Fix "key_repository is world readable: /etc/keystone/fernet-keys/" warning

TrivialFix Change-Id: Ia54ee5cae2ffcdcca24cb162699e09b0808a1037 Depends-on: Ida2ed62eaba8908fb0bd50bb0be00fb5f9b1adc3
2017-05-26 17:40:09 +02:00 · 2017-05-26 17:40:09 +02:00 · 6625e84863
commit 6625e84863
parent b1b501cc08
1 changed files with 5 additions and 0 deletions
--- a/ansible/roles/keystone/templates/keystone.json.j2
+++ b/ansible/roles/keystone/templates/keystone.json.j2
@ -45,6 +45,11 @@
        {
            "path": "/var/log/kolla/keystone/keystone.log",
            "owner": "keystone:keystone"
+        },
+        {
+            "path": "/etc/keystone/fernet-keys",
+            "owner": "keystone:keystone",
+            "perm": "0770"
        }
    ]
 }