opendev/system-config
Code Issues Proposed changes

Fix permissions for certificate files in nodepool's home directory

Browse Source 
It worked the way things were before but it's cleaner to have them
nodepool/nodepool and 0600.

Change-Id: Ieebbd9d6fdc65c04263294c680e64fc5e561d82d
This commit is contained in:
David Moreau Simard 2018-03-24 21:31:23 -04:00
parent cb48653415
commit f28c90fad8
No known key found for this signature in database
GPG Key ID: 33A07694CBB71ECC
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
manifests/site.pp
View File

@ -1057,9 +1057,9 @@ node 'nodepool.openstack.org' {
} }
file { '/home/nodepool/.config/openstack/limestone_cacert.pem': file { '/home/nodepool/.config/openstack/limestone_cacert.pem':
ensure => present, ensure => present,
owner => 'root', owner => 'nodepool',
group => 'root', group => 'nodepool',
mode => '0444', mode => '0600',
content => hiera('limestone_ssl_cert_file_contents'), content => hiera('limestone_ssl_cert_file_contents'),
require => Class['::openstackci::nodepool'], require => Class['::openstackci::nodepool'],
} }
@ -1149,9 +1149,9 @@ node /^nl\d+\.openstack\.org$/ {
} }
file { '/home/nodepool/.config/openstack/limestone_cacert.pem': file { '/home/nodepool/.config/openstack/limestone_cacert.pem':
ensure => present, ensure => present,
owner => 'root', owner => 'nodepool',
group => 'root', group => 'nodepool',
mode => '0444', mode => '0600',
content => hiera('limestone_ssl_cert_file_contents'), content => hiera('limestone_ssl_cert_file_contents'),
require => Class['::openstackci::nodepool_launcher'], require => Class['::openstackci::nodepool_launcher'],
} }
@ -1236,9 +1236,9 @@ node /^nb\d+\.openstack\.org$/ {
} }
file { '/home/nodepool/.config/openstack/limestone_cacert.pem': file { '/home/nodepool/.config/openstack/limestone_cacert.pem':
ensure => present, ensure => present,
owner => 'root', owner => 'nodepool',
group => 'root', group => 'nodepool',
mode => '0444', mode => '0600',
content => hiera('limestone_ssl_cert_file_contents'), content => hiera('limestone_ssl_cert_file_contents'),
require => Class['::openstackci::nodepool_builder'], require => Class['::openstackci::nodepool_builder'],
} }