fb34651cc2
The main purpose of that patch is to allow creation of "virtual" container_skel, that will not generate any containers in inventory, but will contain all containers of corresponsive hosts. That might be useful in usecases like AZs, or when deployer simply wants to create custom groups and include all bare metal hosts along with all containers on them to the same group. Such behaviour can be triggered when empty belongs_to is provided for container_skel along with is_nest property. Then container_skel item will contain host-containers and it's children. Change-Id: Ic5570bfe9f0f54d1ea1e067834c11e6c390a2686
420 lines
12 KiB
Plaintext
420 lines
12 KiB
Plaintext
---
|
|
cidr_networks:
|
|
pod1_container: 172.29.236.0/24
|
|
pod2_container: 172.29.237.0/24
|
|
pod3_container: 172.29.238.0/24
|
|
pod4_container: 172.29.239.0/24
|
|
pod1_tunnel: 172.29.240.0/24
|
|
pod2_tunnel: 172.29.241.0/24
|
|
pod3_tunnel: 172.29.242.0/24
|
|
pod4_tunnel: 172.29.243.0/24
|
|
pod1_storage: 172.29.244.0/24
|
|
pod2_storage: 172.29.245.0/24
|
|
pod3_storage: 172.29.246.0/24
|
|
pod4_storage: 172.29.247.0/24
|
|
|
|
used_ips:
|
|
- "172.29.236.1,172.29.236.50"
|
|
- "172.29.237.1,172.29.237.50"
|
|
- "172.29.238.1,172.29.238.50"
|
|
- "172.29.239.1,172.29.239.50"
|
|
- "172.29.240.1,172.29.240.50"
|
|
- "172.29.241.1,172.29.241.50"
|
|
- "172.29.242.1,172.29.242.50"
|
|
- "172.29.243.1,172.29.243.50"
|
|
- "172.29.244.1,172.29.244.50"
|
|
- "172.29.245.1,172.29.245.50"
|
|
- "172.29.246.1,172.29.246.50"
|
|
- "172.29.247.1,172.29.247.50"
|
|
|
|
global_overrides:
|
|
#
|
|
# The below domains name must resolve to an IP address
|
|
# in the CIDR specified in haproxy_keepalived_external_vip_cidr and
|
|
# haproxy_keepalived_internal_vip_cidr.
|
|
# If using different protocols (https/http) for the public/internal
|
|
# endpoints the two addresses must be different.
|
|
#
|
|
internal_lb_vip_address: internal-openstack.example.com
|
|
external_lb_vip_address: openstack.example.com
|
|
management_bridge: "br-mgmt"
|
|
provider_networks:
|
|
- network:
|
|
container_bridge: "br-mgmt"
|
|
container_type: "veth"
|
|
container_interface: "eth1"
|
|
ip_from_q: "pod1_container"
|
|
address_prefix: "container"
|
|
type: "raw"
|
|
group_binds:
|
|
- all_containers
|
|
- hosts
|
|
reference_group: "pod1_hosts"
|
|
is_container_address: true
|
|
# Containers in pod1 need routes to the container networks of other pods
|
|
static_routes:
|
|
# Route to container networks
|
|
- cidr: 172.29.236.0/22
|
|
gateway: 172.29.236.1
|
|
- network:
|
|
container_bridge: "br-mgmt"
|
|
container_type: "veth"
|
|
container_interface: "eth1"
|
|
ip_from_q: "pod2_container"
|
|
address_prefix: "container"
|
|
type: "raw"
|
|
group_binds:
|
|
- all_containers
|
|
- hosts
|
|
reference_group: "pod2_hosts"
|
|
is_container_address: true
|
|
