Fix become for tasks and handlers
Some of our tasks and handlers need to be run as root but were previously missing the become: true option. This change addresses this to ensure the appropriate tasks and handlers are run as an admin user. Change-Id: I9cf00809e8725d9220bc993c8fd6602e19ed7aa3
This commit is contained in:
parent
2cba7e32b7
commit
df0ca83325
@ -19,12 +19,14 @@
|
|||||||
- name: Docker | reload systemd
|
- name: Docker | reload systemd
|
||||||
systemd:
|
systemd:
|
||||||
daemon_reload: yes
|
daemon_reload: yes
|
||||||
|
become: true
|
||||||
when: ansible_service_mgr == 'systemd'
|
when: ansible_service_mgr == 'systemd'
|
||||||
|
|
||||||
- name: Docker | reload docker
|
- name: Docker | reload docker
|
||||||
service:
|
service:
|
||||||
name: docker
|
name: docker
|
||||||
state: restarted
|
state: restarted
|
||||||
|
become: true
|
||||||
|
|
||||||
- name: Docker | pause while Docker restarts
|
- name: Docker | pause while Docker restarts
|
||||||
pause:
|
pause:
|
||||||
@ -42,6 +44,7 @@
|
|||||||
service:
|
service:
|
||||||
name: docker-distribution
|
name: docker-distribution
|
||||||
state: restarted
|
state: restarted
|
||||||
|
become: true
|
||||||
|
|
||||||
# NOTE(bogdando): import caveats https://github.com/ansible/ansible/issues/42621
|
# NOTE(bogdando): import caveats https://github.com/ansible/ansible/issues/42621
|
||||||
- name: Docker | wait for registry
|
- name: Docker | wait for registry
|
||||||
|
@ -4,11 +4,13 @@
|
|||||||
package:
|
package:
|
||||||
name: docker-distribution
|
name: docker-distribution
|
||||||
state: present
|
state: present
|
||||||
|
become: true
|
||||||
|
|
||||||
- name: manage /etc/docker-distribution/registry/config.yml
|
- name: manage /etc/docker-distribution/registry/config.yml
|
||||||
template:
|
template:
|
||||||
src: docker-distribution-config.yml.j2
|
src: docker-distribution-config.yml.j2
|
||||||
dest: /etc/docker-distribution/registry/config.yml
|
dest: /etc/docker-distribution/registry/config.yml
|
||||||
|
become: true
|
||||||
notify: restart docker-distribution service
|
notify: restart docker-distribution service
|
||||||
|
|
||||||
- name: force systemd to reread configs
|
- name: force systemd to reread configs
|
||||||
@ -19,3 +21,4 @@
|
|||||||
enabled: true
|
enabled: true
|
||||||
state: started
|
state: started
|
||||||
name: docker-distribution
|
name: docker-distribution
|
||||||
|
become: true
|
||||||
|
@ -25,7 +25,6 @@
|
|||||||
# NOTE(aschultz): LP#1765121 - need to check that we don't have any ftype=0
|
# NOTE(aschultz): LP#1765121 - need to check that we don't have any ftype=0
|
||||||
# volumes because other wise docker is very unhappy
|
# volumes because other wise docker is very unhappy
|
||||||
- name: Check if there are XFS volumes with ftype=0
|
- name: Check if there are XFS volumes with ftype=0
|
||||||
become: true
|
|
||||||
shell: |
|
shell: |
|
||||||
for dev in $(df -h | grep '/dev/' | grep -v 'tmp' | cut -d' ' -f1)
|
for dev in $(df -h | grep '/dev/' | grep -v 'tmp' | cut -d' ' -f1)
|
||||||
do
|
do
|
||||||
@ -148,4 +147,5 @@
|
|||||||
insertafter: "^# /etc/sysconfig/docker$"
|
insertafter: "^# /etc/sysconfig/docker$"
|
||||||
create: yes
|
create: yes
|
||||||
|
|
||||||
|
become: true
|
||||||
when: not container_registry_skip_reconfiguration or is_configured.rc != 0
|
when: not container_registry_skip_reconfiguration or is_configured.rc != 0
|
||||||
|
Loading…
Reference in New Issue
Block a user