Merge "Refactor install-guide to configure API/Conductor seperately"
This commit is contained in:
Jenkins
Gerrit Code Review
commit
4d77414f05
@ -163,6 +163,14 @@ Although some configuration options are mentioned here, it is recommended that
|
|||||||
you review all the `available options <https://git.openstack.org/cgit/openstack/ironic/tree/etc/ironic/ironic.conf.sample>`_
|
you review all the `available options <https://git.openstack.org/cgit/openstack/ironic/tree/etc/ironic/ironic.conf.sample>`_
|
||||||
so that the Bare Metal service is configured for your needs.
|
so that the Bare Metal service is configured for your needs.
|
||||||
|
|
||||||
|
It is possible to set up an ironic-api and an ironic-conductor services on the
|
||||||
|
same host or different hosts. Users also can add new ironic-conductor hosts
|
||||||
|
to deal with an increasing number of bare metal nodes. But the additional ironic-conductor
|
||||||
|
services should be at the same version as that of existing ironic-conductor services.
|
||||||
|
|
||||||
|
Configuring ironic-api service
|
||||||
|
------------------------------
|
||||||
|
|
||||||
#. The Bare Metal service stores information in a database. This guide uses the
|
#. The Bare Metal service stores information in a database. This guide uses the
|
||||||
MySQL database that is used by other OpenStack services.
|
MySQL database that is used by other OpenStack services.
|
||||||
|
|
||||||
@ -172,15 +180,19 @@ so that the Bare Metal service is configured for your needs.
|
|||||||
|
|
||||||
[database]
|
[database]
|
||||||
...
|
...
|
||||||
|
|
||||||
# The SQLAlchemy connection string used to connect to the
|
# The SQLAlchemy connection string used to connect to the
|
||||||
# database (string value)
|
# database (string value)
|
||||||
#connection=<None>
|
|
||||||
connection = mysql+pymysql://ironic:IRONIC_DBPASSWORD@DB_IP/ironic?charset=utf8
|
connection = mysql+pymysql://ironic:IRONIC_DBPASSWORD@DB_IP/ironic?charset=utf8
|
||||||
|
|
||||||
#. Configure the Bare Metal service to use the RabbitMQ message broker by
|
#. Configure the ironic-api service to use the RabbitMQ message broker by
|
||||||
setting one or more of these options. Replace RABBIT_HOST with the
|
setting one or more of these options. Replace RABBIT_HOST with the
|
||||||
address of the RabbitMQ server.::
|
address of the RabbitMQ server::
|
||||||
|
|
||||||
|
[DEFAULT]
|
||||||
|
...
|
||||||
|
# The messaging driver to use, defaults to rabbit. Other
|
||||||
|
# drivers include qpid and zmq. (string value)
|
||||||
|
#rpc_backend=rabbit
|
||||||
|
|
||||||
[oslo_messaging_rabbit]
|
[oslo_messaging_rabbit]
|
||||||
...
|
...
|
||||||
@ -194,109 +206,183 @@ so that the Bare Metal service is configured for your needs.
|
|||||||
# The RabbitMQ password (string value)
|
# The RabbitMQ password (string value)
|
||||||
#rabbit_password=guest
|
#rabbit_password=guest
|
||||||
|
|
||||||
# The RabbitMQ virtual host (string value)
|
#. Configure the ironic-api service to use these credentials with the Identity
|
||||||
#rabbit_virtual_host=/
|
|
||||||
|
|
||||||
#. Configure the Bare Metal service to use these credentials with the Identity
|
|
||||||
service. Replace IDENTITY_IP with the IP of the Identity server, and
|
service. Replace IDENTITY_IP with the IP of the Identity server, and
|
||||||
replace IRONIC_PASSWORD with the password you chose for the ``ironic``
|
replace IRONIC_PASSWORD with the password you chose for the ``ironic``
|
||||||
user in the Identity service::
|
user in the Identity service::
|
||||||
|
|
||||||
[DEFAULT]
|
[DEFAULT]
|
||||||
...
|
...
