openstack/nova
Code Issues Proposed changes

docs: Remove references to nova-consoleauth

Browse Source 
We're going to remove all the code, but first, remove the docs.

Part of blueprint remove-consoleauth

Change-Id: Ie96e18ea7762b93b4116b35d7ebcfcbe53c55527
Signed-off-by: Stephen Finucane <sfinucan@redhat.com>
This commit is contained in:
Stephen Finucane
2019-04-16 10:49:01 +01:00
parent c27809d50d
commit 009fd0f35b
18 changed files with 50 additions and 209 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
api-guide/source/general_info.rst
View File

@@ -176,10 +176,6 @@ on compute hosts rather than servers.
This service handles networking of virtual servers. It is no longer under This service handles networking of virtual servers. It is no longer under
active development, and is being replaced by Neutron. active development, and is being replaced by Neutron.
- **nova-consoleauth (deprecated)**
This service provides authorization for compute instances consoles.
- **Services Actions** - **Services Actions**
.. note:: .. note::

1
doc/source/_extra/.htaccess
View File

@@ -39,7 +39,6 @@ redirectmatch 301 ^/nova/([^/]+)/man/nova-cells.html$ /nova/$1/cli/nova-cells.ht
redirectmatch 301 ^/nova/([^/]+)/man/nova-compute.html$ /nova/$1/cli/nova-compute.html redirectmatch 301 ^/nova/([^/]+)/man/nova-compute.html$ /nova/$1/cli/nova-compute.html
redirectmatch 301 ^/nova/([^/]+)/man/nova-conductor.html$ /nova/$1/cli/nova-conductor.html redirectmatch 301 ^/nova/([^/]+)/man/nova-conductor.html$ /nova/$1/cli/nova-conductor.html
redirectmatch 301 ^/nova/([^/]+)/man/nova-console.html$ /nova/$1/cli/nova-console.html redirectmatch 301 ^/nova/([^/]+)/man/nova-console.html$ /nova/$1/cli/nova-console.html
redirectmatch 301 ^/nova/([^/]+)/man/nova-consoleauth.html$ /nova/$1/cli/nova-consoleauth.html
redirectmatch 301 ^/nova/([^/]+)/man/nova-dhcpbridge.html$ /nova/$1/cli/nova-dhcpbridge.html redirectmatch 301 ^/nova/([^/]+)/man/nova-dhcpbridge.html$ /nova/$1/cli/nova-dhcpbridge.html
redirectmatch 301 ^/nova/([^/]+)/man/nova-manage.html$ /nova/$1/cli/nova-manage.html redirectmatch 301 ^/nova/([^/]+)/man/nova-manage.html$ /nova/$1/cli/nova-manage.html
redirectmatch 301 ^/nova/([^/]+)/man/nova-network.html$ /nova/$1/cli/nova-network.html redirectmatch 301 ^/nova/([^/]+)/man/nova-network.html$ /nova/$1/cli/nova-network.html

1
doc/source/admin/common/nova-show-usage-statistics-for-hosts-instances.rst
View File

@@ -30,7 +30,6 @@ The following examples show the host usage statistics for a host called
| devstack | compute | nova | | devstack | compute | nova |
| devstack | network | internal | | devstack | network | internal |
| devstack | scheduler | internal | | devstack | scheduler | internal |
| devstack | consoleauth | internal |
+-----------+-------------+----------+ +-----------+-------------+----------+
* Get a summary of resource usage of all of the instances running on the host: * Get a summary of resource usage of all of the instances running on the host:

3
doc/source/admin/configuration/logs.rst
View File

@@ -22,9 +22,6 @@ The corresponding log file of each Compute service is stored in the
* - ``nova-conductor.log`` * - ``nova-conductor.log``
- ``openstack-nova-conductor`` - ``openstack-nova-conductor``
- ``nova-conductor`` - ``nova-conductor``
* - ``nova-consoleauth.log``
- ``openstack-nova-consoleauth``
- ``nova-consoleauth``
* - ``nova-network.log`` [#a]_ * - ``nova-network.log`` [#a]_
- ``openstack-nova-network`` - ``openstack-nova-network``
- ``nova-network`` - ``nova-network``

