
To securely support live migration between computenodes we should enable tls, with cert auth, instead of TCP with no auth support. Implements: blueprint libvirt-tls Change-Id: I22ea6233933c840b853fdcc8e03400b2bf577271
15 lines
456 B
YAML
15 lines
456 B
YAML
---
|
|
- name: Copying over libvirt TLS keys {{ file }}
|
|
become: true
|
|
copy:
|
|
src: "{{ first_found }}"
|
|
dest: "{{ node_config_directory }}/{{ service_name }}/{{ file }}"
|
|
mode: "0600"
|
|
with_first_found:
|
|
- "{{ node_custom_config }}/nova/nova-libvirt/{{ inventory_hostname }}/{{ file }}"
|
|
- "{{ node_custom_config }}/nova/nova-libvirt/{{ file }}"
|
|
loop_control:
|
|
loop_var: first_found
|
|
notify:
|
|
- Restart {{ service_name }} container
|