Fix deployment of Neutron with enforced scopes
After patch [1] new RBAC policies changed in the way that SYSTEM_ADMIN user isn't anymore allowed to e.g. create resources in behalf of some projects. Now PROJECT_ADMIN needs to create such resources instead. So this patch basically reverts most of the changes which were done in [2] some time ago. It also introduces new entry in the clouds.yaml file - "devstack-admin-demo" which is "admin" user in the "demo" project as it's needed to create some resouces in the demo project now. Additionally, because of bug [3] this patch changes way how IPv6 external gateway IP is found using Neutron API. This change may be reverted in the future when bug [3] will be fixed. [1] https://review.opendev.org/c/openstack/neutron/+/821208 [2] https://review.opendev.org/c/openstack/devstack/+/797450 [3] https://bugs.launchpad.net/neutron/+bug/1959332 Depends-On: https://review.opendev.org/c/openstack/neutron/+/826828 Closes-Bug: #1959196 Change-Id: I32a6e8b9b59269a8699644b563657363425f7174
This commit is contained in:
parent
be7b5bf671
commit
14a0c09001
@ -107,6 +107,17 @@ function write_clouds_yaml {
|
|||||||
--os-password $ADMIN_PASSWORD \
|
--os-password $ADMIN_PASSWORD \
|
||||||
--os-project-name admin
|
--os-project-name admin
|
||||||
|
|
||||||
|
# devstack-admin-demo: user with the admin role on the demo project
|
||||||
|
$PYTHON $TOP_DIR/tools/update_clouds_yaml.py \
|
||||||
|
--file $CLOUDS_YAML \
|
||||||
|
--os-cloud devstack-admin-demo \
|
||||||
|
--os-region-name $REGION_NAME \
|
||||||
|
$CA_CERT_ARG \
|
||||||
|
--os-auth-url $KEYSTONE_SERVICE_URI \
|
||||||
|
--os-username admin \
|
||||||
|
--os-password $ADMIN_PASSWORD \
|
||||||
|
--os-project-name demo
|
||||||
|
|
||||||
# devstack-alt: user with the member role on alt_demo project
|
# devstack-alt: user with the member role on alt_demo project
|
||||||
$PYTHON $TOP_DIR/tools/update_clouds_yaml.py \
|
$PYTHON $TOP_DIR/tools/update_clouds_yaml.py \
|
||||||
--file $CLOUDS_YAML \
|
--file $CLOUDS_YAML \
|
||||||
|
@ -100,11 +100,6 @@ SUBNETPOOL_PREFIX_V6=${SUBNETPOOL_PREFIX_V6:-$IPV6_ADDRS_SAFE_TO_USE}
|
|||||||
SUBNETPOOL_SIZE_V4=${SUBNETPOOL_SIZE_V4:-26}
|
SUBNETPOOL_SIZE_V4=${SUBNETPOOL_SIZE_V4:-26}
|
||||||
SUBNETPOOL_SIZE_V6=${SUBNETPOOL_SIZE_V6:-64}
|
SUBNETPOOL_SIZE_V6=${SUBNETPOOL_SIZE_V6:-64}
|
||||||
|
|
||||||
NEUTRON_ADMIN_CLOUD_NAME="devstack-admin"
|
|
||||||
if [ "$NEUTRON_ENFORCE_SCOPE" == "True" ]; then
|
|
||||||
NEUTRON_ADMIN_CLOUD_NAME="devstack-system-admin"
|
|
||||||
fi
|
|
||||||
|
|
||||||
default_v4_route_devs=$(ip -4 route | grep ^default | awk '{print $5}')
|
default_v4_route_devs=$(ip -4 route | grep ^default | awk '{print $5}')
|
||||||
|
|
||||||
default_v6_route_devs=$(ip -6 route list match default table all | grep via | awk '{print $5}')
|
default_v6_route_devs=$(ip -6 route list match default table all | grep via | awk '{print $5}')
|
||||||
@ -156,10 +151,6 @@ function create_neutron_initial_network {
|
|||||||
project_id=$(openstack project list | grep " demo " | get_field 1)
|
project_id=$(openstack project list | grep " demo " | get_field 1)
|
||||||
die_if_not_set $LINENO project_id "Failure retrieving project_id for demo"
|
die_if_not_set $LINENO project_id "Failure retrieving project_id for demo"
|
||||||
|
|
||||||
