8f92d6f508
This patch refactors the devstack plugin to separate the legacy (now deprecated) RBAC settings from the Secure RBAC (new default) settings. The legacy policies can still be deployed by setting ENFORCE_SCOPE=False. Change-Id: Idec818e43016402de0188cf5ade032a1aee638ff
17 lines
537 B
Plaintext
17 lines
537 B
Plaintext
function configure_barbican_tempest() {
|
|
|
|
iniset $TEMPEST_CONFIG service_available barbican True
|
|
iniset $TEMPEST_CONFIG enforce_scope barbican $BARBICAN_ENFORCE_SCOPE
|
|
|
|
if [[ "$BARBICAN_ENFORCE_SCOPE" == "False" ]]; then
|
|
# NOTE: legacy policies require the "creator" role
|
|
roles="$(iniget $TEMPEST_CONFIG auth tempest_roles)"
|
|
if [[ -z $roles ]]; then
|
|
roles="creator"
|
|
else
|
|
roles="$roles,creator"
|
|
fi
|
|
iniset $TEMPEST_CONFIG auth tempest_roles $roles
|
|
fi
|
|
}
|