OpenStack Newton : Configure Heat#2
2016/10/27 |
Install OpenStack Orchestration Service (Heat).
This example shows to install Orchestration Services on the existing environment like follows.
For example, install and configure Orchestration Services on the Network Node. | +------------------+ | +------------------------+ | [ Control Node ] | | | [ Network Node ] | | Keystone |10.0.0.30 | 10.0.0.50| DHCP,L3,L2 Agent | | Glance |------------+------------| Metadata Agent | | Nova API |eth0 | eth0| Heat API,API-CFN | | Neutron Server | | | Heat Engine | +------------------+ | +------------------------+ eth0|10.0.0.51 +--------------------+ | [ Compute Node ] | | Nova Compute | | L2 Agent | +--------------------+ |
Install and configure Heat services on the Network Node on this section.
|
|
[1] | Install Heat services. |
[root@network ~]# yum --enablerepo=centos-openstack-newton,epel -y install openstack-heat-api openstack-heat-api-cfn openstack-heat-engine python-heatclient
|
[2] | Configure Heat service. |
[root@network ~]# mv /etc/heat/heat.conf /etc/heat/heat.conf.org
[root@network ~]#
vi /etc/heat/heat.conf # create new
[DEFAULT]
deferred_auth_method = trusts trusts_delegated_roles = heat_stack_owner # Heat installed server heat_metadata_server_url = http://10.0.0.50:8000 heat_waitcondition_server_url = http://10.0.0.50:8000/v1/waitcondition heat_watch_server_url = http://10.0.0.50:8003 heat_stack_user_role = heat_stack_user # Heat donmain name stack_user_domain_name = heat # Heat domain admin name stack_domain_admin = heat_domain_admin # Heat domain admin's password stack_domain_admin_password = servicepassword rpc_backend = rabbit
[database]
# MariaDB connection info connection = mysql+pymysql://heat:password@10.0.0.30/heat # RabbitMQ connection info [oslo_messaging_rabbit] rabbit_host = 10.0.0.30 rabbit_port = 5672 rabbit_userid = openstack rabbit_password = password
[clients_keystone]
# specify Keystone server auth_uri = http://10.0.0.30:35357
[ec2authtoken]
# specify Keystone server auth_uri = http://10.0.0.30:5000
[heat_api]
bind_host = 0.0.0.0 bind_port = 8004
[heat_api_cfn]
bind_host = 0.0.0.0 bind_port = 8000
[keystone_authtoken]
# specify Keystone server auth_uri = http://10.0.0.30:5000 auth_url = http://10.0.0.30:35357 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = heat password = servicepassword
[trustee]
auth_plugin = password auth_url = http://10.0.0.30:35357 username = heat password = servicepassword user_domain_name = default chgrp heat /etc/heat/heat.conf [root@network ~]# chmod 640 /etc/heat/heat.conf [root@network ~]# su -s /bin/bash heat -c "heat-manage db_sync" [root@network ~]# systemctl start openstack-heat-api openstack-heat-api-cfn openstack-heat-engine [root@network ~]# systemctl enable openstack-heat-api openstack-heat-api-cfn openstack-heat-engine |
[3] | If Firewalld is running, allow service ports. |
[root@network ~]# firewall-cmd --add-port={8000/tcp,8004/tcp} --permanent success [root@network ~]# firewall-cmd --reload success |