Browse Source

Update paste, policy and rootwrap configurations 2017-12-19

The locations of the previously included templates have been
moved to the standard location used in all other roles. This
helps to allow the sources-branch-updater script be able to
automatically place the updated files processed from the
upstream git repositories.

As there is now a rootwrap filter file, the appropriate tasks
to create the directory and to add the file have been
implemented. A little clean-up of syntax of tasks near those
modified have been included.

Finally - to resolve the ansible-lint issue the use of
systemctl has been removed.

Change-Id: I9b64d5e99dc81a6f35d74c0366ee2bbe7d15d327
Jesse Pretorius 1 year ago
parent
commit
f02127ab83

+ 10
- 0
files/rootwrap.d/tacker.filters View File

@@ -0,0 +1,10 @@
1
+# tacker-rootwrap command filters for nodes on which tacker is
2
+# expected to control network
3
+#
4
+# This file should be owned by (and only-writeable by) the root user
5
+
6
+# format seems to be
7
+# cmd-name: filter-name, raw-command, user, args
8
+
9
+[Filters]
10
+

+ 2
- 0
handlers/main.yml View File

@@ -18,8 +18,10 @@
18 18
 - name: Restart tacker services
19 19
   service:
20 20
     name: "{{ item }}"
21
+    enabled: yes
21 22
     state: restarted
22 23
     pattern: "{{ item }}"
24
+    daemon_reload: "{{ (ansible_service_mgr == 'systemd') | ternary('yes', omit) }}"
23 25
   with_items: "{{ tacker_service_names }}"
24 26
   failed_when: false
25 27
 

+ 2
- 4
tasks/tacker_init_systemd.yml View File

@@ -38,6 +38,8 @@
38 38
     mode: "0644"
39 39
     owner: "root"
40 40
     group: "root"
41
+  notify:
42
+    - Restart tacker services
41 43
 
42 44
 - name: Place the systemd init script
43 45
   template:
@@ -47,10 +49,6 @@
47 49
     owner: "root"
48 50
     group: "root"
49 51
   register: systemd_init
50
-
51
-- name: Reload the systemd daemon
52
-  command: "systemctl daemon-reload"
53
-  when: systemd_init | changed
54 52
   notify:
55 53
     - Restart tacker services
56 54
 

+ 15
- 5
tasks/tacker_post_install.yml View File

@@ -41,22 +41,32 @@
41 41
     config_overrides: "{{ item.config_overrides }}"
42 42
     config_type: "{{ item.config_type }}"
43 43
   with_items:
44
-    - src: "etc/tacker/tacker.conf.j2"
44
+    - src: "tacker.conf.j2"
45 45
       dest: "{{ tacker_etc_dir }}/tacker.conf"
46 46
       config_overrides: "{{ tacker_tacker_conf_overrides }}"
47 47
       config_type: "ini"
48
-    - src: "etc/tacker/api-paste.ini.j2"
48
+    - src: "api-paste.ini.j2"
49 49
       dest: "{{ tacker_etc_dir }}/api-paste.ini"
50 50
       config_overrides: "{{ tacker_api_paste_ini_overrides }}"
51 51
       config_type: "ini"
52
-    - src: "etc/tacker/rootwrap.conf.j2"
53
-      dest: "{{ tacker_etc_dir}}/rootwrap.conf"
52
+    - src: "rootwrap.conf.j2"
53
+      dest: "{{ tacker_etc_dir }}/rootwrap.conf"
54 54
       config_overrides: "{{ tacker_rootwrap_overrides }}"
55 55
       config_type: "ini"
56
-    - src: "etc/tacker/policy.json.j2"
56
+    - src: "policy.json.j2"
57 57
       dest: "{{ tacker_etc_dir }}/policy.json"
58 58
       config_overrides: "{{ tacker_policy_overrides }}"
59 59
       config_type: "json"
60 60
   notify:
61 61
     - Restart tacker services
62 62
 
