[DOCS] Move limited connectivity section to Deploy Guide

The limited connectivity section was temporarily moved into
the developer guide temporarily when re-arranging the deploy
guide, but never moved back.

As this is important information for deployers to see, this
is being moved into the deploy guide appendix, then references
to it are added to the AIO and Deployment Guide in appropriate
places.

The following notes regarding additional changes apply:

- The pip offline install content for the limited connectivity
  page breaks the flow and doesn't really fit in the two models
  proposed. This content should move to the pip install role.

- The reference to the get_url/get_uri bug for Ansible 1.9 no
  longer applies as Newton onwards now uses Ansible 2.1.x and
  above.

- An unused Appendix H reference in the Security Appendix has
  been removed.

- The Appendices have been re-arranged slightly to try to show
  the information in a perceived order of importance.

Change-Id: If4b8a75277374ed7e96a1ce6610ed8a897125693
(cherry picked from commit e4551ef3e2)
This commit is contained in:
Jesse Pretorius 2017-02-16 10:28:37 +00:00 committed by Jesse Pretorius (odyssey4me)
parent 114872a5bc
commit 3afc6ce9ee
10 changed files with 23 additions and 38 deletions

View File

@ -1,5 +1,5 @@
===================================
Appendix F: Advanced configuration
Appendix G: Advanced configuration
===================================
.. TODO: include intro on what advanced configuration is, whether its required

View File

@ -36,4 +36,3 @@ For more information about the security configurations, see the
.. _openstack-ansible-security: http://docs.openstack.org/developer/openstack-ansible-security/
.. _Security Technical Implementation Guide (STIG): https://en.wikipedia.org/wiki/Security_Technical_Implementation_Guide
.. _OpenStack-Ansible host security: http://docs.openstack.org/developer/openstack-ansible-security/
.. _Appendix H: ../install-guide/app-custom-layouts.html

View File

@ -1,5 +1,5 @@
====================================
Appendix G: Ceph-Ansible integration
Appendix H: Ceph-Ansible integration
====================================
OpenStack-Ansible allows `Ceph storage <https://ceph.com>`_ cluster integration

View File

@ -1,6 +1,8 @@
===============================================
Installation on hosts with limited connectivity
===============================================
.. _limited-connectivity-appendix:
================================================
Appendix F: Installing with limited connectivity
================================================
Many playbooks and roles in OpenStack-Ansible retrieve dependencies from the
public Internet by default. Many deployers block direct outbound connectivity
@ -18,23 +20,6 @@ Example internet dependencies
- Source code repositories
- GPG keys for package validation
Install pip through deployment host
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
You may install pip via the deployment host in environments where the
deployment host has internet connectivity, but the containers do not.
Configure the ``pip_offline_install`` variable to enable the deployment
host to fetch pip along with its dependencies, then transfer them to the
remote container for installation.
Configuration changes are made in ``/etc/openstack_deploy/user_variables.yml``.
.. code-block:: yaml
# Install pip via deployment host
pip_offline_install: true
Practice A: Mirror internet resources locally
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@ -100,8 +85,7 @@ automation for creating the proxy server(s).
.. note::
We recommend you set your ``/etc/environment`` variables with proxy
settings before launching ``scripts/run-playbooks.sh`` to avoid
failure.
settings before launching any scripts or playbooks to avoid failure.
Basic proxy configuration
-------------------------
@ -166,12 +150,3 @@ The list above is intentionally not exhaustive. Additional variables may exist
within the project and will be named using the `*_validate_certs` pattern.
Disable certificate chain validation on a case by case basis and only after
encountering failures that are known to only be caused by the proxy server(s).
Ansible support for proxy servers
---------------------------------
The `get_url` and `uri` modules in Ansible 1.9.x have inconsistent and buggy
behavior when used in concert with many popular proxy servers and
configurations. An example Launchpad bug can be found `here
<https://bugs.launchpad.net/openstack-ansible/+bug/1556975/>`_. The comments
contain a workaround that has been effective for some deployers.

View File

@ -1,5 +1,5 @@
=================================
Appendix H: Additional resources
Appendix I: Additional resources
=================================
Ansible resources:

View File

@ -8,7 +8,7 @@ default. This appendix provides a detailed overview of the most important
security enhancements.
For more information about configuring security, see
:deploy_guide:`Appendix F <app-advanced-config-options.html>`.
:deploy_guide:`Appendix G <app-advanced-config-options.html>`.
.. note::

View File

@ -10,6 +10,7 @@ Appendices
app-custom-layouts.rst
app-security.rst
app-networking.rst
app-limited-connectivity.rst
app-advanced-config-options.rst
app-ceph.rst
app-resources.rst

View File

@ -107,6 +107,11 @@ Install the source and dependencies
Install the source and dependencies for the deployment host.
.. note::
If you are installing with limited connectivity, please review
:ref:`limited-connectivity-appendix` before proceeding.
#. Clone the latest stable release of the OpenStack-Ansible Git repository in
the ``/opt/openstack-ansible`` directory:

View File

@ -14,7 +14,6 @@ Contents:
:maxdepth: 2
quickstart-aio
installation-hosts-limited-connectivity
scripts
playbooks
contribute

View File

@ -64,6 +64,12 @@ system packages are upgraded and then reboot into the new kernel:
# yum install centos-release-openstack-newton git
# reboot
.. note::
If you are installing with limited connectivity, please review
the *Installing with limited connectivity* appendix in the
`Deployment Guide`_ before proceeding.
Start by cloning the OpenStack-Ansible repository and changing into the
repository root directory:
@ -201,7 +207,7 @@ Keystone service, execute:
that are not requested for deployment, but the service will not be deployed
in that container.
.. _Deployment Guide: http://docs.openstack.org/project-deploy-guide/openstack-ansible/draft/
.. _Deployment Guide: http://docs.openstack.org/project-deploy-guide/openstack-ansible/ocata/
Rebooting an AIO
----------------