#!/usr/bin/env bash # Copyright 2021 The Rook Authors. All rights reserved. # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. set -xe ############# # VARIABLES # ############# : "${BLOCK:=$(sudo lsblk --paths | awk '/14G/ {print $1}' | head -1)}" NETWORK_ERROR="connection reset by peer" SERVICE_UNAVAILABLE_ERROR="Service Unavailable" INTERNAL_ERROR="INTERNAL_ERROR" ############# # FUNCTIONS # ############# function install_deps() { sudo wget https://github.com/mikefarah/yq/releases/download/3.4.1/yq_linux_amd64 -O /usr/local/bin/yq sudo chmod +x /usr/local/bin/yq } function print_k8s_cluster_status() { kubectl cluster-info kubectl get pods -n kube-system } function use_local_disk() { BLOCK_DATA_PART=${BLOCK}1 sudo dmsetup version || true sudo swapoff --all --verbose if mountpoint -q /mnt; then sudo umount /mnt # search for the device since it keeps changing between sda and sdb sudo wipefs --all --force "$BLOCK_DATA_PART" else # it's the hosted runner! sudo sgdisk --zap-all --clear --mbrtogpt -g -- "${BLOCK}" sudo dd if=/dev/zero of="${BLOCK}" bs=1M count=10 oflag=direct sudo parted -s "${BLOCK}" mklabel gpt fi sudo lsblk } function use_local_disk_for_integration_test() { sudo swapoff --all --verbose sudo umount /mnt # search for the device since it keeps changing between sda and sdb PARTITION="${BLOCK}1" sudo wipefs --all --force "$PARTITION" sudo lsblk # add a udev rule to force the disk partitions to ceph # we have observed that some runners keep detaching/re-attaching the additional disk overriding the permissions to the default root:disk # for more details see: https://github.com/rook/rook/issues/7405 echo "SUBSYSTEM==\"block\", ATTR{size}==\"29356032\", ACTION==\"add\", RUN+=\"/bin/chown 167:167 $PARTITION\"" | sudo tee -a /etc/udev/rules.d/01-rook.rules } function create_partitions_for_osds() { tests/scripts/create-bluestore-partitions.sh --disk "$BLOCK" --osd-count 2 sudo lsblk } function create_bluestore_partitions_and_pvcs() { BLOCK_PART="$BLOCK"2 DB_PART="$BLOCK"1 tests/scripts/create-bluestore-partitions.sh --disk "$BLOCK" --bluestore-type block.db --osd-count 1 tests/scripts/localPathPV.sh "$BLOCK_PART" "$DB_PART" } function create_bluestore_partitions_and_pvcs_for_wal(){ BLOCK_PART="$BLOCK"3 DB_PART="$BLOCK"1 WAL_PART="$BLOCK"2 tests/scripts/create-bluestore-partitions.sh --disk "$BLOCK" --bluestore-type block.wal --osd-count 1 tests/scripts/localPathPV.sh "$BLOCK_PART" "$DB_PART" "$WAL_PART" } function build_rook() { build_type=build if [ -n "$1" ]; then build_type=$1 fi GOPATH=$(go env GOPATH) make clean for _ in $(seq 1 3); do if ! o=$(make -j"$(nproc)" IMAGES='ceph' "$build_type"); then case "$o" in *"$NETWORK_ERROR"*) echo "network failure occurred, retrying..." continue ;; *"$SERVICE_UNAVAILABLE_ERROR"*) echo "network failure occurred, retrying..." continue ;; *"$INTERNAL_ERROR"*) echo "network failure occurred, retrying..." continue ;; *) # valid failure exit 1 esac fi # no errors so we break the loop after the first iteration break done # validate build tests/scripts/validate_modified_files.sh build docker images if [[ "$build_type" == "build" ]]; then docker tag "$(docker images | awk '/build-/ {print $1}')" rook/ceph:master fi } function build_rook_all() { build_rook build.all } function validate_yaml() { cd cluster/examples/kubernetes/ceph kubectl create -f crds.yaml -f common.yaml # skipping folders and some yamls that are only for openshift. manifests="$(find . -maxdepth 1 -type f -name '*.yaml' -and -not -name '*openshift*' -and -not -name 'scc*')" with_f_arg="$(echo "$manifests" | awk '{printf " -f %s",$1}')" # don't add newline # shellcheck disable=SC2086 # '-f manifest1.yaml -f manifest2.yaml etc.' should not be quoted kubectl create ${with_f_arg} --dry-run=client } function create_cluster_prerequisites() { cd cluster/examples/kubernetes/ceph kubectl create -f crds.yaml -f common.yaml } function deploy_cluster() { cd cluster/examples/kubernetes/ceph kubectl create -f operator.yaml sed -i "s|#deviceFilter:|deviceFilter: ${BLOCK/\/dev\/}|g" cluster-test.yaml kubectl create -f cluster-test.yaml kubectl create -f object-test.yaml kubectl create -f pool-test.yaml kubectl create -f filesystem-test.yaml kubectl create -f