local admin_project_id
|
|
||||||
admin_project_id=$(openstack project list | grep " admin " | get_field 1)
|
|
||||||
die_if_not_set $LINENO admin_project_id "Failure retrieving project_id for admin"
|
|
||||||
|
|
||||||
# Allow drivers that need to create an initial network to do so here
|
# Allow drivers that need to create an initial network to do so here
|
||||||
if type -p neutron_plugin_create_initial_network_profile > /dev/null; then
|
if type -p neutron_plugin_create_initial_network_profile > /dev/null; then
|
||||||
neutron_plugin_create_initial_network_profile $PHYSICAL_NETWORK
|
neutron_plugin_create_initial_network_profile $PHYSICAL_NETWORK
|
||||||
@ -168,10 +159,10 @@ function create_neutron_initial_network {
|
|||||||
if is_networking_extension_supported "auto-allocated-topology"; then
|
if is_networking_extension_supported "auto-allocated-topology"; then
|
||||||
if [[ "$USE_SUBNETPOOL" == "True" ]]; then
|
if [[ "$USE_SUBNETPOOL" == "True" ]]; then
|
||||||
if [[ "$IP_VERSION" =~ 4.* ]]; then
|
if [[ "$IP_VERSION" =~ 4.* ]]; then
|
||||||
SUBNETPOOL_V4_ID=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" subnet pool create $SUBNETPOOL_NAME_V4 --project "$admin_project_id" --default-prefix-length $SUBNETPOOL_SIZE_V4 --pool-prefix $SUBNETPOOL_PREFIX_V4 --share --default -f value -c id)
|
SUBNETPOOL_V4_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet pool create $SUBNETPOOL_NAME_V4 --default-prefix-length $SUBNETPOOL_SIZE_V4 --pool-prefix $SUBNETPOOL_PREFIX_V4 --share --default -f value -c id)
|
||||||
fi
|
fi
|
||||||
if [[ "$IP_VERSION" =~ .*6 ]]; then
|
if [[ "$IP_VERSION" =~ .*6 ]]; then
|
||||||
SUBNETPOOL_V6_ID=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" subnet pool create $SUBNETPOOL_NAME_V6 --project "$admin_project_id" --default-prefix-length $SUBNETPOOL_SIZE_V6 --pool-prefix $SUBNETPOOL_PREFIX_V6 --share --default -f value -c id)
|
SUBNETPOOL_V6_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet pool create $SUBNETPOOL_NAME_V6 --default-prefix-length $SUBNETPOOL_SIZE_V6 --pool-prefix $SUBNETPOOL_PREFIX_V6 --share --default -f value -c id)
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
fi
|
fi
|
||||||
@ -179,14 +170,14 @@ function create_neutron_initial_network {
|
|||||||
if is_provider_network; then
|
if is_provider_network; then
|
||||||
die_if_not_set $LINENO PHYSICAL_NETWORK "You must specify the PHYSICAL_NETWORK"
|
die_if_not_set $LINENO PHYSICAL_NETWORK "You must specify the PHYSICAL_NETWORK"
|
||||||
die_if_not_set $LINENO PROVIDER_NETWORK_TYPE "You must specify the PROVIDER_NETWORK_TYPE"
|
die_if_not_set $LINENO PROVIDER_NETWORK_TYPE "You must specify the PROVIDER_NETWORK_TYPE"
|
||||||
NET_ID=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" network create $PHYSICAL_NETWORK --project $project_id --provider-network-type $PROVIDER_NETWORK_TYPE --provider-physical-network "$PHYSICAL_NETWORK" ${SEGMENTATION_ID:+--provider-segment $SEGMENTATION_ID} --share | grep ' id ' | get_field 2)
|
NET_ID=$(openstack --os-cloud devstack-admin-demo --os-region "$REGION_NAME" network create $PHYSICAL_NETWORK --provider-network-type $PROVIDER_NETWORK_TYPE --provider-physical-network "$PHYSICAL_NETWORK" ${SEGMENTATION_ID:+--provider-segment $SEGMENTATION_ID} --share | grep ' id ' | get_field 2)
|
||||||
