openstack
/
tripleo-heat-templates
Code Issues Proposed changes

Merge "Set restrictive file permissions on Ceph keyrings for non-containerized deployment" into stable/ocata

This commit is contained in:
Zuul 2018-01-31 17:48:16 +00:00 committed by Gerrit Code Review
parent cd993c6233 8bf46a66e6
commit 1e42871fbe
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
puppet/services/ceph-base.yaml
View File

@ -131,7 +131,9 @@ outputs:
cap_mon: 'allow profile bootstrap-osd'
CEPH_CLIENT_KEY:
secret: {get_param: CephClientKey}
mode: '0644'
mode: '0640'
user: 'ceph'
group: 'ceph'
cap_mon: 'allow r'
cap_osd:
str_replace: