:-ml2_conf.ini} | 
|  | 52 | NEUTRON_CORE_PLUGIN_CONF_PATH=$NEUTRON_CONF_DIR/plugins/$NEUTRON_CORE_PLUGIN | 
|  | 53 | NEUTRON_CORE_PLUGIN_CONF=$NEUTRON_CORE_PLUGIN_CONF_PATH/$NEUTRON_CORE_PLUGIN_CONF_FILENAME | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 54 |  | 
|  | 55 | NEUTRON_AGENT_BINARY=${NEUTRON_AGENT_BINARY:-neutron-$NEUTRON_AGENT-agent} | 
|  | 56 | NEUTRON_L3_BINARY=${NEUTRON_L3_BINARY:-neutron-l3-agent} | 
|  | 57 | NEUTRON_META_BINARY=${NEUTRON_META_BINARY:-neutron-metadata-agent} | 
|  | 58 |  | 
|  | 59 | # Public facing bits | 
|  | 60 | if is_ssl_enabled_service "neutron" || is_service_enabled tls-proxy; then | 
|  | 61 | NEUTRON_SERVICE_PROTOCOL="https" | 
|  | 62 | fi | 
|  | 63 | NEUTRON_SERVICE_HOST=${NEUTRON_SERVICE_HOST:-$SERVICE_HOST} | 
|  | 64 | NEUTRON_SERVICE_PORT=${NEUTRON_SERVICE_PORT:-9696} | 
|  | 65 | NEUTRON_SERVICE_PORT_INT=${NEUTRON_SERVICE_PORT_INT:-19696} | 
|  | 66 | NEUTRON_SERVICE_PROTOCOL=${NEUTRON_SERVICE_PROTOCOL:-$SERVICE_PROTOCOL} | 
|  | 67 |  | 
|  | 68 | NEUTRON_AUTH_STRATEGY=${NEUTRON_AUTH_STRATEGY:-keystone} | 
|  | 69 | NEUTRON_ROOTWRAP=$(get_rootwrap_location neutron) | 
|  | 70 | NEUTRON_ROOTWRAP_CONF_FILE=$NEUTRON_CONF_DIR/rootwrap.conf | 
|  | 71 | NEUTRON_ROOTWRAP_DAEMON_CMD="sudo $NEUTRON_ROOTWRAP-daemon $NEUTRON_ROOTWRAP_CONF_FILE" | 
|  | 72 |  | 
|  | 73 | # Add all enabled config files to a single config arg | 
|  | 74 | NEUTRON_CONFIG_ARG=${NEUTRON_CONFIG_ARG:-""} | 
|  | 75 |  | 
|  | 76 | # Functions | 
|  | 77 | # --------- | 
|  | 78 |  | 
|  | 79 | # Test if any Neutron services are enabled | 
|  | 80 | # is_neutron_enabled | 
|  | 81 | function is_neutron_enabled { | 
|  | 82 | [[ ,${ENABLED_SERVICES} =~ ,"neutron-" || ,${ENABLED_SERVICES} =~ ,"q-" ]] && return 0 | 
|  | 83 | return 1 | 
|  | 84 | } | 
|  | 85 |  | 
|  | 86 | # Test if any Neutron services are enabled | 
|  | 87 | # is_neutron_enabled | 
|  | 88 | function is_neutron_legacy_enabled { | 
|  | 89 | [[ ,${ENABLED_SERVICES} =~ ,"q-" ]] && return 0 | 
|  | 90 | return 1 | 
|  | 91 | } | 
|  | 92 |  | 
|  | 93 | # cleanup_neutron() - Remove residual data files, anything left over from previous | 
|  | 94 | # runs that a clean run would need to clean up | 
|  | 95 | function cleanup_neutron_new { | 
|  | 96 | source $TOP_DIR/lib/neutron_plugins/${NEUTRON_AGENT}_agent | 
|  | 97 | if is_neutron_ovs_base_plugin; then | 
|  | 98 | neutron_ovs_base_cleanup | 
|  | 99 | fi | 
|  | 100 |  | 
|  | 101 | if [[ $NEUTRON_AGENT == "linuxbridge" ]]; then | 
|  | 102 | neutron_lb_cleanup | 
|  | 103 | fi | 
|  | 104 | # delete all namespaces created by neutron | 
|  | 105 | for ns in $(sudo ip netns list | grep -o -E '(qdhcp|qrouter|qlbaas|fip|snat)-[0-9a-f-]*'); do | 
|  | 106 | sudo ip netns delete ${ns} | 
|  | 107 | done | 
|  | 108 | } | 
|  | 109 |  | 
|  | 110 | # configure_neutron() - Set config files, create data dirs, etc | 
|  | 111 | function configure_neutron_new { | 
|  | 112 | sudo install -d -o $STACK_USER $NEUTRON_CONF_DIR | 
|  | 113 |  | 
|  | 114 | (cd $NEUTRON_DIR && exec ./tools/generate_config_file_samples.sh) | 
|  | 115 |  | 
|  | 116 | cp $NEUTRON_DIR/etc/neutron.conf.sample $NEUTRON_CONF | 
|  | 117 |  | 
|  | 118 | configure_neutron_rootwrap | 
|  | 119 |  | 
| YAMAMOTO Takashi | 4a55d2a | 2016-08-24 15:30:09 +0900 | [diff] [blame] | 120 | mkdir -p $NEUTRON_CORE_PLUGIN_CONF_PATH | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 121 |  | 
