Red Hat Enterprise Linux OpenStack Platform 5 Administration User Guide

Red Hat Enterprise Linux OpenStack Platform 5 Administration User Guide Administrating resources in a Red Hat Enterprise Linux OpenStack Platform environment 31 October 2014 Red Hat Documentation Team

Legal Notice Copyright 2014 Red Hat, Inc. The text of and illustrations in this document are licensed by Red Hat under a Creative Commons Attribution Share Alike 3.0 Unported license ("CC-BY-SA"). An explanation of CC- BY- SA is available at http://creativeco mmo ns.o rg/licenses/by- sa/3.0/. In accordance with CC-BY-SA, if you distribute this document or an adaptation of it, you must provide the URL for the original version. Red Hat, as the licensor of this document, waives the right to enforce, and agrees not to assert, Section 4d of CC-BY-SA to the fullest extent permitted by applicable law. Red Hat, Red Hat Enterprise Linux, the Shadowman logo, JBoss, MetaMatrix, Fedora, the Infinity Logo, and RHCE are trademarks of Red Hat, Inc., registered in the United States and other co untries. Linux is the registered trademark of Linus Torvalds in the United States and other countries. Java is a registered trademark o f Oracle and/o r its affiliates. XFS is a trademark of Silicon Graphics International Corp. or its subsidiaries in the United States and/o r o ther co untries. MySQL is a registered trademark of MySQL AB in the United States, the European Union and o ther co untries. Node.js is an official trademark of Joyent. Red Hat Software Collections is not formally related to or endorsed by the official Joyent Node.js open source or commercial project. The OpenStack Wo rd Mark and OpenStack Lo go are either registered trademarks/service marks or trademarks/service marks of the OpenStack Foundation, in the United States and other countries and are used with the OpenStack Foundation's permission. We are not affiliated with, endo rsed o r spo nso red by the OpenStack Fo undatio n, o r the OpenStack co mmunity. All o ther trademarks are the pro perty o f their respective o wners. Abstract OpenStack is an open source cloud computing platform for public and private clouds. A series o f interrelated pro jects deliver a clo ud infrastructure so lutio n. This guide sho ws OpenStack admin users how to create and manage resources in an OpenStack cloud with the OpenStack dashbo ard o r OpenStack client co mmands.

T able of Cont ent s Table of Contents. Chapt..... er.. 1.. How..... can... I. administ........ er.. an... O. penst...... ack... cloud?........................................... 3.. Chapt..... er.. 2.. Dashboard........................................................................... 4. 1. Lo g in to the d ashb o ard 4 2. Manag e p ro jects and users 9 3. Manag e instances 14 4. Manag e vo lumes and vo lume typ es 16 5. Create and manag e imag es 17 6. Manag e flavo rs 19 7. View clo ud reso urces 22 8. Create and manag e ho st ag g reg ates 23 9. Launch and manag e stacks 26. Chapt..... er.. 3... O.. penst..... ack... command-.......... line... client..... s.............................................. 2. 7. 1. O verview 27 2. Disco ver the versio n numb er fo r a client 28 3. G et help fo r client co mmand s 28 4. Manag e p ro jects, users, and ro les 29 5. Manag e services 40 6. Manag e imag es 44 7. Manag e vo lumes 53 8. Manag e flavo rs 54 9. Manag e the O p enstack enviro nment 56 10. Manag e q uo tas 59 11. Analyze lo g files 72. Revision........ Hist... ory........................................................................ 7. 6. 1

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide 2

Chapt er 1. How can I administ er an O penst ack cloud? Chapter 1. How can I administer an OpenStack cloud? As an OpenStack cloud administrative user, you can manage tenants, known as projects, users, services, images, flavors, and quotas. The examples in this guide show you how to perform tasks by using the following methods: OpenStack dashboard. Use this web-based graphical interface, code named " horizon", to view, create, and manage resources and services. OpenStack command-line clients. Each core OpenStack project has a command-line client that you can use to run simple commands to view, create, and manage resources and services in a cloud and automate tasks by using scripts. You can modify these examples for your specific use cases. In addition to these ways of interacting with a cloud, you can access the OpenStack APIs directly or indirectly through curl commands or open SD Ks. You can automate access or build tools to manage resources and services by using the native OpenStack APIs or the EC2 compatibility API. To use the OpenStack APIs, it helps to be familiar with HTTP/1.1, RESTful web services, the OpenStack services, and JSON or XML data serialization formats. 3

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide Chapter 2. Dashboard As a cloud administrative user, the OpenStack dashboard lets you create and manage projects, users, images, and flavors. You can also set quotas and create and manage services. For information about using the dashboard to perform end user tasks, see the End User Guide at https://access.redhat.com/site/documentation/en- US/Red_Hat_Enterprise_Linux_OpenStack_Platform/. 1. Log in t o t he dashboard The dashboard is available on the node with the no va-d ashbo ard server role. 1. Ask the cloud operator for the host name or public IP address from which you can access the dashboard, and for your user name and password. 2. Open a web browser that has JavaScript and cookies enabled. Note To use the Virtual Network Computing (VNC) client for the dashboard, your browser must support HTML5 Canvas and HTML5 WebSockets. The VNC client is based on novnc. For details, see novnc: HTML5 VNC Client. For a list of supported browsers, see Browser support. 3. In the address bar, enter the host name or IP address for the dashboard. https://ipaddressorhostname/ Note If a certificate warning appears when you try to access the URL for the first time, a self-signed certificate is in use, which is not considered trustworthy by default. Verify the certificate or add an exception in the browser to bypass the warning. 4. On the Lo g In page, enter your user name and password, and click Si g n In. The top of the window displays your user name. You can also access Setti ng s or sign out of the dashboard. The visible tabs and functions in the dashboard depend on the access permissions, or roles, of the user you are logged in as. If you are logged in as an end user, the Project tab is displayed. If you are logged in as an administrator, the Project tab and Admin tab are displayed. 1.1. OpenSt ack dashboard- Project t ab 4

Chapt er 2. Dashboard Projects are organizational units in the cloud, and are also known as tenants or accounts. Each user is a member of one or more projects. Within a project, a user creates and manages instances. From the P ro ject tab, you can view and manage the resources in a selected project, including instances and images. You select the project from the C urrent P ro ject Project_Name list at the top of the tab. Figure 2.1. Project tab From the P ro ject tab, you can access the following tabs: C o mpute tab O vervi ew View reports for the project. Instances View, launch, create a snapshot from, stop, pause, or reboot instances, or connect to them through VNC. 5

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide C o mpute tab Vo l umes Use the following tabs to complete these tasks: Vo l umes View, create, edit, and delete volumes. Vo l ume Snapsho ts View, create, edit, and delete volume snapshots. Imag es View images and instance snapshots created by project users, plus any images that are publicly available. Create, edit, and delete images, and launch instances from images and snapshots. Access & Securi ty Use the following tabs to complete these tasks: Securi ty G ro ups Key P ai rs View, create, edit, and delete security groups and security group rules. View, create, edit, import, and delete key pairs. Fl o ati ng IP s AP I Access Allocate an IP address to or release it from a project. View API endpoints. Netwo rk tab Netwo rk T o po l o g y View the network topology. Netwo rks Create and manage public and private networks. R o uters Create and manage subnets. O bject Sto re tab C o ntai ners Create and manage containers and objects. 6

Chapt er 2. Dashboard C o mpute tab O rchestrati o n tab Stacks Use the REST API to orchestrate multiple composite cloud applications. 1.2. OpenSt ack dashboard- Admin t ab Administrative users can use the Ad mi n tab to view usage and to manage instances, volumes, flavors, images, projects, users, services, and quotas. Figure 2.2. Admin tab Access the following categories to complete these tasks: System P anel tab O vervi ew View basic reports. 7

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide System P anel tab R eso urce Usag e Use the following tabs to view the following usages: D ai l y R epo rt View the daily report. Stats View the statistics of all resources. Hypervi so rs View the hypervisor summary. Ho st Ag g reg ates View, create, and edit host aggregates. View the list of availability zones. Instances View, pause, resume, suspend, migrate, soft or hard reboot, and delete running instances that belong to users of some, but not all, projects. Also, view the log for an instance or access an instance through VNC. Vo l umes View, create, edit, and delete volumes and volume types. Fl avo rs View, create, edit, view extra specifications for, and delete flavors. A flavor is size of an instance. Imag es View, create, edit properties for, and delete custom images. Netwo rks View, create, edit properties for, and delete networks. R o uters View, create, edit properties for, and delete routers. 8

Chapt er 2. Dashboard System P anel tab System Info Use the following tabs to view the service information: Servi ces View a list of the services. C o mpute Servi ces View a list of all Compute services. Netwo rk Ag ents View the network agents. D efaul t Q uo tas View default quota values. Quotas are hard-coded in OpenStack Compute and define the maximum allowable size and number of resources. Id enti ty P anel tab P ro jects View, create, assign users to, remove users from, and delete projects. Users View, create, enable, disable, and delete users. 2. Manage project s and users As a cloud administrator, you manage both projects and users. Projects are organizational units in the cloud to which you can assign users. Projects are also known as tenants or accounts.you can manage projects and users independently from each other. Users are members of one or more projects. During cloud set up, the operator defines at least one project, user, and role. The operator links the role to the user and the user to the project. Roles define the actions that users can perform. As an administrator, you can create additional projects and users as needed. Learn how to add, update, and delete projects and users, assign users to one or more projects, and change or remove the assignment. To enable or temporarily disable a project or user, update that project or user. When you create a user account, you must assign the account to a primary project. Optionally, you can assign the account to additional projects. Before you can delete a user account, you must remove the user account from its primary project. 2.1. Consequences of disabling project s and users When you disable a project, it has the following consequences: 9

