floating_ips.sh

floating_ips.sh - using the cloud can be fun

#!/usr/bin/env bash

Test instance connectivity with the nova command from python-novaclient


echo "*********************************************************************"
echo "Begin DevStack Exercise: $0"
echo "*********************************************************************"

This script exits on an error so that errors don't compound and you see only the first error that occured.

set -o errexit

Print the commands being run so that we can see the command that triggers an error. It is also useful for following allowing as the install occurs.

set -o xtrace

Settings

Keep track of the current directory

EXERCISE_DIR=$(cd $(dirname "$0") && pwd)
TOP_DIR=$(cd $EXERCISE_DIR/..; pwd)

Import common functions

source $TOP_DIR/functions

Import configuration

source $TOP_DIR/openrc

Import quantum functions if needed

if is_service_enabled quantum; then
    source $TOP_DIR/lib/quantum
fi

Import exercise configuration

source $TOP_DIR/exerciserc

Instance type to create

DEFAULT_INSTANCE_TYPE=${DEFAULT_INSTANCE_TYPE:-m1.tiny}

Boot this image, use first AMI image if unset

DEFAULT_IMAGE_NAME=${DEFAULT_IMAGE_NAME:-ami}

Security group name

SECGROUP=${SECGROUP:-test_secgroup}

Default floating IP pool name

DEFAULT_FLOATING_POOL=${DEFAULT_FLOATING_POOL:-nova}

Additional floating IP pool and range

TEST_FLOATING_POOL=${TEST_FLOATING_POOL:-test}

Instance name

VM_NAME="ex-float"

Launching a server

List servers for tenant:

nova list

Images

List the images available

glance image-list

Grab the id of the image to launch

IMAGE=$(glance image-list | egrep " $DEFAULT_IMAGE_NAME " | get_field 1)
die_if_not_set IMAGE "Failure getting image $DEFAULT_IMAGE_NAME"

Security Groups

List security groups

nova secgroup-list

Create a secgroup

if ! nova secgroup-list | grep -q $SECGROUP; then
    nova secgroup-create $SECGROUP "$SECGROUP description"
    if ! timeout $ASSOCIATE_TIMEOUT sh -c "while ! nova secgroup-list | grep -q $SECGROUP; do sleep 1; done"; then
        echo "Security group not created"
        exit 1
    fi
fi

Configure Security Group Rules

if ! nova secgroup-list-rules $SECGROUP | grep -q icmp; then
    nova secgroup-add-rule $SECGROUP icmp -1 -1 0.0.0.0/0
fi
if ! nova secgroup-list-rules $SECGROUP | grep -q " tcp .* 22 "; then
    nova secgroup-add-rule $SECGROUP tcp 22 22 0.0.0.0/0
fi

List secgroup rules

nova secgroup-list-rules $SECGROUP

Set up instance

List flavors

nova flavor-list

Select a flavor

INSTANCE_TYPE=$(nova flavor-list | grep $DEFAULT_INSTANCE_TYPE | get_field 1)
if [[ -z "$INSTANCE_TYPE" ]]; then

grab the first flavor in the list to launch if default doesn't exist

   INSTANCE_TYPE=$(nova flavor-list | head -n 4 | tail -n 1 | get_field 1)
fi

Clean-up from previous runs

nova delete $VM_NAME || true
if ! timeout $ACTIVE_TIMEOUT sh -c "while nova show $VM_NAME; do sleep 1; done"; then
    echo "server didn't terminate!"
    exit 1
fi

Boot instance


VM_UUID=$(nova boot --flavor $INSTANCE_TYPE --image $IMAGE --security_groups=$SECGROUP $VM_NAME | grep ' id ' | get_field 2)
die_if_not_set VM_UUID "Failure launching $VM_NAME"

Check that the status is active within ACTIVE_TIMEOUT seconds

if ! timeout $ACTIVE_TIMEOUT sh -c "while ! nova show $VM_UUID | grep status | grep -q ACTIVE; do sleep 1; done"; then
    echo "server didn't become active!"
    exit 1
fi

Get the instance IP

IP=$(nova show $VM_UUID | grep "$PRIVATE_NETWORK_NAME" | get_field 2)
die_if_not_set IP "Failure retrieving IP address"

Private IPs can be pinged in single node deployments

ping_check "$PRIVATE_NETWORK_NAME" $IP $BOOT_TIMEOUT

Floating IPs

Allocate a floating IP from the default pool

FLOATING_IP=$(nova floating-ip-create | grep $DEFAULT_FLOATING_POOL | get_field 1)
die_if_not_set FLOATING_IP "Failure creating floating IP from pool $DEFAULT_FLOATING_POOL"

List floating addresses

if ! timeout $ASSOCIATE_TIMEOUT sh -c "while ! nova floating-ip-list | grep -q $FLOATING_IP; do sleep 1; done"; then
    echo "Floating IP not allocated"
    exit 1
fi

Add floating IP to our server

nova add-floating-ip $VM_UUID $FLOATING_IP || \
    die "Failure adding floating IP $FLOATING_IP to $VM_NAME"

Test we can ping our floating IP within ASSOCIATE_TIMEOUT seconds

ping_check "$PUBLIC_NETWORK_NAME" $FLOATING_IP $ASSOCIATE_TIMEOUT

if ! is_service_enabled quantum; then

Allocate an IP from second floating pool

    TEST_FLOATING_IP=$(nova floating-ip-create $TEST_FLOATING_POOL | grep $TEST_FLOATING_POOL | get_field 1)
    die_if_not_set TEST_FLOATING_IP "Failure creating floating IP in $TEST_FLOATING_POOL"

list floating addresses

    if ! timeout $ASSOCIATE_TIMEOUT sh -c "while ! nova floating-ip-list | grep $TEST_FLOATING_POOL | grep -q $TEST_FLOATING_IP; do sleep 1; done"; then
        echo "Floating IP not allocated"
        exit 1
     fi
fi

Dis-allow icmp traffic (ping)

nova secgroup-delete-rule $SECGROUP icmp -1 -1 0.0.0.0/0 || \
    die "Failure deleting security group rule from $SECGROUP"

FIXME (anthony): make xs support security groups

if [ "$VIRT_DRIVER" != "xenserver" -a "$VIRT_DRIVER" != "openvz" ]; then

Test we can aren't able to ping our floating ip within ASSOCIATE_TIMEOUT seconds

    ping_check "$PUBLIC_NETWORK_NAME" $FLOATING_IP $ASSOCIATE_TIMEOUT Fail
fi

Clean up


if ! is_service_enabled quantum; then

Delete second floating IP

    nova floating-ip-delete $TEST_FLOATING_IP || \
        die "Failure deleting floating IP $TEST_FLOATING_IP"
fi

Delete the floating ip

nova floating-ip-delete $FLOATING_IP || \
    die "Failure deleting floating IP $FLOATING_IP"

Delete instance

nova delete $VM_UUID || die "Failure deleting instance $VM_NAME"

Wait for termination

if ! timeout $TERMINATE_TIMEOUT sh -c "while nova list | grep -q $VM_UUID; do sleep 1; done"; then
    echo "Server $VM_NAME not deleted"
    exit 1
fi

Delete secgroup

nova secgroup-delete $SECGROUP || \
    die "Failure deleting security group $SECGROUP"

set +o xtrace
echo "*********************************************************************"
echo "SUCCESS: End DevStack Exercise: $0"
echo "*********************************************************************"