Skip to content

Latest commit

 

History

History
145 lines (107 loc) · 3.09 KB

openstack.md

File metadata and controls

145 lines (107 loc) · 3.09 KB
sidebar_label sidebar_position
OpenStack
60

OpenStack

Common issues with deploying OpenStack services are documented in the OpenStack Troubleshooting Guide.

:::info

An OpenStack deployment contains a number of components providing APIs to access infrastructure resources. The OpenStack Components page lists the various services that can be deployed to provide such resources to cloud end users. Unfortunately, not all of the OpenStack projects listed there are still active. Not all of the services listed there are supported by OSISM.

:::

  1. OpenStack client

    osism apply openstackclient

  2. Keystone

    osism apply -a pull keystone
osism apply keystone

  3. Glance

    osism apply -a pull glance
osism apply glance

  4. Designate

    osism apply -a pull designate
osism apply designate

  5. Placement

    osism apply -a pull placement
osism apply placement

  6. Cinder

    osism apply -a pull cinder
osism apply cinder

  7. Neutron

    osism apply -a pull neutron
osism apply neutron

  8. Nova

    osism apply -a pull nova
osism apply nova

  9. Octavia

    osism apply octavia-certificates
osism apply copy-octavia-certificates

    osism apply -a pull octavia
osism apply octavia

  10. Optional: Manage amphora image

This step is only necessary if the Amphora Driver is used. If OVN is used as the driver, this step is not necessary.

We provide regularly updated images for Octavia in osism/openstack-octavia/amphora-image.

  • Configure API Endpoint

    For the command to be usable, a cloud profile for octavia must currently be added in the clouds.yml file of the OpenStack environment. The auth_url is changed accordingly.

    clouds:
  [...]
  octavia:
    auth:
      username: octavia
      project_name: service
      auth_url: https://api.testbed.osism.xyz:5000/v3
      project_domain_name: default
      user_domain_name: default
    cacert: /etc/ssl/certs/ca-certificates.crt
    identity_api_version: 3

  • Configure the secret

    The secret is added to the secure.yml file. The password is set in the parameter octavia_keystone_password in the file environments/kolla/secrets.yml.

    Get the secret with

    make ansible_vault_show FILE=environments/kolla/secrets.yml |grep octavia_keystone_password

    ---
clouds:
  [...]
  octavia:
    auth:
      password: VALUE_OF_octavia_keystone_password

  • Upload the correct and current image depending on the current Openstack release:

    osism manage image octavia

  1. Horizon

    osism apply -a pull horizon
osism apply horizon