| /** |
| * Update packages on given nodes |
| * |
| * Expected parameters: |
| * SALT_MASTER_CREDENTIALS Credentials to the Salt API. |
| * SALT_MASTER_URL Full Salt API address [http://10.10.10.1:8000]. |
| * STAGE_TEST_UPGRADE Run test upgrade stage (bool) |
| * STAGE_REAL_UPGRADE Run real upgrade stage (bool) |
| * STAGE_ROLLBACK_UPGRADE Run rollback upgrade stage (bool) |
| * |
| **/ |
| |
| def common = new com.mirantis.mk.Common() |
| def salt = new com.mirantis.mk.Salt() |
| |
| |
| def saltMaster |
| |
| timestamps { |
| node() { |
| |
| stage('Connect to Salt API') { |
| saltMaster = salt.connection(SALT_MASTER_URL, SALT_MASTER_CREDENTIALS) |
| } |
| |
| if (STAGE_TEST_UPGRADE.toBoolean() == true) { |
| stage('Test upgrade') { |
| |
| //salt.enforceState(saltMaster, 'I@salt:master', 'reclass') |
| |
| // salt.runSaltProcessStep(saltMaster, '*', 'saltutil.refresh_pillar', [], null, true) |
| // salt '*' saltutil.sync_all |
| // salt.runSaltProcessStep(saltMaster, '*', 'saltutil.sync_all', [], null, true) |
| |
| |
| def _pillar = salt.getGrain(saltMaster, 'I@salt:master', 'domain') |
| def domain = _pillar['return'][0].values()[0].values()[0] |
| print(_pillar) |
| print(domain) |
| |
| // read backupninja variable |
| _pillar = salt.getPillar(saltMaster, 'I@backupninja:client', '_param:backupninja_backup_host') |
| def backupninja_backup_host = _pillar['return'][0].values()[0] |
| print(_pillar) |
| print(backupninja_backup_host) |
| |
| _pillar = salt.getGrain(saltMaster, 'I@salt:control', 'id') |
| def kvm01 = _pillar['return'][0].values()[0].values()[0] |
| def kvm03 = _pillar['return'][0].values()[2].values()[0] |
| def kvm02 = _pillar['return'][0].values()[1].values()[0] |
| print(_pillar) |
| print(kvm01) |
| print(kvm02) |
| print(kvm03) |
| |
| _pillar = salt.getPillar(saltMaster, "${kvm01}", 'salt:control:cluster:internal:node:upg01:provider') |
| def upgNodeProvider = _pillar['return'][0].values()[0] |
| print(_pillar) |
| print(upgNodeProvider) |
| |
| |
| salt.runSaltProcessStep(saltMaster, "${upgNodeProvider}", 'virt.destroy', ["upg01.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${upgNodeProvider}", 'virt.undefine', ["upg01.${domain}"], null, true) |
| |
| |
| try { |
| ssalt.cmdRun(saltMaster, 'I@salt:master', "salt-key -d upg01.${domain} -y") |
| } catch (Exception e) { |
| common.warningMsg('does not match any accepted, unaccepted or rejected keys. The key did not exist yet or was already removed. We should continue to run') |
| } |
| |
| |
| // salt 'kvm02*' state.sls salt.control |
| salt.enforceState(saltMaster, "${upgNodeProvider}", 'salt.control') |
| |
| sleep(60) |
| |
| // salt '*' saltutil.refresh_pillar |
| salt.runSaltProcessStep(saltMaster, 'upg*', 'saltutil.refresh_pillar', [], null, true) |
| // salt '*' saltutil.sync_all |
| salt.runSaltProcessStep(saltMaster, 'upg*', 'saltutil.sync_all', [], null, true) |
| |
| // salt "upg*" state.sls linux,openssh,salt.minion,ntp,rsyslog |
| try { |
| salt.enforceState(saltMaster, 'upg*', ['linux', 'openssh', 'salt.minion', 'ntp', 'rsyslog']) |
| } catch (Exception e) { |
| common.warningMsg('Received no response because salt-minion was restarted. We should continue to run') |
| } |
| salt.enforceState(saltMaster, 'upg*', ['linux', 'openssh', 'salt.minion', 'ntp', 'rsyslog']) |
| |
| // salt "upg*" state.sls rabbitmq |
| salt.enforceState(saltMaster, 'upg*', ['rabbitmq', 'memcached']) |
| try { |
| salt.enforceState(saltMaster, 'I@backupninja:client', ['openssh.client', 'salt.minion']) |
