contrail hybrid k8s openstack ^#1

By juniper-os-software
stable

Supports: bionic

Sample bundle to deploy Contrail with K8s and Openstack with authorization k8s pods on keystone.

Contribute

Project homepage

Submit a bug

Files

Download .zip

Bundle configuration

cassandra-jvm-extra-opts

-Xms1g -Xmx2g

cassandra-minimum-diskgb

4

log-level

SYS_DEBUG

auth-mode

rbac

cassandra-jvm-extra-opts

-Xms1g -Xmx2g

cassandra-minimum-diskgb

4

log-level

SYS_DEBUG

contrail keystone auth

cluster_name

k8s

ip_fabric_forwarding

True

log-level

SYS_DEBUG

service_subnets

10.96.0.0/12

contrail openstack

docker_runtime

custom

docker_runtime_key_url

https://download.docker.com/linux/ubuntu/gpg

docker_runtime_package

docker-ce

docker_runtime_repo

deb [arch={ARCH}] https://download.docker.com/linux/ubuntu {CODE} stable

easyrsa

admin-password

contrail123

admin-role

admin

debug

True

openstack-origin

distro

preferred-api-version

3

authorization-mode

Node,RBAC

channel

1.18/stable

enable-dashboard-addons

False

enable-keystone-authorization

True

enable-metrics

False

keystone-policy

apiVersion: v1 kind: ConfigMap metadata: name: k8s-auth-policy namespace: kube-system labels: k8s-app: k8s-keystone-auth data: policies: | [ { "resource": { "verbs": ["get", "list", "watch"], "resources": ["*"], "version": "*", "namespace": "*" }, "match": [ { "type": "role", "values": ["*"] }, { "type": "project", "values": ["k8s"] } ] }, { "resource": { "verbs": ["*"], "resources": ["*"], "version": "*", "namespace": "myproject" }, "match": [ { "type": "role", "values": ["*"] }, { "type": "project", "values": ["k8s-myproject"] } ] }, { "resource": { "verbs": ["*"], "resources": ["*"], "version": "*", "namespace": "*" }, "match": [ { "type": "role", "values": ["*"] }, { "type": "project", "values": ["admin"] } ] } ]

service-cidr

10.96.0.0/12

debug

True

manage-neutron-plugin-legacy-mode

False

neutron-security-groups

True

openstack-origin

distro

console-access-protocol

novnc

debug

True

network-manager

Neutron

openstack-origin

distro

debug

True

enable-live-migration

True

enable-resize

True

migration-auth-type

ssh

openstack-origin

distro

virt-type

qemu

ntp

rabbitmq server

ubuntu