Changes for GCS-FUSE

[cmm-cisco]

Controller unable to modify node profiles:

May 05 13:28:36 cml-controller virl2-core-driver.sh[747561]: ERROR: grpc_server:37:Driver call failed (1): Failed to write to /var/lib/libvirt/images/node-definitions/kali-linux.yaml. Permission error
May 05 13:28:36 cml-controller virl2-controller.sh[747670]: ERROR: grpc_driver_accessor:337:Failed to write to /var/lib/libvirt/images/node-definitions/kali-linux.yaml. Permission error
May 05 13:28:36 cml-controller virl2-controller.sh[747670]: ERROR: utils:85:PUT /api/v0/node_definitions (500): Failed to write to /var/lib/libvirt/images/node-definitions/kali-linux.yaml. Permission error.

• Compute and Control machines need unique service accounts
• Verify compute service account has read-only access to gs://bah-libvirt-images-ue1/. Controller service account has read-write access.
• Fix group ID from 987 to 986 (should be virl2).

root@cml-compute-c99t:/var/lib/libvirt# ls -ld images
drwxrwxr-x 1 libvirt-qemu systemd-coredump 0 May  3 04:48 images

root@cml-controller:/var/lib/libvirt/images# id systemd-coredump
uid=987(systemd-coredump) gid=987(systemd-coredump) groups=987(systemd-coredump)

root@cml-controller:/var/lib/libvirt/images# id virl2
uid=997(virl2) gid=986(virl2) groups=986(virl2),993(kvm),988(docker),117(libvirt),1011(wireshark)

[cmm-cisco]

Consider making GCS-FUSE setup dynamic using in-place sed, instead of using hard-coded values.

# id -g virl2
986

[cmm-cisco]

GCS-FUSE ran out of disk space on the controller today due to the GCS-FUSE cache. It has no limit and never evicts old objects.

• Set a maximum of 75% of total disk space on the controllers and computes.

file-cache:
  max-size-mb: 360000