OpenStack Ussuri版安装系列—8.控制节点-Horizon服务组件

666 阅读6分钟

这是我参与11月更文挑战的第14天,活动详情查看:2021最后一次更文挑战


控制节点Horizon服务组件安装

OpenStack部署系列文章
OpenStack Victoria版 安装部署系列教程
OpenStack Ussuri版 离线安装部署系列教程(全)
OpenStack Train版 离线安装部署系列教程(全)
欢迎留言沟通,共同进步。

官方参考链接

OpenStack安装指南:Install OpenStack services

OpenStack Ussuri Installation Guides

HorizonInstallation Guide

CSDN博客

10 Openstack-Ussuri-Dashboard部署-centos8

8.控制节点-Horizon服务组件


@TOC


一、服务说明

OpenStack仪表板Dashboard服务的项目名称是Horizon,它所需的唯一服务是身份服务keystone,开发语言是python的web框架Django。
从Stein版本开始,Horizon支持以下服务:

  • cinder:块状存储
  • glance:镜像管理
  • neutron:网络
  • nova:计算
  • swift:对象存储

如果已配置好服务keystone的endpoint,那么Horizon将对其进行检测并自动启用其支持。
Horizon还通过插件支持更多其他OpenStack服务。

Django 2.0和2.2支持在Train版本中处于试验阶段 Ussuri发行版(Train发行版之后的下一个发行版)将使用Django 2.2作为主要的Django版本。Django 2.0支持将被删除。

注:
①可以选择在计算节点(compute01)上安装仪表板服务horizon。由于horizon运行需要apache,为了不影响控制节点上的keystone等其他服务使用的apache,亦可在计算节点上安装。
②安装之前确认以前安装的服务是否正常启动。

③本系列教程是在控制节点安装。

二、安装与配置dashboard相关软件

yum install openstack-dashboard -y

三、配置文件修改

1.local_settings

文件路径:/etc/openstack-dashboard/local_settings

备份文件

cp /etc/openstack-dashboard/local_settings /etc/openstack-dashboard/local_settings.bak

【注意】:在实际的部署过程中采用的是方法三

检查确认有以下配置

方法一

在实际的部署过程中采用的是方法三,方法一中的网络相关配置需要结合实际情况进行配置True与False。

vim /etc/openstack-dashboard/local_settings
ALLOWED_HOSTS = ['*', ]
SESSION_ENGINE = 'django.contrib.sessions.backends.cache'
OPENSTACK_API_VERSIONS = {
    "identity": 3,
    "image": 2,
    "volume": 2,
}
OPENSTACK_HOST = "controller"
OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"
OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "default"

CACHES = {
    'default': {
         'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',
         'LOCATION': 'controller:11211',
    }
}

OPENSTACK_NEUTRON_NETWORK = {
    'enable_router': False,
    'enable_quotas': False,
    'enable_distributed_router': False,
    'enable_ha_router': False,
    'enable_fip_topology_check': False,
    'enable_lb': False,
    'enable_firewall': False,
    'enable_vpn': False,
}

TIME_ZONE = "Asia/Shanghai"

方法二

# 其他方式
sed -i.bak '/^OPENSTACK_HOST/s#127.0.0.1#controller#' /etc/openstack-dashboard/local_settings
sed -i '/^OPENSTACK_KEYSTONE_DEFAULT_ROLE/s#".*"#"user"#' /etc/openstack-dashboard/local_settings
sed -i "/^ALLOWED_HOSTS/s#\[.*\]#['*']#" /etc/openstack-dashboard/local_settings
sed -i '/^#SESSION_ENGINE/s/#//' /etc/openstack-dashboard/local_settings
sed -i "/^SESSION_ENGINE/s#'.*'#'django.contrib.sessions.backends.cache'#" /etc/openstack-dashboard/local_settings

OPENSTACK_KEYSTONE_BACKEND = {
215     'name': 'native',
216     'can_edit_user': True,
217     'can_edit_group': True,
218     'can_edit_project': True,
219     'can_edit_domain': True,
220     'can_edit_role': True,
221 }

注:注意一些python语法格式。

方法三

将配置文件写好,先备份原文件,然后直接替换。

cp -a /etc/openstack-dashboard/local_settings{,.bak}
/bin/cp -rf  ./local_settings /etc/openstack-dashboard/local_settings

修改对应项

------
#官网少了这步,注意添加
WEBROOT = '/dashboard/'

OPENSTACK_HOST = "controller"
ALLOWED_HOSTS = ['*']
SESSION_ENGINE = 'django.contrib.sessions.backends.cache'

CACHES = {
    'default': {
         'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',
         'LOCATION': 'controller:11211',
    }
}

#按官网写的会有报错,要改成以下这样
OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST

OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True

OPENSTACK_API_VERSIONS = {
    "identity": 3,
    "image": 2,
    "volume": 3,
}

OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"

OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"

OPENSTACK_NEUTRON_NETWORK = {
    'enable_router': True,
    'enable_quotas': True,
    'enable_ipv6': False,
    'enable_distributed_router': False,
    'enable_ha_router': False,
    'enable_lb': False,
    'enable_firewall': False,
    'enable_vpn': False,
    'enable_fip_topology_check': False,
}

TIME_ZONE = "Asia/Shanghai"

------

2.openstack-dashboard.conf

/etc/httpd/conf.d/openstack-dashboard.conf
如果没有则新添加

vim /etc/httpd/conf.d/openstack-dashboard.conf
#add follow
WSGIApplicationGroup %{GLOBAL}

3.重启Apache服务、会话存储服务

systemctl restart httpd.service memcached.service
systemctl status httpd.service memcached.service
#由于dashboard的运行机制是把网站下的所有文件删除之后再重新复制,所以重启httpd需要等待一段时间。  

4.检查dashboard是否可用

浏览器直接访问:http://192.168.232.101 地址后面不需要加dashboard。
是否需要输入域default取决于,/etc/openstack-dashboard/local_settings文件中进行OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT内容配置值
域:default;用户名:admin;密码:admin。

四、Dashboard访问问题

此时,dashboard虽可以访问,且url中不需要输入dashboard,但是在进行系统的项目管理的时候打不开页面会报错。

1.重建openstack-dashboard.conf

下面将重建并修改配置openstack-dashboard.conf。

# sw 'Rebuild openstack-dashboard.conf'
cd /usr/share/openstack-dashboard
python manage.py make_web_conf --apache > /etc/httpd/conf.d/openstack-dashboard.conf

ln -s /etc/openstack-dashboard /usr/share/openstack-dashboard/openstack_dashboard/conf

cp -a /usr/share/openstack-dashboard/openstack_dashboard/defaults.py{,.bak}
cp -a /usr/share/openstack-dashboard/openstack_dashboard/test/settings.py{,.bak}
cp -a /usr/share/openstack-dashboard/static/dashboard/js/9937cc9f2cae.js{,.bak}

# sw 'Change WEBROOT'
#vim /usr/share/openstack-dashboard/openstack_dashboard/defaults.py
#line32
#WEBROOT = '/'  # from openstack_auth
sed -i "32c WEBROOT = '/dashboard'  # from openstack_auth" /usr/share/openstack-dashboard/openstack_dashboard/defaults.py

#vim /usr/share/openstack-dashboard/openstack_dashboard/test/settings.py
#line32
#WEBROOT = '/'
sed -i "32c WEBROOT = '/dashboard'" /usr/share/openstack-dashboard/openstack_dashboard/test/settings.py

#vim /usr/share/openstack-dashboard/static/dashboard/js/9937cc9f2cae.js
#line1
#var STATIC_URL="/dashboard/static/";var WEBROOT="/";/*!
sed -i '1c var STATIC_URL="/dashboard/static/";var WEBROOT="/dashboard/";/*!' /usr/share/openstack-dashboard/static/dashboard/js/9937cc9f2cae.js

# sw 'Configuration of /etc/httpd/conf.d/openstack-dashboard.conf'
cp -a  /etc/httpd/conf.d/openstack-dashboard.conf{,.bak}
#sed -in '3a WSGIApplicationGroup %{GLOBAL}' /etc/httpd/conf.d/openstack-dashboard.conf
sed -i '19c WSGIScriptAlias /dashboard /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi' /etc/httpd/conf.d/openstack-dashboard.conf
sed -i '20c WSGIScriptAlias / /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi' /etc/httpd/conf.d/openstack-dashboard.conf
sed -i '25c Alias /dashboard/static /usr/share/openstack-dashboard/static' /etc/httpd/conf.d/openstack-dashboard.conf

