{"type":"doc","content":[{"type":"paragraph","content":[{"text":"The Grid connectivity and credentials configuration must be added to the ","type":"text"},{"text":"neutron.conf","type":"text","marks":[{"type":"code"}]},{"text":" file in infoblox and infoblox-dc stanzas. The infoblox stanza contains keystone authentication and a list of Grids, and then in each there is an infoblox-dc stanza containing the appropriate configuration for each Grid. Support for multiple Grids is not yet available.","type":"text"}]},{"type":"paragraph","content":[{"text":"For keystone authentication, add an entry for the following configuration:","type":"text"},{"type":"hardBreak"},{"text":"keystone_auth_uri = ","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_admin_username = ","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_admin_password = ","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"If ","type":"text"},{"text":"keystone_auth_uri","type":"text","marks":[{"type":"code"}]},{"text":" does not include keystone version, then configure ","type":"text"},{"text":"keystone_auth_version","type":"text","marks":[{"type":"code"}]},{"text":" or it will take version 2.0 by default.","type":"text"},{"type":"hardBreak"},{"text":"keystone_auth_version = ","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"For keystone version 2.0, add:","type":"text"},{"type":"hardBreak"},{"text":"keystone_admin_tenant_name = ","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"For keystone version 3, add:","type":"text"},{"type":"hardBreak"},{"text":"keystone_admin_user_domain_id = ","type":"text","marks":[{"type":"code"}]}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"heading","attrs":{"level":3},"content":[{"text":"Note","type":"text"}]},{"type":"paragraph","content":[{"text":"For keystone version 3, you can set any one of the following scopes: project level or domain level.","type":"text"}]}]},{"type":"paragraph","content":[{"text":"# if authorization is project-level scope add:","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_admin_project_name = ","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_admin_project_domain_id = ","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"# if authorization is domain-level scope add:","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_admin_domain_id = ","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"For TLS support, add the following keystone configuration:","type":"text"},{"type":"hardBreak"},{"text":"cafile = ","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"insecure = # default value: False","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"cert = ","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"key = ","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"The following table lists general configuration options for the Infoblox IPAM Driver for OpenStack Neutron.","type":"text"}]},{"type":"table","attrs":{"layout":"default","localId":"fcded57e-e89c-455d-8c6a-d05aef5a654d"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"Option","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","marks":[{"type":"alignment","attrs":{"align":"center"}}],"content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"keystone_auth_uri","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"OpenStack keystone authentication URI","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"keystone_admin_username","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"OpenStack keystone admin user name","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"keystone_admin_password","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"Password of keystone admin user","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"keystone_auth_version","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"OpenStack keystone version","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"keystone_admin_tenant_name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"Tenant name of keystone admin user","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"keystone_admin_user_domain_id","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"User Domain Id of keystone admin user","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"keystone_admin_project_name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"Project name of keystone admin user","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"keystone_admin_project_domain_id","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"Project Domain Id of keystone admin user","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"keystone_admin_domain_id","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"Domain Id of keystone admin user","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"cafile","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"CA certificate bundle file for keystone authentication","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"insecure","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"Disable server certificate verification","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"cert","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"Client certificate bundle file for keystone authentication","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"key","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"Client certificate key file for keystone authentication","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"cloud_data_center_id","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"An integer ID used for the data center. This is used to form the stanza name for the rest of the options. If you have multiple instances of OpenStack sharing the same Infoblox Grid, this ID needs to be unique across the instances. The ID should begin with 1 and increment by 1 as you add another OpenStack instance. This ID is used to generate a unique ID for a network view that is cached in neutron database. Starting it with a very high number may exceed the max length of a network view id.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"grid_master_host","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"The IP address, hostname, or FQDN of the Grid Master (GM). Proxying is supported so this does not have to be the exact IP or hostname of the GM if you have a situation where you cannot reach the GM directly in your network. It can be any connection information that proxies to the GM.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"grid_master_name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"The name of the Grid Master (GM) This has to be the exact GM name registered in the Infoblox Grid.