Brian Moss f694a2b49e [Install Guide] Move auth_strategy to [api] group

DEFAULT;auth_strategy is a deprecated group;name

Change-Id: I1cd08c80932f066ce58b76ec2b29c893dba535ea

2017-02-09 16:21:52 +10:00

16 KiB

Raw Blame History

Install and configure controller node

This section describes how to install and configure the Compute service, code-named nova, on the controller node.

Prerequisites

Before you install and configure the Compute service, you must create databases, service credentials, and API endpoints.

To create the databases, complete these steps:

ubuntu

Use the database access client to connect to the database server as the root user:
```
# mysql
```

rdo or debian or obs

Use the database access client to connect to the database server as the root user:
```
$ mysql -u root -p
```

Create the nova_api and nova databases:

MariaDB [(none)]> CREATE DATABASE nova_api;
MariaDB [(none)]> CREATE DATABASE nova;

Grant proper access to the databases:

MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' \
  IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' \
  IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' \
  IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' \
  IDENTIFIED BY 'NOVA_DBPASS';

Replace NOVA_DBPASS with a suitable password.

Exit the database access client.

Source the admin credentials to gain access to admin-only CLI commands:
```
$ . admin-openrc
```

To create the service credentials, complete these steps:

Create the nova user:

$ openstack user create --domain default \
  --password-prompt nova

User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | default                          |
| enabled             | True                             |
| id                  | 8a7dbf5279404537b1c7b86c033620fe |
| name                | nova                             |
| password_expires_at | None                             |
+---------------------+----------------------------------+

Add the admin role to the nova user:
```
$ openstack role add --project service --user nova admin
```
Note

This command provides no output.

Create the nova service entity:

$ openstack service create --name nova \
  --description "OpenStack Compute" compute

+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | OpenStack Compute                |
| enabled     | True                             |
| id          | 060d59eac51b4594815603d75a00aba2 |
| name        | nova                             |
| type        | compute                          |
+-------------+----------------------------------+

Create the Compute service API endpoints:

$ openstack endpoint create --region RegionOne \
  compute public http://controller:8774/v2.1/%\(tenant_id\)s

+--------------+-------------------------------------------+
| Field        | Value                                     |
+--------------+-------------------------------------------+
| enabled      | True                                      |
| id           | 3c1caa473bfe4390a11e7177894bcc7b          |
| interface    | public                                    |
| region       | RegionOne                                 |
| region_id    | RegionOne                                 |
| service_id   | 060d59eac51b4594815603d75a00aba2          |
| service_name | nova                                      |
| service_type | compute                                   |
| url          | http://controller:8774/v2.1/%(tenant_id)s |
+--------------+-------------------------------------------+

$ openstack endpoint create --region RegionOne \
  compute internal http://controller:8774/v2.1/%\(tenant_id\)s

+--------------+-------------------------------------------+
| Field        | Value                                     |
+--------------+-------------------------------------------+
| enabled      | True                                      |
| id           | e3c918de680746a586eac1f2d9bc10ab          |
| interface    | internal                                  |
| region       | RegionOne                                 |
| region_id    | RegionOne                                 |
| service_id   | 060d59eac51b4594815603d75a00aba2          |
| service_name | nova                                      |
| service_type | compute                                   |
| url          | http://controller:8774/v2.1/%(tenant_id)s |
+--------------+-------------------------------------------+

$ openstack endpoint create --region RegionOne \
  compute admin http://controller:8774/v2.1/%\(tenant_id\)s

+--------------+-------------------------------------------+
| Field        | Value                                     |
+--------------+-------------------------------------------+
| enabled      | True                                      |
| id           | 38f7af91666a47cfb97b4dc790b94424          |
| interface    | admin                                     |
| region       | RegionOne                                 |
| region_id    | RegionOne                                 |
| service_id   | 060d59eac51b4594815603d75a00aba2          |
| service_name | nova                                      |
| service_type | compute                                   |
| url          | http://controller:8774/v2.1/%(tenant_id)s |
+--------------+-------------------------------------------+

Install and configure components

obs

Install the packages:

# zypper install openstack-nova-api openstack-nova-scheduler \
  openstack-nova-conductor openstack-nova-consoleauth \
  openstack-nova-novncproxy iptables

rdo

Install the packages:

# yum install openstack-nova-api openstack-nova-conductor \
  openstack-nova-console openstack-nova-novncproxy \
  openstack-nova-scheduler

ubuntu

Install the packages:

# apt install nova-api nova-conductor nova-consoleauth \
  nova-novncproxy nova-scheduler

debian

Install the packages:
```
# apt install nova-api nova-conductor nova-consoleauth \
  nova-consoleproxy nova-scheduler
```
Note

nova-api-metadata is included in the nova-api package, and can be selected through debconf.

Note

A unique nova-consoleproxy package provides the nova-novncproxy, nova-spicehtml5proxy, and nova-xvpvncproxy packages. To select packages, edit the /etc/default/nova-consoleproxy file or use the debconf interface. You can also manually edit the /etc/default/nova-consoleproxy file, and stop and start the console daemons.

