diff options
Diffstat (limited to 'mcp/reclass')
4 files changed, 12 insertions, 0 deletions
diff --git a/mcp/reclass/classes/cluster/mcp-common-ha/infra/kvm.yml.j2 b/mcp/reclass/classes/cluster/mcp-common-ha/infra/kvm.yml.j2 index 349d4f1c8..22d62c578 100644 --- a/mcp/reclass/classes/cluster/mcp-common-ha/infra/kvm.yml.j2 +++ b/mcp/reclass/classes/cluster/mcp-common-ha/infra/kvm.yml.j2 @@ -41,6 +41,9 @@ parameters: boot_options: - spectre_v2=off - nopti + - nospec_store_bypass_disable + - noibrs + - noibpb sysctl: net.ipv4.ip_forward: 0 libvirt: diff --git a/mcp/reclass/classes/cluster/mcp-common-ha/openstack_compute.yml b/mcp/reclass/classes/cluster/mcp-common-ha/openstack_compute.yml index 0416d26db..bed9bf05c 100644 --- a/mcp/reclass/classes/cluster/mcp-common-ha/openstack_compute.yml +++ b/mcp/reclass/classes/cluster/mcp-common-ha/openstack_compute.yml @@ -68,6 +68,9 @@ parameters: boot_options: - spectre_v2=off - nopti + - nospec_store_bypass_disable + - noibrs + - noibpb neutron: gateway: vlan_aware_vms: true diff --git a/mcp/reclass/classes/cluster/mcp-fdio-noha/openstack/compute.yml.j2 b/mcp/reclass/classes/cluster/mcp-fdio-noha/openstack/compute.yml.j2 index 9709dfad2..cefed963e 100644 --- a/mcp/reclass/classes/cluster/mcp-fdio-noha/openstack/compute.yml.j2 +++ b/mcp/reclass/classes/cluster/mcp-fdio-noha/openstack/compute.yml.j2 @@ -41,6 +41,9 @@ parameters: boot_options: - spectre_v2=off - nopti + - nospec_store_bypass_disable + - noibrs + - noibpb - intel_iommu=on - iommu=pt - nohz_full=${linux:system:kernel:isolcpu} diff --git a/mcp/reclass/classes/cluster/mcp-fdio-noha/openstack/gateway.yml b/mcp/reclass/classes/cluster/mcp-fdio-noha/openstack/gateway.yml index 3fbec1bcd..2dfe0370d 100644 --- a/mcp/reclass/classes/cluster/mcp-fdio-noha/openstack/gateway.yml +++ b/mcp/reclass/classes/cluster/mcp-fdio-noha/openstack/gateway.yml @@ -48,6 +48,9 @@ parameters: boot_options: - spectre_v2=off - nopti + - nospec_store_bypass_disable + - noibrs + - noibpb - intel_iommu=on - iommu=pt - nohz_full=${linux:system:kernel:isolcpu} |