Fixed permission on `keystone-manage.log` in keystone.upgrade.pre state

  It needed because `keystone-manage doctor` is ran under keystone user.

Change-Id: I610d1b35af69a68dc73695450a384ad3df70c7fe
Related-PROD: PROD-30473
(cherry picked from commit 3b163781d9d7afce429bb1ae46f8a6c3517e420f)
diff --git a/keystone/upgrade/pre/init.sls b/keystone/upgrade/pre/init.sls
index 34438ac..8c7bfef 100644
--- a/keystone/upgrade/pre/init.sls
+++ b/keystone/upgrade/pre/init.sls
@@ -6,6 +6,13 @@
 
 {%- if server.enabled %}
 
+{#- NOTE(oshyshko): we've run `keystone-manage doctor` run as under keystone user and we need to correct permissions for keystone-manage.log #}
+/var/log/keystone/keystone-manage.log:
+  file.managed:
+  - user: keystone
+  - group: keystone
+  - onlyif: test -f /var/log/keystone/keystone-manage.log
+
 keystone_doctor:
   cmd.run:
     - name: keystone-manage doctor