安裝和配置控制節點（Controller node）
在配置Openstack網絡（項目代號為neutron）服務前，需要創建相關數據庫、服務認證service credentials、API入口endpoints
- 創建數據庫
$ mysql -uroot -p
mysql> create database neutron;
mysql> grant all privileges on neutron.* to 'neutron'@'localhost' \
identified by '123456' with grant option;
mysql> grant all privileges on neutron.* to 'neutron'@'%' \
identified by '123456' with grant option;
mysql> exit;
- 切換到
admin用戶環境，以獲得admin-onlyCLI權限
$ . admin-openrc
- 創建
neutron服務認證
創建neutron用戶
$ openstack user create --domain default --password-prompt neutron
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field | Value |
+---------------------+----------------------------------+
| domain_id | 5d9c95b32eaa4d80934f5d5d765bd3f5 |
| enabled | True |
| id | c5be46da15fb42fc9b96a1b1c884fb6b |
| name | neutron |
| password_expires_at | None |
+---------------------+----------------------------------+
neutron用戶添加admin角色
$ openstack role add --project service --user neutron admin
此命令無輸出
創建neutron服務入口
$ openstack service create --name neutron \
--description "OpenStack Networking" network
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | OpenStack Networking |
| enabled | True |
| id | 1ce836e494024e4ea9e2e7899cf01e09 |
| name | neutron |
| type | network |
+-------------+----------------------------------+
- 創建Networking服務的
API endpoints
$ openstack endpoint create --region RegionOne \
network public http://controller:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 7184c9fcc8d544d7a3957c9810ce4142 |
| interface | public |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 1ce836e494024e4ea9e2e7899cf01e09 |
| service_name | neutron |
| service_type | network |
| url | http://controller:9696 |
+--------------+----------------------------------+
$ openstack endpoint create --region RegionOne \
network internal http://controller:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 7228694155f440eda571df686b6c49be |
| interface | internal |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 1ce836e494024e4ea9e2e7899cf01e09 |
| service_name | neutron |
| service_type | network |
| url | http://controller:9696 |
+--------------+----------------------------------+
$ openstack endpoint create --region RegionOne \
network admin http://controller:9696
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | 224bcf7ffa934baba1f75e029f64abab |
| interface | admin |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 1ce836e494024e4ea9e2e7899cf01e09 |
| service_name | neutron |
| service_type | network |
| url | http://controller:9696 |
+--------------+----------------------------------+
配置 networking 選項
可以選擇option 1或option 2架構以部署Networking服務。
-
Option 1架構是最簡單的，只支持將虛擬機實例接入provider(external)網絡，沒有self-service(private)網絡、routers以及floating IP(浮動IP)。僅有admin用戶或其他同級用戶可管理provider網絡 -
Option 2架構則使用layer-3服務擴展了option 1，支持虛擬機實例使用self-service網絡。demo用戶或其他用戶可以自行管理self-service網絡，包括routers以及floating IP。floating IP可以讓虛擬機實例通過self-service網絡訪問external網絡，例如外網。self-service網絡的數據包會使用 1500 的MTU值
Option 2同樣支持將虛擬機實例接入provider網絡
配置完成下述任一網絡架構后，再回到這里繼續配置 metadata 代理
- Option 1: Provider 網絡 部署
-Option 2: Self-service 網絡
配置metadata agent
metadata agent用于提供配置信息，例如虛擬機實例的憑據
- 編輯
/etc/neutron/metadata_agent.ini
[DEFAULT]
...
nova_metadata_ip = controller
metadata_proxy_shared_secret = METADATA_SECRET #可以設置為其他合適的密碼
配置Compute service使用網絡服務
- 編輯
/etc/nova/nova.conf
[neutron]
...
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = Default
user_domain_name = Default
region_name = RegionOne
project_name = service
username = neutron
password = 123456
service_metadata_proxy = true
metadata_proxy_shared_secret = METADATA_SECRET
安裝收尾
# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini \
/etc/neutron/plugin.ini
# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \
--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
# systemctl restart openstack-nova-api.service
- 對于
option 1和option 2，都需要如下操作
# systemctl enable neutron-server.service \
neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
neutron-metadata-agent.service
# systemctl start neutron-server.service \
neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
neutron-metadata-agent.service
- 對于
option 2，還需要啟用layer-3服務
# systemctl enable neutron-l3-agent.service
# systemctl start neutron-l3-agent.service
