Admin Guides

• Advanced Configuration
  • Endpoint Network Configuration
  • Fully Qualified Domain Name Configuration
  • RabbitMQ Hostname Resolution
  • TLS Configuration
  • OpenStack Service Configuration in Kolla
  • OpenStack policy customisation
  • IP Address Constrained Environments
  • External Elasticsearch/Kibana environment
  • Non-default <service> port
  • Use an external Syslog server
  • Mount additional Docker volumes in containers
• TLS
  • Quick Start
  • TLS Configuration for internal/external VIP
  • Configuring the OpenStack Client for TLS
  • Adding CA Certificates to the Service Containers
  • Configuring a CA bundle
  • Back-end TLS Configuration
  • Generating TLS certificates with Let’s Encrypt
  • Generating a Private Certificate Authority
  • Generating your certificates without kolla-ansible
• ACME http-01 challenge support
  • How To (External ACME client)
• MariaDB database backup and restore
  • Enabling Backup Functionality
  • Backup Procedure
  • Restoring backups
• Managing etcd
  • Cluster vs. Node Bootstrapping
  • Forcing Bootstrapping
  • Manual Commands
  • Removing Dead Nodes
• Production architecture guide
  • Node types and services running on them
  • Network configuration
  • Docker configuration
  • High Availability (HA) and scalability
• Kolla’s Deployment Philosophy
  • Overview
  • Why not Template Customization?
  • Kolla’s Solution to Customization
• Password Rotation
  • Regenerating secrets
  • Applying regenerated secrets
  • Known out-of-scope secrets