openstack/kolla-ansible
Code Issues Proposed changes

nova: disable external metadata haproxy frontend

Browse Source 
We are not using it anywhere (metadata agents are using internal network),
so let's disable it by default.

Change-Id: If06db5030b0f09e20ef506c3b3ab39c3573b5f3d
This commit is contained in:
Michal Nasiadka 2022-01-04 16:19:55 +01:00
parent 0950b464f0
commit 3dcb6ad809
2 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ansible/roles/nova/defaults/main.yml
View File

@ -34,7 +34,7 @@ nova_services:
listen_port: "{{ nova_metadata_listen_port }}" listen_port: "{{ nova_metadata_listen_port }}"
tls_backend: "{{ nova_enable_tls_backend }}" tls_backend: "{{ nova_enable_tls_backend }}"
nova_metadata_external: nova_metadata_external:
enabled: "{{ enable_nova }}" enabled: "{{ nova_enable_external_metadata }}"
mode: "http" mode: "http"
external: true external: true
port: "{{ nova_metadata_port }}" port: "{{ nova_metadata_port }}"
@ -191,6 +191,8 @@ nova_safety_upgrade: "no"
nova_services_require_policy_json: nova_services_require_policy_json:
- nova-api - nova-api
nova_enable_external_metadata: "no"
#################### ####################
# Keystone # Keystone
#################### ####################

9
releasenotes/notes/disable-nova-external-metadata-09ba131cf9258be9.yaml Normal file
View File

@ -0,0 +1,9 @@
---
features:
- |
Introduce ``nova_enable_external_metadata`` that defaults to ``no`` to
control if external facing metadata haproxy frontend should be configured.
upgrade:
- |
External Nova metadata service is now disabled by default. It can be
enabled by setting ``nova_enable_external_metadata`` to ``yes``.