remove POSIX users, groups and file modes

Bug #1458915 reported by Drew Fisher
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
puppet-ceilometer
Fix Released
Medium
Ivan Berezovskiy
puppet-cinder
Fix Released
Medium
Drew Fisher
puppet-designate
Fix Released
Medium
Ivan Berezovskiy
puppet-glance
Fix Released
Medium
Nikita Karpin
puppet-heat
Fix Released
Medium
Drew Fisher
puppet-keystone
Fix Released
Medium
Drew Fisher
puppet-manila
Fix Released
Undecided
zhongshengping
puppet-neutron
Fix Released
Medium
Drew Fisher
puppet-nova
Fix Released
Medium
Drew Fisher
puppet-sahara
Fix Released
Medium
Denis Egorenko
puppet-swift
Fix Released
Medium
Emilien Macchi

Bug Description

The 'file' types should not check for (and set) POSIX users, groups or file/directory modes for configuration files and directories.

ex: https://github.com/stackforge/puppet-keystone/blob/master/manifests/init.pp#L515

These attributes are typically delivered by the OS's packaging system and should not be overridden.

Changed in puppet-keystone:
assignee: nobody → Drew Fisher (drew-fisher)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/185663

Changed in puppet-keystone:
status: New → In Progress
Revision history for this message
Mike Dorman (mdorman-m) wrote :

I suspect there are several other places in the openstack puppet modules where this is occurring. If you find any others, please add them through 'also affects project' option above. thanks!

Revision history for this message
Drew Fisher (drew-fisher) wrote :

I think I've got them all. I'm not too certain about tripleo or monesca, however.

Changed in puppet-ceilometer:
assignee: nobody → Drew Fisher (drew-fisher)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-ceilometer (master)

Fix proposed to branch: master
Review: https://review.openstack.org/186092

Changed in puppet-ceilometer:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-keystone (master)

Reviewed: https://review.openstack.org/185663
Committed: https://git.openstack.org/cgit/stackforge/puppet-keystone/commit/?id=2abad789290be9f9b5f06e7eac40b438748de84e
Submitter: Jenkins
Branch: master

commit 2abad789290be9f9b5f06e7eac40b438748de84e
Author: Drew Fisher <email address hidden>
Date: Tue May 26 10:49:47 2015 -0600

    remove POSIX users, groups and file modes

    Closes-Bug: #1458915

    Change-Id: I30d759697ed42dc35f8df8e231c9e012d2762894

Changed in puppet-keystone:
status: In Progress → Fix Committed
Changed in puppet-cinder:
assignee: nobody → Drew Fisher (drew-fisher)
status: New → In Progress
Changed in puppet-cinder:
status: In Progress → Fix Committed
Changed in puppet-glance:
assignee: nobody → Drew Fisher (drew-fisher)
Changed in puppet-glance:
status: New → In Progress
Changed in puppet-designate:
assignee: nobody → Drew Fisher (drew-fisher)
status: New → In Progress
Mathieu Gagné (mgagne)
Changed in puppet-cinder:
milestone: none → 6.0.0
Changed in puppet-keystone:
milestone: none → 6.0.0
Mathieu Gagné (mgagne)
Changed in puppet-keystone:
status: Fix Committed → Fix Released
Changed in puppet-cinder:
status: Fix Committed → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-ceilometer (master)

Change abandoned by Drew Fisher (<email address hidden>) on branch: master
Review: https://review.openstack.org/186092
Reason: This changeset is abandoned in lieu of https://review.openstack.org/#/c/195135/

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-neutron (master)

Fix proposed to branch: master
Review: https://review.openstack.org/209068

Changed in puppet-neutron:
assignee: nobody → Drew Fisher (drew-fisher)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-glance (master)

Fix proposed to branch: master
Review: https://review.openstack.org/211593

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-glance (master)

Change abandoned by Drew Fisher (<email address hidden>) on branch: master
Review: https://review.openstack.org/196390
Reason: See last comment

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-neutron (master)

Reviewed: https://review.openstack.org/209068
Committed: https://git.openstack.org/cgit/openstack/puppet-neutron/commit/?id=d4e1d939673eb56c5a2b29faeaa3b36f175eea21
Submitter: Jenkins
Branch: master

commit d4e1d939673eb56c5a2b29faeaa3b36f175eea21
Author: Drew Fisher <email address hidden>
Date: Tue Aug 4 07:30:58 2015 -0600

    Remove POSIX users, groups, and file modes.

