Chapter 5. Installing undercloud minions

Procedure

1. Log in to the minion host as the root user.

2. Create the stack user:

   [root@minion ~]# useradd stack

3. Set a password for the stack user:

   [root@minion ~]# passwd stack

4. Disable password requirements when using sudo:

   [root@minion ~]# echo "stack ALL=(root) NOPASSWD:ALL" | tee -a /etc/sudoers.d/stack
   [root@minion ~]# chmod 0440 /etc/sudoers.d/stack

5. Switch to the new stack user:

   [root@minion ~]# su - stack
   [stack@minion ~]$

6. Check the base and full hostname of the minion:

   [stack@minion ~]$ hostname
   [stack@minion ~]$ hostname -f

   If either of the previous commands do not report the correct fully-qualified hostname or report an error, use hostnamectl to set a hostname:

   [stack@minion ~]$ sudo hostnamectl set-hostname minion.example.com
   [stack@minion ~]$ sudo hostnamectl set-hostname --transient minion.example.com

7. Edit the /etc/hosts file and include an entry for the system hostname. For example, if the system is named minion.example.com and uses the IP address 10.0.0.1, add the following line to the /etc/hosts file:

   10.0.0.1  minion.example.com manager

8. Register your system either with the Red Hat Content Delivery Network or Red Hat Satellite. For example, run the following command to register the system to the Content Delivery Network. Enter your Customer Portal user name and password when prompted:

   [stack@minion ~]$ sudo subscription-manager register

9. Find the entitlement pool ID for Red Hat OpenStack Platform (RHOSP) director:

   [stack@minion ~]$ sudo subscription-manager list --available --all --matches="Red Hat OpenStack"
   Subscription Name:   Name of SKU
   Provides:            Red Hat Single Sign-On
                        Red Hat Enterprise Linux Workstation
                        Red Hat CloudForms
                        Red Hat OpenStack
                        Red Hat Software Collections (for RHEL Workstation)
                        Red Hat Virtualization
   SKU:                 SKU-Number
   Contract:            Contract-Number
   Pool ID:             Valid-Pool-Number-123456
   Provides Management: Yes
   Available:           1
   Suggested:           1
   Service Level:       Support-level
   Service Type:        Service-Type
   Subscription Type:   Sub-type
   Ends:                End-date
   System Type:         Physical

10. Locate the Pool ID value and attach the Red Hat OpenStack Platform 16.1 entitlement:

    [stack@minion ~]$ sudo subscription-manager attach --pool=Valid-Pool-Number-123456

11. Disable all default repositories, and then enable the required Red Hat Enterprise Linux repositories:

    [stack@minion ~]$ sudo subscription-manager repos --disable=*
    [stack@minion ~]$ sudo subscription-manager repos --enable=rhel-8-for-x86_64-baseos-eus-rpms --enable=rhel-8-for-x86_64-appstream-eus-rpms --enable=rhel-8-for-x86_64-highavailability-eus-rpms --enable=ansible-2.9-for-rhel-8-x86_64-rpms --enable=openstack-16.1-for-rhel-8-x86_64-rpms --enable=fast-datapath-for-rhel-8-x86_64-rpms

    These repositories contain packages that the minion installation requires.

12. Perform an update on your system to ensure that you have the latest base system packages:

    [stack@minion ~]$ sudo dnf update -y
    [stack@minion ~]$ sudo reboot

13. Install the command line tools for minion installation and configuration:

    [stack@minion ~]$ sudo dnf install -y python3-tripleoclient

Procedure

1. Log in to your undercloud as the stack user.

2. Copy the files from the undercloud to the minion:

   $ scp ~/tripleo-undercloud-outputs.yaml ~/tripleo-undercloud-passwords.yaml stack@<minion-host>:~/.

   • Replace <minion-host> with the hostname or IP address of the minion.

Procedure

1. Log in to the minion host as the root user.

2. Copy the certificate authority file from the undercloud to the minion:

   [root@minion ~]# scp \
       root@<undercloud-host>:/etc/pki/ca-trust/source/anchors/cm-local-ca.pem \
       /etc/pki/ca-trust/source/anchors/undercloud-ca.pem

   • Replace <undercloud-host> with the hostname or IP address of the undercloud.

3. Update the trusted certificate authorities for the minion host:

   [root@minion ~]# update-ca-trust enable
   [root@minion ~]# update-ca-trust extract

Procedure

1. Log in to the minion host as the stack user.

2. Copy the default template to the home directory of the stack user:

   [stack@minion ~]$ cp \
     /usr/share/python-tripleoclient/minion.conf.sample \
     ~/minion.conf

3. Edit the minion.conf file. This file contains settings to configure your minion. If you omit or comment out a parameter, the minion installation uses the default value. Review the following recommended parameters:

   • minion_hostname, which you set to the hostname of the minion.
   • minion_local_interface, which you set to the interface that connects to the undercloud through the Provisioning Network.
   • minion_local_ip, which you set to a free IP address on the Provisioning Network.
   • minion_nameservers, which you set to the DNS nameservers so that the minion can resolve hostnames.
   • enable_ironic_conductor, which defines whether to enable the ironic-conductor service.
   • enable_heat_engine, which defines whether to enable the heat-engine service.

Procedure

1. Log in to the minion host as the stack user.

2. Run the following command to install the minion:

   [stack@minion ~]$ openstack undercloud minion install

   This command launches the configuration script for the minion, installs additional packages, and configures minion services according to the configuration in the minion.conf file. This script takes several minutes to complete.

Procedure

1. Log in to your undercloud as the stack user.

2. Source the stackrc file:

   [stack@director ~]$ source ~/stackrc

3. If you enabled the heat engine service on the minion, verify that the heat-engine service from the minion appears on the undercloud service list:

   [stack@director ~]$ $ openstack orchestration service list

   The command output displays a table with heat-engine workers for both the undercloud and any minions.

4. If you enabled the ironic conductor service on the minion, verify that the ironic-conductor service from the minion appears on the undercloud service list:

   [stack@director ~]$ $ openstack baremetal conductor list

   The command output displays a table with ironic-conductor services for both the undercloud and any minions.