OpenStack: Installing HEAT

Install RDO HEAT package

# yum install openstack-heat-api openstack-heat-api-cfn \
  openstack-heat-engine python-heatclient

Create Heat & Heat-CFN users, services and endpoints

$ source admin-openrc.sh
$ openstack user create --domain default --password-prompt heat
$ openstack role add --project service --user heat admin

$ openstack service create --name heat \
  --description "Orchestration" orchestration
$ openstack service create --name heat-cfn \
  --description "Orchestration"  cloudformation

$ openstack endpoint create --region RegionOne \
  orchestration public http://controller:8004/v1/%\(tenant_id\)s
$ openstack endpoint create --region RegionOne \
  orchestration internal http://controller:8004/v1/%\(tenant_id\)s
$ openstack endpoint create --region RegionOne \
  orchestration admin http://controller:8004/v1/%\(tenant_id\)s


$ openstack endpoint create --region RegionOne \
  cloudformation public http://controller:8000/v1
$ openstack endpoint create --region RegionOne \
  cloudformation internal http://controller:8000/v1
$ openstack endpoint create --region RegionOne \
  cloudformation admin http://controller:8000/v1

Create separate domain for heat and user to operate it

$ openstack domain create --description "Stack projects and users" heat
$ openstack user create --domain heat --password-prompt heat_domain_admin
$ openstack role add --domain heat --user heat_domain_admin admin

$ openstack role create heat_stack_owner
$ openstack role add --project demo --user demo heat_stack_owner
$ openstack role create heat_stack_user

Edit the /etc/heat/heat.conf file

[DEFAULT]
rpc_backend = rabbit
heat_metadata_server_url = http://controller:8000
heat_waitcondition_server_url = http://controller:8000/v1/waitcondition
stack_domain_admin = heat_domain_admin
stack_domain_admin_password = HEAT_DOMAIN_PASS
stack_user_domain_name = heat
verbose = True

[oslo_messaging_rabbit]
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = RABBIT_PASS

[database]
connection = mysql://heat:HEAT_DBPASS@controller/heat

[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = heat
password = HEAT_PASS

[trustee]
auth_plugin = password
auth_url = http://controller:35357
username = heat
password = HEAT_PASS
user_domain_id = default

[clients_keystone]
auth_uri = http://controller:5000

[ec2authtoken]
auth_uri = http://controller:5000/v3

Enable heat services and start it

# systemctl enable openstack-heat-api.service \
  openstack-heat-api-cfn.service openstack-heat-engine.service
# systemctl start openstack-heat-api.service \
  openstack-heat-api-cfn.service openstack-heat-engine.service