OpenStack Admin Guide Cloud

docs.openstack.org

Cloud Administrator Guide

February 13, 2015

current

OpenStack Cloud Administrator Guide current (2015-02-13) Copyright © 2013-2015 OpenStack Foundation Some rights reserved. OpenStack offers open source software for cloud administrators to manage and troubleshoot an OpenStack cloud. This guide documents OpenStack Juno, OpenStack Icehouse, and OpenStack Havana releases. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Except where otherwise noted, this document is licensed under Creative Commons Attribution ShareAlike 3.0 Li cense. http://creativecommons.org/licenses/by-sa/3.0/legalcode

Cloud Administrator Guide

February 13, 2015

current

OpenStack Cloud Administrator Guide current (2015-02-13) Copyright © 2013-2015 OpenStack Foundation Some rights reserved. OpenStack offers open source software for cloud administrators to manage and troubleshoot an OpenStack cloud. This guide documents OpenStack Juno, OpenStack Icehouse, and OpenStack Havana releases. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Except where otherwise noted, this document is licensed under Creative Commons Attribution ShareAlike 3.0 Li cense. http://creativecommons.org/licenses/by-sa/3.0/legalcode

Cloud Administrator Guide

February 13, 2015

current

Table of Contents Preface Preface .................................................. ....................................................... .................. ix Conventions ............................................................................................................ ix Document change history ....................................................................................... ix 1. Get started with OpenStack ....................................................... ....................................................... ................................. 1 Conceptual architecture architecture ............................... .................................................... ....... 2 Logical architec ture ........... ...... ........... ........... .......... ........... ........... ........... ........... ........... ...... .. ........................................ 2 OpenStack services services ................................... ............................................................... 4 Feedback Feedback ........ .. ..................................................................................................... ............................................................................................... ........ 18 2. Identity management management ................................................................................................ ................. ............................................................................... 19 Identity concep ts ........... ..... ...... ........................................................................................ .. ...................................................................................... 19 Certificates for PKI ........................ ....................................................... ................. 29 29 Configure the Identity Identity Service Service with SSL .................................................................. 32 External authen tication with Identity Identity ....................................................... ............. 33 Integrate Identi ty  ty with LDAP ...... . ........... ...... ........... ...... ....... ......................................................... 34 Configure Identity Identity service for token binding binding ...................................................... .... 39 Use trusts ........................................................ ........ ................................................ ...................................................... 40 Caching layer layer ..................... ................................................. .................................. 41 41 User CRUD .......................................... .......................................... ....................................................... ........... 43 43 Logging Logging ..... ........................................ ..... ................................... .................................................................... 43 Monitoring ...................................................... ..... ................................................. ...................................................... 44 Start the Identi ty  ty services ........... ...... ........... ...... ............................................... ...................... 45 45 Example usage .............................. .................................................... .................... 45 45 Authentica tion middleware middleware with user user name and password password .................................... 45 Identity API pro tection with role-based access control (RBAC) (RBAC) ................................ 47 Troubleshoot the the Identity service ........................................................................... ............ ............................................................... 49 3. Dashboard ....................... ....................... ....................................................... .................................. 52 52 Customize the dashboard dashboard ........................... ....... .................................................... 52 Set up session s torage for f or the dashboard .......... .... ...... ........... ...... ........... ........... .......... ........... ........... ........... ...... ........ ........ 54 4. Compute ...................................................................................................... ............. ......................................................................................... ............. ............. 59 System architec ture ........... ...... .......... ..... ........................................................ ....................... 59 59 Images and instances instances ............................. ................................................... ............ 65 65 Networking with with nova-network nova-network ............................................................................. 72 System adminis tration ...................................................... ..................................... 88 88 Troubleshoot Compute Compute ........................................................................................ ........................................................................................ 127 5. Object Storage ......................... .... ..................... ..................................................... .......................... 131 131 Introduction to Object to Object Storage Storage ............................................................................ 131 Features and benefits benefits ......................................................... ................................. 131 Object Storage characteristi characteristics cs ...................... .................................................... .... 132 132 Components ............................................................ ............................................................ ............................................ 133 Ring-builder ................................................................ .... ............................................................ ......................................... 139 Cluster architec ture ........... ...... ........... ........... ..... .................................................... ................... 142 142 Replication ................................ ...... .......................... ...................................................... .................... 145 145 Account reaper reaper ............................. ................................................... ................... 146 146 Configure tenant-specific tenant-specific image  image locations locations with Object Storage Storage ............................. 147 Object Storage monitoring monitoring ........ ........................................................ ... ..................................................... .................. 147 147 System adminis tration for Object Storage Storage ............................................................ 151 Troubleshoot Object Object Storage Storage ........... .................................................................... .... ................................................................ 151 6. Block Storage Storage ............................................. ..................................................... ........ 155 155