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide In the dashboard, users can no longer access the project from the C urrent P ro ject Project_Name drop-down list on the P ro ject tab. Users who are members of only the disabled project can no longer log in. You cannot launch instances for a disabled project. Instances that are already running are not automatically terminated though you must stop them manually. The data for a disabled project is maintained so that you can enable the project again at any time. When you disable a user account, the user can no longer log in, but the data for the user is maintained so that you can enable the user again at any time. 2.2. Creat e a project 1. Log in to the dashboard and choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Id enti ty P anel tab and select the P ro jects category. 3. Click C reate P ro ject. 4. On the P ro ject Info tab in the C reate P ro ject window, enter a name and description for the project. By default, the project is enabled. See Section 2.1, Consequences of disabling projects and users. 5. On the P ro ject Members tab, add members to the project. 6. On the Q uo ta tab, edit quota values. 7. Click C reate P ro ject. The P ro jects category shows the project, including its assigned ID. 2.3. Updat e a project You can update a project to change its name or description, and enable or temporarily disable it. 1. On the Ad mi n tab, click the Id enti ty P anel tab and select the P ro jects category. 2. Select the project that you want to update. 3. In the Mo re drop-down list, click Ed i t P ro ject. 4. In the Ed i t P ro ject window, you can update a project to change its name or description, and enable or temporarily disable it. By default, the project is enabled. To temporarily disable it, clear the Enabl ed check box. To enable a disabled project, select the Enabl ed check box. 5. Click Save. 10

Chapt er 2. Dashboard 2.4. Modify user assignment s for a project When you create users, you must assign them to a primary project as described in Section 2.6, Create a user account. You can assign users to additional projects or update and remove assignments. 1. On the Ad mi n tab, click the Id enti ty P anel tab and select the P ro jects category. 2. Select a project to modify its user assignments. 3. Click the selected project's Mo d i fy Users button. The Ed i t P ro ject window shows the following lists of users: Al l Users. Users that are available to be assigned to the current project. P ro ject Members. Users that are assigned to the current project, Figure 2.3. Edit the users list 4. To assign a user to the current project, click + for the user. The user moves from the Al l Users list to the P ro ject Members list. 5. To remove a user from the current project, click the - button for the user. The user moves from the P ro ject Members list to the Al l Users list. 6. Click Save. 2.5. Delet e project s 11

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide 1. On the Ad mi n tab, click the Id enti ty P anel tab and select the P ro jects category. 2. Select the projects that you want to delete. 3. Click D el ete P ro jects to confirm the deletion. Note You cannot undo the delete action. 2.6. Creat e a user account 1. Log in to the dashboard and choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Id enti ty P anel tab and select the Users category. 3. Click C reate User. 4. In the C reate User window, enter a user name, email, and preliminary password for the user. Confirm the password. Select a project from the P ri mary P ro ject drop-down list. Choose a role for the user from the R o l e drop-down list. Default is _member_. 5. Click C reate User to confirm your changes. Respond to the prompt to remember the password for the user. The dashboard assigns an ID to the user, and the user appears in the Users category. 2.7. Disable or enable a user 1. On the Ad mi n tab, click the Id enti ty P anel tab and select the Users category. 2. Select the user that you want to disable or enable. You can disable or enable only one user at a time. 3. In the Acti o ns drop-down list, select D i sabl e User or Enabl e User. In the Enabl ed column, the enabled value updates to either T rue or Fal se. 2.8. Delet e users 1. On the Ad mi n tab, click the Id enti ty P anel tab and select the Users category. 2. Select the users that you want to delete. 3. Click D el ete Users. 12

Chapt er 2. Dashboard 4. In the C o nfi rm D el ete Users window, click D el ete Users to confirm the deletion. 2.9. Manage project securit y Security groups are sets of IP filter rules that are applied to all project instances, and which define networking access to the instance. Group rules are project specific; project members can edit the default rules for their group and add new rule sets. All projects have a default security group that is applied to any instance that has no other defined security group. Unless you change the default, this security group denies all incoming traffic and allows only outgoing traffic to your instance. Note For information about updating global controls on the command line, see Section 4.2, Manage project security. 2.9.1. Creat e a securit y gro up 1. Log in to the dashboard as a project member. 2. On the P ro ject tab, select the appropriate project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 3. On the C o mpute tab, click the Access & Security category. 4. On the Securi ty G ro ups tab, click C reate Securi ty G ro up. 5. Provide a name and appropriate description for the group, and click C reate Securi ty G ro up. By default, the new rule provides outgoing access rules for the group. 2.9.2. Add a securit y gro up rule 1. Log in to the dashboard as a project member. 2. On the P ro ject tab, select the appropriate project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 3. On the C o mpute tab, click the Access & Security category. 4. On the Securi ty G ro ups tab, click Manag e rul es for the appropriate security group. 5. To add a rule, click Ad d R ul e. Set the attributes for the rule, and click Ad d : IP P ro to co l The IP protocol to which the rule applies: 13

