openstack/openstack-ansible
Code Issues Proposed changes

Remove dir_mode from rabbit key distribution

Browse Source 
Setting dir_mode to 0750 prevents rabbit from reading /etc/rabbitmq as
the owner and group are root.

This patch removes the dir_mode paramter so that the memcahed module's
default of 0755 is used.

Closes-Bug #1506992

Change-Id: I3936a6bf181e3cf3f22b712d16d9181017f949cd
This commit is contained in:
Hugh Saunders
2015-10-23 13:18:55 +01:00
parent 9fc2b0727a
commit f665acc796
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
playbooks/roles/rabbitmq_server/tasks/rabbitmq_ssl_key_distribute.yml
View File

@@ -19,12 +19,11 @@
file_path: "{{ item.src }}" file_path: "{{ item.src }}"
state: "retrieve" state: "retrieve"
file_mode: "{{ item.file_mode }}" file_mode: "{{ item.file_mode }}"
dir_mode: "{{ item.dir_mode }}"
server: "{{ memcached_servers }}" server: "{{ memcached_servers }}"
encrypt_string: "{{ memcached_encryption_key }}" encrypt_string: "{{ memcached_encryption_key }}"
with_items: with_items:
- { src: "{{ rabbitmq_ssl_cert }}", name: "rabbitmq_ssl_cert", file_mode: "0640", dir_mode: "0750" } - { src: "{{ rabbitmq_ssl_cert }}", name: "rabbitmq_ssl_cert", file_mode: "0640" }
- { src: "{{ rabbitmq_ssl_key }}", name: "rabbitmq_ssl_key", file_mode: "0640", dir_mode: "0750" } - { src: "{{ rabbitmq_ssl_key }}", name: "rabbitmq_ssl_key", file_mode: "0640" }
register: memcache_keys register: memcache_keys
until: memcache_keys|success until: memcache_keys|success
retries: 5 retries: 5