Fixed permission on `keystone-manage.log` in keystone.upgrade.pre state
It needed because `keystone-manage doctor` is ran under keystone user.
Related-PROD: PROD-30473
Change-Id: Ibf41ad3e520c743205d8edccd41ebf1da35e2dd3
diff --git a/keystone/upgrade/pre/init.sls b/keystone/upgrade/pre/init.sls
index 34438ac..d71af92 100644
--- a/keystone/upgrade/pre/init.sls
+++ b/keystone/upgrade/pre/init.sls
@@ -6,6 +6,13 @@
{%- if server.enabled %}
+{#- NOTE(oshyshko): we've run `keystone-manage doctor` run as under keystone user and we need to correct permissions for keystone-manage.log #}
+/var/log/keystone/keystone-manage.log:
+ file.managed:
+ - user: keystone
+ - group: keystone
+ - unless: test -f /var/log/keystone/keystone-manage.log
+
keystone_doctor:
cmd.run:
- name: keystone-manage doctor