openstack
/
openstack-ansible-os_sahara
Code Issues Proposed changes

Stop reffering _member_ role 

Keystone has stopped providing or reffering `_member_` role for a while,
thus role should not be refferenced anymore.

Moreover, with 2023.1 service policies have dropped `_member_`
which resulted in the role to be insufficient for basic operations.

Change-Id: Ie43a6edc4ef44b7b92905cf9d59be53edeb1b946
Related-Bug: #2029486
This commit is contained in:
Dmitriy Rabotyagov 2023-08-15 13:06:58 +02:00
parent 1c49c7d2c8
commit 2843f27804
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -154,7 +154,7 @@ sahara_default_ntp_server: "pool.ntp.org"
sahara_use_domain_for_proxy_users: True sahara_use_domain_for_proxy_users: True
sahara_proxy_user_domain_name: sahara_proxy sahara_proxy_user_domain_name: sahara_proxy
sahara_proxy_user_role_names: _member_ sahara_proxy_user_role_names: member
# Other plugins can be added to the system by simply extending the list `sahara_plugin_base`. # Other plugins can be added to the system by simply extending the list `sahara_plugin_base`.
sahara_plugin_base: sahara_plugin_base:

4
doc/source/configure-sahara.rst
View File

@ -85,13 +85,13 @@ Storage. To disable this functionality change the following variable to
sahara_use_domain_for_proxy_users: True sahara_use_domain_for_proxy_users: True
Also, is it possible to change which roles the trust users will receive Also, is it possible to change which roles the trust users will receive
in the proxy domain, by default it receives the ``_member_`` role. in the proxy domain, by default it receives the ``member`` role.
In ``user_variables.yml``: In ``user_variables.yml``:
.. code-block:: yaml .. code-block:: yaml
sahara_proxy_user_role_names: _member_ sahara_proxy_user_role_names: member
.. warning:: .. warning::
In the context of the proxy user, any roles that are required for In the context of the proxy user, any roles that are required for