crowbar/crowbar-openstack

# Copyright 2011 Dell, Inc.
# Copyright 2014 SUSE
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

include_recipe "neutron::common_agent"
ceilometer_agent_enabled = node.roles.include? "ceilometer-agent"

package node[:neutron][:platform][:dhcp_agent_pkg]
package node[:neutron][:platform][:metering_agent_pkg] if ceilometer_agent_enabled

if node[:neutron][:use_lbaas]
  if node[:neutron][:lbaasv2_driver] == "f5" &&
      !node[:neutron][:platform][:f5_agent_pkg].empty?
    package node[:neutron][:platform][:f5_agent_pkg]
  else
    package node[:neutron][:platform][:lbaasv2_agent_pkg]
  end
end

package node[:neutron][:platform][:l3_ha_pkg] if node[:neutron][:l3_ha][:use_l3_ha]

# Enable ip forwarding on network node for SLE11
ruby_block "edit /etc/sysconfig/sysctl for IP_FORWARD" do
  block do
    rc = Chef::Util::FileEdit.new("/etc/sysconfig/sysctl")
    rc.search_file_replace_line(/^IP_FORWARD=/, 'IP_FORWARD="yes"')
    rc.write_file
  end
  only_if { node[:platform] == "suse" && node[:platform_version].to_f < 12.0 }
end

# Enable ip forwarding on network node for new SUSE platforms
ruby_block "edit /etc/sysctl.conf for net.ipv4.ip_forward" do
  block do
    rc = Chef::Util::FileEdit.new("/etc/sysctl.conf")
    rc.search_file_replace_line(/^net.ipv4.ip_forward =/, "net.ipv4.ip_forward = 1")
    rc.write_file
  end
  only_if { node[:platform_family] == "suse" && (node[:platform] != "suse" || node[:platform_version].to_f >= 12.0) }
end

# The rest of this logic will be compatible for all the platforms.
# There is an overlap here, but will not cause inferference (the
# variable `net.ipv4.ip_forward` is set to 1 in two files,
# sysctl.conf and 50-neutron-enable-ip_forward.conf)

directory "create /etc/sysctl.d for enable-ip_forward" do
  path "/etc/sysctl.d"
  mode "755"
end

enable_ip_forward_file = "/etc/sysctl.d/50-neutron-enable-ip_forward.conf"
cookbook_file enable_ip_forward_file do
  source "sysctl-enable-ip_forward.conf"
  mode "0644"
end

bash "reload enable-ip_forward-sysctl" do
  code "/sbin/sysctl -e -q -p #{enable_ip_forward_file}"
  action :nothing
  subscribes :run, resources(cookbook_file: enable_ip_forward_file), :delayed
end

# Increase inotify max user instances
# one instance needed per dnsmasq instance / network
inotify_instances_file = "/etc/sysctl.d/60-neutron-inotify-max-user-instances.conf"
cookbook_file inotify_instances_file do
  source "sysctl-inotify-max-instances.conf"
  mode "0644"
end

bash "reload inotify-max-user-instances.conf" do
  code "/sbin/sysctl -e -q -p #{inotify_instances_file}"
  action :nothing
  subscribes :run, resources(cookbook_file: inotify_instances_file), :delayed
end

# Kill all the libvirt default networks.
execute "Destroy the libvirt default network" do
  command "virsh net-destroy default"
  only_if "virsh net-list |grep default"
end

link "/etc/libvirt/qemu/networks/autostart/default.xml" do
  action :delete
end

case node[:neutron][:networking_plugin]
when "ml2"
  ml2_mech_drivers = node[:neutron][:ml2_mechanism_drivers]
  case
  when ml2_mech_drivers.include?("openvswitch") ||
    ml2_mech_drivers.include?("cisco_apic_ml2") ||
    ml2_mech_drivers.include?("apic_gbp")
    interface_driver = "openvswitch"
  when ml2_mech_drivers.include?("linuxbridge")
    interface_driver = "linuxbridge"
  end
when "vmware"
  interface_driver = "openvswitch"
end

template "/etc/neutron/metering_agent.ini" do
  cookbook "neutron"
  source "metering_agent.ini.erb"
  owner "root"
  group node[:neutron][:platform][:group]
  mode "0640"
  variables(
    debug: node[:neutron][:debug],
    interface_driver: interface_driver,
  )
  only_if { ceilometer_agent_enabled }
end

# Delete pre-existing configuration file.
file "/etc/neutron/dnsmasq-neutron.conf" do
  action :delete
end

dns_list = node[:dns][:forwarders].join(",")

# Empty the config file that is explicitly passed to the metadata agent, as
# its content will prevail compared to config snippets (because the file is
# explicitly passed as a config file, not loaded as part of the default files
# to load).
file "/etc/neutron/dhcp_agent.ini" do
  owner "root"
  group node[:neutron][:platform][:group]
  mode "0640"
  content "# Please use config file snippets in /etc/neutron/neutron-dhcp-agent.conf.d/.\n" \
          "# See /etc/neutron/README.config for more details.\n"
end

template node[:neutron][:dhcp_agent_config_file] do
  source "dhcp_agent.ini.erb"
  owner "root"
  group node[:neutron][:platform][:group]
  mode "0640"
  variables(
    debug: node[:neutron][:debug],
    interface_driver: interface_driver,
    resync_interval: 5,
    dhcp_driver: "neutron.agent.linux.dhcp.Dnsmasq",
    dns_domain: node[:neutron][:dns_domain],
    enable_isolated_metadata: "True",
    enable_metadata_network: "False",
    nameservers: dns_list,
    force_metadata: node[:neutron][:metadata][:force]
  )
end

