3c02c966cb
Including tasks has a performance penalty when compared with importing tasks. The nova-cell role uses include_tasks twice when generating certificates and keys for libvirt TLS. While a dynamic include makes sense here for a non-default feature, we can use one include rather than two with the same effect. Since this task runs against compute nodes the overhead is significant. See [1] for benchmarks of include_tasks and import_tasks. [1] https://github.com/stackhpc/ansible-scaling/blob/master/doc/include-and-import.md Partially-Implements: blueprint performance-improvements Change-Id: Ic687d2f7d4625aede386e576ebb174da72142756
47 lines
1.4 KiB
YAML
47 lines
1.4 KiB
YAML
---
|
|
- name: Copying over libvirt TLS keys (nova-libvirt)
|
|
become: true
|
|
vars:
|
|
service: "{{ nova_cell_services['nova-libvirt'] }}"
|
|
service_name: nova-libvirt
|
|
paths:
|
|
- "{{ node_custom_config }}/nova/nova-libvirt/{{ inventory_hostname }}/{{ item }}"
|
|
- "{{ node_custom_config }}/nova/nova-libvirt/{{ item }}"
|
|
copy:
|
|
src: "{{ lookup('first_found', paths) }}"
|
|
dest: "{{ node_config_directory }}/{{ service_name }}/{{ item }}"
|
|
mode: "0600"
|
|
when:
|
|
- inventory_hostname in groups[service.group]
|
|
- service.enabled | bool
|
|
with_items:
|
|
- cacert.pem
|
|
- servercert.pem
|
|
- serverkey.pem
|
|
- clientcert.pem
|
|
- clientkey.pem
|
|
notify:
|
|
- Restart {{ service_name }} container
|
|
|
|
- name: Copying over libvirt TLS keys (nova-compute)
|
|
become: true
|
|
vars:
|
|
service: "{{ nova_cell_services['nova-compute'] }}"
|
|
service_name: nova-compute
|
|
paths:
|
|
- "{{ node_custom_config }}/nova/nova-libvirt/{{ inventory_hostname }}/{{ item }}"
|
|
- "{{ node_custom_config }}/nova/nova-libvirt/{{ item }}"
|
|
copy:
|
|
src: "{{ lookup('first_found', paths) }}"
|
|
dest: "{{ node_config_directory }}/{{ service_name }}/{{ item }}"
|
|
mode: "0600"
|
|
when:
|
|
- inventory_hostname in groups[service.group]
|
|
- service.enabled | bool
|
|
with_items:
|
|
- cacert.pem
|
|
- clientcert.pem
|
|
- clientkey.pem
|
|
notify:
|
|
- Restart {{ service_name }} container
|