installers/charmed_install.sh

   1 #! /bin/bash
   2 #
   3 #   Licensed under the Apache License, Version 2.0 (the "License");
   4 #   you may not use this file except in compliance with the License.
   5 #   You may obtain a copy of the License at
   6 #
   7 #       http://www.apache.org/licenses/LICENSE-2.0
   8 #
   9 #   Unless required by applicable law or agreed to in writing, software
  10 #   distributed under the License is distributed on an "AS IS" BASIS,
  11 #   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12 #   See the License for the specific language governing permissions and
  13 #   limitations under the License.
  14 #
  15
  16 # set -eux
  17
  18 LXD_VERSION=5.0
  19 JUJU_VERSION=2.9
  20 JUJU_AGENT_VERSION=2.9.43
  21 K8S_CLOUD_NAME="k8s-cloud"
  22 KUBECTL="microk8s.kubectl"
  23 MICROK8S_VERSION=1.26
  24 OSMCLIENT_VERSION=latest
  25 IMAGES_OVERLAY_FILE=~/.osm/images-overlay.yaml
  26 PASSWORD_OVERLAY_FILE=~/.osm/password-overlay.yaml
  27 PATH=/snap/bin:${PATH}
  28 OSM_DEVOPS="$( cd "$( dirname "${BASH_SOURCE[0]}" )"/.. &> /dev/null && pwd )"
  29 INSTALL_PLA=""
  30 PLA_OVERLAY_FILE=~/.osm/pla-overlay.yaml
  31
  32 if [ -f ${OSM_DEVOPS}/common/all_funcs ] ; then
  33     source ${OSM_DEVOPS}/common/all_funcs
  34 else
  35     function track(){
  36         true
  37     }
  38     function FATAL_TRACK(){
  39         exit 1
  40     }
  41 fi
  42
  43 MODEL_NAME=osm
  44
  45 OSM_BUNDLE=ch:osm
  46 OSM_HA_BUNDLE=ch:osm-ha
  47 CHARMHUB_CHANNEL=latest/beta
  48 unset TAG
  49
  50 function check_arguments(){
  51     while [ $# -gt 0 ] ; do
  52         case $1 in
  53             --bundle) BUNDLE="$2" ;;
  54             --overlay) OVERLAY="$2" ;;
  55             --k8s) KUBECFG="$2" ;;
  56             --vca) CONTROLLER="$2" ;;
  57             --small-profile) INSTALL_NOLXD=y;;
  58             --lxd) LXD_CLOUD="$2" ;;
  59             --lxd-cred) LXD_CREDENTIALS="$2" ;;
  60             --microstack) MICROSTACK=y ;;
  61             --ha) BUNDLE=$OSM_HA_BUNDLE ;;
  62             --tag) TAG="$2" ;;
  63             --registry) REGISTRY_INFO="$2" ;;
  64             --only-vca) ONLY_VCA=y ;;
  65             --pla) INSTALL_PLA=y ;;
  66         esac
  67         shift
  68     done
  69
  70     # echo $BUNDLE $KUBECONFIG $LXDENDPOINT
  71 }
  72
  73 function install_snaps(){
  74     if [ ! -v KUBECFG ]; then
  75         KUBEGRP="microk8s"
  76         sudo snap install microk8s --classic --channel=${MICROK8S_VERSION}/stable ||
  77           FATAL_TRACK k8scluster "snap install microk8s ${MICROK8S_VERSION}/stable failed"
  78         sudo usermod -a -G microk8s `whoami`
  79         sudo cat /var/snap/microk8s/current/args/kube-apiserver | grep advertise-address || (
  80                 echo "--advertise-address $DEFAULT_IP" | sudo tee -a /var/snap/microk8s/current/args/kube-apiserver
  81                 sg ${KUBEGRP} -c microk8s.stop
  82                 sg ${KUBEGRP} -c microk8s.start
  83             )
  84         mkdir -p ~/.kube
  85         sudo chown -f -R `whoami` ~/.kube
  86         sg ${KUBEGRP} -c "microk8s status --wait-ready"
  87         KUBECONFIG=~/.osm/microk8s-config.yaml
  88         sg ${KUBEGRP} -c "microk8s config" | tee ${KUBECONFIG}
  89         track k8scluster k8scluster_ok
  90     else
  91         KUBECTL="kubectl"
  92         sudo snap install kubectl --classic
  93         export KUBECONFIG=${KUBECFG}
  94         KUBEGRP=$(id -g -n)
  95     fi
  96     sudo snap install juju --classic --channel=$JUJU_VERSION/stable ||
  97     FATAL_TRACK juju "snap install juju ${JUJU_VERSION}/stable failed"
  98     track juju juju_ok
  99 }
 100
 101 function bootstrap_k8s_lxd(){
 102     [ -v CONTROLLER ] && ADD_K8S_OPTS="--controller ${CONTROLLER}" && CONTROLLER_NAME=$CONTROLLER
 103     [ ! -v CONTROLLER ] && ADD_K8S_OPTS="--client" && BOOTSTRAP_NEEDED="yes" && CONTROLLER_NAME="osm-vca"
 104
 105     if [ -v BOOTSTRAP_NEEDED ]; then
 106         CONTROLLER_PRESENT=$(juju controllers 2>/dev/null| grep ${CONTROLLER_NAME} | wc -l)
 107         if [ $CONTROLLER_PRESENT -ge 1 ]; then
 108             cat << EOF
 109 Threre is already a VCA present with the installer reserved name of "${CONTROLLER_NAME}".
 110 You may either explicitly use this VCA with the "--vca ${CONTROLLER_NAME}" option, or remove it
 111 using this command:
 112
 113    juju destroy-controller --release-storage --destroy-all-models -y ${CONTROLLER_NAME}
 114
 115 Please retry the installation once this conflict has been resolved.
 116 EOF
 117             FATAL_TRACK bootstrap_k8s "VCA already present"
 118         fi
 119     else
 120         CONTROLLER_PRESENT=$(juju controllers 2>/dev/null| grep ${CONTROLLER_NAME} | wc -l)
 121         if [ $CONTROLLER_PRESENT -le 0 ]; then
 122             cat << EOF
 123 Threre is no VCA present with the name "${CONTROLLER_NAME}".  Please specify a VCA
 124 that exists, or remove the --vca ${CONTROLLER_NAME} option.
 125
 126 Please retry the installation with one of the solutions applied.
 127 EOF
 128             FATAL_TRACK bootstrap_k8s "Requested VCA not present"
 129         fi
 130     fi
 131
 132     if [ -v KUBECFG ]; then
 133         cat $KUBECFG | juju add-k8s $K8S_CLOUD_NAME $ADD_K8S_OPTS
 134         [ -v BOOTSTRAP_NEEDED ] && juju bootstrap $K8S_CLOUD_NAME $CONTROLLER_NAME \
 135             --config controller-service-type=loadbalancer \
 136             --agent-version=$JUJU_AGENT_VERSION
 137     else
 138         sg ${KUBEGRP} -c "echo ${DEFAULT_IP}-${DEFAULT_IP} | microk8s.enable metallb"
 139         sg ${KUBEGRP} -c "microk8s.enable ingress"
 140         sg ${KUBEGRP} -c "microk8s.enable hostpath-storage dns"
 141         TIME_TO_WAIT=30
 142         start_time="$(date -u +%s)"
 143         while true
 144         do
 145             now="$(date -u +%s)"
 146             if [[ $(( now - start_time )) -gt $TIME_TO_WAIT ]];then
 147                 echo "Microk8s storage failed to enable"
 148                 sg ${KUBEGRP} -c "microk8s.status"
 149                 FATAL_TRACK bootstrap_k8s "Microk8s storage failed to enable"
 150             fi
 151             storage_status=`sg ${KUBEGRP} -c "microk8s.status -a storage"`
 152             if [[ $storage_status == "enabled" ]]; then
 153                 break
 154             fi
 155             sleep 1
 156         done
 157
 158         [ ! -v BOOTSTRAP_NEEDED ] && sg ${KUBEGRP} -c "microk8s.config" | juju add-k8s $K8S_CLOUD_NAME $ADD_K8S_OPTS
 159         [ -v BOOTSTRAP_NEEDED ] && sg ${KUBEGRP} -c \
 160             "juju bootstrap microk8s $CONTROLLER_NAME --config controller-service-type=loadbalancer --agent-version=$JUJU_AGENT_VERSION" \
 161             && K8S_CLOUD_NAME=microk8s
 162     fi
 163     track bootstrap_k8s bootstrap_k8s_ok
 164
 165     if [ ! -v INSTALL_NOLXD ]; then
 166           if [ -v LXD_CLOUD ]; then
 167               if [ ! -v LXD_CREDENTIALS ]; then
 168                   echo "The installer needs the LXD server certificate if the LXD is external"
 169                   FATAL_TRACK bootstrap_lxd "No LXD certificate supplied"
 170               fi
 171           else
 172               LXDENDPOINT=$DEFAULT_IP
 173               LXD_CLOUD=~/.osm/lxd-cloud.yaml
 174               LXD_CREDENTIALS=~/.osm/lxd-credentials.yaml
 175               # Apply sysctl production values for optimal performance
 176               sudo cp /usr/share/osm-devops/installers/60-lxd-production.conf /etc/sysctl.d/60-lxd-production.conf
 177               sudo sysctl --system
 178               # Install LXD snap
 179               sudo apt-get remove --purge -y liblxc1 lxc-common lxcfs lxd lxd-client
 180               snap info lxd | grep installed > /dev/null
 181               if [ $? -eq 0 ]; then
 182                 sudo snap refresh lxd --channel $LXD_VERSION/stable
 183               else
 184                 sudo snap install lxd --channel $LXD_VERSION/stable
 185               fi
 186               # Configure LXD
 187               sudo usermod -a -G lxd `whoami`
 188               cat /usr/share/osm-devops/installers/lxd-preseed.conf | sed 's/^config: {}/config:\n  core.https_address: '$LXDENDPOINT':8443/' | sg lxd -c "lxd init --preseed"
 189               sg lxd -c "lxd waitready"
 190
 191               cat << EOF > $LXD_CLOUD
 192 clouds:
 193   lxd-cloud:
 194     type: lxd
 195     auth-types: [certificate]
 196     endpoint: "https://$LXDENDPOINT:8443"
 197     config:
 198       ssl-hostname-verification: false
 199 EOF
 200               openssl req -nodes -new -x509 -keyout ~/.osm/client.key -out ~/.osm/client.crt -days 365 -subj "/C=FR/ST=Nice/L=Nice/O=ETSI/OU=OSM/CN=osm.etsi.org"
 201               cat << EOF > $LXD_CREDENTIALS
 202 credentials:
 203   lxd-cloud:
 204     lxd-cloud:
 205       auth-type: certificate
 206       server-cert: /var/snap/lxd/common/lxd/server.crt
 207       client-cert: ~/.osm/client.crt
 208       client-key: ~/.osm/client.key
 209 EOF
 210               lxc config trust add local: ~/.osm/client.crt
