saltstack部署openstack

最新推荐文章于 2019-07-21 21:19:05 发布
最新推荐文章于 2019-07-21 21:19:05 发布
阅读量273 收藏 1
点赞数
文章标签： saltstack openstack
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/unique_niebie/article/details/78461260
版权

总体结构

/srv/
├── pillar
│   ├── openstack
│   │   ├── glance
│   │   │   └── init.sls
│   │   └── nova
│   │       └── init.sls
│   └── top.sls
└── salt
    └── openstack
        ├── chrony
        │   ├── files
        │   │   └── chrony.conf
        │   └── service.sls
        ├── glance
        │   ├── glance-api.conf
        │   ├── glance-registry.conf
        │   ├── init.sls
        │   └── map.jinja
        ├── keystone
        │   ├── endpoint.sls
        │   ├── files
        │   │   ├── httpd.conf
        │   │   ├── keystone.conf
        │   │   └── wsgi-keystone.conf
        │   ├── init.sls
        │   ├── install.sls
        │   └── user.sls
        ├── memcached
        │   ├── files
        │   │   └── memcached
        │   └── install.sls
        ├── mysql
        │   ├── files
        │   │   └── my.cnf
        │   ├── glance.sls
        │   ├── init.sls
        │   ├── install.sls
        │   ├── keystone.sls
        │   ├── neutron.sls
        │   └── nova.sls
        ├── nova_compute
        │   ├── init.sls
        │   ├── map.jinja
        │   ├── nova-compute.conf
        │   └── nova.conf
        ├── nova_server
        │   ├── init.sls
        │   ├── map.jinja
        │   └── nova.conf
        ├── rabbitmq
        │   └── install.sls
        └── yum
            ├── install.sls
            └── yum.repo

/srv/pillar/openstack/glance/init.sls

glance:
  dbserver: 172.25.50.101
  server: 172.25.50.101
  dbname: glance
  dbuser: glance
  dbpass: glance
  dbclienthost: '%'
  database: glance.*
  user: glance
  pass: glance
  email: root@root

/srv/pillar/openstack/neutron/init.sls

neutron:
  dbserver: 172.25.50.101
  server: 172.25.50.101
  dbname: neutron
  dbuser: neutron
  dbpass: neutron
  dbclienthost: '%'
  database: neutron.*
  user: neutron
  pass: neutron
  email: root@root
  metadata_proxy_shared_secret

/srv/pillar/openstack/nova/init.sls

nova:
  dbserver: 172.25.50.101
  server: 172.25.50.101
  dbname: nova
  dbuser: nova
  dbpass: nova
  dbclienthost: '%'
  database: nova.*
  user: nova
  pass: nova
  email: root@root

compute:
  mgmt: compute

yum

yum/
├── install.sls
└── yum.repo

0 directories, 2 files

/srv/salt/openstack/yum/install.sls

install:
  file.managed:
    - name: /etc/yum.repos.d/yum.repo
    - source: salt://openstack/yum/yum.repo

  cmd.run:
    - name: yum upgrade -y && touch /etc/yum.repos.d/yum_upgrade
    - unless: test -f /etc/yum.repos.d/yum_upgrade

chrony

chrony/
├── files
│   └── chrony.conf
└── service.sls

1 directory, 2 files

/srv/salt/openstack/chrony/service.sls

chrony-service:
  pkg.installed:
    - name: chrony

  file.managed:
    - name: /etc/chrony.conf
    - source: salt://openstack/chrony/files/chrony.conf

  service.running:
    - name: chronyd
    - enable: True
    - watch:
      - file: chrony-service

  cmd.run:
    - name: chronyc sources -v
    - watch:
      - file: chrony-service

MySQL

mysql/
├── files
│   └── my.cnf
├── glance.sls
├── init.sls
├── install.sls
├── keystone.sls
├── neutron.sls
└── nova.sls

1 directory, 7 files

/srv/salt/openstack/mysql/install.sls

include:
  - openstack.yum.install

mariadb-install:
  pkg.installed:
    - pkgs:
      - python-openstackclient
      - mariadb
      - mariadb-server
      - MySQL-python

