[Openstack] 使用heat模板创建stack

Dear 丶 2022-09-02 04:29 306阅读 0赞

本例需要准备两个yaml文件，一个是heat模板，一个是传入的参数，然后执行如下命令创建stack

openstack --debug stack create -t <heat\_template\_yaml> -e <env\_yaml> <stack\_name> --wait

**Note for arguments:**

\--debug               Show tracebacks on errors.

\-t <template>, --template <template>  
                      Path to the template

\-e <environment>, --environment <environment>  
                      Path to the environment. Can be specified multiple times

\--dry-run             Do not actually perform the stack create, but show what would be created

\--wait                Wait until stack goes to CREATE\_COMPLETE or CREATE\_FAILED

本文包括4个部分

\- 资源准备  
\- 传入参数的yaml文件  
\- Heat模板文件  
\- 创建stack

1.资源准备（此处假设资源已齐全，仅需要记录一些参数）  
(1) 镜像

(2) flavor

~$ nova flavor-list | egrep 'ID|flavor_8vC16M'
    | ID                                   | Name                                       | Memory_MB | Disk | Ephemeral | Swap | VCPUs | RXTX_Factor | Is_Public |
    | 8cb21666-44da-4407-ad8f-0fecb93f93ca | TESTflavor_8vC16M                          | 16384     | 310  | 0         |      | 8     | 1.0         | True      |
    ~$
    ~$ nova flavor-show TESTflavor_8vC16M
    +----------------------------+---------------------------------------------------------------+
    | Property                   | Value                                                         |
    +----------------------------+---------------------------------------------------------------+
    | OS-FLV-DISABLED:disabled   | False                                                         |
    | OS-FLV-EXT-DATA:ephemeral  | 0                                                             |
    | disk                       | 310                                                           |
    | extra_specs                | {"hw:cpu_policy": "dedicated", "hw:mem_page_size": "1048576"} |
    | id                         | 8cb21666-44da-4407-ad8f-0fecb93f93ca                          |
    | name                       | TESTflavor_8vC16M                                             |
    | os-flavor-access:is_public | True                                                          |
    | ram                        | 16384                                                         |
    | rxtx_factor                | 1.0                                                           |
    | swap                       |                                                               |
    | vcpus                      | 8                                                             |
    +----------------------------+---------------------------------------------------------------+
    ~$

(3) 可用区

(4) 安全组

(5) 网络

===> 查看网络

===> 查看子网，记录网关和子网掩码

~$ neutron subnet-show 3a27faaa-823d-454a-ab4c-24f0ce41e2ad
    +-------------------+------------------------------------------------------+
    | Field             | Value                                                |
    +-------------------+------------------------------------------------------+
    | allocation_pools  | {"start": "10.166.166.200", "end": "10.166.166.220"} |
    | cidr              | 10.166.166.192/27                                    |
    | created_at        | 2020-12-03T02:26:33                                  |
    | description       |                                                      |
    | dns_nameservers   |                                                      |
    | enable_dhcp       | True                                                 |
    | gateway_ip        | 10.166.166.193                                       |
    | host_routes       |                                                      |
    | id                | 3a27faaa-823d-454a-ab4c-24f0ce41e2ad                 |
    | ip_version        | 4                                                    |
    | ipv6_address_mode |                                                      |
    | ipv6_ra_mode      |                                                      |
    | name              | XXNet_SubNet                                         |
    | network_id        | 3a190666-bee3-4e5e-b228-1e32a83ab70b                 |
    | subnetpool_id     |                                                      |
    | tenant_id         | 7849b4a666694e666ac52095f38ed666                     |
    | updated_at        | 2020-12-03T02:26:33                                  |
    +-------------------+------------------------------------------------------+
    ~$

===> 创建PORT

确认PORT名和地址未被使用

~$ neutron port-list | grep TEST-ETH0
    ~$ neutron port-list | grep 10.166.166.212
    ~$

创建PORT，仅设定PORT名称  
neutron port-create \[--name NAME\] <net\_id>

注意：不要加参数\[--fixed-ip subnet\_id=SUBNET,ip\_address=IP\_ADDR\]，之后传入的env会传入地址，否则创建时会有地址冲突 ===> \[TEST-STACK\]: CREATE\_FAILED  Resource CREATE failed: IpAddressInUseClient: resources.VM\_Port\_1\_v4: Unable to complete operation for network 3a1904e1-bee3-4e5e-b228-1e32a83ab70b. The IP address 10.166.166.212 is in use.

~$ neutron port-create --name TEST-ETH0 3a190666-bee3-4e5e-b228-1e32a83ab70b
    Created a new port:
    +-----------------------+---------------------------------------------------------------------------------------+
    | Field                 | Value                                                                                 |
    +-----------------------+---------------------------------------------------------------------------------------+
    | admin_state_up        | True                                                                                  |
    | allowed_address_pairs |                                                                                       |
    | binding:host_id       |                                                                                       |
    | binding:profile       | {}                                                                                    |
    | binding:vif_details   | {}                                                                                    |
    | binding:vif_type      | unbound                                                                               |
    | binding:vnic_type     | normal                                                                                |
    | created_at            | 2021-07-30T07:31:26                                                                   |
    | description           |                                                                                       |
    | device_id             |                                                                                       |
    | device_owner          |                                                                                       |
    | extra_dhcp_opts       |                                                                                       |
    | fixed_ips             | {"subnet_id": "3a27faaa-823d-454a-ab4c-24f0ce41e2ad", "ip_address": "10.166.166.209"} |
    | id                    | 612ab666-f843-4343-9b0c-a295ae4bd850                                                  |
    | mac_address           | fa:16:3e:de:30:24                                                                     |
    | name                  | TEST-ETH0                                                                             |
    | network_id            | 3a190666-bee3-4e5e-b228-1e32a83ab70b                                                  |
    | port_security_enabled | True                                                                                  |
    | qos_policy_id         |                                                                                       |
    | security_groups       | 0546b666-9dce-40aa-94b9-0470bcc35e4f                                                  |
    | status                | DOWN                                                                                  |
    | tenant_id             | 7849b4a666694e666ac52095f38ed666                                                     |
    | updated_at            | 2021-07-30T07:31:26                                                                   |
    +-----------------------+---------------------------------------------------------------------------------------+
    ~$

(6)确认未使用的server,stack名称

~$ openstack server list --all-projects | grep TEST-VM
    ~$ openstack stack list | grep TEST-STACK
    ~$

2.传入参数的yaml文件

$ cat IPv4-VM.yaml
    parameters:
     network_type: IPv4_Only
     VM_servername: TEST-VM
     VM_instance-name: TEST-VM
     root-image-uuid: 5d6e5666-86c5-4eb1-a937-fcbc41172c04
     flavor_name: TESTflavor_8vC16M
     availability-zone: XX-TEST-ZONE
     security-group-uuid: 0546b666-9dce-40aa-94b9-0470bcc35e4f
     eth0_ipv4_address: 10.166.166.212
     eth0_ipv4_prefix: 27
     eth0_ipv4_gateway: 10.166.166.193
     eth0_ipv4_network_subnet_uuid: 3a27faaa-823d-454a-ab4c-24f0ce41e2ad
     eth0_network_uuid: 3a190666-bee3-4e5e-b228-1e32a83ab70b
     eth0_port_name: TEST-ETH0
    ~$

说明:

参考1(6) VM\_instance-name  
参考1(1) root-image-uuid  
参考1(2) flavor\_name  
参考1(3) availability-zone  
参考1(4) security-group-uuid  
参考1(5) eth0\_ipv4\_address  
参考1(5) eth0\_ipv4\_prefix  
参考1(5) eth0\_ipv4\_gateway  
参考1(5) eth0\_ipv4\_network\_subnet\_uuid  
参考1(5) eth0\_network\_uuid   
参考1(5) eth0\_port\_name: TEST-ETH0

**3. Heat模板文件**

~$ cat Heat-Orchestration-Template-example.yaml
    heat_template_version: "2016-10-14"
    parameters:
      network_type:
        description: "The network deployment type. Supports IPv4 only, IPv6 only and dual stack."
        type: string
      VM_servername:
        description: "The hostname for TEST VM."
        type: string
      flavor_name:
        description: "The flavor name for TEST VM."
        type: string
      availability-zone:
        description: "The availability zone name for TEST VM in Openstack."
        type: string
      root-image-uuid:
        description: "The image UUID for TEST."
        type: string
      security-group-uuid:
        description: "The security group UUID for TEST VM."
        type: string
      eth0_ipv4_address:
        description: "The eth0 network IPv4 address for TEST VM."
        type: string
        default: ""
      eth0_ipv4_prefix:
        description: "The eth0 network IPv4 prefix for TEST VM."
        type: string
        default: ""
      eth0_ipv4_gateway:
        description: "The eth0 network IPv4 gateway for TEST VM."
        type: string
        default: ""
      eth0_ipv6_address:
        description: "The eth0 network IPv6 address for TEST VM."
        type: string
        default: ""
      eth0_ipv6_prefix:
        description: "The eth0 network IPv6 prefix for TEST VM."
        type: string
        default: ""
      eth0_ipv6_gateway:
        description: "The eth0 network IPv6 gateway for TEST VM."
        type: string
        default: ""
      eth0_network_uuid:
        description: "The eth0 network UUID in Openstack."
        type: string
      eth0_ipv4_network_subnet_uuid:
        description: "The eth0 network IPv4 subnet UUID in Openstack."
        type: string
        default: ""
      eth0_ipv6_network_subnet_u:uid:
        description: "The eth0 network IPv6 subnet UUID in Openstack."
        type: string
        default: ""
      eth0_port_name:
        description: "The eth0 network port name for TEST VM in Openstack."
        type: string
      VM_instance-name:
        description: "The TEST instance name displayed in Openstack."
        type: string
    conditions:
      ipv4_only:
        equals:
          - get_param: network_type
          - "IPv4_Only"
      ipv6_only:
        equals:
          - get_param: network_type
          - "IPv6_Only"
      dual_stack:
        equals:
          - get_param: network_type
          - "Dual_Stack"
    resources:
     VM_Port_v4:
       type: OS::Neutron::Port
       condition: ipv4_only
       properties:
         fixed_ips: [{"ip_address": { get_param: eth0_ipv4_address }, "subnet": { get_param: eth0_ipv4_network_subnet_uuid }}]
         security_groups: [ get_param: security-group-uuid ]
         name: { get_param: eth0_port_name }
         network: { get_param: eth0_network_uuid }
     VM_Port_v6:
       type: OS::Neutron::Port
       condition: ipv6_only
       properties:
         fixed_ips: [{"ip_address": { get_param: eth0_ipv6_address }, "subnet": { get_param: eth0_ipv6_network_subnet_uuid }}]
         security_groups: [ get_param: security-group-uuid ]
         name: { get_param: eth0_port_name }
         network: { get_param: eth0_network_uuid }
     VM_Port_dual:
       type: OS::Neutron::Port
       condition: dual_stack
       properties:
         fixed_ips: [{"ip_address": { get_param: eth0_ipv4_address }, "subnet": { get_param: eth0_ipv4_network_subnet_uuid }}, {"ip_address": { get_param: eth0_ipv6_address }, "subnet": { get_param: eth0_ipv6_network_subnet_uuid }}]
         security_groups: [ get_param: security-group-uuid ]
         name: { get_param: eth0_port_name }
         network: { get_param: eth0_network_uuid }
     VM_net_data:
        type: OS::Heat::MultipartMime
        properties:
          parts:
          - config:
              str_replace:
                params:
                  _ETH0_IPV4_: { get_param: eth0_ipv4_address }
                  _ETH0_IPV4_PREFIX_: { get_param: eth0_ipv4_prefix }
                  _ETH0_IPV4_GATEWAY_: { get_param: eth0_ipv4_gateway }
                  _ETH0_IPV6_: {get_param: eth0_ipv6_address}
                  _ETH0_IPV6_PREFIX_: { get_param: eth0_ipv6_prefix }
                  _ETH0_IPV6_GATEWAY_: { get_param: eth0_ipv6_gateway }
                  _VM_HOSTNAME_: { get_param: VM_servername }
                template: |
                  #cloud-config
                  merge_how: 'list(append)+dict(recurse_array,no_replace)+str()'
                  write_files:
                    - path: /run/cloud-init/update_network.sh
                      owner: root:root
                      permissions: '0700'
                      content : |
                        #!/bin/bash
                        sed -i '/^PasswordAuthentication/ s/no/yes/' /etc/ssh/sshd_config
                        sed -i '/^PermitRootLogin/ s/no/yes/' /etc/ssh/sshd_config
                        systemctl restart sshd
                        sed -i 's/DHCPV6C=yes/DHCPV6C=no/g' /etc/sysconfig/network-scripts/ifcfg-eth0
                        sed -i 's/dhcp/static/g' /etc/sysconfig/network-scripts/ifcfg-eth0
                        if [ _ETH0_IPV4_ != "" ];then
                            echo IPADDR=_ETH0_IPV4_ >> /etc/sysconfig/network-scripts/ifcfg-eth0
                            echo PREFIX=_ETH0_IPV4_PREFIX_ >> /etc/sysconfig/network-scripts/ifcfg-eth0
                            echo GATEWAY=_ETH0_IPV4_GATEWAY_ >> /etc/sysconfig/network-scripts/ifcfg-eth0
                        fi
                        if [ _ETH0_IPV6_ != "" ];then
                            echo IPV6INIT=yes >> /etc/sysconfig/network-scripts/ifcfg-eth0
                            echo IPV6ADDR=_ETH0_IPV6_/_ETH0_IPV6_PREFIX_ >> /etc/sysconfig/network-scripts/ifcfg-eth0
                            echo IPV6_DEFAULTGW=_ETH0_IPV6_GATEWAY_  >> /etc/sysconfig/network-scripts/ifcfg-eth0
                            echo IPV6_AUTOCONF=no >> /etc/sysconfig/network-scripts/ifcfg-eth0
                        fi
                        systemctl restart network
                  runcmd:
                    - /run/cloud-init/update_network.sh
                    - hostnamectl set-hostname _VM_HOSTNAME_
     VM_Server:
        type: OS::Nova::Server
        properties:
          networks:
            - port: {if: [ipv4_only, {get_resource: VM_Port_v4}, {if: [ipv6_only, {get_resource: VM_Port_v6}, {if: [dual_stack, {get_resource: VM_Port_dual}, ""]}]}]}
          name: { get_param: VM_instance-name }
          config_drive: true
          flavor: { get_param: flavor_name }
          availability_zone: { get_param: availability-zone }
          image: { get_param: root-image-uuid }
          user_data: { get_resource: VM_net_data }
          user_data_format: RAW

