464 lines
17 KiB
Puppet
464 lines
17 KiB
Puppet
#
|
|
# This can be used to build out the simplest openstack controller
|
|
#
|
|
# === Parameters
|
|
#
|
|
# [public_interface] Public interface used to route public traffic. Required.
|
|
# [public_address] Public address for public endpoints. Required.
|
|
# [private_interface] Interface used for vm networking connectivity. Required.
|
|
# [internal_address] Internal address used for management. Required.
|
|
# [mysql_root_password] Root password for mysql server.
|
|
# [sql_idle_timeout] Timeout for sql to reap connections.
|
|
# (Optional) Defaults to undef.
|
|
# [admin_email] Admin email.
|
|
# [admin_password] Admin password.
|
|
# [keystone_db_password] Keystone database password.
|
|
# [keystone_admin_token] Admin token for keystone.
|
|
# [keystone_bind_address] Address that keystone api service should bind to.
|
|
# Optional. Defaults to '0.0.0.0'.
|
|
# [glance_db_password] Glance DB password.
|
|
# [glance_user_password] Glance service user password.
|
|
# [nova_db_password] Nova DB password.
|
|
# [nova_user_password] Nova service password.
|
|
#
|
|
# [purge_nova_config]
|
|
# Whether unmanaged nova.conf entries should be purged.
|
|
# (optional) Defaults to false.
|
|
#
|
|
# [rabbit_password] Rabbit password.
|
|
# [rabbit_user] Rabbit User. Optional. Defaults to openstack.
|
|
# [rabbit_virtual_host] Rabbit virtual host path for Nova. Defaults to '/'.
|
|
# [network_manager] Nova network manager to use.
|
|
# [fixed_range] Range of ipv4 network for vms.
|
|
# [floating_range] Floating ip range to create.
|
|
# [create_networks] Rather network and floating ips should be created.
|
|
# [num_networks] Number of networks that fixed range should be split into.
|
|
# [multi_host] Rather node should support multi-host networking mode for HA.
|
|
# Optional. Defaults to false.
|
|
# [auto_assign_floating_ip] Rather configured to automatically allocate and
|
|
# assign a floating IP address to virtual instances when they are launched.
|
|
# Defaults to false.
|
|
# [network_config] Hash that can be used to pass implementation specifc
|
|
# network settings. Optioal. Defaults to {}
|
|
# [debug] Whether to log services at debug.
|
|
# [verbose] Whether to log services at verbose.
|
|
# Horizon related config - assumes puppetlabs-horizon code
|
|
# [secret_key] secret key to encode cookies, …
|
|
# [cache_server_ip] local memcached instance ip
|
|
# [cache_server_port] local memcached instance port
|
|
# [horizon] (bool) is horizon installed. Defaults to: true
|
|
# [quantum] (bool) is quantum installed
|
|
# The next is an array of arrays, that can be used to add call-out links to the dashboard for other apps.
|
|
# There is no specific requirement for these apps to be for monitoring, that's just the defacto purpose.
|
|
# Each app is defined in two parts, the display name, and the URI
|
|
# [metadata_shared_secret]
|
|
# Shared secret used by nova and quantum to authenticate metadata.
|
|
# (optional) Defaults to false.
|
|
#
|
|
# [firewall_driver]
|
|
# Driver used to implement firewall rules.
|
|
# (optional) Defaults to 'quantum.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver'.
|
