59460c9318
We still default to kolla_internal_vip_address. However, in some cases this won't work, such as when kolla_internal_vip_address is a hostname, not an IP. This way users can override it in globals. Change-Id: I393a2a41ed3bf91f325042cca2310175927bdb40
48 lines
912 B
Django/Jinja
48 lines
912 B
Django/Jinja
{% set keyfile = '/etc/chrony.keys' if kolla_base_distro in ['centos', 'oraclelinux', 'redhat'] else '/etc/chrony/chrony.keys' %}
|
|
|
|
server {{ kolla_internal_vip_address }} iburst
|
|
{# NOTE(jeffrey4l): external_ntp_servers may be None here #}
|
|
{% if external_ntp_servers %}
|
|
{% for ntp_server in external_ntp_servers %}
|
|
server {{ ntp_server }} iburst
|
|
{% endfor %}
|
|
{% endif %}
|
|
|
|
user chrony
|
|
|
|
keyfile {{ keyfile }}
|
|
|
|
commandkey 1
|
|
|
|
driftfile /var/lib/chrony/chrony.drift
|
|
|
|
log tracking measurements statistics
|
|
logdir /var/log/kolla/chrony
|
|
|
|
makestep 3 3
|
|
|
|
maxupdateskew 100.0
|
|
|
|
dumponexit
|
|
|
|
dumpdir /var/lib/chrony
|
|
|
|
{% if inventory_hostname in groups['chrony-server'] %}
|
|
allow all
|
|
# prevent chrony sync from self
|
|
deny {{ kolla_internal_vip_address }}
|
|
deny {{ api_interface_address }}
|
|
local stratum 10
|
|
{% else %}
|
|
port 0
|
|
deny all
|
|
{% endif %}
|
|
|
|
bindaddress {{ chrony_bindaddress }}
|
|
|
|
logchange 0.5
|
|
|
|
hwclockfile /etc/adjtime
|
|
|
|
rtcsync
|