{{tag>Brouillon Cloud}}

= OpenStack client API


Voir : 
* https://docs.openstack.org/python-openstackclient/pike/configuration/index.html
* https://developer.rackspace.com/blog/openstack-cli-basics/
* https://docs.openstack.org/security-guide/api-endpoints/api-endpoint-configuration-recommendations.html

Sur le fonctionnement des APIs :
* https://adam.younglogic.com/2013/09/keystone-v3-api-examples/
* https://www.oreilly.com/learning/lets-use-keystone
* https://www.mirantis.com/blog/manage-openstack-projects-using-domains-havana/
* http://alexconst.net/2016/02/08/ansible/


== Install

=== Paquet Debian

<code bash>
apt-get install openstack-clients
</code>


Le script suivant permet de jouer avec les APIs ''/usr/bin/python2-openstack''

=== Install python-openstackclient via pip


<code bash>
sudo apt-get install virtualenv build-essential python-dev
 
mkdir openstackcli
cd openstackcli
virtualenv .
source bin/activate
pip install python-openstackclient
sudo ln -fs $PWD/bin/openstack /usr/local/bin/
#deactivate
</code>

Install Auto-completion
<code bash>
openstack complete |sudo tee /etc/bash_completion.d/osc.bash_completion
</code>



== Config 

''~/.config/openstack/clouds.yaml''
<code yaml>
clouds:
  devstack:
    auth:
      auth_url: http://192.168.56.11/identity/v3
      username: "admin"
      project_id: 17780b954c3a4b04a8123ac76d68f7b4
      project_name: "admin"
      user_domain_name: "Default"
      password: "toor"
    region_name: "RegionOne"
    interface: "public"
    identity_api_version: 3
</code>

Debug - Test flux
<code bash>
curl http://192.168.56.11/identity/v3
</code>

Test
<code bash>
openstack project list --os-cloud devstack

export OS_CLOUD=devstack

# python2-openstack service list
openstack service list
openstack project list
openstack server list
</code>

Ou par variables 

''devstack-openrc''
<code bash>
#
# See :
# * https://docs.openstack.org/python-openstackclient/pike/cli/man/openstack.html#environment-variables
# * https://docs.openstack.org/newton/install-guide-ubuntu/keystone-openrc.html

unset $(set |grep _ENDPOINT_ |cut -d= -f1)
unset $(set |grep ^OS_ |cut -d= -f1)

export LC_ALL=C
# LC_ALL=C.UTF-8
export OS_NO_CACHE='true'
export OS_CACERT=/etc/ssl/certs/

export OS_PROJECT_NAME='admin'
export OS_USERNAME='admin'
export OS_PASSWORD='toor'
export OS_AUTH_URL='http://192.168.56.11/identity/v3'
#export OS_DEFAULT_DOMAIN='Default'
export OS_USER_DOMAIN_NAME='Default'
export OS_IDENTITY_API_VERSION='3'
#export OS_INTERFACE='public'
#export OS_AUTH_STRATEGY='keystone'
#export OS_REGION_NAME='RegionOne'

#export OS_ENDPOINT_TYPE="$OS_AUTH_URL"
#export CINDER_ENDPOINT_TYPE="OS_AUTH_URL"
#export GLANCE_ENDPOINT_TYPE="$OS_AUTH_URL"
#export KEYSTONE_ENDPOINT_TYPE="$OS_AUTH_URL"
#export NOVA_ENDPOINT_TYPE="$OS_AUTH_URL"
#export NEUTRON_ENDPOINT_TYPE="$OS_AUTH_URL"

export OS_CLOUDNAME=devstack
# Add OS_CLOUDNAME to PS1
if [ -z "${CLOUDPROMPT_ENABLED:-}" ]; then
    export PS1=${PS1:-""}
    export PS1=\${OS_CLOUDNAME:+"(\$OS_CLOUDNAME)"}\ $PS1
    export CLOUDPROMPT_ENABLED=1
fi
</code>


Syntaxe 
<code bash>
openstack --os-identity-api-version 3 --help
</code>


== Exemple 

<code bash>
openstack keypair create --public-key ~/.ssh/id_rsa.pub maclef
</code>


== Pb

=== Pb certificate verify failed

<code ->
$ openstack project list --os-cloud vio
Failed to discover available identity versions when contacting https://vio.acme.local:5000/v3. Attempting to parse version from URL.
SSL exception connecting to https://vio.acme.local:5000/v3/auth/tokens: HTTPSConnectionPool(host='vio.acme.local', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),))
</code>


==== Solution

<code bash>
openssl s_client -showcerts -verify 5 -connect 192.168.21.53:5000 </dev/null > /usr/local/share/ca-certificates/vio.acme.local_5000.crt
update-ca-certificates

export OS_CACERT=/etc/ssl/certs/
</code>


=== Pb 'int' object has no attribute 'startswith'

<code ->
$ openstack server list --os-cloud vio
'int' object has no attribute 'startswith'
</code>

==== Solution 1

Voir https://review.openstack.org/#/c/388832/

Patcher les fichiers ci-dessous comme https://review.openstack.org/#/c/388832/2/osc_lib/cli/client_config.py :
* /usr/lib/python2.7/dist-packages/osc_lib/cli/client_config.py 
* /usr/lib/python2.7/dist-packages/openstackclient/common/client_config.py



==== Solution 2

Dans clouds.yaml remplacer ''identity_api_version: 3'' par ''identity_api_version: "3"''




== Autres

[[https://www.stratoscale.com/blog/compute/how-to-automate-the-export-of-aws-ec2-to-your-openstack-cloud/|How to Automate the Export of AWS EC2 to Your Openstack Cloud]]