Add OSLO lock path to all OpenStack services

Add a dedicated writable emptyDir volume for OSLO's
file-based locking mechanism to all OpenStack services.

Affected charts:
aodh, barbican, blazer, ceilometer, cinder, cloudkitty, cyborg,
designate, glance, gnocchi, heat, ironic, keystone, magnum, manila,
masakari, mistral, monasca, neutron, nova, octavia, placement, tacker,
trove, watcher, and zaqar.

This ensures proper file locking functionality in Oslo libraries within
containerized environments and prevents lock file conflicts.

Assisted-by: Claude Code 2.0
Change-Id: I3ee46d9550bc6f2a6632bec748efe0be646a82b3
Signed-off-by: Doug Goldstein <cardoe@cardoe.com>

Author: cardoe

aodh/templates/deployment-api.yaml

@@ -82,6 +82,8 @@ spec:
           volumeMounts:
             - name: pod-tmp
               mountPath: /tmp
+            - name: oslo-lock-path
+              mountPath: {{ .Values.conf.aodh.oslo_concurrency.lock_path }}
             - name: wsgi-aodh
               mountPath: /var/www/cgi-bin/aodh
             - name: pod-etc-aodh
@@ -116,6 +118,8 @@ spec:
       volumes:
         - name: pod-tmp
           emptyDir: {}
+        - name: oslo-lock-path
+          emptyDir: {}
         - name: wsgi-aodh
           emptyDir: {}
         - name: pod-etc-aodh

aodh/templates/deployment-evaluator.yaml

@@ -75,6 +75,8 @@ spec:
           volumeMounts:
             - name: pod-tmp
               mountPath: /tmp
+            - name: oslo-lock-path
+              mountPath: {{ .Values.conf.aodh.oslo_concurrency.lock_path }}
             - name: pod-etc-aodh
               mountPath: /etc/aodh
             - name: aodh-etc
@@ -99,6 +101,8 @@ spec:
       volumes:
         - name: pod-tmp
           emptyDir: {}
+        - name: oslo-lock-path
+          emptyDir: {}
         - name: pod-etc-aodh
           emptyDir: {}
         - name: aodh-etc

aodh/templates/deployment-listener.yaml

@@ -75,6 +75,8 @@ spec:
           volumeMounts:
             - name: pod-tmp
               mountPath: /tmp
+            - name: oslo-lock-path
+              mountPath: {{ .Values.conf.aodh.oslo_concurrency.lock_path }}
             - name: pod-etc-aodh
               mountPath: /etc/aodh
             - name: aodh-etc
@@ -99,6 +101,8 @@ spec:
       volumes:
         - name: pod-tmp
           emptyDir: {}
+        - name: oslo-lock-path
+          emptyDir: {}
         - name: pod-etc-aodh
           emptyDir: {}
         - name: aodh-etc

aodh/templates/deployment-notifier.yaml

@@ -75,6 +75,8 @@ spec:
           volumeMounts:
             - name: pod-tmp
               mountPath: /tmp
+            - name: oslo-lock-path
+              mountPath: {{ .Values.conf.aodh.oslo_concurrency.lock_path }}
             - name: pod-etc-aodh
               mountPath: /etc/aodh
             - name: aodh-etc
@@ -99,6 +101,8 @@ spec:
       volumes:
         - name: pod-tmp
           emptyDir: {}
+        - name: oslo-lock-path
+          emptyDir: {}
         - name: pod-etc-aodh
           emptyDir: {}
         - name: aodh-etc

aodh/values.yaml

@@ -459,6 +459,8 @@ conf:
       enable_proxy_headers_parsing: true
     oslo_policy:
       policy_file: /etc/aodh/policy.yaml
+    oslo_concurrency:
+      lock_path: /var/lock
     database:
       alarm_history_time_to_live: 86400
       max_retries: -1

barbican/templates/deployment-api.yaml

@@ -94,6 +94,8 @@ spec:
           volumeMounts:
             - name: pod-tmp
               mountPath: /tmp
+            - name: oslo-lock-path
+              mountPath: {{ .Values.conf.barbican.oslo_concurrency.lock_path }}
             - name: etcbarbican
               mountPath: /etc/barbican
             - name: barbican-etc
@@ -134,6 +136,8 @@ spec:
       volumes:
         - name: pod-tmp
           emptyDir: {}
+        - name: oslo-lock-path
+          emptyDir: {}
         - name: etcbarbican
           emptyDir: {}
         - name: barbican-etc

barbican/values.yaml

@@ -413,6 +413,8 @@ conf:
       bind_port: null
     oslo_policy:
       policy_file: /etc/barbican/policy.yaml
+    oslo_concurrency:
+      lock_path: /var/lock
     # When using the simple_crypto_plugin, a kek must be provided as:
     #   .conf.barbican.simple_crypto_plugin.kek
     # If no kek is provided, barbican will use a well-known default.

blazar/templates/deployment-api.yaml

@@ -97,6 +97,8 @@ spec:
           volumeMounts:
             - name: pod-tmp
               mountPath: /tmp
+            - name: oslo-lock-path
+              mountPath: {{ .Values.conf.blazar.oslo_concurrency.lock_path }}
             - name: pod-etc-blazar
               mountPath: /etc/blazar
             - name: blazar-bin
@@ -131,6 +133,8 @@ spec:
       volumes:
         - name: pod-tmp
           emptyDir: {}
+        - name: oslo-lock-path
+          emptyDir: {}
         - name: pod-etc-blazar
           emptyDir: {}
         - name: blazar-bin

blazar/templates/deployment-manager.yaml

@@ -68,6 +68,8 @@ spec:
           volumeMounts:
             - name: pod-tmp
               mountPath: /tmp
+            - name: oslo-lock-path
+              mountPath: {{ .Values.conf.blazar.oslo_concurrency.lock_path }}
             - name: pod-etc-blazar
               mountPath: /etc/blazar
             - name: blazar-bin
@@ -94,6 +96,8 @@ spec:
       volumes:
         - name: pod-tmp
           emptyDir: {}
+        - name: oslo-lock-path
+          emptyDir: {}
         - name: pod-etc-blazar
           emptyDir: {}
         - name: blazar-bin

blazar/values.yaml

@@ -623,6 +623,8 @@ conf:
       driver: messagingv2
     oslo_messaging_rabbit:
       rabbit_ha_queues: true
+    oslo_concurrency:
+      lock_path: /var/lock
     manager:
       plugins: physical.host.plugin,virtual.instance.plugin,flavor.instance.plugin,virtual.floatingip.plugin
     enforcement: