NIOS allows you to automatically pre- provision and deploy Grid Master and Grid members using the cloud-init utility. Ensure that you understand how to compose user data files for provisioning the Grid Master and Grid members. A user data file includes configuration details such as enabling the remote console, installing licenses, defining network settings, and validating the certificate and token required for authenticating the member. For information about how to create a user data file, see Defining User Data Settings for vNIOS Instances.
Before you provision deploy vNIOS for OpenStack instances using the cloud-init utility, ensure that you have the necessary feature licenses for each of your instances.
...
Deploying the Grid Master and Grid Members
To set up the Grid Master and begin pre-provisioning deploying vNIOS for OpenStack Grid members in OpenStack by using cloud-init, complete the following steps:
Pre-provision and set up Deploy the Grid Master in OpenStack as defined in Provisioning Deploying the Grid Master.
In Infoblox NIOS Grid Manager, create offline Grid members that you plan to join to the Grid, pre-provision them, and generate a token for each member and use it the token in the user data file of each member. For more information, see the Pre-Provisioning NIOS and vNIOS Appliances topic in the Infoblox NIOS Documentation.
Pre-provision Deploy Grid members in OpenStack as defined in Provisioning Grid Members Deploying Grid Members.
If for any reason the use of cloud-init to join members to a Grid does not function properly, you can use the CLI commands defined in the Joining Pre-Provisioned Members to a Grid topic in the Infoblox NIOS Documentation to join the members to the Grid.
Anchor |
---|
...
|
...
|
...
Deploying the Grid Master
Sign in to OpenStack and compose the user data file for the Grid Master using the vi editor. You can also compose the data file locally and move it to the OpenStack node later.
For a sample of the Grid Master user data file, see the Sample User Data File for the Grid Master section.Run the
openstack port-create
command to create port IDs for the network interfaces (MGMT, LAN1, and/or HA).For the vNIOS appliance to run in OpenStack, you must specify at least two networks, MGMT and LAN1.
If you need to create a LAN2 port, then you must create an HA port.
To set up high availability (HA) with vNIOS, you must specify three network interfaces, MGMT, LAN1, and HA on each node of the HA pair.
Ensure that the LAN 1 and HA interfaces are in the same subnet.For HA pairs, you must also execute run the
allowed-address-pairs
option to define the VIP port for the HA configuration, using the VRRP MAC address and the Virtual Router ID you use.
Following is an example:$ openstack port-create VIP –-allowed-address-pairs list=true mac_address= 00:00:5e:00:01:c8 ip_address=10.0.0.22
Note that you can use thesecurity-group
option to associate the vNIOS instance with one or more security groups that you have created. For more information, see Setting Up Security Groups. Optionally, you can associate the vNIOS instance with a security group when you execute run theopenstack server create
command.
Example:$ openstack port-create --security-group <name of the security group>
For an HA pair configuration only: Ensure that you set
allow_duplicate_networks=true
in the nova.conf file to remove the restriction of allowing only one interface for each network in OpenStack.Run the
openstack port list
command to view the network and port IDs generated for all network interfaces. You can copy and paste the Port IDs into theopenstack server create
command.Execute Run the
openstack server create
command in OpenStack to spin up the Grid Master VM.
Note: Use the custom name that you used when creating flavors.
Following is an example:openstack server create --config-drive False --image
<nios-7.3.0-314352-2016-01-29-05-02-02-160G-1420-disk1.qcow2> --flavor <vnios1410.160>
– security-groups <name of the security group> --nic net-id=<the network ID for the MGMT interface> --nic net-id=<the network ID for the LAN1/HA interface only if you are configuring an HA pair> --nic port-id=<the IP address ID for the LAN1 interface>
<my-vm-grid-master>
For Red Hat OpenStack Platform, use the command:
openstack server create <instance_name> --config-drive=True --flavor=<flavor_name> --image=<image_name> --nic port-id=<mgmt_port_id> --nic port-id=<lan1_port_id> --nic port-id=<ha_port_id> --nic port-id=<lan2_port_id> --user-data <user_data_file_name>
For Ubuntu, use the command:
openstack server create <instance_name> --config-drive True --flavor <flavor_name> --image <image_name> --network <network_name_mgmt> --network <network_name_lan1> --network <network_name_ha> --network <network_name_lan2> --user-data <user_data_file_name>
For information about user data files, see the Defining User Data Settings for vNIOS Instances section.Parameter description:
config-drive
determines whether to use the virtual CD-ROM drive transport mechanism for the user data file. Set it toTrue
to enable the use of virtual drive.image
defines the name of the software package you downloaded. For information about supported vNIOS for OpenStack models, see vNIOS for OpenStack Virtual Appliance Models.flavor
specifies the flavors of the vNIOS for OpenStack instance. For information about how to define flavors, see Setting Up vNIOS for OpenStack Flavors.nic port-id
specifies the port ID of the MGMT, LAN1, LAN2, or HA interface.network
specifies the name of the network in which the port must reside.user-data
specifies the name of the user data file.
To remove networks, use the openstack net-delete
command. If some of the networks remain, use OpenStack Horizon to manually remove them.
The vNIOS for OpenStack instance automatically spins up after the openstack server create
command is executedrun.
...
Anchor | ||||
---|---|---|---|---|
|
Sign in to OpenStack and compose a user data file for each Grid member you plan to join the Grid. For a sample Grid member user data file, see the Sample User data File for Grid Members section.
Execute Run the
openstack server create
command in OpenStack to spin up each Grid member VM, as follows:nova boot --config-drive False --image nios-7.2.4-1410-160.qcow2 --flavor vnios1410.160
--nic net-id=9db90ecf-83e8-44c5-930d-7e3548ff4a02 --nic
port-id=620d9fba-2f2d-4b81-9e51-eecfee551c15 --user-data ./user-data-2 my-vm-grid-member
For Red Hat OpenStack Platform, use the command:
openstack server create <instance_name> --config-drive True --flavor=<flavor_name> --image=<image_name> --nic port-id=<mgmt_port_id> --nic port-id=<lan1_port_id> --nic port-id=<ha_port_id> --nic port-id=<lan2_port_id> --user-data <user_data_file_name>
For Ubuntu, use the command:
openstack server create <instance_name> --config-drive True --flavor <flavor_name> --image <image_name> --network <network_name_mgmt> --network <network_name_lan1> --network <network_name_ha> --network <network_name_lan2>
Note: Use config-
drive True to tell OpenStack to use the virtual CD-
ROM drive transport mechanism for the user data file.user-data <user_data_file_name>
For information about user data files, see the Defining User Data Settings for vNIOS Instances section.config-drive
determines whether to use the virtual CD-ROM drive transport mechanism for the user data file. Set it toTrue
to enable the use of virtual drive.image
defines the name of the software package you downloaded. For information about supported vNIOS for OpenStack models, see vNIOS for OpenStack Virtual Appliance Models.flavor
specifies the flavors of the vNIOS for KVM instance. For information about how to define flavors, see Setting Up vNIOS OpenStack Flavors.nic netport-id
specifies the port ID of the MGMT network interface.nic port-id
network
specifies the port ID name of the network interfacein which the port must reside.user-data
specifies the name of the user data file.my-vm-grid-member
defines the name of the VM.
After you execute run the openstack server create
command and launch the vNIOS for OpenStack instances, the Grid members automatically join the Grid. Further communications with the instance take place through Grid Manager and the NIOS CLI.
Anchor | ||||
---|---|---|---|---|
|
When you pre-provision deploy vNIOS appliances using cloud-init, vNIOS the instances in an the OpenStack environment require different user data settings. In OpenStack, compose Compose the user data file in plain text format by using the vi editor in OpenStack.
OpenStack supports two transport mechanisms for the user data file; one through a virtual CDROM drive (also known as ISO parameter injection) and the other through the metadata network service. You can provide either or both transport mechanisms. OpenStack will make the user data file available to the vNIOS instance using the transport you configure in the user data file.
You can use the following data fields in the user data files for provisioning new instances:
Data Field | Description |
---|---|
| Set this field to "true" to enable the remote console. |
| Enter "infoblox" as the default admin password. |
| Enter the name of the licenses you plan to install on the Grid Master or Grid members. For example, you can enter "vnios,enterprise,dns". |
| Specify the below mentioned LAN1 parameters only if you have disabled DHCP in OpenStack for the LAN1 network.
|
| This field remains blank. It signifies to OpenStack that the instance is a Grid Master. Use this only for in the Grid member user data file. |
| Use this field only for the Grid member user data file. Copy and paste the string for the Infoblox NIOS certificate credential generated for the Grid member token. Note that the certificate string must not contain any space (s); otherwise, it might as it may cause issues during the provisioning process. |
| This field provides the string for the generated token for the new instance. Here, you paste the copied security token that you generated in NIOS for the new vNIOS instance. Note that the certificate and token are generated on the Grid Master when you pre-provision the vNIOS instance. The certificate and token values are valid only for a period of time. For more information, see Automatic Joining Pre-Provisioning of vNIOS MembersProvisioned Members to a Grid in the Infoblox NIOS Documentation. |
| This is applicable only to Grid members. This field specifies the IP address for of the Grid Master. |
| Use this field to set MAC addresses for the vNIOS interfaces. |
For sample user data files, see the Sample User Data Files for the Grid Master and Sample User data File for Grid Members sections below.
Anchor | ||||
---|---|---|---|---|
|
Following is a sample user data file for deploying the Grid Master in the OpenStack environment:. The script spins up a Grid Master instance with Lan1 interface and with vnios
, enterprise
, and dns
licenses.
#infoblox-config
remote_console_enabled: true default_admin_password: infoblox temp_license: vnios,enterprise,dns
lan1:
v4_addr: 10.2.0.9
v4_netmask: 255.255.255.0
v4_gw: 10.2.0.1
Anchor | ||||
---|---|---|---|---|
|
Following is a sample user data file for deploying Grid members in the OpenStack environment:. The script spins up a vNIOS instance with a LAN1 interface and with vnios
, enterprise
and dns
licenses, and joins it to the specified Grid Master using the configured certificate and token for authentication.
#infoblox-config remote_console_enabled: true
default_admin_password: infoblox license: vnios,enterprise,dns
lan1:
v4_addr: 10.2.0.9
v4_netmask: 255.255.255.0
v4_gw: 10.2.0.1
gridmaster:
certificate: ----BEGIN CERTIFICATE----
MIIDdzCCAl8CEBdLzTDHhS3SgclnykFe/qUwDQYJKoZIhvcNAQEFBQAwejELMAkGA1UEBhMCVVMxEzARBgNVBA gTCkNhbGlmb3JuaWExEjAQBgNVBAcTCVN1bm55dmFsZTERMA8GA1UEChMISW5mb2Jsb3gxFDASBgNVBAsTC0Vu Z2luZWVyaW5nMRkwFwYDVQQDExB3d3cuaW5mb2Jsb3guY29tMB4XDTE1MTAxNTIzNDgzMVoXDTE2MTAxNDIzND gzMVowejELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExEjAQBgNVBAcTCVN1bm55dmFsZTERMA8G A1UEChMISW5mb2Jsb3gxFDASBgNVBAsTC0VuZ2luZWVyaW5nMRkwFwYDVQQDExB3d3cuaW5mb2Jsb3guY29tMI IBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGBBrcJls7UfPRY4OlsW3+JSkX4UwO4ssx1IQQgJEI3X
Ia335wC5fP37wtGgeCflJwDMhF6Z3a7nLgx6RZN2cPeDHdLQp45+P6Xi4I6J1gXPL/TPhtrrDfsX3Lq337eUi5 3D3OqTfz+NwMgrJU6SRzxXUOkt+Tx6VTwFkCThrVKtXURhg4Ik8frVBI8qFTFdRIs+z1O6E09LZoScNjOQXKZP b2uqPwBhSQ7PYgX+vbyXy2CAEzmsDyw7TQFzeZ+8xA/sqlQUXZa8AQtyLlMnxf2T9upP9g9e0O+UBpZrKhdVZP VYaWgpM7lSOwv1a0NLjwVyGgj0igIughaqz5A54QIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQBF3pAAXFiJ3ADg
3Nc36e0MxZAv2TFHggl9OPjexBQHyDs9jU+Q1dNSeiVVwgYBSwxLfnEJthne1GHG1mgN92TRDehCpTiIFRnBH8 RNedtHQtQ/cNLHgHpcUW0eJXSR6kCSGHTSCFWQI/ie4RHhg3vXuOXA4ZkOAAgCO+korRUkcRc2kjIM1vZnRf9H rDci+HLCGGTH/dHdqNIjasPWYnSQa3RKEHbl53THfGEJXf5VBYIsu32lWPqhaMIlTg7Rj0C+4pD1XQ3Z2Qa7TP JDeNKfy+VZVcNQGD4hCeBRGhhmj7X7TqnCdKea1PftEwug1X24xF84tVn1Xpw6GmwRLWpi----END CERTIFICATE----
token: 6VPPn51m46cw0RI/9F1o3D1cVR0/dogB
ip_addr: 10.2.0.7
Sample User Data Files for the IB-FLEX Grid Master
Following is a sample user data file for deploying an IB-FLEX Grid Master using the Flex Grid Activation license in the OpenStack environment:
...
nic_bonding_enabled: Y
bonding_failback_interface: lan1
mac:
mgmt: fa00:1600:3e5E:1400:3a53:aeAA
lan1: fa00:1600:3e5E:0100:2953:0bBB
ha: fa00:1600:3e5E:2500:4353:8aCC
lan2: fa00:1600:3e5E:8e00:2653:4cCC
Note |
---|
Note In case you are using mixed-interface support, use cloud-init with mac-the MAC address added to the user - data. |
Sample Commands for
...
Deploying an HA Pair
The following openstack server create
commands for Red Hat OpenStack platform are for deploying an HA pair in the OpenStack environment:
Execute Run the following command to spin up the active node:
openstack server create --config-drive=True --image=nios-79.30.05-305525-1420-160.qcow2 --flavor=vnios1420.160 --nic net-id=776f3ea4-9412-464a-b923-cf0c79e579f0 --nic
port-id=81345eaf-49dd-4ad1-a31c-32159ef4d948 --nic
port-id=99c73fc5-71ca-457a-a505-f40e85f88207 --user-data ./user-data-ha HA_active1
Once the active node is up and running, change the token value in the user-data file and execute run the following command to create the passive node:openstack server create --config-drive True --image nios-79.30.05-Alpha-305525-1420-160.qcow2 --flavor vnios1420.160 --nic net-id=776f3ea4-9412-464a-b923-cf0c79e579f0 --nic
port-id=ddd57167-2173-4f11-860b-c4efb9ddd3d6 --nic
port-id=07b9df9b-0bb3-4ddd-9ede-850bf3a27671 --user-data ./user-data-ha HA_passive1
...