From 2cfef3bc3ab54f07d2b64da05b465382ed8c774e Mon Sep 17 00:00:00 2001 From: Ilya Shakhat Date: Fri, 9 Dec 2016 13:07:49 +0400 Subject: [PATCH] Heat user should belong to "service" project, not "admin" Reconfigure Heat user to be in "service" project like all other services do. Change-Id: I08b5d672e8dee9efe1a9161f9b903c4e9fd54786 --- service/files/heat.conf.j2 | 2 +- service/heat-api.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/service/files/heat.conf.j2 b/service/files/heat.conf.j2 index fd810bc..53e4ef5 100644 --- a/service/files/heat.conf.j2 +++ b/service/files/heat.conf.j2 @@ -31,7 +31,7 @@ auth_url = {{ address('keystone', keystone.admin_port, with_scheme=True) }}/v3 auth_type = password project_domain_id = default user_domain_id = default -project_name = {{ openstack.project_name }} +project_name = service username = {{ heat.user }} password = {{ heat.password }} memcached_servers = {{ address('memcached', memcached.port) }} diff --git a/service/heat-api.yaml b/service/heat-api.yaml index 9f99db0..2dc1666 100644 --- a/service/heat-api.yaml +++ b/service/heat-api.yaml @@ -38,7 +38,7 @@ service: - heat-user-create type: single command: - openstack role add --project {{ openstack.project_name }} --user {{ heat.user }} admin + openstack role add --project service --user {{ heat.user }} admin - name: heat-service-create dependencies: - keystone-create-project