Check to ensure debug is disabled on undercloud services.
On each undercloud service, debug can be enabled by default. This will check each service and ensure it is disabled. Ref: https://access.redhat.com/solutions/2484161 Change-Id: If9f61cff152c949e2abeb1c59fdd841f11685dd8
This commit is contained in:
parent
236ce74c37
commit
07bad05cd4
|
@ -0,0 +1,25 @@
|
|||
---
|
||||
- hosts: undercloud
|
||||
vars:
|
||||
metadata:
|
||||
name: Undercloud Services Debug Check
|
||||
description: >
|
||||
The undercloud's openstack services should _not_ have debug enabled.
|
||||
This will check if debug is enabled on undercloud services.
|
||||
If debug is enabled, the root filesystem can fill up quickly, and
|
||||
is not a good thing.
|
||||
groups:
|
||||
- pre-deployment
|
||||
debug_check: "True"
|
||||
tasks:
|
||||
- name: Check the services for debug flag
|
||||
become: true
|
||||
ini: path={{ item }} section=DEFAULT key=debug
|
||||
register: config_result
|
||||
with_items:
|
||||
- /etc/nova/nova.conf
|
||||
- /etc/neutron/neutron.conf
|
||||
- /etc/ceilometer/ceilometer.conf
|
||||
- /etc/heat/heat.conf
|
||||
- /etc/ironic/ironic.conf
|
||||
failed_when: "'{{ debug_check }}' in config_result.value"
|
Loading…
Reference in New Issue