| YAMAMOTO Takashi | 4a55d2a | 2016-08-24 15:30:09 +0900 | [diff] [blame] | 122 | cp $NEUTRON_DIR/etc/neutron/plugins/$NEUTRON_CORE_PLUGIN/$NEUTRON_CORE_PLUGIN_CONF_FILENAME.sample $NEUTRON_CORE_PLUGIN_CONF | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 123 |  | 
|  | 124 | iniset $NEUTRON_CONF database connection `database_connection_url neutron` | 
|  | 125 | iniset $NEUTRON_CONF DEFAULT state_path $NEUTRON_STATE_PATH | 
|  | 126 | iniset $NEUTRON_CONF oslo_concurrency lock_path $NEUTRON_STATE_PATH/lock | 
|  | 127 | iniset $NEUTRON_CONF DEFAULT use_syslog $SYSLOG | 
|  | 128 |  | 
| Gary Kotton | d2ef615 | 2016-09-20 04:12:11 -0700 | [diff] [blame] | 129 | iniset $NEUTRON_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL | 
| Sean M. Collins | fbba3b9 | 2016-05-12 11:17:53 -0400 | [diff] [blame] | 130 |  | 
| Sean M. Collins | 5394cc1 | 2016-05-11 15:03:38 -0400 | [diff] [blame] | 131 | iniset_rpc_backend neutron $NEUTRON_CONF | 
|  | 132 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 133 | # Neutron API server & Neutron plugin | 
|  | 134 | if is_service_enabled neutron-api; then | 
|  | 135 | local policy_file=$NEUTRON_CONF_DIR/policy.json | 
|  | 136 | cp $NEUTRON_DIR/etc/policy.json $policy_file | 
|  | 137 | # Allow neutron user to administer neutron to match neutron account | 
|  | 138 | sed -i 's/"context_is_admin":  "role:admin"/"context_is_admin":  "role:admin or user_name:neutron"/g' $policy_file | 
|  | 139 |  | 
|  | 140 | cp $NEUTRON_DIR/etc/api-paste.ini $NEUTRON_CONF_DIR/api-paste.ini | 
|  | 141 |  | 
| YAMAMOTO Takashi | 4a55d2a | 2016-08-24 15:30:09 +0900 | [diff] [blame] | 142 | iniset $NEUTRON_CONF DEFAULT core_plugin $NEUTRON_CORE_PLUGIN | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 143 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 144 | iniset $NEUTRON_CONF DEFAULT policy_file $policy_file | 
|  | 145 | iniset $NEUTRON_CONF DEFAULT allow_overlapping_ips True | 
|  | 146 |  | 
|  | 147 | iniset $NEUTRON_CONF DEFAULT auth_strategy $NEUTRON_AUTH_STRATEGY | 
|  | 148 | configure_auth_token_middleware $NEUTRON_CONF neutron $NEUTRON_AUTH_CACHE_DIR keystone_authtoken | 
|  | 149 |  | 
|  | 150 | # Configuration for neutron notifations to nova. | 
|  | 151 | iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_status_changes $Q_NOTIFY_NOVA_PORT_STATUS_CHANGES | 
|  | 152 | iniset $NEUTRON_CONF DEFAULT notify_nova_on_port_data_changes $Q_NOTIFY_NOVA_PORT_DATA_CHANGES | 
|  | 153 |  | 
|  | 154 | iniset $NEUTRON_CONF nova auth_type password | 
|  | 155 | iniset $NEUTRON_CONF nova auth_url "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_AUTH_PORT/v3" | 
|  | 156 | iniset $NEUTRON_CONF nova username nova | 
|  | 157 | iniset $NEUTRON_CONF nova password $SERVICE_PASSWORD | 
|  | 158 | iniset $NEUTRON_CONF nova user_domain_id default | 
|  | 159 | iniset $NEUTRON_CONF nova project_name $SERVICE_TENANT_NAME | 
|  | 160 | iniset $NEUTRON_CONF nova project_domain_id default | 
|  | 161 | iniset $NEUTRON_CONF nova region_name $REGION_NAME | 
|  | 162 |  | 
|  | 163 | # Configure VXLAN | 
|  | 164 | # TODO(sc68cal) not hardcode? | 
| YAMAMOTO Takashi | 4a55d2a | 2016-08-24 15:30:09 +0900 | [diff] [blame] | 165 | iniset $NEUTRON_CORE_PLUGIN_CONF ml2 tenant_network_types vxlan | 
|  | 166 | iniset $NEUTRON_CORE_PLUGIN_CONF ml2 type_drivers vxlan | 
|  | 167 | iniset $NEUTRON_CORE_PLUGIN_CONF ml2 mechanism_drivers openvswitch,linuxbridge | 
|  | 168 | iniset $NEUTRON_CORE_PLUGIN_CONF ml2_type_vxlan vni_ranges 1001:2000 | 
