ADORSYS-GIS · Donemmanuelo · Jun 30, 2025 · Jun 30, 2025 · Jun 30, 2025 · Jun 30, 2025
diff --git a/README.md b/README.md
diff --git a/docs/VLAN.md b/docs/VLAN.md
@@ -16,9 +16,9 @@ the same network switch.
 There are two types of VLANs:
 
 - **Port-Based VLAN**: A VLAN is assigned to a particular port, and any machine
-  connected to that port automatically joins that VLAN
+  connected to that port automatically joins that VLAN.
 - **User-Based or Dynamic VLAN**: VLANs are assigned based on user
-  authentication or other dynamic criteria
+  authentication or other dynamic criteria.
 
 ## Network Architecture
 

diff --git a/docs/ansible_docs.md b/docs/ansible_docs.md
@@ -15,13 +15,13 @@ how to install Ansible here:
 Ansible provides several tools to facilitate server management:
 
 - **OpenSSH**: Used for setting up SSH and generating keys for server
-  authentication
+  authentication.
 - **Ad-hoc Commands**: Used as alternatives to playbooks for quick and simple
-  tasks
+  tasks.
 - **Playbooks**: YAML files containing specific tasks to manage servers, used
-  for complex tasks
+  for complex tasks.
 - **Inventory File**: Contains the list of servers grouped by categories for
-  organized management
+  organized management.
 
 ## How It Works
 
@@ -31,8 +31,8 @@ Ansible relies on SSH to authenticate and configure servers. While you can use a
 single SSH key for managing all servers, it is often recommended to use two
 separate keys:
 
-- One for personal SSH logins
-- Another specifically for automation with Ansible
+- One for personal SSH logins.
+- Another specifically for automation with Ansible.
 
 #### Creation of SSH Keys
 
@@ -72,9 +72,9 @@ For more details, see:
 Playbooks define the automation logic in a structured way. When you run a
 playbook, Ansible:
 
-1. Loads temporary modules to the remote server
-2. Executes the tasks (e.g., install packages, start services)
-3. Removes the modules after execution
+1. Loads temporary modules to the remote server.
+2. Executes the tasks (e.g., install packages, start services).
+3. Removes the modules after execution.
 
 For more details on playbooks:
 
@@ -95,15 +95,15 @@ To learn more about ad-hoc commands, see:
 Ansible excels at server management by providing:
 
 - **Playbooks**: Makes task handover between teams seamless, as all required
-  tasks are documented in playbooks
+  tasks are documented in playbooks.
 - **Inventory Files**: Organizes server IP addresses by groups, making it easy
-  to manage and assign tasks
+  to manage and assign tasks.
 - **SSH Key**: Automates authentication, making server access and management
-  more efficient
+  more efficient.
 
 ## What If Ansible Becomes Outdated?
 
-If Ansible becomes outdated or no longer maintained, other modern tools can be
+If Ansible becomes outdated or is no longer maintained, other modern tools can be
 used for infrastructure automation and server management:
 
 - [Chef](https://docs.chef.io/manage/)

