openstack/kolla-ansible
Code Issues Proposed changes

Magnum: Enable cluster trust customization

Browse Source 
This enable cluster_user_trust customization which is needed to get
Kubernetes integration with Cinder and Neutron LBaaS.

https://github.com/openstack/magnum/blob/master/releasenotes/notes/CVE-2016-7404-f53e62a4a40e4d30.yaml#L5

Change-Id: Ib3243b110d2c592f3bf6467b086738335799c853
This commit is contained in:
Bertrand Lallau 2017-06-09 14:13:51 +02:00 committed by Bertrand Lallau
parent 2f00c64616
commit 866a160ec9
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ansible/roles/magnum/defaults/main.yml
View File

@ -31,6 +31,12 @@ magnum_database_user: "magnum"
magnum_database_address: "{{ kolla_internal_fqdn }}:{{ database_port }}"
####################
# Magnum
####################
enable_cluster_user_trust: False
####################
# Docker
####################

1
ansible/roles/magnum/templates/magnum.conf.j2
View File

@ -72,6 +72,7 @@ memcached_servers = {% for host in groups['memcached'] %}{{ hostvars[host]['ansi
trustee_domain_admin_password = {{ magnum_keystone_password }}
trustee_domain_admin_name = {{ magnum_trustee_domain_admin }}
trustee_domain_name = {{ magnum_trustee_domain }}
cluster_user_trust = {{ enable_cluster_user_trust }}
[oslo_concurrency]
lock_path = /var/lib/magnum/tmp