Terraform 入门教程之快速编排OpenStack-002

2021-04-20 本文已影响0人流雨声

Terraform架构

image

OpenStack环境准备

部署一个单节点的OpenStack环境,参考这篇文档
https://docs.openstack.org/devstack/latest/guides/single-machine.html

Add your user
We need to add a user to install DevStack. (if you created a user during install you can skip this step and just give the user sudo privileges below)

$ sudo useradd -s /bin/bash -d /opt/stack -m stack

Since this user will be making many changes to your system, it will need to have sudo privileges:

$ apt-get install sudo -y || yum install -y sudo
$ echo "stack ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers

On some systems you may need to use sudo visudo.
From here on you should use the user you created. Logout and login as that user:

$ sudo su stack && cd ~

Download DevStack
We’ll grab the latest version of DevStack via https:

$ sudo apt-get install git -y || sudo yum install -y git
$ git clone https://opendev.org/openstack/devstack
$ cd devstack

Run DevStack
Now to configure stack.sh. DevStack includes a sample in devstack/samples/local.conf. Create local.conf as shown below to do the following:

Set FLOATING_RANGE to a range not used on the local network, i.e. 192.168.1.224/27. This configures IP addresses ending in 225-254 to be used as floating IPs.
Set FIXED_RANGE to configure the internal address space used by the instances.
Set the administrative password. This password is used for the admin and demo accounts set up as OpenStack users.
Set the MySQL administrative password. The default here is a random hex string which is inconvenient if you need to look at the database directly for anything.
Set the RabbitMQ password.
Set the service password. This is used by the OpenStack services (Nova, Glance, etc) to authenticate with Keystone.
local.conf should look something like this:

[[local|localrc]]
FLOATING_RANGE=192.168.1.224/27
FIXED_RANGE=10.11.12.0/24
ADMIN_PASSWORD=supersecret
DATABASE_PASSWORD=iheartdatabases
RABBIT_PASSWORD=flopsymopsy
SERVICE_PASSWORD=iheartksl

Note: There is a sample local.conf file under the samples directory in the devstack repository.

Run DevStack:

$ ./stack.sh

Terraform安装

MacOS 安装Terraform

brew install hashicorp/tap/terraform

Debian：

curl -fsSL https://apt.releases.hashicorp.com/gpg | sudo apt-key add -
sudo apt-add-repository "deb [arch=amd64] https://apt.releases.hashicorp.com $(lsb_release -cs) main"
sudo apt-get update && sudo apt-get install terraform

CentOS：

sudo yum install -y yum-utils
sudo yum-config-manager --add-repo https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo
sudo yum -y install terraform

查看OpenStack信息

查看OpenStack基本内容用于初始化TF的基本信息
认证URL，用于terraform调用OpenStack认证

[root@openstack-allinone ~]# openstack endpoint list --service keystone
+----------------------------------+-----------+--------------+--------------+---------+-----------+-------------------------------+
| ID                              | Region    | Service Name | Service Type | Enabled | Interface | URL                          |
+----------------------------------+-----------+--------------+--------------+---------+-----------+-------------------------------+
| 5ff3198fce8546edaaed246b0b890906 | RegionOne | keystone    | identity    | True    | public    | http://192.168.60.140:5000/v3 |
| 93bc23dc7bfe4043bced0da899eb2bdb | RegionOne | keystone    | identity    | True    | internal  | http://192.168.60.140:5000/v3 |
| cf1be5fe294d48d79a7d17e1953d1b83 | RegionOne | keystone    | identity    | True    | admin    | http://192.168.60.140:5000/v3 |
+----------------------------------+-----------+--------------+--------------+---------+-----------+-------------------------------+