/etc/my.cnf:
  file.managed:
    - source: salt://openstack/mysql/files/my.cnf
    - require:
      - pkg: mariadb-install

mariadb-service:
  service.running:
    - name: mariadb
    - enable: True
    - watch:
      - file: /etc/my.cnf
    - require:
      - pkg: mariadb-install

  cmd.run:
    - name: mysql -e "UPDATE mysql.user SET Password=PASSWORD('westos') WHERE User='root';DELETE FROM mysql.user WHERE User='';DELETE FROM mysql.user WHERE User='root' AND Host NOT IN ('localhost', '127.0.0.1', '::1');DROP DATABASE IF EXISTS test;FLUSH PRIVILEGES;" && touch /etc/mariadb-init.lock
    - unless: test -f /etc/mariadb-init.lock

/srv/salt/openstack/mysql/keystone.sls

#mysql-keystone:
#  cmd.run:
#    - names:
#      - mysql -pwestos -e "CREATE DATABASE keystone;"
#      - mysql -pwestos -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';"
#      - mysql -pwestos -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'keystone';"

mysql-keystone:
  mysql_database.present:
    - name: keystone
    - connection_user: root
    - connection_pass: westos
  mysql_user.present:
    - hosts: 
      - '%'
      - 'localhost'
    - name: keystone
    - password: keystone
    - connection_user: root
    - connection_pass: westos
  mysql_grants.present:
    - grant: all
    - database: keystone.*
    - user: keystone
    - hosts: 
      - '%'
      - 'localhost'
    - connection_user: root
    - connection_pass: westos

/srv/salt/openstack/mysql/glance.sls

#mysql-glance:
#  cmd.run:
#    - names:
#      - mysql -pwestos -e "CREATE DATABASE glance;"
#      - mysql -pwestos -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'glance';"
#      - mysql -pwestos -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'glance';"
mysql-glance:
  mysql_database.present:
    - name: glance
    - connection_user: root
    - connection_pass: westos
  mysql_user.present:
    - host: '%'
    - name: glance
    - password: glance
    - connection_user: root
    - connection_pass: westos
  mysql_grants.present:
    - grant: all
    - database: glance.*
    - user: glance
    - host: '%'
    - connection_user: root
    - connection_pass: westos

/srv/salt/openstack/mysql/nova.sls

#mysql-nova_api:
#  cmd.run:
#    - names:
#      - mysql -pwestos -e "CREATE DATABASE nova_api;"
#      - mysql -pwestos -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';"
#      - mysql -pwestos -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY 'nova';"
#
#mysql-nova:
#  cmd.run:
#    - names:
#      - mysql -pwestos -e "CREATE DATABASE nova;"
#      - mysql -pwestos -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';"
#      - mysql -pwestos -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY 'nova';"

mysql-nova-user:
  mysql_user.present:
    - host: '%'
    - name: nova
    - password: nova
    - connection_user: root
    - connection_pass: westos

mysql-nova-api:
  mysql_database.present:
    - name: nova_api
    - connection_user: root
    - connection_pass: westos
  mysql_grants.present:
    - grant: all
    - database: nova_api.*
    - user: nova
    - host: '%'
    - connection_user: root
    - connection_pass: westos

mysql-nova:
  mysql_database.present:
    - name: nova
    - connection_user: root
    - connection_pass: westos
  mysql_grants.present:
    - grant: all
    - database: nova.*
    - user: nova
    - host: '%'
    - connection_user: root
    - connection_pass: westos

/srv/salt/openstack/mysql/neutron.sls

#mysql-neutron:
#  cmd.run:
#    - names:
#      - mysql -pwestos -e "CREATE DATABASE neutron;"
#      - mysql -pwestos -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'neutron';"
#      - mysql -pwestos -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';"
mysql-neutron:
  mysql_database.present:
    - name: neutron
    - connection_user: root
    - connection_pass: westos
  mysql_user.present:
    - host: '%'
    - name: neutron
    - password: neutron
    - connection_user: root
    - connection_pass: westos
  mysql_grants.present:
    - grant: all
    - database: neutron.*
    - user: neutron
    - host: '%'
    - connection_user: root
    - connection_pass: westos

/srv/salt/openstack/mysql/init.sls

include:
  - openstack.mysql.install
  - openstack.mysql.keystone
  - openstack.mysql.glance
  - openstack.mysql.nova
  - openstack.mysql.neutron

keystone

keystone/
├── endpoint.sls
├── files
│   ├── httpd.conf
│   ├── keystone.conf
│   └── wsgi-keystone.conf
├── init.sls
├── install.sls
└── user.sls