63
+- name: Copy rootwrap filters
64
+  copy:
65
+    src: "{{ item }}"
66
+    dest: "{{ tacker_etc_dir }}/rootwrap.d/"
67
+    owner: "root"
68
+    group: "root"
69
+  with_fileglob:
70
+    - rootwrap.d/*
71
+  notify:
72
+    - Restart tacker services

+ 14
- 7
tasks/tacker_pre_install.yml View File

@@ -35,14 +35,21 @@
35 35
   file:
36 36
     path: "{{ item.path }}"
37 37
     state: directory
38
-    owner: "{{ item.owner|default(tacker_system_user_name) }}"
39
-    group: "{{ item.group|default(tacker_system_group_name) }}"
40
-    mode: "{{ item.mode|default('0755') }}"
38
+    owner: "{{ item.owner | default(tacker_system_user_name) }}"
39
+    group: "{{ item.group | default(tacker_system_group_name) }}"
40
+    mode: "{{ item.mode | default('0755') }}"
41 41
   with_items:
42
-    - { path: "/openstack", mode: "0755", owner: "root", group: "root" }
43
-    - { path: "/etc/tacker" }
44
-    - { path: "/var/cache/tacker" }
45
-    - { path: "{{ tacker_system_user_home }}" }
42
+    - path: "/openstack"
43
+      mode: "0755"
44
+      owner: "root"
45
+      group: "root"
46
+    - path: "{{ tacker_etc_dir }}"
47
+    - path: "/var/cache/tacker"
48
+    - path: "{{ tacker_system_user_home }}"
49
+    - path: "{{ tacker_etc_dir }}/rootwrap.d"
50
+      owner: "root"
51
+      group: "root"
52
+
46 53
 
47 54
 #- name: Create tacker venv dir
48 55
   #file:

templates/etc/tacker/api-paste.ini.j2 → templates/api-paste.ini.j2 View File

@@ -6,7 +6,7 @@ use = egg:Paste#urlmap
6 6
 [composite:tackerapi_v1_0]
7 7
 use = call:tacker.auth:pipeline_factory
8 8
 noauth = request_id catch_errors extensions tackerapiapp_v1_0
9
-keystone = request_id catch_errors authtoken keystonecontext extensions tackerapiapp_v1_0
9
+keystone = request_id catch_errors alarm_receiver authtoken keystonecontext extensions tackerapiapp_v1_0
10 10
 
11 11
 [filter:request_id]
12 12
 paste.filter_factory = oslo_middleware:RequestId.factory
@@ -14,6 +14,9 @@ paste.filter_factory = oslo_middleware:RequestId.factory
14 14
 [filter:catch_errors]
15 15
 paste.filter_factory = oslo_middleware:CatchErrors.factory
16 16
 
17
+[filter:alarm_receiver]
18
+paste.filter_factory = tacker.alarm_receiver:AlarmReceiver.factory
19
+
17 20
 [filter:keystonecontext]
18 21
 paste.filter_factory = tacker.auth:TackerKeystoneContext.factory
19 22
 

