OpenStack: Implementing the Heat Orchestration Service - Revision history

Jon at 09:42, 30 April 2015

2015-04-30T09:42:42Z

Jon at 09:28, 30 April 2015

2015-04-30T09:28:59Z

Jon at 09:02, 30 April 2015

2015-04-30T09:02:03Z

Jon: Created page with "* Install: [root@server2-a ~]# yum -y install openstack-heat-* python-heatclient openstack-utils python-openstackclient * Grab the MySQL root password: ..."

2015-04-30T08:43:13Z

Created page with "* Install: <syntaxhighlight> [root@server2-a ~]# yum -y install openstack-heat-* python-heatclient openstack-utils python-openstackclient </syntaxhighlight> * Grab the MySQL root password: <syntaxhighlight> ..."

New page

* Install:
<syntaxhighlight>
[root@server2-a ~]# yum -y install openstack-heat-* python-heatclient openstack-utils python-openstackclient
</syntaxhighlight>

* Grab the MySQL root password:
<syntaxhighlight>
[root@server2-a ~]# grep MYSQL_PW /root/answers.txt
CONFIG_MYSQL_PW=8c15a44079cd4189
[root@server2-a ~]# export MYSQL_PW=8c15a44079cd4189
</syntaxhighlight>

* Configure Heat database, start by logging in as the root user:
<syntaxhighlight>
[root@server2-a ~]# mysql -u root -p$MYSQL_PW
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MariaDB connection id is 1699
Server version: 5.5.37-MariaDB-wsrep MariaDB Server, wsrep_25.10.r3980

Copyright (c) 2000, 2013, Oracle, Monty Program Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> create database heat;
Query OK, 1 row affected (0.00 sec)
</syntaxhighlight>

* Create '''heat''' user with a password or '''redhat''':
<syntaxhighlight>
MariaDB [(none)]> grant all privileges on heat.* to 'heat'@'localhost' identified by 'redhat';
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all privileges on heat.* to 'heat'@'%' identified by 'redhat';
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> flush privileges;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> quit;
Bye
</syntaxhighlight>

* Backup files that will be changed:
<syntaxhighlight>
[root@server2-a ~]# cp /etc/heat/heat.conf /etc/heat/heat.conf.orig
[root@server2-a ~]# cp /etc/nova/nova.conf /etc/nova/nova.conf.orig
</syntaxhighlight>

* Generate an encryption key and update the Heat conf file:
<syntaxhighlight>
[root@server2-a ~]# export ENCKEY=$(openssl rand -hex 16)
[root@server2-a ~]# crudini --set /etc/heat/heat.conf DEFAULT auth_encryption_key ${ENCKEY}
[root@server2-a ~]# crudini --set /etc/heat/heat.conf database connection mysql://heat:redhat@172.25.2.10/heat
[root@server2-a ~]# crudini --set /etc/heat/heat.conf DEFAULT sql_connection mysql://heat:redhat@172.25.2.10/heat
[root@server2-a ~]# crudini --set /etc/heat/heat.conf DEFAULT rpc_backend heat.openstack.common.rpc.impl_kombu
</syntaxhighlight>

* Update Heat conf file with Keystone information:
<syntaxhighlight>
[root@server2-a ~]# crudini --set /etc/heat/heat.conf keystone_authtoken admin_tenant_name services
[root@server2-a ~]# crudini --set /etc/heat/heat.conf keystone_authtoken admin_user heat
[root@server2-a ~]# crudini --set /etc/heat/heat.conf keystone_authtoken admin_password redhat
[root@server2-a ~]# crudini --set /etc/heat/heat.conf keystone_authtoken auth_port 35357
[root@server2-a ~]# crudini --set /etc/heat/heat.conf keystone_authtoken auth_host 172.25.2.10
[root@server2-a ~]# crudini --set /etc/heat/heat.conf keystone_authtoken auth_protocol http
[root@server2-a ~]# crudini --set /etc/heat/heat.conf keystone_authtoken auth_uri http://172.25.2.10:5000/v2.0
[root@server2-a ~]# crudini --set /etc/heat/heat.conf ec2authtoken auth_uri http://172.25.2.10:35357/v2.0
</syntaxhighlight>

* As the '''heat''' user, initialise the database:
<syntaxhighlight>
[root@server2-a ~]# runuser -s /bin/sh heat -c "heat-manage db_sync"
No handlers could be found for logger "heat.common.config"
/usr/lib64/python2.7/site-packages/sqlalchemy/engine/default.py:324: Warning: Specified key was too long; max key length is 767 bytes
cursor.execute(statement, parameters)
</syntaxhighlight>

* Update Heat conf file with the RabbitMQ information:
<syntaxhighlight>
[root@server2-a ~]# crudini --set /etc/heat/heat.conf DEFAULT rabbit_host server2-a.example.com
</syntaxhighlight>

* Configure Heat services to bind on the Server2-a public IP:
<syntaxhighlight>
[root@server2-a ~]# crudini --set /etc/heat/heat.conf heat_api bind_host 172.25.2.10
[root@server2-a ~]# crudini --set /etc/heat/heat.conf heat_api_cfn bind_host 172.25.2.10
[root@server2-a ~]# crudini --set /etc/heat/heat.conf heat_api_cloudwatch bind_host 172.25.2.10
</syntaxhighlight>

