Use unix socket to connect libvirt in nova
The motivation is to remove 127.0.0.1 in connection_uri and so can allow live migration in libvirtd. Plus, realize tls on libvirt to secure. Now /run is already mounted so it should work Depends-On: https://review.opendev.org/752263 Change-Id: I911abb8b1ee1e300d02a373e083a404574cc3fea
This commit is contained in:
parent
e491b838fa
commit
20a1208b20
@ -14,7 +14,7 @@ apiVersion: v1
|
||||
appVersion: v1.0.0
|
||||
description: OpenStack-Helm Nova
|
||||
name: nova
|
||||
version: 0.1.10
|
||||
version: 0.1.11
|
||||
home: https://docs.openstack.org/nova/latest/
|
||||
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Nova/OpenStack_Project_Nova_vertical.png
|
||||
sources:
|
||||
|
@ -1725,7 +1725,7 @@ conf:
|
||||
auth_type: password
|
||||
send_service_user_token: false
|
||||
libvirt:
|
||||
connection_uri: "qemu+tcp://127.0.0.1/system"
|
||||
connection_uri: "qemu+unix:///system?socket=/run/libvirt/libvirt-sock"
|
||||
images_type: qcow2
|
||||
images_rbd_pool: vms
|
||||
images_rbd_ceph_conf: /etc/ceph/ceph.conf
|
||||
|
@ -11,3 +11,4 @@ nova:
|
||||
- 0.1.8 Change Issuer to ClusterIssuer
|
||||
- 0.1.9 Revert "Change Issuer to ClusterIssuer"
|
||||
- 0.1.10 Use HostToContainer mount propagation
|
||||
- 0.1.11 Secure libvirt connection from using 127.0.0.1 to use unix socket
|
||||
|
Loading…
Reference in New Issue
Block a user