+ 0
- 311
templates/etc/tacker/tacker.conf.devstack_master View File

@@ -1,311 +0,0 @@
1
-[DEFAULT]
2
-nova_region_name = RegionOne
3
-nova_api_insecure = False
4
-nova_ca_certificates_file = 
5
-nova_admin_auth_url = http://10.18.133.120/identity_v2_admin
6
-nova_admin_tenant_id = service
7
-nova_admin_password = devstack
8
-nova_admin_user_name = nova
9
-nova_url = http://127.0.0.1:8774/v2
10
-auth_strategy = keystone
11
-policy_file = /etc/tacker/policy.json
12
-debug = True
13
-logging_context_format_string = %(asctime)s.%(msecs)03d %(levelname)s %(name)s [%(request_id)s %(user_name)s %(project_name)s] %(instance)s%(message)s
14
-use_syslog = False
15
-state_path = /opt/stack/data/tacker
16
-transport_url = rabbit://stackrabbit:devstack@10.18.133.120:5672/
17
-
18
-#
19
-# From tacker.common.config
20
-#
21
-
22
-# The host IP to bind to (string value)
23
-#bind_host = 0.0.0.0
24
-
25
-# The port to bind to (integer value)
26
-#bind_port = 9890
27
-
28
-# The API paste config file to use (string value)
29
-#api_paste_config = api-paste.ini
30
-
31
-# The path for API extensions (string value)
32
-#api_extensions_path =
33
-
34
-# The service plugins Tacker will use (list value)
35
-#service_plugins = nfvo,vnfm,commonservices
36
-
37
-# The policy file to use (string value)
38
-#policy_file = policy.json
39
-
40
-# The type of authentication to use (string value)
41
-#auth_strategy = keystone
42
-
43
-# Allow the usage of the bulk API (boolean value)
44
-#allow_bulk = true
45
-
46
-# Allow the usage of the pagination (boolean value)
47
-#allow_pagination = false
48
-
49
-# Allow the usage of the sorting (boolean value)
50
-#allow_sorting = false
51
-
52
-# The maximum number of items returned in a single response, value was
53
-# 'infinite' or negative integer means no limit (string value)
54
-#pagination_max_limit = -1
55
-
56
-# The hostname Tacker is running on (string value)
57
-#host = stellarstack-1473375405-000
58
-
59
-# URL for connection to nova (string value)
60
-#nova_url = http://127.0.0.1:8774/v2
61
-
62
-# Username for connecting to nova in admin context (string value)
63
-#nova_admin_username = <None>
64
-
65
-# Password for connection to nova in admin context (string value)
66
-#nova_admin_password = <None>
67
-
68
-# The uuid of the admin nova tenant (string value)
69
-#nova_admin_tenant_id = <None>
70
-
71
-# Authorization URL for connecting to nova in admin context (string value)
72
-#nova_admin_auth_url = http://localhost:5000/v2.0
73
-
74
-# CA file for novaclient to verify server certificates (string value)
75
-#nova_ca_certificates_file = <None>
76
-
77
-# If True, ignore any SSL validation issues (boolean value)
78
-#nova_api_insecure = false
79
-
80
-# Name of nova region to use. Useful if keystone manages more than one region.
81
-# (string value)
82
-#nova_region_name = <None>
83
-
84
-# Where to store Tacker state files. This directory must be writable by the
85
-# agent. (string value)
86
-#state_path = /var/lib/tacker
87
-
88
-#
89
-# From tacker.service
90
-#
91
-
92
-# Seconds between running periodic tasks (integer value)
93
-#periodic_interval = 40
94
-
95
-# Number of separate worker processes for service (integer value)
96
-#api_workers = 0
97
-
98
-# Range of seconds to randomly delay when starting the periodic task scheduler
99
-# to reduce stampeding. (Disable by setting to 0) (integer value)
100
-#periodic_fuzzy_delay = 5
101
-
102
-#
103
-# From tacker.wsgi
104
-#
105
-
106
-# Number of backlog requests to configure the socket with (integer value)
107
-#backlog = 4096
108
-
109
-# Sets the value of TCP_KEEPIDLE in seconds for each server socket. Not
110
-# supported on OS X. (integer value)
111
-#tcp_keepidle = 600
112
-
113
-# Number of seconds to keep retrying to listen (integer value)
114
-#retry_until_window = 30
115
-
116
-# Max header line to accommodate large tokens (integer value)
117
-#max_header_line = 16384
118
-
119
-# Enable SSL on the API server (boolean value)
120
-#use_ssl = false
121
-
122
-# CA certificate file to use to verify connecting clients (string value)
123
-#ssl_ca_file = <None>
124
-
125
-# Certificate file to use when starting the server securely (string value)
126
-#ssl_cert_file = <None>
127
-
128
-# Private key file to use when starting the server securely (string value)
129
-#ssl_key_file = <None>
130
-
