openstack/cookbook-openstack-network
Code Issues Proposed changes

Revert neutron with admin role

Browse Source 
Looks neutron still require admin to work. With neutron policy,
the port binding for VM require admin permission.
https://github.com/openstack/neutron/blob/master/etc/policy.json#L53

A bug is opened against neutron.
https://bugs.launchpad.net/neutron/+bug/1445475

Until it is changed by neutron, cookbook need to revert it back to
using admin role.

Related-Bug: #1436050

Change-Id: I8342f7da783c2fc7bb42488b6d461851f66b2228
This commit is contained in:
ZHU ZHU
2015-04-19 21:55:21 -05:00
committed by Mark Vanderwiel
parent 9f3f6316f6
commit 14cd028b8b
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
attributes/default.rb
View File

@@ -42,7 +42,7 @@ default['openstack']['network']['policyfile_url'] = nil
# Gets set in the Network Endpoint when registering with Keystone
default['openstack']['network']['region'] = node['openstack']['region']
default['openstack']['network']['service_user'] = 'neutron'
default['openstack']['network']['service_role'] = 'service'
default['openstack']['network']['service_role'] = 'admin'
default['openstack']['network']['service_name'] = 'neutron'
default['openstack']['network']['service_type'] = 'network'
default['openstack']['network']['service_tenant_name'] = 'service'

6
spec/identity_registration_spec.rb
View File

@@ -163,14 +163,14 @@ describe 'openstack-network::identity_registration' do
)
end
it 'grants service role to service user for service tenant' do
it 'grants admin role to service user for service tenant' do
expect(chef_run).to grant_role_openstack_identity_register(
"Grant 'service' Role to neutron User for service Tenant"
"Grant 'admin' Role to neutron User for service Tenant"
).with(
auth_uri: 'http://127.0.0.1:35357/v2.0',
bootstrap_token: 'bootstrap-token',
tenant_name: 'service',
role_name: 'service',
role_name: 'admin',
user_name: 'neutron'
)
end