环境说明

name ip 备注
ansible 192.168.200.3 用来执行ansible的主机
controller 192.168.200.23 管理节点
compute 192.168.200.6 计算节点

题目要求：

使用OpenStack平台创建三台云主机进行实验，云主机镜像使用提供的CentOS_7.5_x86_64_XD.qcow2镜像，Ansible节点flavor使用2核/4G内存/40G硬盘；controller节点flavor使用4核/8G内存/100G硬盘；compute接点flavor使用4核/8G内存/100G硬盘+50G临时磁盘。节点规划表中的IP地址为作者的IP地址，在进行实操案例的时候，按照自己的环境规划网络与IP地址。Ansible节点安装好Ansible服务。然后做好Ansible节点对controller和compute节点的无秘钥访问操作。

1. 配置ansible无秘钥登录

配置Ansible节点无秘钥登录controller和compute节点。配置完无秘钥登录后，使用Ansible节点ssh连接测试。（若云主机已是无秘钥访问的，则不用配置无秘钥）

在ansible的工作目录下/root/openstack（默认情况是/etc/ansible）下设置：

  1. [root@ansible openstack]# cat  ansible.cfg 
  2. [defaults]
  3. inventory  = /root/openstack/hosts
  4. remote_user = root
  5. host_key_checking = False
  7. [root@ansible openstack]# cat hosts 
  8. [controller]
  9. controller ansible_user=root ansible_ssh_pass=000000
  10. [compute]
  11. compute    ansible_user=root ansible_ssh_pass=000000

2.创建角色目录

安装好ansible在工作目录下创建roles目录并进入

(1)创建各个组件的roles

  1. [root@ansible roles]# ansible-galaxy init init                                #此文件用来初始化
  2. [root@ansible roles]# ansible-galaxy init mysql
  3. [root@ansible roles]# ansible-galaxy init keystone
  4. [root@ansible roles]# ansible-galaxy init glance
  5. [root@ansible roles]# ansible-galaxy init nova-controller
  6. [root@ansible roles]# ansible-galaxy init nova-compute
  7. [root@ansible roles]# ansible-galaxy init neutron-controller
  8. [root@ansible roles]# ansible-galaxy init neutron-compute
  9. [root@ansible roles]# ansible-galaxy init cinder-controller
  10. [root@ansible roles]# ansible-galaxy init cinder-compute
  11. [root@ansible roles]# ansible-galaxy init swift-controller
  12. [root@ansible roles]# ansible-galaxy init swift-compute
  13. [root@ansible roles]# ansible-galaxy init dashboard
  14. [root@ansible roles]# ansible-galaxy init

image.png

(2)配置init角色

init角色是关键的一环要谨慎，进入init这个角色进行添加所需的模板文件和repo文件
下面这个文件是作为模板文件里面的值作为变量然后在group_vars内的all文件赋值

  1. [root@ansible init]# ls
  2. defaults  files  handlers  meta  README.md  tasks  templates  tests  vars
  3. [root@ansible init]# ls templates/                                    #将这个模板文件存放在这里并改为j2
  4. openrc.sh.j2

