Browse Source

Merge "Add config parameter 'live_migration_scheme' to live migration with tls guide" into stable/stein

changes/02/791402/1
Zuul 6 months ago
committed by Gerrit Code Review
parent
commit
ec621fdc02
  1. 11
      doc/source/admin/secure-live-migration-with-qemu-native-tls.rst

11
doc/source/admin/secure-live-migration-with-qemu-native-tls.rst

@ -120,10 +120,13 @@ Performing the migration
(1) On all relevant compute nodes, enable the
:oslo.config:option:`libvirt.live_migration_with_native_tls`
configuration attribute::
configuration attribute and set the
:oslo.config:option:`libvirt.live_migration_scheme`
configuration attribute to tls::
[libvirt]
live_migration_with_native_tls = true
live_migration_scheme = tls
.. note::
Setting both
@ -131,6 +134,12 @@ Performing the migration
:oslo.config:option:`libvirt.live_migration_tunnelled` at the
same time is invalid (and disallowed).
.. note::
Not setting
:oslo.config:option:`libvirt.live_migration_scheme` to ``tls``
will result in libvirt using the unencrypted TCP connection
without displaying any error or a warning in the logs.
And restart the ``nova-compute`` service::
$ systemctl restart openstack-nova-compute

Loading…
Cancel
Save