From 671bc382601fb36ecfeedcc83609fc9a8f609ca1 Mon Sep 17 00:00:00 2001 From: "Crank, Daniel (dc6350)" Date: Fri, 1 Nov 2019 16:07:12 -0500 Subject: [PATCH] Make site and rendered yamls world-readable Make files collected and rendered by Pegleg (owned by root and 640 by default) world-readable so non-root Promenade processes can read them. Change-Id: Ic5bce645ebf58c106fd59701b3f282f9e2455f0e --- .../multi_nodes_gate/airship_gate/stages/pegleg-collect.sh | 7 +++++++ .../multi_nodes_gate/airship_gate/stages/pegleg-render.sh | 7 +++++++ 2 files changed, 14 insertions(+) diff --git a/tools/multi_nodes_gate/airship_gate/stages/pegleg-collect.sh b/tools/multi_nodes_gate/airship_gate/stages/pegleg-collect.sh index a82b1fd6..228edbc2 100755 --- a/tools/multi_nodes_gate/airship_gate/stages/pegleg-collect.sh +++ b/tools/multi_nodes_gate/airship_gate/stages/pegleg-collect.sh @@ -88,3 +88,10 @@ then else collect_design_docs fi + +# TODO(dc6350): as of 11/4/2019, Pegleg is running as root and +# producing files with permission 640, and Promenade tasks running +# as non-root users cannot read them. This line makes the files +# world-readable and can be removed when Pegleg is no longer +# running as root. +sudo chmod 644 "${DEFINITION_DEPOT}"*.yaml diff --git a/tools/multi_nodes_gate/airship_gate/stages/pegleg-render.sh b/tools/multi_nodes_gate/airship_gate/stages/pegleg-render.sh index 317735e2..1132d928 100755 --- a/tools/multi_nodes_gate/airship_gate/stages/pegleg-render.sh +++ b/tools/multi_nodes_gate/airship_gate/stages/pegleg-render.sh @@ -75,3 +75,10 @@ collect_rendered_doc() { log "Collecting rendered document to ${RENDERED_DEPOT}" collect_rendered_doc + +# TODO(dc6350): as of 11/4/2019, Pegleg is running as root and +# producing files with permission 640, and Promenade tasks running +# as non-root users cannot read them. This line makes the files +# world-readable and can be removed when Pegleg is no longer +# running as root. +sudo chmod 644 "${RENDERED_DEPOT}"*.yaml