369 lines
16 KiB
Python
369 lines
16 KiB
Python
"""Example for Cloud Computing Course Master AI / GSD"""
|
|
|
|
# This script demonstrates how to use libcloud to start an instance in an OpenStack environment.
|
|
# The script will start multiple instances splitting up the faafo monolithic application into
|
|
# a microservice architecture with scalable api (controller) and worker instances using a
|
|
# message queue and a database
|
|
|
|
# Needed if the password should be prompted for:
|
|
# import getpass
|
|
import os
|
|
import sys
|
|
import time
|
|
|
|
from libcloud.compute.providers import get_driver
|
|
from libcloud.compute.types import Provider
|
|
|
|
# For our new Charmed OpenStack private cloud, we need to specify the path to the root
|
|
# CA certificate
|
|
import libcloud.security
|
|
libcloud.security.CA_CERTS_PATH = ['./root-ca.crt']
|
|
# Disable SSL certificate verification (not recommended for production)
|
|
# libcloud.security.VERIFY_SSL_CERT = False
|
|
|
|
# Please use 1-29 as environment variable GROUP_NUMBER to specify your group number.
|
|
# (will be used for the username, project etc., as coordinated in the lab sessions)
|
|
|
|
group_number = os.environ.get('GROUP_NUMBER')
|
|
if group_number is None:
|
|
sys.exit('Please set the GROUP_NUMBER environment variable to your group number,\n'
|
|
'e.g., on Windows:\n'
|
|
' "$env:GROUP_NUMBER=0" or "set GROUP_NUMBER=0"\n'
|
|
'or on Linux/MacOS:\n'
|
|
' "export GROUP_NUMBER=0" or "set GROUP_NUMBER=0"')
|
|
|
|
|
|
# web service endpoint of the private cloud infrastructure
|
|
# auth_url = 'https://private-cloud.informatik.hs-fulda.de:5000'
|
|
AUTH_URL = 'https://10.32.4.182:5000'
|
|
# auth_url = 'https://private-cloud2.informatik.hs-fulda.de:5000'
|
|
# your username in OpenStack
|
|
AUTH_USERNAME = 'CloudComp' + str(group_number)
|
|
print(f'Using username: {AUTH_USERNAME}\n')
|
|
# your project in OpenStack
|
|
PROJECT_NAME = 'CloudComp' + str(group_number)
|
|
# A network in the project the started instance will be attached to
|
|
PROJECT_NETWORK = 'CloudComp' + str(group_number) + '-net'
|
|
|
|
# The image to look for and use for the started instance
|
|
# ubuntu_image_name = "Ubuntu 18.04 - Bionic Beaver - 64-bit - Cloud Based Image"
|
|
#UBUNTU_IMAGE_NAME = "auto-sync/ubuntu-jammy-22.04-amd64-server-20240319-disk1.img"
|
|
UBUNTU_IMAGE_NAME = "ubuntu-22.04-jammy-x86_64"
|
|
|
|
# The public key to be used for SSH connection, please make sure, that you have the
|
|
# corresponding private key
|
|
#
|
|
# id_rsa.pub should look like this (standard sshd pubkey format):
|
|
# ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw+J...F3w2mleybgT1w== user@HOSTNAME
|
|
KEYPAIR_NAME = 'srieger-pub'
|
|
PUB_KEY_FILE = '~/.ssh/id_rsa.pub'
|
|
|
|
FLAVOR_NAME = 'm1.small'
|
|
|
|
|
|
# default region
|
|
REGION_NAME = 'RegionOne'
