Check to ensure debug is disabled on undercloud services.

On each undercloud service, debug can be enabled by default.
This will check each service and ensure it is disabled.
Ref: https://access.redhat.com/solutions/2484161

Change-Id: If9f61cff152c949e2abeb1c59fdd841f11685dd8
This commit is contained in:
John Browning 2016-08-15 12:17:58 -04:00
parent 236ce74c37
commit 07bad05cd4
1 changed files with 25 additions and 0 deletions

View File

@ -0,0 +1,25 @@
---
- hosts: undercloud
vars:
metadata:
name: Undercloud Services Debug Check
description: >
The undercloud's openstack services should _not_ have debug enabled.
This will check if debug is enabled on undercloud services.
If debug is enabled, the root filesystem can fill up quickly, and
is not a good thing.
groups:
- pre-deployment
debug_check: "True"
tasks:
- name: Check the services for debug flag
become: true
ini: path={{ item }} section=DEFAULT key=debug
register: config_result
with_items:
- /etc/nova/nova.conf
- /etc/neutron/neutron.conf
- /etc/ceilometer/ceilometer.conf
- /etc/heat/heat.conf
- /etc/ironic/ironic.conf
failed_when: "'{{ debug_check }}' in config_result.value"