commit 71b651f3dcbf2851200aae8fa244704d4dce2923
author Vasyl Saienko <vsaienko@mirantis.com> Wed Oct 03 16:54:23 2018 +0300
committer Vasyl Saienko <vsaienko@mirantis.com> Wed Oct 03 16:54:23 2018 +0300
tree 6594cabf3cd04fecbe8ba4ccdfb26975189fa9bb
parent f89a75a042fc56dc48a8c09ecdc2a941900b6ec0

Fix nova cert permissions

Make sure the following nova cerificates are created
with root:nova 640 mode.

 * mysql
 * rabbit
 * novncproxy

Change-Id: I2012a42a850d019e599abb7e49ce0944b1d23972

salt/minion/cert/vnc/novncproxy_client.yml

diff --git a/salt/minion/cert/vnc/novncproxy_client.yml b/salt/minion/cert/vnc/novncproxy_client.yml
index 9641611..0193455 100644
--- a/salt/minion/cert/vnc/novncproxy_client.yml
+++ b/salt/minion/cert/vnc/novncproxy_client.yml
@@ -22,6 +22,6 @@
           key_file: ${_param:novncproxy_client_ssl_key_file}
           cert_file: ${_param:novncproxy_client_ssl_cert_file}
           ca_file: ${_param:novncproxy_ssl_ca_file}
-          user: nova
+          user: root
           group: nova
           mode: 640

salt/minion/cert/vnc/novncproxy_server.yml

diff --git a/salt/minion/cert/vnc/novncproxy_server.yml b/salt/minion/cert/vnc/novncproxy_server.yml
index 20c24e2..9c3dd96 100644
--- a/salt/minion/cert/vnc/novncproxy_server.yml
+++ b/salt/minion/cert/vnc/novncproxy_server.yml
@@ -24,6 +24,6 @@
           key_file: ${_param:novncproxy_server_ssl_key_file}
           cert_file: ${_param:novncproxy_server_ssl_cert_file}
           ca_file: ${_param:novncproxy_ssl_ca_file}
-          user: nova
+          user: root
           group: nova
           mode: 640