From e261e89192b157310df20c9ff47abf758dd58e37 Mon Sep 17 00:00:00 2001
From: Douglas Mendizábal <dmendiza@redhat.com>
Date: Tue, 18 Dec 2018 16:53:31 -0600
Subject: Add nfast group to barbican images

The nfast group is needed to configure barbican to use Thales HSM
devices with the PKCS#11 plugin.

Change-Id: I3de8ca07a34ae63eb91fc8d83bb0676425295cbc
---
 docker/barbican/barbican-base/Dockerfile.j2 | 2 +-
 kolla/common/config.py                      | 6 +++++-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/docker/barbican/barbican-base/Dockerfile.j2 b/docker/barbican/barbican-base/Dockerfile.j2
index 5cb53092b..06700527c 100644
--- a/docker/barbican/barbican-base/Dockerfile.j2
+++ b/docker/barbican/barbican-base/Dockerfile.j2
@@ -5,7 +5,7 @@ LABEL maintainer="{{ maintainer }}" name="{{ image_name }}" build-date="{{ build
 
 {% import "macros.j2" as macros with context %}
 
-{{ macros.configure_user(name='barbican') }}
+{{ macros.configure_user(name='barbican', groups='nfast') }}
 
 {% if install_type == 'binary' %}
     {% if base_distro in ['centos', 'oraclelinux', 'rhel'] %}
diff --git a/kolla/common/config.py b/kolla/common/config.py
index 6121fd9ac..16a790197 100755
--- a/kolla/common/config.py
+++ b/kolla/common/config.py
@@ -1130,7 +1130,11 @@ USERS = {
     'tempest-user': {
         'uid': 42480,
         'gid': 42480,
-    }
+    },
+    'nfast-user': {
+        'uid': 42481,  # unused user, but we need the group for thales hsm
+        'gid': 42481,
+    },
 }
 
 
-- 
cgit v1.2.3