4.12. 使用编排服务

流程

1. 检索现有的 auth_encryption_key 和 service 密码。您可以使用这些密码来修补 osp-secret。在以下示例中，auth_encryption_key 用作 HeatAuthEncryptionKey，服务 密码用作 HeatPassword ：

   [stack@rhosp17 ~]$ grep -E 'HeatPassword|HeatAuth|HeatStackDomainAdmin' ~/overcloud-deploy/overcloud/overcloud-passwords.yaml
     HeatAuthEncryptionKey: Q60Hj8PqbrDNu2dDCbyIQE2dibpQUPg2
     HeatPassword: dU2N0Vr2bdelYH7eQonAwPfI3
     HeatStackDomainAdminPassword: dU2N0Vr2bdelYH7eQonAwPfI3

2. 登录到 Controller 节点，并验证正在使用的 auth_encryption_key 值：

   [stack@rhosp17 ~]$ ansible -i overcloud-deploy/overcloud/config-download/overcloud/tripleo-ansible-inventory.yaml overcloud-controller-0 -m shell -a "grep auth_encryption_key /var/lib/config-data/puppet-generated/heat/etc/heat/heat.conf | grep -Ev '^#|^$'" -b
   overcloud-controller-0 | CHANGED | rc=0 >>
   auth_encryption_key=Q60Hj8PqbrDNu2dDCbyIQE2dibpQUPg2

3. 将密码编码为 Base64 格式：

   $ echo Q60Hj8PqbrDNu2dDCbyIQE2dibpQUPg2 | base64
   UTYwSGo4UHFickROdTJkRENieUlRRTJkaWJwUVVQZzIK

4. 对 osp-secret 进行补丁，以更新 HeatAuthEncryptionKey 和 HeatPassword 参数。这些值必须与 director 编排服务配置中的值匹配：

   $ oc patch secret osp-secret --type='json' -p='[{"op" : "replace" ,"path" : "/data/HeatAuthEncryptionKey" ,"value" : "UTYwSGo4UHFickROdTJkRENieUlRRTJkaWJwUVVQZzIK"}]'
   secret/osp-secret patched

5. 对 OpenStackControlPlane CR 进行补丁来部署编排服务：

   $ oc patch openstackcontrolplane openstack --type=merge --patch '
   spec:
     heat:
       enabled: true
       apiOverride:
         route: {}
       template:
         databaseInstance: openstack
         databaseAccount: heat
         secret: osp-secret
         memcachedInstance: memcached
         passwordSelectors:
           authEncryptionKey: HeatAuthEncryptionKey
           service: HeatPassword
           stackDomainAdminPassword: HeatStackDomainAdminPassword
   '

验证

1. 确保所有 CR 的状态都是 Setup complete:

   $ oc get Heat,HeatAPI,HeatEngine,HeatCFNAPI
   NAME                           STATUS   MESSAGE
   heat.heat.openstack.org/heat   True     Setup complete
   
   NAME                                  STATUS   MESSAGE
   heatapi.heat.openstack.org/heat-api   True     Setup complete
   
   NAME                                        STATUS   MESSAGE
   heatengine.heat.openstack.org/heat-engine   True     Setup complete
   
   NAME                                        STATUS   MESSAGE
   heatcfnapi.heat.openstack.org/heat-cfnapi   True     Setup complete

2. 检查编排服务是否在 Identity 服务中注册：

   $ oc exec -it openstackclient -- openstack service list -c Name -c Type
   +------------+----------------+
   | Name       | Type           |
   +------------+----------------+
   | heat       | orchestration  |
   | glance     | image          |
   | heat-cfn   | cloudformation |
   | ceilometer | Ceilometer     |
   | keystone   | identity       |
   | placement  | placement      |
   | cinderv3   | volumev3       |
   | nova       | compute        |
   | neutron    | network        |
   +------------+----------------+

   $ oc exec -it openstackclient -- openstack endpoint list --service=heat -f yaml
   - Enabled: true
     ID: 1da7df5b25b94d1cae85e3ad736b25a5
     Interface: public
     Region: regionOne
     Service Name: heat
     Service Type: orchestration
     URL: http://heat-api-public-openstack-operators.apps.okd.bne-shift.net/v1/%(tenant_id)s
   - Enabled: true
     ID: 414dd03d8e9d462988113ea0e3a330b0
     Interface: internal
     Region: regionOne
     Service Name: heat
     Service Type: orchestration
     URL: http://heat-api-internal.openstack-operators.svc:8004/v1/%(tenant_id)s

3. 检查编排服务引擎服务是否正在运行：

   $ oc exec -it openstackclient -- openstack orchestration service list -f yaml
   - Binary: heat-engine
     Engine ID: b16ad899-815a-4b0c-9f2e-e6d9c74aa200
     Host: heat-engine-6d47856868-p7pzz
     Hostname: heat-engine-6d47856868-p7pzz
     Status: up
     Topic: engine
     Updated At: '2023-10-11T21:48:01.000000'
   - Binary: heat-engine
     Engine ID: 887ed392-0799-4310-b95c-ac2d3e6f965f
     Host: heat-engine-6d47856868-p7pzz
     Hostname: heat-engine-6d47856868-p7pzz
     Status: up
     Topic: engine
     Updated At: '2023-10-11T21:48:00.000000'
   - Binary: heat-engine
     Engine ID: 26ed9668-b3f2-48aa-92e8-2862252485ea
     Host: heat-engine-6d47856868-p7pzz
     Hostname: heat-engine-6d47856868-p7pzz
     Status: up
     Topic: engine
     Updated At: '2023-10-11T21:48:00.000000'
   - Binary: heat-engine
     Engine ID: 1011943b-9fea-4f53-b543-d841297245fd
     Host: heat-engine-6d47856868-p7pzz
     Hostname: heat-engine-6d47856868-p7pzz
     Status: up
     Topic: engine
     Updated At: '2023-10-11T21:48:01.000000'

4. 验证您是否可以看到您的编配服务堆栈：

   $ openstack stack list -f yaml
   - Creation Time: '2023-10-11T22:03:20Z'
     ID: 20f95925-7443-49cb-9561-a1ab736749ba
     Project: 4eacd0d1cab04427bc315805c28e66c9
     Stack Name: test-networks
     Stack Status: CREATE_COMPLETE
     Updated Time: null