OpenStack部署（使用openvswitch）各节点具体配置信息

整体的安装步骤按照如下链接进行
https://blog.csdn.net/networken/article/details/80682437
链接为queens版本的部署，可以改为相应的版本（需要安装与queens版本对应的其他版本包）

在链接中的网络节点的部署过程中，因为又支持linuxbridge改为支持openvswitch，在安装包时需要将安装openstack-neutron-linuxbridge改为安装openstack-neutron-openvswitch。

控制节点具体配置信息如下：

网络配置

/etc/neutron/neutron.conf

[database]
connection = mysql+pymysql://neutron:nsfocus@controller/neutron

[DEFAULT]
auth_strategy = keystone
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True
transport_url = rabbit://openstack:nsfocus@controller
notify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true

[oslo_messaging_rabbit]
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = nsfocus

[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = nsfocus

[nova]
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = nsfocus

[oslo_concurrency]
lock_path = /var/lib/neutron/tmp

/etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]
type_drivers = flat,vxlan tenant_network_types = vxlan
mechanism_drivers = openvswitch,l2population extension_drivers =
port_security

[ml2_type_flat]
flat_networks = provider

[ml2_type_vxlan]
vni_ranges = 1001:2000

[securitygroup]
enable_ipset = true

/etc/neutron/l3_agent.ini

[DEFAULT]
interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
external_network_bridge = br-ex

/etc/neutron/dhcp_agent.ini

[DEFAULT]
interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = true

/etc/neutron/plugins/ml2/openvswitch_agent.ini

[ovs]
local_ip = 10.66.107.201
tunnel_bridge = br-tun
bridge_mappings =

[agent]
tunnel_types = vxlan
l2_population = True

[securitygroup]
enable_security_group = true
firewall_driver =neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

/etc/neutron/metadata_agent.ini

[DEFAULT]
nova_metadata_ip = contoller
metadata_proxy_shared_secret = nsfocus

nova配置

/etc/nova/nova.conf

[DEFAULT]
enabled_apis = osapi_compute,metadata
transport_url = rabbit://openstack:nsfocus@controller
my_ip = 10.66.107.201
use_neutron = True
firewall_driver = nova.virt.firewall.NoopFirewallDriver

[api_database]
connection = mysql+pymysql://nova:nsfocus@controller/nova_api

[database]
connection = mysql+pymysql://nova:nsfocus@controller/nova

[api]
auth_strategy = keystone

[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = nova
password = nsfocus

[vnc]
enabled = true
vncserver_listen = $my_ip
vncserver_proxyclient_address = $my_ip

[glance]
api_servers = http://controller:9292

[oslo_concurrency]
lock_path = /var/lib/nova/tmp

[placement]
os_region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:35357/v3
username = placement
password = nsfocus

[neutron]
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = nsfocus
service_metadata_proxy = true
metadata_proxy_shared_secret = nsfocus

keystone配置

/etc/keystone/keystone.conf

[DEFAULT]
rpc_backend = rabbit control_exchange = keystone

[database]
connection = mysql+pymysql://keystone:nsfocus@10.66.107.201/keystone

[oslo_messaging_notifications]
driver = messagingv2
topics = notifications

[oslo_messaging_rabbit]
rabbit_host = localhost
rabbit_userid = openstack
rabbit_password = nsfocus

[token]
provider = fernet

/etc/httpd/conf/httpd.conf
更改ServerAdmin选项值为控制节点引用

ServerName controller

glance配置

/etc/glance/glance-api.conf

[database]
connection = mysql+pymysql://glance:nsfocus@controller/glance

[glance_store]
stores = file,http
default_store = file
filesystem_store_datadir = /var/lib/glance/images/

[keystone_authtoken]
auth_uri = http;//controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
password = nsfocus

[paste_deploy]
flavor = keystone

/etc/glance/glance-registry.conf

[database]
connection = mysql+pymysql://glance:nsfocus@controller/glance

[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
passowrd = nsfocus

[paste_deploy]
flavor = keystone

dashboard配置

/etc/openstack-dashboard/local_settings
如下配置为修改对应配置，不是全部配置

OPENSTACK_HOST = “controller”
ALLOWED_HOSTS = [’*’]
SESSION_ENGINE = ‘django.contrib.sessions.backends.cache’

CACHES = {
‘default’: {
‘BACKEND’: ‘django.core.cache.backends.memcached.MemcachedCache’,
‘LOCATION’: ‘controller:11211’,
} }

OPENSTACK_KEYSTONE_URL = “http://%s:5000/v3” % OPENSTACK_HOST
OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True

OPENSTACK_API_VERSIONS = {
“identity”: 3,
“image”: 2,
“volume”: 2, }

OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = “Default” OPENSTACK_KEYSTONE_DEFAULT_ROLE = “user”
TIME_ZONE = “Asia/Shanghai”

计算节点具体配置如下：

网络配置

/etc/neutron/neutron.conf

[DEFAULT]
transport_url = rabbit://openstack:nsfocus@controller
auth_strategy = keystone

[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = nsfocus

[oslo_concurrency]
lock_path = /var/lib/neutron/tmp

/etc/neutron/plugins/ml2/openvswitch_agent.ini

[ovs]
bridge_mappings =
tunnel_bridge = br-tun
local_ip = 10.66.107.200

[agent]
tunnel_types = vxlan
l2_population = True

[securitygroup]
firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
enable_security_group = true

nova配置

/etc/nova/nova.conf

[DEFAULT]
enabled_apis = osapi_compute,metadata
transport_url = rabbit://openstack:nsfocus@controller
my_ip = 10.66.107.200
use_neutron = True
firewall_driver = nova.virt.firewall.NoopFirewallDriver
notification_topics=notifications,trackinstance
notification_driver=messagingv2
notify_on_state_change=vm_and_task_state

[api]
auth_strategy = keystone

[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = nova
password = nsfocus

[vnc]
enabled = True
vncserver_listen = 0.0.0.0
vncserver_proxyclient_address = $my_ip
novncproxy_base_url = http://10.66.107.201:6080/vnc_auto.html

[glance]
api_servers = http://10.66.107.201:9292

[oslo_concurrency]
lock_path = /var/lib/nova/tmp

[placement]
os_region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:35357/v3
username = placement
password = nsfocus

[neutron]
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = nsfocus

[libvirt]
live_migration_flag=VIR_MIGRATE_UNDEFINE_SOURCE,VIR_MIGRATE_PEER2PEER,VIR_MIGRATE_LIVE,VIR_MIGRATE_TUNNELLED
cpu_mode = custom
cpu_model=kvm64