使用 Ansible 快速部署 跟應用你的 OpenStack 環境 https://goo.gl/S2AUvy 

Who Am I - OpenStack Active User Contributor - Former OpenStack Foundation Intern - Organizer at OpenStack Taiwan User Group - Student at NCTU - [email protected] 

Ansible https://www.ansible.com/ 

IT is complex and difficult ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

No content

Ansible makes IT easier ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

• Provisioning • Configuration Management • Application Deployment ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO • Continuous Delivery • Security and Compliance • Orchestration 

ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

• Simple • One task do one thing • Agent-less • Extensible • Lots of modules ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

OpenStack-Ansible https://docs.openstack.org/developer/openstack-ansible/ 

• Ansible Playbooks for deploying OpenStack • Supports installation of most of the OpenStack Projects • Deploys OpenStack on LXC (or baremetal) • Deploys OpenStack from Source • Scalable while also being simple to operate, upgrade, and grow • Ceph Ansible integration ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

• Need to manaul install Operating System • Required to setup network bridges • At least 4 nodes minimum (infra, compute, storage, log) ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO Drawbacks: 

• MariaDB with Galera • Memcached • Repository • Load balancer • Log aggregation host • Unbound DNS container ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

• Bare Metal (ironic) • Block Storage (cinder) • Compute (nova) • Container Infrastructure Management (magnum) • Dashboard (horizon) • Data Processing (sahara) • Identity (keystone) • Image (glance) • Networking (neutron) • Object Storage (swift) • Orchestration (heat) • Telemetry (aodh, ceilometer, gnocchi) ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES DEMO 

Kolla-Ansible https://docs.openstack.org/kolla-ansible/latest/ 

• Production-ready container deployment tool • Supports installation of most of the OpenStack Projects • Very fast to deploy, highly scable • Ceph integration • Immutable infrastructure DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

• Need to manaul install Operating System • Network bonding • No built-in tools to monitor OpenStack service containers status DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES Drawbacks: 

1. Install Operating System 2. Edit config files (globals.yml, inventory) 3. bootstrap-servers, prechecks, deploy DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

• Docker • Like Containers • Immutable Infrastructure • Deploy from pre-built images • LXC or Baremetal • More like VMs • Fully based on Ansible • Deploy from source OpenStack-Ansible Kolla-Ansible DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

No content

Ansible OpenStack Modules http://docs.ansible.com/ansible/list_of_cloud_modules.html 

• Ansible Modules for managing OpenStack Clouds • Supports Nova, Keystone, Glance, Neutron, Ironic, Cinder, Swift • Will do almost the same as a HEAT template • Easy to manage full stack automation • Hide difference in datacenter architecture DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

• Keystone: user, groups, roles, projects • Nova: servers, keypairs, security groups, flavors • Neutron: network, ports, subnet, routers, floating IPs • Ironic: nodes, introspection • Swift Objects • Cinder Volume • Glance Image DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES - name: Create test node os_server: state: present auth: "{{ auth }}" name: test image: "cirros" key_name: "openstack-tests" timeout: 200 flavor: test security_groups: test_sg floating_ip_pools: "{{ env.public_net_name | default(omit) }}" - name: Create a volume for test instance os_server_volume: state: present auth: "{{ auth }}" server: test volume: test_volume device: "/dev/vdb" 

DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

• Runs on datacenters • Only for virtual resources • Just delete the stack • Only cloud-init scripts to provision servers • Runs on your laptop • Common langauge for full stack IT • Have to keep track and manaully delete resource • Easier to provision servers after creation Ansible Heat DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

Demo https://github.com/openstack/osops-tools-contrib/tree/mast er/ansible/lampstack 

DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES • 2 load balancers, 2 webservers, 1 database server • Cinder volume for database storage • Security groups for firewall • Install Wordpress on webservers 

DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES HAProxy Load Balancer Database Server Cinder Volume 

With Ansible. No one needs to come in on Saturday 

Q&A DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

$ sudo apt-get install python-pip $ sudo pip install virtualenvwrapper $ sudo apt-get install python-heatclient python-openstackclient python-shade DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

$ mkdir $HOME/.virtualenvs add these lines to .bashrc export WORKON_HOME=$HOME/.virtualenvs source /usr/bin/virtualenvwrapper.sh $ source ~/.bashrc $ mkvirtualenv ansible2 --system-site-packages DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES 

(ansible2) $ pip install ansible (ansible2) $ ansible --version (ansible2) $ pip install shade --upgrade DEMO ANSIBLE OPENSTACK ANSIBLE KOLLA ANSIBLE OPENSTACK MODULES