diff --git a/mkdocs.yml b/mkdocs.yml
diff --git a/playbooks/docs/glance-ansible_docs.md b/playbooks/docs/glance-ansible_docs.md
diff --git a/playbooks/glance-ansible/ansible.cfg b/playbooks/glance-ansible/ansible.cfg
@@ -0,0 +1,4 @@
+[defaults]
+inventory = inventory.ini
+host_key_checking = False
+retry_files_enabled = False
diff --git a/playbooks/glance-ansible/glance.md b/playbooks/glance-ansible/glance.md
@@ -0,0 +1,175 @@
+# OpenStack Keystone + Glance Installation (Ansible-Based)
+
+This documentation describes a fully automated installation of **Keystone** (Identity Service) and **Glance** (Image Service) using **Ansible**. The playbook provisions and configures required services, sets up databases, initializes Keystone, registers Glance, and validates the image upload process.
+
+---
+
+##  Project Layout
+
+```
+├── ansible.cfg
+├── group_vars
+│   └── all.yml
+├── inventory.ini
+├── playbook.yml
+└── roles
+    ├── glance
+    │   ├── tasks
+    │   │   └── main.yml
+    │   ├── templates
+    │       ├── glance-api-paste.ini.j2
+    │       └── glance-api.conf.j2
+    │   
+    ├── keystone
+    │   ├── tasks
+    │   │   └── main.yml
+    │   ├── templates
+    │       └── wsgi-keystone.conf.j2
+    │ 
+    └── test-setup
+        ├── tasks
+        │   └── main.yml
+        └── vars
+            └── main.yml
+```
+---
+
+## ⚙️ Variable Configuration (`group_vars/all.yml`)
+
+```yaml
+# Database passwords
+mysql_root_pass: newpassword
+keystone_db_pass: keystone_db_pass
+glance_db_pass: GlancePass123!
+
+# Keystone admin credentials
+keystone_admin_pass: admin
+
+# Glance user password
+glance_user_pass: GlancePass123!
+
+# Host and ports
+controller_host: localhost
+keystone_port: 5001
+
+# Glance test image config
+image_file: cirros-0.6.2-x86_64-disk.img
+image_name: test-cirros
+disk_format: qcow2
+container_format: bare
+
+# Keystone/Glance endpoints
+keystone_url: http://localhost:5001/v3
+glance_url: http://localhost:9292/v2
+
+# Keystone auth scope
+admin_user: admin
+admin_pass: admin
+project_name: admin
+domain_name: Default
+```
+
+---
+
+##  Keystone Installation (`roles/keystone/tasks/main.yml`)
+
+###  Packages
+
+- Installs: MariaDB, Apache2, WSGI, Memcached, Keystone, OpenStack client, Python packages
+
+###  MariaDB Configuration
+
+- Ensures `bind-address = 127.0.0.1`
+- Creates `keystone` database
+- Grants privileges to `keystone` user (for `localhost` and `%`)
+
+###  Keystone Config
+
+- Configures `keystone.conf`:
+  - `[database]` connection string
+  - `[token]` provider = `fernet`
+- Runs:
+  - `keystone-manage fernet_setup`
+  - `keystone-manage credential_setup`
+  - `keystone-manage db_sync`
+  - `keystone-manage bootstrap`
+
+### Apache WSGI
+
+- Adds Keystone virtual host on port `5001`
+- Enables the site and restarts Apache
+
+---
+
+## Glance Installation (`roles/glance/tasks/main.yml`)
+
+###  Database
+
+- Creates `glance` database
+- Grants user privileges for `glance` user
+
+###  Configuration
+
+- Renders `glance-api.conf` and `glance-api-paste.ini` from templates
+- Sets ownership to `glance:glance`, mode `0640`
+- Runs `glance-manage db_sync`
+
+###  Service Setup
+
+- Enables and restarts `glance-api` systemd service
+
+###  Keystone Integration
+
+- Creates:
+  - `service` project
+  - `glance` user
+  - Role binding: `glance` as `admin` in `service`
+- Registers Glance:
+  - Service type: `image`
+  - Endpoints: `public`, `internal`, `admin` at `http://localhost:9292`
+
+---
+
+##  Validation (`roles/test-setup/tasks/main.yml`)
+
+###  Authentication
+
+- Sends `POST /v3/auth/tokens` to Keystone
+- Extracts `X-Subject-Token` as auth token
+
+###  Glance API Check
+
+- Polls `GET /images` until 200 OK is received
+
+###  Cirros Image Upload
+
+1. Downloads image if missing
+2. Sends metadata via `POST /images`
+3. Extracts image `id` from response
+4. Uploads binary using `PUT /images/<id>/file`
+5. Lists images with `GET /images`
+6. Deletes test image using `DELETE /images/<id>`
+
+---
+
+##  Troubleshooting
+
+| Issue | Cause | Fix |
+|-------|-------|-----|
+| **403 Forbidden on Keystone** | Apache WSGI misconfigured | Ensure `Require all granted` in VirtualHost |
+| **Image upload fails** | Bad image ID or Glance not ready | Confirm metadata created and Glance is running |
+| **Token missing** | Wrong credentials or Keystone unreachable | Double-check `keystone_url` and auth info |
+| **DB connection error** | Wrong password or bind-address issue | Check MariaDB logs and config |
+
+---
+
+##  Expected Results
+
+After running the playbook:
+
+- Keystone is reachable at: `http://localhost:5001/v3`
+- Glance is reachable at: `http://localhost:9292/v2`
+- Keystone admin and Glance service users are functional
+- Cirros image is uploaded and deleted via Glance API
+
+
diff --git a/playbooks/glance-ansible/glance.yaml b/playbooks/glance-ansible/glance.yaml
@@ -0,0 +1,6 @@
+- name: Deploy OpenStack Keystone and Glance
+  hosts: controller
+  become: true
+  roles:
+    - keystone
+    - glance
diff --git a/playbooks/glance-ansible/group_vars/all.yml b/playbooks/glance-ansible/group_vars/all.yml
@@ -0,0 +1,8 @@
+mysql_root_pass: "newpassword"
+keystone_db_pass: "keystone_db_pass"
+keystone_admin_pass: "admin"
+admin_token: "ADMIN"
+glance_db_pass: "GlancePass123!"
+glance_user_pass: "GlancePass123!"
+controller_host: "localhost"
+keystone_port: 5001
diff --git a/playbooks/glance-ansible/inventory.ini b/playbooks/glance-ansible/inventory.ini
@@ -0,0 +1,2 @@
+[all]
+localhost ansible_connection=local
diff --git a/playbooks/glance-ansible/playbook.yml b/playbooks/glance-ansible/playbook.yml
@@ -0,0 +1,10 @@
+---
+- name: Setup OpenStack Keystone, Glance and Test
+  hosts: all
+  connection: local 
+  become: true
+
+  roles:
+    - keystone
+    - glance
+    - test-setup
diff --git a/playbooks/glance-ansible/roles/glance/defaults/main.yaml b/playbooks/glance-ansible/roles/glance/defaults/main.yaml
@@ -0,0 +1,7 @@
+---
+new_mysql_root_pass: newpassword
+glance_db_pass: GlancePass123!
+glance_user_pass: GlancePass123!
+controller_host: localhost
+keystone_port: 5001
+keystone_admin_pass: admin