[DOCS] Move limited connectivity section to Deploy Guide
The limited connectivity section was temporarily moved into the developer guide temporarily when re-arranging the deploy guide, but never moved back. As this is important information for deployers to see, this is being moved into the deploy guide appendix, then references to it are added to the AIO and Deployment Guide in appropriate places. The following notes regarding additional changes apply: - The pip offline install content for the limited connectivity page breaks the flow and doesn't really fit in the two models proposed. This content should move to the pip install role. - The reference to the get_url/get_uri bug for Ansible 1.9 no longer applies as Newton onwards now uses Ansible 2.1.x and above. - An unused Appendix H reference in the Security Appendix has been removed. - The Appendices have been re-arranged slightly to try to show the information in a perceived order of importance. Change-Id: If4b8a75277374ed7e96a1ce6610ed8a897125693
This commit is contained in:
parent
11017ab5a0
commit
e4551ef3e2
@ -1,5 +1,5 @@
|
||||
===================================
|
||||
Appendix F: Advanced configuration
|
||||
Appendix G: Advanced configuration
|
||||
===================================
|
||||
|
||||
.. TODO: include intro on what advanced configuration is, whether it’s required
|
||||
|
@ -36,4 +36,3 @@ For more information about the security configurations, see the
|
||||
.. _openstack-ansible-security: http://docs.openstack.org/developer/openstack-ansible-security/
|
||||
.. _Security Technical Implementation Guide (STIG): https://en.wikipedia.org/wiki/Security_Technical_Implementation_Guide
|
||||
.. _OpenStack-Ansible host security: http://docs.openstack.org/developer/openstack-ansible-security/
|
||||
.. _Appendix H: ../install-guide/app-custom-layouts.html
|
||||
|
@ -1,5 +1,5 @@
|
||||
====================================
|
||||
Appendix G: Ceph-Ansible integration
|
||||
Appendix H: Ceph-Ansible integration
|
||||
====================================
|
||||
|
||||
OpenStack-Ansible allows `Ceph storage <https://ceph.com>`_ cluster integration
|
||||
|
@ -1,6 +1,8 @@
|
||||
===============================================
|
||||
Installation on hosts with limited connectivity
|
||||
===============================================
|
||||
.. _limited-connectivity-appendix:
|
||||
|
||||
================================================
|
||||
Appendix F: Installing with limited connectivity
|
||||
================================================
|
||||
|
||||
Many playbooks and roles in OpenStack-Ansible retrieve dependencies from the
|
||||
public Internet by default. Many deployers block direct outbound connectivity
|
||||
@ -18,23 +20,6 @@ Example internet dependencies
|
||||
- Source code repositories
|
||||
- GPG keys for package validation
|
||||
|
||||
Install pip through deployment host
|
||||
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||
|
||||
You may install pip via the deployment host in environments where the
|
||||
deployment host has internet connectivity, but the containers do not.
|
||||
|
||||
Configure the ``pip_offline_install`` variable to enable the deployment
|
||||
host to fetch pip along with its dependencies, then transfer them to the
|
||||
remote container for installation.
|
||||
|
||||
Configuration changes are made in ``/etc/openstack_deploy/user_variables.yml``.
|
||||
|
||||
.. code-block:: yaml
|
||||
|
||||
# Install pip via deployment host
|
||||
pip_offline_install: true
|
||||
|
||||
Practice A: Mirror internet resources locally
|
||||
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||||
|
||||
@ -100,8 +85,7 @@ automation for creating the proxy server(s).
|
||||
.. note::
|
||||
|
||||
We recommend you set your ``/etc/environment`` variables with proxy
|
||||
settings before launching ``scripts/run-playbooks.sh`` to avoid
|
||||
failure.
|
||||
settings before launching any scripts or playbooks to avoid failure.
|
||||
|
||||
Basic proxy configuration
|
||||
-------------------------
|
||||
@ -166,12 +150,3 @@ The list above is intentionally not exhaustive. Additional variables may exist
|
||||
within the project and will be named using the `*_validate_certs` pattern.
|
||||
Disable certificate chain validation on a case by case basis and only after
|
||||
encountering failures that are known to only be caused by the proxy server(s).
|
||||
|
||||
Ansible support for proxy servers
|
||||
---------------------------------
|
||||
|
||||
The `get_url` and `uri` modules in Ansible 1.9.x have inconsistent and buggy
|
||||
behavior when used in concert with many popular proxy servers and
|
||||
configurations. An example Launchpad bug can be found `here
|
||||
<https://bugs.launchpad.net/openstack-ansible/+bug/1556975/>`_. The comments
|
||||
contain a workaround that has been effective for some deployers.
|
@ -1,5 +1,5 @@
|
||||
=================================
|
||||
Appendix H: Additional resources
|
||||
Appendix I: Additional resources
|
||||
=================================
|
||||
|
||||
Ansible resources:
|
||||
|
@ -8,7 +8,7 @@ default. This appendix provides a detailed overview of the most important
|
||||
security enhancements.
|
||||
|
||||
For more information about configuring security, see
|
||||
:deploy_guide:`Appendix F <app-advanced-config-options.html>`.
|
||||
:deploy_guide:`Appendix G <app-advanced-config-options.html>`.
|
||||
|
||||
.. note::
|
||||
|
||||
|
@ -10,6 +10,7 @@ Appendices
|
||||
app-custom-layouts.rst
|
||||
app-security.rst
|
||||
app-networking.rst
|
||||
app-limited-connectivity.rst
|
||||
app-advanced-config-options.rst
|
||||
app-ceph.rst
|
||||
app-resources.rst
|
||||
|
@ -81,6 +81,11 @@ Install the source and dependencies
|
||||
|
||||
Install the source and dependencies for the deployment host.
|
||||
|
||||
.. note::
|
||||
|
||||
If you are installing with limited connectivity, please review
|
||||
:ref:`limited-connectivity-appendix` before proceeding.
|
||||
|
||||
#. Clone the latest stable release of the OpenStack-Ansible Git repository in
|
||||
the ``/opt/openstack-ansible`` directory:
|
||||
|
||||
|
@ -14,7 +14,6 @@ Contents:
|
||||
:maxdepth: 2
|
||||
|
||||
quickstart-aio
|
||||
installation-hosts-limited-connectivity
|
||||
scripts
|
||||
playbooks
|
||||
contribute
|
||||
|
@ -56,6 +56,12 @@ system packages are upgraded and then reboot into the new kernel:
|
||||
# apt-get dist-upgrade
|
||||
# reboot
|
||||
|
||||
.. note::
|
||||
|
||||
If you are installing with limited connectivity, please review
|
||||
the *Installing with limited connectivity* appendix in the
|
||||
`Deployment Guide`_ before proceeding.
|
||||
|
||||
Start by cloning the OpenStack-Ansible repository and changing into the
|
||||
repository root directory:
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user