Allow swift log file permissions to be set

This patch adds the ability to configure the log file permissions.

This is primarily to address a gating issue where the jenkins does
not have access to the account, container and object service logs.

That said, it's generaly useful to have this option available.

Change-Id: Ibc3d66273a4494414dde1a95ec132ff83c235f9c

defaults/main.yml

@@ -47,9 +47,11 @@ swift_system_group_name: swift
 swift_system_shell: /bin/bash
 swift_system_comment: swift system user
 swift_system_home_folder: "/var/lib/{{ swift_system_user_name }}"
+
 ## Swift Syslog User / Group
 swift_syslog_user_name: syslog
 swift_syslog_group_name: syslog
+swift_syslog_log_perms: "0644"
 
 ## Auth token
 swift_delay_auth_decision: true

releasenotes/notes/swift-syslog-log-perms-5a116171a1adeae3.yaml

@@ -0,0 +1,6 @@
+---
+features:
+  - The os_swift role now allows the permissions for the log files created
+    by the swift account, container and object servers to be set. The
+    variable is ``swift_syslog_log_perms`` and is set to ``0644`` by
+    default.

templates/swift-rsyslog.conf.j2

@@ -7,6 +7,8 @@
 #$template HourlyProxyLog,"/var/log/swift/hourly/%$YEAR%%$MONTH%%$DAY%%$HOUR%"
 #local1.*;local1.!notice ?HourlyProxyLog
 
+$FileCreateMode {{ swift_syslog_log_perms }}
+
 local1.*;local1.!notice /var/log/swift/proxy.log
 local1.notice           /var/log/swift/proxy-error.log
 local1.*                ~