blob: 850df92bac37f56e1e8c1f076a7afb2136b30de8 [file] [log] [blame]
Dennis Dmitriev492813e2017-08-09 15:08:58 +03001{# Collection of common macroses shared across different deployments #}
2
Sergii Golovatiuk50f91892017-08-04 18:11:06 +02003{% set SALT_MODELS_BRANCH = os_env('SALT_MODELS_BRANCH','master') %}
4{% set SALT_MODELS_COMMIT = os_env('SALT_MODELS_COMMIT','master') %}
5{# Reference to a patch that should be applied to the model if required, for example: export SALT_MODELS_REF_CHANGE=refs/changes/19/7219/12 #}
6{% set SALT_MODELS_REF_CHANGE = os_env('SALT_MODELS_REF_CHANGE', '') %}
7{# Pin to a specified commit in salt-models/reclass-system #}
Dmitry Tyzhnenko778515f2017-08-25 14:52:54 +03008{% set SALT_MODELS_SYSTEM_REPOSITORY = os_env('SALT_MODELS_SYSTEM_REPOSITORY','https://gerrit.mcp.mirantis.net/salt-models/reclass-system') %}
Sergii Golovatiuk50f91892017-08-04 18:11:06 +02009{% set SALT_MODELS_SYSTEM_COMMIT = os_env('SALT_MODELS_SYSTEM_COMMIT','') %}
Dmitry Tyzhnenko778515f2017-08-25 14:52:54 +030010{% set SALT_MODELS_SYSTEM_REF_CHANGE = os_env('SALT_MODELS_SYSTEM_REF_CHANGE','') %}
Sergii Golovatiuk50f91892017-08-04 18:11:06 +020011
Dennis Dmitriev492813e2017-08-09 15:08:58 +030012{% set REPOSITORY_SUITE = os_env('REPOSITORY_SUITE', 'testing') %}
13
Sergii Golovatiuk50f91892017-08-04 18:11:06 +020014{# Address pools for reclass cluster model are taken in the following order:
15 # 1. environment variables,
16 # 2. config.underlay.address_pools based on fuel-devops address pools
17 # (see generated '.ini' file after underlay is created),
18 # 3. defaults #}
19{% set address_pools = config.underlay.address_pools %}
20{% set IPV4_NET_ADMIN = os_env('IPV4_NET_ADMIN', address_pools.get('admin-pool01', '192.168.10.0/24')) %}
21{% set IPV4_NET_CONTROL = os_env('IPV4_NET_CONTROL', address_pools.get('private-pool01', '172.16.10.0/24')) %}
22{% set IPV4_NET_TENANT = os_env('IPV4_NET_TENANT', address_pools.get('tenant-pool01', '10.1.0.0/24')) %}
23{% set IPV4_NET_EXTERNAL = os_env('IPV4_NET_EXTERNAL', address_pools.get('external-pool01', '10.16.0.0/24')) %}
24{% set IPV4_NET_ADMIN_PREFIX = '.'.join(IPV4_NET_ADMIN.split('.')[0:3]) %}
25{% set IPV4_NET_CONTROL_PREFIX = '.'.join(IPV4_NET_CONTROL.split('.')[0:3]) %}
26{% set IPV4_NET_TENANT_PREFIX = '.'.join(IPV4_NET_TENANT.split('.')[0:3]) %}
27{% set IPV4_NET_EXTERNAL_PREFIX = '.'.join(IPV4_NET_EXTERNAL.split('.')[0:3]) %}
28
Victor Ryzhenkin4e077ad2017-08-10 13:42:11 +040029{# Format for formula replacement:
30 # space separated string:
31 # export SALT_FORMULAS_REFS='apache:refs/changes/xxxx kubernetes:refs/changes/xxxx' #}
32
33{% set SALT_FORMULAS_REFS = os_env('SALT_FORMULAS_REFS', '') %}
34{% set SALT_FORMULAS_REPO = os_env('SALT_FORMULAS_REPO', 'https://gerrit.mcp.mirantis.net/salt-formulas') %}
35
Dennis Dmitriev492813e2017-08-09 15:08:58 +030036
37{%- macro MACRO_INSTALL_SALT_MASTER() %}
38{######################################}
39- description: Installing salt master on cfg01
