Queens update
This changeset contains updates for the OpenStack Queens release. Notable changes include: - Authentication URL for admin changed from port 35357 to port 5000. Change-Id: Ic5664744f7d8194e45d6fe77ae7eaeb5dd7465df
This commit is contained in:
Roger Luethi
parent
71317119c2
commit
9816561bbd
|
|
@ -9,13 +9,13 @@ source "$CONFIG_DIR/credentials"
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# OpenStack client environment scripts
|
||||
# http://docs.openstack.org/newton/install-guide-ubuntu/keystone-openrc.html
|
||||
# https://docs.openstack.org/keystone/queens/install/keystone-openrc-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
export OS_USERNAME=$ADMIN_USER_NAME
|
||||
export OS_PASSWORD=$ADMIN_PASS
|
||||
export OS_PROJECT_NAME=$ADMIN_PROJECT_NAME
|
||||
export OS_USER_DOMAIN_NAME=Default
|
||||
export OS_PROJECT_DOMAIN_NAME=Default
|
||||
export OS_AUTH_URL=http://controller:35357/v3
|
||||
export OS_AUTH_URL=http://controller:5000/v3
|
||||
export OS_IDENTITY_API_VERSION=3
|
||||
export OS_IMAGE_API_VERSION=2
|
||||
|
|
|
|||
|
|
@ -9,7 +9,7 @@ source "$CONFIG_DIR/credentials"
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# OpenStack client environment scripts
|
||||
# http://docs.openstack.org/newton/install-guide-ubuntu/keystone-openrc.html
|
||||
# https://docs.openstack.org/keystone/queens/install/keystone-openrc-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
export OS_USERNAME=$DEMO_USER_NAME
|
||||
export OS_PASSWORD=$DEMO_PASS
|
||||
|
|
|
|||
|
|
@ -1,10 +1,10 @@
|
|||
# This file contains OpenStack configuration data. It is used by both
|
||||
# host (osbash, Windows batch) and VM guest scripts.
|
||||
|
||||
# pike (production release; cloud-archive:pike)
|
||||
# pike-proposed (pre-release testing: cloud-archive:pike-proposed)
|
||||
# pike-staging (ppa:openstack-ubuntu-testing/pike)
|
||||
: ${OPENSTACK_RELEASE:=pike}
|
||||
# queens (production release; cloud-archive:queens)
|
||||
# queens-proposed (pre-release testing: cloud-archive:queens-proposed)
|
||||
# queens-staging (ppa:openstack-ubuntu-testing/queens)
|
||||
: ${OPENSTACK_RELEASE:=queens}
|
||||
|
||||
# CirrOS image URL
|
||||
if [ "$(uname -m)" = "x86_64" ]; then
|
||||
|
|
|
|||
|
|
@ -10,7 +10,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Create private network
|
||||
# http://docs.openstack.org/newton/install-guide-ubuntu/launch-instance-networks-selfservice.html
|
||||
# https://docs.openstack.org/install-guide/launch-instance-networks-selfservice.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
echo -n "Waiting for first DHCP namespace."
|
||||
|
|
@ -71,14 +71,6 @@ echo "Bridges are:"
|
|||
# Create a router
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
(
|
||||
echo "Sourcing the admin credentials."
|
||||
source "$CONFIG_DIR/admin-openstackrc.sh"
|
||||
|
||||
echo "Adding 'router:external' option to the public provider network."
|
||||
neutron net-update provider --router:external
|
||||
)
|
||||
|
||||
(
|
||||
echo "Sourcing the demo credentials."
|
||||
source "$CONFIG_DIR/demo-openstackrc.sh"
|
||||
|
|
|
|||
|
|
@ -10,7 +10,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Create the provier (external) network and a subnet on it
|
||||
# http://docs.openstack.org/newton/install-guide-ubuntu/launch-instance-networks-provider.html
|
||||
# https://docs.openstack.org/install-guide/launch-instance-networks-provider.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
echo "Sourcing the admin credentials."
|
||||
|
|
@ -44,7 +44,7 @@ wait_for_agent neutron-dhcp-agent
|
|||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
echo "Creating the public network."
|
||||
openstack network create --share \
|
||||
openstack network create --share --external \
|
||||
--provider-physical-network provider \
|
||||
--provider-network-type flat provider
|
||||
|
||||
|
|
|
|||
|
|
@ -88,7 +88,7 @@ HEAT
|
|||
# Create m1.nano flavor
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
||||
# Newton does no longer create default flavors:
|
||||
# Nova does no longer create default flavors:
|
||||
# http://docs.openstack.org/releasenotes/nova/unreleased.html 2016-09-25
|
||||
(
|
||||
echo
|
||||
|
|
|
|||
|
|
@ -47,24 +47,24 @@ sudo apt update
|
|||
# https://docs.openstack.org/install-guide/environment-packages-ubuntu.html
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# NOTE: Using pre-release staging ppa is not documented in install-guide
|
||||
# https://launchpad.net/~ubuntu-cloud-archive/+archive/ubuntu/pike-staging
|
||||
# https://launchpad.net/~ubuntu-cloud-archive/+archive/ubuntu/queens-staging
|
||||
#--------------------------------------------------------------------------
|
||||
|
||||
echo "Installing packages needed for add-apt-repository."
|
||||
sudo apt -y install software-properties-common
|
||||
|
||||
case "$OPENSTACK_RELEASE" in
|
||||
pike)
|
||||
REPO=cloud-archive:pike
|
||||
SRC_FILE=cloudarchive-pike.list
|
||||
queens)
|
||||
REPO=cloud-archive:queens
|
||||
SRC_FILE=cloudarchive-queens.list
|
||||
;;
|
||||
pike-proposed)
|
||||
REPO=cloud-archive:pike-proposed
|
||||
SRC_FILE=cloudarchive-pike-proposed.list
|
||||
queens-proposed)
|
||||
REPO=cloud-archive:queens-proposed
|
||||
SRC_FILE=cloudarchive-queens-proposed.list
|
||||
;;
|
||||
pike-staging)
|
||||
REPO=ppa:ubuntu-cloud-archive/pike-staging
|
||||
SRC_FILE=ubuntu-cloud-archive-ubuntu-pike-staging-xenial.list
|
||||
queens-staging)
|
||||
REPO=ppa:ubuntu-cloud-archive/queens-staging
|
||||
SRC_FILE=ubuntu-cloud-archive-ubuntu-queens-staging-xenial.list
|
||||
;;
|
||||
*)
|
||||
echo >&2 "Unknown OpenStack release: $OPENSTACK_RELEASE. Aborting."
|
||||
|
|
|
|||
|
|
@ -109,7 +109,7 @@ iniset_sudo $conf keystone_authtoken user_domain_id default
|
|||
iniset_sudo $conf keystone_authtoken project_name "$SERVICE_PROJECT_NAME"
|
||||
iniset_sudo $conf keystone_authtoken project_domain_id default
|
||||
iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:35357
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken memcached_servers controller:11211
|
||||
|
||||
# Prevent error "inequivalent arg 'durable' for exchange 'openstack'"
|
||||
|
|
|
|||
|
|
@ -153,8 +153,8 @@ sudo sed -i '/^auth_/ s/^/#/' $conf
|
|||
# Configure [keystone_authtoken] section.
|
||||
#iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000/v3
|
||||
iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:35357
|
||||
#iniset_sudo $conf keystone_authtoken identity_uri http://controller:35357
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:5000
|
||||
#iniset_sudo $conf keystone_authtoken identity_uri http://controller:5000
|
||||
|
||||
#iniset_sudo $conf keystone_authtoken auth_verison v3
|
||||
|
||||
|
|
|
|||
|
|
@ -14,7 +14,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Set up Block Storage service controller (cinder controller node)
|
||||
# https://docs.openstack.org/cinder/pike/install/cinder-controller-install-ubuntu.html
|
||||
# https://docs.openstack.org/cinder/queens/install/cinder-controller-install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