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide T C P.Typically used to exchange data between systems, and for end-user communication. UD P. Typically used to exchange data between systems, particularly at the application level. IC MP. Typically used by network devices, such as routers, to send error or monitoring messages. O pen For TCP or UDP rules, the P o rt or P o rt R ang e to open for the rule. Choose to open a single port or range of ports. So urce For a range of ports, enter port values in the Fro m P o rt and T o P o rt fields. For a single port, enter the port value in the P o rt field. The source of the traffic for this rule: C ID R (Classless Inter-D omain Routing). IP address block, which limits access to IPs within the block. Enter the CIDR in the So urce field. Securi ty G ro up. Source group that enables any instance in the group to access any other group instance. 2.9.3. Delet e a securit y gro up rule 1. Log in to the dashboard as a project member. 2. On the P ro ject tab, select the appropriate project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 3. On the C o mpute tab, click the Access & Security category. 4. On the Securi ty G ro ups tab, click Manag e rul es for the appropriate security group. 5. To delete a rule, select the rule and click D el ete R ul e. 2.9.4. Delet e a securit y gro up 1. Log in to the dashboard as a project member. 2. On the P ro ject tab, select the appropriate project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 3. On the C o mpute tab, click the Access & Security category. 4. On the Securi ty G ro ups tab, select the appropriate group, and click D el ete Securi ty G ro up. 14

Chapt er 2. Dashboard 3. Manage inst ances As an administrative user, you can manage instances for users in various projects. You can view, terminate, edit, perform a soft or hard reboot, create a snapshot from, and migrate instances. You can also view the logs for instances or launch a VNC console for an instance. For information about using the dashboard to launch instances as an end user, see the End User Guide at https://access.redhat.com/site/documentation/en- US/Red_Hat_Enterprise_Linux_OpenStack_Platform/. 3.1. Creat e inst ance snapshot s 1. Log in to the dashboard and choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Instances category. 3. Select an instance to create a snapshot from it. From the Acti o ns drop-down list, select C reate Snapsho t. 4. In the C reate Snapsho t window, enter a name for the snapshot. Click C reate Snapsho t. The dashboard shows the instance snapshot in the Imag es & Snapsho ts category. 5. To launch an instance from the snapshot, select the snapshot and click Launch. 3.2. Cont rol t he st at e of an inst ance 1. Log in to the dashboard and choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Instances category. 3. Select the instance for which you want to change the state. 4. In the Mo re drop-down list in the Acti o ns column, select the state. Depending on the current state of the instance, you can choose to pause, un-pause, suspend, resume, soft or hard reboot, or terminate an instance (items in red are disabled). Figure 2.4. Dashboard-Instance Actions 15

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide 3.3. T rack usage Use the O vervi ew category to track usage of instances for each project. You can track costs per month by showing metrics like number of VCPUs, disks, RAM, and uptime of all your instances. 1. Log in to the dashboard and choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Instances category. 3. Select a month and click Submi t to query the instance usage for that month. 4. Click D o wnl o ad C SV Summary to download a CSV summary. 4. Manage volumes and volume t ypes Volumes are the Block Storage devices that you attach to instances to enable persistent storage. Users can attach a volume to a running instance or detach a volume and attach it to another instance at any time. For information about using the dashboard to create and manage volumes as an end user,see the End User Guide at https://access.redhat.com/site/documentation/en- US/Red_Hat_Enterprise_Linux_OpenStack_Platform/. As an administrative user, you can manage volumes and volume types for users in various projects. You can create and delete volume types, and you can view and delete volumes. 4.1. Creat e a volume t ype 1. Log in to the dashboard and choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 16

Chapt er 2. Dashboard 2. On the Ad mi n tab, click the Vo l umes category. 3. Click C reate Vo l ume T ype. In the C reate Vo l ume T ype window, enter a name for the volume type. 4. Click C reate Vo l ume T ype to confirm your changes. 4.2. Delet e volume t ypes When you delete a volume type, volumes of that type are not deleted. 1. Log in to the dashboard and choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Vo l umes category. 3. Select the volume type or types that you want to delete. 4. Click D el ete Vo l ume T ypes. 5. In the C o nfi rm D el ete Vo l ume T ypes window, click D el ete Vo l ume T ypes to confirm the action. 6. A message indicates whether the action succeeded. 4.3. Delet e volumes When you delete an instance, the data of its attached volumes is not destroyed. 1. Log in to the dashboard and choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Vo l umes category. 3. Select the volume or volumes that you want to delete. 4. Click D el ete Vo l umes. 5. In the C o nfi rm D el ete Vo l umes window, click D el ete Vo l umes to confirm the action. 6. A message indicates whether the action succeeded. 5. Creat e and manage images As an administrative user, you can create and manage images for the projects to which you belong. You can also create and manage images for users in all projects to which you have access. 17

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide To create and manage images in specified projects as an end user, see the End User Guide at https://access.redhat.com/site/documentation/en- US/Red_Hat_Enterprise_Linux_OpenStack_Platform/. To create and manage images as an administrator for other users, use the following procedures. 5.1. Creat e images 1. Log in to the dashboard. Choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Imag es category. The images that you can administer for cloud users appear on this page. 3. Click C reate Imag e. 4. In the C reate An Imag e window, enter or select the following values: Name Enter a name for the image. D escri pti o n Enter a brief description about the image. Imag e So urce Choose the image source from the dropdown list. Your choices are Imag e Lo cati o n and Imag e Fi l e. Imag e Fi l e or Imag e Lo cati o n Based on your selection, there is an Imag e Fi l e or Imag e Lo cati o n field. You can include the location URL or browse for the image file on your file system and add it. Fo rmat Select the image format. Mi ni mum D i sk (G B) and Mi ni mum R AM (MB) Leave these fields empty. P ubl i c Select this option to make the image public to all users. 18

