Add mode to container hotfix playbook file copies

Author: Alex-Welsh

doc/source/operations/hotfix-playbook.rst

@@ -29,8 +29,8 @@ Playbook variables:
   containers. Default is an empty string.
 
 * ``container_hotfix_files``: A list of files to copy into each target
-  container. Consists of a list of dicts with keys ``src`` and ``dest``.
-  Default is an empty list.
+  container. Consists of a list of dicts with keys ``src`` and ``dest``
+  (required), and ``mode`` (optional - default 400). Default is an empty list.
 
 * ``container_hotfix_container_regex``: Regex to match container names against.
   Must match the entire name e.g. "nova" or "nova*" will result in only
@@ -62,6 +62,7 @@ Example Variables file
     container_hotfix_files:
       - src: "~/quick-fix.sh"
         dest: "/tmp/quick-fix.sh"
+        mode: "700"
       - src: "/home/stackhpc/new_nova_conf.conf"
         dest: "/etc/nova/nova.conf"
     container_hotfix_container_regex: "nova.*"

etc/kayobe/ansible/run-container-hotfix.yml

@@ -9,6 +9,13 @@
       loop: "{{ container_hotfix_files }}"
       loop_control:
         index_var: index
+
+    - name: Set mode for copied files
+      command: "{{ kolla_container_engine | default('docker') }} exec {{ '-u 0' if container_hotfix_become else '' }} {{ hotfix_container }} chmod {{ item.mode | default('400') }} {{ item.dest }}"
+      loop: "{{ container_hotfix_files }}"
+      loop_control:
+        index_var: index
+
   when: container_hotfix_files != []
 
 - name: Run container_hotfix_command