Browse Source

Add tempest to sudoers for tempest container image

Required to configure TLS in the tempest pod init when used by
osp-director-operator.

Workaround cirular dependency: tempest_sudoers will not exist until this
patch is included in the openstack-tripleo-common-containers rpm.
Fallback to using an existing sudoers file with sed, then followup with
a patch to remove this logic once the package is updated.

Depends-On: I039c49e6f5872b02c1fdc1690594e0d9bef303f5

Change-Id: I2d06904cc89e398f82ffc8b4f2d862427507d0dc
(cherry picked from commit b80b98ffe9)
(cherry picked from commit 1b211e6486)
(cherry picked from commit 7c93f76136)
(cherry picked from commit ad0438d6f3)
changes/97/821597/1
Oliver Walsh 6 months ago
parent
commit
173edbafab
  1. 8
      container-images/tcib/base/os/tempest/tempest.yaml
  2. 1
      container-images/tcib/base/os/tempest/tempest_sudoers

8
container-images/tcib/base/os/tempest/tempest.yaml

@ -1,6 +1,14 @@
tcib_actions:
- run: bash /usr/local/bin/uid_gid_manage {{ tcib_user }}
- run: dnf -y install {{ tcib_packages['common'] | join(' ') }} && dnf clean all && rm -rf /var/cache/dnf
- run: >-
if [ -e /usr/share/openstack-tripleo-common-containers/container-images/tcib/base/os/tempest/tempest_sudoers ]; then
cp /usr/share/openstack-tripleo-common-containers/container-images/tcib/base/os/tempest/tempest_sudoers /etc/sudoers.d/tempest_sudoers;
else
sed -e 's/cloud-admin/tempest/' /usr/share/openstack-tripleo-common-containers/container-images/kolla/tripleoclient/tripleoclient_sudoers > /etc/sudoers.d/tempest_sudoers;
fi
- run: chmod 440 /etc/sudoers.d/tempest_sudoers
tcib_packages:
common:
- iputils

1
container-images/tcib/base/os/tempest/tempest_sudoers

@ -0,0 +1 @@
tempest ALL=(ALL) NOPASSWD: ALL
Loading…
Cancel
Save