openstack/openstack-ansible
Code Issues Proposed changes

Disable ceph-ansible NTP installation

Browse Source 
ceph-ansible installs ntp by default, which conflicts with the OSA
default of enabling ntp via ansible-hardening's chrony
configuration.

Change-Id: I5a1fba202899f4cd0f0598682af44227d2d7a02b
(cherry picked from commit 72a244d994)
This commit is contained in:
Logan V 2018-03-04 15:50:31 -05:00
parent e3e00e07a2
commit 57025d8124
2 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
group_vars/ceph_all.yml
View File

@ -22,3 +22,7 @@ ceph_container_bind_mounts:
# needed.
nfs_file_gw: False
nfs_obj_gw: False
# NTP in an OSA environment is handled by ansible-hardening using chrony
# ceph-ansible's default enabling of ntpd conflicts with the OSA defaults
ntp_service_enabled: False

11
releasenotes/notes/ceph-ansible-ntp-8d5078e3e1340ef4.yaml Normal file
View File

@ -0,0 +1,11 @@
---
upgrade:
- |
Users should purge the 'ntp' package from their hosts if ceph-ansible is
enabled. ceph-ansible previously was configured to install ntp by default
which conflicts with the OSA ansible-hardening role chrony service.
fixes:
- |
ceph-ansible is no longer configured to install ntp by default, which
creates a conflict with OSA's ansible-hardening role that is used to
implement ntp using 'chrony'.