die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PHYSICAL_NETWORK $project_id"
|
die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PHYSICAL_NETWORK $project_id"
|
||||||
|
|
||||||
if [[ "$IP_VERSION" =~ 4.* ]]; then
|
if [[ "$IP_VERSION" =~ 4.* ]]; then
|
||||||
if [ -z $SUBNETPOOL_V4_ID ]; then
|
if [ -z $SUBNETPOOL_V4_ID ]; then
|
||||||
fixed_range_v4=$FIXED_RANGE
|
fixed_range_v4=$FIXED_RANGE
|
||||||
fi
|
fi
|
||||||
SUBNET_ID=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" subnet create --project $project_id --ip-version 4 ${ALLOCATION_POOL:+--allocation-pool $ALLOCATION_POOL} $PROVIDER_SUBNET_NAME --gateway $NETWORK_GATEWAY ${SUBNETPOOL_V4_ID:+--subnet-pool $SUBNETPOOL_V4_ID} --network $NET_ID ${fixed_range_v4:+--subnet-range $fixed_range_v4} | grep ' id ' | get_field 2)
|
SUBNET_ID=$(openstack --os-cloud devstack --os-region "$REGION_NAME" subnet create --ip-version 4 ${ALLOCATION_POOL:+--allocation-pool $ALLOCATION_POOL} $PROVIDER_SUBNET_NAME --gateway $NETWORK_GATEWAY ${SUBNETPOOL_V4_ID:+--subnet-pool $SUBNETPOOL_V4_ID} --network $NET_ID ${fixed_range_v4:+--subnet-range $fixed_range_v4} | grep ' id ' | get_field 2)
|
||||||
die_if_not_set $LINENO SUBNET_ID "Failure creating SUBNET_ID for $PROVIDER_SUBNET_NAME $project_id"
|
die_if_not_set $LINENO SUBNET_ID "Failure creating SUBNET_ID for $PROVIDER_SUBNET_NAME $project_id"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
@ -196,7 +187,7 @@ function create_neutron_initial_network {
|
|||||||
if [ -z $SUBNETPOOL_V6_ID ]; then
|
if [ -z $SUBNETPOOL_V6_ID ]; then
|
||||||
fixed_range_v6=$IPV6_PROVIDER_FIXED_RANGE
|
fixed_range_v6=$IPV6_PROVIDER_FIXED_RANGE
|
||||||
fi
|
fi
|
||||||
IPV6_SUBNET_ID=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" subnet create --project $project_id --ip-version 6 --gateway $IPV6_PROVIDER_NETWORK_GATEWAY $IPV6_PROVIDER_SUBNET_NAME ${SUBNETPOOL_V6_ID:+--subnet-pool $SUBNETPOOL_V6_ID} --network $NET_ID ${fixed_range_v6:+--subnet-range $fixed_range_v6} | grep ' id ' | get_field 2)
|
IPV6_SUBNET_ID=$(openstack --os-cloud devstack --os-region "$REGION_NAME" subnet create --ip-version 6 --gateway $IPV6_PROVIDER_NETWORK_GATEWAY $IPV6_PROVIDER_SUBNET_NAME ${SUBNETPOOL_V6_ID:+--subnet-pool $SUBNETPOOL_V6_ID} --network $NET_ID ${fixed_range_v6:+--subnet-range $fixed_range_v6} | grep ' id ' | get_field 2)
|
||||||
die_if_not_set $LINENO IPV6_SUBNET_ID "Failure creating IPV6_SUBNET_ID for $IPV6_PROVIDER_SUBNET_NAME $project_id"
|
die_if_not_set $LINENO IPV6_SUBNET_ID "Failure creating IPV6_SUBNET_ID for $IPV6_PROVIDER_SUBNET_NAME $project_id"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
@ -206,7 +197,7 @@ function create_neutron_initial_network {
|
|||||||
sudo ip link set $PUBLIC_INTERFACE up
|
sudo ip link set $PUBLIC_INTERFACE up
|
||||||
fi
|
fi
|
||||||
else
|
else
|
||||||
NET_ID=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" network create --project $project_id "$PRIVATE_NETWORK_NAME" | grep ' id ' | get_field 2)
|
NET_ID=$(openstack --os-cloud devstack --os-region "$REGION_NAME" network create "$PRIVATE_NETWORK_NAME" | grep ' id ' | get_field 2)
|
||||||
die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PRIVATE_NETWORK_NAME $project_id"
|
die_if_not_set $LINENO NET_ID "Failure creating NET_ID for $PRIVATE_NETWORK_NAME $project_id"
