fe6e32e3e3
To avoid a situation where the mode is set on an NFS mount that has different permissions to 755, we should omit the mode by default. The default value on creation is 755 in anycase, so if the directory does not exist it will be created with 755 as before. Change-Id: I926f46ba2e8a8ce84b4f127dbeabb0daab0b3951 Closes-Bug: #1680233
69 lines
2.3 KiB
YAML
69 lines
2.3 KiB
YAML
---
|
|
# Copyright 2014, Rackspace US, Inc.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
- name: create the system group
|
|
group:
|
|
name: "{{ glance_system_group_name }}"
|
|
state: "present"
|
|
system: "yes"
|
|
|
|
- name: Create the glance system user
|
|
user:
|
|
name: "{{ glance_system_user_name }}"
|
|
group: "{{ glance_system_group_name }}"
|
|
comment: "{{ glance_system_comment }}"
|
|
shell: "{{ glance_system_shell }}"
|
|
system: "yes"
|
|
createhome: "yes"
|
|
home: "{{ glance_system_user_home }}"
|
|
|
|
- name: Create glance dir
|
|
file:
|
|
path: "{{ item.path }}"
|
|
state: directory
|
|
owner: "{{ item.owner|default(glance_system_user_name) }}"
|
|
group: "{{ item.group|default(glance_system_group_name) }}"
|
|
mode: "{{ item.mode|default(omit) }}"
|
|
with_items:
|
|
- { path: "/openstack", mode: "0755", owner: "root", group: "root" }
|
|
- { path: "/etc/glance", mode: "0750" }
|
|
- { path: "/var/cache/glance" }
|
|
- { path: "{{ glance_system_user_home }}" }
|
|
- { path: "{{ glance_system_user_home }}/cache/api", mode: "0700" }
|
|
- { path: "{{ glance_system_user_home }}/cache/registry" }
|
|
- { path: "{{ glance_system_user_home }}/images/" }
|
|
- { path: "{{ glance_system_user_home }}/scrubber" }
|
|
|
|
- name: Test for log directory or link
|
|
shell: |
|
|
if [ -h "/var/log/glance" ]; then
|
|
chown -h {{ glance_system_user_name }}:{{ glance_system_group_name }} "/var/log/glance"
|
|
chown -R {{ glance_system_user_name }}:{{ glance_system_group_name }} "$(readlink /var/log/glance)"
|
|
else
|
|
exit 1
|
|
fi
|
|
register: log_dir
|
|
failed_when: false
|
|
changed_when: log_dir.rc != 0
|
|
|
|
- name: Create glance log dir
|
|
file:
|
|
path: "/var/log/glance"
|
|
state: directory
|
|
owner: "{{ glance_system_user_name }}"
|
|
group: "{{ glance_system_group_name }}"
|
|
mode: "0755"
|
|
when: log_dir.rc != 0
|