openstack/openstack-ansible-os_nova
Code Issues Proposed changes

Revert "Disable shell for nova when tunneled migration not used"

Browse Source 
This reverts commit ca352be75b964f058b44ab0079e6c4b524f62ddd.

Change-Id: I19e1cc491e2441ab8d1bd39d383dd2e09a5b7077
(cherry picked from commit 7a3327150975346967a55a6124ff548df1cb971d)
This commit is contained in:
Andrew Bonney 2022-01-07 10:50:59 +00:00 committed by Dmitriy Rabotyagov
parent 6a12ab8ad8
commit 5384c0c718
2 changed files with 1 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -63,7 +63,7 @@ nova_bin: "{{ _nova_bin }}"
## Nova user information ## Nova user information
nova_system_user_name: nova nova_system_user_name: nova
nova_system_group_name: nova nova_system_group_name: nova
nova_system_shell: "{{ (nova_libvirtd_listen_tls | bool) | ternary('/bin/false', '/bin/bash') }}" nova_system_shell: /bin/bash
nova_system_comment: nova system user nova_system_comment: nova system user
nova_system_home_folder: "/var/lib/{{ nova_system_user_name }}" nova_system_home_folder: "/var/lib/{{ nova_system_user_name }}"
nova_system_slice_name: nova nova_system_slice_name: nova

8
releasenotes/notes/disable_nova_shell-214c72d31c4d50ec.yaml
View File

@ -1,8 +0,0 @@
---
upgrade:
- |
From now on ``nova_system_shell`` depends on the value of
nova_libvirtd_listen_tls by default. When libvirt listens on tls we
assume that tunnelled migration is not used, so nova user does not
need shell access and it will be disabled. When nova_libvirtd_listen_tls
is disabled, ``nova_system_shell`` will be set to /bin/bash