Add neutron-rootwrap-daemon to neutron_sudoers

There is no way to use neutron-rootwrap-daemon to improve Neutron
rootwrap performance at scale with the current Neutron images.

Using neutron-rootwrap on huge environment could have a performance
impact on many actions and be the root cause of failure during
instance creation.

Operators should have the choice:
  - neutron-rootwrap
  - neutron-rootwrap-daemon

Change-Id: I6c65cf6498364e670cc61419dc3a2c19f6fb412d
Closes-Bug: #1808457
This commit is contained in:
Gaëtan Trellu 2018-12-13 21:58:52 -05:00
parent 3888134908
commit 4ed611a0bd
1 changed files with 1 additions and 0 deletions

View File

@ -1 +1,2 @@
neutron ALL = (root) NOPASSWD: /var/lib/kolla/venv/bin/neutron-rootwrap /etc/neutron/rootwrap.conf *
neutron ALL = (root) NOPASSWD: /var/lib/kolla/venv/bin/neutron-rootwrap-daemon /etc/neutron/rootwrap.conf