Book Image

OpenStack Administration with Ansible

By : Walter Bentley
Book Image

OpenStack Administration with Ansible

By: Walter Bentley

Overview of this book

Most organizations are seeking methods to improve business agility because they have realized just having a cloud is not enough. Being able to improve application deployments, reduce infrastructure downtime, and eliminate daily manual tasks can only be accomplished through some sort of automation. Packed with real-world OpenStack administrative tasks, this book will walk you through working examples and explain how these tasks can be automated using one of the most popular open source automation tools—Ansible. We will start with a brief overview of OpenStack and Ansible and highlight some best practices. Each chapter will provide an introduction to handling various Cloud Operator administration tasks such as creating multiple users/tenants, setting up Multi-Tenant Isolation, customizing your clouds quotas, taking instance snapshots, evacuating compute hosts for maintenance, and running cloud health checks, and a step-by-step tutorial on how to automate these tasks with Ansible.
Table of Contents (18 chapters)
OpenStack Administration with Ansible
Credits
About the Author
Acknowledgments
About the Reviewer
www.PacktPub.com
Preface
Index

Multi-tenant isolation explained


I still remember the day when a customer asked me to configure multi-tenant isolation on his/her brand new OpenStack cloud. It was a good 15 minutes of stress and fear, as I had heard of a few horror stories related to it. Anyone who has read the blueprint (https://blueprints.launchpad.net/nova/+spec/multi-tenancy-aggregates) on this feature will know why I was close to panic mode. While the blueprint is very clear on what is needed configuration wise, I personally knew that it was also no guarantee that all the steps were listed and/or worked, as promised. It was at this point that I decided to make sure whether the steps to do this were first clearly documented and proven before promising anything to the customer.

As mentioned earlier, in order to enable the complete feature the OpenStack identity (Keystone), compute (Nova), and block storage (Cinder) services will be involved. The complete multi-tenant isolation feature covers both computing and block storage...