openstack多節點部署運維


一、packstack單點部署

1、配置虛擬機NAT網絡連接

查看vmware的NAT網絡默認配置

vmwarestation軟件點擊 上方“編輯”,選擇“虛擬網絡編輯器”
找到vmnet10,是NAT模式,子網地址是172.25.2.0,子網掩碼是:255.255.255.0.
再點擊“NAT設置”,可看到它的網關:172.25.2.2

配置當前虛擬機的網絡配置

vmwarestation軟件點擊 上方“虛擬機”,選擇“設置”;
首先沒有NAT網卡的,點擊“添加”,添加一個新的網絡適配器。
已經創建號NAT網卡的,進行如下配置:
網絡連接模式改為:"自定義(U):特定虛擬網絡"
在下拉選項中,選中“VMnet10(NAT模式)”

配置linux網絡

# 進入網絡配置目錄
cd /etc/sysconfig/network-scripts
# 編輯nat網卡的配置
vi ifcfg-ens33
# 修改或添加如下信息:
BOOTPROTO=static
ONBOOT=yes
IPADDR=172.25.2.101
NETMASK=255.255.255.0
GATEWAY=172.25.2.2
DNS=8.8.8.8

# 在vi編輯器中,輸入:wq進行保存退出
vi /etc/resolv.conf
加入:
nameserver 8.8.8.8
輸入:wq進行保存退出

# 關閉防火牆
systemctl stop firewalld.service
systemctl disable firewalld.service

# 重啟網絡
systemctl restart network

# 測試
ping www.baidu.com

2、yum源配置

# 關閉網絡管理
systemctl disable NetworkManager
# 關閉selinux,修改文件為disabled
sed  -i 's/SELINUX=enforcing/SELINUX=disabled/g'  /etc/selinux/config
# selinux修改生效
setenforce 0

##################################更新yum源#################################
# 將官方的yum源備份到一個新目錄:
mkdir /etc/yum.repos.d/repo.bak/
mv /etc/yum.repos.d/*.repo repo.bak/

# 更新下載阿里源
curl -o /etc/yum.repos.d/CentOS-Base.repo  http://mirrors.aliyun.com/repo/Centos-7.repo

# 清理yum
yum clean all
yum makecache

# 更新yum信息
yum update -y

# 查看當前存在的openstack版本安裝源
yum list | grep openstack

# 安裝安裝源
yum install -y centos-release-openstack-queens

# 調整倉庫配置文件
vi /etc/yum.repos.d/CentOS-QEMU-EV.repo
# 將文件中/$contentdir/改為/centos-7/

# 添加epel-repo源
curl -o /etc/yum.repos.d/epel-7.repo http://mirrors.aliyun.com/repo/epel-7.repo

# 添加openstack.queens.repo文件信息
cat > /etc/yum.repos.d/openstack-queens.repo << EOF
[queens]
name=queens
baseurl=https://mirrors.aliyun.com/centos/7/cloud/x86_64/openstack-queens/
enabled=1
gpgcheck=0
EOF

# 調整repo文件只保留
CentOS-Base.repo  CentOS-QEMU-EV.repo  epel-7.repo  openstack-queens.repo

# 更新源
yum clean all && yum makecache

# 安裝openstack-packstack軟件包
yum install -y openstack-packstack

# 安裝預備
yum -y install  python-pip


# 一鍵部署openstack
packstack --allinone


# 1.出現error while loading shared libraries: leatherman_curl.so.1.3.0: cannot open shared object file: No such file or directory報錯。
# 這種錯誤是因為,leatherman rpm包版本問題,現有是1.10,實際需要1.3
# 回退leatherman版本
yum downgrade leatherman
yum list | grep leatherman
leatherman.x86_64                        1.3.0-9.el7                   @queens  
leatherman.x86_64                        1.10.0-1.el7                  epel     
leatherman-devel.x86_64                  1.10.0-1.el7                  epel  

二、國賽雙節點部署

1、准備虛擬機

創建虛擬機前,創建好vmnet2(僅主機模式),vmnet10(NAT模式)網卡,檢查對應的適配器是否創建成功。
准備兩台vmware虛擬機,手動最小化安裝2台Centos7.2系統,第一個網卡為僅主機模式,第二個網卡為NAT模式,配置CPU虛擬機,4G以上內存,50G以上硬盤。

master節點網卡:

TYPE=Ethernet
BOOTPROTO=static
DEFROUTE=yes
PEERDNS=yes
PEERROUTES=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_PEERDNS=yes
IPV6_PEERROUTES=yes
IPV6_FAILURE_FATAL=no
NAME=eno16777736
UUID=f34abd2e-89c9-4daf-a28c-54765164d59d
DEVICE=eno16777736
ONBOOT=yes
IPADDR=192.168.16.10
NETMASK=255.255.255.0

Node節點網卡:

TYPE=Ethernet
BOOTPROTO=static
DEFROUTE=yes
PEERDNS=yes
PEERROUTES=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_PEERDNS=yes
IPV6_PEERROUTES=yes
IPV6_FAILURE_FATAL=no
NAME=eno16777736
UUID=8bbcc106-d60f-48cc-aafd-2bde0154fa2e
DEVICE=eno16777736
ONBOOT=yes
IPADDR=192.168.16.20
NETMASK=255.255.255.0

2、鏡像掛載

鏡像上傳到master節點,然后完成掛載即可。

# 掛載linux鏡像
cd /root/;
mount -o loop CentOS-7-x86_64-DVD-1511.iso /mnt/;
mkdir /opt/centos7.2;
cp -rvf /mnt/* /opt/centos7.2/
umount /mnt/;

# 掛載iaas鏡像
cd /root/;
mount -o loop XianDian-IaaS-v2.2.iso /mnt/;
mkdir /opt/iaas;
cp -rvf /mnt/* /opt/iaas;
umount /mnt/;

3、本地yum配置

分別配置控制節點和計算節點的yum

# 控制節點:
rm -rf /etc/yum.repos.d/CentOS-*;
cat > /etc/yum.repos.d/local.repo <<EOF
[centos]
name=centos
baseurl=file:///opt/centos7.2
gpgcheck=0
enabled=1
[iaas]
name=iass
baseurl=file:///opt/iaas/iaas-repo
gpgcheck=0
enabled=1
EOF
# 計算節點:(如果沒有可以后面再配)
rm -rf /etc/yum.repos.d/CentOS-*;
cat > /etc/yum.repos.d/local.repo << EOF
[centos]
name=centos
baseurl=ftp://192.168.16.10/centos7.2
gpgcheck=0
enabled=1
[iaas]
name=iass
baseurl=ftp://192.168.16.10/iaas/iaas-repo
gpgcheck=0
enabled=1
EOF

