openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Disable stack check and cancel update for undercloud 

'overcloud update abort' command had been dropped since few
releases. However, users can still use heat commands to cancel
an update which is not recommended.

Undercloud now uses heat convergence architecture and stack check
has not been migrated to convergence yet.

let's add heat policy to disable both on undercloud.

Change-Id: Ib5e2dab1e94810ac02e5d64859d2e84f749f3994
(cherry picked from commit 18f4e11773)
This commit is contained in:
Rabi Mishra 2019-02-05 10:21:34 +05:30
parent 5a4431d0a0
commit 0b42fb17ff
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
environments/undercloud.yaml
View File

@ -71,6 +71,12 @@ parameter_defaults:
HeatMaxResourcesPerStack: -1
HeatMaxJsonBodySize: 4194304
HeatReauthenticationAuthMethod: 'trusts'
# Disable non-lifecycle stack actions like
# snapshot, resume, cancel update and stack check.
HeatApiPolicies:
heat-deny-action:
key: 'actions:action'
value: 'rule:deny_everybody'
IronicCleaningDiskErase: 'metadata'
IronicCorsAllowedOrigin: '*'
IronicDefaultInspectInterface: 'inspector'

10
releasenotes/notes/disable-heat-non-lifecycle-actions-d551fe4551d71770.yaml Normal file
View File

@ -0,0 +1,10 @@
---
upgrade:
- |
Non-lifecycle stack actions like stack check and cancel
update for undercloud are now disabled. Stack check is
yet to be migrated to heat convergence architecture
and cancel update is not recommended for overcloud. Both
are disabled by adding required heat policy for undercloud.
'overcloud update abort' wrapper for stack cancel update
had been dropped since few releases.