40 cmd: eatmydata apt-get install -y reclass git salt-master
41 node_name: {{ HOSTNAME_CFG01 }}
42 retry: {count: 1, delay: 1}
43 skip_fail: false
44
45- description: Configure salt-master on cfg01
46 cmd: |
47 cat << 'EOF' >> /etc/salt/master.d/master.conf
48 file_roots:
49 base:
50 - /usr/share/salt-formulas/env
51 pillar_opts: False
52 open_mode: True
53 reclass: &reclass
54 storage_type: yaml_fs
55 inventory_base_uri: /srv/salt/reclass
56 ext_pillar:
57 - reclass: *reclass
58 master_tops:
59 reclass: *reclass
60 EOF
61 node_name: {{ HOSTNAME_CFG01 }}
62 retry: {count: 1, delay: 1}
63 skip_fail: false
64
65- description: Configure GIT settings and certificates
Dennis Dmitriev3e731a42017-08-30 17:12:59 +030066 cmd: |
67 set -e;
68 touch /root/.git_trusted_certs.pem;
69 for server in github.com; do \
70 openssl s_client -showcerts -connect $server:443 </dev/null \
71 | openssl x509 -outform PEM \
Dennis Dmitriev492813e2017-08-09 15:08:58 +030072 >> /root/.git_trusted_certs.pem;
73 done;
74 HOME=/root git config --global http.sslCAInfo /root/.git_trusted_certs.pem;
75 HOME=/root git config --global user.email "tcp-qa@example.com";
76 HOME=/root git config --global user.name "TCP QA";
77 node_name: {{ HOSTNAME_CFG01 }}
78 retry: {count: 1, delay: 1}
79 skip_fail: false
80{%- endmacro %}
81
82
83{%- macro MACRO_CLONE_RECLASS_MODELS(IS_CONTRAIL_LAB=false) %}
84{############################################################}
85- description: Clone reclass models with submodules
86 cmd: |
Dennis Dmitriev3e731a42017-08-30 17:12:59 +030087 set -e;
Sergii Golovatiuk50f91892017-08-04 18:11:06 +020088 ssh-keyscan -H github.com >> ~/.ssh/known_hosts;
Tatyana Leontovich44162732017-08-28 12:36:00 +030089 export GIT_SSL_NO_VERIFY=true; git clone -b {{ SALT_MODELS_BRANCH }} --recurse-submodules {{ SALT_MODELS_REPOSITORY }} /srv/salt/reclass;
Sergii Golovatiuk50f91892017-08-04 18:11:06 +020090 pushd /srv/salt/reclass && \
91 {%- if SALT_MODELS_REF_CHANGE != '' %}
92 {%- for item in SALT_MODELS_REF_CHANGE.split(" ") %}
93 git fetch {{ SALT_MODELS_REPOSITORY }} {{ item }} && git cherry-pick FETCH_HEAD && \
94 {%- endfor %}
95 {%- elif SALT_MODELS_COMMIT != 'master' %}
96 git checkout {{ SALT_MODELS_COMMIT }} && \
97 {%- endif %}
98 {%- if SALT_MODELS_SYSTEM_COMMIT != '' %}
99 pushd classes/system/ && \
100 git checkout {{ SALT_MODELS_SYSTEM_COMMIT }} && \
101 popd && \
Dmitry Tyzhnenko778515f2017-08-25 14:52:54 +0300102 {%- elif SALT_MODELS_SYSTEM_REF_CHANGE != '' -%}
103 pushd classes/system/ && \
104 {%- for item in SALT_MODELS_SYSTEM_REF_CHANGE.split(" ") %}
105 git fetch {{ SALT_MODELS_SYSTEM_REPOSITORY }} {{ item }} && git cherry-pick FETCH_HEAD && \
106 {%- endfor %}
107 popd && \
Sergii Golovatiuk50f91892017-08-04 18:11:06 +0200108 {%- else %}
109 git submodule update --init --recursive && \
110 {%- endif %}
111 popd;
112 mkdir -p /srv/salt/reclass/classes/service;
113
114 # Replace firstly to an intermediate value to avoid intersection between
115 # already replaced and replacing networks.
