OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)

文章目录

前言

三个节点都需要配置 neutron 网络,以下为部署思路

配置 neutron 组件的用户、认证、endpoint

设置提供者 provider 网络(这里是桥接模式)

① 配置二层网络

② 配置网桥(插件)

③ 优化内核

④ 配置网桥接口与外部对接

⑤ 修改DHCP配置(修改配置文件、代理)

⑥ 配置网桥与内部组件的配置(修改配置文件、代理)

设置neutron与nova对接的配置

其中C1、C2节点配置相同


一、控制节点(CT)

'//创建数据库neutron,并进行授权'

mysql -u root -p123123

CREATE DATABASE neutron;

GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'NEUTRON_DBPASS';
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'NEUTRON_DBPASS';

flush privileges;
show databases;

exit
OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)
openstack user create --domain default --password NEUTRON_PASS neutron
'//创建neutron用户,用于在keystone做认证'
OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)
openstack role add --project service --user neutron admin
'//将neutron用户添加到service项目,并拥有管理员权限'

openstack service create --name neutron --description "OpenStack Networking" network
'//创建network服务,服务类型为network'
OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)
openstack endpoint create --region RegionOne network public http://ct:9696
openstack endpoint create --region RegionOne network internal http://ct:9696	
openstack endpoint create --region RegionOne network admin http://ct:9696
 '//注册API到neutron服务,给neutron服务关联端口,即添加endpoint'
OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)

OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)

'//安装提供者网络(桥接)'

--
yum -y install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables conntrack-tools
'//ebtables:管理iptables规则'
OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)
cp -a /etc/neutron/neutron.conf{,.bak}
grep -Ev '^$|#' /etc/neutron/neutron.conf.bak > /etc/neutron/neutron.conf
'//修改主配置文件neutron.conf'

openstack-config --set /etc/neutron/neutron.conf database connection mysql+pymysql://neutron:NEUTRON_DBPASS@ct/neutron
openstack-config --set /etc/neutron/neutron.conf DEFAULT core_plugin ml2
openstack-config --set /etc/neutron/neutron.conf DEFAULT service_plugins router
openstack-config --set  /etc/neutron/neutron.conf DEFAULT allow_overlapping_ips true
openstack-config --set /etc/neutron/neutron.conf DEFAULT transport_url rabbit://openstack:RABBIT_PASS@ct
openstack-config --set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone
openstack-config --set /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_status_changes true
openstack-config --set /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_data_changes true
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken www_authenticate_uri http://ct:5000
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_url http://ct:5000
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken memcached_servers ct:11211
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_type password
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken project_domain_name default
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken user_domain_name default
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken project_name service
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken username neutron
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken password NEUTRON_PASS
openstack-config --set /etc/neutron/neutron.conf oslo_concurrency lock_path /var/lib/neutron/tmp
openstack-config --set  /etc/neutron/neutron.conf nova  auth_url http://ct:5000
openstack-config --set  /etc/neutron/neutron.conf nova  auth_type password
openstack-config --set  /etc/neutron/neutron.conf nova  project_domain_name default
openstack-config --set  /etc/neutron/neutron.conf nova  user_domain_name default
openstack-config --set  /etc/neutron/neutron.conf nova  region_name RegionOne
openstack-config --set  /etc/neutron/neutron.conf nova  project_name service
openstack-config --set  /etc/neutron/neutron.conf nova  username nova
openstack-config --set  /etc/neutron/neutron.conf nova  password NOVA_PASS
'//传参'

--
cat /etc/neutron/neutron.conf
'//查看配置文件'
[DEFAULT]
core_plugin = ml2										'//启用二层网络插件'
service_plugins = router								'//启用三层网络插件'
allow_overlapping_ips = true
transport_url = rabbit://openstack:RABBIT_PASS@ct		'//配置rabbitmq连接'
auth_strategy = keystone								'//认证的方式为keystone'
notify_nova_on_port_status_changes = true				'//当网络接口发生变化时,通知给计算节点'
notify_nova_on_port_data_changes = true					'//当端口数据发生变化,通知计算节点'
[cors]
[database]												'//配置数据库连接'
connection = mysql+pymysql://neutron:NEUTRON_DBPASS@ct/neutron
[keystone_authtoken]									'//配置keystone认证信息'
www_authenticate_uri = http://ct:5000
auth_url = http://ct:5000
memcached_servers = ct:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS
[oslo_concurrency]										'//配置锁路径'
lock_path = /var/lib/neutron/tmp
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_middleware]
[oslo_policy]
[privsep]
[ssl]


[nova]													'//neutron需要给nova返回数据'
auth_url = http://ct:5000								'//到keystone认证nova'
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova											'//通过nova的用户名和密码到keystone验证nova的token'
password = NOVA_PASS
cp -a /etc/neutron/plugins/ml2/ml2_conf.ini{,.bak}
grep -Ev '^$|#' /etc/neutron/plugins/ml2/ml2_conf.ini.bak > /etc/neutron/plugins/ml2/ml2_conf.ini
'//修改ML2 plugin配置文件ml2_conf.ini'

openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 type_drivers  flat,vlan,vxlan
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types vxlan
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 mechanism_drivers linuxbridge,l2population
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 extension_drivers  port_security
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_flat flat_networks provider
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_vxlan vni_ranges 1:1000
openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup enable_ipset true
'//传参'

--
cat /etc/neutron/plugins/ml2/ml2_conf.ini
'//查看配置文件'
[DEFAULT]


[ml2]
type_drivers = flat,vlan,vxlan						'//配置类型驱动;单一扁平网络(桥接)和vlan;让二层网络支持桥接,支持基于vlan做子网划分'
tenant_network_types = vxlan						'//租户网络类型(vxlan)'
mechanism_drivers = linuxbridge,l2population		'//启用Linuxbridge和l2机制,l2population机制是为了简化网络通信拓扑,减少网络广播)'
extension_drivers = port_security					'//启用端口安全扩展驱动程序,基于iptables实现访问控制;但配置了扩展安全组会导致一些端口限制,造成一些服务无法启动'


[ml2_type_flat]
flat_networks = provider							'//配置公共虚拟网络为flat网络'


[ml2_type_vxlan]
vni_ranges = 1:1000									'//为私有网络配置VXLAN网络识别的网络范围'


[securitygroup]
enable_ipset = true									'//启用 ipset 增加安全组的方便性'
cp -a /etc/neutron/plugins/ml2/linuxbridge_agent.ini{,.bak}
grep -Ev '^$|#' /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
'//修改linuxbridge network provider 配置文件'

openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini linux_bridge physical_interface_mappings provider:ens36		'//VMnet1,局域网网卡名称'
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan enable_vxlan true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan local_ip 192.168.100.11		'//CT的局域网IP地址'
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan l2_population true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup enable_security_group  true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
'//传参'

--
cat /etc/neutron/plugins/ml2/linuxbridge_agent.ini
'//'查看配置文件
[DEFAULT]


[linux_bridge]
physical_interface_mappings = provider:ens36
'//指定上个文件中的桥接网络名称,与ens33物理网卡做关联,后期给虚拟机分配external网络,就可以通过ens33上外网'

[vxlan]					'//启用VXLAN覆盖网络,配置覆盖网络的物理网络接口的IP地址'
enable_vxlan = true		'//允许用户创建自定义网络(3层网络)'
local_ip = 192.168.100.11
l2_population = true


[securitygroup]			'//启用安全组并配置Linux桥接iptables防火墙驱动'
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
echo 'net.bridge.bridge-nf-call-iptables=1' >> /etc/sysctl.conf
echo 'net.bridge.bridge-nf-call-ip6tables=1' >> /etc/sysctl.conf
'//修改内核参数'

modprobe br_netfilter
'//向内核加入参数'