|
||||||
|
|
||||||
if [[ "$IP_VERSION" =~ 4.* ]]; then
|
if [[ "$IP_VERSION" =~ 4.* ]]; then
|
||||||
@ -224,11 +215,11 @@ function create_neutron_initial_network {
|
|||||||
# Create a router, and add the private subnet as one of its interfaces
|
# Create a router, and add the private subnet as one of its interfaces
|
||||||
if [[ "$Q_L3_ROUTER_PER_TENANT" == "True" ]]; then
|
if [[ "$Q_L3_ROUTER_PER_TENANT" == "True" ]]; then
|
||||||
# create a tenant-owned router.
|
# create a tenant-owned router.
|
||||||
ROUTER_ID=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" router create --project $project_id $Q_ROUTER_NAME | grep ' id ' | get_field 2)
|
ROUTER_ID=$(openstack --os-cloud devstack --os-region "$REGION_NAME" router create $Q_ROUTER_NAME | grep ' id ' | get_field 2)
|
||||||
die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $project_id $Q_ROUTER_NAME"
|
die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $project_id $Q_ROUTER_NAME"
|
||||||
else
|
else
|
||||||
# Plugin only supports creating a single router, which should be admin owned.
|
# Plugin only supports creating a single router, which should be admin owned.
|
||||||
ROUTER_ID=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" router create $Q_ROUTER_NAME --project $admin_project_id | grep ' id ' | get_field 2)
|
ROUTER_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" router create $Q_ROUTER_NAME | grep ' id ' | get_field 2)
|
||||||
die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $Q_ROUTER_NAME"
|
die_if_not_set $LINENO ROUTER_ID "Failure creating ROUTER_ID for $Q_ROUTER_NAME"
|
||||||
fi
|
fi
|
||||||
|
|
||||||
@ -238,9 +229,9 @@ function create_neutron_initial_network {
|
|||||||
fi
|
fi
|
||||||
# Create an external network, and a subnet. Configure the external network as router gw
|
# Create an external network, and a subnet. Configure the external network as router gw
|
||||||
if [ "$Q_USE_PROVIDERNET_FOR_PUBLIC" = "True" ]; then
|
if [ "$Q_USE_PROVIDERNET_FOR_PUBLIC" = "True" ]; then
|
||||||
EXT_NET_ID=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" network create "$PUBLIC_NETWORK_NAME" $EXTERNAL_NETWORK_FLAGS --provider-network-type ${PUBLIC_PROVIDERNET_TYPE:-flat} ${PUBLIC_PROVIDERNET_SEGMENTATION_ID:+--provider-segment $PUBLIC_PROVIDERNET_SEGMENTATION_ID} --provider-physical-network ${PUBLIC_PHYSICAL_NETWORK} --project $admin_project_id | grep ' id ' | get_field 2)
|
EXT_NET_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" network create "$PUBLIC_NETWORK_NAME" $EXTERNAL_NETWORK_FLAGS --provider-network-type ${PUBLIC_PROVIDERNET_TYPE:-flat} ${PUBLIC_PROVIDERNET_SEGMENTATION_ID:+--provider-segment $PUBLIC_PROVIDERNET_SEGMENTATION_ID} --provider-physical-network ${PUBLIC_PHYSICAL_NETWORK} | grep ' id ' | get_field 2)
|
||||||
else
|
else
|
||||||
EXT_NET_ID=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" network create "$PUBLIC_NETWORK_NAME" $EXTERNAL_NETWORK_FLAGS --project $admin_project_id | grep ' id ' | get_field 2)
|
EXT_NET_ID=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" network create "$PUBLIC_NETWORK_NAME" $EXTERNAL_NETWORK_FLAGS | grep ' id ' | get_field 2)
|
||||||
fi
|
fi
|
||||||
die_if_not_set $LINENO EXT_NET_ID "Failure creating EXT_NET_ID for $PUBLIC_NETWORK_NAME"
|
die_if_not_set $LINENO EXT_NET_ID "Failure creating EXT_NET_ID for $PUBLIC_NETWORK_NAME"
|
||||||
|
|
||||||
@ -262,8 +253,7 @@ function _neutron_create_private_subnet_v4 {
|
|||||||
if [ -z $SUBNETPOOL_V4_ID ]; then
|
if [ -z $SUBNETPOOL_V4_ID ]; then
|
||||||
fixed_range_v4=$FIXED_RANGE
|
fixed_range_v4=$FIXED_RANGE
|
||||||
fi
|
fi
|
||||||
local subnet_params="--project $project_id "
|
local subnet_params="--ip-version 4 "
|
||||||
subnet_params+="--ip-version 4 "