* Configure the Heat services host names to which Heat instances should connect:
<syntaxhighlight>
[root@server2-a ~]# crudini --set /etc/heat/heat.conf DEFAULT heat_metadata_server_url 172.25.2.10:8000
[root@server2-a ~]# crudini --set /etc/heat/heat.conf DEFAULT heat_waitcondition_server_url 172.25.2.10:8000/v1/waitcondition
[root@server2-a ~]# crudini --set /etc/heat/heat.conf DEFAULT heat_watch_server_url 172.25.2.10:8003
</syntaxhighlight>

* Source '''<code>/root/keystonere_admin</code>''' file:
<syntaxhighlight>
[root@server2-a ~]# source /root/keystonerc_admin
[root@server2-a ~(keystone_admin)]#
</syntaxhighlight>

* Create the '''heat''' user in Keystone:
<syntaxhighlight>
[root@server2-a ~(keystone_admin)]# keystone user-create --name heat --pass redhat
+----------+----------------------------------+
| Property | Value |
+----------+----------------------------------+
| email | |
| enabled | True |
| id | 65600c99bd184b2fa740075972d7c758 |
| name | heat |
| username | heat |
+----------+----------------------------------+
</syntaxhighlight>

* Link the '''heat''' user and the '''admin''' role within the '''services''' tennant:
<syntaxhighlight>
[root@server2-a ~(keystone_admin)]# keystone user-role-add --user heat --role admin --tenant services
</syntaxhighlight>

* Create the '''heat' service in Keystone:
<syntaxhighlight>
[root@server2-a ~(keystone_admin)]# keystone service-create --name heat --type orchestration --description "Heat Orchestration Srvice"
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | Heat Orchestration Srvice |
| enabled | True |
| id | 23108969e77f4abc90598e51e7a168aa |
| name | heat |
| type | orchestration |
+-------------+----------------------------------+
</syntaxhighlight>

* Use the '''heat''' service ID to create the '''heat''' and points in Keystone:
<syntaxhighlight>
[root@server2-a ~(keystone_admin)]# keystone endpoint-create --region RegionOne --service-id 23108969e77f4abc90598e51e7a168aa --publicurl "http://172.25.2.10:8004/v1/%(tenant_id)s" --adminurl "http://172.25.2.10:8004/v1/%(tenant_id)s" --internalurl "http://172.25.2.10:8004/v1/%(tenant_id)s"
+-------------+------------------------------------------+
| Property | Value |
+-------------+------------------------------------------+
| adminurl | http://172.25.2.10:8004/v1/%(tenant_id)s |
| id | 408818da1f2e4bb1b17ac414547430ee |
| internalurl | http://172.25.2.10:8004/v1/%(tenant_id)s |
| publicurl | http://172.25.2.10:8004/v1/%(tenant_id)s |
| region | RegionOne |
| service_id | 23108969e77f4abc90598e51e7a168aa |
+-------------+------------------------------------------+
</syntaxhighlight>

* Create the '''heat-cfn''' service and the adequate endpoint in Keystone:
<syntaxhighlight>
[root@server2-a ~(keystone_admin)]# keystone service-create --name heat-cfn --type cloudformation --description "Heat Cloudformation Service"
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | Heat Cloudformation Service |
| enabled | True |
| id | 3701ee5cf80141008157ca500ce90ce6 |
| name | heat-cfn |
| type | cloudformation |
+-------------+----------------------------------+
[root@server2-a ~(keystone_admin)]# keystone endpoint-create --region RegionOne --service-id 3701ee5cf80141008157ca500ce90ce6 --publicurl hrrp://172.25.2.10:8000/v1 --adminurl http://172.25.2.10:8000/v1 --internalurl http://172.25.2.10:8000/v1
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| adminurl | http://172.25.2.10:8000/v1 |
| id | 71625c1eaef947cab574f30434da9db4 |
| internalurl | http://172.25.2.10:8000/v1 |
| publicurl | hrrp://172.25.2.10:8000/v1 |
| region | RegionOne |
| service_id | 3701ee5cf80141008157ca500ce90ce6 |
+-------------+----------------------------------+
</syntaxhighlight>

* Heat requires special users to receive the progress data; these users are, by default, given the role of heat_stack_user. Declare this role in Keystone:
<syntaxhighlight>
[root@server2-a ~(keystone_admin)]# keystone role-create --name heat_stack_user
+----------+----------------------------------+
| Property | Value |
+----------+----------------------------------+
| id | 31cdca83adff485ba6b3b68158eda62a |
| name | heat_stack_user |
+----------+----------------------------------+
</syntaxhighlight>

* Create and identity domain. This requires version 3 of the Keystone API
** Find the '''admin_token''' in use by Keystone:
<syntaxhighlight>
[root@server2-a ~(keystone_admin)]# grep admin_token /etc/keystone/keystone.conf
#admin_token=ADMIN
admin_token=4c5ccfe13c474d92a5fe5d64a4168b50
</syntaxhighlight>

@@ Line 370: / Line 370: @@
 | 9f21e191-9edf-482c-854d-6a8e0342a23e | multi      | CREATE_COMPLETE | 2015-04-30T09:27:07Z |
 +--------------------------------------+------------+-----------------+----------------------+
 </syntaxhighlight>

@@ Line 273: / Line 273: @@
 [root@server2-a ~(keystone_admin)]# systemctl enable openstack-heat-engine
 ln -s '/usr/lib/systemd/system/openstack-heat-engine.service' '/etc/systemd/system/multi-user.target.wants/openstack-heat-engine.service'
 </syntaxhighlight>

@@ Line 191: / Line 191: @@
 #admin_token=ADMIN
 admin_token=4c5ccfe13c474d92a5fe5d64a4168b50
 </syntaxhighlight>