@ -111,11 +111,11 @@ iniset_sudo $conf DEFAULT auth_strategy keystone
|
|||
|
||||
# Configure [keystone_authtoken] section.
|
||||
iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:35357
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken memcached_servers controller:11211
|
||||
iniset_sudo $conf keystone_authtoken auth_type password
|
||||
iniset_sudo $conf keystone_authtoken project_domain_name default
|
||||
iniset_sudo $conf keystone_authtoken user_domain_name default
|
||||
iniset_sudo $conf keystone_authtoken project_domain_id default
|
||||
iniset_sudo $conf keystone_authtoken user_domain_id default
|
||||
iniset_sudo $conf keystone_authtoken project_name "$SERVICE_PROJECT_NAME"
|
||||
iniset_sudo $conf keystone_authtoken username "$cinder_admin_user"
|
||||
iniset_sudo $conf keystone_authtoken password "$CINDER_PASS"
|
||||
|
|
@ -152,9 +152,10 @@ sudo sed -i --follow-symlinks '/WSGIDaemonProcess/ s/processes=[0-9]*/processes=
|
|||
# (drwxr-x--- root cinder) vs. cinder:www-data
|
||||
if ls -ld /etc/cinder | grep "root cinder"; then
|
||||
echo "Setting owner for /etc/cinder."
|
||||
sudo chown cinder:cinder /etc/cinder
|
||||
sudo chown -v cinder:cinder /etc/cinder
|
||||
else
|
||||
echo "XXX Workaround for /etc/cinder owner no longer needed."
|
||||
exit 2
|
||||
fi
|
||||
|
||||
echo "Restarting the Compute API service."
|
||||
|
|
|
|||
|
|
@ -15,7 +15,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Install and configure a storage node
|
||||
# https://docs.openstack.org/cinder/pike/install/cinder-storage-install-ubuntu.html
|
||||
# https://docs.openstack.org/cinder/queens/install/cinder-storage-install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
MY_MGMT_IP=$(get_node_ip_in_network "$(hostname)" "mgmt")
|
||||
|
|
@ -90,11 +90,11 @@ iniset_sudo $conf DEFAULT auth_strategy keystone
|
|||
|
||||
# Configure [keystone_authtoken] section.
|
||||
iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:35357
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken memcached_servers controller:11211
|
||||
iniset_sudo $conf keystone_authtoken auth_type password
|
||||
iniset_sudo $conf keystone_authtoken project_domain_name default
|
||||
iniset_sudo $conf keystone_authtoken user_domain_name default
|
||||
iniset_sudo $conf keystone_authtoken project_domain_id default
|
||||
iniset_sudo $conf keystone_authtoken user_domain_id default
|
||||
iniset_sudo $conf keystone_authtoken project_name "$SERVICE_PROJECT_NAME"
|
||||
iniset_sudo $conf keystone_authtoken username "$cinder_admin_user"
|
||||
iniset_sudo $conf keystone_authtoken password "$CINDER_PASS"
|
||||
|
|
@ -121,7 +121,7 @@ sudo service cinder-volume restart
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Verify Cinder operation
|
||||
# https://docs.openstack.org/cinder/pike/install/cinder-verify.html
|
||||
# https://docs.openstack.org/cinder/queens/install/cinder-verify.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
echo "Verifying Block Storage installation on controller node."
|
||||
|
|
|
|||
|
|
@ -14,7 +14,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Install the Image Service (glance).
|
||||
# https://docs.openstack.org/glance/pike/install/install-ubuntu.html
|
||||
# https://docs.openstack.org/glance/queens/install/install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
@ -87,7 +87,7 @@ iniset_sudo $conf database connection "$database_url"
|
|||
|
||||
# Keystone_authtoken
|
||||
iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:35357
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken memcached_servers controller:11211
|
||||
iniset_sudo $conf keystone_authtoken auth_type password
|
||||
iniset_sudo $conf keystone_authtoken project_domain_name default
|
||||
|
|
@ -112,7 +112,7 @@ iniset_sudo $conf database connection "$database_url"
|
|||
|
||||
# Keystone authtoken section
|
||||
iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:35357
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken memcached_servers controller:11211
|
||||
iniset_sudo $conf keystone_authtoken auth_type password
|
||||
iniset_sudo $conf keystone_authtoken project_domain_name default
|
||||
|
|
@ -133,7 +133,7 @@ sudo service glance-api restart
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Verify the Image Service installation
|
||||
# https://docs.openstack.org/glance/pike/install/verify.html
|
||||
# https://docs.openstack.org/glance/queens/install/verify.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
echo -n "Waiting for glance to start."