|
|
# domain to use, "default" for local accounts, formerly "hsfulda" for LDAP accounts etc.
|
|
# domain_name = "default"
|
|
|
|
|
|
def main(): # noqa: C901 pylint: disable=too-many-branches,too-many-statements,too-many-locals,missing-function-docstring
|
|
###########################################################################
|
|
#
|
|
# get credentials
|
|
#
|
|
###########################################################################
|
|
|
|
# if "OS_PASSWORD" in os.environ:
|
|
# auth_password = os.environ["OS_PASSWORD"]
|
|
# else:
|
|
# auth_password = getpass.getpass("Enter your OpenStack password:")
|
|
auth_password = "demo"
|
|
|
|
###########################################################################
|
|
#
|
|
# create connection
|
|
#
|
|
###########################################################################
|
|
|
|
provider = get_driver(Provider.OPENSTACK)
|
|
conn = provider(AUTH_USERNAME,
|
|
auth_password,
|
|
ex_force_auth_url=AUTH_URL,
|
|
ex_force_auth_version='3.x_password',
|
|
ex_tenant_name=PROJECT_NAME,
|
|
ex_force_service_region=REGION_NAME)
|
|
# ex_domain_name=domain_name)
|
|
|
|
###########################################################################
|
|
#
|
|
# get image, flavor, network for instance creation
|
|
#
|
|
###########################################################################
|
|
|
|
images = conn.list_images()
|
|
image = ''
|
|
for img in images:
|
|
if img.name == UBUNTU_IMAGE_NAME:
|
|
image = img
|
|
|
|
flavors = conn.list_sizes()
|
|
flavor = ''
|
|
for flav in flavors:
|
|
if flav.name == FLAVOR_NAME:
|
|
flavor = conn.ex_get_size(flav.id)
|
|
|
|
networks = conn.ex_list_networks()
|
|
network = ''
|
|
for net in networks:
|
|
if net.name == PROJECT_NETWORK:
|
|
network = net
|
|
|
|
###########################################################################
|
|
#
|
|
# create keypair dependency
|
|
#
|
|
###########################################################################
|
|
|
|
print('Checking for existing SSH key pair...')
|
|
keypair_exists = False
|
|
for keypair in conn.list_key_pairs():
|
|
if keypair.name == KEYPAIR_NAME:
|
|
keypair_exists = True
|
|
|
|
if keypair_exists:
|
|
print(('Keypair ' + KEYPAIR_NAME + ' already exists. Skipping import.'))
|
|
else:
|
|
print('adding keypair...')
|
|
conn.import_key_pair_from_file(KEYPAIR_NAME, PUB_KEY_FILE)
|
|
|
|
for keypair in conn.list_key_pairs():
|
|
print(keypair)
|
|
|
|
###########################################################################
|
|
#
|
|
# clean up resources from previous demos
|
|
#
|
|
###########################################################################
|
|
|
|
# destroy running demo instances
|
|
for instance in conn.list_nodes():
|
|
if instance.name in ['all-in-one', 'app-worker-1', 'app-worker-2',
|
|
'app-worker-3', 'app-controller',
|
|
'app-services', 'app-api-1', 'app-api-2']:
|
|
print(f'Destroying Instance: ${instance.name}')
|
|
conn.destroy_node(instance)
|
|
|
|
# wait until all nodes are destroyed to be able to remove depended security groups
|
|
nodes_still_running = True
|
|
while nodes_still_running:
|
|
nodes_still_running = False
|
|
time.sleep(3)
|
|
instances = conn.list_nodes()
|
|
for instance in instances:
|
|
# if we see any demo instances still running continue to wait for them to stop
|
|
if instance.name in ['all-in-one', 'app-worker-1', 'app-worker-2', 'app-controller']:
|
|
nodes_still_running = True
|
|
print('There are still instances running, waiting for them to be destroyed...')
|
|
|
|
# delete security groups
|
|
for group in conn.ex_list_security_groups():
|
|
if group.name in ['control', 'worker', 'api', 'services']:
|
|
print(f'Deleting security group: ${group.name}')
|
|
conn.ex_delete_security_group(group)
|
|
|
|
###########################################################################
|
|
#
|
|
# create security group dependency
|
|
#
|
|
###########################################################################
|
|
|
|
def get_security_group(connection, security_group_name):
|
|
"""A helper function to check if security group already exists"""
|
|
print(('Checking for existing ' + security_group_name + ' security group...'))
|
|
for security_grp in connection.ex_list_security_groups():
|
|
if security_grp.name == security_group_name:
|
|
print(('Security Group ' + security_group_name +
|
|
' already exists. Skipping creation.'))
