[FAB-11778] Upgrade to v1.3.x from v1.2.x in byfn

Changes include upgrade from v1.2.x to v1.3.x. First, upgrades the network from v1.2.x to v1.3.x and upgrade_to_v13.sh will run config updates on /Channel level and /Channel/Application level for v1_3 capabilities. Add 15 sec's delay to couchdb tests Change-Id: Ic2a1633842b7dd8a39ee674c5159d67b46122ff4 Signed-off-by: Surya <[email protected]> Signed-off-by: RameshBabu <[email protected]>
hyperledger · Sep 17, 2018 · 9ee57c6 · 9ee57c6
1 parent e7a1b76
commit 9ee57c6
Show file tree

Hide file tree

Showing 4 changed files with 213 additions and 75 deletions.
diff --git a/first-network/byfn.sh b/first-network/byfn.sh
@@ -41,7 +41,7 @@ function printHelp() {
   echo "      - 'down' - clear the network with docker-compose down"
   echo "      - 'restart' - restart the network"
   echo "      - 'generate' - generate required certificates and genesis block"
-  echo "      - 'upgrade'  - upgrade the network from version 1.1.x to 1.2.x"
+  echo "      - 'upgrade'  - upgrade the network from version 1.2.x to 1.3.x"
   echo "    -c <channel name> - channel name to use (defaults to \"mychannel\")"
   echo "    -t <timeout> - CLI timeout duration in seconds (defaults to 10)"
   echo "    -d <delay> - delay duration in seconds (defaults to 3)"
@@ -172,62 +172,66 @@ function networkUp() {
   fi
 }
 
-# Upgrade the network components which are at version 1.1.x to 1.2.x
+# Upgrade the network components which are at version 1.2.x to 1.3.x
 # Stop the orderer and peers, backup the ledger for orderer and peers, cleanup chaincode containers and images
 # and relaunch the orderer and peers with latest tag
 function upgradeNetwork() {
-  docker inspect -f '{{.Config.Volumes}}' orderer.example.com | grep -q '/var/hyperledger/production/orderer'
-  if [ $? -ne 0 ]; then
-    echo "ERROR !!!! This network does not appear to be using volumes for its ledgers, did you start from fabric-samples >= v1.1.x?"
-    exit 1
-  fi
-
-  LEDGERS_BACKUP=./ledgers-backup
-
-  # create ledger-backup directory
-  mkdir -p $LEDGERS_BACKUP
-
-  export IMAGE_TAG=$IMAGETAG
-  if [ "${IF_COUCHDB}" == "couchdb" ]; then
-    COMPOSE_FILES="-f $COMPOSE_FILE -f $COMPOSE_FILE_COUCH"
-  else
-    COMPOSE_FILES="-f $COMPOSE_FILE"
-  fi
-
-  # removing the cli container
-  docker-compose $COMPOSE_FILES stop cli
-  docker-compose $COMPOSE_FILES up -d --no-deps cli
-
-  echo "Upgrading orderer"
-  docker-compose $COMPOSE_FILES stop orderer.example.com
-  docker cp -a orderer.example.com:/var/hyperledger/production/orderer $LEDGERS_BACKUP/orderer.example.com
-  docker-compose $COMPOSE_FILES up -d --no-deps orderer.example.com
+  if [[ "$IMAGETAG" == *"1.3"* ]] || [[ $IMAGETAG == "latest" ]]; then
+    docker inspect -f '{{.Config.Volumes}}' orderer.example.com | grep -q '/var/hyperledger/production/orderer'
+    if [ $? -ne 0 ]; then
+      echo "ERROR !!!! This network does not appear to be using volumes for its ledgers, did you start from fabric-samples >= v1.2.x?"
+      exit 1
+    fi
 
-  for PEER in peer0.org1.example.com peer1.org1.example.com peer0.org2.example.com peer1.org2.example.com; do
-    echo "Upgrading peer $PEER"
+    LEDGERS_BACKUP=./ledgers-backup
 
-    # Stop the peer and backup its ledger
-    docker-compose $COMPOSE_FILES stop $PEER
-    docker cp -a $PEER:/var/hyperledger/production $LEDGERS_BACKUP/$PEER/
+    # create ledger-backup directory
+    mkdir -p $LEDGERS_BACKUP
 
-    # Remove any old containers and images for this peer
-    CC_CONTAINERS=$(docker ps | grep dev-$PEER | awk '{print $1}')
-    if [ -n "$CC_CONTAINERS" ]; then
-      docker rm -f $CC_CONTAINERS
-    fi
-    CC_IMAGES=$(docker images | grep dev-$PEER | awk '{print $1}')
-    if [ -n "$CC_IMAGES" ]; then
-      docker rmi -f $CC_IMAGES
+    export IMAGE_TAG=$IMAGETAG
+    if [ "${IF_COUCHDB}" == "couchdb" ]; then
+      COMPOSE_FILES="-f $COMPOSE_FILE -f $COMPOSE_FILE_COUCH"
+    else
+      COMPOSE_FILES="-f $COMPOSE_FILE"
     fi
 
-    # Start the peer again
-    docker-compose $COMPOSE_FILES up -d --no-deps $PEER
-  done
-
-  docker exec cli scripts/upgrade_to_v12.sh $CHANNEL_NAME $CLI_DELAY $LANGUAGE $CLI_TIMEOUT $VERBOSE
-  if [ $? -ne 0 ]; then
-    echo "ERROR !!!! Test failed"
-    exit 1
+    # removing the cli container
+    docker-compose $COMPOSE_FILES stop cli
+    docker-compose $COMPOSE_FILES up -d --no-deps cli
+
+    echo "Upgrading orderer"
+    docker-compose $COMPOSE_FILES stop orderer.example.com
+    docker cp -a orderer.example.com:/var/hyperledger/production/orderer $LEDGERS_BACKUP/orderer.example.com
+    docker-compose $COMPOSE_FILES up -d --no-deps orderer.example.com
+
+    for PEER in peer0.org1.example.com peer1.org1.example.com peer0.org2.example.com peer1.org2.example.com; do
+      echo "Upgrading peer $PEER"
+
+      # Stop the peer and backup its ledger
+      docker-compose $COMPOSE_FILES stop $PEER
+      docker cp -a $PEER:/var/hyperledger/production $LEDGERS_BACKUP/$PEER/
+
+      # Remove any old containers and images for this peer
+      CC_CONTAINERS=$(docker ps | grep dev-$PEER | awk '{print $1}')
+      if [ -n "$CC_CONTAINERS" ]; then
+        docker rm -f $CC_CONTAINERS
+      fi
+      CC_IMAGES=$(docker images | grep dev-$PEER | awk '{print $1}')
+      if [ -n "$CC_IMAGES" ]; then
+        docker rmi -f $CC_IMAGES
+      fi
+
+      # Start the peer again
+      docker-compose $COMPOSE_FILES up -d --no-deps $PEER
+    done
+
+    docker exec cli scripts/upgrade_to_v13.sh $CHANNEL_NAME $CLI_DELAY $LANGUAGE $CLI_TIMEOUT $VERBOSE
+    if [ $? -ne 0 ]; then
+      echo "ERROR !!!! Test failed"
+      exit 1
+    fi
+  else
+    echo "ERROR !!!! Pass the v1.3.x image tag"
   fi
 }
 
@@ -528,7 +532,7 @@ elif [ "${MODE}" == "generate" ]; then ## Generate Artifacts
 elif [ "${MODE}" == "restart" ]; then ## Restart the network
   networkDown
   networkUp
-elif [ "${MODE}" == "upgrade" ]; then ## Upgrade the network from version 1.1.x to 1.2.x
+elif [ "${MODE}" == "upgrade" ]; then ## Upgrade the network from version 1.2.x to 1.3.x
   upgradeNetwork
 else
   printHelp

diff --git a/first-network/configtx.yaml b/first-network/configtx.yaml
@@ -27,6 +27,20 @@ Organizations:
         # MSPDir is the filesystem path which contains the MSP configuration
         MSPDir: crypto-config/ordererOrganizations/example.com/msp
 
+        # Policies defines the set of policies at this level of the config tree
+        # For organization policies, their canonical path is usually
+        #   /Channel/<Application|Orderer>/<OrgName>/<PolicyName>
+        Policies:
+            Readers:
+                Type: Signature
+                Rule: "OR('OrdererMSP.member')"
+            Writers:
+                Type: Signature
+                Rule: "OR('OrdererMSP.member')"
+            Admins:
+                Type: Signature
+                Rule: "OR('OrdererMSP.admin')"
+
     - &Org1
         # DefaultOrg defines the organization which is used in the sampleconfig
         # of the fabric.git development environment
@@ -37,6 +51,21 @@ Organizations:
 
         MSPDir: crypto-config/peerOrganizations/org1.example.com/msp
 
+        # Policies defines the set of policies at this level of the config tree
+        # For organization policies, their canonical path is usually
+        #   /Channel/<Application|Orderer>/<OrgName>/<PolicyName>
+        Policies:
+            Readers:
+                Type: Signature
+                Rule: "OR('Org1MSP.admin', 'Org1MSP.peer', 'Org1MSP.client')"
+            Writers:
+                Type: Signature
+                Rule: "OR('Org1MSP.admin', 'Org1MSP.client')"
+            Admins:
+                Type: Signature
+                Rule: "OR('Org1MSP.admin')"
+
+        # leave this flag set to true.
         AnchorPeers:
             # AnchorPeers defines the location of peers which can be used
             # for cross org gossip communication.  Note, this value is only
@@ -54,6 +83,20 @@ Organizations:
 
         MSPDir: crypto-config/peerOrganizations/org2.example.com/msp
 
+        # Policies defines the set of policies at this level of the config tree
+        # For organization policies, their canonical path is usually
+        #   /Channel/<Application|Orderer>/<OrgName>/<PolicyName>
+        Policies:
+            Readers:
+                Type: Signature
+                Rule: "OR('Org2MSP.admin', 'Org2MSP.peer', 'Org2MSP.client')"
+            Writers:
+                Type: Signature
+                Rule: "OR('Org2MSP.admin', 'Org2MSP.client')"
+            Admins:
+                Type: Signature
+                Rule: "OR('Org2MSP.admin')"
+
         AnchorPeers:
             # AnchorPeers defines the location of peers which can be used
             # for cross org gossip communication.  Note, this value is only
@@ -84,11 +127,11 @@ Capabilities:
     # Channel capabilities apply to both the orderers and the peers and must be
     # supported by both.  Set the value of the capability to true to require it.
     Global: &ChannelCapabilities
-        # V1.1 for Global is a catchall flag for behavior which has been
-        # determined to be desired for all orderers and peers running v1.0.x,
+        # V1.3 for Channel is a catchall flag for behavior which has been
+        # determined to be desired for all orderers and peers running < v1.3.0,
         # but the modification of which would cause incompatibilities.  Users
         # should leave this flag set to true.
-        V1_1: true
+        V1_3: true
 
     # Orderer capabilities apply only to the orderers, and may be safely
     # manipulated without concern for upgrading peers.  Set the value of the
@@ -104,11 +147,9 @@ Capabilities:
     # manipulated without concern for upgrading orderers.  Set the value of the
     # capability to true to require it.
     Application: &ApplicationCapabilities
-        # V1.2 for Application is a catchall flag for behavior which has been
-        # determined to be desired for all peers running v1.0.x, but the
-        # modification of which would cause incompatibilities.  Users should
-        # leave this flag set to true.
-        V1_2: true
+        # V1.2 for Application enables the new non-backwards compatible
+        # features and fixes of fabric v1.3
+        V1_3: true
 
 ################################################################################
 #
@@ -124,6 +165,20 @@ Application: &ApplicationDefaults
     # the application side of the network
     Organizations:
 
+    # Policies defines the set of policies at this level of the config tree
+    # For Application policies, their canonical path is
+    #   /Channel/Application/<PolicyName>
+    Policies:
+        Readers:
+            Type: ImplicitMeta
+            Rule: "ANY Readers"
+        Writers:
+            Type: ImplicitMeta
+            Rule: "ANY Writers"
+        Admins:
+            Type: ImplicitMeta
+            Rule: "MAJORITY Admins"
+
 ################################################################################
 #
 #   SECTION: Orderer
@@ -169,6 +224,57 @@ Orderer: &OrdererDefaults
     # the orderer side of the network
     Organizations:
 
+    # Policies defines the set of policies at this level of the config tree
+    # For Orderer policies, their canonical path is
+    #   /Channel/Orderer/<PolicyName>
+    Policies:
+        Readers:
+            Type: ImplicitMeta
+            Rule: "ANY Readers"
+        Writers:
+            Type: ImplicitMeta
+            Rule: "ANY Writers"
+        Admins:
+            Type: ImplicitMeta
+            Rule: "MAJORITY Admins"
+        # BlockValidation specifies what signatures must be included in the block
+        # from the orderer for the peer to validate it.
+        BlockValidation:
+            Type: ImplicitMeta
+            Rule: "ANY Writers"
+
+################################################################################
+#
+#   CHANNEL
+#
+#   This section defines the values to encode into a config transaction or
+#   genesis block for channel related parameters.
+#
+################################################################################
+Channel: &ChannelDefaults
+    # Policies defines the set of policies at this level of the config tree
+    # For Channel policies, their canonical path is
+    #   /Channel/<PolicyName>
+    Policies:
+        # Who may invoke the 'Deliver' API
+        Readers:
+            Type: ImplicitMeta
+            Rule: "ANY Readers"
+        # Who may invoke the 'Broadcast' API
+        Writers:
+            Type: ImplicitMeta
+            Rule: "ANY Writers"
+        # By default, who may modify elements at this config level
+        Admins:
+            Type: ImplicitMeta
+            Rule: "MAJORITY Admins"
+
+    # Capabilities describes the channel level capabilities, see the
+    # dedicated Capabilities section elsewhere in this file for a full
+    # description
+    Capabilities:
+        <<: *ChannelCapabilities
+
 ################################################################################
 #
 #   Profile
@@ -180,8 +286,7 @@ Orderer: &OrdererDefaults
 Profiles:
 
     TwoOrgsOrdererGenesis:
-        Capabilities:
-            <<: *ChannelCapabilities
+        <<: *ChannelDefaults
         Orderer:
             <<: *OrdererDefaults
             Organizations:

diff --git a/first-network/scripts/capabilities.json b/first-network/scripts/capabilities.json
@@ -2,8 +2,8 @@
     "mod_policy": "Admins",
     "value": {
       "capabilities": {
-        "V1_2": {}
+        "V1_3": {}
       }
     },
     "version": "0"
-}
+}