|
||||
|
|
|
|||
|
|
@ -17,7 +17,7 @@ wait_for_keystone
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Install the Orchestration Service (heat)
|
||||
# https://docs.openstack.org/heat/pike/install/install-ubuntu.html
|
||||
# https://docs.openstack.org/heat/queens/install/install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
@ -147,7 +147,7 @@ iniset_sudo $conf DEFAULT transport_url "rabbit://openstack:$RABBIT_PASS@control
|
|||
|
||||
# Configure [keystone_authtoken] section.
|
||||
iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:35357
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken memcached_servers controller:11211
|
||||
iniset_sudo $conf keystone_authtoken auth_type password
|
||||
iniset_sudo $conf keystone_authtoken project_domain_name default
|
||||
|
|
@ -158,16 +158,13 @@ iniset_sudo $conf keystone_authtoken password "$HEAT_PASS"
|
|||
|
||||
# Configure [trustee] section.
|
||||
iniset_sudo $conf trustee auth_type password
|
||||
iniset_sudo $conf trustee auth_url http://controller:35357
|
||||
iniset_sudo $conf trustee auth_url http://controller:5000
|
||||
iniset_sudo $conf trustee username "$heat_admin_user"
|
||||
iniset_sudo $conf trustee password "$HEAT_PASS"
|
||||
iniset_sudo $conf trustee user_domain_name default
|
||||
|
||||
# Configure [clients_keystone] section.
|
||||
iniset_sudo $conf clients_keystone auth_uri http://controller:35357
|
||||
|
||||
# Configure [ec2authtoken] section.
|
||||
iniset_sudo $conf ec2authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf clients_keystone auth_uri http://controller:5000
|
||||
|
||||
# Configure [DEFAULT] section.
|
||||
iniset_sudo $conf DEFAULT heat_metadata_server_url http://controller:8000
|
||||
|
|
@ -206,7 +203,7 @@ echo "Restarting heat servies took $((ENDTIME - STARTTIME)) seconds."
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Verify operation
|
||||
# https://docs.openstack.org/heat/pike/install/verify.html
|
||||
# https://docs.openstack.org/heat/queens/install/verify.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
echo "Listing service components."
|
||||
|
|
|
|||
|
|
@ -13,7 +13,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Set up OpenStack Dashboard (horizon)
|
||||
# https://docs.openstack.org/horizon/pike/install/install-ubuntu.html
|
||||
# https://docs.openstack.org/horizon/queens/install/install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
@ -89,7 +89,7 @@ API
|
|||
|
||||
echo "Configuring 'default' as the default domain for users created via " \
|
||||
"dashboard."
|
||||
iniset_sudo_no_section $conf "OPENSTACK_KEYSTONE_DEFAULT_DOMAIN" '"default"'
|
||||
iniset_sudo_no_section $conf "OPENSTACK_KEYSTONE_DEFAULT_DOMAIN" '"Default"'
|
||||
|
||||
echo "Configuring 'user' as the default role for users created via dashboard."
|
||||
iniset_sudo_no_section $conf "OPENSTACK_KEYSTONE_DEFAULT_ROLE" '"user"'
|
||||
|
|
@ -99,6 +99,10 @@ iniset_sudo_no_section $conf "OPENSTACK_KEYSTONE_DEFAULT_ROLE" '"user"'
|
|||
echo "Setting timezone to UTC."
|
||||
iniset_sudo_no_section $conf "TIME_ZONE" '"UTC"'
|
||||
|
||||
conf=/etc/apache2/conf-available/openstack-dashboard.conf
|
||||
echo "Verifying presence of 'WSGIApplicationGroup %{GLOBAL}'."
|
||||
grep "WSGIApplicationGroup %{GLOBAL}" $conf
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Customize Horizon (not in install-guide)
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
|
|||
|
|
@ -15,7 +15,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Set up keystone for controller node
|
||||
# https://docs.openstack.org/keystone/pike/install/keystone-install-ubuntu.html
|
||||
# https://docs.openstack.org/keystone/queens/install/keystone-install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
@ -72,7 +72,7 @@ sudo keystone-manage credential_setup \
|
|||
|
||||
echo "Bootstrapping the Identity service."
