kayobe/releasenotes/notes/kolla-ansible-become-false-95aa88edd3c8c259.yaml
Mark Goddard 939e298c56 Don't use become for Kolla Ansible
Using become for all Kolla Ansible tasks is not ideal from a security
perspective. It is also incompatible with fact caching, since it causes
facts to be gathered and cached as root, which changes some facts.

This change modifies the default value of kolla_ansible_become to false.

Change-Id: I9ee5c55e59276f70c92e9c698c01123dcf8919a1
Story: 2007492
Task: 39217
2020-03-31 15:32:10 +01:00

7 lines
223 B
YAML

---
upgrade:
- |
Modifies the default value of ``kolla_ansible_become`` to ``false``. This
means that Kolla Ansible will no longer use privilege escalation for all
tasks, and will only use it where necessary.