|
#
|
|
# [quantum_auth_url]
|
|
# Url used to quantum to contact the authentication service.
|
|
# (optional) Default to http://127.0.0.1:35357/v2.0.
|
|
#
|
|
# [horizon_app_links] array as in '[ ["Nagios","http://nagios_addr:port/path"],["Ganglia","http://ganglia_addr"] ]'
|
|
# [enabled] Whether services should be enabled. This parameter can be used to
|
|
# implement services in active-passive modes for HA. Optional. Defaults to true.
|
|
# [swift]
|
|
# Whether or not to configure keystone for swift authorization.
|
|
# (Optional). Defaults to false.
|
|
#
|
|
# [swift_user_password]
|
|
# Auth password for swift.
|
|
# (Optional) Defaults to false. Required if swift is set to true.
|
|
#
|
|
# [swift_public_address]
|
|
# The swift address used to populate the keystone service catalog.
|
|
# (optional). Defaults to false.
|
|
#
|
|
# === Examples
|
|
#
|
|
# class { 'openstack::controller':
|
|
# public_address => '192.168.0.3',
|
|
# mysql_root_password => 'changeme',
|
|
# allowed_hosts => ['127.0.0.%', '192.168.1.%'],
|
|
# admin_email => 'my_email@mw.com',
|
|
# admin_password => 'my_admin_password',
|
|
# keystone_db_password => 'changeme',
|
|
# keystone_admin_token => '12345',
|
|
# glance_db_password => 'changeme',
|
|
# glance_user_password => 'changeme',
|
|
# nova_db_password => 'changeme',
|
|
# nova_user_password => 'changeme',
|
|
# secret_key => 'dummy_secret_key',
|
|
# }
|
|
#
|
|
class openstack::controller (
|
|
# Required Network
|
|
$public_address,
|
|
$admin_email,
|
|
# required password
|
|
$admin_password,
|
|
$rabbit_password,
|
|
$keystone_db_password,
|
|
$keystone_admin_token,
|
|
$glance_db_password,
|
|
$glance_user_password,
|
|
$nova_db_password,
|
|
$nova_user_password,
|
|
$secret_key,
|
|
$mysql_root_password,
|
|
# cinder and quantum password are not required b/c they are
|
|
# optional. Not sure what to do about this.
|
|
$quantum_user_password = false,
|
|
$quantum_db_password = false,
|
|
$cinder_user_password = false,
|
|
$cinder_db_password = false,
|
|
$swift_user_password = false,
|
|
# Database
|
|
$db_host = '127.0.0.1',
|
|
$db_type = 'mysql',
|
|
$mysql_account_security = true,
|
|
$mysql_bind_address = '0.0.0.0',
|
|
$sql_idle_timeout = undef,
|
|
$allowed_hosts = '%',
|
|
# Keystone
|
|
$keystone_host = '127.0.0.1',
|
|
$keystone_db_user = 'keystone',
|
|
$keystone_db_dbname = 'keystone',
|
|
$keystone_admin_tenant = 'admin',
|
|
$keystone_bind_address = '0.0.0.0',
|
|
$region = 'RegionOne',
|
|
# Glance
|
|
$glance_db_user = 'glance',
|
|
$glance_db_dbname = 'glance',
|
|
$glance_api_servers = undef,
|
|
$glance_backend = 'file',
|
|
# Glance Swift Backend
|
|
$swift_store_user = 'swift_store_user',
|
|
$swift_store_key = 'swift_store_key',
|
|
# Nova
|
|
$nova_admin_tenant_name = 'services',
|
|
$nova_admin_user = 'nova',
|
|
$nova_db_user = 'nova',
|
|
$nova_db_dbname = 'nova',
|
|
$purge_nova_config = false,
|
|
$enabled_apis = 'ec2,osapi_compute,metadata',
|
|
# Nova Networking
|
|
$public_interface = false,
|
|
$private_interface = false,
|
|
$internal_address = false,
|
|
$admin_address = false,
|
|
$network_manager = 'nova.network.manager.FlatDHCPManager',
