From 42deff5ce45926620492ec47120f05c59be08568 Mon Sep 17 00:00:00 2001
From: Stanislaw Bogatkin <sbog@sbog.ru>
Date: Fri, 30 Mar 2018 23:56:16 +0300
Subject: [PATCH] Escalate privileges when copy fluentd custom config
Fluentd custom output and filter configs target directory can have unknown
permissions, so copy these configs as root.
Change-Id: I1649f8cd4a5066245e8f79e8e71b6bbf04dbcb62
Closes-Bug: #1760213
---
ansible/roles/common/tasks/config.yml | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/ansible/roles/common/tasks/config.yml b/ansible/roles/common/tasks/config.yml
index 89531bb730..e5e797c97d 100644
--- a/ansible/roles/common/tasks/config.yml
+++ b/ansible/roles/common/tasks/config.yml
@@ -88,6 +88,8 @@
template:
src: "{{ item.path }}"
dest: "{{ node_config_directory }}/fluentd/output/{{ item.path | basename }}"
+ mode: "0660"
+ become: true
register: fluentd_output_custom
when:
- enable_fluentd | bool
@@ -137,6 +139,8 @@
template:
src: "{{ item.path }}"
dest: "{{ node_config_directory }}/fluentd/filter/{{ item.path | basename }}"
+ mode: "0660"
+ become: true
register: fluentd_filter_custom
with_items: "{{ find_custom_fluentd_filters.files }}"
notify: