gistfile1.txt

## /etc/openstack_ansible/conf.d

#c1_hosts.yml
---
c1_hosts:
      c1:
        ip: 172.29.236.11
        
#h1_hosts.yml    
---
h1_hosts:
      h1:
        ip: 172.29.236.21
        
#h2_hosts.yml        
---
h2_hosts:
      h2:
        ip: 172.29.236.22


## /etc/openstack_ansible/env.d

# c1.yaml
---
physical_skel:
  c1_containers:
    belongs_to:
      - all_containers
  c1_hosts:
    belongs_to:
      - hosts

# h1.yaml
---
physical_skel:
  h1_containers:
    belongs_to:
      - all_containers
  h1_hosts:
    belongs_to:
      - hosts

#h2.yaml
---
physical_skel:
  h2_containers:
    belongs_to:
      - all_containers
  h2_hosts:
    belongs_to:
      - hosts

## user_variables.yaml 

debug: false
install_method: source
haproxy_keepalived_internal_vip_cidr: "172.29.236.9/22"
haproxy_keepalived_external_vip_cidr: "x.x.x.200/27"
haproxy_keepalived_external_interface: "br-vlan"
haproxy_keepalived_internal_interface: "br-mgmt"
haproxy_keepalived_external_virtual_router_id: 131
haproxy_keepalived_internal_virtual_router_id: 171
nova_nova_conf_overrides:
  DEFAULT:
    force_config_drive: true
    resume_guests_state_on_host_boot: true
    cpu_allocation_ratio: 8.0
    disk_allocation_ratio: 2.0
  filter_scheduler:
    ram_weight_multiplier: -1.0

neutron_ml2_drivers_type: "vxlan,vlan,flat,local"
haproxy_ssl_self_signed_regen: false
haproxy_user_ssl_cert: /opt/ssl/cert.pem
haproxy_user_ssl_key: /opt/ssl/cert.key
openstack_domain: "cloud.domain.com"
dhcp_domain: "cloud.domain.com"
cinder_backends:
   lvm:
     volume_group: cinder
     volume_driver: cinder.volume.drivers.lvm.LVMVolumeDriver
     volume_backend_name: LVM_iSCSI



### user_config 
---
cidr_networks:
  container: 172.29.236.0/22
  tunnel: 172.29.240.0/22
  storage: 172.29.244.0/22

used_ips:
  - "172.29.236.1,172.29.236.50"
  - "172.29.240.1,172.29.240.50"
  - "172.29.244.1,172.29.244.50"
  - "172.29.248.1,172.29.248.50"

global_overrides:
  internal_lb_vip_address: 172.29.236.9
  #
  # The below domain name must resolve to an IP address
  # in the CIDR specified in haproxy_keepalived_external_vip_cidr.
  # If using different protocols (https/http) for the public/internal
  # endpoints the two addresses must be different.
  #
  external_lb_vip_address: cloud.domain.com
  management_bridge: "br-mgmt"
  provider_networks:
    - network:
        container_bridge: "br-mgmt"
        container_type: "veth"
        container_interface: "eth1"
        ip_from_q: "container"
        type: "raw"
        group_binds:
          - all_containers
          - hosts
        is_container_address: true
    - network:
        container_bridge: "br-vxlan"
        container_type: "veth"
        container_interface: "eth10"
        ip_from_q: "tunnel"
        type: "vxlan"
        range: "1000:9999"
        net_name: "vxlan"
        group_binds:
          - neutron_linuxbridge_agent
    - network:
        container_bridge: "br-vlan"
        container_type: "veth"
        container_interface: "eth12"
        host_bind_override: "enp6s0"
        type: "flat"
        net_name: "flat"
        group_binds:
          - c1_hosts
    - network:
        container_bridge: "br-vlan"
        container_type: "veth"
        container_interface: "eth12"
        host_bind_override: "eno1"
        type: "flat"
        net_name: "flat"
        group_binds:
          - h1_hosts
    - network:
        container_bridge: "br-vlan"
        container_type: "veth"
        container_interface: "eth12"
        host_bind_override: "enp1s0f0"
        type: "flat"
        net_name: "flat"
        group_binds:
          - h2_hosts
    - network:
        container_bridge: "br-vlan"
        container_type: "veth"
        container_interface: "eth11"
        type: "vlan"
        range: "1:4050"
        net_name: "vlan"
        group_binds:
          - neutron_linuxbridge_agent
    - network:
        container_bridge: "br-storage"
        container_type: "veth"
        container_interface: "eth2"
        ip_from_q: "storage"
        type: "raw"
        group_binds:
          - glance_api
          - cinder_api
          - cinder_volume
          - nova_compute


shared-infra_hosts:
  c1:
    ip: 172.29.236.11
    container_vars:
      # Optional | Example setting the container_tech for a target host.
      container_tech: lxc

repo-infra_hosts:
  c1:
    ip: 172.29.236.11
haproxy_hosts:
  c1:
    ip: 172.29.236.11



identity_hosts:
  c1:
    ip: 172.29.236.11
storage-infra_hosts:
  c1:
    ip: 172.29.236.11
image_hosts:
  c1:
    ip: 172.29.236.11
    container_vars:
      limit_container_types: glance
      glance_nfs_client:
        - server: "172.29.244.11"
          remote_path: "/srv/openstack/glance"
          local_path: "/var/lib/glance/images"
          type: "nfs"
          options: "_netdev,auto"

placement-infra_hosts:
  c1:
    ip: 172.29.236.11

compute-infra_hosts:
  c1:
    ip: 172.29.236.11

orchestration_hosts:
  c1:
    ip: 172.29.236.11

dashboard_hosts:
  c1:
    ip: 172.29.236.11

network_hosts:
  c1:
    ip: 172.29.236.11



compute_hosts:
  h1:
    ip: 172.29.236.21
  h2:
    ip: 172.29.236.22


storage_hosts:
  h1:
    ip: 172.29.236.21
    container_vars:
      cinder_backends:
         lvm:
           volume_backend_name: LVM_iSCSI
           volume_driver: cinder.volume.drivers.lvm.LVMVolumeDriver
           volume_group: cinder
           iscsi_ip_address: "{{ storage_address }}"
         limit_container_types: cinder_volume


###  created a flat network 

openstack network create --share --external --provider-physical-network flat   --provider-network-tpe flat  ext-direct  
openstack subnet create --network 8f97f029-de8b-4016-81db-2c352c-a8a809  --allocation-pool start=x.
x.x.201,end=x.x.x.222 --dns-nameserver 8.8.8.8 --gateway  x.x.x.193 flat --subnet-range  
x.x.x.192/27 

## created a new instance on this network 

its in h2 

root@h2:~# brctl show
bridge name     bridge id               STP enabled     interfaces
br-mgmt         8000.b29a6817dba3       no              vlan51
br-storage              8000.4ad49104370f       no              vlan53
br-vlan         8000.327352d464e5       no              enp1s0f0
br-vxlan                8000.ceb247aa98e9       no              vlan52
brq7a35c0b0-fb          8000.561877a45d47       no              vxlan-1000

brq8f97f029-de          8000.fe163ea77786       no              tapce0c32e7-0c   ## this is the TAP network