OPENSTACK INSTEANCE AUTO REGISTER ON IPA SERVER DOMAIN

[NAZAN CENGIZ]

Hi, 
We have a RedHat Openstack (Queens) lab and IPA Server. 
We installing IPA Client a Openstack insteance then on insteance is adding DNS on IPA server as below. 
openstack server create --image image1 --flavor onap_worker_flavor --key-name onapkeypair --network onapnet1 --security-group onapsg --wait siem --user-data /home/stack/custominit.yaml --user-data /opt/images/openstack-sh 
#on siem insteance 
sudo hostnamectl set-hostname siem.5ghvl.local 
sudo yum install ipa-client 
sudo ipa-client-install --hostname=`hostname -f` --mkhomedir --server=ipa.5ghvl.local --domain 5ghvl.local --realm 5GHVL.LOCAL 
#on openstack director 
openstack server stop siem.5ghvl.local 
openstack server image create --name siem_image siem.5ghvl.local 
openstack image set siem_image --public 
openstack server create --image siem_image --flavor onap_worker_flavor --key-name onapkeypair --network onapnet1 --security-group onapsg --wait new_siem --user-data /home/stack/custominit.yaml --user-data /opt/images/openstack-sh 
Then siem machine turn to image (siem_image) 
Then siem_image turn to virtual machine .New insteance has ipa client but it is not adding domain. 
We goal ;auto register virtual machine on IPA Server.But only host is on IPA server.(siem.5ghvl.local). 
new_siem.5ghvl.local is not on IPA server. 
Could you please help me? 
Best Regards.

This e-mail and any attached files are confidential and may be legally privileged. If you are not the addressee, any disclosure, reproduction, copying, distribution, or other dissemination or use of this communication is strictly prohibited. If you have received this transmission in error please notify the sender immediately and then delete this mail.<br>

[Christophe TREFOIS]

In my view, you should put the ipa-client-install parts in the user-data script and perhaps use the community templates of foreman as a starting point.

https://github.com/theforeman/community-templates/blob/develop/provisioning_... https://github.com/theforeman/community-templates/blob/develop/provisioning_templates/user_data/kickstart_default_user_data.erb

and

https://github.com/theforeman/community-templates/blob/develop/provisioning_... https://github.com/theforeman/community-templates/blob/develop/provisioning_templates/snippet/freeipa_register.erb
> On 22 Jul 2019, at 15:58, NAZAN CENGIZ via FreeIPA-users  wrote:
>
> Hi,
> We have a RedHat Openstack (Queens) lab and IPA Server.
> We  installing IPA Client a Openstack insteance then on insteance is adding DNS on  IPA server as below.
> openstack server create  --image image1 --flavor onap_worker_flavor  --key-name onapkeypair --network onapnet1  --security-group onapsg --wait siem --user-data /home/stack/custominit.yaml --user-data /opt/images/openstack-sh 
> #on siem insteance
> sudo hostnamectl set-hostname siem.5ghvl.local
> sudo yum install ipa-client
> sudo ipa-client-install --hostname=`hostname -f` --mkhomedir --server=ipa.5ghvl.local --domain 5ghvl.local --realm 5GHVL.LOCAL
> #on openstack director
> openstack server stop  siem.5ghvl.local
> openstack server image create --name siem_image siem.5ghvl.local
> openstack image set siem_image --public
> openstack server create  --image siem_image --flavor onap_worker_flavor  --key-name onapkeypair --network onapnet1  --security-group onapsg --wait new_siem --user-data /home/stack/custominit.yaml --user-data /opt/images/openstack-sh 
> Then siem machine turn to image (siem_image)
> Then siem_image turn to virtual machine .New insteance has ipa client but it is not adding domain.
> We goal ;auto register virtual machine on IPA Server.But only host is on IPA server.(siem.5ghvl.local).
> new_siem.5ghvl.local is not on IPA server.
> Could you please help me?
> Best Regards.
>
> This e-mail and any attached files are confidential and may be legally privileged. If you are not the addressee, any disclosure, reproduction, copying, distribution, or other dissemination or use of this communication is strictly prohibited. If you have received this transmission in error please notify the sender immediately and then delete this mail.
> E-mail transmission cannot be guaranteed to be secure or error free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission or changes to transmitted date not specifically approved by the sender.
> If this e-mail or attached files contain information which do not relate to our professional activity we do not accept liability for such information.
>
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...
>
> This e-mail can not be trusted due to SPF/DKIM validation failed.

