Home OpenStack-Ansible Installation Guide

Chapter 4. Deployment configuration

• Initial environment configuration
  • Affinity
  • Security hardening
• Configuring target host networking
  • Adding static routes to network interfaces
  • Setting an MTU on a network interface
• Configuring target hosts
• Configuring service credentials
• Configuring the hypervisor (optional)
• Configuring the Compute (nova) service (optional)
  • Availability zones
  • Block device tuning for Ceph (RBD)
  • Config drive
  • Libvirtd connectivity and authentication
  • Multipath
  • Shared storage and synchronized UID/GID
• Configuring the Bare Metal (ironic) service (optional)
  • OpenStack-Ansible deployment
  • Setup a neutron network for use by ironic
  • Building ironic images
  • Creating an ironic flavor
    • Enroll ironic nodes
  • Deploy a baremetal node kicked with ironic
• Configuring the Image (glance) service
  • Configuring default and additional stores
  • Storing images in Cloud Files
  • Special considerations
• Configuring the Block (cinder) storage service (optional)
  • NFS backend
  • Backup
  • Using Ceph for cinder backups
  • Availability zones
  • OpenStack Dashboard (horizon) configuration for cinder
  • Configuring cinder to use LVM
  • Configuring cinder to use Ceph
  • Configuring cinder to use a NetApp appliance
• Configuring the Object Storage (swift) service (optional)
  • Storage devices
  • Configuring the service
  • Integrate with the Image Service (glance)
  • Add to existing deployment
  • Storage policies
  • Overview
• Configuring HAProxy (optional)
  • Making HAProxy highly-available
  • Configuring keepalived ping checks
  • Securing HAProxy communication with SSL certificates
  • Configuring additional services
• Configuring the Dashboard (horizon) (optional)
  • Securing horizon communication with SSL certificates
  • Configuring a horizon customization module
• Configuring RabbitMQ (optional)
  • Add a TLS encrypted listener to RabbitMQ
  • Enable encrypted connections to RabbitMQ
• Configuring the Telemetry (ceilometer) service (optional)
  • Setting up a MongoDB database for ceilometer
  • Configuring the hosts
  • Configuring the hosts for an HA deployment
  • Configuring the user data
  • References
• Configuring the Aodh service (optional)
  • Setting up a MongoDB database for Aodh
  • Configuring the hosts
  • Configuring the user data
• Configuring the Identity service (keystone) (optional)
  • Securing keystone communication with SSL certificates
  • Implementing LDAP (or Active Directory) backends
• Configuring the Networking service (neutron) (optional)
  • Firewall service (optional)
  • Load balancing service (optional)
    • Deploying LBaaS v1
    • Deploying LBaaS v2
    • Special notes about LBaaS
  • Virtual private network service (optional)
• Overriding OpenStack configuration defaults
  • Overriding .conf files
  • Overriding .json files
  • Currently available overrides
• Securing services with SSL certificates
  • Self-signed certificates
    • Setting self-signed certificate subject data
    • Generating and regenerating self-signed certificates
  • User-provided certificates
• Checking the integrity of your configuration files
• Configuring Identity service (keystone) federation (optional)
  • Using Identity service to Identity service federation
    • Identity service to Identity service federation authentication wrapper
  • Identity Service (keystone) service provider background
    • References
  • Configure Identity Service (keystone) as a federated service provider
  • Configure Identity service (keystone) as a federated identity provider
  • Configuring Active Directory Federation Services (ADFS) 3.0 as an identity provider
    • Configuring ADFS
    • References
  • Configure Identity Service (keystone) Domain-Project-Group-Role mappings
    • Identity service federation attribute mapping
  • Identity Service to Identity Service federation example use-case
    • Keystone identity provider (IdP) configuration
    • Keystone service provider (SP) configuration
    • Reviewing or modifying the configuration with the OpenStack client
      • Service providers on the identity provider
      • Identity providers on the service provider
      • Federated identities on the service provider
      • Federation mappings
      • Federation protocols
• Configuring the Ceph client (optional)
  • Authentication
  • Configuration file overrides
  • Monitors

Figure 4.1. Installation work flow

Ansible references a handful of files containing mandatory and optional configuration directives. These files must be modified to define the target environment before running the Ansible playbooks. Perform the following tasks:

• Configure Target host networking to define bridge interfaces and networks
• Configure a list of target hosts on which to install the software
• Configure virtual and physical network relationships for OpenStack Networking (neutron)
• (Optional) Configure the hypervisor
• (Optional) Configure Block Storage (cinder) to use the NetApp back end
• (Optional) Configure Block Storage (cinder) backups.
• (Optional) Configure Block Storage availability zones
• Configure passwords for all services

---

• Documentation Home
• Installation Guide
• Upgrade Guide
• Developer Documentation