302 lines
15 KiB
Ruby
302 lines
15 KiB
Ruby
#
|
|
# Cookbook Name:: openstack-common
|
|
# Attributes:: default
|
|
#
|
|
# Copyright 2012, Jay Pipes
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
#
|
|
|
|
# Setting this to True means that database passwords and service user
|
|
# passwords for Keystone will be easy-to-remember values -- they will be
|
|
# the same value as the key. For instance, if a cookbook calls the
|
|
# ::Openstack::secret routine like so:
|
|
#
|
|
# pass = secret "passwords", "nova"
|
|
#
|
|
# The value of pass will be "nova"
|
|
default["openstack"]["developer_mode"] = false
|
|
|
|
# The type of token signing to use (uuid or pki)
|
|
default["openstack"]["auth"]["strategy"] = "uuid"
|
|
|
|
# Set to true where using self-signed certs (in testing environments)
|
|
default["openstack"]["auth"]["validate_certs"] = true
|
|
|
|
# ========================= Encrypted Databag Setup ===========================
|
|
#
|
|
# The openstack-common cookbook's default library contains a `secret`
|
|
# routine that looks up the value of encrypted databag values. This routine
|
|
# uses the secret key file located at the following location to decrypt the
|
|
# values in the data bag.
|
|
default["openstack"]["secret"]["key_path"] = "/etc/chef/openstack_data_bag_secret"
|
|
|
|
# The name of the encrypted data bag that stores service user passwords, with
|
|
# each key in the data bag corresponding to a named OpenStack service, like
|
|
# "nova", "cinder", etc.
|
|
default["openstack"]["secret"]["service_passwords_data_bag"] = "service_passwords"
|
|
|
|
# The name of the encrypted data bag that stores DB passwords, with
|
|
# each key in the data bag corresponding to a named OpenStack database, like
|
|
# "nova", "cinder", etc.
|
|
default["openstack"]["secret"]["db_passwords_data_bag"] = "db_passwords"
|
|
|
|
# The name of the encrypted data bag that stores Keystone user passwords, with
|
|
# each key in the data bag corresponding to a user (Keystone or otherwise).
|
|
default["openstack"]["secret"]["user_passwords_data_bag"] = "user_passwords"
|
|
|
|
# ========================= Package and Repository Setup ======================
|
|
#
|
|
# Various Linux distributions provide OpenStack packages and repositories.
|
|
# The provide some sensible defaults, but feel free to override per your
|
|
# needs.
|
|
|
|
# The coordinated release of OpenStack codename
|
|
default["openstack"]["release"] = "folsom"
|
|
|
|
# The Ubuntu Cloud Archive has packages for multiple Ubuntu releases. For
|
|
# more information, see: https://wiki.ubuntu.com/ServerTeam/CloudArchive.
|
|
# In the component strings, %codename% will be replaced by the value of
|
|
# the node["lsb"]["codename"] Ohai value and %release% will be replaced
|
|
# by the value of node["openstack"]["release"]
|
|
default["openstack"]["apt"]["uri"] = "http://ubuntu-cloud.archive.canonical.com/ubuntu"
|
|
default["openstack"]["apt"]["components"] = [ "precise-updates/folsom", "main" ]
|
|
# For the SRU packaging, use this:
|
|
# default["openstack"]["apt"]["components"] = [ "%codename%-proposed/%release%", "main" ]
|
|
|
|
#TODO(jaypipes): Do RHEL/Fedora platform family YUM setup
|
|
|
|
# ======================== OpenStack Endpoints ================================
|
|
#
|
|
# OpenStack recipes often need information about the various service
|
|
# endpoints in the deployment. For instance, the cookbook that deploys
|
|
# the Nova API service will need to set the glance_api_servers configuration
|
|
# option in the nova.conf, and the cookbook setting up the Glance image
|
|
# service might need information on the Swift proxy endpoint, etc. Having
|
|
# all of this related OpenStack endpoint information in a single set of
|
|
# common attributes in the openstack-common cookbook attributes means that
|
|
# instead of doing funky role-based lookups, a deployment zone's OpenStack
|
|
# endpoint information can simply be accessed by having the
|
|
# openstack-common::default recipe added to some base role definition file
|
|
# that all OpenStack nodes add to their run list.
|
|
#
|
|
# node['openstack']['endpoints'] is a hash of hashes, where each value hash
|
|
# contains one of more of the following keys:
|
|
#
|
|
# - scheme
|
|
# - uri
|
|
# - host
|
|
# - port
|
|
# - path
|
|
#
|
|
# If the uri key is set, its value is used as the full URI for the endpoint.
|
|
# If the uri key is not set, the endpoint's full URI is constructed from the
|
|
# component parts. This allows setups that use some standardized DNS names for
|
|
# OpenStack service endpoints in a deployment zone as well as setups that
|
|
# instead assign IP addresses (for an actual node or a load balanced virtual
|
|
# IP) in a network to a particular OpenStack service endpoint.
|
|
|
|
# ******************** OpenStack Identity Endpoints ***************************
|
|
|
|
# The OpenStack Identity (Keystone) API endpoint. This is commonly called
|
|
# the Keystone Service endpoint...
|
|
default['openstack']['endpoints']['identity-api']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['identity-api']['scheme'] = "https"
|
|
default['openstack']['endpoints']['identity-api']['port'] = "5000"
|
|
default['openstack']['endpoints']['identity-api']['path'] = "/v2.0"
|
|
|
|
# The OpenStack Identity (Keystone) Admin API endpoint
|
|
default['openstack']['endpoints']['identity-admin']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['identity-admin']['scheme'] = "https"
|
|
default['openstack']['endpoints']['identity-admin']['port'] = "35357"
|
|
default['openstack']['endpoints']['identity-admin']['path'] = "/v2.0"
|
|
|
|
# ****************** OpenStack Compute Endpoints ******************************
|
|
|
|
# The OpenStack Compute (Nova) Native API endpoint
|
|
default['openstack']['endpoints']['compute-api']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['compute-api']['scheme'] = "https"
|
|
default['openstack']['endpoints']['compute-api']['port'] = "8774"
|
|
default['openstack']['endpoints']['compute-api']['path'] = "/v2/%(tenant_id)s"
|
|
|
|
# The OpenStack Compute (Nova) EC2 API endpoint
|
|
default['openstack']['endpoints']['compute-ec2-api']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['compute-ec2-api']['scheme'] = "https"
|
|
default['openstack']['endpoints']['compute-ec2-api']['port'] = "8773"
|
|
default['openstack']['endpoints']['compute-ec2-api']['path'] = "/services/Cloud"
|
|
|
|
# The OpenStack Compute (Nova) EC2 Admin API endpoint
|
|
default['openstack']['endpoints']['compute-ec2-admin']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['compute-ec2-admin']['scheme'] = "https"
|
|
default['openstack']['endpoints']['compute-ec2-admin']['port'] = "8773"
|
|
default['openstack']['endpoints']['compute-ec2-admin']['path'] = "/services/Admin"
|
|
|
|
# The OpenStack Compute (Nova) XVPvnc endpoint
|
|
default['openstack']['endpoints']['compute-xvpvnc']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['compute-xvpvnc']['scheme'] = "https"
|
|
default['openstack']['endpoints']['compute-xvpvnc']['port'] = "6081"
|
|
default['openstack']['endpoints']['compute-xvpvnc']['path'] = "/console"
|
|
|
|
# The OpenStack Compute (Nova) novnc endpoint
|
|
default['openstack']['endpoints']['compute-novnc']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['compute-novnc']['scheme'] = "https"
|
|
default['openstack']['endpoints']['compute-novnc']['port'] = "6080"
|
|
default['openstack']['endpoints']['compute-novnc']['path'] = "/vnc_auto.html"
|
|
|
|
# The OpenStack Compute (Nova) novnc server endpoint
|
|
# TODO(jaypipes) Is this necessary? It's the same as the novnc endpoint...
|
|
default['openstack']['endpoints']['compute-novnc-server']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['compute-novnc-server']['scheme'] = "https"
|
|
default['openstack']['endpoints']['compute-novnc-server']['port'] = "6080"
|
|
default['openstack']['endpoints']['compute-novnc-server']['path'] = "/vnc_auto.html"
|
|
|
|
# ******************** OpenStack Image Endpoints ******************************
|
|
|
|
# The OpenStack Image (Glance) API endpoint
|
|
default['openstack']['endpoints']['image-api']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['image-api']['scheme'] = "https"
|
|
default['openstack']['endpoints']['image-api']['port'] = "9292"
|
|
default['openstack']['endpoints']['image-api']['path'] = "/v2"
|
|
|
|
# The OpenStack Image (Glance) Registry API endpoint
|
|
default['openstack']['endpoints']['image-registry']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['image-registry']['scheme'] = "https"
|
|
default['openstack']['endpoints']['image-registry']['port'] = "9191"
|
|
default['openstack']['endpoints']['image-registry']['path'] = "/v2"
|
|
|
|
# ******************** OpenStack Volume Endpoints *****************************
|
|
|
|
# The OpenStack Volume (Cinder) API endpoint
|
|
default['openstack']['endpoints']['volume-api']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['volume-api']['scheme'] = "https"
|
|
default['openstack']['endpoints']['volume-api']['port'] = "8776"
|
|
default['openstack']['endpoints']['volume-api']['path'] = "/v1/%(tenant_id)s"
|
|
|
|
# ******************** OpenStack Metering Endpoints ***************************
|
|
|
|
# The OpenStack Metering (Ceilometer) API endpoint
|
|
default['openstack']['endpoints']['metering-api']['host'] = "127.0.0.1"
|
|
default['openstack']['endpoints']['metering-api']['scheme'] = "https"
|
|
default['openstack']['endpoints']['metering-api']['port'] = "9000"
|
|
default['openstack']['endpoints']['metering-api']['path'] = "/v1"
|
|
|
|
# Alternately, if you used some standardized DNS naming scheme, you could
|
|
# do something like this, which would override any part-wise specifications above.
|
|
#
|
|
# default['openstack']['endpoints']['identity-api']['uri'] = "https://identity.example.com:35357/v2.0"
|
|
# default['openstack']['endpoints']['identity-admin']['uri'] = "https://identity.example.com:5000/v2.0"
|
|
# default['openstack']['endpoints']['compute-api']['uri'] = "https://compute.example.com:8774/v2/%(tenant_id)s"
|
|
# default['openstack']['endpoints']['compute-ec2-api']['uri'] = "https://ec2.example.com:8773/services/Cloud"
|
|
# default['openstack']['endpoints']['compute-ec2-admin']['uri'] = "https://ec2.example.com:8773/services/Admin"
|
|
# default['openstack']['endpoints']['compute-xvpvnc']['uri'] = "https://xvpvnc.example.com:6081/console"
|
|
# default['openstack']['endpoints']['compute-novnc']['uri'] = "https://novnc.example.com:6080/vnc_auto.html"
|
|
# default['openstack']['endpoints']['image-api']['uri'] = "https://image.example.com:9292/v2"
|
|
# default['openstack']['endpoints']['image-registry']['uri'] = "https://image.example.com:9191/v2"
|
|
# default['openstack']['endpoints']['volume-api']['uri'] = "https://volume.example.com:8776/v1/%(tenant_id)s"
|
|
# default['openstack']['endpoints']['metering-api']['uri'] = "https://metering.example.com:9000/v1"
|
|
|
|
# ======================== OpenStack DB Support ================================
|
|
#
|
|
# This section of node attributes stores information about the database hosts
|
|
# used in an OpenStack deployment.
|
|
#
|
|
# There is no 'scheme' key. Instead, there is a 'db_type' key that should
|
|
# contain one of 'sqlite', 'mysql', or 'postgresql'
|
|
#
|
|
# The ::Openstack::db(<SERVICE_NAME>) library routine allows a lookup from any recipe
|
|
# to this array, returning the host information for the server that contains
|
|
# the database for <SERVICE_NAME>, where <SERVICE_NAME> is one of 'compute' (Nova),
|
|
# 'image' (Glance), 'identity' (Keystone), 'network' (Quantum), or 'volume' (Cinder)
|
|
#
|
|
# The ::Openstack::db_connection(<SERVICE_NAME>, <USER>, <PASSWORD>) library routine
|
|
# returns the SQLAlchemy DB URI for <SERVICE_NAME>, with the supplied user and password
|
|
# that a calling service might be using when connecting to the database.
|
|
#
|
|
# For example, let's assume that the database that is used by the OpenStack Identity
|
|
# service (Keystone) is configured as follows:
|
|
#
|
|
# host: 192.168.0.3
|
|
# port: 3306
|
|
# db_type: mysql
|
|
# db_name: keystone
|
|
#
|
|
# Further suppose that a node running the OpenStack Identity API service needs to
|
|
# connect to the above identity database server. It has the following in it's node
|
|
# attributes:
|
|
#
|
|
# node['db']['user'] = 'keystone'
|
|
#
|
|
# In a "keystone" recipe, you might find the following code:
|
|
#
|
|
# user = node['db']['user']
|
|
# pass = secret 'passwords', 'keystone'
|
|
#
|
|
# sql_connection = ::Openstack::db_uri('identity', user, pass)
|
|
#
|
|
# The sql_connection variable would then be set to "mysql://keystone:password@192.168.0.3:keystone"
|
|
# and could then be written to the keystone.conf file in a template.
|
|
|
|
# Database used by the OpenStack Compute (Nova) service
|
|
default['openstack']['db']['compute']['db_type'] = "mysql"
|
|
default['openstack']['db']['compute']['host'] = "127.0.0.1"
|
|
default['openstack']['db']['compute']['port'] = "3306"
|
|
default['openstack']['db']['compute']['db_name'] = "nova"
|
|
|
|
# Database used by the OpenStack Identity (Keystone) service
|
|
default['openstack']['db']['identity']['db_type'] = "mysql"
|
|
default['openstack']['db']['identity']['host'] = "127.0.0.1"
|
|
default['openstack']['db']['identity']['port'] = "3306"
|
|
default['openstack']['db']['identity']['db_name'] = "keystone"
|
|
|
|
# Database used by the OpenStack Image (Glance) service
|
|
default['openstack']['db']['image']['db_type'] = "mysql"
|
|
default['openstack']['db']['image']['host'] = "127.0.0.1"
|
|
default['openstack']['db']['image']['port'] = "3306"
|
|
default['openstack']['db']['image']['db_name'] = "glance"
|
|
|
|
# Database used by the OpenStack Network (Quantum) service
|
|
default['openstack']['db']['network']['db_type'] = "mysql"
|
|
default['openstack']['db']['network']['host'] = "127.0.0.1"
|
|
default['openstack']['db']['network']['port'] = "3306"
|
|
default['openstack']['db']['network']['db_name'] = "quantum"
|
|
|
|
# Database used by the OpenStack Volume (Cinder) service
|
|
default['openstack']['db']['volume']['db_type'] = "mysql"
|
|
default['openstack']['db']['volume']['host'] = "127.0.0.1"
|
|
default['openstack']['db']['volume']['port'] = "3306"
|
|
default['openstack']['db']['volume']['db_name'] = "cinder"
|
|
|
|
# Database used by the OpenStack Dashboard (Horizon)
|
|
default['openstack']['db']['dashboard']['db_type'] = "mysql"
|
|
default['openstack']['db']['dashboard']['host'] = "127.0.0.1"
|
|
default['openstack']['db']['dashboard']['port'] = "3306"
|
|
default['openstack']['db']['dashboard']['db_name'] = "horizon"
|
|
|
|
# Database used by OpenStack Metering (Ceilometer)
|
|
default['openstack']['db']['metering']['db_type'] = "mysql"
|
|
default['openstack']['db']['metering']['host'] = "127.0.0.1"
|
|
default['openstack']['db']['metering']['port'] = "3306"
|
|
default['openstack']['db']['metering']['db_name'] = "ceilometer"
|
|
|
|
# Switch to store the MySQL root password in a databag instead of
|
|
# using the generated OpenSSL cookbook secure_password one.
|
|
default['openstack']['db']['root_user_use_databag'] = false
|
|
|
|
# If above root_user_use_databag is true, the below string
|
|
# will be passed to the user_password library routine.
|
|
default['openstack']['db']['root_user_key'] = 'mysqlroot'
|
|
|
|
# logging.conf list keypairs module_name => severity to ignore
|
|
default['openstack']['logging']['ignore'] = {'nova.api.openstack.wsgi' => 'WARNING',
|
|
'nova.osapi_compute.wsgi.server' => 'WARNING'}
|