|  | 169 | iniset $NEUTRON_CORE_PLUGIN_CONF ml2 extension_drivers port_security | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 170 | fi | 
|  | 171 |  | 
|  | 172 | # Neutron OVS or LB agent | 
|  | 173 | if is_service_enabled neutron-agent; then | 
| YAMAMOTO Takashi | 4a55d2a | 2016-08-24 15:30:09 +0900 | [diff] [blame] | 174 | iniset $NEUTRON_CORE_PLUGIN_CONF agent tunnel_types vxlan | 
|  | 175 | iniset $NEUTRON_CORE_PLUGIN_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 176 |  | 
|  | 177 | # Configure the neutron agent | 
|  | 178 | if [[ $NEUTRON_AGENT == "linuxbridge" ]]; then | 
| YAMAMOTO Takashi | 4a55d2a | 2016-08-24 15:30:09 +0900 | [diff] [blame] | 179 | iniset $NEUTRON_CORE_PLUGIN_CONF securitygroup iptables | 
|  | 180 | iniset $NEUTRON_CORE_PLUGIN_CONF vxlan local_ip $HOST_IP | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 181 | else | 
| YAMAMOTO Takashi | 4a55d2a | 2016-08-24 15:30:09 +0900 | [diff] [blame] | 182 | iniset $NEUTRON_CORE_PLUGIN_CONF securitygroup iptables_hybrid | 
|  | 183 | iniset $NEUTRON_CORE_PLUGIN_CONF ovs local_ip $HOST_IP | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 184 | fi | 
|  | 185 | fi | 
|  | 186 |  | 
|  | 187 | # DHCP Agent | 
|  | 188 | if is_service_enabled neutron-dhcp; then | 
|  | 189 | cp $NEUTRON_DIR/etc/dhcp_agent.ini.sample $NEUTRON_DHCP_CONF | 
|  | 190 |  | 
| Gary Kotton | d2ef615 | 2016-09-20 04:12:11 -0700 | [diff] [blame] | 191 | iniset $NEUTRON_DHCP_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL | 
| Sean Dague | 78801c1 | 2016-08-04 14:10:07 -0400 | [diff] [blame] | 192 | # make it so we have working DNS from guests | 
|  | 193 | iniset $NEUTRON_DHCP_CONF DEFAULT dnsmasq_local_resolv True | 
|  | 194 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 195 | iniset $NEUTRON_DHCP_CONF agent root_helper_daemon "$NEUTRON_ROOTWRAP_DAEMON_CMD" | 
|  | 196 | iniset $NEUTRON_DHCP_CONF DEFAULT interface_driver $NEUTRON_AGENT | 
|  | 197 | neutron_plugin_configure_dhcp_agent $NEUTRON_DHCP_CONF | 
|  | 198 | fi | 
|  | 199 |  | 
|  | 200 | if is_service_enabled neutron-l3; then | 
|  | 201 | cp $NEUTRON_DIR/etc/l3_agent.ini.sample $NEUTRON_L3_CONF | 
|  | 202 | iniset $NEUTRON_L3_CONF DEFAULT interface_driver $NEUTRON_AGENT | 
|  | 203 | iniset $NEUTRON_CONF DEFAULT service_plugins router | 
|  | 204 | iniset $NEUTRON_L3_CONF agent root_helper_daemon "$NEUTRON_ROOTWRAP_DAEMON_CMD" | 
| Gary Kotton | d2ef615 | 2016-09-20 04:12:11 -0700 | [diff] [blame] | 205 | iniset $NEUTRON_L3_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 206 | neutron_plugin_configure_l3_agent $NEUTRON_L3_CONF | 
|  | 207 | fi | 
|  | 208 |  | 
|  | 209 | # Metadata | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 210 | if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 211 | cp $NEUTRON_DIR/etc/metadata_agent.ini.sample $NEUTRON_META_CONF | 
|  | 212 |  | 
| Gary Kotton | d2ef615 | 2016-09-20 04:12:11 -0700 | [diff] [blame] | 213 | iniset $NEUTRON_META_CONF DEFAULT debug $ENABLE_DEBUG_LOG_LEVEL | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 214 | iniset $NEUTRON_META_CONF DEFAULT nova_metadata_ip $SERVICE_HOST | 
|  | 215 | iniset $NEUTRON_META_CONF agent root_helper_daemon "$NEUTRON_ROOTWRAP_DAEMON_CMD" | 
|  | 216 |  | 
|  | 217 | # TODO(dtroyer): remove the v2.0 hard code below | 
|  | 218 | iniset $NEUTRON_META_CONF DEFAULT auth_url $KEYSTONE_SERVICE_URI/v2.0 | 
|  | 219 | configure_auth_token_middleware $NEUTRON_META_CONF neutron $NEUTRON_AUTH_CACHE_DIR DEFAULT | 
|  | 220 | fi | 
|  | 221 |  | 
|  | 222 | # Format logging | 
