Add tempest to sudoers for tempest container image

Required to configure TLS in the tempest pod init when used by
osp-director-operator.

Workaround cirular dependency: tempest_sudoers will not exist until this
patch is included in the openstack-tripleo-common-containers rpm.
Fallback to using an existing sudoers file with sed, then followup with
a patch to remove this logic once the package is updated.

Depends-On: I039c49e6f5872b02c1fdc1690594e0d9bef303f5

Change-Id: I2d06904cc89e398f82ffc8b4f2d862427507d0dc
This commit is contained in:
Oliver Walsh 2021-12-03 22:11:46 +00:00
parent 62713d731b
commit b80b98ffe9
2 changed files with 9 additions and 0 deletions

View File

@ -1,6 +1,14 @@
tcib_actions:
- run: bash /usr/local/bin/uid_gid_manage {{ tcib_user }}
- run: dnf -y install {{ tcib_packages['common'] | join(' ') }} && dnf clean all && rm -rf /var/cache/dnf
- run: >-
if [ -e /usr/share/openstack-tripleo-common-containers/container-images/tcib/base/os/tempest/tempest_sudoers ]; then
cp /usr/share/openstack-tripleo-common-containers/container-images/tcib/base/os/tempest/tempest_sudoers /etc/sudoers.d/tempest_sudoers;
else
sed -e 's/cloud-admin/tempest/' /usr/share/openstack-tripleo-common-containers/container-images/kolla/tripleoclient/tripleoclient_sudoers > /etc/sudoers.d/tempest_sudoers;
fi
- run: chmod 440 /etc/sudoers.d/tempest_sudoers
tcib_packages:
common:
- iputils

View File

@ -0,0 +1 @@
tempest ALL=(ALL) NOPASSWD: ALL