Remove glance_cinder_store filters override
At the moment glance_cinder_store.filters is distributed through glance_store [1] package. Moreover, for quite some time glance has migrated to using privsep [2] so internally maintained filters are not up to date anymore. [1]f3f5bdb45b/etc/glance/rootwrap.d/glance_cinder_store.filters
[2]c369ba013f
Related-Bug: #900930 Change-Id: Ie097a019f058bac123acf14f51253c272c56aca5
This commit is contained in:
parent
c2428ab8da
commit
ff895d3bad
@ -1,29 +0,0 @@
|
||||
# glance-rootwrap command filters for glance cinder store
|
||||
# This file should be owned by (and only-writable by) the root user
|
||||
|
||||
[Filters]
|
||||
# cinder store driver
|
||||
disk_chown: RegExpFilter, chown, root, chown, \d+, /dev/(?!.*/\.\.).*
|
||||
|
||||
# os-brick
|
||||
mount: CommandFilter, mount, root
|
||||
blockdev: RegExpFilter, blockdev, root, blockdev, (--getsize64|--flushbufs), /dev/.*
|
||||
tee: CommandFilter, tee, root
|
||||
mkdir: CommandFilter, mkdir, root
|
||||
chown: RegExpFilter, chown, root, chown root:root /etc/pstorage/clusters/(?!.*/\.\.).*
|
||||
ip: CommandFilter, ip, root
|
||||
dd: CommandFilter, dd, root
|
||||
iscsiadm: CommandFilter, iscsiadm, root
|
||||
aoe-revalidate: CommandFilter, aoe-revalidate, root
|
||||
aoe-discover: CommandFilter, aoe-discover, root
|
||||
aoe-flush: CommandFilter, aoe-flush, root
|
||||
read_initiator: ReadFileFilter, /etc/iscsi/initiatorname.iscsi
|
||||
multipath: CommandFilter, multipath, root
|
||||
multipathd: CommandFilter, multipathd, root
|
||||
systool: CommandFilter, systool, root
|
||||
sg_scan: CommandFilter, sg_scan, root
|
||||
cp: CommandFilter, cp, root
|
||||
drv_cfg: CommandFilter, /opt/emc/scaleio/sdc/bin/drv_cfg, root, /opt/emc/scaleio/sdc/bin/drv_cfg, --query_guid
|
||||
sds_cli: CommandFilter, /usr/local/bin/sds/sds_cli, root
|
||||
vgc-cluster: CommandFilter, vgc-cluster, root
|
||||
scsi_id: CommandFilter, /lib/udev/scsi_id, root
|
@ -13,33 +13,6 @@
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# NOTE(CeeMac): This task is required to copy rootwrap filters that we need
|
||||
# and glance does not provide by default.
|
||||
- name: Create aux glance dir
|
||||
file:
|
||||
path: "{{ item.path | default(omit) }}"
|
||||
state: "directory"
|
||||
owner: "{{ item.owner | default(glance_system_user_name) }}"
|
||||
group: "{{ item.group | default(glance_system_group_name) }}"
|
||||
mode: "{{ item.mode | default('0755') }}"
|
||||
loop:
|
||||
- path: "/etc/glance/rootwrap.d"
|
||||
owner: "root"
|
||||
group: "root"
|
||||
|
||||
- name: Copy glance rootwrap filter config
|
||||
copy:
|
||||
src: "{{ item }}"
|
||||
dest: "/etc/glance/rootwrap.d/"
|
||||
owner: "root"
|
||||
group: "root"
|
||||
mode: "0644"
|
||||
with_fileglob:
|
||||
- rootwrap.d/*
|
||||
tags:
|
||||
- glance-config
|
||||
- glance-post-install
|
||||
|
||||
- name: Deploy Glance configuration files
|
||||
openstack.config_template.config_template:
|
||||
src: "{{ item.src | default(omit) }}"
|
||||
|
Loading…
x
Reference in New Issue
Block a user