From c9dc345f1c1e6025b1c1d2386dc73123bd69cb1c Mon Sep 17 00:00:00 2001 From: Peter Matulis Date: Thu, 17 Feb 2022 17:39:47 -0500 Subject: [PATCH] Add Octavia user roles Starting with OpenStack Wallaby explicit load balancer user roles are required. Amend the Octavia page as a consequence. Closes-Bug: #1961198 Change-Id: I7e89c176e4bbafa6d0fd772025fcea4b777d00cf --- deploy-guide/source/app-octavia.rst | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/deploy-guide/source/app-octavia.rst b/deploy-guide/source/app-octavia.rst index b826406..67d19e8 100644 --- a/deploy-guide/source/app-octavia.rst +++ b/deploy-guide/source/app-octavia.rst @@ -241,6 +241,24 @@ Octavia will use this image for all Amphora instances. See the Octavia `operators maintenance`_ guide for more details. +Octavia user roles +------------------ + +To provide access to the Octavia API endpoints a load-balancer role must be +added to a user. For example: + +.. code-block:: none + + openstack role add --user-domain admin_domain --user admin \ + --project-domain admin_domain --project admin \ + load-balancer_admin + +See `Managing Octavia User Roles`_ in the upstream documentation. + +.. note:: + + Explicit user role assignments are required starting with OpenStack Wallaby. + Usage ----- @@ -286,3 +304,4 @@ Octavia please refer to the `Octavia cookbook`_. .. _Octavia cookbook: https://docs.openstack.org/octavia/latest/user/guides/basic-cookbook.html .. _operators maintenance: https://docs.openstack.org/octavia/latest/admin/guides/operator-maintenance.html#rotating-the-amphora-images .. _vault charm: https://jaas.ai/vault/ +.. _Managing Octavia User Roles: https://docs.openstack.org/octavia/latest/configuration/policy.html#managing-octavia-user-roles