[nova][tripleo][rpm-packaging][kolla][puppet][debian][osa] Nova enforces that no DB credentials are allowed for the nova-compute service

Balázs Gibizer balazs.gibizer at est.tech
Mon Nov 23 09:58:32 UTC 2020



On Thu, Nov 19, 2020 at 13:07, Balázs Gibizer 
<balazs.gibizer at est.tech> wrote:
> 
> 
> On Wed, Nov 18, 2020 at 11:24, Dan Smith <dms at danplanet.com> wrote:
>> 
>> That leads me to the first action item I think we need:
>> 
>> ACTION 1: Make the wsgi app able to use something other than 
>> nova.conf
>> 
>> All of our other services support a --config-file flag, and I don't 
>> see
>> why we wouldn't allow this if it's necessary for deployments. In the
>> pure API arrangement, it shouldn't really be necessary to change 
>> this,
>> but clearly you may need to have multiple API workers with different
>> configs, as is the case with metadata-per-cell, or even potentially 
>> some
>> admin-focused private API endpoint. If it makes it easier for 
>> deployment
>> tools to start the API workers with a specific config file, we should
>> let them do that. You can already work around that hard-coded 
>> filename
>> by setting OS_NOVA_CONFIG_DIR to something other than /etc/nova, but 
>> we
>> shouldn't require them to create directories just to have separate
>> configs.
> 
> I will look into this change and propose patch a patch.

Patch is up https://review.opendev.org/c/openstack/nova/+/763750

Cheers,
gibi





More information about the openstack-discuss mailing list