Merge "Change default permission for cephx keyring files"

tripleo_ansible/roles/tripleo_ceph_client/tasks/create_keys.yml

@@ -15,12 +15,9 @@
 # under the License.
 
 - name: create cephx key(s)
-  become: true
   template:
     src: templates/ceph_key.j2
     dest: "{{ tripleo_ceph_client_fetch_dir }}/{{ tripleo_ceph_client_cluster | default('ceph') }}.{{ item.name }}.keyring"
-    group: root
-    owner: root
-    mode: 0644
+    mode: 0600
     force: true
   loop: "{{ ceph_keys| default([]) }}"

tripleo_ansible/roles/tripleo_ceph_client/tasks/sync.yml

@@ -55,5 +55,6 @@
       copy:
         src: "{{ item[0] }}"
         dest: "{{ tripleo_ceph_client_config_home }}/{{ item[0] | basename }}"
+        mode: "{{ '600' if item[0] | regex_search('.*.keyring$') else '644' }}"
       delegate_to: "{{ item[1] }}"
       loop: "{{ tripleo_ceph_client_dist }}"