CC00017.CloudOpenStack——|OpenStack&组件.V04|——|OpenStack-controller|

一、openstack-neutron：在openstack_controller节点配置1配置先决条件

### --- 创建数据库，完成下列步骤
~~~     使用root用户连接mysql数据库

[root@controller ~]# mysql -uroot -p
Enter password: 123456

### --- 创建neutron数据库

MariaDB [(none)]> CREATE DATABASE neutron;
Query OK, 1 row affected (0.00 sec)

### --- 创建数据库用户neutron，并授予neutron用户对neutron数据库完全控制权限
~~~     退出数据库连接

MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'NEUTRON_DBPASS';
Query OK, 0 rows affected (0.01 sec)
MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'NEUTRON_DBPASS';
Query OK, 0 rows affected (0.00 sec)

### --- 执行admin环境变量脚本

[root@controller ~]# source admin-openrc.sh

### --- 在认证服务中创建网络服务的认证信息，完成下列步骤：
~~~     创建neutron用户

[root@controller ~]# keystone user-create --name neutron --pass NEUTRON_PASS
+----------+----------------------------------+
| Property |              Value               |
+----------+----------------------------------+
|  email   |                                  |
| enabled  |               True               |
|    id    | 0e2c1cbe865742a7be0ce02f3bb9227d |
|   name   |             neutron              |
| username |             neutron              |
+----------+----------------------------------+

### --- 连接neutron用户到service租户和admin角色

[root@controller ~]# keystone user-role-add --user neutron --tenant service --role admin

### --- 创建neutron服务

[root@controller ~]# keystone service-create --name neutron --type network --description "OpenStack Networking"
+-------------+----------------------------------+
|   Property  |              Value               |
+-------------+----------------------------------+
| description |       OpenStack Networking       |
|   enabled   |               True               |
|      id     | 2a780bab744f4af9bf53af14b125a444 |
|     name    |             neutron              |
|     type    |             network              |
+-------------+----------------------------------+

[root@controller ~]# keystone endpoint-create \
> --service-id $(keystone service-list | awk '/ network / {print $2}') \
> --publicurl http://controller.nice.com:9696 \
> --adminurl http://controller.nice.com:9696 \
> --internalurl http://controller.nice.com:9696 \
> --region regionOne
+-------------+----------------------------------+
|   Property  |              Value               |
+-------------+----------------------------------+
|   adminurl  | http://controller.nice.com:9696  |
|      id     | a1a573e58fbf4635ac6be5e2a44af52c |
| internalurl | http://controller.nice.com:9696  |
|  publicurl  | http://controller.nice.com:9696  |
|    region   |            regionOne             |
|  service_id | 2a780bab744f4af9bf53af14b125a444 |
+-------------+----------------------------------+

二、安装网络服务组件

[root@controller ~]# yum install openstack-neutron openstack-neutron-ml2 python-neutronclient which
Installed:
  openstack-neutron.noarch 0:2014.2-5.el7.centos                                           openstack-neutron-ml2.noarch 0:2014.2-5.el7.centos                                          
  Dependency Installed:
  conntrack-tools.x86_64 0:1.4.2-3.el7           dnsmasq-utils.x86_64 0:2.66-12.el7             ipset.x86_64 0:6.19-4.el7                  ipset-libs.x86_64 0:6.19-4.el7           
  libnetfilter_cthelper.x86_64 0:1.0.0-4.el7     libnetfilter_cttimeout.x86_64 0:1.0.0-2.el7    libnetfilter_queue.x86_64 0:1.0.2-2.el7    python-jsonrpclib.noarch 0:0.1.3-1.el7   
  python-neutron.noarch 0:2014.2-5.el7.centos    radvd.x86_64 0:2.7-1.el7.centos               
Complete!

三、配置网络服务组件

### --- 编辑/etc/neutron/neutron.conf文件，并完成下列操作：

[root@controller ~]# vim /etc/neutron/neutron.conf 
# 编辑[database]小节，配置数据库访问
[database]
......
connection=mysql://neutron:NEUTRON_DBPASS@controller.nice.com/neutron
# 编辑[DEFAULT]
......
rpc_backend=rabbit
rabbit_host=controller.nice.com
rabbit_password=guest
# 编辑[DEFAULT]修改一下认证方式为keystone的方式
......
auth_strategy=keystone
# 编辑[DEFAULT]和[keystone_authtoken]小节，配置认证服务访问：
[DEFAULT]
......
auth_uri=http://controller.nice.com:5000/v2.0
identity_uri=http://controller.nice.com:35357
admin_tenant_name=service
admin_user=neutron
admin_password=NEUTRON_PASS
# 编辑[DEFAULT]小节，启用Modular Layer2(ML2)插件，路由服务和重叠IP地址功能：
[DEFAULT]
......
core_plugin=ml2
service_plugins=router
allow_overlapping_ips=True                                  #  开启安全组设置，相当于云环境的防火墙
# 编辑[DEFAULT]小节，配置当网络拓扑结构发生变化时通知计算服务：
[DEFAULT]
......
notify_nova_on_port_status_changes=True                     #  开启端口状态，相当于网卡连接部分
notify_nova_on_port_data_changes=True                       #  开启端口的数据发生变化，状态连接数据
nova_url=http://controller.nice.com:8774/v2                 #  nova的访问地址
nova_admin_auth_url=http://controller.nice.com:35357/v2.0   #  nova下admin的访问地址
nova_region_name=regionOne                                  #  nova的可用域
nova_admin_username=nova                                    #  nova当前的管理用户
nova_admin_tenant_id=48bee3be288e477889d404a41a0b6f33       #  nova的admin管理员用户的ID号
nova_admin_password=NOVA_PASS                               #  nova管理员的密码

### --- 通过命令获取SERVICE_TENANT_ID号

[root@controller ~]# source admin-openrc.sh 
[root@controller ~]# keystone tenant-get service
+-------------+----------------------------------+
|   Property  |              Value               |
+-------------+----------------------------------+
| description |          Service Tenant          |
|   enabled   |               True               |
|      id     | 48bee3be288e477889d404a41a0b6f33 |
|     name    |             service              |
+-------------+----------------------------------+
    
~~~     ID号获取即可
~~~     (可选)在[DEFAULT]小节中配置详细日志输出，方便排错。
[DEFAULT]
......
verbose=True

四、配置Modular Layer2(ML2)plug-in

### --- 编辑/etc/neutron/plugins/ml2/ml2_conf.ini文件，并完成下列操作：
~~~     编辑[ml2]小节，启用flat和generic routing encapsulation(GRE)网络类型驱动，

[root@controller ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini
# 配置GRE租户网络和OVS驱动机制。
[ml2]
......
type_drivers=flat,gre                                       #  flat是一般网络类型，gre是多租户组网
tenant_network_types=gre                                    #  租户的默认类型为gre，默认使用gre租户组网
mechanism_drivers=openvswitch                               #  以及我们的组件openvswitch，软件级别的交换，做的功能是负责交换的事情
# 编辑[ml2_type_gre]小节，配置隧道标识范围：
[ml2_type_gre]
......
tunnel_id_ranges=1:1000                                     #  ml2租户使用的ID的范围为1~1000
# 编辑[securitygroup]小节，启用安全组，启用ipset并配置OVS防火墙驱动：
[securitygroup]
......
enable_security_group=True                                  #  开启安全组
enable_ipset=True                                           #  允许ml2相关对它的调试开启
firewall_driver=neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver      # 添加一个防火墙驱动，驱动是固定化的，不需要再去配置

五、配置计算服务使用neutron

### --- 默认情况下，计算服务使用传统网络，我们需要重新配置；把nova和neutron平台结合起来
~~~     编辑/etc/nova/nova.conf文件，并完成下列操作：

[root@controller ~]# vim /etc/nova/nova.conf
# 编辑[DEFAULT]小节，配置API接口和驱动程序:
[DEFAULT]
......
network_api_class=nova.network.neutronv2.api.API            # 网络连接过程的类
security_group_api=neutron                                  # 修改安全组为neutron为用户去提供的
linuxnet_interface_driver=nova.network.linux_net.LinuxOVSInterfaceDriver # 修改它的驱动类型      //虚拟机的网卡驱动，一般在开启虚拟化的时候会访问网卡驱动是什么
firewall_driver==nova.virt.firewall.NoopFirewallDriver      # 设置一下防火墙
# 编辑[neutron]小节，配置访问参数:
[neutron]
......
url=http://controller.nice.com:9696                         # 修改neutron的访问路径
auth_strategy=keystone                                      # 修改认证方案
admin_auth_url=http://controller.nice.com:35357/v2.0        # 注意空格，会有报错，曾经auth_strategy=keystone    前多了个空格，导致我无法解析
admin_tenant_name=service                                   # 配置admin租户它的名称
admin_username=neutron                                      # 配置用户名称
admin_password=NEUTRON_PASS                                 # admin的密码

六、完成配置

### --- 为ML2 插件配置文件创建连接文件。默认是不被使用的。所以需要创建软连接
[root@controller ~]#ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

### --- 初始化数据库
[root@controller ~]# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade juno" neutron
INFO  [alembic.migration] Running upgrade 544673ac99ab -> juno, juno

### --- 进入数据库，检查有没有问题

[root@controller ~]# mysql -uroot -p
MariaDB [(none)]> use neutron
MariaDB [neutron]> show tables;
+-------------------------------------+
| Tables_in_neutron                   |
+-------------------------------------+
| agents                              |
| alembic_version                     |
| allowedaddresspairs                 |
| arista_provisioned_nets             |
| arista_provisioned_tenants          |
| arista_provisioned_vms              |
| brocadenetworks                     |
| brocadeports                        |
| cisco_credentials                   |
| cisco_csr_identifier_map            |
| cisco_hosting_devices               |
| cisco_ml2_apic_contracts            |
| cisco_ml2_apic_host_links           |
| cisco_ml2_apic_names                |
| cisco_ml2_nexusport_bindings        |
| cisco_n1kv_multi_segments           |
| cisco_n1kv_network_bindings         |
| cisco_n1kv_port_bindings            |
| cisco_n1kv_profile_bindings         |
| cisco_n1kv_trunk_segments           |
| cisco_n1kv_vlan_allocations         |
| cisco_n1kv_vmnetworks               |
| cisco_n1kv_vxlan_allocations        |
| cisco_network_profiles              |
| cisco_policy_profiles               |
| cisco_port_mappings                 |
| cisco_provider_networks             |
| cisco_qos_policies                  |
| cisco_router_mappings               |
| consistencyhashes                   |
| csnat_l3_agent_bindings             |
| dnsnameservers                      |
| dvr_host_macs                       |
| embrane_pool_port                   |
| externalnetworks                    |
| extradhcpopts                       |
| firewall_policies                   |
| firewall_rules                      |
| firewalls                           |
| floatingips                         |
| ha_router_agent_port_bindings       |
| ha_router_networks                  |
| ha_router_vrid_allocations          |
| healthmonitors                      |
| hyperv_network_bindings             |
| hyperv_vlan_allocations             |
| ikepolicies                         |
| ipallocationpools                   |
| ipallocations                       |
| ipavailabilityranges                |
| ipsec_site_connections              |
| ipsecpeercidrs                      |
| ipsecpolicies                       |
| lsn                                 |
| lsn_port                            |
| maclearningstates                   |
| members                             |
| meteringlabelrules                  |
| meteringlabels                      |
| ml2_brocadenetworks                 |
| ml2_brocadeports                    |
| ml2_dvr_port_bindings               |
| ml2_flat_allocations                |
| ml2_gre_allocations                 |
| ml2_gre_endpoints                   |
| ml2_network_segments                |
| ml2_port_bindings                   |
| ml2_vlan_allocations                |
| ml2_vxlan_allocations               |
| ml2_vxlan_endpoints                 |
| mlnx_network_bindings               |
| multi_provider_networks             |
| network_bindings                    |
| network_states                      |
| networkconnections                  |
| networkdhcpagentbindings            |
| networkflavors                      |
| networkgatewaydevicereferences      |
| networkgatewaydevices               |
| networkgateways                     |
| networkqueuemappings                |
| networks                            |
| networksecuritybindings             |
| neutron_nsx_network_mappings        |
| neutron_nsx_port_mappings           |
| neutron_nsx_router_mappings         |
| neutron_nsx_security_group_mappings |
| nexthops                            |
| nuage_net_partition_router_mapping  |
| nuage_net_partitions                |
| nuage_provider_net_bindings         |
| nuage_subnet_l2dom_mapping          |
| ofcfiltermappings                   |
| ofcnetworkmappings                  |
| ofcportmappings                     |
| ofcroutermappings                   |
| ofctenantmappings                   |
| ovs_network_bindings                |
| ovs_tunnel_allocations              |
| ovs_tunnel_endpoints                |
| ovs_vlan_allocations                |
| packetfilters                       |
| poolloadbalanceragentbindings       |
| poolmonitorassociations             |
| pools                               |
| poolstatisticss                     |
| port_profile                        |
| portbindingports                    |
| portinfos                           |
| portqueuemappings                   |
| ports                               |
| portsecuritybindings                |
| providerresourceassociations        |
| qosqueues                           |
| quotas                              |
| router_extra_attributes             |
| routerflavors                       |
| routerl3agentbindings               |
| routerports                         |
| routerproviders                     |
| routerroutes                        |
| routerrules                         |
| routers                             |
| routerservicetypebindings           |
| securitygroupportbindings           |
| securitygrouprules                  |
| securitygroups                      |
| segmentation_id_allocation          |
| servicerouterbindings               |
| sessionpersistences                 |
| subnetroutes                        |
| subnets                             |
| tunnelkeylasts                      |
| tunnelkeys                          |
| tz_network_bindings                 |
| vcns_edge_monitor_bindings          |
| vcns_edge_pool_bindings             |
| vcns_edge_vip_bindings              |
| vcns_firewall_rule_bindings         |
| vcns_router_bindings                |
| vips                                |
| vpnservices                         |
+-------------------------------------+
142 rows in set (0.00 sec)

### --- 重新启动计算服务：重启nova的API接口，scheduler调度，conductor数据库交互的部分
systemctl restart  openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service

~~~     检查重启后所有服务的状态是否为up状态
[root@controller ~]# nova service-list
+----+------------------+---------------------+----------+---------+-------+----------------------------+-----------------+
| Id | Binary           | Host                | Zone     | Status  | State | Updated_at                 | Disabled Reason |
+----+------------------+---------------------+----------+---------+-------+----------------------------+-----------------+
| 1  | nova-consoleauth | controller.nice.com | internal | enabled | up    | 2021-01-11T06:30:50.000000 | -               |
| 2  | nova-cert        | controller.nice.com | internal | enabled | up    | 2021-01-11T06:30:50.000000 | -               |
| 3  | nova-conductor   | controller.nice.com | internal | enabled | up    | 2021-01-11T06:30:54.000000 | -               |
| 4  | nova-scheduler   | controller.nice.com | internal | enabled | up    | 2021-01-11T06:30:54.000000 | -               |
| 5  | nova-compute     | compute1.nice.com   | nova     | enabled | up    | 2021-01-11T06:30:51.000000 | -               |
+----+------------------+---------------------+----------+---------+-------+----------------------------+-----------------+

### --- 启动网络服务并配置开机自动启动

[root@controller ~]# systemctl enable neutron-server.service
[root@controller ~]# systemctl start neutron-server.service

七、验证

### --- 执行admin环境变量脚本

[root@controller ~]#  source admin-openrc.sh

### --- 列出加载的扩展模块，确认启动neutron-server进程

[root@controller ~]# neutron ext-list 
+-----------------------+-----------------------------------------------+
| alias                 | name                                          |
+-----------------------+-----------------------------------------------+
| security-group        | security-group                                |
| l3_agent_scheduler    | L3 Agent Scheduler                            |
| ext-gw-mode           | Neutron L3 Configurable external gateway mode |
| binding               | Port Binding                                  |
| provider              | Provider Network                              |
| agent                 | agent                                         |
| quotas                | Quota management support                      |
| dhcp_agent_scheduler  | DHCP Agent Scheduler                          |
| l3-ha                 | HA Router extension                           |
| multi-provider        | Multi Provider Network                        |
| external-net          | Neutron external network                      |
| router                | Neutron L3 Router                             |
| allowed-address-pairs | Allowed Address Pairs                         |
| extraroute            | Neutron Extra Route                           |
| extra_dhcp_opt        | Neutron Extra DHCP opts                       |
| dvr                   | Distributed Virtual Router                    |
+-----------------------+-----------------------------------------------+