|
|
||||||
if [[ -n "$NETWORK_GATEWAY" ]]; then
|
if [[ -n "$NETWORK_GATEWAY" ]]; then
|
||||||
subnet_params+="--gateway $NETWORK_GATEWAY "
|
subnet_params+="--gateway $NETWORK_GATEWAY "
|
||||||
fi
|
fi
|
||||||
@ -272,7 +262,7 @@ function _neutron_create_private_subnet_v4 {
|
|||||||
subnet_params+="${fixed_range_v4:+--subnet-range $fixed_range_v4} "
|
subnet_params+="${fixed_range_v4:+--subnet-range $fixed_range_v4} "
|
||||||
subnet_params+="--network $NET_ID $PRIVATE_SUBNET_NAME"
|
subnet_params+="--network $NET_ID $PRIVATE_SUBNET_NAME"
|
||||||
local subnet_id
|
local subnet_id
|
||||||
subnet_id=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" subnet create $subnet_params | grep ' id ' | get_field 2)
|
subnet_id=$(openstack --os-cloud devstack-admin-demo --os-region "$REGION_NAME" subnet create $subnet_params | grep ' id ' | get_field 2)
|
||||||
die_if_not_set $LINENO subnet_id "Failure creating private IPv4 subnet for $project_id"
|
die_if_not_set $LINENO subnet_id "Failure creating private IPv4 subnet for $project_id"
|
||||||
echo $subnet_id
|
echo $subnet_id
|
||||||
}
|
}
|
||||||
@ -286,8 +276,7 @@ function _neutron_create_private_subnet_v6 {
|
|||||||
if [ -z $SUBNETPOOL_V6_ID ]; then
|
if [ -z $SUBNETPOOL_V6_ID ]; then
|
||||||
fixed_range_v6=$FIXED_RANGE_V6
|
fixed_range_v6=$FIXED_RANGE_V6
|
||||||
fi
|
fi
|
||||||
local subnet_params="--project $project_id "
|
local subnet_params="--ip-version 6 "
|
||||||
subnet_params+="--ip-version 6 "
|
|
||||||
if [[ -n "$IPV6_PRIVATE_NETWORK_GATEWAY" ]]; then
|
if [[ -n "$IPV6_PRIVATE_NETWORK_GATEWAY" ]]; then
|
||||||
subnet_params+="--gateway $IPV6_PRIVATE_NETWORK_GATEWAY "
|
subnet_params+="--gateway $IPV6_PRIVATE_NETWORK_GATEWAY "
|
||||||
fi
|
fi
|
||||||
@ -295,17 +284,14 @@ function _neutron_create_private_subnet_v6 {
|
|||||||
subnet_params+="${fixed_range_v6:+--subnet-range $fixed_range_v6} "
|
subnet_params+="${fixed_range_v6:+--subnet-range $fixed_range_v6} "
|
||||||
subnet_params+="$ipv6_modes --network $NET_ID $IPV6_PRIVATE_SUBNET_NAME "
|
subnet_params+="$ipv6_modes --network $NET_ID $IPV6_PRIVATE_SUBNET_NAME "
|
||||||
local ipv6_subnet_id
|
local ipv6_subnet_id
|
||||||
ipv6_subnet_id=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" subnet create $subnet_params | grep ' id ' | get_field 2)
|
ipv6_subnet_id=$(openstack --os-cloud devstack-admin-demo --os-region "$REGION_NAME" subnet create $subnet_params | grep ' id ' | get_field 2)
|
||||||
die_if_not_set $LINENO ipv6_subnet_id "Failure creating private IPv6 subnet for $project_id"
|
die_if_not_set $LINENO ipv6_subnet_id "Failure creating private IPv6 subnet for $project_id"
|
||||||
echo $ipv6_subnet_id
|
echo $ipv6_subnet_id
|
||||||
}
|
}
|
||||||
|
|
||||||
# Create public IPv4 subnet
|
# Create public IPv4 subnet
|
||||||
function _neutron_create_public_subnet_v4 {
|
function _neutron_create_public_subnet_v4 {
|
||||||
local admin_project_id
|
local subnet_params="--ip-version 4 "
|
||||||
admin_project_id=$(openstack project list | grep " admin " | get_field 1)
|
|
||||||
die_if_not_set $LINENO admin_project_id "Failure retrieving project_id for admin"
|
|
||||||
local subnet_params="--ip-version 4 --project $admin_project_id "
|
|
||||||
subnet_params+="${Q_FLOATING_ALLOCATION_POOL:+--allocation-pool $Q_FLOATING_ALLOCATION_POOL} "
|
subnet_params+="${Q_FLOATING_ALLOCATION_POOL:+--allocation-pool $Q_FLOATING_ALLOCATION_POOL} "
|
||||||
if [[ -n "$PUBLIC_NETWORK_GATEWAY" ]]; then
|
if [[ -n "$PUBLIC_NETWORK_GATEWAY" ]]; then
|
||||||
subnet_params+="--gateway $PUBLIC_NETWORK_GATEWAY "
|
subnet_params+="--gateway $PUBLIC_NETWORK_GATEWAY "
|
||||||
@ -313,29 +299,26 @@ function _neutron_create_public_subnet_v4 {
|
|||||||
