aboutsummaryrefslogtreecommitdiff
path: root/docker
diff options
context:
space:
mode:
authorZuul <zuul@review.opendev.org>2024-08-21 17:18:55 +0000
committerGerrit Code Review <review@openstack.org>2024-08-21 17:18:55 +0000
commit8f6bc332bfe84275836c9153ebab6902041ca83a (patch)
tree2fd7ddee5f11dd0a8fc991ac4881657e72d283f6 /docker
parentfe1aefd67fb554de81a1ba2d66c33645483fcf79 (diff)
parent07d0b12efdbaaf38d41670d67a2ba47ac9ded1e4 (diff)
downloadkolla-8f6bc332bfe84275836c9153ebab6902041ca83a.tar.gz
kolla-8f6bc332bfe84275836c9153ebab6902041ca83a.zip
Merge "Add exclude for permissions in kolla config.json file"
Diffstat (limited to 'docker')
-rw-r--r--docker/base/set_configs.py16
1 files changed, 14 insertions, 2 deletions
diff --git a/docker/base/set_configs.py b/docker/base/set_configs.py
index 4c5078cc4..640e3e2d2 100644
--- a/docker/base/set_configs.py
+++ b/docker/base/set_configs.py
@@ -19,6 +19,7 @@ import json
import logging
import os
import pwd
+import re
import shutil
import stat
import sys
@@ -334,6 +335,7 @@ def handle_permissions(config):
owner = permission.get('owner')
recurse = permission.get('recurse', False)
perm = permission.get('perm')
+ exclude = permission.get('exclude', [])
desired_user, desired_group = user_group(owner)
uid = pwd.getpwnam(desired_user).pw_uid
@@ -373,14 +375,24 @@ def handle_permissions(config):
LOG.exception('Failed to set permission of %s to %s',
path, perm)
+ def handle_exclusion(root, path_suffix):
+ full_path = os.path.join(root, path_suffix)
+ LOG.debug("Checking for exclusion: %s" % full_path)
+ if exclude:
+ for exclude_ in exclude:
+ if not re.search(exclude_, full_path):
+ set_perms(full_path, uid, gid, perm)
+ else:
+ set_perms(full_path, uid, gid, perm)
+
for dest in glob.glob(path):
set_perms(dest, uid, gid, perm)
if recurse and os.path.isdir(dest):
for root, dirs, files in os.walk(dest):
for dir_ in dirs:
- set_perms(os.path.join(root, dir_), uid, gid, perm)
+ handle_exclusion(root, dir_)
for file_ in files:
- set_perms(os.path.join(root, file_), uid, gid, perm)
+ handle_exclusion(root, file_)
def execute_config_strategy(config):