magnum/common_configure.rst at 5f55ef6b15400b8151a167d3fb8c8f0378929458

Spyros Trigazis 936dd11a16 [install] Add install guide from template for rdo

This guide is based on the installguide-cookiecutter template
and will be published automatically to docs.openstack.org.

[2] is a similar patch and [3] is WIP.

A change to add magnum to the install-guide job will follow.

This is a follow-up of [4].

[1] http://docs.openstack.org/contributor-guide/project-install-guide.html
[2] https://review.openstack.org/#/c/325389
[3] https://review.openstack.org/#/c/317152
[4] https://review.openstack.org/#/c/332161

Change-Id: I145fd30f575dab45b4c947bc4609287b1e300025
Partially-Implements: blueprint magnum-installation-guide

2016-06-22 16:20:05 +02:00

3.6 KiB

Raw Blame History

Edit the /etc/magnum/magnum.conf:
- In the [api] section, configure the host:
```
[api]
...
host = controller
```
- In the [certificates] section, select barbican (or local if you don't have barbican installed):
  - Use barbican to store certificates:
```
[certificates]
...
cert_manager_type = barbican
```
  Important
  
  Barbican is recommended for production environments, local store should be used for evaluation purposes.
  - To use local store for certificates, you have to specify the directory to use:
```
[certificates]
...
cert_manager_type = local
storage_path = /var/lib/magnum/certificates/
```
- In the [cinder_client] section, configure the region name:
```
[cinder_client]
...
region_name = RegionOne
```
- In the [database] section, configure database access:
```
[database]
...
connection = mysql+pymysql://magnum:MAGNUM_DBPASS@controller/magnum
```
  Replace MAGNUM_DBPASS with the password you chose for the magnum database.
- In the [keystone_authtoken] and trust sections, configure Identity service access:
```
[keystone_authtoken]
...
memcached_servers = controller:11211
auth_version = v3
auth_uri = http://controller:5000/v3
project_domain_id = default
project_name = service
user_domain_id = default
password = MAGNUM_PASS
username = magnum
auth_url = http://controller:35357
auth_type = password

[trust]
...
trustee_domain_id = 66e0469de9c04eda9bc368e001676d20
trustee_domain_admin_id = 529b81cf35094beb9784c6d06c090c2b
trustee_domain_admin_password = DOMAIN_ADMIN_PASS
```
  trustee_domain_id is the id of the magnum domain and trustee_domain_admin_id is the id of the magnum_domain_admin user. Replace MAGNUM_PASS with the password you chose for the magnum user in the Identity service and DOMAIN_ADMIN_PASS with the password you chose for the magnum_domain_admin user.
- In the [oslo_concurrency] section, configure the lock_path:
```
[oslo_concurrency]
...
lock_path = /var/lib/magnum/tmp
```
- In the [oslo_messaging_notifications] section, configure the driver:
```
[oslo_messaging_notifications]
...
driver = messaging
```
- In the [oslo_messaging_rabbit] section, configure RabbitMQ message queue access:
```
[oslo_messaging_rabbit]
...
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = RABBIT_PASS
```
  Replace RABBIT_PASS with the password you chose for the openstack account in RabbitMQ.
Note

Make sure that /etc/magnum/magnum.conf still have the correct permissions. You can set the permissions again with:

# chown magnum:magnum /etc/magnum/magnum.conf

Populate Magnum database:

# su -s /bin/sh -c "magnum-db-manage upgrade" magnum

Update heat policy to allow magnum list stacks. Edit your heat policy file, usually /etc/heat/policy.json:
```
...
stacks:global_index: "role:admin",
```
Now restart heat.

3.6 KiB Raw Blame History

3.6 KiB

Raw Blame History