OpenStack Ocata : Configure Heat#2 (Network Node)
2017/03/05 |
Install OpenStack Orchestration Service (Heat).
This example is based on the emvironment like follows.
------------+--------------------------------+--------------------------------+------------ | | | eth0|10.0.0.30 eth0|10.0.0.50 eth0|10.0.0.51 +-----------+-----------+ +-----------+-----------+ +-----------+-----------+ | [ Control Node ] | | [ Network Node ] | | [ Compute Node ] | | | | | | | | MariaDB RabbitMQ | | Open vSwitch | | Libvirt | | Memcached httpd | | L2,L3,Metadata Agent | | Nova Compute | | Keystone Glance | | Heat API API-CFN | | Open vSwitch | | Nova API | | Heat Engine | | L2 Agent | | Neutron Server | | | | | +-----------------------+ +-----------------------+ +-----------------------+ |
[1] | Install Heat services on Network Node. |
[root@network ~]# yum --enablerepo=centos-openstack-ocata,epel -y install openstack-heat-api openstack-heat-api-cfn openstack-heat-engine python-heatclient
|
[2] | Configure Heat. |
[root@network ~]# mv /etc/heat/heat.conf /etc/heat/heat.conf.org
[root@network ~]#
vi /etc/heat/heat.conf # create new [DEFAULT] deferred_auth_method = trusts trusts_delegated_roles = heat_stack_owner # Heat installed server heat_metadata_server_url = http://10.0.0.50:8000 heat_waitcondition_server_url = http://10.0.0.50:8000/v1/waitcondition heat_watch_server_url = http://10.0.0.50:8003 heat_stack_user_role = heat_stack_user # Heat domain name stack_user_domain_name = heat # Heat domain admin name stack_domain_admin = heat_domain_admin # Heat domain admin's password stack_domain_admin_password = servicepassword # RabbitMQ connection info transport_url = rabbit://openstack:password@10.0.0.30 # MariaDB connection info [database] connection = mysql+pymysql://heat:password@10.0.0.30/heat # Keystone auth info [clients_keystone] auth_uri = http://10.0.0.30:35357 # Keystone auth info [ec2authtoken] auth_uri = http://10.0.0.30:5000 [heat_api] bind_host = 0.0.0.0 bind_port = 8004 [heat_api_cfn] bind_host = 0.0.0.0 bind_port = 8000 # Keystone auth info [keystone_authtoken] auth_uri = http://10.0.0.30:5000 auth_url = http://10.0.0.30:35357 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = heat password = servicepassword [trustee] auth_plugin = password auth_url = http://10.0.0.30:35357 username = heat password = servicepassword user_domain_name = default chgrp heat /etc/heat/heat.conf [root@network ~]# chmod 640 /etc/heat/heat.conf [root@network ~]# su -s /bin/bash heat -c "heat-manage db_sync" [root@network ~]# systemctl start openstack-heat-api openstack-heat-api-cfn openstack-heat-engine [root@network ~]# systemctl enable openstack-heat-api openstack-heat-api-cfn openstack-heat-engine |
[3] | If Firewalld is running, allow service ports. |
[root@network ~]# firewall-cmd --add-port={8000/tcp,8004/tcp} --permanent success [root@network ~]# firewall-cmd --reload success |