deployment/heat/onap-oom/rancher_vm_entrypoint.sh

   1 #!/bin/bash -x
   2 #
   3 # Copyright 2018 Huawei Technologies Co., Ltd.
   4 #
   5 # Licensed under the Apache License, Version 2.0 (the "License");
   6 # you may not use this file except in compliance with the License.
   7 # You may obtain a copy of the License at
   8 #
   9 #     http://www.apache.org/licenses/LICENSE-2.0
  10 #
  11
  12 export DEBIAN_FRONTEND=noninteractive
  13 HOST_IP=$(hostname -I)
  14 echo $HOST_IP `hostname` >> /etc/hosts
  15 printenv
  16
  17 mkdir -p /opt/config
  18 echo "__rancher_ip_addr__" > /opt/config/rancher_ip_addr.txt
  19 echo "__k8s_vm_ips__" > /opt/config/k8s_vm_ips.txt
  20 echo "__k8s_private_ips__" > /opt/config/k8s_private_ips.txt
  21 echo "__public_net_id__" > /opt/config/public_net_id.txt
  22 echo "__oam_network_cidr__" > /opt/config/oam_network_cidr.txt
  23 echo "__oam_network_id__" > /opt/config/oam_network_id.txt
  24 echo "__oam_subnet_id__" > /opt/config/oam_subnet_id.txt
  25 echo "__sec_group__" > /opt/config/sec_group.txt
  26 echo "__integration_gerrit_branch__" > /opt/config/integration_gerrit_branch.txt
  27 echo "__integration_gerrit_refspec__" > /opt/config/integration_gerrit_refspec.txt
  28 echo "__oom_gerrit_branch__" > /opt/config/oom_gerrit_branch.txt
  29 echo "__oom_gerrit_refspec__" > /opt/config/oom_gerrit_refspec.txt
  30 echo "__docker_manifest__" > /opt/config/docker_manifest.txt
  31 echo "__docker_proxy__" > /opt/config/docker_proxy.txt
  32 echo "__docker_version__" > /opt/config/docker_version.txt
  33 echo "__rancher_version__" > /opt/config/rancher_version.txt
  34 echo "__rancher_agent_version__" > /opt/config/rancher_agent_version.txt
  35 echo "__kubectl_version__" > /opt/config/kubectl_version.txt
  36 echo "__helm_version__" > /opt/config/helm_version.txt
  37 echo "__helm_deploy_delay__" > /opt/config/helm_deploy_delay.txt
  38 echo "__mtu__" > /opt/config/mtu.txt
  39 echo "__portal_hostname__" > /opt/config/portal_hostname.txt
  40
  41 cat <<EOF > /opt/config/integration-override.yaml
  42 __integration_override_yaml__
  43 EOF
  44 sed -i 's/\_\_portal_hostname__/__portal_hostname__/g' /opt/config/integration-override.yaml
  45 sed -i 's/\_\_public_net_id__/__public_net_id__/g' /opt/config/integration-override.yaml
  46 sed -i 's|\_\_oam_network_cidr__|__oam_network_cidr__|g' /opt/config/integration-override.yaml
  47 sed -i 's/\_\_oam_network_id__/__oam_network_id__/g' /opt/config/integration-override.yaml
  48 sed -i 's/\_\_oam_subnet_id__/__oam_subnet_id__/g' /opt/config/integration-override.yaml
  49 sed -i 's/\_\_sec_group__/__sec_group__/g' /opt/config/integration-override.yaml
  50 sed -i 's/\_\_rancher_ip_addr__/__rancher_ip_addr__/g' /opt/config/integration-override.yaml
  51 sed -i 's/\_\_k8s_01_vm_ip__/__k8s_01_vm_ip__/g' /opt/config/integration-override.yaml
  52 sed -i 's/\_\_docker_proxy__/__docker_proxy__/g' /opt/config/integration-override.yaml
  53 cp /opt/config/integration-override.yaml /root
  54 cat /root/integration-override.yaml
  55
  56 mkdir -p /etc/docker
  57 if [ ! -z "__docker_proxy__" ]; then
  58     cat > /etc/docker/daemon.json <<EOF
  59 {
  60   "mtu": __mtu__,
  61   "insecure-registries" : ["__docker_proxy__"]
  62 }
  63 EOF
  64 else
  65     cat > /etc/docker/daemon.json <<EOF
  66 {
  67   "mtu": __mtu__
  68 }
  69 EOF
  70 fi
