CloudFoundry部署(四)：CF部署
CloudFoundry部署之CF部署
一、CF部署
- 设置Bosh的target目标（为bosh的director的ip），并登陆
bosh target 192.168.2.28 bosh login 用户名：admin 密码：admin
- 上传stemcell，前面已经下载好直接上传即可
bosh upload stemcell ~/stemcells/bosh-stemcell-2375-vsphere-esxi-ubuntu.tgz
- 下载cf-release源代码
注：create release后源码包在releases目录下tgz格式，若已经下载好了164版本可以省略此步骤sudo mkdir -p ~/releases sudo chmod 777 -R ~/releases cd ~/releases git clone https://github.com/cloudfoundry/cf-release ./update git checkout v164 bosh create release releases/cf-164.yml - 上传下载好的源码包
bosh upload release releases/cf-164.tgz
- 若上传过程中出现Fail to create XXX package while uploading cf release due to HTTPClient::SendTimeoutError问题，则重试多次直到成功，该问题与网络环境相关
- 检查是否成功
bosh release
- 创建目录~/deployements/cloudfoundry01，编辑cloudfoudnry-myself.yml清单文件
uuuidsudo mkdir -p ~/deployemnts/cloudfoundry01 sudo chmod 777 -R ~/deployments/cloudfoundry01 cd ~/deployments/cloudfoundry01 vi cloudfoundry-myself.yml --- name: CFRELEASE02 director_uuid: fdd46e30-f2c5-41dc-9662-0976fdac5716 releases: - name: cf version: 171 meta: environment: null stemcell: name: bosh-vsphere-esxi-ubuntu version: 2366 compilation: workers: 2 cloud_properties: ram: 1024 disk: 6144 cpu: 2 network: default reuse_compilation_vms: true update: canaries: 1 #waiting for 60s to get update job status canary_watch_time: 30000 - 90000 update_watch_time: 30000 - 90000 max_in_flight: 4 max_errors: 4 networks: - name: default subnets: - range: 192.168.2.0/24 # Reserved IPs are the IPs that BOSH should not use in the declared range. reserved: # IP addresses which you don't want allocated by BOSH - 192.168.2.20 - 192.168.2.39 - 192.168.2.140 - 192.168.2.254 # IP addresses which you don't want allocated by BOSH - 192.168.2.2 - 192.168.2.10 # Static IPs are the IPs that are statically assigned to jobs in this manifest. The BOSH director does not attempt # to dynamically assign these to new VMs. static: - 192.168.2.40 - 192.168.2.100 gateway: 192.168.2.1 # If you configured your BOSH/micro-BOSH to enable DNS, leave the DNS section empty. The BOSH director automatically uses the # BOSH/micro-BOSH powerDNS IP. If any jobs ever need to resolve DNS entries outside the BOSH powerDNS subdomain # (*.microbosh by default), configure the powerDNS recursor in your bosh release. dns: - 192.168.2.2 cloud_properties: name: "VM Network" resource_pools: - name: small_z1 network: default size: 0 stemcell: name: bosh-vsphere-esxi-ubuntu version: 2366 cloud_properties: ram: 1024 disk: 2048 cpu: 1 - name: medium_z1 network: default size: 12 stemcell: name: bosh-vsphere-esxi-ubuntu version: 2366 cloud_properties: ram: 1024 disk: 2048 cpu: 1 - name: large_z1 network: default size: 1 stemcell: name: bosh-vsphere-esxi-ubuntu version: 2366 cloud_properties: ram: 16384 disk: 60000 cpu: 2 - name: runner_z1 network: default size: 1 stemcell: name: bosh-vsphere-esxi-ubuntu version: 2366 cloud_properties: ram: 16384 disk: 32768 cpu: 2 - name: router_z1 network: default size: 3 stemcell: name: bosh-vsphere-esxi-ubuntu version: 2366 cloud_properties: ram: 4096 disk: 20480 cpu: 2 jobs: - name: ha_proxy_z1 instances: 1 networks: - name: default static_ips: - 192.168.2.40 properties: ha_proxy: ssl_pem: '-----BEGIN