Implemented usage libvirt+tls
Enable TLS transport.
compute:
libvirt:
tls:
enabled: True
You able to set custom certificates in pillar:
nova:
compute:
libvirt:
tls:
key: (certificate content)
cert: (certificate content)
cacert: (certificate content)
client:
key: (certificate content)
cert: (certificate content)
Related-Prod: PROD-19149
Change-Id: Iea4c44703e837693b218648c0090b35c129daa5f
diff --git a/README.rst b/README.rst
index c5606e8..6d9c848 100644
--- a/README.rst
+++ b/README.rst
@@ -920,6 +920,33 @@
You can read more about injecting the administrator password here:
https://docs.openstack.org/nova/queens/admin/admin-password-injection.html
+Enable libvirt control channel over TLS
+---------------------
+
+By default TLS is disabled.
+
+Enable TLS transport.
+
+ compute:
+ libvirt:
+ tls:
+ enabled: True
+
+You able to set custom certificates in pillar:
+
+ nova:
+ compute:
+ libvirt:
+ tls:
+ key: (certificate content)
+ cert: (certificate content)
+ cacert: (certificate content)
+ client:
+ key: (certificate content)
+ cert: (certificate content)
+
+You can read more about live migration over TLS here:
+ https://wiki.libvirt.org/page/TLSCreateServerCerts
Documentation and Bugs
======================