puppet-nova/manifests/vncproxy.pp
Lars Kellogg-Stedman 28268ad9c7 move setting of novncproxy_base_url
The fixes introduced in order to resolve
https://bugs.launchpad.net/nova/+bug/1409142 (CVE-2015-0259) make
novncproxy_base_url relevant on hosts running the nova-novncproxy
service, whereas previously it was only used by nova-compute to
construct VNC console urls.

This change moves the setting of the novncproxy_base_url option out of
compute.pp and into nova::vncproxy_common, where it can be used both
by compute.pp and vncproxy.pp.

Change-Id: I7af4cf8257f2bdbc7d3cc57930fd6371571db531
2015-03-31 14:26:58 -04:00

73 lines
1.8 KiB
Puppet

# == Class: nova:vncproxy
#
# Configures nova vnc proxy
#
# === Parameters:
#
# [*enabled*]
# (optional) Whether to run the vncproxy service
# Defaults to false
#
# [*manage_service*]
# (optional) Whether to start/stop the service
# Defaults to true
#
# [*host*]
# (optional) Host on which to listen for incoming requests
# Defaults to '0.0.0.0'
#
# [*port*]
# (optional) Port on which to listen for incoming requests
# Defaults to '6080'
#
# [*ensure_package*]
# (optional) The state of the nova-novncproxy package
# Defaults to 'present'
#
# [*vncproxy_protocol*]
# (optional) The protocol to communicate with the VNC proxy server
# Defaults to 'http'
#
# [*vncproxy_path*]
# (optional) The path at the end of the uri for communication with the VNC
# proxy server
# Defaults to '/vnc_auto.html'
#
class nova::vncproxy(
$enabled = false,
$manage_service = true,
$vncproxy_protocol = 'http',
$host = '0.0.0.0',
$port = '6080',
$vncproxy_path = '/vnc_auto.html',
$ensure_package = 'present'
) {
include ::nova::params
# See http://nova.openstack.org/runnova/vncconsole.html for more details.
nova_config {
'DEFAULT/novncproxy_host': value => $host;
'DEFAULT/novncproxy_port': value => $port;
}
include ::nova::vncproxy::common
if ! defined(Package['python-numpy']) {
package { 'python-numpy':
ensure => present,
name => $::nova::params::numpy_package_name,
}
}
nova::generic_service { 'vncproxy':
enabled => $enabled,
manage_service => $manage_service,
package_name => $::nova::params::vncproxy_package_name,
service_name => $::nova::params::vncproxy_service_name,
ensure_package => $ensure_package,
require => Package['python-numpy']
}
}