iscsi: fix permission denied error

Typical error:
```
fatal: [iscsi-gw0]: FAILED! =>
  msg: 'an error occurred while trying to read the file ''/home/guits/ceph-ansible/tests/functional/all_daemons/fetch/e5f4ab94-c099-4781-b592-dbd440a9d6f3/iscsi-gateway.key'': [Errno 13] Permission denied: b''/home/guits/ceph-ansible/tests/functional/all_daemons/fetch/e5f4ab94-c099-4781-b592-dbd440a9d6f3/iscsi-gateway.key'''
```

`become: True` is not needed on the following task:

`copy crt file(s) to gateway nodes`.

Since it's already set in the main playbook (site.yml/site-container.yml)

The thing is that the files get generated in the 'fetch_directory' with
root user because there is a 'delegate_to' + we run the playbook with
`become: True` (from main playbook).

The idea here is to create files under ansible user so we can open them
later to copy them on the remote machine.

Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>
pull/3586/head
Guillaume Abrioux 2019-02-07 14:16:13 +01:00 committed by Sébastien Han
parent bb2bbeb941
commit 9d590f4339
1 changed files with 4 additions and 1 deletions

View File

@ -23,6 +23,7 @@
-x509 -days 365 -out {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt -x509 -days 365 -out {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt
-subj "/C=US/ST=./L=./O=RedHat/OU=Linux/CN={{ ansible_hostname }}" -subj "/C=US/ST=./L=./O=RedHat/OU=Linux/CN={{ ansible_hostname }}"
delegate_to: localhost delegate_to: localhost
become: False
run_once: True run_once: True
with_items: "{{ crt_files_exist.results }}" with_items: "{{ crt_files_exist.results }}"
when: when:
@ -33,6 +34,7 @@
cat {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt cat {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt
{{ fetch_directory }}/{{ fsid }}/iscsi-gateway.key > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.key > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem
delegate_to: localhost delegate_to: localhost
become: False
run_once: True run_once: True
register: pem register: pem
with_items: "{{ crt_files_exist.results }}" with_items: "{{ crt_files_exist.results }}"
@ -44,6 +46,7 @@
openssl x509 -inform pem -in {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem openssl x509 -inform pem -in {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem
-pubkey -noout > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway-pub.key -pubkey -noout > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway-pub.key
delegate_to: localhost delegate_to: localhost
become: False
run_once: True run_once: True
when: when:
- pem.changed - pem.changed
@ -57,6 +60,6 @@
owner: root owner: root
group: root group: root
mode: 0400 mode: 0400
become: true delegate_to: localhost
changed_when: false changed_when: false
with_items: "{{ crt_files }}" with_items: "{{ crt_files }}"