subnet_params+="--network $EXT_NET_ID --subnet-range $FLOATING_RANGE --no-dhcp "
|
subnet_params+="--network $EXT_NET_ID --subnet-range $FLOATING_RANGE --no-dhcp "
|
||||||
subnet_params+="$PUBLIC_SUBNET_NAME"
|
subnet_params+="$PUBLIC_SUBNET_NAME"
|
||||||
local id_and_ext_gw_ip
|
local id_and_ext_gw_ip
|
||||||
id_and_ext_gw_ip=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" subnet create $subnet_params | grep -e 'gateway_ip' -e ' id ')
|
id_and_ext_gw_ip=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet create $subnet_params | grep -e 'gateway_ip' -e ' id ')
|
||||||
die_if_not_set $LINENO id_and_ext_gw_ip "Failure creating public IPv4 subnet"
|
die_if_not_set $LINENO id_and_ext_gw_ip "Failure creating public IPv4 subnet"
|
||||||
echo $id_and_ext_gw_ip
|
echo $id_and_ext_gw_ip
|
||||||
}
|
}
|
||||||
|
|
||||||
# Create public IPv6 subnet
|
# Create public IPv6 subnet
|
||||||
function _neutron_create_public_subnet_v6 {
|
function _neutron_create_public_subnet_v6 {
|
||||||
local admin_project_id
|
local subnet_params="--ip-version 6 "
|
||||||
admin_project_id=$(openstack project list | grep " admin " | get_field 1)
|
|
||||||
die_if_not_set $LINENO admin_project_id "Failure retrieving project_id for admin"
|
|
||||||
local subnet_params="--ip-version 6 --project $admin_project_id "
|
|
||||||
subnet_params+="--gateway $IPV6_PUBLIC_NETWORK_GATEWAY "
|
subnet_params+="--gateway $IPV6_PUBLIC_NETWORK_GATEWAY "
|
||||||
subnet_params+="--network $EXT_NET_ID --subnet-range $IPV6_PUBLIC_RANGE --no-dhcp "
|
subnet_params+="--network $EXT_NET_ID --subnet-range $IPV6_PUBLIC_RANGE --no-dhcp "
|
||||||
subnet_params+="$IPV6_PUBLIC_SUBNET_NAME"
|
subnet_params+="$IPV6_PUBLIC_SUBNET_NAME"
|
||||||
local ipv6_id_and_ext_gw_ip
|
local ipv6_id_and_ext_gw_ip
|
||||||
ipv6_id_and_ext_gw_ip=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" subnet create $subnet_params | grep -e 'gateway_ip' -e ' id ')
|
ipv6_id_and_ext_gw_ip=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet create $subnet_params | grep -e 'gateway_ip' -e ' id ')
|
||||||
die_if_not_set $LINENO ipv6_id_and_ext_gw_ip "Failure creating an IPv6 public subnet"
|
die_if_not_set $LINENO ipv6_id_and_ext_gw_ip "Failure creating an IPv6 public subnet"
|
||||||
echo $ipv6_id_and_ext_gw_ip
|
echo $ipv6_id_and_ext_gw_ip
|
||||||
}
|
}
|
||||||
|
|
||||||
# Configure neutron router for IPv4 public access
|
# Configure neutron router for IPv4 public access
|
||||||
function _neutron_configure_router_v4 {
|
function _neutron_configure_router_v4 {
|
||||||
openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" router add subnet $ROUTER_ID $SUBNET_ID
|
openstack --os-cloud devstack-admin-demo --os-region "$REGION_NAME" router add subnet $ROUTER_ID $SUBNET_ID
|
||||||
# Create a public subnet on the external network
|
# Create a public subnet on the external network
|
||||||
local id_and_ext_gw_ip
|
local id_and_ext_gw_ip
|
||||||
id_and_ext_gw_ip=$(_neutron_create_public_subnet_v4 $EXT_NET_ID)
|
id_and_ext_gw_ip=$(_neutron_create_public_subnet_v4 $EXT_NET_ID)
|
||||||
@ -343,7 +326,7 @@ function _neutron_configure_router_v4 {
|
|||||||
ext_gw_ip=$(echo $id_and_ext_gw_ip | get_field 2)
|
ext_gw_ip=$(echo $id_and_ext_gw_ip | get_field 2)
|
||||||
PUB_SUBNET_ID=$(echo $id_and_ext_gw_ip | get_field 5)
|
PUB_SUBNET_ID=$(echo $id_and_ext_gw_ip | get_field 5)
|
||||||
# Configure the external network as the default router gateway
|
# Configure the external network as the default router gateway
|
||||||
openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" router set --external-gateway $EXT_NET_ID $ROUTER_ID
|
openstack --os-cloud devstack-admin-demo --os-region "$REGION_NAME" router set --external-gateway $EXT_NET_ID $ROUTER_ID
|
||||||
