Cinder needs to send notifications to nova when attached volumes
are being extended. By default, cinder uses the client context
for this, but nova requires admin privileges for this. So we
configure cinder to use the nova service user instead. See
also [0].
Added minor version bump for stable branch.
(cherry picked from commit f6c6e8b180)
[0] https://bugs.launchpad.net/openstack-ansible/+bug/1902914
Change-Id: Ib4c6820dd15ecfa3e3763c188e0a2cc322ecea55
27 lines
1.3 KiB
Ruby
27 lines
1.3 KiB
Ruby
default['openstack']['block-storage']['conf_secrets'] = {}
|
|
default['openstack']['block-storage']['conf'].tap do |conf|
|
|
conf['oslo_messaging_notifications']['driver'] = 'cinder.openstack.common.notifier.rpc_notifier'
|
|
if node['openstack']['block-storage']['syslog']['use']
|
|
conf['DEFAULT']['log_config'] = '/etc/openstack/logging.conf'
|
|
end
|
|
conf['DEFAULT']['auth_strategy'] = 'keystone'
|
|
conf['DEFAULT']['control_exchange'] = 'cinder'
|
|
conf['DEFAULT']['glance_api_version'] = '2'
|
|
conf['DEFAULT']['volume_group'] = 'cinder-volumes'
|
|
conf['DEFAULT']['state_path'] = '/var/lib/cinder'
|
|
conf['keystone_authtoken']['auth_type'] = 'password'
|
|
conf['keystone_authtoken']['region_name'] = node['openstack']['region']
|
|
conf['keystone_authtoken']['username'] = 'cinder'
|
|
conf['keystone_authtoken']['project_name'] = 'service'
|
|
conf['keystone_authtoken']['user_domain_name'] = 'Default'
|
|
conf['keystone_authtoken']['project_domain_name'] = 'Default'
|
|
conf['nova']['auth_type'] = 'password'
|
|
conf['nova']['region_name'] = node['openstack']['region']
|
|
conf['nova']['username'] = 'nova'
|
|
conf['nova']['project_name'] = 'service'
|
|
conf['nova']['user_domain_name'] = 'Default'
|
|
conf['nova']['project_domain_name'] = 'Default'
|
|
|
|
conf['oslo_concurrency']['lock_path'] = '/var/lib/cinder/tmp'
|
|
end
|