Merge "Make sure apache metadata is set for nova-metadata service"

This commit is contained in:
Zuul 2020-11-22 15:54:43 +00:00 committed by Gerrit Code Review
commit 2b60807c01
2 changed files with 11 additions and 0 deletions

View File

@ -286,6 +286,8 @@ outputs:
- not container_healthcheck_disabled
- step|int == 5
host_prep_tasks: {get_attr: [NovaMetadataLogging, host_prep_tasks]}
metadata_settings:
get_attr: [ApacheServiceBase, role_data, metadata_settings]
external_upgrade_tasks:
- when:
- step|int == 1

View File

@ -0,0 +1,9 @@
---
fixes:
- |
In case of cellv2 multicell environment nova-metadata is the only
httpd managed service on the cell controller role. In case of
tls-everywhere it is required that the cell controller host has
ther needed metadata to be able to request the HTTP certificates.
Otherwise the getcert request fails with "Insufficient 'add' privilege
to add the entry 'krbprincipalname=HTTP/cell1-cellcontrol-0....'"