Skip to content

Instantly share code, notes, and snippets.

@fatherlinux
Created April 22, 2016 21:33
Show Gist options
  • Save fatherlinux/10789455d86c02adc10d89e07a78322e to your computer and use it in GitHub Desktop.
Save fatherlinux/10789455d86c02adc10d89e07a78322e to your computer and use it in GitHub Desktop.
[[Category: Knowledge Base]]
= Background =
== Links ==
* [https://www.youtube.com/watch?v=8Hjk-EImZLk&list=PL8696E36FF1FF0943&index=3 OpenShift Commons Briefing] - Good talk from Mark Lamourine
Systems Management Work
* https://github.com/redhat-openstack/openshift-on-openstack
* http://apppack.etherpad.corp.redhat.com/OSEonOSPFeatures?
= Architecture =
= Routine Operations =
= Special Operations =
== Installation/Setup Notes ==
Developed with instructions from [https://access.redhat.com/articles/1127153 here] and [https://www.rdoproject.org/networking/neutron-with-existing-external-network/ here]:
Next download a RHEL image. This [https://access.redhat.com/solutions/894123 article] describes how to use them:
https://access.redhat.com/downloads/content/69/ver=/rhel---7/7.2/x86_64/product-software
Configure client for authentication:
http://docs.openstack.org/openstack-ops/content/lay_of_the_land.html#cli_tools
Configure Host CPU
[[KVM#Nested_KVM]]
=== Security Group Configuration ===
Configure the rules. Built with instructions from [http://docs.openstack.org/user-guide/cli_nova_configure_access_security_for_instances.html here]:
nova secgroup-add-rule default tcp 22 22 0.0.0.0/0
nova secgroup-add-rule default tcp 80 80 0.0.0.0/0
nova secgroup-add-rule default tcp 443 80 0.0.0.0/0
nova secgroup-add-rule default tcp 443 443 0.0.0.0/0
nova secgroup-add-rule default tcp 443 443 0.0.0.0/0
nova secgroup-add-rule default icmp 0.0.0.0/0
Look at the rules:
nova secgroup-list-rules default
=== Virtual Machine Creation ===
Download RHEL KVM image
Upload to OpenStack
Start Medium Virtual Machine
Configure network
/etc/sysconfig/network
ifcfg-eth0
/etc/resolv.conf
/etc/hosts
Enable SSH access
PermitRootLogin
PasswordAuth
Set hostname
hostnamectl set-hostname ose-on-osp.dc2.crunchtools.com
=== Install OpenShift ===
Built with instructions from [https://access.redhat.com/documentation/en/openshift-enterprise/3.1/installation-and-configuration/installation-and-configuration here]. Configuration
Enable OSE channels and RHSCL (for demos):
subscription-manager repos \
--enable="rhel-7-server-rpms" \
--enable="rhel-7-server-extras-rpms" \
--enable="rhel-7-server-ose-3.1-rpms" \
--enable="rhel-server-rhscl-7-rpms"
After following installation, configure http auth:
OpenShift_3#Configure_HTPasswd_Authentication_2
=== Configure OpenStack Plugin ===
==== Determine variables ====
Perform these commands in the OpenStack environment. Get AuthURL:
. ~/keystonerc_admin
env | grep OS_
OS_REGION_NAME=RegionOne
OS_PASSWORD=600b3a5006494ae6
OS_AUTH_URL=http://192.168.100.2:5000/v2.0
OS_USERNAME=admin
OS_TENANT_NAME=admin
==== Configure ====
Perform these operations on the OpenShift Master. Used instructions from [https://docs.openshift.com/enterprise/3.1/install_config/configuring_openstack.html here] Create configuration file:
vi /etc/origin/cloud.conf
[Global]
auth-url = http://192.168.100.2:5000/v2.0
username = admin
password = PASSWORD
tenant-id = admin
region = RegionOne
Configure the master file:
vi /etc/origin/master/master-config.yaml
== Reset System ==
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux_OpenStack_Platform/3/html/Getting_Started_Guide/appe-Getting_Started_Guide-Removing_PackStack_Deployments.html
And:
http://ptapps.redhat.com/fs/Users/mmyllyne/openstack/bin/openstack-uninstall-all
== Modify an Image ==
Instructions on how to build an image:
https://access.redhat.com/solutions/894123
Change the root password to PASSWORD:
virt-sysprep -a rhel-guest-image-7.2-20160302.0.x86_64.qcow2 --root-password password:PASSWORD
= Troubleshooting =
== Keystone Failure During Install ==
https://bugzilla.redhat.com/show_bug.cgi?id=1285494
Looks like you just have to stop httpd per [https://vishmule.wordpress.com/2016/02/12/failed-to-start-openstack-identity-service-code-named-keystone/ this] article, then run the installer again
systemctl stop httpd
Make sure short names resolve locally:
https://bugzilla.redhat.com/show_bug.cgi?id=1144124
== Host CPU Problems ==
[[KVM#Nested_KVM]]
== Failed to Get Subnet on Node ==
https://access.redhat.com/solutions/2087721
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment