Updated the Version of Stating Dockers
[integration.git] / deployment / heat / onap-oom / rancher_vm_entrypoint.sh
1 #!/bin/bash -x
2 #
3 # Copyright 2018 Huawei Technologies Co., Ltd.
4 #
5 # Licensed under the Apache License, Version 2.0 (the "License");
6 # you may not use this file except in compliance with the License.
7 # You may obtain a copy of the License at
8 #
9 #     http://www.apache.org/licenses/LICENSE-2.0
10 #
11
12 export DEBIAN_FRONTEND=noninteractive
13 printenv
14
15 mkdir -p /opt/config
16 echo "__rancher_ip_addr__" > /opt/config/rancher_ip_addr.txt
17 echo "__k8s_vm_ips__" > /opt/config/k8s_vm_ips.txt
18 echo "__k8s_private_ips__" > /opt/config/k8s_private_ips.txt
19 echo "__public_net_id__" > /opt/config/public_net_id.txt
20 echo "__oam_network_cidr__" > /opt/config/oam_network_cidr.txt
21 echo "__oam_network_id__" > /opt/config/oam_network_id.txt
22 echo "__oam_subnet_id__" > /opt/config/oam_subnet_id.txt
23 echo "__sec_group__" > /opt/config/sec_group.txt
24 echo "__integration_gerrit_branch__" > /opt/config/integration_gerrit_branch.txt
25 echo "__integration_gerrit_refspec__" > /opt/config/integration_gerrit_refspec.txt
26 echo "__oom_gerrit_branch__" > /opt/config/oom_gerrit_branch.txt
27 echo "__oom_gerrit_refspec__" > /opt/config/oom_gerrit_refspec.txt
28 echo "__docker_manifest__" > /opt/config/docker_manifest.txt
29 echo "__docker_proxy__" > /opt/config/docker_proxy.txt
30 echo "__docker_version__" > /opt/config/docker_version.txt
31 echo "__rancher_version__" > /opt/config/rancher_version.txt
32 echo "__rancher_agent_version__" > /opt/config/rancher_agent_version.txt
33 echo "__kubectl_version__" > /opt/config/kubectl_version.txt
34 echo "__helm_version__" > /opt/config/helm_version.txt
35
36 cat <<EOF > /opt/config/integration-override.yaml
37 __integration_override_yaml__
38 EOF
39 sed -i 's/\_\_public_net_id__/__public_net_id__/g' /opt/config/integration-override.yaml
40 sed -i 's|\_\_oam_network_cidr__|__oam_network_cidr__|g' /opt/config/integration-override.yaml
41 sed -i 's/\_\_oam_network_id__/__oam_network_id__/g' /opt/config/integration-override.yaml
42 sed -i 's/\_\_oam_subnet_id__/__oam_subnet_id__/g' /opt/config/integration-override.yaml
43 sed -i 's/\_\_sec_group__/__sec_group__/g' /opt/config/integration-override.yaml
44 sed -i 's/\_\_rancher_ip_addr__/__rancher_ip_addr__/g' /opt/config/integration-override.yaml
45 sed -i 's/\_\_k8s_1_vm_ip__/__k8s_1_vm_ip__/g' /opt/config/integration-override.yaml
46 sed -i 's/\_\_docker_proxy__/__docker_proxy__/g' /opt/config/integration-override.yaml
47 cp /opt/config/integration-override.yaml /root
48 cat /root/integration-override.yaml
49
50 echo `hostname -I` `hostname` >> /etc/hosts
51 mkdir -p /etc/docker
52 if [ ! -z "__docker_proxy__" ]; then
53     cat > /etc/docker/daemon.json <<EOF
54 {
55   "insecure-registries" : ["__docker_proxy__"]
56 }
57 EOF
58 fi
59 if [ ! -z "__apt_proxy__" ]; then
60     cat > /etc/apt/apt.conf.d/30proxy<<EOF
61 Acquire::http { Proxy "http://__apt_proxy__"; };
62 Acquire::https::Proxy "DIRECT";
63 EOF
64 fi
65
66 # workaround for OpenStack intermittent failure to change default apt mirrors
67 sed -i 's|http://archive.ubuntu.com|http://nova.clouds.archive.ubuntu.com|g' /etc/apt/sources.list
68
69 while ! hash jq &> /dev/null; do
70     apt-get -y update
71     apt-get -y install linux-image-extra-$(uname -r) apt-transport-https ca-certificates curl software-properties-common jq make nfs-kernel-server moreutils
72     sleep 10
73 done
74
75 # use RAM disk for /dockerdata-nfs for testing
76 echo "tmpfs /dockerdata-nfs tmpfs noatime,size=75% 1 2" >> /etc/fstab
77 mkdir -pv /dockerdata-nfs
78 mount /dockerdata-nfs
79
80 # version control the persistence volume to see what's happening
81 chmod 777 /dockerdata-nfs/
82 chown nobody:nogroup /dockerdata-nfs/
83 cd /dockerdata-nfs/
84 git init
85 git config user.email "root@onap"
86 git config user.name "root"
87 git add -A
