Wrong ownership on /var/lib/horizon/.secret_key_store

[Ian Cordasco]

Opened by mattt416 on 2014-11-25 21:13:10+00:00 at https://github.com/rcbops/ansible-lxc-rpc/issues/650

------------------------------------------------------------

On the last two deploys I did I've noticed that 1/3 nodes had incorrect ownership on /var/lib/horizon/.secret_key_store. On the first deploy it was the container on controller3 and on the second deploy it was a container on controller2. I suspect it may be the LB healthcheck hitting a node before horizon is fully configured, but this is just speculation at this point.

Tags: Backport Potential, bug, in progress, prio:1

====================== COMMENTS ============================

Comment created by mattt416 on 2014-11-26 13:47:59+00:00

This will need to be backported to proposed/juno. It should not be an issue in stable/icehouse.

[Matt Thompson (mattt416)]

This was fixed in https://review.openstack.org/#/c/139243/.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: juno
Review: https://review.openstack.org/146114

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/146114
Committed: https://git.openstack.org/cgit/stackforge/os-ansible-deployment/commit/?id=86dcfe4587b662207d756d1743f961451c48c6a5
Submitter: Jenkins
Branch: juno

commit 86dcfe4587b662207d756d1743f961451c48c6a5
Author: Matt Thompson <email address hidden>
Date: Wed Nov 26 11:24:46 2014 +0000

    Run horizon-manage.py script as {{ system_user }}

    Currently, we seem to always have 1/3 horizon nodes where
    /var/lib/horizon/.secret_key_store is owned by root which breaks
    horizon logins. This appears to be a result of running
    horizon-manage.py syncdb as root (which only happens on 1/3 nodes).
    This change moves all horizon-manage.py commands to run as
    {{ system_user }}, which requires us to also pre-create some dirs
    owned by {{ system_user }} by adding them to container_directories so
    that the horizon-manage.py commands will all complete successfully.

    Lastly, we remove the creation of /etc/horizon and the chown of files
    in {{ install_lib_dir }}/static in heat_common role since those have
    been added to container_directories.

    Change-Id: I335743fe253bd501401208baf6aa8e772ba641f0
    Closes-Bug: #1399368
    (cherry picked from commit da560992ba208c79e642c8920f0b638220d49222)