Merge "Fix that cyborg agent failed to start privsep daemon."

ansible/roles/cyborg/defaults/main.yml

@@ -13,6 +13,7 @@ cyborg_services:
     container_name: cyborg_agent
     group: cyborg-agent
     enabled: true
+    privileged: true
     image: "{{ cyborg_agent_image_full }}"
     volumes: "{{ cyborg_agent_default_volumes + cyborg_agent_extra_volumes }}"
     dimensions: "{{ cyborg_agent_dimensions }}"

ansible/roles/cyborg/handlers/main.yml

@@ -9,6 +9,7 @@
     common_options: "{{ docker_common_options }}"
     name: "{{ service.container_name }}"
     image: "{{ service.image }}"
+    privileged: "{{ service.privileged | default(False) }}"
     volumes: "{{ service.volumes }}"
     dimensions: "{{ service.dimensions }}"
   when:
@@ -24,6 +25,7 @@
     common_options: "{{ docker_common_options }}"
     name: "{{ service.container_name }}"
     image: "{{ service.image }}"
+    privileged: "{{ service.privileged | default(False) }}"
     volumes: "{{ service.volumes }}"
     dimensions: "{{ service.dimensions }}"
   when:
@@ -39,6 +41,7 @@
     common_options: "{{ docker_common_options }}"
     name: "{{ service.container_name }}"
     image: "{{ service.image }}"
+    privileged: "{{ service.privileged | default(False) }}"
     volumes: "{{ service.volumes }}"
     dimensions: "{{ service.dimensions }}"
   when:

ansible/roles/cyborg/tasks/check-containers.yml

@@ -6,6 +6,7 @@
     common_options: "{{ docker_common_options }}"
     name: "{{ item.value.container_name }}"
     image: "{{ item.value.image }}"
+    privileged: "{{ item.value.privileged | default(False) }}"
     volumes: "{{ item.value.volumes }}"
     dimensions: "{{ item.value.dimensions }}"
   when:

releasenotes/notes/add-privileged-capability-to-cyborg-agent-14db36a5818847d1.yaml

@@ -0,0 +1,6 @@
+---
+fixes:
+  - |
+    Fix that cyborg agent failed to start privsep daemon. Add privileged
+    capability for cyborg agent. See `bug 1873715
+    <https://bugs.launchpad.net/kolla-ansible/+bug/1873715>`__.