kolla-ansible/fix-keystone-fernet-perms-82632fb9e53ca3d5.yaml at master - kolla-ansible - OpenDev: Free Software Needs Free Tools

openstack/kolla-ansible

Mark Goddard b45679f122 Fix permission denied during Fernet key rotation

During a deploy, if keystone Fernet key rotation happens before the
keystone container starts, the rotation may fail with 'permission
denied'. This happens because config.json for Keystone sets the
permissions for /etc/keystone/fernet-keys.

This change fixes the issue by also setting the permissions for
/etc/keystone/fernet-keys in config.json for keystone-fernet and
keystone-ssh.

Change-Id: I561e4171d14dcaad8a2a9a36ccab84a670daa904
Closes-Bug: #1888512

2020-10-22 09:33:11 +01:00

8 lines

265 B

YAML

Raw Permalink Blame History

 ---
 fixes:
   - |
     Fixes an issue where Keystone Fernet key rotation may fail due to
     permission denied error if the Keystone rotation happens before the
     Keystone container starts. `LP#1888512
     <https://bugs.launchpad.net/kolla-ansible/+bug/1888512>`__