為計算節點提供ftp訪問方式

# 控制節點——yum緩存清理
yum clean all
yum makecache

# 控制節點——安裝vsftpd和ftp
yum install -y vsftpd
yum install -y ftp
rpm -qa| grep vsftpd

# 控制節點——修改vsftpd配置文件
在/etc/vsftpd/vsftpd.conf中添加一行代碼:
anon_root=/opt

# 控制節點——安裝網絡工具包
yum install net-tools

# 重啟vsftpd服務
systemctl restart vsftpd
# 開機啟動vsftpd
systemctl enable vsftpd

# 控制節點、計算節點——關閉防火牆
setenforce 0;
iptables -F;
iptables -X;
iptables -Z;
systemctl stop firewalld;
systemctl disable firewalld;

# 計算節點
yum clean all
yum makecache

4、給計算節點(node)添加新磁盤並分區

在vmware上給計算節點虛擬機添加一個新磁盤。
虛擬機——》設置——》添加——》硬盤——》scsi模式——》創建新虛擬磁盤——》20G,拆分為多個文件——》完成

# 重啟計算節點虛擬機
reboot

# 查看當前虛擬機的磁盤情況
fdisk -l
# 可以看到Disk /dev/sdb: 21.5 GB是完全空閑的

# 創建兩個空白磁盤空間
fdisk /dev/sdb
     n,p,回車,回車,+10G
	 n,p,回車,回車,回車
	 w

5、在controller和compute節點安裝iaas-xiandian包

# 控制節點、計算節點分別執行,安裝軟件包
yum install -y  iaas-xiandian

控制節點、計算節點編輯修改配置文件/etc/xiandian/openrc.sh

##--------------------system Config--------------------##
##Controller Server Manager IP. example:x.x.x.x
HOST_IP=192.168.16.10

##Controller HOST Password. example:000000 
HOST_PASS=000000

##Controller Server hostname. example:controller
HOST_NAME=controller

##Compute Node Manager IP. example:x.x.x.x
HOST_IP_NODE=192.168.16.20

##Compute HOST Password. example:000000 
HOST_PASS_NODE=000000

##Compute Node hostname. example:compute
HOST_NAME_NODE=compute

##--------------------Chrony Config-------------------##
##Controller network segment IP.  example:x.x.0.0/16(x.x.x.0/24)
network_segment_IP=192.168.16.0/24

##--------------------Rabbit Config ------------------##
##user for rabbit. example:openstack
RABBIT_USER=openstack

##Password for rabbit user .example:000000
RABBIT_PASS=000000

##--------------------MySQL Config---------------------##
##Password for MySQL root user . exmaple:000000
DB_PASS=000000

##--------------------Keystone Config------------------##
##Password for Keystore admin user. exmaple:000000
DOMAIN_NAME=demo
ADMIN_PASS=000000
DEMO_PASS=000000

##Password for Mysql keystore user. exmaple:000000
KEYSTONE_DBPASS=000000

##--------------------Glance Config--------------------##
##Password for Mysql glance user. exmaple:000000
GLANCE_DBPASS=000000

##Password for Keystore glance user. exmaple:000000
GLANCE_PASS=000000

##--------------------Nova Config----------------------##
##Password for Mysql nova user. exmaple:000000
NOVA_DBPASS=000000

##Password for Keystore nova user. exmaple:000000
NOVA_PASS=000000

##--------------------Neturon Config-------------------##
##Password for Mysql neutron user. exmaple:000000
NEUTRON_DBPASS=000000

##Password for Keystore neutron user. exmaple:000000
NEUTRON_PASS=000000

##metadata secret for neutron. exmaple:000000
METADATA_SECRET=000000

##Tunnel Network Interface. example:x.x.x.x
INTERFACE_IP=192.168.16.10/192.168.16.20

##External Network Interface. example:eth1   第二張網卡
INTERFACE_NAME=eno33554960

##External Network The Physical Adapter. example:provider
Physical_NAME=provider

##First Vlan ID in VLAN RANGE for VLAN Network. exmaple:101
minvlan=1

##Last Vlan ID in VLAN RANGE for VLAN Network. example:200
maxvlan=2000

##--------------------Cinder Config--------------------##
##Password for Mysql cinder user. exmaple:000000
CINDER_DBPASS=000000

##Password for Keystore cinder user. exmaple:000000
CINDER_PASS=000000

##Cinder Block Disk. example:md126p3
BLOCK_DISK=sdb1

##--------------------Swift Config---------------------##
##Password for Keystore swift user. exmaple:000000
SWIFT_PASS=000000

##The NODE Object Disk for Swift. example:md126p4.
OBJECT_DISK=sdb2

##The NODE IP for Swift Storage Network. example:x.x.x.x.
STORAGE_LOCAL_NET_IP=192.168.16.20

##--------------------Heat Config----------------------##
##Password for Mysql heat user. exmaple:000000
HEAT_DBPASS=000000

##Password for Keystore heat user. exmaple:000000
HEAT_PASS=000000

##--------------------Zun Config-----------------------##
##Password for Mysql Zun user. exmaple:000000
ZUN_DBPASS=000000

##Password for Keystore Zun user. exmaple:000000
ZUN_PASS=000000

##Password for Mysql Kuryr user. exmaple:000000
KURYR_DBPASS=000000

##Password for Keystore Kuryr user. exmaple:000000
KURYR_PASS=000000

##--------------------Ceilometer Config----------------##
##Password for Gnocchi ceilometer user. exmaple:000000
CEILOMETER_DBPASS=000000

##Password for Keystore ceilometer user. exmaple:000000
CEILOMETER_PASS=000000

##--------------------AODH Config----------------##
##Password for Mysql AODH user. exmaple:000000
AODH_DBPASS=000000

##Password for Keystore AODH user. exmaple:000000
AODH_PASS=000000

##--------------------Barbican Config----------------##
##Password for Mysql Barbican user. exmaple:000000
BARBICAN_DBPASS=000000

##Password for Keystore Barbican user. exmaple:000000
BARBICAN_PASS=000000

6、腳本安裝openstack平台

控制節點、計算節點分別執行如下腳本安裝基礎服務:
iaas-pre-host.sh

控制節點部署mysql數據庫服務:
iaas-install-mysql.sh

控制節點部署keystone服務:
iaas-install-keystore.sh

控制節點部署glance服務:
iaas-install-glance.sh

控制節點部署nova服務:
iaas-install-nova-controller.sh
計算節點部署nova服務
iaas-install-nova-compute.sh

控制節點部署neutron
iaas-install-neutron-controller.sh
錯誤處理——修改腳本:
vi /usr/local/bin/iaas-install-neutron-controller-gre.sh
將最后一行的
systemctl enabled neutron-lbaas-agent 改為 systemctl enable neutron-lbaas-agent
再執行下面的腳本:
iaas-install-neutron-controller-gre.sh

計算節點部署neutron
iaas-install-neutron-compute.sh
iaas-install-neutron-compute-gre.sh

控制節點部署dashboard
iaas-install-dashboard.sh

三、Openstack平台使用

兩節點部署,192.168.16.10為控制節點。192.168.16.20為計算節點。

1、創建鏡像

# 控制節點上,找到qcow2鏡像
[root@controller ~]# cd /opt/iaas/images/
[root@controller images]# ls
CentOS_6.5_x86_64_XD.qcow2  CentOS_7.2_x86_64_XD.qcow2  MySQL_5.6_XD.qcow2

# 上傳鏡像致Glance服務
# 在控制節點,通過glance命令,將qcow2鏡像上傳到平台
[root@controller images]# source /etc/keystone/admin-openrc.sh
[root@controller images]# glance image-create --name "centos7.2" --disk-format qcow2 --container-format bare --progress < CentOS_7.2_x86_64_XD.qcow2

2、創建虛擬機

(1)創建外部網絡

選擇菜單欄 項目——》網絡——》網絡。單擊 創建網絡 ,來創建虛擬機網絡。
創建網絡名net-gre,配置子網名稱為net-subnet,網絡地址為192.168.20.0/24,網關為192.168.20.2。
再配置DHCP地址池,激活DHCP,配置DNS為114.114.114.114。點擊“已創建”創建網絡。

選擇菜單欄 管理員——》系統——》網絡。對已創建的net-gre網絡,點擊 “編輯網絡”,在彈框中勾選“外部網絡”。

(2)創建內部網絡

選擇菜單欄 項目——》網絡——》網絡。單擊 創建網絡 ,來創建虛擬機網絡。
創建網絡名int-gre,配置子網名稱為 int-subnet,網絡地址為10.10.0.0/24,網關為10.10.0.1。
配置DHCP地址池,激活DHCP。點擊“已創建”創建網絡。

(3)創建路由器

選擇菜單欄 項目——》網絡——》路由。單擊 新建路由,來創建路由。
創建路由名稱為route,外部網絡選擇 net-gre。點擊“新建路由”創建路由。

在route路由中內部網絡接口:
單擊新建的路由名稱,選擇 接口 標簽。點擊 "增加接口"按鈕。
在彈框中,選擇 int-gre 內部網絡,再點擊 提交 。

(4)安全組配置

管理訪問策略安全組,選擇菜單欄 項目——》計算——》訪問&安全。單擊default安全組 管理規則 按鈕。

點擊 添加規則 ,選擇"所有ICMP協議",單擊 添加 按鈕;選擇"所有TCP協議",單擊 添加 按鈕;選擇"所有UDP協議",單擊 添加 按鈕。

(5)創建雲主機

創建雲主機,選擇菜單欄 項目——》計算——》雲主機。單擊右側 "創建雲主機"按鈕。

雲主機名稱為:test,數量:1。選擇centos7.2鏡像;選擇m1.small資源類型;選擇int-gre網絡。然后單擊"啟動實例"按鈕創建實例。

選擇菜單欄 項目——》計算——》雲主機。在主機下拉框中選擇 "綁定浮動IP"菜單命令。在彈框中點擊 "+"分配一個地址,單擊 "分配IP"按鈕。點擊 "關聯"按鈕,關聯浮動IP地址。

(6)連接雲主機

打開CMD窗口,通過ping命令測試連通雲主機。
使用secureCRT工具,連接雲主機,用戶名:root,密碼:000000。

四、Keystone服務運維

在Openstack框架中,keystone(Openstack Identity Service)的功能是負責驗證身份、校驗服務規則和發布服務令牌的,它實現了Openstack的Identity API.keystone可分解為兩個功能:權限管理和服務目錄。

https://www.cnblogs.com/mh20131118/p/12942346.html

https://www.cnblogs.com/linuxk/p/9282996.html

1、keystone運維命令

# 環境配置
source /etc/keystone/admin-openrc.sh
# 創建 hqs用戶
openstack user create --password ps1234 --email hqs@example.com --domain demo hqs
# 創建acme項目
openstack project create --domain demo acme
# 創建角色
openstack role create compute-user
# 綁定用戶和項目權限
# 添加的用戶需要分配一定的權限,需要把用戶關聯綁定到對應的項目和角色
openstack role add --user hqs --project acme compute-user

2、keystone查詢命令

# 用戶列表查詢
[root@controller ~]# openstack user list
+----------------------------------+---------+
| ID                               | Name    |
+----------------------------------+---------+
| 0f217182b5af448c988f5464c706a337 | admin   |
| 1579d0526c8b4cf0ba1158960054fde0 | neutron |
| 408d6f8e000847a3a9a0f799a1ea2ef6 | hqs     |
| 560d1dca91184856822e3750ea2f4afb | nova    |
| 5ca7355fbe4f4b87b352a72f9c4b4a66 | cinder  |
| 93443c8fc497495e8bb9033a1a52fc1d | demo    |
| d5bcfce4e83d4ef696bcd87599399429 | swift   |
| e255b170101c41d3b839dbb013daef02 | glance  |
+----------------------------------+---------+
# 查詢hqs用戶詳細信息
[root@controller ~]# openstack user show hqs
+-----------+----------------------------------+
| Field     | Value                            |
+-----------+----------------------------------+
| domain_id | 90f55d85d1824e2ca27318eefc57535e |
| email     | hqs@example.com                  |
| enabled   | True                             |
| id        | 408d6f8e000847a3a9a0f799a1ea2ef6 |
| name      | hqs                              |
+-----------+----------------------------------+
# 查詢當前openstack平台所有項目
[root@controller ~]# openstack project list
+----------------------------------+---------+
| ID                               | Name    |
+----------------------------------+---------+
| 015510f69fd74453a700a529b7bee827 | demo    |
| 168c9d9e5cf448c2a3dab6335590566a | service |
| 386dbfcf77e444c7872e4e23d5829fcc | admin   |
| b66f515463e54b229b1d61d9313717ff | acme    |
+----------------------------------+---------+
# 查詢acme項目詳情
[root@controller ~]# openstack project show acme
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description |                                  |
| domain_id   | 90f55d85d1824e2ca27318eefc57535e |
| enabled     | True                             |
| id          | b66f515463e54b229b1d61d9313717ff |
| is_domain   | False                            |
| name        | acme                             |
| parent_id   | 90f55d85d1824e2ca27318eefc57535e |
+-------------+----------------------------------+
# 查詢所有keystone角色
[root@controller ~]# openstack role list
+----------------------------------+--------------+
| ID                               | Name         |
+----------------------------------+--------------+
| 0190945cf6a84b60bb2f4631f85c30fa | compute-user |
| 4c438257d4a24e4aa4d4fcbeff248bce | user         |
| d8ac2f3e57664b7abee701d82c9bbf16 | admin        |
+----------------------------------+--------------+
# 查詢compute-user角色詳細信息
[root@controller ~]# openstack role show compute-user
+-----------+----------------------------------+
| Field     | Value                            |
+-----------+----------------------------------+
| domain_id | None                             |
| id        | 0190945cf6a84b60bb2f4631f85c30fa |
| name      | compute-user                     |
+-----------+----------------------------------+
# 查看平台所有服務所使用的端點地址
[root@controller ~]# openstack endpoint list
+------------+-----------+--------------+--------------+---------+-----------+---------------+
| ID         | Region    | Service Name | Service Type | Enabled | Interface | URL           |
+------------+-----------+--------------+--------------+---------+-----------+---------------+
| 14f90cb0cb | RegionOne | nova         | compute      | True    | internal  | http://contro |
....

五、Nova組件詳解

計算節點通過Nova Computer進行虛擬機創建,通過libvirt調用kvm創建虛擬機,nova之間通信通過rabbitMQ隊列進行通信。
Nova位於Openstack架構的中心,其他服務或者組件(比如Glance、Cinder、Neutron等)對它提供支持,另外它本身的架構也比較復雜。

作用:

    1. Nova是OpenStack最核心的服務模塊,負責管理和維護雲計算環境的計算資源,負責整個雲環境虛擬機生命周期的管理。
    1. Nova是OpenStack的計算服務,負責維護和管理的網絡和存儲,提供計算服務。

https://www.cnblogs.com/mh20131118/p/12939358.html

https://www.cnblogs.com/linuxk/p/9454258.html

1、安全組相關操作:

nova
​	secgroup-add-default-rule   Add a rule to the set of rules that will be
​                                added to the 'default' security group for new
​                                tenants (nova-network only).
​    secgroup-add-group-rule     Add a source group rule to a security group.
​    secgroup-add-rule           Add a rule to a security group.
​    secgroup-create             Create a security group.
​    secgroup-delete             Delete a security group.
​    secgroup-delete-default-rule
​                                Delete a rule from the set of rules that will
​                                be added to the 'default' security group for
​                                new tenants (nova-network only).
​    secgroup-delete-group-rule  Delete a source group rule from a security
​                                group.
​    secgroup-delete-rule        Delete a rule from a security group.
​    secgroup-list               List security groups for the current tenant.
​    secgroup-list-default-rules
​                                List rules that will be added to the 'default'
​                                security group for new tenants.
​    secgroup-list-rules         List rules for a security group.
​    secgroup-update             Update a security group.

# 安全組查看:
[root@controller ~]# nova secgroup-list
+--------------------------------------+---------+------------------------+
| Id                                   | Name    | Description            |
+--------------------------------------+---------+------------------------+
| 486eaa38-8e3d-4214-96bc-e6fee9b81be6 | default | Default security group |
+--------------------------------------+---------+------------------------+

# 安全組創建
[root@controller ~]# nova  secgroup-create hqs 'Most great security group'
+--------------------------------------+------+---------------------------+
| Id                                   | Name | Description               |
+--------------------------------------+------+---------------------------+
| 1f2e9304-2fa0-45ac-a407-9816c72a1190 | hqs  | Most great security group |
+--------------------------------------+------+---------------------------+

# 安全組更新
[root@controller ~]# nova  secgroup-update 218faa36-c250-40d5-9775-534049e5771a  hqs111 'One of the most great security group '
+--------------------------------------+--------+---------------------------------------+
| Id                                   | Name   | Description                           |
+--------------------------------------+--------+---------------------------------------+
| 218faa36-c250-40d5-9775-534049e5771a | hqs111 | One of the most great security group  |
+--------------------------------------+--------+---------------------------------------+

# 安全組刪除
[root@controller ~]# nova secgroup-delete hqs111

# 安全組規則查看
[root@controller ~]# nova secgroup-list-rules hqs    
+-------------+-----------+---------+----------+--------------+
| IP Protocol | From Port | To Port | IP Range | Source Group |
+-------------+-----------+---------+----------+--------------+
+-------------+-----------+---------+----------+--------------+
[root@controller ~]# nova secgroup-list-rules default
+-------------+-----------+---------+-----------+--------------+
| IP Protocol | From Port | To Port | IP Range  | Source Group |
+-------------+-----------+---------+-----------+--------------+
| tcp         | 1         | 65535   | 0.0.0.0/0 |              |
| udp         | 1         | 65535   | 0.0.0.0/0 |              |
| icmp        | -1        | -1      | 0.0.0.0/0 |              |
|             |           |         |           | default      |
|             |           |         |           | default      |
+-------------+-----------+---------+-----------+--------------+

