openstack
/
tripleo-docs
Code Issues Proposed changes

Update documentation for changed config-download location 

This also updates some mistral related content in
ansible_config_download.rst. We would need more cleanup of
the content to properly document mistral removal.

Depends-on: https://review.opendev.org/721573
Change-Id: Ibfd0156d3245e954bd4b947a9fa7a3ef06b9137e
This commit is contained in:
Rabi Mishra 2020-04-24 10:33:15 +05:30
parent 4d35701abd
commit f5a668bad5
2 changed files with 24 additions and 75 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

96
deploy-guide/source/deployment/ansible_config_download.rst
View File

@ -43,12 +43,11 @@ The difference with ``config-download`` is that although Heat creates all the
deployment data necessary via SoftwareDeployment resources to perform the deployment data necessary via SoftwareDeployment resources to perform the
overcloud installation and configuration, it does not apply any of the software overcloud installation and configuration, it does not apply any of the software
deployments. The data is only made available via the Heat API. Once the stack deployments. The data is only made available via the Heat API. Once the stack
is created, an additional config-download Mistral workflow is triggered that is created, deployment data is downloaded from Heat and ansible playbooks are
downloads all of the deployment data from Heat. generated.
Using the downloaded deployment data, the workflow then generates Ansible Using the downloaded deployment data and ansible playbooks configuration of
playbooks and tasks that are used by the undercloud to complete the the overcloud using ``ansible-playbook`` are completed.
configuration of the overcloud using ``ansible-playbook``.
This diagram details the overall sequence of how using config-download This diagram details the overall sequence of how using config-download
completes an overcloud deployment: completes an overcloud deployment:
@ -64,9 +63,9 @@ overcloud deploy`` (tripleoclient) is run. The command is backwards compatible
in terms of functionality, meaning that running ``openstack overcloud deploy`` in terms of functionality, meaning that running ``openstack overcloud deploy``
will still result in a full overcloud deployment. will still result in a full overcloud deployment.
The deployment is done through a series of automated workflows and steps in The deployment is done through a series of steps in tripleoclient. All of the
tripleoclient. All of the workflow steps are automated by tripleoclient and workflow steps are automated by tripleoclient. The workflow steps are summarized
Mistral workflow(s). The workflow steps are summarized as: as:
#. Create deployment plan #. Create deployment plan
#. Create Heat stack along with any OpenStack resources (Neutron networks, #. Create Heat stack along with any OpenStack resources (Neutron networks,
@ -84,29 +83,10 @@ ansible uses ssh to connect to each node to perform configuration.
The following steps are done to create the ``tripleo-admin`` user: The following steps are done to create the ``tripleo-admin`` user:
#. Create temporary ssh keys on the undercloud #. Runs a playbook to create ``tripleo-admin`` on each node. Also, gives sudo
#. Use a deployer-specified private ssh key (defaults to ``~/.ssh/id_rsa``) to permissions to the user, as well as creates and stores a new ssh keypair
connect to each overcloud node as a deployer specified user (defaults to for ``tripleo-admin``.
``heat-admin``) and adds the temporary public ssh key to
``~/.ssh/authorized_keys`` for that user.
#. Executes a Mistral workflow to create ``tripleo-admin`` on each node,
passing as input the temporary private ssh key and ssh user to Mistral.
#. The workflow creates the ``tripleo-admin`` user and gives sudo permissions
to the user, as well as creates and stores a new ssh keypair specific to
``tripleo-admin``. This keypair (private and public) are stored in the
Mistral database.
#. After the completion of the workflow, the temporary ssh public key is
deleted from ``~/.ssh/authorized_keys`` on each overcloud node, and the
temporary keypair is then deleted from the undercloud.
With these steps, the deployer-specified ssh key which is used for the initial
connection is never sent or stored by any API service.
To override the deployer specified ssh private key and user, there are cli args
available with ``openstack overcloud deploy``::
--overcloud-ssh-user # defaults to heat-admin
--overcloud-ssh-key # defaults to ~/.ssh/id_rsa
The values for these cli arguments must be the same for all nodes in the The values for these cli arguments must be the same for all nodes in the
overcloud deployment. ``overcloud-ssh-key`` should be the private key that overcloud deployment. ``overcloud-ssh-key`` should be the private key that
@ -192,36 +172,18 @@ hostnames in the parameter value. The following example shows a sample value::
Write the contents to an environment file such as ``hostnamemap.yaml``, and Write the contents to an environment file such as ``hostnamemap.yaml``, and
pass the environment as part of the deployment command with ``-e``. pass the environment as part of the deployment command with ``-e``.
Mistral workflow
----------------
The Mistral workflow that will be called by tripleoclient and runs
config-download and ``ansible-playbook`` is
``tripleo.deployment.v1.config_download_deploy``.
Ansible project directory Ansible project directory
^^^^^^^^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^^^^^^^
The workflow will create an Ansible project directory with the plan name under The workflow will create an Ansible project directory with the plan name under
