Ensure proper permissions for OVN Metadata service

With change of the user under which ovn-metadata service is
running from root to neutron, it was clean forgot to change an
ownership for existing configuration produced be the service during
upgrades.

This patch adds an extra folder defenition that should ensure ownership
being correct for all files related to the ovn-metadata-proxy service.

Closes-Bug: #2077684
Change-Id: I8e82558fce8a420dca5fb5302dd5f73e40230e48
This commit is contained in:
Dmitriy Rabotyagov 2024-08-26 19:01:02 +02:00
parent b7a96f9b9f
commit d81a2fb7aa

View File

@ -58,6 +58,7 @@
owner: "{{ item.owner | default(neutron_system_user_name) }}"
group: "{{ item.group | default(neutron_system_group_name) }}"
mode: "{{ item.mode | default(omit) }}"
recurse: "{{ item.recurse | default(omit) }}"
when:
- (item.condition | default(true)) | bool
with_items:
@ -72,6 +73,10 @@
group: "root"
- path: "{{ neutron_system_home_folder }}"
mode: "0755"
- path: "{{ neutron_system_home_folder }}/ovn-metadata-proxy"
mode: "u=rwX,g=rX,o=rX"
recurse: True
condition: "{{ (neutron_plugin_type == 'ml2.ovn' and neutron_services['neutron-ovn-metadata-agent']['group'] in group_names) }}"
- path: "{{ neutron_system_home_folder }}/ha_confs"
state: "{{ (neutron_plugin_type == 'ml2.ovn') | ternary('absent', 'directory') }}"