5
doc/source/admin/live-migration-usage.rst
View File

@@ -67,9 +67,8 @@ Manual selection of the destination host
+----+------------------+-------+----------+---------+-------+----------------------------+ +----+------------------+-------+----------+---------+-------+----------------------------+
| 3 | nova-conductor | HostA | internal | enabled | up | 2017-02-18T09:42:29.000000 | | 3 | nova-conductor | HostA | internal | enabled | up | 2017-02-18T09:42:29.000000 |
| 4 | nova-scheduler | HostA | internal | enabled | up | 2017-02-18T09:42:26.000000 | | 4 | nova-scheduler | HostA | internal | enabled | up | 2017-02-18T09:42:26.000000 |
| 5 | nova-consoleauth | HostA | internal | enabled | up | 2017-02-18T09:42:29.000000 | | 5 | nova-compute | HostB | nova | enabled | up | 2017-02-18T09:42:29.000000 |
| 6 | nova-compute | HostB | nova | enabled | up | 2017-02-18T09:42:29.000000 | | 6 | nova-compute | HostC | nova | enabled | up | 2017-02-18T09:42:29.000000 |
| 7 | nova-compute | HostC | nova | enabled | up | 2017-02-18T09:42:29.000000 |
+----+------------------+-------+----------+---------+-------+----------------------------+ +----+------------------+-------+----------+---------+-------+----------------------------+
#. Check that ``HostC`` has enough resources for migration: #. Check that ``HostC`` has enough resources for migration:

37
doc/source/admin/remote-console-access.rst
View File

@@ -58,12 +58,6 @@ following components:
- One or more :program:`nova-compute` services. Hosts the instances for which - One or more :program:`nova-compute` services. Hosts the instances for which
consoles are provided. consoles are provided.
.. note::
Previously, the :program:`nova-consoleauth` application was necessary for
token authorization. This is no longer the case since nova 18.0.0
(Rocky). See :ref:`below <about-nova-consoleauth>` for more information.
.. todo:: .. todo::
The below diagram references :program:`nova-consoleauth` and needs to be The below diagram references :program:`nova-consoleauth` and needs to be
@@ -595,23 +589,10 @@ address of the controller or the VIP.
About ``nova-consoleauth`` About ``nova-consoleauth``
-------------------------- --------------------------
The deprecated :doc:`/cli/nova-consoleauth` service provides a shared service The now-removed :program:`nova-consoleauth` service was previously used to
to manage token authentication that the client proxies outlined below can provide a shared service to manage token authentication that the client proxies
leverage. This service must be running for either proxy to work. Many proxies outlined below could leverage. Token authentication was moved to the database in
of either type can be run against a single :program:`nova-consoleauth` service 18.0.0 (Rocky) and the service was removed in 20.0.0 (Train).
in a cluster configuration.
.. important::
Do not confuse the :program:`nova-consoleauth` shared service with
:doc:`/cli/nova-console` service, which is a XenAPI-specific service that
most recent VNC proxy architectures do not use.
.. deprecated:: 18.0.0
``nova-consoleauth`` is deprecated since 18.0.0 (Rocky) and will be removed
in an upcoming release. See
:oslo.config:option:`workarounds.enable_consoleauth` for details.
Frequently Asked Questions Frequently Asked Questions
@@ -627,15 +608,7 @@ Frequently Asked Questions
- **Q: I want VNC support in the OpenStack dashboard. What services do I - **Q: I want VNC support in the OpenStack dashboard. What services do I
need?** need?**
A: You need ``nova-novncproxy``, ``nova-consoleauth``, and correctly A: You need ``nova-novncproxy`` and correctly configured compute hosts.
configured compute hosts.
- **Q: When I use ``nova get-vnc-console`` or click on the VNC tab of the
OpenStack dashboard, it hangs. Why?**
A: Make sure you are running ``nova-consoleauth`` (in addition to
``nova-novncproxy``). The proxies rely on ``nova-consoleauth`` to validate
tokens, and waits for a reply from them until a timeout is reached.
- **Q: My VNC proxy worked fine during my all-in-one test, but now it doesn't - **Q: My VNC proxy worked fine during my all-in-one test, but now it doesn't
work on multi host. Why?** work on multi host. Why?**

