Quick and Solid - Baremetal on OpenStack | Rico Lin

1. Ric Lin
Technical Committee Member @ OpenStack
Software Engineer @ EasyStack
irc: ricolin <ricolky@gmail.com>
Quick and Solid -
Baremetal on penStack
LINK: bit.ly/2N7XXdv

2. Quick and Solid -
Baremetal on OpenStack
Rico Lin

4. $ openstack server create…
openstack server create
--flavor large
--network $net
--key-name $key
--image $image
--security-group $sg
web-server

5. $ openstack server create…
openstack server create
--flavor baremetal
--network $net
--key-name $key
--image $image
--security-group $sg
web-server

6. # ops create

7. # ops create --detail

9. Horizon
(UI)
Cinder
(volume)
Neutron
(Network)
Nova
(Compute)
Glance
(image)
Ironic
(baremetal)
Keystone
(Identity)
Heat(Orchestration
auth
provision
provide
image
provide
network
provide
volume
Bare
metal
UI

10. Clean up!!
# ops create --manually
PXE!!
IPMI!!
TFTP!! DHCP!!
GRUB!!
NBP!!
BMC!!
Power sync!!
WfM!!
BIOS!!
iSCSI!!
Multi Tenant
Network!!
SDN!!
SDS!! Deploy
Management!!
live cycle
Management!!
Inspect!! Enroll!!
Application Install and Config!!
Monitor and metering!!
Image management!!
Kernal!!
Ramdisk!!

11. $ openstack baremetal…
$ openstack server create…

12. $ openstack baremetal driver show ipmi
$ openstack baremetal node create --driver ipmi --resource-class
$CLASS_NAME
$ openstack baremetal port create $MAC_ADDRESS --node $NODE
$ openstack baremetal node validate $NODE
$ openstack baremetal node power on $NODE
$ openstack baremetal node manage $NODE
$ openstack baremetal introspection start $NODE
$ openstack baremetal node provide $NODE
$ openstack server create…

13. $ ob driver show ipmi
$ ob node create --driver ipmi --resource-class
$CLASS_NAME
$ ob port create $MAC_ADDRESS --node $NODE
$ ob node validate $NODE
$ ob node power on $NODE
$ ob node manage $NODE
$ ob introspection start $NODE
$ ob node provide $NODE
$ o server create …

14. # build your environment

15. # build your environment-Devstack
https://docs.openstack.org/ironic/latest/contribu
tor/ironic-multitenant-networking.html
+
IRONIC_AUTOMATED_CLEAN_ENABLED=False
IRONIC_IS_HARDWARE=False

16. # build your environment-Helm
https://github.com/openstack/openstack-
helm/tree/master/ironic
https://github.com/openstack/openstack-
helm/tree/master/tools/deployment/barem
etal
# tee ironic.yaml << EOF
labels:
node_selector_key: openstack-helm-node-class
node_selector_value: primary
network:
pxe:
device: "${OSH_IRONIC_PXE_DEV}"
neutron_provider_network: "${OSH_IRONIC_PXE_PYSNET}"
conf:
ironic:
DEFAULT:
debug: true
conductor:
automated_clean: "false"
deploy:
shred_final_overwrite_with_zeros: "false"
EOF
# helm upgrade --install ironic ./ironic
--namespace=openstack
--values=ironic.yaml
${OSH_EXTRA_HELM_ARGS}
${OSH_EXTRA_HELM_ARGS_IRONIC}

17. # CAUTION!

18. ● Power synchronize issue with thousands nodes
● Ironic PXE might not works with Ubuntu Bionic when the nf_conntrack_helper is disabled
○ Ironic need to conntrack for TFTP traffic
○ workaround: https://home.regit.org/netfilter-en/secure-use-of-helpers/
● Building RAID1 is known to not work with Dell BOSS cards using python-dracclient 1.4.0 or earlier.
Upgrade to python-dracclient 1.5.0 to use this feature.
● Support for IPv6 and iPXE is restricted and is unlikely to work in default scenarios and
configurations without external intervention. This is due to the way DHCPv6 and dnsmasq operate. At
present this issue is being tracked in story 2005402
● The library python-ilorest-library is a fork of the python-redfish-library and imported with same
name, hence conflict when together. python-redfish-library cannot be used when oneview hardware type
is in use.
● If you have two nodes or port groups with names that only differ in a .json suffix (for example, test
and test.json) you won’t be able to get, update or delete the one with the suffix via the
/v1/nodes/<node> endpoint (/v1/portgroups/<portgroup> for port groups). Similarly, the
/v1/heartbeat/<node> endpoint won’t work for the node with the suffix. To work around it, add one
more .json suffix (for example, use /v1/nodes/test for node test and /v1/nodes/test.json.json for
test.json). This issue will be addressed in one of the future API revisions.
● https://docs.openstack.org/releasenotes/ironic/
# CAUTION!

