OpenStack Zed : Neutron 設定 #12023/06/27

OpenStack Network Service（Neutron）を設定します。

当例では以下のような環境で管理ノードを構成しています。

        eth0|10.0.0.30 
+-----------+-----------+
|   [ dlp.srv.world ]   |
|     (Control Node)    |
|                       |
|  MariaDB    RabbitMQ  |
|  Memcached  Nginx     |
|  Keystone   httpd     |
|  Glance     Nova API  |
+-----------------------+

[1]	Keystone に Neutron 用のユーザー等々を登録しておきます。

# [service] プロジェクト所属で [neutron] ユーザーを作成

root@dlp ~(keystone)#

openstack user create --domain default --project service --password servicepassword neutron

+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| default_project_id  | d8b09d86ed7743039f92b2e542ea26c1 |
| domain_id           | default                          |
| enabled             | True                             |
| id                  | 1b4f2549a8ee462d909185b6a321e265 |
| name                | neutron                          |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

# [neutron] ユーザーを [admin] ロールに加える

root@dlp ~(keystone)#

openstack role add --project service --user neutron admin

# [neutron] 用サービスエントリ作成

root@dlp ~(keystone)#

openstack service create --name neutron --description "OpenStack Networking service" network

+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | OpenStack Networking service     |
| enabled     | True                             |
| id          | 649e9887094b4b2292add3a51d5323a8 |
| name        | neutron                          |
| type        | network                          |
+-------------+----------------------------------+

# Neutron API ホストを定義

root@dlp ~(keystone)#

export controller=dlp.srv.world

# [neutron] 用エンドポイント作成 (public)

root@dlp ~(keystone)#

openstack endpoint create --region RegionOne network public https://$controller:9696

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | cf14f930325540119016787e10915409 |
| interface    | public                           |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 649e9887094b4b2292add3a51d5323a8 |
| service_name | neutron                          |
| service_type | network                          |
| url          | https://dlp.srv.world:9696       |
+--------------+----------------------------------+

# [neutron] 用エンドポイント作成 (internal)

root@dlp ~(keystone)#

openstack endpoint create --region RegionOne network internal https://$controller:9696

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 390813e3cbf54807a23ddc16ef24288e |
| interface    | internal                         |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 649e9887094b4b2292add3a51d5323a8 |
| service_name | neutron                          |
| service_type | network                          |
| url          | https://dlp.srv.world:9696       |
+--------------+----------------------------------+

# [neutron] 用エンドポイント作成 (admin)

root@dlp ~(keystone)#

openstack endpoint create --region RegionOne network admin https://$controller:9696

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 58d1c7c7a94c41a4aa859dd920c59dde |
| interface    | admin                            |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 649e9887094b4b2292add3a51d5323a8 |
| service_name | neutron                          |
| service_type | network                          |
| url          | https://dlp.srv.world:9696       |
+--------------+----------------------------------+

[2]	Neutron 用のユーザーとデータベースを MariaDB に作成します。

root@dlp ~(keystone)#

mysql

Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 1150
Server version: 10.11.3-MariaDB-1 Debian 12

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> create database neutron_ml2; 
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> grant all privileges on neutron_ml2.* to neutron@'localhost' identified by 'password'; 
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all privileges on neutron_ml2.* to neutron@'%' identified by 'password'; 
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> flush privileges; 
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> exit 
Bye