116 # For example, if generated IPV4_NET_ADMIN_PREFIX=10.16.0 , then there is a risk of replacing twice:
117 # 192.168.10 -> 10.16.0 (generated network for admin)
118 # 10.16.0 -> <external network>
119 # So let's replace constant networks to the keywords, and then keywords to the desired networks.
120 find /srv/salt/reclass/ -type f -exec sed -i 's/192\.168\.10\./==IPV4_NET_ADMIN_PREFIX==/g' {} +
121 find /srv/salt/reclass/ -type f -exec sed -i 's/172\.16\.10\./==IPV4_NET_CONTROL_PREFIX==/g' {} +
122 find /srv/salt/reclass/ -type f -exec sed -i 's/10\.1\.0\./==IPV4_NET_TENANT_PREFIX==/g' {} +
123 find /srv/salt/reclass/ -type f -exec sed -i 's/10\.16\.0\./==IPV4_NET_EXTERNAL_PREFIX==/g' {} +
124
125 find /srv/salt/reclass/ -type f -exec sed -i 's/==IPV4_NET_ADMIN_PREFIX==/{{ IPV4_NET_ADMIN_PREFIX }}./g' {} +
126 find /srv/salt/reclass/ -type f -exec sed -i 's/==IPV4_NET_CONTROL_PREFIX==/{{ IPV4_NET_CONTROL_PREFIX }}./g' {} +
127 find /srv/salt/reclass/ -type f -exec sed -i 's/==IPV4_NET_TENANT_PREFIX==/{{ IPV4_NET_TENANT_PREFIX }}./g' {} +
128 find /srv/salt/reclass/ -type f -exec sed -i 's/==IPV4_NET_EXTERNAL_PREFIX==/{{ IPV4_NET_EXTERNAL_PREFIX }}./g' {} +
129
130 find /srv/salt/reclass/ -type f -exec sed -i 's/apt_mk_version:.*/apt_mk_version: {{ REPOSITORY_SUITE }}/g' {} +
131
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300132 {%- if IS_CONTRAIL_LAB %}
133 # vSRX IPs for tcp-qa images have 172.16.10.90 hardcoded
134 find /srv/salt/reclass/ -type f -exec sed -i 's/opencontrail_router01_address:.*/opencontrail_router01_address: 172.16.10.90/g' {} +
135 {%- endif %}
136
Sergii Golovatiuk50f91892017-08-04 18:11:06 +0200137 # Disable checkouting the model from remote repository
138 cat << 'EOF' >> /srv/salt/reclass/nodes/{{ HOSTNAME_CFG01 }}.yml
139 # local storage
140 reclass:
141 storage:
142 data_source:
143 engine: local
144 EOF
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300145
146 # Show the changes to the console
147 cd /srv/salt/reclass/; git diff
148 node_name: {{ HOSTNAME_CFG01 }}
149 retry: {count: 1, delay: 1}
150 skip_fail: false
151{%- endmacro %}
152
153
154{%- macro MACRO_CONFIGURE_RECLASS(FORMULA_SERVICES='') %}
155{#######################################################}
156- description: Configure reclass
157 cmd: |
Dennis Dmitriev3e731a42017-08-30 17:12:59 +0300158 set -e;
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300159 FORMULA_PATH=${FORMULA_PATH:-/usr/share/salt-formulas};
160 FORMULA_REPOSITORY=${FORMULA_REPOSITORY:-deb [arch=amd64] http://apt.mirantis.com/xenial {{ REPOSITORY_SUITE }} salt};
161 FORMULA_GPG=${FORMULA_GPG:-http://apt.mirantis.com/public.gpg};
162 which wget > /dev/null || (apt-get update; apt-get install -y wget);
163 echo "${FORMULA_REPOSITORY}" > /etc/apt/sources.list.d/mcp_salt.list;
164 wget -O - "${FORMULA_GPG}" | apt-key add -;
165 apt-get clean; apt-get update;
166 [ ! -d /srv/salt/reclass/classes/service ] && mkdir -p /srv/salt/reclass/classes/service;
167 declare -a formula_services=({{ FORMULA_SERVICES }});
168 echo -e "\nInstalling all required salt formulas\n";
169 eatmydata apt-get install -y "${formula_services[@]/#/salt-formula-}";
