📦
CHI-in-a-box
  • What is CHI-in-a-Box?
  • Before You Begin
    • Assumed Knowledge
    • Hosts and Services
    • Network Overview
    • CC-Ansible
    • The site configuration
      • inventory
      • defaults.yml
      • passwords.yml
      • certificates/
      • node_custom_config/ (optional)
      • post-deploy.yml (optional)
    • How Deployment Works
    • Security considerations
  • Setup Guides
    • Evaluation Site
      • Bring up the Control Plane
    • Production Baremetal
      • Baremetal QuickStart
      • Host Networking Configuration
    • Troubleshooting
      • Networking
    • Verification Checklist
    • Dev-in-a-Box
    • Edge-in-a-Box
  • Reference
    • Chameleon Identity Federation
    • Ironic Flat Networking
    • Ironic Multi-Tenant Networking
    • Glance Image Storage
    • Resource Reservation
      • Default Resource Properties
    • Monitoring
      • IPMI Metrics
      • SNMP Metrics
  • Example Deployments
    • ARM/x86 mixed architecture
    • Edge computing/container testbed
  • Operations
    • Hardware management
    • Certificate management
    • Chameleon tools
      • Hammers 🔨
        • maintenance_reservation
      • Disk image subscription
      • Usage reporting
    • Troubleshooting
      • Known issues
        • Neutron (networking)
        • Nova (KVM)
        • Ironic (bare metal)
      • Instance networking diagnostics
      • Security incident triage
      • Troublesome Hardware
    • Alert runbooks
      • Cron Job No Recent Success
      • Instance Failure
      • Image Cache Space
      • Ironic Node Error State
      • Jupyter Server Launch Failure
      • MySQL Host Down
      • MySQL Replication Error
      • Node Exporter Down
      • Node Network Bridge Down
      • Node Network Bridge Low Traffic
      • Nova Ironic Instance Launch Failure
      • OpenStack API Down
      • PeriodicTask No Recent Success
      • Portal Down
      • Precis Parsed Events Low
      • Provider Conflict
      • Runbook Template
    • User support guide
    • Upgrading to a new Release
  • Development
    • Developing OpenStack Services
    • Dev-in-a-box
Powered by GitBook
On this page
  • Introduction
  • Requirements
Edit on GitHub
  1. Setup Guides

Evaluation Site

Bringing up a minimal site to kick the tires

Introduction

A production site has many requirements and moving parts that make it difficult to understand. This guide will bring up a minimal site on a single node, and demonstrate how a production site extends these concepts.

Requirements

Install Ubuntu 20.04 on either a physical machine, or a VM.

This system will need the following requirements for a minimal test environment:

  • One network interface that will serve both the public and internal APIs, as well as admin SSH access.

    • A hostname + IP address for this interface, e.g. dev01 -> 10.100.0.10/24

    • A hostname + reserved (not associated!) IP address for the HAProxy VIP, e.g. chi.dev -> 10.100.0.254/32

  • 20GB of disk space

  • 8GB of ram

  • 4 cpu cores

To test TLS and/or identity federation, you will need to add:

  • A second network interface to separate the Public API from the internal/admin APIs

    • 2 Publicly routable IP addresses. As above, one bound to the interface, and one reserved for the HAProxy VIP.

    • A hostname and DNS record for the Public VIP

    • A TLS cert for this hostname

To test VM support, you will need to add:

  • A third network interface to provide connectivity for guest instances: neutron external interface

  • 40GB of disk space

  • Additional RAM and cores as necessary.

To Test baremetal support, you will need to add:

  • A baremetal node, with PXE boot support, and IPMI enabled.

  • An interface, or a vlan or route on the internal API interface, that can communicate with the IPMI interface on the baremetal node.

  • The in-band interface on the baremetal node must be on the same vlan as the neutron external interface.

PreviousSecurity considerationsNextBring up the Control Plane

Last updated 1 year ago