openstack/kolla-ansible
Code Issues Proposed changes

Default keystone user role changed to member

Browse Source 
_member_ role is a long not used default keystone role,
for instance Horizon moved to use member role from yoga [1]

[1] https://docs.openstack.org/horizon/yoga/configuration/settings.html#openstack-keystone-default-role

Closes-Bug: #2038314
Change-Id: Idc9bce82c682e37c5bea10c93577091b85f3ad45
This commit is contained in:
Bartosz Bezak 2023-10-03 14:12:00 +02:00
parent 00dfa4233c
commit fc7deed9cd
3 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
ansible/group_vars/all.yml
View File

@ -993,7 +993,7 @@ fernet_token_allow_expired_window: 172800
# expiry and allow expired window, multiple active keys will be necessary. # expiry and allow expired window, multiple active keys will be necessary.
fernet_key_rotation_interval: "{{ fernet_token_expiry + fernet_token_allow_expired_window }}" fernet_key_rotation_interval: "{{ fernet_token_expiry + fernet_token_allow_expired_window }}"
keystone_default_user_role: "_member_" keystone_default_user_role: "member"
# OpenStack authentication string. You should only need to override these if you # OpenStack authentication string. You should only need to override these if you
# are changing the admin tenant/project or user. # are changing the admin tenant/project or user.

2
ansible/library/kolla_toolbox.py
View File

@ -93,7 +93,7 @@ EXAMPLES = '''
container_engine: docker container_engine: docker
module_name: os_keystone_role module_name: os_keystone_role
module_args: module_args:
name: _member_ name: member
auth: "{{ '{{ openstack_keystone_auth }}' }}" auth: "{{ '{{ openstack_keystone_auth }}' }}"
module_extra_vars: module_extra_vars:
openstack_keystone_auth: openstack_keystone_auth:

5
releasenotes/notes/change-default-keystone-role-386974967adfed65.yaml Normal file
View File

@ -0,0 +1,5 @@
---
upgrade:
- |
Default keystone user role has been changed from deprecated role
``_member_`` to ``member`` role.