]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph-ansible.git/commit
ceph-mon: Don't set monitor directory mode recursively v4.0.34.2
authorBenoît Knecht <bknecht@protonmail.ch>
Wed, 28 Oct 2020 15:09:58 +0000 (16:09 +0100)
committerGuillaume Abrioux <gabrioux@redhat.com>
Tue, 3 Nov 2020 09:20:07 +0000 (10:20 +0100)
commit91bbf90dfc7cda7b29a307d784b4bf26e0dd9f03
tree05e8d9972360c7d6ce33a94909029ce448379a79
parent3455b764c005497d713b9ad83e75fc714e658f14
ceph-mon: Don't set monitor directory mode recursively

After rolling updates performed with
`infrastructure-playbooks/rolling_updates.yml`, files located in
`/var/lib/ceph/mon/{{ cluster }}-{{ monitor_name }}` had mode 0755 (including
the keyring), making them world-readable.

This commit separates the task that configured permissions recursively on
`/var/lib/ceph/mon/{{ cluster }}-{{ monitor_name }}` into two separate tasks:

1. Set the ownership and mode of the directory itself;
2. Recursively set ownership in the directory, but don't modify the mode.

Signed-off-by: Benoît Knecht <bknecht@protonmail.ch>
(cherry picked from commit 0d76826bbb7b0b9303583c31147ebad9e5c420f9)
(cherry picked from commit 4a7186697ece863e6b1cab0ba3fc554df837ea72)
roles/ceph-mon/tasks/deploy_monitors.yml