|
||||||
# Method to use for authentication: noauth or keystone.
|
# Authentication strategy used by ironic-api: one of
|
||||||
# (string value)
|
# "keystone" or "noauth". "noauth" should not be used in a
|
||||||
auth_strategy=keystone
|
# production environment because all authentication will be
|
||||||
|
# disabled. (string value)
|
||||||
|
#auth_strategy=keystone
|
||||||
|
|
||||||
...
|
|
||||||
[keystone_authtoken]
|
[keystone_authtoken]
|
||||||
|
...
|
||||||
# Host providing the admin Identity API endpoint (string
|
|
||||||
# value)
|
|
||||||
#auth_host=127.0.0.1
|
|
||||||
auth_host=IDENTITY_IP
|
|
||||||
|
|
||||||
# Port of the admin Identity API endpoint (integer value)
|
|
||||||
#auth_port=35357
|
|
||||||
|
|
||||||
# Protocol of the admin Identity API endpoint(http or https)
|
|
||||||
# (string value)
|
|
||||||
#auth_protocol=https
|
|
||||||
|
|
||||||
# Complete public Identity API endpoint (string value)
|
# Complete public Identity API endpoint (string value)
|
||||||
#auth_uri=<None>
|
|
||||||
auth_uri=http://IDENTITY_IP:5000/
|
auth_uri=http://IDENTITY_IP:5000/
|
||||||
|
|
||||||
# Keystone account username (string value)
|
# Complete admin Identity API endpoint. This should specify
|
||||||
#admin_user=<None>
|
# the unversioned root endpoint e.g. https://localhost:35357/
|
||||||
|
# (string value)
|
||||||
|
identity_uri=http://IDENTITY_IP:35357/
|
||||||
|
|
||||||
|
# Service username. (string value)
|
||||||
admin_user=ironic
|
admin_user=ironic
|
||||||
|
|
||||||
# Keystone account password (string value)
|
# Service account password. (string value)
|
||||||
#admin_password=<None>
|
|
||||||
admin_password=IRONIC_PASSWORD
|
admin_password=IRONIC_PASSWORD
|
||||||
|
|
||||||
# Keystone service account tenant name to validate user tokens
|
# Service tenant name. (string value)
|
||||||
# (string value)
|
|
||||||
#admin_tenant_name=admin
|
|
||||||
admin_tenant_name=service
|
admin_tenant_name=service
|
||||||
|
|
||||||
# Directory used to cache files related to PKI tokens (string
|
|
||||||
# value)
|
|
||||||
#signing_dir=<None>
|
|
||||||
|
|
||||||
#. Set the URL (replace NEUTRON_IP) for connecting to the Networking service,
|
|
||||||
to be the Networking service endpoint::
|
|
||||||
|
|
||||||
[neutron]
|
|
||||||
|
|
||||||
# URL for connecting to neutron. (string value)
|
|
||||||
#url=http://127.0.0.1:9696
|
|
||||||
url=http://NEUTRON_IP:9696
|
|
||||||
|
|
||||||
#. Configure the Bare Metal service so that it can communicate with the
|
|
||||||
Image service. Replace GLANCE_IP with the hostname or IP address of
|
|
||||||
the Image service::
|
|
||||||
|
|
||||||
[glance]
|
|
||||||
|
|
||||||
# A list of URL schemes that can be downloaded directly via
|
|
||||||
# the direct_url. Currently supported schemes: [file]. (list
|
|
||||||
# value)
|
|
||||||
#allowed_direct_url_schemes=
|
|
||||||
|
|
||||||
# Default glance hostname or IP address. (string value)
|
|
||||||
#glance_host=$my_ip
|
|
||||||
glance_host=GLANCE_IP
|
|
||||||
|
|
||||||
# Default glance port. (integer value)
|
|
||||||
#glance_port=9292
|
|
||||||
|
|
||||||
# Default protocol to use when connecting to glance. Set to
|
|
||||||
# https for SSL. (string value)
|
|
||||||
#glance_protocol=http
|
|
||||||
|
|
||||||
# A list of the glance api servers available to nova. Prefix
|
|
||||||
# with https:// for SSL-based glance API servers. Format is
|
|
||||||
# [hostname|IP]:port. (string value)
|
|
||||||
#glance_api_servers=<None>
|
|
||||||
|
|
||||||
Note: Swift backend for the Image service should be installed and configured
|
|
||||||
for ``agent_*`` drivers. Starting with Mitaka the Bare Metal service also
|
|
||||||
supports Ceph Object Gateway (RADOS Gateway) as the Image service's backend
|
|
||||||
(:ref:`radosgw support`).
