CloudFoundry部署(四)：CF部署

CloudFoundry部署之CF部署

一、CF部署

1. 设置Bosh的target目标（为bosh的director的ip），并登陆
   

   bosh target 192.168.2.28bosh login用户名：admin 密码：admin

   
   
2. 上传stemcell，前面已经下载好直接上传即可
   

   <pre code_snippet_id="297750" snippet_file_name="blog_20140417_2_3143389" name="code" class="html">bosh upload stemcell ~/stemcells/bosh-stemcell-2375-vsphere-esxi-ubuntu.tgz

   

3. 下载cf-release源代码

   sudo mkdir -p ~/releasessudo chmod 777 -R ~/releasescd ~/releasesgit clone https://github.com/cloudfoundry/cf-release./updategit checkout v164bosh create release releases/cf-164.yml

   注：create release后源码包在releases目录下tgz格式，若已经下载好了164版本可以省略此步骤
4. 上传下载好的源码包
   

   bosh upload release releases/cf-164.tgz

   
   
   
5. 若上传过程中出现Fail to create XXX package while uploading cf release due to HTTPClient::SendTimeoutError问题，则重试多次直到成功，该问题与网络环境相关
6. 检查是否成功
   

   bosh release

   
   
7. 创建目录~/deployements/cloudfoundry01，编辑cloudfoudnry-myself.yml清单文件
   uuuid
   

   sudo mkdir -p ~/deployemnts/cloudfoundry01sudo chmod 777 -R ~/deployments/cloudfoundry01cd ~/deployments/cloudfoundry01vi cloudfoundry-myself.yml---name: CFRELEASE02director_uuid: fdd46e30-f2c5-41dc-9662-0976fdac5716releases:- name: cf  version: 171meta:  environment: null  stemcell:    name: bosh-vsphere-esxi-ubuntu    version: 2366  compilation:  workers: 2  cloud_properties:    ram: 1024    disk: 6144    cpu: 2  network: default  reuse_compilation_vms: true  update:  canaries: 1  #waiting for 60s to get update job status  canary_watch_time: 30000 - 90000  update_watch_time: 30000 - 90000  max_in_flight: 4  max_errors: 4  networks:- name: default  subnets:  - range: 192.168.2.0/24    # Reserved IPs are the IPs that BOSH should not use in the declared range.    reserved:    # IP addresses which you don't want allocated by BOSH    - 192.168.2.20 - 192.168.2.39          - 192.168.2.140 - 192.168.2.254    # IP addresses which you don't want allocated by BOSH    - 192.168.2.2 - 192.168.2.10    # Static IPs are the IPs that are statically assigned to jobs in this manifest. The BOSH director does not attempt    # to dynamically assign these to new VMs.    static:    - 192.168.2.40 - 192.168.2.100    gateway: 192.168.2.1    # If you configured your BOSH/micro-BOSH to enable DNS, leave the DNS section empty. The BOSH director automatically uses the    # BOSH/micro-BOSH powerDNS IP. If any jobs ever need to resolve DNS entries outside the BOSH powerDNS subdomain    # (*.microbosh by default), configure the powerDNS recursor in your bosh release.    dns:      - 192.168.2.2     cloud_properties:      name: "VM Network"resource_pools:  - name: small_z1    network: default    size: 0    stemcell:      name: bosh-vsphere-esxi-ubuntu      version: 2366    cloud_properties:      ram: 1024      disk: 2048      cpu: 1  - name: medium_z1    network: default    size: 12    stemcell:      name: bosh-vsphere-esxi-ubuntu      version: 2366    cloud_properties:      ram: 1024      disk: 2048      cpu: 1  - name: large_z1    network: default    size: 1    stemcell:      name: bosh-vsphere-esxi-ubuntu      version: 2366    cloud_properties:      ram: 16384      disk: 60000      cpu: 2  - name: runner_z1    network: default    size: 1    stemcell:      name: bosh-vsphere-esxi-ubuntu      version: 2366    cloud_properties:      ram: 16384      disk: 32768      cpu: 2  - name: router_z1    network: default    size: 3    stemcell:      name: bosh-vsphere-esxi-ubuntu      version: 2366    cloud_properties:      ram: 4096      disk: 20480      cpu: 2    jobs:  - name: ha_proxy_z1    instances: 1    networks:    - name: default      static_ips:      - 192.168.2.40    properties:      ha_proxy:        ssl_pem: '-----BEGIN CERTIFICATE-----            MIICLzCCAZgCCQCSoIG3LoeSMTANBgkqhkiG9w0BAQUFADBcMQswCQYDVQQGEwJV            UzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xEDAOBgNVBAoT            B1Bpdm90YWwxFjAUBgNVBAsTDUNsb3VkIEZvdW5kcnkwHhcNMTMxMDE3MjMxNzM5            WhcNMTQxMDE3MjMxNzM5WjBcMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAU            BgNVBAcTDVNhbiBGcmFuY2lzY28xEDAOBgNVBAoTB1Bpdm90YWwxFjAUBgNVBAsT            DUNsb3VkIEZvdW5kcnkwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANqyjJMH            FDbJ4XM2vLRxz6i82Gd2Y2dnAKYgu67FgheHGQJSv38lvn8JrAOBXu2QJgP8sJa+            XqUWUTMo9BWvhvedQLojtcpLdULc0FhlIXn8bThGlTQyrSg9QJobhQZGziFVrdQM            UZy4X+s6A2Szb9iOg3TYibnnfnuvdZli83eRAgMBAAEwDQYJKoZIhvcNAQEFBQAD            gYEAbFu65WT+czpiJqHhNz5AnGYA8kieVlV7KhcljLtsU4Sxut5Vq9uXFBE09KCg            YkyZ9KfzXArTeRCfcbm5xq12I+1nf6q0QjT1y3P6ztax0rpyb0i+4GWvA+ruMhfx            n4QM1MkiJVYBGKkXFZDd1zsdR3pY4vm1uiMY75IvJQfgb08=            -----END CERTIFICATE-----            -----BEGIN RSA PRIVATE KEY-----            MIICXQIBAAKBgQDasoyTBxQ2yeFzNry0cc+ovNhndmNnZwCmILuuxYIXhxkCUr9/            Jb5/CawDgV7tkCYD/LCWvl6lFlEzKPQVr4b3nUC6I7XKS3VC3NBYZSF5/G04RpU0            Mq0oPUCaG4UGRs4hVa3UDFGcuF/rOgNks2/YjoN02Im55357r3WZYvN3kQIDAQAB            AoGAa88G81fTBCtDA1vhbIaKWuE1QNOgrxGcxUhvnPlqZxTHJFkMY66EmPV4oYW9            +RhNVTvVBYq092boAnNW1/Xebvrk1SnBDkrLntnGPmExkatOkPTFFlNXfePu6qOJ            ULwYg8rKRwpvLoQXxbzMDXApPBifBNWGHVneGuHLpwPEQgECQQD0IJOecEyorrCR            6+wmJBS/IwqQO0Ooj7kZEg65MHi9exVe+XFvP0lW2NAUsDuBLz79hjslSqIJjRG8            c6q36oqhAkEA5VVeEip+T4DV12I5A5maGexVMeC92K7EGU/H8YhltxVZ/RtNngdT            3r19WeDbDF7R5CJy2f7AYullk3S6fkk28QJBALdEiW1k4rezRMyW7tYHOifvN2vl            gbpWAt/GRZVSxSGB+B4vZq/cM8NlynftgQ5PGJucnGQ3bgN7irgNoTimc2ECQFMX            QBMy5DroAhKcmu2r/IKB90gwFnjosVI+bsIbWkcgbE9hUhj8rK2aWE11Q8hSnpea            x6QmQgxUZiIr+9n/qvECQQDiDIeSmo2mRYsaqr4CQ3Ak+EDjsm9XTpXHuqm+xgFO            iDIeQCWd3/twqdDTR7FaDE7Q0i559u7A1yLumUn8caLF            -----END RSA PRIVATE KEY-----'      networks:        apps: default        management: default    release: cf    resource_pool: router_z1    template: haproxy  - name: nats    instances: 1      resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.43    persistent_disk: 10024    templates:      - name: nats        release: cf      - name: nats_stream_forwarder        release: cf    properties:      syslog_aggregator:        address: 192.168.2.46        port: 5632        all: false        transport: "tcp"      networks:        apps: default        management: default      nats:        address: 192.168.2.43        user: nats        password: c1oudc0w        port: 4222        authorization_timeout: 15        machines:          - 192.168.2.43        debug: true        trace: true        monitor_port: 0        prof_port: 0  - name: syslog_aggregator    instances: 1      resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.46    persistent_disk: 10024     templates:      - name: syslog_aggregator        release: cf    properties:      domain: acp.local      syslog_aggregator:        log_email:          enabled: false          from_email: [e-mail]          from_password: 1qazXSW@          to_email: [e-mail]          smtp_server: smtp.apusic.com          smtp_port: 25          smtp_domain: APUSIC.com        port: 5632        transport: "tcp"  - name: etcd    instances: 1    resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.41    persistent_disk: 10024          templates:      - name: etcd        release: cf      - name: etcd_metrics_server        release: cf    properties:      heartbeat_interval_in_milliseconds: 50      election_timeout_in_milliseconds: 1000      etcd:        machines:          - 192.168.2.41      etcd_metrics_server:        etcd:          machine: "127.0.0.1"          port: 4001        nats:          machines:            - 192.168.2.43          port: 4222          username: nats          password: c1oudc0w        status:          port: 5678          username: ""          password: ""      networks:        apps: default        management: default          - name: loggregator    instances: 1      resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.44    persistent_disk: 10024          templates:      - name: loggregator        release: cf    properties:      syslog_aggregator:        address: 192.168.2.46        port: 5632        all: false        transport: "tcp"      loggregator:        