diff options
| author |   Emilien Macchi <emilien@redhat.com> | 2016-05-30 15:15:54 -0400 |
|---|---|---|
| committer | Emilien Macchi <emilien@redhat.com> | 2016-05-30 15:19:25 -0400 |
| commit | d1c21c6cd100120b9fd68cde6776b3caa007bd62 (patch) | |
| tree | dfabc21a7b74742fcf209a931c9c1be22f3b6782 /puppet/compute.yaml | |
| parent | 2b6c7dbefff4b1fcab36f3fbc105d63187c54ac5 (diff) | |
compute: use new param for live_migration_tunnelled
Use the new interface in puppet-nova to configure this parameter.
Depends-On: I3498076b292e9dff88b9ad9d5c65c99a2a98cd7f
Change-Id: Id9f253e942f6373f77acc9239d79f62103b39904
Diffstat (limited to 'puppet/compute.yaml')
| -rw-r--r-- | puppet/compute.yaml | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/puppet/compute.yaml b/puppet/compute.yaml index ee00a890..da3df8b7 100644 --- a/puppet/compute.yaml +++ b/puppet/compute.yaml @@ -531,6 +531,12 @@ resources: nova_api_host: {get_input: nova_api_host} nova::compute::vncproxy_host: {get_input: nova_public_ip} nova::compute::rbd::ephemeral_storage: {get_input: nova_enable_rbd_backend} + # TUNNELLED mode provides a security enhancement when using shared storage but is not + # supported when not using shared storage. + # See https://bugzilla.redhat.com/show_bug.cgi?id=1301986#c12 + # In future versions of QEMU (2.6, mostly), Dan's native encryption + # work will obsolete the need to use TUNNELLED transport mode. + nova::migration::live_migration_tunnelled: {get_input: nova_enable_rbd_backend} rbd_persistent_storage: {get_input: cinder_enable_rbd_backend} nova_password: {get_input: nova_password} nova::compute::network_device_mtu: {get_input: neutron_tenant_mtu} |