4745e709f6
This commit removes the use of the net-cache flushing from all $service plays which ensures that the cache is not overly flushed which could impact performance of services like neutron. The role lxc-container-destroy role was removed because its not used and if it were ever used it its use would result in the same situation covered by this issue. Additionally it was noted that on container restarts, the mac addresses of the container interfaces change. If *no* flushing is done at all, this results in long run times whilst the arp entry for the container IP times out. Hence, we add in here a configuration option that causes a gratuitous arp whenever an interface has it's mac set, and/or the link comes up. Because of the way the container veths work, we can't rely on that happening on a linkm up event. So we forcefully set the mac address in the post-up hook for the interface to force the issue of the gratuitous arp. Co-Authored-By: Evan Callicoat <diopter@gmail.com> Co-Authored-By: Darren Birkett <darren.birkett@gmail.com> Change-Id: I96800b2390ffbacb8341e5538545a3c3a4308cf3 Closes-Bug: 1497433
70 lines
2.3 KiB
YAML
70 lines
2.3 KiB
YAML
---
|
|
# Copyright 2014, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: Install rsyslog
|
|
hosts: rsyslog
|
|
max_fail_percentage: 20
|
|
user: root
|
|
pre_tasks:
|
|
- name: Use the lxc-openstack aa profile
|
|
lxc_container:
|
|
name: "{{ container_name }}"
|
|
container_config:
|
|
- "lxc.aa_profile=lxc-openstack"
|
|
delegate_to: "{{ physical_host }}"
|
|
when: not is_metal | bool
|
|
tags:
|
|
- lxc-aa-profile
|
|
- name: Ensure log stroage directory exists
|
|
file:
|
|
path: "/openstack/{{ container_name }}/log-storage"
|
|
state: "directory"
|
|
delegate_to: "{{ physical_host }}"
|
|
when: not is_metal | bool
|
|
tags:
|
|
- rsyslog-storage-dirs
|
|
- name: Rsyslog server extra lxc config
|
|
lxc_container:
|
|
name: "{{ container_name }}"
|
|
container_command: |
|
|
[[ ! -d "{{ storage_directory }}" ]] && mkdir -p "{{ storage_directory }}"
|
|
container_config:
|
|
- "lxc.mount.entry=/openstack/{{ container_name }}/log-storage {{ storage_directory.lstrip('/') }} none bind 0 0"
|
|
delegate_to: "{{ physical_host }}"
|
|
when: not is_metal | bool
|
|
tags:
|
|
- rsyslog-storage-dirs
|
|
- name: Wait for container ssh
|
|
wait_for:
|
|
port: "22"
|
|
delay: "{{ ssh_delay }}"
|
|
search_regex: "OpenSSH"
|
|
host: "{{ ansible_ssh_host }}"
|
|
delegate_to: "{{ physical_host }}"
|
|
register: ssh_wait_check
|
|
until: ssh_wait_check|success
|
|
retries: 3
|
|
tags:
|
|
- ssh-wait
|
|
|
|
roles:
|
|
- { role: "rsyslog_server", tags: [ "rsyslog-server" ] }
|
|
- role: "system_crontab_coordination"
|
|
tags:
|
|
- "system-crontab-coordination"
|
|
vars:
|
|
storage_directory: "{{ rsyslog_server_storage_directory }}"
|
|
is_metal: "{{ properties.is_metal|default(false) }}"
|