3 # Licensed under the Apache License, Version 2.0 (the "License");
4 # you may not use this file except in compliance with the License.
5 # You may obtain a copy of the License at
7 # http://www.apache.org/licenses/LICENSE-2.0
9 # Unless required by applicable law or agreed to in writing, software
10 # distributed under the License is distributed on an "AS IS" BASIS,
11 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 # See the License for the specific language governing permissions and
13 # limitations under the License.
18 K8S_CLOUD_NAME
="k8s-cloud"
19 KUBECTL
="microk8s.kubectl"
20 IMAGES_OVERLAY_FILE
=~
/.osm
/images-overlay.yaml
21 function check_arguments
(){
22 while [ $# -gt 0 ] ; do
24 --bundle) BUNDLE
="$2" ;;
25 --k8s) KUBECFG
="$2" ;;
26 --vca) CONTROLLER
="$2" ;;
27 --lxd) LXD_CLOUD
="$2" ;;
28 --lxd-cred) LXD_CREDENTIALS
="$2" ;;
29 --microstack) MICROSTACK
=y
;;
30 --ha) BUNDLE
="osm-ha" ;;
36 # echo $BUNDLE $KUBECONFIG $LXDENDPOINT
38 function install_snaps
(){
39 [ ! -v KUBECFG
] && sudo snap
install microk8s
--classic && sudo usermod
-a -G microk8s
`whoami` && mkdir
-p ~
/.kube
&& sudo chown
-f -R `whoami` ~
/.kube
40 sudo snap
install juju
--classic --channel=2.8/stable
43 function bootstrap_k8s_lxd
(){
44 [ -v CONTROLLER
] && ADD_K8S_OPTS
="--controller ${CONTROLLER}" && CONTROLLER_NAME
=$CONTROLLER
45 [ ! -v CONTROLLER
] && ADD_K8S_OPTS
="--client" && BOOTSTRAP_NEEDED
="yes" && CONTROLLER_NAME
="controller"
47 if [ -v KUBECFG
]; then
48 cat $KUBECFG | juju add-k8s
$K8S_CLOUD_NAME $ADD_K8S_OPTS
49 [ -v BOOTSTRAP_NEEDED
] && juju bootstrap
$K8S_CLOUD_NAME $CONTROLLER_NAME --config controller-service-type
=loadbalancer
51 sg microk8s
-c "echo ${DEFAULT_IP}-${DEFAULT_IP} | microk8s.enable metallb"
52 sg microk8s
-c "microk8s.enable storage dns"
55 sg microk8s
-c "microk8s.status" |
grep 'storage: enabled'
62 [ ! -v BOOTSTRAP_NEEDED
] && sg microk8s
-c "microk8s.config" | juju add-k8s
$K8S_CLOUD_NAME $ADD_K8S_OPTS
63 [ -v BOOTSTRAP_NEEDED
] && sg microk8s
-c "juju bootstrap microk8s $CONTROLLER_NAME --config controller-service-type=loadbalancer" && K8S_CLOUD_NAME
=microk8s
66 if [ -v LXD_CLOUD
]; then
67 if [ ! -v LXD_CREDENTIALS
]; then
68 echo "The installer needs the LXD server certificate if the LXD is external"
72 LXDENDPOINT
=$DEFAULT_IP
73 LXD_CLOUD
=~
/.osm
/lxd-cloud.yaml
74 LXD_CREDENTIALS
=~
/.osm
/lxd-credentials.yaml
75 # Apply sysctl production values for optimal performance
76 sudo
cp /usr
/share
/osm-devops
/installers
/60-lxd-production.conf
/etc
/sysctl.d
/60-lxd-production.conf
79 sudo apt-get remove
--purge -y liblxc1 lxc-common lxcfs lxd lxd-client
81 sudo apt-get
install zfsutils-linux
-y
83 sudo usermod
-a -G lxd
`whoami`
84 cat /usr
/share
/osm-devops
/installers
/lxd-preseed.conf |
sed 's/^config: {}/config:\n core.https_address: '$LXDENDPOINT':8443/' | sg lxd