Chapt er 2. Dashboard P ro tected Select this option to ensure that only users with permissions can delete the image. 5. Click C reate Imag e. The image is queued to be uploaded. It might take some time before the status changes from queued to active. 5.2. Updat e images 1. Log in to the dashboard. Choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Imag es category. 3. Select the image that you want to edit. Click Ed i t. 4. In the Upd ate Imag e window, you can change the name for the image. Select the P ubl i c check box to make the image public. Clear this check box to make the image private. You cannot change the kernel ID, RAM disk ID, or architecture attributes for an image. 5. Click Upd ate Imag e. 5.3. Delet e images 1. Log in to the dashboard. Choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Imag es category. 3. Select the images that you want to delete. 4. Click D el ete Imag es. 5. In the C o nfi rm D el ete Imag e window, click D el ete Imag es to confirm the deletion. You cannot undo this action. 6. Manage flavors In OpenStack, a flavor defines the compute, memory, and storage capacity of a virtual server that users can launch. As an administrative user, you can create, edit, and delete flavors. Only administrative users can create and manage flavors. 19

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide A flavor consists of the following parameters: Table 2.1. Flavor parameters Parameter Description Flavor Name The flavor name. VCPUs Number of virtual CPUs to use. RAM Amount of RAM to use, in megabytes. Root Disk Amount of disk space (in gigabytes) to use for the root (/) partition. Ephemeral D isk Amount of disk space (in gigabytes) to use for the ephemeral partition. If unspecified, the value is 0 by default. Ephemeral disks offer machine local disk storage linked to the life cycle of a VM instance. When a VM is terminated, all data on the ephemeral disk is lost. Ephemeral disks are not included in any snapshots. Swap D isk Amount of swap space (in megabytes) to use. If unspecified, the default is 0. ID The flavor ID is generated by OpenStack if the option selected is auto. By default, this field is set to auto. Public Indicates if the flavor is public. The default flavors are: m1.tiny (1 VCPU/1 GB Disk/512 MB RAM) m1.small (1 VCPU/20 GB Disk/2048 MB RAM) m1.medium (2 VCPU/40 GB Disk/4096 MB RAM) m1.large (4 VCPU/80 GB Disk/8192 MB RAM) m1.xlarge (8 VCPU/160 GB D isk/16384 MB RAM) 6.1. Creat e flavors 20

Chapt er 2. Dashboard 1. Log in to the dashboard. Choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Fl avo rs category. 3. Click C reate Fl avo r. 4. In the C reate Fl avo r window, enter or select the following values: Fl avo r Info tab Name Enter the flavor name. ID The flavor ID, generated by OpenStack. VC P Us Enter the number of virtual CPUs to use. R AM MB Enter the amount of RAM to use, in megabytes. R o o t D i sk G B Enter the mount of disk space in gigabytes to use for the root (/) partition. Ephemeral D i sk G B Enter the amount of disk space in gigabytes to use for the ephemeral partition. If unspecified, the value is 0 by default. Ephemeral disks offer machine local disk storage linked to the life cycle of a VM instance. When a VM is terminated, all data on the ephemeral disk is lost. Ephemeral disks are not included in any snapshots. Swap D i sk MB Enter the amount of swap space (in megabytes) to use. If unspecified, the default is 0. 5. In the Fl avo r Access tab, you can control access to the flavor by moving projects from the Al l P ro jects column to the Sel ected P ro jects column. Only projects in the Sel ected P ro jects column can use the flavor. If there are no projects in the right column, all projects can use the flavor. 6. Click C reate Fl avo r. 6.2. Manage flavors 21

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide 1. Log in to the dashboard. Choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Fl avo rs category. 3. To edit a flavor: a. Select the flavor that you want to edit. Click Ed i t Fl avo r. b. In the Ed i t Fl avo r window, update the flavor name, VCPUs, RAM, root disk, ephemeral disk, and swap disk values in the Fl avo r Info tab. c. In the Fl avo r Access tab, use + to control the access by moving projects from the left column to the right column. Note You can also perform this action by choosing Mo d i fy Access from the Mo re dropdown list from the Acti o ns column. d. Click Save. 4. To create new extra spec key-value pair: a. Select the flavor that you want to edit. Click Mo re. b. Choose Vi ew Extra Specs from the dropdown list. c. Click C reate. d. Select Keys from the dropdown list. e. Enter values for Key and Val ue. f. Click Save. 6.3. Delet e flavors 1. Log in to the dashboard. Choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Fl avo rs category. 3. Select the flavors that you want to delete. 4. Click D el ete Fl avo rs. 5. In the C o nfi rm D el ete Fl avo rs window, click D el ete Fl avo rs to confirm the deletion. You cannot undo this action. 22

