{"id":949,"date":"2015-05-20T23:20:10","date_gmt":"2015-05-21T04:20:10","guid":{"rendered":"https:\/\/www.softwareab.net\/wordpress\/?p=949"},"modified":"2015-05-20T23:33:19","modified_gmt":"2015-05-21T04:33:19","slug":"openstack-high-availability-part-01-planning","status":"publish","type":"post","link":"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/","title":{"rendered":"OpenStack HA: Part 01: Accounts"},"content":{"rendered":"<p>Here is a writeup on what I did to implement HA within OpenStack Icehouse. I&#8217;m currently working on revamping \/ automating the entire process for Kilo &#8211; but that will be a while from now.<\/p>\n<p>We&#8217;ll walk through the entire process, from Keystone to Trove to Heat. In each case, you&#8217;ll have failover for each node.<\/p>\n<p>In this article we cover accounts. Use this table as a template for the accounts that you will find you need. It&#8217;s critical to keep this documented but in a secure location.<\/p>\n<table>\n<thead>\n<tr>\n<td>Function<\/td>\n<td>Account<\/td>\n<td>Password<\/td>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>CentOS console<\/td>\n<td>root<\/td>\n<td>Strong admin password<\/td>\n<tr>\n<td>MySQL OpenStack<\/td>\n<td>osroot<\/td>\n<td>Strong admin password<\/td>\n<\/tr>\n<tr>\n<td>MySQL OpenStack<\/td>\n<td>haproxy<\/td>\n<td>[no password]<\/td>\n<\/tr>\n<tr>\n<td>MySQL OpenStack<\/td>\n<td>keystone<\/td>\n<td>[OPENSTACK_ADMIN_PASSWORD]<\/td>\n<\/tr>\n<tr>\n<td>OpenStack Keystone<\/td>\n<td>[SHARED_SECRET]<\/td>\n<td>[OPENSTACK_ADMIN_TOKEN]<\/td>\n<\/tr>\n<tr>\n<td>OpenStack Accounts<\/td>\n<td>[ADMIN_PASSWORD]<\/td>\n<td>Strong admin password<\/td>\n<\/tr>\n<tr>\n<td>OpenStack Accounts<\/td>\n<td>[SERVICE_PASSWORD]<br \/>[SERVICE_PASSWORD_URI]<\/td>\n<td>[OPENSTACK_ADMIN_PASSWORD]; URI form is the same but URI-encoded<\/td>\n<\/tr>\n<tr>\n<td>OpenStack Accounts<\/td>\n<td>[DEMO_PASSWORD]<\/td>\n<td>[OPENSTACK_SERVICE_PASSWORD]<\/td>\n<\/tr>\n<tr>\n<td>OpenStack Region<\/td>\n<td>[YOUR_REGION]<\/td>\n<td>Not really a user name, but documented here. This is the default region.<\/td>\n<\/tr>\n<tr>\n<td>OpenStack Swift Storage with CHAP<\/td>\n<td>lvosswift100<\/td>\n<td>lvosswift100<\/td>\n<\/tr>\n<tr>\n<td>OpenStack Swift Storage with CHAP<\/td>\n<td>lvosswift200<\/td>\n<td>lvosswift200<\/td>\n<\/tr>\n<tr>\n<td>OpenStack Ceph Storage with CHAP<\/td>\n<td>lvoscephx100<\/td>\n<td>lvoscephx100<\/td>\n<\/tr>\n<tr>\n<td>OpenStack Ceph Storage with CHAP<\/td>\n<td>lvoscephx200<\/td>\n<td>lvoscephx200<\/td>\n<\/tr>\n<tr>\n<td>OpenStack Ceph Storage with CHAP<\/td>\n<td>lvoscephx300<\/td>\n<td>lvoscephx300<\/td>\n<\/tr>\n<tr>\n<td>OpenStack Swift<br \/><code>\/etc\/swift\/swift.conf<\/code><\/td>\n<td>swift_hash_path_suffix<\/td>\n<td>lvosswift-path-suffix<\/td>\n<\/tr>\n<tr>\n<td>Ceph nodes admin user (inter-node communication)<\/td>\n<td>ceph-admin<\/td>\n<td>Strong admin password<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<ul>\n<li>Root accounts will use strong admin password.<\/li>\n<li>OpenStack accounts will use [SERVICE_PASSWORD].<\/li>\n<li>All OpenStack user IDs follow the module name (e.g. keystone, cinder, nova, neutron, glance, etc.)<\/li>\n<li>All password usage will be clearly documented for future maintenance.<\/li>\n<\/ul>\n<p>Once you have this down, plan your networking and DNS. We&#8217;ll cover that in the next installment.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Here is a writeup on what I did to implement HA within OpenStack Icehouse. I&#8217;m currently working on revamping \/ automating the entire process for Kilo &#8211; but that will be a while from now. We&#8217;ll walk through the entire &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"more-link\" href=\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/\"> <span class=\"screen-reader-text\">OpenStack HA: Part 01: Accounts<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[69,1],"tags":[67,86,71],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.2 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>OpenStack HA: Part 01: Accounts - softwareab<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OpenStack HA: Part 01: Accounts - softwareab\" \/>\n<meta property=\"og:description\" content=\"Here is a writeup on what I did to implement HA within OpenStack Icehouse. I&#8217;m currently working on revamping \/ automating the entire process for Kilo &#8211; but that will be a while from now. We&#8217;ll walk through the entire &hellip; OpenStack HA: Part 01: Accounts Read More &raquo;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/\" \/>\n<meta property=\"og:site_name\" content=\"softwareab\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cloudraticsolutions\/\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/cloudraticsolutions\/\" \/>\n<meta property=\"article:published_time\" content=\"2015-05-21T04:20:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2015-05-21T04:33:19+00:00\" \/>\n<meta name=\"author\" content=\"Andrew Bruce\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@realcloudratics\" \/>\n<meta name=\"twitter:site\" content=\"@realcloudratics\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Andrew Bruce\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/\"},\"author\":{\"name\":\"Andrew Bruce\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600\"},\"headline\":\"OpenStack HA: Part 01: Accounts\",\"datePublished\":\"2015-05-21T04:20:10+00:00\",\"dateModified\":\"2015-05-21T04:33:19+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/\"},\"wordCount\":280,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600\"},\"keywords\":[\"cloud\",\"OpenStack\",\"virtualization\"],\"articleSection\":[\"OpenStack\",\"Teknocratica\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/\",\"url\":\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/\",\"name\":\"OpenStack HA: Part 01: Accounts - softwareab\",\"isPartOf\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#website\"},\"datePublished\":\"2015-05-21T04:20:10+00:00\",\"dateModified\":\"2015-05-21T04:33:19+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.softwareab.net\/wordpress\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"cloud\",\"item\":\"https:\/\/www.softwareab.net\/wordpress\/tag\/cloud-2\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"OpenStack HA: Part 01: Accounts\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#website\",\"url\":\"https:\/\/www.softwareab.net\/wordpress\/\",\"name\":\"softwareab\",\"description\":\"Technocratica, Technopolitik, Technophobia\",\"publisher\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.softwareab.net\/wordpress\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600\",\"name\":\"Andrew Bruce\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2024\/03\/andy-cartoon.jpg\",\"contentUrl\":\"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2024\/03\/andy-cartoon.jpg\",\"width\":400,\"height\":330,\"caption\":\"Andrew Bruce\"},\"logo\":{\"@id\":\"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/image\/\"},\"description\":\"Team-oriented systems mentor with deep knowledge of numerous software methodologies, technologies, languages, and operating systems. Excited about turning emerging technology into working production-ready systems. Focused on moving software teams to a higher level of world-class application development. Specialties:Software analysis and development...Product management through the entire lifecycle...Discrete product integration specialist!\",\"sameAs\":[\"http:\/\/cloudraticsolutions.net\/\",\"https:\/\/www.facebook.com\/cloudraticsolutions\/\",\"https:\/\/twitter.com\/realcloudratics\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OpenStack HA: Part 01: Accounts - softwareab","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/","og_locale":"en_US","og_type":"article","og_title":"OpenStack HA: Part 01: Accounts - softwareab","og_description":"Here is a writeup on what I did to implement HA within OpenStack Icehouse. I&#8217;m currently working on revamping \/ automating the entire process for Kilo &#8211; but that will be a while from now. We&#8217;ll walk through the entire &hellip; OpenStack HA: Part 01: Accounts Read More &raquo;","og_url":"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/","og_site_name":"softwareab","article_publisher":"https:\/\/www.facebook.com\/cloudraticsolutions\/","article_author":"https:\/\/www.facebook.com\/cloudraticsolutions\/","article_published_time":"2015-05-21T04:20:10+00:00","article_modified_time":"2015-05-21T04:33:19+00:00","author":"Andrew Bruce","twitter_card":"summary_large_image","twitter_creator":"@realcloudratics","twitter_site":"@realcloudratics","twitter_misc":{"Written by":"Andrew Bruce","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/#article","isPartOf":{"@id":"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/"},"author":{"name":"Andrew Bruce","@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600"},"headline":"OpenStack HA: Part 01: Accounts","datePublished":"2015-05-21T04:20:10+00:00","dateModified":"2015-05-21T04:33:19+00:00","mainEntityOfPage":{"@id":"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/"},"wordCount":280,"commentCount":0,"publisher":{"@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600"},"keywords":["cloud","OpenStack","virtualization"],"articleSection":["OpenStack","Teknocratica"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/","url":"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/","name":"OpenStack HA: Part 01: Accounts - softwareab","isPartOf":{"@id":"https:\/\/www.softwareab.net\/wordpress\/#website"},"datePublished":"2015-05-21T04:20:10+00:00","dateModified":"2015-05-21T04:33:19+00:00","breadcrumb":{"@id":"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.softwareab.net\/wordpress\/openstack-high-availability-part-01-planning\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.softwareab.net\/wordpress\/"},{"@type":"ListItem","position":2,"name":"cloud","item":"https:\/\/www.softwareab.net\/wordpress\/tag\/cloud-2\/"},{"@type":"ListItem","position":3,"name":"OpenStack HA: Part 01: Accounts"}]},{"@type":"WebSite","@id":"https:\/\/www.softwareab.net\/wordpress\/#website","url":"https:\/\/www.softwareab.net\/wordpress\/","name":"softwareab","description":"Technocratica, Technopolitik, Technophobia","publisher":{"@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.softwareab.net\/wordpress\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/1337443eaeb75104e0410b508e67f600","name":"Andrew Bruce","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/image\/","url":"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2024\/03\/andy-cartoon.jpg","contentUrl":"https:\/\/www.softwareab.net\/wordpress\/wp-content\/uploads\/2024\/03\/andy-cartoon.jpg","width":400,"height":330,"caption":"Andrew Bruce"},"logo":{"@id":"https:\/\/www.softwareab.net\/wordpress\/#\/schema\/person\/image\/"},"description":"Team-oriented systems mentor with deep knowledge of numerous software methodologies, technologies, languages, and operating systems. Excited about turning emerging technology into working production-ready systems. Focused on moving software teams to a higher level of world-class application development. Specialties:Software analysis and development...Product management through the entire lifecycle...Discrete product integration specialist!","sameAs":["http:\/\/cloudraticsolutions.net\/","https:\/\/www.facebook.com\/cloudraticsolutions\/","https:\/\/twitter.com\/realcloudratics"]}]}},"_links":{"self":[{"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/posts\/949"}],"collection":[{"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/comments?post=949"}],"version-history":[{"count":4,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/posts\/949\/revisions"}],"predecessor-version":[{"id":953,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/posts\/949\/revisions\/953"}],"wp:attachment":[{"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/media?parent=949"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/categories?post=949"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.softwareab.net\/wordpress\/wp-json\/wp\/v2\/tags?post=949"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}