131
-
132
-[monitor]
133
-
134
-#
135
-# From tacker.vnfm.monitor
136
-#
137
-
138
-# check interval for monitor (integer value)
139
-#check_intvl = 10
140
-
141
-
142
-[monitor_http_ping]
143
-
144
-#
145
-# From tacker.vnfm.monitor_drivers.http_ping.http_ping
146
-#
147
-
148
-# number of times to retry (integer value)
149
-#retry = 5
150
-
151
-# number of seconds to wait for a response (integer value)
152
-#timeout = 1
153
-
154
-# HTTP port number to send request (integer value)
155
-#port = 80
156
-
157
-
158
-[monitor_ping]
159
-
160
-#
161
-# From tacker.vnfm.monitor_drivers.ping.ping
162
-#
163
-
164
-# number of ICMP packets to send (string value)
165
-#count = 1
166
-
167
-# number of seconds to wait for a response (string value)
168
-#timeout = 1
169
-
170
-# number of seconds to wait between packets (string value)
171
-#interval = 1
172
-
173
-
174
-[nfvo]
175
-
176
-#
177
-# From tacker.nfvo.nfvo_plugin
178
-#
179
-
180
-# VIM driver for launching VNFs (list value)
181
-#vim_drivers = openstack
182
-
183
-# Interval to check for VIM health (integer value)
184
-#monitor_interval = 30
185
-
186
-
187
-[nfvo_vim]
188
-default_vim = VIM0
189
-
190
-#
191
-# From tacker.vnfm.vim_client
192
-#
193
-
194
-# DEPRECATED: Default VIM for launching VNFs. This option is deprecated and
195
-# will be removed in Ocata release. (string value)
196
-# This option is deprecated for removal.
197
-# Its value may be silently ignored in the future.
198
-#default_vim = <None>
199
-
200
-
201
-[openwrt]
202
-
203
-#
204
-# From tacker.vnfm.mgmt_drivers.openwrt.openwrt
205
-#
206
-
207
-# user name to login openwrt (string value)
208
-#user = root
209
-
210
-# password to login openwrt (string value)
211
-#password =
212
-
213
-
214
-[tacker]
215
-
216
-#
217
-# From tacker.vnfm.monitor
218
-#
219
-
220
-# Monitor driver to communicate with Hosting VNF/logical service instance
221
-# tacker plugin will use (list value)
222
-#monitor_driver = ping,http_ping
223
-
224
-#
225
-# From tacker.vnfm.plugin
226
-#
227
-
228
-# MGMT driver to communicate with Hosting VNF/logical service instance tacker
229
-# plugin will use (list value)
230
-#mgmt_driver = noop,openwrt
231
-
232
-# Time interval to wait for VM to boot (integer value)
233
-#boot_wait = 30
234
-
235
-# Hosting vnf drivers tacker plugin will use (list value)
236
-#infra_driver = nova,heat,noop,openstack
237
-
238
-
239
-[tacker_heat]
240
-stack_retry_wait = 5
241
-stack_retries = 60
242
-heat_uri = http://10.18.133.120:8004/v1
243
-
244
-#
245
-# From tacker.vnfm.infra_drivers.heat.heat
246
-#
247
-
248
-# Number of attempts to retry for stack creation/deletion (integer value)
249
-#stack_retries = 60
250
-
251
-# Wait time (in seconds) between consecutive stack create/delete retries
252
-# (integer value)
253
-#stack_retry_wait = 5
254
-
255
-# Flavor Extra Specs (dict value)
256
-#flavor_extra_specs =
257
-
258
-
259
-[vim_keys]
260
-
261
-#
262
-# From tacker.nfvo.drivers.vim.openstack_driver
263
-#
264
-
265
-# Dir.path to store fernet keys. (string value)
266
-#openstack = /etc/tacker/vim/fernet_keys
267
-
268
-
269
-[vim_monitor]
270
-
271
-#
272
-# From tacker.nfvo.drivers.vim.openstack_driver
273
-#
274
-
275
-# number of ICMP packets to send (string value)
276
-#count = 1
277
-
278
-# number of seconds to wait for a response (string value)
279
-#timeout = 1
280
-
281
-# number of seconds to wait between packets (string value)
282
-#interval = 1
283
-
284
-[database]
285
-connection = mysql+pymysql://root:devstack@127.0.0.1/tacker?charset=utf8
286
-
287
-[keystone_authtoken]
288
-memcached_servers = 10.18.133.120:11211
289
-signing_dir = /var/cache/tacker
290
-cafile = /opt/stack/data/ca-bundle.pem
291
-auth_uri = http://10.18.133.120/identity
292
-project_domain_name = Default
293
-project_name = service
294
-user_domain_name = Default
295
-password = devstack
296
-username = tacker
297
-auth_url = http://10.18.133.120/identity_v2_admin
298
-auth_type = password
299
-
300
-[tacker_nova]
301
-region_name = RegionOne
302
-project_domain_id = default
303
-project_name = service
304
-user_domain_id = default
305
-password = devstack
306
-username = nova
307
-auth_url = http://10.18.133.120/identity_v2_admin
308
-auth_plugin = password
309
-
310
-[agent]
311
-root_helper = sudo /usr/local/bin/tacker-rootwrap /etc/tacker/rootwrap.conf

