commit 986260f8971a46c5934b2ebd586a61bed3168451
author Dmitry Teselkin <dteselkin@mirantis.com> Thu Aug 30 19:07:25 2018 +0300
committer Aleksey Zvyagintsev <azvyagintsev@mirantis.com> Fri Aug 31 12:39:27 2018 +0000
tree f59e0e16e39a00b80b8c0bad6b2679591fde5652
parent 826d97ba108d45fa2e6e610389d73ea1d1f2d575

Enabling service's users in /etc/cron.allow

When https://gerrit.mcp.mirantis.net/25051 is merged only
users added to `linux:system:cron` pillar will be allowed
to use crontab tasks.

This commit adds the following users:
* aodh
* cassandra
* ceph
* elasticsearch
* glance
* keystone
* panko
* xtrabackup
* zookeeper

Enable managing cron packages/services and add 'root' user
to both `/etc/at.allow` and `/etc/cron.allow`.

Related-Prod: PROD-22546

Change-Id: Id543d0906842955c5632b1efa6985186afa6c9a9

aodh/server/cluster.yml

diff --git a/aodh/server/cluster.yml b/aodh/server/cluster.yml
index fb6839b..fb8f747 100644
--- a/aodh/server/cluster.yml
+++ b/aodh/server/cluster.yml
@@ -8,6 +8,12 @@
     openstack_event_alarm_topic: alarm.all
     # Keep alarm history in database for 30 days
     aodh_alarm_history_ttl: 2592000
+  linux:
+    system:
+      cron:
+        user:
+          aodh:
+            enabled: true
   aodh:
     server:
       enabled: true