Eduardo Gonzalez e516ea5099 Integrate designate with neutron

Integrate designate service with neutron to allow instances
and floatingip resolve designate dns.
MDNS service need to be reachable from nova instances
in order to resolve DNS queries.
Added new dns_interface to make this configurable.
Add designate guide.

Closes-Bug: #1661330

Change-Id: I5a2ac5cf2a9aa0977ae42d53dd64699623ddf3ed

2017-02-03 11:06:59 +00:00

3.9 KiB

Raw Blame History

Designate in Kolla

Overview

Designate provides DNSaaS services for OpenStack:

REST API for domain/record management

Multi-tenant

Integrated with Keystone for authentication

Framework in place to integrate with Nova and Neutron notifications (for auto-generated records)

Support for PowerDNS and Bind9 out of the box

Configuration on Kolla deployment

Enable Designate service in /etc/kolla/globals.yml

enable_designate: "yes"

Configure Designate options in /etc/kolla/globals.yml

Important

Designate MDNS node requires the dns_interface to be reachable from public network.

dns_interface: "eth1"
designate_backend: "bind9"
designate_ns_record: "sample.openstack.org"

Neutron and Nova Integration

Create default Designate Zone for Neutron:

$ openstack zone create --email admin@sample.openstack.org sample.openstack.org.

Create designate-sink custom configuration folder:

$ mkdir -p /etc/kolla/config/designate/designate-sink/

Append Designate Zone ID in /etc/kolla/config/designate/designate-sink.conf

[handler:nova_fixed]
zone_id = <ZONE_ID>
[handler:neutron_floatingip]
zone_id = <ZONE_ID>

Reconfigure Designate:

$ kolla-ansible reconfigure -i <INVENTORY_FILE> --tags designate

Verify operation

List available networks:

$ neutron net-list

Associate a domain to a network:

$ neutron net-update <NETWORK_ID> --dns_domain sample.openstack.org.

Start an instance:

$ openstack server create \
  --image cirros \
  --flavor m1.tiny \
  --key-name mykey \
  --nic net-id=${NETWORK_ID} \
  my-vm

Check DNS records in Designate:

$ designate record-list sample.openstack.org.
+--------------------------------------+------+---------------------------------------+---------------------------------------------+
| id                                   | type | name                                  | data                                        |
+--------------------------------------+------+---------------------------------------+---------------------------------------------+
| 5aec6f5b-2121-4a2e-90d7-9e4509f79506 | SOA  | sample.openstack.org.                 | sample.openstack.org.                       |
|                                      |      |                                       | admin.sample.openstack.org. 1485266928 3514 |
|                                      |      |                                       | 600 86400 3600                              |
| 578dc94a-df74-4086-a352-a3b2db9233ae | NS   | sample.openstack.org.                 | sample.openstack.org.                       |
| de9ff01e-e9ef-4a0f-88ed-6ec5ecabd315 | A    | 192-168-190-232.sample.openstack.org. | 192.168.190.232                             |
| f67645ee-829c-4154-a988-75341050a8d6 | A    | my-vm.None.sample.openstack.org.      | 192.168.190.232                             |
| e5623d73-4f9f-4b54-9045-b148e0c3342d | A    | my-vm.sample.openstack.org.           | 192.168.190.232                             |
+--------------------------------------+------+---------------------------------------+---------------------------------------------+

Query instance DNS information to Designate dns_interface IP address:

$ dig +short -p 5354 @<DNS_INTERFACE_IP> my-vm.sample.openstack.org. A
192.168.190.232

For more information about how Designate works, see Designate, a DNSaaS component for OpenStack.

3.9 KiB Raw Blame History