入门篇-contrail-command(对接openstack)All-In-One

基础环境

系统:

centos7.6(3.10.0-957) 64G内存 500G磁盘

关闭防火墙

systemctl disable firewalld

关闭selinux

sed -i 's/SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config

安装依赖包

yum install python-devel gcc -y

设置主机名

hostnamectl set-hostname opcontroller

hosts文件

[root@bogon ~]# cat /etc/hosts

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4

::1 localhost localhost.localdomain localhost6 localhost6.localdomain6

10.49.252.200 ctfdeploy

10.49.252.201 opopenstack

登录ctfdeploy节点进行部署

安装docker

[root@ctfdeploy ~]yum install -y yum-utils device-mapper-persistent-data lvm2

[root@ctfdeploy ~]yum-config-manager --add-repo https://download.docker.com/linux/centos/docker-ce.repo

[root@ctfdeploy ~]yum install -y docker-ce-18.06.0.ce

[root@ctfdeploy ~]systemctl start docker && systemctl enable docker

拉取contrail-command-deployer镜像

[root@ctfdeploy ~]docker login hub.juniper.net --username xxxx --password xxxxxx

[root@ctfdeploy ~]docker pull hub.juniper.net/contrail/contrail-command-deployer:1909.30

下面参数默认就可以一会web ui 可以更改

[root@ctfdeploy ~]# egrep -v "^#|^$|*#" command_servers1910.yml

 [root@ctfdeploy ~]# egrep -v "^#|^$|*#" command_servers1910.yml
 ---
 command_servers:
     server1:
         ip: 10.49.252.200
         connection: ssh
         ssh_user: root
         ssh_pass: abc@123
         sudo_pass: abc@123
         ntpserver: ntp1.aliyun.com
         registry_insecure: false
         container_registry: hub.juniper.net/contrail
         container_name: contrail-command
         container_tag: 1910.23
         container_registry_username: xxxxxxxxxxxxxxxxx
         container_registry_password: yyyyyyyyyyyyyyy
         config_dir: /etc/contrail
         contrail_config:
             database:
                 type: postgres
                 dialect: postgres
                 host: localhost
                 user: root
                 password: contrail123
                 name: contrail_test
                 max_open_conn: 100
                 connection_retries: 10
                 retry_period: 3s
             log_level: debug
             cache:
               enabled: true
               timeout: 10s
               max_history: 100000
               rdbms:
                 enabled: true
             server:
               enabled: true
               read_timeout: 10
               write_timeout: 5
               log_api: true
               address: ":9091"
               tls:
                   enabled: true
                   key_file: /usr/share/contrail/ssl/cs-key.pem
                   cert_file: /usr/share/contrail/ssl/cs-cert.pem
               enable_grpc: false
               static_files:
                   /: /usr/share/contrail/public
               notify_etcd: false
               enable_vnc_replication: true
             keystone:
                 local: true
                 assignment:
                     type: static
                     data:
                       domains:
                         default: &default
                           id: default
                           name: default
                       projects:
                         admin: &admin
                           id: admin
                           name: admin
                           domain: *default
                         demo: &demo
                           id: demo
                           name: demo
                           domain: *default
                       users:
                         admin:
                           id: admin
                           name: Admin
                           domain: *default
                           password: contrail123
                           email: admin@juniper.nets
                           roles:
                           - id: admin
                             name: admin
                             project: *admin
                         bob:
                           id: bob
                           name: Bob
                           domain: *default
                           password: bob_password
                           email: bob@juniper.net
                           roles:
                           - id: Member
                             name: Member
                             project: *demo
                 store:
                     type: memory
                     expire: 36000
                 insecure: true
                 authurl: https://localhost:9091/keystone/v3
             insecure: true
             etcd:
               endpoints:
                 - localhost:2379
               username: ""
               password: ""
               path: contrail
             watcher:
               enabled: false
               storage: json
             client:
               id: admin
               password: contrail123
               project_name: admin
               domain_id: default
               schema_root: /
               endpoint: https://localhost:9091
             compilation:
               enabled: false
               plugin_directory: 'etc/plugins/'
               number_of_workers: 4
               max_job_queue_len: 5
               msg_queue_lock_time: 30
               msg_index_string: 'MsgIndex'
               read_lock_string: "MsgReadLock"
               master_election: true
               plugin:
                   handlers:
                       create_handler: 'HandleCreate'
                       update_handler: 'HandleUpdate'
                       delete_handler: 'HandleDelete'
             agent:
               enabled: true
               backend: file
               watcher: polling
               log_level: debug

启动contrail-command-deployer容器(用来部署contrail和openstack、K8S、OpenShift)

[root@ctfdeploy ~]# docker run -td --net host -v /root/ctf.yml:/command_servers.yml --privileged --name contrail_command_deployer hub.juniper.net/contrail/contrail-command-deployer:1910.23

6bacc0541e5b37e445c4f0a48bac9a25340c4592a4fa1df1919579e15bde1770

登录Contrail-command web UI

https://10.49.252.200:9091/ 用户名admin 密码contrail123

1、添加机器

2、配置仓库源等信息

3、选择Control Nodes节点

选择opcontroller

4、配置openstack选项

5、选择计算节点

选择opcontroller

下一步直到完成，部署开始了

查看部署日志(节点)

[root@ctfdeploy ~]# docker logs -f contrail_command_deployer

部署日志查看(由于网络问题问题经常出现timeout错误就需要重新跑下)：

docker exec contrail_command tail -f /var/log/contrail/deploy.log

登录OpenStack dashboard

admin/contrail123

创建的端口类型是vroute

登录TF dashboard

https://10.49.252.201:8143

admin/contrail123

查看port

contrail-command这个是商业版的UI部署工具，底层也是通过contrail-ansible-deployer来部署https://github.com/Juniper/contrail-ansible-deployer，拿不到contrail-command 工具小伙伴的可以使用contrail-ansible-deployer 部署