openstack/kolla
Code Issues Proposed changes

Fix permissions of tmp files

Browse Source 
When running kolla-ansible as non-root users the tmp files will
be created with become user as owner and mode 0600. This way the user
running kolla-ansible is not able to read the generated files. This
is necessary because of the use of the lookup method, which will
not run as become user.

TrivialFix

Change-Id: If86d114c05a9b2e7fa240718611d78e93100ebdf
This commit is contained in:
Christian Berendt 2016-09-13 13:30:25 +02:00
parent ea747d7ce2
commit 924fbb6f7a
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ansible/roles/ceph/tasks/bootstrap_mons.yml
View File

@ -6,7 +6,7 @@
run_once: True
- name: Creating temp file on localhost
local_action: copy content=None dest=/tmp/kolla_ceph_cluster mode=0600
local_action: copy content=None dest=/tmp/kolla_ceph_cluster mode=0644
changed_when: False
always_run: True
run_once: True
@ -19,7 +19,7 @@
register: ceph_mon_config_volume
- name: Writing hostname of host with existing cluster files to temp file
local_action: copy content="{{ inventory_hostname }}" dest=/tmp/kolla_ceph_cluster mode=0600
local_action: copy content="{{ inventory_hostname }}" dest=/tmp/kolla_ceph_cluster mode=0644
changed_when: False
always_run: True
when: not ceph_mon_config_volume.changed

4
ansible/roles/mariadb/tasks/lookup_cluster.yml
View File

@ -6,7 +6,7 @@
run_once: True
- name: Creating temp file on localhost
local_action: copy content=None dest=/tmp/kolla_mariadb_cluster mode=0600
local_action: copy content=None dest=/tmp/kolla_mariadb_cluster mode=0644
changed_when: False
always_run: True
run_once: True
@ -19,7 +19,7 @@
register: mariadb_volume
- name: Writing hostname of host with existing cluster files to temp file
local_action: copy content={{ ansible_hostname }} dest=/tmp/kolla_mariadb_cluster mode=0600
local_action: copy content={{ ansible_hostname }} dest=/tmp/kolla_mariadb_cluster mode=0644
changed_when: False
always_run: True
when: not mariadb_volume | changed