openstack/openstack-helm
Code Issues Proposed changes
e40d114d80
openstack-helm/tools/overrides/releases/pike/kolla.yaml
Pete Birley 4a6d740154 Keystone: Stop running keystone container with root user 
This PS updates the keystoen chart to stop running the keystone api
as the root user.

Change-Id: If3042210f761476846da02fc8e648c700267a591
Signed-off-by: Pete Birley <pete@port.direct>
2018-08-04 10:06:32 -05:00

108 lines
6.0 KiB
YAML
Raw Blame History

conf:
neutron:
agent:
root_helper: sudo /var/lib/kolla/venv/bin/neutron-rootwrap /etc/neutron/rootwrap.conf
images:
tags:
barbican_api: 'docker.io/kolla/ubuntu-source-barbican-api:pike'
barbican_db_sync: 'docker.io/kolla/ubuntu-source-barbican-api:pike'
bootstrap: 'docker.io/kolla/ubuntu-source-heat-engine:pike'
cinder_api: 'docker.io/kolla/ubuntu-source-cinder-api:pike'
cinder_backup: 'docker.io/kolla/ubuntu-source-cinder-backup:pike'
cinder_db_sync: 'docker.io/kolla/ubuntu-source-cinder-api:pike'
cinder_scheduler: 'docker.io/kolla/ubuntu-source-cinder-scheduler:pike'
cinder_volume: 'docker.io/kolla/ubuntu-source-cinder-volume:pike'
cinder_volume_usage_audit: 'docker.io/kolla/ubuntu-source-cinder-volume:pike'
congress_api: 'docker.io/kolla/ubuntu-source-congress-api:pike'
congress_datasource: 'docker.io/kolla/ubuntu-source-congress-datasource:pike'
congress_db_sync: 'docker.io/kolla/ubuntu-source-congress-api:pike'
congress_ds_create: 'docker.io/kolla/ubuntu-source-congress-api:pike'
congress_policy_engine: 'docker.io/kolla/ubuntu-source-congress-policy-engine:pike'
congress_scripted_test: 'docker.io/kolla/ubuntu-source-congress-api:pike'
db_drop: 'docker.io/kolla/ubuntu-source-heat-engine:pike'
db_init: 'docker.io/kolla/ubuntu-source-heat-engine:pike'
glance_api: 'docker.io/kolla/ubuntu-source-glance-api:pike'
glance_bootstrap: 'docker.io/kolla/ubuntu-source-heat-engine:pike'
glance_db_sync: 'docker.io/kolla/ubuntu-source-glance-api:pike'
glance_registry: 'docker.io/kolla/ubuntu-source-glance-registry:pike'
heat_api: 'docker.io/kolla/ubuntu-source-heat-api:pike'
heat_cfn: 'docker.io/kolla/ubuntu-source-heat-api:pike'
heat_cloudwatch: 'docker.io/kolla/ubuntu-source-heat-api:pike'
heat_db_sync: 'docker.io/kolla/ubuntu-source-heat-api:pike'
heat_engine: 'docker.io/kolla/ubuntu-source-heat-engine:pike'
heat_engine_cleaner: 'docker.io/kolla/ubuntu-source-heat-engine:pike'
horizon: 'docker.io/kolla/ubuntu-source-horizon:pike'
horizon_db_sync: 'docker.io/kolla/ubuntu-source-horizon:pike'
ironic_api: 'docker.io/kolla/ubuntu-source-ironic-api:pike'
ironic_bootstrap: 'docker.io/kolla/ubuntu-source-heat-engine:pike'
ironic_conductor: 'docker.io/kolla/ubuntu-source-ironic-conductor:pike'
ironic_db_sync: 'docker.io/kolla/ubuntu-source-ironic-api:pike'
ironic_pxe: 'docker.io/kolla/ubuntu-source-ironic-pxe:pike'
ironic_pxe_init: 'docker.io/kolla/ubuntu-source-ironic-pxe:pike'
keystone_api: 'docker.io/kolla/ubuntu-source-keystone:pike'
keystone_bootstrap: 'docker.io/kolla/ubuntu-source-keystone:pike'
keystone_credential_rotate: 'docker.io/kolla/ubuntu-source-keystone:pike'
keystone_credential_setup: 'docker.io/kolla/ubuntu-source-keystone:pike'
keystone_db_sync: 'docker.io/kolla/ubuntu-source-keystone:pike'
keystone_domain_manage: 'docker.io/kolla/ubuntu-source-keystone:pike'
keystone_fernet_rotate: 'docker.io/kolla/ubuntu-source-keystone:pike'
keystone_fernet_setup: 'docker.io/kolla/ubuntu-source-keystone:pike'
ks_endpoints: 'docker.io/kolla/ubuntu-source-heat-engine:pike'
ks_service: 'docker.io/kolla/ubuntu-source-heat-engine:pike'
ks_user: 'docker.io/kolla/ubuntu-source-heat-engine:pike'
magnum_api: 'docker.io/kolla/ubuntu-source-magnum-api:pike'
magnum_conductor: 'docker.io/kolla/ubuntu-source-magnum-conductor:pike'
magnum_db_sync: 'docker.io/kolla/ubuntu-source-magnum-api:pike'
neutron_db_sync: 'docker.io/kolla/ubuntu-source-neutron-server:pike'
neutron_dhcp: 'docker.io/kolla/ubuntu-source-neutron-dhcp-agent:pike'
neutron_l3: 'docker.io/kolla/ubuntu-source-neutron-l3-agent:pike'
neutron_linuxbridge_agent: 'docker.io/kolla/ubuntu-source-neutron-linuxbridge-agent:pike'
neutron_metadata: 'docker.io/kolla/ubuntu-source-neutron-metadata-agent:pike'
neutron_openvswitch_agent: 'docker.io/kolla/ubuntu-source-neutron-openvswitch-agent:pike'
neutron_server: 'docker.io/kolla/ubuntu-source-neutron-server:pike'
nova_api: 'docker.io/kolla/ubuntu-source-nova-api:pike'
nova_cell_setup: 'docker.io/kolla/ubuntu-source-nova-api:pike'
nova_cell_setup_init: 'docker.io/kolla/ubuntu-source-nova-api:pike'
nova_compute: 'docker.io/kolla/ubuntu-source-nova-compute:pike'
nova_compute_ironic: 'docker.io/kolla/ubuntu-source-nova-compute-ironic:pike'
nova_compute_ssh: 'docker.io/kolla/ubuntu-source-nova-ssh:pike'
nova_conductor: 'docker.io/kolla/ubuntu-source-nova-conductor:pike'
nova_consoleauth: 'docker.io/kolla/ubuntu-source-nova-consoleauth:pike'
nova_db_sync: 'docker.io/kolla/ubuntu-source-nova-api:pike'
nova_novncproxy: 'docker.io/kolla/ubuntu-source-nova-novncproxy:pike'
nova_novncproxy_assets: 'docker.io/kolla/ubuntu-source-nova-novncproxy:pike'
nova_placement: 'docker.io/kolla/ubuntu-source-nova-placement-api:pike'
nova_scheduler: 'docker.io/kolla/ubuntu-source-nova-scheduler:pike'
nova_spiceproxy: 'docker.io/kolla/ubuntu-source-nova-spicehtml5proxy:pike'
nova_spiceproxy_assets: 'docker.io/kolla/ubuntu-source-nova-spicehtml5proxy:pike'
scripted_test: 'docker.io/kolla/ubuntu-source-heat-engine:pike'
senlin_api: 'docker.io/kolla/ubuntu-source-senlin-api:pike'
senlin_db_sync: 'docker.io/kolla/ubuntu-source-senlin-api:pike'
senlin_engine: 'docker.io/kolla/ubuntu-source-senlin-engine:pike'
senlin_engine_cleaner: 'docker.io/kolla/ubuntu-source-senlin-engine:pike'
tempest: 'docker.io/kolla/ubuntu-source-tempest:pike'
test: 'docker.io/kolla/ubuntu-source-rally:pike'
pod:
#NOTE(portdirect): see https://github.com/openstack/kolla/blob/f62f5ae2fa5e7808722f9b37b48a50b39c20b46d/kolla/common/config.py#L695-L998
user:
keystone:
uid: 42425
barbican:
uid: 42403
cinder:
uid: 42407
congress:
uid: 42410
glance:
uid: 42415
heat:
uid: 42418
magnum:
uid: 42428
neutron:
uid: 42435
nova:
uid: 42436
senlin:
uid: 42443
View Git Blame Copy Permalink