Use net=none for *_init_log(s) containers
It seems we're using the default docker0(docker)/cni0(podman) bridges for these containers. It would be good to remove dependencies on these default bridges. Some other containers changed that have the same issue: - ironic_inspector_init_dnsmasq_dhcp_hostsdir - nova_statedir_owner - swift_setup_srv - swift_copy_rings - horizon_fix_perms Change-Id: Id3e60de7bb5a13e32544bed76e4970d53a9257d4
This commit is contained in:
parent
9b284e74cb
commit
87bc72a37c
@ -164,6 +164,7 @@ outputs:
|
||||
step_2:
|
||||
aodh_init_log:
|
||||
image: &aodh_api_image {get_param: DockerAodhApiImage}
|
||||
net: none
|
||||
user: root
|
||||
volumes:
|
||||
- /var/log/containers/aodh:/var/log/aodh:z
|
||||
|
@ -247,6 +247,7 @@ outputs:
|
||||
step_2:
|
||||
cinder_api_init_logs:
|
||||
image: &cinder_api_image {get_param: DockerCinderApiImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -190,6 +190,7 @@ outputs:
|
||||
cinder_backup_init_logs:
|
||||
start_order: 0
|
||||
image: &cinder_backup_image {get_param: DockerCinderBackupImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -171,6 +171,7 @@ outputs:
|
||||
cinder_backup_init_logs:
|
||||
start_order: 0
|
||||
image: {get_param: DockerCinderBackupImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -112,6 +112,7 @@ outputs:
|
||||
step_2:
|
||||
cinder_scheduler_init_logs:
|
||||
image: &cinder_scheduler_image {get_param: DockerCinderSchedulerImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -286,6 +286,7 @@ outputs:
|
||||
cinder_volume_init_logs:
|
||||
start_order: 0
|
||||
image: &cinder_volume_image {get_param: DockerCinderVolumeImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -155,6 +155,7 @@ outputs:
|
||||
cinder_volume_init_logs:
|
||||
start_order: 0
|
||||
image: {get_param: DockerCinderVolumeImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -23,6 +23,7 @@ outputs:
|
||||
step_2:
|
||||
glance_init_logs:
|
||||
image: {get_param: DockerGlanceApiImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes: *glance_api_volumes
|
||||
|
@ -206,6 +206,7 @@ outputs:
|
||||
step_2:
|
||||
ironic_init_logs:
|
||||
image: &ironic_api_image {get_param: DockerIronicApiImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -347,6 +347,7 @@ outputs:
|
||||
start_order: 0
|
||||
image: &ironic_inspector_image
|
||||
get_param: DockerIronicInspectorImage
|
||||
net: none
|
||||
user: root
|
||||
volumes:
|
||||
- /var/log/containers/ironic-inspector:/var/log/ironic-inspector:z
|
||||
@ -355,6 +356,7 @@ outputs:
|
||||
ironic_inspector_init_dnsmasq_dhcp_hostsdir:
|
||||
start_order: 1
|
||||
image: *ironic_inspector_image
|
||||
net: none
|
||||
user: root
|
||||
volumes:
|
||||
- /var/lib/ironic-inspector/dhcp-hostsdir:/var/lib/ironic-inspector/dhcp-hostsdir:shared,z
|
||||
|
@ -280,6 +280,7 @@ outputs:
|
||||
step_2:
|
||||
zaqar_init_log:
|
||||
image: &zaqar_image {get_param: DockerZaqarImage}
|
||||
net: none
|
||||
user: root
|
||||
volumes:
|
||||
- /var/log/containers/zaqar:/var/log/zaqar
|
||||
|
@ -95,6 +95,7 @@ outputs:
|
||||
ceilometer_init_log:
|
||||
start_order: 0
|
||||
image: &ceilometer_agent_central_image {get_param: DockerCeilometerCentralImage}
|
||||
net: none
|
||||
user: root
|
||||
command: ['/bin/bash', '-c', 'chown -R ceilometer:ceilometer /var/log/ceilometer']
|
||||
volumes:
|
||||
|
@ -95,6 +95,7 @@ outputs:
|
||||
ceilometer_init_log:
|
||||
start_order: 0
|
||||
image: &ceilometer_agent_ipmi_image {get_param: DockerCeilometerIpmiImage}
|
||||
net: none
|
||||
user: root
|
