mirror of https://github.com/ceph/ceph-ansible.git
iscsi: fix permission denied error
Typical error: ``` fatal: [iscsi-gw0]: FAILED! => msg: 'an error occurred while trying to read the file ''/home/guits/ceph-ansible/tests/functional/all_daemons/fetch/e5f4ab94-c099-4781-b592-dbd440a9d6f3/iscsi-gateway.key'': [Errno 13] Permission denied: b''/home/guits/ceph-ansible/tests/functional/all_daemons/fetch/e5f4ab94-c099-4781-b592-dbd440a9d6f3/iscsi-gateway.key''' ``` `become: True` is not needed on the following task: `copy crt file(s) to gateway nodes`. Since it's already set in the main playbook (site.yml/site-container.yml) The thing is that the files get generated in the 'fetch_directory' with root user because there is a 'delegate_to' + we run the playbook with `become: True` (from main playbook). The idea here is to create files under ansible user so we can open them later to copy them on the remote machine. Signed-off-by: Guillaume Abrioux <gabrioux@redhat.com>pull/3586/head
parent
bb2bbeb941
commit
9d590f4339
|
@ -23,6 +23,7 @@
|
||||||
-x509 -days 365 -out {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt
|
-x509 -days 365 -out {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt
|
||||||
-subj "/C=US/ST=./L=./O=RedHat/OU=Linux/CN={{ ansible_hostname }}"
|
-subj "/C=US/ST=./L=./O=RedHat/OU=Linux/CN={{ ansible_hostname }}"
|
||||||
delegate_to: localhost
|
delegate_to: localhost
|
||||||
|
become: False
|
||||||
run_once: True
|
run_once: True
|
||||||
with_items: "{{ crt_files_exist.results }}"
|
with_items: "{{ crt_files_exist.results }}"
|
||||||
when:
|
when:
|
||||||
|
@ -33,6 +34,7 @@
|
||||||
cat {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt
|
cat {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.crt
|
||||||
{{ fetch_directory }}/{{ fsid }}/iscsi-gateway.key > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem
|
{{ fetch_directory }}/{{ fsid }}/iscsi-gateway.key > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem
|
||||||
delegate_to: localhost
|
delegate_to: localhost
|
||||||
|
become: False
|
||||||
run_once: True
|
run_once: True
|
||||||
register: pem
|
register: pem
|
||||||
with_items: "{{ crt_files_exist.results }}"
|
with_items: "{{ crt_files_exist.results }}"
|
||||||
|
@ -44,6 +46,7 @@
|
||||||
openssl x509 -inform pem -in {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem
|
openssl x509 -inform pem -in {{ fetch_directory }}/{{ fsid }}/iscsi-gateway.pem
|
||||||
-pubkey -noout > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway-pub.key
|
-pubkey -noout > {{ fetch_directory }}/{{ fsid }}/iscsi-gateway-pub.key
|
||||||
delegate_to: localhost
|
delegate_to: localhost
|
||||||
|
become: False
|
||||||
run_once: True
|
run_once: True
|
||||||
when:
|
when:
|
||||||
- pem.changed
|
- pem.changed
|
||||||
|
@ -57,6 +60,6 @@
|
||||||
owner: root
|
owner: root
|
||||||
group: root
|
group: root
|
||||||
mode: 0400
|
mode: 0400
|
||||||
become: true
|
delegate_to: localhost
|
||||||
changed_when: false
|
changed_when: false
|
||||||
with_items: "{{ crt_files }}"
|
with_items: "{{ crt_files }}"
|
||||||
|
|
Loading…
Reference in New Issue