| } catch (Exception e) { |
| common.warningMsg('salt-minion was restarted. We should continue to run') |
| } |
| try { |
| salt.enforceState(saltMaster, 'I@backupninja:server', ['salt.minion']) |
| } catch (Exception e) { |
| common.warningMsg('salt-minion was restarted. We should continue to run') |
| } |
| // salt '*' state.apply salt.minion.grains |
| //salt.enforceState(saltMaster, '*', 'salt.minion.grains') |
| // salt -C 'I@backupninja:server' state.sls backupninja |
| salt.enforceState(saltMaster, 'I@backupninja:server', 'backupninja') |
| // salt -C 'I@backupninja:client' state.sls backupninja |
| salt.enforceState(saltMaster, 'I@backupninja:client', 'backupninja') |
| salt.runSaltProcessStep(saltMaster, 'I@backupninja:client', 'ssh.rm_known_host', ["root", "${backupninja_backup_host}"], null, true) |
| salt.cmdRun(saltMaster, 'I@backupninja:client', "arp -d ${backupninja_backup_host}") |
| salt.runSaltProcessStep(saltMaster, 'I@backupninja:client', 'ssh.set_known_host', ["root", "${backupninja_backup_host}"], null, true) |
| salt.cmdRun(saltMaster, 'I@backupninja:client', 'backupninja -n --run /etc/backup.d/101.mysql') |
| salt.cmdRun(saltMaster, 'I@backupninja:client', 'backupninja -n --run /etc/backup.d/200.backup.rsync') |
| |
| |
| def databases = salt.cmdRun(saltMaster, 'I@mysql:client','salt-call mysql.db_list | grep upgrade | awk \'/-/ {print \$2}\'') |
| if(databases && databases != ""){ |
| def databasesList = databases['return'][0].values()[0].trim().tokenize("\n") |
| for( i = 0; i < databasesList.size(); i++){ |
| if(databasesList[i].toLowerCase().contains('upgrade')){ |
| salt.runSaltProcessStep(saltMaster, 'I@mysql:client', 'mysql.db_remove', ["${databasesList[i]}"], null, true) |
| common.warningMsg("removing database ${databasesList[i]}") |
| salt.runSaltProcessStep(saltMaster, 'I@mysql:client', 'file.remove', ["/root/mysql/flags/${databasesList[i]}-installed"], null, true) |
| } |
| } |
| }else{ |
| common.errorMsg("No _upgrade databases were returned") |
| } |
| |
| salt.enforceState(saltMaster, 'I@mysql:client', 'mysql.client') |
| |
| try { |
| salt.enforceState(saltMaster, 'upg*', 'keystone.server') |
| } catch (Exception e) { |
| salt.runSaltProcessStep(saltMaster, 'upg*', 'service.reload', ['apache2'], null, true) |
| common.warningMsg('reload of apache2. We should continue to run') |
| } |
| salt.enforceState(saltMaster, 'upg*', ['keystone.client', 'glance', 'keystone.server']) |
| salt.enforceState(saltMaster, 'upg*', 'nova') |
| salt.enforceState(saltMaster, 'upg*', ['cinder', 'neutron', 'heat']) |
| |
| salt.cmdRun(saltMaster, 'upg01*', '. /root/keystonercv3; openstack service list; openstack image list; openstack flavor list; openstack compute service list; openstack server list; openstack network list; openstack volume list; openstack orchestration service list') |
| } |
| } |
| |
| if (STAGE_TEST_UPGRADE.toBoolean() == true && STAGE_REAL_UPGRADE.toBoolean() == true) { |
| stage('Ask for manual confirmation') { |
| input message: "Do you want to continue with upgrade?" |
| } |
| } |
| |
| |
| if (STAGE_REAL_UPGRADE.toBoolean() == true) { |
| stage('Real upgrade') { |
| // # actual upgrade |
| |
| _pillar = salt.getPillar(saltMaster, "${kvm01}", 'salt:control:cluster:internal:node:ctl01:provider') |
| def ctl01NodeProvider = _pillar['return'][0].values()[0] |
| |
| _pillar = salt.getPillar(saltMaster, "${kvm01}", 'salt:control:cluster:internal:node:ctl02:provider') |
| def ctl02NodeProvider = _pillar['return'][0].values()[0] |
| |
| _pillar = salt.getPillar(saltMaster, "${kvm01}", 'salt:control:cluster:internal:node:ctl03:provider') |
| def ctl03NodeProvider = _pillar['return'][0].values()[0] |
| |
| _pillar = salt.getPillar(saltMaster, "${kvm01}", 'salt:control:cluster:internal:node:prx01:provider') |
| def prx01NodeProvider = _pillar['return'][0].values()[0] |
| |
| _pillar = salt.getPillar(saltMaster, "${kvm01}", 'salt:control:cluster:internal:node:prx02:provider') |
| def prx02NodeProvider = _pillar['return'][0].values()[0] |
| |
| |
| salt.runSaltProcessStep(saltMaster, "${prx01NodeProvider}", 'virt.destroy', ["prx01.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${prx02NodeProvider}", 'virt.destroy', ["prx02.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl01NodeProvider}", 'virt.destroy', ["ctl01.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl02NodeProvider}", 'virt.destroy', ["ctl02.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl03NodeProvider}", 'virt.destroy', ["ctl03.${domain}"], null, true) |
| |
| |
| try { |
| salt.cmdRun(saltMaster, "${prx01NodeProvider}", "[ ! -f /root/prx01.${domain}.qcow2.bak ] && cp /var/lib/libvirt/images/prx01.${domain}/system.qcow2 ./prx01.${domain}.qcow2.bak") |
| } catch (Exception e) { |
| common.warningMsg('File already exists') |
| } |
| try { |
| salt.cmdRun(saltMaster, "${prx02NodeProvider}", "[ ! -f /root/prx02.${domain}.qcow2.bak ] && cp /var/lib/libvirt/images/prx02.${domain}/system.qcow2 ./prx02.${domain}.qcow2.bak") |
| } catch (Exception e) { |
| common.warningMsg('File already exists') |
| } |
| try { |
| salt.cmdRun(saltMaster, "${ctl01NodeProvider}", "[ ! -f /root/ctl01.${domain}.qcow2.bak ] && cp /var/lib/libvirt/images/ctl01.${domain}/system.qcow2 ./ctl01.${domain}.qcow2.bak") |
| } catch (Exception e) { |
| common.warningMsg('File already exists') |
| } |
| try { |
| salt.cmdRun(saltMaster, "${ctl02NodeProvider}", "[ ! -f /root/ctl02.${domain}.qcow2.bak ] && cp /var/lib/libvirt/images/ctl02.${domain}/system.qcow2 ./ctl02.${domain}.qcow2.bak") |
| } catch (Exception e) { |
| common.warningMsg('File already exists') |
| } |
| try { |
| salt.cmdRun(saltMaster, "${ctl03NodeProvider}", "[ ! -f /root/ctl03.${domain}.qcow2.bak ] && cp /var/lib/libvirt/images/ctl03.${domain}/system.qcow2 ./ctl03.${domain}.qcow2.bak") |
| } catch (Exception e) { |
| common.warningMsg('File already exists') |
| } |
| |
| |
| salt.runSaltProcessStep(saltMaster, "${prx01NodeProvider}", 'virt.undefine', ["prx01.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${prx02NodeProvider}", 'virt.undefine', ["prx02.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl01NodeProvider}", 'virt.undefine', ["ctl01.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl02NodeProvider}", 'virt.undefine', ["ctl02.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl03NodeProvider}", 'virt.undefine', ["ctl03.${domain}"], null, true) |
| |
| |
| salt.cmdRun(saltMaster, 'I@backupninja:client', 'backupninja -n --run /etc/backup.d/101.mysql') |
| salt.cmdRun(saltMaster, 'I@backupninja:client', 'backupninja -n --run /etc/backup.d/200.backup.rsync') |
| |
| |
| try { |
| salt.cmdRun(saltMaster, 'I@salt:master', "salt-key -d ctl01.${domain},ctl02.${domain},ctl03.${domain},prx01.${domain},prx02.${domain} -y") |
| } catch (Exception e) { |
| common.warningMsg('does not match any accepted, unaccepted or rejected keys. They were probably already removed. We should continue to run') |
| } |
| |
| // salt 'kvm*' state.sls salt.control |
| salt.enforceState(saltMaster, 'I@salt:control', 'salt.control') |
| |
