오픈스택 클라우드 서버 구축(Stein)(10)-Block Storage(Cinder) 구성

#Controller Node 설정

1) Add a User or Endpoint for Cinder to Keystone on Control Node.

# add cinder user (set in service project)
[root@Controller ~(keystone)]# openstack user create --domain default --project service --password servicepassword cinder
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| default_project_id  | c5e87c9b460e4f16801b4102019c97e6 |
| domain_id           | default                          |
| enabled             | True                             |
| id                  | 0cde54d4c5c84ddfbf5d49792b51c164 |
| name                | cinder                           |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

# add cinder user in admin role
[root@Controller ~(keystone)]# openstack role add --project service --user cinder admin
# add service entry for cinder
[root@Controller ~(keystone)]# openstack service create --name cinderv3 --description "OpenStack Block Storage" volumev3
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | OpenStack Block Storage          |
| enabled     | True                             |
| id          | ae615b239d2b483cbc482eaafddb2ffb |
| name        | cinderv3                         |
| type        | volumev3                         |
+-------------+----------------------------------+

# define Cinder API host
[root@Controller ~(keystone)]# export controller=10.0.0.30
# add endpoint for cinder (public)
[root@Controller ~(keystone)]# openstack endpoint create --region RegionOne volumev3 public http://$controller:8776/v3/%\(tenant_id\)s
+--------------+----------------------------------------+
| Field        | Value                                  |
+--------------+----------------------------------------+
| enabled      | True                                   |
| id           | a00932066e8a4e0699418ce29f74e6b7       |
| interface    | public                                 |
| region       | RegionOne                              |
| region_id    | RegionOne                              |
| service_id   | ae615b239d2b483cbc482eaafddb2ffb       |
| service_name | cinderv3                               |
| service_type | volumev3                               |
| url          | http://10.0.0.30:8776/v3/%(tenant_id)s |
+--------------+----------------------------------------+

# add endpoint for cinder (internal)
[root@Controller ~(keystone)]# openstack endpoint create --region RegionOne volumev3 internal http://$controller:8776/v3/%\(tenant_id\)s
+--------------+----------------------------------------+
| Field        | Value                                  |
+--------------+----------------------------------------+
| enabled      | True                                   |
| id           | f4bbd4f20f8248618cd5b943d2930b50       |
| interface    | internal                               |
| region       | RegionOne                              |
| region_id    | RegionOne                              |
| service_id   | ae615b239d2b483cbc482eaafddb2ffb       |
| service_name | cinderv3                               |
| service_type | volumev3                               |
| url          | http://10.0.0.30:8776/v3/%(tenant_id)s |
+--------------+----------------------------------------+

# add endpoint for cinder (admin)
[root@Controller ~(keystone)]# openstack endpoint create --region RegionOne volumev3 admin http://$controller:8776/v3/%\(tenant_id\)s
+--------------+----------------------------------------+
| Field        | Value                                  |
+--------------+----------------------------------------+
| enabled      | True                                   |
| id           | 3cace1bc9ed348aba8e1e8f0c138f6ea       |
| interface    | admin                                  |
| region       | RegionOne                              |
| region_id    | RegionOne                              |
| service_id   | ae615b239d2b483cbc482eaafddb2ffb       |
| service_name | cinderv3                               |
| service_type | volumev3                               |
| url          | http://10.0.0.30:8776/v3/%(tenant_id)s |
+--------------+----------------------------------------+

2) Add a User and Database on MariaDB for Cinder.

[root@Controller ~(keystone)]# mysql -u root -p
Enter password:
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 73
Server version: 10.3.10-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> create database cinder;
Query OK, 1 row affected (0.00 sec)
MariaDB [(none)]> grant all privileges on cinder.* to cinder@'localhost' identified by 'password';
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> grant all privileges on cinder.* to cinder@'%' identified by 'password';
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> flush privileges;
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> exit
Bye

3) Install Cinder Service.