88 git commit -m "initial commit"
89
90 # export NFS mount
91 echo "/dockerdata-nfs *(rw,fsid=1,async,no_root_squash,no_subtree_check)" | tee /etc/exports
92
93
94 exportfs -a
95 systemctl restart nfs-kernel-server
96
97 cd ~
98
99 # install docker __docker_version__
100 while ! hash docker &> /dev/null; do
101     curl -s https://releases.rancher.com/install-docker/__docker_version__.sh | sh
102     usermod -aG docker ubuntu
103     sleep 10
104 done
105 apt-mark hold docker-ce
106
107 # install rancher __rancher_version__
108 docker run --name rancher-server --restart unless-stopped -d -p 8080:8080 -e CATTLE_BOOTSTRAP_REQUIRED_IMAGE=__docker_proxy__/rancher/agent:v__rancher_agent_version__ __docker_proxy__/rancher/server:v__rancher_version__
109
110 # install kubectl __kubectl_version__
111 curl -s -LO https://storage.googleapis.com/kubernetes-release/release/v__kubectl_version__/bin/linux/amd64/kubectl
112 chmod +x ./kubectl
113 sudo mv ./kubectl /usr/local/bin/kubectl
114 mkdir ~/.kube
115
116 # install helm __helm_version__
117 wget -q http://storage.googleapis.com/kubernetes-helm/helm-v__helm_version__-linux-amd64.tar.gz
118 tar -zxvf helm-v__helm_version__-linux-amd64.tar.gz
119 sudo mv linux-amd64/helm /usr/local/bin/helm
120
121 echo export RANCHER_IP=__rancher_private_ip_addr__ > api-keys-rc
122 source api-keys-rc
123
124 until curl -s -o projects.json -H "Accept: application/json" http://$RANCHER_IP:8080/v2-beta/projects; do
125     sleep 30
126 done
127 OLD_PID=$(jq -r '.data[0].id' projects.json)
128
129 curl -s -H "Accept: application/json" -H "Content-Type: application/json" -d '{"accountId":"1a1"}' http://$RANCHER_IP:8080/v2-beta/apikeys > apikeys.json
130 echo export CATTLE_ACCESS_KEY=`jq -r '.publicValue' apikeys.json` >> api-keys-rc
131 echo export CATTLE_SECRET_KEY=`jq -r '.secretValue' apikeys.json` >> api-keys-rc
132 source api-keys-rc
133
134
135 curl -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" -X PUT -H 'Accept: application/json' -H 'Content-Type: application/json' -d '{"id":"registry.default","type":"activeSetting","baseType":"setting","name":"registry.default","activeValue":"__docker_proxy__","inDb":true,"source":"Database","value":"__docker_proxy__"}'  http://$RANCHER_IP:8080/v2-beta/settings/registry.default
136
137 curl -s -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" -X DELETE -H 'Content-Type: application/json' "http://$RANCHER_IP:8080/v2-beta/projects/$OLD_PID"
138
139 until [ ! -z "$TEMPLATE_ID" ] && [ "$TEMPLATE_ID" != "null" ]; do
140     sleep 5
141     curl -s -H "Accept: application/json" http://$RANCHER_IP:8080/v2-beta/projectTemplates?name=Kubernetes > projectTemplatesKubernetes.json
142     TEMPLATE_ID=$(jq -r '.data[0].id' projectTemplatesKubernetes.json)
143 done
144
145
146 curl -s -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" \
147 -X PUT \
148 -H 'Accept: application/json' \
149 -H 'Content-Type: application/json' \
150 -d '{"stacks":[{"type":"catalogTemplate", "answers":{"CONSTRAINT_TYPE":"required"}, "name":"kubernetes", "templateVersionId":"library:infra*k8s:52"}, {"type":"catalogTemplate", "name":"network-services", "templateId":"library:infra*network-services"}, {"type":"catalogTemplate", "name":"ipsec", "templateId":"library:infra*ipsec"}, {"type":"catalogTemplate", "name":"healthcheck", "templateId":"library:infra*healthcheck"}]}' \
151 "http://$RANCHER_IP:8080/v2-beta/projecttemplates/$TEMPLATE_ID"
152
153 curl -s -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" -X POST -H 'Content-Type: application/json' -d '{ "name":"oom", "projectTemplateId":"'$TEMPLATE_ID'" }' "http://$RANCHER_IP:8080/v2-beta/projects" > project.json
154 PID=`jq -r '.id' project.json`
155 echo export RANCHER_URL=http://$RANCHER_IP:8080/v1/projects/$PID >> api-keys-rc
156 source api-keys-rc
157
158 until [ $(jq -r '.state' project.json) == "active" ]; do
159     sleep 5
160     curl -s -H "Accept: application/json" http://$RANCHER_IP:8080/v1/projects/$PID > project.json
