openstack/openstack-ansible-os_nova
Code Issues Proposed changes

Revert "Disable shell for nova when tunneled migration not used"

Browse Source 
This reverts commit ca352be75b.

Change-Id: I19e1cc491e2441ab8d1bd39d383dd2e09a5b7077
This commit is contained in:
Andrew Bonney 2022-01-07 10:50:59 +00:00
parent 0bdf469993
commit 7a33271509
2 changed files with 1 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -63,7 +63,7 @@ nova_bin: "{{ _nova_bin }}"
## Nova user information
nova_system_user_name: nova
nova_system_group_name: nova
nova_system_shell: "{{ (nova_libvirtd_listen_tls | bool) | ternary('/bin/false', '/bin/bash') }}"
nova_system_shell: /bin/bash
nova_system_comment: nova system user
nova_system_home_folder: "/var/lib/{{ nova_system_user_name }}"
nova_system_slice_name: nova

8
releasenotes/notes/disable_nova_shell-214c72d31c4d50ec.yaml
View File

@ -1,8 +0,0 @@
---
upgrade:
- |
From now on ``nova_system_shell`` depends on the value of
nova_libvirtd_listen_tls by default. When libvirt listens on tls we
assume that tunnelled migration is not used, so nova user does not
need shell access and it will be disabled. When nova_libvirtd_listen_tls
is disabled, ``nova_system_shell`` will be set to /bin/bash