Puppet Class: tripleo::profile::base::cinder::volume::nfs

Defined in:
manifests/profile/base/cinder/volume/nfs.pp

Overview

Copyright 2016 Red Hat, Inc.

Licensed under the Apache License, Version 2.0 (the “License”); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an “AS IS” BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Class: tripleo::profile::base::cinder::volume::nfs

Cinder Volume nfs profile for tripleo

Parameters

cinder_nfs_servers

List of NFS shares to mount

backend_name

(Optional) Name given to the Cinder backend stanza Defaults to ‘tripleo_nfs’

backend_availability_zone

(Optional) Availability zone for this volume backend Defaults to hiera(‘cinder::backend::nfs::backend_availability_zone’, undef)

cinder_nfs_mount_options

(Optional) List of mount options for the NFS share Defaults to ”

cinder_nfs_snapshot_support

(Optional) Whether to enable support for snapshots in the NFS driver. Defaults to $::os_service_default

cinder_nas_secure_file_operations

(Optional) Allow network-attached storage systems to operate in a secure environment where root level access is not permitted. If set to False, access is as the root user and insecure. If set to True, access is not as root. If set to auto, a check is done to determine if this is a new installation: True is used if so, otherwise False. Default is auto. Defaults to $::os_service_default

cinder_nas_secure_file_permissions

(Optional) Set more secure file permissions on network-attached storage volume files to restrict broad other/world access. If set to False, volumes are created with open permissions. If set to True, volumes are created with permissions for the cinder user and group (660). If set to auto, a check is done to determine if this is a new installation: True is used if so, otherwise False. Default is auto. Defaults to $::os_service_default

step

(Optional) The current step in deployment. See tripleo-heat-templates for more details. Defaults to hiera(‘step’)

Parameters:

  • cinder_nfs_servers (Any)
  • backend_name (Any) (defaults to: hiera('cinder::backend::nfs::volume_backend_name', 'tripleo_nfs'))
  • backend_availability_zone (Any) (defaults to: hiera('cinder::backend::nfs::backend_availability_zone', undef))
  • cinder_nfs_mount_options (Any) (defaults to: '')
  • cinder_nfs_snapshot_support (Any) (defaults to: $::os_service_default)
  • cinder_nas_secure_file_operations (Any) (defaults to: $::os_service_default)
  • cinder_nas_secure_file_permissions (Any) (defaults to: $::os_service_default)
  • step (Any) (defaults to: Integer(hiera('step'))) 


62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
 
# File 'manifests/profile/base/cinder/volume/nfs.pp', line 62

class tripleo::profile::base::cinder::volume::nfs (
  $cinder_nfs_servers,
  $backend_name                       = hiera('cinder::backend::nfs::volume_backend_name', 'tripleo_nfs'),
  $backend_availability_zone          = hiera('cinder::backend::nfs::backend_availability_zone', undef),
  $cinder_nfs_mount_options           = '',
  $cinder_nfs_snapshot_support        = $::os_service_default,
  $cinder_nas_secure_file_operations  = $::os_service_default,
  $cinder_nas_secure_file_permissions = $::os_service_default,
  $step                               = Integer(hiera('step')),
) {
  include tripleo::profile::base::cinder::volume

  if $step >= 4 {
    package {'nfs-utils': }
    -> cinder::backend::nfs { $backend_name :
      backend_availability_zone   => $backend_availability_zone,
      nfs_servers                 => $cinder_nfs_servers,
      nfs_mount_options           => $cinder_nfs_mount_options,
      nfs_shares_config           => '/etc/cinder/shares-nfs.conf',
      nfs_snapshot_support        => $cinder_nfs_snapshot_support,
      nas_secure_file_operations  => $cinder_nas_secure_file_operations,
      nas_secure_file_permissions => $cinder_nas_secure_file_permissions,
    }

    if str2bool($::selinux) {
      selboolean { 'virt_use_nfs':
        value      => on,
        persistent => true,
        require    => Package['nfs-utils'],
      }
    }
  }

}