2 # -*- coding: utf-8 -*-
4 host_ip = "192.168.121.1"
5 operator_key = "${HOME}/.ssh/onap-key"
6 vagrant_user = "vagrant"
7 vagrant_password = "vagrant"
8 synced_folder_main = "/vagrant"
9 synced_folder_config = "#{synced_folder_main}/config"
10 synced_folder_tools_config = "#{synced_folder_main}/tools/config"
11 os_config = "#{synced_folder_config}/local.conf"
12 os_env = "#{synced_folder_config}/dot_env"
13 cluster_yml = "cluster.yml"
14 apt_prefs_dir = "/etc/apt/apt.conf.d"
15 apt_prefs = "95silent-approval"
17 helm_master_password = "vagrant"
20 vm_memory_os = 4 * 1024
21 vm_memory_onap = 64 * 1024
24 vm_box = "generic/ubuntu1804"
25 vm_box_op = "generic/ubuntu2004"
28 vm_storage_pool = "default"
66 memory: vm_memory_onap,
71 cluster = [] << control << worker
72 all = cluster.dup << operation << devstack
74 operation_post_msg = "Run: \"vagrant provision #{operation[:name]} --provision-with=rke_up,setup_kubectl,setup_helm_cluster,setup_helm_repo,deploy_onap\" to complete ONAP deployment"
76 $replace_dns = <<-SCRIPT
78 rm -f /etc/resolv.conf # drop its dynamic management by systemd-resolved
79 echo nameserver "$HOST_IP" | tee /etc/resolv.conf
82 $enable_ipv6 = <<-SCRIPT
83 sed -i'' 's/net.ipv6.conf.all.disable_ipv6.*$/net.ipv6.conf.all.disable_ipv6 = 0/' /etc/sysctl.conf
87 $setup_devstack = <<-SCRIPT
89 git clone https://opendev.org/openstack/devstack
95 $add_to_docker_group = <<-SCRIPT
97 echo "Adding ${USER} to 'docker' group"
98 usermod -aG docker "$USER"
101 $setup_debconf = <<-SCRIPT
102 echo "Setting debconf frontend to noninteractive"
103 sed -i'.orig' '/^Config:/a Frontend: noninteractive' /etc/debconf.conf
106 $install_sshpass = <<-SCRIPT
108 echo "Installing 'sshpass'"
109 apt-get install sshpass
112 $install_make = <<-SCRIPT
114 echo "Installing 'make'"
118 $install_docker = <<-SCRIPT
120 echo "Setting up 'docker' repository"
122 apt-transport-https \
126 software-properties-common
127 curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add -
129 "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
134 echo "Installing 'docker'"
135 apt-get install docker-ce docker-ce-cli containerd.io
138 $resize_disk = <<-SCRIPT
141 echo ", +" | sfdisk -N "$PART" "/dev/$DEV" --no-reread
143 resize2fs "/dev/${DEV}${PART}"
146 $generate_key = <<-SCRIPT
148 echo "Generating SSH key (${KEY_FILE})"
149 ssh-keygen -q -b 4096 -t rsa -f "$KEY_FILE" -N ""
152 $deploy_key = <<-SCRIPT
157 echo "Deploying ${KEY} for ${USER}"
160 sshpass -p "$PASS" ssh-copy-id -o StrictHostKeyChecking=no -i "$KEY" "${USER}@${ip}"
164 $link_dotfiles = <<-SCRIPT
166 for rc in ${SYNC_DIR}/dot_*; do
168 dst="${HOME}/.${rc##*dot_}"
169 echo "Symlinking ${src} to ${dst}"
174 $link_file = <<-SCRIPT
177 src="${SYNC_DIR}/${FILE}"
179 echo "Symlinking ${src} to ${dst}"
184 $rke_down = "rke remove --force || true" # best effort
187 BRANCH="${1:-7.0.0-ONAP}"
188 REPO="${2:-https://git.onap.org/oom}"
189 git clone -b "$BRANCH" "$REPO" --recurse-submodules
192 $get_helm_plugins = "mkdir -p ${HOME}/.helm && cp -R ${HOME}/oom/kubernetes/helm/plugins/ ${HOME}/.helm"
194 $setup_helm_cluster = <<-SCRIPT
195 export KUBECONFIG="${HOME}/.kube/config.onap"
196 kubectl config use-context onap
197 kubectl -n kube-system create serviceaccount tiller
198 kubectl create clusterrolebinding tiller --clusterrole=cluster-admin --serviceaccount=kube-system:tiller
199 helm init --stable-repo-url https://charts.helm.sh/stable --service-account tiller
200 kubectl -n kube-system rollout status deploy/tiller-deploy
203 # FIXME: replace sleep command with helm repo readiness probe
204 $setup_helm_repo = <<-SCRIPT
207 helm repo add local http://127.0.0.1:8879
208 make -e SKIP_LINT=TRUE -C ${HOME}/oom/kubernetes all
211 $deploy_onap = <<-SCRIPT
212 OVERRIDE="${1:-${HOME}/oom/kubernetes/onap/resources/environments/core-onap.yaml}"
214 ENV="${2:-#{os_env}}"
215 export $(cat "$ENV" | xargs)
217 TIMEOUT="${3:-#{helm_timeout}}"
218 MASTER_PASSWORD="${4:-#{helm_master_password}}"
221 KEY="${HOME}/oom/kubernetes/so/resources/config/mso/encryption.key"
223 | openssl aes-128-ecb -e -K `cat "$KEY"` -nosalt \
227 export OPENSTACK_ENCRYPTED_PASSWORD="$(encrypt $OPENSTACK_PASSWORD)"
229 export KUBECONFIG="${HOME}/.kube/config.onap"
231 helm deploy core local/onap --verbose \
232 --set global.masterPassword="$MASTER_PASSWORD" \
233 --namespace onap --timeout "$TIMEOUT" -f "$OVERRIDE"
236 Vagrant.configure('2') do |config|
237 all.each do |machine|
