openstack/openstack-ansible-os_nova
Code Issues Proposed changes

Allow nova key/partition/password injection

Browse Source 
This commit adds the following new variables to customise whether nova
will allow key/partition/password injection:

nova_libvirt_inject_key
nova_libvirt_inject_partition
nova_libvirt_inject_password

Additionally, the following variable has been added to allow setting
password via Horizon:

horizon_can_set_password

Lastly, password injection can now be tested with tempest via:

tempest_compute_change_password

Note that all variables have been defaulted to their current values.

Closes-Bug: #1469238

Change-Id: Iff434ed7c042f7990990485c34d0f35b9a7baa7a
This commit is contained in:
Matt Thompson 2015-08-11 13:45:32 +01:00
parent 31145d7909
commit bab319447b
2 changed files with 10 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
defaults/main.yml
View File

@ -176,6 +176,13 @@ nova_compute_program_name: nova-compute
# TODO: This defaults to 'False' upstream, we should set this to 'False' in Liberty
nova_force_config_drive: True
## Nova libvirt
nova_libvirt_inject_key: False
# inject partition options:
# -2 => disable, -1 => inspect (libguestfs only), 0 => not partitioned, >0 => partition number
nova_libvirt_inject_partition: -2
nova_libvirt_inject_password: False
## Nova conductor
nova_conductor_program_name: nova-conductor

7
templates/nova.conf.j2
View File

@ -234,7 +234,9 @@ rabbit_hosts = {{ rabbitmq_servers }}
[libvirt]
vif_driver = {{ nova_libvirt_vif_driver }}
inject_partition = -2
inject_partition = {{ nova_libvirt_inject_partition }}
inject_password = {{ nova_libvirt_inject_password }}
inject_key = {{ nova_libvirt_inject_key }}
use_usb_tablet = False
use_virtio_for_bridges = True
cpu_mode = {{ nova_cpu_mode }}
@ -250,9 +252,6 @@ rbd_secret_uuid = {{ nova_ceph_client_uuid }}
images_type = rbd
images_rbd_pool = {{ nova_libvirt_images_rbd_pool }}
images_rbd_ceph_conf = /etc/ceph/ceph.conf
inject_password = false
inject_key = false
inject_partition = -2
live_migration_flag="VIR_MIGRATE_UNDEFINE_SOURCE,VIR_MIGRATE_PEER2PEER,VIR_MIGRATE_LIVE,VIR_MIGRATE_PERSIST_DEST"
{% endif %}