2.重启Apache服务、会话存储服务

systemctl restart httpd.service memcached.service
systemctl status httpd.service memcached.service
[root@controller ~]# cd
[root@controller ~]# source admin-openrc.sh
[root@controller ~]# openstack flavor create --id 0 --vcpus 1 --ram 256 --disk 0 1U256M0G
+----------------------------+----------+
| Field                      | Value    |
+----------------------------+----------+
| OS-FLV-DISABLED:disabled   | False    |
| OS-FLV-EXT-DATA:ephemeral  | 0        |
| disk                       | 0        |
| id                         | 0        |
| name                       | 1U256M0G |
| os-flavor-access:is_public | True     |
| properties                 |          |
| ram                        | 256      |
| rxtx_factor                | 1.0      |
| swap                       |          |
| vcpus                      | 1        |
+----------------------------+----------+
[root@controller ~]# openstack flavor create --id 1 --vcpus 1 --ram 1024 --disk 0 1U1GM0G
+----------------------------+---------+
| Field                      | Value   |
+----------------------------+---------+
| OS-FLV-DISABLED:disabled   | False   |
| OS-FLV-EXT-DATA:ephemeral  | 0       |
| disk                       | 0       |
| id                         | 1       |
| name                       | 1U1GM0G |
| os-flavor-access:is_public | True    |
| properties                 |         |
| ram                        | 1024    |
| rxtx_factor                | 1.0     |
| swap                       |         |
| vcpus                      | 1       |
+----------------------------+---------+
[root@controller ~]# openstack flavor list
+----+----------+------+------+-----------+-------+-----------+
| ID | Name     |  RAM | Disk | Ephemeral | VCPUs | Is Public |
+----+----------+------+------+-----------+-------+-----------+
| 0  | 1U256M0G |  256 |    0 |         0 |     1 | True      |
| 1  | 1U1GM0G  | 1024 |    0 |         0 |     1 | True      |
+----+----------+------+------+-----------+-------+-----------+
[root@controller ~]#

至此,可以访问 echo 'http://controller:80/dashboard' echo '域:default' echo '用户名:admin' echo "密码:"${ADMIN_PASS}""

五、官方步骤安装Train版本,常见问题

1.参考链接

blog.csdn.net/weixin_2873…

www.cnblogs.com/omgasw/p/11…

blog.51cto.com/11694088/24…

yinwucheng.com/?p=478

yinwucheng.com/?p=489

www.cnblogs.com/omgasw/p/12…

blog.csdn.net/weixin_4275…

2.访问/dashboard后跳转到/auth/login报404(操作下面2步可以解决dashboard访问404问题,请跳过此步骤)

解决方法:重建Apache服务的dashboard配置文件

cd /usr/share/openstack-dashboard
python manage.py make_web_conf --apache > /etc/httpd/conf.d/openstack-dashboard.conf

3..登录到dashboard将出现权限错误

解决方法如下:建立策略文件(policy.json)的软链接

ln -s /etc/openstack-dashboard /usr/share/openstack-dashboard/openstack_dashboard/conf

4.身份管理里面的项目、用户、组和角色都无法打开

日志提示:Daemon process called 'keystone-public' cannot be accessed by this WSGI application: /usr/bin/keystone-wsgi-public
编辑以下文件,找到WEBROOT = '/' 修改为WEBROOT = '/dashboard' (官方未提及坑点之一)

vim /usr/share/openstack-dashboard/openstack_dashboard/defaults.py
vim /usr/share/openstack-dashboard/openstack_dashboard/test/settings.py
vim /usr/share/openstack-dashboard/static/dashboard/js/9937cc9f2cae.js

重启Apache服务、会话存储服务

systemctl restart httpd.service memcached.service
systemctl status httpd.service memcached.service

检查dashboard是否可用 浏览器直接访问:http://192.168.232.101 地址后面不需要加dashboard。
是否需要输入域default取决于,/etc/openstack-dashboard/local_settings文件中进行OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT内容配置值
域:default;用户名:admin;密码:admin。

修改WEBROOT

  737  2020/04/26-14:17:43 by root: vim /usr/share/openstack-dashboard/static/dashboard/js/9937cc9f2cae.js
  738  2020/04/26-14:18:18 by root: vim /usr/share/openstack-dashboard/static/dashboard/js/64d85423c263.js
  739  2020/04/26-14:18:29 by root: vim /usr/share/openstack-dashboard/static/dashboard/js/b5e88d434bd1.js

修改httpd

  741  2020/04/26-14:19:45 by root: vim /etc/httpd/conf.d/openstack-dashboard.conf
#    WSGIScriptAlias / /usr/share/openstack-dashboard/openstack_dashboard/wsgi.py
    WSGIScriptAlias /dashboard /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi
    WSGIScriptAlias / /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi
#    Alias /static /usr/share/openstack-dashboard/static
     Alias /dashboard/static /usr/share/openstack-dashboard/static

修改local_settings

749  2020/04/26-14:26:50 by root: vim /etc/openstack-dashboard/local_settings

中的角色配置要与建立相关。
5.项目角色问题,keystone创建的时候角色名称修改为_member_