Nova-compute uses ssh and scp commands extensively and this
patch allows the process to read the configuration too in
/etc/ssh/ssh_config.d/ directory.
Closes-Bug: #2044983
Change-Id: I336ce64d493c549096d0b8706996e0f17a2728fb
(cherry picked from commit 4d6f4c07c9b634e22d5445a702be3d3ee9730ab3)
(cherry picked from commit 20c9776e8836abbe13a2eab2efe1d8c9a8cff851)
(cherry picked from commit 552a84925c9c1f7adc810e338a61944b6a53dbd0)
(cherry picked from commit decbbd95330864a18dfd6d68b84860a9a671cf2b)
Set nova config for rbd instance folder cleanup after evacuations
After evacuations and revert resizes when using rbd storage backend,
the instance folder is usually left behind and causes issues when
migrating the instance back to the host.
With the config option set, the nova-compute service will cleanup
those folders as part of the periodic checks that run for instances
that have been evacuated/migrated.
Closes-bug: #2019141
Change-Id: I846ccb0a95d04139b41fdad6cbf465d303d6cc09
(cherry picked from commit e61d89aa47cba71bb4dda12d836fde8a8fa7092c)
(cherry picked from commit 003f6b6d70fe7998c57095abb6ac97d97cd2dff1)
(cherry picked from commit cfafa8cf5f2d880635e66e9620ca9d0334375942)
(cherry picked from commit 1ddfe5e6c212804ac3623dc4782fa7e51da840a0)
(cherry picked from commit d3e4cc31c63e157efdc3e548a44c3f4c8f2bcdcd)
(cherry picked from commit be845826f95f812370b33fbdd22b6fd70ebb217f)
For principal - subordinate plugin type relations where the
principal Python payload imports code from packages managed by a
subordinate, upgrades can be problematic.
This change will allow a subordinate charm that have opted into the
feature to inform its principal about all implemented release -
packages combinations ahead of time. With this information in place
the principal can do the upgrade in one operation without risk of
charm relation RPC type processing at a critical moment.
Sync from charm-helpers to update [service_user] config to use the
service domain.
The keystone charm currently creates two service users, one for the
service domain (for v3 authentication), and the other for the default
domain (for v2 authentication). The [service_user] config needs to
use the service domain.
This patch configures Nova to send a service token along with the
received user token on requests to other services. This can allow those
other services to accept the request even if the user token has been
invalidated since received by Nova. Also with this patch Nova will
accept request from other services with invalid user tokens but valid
service tokens. Service tokens exist since Openstack Queens.
Closes-Bug: #1992840
Change-Id: I78b43ef77dc1d7b5976ec81ecddf63c9e6c8b6c1
(cherry picked from commit 3c53110282b97c42a00cee9ee344f32dc8cf29c5)
(cherry picked from commit b54f6701d6cc408990add5fdb81bac1c74aa20db)
