diff options
| author | Zuul <zuul@review.opendev.org> | 2021-04-13 17:08:01 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2021-04-13 17:08:01 +0000 |
| commit | ec621fdc0264f9b364fa1605819794103c545d74 (patch) | |
| tree | 71b374375c39e93c5dc34d1e88fe26da603db8fa | |
| parent | d7c70136a047bcda1bbfe35b24340b5d86bf9719 (diff) | |
| parent | b5c206b5cbe06cbf94dae92891624b0813d743d1 (diff) | |
| download | nova-ec621fdc0264f9b364fa1605819794103c545d74.tar.gz | |
Merge "Add config parameter 'live_migration_scheme' to live migration with tls guide" into stable/stein
| -rw-r--r-- | doc/source/admin/secure-live-migration-with-qemu-native-tls.rst | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/doc/source/admin/secure-live-migration-with-qemu-native-tls.rst b/doc/source/admin/secure-live-migration-with-qemu-native-tls.rst index 012d78e93b..fb76f656af 100644 --- a/doc/source/admin/secure-live-migration-with-qemu-native-tls.rst +++ b/doc/source/admin/secure-live-migration-with-qemu-native-tls.rst @@ -120,10 +120,13 @@ Performing the migration (1) On all relevant compute nodes, enable the :oslo.config:option:`libvirt.live_migration_with_native_tls` - configuration attribute:: + configuration attribute and set the + :oslo.config:option:`libvirt.live_migration_scheme` + configuration attribute to tls:: [libvirt] live_migration_with_native_tls = true + live_migration_scheme = tls .. note:: Setting both @@ -131,6 +134,12 @@ Performing the migration :oslo.config:option:`libvirt.live_migration_tunnelled` at the same time is invalid (and disallowed). + .. note:: + Not setting + :oslo.config:option:`libvirt.live_migration_scheme` to ``tls`` + will result in libvirt using the unencrypted TCP connection + without displaying any error or a warning in the logs. + And restart the ``nova-compute`` service:: $ systemctl restart openstack-nova-compute |