说明: 以下为个人理解，具体参考*官方文档\[2\]*

line2 parameters部分定义参数，这些参数由"-e"后的文件传入，其中network\_type支持IPv4、IPv6和双栈

line62 conditions部分定义条件，network\_type等于IPv4\_Only（第2部分IPv4-VM.yaml中network\_type的值），符合条件ipv4\_only

line75 resources部分前三个资源(type: OS::Neutron::Port)中选择满足条件condition: ipv4\_only的PORT，即VM\_Port\_v4

line100 resources部分的资源VM\_net\_data, line106 params传入参数; line114 template 使用cloud-init初始化VM（参考*官方文档\[1\]*）,修改ssh配置文件使root可以ssh登录，添加了网卡信息，修改主机名，这样就不用等创建好VM再去console里配置网络

line143 resources部分的资源VM\_Server,网络有一个网卡，如果需要多个网卡可以添加多个port字段，同时添加OS::Neutron::Port资源以及传入的参数

**4.创建stack**

使用dry run测试yaml文件正确配置，返回参数为0

~$ openstack --debug stack create -t Heat-Orchestration-Template-example.yaml -e IPv4-VM.yaml TEST-STACK --dry-run
    ……
    END return value: 0

执行如下命令创建stack，成功创建的话返回参数为0

查看新创建的stack

查看stack中的VM

（END）

官方文档参考：  
\[1\] cloud-init => https://cloudinit.readthedocs.io/en/latest/  
\[2\] openstack => https://docs.openstack.org/heat/latest/template\_guide/index.html