274291463e
Many of the templates use 600, remove unnecessary permission on these templates to bring them in line with the others. Change-Id: I30fe1b3822b9c7bb6ab98729fc519dc1d603db27
50 lines
1.6 KiB
Django/Jinja
50 lines
1.6 KiB
Django/Jinja
{% set keystone_cmd = 'apache2' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd' %}
|
|
{% set keystone_dir = 'apache2/conf-enabled' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd/conf.d' %}
|
|
{
|
|
"command": "/usr/sbin/{{ keystone_cmd }}",
|
|
"config_files": [
|
|
{
|
|
"source": "{{ container_config_directory }}/keystone.conf",
|
|
"dest": "/etc/keystone/keystone.conf",
|
|
"owner": "keystone",
|
|
"perm": "0600"
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/keystone-paste.ini",
|
|
"dest": "/etc/keystone/keystone-paste.ini",
|
|
"owner": "keystone",
|
|
"perm": "0600"
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/domains",
|
|
"dest": "/etc/keystone/domains",
|
|
"owner": "keystone",
|
|
"perm": "0700",
|
|
"optional": true
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/policy.json",
|
|
"dest": "/etc/keystone/policy.json",
|
|
"owner": "keystone",
|
|
"perm": "0600",
|
|
"optional": true
|
|
},
|
|
{
|
|
"source": "{{ container_config_directory }}/wsgi-keystone.conf",
|
|
"dest": "/etc/{{ keystone_dir }}/wsgi-keystone.conf",
|
|
"owner": "keystone",
|
|
"perm": "0600"
|
|
}
|
|
],
|
|
"permissions": [
|
|
{
|
|
"path": "/var/log/kolla",
|
|
"owner": "keystone:kolla"
|
|
},
|
|
{
|
|
"path": "/var/log/kolla/keystone/keystone.log",
|
|
"owner": "keystone:keystone"
|
|
}
|
|
]
|
|
}
|