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"admin_user_name","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"The user name to use for the WAPI","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"admin_password","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"The password to use for the WAPI","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"wapi_version","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"The WAPI version to use. Supported versions: WAPI version 2.5 and later ; NIOS 8.1.0 and later","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"wapi_max_results","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"The maximum number of objects to be returned by WAPI. If this is set to a negative number, WAPI will return an error when the number of returned objects would exceed the setting. If this is set to a positive number, the results will be truncated when necessary. The default is -1000. If you experience the “Result set too large” error, increase this value","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"ssl_verify","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"Set to false if you use a self-signed SSL certificate, and true if you use a certificate signed by a known certificate authority. You can also set this to a path to a certificate file so that verification will be done even for a self-signed certificate. Using a value of False in a production environment is not secure.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[247.0]},"content":[{"type":"paragraph","content":[{"text":"http_pool_connections,","type":"text"},{"type":"hardBreak"},{"text":"http_pool_maxsize,","type":"text"},{"type":"hardBreak"},{"text":"http_request_timeout","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":[512.0]},"content":[{"type":"paragraph","content":[{"text":"Optional parameters to control the HTTP session pool","type":"text"}]}]}]}]},{"type":"paragraph","content":[{"text":"Additionally, the ","type":"text"},{"text":"ipam_driver","type":"text","marks":[{"type":"code"}]},{"text":" option must be set in ","type":"text"},{"text":"neutron.conf","type":"text","marks":[{"type":"code"}]},{"text":" to “infoblox”.","type":"text"}]},{"type":"panel","attrs":{"panelType":"warning"},"content":[{"type":"heading","attrs":{"level":3},"content":[{"text":"Note","type":"text"}]},{"type":"paragraph","content":[{"text":"These settings must be done on each controller that runs the Neutron service.","type":"text"}]}]},{"type":"paragraph","content":[{"text":"Example:","type":"text"},{"type":"hardBreak"},{"text":"[DEFAULT]","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"ipam_driver = infoblox","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"notification_driver = messagingv2","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"notification_topics = notifications","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"[infoblox]","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"cloud_data_center_id = 1","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_admin_project_domain_id = default","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_admin_user_domain_id = default","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_admin_domain_id = default","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_admin_username = admin","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_admin_password = infoblox","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_auth_uri = http://10.39.12.101/identity","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"keystone_auth_version = v3","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"cafile = /opt/stack/data/ca-bundle.pem","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"insecure = False","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"key = ","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"cert = ","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"[infoblox-dc:1]","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"grid_master_host = 10.35.114.2","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"grid_master_name = gmc.com","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"admin_user_name = admin","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"admin_password = infoblox","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"wapi_version = 2.7","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"wapi_max_results = -50000","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"If Cloud Platform (CP) member is part of the NIOS Grid, then create a user with ","type":"text"},{"text":"cloud-api-only","type":"text","marks":[{"type":"code"}]},{"text":" user group and configure the user as described in the section ","type":"text"},{"text":"Configuring a User","type":"text","marks":[{"type":"em"},{"type":"link","attrs":{"href":"https://docs.infoblox.com/display/ipamdriverosneutron/Configuring+a+User"}}]},{"text":" and update neutron.conf as follows:","type":"text"},{"type":"hardBreak"},{"text":"Example:","type":"text"},{"type":"hardBreak"},{"text":"[infoblox-dc:1]","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"grid_master_host = 10.35.114.2","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"grid_master_name = gmc.com","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"admin_user_name = cloud-api-only_user_name","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"admin_password = cloud-api-only_user_password","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"wapi_version = 2.7","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"wapi_max_results = -50000","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"If you want to use CP members only, use the CP Members Host IP address in the ","type":"text"},{"text":"grid_master_host","type":"text","marks":[{"type":"code"}]},{"text":" field.","type":"text"},{"type":"hardBreak"},{"text":"Example:","type":"text"},{"type":"hardBreak"},{"text":"[infoblox-dc:1]","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"grid_master_host = x.x.x.x(CP Host IP)","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"grid_master_name = gmc.com (grid_master_hostname)","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"admin_user_name = cloud-api-only_user_name","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"admin_password = cloud-api-only_user_password","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"wapi_version = 2.7","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"wapi_max_results = -50000","type":"text","marks":[{"type":"code"}]}]}],"version":1}