46
doc/source/admin/services.rst
View File

@@ -10,22 +10,13 @@ enable the ``nova-compute`` service.
.. code-block:: console .. code-block:: console
$ openstack compute service list $ openstack compute service list
+----+--------------+------------+----------+---------+-------+--------------+ +----+----------------+------------+----------+---------+-------+----------------------------+
| ID | Binary | Host | Zone | Status | State | Updated At | | ID | Binary | Host | Zone | Status | State | Updated At |
+----+--------------+------------+----------+---------+-------+--------------+ +----+----------------+------------+----------+---------+-------+----------------------------+
| 4 | nova- | controller | internal | enabled | up | 2016-12-20T0 | | 4 | nova-scheduler | controller | internal | enabled | up | 2016-12-20T00:44:48.000000 |
| | consoleauth | | | | | 0:44:48.0000 | | 5 | nova-conductor | controller | internal | enabled | up | 2016-12-20T00:44:54.000000 |
| | | | | | | 00 | | 8 | nova-compute | compute | nova | enabled | up | 2016-10-21T02:35:03.000000 |
| 5 | nova- | controller | internal | enabled | up | 2016-12-20T0 | +----+----------------+------------+----------+---------+-------+----------------------------+
| | scheduler | | | | | 0:44:48.0000 |
| | | | | | | 00 |
| 6 | nova- | controller | internal | enabled | up | 2016-12-20T0 |
| | conductor | | | | | 0:44:54.0000 |
| | | | | | | 00 |
| 9 | nova-compute | compute | nova | enabled | up | 2016-10-21T0 |
| | | | | | | 2:35:03.0000 |
| | | | | | | 00 |
+----+--------------+------------+----------+---------+-------+--------------+
#. Disable a nova service: #. Disable a nova service:
@@ -43,22 +34,13 @@ enable the ``nova-compute`` service.
.. code-block:: console .. code-block:: console
$ openstack compute service list $ openstack compute service list
+----+--------------+------------+----------+---------+-------+--------------+ +----+----------------+------------+----------+---------+-------+----------------------------+
| ID | Binary | Host | Zone | Status | State | Updated At | | ID | Binary | Host | Zone | Status | State | Updated At |
+----+--------------+------------+----------+---------+-------+--------------+ +----+----------------+------------+----------+---------+-------+----------------------------+
| 4 | nova- | controller | internal | enabled | up | 2016-12-20T0 | | 5 | nova-scheduler | controller | internal | enabled | up | 2016-12-20T00:44:48.000000 |
| | consoleauth | | | | | 0:44:48.0000 | | 6 | nova-conductor | controller | internal | enabled | up | 2016-12-20T00:44:54.000000 |
| | | | | | | 00 | | 9 | nova-compute | compute | nova | disabled| up | 2016-10-21T02:35:03.000000 |
| 5 | nova- | controller | internal | enabled | up | 2016-12-20T0 | +----+----------------+------------+----------+---------+-------+----------------------------+
| | scheduler | | | | | 0:44:48.0000 |
| | | | | | | 00 |
| 6 | nova- | controller | internal | enabled | up | 2016-12-20T0 |
| | conductor | | | | | 0:44:54.0000 |
| | | | | | | 00 |
| 9 | nova-compute | compute | nova | disabled| up | 2016-10-21T0 |
| | | | | | | 2:35:03.0000 |
| | | | | | | 00 |
+----+--------------+------------+----------+---------+-------+--------------+
#. Enable the service: #. Enable the service:

9
doc/source/admin/system-admin.rst
View File

@@ -48,15 +48,6 @@ responsibilities of services and drivers are:
Provides database-access support for compute nodes (thereby reducing security Provides database-access support for compute nodes (thereby reducing security
risks). risks).
``nova-consoleauth``
Manages console authentication.
.. deprecated:: 18.0.0
``nova-consoleauth`` is deprecated since 18.0.0 (Rocky) and will be removed
in an upcoming release. See
:oslo.config:option:`workarounds.enable_consoleauth` for details.
``nova-objectstore`` ``nova-objectstore``
A simple file-based storage system for images that replicates most of the S3 A simple file-based storage system for images that replicates most of the S3
API. It can be replaced with OpenStack Image service and either a simple API. It can be replaced with OpenStack Image service and either a simple

1
doc/source/cli/index.rst
View File

@@ -87,6 +87,5 @@ deployments, but are documented for existing ones.
nova-dhcpbridge nova-dhcpbridge
nova-network nova-network
nova-consoleauth
nova-console nova-console
nova-xvpvncproxy nova-xvpvncproxy

54
doc/source/cli/nova-consoleauth.rst
View File

@@ -1,54 +0,0 @@
================
nova-consoleauth
================
----------------------------------
Nova Console Authentication Server
----------------------------------
:Author: openstack@lists.openstack.org
:Copyright: OpenStack Foundation
:Manual section: 1
:Manual group: cloud computing
Synopsis
========
::
nova-consoleauth [options]
Description
===========
:program:`nova-consoleauth` is a server daemon that serves the Nova Console
Auth service, which provides authentication for Nova consoles.
.. deprecated:: 18.0.0
`nova-consoleauth` is deprecated since 18.0.0 (Rocky) and will be removed in
an upcoming release. See
:oslo.config:option:`workarounds.enable_consoleauth` for details.
Options
=======
**General options**
Files
=====
* ``/etc/nova/nova.conf``
* ``/etc/nova/policy.json``
* ``/etc/nova/rootwrap.conf``
* ``/etc/nova/rootwrap.d/``
See Also
========
* :nova-doc:`OpenStack Nova <>`
Bugs
====
* Nova bugs are managed at `Launchpad <https://bugs.launchpad.net/nova>`__

2
doc/source/cli/nova-status.rst
View File

@@ -136,6 +136,8 @@ Upgrade
* Checks to ensure block-storage (cinder) API version 3.44 is * Checks to ensure block-storage (cinder) API version 3.44 is
available in order to support multi-attach volumes. available in order to support multi-attach volumes.
If ``[cinder]/auth_type`` is not configured this is a no-op check. If ``[cinder]/auth_type`` is not configured this is a no-op check.
* The "**nova-consoleauth** service" upgrade check was removed since the
service was removed in Train.
See Also See Also
======== ========

1
doc/source/conf.py
View File

@@ -86,7 +86,6 @@ _man_pages = [
('nova-api', u'Cloud controller fabric'), ('nova-api', u'Cloud controller fabric'),
('nova-compute', u'Cloud controller fabric'), ('nova-compute', u'Cloud controller fabric'),
('nova-console', u'Cloud controller fabric'), ('nova-console', u'Cloud controller fabric'),
('nova-consoleauth', u'Cloud controller fabric'),
('nova-dhcpbridge', u'Cloud controller fabric'), ('nova-dhcpbridge', u'Cloud controller fabric'),
('nova-manage', u'Cloud controller fabric'), ('nova-manage', u'Cloud controller fabric'),
('nova-network', u'Cloud controller fabric'), ('nova-network', u'Cloud controller fabric'),