|
|
$fixed_range = '10.0.0.0/24',
|
|
$floating_range = false,
|
|
$create_networks = true,
|
|
$num_networks = 1,
|
|
$multi_host = false,
|
|
$auto_assign_floating_ip = false,
|
|
$network_config = {},
|
|
# Rabbit
|
|
$rabbit_host = '127.0.0.1',
|
|
$rabbit_user = 'openstack',
|
|
$rabbit_virtual_host = '/',
|
|
# Horizon
|
|
$horizon = true,
|
|
$cache_server_ip = '127.0.0.1',
|
|
$cache_server_port = '11211',
|
|
$horizon_app_links = undef,
|
|
# VNC
|
|
$vnc_enabled = true,
|
|
$vncproxy_host = false,
|
|
# General
|
|
$debug = false,
|
|
$verbose = false,
|
|
# cinder
|
|
# if the cinder management components should be installed
|
|
$cinder = true,
|
|
$cinder_db_user = 'cinder',
|
|
$cinder_db_dbname = 'cinder',
|
|
$cinder_bind_address = '0.0.0.0',
|
|
# Quantum
|
|
$quantum = true,
|
|
$bridge_interface = undef,
|
|
$external_bridge_name = 'br-ex',
|
|
$enable_ovs_agent = true,
|
|
$enable_dhcp_agent = true,
|
|
$enable_l3_agent = true,
|
|
$enable_metadata_agent = true,
|
|
$metadata_shared_secret = false,
|
|
$firewall_driver = 'quantum.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver',
|
|
$quantum_db_user = 'quantum',
|
|
$quantum_db_name = 'quantum',
|
|
$quantum_auth_url = 'http://127.0.0.1:35357/v2.0',
|
|
$enable_quantum_server = true,
|
|
$ovs_local_ip = false,
|
|
# swift
|
|
$swift = false,
|
|
$swift_public_address = false,
|
|
$enabled = true
|
|
) {
|
|
|
|
if $ovs_local_ip {
|
|
$ovs_local_ip_real = $ovs_local_ip
|
|
} else {
|
|
$ovs_local_ip_real = $internal_address
|
|
}
|
|
|
|
if $internal_address {
|
|
$internal_address_real = $internal_address
|
|
} else {
|
|
$internal_address_real = $public_address
|
|
}
|
|
if $admin_address {
|
|
$admin_address_real = $admin_address
|
|
} else {
|
|
$admin_address_real = $internal_address_real
|
|
}
|
|
if $vncproxy_host {
|
|
$vncproxy_host_real = $vncproxy_host
|
|
} else {
|
|
$vncproxy_host_real = $public_address
|
|
}
|
|
|
|
# Ensure things are run in order
|
|
Class['openstack::db::mysql'] -> Class['openstack::keystone']
|
|
Class['openstack::db::mysql'] -> Class['openstack::glance']
|
|
Class['openstack::db::mysql'] -> Class['openstack::nova::controller']
|
|
|
|
####### DATABASE SETUP ######
|
|
# set up mysql server
|
|
if ($db_type == 'mysql') {
|
|
if ($enabled) {
|
|
Class['glance::db::mysql'] -> Class['glance::registry']
|
|
}
|
|
class { 'openstack::db::mysql':
|
|
mysql_root_password => $mysql_root_password,
|
|
mysql_bind_address => $mysql_bind_address,
|
|
mysql_account_security => $mysql_account_security,
|
|
keystone_db_user => $keystone_db_user,
|
|
keystone_db_password => $keystone_db_password,
|
|
keystone_db_dbname => $keystone_db_dbname,
|
|
glance_db_user => $glance_db_user,
|
|
glance_db_password => $glance_db_password,
|
|
glance_db_dbname => $glance_db_dbname,
|
|
nova_db_user => $nova_db_user,
|
|
nova_db_password => $nova_db_password,
|
|
nova_db_dbname => $nova_db_dbname,
|
|
cinder => $cinder,
|
|
cinder_db_user => $cinder_db_user,
|
|
cinder_db_password => $cinder_db_password,
|
|
cinder_db_dbname => $cinder_db_dbname,
|
|
quantum => $quantum,
|
|
quantum_db_user => $quantum_db_user,