170 for formula_service in "${formula_services[@]}"; do
171 echo -e "\nLink service metadata for formula ${formula_service} ...\n";
172 [ ! -L "/srv/salt/reclass/classes/service/${formula_service}" ] && ln -s ${FORMULA_PATH}/reclass/service/${formula_service} /srv/salt/reclass/classes/service/${formula_service};
173 done;
174 [ ! -d /srv/salt/env ] && mkdir -p /srv/salt/env;
175 [ ! -L /srv/salt/env/prd ] && ln -s ${FORMULA_PATH}/env /srv/salt/env/prd;
176 [ ! -d /etc/reclass ] && mkdir /etc/reclass;
177
178 cat << 'EOF' >> /etc/reclass/reclass-config.yml
179 storage_type: yaml_fs
180 pretty_print: True
181 output: yaml
182 inventory_base_uri: /srv/salt/reclass
183 EOF
184 node_name: {{ HOSTNAME_CFG01 }}
185 retry: {count: 1, delay: 1}
186 skip_fail: false
187
188- description: "*Workaround* remove all cfg01 nodes except {{ HOSTNAME_CFG01 }} to not depend on other clusters in 'reclass --top'"
189 cmd: |
190 # Remove all other nodes except {{ HOSTNAME_CFG01 }} to not rely on them for 'reclass --top'
191 find /srv/salt/reclass/nodes/ -type f -not -name {{ HOSTNAME_CFG01 }}.yml -delete
192 node_name: {{ HOSTNAME_CFG01 }}
193 retry: {count: 1, delay: 5}
194 skip_fail: false
195
196- description: Configure salt adoptors on cfg01
197 cmd: |
198 ln -s /usr/lib/python2.7/dist-packages/reclass/adapters/salt.py /usr/local/sbin/reclass-salt;
199 chmod +x /usr/lib/python2.7/dist-packages/reclass/adapters/salt.py
200 node_name: {{ HOSTNAME_CFG01 }}
201 retry: {count: 1, delay: 1}
202 skip_fail: false
203
204- description: Show reclass-salt --top for cfg01 node
205 cmd: reclass-salt --top
206 node_name: {{ HOSTNAME_CFG01 }}
207 retry: {count: 1, delay: 5}
208 skip_fail: false
209
210- description: Restart salt-master service
211 cmd: systemctl restart salt-master;
212 node_name: {{ HOSTNAME_CFG01 }}
213 retry: {count: 1, delay: 5}
214 skip_fail: false
215{%- endmacro %}
216
217
218{%- macro MACRO_INSTALL_SALT_MINIONS() %}
219{#######################################}
220{% for ssh in config.underlay.ssh %}
221- description: Configure salt-minion on {{ ssh['node_name'] }}
222 cmd: |
223 [ ! -d /etc/salt/minion.d ] && mkdir -p /etc/salt/minion.d;
224 cat << "EOF" >> /etc/salt/minion.d/minion.conf
225 id: {{ ssh['node_name'] }}
226 master: {{ config.salt.salt_master_host }}
227 EOF
228 eatmydata apt-get install -y salt-minion;
Dennis Dmitriev3e731a42017-08-30 17:12:59 +0300229 service salt-minion restart; # For case if salt-minion was already installed
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300230 node_name: {{ ssh['node_name'] }}
231 retry: {count: 1, delay: 1}
232 skip_fail: false
233{% endfor %}
234
235
236- description: Accept salt keys from all the nodes
237 cmd: salt-key -A -y
238 node_name: {{ HOSTNAME_CFG01 }}
239 retry: {count: 1, delay: 5}
240 skip_fail: true
241{%- endmacro %}
242
243
244{%- macro MACRO_RUN_SALT_MASTER_UNDERLAY_STATES() %}
245{##################################################}
246
247{# Prepare salt services and nodes settings #}
248
249- description: Run 'linux' formula on cfg01
250 cmd: salt --hard-crash --state-output=mixed --state-verbose=False -C 'I@salt:master' state.sls linux;
251 node_name: {{ HOSTNAME_CFG01 }}
252 retry: {count: 3, delay: 5}
