96 lines
3.7 KiB
Puppet
96 lines
3.7 KiB
Puppet
# Copyright 2016 Red Hat, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
# == Class: tripleo::profile::base::cinder::volume::nfs
|
|
#
|
|
# Cinder Volume nfs profile for tripleo
|
|
#
|
|
# === Parameters
|
|
#
|
|
# [*cinder_nfs_servers*]
|
|
# List of NFS shares to mount
|
|
#
|
|
# [*backend_name*]
|
|
# (Optional) Name given to the Cinder backend stanza
|
|
# Defaults to 'tripleo_nfs'
|
|
#
|
|
# [*backend_availability_zone*]
|
|
# (Optional) Availability zone for this volume backend
|
|
# Defaults to hiera('cinder::backend::nfs::backend_availability_zone', undef)
|
|
#
|
|
# [*cinder_nfs_mount_options*]
|
|
# (Optional) List of mount options for the NFS share
|
|
# Defaults to ''
|
|
#
|
|
# [*cinder_nfs_snapshot_support*]
|
|
# (Optional) Whether to enable support for snapshots in the NFS driver.
|
|
# Defaults to $::os_service_default
|
|
#
|
|
# [*cinder_nas_secure_file_operations*]
|
|
# (Optional) Allow network-attached storage systems to operate in a secure
|
|
# environment where root level access is not permitted. If set to False,
|
|
# access is as the root user and insecure. If set to True, access is not as
|
|
# root. If set to auto, a check is done to determine if this is a new
|
|
# installation: True is used if so, otherwise False. Default is auto.
|
|
# Defaults to $::os_service_default
|
|
#
|
|
# [*cinder_nas_secure_file_permissions*]
|
|
# (Optional) Set more secure file permissions on network-attached storage
|
|
# volume files to restrict broad other/world access. If set to False,
|
|
# volumes are created with open permissions. If set to True, volumes are
|
|
# created with permissions for the cinder user and group (660). If set to
|
|
# auto, a check is done to determine if this is a new installation: True is
|
|
# used if so, otherwise False. Default is auto.
|
|
# Defaults to $::os_service_default
|
|
#
|
|
# [*step*]
|
|
# (Optional) The current step in deployment. See tripleo-heat-templates
|
|
# for more details.
|
|
# Defaults to hiera('step')
|
|
#
|
|
class tripleo::profile::base::cinder::volume::nfs (
|
|
$cinder_nfs_servers,
|
|
$backend_name = hiera('cinder::backend::nfs::volume_backend_name', 'tripleo_nfs'),
|
|
$backend_availability_zone = hiera('cinder::backend::nfs::backend_availability_zone', undef),
|
|
$cinder_nfs_mount_options = '',
|
|
$cinder_nfs_snapshot_support = $::os_service_default,
|
|
$cinder_nas_secure_file_operations = $::os_service_default,
|
|
$cinder_nas_secure_file_permissions = $::os_service_default,
|
|
$step = Integer(hiera('step')),
|
|
) {
|
|
include tripleo::profile::base::cinder::volume
|
|
|
|
if $step >= 4 {
|
|
package {'nfs-utils': }
|
|
-> cinder::backend::nfs { $backend_name :
|
|
backend_availability_zone => $backend_availability_zone,
|
|
nfs_servers => $cinder_nfs_servers,
|
|
nfs_mount_options => $cinder_nfs_mount_options,
|
|
nfs_shares_config => '/etc/cinder/shares-nfs.conf',
|
|
nfs_snapshot_support => $cinder_nfs_snapshot_support,
|
|
nas_secure_file_operations => $cinder_nas_secure_file_operations,
|
|
nas_secure_file_permissions => $cinder_nas_secure_file_permissions,
|
|
}
|
|
|
|
if str2bool($::selinux) {
|
|
selboolean { 'virt_use_nfs':
|
|
value => on,
|
|
persistent => true,
|
|
require => Package['nfs-utils'],
|
|
}
|
|
}
|
|
}
|
|
|
|
}
|