openstack
/
charm-gnocchi
Code Issues Proposed changes

Update WSGI process group 

Ensure WSGI processes run under the 'gnocchi' group to
support restriction in permissions to /etc/gnocchi/* to
root or members of the gnocchi group.

This change also picks up changes in charms.openstack
to support this functionality, as well as fixing
misc issues with upgrades.

Change-Id: I14d865cd96b7c250ad92c8bdee74693a6eccc769
Closes-Bug: 1780490
Closes-Bug: 1779062
Related-Bug: 1781468
This commit is contained in:
James Page 2018-07-17 15:28:40 -04:00
parent 6ee36ed574
commit bc1745115b
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/templates/gnocchi-api.conf
View File

@ -7,7 +7,7 @@
Listen {{ options.service_listen_info.gnocchi_api.public_port }}
<VirtualHost *:{{ options.service_listen_info.gnocchi_api.public_port }}>
WSGIDaemonProcess gnocchi-api processes={{ options.wsgi_worker_context.processes }} threads=10 user=gnocchi display-name=%{GROUP}
WSGIDaemonProcess gnocchi-api processes={{ options.wsgi_worker_context.processes }} threads=10 user=gnocchi group=gnocchi display-name=%{GROUP}
WSGIProcessGroup gnocchi-api
WSGIScriptAlias / /usr/share/gnocchi-common/app.wsgi
WSGIApplicationGroup %{GLOBAL}

2
src/templates/newton/gnocchi-api.conf
View File

@ -7,7 +7,7 @@
Listen {{ options.service_listen_info.gnocchi_api.public_port }}
<VirtualHost *:{{ options.service_listen_info.gnocchi_api.public_port }}>
WSGIDaemonProcess gnocchi-api processes={{ options.wsgi_worker_context.processes }} threads=10 user=gnocchi display-name=%{GROUP}
WSGIDaemonProcess gnocchi-api processes={{ options.wsgi_worker_context.processes }} threads=10 user=gnocchi group=gnocchi display-name=%{GROUP}
WSGIProcessGroup gnocchi-api
WSGIScriptAlias / /usr/bin/gnocchi-api
WSGIApplicationGroup %{GLOBAL}