OpenStack is an open source implementation of cloud computing, potentially at very large scale. However, it has many moving parts and is complex to operate. SaltStack appears to provide scalable and secure orchestration for OpenStack. But like all powerful solutions to complex problems, a great deal of the useful know-how has to be discovered by actual practice and hard-won experience. This session will share the inside knowledge gained through practical experience.

1. Yazz D. Atlas
Advanced
Technology
Group
Principle Engineer,
Hewlett Packard
January 29, 2014
INSTALLING OPENSTACK
USING SALTSTACK
© Copyright 2014 Hewlett-Packard Development Company, L.P.

2. ¡ I’ve been poking at Linux servers back in late 90’s
¡ Actively trying to replace myself with small scripts.
§ Bash
§ Cfengine
§ Puppet
§ Capistrano
§ Chef
§ Salt
WHO IS THIS GUY?
© Copyright 2014 Hewlett-Packard Development Company, L.P.

3. ¡ You might have tried DevStack to try OpenStack.
¡ You have setup a Salt Master before.
¡ You want to see how I solved some of my headaches
using Salt.
¡ You are want something answered.
¡ The other rooms were full and this one has an open
power outlet.
WHY ARE YOU HERE?
© Copyright 2014 Hewlett-Packard Development Company, L.P.

4. ¡ /etc/keystone
¡ /etc/nova
¡ /etc/glance
¡ /etc/swift
¡ /etc/????
THINGS CHANGE.
© Copyright 2014 Hewlett-Packard Development Company, L.P.

5. ¡ Look beyond your current infrastructure.
¡ Think about how others have deployed OpenStack.
¡ Make the decision early to keep secrets out of your repos.
NOW WHAT?
© Copyright 2014 Hewlett-Packard Development Company, L.P.

6. SALT-MASTER FILE_ROOTS
file_roots:
base:
- /srv/salt/state/formulae
- /srv/salt/state/base
dbaas_ae1_az1:
- /srv/salt/state/dbaas_ae1_az1
dbaas_ae1_az2:
- /srv/salt/state/dbaas_ae1_az2
dbaas_ae1_az3:
- /srv/salt/state/dbaas_ae1_az3
© Copyright 2014 Hewlett-Packard Development Company, L.P.

7. SALT-MASTER PILLAR_ROOTS
pillar_roots:
base:
- /srv/salt/pillar/base
dbaas_ae1_az1:
- /srv/salt/pillar/dbaas_ae1_az1
dbaas_ae1_az2:
- /srv/salt/pillar/dbaas_ae1_az2
dbaas_ae1_az3:
- /srv/salt/pillar/dbaas_ae1_az3
© Copyright 2014 Hewlett-Packard Development Company, L.P.

8. PILLAR TOP.SLS
base:
'*':
- users
- groups
- headers
- openstack
- secrets
dbaas_ae1_az1:
'ps-ae1az1-db*':
- endpoints-ae1az1-v1
- secrets-ae1az1-v1
dbaas_ae1_az2:
'ps-ae1az2-db*':
- endpoints-ae1az2-v1
- secrets-ae1az2-v1
The top.sls is actually a symbolic link to the
file top-ae1.sls
openstack.sls is a symbolic link to
openstack-ae1.sls
These are links too but
slightly different
© Copyright 2014 Hewlett-Packard Development Company, L.P.

9. /srv/salt/pillar/dbaas_ae1_az1/endpoints-ae1az1-v1.sls ->
../base/endpoints-ae1az1-v1.sls
/srv/salt/pillar/dbaas_ae1_az1/secrets-ae1az1-v1.sls ->
../base/secrets-ae1az1-v1.sls
/srv/salt/pillar/dbaas_ae1_az2/endpoints-ae1az2-v1.sls ->
../base/endpoints-ae1az2-v1.sls
/srv/salt/pillar/dbaas_ae1_az2/secrets-ae1az2-v1.sls ->
../base/secrets-ae1az2-v1.sls
PILLAR ENVIRONMENTS
It is much easier to diff two or more files than it is to
search one long file.
© Copyright 2014 Hewlett-Packard Development Company, L.P.

10. PILLAR ENVIRONMENTS
© Copyright 2014 Hewlett-Packard Development Company, L.P.

11. STATES TOP.SLS
base:
'*':
- users
- packages
- grains
dbaas_ae1_az1:
'ps-ae1az1-*':
- datadog
- dbaas_networking
'ps-ae1az1-dbcpu*':
- openstack.memcached
- openstack.haproxy
- openstack.nova-compute
'ps-ae1az1-dbhead0002*':
- openstack.memcached
- openstack.haproxy
- openstack.keystone
- openstack.glance
- openstack.nova-controller
Notice there is
nothing here about
the MySQL DB
No RabbitMQ
either
© Copyright 2014 Hewlett-Packard Development Company, L.P.

12. ¡ If you only plan to run it only once you most likely don’t need it
in your top.sls
¡ Installing RabbitMQ
¡ Installing MySQL DB
¡ Creating your OpenStack API Endpoints
¡ Creating your OpenStack users
¡ Modifying the MySQL DB
¡ Create a one-off state directory for one off .sls
¡ Use unique names for your .sls files
¡ <project>-<ticket number>.sls
¡ Prevent executions on the wrong host
¡ Use simple lock files and or grain values to prevent second runs
LEAVE IT OUT OF THE TOP.SLS
© Copyright 2014 Hewlett-Packard Development Company, L.P.

13. ¡ What new features are out there
¡ Check in on IRC and ask questions
¡ Hangout and answer some questions
¡ Are you alone in your company working with Salt?
STILL LEARNING
© Copyright 2014 Hewlett-Packard Development Company, L.P.

14. STILL LEARNING
© Copyright 2014 Hewlett-Packard Development Company, L.P.
“Ancora imparo’
(I am still learning.)
(At age 87 in 1562)”
- Michelangelo

15. ¡ https://github.com/EntropyWorks/salt-openstack
¡ The “formula” branch eventually will replace the “master”
¡ yazz.atlas@hp.com
¡ @EntropyWorks
¡ (I should have used the HP ppt templates...)
SHOW AND TELL
© Copyright 2014 Hewlett-Packard Development Company, L.P.