Added to the ceph-radosgw service template the ca-trust

volume avoiding to expose useless information.
This bug is referred to the following bugzilla:

Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1683290

Signed-off-by: fpantano <fpantano@redhat.com>
(cherry picked from commit 0c1944236b)
pull/3651/head
fpantano 2019-02-26 19:51:05 +01:00 committed by mergify[bot]
parent 2005d857df
commit 9b843c24f9
1 changed files with 6 additions and 0 deletions

View File

@ -23,6 +23,12 @@ ExecStart=/usr/bin/docker run --rm --net=host \
-e KV_PORT={{ kv_port }} \
{% endif -%}
-v /etc/localtime:/etc/localtime:ro \
{% if ansible_distribution == 'RedHat' -%}
-v /etc/pki/ca-trust/extracted:/etc/pki/ca-trust/extracted:ro \
-v /etc/pki/ca-trust/source/anchors:/etc/pki/ca-trust/source/anchors:ro \
{% elif ansible_distribution == 'Ubuntu' -%}
-v /etc/ssl/certs:/etc/ssl/certs:ro \
{% endif -%}
-e CEPH_DAEMON=RGW \
-e CLUSTER={{ cluster }} \
--name=ceph-rgw-{{ ansible_hostname }} \