forked from romilgupta/openstack-icehouse-scripts
-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathjuno-control-ml2.py
278 lines (221 loc) · 15.4 KB
/
juno-control-ml2.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
#! /usr/bin/python
import sys
import os
import time
import fcntl
import struct
import socket
import subprocess
import common
from common import *
# These are module names which are not installed by default.
# These modules will be loaded later after downloading
iniparse = None
psutil = None
mysql_password = "secret"
service_tenant = None
def execute_db_commnads(command):
cmd = """mysql -uroot -p%s -e "%s" """ % (mysql_password, command)
output = execute(cmd)
return output
# ============================================================================
# ================== Components Installation Starts Here ===================
# ============================================================================
ip_address = get_ip_address("eth0")
ip_address_mgnt = get_ip_address("eth1")
def install_rabbitmq():
execute("apt-get install rabbitmq-server -y", True)
execute("service rabbitmq-server restart", True)
time.sleep(2)
def install_database():
os.environ['DEBIAN_FRONTEND'] = 'noninteractive'
execute("apt-get install mysql-server python-mysqldb mysql-client-5.5 -y", True)
execute("sed -i 's/127.0.0.1/0.0.0.0/g' /etc/mysql/my.cnf")
execute("service mysql restart", True)
time.sleep(2)
try:
execute("mysqladmin -u root password %s" % mysql_password)
except Exception:
print " Mysql Password already set as : %s " % mysql_password
def _create_keystone_users():
os.environ['SERVICE_TOKEN'] = 'ADMINTOKEN'
os.environ['SERVICE_ENDPOINT'] = 'http://%s:35357/v2.0' % ip_address
os.environ['no_proxy'] = "localhost,127.0.0.1,%s" % ip_address
global service_tenant
# TODO(ish) : This is crude way of doing. Install keystone client and use that to create tenants, role etc
admin_tenant = execute("keystone tenant-create --name admin --description 'Admin Tenant' --enabled true |grep ' id '|awk '{print $4}'")
admin_user = execute("keystone user-create --tenant_id %s --name admin --pass secret --enabled true|grep ' id '|awk '{print $4}'" % admin_tenant)
admin_role = execute("keystone role-create --name admin|grep ' id '|awk '{print $4}'")
execute("keystone user-role-add --user_id %s --tenant_id %s --role_id %s" % (admin_user, admin_tenant, admin_role))
service_tenant = execute("keystone tenant-create --name service --description 'Service Tenant' --enabled true |grep ' id '|awk '{print $4}'")
# keystone
keystone_service = execute("keystone service-create --name=keystone --type=identity --description='Keystone Identity Service'|grep ' id '|awk '{print $4}'")
execute("keystone endpoint-create --region region --service_id=%s --publicurl=http://%s:5000/v2.0 --internalurl=http://%s:5000/v2.0 --adminurl=http://%s:35357/v2.0" % (keystone_service, ip_address, ip_address_mgnt, ip_address_mgnt))
# Glance
glance_user = execute("keystone user-create --tenant_id %s --name glance --pass glance --enabled true|grep ' id '|awk '{print $4}'" % service_tenant)
execute("keystone user-role-add --user_id %s --tenant_id %s --role_id %s" % (glance_user, service_tenant, admin_role))
glance_service = execute("keystone service-create --name=glance --type=image --description='Glance Image Service'|grep ' id '|awk '{print $4}'")
execute("keystone endpoint-create --region region --service_id=%s --publicurl=http://%s:9292/v2 --internalurl=http://%s:9292/v2 --adminurl=http://%s:9292/v2" % (glance_service, ip_address, ip_address_mgnt, ip_address_mgnt))
# nova
nova_user = execute("keystone user-create --tenant_id %s --name nova --pass nova --enabled true|grep ' id '|awk '{print $4}'" % service_tenant)
