From 054c5fde249649a99e92dbdee271c9a6b6be4ddb Mon Sep 17 00:00:00 2001 From: okozachenko Date: Wed, 16 Sep 2020 18:33:49 +0300 Subject: [PATCH] Set unix socket auth method as none We are gonna use libvirt unix socket in nova. We are trying to realize live migration in libvirt while guarantee secure. To realize this, replaced 127.0.0.1 with 0.0.0.0 for listen address and plus enabled tls instead bare tcp. And in the nova, used libvirt unix socket to connect instead of tcp 127.0.0.1 connection. fyi, https://review.opendev.org/752108/ and https://review.opendev.org/752125/ Change-Id: Idb7d3a0d90be84d96b541c41fb90abdd33b7de94 --- libvirt/Chart.yaml | 2 +- libvirt/values.yaml | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/libvirt/Chart.yaml b/libvirt/Chart.yaml index fd0ec7e26b..0c6e6af99a 100644 --- a/libvirt/Chart.yaml +++ b/libvirt/Chart.yaml @@ -15,7 +15,7 @@ apiVersion: v1 appVersion: v1.0.0 description: OpenStack-Helm libvirt name: libvirt -version: 0.1.3 +version: 0.1.4 home: https://libvirt.org sources: - https://libvirt.org/git/?p=libvirt.git;a=summary diff --git a/libvirt/values.yaml b/libvirt/values.yaml index 39e1b7a223..3fda919482 100644 --- a/libvirt/values.yaml +++ b/libvirt/values.yaml @@ -90,6 +90,7 @@ conf: ca_file: "/etc/pki/CA/cacert.pem" cert_file: "/etc/pki/libvirt/servercert.pem" key_file: "/etc/pki/libvirt/private/serverkey.pem" + auth_unix_rw: "none" listen_addr: 127.0.0.1 log_level: "3" log_outputs: "1:file:/var/log/libvirt/libvirtd.log"