Support service tokens
Implement support for service_tokens. For that we convert role_name to be a list along with renaming corresponding variable. Additionally service_type is defined now for keystone_authtoken which enables to validate tokens with restricted access rules Depends-On: https://review.opendev.org/c/openstack/openstack-ansible-plugins/+/845690 Change-Id: Ie5ebb4d68ed06cff26462dc55092fda8a9ad2f44
This commit is contained in:
parent
0db9f1f959
commit
f728ca5707
|
@ -133,7 +133,12 @@ manila_service_project_domain_id: default
|
||||||
manila_service_user_domain_id: default
|
manila_service_user_domain_id: default
|
||||||
manila_service_user_name: manila
|
manila_service_user_name: manila
|
||||||
manila_service_project_name: service
|
manila_service_project_name: service
|
||||||
manila_service_role_name: admin
|
manila_service_role_names:
|
||||||
|
- admin
|
||||||
|
- service
|
||||||
|
manila_service_token_roles:
|
||||||
|
- service
|
||||||
|
manila_service_token_roles_required: "{{ openstack_service_token_roles_required | default(True) }}"
|
||||||
manila_service_region: "{{ service_region | default('RegionOne') }}"
|
manila_service_region: "{{ service_region | default('RegionOne') }}"
|
||||||
manila_service_description: "Openstack Shared File Systems"
|
manila_service_description: "Openstack Shared File Systems"
|
||||||
manila_service_port: 8786
|
manila_service_port: 8786
|
||||||
|
|
|
@ -181,7 +181,7 @@
|
||||||
_service_users:
|
_service_users:
|
||||||
- name: "{{ manila_service_user_name }}"
|
- name: "{{ manila_service_user_name }}"
|
||||||
password: "{{ manila_service_password }}"
|
password: "{{ manila_service_password }}"
|
||||||
role: "{{ manila_service_role_name }}"
|
role: "{{ manila_service_role_names }}"
|
||||||
_service_catalog:
|
_service_catalog:
|
||||||
- name: "{{ manila_service_name }}"
|
- name: "{{ manila_service_name }}"
|
||||||
type: "{{ manila_service_type }}"
|
type: "{{ manila_service_type }}"
|
||||||
|
|
|
@ -80,6 +80,10 @@ username = {{ manila_service_user_name }}
|
||||||
password = {{ manila_service_password }}
|
password = {{ manila_service_password }}
|
||||||
region_name = {{ keystone_service_region }}
|
region_name = {{ keystone_service_region }}
|
||||||
|
|
||||||
|
service_token_roles_required = {{ manila_service_token_roles_required | bool }}
|
||||||
|
service_token_roles = {{ manila_service_token_roles | join(',') }}
|
||||||
|
service_type = {{ manila_service_v2_type }}
|
||||||
|
|
||||||
memcached_servers = {{ manila_memcached_servers }}
|
memcached_servers = {{ manila_memcached_servers }}
|
||||||
|
|
||||||
token_cache_time = 300
|
token_cache_time = 300
|
||||||
|
|
Loading…
Reference in New Issue