Previously the post-deploy.yml playbook was executed with become: true,
and the admin-openrc.sh file templated without an owner or mode
specified. This resulted in admin-openrc.sh being owned by root with 644
permissions.
This change creates the file without become: true, and explicitly sets
the owner to the user executing Ansible, and the mode to 600.
Co-Authored-By: Mark Goddard <email address hidden>
Closes-Bug: #1891704
Change-Id: Iadf43383a7f2bf377d4666a55a38d92bd70711aa
(cherry picked from commit 16f97867a3f7050ac42fbb921310ca884e974a11)
Reviewed: https:/ /review. opendev. org/747424 /git.openstack. org/cgit/ openstack/ kolla-ansible/ commit/ ?id=27919beeeda c0a99aecc85a7da cb2115451cd09b
Committed: https:/
Submitter: Zuul
Branch: stable/train
commit 27919beeedac0a9 9aecc85a7dacb21 15451cd09b
Author: likui <email address hidden>
Date: Thu Aug 6 14:12:44 2020 +0800
Fix ownership and permissions of admin-openrc.sh
Previously the post-deploy.yml playbook was executed with become: true,
and the admin-openrc.sh file templated without an owner or mode
specified. This resulted in admin-openrc.sh being owned by root with 644
permissions.
This change creates the file without become: true, and explicitly sets
the owner to the user executing Ansible, and the mode to 600.
Co-Authored-By: Mark Goddard <email address hidden>
Closes-Bug: #1891704
Change-Id: Iadf43383a7f2bf 377d4666a55a38d 92bd70711aa ac42fbb921310ca 884e974a11)
(cherry picked from commit 16f97867a3f7050