    This patch removes File resources which should be delivered by packaging
    tools. These resources (files, directories, modes, users, and group
    attributes) could be in conflict with different OS packaging systems
    which isn't a desired result.

    Change-Id: Ia7a8a71ef897d989f10ab511e6aa0432693041a5
    Closes-Bug: #1458915

Changed in puppet-neutron:
status: In Progress → Fix Committed
Changed in puppet-sahara:
assignee: nobody → Denis Egorenko (degorenko)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-sahara (master)

Fix proposed to branch: master
Review: https://review.openstack.org/222146

Changed in puppet-sahara:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-sahara (master)

Reviewed: https://review.openstack.org/222146
Committed: https://git.openstack.org/cgit/openstack/puppet-sahara/commit/?id=fa0bda834b56614e4a34318ba07134377ab8fbd2
Submitter: Jenkins
Branch: master

commit fa0bda834b56614e4a34318ba07134377ab8fbd2
Author: Denis Egorenko <email address hidden>
Date: Thu Sep 10 14:34:08 2015 +0300

    Remove POSIX file modes.

    This patch removes File resources, which should be delivered by packaging
    tools. These resources (files and directories with attributes) could be in
    conflict with different OS packaging systems, which isn't a desired result.

    Change-Id: Ife7d6b061380ea5ddcdf581c22e0fa6b1d31da61
    Closes-bug: #1458915

Changed in puppet-sahara:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-swift (master)

Fix proposed to branch: master
Review: https://review.openstack.org/228462

Changed in puppet-swift:
assignee: nobody → Emilien Macchi (emilienm)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-swift (master)

Change abandoned by Emilien Macchi (<email address hidden>) on branch: master
Review: https://review.openstack.org/228462
Reason: I'm going to split the patches, it will be easier to review.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-swift (master)

Fix proposed to branch: master
Review: https://review.openstack.org/228524

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-ceilometer (master)

Fix proposed to branch: master
Review: https://review.openstack.org/228593

Changed in puppet-ceilometer:
assignee: Drew Fisher (drew-fisher) → Emilien Macchi (emilienm)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-ceilometer (master)

Reviewed: https://review.openstack.org/228593
Committed: https://git.openstack.org/cgit/openstack/puppet-ceilometer/commit/?id=409e35a77671e3b129ad387f5e03f57cbe91872c
Submitter: Jenkins
Branch: master

commit 409e35a77671e3b129ad387f5e03f57cbe91872c
Author: Emilien Macchi <email address hidden>
Date: Mon Sep 28 15:34:35 2015 -0400

    stop managing File resources

    Drop any 'File' resource that is already managed by upstream packaging.

    Partial-bug: #1458915

    Change-Id: I47b12069362a9ec707df71d41f91dcccfa318c13

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-swift (master)

Reviewed: https://review.openstack.org/228524
Committed: https://git.openstack.org/cgit/openstack/puppet-swift/commit/?id=47ac5095b3b145f09cff5472aecb7561e944f8c8
Submitter: Jenkins
Branch: master

commit 47ac5095b3b145f09cff5472aecb7561e944f8c8
Author: Emilien Macchi <email address hidden>
Date: Mon Sep 28 12:07:11 2015 -0400

    Stop managing file modes

    File modes should be managed by packaging, not by Puppet.
    This patch aims to stop managing File { mode => } parameters.

    Partial-bug: #1458915
    Change-Id: Ic38317521ac4a91bfdf234ecb4c74e4b00e3d887

Changed in puppet-glance:
assignee: Drew Fisher (drew-fisher) → Emilien Macchi (emilienm)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-nova (master)

Fix proposed to branch: master
Review: https://review.openstack.org/235604

Changed in puppet-nova:
assignee: nobody → Drew Fisher (drew-fisher)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-nova (master)

Reviewed: https://review.openstack.org/235604
Committed: https://git.openstack.org/cgit/openstack/puppet-nova/commit/?id=d9eaed5be4bd07f3b0be27fc6a26f491aec31c62
Submitter: Jenkins
Branch: master

commit d9eaed5be4bd07f3b0be27fc6a26f491aec31c62
Author: Drew Fisher <email address hidden>
Date: Thu Oct 15 16:30:56 2015 -0600

    Remove POSIX users, groups, and file modes.

