openstack/openstack
Code Issues Proposed changes

Update git submodules

Browse Source 
* Update tripleo-heat-templates from branch 'master'
  to f40717c85746d522b7a9d4b41db6db5dfa4c46eb
  - Merge "Update undercloud TLS template with proper keytab group"
  - Update undercloud TLS template with proper keytab group
    
    The undercloud supports enrolling itself as a FreeIPA client when
    configured to use TLS-everywhere. However, we recently hit a bug where
    the group permissions of the keytab were set to the old mistral user
    (tripleo-admin). This causes issues because more or what mistral did is
    being handled by ansible and the deployment user.
    
    This commit updates the group for the keytab to root, which the
    deployment users is already a member of. This keeps permission of the
    keytab strict but doesn't compromise usability by modifying the group in
    a way that requires the deployment user to re-authenticate to access it.
    
    Change-Id: Iacf5e6147f7ef02ba514b7dddc65383faa440826
    Closes-Bug: 1886870
This commit is contained in:
Zuul 2021-04-23 08:35:05 +00:00 committed by Gerrit Code Review
parent 9e05b2da23
commit 4020c68fb5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tripleo-heat-templates

@ -1 +1 @@
Subproject commit bf8d063cb235721116726c6c074105480a9db4c8
Subproject commit f40717c85746d522b7a9d4b41db6db5dfa4c46eb