diff options
| author | Zuul <zuul@review.opendev.org> | 2021-03-18 19:00:47 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2021-03-18 19:00:47 +0000 |
| commit | 0c64f4c3eae8e2654ec11f60682c0fa5eda30c1a (patch) | |
| tree | 14b6a839053e4d58efed8662b540528972645d8f | |
| parent | b7334b508955ce99d6ae3765bf78e68572b83f56 (diff) | |
| parent | 5d5ff82bab1dfb12e6223446b1cf20db6a348f38 (diff) | |
| download | nova-0c64f4c3eae8e2654ec11f60682c0fa5eda30c1a.tar.gz | |
Merge "Add config parameter 'live_migration_scheme' to live migration with tls guide"
| -rw-r--r-- | doc/source/admin/secure-live-migration-with-qemu-native-tls.rst | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/doc/source/admin/secure-live-migration-with-qemu-native-tls.rst b/doc/source/admin/secure-live-migration-with-qemu-native-tls.rst index 012d78e93b..fb76f656af 100644 --- a/doc/source/admin/secure-live-migration-with-qemu-native-tls.rst +++ b/doc/source/admin/secure-live-migration-with-qemu-native-tls.rst @@ -120,10 +120,13 @@ Performing the migration (1) On all relevant compute nodes, enable the :oslo.config:option:`libvirt.live_migration_with_native_tls` - configuration attribute:: + configuration attribute and set the + :oslo.config:option:`libvirt.live_migration_scheme` + configuration attribute to tls:: [libvirt] live_migration_with_native_tls = true + live_migration_scheme = tls .. note:: Setting both @@ -131,6 +134,12 @@ Performing the migration :oslo.config:option:`libvirt.live_migration_tunnelled` at the same time is invalid (and disallowed). + .. note:: + Not setting + :oslo.config:option:`libvirt.live_migration_scheme` to ``tls`` + will result in libvirt using the unencrypted TCP connection + without displaying any error or a warning in the logs. + And restart the ``nova-compute`` service:: $ systemctl restart openstack-nova-compute |