[root@Controller ~(keystone)]# yum --enablerepo=centos-openstack-stein,epel -y install openstack-cinder

4) Configure Cinder.

[root@Controller ~(keystone)]# mv /etc/cinder/cinder.conf /etc/cinder/cinder.conf.org
[root@Controller ~(keystone)]# vi /etc/cinder/cinder.conf
# create new
[DEFAULT]
# define own IP address
my_ip = 10.0.0.30
log_dir = /var/log/cinder
state_path = /var/lib/cinder
auth_strategy = keystone
# RabbitMQ connection info
transport_url = rabbit://openstack:password@10.0.0.30
enable_v3_api = True

# MariaDB connection info
[database]
connection = mysql+pymysql://cinder:password@10.0.0.30/cinder

# Keystone auth info
[keystone_authtoken]
www_authenticate_uri = http://10.0.0.30:5000
auth_url = http://10.0.0.30:5000
memcached_servers = 10.0.0.30:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = cinder
password = servicepassword

[oslo_concurrency]
lock_path = $state_path/tmp

[root@Controller ~(keystone)]# chmod 640 /etc/cinder/cinder.conf
[root@Controller ~(keystone)]# chgrp cinder /etc/cinder/cinder.conf
[root@Controller ~(keystone)]# su -s /bin/bash cinder -c "cinder-manage db sync"
[root@Controller ~(keystone)]# systemctl start openstack-cinder-api openstack-cinder-scheduler
[root@Controller ~(keystone)]# systemctl enable openstack-cinder-api openstack-cinder-scheduler
# set environment variable
[root@Controller ~(keystone)]# echo "export OS_VOLUME_API_VERSION=3" >> ~/keystonerc
[root@Controller ~(keystone)]# source ~/keystonerc
# verify status
[root@Controller ~(keystone)]# openstack volume service list
+------------------+---------------+------+---------+-------+----------------------------+
| Binary           | Host          | Zone | Status  | State | Updated At                 |
+------------------+---------------+------+---------+-------+----------------------------+
| cinder-scheduler | Controller.srv.world | nova | enabled | up    | 2019-05-16T07:41:27.000000 |
+------------------+---------------+------+---------+-------+----------------------------+

5) SELinux 등록 및 설정

[root@Controller ~(keystone)]# yum --enablerepo=centos-openstack-stein -y install openstack-selinux

6) 방화벽 서비스 포트 OPEN

[root@Controller ~(keystone)]# firewall-cmd --add-port=8776/tcp --permanent
success
[root@Controller ~(keystone)]# firewall-cmd --reload
success

# Storage Node 설정

1) Install Cinder Volume.

[root@storage ~]# yum --enablerepo=centos-openstack-stein,epel -y install openstack-cinder python2-crypto targetcli

2) Configure Cinder Volume.

[root@storage ~]# mv /etc/cinder/cinder.conf /etc/cinder/cinder.conf.org
[root@storage ~]# vi /etc/cinder/cinder.conf
# create new
[DEFAULT]
# define own IP address
my_ip = 10.0.0.60
log_dir = /var/log/cinder
state_path = /var/lib/cinder
auth_strategy = keystone
# RabbitMQ connection info
transport_url = rabbit://openstack:password@10.0.0.30
# Glance connection info
glance_api_servers = http://10.0.0.30:9292
enable_v3_api = True

# MariaDB connection info
[database]
connection = mysql+pymysql://cinder:password@10.0.0.30/cinder

# Keystone auth info
[keystone_authtoken]
www_authenticate_uri = http://10.0.0.30:5000
auth_url = http://10.0.0.30:5000
memcached_servers = 10.0.0.30:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = cinder
password = servicepassword

[oslo_concurrency]
lock_path = $state_path/tmp

[root@storage ~]# chmod 640 /etc/cinder/cinder.conf
[root@storage ~]# chgrp cinder /etc/cinder/cinder.conf
[root@storage ~]# systemctl start openstack-cinder-volume
[root@storage ~]# systemctl enable openstack-cinder-volume