| sleep(60) |
| |
| // salt '*' saltutil.refresh_pillar |
| salt.runSaltProcessStep(saltMaster, '*', 'saltutil.refresh_pillar', [], null, true) |
| // salt '*' saltutil.sync_all |
| salt.runSaltProcessStep(saltMaster, '*', 'saltutil.sync_all', [], null, true) |
| |
| try { |
| salt.enforceState(saltMaster, 'ctl* or prx* or ctl*', ['linux', 'openssh', 'salt.minion', 'ntp', 'rsyslog']) |
| } catch (Exception e) { |
| common.warningMsg('Received no response because salt-minion was restarted. We should continue to run') |
| } |
| salt.enforceState(saltMaster, 'ctl* or prx* or ctl*', ['linux', 'openssh', 'salt.minion', 'ntp', 'rsyslog']) |
| |
| // salt 'ctl*' state.sls keepalived |
| // salt 'ctl*' state.sls haproxy |
| salt.enforceState(saltMaster, 'ctl*', ['keepalived', 'haproxy']) |
| // salt 'ctl*' service.restart rsyslog |
| salt.runSaltProcessStep(saltMaster, 'ctl*', 'service.restart', ['rsyslog'], null, true) |
| // salt "ctl*" state.sls memcached |
| // salt "ctl*" state.sls keystone.server |
| try { |
| salt.enforceState(saltMaster, 'ctl*', ['memcached', 'keystone.server']) |
| } catch (Exception e) { |
| salt.runSaltProcessStep(saltMaster, 'ctl*', 'service.reload', ['apache2'], null, true) |
| common.warningMsg('reload of apache2. We should continue to run') |
| } |
| // salt 'ctl01*' state.sls keystone.client |
| salt.enforceState(saltMaster, 'I@keystone:client and ctl*', 'keystone.client') |
| // salt 'ctl*' state.sls glance |
| salt.enforceState(saltMaster, 'ctl*', 'glance') |
| // salt 'ctl*' state.sls glusterfs.client |
| salt.enforceState(saltMaster, 'ctl*', 'glusterfs.client') |
| // salt 'ctl*' state.sls keystone.server |
| salt.enforceState(saltMaster, 'ctl*', 'keystone.server') |
| // salt 'ctl*' state.sls nova |
| salt.enforceState(saltMaster, 'ctl*', 'nova') |
| // salt 'ctl*' state.sls cinder |
| salt.enforceState(saltMaster, 'ctl*', 'cinder') |
| // salt 'ctl*' state.sls neutron |
| salt.enforceState(saltMaster, 'ctl*', 'neutron') |
| // salt 'ctl*' state.sls heat |
| salt.enforceState(saltMaster, 'ctl*', 'heat') |
| |
| // salt 'cmp*' cmd.run 'service nova-compute restart' |
| salt.runSaltProcessStep(saltMaster, 'cmp*', 'service.restart', ['nova-compute'], null, true) |
| |
| // salt 'prx*' state.sls linux,openssh,salt.minion,ntp,rsyslog - TODO: proč? už to jednou projelo |
| // salt 'ctl*' state.sls keepalived |
| // salt 'prx*' state.sls keepalived |
| salt.enforceState(saltMaster, 'prx*', 'keepalived') |
| // salt 'prx*' state.sls horizon |
| salt.enforceState(saltMaster, 'prx*', 'horizon') |
| // salt 'prx*' state.sls nginx |
| salt.enforceState(saltMaster, 'prx*', 'nginx') |
| |
| salt.cmdRun(saltMaster, 'ctl01*', '. /root/keystonercv3; openstack service list; openstack image list; openstack flavor list; openstack compute service list; openstack server list; openstack network list; openstack volume list; openstack orchestration service list') |
| } |
| |
| } |
| |
| |
| if (STAGE_REAL_UPGRADE.toBoolean() == true && STAGE_ROLLBACK_UPGRADE.toBoolean() == true) { |
| stage('Ask for manual confirmation') { |
| input message: "Please verify that control upgrade was successful. If it did not succeed, in the worst scenario, you can click YES to continue with control-upgrade-rollback. Do you want to continue with the rollback?" |
| } |
| stage('Ask for manual confirmation') { |
| input message: "Do you really want to continue with the rollback?" |
| } |
| } |
| |
| if (STAGE_ROLLBACK_UPGRADE.toBoolean() == true) { |
| stage('Rollback upgrade') { |
| |
