OpenStack + Kubernetes: 搭建容器虚拟机组合云平台 qingyuanos 王昕 2016-4-21 提供虚拟机服务的意义 Ø 客户的需求不仅仅是更多的计算能力 Ø 安全性：更小的Attack Surface Ø 易于提供有状态服务 Ø 传统应用容易迁移 Ø Windows应用容易迁移 Ø 易于部署单体应用 Ø 用于桌面云 Ø 多服务单服务器部署 云平台技术的选择 RC：控制Pod的个数和Pod的生命周期 Ø Service：服务入口，由Kube-proxy支持负载均衡 Ø 原生负载均衡，高可用方案 Kubernetes所支持的存储卷类型 Kubernetes最新支持的资源类型 OpenStack和K8s的集成系统 支持跨IaaS部署K8s集群 网络集成方案的演变 IaaS层的物理网络架构 Management 衡，TCP可以透传TLS连接 Ø后端服务器都要有服务器证书 ØHAProxy认证模式 ØTLS服务器终点为HAProxy，后端连接为明文 TCP Ø要把服务器证书配置到HAProxy上 OpenStack里MySQL Galera 集群高可用 Ø问题 Ø异步多主多活情况下会出现数据 不一致 Ø同步多活情况下容易出现死锁 Ø解决方案 Ø改成同步一主两备模式 Kubernetes的PVC绑定问题

source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are 12 章 章 在 在 OPENSTACK 上安装 上安装 12.1. 准备在 OPENSTACK 上安装 12.2. 使用自定义配置在 OPENSTACK 上安装集群 12.3. 在带有 KURYR 的 OPENSTACK 上安装集群 12.4. 在支持 SR-IOV 连接的计算机器的 OPENSTACK 上安装集群 12.5. 在您自己的基础架构的 OPENSTACK 上安装集群 12.6

source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are 14. OpenShift Container Platform 的 Telemetry 访问 11.2.15. 后续步骤 第 第 12 章 章 在 在 OPENSTACK 上安装 上安装 12.1. 使用自定义配置在 OPENSTACK 上安装集群 12.1.1. 先决条件 12.1.2. 在 RHOSP 上安装 OpenShift Container Platform 的资源指南 1356

source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are 章 在 在 OPENSTACK 上安装 上安装 18.1. 准备在 OPENSTACK 上安装 18.2. 使用自定义在 OPENSTACK 上安装集群 18.3. 在带有 KURYR 的 OPENSTACK 上安装集群 18.4. 在支持 SR-IOV 连接的计算机器的 OPENSTACK 上安装集群 18.5. 在支持 OVS-DPDK 连接的计算机器的 OPENSTACK 上安装集群

source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are 5.7. AZURE DISK CSI DRIVER OPERATOR 5.8. GCP PD CSI DRIVER OPERATOR 5.9. OPENSTACK CINDER CSI DRIVER OPERATOR 5.10. OPENSTACK MANILA CSI DRIVER OPERATOR 5.11. RED HAT VIRTUALIZATION CSI DRIVER OPERATOR

source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are 22 章 章 在 在 OPENSTACK 上安装 上安装 22.1. 准备在 OPENSTACK 上安装 22.2. 准备在 OPENSTACK 上安装使用 SR-IOV 或 OVS-DPDK 的集群 22.3. 使用自定义在 OPENSTACK 上安装集群 22.4. 在带有 KURYR 的 OPENSTACK 上安装集群 22.5. 在您自己的基础架构的 OPENSTACK 上安装集群 22

source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are . . . . 5.18. IBM POWER VIRTUAL SERVER BLOCK CSI DRIVER OPERATOR 5.19. OPENSTACK CINDER CSI DRIVER OPERATOR 5.20. OPENSTACK MANILA CSI DRIVER OPERATOR 5.21. SECRET STORE CSI 驱动程序 5.22. VMWARE VSPHERE

source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are 21 章 章 在 在 OPENSTACK 上安装 上安装 21.1. 准备在 OPENSTACK 上安装 21.2. 准备在 OPENSTACK 上安装使用 SR-IOV 或 OVS-DPDK 的集群 21.3. 使用自定义在 OPENSTACK 上安装集群 21.4. 在带有 KURYR 的 OPENSTACK 上安装集群 21.5. 在您自己的基础架构的 OPENSTACK 上安装集群 21

source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are 启用了身份验证的红帽 REGISTRY 第 第 2 章 章 OPENSHIFT CONTAINER PLATFORM中的 中的IMAGE REGISTRY OPERATOR 2.1. 云平台和 OPENSTACK 上的镜像 REGISTRY 2.2. 裸机和 VSPHERE 上的镜像 REGISTRY 2.3. IMAGE REGISTRY OPERATOR 配置参数 2.4. 使用 CRD 启用 IMAGE

source or commercial project. The OpenStack ® Word Mark and OpenStack logo are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endorsed or sponsored by the OpenStack Foundation, or the OpenStack community. All other trademarks are 6. 在 IBM CLOUD 上创建计算机器集 2.7. 在 IBM POWER VIRTUAL SERVER 上创建计算机器集 2.8. 在 NUTANIX 上创建计算机器集 2.9. 在 OPENSTACK 上创建计算机器集 2.10. 在 VSPHERE 上创建计算机器设置 2.11. 在裸机上创建计算机器集 第 第 3 章 章 手 手动扩 动扩展 展计 计算机器集 算机器集 3.1. 先决条件