175 lines
9.7 KiB
Bash
Executable File
175 lines
9.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -xe
|
|
|
|
function get_id() {
|
|
S=$($1)
|
|
V=$(echo $S|jq -r .session_id)
|
|
if [ $? = 0 ]; then
|
|
echo $V
|
|
else
|
|
echo $S
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
#=======================================================================================================
|
|
# Infrastructure
|
|
#=======================================================================================================
|
|
|
|
# Create a new user and set role 'server_rw' for the server dns.cadoles.com
|
|
cucchiaiata-cli v1.user.user.create --login gnunux \
|
|
--name gnunux \
|
|
--surname gnunux \
|
|
--email egarette@cadoles.com
|
|
cucchiaiata-cli v1.user.role.create --user_login gnunux \
|
|
--role_name 'server_rw' \
|
|
--role_attribute 'Server.ServerName' \
|
|
--role_attribute_value dns.cadoles.com
|
|
cucchiaiata-cli v1.user.role.create --user_login gnunux \
|
|
--role_name 'server_rw' \
|
|
--role_attribute 'Server.ServerName' \
|
|
--role_attribute_value nsd.cadoles.com
|
|
|
|
# Zone
|
|
# +~~~~~~~~~~+
|
|
# ! ZONE !
|
|
# ! internet !
|
|
# +~~~~~~~~~~+
|
|
cucchiaiata-cli v1.infra.zone.create --zone_name internet
|
|
# zone configuration
|
|
S=$(get_id "cucchiaiata-cli v1.setting.session.zone.start --zone_name internet")
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.network "192.168.0.0/24" \
|
|
--configuration.host.start "192.168.0.150" \
|
|
--configuration.host.stop "192.168.0.200" \
|
|
--configuration.dns 192.168.0.1 \
|
|
--configuration.vlan_id 0 \
|
|
--configuration.gateway 192.168.0.1
|
|
cucchiaiata-cli v1.setting.session.validate --session_id $S
|
|
cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save
|
|
|
|
|
|
# Create the cluster hapy.ac-test.fr
|
|
# +---------------------------+
|
|
# | hapy.ac-test.fr | +~~~~~~~~~~+
|
|
# | +--------------------+ |-------! ZONE !
|
|
# | | node1.cadoles.com |---|-------! internet !
|
|
# | +--------------------+ | +~~~~~~~~~~+
|
|
# +---------------------------+
|
|
cucchiaiata-cli v1.infra.cluster.create --cluster_name hapy.ac-test.fr \
|
|
--zone_name internet \
|
|
--zones_name internet
|
|
cucchiaiata-cli v1.infra.cluster.node.create --node_name node1.cadoles.com \
|
|
--cluster_name hapy.ac-test.fr
|
|
|
|
# configuration
|
|
S=$(get_id "cucchiaiata-cli v1.setting.session.cluster.start --cluster_name hapy.ac-test.fr")
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.virtual_ip "192.168.0.115"
|
|
# FIXME endpoint == https://<cluster_name>/RPC2
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.opennebula.one_user "eoleone"
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.opennebula.one_password "eole"
