ibm-spectrum-scale-install-infra：Spectrum Scale安装和配置

IBM Spectrum Scale (GPFS) GUI Ansible Role ====================================== Highly-customizable Ansible role for installing and configuring IBM Spectrum Scale (GPFS) GUI nodes. Features -------- - **Install GUI and zimon packages** - **Configure Performance Monitoring and collectors** - **Install and configure Call Home** - **Dual/HA GUI Nodes** - **Create Local Users for GUI** - **Change Password Policy for GUI Users** - **Configure Active Directory and Map roles to LDAP Groups** - **Configure E-Mail Notifications** - **Configure E-Mail Receptions** - **Configure SNMP Notification** - **Request HTTPs Certifcate from Hasicorp Vault** - **Create local Admin User with password from Hasicorp Vault** The following installation methods are available: - **Install from (existing) YUM repository** - **Install from local installation package (accessible on Ansible control machine)** Future plans: - **Upgrade, Change and Disable services.** - **Adding nodes to Performance sensors** Installation ------ Installation ``` $ ansible-playbook -i hosts playbook.yml or ./ansible.sh ``` Requirements ------------- As there's no public repository available, you'll need to download Spectrum Scale (GPFS) packages from the IBM website. Visit https://www.ibm.com/support/fixcentral and search for 'IBM Spectrum Scale (Software defined storage)'. Local Spectrum Scale Repo ------- To created a local repo on a web server: ``` cd /your/webserver/folder # Download the Spectrum Scale install files. get directlink or copy it into your server wget ------Spectrum Scale Binary ----- sh ./Spectrum_Scale_Data_Management-5.0.X.X-x86_64-Linux-install --dir ./SpectrumScaleRpms/5.0.X.X/ --silent yum install -y createrepo cd SpectrumScaleRpms/5.0.X.X/ createrepo . ``` Role Variables -------------- Default variables are defined in defaults/main.yml in every rolse. You'll also find detailed documentation in that file. Define your own host variables in your inventory to override the defaults. Defining the variable scale_version is mandatory. - Furthermore, you'll need to configure an installation method by defining one of the following variables: - `scale_install_repository_url:` this needs to pointed to `zimon_rpms` folder, as orginal library from download cant find the correct packages. Role Dependencies ---- core role needs to be executed first. but we can also execute only gui role if core cluster is already exists. Example Playbook ---------------- The simplest possible playbook to install Spectrum Scale on a node with GUI: ``` --- - hosts: scale01.example.com vars: - scale_version: 5.0.4.0 - scale_install_localpkg_path: /path/to/Spectrum_Scale_Standard-5.0.4.0-x86_64-Linux-install roles: - core/precheck - core/node - core/cluster - gui/precheck - gui/node - gui/cluster ``` This will install all required packages and create a single-node Spectrum Scale cluster with GUI. In reality you'll most probably want to install Spectrum Scale on a number of nodes, and you'll also want to consider the node roles in order to achieve high-availability. The cluster will be configured with all hosts in the current play: ``` # host_vars/scale01: --- scale_storage: - filesystem: gpfs01 blockSize: 4M defaultMetadataReplicas: 2 defaultDataReplicas: 2 numNodes: 16 automaticMountOption: true defaultMountPoint: /mnt/gpfs01 disks: - device: /dev/sdb nsd: nsd_1 servers: scale01 failureGroup: 10 usage: metadataOnly pool: system - device: /dev/sdc nsd: nsd_2 servers: scale01 failureGroup: 10 usage: dataOnly pool: data scale_nodeclass: - class1 scale_config: - nodeclass: class1 params: - pagepool: 2G - autoload: yes - ignorePrefetchLunCount: yes scale_cluster_gui: true ``` ``` # host_vars/scale02: --- scale_storage: - filesystem: gpfs01 disks: - device: /dev/sdb nsd: nsd_3 servers: scale02 failureGroup: 20 usage: metadataOnly pool: system - device: /dev/sdc nsd: nsd_4 servers: scale02 failureGroup: 20 usage: dataOnly pool: data scale_cluster_gui: true ##Dual/HA GUI ``` - For more information check out man pages and https://www.ibm.com/support/knowledgecenter/en/STXKQY/ibmspectrumscale_welcome.html All the variable below can be added to **host_vars/host:** on the node you want to be GUI node. For the Second GUI node, you only needs to have `scale_cluster_gui: true` Spetrum Scale Local GUI Users ------- ##### Spectrum Scale GUI Admin. - This is to be able to access the Spectrum Scale GUI. Change the role for the user do the Permission that is sufficient. (See list of roles below) - Default password policy is length of 6 Character. - For Secure environment, Store you password in Ansible Vault or HasiCorp Vault. Se option for HasiCorp below - FYI: All of the Parameters here is mandatory. ``` scale_gui_admin_user: "admin" scale_gui_admin_password: "Admin@GUI" scale_gui_admin_role: "SecurityAdmin,SystemAdmin" ``` ##### Spectrum Scale GUI user. - Extra Users can be created. - Change the Role for the user to the Permission that is sufficient. - All of the Parameters is mandatory. ``` scale_gui_user_username: 'SEC' scale_gui_user_password: 'Storage@Scale1' scale_gui_user_role: 'SystemAdmin' ``` ##### HasiCorp Integration - Create Admin user with password from Vault. - HasiCorp - Create local Admin user with password from vault - The Secret is writen to vault `secret/private/{{ computed.name | default(AdminGUI) }}/gui"` ``` scale_gui_admin_hc_vault: false scale_gui_admin_hc_vault_user: "admin" scale_gui_admin_hc_vault_role: "SecurityAdmin,SystemAdmin" ``` ##### Specifies a role name for the group. Role name is not case-sensitive. Available system-defined roles are: - **Administrator** - Manages all functions on the system except those deals with managing users, user groups, and authentication. - **SecurityAdmin** - Manages all functions on the system, including managing users, user groups, and user authentication. - **SystemAdmin** - Manages clusters, nodes, alert logs, and authentication. - **StorageAdmin** - Manages disks, file systems, pools, filesets, and ILM policies. - **SnapAdmin** - Manages snapshots for file systems and filesets. - **DataAccess** - Controls access to data. For example, managing access control lists. - **Monitor** - Monitors objects and system configuration but cannot configure, modify, or manage the system or its resources. - **ProtocolAdmin** - Manages object storage and data export definitions of SMB and NFS protocols. - **UserAdmin** - Manages access for GUI users. Users who are part of this group have edit permissions only in the Access pages of the GUI. ---------------------------------------------------------------------------------------------- GUI Users Password Policy Parameters ------- Add and Change what you need in your inventory files and rest wil use default If you only want to change max age of password. Add ``` scale_gui_password_policy_change: true scale_gui_password_policy: maxAge: '90' ``` For all functions: ``` scale_gui_password_policy_change: ## To enable Change of Password Policy scale_gui_password_policy: minLength: '6' ## Minimum password length maxAge: '90' ## Maximum password age minAge: '0' ## Minimum password age remember: '3' ## Remember old passwords minUpperChars: '0' ## Minimum upper case characters minLowerChars: '0' ## Minimum lower case characters minSpecialChars: '0' ## Minimum special case characters minDigits: '0' ## Minimum digits maxRepeat: '0' ## Maximum number of repeat characters minDiff: '1' ## Minimum different characters with respect to old password re