|
|
||||||
# This logic is specific to using OVN or the l3-agent for layer 3
|
# This logic is specific to using OVN or the l3-agent for layer 3
|
||||||
if ([[ $Q_AGENT == "ovn" ]] && [[ "$OVN_L3_CREATE_PUBLIC_NETWORK" == "True" ]] && is_service_enabled q-svc neutron-server) || is_service_enabled q-l3 neutron-l3; then
|
if ([[ $Q_AGENT == "ovn" ]] && [[ "$OVN_L3_CREATE_PUBLIC_NETWORK" == "True" ]] && is_service_enabled q-svc neutron-server) || is_service_enabled q-l3 neutron-l3; then
|
||||||
@ -370,7 +353,7 @@ function _neutron_configure_router_v4 {
|
|||||||
sudo ip addr add $ext_gw_ip/$cidr_len dev $ext_gw_interface
|
sudo ip addr add $ext_gw_ip/$cidr_len dev $ext_gw_interface
|
||||||
sudo ip link set $ext_gw_interface up
|
sudo ip link set $ext_gw_interface up
|
||||||
fi
|
fi
|
||||||
ROUTER_GW_IP=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" port list -c 'Fixed IP Addresses' --device-owner network:router_gateway | awk -F'ip_address' '{ print $2 }' | cut -f2 -d\' | tr '\n' ' ')
|
ROUTER_GW_IP=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" port list -c 'Fixed IP Addresses' --device-owner network:router_gateway | awk -F'ip_address' '{ print $2 }' | cut -f2 -d\' | tr '\n' ' ')
|
||||||
die_if_not_set $LINENO ROUTER_GW_IP "Failure retrieving ROUTER_GW_IP"
|
die_if_not_set $LINENO ROUTER_GW_IP "Failure retrieving ROUTER_GW_IP"
|
||||||
fi
|
fi
|
||||||
_neutron_set_router_id
|
_neutron_set_router_id
|
||||||
@ -379,7 +362,7 @@ function _neutron_configure_router_v4 {
|
|||||||
|
|
||||||
# Configure neutron router for IPv6 public access
|
# Configure neutron router for IPv6 public access
|
||||||
function _neutron_configure_router_v6 {
|
function _neutron_configure_router_v6 {
|
||||||
openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" router add subnet $ROUTER_ID $IPV6_SUBNET_ID
|
openstack --os-cloud devstack-admin-demo --os-region "$REGION_NAME" router add subnet $ROUTER_ID $IPV6_SUBNET_ID
|
||||||
# Create a public subnet on the external network
|
# Create a public subnet on the external network
|
||||||
local ipv6_id_and_ext_gw_ip
|
local ipv6_id_and_ext_gw_ip
|
||||||
ipv6_id_and_ext_gw_ip=$(_neutron_create_public_subnet_v6 $EXT_NET_ID)
|
ipv6_id_and_ext_gw_ip=$(_neutron_create_public_subnet_v6 $EXT_NET_ID)
|
||||||
@ -391,7 +374,7 @@ function _neutron_configure_router_v6 {
|
|||||||
# If the external network has not already been set as the default router
|
# If the external network has not already been set as the default router
|
||||||
# gateway when configuring an IPv4 public subnet, do so now
|
# gateway when configuring an IPv4 public subnet, do so now
|
||||||
if [[ "$IP_VERSION" == "6" ]]; then
|
if [[ "$IP_VERSION" == "6" ]]; then
|
||||||
openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" router set --external-gateway $EXT_NET_ID $ROUTER_ID
|
openstack --os-cloud devstack-admin-demo --os-region "$REGION_NAME" router set --external-gateway $EXT_NET_ID $ROUTER_ID
|
||||||
fi
|
fi
|
||||||
|
|
||||||
# This logic is specific to using OVN or the l3-agent for layer 3
|
# This logic is specific to using OVN or the l3-agent for layer 3
|
||||||
@ -412,7 +395,13 @@ function _neutron_configure_router_v6 {
|
|||||||
sudo sysctl -w net.ipv6.conf.all.forwarding=1
|
sudo sysctl -w net.ipv6.conf.all.forwarding=1
|
||||||
# Configure and enable public bridge
|
# Configure and enable public bridge
|
||||||
# Override global IPV6_ROUTER_GW_IP with the true value from neutron
|
# Override global IPV6_ROUTER_GW_IP with the true value from neutron
|
||||||
IPV6_ROUTER_GW_IP=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" port list -c 'Fixed IP Addresses' | grep $ipv6_pub_subnet_id | awk -F'ip_address' '{ print $2 }' | cut -f2 -d\' | tr '\n' ' ')
