class="markdown_views prism-tomorrow-night">
-----------------------controller节点-----------------------------
一、安装并配置组件
1.安装软件包
#
yum install openstack-dashboard –y
2.编辑配置文件
#
vi /etc/openstack-dashboard/local_settings
完成以下设置:
(1)在 controller 节点上配置仪表盘
OPENSTACK_HOST = "controller"
(2)允许所有主机访问dashboard:
ALLOWED_HOSTS = ['*', ]
(3)配置 memcached 会话存储服务:
SESSION_ENGINE = ‘django.contrib.sessions.backends.cache’
CACHES = {
'default': {
'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',
'LOCATION': 'controller:11211',
},
}
(4)启用第3版认证
OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
(5)启用对域的支持
OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
(6)配置API版本:
OPENSTACK_API_VERSIONS = {
"identity": 3,
"image":2,
"volume": 2,
"compute": 2,
}
(7)设置通过仪表盘创建用户时的默认域配置为 default :
OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = 'default'
(8)设置通过仪表盘创建的用户默认角 {MOD}配置为 user :
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"
3.重启web服务器以及会话存储服务:
#
systemctl restart httpd.service memcached.service
编辑:
vi /etc/httpd/conf.d/openstack-dashboard.conf
在WSGISocketPrefix run/wsgi下面加一行代码:
WSGIApplicationGroup %{GLOBAL}
二、验证
在本地主机上打开浏览器,输入IP地址:
[192.168.100.10/dashboard](http://192.168.100.10/dashboard)
10-2
(1)查看各服务状态
#
openstack-status
注意httpd和openstack-keystone
(2)查看网络服务状态
#
neutron agent-list
(3)网络正常的话查看nova的相关日志
(4)云主机正常运行但是无法进入控制台
①修改计算节点nova的配置文件(有误)
---------compute---------
修改红 {MOD}部分
#
vi /etc/nova/nova.conf
重启:#
systemctl restart openstack-nova-compute
②如果发现控制台输出:failed to connect to server (code: 1006)
是由于Iptables规则阻挡,需要打开对应的端口。
计算节点和控制节点确认是否打开了端口:
iptables -nL |grep 5900
iptables -nL |grep 5999
iptables -nL |grep 6080
iptables -I INPUT -p tcp --dport 5900 -j ACCEPT
iptables -I INPUT -p tcp --dport 5999 -j ACCEPT
iptables -I INPUT -p tcp --dport 6088 -j ACCEPT
完成之后重启nova相关服务,刷新控制台
(1)需要手动配置vlan网络的相关属性
----------------Controller节点--------------
#
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_flat flat_networks physnet1
#
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types vlan
#
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_vlan network_vlan_ranges physnet1:1:1000
#
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini securitygroup firewall_driver iptables_hybrid
#
systemctl restart neutron-server
#
systemctl restart network
#
openstack-config --set /etc/neutron/l3_agent.ini DEFAULT external_network_bridge br-ex
#
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini ovs bridge_mappings physnet1:br-ex
#
systemctl restart neutron-openvswitch-agent neutron-l3-agent
-----------------------Compute节点----------------------------
#
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_flat flat_networks physnet1
#
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types vlan
#
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_vlan network_vlan_ranges physnet1:1:1000
#
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini securitygroup firewall_driver iptables_hybrid
#
openstack-config --set /etc/neutron/l3_agent.ini DEFAULT external_network_bridge br-ex
#
openstack-config --set /etc/neutron/plugins/ml2/openvswitch_agent.ini ovs bridge_mappings physnet1:br-ex
#
systemctl restart network
#
systemctl restart neutron-openvswitch-agent
(2)controller节点配置lbaas,fwaas
---------------------------lbaas---------------------------
#
openstack-config --set /etc/neutron/neutron.conf DEFAULT service_plugins router,lbaas,firewall
#
openstack-config --set /etc/neutron/neutron_lbaas.conf service_providers service_provider LOADBALANCER:Haproxy:neutron_lbaas.services.loadbalancer.drivers.haproxy.plugin_driver.HaproxyOnHostPluginDriver:default
#
openstack-config --set /etc/neutron/lbaas_agent.ini DEFAULT device_driver neutron_lbaas.services.loadbalancer.drivers.haproxy.namespace_driver.HaproxyNSDriver
#
openstack-config --set /etc/neutron/lbaas_agent.ini DEFAULT interface_driver neutron.agent.linux.interface.OVSInterfaceDriver
#
openstack-config --set /etc/neutron/lbaas_agent.ini haproxy user_group haproxy
----------------------fwaas----------------------
#
openstack-config --set /etc/neutron/neutron.conf service_providers FIREWALL:Iptables:neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver:default
#
openstack-config --set /etc/neutron/fwaas_driver.ini fwaas driver neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver
#
openstack-config --set /etc/neutron/fwaas_driver.ini fwaas enabled True
创建数据库
#
neutron-db-manage --service lbaas upgrade head
#
neutron-db-manage --subproject neutron-fwaas upgrade head
重启服务
#
systemctl restart neutron-server neutron-lbaas-agent
#
systemctl restart neutron-l3-agent
#
systemctl enable neutron-lbaas-agent
致此我们的openstack已经初步搭建完成下一节进行云主机的创建,
点击传送;另外在搭建过程中有任何疑问或建议欢迎留言讨论,笔者愿与您共同进步。