Openstack Kolla-Ansible安裝部署

部署節(jié)點制作

環(huán)境準(zhǔn)備

1. CentOS環(huán)境安裝

   • 配置國內(nèi)pypi源：

   mkdir -p ~/.config/pip/
   vim ~/.config/pip/pip.conf
   
   [global]
   index-url = https://mirrors.ustc.edu.cn/pypi/web/simple
   format = columns
   

   • CentOS 部分常用軟件安裝

   yum install -y vim net-tools  bash-completion-extras git
   

2. 安裝依賴

   • pip

   yum install -y python-pip
   pip install --upgrade pip
   

   • 軟件依賴

   yum install -y python-devel libffi-devel gcc openssl-devel libselinux-python
   

   • ansible 安裝

   yum install -y ansible
   pip install -U ansible
   

   • 修改ansible配置文件 /etc/ansible/ansible.cfg：

   [defaults]
   host_key_checking=False
   pipelining=True
   forks=100
   

安裝docker-ce

cd /etc/yum.repos.d/
wget https://mirrors.aliyun.com/docker-ce/linux/centos/docker-ce.repo
yum install docker-ce -y

開啟 Docker 的共享掛載功能：所謂共享掛載即同一個目錄或設(shè)備可以掛載到多個不同的路徑并且能夠保持互相之間的共享可見性方咆，類似于 mount --shared。在 OpenStack for Kolla 中滓走，主要解決 Neutron 的 namespace 在不同 container 中得以保持實效性的問題重挑。

mkdir /etc/systemd/system/docker.service.d
tee /etc/systemd/system/docker.service.d/kolla.conf << 'EOF'
> [Service]
> MountFlags=shared
> EOF

使用阿里的加速器(登陸阿里云–>控制臺–>產(chǎn)品與服務(wù)–>容器鏡像服務(wù)–>鏡像加速器 即可獲取加速器地址)

mkdir -p /etc/docker
tee /etc/docker/daemon.json <<-'EOF'
{
  "registry-mirrors": ["https://mb8n4btz.mirror.aliyuncs.com"]
}
EOF

啟動docker服務(wù)

systemctl enable docker.service
systemctl start docker.service

Kolla-Ansible 安裝

Kolla-Ansible 可以從pip安裝嗓化，也可以從git安裝，這里從git安裝

1. clone 代碼

git clone https://github.com/openstack/kolla
git clone https://github.com/openstack/kolla-ansible

2. 安裝

pip install -r kolla/requirements.txt
pip install -r kolla-ansible/requirements.txt
python kolla-ansible/setup.py install

注意：
如果出現(xiàn)requests 2.20.0 has requirement idna<2.8,>=2.5, but you'll have idna 2.4 which is incompatible.錯誤谬哀，則強制更新requets庫

pip install --ignore-installed requests

同樣刺覆，出現(xiàn)Cannot uninstall 'PyYAML'. It is a distutils installed project and thus we cannot accurately determine which files belong to it which would lead to only a partial uninstall.錯誤，強制更新

sudo pip install --ignore-installed PyYAML

3. copy globals.yml passwords.yml to /etc/kolla

mkdir -p /etc/kolla
cp -r kolla-ansible/etc/kolla/* /etc/kolla

4. 配置安裝目錄

mkdir dep-158
cp kolla-ansible/ansible/inventory/* ./dep-158

制作本地鏡像源

1. 修改kolla鏡像有關(guān)配置

vim /etc/kolla/globals.yml
openstack_release: "rocky"
network_interface: "ens192"

2. 拉取鏡像

kolla-ansible pull -vvv

3. 啟動容器

mkdir -p /var/www/html/registry
# docker run -d -p 5000:5000 -v /var/www/html/registry:/var/lib/registry --restart=always --name registry registry:2.6.2

4. 修改docker配置,10.10.129.151是ens192的ip

vim /etc/docker/daemon.json
{
  "registry-mirrors": ["https://mb8n4btz.mirror.aliyuncs.com"],
  "insecure-registries":["10.10.129.151:5000"]
}

