All nova-manage command via tht are run as nova user, which is correct. If for some reason a manual nova-manage command was triggered on a controller as root user where no previous nova-manage command was run results in creating the nova-manage.log with root:root as owner. As a result subsequent overcloud deploy runs can fail like:
"Error running ['docker', 'run', '--name', 'nova_api_ensure_default_cell', '--label', 'config_id=tripleo_step3', '--label', 'container_name=nova_api_ensure_default_cell', '--label', 'managed_by=paunch', '-
-label', 'config_data={\"start_order\": 2, \"image\": \"192.168.24.1:8787/rhosp14/openstack-nova-api:2019-02-26.1\", \"environment\": [\"TRIPLEO_CONFIG_HASH=fb9151fb3fb692b17545c33eff5f974d\"], \"command\": \"/usr
/bin/bootstrap_host_exec nova_api /nova_api_ensure_default_cell.sh\", \"user\": \"root\", \"volumes\": [\"/etc/hosts:/etc/hosts:ro\", \"/etc/localtime:/etc/localtime:ro\", \"/etc/pki/ca-trust/extracted:/etc/pki/ca
-trust/extracted:ro\", \"/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro\", \"/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro\", \"/etc/pki/tls/certs/ca-bundle.trust.crt:/
etc/pki/tls/certs/ca-bundle.trust.crt:ro\", \"/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro\", \"/dev/log:/dev/log\", \"/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts:ro\", \"/etc/puppet:/etc/puppet:ro\", \"/var/log/containers/nova:/var/log/nova\", \"/var/log/containers/httpd/nova-api:/var/log/httpd\", \"/var/lib/config-data/nova/etc/my.cnf.d/tripleo.cnf:/etc/my.cnf.d/tripleo.cnf:ro\", \"/var/lib/config-data/nova/etc/nova/:/etc/nova/:ro\", \"/var/log/containers/nova:/var/log/nova\", \"/var/lib/config-data/puppet-generated/nova/:/var/lib/kolla/config_files/src:ro\", \"/var/lib/docker-config-scripts/nova_api_ensure_default_cell.sh:/nova_api_ensure_default_cell.sh:ro\"], \"net\": \"host\", \"detach\": false}', '--env=TRIPLEO_CONFIG_HASH=fb9151fb3fb692b17545c33eff5f974d', '--net=host', '--user=root', '--volume=/etc/hosts:/etc/hosts:ro', '--volume=/etc/localtime:/etc/localtime:ro', '--volume=/etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro', '--volume=/etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro', '--volume=/etc/pki/tls/certs/ca-bundle.crt:/etc/pki/tls/certs/ca-bundle.crt:ro', '--volume=/etc/pki/tls/certs/ca-bundle.trust.crt:/etc/pki/tls/certs/ca-bundle.trust.crt:ro', '--volume=/etc/pki/tls/cert.pem:/etc/pki/tls/cert.pem:ro', '--volume=/dev/log:/dev/log', '--volume=/etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts:ro', '--volume=/etc/puppet:/etc/puppet:ro', '--volume=/var/log/containers/nova:/var/log/nova', '--volume=/var/log/containers/httpd/nova-api:/var/log/httpd', '--volume=/var/lib/config-data/nova/etc/my.cnf.d/tripleo.cnf:/etc/my.cnf.d/tripleo.cnf:ro', '--volume=/var/lib/config-data/nova/etc/nova/:/etc/nova/:ro', '--volume=/var/log/containers/nova:/var/log/nova', '--volume=/var/lib/config-data/puppet-generated/nova/:/var/lib/kolla/config_files/src:ro', '--volume=/var/lib/docker-config-scripts/nova_api_ensure_default_cell.sh:/nova_api_ensure_default_cell.sh:ro', '192.168.24.1:8787/rhosp14/openstack-nova-api:2019-02-26.1', '/usr/bin/bootstrap_host_exec', 'nova_api', '/nova_api_ensure_default_cell.sh']. [1]",
"stdout: (cellv2) Updating default cell_v2 cell bad87fae-4511-4aa2-9a6e-1460184f2192",
"stderr: Traceback (most recent call last):",
" File \"/usr/bin/nova-manage\", line 10, in <module>",
" sys.exit(main())",
" File \"/usr/lib/python2.7/site-packages/nova/cmd/manage.py\", line 2323, in main",
" logging.setup(CONF, \"nova\")",
" File \"/usr/lib/python2.7/site-packages/oslo_log/log.py\", line 264, in setup",
" _setup_logging_from_conf(conf, product_name, version)",
" File \"/usr/lib/python2.7/site-packages/oslo_log/log.py\", line 353, in _setup_logging_from_conf",
" filelog = file_handler(logpath)",
" File \"/usr/lib64/python2.7/logging/handlers.py\", line 392, in __init__",
" logging.FileHandler.__init__(self, filename, mode, encoding, delay)",
" File \"/usr/lib64/python2.7/logging/__init__.py\", line 902, in __init__",
" StreamHandler.__init__(self, self._open())",
" File \"/usr/lib64/python2.7/logging/__init__.py\", line 925, in _open",
" stream = open(self.baseFilename, self.mode)",
"IOError: [Errno 13] Permission denied: '/var/log/nova/nova-manage.log'",
"stdout: 50613161c2722e144158895957891d58584d4fc69331f776a96b25f8a79d3852",
"stdout: 4394e139dabf8576b002cf2b0f931630a06d88b8175668109135f36586850e1a"
Fix proposed to branch: master /review. openstack. org/643936
Review: https:/