CERTIFICATE----- MIICLzCCAZgCCQCSoIG3LoeSMTANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJV UzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xEDAOBgNVBAoT B1Bpdm90YWwxFjAUBgNVBAsTDUNsb3VkIEZvdW5kcnkwHhcNMTMxMDE3MjMxNzM5 WhcNMTQxMDE3MjMxNzM5WjBcMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAU BgNVBAcTDVNhbiBGcmFuY2lzY28xEDAOBgNVBAoTB1Bpdm90YWwxFjAUBgNVBAsT DUNsb3VkIEZvdW5kcnkwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANqyjJMH FDbJ4XM2vLRxz6i82Gd2Y2dnAKYgu67FgheHGQJSv38lvn8JrAOBXu2QJgP8sJa+ XqUWUTMo9BWvhvedQLojtcpLdULc0FhlIXn8bThGlTQyrSg9QJobhQZGziFVrdQM UZy4X+s6A2Szb9iOg3TYibnnfnuvdZli83eRAgMBAAEwDQYJKoZIhvcNAQEFBQAD gYEAbFu65WT+czpiJqHhNz5AnGYA8kieVlV7KhcljLtsU4Sxut5Vq9uXFBE09KCg YkyZ9KfzXArTeRCfcbm5xq12I+1nf6q0QjT1y3P6ztax0rpyb0i+4GWvA+ruMhfx n4QM1MkiJVYBGKkXFZDd1zsdR3pY4vm1uiMY75IvJQfgb08= -----END CERTIFICATE----- -----BEGIN RSA PRIVATE KEY----- MIICXQIBAAKBgQDasoyTBxQ2yeFzNry0cc+ovNhndmNnZwCmILuuxYIXhxkCUr9/ Jb5/CawDgV7tkCYD/LCWvl6lFlEzKPQVr4b3nUC6I7XKS3VC3NBYZSF5/G04RpU0 Mq0oPUCaG4UGRs4hVa3UDFGcuF/rOgNks2/YjoN02Im55357r3WZYvN3kQIDAQAB AoGAa88G81fTBCtDA1vhbIaKWuE1QNOgrxGcxUhvnPlqZxTHJFkMY66EmPV4oYW9 +RhNVTvVBYq092boAnNW1/Xebvrk1SnBDkrLntnGPmExkatOkPTFFlNXfePu6qOJ ULwYg8rKRwpvLoQXxbzMDXApPBifBNWGHVneGuHLpwPEQgECQQD0IJOecEyorrCR 6+wmJBS/IwqQO0Ooj7kZEg65MHi9exVe+XFvP0lW2NAUsDuBLz79hjslSqIJjRG8 c6q36oqhAkEA5VVeEip+T4DV12I5A5maGexVMeC92K7EGU/H8YhltxVZ/RtNngdT 3r19WeDbDF7R5CJy2f7AYullk3S6fkk28QJBALdEiW1k4rezRMyW7tYHOifvN2vl gbpWAt/GRZVSxSGB+B4vZq/cM8NlynftgQ5PGJucnGQ3bgN7irgNoTimc2ECQFMX QBMy5DroAhKcmu2r/IKB90gwFnjosVI+bsIbWkcgbE9hUhj8rK2aWE11Q8hSnpea x6QmQgxUZiIr+9n/qvECQQDiDIeSmo2mRYsaqr4CQ3Ak+EDjsm9XTpXHuqm+xgFO iDIeQCWd3/twqdDTR7FaDE7Q0i559u7A1yLumUn8caLF -----END RSA PRIVATE KEY-----' networks: apps: default management: default release: cf resource_pool: router_z1 template: haproxy - name: nats instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.43 persistent_disk: 10024 templates: - name: nats release: cf - name: nats_stream_forwarder release: cf properties: syslog_aggregator: address: 192.168.2.46 port: 5632 all: false transport: "tcp" networks: apps: default management: default nats: address: 192.168.2.43 user: nats password: c1oudc0w port: 4222 authorization_timeout: 15 machines: - 192.168.2.43 debug: true trace: true monitor_port: 0 prof_port: 0 - name: syslog_aggregator instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.46 persistent_disk: 10024 templates: - name: syslog_aggregator release: cf properties: domain: acp.local syslog_aggregator: log_email: enabled: false from_email: [email protected] from_password: 1qazXSW@ to_email: [email protected] smtp_server: smtp.apusic.com smtp_port: 25 smtp_domain: APUSIC.com port: 5632 transport: "tcp" - name: etcd instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.41 persistent_disk: 10024 templates: - name: etcd release: cf - name: etcd_metrics_server release: cf properties: heartbeat_interval_in_milliseconds: 50 election_timeout_in_milliseconds: 1000 etcd: machines: - 192.168.2.41 etcd_metrics_server: etcd: machine: "127.0.0.1" port: 4001 nats: machines: - 192.168.2.43 port: 4222 username: nats password: c1oudc0w status: port: 5678 username: "" password: "" networks: apps: default management: default - name: loggregator instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.44 persistent_disk: 10024 templates: - name: loggregator release: cf properties: syslog_aggregator: address: 192.168.2.46 port: 5632 all: false transport: "tcp" loggregator: debug: false servers: z1: - 192.168.2.44 status: user: "" password: "" port: 0 maxRetainedLogMessages: 100 incoming_port: 3456 outgoing_port: 8080 loggregator_endpoint: shared_secret: c1oudc0w etcd: machines: - 192.168.2.41 ssl: skip_cert_verify: true networks: apps: default management: default - name: postgres instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.48 templates: - name: postgres release: cf persistent_disk: 4096 properties: db: databases databases: port: 5524 roles: - name: ccadmin password: admin tag: admin - name: uaaadmin password: admin tag: admin databases: - citext: true name: ccdb tag: cc - citext: true name: uaadb tag: uaa db_scheme: postgres - name: gorouter instances: 2 resource_pool: router_z1 networks: - name: default static_ips: - 192.168.2.47 - 192.168.2.50 templates: - name: gorouter release: cf properties: syslog_aggregator: address: 192.168.2.46 port: 5632 all: false transport: "tcp" loggregator_endpoint: host: 192.168.2.44 networks: apps: default management: default - name: uaa instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.42 templates: - name: uaa release: cf persistent_disk: 4096 properties: syslog_aggregator: address: 192.168.2.46 port: 5632 all: false transport: "tcp" networks: apps: default management: default - name: login instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.51 templates: - name: login release: cf persistent_disk: 4096 properties: syslog_aggregator: address: 192.168.2.46 port: 5632 all: false transport: "tcp" name: Login Server for the UAA login: protocol: http brand: oss uaa_certificate: null catalina_opts: -Xmx384m -XX:MaxPermSize=128m links: home: http://console.acp.local passwd: http://console.acp.local/password_resets/new signup: http://console.acp.local/register networks: apps: default management: default - name: dea_next instances: 1 resource_pool: runner_z1 networks: - name: default static_ips: - 192.168.2.49 templates: - name: dea_next release: cf - name: dea_logging_agent release: cf persistent_disk: 40960 properties: syslog_aggregator: address: 192.168.2.46 port: 5632 all: false transport: "tcp" loggregator_endpoint: host: 192.168.2.44 networks: apps: default management: default - name: dea_next_large instances: 1 resource_pool: large_z1 networks: - name: default static_ips: - 192.168.2.59 templates: - name: dea_next release: cf - name: dea_logging_agent release: cf persistent_disk: 60000 properties: syslog_aggregator: address: 192.168.2.46 port: 5632 all: false transport: "tcp" loggregator_endpoint: host: 192.168.2.44 networks: apps: default management: default - name: cloud_controller_ng instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.52 templates: - name: cloud_controller_ng release: cf persistent_disk: 4096 - name: cloud_controller_clock instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.53 templates: - name: cloud_controller_clock release: cf persistent_disk: 0 - name: cloud_controller_worker instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.54 templates: - name: cloud_controller_worker release: cf persistent_disk: 0 - name: loggregator_trafficcontroller instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.45 persistent_disk: 10024 templates: - name: loggregator_trafficcontroller release: cf properties: system_domain: acp.local syslog_aggregator: address: 192.168.2.46 port: 5632 traffic_controller: host: 192.168.2.45 zone: z1 loggregator: servers: z1: - 192.168.2.44 ssl: skip_cert_verify: true cc: srv_api_uri: https://api.acp.local networks: apps: default - name: hm9000 instances: 1 resource_pool: medium_z1 networks: - name: default static_ips: - 192.168.2.55 templates: - name: hm9000 release: cf persistent_disk: 4096 properties: syslog_aggregator: address: 192.168.2.46 port: 5632 all: false transport: "tcp" cc: srv_api_uri: https://api.acp.local ccng: bulk_api_user: "bulk_api" bulk_api_password: c1oudc0w etcd: machines: - 192.168.2.41 ssl: skip_cert_verify: true networks: apps: default management: default properties: system_domain: acp.local system_domain_organization: system_domain support_address: http://support.acp.local domain: acp.local app_domains: - acp.local description: "Cloud Foundry v2 sponsored by Pivotal" etcd: machines: - 192.168.2.41 networks: apps: default management: default ssl: skip_cert_verify: true nats: user: nats password: c1oudc0w port: 4222 machines: - 192.168.2.43 use_gnatsd: true router: servers: z1: - 192.168.2.47 z2: - 192.168.2.50 endpoint_timeout: 60 status: user: router password: c1oudc0w loggregator_endpoint: host: 192.168.2.44 shared_secret: c1oudc0w loggregator: servers: default: - 192.168.2.44 collector: datadog_api_key: "" datadog_application_key: "" deployment_name: CFRELEASE02 use_datadog: true use_tsdb: false disk_quota_enabled: false ccdb: &ccdb address: 192.168.2.48 databases: - citext: true name: ccdb tag: cc db_scheme: postgres port: 5524 roles: - name: ccadmin password: admin tag: admin ccdb_ng: *ccdb cc: &cc bulk_api_user: "bulk_api" bulk_api_password: c1oudc0w srv_api_uri: https://api.acp.local db_logging_level: debug2 ccng.logging_level: debug2 db_encryption_key: c1oudc0w quota_definitions: default: memory_limit: 10240 total_services: 100 non_basic_services_allowed: true total_routes: 1000 trial_db_allowed: true hm9000_noop: false staging_upload_user: uploaduser staging_upload_password: c1oudc0w install_buildpacks: - name: java_buildpack package: buildpack_java - name: ruby_buildpack package: buildpack_ruby - name: nodejs_buildpack package: buildpack_nodejs ccng: *cc uaa: admin: client_secret: c1oudc0w batch: password: batch-password username: batch-username catalina_opts: -Xmx384m -XX:MaxPermSize=128m cc: client_secret: c1oudc0w client: autoapprove: - cf clients: cc_service_broker_client: secret: c1oudc0w scope: cloud_controller.write,openid,cloud_controller.read,cloud_controller_service_permissions.read authorities: clients.read,clients.write,clients.admin authorized-grant-types: client_credentials cf: override: true authorized-grant-types: password,implicit,refresh_token authorities: uaa.none scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write access-token-validity: 7200 refresh-token-validity: 1209600 app-direct: access-token-validity: 1209600 authorities: app_direct_invoice.write authorized-grant-types: authorization_code,client_credentials,password,refresh_token,implicit override: true redirect-uri: http://console.acp.local refresh-token-validity: 1209600 secret: c1oudc0w #cc_service_broker_client: null developer_console: access-token-validity: 1209600 authorities: scim.write,scim.read,cloud_controller.read,cloud_controller.write,password.write,uaa.admin,uaa.resource,cloud_controller.admin,billing.admin authorized-grant-types: authorization_code,client_credentials override: true redirect-uri: http://console.acp.local/oauth/callback refresh-token-validity: 1209600 scope: openid,cloud_controller.read,cloud_controller.write,password.write,console.admin,console.support secret: c1oudc0w login: authorities: oauth.login authorized-grant-types: authorization_code,client_credentials,refresh_token override: true redirect-uri: http://login.acp.local scope: openid,oauth.approvals secret: c1oudc0w servicesmgmt: authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret authorized-grant-types: authorization_code,client_credentials,password,implicit autoapprove: true override: true redirect-uri: http://servicesmgmt.acp.local/auth/cloudfoundry/callback scope: openid,cloud_controller.read,cloud_controller.write secret: c1oudc0w space-mail: access-token-validity: 1209600 authorities: scim.read,scim.write,cloud_controller.admin authorized-grant-types: client_credentials override: true refresh-token-validity: 1209600 secret: c1oudc0w support-services: access-token-validity: 1209600 authorities: portal.users.read authorized-grant-types: authorization_code,client_credentials redirect-uri: http://support-signon.acp.local refresh-token-validity: 1209600 scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write secret: c1oudc0w jwt: signing_key: '-----BEGIN RSA PRIVATE KEY----- MIICXAIBAAKBgQDHFr+KICms+tuT1OXJwhCUmR2dKVy7psa8xzElSyzqx7oJyfJ1 JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMXqHxf+ZH9BL1gk9Y6kCnbM5R6 0gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBugspULZVNRxq7veq/fzwIDAQAB AoGBAJ8dRTQFhIllbHx4GLbpTQsWXJ6w4hZvskJKCLM/o8R4n+0W45pQ1xEiYKdA Z/DRcnjltylRImBD8XuLL8iYOQSZXNMb1h3g5/UGbUXLmCgQLOUUlnYt34QOQm+0 KvUqfMSFBbKMsYBAoQmNdTHBaz3dZa8ON9hh/f5TT8u0OWNRAkEA5opzsIXv+52J duc1VGyX3SwlxiE2dStW8wZqGiuLH142n6MKnkLU4ctNLiclw6BZePXFZYIK+AkE xQ+k16je5QJBAN0TIKMPWIbbHVr5rkdUqOyezlFFWYOwnMmw/BKa1d3zp54VP/P8 +5aQ2d4sMoKEOfdWH7UqMe3FszfYFvSu5KMCQFMYeFaaEEP7Jn8rGzfQ5HQd44ek lQJqmq6CE2BXbY/i34FuvPcKU70HEEygY6Y9d8J3o6zQ0K9SYNu+pcXt4lkCQA3h jJQQe5uEGJTExqed7jllQ0khFJzLMx0K6tj0NeeIzAaGCQz13oo2sCdeGRHO4aDh HH6Qlq/6UOV5wP8+GAcCQFgRCcB+hrje8hfEEefHcFpyKH+5g1Eu1k0mLrxK2zd+ 4SlotYRHgPCEubokb2S1zfZDWIXW3HmggnGgM949TlY= -----END RSA PRIVATE KEY-----' verification_key: '-----BEGIN PUBLIC KEY----- MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug spULZVNRxq7veq/fzwIDAQAB -----END PUBLIC KEY-----' #login: #addnew: false no_ssl: false scim: users: - admin|admin|scim.write,scim.read,openid,cloud_controller.admin url: http://uaa.acp.local uaadb: address: 192.168.2.48 databases: - citext: true name: uaadb tag: uaa db_scheme: postgresql port: 5524 roles: - name: uaaadmin password: admin tag: admin - 设置部署清单病执行部署
bosh deployment cloudfoundry01.yml bosh deploy
- 检查是否部署成功，vm都处于running状态
bosh vms