openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Disable stack check and cancel update for undercloud 

'overcloud update abort' command had been dropped since few
releases. However, users can still use heat commands to cancel
an update which is not recommended.

Undercloud now uses heat convergence architecture and stack check
has not been migrated to convergence yet.

let's add heat policy to disable both on undercloud.

Change-Id: Ib5e2dab1e94810ac02e5d64859d2e84f749f3994
This commit is contained in:
Rabi Mishra 2019-02-05 10:21:34 +05:30
parent 5137d4d02f
commit 18f4e11773
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
environments/undercloud.yaml
View File

@ -74,6 +74,12 @@ parameter_defaults:
HeatMaxResourcesPerStack: -1
HeatMaxJsonBodySize: 4194304
HeatReauthenticationAuthMethod: 'trusts'
# Disable non-lifecycle stack actions like
# snapshot, resume, cancel update and stack check.
HeatApiPolicies:
heat-deny-action:
key: 'actions:action'
value: 'rule:deny_everybody'
IronicCleaningDiskErase: 'metadata'
IronicCorsAllowedOrigin: '*'
IronicDefaultInspectInterface: 'inspector'

10
releasenotes/notes/disable-heat-non-lifecycle-actions-d551fe4551d71770.yaml Normal file
View File

@ -0,0 +1,10 @@
---
upgrade:
- |
Non-lifecycle stack actions like stack check and cancel
update for undercloud are now disabled. Stack check is
yet to be migrated to heat convergence architecture
and cancel update is not recommended for overcloud. Both
are disabled by adding required heat policy for undercloud.
'overcloud update abort' wrapper for stack cancel update
had been dropped since few releases.