yuanying

[Service]
Environment="KUBELET_KUBECONFIG_ARGS=--kubeconfig=/etc/kubernetes/kubelet.conf --require-kubeconfig=true"
Environment="KUBELET_SYSTEM_PODS_ARGS=--pod-manifest-path=/etc/kubernetes/manifests --allow-privileged=true"
Environment="KUBELET_NETWORK_ARGS=--network-plugin=cni --cni-conf-dir=/etc/cni/net.d --cni-bin-dir=/opt/cni/bin"
Environment="KUBELET_DNS_ARGS=--cluster-dns=10.96.0.10 --cluster-domain=cluster.local"
Environment="KUBELET_AUTHZ_ARGS=--authorization-mode=Webhook --client-ca-file=/etc/kubernetes/pki/ca.crt"
ExecStart=
ExecStart=/usr/bin/kubelet $KUBELET_KUBECONFIG_ARGS $KUBELET_SYSTEM_PODS_ARGS $KUBELET_NETWORK_ARGS $KUBELET_DNS_ARGS $KUBELET_AUTHZ_ARGS $KUBELET_EXTRA_ARGS

yuanying

Delete Nova instace without Nova CLI

Delete virt domain directly

$ virsh destroy ${TARGET_DOMAIN_ID}
$ virsh undefine ${TARGET_DOMAIN_ID}
$ # And another work what you need...

Delete record from Nova DB

yuanying

--- nova.1.sql	2017-03-22 13:33:19.000000000 +0900
+++ nova.0.sql	2017-03-22 13:34:08.000000000 +0900
@@ -214,7 +214,7 @@
 
 LOCK TABLES `block_device_mapping` WRITE;
 /*!40000 ALTER TABLE `block_device_mapping` DISABLE KEYS */;
-INSERT INTO `block_device_mapping` VALUES ('2017-03-22 04:30:55','2017-03-22 04:31:04',NULL,1,'/dev/vda',0,NULL,'021cb653-9baa-46eb-8afc-6521fa7b8221',10,0,'{\"driver_volume_type\": \"iscsi\", \"connector\": {\"initiator\": \"iqn.1993-08.org.debian:01:8a32c33c9b41\", \"ip\": \"192.168.11.200\", \"platform\": \"x86_64\", \"host\": \"devstack\", \"os_type\": \"linux2\", \"multipath\": false}, \"serial\": \"021cb653-9baa-46eb-8afc-6521fa7b8221\", \"data\": {\"access_mode\": \"rw\", \"target_discovered\": false, \"encrypted\": false, \"qos_specs\": null, \"target_iqn\": \"iqn.2010-10.org.openstack:volume-021cb653-9baa-46eb-8afc-6521fa7b8221\", \"target_portal\": \"192.168.11.200:3260\", \"volume_id\": \"021cb653-9baa-46eb-8afc-6521fa7b8221\", \"target_lun\": 1, \"device_path\": \"/dev/di

yuanying

[[local|localrc]]
unset OS_CLOUD

#OFFLINE=True
RECLONE=True

#disable_service tempest
#disable_service horizon

enable_plugin heat https://git.openstack.org/openstack/heat

yuanying

Readme!!

Controller

sudo iptables -t nat -A POSTROUTING -o ens3 -j MASQUERADE
sudo mkdir - p /etc/neutron
sudo chown -R $USER /etc/neutron
echo "dhcp-option-force=26,1400" >> /etc/neutron/dnsmasq.conf
sudo mkdir /opt/stack

yuanying

(venv)[yuanying@Soloist] ~/Projects/OpenStack/python-magnumclient/.tox
 openssl genrsa -out /client.key 4096
Generating RSA private key, 512 bit long modulus
.....++++++++++++
...............++++++++++++
e is 65537 (0x10001)
(venv)[yuanying@Soloist] ~/Projects/OpenStack/python-magnumclient/.tox
 openssl req -new -days 1000 \
        -key "client.key" \
        -out "client.csr" \

yuanying

Install

Host side

Setup bridge

$ sudo su -
# apt-get update
# apt-get remove network-manager

apt-get install bridge-utils

yuanying

  kube_master:
    type: "OS::Nova::Server"
    properties:
      networks:
        - network: {get_param: fixed_network}

  kube_master_floating:
    type: "OS::Neutron::FloatingIP"
    properties:
      floating_network_id:

yuanying

Build a secure kubernetes api server

Add Security Group

$ nova secgroup-add-rule \
       k8sbay-wlun44ixfi2o-secgroup_kubernetes-ahsiqsc4vgqj \
       tcp 6443 6443 0.0.0.0/0

CA

yuanying

// Use Gists to store code you would like to remember later on
console.log(window); // log the "window" object to the console