|
|
quantum_db_password => $quantum_db_password,
|
|
quantum_db_dbname => $quantum_db_name,
|
|
allowed_hosts => $allowed_hosts,
|
|
enabled => $enabled,
|
|
}
|
|
} else {
|
|
fail("Unsupported db : ${db_type}")
|
|
}
|
|
|
|
####### KEYSTONE ###########
|
|
class { 'openstack::keystone':
|
|
debug => $debug,
|
|
verbose => $verbose,
|
|
db_type => $db_type,
|
|
db_host => $db_host,
|
|
db_password => $keystone_db_password,
|
|
db_name => $keystone_db_dbname,
|
|
db_user => $keystone_db_user,
|
|
idle_timeout => $sql_idle_timeout,
|
|
admin_token => $keystone_admin_token,
|
|
admin_tenant => $keystone_admin_tenant,
|
|
admin_email => $admin_email,
|
|
admin_password => $admin_password,
|
|
public_address => $public_address,
|
|
internal_address => $internal_address_real,
|
|
admin_address => $admin_address_real,
|
|
region => $region,
|
|
glance_user_password => $glance_user_password,
|
|
nova_user_password => $nova_user_password,
|
|
cinder => $cinder,
|
|
cinder_user_password => $cinder_user_password,
|
|
quantum => $quantum,
|
|
quantum_user_password => $quantum_user_password,
|
|
swift => $swift,
|
|
swift_user_password => $swift_user_password,
|
|
swift_public_address => $swift_public_address,
|
|
enabled => $enabled,
|
|
bind_host => $keystone_bind_address,
|
|
}
|
|
|
|
|
|
######## BEGIN GLANCE ##########
|
|
class { 'openstack::glance':
|
|
debug => $debug,
|
|
verbose => $verbose,
|
|
db_type => $db_type,
|
|
db_host => $db_host,
|
|
sql_idle_timeout => $sql_idle_timeout,
|
|
keystone_host => $keystone_host,
|
|
db_user => $glance_db_user,
|
|
db_name => $glance_db_dbname,
|
|
db_password => $glance_db_password,
|
|
user_password => $glance_user_password,
|
|
backend => $glance_backend,
|
|
swift_store_user => $swift_store_user,
|
|
swift_store_key => $swift_store_key,
|
|
enabled => $enabled,
|
|
}
|
|
|
|
######## BEGIN NOVA ###########
|
|
#
|
|
# indicates that all nova config entries that we did
|
|
# not specifify in Puppet should be purged from file
|
|
#
|
|
if ($purge_nova_config) {
|
|
resources { 'nova_config':
|
|
purge => true,
|
|
}
|
|
}
|
|
|
|
class { 'openstack::nova::controller':
|
|
# Database
|
|
db_host => $db_host,
|
|
sql_idle_timeout => $sql_idle_timeout,
|
|
# Network
|
|
network_manager => $network_manager,
|
|
network_config => $network_config,
|
|
floating_range => $floating_range,
|
|
fixed_range => $fixed_range,
|
|
public_address => $public_address,
|
|
admin_address => $admin_address,
|
|
internal_address => $internal_address_real,
|
|
auto_assign_floating_ip => $auto_assign_floating_ip,
|
|
create_networks => $create_networks,
|
|
num_networks => $num_networks,
|
|
multi_host => $multi_host,
|
|
public_interface => $public_interface,
|
|
private_interface => $private_interface,
|
|
# Quantum
|
|
quantum => $quantum,
|
|
quantum_user_password => $quantum_user_password,
|
|
metadata_shared_secret => $metadata_shared_secret,
|
|
# Nova
|
|
nova_admin_tenant_name => $nova_admin_tenant_name,
|
|
nova_admin_user => $nova_admin_user,
|
|
nova_user_password => $nova_user_password,
|
|
nova_db_password => $nova_db_password,
|
|
nova_db_user => $nova_db_user,
|
|
nova_db_dbname => $nova_db_dbname,
|
|
enabled_apis => $enabled_apis,
|
|
# Rabbit
|
|
rabbit_user => $rabbit_user,
|
|
rabbit_password => $rabbit_password,
|
|
rabbit_virtual_host => $rabbit_virtual_host,
|
|
# Glance
|
|
glance_api_servers => $glance_api_servers,
|
|
# VNC
|
|
vnc_enabled => $vnc_enabled,
|
|
vncproxy_host => $vncproxy_host_real,
|
|
# General
|
|
debug => $debug,
|
|
verbose => $verbose,
|
|
enabled => $enabled,
|
|
}
|
|
|
|
######### Quantum Controller Services ########
|
|
if ($quantum) {
|
|
|
|
if ! $quantum_user_password {
|
|
fail('quantum_user_password must be set when configuring quantum')
|
|
}
|
|
|
|
if ! $quantum_db_password {
|
|
fail('quantum_db_password must be set when configuring quantum')
|
|
}
|
|
|
|
if ! $bridge_interface {
|
|
fail('bridge_interface must be set when configuring quantum')
|
|
}
|
|
|
|
class { 'openstack::quantum':
|
|
# Database
|
|
db_host => $db_host,
|
|
sql_idle_timeout => $sql_idle_timeout,
|
|
# Rabbit
|
|
rabbit_host => $rabbit_host,
|
|
rabbit_user => $rabbit_user,
|
|
rabbit_password => $rabbit_password,
|
|
rabbit_virtual_host => $rabbit_virtual_host,
|
|
# Quantum OVS
|
|
ovs_local_ip => $ovs_local_ip_real,
|
|
bridge_uplinks => ["${external_bridge_name}:${bridge_interface}"],
|
|
bridge_mappings => ["default:${external_bridge_name}"],
|
|
enable_ovs_agent => $enable_ovs_agent,
|
|
firewall_driver => $firewall_driver,
|
|
# Database
|
|
db_name => $quantum_db_name,
|
|
db_user => $quantum_db_user,
|
|
db_password => $quantum_db_password,
|
|
# Quantum agents
|
|
enable_dhcp_agent => $enable_dhcp_agent,
|
|
enable_l3_agent => $enable_l3_agent,
|
|
enable_metadata_agent => $enable_metadata_agent,
|
|
auth_url => $quantum_auth_url,
|
|
user_password => $quantum_user_password,
|
|
shared_secret => $metadata_shared_secret,
|
|
# Keystone
|
|
keystone_host => $keystone_host,
|
|
# General
|
|
enabled => $enabled,
|
|
enable_server => $enable_quantum_server,
|
|
debug => $debug,
|
|
verbose => $verbose,
|
|
}
|
|
}
|
|
|
|
######### Cinder Controller Services ########
|
|
if ($cinder) {
|
|
|
|
if ! $cinder_db_password {
|
|
fail('Must set cinder db password when setting up a cinder controller')
|
|
}
|
|
|
|
if ! $cinder_user_password {
|
|
fail('Must set cinder user password when setting up a cinder controller')
|
|
}
|
|
|
|
class { 'openstack::cinder::controller':
|
|
bind_host => $cinder_bind_address,
|
|
sql_idle_timeout => $sql_idle_timeout,
|
|
keystone_auth_host => $keystone_host,
|
|
keystone_password => $cinder_user_password,
|
|
rabbit_userid => $rabbit_user,
|
|
rabbit_password => $rabbit_password,
|
|
rabbit_host => $rabbit_host,
|
|
db_password => $cinder_db_password,
|
|
db_dbname => $cinder_db_dbname,
|
|
db_user => $cinder_db_user,
|
|
db_type => $db_type,
|
|
db_host => $db_host,
|
|
api_enabled => $enabled,
|
|
scheduler_enabled => $enabled,
|
|
debug => $debug,
|
|
verbose => $verbose
|
|
}
|
|
}
|
|
|
|
######## Horizon ########
|
|
if ($horizon) {
|
|
class { 'openstack::horizon':
|
|
secret_key => $secret_key,
|
|
cache_server_ip => $cache_server_ip,
|
|
cache_server_port => $cache_server_port,
|
|
horizon_app_links => $horizon_app_links,
|
|
}
|
|
}
|
|
|
|
}
|