|
|
return worker_security_group
|
|
return False
|
|
|
|
if not get_security_group(conn, "api"):
|
|
api_security_group = conn.ex_create_security_group('api', 'for API services only')
|
|
conn.ex_create_security_group_rule(api_security_group, 'TCP', 80, 80)
|
|
conn.ex_create_security_group_rule(api_security_group, 'TCP', 22, 22)
|
|
else:
|
|
api_security_group = get_security_group(conn, "api")
|
|
|
|
if not get_security_group(conn, "worker"):
|
|
worker_security_group = conn.ex_create_security_group(
|
|
'worker', 'for services that run on a worker node')
|
|
conn.ex_create_security_group_rule(worker_security_group, 'TCP', 22, 22)
|
|
else:
|
|
worker_security_group = get_security_group(conn, "worker")
|
|
|
|
if not get_security_group(conn, "control"):
|
|
controller_security_group = conn.ex_create_security_group(
|
|
'control', 'for services that run on a control node')
|
|
conn.ex_create_security_group_rule(controller_security_group, 'TCP', 22, 22)
|
|
conn.ex_create_security_group_rule(controller_security_group, 'TCP', 80, 80)
|
|
conn.ex_create_security_group_rule(controller_security_group, 'TCP', 5672, 5672,
|
|
source_security_group=worker_security_group)
|
|
|
|
if not get_security_group(conn, "services"):
|
|
services_security_group = conn.ex_create_security_group(
|
|
'services', 'for DB and AMQP services only')
|
|
conn.ex_create_security_group_rule(services_security_group, 'TCP', 22, 22)
|
|
conn.ex_create_security_group_rule(services_security_group, 'TCP', 3306, 3306,
|
|
source_security_group=api_security_group)
|
|
conn.ex_create_security_group_rule(services_security_group, 'TCP', 5672, 5672,
|
|
source_security_group=worker_security_group)
|
|
conn.ex_create_security_group_rule(services_security_group, 'TCP', 5672, 5672,
|
|
source_security_group=api_security_group)
|
|
else:
|
|
services_security_group = get_security_group(conn, "services")
|
|
|
|
for security_group in conn.ex_list_security_groups():
|
|
print(security_group)
|
|
|
|
###########################################################################
|
|
#
|
|
# get floating ip helper function
|
|
#
|
|
###########################################################################
|
|
|
|
def get_floating_ip(connection):
|
|
"""A helper function to re-use available Floating IPs"""
|
|
unused_floating_ip = None
|
|
for float_ip in connection.ex_list_floating_ips():
|
|
if not float_ip.node_id:
|
|
unused_floating_ip = float_ip
|
|
break
|
|
if not unused_floating_ip:
|
|
pool = connection.ex_list_floating_ip_pools()[0]
|
|
unused_floating_ip = pool.create_floating_ip()
|
|
return unused_floating_ip
|
|
|
|
###########################################################################
|
|
#
|
|
# create app-services instance (database & messaging)
|
|
#
|
|
###########################################################################
|
|
|
|
userdata_service = '#!/usr/bin/env bash\n' \
|
|
'curl -L -s https://gogs.informatik.hs-fulda.de/srieger/cloud-computing-msc-ai-' \
|
|
'examples/raw/master/faafo/contrib/install.sh | bash -s -- ' \
|
|
'-i database -i messaging\n'
|
|
print('\nUsing cloud-init userdata for service:\n"' + userdata_service + '"\n')
|
|
|
|
print('Starting new app-services instance and wait until it is running...')
|
|
instance_services = conn.create_node(name='app-services',
|
|
image=image,
|
|
size=flavor,
|
|
networks=[network],
|
|
ex_keyname=KEYPAIR_NAME,
|
|
ex_userdata=userdata_service,
|
|
ex_security_groups=[services_security_group])
|
|
instance_services = conn.wait_until_running(nodes=[instance_services], timeout=120,
|
|
ssh_interface='private_ips')[0][0]
|
|
services_ip = instance_services.private_ips[0]
|
|
|
|
###########################################################################
|
|
#
|
|
# create app-api instances
|
|
#
|
|
###########################################################################
|
|
|
|
userdata_api = '#!/usr/bin/env bash\n' \
|
|
'curl -L -s https://gogs.informatik.hs-fulda.de/srieger/' \
|
|
'cloud-computing-msc-ai-examples/raw/master/faafo/contrib/' \
|
|
'install.sh | bash -s -- ' \
|
|
f'-i faafo -r api -m "amqp://faafo:guest@{services_ip}:5672/" ' \
|
|
f'-d "mysql+pymysql://faafo:password@{services_ip}:3306/faafo"'
|
|
print('\nUsing cloud-init userdata for api:\n"' + userdata_api + '"\n')
|
|
|
|
print('Starting new app-api-1 instance and wait until it is running...')