 211           fi
 212
 213           juju add-cloud -c $CONTROLLER_NAME lxd-cloud $LXD_CLOUD --force
 214           juju add-credential -c $CONTROLLER_NAME lxd-cloud -f $LXD_CREDENTIALS
 215           sg lxd -c "lxd waitready"
 216           juju controller-config features=[k8s-operators]
 217           track bootstrap_lxd bootstrap_lxd_ok
 218     fi
 219 }
 220
 221 function deploy_charmed_osm(){
 222     if [ -v REGISTRY_INFO ] ; then
 223         registry_parts=(${REGISTRY_INFO//@/ })
 224         if [ ${#registry_parts[@]} -eq 1 ] ; then
 225             # No credentials supplied
 226             REGISTRY_USERNAME=""
 227             REGISTRY_PASSWORD=""
 228             REGISTRY_URL=${registry_parts[0]}
 229         else
 230             credentials=${registry_parts[0]}
 231             credential_parts=(${credentials//:/ })
 232             REGISTRY_USERNAME=${credential_parts[0]}
 233             REGISTRY_PASSWORD=${credential_parts[1]}
 234             REGISTRY_URL=${registry_parts[1]}
 235         fi
 236         # Ensure the URL ends with a /
 237         case $REGISTRY_URL in
 238             */) ;;
 239             *) REGISTRY_URL=${REGISTRY_URL}/
 240         esac
 241     fi
 242
 243     echo "Creating OSM model"
 244     if [ -v KUBECFG ]; then
 245         juju add-model $MODEL_NAME $K8S_CLOUD_NAME
 246     else
 247         sg ${KUBEGRP} -c "juju add-model $MODEL_NAME $K8S_CLOUD_NAME"
 248     fi
 249     echo "Deploying OSM with charms"
 250     images_overlay=""
 251     if [ -v REGISTRY_URL ]; then
 252        [ ! -v TAG ] && TAG='latest'
 253     fi
 254     [ -v TAG ] && generate_images_overlay && images_overlay="--overlay $IMAGES_OVERLAY_FILE"
 255
 256     if [ -v OVERLAY ]; then
 257         extra_overlay="--overlay $OVERLAY"
 258     fi
 259     echo "Creating Password Overlay"
 260
 261     generate_password_overlay && secret_overlay="--overlay $PASSWORD_OVERLAY_FILE"
 262
 263     [ -n "$INSTALL_PLA" ] && create_pla_overlay && pla_overlay="--overlay $PLA_OVERLAY_FILE"
 264
 265     if [ -v BUNDLE ]; then
 266         juju deploy --trust --channel $CHARMHUB_CHANNEL -m $MODEL_NAME $BUNDLE $images_overlay $extra_overlay $secret_overlay $pla_overlay
 267     else
 268         juju deploy --trust --channel $CHARMHUB_CHANNEL -m $MODEL_NAME $OSM_BUNDLE $images_overlay $extra_overlay $secret_overlay $pla_overlay
 269     fi
 270
 271     if [ ! -v KUBECFG ]; then
 272         API_SERVER=${DEFAULT_IP}
 273     else
 274         API_SERVER=$(kubectl config view --minify | grep server | cut -f 2- -d ":" | tr -d " ")
 275         proto="$(echo $API_SERVER | grep :// | sed -e's,^\(.*://\).*,\1,g')"
 276         url="$(echo ${API_SERVER/$proto/})"
 277         user="$(echo $url | grep @ | cut -d@ -f1)"
 278         hostport="$(echo ${url/$user@/} | cut -d/ -f1)"
 279         API_SERVER="$(echo $hostport | sed -e 's,:.*,,g')"
 280     fi
 281
 282     configure_vca_integrator
 283     expose_osm_services
 284     echo "Waiting for deployment to finish..."