debug: false        servers:          z1:            - 192.168.2.44        status:          user: ""          password: ""          port: 0          maxRetainedLogMessages: 100          incoming_port: 3456          outgoing_port: 8080      loggregator_endpoint:        shared_secret: c1oudc0w      etcd:        machines:          - 192.168.2.41      ssl:        skip_cert_verify: true      networks:        apps: default        management: default          - name: postgres    instances: 1      resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.48    templates:      - name: postgres        release: cf    persistent_disk: 4096    properties:      db: databases      databases:        port: 5524        roles:          - name: ccadmin            password: admin            tag: admin          - name: uaaadmin            password: admin            tag: admin        databases:          - citext: true            name: ccdb            tag: cc          - citext: true            name: uaadb            tag: uaa        db_scheme: postgres  - name: gorouter    instances: 2      resource_pool: router_z1    networks:      - name: default        static_ips:        - 192.168.2.47        - 192.168.2.50    templates:      - name: gorouter        release: cf    properties:      syslog_aggregator:        address: 192.168.2.46        port: 5632        all: false        transport: "tcp"      loggregator_endpoint:        host: 192.168.2.44      networks:        apps: default        management: default  - name: uaa    instances: 1    resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.42    templates:      - name: uaa        release: cf    persistent_disk: 4096    properties:      syslog_aggregator:        address: 192.168.2.46        port: 5632        all: false        transport: "tcp"      networks:        apps: default        management: default          - name: login    instances: 1    resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.51    templates:      - name: login        release: cf    persistent_disk: 4096    properties:      syslog_aggregator:        address: 192.168.2.46        port: 5632        all: false        transport: "tcp"      name: Login Server for the UAA      login:        protocol: http        brand: oss        uaa_certificate: null        catalina_opts: -Xmx384m -XX:MaxPermSize=128m        links:          home: http://console.acp.local          passwd: http://console.acp.local/password_resets/new          signup: http://console.acp.local/register      networks:        apps: default        management: default  - name: dea_next    instances: 1      resource_pool: runner_z1    networks:      - name: default        static_ips:        - 192.168.2.49    templates:      - name: dea_next        release: cf      - name: dea_logging_agent        release: cf    persistent_disk: 40960      properties:      syslog_aggregator:        address: 192.168.2.46        port: 5632        all: false        transport: "tcp"      loggregator_endpoint:         host: 192.168.2.44      networks:        apps: default        management: default  - name: dea_next_large    instances: 1      resource_pool: large_z1    networks:      - name: default        static_ips:        - 192.168.2.59    templates:      - name: dea_next        release: cf      - name: dea_logging_agent        release: cf    persistent_disk: 60000      properties:      syslog_aggregator:        address: 192.168.2.46        port: 5632        all: false        transport: "tcp"      loggregator_endpoint:         host: 192.168.2.44      networks:        apps: default        management: default      - name: cloud_controller_ng    instances: 1      resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.52    templates:      - name: cloud_controller_ng        release: cf    persistent_disk: 4096  - name: cloud_controller_clock    instances: 1      resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.53    templates:      - name: cloud_controller_clock        release: cf    persistent_disk: 0  - name: cloud_controller_worker    instances: 1      resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.54    templates:      - name: cloud_controller_worker        release: cf    persistent_disk: 0           - name: loggregator_trafficcontroller    instances: 1      resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.45    persistent_disk: 10024    templates:      - name: loggregator_trafficcontroller        release: cf    properties:      system_domain: acp.local      syslog_aggregator:        address: 192.168.2.46        port: 5632      traffic_controller:        host: 192.168.2.45        zone: z1      loggregator:        servers:          z1:            - 192.168.2.44      ssl:        skip_cert_verify: true      cc:        srv_api_uri: https://api.acp.local      networks:        apps: default        - name: hm9000    instances: 1    resource_pool: medium_z1    networks:      - name: default        static_ips:        - 192.168.2.55    templates:      - name: hm9000        release: cf    persistent_disk: 4096    properties:      syslog_aggregator:        address: 192.168.2.46        port: 5632        all: false        transport: "tcp"      cc:        srv_api_uri: https://api.acp.local      ccng:        bulk_api_user: "bulk_api"        bulk_api_password: c1oudc0w      etcd:        machines:          - 192.168.2.41      ssl:        skip_cert_verify: true      networks:        apps: default        management: default        properties:  system_domain: acp.local  system_domain_organization: system_domain  support_address: http://support.acp.local  domain: acp.local  app_domains:    - acp.local  description: "Cloud Foundry v2 sponsored by Pivotal"  etcd:    machines:       - 192.168.2.41  networks:    apps: default    management: default  ssl:    skip_cert_verify: true  nats:    user: nats    password: c1oudc0w    port: 4222    machines:      - 192.168.2.43    use_gnatsd: true  router:    servers:      z1:      - 192.168.2.47      z2:      - 192.168.2.50    endpoint_timeout: 60    status:      user: router      password: c1oudc0w  loggregator_endpoint:    host: 192.168.2.44    shared_secret: c1oudc0w  loggregator:    servers:      default:        - 192.168.2.44  collector:    datadog_api_key: ""    datadog_application_key: ""    deployment_name: CFRELEASE02    use_datadog: true    use_tsdb: false  disk_quota_enabled: false  ccdb: &ccdb    address: 192.168.2.48    databases:    - citext: true      name: ccdb      tag: cc    db_scheme: postgres    port: 5524    roles:    - name: ccadmin      password: admin      tag: admin  ccdb_ng: *ccdb  cc: &cc    bulk_api_user: "bulk_api"    bulk_api_password: c1oudc0w    srv_api_uri: https://api.acp.local    db_logging_level: debug2    ccng.logging_level: debug2    db_encryption_key: c1oudc0w    quota_definitions:      default:        memory_limit: 10240        total_services: 100        non_basic_services_allowed: true        total_routes: 1000        trial_db_allowed: true    hm9000_noop: false    staging_upload_user: uploaduser    staging_upload_password: c1oudc0w    install_buildpacks:      - name: java_buildpack        package: buildpack_java      - name: ruby_buildpack        package: buildpack_ruby      - name: nodejs_buildpack        package: buildpack_nodejs      ccng: *cc    uaa:    admin:      client_secret: c1oudc0w    batch:      password: batch-password      username: batch-username    catalina_opts: -Xmx384m -XX:MaxPermSize=128m    cc:      client_secret: c1oudc0w    client:      autoapprove:        - cf    clients:      cc_service_broker_client:        secret: c1oudc0w        scope: cloud_controller.write,openid,cloud_controller.read,cloud_controller_service_permissions.read        authorities: clients.read,clients.write,clients.admin        authorized-grant-types: client_credentials      cf:          override: true          authorized-grant-types: password,implicit,refresh_token          authorities: uaa.none          scope: cloud_controller.read,cloud_controller.write,openid,password.write,cloud_controller.admin,scim.read,scim.write          access-token-validity: 7200          refresh-token-validity: 1209600      