This project started as OS-IPA, but it sounded too much like Ossipee_ ; One of the twelve Algonquian tribes, and a Lake and Town in New Hampshire named for them.

.. _Ossipee: https://en.wikipedia.org/wiki/Ossipee,_New_Hampshire

Ossipee is now a system for building a small cluster in an OpenStack deployment. It also serves to tear down and clean up the resources.

To get startes, source a V3 Keystone Resource file based on this template:

export OS_AUTH_URL=http://{{ keystone_hostname }}:5000/v3 export OS_USERNAME={{ username }} export OS_PASSWORD={{ password }} export OS_USER_DOMAIN_NAME={{ user_domain }} export OS_PROJECT_DOMAIN_NAME={{ project_domain }} export OS_PROJECT_NAME={{ project_name }} export OS_IDENTITY_API_VERSION=3

Ossipee stores reads and stores local information in the directory

$HOME/.ossipee

To get started, run

ossipee-display

This will generate a blank config file in

$HOME/.ossipee/config.ini

A sample config file will look like this:

[scope] profile = rhel7 name = yourname pubkey = yourname-pubkey forwarder = 192.168.52.3

The $USER value will be used as the name which is used to link the resources.

To do a complete run,

ossipee-create

This will use the OpenStack APIs to create the following resources:

two networks, named

yourname-public-net yourname-private-net

two subnets named yourname-public-subnet yourname-private-subnet

The necessary router and interfaces to connect the yourname-public-net to the external network.

two hosts named

ipa.yourname.test openstack.yourname.test

An Ansible inventory file in ~/.ossipee/inventory/yourname.ini

This last is expected to be consumed by Rippowam_.

.. _Rippowam: https://github.com/jamielennox/rippowam

To tear down the install:

ossipee-teardown

There are several targets. To see them, run

ossipee-list

For instance, to reset just the ipa server, you can run

ossipee-redo ipa

A profile is the combination of computer Flavor and image that will be used when creating the virtual machine. There are several profiles suported:

• 'centos7': - 'cloud_user': 'centos', - 'image': 'centos-7-cloud', - 'flavor': 'm1.medium',
• 'rhel7': - 'cloud_user': 'cloud-user', - 'image': 'rhel-guest-image-7.1-20150224.0', - 'flavor': 'm1.medium',
• 'f22': - 'cloud_user': 'fedora', - 'image': 'Fedora 22 Cloud Image', - 'flavor': 'm1.medium',

The image and flavor names must match.

Ossipee uses the AUTH_URL to determine the cloud name. For now, this list of known AUHT_URLS are hard coded to produce one of the follwing:

• oslab
• os1
• dreamcompute

This value plus the name value will be combined to create the output directory. For example, if name = ayoung and the cloud resolves to os1 then the output directory is $HOME/.ossipy/deployments/ayoung.os1. INside this directory is

• inventory.ini

When paired with rippowam, this directoruy becomes the local store for the following files:

• adminrc: admin keystone config with userid and password
• demorc: demo keystone config with userid and password
• fed-accrc: keystone config for use with SAML federation
• inventory.ini: ansible inventory file
• kerb-accrc: keystone config for use with Kerberos and SSSD federation
• krb5.conf: Kerberso config file used with the KRB5_CONFIG environment variable

ossipy accepts a --section paramter To better organize the .config file. This referest to a subsection of the configuration file that overrides the deployment specirfic variables. In the sample config file:

[scope]

[oslab] name = ayoung profile = rhel7 private_network = false public_network = true forwarder = 192.168.52.3

[os1] name = ayoung forwarder = 172.16.12.6 private_network = false public_network = false profile = os1rhel7

With the command ~/devel/ossipee/ossipee-create --section os1 The network creation section would be skipped, the deployment name would be ayoung, creating a fqdn for the ipa server: ipa.ayoung.os1.test and storing the file in /.ossipee/deployements/.ayoung.os1

Ossipee creates entires in the systems /etc/hosts file, using sudo. These amp to the public IP addresses for the hosts created. The fqdn values are now useing in the asnible uinventory files in place of the IP addresses.