openstack 多区域部署

Regin One

/etc/kolla/global.yml

enable_keystone: "yes"
enable_horizon: "yes"

/etc/kolla/global.yml

openstack_region_name: "RegionOne"
multiple_regions_names:
	- "{{ openstack_region_name }}"
	- "RegionTwo"

特别注意kolla_internal_fqdn，其他Region通过该地址连接keystone。

ReigonTwo

/etc/kolla/global.yml

kolla_internal_fqdn_r1: 10.10.10.254
keystone_admin_url: "{{ admin_protocol }}://{{ kolla_internal_fqdn_r1 }}:{{ keystone_admin_port }}"
keystone_internal_url: "{{ internal_protocol }}://{{ kolla_internal_fqdn_r1 }}:{{ keystone_public_port }}"
openstack_auth:
	auth_url: "{{ admin_protocol }}://{{ kolla_internal_fqdn_r1 }}:{{ keystone_admin_port }}"
	username: "admin"
	password: "keystone_admin_password"
	project_name: "admin"
	domain_name: "default"

特别注意如果kolla_internal_vip_address或者kolla_external_vip_address与kolla_internal_fqdn_r1在同一个子网，需要在/etc/kolla/global.yml中修改keepalived_virtual_router_id的值。

修改cinder,nova,neutron,glance等的配置文件通讯RegionOne的keystone。
创建/etc/kolla/config/global.conf

[keystone_authtoken]
www_authenticate_uri = {{ keystone_internal_url }}
auth_url = {{ keystone_admin_url }}

创建/etc/kolla/config/nova.conf

auth_url= {{ keystone_admin_url }}

创建/etc/kolla/config/heat.conf

[trustee]
www_authenticate_url = {{ keystone_internal_url }}
auth_url = {{ keystone_internal_url }}
			
[ec2authtoken]
www_authenticate_uri = {{ keystone_internal_url }}

[clients_keystone]
www_authenticate_uri = {{ keystone_internal_url }}

创建/etc/kolla/config/ceilometer.conf

[service_credentials]
auth_url = {{ keystone_internal_url }}

修改当前RegionName

openstack_region_name: "RegionTwo"

禁用keystone和horizon

enable_keystone: "no"
enable_horizon: "no"