[openstack-dev] [openstack-ansible] To NTP, or not to NTP, that is the question

Fox, Kevin M Kevin.Fox at pnnl.gov
Fri Sep 18 16:11:15 UTC 2015


My $0.02
Support configuring ntp. Have a flag that can turn that piece off. Default it on..... Profit. :)

Thanks,
Kevin
________________________________________
From: Major Hayden [major at mhtx.net]
Sent: Friday, September 18, 2015 6:03 AM
To: openstack-dev at lists.openstack.org
Subject: [openstack-dev] [openstack-ansible] To NTP, or not to NTP,     that is the question

Hey there,

I start working on a bug[1] last night about adding a managed NTP configuration to openstack-ansible hosts.  My patch[2] gets chrony up and running with configurable NTP servers, but I'm still struggling to meet the "Proposal" section of the bug where the author has asked for non-infra physical nodes to get their time from the infra nodes.  I can't figure out how to make it work for AIO builds when one physical host is part of all of the groups. ;)

I'd argue that time synchronization is critical for a few areas:

  1) Security/auditing when comparing logs
  2) Troubleshooting when comparing logs
  3) I've been told swift is time-sensitive
  4) MySQL/Galera don't like time drift

However, there's a strong argument that this should be done by deployers, and not via openstack-ansible.  I'm still *very* new to the project and I'd like to hear some feedback from other folks.

[1] https://bugs.launchpad.net/openstack-ansible/+bug/1413018
[2] https://review.openstack.org/#/c/225006/

--
Major Hayden

__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



More information about the OpenStack-dev mailing list