Chapt er 2. Dashboard 7. View cloud resources 7.1. View services informat ion As an administrative user, you can view information for OpenStack services. 1. Log in to the OpenStack dashboard and choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the System Info category. 3. Click the: Servi ces tab to view services information. The page displays the internal name and the public OpenStack name for the service, the host where the service runs, and whether the service is or is not enabled. C o mpute Servi ces tab to view services specific to the Compute Service. Both host and zone are listed for each service, as well as its activation status. Note The System Info window also offers status information for the following: Avai l abi l i ty Zo nes Ho st Ag g reg ates Netwo rk Ag ents 7.2. View cloud usage st at ist ics The Telemetry module provides user-level usage data for OpenStack-based clouds, which can be used for customer billing, system monitoring, or alerts. Data can be collected by notifications sent by existing OpenStack components (for example, usage events emitted from Compute) or by polling the infrastructure (for example, libvirt). Note You can only view metering statistics on the dashboard (available only to administrators). The Telemetry service must be set up and administered through the cei l o meter command-line interface (CLI). For basic administration information, refer to the " Measure Cloud Resources" chapter in the OpenStack End User Guide. 7.2.1. View reso urce st at ist ics 23

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide 1. Log in to the OpenStack dashboard as a user with Admin privileges. 2. On the Ad mi n tab, click the System P anel tab and select the R eso urce Usag e category. 3. Click the: D ai l y R epo rt tab to view a report of daily usage per project. You can choose the date range and the number of projects. Stats tab to view a multi-series line chart with user-defined metrics. You group by project, define the value type (min, max, avg, or sum), and specify the time period (or even use a calendar to define a date range). 8. Creat e and manage host aggregat es Host aggregates enable administrative users to assign key-value pairs to groups of machines. Each node can have multiple aggregates and each aggregate can have multiple key-value pairs. You can assign the same key-value pair to multiple aggregates. The scheduler uses this information to make scheduling decisions. For more information, see the Configuration Reference Guide at https://access.redhat.com/site/documentation/en- US/Red_Hat_Enterprise_Linux_OpenStack_Platform/. Procedure 2.1. To create a host aggregate 1. Log in to the dashboard. Choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Ho st Ag g reg ates category. 3. Click C reate Ho st Ag g reg ate. 4. In the C reate Ho st Ag g reg ate window, enter or select the following values: Ho st Ag g reg ate Info tab Name The host aggregate name. 24

Chapt er 2. Dashboard Ho st Ag g reg ate Info tab Avai l abi l i ty Zo ne The cloud provider defines the default availability zone, such as us-west, apac-so uth, or no va. Note You can target the host aggregate, as follows: When the host aggregate is exposed as an availability zone, select the availability zone when you launch an instance. When the host aggregate is not exposed as an availability zone, select a flavor and its extra specs to target the host aggregate. Ho st wi thi n Ag g reg ate tab Sel ected ho sts To assign a host to the aggregate, click + for the host. The host moves from the Al l avai l abl e ho sts list to the Sel ected ho sts list. Note You can add one host to one or more aggregates. To add a host later, edit the aggregate. Procedure 2.2. To manage host and aggregates 1. Log in to the dashboard. Choose the ad mi n project from the C urrent P ro ject Project_Name drop-down list. Here Project_Name is the name of the current project. 2. On the Ad mi n tab, click the Ho st Ag g reg ates category. 3. To edit host aggregates: a. Select the host aggregate that you want to edit. Click Ed i t Ho st Ag g reg ate. 25

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide Ag g reg ate. b. In the Ed i t Ho st Ag g reg ate window, you can change the name and availability zone for the aggregate. 4. To manage hosts: a. Select the host aggregate that you want to edit. Click Mo re. b. In the Ad d /R emo ve Ho sts to Ag g reg ate window, click + to assign a host to the aggregate. Click - to remove a host that is assigned to an aggregate. 5. To delete host aggregates: a. Select the host aggregate that you want to edit. Click Mo re. b. Click the D el ete Ho st Ag g reg ate option. Note Availability zones can be created, edited and deleted as a part of managing the host aggregates they are associated with. In a packstack --al l i no ne deployment, no va is the default availability zone. In a production deployment with multiple servers, you could have multiple host aggregates associated with different availability zones, based on location and other factors. 9. Launch and manage st acks The Orchestration service provides a template-based orchestration engine for the OpenStack cloud, which can be used to create and manage cloud infrastructure resources such as storage, networking, instances, and applications as a repeatable running environment. Templates are used to create stacks, which are collections of resources. For example, a stack might include instances, floating IPs, volumes, security groups, or users. The Orchestration service offers access to all OpenStack core services via a single modular template, with additional orchestration capabilities such as auto-scaling and basic high availability. For information about: Administrative tasks on the command line, see Section 9.4, Launch and manage stacks. Note There are no administration-specific tasks that can be done through the dashboard. The basic creation and deletion of Orchestration stacks, see the End User Guide at https://access.redhat.com/site/documentation/en- US/Red_Hat_Enterprise_Linux_OpenStack_Platform/. 26