253 skip_fail: false
254
255- description: Run 'openssh' formula on cfg01
256 cmd: salt --hard-crash --state-output=mixed --state-verbose=False
Dennis Dmitriev3e731a42017-08-30 17:12:59 +0300257 -C 'I@salt:master' state.sls openssh &&
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300258 salt --hard-crash --state-output=mixed --state-verbose=False
259 -C 'I@salt:master' cmd.run "sed -i 's/PasswordAuthentication no/PasswordAuthentication
Dennis Dmitriev3e731a42017-08-30 17:12:59 +0300260 yes/' /etc/ssh/sshd_config && service ssh reload"
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300261 node_name: {{ HOSTNAME_CFG01 }}
262 retry: {count: 3, delay: 5}
263 skip_fail: false
264
265- description: '*Workaround* of the bug https://mirantis.jira.com/browse/PROD-7962'
266 cmd: salt --hard-crash --state-output=mixed --state-verbose=False
267 '*' cmd.run "echo ' StrictHostKeyChecking no' >> /root/.ssh/config"
268 node_name: {{ HOSTNAME_CFG01 }}
269 retry: {count: 1, delay: 1}
270 skip_fail: false
271
272- description: Run 'salt.master' formula on cfg01
273 cmd: timeout 120 salt --timeout=120 --hard-crash --state-output=mixed --state-verbose=False -C 'I@salt:master' state.sls salt.master;
274 node_name: {{ HOSTNAME_CFG01 }}
275 retry: {count: 2, delay: 5}
276 skip_fail: false
277
Victor Ryzhenkin4e077ad2017-08-10 13:42:11 +0400278{%- if SALT_FORMULAS_REFS != '' %}
279- description: Replace needed formulas to desired version
280 cmd: |
281 set -e;
282 {%- for formula in SALT_FORMULAS_REFS.split(' ') %}
283 {% set formula_name = formula.0 %}
284 {% set formula_ref = formula.1 %}
Dennis Dmitrievbc57b802017-08-16 18:10:57 +0300285 {% set formula_dir = '/tmp/salt-formula-' + formula_name %}
Victor Ryzhenkin4e077ad2017-08-10 13:42:11 +0400286 git clone {{ SALT_FORMULAS_REPO }}/{{ formula_name }} {{ formula_dir }} &&
287 pushd {{ formula_dir }} &&
288 git fetch {{ SALT_FORMULAS_REPO }}/{{ formula_name }} {{ formula_ref }} &&
289 git checkout FETCH_HEAD &&
290 popd &&
291 if [ -d "{{ formula_dir }}" ]; then
292 echo "Going to replace packaged formula {{ formula_name }}" &&
293 rm -rfv /usr/share/salt-formulas/{env,reclass/service}/{{ formula_name }} &&
294 ln -v -s \"{{ formula_dir }}/{{ formula_name }}\" \"/usr/share/salt-formulas/env/{{ formula_name }}\" &&
295 ln -v -s \"{{ formula_dir }}/metadata/service/\" \"/usr/share/salt-formulas/reclass/service/{{ formula_name }}\";
296 else
297 echo "Stopped, directory /root/salt-formula-{{ formula_name }} does not exist!";
298 fi
299 {%- endfor %}
300 node_name: {{ HOSTNAME_CFG01 }}
301 retry: {count: 1, delay: 10}
302 skip_fail: false
303{%- endif %}
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300304
305- description: Refresh pillars on salt-master minion
306 cmd: salt --hard-crash --state-output=mixed --state-verbose=False -C 'I@salt:master' saltutil.refresh_pillar
307 node_name: {{ HOSTNAME_CFG01 }}
308 retry: {count: 1, delay: 5}
309 skip_fail: false
310
Dennis Dmitriev3e731a42017-08-30 17:12:59 +0300311- description: Show reclass-salt --top for salt-master node
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300312 cmd: reclass-salt --top
313 node_name: {{ HOSTNAME_CFG01 }}
