local tag=${1:-""}

# Save some values we generated for later use

time_stamp=$(date "+$TIMESTAMP_FORMAT")

echo "# $time_stamp $tag" >$TOP_DIR/.stackenv

for i in $STACK_ENV_VARS; do

echo $i=${!i} >>$TOP_DIR/.stackenv

done

# The location is a variable to allow for easier refactoring later to make it

# overridable. There is currently no usecase where doing so makes sense, so

# it's not currently configurable.

CLOUDS_YAML=/etc/openstack/clouds.yaml

sudo mkdir -p $(dirname $CLOUDS_YAML)

sudo chown -R $STACK_USER /etc/openstack

CA_CERT_ARG=''

if [ -f "$SSL_BUNDLE_FILE" ]; then

CA_CERT_ARG="--os-cacert $SSL_BUNDLE_FILE"

fi

# demo -> devstack

$PYTHON $TOP_DIR/tools/update_clouds_yaml.py \

--file $CLOUDS_YAML \

--os-cloud devstack \

--os-region-name $REGION_NAME \

$CA_CERT_ARG \

--os-auth-url $KEYSTONE_SERVICE_URI \

--os-username demo \

--os-password $ADMIN_PASSWORD \

--os-project-name demo

# alt_demo -> devstack-alt

$PYTHON $TOP_DIR/tools/update_clouds_yaml.py \

--file $CLOUDS_YAML \

--os-cloud devstack-alt \

--os-region-name $REGION_NAME \

$CA_CERT_ARG \

--os-auth-url $KEYSTONE_SERVICE_URI \

--os-username alt_demo \

--os-password $ADMIN_PASSWORD \

--os-project-name alt_demo

# admin -> devstack-admin

$PYTHON $TOP_DIR/tools/update_clouds_yaml.py \

--file $CLOUDS_YAML \

--os-cloud devstack-admin \

--os-region-name $REGION_NAME \

$CA_CERT_ARG \

--os-auth-url $KEYSTONE_SERVICE_URI \

--os-username admin \

--os-password $ADMIN_PASSWORD \

--os-project-name admin

# admin with a system-scoped token -> devstack-system

$PYTHON $TOP_DIR/tools/update_clouds_yaml.py \

--file $CLOUDS_YAML \

--os-cloud devstack-system-admin \

--os-region-name $REGION_NAME \

$CA_CERT_ARG \

--os-auth-url $KEYSTONE_SERVICE_URI \

--os-username admin \

--os-password $ADMIN_PASSWORD \

--os-system-scope all

cat >> $CLOUDS_YAML <<EOF

# CLean up any old clouds.yaml files we had laying around

rm -f $(eval echo ~"$STACK_USER")/.config/openstack/clouds.yaml

local xtrace

xtrace=$(set +o | grep xtrace)

set +o xtrace

local default=$1

if [ -z $2 ]; then

die $LINENO "variable to normalize required"

fi

local testval=${!2:-}

case "$testval" in

"1" | [yY]es | "YES" | [tT]rue | "TRUE" ) echo "True" ;;

"0" | [nN]o | "NO" | [fF]alse | "FALSE" ) echo "False" ;;

* ) echo "$default" ;;

esac

$xtrace

local level=$1

local deep

deep=$((${#BASH_SOURCE[@]} - 1))

echo "[Call Trace]"

while [ $level -le $deep ]; do

echo "${BASH_SOURCE[$deep]}:${BASH_LINENO[$deep-1]}:${FUNCNAME[$deep-1]}"

deep=$((deep - 1))

done

local exitcode=$?

set +o xtrace

local line=$1; shift

if [ $exitcode == 0 ]; then

exitcode=1

fi

backtrace 2

err $line "$*"

# Give buffers a second to flush

sleep 1

exit $exitcode

local exitcode=$?

local xtrace

xtrace=$(set +o | grep xtrace)

set +o xtrace

local line=$1; shift

local evar=$1; shift

if ! is_set $evar || [ $exitcode != 0 ]; then

die $line "$*"

fi

$xtrace

local text=$1

DEPRECATED_TEXT+="\n$text"

echo "WARNING: $text" >&2

local exitcode=$?

local xtrace

xtrace=$(set +o | grep xtrace)

set +o xtrace

local msg="[ERROR] ${BASH_SOURCE[2]}:$1 $2"

echo "$msg" 1>&2;

if [[ -n ${LOGDIR} ]]; then

echo "$msg" >> "${LOGDIR}/error.log"

fi

$xtrace

return $exitcode

local exitcode=$?