5. 修改鏡像tag

for i in `docker images|grep -v registry|grep -v R|awk '{print $1}'`;do docker image tag $i:rocky 10.10.129.151:5000/$i:rocky;done

6. 上傳鏡像到私有鏡像倉庫

for i in `docker images|grep 10.10.129.151|awk '{print $1}'`;do docker push $i:rocky;done

7. 查看鏡像是否上傳成功

curl -XGET http://10.10.129.151:5000/v2/_catalog

8. 備份鏡像文件

tar -zcvf kolla-openstack-queens-registry.tar.gz /var/www/html/registry

Openstack 部署

環(huán)境說明

部署配置

kolla自帶了all-in-one和多節(jié)點的兩種部署方式史煎，需要配置ansible 部署文件

1. multinode部署文件修改

[control]
10.0.0.[10:12] ansible_user=ubuntu ansible_password=foobar ansible_become=true
# Ansible supports syntax like [10:12] - that means 10, 11 and 12.
# Become clause means "use sudo".

[network:children]
control
# when you specify group_name:children, it will use contents of group specified.

[compute]
10.0.0.[13:14] ansible_user=ubuntu ansible_password=foobar ansible_become=true

[monitoring]
10.0.0.10
# This group is for monitoring node.
# Fill it with one of the controllers' IP address or some others.

[storage:children]
compute

[deployment]
localhost       ansible_connection=local become=true
# use localhost and sudo

說明：

• Ansible官方文檔

2. 部署中使用的密碼存儲在/etc/kolla/passwords.yml文件中谦屑。通過運行下面命令生成隨機密碼,初始化之后，可手動更改keystone_admin_password密碼（OpenStack登錄密碼）

kolla-genpwd
vim /etc/kolla/passwords.yml
keystone_admin_password: password

部署

1. 確認(rèn)inventory配置文件是否正確

ansible -m ping all -i ./multinode

結(jié)果：
localhost | SUCCESS => {
    "changed": false,
    "ping": "pong"
}
10.10.129.158 | SUCCESS => {
    "changed": false,
    "ping": "pong"
}
10.10.129.159 | SUCCESS => {
    "changed": false,
    "ping": "pong"
}

2. 向各個節(jié)點安裝基本依賴篇梭，如docker等氢橙；

修改docker yum源。https 有時會報ssl的錯誤恬偷，這里替換為http悍手，也可以修改成本地源

vim /usr/share/kolla-ansible/ansible/roles/baremetal/defaults/main.yml
docker_yum_url: "http://yum.dockerproject.org"

如果打開了octavia，需要在/var/lib/kolla/config_files路徑下制作證書文件

mkdir -p /etc/kolla/config/octavia
git clone https://github.com/openstack/octavia.git
source create_certificates.sh /etc/kolla/config/octavia/ /home/octavia/etc/certificates/openssl.cnf
# 注意 /home/octavia/etc/certificates/openssl.cnf 為octavia的代碼路徑下的文件
cp /etc/kolla/config/octavia/private/* /etc/kolla/config/octavia/

# -vvv 可以打印出最詳細的信息
kolla-ansible -i ./multinode bootstrap-servers -vvv

4. 對主機執(zhí)行預(yù)部署檢查

kolla-ansible -i ./multinode prechecks -vv

5. 執(zhí)行OpenStack部署

kolla-ansible -i ./multinode deploy -vv

6. 使用OpenStack

kolla-ansible post-deploy
. /etc/kolla/admin-openrc.sh

一些注意事項

• 部署過程中所有的ansible task都在 /usr/share/kolla-ansible/ansible/roles/glance/tasks/ 下面，可以查看谓苟；

參考文檔

• kolla-ansible部署OpenStack多節(jié)點
• kolla構(gòu)建openstack鏡像的本地yum源配置
• kolla-openstack-queens-本地鏡像
• Openstack kolla-ansible