Skip to content
Snippets Groups Projects
Commit 924fbb6f authored by Christian Berendt's avatar Christian Berendt
Browse files

Fix permissions of tmp files

When running kolla-ansible as non-root users the tmp files will
be created with become user as owner and mode 0600. This way the user
running kolla-ansible is not able to read the generated files. This
is necessary because of the use of the lookup method, which will
not run as become user.

TrivialFix

Change-Id: If86d114c05a9b2e7fa240718611d78e93100ebdf
parent ea747d7c
No related branches found
No related tags found
No related merge requests found
...@@ -6,7 +6,7 @@ ...@@ -6,7 +6,7 @@
run_once: True run_once: True
- name: Creating temp file on localhost - name: Creating temp file on localhost
local_action: copy content=None dest=/tmp/kolla_ceph_cluster mode=0600 local_action: copy content=None dest=/tmp/kolla_ceph_cluster mode=0644
changed_when: False changed_when: False
always_run: True always_run: True
run_once: True run_once: True
...@@ -19,7 +19,7 @@ ...@@ -19,7 +19,7 @@
register: ceph_mon_config_volume register: ceph_mon_config_volume
- name: Writing hostname of host with existing cluster files to temp file - name: Writing hostname of host with existing cluster files to temp file
local_action: copy content="{{ inventory_hostname }}" dest=/tmp/kolla_ceph_cluster mode=0600 local_action: copy content="{{ inventory_hostname }}" dest=/tmp/kolla_ceph_cluster mode=0644
changed_when: False changed_when: False
always_run: True always_run: True
when: not ceph_mon_config_volume.changed when: not ceph_mon_config_volume.changed
......
...@@ -6,7 +6,7 @@ ...@@ -6,7 +6,7 @@
run_once: True run_once: True
- name: Creating temp file on localhost - name: Creating temp file on localhost
local_action: copy content=None dest=/tmp/kolla_mariadb_cluster mode=0600 local_action: copy content=None dest=/tmp/kolla_mariadb_cluster mode=0644
changed_when: False changed_when: False
always_run: True always_run: True
run_once: True run_once: True
...@@ -19,7 +19,7 @@ ...@@ -19,7 +19,7 @@
register: mariadb_volume register: mariadb_volume
- name: Writing hostname of host with existing cluster files to temp file - name: Writing hostname of host with existing cluster files to temp file
local_action: copy content={{ ansible_hostname }} dest=/tmp/kolla_mariadb_cluster mode=0600 local_action: copy content={{ ansible_hostname }} dest=/tmp/kolla_mariadb_cluster mode=0644
changed_when: False changed_when: False
always_run: True always_run: True
when: not mariadb_volume | changed when: not mariadb_volume | changed
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment