Cold migration and resize revoke the source host's Manila access rule
inline during confirm/revert and swallow failures. If manila-api is
unreachable the rule is left granted and never retried, so a CephFS
cephx identity or an NFS ip rule can outlive the instance that needed it.
Add a reconcile pass, run at host startup and on a periodic task. For
this host's instances and the migrations that touched it, it recomputes
the access rules each share still needs and revokes the rest. Any host
can drain an orphaned CephFS 'nova-<hex>' identity; a host drains its own
NFS ip rule only when no local instance needs it and it is not mounted.
Shares whose instance is missing or in transit are left for a later pass.
The periodic interval is [DEFAULT] stale_share_access_reconcile_interval
(default 1800s; 0 or less runs only the start-up pass).
Partially-implements: blueprint virtiofs-cold-migration
Related-Bug: #2161761
Signed-off-by: Goutham Pacha Ravi <gouthampravi@gmail.com>
Assisted-by: Claude Opus 4.8
Change-Id: I63a392a304e3a0a8e028528e3cbd4f2f1cbcf797
Goutham Pacha Ravi
6b9fd51dc3