cinder keyring: align cinder & nova permissions

Set same permissions on the same resource to avoid conflicts when puppet
compiles the catalog.

Bug #402

manifests/compute/hypervisor.pp

@@ -144,9 +144,9 @@ Host *
     Ceph::Key <<| title == $cinder_rbd_user |>>
 
     ensure_resource('file', "/etc/ceph/ceph.client.${cinder_rbd_user}.keyring", {
-      owner   => 'nova',
-      group   => 'nova',
-      mode    => '0400',
+      owner   => 'cinder',
+      group   => 'cinder',
+      mode    => '0444',
       require => "Ceph::Key[${cinder_rbd_user}]",
     })
     Concat::Fragment <<| title == 'ceph-client-os' |>>

manifests/volume/backend/rbd.pp

@@ -76,7 +76,7 @@ define cloud::volume::backend::rbd (
   ensure_resource('file', "/etc/ceph/ceph.client.${rbd_user}.keyring", {
     owner   => 'cinder',
     group   => 'cinder',
-    mode    => '0400',
+    mode    => '0444',
     require => "Ceph::Key[${rbd_user}]",
   })
   Concat::Fragment <<| title == 'ceph-client-os' |>>