314 retry: {count: 1, delay: 5}
315 skip_fail: false
316
317- description: Sync all salt resources on salt-master minion
Dennis Dmitriev9a6cacc2017-08-14 00:08:41 +0300318 cmd: salt --hard-crash --state-output=mixed --state-verbose=False -C 'I@salt:master' saltutil.sync_all && sleep 5
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300319 node_name: {{ HOSTNAME_CFG01 }}
320 retry: {count: 1, delay: 5}
321 skip_fail: false
322
323- description: Configure linux on master
324 cmd: salt --hard-crash --state-output=mixed --state-verbose=False -C 'I@salt:master' state.sls 'linux.system'
325 node_name: {{ HOSTNAME_CFG01 }}
326 retry: {count: 1, delay: 5}
327 skip_fail: false
328
329- description: Configure salt.minion on master
330 cmd: salt --timeout=120 --hard-crash --state-output=mixed --state-verbose=False
331 -C 'I@salt:master' state.sls salt.minion && sleep 10
332 node_name: {{ HOSTNAME_CFG01 }}
333 retry: {count: 3, delay: 10}
334 skip_fail: false
335
336- description: Run state 'salt' on master (for salt.api, etc)
337 cmd: salt --hard-crash --state-output=mixed --state-verbose=False
338 -C 'I@salt:master' state.sls salt
339 node_name: {{ HOSTNAME_CFG01 }}
340 retry: {count: 3, delay: 10}
341 skip_fail: false
342{%- endmacro %}
343
344{%- macro MACRO_GENERATE_INVENTORY() %}
345{#####################################}
346- description: Generate inventory for all the nodes to the /srv/salt/reclass/nodes/_generated
347 cmd: salt --hard-crash --state-output=mixed --state-verbose=False
348 -C 'I@salt:master' state.sls reclass
349 node_name: {{ HOSTNAME_CFG01 }}
350 retry: {count: 1, delay: 5}
351 skip_fail: false
352
353- description: Refresh pillars on all minions
354 cmd: salt --hard-crash --state-output=mixed --state-verbose=False '*' saltutil.refresh_pillar
355 node_name: {{ HOSTNAME_CFG01 }}
356 retry: {count: 1, delay: 5}
357 skip_fail: false
358
Dennis Dmitriev3e731a42017-08-30 17:12:59 +0300359- description: Show reclass-salt --top for all generated nodes
Dennis Dmitriev4386a072017-09-04 13:58:02 +0300360 cmd: |
361 set -e
362 if salt-call sys.doc reclass.validate_node_params | grep -q reclass.validate_node_params ; then salt-call reclass.validate_nodes_params ; fi
363 if salt-call sys.doc reclass.validate_pillar | grep -q reclass.validate_pillar ; then salt-call reclass.validate_pillar ; fi
364 reclass-salt --top
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300365 node_name: {{ HOSTNAME_CFG01 }}
366 retry: {count: 1, delay: 5}
367 skip_fail: false
368
369- description: Sync all salt resources
Dennis Dmitriev9a6cacc2017-08-14 00:08:41 +0300370 cmd: salt --hard-crash --state-output=mixed --state-verbose=False '*' saltutil.sync_all && sleep 5
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300371 node_name: {{ HOSTNAME_CFG01 }}
372 retry: {count: 1, delay: 5}
373 skip_fail: false
374{%- endmacro %}
375
376
377{%- macro MACRO_BOOTSTRAP_ALL_MINIONS() %}
378{########################################}
379# Bootstrap all nodes
380- description: Configure linux on other nodes
381 cmd: salt --hard-crash --state-output=mixed --state-verbose=False -C 'I@linux:system' state.sls linux
382 node_name: {{ HOSTNAME_CFG01 }}
