Fix /var/log/glance/api.log permissions during upgrade
We've running glance db_sync under glance user in later releases,
and it can't access to api.log created by glance db_sync launched from
root. This patch corrects api.log permissions
Change-Id: I727db1b727dc4e6a99ae312774fad7eca92ff9ef
Related-Prod: PROD-27222
diff --git a/glance/db/offline_sync.sls b/glance/db/offline_sync.sls
index 79aca0e..49cd902 100644
--- a/glance/db/offline_sync.sls
+++ b/glance/db/offline_sync.sls
@@ -1,5 +1,12 @@
{%- from "glance/map.jinja" import server with context %}
+{#- NOTE(vsaienko): we've changed dbsync runas under glance user and we need to correct permissions for api.log #}
+/var/log/glance/api.log:
+ file.managed:
+ - user: glance
+ - group: glance
+ - onlyif: test -f /var/log/glance/api.log
+
glance_syncdb:
cmd.run:
- name: glance-manage db_sync
@@ -7,6 +14,8 @@
{%- if grains.get('noservices') or server.get('role', 'primary') == 'secondary' %}
- onlyif: /bin/false
{%- endif %}
+ - require:
+ - file: /var/log/glance/api.log
glance_load_metadatafs:
cmd.run: