/
parse-env.sh
189 lines (166 loc) · 8.3 KB
/
parse-env.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
#!/bin/bash
# Internal script for parsing common.env. Run by other executable scripts
env_dir="${BASH_SOURCE%/*}"
if [[ ! -d "$env_dir" ]]; then env_dir="$PWD"; fi
env_file="$env_dir/common.env"
if [ -f $env_file ]; then
source $env_file
export ENV_FILE="$env_file"
fi
default_interface=`ip route show | grep "default via" | awk '{print $5}'`
default_gateway=`ip route show dev $default_interface | grep default | awk '{print $3}'`
linux_id=$(awk -F"=" '/^ID=/{print $2}' /etc/os-release | tr -d '"')
if [[ "$linux_id" == 'centos' ]] ; then
# ver id is taken from available versions from docker.io
linux_ver_id=`cat /etc/redhat-release | awk '{print($4)}'`
else
# for ubuntu ver id matchs 14.04, 16.04, etc from host system
linux_ver_id=$(awk -F"=" '/^VERSION_ID=/{print $2}' /etc/os-release | tr -d '"')
fi
# target platform info
export LINUX_DISTR=${LINUX_DISTR:-centos}
declare -A _target_linux_ver_ids
_target_linux_ver_ids=([centos]='7.4.1708')
export LINUX_DISTR_VER=${LINUX_DISTR_VER:-${_target_linux_ver_ids[$LINUX_DISTR]}}
# build platform info
export LINUX_ID=$linux_id
export LINUX_VER_ID=$linux_ver_id
export HOST_IP=${HOST_IP:-'auto'}
if [[ $HOST_IP == 'auto' ]] ; then
export HOST_IP=`ip address show dev $default_interface | head -3 | tail -1 | tr "/" " " | awk '{print $2}'`
fi
export CONTRAIL_VERSION=${CONTRAIL_VERSION:-'4.1.0.0-8'}
export OPENSTACK_VERSION=${OPENSTACK_VERSION:-'queens'}
default_tag="${OPENSTACK_VERSION}-${CONTRAIL_VERSION}"
export CONTRAIL_CONTAINER_TAG=${CONTRAIL_CONTAINER_TAG:-$default_tag}
declare -A _os_subversions
_os_subversions=([newton]=5 [ocata]=3 [pike]=1 [queens]=0)
_os_subversion="${_os_subversions[$OPENSTACK_VERSION]}"
export OPENSTACK_SUBVERSION=${OPENSTACK_SUBVERSION:-"$_os_subversion"}
default_packages_url="https://s3-us-west-2.amazonaws.com/contrailrhel7/contrail-install-packages-${CONTRAIL_VERSION}~${OPENSTACK_VERSION}.el7.noarch.rpm"
export CONTRAIL_INSTALL_PACKAGES_URL=${CONTRAIL_INSTALL_PACKAGES_URL:-$default_packages_url}
export CONTRAIL_REGISTRY=${CONTRAIL_REGISTRY:-'auto'}
export CONTRAIL_REPOSITORY=${CONTRAIL_REPOSITORY:-'auto'}
default_registry_ip=${_CONTRAIL_REGISTRY_IP:-${HOST_IP}}
if [[ $CONTRAIL_REGISTRY == 'auto' ]] ; then
export CONTRAIL_REGISTRY="${default_registry_ip}:5000"
fi
if [[ $CONTRAIL_REPOSITORY == 'auto' ]] ; then
export CONTRAIL_REPOSITORY="http://${default_registry_ip}/${CONTRAIL_VERSION}-${OPENSTACK_VERSION}"
fi
export GENERAL_EXTRA_RPMS=${GENERAL_EXTRA_RPMS="https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm"}
export BASE_EXTRA_RPMS=${BASE_EXTRA_RPMS="https://repos.fedorapeople.org/repos/openstack/openstack-$OPENSTACK_VERSION/rdo-release-$OPENSTACK_VERSION-$OPENSTACK_SUBVERSION.noarch.rpm"}
export DOCKER_REPO=${DOCKER_REPO='https://download.docker.com/linux/centos/docker-ce.repo'}
export YUM_ENABLE_REPOS=${YUM_ENABLE_REPOS:-}
if [[ "$LINUX_DISTR" == 'rhel'* ]] ; then
export PYTHON_PIP_RPM='python27-python-pip'
export PYTHON_PIP_VENV='/opt/rh/python27/enable'
export RHEL_FORCE_REGISTRATION=${RHEL_FORCE_REGISTRATION:-'false'}
export RHEL_USER_NAME=${RHEL_USER_NAME:-}
export RHEL_USER_PASSWORD=${RHEL_USER_PASSWORD:-}
export RHEL_POOL_ID=${RHEL_POOL_ID:-}
export RHEL_ORG=${RHEL_ORG:-}
export RHEL_ACTIVATION_KEY=${RHEL_ACTIVATION_KEY:-}
export RHEL_HOST_REPOS=${RHEL_HOST_REPOS:-}
rhel_os_repo_num=''
case "$OPENSTACK_VERSION" in
newton)
rhel_os_repo_num='10'
;;
ocata)
rhel_os_repo_num='11'
;;
pike)
rhel_os_repo_num='12'
;;
queens)
rhel_os_repo_num='13'
;;
*)
echo "ERROR: unsupported OS $OPENSTACK_VERSION for RHEL"
exit 1
esac
# generic repos
RHEL_HOST_REPOS+="rhel-7-server-rpms,rhel-7-server-extras-rpms,rhel-7-server-optional-rpms"
# python-pip repo (package python27-python-pip),
# it is needed in contrail-openstack-ironic-notification-manager
RHEL_HOST_REPOS+=",rhel-server-rhscl-7-rpms"
# ansible repo
RHEL_HOST_REPOS+=",rhel-7-server-ansible-2.4-rpms"
# openstack repos
RHEL_HOST_REPOS+=",rhel-7-server-openstack-${rhel_os_repo_num}-rpms"
RHEL_HOST_REPOS+=",rhel-7-server-openstack-${rhel_os_repo_num}-devtools-rpms"
# add repos to be explicitly enabled inside containers
# byt default only basic repos are enabled inside.
YUM_ENABLE_REPOS+=",${RHEL_HOST_REPOS}"
YUM_ENABLE_REPOS="${YUM_ENABLE_REPOS##,}"
fi
export CONTROLLER_NODES=${CONTROLLER_NODES:-$HOST_IP}
export AGENT_NODES=${AGENT_NODES:-$CONTROLLER_NODES}
export ANALYTICS_NODES=${ANALYTICS_NODES:-$CONTROLLER_NODES}
export ANALYTICSDB_NODES=${ANALYTICSDB_NODES:-$CONTROLLER_NODES}
export CONFIG_NODES=${CONFIG_NODES:-$CONTROLLER_NODES}
export CONFIGDB_NODES=${CONFIGDB_NODES:-$CONFIG_NODES}
export CONTROL_NODES=${CONTROL_NODES:-$CONFIG_NODES}
export KAFKA_NODES=${KAFKA_NODES:-$ANALYTICSDB_NODES}
export LOG_LEVEL=${LOG_LEVEL:-'SYS_NOTICE'}
export METADATA_PROXY_SECRET=${METADATA_PROXY_SECRET:-'contrail'}
export PHYSICAL_INTERFACE=${PHYSICAL_INTERFACE:-$default_interface}
export VROUTER_GATEWAY=${VROUTER_GATEWAY:-$default_gateway}
export RABBITMQ_NODES=${RABBITMQ_NODES:-$CONFIG_NODES}
export RABBITMQ_NODE_PORT=${RABBITMQ_NODE_PORT:-'5672'}
export WEBUI_NODES=${WEBUI_NODES:-$CONFIG_NODES}
export ZOOKEEPER_ANALYTICS_PORT=${ZOOKEEPER_ANALYTICS_PORT:-'2182'}
export ZOOKEEPER_NODES=${ZOOKEEPER_NODES:-$CONFIG_NODES}
export ZOOKEEPER_PORT=${ZOOKEEPER_PORT:-'2181'}
export ZOOKEEPER_PORTS=${ZOOKEEPER_PORTS:-'2888:3888'}
export ANALYTICS_API_VIP=${ANALYTICS_API_VIP}
export CONFIG_API_VIP=${CONFIG_API_VIP}
export WEBUI_VIP=${WEBUI_VIP}
export AAA_MODE=${AAA_MODE:-'no-auth'}
export AUTH_MODE=${AUTH_MODE:-'noauth'}