1 directory, 7 files

/srv/salt/openstack/keystone/install.sls

keystone-install:
  pkg.installed:
    - pkgs:
      - openstack-keystone
      - httpd
      - mod_wsgi
      - python-keystoneclient
  file.managed:
    - name: /etc/keystone/keystone.conf
    - source: salt://openstack/keystone/files/keystone.conf
  cmd.run:
    - name: su -s /bin/sh -c "keystone-manage db_sync" keystone && touch /etc/keystone-dbsync.lock
    - unless: test -f /etc/keystone-dbsync.lock
    - require:
      - mysql_grants: mysql-keystone

fernet-keys:
  - cmd.run: keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone  && touch /etc/fernet-keys.lock
  - unless: test -f /etc/fernet-keys.lock
  - require:
    - cmd: keystone-install

/etc/httpd/conf/httpd.conf:
  file.managed:
    - source: salt://openstack/keystone/files/httpd.conf

openstack-keystone:
  file.managed:
    - name: /etc/httpd/conf.d/wsgi-keystone.conf
    - source: salt://openstack/keystone/files/wsgi-keystone.conf
    - require:
      - file: /etc/httpd/conf/httpd.conf
  service.running:
    - name: httpd
    - enable: True
    - require:
      - cmd: fernet-keys
    - watch: 
      - file: /etc/httpd/conf/httpd.conf

openstack-domain:
  cmd.run:
    - names: 
      - openssl rand -hex 10 > /mnt/openssl
      - export OS_TOKEN=`cat /mnt/openssl` && export OS_URL=http://172.25.50.1:35357/v3 && export OS_IDENTITY_API_VERSION=3 && openstack domain create --description "Default Domain" default && touch /etc/openstack-domain.lock
    - unless: test -f /etc/openstack-domain.lock

/srv/salt/openstack/keystone/user.sls

admin project:
  keystone.project_present:
    - name: admin
    - description: "Admin Project"
    - enabled: True

demo project:
  keystone.project_present:
    - name: demo
    - description: "Demo Project"

service porject:
  keystone.project_present:
    - name: service
    - description: "Service Project"


keystone roles:
  keystone.role_present:
    - names:
      - admin
      - user

admin:
  keystone.user_present:
    - password: 'admin'
    - email: admin@domain.com
    - roles:
        admin:
          - admin
    - project: admin
    - require:
      - keystone: admin project
      - keystone: keystone roles

demo:
  keystone.user_present:
    - password: 'demo'
    - email: demo@domain.com
    - roles:
        demo:
          - user
    - project: demo
    - require:
      - keystone: demo project
      - keystone: keystone roles

/srv/salt/openstack/keystone/init.sls

include:
  - openstack.keystone.install
  - openstack.keystone.endpoint
  - openstack.keystone.user

glance

keystone/
├── endpoint.sls
├── files
│   ├── httpd.conf
│   ├── keystone.conf
│   └── wsgi-keystone.conf
├── init.sls
├── install.sls
└── user.sls

1 directory, 7 files

/srv/salt/openstack/glance/init.sls

glance:
  pkg: 
    - installed

glance-api:
  service.running:
    - watch:
      - file: /etc/glance/glance-api.conf
    - require:
      - file: /etc/glance/glance-api.conf

/etc/glance/glance-api.conf:
  file.managed:
    - source: salt://openstack/glance/glance-api.conf
    - user: glance
    - group: glance
    - mode: 640
    - template: jinja
    - require:
      - pkg: glance

glance-registry:
  service.running:
    - watch:
      - file: /etc/glance/glance-registry.conf
    - require:
      - file: /etc/glance/glance-registry.conf

/etc/glance/glance-registry.conf:
  file.managed:
    - source: salt://openstack/glance/glance-registry.conf
    - user: glance
    - group: glance
    - mode: 640
    - template: jinja
    - require:
      - pkg: glance


glance_service:
  keystone.service_present:
    - name: glance
    - service_type: image
    - description: OpenStack Image Service

nova_server

nova_server/
├── init.sls
├── map.jinja
└── nova.conf

0 directories, 3 files

/srv/salt/openstack/nova_server/init.sls

nova_server:
  pkg.installed:
    - pkgs:
      - nova-api
      - nova-cert
      - nova-conductor
      - nova-consoleauth
      - nova-novncproxy
      - nova-scheduler
      - python-novaclient

/etc/nova/nova.conf:
  file.managed:
    - source: salt://openstack/nova_server/nova.conf
    - user: nova
    - group: nova
    - mode: 640
    - template: jinja
    - require:
      - pkg: nova_server

nova_services:
  service.running:
    - names:
      - nova-api
      - nova-cert
      - nova-consoleauth
      - nova-scheduler
      - nova-conductor
      - nova-novncproxy
    - watch:
      - file: /etc/nova/nova.conf
    - require:
      - file: /etc/nova/nova.conf



nova_service:
  keystone.service_present:
    - name: nova
    - service_type: compute
    - description: OpenStack Compute

nova_compet

nova_compute/
├── init.sls
├── map.jinja
├── nova-compute.conf
└── nova.conf

0 directories, 4 files

/srv/salt/openstack/nova_compute/init.sls

nova-compute:
  pkg.installed: []
  service.running:
    - watch:
      - file: /etc/nova/nova.conf
    - require:
      - file: /etc/nova/nova.conf

/etc/nova/nova.conf:
  file.managed:
    - source: salt://openstack/nova_compute/nova.conf
    - user: nova
    - group: nova
    - mode: 640
    - template: jinja
    - require:
      - pkg: nova-compute

/etc/nova/nova-compute.conf:
  file.managed:
    - source: salt://openstack/nova_compute/nova-compute.conf
    - user: nova
    - group: nova
    - mode: 640
    - template: jinja
    - require:
      - pkg: nova-compute

###**memcached**

memcached/
├── files
│ └── memcached
└── install.sls

1 directory, 2 files


/srv/salt/openstack/memcached/install.sls

memcache-service:
pkg.installed:
- name: memcached
file.managed:
- name: /etc/sysconfig/memcached
- source: salt://openstack/memcached/files/memcached
service.running:
- name: memcached
- enable: True
- watch:
- file: memcache-service

##**rabbitmq**

rabbitmq/
└── install.sls

0 directories, 1 file


/srv/salt/openstack/rabbitmq/install.sls

rabbitmq-install:
pkg.installed:
- name: rabbitmq-server
service.running:
- name: rabbitmq-server
- enable: True
cmd.run:
- name: rabbitmqctl add_user openstack openstack && rabbitmqctl set_permissions openstack “.” “.” “.*” && touch /etc/rabbitmq-openstack.lock
- unless: test -f /etc/rabbitmq-openstack.lock

openstack:
rabbitmq_user.present:
- password: openstack
- perms:
- ‘/’:
- ‘.*’
- ‘.*’
- ‘.*’
- runas: rabbitmq

rabbitmq_management:
rabbitmq_plugin.enabled: []

“`

unique_niebie
关注
  • 0
    点赞
  • 踩
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
openstack-automation:使用 saltstack 部署 Openstack
07-01
Saltstack 支持您在安装 OpenStack 等时想要执行的大多数任务。 这很酷的几个原因不要只安装 OpenStack，还要保持安装公式版本化，这样您就可以随时返回到上一个工作集。 盐公式并不意味着只是安装。 它们还可用于...
saltstack自动化部署openstack
qq_42711214的博客
12-01 394
实验环境：关闭防火墙，iptables，selinux 系统版本     hostname     ip                  角色 redhat7.3     server1     172.25.45.1     controller \ salt-minion redhat7.3     server2     172.25.45.2     comput \ salt-mini...
Saltstack实现Openstack管理
不懂的博客
04-26 1966
一.Saltstack实现Openstack管理官方手册： https://docs.saltstack.com/en/latest/topics/cloud/openstack.html 安装环境： 172.16.1.211 salt-master服务器 172.16.1.240 openstack控制节点ps: 下面都在salt-master操作1.安装插件：yum inst
使用saltstack部署openstack
追寻神迹
12-25 6159
1. 老外写的 http://www.gossamer-threads.com/lists/openstack/dev/34253 https://github.com/CSSCorp/openstack-automation/tree/master/Openstack_Havana http://csscorp.github.io/openstack-automation/ ht
openstack的自动化部署--saltstack
Running_free的博客
11-05 3706
一、前言关于什么是openstack以及什么时saltstack，这里就不多说了，直接进入主题二、openstack 的自动化部署1.实验环境 系统版本 hostname ip 角色 redhat7.2 server1 172.25.27.1 controller \ salt-minion redhat7.2 server2 172.25.27.2 c
用SaltStack实现自动部署OpenStack
Running_free的博客
11-02 709
一、实验环境 系统环境 IP地址 hostname 角色 redhat7.2 172.25.27.1 controller 控制节点 、salt-minion redhat7.2 172.25.27.2 comput 计算节点 、salt-miniom redhat7.2 172.25.27.3 server3 salt-master 二
openstack-automation-saltstack:使用Saltstack进行Openstack部署
05-10
标题描述项目业主贡献者邮寄到标签已建立修改的OpenStack自动化盐堆该项目由HCL Tech系统软件团队拥有，以支持使用SaltStack进行OpenStack的自动化安装。 HCL技术系统软件团队HCL技术系统软件团队hcl_ss_oss@hcl....
saltstack_openstack:使用saltstack布署openstack
06-21
saltstack_openstack 使用saltstack布署openstack juno，只支持ubuntu14.04 #使用 在controller,compute,network上安装ubuntu14.04-x86_64 配置salt git clone mv saltstack_openstack /srv salt '*' saltutil....
RDO部署openstack
07-07
亲测可以成功，如果中断可以多运行几次命令，该版本为mitaka,如果想用别的版本给我留言
网易OpenStack部署运维实战
03-03
OpenStack是一个开源的IaaS实现，目前在企业得到越来越多的应用，本文分享了网易公司利用OpenStack开发的一套云计算管理平台的实战经验，网易私有云平台团队希望通过本文和广大的OpenStack使用者进行一个交流。...
使用Saltstack实现Openstack管理
deep_AELY的博客
08-17 693
rhel7 安装环境： 172.25.39.1 salt-master服务器 172.25.29.11 OpenStack控制节点仿照网上的操作实现的功能。。。。ps: 下面都在salt-master操作 1.安装插件： yum install salt-cloud python-libcloud2.创建salt-cloud配置文件： mkdir /etc/salt/cloud.prov
saltstack部署OpenStack rocky版
一只认真的鱼
07-21 276
通过saltstack工具，来自动部署OpenStack。基本的yaml 源码放在github上了。有兴趣可以查看。自行测试三台虚拟机安装没有问题。需要注意的是安装cinder_slave（从节点）的时候。dev的分区需要注意，通过pvcreate 创建的名称为/dev/sdb。有需求可以自行更改。再使用前通过几个.sh脚本用来修改所有yaml文件中的的名称以及密码。 github地址为： htt...
使用Saltstack自动部署Openstack
weixin_33878457的博客
10-23 104
项目地址：https://github.com/baixuan/saltstack-openstack我使用的是源代码方式安装的Openstack，在Folsom版本下测试通过，原则上也支持Icehouse。目前只是实现了自动部署Compute Node，抽空在完善自动部署Controller。 转载于:https://blog.51cto.com/bxuan/15...
自动化运维平台saltstack的使用与搭建
parameter_的博客
08-09 2611
saltstacks简介saltstack是一个功能强大的自动化运维软件。 有三种模式 1）本地模式（local），不需要启动进程，只要配置文件就可以写出来 2）master minion 模式 3）代理模式（syndic） 4）ssh模式我们本次主要使用的是master minion模式 master –> minion 模式: master默认—->监听本地所有网络接口 长连接
saltstack实用案例
chengxuyuanyonghu的专栏
03-21 2133
saltstack实现yum安装httpd vim /etc/salt/master   #打开下面三行 416 file_roots: 417   base: 418     - /srv/salt   保存退出   mkdir /srv/salt   重启服务   /etc/init.d/salt-ma
自动化管理工具Saltstack之用户管理篇(6)
雨落寒冰的博客
12-27 5643
1.添加用户 /srv/salt/top.sls base: '10.0.10.100': - user.useradd/srv/salt/user/useradd.sls jim: user.present: - fullname: jim - shell: /bin/bash - password: '$6$hyxchyxc$r2R3uQcn
saltstack自动化运维系列⑥SaltStack实践安装配置HAproxy的Keepalived
reblue520的专栏
04-19 177
saltstack自动化运维系列⑥SaltStack实践安装配置HAproxy的Keepalived 安装配置Keepalived 1、编写功能模块 #创建keepalived目录# mkdir -p /srv/salt/prod/keepalived/files# cd /srv/salt/prod/keepalived/files #获取并解压keepalived# wget ...
一键部署openstack
最新发布
09-13
你可以按照以下步骤来一键部署OpenStack： 1. 选择一个适合你的OpenStack部署工具，比如Kolla-Ansible、TripleO或者DevStack。这些工具可以简化部署过程并提供自动化脚本。 2. 在部署主机上安装所需的操作系统。...

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值