openstack
/
openstack-ansible
Code Issues Proposed changes

Disable ceph-ansible NTP installation 

ceph-ansible installs ntp by default, which conflicts with the OSA
default of enabling ntp via ansible-hardening's chrony
configuration.

Change-Id: I5a1fba202899f4cd0f0598682af44227d2d7a02b
This commit is contained in:
Logan V 2018-03-04 15:50:31 -05:00
parent 4fbad3eff0
commit 72a244d994
2 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
inventory/group_vars/ceph_all.yml
View File

@ -27,3 +27,7 @@ ceph_conf_overrides: "{{ (ceph_conf_overrides_rgw | default({})) | combine(ceph_
# needed.
nfs_file_gw: False
nfs_obj_gw: False
# NTP in an OSA environment is handled by ansible-hardening using chrony
# ceph-ansible's default enabling of ntpd conflicts with the OSA defaults
ntp_service_enabled: False

11
releasenotes/notes/ceph-ansible-ntp-8d5078e3e1340ef4.yaml Normal file
View File

@ -0,0 +1,11 @@
---
upgrade:
- |
Users should purge the 'ntp' package from their hosts if ceph-ansible is
enabled. ceph-ansible previously was configured to install ntp by default
which conflicts with the OSA ansible-hardening role chrony service.
fixes:
- |
ceph-ansible is no longer configured to install ntp by default, which
creates a conflict with OSA's ansible-hardening role that is used to
implement ntp using 'chrony'.