Handling GlusterFS storage security in OpenShift containers

1 files changed, 16 insertions, 2 deletions

diff --git a/roles/ands_kaas/tasks/file.yml b/roles/ands_kaas/tasks/file.yml
index 9a36e74..479ec68 100644
--- a/roles/ands_kaas/tasks/file.yml
+++ b/roles/ands_kaas/tasks/file.yml
@@ -1,9 +1,23 @@
 ---
+- name: Set group
+  set_fact: group="{{ file.group | default(kaas_project_config.file_group | default(ands_default_file_group)) }}"
+
+- name : Resolve project groups
+  set_fact: group="{{ (kaas_project_config.gids | default(ands_openshift_gids))[group].id }}"
+  when: group in ( kaas_project_config.gids | default(ands_openshift_gids) )
+
+- name: Set owner
+  set_fact: owner="{{ file.owner | default(kaas_project_config.file_owner | default(ands_default_file_owner)) }}"
+
+- name : Resolve project uids
+  set_fact: owner="{{ (kaas_project_config.uids | default(ands_openshift_uids) )[owner].id }}"
+  when: owner in ( kaas_project_config.uids | default(ands_openshift_uids) )
+
 - name: "Setting up files in {{ path }}"
   file: 
     path: "{{ path }}" 
     recurse: "{{ file.recurse | default(true) }}" 
     mode: "{{ file.mode | default( ((file.state | default('directory')) == 'directory') | ternary('0755', '0644') ) }}"
-    owner: "{{ file.owner | default(kaas_project_config.file_owner) | default(kaas_default_file_owner) }}" 
-    group: "{{ file.group | default(kaas_project_config.file_group) | default(kaas_default_file_group) }}"
+    owner: "{{ owner }}" 
+    group: "{{ group }}"
     state: "{{ file.state | default('directory') }}"