Niklas Hagman 2e933dceb5 Transition Keystone admin user to system scope ... A system-scoped token implies the user has authorization to act on the deployment system. These tokens are useful for interacting with resources that affect the deployment as a whole, or exposes resources that may otherwise violate project or domain isolation. Since Queens, the keystone-manage bootstrap command assigns the admin role to the admin user with system scope, as well as in the admin project. This patch transitions the Keystone admin user from authenticating using project scoped tokens to system scoped tokens. This is a necessary step towards being able to enable the updated oslo policies in services that allow finer grained access to system-level resources and APIs. An etherpad with discussion about the transition to the new oslo service policies is: https://etherpad.opendev.org/p/enabling-system-scope-in-kolla-ansible Change-Id: Ib631e2211682862296cce9ea179f2661c90fa585 Signed-off-by: Niklas Hagman <ubuntu@post.blinkiz.com>		2021-09-28 09:45:06 -07:00
..
bootstrap.yml	Performance: replace unconditional include_tasks with import_tasks	2020-08-28 16:12:03 +00:00
bootstrap_service.yml	Fix handling of docker restart policy	2019-07-18 13:39:06 +00:00
check-containers.yml	Use Docker healthchecks for barbican services	2021-01-09 18:59:50 +08:00
check.yml	Transition Keystone admin user to system scope	2021-09-28 09:45:06 -07:00
clone.yml	permission denied when enable_kolla_dev_mod	2020-06-07 19:36:42 +08:00
config.yml	Performance: optimize genconfig	2020-10-12 19:30:06 +02:00
copy-certs.yml	Refactor copy certificates task	2020-04-14 17:26:19 +00:00
deploy-containers.yml	Add a job that *only* deploys updated containers	2019-09-26 17:51:14 +01:00
deploy.yml	Performance: optimize genconfig	2020-10-12 19:30:06 +02:00
loadbalancer.yml	Use "name:" instead of "role:" for *_role modules	2020-03-02 10:01:17 +01:00
main.yml	Revert "Performance: Use import_tasks in the main plays"	2020-12-14 10:36:55 +00:00
precheck.yml	Add Ansible group check to prechecks	2020-02-28 16:23:14 +00:00
pull.yml	Refactor and optimise image pulling	2021-08-10 11:57:54 +00:00
reconfigure.yml	Performance: replace unconditional include_tasks with import_tasks	2020-08-28 16:12:03 +00:00
register.yml	Do not set 'always' tag where unnecessary	2020-10-27 19:51:46 +01:00
stop.yml	Use "name:" instead of "role:" for *_role modules	2020-03-02 10:01:17 +01:00
upgrade.yml	Performance: optimize genconfig	2020-10-12 19:30:06 +02:00