]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
Fix vault token file access. 43951/head
authorMarcus Watts <mwatts@redhat.com>
Fri, 17 Sep 2021 09:28:53 +0000 (05:28 -0400)
committerCory Snyder <csnyder@iland.com>
Tue, 16 Nov 2021 14:23:47 +0000 (09:23 -0500)
commit65981d24f4d9be745a5824ab9108041ef3f0efdf
tree3046b8cf6771cae1b136bcc073b45d34eb98e196
parent80726a08b9b8f04143ace55e4959aeb8ec834098
Fix vault token file access.

Put the vault token file in a location that ceph can read.
Make it readable only by ceph.

On rhel8 (and indeed, any vanilla rhel machine), $HOME is liable to be
mode 700.  This means the ceph user can't read things in that user's
directory.  This causes radosgw to emit the confusing message "ERROR:
Vault token file ... not found" even though the teuthology log will
plainly show it was created and made readable by ceph.

Fixes: http://tracker.ceph.com/issues/51539
Signed-off-by: Marcus Watts <mwatts@redhat.com>
(cherry picked from commit 454cc8a18c4c3851de5976d3e36e42644dbb1a70)
qa/tasks/rgw.py