Configuring Neutron on Compute Node
Neutron usually needs a plugin software such as OpenVswitch. On the Compute node, we have so far installed Libvirt and Nova Compute. We are going to add Openvswitch and L2 Agent.
“Be certain that in the religion of Love there are no believers and unbelievers. LOVE embraces all.” ― Rumi
Step One: Install Neutron services on your Compute Node
[[email protected] ~]# yum --enablerepo=centos-openstack-queens,epel -y install openstack-neutron openstack-neutron-ml2 openstack-neutron-openvswitch Loaded plugins: fastestmirror Determining fastest mirrors epel/x86_64/metalink | 54 kB 00:00:01 base: mirror.ufs.ac.za centos-qemu-ev: mirror.pcsp.co.za epel: ftp.lysator.liu.se extras: mirror.pcsp.co.za updates: mirror.pcsp.co.za base | 3.6 kB 00:00:00 centos-ceph-luminous | 2.9 kB 00:00:00 centos-openstack-queens | 2.9 kB 00:00:00 centos-qemu-ev | 2.9 kB 00:00:00 epel | 4.7 kB 00:00:00 extras | 3.4 kB 00:00:00 updates | 3.4 kB 00:00:00 (1/2): epel/x86_64/updateinfo | 1.0 MB 00:00:18 (2/2): epel/x86_64/primary_db | 6.6 MB 00:01:54 Resolving Dependencies
Step Two: Back up original neutron config file and configure a new one
[[email protected] ~]# mv /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak [[email protected] ~]# vim /etc/neutron/neutron.conf #New File [DEFAULT] core_plugin = ml2 service_plugins = router auth_strategy = keystone state_path = /var/lib/neutron allow_overlapping_ips = True # RabbitMQ connection info transport_url = rabbit://openstack:[email protected] # Keystone auth info [keystone_authtoken] www_authenticate_uri = http://192.168.122.130:5000 auth_url = http://192.168.122.130:5000 memcached_servers = 192.168.122.130:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = neutron password = neutron123 [oslo_concurrency] lock_path = $state_path/lock
Step Three: Change permissions and groups information on the neutron file
[[email protected] ~]# chmod 640 /etc/neutron/neutron.conf [[email protected] ~]# chgrp neutron /etc/neutron/neutron.conf
Step Four: Edit the following files as shown below one by one.
[[email protected] ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini # on line 129 under ml2: add [ml2] type_drivers = flat,vlan,gre,vxlan tenant_network_types = mechanism_drivers = openvswitch,l2population extension_drivers = port_security
[[email protected] ~]# vim /etc/neutron/plugins/ml2/openvswitch_agent.ini # on line 308 or under [securitygroup]: add the following [securitygroup] firewall_driver = openvswitch enable_security_group = true enable_ipset = true
[[email protected] ~]# vim /etc/nova/nova.conf # add the following lines below the [DEFAULT] section use_neutron = True linuxnet_interface_driver = nova.network.linux_net.LinuxOVSInterfaceDriver firewall_driver = nova.virt.firewall.NoopFirewallDriver vif_plugging_is_fatal = True vif_plugging_timeout = 300 # add the following section to the end: Neutron auth information # make sure that metadata_proxy_shared_secret is the same with the one in metadata_agent.ini we had set before. [neutron] auth_url = http://192.168.122.130:5000 auth_type = password project_domain_name = default user_domain_name = default region_name = RegionOne project_name = service username = neutron password = neutron123 service_metadata_proxy = True metadata_proxy_shared_secret = pepe123
Once that is done, we can proceed to start neutron services. Phew..
[[email protected] ~]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini [[email protected] ~]# systemctl start openvswitch [[email protected] ~]# systemctl enable openvswitch Created symlink from /etc/systemd/system/multi-user.target.wants/openvswitch.service to /usr/lib/systemd/system/openvswitch.service. [[email protected] ~]# ovs-vsctl add-br br-int [[email protected] ~]# systemctl restart openstack-nova-compute [[email protected] ~]# systemctl start neutron-openvswitch-agent [[email protected] ~]# systemctl enable neutron-openvswitch-agent Created symlink from /etc/systemd/system/multi-user.target.wants/neutron-openvswitch-agent.service to /usr/lib/systemd/system/neutron-openvswitch-agent.service.
Thanks guys for following through to this point, it has been a long journey and a few details and we shall be having our small openstack cluster purring. In case you missed previous sequels, please follow the following links below:
Installation of Openstack three Node Cluster on CentOS 7 Part One
Installation of Three node OpenStack Queens Cluster – Part Two
Installation of Three node OpenStack Queens Cluster – Part Three
Installation of Three node OpenStack Queens Cluster – Part Four
Installation of Three node OpenStack Queens Cluster – Part Five
Installation of Three node OpenStack Queens Cluster – Part Six
Installation of Three node OpenStack Queens Cluster – Part Seven
Next guide link, part nine, is below
Installation of Three node OpenStack Queens Cluster – Part Nine