[nova][tripleo][rpm-packaging][kolla][puppet][debian][osa] Nova enforces that no DB credentials are allowed for the nova-compute service

Thomas Goirand zigo at debian.org
Wed Nov 18 14:20:52 UTC 2020


On 11/18/20 9:55 AM, Dmitriy Rabotyagov wrote:
> Can you kindly share the way of doing that? As passing --config-file
> with pyargv for uwsgi seems not the right way to do that.
>  
> 15.11.2020, 15:30, "Thomas Goirand" <zigo at debian.org>:
> 
>     I'll manage to get --config-file as parameters when starting daemons
>     (it's possible to do so, even when using uwsgi).
> 
>  
>  
> -- 
> Kind Regards,
> Dmitriy Rabotyagov
>  

As much as I know, the --pyargv *does* the right thing.

Currently, in Debian, we have neutron-api started like this:

/usr/bin/uwsgi_python37 \
	--https-socket
:9696,/etc/neutron/ssl/public/HOSTNAME.crt,/etc/neutron/ssl/private/HOSTNAME.pem
\
	--ini /etc/neutron/neutron-api-uwsgi.ini \
	--pyargv "--config-dir=/etc/neutron/server.conf.d \
	--config-file=/etc/neutron/neutron.conf \
	--config-file=/etc/neutron/plugins/ml2/ml2_conf.ini"

Though it's a little bit tricky. Notice the quotes so that there's only
a single argument after --pyargv...

All of this has been set in openstack-pkg-tools for a few years already,
though it's only in use in Debian, because Ubuntu people don't use uwsgi
(which isn't part of Ubuntu main, it's only in Universe).

Cheers,

Thomas Goirand (zigo)



More information about the openstack-discuss mailing list