diff options
| author | Bartosz Bezak <bartosz@stackhpc.com> | 2023-10-03 14:12:00 +0200 |
|---|---|---|
| committer | Bartosz Bezak <bartosz@stackhpc.com> | 2023-10-04 11:07:09 +0000 |
| commit | fc7deed9cd7877406561450def1227192d5e0425 (patch) | |
| tree | 2e386562ec1faa24043e09175eac75ee8e716752 | |
| parent | 00dfa4233c2b31696506dea60b11e449286f297c (diff) | |
| download | kolla-ansible-fc7deed9cd7877406561450def1227192d5e0425.tar.gz kolla-ansible-fc7deed9cd7877406561450def1227192d5e0425.zip | |
Default keystone user role changed to member
_member_ role is a long not used default keystone role,
for instance Horizon moved to use member role from yoga [1]
[1] https://docs.openstack.org/horizon/yoga/configuration/settings.html#openstack-keystone-default-role
Closes-Bug: #2038314
Change-Id: Idc9bce82c682e37c5bea10c93577091b85f3ad45
| -rw-r--r-- | ansible/group_vars/all.yml | 2 | ||||
| -rw-r--r-- | ansible/library/kolla_toolbox.py | 2 | ||||
| -rw-r--r-- | releasenotes/notes/change-default-keystone-role-386974967adfed65.yaml | 5 |
3 files changed, 7 insertions, 2 deletions
diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all.yml index abe5ab66d..1c1abe63a 100644 --- a/ansible/group_vars/all.yml +++ b/ansible/group_vars/all.yml @@ -993,7 +993,7 @@ fernet_token_allow_expired_window: 172800 # expiry and allow expired window, multiple active keys will be necessary. fernet_key_rotation_interval: "{{ fernet_token_expiry + fernet_token_allow_expired_window }}" -keystone_default_user_role: "_member_" +keystone_default_user_role: "member" # OpenStack authentication string. You should only need to override these if you # are changing the admin tenant/project or user. diff --git a/ansible/library/kolla_toolbox.py b/ansible/library/kolla_toolbox.py index 42c37194c..388d678ad 100644 --- a/ansible/library/kolla_toolbox.py +++ b/ansible/library/kolla_toolbox.py @@ -93,7 +93,7 @@ EXAMPLES = ''' container_engine: docker module_name: os_keystone_role module_args: - name: _member_ + name: member auth: "{{ '{{ openstack_keystone_auth }}' }}" module_extra_vars: openstack_keystone_auth: diff --git a/releasenotes/notes/change-default-keystone-role-386974967adfed65.yaml b/releasenotes/notes/change-default-keystone-role-386974967adfed65.yaml new file mode 100644 index 000000000..c19ccd667 --- /dev/null +++ b/releasenotes/notes/change-default-keystone-role-386974967adfed65.yaml @@ -0,0 +1,5 @@ +--- +upgrade: + - | + Default keystone user role has been changed from deprecated role + ``_member_`` to ``member`` role. |