--
sysctl -p
'//使设置参数立即生效'
OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)
cp -a /etc/neutron/l3_agent.ini{,.bak}
grep -Ev '^$|#' /etc/neutron/l3_agent.ini.bak > /etc/neutron/l3_agent.ini
'//配置Linuxbridge接口驱动和外部网络网桥

openstack-config --set /etc/neutron/l3_agent.ini DEFAULT interface_driver linuxbridge
'//传参'

--
cat /etc/neutron/l3_agent.ini
'//查看配置文件'
[DEFAULT]
interface_driver = linuxbridge
cp -a /etc/neutron/dhcp_agent.ini{,.bak}
grep -Ev '^$|#' /etc/neutron/dhcp_agent.ini.bak > /etc/neutron/dhcp_agent.ini
'//修改dhcp_agent 配置文件'
 
openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT interface_driver linuxbridge
openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT dhcp_driver neutron.agent.linux.dhcp.Dnsmasq
openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT enable_isolated_metadata true
'//传参'

cat /etc/neutron/dhcp_agent.ini
'//查看配置文件'
[DEFAULT]
interface_driver = linuxbridge						'//指定默认接口驱动为linux网桥'			
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq		'//指定DHCP驱动'
enable_isolated_metadata = true						'//开启iso元数据'
cp -a /etc/neutron/metadata_agent.ini{,.bak}
grep -Ev '^$|#' /etc/neutron/metadata_agent.ini.bak > /etc/neutron/metadata_agent.ini
'//配置元数据代理、用于配置桥接与自服务网络的通用配置'

openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT nova_metadata_host ct
openstack-config --set /etc/neutron/metadata_agent.ini DEFAULT metadata_proxy_shared_secret METADATA_SECRET
'//传参'

--
cat /etc/neutron/metadata_agent.ini
'//查看配置文件'
[DEFAULT]
nova_metadata_host = ct
metadata_proxy_shared_secret = METADATA_SECRET
[cache]
'//修改nova配置文件,用于neutron交互'

--
openstack-config --set /etc/nova/nova.conf neutron url http://ct:9696
openstack-config --set /etc/nova/nova.conf neutron auth_url http://ct:5000
openstack-config --set /etc/nova/nova.conf neutron auth_type password
openstack-config --set /etc/nova/nova.conf neutron project_domain_name default
openstack-config --set /etc/nova/nova.conf neutron user_domain_name default
openstack-config --set /etc/nova/nova.conf neutron region_name RegionOne
openstack-config --set /etc/nova/nova.conf neutron project_name service
openstack-config --set /etc/nova/nova.conf neutron username neutron
openstack-config --set /etc/nova/nova.conf neutron password NEUTRON_PASS
openstack-config --set /etc/nova/nova.conf neutron service_metadata_proxy true
openstack-config --set /etc/nova/nova.conf neutron metadata_proxy_shared_secret METADATA_SECRET
'//传参'

--
cat /etc/nova/nova.conf
'//查看配置文件'
[DEFAULT]
enabled_apis = osapi_compute,metadata
my_ip = 192.168.100.11
use_neutron = true
firewall_driver = nova.virt.firewall.NoopFirewallDriver
transport_url = rabbit://openstack:RABBIT_PASS@ct
[api]
auth_strategy = keystone
[api_database]
connection = mysql+pymysql://nova:NOVA_DBPASS@ct/nova_api
[barbican]
[cache]
[cinder]
[compute]
[conductor]
[console]
[consoleauth]
[cors]
[database]
connection = mysql+pymysql://nova:NOVA_DBPASS@ct/nova
[devices]
[ephemeral_storage_encryption]
[filter_scheduler]
[glance]
api_servers = http://ct:9292
[guestfs]
[healthcheck]
[hyperv]
[ironic]
[key_manager]
[keystone]
[keystone_authtoken]
auth_url = http://ct:5000/v3
memcached_servers = ct:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = NOVA_PASS
[libvirt]
[metrics]
[mks]
[neutron]
url = http://ct:9696
auth_url = http://ct:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS
service_metadata_proxy = true
metadata_proxy_shared_secret = METADATA_SECRET
[notifications]
[osapi_v21]
[oslo_concurrency]
lock_path = /var/lib/nova/tmp
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_middleware]
[oslo_policy]
[pci]
[placement]
region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://ct:5000/v3
username = placement
password = PLACEMENT_PASS
[powervm]
[privsep]
[profiler]
[quota]
[rdp]
[remote_debug]
[scheduler]
discover_hosts_in_cells_interval = 300
[serial_console]
[service_user]
[spice]
[upgrade_levels]
[vault]
[vendordata_dynamic_auth]
[vmware]
[vnc]
enabled = true
server_listen =  $my_ip
server_proxyclient_address =  $my_ip
[workarounds]
[wsgi]
[xenserver]
[xvp]
[zvm]


