OpenStack-Ansible Installation Guide

Home OpenStack-Ansible Installation Guide

Overview

• Chapter 1. Overview
  • About OpenStack-Ansible Deployment
  • Ansible
  • Linux Containers (LXC)
  • Host layout
  • Host networking
  • OpenStack Networking
  • Installation requirements
  • Installation workflow
  • Security
    • AppArmor
    • Encrypted communication
    • Host security hardening
    • Least privilege

Deployment host

• Chapter 2. Deployment host
  • Installing the operating system
  • Configuring the operating system
  • Installing source and dependencies
  • Configuring Secure Shell (SSH) keys

Target hosts

• Chapter 3. Target hosts
  • Installing the operating system
  • Configuring Secure Shell (SSH) keys
  • Configuring the operating system
  • Configuring LVM
  • Configuring the network
  • Reference architecture
  • Configuring the network on a target host

Configuration

• Chapter 4. Deployment configuration
  • Initial environment configuration
    • Affinity
    • Security Hardening
  • Configuring target host networking
    • Adding static routes to network interfaces
    • Setting an MTU on a network interface
  • Configuring target hosts
  • Configuring service credentials
  • Configuring the hypervisor (optional)
  • Configuring the Compute (Nova) Service (optional)
    • Block device tuning for Ceph (RBD)
  • Configuring the Image Service
    • Configuring default and additional stores
    • Storing images in Cloud Files
    • Special Considerations
  • Configuring the Block Storage service (optional)
    • NFS back-end
    • Backup
      • Using Ceph for Cinder backups
    • Availability zones
  • Configuring the Object Storage service (optional)
    • Overview
    • Storage devices
    • Configuring the service
    • Integrate with the Image Service
    • Add to existing deployment
    • Storage Policies
  • Configuring HAProxy (optional)
    • Making HAProxy highly-available
    • Securing HAProxy communication with SSL certificates
  • Configuring Horizon (optional)
    • Securing Horizon communication with SSL certificates
  • Configuring RabbitMQ (optional)
    • Add a TLS encrypted listener to RabbitMQ
    • Enable encrypted connections to RabbitMQ
  • Configuring the Ceilometer service (optional)
    • Setting up a Mongodb database for ceilometer
    • Configuring the hosts
    • Configuring the hosts for an HA deployment
    • Configuring the user data
    • References
  • Configuring the Aodh service (optional)
    • Setting up a Mongodb database for Aodh
    • Configuring the hosts
    • Configuring the user data
  • Configuring Keystone (optional)
    • Securing Keystone communication with SSL certificates
    • Implementing LDAP (or AD) Back-Ends
  • Configuring the Network Load Balancing Service (Optional)
    • Deploying LBaaS v1
    • Deploying LBaaS v2
    • Special notes about LBaaS
  • Overriding OpenStack Configuration Defaults
    • Overriding .conf files
    • Overriding .json files
    • Currently Available Overrides
  • Securing services with SSL certificates
    • Self-signed certificates
      • Setting self-signed certificate subject data
      • Generating and regenerating self-signed certificates
    • User-provided certificates
  • Checking the integrity of your configuration files
  • Configuring Identity Service federation (optional)
    • Using Identity Service to Identity Service federation
      • Identity Service to Identity Service federation authentication wrapper
    • Identity Service (keystone) service provider background
      • References
    • Configure Identity Service (keystone) as a federated service provider
    • Configure Identity Service (keystone) as a federated identity provider
    • Configure Active Directory Federation Services (ADFS) 3.0 as an identity provider
      • Configuring ADFS
      • References
    • Configure Identity Service (keystone) Domain-Project-Group-Role mappings
      • Identity Service federation attribute mapping
    • Identity Service to Identity Service federation example use-case
      • Keystone identity provider (IdP) configuration
      • Keystone SP configuration
      • Reviewing or modifying the configuration with the Openstack client
      • Service providers on the identity provider
      • Identity providers on the service provider
      • Federated identities on the service provider
      • Federation mappings
      • Federation protocols

Installation

• Chapter 5. Foundation playbooks
  • Running the foundation playbook
• Chapter 6. Infrastructure playbooks
  • Running the infrastructure playbook
  • Verifying infrastructure operation
• Chapter 7. OpenStack playbooks
  • Running the OpenStack playbook
  • Utility container
  • Verifying OpenStack operation

Operations

• Chapter 8. Operations
  • Adding a compute host
  • Galera cluster maintenance
    • Removing nodes
    • Starting a cluster
    • Galera cluster recovery
    • Single-node failure
    • Multi-node failure
    • Complete failure
    • Rebuilding a container
  • Centralized Logging
    • Finding logs
  • Troubleshooting
    • Container networking issues
      • Predictable interface naming
      • Reviewing container networking traffic
    • Cached Ansible facts issues
      • Forcing regeneration of cached facts

Appendices

• Appendix A. Configuration files
• Appendix B. Additional Resources
• Appendix C. Minor Upgrades
• Appendix D. Tips and Tricks
  • Ansible Forks
• Appendix E. Using PLUMgrid Neutron Plugin
  • Installing Source and Host Networking
  • Neutron Configurations
  • PLUMgrid Cofigurations
  • Gateway Hosts
  • Installation