|
# NOTE(slaweq): when enforce scopes is enabled in Neutron, router's
|
||||||
|
# gateway ports aren't visible in API because such ports don't belongs
|
||||||
|
# to any tenant. Because of that, at least temporary we need to find
|
||||||
|
# IPv6 address of the router's gateway in a bit different way.
|
||||||
|
# It can be reverted when bug
|
||||||
|
# https://bugs.launchpad.net/neutron/+bug/1959332 will be fixed
|
||||||
|
IPV6_ROUTER_GW_IP=$(openstack --os-cloud devstack-admin-demo --os-region "$REGION_NAME" router show $ROUTER_ID -c external_gateway_info -f json | grep -C 1 $ipv6_pub_subnet_id | grep ip_address | awk '{print $2}' | tr -d '"')
|
||||||
die_if_not_set $LINENO IPV6_ROUTER_GW_IP "Failure retrieving IPV6_ROUTER_GW_IP"
|
die_if_not_set $LINENO IPV6_ROUTER_GW_IP "Failure retrieving IPV6_ROUTER_GW_IP"
|
||||||
|
|
||||||
if is_neutron_ovs_base_plugin; then
|
if is_neutron_ovs_base_plugin; then
|
||||||
@ -440,7 +429,7 @@ function _neutron_configure_router_v6 {
|
|||||||
function is_networking_extension_supported {
|
function is_networking_extension_supported {
|
||||||
local extension=$1
|
local extension=$1
|
||||||
# TODO(sc68cal) cache this instead of calling every time
|
# TODO(sc68cal) cache this instead of calling every time
|
||||||
EXT_LIST=$(openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" extension list --network -c Alias -f value)
|
EXT_LIST=$(openstack --os-cloud devstack-admin --os-region "$REGION_NAME" extension list --network -c Alias -f value)
|
||||||
[[ $EXT_LIST =~ $extension ]] && return 0
|
[[ $EXT_LIST =~ $extension ]] && return 0
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -90,11 +90,6 @@ TEMPEST_USE_TEST_ACCOUNTS=$(trueorfalse False TEMPEST_USE_TEST_ACCOUNTS)
|
|||||||
# it will run tempest with
|
# it will run tempest with
|
||||||
TEMPEST_CONCURRENCY=${TEMPEST_CONCURRENCY:-$(nproc)}
|
TEMPEST_CONCURRENCY=${TEMPEST_CONCURRENCY:-$(nproc)}
|
||||||
|
|
||||||
NEUTRON_ADMIN_CLOUD_NAME="devstack-admin"
|
|
||||||
if [ "$NEUTRON_ENFORCE_SCOPE" == "True" ]; then
|
|
||||||
NEUTRON_ADMIN_CLOUD_NAME="devstack-system-admin"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Functions
|
# Functions
|
||||||
# ---------
|
# ---------
|
||||||
|
|
||||||
@ -293,8 +288,8 @@ function configure_tempest {
|
|||||||
if [[ "$NEUTRON_CREATE_INITIAL_NETWORKS" == "True" ]] && is_networking_extension_supported 'external-net'; then
|
if [[ "$NEUTRON_CREATE_INITIAL_NETWORKS" == "True" ]] && is_networking_extension_supported 'external-net'; then
|
||||||
public_network_id=$(openstack --os-cloud devstack-admin network show -f value -c id $PUBLIC_NETWORK_NAME)
|
public_network_id=$(openstack --os-cloud devstack-admin network show -f value -c id $PUBLIC_NETWORK_NAME)
|
||||||
# make sure shared network presence does not confuses the tempest tests
|
# make sure shared network presence does not confuses the tempest tests
|
||||||
openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" network create --share shared --project "$admin_project_id"
|
openstack --os-cloud devstack-admin --os-region "$REGION_NAME" network create --share shared
|
||||||
openstack --os-cloud "$NEUTRON_ADMIN_CLOUD_NAME" --os-region "$REGION_NAME" subnet create --description shared-subnet --subnet-range ${TEMPEST_SHARED_POOL:-192.168.233.0/24} --network shared shared-subnet --project "$admin_project_id"
|
openstack --os-cloud devstack-admin --os-region "$REGION_NAME" subnet create --description shared-subnet --subnet-range ${TEMPEST_SHARED_POOL:-192.168.233.0/24} --network shared shared-subnet
|
||||||
fi
|
fi
|
||||||
|
|
||||||
iniset $TEMPEST_CONFIG DEFAULT use_syslog $SYSLOG
|
iniset $TEMPEST_CONFIG DEFAULT use_syslog $SYSLOG
|
||||||
|
Loading…
Reference in New Issue
Block a user