[placement_database]
connection = mysql+pymysql://placement:PLACEMENT_DBPASS@ct/placement
'//创建ML2插件文件符号连接'
'//网络服务初始化脚本需要/etc/neutron/plugin.ini指向ML2插件配置文件的符号链接'
ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

--
su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \
--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
'//初始化数据库'
> --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
INFO  [alembic.runtime.migration] Context impl MySQLImpl.
INFO  [alembic.runtime.migration] Will assume non-transactional DDL.
/usr/lib/python2.7/site-packages/pymysql/cursors.py:170: Warning: (1280, u"Name 'alembic_version_pkc' ignored for PRIMARY key.")
  result = self._query(query)
  正在对 neutron 运行 upgrade...
...
...
  确定
  
--
systemctl restart openstack-nova-api.service
'//重启计算节点nova-api服务'

--
systemctl enable neutron-server.service \
neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
neutron-metadata-agent.service
systemctl start neutron-server.service \
neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
neutron-metadata-agent.service
'//开启neutron服务并设置开机自启动'

--
netstat -nautp|grep 9696
OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)
systemctl enable neutron-l3-agent.service && systemctl restart neutron-l3-agent.service
'//因为配置了第三层L3网络服务、所以需要启动第三层服务'

systemctl status neutron-l3-agent.service
OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)

二、计算节点(C1/C2)

yum -y install openstack-neutron-linuxbridge ebtables ipset conntrack-tools
'//ipset:iptables的扩展,允许匹配规则的集合,而不仅仅是一个IP'
OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)
cp -a /etc/neutron/neutron.conf{,.bak}
grep -Ev '^$|#' /etc/neutron/neutron.conf.bak > /etc/neutron/neutron.conf

openstack-config --set /etc/neutron/neutron.conf DEFAULT transport_url rabbit://openstack:RABBIT_PASS@ct
openstack-config --set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken www_authenticate_uri http://ct:5000
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_url http://ct:5000
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken memcached_servers ct:11211
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_type password
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken project_domain_name default
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken user_domain_name default
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken project_name service
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken username neutron
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken password NEUTRON_PASS
openstack-config --set /etc/neutron/neutron.conf oslo_concurrency lock_path /var/lib/neutron/tmp

--
cat /etc/neutron/neutron.conf

[DEFAULT]						'//neutron的server端与agent端通讯也是通过rabbitmq进行通讯的'
transport_url = rabbit://openstack:RABBIT_PASS@ct
auth_strategy = keystone		'//认证策略:keystone'
[cors]
[database]
[keystone_authtoken]			'//指定keystone认证的信息'
www_authenticate_uri = http://ct:5000
auth_url = http://ct:5000
memcached_servers = ct:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS
[oslo_concurrency]				'//配置锁路径(管理线程库)'
lock_path = /var/lib/neutron/tmp
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_middleware]
[oslo_policy]
[privsep]
[ssl]
cp -a /etc/neutron/plugins/ml2/linuxbridge_agent.ini{,.bak}
grep -Ev '^$|#' /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak > /etc/neutron/plugins/ml2/linuxbridge_agent.ini

openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini linux_bridge physical_interface_mappings provider:ens34		'//第二块网卡的名称,可ifconfig查看'
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan enable_vxlan  true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan local_ip 192.168.100.12
'//c1为12,c2为13,注意区别'
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan l2_population true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup enable_security_group true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