|
||||
sudo keystone-manage bootstrap --bootstrap-password "$ADMIN_PASS" \
|
||||
--bootstrap-admin-url http://controller:35357/v3/ \
|
||||
--bootstrap-admin-url http://controller:5000/v3/ \
|
||||
--bootstrap-internal-url http://controller:5000/v3/ \
|
||||
--bootstrap-public-url http://controller:5000/v3/ \
|
||||
--bootstrap-region-id "$REGION"
|
||||
|
|
@ -111,17 +111,21 @@ export OS_PASSWORD=$ADMIN_PASS
|
|||
export OS_PROJECT_NAME=$ADMIN_PROJECT_NAME
|
||||
export OS_USER_DOMAIN_NAME=Default
|
||||
export OS_PROJECT_DOMAIN_NAME=Default
|
||||
export OS_AUTH_URL=http://controller:35357/v3
|
||||
export OS_AUTH_URL=http://controller:5000/v3
|
||||
export OS_IDENTITY_API_VERSION=3
|
||||
|
||||
#------------------------------------------------------------------------------
|
||||
# Create a domain, projects, users, and roles
|
||||
# https://docs.openstack.org/keystone/pike/install/keystone-users.html
|
||||
# https://docs.openstack.org/keystone/queens/install/keystone-users-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# Wait for keystone to come up
|
||||
wait_for_keystone
|
||||
|
||||
# Not creating domain because default domain has already been created by
|
||||
# keystone-manage bootstrap
|
||||
# openstack domain create --description "An Example Domain" example
|
||||
|
||||
echo "Creating service project."
|
||||
openstack project create --domain default \
|
||||
--description "Service Project" \
|
||||
|
|
@ -149,7 +153,7 @@ openstack role add \
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Verify operation
|
||||
# https://docs.openstack.org/keystone/pike/install/keystone-verify-ubuntu.html
|
||||
# https://docs.openstack.org/keystone/queens/install/keystone-verify-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
echo "Verifying keystone installation."
|
||||
|
|
@ -166,7 +170,7 @@ unset OS_AUTH_URL OS_PASSWORD
|
|||
|
||||
echo "Requesting an authentication token as an admin user."
|
||||
openstack \
|
||||
--os-auth-url http://controller:35357/v3 \
|
||||
--os-auth-url http://controller:5000/v3 \
|
||||
--os-project-domain-name Default \
|
||||
--os-user-domain-name Default \
|
||||
--os-project-name "$ADMIN_PROJECT_NAME" \
|
||||
|
|
|
|||
|
|
@ -15,7 +15,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Install and configure compute node
|
||||
# https://docs.openstack.org/neutron/pike/install/compute-install-ubuntu.html
|
||||
# https://docs.openstack.org/neutron/queens/install/compute-install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
echo "Installing networking components for compute node."
|
||||
|
|
@ -40,7 +40,7 @@ neutron_admin_user=neutron
|
|||
|
||||
# Configuring [keystone_authtoken] section
|
||||
iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:35357
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken memcached_servers controller:11211
|
||||
iniset_sudo $conf keystone_authtoken auth_type password
|
||||
iniset_sudo $conf keystone_authtoken project_domain_name default
|
||||
|
|
|
|||
|
|
@ -15,7 +15,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Install and configure compute node
|
||||
# https://docs.openstack.org/neutron/pike/install/compute-install-ubuntu.html
|
||||
# https://docs.openstack.org/neutron/queens/install/compute-install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
@ -27,7 +27,7 @@ neutron_admin_user=neutron
|
|||
echo "Configuring Compute to use Networking."
|
||||
conf=/etc/nova/nova.conf
|
||||
iniset_sudo $conf neutron url http://controller:9696
|
||||
iniset_sudo $conf neutron auth_url http://controller:35357
|
||||
iniset_sudo $conf neutron auth_url http://controller:5000
|
||||
iniset_sudo $conf neutron auth_type password
|
||||
iniset_sudo $conf neutron project_domain_name default
|
||||
iniset_sudo $conf neutron user_domain_name default
|
||||
|
|
@ -48,7 +48,7 @@ sudo service neutron-linuxbridge-agent restart
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Networking Option 2: Self-service networks
|
||||
# https://docs.openstack.org/neutron/pike/install/verify-option2.html
|
||||
# https://docs.openstack.org/neutron/queens/install/verify-option2.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
echo "Sourcing the admin credentials."