local xtrace

xtrace=$(set +o | grep xtrace)

set +o xtrace

local line=$1; shift

local evar=$1; shift

if ! is_set $evar || [ $exitcode != 0 ]; then

err $line "$*"

fi

$xtrace

return $exitcode

if [[ -z "$DISTRO" ]]; then

GetDistro

fi

if [ $# -gt 0 ]; then

die $LINENO "Support for $DISTRO is incomplete: no support for $@"

else

die $LINENO "Support for $DISTRO is incomplete."

fi

local exitcode=$?

local xtrace

xtrace=$(set +o | grep xtrace)

set +o xtrace

local msg="[WARNING] ${BASH_SOURCE[2]}:$1 $2"

echo "$msg"

$xtrace

return $exitcode

if [[ -x $(command -v lsb_release 2>/dev/null) ]]; then

return

fi

if [[ -x $(command -v apt-get 2>/dev/null) ]]; then

sudo apt-get install -y lsb-release

elif [[ -x $(command -v zypper 2>/dev/null) ]]; then

sudo zypper -n install lsb-release

elif [[ -x $(command -v dnf 2>/dev/null) ]]; then

sudo dnf install -y redhat-lsb-core

else

die $LINENO "Unable to find or auto-install lsb_release"

fi

# We only support distros that provide a sane lsb_release

_ensure_lsb_release

os_RELEASE=$(lsb_release -r -s)

os_CODENAME=$(lsb_release -c -s)

os_VENDOR=$(lsb_release -i -s)

if [[ $os_VENDOR =~ (Debian|Ubuntu|LinuxMint) ]]; then

os_PACKAGE="deb"

else

os_PACKAGE="rpm"

fi

typeset -xr os_VENDOR

typeset -xr os_RELEASE

typeset -xr os_PACKAGE

typeset -xr os_CODENAME

GetOSVersion

if [[ "$os_VENDOR" =~ (Ubuntu) || "$os_VENDOR" =~ (Debian) || \

"$os_VENDOR" =~ (LinuxMint) ]]; then

# 'Everyone' refers to Ubuntu / Debian / Mint releases by

# the code name adjective

DISTRO=$os_CODENAME

elif [[ "$os_VENDOR" =~ (Fedora) ]]; then

# For Fedora, just use 'f' and the release

DISTRO="f$os_RELEASE"

elif is_opensuse; then

DISTRO="opensuse-$os_RELEASE"

# Tumbleweed uses "n/a" as a codename, and the release is a datestring

# like 20180218, so not very useful. Leap however uses a release

# with a "dot", so for example 15.0

[ "$os_CODENAME" = "n/a" -a "$os_RELEASE" = "${os_RELEASE/\./}" ] && \

DISTRO="opensuse-tumbleweed"

elif is_suse_linux_enterprise; then

# just use major release

DISTRO="sle${os_RELEASE%.*}"

elif [[ "$os_VENDOR" =~ (Red.*Hat) || \

"$os_VENDOR" =~ (CentOS) || \

"$os_VENDOR" =~ (Scientific) || \

"$os_VENDOR" =~ (OracleServer) || \

"$os_VENDOR" =~ (Virtuozzo) ]]; then

# Drop the . release as we assume it's compatible

# XXX re-evaluate when we get RHEL10

DISTRO="rhel${os_RELEASE::1}"

else

# We can't make a good choice here. Setting a sensible DISTRO

# is part of the problem, but not the major issue -- we really

# only use DISTRO in the code as a fine-filter.

#

# The bigger problem is categorising the system into one of

# our two big categories as Ubuntu/Debian-ish or

# Fedora/CentOS-ish.

#

# The setting of os_PACKAGE above is only set to "deb" based

# on a hard-coded list of vendor names ... thus we will

# default to thinking unknown distros are RPM based

# (ie. is_ubuntu does not match). But the platform will then

# also not match in is_fedora, because that also has a list of

# names.

#

# So, if you are reading this, getting your distro supported

# is really about making sure it matches correctly in these

# functions. Then you can choose a sensible way to construct

# DISTRO based on your distros release approach.

die $LINENO "Unable to determine DISTRO, can not continue."

fi

typeset -xr DISTRO

if [[ -z "$os_VENDOR" ]]; then

GetOSVersion

fi

[ "$os_VENDOR" = "OracleServer" ]

if [[ -z "$os_VENDOR" ]]; then

GetOSVersion

fi

[ "$os_VENDOR" = "Fedora" ] || [ "$os_VENDOR" = "Red Hat" ] || \

[ "$os_VENDOR" = "RedHatEnterpriseServer" ] || \

[ "$os_VENDOR" = "RedHatEnterprise" ] || \

[ "$os_VENDOR" = "CentOS" ] || [ "$os_VENDOR" = "CentOSStream" ] || \

[ "$os_VENDOR" = "OracleServer" ] || [ "$os_VENDOR" = "Virtuozzo" ]

if [[ -z "$os_VENDOR" ]]; then

GetOSVersion

fi

[[ "$os_VENDOR" =~ (openSUSE) ]]

if [[ -z "$os_VENDOR" ]]; then

GetOSVersion

fi

[[ "$os_VENDOR" =~ (^SUSE) ]]

if [[ -z "$os_PACKAGE" ]]; then

GetOSVersion

fi

[ "$os_PACKAGE" = "deb" ]

local branch=$1

if [[ $branch =~ "stable/" || $branch =~ "proposed/" ]]; then

echo ${branch#*/}

else

echo "master"

fi

local git_remote=$1

local git_dest=$2

local git_ref=$3

local orig_dir

orig_dir=$(pwd)

local git_clone_flags=""

RECLONE=$(trueorfalse False RECLONE)

if [[ "${GIT_DEPTH}" -gt 0 ]]; then

git_clone_flags="$git_clone_flags --depth $GIT_DEPTH"

fi

if [[ "$OFFLINE" = "True" ]]; then

echo "Running in offline mode, clones already exist"

# print out the results so we know what change was used in the logs

cd $git_dest

git show --oneline | head -1

cd $orig_dir

return

fi

if echo $git_ref | egrep -q "^refs"; then

# If our branch name is a gerrit style refs/changes/...

if [[ ! -d $git_dest ]]; then

if [[ "$ERROR_ON_CLONE" = "True" ]]; then

echo "The $git_dest project was not found; if this is a gate job, add"

echo "the project to 'required-projects' in the job definition."

die $LINENO "Cloning not allowed in this configuration"

fi

git_timed clone $git_clone_flags $git_remote $git_dest

fi

cd $git_dest

git_timed fetch $git_remote $git_ref && git checkout FETCH_HEAD

else

# do a full clone only if the directory doesn't exist

if [[ ! -d $git_dest ]]; then

if [[ "$ERROR_ON_CLONE" = "True" ]]; then

echo "The $git_dest project was not found; if this is a gate job, add"

echo "the project to the \$PROJECTS variable in the job definition."

die $LINENO "Cloning not allowed in this configuration"

fi

# '--branch' can also take tags

git_timed clone $git_clone_flags $git_remote $git_dest --branch $git_ref

elif [[ "$RECLONE" = "True" ]]; then

# if it does exist then simulate what clone does if asked to RECLONE

cd $git_dest

# set the url to pull from and fetch

git remote set-url origin $git_remote

git_timed fetch origin

# remove the existing ignored files (like pyc) as they cause breakage

# (due to the py files having older timestamps than our pyc, so python

# thinks the pyc files are correct using them)

find $git_dest -name '*.pyc' -delete

# handle git_ref accordingly to type (tag, branch)

if [[ -n "`git show-ref refs/tags/$git_ref`" ]]; then

git_update_tag $git_ref

elif [[ -n "`git show-ref refs/heads/$git_ref`" ]]; then

git_update_branch $git_ref

elif [[ -n "`git show-ref refs/remotes/origin/$git_ref`" ]]; then

git_update_remote_branch $git_ref

else

die $LINENO "$git_ref is neither branch nor tag"

fi

fi

fi

# print out the results so we know what change was used in the logs

cd $git_dest

git show --oneline | head -1

cd $orig_dir

local name=$1

local repo=${GITREPO[$name]}

local dir=${GITDIR[$name]}

local branch=${GITBRANCH[$name]}

git_clone $repo $dir $branch

local count=0

local timeout=0

if [[ -n "${GIT_TIMEOUT}" ]]; then

timeout=${GIT_TIMEOUT}

fi

time_start "git_timed"

until timeout -s SIGINT ${timeout} git "$@"; do

# 124 is timeout(1)'s special return code when it reached the

# timeout; otherwise assume fatal failure

if [[ $? -ne 124 ]]; then

die $LINENO "git call failed: [git $@]"

fi

count=$(($count + 1))

warn $LINENO "timeout ${count} for git call: [git $@]"

if [ $count -eq 3 ]; then

die $LINENO "Maximum of 3 git retries reached"

fi

sleep 5

done

time_stop "git_timed"

local git_branch=$1

git checkout -f origin/$git_branch

# a local branch might not exist

git branch -D $git_branch || true

git checkout -b $git_branch

local git_branch=$1

git checkout -b $git_branch -t origin/$git_branch

local git_tag=$1

git tag -d $git_tag

# fetching given tag only

git_timed fetch origin tag $git_tag

git checkout -f $git_tag

local fixed_range=$1

local floating_range=$2

local host_ip_iface=$3

local host_ip=$4

local af=$5

# Search for an IP unless an explicit is set by ``HOST_IP`` environment variable

if [ -z "$host_ip" -o "$host_ip" == "dhcp" ]; then

host_ip=""

