]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
Fix vault token file access. 43963/head
authorMarcus Watts <mwatts@redhat.com>
Fri, 17 Sep 2021 09:28:53 +0000 (05:28 -0400)
committerCory Snyder <csnyder@iland.com>
Tue, 16 Nov 2021 15:06:15 +0000 (10:06 -0500)
commit58b4166ab02fc0ca65ef3c86debcca5bdac98347
tree5869713815d71507dc04549687914f42f315f05c
parentb0aaed0fe8cdfe99c82a70b230004934b51091ff
Fix vault token file access.

Put the vault token file in a location that ceph can read.
Make it readable only by ceph.

On rhel8 (and indeed, any vanilla rhel machine), $HOME is liable to be
mode 700.  This means the ceph user can't read things in that user's
directory.  This causes radosgw to emit the confusing message "ERROR:
Vault token file ... not found" even though the teuthology log will
plainly show it was created and made readable by ceph.

Fixes: http://tracker.ceph.com/issues/51539
Signed-off-by: Marcus Watts <mwatts@redhat.com>
(cherry picked from commit 454cc8a18c4c3851de5976d3e36e42644dbb1a70)

Conflicts:
qa/tasks/rgw.py

Cherry-pick notes:
- Conflict due to ctx.rgw.vault_role not set in Octopus test
qa/tasks/rgw.py