aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDouglas Mendizábal <dmendiza@redhat.com>2018-12-18 16:53:31 -0600
committerDouglas Mendizábal <dmendiza@redhat.com>2018-12-18 16:55:29 -0600
commite261e89192b157310df20c9ff47abf758dd58e37 (patch)
tree090d9d9c0b8f2433321019f4f1e8acdf11966ecf
parent0f41906089824ed75c445a42fa2a3413d2f26ec1 (diff)
downloadkolla-e261e89192b157310df20c9ff47abf758dd58e37.tar.gz
kolla-e261e89192b157310df20c9ff47abf758dd58e37.zip
Add nfast group to barbican images
The nfast group is needed to configure barbican to use Thales HSM devices with the PKCS#11 plugin. Change-Id: I3de8ca07a34ae63eb91fc8d83bb0676425295cbc
-rw-r--r--docker/barbican/barbican-base/Dockerfile.j22
-rwxr-xr-xkolla/common/config.py6
2 files changed, 6 insertions, 2 deletions
diff --git a/docker/barbican/barbican-base/Dockerfile.j2 b/docker/barbican/barbican-base/Dockerfile.j2
index 5cb53092b..06700527c 100644
--- a/docker/barbican/barbican-base/Dockerfile.j2
+++ b/docker/barbican/barbican-base/Dockerfile.j2
@@ -5,7 +5,7 @@ LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build
{% import "macros.j2" as macros with context %}
-{{ macros.configure_user(name='barbican') }}
+{{ macros.configure_user(name='barbican', groups='nfast') }}
{% if install_type == 'binary' %}
{% if base_distro in ['centos', 'oraclelinux', 'rhel'] %}
diff --git a/kolla/common/config.py b/kolla/common/config.py
index 6121fd9ac..16a790197 100755
--- a/kolla/common/config.py
+++ b/kolla/common/config.py
@@ -1130,7 +1130,11 @@ USERS = {
'tempest-user': {
'uid': 42480,
'gid': 42480,
- }
+ },
+ 'nfast-user': {
+ 'uid': 42481, # unused user, but we need the group for thales hsm
+ 'gid': 42481,
+ },
}