openstack
/
kolla-ansible
Code Issues Proposed changes

Merge "Fix permission denied during Fernet key rotation"

This commit is contained in:
Zuul 2020-10-28 20:50:01 +00:00 committed by Gerrit Code Review
parent ecf567d6ee b45679f122
commit f5f94d77ef
3 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
ansible/roles/keystone/templates/keystone-fernet.json.j2
View File

@ -50,5 +50,12 @@
"owner": "keystone", "owner": "keystone",
"perm": "0600" "perm": "0600"
}{% endif %} }{% endif %}
],
"permissions": [
{
"path": "/etc/keystone/fernet-keys",
"owner": "keystone:keystone",
"perm": "0770"
}
] ]
} }

7
ansible/roles/keystone/templates/keystone-ssh.json.j2
View File

@ -13,5 +13,12 @@
"owner": "keystone", "owner": "keystone",
"perm": "0600" "perm": "0600"
} }
],
"permissions": [
{
"path": "/etc/keystone/fernet-keys",
"owner": "keystone:keystone",
"perm": "0770"
}
] ]
} }

7
releasenotes/notes/fix-keystone-fernet-perms-82632fb9e53ca3d5.yaml Normal file
View File

@ -0,0 +1,7 @@
---
fixes:
- |
Fixes an issue where Keystone Fernet key rotation may fail due to
permission denied error if the Keystone rotation happens before the
Keystone container starts. `LP#1888512
<https://bugs.launchpad.net/kolla-ansible/+bug/1888512>`__