openstack/bifrost
Code Issues Proposed changes

Do not run ironic-prometheus-exporter as root

Browse Source 
Change-Id: Iffaf74e537a5b9c72c99ab983e53c38a2d14b139
This commit is contained in:
Dmitry Tantsur 2022-01-14 17:50:36 +01:00
parent 5fd6251f22
commit 96ff3df09a
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
playbooks/roles/bifrost-ironic-install/templates/ironic-prometheus-exporter.service.j2
View File

@ -8,3 +8,5 @@ ExecStart={{ bifrost_venv_dir }}/bin/gunicorn ironic_prometheus_exporter.app.wsg
--bind {{ prometheus_exporter_host }}:{{ prometheus_exporter_port}} \
--env IRONIC_CONFIG=/etc/ironic/ironic.conf \
--workers 2 --threads 2 --access-logfile=- --error-logfile=-
User=ironic
Group=ironic

4
releasenotes/notes/prometheus-user-e75a43f1b13e0049.yaml Normal file
View File

@ -0,0 +1,4 @@
---
fixes:
- |
Ironic Prometheus Exporter is now run as the ``ironic`` user, not as root.