eth1<\/strong> (because my tenant network is there).<\/p>\nOk, now that your done configuring your system you can click deploy and get a coffee.<\/p>\n
After your installation is complete you’re going to see the following screen:<\/p>\n
![\"deployed\"](\"http:\/\/blog.domb.net\/wp-content\/uploads\/deployed.png\")
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
Lets go and verify that the Red Hat OpenStack Installer configured the system correctly. Login to your controller source the keystone_adminrc. Run keystone endpoint-list:<\/p>\n
![\"keystoned\"](\"http:\/\/blog.domb.net\/wp-content\/uploads\/keystoned.png\")
<\/p>\n
As you can see our public and admin url are on the correct subnet. Lets make sure that the vips for pacemaker were created correctly.\u00a0 Run\u00a0 pcs status | grep pub<\/p>\n
![\"pubipspcs\"](\"http:\/\/blog.domb.net\/wp-content\/uploads\/pubipspcs.png\")
<\/p>\n
Nice, all the vips have public ip’s. Remember the default route change from external to the public api network? Run route to see if that’s correct.<\/p>\n
![\"route\"](\"http:\/\/blog.domb.net\/wp-content\/uploads\/route.png\")
<\/p>\n
As expected\u00a0we see that the default getaway was set on the public api subnet. This means that my br-ex will be plugged in\u00a0to my eth3\/external subnet which you can see\u00a0 by running ovs-vsctl show.<\/p>\n
![\"br-ex\"](\"http:\/\/blog.domb.net\/wp-content\/uploads\/br-ex.png\")
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
<\/p>\n
Next we need to check if the cluster is healthy. You can do this with pcs status.<\/p>\n
![\"pacemakerafterinstall\"](\"http:\/\/blog.domb.net\/wp-content\/uploads\/pacemakerafterinstall.png\")
<\/p>\n
As you can see my 3 controllers are online and I have no failures in the resources. Last but not least (in my setup I choose to use nfs ) I have to check if cinder and glance got mounted correctly. Type mount<\/p>\n
![\"mount\"](\"http:\/\/blog.domb.net\/wp-content\/uploads\/mount.png\")
<\/p>\n
The nfs volumes for Glance and Cinder are both mounted. So we are almost ready to go.<\/p>\n
If you want to connect CloudForms with OpenStack you need an admin user which is part of the tenant (admin) and has a role admin. It also needs to be admin for the services project\/tenant. Lets create the CloudForms user for the OpenStack provider. Source your keystone_adminrc<\/p>\n
[root@mac525400efb284 ~(openstack_admin)]# keystone tenant-list\r\n+----------------------------------+----------+---------+\r\n| id | name | enabled |\r\n+----------------------------------+----------+---------+\r\n| 2bfd94a4c1b544b39d224f2a94901e66 | admin | True |\r\n| a7777076e3324b33948205d731f9d030 | blue | True |\r\n| 2892bbb62e474f32a0fa3255a6d812e4 | red | True |\r\n| 465e99d053b34ddebde3897cb4f1987b | services | True |\r\n+----------------------------------+----------+---------+\r\n<\/pre>\nCreate the CloudForms user<\/p>\n
[root@mac525400efb284 ~(openstack_admin)]# keystone user-create --name cloudforms --tenant-id 2bfd94a4c1b544b39d224f2a94901e66 --pass redhatrocks --email ilove@open.stack --enable true\r\n+----------+----------------------------------+\r\n| Property | Value |\r\n+----------+----------------------------------+\r\n| email | ilove@open.stack |\r\n| enabled | True |\r\n| id | c24c5c2472274a2db6f9bbb30f9edb37 |\r\n| name | cloudforms |\r\n| tenantId | 2bfd94a4c1b544b39d224f2a94901e66 |\r\n| username | cloudforms |\r\n+----------+----------------------------------+\r\n<\/pre>\nList the Keystone Roles and users<\/p>\n
[root@mac525400efb284 ~(openstack_admin)]# keystone role-list\r\n+----------------------------------+------------------+\r\n| id | name |\r\n+----------------------------------+------------------+\r\n| 9fe2ff9ee4384b1894a90878d3e92bab | _member_ |\r\n| c892bd2dbda84abe9d60ab6d9201247b | admin |\r\n| 064cda4f78c84eaeae076f0e1c25ea2c | heat_stack_owner |\r\n| f19f526d30724eed844683b6a8271162 | heat_stack_user |\r\n+----------------------------------+------------------+\r\n[root@mac525400efb284 ~(openstack_admin)]# keystone user-list\r\n+----------------------------------+------------+---------+----------------------+\r\n| id | name | enabled | email |\r\n+----------------------------------+------------+---------+----------------------+\r\n| 0f46f03997224f6a96514fac7754cc87 | admin | True | admin@local.domb.com |\r\n| 59db049f99bf4f84ab4f368d21e5461d | cinder | True | cinder@localhost |\r\n| c24c5c2472274a2db6f9bbb30f9edb37 | cloudforms | True | laurent@domb.net |\r\n| 4023b1b6ae5f447b902843fe97b902c2 | glance | True | glance@localhost |\r\n| 6527504f789f4493800949b03bacf60d | heat | True | heat@localhost |\r\n| b9b2e08d02774162b9820b9e11fcc7ca | neutron | True | neutron@localhost |\r\n| bb189b4ad8e64dd9af16ace81a8c19c5 | nova | True | nova@localhost |\r\n+----------------------------------+------------+---------+----------------------+\r\n<\/pre>\nAdd the correct role tenant id to your user<\/p>\n
[root@mac525400efb284 ~(openstack_admin)]# keystone user-role-add --user c24c5c2472274a2db6f9bbb30f9edb37 --role c892bd2dbda84abe9d60ab6d9201247b --tenant-id 2bfd94a4c1b544b39d224f2a94901e66\r\n<\/pre>\nAdd the cloudforms user to the services tenant<\/p>\n
[root@mac525400efb284 ~(openstack_cloudforms)]# keystone user-role-add --user cloudforms --tenant services --role admin\r\n<\/pre>\nWe are now ready to connect CloudForms\u00a0 to the keystone public vip:5000.\u00a0 You will also need the amqp user and password “Amqp username”\/”Amqp password” (“openstack\/redhat”) which can be found in the controller class (this can be overridden).<\/p>\n
Login to the CloudForms appliance and click on the Cloud -> Providers\u00a0 tab. Under the Cloud -> Provider tab click -> Configuration -> Add new Cloud Provider. ![\"cloudforms\"](\"http:\/\/blog.domb.net\/wp-content\/uploads\/cloudforms.png\")
Enter the following information<\/p>\n
![\"openstackkeystone\"](\"http:\/\/blog.domb.net\/wp-content\/uploads\/openstackkeystone.png\")
<\/p>\n
Click validate. If you get an ok back enter the AMQP user and password<\/p>\n
![\"amqp\"](\"http:\/\/blog.domb.net\/wp-content\/uploads\/amqp.png\")
and click validate and save.<\/p>\n
That’s it, you’re done! You can now use CloudForms to manage your OpenStack HA environment.<\/p>\n
Note: If you add a new tenant to your OpenStack environment and want CloudForms to manage it you will need to add the CloudForms user as admin to that tenant.<\/p>\n","protected":false},"excerpt":{"rendered":"
This post will\u00a0guide you through the configuration for an OpenStack HA cluster setup with public facing admin\/public apis. Exposing the OpenStack apis is essential if you want to make use of hybrid cloud management tools like CloudForms. OpenStack HA is a very complex beast and hard to setup if you don’t have the right tooling….<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[36],"tags":[33,32,35,34],"class_list":["post-886","post","type-post","status-publish","format-standard","hentry","category-openstack","tag-high-availability","tag-openstack","tag-openstack-installer","tag-redhat"],"_links":{"self":[{"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/posts\/886","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.domb.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=886"}],"version-history":[{"count":63,"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/posts\/886\/revisions"}],"predecessor-version":[{"id":1116,"href":"https:\/\/blog.domb.net\/index.php?rest_route=\/wp\/v2\/posts\/886\/revisions\/1116"}],"wp:attachment":[{"href":"https:\/\/blog.domb.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=886"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.domb.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=886"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.domb.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=886"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"openstackdeploy\"](\"http:\/\/blog.domb.net\/wp-content\/uploads\/openstackdeploy.png\")
<\/p>\n![\"ospinstaller](\"http:\/\/blog.domb.net\/wp-content\/uploads\/ospinstaller-network-New-Page2.jpeg\")
<\/a><\/p>\n