    This patch removes the File resources of nova.conf for mode, user and
    group which should be delivered by packaging tools. These resources
    (mode, user, and group attributes) could be in conflict with different
    OS packaging systems which isn't a desired result.

    Change-Id: I4fac32742dc317b16a6af825ad7095f0d94f3e57
    Closes-Bug: #1458915

Changed in puppet-nova:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-heat (master)

Fix proposed to branch: master
Review: https://review.openstack.org/237612

Changed in puppet-heat:
assignee: nobody → Drew Fisher (drew-fisher)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-heat (master)

Reviewed: https://review.openstack.org/237612
Committed: https://git.openstack.org/cgit/openstack/puppet-heat/commit/?id=679c8a3379bd48f8a293eb7c2ef1b392e3abcb7e
Submitter: Jenkins
Branch: master

commit 679c8a3379bd48f8a293eb7c2ef1b392e3abcb7e
Author: Drew Fisher <email address hidden>
Date: Tue Oct 20 08:40:56 2015 -0600

    Remove POSIX users, groups, and file modes.

    This patch removes the File, Group, and User resources of /etc/heat and
    /etc/heat/heat.conf which should be delivered by packaging tools. These
    resources (mode, user, and group attributes) could be in conflict with
    different OS packaging systems which isn't a desired result.

    Change-Id: I5d49f3fc06df295700377eb66f883c9780959f96
    Closes-Bug: #1458915

Changed in puppet-heat:
status: In Progress → Fix Committed
no longer affects: puppet-horizon
Changed in puppet-ceilometer:
assignee: Emilien Macchi (emilienm) → Ivan Berezovskiy (iberezovskiy)
Changed in puppet-glance:
assignee: Emilien Macchi (emilienm) → Ivan Berezovskiy (iberezovskiy)
Changed in puppet-designate:
assignee: Drew Fisher (drew-fisher) → Ivan Berezovskiy (iberezovskiy)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-keystone (master)

Change abandoned by Emilien Macchi (<email address hidden>) on branch: master
Review: https://review.openstack.org/195684
Reason: I'm abandoning this patch for lack of time and interest from our community.

If anyone is interested to restore it, please ping me on IRC or email.

zhongshengping (chdzsp)
Changed in puppet-manila:
assignee: nobody → zhongshengping (chdzsp)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-manila (master)

Fix proposed to branch: master
Review: https://review.openstack.org/276551

Changed in puppet-manila:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-manila (master)

Reviewed: https://review.openstack.org/276551
Committed: https://git.openstack.org/cgit/openstack/puppet-manila/commit/?id=8687450542b4cc993b066876485f517a7bb2b7f6
Submitter: Jenkins
Branch: master

commit 8687450542b4cc993b066876485f517a7bb2b7f6
Author: ZhongShengping <chdzsp@163.com>
Date: Fri Feb 5 11:24:41 2016 +0800

    remove POSIX users, groups and file modes

    Change-Id: I782c5e428f9234bd0fff6cb3af217f051944fd7f
    Closes-Bug: #1458915

Changed in puppet-manila:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-keystone (master)

Reviewed: https://review.openstack.org/195684
Committed: https://git.openstack.org/cgit/openstack/puppet-keystone/commit/?id=b68858f7fea51ed89da345b7db19fd9df0220023
Submitter: Jenkins
Branch: master

commit b68858f7fea51ed89da345b7db19fd9df0220023
Author: Emilien Macchi <email address hidden>
Date: Thu Jun 25 13:21:51 2015 -0400

    Drop User/group resource dependency

    This patch is a squash between:
    * I35187a857ae6e67b301d62e30525eaab75707161
    * I30d759697ed42dc35f8df8e231c9e012d2762894

    It entirely drops the usage of User resource dependency.