export CLOUD_ORCHESTRATOR=${CLOUD_ORCHESTRATOR:-'none'}
export KUBERNETES_API_SERVER=${KUBERNETES_API_SERVER:-$HOST_IP}
export DPDK_UIO_DRIVER=${DPDK_UIO_DRIVER:-'uio_pci_generic'}
export CPU_CORE_MASK=${CPU_CORE_MASK:-'0x01'}
export HUGE_PAGES=${HUGE_PAGES:-1024}
#TLS options
export SSL_ENABLE=${SSL_ENABLE:-False}
export SSL_INSECURE=${SSL_INSECURE:-True}
export SERVER_CERTFILE=${SERVER_CERTFILE:-'/etc/contrail/ssl/certs/server.pem'}
export SERVER_KEYFILE=${SERVER_KEYFILE:-'/etc/contrail/ssl/private/server-privkey.pem'}
export SERVER_CA_CERTFILE=${SERVER_CA_CERTFILE:-'/etc/contrail/ssl/certs/ca-cert.pem'}
export SERVER_CA_KEYFILE=${SERVER_CA_KEYFILE:-'/etc/contrail/ssl/private/ca-key.pem'}
export XMPP_SSL_ENABLE=${XMPP_SSL_ENABLE:-${SSL_ENABLE}}
export XMPP_SERVER_CERTFILE=${XMPP_SERVER_CERTFILE:-${SERVER_CERTFILE}}
export XMPP_SERVER_KEYFILE=${XMPP_SERVER_KEYFILE:-${SERVER_KEYFILE}}
export XMPP_SERVER_CA_CERTFILE=${XMPP_SERVER_CA_CERTFILE:-${SERVER_CA_CERTFILE}}
export INTROSPECT_SSL_ENABLE=${INTROSPECT_SSL_ENABLE:-${SSL_ENABLE}}
export INTROSPECT_SSL_INSECURE=${INTROSPECT_SSL_INSECURE:-${SSL_INSECURE}}
export INTROSPECT_CERTFILE=${INTROSPECT_CERTFILE:-${SERVER_CERTFILE}}
export INTROSPECT_KEYFILE=${INTROSPECT_KEYFILE:-${SERVER_KEYFILE}}
export INTROSPECT_CA_CERTFILE=${INTROSPECT_CA_CERTFILE:-${SERVER_CA_CERTFILE}}
export SANDESH_SSL_ENABLE=${SANDESH_SSL_ENABLE:-${SSL_ENABLE}}
export SANDESH_CERTFILE=${SANDESH_CERTFILE:-${SERVER_CERTFILE}}
export SANDESH_KEYFILE=${SANDESH_KEYFILE:-${SERVER_KEYFILE}}
export SANDESH_CA_CERTFILE=${SANDESH_CA_CERTFILE:-${SERVER_CA_CERTFILE}}
export KEYSTONE_AUTH_PROTO=${KEYSTONE_AUTH_PROTO:-'http'}
export KEYSTONE_AUTH_INSECURE=${KEYSTONE_AUTH_INSECURE:-${SSL_INSECURE}}
export KEYSTONE_AUTH_CERTFILE=${KEYSTONE_AUTH_CERTFILE:-}
export KEYSTONE_AUTH_KEYFILE=${KEYSTONE_AUTH_KEYFILE:-}
export KEYSTONE_AUTH_CA_CERTFILE=${KEYSTONE_AUTH_CA_CERTFILE:-}
export RABBITMQ_USE_SSL=${RABBITMQ_USE_SSL:-False}
export RABBITMQ_SSL_VER=${RABBITMQ_SSL_VER:-''}
export RABBITMQ_CLIENT_SSL_CERTFILE=${RABBITMQ_CLIENT_SSL_CERTFILE:-${SERVER_CERTFILE}}
export RABBITMQ_CLIENT_SSL_KEYFILE=${RABBITMQ_CLIENT_SSL_KEYFILE:-${SERVER_KEYFILE}}
export RABBITMQ_CLIENT_SSL_CACERTFILE=${RABBITMQ_CLIENT_SSL_CACERTFILE:-${SERVER_CA_CERTFILE}}
# SSL opts for RabbitMQ server
export RABBITMQ_SSL_CERTFILE=${RABBITMQ_SSL_CERTFILE:-''}
export RABBITMQ_SSL_KEYFILE=${RABBITMQ_SSL_KEYFILE:-''}
export RABBITMQ_SSL_CACERTFILE=${RABBITMQ_SSL_CACERTFILE:-''}
# Metadata service SSL opts
export METADATA_SSL_ENABLE=${METADATA_SSL_ENABLE:-false}
export METADATA_SSL_CERTFILE=${METADATA_SSL_CERTFILE:-}
export METADATA_SSL_KEYFILE=${METADATA_SSL_KEYFILE:-}
export METADATA_SSL_CA_CERTFILE=${METADATA_SSL_CA_CERTFILE:-}
export METADATA_SSL_CERT_TYPE=${METADATA_SSL_CERT_TYPE:-}