From 6e835ae758f0a2e8c87ab0bc22d578168395e424 Mon Sep 17 00:00:00 2001 From: Bartosz Bezak Date: Tue, 6 Feb 2024 17:40:04 +0100 Subject: Template system scoped admin-openrc and clouds.yml files Ironic enabled secure RBAC with system scoped enforcement [1]. Some API calls, for instance 'baremetal:driver:get' needs system scope role by design [2], even with elevated access project scope service role [3]. [1] https://review.opendev.org/c/openstack/ironic/+/902009 [2] https://opendev.org/openstack/ironic/src/commit/8ec56066223301230ac0ed0f0c471a10d366b474/ironic/common/policy.py#L1349-L1357 [3] https://review.opendev.org/c/openstack/kolla-ansible/+/908007 Related-Bug: #2051837 Change-Id: Id6313d7dd343b82d4c9ccf7bf429d340ea0e93d1 --- tests/test-ironic.sh | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'tests/test-ironic.sh') diff --git a/tests/test-ironic.sh b/tests/test-ironic.sh index 55697fff0..4b011669a 100755 --- a/tests/test-ironic.sh +++ b/tests/test-ironic.sh @@ -9,14 +9,16 @@ export PYTHONUNBUFFERED=1 function test_ironic_logged { # Assumes init-runonce has been executed. - . /etc/kolla/admin-openrc.sh + KOLLA_CONFIG_PATH=${KOLLA_CONFIG_PATH:-/etc/kolla} + export OS_CLIENT_CONFIG_FILE=${KOLLA_CONFIG_PATH}/clouds.yaml + export OS_CLOUD=kolla-admin-internal . ~/openstackclient-venv/bin/activate echo "Enabling DHCP on the external (\"public\") subnet" openstack subnet set --dhcp public1-subnet # Smoke test ironic API. - openstack baremetal driver list + openstack --os-cloud kolla-admin-system-internal baremetal driver list openstack baremetal node list openstack baremetal port list # Ironic Inspector API -- cgit v1.2.3