openstack/openstack-helm
Code Issues Proposed changes

Add cinder rootwrap

Browse Source 
Currently cinder doesn't include the template for adding
rootwrap. As we look to include additional backends, we'll require
rootwrap.conf to be present for cinder function properly

Change-Id: Id8af3637edca12bc54edc9e25f5f88b2ef0cc410
This commit is contained in:
Steve Wilkerson 2017-04-12 08:07:06 -05:00
parent adf574918b
commit 9e4ada022c
2 changed files with 29 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cinder/templates/configmap-etc.yaml
View File

@ -19,6 +19,8 @@ metadata:
data:
cinder.conf: |+
{{ tuple "etc/_cinder.conf.tpl" . | include "helm-toolkit.template" | indent 4 }}
rootwrap.conf: |+
{{ tuple "etc/_rootwrap.conf.tpl" . | include "helm-toolkit.template" | indent 4 }}
api-paste.ini: |+
{{ tuple "etc/_cinder-api-paste.ini.tpl" . | include "helm-toolkit.template" | indent 4 }}
policy.json: |+

27
cinder/templates/etc/_rootwrap.conf.tpl Normal file
View File

@ -0,0 +1,27 @@
# Configuration for cinder-rootwrap
# This file should be owned by (and only-writeable by) the root user
[DEFAULT]
# List of directories to load filter definitions from (separated by ',').
# These directories MUST all be only writeable by root !
filters_path=/etc/cinder/rootwrap.d
# List of directories to search executables in, in case filters do not
# explicitely specify a full path (separated by ',')
# If not specified, defaults to system PATH environment variable.
# These directories MUST all be only writeable by root !
exec_dirs=/sbin,/usr/sbin,/bin,/usr/bin,/usr/local/bin,/usr/local/sbin
# Enable logging to syslog
# Default value is False
use_syslog=False
# Which syslog facility to use.
# Valid values include auth, authpriv, syslog, local0, local1...
# Default value is 'syslog'
syslog_log_facility=syslog
# Which messages to log.
# INFO means log all usage
# ERROR means only log unsuccessful attempts
syslog_log_level=ERROR