From 9a8b6424ba06f9a86917969837aff38d7ae8c690 Mon Sep 17 00:00:00 2001
From: Stefan Hoffmann <stefan.hoffmann@cloudandheat.com>
Date: Wed, 27 Sep 2017 14:43:06 +0200
Subject: [PATCH] make fernet key file resource sensitive

Change-Id: I5481547214c7a96b64f3a183f494e3807c1c7735
Closes-Bug: #1719861
---
 recipes/_fernet_tokens.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/recipes/_fernet_tokens.rb b/recipes/_fernet_tokens.rb
index 01488ac..a4f15ac 100644
--- a/recipes/_fernet_tokens.rb
+++ b/recipes/_fernet_tokens.rb
@@ -40,5 +40,6 @@ node['openstack']['identity']['fernet']['keys'].each do |key_index|
     owner node['openstack']['identity']['user']
     group node['openstack']['identity']['group']
     mode 0o0400
+    sensitive true
   end
 end