78a828ef42
This patch adds initial support for deploying multiple Nova cells. Splitting a nova-cell role out from the Nova role allows a more granular approach to deploying and configuring Nova services. A new enable_cells flag has been added that enables the support of multiple cells via the introduction of a super conductor in addition to cell-specific conductors. When this flag is not set (the default), nova is configured in the same manner as before - with a single conductor. The nova role now deploys the global services: * nova-api * nova-scheduler * nova-super-conductor (if enable_cells is true) The nova-cell role handles services specific to a cell: * nova-compute * nova-compute-ironic * nova-conductor * nova-libvirt * nova-novncproxy * nova-serialproxy * nova-spicehtml5proxy * nova-ssh This patch does not support using a single cell controller for managing more than one cell. Support for sharing a cell controller will be added in a future patch. This patch should be backwards compatible and is tested by existing CI jobs. A new CI job has been added that tests a multi-cell environment. ceph-mon has been removed from the play hosts list as it is not necessary - delegate_to does not require the host to be in the play. Documentation will be added in a separate patch. Partially Implements: blueprint support-nova-cells Co-Authored-By: Mark Goddard <mark@stackhpc.com> Change-Id: I810aad7d49db3f5a7fd9a2f0f746fd912fe03917
120 lines
3.5 KiB
YAML
120 lines
3.5 KiB
YAML
---
|
|
- name: Ensuring config directory exists
|
|
file:
|
|
path: "{{ node_config_directory }}/{{ item }}"
|
|
state: "directory"
|
|
mode: "0770"
|
|
become: true
|
|
with_items:
|
|
- "nova-libvirt/secrets"
|
|
when: inventory_hostname in groups[nova_cell_compute_group]
|
|
|
|
- name: Copying over ceph.conf(s)
|
|
vars:
|
|
service_name: "{{ item }}"
|
|
merge_configs:
|
|
sources:
|
|
- "{{ role_path }}/../ceph/templates/ceph.conf.j2"
|
|
- "{{ node_custom_config }}/ceph.conf"
|
|
- "{{ node_custom_config }}/ceph/{{ inventory_hostname }}/ceph.conf"
|
|
dest: "{{ node_config_directory }}/{{ item }}/ceph.conf"
|
|
mode: "0660"
|
|
become: true
|
|
with_items:
|
|
- "nova-compute"
|
|
- "nova-libvirt"
|
|
when: inventory_hostname in groups[nova_cell_compute_group]
|
|
notify:
|
|
- Restart {{ item }} container
|
|
|
|
- include_tasks: ../../ceph_pools.yml
|
|
vars:
|
|
pool_name: "{{ nova_pool_name }}"
|
|
pool_type: "{{ nova_pool_type }}"
|
|
cache_mode: "{{ nova_cache_mode }}"
|
|
pool_pg_num: "{{ nova_pool_pg_num }}"
|
|
pool_pgp_num: "{{ nova_pool_pgp_num }}"
|
|
pool_application: "rbd"
|
|
|
|
- name: Pulling cephx keyring for nova
|
|
become: true
|
|
kolla_ceph_keyring:
|
|
name: client.nova
|
|
caps: "{{ ceph_client_nova_keyring_caps }}"
|
|
register: nova_cephx_key
|
|
delegate_to: "{{ groups['ceph-mon'][0] }}"
|
|
run_once: True
|
|
|
|
- name: Pulling cinder cephx keyring for libvirt
|
|
become: true
|
|
command: docker exec ceph_mon ceph auth get-key client.cinder
|
|
register: cinder_cephx_raw_key
|
|
delegate_to: "{{ groups['ceph-mon'][0] }}"
|
|
when:
|
|
- enable_cinder | bool
|
|
- cinder_backend_ceph | bool
|
|
changed_when: False
|
|
run_once: True
|
|
|
|
- name: Pushing cephx keyring for nova
|
|
copy:
|
|
content: |
|
|
[client.nova]
|
|
key = {{ nova_cephx_key.keyring.key }}
|
|
dest: "{{ node_config_directory }}/nova-compute/ceph.client.nova.keyring"
|
|
mode: "0600"
|
|
become: true
|
|
when: inventory_hostname in groups[nova_cell_compute_group]
|
|
notify:
|
|
- Restart nova-compute container
|
|
|
|
- name: Pushing secrets xml for libvirt
|
|
template:
|
|
src: "secret.xml.j2"
|
|
dest: "{{ node_config_directory }}/nova-libvirt/secrets/{{ item.uuid }}.xml"
|
|
mode: "0600"
|
|
become: true
|
|
when:
|
|
- inventory_hostname in groups[nova_cell_compute_group]
|
|
- item.enabled | bool
|
|
with_items:
|
|
- uuid: "{{ rbd_secret_uuid }}"
|
|
name: client.nova secret
|
|
enabled: true
|
|
- uuid: "{{ cinder_rbd_secret_uuid }}"
|
|
name: client.cinder secret
|
|
enabled: "{{ enable_cinder | bool and cinder_backend_ceph | bool}}"
|
|
notify:
|
|
- Restart nova-libvirt container
|
|
|
|
- name: Pushing secrets key for libvirt
|
|
copy:
|
|
content: "{{ item.content }}"
|
|
dest: "{{ node_config_directory }}/nova-libvirt/secrets/{{ item.uuid }}.base64"
|
|
mode: "0600"
|
|
become: true
|
|
when:
|
|
- inventory_hostname in groups[nova_cell_compute_group]
|
|
- item.enabled | bool
|
|
with_items:
|
|
- uuid: "{{ rbd_secret_uuid }}"
|
|
content: "{{ nova_cephx_key.keyring.key }}"
|
|
enabled: true
|
|
- uuid: "{{ cinder_rbd_secret_uuid }}"
|
|
content: "{{ cinder_cephx_raw_key.stdout|default('') }}"
|
|
enabled: "{{ enable_cinder | bool and cinder_backend_ceph | bool}}"
|
|
notify:
|
|
- Restart nova-libvirt container
|
|
|
|
- name: Ensuring config directory has correct owner and permission
|
|
become: true
|
|
file:
|
|
path: "{{ node_config_directory }}/{{ item }}"
|
|
recurse: yes
|
|
owner: "{{ config_owner_user }}"
|
|
group: "{{ config_owner_group }}"
|
|
with_items:
|
|
- "nova-compute"
|
|
- "nova-libvirt/secrets"
|
|
when: inventory_hostname in groups[nova_cell_compute_group]
|