| salt.runSaltProcessStep(saltMaster, "${prx01NodeProvider}", 'virt.destroy', ["prx01.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${prx02NodeProvider}", 'virt.destroy', ["prx02.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl01NodeProvider}", 'virt.destroy', ["ctl01.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl02NodeProvider}", 'virt.destroy', ["ctl02.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl03NodeProvider}", 'virt.destroy', ["ctl03.${domain}"], null, true) |
| |
| salt.runSaltProcessStep(saltMaster, "${prx01NodeProvider}", 'file.copy', ["/root/prx01.${domain}.qcow2.bak", "/var/lib/libvirt/images/prx01.${domain}/system.qcow2"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${prx02NodeProvider}", 'file.copy', ["/root/prx02.${domain}.qcow2.bak", "/var/lib/libvirt/images/prx02.${domain}/system.qcow2"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl01NodeProvider}", 'file.copy', ["/root/ctl01.${domain}.qcow2.bak", "/var/lib/libvirt/images/ctl01.${domain}/system.qcow2"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl02NodeProvider}", 'file.copy', ["/root/ctl02.${domain}.qcow2.bak", "/var/lib/libvirt/images/ctl02.${domain}/system.qcow2"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl03NodeProvider}", 'file.copy', ["/root/ctl03.${domain}.qcow2.bak", "/var/lib/libvirt/images/ctl03.${domain}/system.qcow2"], null, true) |
| |
| try { |
| salt.cmdRun(saltMaster, 'I@salt:master', "salt-key -d ctl01.${domain},ctl02.${domain},ctl03.${domain},prx01.${domain},prx02.${domain} -y") |
| } catch (Exception e) { |
| common.warningMsg('does not match any accepted, unaccepted or rejected keys. They were probably already removed. We should continue to run') |
| } |
| |
| databases = salt.cmdRun(saltMaster, 'I@mysql:client','salt-call mysql.db_list | grep -v \'upgrade\' | grep -v \'schema\' | awk \'/-/ {print \$2}\'') |
| if(databases && databases != ""){ |
| databasesList = databases['return'][0].values()[0].trim().tokenize("\n") |
| for( i = 0; i < databasesList.size(); i++){ |
| if(!databasesList[i].toLowerCase().contains('upgrade') && !databasesList[i].toLowerCase().contains('command execution')){ |
| salt.runSaltProcessStep(saltMaster, 'I@mysql:client', 'mysql.db_remove', ["${databasesList[i]}"], null, true) |
| common.warningMsg("removing database ${databasesList[i]}") |
| salt.runSaltProcessStep(saltMaster, 'I@mysql:client', 'file.remove', ["/root/mysql/flags/${databasesList[i]}-installed"], null, true) |
| } |
| } |
| }else{ |
| common.errorMsg("No none _upgrade databases were returned") |
| } |
| |
| salt.enforceState(saltMaster, 'I@mysql:client', 'mysql.client') |
| |
| salt.runSaltProcessStep(saltMaster, "${prx01NodeProvider}", 'virt.start', ["prx01.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${prx02NodeProvider}", 'virt.start', ["prx02.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl01NodeProvider}", 'virt.start', ["ctl01.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl02NodeProvider}", 'virt.start', ["ctl02.${domain}"], null, true) |
| salt.runSaltProcessStep(saltMaster, "${ctl03NodeProvider}", 'virt.start', ["ctl03.${domain}"], null, true) |
| |
| // salt 'cmp*' cmd.run 'service nova-compute restart' |
| salt.runSaltProcessStep(saltMaster, 'cmp*', 'service.restart', ['nova-compute'], null, true) |
| |
| sleep(60) |
| |
| salt.cmdRun(saltMaster, 'ctl01*', '. /root/keystonerc; nova service-list; glance image-list; nova flavor-list; nova hypervisor-list; nova list; neutron net-list; cinder list; heat service-list') |
| } |
| } |
| } |
| } |