[Rob Crittenden]

Christophe TREFOIS via FreeIPA-users wrote:
> In my view, you should put the ipa-client-install parts in the user-data
> script and perhaps use the community templates of foreman as a starting
> point.
>
> https://github.com/theforeman/community-templates/blob/develop/provisioning_...
>
> and
>
> https://github.com/theforeman/community-templates/blob/develop/provisioning_...

https://github.com/openstack/novajoin can be used to automate this.

rob
> > On 22 Jul 2019, at 15:58, NAZAN CENGIZ via FreeIPA-users
> > <[e-mail]
> > > wrote:
> >
> > Hi,
> > We have a RedHat Openstack (Queens) lab and IPA Server.
> > We  installing IPA Client a Openstack insteance then on insteance is
> > adding DNS on  IPA server as below.
> > openstack server create  --image image1 --flavor onap_worker_flavor 
> > --key-name onapkeypair --network onapnet1  --security-group onapsg
> > --wait siem --user-data /home/stack/custominit.yaml --user-data
> > /opt/images/openstack-sh 
> > #on siem insteance
> > sudo hostnamectl set-hostname siem.5ghvl.local
> > sudo yum install ipa-client
> > sudo ipa-client-install --hostname=`hostname -f` --mkhomedir
> > --server=ipa.5ghvl.local --domain 5ghvl.local --realm 5GHVL.LOCAL
> > #on openstack director
> > openstack server stop  siem.5ghvl.local
> > openstack server image create --name siem_image siem.5ghvl.local
> > openstack image set siem_image --public
> > openstack server create  --image siem_image --flavor
> > onap_worker_flavor  --key-name onapkeypair --network onapnet1 
> > --security-group onapsg --wait new_siem --user-data
> > /home/stack/custominit.yaml --user-data /opt/images/openstack-sh 
> > Then siem machine turn to image (siem_image)
> > Then siem_image turn to virtual machine .New insteance has ipa client
> > but it is not adding domain.
> > We goal ;auto register virtual machine on IPA Server.But only host is
> > on IPA server.(siem.5ghvl.local).
> > new_siem.5ghvl.local is not on IPA server.
> > Could you please help me?
> > Best Regards.
> >
> > This e-mail and any attached files are confidential and may be legally
> > privileged. If you are not the addressee, any disclosure,
> > reproduction, copying, distribution, or other dissemination or use of
> > this communication is strictly prohibited. If you have received this
> > transmission in error please notify the sender immediately and then
> > delete this mail.
> > E-mail transmission cannot be guaranteed to be secure or error free as
> > information could be intercepted, corrupted, lost, destroyed, arrive
> > late or incomplete, or contain viruses. The sender therefore does not
> > accept liability for any errors or omissions in the contents of this
> > message which arise as a result of e-mail transmission or changes to
> > transmitted date not specifically approved by the sender.
> > If this e-mail or attached files contain information which do not
> > relate to our professional activity we do not accept liability for
> > such information.
> >
> > FreeIPA-users mailing list -- [e-mail]
> >
> > To unsubscribe send an email to
> > [e-mail]
> >
> > Fedora Code of Conduct:
> > https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives:
> > https://lists.fedorahosted.org/archives/list/[e-mail]...
> >
> > This e-mail can not be trusted due to SPF/DKIM validation failed.
>
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...