Edit the /etc/nova/nova.conf file and complete the following actions:
rdo or obs
- In the [DEFAULT] section, enable only the compute and metadata APIs:
```
[DEFAULT]
# ...
enabled_apis = osapi_compute,metadata
```
- In the [api_database] and [database] sections, configure database access:
```
[api_database]
# ...
connection = mysql+pymysql://nova:NOVA_DBPASS@controller/nova_api

[database]
# ...
connection = mysql+pymysql://nova:NOVA_DBPASS@controller/nova
```
  Replace NOVA_DBPASS with the password you chose for the Compute databases.
- In the [DEFAULT] section, configure RabbitMQ message queue access:
```
[DEFAULT]
# ...
transport_url = rabbit://openstack:RABBIT_PASS@controller
```
  Replace RABBIT_PASS with the password you chose for the openstack account in RabbitMQ.
- In the [api] and [keystone_authtoken] sections, configure Identity service access:
```
[api]
# ...
auth_strategy = keystone

[keystone_authtoken]
# ...
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = nova
password = NOVA_PASS
```
  Replace NOVA_PASS with the password you chose for the nova user in the Identity service.
  
  Note
  
  Comment out or remove any other options in the [keystone_authtoken] section.
- In the [DEFAULT] section, configure the my_ip option to use the management interface IP address of the controller node:
```
[DEFAULT]
# ...
my_ip = 10.0.0.11
```

obs or rdo or ubuntu

In the [DEFAULT] section, enable support for the Networking service:
```
[DEFAULT]
# ...
use_neutron = True
firewall_driver = nova.virt.firewall.NoopFirewallDriver
```
Note

By default, Compute uses an internal firewall driver. Since the Networking service includes a firewall driver, you must disable the Compute firewall driver by using the nova.virt.firewall.NoopFirewallDriver firewall driver.

In the [vnc] section, configure the VNC proxy to use the management interface IP address of the controller node:
```
[vnc]
enabled = true
# ...
vncserver_listen = $my_ip
vncserver_proxyclient_address = $my_ip
```

debian

In the [spice] section, disable spice:
```
[spice]
enabled = false
```

In the [glance] section, configure the location of the Image service API:
```
[glance]
# ...
api_servers = http://controller:9292
```

obs

In the [oslo_concurrency] section, configure the lock path:

[oslo_concurrency]
# ...
lock_path = /var/run/nova

rdo

In the [oslo_concurrency] section, configure the lock path:

[oslo_concurrency]
# ...
lock_path = /var/lib/nova/tmp

ubuntu

In the [oslo_concurrency] section, configure the lock path:

[oslo_concurrency]
# ...
lock_path = /var/lib/nova/tmp

ubuntu

https://bugs.launchpad.net/ubuntu/+source/nova/+bug/1506667

Due to a packaging bug, remove the log_dir option from the [DEFAULT] section.

rdo or ubuntu or debian

Populate the Compute databases:

# su -s /bin/sh -c "nova-manage api_db sync" nova
# su -s /bin/sh -c "nova-manage db sync" nova

Note

Ignore any deprecation messages in this output.

Finalize installation

obs

Start the Compute services and configure them to start when the system boots:

# systemctl enable openstack-nova-api.service \
  openstack-nova-consoleauth.service openstack-nova-scheduler.service \
  openstack-nova-conductor.service openstack-nova-novncproxy.service
# systemctl start openstack-nova-api.service \
  openstack-nova-consoleauth.service openstack-nova-scheduler.service \
  openstack-nova-conductor.service openstack-nova-novncproxy.service

rdo

Start the Compute services and configure them to start when the system boots:

# systemctl enable openstack-nova-api.service \
  openstack-nova-consoleauth.service openstack-nova-scheduler.service \
  openstack-nova-conductor.service openstack-nova-novncproxy.service
# systemctl start openstack-nova-api.service \
  openstack-nova-consoleauth.service openstack-nova-scheduler.service \
  openstack-nova-conductor.service openstack-nova-novncproxy.service

debian

Shutdown nova-spicehtml5proxy:
```
# service nova-spicehtml5proxy stop
```
Select novnc startup in /etc/default/nova-consoleproxy:
```
NOVA_CONSOLE_PROXY_TYPE=novnc
```

Add a systemd service file for nova-novncproxy in /lib/systemd/system/nova-novncproxy.service:

[Unit]
Description=OpenStack Compute NoVNC proxy
After=postgresql.service mysql.service keystone.service rabbitmq-server.service ntp.service

Documentation=man:nova-novncproxy(1)

[Service]
User=nova
Group=nova
Type=simple
WorkingDirectory=/var/lib/nova
PermissionsStartOnly=true
ExecStartPre=/bin/mkdir -p /var/lock/nova /var/log/nova /var/lib/nova
ExecStartPre=/bin/chown nova:nova /var/lock/nova /var/lib/nova
ExecStartPre=/bin/chown nova:adm /var/log/nova
ExecStart=/etc/init.d/nova-novncproxy systemd-start
Restart=on-failure
LimitNOFILE=65535
TimeoutStopSec=65

[Install]
WantedBy=multi-user.target

Start the noVNC proxy:

# systemctl daemon-reload
# systemctl enable nova-novncproxy
# service start nova-novncproxy

Restart the other Compute services:

# service nova-api restart
# service nova-consoleauth restart
# service nova-scheduler restart
# service nova-conductor restart

ubuntu or debian

Restart the Compute services:

# service nova-api restart
# service nova-consoleauth restart
# service nova-scheduler restart
# service nova-conductor restart
# service nova-novncproxy restart

16 KiB Raw Blame History

Install and configure controller node

Prerequisites

Install and configure components

Finalize installation

16 KiB

Raw Blame History