  71 if [ ! -z "__apt_proxy__" ]; then
  72     cat > /etc/apt/apt.conf.d/30proxy<<EOF
  73 Acquire::http { Proxy "http://__apt_proxy__"; };
  74 Acquire::https::Proxy "DIRECT";
  75 EOF
  76 fi
  77
  78 # workaround for OpenStack intermittent failure to change default apt mirrors
  79 sed -i 's|http://archive.ubuntu.com|http://nova.clouds.archive.ubuntu.com|g' /etc/apt/sources.list
  80
  81 while ! hash jq &> /dev/null; do
  82     apt-get -y update
  83     apt-get -y install linux-image-extra-$(uname -r) apt-transport-https ca-certificates curl software-properties-common jq make nfs-kernel-server moreutils
  84     sleep 10
  85 done
  86
  87 mkdir -p /dockerdata-nfs
  88
  89 # use RAM disk for /dockerdata-nfs for testing
  90 if [ "__use_ramdisk__" = "true" ]; then
  91     echo "tmpfs /dockerdata-nfs tmpfs noatime,size=75% 1 2" >> /etc/fstab
  92     mount /dockerdata-nfs
  93 fi
  94 # version control the persistence volume to see what's happening
  95 chmod 777 /dockerdata-nfs/
  96 chown nobody:nogroup /dockerdata-nfs/
  97 cd /dockerdata-nfs/
  98 git init
  99 git config user.email "root@onap"
 100 git config user.name "root"
 101 git add -A
 102 git commit -m "initial commit"
 103
 104 # export NFS mount
 105 echo "/dockerdata-nfs *(rw,fsid=1,async,no_root_squash,no_subtree_check)" | tee /etc/exports
 106
 107
 108 exportfs -a
 109 systemctl restart nfs-kernel-server
 110
 111 cd ~
 112
 113 # install docker __docker_version__
 114 while ! hash docker &> /dev/null; do
 115     curl -s https://releases.rancher.com/install-docker/__docker_version__.sh | sh
 116     usermod -aG docker ubuntu
 117     sleep 10
 118 done
 119 apt-mark hold docker-ce
 120
 121 # install rancher __rancher_version__
 122 docker run --name rancher-server --restart unless-stopped -d -p 8080:8080 -e CATTLE_BOOTSTRAP_REQUIRED_IMAGE=__docker_proxy__/rancher/agent:v__rancher_agent_version__ __docker_proxy__/rancher/server:v__rancher_version__
 123
 124 # install kubectl __kubectl_version__
 125 curl -s -LO https://storage.googleapis.com/kubernetes-release/release/v__kubectl_version__/bin/linux/amd64/kubectl
 126 chmod +x ./kubectl
 127 sudo mv ./kubectl /usr/local/bin/kubectl
 128 mkdir ~/.kube
 129
 130 # install helm __helm_version__
 131 mkdir -p helm
 132 pushd helm
 133 wget -q http://storage.googleapis.com/kubernetes-helm/helm-v__helm_version__-linux-amd64.tar.gz
 134 tar -zxvf helm-v__helm_version__-linux-amd64.tar.gz
 135 sudo cp linux-amd64/helm /usr/local/bin/helm
 136 popd
 137
 138 mkdir -p rancher
 139 pushd rancher
 140 echo export RANCHER_IP=__rancher_private_ip_addr__ > api-keys-rc
 141 source api-keys-rc
 142
 143 until curl -s -o projects.json -H "Accept: application/json" http://$RANCHER_IP:8080/v2-beta/projects; do
 144     sleep 30
 145 done
 146 OLD_PID=$(jq -r '.data[0].id' projects.json)
 147
 148 curl -s -H "Accept: application/json" -H "Content-Type: application/json" -d '{"accountId":"1a1"}' http://$RANCHER_IP:8080/v2-beta/apikeys > apikeys.json
 149 echo export CATTLE_ACCESS_KEY=`jq -r '.publicValue' apikeys.json` >> api-keys-rc
 150 echo export CATTLE_SECRET_KEY=`jq -r '.secretValue' apikeys.json` >> api-keys-rc
 151 source api-keys-rc
 152
 153
 154 curl -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" -X PUT -H 'Accept: application/json' -H 'Content-Type: application/json' -d '{"id":"registry.default","type":"activeSetting","baseType":"setting","name":"registry.default","activeValue":"__docker_proxy__","inDb":true,"source":"Database","value":"__docker_proxy__"}'  http://$RANCHER_IP:8080/v2-beta/settings/registry.default
