OpenStack. Architecture and Operation. OpenStack Tutorial Day 2. Kasidit Chanchio Vasabilab, Thammasat University

Transcription

1 OpenStack Architecture and Operation OpenStack Tutorial Day 2 Kasidit Chanchio Vasabilab, Thammasat University

2 How OpenStack Components work Components in our focuses: Keystone Nova Glance Networking Orchrestration

3 OpenStack Architecture

4 OpenStack Architecture

5 OpenStack Architecture

6 OpenStack Architecture

7 Component Layout DASHBOARD KEYSTONE

8 Keystone A central authentication and authorization User represents someone or something that can gain access through Keystone. Users come with credentials that can be checked like passwords or API keys. Tenant represents what is called the project in Nova. Users are bound to a tenant by assigning them a role on that tenant. Role represents a number of privileges or rights a user has or actions they are allowed to perform. To access a service, we have to know its endpoint. So there are endpoint templates in Keystone that provide information about all existing endpoints of all existing services.

9 Keystone To access some service, users provide their credentials to Keystone and receive a token. If the user, for example, wants to spawn a new VM instance in Nova, one can find an URL to Nova in the list of endpoints provided by Keystone and send an appropriate request. After that, Nova verifies the validity of the token in Keystone and should create an instance from some image by the provided image ID and plug it into some network. All the way this token travels between services so that they can ask Keystone or each other for additional information or some actions.

10 Keystone Control Flow User Keystone Nova Glance credentials

11 Keystone Control Flow User Keystone Nova Glance credentials token

12 Keystone Control Flow User Keystone Nova Glance credentials token token + request for VM

13 Keystone Control Flow User Keystone Nova Glance credentials token token + request for VM verify token

14 Keystone Control Flow User Keystone Nova Glance credentials token token + request for VM verify token token + request for image verify token

15 Keystone Control Flow User Keystone Nova Glance credentials token token + request for VM verify token successful response verify token token + request for image image

16 OpenStack Architecture

17 OpenStack Architecture

18

19 Nova Nova handles instances provisioning on compute resources. Nova-api initiates most activities Nova components communicate via queue and nova database Nova-scheduler decides where to launch instances Nova-compute launches instances Nova-compute periodically report host and network capabilities to Nova-scheduler

20 Component Layout NOVA-COMPUTE NOVA-API NOVA-SCHED

21 Nova Control Flow Nova-api Message Q Run instance Request Novascheduler Novacompute

22 Nova Control Flow Nova-api Message Q Run instance Request Make decision: -Filter hosts - Weight hosts Novascheduler Novacompute

23 Nova Control Flow Request Nova-api Run instance Message Q Host provision Make decision: -Filter hosts - Weight hosts Novascheduler Novacompute

24 Nova Control Flow Request Nova-api Run instance Message Q Host provision Make decision: -Filter hosts - Weight hosts Novascheduler Novacompute Host provision Launch instance -Request a copy of an image from glance - VM instance uses image on local compute node host

25 Nova Control Flow Request Nova-api Run instance Message Q Host provision Make decision: -Filter hosts - Weight hosts Novascheduler Novacompute Host provision Host/Network capabilities Launch instance Update Capability information

26 OpenStack Architecture

27 Glance Glance manage all kinds of images to instantiate VM instances Glance-api takes image retrieval requests from nova-compute and pass them to glance-registry OpenStack create a new copy of the image on a host where the VM instance runs Glance-registry check image metadata from database Glance stores Image data in its image store (S3, HTTP, Local, Swift)

28 Glance Control Flow User Glance-api Glanceregistry Image store Image retrieval

29 Glance Control Flow User Image retrieval Glance-api retrieve image Glanceregistry Check image s Metadata from Glance DB Image store

30 Glance Control Flow User Image retrieval Upload/delete Glance-api retrieve image Glanceregistry Check image s Metadata from Glance DB Image store

31 Glance Control Flow User Image retrieval Upload/delete Glance-api retrieve image Glanceregistry Check image s Metadata from Glance DB Image store Upload/delete image Update image s Metadata on Glance DB

32 OpenStack Architecture

33

34 Neutron Neutron handle network virtualization It allows user/tenant to create logical networks to fit the application s need. Use REST API to manage network functions Multi-tenancy: Isolation, Abstarction Modular: Support Plug-in from multiple vendors

35 Traditional Host & Network Host machine sw sw router sw

36 Moving Networking toward the Edge Host machine sw sw router sw

37 Component Layout NEUTRON SERVER NEUTRON-PLUGIN NEUTRON-AGENTS L3-AGENT DHCP AGENT NEUTRON-PLUGIN

38

39 Neutron Control Flow nova Neutron server Neutron dhcp-agent dhcp server (1) (2) (3) (5) (4) Soft neutronagent (6) (7) (8) (9)

40 Data flow

41 Data flow

42 Heat Slide taken from mirantis

43

44 Heat Components

45 HOT format

46 Basic HOT From

47 From

48 Example HOT From

49

50

51

52 Creating a Cluster Computer on OpenStack

53

54 Create a local network

55 Launch a head node

56

57

58

59 Launch compute nodes

60

61

62

63