# Containers in pod2 need routes to the container networks of other pods
|
|
static_routes:
|
|
# Route to container networks
|
|
- cidr: 172.29.236.0/22
|
|
gateway: 172.29.237.1
|
|
- network:
|
|
container_bridge: "br-mgmt"
|
|
container_type: "veth"
|
|
container_interface: "eth1"
|
|
ip_from_q: "pod3_container"
|
|
address_prefix: "container"
|
|
type: "raw"
|
|
group_binds:
|
|
- all_containers
|
|
- hosts
|
|
reference_group: "pod3_hosts"
|
|
is_container_address: true
|
|
# Containers in pod3 need routes to the container networks of other pods
|
|
static_routes:
|
|
# Route to container networks
|
|
- cidr: 172.29.236.0/22
|
|
gateway: 172.29.238.1
|
|
- network:
|
|
container_bridge: "br-mgmt"
|
|
container_type: "veth"
|
|
container_interface: "eth1"
|
|
ip_from_q: "pod4_container"
|
|
address_prefix: "container"
|
|
type: "raw"
|
|
group_binds:
|
|
- all_containers
|
|
- hosts
|
|
reference_group: "pod4_hosts"
|
|
is_container_address: true
|
|
# Containers in pod4 need routes to the container networks of other pods
|
|
static_routes:
|
|
# Route to container networks
|
|
- cidr: 172.29.236.0/22
|
|
gateway: 172.29.239.1
|
|
- network:
|
|
container_bridge: "br-vxlan"
|
|
container_type: "veth"
|
|
container_interface: "eth10"
|
|
ip_from_q: "pod1_tunnel"
|
|
address_prefix: "tunnel"
|
|
type: "vxlan"
|
|
range: "1:1000"
|
|
net_name: "vxlan"
|
|
group_binds:
|
|
- neutron_linuxbridge_agent
|
|
reference_group: "pod1_hosts"
|
|
# Containers in pod1 need routes to the tunnel networks of other pods
|
|
static_routes:
|
|
# Route to tunnel networks
|
|
- cidr: 172.29.240.0/22
|
|
gateway: 172.29.240.1
|
|
- network:
|
|
container_bridge: "br-vxlan"
|
|
container_type: "veth"
|
|
container_interface: "eth10"
|
|
ip_from_q: "pod2_tunnel"
|
|
address_prefix: "tunnel"
|
|
type: "vxlan"
|
|
range: "1:1000"
|
|
net_name: "vxlan"
|
|
group_binds:
|
|
- neutron_linuxbridge_agent
|
|
reference_group: "pod2_hosts"
|
|
# Containers in pod2 need routes to the tunnel networks of other pods
|
|
static_routes:
|
|
# Route to tunnel networks
|
|
- cidr: 172.29.240.0/22
|
|
gateway: 172.29.241.1
|
|
- network:
|
|
container_bridge: "br-vxlan"
|
|
container_type: "veth"
|
|
container_interface: "eth10"
|
|
ip_from_q: "pod3_tunnel"
|
|
address_prefix: "tunnel"
|
|
type: "vxlan"
|
|
range: "1:1000"
|
|
net_name: "vxlan"
|
|
group_binds:
|
|
- neutron_linuxbridge_agent
|
|
reference_group: "pod3_hosts"
|
|
# Containers in pod3 need routes to the tunnel networks of other pods
|
|
static_routes:
|
|
# Route to tunnel networks
|
|
- cidr: 172.29.240.0/22
|
|
gateway: 172.29.242.1
|
|
- network:
|
|
container_bridge: "br-vxlan"
|
|
container_type: "veth"
|
|
container_interface: "eth10"
|
|
ip_from_q: "pod4_tunnel"
|
|
address_prefix: "tunnel"
|
|
type: "vxlan"
|
|
range: "1:1000"
|
|
net_name: "vxlan"
|
|
group_binds:
|
|
- neutron_linuxbridge_agent
|
|
reference_group: "pod4_hosts"