 285     check_osm_deployed_before_config
 286     config_grafana_and_prometheus
 287     check_osm_deployed_after_config
 288     echo "OSM with charms deployed"
 289 }
 290
 291 function configure_vca_integrator(){
 292     if [ ! -v INSTALL_NOLXD ]; then
 293         juju config vca \
 294           k8s-cloud=microk8s \
 295           lxd-cloud=lxd-cloud:lxd-cloud \
 296           controllers="`cat ~/.local/share/juju/controllers.yaml`" \
 297           accounts="`cat ~/.local/share/juju/accounts.yaml`" \
 298           public-key="`cat ~/.local/share/juju/ssh/juju_id_rsa.pub`"
 299     else
 300         juju config vca \
 301           k8s-cloud=microk8s \
 302           controllers="`cat ~/.local/share/juju/controllers.yaml`" \
 303           accounts="`cat ~/.local/share/juju/accounts.yaml`" \
 304           public-key="`cat ~/.local/share/juju/ssh/juju_id_rsa.pub`"
 305     fi
 306 }
 307
 308 function expose_osm_services(){
 309     juju config -m $MODEL_NAME nbi external-hostname=nbi.${API_SERVER}.nip.io
 310     juju config -m $MODEL_NAME ng-ui external-hostname=ui.${API_SERVER}.nip.io
 311     juju config -m $MODEL_NAME grafana web_external_url=https://grafana.${API_SERVER}.nip.io
 312 }
 313
 314 function config_grafana_and_prometheus() {
 315     echo "Setting Grafana and Prometheus configuration"
 316     grafana_leader=`juju status -m $MODEL_NAME grafana | grep "*" | cut -d "*" -f 1`
 317     grafana_admin_password=`juju run-action -m $MODEL_NAME $grafana_leader get-admin-password --wait | grep "admin-password" | cut -d ":" -f 2`
 318     juju config -m $MODEL_NAME mon grafana-password="$grafana_admin_password"
 319     juju config -m $MODEL_NAME mon grafana-user=admin
 320     juju config -m $MODEL_NAME mon grafana-url=http://grafana:3000
 321     prometheus_url="http://prometheus:9090"
 322     juju config -m $MODEL_NAME mon prometheus-url=$prometheus_url
 323     juju config -m $MODEL_NAME nbi prometheus-url=$prometheus_url
 324     mon_leader=`juju status -m $MODEL_NAME mon | grep "*" | cut -d "*" -f 1`
 325     juju run-action --m $MODEL_NAME $mon_leader create-datasource name=osm_prometheus url=$prometheus_url --wait
 326 }
 327
 328 function check_osm_deployed_before_config() {
 329     TIME_TO_WAIT=600
 330     start_time="$(date -u +%s)"
 331     total_active_services=13
 332     [ -n "$INSTALL_PLA" ] && total_active_services=$((total_active_services + 1))
 333     previous_count=0
 334     while true
 335     do
 336         juju_status=$(juju status --format json -m $MODEL_NAME)
 337         active_service_count=$(echo $juju_status | jq '.applications[]."application-status".current'| grep active | wc -l)
 338         echo "$active_service_count / $total_active_services services active"
 339         if [ $active_service_count -eq $total_active_services ]; then
 340             mon_is_blocked=$(echo $juju_status | jq '.applications["mon"].units[]."workload-status".current' | grep blocked | wc -l)
 341             nbi_is_blocked=$(echo $juju_status | jq '.applications["nbi"].units[]."workload-status".current' | grep blocked | wc -l)
 342             if [ $mon_is_blocked -a $nbi_is_blocked ]; then
 343                 echo "MON and NBI are blocked"
 344                 break
 345             fi
 346         fi
 347         if [ $active_service_count -ne $previous_count ]; then
 348             previous_count=$active_service_count
 349             start_time="$(date -u +%s)"
 350         fi
 351         now="$(date -u +%s)"
 352         if [[ $(( now - start_time )) -gt $TIME_TO_WAIT ]];then
 353             echo "Timed out waiting for OSM services to become ready"
 354             FATAL_TRACK deploy_osm "Timed out waiting for services to become ready"
 355         fi
 356         sleep 10
 357     done
 358 }
 359
 360 function check_osm_deployed_after_config() {
 361     TIME_TO_WAIT=600
 362     start_time="$(date -u +%s)"
 363     total_service_count=15
 364     [ -n "$INSTALL_PLA" ] && total_service_count=$((total_service_count + 1))
 365     previous_count=0
 366     while true
 367     do
 368         service_count=$(juju status --format json -m $MODEL_NAME | jq '.applications[]."application-status".current' | grep active | wc -l)
 369         echo "$service_count / $total_service_count services active"
 370         if [ $service_count -eq $total_service_count ]; then
 371             break
 372         fi
 373         if [ $service_count -ne $previous_count ]; then
 374             previous_count=$service_count
 375             start_time="$(date -u +%s)"
 376         fi
 377         now="$(date -u +%s)"
 378         if [[ $(( now - start_time )) -gt $TIME_TO_WAIT ]];then
 379             echo "Timed out waiting for OSM services to become ready"
 380             FATAL_TRACK deploy_osm "Timed out waiting for services to become ready"
 381         fi
 382         sleep 10
 383     done
 384 }
 385
 386 function generate_password_overlay() {
 387     # keystone
 388     keystone_db_password=`openssl rand -hex 16`
 389     keystone_admin_password=`openssl rand -hex 16`
 390     keystone_service_password=`openssl rand -hex 16`
 391     #  mariadb
 392     mariadb_password=`openssl rand -hex 16`
 393     mariadb_root_password=`openssl rand -hex 16`
 394     cat << EOF > /tmp/password-overlay.yaml
 395 applications:
 396   keystone:
 397     options:
 398       keystone-db-password: $keystone_db_password
 399       admin-password: $keystone_admin_password
 400       service-password: $keystone_service_password
 401   mariadb:
 402     options:
 403       password: $mariadb_password
 404       root_password: $mariadb_root_password
 405 EOF
 406     mv /tmp/password-overlay.yaml $PASSWORD_OVERLAY_FILE
 407 }
 408
 409 function create_pla_overlay(){
 410     echo "Creating PLA Overlay"
 411     [ $BUNDLE == $OSM_HA_BUNDLE ] && scale=3 || scale=1
 412     cat << EOF > /tmp/pla-overlay.yaml
 413 applications:
 414   pla:
 415     charm: osm-pla
 416     channel: latest/stable
 417     scale: $scale
 418     series: kubernetes
 419     options:
 420       log_level: DEBUG
 421     resources:
 422       image: opensourcemano/pla:testing-daily
 423 relations:
 424   - - pla:kafka
 425     - kafka:kafka
 426   - - pla:mongodb
 427     - mongodb:database
 428 EOF
 429      mv /tmp/pla-overlay.yaml $PLA_OVERLAY_FILE
 430 }
 431
 432 function generate_images_overlay(){
 433     echo "applications:" > /tmp/images-overlay.yaml
 434
 435     charms_with_resources="nbi lcm mon pol ng-ui ro"
 436     [ -n "$INSTALL_PLA" ] && charms_with_resources+=" pla"
 437     for charm in $charms_with_resources; do
 438         cat << EOF > /tmp/${charm}_registry.yaml
 439 registrypath: ${REGISTRY_URL}opensourcemano/${charm}:$TAG
 440 EOF
 441         if [ ! -z "$REGISTRY_USERNAME" ] ; then
 442             echo username: $REGISTRY_USERNAME >> /tmp/${charm}_registry.yaml
 443             echo password: $REGISTRY_PASSWORD >> /tmp/${charm}_registry.yaml
 444         fi
 445
 446         cat << EOF >> /tmp/images-overlay.yaml
 447   ${charm}:
 448     resources:
 449       ${charm}-image: /tmp/${charm}_registry.yaml
 450
 451 EOF
 452     done
 453     ch_charms_with_resources="keystone"
 454     for charm in $ch_charms_with_resources; do
 455         cat << EOF > /tmp/${charm}_registry.yaml