238 config.vm.define machine[:name] do |config|
239 config.vm.box = machine[:box]
240 config.vm.hostname = machine[:hostname]
242 config.vm.provider :virtualbox do |v|
243 v.name = machine[:name]
244 v.memory = machine[:memory]
245 v.cpus = machine[:cpus]
248 config.vm.provider :libvirt do |v|
249 v.memory = machine[:memory]
250 v.cpus = machine[:cpus]
251 v.machine_virtual_size = machine[:disk] # set at VM creation
252 v.storage_pool_name = machine[:pool]
255 config.vm.network :private_network, ip: machine[:ip]
256 config.vm.provision "replace_dns", type: :shell, run: "always", inline: $replace_dns, args: host_ip
258 if machine[:name] == 'devstack'
259 config.vm.synced_folder ".", synced_folder_main, type: "rsync", rsync__exclude: "Vagrantfile"
261 config.vm.provision "enable_ipv6", type: :shell, run: "always", inline: $enable_ipv6
262 config.vm.provision "setup_devstack", type: :shell, privileged: false, inline: $setup_devstack, args: os_config
265 if machine[:name] == 'control'
266 config.vm.provision "customize_control", type: :shell, path: "tools/imported/openstack-k8s-controlnode.sh"
267 config.vm.provision "fix_groups_control", type: :shell, inline: $add_to_docker_group, args: vagrant_user
270 if machine[:name] == 'worker'
271 config.vm.provision "customize_worker", type: :shell, path: "tools/imported/openstack-k8s-workernode.sh"
272 config.vm.provision "fix_groups_worker", type: :shell, inline: $add_to_docker_group, args: vagrant_user
273 config.vm.provision "resize_disk", type: :shell, inline: $resize_disk
276 if machine[:name] == 'operator'
277 config.vm.synced_folder ".", synced_folder_main, type: "rsync", rsync__exclude: ["Vagrantfile", "operator"]
278 config.vm.synced_folder "~/.ssh", "/home/#{vagrant_user}/.ssh", type: "rsync", rsync__exclude: "authorized_keys"
279 config.vm.synced_folder "./operator", "/home/#{vagrant_user}", type: "sshfs", reverse: true, sshfs_opts_append: "-o nonempty"
281 config.vm.provision "setup_debconf", type: :shell, inline: $setup_debconf
282 config.vm.provision "link_apt_prefs", type: :shell, run: "always" do |s|
283 s.inline = $link_file
284 s.args = [synced_folder_tools_config, apt_prefs, apt_prefs_dir]
286 config.vm.provision "link_dotfiles_root", type: :shell, run: "always" do |s|
287 s.inline = $link_dotfiles
288 s.args = synced_folder_tools_config
290 config.vm.provision "link_dotfiles_user", type: :shell, run: "always" do |s|
292 s.inline = $link_dotfiles
293 s.args = synced_folder_tools_config
296 config.vm.provision "install_docker", type: :shell, inline: $install_docker
297 config.vm.provision "fix_groups_operator", type: :shell, inline: $add_to_docker_group, args: vagrant_user
298 config.vm.provision "install_sshpass", type: :shell, inline: $install_sshpass
299 config.vm.provision "generate_key", type: :shell, privileged: false, inline: $generate_key, args: operator_key
302 cluster.each { |node| ips << node[:ip] << " " }
303 config.vm.provision "deploy_key", type: :shell do |s|
305 s.inline = $deploy_key
306 s.args = [operator_key, vagrant_user, ips]
307 s.env = {'PASSWORD': vagrant_password}
310 config.vm.provision "get_rke", type: :shell, path: "tools/get_rke.sh"
311 config.vm.provision "link_cluster_yml", type: :shell, run: "always" do |s|
313 s.inline = $link_file
314 s.args = [synced_folder_config, cluster_yml, "$HOME"]
317 config.vm.post_up_message = operation_post_msg
318 config.vm.provision "rke_up", type: :shell, run: "never", privileged: false, inline: $rke_up
319 config.trigger.before :destroy do |trigger|
320 trigger.warn = "Removing cluster"
321 trigger.run_remote = {privileged: false, inline: $rke_down}
324 config.vm.provision "get_kubectl", type: :shell, path: "tools/get_kubectl.sh"
325 config.vm.provision "setup_kubectl", type: :shell, run: "never" do |s|
327 s.path = "tools/setup_kubectl.sh"
329 config.vm.provision "get_helm", type: :shell, path: "tools/get_helm.sh"
330 config.vm.provision "get_oom", type: :shell do |s|
334 config.vm.provision "get_helm_plugins", type: :shell, privileged: false, inline: $get_helm_plugins
335 config.vm.provision "install_make", type: :shell, inline: $install_make
336 config.vm.provision "setup_helm_cluster", type: :shell, run: "never", privileged: false, inline: $setup_helm_cluster
337 config.vm.provision "setup_helm_repo", type: :shell, run: "never", privileged: false, inline: $setup_helm_repo
338 config.vm.provision "deploy_onap", type: :shell, run: "never" do |s|
340 s.inline = $deploy_onap