From 72a244d994d84b14a722e957d00f0802006ed545 Mon Sep 17 00:00:00 2001 From: Logan V Date: Sun, 4 Mar 2018 15:50:31 -0500 Subject: [PATCH] Disable ceph-ansible NTP installation ceph-ansible installs ntp by default, which conflicts with the OSA default of enabling ntp via ansible-hardening's chrony configuration. Change-Id: I5a1fba202899f4cd0f0598682af44227d2d7a02b --- inventory/group_vars/ceph_all.yml | 4 ++++ .../notes/ceph-ansible-ntp-8d5078e3e1340ef4.yaml | 11 +++++++++++ 2 files changed, 15 insertions(+) create mode 100644 releasenotes/notes/ceph-ansible-ntp-8d5078e3e1340ef4.yaml diff --git a/inventory/group_vars/ceph_all.yml b/inventory/group_vars/ceph_all.yml index 25f7febb42..1f585630c3 100644 --- a/inventory/group_vars/ceph_all.yml +++ b/inventory/group_vars/ceph_all.yml @@ -27,3 +27,7 @@ ceph_conf_overrides: "{{ (ceph_conf_overrides_rgw | default({})) | combine(ceph_ # needed. nfs_file_gw: False nfs_obj_gw: False + +# NTP in an OSA environment is handled by ansible-hardening using chrony +# ceph-ansible's default enabling of ntpd conflicts with the OSA defaults +ntp_service_enabled: False diff --git a/releasenotes/notes/ceph-ansible-ntp-8d5078e3e1340ef4.yaml b/releasenotes/notes/ceph-ansible-ntp-8d5078e3e1340ef4.yaml new file mode 100644 index 0000000000..46e4719a26 --- /dev/null +++ b/releasenotes/notes/ceph-ansible-ntp-8d5078e3e1340ef4.yaml @@ -0,0 +1,11 @@ +--- +upgrade: + - | + Users should purge the 'ntp' package from their hosts if ceph-ansible is + enabled. ceph-ansible previously was configured to install ntp by default + which conflicts with the OSA ansible-hardening role chrony service. +fixes: + - | + ceph-ansible is no longer configured to install ntp by default, which + creates a conflict with OSA's ansible-hardening role that is used to + implement ntp using 'chrony'.