Cloud Administrator Guide

February 13, 2015

current

Introduction to Block Storage .............................................................................. 155 Increase Increase Block Storage API service throughput throughput ........................................ ............. 156 Manage volumes volumes .............................................................................. ................... 156 Troubleshoo Troubleshoott your installation installation ....................................................................... ...... 180 7. Networking Networking ................................................ ....................................................... ...... 191 Introduction to Networking ................................................................................. 191 Plug-in Plug-in configuration configurationss ...................................... .................................................... 197 Configure Configure neutron neutron agents agents ...................................................... ............................. 202 Networking architecture ...................................................................................... 210 Configure Configure Identity Service Service for Networking Networking .......................................... ................. 215 Networking Networking scenari scenarios os ........................................................................... ............... 219 Advanced Advanced configuration configuration options options ..................... ..................................................... 241 Scalable Scalable and highly available DHCP agents .......................................... ................. 247 Use Networking Networking ................................................. ................................................. 256 Advanced Advanced features through through API extensions .......................................................... 264 Advanced Advanced operational operational features .................................................. .......................... 281 Authenticati Authentication on and authorizati authorization on ..................... ................................................... 283 Plug-in Plug-in pagination pagination and sorting support support .......................... ...................................... 287 8. Telemetry Telemetry ..................................................................................................... ........... 288 Introduction ...................................................... .... .................................................. .................................................. 288 System architec ture ........... ...... ........... ........... .......... .......... ..... ................................................... .......... 288 288 Data collection .......................................... ............................................... ........... 291 291 Data retrieval .......................................... .......................................... ..................................................... ....... 304 304 Alarms ........................................... ............ ............................... ...................................................................... 311 Troubleshoot Telemetry Telemetry ...................... ................................................................. 316 9. Database ........................................ ............ ............................ ......................................................................... 318 Introduction ............................ ............................ ..................................................... ....................... 318 318 Create a datastore datastore ..................... .................................................... ..................... 318 318 Configure a cluster cluster ....................... ....................................................... ................ 322 322 A. Community support support ......................... ................................................ ....................... 323 323 Documentation  Documentation  .................. .................................................... ............................. 323 323 ask.openstack.org ask.openstack.org ................................................................................................ ...... .......................................................................................... 324 OpenStack mailing mailing lists ........................ ................................................................ 324 The OpenStack wiki ............................................................................................. ............................................................................................. 325 The Launchpad Bugs Launchpad Bugs area ........................................................ .... .................................................... ........................... 325 325 The OpenStack IRC channel ................................................................................. ................................................................................. 326 Documentation feedback Documentation feedback ............................................................. .............. ............................................... ....................... 326 326 OpenStack distribution distribution packages packages ........................................................ ................. 326

Cloud Administrator Guide

February 13, 2015

current

List of Figures 1.1. OpenStack OpenStack conceptual conceptual architecture architecture ................................................. .......................... 2 1.2. Logica Logicall architecture architecture ................................................ .................................................. 3 4.1. Base image image state with no running instances instances ............................................................ 66 4.2. Instance Instance creation from image image and runtime state ..................................................... 66 4.3. End state of image and volume volume after instance exits ................................................. 67 4.4. multinic multinic flat flat manager manager ............................................................. ................................ 84 4.5. multinic flatdhcp manager ...................................................................................... 84 4.6. multinic VLAN manager .......................................................................................... 85 4.7. noVNC process process ................................................................................. .................... 112 4.8. Trusted compute compute pool ................................................ .......................................... 121 5.1. Object Storage (swift) ........................................................................................... 133 5.2. Object Storage Storage building blocks blocks ..................................... ......................................... 134 5.3. The ring ................................................. ....................................................... ....... 135 5.4. Zones ............................................... ........................................................ ............ 136 5.5. Accounts and containers ....................................................................................... 136 5.6. Partitions Partitions ................................................... ........................................................ ... 137 5.7. Replication ............................................................................................................ 137 5.8. Object Storage Storage in use ................................................... ........................................ 139 5.9. Object Object Storage Storage architecture architecture ............................................................................... ... 143 5.10. Object Storage (swift) ......................................................................................... 144 7.1. FWaaS architecture ............................................................................................... 194 7.2. Tenant and provider networks .............................................................................. 212 7.3. VMware VMware NSX deployment example example - two Compute Compute nodes ..................................... 214 7.4. VMware VMware NSX deployment example - single Compute node .................................... 215 7.5. Example VXLAN tunnel ......................................................................................... 229

Cloud Administrator Guide

February 13, 2015

current

List of Tables 1.1. OpenStack OpenStack services services ................................................................................................ ... 1 1.2. Storage Storage types ..................................................... ...................................................... 8 4.1. Descriptio Description n of IPv6 configuratio configuration n options ............................................................... 77 4.2. Description of Description of metadata configuratio configuration n options ....................................................... 80 4.3. Identity Service Service configuration file sections file sections ............................................................... 90 4.4. rootwrap.conf rootwrap.conf configuration options options ...................................................... .............. 104 4.5. .filters configura configuration tion options ....................... ...... .................................................. .. 104 104 4.6. Description of Description of live migration configuration configuration options options ............................................... 107 4.7. Description of Description of VNC configuration options ..................................................... ........ 113 113 4.8. Description of Description of SPICE configuration options options ............................................................ 116 4.9. Description of Description of Zookeeper configur configuration ation options options ........................ ............................ 117 4.10. Description Description of trusted computing computing configuration configuration options options ...................................... 120 5.1. Description of Description of configuration options for [drive-audit] [drive-audit] in drive.. ......................................................... ................................................... 152 audit.conf ........................................................... 6.1. Image settings settings reported by glance image-list for image image ID ID .................................... 185 7.1. Networking Networking resources ......................................................... .................................. 191 7.2. LBaaS features features ...................................................... ................................................ 193 7.3. Available networki n etworking ng plug-ins plug-ins ........................ . ....................... ................................................... .... 196 196 7.4. Plug-in compatibility compatibility with Compute Compute drivers ............................................................ 197 7.5. Networking Networking agents ...................... ...................................................... ................... 210 210 7.6. General dis tinct physical data center cente r networks ...................................................... 211 7.7. nova.conf API and credential set tings ........ .. ........... .......... ........... ........... ........... ........... ........... ...... ........... ...... ........... .......... .... 217 7.8. nova.conf security security group settings settings .......................................................................... 218 7.9. nova.conf metadata settings settings ................................................................................. 218 7.10. Settings ....................... ....................... ....................................................... ................................ 242 242 7.11. Settings ....................... ....................... ....................................................... ................................ 243 243 7.12. Settings ....................... ....................... ....................................................... ................................ 243 243 7.13. Settings ..................................................... .. ................................................... ..................................................... .... 245 245 7.14. Hosts for demo ................................................ ................................................... 248 7.15. API abstractions abstractions ...................................................... ............................................ 257 7.16. Network attributes ............................................................... .............. ..................... ............. ......... ... 258 7.17. Subnet at tributes ........... ..... ........... ........... ........ .. ........................................................................ 258 7.18. Port attributes attributes ................................................................ .................................... 259 7.19. Basic Networkin Net working g operations operations ....................... ........................................................ 259 7.20. Advanced Networking Advanced Networking operations operations ....................................................................... 261 7.21. Basic Compute Compute and Networking operations operations ......................................................... 262 7.22. Advanced VM Advanced VM creation creation operations operations .................................... ..................... ............. ............. 262 7.23. Provider extension e xtension terminology terminology ........................................................................... 264 7.24. Provider network n etwork attributes attributes ................................................. ............................... 2 65 7.25. Router .................................................................................................. .... .............................................................................................. .............. .............. 268 7.26. Floating IP IP .............................................................................. .............. ..................... ............. ........ 268 7.27. Basic L3 operations operations ......................................................... .................................... 269 7.28. Security group group attributes attributes ........................ ...................... ............. .................... .............. .............. ........... .... 270 7.29. Security group group rules .................................................................... ........................ 270 7.30. Basic security security group operations ................. .......................................................... 271 7.31. Firewall rules ru les ......................................................... .............................................. 273 7.32. Firewall policies p olicies ............................................................. ...................................... 274 7.33. Firewalls ................................................................................ . ............................................................................... .............................. 274

Cloud Administrator Guide

February 13, 2015

current

7.34. VMware NSX QoS attributes ............................................................................. .. 275 7.35. Basic VMware NSX QoS operations ..................................................................... 276 7.36. Recommended values for max_lp_per_bridged_ls ................................................ 276 7.37. Configuration options for tuning operational status synchronization in the NSX plug-in ......................................................................................................................... 277 7.38. Big Switch Router rule attributes .................................. ....................................... 278 7.39. Label ...................................................... ........................................................ .... 279 7.40. Rules ................................................................................................................... 279 7.41. Basic L3 operations ............................................................................................. 281 7.42. Plug-ins that support native pagination and sorting ............................................. 287 8.1. Consumed event types from OpenStack services .................................................... 292 8.2. List of available transformers .................................................. .............................. 299 8.3. Time-to-live support for database back ends ......................................................... 303