|
|
# Containers in pod4 need routes to the tunnel networks of other pods
|
|
static_routes:
|
|
# Route to tunnel networks
|
|
- cidr: 172.29.240.0/22
|
|
gateway: 172.29.243.1
|
|
- network:
|
|
container_bridge: "br-vlan"
|
|
container_type: "veth"
|
|
container_interface: "eth12"
|
|
host_bind_override: "eth12"
|
|
type: "flat"
|
|
net_name: "flat"
|
|
group_binds:
|
|
- neutron_linuxbridge_agent
|
|
- network:
|
|
container_bridge: "br-vlan"
|
|
container_type: "veth"
|
|
container_interface: "eth11"
|
|
type: "vlan"
|
|
range: "101:200,301:400"
|
|
net_name: "vlan"
|
|
group_binds:
|
|
- neutron_linuxbridge_agent
|
|
- network:
|
|
container_bridge: "br-storage"
|
|
container_type: "veth"
|
|
container_interface: "eth2"
|
|
ip_from_q: "pod1_storage"
|
|
address_prefix: "storage"
|
|
type: "raw"
|
|
group_binds:
|
|
- glance_api
|
|
- cinder_api
|
|
- cinder_volume
|
|
- nova_compute
|
|
reference_group: "pod1_hosts"
|
|
# Containers in pod1 need routes to the storage networks of other pods
|
|
static_routes:
|
|
# Route to storage networks
|
|
- cidr: 172.29.244.0/22
|
|
gateway: 172.29.244.1
|
|
- network:
|
|
container_bridge: "br-storage"
|
|
container_type: "veth"
|
|
container_interface: "eth2"
|
|
ip_from_q: "pod2_storage"
|
|
address_prefix: "storage"
|
|
type: "raw"
|
|
group_binds:
|
|
- glance_api
|
|
- cinder_api
|
|
- cinder_volume
|
|
- nova_compute
|
|
reference_group: "pod2_hosts"
|
|
# Containers in pod2 need routes to the storage networks of other pods
|
|
static_routes:
|
|
# Route to storage networks
|
|
- cidr: 172.29.244.0/22
|
|
gateway: 172.29.245.1
|
|
- network:
|
|
container_bridge: "br-storage"
|
|
container_type: "veth"
|
|
container_interface: "eth2"
|
|
ip_from_q: "pod3_storage"
|
|
address_prefix: "storage"
|
|
type: "raw"
|
|
group_binds:
|
|
- glance_api
|
|
- cinder_api
|
|
- cinder_volume
|
|
- nova_compute
|
|
reference_group: "pod3_hosts"
|
|
# Containers in pod3 need routes to the storage networks of other pods
|
|
static_routes:
|
|
# Route to storage networks
|
|
- cidr: 172.29.244.0/22
|
|
gateway: 172.29.246.1
|
|
- network:
|
|
container_bridge: "br-storage"
|
|
container_type: "veth"
|
|
container_interface: "eth2"
|
|
ip_from_q: "pod4_storage"
|
|
address_prefix: "storage"
|
|
type: "raw"
|
|
group_binds:
|
|
- glance_api
|
|
- cinder_api
|
|
- cinder_volume
|
|
- nova_compute
|
|
reference_group: "pod4_hosts"
|
|
# Containers in pod4 need routes to the storage networks of other pods
|
|
static_routes:
|
|
# Route to storage networks
|
|
- cidr: 172.29.244.0/22
|
|
gateway: 172.29.247.1
|
|
|
|
###
|
|
### Infrastructure
|
|
###
|
|
|
|
pod1_hosts: &pod1
|
|
infra1:
|
|
ip: 172.29.236.10
|
|
|
|
pod2_hosts: &pod2
|
|
infra2:
|
|
ip: 172.29.239.10
|
|
|
|
pod3_hosts: &pod3
|
|
infra3:
|
|
ip: 172.29.242.10
|
|
|
|
pod4_hosts: &pod4
|
|
compute1:
|
|
ip: 172.29.245.10
|
|
compute2:
|
|
ip: 172.29.245.11
|
|
|
|
# galera, memcache, rabbitmq, utility
|
|
shared-infra_hosts: &controllers
|
|
<<: *pod1
|
|
<<: *pod2
|
|
<<: *pod3
|
|
|
|
# repository (apt cache, python packages, etc)
|
|
repo-infra_hosts: *controllers
|
|
|
|
# load balancer
|
|
# Ideally the load balancer should not use the Infrastructure hosts.
|
|
# Dedicated hardware is best for improved performance and security.
|
|
haproxy_hosts: *controllers
|
|
|
|
###
|
|
### OpenStack
|
|
###
|
|
|
|
# keystone
|
|
identity_hosts: *controllers
|
|
|
|
# cinder api services
|
|
storage-infra_hosts: *controllers
|
|
|
|
# glance
|
|
# The settings here are repeated for each infra host.
|
|
# They could instead be applied as global settings in
|
|
# user_variables, but are left here to illustrate that
|
|
# each container could have different storage targets.
|
|
image_hosts:
|
|
infra1:
|
|
ip: 172.29.236.11
|
|
container_vars:
|
|
limit_container_types: glance
|
|
glance_remote_client:
|
|
- what: "172.29.244.15:/images"
|
|
where: "/var/lib/glance/images"
|
|
type: "nfs"
|
|
options: "_netdev,auto"
|
|
infra2:
|
|
ip: 172.29.236.12
|
|
container_vars:
|
|
limit_container_types: glance
|
|
glance_remote_client:
|
|
- what: "172.29.244.15:/images"
|
|
where: "/var/lib/glance/images"
|
|
type: "nfs"
|
|
options: "_netdev,auto"
|
|
infra3:
|
|
ip: 172.29.236.13
|
|
container_vars:
|
|
limit_container_types: glance
|
|
glance_remote_client:
|
|
- what: "172.29.244.15:/images"
|
|
where: "/var/lib/glance/images"
|
|
type: "nfs"
|
|
options: "_netdev,auto"
|
|
|
|
# nova api, conductor, etc services
|
|
compute-infra_hosts: *controllers
|
|
|
|
# heat
|
|
orchestration_hosts: *controllers
|
|
|
|
# horizon
|
|
dashboard_hosts: *controllers
|
|
|
|
# neutron server, agents (L3, etc)
|
|
network_hosts: *controllers
|
|
|
|
# ceilometer (telemetry data collection)
|
|
metering-infra_hosts: *controllers
|
|
|
|
# aodh (telemetry alarm service)
|
|
metering-alarm_hosts: *controllers
|
|
# gnocchi (telemetry metrics storage)
|
|
metrics_hosts: *controllers
|
|
|
|
# nova hypervisors
|
|
compute_hosts: *pod4
|
|
|
|
# ceilometer compute agent (telemetry data collection)
|
|
metering-compute_hosts: *pod4
|
|
|
|
# cinder volume hosts (NFS-backed)
|
|
# The settings here are repeated for each infra host.
|
|
# They could instead be applied as global settings in
|
|
# user_variables, but are left here to illustrate that
|
|
# each container could have different storage targets.
|
|
storage_hosts:
|
|
infra1:
|
|
ip: 172.29.236.11
|
|
container_vars:
|
|
cinder_backends:
|
|
limit_container_types: cinder_volume
|
|
nfs_volume:
|
|
volume_backend_name: NFS_VOLUME1
|
|
volume_driver: cinder.volume.drivers.nfs.NfsDriver
|
|
nfs_mount_options: "rsize=65535,wsize=65535,timeo=1200,actimeo=120"
|
|
nfs_shares_config: /etc/cinder/nfs_shares
|
|
shares:
|
|
- ip: "172.29.244.15"
|
|
share: "/vol/cinder"
|
|
infra2:
|
|
ip: 172.29.236.12
|
|
container_vars:
|
|
cinder_backends:
|
|
limit_container_types: cinder_volume
|
|
nfs_volume:
|
|
volume_backend_name: NFS_VOLUME1
|
|
volume_driver: cinder.volume.drivers.nfs.NfsDriver
|
|
nfs_mount_options: "rsize=65535,wsize=65535,timeo=1200,actimeo=120"
|
|
nfs_shares_config: /etc/cinder/nfs_shares
|
|
shares:
|
|
- ip: "172.29.244.15"
|
|
share: "/vol/cinder"
|
|
infra3:
|
|
ip: 172.29.236.13
|
|
container_vars:
|
|
cinder_backends:
|
|
limit_container_types: cinder_volume
|
|
nfs_volume:
|
|
volume_backend_name: NFS_VOLUME1
|
|
volume_driver: cinder.volume.drivers.nfs.NfsDriver
|
|
nfs_mount_options: "rsize=65535,wsize=65535,timeo=1200,actimeo=120"
|
|
nfs_shares_config: /etc/cinder/nfs_shares
|
|
shares:
|
|
- ip: "172.29.244.15"
|
|
share: "/vol/cinder"
|