commit e07e571ba205097a23d9dc4e1fb9a6645351c248
Author: Martin Schuppert <email address hidden>
Date: Fri Oct 30 10:43:58 2020 +0100
Use bind mounts for tls certificates
Certificates get merged into the containers using kolla_config
mechanism. If a certificate changes, or e.g. UseTLSTransportForNbd
gets disabled and enabled at a later point the containers running
the qemu process miss the required certificates and live migration
fails.
This change moves to use bind mount for the certificates and in
case of UseTLSTransportForNbd ans creates the required certificates even
if UseTLSTransportForNbd is set to False. With this UseTLSTransportForNbd
can be enabled/disabled as the required bind mounts/certificates
are already present.
Reviewed: https:/ /review. opendev. org/760522 /git.openstack. org/cgit/ openstack/ tripleo- heat-templates/ commit/ ?id=e07e571ba20 5097a23d9dc4e1f b9a6645351c248
Committed: https:/
Submitter: Zuul
Branch: master
commit e07e571ba205097 a23d9dc4e1fb9a6 645351c248
Author: Martin Schuppert <email address hidden>
Date: Fri Oct 30 10:43:58 2020 +0100
Use bind mounts for tls certificates
Certificates get merged into the containers using kolla_config ForNbd ForNbd ans creates the required certificates even ForNbd is set to False. With this UseTLSTransport ForNbd
mechanism. If a certificate changes, or e.g. UseTLSTransport
gets disabled and enabled at a later point the containers running
the qemu process miss the required certificates and live migration
fails.
This change moves to use bind mount for the certificates and in
case of UseTLSTransport
if UseTLSTransport
can be enabled/disabled as the required bind mounts/certificates
are already present.
Related-Bug: #1900986 /bugzilla. redhat. com/show_ bug.cgi? id=1888951
Related: https:/
Depends-On: I9538b7e579d492 1b14f6ef5eec030 0e7e50628d4
Change-Id: I7f583d18e558b9 5922a66eb539cc9 1de74409c96