-c "lxd init --preseed"
85 sg lxd
-c "lxd waitready"
86 DEFAULT_MTU
=$
(ip addr show
$DEFAULT_IF | perl
-ne 'if (/mtu\s(\d+)/) {print $1;}')
87 sg lxd
-c "lxc profile device set default eth0 mtu $DEFAULT_MTU"
88 sg lxd
-c "lxc network set lxdbr0 bridge.mtu $DEFAULT_MTU"
90 cat << EOF > $LXD_CLOUD
94 auth-types: [certificate]
95 endpoint: "https://$LXDENDPOINT:8443"
97 ssl-hostname-verification: false
99 openssl req
-nodes -new -x509 -keyout ~
/.osm
/client.key
-out ~
/.osm
/client.crt
-days 365 -subj "/C=FR/ST=Nice/L=Nice/O=ETSI/OU=OSM/CN=osm.etsi.org"
100 local server_cert
=`cat /var/snap/lxd/common/lxd/server.crt | sed 's/^/ /'`
101 local client_cert
=`cat ~/.osm/client.crt | sed 's/^/ /'`
102 local client_key
=`cat ~/.osm/client.key | sed 's/^/ /'`
104 cat << EOF > $LXD_CREDENTIALS
108 auth-type: certificate
116 lxc config trust add
local: ~
/.osm
/client.crt
119 juju add-cloud
-c $CONTROLLER_NAME lxd-cloud
$LXD_CLOUD --force
120 juju add-credential
-c $CONTROLLER_NAME lxd-cloud
-f $LXD_CREDENTIALS
121 sg lxd
-c "lxd waitready"
122 juju add-model
test lxd-cloud || true
123 juju controller-config features
=[k8s-operators
]
126 function deploy_charmed_osm
(){
128 echo "Creating OSM model"
129 if [ -v KUBECFG
]; then
130 juju add-model osm
$K8S_CLOUD_NAME
132 sg microk8s
-c "juju add-model osm $K8S_CLOUD_NAME"
134 echo "Deploying OSM with charms"
137 [ -v TAG
] && generate_images_overlay
&& images_overlay
="--overlay $IMAGES_OVERLAY_FILE"
138 if [ -v BUNDLE
]; then
139 juju deploy
$BUNDLE --overlay ~
/.osm
/vca-overlay.yaml
$images_overlay
141 juju deploy osm
--overlay ~
/.osm
/vca-overlay.yaml
$images_overlay
143 echo "Waiting for deployment to finish..."
144 check_osm_deployed
&> /dev
/null
145 echo "OSM with charms deployed"
146 sg microk8s
-c "microk8s.enable ingress"
147 juju config ui-k8s juju-external-hostname
=osm.
$DEFAULT_IP.xip.io
151 function check_osm_deployed
() {
154 pod_name
=`sg microk8s -c "microk8s.kubectl -n osm get pods | grep ui-k8s | grep -v operator" | awk '{print $1; exit}'`
156 if [[ `sg microk8s -c "microk8s.kubectl -n osm wait pod $pod_name --for condition=Ready"` ]]; then
157 if [[ `sg microk8s -c "microk8s.kubectl -n osm wait pod lcm-k8s-0 --for condition=Ready"` ]]; then
165 function create_overlay
() {
167 sudo apt
install python3-pip
-y
168 python3
-m pip
install yq
169 PATH
=$PATH:$HOME/.local
/bin
# make yq command available
170 local HOME
=/home
/$USER
171 local vca_user
=$
(cat $HOME/.local
/share
/juju
/accounts.yaml | yq
--arg CONTROLLER_NAME
$CONTROLLER_NAME '.controllers[$CONTROLLER_NAME].user')
172 local vca_password
=$
(cat $HOME/.local
/share
/juju
/accounts.yaml | yq
--arg CONTROLLER_NAME
$CONTROLLER_NAME '.controllers[$CONTROLLER_NAME].password')
173 local vca_host
=$
(cat $HOME/.local
/share
/juju
/controllers.yaml | yq