+ 0
- 318
templates/etc/tacker/tacker.conf.sample View File

@@ -1,318 +0,0 @@
1
-[DEFAULT]
2
-
3
-#
4
-# From tacker.common.config
5
-#
6
-
7
-# The host IP to bind to (string value)
8
-#bind_host = 0.0.0.0
9
-
10
-# The port to bind to (integer value)
11
-#bind_port = 9890
12
-
13
-# The API paste config file to use (string value)
14
-#api_paste_config = api-paste.ini
15
-
16
-# The path for API extensions (string value)
17
-#api_extensions_path =
18
-
19
-# The service plugins Tacker will use (list value)
20
-#service_plugins = nfvo,vnfm
21
-
22
-# The policy file to use (string value)
23
-#policy_file = policy.json
24
-
25
-# The type of authentication to use (string value)
26
-#auth_strategy = keystone
27
-
28
-# Allow the usage of the bulk API (boolean value)
29
-#allow_bulk = true
30
-
31
-# Allow the usage of the pagination (boolean value)
32
-#allow_pagination = false
33
-
34
-# Allow the usage of the sorting (boolean value)
35
-#allow_sorting = false
36
-
37
-# The maximum number of items returned in a single response, value was
38
-# 'infinite' or negative integer means no limit (string value)
39
-#pagination_max_limit = -1
40
-
41
-# The hostname Tacker is running on (string value)
42
-#host = aio1-tacker-container-c4f3e5cd
43
-
44
-# URL for connection to nova (string value)
45
-#nova_url = http://127.0.0.1:8774/v2
46
-
47
-# Username for connecting to nova in admin context (string value)
48
-#nova_admin_username = <None>
49
-
50
-# Password for connection to nova in admin context (string value)
51
-#nova_admin_password = <None>
52
-
53
-# The uuid of the admin nova tenant (string value)
54
-#nova_admin_tenant_id = <None>
55
-
56
-# Authorization URL for connecting to nova in admin context (string value)
57
-#nova_admin_auth_url = http://localhost:5000/v2.0
58
-
59
-# CA file for novaclient to verify server certificates (string value)
60
-#nova_ca_certificates_file = <None>
61
-
62
-# If True, ignore any SSL validation issues (boolean value)
63
-#nova_api_insecure = false
64
-
65
-# Name of nova region to use. Useful if keystone manages more than one region.
66
-# (string value)
67
-#nova_region_name = <None>
68
-
69
-# Where to store Tacker state files. This directory must be writable by the
70
-# agent. (string value)
71
-#state_path = /var/lib/tacker
72
-
73
-#
74
-# From tacker.service
75
-#
76
-
77
-# Seconds between running periodic tasks (integer value)
78
-#periodic_interval = 40
79
-
80
-# Number of separate worker processes for service (integer value)
81
-#api_workers = 0
82
-
83
-# Range of seconds to randomly delay when starting the periodic task scheduler
84
-# to reduce stampeding. (Disable by setting to 0) (integer value)
85
-#periodic_fuzzy_delay = 5
86
-
87
-#
88
-# From tacker.wsgi
89
-#
90
-
91
-# Number of backlog requests to configure the socket with (integer value)
92
-#backlog = 4096
93
-
94
-# Sets the value of TCP_KEEPIDLE in seconds for each server socket. Not
95
-# supported on OS X. (integer value)
96
-#tcp_keepidle = 600
97
-
98