383 retry: {count: 5, delay: 10}
384 skip_fail: false
385
386- description: Configure openssh on all nodes
Dennis Dmitriev3e731a42017-08-30 17:12:59 +0300387 cmd: salt --hard-crash --state-output=mixed --state-verbose=False -C 'I@linux:system and not cfg01*' state.sls openssh &&
Dennis Dmitriev492813e2017-08-09 15:08:58 +0300388 salt --hard-crash --state-output=mixed --state-verbose=False
389 -C 'I@linux:system and not cfg01*' cmd.run "sed -i 's/PasswordAuthentication no/PasswordAuthentication
390 yes/' /etc/ssh/sshd_config && service ssh reload"
391 node_name: {{ HOSTNAME_CFG01 }}
392 retry: {count: 1, delay: 5}
393 skip_fail: false
394
395- description: Configure salt.minion on other nodes
396 cmd: salt --timeout=120 --hard-crash --state-output=mixed --state-verbose=False -C 'I@linux:system and not cfg01*' state.sls salt.minion &&
397 sleep 10
398 node_name: {{ HOSTNAME_CFG01 }}
399 retry: {count: 3, delay: 15}
400 skip_fail: false
401
402- description: Check salt minion versions on slaves
403 cmd: salt '*' test.version
404 node_name: {{ HOSTNAME_CFG01 }}
405 retry: {count: 3, delay: 15}
406 skip_fail: false
407
408- description: Check salt top states on nodes
409 cmd: salt '*' state.show_top
410 node_name: {{ HOSTNAME_CFG01 }}
411 retry: {count: 1, delay: 5}
412 skip_fail: false
413
414- description: Configure ntp and rsyslog on nodes
415 cmd: salt --hard-crash --state-output=mixed --state-verbose=False -C 'I@linux:system' state.sls ntp,rsyslog
416 node_name: {{ HOSTNAME_CFG01 }}
417 retry: {count: 1, delay: 10}
418 skip_fail: false
Sergii Golovatiuk50f91892017-08-04 18:11:06 +0200419{%- endmacro %}
Dennis Dmitriev9dada8a2017-08-30 17:38:55 +0300420
421
422{%- macro MACRO_NETWORKING_WORKAROUNDS() %}
423{#########################################}
424
425- description: '*Workaround 1/2* of the bug PROD-9576 to get bond0-connectivity *without* rebooting nodes'
426 cmd: salt-call --hard-crash --state-output=mixed --state-verbose=False cmd.run
427 "mkdir -p /tmp/PROD-9576; cd /tmp/PROD-9576; git clone https://gerrit.mcp.mirantis.net/salt-formulas/linux; cd linux;
Dennis Dmitriev5b9f1c72017-09-04 14:46:37 +0300428 git fetch https://gerrit.mcp.mirantis.net/salt-formulas/linux refs/changes/54/2354/15 && git checkout FETCH_HEAD;
Dennis Dmitriev9dada8a2017-08-30 17:38:55 +0300429 cp -f linux/network/interface.sls /srv/salt/env/prd/linux/network/;
430 cp -f linux/map.jinja /srv/salt/env/prd/linux/;"
431 node_name: {{ HOSTNAME_CFG01 }}
432 retry: {count: 1, delay: 5}
433 skip_fail: false
434
435- description: '*Workaround: Load bonding module before call state.linux'
436 cmd: salt -C "I@linux:network:interface:*:type:bond" cmd.run 'modprobe bonding'
437 node_name: {{ HOSTNAME_CFG01 }}
438 retry: {count: 1, delay: 5}
439 skip_fail: false
440
441- description: '*Workaround* install bridge-utils before running linux formula'
442 # The formula removes default route and then tries to install the package, fails.
443 cmd: salt --hard-crash --state-output=mixed --state-verbose=False -C '* and not
444 cfg01*' cmd.run 'sudo apt-get install -y bridge-utils'
445 node_name: {{ HOSTNAME_CFG01 }}
446 retry: {count: 1, delay: 5}
447 skip_fail: false
448
449{%- endmacro %}