run db secret sync under barbican username
The patch make the change to run db sync under username
barbican as since queens nss_db is created with the same
owner which had been run before.
Change-Id: Ifb7a82c5b95bfe4e4182947acda25f4f26524b71
Related-PROD: PROD-23538
diff --git a/barbican/server.sls b/barbican/server.sls
index ddeca48..15062fd 100644
--- a/barbican/server.sls
+++ b/barbican/server.sls
@@ -37,6 +37,7 @@
barbican_sync_secret_stores:
cmd.run:
- name: barbican-manage db sync_secret_stores
+ - runas: barbican
{%- if grains.get('noservices') or server.version in ['ocata', 'pike'] %}
- onlyif: /bin/false
{%- endif %}
@@ -99,6 +100,8 @@
- group: barbican
- watch_in:
- service: barbican_server_services
+ - require_in:
+ - cmd: barbican_sync_secret_stores
{%- endif %}