openstack-ansible-plugins/roles/service_setup/tasks
Dmitriy Rabotyagov 8ecfce0082 Set the default domain for the role_assignment
From time to time it might happen in deployments, that some project
will create a service user in their domains. When this happens and
domain is not supplied for the role_assignment module fails with
multiple users with the same name exist.

However, domain param is used not only for lookups but also for
scoped assignments [1]. When project is not supplied, domain scope
will be assigned. And when domain is not defined, then system scope
will be applied. But since all projects (except keystone) have reverted
their system_scope efforts, we can safely set default for the domain
to workaround potential issues with lookups.

[1] https://docs.ansible.com/ansible/latest/collections/openstack/cloud/role_assignment_module.html#parameter-domain

Change-Id: Ia406d101632806d18495380d8911468ea14bc502
2023-11-07 16:03:55 +01:00
..
main.yml Simplfy addition of keystone users to roles 2023-10-19 18:48:06 +00:00
setup_roles.yml Set the default domain for the role_assignment 2023-11-07 16:03:55 +01:00