Chapt er 3. O penst ack command- line client s Chapter 3. OpenStack command-line clients 1. Overview You can use the OpenStack command-line clients to run simple commands that make API calls. You can run these commands from the command line or in scripts to automate tasks. If you provide OpenStack credentials, you can run these commands on any computer. Internally, each client command runs curl commands that embed API requests. The OpenStack APIs are RESTful APIs that use the HTTP protocol, including methods, URIs, media types, and response codes. These open-source Python clients run on Linux systems and are easy to learn and use. Each OpenStack service has its own command-line client. On some client commands, you can specify a d ebug parameter to show the underlying API request for the command. This is a good way to become familiar with the OpenStack API calls. The following table lists the command-line client for each OpenStack service with its package name and description. Table 3.1. O penstack services and clients Service Client Package Description Block Storage ci nd e r pythoncinderclient Create and manage volumes. Compute no va pythonnovaclient Create and manage images, instances, and flavors. Database Service tro ve pythontroveclient Create and manage databases. Identity keyst o ne pythonkeystoneclient Create and manage users, tenants, roles, endpoints, and credentials. Image Service g l anc e pythonglanceclient Create and manage images. Networking neutr o n pythonneutronclient Configure networks for guest servers. This client was previously called q uantum. Object Storage swi ft pythonswiftclient Gather statistics, list items, update metadata, and upload, download, and delete files stored by the Object Storage service. Gain access to an Object Storage installation for ad hoc processing. Orchestrati on heat pythonheatclient Launch stacks from templates, view details of running stacks including events and resources, and update and delete stacks. Telemetry cei l o meter pythonceilometerclient Create and collect measurements across OpenStack. 27

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide An OpenStack co mmo n client is in development. For more information on installation instructions and the OpenStack RC file, see the End User Guide at https://access.redhat.com/site/documentation/en- US/Red_Hat_Enterprise_Linux_OpenStack_Platform/. 2. Discover t he version number for a client Run the following command to discover the version number for a client: $ PROJECT --version For example, to see the version number for the no va client, run the following command: $ nova --version The version number (2.15.0 in the example) is returned. 2.15.0 3. Get help for client commands To get usage information, including a list of commands with descriptions, for a client, run the following command: $ CLIENT_NAME help For example, to get help information for the swift client, run the following command: $ swift help Note D epending on your credentials, you might not have permission to use every command. After the hel p command, you can enter a command name to get help for that command, as follows: $ CLIENT_NAME help COMMAND_NAME For example, to get help for the glance i mag e-sho w command, enter the following command: $ glance help image-show The command returns a description of the command and its positional and optional arguments: usage: glance image-show [--human-readable] <IMAGE> Describe a specific image. 28

Chapt er 3. O penst ack command- line client s Positional arguments: <IMAGE> Name or ID of image to describe. Optional arguments: --human-readable Print image size in a human-friendly format. 4. Manage project s, users, and roles As a cloud administrator, you manage projects, users, and roles. Projects are organizational units in the cloud to which you can assign users. Projects are also known as tenants or accounts. Users can be members of one or more projects. Roles define which actions users can perform. You assign roles to user-project pairs. You can define actions for OpenStack service roles in the /etc/project/po l i cy. jso n files. For example, define actions for Compute service roles in the /etc/no va/po l i cy. jso n file. You can manage projects, users, and roles independently from each other. During cloud set up, the operator defines at least one project, user, and role. Learn how to add, update, and delete projects and users, assign users to one or more projects, and change or remove the assignment. To enable or temporarily disable a project or user, you update that project or user. You can also change quotas at the project level. Before you can delete a user account, you must remove the user account from its primary project. Before you can run keystone client commands, you must download and source an OpenStack RC file. See the End User Guide at https://access.redhat.com/site/documentation/en- US/Red_Hat_Enterprise_Linux_OpenStack_Platform/. 4.1. Services To look at your service catalog, use these keystone client commands. 4.1.1. servi ce-create Keyword arguments: Name Type D escription Example: $ keystone service-create \ --name=nova \ --type=compute \ --description="nova Compute Service" 29

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide 4.1.2. servi ce-l i st Arguments service_id Example: $ keystone service-list 4.1.3. servi ce-g et Arguments service_id Example: $ keystone service-get 08741d8ed88242ca88d1f61484a0fe3b 4.1.4. servi ce-d el ete Arguments service_id Example: $ keystone service-delete 08741d8ed88242ca88d1f61484a0fe3b 4.1.5. Creat e a t enant (pro ject ) A tenant is a group of zero or more users. In nova, a tenant owns virtual machines. In swift, a tenant owns containers. In the D ashboard, tenants are represented as projects. Users can be associated with more than one tenant. Each tenant and user pairing can have a role associated with it. 1. To list all projects with their ID, name, and whether they are enabled or disabled: $ keystone tenant-list +----------------------------------+--------------------+---- -----+ id name enabled +----------------------------------+--------------------+---- -----+ f7ac731cc11f40efbc03a9f9e1d1d21f admin True c150ab41f0d9443f8874e32e725a4cc8 alt_demo True a9debfe41a6d4d09a677da737b907d5e demo True 30

Chapt er 3. O penst ack command- line client s 9208739195a34c628c58c95d157917d7 invisible_to_admin True 3943a53dc92a49b2827fae94363851e1 service True 80cab5e1f02045abad92a2864cfd76cb test_project True +----------------------------------+--------------------+---- -----+ 2. Create a project named new-pro ject: $ keystone tenant-create --name new-project --description 'my new project' By default, the project is enabled. +-------------+----------------------------------+ Property Value +-------------+----------------------------------+ description my new project enabled True id 1a4a0618b306462c9830f876b0bd6af2 name new-project +-------------+----------------------------------+ Note the ID for the project so you can update it in the next procedure. 4.1.6. Updat e a pro ject Specify the project ID to update a project. You can update the name, description, and enabled status of a project. 1. To temporarily disable a project: $ keystone tenant-update PROJECT_ID --enabled false 2. To enable a disabled project: $ keystone tenant-update PROJECT_ID --enabled true 3. To update the name of a project: $ keystone tenant-update PROJECT_ID --name project-new 4. To verify your changes, show information for the updated project: $ keystone tenant-get PROJECT_ID +-------------+----------------------------------+ Property Value +-------------+----------------------------------+ description my new project 31

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide enabled True id 1a4a0618b306462c9830f876b0bd6af2 name project-new +-------------+----------------------------------+ 4.1.7. Delet e a pro ject To delete a project: $ keystone tenant-delete PROJECT_ID 4.1.8. Creat e a user 1. To list all users: $ keystone user-list The output shows the ID, name, enabled status, and e-mail address for each user: +----------------------------------+----------+---------+---- ------------------+ id name enabled email +----------------------------------+----------+---------+---- ------------------+ 352b37f5c89144d4ad0534139266d51f admin True admin@ example.com 86c0de739bcb4802b8dc786921355813 demo True demo@ example.com 32ec34aae8ea432e8af560a1cec0e881 glance True glance@ example.com 7047fcb7908e420cb36e13bbd72c972c nova True nova@ example.com +----------------------------------+----------+---------+---- ------------------+ 2. To create a user, you must specify a name. Optionally, you can specify a tenant ID, password, and email address. It is recommended that you include the tenant ID and password because the user cannot log in to the dashboard without this information. To create the new-user user: $ keystone user-create --name new-user --tenant_id 1a4a0618b306462c9830f876b0bd6af2 --pass PASSWORD +----------+----------------------------------+ Property Value +----------+----------------------------------+ email enabled True 32

Chapt er 3. O penst ack command- line client s id 6e5140962b424cb9814fb172889d3be2 name new-user tenantid 1a4a0618b306462c9830f876b0bd6af2 +----------+----------------------------------+ 4.1.9. Updat e a user You can update the name, email address, and enabled status for a user. 1. To temporarily disable a user account: $ keystone user-update USER_ID --enabled false If you disable a user account, the user cannot log in to the dashboard. However, data for the user account is maintained, so you can enable the user at any time. 2. To enable a disabled user account: $ keystone user-update USER_ID --enabled true 3. To change the name and description for a user account: $ keystone user-update USER_ID --name user-new --email newuser@ example.com User has been updated. 4.1.10. Delet e a user To delete a specified user account: $ keystone user-delete USER_ID 4.1.11. Creat e and assign a ro le Users can be members of multiple projects. To assign users to multiple projects, define a role and assign that role to a user-project pair. 1. To list the available roles: $ keystone role-list +----------------------------------+---------------+ id name +----------------------------------+---------------+ 71ccc37d41c8491c975ae72676db687f Member 149f50a1fe684bfa88dae76a48d26ef7 ResellerAdmin 33

Red Hat Ent erprise Linux O penst ack Plat form 5 Administ rat ion User G uide 9fe2ff9ee4384b1894a90878d3e92bab _member_ 6ecf391421604da985db2f141e46a7c8 admin deb4fffd123c4d02a907c2c74559dccf anotherrole +----------------------------------+---------------+ 2. To create the new-ro l e role: $ keystone role-create --name new-role +----------+----------------------------------+ Property Value +----------+----------------------------------+ id bef1f95537914b1295da6aa038ef4de6 name new-role +----------+----------------------------------+ 3. To assign a user to a project, you must assign the role to a user-project pair. To do this, you need the user, role, and project IDs. a. To list users: $ keystone user-list +----------------------------------+----------+-------- -+----------------------+ id name enabled email +----------------------------------+----------+-------- -+----------------------+ 352b37f5c89144d4ad0534139266d51f admin True admin@ example.com 981422ec906d4842b2fc2a8658a5b534 alt_demo True alt_demo@ example.com 036e22a764ae497992f5fb8e9fd79896 cinder True cinder@ example.com 86c0de739bcb4802b8dc786921355813 demo True demo@ example.com 32ec34aae8ea432e8af560a1cec0e881 glance True glance@ example.com 7047fcb7908e420cb36e13bbd72c972c nova True nova@ example.com +----------------------------------+----------+-------- -+----------------------+ Note the ID of the user to which you want to assign the role. b. To list role IDs: $ keystone role-list +----------------------------------+---------------+ id name +----------------------------------+---------------+ 71ccc37d41c8491c975ae72676db687f Member 34