161 done
162
163
164 curl -s -u $CATTLE_ACCESS_KEY:$CATTLE_SECRET_KEY -X POST -H 'Accept: application/json' -H 'Content-Type: application/json' -d '{"name":"docker-proxy", "serverAddress":"__docker_proxy__"}' $RANCHER_URL/registries > registry.json
165 RID=$(jq -r '.id' registry.json)
166
167
168 curl -u "${CATTLE_ACCESS_KEY}:${CATTLE_SECRET_KEY}" -X POST -H 'Accept: application/json' -H 'Content-Type: application/json' -d '{"publicValue":"docker", "registryId":"'$RID'", "secretValue":"docker", "type":"registryCredential"}' "http://$RANCHER_IP:8080/v2-beta/projects/$PID/registrycredential"
169
170
171
172 TID=$(curl -s -X POST -H "Accept: application/json" -H "Content-Type: application/json" http://$RANCHER_IP:8080/v1/projects/$PID/registrationTokens | jq -r '.id')
173 touch token.json
174 while [ $(jq -r .command token.json | wc -c) -lt 10 ]; do
175     sleep 5
176     curl -s -X GET -H "Accept: application/json" http://$RANCHER_IP:8080/v1/projects/$PID/registrationToken/$TID > token.json
177 done
178 jq -r .command token.json > rancher_agent_cmd.sh
179 chmod +x rancher_agent_cmd.sh
180 cp rancher_agent_cmd.sh /dockerdata-nfs
181 cd /dockerdata-nfs
182 git add -A
183 git commit -a -m "Add rancher agent command file"
184 cd ~
185
186
187 KUBETOKEN=$(echo -n 'Basic '$(echo -n "$CATTLE_ACCESS_KEY:$CATTLE_SECRET_KEY" | base64 -w 0) | base64 -w 0)
188
189 # create .kube/config
190 cat > ~/.kube/config <<EOF
191 apiVersion: v1
192 kind: Config
193 clusters:
194 - cluster:
195     api-version: v1
196     insecure-skip-tls-verify: true
197     server: "https://__rancher_ip_addr__:8080/r/projects/$PID/kubernetes:6443"
198   name: "oom"
199 contexts:
200 - context:
201     cluster: "oom"
202     user: "oom"
203   name: "oom"
204 current-context: "oom"
205 users:
206 - name: "oom"
207   user:
208     token: "$KUBETOKEN"
209 EOF
210
211 export KUBECONFIG=/root/.kube/config
212 kubectl config view
213
214 # Enable auto-completion for kubectl
215 echo "source <(kubectl completion bash)" >> ~/.bashrc
216
217
218 # wait for kubernetes to initialze
219 sleep 3m
220 until [ $(kubectl get pods --namespace kube-system | tail -n +2 | grep -c Running) -ge 6 ]; do
221     sleep 1m
222 done
223
224
225 # Install using OOM
226 export HOME=/root
227 mkdir -p ~/.ssh
228 cp ~ubuntu/.ssh/authorized_keys ~/.ssh
229
230
231 # update and initialize git
232 apt-get -y install git
233 git config --global user.email root@rancher
234 git config --global user.name root@rancher
235 git config --global log.decorate auto
236
237 # Clone OOM:
238 cd ~
239 git clone -b __oom_gerrit_branch__ https://gerrit.onap.org/r/oom
240 cd oom
241 git fetch https://gerrit.onap.org/r/oom __oom_gerrit_refspec__
242 git checkout FETCH_HEAD
243 git checkout -b workarounds
244 git log -1
245
246 # Clone integration
247 cd ~
248 git clone -b __integration_gerrit_branch__ https://gerrit.onap.org/r/integration
249 cd integration
250 git fetch https://gerrit.onap.org/r/integration __integration_gerrit_refspec__
251 git checkout FETCH_HEAD
252
253 if [ ! -z "__docker_manifest__" ]; then
254     cd version-manifest/src/main/scripts
255     ./update-oom-image-versions.sh ../resources/__docker_manifest__ ~/oom/
256 fi
257
258 cd ~/oom
259 git diff
260 git commit -a -m "apply manifest versions"
261 git tag -a "deploy0" -m "initial deployment"
262
263
264 # Run ONAP:
265 cd ~/oom/kubernetes/
266 helm init --client-only
267 helm init --upgrade
268 helm serve &
269 sleep 10
270 helm repo add local http://127.0.0.1:8879
271 helm repo list
272 make all
273 rsync -avt ~/oom/kubernetes/helm/plugins ~/.helm/
274 helm search -l | grep local
275 helm deploy dev local/onap -f ~/oom/kubernetes/onap/resources/environments/public-cloud.yaml -f ~/integration-override.yaml --namespace onap | tee ~/helm-deploy.log
276 helm list
277
278
279 # Check ONAP status:
280 sleep 10
281 kubectl get pods --all-namespaces
282 kubectl get nodes
283 kubectl top nodes