forked from suse-edge/Factory
Marco Chiappero
5bf3812659
Update some URLs to leverage HTTPs whenever VMEDIA_TLS_PORT is set. Signed-off-by: Marco Chiappero <marco.chiappero@suse.com>
116 lines
4.0 KiB
Bash
Executable File
116 lines
4.0 KiB
Bash
Executable File
#!/usr/bin/bash
|
|
|
|
set -euxo pipefail
|
|
|
|
IRONIC_EXTERNAL_IP="${IRONIC_EXTERNAL_IP:-}"
|
|
export VMEDIA_TLS_PORT="${VMEDIA_TLS_PORT:-}"
|
|
|
|
# Define the VLAN interfaces to be included in introspection report, e.g.
|
|
# all - all VLANs on all interfaces using LLDP information
|
|
# <interface> - all VLANs on a particular interface using LLDP information
|
|
# <interface.vlan> - a particular VLAN on an interface, not relying on LLDP
|
|
export IRONIC_ENABLE_VLAN_INTERFACES=${IRONIC_ENABLE_VLAN_INTERFACES:-${IRONIC_INSPECTOR_VLAN_INTERFACES:-all}}
|
|
|
|
# shellcheck disable=SC1091
|
|
. /bin/tls-common.sh
|
|
# shellcheck disable=SC1091
|
|
. /bin/ironic-common.sh
|
|
# shellcheck disable=SC1091
|
|
. /bin/auth-common.sh
|
|
|
|
export HTTP_PORT=${HTTP_PORT:-80}
|
|
|
|
if [[ "${IRONIC_USE_MARIADB}" == true ]]; then
|
|
if [[ -z "${MARIADB_PASSWORD:-}" ]]; then
|
|
echo "FATAL: IRONIC_USE_MARIADB requires password, mount a secret under /auth/mariadb"
|
|
exit 1
|
|
fi
|
|
MARIADB_DATABASE=${MARIADB_DATABASE:-ironic}
|
|
MARIADB_USER=${MARIADB_USER:-ironic}
|
|
MARIADB_HOST=${MARIADB_HOST:-127.0.0.1}
|
|
export MARIADB_CONNECTION="mysql+pymysql://${MARIADB_USER}:${MARIADB_PASSWORD}@${MARIADB_HOST}/${MARIADB_DATABASE}?charset=utf8"
|
|
if [[ "$MARIADB_TLS_ENABLED" == "true" ]]; then
|
|
export MARIADB_CONNECTION="${MARIADB_CONNECTION}&ssl=on&ssl_ca=${MARIADB_CACERT_FILE}"
|
|
fi
|
|
fi
|
|
|
|
# zero makes it do cpu number detection on Ironic side
|
|
export NUMWORKERS=${NUMWORKERS:-0}
|
|
|
|
|
|
# Whether to enable fast_track provisioning or not
|
|
export IRONIC_FAST_TRACK=${IRONIC_FAST_TRACK:-true}
|
|
|
|
# Whether cleaning disks before and after deployment
|
|
export IRONIC_AUTOMATED_CLEAN=${IRONIC_AUTOMATED_CLEAN:-true}
|
|
|
|
# Wheter to enable the sensor data collection
|
|
export SEND_SENSOR_DATA=${SEND_SENSOR_DATA:-false}
|
|
|
|
# Set of collectors that should be used with IPA inspection
|
|
export IRONIC_IPA_COLLECTORS=${IRONIC_IPA_COLLECTORS:-default,logs}
|
|
|
|
wait_for_interface_or_ip
|
|
|
|
if [[ "$(echo "$LISTEN_ALL_INTERFACES" | tr '[:upper:]' '[:lower:]')" == "true" ]]; then
|
|
export IRONIC_HOST_IP="::"
|
|
elif [[ -n "${ENABLE_IPV6}" ]]; then
|
|
export IRONIC_HOST_IP="$IRONIC_IPV6"
|
|
else
|
|
export IRONIC_HOST_IP="$IRONIC_IP"
|
|
fi
|
|
|
|
if [[ "${VMEDIA_TLS_PORT}" ]]; then
|
|
export IRONIC_HTTPS_VMEDIA_URL="https://${IRONIC_URL_HOST}:${VMEDIA_TLS_PORT}"
|
|
fi
|
|
|
|
# Hostname to use for the current conductor instance.
|
|
export IRONIC_CONDUCTOR_HOST=${IRONIC_CONDUCTOR_HOST:-${IRONIC_URL_HOST}}
|
|
|
|
if [[ -n "$IRONIC_EXTERNAL_IP" ]]; then
|
|
export IRONIC_EXTERNAL_CALLBACK_URL=${IRONIC_EXTERNAL_CALLBACK_URL:-"${IRONIC_SCHEME}://${IRONIC_EXTERNAL_IP}:${IRONIC_ACCESS_PORT}"}
|
|
if [[ "$IRONIC_VMEDIA_TLS_SETUP" == "true" ]]; then
|
|
export IRONIC_EXTERNAL_HTTP_URL=${IRONIC_EXTERNAL_HTTP_URL:-"https://${IRONIC_EXTERNAL_IP}:${VMEDIA_TLS_PORT}"}
|
|
else
|
|
export IRONIC_EXTERNAL_HTTP_URL=${IRONIC_EXTERNAL_HTTP_URL:-"http://${IRONIC_EXTERNAL_IP}:${HTTP_PORT}"}
|
|
fi
|
|
fi
|
|
|
|
IMAGE_CACHE_PREFIX="/shared/html/images/ironic-python-agent-${DEPLOY_ARCHITECTURE}"
|
|
if [[ -f "${IMAGE_CACHE_PREFIX}.kernel" ]] && [[ -f "${IMAGE_CACHE_PREFIX}.initramfs" ]]; then
|
|
export IRONIC_DEFAULT_KERNEL="${IMAGE_CACHE_PREFIX}.kernel"
|
|
export IRONIC_DEFAULT_RAMDISK="${IMAGE_CACHE_PREFIX}.initramfs"
|
|
fi
|
|
|
|
if [[ -f "${IRONIC_CONF_DIR}/ironic.conf" ]]; then
|
|
# Make a copy of the original supposed empty configuration file
|
|
cp "${IRONIC_CONF_DIR}/ironic.conf" "${IRONIC_CONF_DIR}/ironic.conf.orig"
|
|
fi
|
|
|
|
# oslo.config also supports Config Opts From Environment, log them to stdout
|
|
echo 'Options set from Environment variables'
|
|
env | grep "^OS_" || true
|
|
|
|
mkdir -p /shared/html
|
|
|
|
if [[ -f /proc/sys/crypto/fips_enabled ]]; then
|
|
ENABLE_FIPS_IPA=$(cat /proc/sys/crypto/fips_enabled)
|
|
export ENABLE_FIPS_IPA
|
|
fi
|
|
|
|
# The original ironic.conf is empty, and can be found in ironic.conf_orig
|
|
render_j2_config "/etc/ironic/ironic.conf.j2" \
|
|
"${IRONIC_CONF_DIR}/ironic.conf"
|
|
|
|
configure_json_rpc_auth
|
|
|
|
# Make sure ironic traffic bypasses any proxies
|
|
export NO_PROXY="${NO_PROXY:-}"
|
|
|
|
if [[ -n "$IRONIC_IPV6" ]]; then
|
|
export NO_PROXY="${NO_PROXY},${IRONIC_IPV6}"
|
|
fi
|
|
if [[ -n "$IRONIC_IP" ]]; then
|
|
export NO_PROXY="${NO_PROXY},${IRONIC_IP}"
|
|
fi
|