11.2. Configure the Data Processing Service

Procedure 11.1. Creating and Configuring a Database for the Data Processing API Service

1. Connect to the database service:

   # mysql -u root -p

   Copy to Clipboard Toggle word wrap
2. Create the sahara database:

   mysql> CREATE DATABASE sahara;

   Copy to Clipboard Toggle word wrap
3. Create a sahara database user and grant the user access to the sahara database:

   mysql> GRANT ALL ON sahara.* TO 'sahara'@'%' IDENTIFIED BY 'PASSWORD';
   mysql> GRANT ALL ON sahara.* TO 'sahara'@'localhost' IDENTIFIED BY 'PASSWORD';

   Copy to Clipboard Toggle word wrap
   Replace PASSWORD with a secure password that will be used to authenticate with the database server as this user.
4. Exit the mysql client:

   mysql> quit

   Copy to Clipboard Toggle word wrap
5. Set the value of the sql_connection configuration key:

   # openstack-config --set /etc/sahara/sahara.conf \
       database connection mysql://sahara:PASSWORD@IP/sahara

   Copy to Clipboard Toggle word wrap
   Replace the following values:
   • Replace PASS with the password of the database user.
   • Replace IP with the IP address or host name of the server hosting the database service.
6. Configure the schema of the sahara database:

   # sahara-db-manage --config-file /etc/sahara/sahara.conf upgrade head

   Copy to Clipboard Toggle word wrap

Procedure 11.2. Creating Identity Records for the Data Processing Service

1. Set up the shell to access keystone as the administrative user:

   # source ~/keystonerc_admin

   Copy to Clipboard Toggle word wrap
2. Create the sahara user:

   [(keystone_admin)]# openstack user create --password PASSWORD sahara
   +----------+----------------------------------+
   | Field    | Value                            |
   +----------+----------------------------------+
   | email    | None                             |
   | enabled  | True                             |
   | id       | 1fc5b7ac48b646ab850854e565ac1cfc |
   | name     | sahara                           |
   | username | sahara                           |
   +----------+----------------------------------+

   Copy to Clipboard Toggle word wrap
   Replace PASSWORD with a password that will be used by the Data Processing service when authenticating with the Identity service.
3. Link the sahara user and the admin role together within the context of the services tenant:

   [(keystone_admin)]# openstack role add --project services --user sahara admin

   Copy to Clipboard Toggle word wrap
4. Create the sahara service entry:

   [(keystone_admin)]# openstack service create --name sahara \
   --description "OpenStack Data Processing" \
   data-processing

   Copy to Clipboard Toggle word wrap
5. Create the sahara endpoint entry:

   [(keystone_admin)]# openstack endpoint create \
      --publicurl 'http://SAHARA_HOST:8386/v1.1/%(tenant_id)s' \
      --adminurl 'http://SAHARA_HOST:8386/v1.1/%(tenant_id)s' \
      --internalurl 'http://SAHARA_HOST:8386/v1.1/%(tenant_id)s' \
      --region RegionOne \
      sahara

   Copy to Clipboard Toggle word wrap
   Replace SAHARA_HOST with the IP address or fully qualified domain name of the server hosting the Data Processing service.

   Note

   By default, the endpoint is created in the default region, RegionOne. This is a case-sensitive value. To specify a different region when creating an endpoint, use the --region argument to provide it.

   See Section 3.5.1, “Service Regions” for more information.

Procedure 11.3. Configuring the Data Processing API Service to Authenticate through the Identity Service

1. Set the Identity service host that the Data Processing API service must use:

   # openstack-config --set /etc/sahara/sahara.conf \
      keystone_authtoken auth_uri http://IP:5000/v2.0/
   # openstack-config --set /etc/sahara/sahara.conf \
      keystone_authtoken identity_uri http://IP:35357

   Copy to Clipboard Toggle word wrap
   Replace IP with the IP address of the server hosting the Identity service.
2. Set the Data Processing API service to authenticate as the correct tenant:

   # openstack-config --set /etc/sahara/sahara.conf \
      keystone_authtoken admin_tenant_name services

   Copy to Clipboard Toggle word wrap
   Replace services with the name of the tenant created for the use of the Data Processing service. Examples in this guide use services.
3. Set the Data Processing API service to authenticate using the sahara administrative user account:

   # openstack-config --set /etc/sahara/sahara.conf \
      keystone_authtoken admin_user sahara

   Copy to Clipboard Toggle word wrap
4. Set the Data Processing API service to use the correct sahara administrative user account password:

   # openstack-config --set /etc/sahara/sahara.conf \
      keystone_authtoken admin_password PASSWORD

   Copy to Clipboard Toggle word wrap
   Replace PASSWORD with the password set when the sahara user was created.

Procedure 11.4. Configuring the Firewall to Allow Data Processing Service Traffic

1. Open the /etc/sysconfig/iptables file in a text editor.
2. Add an INPUT rule allowing TCP traffic on port 8386. The new rule must appear before any INPUT rules that REJECT traffic:

   -A INPUT -p tcp -m multiport --dports 8386 -j ACCEPT

   Copy to Clipboard Toggle word wrap
3. Save the changes to the /etc/sysconfig/iptables file.
4. Restart the iptables service to ensure that the change takes effect:

   # systemctl restart iptables.service

   Copy to Clipboard Toggle word wrap