OpenStack-Ansible Installation Guide

Home OpenStack-Ansible Installation Guide

Overview

• Chapter 1. Overview
  • About OpenStack-Ansible
    • Ansible
    • Linux Containers (LXC)
  • Host layout
  • Installation requirements
    • CPU requirements
    • Disk requirements
    • Network requirements
    • Software requirements
  • Installation workflow
    • Network ranges
    • IP assignments
  • Security
    • AppArmor
    • Encrypted communication
    • Host security hardening
    • Least privilege
    • Securing network access to OpenStack services

Deployment host

• Chapter 2. Deployment host
  • Installing the operating system
  • Configuring the operating system
  • Configuring the network
  • Installing source and dependencies
  • Configuring Secure Shell (SSH) keys

Target hosts

• Chapter 3. Target hosts
  • Preparing the target hosts
    • Installing the operating system
    • Configuring the operating system
    • Deploying SSH keys
    • Configuring LVM
  • Configuring the network
    • Bonded network interfaces
    • Adding bridges
    • Network diagrams
  • Reference architecture
  • Configuring the network on a target host

Configuration

• Chapter 4. Deployment configuration
  • Initial environment configuration
    • Affinity
    • Security hardening
  • Configuring target host networking
    • Adding static routes to network interfaces
    • Setting an MTU on a network interface
  • Configuring target hosts
  • Configuring service credentials
  • Configuring the hypervisor (optional)
  • Configuring the Compute (nova) service (optional)
    • Availability zones
    • Block device tuning for Ceph (RBD)
    • Config drive
    • Libvirtd connectivity and authentication
    • Multipath
    • Shared storage and synchronized UID/GID
  • Configuring the Bare Metal (ironic) service (optional)
    • OpenStack-Ansible deployment
    • Setup a neutron network for use by ironic
    • Building ironic images
    • Creating an ironic flavor
      • Enroll ironic nodes
    • Deploy a baremetal node kicked with ironic
  • Configuring the Image (glance) service
    • Configuring default and additional stores
    • Storing images in Cloud Files
    • Special considerations
  • Configuring the Block (cinder) storage service (optional)
    • NFS backend
    • Backup
    • Using Ceph for cinder backups
    • Availability zones
    • OpenStack Dashboard (horizon) configuration for cinder
    • Configuring cinder to use LVM
    • Configuring cinder to use Ceph
    • Configuring cinder to use a NetApp appliance
  • Configuring the Object Storage (swift) service (optional)
    • Storage devices
    • Configuring the service
    • Integrate with the Image Service (glance)
    • Add to existing deployment
    • Storage policies
    • Overview
  • Configuring HAProxy (optional)
    • Making HAProxy highly-available
    • Configuring keepalived ping checks
    • Securing HAProxy communication with SSL certificates
  • Configuring the Dashboard (horizon) (optional)
    • Securing horizon communication with SSL certificates
    • Configuring a horizon customization module
  • Configuring RabbitMQ (optional)
    • Add a TLS encrypted listener to RabbitMQ
    • Enable encrypted connections to RabbitMQ
  • Configuring the Telemetry (ceilometer) service (optional)
    • Setting up a MongoDB database for ceilometer
    • Configuring the hosts
    • Configuring the hosts for an HA deployment
    • Configuring the user data
    • References
  • Configuring the Aodh service (optional)
    • Setting up a MongoDB database for Aodh
    • Configuring the hosts
    • Configuring the user data
  • Configuring the Identity service (keystone) (optional)
    • Securing keystone communication with SSL certificates
    • Implementing LDAP (or Active Directory) backends
  • Configuring the Networking service (neutron) (optional)
    • Firewall service (optional)
    • Load balancing service (optional)
      • Deploying LBaaS v1
      • Deploying LBaaS v2
      • Special notes about LBaaS
    • Virtual private network service (optional)
  • Overriding OpenStack configuration defaults
    • Overriding .conf files
    • Overriding .json files
    • Currently available overrides
  • Securing services with SSL certificates
    • Self-signed certificates
      • Setting self-signed certificate subject data
      • Generating and regenerating self-signed certificates
    • User-provided certificates
  • Checking the integrity of your configuration files
  • Configuring Identity service (keystone) federation (optional)
    • Using Identity service to Identity service federation
      • Identity service to Identity service federation authentication wrapper
    • Identity Service (keystone) service provider background
      • References
    • Configure Identity Service (keystone) as a federated service provider
    • Configure Identity service (keystone) as a federated identity provider
    • Configuring Active Directory Federation Services (ADFS) 3.0 as an identity provider
      • Configuring ADFS
      • References
    • Configure Identity Service (keystone) Domain-Project-Group-Role mappings
      • Identity service federation attribute mapping
    • Identity Service to Identity Service federation example use-case
      • Keystone identity provider (IdP) configuration
      • Keystone service provider (SP) configuration
      • Reviewing or modifying the configuration with the OpenStack client
        • Service providers on the identity provider
        • Identity providers on the service provider
        • Federated identities on the service provider
        • Federation mappings
        • Federation protocols
  • Configuring the Ceph client (optional)
    • Authentication
    • Configuration file overrides
    • Monitors

Installation

• Chapter 5. Foundation playbooks
  • Running the foundation playbook
• Chapter 6. Infrastructure playbooks
  • Running the infrastructure playbook
  • Verify the database cluster
• Chapter 7. OpenStack playbooks
  • Running the OpenStack playbook
  • Utility container
  • Verifying OpenStack operation

Operations

• Chapter 8. Operations
  • Adding a compute host
  • Galera cluster maintenance
    • Removing nodes
    • Starting a cluster
    • Galera cluster recovery
      • Single-node failure
      • Multi-node failure
      • Complete failure
      • Rebuilding a container
  • Centralized logging
    • Finding logs
  • Troubleshooting
    • Container networking issues
      • Predictable interface naming
      • Reviewing container networking traffic
    • Cached Ansible facts issues
      • Forcing regeneration of cached facts

Appendices

• Appendix A: Configuration files
• Appendix B: Additional resources
• Appendix C: Minor upgrades
• Appendix D: Tips and tricks
  • Ansible forks
• Appendix E: Using PLUMgrid Neutron plugin
  • Installing source and host networking
  • Neutron configurations
  • PLUMgrid configurations
  • Gateway Hosts
  • Installation
• Appendix F. Using Nuage Neutron Plugin
  • Introduction
  • Prerequisites
  • Configure Nuage Neutron Plugin
  • Installation