diff --git a/deployment/nova/nova-compute-container-puppet.yaml b/deployment/nova/nova-compute-container-puppet.yaml index 4365746400..b947848c4b 100644 --- a/deployment/nova/nova-compute-container-puppet.yaml +++ b/deployment/nova/nova-compute-container-puppet.yaml @@ -545,6 +545,8 @@ outputs: - {get_attr: [ContainersCommon, container_config_scripts]} - {get_attr: [NovaComputeCommon, container_config_scripts]} docker_config: + step_2: + get_attr: [NovaLogging, docker_config, step_2] step_3: nova_statedir_owner: image: &nova_compute_image {get_param: DockerNovaComputeImage} diff --git a/releasenotes/notes/nova_compute_fix_log_permissions-e866f91848d647fb.yaml b/releasenotes/notes/nova_compute_fix_log_permissions-e866f91848d647fb.yaml new file mode 100644 index 0000000000..9cd72dc514 --- /dev/null +++ b/releasenotes/notes/nova_compute_fix_log_permissions-e866f91848d647fb.yaml @@ -0,0 +1,9 @@ +--- +fixes: + - | + [1] switched to run nova-manage discovery as non root user. In case of + updates there can be already a nove-manage log owned by root from previous + runs. This change make sure we change the owner of nova-manage log to + nova:nova on overcloud deploy runs on the computes + + [1] https://review.opendev.org/#/c/652039/13/deployment/nova/nova-compute-container-puppet.yaml