|
|
cucchiaiata-cli v1.setting.session.validate --session_id $S
|
|
cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save
|
|
|
|
# Organization, sites and zone
|
|
# + = = = = = = = = = = = = = = = = = = = = +
|
|
# " ORGANISATION cadoles.com "
|
|
# " + = = = = = = = = = = = + "
|
|
# " " SITE etab1 "----"----+ +~~~~~~~~~~+
|
|
# " + = = = = = = = = = = = + " |___! ZONE !
|
|
# " + = = = = = = = = = = = + " | ! internet !
|
|
# " " SITE etab2 "----"----+ +~~~~~~~~~~+
|
|
# " + = = = = = = = = = = = + "
|
|
# + = = = = = = = = = = = = = = = = = = = = +
|
|
cucchiaiata-cli v1.infra.organization.create --organization_name cadoles.com
|
|
cucchiaiata-cli v1.infra.site.create --site_name etab1 \
|
|
--organization_name cadoles.com \
|
|
--zones_name internet
|
|
cucchiaiata-cli v1.infra.site.create --site_name etab2 \
|
|
--organization_name cadoles.com \
|
|
--zones_name internet
|
|
|
|
# Servermodels
|
|
# -> base-fedora-32 (Cadoles)
|
|
# '-> unbound (Cadoles)
|
|
# '-> unbound (servermodel) ----,
|
|
# |
|
|
# -> openssh-server (Cadoles) |--> unbound_etab1 (servermodel)
|
|
# '-> aca (servermodel) |
|
|
# '-> etab1 (servermodel) ------'
|
|
cucchiaiata-cli v1.setting.servermodel.create --servermodel_name unbound --applicationservices_name unbound
|
|
cucchiaiata-cli v1.setting.servermodel.create --servermodel_name aca --applicationservices_name openssh-server
|
|
cucchiaiata-cli v1.setting.servermodel.create --servermodel_name etab1 --parents_name aca
|
|
cucchiaiata-cli v1.setting.servermodel.create --servermodel_name unbound_etab1 --parents_name etab1 unbound
|
|
cucchiaiata-cli v1.setting.servermodel.create --servermodel_name nsd_etab1 --parents_name etab1 --applicationservices_name nsd
|
|
|
|
# configuration
|
|
|
|
# Servermodel ACA
|
|
S=$(get_id "cucchiaiata-cli v1.setting.session.servermodel.start --servermodel_name aca")
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.ssh_server.ssh_allow_cidr 192.168.0.0/24
|
|
cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save
|
|
|
|
# Servermodel unbound
|
|
S=$(get_id "cucchiaiata-cli v1.setting.session.servermodel.start --servermodel_name unbound")
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.dns_resolver.unbound_allowed_client_cidr 192.168.0.0/24
|
|
cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save
|
|
|
|
# Servermodel unbound_etab1
|
|
S=$(get_id "cucchiaiata-cli v1.setting.session.servermodel.start --servermodel_name unbound_etab1")
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.dns_resolver.unbound_forward_zones.unbound_forward_zones cadoles.com \
|
|
--configuration.dns_resolver.unbound_forward_zones.unbound_forward_addresses 0 192.168.0.151
|
|
cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save
|
|
|
|
# Server
|
|
# + = = = = = = = = = = = = = = = = = = = = = = = +
|
|
# " SITE etab1 +-------------------+ " +~~~~~~~~~~+
|
|
# " | dns.cadoles.com |----"------! ZONE !
|
|
# " +-------------------+ " ! internet !
|
|
# " " +~~~~~~~~~~+
|
|
# + = = = = = = = = = = = = = = = = = = = = = = = +
|
|
# -> unbound_etab1
|
|
# '-> dns.cadoles.com (server)
|
|
cucchiaiata-cli v1.infra.server.create --server_name dns.cadoles.com \
|
|
--site_name etab1 \
|
|
--cluster_name hapy.ac-test.fr \
|
|
--zones_name internet \
|
|
--servermodel_name unbound_etab1
|
|
cucchiaiata-cli v1.infra.server.create --server_name nsd.cadoles.com \
|
|
--site_name etab1 \
|
|
--cluster_name hapy.ac-test.fr \
|
|
--zones_name internet \
|
|
--servermodel_name nsd_etab1
|
|
# configuration
|
|
sleep 1
|
|
S=$(get_id "cucchiaiata-cli v1.setting.session.server.start --server nsd.cadoles.com")
|
|
#FIXME IP en dure ?
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.dns_server.nsd_allowed_client_cidr 192.168.0.150/32 \
|
|
--configuration.dns_zone.nsd_zones cadoles.com
|
|
cucchiaiata-cli v1.setting.session.filter --session_id "$S" --namespace nsd
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --nsd.nsd_zone_cadoles_com.hostname_cadoles_com.hostname_cadoles_com toto titi \
|
|
--nsd.nsd_zone_cadoles_com.hostname_cadoles_com.ip_cadoles_com 0 192.168.0.25 \
|
|
--nsd.nsd_zone_cadoles_com.hostname_cadoles_com.type_cadoles_com 1 CNAME \
|
|
--nsd.nsd_zone_cadoles_com.hostname_cadoles_com.cname_cadoles_com 1 toto.cadoles.com
|
|
cucchiaiata-cli v1.setting.session.validate --session_id $S
|
|
cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save
|
|
|
|
S=$(get_id "cucchiaiata-cli v1.setting.session.server.start --server dns.cadoles.com")
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.dns_resolver.unbound_default_forwards 192.168.0.1
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --configuration.dns_resolver.unbound_local_authority "nsd.cadoles.com"
|
|
cucchiaiata-cli v1.setting.session.filter --session_id "$S" --namespace opennebula
|
|
cucchiaiata-cli v1.setting.session.configure --session_id "$S" --opennebula.cpu 0.2 \
|
|
--opennebula.vcpu 2
|
|
cucchiaiata-cli v1.setting.session.validate --session_id $S
|
|
cucchiaiata-cli v1.setting.session.stop --session_id "$S" --save
|
|
|
|
#=======================================================================================================
|
|
# Deploy
|
|
#=======================================================================================================
|
|
|
|
# Generate configuration
|
|
cucchiaiata-cli v1.infra.cluster.deploy --cluster_name hapy.ac-test.fr
|
|
cucchiaiata-cli v1.infra.zone.deploy --zone_name internet
|
|
cucchiaiata-cli v1.infra.server.deploy --server_name nsd.cadoles.com
|
|
cucchiaiata-cli v1.infra.server.deploy --server_name dns.cadoles.com
|
|
echo "fin"
|