# Find the interface used for the default route

host_ip_iface=${host_ip_iface:-$(ip -f $af route | awk '/default/ {print $5}' | head -1)}

local host_ips

host_ips=$(LC_ALL=C ip -f $af addr show ${host_ip_iface} | sed /temporary/d |awk /$af'/ {split($2,parts,"/"); print parts[1]}')

local ip

for ip in $host_ips; do

# Attempt to filter out IP addresses that are part of the fixed and

# floating range. Note that this method only works if the ``netaddr``

# python library is installed. If it is not installed, an error

# will be printed and the first IP from the interface will be used.

# If that is not correct set ``HOST_IP`` in ``localrc`` to the correct

# address.

if [[ "$af" == "inet6" ]]; then

host_ip=$ip

break;

fi

if ! (address_in_net $ip $fixed_range || address_in_net $ip $floating_range); then

host_ip=$ip

break;

fi

done

fi

echo $host_ip

local data field

while read data; do

if [ "$1" -lt 0 ]; then

field="(\$(NF$1))"

else

field="\$$(($1 + 1))"

fi

echo "$data" | awk -F'[ \t]*\\|[ \t]*' "{print $field}"

done

local project=$1

local project_uc

project_uc=$(echo $1|tr a-z A-Z)

local conf_dir="${project_uc}_CONF_DIR"

# eval conf dir to get the variable

conf_dir="${!conf_dir}"

local project_dir="${project_uc}_DIR"

# eval project dir to get the variable

project_dir="${!project_dir}"

local sample_conf_dir="${project_dir}/etc/${project}"

local sample_policy_dir="${project_dir}/etc/${project}/policy.d"

# first copy any policy.json

cp -p $sample_conf_dir/policy.json $conf_dir

# then optionally copy over policy.d

if [[ -d $sample_policy_dir ]]; then

cp -r $sample_policy_dir $conf_dir/policy.d

fi

local policy_file=$1

local policy_name=$2

local policy_perm=$3

if grep -q ${policy_name} ${policy_file}; then

echo "Policy ${policy_name} already exists in ${policy_file}"

return

fi

# Add a terminating comma to policy lines without one

# Remove the closing '}' and all lines following to the end-of-file

local tmpfile

tmpfile=$(mktemp)

uniq ${policy_file} | sed -e '

' > ${tmpfile}

# Append policy and closing brace

echo " \"${policy_name}\": ${policy_perm}" >>${tmpfile}

echo "}" >>${tmpfile}

mv ${tmpfile} ${policy_file}

local domain_id

# Gets domain id

domain_id=$(

echo $domain_id

local desc="${3:-}"

local group_id

# Gets group id

group_id=$(

echo $group_id

local user_id

if [[ ! -z "$4" ]]; then

local email="--email=$4"

else

local email=""

fi

# Gets user id

user_id=$(

echo $user_id

local project_id

project_id=$(

echo $project_id

local role_id

role_id=$(

echo $role_id

local domain

domain=""

if [[ -n "$1" ]]; then

domain="$domain --user-domain $1"

fi

if [[ -n "$2" ]]; then

domain="$domain --project-domain $2"

fi

echo $domain

local user_role_id

domain_args=$(_get_domain_args $4 $5)

# Gets user role id

user_role_id=$(openstack role assignment list \

if [[ -z "$user_role_id" ]]; then

# Adds role to user and get it

openstack role add $1 \

--user $2 \

--project $3 \

$domain_args

user_role_id=$(openstack role assignment list \

fi

echo $user_role_id

local user_role_id

# Gets user role id

user_role_id=$(openstack role assignment list \

if [[ -z "$user_role_id" ]]; then

# Adds role to user and get it

openstack role add $1 \

--user $2 \

--domain $3

user_role_id=$(openstack role assignment list \

fi

echo $user_role_id

local group_role_id

# Gets group role id

group_role_id=$(openstack role assignment list \

if [[ -z "$group_role_id" ]]; then

# Adds role to group and get it

openstack role add $1 \

--group $2 \

--project $3

group_role_id=$(openstack role assignment list \

fi

echo $group_role_id

local service_id

# Gets service id

service_id=$(

echo $service_id

local endpoint_id

endpoint_id=$(openstack endpoint list \

if [[ -z "$endpoint_id" ]]; then

# Creates new endpoint

endpoint_id=$(openstack endpoint create \

fi

echo $endpoint_id