19. # rm -rf /

20. # undo ......
Restarting...

21. # devops creat --improve
--simplified

22. # echo $WHY ...
If you are not part of the solution…
You must be part of the problem…
#

23. Horizon
Cinder
Neutron
Nova Glance
Ironic
Keystone
Heat
auth
provision
provide
image
provide
network
provide
volume
Bare
metal
UI

24. Cinder
Neutron
Glance
Ironic
Keystone
auth
provision
provide
image
provide
network
provide
volume
Bare
metal

25. Neutron Glance
Ironic
Keystone
Bare
metal
auth
provision
provide
image
provide
network

26. Neutron Glance
Ironic Keystone
Bare
metal

27. $ openstack baremetal…
$ metalsmith deploy ...

28. FROM

29. TO
metalsmith deploy --image $bm-img --network $network --resource-class
baremetal --root-size 10
$ metalsmith deploy ...

30. TCs
Users/Ops
Ironic team
Baremetal SIG
https://www.openstack.org/BAREMETAL
Interrop WG

31. # devops creat --improve
--simplified --automatic

32. $ openstack stack create -t bm-group.yaml bmg-10nodes

33. Cinder
Neutron
Glance
Ironic
Keystone
auth
provision
provide
image
provide
network
provide
volume
Bare
metal

34. Heat
Cinder
Neutron
Glance
Ironic
Keystone
auth
provision
provide
image
provide
network
provide
volume
Bare
metal

35. $ openstack orchestration resource type liste
● OS::Ironic::Port
● OS::Ironic::PortGroup
● OS::Ironic::BaremetalAllocation
● OS::Ironic::BaremetalDeployment

36. $ openstack stack create -t bare-stack.yaml bo-1
● OS::Glance::WebImage
● OS::Neutron::Network
● OS::Cinder::Volume
● OS::Heat::AutoScalingGroup
○ OS::Neutron::Port
○ OS::Ironic::Port
○ OS::Ironic::BaremetalAllocation
○ OS::Ironic::BaremetalDeployment

37. Barbican
(secret management)
Heat (Orchestration)
# Multi cloud baremetal platform
https://docs.openstack.org/heat/latest/template_guide/multi-clouds.html
Heat REST
API call

38. # Is OpenStack Native for
Kubernetes?

39. # Metal3
(Metalkube)
https://github.com/metal3-io
Demo:
OpenStack Ironic and Bare Metal Infrastructure All Abstractions Start
Somewhere
https://www.youtube.com/watch?v=Nzq2S53nk9U
https://github.com/hogepodge/container-ironic
cluster-api-provider-baremetal
https://github.com/metal3-io/cluster-api-provider-
baremetal

40. Providers
cluster-api-provider-baremetal
https://github.com/metal3-io/cluster-api-provider-
baremetal
cluster-api-provider-openstack
https://github.com/kubernetes-sigs/cluster-api-pro
vider-openstack

41. Case: Autoscaling

42. Kubernetes
Case: Autoscaling
OpenStack/Magnum
K8s/Autoscaler
OpenStack Cloud Provider
Kubernetes nodes
K8s config
K8s Services config
K8s Autoscaler config

43. # Auto-Scaling?
https://docs.openstack.org/auto-scaling-sig/latest/
https://storyboard.openstack.org/#!/project/openstack/auto-scaling
-sig
# Self Healing?
https://docs.openstack.org/self-healing-sig/latest/
https://storyboard.openstack.org/#!/project/openstack/self-healing
-sig

44. # echo "$question: $answer"
Slide: bit.ly/32meoZ0
irc: ricolin <rico.lin.guanyu@gmail.com>

45. # shutdown -h now
Woo!Hoo!