Fix ceph keyring permissions

When ceph osd are not on same nodes than cinder a keyring permissions
problem appear. With this ordering the problem doesn't appear anymore
and all node get the right permissions for the ceph keyring file.

Change-Id: Ib8c5394f56f06192911669d84c172e74d388fafa
(cherry picked from commit a29ff73153)

manifests/compute/hypervisor.pp

@@ -359,7 +359,6 @@ Host *
 
     # Configure Ceph keyring
     Ceph::Key <<| title == $cinder_rbd_user |>>
-    if defined(Ceph::Key[$cinder_rbd_user]) {
     ensure_resource(
       'file',
       "/etc/ceph/ceph.client.${cinder_rbd_user}.keyring", {
@@ -370,7 +369,6 @@ Host *
         notify  => Service['nova-compute'],
       }
     )
-    }
 
     Concat::Fragment <<| title == 'ceph-client-os' |>>
   } else {

manifests/volume/backend/rbd.pp

@@ -84,14 +84,12 @@ define cloud::volume::backend::rbd (
 
   # Configure Ceph keyring
   Ceph::Key <<| title == $rbd_user |>>
-  if defined(Ceph::Key[$rbd_user]) {
   ensure_resource('file', "/etc/ceph/ceph.client.${rbd_user}.keyring", {
     owner => 'root',
     group => 'cephkeyring',
     mode => '0440',
     require => Ceph::Key[$rbd_user],
   })
-  }
 
   Concat::Fragment <<| title == 'ceph-client-os' |>>
 

spec/classes/cloud_compute_hypervisor_spec.rb

@@ -383,6 +383,11 @@ describe 'cloud::compute::hypervisor' do
           :command => 'usermod -a -G cephkeyring nova',
           :unless  => 'groups nova | grep cephkeyring'
         )
+        is_expected.to contain_file('/etc/ceph/ceph.client.cinder.keyring').with({
+          'owner'  => 'root',
+          'group'  => 'cephkeyring',
+          'mode'   => '0440',
+        })
       end
 
       it 'configure libvirt driver' do

spec/classes/cloud_volume_storage_spec.rb

@@ -154,6 +154,11 @@ describe 'cloud::volume::storage' do
           :path    => ['/usr/sbin', '/usr/bin', '/bin', '/sbin'],
           :unless  => 'groups cinder | grep cephkeyring'
         )
+        is_expected.to contain_file('/etc/ceph/ceph.client.cinder.keyring').with({
+          'owner'  => 'root',
+          'group'  => 'cephkeyring',
+          'mode'   => '0440',
+        })
       end
     end