-# Number of seconds to keep retrying to listen (integer value)
99
-#retry_until_window = 30
100
-
101
-# Max header line to accommodate large tokens (integer value)
102
-#max_header_line = 16384
103
-
104
-# Enable SSL on the API server (boolean value)
105
-#use_ssl = false
106
-
107
-# CA certificate file to use to verify connecting clients (string value)
108
-#ssl_ca_file = <None>
109
-
110
-# Certificate file to use when starting the server securely (string value)
111
-#ssl_cert_file = <None>
112
-
113
-# Private key file to use when starting the server securely (string value)
114
-#ssl_key_file = <None>
115
-
116
-
117
-[alarm_auth]
118
-
119
-#
120
-# From tacker.alarm_receiver
121
-#
122
-
123
-# User name for alarm monitoring (string value)
124
-#username = tacker
125
-
126
-# password for alarm monitoring (string value)
127
-#password = nomoresecret
128
-
129
-# project name for alarm monitoring (string value)
130
-#project_name = service
131
-
132
-# url for alarm monitoring (string value)
133
-#url = http://localhost:35357/v3
134
-
135
-
136
-[ceilometer]
137
-
138
-#
139
-# From tacker.vnfm.monitor_drivers.ceilometer.ceilometer
140
-#
141
-
142
-# Address which drivers use to trigger (string value)
143
-#host = aio1-tacker-container-c4f3e5cd
144
-
145
-# port number which drivers use to trigger (port value)
146
-# Minimum value: 0
147
-# Maximum value: 65535
148
-#port = 9890
149
-
150
-
151
-[monitor]
152
-
153
-#
154
-# From tacker.vnfm.monitor
155
-#
156
-
157
-# check interval for monitor (integer value)
158
-#check_intvl = 10
159
-
160
-
161
-[monitor_http_ping]
162
-
163
-#
164
-# From tacker.vnfm.monitor_drivers.http_ping.http_ping
165
-#
166
-
167
-# number of times to retry (integer value)
168
-#retry = 5
169
-
170
-# number of seconds to wait for a response (integer value)
171
-#timeout = 1
172
-
173
-# HTTP port number to send request (integer value)
174
-#port = 80
175
-
176
-
177
-[monitor_ping]
178
-
179
-#
180
-# From tacker.vnfm.monitor_drivers.ping.ping
181
-#
182
-
183
-# number of ICMP packets to send (string value)
184
-#count = 1
185
-
186
-# number of seconds to wait for a response (string value)
187
-#timeout = 1
188
-
189
-# number of seconds to wait between packets (string value)
190
-#interval = 1
191
-
192
-
193
-[nfvo]
194
-
195
-#
196
-# From tacker.nfvo.nfvo_plugin
197
-#
198
-
199
-# VIM driver for launching VNFs (list value)
200
-#vim_drivers = openstack
201
-
202
-# Interval to check for VIM health (integer value)
203
-#monitor_interval = 30
204
-
205
-
206
-[nfvo_vim]
207
-
208
-#
209
-# From tacker.vnfm.vim_client
210
-#
211
-
212
-# DEPRECATED: Default VIM for launching VNFs. This option is deprecated and
213
-# will be removed in Ocata release. (string value)
214
-# This option is deprecated for removal.
215
-# Its value may be silently ignored in the future.
216
-#default_vim = <None>
217
-
218
-
219
-[openstack_vim]
220
-
221
-#
222
-# From tacker.vnfm.infra_drivers.openstack.openstack
223
-#
224
-
225
-# Number of attempts to retry for stack creation/deletion (integer value)
