Merge "Disable stack check and cancel update for undercloud" into stable/rocky

This commit is contained in:
Zuul 2019-02-12 12:24:53 +00:00 committed by Gerrit Code Review
commit 3f71c88002
2 changed files with 16 additions and 0 deletions

View File

@ -71,6 +71,12 @@ parameter_defaults:
HeatMaxResourcesPerStack: -1
HeatMaxJsonBodySize: 4194304
HeatReauthenticationAuthMethod: 'trusts'
# Disable non-lifecycle stack actions like
# snapshot, resume, cancel update and stack check.
HeatApiPolicies:
heat-deny-action:
key: 'actions:action'
value: 'rule:deny_everybody'
IronicCleaningDiskErase: 'metadata'
IronicCorsAllowedOrigin: '*'
IronicDefaultInspectInterface: 'inspector'

View File

@ -0,0 +1,10 @@
---
upgrade:
- |
Non-lifecycle stack actions like stack check and cancel
update for undercloud are now disabled. Stack check is
yet to be migrated to heat convergence architecture
and cancel update is not recommended for overcloud. Both
are disabled by adding required heat policy for undercloud.
'overcloud update abort' wrapper for stack cancel update
had been dropped since few releases.