diff options
| author | Zuul <zuul@review.opendev.org> | 2026-07-08 16:33:45 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2026-07-08 16:33:45 +0000 |
| commit | 44b4d81399792f539716618953f2cafa64086a5c (patch) | |
| tree | 4699d7e068e6dd842a9f1f247ca2f150d60d5e27 /docker/base/sudoers | |
| parent | b3803eb9f951acd63018ab8ba69bcbd1a2de5c93 (diff) | |
| parent | db35ac8d793506bc43b62e7e39d27a75de1043ed (diff) | |
| download | kolla-44b4d81399792f539716618953f2cafa64086a5c.tar.gz kolla-44b4d81399792f539716618953f2cafa64086a5c.zip | |
Merge "Migrate to pyproject.toml"
Diffstat (limited to 'docker/base/sudoers')
| -rw-r--r-- | docker/base/sudoers | 26 |
1 files changed, 0 insertions, 26 deletions
diff --git a/docker/base/sudoers b/docker/base/sudoers deleted file mode 100644 index eb31bc98b..000000000 --- a/docker/base/sudoers +++ /dev/null @@ -1,26 +0,0 @@ -# The idea here is a container service adds their UID to the kolla group -# via usermod -a -G kolla <uid>. Then the kolla_start may run -# kolla_set_configs via sudo as the root user which is necessary to protect -# the immutability of the container - -# anyone in the kolla group may sudo -E (set the environment) -Defaults: %kolla setenv - -Defaults secure_path="/var/lib/kolla/venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" - -# root may run any commands via sudo as the network seervice user. This is -# neededfor database migrations of existing services which have not been -# converted to run as a non-root user, but instead do that via sudo -E glance -root ALL=(ALL) ALL - -# anyone in the kolla group may run /usr/local/bin/kolla_set_configs as the -# root user via sudo without password confirmation -%kolla ALL=(root) NOPASSWD: /usr/local/bin/kolla_set_configs - -# Copy custom CA certificates to containers -%kolla ALL=(root) NOPASSWD: /usr/local/bin/kolla_copy_cacerts - -# Install projects in dev-mode -%kolla ALL=(root) NOPASSWD: /usr/local/bin/kolla_install_projects - -#includedir /etc/sudoers.d |