|
||||
|
|
|
|||
|
|
@ -14,7 +14,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Install and configure controller node
|
||||
# https://docs.openstack.org/neutron/pike/install/controller-install-ubuntu.html
|
||||
# https://docs.openstack.org/neutron/queens/install/controller-install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
|
|||
|
|
@ -14,7 +14,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Set up OpenStack Networking (neutron) for controller node.
|
||||
# https://docs.openstack.org/neutron/pike/install/controller-install-ubuntu.html
|
||||
# https://docs.openstack.org/neutron/queens/install/controller-install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
source "$CONFIG_DIR/admin-openstackrc.sh"
|
||||
|
|
@ -40,7 +40,7 @@ iniset_sudo $conf DEFAULT metadata_proxy_shared_secret "$METADATA_SECRET"
|
|||
echo "Configuring Compute to use Networking."
|
||||
conf=/etc/nova/nova.conf
|
||||
iniset_sudo $conf neutron url http://controller:9696
|
||||
iniset_sudo $conf neutron auth_url http://controller:35357
|
||||
iniset_sudo $conf neutron auth_url http://controller:5000
|
||||
iniset_sudo $conf neutron auth_type password
|
||||
iniset_sudo $conf neutron project_domain_name default
|
||||
iniset_sudo $conf neutron user_domain_name default
|
||||
|
|
@ -84,7 +84,7 @@ fi
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Set up OpenStack Networking (neutron) for controller node.
|
||||
# https://docs.openstack.org/neutron/pike/install/verify-option2.html
|
||||
# https://docs.openstack.org/neutron/queens/install/verify-option2.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
echo -n "Verifying operation."
|
||||
|
|
|
|||
|
|
@ -15,7 +15,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Install and configure a compute node
|
||||
# https://docs.openstack.org/nova/pike/install/compute-install-ubuntu.html
|
||||
# https://docs.openstack.org/nova/queens/install/compute-install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
@ -46,7 +46,7 @@ MY_MGMT_IP=$(get_node_ip_in_network "$(hostname)" "mgmt")
|
|||
|
||||
# Configure [keystone_authtoken] section.
|
||||
iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:35357
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken memcached_servers controller:11211
|
||||
iniset_sudo $conf keystone_authtoken auth_type password
|
||||
iniset_sudo $conf keystone_authtoken project_domain_name default
|
||||
|
|
@ -81,7 +81,7 @@ iniset_sudo $conf placement project_domain_name Default
|
|||
iniset_sudo $conf placement project_name "$SERVICE_PROJECT_NAME"
|
||||
iniset_sudo $conf placement auth_type password
|
||||
iniset_sudo $conf placement user_domain_name Default
|
||||
iniset_sudo $conf placement auth_url http://controller:35357/v3
|
||||
iniset_sudo $conf placement auth_url http://controller:5000/v3
|
||||
iniset_sudo $conf placement username "$placement_admin_user"
|
||||
iniset_sudo $conf placement password "$PLACEMENT_PASS"
|
||||
|
||||
|
|
@ -133,7 +133,7 @@ node_ssh controller "sudo nova-manage cell_v2 discover_hosts --verbose"
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Verify operation
|
||||
# https://docs.openstack.org/nova/pike/install/verify.html
|
||||
# https://docs.openstack.org/nova/queens/install/verify.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
echo "Verifying operation of the Compute service."
|
||||
|
|
|
|||
|
|
@ -14,7 +14,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Install Compute controller services
|
||||
# https://docs.openstack.org/nova/pike/install/controller-install-ubuntu.html
|
||||
# https://docs.openstack.org/nova/queens/install/controller-install-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
@ -138,7 +138,7 @@ iniset_sudo $conf api auth_strategy keystone
|
|||
|
||||
# Configure [keystone_authtoken] section.
|
||||
iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:35357
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken memcached_servers controller:11211
|
||||
iniset_sudo $conf keystone_authtoken auth_type password
|
||||
iniset_sudo $conf keystone_authtoken project_domain_name default
|
||||
|
|
@ -175,7 +175,7 @@ iniset_sudo $conf placement project_domain_name Default
|
|||
iniset_sudo $conf placement project_name "$SERVICE_PROJECT_NAME"
|
||||
iniset_sudo $conf placement auth_type password
|
||||
iniset_sudo $conf placement user_domain_name Default
|
||||
iniset_sudo $conf placement auth_url http://controller:35357/v3
|
||||
iniset_sudo $conf placement auth_url http://controller:5000/v3
|
||||
iniset_sudo $conf placement username "$placement_admin_user"
|
||||
iniset_sudo $conf placement password "$PLACEMENT_PASS"
|
||||
|
||||
|
|
|
|||
|
|
@ -14,7 +14,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Networking Option 2: Self-service networks
|
||||
# https://docs.openstack.org/neutron/pike/install/compute-install-option2-ubuntu.html
|
||||
# https://docs.openstack.org/neutron/queens/install/compute-install-option2-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
@ -39,3 +39,10 @@ iniset_sudo $conf vxlan l2_population true
|
|||
# Edit the [securitygroup] section.
|
||||
iniset_sudo $conf securitygroup enable_security_group true
|
||||
iniset_sudo $conf securitygroup firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
|
||||
|
||||
echo "Ensuring that the kernel supports network bridge filters."
|
||||
if ! sudo sysctl net.bridge.bridge-nf-call-iptables; then
|
||||
sudo modprobe br_netfilter
|
||||
echo "# bridge support module added by training-labs" >> /etc/modules
|
||||
echo br_netfilter >> /etc/modules
|
||||
fi
|
||||
|
|
|
|||
|
|
@ -15,7 +15,7 @@ indicate_current_auto
|
|||
|
||||
#------------------------------------------------------------------------------
|
||||
# Networking Option 2: Self-service networks
|
||||
# https://docs.openstack.org/neutron/pike/install/controller-install-option2-ubuntu.html
|
||||
# https://docs.openstack.org/neutron/queens/install/controller-install-option2-ubuntu.html
|
||||
#------------------------------------------------------------------------------
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
@ -61,7 +61,7 @@ iniset_sudo $conf DEFAULT auth_strategy keystone
|
|||
|
||||
# Configuring [keystone_authtoken] section.
|
||||
iniset_sudo $conf keystone_authtoken auth_uri http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:35357
|
||||
iniset_sudo $conf keystone_authtoken auth_url http://controller:5000
|
||||
iniset_sudo $conf keystone_authtoken memcached_servers controller:11211
|
||||
iniset_sudo $conf keystone_authtoken auth_type password
|
||||
iniset_sudo $conf keystone_authtoken project_domain_name default
|
||||
|
|
@ -75,7 +75,7 @@ iniset_sudo $conf DEFAULT notify_nova_on_port_status_changes true
|
|||
iniset_sudo $conf DEFAULT notify_nova_on_port_data_changes true
|
||||
|
||||
# Configure [nova] section.
|
||||
iniset_sudo $conf nova auth_url http://controller:35357
|
||||
iniset_sudo $conf nova auth_url http://controller:5000
|
||||
iniset_sudo $conf nova auth_type password
|
||||
iniset_sudo $conf nova project_domain_name default
|
||||
iniset_sudo $conf nova user_domain_name default
|
||||
|
|
@ -128,6 +128,13 @@ iniset_sudo $conf vxlan l2_population true
|
|||
iniset_sudo $conf securitygroup enable_security_group true
|
||||
iniset_sudo $conf securitygroup firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
|
||||
|
||||
echo "Ensuring that the kernel supports network bridge filters."
|
||||
if ! sudo sysctl net.bridge.bridge-nf-call-iptables; then
|
||||
sudo modprobe br_netfilter
|
||||
echo "# bridge support module added by training-labs" >> /etc/modules
|
||||
echo br_netfilter >> /etc/modules
|
||||
fi
|
||||
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
# Configure the layer-3 agent
|
||||
# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
|
||||
|
|
|
|||
|
|
@ -25,7 +25,7 @@ user_domain_name = Default
|
|||
username = tacker
|
||||
project_name = service
|
||||
password = tacker_user_secret
|
||||
auth_url = http://10.0.0.11:35357
|
||||
auth_url = http://10.0.0.11:5000
|
||||
auth_uri = http://10.0.0.11:5000
|
||||
|
||||
[agent]
|
||||
|
|
|
|||
Loading…
Reference in New Issue