openstack
/
kolla-ansible
Code Issues Proposed changes

Make nova perms consistent between applications 

Nova cells support introduced a slight regression that triggers
odd behaviour when we tried switching to Apache (httpd) [1].
Bootstrap no longer applied permissions recursively to all log
files, creating a discrepancy between normal and bootstrap runs
and also Nova and other services such as Cinder (regarding
bootstrap logging).

This patch fixes it.

Backport to Train.

Not creating reno nor a bug record because it does not affect
any current standard usage in any currently known way.

Note this only really hides (standardizes?) the global issue that
we don't control file permissions on newly created files too well.

[1] https://review.opendev.org/724793

Change-Id: I35e9924ccede5edd2e1307043379aba944725143
Needed-By: https://review.opendev.org/724793
This commit is contained in:
Radosław Piliszek 2020-05-06 20:24:53 +02:00
parent a87780cb96
commit 93c9ad892c
2 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ansible/roles/nova-cell/templates/nova-cell-bootstrap.json.j2
View File

@ -11,7 +11,8 @@
"permissions": [
{
"path": "/var/log/kolla/nova",
"owner": "nova:nova"
"owner": "nova:nova",
"recurse": true
}
]
}

3
ansible/roles/nova/templates/nova-api-bootstrap.json.j2
View File

@ -11,7 +11,8 @@
"permissions": [
{
"path": "/var/log/kolla/nova",
"owner": "nova:nova"
"owner": "nova:nova",
"recurse": true
}
]
}