commit c3a856bd3e01380711bdbf25b90f6fce0bf6f1cb
author mcp-jenkins <mcp-jenkins@mirantis.com> Thu Oct 11 11:37:55 2018 +0000
committer Gerrit Code Review <mail@domain.com> Thu Oct 11 11:37:55 2018 +0000
tree 436f3a0a0793b7f9f3bb9b3814c222594c21ea3e
parent f06914ae1c64ab8f9271b37c01047f09773c915c
parent fcd82790a7493647a10861092e1eaedaf735b8b3

Merge "Add ceilometer user to panko group"

ceilometer/server/backend/gnocchi.yml

diff --git a/ceilometer/server/backend/gnocchi.yml b/ceilometer/server/backend/gnocchi.yml
index 723d58c..6ebf45f 100644
--- a/ceilometer/server/backend/gnocchi.yml
+++ b/ceilometer/server/backend/gnocchi.yml
@@ -22,3 +22,19 @@
           enabled: true
           url: "notifier://?topic=${_param:openstack_event_alarm_topic}"
           publish_event: true
+  # default permissions in panko configuration files and ssl certificates are restricted
+  # to panko group, therefore ceilometer must have those permission to have ability to
+  # connect to panko's backend db
+  linux:
+    system:
+      group:
+        panko:
+          enabled: true
+      user:
+        ceilometer:
+          enabled: true
+          name: 'ceilometer'
+          home: '/var/lib/ceilometer'
+          shell: '/bin/false'
+          groups:
+            - 'panko'