[openstack-dev] [kolla] cinder-api image doesn't run as a cinder user.

Eduardo Gonzalez dabarren at gmail.com
Mon Jun 11 14:06:52 UTC 2018


Hi,

See a global openstack goal to move into wsgi
https://governance.openstack.org/tc/goals/pike/deploy-api-in-wsgi.html
And spec for cinder

https://review.openstack.org/#/c/192683/6/specs/liberty/non-eventlet-wsgi-app.rst

Regards

2018-06-11 14:36 GMT+02:00 Erlon Cruz <sombrafam at gmail.com>:

> Hi Eduardo,
>
> Just for curiosity, do you know the motivation why many OS services were
> moved to run on apache instead of just listen? Any reference about that?
>
> Erlon
>
> Em seg, 11 de jun de 2018 às 06:02, Eduardo Gonzalez <dabarren at gmail.com>
> escreveu:
>
>> Hi,
>>
>> From Pike cinder-api only runs as a wsgi process and container has been
>> migrated into an apache process, currenty we run apache as root user and
>> not as service's user.
>>
>> Regards
>>
>>
>>
>> 2018-06-11 10:46 GMT+02:00 Jae Sang Lee <hyangii at gmail.com>:
>>
>>> Hi, stackers.
>>>
>>> We are distributing OpenStack to kubernetes using the docker image
>>> generated by kolla. I recently upgraded from ocata to pike and found
>>> that the cinder-api container does not run as a cinder user.
>>> So it does not pass our unit test.
>>>
>>> This seems to have been fixed in the following code,
>>> https://review.openstack.org/#/c/463535/2/docker/cinder/
>>> cinder-api/Dockerfile.j2,unified
>>>
>>> Is there a reason why it should not be run as a cinder user? Other
>>> services except cinder-api (cinder-scheduler, cinder-volume,
>>> cinder-backup) are all running as cinder user. If this is a simple bug, try
>>> to fix it.
>>>
>>> Thanks.
>>>
>>
>> ____________________________________________________________
>> ______________
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:
>> unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20180611/2775ef0a/attachment.html>


More information about the OpenStack-dev mailing list