kolla/ironic_sudoers at d9baa171bd1e3ba492f0870715f780a03c0699ef - kolla - OpenDev: Free Software Needs Free Tools

openstack/kolla

Mark Goddard 1c3336c8c9 Use separate sudoers for ironic conductor modprobe

The original fix (8b101b28a1040fd6b4753c09364106274d7e6e09) for bug
1676466 added unnecessary entries to the sudoers file in the
ironic-base image. These included a rootwrap entry pointing to the
virtualenv used by source type images (not present in binary type
images) and a modprobe iscsi_tcp which is only required by the
ironic-conductor image.

This change adds a single sudoers file for the iscsi_tcp modprobe
to the ironic-conductor image and reverts to the common pattern of
adding a sudoers file to ironic-base only for source type images.

Change-Id: I89f1c4bd741de9ba184f14fcbcb708636616e420
Closes-bug: #1678143
Related-bug: #1676466
Related-bug: #1667864

2017-03-31 14:37:30 +01:00

2 lines

98 B

Plaintext

Raw Blame History

ironic ALL = (root) NOPASSWD: /var/lib/kolla/venv/bin/ironic-rootwrap /etc/ironic/rootwrap.conf *