Add possibility to manage file permissions of config files
Fixes-bug: PROD-36558
Change-Id: Ie65b7749b0cbeb1df660192f7f82822eb1014ff1
diff --git a/README.rst b/README.rst
index 4bae229..e9d4666 100644
--- a/README.rst
+++ b/README.rst
@@ -300,6 +300,38 @@
# Add key without value to remove line from policy.json
get_quotas:
+
+Change files/directories permissions for designate service:
+=======================================
+In order to change file permissions the following should be set:
+
+'files' - block to set permissions for files.
+- full path to file
+- user ( default value is 'root' ) this parameter is optional.
+- group ( default value is 'designate' ) this parameter is optional
+- mode ( default value is '0640' ) this parameter is optional
+
+'directories' - block to set permissions for directories.
+- full path to directory
+- user ( default value is 'root' ) this parameter is optional
+- group ( default value is 'designate' ) this parameter is optional
+- mode ( default value is '0750' ) this parameter is optional
+
+.. code-block:: yaml
+
+ designate:
+ files:
+ /etc/designate/designate.conf:
+ user: 'root'
+ group: 'designate'
+ mode: '0750'
+ directories:
+ /etc/designate:
+ user: 'root'
+ group: 'designate'
+ mode: '0750'
+
+
Upgrades
========