bifrost/releasenotes/notes/releasenote-341a5eebe6168aea.yaml
Jacob Anders 1f37c41413 Explicitly set permissions on /httpboot contents
Ansible versions 2.9.12 and 2.8.14 change default behavior
in regards to applying umask to ansible-created files. Due to
this, newly created files may have overly restrictive permissions,
causing issues in use cases where files need to be world-readable
such as contents of /httpboot folder in Ironic. This patch adds
explicit setting of permissions to ensure Ironic network boot
continues to work correctly.

Change-Id: If617a305d4efc09335f675f1ec68e07cf81970c6
2020-08-25 21:56:38 +10:00

14 lines
575 B
YAML

---
upgrade:
- |
Adds the explicit setting of file access permissions to get_url calls in
bifrost ansible playbooks to ensure that the contents of "/httpboot" are
world-readable independently of which Ansible version is in use.
fixes:
- |
Resolves the issue with ansible versions 2.9.12 and 2.8.14 where implicit
setting of file permissions on files downloaded with get_url calls results
in overly restrictive permissions. This leads to access denied while
attempting to read the contents of "/httpboot" and results in failed
deployments.