openstack
/
openstack-ansible-os_sahara
Code Issues Proposed changes

Stop reffering _member_ role 

Keystone has stopped providing or reffering `_member_` role for a while,
thus role should not be refferenced anymore.

Moreover, with 2023.1 service policies have dropped `_member_`
which resulted in the role to be insufficient for basic operations.

Change-Id: Ie43a6edc4ef44b7b92905cf9d59be53edeb1b946
Related-Bug: #2029486
This commit is contained in:
Dmitriy Rabotyagov 2023-08-15 13:06:58 +02:00
parent 1c49c7d2c8
commit 2843f27804
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -154,7 +154,7 @@ sahara_default_ntp_server: "pool.ntp.org"
sahara_use_domain_for_proxy_users: True
sahara_proxy_user_domain_name: sahara_proxy
sahara_proxy_user_role_names: _member_
sahara_proxy_user_role_names: member
# Other plugins can be added to the system by simply extending the list `sahara_plugin_base`.
sahara_plugin_base:

4
doc/source/configure-sahara.rst
View File

@ -85,13 +85,13 @@ Storage. To disable this functionality change the following variable to
sahara_use_domain_for_proxy_users: True
Also, is it possible to change which roles the trust users will receive
in the proxy domain, by default it receives the ``_member_`` role.
in the proxy domain, by default it receives the ``member`` role.
In ``user_variables.yml``:
.. code-block:: yaml
sahara_proxy_user_role_names: _member_
sahara_proxy_user_role_names: member
.. warning::
In the context of the proxy user, any roles that are required for