openstack/kolla
Code Issues Proposed changes

Add nfast group to barbican images

Browse Source 
The nfast group is needed to configure barbican to use Thales HSM
devices with the PKCS#11 plugin.

Change-Id: I3de8ca07a34ae63eb91fc8d83bb0676425295cbc
This commit is contained in:
Douglas Mendizábal 2018-12-18 16:53:31 -06:00
parent 0f41906089
commit e261e89192
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docker/barbican/barbican-base/Dockerfile.j2
View File

@ -5,7 +5,7 @@ LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build
{% import "macros.j2" as macros with context %} {% import "macros.j2" as macros with context %}
{{ macros.configure_user(name='barbican') }} {{ macros.configure_user(name='barbican', groups='nfast') }}
{% if install_type == 'binary' %} {% if install_type == 'binary' %}
{% if base_distro in ['centos', 'oraclelinux', 'rhel'] %} {% if base_distro in ['centos', 'oraclelinux', 'rhel'] %}

6
kolla/common/config.py
View File

@ -1130,7 +1130,11 @@ USERS = {
'tempest-user': { 'tempest-user': {
'uid': 42480, 'uid': 42480,
'gid': 42480, 'gid': 42480,
} },
'nfast-user': {
'uid': 42481, # unused user, but we need the group for thales hsm
'gid': 42481,
},
} }