app-direct:        access-token-validity: 1209600        authorities: app_direct_invoice.write        authorized-grant-types: authorization_code,client_credentials,password,refresh_token,implicit        override: true        redirect-uri: http://console.acp.local        refresh-token-validity: 1209600        secret: c1oudc0w      #cc_service_broker_client: null      developer_console:        access-token-validity: 1209600        authorities: scim.write,scim.read,cloud_controller.read,cloud_controller.write,password.write,uaa.admin,uaa.resource,cloud_controller.admin,billing.admin        authorized-grant-types: authorization_code,client_credentials        override: true        redirect-uri: http://console.acp.local/oauth/callback        refresh-token-validity: 1209600        scope: openid,cloud_controller.read,cloud_controller.write,password.write,console.admin,console.support        secret: c1oudc0w      login:        authorities: oauth.login        authorized-grant-types: authorization_code,client_credentials,refresh_token        override: true        redirect-uri: http://login.acp.local        scope: openid,oauth.approvals        secret: c1oudc0w      servicesmgmt:        authorities: uaa.resource,oauth.service,clients.read,clients.write,clients.secret        authorized-grant-types: authorization_code,client_credentials,password,implicit        autoapprove: true        override: true        redirect-uri: http://servicesmgmt.acp.local/auth/cloudfoundry/callback        scope: openid,cloud_controller.read,cloud_controller.write        secret: c1oudc0w      space-mail:        access-token-validity: 1209600        authorities: scim.read,scim.write,cloud_controller.admin        authorized-grant-types: client_credentials        override: true        refresh-token-validity: 1209600        secret: c1oudc0w      support-services:        access-token-validity: 1209600        authorities: portal.users.read        authorized-grant-types: authorization_code,client_credentials        redirect-uri: http://support-signon.acp.local        refresh-token-validity: 1209600        scope: scim.write,scim.read,openid,cloud_controller.read,cloud_controller.write        secret: c1oudc0w    jwt:      signing_key: '-----BEGIN RSA PRIVATE KEY-----        MIICXAIBAAKBgQDHFr+KICms+tuT1OXJwhCUmR2dKVy7psa8xzElSyzqx7oJyfJ1        JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMXqHxf+ZH9BL1gk9Y6kCnbM5R6        0gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBugspULZVNRxq7veq/fzwIDAQAB        AoGBAJ8dRTQFhIllbHx4GLbpTQsWXJ6w4hZvskJKCLM/o8R4n+0W45pQ1xEiYKdA        Z/DRcnjltylRImBD8XuLL8iYOQSZXNMb1h3g5/UGbUXLmCgQLOUUlnYt34QOQm+0        KvUqfMSFBbKMsYBAoQmNdTHBaz3dZa8ON9hh/f5TT8u0OWNRAkEA5opzsIXv+52J        duc1VGyX3SwlxiE2dStW8wZqGiuLH142n6MKnkLU4ctNLiclw6BZePXFZYIK+AkE        xQ+k16je5QJBAN0TIKMPWIbbHVr5rkdUqOyezlFFWYOwnMmw/BKa1d3zp54VP/P8        +5aQ2d4sMoKEOfdWH7UqMe3FszfYFvSu5KMCQFMYeFaaEEP7Jn8rGzfQ5HQd44ek        lQJqmq6CE2BXbY/i34FuvPcKU70HEEygY6Y9d8J3o6zQ0K9SYNu+pcXt4lkCQA3h        jJQQe5uEGJTExqed7jllQ0khFJzLMx0K6tj0NeeIzAaGCQz13oo2sCdeGRHO4aDh        HH6Qlq/6UOV5wP8+GAcCQFgRCcB+hrje8hfEEefHcFpyKH+5g1Eu1k0mLrxK2zd+        4SlotYRHgPCEubokb2S1zfZDWIXW3HmggnGgM949TlY=        -----END RSA PRIVATE KEY-----'      verification_key: '-----BEGIN PUBLIC KEY-----        MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDHFr+KICms+tuT1OXJwhCUmR2d        KVy7psa8xzElSyzqx7oJyfJ1JZyOzToj9T5SfTIq396agbHJWVfYphNahvZ/7uMX        qHxf+ZH9BL1gk9Y6kCnbM5R60gfwjyW1/dQPjOzn9N394zd2FJoFHwdq9Qs0wBug        spULZVNRxq7veq/fzwIDAQAB        -----END PUBLIC KEY-----'    #login:      #addnew: false    no_ssl: false    scim:      users:      - admin|admin|scim.write,scim.read,openid,cloud_controller.admin    url: http://uaa.acp.local   uaadb:    address: 192.168.2.48    databases:    - citext: true      name: uaadb      tag: uaa    db_scheme: postgresql    port: 5524    roles:    - name: uaaadmin      password: admin      tag: admin 

8. 设置部署清单病执行部署

   bosh deployment cloudfoundry01.ymlbosh deploy

   
   
   
9. 检查是否部署成功，vm都处于running状态
   

   bosh vms