 155
 156 curl -s -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" -X DELETE -H 'Content-Type: application/json' "http://$RANCHER_IP:8080/v2-beta/projects/$OLD_PID"
 157
 158 until [ ! -z "$TEMPLATE_ID" ] && [ "$TEMPLATE_ID" != "null" ]; do
 159     sleep 5
 160     curl -s -H "Accept: application/json" http://$RANCHER_IP:8080/v2-beta/projectTemplates?name=Kubernetes > projectTemplatesKubernetes.json
 161     TEMPLATE_ID=$(jq -r '.data[0].id' projectTemplatesKubernetes.json)
 162 done
 163
 164
 165 curl -s -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" \
 166 -X PUT \
 167 -H 'Accept: application/json' \
 168 -H 'Content-Type: application/json' \
 169 -d '{"stacks":[{"type":"catalogTemplate", "answers":{"CONSTRAINT_TYPE":"required"}, "name":"kubernetes", "templateVersionId":"library:infra*k8s:58"}, {"type":"catalogTemplate", "name":"network-services", "templateId":"library:infra*network-services"}, {"type":"catalogTemplate", "name":"ipsec", "templateId":"library:infra*ipsec", "answers":{"MTU":"__mtu__"}}, {"type":"catalogTemplate", "name":"healthcheck", "templateId":"library:infra*healthcheck"}]}' \
 170 "http://$RANCHER_IP:8080/v2-beta/projecttemplates/$TEMPLATE_ID"
 171
 172 curl -s -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" -X POST -H 'Content-Type: application/json' -d '{ "name":"oom", "projectTemplateId":"'$TEMPLATE_ID'" }' "http://$RANCHER_IP:8080/v2-beta/projects" > project.json
 173 PID=`jq -r '.id' project.json`
 174 echo export RANCHER_URL=http://$RANCHER_IP:8080/v1/projects/$PID >> api-keys-rc
 175 source api-keys-rc
 176
 177 until [ $(jq -r '.state' project.json) == "active" ]; do
 178     sleep 5
 179     curl -s -H "Accept: application/json" http://$RANCHER_IP:8080/v1/projects/$PID > project.json
 180 done
 181
 182
 183 curl -s -u $CATTLE_ACCESS_KEY:$CATTLE_SECRET_KEY -X POST -H 'Accept: application/json' -H 'Content-Type: application/json' -d '{"name":"docker-proxy", "serverAddress":"__docker_proxy__"}' $RANCHER_URL/registries > registry.json
 184 RID=$(jq -r '.id' registry.json)
 185
 186
 187 curl -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" -X POST -H 'Accept: application/json' -H 'Content-Type: application/json' -d '{"publicValue":"docker", "registryId":"'$RID'", "secretValue":"docker", "type":"registryCredential"}' "http://$RANCHER_IP:8080/v2-beta/projects/$PID/registrycredential"
 188
 189
 190
 191 TID=$(curl -s -X POST -H "Accept: application/json" -H "Content-Type: application/json" http://$RANCHER_IP:8080/v1/projects/$PID/registrationTokens | jq -r '.id')
 192 touch token.json
 193 while [ $(jq -r .command token.json | wc -c) -lt 10 ]; do
 194     sleep 5
 195     curl -s -X GET -H "Accept: application/json" http://$RANCHER_IP:8080/v1/projects/$PID/registrationToken/$TID > token.json
 196 done
 197 jq -r .command token.json > rancher_agent_cmd.sh
 198 chmod +x rancher_agent_cmd.sh
 199 cp rancher_agent_cmd.sh /dockerdata-nfs
 200 popd
 201
 202 cd /dockerdata-nfs
 203 git add -A
 204 git commit -a -m "Add rancher agent command file"
 205 cd ~
 206
 207
 208 # Uncomment this section to run orchestration plane on the Rancher VM
 209 #
 210 # cp /dockerdata-nfs/rancher_agent_cmd.sh .