||||
command: ['/bin/bash', '-c', 'chown -R ceilometer:ceilometer /var/log/ceilometer']
|
||||
volumes:
|
||||
|
@ -113,6 +113,7 @@ outputs:
|
||||
ceilometer_init_log:
|
||||
start_order: 0
|
||||
image: &ceilometer_agent_notification_image {get_param: DockerCeilometerNotificationImage}
|
||||
net: none
|
||||
user: root
|
||||
command: ['/bin/bash', '-c', 'chown -R ceilometer:ceilometer /var/log/ceilometer']
|
||||
volumes:
|
||||
|
@ -95,6 +95,7 @@ outputs:
|
||||
step_2:
|
||||
congress_init_logs:
|
||||
image: &congress_api_image {get_param: DockerCongressApiImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -124,6 +124,7 @@ outputs:
|
||||
step_1:
|
||||
mysql_init_logs:
|
||||
image: &mysql_image {get_param: DockerMysqlImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -105,6 +105,7 @@ outputs:
|
||||
start_order: 0
|
||||
detach: false
|
||||
image: &redis_image {get_param: DockerRedisImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -104,6 +104,7 @@ outputs:
|
||||
step_2:
|
||||
designate_init_logs:
|
||||
image: &designate_central_image {get_param: DockerDesignateCentralImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -125,6 +125,7 @@ outputs:
|
||||
step_2:
|
||||
ec2_api_init_logs:
|
||||
image: &ec2_api_image {get_param: DockerEc2ApiImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -154,6 +154,7 @@ outputs:
|
||||
step_2:
|
||||
gnocchi_init_log:
|
||||
image: &gnocchi_api_image {get_param: DockerGnocchiApiImage}
|
||||
net: none
|
||||
user: root
|
||||
volumes:
|
||||
- /var/log/containers/gnocchi:/var/log/gnocchi:z
|
||||
|
@ -102,6 +102,7 @@ outputs:
|
||||
step_2:
|
||||
horizon_fix_perms:
|
||||
image: &horizon_image {get_param: DockerHorizonImage}
|
||||
net: none
|
||||
user: root
|
||||
# NOTE Set ownership for /var/log/horizon/horizon.log file here,
|
||||
# otherwise it's created by root when generating django cache.
|
||||
|
@ -26,6 +26,7 @@ outputs:
|
||||
step_2:
|
||||
barbican_init_log:
|
||||
image: {get_param: DockerBarbicanApiImage}
|
||||
net: none
|
||||
user: root
|
||||
volumes: *barbican_api_volumes
|
||||
command: ['/bin/bash', '-c', 'chown -R barbican:barbican /var/log/barbican']
|
||||
|
@ -22,6 +22,7 @@ outputs:
|
||||
step_2:
|
||||
heat_init_log:
|
||||
image: {get_param: DockerHeatEngineImage}
|
||||
net: none
|
||||
user: root
|
||||
volumes:
|
||||
- /var/log/containers/heat:/var/log/heat:z
|
||||
|
@ -24,6 +24,7 @@ outputs:
|
||||
keystone_init_log:
|
||||
start_order: 1
|
||||
image: {get_param: DockerKeystoneImage}
|
||||
net: none
|
||||
user: root
|
||||
command: ['/bin/bash', '-c', 'chown -R keystone:keystone /var/log/keystone']
|
||||
volumes: *keystone_volumes
|
||||
|
@ -34,6 +34,7 @@ outputs:
|
||||
step_2:
|
||||
neutron_init_logs:
|
||||
image: {get_param: DockerNeutronApiImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes: *neutron_api_volumes
|
||||
|
@ -24,6 +24,7 @@ outputs:
|
||||
# db sync runs before permissions set by kolla_config
|
||||
nova_api_init_logs:
|
||||
image: {get_param: DockerNovaApiImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes: *nova_api_volumes
|
||||
|
@ -41,6 +41,7 @@ outputs:
|
||||
map_replace:
|
||||
- CONTAINERNAME:
|
||||
image: {get_param: DockerNovaImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -23,6 +23,7 @@ outputs:
|
||||
step_2:
|
||||
nova_metadata_init_logs:
|
||||
image: {get_param: DockerNovaMetadataImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes: *nova_metadata_volumes
|
||||
|
@ -24,6 +24,7 @@ outputs:
|
||||
nova_placement_init_log:
|
