c703195f67
Currently the playbooks do not allow Ceph to be configured as a backend for Cinder, Glance or Nova. This commit adds a new role called ceph_client to do the required configuration of the hosts and updates the service roles to include the required configuration file changes. This commit requires that a Ceph cluster already exists and does not make any changes to that cluster. ceph_client role, run on the OpenStack service hosts - configures the Ceph apt repo - installs any required Ceph dependencies - copies the ceph.conf file and appropriate keyring file to /etc/ceph - creates the necessary libvirt secrets os_glance role glance-api.conf will set the following variables for Ceph: - [DEFAULT]/show_image_direct_url - [glance_store]/stores - [glance_store]/rbd_store_pool - [glance_store]/rbd_store_user - [glance_store]/rbd_store_ceph_conf - [glance_store]/rbd_store_chunk_size os_nova role nova.conf will set the following variables for Ceph: - [libvirt]/rbd_user - [libvirt]/rbd_secret_uuid - [libvirt]/images_type - [libvirt]/images_rbd_pool - [libvirt]/images_rbd_ceph_conf - [libvirt]/inject_password - [libvirt]/inject_key - [libvirt]/inject_partition - [libvirt]/live_migration_flag os_cinder is not updated because ceph is defined as a backend and that is generated from a dictionary of the config, for an example backend config, see etc/openstack_deploy/openstack_user_config.yml.example pw-token-gen.py is updated so that variables ending in uuid are assigned a UUID. DocImpact Implements: blueprint ceph-block-devices Closes-Bug: #1455238 Change-Id: Ie484ce0bbb93adc53c30be32f291aa5058b20028
81 lines
2.9 KiB
YAML
81 lines
2.9 KiB
YAML
---
|
|
# Copyright 2015, Serge van Ginderachter <serge@vanginderachter.be>
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# to user Ceph in OSAD, you need to
|
|
# - have the needed pools and a client user (for glance, cinder and/or nova)
|
|
# pre-provisioned in your ceph cluster; OSAD assumes to have root access to
|
|
# the monitor hosts
|
|
# - configure / overrules following defaults in osad's user config
|
|
# - some ceph specific vars are (also) part of other role defaults:
|
|
# * glance
|
|
# * nova
|
|
# - cinder gets configured with ceph if there are cinder backends defined with
|
|
# the rbd driver (see openstack_user_config.yml.example)
|
|
|
|
# Ceph GPG Keys
|
|
ceph_gpg_keys:
|
|
- key_name: 'ceph'
|
|
keyserver: 'hkp://keyserver.ubuntu.com:80'
|
|
fallback_keyserver: 'hkp://p80.pool.sks-keyservers.net:80'
|
|
hash_id: '0x7ebfdd5d17ed316d'
|
|
|
|
|
|
# Ceph Repositories
|
|
ceph_apt_repo_url_region: "www" # or "eu" for Netherlands based mirror
|
|
ceph_stable_release: hammer
|
|
ceph_apt_repo_url: "http://{{ ceph_apt_repo_url_region }}.ceph.com/debian-{{ ceph_stable_release }}/"
|
|
ceph_apt_repo:
|
|
repo: "deb {{ ceph_apt_repo_url }} {{ ansible_lsb.codename }} main"
|
|
state: "present"
|
|
|
|
ceph_apt_pinned_packages: [{ package: "*", release: Inktank, priority: 1001 }]
|
|
|
|
# Ceph Authentication
|
|
cephx: true
|
|
|
|
# Ceph Monitors
|
|
# A list of the IP addresses for your Ceph monitors
|
|
ceph_mons: []
|
|
|
|
# Path to local ceph.conf file
|
|
# Leave this commented to obtain a ceph.conf from one of the monitors defined in ceph_mons
|
|
#ceph_conf_file: |
|
|
# [global]
|
|
# fsid = 4037aa5f-abde-4378-9470-f73dbd6ceaba
|
|
# mon_initial_members = mon1.example.local,mon2.example.local,mon3.example.local
|
|
# mon_host = 10.16.5.40,10.16.5.41,10.16.5.42
|
|
# auth_cluster_required = cephx
|
|
# auth_service_required = cephx
|
|
# auth_client_required = cephx
|
|
|
|
# Ceph client usernames for glance and cinder+nova
|
|
glance_ceph_client: glance
|
|
cinder_ceph_client: cinder
|
|
# by default we assume you use rbd for both cinder and nova, and as libvirt
|
|
# needs to access both volumes (cinder) as boot disks (nova) we default to
|
|
# reuse the cinder_ceph_client
|
|
# only need to change this if you'd use ceph for boot disks and not for volumes
|
|
nova_ceph_client: '{{ cinder_ceph_client }}'
|
|
# overruled in user_secrets:
|
|
nova_ceph_client_uuid: 457eb676-33da-42ec-9a8c-9293d545c337
|
|
cephkeys_access_group: cephkeys
|
|
openstack_service_system_user: null
|
|
ceph_cinder_service_names:
|
|
- cinder-volume
|
|
ceph_nova_service_names:
|
|
- nova-compute
|
|
ceph_glance_service_names:
|
|
- glance-api
|