查看网络列表

[root@openstack-allinone ~]# openstack network list
+--------------------------------------+---------+--------------------------------------+
| ID                                  | Name    | Subnets                              |
+--------------------------------------+---------+--------------------------------------+
| 23f58d17-118d-4a2a-ac3e-e859a08b2f97 | private | ea7584f4-e7df-4862-9800-83fb1bab1037 |
| 6c3ed25b-2a44-487a-b6f0-fc0dda9407dc | public  | a4296e1f-ebef-4f2a-a36e-5994fc457445 |
+--------------------------------------+---------+--------------------------------------+

查看安全组

[root@openstack-allinone ~]#  openstack security group list
+--------------------------------------+---------+------------------------+----------------------------------+------+
| ID                                  | Name    | Description            | Project                          | Tags |
+--------------------------------------+---------+------------------------+----------------------------------+------+
| 576e6bd7-4e05-4e90-a7fe-c5c7faa2887a | default | Default security group |                                  | []  |
| 8fdd6bf9-cdda-4fb1-82d8-f2161f99f4ff | default | Default security group | 614ae836097f4e4c8a5a8e6d979f9f7b | []  |
| b444ec97-76c6-4964-8fe9-0e81ad2a966a | default | Default security group | 3da3d412c29a47198c6564bc763ac395 | []  |
+--------------------------------------+---------+------------------------+----------------------------------+------+

查看可用区

[root@openstack-allinone ~]# openstack availability zone list
+-----------+-------------+
| Zone Name | Zone Status |
+-----------+-------------+
| internal  | available  |
| nova      | available  |
| nova      | available  |
+-----------+-------------+

查看机器类型

[root@openstack-allinone ~]# openstack flavor list
+----+-----------+-------+------+-----------+-------+-----------+
| ID | Name      |  RAM | Disk | Ephemeral | VCPUs | Is Public |
+----+-----------+-------+------+-----------+-------+-----------+
| 1  | m1.tiny  |  512 |    1 |        0 |    1 | True      |
| 2  | m1.small  |  2048 |  20 |        0 |    1 | True      |
| 3  | m1.medium |  4096 |  40 |        0 |    2 | True      |
| 4  | m1.large  |  8192 |  80 |        0 |    4 | True      |
| 5  | m1.xlarge | 16384 |  160 |        0 |    8 | True      |
+----+-----------+-------+------+-----------+-------+-----------+

查看镜像列表

openstack image list
+--------------------------------------+--------+--------+
| ID                                  | Name  | Status |
+--------------------------------------+--------+--------+
| 2d018602-4faa-45c3-bad1-1fb042ca342a | cirros | active |
+--------------------------------------+--------+--------+

查看管理域

[root@openstack-allinone ~]# openstack domain list
+---------+---------+---------+--------------------+
| ID      | Name    | Enabled | Description        |
+---------+---------+---------+--------------------+
| default | Default | True    | The default domain |
+---------+---------+---------+--------------------+

Terraform语法介绍

resource "aws_vpc" "main" {
  cidr_block = var.base_cidr_block
}

<BLOCK TYPE> "<BLOCK LABEL>" "<BLOCK LABEL>" {
  # Block body
  <IDENTIFIER> = <EXPRESSION> # Argument
}

variable "image_id" {
  type = string
  default = "centos7"
}
variable "availability_zone_names" {
  type    = list(string)
  default = ["us-west-1a"]}
variable "docker_ports" {
  type = list(object({
    internal = number
    external = number
    protocol = string
  }))
  default = [
    {
      internal = 8300
      external = 8300
      protocol = "tcp"
    }
  ]}

使用变量

resource "aws_instance" "example" {
  instance_type = "t2.micro"
  ami           = var.image_id
}

自定义判断生效规则

variable "image_id" {
  type        = string
  description = "The id of the machine image (AMI) to use for the server."

  validation {
    condition     = length(var.image_id) > 4 && substr(var.image_id, 0, 4) == "ami-"
    error_message = "The image_id value must be a valid AMI id, starting with \"ami-\"."
  }}

准备Terraform脚本文件

我这里直接在Gitlab找一个脚本例子下载下来: