f8cfccb99e
To securely support live migration between computenodes we should enable tls, with cert auth, instead of TCP with no auth support. Implements: blueprint libvirt-tls Change-Id: I22ea6233933c840b853fdcc8e03400b2bf577271
67 lines
2.1 KiB
Django/Jinja
67 lines
2.1 KiB
Django/Jinja
{
|
|
"command": "nova-compute",
|
|
"config_files": [
|
|
{
|
|
"source": "{{ container_config_directory }}/nova.conf",
|
|
"dest": "/etc/nova/nova.conf",
|
|
"owner": "nova",
|
|
"perm": "0600"
|
|
}{% if nova_policy_file is defined %},
|
|
{
|
|
"source": "{{ container_config_directory }}/{{ nova_policy_file }}",
|
|
"dest": "/etc/nova/{{ nova_policy_file }}",
|
|
"owner": "nova",
|
|
"perm": "0600"
|
|
}{% endif %}{% if nova_backend == "rbd" %},
|
|
{
|
|
"source": "{{ container_config_directory }}/ceph.*",
|
|
"dest": "/etc/ceph/",
|
|
"owner": "nova",
|
|
"perm": "0700"
|
|
}{% endif %}{% if nova_compute_virt_type == "vmware" and not vmware_vcenter_insecure | bool %},
|
|
{
|
|
"source": "{{ container_config_directory }}/vmware_ca",
|
|
"dest": "/etc/nova/vmware_ca",
|
|
"owner": "nova",
|
|
"perm": "0600"
|
|
}{% endif %}{% if libvirt_tls | bool %},
|
|
{
|
|
"source": "{{ container_config_directory }}/clientkey.pem",
|
|
"dest": "/etc/pki/libvirt/private/clientkey.pem",
|
|
"owner": "root:nova",
|
|
"perm": "0640"
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/clientcert.pem",
|
|
"dest": "/etc/pki/libvirt/clientcert.pem",
|
|
"owner": "root:nova",
|
|
"perm": "0640"
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/cacert.pem",
|
|
"dest": "/etc/pki/CA/cacert.pem",
|
|
"owner": "root:nova",
|
|
"perm": "0640"
|
|
}{% endif %},
|
|
{
|
|
"source": "{{ container_config_directory }}/release",
|
|
"dest": "/etc/nova/release",
|
|
"owner": "nova",
|
|
"perm": "0600",
|
|
"optional": true
|
|
}
|
|
],
|
|
"permissions": [
|
|
{
|
|
"path": "/var/log/kolla/nova",
|
|
"owner": "nova:nova",
|
|
"recurse": true
|
|
},
|
|
{
|
|
"path": "/var/lib/nova",
|
|
"owner": "nova:nova",
|
|
"recurse": true
|
|
}
|
|
]
|
|
}
|