 456 registrypath: ${REGISTRY_URL}opensourcemano/${charm}:$TAG
 457 EOF
 458         if [ ! -z "$REGISTRY_USERNAME" ] ; then
 459             echo username: $REGISTRY_USERNAME >> /tmp/${charm}_registry.yaml
 460             echo password: $REGISTRY_PASSWORD >> /tmp/${charm}_registry.yaml
 461         fi
 462
 463         cat << EOF >> /tmp/images-overlay.yaml
 464   ${charm}:
 465     resources:
 466       ${charm}-image: /tmp/${charm}_registry.yaml
 467
 468 EOF
 469     done
 470
 471     mv /tmp/images-overlay.yaml $IMAGES_OVERLAY_FILE
 472 }
 473
 474 function refresh_osmclient_snap() {
 475     osmclient_snap_install_refresh refresh
 476 }
 477
 478 function install_osm_client_snap() {
 479     osmclient_snap_install_refresh install
 480 }
 481
 482 function osmclient_snap_install_refresh() {
 483     channel_preference="stable candidate beta edge"
 484     for channel in $channel_preference; do
 485         echo "Trying to install osmclient from channel $OSMCLIENT_VERSION/$channel"
 486         sudo snap $1 osmclient --channel $OSMCLIENT_VERSION/$channel 2> /dev/null && echo osmclient snap installed && break
 487     done
 488 }
 489 function install_osmclient() {
 490     snap info osmclient | grep -E ^installed: && refresh_osmclient_snap || install_osm_client_snap
 491 }
 492
 493 function add_local_k8scluster() {
 494     osm --all-projects vim-create \
 495       --name _system-osm-vim \
 496       --account_type dummy \
 497       --auth_url http://dummy \
 498       --user osm --password osm --tenant osm \
 499       --description "dummy" \
 500       --config '{management_network_name: mgmt}'
 501     tmpfile=$(mktemp --tmpdir=${HOME})
 502     cp ${KUBECONFIG} ${tmpfile}
 503     osm --all-projects k8scluster-add \
 504       --creds ${tmpfile} \
 505       --vim _system-osm-vim \
 506       --k8s-nets '{"net1": null}' \
 507       --version '1.19' \
 508       --description "OSM Internal Cluster" \
 509       _system-osm-k8s
 510     rm -f ${tmpfile}
 511 }
 512
 513 function install_microstack() {
 514     sudo snap install microstack --beta --devmode
 515
 516     CHECK=$(microstack.openstack server list)
 517     if [ $? -ne 0 ] ; then
 518         if [[ $CHECK == *"not initialized"* ]]; then
 519             echo "Setting MicroStack dashboard to listen to port 8080"
 520             sudo snap set microstack config.network.ports.dashboard=8080
 521             echo "Initializing MicroStack.  This can take several minutes"
 522             sudo microstack.init --auto --control
 523         fi
 524     fi
 525
 526     sudo snap alias microstack.openstack openstack
 527
 528     echo "Updating default security group in MicroStack to allow all access"
 529
 530     for i in $(microstack.openstack security group list | awk '/default/{ print $2 }'); do
 531         for PROTO in icmp tcp udp ; do
 532             echo "  $PROTO ingress"
 533             CHECK=$(microstack.openstack security group rule create $i --protocol $PROTO --remote-ip 0.0.0.0/0 2>&1)
 534             if [ $? -ne 0 ] ; then
 535                 if [[ $CHECK != *"409"* ]]; then
 536                     echo "Error creating ingress rule for $PROTO"
 537                     echo $CHECK
 538                 fi
 539             fi
 540         done
 541     done
 542
 543     microstack.openstack network show osm-ext &>/dev/null
 544     if [ $? -ne 0 ]; then
 545        echo "Creating osm-ext network with router to bridge to MicroStack external network"
 546         microstack.openstack network create --enable --no-share osm-ext
 547         microstack.openstack subnet create osm-ext-subnet --network osm-ext --dns-nameserver 8.8.8.8 \
 548               --subnet-range 172.30.0.0/24
 549         microstack.openstack router create external-router
 550         microstack.openstack router add subnet external-router osm-ext-subnet
 551         microstack.openstack router set --external-gateway external external-router
 552     fi
 553
 554     microstack.openstack image list | grep ubuntu20.04 &> /dev/null
 555     if [ $? -ne 0 ] ; then
 556         echo "Fetching Ubuntu 20.04 image and upLoading to MicroStack"
 557         wget -q -O- https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img \
 558             | microstack.openstack image create --public --container-format=bare \
 559              --disk-format=qcow2 ubuntu20.04 | grep status
 560     fi
 561
 562     if [ ! -f ~/.ssh/microstack ]; then
 563         ssh-keygen -t rsa -N "" -f ~/.ssh/microstack
 564         microstack.openstack keypair create --public-key ~/.ssh/microstack.pub microstack
 565     fi
 566
 567     echo "Creating VIM microstack-site in OSM"
 568     . /var/snap/microstack/common/etc/microstack.rc
 569
 570     osm vim-create \
 571         --name microstack-site \
 572         --user "$OS_USERNAME" \
 573         --password "$OS_PASSWORD" \
 574         --auth_url "$OS_AUTH_URL" \
 575         --tenant "$OS_USERNAME" \
 576         --account_type openstack \
 577         --config='{use_floating_ip: True,
 578                    insecure: True,
 579                    keypair: microstack,
 580                    management_network_name: osm-ext}'
 581 }
 582
 583 DEFAULT_IF=`ip route list match 0.0.0.0 | awk '{print $5; exit}'`
 584 DEFAULT_IP=`ip -o -4 a |grep ${DEFAULT_IF}|awk '{split($4,a,"/"); print a[1]; exit}'`
 585
 586 check_arguments $@
 587 mkdir -p ~/.osm
 588 install_snaps
 589 bootstrap_k8s_lxd
 590 if [ -v ONLY_VCA ]; then
 591     HOME=/home/$USER
 592     k8scloud=microk8s
 593     lxdcloud=lxd-cloud:lxd-cloud
 594     controllers="`cat $HOME/.local/share/juju/controllers.yaml`"
 595     accounts="`cat $HOME/.local/share/juju/accounts.yaml`"
 596     publickey="`cat $HOME/.local/share/juju/ssh/juju_id_rsa.pub`"
 597     echo "Use the following command to register the installed VCA to your OSM VCA integrator charm"
 598     echo -e "  juju config vca \\\n    k8s-cloud=$k8scloud \\\n    lxd-cloud=$lxdcloud \\\n    controllers=$controllers \\\n    accounts=$accounts \\\n    public-key=$publickey"
 599     track deploy_osm deploy_vca_only_ok
 600 else
 601     deploy_charmed_osm
 602     track deploy_osm deploy_osm_services_k8s_ok
 603     install_osmclient
 604     track osmclient osmclient_ok
 605     export OSM_HOSTNAME=$(juju config -m $MODEL_NAME nbi external-hostname):443
 606     export OSM_PASSWORD=$keystone_admin_password
 607     sleep 10
 608     add_local_k8scluster
 609     track final_ops add_local_k8scluster_ok
 610     if [ -v MICROSTACK ]; then
 611         install_microstack
 612         track final_ops install_microstack_ok
 613     fi
 614
 615     echo "Your installation is now complete, follow these steps for configuring the osmclient:"
 616     echo
 617     echo "1. Create the OSM_HOSTNAME environment variable with the NBI IP"
 618     echo
 619     echo "export OSM_HOSTNAME=$OSM_HOSTNAME"
 620     echo "export OSM_PASSWORD=$OSM_PASSWORD"
 621     echo
 622     echo "2. Add the previous commands to your .bashrc for other Shell sessions"
 623     echo
 624     echo "echo \"export OSM_HOSTNAME=$OSM_HOSTNAME\" >> ~/.bashrc"
 625     echo "echo \"export OSM_PASSWORD=$OSM_PASSWORD\" >> ~/.bashrc"
 626     echo
 627     echo "3. Login OSM GUI by using admin password: $OSM_PASSWORD"
 628     echo
 629     echo "DONE"
 630     track end
 631 fi
 632