tripleo-heat-templates/deployment/logging/files/neutron-api.yaml
Jose Luis Franco Arza 94bc023390 Add mode option when creating persistent directories.
Almost every single tripleo service creates a persistent directory. To
simplify the creation, a with_items structure was being used. In which
many times, the mode option was being set. However, that mode option
was not taken into account at the time of creating the file. As a
consequence, the directory was being created with its father directory
rights, instead of the ones being passed in the template.

Change-Id: I215db2bb79029c19ab8c62a7ae8d93cec50fb8dc
Closes-Bug: #1871231
2020-04-20 15:37:08 +02:00

54 lines
1.7 KiB
YAML

heat_template_version: rocky
description: >
OpenStack containerized Neutron API service
parameters:
ContainerNeutronApiImage:
description: image
type: string
NeutronServiceName:
description: service name
type: string
outputs:
cmd_extra_args:
description: Extra command line arguments for running the service in the container.
value:
str_replace:
template: "--log-file=/var/log/neutron/SERVICE.log"
params:
SERVICE: {get_param: NeutronServiceName}
config_settings:
description: Extra hieradata needed to log to files in the host.
value: null
volumes:
description: extra volumes
value: &neutron_api_volumes
- /var/log/containers/neutron:/var/log/neutron:z
- /var/log/containers/httpd/neutron-api:/var/log/httpd:z
docker_config:
description: Extra containers needed for logging to files in the host.
value:
# db sync runs before permissions set by kolla_config
step_2:
neutron_init_logs:
image: {get_param: ContainerNeutronApiImage}
net: none
privileged: false
user: root
volumes: *neutron_api_volumes
command: ['/bin/bash', '-c', 'chown -R neutron:neutron /var/log/neutron']
host_prep_tasks:
description: Extra ansible tasks needed for logging to files in the host.
value:
- name: create persistent directories
file:
path: "{{ item.path }}"
state: directory
setype: "{{ item.setype }}"
mode: "{{ item.mode }}"
with_items:
- { 'path': /var/log/containers/neutron, 'setype': container_file_t, 'mode': '0750' }
- { 'path': /var/log/containers/httpd/neutron-api, 'setype': container_file_t, 'mode': '0750' }