|
|
||||||
|
|
||||||
#. Create the Bare Metal service database tables::
|
#. Create the Bare Metal service database tables::
|
||||||
|
|
||||||
ironic-dbsync --config-file /etc/ironic/ironic.conf create_schema
|
ironic-dbsync --config-file /etc/ironic/ironic.conf create_schema
|
||||||
|
|
||||||
#. Restart the Bare Metal service::
|
#. Restart the ironic-api service::
|
||||||
|
|
||||||
Fedora/RHEL7/CentOS7:
|
Fedora/RHEL7/CentOS7:
|
||||||
sudo systemctl restart openstack-ironic-api
|
sudo systemctl restart openstack-ironic-api
|
||||||
sudo systemctl restart openstack-ironic-conductor
|
|
||||||
|
|
||||||
Ubuntu:
|
Ubuntu:
|
||||||
sudo service ironic-api restart
|
sudo service ironic-api restart
|
||||||
|
|
||||||
|
|
||||||
|
Configuring ironic-conductor service
|
||||||
|
------------------------------------
|
||||||
|
|
||||||
|
#. Replace HOST_IP with IP of the conductor host, and replace DRIVERS with a
|
||||||
|
comma-separated list of drivers you chose for the conductor service as
|
||||||
|
follows::
|
||||||
|
|
||||||
|
[DEFAULT]
|
||||||
|
...
|
||||||
|
# IP address of this host. If unset, will determine the IP
|
||||||
|
# programmatically. If unable to do so, will use "127.0.0.1".
|
||||||
|
# (string value)
|
||||||
|
my_ip = HOST_IP
|
||||||
|
|
||||||
|
# Specify the list of drivers to load during service
|
||||||
|
# initialization. Missing drivers, or drivers which fail to
|
||||||
|
# initialize, will prevent the conductor service from
|
||||||
|
# starting. The option default is a recommended set of
|
||||||
|
# production-oriented drivers. A complete list of drivers
|
||||||
|
# present on your system may be found by enumerating the
|
||||||
|
# "ironic.drivers" entrypoint. An example may be found in the
|
||||||
|
# developer documentation online. (list value)
|
||||||
|
enabled_drivers=DRIVERS
|
||||||
|
|
||||||
|
.. note::
|
||||||
|
If a conductor host has multiple IPs, ``my_ip`` should
|
||||||
|
be set to the IP which is on the same network as the bare metal nodes.
|
||||||
|
|
||||||
|
#. Configure the ironic-api service URL. Replace IRONIC_API_IP with IP of
|
||||||
|
ironic-api service as follows::
|
||||||
|
|
||||||
|
[conductor]
|
||||||
|
...
|
||||||
|
# URL of Ironic API service. If not set ironic can get the
|
||||||
|
# current value from the keystone service catalog. (string
|
||||||
|
# value)
|
||||||
|
api_url=http://IRONIC_API_IP:6385
|
||||||
|
|
||||||
|
#. Configure the location of the database. Ironic-conductor should use the same
|
||||||
|
configuration as ironic-api. Replace IRONIC_DBPASSWORD with the password of
|
||||||
|
your ``ironic`` user, and replace DB_IP with the IP address where the DB server
|
||||||
|
is located::
|
||||||
|
|
||||||
|
[database]
|
||||||
|
...
|
||||||
|
# The SQLAlchemy connection string to use to connect to the
|
||||||
|
# database. (string value)
|
||||||
|
connection = mysql+pymysql://ironic:IRONIC_DBPASSWORD@DB_IP/ironic?charset=utf8
|
||||||
|
|
||||||
|
#. Configure the ironic-conductor service to use the RabbitMQ message broker by
|
||||||
|
setting one or more of these options. Ironic-conductor should use the same
|
||||||
|
configuration as ironic-api. Replace RABBIT_HOST with the address of the RabbitMQ
|
||||||
|
server::
|
||||||
|
|
||||||
|
[DEFAULT]
|
||||||
|
...