    Note: since beaker jobs were failing with sepeparated patches, we
    decided to use one patchset so Beaker job can pass the CI.

    Change-Id: Id69eca0ce73ba7c16aca939821234717618f5ec4
    Closes-bug: #1458915
    Co-Authored-By: Drew Fisher <email address hidden>

Changed in puppet-glance:
assignee: Ivan Berezovskiy (iberezovskiy) → Nikita Karpin (mkarpin)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-glance (master)

Reviewed: https://review.openstack.org/211593
Committed: https://git.openstack.org/cgit/openstack/puppet-glance/commit/?id=637f986252dc8be244b25bf37744ce89c9be613b
Submitter: Jenkins
Branch: master

commit 637f986252dc8be244b25bf37744ce89c9be613b
Author: Drew Fisher <email address hidden>
Date: Tue Aug 11 08:28:45 2015 -0600

    Remove POSIX users, groups, and file modes.

    This patch removes File resources which should be delivered by packaging
    tools. These resources (files, directories, modes, users, and group
    attributes) could be in conflict with different OS packaging systems
    which isn't a desired result.

    Co-Authored-By: Ivan Berezovskiy <email address hidden>

    Closes-Bug: #1458915

    Change-Id: I02fe8cc99dcd56e16ac66136a0da244a1eeb630b

Changed in puppet-glance:
status: In Progress → Fix Released
Changed in puppet-heat:
status: Fix Committed → Fix Released
Changed in puppet-neutron:
status: Fix Committed → Fix Released
Changed in puppet-nova:
status: Fix Committed → Fix Released
Changed in puppet-sahara:
status: Fix Committed → Fix Released
Cody Herriges (ody-cat)
Changed in puppet-ceilometer:
importance: Undecided → Medium
Changed in puppet-cinder:
importance: Undecided → Medium
Changed in puppet-designate:
importance: Undecided → Medium
Changed in puppet-glance:
importance: Undecided → Medium
Changed in puppet-heat:
importance: Undecided → Medium
Changed in puppet-keystone:
importance: Undecided → Medium
Changed in puppet-neutron:
importance: Undecided → Medium
Changed in puppet-nova:
importance: Undecided → Medium
Changed in puppet-sahara:
importance: Undecided → Medium
Changed in puppet-swift:
importance: Undecided → Medium
Revision history for this message
Doug Hellmann (doug-hellmann) wrote : Fix included in openstack/puppet-glance 9.0.0

This issue was fixed in the openstack/puppet-glance 9.0.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to puppet-designate (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/337940

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to puppet-designate (master)

Reviewed: https://review.openstack.org/337940
Committed: https://git.openstack.org/cgit/openstack/puppet-designate/commit/?id=50c12167f67c42fc9a734ac10b1633d071e5d159
Submitter: Jenkins
Branch: master

commit 50c12167f67c42fc9a734ac10b1633d071e5d159
Author: David Moreau-Simard <email address hidden>
Date: Tue Jul 5 20:52:09 2016 -0400

    Remove POSIX users, groups and files managed by packaging

    Both RDO and UCA provide packaging for designate and this packaging
    takes care of creating the necessary user/group/directories.

    Change-Id: Ic6af7dadb94a9ce22ad924184715b729b36ed16b
    Related-Bug: #1458915

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-designate (master)

Change abandoned by Emilien Macchi (<email address hidden>) on branch: master
Review: https://review.openstack.org/197336
Reason: This review is > 4 weeks without comment or failed Jenkins or merge conflict the last time it was checked. We are abandoning this for now. Feel free to reactivate the review by pressing the restore button and leaving a 'recheck' comment to get fresh test results.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-ceilometer (master)

Change abandoned by Alex Schultz (<email address hidden>) on branch: master
Review: https://review.openstack.org/195135
Reason: This review is > 4 weeks without comment or failed Jenkins or merge conflict the last time it was checked. We are abandoning this for now. Feel free to reactivate the review by pressing the restore button and leaving a 'recheck' comment to get fresh test results.

Matt Fischer (mfisch)
Changed in puppet-ceilometer:
status: In Progress → Fix Released
Changed in puppet-designate:
status: In Progress → Fix Released
Changed in puppet-swift:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.