|  | 223 | if [ "$LOG_COLOR" == "True" ] && [ "$SYSLOG" == "False" ]; then | 
|  | 224 | setup_colorized_logging $NEUTRON_CONF DEFAULT project_id | 
|  | 225 | else | 
|  | 226 | # Show user_name and project_name by default | 
|  | 227 | iniset $NEUTRON_CONF DEFAULT logging_context_format_string "%(asctime)s.%(msecs)03d %(levelname)s %(name)s [%(request_id)s %(user_name)s %(project_name)s] %(instance)s%(message)s" | 
|  | 228 | fi | 
|  | 229 |  | 
|  | 230 | if is_service_enabled tls-proxy; then | 
|  | 231 | # Set the service port for a proxy to take the original | 
|  | 232 | iniset $NEUTRON_CONF DEFAULT bind_port "$NEUTRON_SERVICE_PORT_INT" | 
|  | 233 | fi | 
|  | 234 |  | 
|  | 235 | if is_ssl_enabled_service "nova"; then | 
|  | 236 | iniset $NEUTRON_CONF nova cafile $SSL_BUNDLE_FILE | 
|  | 237 | fi | 
|  | 238 |  | 
|  | 239 | if is_ssl_enabled_service "neutron"; then | 
|  | 240 | ensure_certificates NEUTRON | 
|  | 241 |  | 
|  | 242 | iniset $NEUTRON_CONF DEFAULT use_ssl True | 
|  | 243 | iniset $NEUTRON_CONF DEFAULT ssl_cert_file "$NEUTRON_SSL_CERT" | 
|  | 244 | iniset $NEUTRON_CONF DEFAULT ssl_key_file "$NEUTRON_SSL_KEY" | 
|  | 245 | fi | 
|  | 246 |  | 
| Sean M. Collins | 8063fee | 2016-05-24 11:27:36 -0700 | [diff] [blame] | 247 | # Metering | 
|  | 248 | if is_service_enabled neutron-metering; then | 
| Sean M. Collins | 60f394a | 2016-06-17 16:15:30 -0400 | [diff] [blame] | 249 | source $TOP_DIR/lib/neutron_plugins/services/metering | 
| Sean M. Collins | 8063fee | 2016-05-24 11:27:36 -0700 | [diff] [blame] | 250 | neutron_agent_metering_configure_common | 
|  | 251 | neutron_agent_metering_configure_agent | 
| Sean M. Collins | a928688 | 2016-06-20 13:23:11 -0400 | [diff] [blame] | 252 | # TODO(sc68cal) hack because we don't pass around | 
|  | 253 | # $Q_SERVICE_PLUGIN_CLASSES like -legacy does | 
|  | 254 | local plugins="" | 
|  | 255 | plugins=$(iniget $NEUTRON_CONF DEFAULT service_plugins) | 
|  | 256 | plugins+=",metering" | 
|  | 257 | iniset $NEUTRON_CONF DEFAULT service_plugins $plugins | 
| Sean M. Collins | 8063fee | 2016-05-24 11:27:36 -0700 | [diff] [blame] | 258 | fi | 
|  | 259 |  | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 260 | } | 
|  | 261 |  | 
|  | 262 | # configure_neutron_rootwrap() - configure Neutron's rootwrap | 
|  | 263 | function configure_neutron_rootwrap { | 
|  | 264 | # Set the paths of certain binaries | 
|  | 265 | neutron_rootwrap=$(get_rootwrap_location neutron) | 
|  | 266 |  | 
|  | 267 | # Specify ``rootwrap.conf`` as first parameter to neutron-rootwrap | 
|  | 268 | local rootwrap_sudoer_cmd="${neutron_rootwrap} $NEUTRON_CONF_DIR/rootwrap.conf" | 
|  | 269 |  | 
|  | 270 | # Deploy new rootwrap filters files (owned by root). | 
|  | 271 | # Wipe any existing rootwrap.d files first | 
|  | 272 | if [[ -d $NEUTRON_CONF_DIR/rootwrap.d ]]; then | 
|  | 273 | sudo rm -rf $NEUTRON_CONF_DIR/rootwrap.d | 
|  | 274 | fi | 
|  | 275 |  | 
|  | 276 | # Deploy filters to /etc/neutron/rootwrap.d | 
|  | 277 | sudo install -d -o root -g root -m 755 $NEUTRON_CONF_DIR/rootwrap.d | 
|  | 278 | sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/neutron/rootwrap.d/*.filters $NEUTRON_CONF_DIR/rootwrap.d | 
|  | 279 |  | 
|  | 280 | # Set up ``rootwrap.conf``, pointing to ``$NEUTRON_CONF_DIR/rootwrap.d`` | 
|  | 281 | sudo install -o root -g root -m 644 $NEUTRON_DIR/etc/rootwrap.conf $NEUTRON_CONF_DIR | 
|  | 282 | sudo sed -e "s:^filters_path=.*$:filters_path=$NEUTRON_CONF_DIR/rootwrap.d:" -i $NEUTRON_CONF_DIR/rootwrap.conf | 
|  | 283 |  | 
|  | 284 | # Set up the rootwrap sudoers for Neutron | 
|  | 285 | tempfile=`mktemp` | 
|  | 286 | echo "$STACK_USER ALL=(root) NOPASSWD: $rootwrap_sudoer_cmd *" >$tempfile | 
|  | 287 | chmod 0440 $tempfile | 
|  | 288 | sudo chown root:root $tempfile | 
|  | 289 | sudo mv $tempfile /etc/sudoers.d/neutron-rootwrap | 
|  | 290 | } | 
|  | 291 |  | 
|  | 292 | # Make Neutron-required changes to nova.conf | 
|  | 293 | function configure_neutron_nova_new { | 
|  | 294 | iniset $NOVA_CONF DEFAULT use_neutron True | 
|  | 295 | iniset $NOVA_CONF neutron auth_type "password" | 
|  | 296 | iniset $NOVA_CONF neutron auth_url "$KEYSTONE_SERVICE_PROTOCOL://$KEYSTONE_SERVICE_HOST:$KEYSTONE_AUTH_PORT/v3" | 
|  | 297 | iniset $NOVA_CONF neutron username neutron | 
|  | 298 | iniset $NOVA_CONF neutron password "$SERVICE_PASSWORD" | 
|  | 299 | iniset $NOVA_CONF neutron user_domain_name "Default" | 
|  | 300 | iniset $NOVA_CONF neutron project_name "$SERVICE_TENANT_NAME" | 
|  | 301 | iniset $NOVA_CONF neutron project_domain_name "Default" | 
|  | 302 | iniset $NOVA_CONF neutron auth_strategy $NEUTRON_AUTH_STRATEGY | 
|  | 303 | iniset $NOVA_CONF neutron region_name "$REGION_NAME" | 
|  | 304 | iniset $NOVA_CONF neutron url $NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT | 
|  | 305 |  | 
|  | 306 | iniset $NOVA_CONF DEFAULT firewall_driver nova.virt.firewall.NoopFirewallDriver | 
|  | 307 |  | 
| Gary Kotton | 88f8558 | 2016-08-14 06:55:42 -0700 | [diff] [blame] | 308 | # optionally set options in nova_conf | 
|  | 309 | neutron_plugin_create_nova_conf | 
|  | 310 |  | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 311 | if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 312 | iniset $NOVA_CONF neutron service_metadata_proxy "True" | 
|  | 313 | fi | 
|  | 314 |  | 
|  | 315 | } | 
|  | 316 |  | 
|  | 317 | # Tenant               User       Roles | 
|  | 318 | # ------------------------------------------------------------------ | 
|  | 319 | # service              neutron    admin        # if enabled | 
|  | 320 |  | 
|  | 321 | # create_neutron_accounts() - Create required service accounts | 
|  | 322 | function create_neutron_accounts_new { | 
|  | 323 | if [[ "$ENABLED_SERVICES" =~ "neutron-api" ]]; then | 
|  | 324 |  | 
|  | 325 | create_service_user "neutron" | 
|  | 326 |  | 
|  | 327 | neutron_service=$(get_or_create_service "neutron" \ | 
|  | 328 | "network" "Neutron Service") | 
|  | 329 | get_or_create_endpoint $neutron_service \ | 
|  | 330 | "$REGION_NAME" \ | 
|  | 331 | "$NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT/" \ | 
|  | 332 | "$NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT/" \ | 
|  | 333 | "$NEUTRON_SERVICE_PROTOCOL://$NEUTRON_SERVICE_HOST:$NEUTRON_SERVICE_PORT/" | 
|  | 334 | fi | 
|  | 335 | } | 
|  | 336 |  | 
|  | 337 | # create_neutron_cache_dir() - Part of the init_neutron() process | 
|  | 338 | function create_neutron_cache_dir { | 
|  | 339 | # Create cache dir | 
|  | 340 | sudo install -d -o $STACK_USER $NEUTRON_AUTH_CACHE_DIR | 
|  | 341 | rm -f $NEUTRON_AUTH_CACHE_DIR/* | 
|  | 342 | } | 
|  | 343 |  | 
|  | 344 | # init_neutron() - Initialize databases, etc. | 
|  | 345 | function init_neutron_new { | 
|  | 346 |  | 
|  | 347 | recreate_database neutron | 
|  | 348 |  | 
|  | 349 | # Run Neutron db migrations | 
|  | 350 | $NEUTRON_BIN_DIR/neutron-db-manage $NEUTRON_CONFIG_ARG upgrade heads | 
|  | 351 |  | 
|  | 352 | create_neutron_cache_dir | 
|  | 353 | } | 
|  | 354 |  | 
|  | 355 | # install_neutron() - Collect source and prepare | 
|  | 356 | function install_neutron_new { | 
|  | 357 | git_clone $NEUTRON_REPO $NEUTRON_DIR $NEUTRON_BRANCH | 
|  | 358 | setup_develop $NEUTRON_DIR | 
|  | 359 |  | 
|  | 360 | # Install neutron-lib from git so we make sure we're testing | 
|  | 361 | # the latest code. | 
|  | 362 | if use_library_from_git "neutron-lib"; then | 
|  | 363 | git_clone_by_name "neutron-lib" | 
|  | 364 | setup_dev_lib "neutron-lib" | 
|  | 365 | fi | 
|  | 366 |  | 
|  | 367 | # L3 service requires radvd | 
|  | 368 | if is_service_enabled neutron-l3; then | 
|  | 369 | install_package radvd | 
|  | 370 | fi | 
|  | 371 |  | 
|  | 372 | if is_service_enabled neutron-agent neutron-dhcp neutron-l3; then | 
|  | 373 | #TODO(sc68cal) - kind of ugly | 
|  | 374 | source $TOP_DIR/lib/neutron_plugins/${NEUTRON_AGENT}_agent | 
|  | 375 | neutron_plugin_install_agent_packages | 
|  | 376 | fi | 
|  | 377 |  | 
|  | 378 | } | 
|  | 379 |  | 
|  | 380 | # install_neutronclient() - Collect source and prepare | 
|  | 381 | function install_neutronclient { | 
|  | 382 | if use_library_from_git "python-neutronclient"; then | 
|  | 383 | git_clone_by_name "python-neutronclient" | 
|  | 384 | setup_dev_lib "python-neutronclient" | 
|  | 385 | sudo install -D -m 0644 -o $STACK_USER {${GITDIR["python-neutronclient"]}/tools/,/etc/bash_completion.d/}neutron.bash_completion | 
|  | 386 | fi | 
|  | 387 | } | 
|  | 388 |  | 
|  | 389 | # start_neutron_api() - Start the API process ahead of other things | 
|  | 390 | function start_neutron_api { | 
|  | 391 | local service_port=$NEUTRON_SERVICE_PORT | 
|  | 392 | local service_protocol=$NEUTRON_SERVICE_PROTOCOL | 
|  | 393 | if is_service_enabled tls-proxy; then | 
|  | 394 | service_port=$NEUTRON_SERVICE_PORT_INT | 
|  | 395 | service_protocol="http" | 
|  | 396 | fi | 
|  | 397 |  | 
|  | 398 | # Start the Neutron service | 
|  | 399 | # TODO(sc68cal) Stop hard coding this | 
| YAMAMOTO Takashi | 4a55d2a | 2016-08-24 15:30:09 +0900 | [diff] [blame] | 400 | run_process neutron-api "$NEUTRON_BIN_DIR/neutron-server --config-file $NEUTRON_CONF --config-file $NEUTRON_CORE_PLUGIN_CONF" | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 401 |  | 
|  | 402 | if is_ssl_enabled_service "neutron"; then | 
|  | 403 | ssl_ca="--ca-certificate=${SSL_BUNDLE_FILE}" | 
|  | 404 | local testcmd="wget ${ssl_ca} --no-proxy -q -O- $service_protocol://$NEUTRON_SERVICE_HOST:$service_port" | 
|  | 405 | test_with_retry "$testcmd" "Neutron did not start" $SERVICE_TIMEOUT | 
|  | 406 | else | 
|  | 407 | if ! wait_for_service $SERVICE_TIMEOUT $service_protocol://$NEUTRON_SERVICE_HOST:$service_port; then | 
|  | 408 | die $LINENO "neutron-api did not start" | 
|  | 409 | fi | 
|  | 410 | fi | 
|  | 411 |  | 
|  | 412 |  | 
|  | 413 | # Start proxy if enabled | 
|  | 414 | if is_service_enabled tls-proxy; then | 
| Gregory Haynes | 4b49e40 | 2016-08-31 18:19:51 -0700 | [diff] [blame] | 415 | start_tls_proxy neutron '*' $NEUTRON_SERVICE_PORT $NEUTRON_SERVICE_HOST $NEUTRON_SERVICE_PORT_INT | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 416 | fi | 
|  | 417 | } | 
|  | 418 |  | 
|  | 419 | # start_neutron() - Start running processes, including screen | 
|  | 420 | function start_neutron_new { | 
|  | 421 | _set_config_files | 
|  | 422 |  | 
|  | 423 | # Start up the neutron agents if enabled | 
|  | 424 | # TODO(sc68cal) Make this pluggable so different DevStack plugins for different Neutron plugins | 
