135786a9ca
Add a new templates to configure radvd and dhcpv6 relay.
For IPv6 routed network the radvd daemon and the dhcpv6
relay is hosted on the same instance.
Since we do not want the networks in the OVB infra to
provide any DHCP or auto configuration we cannot use
neutron routers for provisioning network routing. The
instance running dhcpv6 relay and radvd will also be
the router for the provisioning networks.
Bump template version in undercloud-networks-routed.yaml
to version 2015-10-15. Need this version to avoid error:
'Items to join must be strings not
{u'str_split': [u'/', u'fd12:3456:789a:3::/64', 1]}'
Change-Id: Ib95f7d7cfd3d2318ac4f4f44f22955b0c18c465e
285 lines
11 KiB
YAML
285 lines
11 KiB
YAML
heat_template_version: 2016-10-14
|
|
|
|
parameters:
|
|
|
|
key_name:
|
|
type: string
|
|
default: default
|
|
description: Nova keypair to inject into the undercloud and bmc
|
|
|
|
dhcp_relay_flavor:
|
|
type: string
|
|
default: m1.small
|
|
description: The Nova flavor to use for the dhcrelay instance
|
|
|
|
dhcp_relay_image:
|
|
type: string
|
|
default: CentOS-7-x86_64-GenericCloud
|
|
description: |
|
|
The base image for the dhcrelay instance. A CentOS 7 image is currently
|
|
the only one supported.
|
|
|
|
provision_net_cidr:
|
|
type: string
|
|
description: CIDR for provision network subnet
|
|
default: fd12:3456:789a:1::/64
|
|
|
|
provision_net2_cidr:
|
|
type: string
|
|
description: CIDR for second provision network subnet
|
|
default: fd12:3456:789a:2::/64
|
|
|
|
provision_net3_cidr:
|
|
type: string
|
|
description: CIDR for third provision network subnet
|
|
default: fd12:3456:789a:3::/64
|
|
|
|
IPv6_dhcpv6-statefull:
|
|
type: boolean
|
|
description: |
|
|
Controls radvd parameters AdvManagedFlag and AdvAutonomous. For stateful
|
|
addressing these should be AdvManagedFlag: on, AdvAutonomous: off, for
|
|
statelss (SLAAC) these should be AdvManagedFlag: off, AdvAutonomous: on.
|
|
default: false
|
|
|
|
dhcp_ips:
|
|
# Ignored parameter for compatibility with dhcp-relay.yaml
|
|
type: json
|
|
description: |
|
|
The IP addresses of DHCP servers to relay DHCP requests to.
|
|
|
|
networks:
|
|
# Ignored parameter for compatibility with dhcp-relay.yaml
|
|
type: json
|
|
|
|
private_net:
|
|
type: string
|
|
|
|
provision_network_routers_data:
|
|
type: json
|
|
description: A map with provision network router data
|
|
|
|
NtpPool:
|
|
default: pool.ntp.org
|
|
description: |
|
|
NTP pool, the pool name is expected to resolve to multiple addresses which
|
|
might change over time. For IPv6 overclouds the radvd-and-dhcrelay
|
|
instance can act as the NTP server.
|
|
type: string
|
|
|
|
conditions:
|
|
dhcpv6-statefull:
|
|
get_param: IPv6_dhcpv6-statefull
|
|
|
|
resources:
|
|
dhcp_relay_port_private:
|
|
type: OS::Neutron::Port
|
|
properties:
|
|
name: dhcp_relay_port_private
|
|
network: {get_param: private_net}
|
|
|
|
init_packages:
|
|
type: OS::Heat::CloudConfig
|
|
properties:
|
|
cloud_config:
|
|
package_upgrade: true
|
|
packages:
|
|
- centos-release-openstack-stein
|
|
- dnsmasq
|
|
- radvd
|
|
- chrony
|
|
|
|
init_files:
|
|
type: OS::Heat::CloudConfig
|
|
properties:
|
|
cloud_config:
|
|
write_files:
|
|
- path: /etc/os-net-config/config.yaml
|
|
content:
|
|
str_replace:
|
|
template: |
|
|
network_config:
|
|
- type: interface
|
|
name: eth0
|
|
use_dhcp: false
|
|
use_dhcpv6: false
|
|
addresses:
|
|
- ip_netmask: $private_ip_netmask
|
|
routes:
|
|
- default: true
|
|
next_hop: $private_gateway
|
|
- type: interface
|
|
name: eth1
|
|
use_dhcp: false
|
|
use_dhcpv6: false
|
|
addresses:
|
|
- ip_netmask: $provision_ip_netmask
|
|
- type: interface
|
|
name: eth2
|
|
use_dhcp: false
|
|
use_dhcpv6: false
|
|
addresses:
|
|
- ip_netmask: $provision2_ip_netmask
|
|
- type: interface
|
|
name: eth3
|
|
use_dhcp: false
|
|
use_dhcpv6: false
|
|
addresses:
|
|
- ip_netmask: $provision3_ip_netmask
|
|
params:
|
|
$private_gateway: {get_attr: [dhcp_relay_port_private, subnets, 0, gateway_ip]}
|
|
$private_ip_netmask:
|
|
list_join:
|
|
- /
|
|
- - {get_attr: [dhcp_relay_port_private, fixed_ips, 0, ip_address]}
|
|
- {str_split: ['/', {get_attr: [dhcp_relay_port_private, subnets, 0, cidr]}, 1]}
|
|
$provision_ip_netmask: {get_param: [provision_network_routers_data, provision_router_cidr]}
|
|
$provision2_ip_netmask: {get_param: [provision_network_routers_data, provision2_router_cidr]}
|
|
$provision3_ip_netmask: {get_param: [provision_network_routers_data, provision3_router_cidr]}
|
|
- path: /etc/systemd/system/dhcrelay6.service
|
|
content:
|
|
str_replace:
|
|
template: |
|
|
[Unit]
|
|
Description=DHCPv6 dnsmasq Relay Agent Daemon
|
|
Documentation=man:dnsmasq(8)
|
|
Wants=network-online.target
|
|
After=network-online.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
ExecStart=/usr/sbin/dnsmasq --keep-in-foreground --port 0 --dhcp-relay=$provision2_ip,ff05::1:3,eth1 --dhcp-relay=$provision3_ip,ff05::1:3,eth1
|
|
StandardError=null
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
params:
|
|
$provision2_ip: {str_split: ['/', {get_param: [provision_network_routers_data, provision2_router_cidr]}, 0]}
|
|
$provision3_ip: {str_split: ['/', {get_param: [provision_network_routers_data, provision3_router_cidr]}, 0]}
|
|
- path: /etc/radvd.conf
|
|
content:
|
|
str_replace:
|
|
template: |
|
|
interface eth1 {
|
|
AdvSendAdvert on;
|
|
AdvManagedFlag $AdvManagedFlag;
|
|
AdvOtherConfigFlag on;
|
|
AdvRASolicitedUnicast on;
|
|
AdvLinkMTU $provision_mtu;
|
|
prefix $provision_cidr {
|
|
AdvAutonomous $AdvAutonomous;
|
|
AdvOnLink on;
|
|
};
|
|
};
|
|
interface eth2 {
|
|
AdvSendAdvert on;
|
|
AdvManagedFlag $AdvManagedFlag;
|
|
AdvOtherConfigFlag on;
|
|
AdvRASolicitedUnicast on;
|
|
AdvLinkMTU $provision2_mtu;
|
|
prefix $provision2_cidr {
|
|
AdvAutonomous $AdvAutonomous;
|
|
AdvOnLink on;
|
|
};
|
|
};
|
|
interface eth3 {
|
|
AdvSendAdvert on;
|
|
AdvManagedFlag $AdvManagedFlag;
|
|
AdvOtherConfigFlag on;
|
|
AdvRASolicitedUnicast on;
|
|
AdvLinkMTU $provision3_mtu;
|
|
prefix $provision3_cidr {
|
|
AdvAutonomous $AdvAutonomous;
|
|
AdvOnLink on;
|
|
};
|
|
};
|
|
params:
|
|
$provision_cidr: {get_param: provision_net_cidr}
|
|
$provision2_cidr: {get_param: provision_net2_cidr}
|
|
$provision3_cidr: {get_param: provision_net3_cidr}
|
|
$provision_mtu: {get_param: [provision_network_routers_data, provision_mtu]}
|
|
$provision2_mtu: {get_param: [provision_network_routers_data, provision2_mtu]}
|
|
$provision3_mtu: {get_param: [provision_network_routers_data, provision3_mtu]}
|
|
$AdvManagedFlag:
|
|
if:
|
|
- dhcpv6-statefull
|
|
- 'on'
|
|
- 'off'
|
|
$AdvAutonomous:
|
|
if:
|
|
- dhcpv6-statefull
|
|
- 'off'
|
|
- 'on'
|
|
- path: /etc/sysctl.d/98-ipv6-routing.conf
|
|
content: |
|
|
net.ipv6.conf.eth1.forwarding = 1
|
|
net.ipv6.conf.eth2.forwarding = 1
|
|
net.ipv6.conf.eth3.forwarding = 1
|
|
- - path: /etc/chrony.conf
|
|
content:
|
|
str_replace:
|
|
template: |
|
|
pool $ntp_pool iburst
|
|
# Record the rate at which the system clock gains/losses time.
|
|
driftfile /var/lib/chrony/drift
|
|
# Allow the system clock to be stepped in the first three updates
|
|
# if its offset is larger than 1 second.
|
|
makestep 1.0 3
|
|
# Allow NTP client access from provision network.
|
|
allow $provision_cidr
|
|
allow $provision2_cidr
|
|
allow $provision3_cidr
|
|
# Serve time even if not synchronized to a time source.
|
|
local stratum 10
|
|
# Specify file containing keys for NTP authentication.
|
|
keyfile /etc/chrony.keys
|
|
# Get TAI-UTC offset and leap seconds from the system tz database.
|
|
leapsectz right/UTC
|
|
# Specify directory for log files.
|
|
logdir /var/log/chrony
|
|
params:
|
|
$ntp_pool: {get_param: NtpPool}
|
|
$provision_cidr: {get_param: provision_net_cidr}
|
|
$provision2_cidr: {get_param: provision_net2_cidr}
|
|
$provision3_cidr: {get_param: provision_net3_cidr}
|
|
|
|
init_runcmd:
|
|
type: OS::Heat::CloudConfig
|
|
properties:
|
|
cloud_config:
|
|
runcmd:
|
|
- ['sysctl','--system']
|
|
- ['systemctl', 'daemon-reload']
|
|
- ['yum', '-y', 'install', 'os-net-config']
|
|
- ['os-net-config', '--config', '/etc/os-net-config/config.yaml']
|
|
- ['systemctl', 'enable', 'dhcrelay6.service']
|
|
- ['systemctl', 'start', 'dhcrelay6.service']
|
|
- ['systemctl', 'status', 'dhcrelay6.service']
|
|
- ['systemctl', 'enable', 'radvd.service']
|
|
- ['systemctl', 'start', 'radvd.service']
|
|
- ['systemctl', 'status', 'radvd.service']
|
|
|
|
dhcrelay_init:
|
|
type: OS::Heat::MultipartMime
|
|
properties:
|
|
parts:
|
|
- config: {get_resource: init_packages}
|
|
- config: {get_resource: init_files}
|
|
- config: {get_resource: init_runcmd}
|
|
|
|
dhcp_relay_server:
|
|
type: OS::Nova::Server
|
|
properties:
|
|
name: radvd-and-dhcrelay
|
|
flavor: {get_param: dhcp_relay_flavor}
|
|
image: {get_param: dhcp_relay_image}
|
|
key_name: {get_param: key_name}
|
|
networks:
|
|
- {port: {get_resource: dhcp_relay_port_private}}
|
|
- {port: {get_param: [provision_network_routers_data, provision_router_resource]}}
|
|
- {port: {get_param: [provision_network_routers_data, provision2_router_resource]}}
|
|
- {port: {get_param: [provision_network_routers_data, provision3_router_resource]}}
|
|
config_drive: true
|
|
user_data_format: RAW
|
|
user_data: {get_resource: dhcrelay_init}
|