Différences

Ci-dessous, les différences entre deux révisions de la page.

--- openstack:newton:controller [2016/10/14 05:59] – [Service d'orchestration HEAT] madko
+++ openstack:newton:controller [2016/10/14 06:37] (Version actuelle) – [Configuration de HEAT] madko
@@ Ligne 879: / Ligne 879: @@
 ===== Service d'orchestration HEAT =====
-===== Création de la base SQL pour HEAT =====
+==== Création de la base SQL pour HEAT ====
 Se connecter au serveur SQL :
@@ Ligne 888: / Ligne 888: @@
 GRANT ALL PRIVILEGES ON heat.* TO 'heat'@'%' IDENTIFIED BY 'HEAT_DBPASS';
 </code>
+==== Création des utilisateus et services HEAT dans OpenStack ====
+Sur le serveur d'administration :
+<code>
+sourceadmin-openrc
+</code>
+Puis :
+<code>
+openstack user create --domain default --password-prompt heat
+openstack role add --project service --user heat admin
+openstack service create --name heat --description "Orchestration" orchestration
+openstack service create --name heat-cfn --description "Orchestration"  cloudformation
+</code>
+Création des endpoints pour l'API HEAT :
+<code>
+openstack endpoint create --region RegionOne orchestration public http://controller.public:8004/v1/%\(tenant_id\)s
+openstack endpoint create --region RegionOne orchestration internal http://controller.internal:8004/v1/%\(tenant_id\)s
+openstack endpoint create --region RegionOne orchestration admin http://controller.admin:8004/v1/%\(tenant_id\)s
+openstack endpoint create --region RegionOne cloudformation public http://controller.public:8000/v1
+openstack endpoint create --region RegionOne cloudformation internal http://controller.internal:8000/v1
+openstack endpoint create --region RegionOne cloudformation admin http://controller.admin:8000/v1
+</code>
+Création d'un domaine qui contiendra les "stacks" :
+<code>
+openstack domain create --description "Stack projects and users" heat
+openstack user create --domain heat --password heat_domain_admin heat_domain_admin
+openstack role add --domain heat --user-domain heat --user heat_domain_admin admin
+openstack role create heat_stack_owner
+openstack role create heat_stack_user
+</code>
+Pour autoriser l'utilisateur "demo" à gérer des stacks :
+<code>
+openstack role add --project demo --user demo heat_stack_owner
+</code>
+==== Installation de HEAT ====
+Installer les paquets suivants :
+<code>
+yum install openstack-heat-api openstack-heat-api-cfn openstack-heat-engine
+</code>
+==== Configuration de HEAT ====
+Fichier /etc/heat/heat.conf :
+<file>
+[DEFAULT]
+heat_metadata_server_url = http://controller.internal:8000
+heat_waitcondition_server_url = http://controller.internal:8000/v1/waitcondition
+stack_domain_admin = heat_domain_admin
+stack_domain_admin_password = heat_domain_admin
+stack_user_domain_name = heat
+rpc_backend = rabbit
+[auth_password]
+[clients]
+[clients_aodh]
+[clients_barbican]
+[clients_ceilometer]
+[clients_cinder]
+[clients_designate]
+[clients_glance]
+[clients_heat]
+[clients_keystone]
+auth_uri = http://controller.internal:35357
+[clients_magnum]
+[clients_manila]
+[clients_mistral]
+[clients_monasca]
+[clients_neutron]
+[clients_nova]
+[clients_sahara]
+[clients_senlin]
+[clients_swift]
+[clients_trove]
+[clients_zaqar]
+[cors]
+[cors.subdomain]
+[database]
+connection = mysql+pymysql://heat:HEAT_DBPASS@bdd/heat
+[ec2authtoken]
+auth_uri = http://controller.internal:5000
+[eventlet_opts]
+[heat_api]
+[heat_api_cfn]
+[heat_api_cloudwatch]
+[keystone_authtoken]
+auth_uri = http://controller.internal:5000
+auth_url = http://controller.internal:35357
+memcached_servers = controller.internal:11211
+auth_type = password
+project_domain_name = default
+user_domain_name = default
+project_name = service
+username = heat
+password = heat
+[matchmaker_redis]
+[oslo_messaging_amqp]
+[oslo_messaging_notifications]
+[oslo_messaging_rabbit]
+rabbit_host = bdd
+rabbit_userid = openstack
+rabbit_password = RABBIT_PASS
+[oslo_messaging_zmq]
+[oslo_middleware]
+[oslo_policy]
+[paste_deploy]
+[profiler]
+[revision]
+[ssl]
+[trustee]
+auth_type = password
+auth_url = http://controller.internal:35357
+username = heat
+password = heat
+user_domain_name = default
+[volumes]
+</file>
+Initialisation de la base HEAT :
+<code>
+su -s /bin/sh -c "heat-manage db_sync" heat
+</code>
+Pour activer et démarrer les services en rapports avec HEAT :
+<code>systemctl enable openstack-heat-api.service openstack-heat-api-cfn.service openstack-heat-engine.service
+systemctl start openstack-heat-api.service openstack-heat-api-cfn.service openstack-heat-engine.service
+</code>