006ff07185
This is a prerequisite for patchset #745164 This fixes unwanted restarts during copying of certificates. By removing conditional statements from role handlers in #745164, copying certificates caused containers to restart, this is unwanted during the genconfig process. However, if we would remove handler notifiers from copying certificates, the container would never restart, since from #745164, containers will restart only if any of the files specified in config.json change. Certificates are now copied to intermediary location inside of the container, from which the script kolla_copy_cacerts will install them in the trust store. Depends-on: https://review.opendev.org/c/openstack/kolla/+/926882 Change-Id: Ib89048c7e0f250182c4bf57d8c8a1b5478e9b4ab Signed-off-by: Roman Krček <roman.krcek@tietoevry.com>
66 lines
2.4 KiB
Django/Jinja
66 lines
2.4 KiB
Django/Jinja
{
|
|
"command": "glance-api",
|
|
"config_files": [
|
|
{
|
|
"source": "{{ container_config_directory }}/glance-api.conf",
|
|
"dest": "/etc/glance/glance-api.conf",
|
|
"owner": "glance",
|
|
"perm": "0600"
|
|
}{% if glance_policy_file is defined %},
|
|
{
|
|
"source": "{{ container_config_directory }}/{{ glance_policy_file }}",
|
|
"dest": "/etc/glance/{{ glance_policy_file }}",
|
|
"owner": "glance",
|
|
"perm": "0600"
|
|
}{% endif %}{% if glance_backend_ceph | bool %},
|
|
{
|
|
"source": "{{ container_config_directory }}/ceph",
|
|
"dest": "/etc/ceph",
|
|
"owner": "glance",
|
|
"perm": "0600"
|
|
}{% endif %}{% if glance_backend_swift | bool %},
|
|
{
|
|
"source": "{{ container_config_directory }}/glance-swift.conf",
|
|
"dest": "/etc/glance/glance-swift.conf",
|
|
"owner": "glance",
|
|
"perm": "0600"
|
|
}{% endif %}{% if enable_glance_image_cache | bool %},
|
|
{
|
|
"source": "{{ container_config_directory }}/glance-cache.conf",
|
|
"dest": "/etc/glance/glance-cache.conf",
|
|
"owner": "glance",
|
|
"perm": "0600"
|
|
}{% endif %}{% if glance_enable_interoperable_image_import | bool %},
|
|
{
|
|
"source": "{{ container_config_directory }}/glance-image-import.conf",
|
|
"dest": "/etc/glance/glance.conf.d/glance-image-import.conf",
|
|
"owner": "glance",
|
|
"perm": "0600"
|
|
}{% endif %}{% if glance_enable_property_protection | bool %},
|
|
{
|
|
"source": "{{ container_config_directory }}/property-protections-rules.conf",
|
|
"dest": "/etc/glance/property-protections-rules.conf",
|
|
"owner": "glance",
|
|
"perm": "0600"
|
|
}{% endif %}{% if glance_copy_certs | bool %},
|
|
{
|
|
"source": "{{ container_config_directory }}/ca-certificates",
|
|
"dest": "/var/lib/kolla/share/ca-certificates",
|
|
"owner": "root",
|
|
"perm": "0600"
|
|
}{% endif %}
|
|
],
|
|
"permissions": [
|
|
{
|
|
"path": "/var/lib/glance",
|
|
"owner": "glance:glance",
|
|
"recurse": true
|
|
},
|
|
{
|
|
"path": "/var/log/kolla/glance",
|
|
"owner": "glance:glance",
|
|
"recurse": true
|
|
}
|
|
]
|
|
}
|