From 744fff3a47500345e34e5c0c466f30c9cc77afb7 Mon Sep 17 00:00:00 2001
From: Spyros Trigazis <strigazi@gmail.com>
Date: Wed, 11 Mar 2020 14:31:05 +0000
Subject: [PATCH] fcos: Disable zincati auto-updates

By default FCOS auto-updates nodes which causes
reboots as well. Disable the auto-update functionallity.

docs: https://github.com/coreos/zincati/blob/0.0.6/docs/usage/auto-updates.md#disabling-auto-updates

story: 2005201
task: 39029

Change-Id: I67a4eefdd9b11889b232a0d0a385087f98d3e85e
Signed-off-by: Spyros Trigazis <strigazi@gmail.com>
---
 .../templates/fcct-config.yaml                     | 12 ++++++++++++
 .../k8s_fedora_coreos_v1/templates/user_data.json  | 14 ++++++++++++++
 2 files changed, 26 insertions(+)

diff --git a/magnum/drivers/k8s_fedora_coreos_v1/templates/fcct-config.yaml b/magnum/drivers/k8s_fedora_coreos_v1/templates/fcct-config.yaml
index bbb361b66c..2ace5bc7ee 100644
--- a/magnum/drivers/k8s_fedora_coreos_v1/templates/fcct-config.yaml
+++ b/magnum/drivers/k8s_fedora_coreos_v1/templates/fcct-config.yaml
@@ -142,6 +142,18 @@ storage:
           sed -i '/^PasswordAuthentication yes/ s/ yes/ no/' /etc/ssh/sshd_config
 
           systemctl restart sshd
+    - path: /etc/zincati/config.d/90-disable-auto-updates.toml
+      # 420 (decimal) == 644 (octal)
+      mode: 420
+      group:
+        name: root
+      user:
+        name: root
+      contents:
+        inline: |
+          [updates]
+          enabled = false
+
 systemd:
   units:
     - name: configure-agent-env.service
diff --git a/magnum/drivers/k8s_fedora_coreos_v1/templates/user_data.json b/magnum/drivers/k8s_fedora_coreos_v1/templates/user_data.json
index 85ba9e5a8f..b2da796a8a 100644
--- a/magnum/drivers/k8s_fedora_coreos_v1/templates/user_data.json
+++ b/magnum/drivers/k8s_fedora_coreos_v1/templates/user_data.json
@@ -101,6 +101,20 @@
           "verification": {}
         },
         "mode": 448
+      },
+      {
+        "group": {
+          "name": "root"
+        },
+        "path": "/etc/zincati/config.d/90-disable-auto-updates.toml",
+        "user": {
+          "name": "root"
+        },
+        "contents": {
+          "source": "data:,%5Bupdates%5D%0Aenabled%20%3D%20false%0A",
+          "verification": {}
+        },
+        "mode": 420
       }
     ]
   },