|
||||||
|
# The messaging driver to use, defaults to rabbit. Other
|
||||||
|
# drivers include qpid and zmq. (string value)
|
||||||
|
#rpc_backend=rabbit
|
||||||
|
|
||||||
|
[oslo_messaging_rabbit]
|
||||||
|
...
|
||||||
|
# The RabbitMQ broker address where a single node is used.
|
||||||
|
# (string value)
|
||||||
|
rabbit_host=RABBIT_HOST
|
||||||
|
|
||||||
|
# The RabbitMQ userid. (string value)
|
||||||
|
#rabbit_userid=guest
|
||||||
|
|
||||||
|
# The RabbitMQ password. (string value)
|
||||||
|
#rabbit_password=guest
|
||||||
|
|
||||||
|
#. Configure the ironic-conductor service so that it can communicate with the
|
||||||
|
Image service. Replace GLANCE_IP with the hostname or IP address of
|
||||||
|
the Image service::
|
||||||
|
|
||||||
|
[glance]
|
||||||
|
...
|
||||||
|
# Default glance hostname or IP address. (string value)
|
||||||
|
glance_host=GLANCE_IP
|
||||||
|
|
||||||
|
.. note::
|
||||||
|
Swift backend for the Image service should be installed and configured
|
||||||
|
for ``agent_*`` drivers. Starting with Mitaka the Bare Metal service also
|
||||||
|
supports Ceph Object Gateway (RADOS Gateway) as the Image service's backend
|
||||||
|
(:ref:`radosgw support`).
|
||||||
|
|
||||||
|
#. Set the URL (replace NEUTRON_IP) for connecting to the Networking service,
|
||||||
|
to be the Networking service endpoint::
|
||||||
|
|
||||||
|
[neutron]
|
||||||
|
...
|
||||||
|
# URL for connecting to neutron. (string value)
|
||||||
|
url=http://NEUTRON_IP:9696
|
||||||
|
|
||||||
|
To configure the network for ironic-conductor service to perform node cleaning, see
|
||||||
|
`CleaningNetworkSetup`_.
|
||||||
|
|
||||||
|
#. Configure the ironic-conductor service to use these credentials with the Identity
|
||||||
|
service. Ironic-conductor should use the same configuration as ironic-api.
|
||||||
|
Replace IDENTITY_IP with the IP of the Identity server, and replace IRONIC_PASSWORD
|
||||||
|
with the password you chose for the ``ironic`` user in the Identity service::
|
||||||
|
|
||||||
|
[keystone_authtoken]
|
||||||
|
...
|
||||||
|
# Complete public Identity API endpoint (string value)
|
||||||
|
auth_uri=http://IDENTITY_IP:5000/
|
||||||
|
|
||||||
|
# Complete admin Identity API endpoint. This should specify
|
||||||
|
# the unversioned root endpoint e.g. https://localhost:35357/
|
||||||
|
# (string value)
|
||||||
|
identity_uri=http://IDENTITY_IP:35357/
|
||||||
|
|
||||||
|
# Service username. (string value)
|
||||||
|
admin_user=ironic
|
||||||
|
|
||||||
|
# Service account password. (string value)
|
||||||
|
admin_password=IRONIC_PASSWORD
|
||||||
|
|
||||||
|
# Service tenant name. (string value)
|
||||||
|
admin_tenant_name=service
|
||||||
|
|
||||||
|
#. Make sure that ``qemu-img`` and ``iscsiadm`` (in the case of using iscsi-deploy driver)
|
||||||
|
binaries are installed and prepare the host system as described at
|
||||||
|
`Setup the drivers for the Bare Metal service`_
|
||||||
|
|
||||||
|
#. Restart the ironic-conductor service::
|
||||||
|
|
||||||
|
Fedora/RHEL7/CentOS7:
|
||||||
|
sudo systemctl restart openstack-ironic-conductor
|
||||||
|
|
||||||
|
Ubuntu:
|
||||||
sudo service ironic-conductor restart
|
sudo service ironic-conductor restart
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user