:_mod-docs-content-type: ASSEMBLY
[id="preparing-to-install-on-openstack"]
= Preparing to install on OpenStack
include::_attributes/common-attributes.adoc[]
:context: preparing-to-install-on-openstack

toc::[]

[role="_abstract"]
You can install {product-title} on {rh-openstack-first}.
ifdef::openshift-origin[{product-title} version {product-version} supports OpenStack Train.]

Prerequisites::

* You reviewed details about the {product-title} installation and update processes.
* You read the documentation on selecting a cluster installation method and preparing it for users.

Choosing a method to install {product-title} on OpenStack::

You can install {product-title} on installer-provisioned or user-provisioned infrastructure. The default installation type uses installer-provisioned infrastructure, where the installation program provisions the underlying infrastructure for the cluster. You can also install {product-title} on infrastructure that you provision. If you do not use infrastructure that the installation program provisions, you must manage and maintain the cluster resources yourself.

For more information about installer-provisioned and user-provisioned installation processes, see "Installation process".

Installing a cluster on installer-provisioned infrastructure::

You can install a cluster on {rh-openstack-first} infrastructure that is provisioned by the {product-title} installation program, by using one of the following methods:

* Installing a cluster on {rh-openstack-first} with customizations: You can install a customized cluster on {rh-openstack}. The installation program allows for some customization to be applied at the installation stage. For other customization options, see "Postinstallation cluster tasks".

* Installing a cluster on {rh-openstack-first} in a restricted network: You can install {product-title} on {rh-openstack} in a restricted or disconnected network by creating an internal mirror of the installation release content. You can use this method to install a cluster that does not require an active internet connection to obtain the software components. You can also use this installation method to ensure that your clusters only use container images that satisfy your organizational controls on external content.

Installing a cluster on user-provisioned infrastructure::

You can install a cluster on {rh-openstack} infrastructure that you provision. By using this installation method, you can integrate your cluster with existing infrastructure and modifications. For installations on user-provisioned infrastructure, you must create all {rh-openstack} resources, like Nova servers, Neutron ports, and security groups. You can use the provided Ansible playbooks to assist with the deployment process.

include::modules/security-osp-validating-certificates.adoc[leveloffset=+1]

include::modules/security-osp-validating-certificates-manually.adoc[leveloffset=+2]

[role="_additional-resources"]
[id="additional-resources_{context}"]
== Additional resources

* xref:../../architecture/architecture-installation.adoc#architecture-installation[{product-title} installation and update]
* xref:../../installing/overview/installing-preparing.adoc#installing-preparing[selecting a cluster installation method and preparing it for users]
* xref:../../architecture/architecture-installation.adoc#installation-process_architecture-installation[Installation process]
* xref:../../installing/installing_openstack/installing-openstack-installer-custom.adoc#installing-openstack-installer-custom[Installing a cluster on {rh-openstack-first} with customizations]
* xref:../../post_installation_configuration/cluster-tasks.adoc#post-install-cluster-tasks[Postinstallation cluster tasks]
* xref:../../installing/installing_openstack/installing-openstack-installer-restricted.adoc#installing-openstack-installer-restricted[Installing a cluster on {rh-openstack-first} in a restricted network]
* xref:../../installing/installing_openstack/installing-openstack-user.adoc#installing-openstack-user[Installing a cluster on {rh-openstack-first} on your own infrastructure]
