Page History

...

1. Login with your HPC account via the OpenStack Horizon dashboard, https://adacloud.hpc.cineca.it 
   
   
2. On the dashboard, select the account you want to use (on the top-left menu) then go to the panel "Identity -> Application Credentials".
   
   
3. Click on "Create Application Credential" and fill out the obligatory fields. We strongly encourage to select no more than 1 week as the expiration time for security reasons. If you want the AC to have all your available roles, please do not select anything in the field "Role". If, by accident you select an item in the "Role" you have to restart the creation of the AC from scratch.
   
   
4. After creation, it will be shown the AC secret. Note that it will not be available after closing the page, so you must capture it or download it. If not, you will have to generate a new application credential. Download the Application Credential script file clicking on the button "Download openrc file" or, in alternative, "Download cloud.yaml file".
   
   

5. If you don't have already done, install the OpenStackClient (OSC) command-line client. The best option is using pip command (also possible in a virtual environment) :

   Code Block
   language bash
   On MAC or Linux: $$ pip install python-openstackclient or Windows: C:\> pip install python-openstackclient

   You can also install it from packages, but check that the version installed is 6.5 or 6.6 or 5.8 "openstack --version" command. Greater version can have some minor modification in the commands. 

   Code Block
   For RHEL, Fedora, CentOS: $$ sudo yum install -y python3-openstackclient For Ubuntu: $$ sudo apt-get install -y python3-openstackclient

6. Download the certificate chain available here "adacloud.ca.chain" and save it in your local workstation where you prefer
   
   

7. If you have downloaded the openrc file, source the Application Credential script and export the additional environment variable pointing to the adacloud certificate:
   

   Code Block
   language bash
   $$ source app-cred-...-openrc.sh $$ export OS_CACERT=<path-to>/adacloud.ca.chain

   If, on the other hand, you did download the cloud.yaml, you don't have to source the file, but you have to edit the cloud.yaml file adding the "cacert" line with the correct identation as in the following:

   Code Block
   language bash
   clouds: openstack: auth:   auth_url: <AUTH_URL> application_credential_id: "<AC_ID>" application_credential_secret: "<AC_secret>" region_name: "RegionOne" interface: "public" identity_api_version: 3 auth_type: "v3applicationcredential" cacert: "<path-to>/adacloud.ca.chain"

   In this case there may be more than one AC indicated by the name ("openstack" in this example).
   
   

8. Test the CLI access with the OpenStack command line, by executing, as an example, the following command that lists all the VMs present in the tenant the user belongs.
   If you have downloaded openrc file
   

   Code Block
   language bash
   $$ openstack server list

   If you are using the cloud.yaml file add the flag to choose the

   Code Block
   $$ openstack --os-cloud=openstack server list

   Running "openstack --help" you can find all possible usages of openstack command.