execute("keystone user-role-add --user_id %s --tenant_id %s --role_id %s" % (nova_user, service_tenant, admin_role))
nova_service = execute("keystone service-create --name=nova --type=compute --description='Nova Compute Service'|grep ' id '|awk '{print $4}'")
execute("keystone endpoint-create --region region --service_id=%s --publicurl='http://%s:8774/v2/$(tenant_id)s' --internalurl='http://%s:8774/v2/$(tenant_id)s' --adminurl='http://%s:8774/v2/$(tenant_id)s'" % (nova_service, ip_address, ip_address_mgnt, ip_address_mgnt))
# neutron
neutron_user = execute("keystone user-create --tenant_id %s --name neutron --pass neutron --enabled true|grep ' id '|awk '{print $4}'" % service_tenant)
execute("keystone user-role-add --user_id %s --tenant_id %s --role_id %s" % (neutron_user, service_tenant, admin_role))
neutron_service = execute("keystone service-create --name=neutron --type=network --description='OpenStack Networking service'|grep ' id '|awk '{print $4}'")
execute("keystone endpoint-create --region region --service_id=%s --publicurl=http://%s:9696/ --internalurl=http://%s:9696/ --adminurl=http://%s:9696/" % (neutron_service, ip_address, ip_address_mgnt, ip_address_mgnt))
# write a rc file
adminrc = "/root/adminrc"
delete_file(adminrc)
write_to_file(adminrc, "export OS_USERNAME=admin\n")
write_to_file(adminrc, "export OS_PASSWORD=secret\n")
write_to_file(adminrc, "export OS_TENANT_NAME=admin\n")
write_to_file(adminrc, "export OS_AUTH_URL=http://%s:5000/v2.0\n" % ip_address)
def install_and_configure_keystone():
keystone_conf = "/etc/keystone/keystone.conf"
execute_db_commnads("DROP DATABASE IF EXISTS keystone;")
execute_db_commnads("CREATE DATABASE keystone;")
execute_db_commnads("GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'keystone';")
execute_db_commnads("GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';")
execute("apt-get install keystone python-keystoneclient -y", True)
add_to_conf(keystone_conf, "DEFAULT", "admin_token", "ADMINTOKEN")
add_to_conf(keystone_conf, "DEFAULT", "admin_port", 35357)
add_to_conf(keystone_conf, "database", "connection", "mysql://keystone:keystone@localhost/keystone")
add_to_conf(keystone_conf, "signing", "token_format", "UUID")
execute("keystone-manage db_sync")
execute("service keystone restart", True)
time.sleep(3)
_create_keystone_users()
def install_and_configure_glance():
glance_api_conf = "/etc/glance/glance-api.conf"
glance_registry_conf = "/etc/glance/glance-registry.conf"
glance_api_paste_conf = "/etc/glance/glance-api-paste.ini"
glance_registry_paste_conf = "/etc/glance/glance-registry-paste.ini"
execute_db_commnads("DROP DATABASE IF EXISTS glance;")
execute_db_commnads("CREATE DATABASE glance;")
execute_db_commnads("GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'glance';")
execute_db_commnads("GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'glance';")
execute("apt-get install glance python-glanceclient -y", True)
add_to_conf(glance_api_paste_conf, "filter:authtoken", "auth_host", ip_address)
add_to_conf(glance_api_paste_conf, "filter:authtoken", "auth_port", "35357")
add_to_conf(glance_api_paste_conf, "filter:authtoken", "auth_protocol", "http")
add_to_conf(glance_api_paste_conf, "filter:authtoken", "admin_tenant_name", "service")
add_to_conf(glance_api_paste_conf, "filter:authtoken", "admin_user", "glance")
add_to_conf(glance_api_paste_conf, "filter:authtoken", "admin_password", "glance")
add_to_conf(glance_registry_paste_conf, "filter:authtoken", "auth_host", ip_address)
add_to_conf(glance_registry_paste_conf, "filter:authtoken", "auth_port", "35357")
add_to_conf(glance_registry_paste_conf, "filter:authtoken", "auth_protocol", "http")
add_to_conf(glance_registry_paste_conf, "filter:authtoken", "admin_tenant_name", "service")
add_to_conf(glance_registry_paste_conf, "filter:authtoken", "admin_user", "glance")
add_to_conf(glance_registry_paste_conf, "filter:authtoken", "admin_password", "glance")
add_to_conf(glance_api_conf, "DEFAULT", "sql_connection", "mysql://glance:glance@localhost/glance")
add_to_conf(glance_api_conf, "paste_deploy", "flavor", "keystone")
add_to_conf(glance_api_conf, "DEFAULT", "verbose", "true")
add_to_conf(glance_api_conf, "DEFAULT", "debug", "true")
add_to_conf(glance_api_conf, "DEFAULT", "db_enforce_mysql_charset", "false")
add_to_conf(glance_registry_conf, "DEFAULT", "sql_connection", "mysql://glance:glance@localhost/glance")
add_to_conf(glance_registry_conf, "paste_deploy", "flavor", "keystone")
add_to_conf(glance_registry_conf, "DEFAULT", "verbose", "true")
add_to_conf(glance_registry_conf, "DEFAULT", "debug", "true")
execute("glance-manage db_sync")
execute("service glance-api restart", True)
execute("service glance-registry restart", True)
def install_and_configure_nova():
nova_conf = "/etc/nova/nova.conf"
nova_paste_conf = "/etc/nova/api-paste.ini"
execute_db_commnads("DROP DATABASE IF EXISTS nova;")
execute_db_commnads("CREATE DATABASE nova;")
execute_db_commnads("GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY 'nova';")
execute_db_commnads("GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';")
execute("apt-get install nova-api nova-cert nova-scheduler nova-conductor novnc nova-consoleauth nova-novncproxy -y", True)
add_to_conf(nova_paste_conf, "filter:authtoken", "auth_host", ip_address)
add_to_conf(nova_paste_conf, "filter:authtoken", "auth_port", "35357")
add_to_conf(nova_paste_conf, "filter:authtoken", "auth_protocol", "http")
add_to_conf(nova_paste_conf, "filter:authtoken", "admin_tenant_name", "service")
add_to_conf(nova_paste_conf, "filter:authtoken", "admin_user", "nova")
add_to_conf(nova_paste_conf, "filter:authtoken", "admin_password", "nova")
add_to_conf(nova_conf, "DEFAULT", "logdir", "/var/log/nova")
add_to_conf(nova_conf, "DEFAULT", "lock_path", "/var/lib/nova")
add_to_conf(nova_conf, "DEFAULT", "root_helper", "sudo nova-rootwrap /etc/nova/rootwrap.conf")
add_to_conf(nova_conf, "DEFAULT", "verbose", "True")
add_to_conf(nova_conf, "DEFAULT", "debug", "True")
add_to_conf(nova_conf, "DEFAULT", "rabbit_host", "127.0.0.1")
add_to_conf(nova_conf, "DEFAULT", "rpc_backend", "nova.rpc.impl_kombu")
add_to_conf(nova_conf, "DEFAULT", "sql_connection", "mysql://nova:nova@localhost/nova")
add_to_conf(nova_conf, "DEFAULT", "glance_api_servers", "%s:9292" % ip_address)
add_to_conf(nova_conf, "DEFAULT", "dhcpbridge_flagfile", "/etc/nova/nova.conf")
add_to_conf(nova_conf, "DEFAULT", "auth_strategy", "keystone")
add_to_conf(nova_conf, "DEFAULT", "network_api_class", "nova.network.neutronv2.api.API")
add_to_conf(nova_conf, "DEFAULT", "neutron_admin_username", "neutron")
add_to_conf(nova_conf, "DEFAULT", "neutron_admin_password", "neutron")
add_to_conf(nova_conf, "DEFAULT", "neutron_admin_tenant_name", "service")
add_to_conf(nova_conf, "DEFAULT", "neutron_admin_auth_url", "http://%s:5000/v2.0/" % ip_address)
add_to_conf(nova_conf, "DEFAULT", "neutron_auth_strategy", "keystone")
add_to_conf(nova_conf, "DEFAULT", "neutron_url", "http://%s:9696/" % ip_address)
add_to_conf(nova_conf, "DEFAULT", "firewall_driver", "nova.virt.firewall.NoopFirewallDriver")
add_to_conf(nova_conf, "DEFAULT", "security_group_api", "neutron")
add_to_conf(nova_conf, "DEFAULT", "metadata_host", "%s" % ip_address_mgnt)
add_to_conf(nova_conf, "DEFAULT", "service_neutron_metadata_proxy", "true")
add_to_conf(nova_conf, "DEFAULT", "neutron_metadata_proxy_shared_secret", "helloOpenStack")
execute("nova-manage db sync")
execute("service nova-api restart", True)
execute("service nova-cert restart", True)