``/var/lib/mistral``. For the default plan name of ``overcloud`` the working ``$HOME/config-download``. For the default plan name of ``overcloud`` the working
directory will be:: directory will be::
/var/lib/mistral/overcloud $HOME/config-download/overcloud
The project directory is where the downloaded software configuration from The project directory is where the downloaded software configuration from
Heat will be saved. It also includes other ansible-related files necessary to Heat will be saved. It also includes other ansible-related files necessary to
run ``ansible-playbook`` to configure the overcloud. run ``ansible-playbook`` to configure the overcloud.
All of the files in the Ansible project directory at
``/var/lib/mistral/<plan>`` are owned by the mistral user and readable by the
mistral group from the mistral-executor container. The interactive user account
on the undercloud can be granted read-only access to these files by using the
following setacl command::
sudo setfacl -R -m u:$USER:rwx /var/lib/mistral
Once a member of the ``mistral`` group, the contents of
``/var/lib/mistral/<plan>`` can be browsed, examined, and
``ansible-playbook`` rerun if desired.
The contents of the project directory include the following files: The contents of the project directory include the following files:
tripleo-ansible-inventory.yaml tripleo-ansible-inventory.yaml
@ -237,8 +199,8 @@ ssh_private_key
Reproducing ansible-playbook Reproducing ansible-playbook
^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Once in the project directory created by the Mistral workflow, simply run Once in the project directory created, simply run ``ansible-playbook-command.sh``
``ansible-playbook-command.sh`` to reproduce the deployment:: to reproduce the deployment::
./ansible-playbook-command.sh ./ansible-playbook-command.sh
@ -296,9 +258,9 @@ applied.
Manual config-download Manual config-download
---------------------- ----------------------
The Mistral workflow that runs config-download can be skipped when running The config-download steps can be skipped when running ``openstack overcloud deploy``
``openstack overcloud deploy`` by passing ``--stack-only``. This will cause by passing ``--stack-only``. This will cause tripleoclient to only deploy the Heat
tripleoclient to only deploy the Heat stack. stack.
When using ``--stack-only``, the deployment data needs to be pulled from Heat When using ``--stack-only``, the deployment data needs to be pulled from Heat
with a separate command and ``ansible-playbook`` run manually. This enables with a separate command and ``ansible-playbook`` run manually. This enables
@ -367,8 +329,7 @@ All default ansible configuration values will be used when manually running
`ansible configuration `ansible configuration
<https://docs.ansible.com/ansible/latest/installation_guide/intro_configuration.html>`_. <https://docs.ansible.com/ansible/latest/installation_guide/intro_configuration.html>`_.
The following minimum configuration is recommended and matches the default The following minimum configuration is recommended::
values used by the mistral workflow that runs ``config-download``::
[defaults] [defaults]
log_path = ansible.log log_path = ansible.log
@ -576,20 +537,10 @@ templates
Other files Other files
^^^^^^^^^^^ ^^^^^^^^^^^
Files in this section are only present in the project directory if the mistral Other files in the project directory are:
workflow was used to generate the project directory under
``/var/lib/mistral/<plan>``
ansible.cfg
Ansible configuration file
ansible-errors.json
JSON structured file containing any deployment errors
ansible.log
Ansilbe log file
ansible-playbook-command.sh ansible-playbook-command.sh
Script to reproduce ansible-playbook command Script to reproduce ansible-playbook command
ssh_private_key
SSH private key used by ansible to access overcloud nodes
tripleo-ansible-inventory.yaml tripleo-ansible-inventory.yaml
Ansible inventory file Ansible inventory file
overcloud-config.tar.gz overcloud-config.tar.gz
@ -638,13 +589,12 @@ the ansible project directory.
Complete the :ref:`manual-config-download` steps to create the ansible project Complete the :ref:`manual-config-download` steps to create the ansible project
directory, or use the existing project directory at directory, or use the existing project directory at
``/var/lib/mistral/<plan>``. ``$HOME/config-download/<plan>``.
.. note:: .. note::
The project directory under ``/var/lib/mistral/<plan>`` is only updated The project directory under ``$HOME/config-download/<plan>`` is only updated
by ``openstack overcloud deploy`` if the mistral workflow is used for by ``openstack overcloud deploy`` if ``--stack-only`` is **not** used.
``config-download`` (e.g., ``--stack-only`` is **not** used).
Tags Tags
^^^^ ^^^^
@ -751,7 +701,7 @@ following options to the ``ansible-playbook`` command::
-e @global_vars.yaml -e @global_vars.yaml
The ``global_vars.yaml`` variable file exists in the config-download directory The ``global_vars.yaml`` variable file exists in the config-download directory
that was either generated manually or under ``/var/lib/mistral``. that was either generated manually or under ``$HOME/config-download``.
Previewing changes Previewing changes
------------------ ------------------

3
deploy-guide/source/deployment/deployment_log.rst
View File

@ -1,5 +1,4 @@
Deployment Log Deployment Log
^^^^^^^^^^^^^^ ^^^^^^^^^^^^^^
The ansible part of the deployment creates a log file that is saved on the The ansible part of the deployment creates a log file that is saved on the
undercloud. The log file is available at ``/var/lib/mistral/<plan undercloud. The log file is available at ``$HOME/ansible.log``.
name>/ansible.log``.