34
doc/source/install/controller-install-obs.rst
View File

@@ -174,18 +174,14 @@ Install and configure components
#. Install the packages: #. Install the packages:
.. note:: ``nova-consoleauth`` is deprecated since 18.0.0 (Rocky) and will
be removed in an upcoming release. Console proxies should be
deployed per cell. If performing a fresh install (not an upgrade),
then you likely do not need to install the ``nova-consoleauth``
service. See
:oslo.config:option:`workarounds.enable_consoleauth` for details.
.. code-block:: console .. code-block:: console
# zypper install openstack-nova-api openstack-nova-scheduler \ # zypper install \
openstack-nova-conductor openstack-nova-consoleauth \ openstack-nova-api \
openstack-nova-novncproxy iptables openstack-nova-scheduler \
openstack-nova-conductor \
openstack-nova-novncproxy \
iptables
#. Edit the ``/etc/nova/nova.conf`` file and complete the following actions: #. Edit the ``/etc/nova/nova.conf`` file and complete the following actions:
@@ -390,11 +386,13 @@ Finalize installation
.. code-block:: console .. code-block:: console
# systemctl enable openstack-nova-api.service \ # systemctl enable \
openstack-nova-consoleauth.service openstack-nova-scheduler.service \ openstack-nova-api.service \
openstack-nova-conductor.service openstack-nova-novncproxy.service openstack-nova-scheduler.service \
# systemctl start openstack-nova-api.service \ openstack-nova-conductor.service \
openstack-nova-consoleauth openstack-nova-scheduler.service \ openstack-nova-novncproxy.service
openstack-nova-conductor.service openstack-nova-novncproxy.service # systemctl start \
openstack-nova-api.service \
Note again that the ``nova-consoleauth`` service may not be necessary here. openstack-nova-scheduler.service \
openstack-nova-conductor.service \
openstack-nova-novncproxy.service

23
doc/source/install/controller-install-rdo.rst
View File

@@ -370,18 +370,15 @@ Finalize installation
* Start the Compute services and configure them to start when the system boots: * Start the Compute services and configure them to start when the system boots:
.. note:: ``nova-consoleauth`` is deprecated since 18.0.0 (Rocky) and will
be removed in an upcoming release. Console proxies should be
deployed per cell. If performing a fresh install (not an upgrade),
then you likely do not need to install the ``nova-consoleauth``
service. See
:oslo.config:option:`workarounds.enable_consoleauth` for details.
.. code-block:: console .. code-block:: console
# systemctl enable openstack-nova-api.service \ # systemctl enable \
openstack-nova-consoleauth openstack-nova-scheduler.service \ openstack-nova-api.service \
openstack-nova-conductor.service openstack-nova-novncproxy.service openstack-nova-scheduler.service \
# systemctl start openstack-nova-api.service \ openstack-nova-conductor.service \
openstack-nova-consoleauth openstack-nova-scheduler.service \ openstack-nova-novncproxy.service
openstack-nova-conductor.service openstack-nova-novncproxy.service # systemctl start \
openstack-nova-api.service \
openstack-nova-scheduler.service \
openstack-nova-conductor.service \
openstack-nova-novncproxy.service

13
doc/source/install/controller-install-ubuntu.rst
View File

@@ -166,17 +166,9 @@ Install and configure components
#. Install the packages: #. Install the packages:
.. note:: ``nova-consoleauth`` is deprecated since 18.0.0 (Rocky) and will
be removed in an upcoming release. Console proxies should be
deployed per cell. If performing a fresh install (not an upgrade),
then you likely do not need to install the ``nova-consoleauth``
service. See
:oslo.config:option:`workarounds.enable_consoleauth` for details.
.. code-block:: console .. code-block:: console
# apt install nova-api nova-conductor nova-consoleauth \ # apt install nova-api nova-conductor nova-novncproxy nova-scheduler
nova-novncproxy nova-scheduler
#. Edit the ``/etc/nova/nova.conf`` file and complete the following actions: #. Edit the ``/etc/nova/nova.conf`` file and complete the following actions:
@@ -375,9 +367,6 @@ Finalize installation
.. code-block:: console .. code-block:: console
# service nova-api restart # service nova-api restart
# service nova-consoleauth restart
# service nova-scheduler restart # service nova-scheduler restart
# service nova-conductor restart # service nova-conductor restart
# service nova-novncproxy restart # service nova-novncproxy restart
Note again that the ``nova-consoleauth`` service may not be necessary here.

13
doc/source/install/get-started-compute.rst
View File

@@ -55,19 +55,6 @@ OpenStack Compute consists of the following areas and their components:
For more information, see the ``conductor`` section in the For more information, see the ``conductor`` section in the
:doc:`/configuration/config`. :doc:`/configuration/config`.
``nova-consoleauth`` daemon
Authorizes tokens for users that console proxies provide. See
``nova-novncproxy`` and ``nova-xvpvncproxy``. This service must be running
for console proxies to work. You can run proxies of either type against a
single nova-consoleauth service in a cluster configuration. For information,
see :ref:`about-nova-consoleauth`.
.. deprecated:: 18.0.0
``nova-consoleauth`` is deprecated since 18.0.0 (Rocky) and will be removed
in an upcoming release. See
:oslo.config:option:`workarounds.enable_consoleauth` for details.
``nova-novncproxy`` daemon ``nova-novncproxy`` daemon
Provides a proxy for accessing running instances through a VNC connection. Provides a proxy for accessing running instances through a VNC connection.
Supports browser-based novnc clients. Supports browser-based novnc clients.

11
doc/source/user/cellsv2-layout.rst
View File

@@ -319,17 +319,6 @@ case (e.g. must be run via the nova-api-metadata script).
.. _Neutron metadata-agent: https://docs.openstack.org/neutron/latest/configuration/metadata-agent.html?#DEFAULT.nova_metadata_host .. _Neutron metadata-agent: https://docs.openstack.org/neutron/latest/configuration/metadata-agent.html?#DEFAULT.nova_metadata_host
Consoleauth service and console proxies
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
`As of Rocky`__, the ``nova-consoleauth`` service has been deprecated and cell
databases are used for storing token authorizations. All new consoles will be
supported by the database backend and existing consoles will be reset. Console
proxies must be run per cell because the new console token authorizations are
stored in cell databases.
.. __: https://specs.openstack.org/openstack/nova-specs/specs/rocky/approved/convert-consoles-to-objects.html
Operations Requiring upcalls Operations Requiring upcalls
~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1
doc/test/redirect-tests.txt
View File

@@ -32,7 +32,6 @@
/nova/latest/man/nova-compute.html 301 /nova/latest/cli/nova-compute.html /nova/latest/man/nova-compute.html 301 /nova/latest/cli/nova-compute.html
/nova/latest/man/nova-conductor.html 301 /nova/latest/cli/nova-conductor.html /nova/latest/man/nova-conductor.html 301 /nova/latest/cli/nova-conductor.html
/nova/latest/man/nova-console.html 301 /nova/latest/cli/nova-console.html /nova/latest/man/nova-console.html 301 /nova/latest/cli/nova-console.html
/nova/latest/man/nova-consoleauth.html 301 /nova/latest/cli/nova-consoleauth.html
/nova/latest/man/nova-dhcpbridge.html 301 /nova/latest/cli/nova-dhcpbridge.html /nova/latest/man/nova-dhcpbridge.html 301 /nova/latest/cli/nova-dhcpbridge.html
/nova/latest/man/nova-manage.html 301 /nova/latest/cli/nova-manage.html /nova/latest/man/nova-manage.html 301 /nova/latest/cli/nova-manage.html
/nova/latest/man/nova-network.html 301 /nova/latest/cli/nova-network.html /nova/latest/man/nova-network.html 301 /nova/latest/cli/nova-network.html