novajoin-server(1)

NAME
novajoin-server - REST service to accept nova dynamic metadata requests

SYNOPSIS
novajoin-server

DESCRIPTION
The novajoin server provides dynamic metadata to nova in order to facilitate enrolling new instances as IPA clients. In order for a host to be enrolled the property ipa_enroll must be set to True in the instance metadata. A cloud-init script is pushed to the instance by nova. This script will install the packages required by ipa-client-install and fetch the OTP and hostname from nova. This request will create a host in IPA using the hostname of instance_name + novajoin domain, and a One-Time Password (OTP) that will be used by ipa-client-install to enroll the host. In the case where config_drive is True in either the instance or globally in nova then the IPA host is generated at instance creation time rather than when needed.

CONFIGURATION
The service is configured using /etc/nova/join.conf. It consists of two sections: DEFAULT and keystone_authtoken The DEFAULT section configures novajoin-server and keystone_authtoken configures the keystone client to handle Openstack tokens. The DEFAULT section options are: join_listen_port = 9090 Port the service listens on

api_paste_config = /etc/nova/join-api-paste.ini
    Path to the Paste configuration file

debug = False
    Additional debug logging

auth_strategy = keystone
    Authentication strategy to use

keytab = /etc/nova/krb5.keytab
    Keytab used to communicate with the IPA master

domain = openstack.example.com
    The DNS domain to use when creating the FQDN of an instance

cacert = /etc/ipa/ca.crt
    File path location of the IPA CA certificate chain

connect_retries = 1
    Number of tries to attempt to reconnect to the IPA server

keystone_authtoken configuration options:

www_authenticate_uri = http://keystone.example.com:5000/v3.0
    The Keystone authentication uri

identity_uri = http://keystone.example.com:35357
    The Keystone identity service URI

admin_password = $NOVA_PASSWORD
    The nova service user password

admin_user = nova
    The nova service user name

admin_tenant_name = services

SEEALSO
novajoin-install(1),
    novajoin-notify(1)