|
|
instance_api_1 = conn.create_node(name='app-api-1',
|
|
image=image,
|
|
size=flavor,
|
|
networks=[network],
|
|
ex_keyname=KEYPAIR_NAME,
|
|
ex_userdata=userdata_api,
|
|
ex_security_groups=[api_security_group])
|
|
|
|
print('Starting new app-api-2 instance and wait until it is running...')
|
|
instance_api_2 = conn.create_node(name='app-api-2',
|
|
image=image,
|
|
size=flavor,
|
|
networks=[network],
|
|
ex_keyname=KEYPAIR_NAME,
|
|
ex_userdata=userdata_api,
|
|
ex_security_groups=[api_security_group])
|
|
|
|
instance_api_1 = conn.wait_until_running(nodes=[instance_api_1], timeout=120,
|
|
ssh_interface='private_ips')[0][0]
|
|
api_1_ip = instance_api_1.private_ips[0]
|
|
instance_api_2 = conn.wait_until_running(nodes=[instance_api_2], timeout=120,
|
|
ssh_interface='private_ips')[0][0]
|
|
# api_2_ip = instance_api_2.private_ips[0]
|
|
|
|
for instance in [instance_api_1, instance_api_2]:
|
|
floating_ip = get_floating_ip(conn)
|
|
conn.ex_attach_floating_ip_to_node(instance, floating_ip)
|
|
print(('allocated %(ip)s to %(host)s' % {'ip': floating_ip.ip_address,
|
|
'host': instance.name}))
|
|
|
|
###########################################################################
|
|
#
|
|
# create worker instances
|
|
#
|
|
###########################################################################
|
|
|
|
userdata_worker = '#!/usr/bin/env bash\n' \
|
|
'curl -L -s https://gogs.informatik.hs-fulda.de/srieger/' \
|
|
'cloud-computing-msc-ai-examples/raw/master/faafo/contrib/' \
|
|
'install.sh | bash -s -- ' \
|
|
f'-i faafo -r worker -e "http://{api_1_ip}" '\
|
|
f'-m "amqp://faafo:guest@{services_ip}:5672/"'
|
|
print('\nUsing cloud-init userdata for worker:\n"' + userdata_worker + '"\n')
|
|
|
|
|
|
# userdata_api-api-2 = '''#!/usr/bin/env bash
|
|
# curl -L -s ''' + hsfd_faafo_cloud_init_script + ''' | bash -s -- \
|
|
# -i faafo -r worker -e 'http://%(api_2_ip)s' -m 'amqp://faafo:guest@%(services_ip)s:5672/'
|
|
# ''' % {'api_2_ip': api_2_ip, 'services_ip': services_ip}
|
|
|
|
print('Starting new app-worker-1 instance and wait until it is running...')
|
|
instance_worker_1 = conn.create_node(name='app-worker-1',
|
|
image=image, size=flavor,
|
|
networks=[network],
|
|
ex_keyname=KEYPAIR_NAME,
|
|
ex_userdata=userdata_worker,
|
|
ex_security_groups=[worker_security_group])
|
|
|
|
print('Starting new app-worker-2 instance and wait until it is running...')
|
|
instance_worker_2 = conn.create_node(name='app-worker-2',
|
|
image=image, size=flavor,
|
|
networks=[network],
|
|
ex_keyname=KEYPAIR_NAME,
|
|
ex_userdata=userdata_worker,
|
|
ex_security_groups=[worker_security_group])
|
|
|
|
# do not start worker 3 initially, can be started using scale-out-add-worker.py demo
|
|
|
|
#print('Starting new app-worker-3 instance and wait until it is running...')
|
|
#instance_worker_3 = conn.create_node(name='app-worker-3',
|
|
# image=image, size=flavor,
|
|
# networks=[network],
|
|
# ex_keyname=keypair_name,
|
|
# ex_userdata=userdata_worker,
|
|
# ex_security_groups=[worker_security_group])
|
|
|
|
print(instance_worker_1)
|
|
print(instance_worker_2)
|
|
#print(instance_worker_3)
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main()
|