kolla-ansible/ansible/roles/keystone/templates/keystone.json.j2
Christian Berendt 6625e84863 Fix "key_repository is world readable: /etc/keystone/fernet-keys/" warning
TrivialFix

Change-Id: Ia54ee5cae2ffcdcca24cb162699e09b0808a1037
Depends-on: Ida2ed62eaba8908fb0bd50bb0be00fb5f9b1adc3
2017-09-11 11:28:16 +00:00

56 lines
1.8 KiB
Django/Jinja

{% set keystone_cmd = 'apache2' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd' %}
{% set keystone_dir = 'apache2/conf-enabled' if kolla_base_distro in ['ubuntu', 'debian'] else 'httpd/conf.d' %}
{
"command": "/usr/sbin/{{ keystone_cmd }}",
"config_files": [
{
"source": "{{ container_config_directory }}/keystone.conf",
"dest": "/etc/keystone/keystone.conf",
"owner": "keystone",
"perm": "0600"
},
{
"source": "{{ container_config_directory }}/keystone-paste.ini",
"dest": "/etc/keystone/keystone-paste.ini",
"owner": "keystone",
"perm": "0600",
"optional": true
},
{
"source": "{{ container_config_directory }}/domains",
"dest": "/etc/keystone/domains",
"owner": "keystone",
"perm": "0700",
"optional": true
},
{
"source": "{{ container_config_directory }}/policy.json",
"dest": "/etc/keystone/policy.json",
"owner": "keystone",
"perm": "0600",
"optional": true
},
{
"source": "{{ container_config_directory }}/wsgi-keystone.conf",
"dest": "/etc/{{ keystone_dir }}/wsgi-keystone.conf",
"owner": "keystone",
"perm": "0600"
}
],
"permissions": [
{
"path": "/var/log/kolla",
"owner": "keystone:kolla"
},
{
"path": "/var/log/kolla/keystone/keystone.log",
"owner": "keystone:keystone"
},
{
"path": "/etc/keystone/fernet-keys",
"owner": "keystone:keystone",
"perm": "0770"
}
]
}