openstack/puppet-openstack-integration
Code Issues Proposed changes

[CentOS8] Enable os_neutron_dac_override

Browse Source 
We should enable os_neutron_dac_override when installing Neutron,
otherwise privsep helper always fails to start.

Change-Id: I00e9151e7347e71215d36698e8ee3c3e603ce784
This commit is contained in:
Takashi Kajinami 2020-08-28 00:16:34 +09:00
parent 9ebb56bdac
commit a71c6f3046
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
manifests/neutron.pp
View File

@ -41,6 +41,15 @@ class openstack_integration::neutron (
Exec['update-ca-certificates'] ~> Service['neutron-server'] Exec['update-ca-certificates'] ~> Service['neutron-server']
} }
if ($::operatingsystem == 'CentOS') and (versioncmp($::operatingsystemmajrelease, '8') == 0) {
# os_neutron_dac_override should be on to start privsep-helper
# See https://bugzilla.redhat.com/show_bug.cgi?id=1850973
selboolean { 'os_neutron_dac_override':
persistent => true,
value => on,
}
}
openstack_integration::mq_user { 'neutron': openstack_integration::mq_user { 'neutron':
password => 'an_even_bigger_secret', password => 'an_even_bigger_secret',
before => Anchor['neutron::service::begin'], before => Anchor['neutron::service::begin'],