Cinder configuration fails as non-root user

[Mark Goddard]

Kolla ansible is now supposed to support remote execution as a non-root user [1]. While trying to modify the CI tests to use a non-root user, it was found that Cinder configuration fails with the following error:

TASK [cinder : Copying over cinder-wsgi.conf] **********************************
fatal: [primary]: FAILED! => {
    "msg": "Failed to get information on remote file (/etc/kolla//cinder-api/cinder-wsgi.conf): Permission denied"
}

This is because some tasks in config.yml for cinder are missing the 'become' attribute.

[1] https://blueprints.launchpad.net/kolla-ansible/+spec/ansible-specific-task-become

[Mark Goddard (mgoddard)]

https://review.openstack.org/#/c/606354/1

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/607123

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/606354
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=12e644f4f453b7853bc68c147734158406bdce62
Submitter: Zuul
Branch: master

commit 12e644f4f453b7853bc68c147734158406bdce62
Author: Mark Goddard <email address hidden>
Date: Sat Sep 29 10:17:10 2018 +0100

    Add become for Cinder configuration tasks

    This is required to support execution as a non-root user.

    Change-Id: I017b44352a33884102fefbacdde0fddc7f0282e3
    Closes-Bug: #1795125

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/607123
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=b50917fe2c1d3d45cde79ddaf3afa0c29154db0f
Submitter: Zuul
Branch: master

commit b50917fe2c1d3d45cde79ddaf3afa0c29154db0f
Author: Mark Goddard <email address hidden>
Date: Tue Oct 2 09:16:34 2018 +0100

    Fix non-root reconfiguration with ceph enabled

    Various ceph-related tasks were missing a 'become' that would allow them
    to work as a non-root user. This seems to only cause a problem after an
    initial deployment, perhaps due to the recursive ownership & permissions
    changes at the end of the ceph.yml and external_ceph.yml files.

    This change adds the necessary becomes.

    Change-Id: I887c7b3bdef49db1dd1bf9e5bdbf5dc47b7f41af
    Closes-Bug: #1795125

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/rocky
Review: https://review.openstack.org/607562

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/rocky
Review: https://review.openstack.org/607563

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/607565

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/607566

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/607563
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=00996b658a9078d1add396cb195bb0b3dd067d99
Submitter: Zuul
Branch: stable/rocky

commit 00996b658a9078d1add396cb195bb0b3dd067d99
Author: Mark Goddard <email address hidden>
Date: Tue Oct 2 09:16:34 2018 +0100

    Fix non-root reconfiguration with ceph enabled

    Various ceph-related tasks were missing a 'become' that would allow them
    to work as a non-root user. This seems to only cause a problem after an
    initial deployment, perhaps due to the recursive ownership & permissions
    changes at the end of the ceph.yml and external_ceph.yml files.

    This change adds the necessary becomes.

    Change-Id: I887c7b3bdef49db1dd1bf9e5bdbf5dc47b7f41af
    Closes-Bug: #1795125
    (cherry picked from commit b50917fe2c1d3d45cde79ddaf3afa0c29154db0f)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/607565
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=f8772e19a37e6122f51b397e59033d76cdf468f2
Submitter: Zuul
Branch: stable/queens

commit f8772e19a37e6122f51b397e59033d76cdf468f2
Author: Mark Goddard <email address hidden>
Date: Tue Oct 2 09:16:34 2018 +0100

    Fix non-root reconfiguration with ceph enabled

    Various ceph-related tasks were missing a 'become' that would allow them
    to work as a non-root user. This seems to only cause a problem after an
    initial deployment, perhaps due to the recursive ownership & permissions
    changes at the end of the ceph.yml and external_ceph.yml files.

    This change adds the necessary becomes.

    Change-Id: I887c7b3bdef49db1dd1bf9e5bdbf5dc47b7f41af
    Closes-Bug: #1795125
    (cherry picked from commit b50917fe2c1d3d45cde79ddaf3afa0c29154db0f)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/607566
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=202c4826cd1d0b6c080ed5d2021767a63c3dd185
Submitter: Zuul
Branch: stable/queens

commit 202c4826cd1d0b6c080ed5d2021767a63c3dd185
Author: Mark Goddard <email address hidden>
Date: Sat Sep 29 10:17:10 2018 +0100

    Add become for Cinder configuration tasks

    This is required to support execution as a non-root user.

    Change-Id: I017b44352a33884102fefbacdde0fddc7f0282e3
    Closes-Bug: #1795125
    (cherry picked from commit 12e644f4f453b7853bc68c147734158406bdce62)

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/607562
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=6de877f3a8498cac895085fffb295218f7fa450c
Submitter: Zuul
Branch: stable/rocky

commit 6de877f3a8498cac895085fffb295218f7fa450c
Author: Mark Goddard <email address hidden>
Date: Sat Sep 29 10:17:10 2018 +0100

    Add become for Cinder configuration tasks

    This is required to support execution as a non-root user.

    Change-Id: I017b44352a33884102fefbacdde0fddc7f0282e3
    Closes-Bug: #1795125
    (cherry picked from commit 12e644f4f453b7853bc68c147734158406bdce62)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/kolla-ansible 7.0.0.0rc3 release candidate.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/kolla-ansible 8.0.0.0b1 development milestone.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/kolla-ansible 6.1.1 release.