When you execute nova-manage commands, oslo logs to the following
location (file name is dynamically created based on command name).
/var/log/nova/nova-manage.log
Because puppet-nova is executing these commands as root,
nova-manage.log is owned by root, preventing the 'nova-manage
db archive_deleted_rows' entry in nova's crontab from executing.
Permission denied: '/var/log/nova/nova-manage.log'
This log file is also an outlier, as all other log files in
/var/log/nova/ are owned by nova:nova.
Similar issues are possible for other nova logs, if for example
a nova services is initially started manually as root, so the
ownership of all nova logs is corrected before configuring nova.
Co-Authored-By: Oliver Walsh <owalsh@redhat.com>
Co-Authored-By: Diana Clarke <diana.joan.clarke@gmail.com>
Co-Authored-By: Maciej Kucia <maciej@kucia.net>
Closes-Bug: #1671681
Change-Id: I0ca0110cbf9139c79074cf603dcab9135f96e765
Vhost user sockets are shared between qemu and ovs. Currently,
we are patching ovs service file to make ovs run as qemu user.
In order to avoid it, a new group 'hugetlbfs' has been introduced,
which will be used by ovs and qemu. This patch allows the users
to configure the group setting for qemu.conf file.
Change-Id: I0fa3934b345d51de85fd9d8a5a211b8e1bc50d86
We need Puppet package deployed from bindep so we can
run puppet module build with the new zuul v3 job.
Change-Id: I9c95eb190133ab70f2be94c565578eaa82244e62
keymgr_api_class is now deprecated in favor of keymgr_backend, with
full backward compatibility for users.
keymgr_backend is set to nova.keymgr.conf_key_mgr.ConfKeyManager
by default and configure key_manager/backend instead of
key_manager/api_class.
Change-Id: I7f4136ad32d70fe8a00e9147077224f9c4779b03
Related-Bug: #1725298
Prepare the metadata configuration for the first Queens milestone.
Depends-On: Id68ee1b443a4172d0c1d6d58a04908c52a566623
Change-Id: I50379b7bd747d0aa2227d49785ff7dcce8bafd52
The options supporting this are discussed in change
39fb302fd9c8fc57d3e4bea1c60a02ad5067163f, which has since been reverted.
It may be implemented in the future, but currently has no effect.
Change-Id: I63db5b9762d5bdaf6583a4b68c6407f6fbcf33c6
Due to Python's GIL [1], we can't use multiple threads for running
OpenStack services without a performance penalty, since the execution
ends up serialized, which defeats the purpose.
Instead, we should use several processes, since this approach doesn't
have this limitation.
[1] https://wiki.python.org/moin/GlobalInterpreterLock
Change-Id: I0dedcec2a7bb9983e66878e89dc651cb08939f4f
This patch avoids keeping the logic of deploying Nova inside
beaker but abstracts it into puppet-openstack-integration which
has far more coverage and handles failures in a more centralized
way.
It also adds Neutron support to Beaker tests.
Change-Id: I7719375ee25f82fb851a6198508b5ac2406e03fc
Add missing domain parameters so Nova / Ironic can use Keystone v3.
Closes-Bug: #1722621
Change-Id: I449dc970db422b66511c6ee3387987cbae55aced
Depends-On: I385e2f34dd925bdc2fdbc1553d49dce104f566f2
This allows us to configure where the libvirt logs end up, as described
in the documentation: https://libvirt.org/logging.html
Change-Id: Ia74e138aeeb1e09e253707de70ea9d0a4344ad1a
Keystone v2.0 API was removed so we have no choice but configuring
user_domain_name and project_domain_name otherwise it fallbacks to
Keystone v2.0 and it fails. This patch sets the default value so we make
sure Keystone v3 will be used out of the box for our users.
Change-Id: I372928fca38664ac0638212386d1d7c7cb7666c8
This allows the setting of the error and access file logs, as well as
the access log format. This was done in a similar fashion as one can
configure these ones in the keystone wsgi manifest.
Change-Id: I59d02fe8731c20c64ca389000f12c78cfc1f12be
This allows the setting of the error and access file logs, as well as
the access log format. This was done in a similar fashion as one can
configure these ones in the keystone wsgi manifest.
Change-Id: I7e39baa2fefdc63d6f300cb037241846e0871eeb
Depends-On: I5e7d3588b7b3b106813d6d37b55aa812273d04d6
nova::wsgi::apache is deprecated and will be removed in a future release,
please use nova::wsgi::apache_api.
Change-Id: I591cd8032032eacee41d3877231c4e639d7bf0e4