execute("service nova-scheduler restart", True)
execute("service nova-conductor restart", True)
execute("service nova-consoleauth restart", True)
execute("service nova-novncproxy restart", True)
def install_and_configure_neutron():
neutron_conf = "/etc/neutron/neutron.conf"
neutron_paste_conf = "/etc/neutron/api-paste.ini"
neutron_plugin_conf = "/etc/neutron/plugins/ml2/ml2_conf.ini"
execute_db_commnads("DROP DATABASE IF EXISTS neutron;")
execute_db_commnads("CREATE DATABASE neutron;")
execute_db_commnads("GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';")
execute_db_commnads("GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'neutron';")
execute("apt-get install neutron-server neutron-plugin-ml2 python-neutronclient -y", True)
add_to_conf(neutron_conf, "DEFAULT", "core_plugin", "neutron.plugins.ml2.plugin.Ml2Plugin")
add_to_conf(neutron_conf, "DEFAULT", "service_plugins", "neutron.services.l3_router.l3_router_plugin.L3RouterPlugin")
add_to_conf(neutron_conf, "database", "connection", "mysql://neutron:neutron@localhost/neutron")
add_to_conf(neutron_conf, "DEFAULT", "verbose", "True")
add_to_conf(neutron_conf, "DEFAULT", "debug", "True")
add_to_conf(neutron_conf, "DEFAULT", "auth_strategy", "keystone")
add_to_conf(neutron_conf, "DEFAULT", "rabbit_host", "127.0.0.1")
add_to_conf(neutron_conf, "DEFAULT", "rabbit_port", "5672")
add_to_conf(neutron_conf, "DEFAULT", "allow_overlapping_ips", "False")
add_to_conf(neutron_conf, "DEFAULT", "root_helper", "sudo neutron-rootwrap /etc/neutron/rootwrap.conf")
add_to_conf(neutron_conf, "DEFAULT", "notify_nova_on_port_status_changes", "True")
add_to_conf(neutron_conf, "DEFAULT", "notify_nova_on_port_data_changes", "True")
add_to_conf(neutron_conf, "DEFAULT", "nova_url", "http://127.0.0.1:8774/v2")
add_to_conf(neutron_conf, "DEFAULT", "nova_admin_username", "nova")
add_to_conf(neutron_conf, "DEFAULT", "nova_admin_password", "nova")
add_to_conf(neutron_conf, "DEFAULT", "nova_admin_tenant_id", service_tenant)
add_to_conf(neutron_conf, "DEFAULT", "nova_admin_auth_url", "http://127.0.0.1:5000/v2.0/")
add_to_conf(neutron_paste_conf, "filter:authtoken", "auth_host", ip_address)
add_to_conf(neutron_paste_conf, "filter:authtoken", "auth_port", "35357")
add_to_conf(neutron_paste_conf, "filter:authtoken", "auth_protocol", "http")
add_to_conf(neutron_paste_conf, "filter:authtoken", "admin_tenant_name", "service")
add_to_conf(neutron_paste_conf, "filter:authtoken", "admin_user", "neutron")
add_to_conf(neutron_paste_conf, "filter:authtoken", "admin_password", "neutron")
add_to_conf(neutron_plugin_conf, "ml2", "type_drivers", "gre")
add_to_conf(neutron_plugin_conf, "ml2", "tenant_network_types", "gre")
add_to_conf(neutron_plugin_conf, "ml2", "mechanism_drivers", "openvswitch")
add_to_conf(neutron_plugin_conf, "ml2_type_gre", "tunnel_id_ranges", "1:1000")
add_to_conf(neutron_plugin_conf, "securitygroup", "firewall_driver", "neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver")
add_to_conf(neutron_plugin_conf, "securitygroup", "enable_security_group", "True")
execute("neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head", True);
execute("service neutron-server restart", True)
def install_and_configure_dashboard():
execute("apt-get install openstack-dashboard -y", True)
execute("apt-get remove --purge openstack-dashboard-ubuntu-theme -y", True)
execute("service apache2 restart", True)
initialize_system()
install_rabbitmq()
install_database()
install_and_configure_keystone()
install_and_configure_glance()
install_and_configure_nova()
install_and_configure_neutron()
install_and_configure_dashboard()
print_format(" Installation successfull! Login into horizon http://%s/horizon Username:admin Password:secret " % ip_address)