- /dev/net/tun added to cgroup_device_acl Change-Id: I9d5aa4c0e6439fa091266e72d686c8a6fd840e25
		
			
				
	
	
		
			48 lines
		
	
	
		
			1.8 KiB
		
	
	
	
		
			Puppet
		
	
	
	
	
	
			
		
		
	
	
			48 lines
		
	
	
		
			1.8 KiB
		
	
	
	
		
			Puppet
		
	
	
	
	
	
#    Copyright 2016 Mirantis, Inc.
 | 
						|
#
 | 
						|
#    Licensed under the Apache License, Version 2.0 (the "License"); you may
 | 
						|
#    not use this file except in compliance with the License. You may obtain
 | 
						|
#    a copy of the License at
 | 
						|
#
 | 
						|
#         http://www.apache.org/licenses/LICENSE-2.0
 | 
						|
#
 | 
						|
#    Unless required by applicable law or agreed to in writing, software
 | 
						|
#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
 | 
						|
#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
 | 
						|
#    License for the specific language governing permissions and limitations
 | 
						|
#    under the License.
 | 
						|
 | 
						|
class contrail::compute::nova {
 | 
						|
 | 
						|
  $cgroup_acl_string='["/dev/null", "/dev/full", "/dev/zero","/dev/random", "/dev/urandom","/dev/ptmx","/dev/kvm", "/dev/kqemu","/dev/rtc","/dev/hpet", "/dev/vfio/vfio","/dev/net/tun"]'
 | 
						|
 | 
						|
  ini_setting { 'set_cgroup_acl_string':
 | 
						|
    ensure  => present,
 | 
						|
    path    => '/etc/libvirt/qemu.conf',
 | 
						|
    setting => 'cgroup_device_acl',
 | 
						|
    value   => $cgroup_acl_string,
 | 
						|
  } ~>
 | 
						|
  service { 'libvirtd' :
 | 
						|
    ensure   => 'running',
 | 
						|
    enable   => true
 | 
						|
  }
 | 
						|
 | 
						|
  nova_config {
 | 
						|
    'DEFAULT/neutron_url': value => "http://${contrail::mos_mgmt_vip}:9696";
 | 
						|
    'DEFAULT/neutron_admin_auth_url': value=> "http://${contrail::mos_mgmt_vip}:35357/v2.0/";
 | 
						|
    'DEFAULT/network_api_class': value=> 'nova.network.neutronv2.api.API';
 | 
						|
    'DEFAULT/neutron_admin_tenant_name': value=> 'services';
 | 
						|
    'DEFAULT/neutron_admin_username': value=> 'neutron';
 | 
						|
    'DEFAULT/neutron_admin_password': value=> $contrail::service_token;
 | 
						|
    'DEFAULT/neutron_url_timeout': value=> '300';
 | 
						|
    'DEFAULT/firewall_driver': value=> 'nova.virt.firewall.NoopFirewallDriver';
 | 
						|
    'DEFAULT/security_group_api': value=> 'neutron';
 | 
						|
    'DEFAULT/heal_instance_info_cache_interval': value=> '0';
 | 
						|
  } ~>
 | 
						|
  service { 'nova-compute':
 | 
						|
    ensure => running,
 | 
						|
    enable => true,
 | 
						|
  }
 | 
						|
 | 
						|
}
 |