From 232ef11a9d42ce4b5d5fa1ccb68aafe61934d249 Mon Sep 17 00:00:00 2001 From: caoyuan Date: Wed, 1 Nov 2017 20:22:02 +0800 Subject: [PATCH] Update the service_token_roles_required to True for watcher AuthToken middleware is set with keystone_authtoken.service_token_roles_required set to False. This is backwards compatible but deprecated behaviour. This patch set it to True. Change-Id: Id7df0b74a44753cd90359fd79caafd7acce9adb8 --- ansible/roles/watcher/templates/watcher.conf.j2 | 1 + 1 file changed, 1 insertion(+) diff --git a/ansible/roles/watcher/templates/watcher.conf.j2 b/ansible/roles/watcher/templates/watcher.conf.j2 index d45edbbfe9..5dfff4c4a6 100644 --- a/ansible/roles/watcher/templates/watcher.conf.j2 +++ b/ansible/roles/watcher/templates/watcher.conf.j2 @@ -25,6 +25,7 @@ user_domain_id = {{ default_user_domain_id }} project_name = service username = {{ watcher_keystone_user }} password = {{ watcher_keystone_password }} +service_token_roles_required = True memcache_security_strategy = ENCRYPT memcache_secret_key = {{ memcache_secret_key }}