Add current user to adm group to access logs (#4553)

Signed-off-by: Peter Zhu <[email protected]>

Author: peterzhuamazon

docker/ci/dockerfiles/current/test.almalinux8.systemd-base.x64.arm64.ppc64le.dockerfile

@@ -110,6 +110,7 @@ RUN dnf install -y sudo && \
     useradd -u 1002 -g 1002 opensearch-dashboards && \
     usermod -a -G opensearch $CONTAINER_USER && \
     usermod -a -G opensearch-dashboards $CONTAINER_USER && \
+    usermod -a -G adm $CONTAINER_USER && \
     id && \
     echo "$CONTAINER_USER ALL=(root) NOPASSWD:`which systemctl`, `which env`, `which usermod`, `which dnf`, `which yum`, `which rpm`, `which chmod`, `which kill`, `which curl`, /usr/share/opensearch-dashboards/bin/opensearch-dashboards-plugin" >> /etc/sudoers.d/$CONTAINER_USER
 

docker/ci/dockerfiles/current/test.ubuntu2004.systemd-base.x64.arm64.ppc64le.dockerfile

@@ -128,6 +128,7 @@ RUN apt-get install -y sudo && \
     useradd -u 1002 -g 1002 -s /bin/bash -d /home/opensearch-dashboards -m opensearch-dashboards && \
     usermod -a -G opensearch $CONTAINER_USER && \
     usermod -a -G opensearch-dashboards $CONTAINER_USER && \
+    usermod -a -G adm $CONTAINER_USER && \
     id && \
     echo "$CONTAINER_USER ALL=(root) NOPASSWD:`which systemctl`, `which env`, `which usermod`, `which apt`, `which apt-get`, `which apt-key`, `which dpkg`, `which chmod`, `which kill`, `which curl`, `which tee`, /usr/share/opensearch-dashboards/bin/opensearch-dashboards-plugin" >> /etc/sudoers.d/$CONTAINER_USER
 

docker/ci/dockerfiles/legacy/test.rockylinux8.systemd-base.x64.arm64.dockerfile

@@ -109,7 +109,7 @@ RUN dnf install -y sudo && \
     groupadd -g 1002 opensearch-dashboards && \
     useradd -u 1002 -g 1002 opensearch-dashboards && \
     usermod -a -G opensearch $CONTAINER_USER && \
-    usermod -a -G opensearch-dashboards $CONTAINER_USER && \
+    usermod -a -G adm $CONTAINER_USER && \
     id && \
     echo "$CONTAINER_USER ALL=(root) NOPASSWD:`which systemctl`, `which env`, `which usermod`, `which dnf`, `which yum`, `which rpm`, `which chmod`, `which kill`, `which curl`, /usr/share/opensearch-dashboards/bin/opensearch-dashboards-plugin" >> /etc/sudoers.d/$CONTAINER_USER
 

jenkins/opensearch-dashboards/integ-test.jenkinsfile

@@ -21,9 +21,9 @@ def docker_images = [
 ]
 
 def docker_args = [
-    "tar": "-u 1000 -e BROWSER_PATH=electron",
-    "rpm": "--entrypoint=/usr/lib/systemd/systemd -u root --privileged -v /sys/fs/cgroup:/sys/fs/cgroup:rw --cgroupns=host -e BROWSER_PATH=electron",
-    "deb": "--entrypoint=/usr/lib/systemd/systemd -u root --privileged -v /sys/fs/cgroup:/sys/fs/cgroup:rw --cgroupns=host -e BROWSER_PATH=electron",
+    "tar": "-u 1000",
+    "rpm": "--entrypoint=/usr/lib/systemd/systemd -u root --privileged -v /sys/fs/cgroup:/sys/fs/cgroup:rw --cgroupns=host",
+    "deb": "--entrypoint=/usr/lib/systemd/systemd -u root --privileged -v /sys/fs/cgroup:/sys/fs/cgroup:rw --cgroupns=host",
     "zip": "-u ContainerAdministrator",
 ]
 

src/test_workflow/integ_test/distribution_deb.py

@@ -50,7 +50,9 @@ def install(self, bundle_name: str) -> None:
                 '&&',
                 f'sudo chmod 0755 {os.path.dirname(self.config_path)} {self.log_dir}',
                 '&&',
-                f'sudo usermod -a -G {self.filename} `whoami`'
+                f'sudo usermod -a -G {self.filename} `whoami`',
+                '&&',
+                'sudo usermod -a -G adm `whoami`'
             ]
         )
         subprocess.check_call(deb_install_cmd, cwd=self.work_dir, shell=True)

src/test_workflow/integ_test/distribution_rpm.py

@@ -52,7 +52,9 @@ def install(self, bundle_name: str) -> None:
                 '&&',
                 f'sudo chmod 0755 {os.path.dirname(self.config_path)} {self.log_dir}',
                 '&&',
-                f'sudo usermod -a -G {self.filename} `whoami`'
+                f'sudo usermod -a -G {self.filename} `whoami`',
+                '&&',
+                'sudo usermod -a -G adm `whoami`'
             ]
         )
         subprocess.check_call(rpm_install_cmd, cwd=self.work_dir, shell=True)

tests/tests_test_workflow/test_integ_workflow/integ_test/test_distribution_deb.py

@@ -49,7 +49,8 @@ def test_install(self, check_call_mock: Mock) -> None:
                 "dpkg --install opensearch.deb && "
                 f"sudo chmod 0666 {self.distribution_deb.config_path} && "
                 f"sudo chmod 0755 {os.path.dirname(self.distribution_deb.config_path)} {self.distribution_deb.log_dir} && "
-                f"sudo usermod -a -G opensearch `whoami`"
+                f"sudo usermod -a -G opensearch `whoami` && "
+                f"sudo usermod -a -G adm `whoami`"
             ),
             args_list[0][0][0],
         )

tests/tests_test_workflow/test_integ_workflow/integ_test/test_distribution_rpm.py

@@ -49,7 +49,8 @@ def test_install(self, check_call_mock: Mock) -> None:
                 "yum install -y opensearch.rpm && "
                 f"sudo chmod 0666 {self.distribution_rpm.config_path} && "
                 f"sudo chmod 0755 {os.path.dirname(self.distribution_rpm.config_path)} {self.distribution_rpm.log_dir} && "
-                f"sudo usermod -a -G opensearch `whoami`"
+                f"sudo usermod -a -G opensearch `whoami` && "
+                f"sudo usermod -a -G adm `whoami`"
             ),
             args_list[0][0][0],
         )