 211 # sed -i "s/docker run/docker run -e CATTLE_HOST_LABELS='orchestration=true' -e CATTLE_AGENT_IP=${HOST_IP}/g" rancher_agent_cmd.sh
 212 # source rancher_agent_cmd.sh
 213
 214
 215
 216 KUBETOKEN=$(echo -n 'Basic '$(echo -n "$CATTLE_ACCESS_KEY:$CATTLE_SECRET_KEY" | base64 -w 0) | base64 -w 0)
 217
 218 NAMESPACE=onap
 219
 220 # create .kube/config
 221 cat > ~/.kube/config <<EOF
 222 apiVersion: v1
 223 kind: Config
 224 clusters:
 225 - cluster:
 226     api-version: v1
 227     insecure-skip-tls-verify: true
 228     server: "https://__rancher_ip_addr__:8080/r/projects/$PID/kubernetes:6443"
 229   name: "oom"
 230 contexts:
 231 - context:
 232     cluster: "oom"
 233     namespace: "$NAMESPACE"
 234     user: "oom"
 235   name: "oom"
 236 current-context: "oom"
 237 users:
 238 - name: "oom"
 239   user:
 240     token: "$KUBETOKEN"
 241 EOF
 242
 243 export KUBECONFIG=/root/.kube/config
 244 kubectl config view
 245
 246
 247
 248 # Enable auto-completion for kubectl
 249 echo "source <(kubectl completion bash)" >> ~/.bashrc
 250
 251
 252 # wait for kubernetes to initialze
 253 sleep 3m
 254 until [ $(kubectl get pods --namespace kube-system | tail -n +2 | grep -c Running) -ge 6 ]; do
 255     sleep 1m
 256 done
 257
 258
 259 # Install using OOM
 260 export HOME=/root
 261 mkdir -p ~/.ssh
 262 cp ~ubuntu/.ssh/authorized_keys ~/.ssh
 263
 264
 265 # update and initialize git
 266 apt-get -y install git
 267 git config --global user.email root@rancher
 268 git config --global user.name root@rancher
 269 git config --global log.decorate auto
 270
 271 # Clone OOM:
 272 cd ~
 273 git clone -b __oom_gerrit_branch__ https://gerrit.onap.org/r/oom
 274 cd oom
 275 if [ ! -z "__oom_gerrit_refspec__" ]; then
 276     git fetch https://gerrit.onap.org/r/oom __oom_gerrit_refspec__
 277     git checkout FETCH_HEAD
 278 fi
 279 git checkout -b workarounds
 280 git log -1
 281
 282 # Clone integration
 283 cd ~
 284 git clone -b __integration_gerrit_branch__ https://gerrit.onap.org/r/integration
 285 cd integration
 286 if [ ! -z "__integration_gerrit_refspec__" ]; then
 287     git fetch https://gerrit.onap.org/r/integration __integration_gerrit_refspec__
 288     git checkout FETCH_HEAD
 289 fi
 290
 291
 292 if [ ! -z "__docker_manifest__" ]; then
 293     cd version-manifest/src/main/scripts
 294     ./update-oom-image-versions.sh ../resources/__docker_manifest__ ~/oom/
 295 fi
 296
 297 cd ~/oom
 298 git diff
 299 git commit -a -m "apply manifest versions"
 300
 301 cd ~/oom
 302 # workaround to change onap portal cookie domain
 303 #sed -i "s/^cookie_domain.*=.*/cookie_domain = __portal_hostname__/g" ./kubernetes/portal/charts/portal-app/resources/config/deliveries/properties/ONAPPORTAL/system.properties
 304 #sed -i "s/^cookie_domain.*=.*/cookie_domain = __portal_hostname__/g" ./kubernetes/portal/charts/portal-sdk/resources/config/deliveries/properties/ONAPPORTALSDK/system.properties
 305 #git diff
 306 #git commit -a -m "set portal cookie domain"
 307
 308 git tag -a "deploy0" -m "initial deployment"
 309
 310
 311 # Run ONAP:
 312 cd ~/oom/kubernetes/
 313 helm init --client-only
 314 helm init --upgrade
 315 helm serve &
 316 sleep 10
 317 helm repo add local http://127.0.0.1:8879
 318 helm repo list
 319 make all
 320 helm search -l | grep local
 321
 322 # install helm deploy plugin
 323 rsync -avt ~/oom/kubernetes/helm/plugins ~/.helm/
 324 # temporary workaround to throttle the helm deploy to alleviate startup disk contention issues
 325 if [ ! -z "__helm_deploy_delay__" ]; then
 326     sed -i "/\^enabled:/a\      echo sleep __helm_deploy_delay__\n      sleep __helm_deploy_delay__" ~/.helm/plugins/deploy/deploy.sh
 327 fi
 328
 329 helm deploy dev local/onap -f ~/oom/kubernetes/onap/resources/environments/public-cloud.yaml -f ~/integration-override.yaml --namespace $NAMESPACE --verbose
 330
 331 # re-install original helm deploy plugin
 332 rsync -avt ~/oom/kubernetes/helm/plugins ~/.helm/
 333
 334 helm list
 335
 336
 337
 338 # Check ONAP status:
 339 sleep 10
 340 kubectl get pods --all-namespaces
 341 kubectl get nodes
 342 kubectl top nodes