From 2843f27804fd88b5e03d4e760d22cd7c1de5308b Mon Sep 17 00:00:00 2001 From: Dmitriy Rabotyagov Date: Tue, 15 Aug 2023 13:06:58 +0200 Subject: [PATCH] Stop reffering _member_ role Keystone has stopped providing or reffering `_member_` role for a while, thus role should not be refferenced anymore. Moreover, with 2023.1 service policies have dropped `_member_` which resulted in the role to be insufficient for basic operations. Change-Id: Ie43a6edc4ef44b7b92905cf9d59be53edeb1b946 Related-Bug: #2029486 --- defaults/main.yml | 2 +- doc/source/configure-sahara.rst | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/defaults/main.yml b/defaults/main.yml index 627ab6a..07122a4 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -154,7 +154,7 @@ sahara_default_ntp_server: "pool.ntp.org" sahara_use_domain_for_proxy_users: True sahara_proxy_user_domain_name: sahara_proxy -sahara_proxy_user_role_names: _member_ +sahara_proxy_user_role_names: member # Other plugins can be added to the system by simply extending the list `sahara_plugin_base`. sahara_plugin_base: diff --git a/doc/source/configure-sahara.rst b/doc/source/configure-sahara.rst index 40d1f57..e596536 100644 --- a/doc/source/configure-sahara.rst +++ b/doc/source/configure-sahara.rst @@ -85,13 +85,13 @@ Storage. To disable this functionality change the following variable to sahara_use_domain_for_proxy_users: True Also, is it possible to change which roles the trust users will receive -in the proxy domain, by default it receives the ``_member_`` role. +in the proxy domain, by default it receives the ``member`` role. In ``user_variables.yml``: .. code-block:: yaml - sahara_proxy_user_role_names: _member_ + sahara_proxy_user_role_names: member .. warning:: In the context of the proxy user, any roles that are required for