[openstack-dev] [kolla] cinder-api image doesn't run as a cinder user.

Erlon Cruz sombrafam at gmail.com
Mon Jun 11 14:08:05 UTC 2018


Thanks!

Em seg, 11 de jun de 2018 às 11:07, Eduardo Gonzalez <dabarren at gmail.com>
escreveu:

> Hi,
>
> See a global openstack goal to move into wsgi
> https://governance.openstack.org/tc/goals/pike/deploy-api-in-wsgi.html
> And spec for cinder
>
>
> https://review.openstack.org/#/c/192683/6/specs/liberty/non-eventlet-wsgi-app.rst
>
> Regards
>
> 2018-06-11 14:36 GMT+02:00 Erlon Cruz <sombrafam at gmail.com>:
>
>> Hi Eduardo,
>>
>> Just for curiosity, do you know the motivation why many OS services were
>> moved to run on apache instead of just listen? Any reference about that?
>>
>> Erlon
>>
>> Em seg, 11 de jun de 2018 às 06:02, Eduardo Gonzalez <dabarren at gmail.com>
>> escreveu:
>>
>>> Hi,
>>>
>>> From Pike cinder-api only runs as a wsgi process and container has been
>>> migrated into an apache process, currenty we run apache as root user and
>>> not as service's user.
>>>
>>> Regards
>>>
>>>
>>>
>>> 2018-06-11 10:46 GMT+02:00 Jae Sang Lee <hyangii at gmail.com>:
>>>
>>>> Hi, stackers.
>>>>
>>>> We are distributing OpenStack to kubernetes using the docker image
>>>> generated by kolla. I recently upgraded from ocata to pike and found
>>>> that the cinder-api container does not run as a cinder user.
>>>> So it does not pass our unit test.
>>>>
>>>> This seems to have been fixed in the following code,
>>>>
>>>> https://review.openstack.org/#/c/463535/2/docker/cinder/cinder-api/Dockerfile.j2,unified
>>>>
>>>> Is there a reason why it should not be run as a cinder user? Other
>>>> services except cinder-api (cinder-scheduler, cinder-volume,
>>>> cinder-backup) are all running as cinder user. If this is a simple bug, try
>>>> to fix it.
>>>>
>>>> Thanks.
>>>>
>>>
>>>
>>> __________________________________________________________________________
>>> OpenStack Development Mailing List (not for usage questions)
>>> Unsubscribe:
>>> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>
>>
>> __________________________________________________________________________
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe:
>> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20180611/7fef86b5/attachment.html>


More information about the OpenStack-dev mailing list