Installation

The proxy will be set up in one OpenStack installation, called the Identity Provider, or IdP, and it redirect API calls to either the local services, or remote services in one of several Service Provider installations (SP).

Install dependencies.

$ pip install -r requirements.txt
$ python setup.py install

Web Server

The recommended way is to run the proxy using uwsgi and apache through the httpd/mixmatch-uwsgi.ini and httpd/mixmatch-uwsgi.conf files respectively

sudo apt install uwsgi uwsgi-plugin-python libapache2-mod-proxy-uwsgi
uwsgi mixmatch/httpd/mixmatch-uwsgi.ini
sudo cp mixmatch/httpd/mixmatch-uwsgi.conf /etc/apache2/sites-available/mixmatch.conf
sudo a2ensite mixmatch

Running in a Docker Container

The proxy can be run in a Docker container using the provided Dockerfile. When it is run, the container port 5001 must be mapped to the port 5001 on the host and your configuration file must be passed in as a data volume, for example

sudo docker run \
--interactive --tty \
--volume /etc/mixmatch/mixmatch.conf:/<path>/<to>/<local>/mixmatch.conf: \
--publish 5001:5001 mixmatch

You will still need to edit the configuration file and do the rest of the setup normally on the host.

Configuration

The proxy searches for the configuration file mixmatch.conf in the current directory, the etc/mixmatch directory relative to the current directory or /etc/mixmatch.

A sample configuration file has been provided in the etc folder of the source code.

The proxy will substitute the endpoint of the service it is proxying. Only Cinder and Glance are supported for now.

For each SP, you must have an option group in mixmatch.conf which contains the service provider name (as it is listed in Keystone’s service catalog, but with the added prefix sp_), the URI for connecting to the notification messagebus in that OpenStack installation, the keystone auth url, and the endpoints for each of the services enabled under the enabled_services option. For instance:

[sp_one]
sp_name="keystone-sp1"
messagebus="rabbit://rabbituser:rabbitpassword@192.168.7.20"
image_endpoint="http://192.168.7.20:9292"
volume_endpoint="http://192.168.7.20:8776"
enabled_services=image, volume

You must also have each service provider’s name listed under service_providers in [DEFAULT].

Keystone Configuration

Keystone maintains the service catalog with information about all the configured endpoints.

In the IdP, delete and then recreate the endpoint which we will proxy.

$ openstack endpoint delete <endpoint_id>
$ openstack endpoint create \
    --publicurl http://<proxy_host>:<proxy_port>/<service_type>/<api_version> \
    --internalurl http://<proxy_host>:<proxy_port>/<service_type>/<api_version> \
    --adminurl http://<proxy_host>:<proxy_port>/<service_type>/<api_version> \
    --region RegionOne \
    <endpoint_type>

Where service_type is image if endpoint_type is image and volume if endpoint_type is volume or volumev2

Nova Configuration

Nova reads the endpoint address for glance from the configuration file stored in /etc/nova/nova.conf. So, in the IdP, add the following:

# /etc/nova/nova.conf
[glance]
api_servers=<proxy_url>/image

Cinder Notification

Cinder reads the endpoint address for glance from the configuration file stored in /etc/cinder/cinder.conf. So, in the IdP, add the following:

# /etc/cinder/cinder.conf
[default]
glance_api_servers=<proxy_url>/image

Every Cinder must be configured to emit notifications on the messagebus. So, in both the IdP and every SP, add the following to /etc/cinder/cinder.conf:

# /etc/cinder/cinder.conf
[oslo_messaging_notifications]
driver = messaging
topics = notifications