rbdmirror.yaml kubectl create -f filesystem-mirror.yaml kubectl create -f nfs-test.yaml kubectl create -f toolbox.yaml } function wait_for_prepare_pod() { timeout 180 bash <<-'EOF' while true; do if [[ "$(kubectl -n rook-ceph get pod -l app=rook-ceph-osd-prepare --field-selector=status.phase=Running)" -gt 1 ]]; then break fi sleep 5 done kubectl -n rook-ceph logs --follow pod/$(kubectl -n rook-ceph get pod -l app=rook-ceph-osd-prepare -o jsonpath='{.items[0].metadata.name}') EOF timeout 60 bash <<-'EOF' until kubectl -n rook-ceph logs $(kubectl -n rook-ceph get pod -l app=rook-ceph-osd,ceph_daemon_id=0 -o jsonpath='{.items[*].metadata.name}') --all-containers || true; do echo "waiting for osd container" sleep 1 done EOF kubectl -n rook-ceph describe job/"$(kubectl -n rook-ceph get pod -l app=rook-ceph-osd-prepare -o jsonpath='{.items[*].metadata.name}')" || true kubectl -n rook-ceph describe deploy/rook-ceph-osd-0 || true } function wait_for_ceph_to_be_ready() { DAEMONS=$1 OSD_COUNT=$2 mkdir test tests/scripts/validate_cluster.sh "$DAEMONS" "$OSD_COUNT" kubectl -n rook-ceph get pods } function check_ownerreferences() { curl -L https://github.com/kubernetes-sigs/kubectl-check-ownerreferences/releases/download/v0.2.0/kubectl-check-ownerreferences-linux-amd64.tar.gz -o kubectl-check-ownerreferences-linux-amd64.tar.gz tar xzvf kubectl-check-ownerreferences-linux-amd64.tar.gz chmod +x kubectl-check-ownerreferences ./kubectl-check-ownerreferences -n rook-ceph } function create_LV_on_disk() { sudo sgdisk --zap-all "${BLOCK}" VG=test-rook-vg LV=test-rook-lv sudo pvcreate "$BLOCK" sudo vgcreate "$VG" "$BLOCK" || sudo vgcreate "$VG" "$BLOCK" || sudo vgcreate "$VG" "$BLOCK" sudo lvcreate -l 100%FREE -n "${LV}" "${VG}" tests/scripts/localPathPV.sh /dev/"${VG}"/${LV} kubectl create -f cluster/examples/kubernetes/ceph/crds.yaml kubectl create -f cluster/examples/kubernetes/ceph/common.yaml } function deploy_first_rook_cluster() { BLOCK=$(sudo lsblk|awk '/14G/ {print $1}'| head -1) cd cluster/examples/kubernetes/ceph/ kubectl create -f crds.yaml -f common.yaml -f operator.yaml yq w -i -d1 cluster-test.yaml spec.dashboard.enabled false yq w -i -d1 cluster-test.yaml spec.storage.useAllDevices false yq w -i -d1 cluster-test.yaml spec.storage.deviceFilter "${BLOCK}"1 kubectl create -f cluster-test.yaml -f toolbox.yaml } function wait_for_rgw_pods() { for _ in {1..120}; do if [ "$(kubectl -n "$1" get pod -l app=rook-ceph-rgw --field-selector=status.phase=Running|wc -l)" -gt 1 ] ; then echo "rgw pods found" break fi echo "waiting for rgw pods" sleep 5; done } function deploy_second_rook_cluster() { BLOCK=$(sudo lsblk|awk '/14G/ {print $1}'| head -1) cd cluster/examples/kubernetes/ceph/ NAMESPACE=rook-ceph-secondary envsubst < common-second-cluster.yaml | kubectl create -f - sed -i 's/namespace: rook-ceph/namespace: rook-ceph-secondary/g' cluster-test.yaml yq w -i -d1 cluster-test.yaml spec.storage.deviceFilter "${BLOCK}"2 yq w -i -d1 cluster-test.yaml spec.dataDirHostPath "/var/lib/rook-external" yq w -i toolbox.yaml metadata.namespace rook-ceph-secondary kubectl create -f cluster-test.yaml -f toolbox.yaml } function write_object_to_cluster1_read_from_cluster2() { cd cluster/examples/kubernetes/ceph/ echo "[default]" > s3cfg echo "host_bucket = no.way.in.hell" >> ./s3cfg echo "use_https = False" >> ./s3cfg fallocate -l 1M ./1M.dat echo "hello world" >> ./1M.dat CLUSTER_1_IP_ADDR=$(kubectl -n rook-ceph get svc rook-ceph-rgw-multisite-store -o jsonpath="{.spec.clusterIP}") BASE64_ACCESS_KEY=$(kubectl -n rook-ceph get secrets realm-a-keys -o jsonpath="{.data.access-key}") BASE64_SECRET_KEY=$(kubectl -n rook-ceph get secrets realm-a-keys -o jsonpath="{.data.secret-key}") ACCESS_KEY=$(echo ${BASE64_ACCESS_KEY} | base64 --decode) SECRET_KEY=$(echo ${BASE64_SECRET_KEY} | base64 --decode) s3cmd -v -d --config=s3cfg --access_key=${ACCESS_KEY} --secret_key=${SECRET_KEY} --host=${CLUSTER_1_IP_ADDR} mb s3://bkt s3cmd -v -d --config=s3cfg --access_key=${ACCESS_KEY} --secret_key=${SECRET_KEY} --host=${CLUSTER_1_IP_ADDR} put ./1M.dat s3://bkt CLUSTER_2_IP_ADDR=$(kubectl -n rook-ceph-secondary get svc rook-ceph-rgw-zone-b-multisite-store -o jsonpath="{.spec.clusterIP}") timeout 60 bash <&2 exit 1 fi