Rsync capability issue

[ta/caas-registry.git] / ansible / roles / swift / templates / main / swift_main.yml

diff --git a/ansible/roles/swift/templates/main/swift_main.yml b/ansible/roles/swift/templates/main/swift_main.yml
index f2c1327..a5560f4 100644 (file)
--- a/ansible/roles/swift/templates/main/swift_main.yml
+++ b/ansible/roles/swift/templates/main/swift_main.yml
@@ -40,7 +40,7 @@ spec:
           image: {{ container_image_names | select('search', '/swift') | list | last }}
           securityContext:
             capabilities:
-              add: ["NET_BIND_SERVICE"]
+              add: ["NET_BIND_SERVICE", "SETGID", "SETUID"]
           args:
             - BACKEND
           resources:
@@ -52,11 +52,11 @@ spec:
               memory: "1Gi"
           env:
             - name: "SWIFT_USER"
-              value: "{{ swift_user_for_template.stdout }}"
+              value: "{{ caas.swift_credential.user }}"
             - name: "SWIFT_TENANT"
-              value: "{{ swift_tenant_for_template.stdout }}"
+              value: "{{ caas.swift_credential.tenant }}"
             - name: "SWIFT_PASS"
-              value: "{{ swift_password_for_template.stdout }}"
+              value: "{{ caas.swift_credential.password }}"
             - name: "SWIFT_PART_POWER"
               value: "7"
             - name: "SWIFT_PART_HOUR"