# 安全組規則添加
[root@controller ~]# nova  secgroup-add-rule hqs icmp -1 -1 0.0.0.0/0
+-------------+-----------+---------+-----------+--------------+
| IP Protocol | From Port | To Port | IP Range  | Source Group |
+-------------+-----------+---------+-----------+--------------+
| icmp        | -1        | -1      | 0.0.0.0/0 |              |
+-------------+-----------+---------+-----------+--------------+
[root@controller ~]# nova  secgroup-add-rule hqs udp 1 65535 0.0.0.0/0   
+-------------+-----------+---------+-----------+--------------+
| IP Protocol | From Port | To Port | IP Range  | Source Group |
+-------------+-----------+---------+-----------+--------------+
| udp         | 1         | 65535   | 0.0.0.0/0 |              |
+-------------+-----------+---------+-----------+--------------+
[root@controller ~]# nova  secgroup-add-rule hqs tcp 1 65535 0.0.0.0/0   
+-------------+-----------+---------+-----------+--------------+
| IP Protocol | From Port | To Port | IP Range  | Source Group |
+-------------+-----------+---------+-----------+--------------+
| tcp         | 1         | 65535   | 0.0.0.0/0 |              |
+-------------+-----------+---------+-----------+--------------+

# 安全組規則刪除
[root@controller ~]# nova  secgroup-delete-rule hqs icmp -1 -1 0.0.0.0/0
+-------------+-----------+---------+-----------+--------------+
| IP Protocol | From Port | To Port | IP Range  | Source Group |
+-------------+-----------+---------+-----------+--------------+
| icmp        | -1        | -1      | 0.0.0.0/0 |              |
+-------------+-----------+---------+-----------+--------------+
[root@controller ~]# nova secgroup-list-rules hqs                       
+-------------+-----------+---------+-----------+--------------+
| IP Protocol | From Port | To Port | IP Range  | Source Group |
+-------------+-----------+---------+-----------+--------------+
| udp         | 1         | 65535   | 0.0.0.0/0 |              |
| tcp         | 1         | 65535   | 0.0.0.0/0 |              |
+-------------+-----------+---------+-----------+--------------+

2、雲主機類型操作

nova
	flavor-access-add           Add flavor access for the given tenant.
    flavor-access-list          Print access information about the given
                                flavor.
    flavor-access-remove        Remove flavor access for the given tenant.
    flavor-create               Create a new flavor.
    flavor-delete               Delete a specific flavor
    flavor-key                  Set or unset extra_spec for a flavor.
    flavor-list                 Print a list of available 'flavors' (sizes of
                                servers).
    flavor-show                 Show details about the given flavor.
	
# 雲主機類型列表查看
[root@controller ~]# nova flavor-list
+--------------------------------------+-----------+-----------+------+-----------+------+-------+-------------+-----------+
| ID                                   | Name      | Memory_MB | Disk | Ephemeral | Swap | VCPUs | RXTX_Factor | Is_Public |
+--------------------------------------+-----------+-----------+------+-----------+------+-------+-------------+-----------+
| 1                                    | m1.tiny   | 512       | 1    | 0         |      | 1     | 1.0         | True      |
| 2                                    | m1.small  | 2048      | 20   | 0         |      | 1     | 1.0         | True      |
| 3                                    | m1.medium | 4096      | 40   | 0         |      | 2     | 1.0         | True      |
| 4                                    | m1.large  | 8192      | 80   | 0         |      | 4     | 1.0         | True      |
| 5                                    | m1.xlarge | 16384     | 160  | 0         |      | 8     | 1.0         | True      |
| 7645393e-4f46-473a-85bf-6ea69669dac2 | m1-hqs    | 512       | 10   | 0         |      | 1     | 1.0         | True      |
+--------------------------------------+-----------+-----------+------+-----------+------+-------+-------------+-----------+

# 雲主機類型添加
[root@controller ~]# nova  flavor-create m1.hqs 6 1024 10 1
+----+--------+-----------+------+-----------+------+-------+-------------+-----------+
| ID | Name   | Memory_MB | Disk | Ephemeral | Swap | VCPUs | RXTX_Factor | Is_Public |
+----+--------+-----------+------+-----------+------+-------+-------------+-----------+
| 6  | m1.hqs | 1024      | 10   | 0         |      | 1     | 1.0         | True      |
+----+--------+-----------+------+-----------+------+-------+-------------+-----------+

# 雲主機類型詳情查看
[root@controller ~]# nova flavor-show m1.hqs
+----------------------------+--------+
| Property                   | Value  |
+----------------------------+--------+
| OS-FLV-DISABLED:disabled   | False  |
| OS-FLV-EXT-DATA:ephemeral  | 0      |
| disk                       | 10     |
| extra_specs                | {}     |
| id                         | 6      |
| name                       | m1.hqs |
| os-flavor-access:is_public | True   |
| ram                        | 1024   |
| rxtx_factor                | 1.0    |
| swap                       |        |
| vcpus                      | 1      |
+----------------------------+--------+

# 雲主機類型刪除
[root@controller ~]# nova flavor-delete  m1-hqs

3、雲主機實例操作

# 實例列表查看
nova list

# 實例詳情查看
nova show <server>

# 實例創建
nova boot --image <image> [--volume <volume>] --availability-zone nova --flavor <flavor> --security-groups <secgroup> --nic <net-id=net-uuid>  <server-name>
# 1、查看鏡像
glance image-list
# 2、查看規格
nova flavor-list
# 3、查看安全組
nova secgroup-list
# 4、查看可用的網絡
neutron net-list

nova boot    \
--image centos7.2      \
--availability-zone nova  \
--flavor m1.hqs    \
--security-groups hqs  \
--nic net-id=64306052-bcec-4209-ac4c-45b9d2de4dde  \
caocao-server1

# 5、實例創建
[root@controller images]# nova boot test-server --image centos7.2 --flavor m1.lxh --availability-zone nova --security-groups hqs  --nic net-id=451fd2af-e1eb-4437-bf71-53b5f91c10b5
+--------------------------------------+--------------------------------------------------+
| Property                             | Value                                            |
+--------------------------------------+--------------------------------------------------+
| OS-DCF:diskConfig                    | MANUAL                                           |
| OS-EXT-AZ:availability_zone          | nova                                             |
| OS-EXT-SRV-ATTR:host                 | -                                                |
| OS-EXT-SRV-ATTR:hostname             | test-server                                      |
| OS-EXT-SRV-ATTR:hypervisor_hostname  | -                                                |
| OS-EXT-SRV-ATTR:instance_name        | instance-0000000d                                |
| OS-EXT-SRV-ATTR:kernel_id            |                                                  |
| OS-EXT-SRV-ATTR:launch_index         | 0                                                |
| OS-EXT-SRV-ATTR:ramdisk_id           |                                                  |
| OS-EXT-SRV-ATTR:reservation_id       | r-zoria5fn                                       |
| OS-EXT-SRV-ATTR:root_device_name     | -                                                |
| OS-EXT-SRV-ATTR:user_data            | -                                                |
| OS-EXT-STS:power_state               | 0                                                |
| OS-EXT-STS:task_state                | scheduling                                       |
| OS-EXT-STS:vm_state                  | building                                         |
| OS-SRV-USG:launched_at               | -                                                |
| OS-SRV-USG:terminated_at             | -                                                |
| accessIPv4                           |                                                  |
| accessIPv6                           |                                                  |
| adminPass                            | ejFD96k8DUkW                                     |
| config_drive                         |                                                  |
| created                              | 2021-10-19T02:09:45Z                             |
| description                          | -                                                |
| flavor                               | m1.lxh (111)                                     |
| hostId                               |                                                  |
| host_status                          |                                                  |
| id                                   | 22d0a54b-2a6f-4ea8-8729-dc07055c19e5             |
| image                                | centos7.2 (8aec8782-c6af-41d8-a225-ada5a2af13dc) |
| key_name                             | -                                                |
| locked                               | False                                            |
| metadata                             | {}                                               |
| name                                 | test-server                                      |
| os-extended-volumes:volumes_attached | []                                               |
| progress                             | 0                                                |
| security_groups                      | hqs                                              |
| status                               | BUILD                                            |
| tenant_id                            | 386dbfcf77e444c7872e4e23d5829fcc                 |
| updated                              | 2021-10-19T02:09:55Z                             |
| user_id                              | 0f217182b5af448c988f5464c706a337                 |
+--------------------------------------+--------------------------------------------------+

# 實例停止
[root@controller ~]# nova stop hqs_server
Request to stop server hqs_server has been accepted.

# 實例啟動
[root@controller ~]# nova start hqs_server
Request to start server hqs_server has been accepted.

# 實例重啟
[root@controller ~]# nova reboot hqs_server
Request to reboot server <Server: hqs_server> has been accepted.
[root@controller ~]# nova list
+--------------------------------------+------------+---------+----------------+-------------+----------------------------------+
| ID                                   | Name       | Status  | Task State     | Power State | Networks                         |
+--------------------------------------+------------+---------+----------------+-------------+----------------------------------+
| b51590fc-33cc-4d54-8e54-c0530e912d2b | hqs_server | REBOOT  | reboot_started | Running     | int-gre=172.25.2.8               |
| c6cabeed-1176-4634-b493-b6be7c351a03 | test       | SHUTOFF | -              | Shutdown    | int-gre=172.25.2.3, 192.168.20.4 |
+--------------------------------------+------------+---------+----------------+-------------+----------------------------------+

# 實例掛起
[root@controller ~]# nova pause test
[root@controller ~]# nova list      
+--------------------------------------+------------+--------+----------------+-------------+----------------------------------+
| ID                                   | Name       | Status | Task State     | Power State | Networks                         |
+--------------------------------------+------------+--------+----------------+-------------+----------------------------------+
| b51590fc-33cc-4d54-8e54-c0530e912d2b | hqs_server | REBOOT | reboot_started | Running     | int-gre=172.25.2.8               |
| c6cabeed-1176-4634-b493-b6be7c351a03 | test       | PAUSED | -              | Paused      | int-gre=172.25.2.3, 192.168.20.4 |
+--------------------------------------+------------+--------+----------------+-------------+----------------------------------+

# 實例刪除
[root@controller ~]# nova delete hqs_server
Request to delete server hqs_server has been accepted.
[root@controller ~]# nova list
+--------------------------------------+------+--------+------------+-------------+----------------------------------+
| ID                                   | Name | Status | Task State | Power State | Networks                         |
+--------------------------------------+------+--------+------------+-------------+----------------------------------+
| c6cabeed-1176-4634-b493-b6be7c351a03 | test | PAUSED | -          | Paused      | int-gre=172.25.2.3, 192.168.20.4 |
+--------------------------------------+------+--------+------------+-------------+----------------------------------+

4、浮動IP

nova
    floating-ip-associate       Associate a floating IP address to a server.
    floating-ip-bulk-create     Bulk create floating IPs    
                                by  range (nova-network only).
    floating-ip-bulk-delete     Bulk delete floating IPs by range (nova-
                                network only).
    floating-ip-bulk-list       List all floating IPs (nova-network only).
    floating-ip-create          Allocate a floating IP for the current tenant.
    floating-ip-delete          De-allocate a floating IP.
    floating-ip-disassociate    Disassociate a floating IP address from a
                                server.
    floating-ip-list            List floating IPs.
    floating-ip-pool-list       List all floating IP pools.

# 創建浮動IP
# 語法:nova floating-ip-create <pool>
[root@controller nova]# nova  floating-ip-create  net-gre
+--------------------------------------+--------------+-----------+----------+---------+
| Id                                   | IP           | Server Id | Fixed IP | Pool    |
+--------------------------------------+--------------+-----------+----------+---------+
| fcb2439d-ba4f-4467-ad60-34726d57aba4 | 192.168.37.5 | -         | -        | net-gre |
+--------------------------------------+--------------+-----------+----------+---------+

# 浮動IP的列表信息
[root@controller nova]# nova floating-ip-list
+--------------------------------------+--------------+-----------+----------+---------+
| Id                                   | IP           | Server Id | Fixed IP | Pool    |
+--------------------------------------+--------------+-----------+----------+---------+
| fcb2439d-ba4f-4467-ad60-34726d57aba4 | 192.168.37.5 | -         | -        | net-gre |
+--------------------------------------+--------------+-----------+----------+---------+

# 浮動IP地址池信息
[root@controller nova]# nova floating-ip-pool-list 
+---------+
| name    |
+---------+
| net-gre |
+---------+

# 查看浮動IP詳細信息
[root@controller nova]# openstack ip  floating show 192.168.37.5
+---------------------+--------------------------------------+
| Field               | Value                                |
+---------------------+--------------------------------------+
| description         |                                      |
| dns_domain          |                                      |
| dns_name            |                                      |
| fixed_ip_address    | None                                 |
| floating_ip_address | 192.168.37.5                         |
| floating_network_id | 847163a4-65dd-456e-a839-4f810cce80cf |
| id                  | fcb2439d-ba4f-4467-ad60-34726d57aba4 |
| port_id             | None                                 |
| project_id          | 386dbfcf77e444c7872e4e23d5829fcc     |
| router_id           | None                                 |
| status              | DOWN                                 |
+---------------------+--------------------------------------+

# 浮動ip關聯給實例
# 語法:nova floating-ip-associate [--fixed-address <fixed_address>] <server> <address>
# 參數:
#  <server>        Name or ID of server.(nova list)
#  <address>       IP Address.(nova floating-ip-list)
[root@controller nova]# nova floating-ip-associate caocao-server1 192.168.37.5
[root@controller nova]# nova list
+--------------------------------------+----------------+--------+------------+-------------+---------------------------------+
| ID                                   | Name           | Status | Task State | Power State | Networks                        |
+--------------------------------------+----------------+--------+------------+-------------+---------------------------------+
| e2c75e51-1a3b-4a0b-8765-d7ff6e8188e3 | caocao-server1 | ACTIVE | -          | Running     | int-gre=10.10.0.3, 192.168.37.5 |
+-----------------------

# 浮動IP解除關聯實例
# 語法:nova floating-ip-disassociate <server> <address>
[root@controller nova]# nova floating-ip-disassociate caocao-server1 192.168.37.5
[root@controller nova]# nova list
+--------------------------------------+----------------+--------+------------+-------------+-------------------+
| ID                                   | Name           | Status | Task State | Power State | Networks          |
+--------------------------------------+----------------+--------+------------+-------------+-------------------+
| e2c75e51-1a3b-4a0b-8765-d7ff6e8188e3 | caocao-server1 | ACTIVE | -          | Running     | int-gre=10.10.0.3 |
+--------------------------------------+----------------+--------+------------+-------------+-------------------+

# 解除關聯並刪除浮動IP
[root@controller nova]# nova floating-ip-associate caocao-server1 192.168.37.5
[root@controller nova]# nova floating-ip-delete 192.168.37.5
[root@controller nova]# nova list
+--------------------------------------+----------------+--------+------------+-------------+-------------------+
| ID                                   | Name           | Status | Task State | Power State | Networks          |
+--------------------------------------+----------------+--------+------------+-------------+-------------------+
| e2c75e51-1a3b-4a0b-8765-d7ff6e8188e3 | caocao-server1 | ACTIVE | -          | Running     | int-gre=10.10.0.3 |
+---------
[root@controller nova]# nova floating-ip-list
+----+----+-----------+----------+------+
| Id | IP | Server Id | Fixed IP | Pool |
+----+----+-----------+----------+------+
+----+----+-----------+----------+------+

5、密鑰管理

nova 
    keypair-add                 Create a new key pair for use with servers.
    keypair-delete              Delete keypair given by its name. (Supported
                                by API versions '2.0' - '2.latest') [hint: use
                                '--os-compute-api-version' flag to show help
                                message for proper version]
    keypair-list                Print a list of keypairs for a user (Supported
                                by API versions '2.0' - '2.latest') [hint: use
                                '--os-compute-api-version' flag to show help
                                message for proper version]
    keypair-show                Show details about the given keypair.
                                (Supported by API versions '2.0' - '2.latest')
                                [hint: use '--os-compute-api-version' flag to
                                show help message for proper version]

# 查看密鑰列表
[root@controller ~]# nova keypair-list
+------+------+-------------------------------------------------+
| Name | Type | Fingerprint                                     |
+------+------+-------------------------------------------------+
| test | ssh  | 5c:7e:d8:bd:b9:33:cb:f9:eb:b8:52:c4:04:7c:8c:1e |
+------+------+-------------------------------------------------+

# 查看密鑰詳情
[root@controller ~]# nova  keypair-show test
+-------------+-------------------------------------------------+
| Property    | Value                                           |
+-------------+-------------------------------------------------+
| created_at  | 2021-10-28T14:06:12.000000                      |
| deleted     | False                                           |
| deleted_at  | -                                               |
| fingerprint | 5c:7e:d8:bd:b9:33:cb:f9:eb:b8:52:c4:04:7c:8c:1e |
| id          | 1                                               |
| name        | test                                            |
| type        | ssh                                             |
| updated_at  | -                                               |
| user_id     | 0f217182b5af448c988f5464c706a337                |
+-------------+-------------------------------------------------+
Public key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc/qEc2ihvE7aLgSVH0lt5PDBwEYXW0CqMx8sGJPT1p3r0mxdJiti9pJxBRoX+oOhA/LFssaOGvtHDK79Njs3HynrXkxvKo6UfmBNQzt2z5C3nTP2U17JY2wrOh7YyYdhuuRirCLNHQk4hM1YY9BbPrCLjLlQ8Gms6vdgDCgT1gXuRppBTfQKrIKKRk6d5vIqBMoGM3fCaM34DiqwOS/uq8gQM8T/io9h6XrTKWznmZgzaFJ2S3XUZhAliSEgkraxZIM8L3QWumMlBVryYVUX6QEKv29hNWYZF/bxUqfQx50vBuIfHlKgkcccAVDy6OoZNmd6T1rdJXEdW+MWobHu7 Generated-by-Nova

# 創建密鑰
[root@controller ~]# nova keypair-add hqs --key-type ssh 
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

# 刪除密鑰
[root@controller ~]# nova  keypair-list
+------+------+-------------------------------------------------+
| Name | Type | Fingerprint                                     |
+------+------+-------------------------------------------------+
| hqs  | ssh  | e2:cc:e9:8f:1d:06:45:b4:52:0b:38:68:0d:15:b8:b9 |
| test | ssh  | 5c:7e:d8:bd:b9:33:cb:f9:eb:b8:52:c4:04:7c:8c:1e |
+------+------+-------------------------------------------------+
[root@controller ~]# nova keypair-delete hqs
[root@controller ~]# nova  keypair-list
+------+------+-------------------------------------------------+
| Name | Type | Fingerprint                                     |
+------+------+-------------------------------------------------+
| test | ssh  | 5c:7e:d8:bd:b9:33:cb:f9:eb:b8:52:c4:04:7c:8c:1e |
+------+------+-------------------------------------------------+

6、配額管理

# 待補全
[root@controller ~]# openstack quota show admin
+----------------------+----------------------------------+
| Field                | Value                            |
+----------------------+----------------------------------+
| backup_gigabytes     | 1000                             |
| backups              | 10                               |
| cores                | 20                               |
| firewall             | 10                               |
| firewall_policy      | 10                               |
| firewall_rule        | 100                              |
| fixed-ips            | -1                               |
| floating-ips         | 50                               |
| gigabytes            | 1000                             |
| health_monitor       | -1                               |
| injected-file-size   | 10240                            |
| injected-files       | 5                                |
| injected-path-size   | 255                              |
| instances            | 10                               |
| key-pairs            | 100                              |
| member               | -1                               |
| network              | 10                               |
| per_volume_gigabytes | -1                               |
| pool                 | 10                               |
| port                 | 50                               |
| project              | 386dbfcf77e444c7872e4e23d5829fcc |
| properties           | 128                              |
| ram                  | 51200                            |
| rbac_policy          | 10                               |
| router               | 10                               |
| secgroup-rules       | 100                              |
| secgroups            | 10                               |
| server_group_members | 10                               |
| server_groups        | 10                               |
| snapshots            | 10                               |
| subnet               | 10                               |
| subnetpool           | -1                               |
| vip                  | 10                               |
| volumes              | 10                               |
+----------------------+----------------------------------+

六、網絡neutron

網絡管理

# 查看網絡列表信息
[root@controller ~]# openstack network list
+--------------------------------------+---------+--------------------------------------+
| ID                                   | Name    | Subnets                              |
+--------------------------------------+---------+--------------------------------------+
| 847163a4-65dd-456e-a839-4f810cce80cf | net-gre | 757f4819-48aa-4026-aff2-8e78b4161691 |
| 64306052-bcec-4209-ac4c-45b9d2de4dde | int-gre | d3aa832b-8bcf-4a7b-9692-540b468a711b |
+--------------------------------------+---------+--------------------------------------+

# 查看網絡詳細信息
[root@controller ~]# openstack network show net-gre
+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | UP                                   |
| availability_zone_hints   |                                      |
| availability_zones        | nova                                 |
| created_at                | 2021-10-18T18:02:38                  |
| description               |                                      |
| id                        | 847163a4-65dd-456e-a839-4f810cce80cf |
| ipv4_address_scope        | None                                 |
| ipv6_address_scope        | None                                 |
| is_default                | False                                |
| mtu                       | 1458                                 |
| name                      | net-gre                              |
| port_security_enabled     | True                                 |
| project_id                | 386dbfcf77e444c7872e4e23d5829fcc     |
| provider:network_type     | gre                                  |
| provider:physical_network | None                                 |
| provider:segmentation_id  | 99                                   |
| router_external           | Internal                             |
| shared                    | False                                |
| status                    | ACTIVE                               |
| subnets                   | 757f4819-48aa-4026-aff2-8e78b4161691 |
| tags                      | []                                   |
| updated_at                | 2021-10-18T18:15:25                  |
+---------------------------+--------------------------------------+

# 創建網絡
[root@controller ~]# openstack network create int-gre-test --project admin
+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | UP                                   |
| availability_zone_hints   |                                      |
| availability_zones        |                                      |
| created_at                | 2021-10-28T14:25:07                  |
| description               |                                      |
| headers                   |                                      |
| id                        | 8e16c3a3-53f2-4ab7-b77f-3f1c1bf22dc6 |
| ipv4_address_scope        | None                                 |
| ipv6_address_scope        | None                                 |
| mtu                       | 1458                                 |
| name                      | int-gre-test                         |
| port_security_enabled     | True                                 |
| project_id                | 386dbfcf77e444c7872e4e23d5829fcc     |
| provider:network_type     | gre                                  |
| provider:physical_network | None                                 |
| provider:segmentation_id  | 91                                   |
| router_external           | Internal                             |
| shared                    | False                                |
| status                    | ACTIVE                               |
| subnets                   |                                      |
| tags                      | []                                   |
| updated_at                | 2021-10-28T14:25:07                  |
+---------------------------+--------------------------------------+

# 更新網絡
[root@controller ~]# openstack network set  int-gre-test --enable --name int-test-gre
[root@controller ~]# openstack network list
+--------------------------------------+--------------+--------------------------------------+
| ID                                   | Name         | Subnets                              |
+--------------------------------------+--------------+--------------------------------------+
| 847163a4-65dd-456e-a839-4f810cce80cf | net-gre      | 757f4819-48aa-4026-aff2-8e78b4161691 |
| 64306052-bcec-4209-ac4c-45b9d2de4dde | int-gre      | d3aa832b-8bcf-4a7b-9692-540b468a711b |
| 8e16c3a3-53f2-4ab7-b77f-3f1c1bf22dc6 | int-test-gre |                                      |
+--------------------------------------+--------------+--------------------------------------+
[root@controller ~]# openstack network show int-test-gre
+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | UP                                   |
| availability_zone_hints   |                                      |
| availability_zones        |                                      |
| created_at                | 2021-10-28T14:25:07                  |
| description               |                                      |
| id                        | 8e16c3a3-53f2-4ab7-b77f-3f1c1bf22dc6 |
| ipv4_address_scope        | None                                 |
| ipv6_address_scope        | None                                 |
| mtu                       | 1458                                 |
| name                      | int-test-gre                         |
| port_security_enabled     | True                                 |
| project_id                | 386dbfcf77e444c7872e4e23d5829fcc     |
| provider:network_type     | gre                                  |
| provider:physical_network | None                                 |
| provider:segmentation_id  | 91                                   |
| router_external           | Internal                             |
| shared                    | False                                |
| status                    | ACTIVE                               |
| subnets                   |                                      |
| tags                      | []                                   |
| updated_at                | 2021-10-28T14:28:04                  |
+---------------------------+--------------------------------------+

# 刪除網絡
[root@controller ~]# openstack network delete int-gre-test


免責聲明!

本站轉載的文章為個人學習借鑒使用,本站對版權不負任何法律責任。如果侵犯了您的隱私權益,請聯系本站郵箱yoyou2525@163.com刪除。



 
粵ICP備18138465號   © 2018-2025 CODEPRJ.COM