openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Run nova_api unprivileged 

Running it privileged is no longer necessary and bad for security.

Resolves: rhbz#1767385

Change-Id: I715ed03ddd961bfc6a4ff3693afa7e1dae4687c6
(cherry picked from commit 268aad2258)
This commit is contained in:
Grzegorz Grasza 2019-04-02 14:52:00 +02:00
parent b6c0899c3f
commit 80133ccb83
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docker/services/nova-api.yaml
View File

@ -230,7 +230,7 @@ outputs:
image: *nova_api_image
net: host
user: root
privileged: true
privileged: false
restart: always
healthcheck:
test: /openstack/healthcheck