36b1715e86
To set up some first party backends such as ZFSOnLinux, CephFS via NFS gateway, Container (where the NAS server is containerized) and LVM, manila's devstack plugin creates a NAS server on the devstack host. On test machines, access to this NAS server is firewalled from networks outside of the host's internal network namespace (including from private project networks that are in different network namespaces, on the same devstack host). We currently use a legacy devstack-gate script to disable firewall on NFS ports; however, anyone that installs devstack with LVM, Container, ZFSOnLinux, CephFS-NFS drivers will need these firewall ports to be opened to be able to mount shares exported off their devstack host machines. Move these firewall commands to the devstack plugin. These commands can be invoked by setting the localrc variable MANILA_ALLOW_NAS_SERVER_PORTS_ON_HOST to True. The value of this variable is False by default, to preserve existing behavior. Change-Id: Ic9cad47662f1edf2e5c710dbe64d580bc5f01d44
43 lines
1.4 KiB
Plaintext
43 lines
1.4 KiB
Plaintext
######################################################################
|
|
# This local.conf sets up Devstack with manila enabling the CEPHFS
|
|
# driver which operates in driver_handles_share_services=False
|
|
# mode. Pay attention to the storage protocol configuration to run
|
|
# the cephfs driver with either the native CEPHFS protocol or the NFS
|
|
# protocol
|
|
#######################################################################
|
|
|
|
[[local|localrc]]
|
|
ADMIN_PASSWORD=secret
|
|
DATABASE_PASSWORD=$ADMIN_PASSWORD
|
|
RABBIT_PASSWORD=$ADMIN_PASSWORD
|
|
SERVICE_PASSWORD=$ADMIN_PASSWORD
|
|
DEST=/opt/stack
|
|
DATA_DIR=/opt/stack/data
|
|
LOGFILE=/opt/stack/devstacklog.txt
|
|
|
|
|
|
# Enabling manila services
|
|
LIBS_FROM_GIT=python-manilaclient
|
|
enable_plugin manila https://opendev.org/openstack/manila
|
|
enable_plugin manila-ui https://opendev.org/openstack/manila-ui
|
|
enable_plugin manila-tempest-plugin https://opendev.org/openstack/manila-tempest-plugin
|
|
|
|
|
|
# Enabling ceph
|
|
enable_plugin devstack-plugin-ceph https://opendev.org/openstack/devstack-plugin-ceph
|
|
ENABLE_CEPH_MANILA=True
|
|
|
|
|
|
# IMPORTANT - Comment out / remove the following line to use
|
|
# the CEPH driver with the native CEPHFS protocol
|
|
MANILA_CEPH_DRIVER=cephfsnfs
|
|
|
|
|
|
# CEPHFS backend options
|
|
MANILA_SERVICE_IMAGE_ENABLED=False
|
|
MANILA_DEFAULT_SHARE_TYPE_EXTRA_SPECS='snapshot_support=False'
|
|
MANILA_CONFIGURE_DEFAULT_TYPES=True
|
|
|
|
# Required for mounting shares
|
|
MANILA_ALLOW_NAS_SERVER_PORTS_ON_HOST=True
|