Ansible must be run as root for ansible deploy

Bug #1476293 reported by Paul Bourke
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla
Fix Released
High
Harm Weites

Bug Description

Requirement for root should be removed if possible or documented if not.

Revision history for this message
Sam Yaple (s8m) wrote :

Currently, Ansible is required to run as root on the destination nodes. It is also required to be run as root when running AIO.

For multinode, there is a bug/security concern right now with a temp file requiring the ansible-playbooks to be run a root from the deploy-host. Is this what you are refering too?

Changed in kolla:
status: New → Incomplete
Changed in kolla:
status: Incomplete → Won't Fix
status: Won't Fix → Incomplete
Revision history for this message
Paul Bourke (pauldbourke) wrote :

@Sam, my issue was currently ansible must be run as root. If there is a review submitted that addresses this can you link it here?

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla (master)

Reviewed: https://review.openstack.org/205195
Committed: https://git.openstack.org/cgit/stackforge/kolla/commit/?id=386ba3070a048ee9c6d02d065a065b42a810eb08
Submitter: Jenkins
Branch: master

commit 386ba3070a048ee9c6d02d065a065b42a810eb08
Author: Harm Weites <email address hidden>
Date: Thu Jul 23 19:41:49 2015 +0200

    Don't try to chown root:root /tmp/kolla_mariadb_cluster

    This just fails when not running as root.

    Change-Id: Ic3fc55d519c6165df917cf333a38907232fe3ed7
    Partitially-Implements: blueprint ansible-service
    Closes-bug: #1476293

Changed in kolla:
status: Incomplete → Fix Committed
Sam Yaple (s8m)
Changed in kolla:
assignee: nobody → Harm Weites (harmw)
Steven Dake (sdake)
Changed in kolla:
importance: Undecided → High
milestone: none → liberty-rc1
Sam Yaple (s8m)
Changed in kolla:
status: Fix Committed → Won't Fix
status: Won't Fix → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.