Operations Manual

Documentation > Specialized Systems > OpenStack Cloud Platform > Operations Manual

Per-service operational procedures covering the 8 core OpenStack services. Each section provides service-specific management tasks following the OPS-SERVICE-NNN procedure format with TAID verification steps. Procedures are organized by operational phase: routine maintenance, configuration change, scaling, and incident response. Every procedure includes preconditions, step-by-step actions, verification criteria, and rollback instructions. For emergency incident response, see the Runbooks section which provides symptom-indexed lookup.

Core OpenStack Services

Keystone (Identity Service) — Authentication, authorization, service catalog management, domain and project administration, role assignment, application credential lifecycle, and token provider configuration. Procedures cover user federation, LDAP integration, and quota policy enforcement.
Nova (Compute Service) — Instance lifecycle management (create, resize, migrate, evacuate, delete), flavor management, host aggregate configuration, live migration procedures, and compute node maintenance. Includes hypervisor health checks and scheduler filter management.
Neutron (Networking Service) — Network topology management, security group rules, floating IP allocation, load balancer configuration, VPN-as-a-Service setup, and router management. Covers OVN/OVS plugin operations, VLAN trunk configuration, and network QoS policy enforcement.
Cinder (Block Storage Service) — Volume lifecycle (create, extend, snapshot, backup, restore, delete), multi-backend configuration, volume type management, replication failover procedures, and storage pool monitoring. Includes Ceph backend integration and consistency group operations.
Glance (Image Service) — Image registration and deregistration, format conversion (RAW/QCOW2/VMDK), image metadata management, visibility controls, image replication across regions, and store backend configuration. Covers image signing and integrity verification procedures.
Swift (Object Storage Service) — Container management, object lifecycle policy configuration, replication topology tuning, temporary URL management, bulk upload operations, and expiry policy enforcement. Includes ring management and capacity planning procedures.
Heat (Orchestration Service) — Stack lifecycle (create, update, suspend, resume, delete), HOT template management, resource signal handling, auto-scaling group configuration, and software configuration management. Covers nested stack operations and rollback procedures.
Horizon (Dashboard Service) — Theme configuration, session management, panel customization, SSL/TLS certificate rotation, and SAML SSO integration. Includes performance tuning for large tenants and custom panel plugin deployment.

Operational Standards

All procedures in this manual follow the OPS-SERVICE-NNN format. Each procedure carries a unique procedure ID, TAID classification (Test/Analysis/Inspection/Demonstration), and traceability to a requirement in the V&V compliance matrix. Skill-creator adaptive automation is integrated throughout — see CAP-139 Cloud Operations for the automation layer that monitors and assists with procedure execution.