5 Commits

Author SHA1 Message Date
Florian Fuchs
57c9bda9bd Fix chown command in sudoers file
The tripleo-common sudoers file allows an owner change on the
validations identity file. The command is only allowed with the `-h`
option, but this option isn't used everywhere in the code. This breaks
validation runs started through Mistral.

This patch changes the tripleo-common sudoers file to allow the chmod
command with and without the `-h` option.

Change-Id: I8770fc356a46a7a13ba3823a5d157104d08c087a
Closes-Bug: #1716625
2017-09-21 11:45:10 +02:00
Toure Dunnon
34713f3b52 tripleo-common sudoers file is to permissive.
The sudoers files as installed with openstack-tripleo-common package
is much too permissive. It contains several lines for the mistral
user that have wildcards that allow directory traversal with ".."
which grants full passwordless root access to the validations user.

Change-Id: I34073671c8f97d7bfbe1030ed52e6627a07dacfb
Related-Bug: 1705709
2017-07-21 09:46:13 -04:00
Oliver Walsh
f6c286dbe8 Fix race in undercloud cell_v2 host discovery
Ensure that the ironic nodes have been picked up by the nova resource tracker
before running nova-manage cell_v2 host discovery.

Also adds logging of the verbose command output to mistral engine log.

Change-Id: I4cc67935df8f37cdb2d8b0bfd96cf90eb7a6ce25
Closes-Bug: #1660160
2017-02-01 13:56:58 +00:00
Oliver Walsh
185546cfa5 Run nova manage cell_v2 discover_host after ironic nodes are registered
Once cell_v2 is enabled by default in Ocata we will need to run this command
to update the host mappings whenever a new host is added.

Change-Id: I0bb98bfcf0c271ae3b577ca126dd3dfdaece179e
Depends-On: I591b451197dc3bd0783978f5e3d2b1c830afe54e
Related-Bug: #1649341
2017-01-26 14:04:35 +00:00
Martin André
d43f124804 Workflows to run validations
This commit adds a workflow to run ansible validations.

Validations can be run individually or by group, and the result is sent
over the specified zaqar queue.

Change-Id: Iba8b210c83e94eaa340d34e17ad2b0278ecc4e53
Depends-On: I807fed12e9a42a71c130f393370ff4152831c27b
2016-08-29 13:56:49 +02:00