Merge "Fix keystone domains directory permissions"

2018-10-23 20:16:30 +00:00
parent 606a7e0b42 1192f93f6b
commit 0fd03fc88d
1 changed files with 6 additions and 1 deletions
--- a/ansible/roles/keystone/templates/keystone.json.j2
+++ b/ansible/roles/keystone/templates/keystone.json.j2
@@ -20,7 +20,7 @@
            "source": "{{ container_config_directory }}/domains",
            "dest": "/etc/keystone/domains",
            "owner": "keystone",
-            "perm": "0700",
+            "perm": "0600",
            "optional": true
        }{% if keystone_policy_file is defined %},
        {
@@ -49,6 +49,11 @@
            "path": "/etc/keystone/fernet-keys",
            "owner": "keystone:keystone",
            "perm": "0770"
+        },
+        {
+            "path": "/etc/keystone/domains",
+            "owner": "keystone:keystone",
+            "perm": "0700"
        }
    ]
 }