Merge "Don't use become for Kolla Ansible"

ansible/group_vars/all/kolla

@@ -335,7 +335,7 @@ kolla_ansible_group: kolla
 
 # Whether to use privilege escalation for all operations performed via Kolla
 # Ansible.
-kolla_ansible_become: true
+kolla_ansible_become: false
 
 ###############################################################################
 # Kolla feature flag configuration.

ansible/roles/kolla-ansible/defaults/main.yml

@@ -54,7 +54,7 @@ kolla_ansible_group: kolla
 
 # Whether to use privilege escalation for all operations performed via Kolla
 # Ansible.
-kolla_ansible_become: true
+kolla_ansible_become: false
 
 ###############################################################################
 # Kolla-ansible inventory configuration.

doc/source/configuration/kolla-ansible.rst

@@ -151,7 +151,7 @@ The following variables affect how Ansible accesses the remote hosts.
     Primary group of Kolla SSH user. Default is ``kolla``.
 ``kolla_ansible_become``
     Whether to use privilege escalation for all operations performed via Kolla
-    Ansible. Default is ``true``.
+    Ansible. Default is ``false`` since the 8.0.0 Ussuri release.
 ``kolla_ansible_target_venv``
     Path to a virtual environment on remote hosts to use for Ansible module
     execution. Default is ``{{ virtualenv_path }}/kolla-ansible``. May be set

etc/kayobe/kolla.yml

@@ -169,7 +169,7 @@
 #kolla_ansible_group:
 
 # Whether to use privilege escalation for all operations performed via Kolla
-# Ansible. Default is 'true'.
+# Ansible. Default is 'false'.
 #kolla_ansible_become:
 
 ###############################################################################

releasenotes/notes/kolla-ansible-become-false-95aa88edd3c8c259.yaml

+---
+upgrade:
+  - |
+    Modifies the default value of ``kolla_ansible_become`` to ``false``. This
+    means that Kolla Ansible will no longer use privilege escalation for all
+    tasks, and will only use it where necessary.