tripleo-heat-templates/deployment/openvswitch/openvswitch-dpdk-netcontrold-container-ansible.yaml
Cédric Jeanneret 0875895553 Replace svirt_sandbox_file_t by container_file_t
While they are, at SELinux level, exactly the same (one is an alias to
the other), the "container_file_t" name is easier to understand (and
shorter to write).

A second pass in a couple of days or weeks will be needed in order to
change files that were merged after this first pass.

Change-Id: Ib4b3e65dbaeb5894403301251866b9817240a9d5
2020-02-07 13:33:20 +01:00

82 lines
2.6 KiB
YAML

heat_template_version: rocky
description: >
netcontrold configuration for ovs-dpdk
parameters:
ServiceData:
default: {}
description: Dictionary packing service data
type: json
ServiceNetMap:
default: {}
description: Mapping of service_name -> network name. Typically set
via parameter_defaults in the resource registry. This
mapping overrides those in ServiceNetMapDefaults.
type: json
DefaultPasswords:
default: {}
type: json
RoleName:
default: ''
description: Role name on which the service is applied
type: string
RoleParameters:
default: {}
description: Parameters specific to the role
type: json
EndpointMap:
default: {}
description: Mapping of service endpoint -> protocol. Typically set
via parameter_defaults in the resource registry.
type: json
ContainerOpenvswitchNetcontroldImage:
description: netcontrold container image
type: string
DockerOpenvswitchUlimit:
default: ['nofile=16384']
description: ulimit for Openvswitch Container
type: comma_delimited_list
resources:
ContainersCommon:
type: ../containers-common.yaml
outputs:
role_data:
description: Role data for the netcontrold service
value:
service_name: openvswitch_dpdk_netcontrold
kolla_config:
/var/lib/kolla/config_files/ovs_dpdk_netcontrold.json:
command: "/usr/local/bin/ncd_watch"
docker_config:
step_5:
openvswitch_dpdk_netcontrold:
image: {get_param: ContainerOpenvswitchNetcontroldImage}
net: host
pid: host
privileged: true
security_opt: 'label=disable'
restart: always
depends_on:
- openvswitch.service
ulimit: {get_param: DockerOpenvswitchUlimit}
volumes:
list_concat:
- {get_attr: [ContainersCommon, volumes]}
-
- /var/lib/kolla/config_files/ovs_dpdk_netcontrold.json:/var/lib/kolla/config_files/config.json:ro
- /lib/modules:/lib/modules:ro
- /sys/kernel/debug:/sys/kernel/debug
- /run/openvswitch:/run/openvswitch:shared,z
- /var/log/containers/netcontrold:/var/log/netcontrold:z
environment:
KOLLA_CONFIG_STRATEGY: COPY_ALWAYS
host_prep_tasks:
- name: create persistent directories - /var/log/containers/netcontrold
file:
path: "/var/log/containers/netcontrold"
state: directory
setype: "container_file_t"