1.7.3.3. 在 data plane 节点上配置隔离网络

流程

1. 使用所需的 VLAN 标签和 IPAM 配置来配置 NetConfig CR。例如：

   apiVersion: network.openstack.org/v1beta1
   kind: NetConfig
   metadata:
     name: netconfig
   spec:
     networks: 

   1

   
     - name: internalapi
       dnsDomain: internalapi.example.com
       subnets:
       - name: subnet1
         allocationRanges:
         - end: 172.17.0.250
           start: 172.17.0.100
         cidr: 172.17.0.0/24
         vlan: 20
     - name: storage
       dnsDomain: storage.example.com
       subnets:
       - name: subnet1
         allocationRanges:
         - end: 172.18.0.250
           start: 172.18.0.100
         cidr: 172.18.0.0/24
         vlan: 21
     - name: tenant
       dnsDomain: tenant.example.com
       subnets:
       - name: subnet1
         allocationRanges:
         - end: 172.19.0.250
           start: 172.19.0.100
         cidr: 172.19.0.0/24
         vlan: 22

   1

   网络 组成必须与源云配置匹配，以避免数据平面连接停机时间。

2. 可选：在 NetConfig CR 中，列出 allocationRanges 字段的多个范围来排除一些 IP 地址，例如，以适应被采用的环境消耗的 IP 地址：

   apiVersion: network.openstack.org/v1beta1
   kind: NetConfig
   metadata:
     name: netconfig
   spec:
     networks:
     - name: internalapi
       dnsDomain: internalapi.example.com
       subnets:
       - name: subnet1
         allocationRanges:
         - end: 172.17.0.199
           start: 172.17.0.100
         - end: 172.17.0.250
           start: 172.17.0.201
         cidr: 172.17.0.0/24
         vlan: 20

   本例从池中排除 172.17.0.200 地址。