if node[:neutron][:use_lbaas] &&
    [nil, "", "haproxy"].include?(node[:neutron][:lbaasv2_driver])
  # Empty the config file that is explicitly passed to the metadata agent, as
  # its content will prevail compared to config snippets (because the file is
  # explicitly passed as a config file, not loaded as part of the default files
  # to load).
  file "/etc/neutron/lbaas_agent.ini" do
    owner "root"
    group node[:neutron][:platform][:group]
    mode "0640"
    content "# Please use config file snippets in /etc/neutron/neutron-lbaasv2-agent.conf.d/.\n" \
            "# See /etc/neutron/README.config for more details.\n"
  end

  template node[:neutron][:lbaas_agent_config_file] do
    source "lbaas_agent.ini.erb"
    owner "root"
    group node[:neutron][:platform][:group]
    mode "0640"
    variables(
      debug: node[:neutron][:debug],
      interface_driver: interface_driver,
      user_group: node[:neutron][:platform][:lbaas_haproxy_group],
      allow_automatic_lbaas_agent_failover: node[:neutron][:allow_automatic_lbaas_agent_failover],
      device_driver: "neutron_lbaas.drivers.haproxy.namespace_driver.HaproxyNSDriver"
    )
  end
elsif node[:neutron][:use_lbaas] &&
    node[:neutron][:lbaasv2_driver] == "f5"
  ml2_type_drivers = node[:neutron][:ml2_type_drivers]
  keystone_settings = KeystoneHelper.keystone_settings(node, @cookbook_name)

  template "/etc/neutron/services/f5/f5-openstack-agent.ini" do
    source "f5-openstack-agent.ini.erb"
    owner "root"
    group node[:neutron][:platform][:group]
    mode "0640"
    variables(
      use_namespaces: "True",
      tunnel_types: ml2_type_drivers.select { |t| ["vxlan", "gre"].include?(t) },
      use_l2pop: ml2_type_drivers.include?("gre") || ml2_type_drivers.include?("vxlan"),
      keystone_settings: keystone_settings,
      ha_type: node[:neutron][:f5][:ha_type],
      external_physical_mappings: node[:neutron][:f5][:external_physical_mappings],
      vtep_folder: node[:neutron][:f5][:vtep_folder],
      vtep_selfip_name: node[:neutron][:f5][:vtep_selfip_name],
      max_namespaces_per_tenant: node[:neutron][:f5][:max_namespaces_per_tenant],
      route_domain_strictness: node[:neutron][:f5][:route_domain_strictness],
      icontrol_hostname: node[:neutron][:f5][:icontrol_hostname],
      icontrol_username: node[:neutron][:f5][:icontrol_username],
      icontrol_password: node[:neutron][:f5][:icontrol_password],
      parent_ssl_profile: node[:neutron][:f5][:parent_ssl_profile]
    )
  end
end

ha_enabled = node[:neutron][:ha][:network][:enabled]

service node[:neutron][:platform][:metering_agent_name] do
  supports status: true, restart: true
  action [:enable, :start]
  subscribes :restart, resources(template: node[:neutron][:config_file])
  subscribes :restart, resources("template[/etc/neutron/metering_agent.ini]")
  only_if { ceilometer_agent_enabled }
end
utils_systemd_service_restart node[:neutron][:platform][:metering_agent_name] do
  action :enable
  only_if { ceilometer_agent_enabled }
end

if node[:neutron][:use_lbaas] &&
    [nil, "", "haproxy"].include?(node[:neutron][:lbaasv2_driver])
  lbaas_agent = node[:neutron][:platform][:lbaasv2_agent_name]
  service lbaas_agent do
    supports status: true, restart: true
    action [:enable, :start]
    subscribes :restart, resources(template: node[:neutron][:config_file])
    subscribes :restart, resources(template: node[:neutron][:lbaas_config_file])
    subscribes :restart, resources(template: node[:neutron][:lbaas_agent_config_file])
    subscribes :restart, resources(file: "/etc/neutron/lbaas_agent.ini")
  end
  utils_systemd_service_restart lbaas_agent do
    action :enable
  end
elsif node[:neutron][:use_lbaas] &&
    node[:neutron][:lbaasv2_driver] == "f5"
  service node[:neutron][:platform][:f5_agent_name] do
    supports status: true, restart: true
    action [:enable, :start]
    subscribes :restart, resources(template: node[:neutron][:config_file])
    subscribes :restart, resources("template[/etc/neutron/services/f5/f5-openstack-agent.ini]")
  end
  utils_systemd_service_restart node[:neutron][:platform][:f5_agent_name] do
    action :enable
  end
end

service node[:neutron][:platform][:dhcp_agent_name] do
  supports status: true, restart: true
  action [:enable, :start]
  subscribes :restart, resources(template: node[:neutron][:config_file])
  subscribes :restart, resources(template: node[:neutron][:dhcp_agent_config_file])
  subscribes :restart, resources(file: "/etc/neutron/dhcp_agent.ini")
end
utils_systemd_service_restart node[:neutron][:platform][:dhcp_agent_name] do
  action :enable
end

if ha_enabled
  log "HA support for neutron agents is enabled"
  include_recipe "neutron::network_agents_ha"
else
  log "HA support for neutron agents is disabled"
end