diff --git a/ansible/roles/gnocchi/templates/gnocchi-api.json.j2 b/ansible/roles/gnocchi/templates/gnocchi-api.json.j2 index 373cb2154b..583e6e9a29 100644 --- a/ansible/roles/gnocchi/templates/gnocchi-api.json.j2 +++ b/ansible/roles/gnocchi/templates/gnocchi-api.json.j2 @@ -34,5 +34,16 @@ "perm": "0600" }{% endif %} + ], + "permissions": [ + { + "path": "/var/lib/gnocchi", + "owner": "gnocchi:gnocchi", + "recurse": true + }, + { + "path": "/var/log/kolla/gnocchi", + "owner": "gnocchi:kolla" + } ] } diff --git a/ansible/roles/gnocchi/templates/gnocchi-metricd.json.j2 b/ansible/roles/gnocchi/templates/gnocchi-metricd.json.j2 index 1d41f8e790..9188a1c8e8 100644 --- a/ansible/roles/gnocchi/templates/gnocchi-metricd.json.j2 +++ b/ansible/roles/gnocchi/templates/gnocchi-metricd.json.j2 @@ -19,5 +19,20 @@ "owner": "gnocchi", "perm": "0600" }{% endif %} + ], + "permissions": [ + { + "path": "/var/lib/gnocchi", + "owner": "gnocchi:gnocchi", + "recurse": true + }, + { + "path": "/var/log/kolla/gnocchi", + "owner": "gnocchi:kolla" + }, + { + "path": "/var/log/kolla/gnocchi/gnocchi-metricd.*", + "owner": "gnocchi:gnocchi" + } ] } diff --git a/ansible/roles/gnocchi/templates/gnocchi-statsd.json.j2 b/ansible/roles/gnocchi/templates/gnocchi-statsd.json.j2 index 141e05f7f9..83073147b3 100644 --- a/ansible/roles/gnocchi/templates/gnocchi-statsd.json.j2 +++ b/ansible/roles/gnocchi/templates/gnocchi-statsd.json.j2 @@ -19,5 +19,20 @@ "owner": "gnocchi", "perm": "0600" }{% endif %} + ], + "permissions": [ + { + "path": "/var/lib/gnocchi", + "owner": "gnocchi:gnocchi", + "recurse": true + }, + { + "path": "/var/log/kolla/gnocchi", + "owner": "gnocchi:kolla" + }, + { + "path": "/var/log/kolla/gnocchi/gnocchi-statsd.*", + "owner": "gnocchi:gnocchi" + } ] }