Remove glance_cinder_store filters override

At the moment glance_cinder_store.filters is distributed through
glance_store [1] package.
Moreover, for quite some time glance has migrated to using privsep [2]
so internally maintained filters are not up to date anymore.

[1] f3f5bdb45b/etc/glance/rootwrap.d/glance_cinder_store.filters
[2] c369ba013f

Related-Bug: #900930
Change-Id: Ie097a019f058bac123acf14f51253c272c56aca5
This commit is contained in:
Dmitriy Rabotyagov 2023-11-14 18:55:14 +01:00
parent c2428ab8da
commit ff895d3bad
2 changed files with 0 additions and 56 deletions

View File

@ -1,29 +0,0 @@
# glance-rootwrap command filters for glance cinder store
# This file should be owned by (and only-writable by) the root user
[Filters]
# cinder store driver
disk_chown: RegExpFilter, chown, root, chown, \d+, /dev/(?!.*/\.\.).*
# os-brick
mount: CommandFilter, mount, root
blockdev: RegExpFilter, blockdev, root, blockdev, (--getsize64|--flushbufs), /dev/.*
tee: CommandFilter, tee, root
mkdir: CommandFilter, mkdir, root
chown: RegExpFilter, chown, root, chown root:root /etc/pstorage/clusters/(?!.*/\.\.).*
ip: CommandFilter, ip, root
dd: CommandFilter, dd, root
iscsiadm: CommandFilter, iscsiadm, root
aoe-revalidate: CommandFilter, aoe-revalidate, root
aoe-discover: CommandFilter, aoe-discover, root
aoe-flush: CommandFilter, aoe-flush, root
read_initiator: ReadFileFilter, /etc/iscsi/initiatorname.iscsi
multipath: CommandFilter, multipath, root
multipathd: CommandFilter, multipathd, root
systool: CommandFilter, systool, root
sg_scan: CommandFilter, sg_scan, root
cp: CommandFilter, cp, root
drv_cfg: CommandFilter, /opt/emc/scaleio/sdc/bin/drv_cfg, root, /opt/emc/scaleio/sdc/bin/drv_cfg, --query_guid
sds_cli: CommandFilter, /usr/local/bin/sds/sds_cli, root
vgc-cluster: CommandFilter, vgc-cluster, root
scsi_id: CommandFilter, /lib/udev/scsi_id, root

View File

@ -13,33 +13,6 @@
# See the License for the specific language governing permissions and
# limitations under the License.
# NOTE(CeeMac): This task is required to copy rootwrap filters that we need
# and glance does not provide by default.
- name: Create aux glance dir
file:
path: "{{ item.path | default(omit) }}"
state: "directory"
owner: "{{ item.owner | default(glance_system_user_name) }}"
group: "{{ item.group | default(glance_system_group_name) }}"
mode: "{{ item.mode | default('0755') }}"
loop:
- path: "/etc/glance/rootwrap.d"
owner: "root"
group: "root"
- name: Copy glance rootwrap filter config
copy:
src: "{{ item }}"
dest: "/etc/glance/rootwrap.d/"
owner: "root"
group: "root"
mode: "0644"
with_fileglob:
- rootwrap.d/*
tags:
- glance-config
- glance-post-install
- name: Deploy Glance configuration files
openstack.config_template.config_template:
src: "{{ item.src | default(omit) }}"