OpenStack Caracal : Neutron 設定 #12024/08/06

OpenStack Network Service（Neutron）を設定します。

当例では以下のような環境で管理ノードを構成しています。

        eth0|10.0.0.30 
+-----------+-----------+
|   [ dlp.srv.world ]   |
|     (Control Node)    |
|                       |
|  MariaDB    RabbitMQ  |
|  Memcached  Nginx     |
|  Keystone   httpd     |
|  Glance     Nova API  |
+-----------------------+

[1]	Keystone に Neutron 用のユーザー等々を登録しておきます。

# [service] プロジェクト所属で [neutron] ユーザーを作成

[root@dlp ~(keystone)]#

openstack user create --domain default --project service --password servicepassword neutron

+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| default_project_id  | 0b826f1bf49d489494e94badc32f2cea |
| domain_id           | default                          |
| enabled             | True                             |
| id                  | 1fe82e21d1724c57b192b0af02751447 |
| name                | neutron                          |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

# [neutron] ユーザーを [admin] ロールに加える

[root@dlp ~(keystone)]#

openstack role add --project service --user neutron admin

# [neutron] 用サービスエントリ作成

[root@dlp ~(keystone)]#

openstack service create --name neutron --description "OpenStack Networking service" network

+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | OpenStack Networking service     |
| enabled     | True                             |
| id          | 01102f6129b04ca2acd871324c886d87 |
| name        | neutron                          |
| type        | network                          |
+-------------+----------------------------------+

# Neutron API ノードを定義

[root@dlp ~(keystone)]#

export controller=dlp.srv.world

# [neutron] 用エンドポイント作成 (public)

[root@dlp ~(keystone)]#

openstack endpoint create --region RegionOne network public https://$controller:9696

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | eb254545285b4ac2be29fe809a862bc7 |
| interface    | public                           |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 01102f6129b04ca2acd871324c886d87 |
| service_name | neutron                          |
| service_type | network                          |
| url          | https://dlp.srv.world:9696       |
+--------------+----------------------------------+

# [neutron] 用エンドポイント作成 (internal)

[root@dlp ~(keystone)]#

openstack endpoint create --region RegionOne network internal https://$controller:9696

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | b193fd8f7eda47d394435ea563b3e203 |
| interface    | internal                         |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 01102f6129b04ca2acd871324c886d87 |
| service_name | neutron                          |
| service_type | network                          |
| url          | https://dlp.srv.world:9696       |
+--------------+----------------------------------+

# [neutron] 用エンドポイント作成 (admin)

[root@dlp ~(keystone)]#

openstack endpoint create --region RegionOne network admin https://$controller:9696

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | e44ffd21a7fd4151a4515c5f5cc5a747 |
| interface    | admin                            |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 01102f6129b04ca2acd871324c886d87 |
| service_name | neutron                          |
| service_type | network                          |
| url          | https://dlp.srv.world:9696       |
+--------------+----------------------------------+

[2]	Neutron 用のユーザーとデータベースを MariaDB に作成します。

[root@dlp ~(keystone)]#

mysql

Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 83
Server version: 10.5.22-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> create database neutron_ml2; 
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> grant all privileges on neutron_ml2.* to neutron@'localhost' identified by 'password'; 
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all privileges on neutron_ml2.* to neutron@'%' identified by 'password'; 
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> exit 
Bye