Merge pull request #45 from hemanthnakkina/add-users-to-service-defs

Add user/group to service definitions
canonical · Apr 5, 2024 · 96b8417 · 96b8417
2 parents 5c7c4da + 79f6478
commit 96b8417
Show file tree

Hide file tree

Showing 22 changed files with 45 additions and 1 deletion.
diff --git a/rocks/aodh-evaluator/rockcraft.yaml b/rocks/aodh-evaluator/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   aodh-evaluator:
     override: replace
     command: aodh-evaluator
+    user: aodh
+    group: aodh
 
 parts:
   aodh-user:

diff --git a/rocks/aodh-expirer/rockcraft.yaml b/rocks/aodh-expirer/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   aodh-expirer:
     override: replace
     command: aodh-expirer
+    user: aodh
+    group: aodh
 
 parts:
   aodh-user:

diff --git a/rocks/aodh-listener/rockcraft.yaml b/rocks/aodh-listener/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   aodh-listener:
     override: replace
     command: aodh-listener
+    user: aodh
+    group: aodh
 
 parts:
   aodh-user:

diff --git a/rocks/aodh-notifier/rockcraft.yaml b/rocks/aodh-notifier/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   aodh-notifier:
     override: replace
     command: aodh-notifier
+    user: aodh
+    group: aodh
 
 parts:
   aodh-user:

diff --git a/rocks/barbican-worker/rockcraft.yaml b/rocks/barbican-worker/rockcraft.yaml
@@ -18,6 +18,8 @@ services:
   barbican-worker:
     override: replace
     command: barbican-worker
+    user: barbican
+    group: barbican
 
 parts:
   barbican-user:

diff --git a/rocks/ceilometer-central/rockcraft.yaml b/rocks/ceilometer-central/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   ceilometer-central:
     override: replace
     command: ceilometer-polling --polling-namespaces central
+    user: ceilometer
+    group: ceilometer
 
 parts:
   ceilometer-user:

diff --git a/rocks/ceilometer-notification/rockcraft.yaml b/rocks/ceilometer-notification/rockcraft.yaml
@@ -18,7 +18,9 @@ package-repositories:
 services:
   ceilometer-notification:
     override: replace
-    command: ceilometer-agent-notification 
+    command: ceilometer-agent-notification
+    user: ceilometer
+    group: ceilometer
 
 parts:
   ceilometer-user:

diff --git a/rocks/cinder-scheduler/rockcraft.yaml b/rocks/cinder-scheduler/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   cinder-scheduler:
     override: replace
     command: cinder-scheduler --use-syslog
+    user: cinder
+    group: cinder
 
 parts:
   cinder-user:

diff --git a/rocks/cinder-volume/rockcraft.yaml b/rocks/cinder-volume/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   cinder-volume:
     override: replace
     command: cinder-volume --use-syslog
+    user: cinder
+    group: cinder
 
 parts:
   cinder-user:

diff --git a/rocks/designate-central/rockcraft.yaml b/rocks/designate-central/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   designate-central:
     override: replace
     command: designate-central
+    user: designate
+    group: designate
 
 parts:
   designate-user:

diff --git a/rocks/designate-mdns/rockcraft.yaml b/rocks/designate-mdns/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   designate-mdns:
     override: replace
     command: designate-mdns
+    user: designate
+    group: designate
 
 parts:
   designate-user:

diff --git a/rocks/designate-producer/rockcraft.yaml b/rocks/designate-producer/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   designate-producer:
     override: replace
     command: designate-producer
+    user: designate
+    group: designate
 
 parts:
   designate-user:

diff --git a/rocks/designate-worker/rockcraft.yaml b/rocks/designate-worker/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   designate-worker:
     override: replace
     command: designate-worker
+    user: designate
+    group: designate
 
 parts:
   designate-user:

diff --git a/rocks/glance-api/rockcraft.yaml b/rocks/glance-api/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   glance-api:
     override: replace
     command: /usr/bin/glance-api --config-file /etc/glance/glance-api.conf
+    user: glance
+    group: glance
   "apache forwarder":
     override: replace
     command: /usr/sbin/apache2ctl -DFOREGROUND

diff --git a/rocks/gnocchi-metricd/rockcraft.yaml b/rocks/gnocchi-metricd/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   gnocchi-metricd:
     override: replace
     command: gnocchi-metricd
+    user: gnocchi
+    group: gnocchi
 
 parts:
   gnocchi-user:

diff --git a/rocks/heat-engine/rockcraft.yaml b/rocks/heat-engine/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   heat-engine:
     override: replace
     command: /usr/bin/heat-engine
+    user: heat
+    group: heat
 
 parts:
   heat-user:

diff --git a/rocks/magnum-conductor/rockcraft.yaml b/rocks/magnum-conductor/rockcraft.yaml
@@ -20,6 +20,8 @@ services:
   magnum-conductor:
     override: replace
     command: magnum-conductor
+    user: magnum
+    group: magnum
 
 parts:
   magnum-user:

diff --git a/rocks/neutron-server/rockcraft.yaml b/rocks/neutron-server/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   neutron-server:
     override: replace
     command: neutron-server
+    user: neutron
+    group: neutron
 
 parts:
   neutron-user:

diff --git a/rocks/nova-conductor/rockcraft.yaml b/rocks/nova-conductor/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   nova-conductor:
     override: replace
     command: nova-conductor
+    user: nova
+    group: nova
 
 parts:
   nova-user:

diff --git a/rocks/nova-scheduler/rockcraft.yaml b/rocks/nova-scheduler/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   nova-scheduler:
     override: replace
     command: nova-scheduler
+    user: nova
+    group: nova
 
 parts:
   nova-user:

diff --git a/rocks/octavia-driver-agent/rockcraft.yaml b/rocks/octavia-driver-agent/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   octavia-driver-agent:
     override: replace
     command: octavia-driver-agent
+    user: octavia
+    group: octavia
 
 parts:
   octavia-user:

diff --git a/rocks/octavia-housekeeping/rockcraft.yaml b/rocks/octavia-housekeeping/rockcraft.yaml
@@ -19,6 +19,8 @@ services:
   octavia-housekeeping:
     override: replace
     command: octavia-housekeeping
+    user: octavia
+    group: octavia
 
 parts:
   octavia-user: