devstack/lib/nova_plugins
Daniel P. Berrange fad20e605c nova: add support for TLS between novnc proxy & compute nodes
Nova is gaining the ability to run TLS over the connection between the
novnc proxy service and the QEMU/KVM compute node VNC server.

This adds a new config param - 'NOVA_CONSOLE_PROXY_COMPUTE_TLS=True' -
which instructs devstack to configure libvirt/QEMU to enable TLS for the
VNC server, and to configure the novncproxy to use TLS when connecting.
NB this use of TLS is distinct from use of TLS for the public facing API
controlled by USE_SSL, they can be enabled independently.

This is done in a generic manner so that it is easy to extend to cover
use of TLS with the SPICE and serial console proxy services too.

Change-Id: Ib29d3f5f18533115b9c51e27b373e92fc0a28d1a
Depends-on: I9cc9a380500715e60bd05aa5c29ee46bc6f8d6c2
Implements bp: websocket-proxy-to-host-security
(cherry picked from commit e9870eb18d)
2018-11-28 15:08:27 +00:00
..
functions-libvirt nova: add support for TLS between novnc proxy & compute nodes 2018-11-28 15:08:27 +00:00
hypervisor-fake Fix scheduler_default_filters usage 2017-06-05 11:01:45 -04:00
hypervisor-ironic Increse api_max_retries and api_retry_interval for ironic 2018-02-28 08:36:54 +00:00
hypervisor-libvirt Use the renamed vnc options 2017-10-13 07:25:43 +00:00
hypervisor-openvz Namespace XTRACE commands 2015-11-27 15:36:04 +11:00
hypervisor-vsphere Namespace XTRACE commands 2015-11-27 15:36:04 +11:00
hypervisor-xenserver XenAPI: Move dom0 related operations to os-xenapi devstack plugin 2017-06-07 22:02:56 -07:00