Insufficient privileges when cinder-backup runs in a container

Bug #1745628 reported by Alan Bishop
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
Fix Released
High
Alan Bishop

Bug Description

The cinder-backup service needs to make iSCSI connections, and this requires privileges when running in a container. The non-pacemaker THT is currently setting "privileged: false" and that is causing backups to fail.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (master)

Fix proposed to branch: master
Review: https://review.openstack.org/538272

Changed in tripleo:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (master)

Reviewed: https://review.openstack.org/538272
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=0c65801ac9ea8b12d670a05ace85a96cb8828b22
Submitter: Zuul
Branch: master

commit 0c65801ac9ea8b12d670a05ace85a96cb8828b22
Author: Alan Bishop <email address hidden>
Date: Fri Jan 26 10:29:59 2018 -0500

    Run cinder-backup in a privileged container

    The cinder-backup service requires privileges in order to make iSCSI
    connections.

    Closes-Bug: 1745628
    Change-Id: I63423ac4715269163e36d59d2703502455d33f86

Changed in tripleo:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to tripleo-heat-templates (stable/pike)

Fix proposed to branch: stable/pike
Review: https://review.openstack.org/538925

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to tripleo-heat-templates (stable/pike)

Reviewed: https://review.openstack.org/538925
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=373d984897399e6d372a1d616fd2b37ad242e935
Submitter: Zuul
Branch: stable/pike

commit 373d984897399e6d372a1d616fd2b37ad242e935
Author: Alan Bishop <email address hidden>
Date: Fri Jan 26 10:29:59 2018 -0500

    Run cinder-backup in a privileged container

    The cinder-backup service requires privileges in order to make iSCSI
    connections.

    Closes-Bug: 1745628
    Change-Id: I63423ac4715269163e36d59d2703502455d33f86
    (cherry picked from commit 0c65801ac9ea8b12d670a05ace85a96cb8828b22)

tags: added: in-stable-pike
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates 7.0.9

This issue was fixed in the openstack/tripleo-heat-templates 7.0.9 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/tripleo-heat-templates 8.0.0.0rc1

This issue was fixed in the openstack/tripleo-heat-templates 8.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.