Files
kayobe/dev/kolla-control-host-become-sudo-checker
Will Szumski 2829bf89f7 CI: Test kayobe_control_host_become
This change adds support for the kayobe_control_host_become variable to
CI jobs. This variable will cause any uses of become on localhost to
fail. This allows us to test that the kayobe_control_host_become
configuration variable has successfully removed all uses of become.

I've enabled this on a subset of jobs to get good test coverage.

Depends-On: https://review.opendev.org/c/openstack/kolla-ansible/+/949758
Change-Id: I6da98e055714f75112cf08ff8aa53dd84de2e425
2025-05-19 17:20:21 +01:00

16 lines
376 B
Bash
Executable File

#!/bin/bash
IFS='' read -r -d '' ERR_MSG <<"EOF"
This task tried to use become, but kolla_ansible_control_host_become is set to false.
The task will need to be changed in kolla-ansible to support running as an
unprivileged user.
Hint: You may need to write any files to a user controlled directory.
ErrorCode: CONTROL_HOST_BECOME_VIOLATION
EOF
>&2 echo "$ERR_MSG"
exit 1