blsmith/dc-deployments-automation
1
0
Fork 0
mirror of https://bitbucket.org/atlassian/dc-deployments-automation.git synced 2025-12-13 16:33:08 -06:00
Code Issues Packages Projects Releases Wiki Activity

ITPLT-3785 can't recursively manage permissions on a single file; manage permissions for atl_product_version_cache file when written instead

Browse Source
This commit is contained in:
Lee Goolsbee
2024-06-11 17:50:07 -05:00
parent ee9348473a
commit 5caddaede1
4 changed files with 9 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
roles/confluence_config/tasks/main.yml
View File

@@ -66,16 +66,13 @@
owner: "{{ atl_product_user }}" owner: "{{ atl_product_user }}"
group: "{{ atl_product_user }}" group: "{{ atl_product_user }}"
- name: Limit permissions on the installer temp and version cache directories, recursively - name: Limit permissions on the installer temp directory, recursively
ansible.builtin.file: ansible.builtin.file:
path: "{{ item }}" path: "{{ atl_installer_temp }}"
owner: "root" owner: "root"
group: "root" group: "root"
mode: "u=rwX,g=rX,o=rX" mode: "u=rwX,g=rX,o=rX"
recurse: true recurse: true
with_items:
- "{{ atl_installer_temp }}"
- "{{ atl_product_version_cache }}"
changed_when: false # For Molecule idempotence check changed_when: false # For Molecule idempotence check
- name: Limit permissions on the installation directory, non-recursively - name: Limit permissions on the installation directory, non-recursively

7
roles/crowd_config/tasks/main.yml
View File

@@ -66,16 +66,13 @@
- "{{ atl_product_shared_plugins }}" - "{{ atl_product_shared_plugins }}"
changed_when: false # For Molecule idempotence check changed_when: false # For Molecule idempotence check
- name: Limit permissions on the installer temp and version cache directories, recursively - name: Limit permissions on the installer temp directory, recursively
ansible.builtin.file: ansible.builtin.file:
path: "{{ item }}" path: "{{ atl_installer_temp }}"
owner: "root" owner: "root"
group: "root" group: "root"
mode: "u=rwX,g=rX,o=rX" mode: "u=rwX,g=rX,o=rX"
recurse: true recurse: true
with_items:
- "{{ atl_installer_temp }}"
- "{{ atl_product_version_cache }}"
changed_when: false # For Molecule idempotence check changed_when: false # For Molecule idempotence check
- name: Limit permissions on the installation directory, non-recursively - name: Limit permissions on the installation directory, non-recursively

7
roles/jira_config/tasks/main.yml
View File

@@ -75,16 +75,13 @@
- "{{ atl_product_shared_plugins }}" - "{{ atl_product_shared_plugins }}"
changed_when: false # For Molecule idempotence check changed_when: false # For Molecule idempotence check
- name: Limit permissions on the installer temp and version cache directories, recursively - name: Limit permissions on the installer temp directory, recursively
ansible.builtin.file: ansible.builtin.file:
path: "{{ item }}" path: "{{ atl_installer_temp }}"
owner: "root" owner: "root"
group: "root" group: "root"
mode: "u=rwX,g=rX,o=rX" mode: "u=rwX,g=rX,o=rX"
recurse: true recurse: true
with_items:
- "{{ atl_installer_temp }}"
- "{{ atl_product_version_cache }}"
changed_when: false # For Molecule idempotence check changed_when: false # For Molecule idempotence check
- name: Limit permissions on the installation directory, non-recursively - name: Limit permissions on the installation directory, non-recursively

3
roles/product_install/tasks/main.yml
View File

@@ -136,6 +136,9 @@
ansible.builtin.template: ansible.builtin.template:
src: version.j2 src: version.j2
dest: "{{ atl_product_version_cache }}" dest: "{{ atl_product_version_cache }}"
owner: "root"
group: "root"
mode: "u=rwX,g=rX,o=rX"
force: true force: true
# For the first run a temp binary should be downloaded but moved to # For the first run a temp binary should be downloaded but moved to