opendev/system-config
Code Issues Proposed changes

Make all-clouds.yaml admin readable

Browse Source 
And also the certs and the other clouds.yaml file.
So that admins can run openstackclient, etc, without sudo.

Change-Id: Ib8be3cd0601531284ec5d33cb5024b8363d924ca
This commit is contained in:
James E. Blair 2016-02-23 13:58:41 -08:00
parent c476a68363
commit c5f0cb4b32
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
modules/openstack_project/manifests/puppetmaster.pp
View File

@ -123,24 +123,24 @@ class openstack_project::puppetmaster (
file { '/etc/openstack/clouds.yaml': file { '/etc/openstack/clouds.yaml':
ensure => present, ensure => present,
owner => 'root', owner => 'root',
group => 'root', group => 'admin',
mode => '0600', mode => '0660',
content => template('openstack_project/puppetmaster/ansible-clouds.yaml.erb'), content => template('openstack_project/puppetmaster/ansible-clouds.yaml.erb'),
} }
file { '/etc/openstack/all-clouds.yaml': file { '/etc/openstack/all-clouds.yaml':
ensure => present, ensure => present,
owner => 'root', owner => 'root',
group => 'root', group => 'admin',
mode => '0600', mode => '0660',
content => template('openstack_project/puppetmaster/all-clouds.yaml.erb'), content => template('openstack_project/puppetmaster/all-clouds.yaml.erb'),
} }
file { '/etc/openstack/infracloud_west_cacert.pem': file { '/etc/openstack/infracloud_west_cacert.pem':
ensure => present, ensure => present,
owner => 'root', owner => 'root',
group => 'root', group => 'admin',
mode => '0600', mode => '0660',
content => $infracloud_hpuswest_ssl_cert_file_contents, content => $infracloud_hpuswest_ssl_cert_file_contents,
} }