226
-#stack_retries = 60
227
-
228
-# Wait time (in seconds) between consecutive stack create/delete retries
229
-# (integer value)
230
-#stack_retry_wait = 5
231
-
232
-# Flavor Extra Specs (dict value)
233
-#flavor_extra_specs =
234
-
235
-
236
-[openwrt]
237
-
238
-#
239
-# From tacker.vnfm.mgmt_drivers.openwrt.openwrt
240
-#
241
-
242
-# user name to login openwrt (string value)
243
-#user = root
244
-
245
-# password to login openwrt (string value)
246
-#password =
247
-
248
-
249
-[tacker]
250
-
251
-#
252
-# From tacker.vnfm.monitor
253
-#
254
-
255
-# Monitor driver to communicate with Hosting VNF/logical service instance
256
-# tacker plugin will use (list value)
257
-#monitor_driver = ping,http_ping
258
-
259
-# Alarm monitoring driver to communicate with Hosting VNF/logical service
260
-# instance tacker plugin will use (list value)
261
-#alarm_monitor_driver = ceilometer
262
-
263
-#
264
-# From tacker.vnfm.plugin
265
-#
266
-
267
-# MGMT driver to communicate with Hosting VNF/logical service instance tacker
268
-# plugin will use (list value)
269
-#mgmt_driver = noop,openwrt
270
-
271
-# Time interval to wait for VM to boot (integer value)
272
-#boot_wait = 30
273
-
274
-# Hosting vnf drivers tacker plugin will use (list value)
275
-#infra_driver = nova,heat,noop,openstack
276
-
277
-
278
-[tacker_heat]
279
-
280
-#
281
-# From tacker.vnfm.infra_drivers.heat.heat
282
-#
283
-
284
-# Number of attempts to retry for stack creation/deletion (integer value)
285
-#stack_retries = 60
286
-
287
-# Wait time (in seconds) between consecutive stack create/delete retries
288
-# (integer value)
289
-#stack_retry_wait = 5
290
-
291
-# Flavor Extra Specs (dict value)
292
-#flavor_extra_specs =
293
-
294
-
295
-[vim_keys]
296
-
297
-#
298
-# From tacker.nfvo.drivers.vim.openstack_driver
299
-#
300
-
301
-# Dir.path to store fernet keys. (string value)
302
-#openstack = /etc/tacker/vim/fernet_keys
303
-
304
-
305
-[vim_monitor]
306
-
307
-#
308
-# From tacker.nfvo.drivers.vim.openstack_driver
309
-#
310
-
311
-# number of ICMP packets to send (string value)
312
-#count = 1
313
-
314
-# number of seconds to wait for a response (string value)
315
-#timeout = 1
316
-
317
-# number of seconds to wait between packets (string value)
318
-#interval = 1

templates/etc/tacker/policy.json.j2 → templates/policy.json.j2 View File


templates/etc/tacker/rootwrap.conf.j2 → templates/rootwrap.conf.j2 View File

@@ -10,7 +10,7 @@ filters_path=/etc/tacker/rootwrap.d,/usr/share/tacker/rootwrap
10 10
 # explicitely specify a full path (separated by ',')
11 11
 # If not specified, defaults to system PATH environment variable.
12 12
 # These directories MUST all be only writeable by root !
13
-exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin
13
+exec_dirs={{ tacker_bin }},/sbin,/usr/sbin,/bin,/usr/bin
14 14
 
15 15
 # Enable logging to syslog
16 16
 # Default value is False

templates/etc/tacker/tacker.conf.j2 → templates/tacker.conf.j2 View File


Loading…
Cancel
Save