|  | 425 | # can resolve the $NEUTRON_AGENT_BINARY | 
|  | 426 | if is_service_enabled neutron-agent; then | 
|  | 427 | run_process neutron-agent "$NEUTRON_BIN_DIR/$NEUTRON_AGENT_BINARY $NEUTRON_CONFIG_ARG" | 
|  | 428 | fi | 
|  | 429 | if is_service_enabled neutron-dhcp; then | 
|  | 430 | neutron_plugin_configure_dhcp_agent $NEUTRON_DHCP_CONF | 
|  | 431 | run_process neutron-dhcp "$NEUTRON_BIN_DIR/$NEUTRON_DHCP_BINARY $NEUTRON_CONFIG_ARG" | 
|  | 432 | fi | 
|  | 433 | if is_service_enabled neutron-l3; then | 
|  | 434 | run_process neutron-l3 "$NEUTRON_BIN_DIR/$NEUTRON_L3_BINARY $NEUTRON_CONFIG_ARG" | 
| YAMAMOTO Takashi | c07170a | 2016-07-20 19:44:05 +0900 | [diff] [blame] | 435 | fi | 
|  | 436 | # XXX(sc68cal) - Here's where plugins can wire up their own networks instead | 
|  | 437 | # of the code in lib/neutron_plugins/services/l3 | 
|  | 438 | if type -p neutron_plugin_create_initial_networks > /dev/null; then | 
|  | 439 | neutron_plugin_create_initial_networks | 
|  | 440 | else | 
|  | 441 | # XXX(sc68cal) Load up the built in Neutron networking code and build a topology | 
|  | 442 | source $TOP_DIR/lib/neutron_plugins/services/l3 | 
|  | 443 | # Create the networks using servic | 
|  | 444 | create_neutron_initial_network | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 445 | fi | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 446 | if is_service_enabled neutron-metadata-agent; then | 
|  | 447 | run_process neutron-metadata-agent "$NEUTRON_BIN_DIR/$NEUTRON_META_BINARY $NEUTRON_CONFIG_ARG" | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 448 | fi | 
| Sean M. Collins | 8063fee | 2016-05-24 11:27:36 -0700 | [diff] [blame] | 449 |  | 
|  | 450 | if is_service_enabled neutron-metering; then | 
|  | 451 | run_process neutron-metering "$AGENT_METERING_BINARY --config-file $NEUTRON_CONF --config-file $METERING_AGENT_CONF_FILENAME" | 
|  | 452 | fi | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 453 | } | 
|  | 454 |  | 
|  | 455 | # stop_neutron() - Stop running processes (non-screen) | 
|  | 456 | function stop_neutron_new { | 
|  | 457 | for serv in neutron-api neutron-agent neutron-l3; do | 
|  | 458 | stop_process $serv | 
|  | 459 | done | 
|  | 460 |  | 
|  | 461 | if is_service_enabled neutron-dhcp; then | 
|  | 462 | stop_process neutron-dhcp | 
|  | 463 | pid=$(ps aux | awk '/[d]nsmasq.+interface=(tap|ns-)/ { print $2 }') | 
|  | 464 | [ ! -z "$pid" ] && sudo kill -9 $pid | 
|  | 465 | fi | 
|  | 466 |  | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 467 | if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 468 | sudo pkill -9 -f neutron-ns-metadata-proxy || : | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 469 | stop_process neutron-metadata-agent | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 470 | fi | 
|  | 471 | } | 
|  | 472 |  | 
|  | 473 | # Compile the lost of enabled config files | 
|  | 474 | function _set_config_files { | 
|  | 475 |  | 
| Sean M. Collins | e7d2b56 | 2016-05-12 12:04:03 -0400 | [diff] [blame] | 476 | NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_CONF" | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 477 |  | 
| YAMAMOTO Takashi | 4a55d2a | 2016-08-24 15:30:09 +0900 | [diff] [blame] | 478 | #TODO(sc68cal) OVS and LB agent uses settings in NEUTRON_CORE_PLUGIN_CONF (ml2_conf.ini) but others may not | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 479 | if is_service_enabled neutron-agent; then | 
| YAMAMOTO Takashi | 4a55d2a | 2016-08-24 15:30:09 +0900 | [diff] [blame] | 480 | NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_CORE_PLUGIN_CONF" | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 481 | fi | 
|  | 482 |  | 
|  | 483 | if is_service_enabled neutron-dhcp; then | 
|  | 484 | NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_DHCP_CONF" | 
|  | 485 | fi | 
|  | 486 |  | 
|  | 487 | if is_service_enabled neutron-l3; then | 
|  | 488 | NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_L3_CONF" | 
|  | 489 | fi | 
|  | 490 |  | 
| Sean M. Collins | 1cd2828 | 2016-05-11 15:07:19 -0400 | [diff] [blame] | 491 | if is_service_enabled neutron-metadata-agent; then | 
| Sean M. Collins | 2a24251 | 2016-05-03 09:03:09 -0400 | [diff] [blame] | 492 | NEUTRON_CONFIG_ARG+=" --config-file $NEUTRON_META_CONF" | 
|  | 493 | fi | 
|  | 494 |  | 
|  | 495 | } | 
|  | 496 |  | 
|  | 497 | # Dispatch functions | 
|  | 498 | # These are needed for compatibility between the old and new implementations | 
|  | 499 | # where there are function name overlaps.  These will be removed when | 
|  | 500 | # neutron-legacy is removed. | 
|  | 501 | # TODO(sc68cal) Remove when neutron-legacy is no more. | 
|  | 502 | function cleanup_neutron { | 
|  | 503 | if is_neutron_legacy_enabled; then | 
|  | 504 | # Call back to old function | 
|  | 505 | cleanup_mutnauq "$@" | 
|  | 506 | else | 
|  | 507 | cleanup_neutron_new "$@" | 
|  | 508 | fi | 
|  | 509 | } | 
|  | 510 |  | 
|  | 511 | function configure_neutron { | 
|  | 512 | if is_neutron_legacy_enabled; then | 
|  | 513 | # Call back to old function | 
|  | 514 | configure_mutnauq "$@" | 
|  | 515 | else | 
|  | 516 | configure_neutron_new "$@" | 
|  | 517 | fi | 
|  | 518 | } | 
|  | 519 |  | 
|  | 520 | function configure_neutron_nova { | 
|  | 521 | if is_neutron_legacy_enabled; then | 
|  | 522 | # Call back to old function | 
|  | 523 | create_nova_conf_neutron "$@" | 
|  | 524 | else | 
|  | 525 | configure_neutron_nova_new "$@" | 
|  | 526 | fi | 
|  | 527 | } | 
|  | 528 |  | 
|  | 529 | function create_neutron_accounts { | 
|  | 530 | if is_neutron_legacy_enabled; then | 
|  | 531 | # Call back to old function | 
|  | 532 | create_mutnauq_accounts "$@" | 
|  | 533 | else | 
|  | 534 | create_neutron_accounts_new "$@" | 
|  | 535 | fi | 
|  | 536 | } | 
|  | 537 |  | 
|  | 538 | function init_neutron { | 
|  | 539 | if is_neutron_legacy_enabled; then | 
|  | 540 | # Call back to old function | 
|  | 541 | init_mutnauq "$@" | 
|  | 542 | else | 
|  | 543 | init_neutron_new "$@" | 
|  | 544 | fi | 
|  | 545 | } | 
|  | 546 |  | 
|  | 547 | function install_neutron { | 
|  | 548 | if is_neutron_legacy_enabled; then | 
|  | 549 | # Call back to old function | 
|  | 550 | install_mutnauq "$@" | 
|  | 551 | else | 
|  | 552 | install_neutron_new "$@" | 
|  | 553 | fi | 
|  | 554 | } | 
|  | 555 |  | 
|  | 556 | function start_neutron { | 
|  | 557 | if is_neutron_legacy_enabled; then | 
|  | 558 | # Call back to old function | 
|  | 559 | start_mutnauq_l2_agent "$@" | 
|  | 560 | start_mutnauq_other_agents "$@" | 
|  | 561 | else | 
|  | 562 | start_neutron_new "$@" | 
|  | 563 | fi | 
|  | 564 | } | 
|  | 565 |  | 
|  | 566 | function stop_neutron { | 
|  | 567 | if is_neutron_legacy_enabled; then | 
|  | 568 | # Call back to old function | 
|  | 569 | stop_mutnauq "$@" | 
|  | 570 | else | 
|  | 571 | stop_neutron_new "$@" | 
|  | 572 | fi | 
|  | 573 | } | 
|  | 574 |  | 
|  | 575 | # Restore xtrace | 
|  | 576 | $XTRACE |