--arg CONTROLLER_NAME
$CONTROLLER_NAME '.controllers[$CONTROLLER_NAME]["api-endpoints"][0]' --raw-output | cut
-d ":" -f 1)
174 local vca_port
=$
(cat $HOME/.local
/share
/juju
/controllers.yaml | yq
--arg CONTROLLER_NAME
$CONTROLLER_NAME '.controllers[$CONTROLLER_NAME]["api-endpoints"][0]' --raw-output | cut
-d ":" -f 2)
175 local vca_pubkey
=\"$
(cat $HOME/.local
/share
/juju
/ssh
/juju_id_rsa.pub
)\"
176 local vca_cloud
="lxd-cloud"
177 # Get the VCA Certificate
178 local vca_cacert
=$
(cat $HOME/.local
/share
/juju
/controllers.yaml | yq
--arg CONTROLLER_NAME
$CONTROLLER_NAME '.controllers[$CONTROLLER_NAME]["ca-cert"]' --raw-output | base64 |
tr -d \\n
)
180 # Calculate the default route of this machine
181 local DEFAULT_IF
=`ip route list match 0.0.0.0 | awk '{print $5}'`
182 local vca_apiproxy
=`ip -o -4 a |grep ${DEFAULT_IF}|awk '{split($4,a,"/"); print a[1]}'`
184 # Generate a new overlay.yaml, overriding any existing one
185 cat << EOF > /tmp/vca-overlay.yaml
190 vca_password: $vca_password
193 vca_pubkey: $vca_pubkey
194 vca_cacert: $vca_cacert
195 vca_apiproxy: $vca_apiproxy
196 vca_cloud: $vca_cloud
197 vca_k8s_cloud: $K8S_CLOUD_NAME
201 vca_password: $vca_password
203 vca_cacert: $vca_cacert
205 mv /tmp
/vca-overlay.yaml ~
/.osm
/
206 OSM_VCA_HOST
=$vca_host
209 function generate_images_overlay
(){
210 cat << EOF > /tmp/images-overlay.yaml
214 image: opensourcemano/lcm:$TAG
217 image: opensourcemano/mon:$TAG
220 image: opensourcemano/ro:$TAG
223 image: opensourcemano/nbi:$TAG
226 image: opensourcemano/pol:$TAG
229 image: opensourcemano/light-ui:$TAG
232 mv /tmp
/images-overlay.yaml
$IMAGES_OVERLAY_FILE
235 function install_osmclient
() {
236 sudo snap
install osmclient
237 sudo snap
alias osmclient.osm osm
241 function install_microstack
() {
242 sudo snap
install microstack
--classic --beta
243 sudo microstack.init
--auto
244 wget https
://cloud-images.ubuntu.com
/releases
/16.04/release
/ubuntu-16.04
-server-cloudimg-amd64-disk1.img
-P ~
/.osm
/
245 microstack.openstack image create \
247 --disk-format qcow2 \
248 --container-format bare \
249 --file ~
/.osm
/ubuntu-16.04
-server-cloudimg-amd64-disk1.img \
251 ssh-keygen
-t rsa
-N "" -f ~
/.ssh
/microstack
252 microstack.openstack keypair create
--public-key ~
/.ssh
/microstack.pub microstack
253 export OSM_HOSTNAME
=`juju status --format json | jq -rc '.applications."nbi-k8s".address'`
254 osm vim-create
--name microstack-site \
256 --password keystone \
257 --auth_url http
://10.20.20.1:5000/v3 \
259 --account_type openstack \
260 --config='{security_groups: default,
263 user_domain_name: default,
264 region_name: microstack,
266 availability_zone: nova,
270 DEFAULT_IF
=`ip route list match 0.0.0.0 | awk '{print $5}'`
271 DEFAULT_IP
=`ip -o -4 a |grep ${DEFAULT_IF}|awk '{split($4,a,"/"); print a[1]}'`
280 if [ -v MICROSTACK
]; then