#!/usr/bin/env bash set -xe function get_id() { S=$($1) V=$(echo $S|jq -r .session_id) if [ $? = 0 ]; then echo $V else echo $S exit 1 fi } #======================================================================================================= # Infrastructure #======================================================================================================= # Create a new user and set role 'server_rw' for the server dns.cadoles.com cucchiaiata-cli v1.user.user.create --login gnunux \ --name gnunux \ --surname gnunux \ --email egarette@cadoles.com cucchiaiata-cli v1.user.role.create --user_login gnunux \ --role_name 'server_rw' \ --role_attribute 'Server.ServerName' \ --role_attribute_value dns.cadoles.com cucchiaiata-cli v1.user.role.create --user_login gnunux \ --role_name 'server_rw' \ --role_attribute 'Server.ServerName' \ --role_attribute_value nsd.cadoles.com # Zone # +~~~~~~~~~~+ # ! ZONE ! # ! internet ! # +~~~~~~~~~~+ cucchiaiata-cli v1.infra.zone.create --zone_name internet # zone configuration S=$(get_id "cucchiaiata-cli v1.setting.session.zone.start --zone_name internet") cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.network "192.168.0.0/24" \ --configuration.host.start "192.168.0.150" \ --configuration.host.stop "192.168.0.200" \ --configuration.dns 192.168.0.1 \ --configuration.vlan_id 0 \ --configuration.gateway 192.168.0.1 cucchiaiata-cli v1.setting.session.validate --session_id $S cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save # Create the cluster hapy.ac-test.fr # +---------------------------+ # | hapy.ac-test.fr | +~~~~~~~~~~+ # | +--------------------+ |-------! ZONE ! # | | node1.cadoles.com |---|-------! internet ! # | +--------------------+ | +~~~~~~~~~~+ # +---------------------------+ cucchiaiata-cli v1.infra.cluster.create --cluster_name hapy.ac-test.fr \ --zone_name internet \ --zones_name internet cucchiaiata-cli v1.infra.cluster.node.create --node_name node1.cadoles.com \ --cluster_name hapy.ac-test.fr # configuration S=$(get_id "cucchiaiata-cli v1.setting.session.cluster.start --cluster_name hapy.ac-test.fr") cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.virtual_ip "192.168.0.115" # FIXME endpoint == https:///RPC2 cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.opennebula.one_user "eoleone" cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.opennebula.one_password "eole" cucchiaiata-cli v1.setting.session.validate --session_id $S cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save # Organization, sites and zone # + = = = = = = = = = = = = = = = = = = = = + # " ORGANISATION cadoles.com " # " + = = = = = = = = = = = + " # " " SITE etab1 "----"----+ +~~~~~~~~~~+ # " + = = = = = = = = = = = + " |___! ZONE ! # " + = = = = = = = = = = = + " | ! internet ! # " " SITE etab2 "----"----+ +~~~~~~~~~~+ # " + = = = = = = = = = = = + " # + = = = = = = = = = = = = = = = = = = = = + cucchiaiata-cli v1.infra.organization.create --organization_name cadoles.com cucchiaiata-cli v1.infra.site.create --site_name etab1 \ --organization_name cadoles.com \ --zones_name internet cucchiaiata-cli v1.infra.site.create --site_name etab2 \ --organization_name cadoles.com \ --zones_name internet # Servermodels # -> base-fedora-32 (Cadoles) # '-> unbound (Cadoles) # '-> unbound (servermodel) ----, # | # -> openssh-server (Cadoles) |--> unbound_etab1 (servermodel) # '-> aca (servermodel) | # '-> etab1 (servermodel) ------' cucchiaiata-cli v1.setting.servermodel.create --servermodel_name unbound --applicationservices_name unbound cucchiaiata-cli v1.setting.servermodel.create --servermodel_name aca --applicationservices_name openssh-server cucchiaiata-cli v1.setting.servermodel.create --servermodel_name etab1 --parents_name aca cucchiaiata-cli v1.setting.servermodel.create --servermodel_name