(2.1)openrc.sh.j2文件

  1. # vi  openrc.sh.j2
  2. #--------------------system Config--------------------##
  3.  #Controller Server Manager IP. example:x.x.x.x
  4.  HOST_IP={{controller_ip}}
  6.  #Controller HOST Password. example:000000
  7.  HOST_PASS={{password}}
  9.  #Controller Server hostname. example:controller
  10.  HOST_NAME={{controller_name}}
  12.  #Compute Node Manager IP. example:x.x.x.x
  13.  HOST_IP_NODE={{compute_ip}}
  15.  #Compute HOST Password. example:000000
  16.  HOST_PASS_NODE={{password}}
  18.  #Compute Node hostname. example:compute
  19.  HOST_NAME_NODE={{compute_name}}
  21.  #--------------------Chrony Config-------------------##
  22.  #Controller network segment IP.  example:x.x.0.0/16(x.x.x.0/24)
  23.  network_segment_IP={{network_segment_ip}}/24
  25.  #--------------------Rabbit Config ------------------##
  26.  #user for rabbit. example:openstack
  27.  RABBIT_USER=openstack
  29.  #Password for rabbit user .example:000000
  30.  RABBIT_PASS={{password}}
  32.  #--------------------MySQL Config---------------------##
  33.  #Password for MySQL root user . exmaple:000000
  34.  DB_PASS={{password}}
  36.  #--------------------Keystone Config------------------##
  37.  #Password for Keystore admin user. exmaple:000000
  38.  DOMAIN_NAME=demo
  39.  ADMIN_PASS={{password}}
  40.  DEMO_PASS={{password}}
  42.  #Password for Mysql keystore user. exmaple:000000
  43.  KEYSTONE_DBPASS={{password}}
  44.  #--------------------Glance Config--------------------##
  45.  #Password for Mysql glance user. exmaple:000000
  46.  GLANCE_DBPASS={{password}}
  48.  #Password for Keystore glance user. exmaple:000000
  49.  GLANCE_PASS={{password}}
  51.  #--------------------Nova Config----------------------##
  52.  #Password for Mysql nova user. exmaple:000000
  53.  NOVA_DBPASS={{password}}
  55.  #Password for Keystore nova user. exmaple:000000
  56.  NOVA_PASS={{password}}
  58.  #--------------------Neturon Config-------------------##
  59.  #Password for Mysql neutron user. exmaple:000000
  60.  NEUTRON_DBPASS={{password}}
  62.  #Password for Keystore neutron user. exmaple:000000
  63.  NEUTRON_PASS={{password}}
  65.  #metadata secret for neutron. exmaple:000000
  66.  METADATA_SECRET={{password}}
  68.  #Tunnel Network Interface. example:x.x.x.x
  69.  #INTERFACE_IP=
  70.  {% if ansible_fqdn == "controller" %}
  71.  INTERFACE_IP={{controller_ip}}
  72.  {% elif ansible_fqdn == "compute" %}
  73.  INTERFACE_IP={{compute_ip}}
  74.  {% endif %}
  76.  #External Network Interface. example:eth1
  77.  INTERFACE_NAME={{external_network}}
  79.  #External Network The Physical Adapter. example:provider
  80.  Physical_NAME={{physical_name}}
  82.  #First Vlan ID in VLAN RANGE for VLAN Network. exmaple:101
  83.  minvlan=2
  85.  #Last Vlan ID in VLAN RANGE for VLAN Network. example:200
  86.  maxvlan=200
  87.  #--------------------Cinder Config--------------------##
  88.  #Password for Mysql cinder user. exmaple:000000
  89.  CINDER_DBPASS={{password}}
  91.  #Password for Keystore cinder user. exmaple:000000
  92.  CINDER_PASS={{password}}
  94.  #Cinder Block Disk. example:md126p3
  95.  BLOCK_DISK={{cider_name}}
  97.  #--------------------Swift Config---------------------##
  98.  #Password for Keystore swift user. exmaple:000000
  99.  SWIFT_PASS={{password}}
  101.  #The NODE Object Disk for Swift. example:md126p4.
  102.  OBJECT_DISK={{swift_name}}
  104.  #The NODE IP for Swift Storage Network. example:x.x.x.x.
  105.  STORAGE_LOCAL_NET_IP={{storage_local_net_ip}}
  107.  #--------------------Heat Config----------------------##
  108.  #Password for Mysql heat user. exmaple:000000
  109.  HEAT_DBPASS={{password}}
  111.  #Password for Keystore heat user. exmaple:000000
  112.  HEAT_PASS={{password}}
  114.  #--------------------Zun Config-----------------------##
  115.  #Password for Mysql Zun user. exmaple:000000
  116.  ZUN_DBPASS={{password}}
  118.  #Password for Keystore Zun user. exmaple:000000
  119.  ZUN_PASS={{password}}
  121.  #Password for Mysql Kuryr user. exmaple:000000
  122.  KURYR_DBPASS={{password}}
  124.  #Password for Keystore Kuryr user. exmaple:000000
  125.  KURYR_PASS={{password}}
  127.  #--------------------Ceilometer Config----------------##
  128.  #Password for Gnocchi ceilometer user. exmaple:000000
  129.  CEILOMETER_DBPASS={{password}}
  130.  #Password for Keystore ceilometer user. exmaple:000000
  131.  CEILOMETER_PASS={{password}}
  133.  #--------------------AODH Config----------------##
  134.  #Password for Mysql AODH user. exmaple:000000
  135.  AODH_DBPASS={{password}}
  137.  #Password for Keystore AODH user. exmaple:000000
  138.  AODH_PASS={{password}}
  140.  #--------------------Barbican Config----------------##
  141.  #Password for Mysql Barbican user. exmaple:000000
  142.  BARBICAN_DBPASS={{password}}
  144.  #Password for Keystore Barbican user. exmaple:000000
  145.  BARBICAN_PASS={{password}}

(2.2)存放变量的文件

  1. [root@ansible openstack]# cd group_vars/
  2. [root@ansible group_vars]# cat all 
  3. controller_ip: 192.168.200.23
  4. controller_name: controller
  5. compute_ip: 192.168.200.6
  6. compute_name: compute
  7. password: '000000'
  8. cider_name: vda1 
  9. swift_name: vdb
  10. network_segment_ip: 192.168.200.0
  11. external_network: eth1
  12. physical_name: provider
  13. storage_local_net_ip: 192.168.200.3

3.编写各个角色的playbook

(3.1)init的main文件

  1. [root@ansible roles]# cd init/tasks/
  2. [root@ansible tasks]# cat main.yml 
  3. - name: remote old repo
  4.   shell: 'rm -rf /etc/yum.repos.d/*'
  5. - name: add new repo
  6.   copy: src=/root/xiandian.repo dest=/etc/yum.repos.d/
  7. - name: yum install iaas-xiandian
  8.   yum: name=iaas-xiandian
  9. - name: template openrc.sh
  10.   template: src=openrc.sh.j2 dest=/etc/xiandian/openrc.sh
  11. - name: install iaas-pre-host.sh
  12.   shell: iaas-pre-host.sh

(3.2)glance的main文件

  1. [root@ansible roles]# cd glance/tasks/
  2. [root@ansible tasks]# cat main.yml 
  3. - name: install glance
  4.   shell: iaas-install-glance.sh

(3.3)mysql的main文件

  1. [root@ansible roles]# cd mariadb/tasks/
  2. [root@ansible tasks]# cat main.yml 
  3. - name: install mariadb
  4.   shell: iaas-install-mysql.sh

(3.4)keystone的main文件

  1. root@ansible roles]# cd keyston/tasks/
  2. [root@ansible tasks]# cat main.yml 
  3. - name: install keystone
  4.   shell: iaas-install-keystone.sh

(3.5)nova的main文件

  1. [root@ansible roles]# cat nova-controller/tasks/main.yml 
  2. - name: install nova-controller
  3.   shell: iaas-install-nova-controller.sh  
  4. [root@ansible roles]# cat nova-compute/tasks/main.yml 
  5. - name: install nova-compute
  6.   shell: iaas-install-nova-compute.sh

(3.6)neutron的main文件

  1. [root@ansible roles]# cat neutron-controller/tasks/main.yml 
  2. - name: install neutron-controller
  3.   shell: iaas-install-neutron-controller.sh
  4. [root@ansible roles]# cat neutron-compute/tasks/main.yml 
  5. - name: install neutron-compute
  6.   shell: iaas-install-neutron-compute.sh

(3.7)cinder的main文件

  1. [root@ansible roles]# cat cinder-controller/tasks/main.yml 
  2. - name:  install cinder-controller
  3.   shell: iaas-install-cinder-controller.sh  
  4. [root@ansible roles]# cat cinder-compute/tasks/main.yml 
  5. - name: install cinder-compute
  6.   shell: iaas-install-cinder-compute.sh

(3.8)swift的main文件

  1. [root@ansible roles]# cat swift-controller/tasks/main.yml 
  2. - name: install swift-controller
  3.   shell: iaas-install-swift-controller.sh
  4. [root@ansible roles]# cat swift-compute/tasks/main.yml 
  5. - name: install swift-compute
  6.   shell: iaas-install-swift-compute.sh

(3.9)heat的main文件

  1. [root@ansible roles]# cat heat/tasks/main.yml 
  2. - name: instal heat
  3.   shell: iaas-install-heat.sh

(3.10)dashboard的main文件

  1. [root@ansible roles]# cat dashboard/tasks/main.yml 
  2. - name: install dashboard
  3.   shell: iaas-install-dashboard.sh

4.编写引入文件

  1. [root@ansible openstack]# ll
  2. total 12
  3. -rw-r--r--  1 root root  95 Nov 11 00:13 ansible.cfg
  4. drwxr-xr-x  2 root root  17 Nov 10 23:44 group_vars
  5. -rw-r--r--  1 root root 129 Nov 10 21:18 hosts
  6. -rw-r--r--  1 root root 337 Nov 11 01:05 install_openstack.yml
  7. drwxr-xr-x 16 root root 275 Nov 10 21:14 roles
  9. [root@ansible openstack]# cat  install_openstack.yml 
  10. ---
  12. - hosts: controller
  13.   remote_user: root
  14.   roles: 
  15.   - init
  16.   - mariadb
  17.   - keyston
  18.   - glance
  19.   - nova-controller
  20.   - neutron-controller
  21.   - dashboard
  22.   - cinder-controller
  23.   - swift-controller
  24.   - heat
  25. - hosts: compute
  26.   remote_user: root
  27.   roles:
  28.   - init
  29.   - nova-compute
  30.   - neutron-compute
  31.   - cinder-compute

5.目录结构：

最终的目录结构为这样：

  1. [root@ansible openstack]# tree 
  2. .
  3. ├── ansible.cfg
  4. ├── group_vars
  5. │   └── all
  6. ├── hosts
  7. ├── install_openstack.yml
  8. └── roles                                                                                        #下面的目录我删除了一些不然太长了
  9.     ├── cinder-compute
  10.     │   ├── defaults
  11.     │   │   └── main.yml
  12.     │   └── vars
  13.     │       └── main.yml
  14.     ├── cinder-controller
  15.     │   ├── default
  16.     │       └── main.yml
  17.     ├── dashboard
  18.     │   ├── defaults
  19.     │   └── vars
  20.     │       └── main.yml
  21.     ├── glance
  22.     │   ├── defaults
  23.     │   │   └── main.yml
  24.     │   └── vars
  25.     │       └── main.yml
  26.     ├── heat
  27.     │   ├── defaults
  28.     │   │   └── main.yml
  29.     │   └── vars
  30.     │       └── main.yml
  31.     ├── init
  32.     │   ├── defaults
  33.     │       └── main.yml
  34.     ├── keyston
  35.     │   ├── defaults
  36.     │       └── main.yml
  37.     ├── mariadb
  38.     │   ├── defaults
  39.     │       └── main.yml
  40.     ├── neutron-compute
  41.     │   ├── defaults
  42.     │       └── main.yml
  43.     ├── neutron-controller
  44.     │   ├── defaults
  45.     │       └── main.yml
  46.     ├── nova-compute
  47.     │   ├── defaults
  48.     │       └── main.yml
  49.     ├── nova-controller
  50.     │   ├── defaults
  51.     │       └── main.yml
  52.     ├── swift-compute
  53.     │   ├── defaults
  54.     │       └── main.yml
  55.     └── swift-controller
  56.         ├── defaults
  57.         │   └── main.yml
  58.             └── main.yml

6.验证，执行

  1. [root@ansible openstack]# ansible-playbook --syntax-check install_openstack.yml   #验证
  2. [WARNING]: Found both group and host with same name: controller
  3. [WARNING]: Found both group and host with same name: compute
  5. playbook: install_openstack.yml
  7. [root@ansible openstack]# ansible-playbook install_openstack.yml           #执行

…………………….
……………………………..
……………………………………其实我没做出来

疑问？

  1. 主机第二块网卡
  2. compute的磁盘
  3. 在init这个角色内运行iaas-pre-host.sh 这个脚本后重启问题