tripleo-heat-templates/deployment/nova
Martin Schuppert 6e59a84ec0 Use bind mounts for tls certificates
Certificates get merged into the containers using kolla_config
mechanism. If a certificate changes, or e.g. UseTLSTransportForNbd
gets disabled and enabled at a later point the containers running
the qemu process miss the required certificates and live migration
fails.
This change moves to use bind mount for the certificates and in
case of UseTLSTransportForNbd ans creates the required certificates even
if UseTLSTransportForNbd is set to False. With this UseTLSTransportForNbd
can be enabled/disabled as the required bind mounts/certificates
are already present.

Related-Bug: #1900986
Related: https://bugzilla.redhat.com/show_bug.cgi?id=1888951

Depends-On: I9538b7e579d4921b14f6ef5eec0300e7e50628d4

Change-Id: I7f583d18e558b95922a66eb539cc91de74409c96
(cherry picked from commit e07e571ba2)
2020-11-08 15:51:40 +00:00
..
nova-api-container-puppet.yaml Enforce internal api for token verification 2020-10-11 15:46:08 +09:00
nova-az-config.yaml Add environments dcn.yaml and dcn-hci.yaml. 2019-10-08 18:06:21 -04:00
nova-base-puppet.yaml Disable notification from services by default 2020-09-30 09:51:08 +09:00
nova-compute-common-container-puppet.yaml Ensure nova-api is running before starting nova-compute containers 2019-10-01 11:11:44 +01:00
nova-compute-container-puppet.yaml Add NovaDisableImageDownloadToRbd parameter 2020-10-23 17:52:58 +01:00
nova-conductor-container-puppet.yaml Run online migration tasks from external_update_tasks too. 2020-10-21 20:48:13 +00:00
nova-ironic-container-puppet.yaml Replace deprecated nova::compute::ironic::max_concurrent_builds 2020-09-09 11:01:27 +09:00
nova-libvirt-container-puppet.yaml Use bind mounts for tls certificates 2020-11-08 15:51:40 +00:00
nova-libvirt-guests-container-puppet.yaml Use absolute name to include puppet classes 2020-04-11 08:13:23 +09:00
nova-metadata-container-puppet.yaml Enforce internal api for token verification 2020-10-11 15:46:08 +09:00
nova-migration-target-container-puppet.yaml Ensure name consistency for tmpfiles.d configurations 2020-10-13 11:32:52 +02:00
nova-scheduler-container-puppet.yaml Remove ffwd-upgrade leftovers from THT. 2020-07-23 15:33:25 +00:00
nova-vnc-proxy-container-puppet.yaml Use sensible defaults for novnc TLS minimum versions and ciphers 2020-08-03 13:20:08 -05:00