aboutsummaryrefslogtreecommitdiff
path: root/docker/base/sudoers
diff options
context:
space:
mode:
authorMichal Nasiadka <mnasiadka@gmail.com>2026-07-06 15:26:00 +0200
committerMichal Nasiadka <mnasiadka@gmail.com>2026-07-06 19:59:40 +0000
commitdb35ac8d793506bc43b62e7e39d27a75de1043ed (patch)
treefeec28d13a43490f5fd4260374144a1abfc20331 /docker/base/sudoers
parent1ae1850557e3b99902f73b32c9005618537a1f2d (diff)
downloadkolla-db35ac8d793506bc43b62e7e39d27a75de1043ed.tar.gz
kolla-db35ac8d793506bc43b62e7e39d27a75de1043ed.zip
Migrate to pyproject.toml
[tool.setuptools.data-files] does not support recursive directory installation. The old setup.cfg [files] worked because PBR's FilesConfig.expand_globs() used os.walk() to expand docker/*, but this hook is not triggered by the pbr.build PEP-517 backend. Move docker/ into kolla/ and use [tool.setuptools.package-data] instead. Update kolla_worker._get_images_dir() to check the kolla package directory first so both editable and regular installs work. Change-Id: I4fc452c03740ef22ebbb4e8d0d86c4f4783e2d09 Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Diffstat (limited to 'docker/base/sudoers')
-rw-r--r--docker/base/sudoers26
1 files changed, 0 insertions, 26 deletions
diff --git a/docker/base/sudoers b/docker/base/sudoers
deleted file mode 100644
index eb31bc98b..000000000
--- a/docker/base/sudoers
+++ /dev/null
@@ -1,26 +0,0 @@
-# The idea here is a container service adds their UID to the kolla group
-# via usermod -a -G kolla <uid>. Then the kolla_start may run
-# kolla_set_configs via sudo as the root user which is necessary to protect
-# the immutability of the container
-
-# anyone in the kolla group may sudo -E (set the environment)
-Defaults: %kolla setenv
-
-Defaults secure_path="/var/lib/kolla/venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-
-# root may run any commands via sudo as the network seervice user. This is
-# neededfor database migrations of existing services which have not been
-# converted to run as a non-root user, but instead do that via sudo -E glance
-root ALL=(ALL) ALL
-
-# anyone in the kolla group may run /usr/local/bin/kolla_set_configs as the
-# root user via sudo without password confirmation
-%kolla ALL=(root) NOPASSWD: /usr/local/bin/kolla_set_configs
-
-# Copy custom CA certificates to containers
-%kolla ALL=(root) NOPASSWD: /usr/local/bin/kolla_copy_cacerts
-
-# Install projects in dev-mode
-%kolla ALL=(root) NOPASSWD: /usr/local/bin/kolla_install_projects
-
-#includedir /etc/sudoers.d