--
cat /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[DEFAULT]


[linux_bridge]
physical_interface_mappings = provider:ens34
'//直接将node节点external网络绑定在当前节点的指定的物理网卡,不需要node节点配置网络名称,node节点只需要接收controller节点指令即可'
'//controller节点上配置的external网络名称是针对整个openstack环境生效的,所以指定external网络绑定在当前node节点的物理网卡上'

[vxlan]								'//开启Vxlan网络'
enable_vxlan = true
local_ip = 192.168.100.12
l2_population = true				'//L2 Population 是用来提高 VXLAN 网络扩展能力的组件
'


[securitygroup]
enable_security_group = true		'//开启安全组'
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
'//指定安全组驱动文件'
echo 'net.bridge.bridge-nf-call-iptables=1' >> /etc/sysctl.conf
echo 'net.bridge.bridge-nf-call-ip6tables=1' >> /etc/sysctl.conf
'//允许虚拟机的数据通过物理机出去'

modprobe br_netfilter
'//用于向内核中加载模块或者从内核中移除模块'
'//modprobe -r 表示移除'

sysctl -p
OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)
openstack-config --set /etc/nova/nova.conf neutron auth_url http://ct:5000
openstack-config --set /etc/nova/nova.conf neutron auth_type password
openstack-config --set /etc/nova/nova.conf neutron project_domain_name default
openstack-config --set /etc/nova/nova.conf neutron user_domain_name default
openstack-config --set /etc/nova/nova.conf neutron region_name RegionOne
openstack-config --set /etc/nova/nova.conf neutron project_name service
openstack-config --set /etc/nova/nova.conf neutron username neutron
openstack-config --set /etc/nova/nova.conf neutron password NEUTRON_PASS

--
cat /etc/nova/nova.conf

[DEFAULT]
enabled_apis = osapi_compute,metadata
transport_url = rabbit://openstack:RABBIT_PASS@ct
my_ip = 192.168.100.12
use_neutron = true
firewall_driver = nova.virt.firewall.NoopFirewallDriver
[api]
auth_strategy = keystone
[api_database]
[barbican]
[cache]
[cinder]
[compute]
[conductor]
[console]
[consoleauth]
[cors]
[database]
[devices]
[ephemeral_storage_encryption]
[filter_scheduler]
[glance]
api_servers = http://ct:9292
[guestfs]
[healthcheck]
[hyperv]
[ironic]
[key_manager]
[keystone]
[keystone_authtoken]
auth_url = http://ct:5000/v3
memcached_servers = ct:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = NOVA_PASS
[libvirt]
virt_type = qemu
[metrics]
[mks]
[neutron]
auth_url = http://ct:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS
[notifications]
[osapi_v21]
[oslo_concurrency]
lock_path = /var/lib/nova/tmp
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_middleware]
[oslo_policy]
[pci]
[placement]
region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://ct:5000/v3
username = placement
password = PLACEMENT_PASS
[powervm]
[privsep]
[profiler]
[quota]
[rdp]
[remote_debug]
[scheduler]
[serial_console]
[service_user]
[spice]
[upgrade_levels]
[vault]
[vendordata_dynamic_auth]
[vmware]
[vnc]
enabled = true
server_listen = 0.0.0.0
server_proxyclient_address =  $my_ip
novncproxy_base_url = http://192.168.100.11:6080/vnc_auto.html
[workarounds]
[wsgi]
[xenserver]
[xvp]
[zvm]

三、CT 验证服务组件

openstack extension list --network
'//列出加载的扩展来验证neutron-server是否成功运行'

openstack network agent list
'//在控制节点上,列出所有的代理'

OpenStack 手动部署详细步骤(六)(Neutron 组件部分)(篇幅较长!)


上一篇:sea.js介绍


下一篇:Thanos 简介和实践