||||
start_order: 1
|
||||
image: {get_param: DockerNovaPlacementImage}
|
||||
net: none
|
||||
user: root
|
||||
command: ['/bin/bash', '-c', 'chown -R nova:nova /var/log/nova']
|
||||
volumes: *nova_placement_volumes
|
||||
|
@ -26,6 +26,7 @@ outputs:
|
||||
step_2:
|
||||
panko_init_log:
|
||||
image: {get_param: DockerPankoApiImage}
|
||||
net: none
|
||||
user: root
|
||||
volumes: *panko_api_volumes
|
||||
command: ['/bin/bash', '-c', 'chown -R panko:panko /var/log/panko']
|
||||
|
@ -86,6 +86,7 @@ outputs:
|
||||
step_2:
|
||||
manila_init_logs:
|
||||
image: &manila_api_image {get_param: DockerManilaApiImage}
|
||||
net: none
|
||||
user: root
|
||||
volumes:
|
||||
- /var/log/containers/manila:/var/log/manila:z
|
||||
|
@ -123,6 +123,7 @@ outputs:
|
||||
start_order: 0
|
||||
detach: false
|
||||
image: &rabbitmq_image {get_param: DockerRabbitmqImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -92,6 +92,7 @@ outputs:
|
||||
start_order: 0
|
||||
detach: false
|
||||
image: &qdrouterd_image {get_param: DockerQdrouterdImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -123,6 +123,7 @@ outputs:
|
||||
start_order: 0
|
||||
detach: false
|
||||
image: &rabbitmq_image {get_param: DockerRabbitmqImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -183,6 +183,7 @@ outputs:
|
||||
start_order: 0
|
||||
detach: false
|
||||
image: &qdrouterd_image {get_param: DockerMetricsQdrImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -95,6 +95,7 @@ outputs:
|
||||
step_2:
|
||||
mistral_init_logs:
|
||||
image: &mistral_api_image {get_param: DockerMistralApiImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -183,6 +183,7 @@ outputs:
|
||||
step_3:
|
||||
nova_statedir_owner:
|
||||
image: &nova_compute_image {get_param: DockerNovaComputeImage}
|
||||
net: none
|
||||
user: root
|
||||
privileged: false
|
||||
detach: false
|
||||
|
@ -108,6 +108,7 @@ outputs:
|
||||
step_3:
|
||||
nova_statedir_owner:
|
||||
image: &nova_ironic_image {get_param: DockerNovaComputeIronicImage}
|
||||
net: none
|
||||
user: root
|
||||
privileged: false
|
||||
detach: false
|
||||
|
@ -136,6 +136,7 @@ outputs:
|
||||
manila_share_init_logs:
|
||||
start_order: 0
|
||||
image: {get_param: DockerManilaShareImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -84,6 +84,7 @@ outputs:
|
||||
start_order: 0
|
||||
detach: false
|
||||
image: &qdrouterd_image {get_param: DockerQdrouterdImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -122,6 +122,7 @@ outputs:
|
||||
start_order: 0
|
||||
detach: false
|
||||
image: &rabbitmq_image {get_param: DockerRabbitmqImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -104,6 +104,7 @@ outputs:
|
||||
step_3:
|
||||
swift_copy_rings:
|
||||
image: *swift_ringbuilder_image
|
||||
net: none
|
||||
user: root
|
||||
detach: false
|
||||
command:
|
||||
|
@ -224,6 +224,7 @@ outputs:
|
||||
# directory and make sure it's owned by swift.
|
||||
swift_setup_srv:
|
||||
image: &swift_account_image {get_param: DockerSwiftAccountImage}
|
||||
net: none
|
||||
user: root
|
||||
command: ['chown', '-R', 'swift:', '/srv/node']
|
||||
volumes:
|
||||
|
@ -91,6 +91,7 @@ outputs:
|
||||
step_2:
|
||||
tacker_init_logs:
|
||||
image: &tacker_image {get_param: DockerTackerImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
@ -49,6 +49,7 @@ outputs:
|
||||
step_2:
|
||||
tempest_init_logs:
|
||||
image: &tempest_image {get_param: DockerTempestImage}
|
||||
net: none
|
||||
privileged: false
|
||||
user: root
|
||||
volumes:
|
||||
|
Loading…
Reference in New Issue
Block a user