unbound_etab1 --parents_name etab1 unbound cucchiaiata-cli v1.setting.servermodel.create --servermodel_name nsd_etab1 --parents_name etab1 --applicationservices_name nsd # configuration # Servermodel ACA S=$(get_id "cucchiaiata-cli v1.setting.session.servermodel.start --servermodel_name aca") cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.ssh_server.ssh_allow_cidr 192.168.0.0/24 cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save # Servermodel unbound S=$(get_id "cucchiaiata-cli v1.setting.session.servermodel.start --servermodel_name unbound") cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.dns_resolver.unbound_allowed_client_cidr 192.168.0.0/24 cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save # Servermodel unbound_etab1 S=$(get_id "cucchiaiata-cli v1.setting.session.servermodel.start --servermodel_name unbound_etab1") cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.dns_resolver.unbound_forward_zones.unbound_forward_zones cadoles.com \ --configuration.dns_resolver.unbound_forward_zones.unbound_forward_addresses 0 192.168.0.151 cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save # Server # + = = = = = = = = = = = = = = = = = = = = = = = + # " SITE etab1 +-------------------+ " +~~~~~~~~~~+ # " | dns.cadoles.com |----"------! ZONE ! # " +-------------------+ " ! internet ! # " " +~~~~~~~~~~+ # + = = = = = = = = = = = = = = = = = = = = = = = + # -> unbound_etab1 # '-> dns.cadoles.com (server) cucchiaiata-cli v1.infra.server.create --server_name dns.cadoles.com \ --site_name etab1 \ --cluster_name hapy.ac-test.fr \ --zones_name internet \ --servermodel_name unbound_etab1 cucchiaiata-cli v1.infra.server.create --server_name nsd.cadoles.com \ --site_name etab1 \ --cluster_name hapy.ac-test.fr \ --zones_name internet \ --servermodel_name nsd_etab1 # configuration sleep 1 S=$(get_id "cucchiaiata-cli v1.setting.session.server.start --server nsd.cadoles.com") #FIXME IP en dure ? cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.dns_server.nsd_allowed_client_cidr 192.168.0.150/32 \ --configuration.dns_zone.nsd_zones cadoles.com cucchiaiata-cli v1.setting.session.filter --session_id "$S" --namespace nsd cucchiaiata-cli v1.setting.session.configure --session_id "$S" --nsd.nsd_zone_cadoles_com.hostname_cadoles_com.hostname_cadoles_com toto titi \ --nsd.nsd_zone_cadoles_com.hostname_cadoles_com.ip_cadoles_com 0 192.168.0.25 \ --nsd.nsd_zone_cadoles_com.hostname_cadoles_com.type_cadoles_com 1 CNAME \ --nsd.nsd_zone_cadoles_com.hostname_cadoles_com.cname_cadoles_com 1 toto.cadoles.com cucchiaiata-cli v1.setting.session.validate --session_id $S cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save S=$(get_id "cucchiaiata-cli v1.setting.session.server.start --server dns.cadoles.com") cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.dns_resolver.unbound_default_forwards 192.168.0.1 cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.dns_resolver.unbound_local_authority "nsd.cadoles.com" cucchiaiata-cli v1.setting.session.filter --session_id "$S" --namespace opennebula cucchiaiata-cli v1.setting.session.configure --session_id "$S" --opennebula.cpu 0.2 \ --opennebula.vcpu 2 cucchiaiata-cli v1.setting.session.validate --session_id $S cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save #======================================================================================================= # Deploy #======================================================================================================= # Generate configuration cucchiaiata-cli v1.infra.cluster.deploy --cluster_name hapy.ac-test.fr cucchiaiata-cli v1.infra.zone.deploy --zone_name internet cucchiaiata-cli v1.infra.server.deploy --server_name nsd.cadoles.com cucchiaiata-cli v1.infra.server.deploy --server_name dns.cadoles.com echo "fin"